On on of our sites our client got blocked with the 404 shield rule. I reproduced this myself by using this URL
https://www.[DOMAIN.COM]/?Itemid=142
This shows an error page (404- component not found) but also triggers the 404 shield. My Ip shows up in the WAF exceptons log.
When I try a different (non exisiting) URL like this:
https://www.[DOMAIN.COM]/doesnotexist
The error is: '404 - URL invalid' but this does not trigger the 404 shield WAF rule.
1) Why does the first URL trigger the 404 shield?
2) Is this a bug? There is no 'wp-admin' or similar text in the URL...
Kind regards,
Jip