| Server IP : 23.111.136.34 / Your IP : 216.73.216.136 Web Server : Apache System : Linux servidor.eurohost.com.br 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : meusitei ( 1072) PHP Version : 5.6.40 Disable Function : show_source, system, shell_exec, passthru, proc_open MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /etc/cpguard/logs/ |
Upload File : |
[25-05-2022 13:22:02]17906: WAF :: fetched 1 new logs [25-05-2022 13:23:01]20695: WAF :: fetched 1 new logs [25-05-2022 13:25:01]26268: WAF :: fetched 1 new logs [25-05-2022 13:28:01]2368: WAF :: fetched 1 new logs [25-05-2022 13:29:01]5172: WAF :: fetched 1 new logs [25-05-2022 13:30:02]7983: WAF :: fetched 4 new logs [25-05-2022 13:33:01]16449: WAF :: fetched 4 new logs [25-05-2022 13:38:01]30852: WAF :: fetched 2 new logs [25-05-2022 13:39:02]1299: WAF :: fetched 4 new logs [25-05-2022 13:40:01]4130: WAF :: fetched 1 new logs [25-05-2022 13:41:01]7005: WAF :: fetched 1 new logs [25-05-2022 13:41:01]7005: Checking for user cron vulnerabilities [25-05-2022 13:43:02]12626: WAF :: fetched 3 new logs [25-05-2022 13:44:01]15358: Checking ditributed CMS bruteforce attacks [25-05-2022 13:45:02]: Checking for definition updates [25-05-2022 13:45:02]18164: WAF :: fetched 1 new logs [25-05-2022 13:46:02]20998: WAF :: fetched 3 new logs [25-05-2022 13:47:01]23773: WAF :: fetched 2 new logs [25-05-2022 13:48:02]26591: WAF :: fetched 2 new logs [25-05-2022 13:49:01]29358: WAF :: fetched 2 new logs [25-05-2022 13:50:01]32150: WAF :: fetched 3 new logs [25-05-2022 13:52:01]5584: WAF :: fetched 7 new logs [25-05-2022 13:53:01]8392: WAF :: fetched 5 new logs [25-05-2022 13:54:02]11220: WAF :: fetched 4 new logs [25-05-2022 13:55:01]14059: WAF :: fetched 9 new logs [25-05-2022 13:55:03]14059: API call failed for url https://api.recaptcha.cloud/add Status : 500 [25-05-2022 13:56:02]17023: WAF :: fetched 1 new logs [25-05-2022 13:57:02]19904: WAF :: fetched 2 new logs [25-05-2022 13:58:01]22713: WAF :: fetched 1 new logs [25-05-2022 13:59:02]25548: WAF :: fetched 3 new logs [25-05-2022 14:00:02]28075: WAF :: fetched 2 new logs [25-05-2022 14:01:01]31443: WAF :: fetched 3 new logs [25-05-2022 14:02:01]2030: WAF :: fetched 5 new logs [25-05-2022 14:03:01]4890: WAF :: fetched 4 new logs [25-05-2022 14:04:02]7732: WAF :: fetched 5 new logs [25-05-2022 14:05:01]10495: WAF :: fetched 2 new logs [25-05-2022 14:06:01]13381: WAF :: fetched 1 new logs [25-05-2022 14:08:01]19159: WAF :: fetched 2 new logs [25-05-2022 14:10:02]24805: WAF :: fetched 3 new logs [25-05-2022 14:11:01]27696: WAF :: fetched 2 new logs [25-05-2022 14:12:02]30591: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653498722 [25-05-2022 14:12:02]30591: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-05-2022 14:12:04]30591: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-05-2022 14:12:04]30591: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220525/20220525-1412/20220525-141202-Yo5jYiZfVK1X46EklJPt3AAAAAQ [25-05-2022 14:12:04]30591: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-05-2022 14:12:04]30591: WAF :: fetched 1 new logs [25-05-2022 14:13:01]1066: WAF :: fetched 1 new logs [25-05-2022 14:16:02]9755: WAF :: fetched 1 new logs [25-05-2022 14:17:01]12675: WAF :: fetched 2 new logs [25-05-2022 14:18:02]15527: WAF :: fetched 2 new logs [25-05-2022 14:19:01]18312: WAF :: fetched 4 new logs [25-05-2022 14:20:01]21146: WAF :: fetched 3 new logs [25-05-2022 14:21:02]24080: WAF :: fetched 1 new logs [25-05-2022 14:23:01]29816: WAF :: fetched 4 new logs [25-05-2022 14:24:01]32708: WAF :: fetched 1 new logs [25-05-2022 14:25:02]3287: WAF :: fetched 2 new logs [25-05-2022 14:26:01]6197: WAF :: fetched 6 new logs [25-05-2022 14:27:01]9044: WAF :: fetched 7 new logs [25-05-2022 14:28:02]11921: WAF :: fetched 4 new logs [25-05-2022 14:29:01]14752: WAF :: fetched 5 new logs [25-05-2022 14:30:02]17677: WAF :: fetched 9 new logs [25-05-2022 14:31:02]20743: WAF :: fetched 7 new logs [25-05-2022 14:32:01]23757: WAF :: fetched 3 new logs [25-05-2022 14:33:02]26572: WAF :: fetched 6 new logs [25-05-2022 14:34:01]29527: WAF :: fetched 3 new logs [25-05-2022 14:35:01]32400: WAF :: fetched 4 new logs [25-05-2022 14:36:02]3125: WAF :: fetched 2 new logs [25-05-2022 14:38:02]8861: WAF :: fetched 5 new logs [25-05-2022 14:39:02]11677: WAF :: fetched 1 new logs [25-05-2022 14:41:02]17564: Checking for user cron vulnerabilities [25-05-2022 14:44:01]26132: Checking ditributed CMS bruteforce attacks [25-05-2022 14:44:01]26132: WAF :: fetched 34 new logs [25-05-2022 14:45:01]28997: WAF :: fetched 1 new logs [25-05-2022 14:48:02]5426: WAF :: fetched 2 new logs [25-05-2022 14:49:01]8297: WAF :: fetched 4 new logs [25-05-2022 14:50:02]11186: WAF :: fetched 2 new logs [25-05-2022 14:52:01]17029: WAF :: fetched 2 new logs [25-05-2022 14:53:03]19874: Updated license status via CDN [25-05-2022 14:54:01]22699: WAF :: fetched 1 new logs [25-05-2022 14:56:01]28416: WAF :: fetched 1 new logs [25-05-2022 14:57:02]31358: WAF :: fetched 3 new logs [25-05-2022 14:58:01]1780: WAF :: fetched 1 new logs [25-05-2022 15:01:01]10475: WAF :: fetched 3 new logs [25-05-2022 15:01:01]10478: Reseting cPGuard inotify settings [25-05-2022 15:02:02]13445: WAF :: fetched 2 new logs [25-05-2022 15:03:02]16222: WAF :: fetched 1 new logs [25-05-2022 15:04:01]19052: WAF :: fetched 1 new logs [25-05-2022 15:05:01]21811: WAF :: fetched 1 new logs [25-05-2022 15:07:01]27549: WAF :: fetched 1 new logs [25-05-2022 15:09:01]801: WAF :: fetched 4 new logs [25-05-2022 15:10:01]3721: WAF :: fetched 2 new logs [25-05-2022 15:12:01]9507: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653502321 [25-05-2022 15:12:01]9507: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-05-2022 15:12:03]9507: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-05-2022 15:12:04]9507: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220525/20220525-1512/20220525-151201-Yo5xcZzSpL9eK8uhfg62ogAAAB0 [25-05-2022 15:12:04]9507: WAF :: No suitable log file found. Using SQLite.. [25-05-2022 15:12:04]9507: WAF :: fetched 172 new logs [25-05-2022 15:13:02]12311: WAF :: fetched 21 new logs [25-05-2022 15:18:01]26694: WAF :: fetched 2 new logs [25-05-2022 15:19:02]29609: WAF :: fetched 1 new logs [25-05-2022 15:21:01]3044: WAF :: fetched 2 new logs [25-05-2022 15:22:01]6011: WAF :: fetched 2 new logs [25-05-2022 15:23:02]8881: WAF :: fetched 3 new logs [25-05-2022 15:24:01]11784: WAF :: fetched 2 new logs [25-05-2022 15:26:01]17523: WAF :: fetched 2 new logs [25-05-2022 15:28:01]23324: WAF :: fetched 2 new logs [25-05-2022 15:30:02]29099: WAF :: fetched 1 new logs [25-05-2022 15:31:01]32048: WAF :: fetched 4 new logs [25-05-2022 15:32:01]2725: WAF :: fetched 3 new logs [25-05-2022 15:34:02]8520: WAF :: fetched 5 new logs [25-05-2022 15:35:02]11379: WAF :: fetched 6 new logs [25-05-2022 15:36:02]14308: WAF :: fetched 6 new logs [25-05-2022 15:37:01]17188: WAF :: fetched 4 new logs [25-05-2022 15:38:02]20038: WAF :: fetched 4 new logs [25-05-2022 15:39:02]22917: WAF :: fetched 5 new logs [25-05-2022 15:40:01]25785: WAF :: fetched 2 new logs [25-05-2022 15:41:02]28758: Checking for user cron vulnerabilities [25-05-2022 15:43:01]2102: WAF :: fetched 1 new logs [25-05-2022 15:44:01]5102: Checking ditributed CMS bruteforce attacks [25-05-2022 15:45:01]7968: WAF :: fetched 2 new logs [25-05-2022 15:46:02]10935: WAF :: fetched 7 new logs [25-05-2022 15:49:02]19579: WAF :: fetched 3 new logs [25-05-2022 15:50:01]22424: WAF :: fetched 3 new logs [25-05-2022 15:51:02]25421: WAF :: fetched 1 new logs [25-05-2022 15:52:02]28413: WAF :: fetched 2 new logs [25-05-2022 15:53:01]31297: WAF :: fetched 2 new logs [25-05-2022 15:54:01]1820: WAF :: fetched 1 new logs [25-05-2022 15:55:01]4764: WAF :: fetched 2 new logs [25-05-2022 15:56:02]7712: WAF :: fetched 2 new logs [25-05-2022 15:58:01]13463: WAF :: fetched 1 new logs [25-05-2022 15:59:02]16357: WAF :: fetched 1 new logs [25-05-2022 16:00:02]18881: WAF :: fetched 3 new logs [25-05-2022 16:01:01]22320: WAF :: fetched 2 new logs [25-05-2022 16:02:02]25381: WAF :: fetched 1 new logs [25-05-2022 16:03:01]28293: WAF :: fetched 1 new logs [25-05-2022 16:04:02]31232: WAF :: fetched 10 new logs [25-05-2022 16:05:02]1745: WAF :: fetched 3 new logs [25-05-2022 16:06:01]4759: WAF :: fetched 3 new logs [25-05-2022 16:07:01]7710: WAF :: fetched 3 new logs [25-05-2022 16:08:02]10681: WAF :: fetched 4 new logs [25-05-2022 16:09:01]13573: WAF :: fetched 3 new logs [25-05-2022 16:10:02]16436: WAF :: fetched 3 new logs [25-05-2022 16:12:02]22247: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653505922 [25-05-2022 16:12:02]22247: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-05-2022 16:12:04]22247: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-05-2022 16:12:04]22247: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220525/20220525-1612/20220525-161202-Yo5_gh5f1KINCLVS0fuE-QAAAA4 [25-05-2022 16:12:04]22247: WAF :: No suitable log file found. Using SQLite.. [25-05-2022 16:15:01]30914: WAF :: fetched 1 new logs [25-05-2022 16:16:02]1458: WAF :: fetched 2 new logs [25-05-2022 16:17:01]4385: WAF :: fetched 6 new logs [25-05-2022 16:22:01]18771: WAF :: fetched 2 new logs [25-05-2022 16:23:02]21593: WAF :: fetched 3 new logs [25-05-2022 16:24:01]24280: WAF :: fetched 1 new logs [25-05-2022 16:25:02]27238: WAF :: fetched 1 new logs [25-05-2022 16:26:01]30155: WAF :: fetched 2 new logs [25-05-2022 16:28:02]3652: WAF :: fetched 1 new logs [25-05-2022 16:29:01]6407: WAF :: fetched 6 new logs [25-05-2022 16:30:02]9298: WAF :: fetched 9 new logs [25-05-2022 16:31:01]12245: WAF :: fetched 5 new logs [25-05-2022 16:36:01]26576: WAF :: fetched 1 new logs [25-05-2022 16:37:02]29549: WAF :: fetched 3 new logs [25-05-2022 16:38:01]32345: WAF :: fetched 1 new logs [25-05-2022 16:39:02]2898: WAF :: fetched 5 new logs [25-05-2022 16:40:02]5699: WAF :: fetched 4 new logs [25-05-2022 16:41:01]8599: WAF :: fetched 7 new logs [25-05-2022 16:41:01]8599: Checking for user cron vulnerabilities [25-05-2022 16:42:01]11500: WAF :: fetched 5 new logs [25-05-2022 16:43:01]14345: WAF :: fetched 4 new logs [25-05-2022 16:44:01]17132: Checking ditributed CMS bruteforce attacks [25-05-2022 16:44:01]17132: WAF :: fetched 1 new logs [25-05-2022 16:52:01]7727: WAF :: fetched 1 new logs [25-05-2022 16:53:01]10546: WAF :: fetched 3 new logs [25-05-2022 16:54:01]13396: WAF :: fetched 4 new logs [25-05-2022 16:55:02]16261: WAF :: fetched 2 new logs [25-05-2022 16:56:02]19189: WAF :: fetched 4 new logs [25-05-2022 16:57:01]22070: WAF :: fetched 4 new logs [25-05-2022 16:59:01]27637: WAF :: fetched 2 new logs [25-05-2022 17:00:01]30296: WAF :: fetched 3 new logs [25-05-2022 17:01:02]1246: WAF :: fetched 1 new logs [25-05-2022 17:02:01]4241: WAF :: fetched 4 new logs [25-05-2022 17:05:02]12698: WAF :: fetched 1 new logs [25-05-2022 17:06:01]15567: WAF :: fetched 4 new logs [25-05-2022 17:08:01]21349: WAF :: fetched 1 new logs [25-05-2022 17:10:02]27068: WAF :: fetched 3 new logs [25-05-2022 17:11:02]29927: WAF :: fetched 1 new logs [25-05-2022 17:12:01]385: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653509521 [25-05-2022 17:12:01]385: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-05-2022 17:12:03]385: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-05-2022 17:12:03]385: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220525/20220525-1712/20220525-171201-Yo6NkVdoa5d-w9Kr00x7zAAAAAA [25-05-2022 17:12:03]385: WAF :: No suitable log file found. Using SQLite.. [25-05-2022 17:12:04]385: WAF :: fetched 2 new logs [25-05-2022 17:13:02]3435: WAF :: fetched 3 new logs [25-05-2022 17:16:02]11993: WAF :: fetched 1 new logs [25-05-2022 17:17:01]14895: WAF :: fetched 2 new logs [25-05-2022 17:20:02]23572: WAF :: fetched 1 new logs [25-05-2022 17:21:01]26506: WAF :: fetched 2 new logs [25-05-2022 17:22:01]29510: WAF :: fetched 2 new logs [25-05-2022 17:23:02]32462: WAF :: fetched 1 new logs [25-05-2022 17:26:02]8839: WAF :: fetched 1 new logs [25-05-2022 17:31:02]23284: WAF :: fetched 1 new logs [25-05-2022 17:33:01]29044: WAF :: fetched 1 new logs [25-05-2022 17:35:01]2552: WAF :: fetched 3 new logs [25-05-2022 17:37:02]8376: WAF :: fetched 3 new logs [25-05-2022 17:38:01]11204: WAF :: fetched 2 new logs [25-05-2022 17:39:02]14150: WAF :: fetched 2 new logs [25-05-2022 17:41:02]19948: Checking for user cron vulnerabilities [25-05-2022 17:42:01]22895: WAF :: fetched 1 new logs [25-05-2022 17:44:01]28584: Checking ditributed CMS bruteforce attacks [25-05-2022 17:45:01]31422: WAF :: fetched 1 new logs [25-05-2022 17:50:01]13524: WAF :: fetched 1 new logs [25-05-2022 17:53:02]21996: WAF :: fetched 3 new logs [25-05-2022 17:57:01]1768: WAF :: fetched 1 new logs [25-05-2022 18:02:01]15966: WAF :: fetched 3 new logs [25-05-2022 18:03:02]18746: WAF :: fetched 1 new logs [25-05-2022 18:06:01]27027: WAF :: fetched 1 new logs [25-05-2022 18:08:02]32671: WAF :: fetched 2 new logs [25-05-2022 18:09:02]3129: WAF :: fetched 1 new logs [25-05-2022 18:12:02]11591: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653513122 [25-05-2022 18:12:02]11591: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-05-2022 18:12:04]11591: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-05-2022 18:12:04]11591: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220525/20220525-1812/20220525-181202-Yo6bolEmDr57sywt2YMFPQAAAAE [25-05-2022 18:12:04]11591: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-05-2022 18:12:04]11591: WAF :: fetched 1 new logs [25-05-2022 18:13:01]14320: WAF :: fetched 3 new logs [25-05-2022 18:16:01]22736: WAF :: fetched 1 new logs [25-05-2022 18:17:01]25577: WAF :: fetched 1 new logs [25-05-2022 18:18:02]28402: WAF :: fetched 1 new logs [25-05-2022 18:19:01]31150: WAF :: fetched 1 new logs [25-05-2022 18:21:01]4442: WAF :: fetched 2 new logs [25-05-2022 18:22:01]7291: WAF :: fetched 5 new logs [25-05-2022 18:23:02]10093: WAF :: fetched 4 new logs [25-05-2022 18:24:01]12793: WAF :: fetched 1 new logs [25-05-2022 18:25:02]15569: WAF :: fetched 1 new logs [25-05-2022 18:26:01]18377: WAF :: fetched 3 new logs [25-05-2022 18:27:01]21215: WAF :: fetched 1 new logs [25-05-2022 18:29:01]26717: WAF :: fetched 3 new logs [25-05-2022 18:31:01]32400: WAF :: fetched 1 new logs [25-05-2022 18:32:02]2978: WAF :: fetched 1 new logs [25-05-2022 18:34:01]8593: WAF :: fetched 3 new logs [25-05-2022 18:37:02]17191: WAF :: fetched 32 new logs [25-05-2022 18:38:01]20026: WAF :: fetched 75 new logs [25-05-2022 18:39:02]22857: WAF :: fetched 8 new logs [25-05-2022 18:41:02]28580: WAF :: fetched 1 new logs [25-05-2022 18:41:02]28580: Checking for user cron vulnerabilities [25-05-2022 18:42:01]31439: WAF :: fetched 2 new logs [25-05-2022 18:43:01]2034: WAF :: fetched 2 new logs [25-05-2022 18:44:01]4934: Checking ditributed CMS bruteforce attacks [25-05-2022 18:45:01]7754: WAF :: fetched 3 new logs [25-05-2022 18:48:01]16333: WAF :: fetched 1 new logs [25-05-2022 18:49:02]19152: WAF :: fetched 1 new logs [25-05-2022 18:52:02]27698: WAF :: fetched 38 new logs [25-05-2022 18:53:01]30587: WAF :: fetched 3 new logs [25-05-2022 18:57:02]9599: WAF :: fetched 4 new logs [25-05-2022 19:00:02]17731: WAF :: fetched 1 new logs [25-05-2022 19:01:01]21032: WAF :: fetched 7 new logs [25-05-2022 19:02:02]23801: WAF :: fetched 1 new logs [25-05-2022 19:03:01]26628: WAF :: fetched 4 new logs [25-05-2022 19:06:02]2725: WAF :: fetched 1 new logs [25-05-2022 19:07:01]5497: WAF :: fetched 3 new logs [25-05-2022 19:08:02]8409: WAF :: fetched 3 new logs [25-05-2022 19:12:01]19537: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653516721 [25-05-2022 19:12:01]19537: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-05-2022 19:12:03]19537: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-05-2022 19:12:03]19537: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220525/20220525-1912/20220525-191201-Yo6pseY6OCx8xhaQdfIhOAAAAAc [25-05-2022 19:12:03]19537: WAF :: No suitable log file found. Using SQLite.. [25-05-2022 19:12:04]19537: WAF :: fetched 171 new logs [25-05-2022 19:13:02]22476: WAF :: fetched 1 new logs [25-05-2022 19:14:01]25191: WAF :: fetched 2 new logs [25-05-2022 19:16:01]30813: WAF :: fetched 16 new logs [25-05-2022 19:17:02]1229: WAF :: fetched 102 new logs [25-05-2022 19:18:01]4067: WAF :: fetched 89 new logs [25-05-2022 19:19:02]6958: WAF :: fetched 19 new logs [25-05-2022 19:20:02]9738: WAF :: fetched 4 new logs [25-05-2022 19:22:02]15359: WAF :: fetched 1 new logs [25-05-2022 19:23:01]18219: WAF :: fetched 1 new logs [25-05-2022 19:24:02]21087: WAF :: fetched 1 new logs [25-05-2022 19:27:01]29557: WAF :: fetched 1 new logs [25-05-2022 19:30:01]5763: WAF :: fetched 1 new logs [25-05-2022 19:36:02]22671: WAF :: fetched 2 new logs [25-05-2022 19:37:01]25422: WAF :: fetched 1 new logs [25-05-2022 19:38:01]28329: WAF :: fetched 1 new logs [25-05-2022 19:40:01]1612: WAF :: fetched 3 new logs [25-05-2022 19:41:01]4503: WAF :: fetched 6 new logs [25-05-2022 19:41:01]4503: Checking for user cron vulnerabilities [25-05-2022 19:42:01]7289: WAF :: fetched 1 new logs [25-05-2022 19:43:02]10181: WAF :: fetched 2 new logs [25-05-2022 19:44:02]12940: Checking ditributed CMS bruteforce attacks [25-05-2022 19:45:02]: Checking for definition updates [25-05-2022 19:46:02]18546: WAF :: fetched 1 new logs [25-05-2022 19:47:02]21336: WAF :: fetched 5 new logs [25-05-2022 19:48:02]24200: WAF :: fetched 3 new logs [25-05-2022 19:49:02]26985: WAF :: fetched 4 new logs [25-05-2022 19:50:02]29806: WAF :: fetched 4 new logs [25-05-2022 19:51:02]32656: WAF :: fetched 7 new logs [25-05-2022 19:52:02]3109: WAF :: fetched 3 new logs [25-05-2022 19:53:02]5954: WAF :: fetched 1 new logs [25-05-2022 19:55:04]11504: API call failed for url https://api.recaptcha.cloud/add Status : 500 [25-05-2022 20:05:02]7440: WAF :: fetched 1 new logs [25-05-2022 20:06:02]10304: WAF :: fetched 4 new logs [25-05-2022 20:08:02]15915: WAF :: fetched 1 new logs [25-05-2022 20:09:02]18709: WAF :: fetched 1 new logs [25-05-2022 20:12:02]27156: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653520322 [25-05-2022 20:12:02]27156: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-05-2022 20:12:04]27156: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-05-2022 20:12:04]27156: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220525/20220525-2012/20220525-201202-Yo63whwjWVlB6KfHvmTiPgAAAAg [25-05-2022 20:12:04]27156: WAF :: No suitable log file found. Using SQLite.. [25-05-2022 20:12:04]27156: WAF :: fetched 6 new logs [25-05-2022 20:16:01]6047: WAF :: fetched 2 new logs [25-05-2022 20:17:01]8815: WAF :: fetched 1 new logs [25-05-2022 20:19:01]14528: WAF :: fetched 8 new logs [25-05-2022 20:21:01]20259: WAF :: fetched 8 new logs [25-05-2022 20:22:02]23049: WAF :: fetched 1 new logs [25-05-2022 20:23:02]25911: WAF :: fetched 1 new logs [25-05-2022 20:25:01]31559: WAF :: fetched 3 new logs [25-05-2022 20:26:02]2047: WAF :: fetched 2 new logs [25-05-2022 20:28:02]7770: WAF :: fetched 1 new logs [25-05-2022 20:31:02]16236: WAF :: fetched 1 new logs [25-05-2022 20:33:01]21874: WAF :: fetched 2 new logs [25-05-2022 20:35:02]27452: WAF :: fetched 3 new logs [25-05-2022 20:36:02]30282: WAF :: fetched 3 new logs [25-05-2022 20:37:02]600: WAF :: fetched 3 new logs [25-05-2022 20:38:02]3604: WAF :: fetched 3 new logs [25-05-2022 20:39:02]6389: WAF :: fetched 4 new logs [25-05-2022 20:41:01]12045: Checking for user cron vulnerabilities [25-05-2022 20:44:01]20505: Checking ditributed CMS bruteforce attacks [25-05-2022 20:48:01]31816: WAF :: fetched 1 new logs [25-05-2022 20:50:01]5053: WAF :: fetched 1 new logs [25-05-2022 20:51:01]7936: WAF :: fetched 2 new logs [25-05-2022 20:52:01]10781: WAF :: fetched 1 new logs [25-05-2022 20:55:02]19288: WAF :: fetched 1 new logs [25-05-2022 20:55:04]19288: API call failed for url https://api.recaptcha.cloud/add Status : 500 [25-05-2022 20:56:02]22071: WAF :: fetched 1 new logs [25-05-2022 20:57:02]24813: WAF :: fetched 1 new logs [25-05-2022 21:00:01]539: WAF :: fetched 3 new logs [25-05-2022 21:03:01]9655: WAF :: fetched 1 new logs [25-05-2022 21:04:01]12410: WAF :: fetched 1 new logs [25-05-2022 21:05:02]15226: WAF :: fetched 1 new logs [25-05-2022 21:09:02]26437: WAF :: fetched 12 new logs [25-05-2022 21:10:02]29208: WAF :: fetched 2 new logs [25-05-2022 21:12:02]2558: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653523922 [25-05-2022 21:12:02]2558: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-05-2022 21:12:04]2558: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-05-2022 21:12:04]2558: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220525/20220525-2112/20220525-211202-Yo7F0tPfOykJ3Q7zaxaP4QAAABw [25-05-2022 21:12:04]2558: WAF :: No suitable log file found. Using SQLite.. [25-05-2022 21:12:04]2558: WAF :: fetched 1 new logs [25-05-2022 21:16:02]13771: WAF :: fetched 6 new logs [25-05-2022 21:18:01]19449: WAF :: fetched 2 new logs [25-05-2022 21:19:02]22249: WAF :: fetched 1 new logs [25-05-2022 21:20:01]24978: WAF :: fetched 4 new logs [25-05-2022 21:23:01]1015: WAF :: fetched 4 new logs [25-05-2022 21:25:01]6558: WAF :: fetched 1 new logs [25-05-2022 21:26:02]9405: WAF :: fetched 2 new logs [25-05-2022 21:29:01]17660: WAF :: fetched 1 new logs [25-05-2022 21:30:01]20413: WAF :: fetched 1 new logs [25-05-2022 21:31:02]23229: WAF :: fetched 9 new logs [25-05-2022 21:32:01]25941: WAF :: fetched 5 new logs [25-05-2022 21:33:02]28814: WAF :: fetched 1 new logs [25-05-2022 21:36:02]4860: WAF :: fetched 1 new logs [25-05-2022 21:37:01]7612: WAF :: fetched 4 new logs [25-05-2022 21:38:02]10452: WAF :: fetched 1 new logs [25-05-2022 21:39:01]13200: WAF :: fetched 1 new logs [25-05-2022 21:40:02]15987: WAF :: fetched 8 new logs [25-05-2022 21:41:01]18441: WAF :: fetched 6 new logs [25-05-2022 21:41:01]18441: Checking for user cron vulnerabilities [25-05-2022 21:42:02]21631: WAF :: fetched 6 new logs [25-05-2022 21:43:01]24412: WAF :: fetched 6 new logs [25-05-2022 21:44:02]27153: Checking ditributed CMS bruteforce attacks [25-05-2022 21:44:02]27153: WAF :: fetched 5 new logs [25-05-2022 21:45:02]29922: WAF :: fetched 9 new logs [25-05-2022 21:46:01]32709: WAF :: fetched 4 new logs [25-05-2022 21:47:02]3133: WAF :: fetched 6 new logs [25-05-2022 21:49:01]8640: WAF :: fetched 1 new logs [25-05-2022 21:50:02]11414: WAF :: fetched 1 new logs [25-05-2022 21:53:02]19772: WAF :: fetched 2 new logs [25-05-2022 21:54:01]22503: WAF :: fetched 3 new logs [25-05-2022 21:58:02]1250: WAF :: fetched 1 new logs [25-05-2022 22:01:02]9812: WAF :: fetched 1 new logs [25-05-2022 22:02:02]12570: WAF :: fetched 1 new logs [25-05-2022 22:04:02]18142: WAF :: fetched 3 new logs [25-05-2022 22:05:01]20869: WAF :: fetched 14 new logs [25-05-2022 22:06:02]23655: WAF :: fetched 13 new logs [25-05-2022 22:07:01]26397: WAF :: fetched 29 new logs [25-05-2022 22:07:09]26396: Performing Domain reputation checks [25-05-2022 22:08:01]29276: WAF :: fetched 9 new logs [25-05-2022 22:09:02]32092: WAF :: fetched 12 new logs [25-05-2022 22:10:02]2536: WAF :: fetched 28 new logs [25-05-2022 22:11:01]5384: WAF :: fetched 26 new logs [25-05-2022 22:12:02]8239: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653527522 [25-05-2022 22:12:02]8239: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-05-2022 22:12:04]8239: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-05-2022 22:12:04]8239: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220525/20220525-2212/20220525-221202-Yo7T4iyf-M54Ab9UF3voogAAADw [25-05-2022 22:12:04]8239: WAF :: No suitable log file found. Using SQLite.. [25-05-2022 22:12:04]8239: WAF :: fetched 26 new logs [25-05-2022 22:13:02]11035: WAF :: fetched 25 new logs [25-05-2022 22:14:01]13768: WAF :: fetched 40 new logs [25-05-2022 22:15:02]16480: WAF :: fetched 33 new logs [25-05-2022 22:16:01]19211: WAF :: fetched 32 new logs [25-05-2022 22:17:02]21899: WAF :: fetched 26 new logs [25-05-2022 22:18:02]24632: WAF :: fetched 34 new logs [25-05-2022 22:19:01]27286: WAF :: fetched 49 new logs [25-05-2022 22:20:02]30054: WAF :: fetched 21 new logs [25-05-2022 22:21:01]351: WAF :: fetched 31 new logs [25-05-2022 22:22:02]3251: WAF :: fetched 20 new logs [25-05-2022 22:23:01]6039: WAF :: fetched 27 new logs [25-05-2022 22:24:02]8828: WAF :: fetched 37 new logs [25-05-2022 22:25:01]11574: WAF :: fetched 29 new logs [25-05-2022 22:26:02]14396: WAF :: fetched 31 new logs [25-05-2022 22:27:02]17133: WAF :: fetched 37 new logs [25-05-2022 22:28:01]20021: WAF :: fetched 33 new logs [25-05-2022 22:29:02]22836: WAF :: fetched 25 new logs [25-05-2022 22:30:01]25591: WAF :: fetched 24 new logs [25-05-2022 22:31:02]28461: WAF :: fetched 38 new logs [25-05-2022 22:32:02]31260: WAF :: fetched 23 new logs [25-05-2022 22:33:01]1767: WAF :: fetched 36 new logs [25-05-2022 22:34:02]4612: WAF :: fetched 25 new logs [25-05-2022 22:35:01]7369: WAF :: fetched 40 new logs [25-05-2022 22:36:02]10188: WAF :: fetched 34 new logs [25-05-2022 22:37:02]12931: WAF :: fetched 25 new logs [25-05-2022 22:38:01]15758: WAF :: fetched 38 new logs [25-05-2022 22:39:02]18530: WAF :: fetched 25 new logs [25-05-2022 22:40:01]21248: WAF :: fetched 23 new logs [25-05-2022 22:41:02]24107: WAF :: fetched 38 new logs [25-05-2022 22:41:02]24107: Checking for user cron vulnerabilities [25-05-2022 22:42:01]26904: WAF :: fetched 37 new logs [25-05-2022 22:43:01]29784: WAF :: fetched 30 new logs [25-05-2022 22:44:01]32595: Checking ditributed CMS bruteforce attacks [25-05-2022 22:44:02]32595: WAF :: fetched 40 new logs [25-05-2022 22:45:01]3018: WAF :: fetched 30 new logs [25-05-2022 22:46:02]5853: WAF :: fetched 25 new logs [25-05-2022 22:47:01]8580: WAF :: fetched 23 new logs [25-05-2022 22:48:01]11409: WAF :: fetched 34 new logs [25-05-2022 22:49:01]14101: WAF :: fetched 33 new logs [25-05-2022 22:50:01]16819: WAF :: fetched 29 new logs [25-05-2022 22:51:02]19624: WAF :: fetched 14 new logs [25-05-2022 22:52:01]22343: WAF :: fetched 40 new logs [25-05-2022 22:53:02]25171: WAF :: fetched 49 new logs [25-05-2022 22:54:01]27859: WAF :: fetched 43 new logs [25-05-2022 22:55:01]30659: WAF :: fetched 29 new logs [25-05-2022 22:56:01]1061: WAF :: fetched 10 new logs [25-05-2022 22:57:02]3878: WAF :: fetched 28 new logs [25-05-2022 22:58:01]6695: WAF :: fetched 40 new logs [25-05-2022 22:59:01]9515: httpd.conf changed. Refreshing watchlist. [25-05-2022 22:59:01]9506: WAF :: fetched 56 new logs [25-05-2022 23:00:02]12025: WAF :: fetched 14 new logs [25-05-2022 23:01:01]15288: WAF :: fetched 10 new logs [25-05-2022 23:02:02]18130: WAF :: fetched 32 new logs [25-05-2022 23:03:02]20965: WAF :: fetched 42 new logs [25-05-2022 23:04:01]23717: WAF :: fetched 35 new logs [25-05-2022 23:05:01]26492: WAF :: fetched 32 new logs [25-05-2022 23:05:02]26495: httpd.conf changed. Refreshing watchlist. [25-05-2022 23:06:01]29291: WAF :: fetched 48 new logs [25-05-2022 23:07:02]32100: WAF :: fetched 17 new logs [25-05-2022 23:08:01]2263: WAF :: fetched 29 new logs [25-05-2022 23:08:04]32273: Performed RBL check for 23.111.136.34. [25-05-2022 23:09:01]5326: WAF :: fetched 32 new logs [25-05-2022 23:10:02]8065: WAF :: fetched 33 new logs [25-05-2022 23:11:02]10851: WAF :: fetched 2 new logs [25-05-2022 23:12:01]13169: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653531121 [25-05-2022 23:12:01]13169: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-05-2022 23:12:03]13169: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-05-2022 23:12:04]13169: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220525/20220525-2312/20220525-231201-Yo7h8Uvm4liTgL_LCzf-HgAAAB8 [25-05-2022 23:12:04]13169: WAF :: No suitable log file found. Using SQLite.. [25-05-2022 23:12:04]13169: WAF :: fetched 15 new logs [25-05-2022 23:13:02]16392: WAF :: fetched 35 new logs [25-05-2022 23:14:01]18981: WAF :: fetched 41 new logs [25-05-2022 23:15:02]21879: WAF :: fetched 2 new logs [25-05-2022 23:16:01]24620: WAF :: fetched 23 new logs [25-05-2022 23:18:02]30360: WAF :: fetched 1 new logs [25-05-2022 23:22:01]9073: WAF :: fetched 7 new logs [25-05-2022 23:23:02]11887: WAF :: fetched 2 new logs [25-05-2022 23:24:01]14555: WAF :: fetched 1 new logs [25-05-2022 23:25:02]17301: WAF :: fetched 1 new logs [25-05-2022 23:27:02]22788: WAF :: fetched 2 new logs [25-05-2022 23:28:02]25534: WAF :: fetched 1 new logs [25-05-2022 23:29:01]28218: WAF :: fetched 1 new logs [25-05-2022 23:31:01]1355: WAF :: fetched 1 new logs [25-05-2022 23:32:02]4162: WAF :: fetched 1 new logs [25-05-2022 23:40:02]26082: WAF :: fetched 1 new logs [25-05-2022 23:41:01]28820: Checking for user cron vulnerabilities [25-05-2022 23:43:01]1932: WAF :: fetched 1 new logs [25-05-2022 23:44:02]4731: Checking ditributed CMS bruteforce attacks [25-05-2022 23:44:02]4731: WAF :: fetched 11 new logs [25-05-2022 23:45:01]7431: WAF :: fetched 2 new logs [25-05-2022 23:48:01]15600: WAF :: fetched 1 new logs [25-05-2022 23:49:02]18365: WAF :: fetched 5 new logs [25-05-2022 23:51:01]23864: WAF :: fetched 1 new logs [25-05-2022 23:52:02]26599: WAF :: fetched 1 new logs [25-05-2022 23:53:01]29422: WAF :: fetched 4 new logs [25-05-2022 23:54:02]32329: WAF :: fetched 1 new logs [25-05-2022 23:54:02]32327: httpd.conf changed. Refreshing watchlist. [25-05-2022 23:55:02]2726: WAF :: fetched 1 new logs [25-05-2022 23:55:04]2726: API call failed for url https://api.recaptcha.cloud/add Status : 500 [25-05-2022 23:56:02]5522: httpd.conf changed. Refreshing watchlist. [25-05-2022 23:58:01]10893: WAF :: fetched 1 new logs [25-05-2022 23:59:02]13715: WAF :: fetched 1 new logs [26-05-2022 00:01:02]19579: WAF :: fetched 3 new logs [26-05-2022 00:01:02]19577: httpd.conf changed. Refreshing watchlist. [26-05-2022 00:01:03]19579: Sending daily report for May 26, 2022 [26-05-2022 00:02:01]22310: WAF :: fetched 1 new logs [26-05-2022 00:03:02]25064: WAF :: fetched 3 new logs [26-05-2022 00:04:02]27833: WAF :: fetched 1 new logs [26-05-2022 00:05:01]30598: WAF :: fetched 1 new logs [26-05-2022 00:05:01]30598: Deleted 0 entries older than 6 MONTH from scanner_logs [26-05-2022 00:05:01]30598: Deleted 0 files from Quarantine [26-05-2022 00:06:02]1014: WAF :: fetched 4 new logs [26-05-2022 00:07:01]3763: WAF :: fetched 2 new logs [26-05-2022 00:08:02]6492: WAF :: fetched 1 new logs [26-05-2022 00:09:01]9254: WAF :: fetched 2 new logs [26-05-2022 00:10:02]11972: WAF :: fetched 2 new logs [26-05-2022 00:12:01]17442: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653534721 [26-05-2022 00:12:01]17442: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 00:12:03]17442: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 00:12:03]17442: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-0012/20220526-001201-Yo7wASpxN5sWXXPpn8S5FAAAAAo [26-05-2022 00:12:03]17442: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [26-05-2022 00:12:03]17442: WAF :: fetched 1 new logs [26-05-2022 00:13:02]20169: WAF :: fetched 4 new logs [26-05-2022 00:16:01]28357: WAF :: fetched 2 new logs [26-05-2022 00:17:02]31103: WAF :: fetched 1 new logs [26-05-2022 00:18:01]1422: WAF :: fetched 2 new logs [26-05-2022 00:19:02]4306: WAF :: fetched 1 new logs [26-05-2022 00:21:02]9778: WAF :: fetched 1 new logs [26-05-2022 00:22:02]12532: WAF :: fetched 6 new logs [26-05-2022 00:23:01]15222: WAF :: fetched 4 new logs [26-05-2022 00:25:01]20722: WAF :: fetched 1 new logs [26-05-2022 00:26:01]23473: WAF :: fetched 1 new logs [26-05-2022 00:28:01]28890: WAF :: fetched 3 new logs [26-05-2022 00:29:02]31662: WAF :: fetched 1 new logs [26-05-2022 00:30:01]1985: WAF :: fetched 2 new logs [26-05-2022 00:34:02]13043: WAF :: fetched 3 new logs [26-05-2022 00:35:02]15758: WAF :: fetched 1 new logs [26-05-2022 00:36:01]18504: WAF :: fetched 2 new logs [26-05-2022 00:37:02]21180: WAF :: fetched 2 new logs [26-05-2022 00:38:01]23877: WAF :: fetched 3 new logs [26-05-2022 00:40:01]29004: WAF :: fetched 2 new logs [26-05-2022 00:41:02]32156: Checking for user cron vulnerabilities [26-05-2022 00:43:02]5237: WAF :: fetched 1 new logs [26-05-2022 00:44:01]8075: Checking ditributed CMS bruteforce attacks [26-05-2022 00:44:01]8075: WAF :: fetched 2 new logs [26-05-2022 00:45:02]: Checking for software updates [26-05-2022 00:45:02]10768: WAF :: fetched 2 new logs [26-05-2022 00:46:01]13485: WAF :: fetched 2 new logs [26-05-2022 00:48:02]18919: WAF :: fetched 4 new logs [26-05-2022 00:49:01]21689: WAF :: fetched 2 new logs [26-05-2022 00:50:02]24419: WAF :: fetched 5 new logs [26-05-2022 00:51:01]27101: WAF :: fetched 1 new logs [26-05-2022 00:53:02]32516: WAF :: fetched 5 new logs [26-05-2022 00:55:02]5685: WAF :: fetched 1 new logs [26-05-2022 00:55:03]5685: API call failed for url https://api.recaptcha.cloud/add Status : 500 [26-05-2022 00:56:01]8402: WAF :: fetched 2 new logs [26-05-2022 00:57:01]11066: WAF :: fetched 2 new logs [26-05-2022 00:58:02]13796: WAF :: fetched 1 new logs [26-05-2022 00:59:01]16538: WAF :: fetched 2 new logs [26-05-2022 01:00:02]19001: WAF :: fetched 1 new logs [26-05-2022 01:01:02]22793: WAF :: fetched 4 new logs [26-05-2022 01:02:01]25927: WAF :: fetched 4 new logs [26-05-2022 01:04:01]32000: httpd.conf changed. Refreshing watchlist. [26-05-2022 01:05:02]2744: httpd.conf changed. Refreshing watchlist. [26-05-2022 01:06:01]5712: WAF :: fetched 6 new logs [26-05-2022 01:07:02]8714: WAF :: fetched 4 new logs [26-05-2022 01:08:01]11500: WAF :: fetched 1 new logs [26-05-2022 01:10:01]17060: WAF :: fetched 1 new logs [26-05-2022 01:11:01]20138: WAF :: fetched 5 new logs [26-05-2022 01:12:02]22857: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653538322 [26-05-2022 01:12:02]22857: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 01:12:04]22857: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 01:12:04]22857: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-0112/20220526-011202-Yo7-EhjAQ_NXHFBzMzkKbwAAAAk [26-05-2022 01:12:04]22857: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 01:12:04]22857: WAF :: fetched 81 new logs [26-05-2022 01:21:01]16608: WAF :: fetched 2 new logs [26-05-2022 01:22:02]19335: WAF :: fetched 1 new logs [26-05-2022 01:24:01]25272: WAF :: fetched 20 new logs [26-05-2022 01:25:01]28142: WAF :: fetched 8 new logs [26-05-2022 01:26:02]31169: WAF :: fetched 43 new logs [26-05-2022 01:27:01]1790: WAF :: fetched 19 new logs [26-05-2022 01:28:01]4924: WAF :: fetched 27 new logs [26-05-2022 01:29:02]7877: WAF :: fetched 30 new logs [26-05-2022 01:30:01]10826: WAF :: fetched 23 new logs [26-05-2022 01:31:01]13902: WAF :: fetched 21 new logs [26-05-2022 01:32:01]16748: WAF :: fetched 30 new logs [26-05-2022 01:33:02]19522: WAF :: fetched 49 new logs [26-05-2022 01:34:01]22626: WAF :: fetched 4 new logs [26-05-2022 01:35:02]25347: WAF :: fetched 21 new logs [26-05-2022 01:36:01]28546: WAF :: fetched 37 new logs [26-05-2022 01:37:01]31457: WAF :: fetched 20 new logs [26-05-2022 01:39:01]5262: WAF :: fetched 1 new logs [26-05-2022 01:40:02]8325: WAF :: fetched 1 new logs [26-05-2022 01:41:01]10921: Checking for user cron vulnerabilities [26-05-2022 01:43:01]16660: WAF :: fetched 4 new logs [26-05-2022 01:44:01]19722: Checking ditributed CMS bruteforce attacks [26-05-2022 01:45:01]: Checking for definition updates [26-05-2022 01:49:02]1861: WAF :: fetched 1 new logs [26-05-2022 01:51:02]7414: WAF :: fetched 2 new logs [26-05-2022 01:54:01]15919: WAF :: fetched 1 new logs [26-05-2022 01:55:01]18811: WAF :: fetched 1 new logs [26-05-2022 01:56:02]21588: WAF :: fetched 13 new logs [26-05-2022 02:00:01]32201: WAF :: fetched 1 new logs [26-05-2022 02:01:02]3144: WAF :: fetched 1 new logs [26-05-2022 02:02:01]5876: WAF :: fetched 1 new logs [26-05-2022 02:03:02]8584: WAF :: fetched 1 new logs [26-05-2022 02:07:01]19572: WAF :: fetched 1 new logs [26-05-2022 02:08:02]22321: WAF :: fetched 2 new logs [26-05-2022 02:11:02]30759: WAF :: fetched 1 new logs [26-05-2022 02:12:01]1109: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653541921 [26-05-2022 02:12:01]1109: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 02:12:03]1109: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 02:12:04]1109: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-0212/20220526-021201-Yo8MIblIF9qKH4FDj8yfagAAABI [26-05-2022 02:12:04]1109: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 02:12:04]1109: WAF :: fetched 1 new logs [26-05-2022 02:18:02]17631: WAF :: fetched 1 new logs [26-05-2022 02:19:02]20386: WAF :: fetched 1 new logs [26-05-2022 02:22:01]28577: WAF :: fetched 1 new logs [26-05-2022 02:25:02]4526: WAF :: fetched 94 new logs [26-05-2022 02:26:01]7239: WAF :: fetched 1 new logs [26-05-2022 02:31:02]21028: WAF :: fetched 1 new logs [26-05-2022 02:34:02]29496: WAF :: fetched 1 new logs [26-05-2022 02:36:02]4087: WAF :: fetched 1 new logs [26-05-2022 02:40:02]15154: WAF :: fetched 2 new logs [26-05-2022 02:41:01]17865: WAF :: fetched 2 new logs [26-05-2022 02:41:01]17865: Checking for user cron vulnerabilities [26-05-2022 02:44:01]26226: Checking ditributed CMS bruteforce attacks [26-05-2022 02:44:01]26226: WAF :: fetched 99 new logs [26-05-2022 02:45:01]29167: WAF :: fetched 1 new logs [26-05-2022 02:47:02]2570: WAF :: fetched 4 new logs [26-05-2022 02:48:02]5380: WAF :: fetched 3 new logs [26-05-2022 02:49:02]8661: WAF :: fetched 3 new logs [26-05-2022 02:50:01]11667: WAF :: fetched 1 new logs [26-05-2022 02:51:01]14413: WAF :: fetched 1 new logs [26-05-2022 02:52:01]17342: WAF :: fetched 1 new logs [26-05-2022 02:53:01]20012: WAF :: fetched 1 new logs [26-05-2022 02:53:02]20019: Updated license status via CDN [26-05-2022 02:57:01]31512: WAF :: fetched 1 new logs [26-05-2022 02:59:02]4709: WAF :: fetched 2 new logs [26-05-2022 03:00:02]7173: Found and updated 29 CMS installations [26-05-2022 03:02:17]7173: Sending CMS version vulnerability report emails to cpanel users [26-05-2022 03:02:20]7173: Checking wordpress installations for suspicious directories [26-05-2022 03:04:14]16428: Sending CMS version vulnerability report emails to cpanel users [26-05-2022 03:04:17]16428: Checking wordpress installations for suspicious directories [26-05-2022 03:09:02]1054: WAF :: fetched 1 new logs [26-05-2022 03:10:02]4104: WAF :: fetched 1345 new logs [26-05-2022 03:12:02]9892: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653545522 [26-05-2022 03:12:02]9892: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 03:12:04]9892: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 03:12:04]9892: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-0312/20220526-031202-Yo8aMjLOGEddbTt9Skr7zQAAABA [26-05-2022 03:12:04]9892: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [26-05-2022 03:12:04]9892: WAF :: fetched 1 new logs [26-05-2022 03:13:01]12686: WAF :: fetched 1 new logs [26-05-2022 03:16:02]21335: WAF :: fetched 1 new logs [26-05-2022 03:20:02]32632: WAF :: fetched 212 new logs [26-05-2022 03:21:02]3013: WAF :: fetched 678 new logs [26-05-2022 03:22:01]5655: WAF :: fetched 1 new logs [26-05-2022 03:27:02]18939: WAF :: fetched 46 new logs [26-05-2022 03:28:01]21532: WAF :: fetched 88 new logs [26-05-2022 03:29:02]24273: WAF :: fetched 2 new logs [26-05-2022 03:32:02]32359: WAF :: fetched 2 new logs [26-05-2022 03:35:02]8124: WAF :: fetched 2 new logs [26-05-2022 03:37:02]13443: WAF :: fetched 3 new logs [26-05-2022 03:40:02]21460: WAF :: fetched 1 new logs [26-05-2022 03:41:01]24132: Checking for user cron vulnerabilities [26-05-2022 03:44:01]32154: Checking ditributed CMS bruteforce attacks [26-05-2022 03:45:02]2511: WAF :: fetched 3 new logs [26-05-2022 03:47:02]7839: WAF :: fetched 1 new logs [26-05-2022 03:48:01]10456: WAF :: fetched 1 new logs [26-05-2022 03:49:01]13176: WAF :: fetched 1 new logs [26-05-2022 03:50:02]15846: WAF :: fetched 2 new logs [26-05-2022 03:52:02]5718: WAF :: fetched 2 new logs [26-05-2022 03:58:01]6459: WAF :: fetched 2 new logs [26-05-2022 04:00:02]11555: WAF :: fetched 3 new logs [26-05-2022 04:01:01]14691: WAF :: fetched 1 new logs [26-05-2022 04:02:01]17366: WAF :: fetched 38 new logs [26-05-2022 04:03:02]20039: WAF :: fetched 1 new logs [26-05-2022 04:07:01]30726: WAF :: fetched 1 new logs [26-05-2022 04:08:02]1021: WAF :: fetched 2 new logs [26-05-2022 04:10:02]6523: WAF :: fetched 3 new logs [26-05-2022 04:12:01]11861: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653549121 [26-05-2022 04:12:01]11861: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 04:12:03]11861: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 04:12:03]11861: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-0412/20220526-041201-Yo8oQQgrCZ3ntozClSP3lAAAAA8 [26-05-2022 04:12:03]11861: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [26-05-2022 04:12:04]11861: WAF :: fetched 1 new logs [26-05-2022 04:18:02]27853: WAF :: fetched 5 new logs [26-05-2022 04:19:01]30578: WAF :: fetched 3 new logs [26-05-2022 04:20:02]847: WAF :: fetched 1 new logs [26-05-2022 04:22:02]6312: WAF :: fetched 1 new logs [26-05-2022 04:23:01]8942: WAF :: fetched 2 new logs [26-05-2022 04:24:01]11694: WAF :: fetched 4 new logs [26-05-2022 04:25:02]14356: WAF :: fetched 4 new logs [26-05-2022 04:26:01]17007: WAF :: fetched 2 new logs [26-05-2022 04:27:02]19652: WAF :: fetched 4 new logs [26-05-2022 04:28:01]22335: WAF :: fetched 4 new logs [26-05-2022 04:29:01]25124: WAF :: fetched 6 new logs [26-05-2022 04:30:01]27854: WAF :: fetched 3 new logs [26-05-2022 04:33:01]3856: WAF :: fetched 2 new logs [26-05-2022 04:35:01]9258: WAF :: fetched 2 new logs [26-05-2022 04:36:02]11943: WAF :: fetched 1 new logs [26-05-2022 04:39:01]19879: WAF :: fetched 2 new logs [26-05-2022 04:41:01]25194: Checking for user cron vulnerabilities [26-05-2022 04:42:02]27864: WAF :: fetched 1 new logs [26-05-2022 04:44:01]857: Checking ditributed CMS bruteforce attacks [26-05-2022 04:44:01]857: WAF :: fetched 1 new logs [26-05-2022 04:45:01]3669: WAF :: fetched 7 new logs [26-05-2022 04:46:01]6354: WAF :: fetched 5 new logs [26-05-2022 04:47:02]9013: WAF :: fetched 74 new logs [26-05-2022 04:48:01]11650: WAF :: fetched 98 new logs [26-05-2022 04:49:02]14393: WAF :: fetched 103 new logs [26-05-2022 04:50:02]17044: WAF :: fetched 90 new logs [26-05-2022 04:51:01]19743: WAF :: fetched 94 new logs [26-05-2022 04:52:02]22409: WAF :: fetched 29 new logs [26-05-2022 04:53:01]25001: WAF :: fetched 1 new logs [26-05-2022 04:54:02]27718: WAF :: fetched 1 new logs [26-05-2022 04:55:02]30435: WAF :: fetched 2 new logs [26-05-2022 04:57:02]3430: WAF :: fetched 2 new logs [26-05-2022 04:58:02]6101: WAF :: fetched 1 new logs [26-05-2022 04:59:01]8732: WAF :: fetched 1 new logs [26-05-2022 05:00:02]11211: WAF :: fetched 2 new logs [26-05-2022 05:01:01]14295: WAF :: fetched 2 new logs [26-05-2022 05:01:41]14298: Starting daily scan on files updated in last 24 hrs [26-05-2022 05:03:02]19617: WAF :: fetched 2 new logs [26-05-2022 05:06:02]27654: WAF :: fetched 2 new logs [26-05-2022 05:09:01]3207: WAF :: fetched 2 new logs [26-05-2022 05:10:02]6009: WAF :: fetched 4 new logs [26-05-2022 05:12:02]11380: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653552722 [26-05-2022 05:12:02]11380: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 05:12:04]11380: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 05:12:04]11380: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-0512/20220526-051202-Yo82UoTniOPHPNoBloTlkQAAAAA [26-05-2022 05:12:04]11380: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 05:12:05]11380: WAF :: fetched 1129 new logs [26-05-2022 05:14:01]16615: WAF :: fetched 2 new logs [26-05-2022 05:15:02]19344: WAF :: fetched 3 new logs [26-05-2022 05:16:01]21998: WAF :: fetched 1 new logs [26-05-2022 05:21:01]3022: WAF :: fetched 1 new logs [26-05-2022 05:25:01]13647: WAF :: fetched 1 new logs [26-05-2022 05:27:02]18951: WAF :: fetched 1 new logs [26-05-2022 05:28:01]21548: WAF :: fetched 3 new logs [26-05-2022 05:31:02]29614: WAF :: fetched 1 new logs [26-05-2022 05:33:01]2589: WAF :: fetched 143 new logs [26-05-2022 05:34:02]5253: WAF :: fetched 16 new logs [26-05-2022 05:41:02]23976: Checking for user cron vulnerabilities [26-05-2022 05:44:01]31910: Checking ditributed CMS bruteforce attacks [26-05-2022 05:44:02]31910: WAF :: fetched 3 new logs [26-05-2022 05:45:01]2251: WAF :: fetched 1 new logs [26-05-2022 05:49:02]12947: WAF :: fetched 1 new logs [26-05-2022 06:07:01]28899: WAF :: fetched 1 new logs [26-05-2022 06:08:01]31568: WAF :: fetched 4 new logs [26-05-2022 06:09:02]1868: WAF :: fetched 10 new logs [26-05-2022 06:10:01]4646: WAF :: fetched 14 new logs [26-05-2022 06:12:01]9980: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653556321 [26-05-2022 06:12:01]9980: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 06:12:03]9980: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 06:12:03]9980: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-0612/20220526-061201-Yo9EYY4eeMzZXODUyLMHFgAAAAU [26-05-2022 06:12:03]9980: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 06:12:04]9980: WAF :: fetched 2 new logs [26-05-2022 06:15:02]18100: WAF :: fetched 16 new logs [26-05-2022 06:16:02]20787: WAF :: fetched 8 new logs [26-05-2022 06:20:01]31495: WAF :: fetched 9 new logs [26-05-2022 06:21:01]1852: WAF :: fetched 1 new logs [26-05-2022 06:22:02]4683: WAF :: fetched 10 new logs [26-05-2022 06:23:01]7345: WAF :: fetched 6 new logs [26-05-2022 06:25:02]12791: WAF :: fetched 5 new logs [26-05-2022 06:31:01]28997: WAF :: fetched 2 new logs [26-05-2022 06:32:02]31712: WAF :: fetched 1 new logs [26-05-2022 06:39:01]18058: WAF :: fetched 1 new logs [26-05-2022 06:41:02]23461: Checking for user cron vulnerabilities [26-05-2022 06:43:02]28739: WAF :: fetched 1 new logs [26-05-2022 06:44:01]31366: Checking ditributed CMS bruteforce attacks [26-05-2022 06:45:01]1735: WAF :: fetched 3 new logs [26-05-2022 06:49:02]12350: WAF :: fetched 1 new logs [26-05-2022 06:56:02]31122: WAF :: fetched 7 new logs [26-05-2022 06:57:01]1466: WAF :: fetched 14 new logs [26-05-2022 06:59:01]6790: WAF :: fetched 7 new logs [26-05-2022 07:01:02]12378: WAF :: fetched 1 new logs [26-05-2022 07:08:01]31052: WAF :: fetched 1 new logs [26-05-2022 07:09:02]1393: WAF :: fetched 12 new logs [26-05-2022 07:10:01]4184: WAF :: fetched 2 new logs [26-05-2022 07:12:01]9531: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653559921 [26-05-2022 07:12:01]9531: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 07:12:03]9531: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 07:12:04]9531: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-0712/20220526-071201-Yo9ScYW71-NNguSzGjTjlgAAAA0 [26-05-2022 07:12:04]9531: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 07:12:04]9531: WAF :: fetched 11 new logs [26-05-2022 07:13:02]12193: WAF :: fetched 1 new logs [26-05-2022 07:17:01]22844: WAF :: fetched 1 new logs [26-05-2022 07:18:02]25496: WAF :: fetched 1 new logs [26-05-2022 07:19:01]28101: WAF :: fetched 3 new logs [26-05-2022 07:20:02]30903: WAF :: fetched 1 new logs [26-05-2022 07:24:01]9081: WAF :: fetched 1 new logs [26-05-2022 07:25:02]11928: WAF :: fetched 1 new logs [26-05-2022 07:27:02]17179: WAF :: fetched 1 new logs [26-05-2022 07:29:02]22500: WAF :: fetched 5 new logs [26-05-2022 07:31:02]27915: WAF :: fetched 1 new logs [26-05-2022 07:34:02]3630: WAF :: fetched 5 new logs [26-05-2022 07:35:01]6358: WAF :: fetched 3 new logs [26-05-2022 07:36:02]9084: WAF :: fetched 6 new logs [26-05-2022 07:37:01]11696: WAF :: fetched 16 new logs [26-05-2022 07:38:01]14337: WAF :: fetched 1 new logs [26-05-2022 07:39:02]17008: WAF :: fetched 2 new logs [26-05-2022 07:40:01]19700: WAF :: fetched 1 new logs [26-05-2022 07:41:02]22377: WAF :: fetched 6 new logs [26-05-2022 07:41:02]22377: Checking for user cron vulnerabilities [26-05-2022 07:44:01]30349: Checking ditributed CMS bruteforce attacks [26-05-2022 07:45:02]: Checking for definition updates [26-05-2022 07:45:02]636: WAF :: fetched 3 new logs [26-05-2022 07:46:01]3498: WAF :: fetched 5 new logs [26-05-2022 07:47:01]6167: WAF :: fetched 5 new logs [26-05-2022 07:48:01]8819: WAF :: fetched 4 new logs [26-05-2022 07:51:01]16893: WAF :: fetched 8 new logs [26-05-2022 07:54:02]24870: WAF :: fetched 1 new logs [26-05-2022 07:55:02]27565: WAF :: fetched 1 new logs [26-05-2022 07:55:03]27565: API call failed for url https://api.recaptcha.cloud/add Status : 500 [26-05-2022 07:56:01]30261: WAF :: fetched 1 new logs [26-05-2022 07:57:02]500: WAF :: fetched 1 new logs [26-05-2022 07:58:01]3286: WAF :: fetched 16 new logs [26-05-2022 08:00:01]8388: WAF :: fetched 1 new logs [26-05-2022 08:04:02]19599: WAF :: fetched 2 new logs [26-05-2022 08:07:01]27698: WAF :: fetched 2 new logs [26-05-2022 08:08:01]30431: WAF :: fetched 7 new logs [26-05-2022 08:11:02]6262: WAF :: fetched 1 new logs [26-05-2022 08:12:02]8927: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653563522 [26-05-2022 08:12:02]8927: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 08:12:04]8927: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 08:12:04]8927: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-0812/20220526-081202-Yo9gghk_kB43aGa5dcgrZAAAAA8 [26-05-2022 08:12:04]8927: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 08:12:04]8927: WAF :: fetched 3 new logs [26-05-2022 08:14:02]14341: WAF :: fetched 17 new logs [26-05-2022 08:15:01]17052: WAF :: fetched 1 new logs [26-05-2022 08:16:02]19768: WAF :: fetched 1 new logs [26-05-2022 08:19:02]27818: WAF :: fetched 1 new logs [26-05-2022 08:20:02]30600: WAF :: fetched 1 new logs [26-05-2022 08:21:02]882: WAF :: fetched 1 new logs [26-05-2022 08:23:02]6275: WAF :: fetched 4 new logs [26-05-2022 08:24:01]8887: WAF :: fetched 1 new logs [26-05-2022 08:25:02]11678: WAF :: fetched 2 new logs [26-05-2022 08:26:01]14229: WAF :: fetched 1 new logs [26-05-2022 08:27:01]16990: WAF :: fetched 1 new logs [26-05-2022 08:28:02]19695: WAF :: fetched 10 new logs [26-05-2022 08:30:02]25109: WAF :: fetched 1 new logs [26-05-2022 08:31:01]27819: WAF :: fetched 1 new logs [26-05-2022 08:32:02]30562: WAF :: fetched 2 new logs [26-05-2022 08:39:02]17177: WAF :: fetched 1 new logs [26-05-2022 08:40:01]19946: WAF :: fetched 1 new logs [26-05-2022 08:41:01]22768: WAF :: fetched 1 new logs [26-05-2022 08:41:01]22768: Checking for user cron vulnerabilities [26-05-2022 08:42:01]25516: WAF :: fetched 1 new logs [26-05-2022 08:44:02]30868: Checking ditributed CMS bruteforce attacks [26-05-2022 08:44:02]30868: WAF :: fetched 1 new logs [26-05-2022 08:46:02]4086: WAF :: fetched 10 new logs [26-05-2022 08:47:01]6792: WAF :: fetched 2 new logs [26-05-2022 08:48:02]9466: WAF :: fetched 2 new logs [26-05-2022 08:54:01]25669: WAF :: fetched 1 new logs [26-05-2022 08:57:01]1616: WAF :: fetched 1 new logs [26-05-2022 08:59:01]7054: WAF :: fetched 5 new logs [26-05-2022 09:00:02]9612: WAF :: fetched 6 new logs [26-05-2022 09:01:01]12773: WAF :: fetched 9 new logs [26-05-2022 09:02:02]15545: WAF :: fetched 18 new logs [26-05-2022 09:03:02]18297: WAF :: fetched 26 new logs [26-05-2022 09:04:02]20985: WAF :: fetched 21 new logs [26-05-2022 09:05:01]23743: WAF :: fetched 4 new logs [26-05-2022 09:06:02]26478: WAF :: fetched 7 new logs [26-05-2022 09:07:01]29212: WAF :: fetched 16 new logs [26-05-2022 09:08:02]31942: WAF :: fetched 12 new logs [26-05-2022 09:09:01]2334: WAF :: fetched 22 new logs [26-05-2022 09:10:02]5282: WAF :: fetched 53 new logs [26-05-2022 09:11:01]8094: WAF :: fetched 52 new logs [26-05-2022 09:12:01]10838: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653567121 [26-05-2022 09:12:01]10838: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 09:12:03]10838: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 09:12:03]10838: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-0912/20220526-091201-Yo9ukc1n9yrEtlRal7LlvwAAAA4 [26-05-2022 09:12:03]10838: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 09:12:04]10838: WAF :: fetched 32 new logs [26-05-2022 09:13:02]13665: WAF :: fetched 4 new logs [26-05-2022 09:16:02]21880: WAF :: fetched 1 new logs [26-05-2022 09:22:02]6003: WAF :: fetched 7 new logs [26-05-2022 09:23:02]8657: WAF :: fetched 12 new logs [26-05-2022 09:25:02]14149: WAF :: fetched 15 new logs [26-05-2022 09:29:01]25021: WAF :: fetched 4 new logs [26-05-2022 09:32:02]923: WAF :: fetched 1 new logs [26-05-2022 09:33:01]3700: WAF :: fetched 2 new logs [26-05-2022 09:34:01]6425: WAF :: fetched 30 new logs [26-05-2022 09:35:02]9244: WAF :: fetched 41 new logs [26-05-2022 09:36:01]12086: WAF :: fetched 71 new logs [26-05-2022 09:37:02]14798: WAF :: fetched 66 new logs [26-05-2022 09:38:02]17480: WAF :: fetched 71 new logs [26-05-2022 09:39:01]20192: WAF :: fetched 47 new logs [26-05-2022 09:40:02]22997: WAF :: fetched 54 new logs [26-05-2022 09:41:02]25737: WAF :: fetched 66 new logs [26-05-2022 09:41:02]25737: Checking for user cron vulnerabilities [26-05-2022 09:42:01]28467: WAF :: fetched 66 new logs [26-05-2022 09:43:02]31178: WAF :: fetched 55 new logs [26-05-2022 09:44:01]1490: Checking ditributed CMS bruteforce attacks [26-05-2022 09:44:01]1490: WAF :: fetched 72 new logs [26-05-2022 09:45:02]4387: WAF :: fetched 63 new logs [26-05-2022 09:46:01]7033: WAF :: fetched 74 new logs [26-05-2022 09:47:02]9906: WAF :: fetched 92 new logs [26-05-2022 09:48:02]12603: WAF :: fetched 80 new logs [26-05-2022 09:49:01]15297: WAF :: fetched 83 new logs [26-05-2022 09:50:02]18114: WAF :: fetched 47 new logs [26-05-2022 09:51:01]20878: WAF :: fetched 4 new logs [26-05-2022 09:52:01]23609: WAF :: fetched 5 new logs [26-05-2022 09:53:02]26362: WAF :: fetched 9 new logs [26-05-2022 09:54:01]29137: WAF :: fetched 2 new logs [26-05-2022 09:55:02]31955: WAF :: fetched 3 new logs [26-05-2022 09:56:01]2279: WAF :: fetched 2 new logs [26-05-2022 09:57:02]5495: WAF :: fetched 7 new logs [26-05-2022 09:58:02]8194: WAF :: fetched 12 new logs [26-05-2022 09:59:01]10885: WAF :: fetched 7 new logs [26-05-2022 10:00:02]13354: WAF :: fetched 7 new logs [26-05-2022 10:02:01]19396: WAF :: fetched 1 new logs [26-05-2022 10:03:02]22110: WAF :: fetched 1 new logs [26-05-2022 10:04:01]24783: WAF :: fetched 2 new logs [26-05-2022 10:05:02]27498: WAF :: fetched 2 new logs [26-05-2022 10:06:01]30281: WAF :: fetched 1 new logs [26-05-2022 10:07:02]711: WAF :: fetched 1 new logs [26-05-2022 10:10:02]9064: WAF :: fetched 8 new logs [26-05-2022 10:11:01]11895: WAF :: fetched 5 new logs [26-05-2022 10:12:01]14644: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653570721 [26-05-2022 10:12:01]14644: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 10:12:03]14644: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 10:12:03]14644: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-1012/20220526-101201-Yo98ocbuEKNQyKosVGcgZQAAAC0 [26-05-2022 10:12:03]14644: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 10:12:03]14644: WAF :: fetched 1 new logs [26-05-2022 10:13:01]17355: WAF :: fetched 2 new logs [26-05-2022 10:14:02]20115: WAF :: fetched 1 new logs [26-05-2022 10:15:02]22821: WAF :: fetched 4 new logs [26-05-2022 10:21:01]7281: WAF :: fetched 1 new logs [26-05-2022 10:29:01]29130: WAF :: fetched 1 new logs [26-05-2022 10:31:02]2639: WAF :: fetched 1 new logs [26-05-2022 10:34:02]10814: WAF :: fetched 2 new logs [26-05-2022 10:35:01]13527: WAF :: fetched 3 new logs [26-05-2022 10:36:02]16456: WAF :: fetched 4 new logs [26-05-2022 10:37:01]19252: WAF :: fetched 2 new logs [26-05-2022 10:38:02]22062: WAF :: fetched 2 new logs [26-05-2022 10:39:02]24733: WAF :: fetched 6 new logs [26-05-2022 10:40:01]27514: WAF :: fetched 1 new logs [26-05-2022 10:41:02]30459: WAF :: fetched 9 new logs [26-05-2022 10:41:02]30459: Checking for user cron vulnerabilities [26-05-2022 10:42:01]631: WAF :: fetched 4 new logs [26-05-2022 10:43:02]3705: WAF :: fetched 3 new logs [26-05-2022 10:44:01]6442: Checking ditributed CMS bruteforce attacks [26-05-2022 10:44:01]6442: WAF :: fetched 1 new logs [26-05-2022 10:46:02]12040: WAF :: fetched 1 new logs [26-05-2022 10:47:02]14738: WAF :: fetched 1 new logs [26-05-2022 10:51:01]25854: WAF :: fetched 1 new logs [26-05-2022 10:52:02]28620: WAF :: fetched 70 new logs [26-05-2022 10:53:01]31384: WAF :: fetched 1 new logs [26-05-2022 10:54:02]1803: WAF :: fetched 6 new logs [26-05-2022 10:55:01]4614: WAF :: fetched 3 new logs [26-05-2022 10:57:01]10240: WAF :: fetched 3 new logs [26-05-2022 10:58:01]12964: WAF :: fetched 2 new logs [26-05-2022 10:59:02]15708: WAF :: fetched 1 new logs [26-05-2022 11:00:02]18107: WAF :: fetched 1 new logs [26-05-2022 11:01:01]21384: WAF :: fetched 1 new logs [26-05-2022 11:02:02]24148: WAF :: fetched 1 new logs [26-05-2022 11:03:02]26865: WAF :: fetched 1 new logs [26-05-2022 11:04:01]29624: WAF :: fetched 4 new logs [26-05-2022 11:05:02]32389: WAF :: fetched 2 new logs [26-05-2022 11:06:02]2931: WAF :: fetched 4 new logs [26-05-2022 11:07:01]5722: WAF :: fetched 2 new logs [26-05-2022 11:07:51]5878: Performed RBL check for 23.111.136.34. [26-05-2022 11:08:02]8468: WAF :: fetched 1 new logs [26-05-2022 11:10:02]13972: WAF :: fetched 1 new logs [26-05-2022 11:11:02]16942: WAF :: fetched 15 new logs [26-05-2022 11:12:02]19729: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653574322 [26-05-2022 11:12:02]19729: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 11:12:04]19729: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 11:12:04]19729: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-1112/20220526-111202-Yo-KsnLWBOeYyCiKMJP8PgAAAAk [26-05-2022 11:12:04]19729: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 11:12:04]19729: WAF :: fetched 2 new logs [26-05-2022 11:13:01]22382: WAF :: fetched 4 new logs [26-05-2022 11:14:02]25264: WAF :: fetched 1 new logs [26-05-2022 11:16:02]30939: WAF :: fetched 9 new logs [26-05-2022 11:17:01]1263: WAF :: fetched 8 new logs [26-05-2022 11:18:01]4069: WAF :: fetched 7 new logs [26-05-2022 11:19:01]6774: WAF :: fetched 1 new logs [26-05-2022 11:20:02]9527: WAF :: fetched 2 new logs [26-05-2022 11:21:01]12410: WAF :: fetched 1 new logs [26-05-2022 11:22:02]15146: WAF :: fetched 1 new logs [26-05-2022 11:26:01]26120: WAF :: fetched 1 new logs [26-05-2022 11:27:01]28872: WAF :: fetched 1 new logs [26-05-2022 11:28:02]31631: WAF :: fetched 1 new logs [26-05-2022 11:29:01]1999: WAF :: fetched 8 new logs [26-05-2022 11:30:02]4851: WAF :: fetched 2 new logs [26-05-2022 11:32:01]10419: WAF :: fetched 6 new logs [26-05-2022 11:33:01]13216: WAF :: fetched 1 new logs [26-05-2022 11:35:02]18680: WAF :: fetched 5 new logs [26-05-2022 11:36:02]21505: WAF :: fetched 2 new logs [26-05-2022 11:37:01]24252: WAF :: fetched 2 new logs [26-05-2022 11:38:02]26972: WAF :: fetched 1 new logs [26-05-2022 11:39:01]29772: WAF :: fetched 1 new logs [26-05-2022 11:41:01]3200: Checking for user cron vulnerabilities [26-05-2022 11:41:02]3201: httpd.conf changed. Refreshing watchlist. [26-05-2022 11:43:02]8807: WAF :: fetched 1 new logs [26-05-2022 11:44:01]11588: Checking ditributed CMS bruteforce attacks [26-05-2022 11:46:02]17340: WAF :: fetched 1 new logs [26-05-2022 11:46:02]17343: httpd.conf changed. Refreshing watchlist. [26-05-2022 11:47:02]20071: WAF :: fetched 1 new logs [26-05-2022 11:48:02]22814: WAF :: fetched 2 new logs [26-05-2022 11:55:01]10056: WAF :: fetched 3 new logs [26-05-2022 11:58:01]18496: WAF :: fetched 1 new logs [26-05-2022 11:59:01]21284: WAF :: fetched 2 new logs [26-05-2022 12:01:02]27060: WAF :: fetched 2 new logs [26-05-2022 12:02:01]29833: WAF :: fetched 3 new logs [26-05-2022 12:04:01]3056: WAF :: fetched 3 new logs [26-05-2022 12:08:02]14289: WAF :: fetched 2 new logs [26-05-2022 12:10:01]19774: WAF :: fetched 1 new logs [26-05-2022 12:11:02]22623: WAF :: fetched 1 new logs [26-05-2022 12:12:02]25521: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653577922 [26-05-2022 12:12:02]25521: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 12:12:04]25521: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 12:12:04]25521: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-1212/20220526-121202-Yo-YwqhkQc_CGwHqSm6yCwAAAAw [26-05-2022 12:12:04]25521: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 12:14:02]31593: WAF :: fetched 2 new logs [26-05-2022 12:16:02]4876: WAF :: fetched 2 new logs [26-05-2022 12:17:02]7623: WAF :: fetched 3 new logs [26-05-2022 12:21:02]18643: WAF :: fetched 2 new logs [26-05-2022 12:22:01]21351: WAF :: fetched 9 new logs [26-05-2022 12:23:02]24082: WAF :: fetched 2 new logs [26-05-2022 12:24:02]26785: WAF :: fetched 2 new logs [26-05-2022 12:25:01]29497: WAF :: fetched 2 new logs [26-05-2022 12:26:02]32351: WAF :: fetched 1 new logs [26-05-2022 12:27:01]2770: WAF :: fetched 7 new logs [26-05-2022 12:28:02]5531: WAF :: fetched 47 new logs [26-05-2022 12:29:01]8169: WAF :: fetched 51 new logs [26-05-2022 12:30:01]10867: WAF :: fetched 53 new logs [26-05-2022 12:31:02]13737: WAF :: fetched 49 new logs [26-05-2022 12:32:01]16436: WAF :: fetched 63 new logs [26-05-2022 12:33:02]19170: WAF :: fetched 54 new logs [26-05-2022 12:34:01]21879: WAF :: fetched 53 new logs [26-05-2022 12:35:02]24593: WAF :: fetched 41 new logs [26-05-2022 12:36:01]27433: WAF :: fetched 46 new logs [26-05-2022 12:37:02]30151: WAF :: fetched 57 new logs [26-05-2022 12:38:01]380: WAF :: fetched 39 new logs [26-05-2022 12:39:01]3237: WAF :: fetched 7 new logs [26-05-2022 12:41:01]8847: Checking for user cron vulnerabilities [26-05-2022 12:43:01]14252: WAF :: fetched 1 new logs [26-05-2022 12:44:02]17018: Checking ditributed CMS bruteforce attacks [26-05-2022 12:45:01]: Checking for software updates [26-05-2022 12:45:02]19735: WAF :: fetched 7 new logs [26-05-2022 12:46:01]22554: WAF :: fetched 8 new logs [26-05-2022 12:47:02]25336: WAF :: fetched 33 new logs [26-05-2022 12:48:02]28052: WAF :: fetched 5 new logs [26-05-2022 12:49:01]30777: WAF :: fetched 46 new logs [26-05-2022 12:50:01]1133: WAF :: fetched 42 new logs [26-05-2022 12:51:02]4150: WAF :: fetched 16 new logs [26-05-2022 12:52:01]6831: WAF :: fetched 2 new logs [26-05-2022 12:54:01]12231: WAF :: fetched 29 new logs [26-05-2022 12:55:01]14982: WAF :: fetched 31 new logs [26-05-2022 12:57:02]20614: WAF :: fetched 18 new logs [26-05-2022 12:58:02]23323: WAF :: fetched 40 new logs [26-05-2022 12:59:01]26061: WAF :: fetched 3 new logs [26-05-2022 13:00:02]28539: WAF :: fetched 1 new logs [26-05-2022 13:03:02]5143: WAF :: fetched 1 new logs [26-05-2022 13:06:02]13619: WAF :: fetched 1 new logs [26-05-2022 13:08:02]19165: WAF :: fetched 1 new logs [26-05-2022 13:10:01]24648: WAF :: fetched 1 new logs [26-05-2022 13:12:01]30259: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653581521 [26-05-2022 13:12:01]30259: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 13:12:03]30259: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 13:12:03]30259: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-1312/20220526-131201-Yo-m0cEffXPKvAoiLhwnDQAAACU [26-05-2022 13:12:03]30259: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 13:12:04]30259: WAF :: fetched 1 new logs [26-05-2022 13:13:02]610: WAF :: fetched 3 new logs [26-05-2022 13:15:01]6220: WAF :: fetched 4 new logs [26-05-2022 13:16:01]9131: WAF :: fetched 2 new logs [26-05-2022 13:17:01]11898: WAF :: fetched 1 new logs [26-05-2022 13:18:01]14668: WAF :: fetched 1 new logs [26-05-2022 13:21:01]23109: WAF :: fetched 3 new logs [26-05-2022 13:22:02]25909: WAF :: fetched 3 new logs [26-05-2022 13:23:01]28507: WAF :: fetched 3 new logs [26-05-2022 13:24:02]31457: WAF :: fetched 1 new logs [26-05-2022 13:28:01]10207: WAF :: fetched 1 new logs [26-05-2022 13:31:01]18638: WAF :: fetched 1 new logs [26-05-2022 13:35:01]29872: WAF :: fetched 1 new logs [26-05-2022 13:36:01]378: WAF :: fetched 3 new logs [26-05-2022 13:37:02]3296: WAF :: fetched 3 new logs [26-05-2022 13:38:01]6088: WAF :: fetched 2 new logs [26-05-2022 13:39:02]9008: WAF :: fetched 1 new logs [26-05-2022 13:39:02]9007: httpd.conf changed. Refreshing watchlist. [26-05-2022 13:40:01]11889: WAF :: fetched 1 new logs [26-05-2022 13:40:01]11878: httpd.conf changed. Refreshing watchlist. [26-05-2022 13:41:02]14938: WAF :: fetched 2 new logs [26-05-2022 13:41:02]14938: Checking for user cron vulnerabilities [26-05-2022 13:44:02]23355: Checking ditributed CMS bruteforce attacks [26-05-2022 13:44:02]23355: WAF :: fetched 1 new logs [26-05-2022 13:44:02]23356: httpd.conf changed. Refreshing watchlist. [26-05-2022 13:45:01]: Checking for definition updates [26-05-2022 13:45:01]26210: WAF :: fetched 3 new logs [26-05-2022 13:46:01]29159: WAF :: fetched 3 new logs [26-05-2022 13:47:02]31993: WAF :: fetched 1 new logs [26-05-2022 13:48:01]2480: WAF :: fetched 1 new logs [26-05-2022 13:49:02]5312: WAF :: fetched 2 new logs [26-05-2022 13:51:01]10987: WAF :: fetched 1 new logs [26-05-2022 13:54:01]19181: WAF :: fetched 3 new logs [26-05-2022 13:55:02]22097: WAF :: fetched 3 new logs [26-05-2022 13:56:02]24919: WAF :: fetched 2 new logs [26-05-2022 13:57:01]27696: WAF :: fetched 2 new logs [26-05-2022 13:58:01]30572: WAF :: fetched 1 new logs [26-05-2022 13:59:02]981: WAF :: fetched 2 new logs [26-05-2022 14:00:01]3550: WAF :: fetched 4 new logs [26-05-2022 14:01:01]6932: WAF :: fetched 1 new logs [26-05-2022 14:02:02]9772: WAF :: fetched 3 new logs [26-05-2022 14:03:02]12538: WAF :: fetched 3 new logs [26-05-2022 14:04:02]15305: WAF :: fetched 3 new logs [26-05-2022 14:05:01]18055: WAF :: fetched 7 new logs [26-05-2022 14:07:01]23672: WAF :: fetched 1 new logs [26-05-2022 14:08:02]26487: WAF :: fetched 1 new logs [26-05-2022 14:12:01]5364: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653585121 [26-05-2022 14:12:02]5364: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 14:12:04]5364: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 14:12:04]5364: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-1412/20220526-141202-Yo-04oCHibovFh-UCJU9fQAAAAE [26-05-2022 14:12:04]5364: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 14:12:04]5364: WAF :: fetched 1 new logs [26-05-2022 14:13:02]8164: WAF :: fetched 1 new logs [26-05-2022 14:14:01]10881: WAF :: fetched 1 new logs [26-05-2022 14:16:02]16608: WAF :: fetched 4 new logs [26-05-2022 14:17:02]19396: WAF :: fetched 2 new logs [26-05-2022 14:19:02]24946: WAF :: fetched 3 new logs [26-05-2022 14:21:02]30692: WAF :: fetched 2 new logs [26-05-2022 14:22:01]1108: WAF :: fetched 1 new logs [26-05-2022 14:23:02]3978: WAF :: fetched 2 new logs [26-05-2022 14:24:02]6721: WAF :: fetched 3 new logs [26-05-2022 14:25:02]9596: WAF :: fetched 3 new logs [26-05-2022 14:26:02]12575: WAF :: fetched 3 new logs [26-05-2022 14:27:01]15372: WAF :: fetched 3 new logs [26-05-2022 14:28:02]18138: WAF :: fetched 1 new logs [26-05-2022 14:29:01]20949: WAF :: fetched 3 new logs [26-05-2022 14:30:02]23793: WAF :: fetched 1 new logs [26-05-2022 14:31:02]26713: WAF :: fetched 2 new logs [26-05-2022 14:32:01]29497: WAF :: fetched 3 new logs [26-05-2022 14:33:02]32266: WAF :: fetched 2 new logs [26-05-2022 14:34:02]2749: WAF :: fetched 1 new logs [26-05-2022 14:35:01]5486: WAF :: fetched 2 new logs [26-05-2022 14:36:02]8401: WAF :: fetched 6 new logs [26-05-2022 14:37:02]11151: WAF :: fetched 2 new logs [26-05-2022 14:38:01]13917: WAF :: fetched 3 new logs [26-05-2022 14:39:02]16699: WAF :: fetched 5 new logs [26-05-2022 14:40:01]19494: WAF :: fetched 3 new logs [26-05-2022 14:41:01]22340: WAF :: fetched 2 new logs [26-05-2022 14:41:01]22340: Checking for user cron vulnerabilities [26-05-2022 14:42:02]25160: WAF :: fetched 3 new logs [26-05-2022 14:44:02]30716: Checking ditributed CMS bruteforce attacks [26-05-2022 14:44:02]30716: WAF :: fetched 1 new logs [26-05-2022 14:45:02]1139: WAF :: fetched 1 new logs [26-05-2022 14:46:01]4133: WAF :: fetched 1 new logs [26-05-2022 14:47:01]7009: WAF :: fetched 2 new logs [26-05-2022 14:48:01]9809: WAF :: fetched 1 new logs [26-05-2022 14:49:02]12532: WAF :: fetched 1 new logs [26-05-2022 14:50:01]15265: WAF :: fetched 2 new logs [26-05-2022 14:51:01]18114: WAF :: fetched 4 new logs [26-05-2022 14:52:01]20949: WAF :: fetched 2 new logs [26-05-2022 14:53:02]23783: WAF :: fetched 3 new logs [26-05-2022 14:53:03]23787: Updated license status via CDN [26-05-2022 14:54:01]26478: WAF :: fetched 2 new logs [26-05-2022 14:55:02]29305: WAF :: fetched 2 new logs [26-05-2022 15:01:02]13880: Reseting cPGuard inotify settings [26-05-2022 15:12:02]12571: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653588722 [26-05-2022 15:12:02]12571: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 15:12:04]12571: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 15:12:04]12571: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-1512/20220526-151202-Yo_C8gbRMRX-KAGs6oLP2AAAAAo [26-05-2022 15:12:04]12571: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 15:41:01]29458: Checking for user cron vulnerabilities [26-05-2022 15:44:01]5662: Checking ditributed CMS bruteforce attacks [26-05-2022 16:12:02]19913: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653592322 [26-05-2022 16:12:02]19913: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 16:12:04]19913: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 16:12:04]19913: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-1612/20220526-161202-Yo_RAu1HjDzIlB7RfJeFogAAAA8 [26-05-2022 16:12:04]19913: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 16:41:01]4860: Checking for user cron vulnerabilities [26-05-2022 16:44:01]13301: Checking ditributed CMS bruteforce attacks [26-05-2022 17:12:01]26827: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653595921 [26-05-2022 17:12:01]26827: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 17:12:03]26827: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 17:12:03]26827: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-1712/20220526-171201-Yo_fEc0jkAUJ4_gvH3CZrgAAAAk [26-05-2022 17:12:03]26827: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 17:41:02]10150: Checking for user cron vulnerabilities [26-05-2022 17:44:01]18370: Checking ditributed CMS bruteforce attacks [26-05-2022 18:12:01]30980: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653599521 [26-05-2022 18:12:01]30980: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 18:12:03]30980: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 18:12:04]30980: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-1812/20220526-181201-Yo_tITIMgGv_qO-1Uw6FFAAAAAY [26-05-2022 18:12:04]30980: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 18:41:01]13597: Checking for user cron vulnerabilities [26-05-2022 18:44:02]21865: Checking ditributed CMS bruteforce attacks [26-05-2022 19:12:02]1623: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653603122 [26-05-2022 19:12:02]1623: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 19:12:04]1623: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 19:12:04]1623: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-1912/20220526-191202-Yo_7MjLQS1_8axsoDrUBYwAAAAk [26-05-2022 19:12:04]1623: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 19:35:01]31834: WAF :: fetched 1 new logs [26-05-2022 19:36:01]2232: WAF :: fetched 1 new logs [26-05-2022 19:38:01]7719: WAF :: fetched 1 new logs [26-05-2022 19:39:02]10445: WAF :: fetched 3 new logs [26-05-2022 19:40:02]13132: WAF :: fetched 3 new logs [26-05-2022 19:41:01]15857: Checking for user cron vulnerabilities [26-05-2022 19:42:02]18629: WAF :: fetched 1 new logs [26-05-2022 19:43:01]21293: WAF :: fetched 2 new logs [26-05-2022 19:44:01]23954: Checking ditributed CMS bruteforce attacks [26-05-2022 19:45:01]: Checking for definition updates [26-05-2022 19:45:02]26672: WAF :: fetched 3 new logs [26-05-2022 19:46:01]29430: WAF :: fetched 5 new logs [26-05-2022 19:47:02]32214: WAF :: fetched 1 new logs [26-05-2022 19:48:01]2273: WAF :: fetched 2 new logs [26-05-2022 19:49:02]5327: WAF :: fetched 3 new logs [26-05-2022 19:55:01]21613: WAF :: fetched 1 new logs [26-05-2022 19:57:01]26661: WAF :: fetched 4 new logs [26-05-2022 19:59:02]32582: WAF :: fetched 1 new logs [26-05-2022 20:00:01]2712: WAF :: fetched 1 new logs [26-05-2022 20:04:01]14292: WAF :: fetched 1 new logs [26-05-2022 20:05:01]17057: WAF :: fetched 2 new logs [26-05-2022 20:06:02]19913: WAF :: fetched 3 new logs [26-05-2022 20:07:01]22470: WAF :: fetched 3 new logs [26-05-2022 20:08:02]25351: WAF :: fetched 2 new logs [26-05-2022 20:11:02]1115: WAF :: fetched 2 new logs [26-05-2022 20:12:01]3869: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653606721 [26-05-2022 20:12:01]3869: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 20:12:03]3869: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 20:12:04]3869: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-2012/20220526-201201-YpAJQURyxVdBkpt2Qt8Y5gAAACI [26-05-2022 20:12:04]3869: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 20:12:04]3869: WAF :: fetched 2 new logs [26-05-2022 20:13:02]6631: WAF :: fetched 2 new logs [26-05-2022 20:15:01]11998: WAF :: fetched 1 new logs [26-05-2022 20:17:01]17439: WAF :: fetched 2 new logs [26-05-2022 20:20:02]25689: WAF :: fetched 1 new logs [26-05-2022 20:23:01]1493: WAF :: fetched 1 new logs [26-05-2022 20:25:02]7005: WAF :: fetched 2 new logs [26-05-2022 20:26:01]9749: WAF :: fetched 5 new logs [26-05-2022 20:27:01]12429: WAF :: fetched 5 new logs [26-05-2022 20:28:02]15241: WAF :: fetched 4 new logs [26-05-2022 20:29:01]17884: WAF :: fetched 2 new logs [26-05-2022 20:30:02]20561: WAF :: fetched 3 new logs [26-05-2022 20:31:01]23304: WAF :: fetched 2 new logs [26-05-2022 20:34:01]31542: WAF :: fetched 1 new logs [26-05-2022 20:36:01]4663: WAF :: fetched 1 new logs [26-05-2022 20:37:01]7331: WAF :: fetched 3 new logs [26-05-2022 20:38:02]10105: WAF :: fetched 3 new logs [26-05-2022 20:39:01]12770: WAF :: fetched 4 new logs [26-05-2022 20:40:02]15492: WAF :: fetched 1 new logs [26-05-2022 20:41:02]18192: WAF :: fetched 7 new logs [26-05-2022 20:41:02]18192: Checking for user cron vulnerabilities [26-05-2022 20:44:01]26387: Checking ditributed CMS bruteforce attacks [26-05-2022 20:44:01]26387: WAF :: fetched 2 new logs [26-05-2022 20:45:02]29128: WAF :: fetched 3 new logs [26-05-2022 20:46:02]31866: WAF :: fetched 5 new logs [26-05-2022 20:47:01]2208: WAF :: fetched 2 new logs [26-05-2022 20:48:02]5020: WAF :: fetched 4 new logs [26-05-2022 20:50:02]10431: WAF :: fetched 5 new logs [26-05-2022 20:51:01]13133: WAF :: fetched 1 new logs [26-05-2022 20:52:02]15822: WAF :: fetched 1 new logs [26-05-2022 20:55:02]24001: WAF :: fetched 2 new logs [26-05-2022 21:00:01]5146: WAF :: fetched 2 new logs [26-05-2022 21:01:02]8385: WAF :: fetched 3 new logs [26-05-2022 21:02:01]11041: WAF :: fetched 1 new logs [26-05-2022 21:03:02]13835: WAF :: fetched 1 new logs [26-05-2022 21:07:01]24721: WAF :: fetched 1 new logs [26-05-2022 21:12:01]6121: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653610321 [26-05-2022 21:12:01]6121: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 21:12:03]6121: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 21:12:04]6121: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-2112/20220526-211201-YpAXUUfBEc0SD4SShgPySAAAAAg [26-05-2022 21:12:04]6121: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 21:12:04]6121: WAF :: fetched 2 new logs [26-05-2022 21:13:02]8933: WAF :: fetched 1 new logs [26-05-2022 21:14:02]11628: WAF :: fetched 3 new logs [26-05-2022 21:15:01]14402: WAF :: fetched 3 new logs [26-05-2022 21:16:02]17184: WAF :: fetched 2 new logs [26-05-2022 21:17:01]19849: WAF :: fetched 1 new logs [26-05-2022 21:18:01]22685: WAF :: fetched 1 new logs [26-05-2022 21:22:01]1190: WAF :: fetched 2 new logs [26-05-2022 21:24:02]6822: WAF :: fetched 2 new logs [26-05-2022 21:25:01]9528: WAF :: fetched 3 new logs [26-05-2022 21:26:01]12272: WAF :: fetched 2 new logs [26-05-2022 21:28:02]17760: WAF :: fetched 2 new logs [26-05-2022 21:29:01]20430: WAF :: fetched 3 new logs [26-05-2022 21:30:02]23204: WAF :: fetched 2 new logs [26-05-2022 21:31:01]25949: WAF :: fetched 2 new logs [26-05-2022 21:32:01]28717: WAF :: fetched 2 new logs [26-05-2022 21:34:01]1898: WAF :: fetched 1 new logs [26-05-2022 21:35:01]4652: WAF :: fetched 1 new logs [26-05-2022 21:38:02]12884: WAF :: fetched 1 new logs [26-05-2022 21:41:02]20985: Checking for user cron vulnerabilities [26-05-2022 21:43:01]26435: WAF :: fetched 1 new logs [26-05-2022 21:44:01]29155: Checking ditributed CMS bruteforce attacks [26-05-2022 21:44:02]29155: WAF :: fetched 3 new logs [26-05-2022 21:45:01]31853: WAF :: fetched 3 new logs [26-05-2022 21:46:02]2287: WAF :: fetched 46 new logs [26-05-2022 21:47:02]4973: WAF :: fetched 96 new logs [26-05-2022 21:48:02]7783: WAF :: fetched 99 new logs [26-05-2022 21:49:01]10460: WAF :: fetched 93 new logs [26-05-2022 21:50:01]13178: WAF :: fetched 79 new logs [26-05-2022 21:51:02]15902: WAF :: fetched 37 new logs [26-05-2022 21:53:02]21349: WAF :: fetched 3 new logs [26-05-2022 21:54:01]24035: WAF :: fetched 2 new logs [26-05-2022 21:55:02]26746: WAF :: fetched 2 new logs [26-05-2022 21:56:02]29465: WAF :: fetched 1 new logs [26-05-2022 21:57:01]32140: WAF :: fetched 2 new logs [26-05-2022 21:58:02]2608: WAF :: fetched 1 new logs [26-05-2022 21:59:01]5242: WAF :: fetched 3 new logs [26-05-2022 22:00:02]7683: WAF :: fetched 5 new logs [26-05-2022 22:01:02]10849: WAF :: fetched 2 new logs [26-05-2022 22:02:01]13572: WAF :: fetched 1 new logs [26-05-2022 22:04:01]19024: WAF :: fetched 1 new logs [26-05-2022 22:07:02]27137: WAF :: fetched 1 new logs [26-05-2022 22:07:08]27138: Performing Domain reputation checks [26-05-2022 22:10:02]2927: WAF :: fetched 1 new logs [26-05-2022 22:12:01]8346: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653613921 [26-05-2022 22:12:01]8346: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 22:12:03]8346: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 22:12:03]8346: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-2212/20220526-221201-YpAlYZIHzrQ12PDEO2RQ1QAAABY [26-05-2022 22:12:03]8346: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 22:12:04]8346: WAF :: fetched 3 new logs [26-05-2022 22:13:02]11139: WAF :: fetched 1 new logs [26-05-2022 22:14:01]13779: WAF :: fetched 2 new logs [26-05-2022 22:15:02]16469: WAF :: fetched 1 new logs [26-05-2022 22:16:01]19143: WAF :: fetched 3 new logs [26-05-2022 22:17:02]21846: WAF :: fetched 4 new logs [26-05-2022 22:18:02]24574: WAF :: fetched 1 new logs [26-05-2022 22:26:01]13842: WAF :: fetched 1 new logs [26-05-2022 22:27:02]16510: WAF :: fetched 4 new logs [26-05-2022 22:28:01]19252: WAF :: fetched 1 new logs [26-05-2022 22:34:02]3212: WAF :: fetched 1 new logs [26-05-2022 22:36:01]8639: WAF :: fetched 4 new logs [26-05-2022 22:37:01]11446: WAF :: fetched 2 new logs [26-05-2022 22:39:02]16862: WAF :: fetched 1 new logs [26-05-2022 22:40:02]19547: WAF :: fetched 3 new logs [26-05-2022 22:41:02]22283: WAF :: fetched 5 new logs [26-05-2022 22:41:02]22283: Checking for user cron vulnerabilities [26-05-2022 22:42:01]24925: WAF :: fetched 4 new logs [26-05-2022 22:43:01]27652: WAF :: fetched 4 new logs [26-05-2022 22:44:01]30349: Checking ditributed CMS bruteforce attacks [26-05-2022 22:44:02]30349: WAF :: fetched 2 new logs [26-05-2022 22:46:02]3459: WAF :: fetched 2 new logs [26-05-2022 22:50:01]14272: WAF :: fetched 2 new logs [26-05-2022 22:51:02]17024: WAF :: fetched 2 new logs [26-05-2022 22:53:01]22480: WAF :: fetched 1 new logs [26-05-2022 22:55:01]27850: WAF :: fetched 1 new logs [26-05-2022 22:58:02]3828: WAF :: fetched 2 new logs [26-05-2022 22:59:01]6567: WAF :: fetched 44 new logs [26-05-2022 23:00:02]9002: WAF :: fetched 120 new logs [26-05-2022 23:01:02]12201: WAF :: fetched 85 new logs [26-05-2022 23:02:01]15007: WAF :: fetched 48 new logs [26-05-2022 23:03:02]17899: WAF :: fetched 56 new logs [26-05-2022 23:04:01]20672: WAF :: fetched 55 new logs [26-05-2022 23:05:02]23495: WAF :: fetched 66 new logs [26-05-2022 23:06:02]26259: WAF :: fetched 70 new logs [26-05-2022 23:07:01]29052: WAF :: fetched 23 new logs [26-05-2022 23:07:44]29210: Performed RBL check for 23.111.136.34. [26-05-2022 23:08:02]31862: WAF :: fetched 3 new logs [26-05-2022 23:09:02]2203: WAF :: fetched 2 new logs [26-05-2022 23:10:02]5013: WAF :: fetched 1 new logs [26-05-2022 23:12:01]10481: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653617521 [26-05-2022 23:12:01]10481: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-05-2022 23:12:03]10481: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-05-2022 23:12:03]10481: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220526/20220526-2312/20220526-231201-YpAzcVT6wVOWmRkrkdiw2AAAACE [26-05-2022 23:12:03]10481: WAF :: No suitable log file found. Using SQLite.. [26-05-2022 23:12:04]10481: WAF :: fetched 6 new logs [26-05-2022 23:14:01]16007: WAF :: fetched 1 new logs [26-05-2022 23:15:02]18715: WAF :: fetched 1 new logs [26-05-2022 23:16:02]21473: WAF :: fetched 1 new logs [26-05-2022 23:17:01]24170: WAF :: fetched 1 new logs [26-05-2022 23:18:02]26981: WAF :: fetched 1 new logs [26-05-2022 23:19:01]29700: WAF :: fetched 2 new logs [26-05-2022 23:20:02]32465: WAF :: fetched 2 new logs [26-05-2022 23:23:02]8422: WAF :: fetched 1 new logs [26-05-2022 23:24:01]11128: WAF :: fetched 1 new logs [26-05-2022 23:25:01]13841: WAF :: fetched 2 new logs [26-05-2022 23:33:01]3521: WAF :: fetched 1 new logs [26-05-2022 23:34:01]6225: WAF :: fetched 1 new logs [26-05-2022 23:36:01]11732: WAF :: fetched 1 new logs [26-05-2022 23:40:02]22634: WAF :: fetched 1 new logs [26-05-2022 23:41:01]24972: Checking for user cron vulnerabilities [26-05-2022 23:43:01]30850: WAF :: fetched 3 new logs [26-05-2022 23:44:02]1187: Checking ditributed CMS bruteforce attacks [26-05-2022 23:45:02]3936: WAF :: fetched 1 new logs [26-05-2022 23:46:01]6665: WAF :: fetched 1 new logs [26-05-2022 23:47:02]9407: WAF :: fetched 2 new logs [26-05-2022 23:50:01]17632: WAF :: fetched 1 new logs [26-05-2022 23:54:02]28800: httpd.conf changed. Refreshing watchlist. [26-05-2022 23:56:01]1975: httpd.conf changed. Refreshing watchlist. [26-05-2022 23:57:02]4771: WAF :: fetched 1 new logs [26-05-2022 23:58:01]7599: httpd.conf changed. Refreshing watchlist. [27-05-2022 00:01:01]16172: httpd.conf changed. Refreshing watchlist. [27-05-2022 00:01:03]16174: Sending daily report for May 27, 2022 [27-05-2022 00:05:01]27243: Deleted 0 entries older than 6 MONTH from scanner_logs [27-05-2022 00:05:01]27243: Deleted 0 files from Quarantine [27-05-2022 00:07:01]32741: WAF :: fetched 2 new logs [27-05-2022 00:08:02]3241: WAF :: fetched 2 new logs [27-05-2022 00:09:01]5927: WAF :: fetched 3 new logs [27-05-2022 00:10:01]8654: WAF :: fetched 1 new logs [27-05-2022 00:11:02]11408: WAF :: fetched 3 new logs [27-05-2022 00:12:01]14106: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653621121 [27-05-2022 00:12:01]14106: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 00:12:03]14106: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 00:12:03]14106: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-0012/20220527-001201-YpBBgY34trnaPanpcUYrwQAAAB8 [27-05-2022 00:12:03]14106: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [27-05-2022 00:12:04]14106: WAF :: fetched 1 new logs [27-05-2022 00:13:02]16917: WAF :: fetched 6 new logs [27-05-2022 00:15:02]22349: WAF :: fetched 10 new logs [27-05-2022 00:16:01]25110: WAF :: fetched 8 new logs [27-05-2022 00:17:01]27759: WAF :: fetched 2 new logs [27-05-2022 00:18:02]30576: WAF :: fetched 2 new logs [27-05-2022 00:20:02]3739: WAF :: fetched 4 new logs [27-05-2022 00:21:01]6442: WAF :: fetched 2 new logs [27-05-2022 00:23:01]11937: WAF :: fetched 3 new logs [27-05-2022 00:24:02]14626: WAF :: fetched 2 new logs [27-05-2022 00:25:01]17356: WAF :: fetched 6 new logs [27-05-2022 00:26:02]20154: WAF :: fetched 3 new logs [27-05-2022 00:29:01]28262: WAF :: fetched 4 new logs [27-05-2022 00:30:01]30972: WAF :: fetched 1 new logs [27-05-2022 00:36:02]15014: WAF :: fetched 4 new logs [27-05-2022 00:37:01]17688: WAF :: fetched 4 new logs [27-05-2022 00:38:01]20446: WAF :: fetched 3 new logs [27-05-2022 00:39:01]23116: WAF :: fetched 3 new logs [27-05-2022 00:40:02]25806: WAF :: fetched 2 new logs [27-05-2022 00:41:02]28536: WAF :: fetched 3 new logs [27-05-2022 00:41:02]28536: Checking for user cron vulnerabilities [27-05-2022 00:43:01]1555: WAF :: fetched 1 new logs [27-05-2022 00:44:01]4336: Checking ditributed CMS bruteforce attacks [27-05-2022 00:45:01]: Checking for software updates [27-05-2022 00:45:01]6973: WAF :: fetched 1 new logs [27-05-2022 00:51:02]23213: WAF :: fetched 3 new logs [27-05-2022 00:52:01]25864: WAF :: fetched 3 new logs [27-05-2022 00:53:02]28666: WAF :: fetched 1 new logs [27-05-2022 00:56:01]4389: WAF :: fetched 1 new logs [27-05-2022 01:00:02]14799: WAF :: fetched 1 new logs [27-05-2022 01:04:02]27666: WAF :: fetched 1 new logs [27-05-2022 01:06:01]1130: WAF :: fetched 2 new logs [27-05-2022 01:07:02]4140: WAF :: fetched 3 new logs [27-05-2022 01:08:01]6768: WAF :: fetched 2 new logs [27-05-2022 01:10:01]12438: WAF :: fetched 4 new logs [27-05-2022 01:11:01]15331: WAF :: fetched 3 new logs [27-05-2022 01:12:02]18008: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653624722 [27-05-2022 01:12:02]18008: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 01:12:04]18008: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 01:12:04]18008: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-0112/20220527-011202-YpBPkpSWaY2hbyOeWZDhSgAAAAM [27-05-2022 01:12:04]18008: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 01:12:04]18008: WAF :: fetched 61 new logs [27-05-2022 01:13:01]20808: WAF :: fetched 3 new logs [27-05-2022 01:14:01]23861: WAF :: fetched 3 new logs [27-05-2022 01:16:02]29315: WAF :: fetched 1 new logs [27-05-2022 01:18:02]2907: WAF :: fetched 1 new logs [27-05-2022 01:22:02]14329: WAF :: fetched 1 new logs [27-05-2022 01:23:01]17186: WAF :: fetched 1 new logs [27-05-2022 01:24:02]20134: WAF :: fetched 4 new logs [27-05-2022 01:26:02]26046: WAF :: fetched 1 new logs [27-05-2022 01:27:01]28716: WAF :: fetched 2 new logs [27-05-2022 01:28:02]31745: WAF :: fetched 1 new logs [27-05-2022 01:33:02]13827: WAF :: fetched 1 new logs [27-05-2022 01:34:01]17121: WAF :: fetched 1 new logs [27-05-2022 01:39:02]31727: WAF :: fetched 1 new logs [27-05-2022 01:41:02]5104: Checking for user cron vulnerabilities [27-05-2022 01:44:01]13612: Checking ditributed CMS bruteforce attacks [27-05-2022 01:45:02]: Checking for definition updates [27-05-2022 01:48:02]24481: WAF :: fetched 1 new logs [27-05-2022 01:50:02]30153: WAF :: fetched 1 new logs [27-05-2022 01:52:02]3438: WAF :: fetched 3 new logs [27-05-2022 01:53:02]6097: WAF :: fetched 2 new logs [27-05-2022 01:54:01]8851: WAF :: fetched 1 new logs [27-05-2022 01:59:02]22304: WAF :: fetched 1 new logs [27-05-2022 02:01:01]27812: WAF :: fetched 1 new logs [27-05-2022 02:03:01]824: WAF :: fetched 1 new logs [27-05-2022 02:04:02]3672: WAF :: fetched 2 new logs [27-05-2022 02:08:02]14396: WAF :: fetched 1 new logs [27-05-2022 02:10:01]19792: WAF :: fetched 1 new logs [27-05-2022 02:11:02]22523: WAF :: fetched 1 new logs [27-05-2022 02:12:01]25156: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653628321 [27-05-2022 02:12:01]25156: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 02:12:03]25156: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 02:12:04]25156: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-0212/20220527-021201-YpBdoTmlvDWq1NC6wqE36QAAAAA [27-05-2022 02:12:04]25156: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 02:12:04]25156: WAF :: fetched 1 new logs [27-05-2022 02:16:02]3643: WAF :: fetched 2 new logs [27-05-2022 02:26:01]30622: WAF :: fetched 1 new logs [27-05-2022 02:31:01]11706: WAF :: fetched 1 new logs [27-05-2022 02:34:01]19831: WAF :: fetched 1 new logs [27-05-2022 02:35:02]22874: WAF :: fetched 1 new logs [27-05-2022 02:36:01]26192: WAF :: fetched 13 new logs [27-05-2022 02:37:02]29344: WAF :: fetched 18 new logs [27-05-2022 02:39:01]2535: WAF :: fetched 1 new logs [27-05-2022 02:41:01]8018: WAF :: fetched 1 new logs [27-05-2022 02:41:01]8018: Checking for user cron vulnerabilities [27-05-2022 02:42:02]10819: WAF :: fetched 2 new logs [27-05-2022 02:44:02]16409: Checking ditributed CMS bruteforce attacks [27-05-2022 02:44:02]16409: WAF :: fetched 1 new logs [27-05-2022 02:47:02]24656: WAF :: fetched 2 new logs [27-05-2022 02:49:01]30458: WAF :: fetched 1 new logs [27-05-2022 02:53:02]9466: Updated license status via CDN [27-05-2022 02:54:01]12186: WAF :: fetched 1 new logs [27-05-2022 02:56:01]18097: WAF :: fetched 1 new logs [27-05-2022 03:00:02]29008: WAF :: fetched 1 new logs [27-05-2022 03:00:03]29008: Found and updated 29 CMS installations [27-05-2022 03:01:01]32322: WAF :: fetched 1 new logs [27-05-2022 03:02:13]29008: Sending CMS version vulnerability report emails to cpanel users [27-05-2022 03:02:16]29008: Checking wordpress installations for suspicious directories [27-05-2022 03:04:14]5887: Sending CMS version vulnerability report emails to cpanel users [27-05-2022 03:04:17]5887: Checking wordpress installations for suspicious directories [27-05-2022 03:06:02]15084: WAF :: fetched 1 new logs [27-05-2022 03:07:01]17714: WAF :: fetched 1 new logs [27-05-2022 03:08:02]20456: WAF :: fetched 1 new logs [27-05-2022 03:09:01]23338: WAF :: fetched 7 new logs [27-05-2022 03:10:01]26152: WAF :: fetched 20 new logs [27-05-2022 03:12:01]31870: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653631921 [27-05-2022 03:12:01]31870: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 03:12:03]31870: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 03:12:04]31870: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-0312/20220527-031201-YpBrsbIuKIqOQgdR2Jd9lgAAAAE [27-05-2022 03:12:04]31870: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 03:12:04]31870: WAF :: fetched 2 new logs [27-05-2022 03:19:01]16432: WAF :: fetched 2 new logs [27-05-2022 03:21:02]18598: WAF :: fetched 1 new logs [27-05-2022 03:23:01]31216: WAF :: fetched 1 new logs [27-05-2022 03:24:01]1570: WAF :: fetched 1 new logs [27-05-2022 03:25:02]4336: WAF :: fetched 1 new logs [27-05-2022 03:28:01]12338: WAF :: fetched 1 new logs [27-05-2022 03:32:01]23121: WAF :: fetched 1 new logs [27-05-2022 03:36:02]1530: WAF :: fetched 1 new logs [27-05-2022 03:38:02]6917: WAF :: fetched 1 new logs [27-05-2022 03:40:02]12323: WAF :: fetched 1 new logs [27-05-2022 03:41:01]15037: Checking for user cron vulnerabilities [27-05-2022 03:44:01]23061: Checking ditributed CMS bruteforce attacks [27-05-2022 03:47:02]31090: WAF :: fetched 4 new logs [27-05-2022 03:50:02]6900: WAF :: fetched 4 new logs [27-05-2022 03:51:01]9602: WAF :: fetched 3 new logs [27-05-2022 03:52:02]12270: WAF :: fetched 1 new logs [27-05-2022 03:54:02]17675: WAF :: fetched 2 new logs [27-05-2022 03:55:02]20333: WAF :: fetched 6 new logs [27-05-2022 03:56:01]23015: WAF :: fetched 9 new logs [27-05-2022 03:57:02]25680: WAF :: fetched 5 new logs [27-05-2022 04:08:02]23141: WAF :: fetched 1 new logs [27-05-2022 04:10:02]28567: WAF :: fetched 4 new logs [27-05-2022 04:12:02]1541: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653635522 [27-05-2022 04:12:02]1541: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 04:12:04]1541: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 04:12:04]1541: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-0412/20220527-041202-YpB5wmNJsV1qH1gOpbEwxQAAAAA [27-05-2022 04:12:04]1541: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [27-05-2022 04:12:04]1541: WAF :: fetched 1 new logs [27-05-2022 04:13:01]4231: WAF :: fetched 2 new logs [27-05-2022 04:15:02]9488: WAF :: fetched 3 new logs [27-05-2022 04:17:02]14669: WAF :: fetched 1 new logs [27-05-2022 04:18:02]16863: WAF :: fetched 4 new logs [27-05-2022 04:19:01]19885: WAF :: fetched 5 new logs [27-05-2022 04:20:02]22478: WAF :: fetched 8 new logs [27-05-2022 04:21:01]25074: WAF :: fetched 8 new logs [27-05-2022 04:22:01]27636: WAF :: fetched 7 new logs [27-05-2022 04:23:02]30249: WAF :: fetched 11 new logs [27-05-2022 04:24:01]392: WAF :: fetched 13 new logs [27-05-2022 04:25:01]3139: WAF :: fetched 8 new logs [27-05-2022 04:26:01]5757: WAF :: fetched 2 new logs [27-05-2022 04:27:02]8346: WAF :: fetched 5 new logs [27-05-2022 04:28:01]10906: WAF :: fetched 12 new logs [27-05-2022 04:29:02]13648: WAF :: fetched 8 new logs [27-05-2022 04:31:01]19031: WAF :: fetched 7 new logs [27-05-2022 04:32:02]21707: WAF :: fetched 9 new logs [27-05-2022 04:34:02]27110: WAF :: fetched 5 new logs [27-05-2022 04:35:02]29808: WAF :: fetched 14 new logs [27-05-2022 04:36:01]32534: WAF :: fetched 7 new logs [27-05-2022 04:37:01]2870: WAF :: fetched 14 new logs [27-05-2022 04:38:02]5545: WAF :: fetched 16 new logs [27-05-2022 04:39:01]8254: WAF :: fetched 11 new logs [27-05-2022 04:40:02]10949: WAF :: fetched 14 new logs [27-05-2022 04:41:01]13631: WAF :: fetched 21 new logs [27-05-2022 04:41:01]13631: Checking for user cron vulnerabilities [27-05-2022 04:42:02]16297: WAF :: fetched 6 new logs [27-05-2022 04:43:01]18953: WAF :: fetched 13 new logs [27-05-2022 04:44:01]21691: Checking ditributed CMS bruteforce attacks [27-05-2022 04:44:01]21691: WAF :: fetched 8 new logs [27-05-2022 04:45:02]24331: WAF :: fetched 7 new logs [27-05-2022 04:46:01]27016: WAF :: fetched 4 new logs [27-05-2022 04:47:01]29706: WAF :: fetched 7 new logs [27-05-2022 04:48:02]32377: WAF :: fetched 9 new logs [27-05-2022 04:49:01]2792: WAF :: fetched 4 new logs [27-05-2022 04:50:02]5472: WAF :: fetched 6 new logs [27-05-2022 04:51:02]8166: WAF :: fetched 3 new logs [27-05-2022 04:52:01]10792: WAF :: fetched 5 new logs [27-05-2022 04:53:02]13442: WAF :: fetched 8 new logs [27-05-2022 04:54:01]16155: WAF :: fetched 4 new logs [27-05-2022 04:55:02]18800: WAF :: fetched 10 new logs [27-05-2022 04:56:02]21493: WAF :: fetched 24 new logs [27-05-2022 04:57:01]24135: WAF :: fetched 111 new logs [27-05-2022 04:58:02]26806: WAF :: fetched 108 new logs [27-05-2022 04:59:01]29551: WAF :: fetched 97 new logs [27-05-2022 05:00:02]32016: WAF :: fetched 78 new logs [27-05-2022 05:01:02]2878: WAF :: fetched 73 new logs [27-05-2022 05:01:42]2879: Starting daily scan on files updated in last 24 hrs [27-05-2022 05:02:01]5646: WAF :: fetched 73 new logs [27-05-2022 05:03:02]8337: WAF :: fetched 85 new logs [27-05-2022 05:04:02]11094: WAF :: fetched 74 new logs [27-05-2022 05:05:01]13761: WAF :: fetched 3 new logs [27-05-2022 05:06:01]16477: WAF :: fetched 1 new logs [27-05-2022 05:07:02]19179: WAF :: fetched 3 new logs [27-05-2022 05:10:02]27226: WAF :: fetched 1 new logs [27-05-2022 05:12:02]32645: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653639122 [27-05-2022 05:12:02]32645: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 05:12:04]32645: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 05:12:04]32645: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-0512/20220527-051202-YpCH0rUiw0Lm3s7EG8SmIwAAAAI [27-05-2022 05:12:04]32645: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 05:12:04]32645: WAF :: fetched 721 new logs [27-05-2022 05:13:01]3050: WAF :: fetched 1 new logs [27-05-2022 05:20:01]22029: WAF :: fetched 2 new logs [27-05-2022 05:26:01]5888: WAF :: fetched 1 new logs [27-05-2022 05:29:02]14001: WAF :: fetched 1 new logs [27-05-2022 05:33:01]24608: WAF :: fetched 1 new logs [27-05-2022 05:35:01]30159: WAF :: fetched 1 new logs [27-05-2022 05:36:02]397: WAF :: fetched 3 new logs [27-05-2022 05:37:01]3141: WAF :: fetched 6 new logs [27-05-2022 05:38:01]5785: WAF :: fetched 10 new logs [27-05-2022 05:39:02]8564: WAF :: fetched 3 new logs [27-05-2022 05:40:01]11221: WAF :: fetched 2 new logs [27-05-2022 05:41:01]13929: Checking for user cron vulnerabilities [27-05-2022 05:43:01]19247: WAF :: fetched 1 new logs [27-05-2022 05:44:02]22001: Checking ditributed CMS bruteforce attacks [27-05-2022 05:45:02]24665: WAF :: fetched 2 new logs [27-05-2022 05:46:01]27345: WAF :: fetched 3 new logs [27-05-2022 05:49:02]3058: WAF :: fetched 1 new logs [27-05-2022 05:50:01]5666: WAF :: fetched 1 new logs [27-05-2022 05:54:02]16522: WAF :: fetched 1 new logs [27-05-2022 05:56:01]21902: WAF :: fetched 2 new logs [27-05-2022 06:00:02]32345: WAF :: fetched 1 new logs [27-05-2022 06:01:02]3214: WAF :: fetched 1 new logs [27-05-2022 06:02:02]5893: WAF :: fetched 1 new logs [27-05-2022 06:05:01]13992: WAF :: fetched 1 new logs [27-05-2022 06:06:02]16727: WAF :: fetched 1 new logs [27-05-2022 06:12:01]415: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653642721 [27-05-2022 06:12:01]415: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 06:12:03]415: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 06:12:04]415: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-0612/20220527-061201-YpCV4Wn_34tzEtgNs266pgAAAAY [27-05-2022 06:12:04]415: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 06:12:04]415: WAF :: fetched 1 new logs [27-05-2022 06:13:02]3230: WAF :: fetched 5 new logs [27-05-2022 06:14:01]5870: WAF :: fetched 5 new logs [27-05-2022 06:15:01]8620: WAF :: fetched 9 new logs [27-05-2022 06:16:01]11351: WAF :: fetched 3 new logs [27-05-2022 06:17:01]13982: WAF :: fetched 1 new logs [27-05-2022 06:19:01]19295: WAF :: fetched 2 new logs [27-05-2022 06:23:01]30072: WAF :: fetched 1 new logs [27-05-2022 06:24:02]32765: WAF :: fetched 1 new logs [27-05-2022 06:30:01]16808: WAF :: fetched 1 new logs [27-05-2022 06:32:01]22196: WAF :: fetched 35 new logs [27-05-2022 06:36:02]665: WAF :: fetched 3 new logs [27-05-2022 06:38:02]6146: WAF :: fetched 1 new logs [27-05-2022 06:40:02]11820: WAF :: fetched 3 new logs [27-05-2022 06:41:02]14606: WAF :: fetched 3 new logs [27-05-2022 06:41:02]14606: Checking for user cron vulnerabilities [27-05-2022 06:42:02]17293: WAF :: fetched 3 new logs [27-05-2022 06:44:02]22655: Checking ditributed CMS bruteforce attacks [27-05-2022 06:46:01]28091: WAF :: fetched 2 new logs [27-05-2022 06:48:02]1125: WAF :: fetched 1 new logs [27-05-2022 06:49:01]3831: WAF :: fetched 2 new logs [27-05-2022 06:52:01]11982: WAF :: fetched 1 new logs [27-05-2022 06:56:02]22754: WAF :: fetched 1 new logs [27-05-2022 07:01:02]4086: WAF :: fetched 1 new logs [27-05-2022 07:04:02]12105: WAF :: fetched 1 new logs [27-05-2022 07:08:02]22916: WAF :: fetched 1 new logs [27-05-2022 07:12:01]1400: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653646321 [27-05-2022 07:12:01]1400: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 07:12:03]1400: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 07:12:03]1400: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-0712/20220527-071201-YpCj8SkAiegKtjEoaLTBtQAAABY [27-05-2022 07:12:03]1400: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 07:12:04]1400: WAF :: fetched 4 new logs [27-05-2022 07:16:01]12245: WAF :: fetched 1 new logs [27-05-2022 07:18:01]17574: WAF :: fetched 6 new logs [27-05-2022 07:19:02]20216: WAF :: fetched 10 new logs [27-05-2022 07:20:01]22841: WAF :: fetched 14 new logs [27-05-2022 07:21:02]25670: WAF :: fetched 2 new logs [27-05-2022 07:22:02]28303: WAF :: fetched 10 new logs [27-05-2022 07:23:01]30970: WAF :: fetched 15 new logs [27-05-2022 07:24:02]1280: WAF :: fetched 16 new logs [27-05-2022 07:25:02]4069: WAF :: fetched 1 new logs [27-05-2022 07:26:02]6766: WAF :: fetched 8 new logs [27-05-2022 07:27:01]9385: WAF :: fetched 16 new logs [27-05-2022 07:28:02]12080: WAF :: fetched 10 new logs [27-05-2022 07:29:01]14704: WAF :: fetched 7 new logs [27-05-2022 07:30:02]17464: WAF :: fetched 7 new logs [27-05-2022 07:31:01]20018: WAF :: fetched 6 new logs [27-05-2022 07:32:01]22909: WAF :: fetched 1 new logs [27-05-2022 07:33:02]25583: WAF :: fetched 8 new logs [27-05-2022 07:34:02]28240: WAF :: fetched 10 new logs [27-05-2022 07:35:02]31040: WAF :: fetched 1 new logs [27-05-2022 07:36:01]1386: WAF :: fetched 7 new logs [27-05-2022 07:37:01]4139: WAF :: fetched 13 new logs [27-05-2022 07:38:02]6853: WAF :: fetched 5 new logs [27-05-2022 07:39:01]9505: WAF :: fetched 10 new logs [27-05-2022 07:40:02]12261: WAF :: fetched 12 new logs [27-05-2022 07:41:01]14973: WAF :: fetched 7 new logs [27-05-2022 07:41:01]14973: Checking for user cron vulnerabilities [27-05-2022 07:42:02]17682: WAF :: fetched 5 new logs [27-05-2022 07:43:01]20310: WAF :: fetched 6 new logs [27-05-2022 07:44:01]22981: Checking ditributed CMS bruteforce attacks [27-05-2022 07:44:01]22981: WAF :: fetched 1 new logs [27-05-2022 07:45:01]: Checking for definition updates [27-05-2022 07:47:01]31095: WAF :: fetched 3 new logs [27-05-2022 07:48:01]1355: WAF :: fetched 5 new logs [27-05-2022 07:49:02]4095: WAF :: fetched 7 new logs [27-05-2022 07:50:01]6815: WAF :: fetched 5 new logs [27-05-2022 07:51:02]9586: WAF :: fetched 21 new logs [27-05-2022 07:52:01]12233: WAF :: fetched 9 new logs [27-05-2022 07:53:01]14873: WAF :: fetched 7 new logs [27-05-2022 07:54:01]17559: WAF :: fetched 7 new logs [27-05-2022 07:55:02]20373: WAF :: fetched 4 new logs [27-05-2022 07:56:02]23061: WAF :: fetched 10 new logs [27-05-2022 07:57:02]25697: WAF :: fetched 2 new logs [27-05-2022 07:58:02]28395: WAF :: fetched 7 new logs [27-05-2022 07:59:01]31050: WAF :: fetched 5 new logs [27-05-2022 08:00:02]1154: WAF :: fetched 4 new logs [27-05-2022 08:01:01]4498: WAF :: fetched 4 new logs [27-05-2022 08:02:01]7203: WAF :: fetched 4 new logs [27-05-2022 08:03:01]9874: WAF :: fetched 1 new logs [27-05-2022 08:04:02]12612: WAF :: fetched 12 new logs [27-05-2022 08:05:02]15320: WAF :: fetched 3 new logs [27-05-2022 08:06:01]18064: WAF :: fetched 3 new logs [27-05-2022 08:07:01]20721: WAF :: fetched 10 new logs [27-05-2022 08:08:02]23408: WAF :: fetched 4 new logs [27-05-2022 08:09:02]26074: WAF :: fetched 8 new logs [27-05-2022 08:10:01]28858: WAF :: fetched 2 new logs [27-05-2022 08:11:02]31628: WAF :: fetched 8 new logs [27-05-2022 08:12:02]1893: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653649922 [27-05-2022 08:12:02]1893: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 08:12:04]1893: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 08:12:04]1893: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-0812/20220527-081202-YpCyAviWi2XxXLkzKlnKPAAAABw [27-05-2022 08:12:04]1893: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 08:12:04]1893: WAF :: fetched 8 new logs [27-05-2022 08:13:01]4609: WAF :: fetched 18 new logs [27-05-2022 08:14:01]7280: WAF :: fetched 4 new logs [27-05-2022 08:15:02]10043: WAF :: fetched 11 new logs [27-05-2022 08:16:01]12736: WAF :: fetched 9 new logs [27-05-2022 08:17:02]15400: WAF :: fetched 7 new logs [27-05-2022 08:18:01]18052: WAF :: fetched 33 new logs [27-05-2022 08:19:02]20778: WAF :: fetched 5 new logs [27-05-2022 08:20:01]23547: WAF :: fetched 2 new logs [27-05-2022 08:21:01]26311: WAF :: fetched 1 new logs [27-05-2022 08:22:01]29009: WAF :: fetched 4 new logs [27-05-2022 08:23:02]31684: WAF :: fetched 7 new logs [27-05-2022 08:24:01]1993: WAF :: fetched 7 new logs [27-05-2022 08:25:02]4846: WAF :: fetched 7 new logs [27-05-2022 08:26:02]7609: WAF :: fetched 9 new logs [27-05-2022 08:27:01]10299: WAF :: fetched 4 new logs [27-05-2022 08:28:02]13018: WAF :: fetched 6 new logs [27-05-2022 08:29:01]15710: WAF :: fetched 4 new logs [27-05-2022 08:30:01]18494: WAF :: fetched 4 new logs [27-05-2022 08:31:02]21232: WAF :: fetched 2 new logs [27-05-2022 08:32:01]23914: WAF :: fetched 6 new logs [27-05-2022 08:33:01]26610: WAF :: fetched 4 new logs [27-05-2022 08:34:01]29324: WAF :: fetched 12 new logs [27-05-2022 08:35:01]32076: WAF :: fetched 4 new logs [27-05-2022 08:36:02]2497: WAF :: fetched 2 new logs [27-05-2022 08:37:02]5160: WAF :: fetched 3 new logs [27-05-2022 08:38:01]7880: WAF :: fetched 2 new logs [27-05-2022 08:39:02]10621: WAF :: fetched 11 new logs [27-05-2022 08:40:02]13388: WAF :: fetched 4 new logs [27-05-2022 08:41:01]16133: WAF :: fetched 15 new logs [27-05-2022 08:41:01]16133: Checking for user cron vulnerabilities [27-05-2022 08:42:02]18849: WAF :: fetched 9 new logs [27-05-2022 08:43:01]21511: WAF :: fetched 4 new logs [27-05-2022 08:44:01]24190: Checking ditributed CMS bruteforce attacks [27-05-2022 08:44:01]24190: WAF :: fetched 5 new logs [27-05-2022 08:45:02]26990: WAF :: fetched 3 new logs [27-05-2022 08:46:01]29689: WAF :: fetched 5 new logs [27-05-2022 08:47:02]32365: WAF :: fetched 8 new logs [27-05-2022 08:48:01]2729: WAF :: fetched 5 new logs [27-05-2022 08:49:02]5450: WAF :: fetched 9 new logs [27-05-2022 08:50:01]8228: WAF :: fetched 8 new logs [27-05-2022 08:51:02]10983: WAF :: fetched 1 new logs [27-05-2022 08:52:02]13651: WAF :: fetched 9 new logs [27-05-2022 08:53:01]16333: WAF :: fetched 3 new logs [27-05-2022 08:54:01]19073: WAF :: fetched 5 new logs [27-05-2022 08:55:02]21850: WAF :: fetched 2 new logs [27-05-2022 08:56:01]24532: WAF :: fetched 15 new logs [27-05-2022 08:57:02]27250: WAF :: fetched 8 new logs [27-05-2022 08:59:02]32735: WAF :: fetched 6 new logs [27-05-2022 09:00:02]2984: WAF :: fetched 5 new logs [27-05-2022 09:01:01]6192: WAF :: fetched 8 new logs [27-05-2022 09:02:02]8934: WAF :: fetched 11 new logs [27-05-2022 09:03:02]11630: WAF :: fetched 4 new logs [27-05-2022 09:04:01]14327: WAF :: fetched 4 new logs [27-05-2022 09:05:02]17123: WAF :: fetched 4 new logs [27-05-2022 09:06:02]19895: WAF :: fetched 17 new logs [27-05-2022 09:07:02]22575: WAF :: fetched 9 new logs [27-05-2022 09:08:01]25242: WAF :: fetched 5 new logs [27-05-2022 09:12:01]3920: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653653521 [27-05-2022 09:12:01]3920: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 09:12:03]3920: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 09:12:04]3920: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-0912/20220527-091201-YpDAERZWxj48YmRXT6xopAAAAC8 [27-05-2022 09:12:04]3920: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 09:12:04]3920: WAF :: fetched 3 new logs [27-05-2022 09:13:02]6706: WAF :: fetched 12 new logs [27-05-2022 09:14:01]9391: WAF :: fetched 9 new logs [27-05-2022 09:15:01]12211: WAF :: fetched 9 new logs [27-05-2022 09:16:02]15096: WAF :: fetched 14 new logs [27-05-2022 09:17:01]17774: WAF :: fetched 11 new logs [27-05-2022 09:18:01]20509: WAF :: fetched 10 new logs [27-05-2022 09:19:02]23270: WAF :: fetched 16 new logs [27-05-2022 09:20:01]26056: WAF :: fetched 2 new logs [27-05-2022 09:21:01]28858: WAF :: fetched 3 new logs [27-05-2022 09:22:01]31656: WAF :: fetched 6 new logs [27-05-2022 09:23:02]2079: WAF :: fetched 4 new logs [27-05-2022 09:24:01]4845: WAF :: fetched 6 new logs [27-05-2022 09:25:02]7662: WAF :: fetched 5 new logs [27-05-2022 09:26:02]10379: WAF :: fetched 4 new logs [27-05-2022 09:27:02]13111: WAF :: fetched 13 new logs [27-05-2022 09:28:02]15906: WAF :: fetched 11 new logs [27-05-2022 09:29:01]18682: WAF :: fetched 11 new logs [27-05-2022 09:30:02]21496: WAF :: fetched 17 new logs [27-05-2022 09:31:02]24248: WAF :: fetched 15 new logs [27-05-2022 09:32:01]26992: WAF :: fetched 9 new logs [27-05-2022 09:33:02]29773: WAF :: fetched 15 new logs [27-05-2022 09:34:01]32524: WAF :: fetched 20 new logs [27-05-2022 09:35:02]3092: WAF :: fetched 21 new logs [27-05-2022 09:36:02]5809: WAF :: fetched 22 new logs [27-05-2022 09:37:01]8476: WAF :: fetched 20 new logs [27-05-2022 09:38:02]11168: WAF :: fetched 26 new logs [27-05-2022 09:39:02]13865: WAF :: fetched 18 new logs [27-05-2022 09:40:01]16667: WAF :: fetched 23 new logs [27-05-2022 09:41:02]19438: WAF :: fetched 14 new logs [27-05-2022 09:41:02]19438: Checking for user cron vulnerabilities [27-05-2022 09:42:02]22269: WAF :: fetched 10 new logs [27-05-2022 09:43:01]25204: WAF :: fetched 8 new logs [27-05-2022 09:44:01]27909: Checking ditributed CMS bruteforce attacks [27-05-2022 09:44:01]27909: WAF :: fetched 10 new logs [27-05-2022 09:45:02]30765: WAF :: fetched 12 new logs [27-05-2022 09:46:02]1116: WAF :: fetched 55 new logs [27-05-2022 09:47:01]3917: WAF :: fetched 63 new logs [27-05-2022 09:48:02]6665: WAF :: fetched 13 new logs [27-05-2022 09:49:01]9355: WAF :: fetched 57 new logs [27-05-2022 09:50:01]12196: WAF :: fetched 99 new logs [27-05-2022 09:51:02]15022: WAF :: fetched 38 new logs [27-05-2022 09:52:02]17675: WAF :: fetched 14 new logs [27-05-2022 09:53:01]20352: WAF :: fetched 9 new logs [27-05-2022 09:54:02]23059: WAF :: fetched 12 new logs [27-05-2022 09:55:02]25772: WAF :: fetched 8 new logs [27-05-2022 09:56:01]28472: WAF :: fetched 5 new logs [27-05-2022 09:57:01]31144: WAF :: fetched 9 new logs [27-05-2022 09:58:01]1484: WAF :: fetched 15 new logs [27-05-2022 09:59:02]4245: WAF :: fetched 3 new logs [27-05-2022 10:00:02]6756: WAF :: fetched 10 new logs [27-05-2022 10:01:01]9731: WAF :: fetched 3 new logs [27-05-2022 10:02:02]12657: WAF :: fetched 8 new logs [27-05-2022 10:03:01]15363: WAF :: fetched 12 new logs [27-05-2022 10:04:01]18107: WAF :: fetched 4 new logs [27-05-2022 10:05:02]20907: WAF :: fetched 6 new logs [27-05-2022 10:06:02]23696: WAF :: fetched 7 new logs [27-05-2022 10:07:01]26402: WAF :: fetched 2 new logs [27-05-2022 10:08:02]29138: WAF :: fetched 9 new logs [27-05-2022 10:09:01]31838: WAF :: fetched 10 new logs [27-05-2022 10:10:01]2248: WAF :: fetched 9 new logs [27-05-2022 10:11:02]5040: WAF :: fetched 7 new logs [27-05-2022 10:12:01]7712: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653657121 [27-05-2022 10:12:01]7712: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 10:12:03]7712: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 10:12:04]7712: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-1012/20220527-101201-YpDOISwohAWDDTI_Kccd_wAAAC0 [27-05-2022 10:12:04]7712: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 10:12:04]7712: WAF :: fetched 9 new logs [27-05-2022 10:13:02]10460: WAF :: fetched 13 new logs [27-05-2022 10:14:02]13170: WAF :: fetched 9 new logs [27-05-2022 10:15:01]15952: WAF :: fetched 11 new logs [27-05-2022 10:16:02]18718: WAF :: fetched 5 new logs [27-05-2022 10:17:02]21477: WAF :: fetched 1 new logs [27-05-2022 10:18:01]24204: WAF :: fetched 1 new logs [27-05-2022 10:19:01]26922: WAF :: fetched 6 new logs [27-05-2022 10:20:02]29795: WAF :: fetched 2 new logs [27-05-2022 10:21:01]32572: WAF :: fetched 3 new logs [27-05-2022 10:22:01]3036: WAF :: fetched 4 new logs [27-05-2022 10:23:02]5954: WAF :: fetched 2 new logs [27-05-2022 10:25:02]11558: WAF :: fetched 6 new logs [27-05-2022 10:26:02]14521: WAF :: fetched 8 new logs [27-05-2022 10:27:02]17310: WAF :: fetched 9 new logs [27-05-2022 10:28:01]19965: WAF :: fetched 5 new logs [27-05-2022 10:29:02]22723: WAF :: fetched 4 new logs [27-05-2022 10:31:02]28300: WAF :: fetched 3 new logs [27-05-2022 10:32:02]31128: WAF :: fetched 8 new logs [27-05-2022 10:33:02]1507: WAF :: fetched 7 new logs [27-05-2022 10:34:01]4374: WAF :: fetched 7 new logs [27-05-2022 10:35:02]7374: WAF :: fetched 4 new logs [27-05-2022 10:37:02]12912: WAF :: fetched 2 new logs [27-05-2022 10:38:01]15474: WAF :: fetched 3 new logs [27-05-2022 10:39:01]18383: WAF :: fetched 2 new logs [27-05-2022 10:41:01]24017: WAF :: fetched 4 new logs [27-05-2022 10:41:01]24017: Checking for user cron vulnerabilities [27-05-2022 10:42:01]26721: WAF :: fetched 8 new logs [27-05-2022 10:43:02]29501: WAF :: fetched 6 new logs [27-05-2022 10:44:01]32192: Checking ditributed CMS bruteforce attacks [27-05-2022 10:44:02]32192: WAF :: fetched 6 new logs [27-05-2022 10:45:02]2652: WAF :: fetched 4 new logs [27-05-2022 10:46:02]5526: WAF :: fetched 1 new logs [27-05-2022 10:47:02]8215: WAF :: fetched 2 new logs [27-05-2022 10:48:02]10975: WAF :: fetched 7 new logs [27-05-2022 10:49:02]13664: WAF :: fetched 10 new logs [27-05-2022 10:50:01]16186: WAF :: fetched 11 new logs [27-05-2022 10:51:01]19240: WAF :: fetched 21 new logs [27-05-2022 10:52:01]21898: WAF :: fetched 10 new logs [27-05-2022 10:53:02]24662: WAF :: fetched 9 new logs [27-05-2022 10:54:02]27349: WAF :: fetched 8 new logs [27-05-2022 10:55:01]30120: WAF :: fetched 4 new logs [27-05-2022 10:56:01]504: WAF :: fetched 2 new logs [27-05-2022 10:57:01]3341: WAF :: fetched 3 new logs [27-05-2022 10:58:02]6027: WAF :: fetched 3 new logs [27-05-2022 10:59:02]8742: WAF :: fetched 7 new logs [27-05-2022 11:00:02]11251: WAF :: fetched 9 new logs [27-05-2022 11:01:01]14193: WAF :: fetched 11 new logs [27-05-2022 11:02:01]17314: WAF :: fetched 5 new logs [27-05-2022 11:03:02]20037: WAF :: fetched 2 new logs [27-05-2022 11:04:01]22759: WAF :: fetched 1 new logs [27-05-2022 11:05:02]25509: WAF :: fetched 4 new logs [27-05-2022 11:06:02]28414: WAF :: fetched 2 new logs [27-05-2022 11:07:01]31084: WAF :: fetched 2 new logs [27-05-2022 11:07:50]31236: Performed RBL check for 23.111.136.34. [27-05-2022 11:08:01]1430: WAF :: fetched 1 new logs [27-05-2022 11:09:02]4200: WAF :: fetched 7 new logs [27-05-2022 11:10:02]6910: WAF :: fetched 6 new logs [27-05-2022 11:11:01]9866: WAF :: fetched 2 new logs [27-05-2022 11:12:02]12614: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653660722 [27-05-2022 11:12:02]12614: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 11:12:04]12614: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 11:12:04]12614: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-1112/20220527-111202-YpDcMrVFvWGQ1Kb3GoGhVgAAABE [27-05-2022 11:12:04]12614: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 11:12:04]12614: WAF :: fetched 4 new logs [27-05-2022 11:13:02]15328: WAF :: fetched 3 new logs [27-05-2022 11:14:01]18047: WAF :: fetched 2 new logs [27-05-2022 11:15:01]20807: WAF :: fetched 1 new logs [27-05-2022 11:16:02]23717: WAF :: fetched 2 new logs [27-05-2022 11:17:01]26451: WAF :: fetched 8 new logs [27-05-2022 11:18:01]29159: WAF :: fetched 5 new logs [27-05-2022 11:19:02]31902: WAF :: fetched 9 new logs [27-05-2022 11:20:01]2293: WAF :: fetched 13 new logs [27-05-2022 11:21:01]5189: WAF :: fetched 10 new logs [27-05-2022 11:22:02]7952: WAF :: fetched 12 new logs [27-05-2022 11:23:01]10644: WAF :: fetched 12 new logs [27-05-2022 11:24:01]13372: WAF :: fetched 9 new logs [27-05-2022 11:25:02]16103: WAF :: fetched 28 new logs [27-05-2022 11:26:01]18924: WAF :: fetched 92 new logs [27-05-2022 11:27:02]21701: WAF :: fetched 98 new logs [27-05-2022 11:28:01]24180: WAF :: fetched 89 new logs [27-05-2022 11:29:02]27168: WAF :: fetched 50 new logs [27-05-2022 11:30:01]29943: WAF :: fetched 52 new logs [27-05-2022 11:31:02]373: WAF :: fetched 51 new logs [27-05-2022 11:32:01]3227: WAF :: fetched 69 new logs [27-05-2022 11:33:02]5994: WAF :: fetched 63 new logs [27-05-2022 11:34:01]8770: WAF :: fetched 66 new logs [27-05-2022 11:35:01]11555: WAF :: fetched 67 new logs [27-05-2022 11:36:02]14441: WAF :: fetched 92 new logs [27-05-2022 11:37:01]17101: WAF :: fetched 57 new logs [27-05-2022 11:38:02]19853: WAF :: fetched 61 new logs [27-05-2022 11:39:02]22489: WAF :: fetched 55 new logs [27-05-2022 11:40:01]25230: WAF :: fetched 64 new logs [27-05-2022 11:41:02]28100: WAF :: fetched 77 new logs [27-05-2022 11:41:02]28100: Checking for user cron vulnerabilities [27-05-2022 11:42:02]30804: WAF :: fetched 96 new logs [27-05-2022 11:43:01]1201: WAF :: fetched 102 new logs [27-05-2022 11:44:02]4015: Checking ditributed CMS bruteforce attacks [27-05-2022 11:44:02]4015: WAF :: fetched 91 new logs [27-05-2022 11:45:02]6722: WAF :: fetched 64 new logs [27-05-2022 11:46:01]9545: WAF :: fetched 68 new logs [27-05-2022 11:47:01]12248: WAF :: fetched 79 new logs [27-05-2022 11:48:02]14966: WAF :: fetched 56 new logs [27-05-2022 11:49:01]17680: WAF :: fetched 59 new logs [27-05-2022 11:50:02]20481: WAF :: fetched 18 new logs [27-05-2022 11:51:02]23360: WAF :: fetched 6 new logs [27-05-2022 11:52:01]26093: WAF :: fetched 8 new logs [27-05-2022 11:53:02]28841: WAF :: fetched 11 new logs [27-05-2022 11:54:01]31486: WAF :: fetched 12 new logs [27-05-2022 11:55:02]1891: WAF :: fetched 21 new logs [27-05-2022 11:56:02]4756: WAF :: fetched 14 new logs [27-05-2022 11:57:01]7439: WAF :: fetched 14 new logs [27-05-2022 11:58:02]10178: WAF :: fetched 12 new logs [27-05-2022 11:59:02]12819: WAF :: fetched 11 new logs [27-05-2022 12:00:01]15304: WAF :: fetched 10 new logs [27-05-2022 12:01:02]18674: WAF :: fetched 7 new logs [27-05-2022 12:02:02]21432: WAF :: fetched 12 new logs [27-05-2022 12:03:01]24149: WAF :: fetched 4 new logs [27-05-2022 12:04:01]26853: WAF :: fetched 10 new logs [27-05-2022 12:05:02]29544: WAF :: fetched 15 new logs [27-05-2022 12:06:02]32414: WAF :: fetched 18 new logs [27-05-2022 12:07:01]2759: WAF :: fetched 9 new logs [27-05-2022 12:08:01]5549: WAF :: fetched 24 new logs [27-05-2022 12:09:01]8269: WAF :: fetched 21 new logs [27-05-2022 12:10:02]11007: WAF :: fetched 14 new logs [27-05-2022 12:11:01]13793: WAF :: fetched 8 new logs [27-05-2022 12:12:02]16959: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653664322 [27-05-2022 12:12:02]16959: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 12:12:04]16959: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 12:12:04]16959: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-1212/20220527-121202-YpDqQlJM8FfZvlO5tXW-jgAAADk [27-05-2022 12:12:04]16959: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 12:12:04]16959: WAF :: fetched 13 new logs [27-05-2022 12:13:01]19944: WAF :: fetched 2 new logs [27-05-2022 12:14:01]22754: WAF :: fetched 10 new logs [27-05-2022 12:15:01]25452: WAF :: fetched 9 new logs [27-05-2022 12:16:02]28338: WAF :: fetched 8 new logs [27-05-2022 12:17:01]31035: WAF :: fetched 15 new logs [27-05-2022 12:18:01]1362: WAF :: fetched 10 new logs [27-05-2022 12:19:02]4108: WAF :: fetched 6 new logs [27-05-2022 12:20:01]6761: WAF :: fetched 6 new logs [27-05-2022 12:21:02]9675: WAF :: fetched 12 new logs [27-05-2022 12:22:01]12350: WAF :: fetched 12 new logs [27-05-2022 12:23:02]15071: WAF :: fetched 10 new logs [27-05-2022 12:24:02]17751: WAF :: fetched 13 new logs [27-05-2022 12:25:02]20458: WAF :: fetched 4 new logs [27-05-2022 12:26:02]23271: WAF :: fetched 3 new logs [27-05-2022 12:27:01]25713: WAF :: fetched 6 new logs [27-05-2022 12:28:01]28653: WAF :: fetched 6 new logs [27-05-2022 12:29:01]31328: WAF :: fetched 6 new logs [27-05-2022 12:30:02]1761: WAF :: fetched 7 new logs [27-05-2022 12:31:02]4599: WAF :: fetched 7 new logs [27-05-2022 12:32:01]7292: WAF :: fetched 14 new logs [27-05-2022 12:33:02]9961: WAF :: fetched 7 new logs [27-05-2022 12:34:01]12550: WAF :: fetched 11 new logs [27-05-2022 12:35:02]15280: WAF :: fetched 5 new logs [27-05-2022 12:36:01]18124: WAF :: fetched 8 new logs [27-05-2022 12:37:02]20805: WAF :: fetched 5 new logs [27-05-2022 12:38:01]23482: WAF :: fetched 2 new logs [27-05-2022 12:39:02]26098: WAF :: fetched 14 new logs [27-05-2022 12:40:01]28786: WAF :: fetched 16 new logs [27-05-2022 12:41:02]31666: WAF :: fetched 12 new logs [27-05-2022 12:41:02]31666: Checking for user cron vulnerabilities [27-05-2022 12:42:01]1952: WAF :: fetched 10 new logs [27-05-2022 12:43:02]4665: WAF :: fetched 3 new logs [27-05-2022 12:44:01]7291: Checking ditributed CMS bruteforce attacks [27-05-2022 12:44:01]7291: WAF :: fetched 8 new logs [27-05-2022 12:45:02]: Checking for software updates [27-05-2022 12:45:02]10000: WAF :: fetched 16 new logs [27-05-2022 12:46:02]12741: WAF :: fetched 128 new logs [27-05-2022 12:47:01]15422: WAF :: fetched 65 new logs [27-05-2022 12:48:01]18077: WAF :: fetched 7 new logs [27-05-2022 12:49:02]20793: WAF :: fetched 1 new logs [27-05-2022 12:50:01]23450: WAF :: fetched 3 new logs [27-05-2022 12:51:02]26297: WAF :: fetched 3 new logs [27-05-2022 12:52:01]28929: WAF :: fetched 6 new logs [27-05-2022 12:53:02]31677: WAF :: fetched 3 new logs [27-05-2022 12:54:01]2051: WAF :: fetched 8 new logs [27-05-2022 12:55:02]4792: WAF :: fetched 11 new logs [27-05-2022 12:56:01]7550: WAF :: fetched 6 new logs [27-05-2022 12:57:02]10297: WAF :: fetched 9 new logs [27-05-2022 12:58:01]12913: WAF :: fetched 1 new logs [27-05-2022 12:59:02]15583: WAF :: fetched 3 new logs [27-05-2022 13:00:02]17988: WAF :: fetched 9 new logs [27-05-2022 13:01:02]21283: WAF :: fetched 13 new logs [27-05-2022 13:02:01]23992: WAF :: fetched 17 new logs [27-05-2022 13:03:02]26739: WAF :: fetched 22 new logs [27-05-2022 13:04:02]29414: WAF :: fetched 20 new logs [27-05-2022 13:05:02]32111: WAF :: fetched 11 new logs [27-05-2022 13:06:01]2524: WAF :: fetched 7 new logs [27-05-2022 13:07:02]5294: WAF :: fetched 10 new logs [27-05-2022 13:08:02]7988: WAF :: fetched 11 new logs [27-05-2022 13:09:02]10684: WAF :: fetched 8 new logs [27-05-2022 13:10:01]13333: WAF :: fetched 6 new logs [27-05-2022 13:11:02]16248: WAF :: fetched 4 new logs [27-05-2022 13:12:02]18951: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653667922 [27-05-2022 13:12:02]18951: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 13:12:04]18951: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 13:12:04]18951: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-1312/20220527-131202-YpD4UvsnCj6b2wD9K-XWJgAAACg [27-05-2022 13:12:04]18951: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 13:12:04]18951: WAF :: fetched 5 new logs [27-05-2022 13:13:02]21662: WAF :: fetched 5 new logs [27-05-2022 13:14:01]24333: WAF :: fetched 4 new logs [27-05-2022 13:15:02]27080: WAF :: fetched 2 new logs [27-05-2022 13:16:01]29918: WAF :: fetched 3 new logs [27-05-2022 13:17:02]32598: WAF :: fetched 3 new logs [27-05-2022 13:18:01]2945: WAF :: fetched 8 new logs [27-05-2022 13:19:02]5629: WAF :: fetched 17 new logs [27-05-2022 13:20:02]8290: WAF :: fetched 8 new logs [27-05-2022 13:21:02]11148: WAF :: fetched 15 new logs [27-05-2022 13:22:01]13829: WAF :: fetched 10 new logs [27-05-2022 13:23:02]16490: WAF :: fetched 12 new logs [27-05-2022 13:24:01]19008: WAF :: fetched 7 new logs [27-05-2022 13:25:01]21863: WAF :: fetched 8 new logs [27-05-2022 13:26:02]24639: WAF :: fetched 12 new logs [27-05-2022 13:27:01]27397: WAF :: fetched 6 new logs [27-05-2022 13:28:02]30103: WAF :: fetched 7 new logs [27-05-2022 13:29:02]347: WAF :: fetched 7 new logs [27-05-2022 13:30:01]3216: WAF :: fetched 7 new logs [27-05-2022 13:31:01]6045: WAF :: fetched 5 new logs [27-05-2022 13:32:01]8753: WAF :: fetched 2 new logs [27-05-2022 13:33:02]11510: WAF :: fetched 7 new logs [27-05-2022 13:34:01]14265: WAF :: fetched 28 new logs [27-05-2022 13:35:02]17002: WAF :: fetched 13 new logs [27-05-2022 13:36:01]19858: WAF :: fetched 11 new logs [27-05-2022 13:37:02]22535: WAF :: fetched 15 new logs [27-05-2022 13:38:02]25207: WAF :: fetched 13 new logs [27-05-2022 13:39:02]27836: WAF :: fetched 2 new logs [27-05-2022 13:40:01]30548: WAF :: fetched 8 new logs [27-05-2022 13:41:02]1079: WAF :: fetched 9 new logs [27-05-2022 13:41:02]1079: Checking for user cron vulnerabilities [27-05-2022 13:44:01]9333: Checking ditributed CMS bruteforce attacks [27-05-2022 13:45:01]: Checking for definition updates [27-05-2022 13:45:01]12043: WAF :: fetched 8 new logs [27-05-2022 13:45:02]12042: Updated virus defnition : signatures.ndb [27-05-2022 13:46:01]14922: WAF :: fetched 13 new logs [27-05-2022 13:46:01]14924: httpd.conf changed. Refreshing watchlist. [27-05-2022 13:47:01]17677: WAF :: fetched 19 new logs [27-05-2022 13:48:01]20436: WAF :: fetched 10 new logs [27-05-2022 13:49:02]23120: WAF :: fetched 6 new logs [27-05-2022 13:50:01]25884: WAF :: fetched 9 new logs [27-05-2022 13:51:01]28815: WAF :: fetched 13 new logs [27-05-2022 13:51:01]28813: httpd.conf changed. Refreshing watchlist. [27-05-2022 13:52:02]31617: WAF :: fetched 17 new logs [27-05-2022 13:53:02]1978: WAF :: fetched 16 new logs [27-05-2022 13:54:01]4680: WAF :: fetched 3 new logs [27-05-2022 13:55:02]7406: WAF :: fetched 6 new logs [27-05-2022 13:56:01]10216: WAF :: fetched 7 new logs [27-05-2022 13:57:02]12941: WAF :: fetched 9 new logs [27-05-2022 13:58:01]15636: WAF :: fetched 4 new logs [27-05-2022 13:59:02]18442: WAF :: fetched 2 new logs [27-05-2022 14:00:01]20862: WAF :: fetched 1 new logs [27-05-2022 14:01:02]24224: WAF :: fetched 10 new logs [27-05-2022 14:02:01]26943: WAF :: fetched 10 new logs [27-05-2022 14:03:02]29775: WAF :: fetched 17 new logs [27-05-2022 14:04:01]32483: WAF :: fetched 18 new logs [27-05-2022 14:05:02]2921: WAF :: fetched 9 new logs [27-05-2022 14:06:01]5791: WAF :: fetched 12 new logs [27-05-2022 14:07:02]8449: WAF :: fetched 10 new logs [27-05-2022 14:08:01]11210: WAF :: fetched 14 new logs [27-05-2022 14:09:02]13872: WAF :: fetched 8 new logs [27-05-2022 14:10:02]16597: WAF :: fetched 16 new logs [27-05-2022 14:11:01]19370: WAF :: fetched 2 new logs [27-05-2022 14:12:02]22106: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653671522 [27-05-2022 14:12:02]22106: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 14:12:04]22106: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 14:12:04]22106: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-1412/20220527-141202-YpEGYmtS8h0sxiSKr3g-MQAAAAo [27-05-2022 14:12:04]22106: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 14:12:04]22106: WAF :: fetched 6 new logs [27-05-2022 14:13:01]24666: WAF :: fetched 2 new logs [27-05-2022 14:14:01]27452: WAF :: fetched 10 new logs [27-05-2022 14:15:01]30178: WAF :: fetched 9 new logs [27-05-2022 14:16:02]664: WAF :: fetched 6 new logs [27-05-2022 14:17:01]3398: WAF :: fetched 6 new logs [27-05-2022 14:18:02]6220: WAF :: fetched 8 new logs [27-05-2022 14:19:01]8959: WAF :: fetched 5 new logs [27-05-2022 14:20:02]11730: WAF :: fetched 11 new logs [27-05-2022 14:21:01]14560: WAF :: fetched 10 new logs [27-05-2022 14:22:02]17321: WAF :: fetched 12 new logs [27-05-2022 14:23:01]19958: WAF :: fetched 16 new logs [27-05-2022 14:24:01]22612: WAF :: fetched 15 new logs [27-05-2022 14:25:02]25340: WAF :: fetched 15 new logs [27-05-2022 14:26:01]28108: WAF :: fetched 14 new logs [27-05-2022 14:27:02]30882: WAF :: fetched 8 new logs [27-05-2022 14:29:02]4040: WAF :: fetched 6 new logs [27-05-2022 14:30:01]6728: WAF :: fetched 6 new logs [27-05-2022 14:31:02]9591: WAF :: fetched 4 new logs [27-05-2022 14:32:01]12217: WAF :: fetched 3 new logs [27-05-2022 14:33:02]14958: WAF :: fetched 11 new logs [27-05-2022 14:34:02]17654: WAF :: fetched 14 new logs [27-05-2022 14:35:01]20350: WAF :: fetched 3 new logs [27-05-2022 14:36:02]23196: WAF :: fetched 7 new logs [27-05-2022 14:37:01]25584: WAF :: fetched 2 new logs [27-05-2022 14:39:01]31245: WAF :: fetched 6 new logs [27-05-2022 14:40:01]1627: WAF :: fetched 11 new logs [27-05-2022 14:41:02]4610: WAF :: fetched 6 new logs [27-05-2022 14:41:02]4610: Checking for user cron vulnerabilities [27-05-2022 14:42:02]7292: WAF :: fetched 9 new logs [27-05-2022 14:43:01]10037: WAF :: fetched 3 new logs [27-05-2022 14:44:01]12689: Checking ditributed CMS bruteforce attacks [27-05-2022 14:44:01]12689: WAF :: fetched 6 new logs [27-05-2022 14:45:01]15439: WAF :: fetched 11 new logs [27-05-2022 14:46:01]18269: WAF :: fetched 14 new logs [27-05-2022 14:47:02]21012: WAF :: fetched 18 new logs [27-05-2022 14:48:02]23642: WAF :: fetched 12 new logs [27-05-2022 14:49:02]26293: WAF :: fetched 6 new logs [27-05-2022 14:50:01]28993: WAF :: fetched 3 new logs [27-05-2022 14:51:01]31955: WAF :: fetched 10 new logs [27-05-2022 14:52:01]2356: WAF :: fetched 11 new logs [27-05-2022 14:53:01]5094: WAF :: fetched 10 new logs [27-05-2022 14:53:02]5093: Updated license status via CDN [27-05-2022 14:54:02]7829: WAF :: fetched 5 new logs [27-05-2022 14:55:02]10611: WAF :: fetched 22 new logs [27-05-2022 14:56:01]13459: WAF :: fetched 22 new logs [27-05-2022 14:57:01]16168: WAF :: fetched 9 new logs [27-05-2022 14:58:02]18890: WAF :: fetched 13 new logs [27-05-2022 14:59:01]21529: WAF :: fetched 8 new logs [27-05-2022 15:00:02]23982: WAF :: fetched 11 new logs [27-05-2022 15:01:01]27249: Reseting cPGuard inotify settings [27-05-2022 15:01:01]27253: WAF :: fetched 11 new logs [27-05-2022 15:02:02]30053: WAF :: fetched 7 new logs [27-05-2022 15:03:01]365: WAF :: fetched 3 new logs [27-05-2022 15:03:01]353: httpd.conf changed. Refreshing watchlist. [27-05-2022 15:04:02]3297: WAF :: fetched 8 new logs [27-05-2022 15:04:02]3292: httpd.conf changed. Refreshing watchlist. [27-05-2022 15:05:01]6032: WAF :: fetched 16 new logs [27-05-2022 15:06:02]8936: WAF :: fetched 17 new logs [27-05-2022 15:07:01]11594: WAF :: fetched 9 new logs [27-05-2022 15:08:02]14360: WAF :: fetched 6 new logs [27-05-2022 15:09:01]17071: WAF :: fetched 3 new logs [27-05-2022 15:10:02]19860: WAF :: fetched 9 new logs [27-05-2022 15:11:01]22669: WAF :: fetched 15 new logs [27-05-2022 15:12:02]25326: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653675122 [27-05-2022 15:12:02]25326: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 15:12:04]25326: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 15:12:04]25326: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-1512/20220527-151202-YpEUciJ8cAM1oesGsiL7SAAAAA4 [27-05-2022 15:12:04]25326: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 15:12:04]25326: WAF :: fetched 18 new logs [27-05-2022 15:13:01]28001: WAF :: fetched 6 new logs [27-05-2022 15:14:02]30750: WAF :: fetched 7 new logs [27-05-2022 15:15:01]1089: WAF :: fetched 10 new logs [27-05-2022 15:16:01]3972: WAF :: fetched 4 new logs [27-05-2022 15:17:02]6675: WAF :: fetched 15 new logs [27-05-2022 15:18:02]9398: WAF :: fetched 17 new logs [27-05-2022 15:19:01]12042: WAF :: fetched 12 new logs [27-05-2022 15:20:01]14776: WAF :: fetched 19 new logs [27-05-2022 15:21:02]17639: WAF :: fetched 22 new logs [27-05-2022 15:22:01]20345: WAF :: fetched 19 new logs [27-05-2022 15:23:01]23035: WAF :: fetched 21 new logs [27-05-2022 15:24:01]25756: WAF :: fetched 29 new logs [27-05-2022 15:25:02]28469: WAF :: fetched 22 new logs [27-05-2022 15:26:01]31218: WAF :: fetched 8 new logs [27-05-2022 15:29:01]7034: WAF :: fetched 2 new logs [27-05-2022 15:33:01]17961: WAF :: fetched 2 new logs [27-05-2022 15:34:01]20714: WAF :: fetched 4 new logs [27-05-2022 15:35:02]23435: WAF :: fetched 10 new logs [27-05-2022 15:36:01]26270: WAF :: fetched 12 new logs [27-05-2022 15:37:01]29019: WAF :: fetched 9 new logs [27-05-2022 15:38:01]31747: WAF :: fetched 11 new logs [27-05-2022 15:39:01]2103: WAF :: fetched 9 new logs [27-05-2022 15:40:02]4920: WAF :: fetched 7 new logs [27-05-2022 15:41:01]7714: WAF :: fetched 12 new logs [27-05-2022 15:41:01]7714: Checking for user cron vulnerabilities [27-05-2022 15:42:02]10473: WAF :: fetched 8 new logs [27-05-2022 15:43:02]13144: WAF :: fetched 7 new logs [27-05-2022 15:44:01]15841: Checking ditributed CMS bruteforce attacks [27-05-2022 15:44:01]15841: WAF :: fetched 8 new logs [27-05-2022 15:45:01]18527: WAF :: fetched 4 new logs [27-05-2022 15:46:01]21344: WAF :: fetched 9 new logs [27-05-2022 15:47:02]24090: WAF :: fetched 9 new logs [27-05-2022 15:48:02]26733: WAF :: fetched 8 new logs [27-05-2022 15:49:01]29459: WAF :: fetched 8 new logs [27-05-2022 15:50:01]32162: WAF :: fetched 12 new logs [27-05-2022 15:51:01]2641: WAF :: fetched 12 new logs [27-05-2022 15:52:02]5459: WAF :: fetched 19 new logs [27-05-2022 15:53:02]8115: WAF :: fetched 12 new logs [27-05-2022 15:54:01]10837: WAF :: fetched 12 new logs [27-05-2022 15:55:01]13517: WAF :: fetched 5 new logs [27-05-2022 15:57:02]19103: WAF :: fetched 1 new logs [27-05-2022 15:59:01]24571: WAF :: fetched 2 new logs [27-05-2022 16:02:01]572: WAF :: fetched 1 new logs [27-05-2022 16:03:02]3415: WAF :: fetched 2 new logs [27-05-2022 16:04:01]6133: WAF :: fetched 1 new logs [27-05-2022 16:05:01]8852: WAF :: fetched 2 new logs [27-05-2022 16:07:02]14395: WAF :: fetched 1 new logs [27-05-2022 16:08:01]17059: WAF :: fetched 3 new logs [27-05-2022 16:09:02]19795: WAF :: fetched 8 new logs [27-05-2022 16:10:01]22488: WAF :: fetched 5 new logs [27-05-2022 16:11:02]25252: WAF :: fetched 4 new logs [27-05-2022 16:12:02]28094: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653678722 [27-05-2022 16:12:02]28094: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 16:12:04]28094: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 16:12:04]28094: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-1612/20220527-161202-YpEigm2AyFUjfI1R2YJ_twAAAB8 [27-05-2022 16:12:04]28094: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 16:12:04]28094: WAF :: fetched 7 new logs [27-05-2022 16:13:01]30817: WAF :: fetched 9 new logs [27-05-2022 16:14:02]1183: WAF :: fetched 4 new logs [27-05-2022 16:15:01]3915: WAF :: fetched 4 new logs [27-05-2022 16:16:02]6807: WAF :: fetched 4 new logs [27-05-2022 16:17:02]9579: WAF :: fetched 2 new logs [27-05-2022 16:18:02]12223: WAF :: fetched 5 new logs [27-05-2022 16:19:01]14904: WAF :: fetched 2 new logs [27-05-2022 16:20:02]17712: WAF :: fetched 12 new logs [27-05-2022 16:21:02]20519: WAF :: fetched 16 new logs [27-05-2022 16:22:01]23348: WAF :: fetched 14 new logs [27-05-2022 16:23:02]26058: WAF :: fetched 15 new logs [27-05-2022 16:24:02]28748: WAF :: fetched 12 new logs [27-05-2022 16:25:01]31416: WAF :: fetched 9 new logs [27-05-2022 16:26:02]1843: WAF :: fetched 3 new logs [27-05-2022 16:30:02]12832: WAF :: fetched 4 new logs [27-05-2022 16:32:01]18404: WAF :: fetched 2 new logs [27-05-2022 16:34:01]23766: WAF :: fetched 5 new logs [27-05-2022 16:37:01]32164: WAF :: fetched 2 new logs [27-05-2022 16:38:02]2591: WAF :: fetched 1 new logs [27-05-2022 16:40:01]7956: WAF :: fetched 3 new logs [27-05-2022 16:41:02]10733: WAF :: fetched 8 new logs [27-05-2022 16:41:02]10733: Checking for user cron vulnerabilities [27-05-2022 16:42:02]13556: WAF :: fetched 8 new logs [27-05-2022 16:43:01]16239: WAF :: fetched 6 new logs [27-05-2022 16:44:01]18935: Checking ditributed CMS bruteforce attacks [27-05-2022 16:44:01]18935: WAF :: fetched 1 new logs [27-05-2022 16:45:02]21802: WAF :: fetched 1 new logs [27-05-2022 16:48:02]30044: WAF :: fetched 4 new logs [27-05-2022 16:49:01]303: WAF :: fetched 10 new logs [27-05-2022 16:50:02]3271: WAF :: fetched 17 new logs [27-05-2022 16:51:01]5939: WAF :: fetched 16 new logs [27-05-2022 16:52:02]8842: WAF :: fetched 9 new logs [27-05-2022 16:53:02]11545: WAF :: fetched 4 new logs [27-05-2022 16:54:01]14224: WAF :: fetched 9 new logs [27-05-2022 16:55:02]16915: WAF :: fetched 7 new logs [27-05-2022 16:56:01]19633: WAF :: fetched 6 new logs [27-05-2022 16:57:02]22446: WAF :: fetched 1 new logs [27-05-2022 17:00:02]30162: WAF :: fetched 5 new logs [27-05-2022 17:01:02]977: WAF :: fetched 11 new logs [27-05-2022 17:02:01]3882: WAF :: fetched 16 new logs [27-05-2022 17:03:02]6558: WAF :: fetched 12 new logs [27-05-2022 17:04:02]9183: WAF :: fetched 23 new logs [27-05-2022 17:05:01]11864: WAF :: fetched 16 new logs [27-05-2022 17:06:02]14576: WAF :: fetched 20 new logs [27-05-2022 17:07:01]17306: WAF :: fetched 15 new logs [27-05-2022 17:08:02]19998: WAF :: fetched 14 new logs [27-05-2022 17:09:01]22685: WAF :: fetched 17 new logs [27-05-2022 17:10:01]25403: WAF :: fetched 11 new logs [27-05-2022 17:11:02]28152: WAF :: fetched 9 new logs [27-05-2022 17:12:01]30949: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653682321 [27-05-2022 17:12:01]30949: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 17:12:03]30949: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 17:12:04]30949: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-1712/20220527-171201-YpEwkbR3rsM29nrZj3Ey-AAAACs [27-05-2022 17:12:04]30949: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 17:12:04]30949: WAF :: fetched 8 new logs [27-05-2022 17:13:01]1283: WAF :: fetched 3 new logs [27-05-2022 17:14:01]4167: WAF :: fetched 12 new logs [27-05-2022 17:15:02]6883: WAF :: fetched 6 new logs [27-05-2022 17:16:01]9614: WAF :: fetched 10 new logs [27-05-2022 17:17:02]12373: WAF :: fetched 6 new logs [27-05-2022 17:18:02]15089: WAF :: fetched 4 new logs [27-05-2022 17:19:01]17577: WAF :: fetched 1 new logs [27-05-2022 17:20:02]20463: WAF :: fetched 1 new logs [27-05-2022 17:21:02]23174: WAF :: fetched 1 new logs [27-05-2022 17:22:01]25858: WAF :: fetched 5 new logs [27-05-2022 17:23:02]28548: WAF :: fetched 13 new logs [27-05-2022 17:24:02]31228: WAF :: fetched 10 new logs [27-05-2022 17:25:01]1313: WAF :: fetched 9 new logs [27-05-2022 17:26:02]4282: WAF :: fetched 5 new logs [27-05-2022 17:27:01]6958: WAF :: fetched 9 new logs [27-05-2022 17:28:01]9661: WAF :: fetched 12 new logs [27-05-2022 17:29:02]12352: WAF :: fetched 1 new logs [27-05-2022 17:31:02]17692: WAF :: fetched 1 new logs [27-05-2022 17:32:02]20470: WAF :: fetched 7 new logs [27-05-2022 17:35:02]28513: WAF :: fetched 1 new logs [27-05-2022 17:37:02]1633: WAF :: fetched 1 new logs [27-05-2022 17:39:02]7069: WAF :: fetched 2 new logs [27-05-2022 17:40:01]9750: WAF :: fetched 9 new logs [27-05-2022 17:41:02]12475: WAF :: fetched 5 new logs [27-05-2022 17:41:02]12475: Checking for user cron vulnerabilities [27-05-2022 17:42:01]15212: WAF :: fetched 8 new logs [27-05-2022 17:43:02]17875: WAF :: fetched 4 new logs [27-05-2022 17:44:01]20544: Checking ditributed CMS bruteforce attacks [27-05-2022 17:44:01]20544: WAF :: fetched 7 new logs [27-05-2022 17:45:02]23289: WAF :: fetched 13 new logs [27-05-2022 17:46:01]25998: WAF :: fetched 10 new logs [27-05-2022 17:47:02]28807: WAF :: fetched 6 new logs [27-05-2022 17:50:01]4518: WAF :: fetched 3 new logs [27-05-2022 17:51:02]7244: WAF :: fetched 2 new logs [27-05-2022 17:52:02]10009: WAF :: fetched 2 new logs [27-05-2022 17:53:01]12629: WAF :: fetched 2 new logs [27-05-2022 17:54:02]15325: WAF :: fetched 2 new logs [27-05-2022 17:55:01]18035: WAF :: fetched 1 new logs [27-05-2022 17:56:01]20740: WAF :: fetched 1 new logs [27-05-2022 17:57:02]23535: WAF :: fetched 3 new logs [27-05-2022 17:58:01]26174: WAF :: fetched 1 new logs [27-05-2022 18:00:02]31346: WAF :: fetched 1 new logs [27-05-2022 18:01:02]2224: WAF :: fetched 5 new logs [27-05-2022 18:02:01]5026: WAF :: fetched 10 new logs [27-05-2022 18:03:02]7697: WAF :: fetched 7 new logs [27-05-2022 18:04:01]10365: WAF :: fetched 5 new logs [27-05-2022 18:05:02]13038: WAF :: fetched 4 new logs [27-05-2022 18:06:02]15710: WAF :: fetched 7 new logs [27-05-2022 18:07:01]18483: WAF :: fetched 8 new logs [27-05-2022 18:08:02]21215: WAF :: fetched 9 new logs [27-05-2022 18:09:01]23855: WAF :: fetched 14 new logs [27-05-2022 18:10:01]26550: WAF :: fetched 16 new logs [27-05-2022 18:11:01]29300: WAF :: fetched 15 new logs [27-05-2022 18:12:01]32050: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653685921 [27-05-2022 18:12:01]32050: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 18:12:03]32050: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 18:12:03]32050: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-1812/20220527-181201-YpE-oU8IykuxkD4jzo731QAAABI [27-05-2022 18:12:03]32050: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 18:12:03]32050: WAF :: fetched 15 new logs [27-05-2022 18:13:02]2411: WAF :: fetched 10 new logs [27-05-2022 18:14:01]5107: WAF :: fetched 6 new logs [27-05-2022 18:18:02]15899: WAF :: fetched 2 new logs [27-05-2022 18:19:01]18515: WAF :: fetched 5 new logs [27-05-2022 18:20:02]21200: WAF :: fetched 6 new logs [27-05-2022 18:21:01]23887: WAF :: fetched 5 new logs [27-05-2022 18:23:01]29316: WAF :: fetched 4 new logs [27-05-2022 18:25:02]2333: WAF :: fetched 4 new logs [27-05-2022 18:26:01]5061: WAF :: fetched 6 new logs [27-05-2022 18:27:02]7813: WAF :: fetched 8 new logs [27-05-2022 18:28:01]10424: WAF :: fetched 7 new logs [27-05-2022 18:29:02]13088: WAF :: fetched 8 new logs [27-05-2022 18:30:02]15765: WAF :: fetched 5 new logs [27-05-2022 18:32:02]21235: WAF :: fetched 1 new logs [27-05-2022 18:33:01]23860: WAF :: fetched 1 new logs [27-05-2022 18:34:01]26529: WAF :: fetched 3 new logs [27-05-2022 18:35:02]29240: WAF :: fetched 8 new logs [27-05-2022 18:36:01]31915: WAF :: fetched 4 new logs [27-05-2022 18:37:02]2331: WAF :: fetched 11 new logs [27-05-2022 18:38:01]5015: WAF :: fetched 14 new logs [27-05-2022 18:39:01]7733: WAF :: fetched 24 new logs [27-05-2022 18:40:02]10458: WAF :: fetched 19 new logs [27-05-2022 18:41:01]13126: WAF :: fetched 12 new logs [27-05-2022 18:41:01]13126: Checking for user cron vulnerabilities [27-05-2022 18:42:02]15882: WAF :: fetched 10 new logs [27-05-2022 18:43:01]18476: WAF :: fetched 7 new logs [27-05-2022 18:44:01]21117: Checking ditributed CMS bruteforce attacks [27-05-2022 18:44:01]21117: WAF :: fetched 5 new logs [27-05-2022 18:46:01]26489: WAF :: fetched 1 new logs [27-05-2022 18:47:02]29253: WAF :: fetched 3 new logs [27-05-2022 18:48:01]31858: WAF :: fetched 5 new logs [27-05-2022 18:49:01]2156: WAF :: fetched 11 new logs [27-05-2022 18:50:02]4874: WAF :: fetched 10 new logs [27-05-2022 18:51:02]7525: WAF :: fetched 6 new logs [27-05-2022 18:52:01]10231: WAF :: fetched 5 new logs [27-05-2022 18:53:02]12865: WAF :: fetched 2 new logs [27-05-2022 18:54:02]15505: WAF :: fetched 7 new logs [27-05-2022 18:55:02]18173: WAF :: fetched 6 new logs [27-05-2022 18:56:02]20807: WAF :: fetched 3 new logs [27-05-2022 19:03:02]7506: WAF :: fetched 5 new logs [27-05-2022 19:04:01]10167: WAF :: fetched 9 new logs [27-05-2022 19:05:01]12796: WAF :: fetched 10 new logs [27-05-2022 19:06:02]15508: WAF :: fetched 3 new logs [27-05-2022 19:07:01]18193: WAF :: fetched 1 new logs [27-05-2022 19:08:02]20828: WAF :: fetched 3 new logs [27-05-2022 19:10:01]26114: WAF :: fetched 1 new logs [27-05-2022 19:11:02]28827: WAF :: fetched 2 new logs [27-05-2022 19:12:01]31560: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653689521 [27-05-2022 19:12:02]31560: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 19:12:04]31560: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 19:12:04]31560: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-1912/20220527-191202-YpFMsgR2_rOkJ4TYYkYAkAAAABQ [27-05-2022 19:12:04]31560: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 19:14:02]4520: WAF :: fetched 3 new logs [27-05-2022 19:15:01]7182: WAF :: fetched 1 new logs [27-05-2022 19:16:02]9854: WAF :: fetched 3 new logs [27-05-2022 19:17:01]12538: WAF :: fetched 1 new logs [27-05-2022 19:18:02]15219: WAF :: fetched 11 new logs [27-05-2022 19:19:01]17844: WAF :: fetched 10 new logs [27-05-2022 19:20:02]20535: WAF :: fetched 9 new logs [27-05-2022 19:21:01]23213: WAF :: fetched 14 new logs [27-05-2022 19:22:01]25933: WAF :: fetched 19 new logs [27-05-2022 19:23:02]28608: WAF :: fetched 15 new logs [27-05-2022 19:24:01]31255: WAF :: fetched 18 new logs [27-05-2022 19:25:02]1552: WAF :: fetched 12 new logs [27-05-2022 19:26:01]4257: WAF :: fetched 6 new logs [27-05-2022 19:27:01]7019: WAF :: fetched 4 new logs [27-05-2022 19:28:02]9669: WAF :: fetched 1 new logs [27-05-2022 19:31:02]17636: WAF :: fetched 1 new logs [27-05-2022 19:33:01]22988: WAF :: fetched 2 new logs [27-05-2022 19:34:02]25636: WAF :: fetched 5 new logs [27-05-2022 19:35:01]28264: WAF :: fetched 4 new logs [27-05-2022 19:36:02]30946: WAF :: fetched 9 new logs [27-05-2022 19:37:02]1207: WAF :: fetched 11 new logs [27-05-2022 19:38:01]3866: WAF :: fetched 8 new logs [27-05-2022 19:39:02]6447: WAF :: fetched 10 new logs [27-05-2022 19:40:01]9008: WAF :: fetched 12 new logs [27-05-2022 19:41:02]11640: WAF :: fetched 14 new logs [27-05-2022 19:41:02]11640: Checking for user cron vulnerabilities [27-05-2022 19:42:01]14272: WAF :: fetched 10 new logs [27-05-2022 19:43:02]16792: WAF :: fetched 10 new logs [27-05-2022 19:44:01]19349: Checking ditributed CMS bruteforce attacks [27-05-2022 19:44:01]19349: WAF :: fetched 19 new logs [27-05-2022 19:45:02]: Checking for definition updates [27-05-2022 19:45:02]21875: WAF :: fetched 11 new logs [27-05-2022 19:46:01]24374: WAF :: fetched 5 new logs [27-05-2022 19:47:02]27075: WAF :: fetched 2 new logs [27-05-2022 19:48:02]29606: WAF :: fetched 4 new logs [27-05-2022 19:49:01]32156: WAF :: fetched 10 new logs [27-05-2022 19:50:02]2404: WAF :: fetched 4 new logs [27-05-2022 19:51:02]5006: WAF :: fetched 5 new logs [27-05-2022 19:52:01]7607: WAF :: fetched 3 new logs [27-05-2022 19:53:02]10167: WAF :: fetched 1 new logs [27-05-2022 19:57:01]20805: WAF :: fetched 1 new logs [27-05-2022 19:58:02]23493: WAF :: fetched 2 new logs [27-05-2022 19:59:02]26082: WAF :: fetched 5 new logs [27-05-2022 20:00:01]28476: WAF :: fetched 5 new logs [27-05-2022 20:01:02]31646: WAF :: fetched 4 new logs [27-05-2022 20:02:02]2035: WAF :: fetched 7 new logs [27-05-2022 20:03:01]4684: WAF :: fetched 3 new logs [27-05-2022 20:04:02]7336: WAF :: fetched 3 new logs [27-05-2022 20:05:01]9975: WAF :: fetched 6 new logs [27-05-2022 20:06:02]12675: WAF :: fetched 9 new logs [27-05-2022 20:07:02]15336: WAF :: fetched 8 new logs [27-05-2022 20:08:01]17991: WAF :: fetched 10 new logs [27-05-2022 20:09:02]20682: WAF :: fetched 4 new logs [27-05-2022 20:10:01]23317: WAF :: fetched 7 new logs [27-05-2022 20:11:02]25979: WAF :: fetched 6 new logs [27-05-2022 20:12:02]28701: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653693122 [27-05-2022 20:12:02]28701: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 20:12:04]28701: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 20:12:04]28701: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-2012/20220527-201202-YpFawuTSER1n0ayaW3FreQAAABA [27-05-2022 20:12:04]28701: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 20:12:04]28701: WAF :: fetched 5 new logs [27-05-2022 20:13:01]31359: WAF :: fetched 4 new logs [27-05-2022 20:14:02]1630: WAF :: fetched 6 new logs [27-05-2022 20:15:02]4286: WAF :: fetched 6 new logs [27-05-2022 20:16:02]6978: WAF :: fetched 5 new logs [27-05-2022 20:17:02]9676: WAF :: fetched 5 new logs [27-05-2022 20:18:02]12276: WAF :: fetched 6 new logs [27-05-2022 20:19:01]14893: WAF :: fetched 18 new logs [27-05-2022 20:20:02]17585: WAF :: fetched 23 new logs [27-05-2022 20:21:01]20261: WAF :: fetched 27 new logs [27-05-2022 20:22:02]22989: WAF :: fetched 15 new logs [27-05-2022 20:23:01]25575: WAF :: fetched 9 new logs [27-05-2022 20:24:01]28174: WAF :: fetched 7 new logs [27-05-2022 20:25:02]30878: WAF :: fetched 8 new logs [27-05-2022 20:26:01]1160: WAF :: fetched 8 new logs [27-05-2022 20:27:02]3943: WAF :: fetched 25 new logs [27-05-2022 20:28:02]6508: WAF :: fetched 75 new logs [27-05-2022 20:29:01]9113: WAF :: fetched 138 new logs [27-05-2022 20:30:02]11795: WAF :: fetched 134 new logs [27-05-2022 20:31:02]14466: WAF :: fetched 91 new logs [27-05-2022 20:32:01]17163: WAF :: fetched 100 new logs [27-05-2022 20:33:02]19794: WAF :: fetched 112 new logs [27-05-2022 20:34:01]22440: WAF :: fetched 198 new logs [27-05-2022 20:35:02]25104: WAF :: fetched 114 new logs [27-05-2022 20:36:02]27758: WAF :: fetched 107 new logs [27-05-2022 20:37:01]30404: WAF :: fetched 111 new logs [27-05-2022 20:38:01]640: WAF :: fetched 105 new logs [27-05-2022 20:39:01]3377: WAF :: fetched 103 new logs [27-05-2022 20:40:02]6045: WAF :: fetched 107 new logs [27-05-2022 20:41:01]8695: WAF :: fetched 18 new logs [27-05-2022 20:41:01]8695: Checking for user cron vulnerabilities [27-05-2022 20:42:02]11392: WAF :: fetched 110 new logs [27-05-2022 20:43:02]14022: WAF :: fetched 96 new logs [27-05-2022 20:44:01]16655: Checking ditributed CMS bruteforce attacks [27-05-2022 20:44:01]16655: WAF :: fetched 98 new logs [27-05-2022 20:45:02]19322: WAF :: fetched 109 new logs [27-05-2022 20:46:01]21980: WAF :: fetched 113 new logs [27-05-2022 20:47:02]24693: WAF :: fetched 111 new logs [27-05-2022 20:48:02]27336: WAF :: fetched 102 new logs [27-05-2022 20:49:01]29955: WAF :: fetched 107 new logs [27-05-2022 20:50:02]32695: WAF :: fetched 70 new logs [27-05-2022 20:51:01]3041: WAF :: fetched 2 new logs [27-05-2022 20:52:01]5674: WAF :: fetched 6 new logs [27-05-2022 20:53:02]8364: WAF :: fetched 5 new logs [27-05-2022 20:54:01]11000: WAF :: fetched 6 new logs [27-05-2022 20:55:02]13671: WAF :: fetched 10 new logs [27-05-2022 20:56:01]16300: WAF :: fetched 6 new logs [27-05-2022 20:57:02]18922: WAF :: fetched 7 new logs [27-05-2022 20:58:02]21591: WAF :: fetched 6 new logs [27-05-2022 20:59:01]24213: WAF :: fetched 10 new logs [27-05-2022 21:00:02]26586: WAF :: fetched 8 new logs [27-05-2022 21:01:01]29775: WAF :: fetched 10 new logs [27-05-2022 21:02:02]32458: WAF :: fetched 12 new logs [27-05-2022 21:03:02]2865: WAF :: fetched 8 new logs [27-05-2022 21:04:01]5507: WAF :: fetched 13 new logs [27-05-2022 21:05:02]8195: WAF :: fetched 12 new logs [27-05-2022 21:06:01]10869: WAF :: fetched 14 new logs [27-05-2022 21:07:01]13495: WAF :: fetched 10 new logs [27-05-2022 21:08:02]16298: WAF :: fetched 15 new logs [27-05-2022 21:09:01]18941: WAF :: fetched 14 new logs [27-05-2022 21:10:02]21636: WAF :: fetched 5 new logs [27-05-2022 21:11:01]24307: WAF :: fetched 2 new logs [27-05-2022 21:12:01]26971: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653696721 [27-05-2022 21:12:01]26971: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 21:12:03]26971: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 21:12:03]26971: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-2112/20220527-211201-YpFo0fWA8eIQS3zYVelCTwAAAAg [27-05-2022 21:12:03]26971: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 21:12:04]26971: WAF :: fetched 11 new logs [27-05-2022 21:13:02]29735: WAF :: fetched 9 new logs [27-05-2022 21:14:01]32360: WAF :: fetched 10 new logs [27-05-2022 21:15:02]2730: WAF :: fetched 14 new logs [27-05-2022 21:16:01]5410: WAF :: fetched 9 new logs [27-05-2022 21:17:02]8086: WAF :: fetched 12 new logs [27-05-2022 21:18:02]10829: WAF :: fetched 10 new logs [27-05-2022 21:19:01]13455: WAF :: fetched 7 new logs [27-05-2022 21:20:02]16116: WAF :: fetched 7 new logs [27-05-2022 21:21:01]18804: WAF :: fetched 4 new logs [27-05-2022 21:22:02]21492: WAF :: fetched 5 new logs [27-05-2022 21:23:01]24184: WAF :: fetched 7 new logs [27-05-2022 21:24:02]26843: WAF :: fetched 58 new logs [27-05-2022 21:25:02]29521: WAF :: fetched 77 new logs [27-05-2022 21:26:01]32220: WAF :: fetched 75 new logs [27-05-2022 21:27:02]2587: WAF :: fetched 9 new logs [27-05-2022 21:28:01]5274: WAF :: fetched 26 new logs [27-05-2022 21:29:01]7885: WAF :: fetched 13 new logs [27-05-2022 21:30:02]10573: WAF :: fetched 1 new logs [27-05-2022 21:31:01]13221: WAF :: fetched 1 new logs [27-05-2022 21:32:02]15962: WAF :: fetched 2 new logs [27-05-2022 21:33:01]18657: WAF :: fetched 1 new logs [27-05-2022 21:34:02]21335: WAF :: fetched 3 new logs [27-05-2022 21:37:01]29269: WAF :: fetched 3 new logs [27-05-2022 21:38:02]32021: WAF :: fetched 9 new logs [27-05-2022 21:39:02]2374: WAF :: fetched 16 new logs [27-05-2022 21:40:01]5055: WAF :: fetched 6 new logs [27-05-2022 21:41:02]7820: WAF :: fetched 3 new logs [27-05-2022 21:41:02]7820: Checking for user cron vulnerabilities [27-05-2022 21:42:01]10448: WAF :: fetched 8 new logs [27-05-2022 21:43:02]13179: WAF :: fetched 4 new logs [27-05-2022 21:44:01]15796: Checking ditributed CMS bruteforce attacks [27-05-2022 21:45:01]18422: WAF :: fetched 1 new logs [27-05-2022 21:46:02]21133: WAF :: fetched 2 new logs [27-05-2022 21:49:02]29150: WAF :: fetched 5 new logs [27-05-2022 21:50:01]31888: WAF :: fetched 5 new logs [27-05-2022 21:51:02]2304: WAF :: fetched 2 new logs [27-05-2022 21:53:01]7676: WAF :: fetched 2 new logs [27-05-2022 21:54:02]10341: WAF :: fetched 5 new logs [27-05-2022 21:55:01]12964: WAF :: fetched 1 new logs [27-05-2022 21:56:02]15696: WAF :: fetched 3 new logs [27-05-2022 21:57:01]18316: WAF :: fetched 3 new logs [27-05-2022 21:58:01]21052: WAF :: fetched 5 new logs [27-05-2022 21:59:02]23745: WAF :: fetched 13 new logs [27-05-2022 22:00:02]26107: WAF :: fetched 21 new logs [27-05-2022 22:01:02]29257: WAF :: fetched 20 new logs [27-05-2022 22:02:02]31958: WAF :: fetched 16 new logs [27-05-2022 22:03:01]2331: WAF :: fetched 17 new logs [27-05-2022 22:04:02]5011: WAF :: fetched 15 new logs [27-05-2022 22:05:02]7639: WAF :: fetched 11 new logs [27-05-2022 22:06:01]10365: WAF :: fetched 14 new logs [27-05-2022 22:07:02]13019: WAF :: fetched 17 new logs [27-05-2022 22:07:09]13016: Performing Domain reputation checks [27-05-2022 22:08:01]15731: WAF :: fetched 14 new logs [27-05-2022 22:09:01]18398: WAF :: fetched 8 new logs [27-05-2022 22:10:02]21135: WAF :: fetched 21 new logs [27-05-2022 22:11:02]23858: WAF :: fetched 15 new logs [27-05-2022 22:12:01]26564: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653700321 [27-05-2022 22:12:01]26564: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 22:12:03]26564: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 22:12:03]26564: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-2212/20220527-221201-YpF24bUQCbK4_rFVgoiUKgAAABA [27-05-2022 22:12:03]26564: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 22:12:04]26564: WAF :: fetched 10 new logs [27-05-2022 22:13:02]29428: WAF :: fetched 11 new logs [27-05-2022 22:14:01]32103: WAF :: fetched 8 new logs [27-05-2022 22:16:01]5196: WAF :: fetched 2 new logs [27-05-2022 22:17:02]8008: WAF :: fetched 3 new logs [27-05-2022 22:18:02]10779: WAF :: fetched 8 new logs [27-05-2022 22:19:01]13473: WAF :: fetched 6 new logs [27-05-2022 22:20:02]16208: WAF :: fetched 8 new logs [27-05-2022 22:21:01]18629: WAF :: fetched 5 new logs [27-05-2022 22:22:02]21614: WAF :: fetched 3 new logs [27-05-2022 22:23:01]24349: WAF :: fetched 3 new logs [27-05-2022 22:24:02]27025: WAF :: fetched 7 new logs [27-05-2022 22:25:01]29709: WAF :: fetched 8 new logs [27-05-2022 22:26:01]32406: WAF :: fetched 6 new logs [27-05-2022 22:27:02]2776: WAF :: fetched 2 new logs [27-05-2022 22:28:01]5542: WAF :: fetched 1 new logs [27-05-2022 22:29:02]8266: WAF :: fetched 2 new logs [27-05-2022 22:30:02]10961: WAF :: fetched 1 new logs [27-05-2022 22:37:02]30009: WAF :: fetched 3 new logs [27-05-2022 22:38:01]32724: WAF :: fetched 1 new logs [27-05-2022 22:40:02]5796: WAF :: fetched 4 new logs [27-05-2022 22:41:01]8538: WAF :: fetched 3 new logs [27-05-2022 22:41:01]8538: Checking for user cron vulnerabilities [27-05-2022 22:42:02]11291: WAF :: fetched 9 new logs [27-05-2022 22:43:01]14065: WAF :: fetched 10 new logs [27-05-2022 22:44:01]16791: Checking ditributed CMS bruteforce attacks [27-05-2022 22:44:01]16791: WAF :: fetched 8 new logs [27-05-2022 22:45:02]19530: WAF :: fetched 4 new logs [27-05-2022 22:46:01]22358: WAF :: fetched 3 new logs [27-05-2022 22:51:01]3547: WAF :: fetched 1 new logs [27-05-2022 22:52:02]6213: WAF :: fetched 4 new logs [27-05-2022 22:53:01]8933: WAF :: fetched 3 new logs [27-05-2022 22:54:02]11624: WAF :: fetched 4 new logs [27-05-2022 22:55:01]14323: WAF :: fetched 3 new logs [27-05-2022 22:56:01]17176: WAF :: fetched 5 new logs [27-05-2022 22:57:01]19902: WAF :: fetched 4 new logs [27-05-2022 22:58:02]22645: WAF :: fetched 1 new logs [27-05-2022 23:00:02]27650: WAF :: fetched 1 new logs [27-05-2022 23:04:02]7113: WAF :: fetched 1 new logs [27-05-2022 23:05:02]9800: WAF :: fetched 1 new logs [27-05-2022 23:07:40]15447: Performed RBL check for 23.111.136.34. [27-05-2022 23:09:01]20732: WAF :: fetched 1 new logs [27-05-2022 23:11:01]26161: WAF :: fetched 2 new logs [27-05-2022 23:12:02]28900: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653703922 [27-05-2022 23:12:02]28900: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-05-2022 23:12:04]28900: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-05-2022 23:12:04]28900: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220527/20220527-2312/20220527-231202-YpGE8p5SVQOuniitRWN5MwAAAAQ [27-05-2022 23:12:04]28900: WAF :: No suitable log file found. Using SQLite.. [27-05-2022 23:12:04]28900: WAF :: fetched 1 new logs [27-05-2022 23:13:01]31667: WAF :: fetched 2 new logs [27-05-2022 23:15:02]4769: WAF :: fetched 1 new logs [27-05-2022 23:18:01]12750: WAF :: fetched 2 new logs [27-05-2022 23:19:02]15700: WAF :: fetched 1221 new logs [27-05-2022 23:21:02]21129: httpd.conf changed. Refreshing watchlist. [27-05-2022 23:24:02]29281: WAF :: fetched 1244 new logs [27-05-2022 23:25:01]31933: WAF :: fetched 2 new logs [27-05-2022 23:26:02]2311: WAF :: fetched 5 new logs [27-05-2022 23:27:01]5042: WAF :: fetched 10 new logs [27-05-2022 23:27:01]5050: httpd.conf changed. Refreshing watchlist. [27-05-2022 23:28:02]7822: WAF :: fetched 6 new logs [27-05-2022 23:29:01]10384: WAF :: fetched 4 new logs [27-05-2022 23:30:02]13214: WAF :: fetched 8 new logs [27-05-2022 23:31:01]15891: WAF :: fetched 5 new logs [27-05-2022 23:32:01]18565: WAF :: fetched 7 new logs [27-05-2022 23:33:02]21324: WAF :: fetched 2 new logs [27-05-2022 23:34:01]24011: WAF :: fetched 8 new logs [27-05-2022 23:35:02]26737: WAF :: fetched 7 new logs [27-05-2022 23:36:01]29449: WAF :: fetched 9 new logs [27-05-2022 23:37:02]32221: WAF :: fetched 12 new logs [27-05-2022 23:38:01]2685: WAF :: fetched 8 new logs [27-05-2022 23:39:02]5471: WAF :: fetched 7 new logs [27-05-2022 23:40:02]8158: WAF :: fetched 10 new logs [27-05-2022 23:41:01]10892: WAF :: fetched 10 new logs [27-05-2022 23:41:01]10892: Checking for user cron vulnerabilities [27-05-2022 23:42:02]13614: WAF :: fetched 11 new logs [27-05-2022 23:43:01]16360: WAF :: fetched 2 new logs [27-05-2022 23:44:02]19047: Checking ditributed CMS bruteforce attacks [27-05-2022 23:44:02]19047: WAF :: fetched 3 new logs [27-05-2022 23:45:01]21640: WAF :: fetched 7 new logs [27-05-2022 23:46:02]24449: WAF :: fetched 9 new logs [27-05-2022 23:47:01]27103: WAF :: fetched 8 new logs [27-05-2022 23:48:01]29912: WAF :: fetched 4 new logs [27-05-2022 23:49:02]32674: WAF :: fetched 1 new logs [27-05-2022 23:50:01]3043: WAF :: fetched 4 new logs [27-05-2022 23:51:02]5807: WAF :: fetched 4 new logs [27-05-2022 23:52:01]8457: WAF :: fetched 7 new logs [27-05-2022 23:53:01]11233: WAF :: fetched 6 new logs [27-05-2022 23:54:02]13912: WAF :: fetched 5 new logs [27-05-2022 23:54:02]13911: httpd.conf changed. Refreshing watchlist. [27-05-2022 23:55:01]16509: WAF :: fetched 2 new logs [27-05-2022 23:56:01]19216: WAF :: fetched 7 new logs [27-05-2022 23:56:01]19217: httpd.conf changed. Refreshing watchlist. [27-05-2022 23:57:02]21849: WAF :: fetched 7 new logs [27-05-2022 23:58:01]24553: WAF :: fetched 6 new logs [27-05-2022 23:59:01]27146: WAF :: fetched 3 new logs [28-05-2022 00:00:02]29712: WAF :: fetched 176 new logs [28-05-2022 00:01:02]530: httpd.conf changed. Refreshing watchlist. [28-05-2022 00:01:03]529: Sending daily report for May 28, 2022 [28-05-2022 00:05:01]11284: WAF :: fetched 3 new logs [28-05-2022 00:05:01]11284: Deleted 0 entries older than 6 MONTH from scanner_logs [28-05-2022 00:05:01]11284: Deleted 0 files from Quarantine [28-05-2022 00:06:02]13914: WAF :: fetched 3 new logs [28-05-2022 00:07:01]16469: WAF :: fetched 6 new logs [28-05-2022 00:08:01]19152: WAF :: fetched 9 new logs [28-05-2022 00:09:02]21773: WAF :: fetched 10 new logs [28-05-2022 00:12:01]29683: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653707521 [28-05-2022 00:12:01]29683: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 00:12:03]29683: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 00:12:04]29683: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-0012/20220528-001201-YpGTATUmjb9PAVj8XWWoZQAAAAk [28-05-2022 00:12:04]29683: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 00:12:04]29683: WAF :: fetched 1 new logs [28-05-2022 00:13:02]32385: WAF :: fetched 4 new logs [28-05-2022 00:15:02]5285: WAF :: fetched 1324 new logs [28-05-2022 00:16:01]7892: WAF :: fetched 4 new logs [28-05-2022 00:17:01]10492: WAF :: fetched 9 new logs [28-05-2022 00:18:02]13185: WAF :: fetched 10 new logs [28-05-2022 00:19:01]15751: WAF :: fetched 6 new logs [28-05-2022 00:20:02]18358: WAF :: fetched 3 new logs [28-05-2022 00:21:01]21020: WAF :: fetched 2 new logs [28-05-2022 00:22:02]23621: WAF :: fetched 106 new logs [28-05-2022 00:24:02]28921: WAF :: fetched 1024 new logs [28-05-2022 00:25:02]31562: WAF :: fetched 290 new logs [28-05-2022 00:29:01]9777: WAF :: fetched 2 new logs [28-05-2022 00:30:02]12421: WAF :: fetched 2 new logs [28-05-2022 00:31:02]15061: WAF :: fetched 4 new logs [28-05-2022 00:32:01]17663: WAF :: fetched 6 new logs [28-05-2022 00:33:02]20371: WAF :: fetched 4 new logs [28-05-2022 00:34:02]22947: WAF :: fetched 6 new logs [28-05-2022 00:35:02]25525: WAF :: fetched 5 new logs [28-05-2022 00:38:02]1146: WAF :: fetched 5 new logs [28-05-2022 00:39:01]3789: WAF :: fetched 8 new logs [28-05-2022 00:40:01]6389: WAF :: fetched 5 new logs [28-05-2022 00:41:02]9048: WAF :: fetched 4 new logs [28-05-2022 00:41:02]9048: Checking for user cron vulnerabilities [28-05-2022 00:42:01]11614: WAF :: fetched 2 new logs [28-05-2022 00:43:02]14299: WAF :: fetched 6 new logs [28-05-2022 00:44:01]16875: Checking ditributed CMS bruteforce attacks [28-05-2022 00:44:01]16875: WAF :: fetched 6 new logs [28-05-2022 00:45:01]: Checking for software updates [28-05-2022 00:45:01]19472: WAF :: fetched 7 new logs [28-05-2022 00:46:02]22136: WAF :: fetched 4 new logs [28-05-2022 00:47:01]24676: WAF :: fetched 3 new logs [28-05-2022 00:50:01]32633: WAF :: fetched 2 new logs [28-05-2022 00:55:01]13428: WAF :: fetched 7 new logs [28-05-2022 00:56:02]16056: WAF :: fetched 12 new logs [28-05-2022 00:57:01]18667: WAF :: fetched 13 new logs [28-05-2022 00:58:02]21362: WAF :: fetched 12 new logs [28-05-2022 00:59:02]23946: WAF :: fetched 8 new logs [28-05-2022 01:00:02]26291: WAF :: fetched 4 new logs [28-05-2022 01:01:01]30012: WAF :: fetched 3 new logs [28-05-2022 01:02:02]645: WAF :: fetched 14 new logs [28-05-2022 01:03:01]3815: WAF :: fetched 15 new logs [28-05-2022 01:04:02]6742: WAF :: fetched 17 new logs [28-05-2022 01:05:01]9626: WAF :: fetched 11 new logs [28-05-2022 01:06:01]12498: WAF :: fetched 6 new logs [28-05-2022 01:08:01]17867: WAF :: fetched 2 new logs [28-05-2022 01:09:02]20483: WAF :: fetched 1 new logs [28-05-2022 01:12:01]28826: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653711121 [28-05-2022 01:12:01]28826: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 01:12:03]28826: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 01:12:04]28826: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-0112/20220528-011201-YpGhETdWDnF2FfJJ88z13AAAAA4 [28-05-2022 01:12:04]28826: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 01:12:04]28826: WAF :: fetched 1 new logs [28-05-2022 01:14:02]2207: WAF :: fetched 1 new logs [28-05-2022 01:16:01]7714: WAF :: fetched 1 new logs [28-05-2022 01:18:01]13610: WAF :: fetched 1 new logs [28-05-2022 01:19:02]16559: WAF :: fetched 1 new logs [28-05-2022 01:20:01]19302: WAF :: fetched 4 new logs [28-05-2022 01:21:02]22017: WAF :: fetched 10 new logs [28-05-2022 01:22:01]24595: WAF :: fetched 13 new logs [28-05-2022 01:23:02]27750: WAF :: fetched 11 new logs [28-05-2022 01:24:02]30603: WAF :: fetched 12 new logs [28-05-2022 01:25:01]1074: WAF :: fetched 5 new logs [28-05-2022 01:26:02]3875: WAF :: fetched 10 new logs [28-05-2022 01:27:01]6645: WAF :: fetched 6 new logs [28-05-2022 01:28:02]9847: WAF :: fetched 4 new logs [28-05-2022 01:29:02]12559: WAF :: fetched 3 new logs [28-05-2022 01:30:01]15448: WAF :: fetched 5 new logs [28-05-2022 01:31:02]18511: WAF :: fetched 3 new logs [28-05-2022 01:32:02]21319: WAF :: fetched 3 new logs [28-05-2022 01:33:01]24019: WAF :: fetched 2 new logs [28-05-2022 01:34:02]27068: WAF :: fetched 3 new logs [28-05-2022 01:35:02]29821: WAF :: fetched 4 new logs [28-05-2022 01:36:01]32653: WAF :: fetched 2 new logs [28-05-2022 01:37:02]3423: WAF :: fetched 2 new logs [28-05-2022 01:41:02]15009: Checking for user cron vulnerabilities [28-05-2022 01:44:02]23224: Checking ditributed CMS bruteforce attacks [28-05-2022 01:45:01]: Checking for definition updates [28-05-2022 01:45:02]25932: WAF :: fetched 1 new logs [28-05-2022 01:47:02]31865: WAF :: fetched 1 new logs [28-05-2022 01:48:01]2236: WAF :: fetched 2 new logs [28-05-2022 01:49:01]5012: WAF :: fetched 1 new logs [28-05-2022 01:52:01]13355: WAF :: fetched 6 new logs [28-05-2022 01:53:02]15999: WAF :: fetched 9 new logs [28-05-2022 01:54:02]18765: WAF :: fetched 9 new logs [28-05-2022 01:55:02]21432: WAF :: fetched 8 new logs [28-05-2022 01:56:02]24396: WAF :: fetched 10 new logs [28-05-2022 01:57:02]27223: WAF :: fetched 8 new logs [28-05-2022 01:58:01]29715: WAF :: fetched 13 new logs [28-05-2022 01:59:01]32615: WAF :: fetched 6 new logs [28-05-2022 02:00:02]2649: WAF :: fetched 3 new logs [28-05-2022 02:01:02]5836: WAF :: fetched 3 new logs [28-05-2022 02:02:01]8218: WAF :: fetched 4 new logs [28-05-2022 02:03:01]11137: WAF :: fetched 8 new logs [28-05-2022 02:04:02]13879: WAF :: fetched 11 new logs [28-05-2022 02:05:01]16459: WAF :: fetched 13 new logs [28-05-2022 02:06:01]19212: WAF :: fetched 11 new logs [28-05-2022 02:07:02]21871: WAF :: fetched 22 new logs [28-05-2022 02:08:01]24492: WAF :: fetched 8 new logs [28-05-2022 02:09:02]27249: WAF :: fetched 5 new logs [28-05-2022 02:10:01]29927: WAF :: fetched 3 new logs [28-05-2022 02:11:01]32622: WAF :: fetched 1 new logs [28-05-2022 02:12:02]2969: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653714722 [28-05-2022 02:12:02]2969: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 02:12:04]2969: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-0212/20220528-021202-YpGvItzzb-EH91IS13uMGgAAABo [28-05-2022 02:12:04]2969: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 02:12:04]2969: WAF :: fetched 1 new logs [28-05-2022 02:15:02]10938: WAF :: fetched 3 new logs [28-05-2022 02:16:01]13633: WAF :: fetched 4 new logs [28-05-2022 02:17:01]16276: WAF :: fetched 7 new logs [28-05-2022 02:18:02]18964: WAF :: fetched 5 new logs [28-05-2022 02:19:01]21675: WAF :: fetched 1 new logs [28-05-2022 02:22:02]29747: WAF :: fetched 1 new logs [28-05-2022 02:24:02]2794: WAF :: fetched 3 new logs [28-05-2022 02:25:02]5432: WAF :: fetched 1 new logs [28-05-2022 02:26:01]8116: WAF :: fetched 5 new logs [28-05-2022 02:27:02]10760: WAF :: fetched 4 new logs [28-05-2022 02:28:01]13356: WAF :: fetched 4 new logs [28-05-2022 02:29:02]16099: WAF :: fetched 4 new logs [28-05-2022 02:30:02]18708: WAF :: fetched 1 new logs [28-05-2022 02:36:01]2582: WAF :: fetched 4 new logs [28-05-2022 02:37:02]5250: WAF :: fetched 1 new logs [28-05-2022 02:38:01]7882: WAF :: fetched 7 new logs [28-05-2022 02:39:02]10577: WAF :: fetched 13 new logs [28-05-2022 02:40:02]13230: WAF :: fetched 11 new logs [28-05-2022 02:41:02]15940: WAF :: fetched 3 new logs [28-05-2022 02:41:02]15940: Checking for user cron vulnerabilities [28-05-2022 02:42:02]18569: WAF :: fetched 4 new logs [28-05-2022 02:43:02]21194: WAF :: fetched 1 new logs [28-05-2022 02:44:01]23939: Checking ditributed CMS bruteforce attacks [28-05-2022 02:44:01]23939: WAF :: fetched 7 new logs [28-05-2022 02:45:02]26615: WAF :: fetched 5 new logs [28-05-2022 02:46:02]29371: WAF :: fetched 3 new logs [28-05-2022 02:47:02]32714: WAF :: fetched 7 new logs [28-05-2022 02:48:02]3685: WAF :: fetched 1 new logs [28-05-2022 02:49:01]6642: WAF :: fetched 3 new logs [28-05-2022 02:50:01]9320: WAF :: fetched 7 new logs [28-05-2022 02:51:02]12022: WAF :: fetched 13 new logs [28-05-2022 02:52:01]14646: WAF :: fetched 14 new logs [28-05-2022 02:53:02]17298: WAF :: fetched 13 new logs [28-05-2022 02:53:02]17293: Updated license status via CDN [28-05-2022 02:54:02]20038: WAF :: fetched 7 new logs [28-05-2022 02:55:01]22726: WAF :: fetched 4 new logs [28-05-2022 02:56:02]25588: WAF :: fetched 10 new logs [28-05-2022 02:57:01]28446: WAF :: fetched 17 new logs [28-05-2022 02:58:02]31155: WAF :: fetched 14 new logs [28-05-2022 02:59:02]1641: WAF :: fetched 10 new logs [28-05-2022 03:00:01]4198: WAF :: fetched 11 new logs [28-05-2022 03:00:02]4198: Found and updated 29 CMS installations [28-05-2022 03:01:02]7473: WAF :: fetched 9 new logs [28-05-2022 03:02:01]10395: WAF :: fetched 1 new logs [28-05-2022 03:02:23]4198: Sending CMS version vulnerability report emails to cpanel users [28-05-2022 03:02:26]4198: Checking wordpress installations for suspicious directories [28-05-2022 03:03:02]13529: httpd.conf changed. Refreshing watchlist. [28-05-2022 03:04:01]16894: WAF :: fetched 6 new logs [28-05-2022 03:04:16]13575: Sending CMS version vulnerability report emails to cpanel users [28-05-2022 03:04:19]13575: Checking wordpress installations for suspicious directories [28-05-2022 03:05:01]20098: WAF :: fetched 9 new logs [28-05-2022 03:06:01]22943: WAF :: fetched 4 new logs [28-05-2022 03:07:01]25558: WAF :: fetched 5 new logs [28-05-2022 03:08:02]28243: httpd.conf changed. Refreshing watchlist. [28-05-2022 03:10:01]1534: WAF :: fetched 1 new logs [28-05-2022 03:11:02]4283: WAF :: fetched 1 new logs [28-05-2022 03:12:01]6805: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653718321 [28-05-2022 03:12:01]6805: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 03:12:03]6805: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 03:12:03]6805: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-0312/20220528-031201-YpG9MeBHVNwG-Whkkkw7JQAAAAo [28-05-2022 03:12:03]6805: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [28-05-2022 03:12:04]6805: WAF :: fetched 1 new logs [28-05-2022 03:13:01]9558: WAF :: fetched 1 new logs [28-05-2022 03:16:02]26946: WAF :: fetched 3 new logs [28-05-2022 03:17:01]13001: WAF :: fetched 12 new logs [28-05-2022 03:18:02]25216: WAF :: fetched 19 new logs [28-05-2022 03:19:02]27846: WAF :: fetched 12 new logs [28-05-2022 03:20:02]30664: WAF :: fetched 10 new logs [28-05-2022 03:21:01]1023: WAF :: fetched 7 new logs [28-05-2022 03:25:01]11733: WAF :: fetched 1 new logs [28-05-2022 03:27:01]17043: WAF :: fetched 1 new logs [28-05-2022 03:28:02]19748: WAF :: fetched 1 new logs [28-05-2022 03:32:02]30537: WAF :: fetched 1 new logs [28-05-2022 03:34:02]3965: WAF :: fetched 3 new logs [28-05-2022 03:35:01]6905: WAF :: fetched 9 new logs [28-05-2022 03:36:01]9638: WAF :: fetched 14 new logs [28-05-2022 03:37:02]12360: WAF :: fetched 30 new logs [28-05-2022 03:38:02]15081: WAF :: fetched 116 new logs [28-05-2022 03:39:01]17862: WAF :: fetched 13 new logs [28-05-2022 03:40:02]20772: WAF :: fetched 9 new logs [28-05-2022 03:41:01]23628: WAF :: fetched 5 new logs [28-05-2022 03:41:01]23628: Checking for user cron vulnerabilities [28-05-2022 03:42:02]26278: WAF :: fetched 12 new logs [28-05-2022 03:43:01]29139: WAF :: fetched 9 new logs [28-05-2022 03:44:01]32009: Checking ditributed CMS bruteforce attacks [28-05-2022 03:44:01]32009: WAF :: fetched 5 new logs [28-05-2022 03:46:02]5368: WAF :: fetched 5 new logs [28-05-2022 03:47:02]8041: WAF :: fetched 8 new logs [28-05-2022 03:48:01]10693: WAF :: fetched 12 new logs [28-05-2022 03:49:02]13346: WAF :: fetched 7 new logs [28-05-2022 03:50:01]16066: WAF :: fetched 10 new logs [28-05-2022 03:51:01]18753: WAF :: fetched 8 new logs [28-05-2022 03:52:02]21425: WAF :: fetched 15 new logs [28-05-2022 03:53:01]24055: WAF :: fetched 14 new logs [28-05-2022 03:54:02]26709: WAF :: fetched 15 new logs [28-05-2022 03:55:01]29447: WAF :: fetched 17 new logs [28-05-2022 03:56:01]32141: WAF :: fetched 10 new logs [28-05-2022 03:57:02]2466: WAF :: fetched 8 new logs [28-05-2022 03:58:01]5108: WAF :: fetched 3 new logs [28-05-2022 03:59:02]7766: WAF :: fetched 10 new logs [28-05-2022 04:00:02]10232: WAF :: fetched 13 new logs [28-05-2022 04:01:02]13365: WAF :: fetched 7 new logs [28-05-2022 04:02:01]16047: WAF :: fetched 4 new logs [28-05-2022 04:03:01]18683: WAF :: fetched 3 new logs [28-05-2022 04:05:01]24065: WAF :: fetched 1 new logs [28-05-2022 04:06:02]26797: WAF :: fetched 8 new logs [28-05-2022 04:09:02]2457: WAF :: fetched 1 new logs [28-05-2022 04:12:02]10527: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653721922 [28-05-2022 04:12:02]10527: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 04:12:04]10527: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 04:12:04]10527: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-0412/20220528-041202-YpHLQscJYhlf1GuGNJvWNQAAAAI [28-05-2022 04:12:04]10527: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [28-05-2022 04:12:04]10527: WAF :: fetched 1 new logs [28-05-2022 04:13:01]13177: WAF :: fetched 1 new logs [28-05-2022 04:14:02]15833: WAF :: fetched 1 new logs [28-05-2022 04:15:01]18564: WAF :: fetched 4 new logs [28-05-2022 04:16:02]21265: WAF :: fetched 11 new logs [28-05-2022 04:17:01]23597: WAF :: fetched 6 new logs [28-05-2022 04:18:02]26532: WAF :: fetched 7 new logs [28-05-2022 04:19:01]29210: WAF :: fetched 5 new logs [28-05-2022 04:20:02]32024: WAF :: fetched 5 new logs [28-05-2022 04:21:02]2360: WAF :: fetched 6 new logs [28-05-2022 04:22:01]5047: WAF :: fetched 5 new logs [28-05-2022 04:23:01]7716: WAF :: fetched 4 new logs [28-05-2022 04:24:02]10360: WAF :: fetched 4 new logs [28-05-2022 04:25:02]13084: WAF :: fetched 5 new logs [28-05-2022 04:26:01]15760: WAF :: fetched 6 new logs [28-05-2022 04:27:02]18427: WAF :: fetched 8 new logs [28-05-2022 04:28:01]21022: WAF :: fetched 6 new logs [28-05-2022 04:29:02]23702: WAF :: fetched 14 new logs [28-05-2022 04:30:02]26461: WAF :: fetched 11 new logs [28-05-2022 04:31:01]29207: WAF :: fetched 8 new logs [28-05-2022 04:32:02]31921: WAF :: fetched 11 new logs [28-05-2022 04:33:01]2237: WAF :: fetched 20 new logs [28-05-2022 04:34:01]4930: WAF :: fetched 25 new logs [28-05-2022 04:35:02]7703: WAF :: fetched 17 new logs [28-05-2022 04:36:01]10362: WAF :: fetched 10 new logs [28-05-2022 04:38:01]15643: WAF :: fetched 1 new logs [28-05-2022 04:41:01]23717: Checking for user cron vulnerabilities [28-05-2022 04:42:02]26392: WAF :: fetched 1 new logs [28-05-2022 04:43:02]29080: WAF :: fetched 1 new logs [28-05-2022 04:44:01]31745: Checking ditributed CMS bruteforce attacks [28-05-2022 04:44:01]31745: WAF :: fetched 5 new logs [28-05-2022 04:45:02]2159: WAF :: fetched 18 new logs [28-05-2022 04:46:01]4858: WAF :: fetched 14 new logs [28-05-2022 04:47:01]7504: WAF :: fetched 21 new logs [28-05-2022 04:48:02]10164: WAF :: fetched 8 new logs [28-05-2022 04:53:02]23530: WAF :: fetched 26 new logs [28-05-2022 04:54:01]26157: WAF :: fetched 91 new logs [28-05-2022 04:56:02]31614: WAF :: fetched 5 new logs [28-05-2022 04:57:01]1890: WAF :: fetched 16 new logs [28-05-2022 04:58:02]4588: WAF :: fetched 19 new logs [28-05-2022 04:59:01]7191: WAF :: fetched 10 new logs [28-05-2022 05:00:02]9654: WAF :: fetched 7 new logs [28-05-2022 05:01:01]12761: WAF :: fetched 3 new logs [28-05-2022 05:01:41]12758: Starting daily scan on files updated in last 24 hrs [28-05-2022 05:03:02]18061: WAF :: fetched 2 new logs [28-05-2022 05:04:01]20689: WAF :: fetched 1 new logs [28-05-2022 05:05:01]23443: WAF :: fetched 2 new logs [28-05-2022 05:06:02]26115: WAF :: fetched 9 new logs [28-05-2022 05:07:01]28777: WAF :: fetched 5 new logs [28-05-2022 05:08:02]31475: WAF :: fetched 4 new logs [28-05-2022 05:09:02]1756: WAF :: fetched 2 new logs [28-05-2022 05:10:01]4593: WAF :: fetched 2 new logs [28-05-2022 05:11:02]7256: WAF :: fetched 1 new logs [28-05-2022 05:12:01]9881: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653725521 [28-05-2022 05:12:01]9881: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 05:12:03]9881: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 05:12:04]9881: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-0512/20220528-051201-YpHZUaA3OxidSikav0gBqgAAABU [28-05-2022 05:12:04]9881: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 05:12:04]9881: WAF :: fetched 729 new logs [28-05-2022 05:13:02]12558: WAF :: fetched 6 new logs [28-05-2022 05:14:01]15184: WAF :: fetched 8 new logs [28-05-2022 05:15:01]17905: WAF :: fetched 5 new logs [28-05-2022 05:16:02]20624: WAF :: fetched 9 new logs [28-05-2022 05:17:01]23257: WAF :: fetched 8 new logs [28-05-2022 05:18:02]25930: WAF :: fetched 11 new logs [28-05-2022 05:20:01]31354: WAF :: fetched 4 new logs [28-05-2022 05:21:01]1709: WAF :: fetched 5 new logs [28-05-2022 05:22:01]4413: WAF :: fetched 12 new logs [28-05-2022 05:23:02]7071: WAF :: fetched 7 new logs [28-05-2022 05:24:01]9685: WAF :: fetched 6 new logs [28-05-2022 05:25:02]12429: WAF :: fetched 6 new logs [28-05-2022 05:26:01]14702: WAF :: fetched 10 new logs [28-05-2022 05:27:01]17729: WAF :: fetched 10 new logs [28-05-2022 05:28:02]20381: WAF :: fetched 7 new logs [28-05-2022 05:29:02]23000: WAF :: fetched 2 new logs [28-05-2022 05:30:01]25730: WAF :: fetched 6 new logs [28-05-2022 05:31:02]28479: WAF :: fetched 7 new logs [28-05-2022 05:32:01]31158: WAF :: fetched 6 new logs [28-05-2022 05:33:02]1465: WAF :: fetched 8 new logs [28-05-2022 05:34:02]4153: WAF :: fetched 11 new logs [28-05-2022 05:35:01]6910: WAF :: fetched 11 new logs [28-05-2022 05:36:02]9633: WAF :: fetched 12 new logs [28-05-2022 05:37:02]12243: WAF :: fetched 5 new logs [28-05-2022 05:38:02]14940: WAF :: fetched 4 new logs [28-05-2022 05:40:01]20301: WAF :: fetched 4 new logs [28-05-2022 05:41:02]23015: WAF :: fetched 6 new logs [28-05-2022 05:41:02]23015: Checking for user cron vulnerabilities [28-05-2022 05:42:01]25636: WAF :: fetched 8 new logs [28-05-2022 05:43:02]28324: WAF :: fetched 5 new logs [28-05-2022 05:44:01]31055: Checking ditributed CMS bruteforce attacks [28-05-2022 05:44:01]31055: WAF :: fetched 9 new logs [28-05-2022 05:45:01]1429: WAF :: fetched 5 new logs [28-05-2022 05:46:01]4143: WAF :: fetched 4 new logs [28-05-2022 05:47:02]6822: WAF :: fetched 4 new logs [28-05-2022 05:48:01]9467: WAF :: fetched 5 new logs [28-05-2022 05:49:02]12136: WAF :: fetched 5 new logs [28-05-2022 05:50:02]14832: WAF :: fetched 2 new logs [28-05-2022 05:53:01]22847: WAF :: fetched 3 new logs [28-05-2022 05:55:02]28227: WAF :: fetched 2 new logs [28-05-2022 05:56:01]30944: WAF :: fetched 2 new logs [28-05-2022 05:57:01]1194: WAF :: fetched 3 new logs [28-05-2022 05:58:02]3931: WAF :: fetched 5 new logs [28-05-2022 05:59:02]6531: WAF :: fetched 4 new logs [28-05-2022 06:00:01]8992: WAF :: fetched 5 new logs [28-05-2022 06:01:02]12133: WAF :: fetched 4 new logs [28-05-2022 06:02:01]14791: WAF :: fetched 1 new logs [28-05-2022 06:03:02]17465: WAF :: fetched 7 new logs [28-05-2022 06:04:02]20117: WAF :: fetched 9 new logs [28-05-2022 06:05:01]22872: WAF :: fetched 12 new logs [28-05-2022 06:06:02]25621: WAF :: fetched 7 new logs [28-05-2022 06:07:01]28249: WAF :: fetched 4 new logs [28-05-2022 06:08:02]30967: WAF :: fetched 3 new logs [28-05-2022 06:09:01]1234: WAF :: fetched 5 new logs [28-05-2022 06:10:02]4038: WAF :: fetched 2 new logs [28-05-2022 06:11:01]6755: WAF :: fetched 6 new logs [28-05-2022 06:12:02]9422: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653729122 [28-05-2022 06:12:02]9422: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 06:12:04]9422: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 06:12:04]9422: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-0612/20220528-061202-YpHnYibAcQi4-g0xuAG5MQAAAAM [28-05-2022 06:12:04]9422: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 06:12:05]9422: WAF :: fetched 16 new logs [28-05-2022 06:13:02]12084: WAF :: fetched 17 new logs [28-05-2022 06:14:01]14735: WAF :: fetched 16 new logs [28-05-2022 06:15:02]17502: WAF :: fetched 10 new logs [28-05-2022 06:16:02]20204: WAF :: fetched 9 new logs [28-05-2022 06:17:02]22824: WAF :: fetched 4 new logs [28-05-2022 06:18:01]25511: WAF :: fetched 2 new logs [28-05-2022 06:19:02]28164: WAF :: fetched 2 new logs [28-05-2022 06:20:01]30981: WAF :: fetched 3 new logs [28-05-2022 06:21:01]1327: WAF :: fetched 8 new logs [28-05-2022 06:22:02]4069: WAF :: fetched 15 new logs [28-05-2022 06:23:01]6665: WAF :: fetched 13 new logs [28-05-2022 06:24:02]9347: WAF :: fetched 12 new logs [28-05-2022 06:25:02]12058: WAF :: fetched 1 new logs [28-05-2022 06:26:01]14777: WAF :: fetched 2 new logs [28-05-2022 06:27:02]17606: WAF :: fetched 10 new logs [28-05-2022 06:28:01]20244: WAF :: fetched 15 new logs [28-05-2022 06:29:02]22918: WAF :: fetched 13 new logs [28-05-2022 06:30:02]25638: WAF :: fetched 5 new logs [28-05-2022 06:31:01]28359: WAF :: fetched 8 new logs [28-05-2022 06:32:02]31077: WAF :: fetched 3 new logs [28-05-2022 06:33:01]1321: WAF :: fetched 5 new logs [28-05-2022 06:34:02]4096: WAF :: fetched 3 new logs [28-05-2022 06:37:02]12248: WAF :: fetched 2 new logs [28-05-2022 06:40:01]20255: WAF :: fetched 3 new logs [28-05-2022 06:41:01]22932: WAF :: fetched 3 new logs [28-05-2022 06:41:01]22932: Checking for user cron vulnerabilities [28-05-2022 06:44:02]30945: Checking ditributed CMS bruteforce attacks [28-05-2022 06:44:02]30945: WAF :: fetched 2 new logs [28-05-2022 06:45:01]1273: WAF :: fetched 15 new logs [28-05-2022 06:46:02]4059: WAF :: fetched 12 new logs [28-05-2022 06:47:01]6671: WAF :: fetched 7 new logs [28-05-2022 06:48:02]9331: WAF :: fetched 5 new logs [28-05-2022 06:49:02]11955: WAF :: fetched 5 new logs [28-05-2022 06:50:01]14685: WAF :: fetched 5 new logs [28-05-2022 06:51:02]17390: WAF :: fetched 13 new logs [28-05-2022 06:52:02]20003: WAF :: fetched 39 new logs [28-05-2022 06:53:01]22668: WAF :: fetched 25 new logs [28-05-2022 06:54:02]25315: WAF :: fetched 32 new logs [28-05-2022 06:55:01]28053: WAF :: fetched 28 new logs [28-05-2022 06:56:02]30780: WAF :: fetched 46 new logs [28-05-2022 06:57:02]1068: WAF :: fetched 30 new logs [28-05-2022 06:58:01]3754: WAF :: fetched 16 new logs [28-05-2022 06:59:02]6422: WAF :: fetched 33 new logs [28-05-2022 07:00:01]8851: WAF :: fetched 38 new logs [28-05-2022 07:01:01]12032: WAF :: fetched 22 new logs [28-05-2022 07:02:01]14759: WAF :: fetched 8 new logs [28-05-2022 07:03:02]17466: WAF :: fetched 7 new logs [28-05-2022 07:04:02]20131: WAF :: fetched 4 new logs [28-05-2022 07:05:01]22869: WAF :: fetched 5 new logs [28-05-2022 07:06:02]25579: WAF :: fetched 2 new logs [28-05-2022 07:07:02]28206: WAF :: fetched 5 new logs [28-05-2022 07:08:01]30923: WAF :: fetched 5 new logs [28-05-2022 07:09:02]1199: WAF :: fetched 5 new logs [28-05-2022 07:10:01]4006: WAF :: fetched 7 new logs [28-05-2022 07:11:01]6707: WAF :: fetched 13 new logs [28-05-2022 07:12:02]9379: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653732722 [28-05-2022 07:12:02]9379: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 07:12:04]9379: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 07:12:04]9379: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-0712/20220528-071202-YpH1ctcIZ-Ft5jPlMLJkdwAAAAA [28-05-2022 07:12:04]9379: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 07:12:04]9379: WAF :: fetched 9 new logs [28-05-2022 07:13:01]12023: WAF :: fetched 4 new logs [28-05-2022 07:14:02]14673: WAF :: fetched 6 new logs [28-05-2022 07:15:01]17396: WAF :: fetched 8 new logs [28-05-2022 07:16:01]20080: WAF :: fetched 11 new logs [28-05-2022 07:17:02]22755: WAF :: fetched 17 new logs [28-05-2022 07:18:01]25405: WAF :: fetched 12 new logs [28-05-2022 07:19:02]28100: WAF :: fetched 6 new logs [28-05-2022 07:20:02]30879: WAF :: fetched 7 new logs [28-05-2022 07:21:01]1192: WAF :: fetched 8 new logs [28-05-2022 07:22:02]3933: WAF :: fetched 13 new logs [28-05-2022 07:23:01]6542: WAF :: fetched 12 new logs [28-05-2022 07:24:02]9191: WAF :: fetched 16 new logs [28-05-2022 07:25:01]11916: WAF :: fetched 12 new logs [28-05-2022 07:26:02]14632: WAF :: fetched 12 new logs [28-05-2022 07:27:01]17290: WAF :: fetched 8 new logs [28-05-2022 07:28:01]19939: WAF :: fetched 5 new logs [28-05-2022 07:29:02]22610: WAF :: fetched 2 new logs [28-05-2022 07:31:02]28105: WAF :: fetched 4 new logs [28-05-2022 07:32:01]30830: WAF :: fetched 10 new logs [28-05-2022 07:33:02]1151: WAF :: fetched 7 new logs [28-05-2022 07:34:01]3872: WAF :: fetched 10 new logs [28-05-2022 07:35:02]6653: WAF :: fetched 5 new logs [28-05-2022 07:36:02]9360: WAF :: fetched 2 new logs [28-05-2022 07:37:01]12063: WAF :: fetched 6 new logs [28-05-2022 07:38:02]14762: WAF :: fetched 12 new logs [28-05-2022 07:39:02]17433: WAF :: fetched 7 new logs [28-05-2022 07:40:01]20234: WAF :: fetched 10 new logs [28-05-2022 07:41:02]22966: WAF :: fetched 11 new logs [28-05-2022 07:41:02]22966: Checking for user cron vulnerabilities [28-05-2022 07:42:01]25616: WAF :: fetched 12 new logs [28-05-2022 07:43:01]28269: WAF :: fetched 10 new logs [28-05-2022 07:44:01]31044: Checking ditributed CMS bruteforce attacks [28-05-2022 07:44:02]31044: WAF :: fetched 18 new logs [28-05-2022 07:45:01]: Checking for definition updates [28-05-2022 07:45:01]1387: WAF :: fetched 6 new logs [28-05-2022 07:45:03]1384: Updated virus defnition : signatures.ndb [28-05-2022 07:46:02]4158: WAF :: fetched 8 new logs [28-05-2022 07:47:01]6758: WAF :: fetched 13 new logs [28-05-2022 07:48:02]9477: WAF :: fetched 12 new logs [28-05-2022 07:49:01]12149: WAF :: fetched 10 new logs [28-05-2022 07:50:02]14879: WAF :: fetched 13 new logs [28-05-2022 07:51:02]17617: WAF :: fetched 17 new logs [28-05-2022 07:52:01]20272: WAF :: fetched 16 new logs [28-05-2022 07:53:02]22938: WAF :: fetched 10 new logs [28-05-2022 07:58:01]4117: WAF :: fetched 9 new logs [28-05-2022 07:59:02]6818: WAF :: fetched 13 new logs [28-05-2022 08:00:02]9246: WAF :: fetched 5 new logs [28-05-2022 08:01:01]12458: WAF :: fetched 10 new logs [28-05-2022 08:02:02]15171: WAF :: fetched 6 new logs [28-05-2022 08:03:01]17811: WAF :: fetched 3 new logs [28-05-2022 08:04:01]20465: WAF :: fetched 2 new logs [28-05-2022 08:05:02]23144: WAF :: fetched 4 new logs [28-05-2022 08:06:01]25932: WAF :: fetched 1 new logs [28-05-2022 08:07:02]28648: WAF :: fetched 3 new logs [28-05-2022 08:08:02]31314: WAF :: fetched 7 new logs [28-05-2022 08:09:01]1630: WAF :: fetched 8 new logs [28-05-2022 08:10:02]4368: WAF :: fetched 6 new logs [28-05-2022 08:11:01]7152: WAF :: fetched 7 new logs [28-05-2022 08:12:01]9849: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653736321 [28-05-2022 08:12:01]9849: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 08:12:03]9849: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 08:12:03]9849: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-0812/20220528-081201-YpIDgWobfUkjbkFmYJ1ETwAAAAI [28-05-2022 08:12:03]9849: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 08:12:04]9849: WAF :: fetched 9 new logs [28-05-2022 08:13:02]12545: WAF :: fetched 9 new logs [28-05-2022 08:14:01]15193: WAF :: fetched 7 new logs [28-05-2022 08:15:02]17868: WAF :: fetched 2 new logs [28-05-2022 08:16:02]20659: WAF :: fetched 2 new logs [28-05-2022 08:17:01]23351: WAF :: fetched 3 new logs [28-05-2022 08:18:02]26034: WAF :: fetched 1 new logs [28-05-2022 08:19:01]28701: WAF :: fetched 4 new logs [28-05-2022 08:20:02]31474: WAF :: fetched 5 new logs [28-05-2022 08:21:01]1868: WAF :: fetched 3 new logs [28-05-2022 08:23:02]7245: WAF :: fetched 5 new logs [28-05-2022 08:24:01]9888: WAF :: fetched 10 new logs [28-05-2022 08:25:02]12542: WAF :: fetched 13 new logs [28-05-2022 08:26:01]15322: WAF :: fetched 9 new logs [28-05-2022 08:27:02]18017: WAF :: fetched 7 new logs [28-05-2022 08:28:02]20695: WAF :: fetched 3 new logs [28-05-2022 08:29:02]23341: WAF :: fetched 9 new logs [28-05-2022 08:30:02]26012: WAF :: fetched 11 new logs [28-05-2022 08:31:02]28829: WAF :: fetched 5 new logs [28-05-2022 08:32:02]31597: WAF :: fetched 7 new logs [28-05-2022 08:33:02]1886: WAF :: fetched 8 new logs [28-05-2022 08:34:02]4610: WAF :: fetched 11 new logs [28-05-2022 08:35:02]7287: WAF :: fetched 16 new logs [28-05-2022 08:36:02]10106: WAF :: fetched 9 new logs [28-05-2022 08:37:01]12346: WAF :: fetched 3 new logs [28-05-2022 08:38:01]15384: WAF :: fetched 8 new logs [28-05-2022 08:39:01]18071: WAF :: fetched 27 new logs [28-05-2022 08:40:01]20752: WAF :: fetched 22 new logs [28-05-2022 08:41:01]23558: WAF :: fetched 30 new logs [28-05-2022 08:41:01]23558: Checking for user cron vulnerabilities [28-05-2022 08:42:01]26244: WAF :: fetched 14 new logs [28-05-2022 08:43:02]28942: WAF :: fetched 2 new logs [28-05-2022 08:44:01]31632: Checking ditributed CMS bruteforce attacks [28-05-2022 08:44:01]31632: WAF :: fetched 11 new logs [28-05-2022 08:45:02]1919: WAF :: fetched 3 new logs [28-05-2022 08:46:01]4738: WAF :: fetched 2 new logs [28-05-2022 08:47:01]7384: WAF :: fetched 3 new logs [28-05-2022 08:49:01]12670: WAF :: fetched 9 new logs [28-05-2022 08:50:01]15385: WAF :: fetched 15 new logs [28-05-2022 08:51:01]18243: WAF :: fetched 11 new logs [28-05-2022 08:52:01]20924: WAF :: fetched 5 new logs [28-05-2022 08:53:01]23629: WAF :: fetched 6 new logs [28-05-2022 08:54:01]26340: WAF :: fetched 6 new logs [28-05-2022 08:55:02]29102: WAF :: fetched 9 new logs [28-05-2022 08:56:02]31942: WAF :: fetched 10 new logs [28-05-2022 08:57:01]2293: WAF :: fetched 23 new logs [28-05-2022 08:58:02]5020: WAF :: fetched 12 new logs [28-05-2022 08:59:02]7655: WAF :: fetched 13 new logs [28-05-2022 09:00:01]10080: WAF :: fetched 9 new logs [28-05-2022 09:01:02]13316: WAF :: fetched 9 new logs [28-05-2022 09:02:01]15878: WAF :: fetched 7 new logs [28-05-2022 09:03:02]18711: WAF :: fetched 5 new logs [28-05-2022 09:04:01]21321: WAF :: fetched 6 new logs [28-05-2022 09:05:02]24018: WAF :: fetched 4 new logs [28-05-2022 09:06:02]26781: WAF :: fetched 6 new logs [28-05-2022 09:07:02]29482: WAF :: fetched 7 new logs [28-05-2022 09:08:02]32151: WAF :: fetched 4 new logs [28-05-2022 09:09:01]2521: WAF :: fetched 7 new logs [28-05-2022 09:10:02]5274: WAF :: fetched 6 new logs [28-05-2022 09:11:01]7984: WAF :: fetched 10 new logs [28-05-2022 09:12:02]10782: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653739922 [28-05-2022 09:12:02]10782: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 09:12:04]10782: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 09:12:04]10782: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-0912/20220528-091202-YpIRknRAAAuoNyqnXMrc7gAAAAk [28-05-2022 09:12:04]10782: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 09:12:04]10782: WAF :: fetched 7 new logs [28-05-2022 09:13:01]13441: WAF :: fetched 5 new logs [28-05-2022 09:14:02]16156: WAF :: fetched 11 new logs [28-05-2022 09:15:02]18888: WAF :: fetched 7 new logs [28-05-2022 09:16:01]21763: WAF :: fetched 12 new logs [28-05-2022 09:17:01]24444: WAF :: fetched 11 new logs [28-05-2022 09:18:02]27191: WAF :: fetched 11 new logs [28-05-2022 09:19:02]29893: WAF :: fetched 15 new logs [28-05-2022 09:20:02]32642: WAF :: fetched 9 new logs [28-05-2022 09:21:02]3106: WAF :: fetched 16 new logs [28-05-2022 09:22:01]5769: WAF :: fetched 2 new logs [28-05-2022 09:23:02]8434: WAF :: fetched 10 new logs [28-05-2022 09:24:01]11120: WAF :: fetched 9 new logs [28-05-2022 09:25:01]13772: WAF :: fetched 9 new logs [28-05-2022 09:26:02]16628: WAF :: fetched 6 new logs [28-05-2022 09:27:01]19252: WAF :: fetched 6 new logs [28-05-2022 09:28:02]21931: WAF :: fetched 2 new logs [28-05-2022 09:29:01]24572: WAF :: fetched 1 new logs [28-05-2022 09:30:01]27243: WAF :: fetched 2 new logs [28-05-2022 09:31:02]30118: WAF :: fetched 3 new logs [28-05-2022 09:32:01]32765: WAF :: fetched 6 new logs [28-05-2022 09:33:02]3130: WAF :: fetched 6 new logs [28-05-2022 09:34:01]5837: WAF :: fetched 2 new logs [28-05-2022 09:35:01]8554: WAF :: fetched 9 new logs [28-05-2022 09:36:01]11352: WAF :: fetched 4 new logs [28-05-2022 09:37:01]14041: WAF :: fetched 2 new logs [28-05-2022 09:38:01]16717: WAF :: fetched 6 new logs [28-05-2022 09:39:02]19447: WAF :: fetched 2 new logs [28-05-2022 09:40:02]22168: WAF :: fetched 10 new logs [28-05-2022 09:41:01]24962: WAF :: fetched 4 new logs [28-05-2022 09:41:01]24962: Checking for user cron vulnerabilities [28-05-2022 09:42:01]27657: WAF :: fetched 2 new logs [28-05-2022 09:43:01]30355: WAF :: fetched 2 new logs [28-05-2022 09:44:01]610: Checking ditributed CMS bruteforce attacks [28-05-2022 09:44:02]610: WAF :: fetched 2 new logs [28-05-2022 09:45:02]3402: WAF :: fetched 1 new logs [28-05-2022 09:46:01]6178: WAF :: fetched 11 new logs [28-05-2022 09:47:01]8881: WAF :: fetched 11 new logs [28-05-2022 09:48:01]11666: WAF :: fetched 9 new logs [28-05-2022 09:49:01]14399: WAF :: fetched 10 new logs [28-05-2022 09:50:01]17131: WAF :: fetched 11 new logs [28-05-2022 09:51:01]19976: WAF :: fetched 13 new logs [28-05-2022 09:52:02]22732: WAF :: fetched 14 new logs [28-05-2022 09:53:02]25423: WAF :: fetched 14 new logs [28-05-2022 09:54:01]28129: WAF :: fetched 12 new logs [28-05-2022 09:55:02]30930: WAF :: fetched 9 new logs [28-05-2022 09:56:02]1393: WAF :: fetched 9 new logs [28-05-2022 09:57:02]4199: WAF :: fetched 9 new logs [28-05-2022 09:58:01]6900: WAF :: fetched 5 new logs [28-05-2022 09:59:02]9604: WAF :: fetched 2 new logs [28-05-2022 10:00:01]12035: WAF :: fetched 1 new logs [28-05-2022 10:01:02]15366: WAF :: fetched 3 new logs [28-05-2022 10:02:02]18078: WAF :: fetched 6 new logs [28-05-2022 10:03:01]20799: WAF :: fetched 8 new logs [28-05-2022 10:04:01]23498: WAF :: fetched 9 new logs [28-05-2022 10:05:02]26242: WAF :: fetched 7 new logs [28-05-2022 10:06:01]29069: WAF :: fetched 10 new logs [28-05-2022 10:07:02]31861: WAF :: fetched 8 new logs [28-05-2022 10:08:02]2183: WAF :: fetched 7 new logs [28-05-2022 10:09:01]4953: WAF :: fetched 5 new logs [28-05-2022 10:10:02]7713: WAF :: fetched 6 new logs [28-05-2022 10:11:01]10577: WAF :: fetched 3 new logs [28-05-2022 10:12:01]13282: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653743521 [28-05-2022 10:12:02]13282: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 10:12:04]13282: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 10:12:05]13282: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-1012/20220528-101202-YpIfooIKwgmcxGmNI35xMAAAADs [28-05-2022 10:12:05]13282: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 10:12:05]13282: WAF :: fetched 4 new logs [28-05-2022 10:13:02]15991: WAF :: fetched 3 new logs [28-05-2022 10:14:02]18669: WAF :: fetched 16 new logs [28-05-2022 10:15:01]21319: WAF :: fetched 14 new logs [28-05-2022 10:16:02]24133: WAF :: fetched 12 new logs [28-05-2022 10:17:02]26761: WAF :: fetched 8 new logs [28-05-2022 10:18:01]29511: WAF :: fetched 6 new logs [28-05-2022 10:19:02]32203: WAF :: fetched 10 new logs [28-05-2022 10:20:01]2467: WAF :: fetched 3 new logs [28-05-2022 10:21:02]5344: WAF :: fetched 1 new logs [28-05-2022 10:22:02]8010: WAF :: fetched 3 new logs [28-05-2022 10:23:02]10672: WAF :: fetched 5 new logs [28-05-2022 10:24:02]13322: WAF :: fetched 5 new logs [28-05-2022 10:25:01]16070: WAF :: fetched 11 new logs [28-05-2022 10:26:02]18901: WAF :: fetched 5 new logs [28-05-2022 10:27:01]21523: WAF :: fetched 4 new logs [28-05-2022 10:28:01]24245: WAF :: fetched 6 new logs [28-05-2022 10:29:02]26934: WAF :: fetched 5 new logs [28-05-2022 10:30:02]29699: WAF :: fetched 1 new logs [28-05-2022 10:31:01]32515: WAF :: fetched 3 new logs [28-05-2022 10:32:01]2875: WAF :: fetched 1 new logs [28-05-2022 10:33:01]5546: WAF :: fetched 3 new logs [28-05-2022 10:34:02]8252: WAF :: fetched 3 new logs [28-05-2022 10:36:01]13793: WAF :: fetched 4 new logs [28-05-2022 10:37:02]16432: WAF :: fetched 8 new logs [28-05-2022 10:38:01]19047: WAF :: fetched 13 new logs [28-05-2022 10:39:02]21725: WAF :: fetched 6 new logs [28-05-2022 10:40:01]24043: WAF :: fetched 4 new logs [28-05-2022 10:41:02]27213: WAF :: fetched 8 new logs [28-05-2022 10:41:02]27213: Checking for user cron vulnerabilities [28-05-2022 10:42:02]29918: WAF :: fetched 1 new logs [28-05-2022 10:43:01]32586: WAF :: fetched 3 new logs [28-05-2022 10:44:01]2972: Checking ditributed CMS bruteforce attacks [28-05-2022 10:44:01]2972: WAF :: fetched 4 new logs [28-05-2022 10:45:01]5635: WAF :: fetched 8 new logs [28-05-2022 10:46:01]8451: WAF :: fetched 3 new logs [28-05-2022 10:47:02]11176: WAF :: fetched 8 new logs [28-05-2022 10:48:02]13907: WAF :: fetched 8 new logs [28-05-2022 10:49:01]16254: WAF :: fetched 15 new logs [28-05-2022 10:50:02]19399: WAF :: fetched 13 new logs [28-05-2022 10:51:01]22265: WAF :: fetched 15 new logs [28-05-2022 10:52:01]25001: WAF :: fetched 3 new logs [28-05-2022 10:53:01]27736: WAF :: fetched 2 new logs [28-05-2022 10:54:01]30526: WAF :: fetched 6 new logs [28-05-2022 10:55:02]860: WAF :: fetched 4 new logs [28-05-2022 10:56:02]3772: WAF :: fetched 4 new logs [28-05-2022 10:57:02]6503: WAF :: fetched 5 new logs [28-05-2022 10:58:02]9212: WAF :: fetched 13 new logs [28-05-2022 10:59:02]11907: WAF :: fetched 17 new logs [28-05-2022 11:00:02]14510: WAF :: fetched 15 new logs [28-05-2022 11:01:01]17750: WAF :: fetched 10 new logs [28-05-2022 11:02:01]20438: WAF :: fetched 8 new logs [28-05-2022 11:03:02]23305: WAF :: fetched 3 new logs [28-05-2022 11:04:02]26008: WAF :: fetched 5 new logs [28-05-2022 11:05:01]28711: WAF :: fetched 8 new logs [28-05-2022 11:06:01]31614: WAF :: fetched 6 new logs [28-05-2022 11:07:02]2048: WAF :: fetched 9 new logs [28-05-2022 11:07:37]2209: Performed RBL check for 23.111.136.34. [28-05-2022 11:08:01]4766: WAF :: fetched 7 new logs [28-05-2022 11:09:02]7537: WAF :: fetched 16 new logs [28-05-2022 11:10:01]10258: WAF :: fetched 14 new logs [28-05-2022 11:11:01]13198: WAF :: fetched 19 new logs [28-05-2022 11:12:02]15973: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653747122 [28-05-2022 11:12:02]15973: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 11:12:04]15973: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 11:12:04]15973: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-1112/20220528-111202-YpItsjej6T0u7GymNhTKOAAAABo [28-05-2022 11:12:04]15973: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 11:12:04]15973: WAF :: fetched 23 new logs [28-05-2022 11:13:01]18687: WAF :: fetched 17 new logs [28-05-2022 11:14:01]21414: WAF :: fetched 10 new logs [28-05-2022 11:15:02]24147: WAF :: fetched 16 new logs [28-05-2022 11:16:01]27042: WAF :: fetched 12 new logs [28-05-2022 11:17:02]29858: WAF :: fetched 10 new logs [28-05-2022 11:18:02]32589: WAF :: fetched 7 new logs [28-05-2022 11:19:01]3043: WAF :: fetched 9 new logs [28-05-2022 11:20:02]5859: WAF :: fetched 6 new logs [28-05-2022 11:21:02]8740: WAF :: fetched 2 new logs [28-05-2022 11:22:01]11489: WAF :: fetched 8 new logs [28-05-2022 11:23:01]14210: WAF :: fetched 9 new logs [28-05-2022 11:24:02]16911: WAF :: fetched 6 new logs [28-05-2022 11:25:01]19629: WAF :: fetched 5 new logs [28-05-2022 11:26:02]22596: WAF :: fetched 8 new logs [28-05-2022 11:27:02]25281: WAF :: fetched 4 new logs [28-05-2022 11:28:01]28047: WAF :: fetched 8 new logs [28-05-2022 11:29:02]30946: WAF :: fetched 10 new logs [28-05-2022 11:30:01]1259: WAF :: fetched 4 new logs [28-05-2022 11:31:01]4122: WAF :: fetched 7 new logs [28-05-2022 11:32:02]6867: WAF :: fetched 13 new logs [28-05-2022 11:33:01]9534: WAF :: fetched 4 new logs [28-05-2022 11:34:02]12244: WAF :: fetched 7 new logs [28-05-2022 11:35:01]14918: WAF :: fetched 8 new logs [28-05-2022 11:36:01]17724: WAF :: fetched 13 new logs [28-05-2022 11:37:02]20396: WAF :: fetched 15 new logs [28-05-2022 11:38:01]23062: WAF :: fetched 4 new logs [28-05-2022 11:39:02]25745: WAF :: fetched 5 new logs [28-05-2022 11:41:01]31289: Checking for user cron vulnerabilities [28-05-2022 11:42:02]1661: WAF :: fetched 3 new logs [28-05-2022 11:42:02]1658: httpd.conf changed. Refreshing watchlist. [28-05-2022 11:43:01]4419: WAF :: fetched 4 new logs [28-05-2022 11:44:02]7150: Checking ditributed CMS bruteforce attacks [28-05-2022 11:44:02]7150: WAF :: fetched 4 new logs [28-05-2022 11:45:02]9813: WAF :: fetched 7 new logs [28-05-2022 11:46:01]12619: WAF :: fetched 3 new logs [28-05-2022 11:47:02]15292: WAF :: fetched 9 new logs [28-05-2022 11:48:01]17951: WAF :: fetched 12 new logs [28-05-2022 11:49:02]20676: WAF :: fetched 15 new logs [28-05-2022 11:50:01]23410: WAF :: fetched 18 new logs [28-05-2022 11:50:01]23409: httpd.conf changed. Refreshing watchlist. [28-05-2022 11:51:01]26246: WAF :: fetched 17 new logs [28-05-2022 11:52:01]29025: httpd.conf changed. Refreshing watchlist. [28-05-2022 11:52:01]29037: WAF :: fetched 14 new logs [28-05-2022 11:53:02]32171: WAF :: fetched 14 new logs [28-05-2022 11:53:02]32169: httpd.conf changed. Refreshing watchlist. [28-05-2022 11:54:02]3271: WAF :: fetched 10 new logs [28-05-2022 11:55:01]6671: WAF :: fetched 7 new logs [28-05-2022 11:56:01]10200: WAF :: fetched 3 new logs [28-05-2022 11:57:02]13586: WAF :: fetched 6 new logs [28-05-2022 11:58:02]16971: WAF :: fetched 11 new logs [28-05-2022 11:59:01]20380: WAF :: fetched 14 new logs [28-05-2022 12:00:01]23482: WAF :: fetched 11 new logs [28-05-2022 12:01:02]27412: WAF :: fetched 8 new logs [28-05-2022 12:02:02]30877: WAF :: fetched 4 new logs [28-05-2022 12:03:02]1881: WAF :: fetched 4 new logs [28-05-2022 12:04:02]5339: WAF :: fetched 5 new logs [28-05-2022 12:05:01]8772: WAF :: fetched 2 new logs [28-05-2022 12:06:01]12253: WAF :: fetched 3 new logs [28-05-2022 12:07:02]15633: WAF :: fetched 9 new logs [28-05-2022 12:08:01]18973: WAF :: fetched 119 new logs [28-05-2022 12:09:02]22443: WAF :: fetched 80 new logs [28-05-2022 12:09:02]22457: httpd.conf changed. Refreshing watchlist. [28-05-2022 12:10:02]25906: WAF :: fetched 8 new logs [28-05-2022 12:11:02]29639: WAF :: fetched 46 new logs [28-05-2022 12:12:01]1118: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653750721 [28-05-2022 12:12:01]1118: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 12:12:03]1118: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 12:12:03]1118: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-1212/20220528-121201-YpI7wTfC2rSKaBt4FHeAYAAAACk [28-05-2022 12:12:03]1118: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 12:12:04]1118: WAF :: fetched 80 new logs [28-05-2022 12:13:02]4867: WAF :: fetched 24 new logs [28-05-2022 12:14:02]8281: WAF :: fetched 100 new logs [28-05-2022 12:15:02]11629: WAF :: fetched 109 new logs [28-05-2022 12:16:01]15112: WAF :: fetched 51 new logs [28-05-2022 12:17:02]18473: WAF :: fetched 61 new logs [28-05-2022 12:18:01]21826: WAF :: fetched 100 new logs [28-05-2022 12:19:02]25200: WAF :: fetched 117 new logs [28-05-2022 12:20:01]28591: WAF :: fetched 62 new logs [28-05-2022 12:23:01]6533: WAF :: fetched 2 new logs [28-05-2022 12:24:01]9912: WAF :: fetched 1 new logs [28-05-2022 12:25:02]13342: WAF :: fetched 3 new logs [28-05-2022 12:26:02]16833: WAF :: fetched 1 new logs [28-05-2022 12:31:02]1636: WAF :: fetched 5 new logs [28-05-2022 12:32:02]5066: WAF :: fetched 4 new logs [28-05-2022 12:33:02]8507: WAF :: fetched 3 new logs [28-05-2022 12:34:02]11846: WAF :: fetched 1 new logs [28-05-2022 12:36:01]18741: WAF :: fetched 5 new logs [28-05-2022 12:37:01]22092: WAF :: fetched 4 new logs [28-05-2022 12:38:02]25496: WAF :: fetched 5 new logs [28-05-2022 12:39:01]28839: WAF :: fetched 6 new logs [28-05-2022 12:40:02]32290: WAF :: fetched 16 new logs [28-05-2022 12:41:02]3484: WAF :: fetched 12 new logs [28-05-2022 12:41:02]3484: Checking for user cron vulnerabilities [28-05-2022 12:42:02]6824: WAF :: fetched 9 new logs [28-05-2022 12:43:01]10186: WAF :: fetched 13 new logs [28-05-2022 12:44:02]13581: Checking ditributed CMS bruteforce attacks [28-05-2022 12:44:02]13581: WAF :: fetched 26 new logs [28-05-2022 12:45:01]: Checking for software updates [28-05-2022 12:45:01]16927: WAF :: fetched 21 new logs [28-05-2022 12:46:02]20460: WAF :: fetched 14 new logs [28-05-2022 12:47:02]23799: WAF :: fetched 17 new logs [28-05-2022 12:48:01]27146: WAF :: fetched 6 new logs [28-05-2022 12:49:02]30610: WAF :: fetched 4 new logs [28-05-2022 12:50:01]1614: WAF :: fetched 6 new logs [28-05-2022 12:51:01]5134: WAF :: fetched 5 new logs [28-05-2022 12:52:02]8530: WAF :: fetched 1 new logs [28-05-2022 12:53:01]11898: WAF :: fetched 1 new logs [28-05-2022 12:54:02]15317: WAF :: fetched 4 new logs [28-05-2022 12:55:01]18643: WAF :: fetched 3 new logs [28-05-2022 12:56:01]22078: WAF :: fetched 9 new logs [28-05-2022 12:57:02]25493: WAF :: fetched 3 new logs [28-05-2022 12:58:01]28848: WAF :: fetched 3 new logs [28-05-2022 12:59:02]32284: WAF :: fetched 3 new logs [28-05-2022 13:00:02]3046: WAF :: fetched 2 new logs [28-05-2022 13:01:01]6899: WAF :: fetched 7 new logs [28-05-2022 13:02:02]10404: WAF :: fetched 5 new logs [28-05-2022 13:03:01]13756: WAF :: fetched 11 new logs [28-05-2022 13:04:02]17149: WAF :: fetched 7 new logs [28-05-2022 13:05:02]20492: WAF :: fetched 14 new logs [28-05-2022 13:06:02]23943: WAF :: fetched 18 new logs [28-05-2022 13:07:02]27384: WAF :: fetched 15 new logs [28-05-2022 13:08:01]30802: WAF :: fetched 13 new logs [28-05-2022 13:09:02]1829: WAF :: fetched 9 new logs [28-05-2022 13:10:01]5200: WAF :: fetched 12 new logs [28-05-2022 13:11:02]8647: WAF :: fetched 15 new logs [28-05-2022 13:12:02]12078: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653754322 [28-05-2022 13:12:02]12078: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 13:12:04]12078: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 13:12:04]12078: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-1312/20220528-131202-YpJJ0rmMSFa3m5nuM27BcAAAABA [28-05-2022 13:12:04]12078: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 13:12:04]12078: WAF :: fetched 14 new logs [28-05-2022 13:13:01]15386: WAF :: fetched 7 new logs [28-05-2022 13:14:02]18893: WAF :: fetched 3 new logs [28-05-2022 13:14:02]18896: httpd.conf changed. Refreshing watchlist. [28-05-2022 13:15:01]22225: WAF :: fetched 2 new logs [28-05-2022 13:16:01]25684: WAF :: fetched 8 new logs [28-05-2022 13:17:02]29212: WAF :: fetched 10 new logs [28-05-2022 13:18:02]32592: WAF :: fetched 8 new logs [28-05-2022 13:19:01]3621: WAF :: fetched 8 new logs [28-05-2022 13:20:02]7022: WAF :: fetched 9 new logs [28-05-2022 13:21:01]10387: WAF :: fetched 7 new logs [28-05-2022 13:22:02]13878: WAF :: fetched 8 new logs [28-05-2022 13:23:01]17207: WAF :: fetched 11 new logs [28-05-2022 13:24:02]20599: WAF :: fetched 6 new logs [28-05-2022 13:25:01]23941: WAF :: fetched 6 new logs [28-05-2022 13:26:02]27368: WAF :: fetched 6 new logs [28-05-2022 13:27:02]30852: WAF :: fetched 5 new logs [28-05-2022 13:28:01]1852: WAF :: fetched 4 new logs [28-05-2022 13:29:02]5311: WAF :: fetched 4 new logs [28-05-2022 13:30:01]8660: WAF :: fetched 8 new logs [28-05-2022 13:31:01]12033: WAF :: fetched 12 new logs [28-05-2022 13:32:02]15532: WAF :: fetched 14 new logs [28-05-2022 13:33:01]18887: WAF :: fetched 7 new logs [28-05-2022 13:34:02]22323: WAF :: fetched 4 new logs [28-05-2022 13:35:01]25668: WAF :: fetched 3 new logs [28-05-2022 13:36:01]29130: WAF :: fetched 5 new logs [28-05-2022 13:37:01]32682: WAF :: fetched 5 new logs [28-05-2022 13:38:02]3772: WAF :: fetched 7 new logs [28-05-2022 13:39:02]7135: WAF :: fetched 3 new logs [28-05-2022 13:40:01]10549: WAF :: fetched 4 new logs [28-05-2022 13:41:02]13990: WAF :: fetched 6 new logs [28-05-2022 13:41:02]13990: Checking for user cron vulnerabilities [28-05-2022 13:42:01]17426: WAF :: fetched 7 new logs [28-05-2022 13:43:02]20810: WAF :: fetched 9 new logs [28-05-2022 13:44:01]24165: Checking ditributed CMS bruteforce attacks [28-05-2022 13:44:02]24165: WAF :: fetched 18 new logs [28-05-2022 13:45:01]: Checking for definition updates [28-05-2022 13:45:01]27580: WAF :: fetched 19 new logs [28-05-2022 13:46:02]31130: WAF :: fetched 16 new logs [28-05-2022 13:47:01]2227: WAF :: fetched 15 new logs [28-05-2022 13:48:02]5685: WAF :: fetched 17 new logs [28-05-2022 13:49:01]9003: WAF :: fetched 12 new logs [28-05-2022 13:50:02]12453: WAF :: fetched 8 new logs [28-05-2022 13:51:02]15894: WAF :: fetched 5 new logs [28-05-2022 13:52:01]19426: WAF :: fetched 1 new logs [28-05-2022 13:53:02]22849: WAF :: fetched 1 new logs [28-05-2022 13:55:02]29707: WAF :: fetched 5 new logs [28-05-2022 13:56:01]698: WAF :: fetched 4 new logs [28-05-2022 13:57:02]4309: WAF :: fetched 6 new logs [28-05-2022 13:58:02]7683: WAF :: fetched 20 new logs [28-05-2022 13:59:01]11091: WAF :: fetched 13 new logs [28-05-2022 14:00:02]14228: WAF :: fetched 5 new logs [28-05-2022 14:01:01]18061: WAF :: fetched 8 new logs [28-05-2022 14:02:02]21565: WAF :: fetched 6 new logs [28-05-2022 14:03:01]24910: WAF :: fetched 2 new logs [28-05-2022 14:04:02]28320: WAF :: fetched 3 new logs [28-05-2022 14:05:02]31738: WAF :: fetched 13 new logs [28-05-2022 14:06:01]2851: WAF :: fetched 5 new logs [28-05-2022 14:07:02]6334: WAF :: fetched 3 new logs [28-05-2022 14:08:01]9672: WAF :: fetched 2 new logs [28-05-2022 14:09:02]13082: WAF :: fetched 2 new logs [28-05-2022 14:10:02]16481: WAF :: fetched 3 new logs [28-05-2022 14:11:01]19998: httpd.conf changed. Refreshing watchlist. [28-05-2022 14:11:01]20006: WAF :: fetched 1 new logs [28-05-2022 14:12:02]23552: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653757922 [28-05-2022 14:12:02]23552: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 14:12:04]23552: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 14:12:04]23552: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-1412/20220528-141202-YpJX4nodaNu0tcbO-QNerAAAABY [28-05-2022 14:12:04]23552: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [28-05-2022 14:12:04]23552: WAF :: fetched 3 new logs [28-05-2022 14:13:01]26936: WAF :: fetched 5 new logs [28-05-2022 14:14:01]30413: WAF :: fetched 4 new logs [28-05-2022 14:15:02]1486: WAF :: fetched 5 new logs [28-05-2022 14:16:01]4973: WAF :: fetched 6 new logs [28-05-2022 14:17:01]8427: WAF :: fetched 8 new logs [28-05-2022 14:18:02]11884: WAF :: fetched 8 new logs [28-05-2022 14:18:02]11876: httpd.conf changed. Refreshing watchlist. [28-05-2022 14:19:01]15343: WAF :: fetched 8 new logs [28-05-2022 14:19:01]15350: httpd.conf changed. Refreshing watchlist. [28-05-2022 14:20:02]18824: WAF :: fetched 12 new logs [28-05-2022 14:21:01]22238: WAF :: fetched 11 new logs [28-05-2022 14:22:01]25719: WAF :: fetched 5 new logs [28-05-2022 14:23:02]29253: WAF :: fetched 9 new logs [28-05-2022 14:23:02]29251: httpd.conf changed. Refreshing watchlist. [28-05-2022 14:24:01]32598: WAF :: fetched 11 new logs [28-05-2022 14:25:01]3672: WAF :: fetched 7 new logs [28-05-2022 14:26:02]7113: WAF :: fetched 15 new logs [28-05-2022 14:27:01]10583: WAF :: fetched 21 new logs [28-05-2022 14:28:02]13994: WAF :: fetched 16 new logs [28-05-2022 14:29:01]17362: WAF :: fetched 17 new logs [28-05-2022 14:30:02]20805: WAF :: fetched 11 new logs [28-05-2022 14:31:01]24262: WAF :: fetched 12 new logs [28-05-2022 14:32:01]27724: WAF :: fetched 13 new logs [28-05-2022 14:33:02]31240: WAF :: fetched 11 new logs [28-05-2022 14:34:01]2236: WAF :: fetched 17 new logs [28-05-2022 14:35:01]5753: WAF :: fetched 24 new logs [28-05-2022 14:36:02]9202: WAF :: fetched 42 new logs [28-05-2022 14:37:01]12639: WAF :: fetched 39 new logs [28-05-2022 14:38:02]16106: WAF :: fetched 22 new logs [28-05-2022 14:39:01]19447: WAF :: fetched 8 new logs [28-05-2022 14:40:02]23026: WAF :: fetched 10 new logs [28-05-2022 14:41:01]26443: WAF :: fetched 4 new logs [28-05-2022 14:41:01]26443: Checking for user cron vulnerabilities [28-05-2022 14:42:01]29984: WAF :: fetched 7 new logs [28-05-2022 14:43:02]1037: WAF :: fetched 9 new logs [28-05-2022 14:44:01]4476: Checking ditributed CMS bruteforce attacks [28-05-2022 14:44:01]4476: WAF :: fetched 3 new logs [28-05-2022 14:45:02]7900: WAF :: fetched 6 new logs [28-05-2022 14:46:01]11331: WAF :: fetched 3 new logs [28-05-2022 14:47:01]14847: WAF :: fetched 5 new logs [28-05-2022 14:48:02]18275: WAF :: fetched 8 new logs [28-05-2022 14:49:01]21672: WAF :: fetched 6 new logs [28-05-2022 14:50:02]25161: WAF :: fetched 2 new logs [28-05-2022 14:51:02]28623: WAF :: fetched 2 new logs [28-05-2022 14:52:02]32182: WAF :: fetched 4 new logs [28-05-2022 14:53:01]3272: WAF :: fetched 7 new logs [28-05-2022 14:53:02]3274: Updated license status via CDN [28-05-2022 14:54:02]6731: WAF :: fetched 13 new logs [28-05-2022 14:55:01]10112: WAF :: fetched 13 new logs [28-05-2022 14:56:01]13580: WAF :: fetched 12 new logs [28-05-2022 14:57:02]17035: WAF :: fetched 6 new logs [28-05-2022 14:58:01]20353: WAF :: fetched 2 new logs [28-05-2022 14:59:01]23720: WAF :: fetched 2 new logs [28-05-2022 15:00:02]26826: WAF :: fetched 1 new logs [28-05-2022 15:01:02]30716: Reseting cPGuard inotify settings [28-05-2022 15:01:02]30718: WAF :: fetched 9 new logs [28-05-2022 15:02:01]1838: WAF :: fetched 11 new logs [28-05-2022 15:03:02]5313: WAF :: fetched 12 new logs [28-05-2022 15:04:01]8632: WAF :: fetched 12 new logs [28-05-2022 15:05:02]12048: WAF :: fetched 8 new logs [28-05-2022 15:06:01]15469: WAF :: fetched 8 new logs [28-05-2022 15:07:01]18897: WAF :: fetched 9 new logs [28-05-2022 15:08:02]22301: WAF :: fetched 89 new logs [28-05-2022 15:09:02]25722: WAF :: fetched 390 new logs [28-05-2022 15:10:01]29199: WAF :: fetched 188 new logs [28-05-2022 15:11:02]32698: WAF :: fetched 104 new logs [28-05-2022 15:12:01]3818: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653761521 [28-05-2022 15:12:01]3818: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 15:12:03]3818: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 15:12:03]3818: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-1512/20220528-151201-YpJl8SRPRirG-N3c8eIdhQAAABE [28-05-2022 15:12:03]3818: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 15:12:04]3818: WAF :: fetched 919 new logs [28-05-2022 15:13:02]7230: WAF :: fetched 12 new logs [28-05-2022 15:14:01]10604: WAF :: fetched 38 new logs [28-05-2022 15:15:01]14004: WAF :: fetched 10 new logs [28-05-2022 15:16:02]17470: WAF :: fetched 15 new logs [28-05-2022 15:17:01]20884: WAF :: fetched 18 new logs [28-05-2022 15:18:01]24262: WAF :: fetched 39 new logs [28-05-2022 15:19:02]27721: WAF :: fetched 20 new logs [28-05-2022 15:20:02]31223: WAF :: fetched 14 new logs [28-05-2022 15:21:01]2269: WAF :: fetched 8 new logs [28-05-2022 15:22:01]5793: WAF :: fetched 2 new logs [28-05-2022 15:23:01]9173: WAF :: fetched 7 new logs [28-05-2022 15:24:02]12588: WAF :: fetched 9 new logs [28-05-2022 15:25:01]15981: WAF :: fetched 14 new logs [28-05-2022 15:26:02]19401: WAF :: fetched 16 new logs [28-05-2022 15:27:01]22805: WAF :: fetched 12 new logs [28-05-2022 15:28:02]26350: WAF :: fetched 7 new logs [28-05-2022 15:29:02]29739: WAF :: fetched 62 new logs [28-05-2022 15:30:01]728: WAF :: fetched 11 new logs [28-05-2022 15:31:02]4310: WAF :: fetched 12 new logs [28-05-2022 15:32:01]7741: WAF :: fetched 8 new logs [28-05-2022 15:33:02]11168: WAF :: fetched 5 new logs [28-05-2022 15:34:02]14568: WAF :: fetched 9 new logs [28-05-2022 15:35:01]17968: WAF :: fetched 2 new logs [28-05-2022 15:36:02]21423: WAF :: fetched 2 new logs [28-05-2022 15:37:01]24831: WAF :: fetched 7 new logs [28-05-2022 15:38:01]28216: WAF :: fetched 7 new logs [28-05-2022 15:39:02]31651: WAF :: fetched 5 new logs [28-05-2022 15:40:01]2672: WAF :: fetched 4 new logs [28-05-2022 15:41:02]6139: WAF :: fetched 4 new logs [28-05-2022 15:41:02]6139: Checking for user cron vulnerabilities [28-05-2022 15:42:01]9562: WAF :: fetched 1 new logs [28-05-2022 15:43:01]12946: WAF :: fetched 2 new logs [28-05-2022 15:44:01]16358: Checking ditributed CMS bruteforce attacks [28-05-2022 15:44:02]16358: WAF :: fetched 5 new logs [28-05-2022 15:45:01]19758: WAF :: fetched 1 new logs [28-05-2022 15:46:02]23194: WAF :: fetched 1 new logs [28-05-2022 15:48:01]30036: WAF :: fetched 2 new logs [28-05-2022 15:49:02]1152: WAF :: fetched 3 new logs [28-05-2022 15:50:01]4610: WAF :: fetched 4 new logs [28-05-2022 15:51:02]8080: WAF :: fetched 10 new logs [28-05-2022 15:52:02]11506: WAF :: fetched 14 new logs [28-05-2022 15:53:01]14860: WAF :: fetched 14 new logs [28-05-2022 15:54:02]18263: WAF :: fetched 8 new logs [28-05-2022 15:55:01]21646: WAF :: fetched 4 new logs [28-05-2022 15:56:01]25141: WAF :: fetched 6 new logs [28-05-2022 15:57:02]28704: WAF :: fetched 2 new logs [28-05-2022 15:58:01]32093: WAF :: fetched 5 new logs [28-05-2022 15:59:02]3205: WAF :: fetched 7 new logs [28-05-2022 16:00:01]6269: WAF :: fetched 5 new logs [28-05-2022 16:01:02]10243: WAF :: fetched 11 new logs [28-05-2022 16:02:02]13710: WAF :: fetched 9 new logs [28-05-2022 16:03:01]17115: WAF :: fetched 9 new logs [28-05-2022 16:04:02]20502: WAF :: fetched 5 new logs [28-05-2022 16:05:01]23879: WAF :: fetched 3 new logs [28-05-2022 16:06:02]27360: WAF :: fetched 5 new logs [28-05-2022 16:07:01]30849: WAF :: fetched 1 new logs [28-05-2022 16:08:01]1815: WAF :: fetched 2 new logs [28-05-2022 16:09:02]5315: WAF :: fetched 4 new logs [28-05-2022 16:10:01]8720: WAF :: fetched 2 new logs [28-05-2022 16:11:02]12166: WAF :: fetched 5 new logs [28-05-2022 16:12:02]15645: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653765122 [28-05-2022 16:12:02]15645: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 16:12:04]15645: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 16:12:04]15645: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-1612/20220528-161202-YpJ0Ar-r7Hu-K2Ne5gj8hgAAABY [28-05-2022 16:12:04]15645: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 16:12:04]15645: WAF :: fetched 3 new logs [28-05-2022 16:13:01]19043: WAF :: fetched 4 new logs [28-05-2022 16:14:02]22441: WAF :: fetched 9 new logs [28-05-2022 16:15:01]25814: WAF :: fetched 6 new logs [28-05-2022 16:16:01]29287: WAF :: fetched 3 new logs [28-05-2022 16:17:02]313: WAF :: fetched 1 new logs [28-05-2022 16:18:02]3854: WAF :: fetched 4 new logs [28-05-2022 16:19:01]7222: WAF :: fetched 3 new logs [28-05-2022 16:20:02]10668: WAF :: fetched 2 new logs [28-05-2022 16:21:01]14057: WAF :: fetched 1 new logs [28-05-2022 16:22:02]17560: WAF :: fetched 3 new logs [28-05-2022 16:23:02]20919: WAF :: fetched 5 new logs [28-05-2022 16:24:01]24262: WAF :: fetched 8 new logs [28-05-2022 16:25:02]27820: WAF :: fetched 2 new logs [28-05-2022 16:26:01]31333: WAF :: fetched 1 new logs [28-05-2022 16:27:02]2572: WAF :: fetched 5 new logs [28-05-2022 16:28:01]5935: WAF :: fetched 5 new logs [28-05-2022 16:30:01]12760: WAF :: fetched 3 new logs [28-05-2022 16:32:02]19753: WAF :: fetched 6 new logs [28-05-2022 16:33:02]23136: WAF :: fetched 6 new logs [28-05-2022 16:34:01]26557: WAF :: fetched 13 new logs [28-05-2022 16:35:01]30023: WAF :: fetched 14 new logs [28-05-2022 16:36:02]1133: WAF :: fetched 7 new logs [28-05-2022 16:40:02]14913: WAF :: fetched 4 new logs [28-05-2022 16:41:01]18363: WAF :: fetched 7 new logs [28-05-2022 16:41:01]18363: Checking for user cron vulnerabilities [28-05-2022 16:42:01]21847: WAF :: fetched 11 new logs [28-05-2022 16:43:02]25320: WAF :: fetched 3 new logs [28-05-2022 16:44:01]28800: Checking ditributed CMS bruteforce attacks [28-05-2022 16:44:01]28800: WAF :: fetched 6 new logs [28-05-2022 16:45:02]32303: WAF :: fetched 4 new logs [28-05-2022 16:46:02]3441: WAF :: fetched 4 new logs [28-05-2022 16:47:01]6921: WAF :: fetched 6 new logs [28-05-2022 16:48:02]10452: WAF :: fetched 14 new logs [28-05-2022 16:49:01]13856: WAF :: fetched 16 new logs [28-05-2022 16:50:02]17278: WAF :: fetched 19 new logs [28-05-2022 16:51:01]20708: WAF :: fetched 19 new logs [28-05-2022 16:52:02]24227: WAF :: fetched 8 new logs [28-05-2022 16:53:01]27610: WAF :: fetched 5 new logs [28-05-2022 16:54:02]31104: WAF :: fetched 3 new logs [28-05-2022 16:55:02]2123: WAF :: fetched 4 new logs [28-05-2022 16:56:01]5594: WAF :: fetched 5 new logs [28-05-2022 16:57:02]9117: WAF :: fetched 4 new logs [28-05-2022 16:58:01]12495: WAF :: fetched 6 new logs [28-05-2022 16:59:02]15931: WAF :: fetched 6 new logs [28-05-2022 17:04:02]916: WAF :: fetched 7 new logs [28-05-2022 17:05:01]4390: WAF :: fetched 8 new logs [28-05-2022 17:06:02]7848: WAF :: fetched 14 new logs [28-05-2022 17:07:01]11313: WAF :: fetched 6 new logs [28-05-2022 17:08:02]14722: WAF :: fetched 7 new logs [28-05-2022 17:09:01]18067: WAF :: fetched 3 new logs [28-05-2022 17:10:02]21496: WAF :: fetched 1 new logs [28-05-2022 17:11:01]24954: WAF :: fetched 7 new logs [28-05-2022 17:12:02]28584: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653768722 [28-05-2022 17:12:02]28584: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 17:12:04]28584: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 17:12:04]28584: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-1712/20220528-171202-YpKCErXuJaeTpFDIgIlDBgAAABs [28-05-2022 17:12:04]28584: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 17:12:04]28584: WAF :: fetched 11 new logs [28-05-2022 17:13:01]32024: WAF :: fetched 16 new logs [28-05-2022 17:14:01]3095: WAF :: fetched 7 new logs [28-05-2022 17:15:02]6541: WAF :: fetched 12 new logs [28-05-2022 17:16:01]9975: WAF :: fetched 13 new logs [28-05-2022 17:17:02]13464: WAF :: fetched 21 new logs [28-05-2022 17:18:01]16832: WAF :: fetched 12 new logs [28-05-2022 17:19:01]20315: WAF :: fetched 9 new logs [28-05-2022 17:20:02]23770: WAF :: fetched 3 new logs [28-05-2022 17:21:02]27219: WAF :: fetched 2 new logs [28-05-2022 17:22:01]30735: WAF :: fetched 5 new logs [28-05-2022 17:23:02]1844: WAF :: fetched 9 new logs [28-05-2022 17:24:01]5265: WAF :: fetched 4 new logs [28-05-2022 17:25:01]8626: WAF :: fetched 7 new logs [28-05-2022 17:26:02]12107: WAF :: fetched 6 new logs [28-05-2022 17:27:01]15548: WAF :: fetched 2 new logs [28-05-2022 17:28:01]18948: WAF :: fetched 94 new logs [28-05-2022 17:29:02]22333: WAF :: fetched 3 new logs [28-05-2022 17:30:01]25671: WAF :: fetched 6 new logs [28-05-2022 17:32:01]32624: WAF :: fetched 2 new logs [28-05-2022 17:33:01]3731: WAF :: fetched 4 new logs [28-05-2022 17:34:02]7147: WAF :: fetched 6 new logs [28-05-2022 17:35:01]10516: WAF :: fetched 4 new logs [28-05-2022 17:36:02]13958: WAF :: fetched 5 new logs [28-05-2022 17:37:02]17371: WAF :: fetched 3 new logs [28-05-2022 17:38:01]20798: WAF :: fetched 3 new logs [28-05-2022 17:39:02]24172: WAF :: fetched 3 new logs [28-05-2022 17:40:01]27563: WAF :: fetched 2 new logs [28-05-2022 17:41:01]31030: WAF :: fetched 10 new logs [28-05-2022 17:41:01]31030: Checking for user cron vulnerabilities [28-05-2022 17:42:02]2167: WAF :: fetched 4 new logs [28-05-2022 17:43:01]5569: WAF :: fetched 14 new logs [28-05-2022 17:44:01]8946: Checking ditributed CMS bruteforce attacks [28-05-2022 17:44:02]8946: WAF :: fetched 7 new logs [28-05-2022 17:45:02]12296: WAF :: fetched 6 new logs [28-05-2022 17:46:02]15631: WAF :: fetched 4 new logs [28-05-2022 17:47:01]18979: WAF :: fetched 5 new logs [28-05-2022 17:48:02]22347: WAF :: fetched 13 new logs [28-05-2022 17:49:01]25680: WAF :: fetched 12 new logs [28-05-2022 17:50:02]29086: WAF :: fetched 6 new logs [28-05-2022 17:51:01]32447: WAF :: fetched 2 new logs [28-05-2022 17:52:02]3536: WAF :: fetched 5 new logs [28-05-2022 17:53:02]6873: WAF :: fetched 2 new logs [28-05-2022 17:56:01]17009: WAF :: fetched 3 new logs [28-05-2022 17:57:02]20417: WAF :: fetched 1 new logs [28-05-2022 17:59:02]27135: WAF :: fetched 1 new logs [28-05-2022 18:00:02]30271: WAF :: fetched 3 new logs [28-05-2022 18:01:01]1764: WAF :: fetched 1 new logs [28-05-2022 18:02:02]5236: WAF :: fetched 2 new logs [28-05-2022 18:03:02]8622: WAF :: fetched 3 new logs [28-05-2022 18:05:02]15332: WAF :: fetched 3 new logs [28-05-2022 18:06:02]18687: WAF :: fetched 1 new logs [28-05-2022 18:07:01]22033: WAF :: fetched 3 new logs [28-05-2022 18:08:02]25487: WAF :: fetched 3 new logs [28-05-2022 18:09:01]28848: WAF :: fetched 3 new logs [28-05-2022 18:12:01]6741: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653772321 [28-05-2022 18:12:01]6741: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 18:12:03]6741: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 18:12:03]6741: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-1812/20220528-181201-YpKQIS_sJL9DRPu8EfjqEQAAACM [28-05-2022 18:12:03]6741: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 18:12:04]6741: WAF :: fetched 4 new logs [28-05-2022 18:13:02]10226: WAF :: fetched 5 new logs [28-05-2022 18:14:01]13560: WAF :: fetched 3 new logs [28-05-2022 18:15:02]16968: WAF :: fetched 2 new logs [28-05-2022 18:16:02]20415: WAF :: fetched 2 new logs [28-05-2022 18:17:02]23786: WAF :: fetched 5 new logs [28-05-2022 18:18:02]27196: WAF :: fetched 4 new logs [28-05-2022 18:19:01]30653: WAF :: fetched 2 new logs [28-05-2022 18:20:02]1760: WAF :: fetched 4 new logs [28-05-2022 18:21:01]5245: WAF :: fetched 4 new logs [28-05-2022 18:22:02]8672: WAF :: fetched 8 new logs [28-05-2022 18:23:01]12107: WAF :: fetched 5 new logs [28-05-2022 18:24:02]15513: WAF :: fetched 9 new logs [28-05-2022 18:25:02]18867: WAF :: fetched 7 new logs [28-05-2022 18:26:01]22261: WAF :: fetched 3 new logs [28-05-2022 18:27:01]25623: WAF :: fetched 8 new logs [28-05-2022 18:28:02]29156: WAF :: fetched 9 new logs [28-05-2022 18:29:01]32528: WAF :: fetched 5 new logs [28-05-2022 18:30:02]3623: WAF :: fetched 3 new logs [28-05-2022 18:31:01]7054: WAF :: fetched 8 new logs [28-05-2022 18:32:02]10480: WAF :: fetched 7 new logs [28-05-2022 18:33:02]13908: WAF :: fetched 11 new logs [28-05-2022 18:34:01]17304: WAF :: fetched 12 new logs [28-05-2022 18:35:02]20742: WAF :: fetched 6 new logs [28-05-2022 18:36:02]24157: WAF :: fetched 10 new logs [28-05-2022 18:37:02]27531: WAF :: fetched 9 new logs [28-05-2022 18:38:02]31049: WAF :: fetched 7 new logs [28-05-2022 18:39:01]2004: WAF :: fetched 9 new logs [28-05-2022 18:40:02]5502: WAF :: fetched 7 new logs [28-05-2022 18:41:01]8909: WAF :: fetched 3 new logs [28-05-2022 18:41:01]8909: Checking for user cron vulnerabilities [28-05-2022 18:42:01]12307: WAF :: fetched 9 new logs [28-05-2022 18:43:02]15805: WAF :: fetched 10 new logs [28-05-2022 18:44:01]19133: Checking ditributed CMS bruteforce attacks [28-05-2022 18:44:01]19133: WAF :: fetched 5 new logs [28-05-2022 18:45:02]22574: WAF :: fetched 4 new logs [28-05-2022 18:46:01]25950: WAF :: fetched 2 new logs [28-05-2022 18:47:02]29412: WAF :: fetched 2 new logs [28-05-2022 18:48:02]380: WAF :: fetched 3 new logs [28-05-2022 18:49:01]3877: WAF :: fetched 1 new logs [28-05-2022 18:50:02]7308: WAF :: fetched 2 new logs [28-05-2022 18:51:01]10687: WAF :: fetched 1 new logs [28-05-2022 18:52:01]14062: WAF :: fetched 10 new logs [28-05-2022 18:53:01]17508: WAF :: fetched 8 new logs [28-05-2022 18:54:01]20885: WAF :: fetched 15 new logs [28-05-2022 18:55:02]24244: WAF :: fetched 13 new logs [28-05-2022 18:56:02]27625: WAF :: fetched 15 new logs [28-05-2022 18:57:01]31053: WAF :: fetched 4 new logs [28-05-2022 18:58:02]2171: WAF :: fetched 4 new logs [28-05-2022 18:59:01]5527: WAF :: fetched 9 new logs [28-05-2022 19:00:02]8637: WAF :: fetched 8 new logs [28-05-2022 19:01:02]12519: WAF :: fetched 10 new logs [28-05-2022 19:02:01]15912: WAF :: fetched 6 new logs [28-05-2022 19:03:02]19401: WAF :: fetched 3 new logs [28-05-2022 19:04:01]22703: WAF :: fetched 8 new logs [28-05-2022 19:05:02]26137: WAF :: fetched 10 new logs [28-05-2022 19:06:01]29584: WAF :: fetched 8 new logs [28-05-2022 19:07:02]636: WAF :: fetched 6 new logs [28-05-2022 19:08:01]4216: WAF :: fetched 5 new logs [28-05-2022 19:09:02]7623: WAF :: fetched 7 new logs [28-05-2022 19:10:02]10982: WAF :: fetched 8 new logs [28-05-2022 19:11:01]14422: WAF :: fetched 11 new logs [28-05-2022 19:12:02]17805: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653775922 [28-05-2022 19:12:02]17805: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 19:12:04]17805: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 19:12:04]17805: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-1912/20220528-191202-YpKeMqHP8KmFIZMVFS2OGgAAAAA [28-05-2022 19:12:04]17805: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 19:12:04]17805: WAF :: fetched 11 new logs [28-05-2022 19:13:01]21223: WAF :: fetched 6 new logs [28-05-2022 19:14:01]24560: WAF :: fetched 9 new logs [28-05-2022 19:15:02]27970: WAF :: fetched 7 new logs [28-05-2022 19:16:01]31505: WAF :: fetched 12 new logs [28-05-2022 19:17:02]2611: WAF :: fetched 14 new logs [28-05-2022 19:21:02]16305: WAF :: fetched 11 new logs [28-05-2022 19:22:01]19683: WAF :: fetched 3 new logs [28-05-2022 19:23:02]23145: WAF :: fetched 7 new logs [28-05-2022 19:24:01]26483: WAF :: fetched 8 new logs [28-05-2022 19:25:02]29931: WAF :: fetched 8 new logs [28-05-2022 19:26:02]1006: WAF :: fetched 8 new logs [28-05-2022 19:27:02]4436: WAF :: fetched 7 new logs [28-05-2022 19:28:01]7900: WAF :: fetched 2 new logs [28-05-2022 19:30:02]14662: WAF :: fetched 3 new logs [28-05-2022 19:31:01]18104: WAF :: fetched 1 new logs [28-05-2022 19:32:01]21464: WAF :: fetched 2 new logs [28-05-2022 19:34:01]28301: WAF :: fetched 6 new logs [28-05-2022 19:35:02]31759: WAF :: fetched 1 new logs [28-05-2022 19:36:02]2874: WAF :: fetched 7 new logs [28-05-2022 19:37:01]6230: WAF :: fetched 12 new logs [28-05-2022 19:38:02]9669: WAF :: fetched 8 new logs [28-05-2022 19:39:02]13013: WAF :: fetched 14 new logs [28-05-2022 19:40:01]16364: WAF :: fetched 7 new logs [28-05-2022 19:41:02]19840: WAF :: fetched 2 new logs [28-05-2022 19:41:02]19840: Checking for user cron vulnerabilities [28-05-2022 19:42:01]23160: WAF :: fetched 4 new logs [28-05-2022 19:43:02]26643: WAF :: fetched 5 new logs [28-05-2022 19:44:01]30037: Checking ditributed CMS bruteforce attacks [28-05-2022 19:44:02]30037: WAF :: fetched 11 new logs [28-05-2022 19:45:01]: Checking for definition updates [28-05-2022 19:45:01]1053: WAF :: fetched 16 new logs [28-05-2022 19:46:02]4629: WAF :: fetched 12 new logs [28-05-2022 19:47:01]7944: WAF :: fetched 9 new logs [28-05-2022 19:48:02]11390: WAF :: fetched 9 new logs [28-05-2022 19:49:02]14743: WAF :: fetched 8 new logs [28-05-2022 19:50:01]18110: WAF :: fetched 9 new logs [28-05-2022 19:51:02]21572: WAF :: fetched 7 new logs [28-05-2022 19:52:01]24920: WAF :: fetched 1 new logs [28-05-2022 19:53:02]28424: WAF :: fetched 5 new logs [28-05-2022 19:56:01]6227: WAF :: fetched 2 new logs [28-05-2022 19:57:01]9570: WAF :: fetched 2 new logs [28-05-2022 19:58:01]13049: WAF :: fetched 1 new logs [28-05-2022 19:59:01]16415: WAF :: fetched 8 new logs [28-05-2022 20:01:01]23390: WAF :: fetched 3 new logs [28-05-2022 20:02:01]26800: WAF :: fetched 6 new logs [28-05-2022 20:03:02]30319: WAF :: fetched 7 new logs [28-05-2022 20:04:01]1276: WAF :: fetched 5 new logs [28-05-2022 20:05:02]4735: WAF :: fetched 6 new logs [28-05-2022 20:07:02]11518: WAF :: fetched 4 new logs [28-05-2022 20:08:02]14962: WAF :: fetched 11 new logs [28-05-2022 20:09:01]18353: WAF :: fetched 11 new logs [28-05-2022 20:10:02]21765: WAF :: fetched 11 new logs [28-05-2022 20:11:01]25126: WAF :: fetched 6 new logs [28-05-2022 20:12:01]28506: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653779521 [28-05-2022 20:12:01]28506: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 20:12:03]28506: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 20:12:03]28506: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-2012/20220528-201201-YpKsQVCxnyHPFARHNYU2YAAAADE [28-05-2022 20:12:03]28506: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 20:12:04]28506: WAF :: fetched 11 new logs [28-05-2022 20:13:01]31984: WAF :: fetched 8 new logs [28-05-2022 20:14:01]3019: WAF :: fetched 2 new logs [28-05-2022 20:15:01]6380: WAF :: fetched 1 new logs [28-05-2022 20:16:02]9843: WAF :: fetched 2 new logs [28-05-2022 20:19:01]20017: WAF :: fetched 1 new logs [28-05-2022 20:20:02]23424: WAF :: fetched 1 new logs [28-05-2022 20:21:01]26863: WAF :: fetched 5 new logs [28-05-2022 20:22:02]30317: WAF :: fetched 3 new logs [28-05-2022 20:23:02]1390: WAF :: fetched 2 new logs [28-05-2022 20:24:02]4836: WAF :: fetched 3 new logs [28-05-2022 20:25:01]8281: WAF :: fetched 4 new logs [28-05-2022 20:25:01]8291: httpd.conf changed. Refreshing watchlist. [28-05-2022 20:26:02]11803: WAF :: fetched 3 new logs [28-05-2022 20:27:01]15183: WAF :: fetched 11 new logs [28-05-2022 20:28:01]18662: WAF :: fetched 12 new logs [28-05-2022 20:29:02]22051: WAF :: fetched 1 new logs [28-05-2022 20:30:01]25424: WAF :: fetched 2 new logs [28-05-2022 20:31:01]28911: WAF :: fetched 7 new logs [28-05-2022 20:32:02]32406: WAF :: fetched 18 new logs [28-05-2022 20:33:01]3553: WAF :: fetched 15 new logs [28-05-2022 20:34:02]6983: WAF :: fetched 14 new logs [28-05-2022 20:35:02]10352: WAF :: fetched 7 new logs [28-05-2022 20:36:01]13779: WAF :: fetched 6 new logs [28-05-2022 20:37:02]17192: WAF :: fetched 9 new logs [28-05-2022 20:38:02]20630: WAF :: fetched 1 new logs [28-05-2022 20:39:01]23985: WAF :: fetched 6 new logs [28-05-2022 20:40:02]27397: WAF :: fetched 4 new logs [28-05-2022 20:41:01]30848: WAF :: fetched 2 new logs [28-05-2022 20:41:01]30848: Checking for user cron vulnerabilities [28-05-2022 20:42:02]1880: WAF :: fetched 2 new logs [28-05-2022 20:44:01]8742: Checking ditributed CMS bruteforce attacks [28-05-2022 20:46:01]15546: WAF :: fetched 5 new logs [28-05-2022 20:47:01]18932: WAF :: fetched 10 new logs [28-05-2022 20:48:02]22406: WAF :: fetched 9 new logs [28-05-2022 20:49:01]25720: WAF :: fetched 6 new logs [28-05-2022 20:50:02]29184: WAF :: fetched 1 new logs [28-05-2022 20:52:02]3621: WAF :: fetched 3 new logs [28-05-2022 20:53:02]7015: WAF :: fetched 3 new logs [28-05-2022 20:54:02]10404: WAF :: fetched 12 new logs [28-05-2022 20:55:01]13803: WAF :: fetched 17 new logs [28-05-2022 20:56:02]17242: WAF :: fetched 5 new logs [28-05-2022 20:58:01]24026: WAF :: fetched 1 new logs [28-05-2022 21:00:01]30528: WAF :: fetched 4 new logs [28-05-2022 21:01:02]2142: WAF :: fetched 6 new logs [28-05-2022 21:02:01]5500: WAF :: fetched 9 new logs [28-05-2022 21:03:02]9033: WAF :: fetched 5 new logs [28-05-2022 21:04:02]12466: WAF :: fetched 8 new logs [28-05-2022 21:05:02]15830: WAF :: fetched 10 new logs [28-05-2022 21:06:01]19268: WAF :: fetched 9 new logs [28-05-2022 21:07:02]22661: WAF :: fetched 4 new logs [28-05-2022 21:08:01]26053: WAF :: fetched 5 new logs [28-05-2022 21:09:02]29529: WAF :: fetched 9 new logs [28-05-2022 21:10:01]454: WAF :: fetched 16 new logs [28-05-2022 21:11:01]4026: WAF :: fetched 20 new logs [28-05-2022 21:12:02]7412: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653783122 [28-05-2022 21:12:02]7412: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 21:12:04]7412: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 21:12:04]7412: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-2112/20220528-211202-YpK6UsNtHTgGTePGhFOicQAAAAA [28-05-2022 21:12:04]7412: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 21:12:04]7412: WAF :: fetched 18 new logs [28-05-2022 21:13:01]10862: WAF :: fetched 8 new logs [28-05-2022 21:14:02]14249: WAF :: fetched 9 new logs [28-05-2022 21:15:01]17568: WAF :: fetched 9 new logs [28-05-2022 21:16:02]21047: WAF :: fetched 9 new logs [28-05-2022 21:17:02]24380: WAF :: fetched 8 new logs [28-05-2022 21:18:02]27865: WAF :: fetched 8 new logs [28-05-2022 21:19:02]31294: WAF :: fetched 3 new logs [28-05-2022 21:20:01]2324: WAF :: fetched 2 new logs [28-05-2022 21:21:02]5832: WAF :: fetched 5 new logs [28-05-2022 21:22:01]9182: WAF :: fetched 3 new logs [28-05-2022 21:23:01]12632: WAF :: fetched 4 new logs [28-05-2022 21:24:02]16036: WAF :: fetched 6 new logs [28-05-2022 21:25:01]19374: WAF :: fetched 3 new logs [28-05-2022 21:26:02]22810: WAF :: fetched 3 new logs [28-05-2022 21:27:01]26141: WAF :: fetched 4 new logs [28-05-2022 21:28:01]29636: WAF :: fetched 4 new logs [28-05-2022 21:29:02]608: WAF :: fetched 6 new logs [28-05-2022 21:30:01]4109: WAF :: fetched 7 new logs [28-05-2022 21:31:02]7565: WAF :: fetched 12 new logs [28-05-2022 21:32:01]10938: WAF :: fetched 9 new logs [28-05-2022 21:37:02]28115: WAF :: fetched 7 new logs [28-05-2022 21:38:02]31618: WAF :: fetched 5 new logs [28-05-2022 21:39:01]2634: WAF :: fetched 8 new logs [28-05-2022 21:40:02]6058: WAF :: fetched 15 new logs [28-05-2022 21:41:01]9502: WAF :: fetched 7 new logs [28-05-2022 21:41:01]9502: Checking for user cron vulnerabilities [28-05-2022 21:42:02]12901: WAF :: fetched 4 new logs [28-05-2022 21:43:02]16354: WAF :: fetched 2 new logs [28-05-2022 21:44:01]19754: Checking ditributed CMS bruteforce attacks [28-05-2022 21:44:02]19754: WAF :: fetched 3 new logs [28-05-2022 21:45:02]23157: WAF :: fetched 5 new logs [28-05-2022 21:46:01]26563: WAF :: fetched 4 new logs [28-05-2022 21:47:01]29986: WAF :: fetched 7 new logs [28-05-2022 21:48:02]1148: WAF :: fetched 17 new logs [28-05-2022 21:49:02]4610: WAF :: fetched 15 new logs [28-05-2022 21:50:01]8010: WAF :: fetched 15 new logs [28-05-2022 21:51:02]11590: WAF :: fetched 5 new logs [28-05-2022 21:52:01]14915: WAF :: fetched 3 new logs [28-05-2022 21:53:02]18403: WAF :: fetched 7 new logs [28-05-2022 21:54:01]21782: WAF :: fetched 12 new logs [28-05-2022 21:55:02]25202: WAF :: fetched 11 new logs [28-05-2022 21:56:02]28661: WAF :: fetched 5 new logs [28-05-2022 21:58:01]3295: WAF :: fetched 2 new logs [28-05-2022 21:59:02]6777: WAF :: fetched 1 new logs [28-05-2022 22:01:01]13796: WAF :: fetched 8 new logs [28-05-2022 22:02:02]17219: WAF :: fetched 4 new logs [28-05-2022 22:03:01]20694: WAF :: fetched 7 new logs [28-05-2022 22:04:02]24123: WAF :: fetched 5 new logs [28-05-2022 22:05:01]27454: WAF :: fetched 6 new logs [28-05-2022 22:06:01]30982: WAF :: fetched 10 new logs [28-05-2022 22:07:02]2033: WAF :: fetched 9 new logs [28-05-2022 22:07:10]2030: Performing Domain reputation checks [28-05-2022 22:08:02]5473: WAF :: fetched 10 new logs [28-05-2022 22:09:01]8863: WAF :: fetched 18 new logs [28-05-2022 22:10:02]12253: WAF :: fetched 11 new logs [28-05-2022 22:11:02]15693: WAF :: fetched 7 new logs [28-05-2022 22:12:01]19063: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653786721 [28-05-2022 22:12:01]19063: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 22:12:03]19063: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-05-2022 22:12:04]19063: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-2212/20220528-221201-YpLIYb2zzQ2azKYovLovuQAAAAs [28-05-2022 22:12:04]19063: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 22:12:04]19063: WAF :: fetched 8 new logs [28-05-2022 22:13:02]22550: WAF :: fetched 5 new logs [28-05-2022 22:14:02]25872: WAF :: fetched 5 new logs [28-05-2022 22:15:01]29308: WAF :: fetched 5 new logs [28-05-2022 22:16:01]320: WAF :: fetched 6 new logs [28-05-2022 22:17:02]3847: WAF :: fetched 5 new logs [28-05-2022 22:18:02]7313: WAF :: fetched 7 new logs [28-05-2022 22:19:02]10738: WAF :: fetched 9 new logs [28-05-2022 22:20:01]14099: WAF :: fetched 7 new logs [28-05-2022 22:21:02]17528: WAF :: fetched 7 new logs [28-05-2022 22:22:01]20907: WAF :: fetched 7 new logs [28-05-2022 22:23:02]24376: WAF :: fetched 3 new logs [28-05-2022 22:25:02]31172: WAF :: fetched 4 new logs [28-05-2022 22:26:02]2213: WAF :: fetched 6 new logs [28-05-2022 22:27:01]5606: WAF :: fetched 11 new logs [28-05-2022 22:28:02]9137: WAF :: fetched 9 new logs [28-05-2022 22:29:01]12476: WAF :: fetched 10 new logs [28-05-2022 22:30:02]15884: WAF :: fetched 15 new logs [28-05-2022 22:31:01]19297: WAF :: fetched 55 new logs [28-05-2022 22:32:02]22707: WAF :: fetched 13 new logs [28-05-2022 22:33:01]26104: WAF :: fetched 11 new logs [28-05-2022 22:34:02]29583: WAF :: fetched 12 new logs [28-05-2022 22:35:01]520: WAF :: fetched 3 new logs [28-05-2022 22:36:01]4043: WAF :: fetched 1 new logs [28-05-2022 22:37:02]7419: WAF :: fetched 7 new logs [28-05-2022 22:38:02]10869: WAF :: fetched 14 new logs [28-05-2022 22:39:01]14207: WAF :: fetched 6 new logs [28-05-2022 22:40:02]17655: WAF :: fetched 6 new logs [28-05-2022 22:41:01]21058: WAF :: fetched 6 new logs [28-05-2022 22:41:01]21058: Checking for user cron vulnerabilities [28-05-2022 22:42:01]24417: WAF :: fetched 7 new logs [28-05-2022 22:43:02]27890: WAF :: fetched 14 new logs [28-05-2022 22:44:01]31271: Checking ditributed CMS bruteforce attacks [28-05-2022 22:44:01]31271: WAF :: fetched 15 new logs [28-05-2022 22:45:02]2350: WAF :: fetched 21 new logs [28-05-2022 22:46:01]5750: WAF :: fetched 11 new logs [28-05-2022 22:47:02]9163: WAF :: fetched 6 new logs [28-05-2022 22:48:01]12579: WAF :: fetched 5 new logs [28-05-2022 22:49:01]15969: WAF :: fetched 7 new logs [28-05-2022 22:50:02]19393: WAF :: fetched 8 new logs [28-05-2022 22:51:01]22814: WAF :: fetched 11 new logs [28-05-2022 22:52:02]26223: WAF :: fetched 6 new logs [28-05-2022 22:53:02]29701: WAF :: fetched 10 new logs [28-05-2022 22:54:02]658: WAF :: fetched 10 new logs [28-05-2022 22:55:01]4144: WAF :: fetched 13 new logs [28-05-2022 22:56:02]7595: WAF :: fetched 7 new logs [28-05-2022 22:57:01]10947: WAF :: fetched 8 new logs [28-05-2022 22:58:02]14373: WAF :: fetched 10 new logs [28-05-2022 22:59:01]17711: WAF :: fetched 12 new logs [28-05-2022 23:00:02]20864: WAF :: fetched 24 new logs [28-05-2022 23:01:01]24704: WAF :: fetched 21 new logs [28-05-2022 23:02:02]28161: WAF :: fetched 19 new logs [28-05-2022 23:03:01]31605: WAF :: fetched 12 new logs [28-05-2022 23:04:02]2754: WAF :: fetched 7 new logs [28-05-2022 23:05:01]6098: WAF :: fetched 6 new logs [28-05-2022 23:06:02]9582: WAF :: fetched 4 new logs [28-05-2022 23:07:01]12978: WAF :: fetched 8 new logs [28-05-2022 23:07:37]13145: Performed RBL check for 23.111.136.34. [28-05-2022 23:08:01]16376: WAF :: fetched 7 new logs [28-05-2022 23:09:02]19833: WAF :: fetched 4 new logs [28-05-2022 23:10:01]23229: WAF :: fetched 10 new logs [28-05-2022 23:11:02]26706: WAF :: fetched 6 new logs [28-05-2022 23:12:01]30083: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653790321 [28-05-2022 23:12:01]30083: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-05-2022 23:12:04]30083: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220528/20220528-2312/20220528-231201-YpLWcVEJzkqjG1Bjf2D8DwAAABI [28-05-2022 23:12:04]30083: WAF :: No suitable log file found. Using SQLite.. [28-05-2022 23:12:04]30083: WAF :: fetched 8 new logs [28-05-2022 23:13:02]1117: WAF :: fetched 6 new logs [28-05-2022 23:14:01]4552: WAF :: fetched 4 new logs [28-05-2022 23:15:02]7961: WAF :: fetched 4 new logs [28-05-2022 23:16:01]11393: WAF :: fetched 2 new logs [28-05-2022 23:19:02]21716: WAF :: fetched 1 new logs [28-05-2022 23:20:02]25092: WAF :: fetched 1 new logs [28-05-2022 23:25:01]9803: WAF :: fetched 3 new logs [28-05-2022 23:26:02]13274: WAF :: fetched 7 new logs [28-05-2022 23:27:01]16615: WAF :: fetched 12 new logs [28-05-2022 23:28:01]19952: WAF :: fetched 13 new logs [28-05-2022 23:29:02]23421: WAF :: fetched 16 new logs [28-05-2022 23:30:02]26801: WAF :: fetched 15 new logs [28-05-2022 23:31:02]30267: WAF :: fetched 15 new logs [28-05-2022 23:32:02]1306: WAF :: fetched 5 new logs [28-05-2022 23:33:01]4719: WAF :: fetched 9 new logs [28-05-2022 23:34:02]8206: WAF :: fetched 10 new logs [28-05-2022 23:35:01]11591: WAF :: fetched 8 new logs [28-05-2022 23:36:02]15047: WAF :: fetched 11 new logs [28-05-2022 23:37:01]18380: WAF :: fetched 4 new logs [28-05-2022 23:38:02]21752: WAF :: fetched 4 new logs [28-05-2022 23:39:02]25166: WAF :: fetched 1 new logs [28-05-2022 23:40:01]28572: WAF :: fetched 1 new logs [28-05-2022 23:41:02]32061: WAF :: fetched 3 new logs [28-05-2022 23:41:02]32061: Checking for user cron vulnerabilities [28-05-2022 23:42:01]3076: WAF :: fetched 5 new logs [28-05-2022 23:43:02]6492: WAF :: fetched 8 new logs [28-05-2022 23:44:01]9873: Checking ditributed CMS bruteforce attacks [28-05-2022 23:44:01]9873: WAF :: fetched 7 new logs [28-05-2022 23:45:02]13359: WAF :: fetched 5 new logs [28-05-2022 23:46:01]16767: WAF :: fetched 5 new logs [28-05-2022 23:47:01]20129: WAF :: fetched 8 new logs [28-05-2022 23:48:01]23515: WAF :: fetched 2 new logs [28-05-2022 23:50:01]30427: WAF :: fetched 1 new logs [28-05-2022 23:51:01]1514: WAF :: fetched 9 new logs [28-05-2022 23:52:02]4952: WAF :: fetched 16 new logs [28-05-2022 23:53:01]8333: WAF :: fetched 13 new logs [28-05-2022 23:54:02]11881: WAF :: fetched 14 new logs [28-05-2022 23:54:02]11880: httpd.conf changed. Refreshing watchlist. [28-05-2022 23:55:01]15284: WAF :: fetched 21 new logs [28-05-2022 23:56:02]18791: WAF :: fetched 8 new logs [28-05-2022 23:56:02]18789: httpd.conf changed. Refreshing watchlist. [28-05-2022 23:57:01]22148: WAF :: fetched 6 new logs [28-05-2022 23:58:01]25534: WAF :: fetched 13 new logs [28-05-2022 23:59:02]29113: WAF :: fetched 7 new logs [29-05-2022 00:00:01]32260: WAF :: fetched 2 new logs [29-05-2022 00:01:02]4020: WAF :: fetched 1 new logs [29-05-2022 00:01:02]4018: httpd.conf changed. Refreshing watchlist. [29-05-2022 00:01:03]4020: Sending daily report for May 29, 2022 [29-05-2022 00:02:02]7703: WAF :: fetched 1 new logs [29-05-2022 00:02:02]7706: httpd.conf changed. Refreshing watchlist. [29-05-2022 00:03:01]11627: WAF :: fetched 4 new logs [29-05-2022 00:03:01]11620: httpd.conf changed. Refreshing watchlist. [29-05-2022 00:04:01]15515: httpd.conf changed. Refreshing watchlist. [29-05-2022 00:04:01]15514: WAF :: fetched 4 new logs [29-05-2022 00:05:01]19138: WAF :: fetched 10 new logs [29-05-2022 00:05:01]19133: httpd.conf changed. Refreshing watchlist. [29-05-2022 00:05:01]19138: Deleted 0 entries older than 6 MONTH from scanner_logs [29-05-2022 00:05:01]19138: Deleted 0 files from Quarantine [29-05-2022 00:06:02]22826: WAF :: fetched 12 new logs [29-05-2022 00:06:02]22829: httpd.conf changed. Refreshing watchlist. [29-05-2022 00:07:01]26305: WAF :: fetched 8 new logs [29-05-2022 00:07:01]26304: httpd.conf changed. Refreshing watchlist. [29-05-2022 00:08:01]29774: WAF :: fetched 10 new logs [29-05-2022 00:09:01]923: WAF :: fetched 11 new logs [29-05-2022 00:10:02]4400: WAF :: fetched 13 new logs [29-05-2022 00:11:01]7840: WAF :: fetched 19 new logs [29-05-2022 00:12:02]11223: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653793922 [29-05-2022 00:12:02]11223: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 00:12:04]11223: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 00:12:04]11223: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-0012/20220529-001202-YpLkghiE_NpDmVAuu_xiIwAAAB0 [29-05-2022 00:12:04]11223: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 00:12:04]11223: WAF :: fetched 7 new logs [29-05-2022 00:13:01]14611: WAF :: fetched 5 new logs [29-05-2022 00:14:01]18124: WAF :: fetched 3 new logs [29-05-2022 00:15:02]21857: WAF :: fetched 4 new logs [29-05-2022 00:16:01]25318: WAF :: fetched 9 new logs [29-05-2022 00:17:02]28832: WAF :: fetched 4 new logs [29-05-2022 00:18:02]32262: WAF :: fetched 6 new logs [29-05-2022 00:19:01]3433: WAF :: fetched 7 new logs [29-05-2022 00:20:02]6903: WAF :: fetched 4 new logs [29-05-2022 00:20:02]6902: httpd.conf changed. Refreshing