File: //var/lib/modsecurity/audit/20260103/20260103-0003/20260103-000323-aVijG7henDUAAF3GHDIAAAA@
--d39fee33-A--
[03/Jan/2026:00:03:23 --0500] aVijG7henDUAAF3GHDIAAAA@ 138.197.136.144 52000 127.0.0.220 80
--d39fee33-B--
GET /wp-admin/user/xmrlpc.php?p= HTTP/1.1
X-Real-IP: 138.197.136.144
Host: 74.206.190.69
Connection: close
Cookie: wordpress_test_cookie=WP+Cookie+check
--d39fee33-F--
HTTP/1.1 401 Authorization Required
WWW-Authenticate: Basic realm="Restricted"
Content-Length: 464
Connection: close
Content-Type: text/html; charset=iso-8859-1
--d39fee33-E--
--d39fee33-H--
Stopwatch: 1767416603607663 940 (- - -)
Stopwatch2: 1767416603607663 940; combined=40, p1=36, p2=0, p3=2, p4=0, p5=1, sr=25, sw=1, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/); 200911012341.
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.2k-fips PHP/5.3.29 mod_fastcgi/2.4.6
Engine-Mode: "ENABLED"
--d39fee33-Z--