File: //var/lib/modsecurity/audit/20251218/20251218-1908/20251218-190832-aUSXgLhenDUAAG3ZvhYAAAAC
--2dc67b0b-A--
[18/Dec/2025:19:08:32 --0500] aUSXgLhenDUAAG3ZvhYAAAAC 205.185.114.254 50320 127.0.0.105 80
--2dc67b0b-B--
GET /wp-login.php HTTP/1.1
X-Real-IP: 205.185.114.254
Host: facialslam.com
Connection: close
Accept-Encoding: gzip, deflate, br
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0
Accept-Language: en-US,en;q=0.9,zh-CN;q=0.8,zh;q=0.7
Upgrade-Insecure-Requests: 1
--2dc67b0b-F--
HTTP/1.1 200 OK
Content-Security-Policy: upgrade-insecure-requests;
X-Powered-By: PHP/5.3.29
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=/
X-Frame-Options: SAMEORIGIN
Content-Length: 2395
Connection: close
Content-Type: text/html; charset=UTF-8
--2dc67b0b-E--
--2dc67b0b-H--
Message: Warning. Operator GE matched 5 at IP:bf_counter. [file "/etc/httpd/modsecurity.d/00_modsecurity_mojo.conf"] [line "59"] [id "99999999"]
Stopwatch: 1766102912018483 147842 (- - -)
Stopwatch2: 1766102912018483 147842; combined=271, p1=42, p2=24, p3=119, p4=0, p5=45, sr=123, sw=41, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/); 200911012341.
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.2k-fips PHP/5.3.29 mod_fastcgi/2.4.6
Engine-Mode: "ENABLED"
--2dc67b0b-Z--