watchlist. [29-05-2022 00:21:01]10104: WAF :: fetched 3 new logs [29-05-2022 00:21:01]10097: httpd.conf changed. Refreshing watchlist. [29-05-2022 00:22:01]13686: WAF :: fetched 8 new logs [29-05-2022 00:23:01]17025: WAF :: fetched 2 new logs [29-05-2022 00:24:02]20502: WAF :: fetched 2 new logs [29-05-2022 00:25:01]23997: WAF :: fetched 2 new logs [29-05-2022 00:26:02]27581: WAF :: fetched 2 new logs [29-05-2022 00:27:02]31152: WAF :: fetched 2 new logs [29-05-2022 00:30:02]9221: WAF :: fetched 87 new logs [29-05-2022 00:31:02]12694: WAF :: fetched 63 new logs [29-05-2022 00:32:01]16255: WAF :: fetched 1 new logs [29-05-2022 00:33:01]19737: WAF :: fetched 1 new logs [29-05-2022 00:33:01]19729: httpd.conf changed. Refreshing watchlist. [29-05-2022 00:34:02]23400: WAF :: fetched 3 new logs [29-05-2022 00:35:01]26802: WAF :: fetched 4 new logs [29-05-2022 00:36:02]30294: WAF :: fetched 2 new logs [29-05-2022 00:37:01]1311: WAF :: fetched 5 new logs [29-05-2022 00:38:01]4795: WAF :: fetched 9 new logs [29-05-2022 00:38:01]4792: httpd.conf changed. Refreshing watchlist. [29-05-2022 00:39:02]8287: WAF :: fetched 5 new logs [29-05-2022 00:39:02]8288: httpd.conf changed. Refreshing watchlist. [29-05-2022 00:40:01]11656: WAF :: fetched 9 new logs [29-05-2022 00:41:02]15155: WAF :: fetched 6 new logs [29-05-2022 00:41:02]15155: Checking for user cron vulnerabilities [29-05-2022 00:42:02]18594: WAF :: fetched 3 new logs [29-05-2022 00:43:02]22081: WAF :: fetched 7 new logs [29-05-2022 00:44:01]25657: Checking ditributed CMS bruteforce attacks [29-05-2022 00:44:01]25657: WAF :: fetched 8 new logs [29-05-2022 00:45:02]: Checking for software updates [29-05-2022 00:45:02]29136: WAF :: fetched 8 new logs [29-05-2022 00:46:02]32511: WAF :: fetched 15 new logs [29-05-2022 00:47:01]3578: WAF :: fetched 16 new logs [29-05-2022 00:48:02]6981: WAF :: fetched 13 new logs [29-05-2022 00:49:01]10600: WAF :: fetched 12 new logs [29-05-2022 00:50:02]14070: WAF :: fetched 4 new logs [29-05-2022 00:52:02]20911: WAF :: fetched 2 new logs [29-05-2022 00:53:01]24400: WAF :: fetched 1 new logs [29-05-2022 00:54:01]27851: WAF :: fetched 70 new logs [29-05-2022 00:55:02]31359: WAF :: fetched 89 new logs [29-05-2022 00:56:01]2456: WAF :: fetched 92 new logs [29-05-2022 00:57:02]5956: WAF :: fetched 85 new logs [29-05-2022 00:58:01]9300: WAF :: fetched 105 new logs [29-05-2022 00:59:02]12789: WAF :: fetched 27 new logs [29-05-2022 01:00:02]15899: WAF :: fetched 12 new logs [29-05-2022 01:01:01]20493: WAF :: fetched 3 new logs [29-05-2022 01:02:02]24160: WAF :: fetched 8 new logs [29-05-2022 01:03:01]27821: WAF :: fetched 13 new logs [29-05-2022 01:04:01]31687: WAF :: fetched 9 new logs [29-05-2022 01:05:02]3000: WAF :: fetched 6 new logs [29-05-2022 01:07:02]10261: WAF :: fetched 6 new logs [29-05-2022 01:08:01]13769: WAF :: fetched 12 new logs [29-05-2022 01:09:02]17521: WAF :: fetched 9 new logs [29-05-2022 01:10:02]20965: WAF :: fetched 3 new logs [29-05-2022 01:12:02]27799: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653797522 [29-05-2022 01:12:02]27799: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 01:12:04]27799: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 01:12:05]27799: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-0112/20220529-011202-YpLykvd70KvVibUwC_3yKQAAAAo [29-05-2022 01:12:05]27799: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 01:12:05]27799: WAF :: fetched 10 new logs [29-05-2022 01:13:01]31299: WAF :: fetched 15 new logs [29-05-2022 01:14:01]2788: WAF :: fetched 14 new logs [29-05-2022 01:15:01]6192: WAF :: fetched 21 new logs [29-05-2022 01:16:02]9800: WAF :: fetched 13 new logs [29-05-2022 01:17:01]13208: WAF :: fetched 6 new logs [29-05-2022 01:18:02]16762: WAF :: fetched 4 new logs [29-05-2022 01:19:02]20317: WAF :: fetched 5 new logs [29-05-2022 01:20:02]23829: WAF :: fetched 4 new logs [29-05-2022 01:21:02]27331: WAF :: fetched 6 new logs [29-05-2022 01:22:01]30882: WAF :: fetched 7 new logs [29-05-2022 01:23:02]1985: WAF :: fetched 5 new logs [29-05-2022 01:24:01]5565: WAF :: fetched 10 new logs [29-05-2022 01:25:01]9217: WAF :: fetched 7 new logs [29-05-2022 01:26:02]12774: WAF :: fetched 8 new logs [29-05-2022 01:27:01]16548: WAF :: fetched 2 new logs [29-05-2022 01:28:02]20228: WAF :: fetched 139 new logs [29-05-2022 01:29:02]23758: WAF :: fetched 119 new logs [29-05-2022 01:30:01]27179: WAF :: fetched 136 new logs [29-05-2022 01:31:02]30661: WAF :: fetched 134 new logs [29-05-2022 01:32:01]1653: WAF :: fetched 138 new logs [29-05-2022 01:33:02]5112: WAF :: fetched 133 new logs [29-05-2022 01:34:01]8881: WAF :: fetched 121 new logs [29-05-2022 01:35:02]12485: WAF :: fetched 114 new logs [29-05-2022 01:36:02]16107: WAF :: fetched 66 new logs [29-05-2022 01:37:01]19585: WAF :: fetched 112 new logs [29-05-2022 01:38:01]23292: WAF :: fetched 125 new logs [29-05-2022 01:39:02]26827: WAF :: fetched 103 new logs [29-05-2022 01:40:02]30290: WAF :: fetched 118 new logs [29-05-2022 01:41:01]1714: WAF :: fetched 121 new logs [29-05-2022 01:41:01]1714: Checking for user cron vulnerabilities [29-05-2022 01:42:02]5479: WAF :: fetched 8 new logs [29-05-2022 01:43:01]8837: WAF :: fetched 6 new logs [29-05-2022 01:44:01]12392: Checking ditributed CMS bruteforce attacks [29-05-2022 01:44:06]12392: WAF :: fetched 8 new logs [29-05-2022 01:45:01]: Checking for definition updates [29-05-2022 01:45:01]15790: WAF :: fetched 6 new logs [29-05-2022 01:49:01]30104: WAF :: fetched 7 new logs [29-05-2022 01:50:01]1291: WAF :: fetched 10 new logs [29-05-2022 01:51:02]4836: WAF :: fetched 8 new logs [29-05-2022 01:52:01]8488: WAF :: fetched 7 new logs [29-05-2022 01:53:02]11882: WAF :: fetched 6 new logs [29-05-2022 01:54:01]15373: WAF :: fetched 12 new logs [29-05-2022 01:55:01]19090: WAF :: fetched 11 new logs [29-05-2022 01:56:02]22856: WAF :: fetched 21 new logs [29-05-2022 01:57:02]26201: WAF :: fetched 18 new logs [29-05-2022 01:58:02]29619: WAF :: fetched 13 new logs [29-05-2022 01:59:02]650: WAF :: fetched 5 new logs [29-05-2022 02:00:01]3984: WAF :: fetched 2 new logs [29-05-2022 02:01:02]8001: WAF :: fetched 9 new logs [29-05-2022 02:02:01]11666: WAF :: fetched 8 new logs [29-05-2022 02:03:02]15286: WAF :: fetched 5 new logs [29-05-2022 02:04:01]18972: WAF :: fetched 11 new logs [29-05-2022 02:05:02]22498: WAF :: fetched 18 new logs [29-05-2022 02:10:02]7665: WAF :: fetched 8 new logs [29-05-2022 02:11:02]11081: WAF :: fetched 13 new logs [29-05-2022 02:12:02]14541: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653801122 [29-05-2022 02:12:02]14541: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 02:12:04]14541: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 02:12:05]14541: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-0212/20220529-021202-YpMAojAinuaNmJOPgVTG5gAAAAA [29-05-2022 02:12:05]14541: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 02:12:05]14541: WAF :: fetched 16 new logs [29-05-2022 02:13:02]18016: WAF :: fetched 7 new logs [29-05-2022 02:14:01]21710: WAF :: fetched 6 new logs [29-05-2022 02:15:01]25251: WAF :: fetched 6 new logs [29-05-2022 02:16:02]29044: WAF :: fetched 5 new logs [29-05-2022 02:17:02]32589: WAF :: fetched 5 new logs [29-05-2022 02:18:01]3897: WAF :: fetched 1 new logs [29-05-2022 02:19:01]7371: WAF :: fetched 6 new logs [29-05-2022 02:20:02]10936: WAF :: fetched 8 new logs [29-05-2022 02:21:02]14420: WAF :: fetched 11 new logs [29-05-2022 02:22:01]18017: WAF :: fetched 14 new logs [29-05-2022 02:23:01]21725: WAF :: fetched 7 new logs [29-05-2022 02:24:02]25269: WAF :: fetched 7 new logs [29-05-2022 02:25:02]28756: WAF :: fetched 3 new logs [29-05-2022 02:26:02]32292: WAF :: fetched 1 new logs [29-05-2022 02:27:02]3412: WAF :: fetched 2 new logs [29-05-2022 02:28:01]6863: WAF :: fetched 2 new logs [29-05-2022 02:29:01]10447: WAF :: fetched 9 new logs [29-05-2022 02:30:02]14019: WAF :: fetched 11 new logs [29-05-2022 02:31:02]17477: WAF :: fetched 10 new logs [29-05-2022 02:32:01]20895: WAF :: fetched 3 new logs [29-05-2022 02:34:01]27899: WAF :: fetched 1 new logs [29-05-2022 02:35:02]31472: WAF :: fetched 3 new logs [29-05-2022 02:36:02]2998: WAF :: fetched 2 new logs [29-05-2022 02:38:02]9942: WAF :: fetched 1 new logs [29-05-2022 02:39:01]13427: WAF :: fetched 3 new logs [29-05-2022 02:40:01]16867: WAF :: fetched 3 new logs [29-05-2022 02:41:01]20304: WAF :: fetched 8 new logs [29-05-2022 02:41:01]20304: Checking for user cron vulnerabilities [29-05-2022 02:42:01]23701: WAF :: fetched 12 new logs [29-05-2022 02:43:01]27098: WAF :: fetched 8 new logs [29-05-2022 02:44:01]30625: Checking ditributed CMS bruteforce attacks [29-05-2022 02:44:01]30625: WAF :: fetched 11 new logs [29-05-2022 02:45:01]1665: WAF :: fetched 7 new logs [29-05-2022 02:46:02]5234: WAF :: fetched 5 new logs [29-05-2022 02:47:02]8634: WAF :: fetched 2 new logs [29-05-2022 02:48:02]12015: WAF :: fetched 4 new logs [29-05-2022 02:50:02]19023: WAF :: fetched 1 new logs [29-05-2022 02:51:02]22439: WAF :: fetched 2 new logs [29-05-2022 02:52:01]25860: WAF :: fetched 3 new logs [29-05-2022 02:53:01]29285: WAF :: fetched 6 new logs [29-05-2022 02:53:02]29286: Updated license status via CDN [29-05-2022 02:54:01]324: WAF :: fetched 22 new logs [29-05-2022 02:55:02]3887: WAF :: fetched 22 new logs [29-05-2022 02:56:02]7334: WAF :: fetched 4 new logs [29-05-2022 02:57:02]10740: WAF :: fetched 1 new logs [29-05-2022 02:59:01]17693: WAF :: fetched 4 new logs [29-05-2022 03:00:01]20834: WAF :: fetched 3 new logs [29-05-2022 03:01:01]24737: WAF :: fetched 1 new logs [29-05-2022 03:01:29]20834: Found and updated 30 CMS installations [29-05-2022 03:02:01]28207: WAF :: fetched 3 new logs [29-05-2022 03:02:13]20834: Wordpress installation #9 oabilheus.org.br has errors [29-05-2022 03:02:48]20834: Wordpress installation #14 apoionordeste.com.br has errors [29-05-2022 03:03:01]31721: WAF :: fetched 10 new logs [29-05-2022 03:03:12]20834: Wordpress installation #16 kecolima.com.br has errors [29-05-2022 03:03:28]20834: Wordpress installation #17 ajuda.meusiteimobiliario.com.br has errors [29-05-2022 03:04:01]3191: WAF :: fetched 10 new logs [29-05-2022 03:04:12]31764: Wordpress installation #23 blueseasurf.com.br has errors [29-05-2022 03:04:12]20834: Wordpress installation #23 blueseasurf.com.br has errors [29-05-2022 03:04:37]31764: Wordpress installation #25 ltcertificadora.com.br has errors [29-05-2022 03:04:50]20834: Wordpress installation #26 bibokinha.idcartao.com has errors [29-05-2022 03:04:51]31764: Wordpress installation #26 bibokinha.idcartao.com has errors [29-05-2022 03:05:01]6732: WAF :: fetched 6 new logs [29-05-2022 03:05:20]31764: Wordpress installation #32 site.meucartaovirtual.com.br has errors [29-05-2022 03:05:20]20834: Wordpress installation #32 site.meucartaovirtual.com.br has errors [29-05-2022 03:05:34]31764: Wordpress installation #33 bibokinha.com.br has errors [29-05-2022 03:05:34]20834: Wordpress installation #33 bibokinha.com.br has errors [29-05-2022 03:05:54]31764: Wordpress installation #34 fazendayrere.com.br has errors [29-05-2022 03:05:54]20834: Wordpress installation #34 fazendayrere.com.br has errors [29-05-2022 03:06:02]10377: WAF :: fetched 4 new logs [29-05-2022 03:06:08]31764: Wordpress installation #35 luanbrasil.com.br has errors [29-05-2022 03:06:08]20834: Wordpress installation #35 luanbrasil.com.br has errors [29-05-2022 03:06:26]31764: Wordpress installation #37 site.zipcard.app has errors [29-05-2022 03:06:26]20834: Wordpress installation #37 site.zipcard.app has errors [29-05-2022 03:06:40]31764: Wordpress installation #38 onedicoes.com.br has errors [29-05-2022 03:06:40]20834: Wordpress installation #38 onedicoes.com.br has errors [29-05-2022 03:06:41]31764: Sending CMS version vulnerability report emails to cpanel users [29-05-2022 03:06:41]20834: Sending CMS version vulnerability report emails to cpanel users [29-05-2022 03:06:44]31764: Checking wordpress installations for suspicious directories [29-05-2022 03:06:44]20834: Checking wordpress installations for suspicious directories [29-05-2022 03:07:02]14134: WAF :: fetched 5 new logs [29-05-2022 03:08:02]17570: WAF :: fetched 4 new logs [29-05-2022 03:09:02]21096: WAF :: fetched 14 new logs [29-05-2022 03:10:02]24538: WAF :: fetched 11 new logs [29-05-2022 03:11:02]27950: WAF :: fetched 25 new logs [29-05-2022 03:12:01]31388: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653804721 [29-05-2022 03:12:01]31388: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 03:12:03]31388: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 03:12:04]31388: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-0312/20220529-031201-YpMOsbTVIKovIRt24VWYggAAAAY [29-05-2022 03:12:04]31388: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 03:12:04]31388: WAF :: fetched 42 new logs [29-05-2022 03:13:01]2520: WAF :: fetched 30 new logs [29-05-2022 03:14:01]6001: WAF :: fetched 12 new logs [29-05-2022 03:15:01]9422: WAF :: fetched 5 new logs [29-05-2022 03:16:01]12886: WAF :: fetched 7 new logs [29-05-2022 03:17:01]16289: WAF :: fetched 10 new logs [29-05-2022 03:18:01]19739: WAF :: fetched 9 new logs [29-05-2022 03:19:02]23222: WAF :: fetched 8 new logs [29-05-2022 03:20:02]26619: WAF :: fetched 1 new logs [29-05-2022 03:21:02]30110: WAF :: fetched 1 new logs [29-05-2022 03:23:02]4608: WAF :: fetched 1 new logs [29-05-2022 03:24:02]8072: WAF :: fetched 1 new logs [29-05-2022 03:25:02]11456: WAF :: fetched 4 new logs [29-05-2022 03:27:02]18329: WAF :: fetched 5 new logs [29-05-2022 03:28:02]21728: WAF :: fetched 2 new logs [29-05-2022 03:29:01]25211: WAF :: fetched 3 new logs [29-05-2022 03:30:01]28665: WAF :: fetched 2 new logs [29-05-2022 03:31:01]32174: WAF :: fetched 8 new logs [29-05-2022 03:32:01]3307: WAF :: fetched 2 new logs [29-05-2022 03:33:01]6749: WAF :: fetched 26 new logs [29-05-2022 03:34:01]10278: WAF :: fetched 11 new logs [29-05-2022 03:35:01]13707: WAF :: fetched 1 new logs [29-05-2022 03:36:01]17164: WAF :: fetched 2 new logs [29-05-2022 03:37:01]20593: WAF :: fetched 4 new logs [29-05-2022 03:38:02]24103: WAF :: fetched 4 new logs [29-05-2022 03:39:02]21816: WAF :: fetched 205 new logs [29-05-2022 03:40:02]4440: WAF :: fetched 11 new logs [29-05-2022 03:41:02]26996: WAF :: fetched 10 new logs [29-05-2022 03:41:02]26996: Checking for user cron vulnerabilities [29-05-2022 03:42:02]7991: WAF :: fetched 6 new logs [29-05-2022 03:43:01]11419: WAF :: fetched 6 new logs [29-05-2022 03:44:01]14887: Checking ditributed CMS bruteforce attacks [29-05-2022 03:44:02]14887: WAF :: fetched 7 new logs [29-05-2022 03:45:01]18333: WAF :: fetched 17 new logs [29-05-2022 03:46:01]21801: WAF :: fetched 20 new logs [29-05-2022 03:47:01]25634: WAF :: fetched 21 new logs [29-05-2022 03:48:01]29956: WAF :: fetched 10 new logs [29-05-2022 03:49:01]1224: WAF :: fetched 9 new logs [29-05-2022 03:50:02]4938: WAF :: fetched 7 new logs [29-05-2022 03:51:02]8416: WAF :: fetched 14 new logs [29-05-2022 03:52:02]11848: WAF :: fetched 10 new logs [29-05-2022 03:53:02]15229: WAF :: fetched 9 new logs [29-05-2022 03:54:01]18685: WAF :: fetched 9 new logs [29-05-2022 03:55:01]22122: WAF :: fetched 12 new logs [29-05-2022 03:56:02]25602: WAF :: fetched 4 new logs [29-05-2022 03:57:02]29224: WAF :: fetched 4 new logs [29-05-2022 03:58:02]362: WAF :: fetched 16 new logs [29-05-2022 03:59:02]4039: WAF :: fetched 16 new logs [29-05-2022 04:00:02]7414: WAF :: fetched 16 new logs [29-05-2022 04:01:02]11384: WAF :: fetched 17 new logs [29-05-2022 04:02:02]14892: WAF :: fetched 18 new logs [29-05-2022 04:03:02]18393: WAF :: fetched 28 new logs [29-05-2022 04:04:02]22094: WAF :: fetched 31 new logs [29-05-2022 04:05:02]25872: WAF :: fetched 18 new logs [29-05-2022 04:06:01]29553: WAF :: fetched 12 new logs [29-05-2022 04:07:01]540: WAF :: fetched 7 new logs [29-05-2022 04:08:01]4329: WAF :: fetched 2 new logs [29-05-2022 04:09:01]7711: WAF :: fetched 1 new logs [29-05-2022 04:10:01]11223: WAF :: fetched 1 new logs [29-05-2022 04:12:02]18097: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653808322 [29-05-2022 04:12:02]18097: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 04:12:04]18097: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 04:12:04]18097: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-0412/20220529-041202-YpMcwoIJr27XIF9JU2yRqwAAAA0 [29-05-2022 04:12:04]18097: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 04:12:04]18097: WAF :: fetched 6 new logs [29-05-2022 04:13:02]21695: WAF :: fetched 4 new logs [29-05-2022 04:14:02]25416: WAF :: fetched 7 new logs [29-05-2022 04:15:01]28982: WAF :: fetched 92 new logs [29-05-2022 04:16:02]32542: WAF :: fetched 110 new logs [29-05-2022 04:17:01]3422: WAF :: fetched 19 new logs [29-05-2022 04:18:02]7065: WAF :: fetched 11 new logs [29-05-2022 04:19:02]10472: WAF :: fetched 23 new logs [29-05-2022 04:20:02]13979: WAF :: fetched 8 new logs [29-05-2022 04:21:02]17486: WAF :: fetched 3 new logs [29-05-2022 04:22:02]20900: WAF :: fetched 15 new logs [29-05-2022 04:23:02]24348: WAF :: fetched 14 new logs [29-05-2022 04:24:01]27782: WAF :: fetched 23 new logs [29-05-2022 04:25:02]31424: WAF :: fetched 20 new logs [29-05-2022 04:26:02]2587: WAF :: fetched 12 new logs [29-05-2022 04:27:02]6092: WAF :: fetched 13 new logs [29-05-2022 04:28:02]9782: WAF :: fetched 5 new logs [29-05-2022 04:29:02]13565: WAF :: fetched 2 new logs [29-05-2022 04:30:01]17264: WAF :: fetched 6 new logs [29-05-2022 04:31:02]21077: WAF :: fetched 10 new logs [29-05-2022 04:32:01]24605: WAF :: fetched 15 new logs [29-05-2022 04:33:02]28075: WAF :: fetched 16 new logs [29-05-2022 04:34:02]31886: WAF :: fetched 18 new logs [29-05-2022 04:35:02]3141: WAF :: fetched 10 new logs [29-05-2022 04:36:02]6801: WAF :: fetched 13 new logs [29-05-2022 04:37:01]10204: WAF :: fetched 7 new logs [29-05-2022 04:38:02]13635: WAF :: fetched 6 new logs [29-05-2022 04:39:01]17070: WAF :: fetched 1 new logs [29-05-2022 04:40:02]20614: WAF :: fetched 2 new logs [29-05-2022 04:41:02]24108: WAF :: fetched 3 new logs [29-05-2022 04:41:02]24108: Checking for user cron vulnerabilities [29-05-2022 04:42:01]27509: WAF :: fetched 1 new logs [29-05-2022 04:43:01]30968: WAF :: fetched 1 new logs [29-05-2022 04:44:01]2064: Checking ditributed CMS bruteforce attacks [29-05-2022 04:44:02]2064: WAF :: fetched 9 new logs [29-05-2022 04:45:01]5571: WAF :: fetched 8 new logs [29-05-2022 04:46:02]9034: WAF :: fetched 5 new logs [29-05-2022 04:47:01]12379: WAF :: fetched 1 new logs [29-05-2022 04:48:02]15892: WAF :: fetched 4 new logs [29-05-2022 04:49:02]19307: WAF :: fetched 1 new logs [29-05-2022 04:50:02]22873: WAF :: fetched 4 new logs [29-05-2022 04:51:01]26361: WAF :: fetched 1 new logs [29-05-2022 04:52:02]29828: WAF :: fetched 2 new logs [29-05-2022 04:53:01]789: WAF :: fetched 5 new logs [29-05-2022 04:54:01]4278: WAF :: fetched 9 new logs [29-05-2022 04:55:01]7735: WAF :: fetched 12 new logs [29-05-2022 04:56:02]11205: WAF :: fetched 11 new logs [29-05-2022 04:57:01]14584: WAF :: fetched 18 new logs [29-05-2022 04:58:02]17971: WAF :: fetched 13 new logs [29-05-2022 04:59:01]21361: WAF :: fetched 9 new logs [29-05-2022 05:00:02]24546: WAF :: fetched 3 new logs [29-05-2022 05:01:01]28414: WAF :: fetched 8 new logs [29-05-2022 05:01:42]28413: Starting weekly scan on files updated within a week [29-05-2022 05:02:01]31930: WAF :: fetched 10 new logs [29-05-2022 05:03:02]3005: WAF :: fetched 8 new logs [29-05-2022 05:04:01]6404: WAF :: fetched 4 new logs [29-05-2022 05:05:02]9893: WAF :: fetched 5 new logs [29-05-2022 05:06:02]13323: WAF :: fetched 6 new logs [29-05-2022 05:07:02]16762: WAF :: fetched 9 new logs [29-05-2022 05:08:02]20166: WAF :: fetched 6 new logs [29-05-2022 05:09:01]23593: WAF :: fetched 9 new logs [29-05-2022 05:10:02]27099: WAF :: fetched 4 new logs [29-05-2022 05:11:01]30546: WAF :: fetched 4 new logs [29-05-2022 05:12:01]1625: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653811921 [29-05-2022 05:12:01]1625: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 05:12:03]1625: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 05:12:04]1625: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-0512/20220529-051201-YpMq0Q23mXHOWnvkQRyuLQAAAAk [29-05-2022 05:12:04]1625: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 05:12:04]1625: WAF :: fetched 6 new logs [29-05-2022 05:13:02]5141: WAF :: fetched 6 new logs [29-05-2022 05:14:01]8523: WAF :: fetched 13 new logs [29-05-2022 05:15:02]12013: WAF :: fetched 14 new logs [29-05-2022 05:16:01]15480: WAF :: fetched 4 new logs [29-05-2022 05:17:02]18942: WAF :: fetched 6 new logs [29-05-2022 05:18:01]22358: WAF :: fetched 10 new logs [29-05-2022 05:19:02]25767: WAF :: fetched 8 new logs [29-05-2022 05:20:02]29295: WAF :: fetched 8 new logs [29-05-2022 05:21:02]304: WAF :: fetched 10 new logs [29-05-2022 05:22:01]3872: WAF :: fetched 5 new logs [29-05-2022 05:23:01]7255: WAF :: fetched 1 new logs [29-05-2022 05:24:01]10682: WAF :: fetched 3 new logs [29-05-2022 05:25:02]14215: WAF :: fetched 9 new logs [29-05-2022 05:26:01]17609: WAF :: fetched 7 new logs [29-05-2022 05:27:01]21041: WAF :: fetched 9 new logs [29-05-2022 05:28:02]24483: WAF :: fetched 7 new logs [29-05-2022 05:29:02]27867: WAF :: fetched 9 new logs [29-05-2022 05:30:01]31373: WAF :: fetched 12 new logs [29-05-2022 05:31:01]2536: WAF :: fetched 9 new logs [29-05-2022 05:32:02]5959: WAF :: fetched 6 new logs [29-05-2022 05:33:01]9352: WAF :: fetched 5 new logs [29-05-2022 05:34:02]12748: WAF :: fetched 1 new logs [29-05-2022 05:35:02]16210: WAF :: fetched 1 new logs [29-05-2022 05:36:01]19722: WAF :: fetched 4 new logs [29-05-2022 05:37:02]23127: WAF :: fetched 3 new logs [29-05-2022 05:39:02]29962: WAF :: fetched 5 new logs [29-05-2022 05:40:02]1070: WAF :: fetched 8 new logs [29-05-2022 05:41:02]4587: WAF :: fetched 7 new logs [29-05-2022 05:41:02]4587: Checking for user cron vulnerabilities [29-05-2022 05:42:02]7951: WAF :: fetched 5 new logs [29-05-2022 05:43:01]11323: WAF :: fetched 10 new logs [29-05-2022 05:44:02]14745: Checking ditributed CMS bruteforce attacks [29-05-2022 05:44:02]14745: WAF :: fetched 9 new logs [29-05-2022 05:45:01]18222: WAF :: fetched 8 new logs [29-05-2022 05:46:01]21694: WAF :: fetched 5 new logs [29-05-2022 05:48:01]28504: WAF :: fetched 2 new logs [29-05-2022 05:49:02]31946: WAF :: fetched 2 new logs [29-05-2022 05:50:02]3131: WAF :: fetched 1 new logs [29-05-2022 05:51:02]6575: WAF :: fetched 6 new logs [29-05-2022 05:52:01]9962: WAF :: fetched 10 new logs [29-05-2022 05:53:02]13393: WAF :: fetched 8 new logs [29-05-2022 05:54:01]16843: WAF :: fetched 6 new logs [29-05-2022 05:55:02]20368: WAF :: fetched 3 new logs [29-05-2022 05:57:02]27205: WAF :: fetched 1 new logs [29-05-2022 05:59:02]1728: WAF :: fetched 1 new logs [29-05-2022 06:00:02]4993: WAF :: fetched 1 new logs [29-05-2022 06:02:02]12336: WAF :: fetched 2 new logs [29-05-2022 06:04:02]19189: WAF :: fetched 4 new logs [29-05-2022 06:06:02]26156: WAF :: fetched 5 new logs [29-05-2022 06:07:01]29585: WAF :: fetched 8 new logs [29-05-2022 06:08:02]580: WAF :: fetched 11 new logs [29-05-2022 06:09:02]4080: WAF :: fetched 5 new logs [29-05-2022 06:10:01]7563: WAF :: fetched 14 new logs [29-05-2022 06:11:01]11013: WAF :: fetched 5 new logs [29-05-2022 06:12:02]14465: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653815522 [29-05-2022 06:12:02]14465: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 06:12:04]14465: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 06:12:04]14465: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-0612/20220529-061202-YpM44m1wvm4WGb_E5nhKlwAAAA8 [29-05-2022 06:12:04]14465: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 06:12:04]14465: WAF :: fetched 9 new logs [29-05-2022 06:14:02]21262: WAF :: fetched 3 new logs [29-05-2022 06:17:01]31696: WAF :: fetched 4 new logs [29-05-2022 06:18:02]2791: WAF :: fetched 2 new logs [29-05-2022 06:19:02]6179: WAF :: fetched 3 new logs [29-05-2022 06:21:02]13221: WAF :: fetched 3 new logs [29-05-2022 06:22:01]16605: WAF :: fetched 1 new logs [29-05-2022 06:23:02]20043: WAF :: fetched 1 new logs [29-05-2022 06:24:02]23465: WAF :: fetched 8 new logs [29-05-2022 06:27:02]1674: WAF :: fetched 3 new logs [29-05-2022 06:28:01]5109: WAF :: fetched 5 new logs [29-05-2022 06:29:02]8510: WAF :: fetched 7 new logs [29-05-2022 06:30:01]12011: WAF :: fetched 10 new logs [29-05-2022 06:31:01]15483: WAF :: fetched 4 new logs [29-05-2022 06:32:01]18944: WAF :: fetched 7 new logs [29-05-2022 06:33:02]22382: WAF :: fetched 6 new logs [29-05-2022 06:34:02]25753: WAF :: fetched 13 new logs [29-05-2022 06:35:01]29240: WAF :: fetched 8 new logs [29-05-2022 06:36:02]32767: WAF :: fetched 6 new logs [29-05-2022 06:37:01]3833: WAF :: fetched 6 new logs [29-05-2022 06:38:02]7258: WAF :: fetched 6 new logs [29-05-2022 06:41:01]17655: Checking for user cron vulnerabilities [29-05-2022 06:43:02]24506: WAF :: fetched 5 new logs [29-05-2022 06:44:02]27904: Checking ditributed CMS bruteforce attacks [29-05-2022 06:44:02]27904: WAF :: fetched 4 new logs [29-05-2022 06:45:01]31412: WAF :: fetched 4 new logs [29-05-2022 06:47:02]5874: WAF :: fetched 1 new logs [29-05-2022 06:48:01]9208: WAF :: fetched 3 new logs [29-05-2022 06:49:01]12586: WAF :: fetched 9 new logs [29-05-2022 06:50:02]16083: WAF :: fetched 5 new logs [29-05-2022 06:51:01]19543: WAF :: fetched 7 new logs [29-05-2022 06:52:02]22918: WAF :: fetched 7 new logs [29-05-2022 06:53:02]26244: WAF :: fetched 8 new logs [29-05-2022 06:54:01]29637: WAF :: fetched 5 new logs [29-05-2022 06:55:02]692: WAF :: fetched 5 new logs [29-05-2022 06:56:01]4228: WAF :: fetched 6 new logs [29-05-2022 06:57:01]7683: WAF :: fetched 5 new logs [29-05-2022 06:58:02]11119: WAF :: fetched 7 new logs [29-05-2022 06:59:01]14519: WAF :: fetched 7 new logs [29-05-2022 07:00:02]17709: WAF :: fetched 4 new logs [29-05-2022 07:01:02]21594: WAF :: fetched 4 new logs [29-05-2022 07:02:01]24994: WAF :: fetched 5 new logs [29-05-2022 07:03:02]28447: WAF :: fetched 7 new logs [29-05-2022 07:04:01]31862: WAF :: fetched 7 new logs [29-05-2022 07:05:02]3024: WAF :: fetched 4 new logs [29-05-2022 07:06:02]6395: WAF :: fetched 6 new logs [29-05-2022 07:07:01]9776: WAF :: fetched 4 new logs [29-05-2022 07:08:02]13155: WAF :: fetched 3 new logs [29-05-2022 07:09:01]16530: WAF :: fetched 43 new logs [29-05-2022 07:10:02]20073: WAF :: fetched 40 new logs [29-05-2022 07:11:01]23443: WAF :: fetched 55 new logs [29-05-2022 07:12:02]26849: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653819122 [29-05-2022 07:12:02]26849: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 07:12:04]26849: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 07:12:04]26849: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-0712/20220529-071202-YpNG8qVI23CfqbksnT9KoQAAAAM [29-05-2022 07:12:04]26849: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 07:12:05]26849: WAF :: fetched 56 new logs [29-05-2022 07:13:02]30243: WAF :: fetched 54 new logs [29-05-2022 07:14:01]1275: WAF :: fetched 48 new logs [29-05-2022 07:15:02]4995: WAF :: fetched 33 new logs [29-05-2022 07:16:02]8451: WAF :: fetched 39 new logs [29-05-2022 07:17:01]11898: WAF :: fetched 50 new logs [29-05-2022 07:18:02]15429: WAF :: fetched 58 new logs [29-05-2022 07:19:01]18942: WAF :: fetched 23 new logs [29-05-2022 07:20:01]22643: WAF :: fetched 16 new logs [29-05-2022 07:21:02]26091: WAF :: fetched 17 new logs [29-05-2022 07:22:01]29467: WAF :: fetched 17 new logs [29-05-2022 07:23:02]459: WAF :: fetched 13 new logs [29-05-2022 07:24:01]3918: WAF :: fetched 10 new logs [29-05-2022 07:25:02]7477: WAF :: fetched 8 new logs [29-05-2022 07:26:02]10885: WAF :: fetched 8 new logs [29-05-2022 07:27:01]14246: WAF :: fetched 2 new logs [29-05-2022 07:28:02]17672: WAF :: fetched 7 new logs [29-05-2022 07:29:01]21040: WAF :: fetched 8 new logs [29-05-2022 07:30:01]24481: WAF :: fetched 11 new logs [29-05-2022 07:31:02]27910: WAF :: fetched 21 new logs [29-05-2022 07:32:01]31347: WAF :: fetched 13 new logs [29-05-2022 07:33:02]2415: WAF :: fetched 3 new logs [29-05-2022 07:34:01]5791: WAF :: fetched 7 new logs [29-05-2022 07:35:02]9288: WAF :: fetched 8 new logs [29-05-2022 07:36:02]12678: WAF :: fetched 7 new logs [29-05-2022 07:37:02]16109: WAF :: fetched 8 new logs [29-05-2022 07:38:01]19457: WAF :: fetched 5 new logs [29-05-2022 07:39:02]22915: WAF :: fetched 5 new logs [29-05-2022 07:40:01]26358: WAF :: fetched 1 new logs [29-05-2022 07:41:02]29823: Checking for user cron vulnerabilities [29-05-2022 07:42:01]807: WAF :: fetched 2 new logs [29-05-2022 07:43:01]4260: WAF :: fetched 3 new logs [29-05-2022 07:44:01]7666: Checking ditributed CMS bruteforce attacks [29-05-2022 07:44:02]7666: WAF :: fetched 1 new logs [29-05-2022 07:45:01]: Checking for definition updates [29-05-2022 07:45:03]11109: Updated virus defnition : malware.expert.ndb [29-05-2022 07:45:04]11109: Updated virus defnition : malware.expert.fp [29-05-2022 07:46:02]14561: WAF :: fetched 2 new logs [29-05-2022 07:47:01]17905: WAF :: fetched 2 new logs [29-05-2022 07:49:01]24724: WAF :: fetched 1 new logs [29-05-2022 07:50:02]28217: WAF :: fetched 1 new logs [29-05-2022 07:53:02]6125: WAF :: fetched 8 new logs [29-05-2022 07:54:01]9487: WAF :: fetched 5 new logs [29-05-2022 07:55:01]12956: WAF :: fetched 6 new logs [29-05-2022 07:56:02]16426: WAF :: fetched 7 new logs [29-05-2022 07:57:01]19819: WAF :: fetched 4 new logs [29-05-2022 07:58:02]23264: WAF :: fetched 4 new logs [29-05-2022 07:59:01]26631: WAF :: fetched 7 new logs [29-05-2022 08:00:02]29860: WAF :: fetched 8 new logs [29-05-2022 08:01:01]1392: WAF :: fetched 10 new logs [29-05-2022 08:02:02]4952: WAF :: fetched 8 new logs [29-05-2022 08:03:01]8312: WAF :: fetched 2 new logs [29-05-2022 08:04:01]11716: WAF :: fetched 2 new logs [29-05-2022 08:05:02]15262: WAF :: fetched 4 new logs [29-05-2022 08:06:01]18673: WAF :: fetched 1 new logs [29-05-2022 08:08:01]25456: WAF :: fetched 3 new logs [29-05-2022 08:09:01]28873: WAF :: fetched 3 new logs [29-05-2022 08:10:01]32355: WAF :: fetched 2 new logs [29-05-2022 08:12:01]6843: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653822721 [29-05-2022 08:12:01]6843: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 08:12:03]6843: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 08:12:04]6843: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-0812/20220529-081201-YpNVAaFHMjPmQz3JvF4O5wAAABo [29-05-2022 08:12:04]6843: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 08:12:04]6843: WAF :: fetched 2 new logs [29-05-2022 08:13:02]10253: WAF :: fetched 1 new logs [29-05-2022 08:14:01]13612: WAF :: fetched 9 new logs [29-05-2022 08:15:02]17116: WAF :: fetched 10 new logs [29-05-2022 08:16:01]20556: WAF :: fetched 3 new logs [29-05-2022 08:17:01]23942: WAF :: fetched 4 new logs [29-05-2022 08:18:02]27371: WAF :: fetched 5 new logs [29-05-2022 08:19:01]30769: WAF :: fetched 49 new logs [29-05-2022 08:20:02]1876: WAF :: fetched 114 new logs [29-05-2022 08:21:02]5323: WAF :: fetched 139 new logs [29-05-2022 08:22:01]8665: WAF :: fetched 24 new logs [29-05-2022 08:23:02]12071: WAF :: fetched 1 new logs [29-05-2022 08:24:01]15431: WAF :: fetched 3 new logs [29-05-2022 08:25:02]18955: WAF :: fetched 5 new logs [29-05-2022 08:26:01]22370: WAF :: fetched 3 new logs [29-05-2022 08:27:01]25745: WAF :: fetched 5 new logs [29-05-2022 08:28:02]29191: WAF :: fetched 1 new logs [29-05-2022 08:30:02]3726: WAF :: fetched 3 new logs [29-05-2022 08:31:02]7122: WAF :: fetched 4 new logs [29-05-2022 08:32:01]10519: WAF :: fetched 1 new logs [29-05-2022 08:33:02]13997: WAF :: fetched 1 new logs [29-05-2022 08:34:02]17351: WAF :: fetched 2 new logs [29-05-2022 08:35:01]20824: WAF :: fetched 6 new logs [29-05-2022 08:36:02]24291: WAF :: fetched 11 new logs [29-05-2022 08:37:01]27628: WAF :: fetched 8 new logs [29-05-2022 08:38:02]31047: WAF :: fetched 1 new logs [29-05-2022 08:39:02]2103: WAF :: fetched 1 new logs [29-05-2022 08:40:01]5597: WAF :: fetched 4 new logs [29-05-2022 08:41:01]9217: WAF :: fetched 5 new logs [29-05-2022 08:41:01]9217: Checking for user cron vulnerabilities [29-05-2022 08:42:02]12762: WAF :: fetched 3 new logs [29-05-2022 08:43:01]16132: WAF :: fetched 6 new logs [29-05-2022 08:44:02]19525: Checking ditributed CMS bruteforce attacks [29-05-2022 08:44:02]19525: WAF :: fetched 8 new logs [29-05-2022 08:45:02]23026: WAF :: fetched 3 new logs [29-05-2022 08:46:02]26534: WAF :: fetched 1 new logs [29-05-2022 08:47:01]29954: WAF :: fetched 1 new logs [29-05-2022 08:49:02]4422: WAF :: fetched 2 new logs [29-05-2022 08:50:01]7863: WAF :: fetched 1 new logs [29-05-2022 08:51:02]11354: WAF :: fetched 5 new logs [29-05-2022 08:52:02]14725: WAF :: fetched 11 new logs [29-05-2022 08:53:02]18102: WAF :: fetched 10 new logs [29-05-2022 08:54:01]21456: WAF :: fetched 1 new logs [29-05-2022 08:55:02]24908: WAF :: fetched 2 new logs [29-05-2022 08:57:02]31852: WAF :: fetched 10 new logs [29-05-2022 08:58:01]2904: WAF :: fetched 20 new logs [29-05-2022 08:59:02]6333: WAF :: fetched 6 new logs [29-05-2022 09:00:02]9583: WAF :: fetched 11 new logs [29-05-2022 09:01:01]13987: WAF :: fetched 4 new logs [29-05-2022 09:02:02]17858: WAF :: fetched 2 new logs [29-05-2022 09:03:01]21356: WAF :: fetched 7 new logs [29-05-2022 09:04:02]24790: WAF :: fetched 7 new logs [29-05-2022 09:05:02]28154: WAF :: fetched 9 new logs [29-05-2022 09:06:01]31733: WAF :: fetched 7 new logs [29-05-2022 09:07:01]2805: WAF :: fetched 7 new logs [29-05-2022 09:08:02]6199: WAF :: fetched 2 new logs [29-05-2022 09:09:01]9567: WAF :: fetched 2 new logs [29-05-2022 09:10:02]13040: WAF :: fetched 5 new logs [29-05-2022 09:11:01]16565: WAF :: fetched 7 new logs [29-05-2022 09:12:02]19985: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653826322 [29-05-2022 09:12:02]19985: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 09:12:04]19985: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 09:12:04]19985: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-0912/20220529-091202-YpNjEg_dBe2j452qNSxdIQAAAAY [29-05-2022 09:12:04]19985: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 09:12:05]19985: WAF :: fetched 8 new logs [29-05-2022 09:13:02]23355: WAF :: fetched 1 new logs [29-05-2022 09:14:01]26722: WAF :: fetched 1 new logs [29-05-2022 09:15:02]30186: WAF :: fetched 2 new logs [29-05-2022 09:16:01]1294: WAF :: fetched 2 new logs [29-05-2022 09:17:02]4715: WAF :: fetched 2 new logs [29-05-2022 09:18:01]8113: WAF :: fetched 2 new logs [29-05-2022 09:19:01]11484: WAF :: fetched 1 new logs [29-05-2022 09:20:02]14896: WAF :: fetched 7 new logs [29-05-2022 09:21:02]18420: WAF :: fetched 12 new logs [29-05-2022 09:22:01]21765: WAF :: fetched 12 new logs [29-05-2022 09:23:02]25176: WAF :: fetched 5 new logs [29-05-2022 09:24:01]28565: WAF :: fetched 1 new logs [29-05-2022 09:25:02]32004: WAF :: fetched 2 new logs [29-05-2022 09:27:02]6586: WAF :: fetched 2 new logs [29-05-2022 09:29:02]13359: WAF :: fetched 2 new logs [29-05-2022 09:30:02]16748: WAF :: fetched 3 new logs [29-05-2022 09:32:01]23587: WAF :: fetched 4 new logs [29-05-2022 09:34:01]30389: WAF :: fetched 1 new logs [29-05-2022 09:35:01]1399: WAF :: fetched 4 new logs [29-05-2022 09:38:01]11702: WAF :: fetched 2 new logs [29-05-2022 09:41:02]22131: WAF :: fetched 2 new logs [29-05-2022 09:41:02]22131: Checking for user cron vulnerabilities [29-05-2022 09:42:01]25503: WAF :: fetched 1 new logs [29-05-2022 09:43:01]28895: WAF :: fetched 2 new logs [29-05-2022 09:44:01]32319: Checking ditributed CMS bruteforce attacks [29-05-2022 09:44:02]32319: WAF :: fetched 2 new logs [29-05-2022 09:49:01]17161: WAF :: fetched 4 new logs [29-05-2022 09:50:02]20697: WAF :: fetched 1 new logs [29-05-2022 09:51:02]24263: WAF :: fetched 4 new logs [29-05-2022 09:52:01]27750: WAF :: fetched 12 new logs [29-05-2022 09:53:02]31330: WAF :: fetched 9 new logs [29-05-2022 09:54:01]2463: WAF :: fetched 11 new logs [29-05-2022 09:55:01]5929: WAF :: fetched 6 new logs [29-05-2022 09:56:02]9531: WAF :: fetched 1 new logs [29-05-2022 09:58:01]16308: WAF :: fetched 1 new logs [29-05-2022 10:00:02]23003: WAF :: fetched 2 new logs [29-05-2022 10:01:02]26976: WAF :: fetched 1 new logs [29-05-2022 10:02:01]30453: WAF :: fetched 4 new logs [29-05-2022 10:03:02]1558: WAF :: fetched 1 new logs [29-05-2022 10:04:02]4969: WAF :: fetched 2 new logs [29-05-2022 10:06:02]11913: WAF :: fetched 2 new logs [29-05-2022 10:07:01]15295: WAF :: fetched 2 new logs [29-05-2022 10:09:02]22145: WAF :: fetched 1 new logs [29-05-2022 10:11:01]29076: WAF :: fetched 1 new logs [29-05-2022 10:12:01]32442: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653829921 [29-05-2022 10:12:01]32442: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 10:12:03]32442: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 10:12:04]32442: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-1012/20220529-101201-YpNxIZQImnMsTR_8oZzsnAAAAAc [29-05-2022 10:12:04]32442: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 10:12:04]32442: WAF :: fetched 2 new logs [29-05-2022 10:15:01]10262: WAF :: fetched 1 new logs [29-05-2022 10:16:02]13809: WAF :: fetched 3 new logs [29-05-2022 10:17:01]17177: WAF :: fetched 4 new logs [29-05-2022 10:18:02]20604: WAF :: fetched 7 new logs [29-05-2022 10:19:02]23957: WAF :: fetched 11 new logs [29-05-2022 10:20:01]27333: WAF :: fetched 10 new logs [29-05-2022 10:21:02]30911: WAF :: fetched 13 new logs [29-05-2022 10:22:01]1901: WAF :: fetched 17 new logs [29-05-2022 10:23:02]5371: WAF :: fetched 7 new logs [29-05-2022 10:24:01]8805: WAF :: fetched 31 new logs [29-05-2022 10:25:01]12217: WAF :: fetched 46 new logs [29-05-2022 10:26:02]15761: WAF :: fetched 55 new logs [29-05-2022 10:27:01]19182: WAF :: fetched 55 new logs [29-05-2022 10:28:02]22614: WAF :: fetched 77 new logs [29-05-2022 10:29:02]25999: WAF :: fetched 37 new logs [29-05-2022 10:30:02]29431: WAF :: fetched 7 new logs [29-05-2022 10:31:01]576: WAF :: fetched 8 new logs [29-05-2022 10:32:02]4144: WAF :: fetched 7 new logs [29-05-2022 10:33:01]7549: WAF :: fetched 2 new logs [29-05-2022 10:34:01]10967: WAF :: fetched 4 new logs [29-05-2022 10:35:02]14366: WAF :: fetched 6 new logs [29-05-2022 10:36:01]17928: WAF :: fetched 7 new logs [29-05-2022 10:37:01]21329: WAF :: fetched 13 new logs [29-05-2022 10:38:02]24759: WAF :: fetched 12 new logs [29-05-2022 10:39:01]28164: WAF :: fetched 47 new logs [29-05-2022 10:40:02]31631: WAF :: fetched 64 new logs [29-05-2022 10:41:02]2864: WAF :: fetched 88 new logs [29-05-2022 10:41:02]2864: Checking for user cron vulnerabilities [29-05-2022 10:42:01]6284: WAF :: fetched 73 new logs [29-05-2022 10:43:02]9740: WAF :: fetched 32 new logs [29-05-2022 10:44:01]13120: Checking ditributed CMS bruteforce attacks [29-05-2022 10:44:01]13120: WAF :: fetched 5 new logs [29-05-2022 10:45:02]16613: WAF :: fetched 4 new logs [29-05-2022 10:47:01]23557: WAF :: fetched 3 new logs [29-05-2022 10:48:02]26994: WAF :: fetched 1 new logs [29-05-2022 10:49:01]30388: WAF :: fetched 3 new logs [29-05-2022 10:50:02]1483: WAF :: fetched 9 new logs [29-05-2022 10:51:02]5103: WAF :: fetched 11 new logs [29-05-2022 10:52:01]8579: WAF :: fetched 10 new logs [29-05-2022 10:53:01]12045: WAF :: fetched 3 new logs [29-05-2022 10:54:02]15438: WAF :: fetched 5 new logs [29-05-2022 10:55:02]18822: WAF :: fetched 9 new logs [29-05-2022 10:56:01]22373: WAF :: fetched 5 new logs [29-05-2022 10:57:02]25770: WAF :: fetched 6 new logs [29-05-2022 10:58:02]29207: WAF :: fetched 2 new logs [29-05-2022 11:02:01]10917: WAF :: fetched 2 new logs [29-05-2022 11:03:02]14323: WAF :: fetched 4 new logs [29-05-2022 11:04:01]17714: WAF :: fetched 3 new logs [29-05-2022 11:05:02]21121: WAF :: fetched 68 new logs [29-05-2022 11:06:02]24611: WAF :: fetched 91 new logs [29-05-2022 11:07:02]28031: WAF :: fetched 76 new logs [29-05-2022 11:07:48]28199: Performed RBL check for 23.111.136.34. [29-05-2022 11:08:01]31436: WAF :: fetched 55 new logs [29-05-2022 11:09:01]2493: WAF :: fetched 3 new logs [29-05-2022 11:10:02]5934: WAF :: fetched 3 new logs [29-05-2022 11:12:02]12933: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653833522 [29-05-2022 11:12:02]12933: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 11:12:04]12933: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 11:12:04]12933: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-1112/20220529-111202-YpN_Mr_khfZoVe7xcqidmAAAABI [29-05-2022 11:12:04]12933: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 11:16:02]26702: WAF :: fetched 5 new logs [29-05-2022 11:17:02]30146: WAF :: fetched 8 new logs [29-05-2022 11:18:01]1202: WAF :: fetched 12 new logs [29-05-2022 11:19:01]4623: WAF :: fetched 8 new logs [29-05-2022 11:20:02]8090: WAF :: fetched 45 new logs [29-05-2022 11:21:02]11648: WAF :: fetched 124 new logs [29-05-2022 11:22:02]15029: WAF :: fetched 105 new logs [29-05-2022 11:23:01]18408: WAF :: fetched 98 new logs [29-05-2022 11:24:01]21830: WAF :: fetched 50 new logs [29-05-2022 11:25:01]25255: WAF :: fetched 48 new logs [29-05-2022 11:26:02]28899: WAF :: fetched 63 new logs [29-05-2022 11:27:01]32272: WAF :: fetched 71 new logs [29-05-2022 11:28:02]3354: WAF :: fetched 46 new logs [29-05-2022 11:29:02]6790: WAF :: fetched 8 new logs [29-05-2022 11:30:01]10234: WAF :: fetched 15 new logs [29-05-2022 11:31:02]13758: WAF :: fetched 18 new logs [29-05-2022 11:32:01]17213: WAF :: fetched 10 new logs [29-05-2022 11:34:02]24042: WAF :: fetched 56 new logs [29-05-2022 11:35:01]27424: WAF :: fetched 78 new logs [29-05-2022 11:36:02]31033: WAF :: fetched 107 new logs [29-05-2022 11:37:02]2074: WAF :: fetched 142 new logs [29-05-2022 11:38:01]5435: WAF :: fetched 84 new logs [29-05-2022 11:39:02]8855: WAF :: fetched 84 new logs [29-05-2022 11:40:01]12226: WAF :: fetched 12 new logs [29-05-2022 11:41:02]15767: Checking for user cron vulnerabilities [29-05-2022 11:44:01]25861: Checking ditributed CMS bruteforce attacks [29-05-2022 11:44:02]25861: WAF :: fetched 4 new logs [29-05-2022 11:45:02]29264: WAF :: fetched 16 new logs [29-05-2022 11:46:02]325: WAF :: fetched 56 new logs [29-05-2022 11:47:01]3788: WAF :: fetched 64 new logs [29-05-2022 11:48:01]7201: WAF :: fetched 73 new logs [29-05-2022 11:49:02]10629: WAF :: fetched 32 new logs [29-05-2022 11:50:01]13973: WAF :: fetched 6 new logs [29-05-2022 11:51:01]17507: WAF :: fetched 14 new logs [29-05-2022 11:52:02]20910: WAF :: fetched 5 new logs [29-05-2022 11:53:01]24232: WAF :: fetched 2 new logs [29-05-2022 11:54:02]27665: WAF :: fetched 4 new logs [29-05-2022 11:55:01]31082: WAF :: fetched 7 new logs [29-05-2022 11:56:02]2294: WAF :: fetched 10 new logs [29-05-2022 11:57:02]5687: WAF :: fetched 8 new logs [29-05-2022 11:58:01]9104: WAF :: fetched 9 new logs [29-05-2022 11:59:01]12560: WAF :: fetched 6 new logs [29-05-2022 12:00:02]15790: WAF :: fetched 9 new logs [29-05-2022 12:01:01]19817: WAF :: fetched 2 new logs [29-05-2022 12:04:02]30096: WAF :: fetched 1 new logs [29-05-2022 12:05:02]1141: WAF :: fetched 2 new logs [29-05-2022 12:08:01]11606: WAF :: fetched 6 new logs [29-05-2022 12:09:02]15040: WAF :: fetched 7 new logs [29-05-2022 12:10:01]18465: WAF :: fetched 6 new logs [29-05-2022 12:11:02]22165: WAF :: fetched 8 new logs [29-05-2022 12:12:02]25783: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653837122 [29-05-2022 12:12:02]25783: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 12:12:04]25783: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 12:12:04]25783: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-1212/20220529-121202-YpONQmJmfX45ScPc0TkH3wAAAAQ [29-05-2022 12:12:04]25783: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 12:12:04]25783: WAF :: fetched 14 new logs [29-05-2022 12:13:01]29430: WAF :: fetched 16 new logs [29-05-2022 12:14:02]732: WAF :: fetched 16 new logs [29-05-2022 12:15:01]4255: WAF :: fetched 16 new logs [29-05-2022 12:16:02]7863: WAF :: fetched 17 new logs [29-05-2022 12:17:01]11260: WAF :: fetched 9 new logs [29-05-2022 12:18:01]14657: WAF :: fetched 9 new logs [29-05-2022 12:19:02]18086: WAF :: fetched 10 new logs [29-05-2022 12:20:02]21555: WAF :: fetched 10 new logs [29-05-2022 12:21:01]25074: WAF :: fetched 6 new logs [29-05-2022 12:22:02]28531: WAF :: fetched 5 new logs [29-05-2022 12:23:01]31933: WAF :: fetched 3 new logs [29-05-2022 12:28:01]16791: WAF :: fetched 3 new logs [29-05-2022 12:29:02]20188: WAF :: fetched 7 new logs [29-05-2022 12:30:01]23627: WAF :: fetched 9 new logs [29-05-2022 12:31:02]27189: WAF :: fetched 11 new logs [29-05-2022 12:32:01]30591: WAF :: fetched 10 new logs [29-05-2022 12:33:02]1710: WAF :: fetched 15 new logs [29-05-2022 12:34:02]5155: WAF :: fetched 15 new logs [29-05-2022 12:35:01]8597: WAF :: fetched 15 new logs [29-05-2022 12:36:02]12193: WAF :: fetched 6 new logs [29-05-2022 12:37:01]15568: WAF :: fetched 2 new logs [29-05-2022 12:39:01]22419: WAF :: fetched 4 new logs [29-05-2022 12:40:02]25814: WAF :: fetched 5 new logs [29-05-2022 12:41:01]29368: WAF :: fetched 4 new logs [29-05-2022 12:41:01]29368: Checking for user cron vulnerabilities [29-05-2022 12:42:02]358: WAF :: fetched 7 new logs [29-05-2022 12:43:02]3879: WAF :: fetched 8 new logs [29-05-2022 12:44:01]7278: Checking ditributed CMS bruteforce attacks [29-05-2022 12:44:01]7278: WAF :: fetched 2 new logs [29-05-2022 12:45:02]: Checking for software updates [29-05-2022 12:46:01]14311: Watchlist is empty! Rebuilding watchlist and restarting cPGuard scanner service [29-05-2022 12:46:01]14310: WAF :: fetched 1 new logs [29-05-2022 12:47:01]17692: WAF :: fetched 2 new logs [29-05-2022 12:48:01]21122: WAF :: fetched 3 new logs [29-05-2022 12:49:02]24508: WAF :: fetched 3 new logs [29-05-2022 12:50:02]27905: WAF :: fetched 2 new logs [29-05-2022 12:51:01]31443: WAF :: fetched 1 new logs [29-05-2022 12:53:02]5918: WAF :: fetched 2 new logs [29-05-2022 12:54:01]9316: WAF :: fetched 3 new logs [29-05-2022 12:55:01]12757: WAF :: fetched 5 new logs [29-05-2022 12:56:02]16276: WAF :: fetched 3 new logs [29-05-2022 12:57:02]19719: WAF :: fetched 9 new logs [29-05-2022 12:58:01]23074: WAF :: fetched 9 new logs [29-05-2022 12:59:01]26461: WAF :: fetched 4 new logs [29-05-2022 13:00:02]29597: WAF :: fetched 2 new logs [29-05-2022 13:01:01]1132: WAF :: fetched 3 new logs [29-05-2022 13:02:01]4598: WAF :: fetched 106 new logs [29-05-2022 13:03:02]7983: WAF :: fetched 4 new logs [29-05-2022 13:04:02]11382: WAF :: fetched 4 new logs [29-05-2022 13:05:01]14721: WAF :: fetched 6 new logs [29-05-2022 13:06:01]18262: WAF :: fetched 14 new logs [29-05-2022 13:07:02]21618: WAF :: fetched 6 new logs [29-05-2022 13:08:02]25004: WAF :: fetched 4 new logs [29-05-2022 13:09:01]28383: WAF :: fetched 6 new logs [29-05-2022 13:10:02]31785: WAF :: fetched 5 new logs [29-05-2022 13:11:02]2997: WAF :: fetched 7 new logs [29-05-2022 13:12:01]6335: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653840721 [29-05-2022 13:12:01]6335: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 13:12:03]6335: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 13:12:03]6335: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-1312/20220529-131201-YpObUYaw-bu-0_zjYPGAEgAAABY [29-05-2022 13:12:03]6335: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 13:12:04]6335: WAF :: fetched 4 new logs [29-05-2022 13:13:01]9767: WAF :: fetched 1 new logs [29-05-2022 13:14:02]13131: WAF :: fetched 5 new logs [29-05-2022 13:15:02]16551: WAF :: fetched 7 new logs [29-05-2022 13:16:01]20056: WAF :: fetched 11 new logs [29-05-2022 13:17:01]23431: WAF :: fetched 9 new logs [29-05-2022 13:18:02]26803: WAF :: fetched 10 new logs [29-05-2022 13:19:01]30191: WAF :: fetched 7 new logs [29-05-2022 13:20:01]1227: WAF :: fetched 8 new logs [29-05-2022 13:21:02]4830: WAF :: fetched 7 new logs [29-05-2022 13:22:02]8210: WAF :: fetched 4 new logs [29-05-2022 13:23:01]11519: WAF :: fetched 3 new logs [29-05-2022 13:24:01]14926: WAF :: fetched 1 new logs [29-05-2022 13:25:02]18335: WAF :: fetched 4 new logs [29-05-2022 13:26:02]21900: WAF :: fetched 2 new logs [29-05-2022 13:27:01]25222: WAF :: fetched 1 new logs [29-05-2022 13:28:02]28686: WAF :: fetched 2 new logs [29-05-2022 13:29:02]32178: WAF :: fetched 2 new logs [29-05-2022 13:30:01]3222: WAF :: fetched 5 new logs [29-05-2022 13:31:01]6775: WAF :: fetched 5 new logs [29-05-2022 13:32:02]10174: WAF :: fetched 4 new logs [29-05-2022 13:34:01]16899: WAF :: fetched 1 new logs [29-05-2022 13:35:01]20322: WAF :: fetched 1 new logs [29-05-2022 13:36:02]23800: WAF :: fetched 1 new logs [29-05-2022 13:38:01]30547: WAF :: fetched 2 new logs [29-05-2022 13:39:02]1573: WAF :: fetched 2 new logs [29-05-2022 13:40:02]5020: WAF :: fetched 4 new logs [29-05-2022 13:41:01]8487: WAF :: fetched 6 new logs [29-05-2022 13:41:01]8487: Checking for user cron vulnerabilities [29-05-2022 13:42:02]11902: WAF :: fetched 4 new logs [29-05-2022 13:43:02]15301: WAF :: fetched 3 new logs [29-05-2022 13:44:01]18684: Checking ditributed CMS bruteforce attacks [29-05-2022 13:44:01]18684: WAF :: fetched 6 new logs [29-05-2022 13:45:01]: Checking for definition updates [29-05-2022 13:45:01]22106: WAF :: fetched 1 new logs [29-05-2022 13:45:05]22107: Updated virus defnition : signatures.ndb [29-05-2022 13:45:07]22107: Updated virus defnition : malware.expert.ndb [29-05-2022 13:45:08]22107: Updated virus defnition : malware.expert.fp [29-05-2022 13:48:01]32417: WAF :: fetched 1 new logs [29-05-2022 13:50:02]6880: WAF :: fetched 3 new logs [29-05-2022 13:52:01]13742: WAF :: fetched 1 new logs [29-05-2022 13:53:02]17125: WAF :: fetched 4 new logs [29-05-2022 13:54:02]20545: WAF :: fetched 1 new logs [29-05-2022 13:55:01]23865: WAF :: fetched 1 new logs [29-05-2022 13:56:01]27364: WAF :: fetched 1 new logs [29-05-2022 13:59:01]5201: WAF :: fetched 6 new logs [29-05-2022 14:00:02]8380: WAF :: fetched 4 new logs [29-05-2022 14:01:01]12344: WAF :: fetched 7 new logs [29-05-2022 14:02:02]15895: WAF :: fetched 5 new logs [29-05-2022 14:03:02]19331: WAF :: fetched 6 new logs [29-05-2022 14:04:01]22744: WAF :: fetched 2 new logs [29-05-2022 14:05:02]26192: WAF :: fetched 3 new logs [29-05-2022 14:07:02]801: WAF :: fetched 3 new logs [29-05-2022 14:08:01]4293: WAF :: fetched 10 new logs [29-05-2022 14:09:02]7764: WAF :: fetched 10 new logs [29-05-2022 14:10:02]11166: WAF :: fetched 12 new logs [29-05-2022 14:11:01]14630: WAF :: fetched 14 new logs [29-05-2022 14:12:02]18160: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653844322 [29-05-2022 14:12:02]18160: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 14:12:04]18160: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 14:12:04]18160: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-1412/20220529-141202-YpOpYrYPn0lvgRiXNB_7rQAAAAk [29-05-2022 14:12:04]18160: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 14:12:04]18160: WAF :: fetched 10 new logs [29-05-2022 14:13:02]21627: WAF :: fetched 7 new logs [29-05-2022 14:14:02]25062: WAF :: fetched 5 new logs [29-05-2022 14:15:01]28505: WAF :: fetched 9 new logs [29-05-2022 14:16:01]32056: WAF :: fetched 6 new logs [29-05-2022 14:17:02]3265: WAF :: fetched 2 new logs [29-05-2022 14:18:01]6707: WAF :: fetched 1 new logs [29-05-2022 14:19:02]10143: WAF :: fetched 1 new logs [29-05-2022 14:20:01]13569: WAF :: fetched 5 new logs [29-05-2022 14:21:02]17047: WAF :: fetched 4 new logs [29-05-2022 14:22:02]20566: WAF :: fetched 4 new logs [29-05-2022 14:24:01]27328: WAF :: fetched 1 new logs [29-05-2022 14:25:02]30895: WAF :: fetched 2 new logs [29-05-2022 14:26:01]2067: WAF :: fetched 2 new logs [29-05-2022 14:27:02]5621: WAF :: fetched 1 new logs [29-05-2022 14:28:02]9061: WAF :: fetched 3 new logs [29-05-2022 14:29:01]12523: WAF :: fetched 7 new logs [29-05-2022 14:30:02]16031: WAF :: fetched 7 new logs [29-05-2022 14:31:01]19525: WAF :: fetched 6 new logs [29-05-2022 14:32:01]23101: WAF :: fetched 3 new logs [29-05-2022 14:33:02]26599: WAF :: fetched 1 new logs [29-05-2022 14:34:01]30059: WAF :: fetched 2 new logs [29-05-2022 14:35:01]1158: WAF :: fetched 5 new logs [29-05-2022 14:36:02]4812: WAF :: fetched 9 new logs [29-05-2022 14:37:01]8327: WAF :: fetched 11 new logs [29-05-2022 14:38:02]11886: WAF :: fetched 11 new logs [29-05-2022 14:39:01]15311: WAF :: fetched 5 new logs [29-05-2022 14:40:01]18815: WAF :: fetched 11 new logs [29-05-2022 14:41:02]22362: WAF :: fetched 16 new logs [29-05-2022 14:41:02]22362: Checking for user cron vulnerabilities [29-05-2022 14:42:02]25847: WAF :: fetched 4 new logs [29-05-2022 14:43:01]29310: WAF :: fetched 3 new logs [29-05-2022 14:44:02]338: Checking ditributed CMS bruteforce attacks [29-05-2022 14:44:02]338: WAF :: fetched 5 new logs [29-05-2022 14:45:02]3944: WAF :: fetched 9 new logs [29-05-2022 14:46:02]7427: WAF :: fetched 2 new logs [29-05-2022 14:47:01]10994: WAF :: fetched 3 new logs [29-05-2022 14:48:02]14415: WAF :: fetched 1 new logs [29-05-2022 14:49:01]17822: WAF :: fetched 7 new logs [29-05-2022 14:50:01]21334: WAF :: fetched 6 new logs [29-05-2022 14:51:02]24808: WAF :: fetched 10 new logs [29-05-2022 14:52:01]28298: WAF :: fetched 7 new logs [29-05-2022 14:53:02]31820: WAF :: fetched 9 new logs [29-05-2022 14:53:02]31819: Updated license status via CDN [29-05-2022 14:54:02]2925: WAF :: fetched 16 new logs [29-05-2022 14:55:02]6362: WAF :: fetched 5 new logs [29-05-2022 14:57:02]13388: WAF :: fetched 1 new logs [29-05-2022 14:58:01]16846: WAF :: fetched 1 new logs [29-05-2022 15:01:01]27441: Reseting cPGuard inotify settings [29-05-2022 15:02:02]31113: WAF :: fetched 1 new logs [29-05-2022 15:05:02]9430: WAF :: fetched 2 new logs [29-05-2022 15:06:01]12998: WAF :: fetched 1 new logs [29-05-2022 15:08:01]20144: WAF :: fetched 1 new logs [29-05-2022 15:09:01]23660: WAF :: fetched 1 new logs [29-05-2022 15:10:02]27209: WAF :: fetched 5 new logs [29-05-2022 15:11:01]30803: WAF :: fetched 2 new logs [29-05-2022 15:12:02]2081: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653847922 [29-05-2022 15:12:02]2081: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 15:12:04]2081: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 15:12:04]2081: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-1512/20220529-151202-YpO3ckUIbgGhdh4ukfOtOwAAABc [29-05-2022 15:12:04]2081: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 15:12:04]2081: WAF :: fetched 13 new logs [29-05-2022 15:13:01]5640: WAF :: fetched 9 new logs [29-05-2022 15:14:02]9594: WAF :: fetched 21 new logs [29-05-2022 15:15:02]13107: WAF :: fetched 16 new logs [29-05-2022 15:16:01]16676: WAF :: fetched 16 new logs [29-05-2022 15:17:02]20332: WAF :: fetched 10 new logs [29-05-2022 15:18:01]23846: WAF :: fetched 3 new logs [29-05-2022 15:19:01]27207: WAF :: fetched 3 new logs [29-05-2022 15:20:01]30727: WAF :: fetched 7 new logs [29-05-2022 15:21:01]1817: WAF :: fetched 6 new logs [29-05-2022 15:22:02]5388: WAF :: fetched 8 new logs [29-05-2022 15:23:01]8801: WAF :: fetched 3 new logs [29-05-2022 15:24:02]12273: WAF :: fetched 7 new logs [29-05-2022 15:25:01]15680: WAF :: fetched 7 new logs [29-05-2022 15:26:01]19150: WAF :: fetched 7 new logs [29-05-2022 15:27:02]22675: WAF :: fetched 6 new logs [29-05-2022 15:28:01]26055: WAF :: fetched 2 new logs [29-05-2022 15:29:02]29487: WAF :: fetched 3 new logs [29-05-2022 15:30:02]485: WAF :: fetched 1 new logs [29-05-2022 15:32:01]7660: WAF :: fetched 2 new logs [29-05-2022 15:32:01]7652: httpd.conf changed. Refreshing watchlist. [29-05-2022 15:33:02]11156: httpd.conf changed. Refreshing watchlist. [29-05-2022 15:37:02]25030: httpd.conf changed. Refreshing watchlist. [29-05-2022 15:37:02]25034: WAF :: fetched 3 new logs [29-05-2022 15:38:01]28404: WAF :: fetched 19 new logs [29-05-2022 15:39:01]31826: WAF :: fetched 12 new logs [29-05-2022 15:40:01]2943: WAF :: fetched 13 new logs [29-05-2022 15:41:01]6409: WAF :: fetched 6 new logs [29-05-2022 15:41:01]6409: Checking for user cron vulnerabilities [29-05-2022 15:42:01]9911: WAF :: fetched 4 new logs [29-05-2022 15:43:01]13329: WAF :: fetched 1 new logs [29-05-2022 15:44:01]16755: Checking ditributed CMS bruteforce attacks [29-05-2022 15:44:02]16755: WAF :: fetched 1331 new logs [29-05-2022 15:45:01]20211: WAF :: fetched 2 new logs [29-05-2022 15:49:02]1768: WAF :: fetched 7 new logs [29-05-2022 15:50:01]5226: WAF :: fetched 6 new logs [29-05-2022 15:51:01]8712: WAF :: fetched 14 new logs [29-05-2022 15:52:01]12281: WAF :: fetched 6 new logs [29-05-2022 15:54:01]19080: WAF :: fetched 1 new logs [29-05-2022 15:56:01]26034: WAF :: fetched 2 new logs [29-05-2022 15:57:01]29592: WAF :: fetched 4 new logs [29-05-2022 15:58:02]578: WAF :: fetched 9 new logs [29-05-2022 15:59:02]4116: WAF :: fetched 7 new logs [29-05-2022 16:00:02]7303: WAF :: fetched 7 new logs [29-05-2022 16:01:01]11284: WAF :: fetched 1 new logs [29-05-2022 16:03:02]18284: WAF :: fetched 4 new logs [29-05-2022 16:04:01]21695: WAF :: fetched 6 new logs [29-05-2022 16:05:01]25087: WAF :: fetched 8 new logs [29-05-2022 16:06:02]28613: WAF :: fetched 13 new logs [29-05-2022 16:07:01]32088: WAF :: fetched 7 new logs [29-05-2022 16:08:02]3215: WAF :: fetched 7 new logs [29-05-2022 16:09:01]6608: WAF :: fetched 3 new logs [29-05-2022 16:10:01]10067: WAF :: fetched 1 new logs [29-05-2022 16:11:02]13540: WAF :: fetched 4 new logs [29-05-2022 16:12:01]17012: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653851521 [29-05-2022 16:12:01]17012: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 16:12:03]17012: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 16:12:04]17012: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-1612/20220529-161201-YpPFgZIyjopBOL0A9OA0uwAAAAY [29-05-2022 16:12:04]17012: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 16:12:04]17012: WAF :: fetched 2 new logs [29-05-2022 16:13:01]20427: WAF :: fetched 3 new logs [29-05-2022 16:15:01]27342: WAF :: fetched 1 new logs [29-05-2022 16:16:02]30882: WAF :: fetched 1 new logs [29-05-2022 16:17:01]1999: WAF :: fetched 1 new logs [29-05-2022 16:18:02]5506: WAF :: fetched 1 new logs [29-05-2022 16:19:01]8917: WAF :: fetched 2 new logs [29-05-2022 16:21:02]15882: WAF :: fetched 1 new logs [29-05-2022 16:23:02]22751: WAF :: fetched 1 new logs [29-05-2022 16:26:01]655: WAF :: fetched 5 new logs [29-05-2022 16:27:02]4258: WAF :: fetched 1 new logs [29-05-2022 16:28:01]7654: WAF :: fetched 5 new logs [29-05-2022 16:29:01]11061: WAF :: fetched 6 new logs [29-05-2022 16:30:01]14462: WAF :: fetched 3 new logs [29-05-2022 16:31:02]17963: WAF :: fetched 9 new logs [29-05-2022 16:32:01]21486: WAF :: fetched 6 new logs [29-05-2022 16:33:01]24933: WAF :: fetched 8 new logs [29-05-2022 16:34:02]28408: WAF :: fetched 12 new logs [29-05-2022 16:35:01]31788: WAF :: fetched 9 new logs [29-05-2022 16:36:02]2977: WAF :: fetched 5 new logs [29-05-2022 16:37:02]6475: WAF :: fetched 3 new logs [29-05-2022 16:38:01]9886: WAF :: fetched 5 new logs [29-05-2022 16:39:02]13336: WAF :: fetched 4 new logs [29-05-2022 16:40:01]16718: WAF :: fetched 8 new logs [29-05-2022 16:41:02]20209: WAF :: fetched 13 new logs [29-05-2022 16:41:02]20209: Checking for user cron vulnerabilities [29-05-2022 16:42:01]23703: WAF :: fetched 16 new logs [29-05-2022 16:43:01]27104: WAF :: fetched 14 new logs [29-05-2022 16:44:01]30600: Checking ditributed CMS bruteforce attacks [29-05-2022 16:44:02]30600: WAF :: fetched 10 new logs [29-05-2022 16:45:01]1623: WAF :: fetched 3 new logs [29-05-2022 16:46:01]5177: WAF :: fetched 2 new logs [29-05-2022 16:47:02]8716: WAF :: fetched 5 new logs [29-05-2022 16:48:01]12127: WAF :: fetched 6 new logs [29-05-2022 16:49:02]15542: WAF :: fetched 4 new logs [29-05-2022 16:50:02]18927: WAF :: fetched 7 new logs [29-05-2022 16:51:01]22438: WAF :: fetched 9 new logs [29-05-2022 16:52:02]25972: WAF :: fetched 1 new logs [29-05-2022 16:53:01]29395: WAF :: fetched 1 new logs [29-05-2022 16:54:01]365: WAF :: fetched 9 new logs [29-05-2022 16:55:02]3921: WAF :: fetched 7 new logs [29-05-2022 16:56:02]7361: WAF :: fetched 1 new logs [29-05-2022 16:57:02]10877: WAF :: fetched 1 new logs [29-05-2022 16:58:01]14307: WAF :: fetched 4 new logs [29-05-2022 16:59:02]17700: WAF :: fetched 2 new logs [29-05-2022 17:00:01]20876: WAF :: fetched 3 new logs [29-05-2022 17:02:02]28280: WAF :: fetched 3 new logs [29-05-2022 17:03:01]31714: WAF :: fetched 7 new logs [29-05-2022 17:04:02]2794: WAF :: fetched 5 new logs [29-05-2022 17:05:01]6272: WAF :: fetched 8 new logs [29-05-2022 17:06:01]9765: WAF :: fetched 4 new logs [29-05-2022 17:07:02]13261: WAF :: fetched 10 new logs [29-05-2022 17:08:01]16665: WAF :: fetched 6 new logs [29-05-2022 17:09:01]20106: WAF :: fetched 3 new logs [29-05-2022 17:12:02]30614: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653855122 [29-05-2022 17:12:02]30614: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 17:12:04]30614: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 17:12:04]30614: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-1712/20220529-171202-YpPTksi0BmohiNgTHQwQ0gAAAAE [29-05-2022 17:12:04]30614: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 17:12:04]30614: WAF :: fetched 2 new logs [29-05-2022 17:17:02]15495: WAF :: fetched 5 new logs [29-05-2022 17:18:01]18890: WAF :: fetched 5 new logs [29-05-2022 17:19:02]22340: WAF :: fetched 2 new logs [29-05-2022 17:20:01]25767: WAF :: fetched 10 new logs [29-05-2022 17:21:02]29332: WAF :: fetched 7 new logs [29-05-2022 17:22:02]377: WAF :: fetched 1 new logs [29-05-2022 17:23:01]3994: WAF :: fetched 4 new logs [29-05-2022 17:24:02]7450: WAF :: fetched 6 new logs [29-05-2022 17:25:01]10885: WAF :: fetched 5 new logs [29-05-2022 17:26:02]14380: WAF :: fetched 8 new logs [29-05-2022 17:27:02]17864: WAF :: fetched 4 new logs [29-05-2022 17:28:02]21266: WAF :: fetched 1 new logs [29-05-2022 17:29:01]24688: WAF :: fetched 2 new logs [29-05-2022 17:31:01]31594: WAF :: fetched 1 new logs [29-05-2022 17:32:02]2825: WAF :: fetched 1 new logs [29-05-2022 17:34:02]9684: WAF :: fetched 1 new logs [29-05-2022 17:36:01]16555: WAF :: fetched 3 new logs [29-05-2022 17:38:01]23479: WAF :: fetched 1 new logs [29-05-2022 17:41:01]1535: WAF :: fetched 2 new logs [29-05-2022 17:41:01]1535: Checking for user cron vulnerabilities [29-05-2022 17:42:02]5141: WAF :: fetched 1 new logs [29-05-2022 17:43:01]8526: WAF :: fetched 2 new logs [29-05-2022 17:44:01]11973: Checking ditributed CMS bruteforce attacks [29-05-2022 17:45:01]15364: WAF :: fetched 1 new logs [29-05-2022 17:47:01]22384: WAF :: fetched 6 new logs [29-05-2022 17:48:02]25848: WAF :: fetched 3 new logs [29-05-2022 17:49:02]29261: WAF :: fetched 1 new logs [29-05-2022 17:50:01]32697: WAF :: fetched 1 new logs [29-05-2022 17:51:02]3889: WAF :: fetched 3 new logs [29-05-2022 17:52:01]7378: WAF :: fetched 2 new logs [29-05-2022 17:53:02]10802: WAF :: fetched 1 new logs [29-05-2022 17:54:02]14226: WAF :: fetched 1 new logs [29-05-2022 17:56:02]21177: WAF :: fetched 1 new logs [29-05-2022 17:57:01]24680: WAF :: fetched 3 new logs [29-05-2022 17:59:02]31565: WAF :: fetched 1 new logs [29-05-2022 18:00:02]2349: WAF :: fetched 1 new logs [29-05-2022 18:02:01]9860: WAF :: fetched 2 new logs [29-05-2022 18:03:02]13341: WAF :: fetched 2 new logs [29-05-2022 18:04:02]16751: WAF :: fetched 1 new logs [29-05-2022 18:05:01]20175: WAF :: fetched 2 new logs [29-05-2022 18:06:02]23683: WAF :: fetched 3 new logs [29-05-2022 18:08:01]30618: WAF :: fetched 10 new logs [29-05-2022 18:09:02]1683: WAF :: fetched 14 new logs [29-05-2022 18:10:02]5120: WAF :: fetched 10 new logs [29-05-2022 18:11:01]8583: WAF :: fetched 8 new logs [29-05-2022 18:12:02]12102: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653858722 [29-05-2022 18:12:02]12102: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 18:12:04]12102: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 18:12:04]12102: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-1812/20220529-181202-YpPhogIzGyoePVoRh0mftAAAADU [29-05-2022 18:12:04]12102: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 18:12:04]12102: WAF :: fetched 5 new logs [29-05-2022 18:13:01]15493: WAF :: fetched 1 new logs [29-05-2022 18:14:02]18988: WAF :: fetched 6 new logs [29-05-2022 18:15:02]22419: WAF :: fetched 6 new logs [29-05-2022 18:16:01]25932: WAF :: fetched 4 new logs [29-05-2022 18:17:02]29493: WAF :: fetched 9 new logs [29-05-2022 18:18:01]451: WAF :: fetched 7 new logs [29-05-2022 18:19:02]3992: WAF :: fetched 26 new logs [29-05-2022 18:20:02]7392: WAF :: fetched 9 new logs [29-05-2022 18:21:01]10842: WAF :: fetched 11 new logs [29-05-2022 18:22:02]14384: WAF :: fetched 8 new logs [29-05-2022 18:23:01]17791: WAF :: fetched 1 new logs [29-05-2022 18:24:02]21222: WAF :: fetched 2 new logs [29-05-2022 18:25:02]24640: WAF :: fetched 2 new logs [29-05-2022 18:26:01]28077: WAF :: fetched 10 new logs [29-05-2022 18:27:02]31654: WAF :: fetched 10 new logs [29-05-2022 18:28:01]2719: WAF :: fetched 11 new logs [29-05-2022 18:29:02]6143: WAF :: fetched 7 new logs [29-05-2022 18:30:02]9590: WAF :: fetched 2 new logs [29-05-2022 18:31:01]13042: WAF :: fetched 5 new logs [29-05-2022 18:33:02]20015: WAF :: fetched 1 new logs [29-05-2022 18:34:01]23405: WAF :: fetched 1 new logs [29-05-2022 18:35:02]26860: WAF :: fetched 1 new logs [29-05-2022 18:36:01]30332: WAF :: fetched 3 new logs [29-05-2022 18:38:02]4962: WAF :: fetched 1 new logs [29-05-2022 18:39:01]8350: WAF :: fetched 4 new logs [29-05-2022 18:41:01]15304: Checking for user cron vulnerabilities [29-05-2022 18:43:02]22256: WAF :: fetched 4 new logs [29-05-2022 18:44:01]25625: Checking ditributed CMS bruteforce attacks [29-05-2022 18:44:01]25625: WAF :: fetched 2 new logs [29-05-2022 18:45:01]29058: WAF :: fetched 4 new logs [29-05-2022 18:46:01]32539: WAF :: fetched 7 new logs [29-05-2022 18:47:02]3734: WAF :: fetched 10 new logs [29-05-2022 18:48:01]7109: WAF :: fetched 10 new logs [29-05-2022 18:49:02]10548: WAF :: fetched 8 new logs [29-05-2022 18:50:02]13924: WAF :: fetched 6 new logs [29-05-2022 18:51:01]17385: WAF :: fetched 3 new logs [29-05-2022 18:52:02]20881: WAF :: fetched 5 new logs [29-05-2022 18:54:01]27676: WAF :: fetched 1 new logs [29-05-2022 18:57:02]5853: WAF :: fetched 2 new logs [29-05-2022 18:58:01]9282: WAF :: fetched 7 new logs [29-05-2022 18:59:02]12705: WAF :: fetched 15 new logs [29-05-2022 19:00:01]15818: WAF :: fetched 16 new logs [29-05-2022 19:01:02]19758: WAF :: fetched 15 new logs [29-05-2022 19:02:01]23195: WAF :: fetched 12 new logs [29-05-2022 19:03:01]26668: WAF :: fetched 8 new logs [29-05-2022 19:04:02]30092: WAF :: fetched 10 new logs [29-05-2022 19:05:01]1092: WAF :: fetched 3 new logs [29-05-2022 19:06:02]4664: WAF :: fetched 6 new logs [29-05-2022 19:07:02]8034: WAF :: fetched 4 new logs [29-05-2022 19:09:01]14974: WAF :: fetched 1 new logs [29-05-2022 19:11:01]21854: WAF :: fetched 1 new logs [29-05-2022 19:12:02]25331: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653862322 [29-05-2022 19:12:02]25331: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 19:12:04]25331: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 19:12:04]25331: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-1912/20220529-191202-YpPvsot3mQTnl7p2MEiR4QAAACM [29-05-2022 19:12:04]25331: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 19:12:04]25331: WAF :: fetched 1 new logs [29-05-2022 19:13:01]28837: WAF :: fetched 3 new logs [29-05-2022 19:14:01]32261: WAF :: fetched 1 new logs [29-05-2022 19:15:02]3434: WAF :: fetched 1 new logs [29-05-2022 19:16:01]6880: WAF :: fetched 6 new logs [29-05-2022 19:17:01]10291: WAF :: fetched 5 new logs [29-05-2022 19:18:02]13830: WAF :: fetched 3 new logs [29-05-2022 19:19:01]17229: WAF :: fetched 10 new logs [29-05-2022 19:20:02]20723: WAF :: fetched 6 new logs [29-05-2022 19:21:01]24193: WAF :: fetched 8 new logs [29-05-2022 19:22:01]27621: WAF :: fetched 7 new logs [29-05-2022 19:23:02]31218: WAF :: fetched 10 new logs [29-05-2022 19:24:01]2273: WAF :: fetched 5 new logs [29-05-2022 19:25:02]5736: WAF :: fetched 4 new logs [29-05-2022 19:26:01]9168: WAF :: fetched 1 new logs [29-05-2022 19:29:01]19420: WAF :: fetched 1 new logs [29-05-2022 19:32:01]29807: WAF :: fetched 2 new logs [29-05-2022 19:33:02]905: WAF :: fetched 1 new logs [29-05-2022 19:38:02]18271: WAF :: fetched 2 new logs [29-05-2022 19:39:01]21659: WAF :: fetched 5 new logs [29-05-2022 19:40:02]25115: WAF :: fetched 10 new logs [29-05-2022 19:41:02]28627: WAF :: fetched 20 new logs [29-05-2022 19:41:02]28627: Checking for user cron vulnerabilities [29-05-2022 19:42:02]32067: WAF :: fetched 13 new logs [29-05-2022 19:43:01]3253: WAF :: fetched 14 new logs [29-05-2022 19:44:01]6715: Checking ditributed CMS bruteforce attacks [29-05-2022 19:44:02]6715: WAF :: fetched 10 new logs [29-05-2022 19:45:01]: Checking for definition updates [29-05-2022 19:45:01]10171: WAF :: fetched 5 new logs [29-05-2022 19:46:02]13640: WAF :: fetched 1 new logs [29-05-2022 19:48:01]20634: WAF :: fetched 7 new logs [29-05-2022 19:49:02]24178: WAF :: fetched 7 new logs [29-05-2022 19:50:01]27636: WAF :: fetched 7 new logs [29-05-2022 19:51:01]31212: WAF :: fetched 7 new logs [29-05-2022 19:52:02]2499: WAF :: fetched 3 new logs [29-05-2022 19:53:01]6102: WAF :: fetched 1 new logs [29-05-2022 19:57:01]20386: WAF :: fetched 1 new logs [29-05-2022 19:58:02]23914: WAF :: fetched 1 new logs [29-05-2022 19:59:01]27375: WAF :: fetched 6 new logs [29-05-2022 20:00:02]30568: WAF :: fetched 10 new logs [29-05-2022 20:01:02]2098: WAF :: fetched 2 new logs [29-05-2022 20:02:01]5799: WAF :: fetched 7 new logs [29-05-2022 20:03:02]9638: WAF :: fetched 3 new logs [29-05-2022 20:04:01]13062: WAF :: fetched 5 new logs [29-05-2022 20:05:01]16515: WAF :: fetched 12 new logs [29-05-2022 20:06:02]20029: WAF :: fetched 14 new logs [29-05-2022 20:07:01]23639: WAF :: fetched 12 new logs [29-05-2022 20:08:02]27162: WAF :: fetched 9 new logs [29-05-2022 20:09:02]30642: WAF :: fetched 13 new logs [29-05-2022 20:10:02]1707: WAF :: fetched 10 new logs [29-05-2022 20:11:02]5231: WAF :: fetched 12 new logs [29-05-2022 20:12:01]8612: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653865921 [29-05-2022 20:12:02]8612: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 20:12:04]8612: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 20:12:04]8612: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-2012/20220529-201202-YpP9wSoaY1h_oHTOMo1RVwAAABY [29-05-2022 20:12:04]8612: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 20:12:04]8612: WAF :: fetched 18 new logs [29-05-2022 20:13:01]12115: WAF :: fetched 8 new logs [29-05-2022 20:14:02]15577: WAF :: fetched 17 new logs [29-05-2022 20:15:02]18958: WAF :: fetched 15 new logs [29-05-2022 20:16:01]22395: WAF :: fetched 7 new logs [29-05-2022 20:17:02]25817: WAF :: fetched 11 new logs [29-05-2022 20:18:01]29310: WAF :: fetched 3 new logs [29-05-2022 20:22:02]10776: WAF :: fetched 3 new logs [29-05-2022 20:23:01]14310: WAF :: fetched 9 new logs [29-05-2022 20:24:02]17787: WAF :: fetched 3 new logs [29-05-2022 20:25:02]21178: WAF :: fetched 3 new logs [29-05-2022 20:26:02]24605: WAF :: fetched 8 new logs [29-05-2022 20:27:01]28006: WAF :: fetched 1 new logs [29-05-2022 20:28:02]31533: WAF :: fetched 3 new logs [29-05-2022 20:29:01]2546: WAF :: fetched 4 new logs [29-05-2022 20:30:02]5996: WAF :: fetched 10 new logs [29-05-2022 20:31:01]9405: WAF :: fetched 4 new logs [29-05-2022 20:32:01]12841: WAF :: fetched 6 new logs [29-05-2022 20:33:01]16314: WAF :: fetched 6 new logs [29-05-2022 20:34:02]19744: WAF :: fetched 7 new logs [29-05-2022 20:35:02]23187: WAF :: fetched 13 new logs [29-05-2022 20:36:01]26635: WAF :: fetched 19 new logs [29-05-2022 20:37:02]30080: WAF :: fetched 16 new logs [29-05-2022 20:38:02]1163: WAF :: fetched 17 new logs [29-05-2022 20:39:02]4706: WAF :: fetched 14 new logs [29-05-2022 20:40:01]8199: WAF :: fetched 7 new logs [29-05-2022 20:41:01]11631: WAF :: fetched 5 new logs [29-05-2022 20:41:01]11631: Checking for user cron vulnerabilities [29-05-2022 20:42:02]15068: WAF :: fetched 1 new logs [29-05-2022 20:43:01]18507: WAF :: fetched 4 new logs [29-05-2022 20:44:01]21913: Checking ditributed CMS bruteforce attacks [29-05-2022 20:44:01]21913: WAF :: fetched 2 new logs [29-05-2022 20:45:02]25362: WAF :: fetched 12 new logs [29-05-2022 20:46:01]28810: WAF :: fetched 10 new logs [29-05-2022 20:47:02]32233: WAF :: fetched 10 new logs [29-05-2022 20:48:01]3353: WAF :: fetched 7 new logs [29-05-2022 20:49:01]6766: WAF :: fetched 5 new logs [29-05-2022 20:50:01]10206: WAF :: fetched 6 new logs [29-05-2022 20:51:02]13645: WAF :: fetched 7 new logs [29-05-2022 20:52:01]16955: WAF :: fetched 9 new logs [29-05-2022 20:52:01]16953: httpd.conf changed. Refreshing watchlist. [29-05-2022 20:53:01]20596: WAF :: fetched 6 new logs [29-05-2022 20:54:01]24022: WAF :: fetched 12 new logs [29-05-2022 20:55:02]27451: WAF :: fetched 8 new logs [29-05-2022 20:56:01]30768: WAF :: fetched 7 new logs [29-05-2022 20:57:02]1944: WAF :: fetched 6 new logs [29-05-2022 20:58:02]5439: WAF :: fetched 10 new logs [29-05-2022 20:59:01]8825: WAF :: fetched 11 new logs [29-05-2022 21:00:01]11989: WAF :: fetched 14 new logs [29-05-2022 21:01:02]15968: WAF :: fetched 26 new logs [29-05-2022 21:02:01]19401: WAF :: fetched 19 new logs [29-05-2022 21:03:02]22917: WAF :: fetched 7 new logs [29-05-2022 21:04:02]26289: WAF :: fetched 5 new logs [29-05-2022 21:05:02]29850: WAF :: fetched 10 new logs [29-05-2022 21:06:02]998: WAF :: fetched 8 new logs [29-05-2022 21:07:01]4455: WAF :: fetched 7 new logs [29-05-2022 21:08:02]7956: WAF :: fetched 7 new logs [29-05-2022 21:09:01]11349: WAF :: fetched 4 new logs [29-05-2022 21:10:01]14776: WAF :: fetched 4 new logs [29-05-2022 21:11:02]18234: WAF :: fetched 3 new logs [29-05-2022 21:12:01]21635: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653869521 [29-05-2022 21:12:01]21635: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 21:12:03]21635: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 21:12:04]21635: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-2112/20220529-211201-YpQL0X5UNfmjoKayZ8vrswAAAA8 [29-05-2022 21:12:04]21635: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 21:12:04]21635: WAF :: fetched 6 new logs [29-05-2022 21:13:02]25179: WAF :: fetched 3 new logs [29-05-2022 21:14:02]28643: WAF :: fetched 7 new logs [29-05-2022 21:15:01]32076: WAF :: fetched 5 new logs [29-05-2022 21:16:01]3218: WAF :: fetched 3 new logs [29-05-2022 21:17:01]6622: WAF :: fetched 3 new logs [29-05-2022 21:18:02]10184: WAF :: fetched 7 new logs [29-05-2022 21:19:01]13595: WAF :: fetched 6 new logs [29-05-2022 21:20:02]17075: WAF :: fetched 6 new logs [29-05-2022 21:21:02]20549: WAF :: fetched 1 new logs [29-05-2022 21:22:01]24004: WAF :: fetched 4 new logs [29-05-2022 21:23:02]27510: WAF :: fetched 13 new logs [29-05-2022 21:24:01]30940: WAF :: fetched 16 new logs [29-05-2022 21:25:02]1998: WAF :: fetched 19 new logs [29-05-2022 21:26:02]5507: WAF :: fetched 15 new logs [29-05-2022 21:27:01]8900: WAF :: fetched 15 new logs [29-05-2022 21:28:02]12424: WAF :: fetched 11 new logs [29-05-2022 21:29:01]15800: WAF :: fetched 7 new logs [29-05-2022 21:30:01]19224: WAF :: fetched 5 new logs [29-05-2022 21:31:02]22702: WAF :: fetched 11 new logs [29-05-2022 21:32:01]26099: WAF :: fetched 11 new logs [29-05-2022 21:33:02]29608: WAF :: fetched 11 new logs [29-05-2022 21:34:01]547: WAF :: fetched 18 new logs [29-05-2022 21:35:01]4090: WAF :: fetched 12 new logs [29-05-2022 21:36:02]7586: WAF :: fetched 10 new logs [29-05-2022 21:37:01]10986: WAF :: fetched 11 new logs [29-05-2022 21:38:02]14462: WAF :: fetched 4 new logs [29-05-2022 21:39:02]17901: WAF :: fetched 4 new logs [29-05-2022 21:40:01]21436: WAF :: fetched 8 new logs [29-05-2022 21:41:02]24991: WAF :: fetched 3 new logs [29-05-2022 21:41:02]24991: Checking for user cron vulnerabilities [29-05-2022 21:42:01]28472: WAF :: fetched 5 new logs [29-05-2022 21:43:01]31990: WAF :: fetched 7 new logs [29-05-2022 21:44:01]3131: Checking ditributed CMS bruteforce attacks [29-05-2022 21:44:02]3131: WAF :: fetched 7 new logs [29-05-2022 21:45:02]6562: WAF :: fetched 4 new logs [29-05-2022 21:46:01]9971: WAF :: fetched 7 new logs [29-05-2022 21:47:02]13395: WAF :: fetched 10 new logs [29-05-2022 21:48:01]16866: WAF :: fetched 3 new logs [29-05-2022 21:49:02]20335: WAF :: fetched 9 new logs [29-05-2022 21:50:02]23745: WAF :: fetched 2 new logs [29-05-2022 21:51:01]27227: WAF :: fetched 37 new logs [29-05-2022 21:52:02]30688: WAF :: fetched 3 new logs [29-05-2022 21:53:01]1799: WAF :: fetched 3 new logs [29-05-2022 21:54:02]5267: WAF :: fetched 2 new logs [29-05-2022 21:55:02]8664: WAF :: fetched 4 new logs [29-05-2022 21:56:01]12089: WAF :: fetched 11 new logs [29-05-2022 21:57:01]15442: WAF :: fetched 4 new logs [29-05-2022 21:58:01]18932: WAF :: fetched 12 new logs [29-05-2022 21:59:01]22328: WAF :: fetched 9 new logs [29-05-2022 22:00:02]25600: WAF :: fetched 13 new logs [29-05-2022 22:01:02]29529: WAF :: fetched 8 new logs [29-05-2022 22:02:01]590: WAF :: fetched 11 new logs [29-05-2022 22:03:01]4208: WAF :: fetched 9 new logs [29-05-2022 22:04:01]7737: WAF :: fetched 7 new logs [29-05-2022 22:05:02]11260: WAF :: fetched 10 new logs [29-05-2022 22:06:01]14670: WAF :: fetched 6 new logs [29-05-2022 22:07:02]18058: WAF :: fetched 6 new logs [29-05-2022 22:07:10]18056: Performing Domain reputation checks [29-05-2022 22:08:02]21523: WAF :: fetched 11 new logs [29-05-2022 22:09:01]24917: WAF :: fetched 9 new logs [29-05-2022 22:10:02]28377: WAF :: fetched 8 new logs [29-05-2022 22:11:01]31785: WAF :: fetched 5 new logs [29-05-2022 22:12:02]2855: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653873122 [29-05-2022 22:12:02]2855: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 22:12:04]2855: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 22:12:04]2855: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-2212/20220529-221202-YpQZ4l37ugnWrNh-cwwmcAAAAAE [29-05-2022 22:12:04]2855: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 22:12:04]2855: WAF :: fetched 5 new logs [29-05-2022 22:13:01]6291: WAF :: fetched 7 new logs [29-05-2022 22:14:01]9732: WAF :: fetched 2 new logs [29-05-2022 22:15:02]13137: WAF :: fetched 3 new logs [29-05-2022 22:16:01]16608: WAF :: fetched 5 new logs [29-05-2022 22:17:02]20061: WAF :: fetched 5 new logs [29-05-2022 22:18:01]23500: WAF :: fetched 5 new logs [29-05-2022 22:19:02]26904: WAF :: fetched 7 new logs [29-05-2022 22:20:01]30348: WAF :: fetched 7 new logs [29-05-2022 22:21:02]1459: WAF :: fetched 12 new logs [29-05-2022 22:22:02]4890: WAF :: fetched 9 new logs [29-05-2022 22:23:01]8357: WAF :: fetched 17 new logs [29-05-2022 22:24:02]11823: WAF :: fetched 14 new logs [29-05-2022 22:25:02]15197: WAF :: fetched 10 new logs [29-05-2022 22:26:01]18639: WAF :: fetched 11 new logs [29-05-2022 22:27:02]22087: WAF :: fetched 12 new logs [29-05-2022 22:28:01]25500: WAF :: fetched 15 new logs [29-05-2022 22:29:02]28939: WAF :: fetched 12 new logs [29-05-2022 22:30:01]32314: WAF :: fetched 8 new logs [29-05-2022 22:31:01]3409: WAF :: fetched 10 new logs [29-05-2022 22:32:02]6846: WAF :: fetched 3 new logs [29-05-2022 22:33:01]10351: WAF :: fetched 4 new logs [29-05-2022 22:34:02]13804: WAF :: fetched 4 new logs [29-05-2022 22:35:02]17172: WAF :: fetched 5 new logs [29-05-2022 22:36:01]20607: WAF :: fetched 10 new logs [29-05-2022 22:37:02]24005: WAF :: fetched 14 new logs [29-05-2022 22:38:01]27474: WAF :: fetched 10 new logs [29-05-2022 22:39:01]30907: WAF :: fetched 7 new logs [29-05-2022 22:40:02]1983: WAF :: fetched 1 new logs [29-05-2022 22:41:02]5441: WAF :: fetched 3 new logs [29-05-2022 22:41:02]5441: Checking for user cron vulnerabilities [29-05-2022 22:42:02]8807: WAF :: fetched 5 new logs [29-05-2022 22:43:01]12284: WAF :: fetched 4 new logs [29-05-2022 22:44:01]15688: Checking ditributed CMS bruteforce attacks [29-05-2022 22:44:02]15688: WAF :: fetched 13 new logs [29-05-2022 22:45:02]19010: WAF :: fetched 20 new logs [29-05-2022 22:46:01]22402: WAF :: fetched 38 new logs [29-05-2022 22:47:02]25817: WAF :: fetched 26 new logs [29-05-2022 22:48:01]29289: WAF :: fetched 12 new logs [29-05-2022 22:49:01]32666: WAF :: fetched 7 new logs [29-05-2022 22:50:02]3792: WAF :: fetched 12 new logs [29-05-2022 22:51:01]7198: WAF :: fetched 14 new logs [29-05-2022 22:52:01]10687: WAF :: fetched 9 new logs [29-05-2022 22:53:02]14189: WAF :: fetched 28 new logs [29-05-2022 22:54:01]17574: WAF :: fetched 27 new logs [29-05-2022 22:55:02]21045: WAF :: fetched 27 new logs [29-05-2022 22:56:02]24518: WAF :: fetched 15 new logs [29-05-2022 22:57:01]28038: httpd.conf changed. Refreshing watchlist. [29-05-2022 22:57:01]28039: WAF :: fetched 8 new logs [29-05-2022 22:58:01]31671: WAF :: fetched 11 new logs [29-05-2022 22:59:02]2864: WAF :: fetched 7 new logs [29-05-2022 23:00:01]6051: WAF :: fetched 6 new logs [29-05-2022 23:01:02]10082: WAF :: fetched 8 new logs [29-05-2022 23:02:01]13523: WAF :: fetched 5 new logs [29-05-2022 23:03:02]17174: WAF :: fetched 7 new logs [29-05-2022 23:04:01]20652: WAF :: fetched 2 new logs [29-05-2022 23:05:01]24108: WAF :: fetched 4 new logs [29-05-2022 23:06:01]27674: WAF :: fetched 3 new logs [29-05-2022 23:07:02]31213: WAF :: fetched 2 new logs [29-05-2022 23:08:02]2417: WAF :: fetched 8 new logs [29-05-2022 23:08:17]31373: Performed RBL check for 23.111.136.34. [29-05-2022 23:09:01]5886: WAF :: fetched 20 new logs [29-05-2022 23:10:02]9407: WAF :: fetched 18 new logs [29-05-2022 23:11:01]12974: WAF :: fetched 18 new logs [29-05-2022 23:12:02]16459: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653876722 [29-05-2022 23:12:02]16459: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-05-2022 23:12:04]16459: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-05-2022 23:12:04]16459: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220529/20220529-2312/20220529-231202-YpQn8q2aeeC7WnP0T0vYogAAABg [29-05-2022 23:12:04]16459: WAF :: No suitable log file found. Using SQLite.. [29-05-2022 23:12:04]16459: WAF :: fetched 10 new logs [29-05-2022 23:13:01]19845: WAF :: fetched 4 new logs [29-05-2022 23:14:02]23458: WAF :: fetched 7 new logs [29-05-2022 23:15:01]26943: WAF :: fetched 8 new logs [29-05-2022 23:16:01]30521: WAF :: fetched 12 new logs [29-05-2022 23:17:01]1615: WAF :: fetched 8 new logs [29-05-2022 23:18:02]5255: WAF :: fetched 5 new logs [29-05-2022 23:19:01]8730: WAF :: fetched 6 new logs [29-05-2022 23:20:02]12289: WAF :: fetched 6 new logs [29-05-2022 23:21:01]15843: WAF :: fetched 8 new logs [29-05-2022 23:22:02]19345: WAF :: fetched 15 new logs [29-05-2022 23:23:01]22815: WAF :: fetched 7 new logs [29-05-2022 23:24:02]26288: WAF :: fetched 10 new logs [29-05-2022 23:25:01]29723: WAF :: fetched 50 new logs [29-05-2022 23:26:02]778: WAF :: fetched 32 new logs [29-05-2022 23:27:02]4260: WAF :: fetched 48 new logs [29-05-2022 23:28:01]7753: WAF :: fetched 47 new logs [29-05-2022 23:29:02]11186: WAF :: fetched 42 new logs [29-05-2022 23:30:02]14547: WAF :: fetched 21 new logs [29-05-2022 23:31:01]18008: WAF :: fetched 17 new logs [29-05-2022 23:32:01]21447: WAF :: fetched 31 new logs [29-05-2022 23:33:02]24932: WAF :: fetched 38 new logs [29-05-2022 23:34:01]28276: WAF :: fetched 44 new logs [29-05-2022 23:35:02]31772: WAF :: fetched 37 new logs [29-05-2022 23:36:02]2887: WAF :: fetched 31 new logs [29-05-2022 23:37:01]6259: WAF :: fetched 37 new logs [29-05-2022 23:38:02]9782: WAF :: fetched 31 new logs [29-05-2022 23:39:01]13140: WAF :: fetched 45 new logs [29-05-2022 23:40:02]16555: WAF :: fetched 35 new logs [29-05-2022 23:41:02]20000: WAF :: fetched 29 new logs [29-05-2022 23:41:02]20000: Checking for user cron vulnerabilities [29-05-2022 23:42:02]23387: WAF :: fetched 33 new logs [29-05-2022 23:43:01]26838: WAF :: fetched 27 new logs [29-05-2022 23:44:01]30246: Checking ditributed CMS bruteforce attacks [29-05-2022 23:44:01]30246: WAF :: fetched 26 new logs [29-05-2022 23:45:02]1315: WAF :: fetched 32 new logs [29-05-2022 23:46:02]5144: WAF :: fetched 28 new logs [29-05-2022 23:47:01]8620: WAF :: fetched 26 new logs [29-05-2022 23:48:01]12241: WAF :: fetched 22 new logs [29-05-2022 23:49:02]15662: WAF :: fetched 25 new logs [29-05-2022 23:50:02]19174: WAF :: fetched 3 new logs [29-05-2022 23:51:02]22719: WAF :: fetched 3 new logs [29-05-2022 23:53:02]29785: WAF :: fetched 9 new logs [29-05-2022 23:54:02]863: WAF :: fetched 9 new logs [29-05-2022 23:54:02]866: httpd.conf changed. Refreshing watchlist. [29-05-2022 23:55:01]4377: WAF :: fetched 10 new logs [29-05-2022 23:56:02]7878: WAF :: fetched 12 new logs [29-05-2022 23:57:01]11333: WAF :: fetched 6 new logs [29-05-2022 23:58:02]14887: WAF :: fetched 5 new logs [29-05-2022 23:59:01]18324: WAF :: fetched 8 new logs [30-05-2022 00:00:02]21559: WAF :: fetched 5 new logs [30-05-2022 00:01:01]25670: WAF :: fetched 3 new logs [30-05-2022 00:01:01]25671: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:01:02]25670: Sending daily report for May 30, 2022 [30-05-2022 00:02:02]29329: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:02:02]29331: WAF :: fetched 2 new logs [30-05-2022 00:03:01]529: WAF :: fetched 4 new logs [30-05-2022 00:03:01]531: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:04:02]4327: WAF :: fetched 5 new logs [30-05-2022 00:04:02]4340: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:05:01]7849: WAF :: fetched 1 new logs [30-05-2022 00:05:01]7848: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:05:01]7849: Deleted 0 entries older than 6 MONTH from scanner_logs [30-05-2022 00:05:01]7849: Deleted 0 files from Quarantine [30-05-2022 00:06:02]11526: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:07:01]15106: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:07:01]15107: WAF :: fetched 5 new logs [30-05-2022 00:08:02]18694: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:08:02]18682: WAF :: fetched 1 new logs [30-05-2022 00:09:01]22304: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:09:01]22302: WAF :: fetched 1 new logs [30-05-2022 00:10:02]25901: WAF :: fetched 12 new logs [30-05-2022 00:10:02]25911: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:11:02]29461: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:11:02]29459: WAF :: fetched 21 new logs [30-05-2022 00:12:01]516: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:12:01]526: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653880321 [30-05-2022 00:12:01]526: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 00:12:03]526: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 00:12:04]526: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-0012/20220530-001201-YpQ2Abhl9AQf0Y_WE61EagAAAAI [30-05-2022 00:12:04]526: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 00:12:04]526: WAF :: fetched 11 new logs [30-05-2022 00:13:02]4188: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:13:02]4184: WAF :: fetched 11 new logs [30-05-2022 00:14:01]7777: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:14:02]7766: WAF :: fetched 16 new logs [30-05-2022 00:15:01]11269: WAF :: fetched 5 new logs [30-05-2022 00:15:01]11271: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:16:02]14894: WAF :: fetched 7 new logs [30-05-2022 00:16:02]14893: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:17:01]18359: WAF :: fetched 4 new logs [30-05-2022 00:17:01]18361: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:18:02]21901: WAF :: fetched 2 new logs [30-05-2022 00:18:02]21900: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:19:02]25428: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:19:02]25427: WAF :: fetched 2 new logs [30-05-2022 00:20:01]28957: WAF :: fetched 5 new logs [30-05-2022 00:20:01]28978: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:21:02]32577: WAF :: fetched 14 new logs [30-05-2022 00:21:02]32589: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:22:01]3763: WAF :: fetched 11 new logs [30-05-2022 00:22:01]3765: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:23:01]7247: WAF :: fetched 11 new logs [30-05-2022 00:23:01]7246: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:24:02]10870: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:24:02]10868: WAF :: fetched 4 new logs [30-05-2022 00:25:01]14332: WAF :: fetched 3 new logs [30-05-2022 00:25:01]14347: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:26:01]17891: WAF :: fetched 6 new logs [30-05-2022 00:26:01]17895: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:27:02]21375: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:27:02]21377: WAF :: fetched 5 new logs [30-05-2022 00:28:01]24809: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:28:01]24816: WAF :: fetched 8 new logs [30-05-2022 00:29:02]28448: WAF :: fetched 8 new logs [30-05-2022 00:29:02]28444: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:30:02]31991: WAF :: fetched 9 new logs [30-05-2022 00:30:02]32018: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:31:01]3266: WAF :: fetched 7 new logs [30-05-2022 00:31:01]3260: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:32:02]6775: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:32:02]6789: WAF :: fetched 7 new logs [30-05-2022 00:33:01]10285: WAF :: fetched 3 new logs [30-05-2022 00:33:01]10286: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:34:01]13879: WAF :: fetched 1 new logs [30-05-2022 00:34:01]13876: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:35:02]17390: WAF :: fetched 9 new logs [30-05-2022 00:35:02]17391: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:36:01]20901: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:36:01]20899: WAF :: fetched 10 new logs [30-05-2022 00:37:02]24453: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:37:02]24450: WAF :: fetched 16 new logs [30-05-2022 00:38:01]27920: WAF :: fetched 5 new logs [30-05-2022 00:38:01]27918: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:39:02]31537: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:39:02]31539: WAF :: fetched 2 new logs [30-05-2022 00:40:02]2685: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:41:01]6220: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:41:01]6221: WAF :: fetched 1 new logs [30-05-2022 00:41:01]6221: Checking for user cron vulnerabilities [30-05-2022 00:42:02]9737: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:42:02]9741: WAF :: fetched 4 new logs [30-05-2022 00:43:01]13217: httpd.conf changed. Refreshing watchlist. [30-05-2022 00:44:02]16751: Checking ditributed CMS bruteforce attacks [30-05-2022 00:44:02]16751: WAF :: fetched 1 new logs [30-05-2022 00:45:01]: Checking for software updates [30-05-2022 00:49:02]1329: WAF :: fetched 2 new logs [30-05-2022 00:51:02]8199: WAF :: fetched 3 new logs [30-05-2022 00:55:01]21773: WAF :: fetched 4 new logs [30-05-2022 00:56:01]25197: WAF :: fetched 4 new logs [30-05-2022 00:57:02]28598: WAF :: fetched 7 new logs [30-05-2022 00:58:02]31952: WAF :: fetched 4 new logs [30-05-2022 00:59:01]3061: WAF :: fetched 5 new logs [30-05-2022 01:00:02]6162: WAF :: fetched 6 new logs [30-05-2022 01:01:01]11061: WAF :: fetched 3 new logs [30-05-2022 01:02:02]14938: WAF :: fetched 7 new logs [30-05-2022 01:03:01]18713: WAF :: fetched 4 new logs [30-05-2022 01:04:02]22579: WAF :: fetched 11 new logs [30-05-2022 01:05:01]26103: WAF :: fetched 6 new logs [30-05-2022 01:08:01]4464: WAF :: fetched 4 new logs [30-05-2022 01:10:01]11832: WAF :: fetched 2 new logs [30-05-2022 01:11:01]15287: WAF :: fetched 3 new logs [30-05-2022 01:12:01]19062: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653883921 [30-05-2022 01:12:01]19062: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 01:12:03]19062: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 01:12:04]19062: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-0112/20220530-011201-YpREEem4F9d-FPt0PJ9GtQAAAA0 [30-05-2022 01:12:04]19062: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 01:12:04]19062: WAF :: fetched 7 new logs [30-05-2022 01:13:01]22843: WAF :: fetched 8 new logs [30-05-2022 01:14:02]26518: WAF :: fetched 13 new logs [30-05-2022 01:15:01]30282: WAF :: fetched 15 new logs [30-05-2022 01:16:02]1643: WAF :: fetched 9 new logs [30-05-2022 01:17:02]5300: WAF :: fetched 11 new logs [30-05-2022 01:18:01]9179: WAF :: fetched 3 new logs [30-05-2022 01:19:02]12912: WAF :: fetched 3 new logs [30-05-2022 01:22:02]23966: WAF :: fetched 1 new logs [30-05-2022 01:23:01]27559: WAF :: fetched 3 new logs [30-05-2022 01:27:02]10529: WAF :: fetched 1 new logs [30-05-2022 01:28:01]14215: WAF :: fetched 1 new logs [30-05-2022 01:29:02]17813: WAF :: fetched 1 new logs [30-05-2022 01:30:02]21866: WAF :: fetched 141 new logs [30-05-2022 01:31:01]25331: WAF :: fetched 4 new logs [30-05-2022 01:32:01]29114: WAF :: fetched 1 new logs [30-05-2022 01:33:02]32496: WAF :: fetched 3 new logs [30-05-2022 01:34:02]3640: WAF :: fetched 2 new logs [30-05-2022 01:35:01]7044: WAF :: fetched 1 new logs [30-05-2022 01:38:01]17582: WAF :: fetched 1 new logs [30-05-2022 01:40:01]24552: WAF :: fetched 3 new logs [30-05-2022 01:41:02]28014: Checking for user cron vulnerabilities [30-05-2022 01:44:01]5962: Checking ditributed CMS bruteforce attacks [30-05-2022 01:44:02]5962: WAF :: fetched 1 new logs [30-05-2022 01:45:01]: Checking for definition updates [30-05-2022 01:46:02]12773: WAF :: fetched 1 new logs [30-05-2022 01:49:02]23022: WAF :: fetched 1 new logs [30-05-2022 01:50:01]26393: WAF :: fetched 6 new logs [30-05-2022 01:51:02]29876: WAF :: fetched 10 new logs [30-05-2022 01:52:01]1481: WAF :: fetched 6 new logs [30-05-2022 01:53:02]5581: WAF :: fetched 3 new logs [30-05-2022 01:55:01]12590: WAF :: fetched 2 new logs [30-05-2022 01:56:02]16071: WAF :: fetched 1 new logs [30-05-2022 01:58:01]23436: WAF :: fetched 3 new logs [30-05-2022 01:59:02]27252: WAF :: fetched 4 new logs [30-05-2022 02:00:02]30940: WAF :: fetched 15 new logs [30-05-2022 02:01:02]2562: WAF :: fetched 9 new logs [30-05-2022 02:02:02]6167: WAF :: fetched 5 new logs [30-05-2022 02:03:01]9910: WAF :: fetched 1 new logs [30-05-2022 02:04:01]13567: WAF :: fetched 2 new logs [30-05-2022 02:05:01]16946: WAF :: fetched 3 new logs [30-05-2022 02:06:01]20396: WAF :: fetched 9 new logs [30-05-2022 02:07:02]23998: WAF :: fetched 7 new logs [30-05-2022 02:08:02]27811: WAF :: fetched 5 new logs [30-05-2022 02:10:02]2970: WAF :: fetched 2 new logs [30-05-2022 02:12:02]10392: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653887522 [30-05-2022 02:12:02]10392: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 02:12:04]10392: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 02:12:04]10392: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-0212/20220530-021202-YpRSIiE2e5YZYWhENQWidAAAABQ [30-05-2022 02:12:04]10392: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 02:12:04]10392: WAF :: fetched 2 new logs [30-05-2022 02:15:01]20616: WAF :: fetched 7 new logs [30-05-2022 02:16:02]24074: WAF :: fetched 2 new logs [30-05-2022 02:17:02]27399: WAF :: fetched 2 new logs [30-05-2022 02:18:01]30816: WAF :: fetched 6 new logs [30-05-2022 02:19:02]1943: WAF :: fetched 7 new logs [30-05-2022 02:20:01]5334: WAF :: fetched 2 new logs [30-05-2022 02:24:01]18900: WAF :: fetched 1 new logs [30-05-2022 02:29:01]3566: WAF :: fetched 4 new logs [30-05-2022 02:30:01]6909: WAF :: fetched 7 new logs [30-05-2022 02:31:02]10352: WAF :: fetched 8 new logs [30-05-2022 02:32:01]13704: WAF :: fetched 3 new logs [30-05-2022 02:33:02]17110: WAF :: fetched 1 new logs [30-05-2022 02:34:01]20568: WAF :: fetched 1 new logs [30-05-2022 02:39:02]5276: WAF :: fetched 1 new logs [30-05-2022 02:41:01]12116: Checking for user cron vulnerabilities [30-05-2022 02:43:02]18885: WAF :: fetched 3 new logs [30-05-2022 02:44:01]22326: Checking ditributed CMS bruteforce attacks [30-05-2022 02:48:01]3507: WAF :: fetched 1 new logs [30-05-2022 02:50:01]10303: WAF :: fetched 1 new logs [30-05-2022 02:51:02]13754: WAF :: fetched 3 new logs [30-05-2022 02:52:01]17096: WAF :: fetched 7 new logs [30-05-2022 02:53:02]20502: WAF :: fetched 5 new logs [30-05-2022 02:53:02]20495: Updated license status via CDN [30-05-2022 02:54:01]23929: WAF :: fetched 9 new logs [30-05-2022 02:55:01]27276: WAF :: fetched 6 new logs [30-05-2022 02:56:02]30718: WAF :: fetched 5 new logs [30-05-2022 02:57:01]1661: WAF :: fetched 8 new logs [30-05-2022 02:58:02]5117: WAF :: fetched 3 new logs [30-05-2022 03:00:02]11695: WAF :: fetched 2 new logs [30-05-2022 03:00:03]11695: Found and updated 30 CMS installations [30-05-2022 03:00:17]11695: CMS :: Wordpress version information file coudnt be downloaded [30-05-2022 03:02:02]19238: WAF :: fetched 2 new logs [30-05-2022 03:02:52]11695: Sending CMS version vulnerability report emails to cpanel users [30-05-2022 03:02:55]11695: Checking wordpress installations for suspicious directories [30-05-2022 03:03:01]22958: WAF :: fetched 2 new logs [30-05-2022 03:04:16]22998: Sending CMS version vulnerability report emails to cpanel users [30-05-2022 03:04:19]22998: Checking wordpress installations for suspicious directories [30-05-2022 03:06:02]1382: WAF :: fetched 1 new logs [30-05-2022 03:07:02]4749: WAF :: fetched 1 new logs [30-05-2022 03:08:01]8099: WAF :: fetched 3 new logs [30-05-2022 03:09:02]11606: WAF :: fetched 1 new logs [30-05-2022 03:12:02]21818: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653891122 [30-05-2022 03:12:02]21818: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 03:12:04]21818: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 03:12:04]21818: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-0312/20220530-031202-YpRgMpS3lidHSalhBAs42QAAAA4 [30-05-2022 03:12:04]21818: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 03:12:04]21818: WAF :: fetched 1 new logs [30-05-2022 03:13:02]25148: WAF :: fetched 2 new logs [30-05-2022 03:14:01]28611: WAF :: fetched 1 new logs [30-05-2022 03:16:01]3088: WAF :: fetched 4 new logs [30-05-2022 03:17:02]6482: WAF :: fetched 7 new logs [30-05-2022 03:18:02]9825: WAF :: fetched 10 new logs [30-05-2022 03:19:01]13255: WAF :: fetched 6 new logs [30-05-2022 03:20:02]16684: WAF :: fetched 5 new logs [30-05-2022 03:21:02]20179: WAF :: fetched 1 new logs [30-05-2022 03:22:01]20688: WAF :: fetched 1 new logs [30-05-2022 03:23:02]4519: WAF :: fetched 4 new logs [30-05-2022 03:24:01]22653: WAF :: fetched 1 new logs [30-05-2022 03:25:01]3424: WAF :: fetched 2 new logs [30-05-2022 03:26:02]6856: WAF :: fetched 8 new logs [30-05-2022 03:27:01]10211: WAF :: fetched 13 new logs [30-05-2022 03:28:02]13627: WAF :: fetched 55 new logs [30-05-2022 03:29:01]17072: WAF :: fetched 41 new logs [30-05-2022 03:30:02]20500: WAF :: fetched 38 new logs [30-05-2022 03:31:01]23892: WAF :: fetched 60 new logs [30-05-2022 03:35:02]5340: WAF :: fetched 5 new logs [30-05-2022 03:36:02]8745: WAF :: fetched 11 new logs [30-05-2022 03:37:02]12133: WAF :: fetched 5 new logs [30-05-2022 03:38:02]15455: WAF :: fetched 6 new logs [30-05-2022 03:39:01]18896: WAF :: fetched 1 new logs [30-05-2022 03:41:01]25690: WAF :: fetched 1 new logs [30-05-2022 03:41:01]25690: Checking for user cron vulnerabilities [30-05-2022 03:44:01]3572: Checking ditributed CMS bruteforce attacks [30-05-2022 03:45:02]6973: WAF :: fetched 1 new logs [30-05-2022 03:48:02]17115: WAF :: fetched 2 new logs [30-05-2022 03:50:02]24001: WAF :: fetched 4 new logs [30-05-2022 03:51:01]27403: WAF :: fetched 1 new logs [30-05-2022 03:52:02]30836: WAF :: fetched 5 new logs [30-05-2022 03:53:01]1840: WAF :: fetched 4 new logs [30-05-2022 03:55:01]8694: WAF :: fetched 2 new logs [30-05-2022 03:57:02]15556: WAF :: fetched 6 new logs [30-05-2022 03:58:01]18926: WAF :: fetched 2 new logs [30-05-2022 03:59:02]22438: WAF :: fetched 7 new logs [30-05-2022 04:00:02]25495: WAF :: fetched 3 new logs [30-05-2022 04:01:01]29408: WAF :: fetched 5 new logs [30-05-2022 04:02:02]372: WAF :: fetched 8 new logs [30-05-2022 04:03:01]3880: WAF :: fetched 9 new logs [30-05-2022 04:04:02]7378: WAF :: fetched 9 new logs [30-05-2022 04:05:01]10740: WAF :: fetched 5 new logs [30-05-2022 04:06:02]14176: WAF :: fetched 2 new logs [30-05-2022 04:07:02]17551: WAF :: fetched 2 new logs [30-05-2022 04:08:01]20934: WAF :: fetched 9 new logs [30-05-2022 04:09:02]24427: WAF :: fetched 11 new logs [30-05-2022 04:10:01]27808: WAF :: fetched 17 new logs [30-05-2022 04:11:01]31255: WAF :: fetched 3 new logs [30-05-2022 04:12:02]2299: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653894722 [30-05-2022 04:12:02]2299: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 04:12:04]2299: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 04:12:04]2299: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-0412/20220530-041202-YpRuQjeN_9JEF4jSt_clawAAACQ [30-05-2022 04:12:04]2299: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 04:13:01]5695: WAF :: fetched 1 new logs [30-05-2022 04:15:02]12570: WAF :: fetched 1 new logs [30-05-2022 04:16:02]15956: WAF :: fetched 1 new logs [30-05-2022 04:20:01]29540: WAF :: fetched 1 new logs [30-05-2022 04:22:01]4053: WAF :: fetched 1 new logs [30-05-2022 04:23:02]7436: WAF :: fetched 4 new logs [30-05-2022 04:24:01]10893: WAF :: fetched 1 new logs [30-05-2022 04:25:02]14334: WAF :: fetched 1 new logs [30-05-2022 04:26:02]17696: WAF :: fetched 3 new logs [30-05-2022 04:27:01]21065: WAF :: fetched 2 new logs [30-05-2022 04:30:01]31279: WAF :: fetched 1 new logs [30-05-2022 04:31:02]2377: WAF :: fetched 9 new logs [30-05-2022 04:32:01]5756: WAF :: fetched 11 new logs [30-05-2022 04:33:01]9136: WAF :: fetched 3 new logs [30-05-2022 04:34:02]12604: WAF :: fetched 1 new logs [30-05-2022 04:36:02]19390: WAF :: fetched 2 new logs [30-05-2022 04:37:01]22741: WAF :: fetched 13 new logs [30-05-2022 04:38:01]26058: WAF :: fetched 11 new logs [30-05-2022 04:39:02]29568: WAF :: fetched 3 new logs [30-05-2022 04:41:02]4094: Checking for user cron vulnerabilities [30-05-2022 04:44:02]14272: Checking ditributed CMS bruteforce attacks [30-05-2022 04:45:01]17619: WAF :: fetched 1 new logs [30-05-2022 04:53:02]12444: WAF :: fetched 1 new logs [30-05-2022 04:54:01]15842: WAF :: fetched 3 new logs [30-05-2022 04:55:01]19227: WAF :: fetched 12 new logs [30-05-2022 04:56:02]22644: WAF :: fetched 6 new logs [30-05-2022 05:00:01]3582: WAF :: fetched 1 new logs [30-05-2022 05:01:42]7427: Starting daily scan on files updated in last 24 hrs [30-05-2022 05:02:02]10785: WAF :: fetched 2 new logs [30-05-2022 05:03:01]14165: WAF :: fetched 3 new logs [30-05-2022 05:04:02]17594: WAF :: fetched 2 new logs [30-05-2022 05:06:01]24385: WAF :: fetched 1 new logs [30-05-2022 05:10:02]5608: WAF :: fetched 1 new logs [30-05-2022 05:11:01]8988: WAF :: fetched 7 new logs [30-05-2022 05:12:02]12391: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653898322 [30-05-2022 05:12:02]12391: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 05:12:04]12391: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 05:12:04]12391: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-0512/20220530-051202-YpR8UjY9CejQNPPRbQEbdAAAABM [30-05-2022 05:12:04]12391: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 05:12:04]12391: WAF :: fetched 21 new logs [30-05-2022 05:13:01]15745: WAF :: fetched 5 new logs [30-05-2022 05:14:02]19137: WAF :: fetched 1 new logs [30-05-2022 05:15:02]22596: WAF :: fetched 4 new logs [30-05-2022 05:16:02]26029: WAF :: fetched 2 new logs [30-05-2022 05:18:01]32718: WAF :: fetched 1 new logs [30-05-2022 05:19:02]3797: WAF :: fetched 1 new logs [30-05-2022 05:22:02]14011: WAF :: fetched 5 new logs [30-05-2022 05:23:01]17357: WAF :: fetched 1 new logs [30-05-2022 05:29:02]5477: WAF :: fetched 1 new logs [30-05-2022 05:34:01]22449: WAF :: fetched 4 new logs [30-05-2022 05:36:01]29341: WAF :: fetched 1 new logs [30-05-2022 05:40:02]10685: WAF :: fetched 5 new logs [30-05-2022 05:41:02]14073: WAF :: fetched 1 new logs [30-05-2022 05:41:02]14073: Checking for user cron vulnerabilities [30-05-2022 05:42:01]17435: WAF :: fetched 1 new logs [30-05-2022 05:44:01]24170: Checking ditributed CMS bruteforce attacks [30-05-2022 05:47:02]2104: WAF :: fetched 1 new logs [30-05-2022 05:52:01]19037: WAF :: fetched 1 new logs [30-05-2022 05:53:02]22439: WAF :: fetched 14 new logs [30-05-2022 05:54:02]25771: WAF :: fetched 7 new logs [30-05-2022 05:55:02]29228: WAF :: fetched 2 new logs [30-05-2022 05:59:02]10384: WAF :: fetched 1 new logs [30-05-2022 06:00:02]13546: WAF :: fetched 2 new logs [30-05-2022 06:01:01]17436: WAF :: fetched 3 new logs [30-05-2022 06:02:02]20856: WAF :: fetched 13 new logs [30-05-2022 06:03:01]24177: WAF :: fetched 1 new logs [30-05-2022 06:07:02]5489: WAF :: fetched 2 new logs [30-05-2022 06:08:01]8818: WAF :: fetched 1 new logs [30-05-2022 06:11:01]19016: WAF :: fetched 11 new logs [30-05-2022 06:12:02]22431: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653901922 [30-05-2022 06:12:02]22431: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 06:12:04]22431: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 06:12:04]22431: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-0612/20220530-061202-YpSKYk_0u5rgBNPKRDusggAAAA0 [30-05-2022 06:12:04]22431: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 06:12:04]22431: WAF :: fetched 19 new logs [30-05-2022 06:13:01]25785: WAF :: fetched 1 new logs [30-05-2022 06:16:02]3820: WAF :: fetched 1 new logs [30-05-2022 06:17:01]7160: WAF :: fetched 1 new logs [30-05-2022 06:19:02]13930: WAF :: fetched 3 new logs [30-05-2022 06:20:01]17372: WAF :: fetched 5 new logs [30-05-2022 06:21:01]20908: WAF :: fetched 3 new logs [30-05-2022 06:22:02]24314: WAF :: fetched 4 new logs [30-05-2022 06:23:01]27647: WAF :: fetched 2 new logs [30-05-2022 06:24:02]31087: WAF :: fetched 2 new logs [30-05-2022 06:25:02]2205: WAF :: fetched 25 new logs [30-05-2022 06:26:01]5646: WAF :: fetched 28 new logs [30-05-2022 06:27:02]9147: WAF :: fetched 6 new logs [30-05-2022 06:28:02]12476: WAF :: fetched 3 new logs [30-05-2022 06:29:01]15865: WAF :: fetched 4 new logs [30-05-2022 06:30:01]19318: WAF :: fetched 11 new logs [30-05-2022 06:31:02]22795: WAF :: fetched 10 new logs [30-05-2022 06:32:01]26143: WAF :: fetched 5 new logs [30-05-2022 06:33:01]29519: WAF :: fetched 1 new logs [30-05-2022 06:35:01]4043: WAF :: fetched 6 new logs [30-05-2022 06:37:01]10819: WAF :: fetched 14 new logs [30-05-2022 06:38:02]14220: WAF :: fetched 15 new logs [30-05-2022 06:39:01]17560: WAF :: fetched 2 new logs [30-05-2022 06:40:02]21056: WAF :: fetched 1 new logs [30-05-2022 06:41:02]24433: WAF :: fetched 3 new logs [30-05-2022 06:41:02]24433: Checking for user cron vulnerabilities [30-05-2022 06:42:01]27778: WAF :: fetched 1 new logs [30-05-2022 06:43:02]31215: WAF :: fetched 2 new logs [30-05-2022 06:44:01]2204: Checking ditributed CMS bruteforce attacks [30-05-2022 06:44:01]2204: WAF :: fetched 2 new logs [30-05-2022 06:45:02]5725: WAF :: fetched 1 new logs [30-05-2022 06:46:02]9102: WAF :: fetched 2 new logs [30-05-2022 06:48:02]15870: WAF :: fetched 7 new logs [30-05-2022 06:49:01]19209: WAF :: fetched 9 new logs [30-05-2022 06:50:02]22735: WAF :: fetched 111 new logs [30-05-2022 06:51:02]26151: WAF :: fetched 198 new logs [30-05-2022 06:52:01]29516: WAF :: fetched 220 new logs [30-05-2022 06:53:02]490: WAF :: fetched 108 new logs [30-05-2022 06:54:01]3938: WAF :: fetched 83 new logs [30-05-2022 06:55:01]7372: WAF :: fetched 1 new logs [30-05-2022 06:59:01]20947: WAF :: fetched 1 new logs [30-05-2022 07:00:01]24099: WAF :: fetched 1 new logs [30-05-2022 07:02:01]31420: WAF :: fetched 1 new logs [30-05-2022 07:03:01]2435: WAF :: fetched 14 new logs [30-05-2022 07:04:02]5861: WAF :: fetched 12 new logs [30-05-2022 07:06:02]12737: WAF :: fetched 1 new logs [30-05-2022 07:07:02]16116: WAF :: fetched 52 new logs [30-05-2022 07:08:02]19448: WAF :: fetched 24 new logs [30-05-2022 07:12:02]702: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653905522 [30-05-2022 07:12:02]702: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 07:12:04]702: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 07:12:04]702: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-0712/20220530-071202-YpSYcsGeDdSDIyP_wibhqgAAAAE [30-05-2022 07:12:04]702: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 07:12:04]702: WAF :: fetched 1 new logs [30-05-2022 07:13:01]4129: WAF :: fetched 1 new logs [30-05-2022 07:14:02]7513: WAF :: fetched 8 new logs [30-05-2022 07:18:02]21048: WAF :: fetched 1 new logs [30-05-2022 07:21:02]31232: WAF :: fetched 25 new logs [30-05-2022 07:23:01]5172: WAF :: fetched 1 new logs [30-05-2022 07:24:02]8909: WAF :: fetched 1 new logs [30-05-2022 07:26:02]15740: WAF :: fetched 1 new logs [30-05-2022 07:28:02]22428: WAF :: fetched 1 new logs [30-05-2022 07:29:01]25714: WAF :: fetched 19 new logs [30-05-2022 07:30:01]29167: WAF :: fetched 7 new logs [30-05-2022 07:32:01]3581: WAF :: fetched 31 new logs [30-05-2022 07:34:01]10238: WAF :: fetched 2 new logs [30-05-2022 07:36:02]17063: WAF :: fetched 11 new logs [30-05-2022 07:37:01]20427: WAF :: fetched 9 new logs [30-05-2022 07:38:02]23830: WAF :: fetched 5 new logs [30-05-2022 07:39:01]27152: WAF :: fetched 19 new logs [30-05-2022 07:41:01]1698: Checking for user cron vulnerabilities [30-05-2022 07:42:01]5048: WAF :: fetched 2 new logs [30-05-2022 07:43:02]8424: WAF :: fetched 1 new logs [30-05-2022 07:44:01]11757: Checking ditributed CMS bruteforce attacks [30-05-2022 07:45:02]: Checking for definition updates [30-05-2022 07:45:02]15264: WAF :: fetched 1 new logs [30-05-2022 07:46:01]18651: WAF :: fetched 13 new logs [30-05-2022 07:47:01]21990: WAF :: fetched 6 new logs [30-05-2022 07:49:01]28692: WAF :: fetched 28 new logs [30-05-2022 07:50:02]32182: WAF :: fetched 29 new logs [30-05-2022 07:53:02]9913: WAF :: fetched 23 new logs [30-05-2022 07:54:02]13254: WAF :: fetched 2 new logs [30-05-2022 07:55:02]16647: WAF :: fetched 3 new logs [30-05-2022 07:56:01]20042: WAF :: fetched 3 new logs [30-05-2022 07:57:02]23427: WAF :: fetched 1 new logs [30-05-2022 08:01:01]4862: WAF :: fetched 2 new logs [30-05-2022 08:02:02]8299: WAF :: fetched 4 new logs [30-05-2022 08:03:02]11596: WAF :: fetched 1 new logs [30-05-2022 08:04:01]15012: WAF :: fetched 1 new logs [30-05-2022 08:06:02]21939: WAF :: fetched 1 new logs [30-05-2022 08:07:01]25298: WAF :: fetched 18 new logs [30-05-2022 08:08:01]28677: WAF :: fetched 22 new logs [30-05-2022 08:09:02]32076: WAF :: fetched 1 new logs [30-05-2022 08:10:02]3246: WAF :: fetched 20 new logs [30-05-2022 08:11:01]6654: WAF :: fetched 1 new logs [30-05-2022 08:12:02]10042: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653909122 [30-05-2022 08:12:02]10042: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 08:12:04]10042: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 08:12:04]10042: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-0812/20220530-081202-YpSmgrFibYLLp0wKz05WzgAAAAY [30-05-2022 08:12:04]10042: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 08:12:04]10042: WAF :: fetched 4 new logs [30-05-2022 08:17:01]26818: WAF :: fetched 3 new logs [30-05-2022 08:22:01]11082: WAF :: fetched 1 new logs [30-05-2022 08:23:02]14369: WAF :: fetched 21 new logs [30-05-2022 08:24:01]17652: WAF :: fetched 8 new logs [30-05-2022 08:25:02]21041: WAF :: fetched 20 new logs [30-05-2022 08:26:02]24341: WAF :: fetched 12 new logs [30-05-2022 08:30:02]5219: WAF :: fetched 4 new logs [30-05-2022 08:37:02]28997: WAF :: fetched 2 new logs [30-05-2022 08:41:02]10363: WAF :: fetched 2 new logs [30-05-2022 08:41:02]10363: Checking for user cron vulnerabilities [30-05-2022 08:42:01]13705: WAF :: fetched 1 new logs [30-05-2022 08:43:02]17075: WAF :: fetched 1 new logs [30-05-2022 08:44:01]20433: Checking ditributed CMS bruteforce attacks [30-05-2022 08:45:02]23989: WAF :: fetched 5 new logs [30-05-2022 08:47:02]30741: WAF :: fetched 1 new logs [30-05-2022 08:50:02]8684: WAF :: fetched 2 new logs [30-05-2022 08:51:01]12127: WAF :: fetched 3 new logs [30-05-2022 08:52:02]15557: WAF :: fetched 3 new logs [30-05-2022 08:53:01]18911: WAF :: fetched 1 new logs [30-05-2022 08:54:01]22360: WAF :: fetched 1 new logs [30-05-2022 08:56:01]29283: WAF :: fetched 2 new logs [30-05-2022 08:57:02]32710: WAF :: fetched 1 new logs [30-05-2022 09:04:02]24494: WAF :: fetched 1 new logs [30-05-2022 09:05:01]28042: WAF :: fetched 1 new logs [30-05-2022 09:06:01]31595: WAF :: fetched 2 new logs [30-05-2022 09:07:02]2698: WAF :: fetched 1 new logs [30-05-2022 09:08:02]6093: WAF :: fetched 4 new logs [30-05-2022 09:11:01]16519: WAF :: fetched 5 new logs [30-05-2022 09:12:01]19956: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653912721 [30-05-2022 09:12:01]19956: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 09:12:03]19956: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 09:12:03]19956: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-0912/20220530-091201-YpS0kViN4LYXwb7BoKjiCAAAAAE [30-05-2022 09:12:03]19956: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 09:12:04]19956: WAF :: fetched 4 new logs [30-05-2022 09:13:02]23452: WAF :: fetched 4 new logs [30-05-2022 09:14:01]26862: WAF :: fetched 1 new logs [30-05-2022 09:15:02]30424: WAF :: fetched 2 new logs [30-05-2022 09:16:02]1552: WAF :: fetched 1 new logs [30-05-2022 09:17:01]4960: WAF :: fetched 5 new logs [30-05-2022 09:18:02]8542: WAF :: fetched 4 new logs [30-05-2022 09:18:02]8545: httpd.conf changed. Refreshing watchlist. [30-05-2022 09:19:01]11797: WAF :: fetched 2 new logs [30-05-2022 09:20:02]15460: WAF :: fetched 1 new logs [30-05-2022 09:21:02]18890: WAF :: fetched 2 new logs [30-05-2022 09:22:01]22271: WAF :: fetched 1 new logs [30-05-2022 09:23:02]25734: WAF :: fetched 3 new logs [30-05-2022 09:24:01]29172: WAF :: fetched 3 new logs [30-05-2022 09:25:02]32765: WAF :: fetched 1 new logs [30-05-2022 09:26:01]3853: WAF :: fetched 1 new logs [30-05-2022 09:28:01]10628: WAF :: fetched 1 new logs [30-05-2022 09:30:01]17572: WAF :: fetched 1 new logs [30-05-2022 09:31:01]21016: WAF :: fetched 3 new logs [30-05-2022 09:32:02]24727: WAF :: fetched 2 new logs [30-05-2022 09:33:02]28099: WAF :: fetched 2 new logs [30-05-2022 09:36:02]6417: WAF :: fetched 1 new logs [30-05-2022 09:37:01]9852: WAF :: fetched 5 new logs [30-05-2022 09:38:01]13249: WAF :: fetched 2 new logs [30-05-2022 09:39:02]16720: WAF :: fetched 1 new logs [30-05-2022 09:41:01]23664: WAF :: fetched 1 new logs [30-05-2022 09:41:01]23664: Checking for user cron vulnerabilities [30-05-2022 09:42:02]27090: WAF :: fetched 2 new logs [30-05-2022 09:43:01]30473: WAF :: fetched 2 new logs [30-05-2022 09:44:02]1537: Checking ditributed CMS bruteforce attacks [30-05-2022 09:44:02]1537: WAF :: fetched 1 new logs [30-05-2022 09:48:01]15268: WAF :: fetched 2 new logs [30-05-2022 09:49:01]18670: WAF :: fetched 1 new logs [30-05-2022 09:50:02]22266: WAF :: fetched 1 new logs [30-05-2022 09:51:01]25804: WAF :: fetched 2 new logs [30-05-2022 09:52:02]29320: WAF :: fetched 3 new logs [30-05-2022 09:53:02]815: WAF :: fetched 1 new logs [30-05-2022 09:55:02]8029: WAF :: fetched 1 new logs [30-05-2022 09:57:02]15680: WAF :: fetched 1 new logs [30-05-2022 10:02:02]1067: WAF :: fetched 1 new logs [30-05-2022 10:10:02]29168: WAF :: fetched 1 new logs [30-05-2022 10:12:01]3834: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653916321 [30-05-2022 10:12:01]3834: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 10:12:03]3834: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 10:12:03]3834: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-1012/20220530-101201-YpTCobOQZ1B15Bd8wIc_TwAAAA0 [30-05-2022 10:12:03]3834: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 10:13:02]7261: WAF :: fetched 2 new logs [30-05-2022 10:14:01]10675: WAF :: fetched 2 new logs [30-05-2022 10:15:02]14088: WAF :: fetched 2 new logs [30-05-2022 10:17:01]21002: WAF :: fetched 1 new logs [30-05-2022 10:20:02]31279: WAF :: fetched 1 new logs [30-05-2022 10:21:02]2468: WAF :: fetched 1 new logs [30-05-2022 10:23:01]9302: WAF :: fetched 1 new logs [30-05-2022 10:24:02]12749: WAF :: fetched 2 new logs [30-05-2022 10:25:01]16118: WAF :: fetched 1 new logs [30-05-2022 10:26:02]19707: WAF :: fetched 5 new logs [30-05-2022 10:27:01]23091: WAF :: fetched 2 new logs [30-05-2022 10:33:02]11782: WAF :: fetched 2 new logs [30-05-2022 10:34:01]15185: WAF :: fetched 4 new logs [30-05-2022 10:35:02]18666: WAF :: fetched 2 new logs [30-05-2022 10:36:01]22322: WAF :: fetched 3 new logs [30-05-2022 10:38:02]29430: WAF :: fetched 2 new logs [30-05-2022 10:39:01]484: WAF :: fetched 4 new logs [30-05-2022 10:41:01]7704: WAF :: fetched 2 new logs [30-05-2022 10:41:01]7704: Checking for user cron vulnerabilities [30-05-2022 10:42:01]11149: WAF :: fetched 2 new logs [30-05-2022 10:43:02]14685: WAF :: fetched 3 new logs [30-05-2022 10:44:01]18088: Checking ditributed CMS bruteforce attacks [30-05-2022 10:44:01]18088: WAF :: fetched 1 new logs [30-05-2022 10:45:02]21524: WAF :: fetched 2 new logs [30-05-2022 10:46:01]25268: WAF :: fetched 3 new logs [30-05-2022 10:47:01]28708: WAF :: fetched 2 new logs [30-05-2022 10:48:02]32240: WAF :: fetched 3 new logs [30-05-2022 10:49:01]3299: WAF :: fetched 4 new logs [30-05-2022 10:50:02]6792: WAF :: fetched 7 new logs [30-05-2022 10:52:02]13940: WAF :: fetched 7 new logs [30-05-2022 10:53:01]17532: WAF :: fetched 14 new logs [30-05-2022 10:54:01]21052: WAF :: fetched 7 new logs [30-05-2022 10:55:02]24452: WAF :: fetched 1 new logs [30-05-2022 10:56:01]27939: WAF :: fetched 2 new logs [30-05-2022 10:57:02]31527: WAF :: fetched 2 new logs [30-05-2022 10:58:02]2592: WAF :: fetched 1 new logs [30-05-2022 10:59:01]5982: WAF :: fetched 2 new logs [30-05-2022 11:00:02]9168: WAF :: fetched 3 new logs [30-05-2022 11:01:02]13146: WAF :: fetched 4 new logs [30-05-2022 11:03:02]20221: WAF :: fetched 1 new logs [30-05-2022 11:06:01]30711: WAF :: fetched 3 new logs [30-05-2022 11:07:55]1952: Performed RBL check for 23.111.136.34. [30-05-2022 11:08:01]5239: WAF :: fetched 4 new logs [30-05-2022 11:09:02]8700: WAF :: fetched 6 new logs [30-05-2022 11:11:01]15801: WAF :: fetched 6 new logs [30-05-2022 11:12:02]19240: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653919922 [30-05-2022 11:12:02]19240: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 11:12:04]19240: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 11:12:04]19240: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-1112/20220530-111202-YpTQsv5BLEEYrz0UTbrMcQAAAEg [30-05-2022 11:12:04]19240: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 11:12:04]19240: WAF :: fetched 1 new logs [30-05-2022 11:14:01]26037: WAF :: fetched 1 new logs [30-05-2022 11:15:02]29619: WAF :: fetched 3 new logs [30-05-2022 11:16:02]984: WAF :: fetched 3 new logs [30-05-2022 11:16:02]980: httpd.conf changed. Refreshing watchlist. [30-05-2022 11:17:01]4508: WAF :: fetched 4 new logs [30-05-2022 11:18:02]8019: WAF :: fetched 3 new logs [30-05-2022 11:19:02]11390: WAF :: fetched 1 new logs [30-05-2022 11:20:01]14806: WAF :: fetched 5 new logs [30-05-2022 11:24:01]28867: WAF :: fetched 2 new logs [30-05-2022 11:25:01]32356: WAF :: fetched 1 new logs [30-05-2022 11:26:02]3734: WAF :: fetched 3 new logs [30-05-2022 11:28:02]10538: WAF :: fetched 1 new logs [30-05-2022 11:30:02]17449: WAF :: fetched 1 new logs [30-05-2022 11:30:02]17442: httpd.conf changed. Refreshing watchlist. [30-05-2022 11:32:02]24762: WAF :: fetched 2 new logs [30-05-2022 11:33:02]28275: WAF :: fetched 1 new logs [30-05-2022 11:34:02]31902: httpd.conf changed. Refreshing watchlist. [30-05-2022 11:34:02]31895: WAF :: fetched 1 new logs [30-05-2022 11:35:01]3012: WAF :: fetched 1 new logs [30-05-2022 11:36:02]6686: WAF :: fetched 1 new logs [30-05-2022 11:39:02]17087: WAF :: fetched 1 new logs [30-05-2022 11:40:01]20645: WAF :: fetched 1 new logs [30-05-2022 11:41:02]24462: WAF :: fetched 3 new logs [30-05-2022 11:41:02]24462: Checking for user cron vulnerabilities [30-05-2022 11:42:01]27992: WAF :: fetched 1 new logs [30-05-2022 11:44:01]2761: Checking ditributed CMS bruteforce attacks [30-05-2022 11:45:01]6208: WAF :: fetched 1 new logs [30-05-2022 11:46:02]9885: WAF :: fetched 1 new logs [30-05-2022 11:47:01]13543: WAF :: fetched 1 new logs [30-05-2022 11:48:01]17077: WAF :: fetched 3 new logs [30-05-2022 11:49:01]20524: WAF :: fetched 1 new logs [30-05-2022 11:52:02]31265: WAF :: fetched 2 new logs [30-05-2022 11:53:01]2381: WAF :: fetched 8 new logs [30-05-2022 11:54:01]5778: WAF :: fetched 3 new logs [30-05-2022 11:56:01]13036: WAF :: fetched 1 new logs [30-05-2022 11:58:01]21223: WAF :: fetched 1 new logs [30-05-2022 11:59:02]24672: WAF :: fetched 1 new logs [30-05-2022 12:00:02]27947: WAF :: fetched 1 new logs [30-05-2022 12:02:01]3199: WAF :: fetched 1 new logs [30-05-2022 12:03:02]6668: WAF :: fetched 2 new logs [30-05-2022 12:04:02]10160: WAF :: fetched 56 new logs [30-05-2022 12:05:01]13721: WAF :: fetched 28 new logs [30-05-2022 12:06:02]17508: WAF :: fetched 8 new logs [30-05-2022 12:07:02]20949: WAF :: fetched 15 new logs [30-05-2022 12:08:01]24382: WAF :: fetched 7 new logs [30-05-2022 12:09:02]27906: WAF :: fetched 10 new logs [30-05-2022 12:11:02]2655: WAF :: fetched 38 new logs [30-05-2022 12:12:01]6181: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653923521 [30-05-2022 12:12:01]6181: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 12:12:03]6181: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 12:12:04]6181: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-1212/20220530-121201-YpTewaV8cHOSM-nQxswnWQAAABc [30-05-2022 12:12:04]6181: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 12:12:04]6181: WAF :: fetched 9 new logs [30-05-2022 12:13:02]10202: WAF :: fetched 3 new logs [30-05-2022 12:16:02]21929: WAF :: fetched 2 new logs [30-05-2022 12:17:02]25536: WAF :: fetched 2 new logs [30-05-2022 12:18:01]29303: WAF :: fetched 1 new logs [30-05-2022 12:19:01]470: WAF :: fetched 3 new logs [30-05-2022 12:20:02]4188: WAF :: fetched 4 new logs [30-05-2022 12:21:01]7928: WAF :: fetched 1 new logs [30-05-2022 12:22:01]11644: WAF :: fetched 1 new logs [30-05-2022 12:23:02]15285: WAF :: fetched 1 new logs [30-05-2022 12:27:01]29943: WAF :: fetched 37 new logs [30-05-2022 12:28:02]1022: WAF :: fetched 63 new logs [30-05-2022 12:29:01]4486: WAF :: fetched 70 new logs [30-05-2022 12:30:02]7998: WAF :: fetched 34 new logs [30-05-2022 12:31:02]11646: WAF :: fetched 60 new logs [30-05-2022 12:32:01]15215: WAF :: fetched 54 new logs [30-05-2022 12:33:02]18760: WAF :: fetched 55 new logs [30-05-2022 12:34:02]22212: WAF :: fetched 65 new logs [30-05-2022 12:35:02]25732: WAF :: fetched 38 new logs [30-05-2022 12:36:02]29545: WAF :: fetched 63 new logs [30-05-2022 12:37:01]582: WAF :: fetched 58 new logs [30-05-2022 12:38:02]4185: WAF :: fetched 42 new logs [30-05-2022 