File: //var/lib/modsecurity/audit/20260103/20260103-1338/20260103-133816-aVliGLhenDUAAErKaYwAAAAe
--2309b057-A--
[03/Jan/2026:13:38:16 --0500] aVliGLhenDUAAErKaYwAAAAe 192.253.229.168 33914 127.0.0.225 80
--2309b057-B--
GET /wp-login.php HTTP/1.1
X-Real-IP: 192.253.229.168
Host: www.gyamen.com
Connection: close
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; fr; rv:1.9.2.4) Gecko/20100523 Firefox/3.6.4 ( .NET CLR 3.5.30729)
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
X-Forwarded-For: 127.164.101.1
Client-IP: 127.1.164.101
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Referer: https://www.google.com/
Content-Type: application/x-www-form-urlencoded
Cookie: w3tc_referrer=https%3A%2F%2Fwww.google.com%2F; wordpress_test_cookie=WP+Cookie+check
--2309b057-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/5.3.29
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=/
X-Frame-Options: SAMEORIGIN
Vary: User-Agent,Accept-Encoding
Content-Encoding: gzip
Content-Length: 1273
Connection: close
Content-Type: text/html; charset=UTF-8
--2309b057-E--
--2309b057-H--
Message: Warning. Operator GE matched 5 at IP:bf_counter. [file "/etc/httpd/modsecurity.d/00_modsecurity_mojo.conf"] [line "59"] [id "99999999"]
Stopwatch: 1767465496823265 157684 (- - -)
Stopwatch2: 1767465496823265 157684; combined=363, p1=65, p2=116, p3=89, p4=1, p5=48, sr=109, sw=44, l=0, gc=0
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/); 200911012341.
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.2k-fips PHP/5.3.29 mod_fastcgi/2.4.6
Engine-Mode: "ENABLED"
--2309b057-Z--