File: //var/lib/modsecurity/audit/20251027/20251027-1857/20251027-185727-aP-417henDUAAEyNK4wAAAAP
--1f544070-A--
[27/Oct/2025:18:57:27 --0400] aP-417henDUAAEyNK4wAAAAP 148.72.247.255 56210 127.0.1.22 80
--1f544070-B--
GET /wp-login.php HTTP/1.1
X-Real-IP: 148.72.247.255
Host: www.threeholes.com
Connection: close
Accept: */*
Accept-Language: ru-RU,ru;q=0.9
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate, br
--1f544070-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/5.3.29
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=/
X-Frame-Options: SAMEORIGIN
Content-Length: 2417
Connection: close
Content-Type: text/html; charset=UTF-8
--1f544070-E--
--1f544070-H--
Message: Warning. Operator GE matched 5 at IP:bf_counter. [file "/etc/httpd/modsecurity.d/00_modsecurity_mojo.conf"] [line "59"] [id "99999999"]
Stopwatch: 1761605847447456 340921 (- - -)
Stopwatch2: 1761605847447456 340921; combined=267, p1=43, p2=50, p3=75, p4=1, p5=51, sr=76, sw=47, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/); 200911012341.
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.2k-fips PHP/5.3.29 mod_fastcgi/2.4.6
Engine-Mode: "ENABLED"
--1f544070-Z--