12:39:02]7710: WAF :: fetched 23 new logs [30-05-2022 12:41:02]15187: Checking for user cron vulnerabilities [30-05-2022 12:44:01]26091: Checking ditributed CMS bruteforce attacks [30-05-2022 12:44:01]26091: WAF :: fetched 1 new logs [30-05-2022 12:45:02]: Checking for software updates [30-05-2022 12:45:02]29776: WAF :: fetched 5 new logs [30-05-2022 12:46:02]1191: WAF :: fetched 10 new logs [30-05-2022 12:47:01]4969: WAF :: fetched 9 new logs [30-05-2022 12:48:01]8618: WAF :: fetched 2 new logs [30-05-2022 12:49:02]12252: WAF :: fetched 6 new logs [30-05-2022 12:50:02]15859: WAF :: fetched 27 new logs [30-05-2022 12:52:02]23276: WAF :: fetched 9 new logs [30-05-2022 12:54:02]30257: WAF :: fetched 1 new logs [30-05-2022 12:55:01]1326: WAF :: fetched 3 new logs [30-05-2022 12:56:01]5044: WAF :: fetched 2 new logs [30-05-2022 13:00:02]18823: httpd.conf changed. Refreshing watchlist. [30-05-2022 13:01:01]22993: WAF :: fetched 2 new logs [30-05-2022 13:02:02]26513: WAF :: fetched 1 new logs [30-05-2022 13:03:02]30382: WAF :: fetched 2 new logs [30-05-2022 13:06:02]8787: WAF :: fetched 3 new logs [30-05-2022 13:07:01]12449: WAF :: fetched 6 new logs [30-05-2022 13:09:01]19557: WAF :: fetched 1 new logs [30-05-2022 13:10:02]23105: WAF :: fetched 2 new logs [30-05-2022 13:11:01]26765: WAF :: fetched 4 new logs [30-05-2022 13:12:01]30325: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653927121 [30-05-2022 13:12:01]30325: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 13:12:03]30325: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 13:12:03]30325: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-1312/20220530-131201-YpTs0cxD-3yXPXeglLbc4AAAAB8 [30-05-2022 13:12:03]30325: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 13:12:04]30325: WAF :: fetched 2 new logs [30-05-2022 13:18:01]19070: WAF :: fetched 3 new logs [30-05-2022 13:28:02]22002: WAF :: fetched 7 new logs [30-05-2022 13:29:01]25431: WAF :: fetched 45 new logs [30-05-2022 13:30:02]28982: WAF :: fetched 19 new logs [30-05-2022 13:31:01]32557: WAF :: fetched 4 new logs [30-05-2022 13:33:02]7175: WAF :: fetched 23 new logs [30-05-2022 13:34:01]10759: WAF :: fetched 4 new logs [30-05-2022 13:35:02]14291: WAF :: fetched 14 new logs [30-05-2022 13:36:01]17863: WAF :: fetched 23 new logs [30-05-2022 13:37:01]21339: WAF :: fetched 14 new logs [30-05-2022 13:40:02]31849: WAF :: fetched 2 new logs [30-05-2022 13:41:02]3122: WAF :: fetched 1 new logs [30-05-2022 13:41:02]3122: Checking for user cron vulnerabilities [30-05-2022 13:43:01]10033: WAF :: fetched 3 new logs [30-05-2022 13:44:02]13524: Checking ditributed CMS bruteforce attacks [30-05-2022 13:44:02]13524: WAF :: fetched 2 new logs [30-05-2022 13:45:02]: Checking for definition updates [30-05-2022 13:47:02]24123: WAF :: fetched 1 new logs [30-05-2022 13:49:02]31264: WAF :: fetched 2 new logs [30-05-2022 13:50:02]2590: WAF :: fetched 1 new logs [30-05-2022 13:52:01]9829: WAF :: fetched 2 new logs [30-05-2022 13:53:02]13483: WAF :: fetched 3 new logs [30-05-2022 13:54:01]17120: WAF :: fetched 4 new logs [30-05-2022 13:56:02]24305: WAF :: fetched 4 new logs [30-05-2022 13:57:02]27820: WAF :: fetched 6 new logs [30-05-2022 13:58:01]31437: WAF :: fetched 3 new logs [30-05-2022 13:59:01]2572: WAF :: fetched 3 new logs [30-05-2022 14:00:02]5826: WAF :: fetched 4 new logs [30-05-2022 14:01:01]9930: WAF :: fetched 12 new logs [30-05-2022 14:02:02]13595: WAF :: fetched 1 new logs [30-05-2022 14:03:02]17074: WAF :: fetched 1 new logs [30-05-2022 14:04:01]20751: WAF :: fetched 2 new logs [30-05-2022 14:05:02]24337: WAF :: fetched 5 new logs [30-05-2022 14:07:01]31528: WAF :: fetched 1 new logs [30-05-2022 14:08:02]2780: WAF :: fetched 1 new logs [30-05-2022 14:09:02]6436: WAF :: fetched 1 new logs [30-05-2022 14:10:01]9909: WAF :: fetched 2 new logs [30-05-2022 14:11:02]13565: WAF :: fetched 3 new logs [30-05-2022 14:12:02]16989: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653930722 [30-05-2022 14:12:02]16989: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 14:12:04]16989: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 14:12:04]16989: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-1412/20220530-141202-YpT64r8rcr9Td049vgghCgAAAAo [30-05-2022 14:12:04]16989: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 14:12:04]16989: WAF :: fetched 2 new logs [30-05-2022 14:13:01]20770: WAF :: fetched 1 new logs [30-05-2022 14:15:01]27922: WAF :: fetched 1 new logs [30-05-2022 14:16:02]31797: WAF :: fetched 2 new logs [30-05-2022 14:17:01]3054: WAF :: fetched 1 new logs [30-05-2022 14:18:01]6541: WAF :: fetched 1 new logs [30-05-2022 14:21:01]17432: httpd.conf changed. Refreshing watchlist. [30-05-2022 14:22:02]20969: WAF :: fetched 1 new logs [30-05-2022 14:23:02]24443: WAF :: fetched 1 new logs [30-05-2022 14:24:01]27916: WAF :: fetched 1 new logs [30-05-2022 14:25:02]31466: WAF :: fetched 1 new logs [30-05-2022 14:26:01]2776: WAF :: fetched 1 new logs [30-05-2022 14:27:02]6329: WAF :: fetched 2 new logs [30-05-2022 14:28:01]9824: WAF :: fetched 1 new logs [30-05-2022 14:29:02]13349: WAF :: fetched 3 new logs [30-05-2022 14:30:01]16821: WAF :: fetched 1 new logs [30-05-2022 14:35:02]2474: WAF :: fetched 4 new logs [30-05-2022 14:36:01]6170: WAF :: fetched 1 new logs [30-05-2022 14:37:02]9720: WAF :: fetched 4 new logs [30-05-2022 14:40:02]20258: WAF :: fetched 2 new logs [30-05-2022 14:41:01]23973: WAF :: fetched 1 new logs [30-05-2022 14:41:01]23973: Checking for user cron vulnerabilities [30-05-2022 14:44:02]2302: Checking ditributed CMS bruteforce attacks [30-05-2022 14:44:02]2302: WAF :: fetched 1 new logs [30-05-2022 14:45:01]5943: WAF :: fetched 1 new logs [30-05-2022 14:46:02]9648: WAF :: fetched 1 new logs [30-05-2022 14:47:02]13175: WAF :: fetched 1 new logs [30-05-2022 14:48:01]16633: WAF :: fetched 3 new logs [30-05-2022 14:49:02]20228: WAF :: fetched 1 new logs [30-05-2022 14:51:02]27532: WAF :: fetched 2 new logs [30-05-2022 14:53:02]2345: Updated license status via CDN [30-05-2022 14:54:02]6060: WAF :: fetched 1 new logs [30-05-2022 14:55:01]9578: WAF :: fetched 2 new logs [30-05-2022 15:01:02]31638: Reseting cPGuard inotify settings [30-05-2022 15:05:02]13537: WAF :: fetched 4 new logs [30-05-2022 15:06:02]17241: WAF :: fetched 6 new logs [30-05-2022 15:07:02]20821: WAF :: fetched 6 new logs [30-05-2022 15:08:01]24311: WAF :: fetched 10 new logs [30-05-2022 15:09:01]27829: WAF :: fetched 3 new logs [30-05-2022 15:10:02]31467: WAF :: fetched 7 new logs [30-05-2022 15:11:02]2758: WAF :: fetched 9 new logs [30-05-2022 15:12:01]6350: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653934321 [30-05-2022 15:12:01]6350: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 15:12:03]6350: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 15:12:04]6350: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-1512/20220530-151201-YpUI8UIppu09c1t5Dw1gMAAAAC0 [30-05-2022 15:12:04]6350: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 15:12:04]6350: WAF :: fetched 9 new logs [30-05-2022 15:13:02]9892: WAF :: fetched 7 new logs [30-05-2022 15:14:02]13383: WAF :: fetched 5 new logs [30-05-2022 15:15:01]16904: WAF :: fetched 8 new logs [30-05-2022 15:16:01]20510: WAF :: fetched 8 new logs [30-05-2022 15:17:02]24125: WAF :: fetched 8 new logs [30-05-2022 15:18:01]27620: WAF :: fetched 8 new logs [30-05-2022 15:19:02]31235: WAF :: fetched 14 new logs [30-05-2022 15:20:02]2343: WAF :: fetched 6 new logs [30-05-2022 15:21:02]6077: httpd.conf changed. Refreshing watchlist. [30-05-2022 15:21:02]6078: WAF :: fetched 5 new logs [30-05-2022 15:22:01]9777: WAF :: fetched 2 new logs [30-05-2022 15:23:02]13331: WAF :: fetched 10 new logs [30-05-2022 15:24:02]16861: WAF :: fetched 10 new logs [30-05-2022 15:25:01]20389: WAF :: fetched 7 new logs [30-05-2022 15:26:02]24002: WAF :: fetched 10 new logs [30-05-2022 15:27:01]27597: WAF :: fetched 5 new logs [30-05-2022 15:28:02]31170: WAF :: fetched 6 new logs [30-05-2022 15:29:02]2239: WAF :: fetched 5 new logs [30-05-2022 15:30:01]5795: WAF :: fetched 5 new logs [30-05-2022 15:31:02]9399: WAF :: fetched 7 new logs [30-05-2022 15:32:02]13039: WAF :: fetched 7 new logs [30-05-2022 15:33:01]16644: WAF :: fetched 12 new logs [30-05-2022 15:34:02]20423: WAF :: fetched 1 new logs [30-05-2022 15:35:01]24112: WAF :: fetched 3 new logs [30-05-2022 15:36:02]27811: WAF :: fetched 10 new logs [30-05-2022 15:37:02]31535: WAF :: fetched 11 new logs [30-05-2022 15:38:02]2965: WAF :: fetched 7 new logs [30-05-2022 15:39:01]6657: WAF :: fetched 9 new logs [30-05-2022 15:40:02]10277: WAF :: fetched 4 new logs [30-05-2022 15:41:02]13806: WAF :: fetched 16 new logs [30-05-2022 15:41:02]13806: Checking for user cron vulnerabilities [30-05-2022 15:42:01]17645: WAF :: fetched 19 new logs [30-05-2022 15:43:01]21283: WAF :: fetched 7 new logs [30-05-2022 15:44:01]24857: Checking ditributed CMS bruteforce attacks [30-05-2022 15:44:01]24857: WAF :: fetched 1 new logs [30-05-2022 15:45:02]28541: WAF :: fetched 5 new logs [30-05-2022 15:46:01]32169: WAF :: fetched 3 new logs [30-05-2022 15:47:01]3660: WAF :: fetched 5 new logs [30-05-2022 15:48:02]7284: WAF :: fetched 7 new logs [30-05-2022 15:49:01]10796: WAF :: fetched 7 new logs [30-05-2022 15:50:02]14478: WAF :: fetched 4 new logs [30-05-2022 15:51:02]18156: WAF :: fetched 4 new logs [30-05-2022 15:52:01]21807: WAF :: fetched 8 new logs [30-05-2022 15:53:01]25402: WAF :: fetched 7 new logs [30-05-2022 15:54:02]29053: WAF :: fetched 4 new logs [30-05-2022 15:55:01]32521: WAF :: fetched 9 new logs [30-05-2022 15:56:02]3977: WAF :: fetched 4 new logs [30-05-2022 15:57:02]7777: WAF :: fetched 4 new logs [30-05-2022 15:58:01]11266: WAF :: fetched 6 new logs [30-05-2022 15:59:02]14794: WAF :: fetched 7 new logs [30-05-2022 16:00:01]18007: WAF :: fetched 6 new logs [30-05-2022 16:01:01]22022: WAF :: fetched 2 new logs [30-05-2022 16:02:02]25810: WAF :: fetched 7 new logs [30-05-2022 16:03:02]29291: WAF :: fetched 4 new logs [30-05-2022 16:04:01]343: WAF :: fetched 5 new logs [30-05-2022 16:05:01]4093: WAF :: fetched 3 new logs [30-05-2022 16:06:01]7841: WAF :: fetched 4 new logs [30-05-2022 16:07:02]11453: WAF :: fetched 4 new logs [30-05-2022 16:08:01]15017: WAF :: fetched 3 new logs [30-05-2022 16:10:01]22244: WAF :: fetched 7 new logs [30-05-2022 16:11:01]25851: WAF :: fetched 3 new logs [30-05-2022 16:12:02]29717: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653937922 [30-05-2022 16:12:02]29717: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 16:12:04]29717: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 16:12:04]29717: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-1612/20220530-161202-YpUXAu2t3BFvyOKt6dn-0AAAACo [30-05-2022 16:12:04]29717: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 16:12:04]29717: WAF :: fetched 6 new logs [30-05-2022 16:13:01]890: WAF :: fetched 5 new logs [30-05-2022 16:14:01]4585: WAF :: fetched 7 new logs [30-05-2022 16:15:02]8259: WAF :: fetched 8 new logs [30-05-2022 16:16:01]11897: WAF :: fetched 1 new logs [30-05-2022 16:17:02]15884: WAF :: fetched 4 new logs [30-05-2022 16:19:01]23046: WAF :: fetched 9 new logs [30-05-2022 16:20:02]26917: WAF :: fetched 3 new logs [30-05-2022 16:21:01]30577: WAF :: fetched 4 new logs [30-05-2022 16:22:02]1869: WAF :: fetched 8 new logs [30-05-2022 16:23:02]5383: WAF :: fetched 8 new logs [30-05-2022 16:24:01]8829: WAF :: fetched 3 new logs [30-05-2022 16:25:02]12464: WAF :: fetched 1 new logs [30-05-2022 16:26:01]16056: WAF :: fetched 4 new logs [30-05-2022 16:28:02]23132: WAF :: fetched 2 new logs [30-05-2022 16:29:02]26603: WAF :: fetched 6 new logs [30-05-2022 16:30:01]30077: WAF :: fetched 7 new logs [30-05-2022 16:31:02]1276: WAF :: fetched 6 new logs [30-05-2022 16:32:02]4948: WAF :: fetched 2 new logs [30-05-2022 16:33:02]8403: WAF :: fetched 2 new logs [30-05-2022 16:34:01]11916: WAF :: fetched 3 new logs [30-05-2022 16:36:01]19159: WAF :: fetched 1 new logs [30-05-2022 16:37:02]22932: WAF :: fetched 3 new logs [30-05-2022 16:38:02]26582: WAF :: fetched 5 new logs [30-05-2022 16:41:01]5102: WAF :: fetched 1 new logs [30-05-2022 16:41:01]5102: Checking for user cron vulnerabilities [30-05-2022 16:42:02]8752: WAF :: fetched 1 new logs [30-05-2022 16:44:02]15782: Checking ditributed CMS bruteforce attacks [30-05-2022 16:44:02]15782: WAF :: fetched 1 new logs [30-05-2022 16:45:01]19493: WAF :: fetched 3 new logs [30-05-2022 16:46:01]23150: WAF :: fetched 1 new logs [30-05-2022 16:47:02]26792: WAF :: fetched 1 new logs [30-05-2022 16:48:02]30255: WAF :: fetched 1 new logs [30-05-2022 16:52:01]12283: WAF :: fetched 2 new logs [30-05-2022 16:53:02]15774: WAF :: fetched 2 new logs [30-05-2022 16:57:01]30003: WAF :: fetched 1 new logs [30-05-2022 17:02:01]15395: WAF :: fetched 1 new logs [30-05-2022 17:03:01]18844: WAF :: fetched 3 new logs [30-05-2022 17:04:01]22320: WAF :: fetched 1 new logs [30-05-2022 17:05:02]25898: WAF :: fetched 1 new logs [30-05-2022 17:07:01]604: WAF :: fetched 1 new logs [30-05-2022 17:08:01]4247: WAF :: fetched 1 new logs [30-05-2022 17:09:02]7783: WAF :: fetched 2 new logs [30-05-2022 17:10:01]11316: WAF :: fetched 5 new logs [30-05-2022 17:12:01]18572: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653941521 [30-05-2022 17:12:01]18572: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 17:12:03]18572: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 17:12:04]18572: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-1712/20220530-171201-YpUlEcrSHC-dl8PxrvTcVgAAAAs [30-05-2022 17:12:04]18572: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 17:12:04]18572: WAF :: fetched 2 new logs [30-05-2022 17:13:02]22193: WAF :: fetched 1 new logs [30-05-2022 17:17:01]4163: WAF :: fetched 1 new logs [30-05-2022 17:21:01]18310: WAF :: fetched 4 new logs [30-05-2022 17:24:02]29021: WAF :: fetched 1 new logs [30-05-2022 17:25:01]32467: WAF :: fetched 1 new logs [30-05-2022 17:27:02]7428: WAF :: fetched 4 new logs [30-05-2022 17:28:01]10890: WAF :: fetched 1 new logs [30-05-2022 17:29:02]14390: WAF :: fetched 1 new logs [30-05-2022 17:31:01]21424: WAF :: fetched 2 new logs [30-05-2022 17:32:02]25032: WAF :: fetched 1 new logs [30-05-2022 17:35:02]3091: WAF :: fetched 1 new logs [30-05-2022 17:37:02]10317: WAF :: fetched 2 new logs [30-05-2022 17:39:01]17268: WAF :: fetched 1 new logs [30-05-2022 17:40:02]20775: WAF :: fetched 2 new logs [30-05-2022 17:41:02]24265: WAF :: fetched 6 new logs [30-05-2022 17:41:02]24265: Checking for user cron vulnerabilities [30-05-2022 17:42:01]27814: WAF :: fetched 4 new logs [30-05-2022 17:44:01]2445: Checking ditributed CMS bruteforce attacks [30-05-2022 17:44:01]2445: WAF :: fetched 1 new logs [30-05-2022 17:45:01]5940: WAF :: fetched 3 new logs [30-05-2022 17:49:01]19921: WAF :: fetched 1 new logs [30-05-2022 17:50:02]23608: WAF :: fetched 1 new logs [30-05-2022 17:52:01]30943: WAF :: fetched 1 new logs [30-05-2022 17:53:02]2224: WAF :: fetched 1 new logs [30-05-2022 17:54:01]5784: WAF :: fetched 2 new logs [30-05-2022 17:57:02]16883: WAF :: fetched 2 new logs [30-05-2022 17:58:01]20479: WAF :: fetched 1 new logs [30-05-2022 18:00:02]27324: WAF :: fetched 4 new logs [30-05-2022 18:03:01]6307: WAF :: fetched 2 new logs [30-05-2022 18:04:02]10005: WAF :: fetched 1 new logs [30-05-2022 18:07:02]20671: WAF :: fetched 3 new logs [30-05-2022 18:11:01]2130: WAF :: fetched 5 new logs [30-05-2022 18:12:02]5715: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653945122 [30-05-2022 18:12:02]5715: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 18:12:04]5715: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 18:12:04]5715: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-1812/20220530-181202-YpUzIhsoVBpk_wX7EPJIFwAAABU [30-05-2022 18:12:04]5715: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 18:13:01]9120: WAF :: fetched 1 new logs [30-05-2022 18:16:02]19607: WAF :: fetched 2 new logs [30-05-2022 18:17:02]23104: WAF :: fetched 4 new logs [30-05-2022 18:19:01]30094: WAF :: fetched 1 new logs [30-05-2022 18:20:01]1127: WAF :: fetched 1 new logs [30-05-2022 18:23:01]11764: WAF :: fetched 1 new logs [30-05-2022 18:28:01]29135: WAF :: fetched 1 new logs [30-05-2022 18:30:02]3702: WAF :: fetched 1 new logs [30-05-2022 18:32:02]10766: WAF :: fetched 3 new logs [30-05-2022 18:33:01]14225: WAF :: fetched 2 new logs [30-05-2022 18:34:01]17662: WAF :: fetched 3 new logs [30-05-2022 18:36:01]24602: WAF :: fetched 1 new logs [30-05-2022 18:37:01]28117: WAF :: fetched 4 new logs [30-05-2022 18:38:02]31656: WAF :: fetched 8 new logs [30-05-2022 18:39:02]2867: WAF :: fetched 6 new logs [30-05-2022 18:41:01]9824: WAF :: fetched 3 new logs [30-05-2022 18:41:01]9824: Checking for user cron vulnerabilities [30-05-2022 18:42:02]13431: WAF :: fetched 4 new logs [30-05-2022 18:43:01]16885: WAF :: fetched 4 new logs [30-05-2022 18:44:02]20356: Checking ditributed CMS bruteforce attacks [30-05-2022 18:44:02]20356: WAF :: fetched 2 new logs [30-05-2022 18:49:01]5518: WAF :: fetched 1 new logs [30-05-2022 18:50:02]9027: WAF :: fetched 2 new logs [30-05-2022 18:52:01]16024: WAF :: fetched 2 new logs [30-05-2022 18:54:01]22911: WAF :: fetched 3 new logs [30-05-2022 18:55:02]26380: WAF :: fetched 1 new logs [30-05-2022 18:56:02]29906: WAF :: fetched 2 new logs [30-05-2022 18:57:01]1069: WAF :: fetched 1 new logs [30-05-2022 18:58:02]4626: WAF :: fetched 2 new logs [30-05-2022 19:00:02]11248: WAF :: fetched 4 new logs [30-05-2022 19:01:02]15281: WAF :: fetched 2 new logs [30-05-2022 19:02:01]18868: WAF :: fetched 2 new logs [30-05-2022 19:03:02]22374: WAF :: fetched 7 new logs [30-05-2022 19:09:02]11058: WAF :: fetched 6 new logs [30-05-2022 19:12:01]21541: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653948721 [30-05-2022 19:12:01]21541: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 19:12:03]21541: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 19:12:04]21541: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-1912/20220530-191201-YpVBMXoZjZqZQtfCUJ2QawAAABM [30-05-2022 19:12:04]21541: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 19:12:04]21541: WAF :: fetched 1 new logs [30-05-2022 19:13:02]24986: WAF :: fetched 3 new logs [30-05-2022 19:14:02]28451: WAF :: fetched 1 new logs [30-05-2022 19:15:01]31946: WAF :: fetched 2 new logs [30-05-2022 19:16:02]3232: WAF :: fetched 3 new logs [30-05-2022 19:17:02]6812: WAF :: fetched 5 new logs [30-05-2022 19:18:01]10248: WAF :: fetched 2 new logs [30-05-2022 19:20:02]17181: WAF :: fetched 2 new logs [30-05-2022 19:21:02]20626: WAF :: fetched 1 new logs [30-05-2022 19:23:01]27621: WAF :: fetched 3 new logs [30-05-2022 19:24:02]31183: WAF :: fetched 6 new logs [30-05-2022 19:27:02]9342: WAF :: fetched 4 new logs [30-05-2022 19:28:01]12733: WAF :: fetched 2 new logs [30-05-2022 19:33:02]30318: WAF :: fetched 1 new logs [30-05-2022 19:34:01]1340: WAF :: fetched 1 new logs [30-05-2022 19:35:02]4889: WAF :: fetched 1 new logs [30-05-2022 19:36:02]8345: WAF :: fetched 4 new logs [30-05-2022 19:37:02]11852: WAF :: fetched 3 new logs [30-05-2022 19:38:02]15343: WAF :: fetched 4 new logs [30-05-2022 19:39:01]18777: WAF :: fetched 3 new logs [30-05-2022 19:40:02]22288: WAF :: fetched 2 new logs [30-05-2022 19:41:01]25879: WAF :: fetched 1 new logs [30-05-2022 19:41:01]25879: Checking for user cron vulnerabilities [30-05-2022 19:42:02]29441: WAF :: fetched 4 new logs [30-05-2022 19:44:01]4033: Checking ditributed CMS bruteforce attacks [30-05-2022 19:45:01]: Checking for definition updates [30-05-2022 19:45:02]7610: WAF :: fetched 2 new logs [30-05-2022 19:45:05]7608: Updated virus defnition : malware.expert.ndb [30-05-2022 19:46:01]11143: WAF :: fetched 1 new logs [30-05-2022 19:48:02]18172: WAF :: fetched 1 new logs [30-05-2022 19:49:01]21654: WAF :: fetched 1 new logs [30-05-2022 19:53:01]3393: WAF :: fetched 3 new logs [30-05-2022 19:54:02]6873: WAF :: fetched 2 new logs [30-05-2022 19:56:02]14034: WAF :: fetched 1 new logs [30-05-2022 19:56:02]14035: httpd.conf changed. Refreshing watchlist. [30-05-2022 19:57:01]17525: httpd.conf changed. Refreshing watchlist. [30-05-2022 19:59:02]24557: WAF :: fetched 1 new logs [30-05-2022 20:00:01]27746: WAF :: fetched 1 new logs [30-05-2022 20:01:02]31793: WAF :: fetched 2 new logs [30-05-2022 20:02:01]2926: WAF :: fetched 1 new logs [30-05-2022 20:03:02]6531: WAF :: fetched 1 new logs [30-05-2022 20:04:01]10130: WAF :: fetched 4 new logs [30-05-2022 20:04:02]10136: httpd.conf changed. Refreshing watchlist. [30-05-2022 20:05:01]13576: WAF :: fetched 3 new logs [30-05-2022 20:06:02]17128: WAF :: fetched 2 new logs [30-05-2022 20:07:02]20532: WAF :: fetched 1 new logs [30-05-2022 20:08:01]24043: WAF :: fetched 3 new logs [30-05-2022 20:09:02]27470: WAF :: fetched 6 new logs [30-05-2022 20:11:02]2113: WAF :: fetched 1 new logs [30-05-2022 20:12:02]5575: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653952322 [30-05-2022 20:12:02]5575: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 20:12:04]5575: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 20:12:04]5575: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-2012/20220530-201202-YpVPQqggmgCOEk3KTPthXwAAABw [30-05-2022 20:12:04]5575: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 20:12:04]5575: WAF :: fetched 2 new logs [30-05-2022 20:13:02]9143: WAF :: fetched 12 new logs [30-05-2022 20:14:02]12566: WAF :: fetched 1 new logs [30-05-2022 20:18:01]26687: WAF :: fetched 2 new logs [30-05-2022 20:19:02]30214: WAF :: fetched 4 new logs [30-05-2022 20:20:01]1312: WAF :: fetched 5 new logs [30-05-2022 20:21:01]4949: WAF :: fetched 5 new logs [30-05-2022 20:22:01]8413: WAF :: fetched 2 new logs [30-05-2022 20:25:01]18826: WAF :: fetched 1 new logs [30-05-2022 20:27:02]25874: WAF :: fetched 1 new logs [30-05-2022 20:29:01]518: WAF :: fetched 1 new logs [30-05-2022 20:31:02]7680: WAF :: fetched 1 new logs [30-05-2022 20:34:01]18143: WAF :: fetched 2 new logs [30-05-2022 20:35:01]21622: WAF :: fetched 1 new logs [30-05-2022 20:35:01]21608: httpd.conf changed. Refreshing watchlist. [30-05-2022 20:36:02]25175: WAF :: fetched 2 new logs [30-05-2022 20:38:02]32221: WAF :: fetched 3 new logs [30-05-2022 20:40:02]6845: WAF :: fetched 2 new logs [30-05-2022 20:41:01]10394: WAF :: fetched 3 new logs [30-05-2022 20:41:01]10394: Checking for user cron vulnerabilities [30-05-2022 20:42:02]13930: WAF :: fetched 2 new logs [30-05-2022 20:43:02]17536: WAF :: fetched 1 new logs [30-05-2022 20:44:01]21091: Checking ditributed CMS bruteforce attacks [30-05-2022 20:47:02]31752: WAF :: fetched 1 new logs [30-05-2022 20:50:02]10028: WAF :: fetched 1 new logs [30-05-2022 20:52:02]17053: WAF :: fetched 2 new logs [30-05-2022 20:53:01]20574: WAF :: fetched 2 new logs [30-05-2022 20:55:01]27463: WAF :: fetched 2 new logs [30-05-2022 20:57:02]2205: WAF :: fetched 2 new logs [30-05-2022 20:58:01]5719: WAF :: fetched 2 new logs [30-05-2022 20:59:02]9257: WAF :: fetched 3 new logs [30-05-2022 21:02:02]19974: WAF :: fetched 1 new logs [30-05-2022 21:05:01]30367: WAF :: fetched 3 new logs [30-05-2022 21:06:02]1490: WAF :: fetched 3 new logs [30-05-2022 21:07:01]4970: WAF :: fetched 1 new logs [30-05-2022 21:11:01]18978: WAF :: fetched 2 new logs [30-05-2022 21:12:01]22385: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653955921 [30-05-2022 21:12:01]22385: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 21:12:03]22385: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 21:12:03]22385: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-2112/20220530-211201-YpVdUZFkYsb3exOAob0cPgAAACU [30-05-2022 21:12:03]22385: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 21:12:04]22385: WAF :: fetched 1 new logs [30-05-2022 21:13:02]25949: WAF :: fetched 1 new logs [30-05-2022 21:14:01]29372: WAF :: fetched 1 new logs [30-05-2022 21:15:02]375: WAF :: fetched 4 new logs [30-05-2022 21:18:01]10944: WAF :: fetched 1 new logs [30-05-2022 21:19:01]14382: WAF :: fetched 1 new logs [30-05-2022 21:21:01]21415: WAF :: fetched 1 new logs [30-05-2022 21:23:02]28465: WAF :: fetched 1 new logs [30-05-2022 21:25:01]3113: WAF :: fetched 1 new logs [30-05-2022 21:26:01]6580: WAF :: fetched 1 new logs [30-05-2022 21:28:01]13621: WAF :: fetched 1 new logs [30-05-2022 21:29:02]17138: WAF :: fetched 1 new logs [30-05-2022 21:31:01]24103: WAF :: fetched 1 new logs [30-05-2022 21:32:02]27565: WAF :: fetched 2 new logs [30-05-2022 21:33:02]31188: WAF :: fetched 3 new logs [30-05-2022 21:34:01]2328: WAF :: fetched 2 new logs [30-05-2022 21:36:01]9432: WAF :: fetched 3 new logs [30-05-2022 21:37:02]12921: WAF :: fetched 3 new logs [30-05-2022 21:38:02]16518: WAF :: fetched 1 new logs [30-05-2022 21:39:02]19924: WAF :: fetched 2 new logs [30-05-2022 21:40:01]23499: WAF :: fetched 4 new logs [30-05-2022 21:41:02]26974: WAF :: fetched 2 new logs [30-05-2022 21:41:02]26974: Checking for user cron vulnerabilities [30-05-2022 21:43:02]1680: WAF :: fetched 2 new logs [30-05-2022 21:44:01]5172: Checking ditributed CMS bruteforce attacks [30-05-2022 21:44:01]5172: WAF :: fetched 2 new logs [30-05-2022 21:46:02]12128: WAF :: fetched 1 new logs [30-05-2022 21:47:01]15571: WAF :: fetched 1 new logs [30-05-2022 21:48:02]19241: WAF :: fetched 2 new logs [30-05-2022 21:49:01]22837: WAF :: fetched 4 new logs [30-05-2022 21:51:01]29976: WAF :: fetched 2 new logs [30-05-2022 21:52:01]990: WAF :: fetched 1 new logs [30-05-2022 21:53:02]4590: WAF :: fetched 1 new logs [30-05-2022 21:54:01]8033: WAF :: fetched 3 new logs [30-05-2022 21:55:01]11512: WAF :: fetched 1 new logs [30-05-2022 21:56:02]15122: WAF :: fetched 5 new logs [30-05-2022 21:57:01]18696: WAF :: fetched 3 new logs [30-05-2022 21:58:01]22208: WAF :: fetched 1 new logs [30-05-2022 21:59:02]25861: WAF :: fetched 6 new logs [30-05-2022 22:00:02]29031: WAF :: fetched 5 new logs [30-05-2022 22:01:01]516: WAF :: fetched 2 new logs [30-05-2022 22:02:02]4354: WAF :: fetched 3 new logs [30-05-2022 22:03:01]7987: WAF :: fetched 3 new logs [30-05-2022 22:04:01]11406: WAF :: fetched 3 new logs [30-05-2022 22:05:02]14907: WAF :: fetched 1 new logs [30-05-2022 22:07:02]21864: WAF :: fetched 3 new logs [30-05-2022 22:07:09]21862: Performing Domain reputation checks [30-05-2022 22:08:01]25316: WAF :: fetched 2 new logs [30-05-2022 22:09:02]28826: WAF :: fetched 2 new logs [30-05-2022 22:10:02]32252: WAF :: fetched 7 new logs [30-05-2022 22:12:02]7115: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653959522 [30-05-2022 22:12:02]7115: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 22:12:04]7115: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 22:12:04]7115: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-2212/20220530-221202-YpVrYkirzGzjX1tPKNKULAAAADA [30-05-2022 22:12:04]7115: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [30-05-2022 22:12:04]7115: WAF :: fetched 2 new logs [30-05-2022 22:13:02]10698: WAF :: fetched 2 new logs [30-05-2022 22:14:01]14104: WAF :: fetched 2 new logs [30-05-2022 22:15:02]17576: WAF :: fetched 3 new logs [30-05-2022 22:16:01]21116: WAF :: fetched 1 new logs [30-05-2022 22:18:02]28142: WAF :: fetched 1 new logs [30-05-2022 22:20:01]2771: WAF :: fetched 7 new logs [30-05-2022 22:21:02]6311: WAF :: fetched 2 new logs [30-05-2022 22:22:01]9710: WAF :: fetched 2 new logs [30-05-2022 22:23:01]13306: WAF :: fetched 3 new logs [30-05-2022 22:25:02]20151: WAF :: fetched 1 new logs [30-05-2022 22:26:01]23659: WAF :: fetched 1 new logs [30-05-2022 22:27:02]27057: WAF :: fetched 4 new logs [30-05-2022 22:29:01]1670: WAF :: fetched 1 new logs [30-05-2022 22:30:02]5299: WAF :: fetched 3 new logs [30-05-2022 22:31:01]8879: WAF :: fetched 4 new logs [30-05-2022 22:32:02]12406: WAF :: fetched 1 new logs [30-05-2022 22:33:01]15937: WAF :: fetched 1 new logs [30-05-2022 22:34:01]19352: WAF :: fetched 2 new logs [30-05-2022 22:36:01]26337: WAF :: fetched 3 new logs [30-05-2022 22:38:01]952: WAF :: fetched 4 new logs [30-05-2022 22:39:02]4511: WAF :: fetched 2 new logs [30-05-2022 22:40:01]7946: WAF :: fetched 2 new logs [30-05-2022 22:41:01]11449: WAF :: fetched 5 new logs [30-05-2022 22:41:01]11449: Checking for user cron vulnerabilities [30-05-2022 22:42:01]14992: WAF :: fetched 4 new logs [30-05-2022 22:43:02]18626: WAF :: fetched 1 new logs [30-05-2022 22:44:01]22083: Checking ditributed CMS bruteforce attacks [30-05-2022 22:44:02]22083: WAF :: fetched 4 new logs [30-05-2022 22:45:01]25618: WAF :: fetched 4 new logs [30-05-2022 22:46:02]29275: WAF :: fetched 3 new logs [30-05-2022 22:47:01]32728: WAF :: fetched 3 new logs [30-05-2022 22:48:02]3948: WAF :: fetched 4 new logs [30-05-2022 22:49:01]7348: WAF :: fetched 4 new logs [30-05-2022 22:50:02]10880: WAF :: fetched 3 new logs [30-05-2022 22:51:01]14413: WAF :: fetched 1 new logs [30-05-2022 22:52:02]17829: WAF :: fetched 14 new logs [30-05-2022 22:53:01]21309: WAF :: fetched 1 new logs [30-05-2022 22:54:02]24772: WAF :: fetched 2 new logs [30-05-2022 22:57:01]3089: WAF :: fetched 2 new logs [30-05-2022 23:01:01]17347: WAF :: fetched 243 new logs [30-05-2022 23:02:03]20898: WAF :: fetched 1450 new logs [30-05-2022 23:05:02]31441: WAF :: fetched 1 new logs [30-05-2022 23:06:02]2794: WAF :: fetched 4 new logs [30-05-2022 23:07:02]6365: WAF :: fetched 1 new logs [30-05-2022 23:07:37]6535: Performed RBL check for 23.111.136.34. [30-05-2022 23:08:01]9855: WAF :: fetched 1 new logs [30-05-2022 23:09:02]13750: WAF :: fetched 4 new logs [30-05-2022 23:12:02]24300: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653963122 [30-05-2022 23:12:02]24300: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-05-2022 23:12:04]24300: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-05-2022 23:12:04]24300: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220530/20220530-2312/20220530-231202-YpV5clGFLRGHK9t9eaY9SQAAAAw [30-05-2022 23:12:04]24300: WAF :: No suitable log file found. Using SQLite.. [30-05-2022 23:12:05]24300: WAF :: fetched 1422 new logs [30-05-2022 23:20:01]20429: WAF :: fetched 1 new logs [30-05-2022 23:21:01]23970: WAF :: fetched 2 new logs [30-05-2022 23:22:02]27426: WAF :: fetched 1 new logs [30-05-2022 23:24:02]2025: WAF :: fetched 1 new logs [30-05-2022 23:25:01]5469: WAF :: fetched 2 new logs [30-05-2022 23:28:01]15921: WAF :: fetched 1 new logs [30-05-2022 23:30:01]22873: WAF :: fetched 1 new logs [30-05-2022 23:33:01]1054: WAF :: fetched 1 new logs [30-05-2022 23:35:01]7987: WAF :: fetched 2 new logs [30-05-2022 23:41:02]29024: Checking for user cron vulnerabilities [30-05-2022 23:44:01]7328: Checking ditributed CMS bruteforce attacks [30-05-2022 23:44:01]7328: WAF :: fetched 1 new logs [30-05-2022 23:46:02]14314: WAF :: fetched 1 new logs [30-05-2022 23:47:01]17776: WAF :: fetched 2 new logs [30-05-2022 23:48:02]21391: WAF :: fetched 1 new logs [30-05-2022 23:49:01]24800: WAF :: fetched 1 new logs [30-05-2022 23:50:02]28311: WAF :: fetched 1 new logs [30-05-2022 23:51:02]32050: WAF :: fetched 1 new logs [30-05-2022 23:54:02]10261: WAF :: fetched 1 new logs [30-05-2022 23:55:02]14014: httpd.conf changed. Refreshing watchlist. [30-05-2022 23:57:01]21079: WAF :: fetched 27 new logs [30-05-2022 23:58:02]24682: WAF :: fetched 1 new logs [30-05-2022 23:59:01]28097: WAF :: fetched 2 new logs [31-05-2022 00:01:02]3117: WAF :: fetched 1 new logs [31-05-2022 00:01:03]3117: Sending daily report for May 31, 2022 [31-05-2022 00:03:02]10207: WAF :: fetched 2 new logs [31-05-2022 00:04:01]13728: WAF :: fetched 1 new logs [31-05-2022 00:05:02]17256: Deleted 0 entries older than 6 MONTH from scanner_logs [31-05-2022 00:05:02]17256: Deleted 0 files from Quarantine [31-05-2022 00:07:01]24222: WAF :: fetched 1 new logs [31-05-2022 00:08:02]27829: WAF :: fetched 4 new logs [31-05-2022 00:11:01]6088: WAF :: fetched 3 new logs [31-05-2022 00:12:01]9563: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653966721 [31-05-2022 00:12:01]9563: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 00:12:03]9563: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 00:12:03]9563: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-0012/20220531-001201-YpWHgZLMaiLjdj9Jt1iUgQAAABg [31-05-2022 00:12:03]9563: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 00:12:04]9563: WAF :: fetched 2 new logs [31-05-2022 00:13:02]13138: WAF :: fetched 1 new logs [31-05-2022 00:14:01]16575: WAF :: fetched 2 new logs [31-05-2022 00:16:02]23503: WAF :: fetched 3 new logs [31-05-2022 00:17:01]26965: WAF :: fetched 3 new logs [31-05-2022 00:18:02]30573: WAF :: fetched 2 new logs [31-05-2022 00:22:01]12256: WAF :: fetched 1 new logs [31-05-2022 00:24:02]19238: WAF :: fetched 1 new logs [31-05-2022 00:25:01]22674: WAF :: fetched 3 new logs [31-05-2022 00:27:01]29608: WAF :: fetched 1 new logs [31-05-2022 00:28:01]737: WAF :: fetched 6 new logs [31-05-2022 00:29:02]4337: WAF :: fetched 5 new logs [31-05-2022 00:30:01]7756: WAF :: fetched 4 new logs [31-05-2022 00:31:02]11351: WAF :: fetched 8 new logs [31-05-2022 00:36:01]28935: WAF :: fetched 1 new logs [31-05-2022 00:40:02]10756: WAF :: fetched 2 new logs [31-05-2022 00:41:01]14251: Checking for user cron vulnerabilities [31-05-2022 00:44:01]24800: Checking ditributed CMS bruteforce attacks [31-05-2022 00:45:02]: Checking for software updates [31-05-2022 00:47:01]4261: WAF :: fetched 2 new logs [31-05-2022 00:49:01]11288: WAF :: fetched 1 new logs [31-05-2022 00:50:02]14855: WAF :: fetched 1 new logs [31-05-2022 00:51:02]18332: WAF :: fetched 1 new logs [31-05-2022 00:53:02]25325: WAF :: fetched 3 new logs [31-05-2022 00:54:01]28799: WAF :: fetched 1 new logs [31-05-2022 00:58:01]10377: WAF :: fetched 2 new logs [31-05-2022 01:00:02]17390: WAF :: fetched 1 new logs [31-05-2022 01:01:02]21465: WAF :: fetched 1 new logs [31-05-2022 01:12:02]30866: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653970322 [31-05-2022 01:12:02]30866: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 01:12:04]30866: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 01:12:04]30866: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-0112/20220531-011202-YpWVktzxJQurx8CFj6TFNgAAAAY [31-05-2022 01:12:04]30866: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [31-05-2022 01:12:04]30866: WAF :: fetched 1 new logs [31-05-2022 01:13:02]2013: WAF :: fetched 2 new logs [31-05-2022 01:16:02]13198: WAF :: fetched 9 new logs [31-05-2022 01:17:01]16725: WAF :: fetched 1 new logs [31-05-2022 01:18:01]20388: WAF :: fetched 1 new logs [31-05-2022 01:20:01]28144: WAF :: fetched 2 new logs [31-05-2022 01:21:01]31978: WAF :: fetched 3 new logs [31-05-2022 01:22:01]3130: WAF :: fetched 1 new logs [31-05-2022 01:25:01]14055: WAF :: fetched 4 new logs [31-05-2022 01:26:02]17856: WAF :: fetched 1 new logs [31-05-2022 01:27:02]21525: WAF :: fetched 1 new logs [31-05-2022 01:29:02]29107: WAF :: fetched 2 new logs [31-05-2022 01:31:01]4041: WAF :: fetched 7 new logs [31-05-2022 01:32:02]7740: WAF :: fetched 1 new logs [31-05-2022 01:35:01]19305: WAF :: fetched 1 new logs [31-05-2022 01:37:02]26655: WAF :: fetched 2 new logs [31-05-2022 01:39:02]2022: WAF :: fetched 4 new logs [31-05-2022 01:41:01]9473: WAF :: fetched 1 new logs [31-05-2022 01:41:01]9473: Checking for user cron vulnerabilities [31-05-2022 01:42:02]13411: WAF :: fetched 1 new logs [31-05-2022 01:44:02]20741: Checking ditributed CMS bruteforce attacks [31-05-2022 01:44:02]20741: WAF :: fetched 1 new logs [31-05-2022 01:45:01]: Checking for definition updates [31-05-2022 01:50:01]9998: WAF :: fetched 2 new logs [31-05-2022 01:52:02]17322: WAF :: fetched 1 new logs [31-05-2022 01:53:01]20786: WAF :: fetched 2 new logs [31-05-2022 01:56:01]31415: WAF :: fetched 1 new logs [31-05-2022 01:57:02]3036: WAF :: fetched 1 new logs [31-05-2022 01:59:01]9999: WAF :: fetched 1 new logs [31-05-2022 02:00:01]13153: WAF :: fetched 2 new logs [31-05-2022 02:01:02]17101: WAF :: fetched 2 new logs [31-05-2022 02:03:02]24049: WAF :: fetched 1 new logs [31-05-2022 02:04:01]27524: WAF :: fetched 1 new logs [31-05-2022 02:08:01]9085: WAF :: fetched 1 new logs [31-05-2022 02:10:02]16343: WAF :: fetched 1 new logs [31-05-2022 02:11:01]19824: WAF :: fetched 2 new logs [31-05-2022 02:12:02]23393: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653973922 [31-05-2022 02:12:02]23393: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 02:12:04]23393: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 02:12:04]23393: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-0212/20220531-021202-YpWjot0zMKGmNRxj6qjZ1QAAABQ [31-05-2022 02:12:04]23393: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 02:12:04]23393: WAF :: fetched 50 new logs [31-05-2022 02:13:01]26877: WAF :: fetched 3 new logs [31-05-2022 02:15:02]1692: WAF :: fetched 1 new logs [31-05-2022 02:19:01]15597: WAF :: fetched 1 new logs [31-05-2022 02:21:02]22655: WAF :: fetched 1 new logs [31-05-2022 02:23:01]29582: WAF :: fetched 7 new logs [31-05-2022 02:24:02]653: WAF :: fetched 1 new logs [31-05-2022 02:26:01]7670: WAF :: fetched 1 new logs [31-05-2022 02:28:01]14658: WAF :: fetched 1 new logs [31-05-2022 02:30:02]21699: WAF :: fetched 1 new logs [31-05-2022 02:34:01]4861: WAF :: fetched 1 new logs [31-05-2022 02:35:02]8584: WAF :: fetched 1 new logs [31-05-2022 02:36:01]12156: WAF :: fetched 2 new logs [31-05-2022 02:37:01]15593: WAF :: fetched 2 new logs [31-05-2022 02:41:01]30433: Checking for user cron vulnerabilities [31-05-2022 02:44:01]9288: Checking ditributed CMS bruteforce attacks [31-05-2022 02:44:01]9288: WAF :: fetched 4 new logs [31-05-2022 02:47:02]20177: WAF :: fetched 1 new logs [31-05-2022 02:48:01]23836: WAF :: fetched 2 new logs [31-05-2022 02:53:02]8892: Updated license status via CDN [31-05-2022 02:54:02]12460: WAF :: fetched 3 new logs [31-05-2022 02:55:01]16087: WAF :: fetched 1 new logs [31-05-2022 02:56:02]19890: WAF :: fetched 2 new logs [31-05-2022 02:58:02]27288: WAF :: fetched 2 new logs [31-05-2022 02:59:02]31008: WAF :: fetched 1 new logs [31-05-2022 03:00:03]1964: Found and updated 31 CMS installations [31-05-2022 03:02:41]1964: Sending CMS version vulnerability report emails to cpanel users [31-05-2022 03:02:44]1964: Checking wordpress installations for suspicious directories [31-05-2022 03:04:20]14217: Sending CMS version vulnerability report emails to cpanel users [31-05-2022 03:04:23]14217: Checking wordpress installations for suspicious directories [31-05-2022 03:05:01]21808: WAF :: fetched 2 new logs [31-05-2022 03:08:01]32693: WAF :: fetched 1 new logs [31-05-2022 03:10:02]7383: WAF :: fetched 1 new logs [31-05-2022 03:11:01]10898: WAF :: fetched 1 new logs [31-05-2022 03:12:02]14433: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653977522 [31-05-2022 03:12:02]14433: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 03:12:04]14433: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 03:12:04]14433: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-0312/20220531-031202-YpWxsivKjPQMFna_L3N5jgAAAAI [31-05-2022 03:12:04]14433: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [31-05-2022 03:12:04]14433: WAF :: fetched 1 new logs [31-05-2022 03:13:01]17861: WAF :: fetched 1 new logs [31-05-2022 03:16:01]28390: WAF :: fetched 1 new logs [31-05-2022 03:17:02]31890: WAF :: fetched 2 new logs [31-05-2022 03:18:01]2997: WAF :: fetched 1 new logs [31-05-2022 03:20:02]9967: WAF :: fetched 1 new logs [31-05-2022 03:21:01]13432: WAF :: fetched 4 new logs [31-05-2022 03:22:02]17092: WAF :: fetched 1 new logs [31-05-2022 03:24:02]23998: WAF :: fetched 1 new logs [31-05-2022 03:26:01]30910: WAF :: fetched 1 new logs [31-05-2022 03:27:01]2042: WAF :: fetched 1 new logs [31-05-2022 03:30:01]12456: WAF :: fetched 1 new logs [31-05-2022 03:31:01]15939: WAF :: fetched 1 new logs [31-05-2022 03:33:01]22885: WAF :: fetched 2 new logs [31-05-2022 03:35:01]9146: WAF :: fetched 1 new logs [31-05-2022 03:36:01]25722: WAF :: fetched 1 new logs [31-05-2022 03:37:02]6558: WAF :: fetched 4 new logs [31-05-2022 03:38:01]9952: WAF :: fetched 4 new logs [31-05-2022 03:41:02]20347: Checking for user cron vulnerabilities [31-05-2022 03:42:01]23752: WAF :: fetched 2 new logs [31-05-2022 03:44:01]30898: Checking ditributed CMS bruteforce attacks [31-05-2022 03:48:02]12483: WAF :: fetched 2 new logs [31-05-2022 03:50:01]19587: WAF :: fetched 1 new logs [31-05-2022 03:51:02]23082: WAF :: fetched 3 new logs [31-05-2022 03:55:02]4740: WAF :: fetched 2 new logs [31-05-2022 03:56:01]8210: WAF :: fetched 1 new logs [31-05-2022 03:58:02]15067: WAF :: fetched 3 new logs [31-05-2022 04:00:02]21735: WAF :: fetched 1 new logs [31-05-2022 04:01:01]25693: WAF :: fetched 1 new logs [31-05-2022 04:02:02]29232: WAF :: fetched 1 new logs [31-05-2022 04:06:01]10945: WAF :: fetched 3 new logs [31-05-2022 04:08:02]17900: WAF :: fetched 1 new logs [31-05-2022 04:09:01]21360: WAF :: fetched 5 new logs [31-05-2022 04:11:01]28269: WAF :: fetched 1 new logs [31-05-2022 04:12:02]31897: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653981122 [31-05-2022 04:12:02]31897: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 04:12:04]31897: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 04:12:04]31897: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-0412/20220531-041202-YpW_ws0YVsAGzTrcTG3hZAAAABg [31-05-2022 04:12:04]31897: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 04:12:04]31897: WAF :: fetched 47 new logs [31-05-2022 04:14:01]6545: WAF :: fetched 1 new logs [31-05-2022 04:15:02]10110: WAF :: fetched 1 new logs [31-05-2022 04:16:01]13576: WAF :: fetched 1 new logs [31-05-2022 04:18:02]20656: WAF :: fetched 1 new logs [31-05-2022 04:19:01]24163: WAF :: fetched 1 new logs [31-05-2022 04:21:01]31253: WAF :: fetched 2 new logs [31-05-2022 04:23:02]6041: WAF :: fetched 6 new logs [31-05-2022 04:27:02]20121: WAF :: fetched 1 new logs [31-05-2022 04:28:01]23555: WAF :: fetched 1 new logs [31-05-2022 04:29:02]27245: WAF :: fetched 5 new logs [31-05-2022 04:31:01]1799: WAF :: fetched 1 new logs [31-05-2022 04:32:02]5317: WAF :: fetched 1 new logs [31-05-2022 04:36:01]19196: WAF :: fetched 1 new logs [31-05-2022 04:38:01]26000: WAF :: fetched 2 new logs [31-05-2022 04:39:02]29641: WAF :: fetched 3 new logs [31-05-2022 04:40:01]829: WAF :: fetched 3 new logs [31-05-2022 04:41:02]4412: WAF :: fetched 2 new logs [31-05-2022 04:41:02]4412: Checking for user cron vulnerabilities [31-05-2022 04:44:02]15073: Checking ditributed CMS bruteforce attacks [31-05-2022 04:45:02]18673: WAF :: fetched 2 new logs [31-05-2022 04:48:01]29159: WAF :: fetched 2 new logs [31-05-2022 04:51:01]7481: WAF :: fetched 2 new logs [31-05-2022 04:53:01]14665: WAF :: fetched 1 new logs [31-05-2022 04:55:01]21799: WAF :: fetched 1 new logs [31-05-2022 04:56:01]25276: WAF :: fetched 1 new logs [31-05-2022 05:01:02]10699: WAF :: fetched 3 new logs [31-05-2022 05:01:43]10703: Starting daily scan on files updated in last 24 hrs [31-05-2022 05:02:01]14175: WAF :: fetched 1 new logs [31-05-2022 05:06:02]28771: WAF :: fetched 3 new logs [31-05-2022 05:07:01]32331: WAF :: fetched 1 new logs [31-05-2022 05:09:01]7049: WAF :: fetched 1 new logs [31-05-2022 05:10:01]10802: WAF :: fetched 3 new logs [31-05-2022 05:12:01]17917: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653984721 [31-05-2022 05:12:01]17917: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 05:12:03]17917: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 05:12:04]17917: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-0512/20220531-051201-YpXN0ekB-sTiEQV-0Vk1uAAAABA [31-05-2022 05:12:04]17917: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [31-05-2022 05:12:04]17917: WAF :: fetched 1 new logs [31-05-2022 05:15:01]28313: WAF :: fetched 1 new logs [31-05-2022 05:18:02]6445: WAF :: fetched 1 new logs [31-05-2022 05:19:01]9916: WAF :: fetched 2 new logs [31-05-2022 05:23:01]23985: WAF :: fetched 2 new logs [31-05-2022 05:24:02]27657: WAF :: fetched 3 new logs [31-05-2022 05:28:02]9134: WAF :: fetched 1 new logs [31-05-2022 05:30:01]16087: WAF :: fetched 1 new logs [31-05-2022 05:32:01]23007: WAF :: fetched 1 new logs [31-05-2022 05:33:01]26467: WAF :: fetched 1 new logs [31-05-2022 05:35:01]1123: WAF :: fetched 1 new logs [31-05-2022 05:37:01]8086: WAF :: fetched 1 new logs [31-05-2022 05:41:02]22143: WAF :: fetched 1 new logs [31-05-2022 05:41:02]22143: Checking for user cron vulnerabilities [31-05-2022 05:44:01]32542: Checking ditributed CMS bruteforce attacks [31-05-2022 05:46:02]7134: WAF :: fetched 1 new logs [31-05-2022 05:47:02]10558: WAF :: fetched 3 new logs [31-05-2022 05:53:01]31587: WAF :: fetched 1 new logs [31-05-2022 05:54:02]2776: WAF :: fetched 2 new logs [31-05-2022 05:58:01]16559: WAF :: fetched 1 new logs [31-05-2022 05:59:02]19985: WAF :: fetched 1 new logs [31-05-2022 06:01:02]27176: WAF :: fetched 4 new logs [31-05-2022 06:02:01]30644: WAF :: fetched 1 new logs [31-05-2022 06:06:02]12379: WAF :: fetched 1 new logs [31-05-2022 06:07:01]15781: WAF :: fetched 2 new logs [31-05-2022 06:09:01]22653: WAF :: fetched 2 new logs [31-05-2022 06:12:02]921: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653988322 [31-05-2022 06:12:02]921: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 06:12:04]921: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 06:12:04]921: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-0612/20220531-061202-YpXb4mU0pywR_omSRtgZHAAAAA8 [31-05-2022 06:12:04]921: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 06:12:04]921: WAF :: fetched 31 new logs [31-05-2022 06:14:02]7982: WAF :: fetched 1 new logs [31-05-2022 06:20:01]29026: WAF :: fetched 1 new logs [31-05-2022 06:21:02]32632: WAF :: fetched 1 new logs [31-05-2022 06:29:02]28047: WAF :: fetched 3 new logs [31-05-2022 06:30:02]31639: WAF :: fetched 5 new logs [31-05-2022 06:38:02]26930: WAF :: fetched 1 new logs [31-05-2022 06:39:01]30372: WAF :: fetched 2 new logs [31-05-2022 06:40:02]1567: WAF :: fetched 1 new logs [31-05-2022 06:41:01]5047: Checking for user cron vulnerabilities [31-05-2022 06:43:01]11978: WAF :: fetched 1 new logs [31-05-2022 06:44:02]15494: Checking ditributed CMS bruteforce attacks [31-05-2022 06:44:02]15494: WAF :: fetched 1 new logs [31-05-2022 06:47:02]25981: WAF :: fetched 1 new logs [31-05-2022 06:49:01]416: WAF :: fetched 1 new logs [31-05-2022 06:50:02]4122: WAF :: fetched 4 new logs [31-05-2022 06:56:02]24964: WAF :: fetched 4 new logs [31-05-2022 06:57:01]28383: WAF :: fetched 4 new logs [31-05-2022 06:58:02]31855: WAF :: fetched 7 new logs [31-05-2022 06:59:02]2930: WAF :: fetched 3 new logs [31-05-2022 07:00:02]6163: WAF :: fetched 1 new logs [31-05-2022 07:01:01]10076: WAF :: fetched 3 new logs [31-05-2022 07:02:02]13592: WAF :: fetched 1 new logs [31-05-2022 07:03:01]17039: WAF :: fetched 5 new logs [31-05-2022 07:04:02]20536: WAF :: fetched 4 new logs [31-05-2022 07:05:01]23878: WAF :: fetched 3 new logs [31-05-2022 07:06:02]27515: WAF :: fetched 3 new logs [31-05-2022 07:07:02]30968: WAF :: fetched 8 new logs [31-05-2022 07:08:01]1993: WAF :: fetched 2 new logs [31-05-2022 07:09:02]5525: WAF :: fetched 7 new logs [31-05-2022 07:10:01]9016: WAF :: fetched 4 new logs [31-05-2022 07:11:01]12478: WAF :: fetched 2 new logs [31-05-2022 07:12:02]15975: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653991922 [31-05-2022 07:12:02]15975: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 07:12:04]15975: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 07:12:04]15975: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-0712/20220531-071202-YpXp8octl3CvHgM-lxp4wQAAAAQ [31-05-2022 07:12:04]15975: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 07:12:04]15975: WAF :: fetched 2 new logs [31-05-2022 07:14:02]22805: WAF :: fetched 1 new logs [31-05-2022 07:16:01]29844: WAF :: fetched 1 new logs [31-05-2022 07:18:01]4432: WAF :: fetched 1 new logs [31-05-2022 07:19:02]7899: WAF :: fetched 2 new logs [31-05-2022 07:22:01]18414: WAF :: fetched 1 new logs [31-05-2022 07:23:02]21921: WAF :: fetched 2 new logs [31-05-2022 07:35:02]31660: WAF :: fetched 2 new logs [31-05-2022 07:37:01]6360: WAF :: fetched 2 new logs [31-05-2022 07:38:02]9887: WAF :: fetched 1 new logs [31-05-2022 07:41:02]20413: Checking for user cron vulnerabilities [31-05-2022 07:43:02]27355: WAF :: fetched 1 new logs [31-05-2022 07:44:01]30840: Checking ditributed CMS bruteforce attacks [31-05-2022 07:45:01]: Checking for definition updates [31-05-2022 07:45:01]2065: WAF :: fetched 4 new logs [31-05-2022 07:46:02]5669: WAF :: fetched 1 new logs [31-05-2022 07:47:01]9169: WAF :: fetched 1 new logs [31-05-2022 07:52:01]26634: WAF :: fetched 3 new logs [31-05-2022 07:54:02]1202: WAF :: fetched 1 new logs [31-05-2022 07:56:02]8345: WAF :: fetched 1 new logs [31-05-2022 07:57:01]11808: WAF :: fetched 3 new logs [31-05-2022 08:00:02]22004: WAF :: fetched 4 new logs [31-05-2022 08:03:02]577: WAF :: fetched 1 new logs [31-05-2022 08:10:02]25158: WAF :: fetched 1 new logs [31-05-2022 08:12:02]32211: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653995522 [31-05-2022 08:12:02]32211: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 08:12:04]32211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 08:12:04]32211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-0812/20220531-081202-YpX4Am4--BL95MdEvIV4QgAAABU [31-05-2022 08:12:04]32211: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 08:12:04]32211: WAF :: fetched 1 new logs [31-05-2022 08:16:02]13823: WAF :: fetched 1 new logs [31-05-2022 08:19:01]24165: WAF :: fetched 1 new logs [31-05-2022 08:22:02]2389: WAF :: fetched 1 new logs [31-05-2022 08:25:01]12863: WAF :: fetched 1 new logs [31-05-2022 08:28:02]23407: WAF :: fetched 1 new logs [31-05-2022 08:29:01]26802: WAF :: fetched 2 new logs [31-05-2022 08:30:01]30384: WAF :: fetched 1 new logs [31-05-2022 08:32:02]5044: WAF :: fetched 1 new logs [31-05-2022 08:34:01]11936: WAF :: fetched 2 new logs [31-05-2022 08:35:02]15555: WAF :: fetched 1 new logs [31-05-2022 08:36:01]19036: WAF :: fetched 4 new logs [31-05-2022 08:38:02]25929: WAF :: fetched 1 new logs [31-05-2022 08:41:02]4200: Checking for user cron vulnerabilities [31-05-2022 08:42:02]7671: WAF :: fetched 1 new logs [31-05-2022 08:44:01]14533: Checking ditributed CMS bruteforce attacks [31-05-2022 08:50:01]3269: WAF :: fetched 1 new logs [31-05-2022 08:51:02]6843: WAF :: fetched 1 new logs [31-05-2022 08:56:02]24496: WAF :: fetched 1 new logs [31-05-2022 08:59:02]2608: WAF :: fetched 1 new logs [31-05-2022 09:00:02]5889: WAF :: fetched 1 new logs [31-05-2022 09:03:02]17034: WAF :: fetched 3 new logs [31-05-2022 09:05:02]24160: WAF :: fetched 2 new logs [31-05-2022 09:07:01]31213: WAF :: fetched 5 new logs [31-05-2022 09:08:02]2361: WAF :: fetched 1 new logs [31-05-2022 09:11:02]13026: WAF :: fetched 1 new logs [31-05-2022 09:12:01]16485: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1653999121 [31-05-2022 09:12:01]16485: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 09:12:03]16485: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 09:12:04]16485: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-0912/20220531-091201-YpYGEdesc2DKWJ8Dc-RddQAAAAI [31-05-2022 09:12:04]16485: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 09:12:04]16485: WAF :: fetched 1 new logs [31-05-2022 09:14:01]23496: WAF :: fetched 1 new logs [31-05-2022 09:15:02]27097: WAF :: fetched 4 new logs [31-05-2022 09:16:01]30666: WAF :: fetched 4 new logs [31-05-2022 09:17:01]1788: WAF :: fetched 2 new logs [31-05-2022 09:23:02]22993: WAF :: fetched 2 new logs [31-05-2022 09:27:01]5146: WAF :: fetched 12 new logs [31-05-2022 09:28:02]8695: WAF :: fetched 8 new logs [31-05-2022 09:29:01]12212: WAF :: fetched 2 new logs [31-05-2022 09:30:02]15863: WAF :: fetched 1 new logs [31-05-2022 09:31:02]19414: WAF :: fetched 2 new logs [31-05-2022 09:32:01]22913: WAF :: fetched 1 new logs [31-05-2022 09:34:01]30037: WAF :: fetched 7 new logs [31-05-2022 09:35:01]1241: WAF :: fetched 3 new logs [31-05-2022 09:36:02]5011: WAF :: fetched 3 new logs [31-05-2022 09:37:02]8631: WAF :: fetched 4 new logs [31-05-2022 09:38:01]12242: WAF :: fetched 4 new logs [31-05-2022 09:39:01]15759: WAF :: fetched 1 new logs [31-05-2022 09:40:02]19816: WAF :: fetched 2 new logs [31-05-2022 09:41:02]23876: WAF :: fetched 1 new logs [31-05-2022 09:41:02]23876: Checking for user cron vulnerabilities [31-05-2022 09:44:02]2736: Checking ditributed CMS bruteforce attacks [31-05-2022 09:44:02]2736: WAF :: fetched 2 new logs [31-05-2022 09:45:01]6422: WAF :: fetched 2 new logs [31-05-2022 09:46:02]10134: WAF :: fetched 3 new logs [31-05-2022 09:47:01]13660: WAF :: fetched 3 new logs [31-05-2022 09:50:01]24480: WAF :: fetched 3 new logs [31-05-2022 09:51:02]28181: WAF :: fetched 1 new logs [31-05-2022 09:52:02]31783: WAF :: fetched 1 new logs [31-05-2022 09:57:01]17629: WAF :: fetched 1 new logs [31-05-2022 10:00:01]28419: WAF :: fetched 1 new logs [31-05-2022 10:03:02]7237: WAF :: fetched 2 new logs [31-05-2022 10:04:01]10767: WAF :: fetched 2 new logs [31-05-2022 10:05:02]14464: WAF :: fetched 2 new logs [31-05-2022 10:06:02]18080: WAF :: fetched 2 new logs [31-05-2022 10:07:01]21583: WAF :: fetched 1 new logs [31-05-2022 10:08:01]25072: WAF :: fetched 2 new logs [31-05-2022 10:09:01]28753: WAF :: fetched 3 new logs [31-05-2022 10:12:01]7306: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654002721 [31-05-2022 10:12:01]7306: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 10:12:03]7306: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 10:12:04]7306: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-1012/20220531-101201-YpYUIdOWV0sg0s6g1X4AyQAAAA8 [31-05-2022 10:12:04]7306: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 10:12:04]7306: WAF :: fetched 1 new logs [31-05-2022 10:14:01]14390: WAF :: fetched 1 new logs [31-05-2022 10:15:02]18281: WAF :: fetched 1 new logs [31-05-2022 10:16:02]21842: WAF :: fetched 1 new logs [31-05-2022 10:17:01]25432: WAF :: fetched 2 new logs [31-05-2022 10:19:02]32673: WAF :: fetched 1 new logs [31-05-2022 10:21:02]7716: WAF :: fetched 1 new logs [31-05-2022 10:22:02]11276: WAF :: fetched 1 new logs [31-05-2022 10:23:01]14874: WAF :: fetched 2 new logs [31-05-2022 10:24:02]18449: WAF :: fetched 2 new logs [31-05-2022 10:25:02]22165: WAF :: fetched 8 new logs [31-05-2022 10:29:02]4431: WAF :: fetched 3 new logs [31-05-2022 10:30:01]8170: WAF :: fetched 5 new logs [31-05-2022 10:34:02]22484: WAF :: fetched 1 new logs [31-05-2022 10:35:01]26211: WAF :: fetched 2 new logs [31-05-2022 10:36:02]29905: WAF :: fetched 2 new logs [31-05-2022 10:41:02]15753: Checking for user cron vulnerabilities [31-05-2022 10:44:01]26470: Checking ditributed CMS bruteforce attacks [31-05-2022 10:44:02]26470: WAF :: fetched 2 new logs [31-05-2022 10:45:01]30175: WAF :: fetched 2 new logs [31-05-2022 10:46:02]1587: WAF :: fetched 1 new logs [31-05-2022 10:47:01]5166: WAF :: fetched 3 new logs [31-05-2022 10:49:01]12497: WAF :: fetched 2 new logs [31-05-2022 10:50:01]16209: WAF :: fetched 3 new logs [31-05-2022 10:51:01]19988: WAF :: fetched 1 new logs [31-05-2022 10:55:02]2307: WAF :: fetched 2 new logs [31-05-2022 10:57:02]9854: WAF :: fetched 3 new logs [31-05-2022 10:58:01]13467: WAF :: fetched 2 new logs [31-05-2022 10:59:02]17181: WAF :: fetched 2 new logs [31-05-2022 11:02:01]28498: WAF :: fetched 1 new logs [31-05-2022 11:04:01]3203: WAF :: fetched 1 new logs [31-05-2022 11:05:01]6862: WAF :: fetched 1 new logs [31-05-2022 11:07:01]14216: WAF :: fetched 1 new logs [31-05-2022 11:07:42]14378: Performed RBL check for 23.111.136.34. [31-05-2022 11:08:02]17838: WAF :: fetched 1 new logs [31-05-2022 11:09:02]21398: WAF :: fetched 1 new logs [31-05-2022 11:11:01]28613: WAF :: fetched 1 new logs [31-05-2022 11:12:01]32096: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654006321 [31-05-2022 11:12:01]32096: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 11:12:03]32096: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 11:12:03]32096: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-1112/20220531-111201-YpYiMfMxb9cLEFRHEm7vQgAAAAc [31-05-2022 11:12:03]32096: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 11:12:04]32096: WAF :: fetched 1 new logs [31-05-2022 11:13:01]3330: WAF :: fetched 1 new logs [31-05-2022 11:14:02]6895: WAF :: fetched 3 new logs [31-05-2022 11:15:02]10473: WAF :: fetched 4 new logs [31-05-2022 11:16:01]14255: WAF :: fetched 1 new logs [31-05-2022 11:17:02]17928: WAF :: fetched 2 new logs [31-05-2022 11:18:02]21521: WAF :: fetched 2 new logs [31-05-2022 11:19:02]25104: WAF :: fetched 2 new logs [31-05-2022 11:21:01]32440: WAF :: fetched 1 new logs [31-05-2022 11:22:02]3791: WAF :: fetched 3 new logs [31-05-2022 11:23:02]7380: WAF :: fetched 2 new logs [31-05-2022 11:24:01]11034: WAF :: fetched 7 new logs [31-05-2022 11:25:02]14666: WAF :: fetched 4 new logs [31-05-2022 11:26:01]18467: WAF :: fetched 2 new logs [31-05-2022 11:27:01]22139: WAF :: fetched 5 new logs [31-05-2022 11:28:02]25774: WAF :: fetched 5 new logs [31-05-2022 11:29:01]29312: WAF :: fetched 2 new logs [31-05-2022 11:30:01]383: WAF :: fetched 2 new logs [31-05-2022 11:31:02]4342: WAF :: fetched 3 new logs [31-05-2022 11:33:02]11643: WAF :: fetched 1 new logs [31-05-2022 11:34:02]15327: WAF :: fetched 1 new logs [31-05-2022 11:35:01]18953: WAF :: fetched 2 new logs [31-05-2022 11:37:01]26287: WAF :: fetched 1 new logs [31-05-2022 11:38:01]29833: WAF :: fetched 2 new logs [31-05-2022 11:39:02]1106: WAF :: fetched 2 new logs [31-05-2022 11:40:02]4757: WAF :: fetched 1 new logs [31-05-2022 11:41:01]8518: WAF :: fetched 1 new logs [31-05-2022 11:41:01]8518: Checking for user cron vulnerabilities [31-05-2022 11:43:01]15809: WAF :: fetched 7 new logs [31-05-2022 11:44:02]19383: Checking ditributed CMS bruteforce attacks [31-05-2022 11:44:02]19383: WAF :: fetched 3 new logs [31-05-2022 11:45:02]22888: WAF :: fetched 1 new logs [31-05-2022 11:46:02]26619: WAF :: fetched 5 new logs [31-05-2022 11:47:01]30150: WAF :: fetched 4 new logs [31-05-2022 11:48:02]1369: WAF :: fetched 2 new logs [31-05-2022 11:49:01]4939: WAF :: fetched 2 new logs [31-05-2022 11:54:02]22881: WAF :: fetched 1 new logs [31-05-2022 11:56:02]30079: WAF :: fetched 2 new logs [31-05-2022 11:57:01]1144: WAF :: fetched 1 new logs [31-05-2022 11:58:02]4698: WAF :: fetched 5 new logs [31-05-2022 11:59:01]8166: WAF :: fetched 8 new logs [31-05-2022 12:00:02]11433: WAF :: fetched 1 new logs [31-05-2022 12:01:02]15500: WAF :: fetched 1 new logs [31-05-2022 12:02:01]19111: WAF :: fetched 2 new logs [31-05-2022 12:03:01]22566: WAF :: fetched 4 new logs [31-05-2022 12:05:02]29616: WAF :: fetched 1 new logs [31-05-2022 12:09:02]11366: WAF :: fetched 2 new logs [31-05-2022 12:11:01]18503: WAF :: fetched 1 new logs [31-05-2022 12:12:02]22032: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654009922 [31-05-2022 12:12:02]22032: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 12:12:04]22032: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 12:12:04]22032: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-1212/20220531-121202-YpYwQuUCnYYoZTDdj_naxwAAAC4 [31-05-2022 12:12:04]22032: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 12:12:04]22032: WAF :: fetched 1 new logs [31-05-2022 12:13:01]25937: WAF :: fetched 2 new logs [31-05-2022 12:14:01]29948: WAF :: fetched 2 new logs [31-05-2022 12:16:01]4759: WAF :: fetched 2 new logs [31-05-2022 12:21:01]22418: WAF :: fetched 2 new logs [31-05-2022 12:25:01]3999: WAF :: fetched 2 new logs [31-05-2022 12:29:02]17822: WAF :: fetched 13 new logs [31-05-2022 12:30:02]21189: WAF :: fetched 23 new logs [31-05-2022 12:31:01]24734: WAF :: fetched 12 new logs [31-05-2022 12:32:01]28162: WAF :: fetched 54 new logs [31-05-2022 12:33:01]31622: WAF :: fetched 23 new logs [31-05-2022 12:34:02]2752: WAF :: fetched 21 new logs [31-05-2022 12:35:02]6146: WAF :: fetched 11 new logs [31-05-2022 12:36:01]9678: WAF :: fetched 7 new logs [31-05-2022 12:38:02]16567: WAF :: fetched 1 new logs [31-05-2022 12:40:02]23402: WAF :: fetched 26 new logs [31-05-2022 12:41:01]27003: WAF :: fetched 6 new logs [31-05-2022 12:41:01]27003: Checking for user cron vulnerabilities [31-05-2022 12:44:01]4951: Checking ditributed CMS bruteforce attacks [31-05-2022 12:44:01]4951: WAF :: fetched 2 new logs [31-05-2022 12:45:02]: Checking for software updates [31-05-2022 12:45:02]8386: WAF :: fetched 2 new logs [31-05-2022 12:47:02]15423: WAF :: fetched 1 new logs [31-05-2022 12:49:01]22329: WAF :: fetched 1 new logs [31-05-2022 12:50:02]25790: WAF :: fetched 1 new logs [31-05-2022 12:52:02]364: WAF :: fetched 2 new logs [31-05-2022 12:54:01]7319: WAF :: fetched 3 new logs [31-05-2022 12:55:02]10824: WAF :: fetched 1 new logs [31-05-2022 12:57:02]17827: WAF :: fetched 2 new logs [31-05-2022 12:58:01]21235: WAF :: fetched 1 new logs [31-05-2022 13:00:01]27814: WAF :: fetched 1 new logs [31-05-2022 13:03:01]6496: WAF :: fetched 1 new logs [31-05-2022 13:05:02]13410: WAF :: fetched 1 new logs [31-05-2022 13:09:02]27376: WAF :: fetched 1 new logs [31-05-2022 13:12:02]5640: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654013522 [31-05-2022 13:12:02]5640: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 13:12:04]5640: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 13:12:04]5640: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-1312/20220531-131202-YpY-Ulyt_e8cbpUfkpul-QAAACc [31-05-2022 13:12:04]5640: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 13:12:04]5640: WAF :: fetched 1 new logs [31-05-2022 13:13:02]9047: WAF :: fetched 2 new logs [31-05-2022 13:14:01]12489: WAF :: fetched 1 new logs [31-05-2022 13:15:01]15918: WAF :: fetched 1 new logs [31-05-2022 13:20:02]879: WAF :: fetched 1 new logs [31-05-2022 13:21:01]4572: WAF :: fetched 3 new logs [31-05-2022 13:24:01]14949: WAF :: fetched 4 new logs [31-05-2022 13:26:01]21999: WAF :: fetched 2 new logs [31-05-2022 13:27:02]25435: WAF :: fetched 1 new logs [31-05-2022 13:29:01]32297: WAF :: fetched 3 new logs [31-05-2022 13:30:02]3452: WAF :: fetched 9 new logs [31-05-2022 13:33:02]14044: WAF :: fetched 3 new logs [31-05-2022 13:34:02]17483: WAF :: fetched 1 new logs [31-05-2022 13:38:01]31622: WAF :: fetched 3 new logs [31-05-2022 13:39:01]2724: WAF :: fetched 4 new logs [31-05-2022 13:40:02]6249: WAF :: fetched 2 new logs [31-05-2022 13:41:02]9926: Checking for user cron vulnerabilities [31-05-2022 13:42:01]13383: WAF :: fetched 2 new logs [31-05-2022 13:43:02]16876: WAF :: fetched 1 new logs [31-05-2022 13:44:01]20342: Checking ditributed CMS bruteforce attacks [31-05-2022 13:44:02]20342: WAF :: fetched 2 new logs [31-05-2022 13:45:01]: Checking for definition updates [31-05-2022 13:45:01]23742: WAF :: fetched 1 new logs [31-05-2022 13:46:02]27409: WAF :: fetched 1 new logs [31-05-2022 13:48:02]2085: WAF :: fetched 2 new logs [31-05-2022 13:50:01]9033: WAF :: fetched 5 new logs [31-05-2022 13:56:02]30411: WAF :: fetched 1 new logs [31-05-2022 14:00:02]11942: WAF :: fetched 4 new logs [31-05-2022 14:02:02]19637: WAF :: fetched 2 new logs [31-05-2022 14:03:01]23120: WAF :: fetched 2 new logs [31-05-2022 14:06:01]1402: WAF :: fetched 5 new logs [31-05-2022 14:07:02]4971: WAF :: fetched 2 new logs [31-05-2022 14:09:01]11922: WAF :: fetched 2 new logs [31-05-2022 14:10:02]15387: WAF :: fetched 4 new logs [31-05-2022 14:11:02]19056: WAF :: fetched 1 new logs [31-05-2022 14:12:02]22599: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654017122 [31-05-2022 14:12:02]22599: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 14:12:04]22599: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 14:12:04]22599: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-1412/20220531-141202-YpZMYm6Dn7njFhgSvLLcBwAAADU [31-05-2022 14:12:04]22599: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 14:12:04]22599: WAF :: fetched 2 new logs [31-05-2022 14:13:01]26081: WAF :: fetched 3 new logs [31-05-2022 14:14:01]29552: WAF :: fetched 1 new logs [31-05-2022 14:17:01]7762: WAF :: fetched 1 new logs [31-05-2022 14:19:02]14791: WAF :: fetched 2 new logs [31-05-2022 14:20:01]18270: WAF :: fetched 1 new logs [31-05-2022 14:21:02]21938: WAF :: fetched 4 new logs [31-05-2022 14:23:01]28900: WAF :: fetched 1 new logs [31-05-2022 14:24:02]32398: WAF :: fetched 2 new logs [31-05-2022 14:28:01]14422: WAF :: fetched 2 new logs [31-05-2022 14:29:01]17913: WAF :: fetched 2 new logs [31-05-2022 14:29:01]17912: httpd.conf changed. Refreshing watchlist. [31-05-2022 14:33:02]32342: httpd.conf changed. Refreshing watchlist. [31-05-2022 14:34:02]3552: WAF :: fetched 1 new logs [31-05-2022 14:36:02]10726: WAF :: fetched 1 new logs [31-05-2022 14:37:02]14231: WAF :: fetched 6 new logs [31-05-2022 14:38:01]17689: WAF :: fetched 1 new logs [31-05-2022 14:41:01]28451: Checking for user cron vulnerabilities [31-05-2022 14:42:02]32179: WAF :: fetched 1 new logs [31-05-2022 14:43:02]3426: WAF :: fetched 2 new logs [31-05-2022 14:44:01]6907: Checking ditributed CMS bruteforce attacks [31-05-2022 14:44:01]6907: WAF :: fetched 4 new logs [31-05-2022 14:45:01]10537: WAF :: fetched 1 new logs [31-05-2022 14:48:01]21255: WAF :: fetched 2 new logs [31-05-2022 14:53:01]6865: WAF :: fetched 1 new logs [31-05-2022 14:53:02]6862: Updated license status via CDN [31-05-2022 14:53:02]6862: httpd.conf changed. Refreshing watchlist. [31-05-2022 14:54:02]10421: WAF :: fetched 1 new logs [31-05-2022 14:57:01]21226: WAF :: fetched 1 new logs [31-05-2022 14:58:01]24702: WAF :: fetched 1 new logs [31-05-2022 15:01:01]3310: Reseting cPGuard inotify settings [31-05-2022 15:02:02]6842: WAF :: fetched 1 new logs [31-05-2022 15:04:01]13816: WAF :: fetched 1 new logs [31-05-2022 15:08:01]27824: WAF :: fetched 3 new logs [31-05-2022 15:12:01]9637: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654020721 [31-05-2022 15:12:01]9637: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 15:12:03]9637: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 15:12:03]9637: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-1512/20220531-151201-YpZacZevTobSxX8iQ1WXBgAAABo [31-05-2022 15:12:03]9637: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 15:12:03]9637: WAF :: fetched 1 new logs [31-05-2022 15:18:01]30751: WAF :: fetched 1 new logs [31-05-2022 15:21:01]9106: WAF :: fetched 1 new logs [31-05-2022 15:23:02]16109: WAF :: fetched 2 new logs [31-05-2022 15:26:01]26822: WAF :: fetched 4 new logs [31-05-2022 15:27:01]30316: WAF :: fetched 1 new logs [31-05-2022 15:31:01]11967: WAF :: fetched 2 new logs [31-05-2022 15:32:02]15842: WAF :: fetched 2 new logs [31-05-2022 15:33:01]19282: WAF :: fetched 1 new logs [31-05-2022 15:34:02]22843: WAF :: fetched 8 new logs [31-05-2022 15:35:01]26324: WAF :: fetched 3 new logs [31-05-2022 15:36:01]29945: WAF :: fetched 2 new logs [31-05-2022 15:37:02]1108: WAF :: fetched 2 new logs [31-05-2022 15:38:01]4628: WAF :: fetched 2 new logs [31-05-2022 15:41:02]15262: Checking for user cron vulnerabilities [31-05-2022 15:42:01]18750: WAF :: fetched 5 new logs [31-05-2022 15:43:02]22314: WAF :: fetched 2 new logs [31-05-2022 15:44:01]25800: Checking ditributed CMS bruteforce attacks [31-05-2022 15:44:02]25800: WAF :: fetched 2 new logs [31-05-2022 15:46:01]537: WAF :: fetched 3 new logs [31-05-2022 15:50:02]14771: WAF :: fetched 2 new logs [31-05-2022 15:51:01]18390: WAF :: fetched 4 new logs [31-05-2022 15:52:01]21901: WAF :: fetched 1 new logs [31-05-2022 15:56:02]3951: WAF :: fetched 4 new logs [31-05-2022 15:57:01]7511: WAF :: fetched 1 new logs [31-05-2022 15:58:01]11048: WAF :: fetched 1 new logs [31-05-2022 16:02:02]25488: WAF :: fetched 2 new logs [31-05-2022 16:03:02]29078: WAF :: fetched 1 new logs [31-05-2022 16:04:02]32590: WAF :: fetched 1 new logs [31-05-2022 16:04:43]32594: Imported 1 logs from cpguard.log into database [31-05-2022 16:04:43]32594: Sending email for 1 detections [31-05-2022 16:09:01]18142: WAF :: fetched 1 new logs [31-05-2022 16:10:02]21638: WAF :: fetched 3 new logs [31-05-2022 16:11:02]25178: WAF :: fetched 5 new logs [31-05-2022 16:12:01]28879: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654024321 [31-05-2022 16:12:01]28879: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 16:12:03]28881: Imported 1 logs from cpguard.log into database [31-05-2022 16:12:03]28879: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 16:12:03]28879: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-1612/20220531-161201-YpZogT8V28kfMa57l0aYqAAAAEU [31-05-2022 16:12:03]28879: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 16:12:04]28879: WAF :: fetched 28 new logs [31-05-2022 16:12:43]28881: Sending email for 1 detections [31-05-2022 16:15:02]7307: WAF :: fetched 4 new logs [31-05-2022 16:16:01]10890: WAF :: fetched 1 new logs [31-05-2022 16:18:01]17904: WAF :: fetched 3 new logs [31-05-2022 16:19:02]21434: WAF :: fetched 1 new logs [31-05-2022 16:22:01]32190: WAF :: fetched 4 new logs [31-05-2022 16:25:02]10410: WAF :: fetched 1 new logs [31-05-2022 16:26:02]14027: WAF :: fetched 1 new logs [31-05-2022 16:27:01]17655: WAF :: fetched 3 new logs [31-05-2022 16:28:01]21241: WAF :: fetched 6 new logs [31-05-2022 16:34:02]10303: WAF :: fetched 3 new logs [31-05-2022 16:36:01]17337: WAF :: fetched 1 new logs [31-05-2022 16:38:01]24374: WAF :: fetched 1 new logs [31-05-2022 16:39:02]27877: WAF :: fetched 2 new logs [31-05-2022 16:41:01]2583: Checking for user cron vulnerabilities [31-05-2022 16:42:02]6202: WAF :: fetched 1 new logs [31-05-2022 16:43:01]9714: WAF :: fetched 6 new logs [31-05-2022 16:44:01]13178: Checking ditributed CMS bruteforce attacks [31-05-2022 16:45:02]16726: WAF :: fetched 1 new logs [31-05-2022 16:46:01]20235: WAF :: fetched 4 new logs [31-05-2022 16:47:01]23874: WAF :: fetched 2 new logs [31-05-2022 16:48:02]27423: WAF :: fetched 2 new logs [31-05-2022 16:49:01]30902: WAF :: fetched 4 new logs [31-05-2022 16:49:01]30903: httpd.conf changed. Refreshing watchlist. [31-05-2022 16:50:02]2085: WAF :: fetched 3 new logs [31-05-2022 16:51:02]5602: WAF :: fetched 1 new logs [31-05-2022 16:54:01]16119: WAF :: fetched 1 new logs [31-05-2022 16:55:02]19670: WAF :: fetched 1 new logs [31-05-2022 16:56:01]23288: WAF :: fetched 1 new logs [31-05-2022 16:57:01]26862: WAF :: fetched 1 new logs [31-05-2022 16:58:01]30422: WAF :: fetched 1 new logs [31-05-2022 16:59:01]1578: WAF :: fetched 2 new logs [31-05-2022 17:01:01]8878: WAF :: fetched 9 new logs [31-05-2022 17:03:02]16045: WAF :: fetched 2 new logs [31-05-2022 17:04:01]19520: WAF :: fetched 2 new logs [31-05-2022 17:06:02]26516: WAF :: fetched 3 new logs [31-05-2022 17:08:01]1129: WAF :: fetched 1 new logs [31-05-2022 17:09:01]4721: WAF :: fetched 3 new logs [31-05-2022 17:12:02]15489: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654027922 [31-05-2022 17:12:02]15489: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 17:12:04]15489: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 17:12:04]15489: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-1712/20220531-171202-YpZ2kmQ7OdncRG91oPEYOgAAABA [31-05-2022 17:12:04]15489: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 17:12:05]15489: WAF :: fetched 2 new logs [31-05-2022 17:14:01]22479: WAF :: fetched 1 new logs [31-05-2022 17:15:02]26019: WAF :: fetched 3 new logs [31-05-2022 17:16:01]29604: WAF :: fetched 4 new logs [31-05-2022 17:19:01]7676: WAF :: fetched 1 new logs [31-05-2022 17:20:01]11191: WAF :: fetched 2 new logs [31-05-2022 17:21:02]14764: WAF :: fetched 3 new logs [31-05-2022 17:22:02]18370: WAF :: fetched 7 new logs [31-05-2022 17:23:01]21877: WAF :: fetched 6 new logs [31-05-2022 17:24:01]25372: WAF :: fetched 1 new logs [31-05-2022 17:26:02]32612: httpd.conf changed. Refreshing watchlist. [31-05-2022 17:27:02]3944: WAF :: fetched 1 new logs [31-05-2022 17:28:01]7394: WAF :: fetched 1 new logs [31-05-2022 17:30:02]14431: WAF :: fetched 1 new logs [31-05-2022 17:34:02]28593: WAF :: fetched 2 new logs [31-05-2022 17:38:01]10283: WAF :: fetched 1 new logs [31-05-2022 17:41:01]20726: WAF :: fetched 2 new logs [31-05-2022 17:41:01]20726: Checking for user cron vulnerabilities [31-05-2022 17:42:02]24283: WAF :: fetched 2 new logs [31-05-2022 17:43:01]27685: WAF :: fetched 2 new logs [31-05-2022 17:44:01]31204: Checking ditributed CMS bruteforce attacks [31-05-2022 17:44:02]31204: WAF :: fetched 1 new logs [31-05-2022 17:45:01]2302: WAF :: fetched 8 new logs [31-05-2022 17:46:02]5886: WAF :: fetched 7 new logs [31-05-2022 17:47:01]9385: WAF :: fetched 1 new logs [31-05-2022 17:48:01]12840: WAF :: fetched 3 new logs [31-05-2022 17:53:01]30245: WAF :: fetched 1 new logs [31-05-2022 17:55:01]4853: WAF :: fetched 4 new logs [31-05-2022 17:57:01]11932: WAF :: fetched 1 new logs [31-05-2022 17:59:02]18777: WAF :: fetched 2 new logs [31-05-2022 18:00:01]21921: WAF :: fetched 2 new logs [31-05-2022 18:01:02]25935: WAF :: fetched 6 new logs [31-05-2022 18:02:02]29509: WAF :: fetched 4 new logs [31-05-2022 18:04:01]4014: WAF :: fetched 1 new logs [31-05-2022 18:05:02]7467: WAF :: fetched 1 new logs [31-05-2022 18:06:01]10919: WAF :: fetched 2 new logs [31-05-2022 18:07:02]14422: WAF :: fetched 1 new logs [31-05-2022 18:08:01]17864: WAF :: fetched 3 new logs [31-05-2022 18:09:01]21390: WAF :: fetched 3 new logs [31-05-2022 18:10:02]24940: WAF :: fetched 3 new logs [31-05-2022 18:11:01]28468: WAF :: fetched 2 new logs [31-05-2022 18:12:02]32035: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654031522 [31-05-2022 18:12:02]32035: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 18:12:04]32035: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 18:12:04]32035: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-1812/20220531-181202-YpaEolZ1_2-ye73v8MrlFAAAAAs [31-05-2022 18:12:04]32035: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 18:12:04]32035: WAF :: fetched 1 new logs [31-05-2022 18:13:02]3173: WAF :: fetched 1 new logs [31-05-2022 18:16:01]13552: WAF :: fetched 1 new logs [31-05-2022 18:19:02]23940: WAF :: fetched 1 new logs [31-05-2022 18:20:01]27371: WAF :: fetched 3 new logs [31-05-2022 18:23:02]5563: WAF :: fetched 1 new logs [31-05-2022 18:27:01]19093: WAF :: fetched 3 new logs [31-05-2022 18:28:02]22808: WAF :: fetched 7 new logs [31-05-2022 18:29:01]26252: WAF :: fetched 2 new logs [31-05-2022 18:30:02]29781: WAF :: fetched 3 new logs [31-05-2022 18:31:01]936: WAF :: fetched 1 new logs [31-05-2022 18:32:02]4629: WAF :: fetched 2 new logs [31-05-2022 18:33:02]8060: WAF :: fetched 1 new logs [31-05-2022 18:35:02]15070: WAF :: fetched 1 new logs [31-05-2022 18:37:02]22058: WAF :: fetched 1 new logs [31-05-2022 18:39:02]28947: WAF :: fetched 1 new logs [31-05-2022 18:41:02]3571: WAF :: fetched 2 new logs [31-05-2022 18:41:02]3571: Checking for user cron vulnerabilities [31-05-2022 18:42:02]7029: WAF :: fetched 2 new logs [31-05-2022 18:43:01]10397: WAF :: fetched 1 new logs [31-05-2022 18:44:01]13878: Checking ditributed CMS bruteforce attacks [31-05-2022 18:44:02]13878: WAF :: fetched 1 new logs [31-05-2022 18:45:01]17266: WAF :: fetched 1 new logs [31-05-2022 18:49:02]31187: WAF :: fetched 2 new logs [31-05-2022 18:50:02]2338: WAF :: fetched 2 new logs [31-05-2022 18:51:02]5813: WAF :: fetched 3 new logs [31-05-2022 18:52:01]9280: WAF :: fetched 1 new logs [31-05-2022 18:54:01]16158: WAF :: fetched 1 new logs [31-05-2022 18:55:02]19658: WAF :: fetched 1 new logs [31-05-2022 19:00:01]4339: WAF :: fetched 1 new logs [31-05-2022 19:03:01]15147: WAF :: fetched 1 new logs [31-05-2022 19:04:02]18591: WAF :: fetched 3 new logs [31-05-2022 19:05:01]22027: WAF :: fetched 1 new logs [31-05-2022 19:07:01]28983: WAF :: fetched 1 new logs [31-05-2022 19:08:02]32470: WAF :: fetched 1 new logs [31-05-2022 19:09:02]3538: WAF :: fetched 1 new logs [31-05-2022 19:11:02]10434: WAF :: fetched 1 new logs [31-05-2022 19:12:01]13908: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654035121 [31-05-2022 19:12:01]13908: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 19:12:03]13908: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 19:12:04]13908: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-1912/20220531-191201-YpaSscouuq4hrOk3saJ_sQAAABY [31-05-2022 19:12:04]13908: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 19:15:01]24113: WAF :: fetched 2 new logs [31-05-2022 19:16:02]27565: WAF :: fetched 2 new logs [31-05-2022 19:17:01]31064: WAF :: fetched 1 new logs [31-05-2022 19:23:02]19340: WAF :: fetched 2 new logs [31-05-2022 19:26:02]29626: WAF :: fetched 2 new logs [31-05-2022 19:27:01]712: WAF :: fetched 2 new logs [31-05-2022 19:28:02]4237: WAF :: fetched 4 new logs [31-05-2022 19:29:02]7610: WAF :: fetched 1 new logs [31-05-2022 19:30:01]11087: WAF :: fetched 2 new logs [31-05-2022 19:30:01]11110: httpd.conf changed. Refreshing watchlist. [31-05-2022 19:31:01]14588: WAF :: fetched 1 new logs [31-05-2022 19:32:02]18177: WAF :: fetched 3 new logs [31-05-2022 19:33:01]21568: WAF :: fetched 2 new logs [31-05-2022 19:34:02]25012: WAF :: fetched 6 new logs [31-05-2022 19:36:02]32007: WAF :: fetched 1 new logs [31-05-2022 19:37:01]3194: WAF :: fetched 1 new logs [31-05-2022 19:39:01]10037: WAF :: fetched 3 new logs [31-05-2022 19:41:02]16948: Checking for user cron vulnerabilities [31-05-2022 19:44:01]27223: Checking ditributed CMS bruteforce attacks [31-05-2022 19:45:01]: Checking for definition updates [31-05-2022 19:45:01]30668: WAF :: fetched 1 new logs [31-05-2022 19:46:02]1819: WAF :: fetched 2 new logs [31-05-2022 19:47:02]5388: WAF :: fetched 3 new logs [31-05-2022 19:48:01]8798: WAF :: fetched 1 new logs [31-05-2022 19:49:01]12230: WAF :: fetched 3 new logs [31-05-2022 19:50:02]15685: WAF :: fetched 2 new logs [31-05-2022 19:51:02]19172: WAF :: fetched 2 new logs [31-05-2022 19:52:01]22655: WAF :: fetched 2 new logs [31-05-2022 19:53:02]26120: WAF :: fetched 1 new logs [31-05-2022 19:54:01]29540: WAF :: fetched 1 new logs [31-05-2022 19:55:02]556: WAF :: fetched 2 new logs [31-05-2022 19:59:01]14501: WAF :: fetched 5 new logs [31-05-2022 20:00:02]17652: WAF :: fetched 2 new logs [31-05-2022 20:03:02]28556: WAF :: fetched 4 new logs [31-05-2022 20:04:01]31965: WAF :: fetched 5 new logs [31-05-2022 20:05:02]3131: WAF :: fetched 2 new logs [31-05-2022 20:08:02]13499: WAF :: fetched 2 new logs [31-05-2022 20:09:02]16863: WAF :: fetched 2 new logs [31-05-2022 20:12:01]27256: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654038721 [31-05-2022 20:12:01]27256: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 20:12:03]27256: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 20:12:03]27256: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-2012/20220531-201201-YpagwcfBgPbQENECAfQesAAAACw [31-05-2022 20:12:03]27256: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 20:12:03]27256: WAF :: fetched 1 new logs [31-05-2022 20:15:02]5310: WAF :: fetched 3 new logs [31-05-2022 20:16:01]8776: WAF :: fetched 1 new logs [31-05-2022 20:17:01]12288: WAF :: fetched 1 new logs [31-05-2022 20:18:02]15755: WAF :: fetched 3 new logs [31-05-2022 20:19:01]19108: WAF :: fetched 2 new logs [31-05-2022 20:21:01]26009: WAF :: fetched 1 new logs [31-05-2022 20:24:01]4130: WAF :: fetched 1 new logs [31-05-2022 20:25:02]7547: WAF :: fetched 1 new logs [31-05-2022 20:26:01]10998: WAF :: fetched 1 new logs [31-05-2022 20:27:01]14492: WAF :: fetched 2 new logs [31-05-2022 20:28:01]17841: WAF :: fetched 2 new logs [31-05-2022 20:29:02]21262: WAF :: fetched 3 new logs [31-05-2022 20:30:01]24689: WAF :: fetched 1 new logs [31-05-2022 20:31:02]28162: WAF :: fetched 1 new logs [31-05-2022 20:32:01]31688: WAF :: fetched 3 new logs [31-05-2022 20:33:01]2840: WAF :: fetched 3 new logs [31-05-2022 20:34:01]6367: WAF :: fetched 1 new logs [31-05-2022 20:35:01]10450: WAF :: fetched 5 new logs [31-05-2022 20:36:02]14565: WAF :: fetched 2 new logs [31-05-2022 20:37:02]18188: WAF :: fetched 8 new logs [31-05-2022 20:38:01]21664: WAF :: fetched 8 new logs [31-05-2022 20:39:01]25138: WAF :: fetched 3 new logs [31-05-2022 20:40:02]28601: WAF :: fetched 4 new logs [31-05-2022 20:41:01]32026: Checking for user cron vulnerabilities [31-05-2022 20:44:01]10050: Checking ditributed CMS bruteforce attacks [31-05-2022 20:45:02]13495: WAF :: fetched 2 new logs [31-05-2022 20:46:01]16913: WAF :: fetched 3 new logs [31-05-2022 20:47:02]20406: WAF :: fetched 8 new logs [31-05-2022 20:48:02]23788: WAF :: fetched 3 new logs [31-05-2022 20:49:01]27211: WAF :: fetched 3 new logs [31-05-2022 20:51:02]1842: WAF :: fetched 2 new logs [31-05-2022 20:52:02]5285: WAF :: fetched 2 new logs [31-05-2022 20:53:01]8753: WAF :: fetched 3 new logs [31-05-2022 20:54:01]12186: WAF :: fetched 2 new logs [31-05-2022 20:57:01]22449: WAF :: fetched 3 new logs [31-05-2022 20:59:01]29263: WAF :: fetched 2 new logs [31-05-2022 21:01:02]3942: WAF :: fetched 1 new logs [31-05-2022 21:03:01]10837: WAF :: fetched 1 new logs [31-05-2022 21:04:02]14352: WAF :: fetched 3 new logs [31-05-2022 21:05:01]17756: WAF :: fetched 1 new logs [31-05-2022 21:06:02]21210: WAF :: fetched 2 new logs [31-05-2022 21:07:02]24567: WAF :: fetched 8 new logs [31-05-2022 21:08:01]28067: WAF :: fetched 2 new logs [31-05-2022 21:10:01]2693: WAF :: fetched 2 new logs [31-05-2022 21:11:02]6195: WAF :: fetched 2 new logs [31-05-2022 21:12:02]9574: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654042322 [31-05-2022 21:12:02]9574: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 21:12:04]9574: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 21:12:04]9574: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-2112/20220531-211202-Ypau0hizqbZME1zJXcMbSgAAAAQ [31-05-2022 21:12:04]9574: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [31-05-2022 21:12:04]9574: WAF :: fetched 1 new logs [31-05-2022 21:13:01]13072: WAF :: fetched 2 new logs [31-05-2022 21:14:02]16552: WAF :: fetched 1 new logs [31-05-2022 21:15:01]19968: WAF :: fetched 1 new logs [31-05-2022 21:16:01]23449: WAF :: fetched 1 new logs [31-05-2022 21:17:02]26933: WAF :: fetched 1 new logs [31-05-2022 21:19:02]1635: httpd.conf changed. Refreshing watchlist. [31-05-2022 21:20:01]5053: WAF :: fetched 1 new logs [31-05-2022 21:23:01]15434: WAF :: fetched 1 new logs [31-05-2022 21:25:01]22283: WAF :: fetched 5 new logs [31-05-2022 21:26:02]25731: WAF :: fetched 4 new logs [31-05-2022 21:27:01]28929: WAF :: fetched 1 new logs [31-05-2022 21:28:01]32585: WAF :: fetched 3 new logs [31-05-2022 21:31:01]10494: WAF :: fetched 1 new logs [31-05-2022 21:32:02]13914: WAF :: fetched 1 new logs [31-05-2022 21:34:01]20800: WAF :: fetched 2 new logs [31-05-2022 21:36:01]27639: WAF :: fetched 1 new logs [31-05-2022 21:40:02]9295: WAF :: fetched 1 new logs [31-05-2022 21:41:01]12753: Checking for user cron vulnerabilities [31-05-2022 21:42:01]16156: WAF :: fetched 2 new logs [31-05-2022 21:43:02]19664: WAF :: fetched 1 new logs [31-05-2022 21:44:01]23053: Checking ditributed CMS bruteforce attacks [31-05-2022 21:45:01]26465: WAF :: fetched 6 new logs [31-05-2022 21:49:02]7983: WAF :: fetched 1 new logs [31-05-2022 21:49:02]7972: httpd.conf changed. Refreshing watchlist. [31-05-2022 21:50:01]11399: WAF :: fetched 3 new logs [31-05-2022 21:51:01]14887: WAF :: fetched 2 new logs [31-05-2022 21:52:02]18317: WAF :: fetched 3 new logs [31-05-2022 21:53:01]21852: WAF :: fetched 3 new logs [31-05-2022 21:54:01]27157: WAF :: fetched 2 new logs [31-05-2022 21:56:02]9260: WAF :: fetched 3 new logs [31-05-2022 21:57:01]13578: WAF :: fetched 3 new logs [31-05-2022 21:58:02]17149: WAF :: fetched 3 new logs [31-05-2022 22:00:02]23772: WAF :: fetched 2 new logs [31-05-2022 22:01:01]27702: WAF :: fetched 2 new logs [31-05-2022 22:02:02]31195: WAF :: fetched 2 new logs [31-05-2022 22:03:01]2358: WAF :: fetched 4 new logs [31-05-2022 22:04:01]5820: WAF :: fetched 2 new logs [31-05-2022 22:05:02]9332: WAF :: fetched 2 new logs [31-05-2022 22:06:01]12806: WAF :: fetched 2 new logs [31-05-2022 22:07:01]16202: WAF :: fetched 1 new logs [31-05-2022 22:07:08]16185: Performing Domain reputation checks [31-05-2022 22:09:01]23163: WAF :: fetched 4 new logs [31-05-2022 22:10:02]26638: WAF :: fetched 1 new logs [31-05-2022 22:12:01]1158: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654045921 [31-05-2022 22:12:01]1158: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 22:12:03]1158: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 22:12:03]1158: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-2212/20220531-221201-Ypa84T47_FydWBuAmrUDjwAAAA0 [31-05-2022 22:12:03]1158: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 22:12:04]1158: WAF :: fetched 60 new logs [31-05-2022 22:15:01]11584: WAF :: fetched 1 new logs [31-05-2022 22:17:01]18459: WAF :: fetched 1 new logs [31-05-2022 22:18:02]21989: WAF :: fetched 1 new logs [31-05-2022 22:19:01]25394: WAF :: fetched 1 new logs [31-05-2022 22:20:01]28837: WAF :: fetched 2 new logs [31-05-2022 22:30:02]31079: WAF :: fetched 1 new logs [31-05-2022 22:33:01]9212: WAF :: fetched 3 new logs [31-05-2022 22:34:01]12644: WAF :: fetched 1 new logs [31-05-2022 22:35:02]16098: WAF :: fetched 3 new logs [31-05-2022 22:36:01]19565: WAF :: fetched 2 new logs [31-05-2022 22:37:02]22987: WAF :: fetched 1 new logs [31-05-2022 22:39:02]29969: WAF :: fetched 1 new logs [31-05-2022 22:41:01]4471: Checking for user cron vulnerabilities [31-05-2022 22:42:02]7898: WAF :: fetched 2 new logs [31-05-2022 22:44:02]14798: Checking ditributed CMS bruteforce attacks [31-05-2022 22:44:02]14798: WAF :: fetched 1 new logs [31-05-2022 22:45:01]18209: WAF :: fetched 1 new logs [31-05-2022 22:48:01]28593: WAF :: fetched 1 new logs [31-05-2022 22:51:02]6575: WAF :: fetched 1 new logs [31-05-2022 22:52:01]9953: WAF :: fetched 1 new logs [31-05-2022 23:01:02]8322: WAF :: fetched 1 new logs [31-05-2022 23:03:02]15158: WAF :: fetched 1 new logs [31-05-2022 23:04:02]18468: WAF :: fetched 1 new logs [31-05-2022 23:07:01]28753: WAF :: fetched 1 new logs [31-05-2022 23:07:56]28921: Performed RBL check for 23.111.136.34. [31-05-2022 23:09:02]3229: WAF :: fetched 1 new logs [31-05-2022 23:12:01]13351: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654049521 [31-05-2022 23:12:01]13351: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-05-2022 23:12:03]13351: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-05-2022 23:12:03]13351: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220531/20220531-2312/20220531-231201-YpbK8bLlSq6wEAk3IQ5mSgAAAAM [31-05-2022 23:12:03]13351: WAF :: No suitable log file found. Using SQLite.. [31-05-2022 23:12:04]13351: WAF :: fetched 3 new logs [31-05-2022 23:13:02]16827: WAF :: fetched 83 new logs [31-05-2022 23:14:01]20190: WAF :: fetched 171 new logs [31-05-2022 23:15:02]23568: WAF :: fetched 172 new logs [31-05-2022 23:16:01]26933: WAF :: fetched 120 new logs [31-05-2022 23:17:02]30326: WAF :: fetched 8 new logs [31-05-2022 23:18:02]1458: httpd.conf changed. Refreshing watchlist. [31-05-2022 23:19:01]4949: httpd.conf changed. Refreshing watchlist. [31-05-2022 23:23:01]18802: httpd.conf changed. Refreshing watchlist. [31-05-2022 23:23:01]18805: WAF :: fetched 1 new logs [31-05-2022 23:26:01]29286: WAF :: fetched 2 new logs [31-05-2022 23:27:02]32722: WAF :: fetched 37 new logs [31-05-2022 23:28:01]3857: WAF :: fetched 171 new logs [31-05-2022 23:29:02]7331: WAF :: fetched 163 new logs [31-05-2022 23:30:02]10867: WAF :: fetched 136 new logs [31-05-2022 23:31:01]14349: WAF :: fetched 120 new logs [31-05-2022 23:32:02]17791: WAF :: fetched 174 new logs [31-05-2022 23:33:01]21221: WAF :: fetched 184 new logs [31-05-2022 23:34:02]24621: WAF :: fetched 195 new logs [31-05-2022 23:35:02]28003: WAF :: fetched 211 new logs [31-05-2022 23:36:01]31467: WAF :: fetched 180 new logs [31-05-2022 23:37:02]2601: WAF :: fetched 177 new logs [31-05-2022 23:38:01]6061: WAF :: fetched 174 new logs [31-05-2022 23:39:01]9465: WAF :: fetched 174 new logs [31-05-2022 23:40:02]12903: WAF :: fetched 157 new logs [31-05-2022 23:41:01]16195: WAF :: fetched 182 new logs [31-05-2022 23:41:01]16195: Checking for user cron vulnerabilities [31-05-2022 23:42:02]19666: WAF :: fetched 167 new logs [31-05-2022 23:43:02]23117: WAF :: fetched 155 new logs [31-05-2022 23:44:01]26459: Checking ditributed CMS bruteforce attacks [31-05-2022 23:44:01]26459: WAF :: fetched 192 new logs [31-05-2022 23:45:02]29900: WAF :: fetched 165 new logs [31-05-2022 23:46:02]910: WAF :: fetched 196 new logs [31-05-2022 23:47:02]4409: WAF :: fetched 171 new logs [31-05-2022 23:48:02]7848: WAF :: fetched 210 new logs [31-05-2022 23:49:02]11224: WAF :: fetched 179 new logs [31-05-2022 23:50:01]14658: WAF :: fetched 159 new logs [31-05-2022 23:51:02]18184: WAF :: fetched 158 new logs [31-05-2022 23:52:02]21568: WAF :: fetched 147 new logs [31-05-2022 23:53:01]25044: WAF :: fetched 189 new logs [31-05-2022 23:54:02]28442: WAF :: fetched 171 new logs [31-05-2022 23:55:01]31864: httpd.conf changed. Refreshing watchlist. [31-05-2022 23:55:02]31867: WAF :: fetched 167 new logs [31-05-2022 23:56:01]2954: WAF :: fetched 185 new logs [31-05-2022 23:57:02]6323: WAF :: fetched 193 new logs [31-05-2022 23:58:02]9819: WAF :: fetched 59 new logs [01-06-2022 00:01:02]20304: httpd.conf changed. Refreshing watchlist. [01-06-2022 00:01:03]20311: Sending daily report for June 1, 2022 [01-06-2022 00:05:01]1719: WAF :: fetched 1 new logs [01-06-2022 00:05:01]1719: Deleted 0 entries older than 6 MONTH from scanner_logs [01-06-2022 00:05:01]1719: Deleted 0 files from Quarantine [01-06-2022 00:07:01]8482: WAF :: fetched 20 new logs [01-06-2022 00:08:01]11904: WAF :: fetched 191 new logs [01-06-2022 00:09:02]15272: WAF :: fetched 243 new logs [01-06-2022 00:10:01]18598: WAF :: fetched 225 new logs [01-06-2022 00:11:02]22051: WAF :: fetched 4 new logs [01-06-2022 00:12:01]25367: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654053121 [01-06-2022 00:12:01]25367: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 00:12:03]25367: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 00:12:04]25367: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-0012/20220601-001201-YpbZAcpdp3bhwRXs_cEWWQAAAAE [01-06-2022 00:12:04]25367: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 00:15:01]3246: WAF :: fetched 1 new logs [01-06-2022 00:22:01]26970: WAF :: fetched 1 new logs [01-06-2022 00:23:02]30502: WAF :: fetched 1 new logs [01-06-2022 00:26:02]8280: WAF :: fetched 1 new logs [01-06-2022 00:27:01]11614: WAF :: fetched 1 new logs [01-06-2022 00:28:02]15053: WAF :: fetched 1 new logs [01-06-2022 00:34:01]2950: WAF :: fetched 1 new logs [01-06-2022 00:35:01]6296: WAF :: fetched 2 new logs [01-06-2022 00:41:01]26586: WAF :: fetched 2 new logs [01-06-2022 00:41:01]26586: Checking for user cron vulnerabilities [01-06-2022 00:44:01]4461: Checking ditributed CMS bruteforce attacks [01-06-2022 00:45:02]: Checking for software updates [01-06-2022 00:50:02]24693: WAF :: fetched 2 new logs [01-06-2022 00:51:02]28089: WAF :: fetched 1 new logs [01-06-2022 00:52:01]31465: WAF :: fetched 2 new logs [01-06-2022 00:53:02]2572: WAF :: fetched 4 new logs [01-06-2022 00:56:02]12600: WAF :: fetched 1 new logs [01-06-2022 00:59:01]22752: WAF :: fetched 1 new logs [01-06-2022 01:00:02]25835: WAF :: fetched 1 new logs [01-06-2022 01:01:01]29971: WAF :: fetched 1 new logs [01-06-2022 01:05:01]12813: WAF :: fetched 1 new logs [01-06-2022 01:12:02]5158: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654056722 [01-06-2022 01:12:02]5158: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 01:12:04]5158: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 01:12:04]5158: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-0112/20220601-011202-YpbnEq3-ijpsQmfP9OqV4AAAAAY [01-06-2022 01:12:04]5158: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [01-06-2022 01:12:04]5158: WAF :: fetched 1 new logs [01-06-2022 01:13:01]8739: WAF :: fetched 1 new logs [01-06-2022 01:15:02]15722: WAF :: fetched 1 new logs [01-06-2022 01:18:01]26532: WAF :: fetched 1 new logs [01-06-2022 01:21:02]4801: WAF :: fetched 2 new logs [01-06-2022 01:22:02]8448: WAF :: fetched 1 new logs [01-06-2022 01:22:02]8453: httpd.conf changed. Refreshing watchlist. [01-06-2022 01:26:01]22536: WAF :: fetched 1 new logs [01-06-2022 01:29:02]1139: WAF :: fetched 1 new logs [01-06-2022 01:31:01]8432: WAF :: fetched 1 new logs [01-06-2022 01:34:02]19037: WAF :: fetched 2 new logs [01-06-2022 01:35:01]22538: WAF :: fetched 3 new logs [01-06-2022 01:36:02]26013: WAF :: fetched 4 new logs [01-06-2022 01:37:01]29397: WAF :: fetched 4 new logs [01-06-2022 01:38:01]328: WAF :: fetched 4 new logs [01-06-2022 01:41:01]11218: WAF :: fetched 1 new logs [01-06-2022 01:41:01]11218: Checking for user cron vulnerabilities [01-06-2022 01:42:02]14677: WAF :: fetched 1 new logs [01-06-2022 01:44:02]22071: Checking ditributed CMS bruteforce attacks [01-06-2022 01:45:01]: Checking for definition updates [01-06-2022 01:47:02]353: WAF :: fetched 1 new logs [01-06-2022 01:51:01]14540: WAF :: fetched 5 new logs [01-06-2022 01:52:02]18061: WAF :: fetched 2 new logs [01-06-2022 01:53:01]21378: WAF :: fetched 1 new logs [01-06-2022 01:54:02]25008: WAF :: fetched 3 new logs [01-06-2022 01:56:01]31847: WAF :: fetched 1 new logs [01-06-2022 01:57:02]2890: WAF :: fetched 1 new logs [01-06-2022 01:58:01]6217: WAF :: fetched 1 new logs [01-06-2022 01:59:02]9728: WAF :: fetched 8 new logs [01-06-2022 02:00:01]12892: WAF :: fetched 1 new logs [01-06-2022 02:01:01]17030: WAF :: fetched 2 new logs [01-06-2022 02:03:01]23727: WAF :: fetched 1 new logs [01-06-2022 02:04:02]27187: WAF :: fetched 1 new logs [01-06-2022 02:05:01]30528: WAF :: fetched 3 new logs [01-06-2022 02:06:01]1542: WAF :: fetched 3 new logs [01-06-2022 02:10:02]15113: WAF :: fetched 2 new logs [01-06-2022 02:12:02]21858: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654060322 [01-06-2022 02:12:02]21858: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 02:12:04]21858: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 02:12:04]21858: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-0212/20220601-021202-Ypb1IuFfBj9erZNnSEv7xAAAAAs [01-06-2022 02:12:04]21858: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 02:12:04]21858: WAF :: fetched 53 new logs [01-06-2022 02:24:01]30063: WAF :: fetched 1 new logs [01-06-2022 02:27:01]7841: WAF :: fetched 2 new logs [01-06-2022 02:28:02]11253: WAF :: fetched 1 new logs [01-06-2022 02:29:01]14647: WAF :: fetched 1 new logs [01-06-2022 02:35:01]2524: WAF :: fetched 1 new logs [01-06-2022 02:41:01]22753: Checking for user cron vulnerabilities [01-06-2022 02:44:01]1419: Checking ditributed CMS bruteforce attacks [01-06-2022 02:46:02]8726: WAF :: fetched 1 new logs [01-06-2022 02:49:01]18872: WAF :: fetched 1 new logs [01-06-2022 02:50:01]22378: WAF :: fetched 3 new logs [01-06-2022 02:53:01]520: WAF :: fetched 1 new logs [01-06-2022 02:53:02]530: Updated license status via CDN [01-06-2022 03:00:03]24884: Found and updated 32 CMS installations [01-06-2022 03:01:01]29143: WAF :: fetched 1 new logs [01-06-2022 03:02:28]24884: Wordpress installation #34 fazendayrere.com.br has errors [01-06-2022 03:02:53]24884: Sending CMS version vulnerability report emails to cpanel users [01-06-2022 03:02:56]24884: Checking wordpress installations for suspicious directories [01-06-2022 03:04:25]4373: Sending CMS version vulnerability report emails to cpanel users [01-06-2022 03:04:28]4373: Checking wordpress installations for suspicious directories [01-06-2022 03:06:02]15068: WAF :: fetched 1 new logs [01-06-2022 03:07:01]18375: WAF :: fetched 2 new logs [01-06-2022 03:08:02]21774: WAF :: fetched 1 new logs [01-06-2022 03:10:02]28597: WAF :: fetched 1 new logs [01-06-2022 03:11:01]31982: WAF :: fetched 1 new logs [01-06-2022 03:12:02]2973: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654063922 [01-06-2022 03:12:02]2973: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 03:12:04]2973: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 03:12:04]2973: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-0312/20220601-031202-YpcDMqeomTOW3_VXPGMQnQAAAAI [01-06-2022 03:12:04]2973: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 03:14:02]9780: WAF :: fetched 2 new logs [01-06-2022 03:23:01]7562: WAF :: fetched 1 new logs [01-06-2022 03:24:02]11036: WAF :: fetched 2 new logs [01-06-2022 03:28:01]24625: WAF :: fetched 1 new logs [01-06-2022 03:30:01]31803: WAF :: fetched 2 new logs [01-06-2022 03:31:01]2931: WAF :: fetched 1 new logs [01-06-2022 03:33:01]7125: WAF :: fetched 2 new logs [01-06-2022 03:34:02]26156: WAF :: fetched 2 new logs [01-06-2022 03:35:01]9377: WAF :: fetched 1 new logs [01-06-2022 03:39:01]632: WAF :: fetched 1 new logs [01-06-2022 03:40:01]4100: WAF :: fetched 2 new logs [01-06-2022 03:41:01]7479: WAF :: fetched 1 new logs [01-06-2022 03:41:01]7479: Checking for user cron vulnerabilities [01-06-2022 03:42:02]10827: WAF :: fetched 1 new logs [01-06-2022 03:44:01]17448: Checking ditributed CMS bruteforce attacks [01-06-2022 03:44:01]17448: WAF :: fetched 1 new logs [01-06-2022 03:45:02]20799: WAF :: fetched 1 new logs [01-06-2022 03:48:02]30837: WAF :: fetched 1 new logs [01-06-2022 03:57:02]28696: WAF :: fetched 1 new logs [01-06-2022 03:58:01]32011: WAF :: fetched 2 new logs [01-06-2022 03:59:02]3141: WAF :: fetched 3 new logs [01-06-2022 04:01:01]9946: WAF :: fetched 1 new logs [01-06-2022 04:02:02]13292: WAF :: fetched 1 new logs [01-06-2022 04:03:01]16551: WAF :: fetched 1 new logs [01-06-2022 04:10:01]7716: WAF :: fetched 1 new logs [01-06-2022 04:12:02]14421: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654067522 [01-06-2022 04:12:02]14421: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 04:12:04]14421: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 04:12:04]14421: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-0412/20220601-041202-YpcRQpchjqPtA5boRSlWNwAAAAc [01-06-2022 04:12:04]14421: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 04:12:04]14421: WAF :: fetched 4 new logs [01-06-2022 04:14:02]21139: WAF :: fetched 1 new logs [01-06-2022 04:15:01]24444: WAF :: fetched 1 new logs [01-06-2022 04:21:02]12304: WAF :: fetched 1 new logs [01-06-2022 04:22:02]15588: WAF :: fetched 1 new logs [01-06-2022 04:27:02]32348: WAF :: fetched 2 new logs [01-06-2022 04:30:02]10041: WAF :: fetched 4 new logs [01-06-2022 04:37:02]1156: WAF :: fetched 2 new logs [01-06-2022 04:41:01]14811: Checking for user cron vulnerabilities [01-06-2022 04:44:01]24975: Checking ditributed CMS bruteforce attacks [01-06-2022 04:44:01]24975: WAF :: fetched 1 new logs [01-06-2022 04:48:01]6070: WAF :: fetched 32 new logs [01-06-2022 04:50:01]12822: WAF :: fetched 1 new logs [01-06-2022 04:52:02]19606: WAF :: fetched 1 new logs [01-06-2022 04:53:01]22925: WAF :: fetched 1 new logs [01-06-2022 04:54:02]26369: WAF :: fetched 9 new logs [01-06-2022 04:55:01]29704: WAF :: fetched 1 new logs [01-06-2022 04:58:02]7471: WAF :: fetched 1 new logs [01-06-2022 05:01:02]17722: WAF :: fetched 1 new logs [01-06-2022 05:01:42]17723: Starting daily scan on files updated in last 24 hrs [01-06-2022 05:03:02]24460: WAF :: fetched 1 new logs [01-06-2022 05:06:02]2273: WAF :: fetched 2 new logs [01-06-2022 05:09:01]12388: WAF :: fetched 1 new logs [01-06-2022 05:10:02]15798: WAF :: fetched 2 new logs [01-06-2022 05:12:02]22607: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654071122 [01-06-2022 05:12:02]22607: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 05:12:04]22607: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 05:12:04]22607: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-0512/20220601-051202-YpcfUs5WqjvEZii4vaXjPwAAAAE [01-06-2022 05:12:04]22607: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [01-06-2022 05:12:04]22607: WAF :: fetched 1 new logs [01-06-2022 05:13:01]25948: WAF :: fetched 1 new logs [01-06-2022 05:16:01]3642: WAF :: fetched 1 new logs [01-06-2022 05:18:01]10466: WAF :: fetched 1 new logs [01-06-2022 05:20:01]17221: WAF :: fetched 2 new logs [01-06-2022 05:21:02]20655: WAF :: fetched 1 new logs [01-06-2022 05:22:01]23998: WAF :: fetched 1 new logs [01-06-2022 05:24:01]30780: WAF :: fetched 1 new logs [01-06-2022 05:25:01]1751: WAF :: fetched 1 new logs [01-06-2022 05:28:02]11855: WAF :: fetched 3 new logs [01-06-2022 05:29:01]15233: WAF :: fetched 7 new logs [01-06-2022 05:30:01]18616: WAF :: fetched 2 new logs [01-06-2022 05:31:02]21983: WAF :: fetched 1 new logs [01-06-2022 05:32:01]25316: WAF :: fetched 1 new logs [01-06-2022 05:36:02]6542: WAF :: fetched 1 new logs [01-06-2022 05:37:01]9881: WAF :: fetched 6 new logs [01-06-2022 05:39:01]16635: WAF :: fetched 2 new logs [01-06-2022 05:40:02]20039: WAF :: fetched 1 new logs [01-06-2022 05:41:01]23353: Checking for user cron vulnerabilities [01-06-2022 05:43:01]30100: WAF :: fetched 2 new logs [01-06-2022 05:44:02]1166: Checking ditributed CMS bruteforce attacks [01-06-2022 05:44:02]1166: WAF :: fetched 3 new logs [01-06-2022 05:48:01]14610: WAF :: fetched 1 new logs [01-06-2022 05:53:01]31428: WAF :: fetched 1 new logs [01-06-2022 05:58:01]15964: WAF :: fetched 1 new logs [01-06-2022 05:59:02]19439: WAF :: fetched 1 new logs [01-06-2022 06:00:02]22475: WAF :: fetched 2 new logs [01-06-2022 06:01:02]26345: WAF :: fetched 1 new logs [01-06-2022 06:02:02]29727: WAF :: fetched 1 new logs [01-06-2022 06:05:01]7500: WAF :: fetched 7 new logs [01-06-2022 06:07:02]14248: WAF :: fetched 1 new logs [01-06-2022 06:09:02]21021: WAF :: fetched 1 new logs [01-06-2022 06:11:01]27718: WAF :: fetched 1 new logs [01-06-2022 06:12:02]31120: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654074722 [01-06-2022 06:12:02]31120: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 06:12:04]31120: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 06:12:04]31120: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-0612/20220601-061202-YpctYjeG1EUyCmov_fEAyAAAAAQ [01-06-2022 06:12:04]31120: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [01-06-2022 06:12:04]31120: WAF :: fetched 2 new logs [01-06-2022 06:13:01]2101: WAF :: fetched 1 new logs [01-06-2022 06:14:02]5547: WAF :: fetched 1 new logs [01-06-2022 06:16:01]12277: WAF :: fetched 1 new logs [01-06-2022 06:17:02]15605: WAF :: fetched 1 new logs [01-06-2022 06:20:01]25698: WAF :: fetched 1 new logs [01-06-2022 06:21:02]29189: WAF :: fetched 1 new logs [01-06-2022 06:22:01]32492: WAF :: fetched 1 new logs [01-06-2022 06:30:01]27123: WAF :: fetched 1 new logs [01-06-2022 06:31:02]30568: WAF :: fetched 2 new logs [01-06-2022 06:32:02]1510: WAF :: fetched 2 new logs [01-06-2022 06:35:01]11613: WAF :: fetched 1 new logs [01-06-2022 06:40:01]28448: WAF :: fetched 40 new logs [01-06-2022 06:41:01]31856: WAF :: fetched 79 new logs [01-06-2022 06:41:01]31856: Checking for user cron vulnerabilities [01-06-2022 06:43:01]6193: WAF :: fetched 2 new logs [01-06-2022 06:44:02]9601: Checking ditributed CMS bruteforce attacks [01-06-2022 06:44:02]9601: WAF :: fetched 1 new logs [01-06-2022 06:45:01]12933: WAF :: fetched 1 new logs [01-06-2022 06:51:02]838: WAF :: fetched 2 new logs [01-06-2022 06:53:02]7596: WAF :: fetched 1 new logs [01-06-2022 06:54:01]10974: WAF :: fetched 1 new logs [01-06-2022 06:56:02]17868: WAF :: fetched 1 new logs [01-06-2022 06:56:02]17857: httpd.conf changed. Refreshing watchlist. [01-06-2022 07:00:02]31129: WAF :: fetched 5 new logs [01-06-2022 07:01:02]2687: httpd.conf changed. Refreshing watchlist. [01-06-2022 07:04:01]12806: WAF :: fetched 1 new logs [01-06-2022 07:05:02]16287: WAF :: fetched 116 new logs [01-06-2022 07:06:01]19647: WAF :: fetched 4 new logs [01-06-2022 07:07:02]22968: WAF :: fetched 1 new logs [01-06-2022 07:12:02]7487: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654078322 [01-06-2022 07:12:02]7487: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 07:12:04]7487: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 07:12:04]7487: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-0712/20220601-071202-Ypc7ciTB9LTw2QBFHiggngAAAAA [01-06-2022 07:12:04]7487: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 07:12:04]7487: WAF :: fetched 260 new logs [01-06-2022 07:16:02]20922: WAF :: fetched 1 new logs [01-06-2022 07:17:01]24215: WAF :: fetched 1 new logs [01-06-2022 07:23:01]12117: WAF :: fetched 1 new logs [01-06-2022 07:26:01]22253: WAF :: fetched 1 new logs [01-06-2022 07:27:02]25617: WAF :: fetched 2 new logs [01-06-2022 07:32:01]10210: WAF :: fetched 1 new logs [01-06-2022 07:33:02]13561: WAF :: fetched 1 new logs [01-06-2022 07:38:02]30479: WAF :: fetched 1 new logs [01-06-2022 07:39:01]1464: WAF :: fetched 3 new logs [01-06-2022 07:41:02]8296: WAF :: fetched 1 new logs [01-06-2022 07:41:02]8296: Checking for user cron vulnerabilities [01-06-2022 07:44:01]18364: Checking ditributed CMS bruteforce attacks [01-06-2022 07:45:01]: Checking for definition updates [01-06-2022 07:46:02]25306: WAF :: fetched 3 new logs [01-06-2022 07:48:02]31991: WAF :: fetched 1 new logs [01-06-2022 07:51:02]9826: WAF :: fetched 1 new logs [01-06-2022 07:55:02]23320: WAF :: fetched 1 new logs [01-06-2022 07:58:02]1027: WAF :: fetched 1 new logs [01-06-2022 07:59:01]4455: WAF :: fetched 1 new logs [01-06-2022 08:00:02]7608: WAF :: fetched 3 new logs [01-06-2022 08:02:01]14876: WAF :: fetched 3 new logs [01-06-2022 08:05:02]25077: WAF :: fetched 5 new logs [01-06-2022 08:07:01]31826: WAF :: fetched 1 new logs [01-06-2022 08:12:02]16342: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654081922 [01-06-2022 08:12:02]16342: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 08:12:04]16342: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 08:12:04]16342: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-0812/20220601-081202-YpdJgvS99XUkSoYzM85d1AAAAB8 [01-06-2022 08:12:04]16342: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 08:12:04]16342: WAF :: fetched 1 new logs [01-06-2022 08:14:02]23108: WAF :: fetched 1 new logs [01-06-2022 08:17:01]820: WAF :: fetched 1 new logs [01-06-2022 08:18:01]4265: WAF :: fetched 1 new logs [01-06-2022 08:20:01]11043: WAF :: fetched 1 new logs [01-06-2022 08:21:02]14447: WAF :: fetched 1 new logs [01-06-2022 08:25:02]28067: WAF :: fetched 2 new logs [01-06-2022 08:26:02]31518: WAF :: fetched 1 new logs [01-06-2022 08:28:01]5952: WAF :: fetched 1 new logs [01-06-2022 08:29:01]9327: WAF :: fetched 1 new logs [01-06-2022 08:30:01]12855: WAF :: fetched 1 new logs [01-06-2022 08:35:02]30002: WAF :: fetched 2 new logs [01-06-2022 08:36:02]1063: WAF :: fetched 1 new logs [01-06-2022 08:37:01]4493: WAF :: fetched 1 new logs [01-06-2022 08:39:01]11286: WAF :: fetched 1 new logs [01-06-2022 08:40:02]14822: WAF :: fetched 1 new logs [01-06-2022 08:41:01]18225: Checking for user cron vulnerabilities [01-06-2022 08:42:02]21705: WAF :: fetched 1 new logs [01-06-2022 08:43:01]25064: WAF :: fetched 24 new logs [01-06-2022 08:44:02]28517: Checking ditributed CMS bruteforce attacks [01-06-2022 08:44:02]28517: WAF :: fetched 50 new logs [01-06-2022 08:45:02]32026: WAF :: fetched 60 new logs [01-06-2022 08:46:01]3142: WAF :: fetched 61 new logs [01-06-2022 08:47:02]6537: WAF :: fetched 46 new logs [01-06-2022 08:48:01]9916: WAF :: fetched 54 new logs [01-06-2022 08:49:02]13334: WAF :: fetched 36 new logs [01-06-2022 08:50:01]16830: WAF :: fetched 41 new logs [01-06-2022 08:51:02]20299: WAF :: fetched 45 new logs [01-06-2022 08:52:01]23641: WAF :: fetched 27 new logs [01-06-2022 08:53:02]27088: WAF :: fetched 51 new logs [01-06-2022 08:54:01]30476: WAF :: fetched 57 new logs [01-06-2022 08:55:02]1655: WAF :: fetched 46 new logs [01-06-2022 08:56:02]5102: WAF :: fetched 52 new logs [01-06-2022 08:57:01]8455: WAF :: fetched 128 new logs [01-06-2022 08:58:02]11880: WAF :: fetched 40 new logs [01-06-2022 08:59:01]15258: WAF :: fetched 44 new logs [01-06-2022 09:00:02]18473: WAF :: fetched 53 new logs [01-06-2022 09:01:02]22370: WAF :: fetched 45 new logs [01-06-2022 09:02:01]25799: WAF :: fetched 33 new logs [01-06-2022 09:03:02]29235: WAF :: fetched 43 new logs [01-06-2022 09:04:01]32591: WAF :: fetched 39 new logs [01-06-2022 09:05:02]3800: WAF :: fetched 43 new logs [01-06-2022 09:06:01]7290: WAF :: fetched 43 new logs [01-06-2022 09:07:02]10734: WAF :: fetched 42 new logs [01-06-2022 09:08:01]14144: WAF :: fetched 47 new logs [01-06-2022 09:09:01]17552: WAF :: fetched 62 new logs [01-06-2022 09:10:02]21134: WAF :: fetched 52 new logs [01-06-2022 09:11:01]24534: WAF :: fetched 55 new logs [01-06-2022 09:12:02]28000: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654085522 [01-06-2022 09:12:02]28000: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 09:12:04]28000: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 09:12:04]28000: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-0912/20220601-091202-YpdXkg2L05yA8PYdrFV9bgAAABc [01-06-2022 09:12:04]28000: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 09:12:05]28000: WAF :: fetched 39 new logs [01-06-2022 09:13:01]31474: WAF :: fetched 44 new logs [01-06-2022 09:14:01]2618: WAF :: fetched 48 new logs [01-06-2022 09:15:02]6182: WAF :: fetched 60 new logs [01-06-2022 09:16:01]9651: WAF :: fetched 46 new logs [01-06-2022 09:17:02]13151: WAF :: fetched 40 new logs [01-06-2022 09:18:01]16503: WAF :: fetched 105 new logs [01-06-2022 09:19:02]19989: WAF :: fetched 151 new logs [01-06-2022 09:20:02]23639: WAF :: fetched 44 new logs [01-06-2022 09:21:01]27104: WAF :: fetched 53 new logs [01-06-2022 09:22:02]30697: WAF :: fetched 35 new logs [01-06-2022 09:23:01]1948: WAF :: fetched 49 new logs [01-06-2022 09:24:01]5620: WAF :: fetched 45 new logs [01-06-2022 09:25:02]9349: WAF :: fetched 55 new logs [01-06-2022 09:26:01]12969: WAF :: fetched 51 new logs [01-06-2022 09:27:01]16513: WAF :: fetched 36 new logs [01-06-2022 09:28:02]20195: WAF :: fetched 52 new logs [01-06-2022 09:29:02]23806: WAF :: fetched 49 new logs [01-06-2022 09:30:02]27349: WAF :: fetched 57 new logs [01-06-2022 09:31:01]30896: WAF :: fetched 44 new logs [01-06-2022 09:32:02]2211: WAF :: fetched 35 new logs [01-06-2022 09:33:02]5746: WAF :: fetched 48 new logs [01-06-2022 09:34:02]9288: WAF :: fetched 42 new logs [01-06-2022 09:35:02]12772: WAF :: fetched 49 new logs [01-06-2022 09:36:01]16390: WAF :: fetched 36 new logs [01-06-2022 09:37:02]19878: WAF :: fetched 34 new logs [01-06-2022 09:38:01]23284: WAF :: fetched 41 new logs [01-06-2022 09:39:01]26737: WAF :: fetched 54 new logs [01-06-2022 09:40:02]30343: WAF :: fetched 43 new logs [01-06-2022 09:41:01]1461: WAF :: fetched 50 new logs [01-06-2022 09:41:01]1461: Checking for user cron vulnerabilities [01-06-2022 09:42:02]4974: WAF :: fetched 24 new logs [01-06-2022 09:44:01]11996: Checking ditributed CMS bruteforce attacks [01-06-2022 09:45:02]15567: WAF :: fetched 2 new logs [01-06-2022 09:46:01]19082: WAF :: fetched 5 new logs [01-06-2022 09:53:01]11208: WAF :: fetched 1 new logs [01-06-2022 09:54:02]14754: WAF :: fetched 1 new logs [01-06-2022 09:55:01]18308: WAF :: fetched 1 new logs [01-06-2022 09:56:01]21863: WAF :: fetched 1 new logs [01-06-2022 09:57:02]25373: WAF :: fetched 2 new logs [01-06-2022 10:01:01]7631: WAF :: fetched 2 new logs [01-06-2022 10:02:02]11228: WAF :: fetched 3 new logs [01-06-2022 10:04:01]18250: WAF :: fetched 1 new logs [01-06-2022 10:05:02]21845: WAF :: fetched 1 new logs [01-06-2022 10:08:02]32365: WAF :: fetched 1 new logs [01-06-2022 10:09:02]3585: WAF :: fetched 1 new logs [01-06-2022 10:11:02]10957: WAF :: fetched 1 new logs [01-06-2022 10:12:01]14464: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654089121 [01-06-2022 10:12:01]14464: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 10:12:03]14464: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 10:12:04]14464: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-1012/20220601-101201-YpdloRyp8WYTRrgqyRaY_QAAADY [01-06-2022 10:12:04]14464: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 10:12:04]14464: WAF :: fetched 9 new logs [01-06-2022 10:13:02]17957: WAF :: fetched 1 new logs [01-06-2022 10:14:02]21427: WAF :: fetched 3 new logs [01-06-2022 10:16:02]28641: WAF :: fetched 3 new logs [01-06-2022 10:17:01]32141: WAF :: fetched 2 new logs [01-06-2022 10:21:01]13926: WAF :: fetched 2 new logs [01-06-2022 10:29:02]9584: WAF :: fetched 2 new logs [01-06-2022 10:30:01]13171: WAF :: fetched 3 new logs [01-06-2022 10:31:01]16800: WAF :: fetched 2 new logs [01-06-2022 10:33:01]23761: WAF :: fetched 2 new logs [01-06-2022 10:34:01]27232: WAF :: fetched 1 new logs [01-06-2022 10:36:02]2032: WAF :: fetched 1 new logs [01-06-2022 10:41:02]19561: Checking for user cron vulnerabilities [01-06-2022 10:42:02]22970: WAF :: fetched 2 new logs [01-06-2022 10:43:01]26467: WAF :: fetched 2 new logs [01-06-2022 10:44:01]29963: Checking ditributed CMS bruteforce attacks [01-06-2022 10:44:01]29963: WAF :: fetched 1 new logs [01-06-2022 10:45:02]1167: WAF :: fetched 1 new logs [01-06-2022 10:46:02]4729: WAF :: fetched 1 new logs [01-06-2022 10:48:02]11676: WAF :: fetched 2 new logs [01-06-2022 10:52:02]25643: WAF :: fetched 1 new logs [01-06-2022 10:54:01]32655: WAF :: fetched 1 new logs [01-06-2022 10:56:01]7442: WAF :: fetched 2 new logs [01-06-2022 11:00:02]21265: WAF :: fetched 4 new logs [01-06-2022 11:01:01]25234: WAF :: fetched 2 new logs [01-06-2022 11:03:01]32397: WAF :: fetched 1 new logs [01-06-2022 11:07:01]14188: WAF :: fetched 2 new logs [01-06-2022 11:07:53]14353: Performed RBL check for 23.111.136.34. [01-06-2022 11:08:02]18011: WAF :: fetched 2 new logs [01-06-2022 11:12:02]32155: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654092722 [01-06-2022 11:12:02]32155: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 11:12:04]32155: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 11:12:04]32155: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-1112/20220601-111202-Ypdzsh6GiHsvQiM3Rs3OfgAAAAo [01-06-2022 11:12:04]32155: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 11:12:04]32155: WAF :: fetched 3 new logs [01-06-2022 11:14:02]6830: WAF :: fetched 3 new logs [01-06-2022 11:17:01]17601: WAF :: fetched 2 new logs [01-06-2022 11:18:02]21235: WAF :: fetched 2 new logs [01-06-2022 11:19:02]24732: WAF :: fetched 1 new logs [01-06-2022 11:20:01]28437: WAF :: fetched 1 new logs [01-06-2022 11:22:02]3220: WAF :: fetched 6 new logs [01-06-2022 11:23:01]6641: WAF :: fetched 4 new logs [01-06-2022 11:24:02]10214: WAF :: fetched 1 new logs [01-06-2022 11:26:01]17310: WAF :: fetched 2 new logs [01-06-2022 11:27:02]20793: WAF :: fetched 5 new logs [01-06-2022 11:28:02]24271: WAF :: fetched 2 new logs [01-06-2022 11:29:01]27722: WAF :: fetched 1 new logs [01-06-2022 11:30:02]31401: WAF :: fetched 2 new logs [01-06-2022 11:31:02]2627: WAF :: fetched 1 new logs [01-06-2022 11:32:01]6114: WAF :: fetched 2 new logs [01-06-2022 11:33:01]9601: WAF :: fetched 3 new logs [01-06-2022 11:34:02]13144: WAF :: fetched 1 new logs [01-06-2022 11:35:02]16757: WAF :: fetched 2 new logs [01-06-2022 11:36:01]20339: WAF :: fetched 1 new logs [01-06-2022 11:37:02]23887: WAF :: fetched 3 new logs [01-06-2022 11:38:01]27332: WAF :: fetched 3 new logs [01-06-2022 11:39:02]30861: WAF :: fetched 1 new logs [01-06-2022 11:40:02]2009: WAF :: fetched 1 new logs [01-06-2022 11:41:01]5567: WAF :: fetched 2 new logs [01-06-2022 11:41:01]5567: Checking for user cron vulnerabilities [01-06-2022 11:42:02]9015: WAF :: fetched 5 new logs [01-06-2022 11:43:02]12486: WAF :: fetched 1 new logs [01-06-2022 11:44:01]15970: Checking ditributed CMS bruteforce attacks [01-06-2022 11:45:02]19620: WAF :: fetched 2 new logs [01-06-2022 11:46:02]23278: WAF :: fetched 3 new logs [01-06-2022 11:47:02]26779: WAF :: fetched 4 new logs [01-06-2022 11:48:02]30392: WAF :: fetched 29 new logs [01-06-2022 11:49:02]1449: WAF :: fetched 44 new logs [01-06-2022 11:50:01]5005: WAF :: fetched 70 new logs [01-06-2022 11:51:02]8628: WAF :: fetched 145 new logs [01-06-2022 11:52:02]12033: WAF :: fetched 152 new logs [01-06-2022 11:53:01]15549: WAF :: fetched 179 new logs [01-06-2022 11:54:02]19055: WAF :: fetched 149 new logs [01-06-2022 11:55:01]22573: WAF :: fetched 104 new logs [01-06-2022 11:56:02]26333: WAF :: fetched 113 new logs [01-06-2022 11:57:01]29654: WAF :: fetched 103 new logs [01-06-2022 11:58:02]871: WAF :: fetched 113 new logs [01-06-2022 11:59:01]4417: WAF :: fetched 107 new logs [01-06-2022 12:00:01]7650: WAF :: fetched 110 new logs [01-06-2022 12:01:01]11733: WAF :: fetched 19 new logs [01-06-2022 12:05:02]25594: WAF :: fetched 59 new logs [01-06-2022 12:06:02]29239: WAF :: fetched 112 new logs [01-06-2022 12:07:02]32634: WAF :: fetched 148 new logs [01-06-2022 12:08:01]3676: WAF :: fetched 113 new logs [01-06-2022 12:09:02]7162: WAF :: fetched 1458 new logs [01-06-2022 12:10:07]10632: WAF :: fetched 10761 new logs [01-06-2022 12:11:01]14145: WAF :: fetched 111 new logs [01-06-2022 12:12:02]17525: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654096322 [01-06-2022 12:12:02]17525: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 12:12:04]17525: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 12:12:04]17525: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-1212/20220601-121202-YpeBwvRGKMeWf1C0tOW0PQAAAGI [01-06-2022 12:12:04]17525: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 12:12:05]17525: WAF :: fetched 129 new logs [01-06-2022 12:13:01]21526: WAF :: fetched 109 new logs [01-06-2022 12:14:01]25062: WAF :: fetched 131 new logs [01-06-2022 12:15:02]28585: WAF :: fetched 139 new logs [01-06-2022 12:16:02]32254: WAF :: fetched 117 new logs [01-06-2022 12:17:02]3357: WAF :: fetched 138 new logs [01-06-2022 12:18:02]6701: WAF :: fetched 108 new logs [01-06-2022 12:19:01]10112: WAF :: fetched 140 new logs [01-06-2022 12:20:02]13575: WAF :: fetched 119 new logs [01-06-2022 12:21:02]17163: WAF :: fetched 40 new logs [01-06-2022 12:25:02]31050: WAF :: fetched 4 new logs [01-06-2022 12:28:01]9018: WAF :: fetched 2 new logs [01-06-2022 12:29:02]12453: WAF :: fetched 2 new logs [01-06-2022 12:31:01]19386: WAF :: fetched 8 new logs [01-06-2022 12:32:01]22787: WAF :: fetched 14 new logs [01-06-2022 12:33:02]26224: WAF :: fetched 16 new logs [01-06-2022 12:34:02]29638: WAF :: fetched 17 new logs [01-06-2022 12:35:01]614: WAF :: fetched 12 new logs [01-06-2022 12:36:02]4287: WAF :: fetched 16 new logs [01-06-2022 12:37:01]7633: WAF :: fetched 18 new logs [01-06-2022 12:38:02]11059: WAF :: fetched 14 new logs [01-06-2022 12:39:01]14428: WAF :: fetched 14 new logs [01-06-2022 12:40:01]17871: WAF :: fetched 23 new logs [01-06-2022 12:41:02]21450: WAF :: fetched 59 new logs [01-06-2022 12:41:02]21450: Checking for user cron vulnerabilities [01-06-2022 12:42:01]24883: WAF :: fetched 61 new logs [01-06-2022 12:43:01]28305: WAF :: fetched 50 new logs [01-06-2022 12:44:01]31794: Checking ditributed CMS bruteforce attacks [01-06-2022 12:44:02]31794: WAF :: fetched 52 new logs [01-06-2022 12:45:01]: Checking for software updates [01-06-2022 12:45:01]2883: WAF :: fetched 52 new logs [01-06-2022 12:46:02]6440: WAF :: fetched 77 new logs [01-06-2022 12:47:01]9856: WAF :: fetched 39 new logs [01-06-2022 12:48:02]13336: WAF :: fetched 31 new logs [01-06-2022 12:49:01]16687: WAF :: fetched 23 new logs [01-06-2022 12:50:01]20113: WAF :: fetched 26 new logs [01-06-2022 12:51:02]23708: WAF :: fetched 29 new logs [01-06-2022 12:52:01]27160: WAF :: fetched 26 new logs [01-06-2022 12:53:02]30666: WAF :: fetched 16 new logs [01-06-2022 12:55:01]5143: WAF :: fetched 2 new logs [01-06-2022 12:57:01]12162: WAF :: fetched 5 new logs [01-06-2022 12:58:02]15676: WAF :: fetched 1 new logs [01-06-2022 13:01:02]26175: WAF :: fetched 1 new logs [01-06-2022 13:03:01]745: WAF :: fetched 1 new logs [01-06-2022 13:04:02]4353: WAF :: fetched 3 new logs [01-06-2022 13:06:02]11308: WAF :: fetched 1 new logs [01-06-2022 13:08:01]18010: WAF :: fetched 64 new logs [01-06-2022 13:09:02]21559: WAF :: fetched 115 new logs [01-06-2022 13:10:02]24990: WAF :: fetched 89 new logs [01-06-2022 13:11:02]28554: WAF :: fetched 78 new logs [01-06-2022 13:12:01]31945: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654099921 [01-06-2022 13:12:01]31945: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 13:12:03]31945: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 13:12:03]31945: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-1312/20220601-131201-YpeP0TbuzAcC0zTF12IvqgAAAC8 [01-06-2022 13:12:03]31945: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 13:12:04]31945: WAF :: fetched 1 new logs [01-06-2022 13:14:01]6493: WAF :: fetched 81 new logs [01-06-2022 13:15:02]9932: WAF :: fetched 126 new logs [01-06-2022 13:17:02]17057: WAF :: fetched 1 new logs [01-06-2022 13:25:02]12532: WAF :: fetched 1 new logs [01-06-2022 13:29:02]26192: WAF :: fetched 3 new logs [01-06-2022 13:30:01]29691: WAF :: fetched 2 new logs [01-06-2022 13:31:02]989: WAF :: fetched 3 new logs [01-06-2022 13:33:02]7936: WAF :: fetched 3 new logs [01-06-2022 13:34:02]11364: WAF :: fetched 1 new logs [01-06-2022 13:35:02]14725: WAF :: fetched 1 new logs [01-06-2022 13:36:01]18255: WAF :: fetched 3 new logs [01-06-2022 13:38:01]25094: WAF :: fetched 1 new logs [01-06-2022 13:40:01]32142: WAF :: fetched 2 new logs [01-06-2022 13:41:02]3374: Checking for user cron vulnerabilities [01-06-2022 13:42:02]6819: WAF :: fetched 2 new logs [01-06-2022 13:43:01]10235: WAF :: fetched 3 new logs [01-06-2022 13:44:02]13729: Checking ditributed CMS bruteforce attacks [01-06-2022 13:44:02]13729: WAF :: fetched 2 new logs [01-06-2022 13:45:01]: Checking for definition updates [01-06-2022 13:45:01]17125: WAF :: fetched 1 new logs [01-06-2022 13:46:01]20691: WAF :: fetched 2 new logs [01-06-2022 13:47:02]24103: WAF :: fetched 2 new logs [01-06-2022 13:51:01]5575: WAF :: fetched 3 new logs [01-06-2022 13:52:01]9078: WAF :: fetched 5 new logs [01-06-2022 13:53:02]12555: WAF :: fetched 3 new logs [01-06-2022 13:54:02]15983: WAF :: fetched 1 new logs [01-06-2022 13:55:02]19413: WAF :: fetched 2 new logs [01-06-2022 13:56:01]22921: WAF :: fetched 1 new logs [01-06-2022 13:57:02]26336: WAF :: fetched 2 new logs [01-06-2022 13:59:02]919: WAF :: fetched 1 new logs [01-06-2022 14:01:01]8195: WAF :: fetched 1 new logs [01-06-2022 14:02:02]11617: WAF :: fetched 1 new logs [01-06-2022 14:05:01]21899: WAF :: fetched 1 new logs [01-06-2022 14:09:02]3421: WAF :: fetched 4 new logs [01-06-2022 14:10:02]6843: WAF :: fetched 1 new logs [01-06-2022 14:11:02]10471: WAF :: fetched 6 new logs [01-06-2022 14:12:02]13831: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654103522 [01-06-2022 14:12:02]13831: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 14:12:04]13831: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 14:12:04]13831: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-1412/20220601-141202-Yped4iWHI8fzi8DAmO1IAQAAAAM [01-06-2022 14:12:04]13831: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 14:12:04]13831: WAF :: fetched 2 new logs [01-06-2022 14:13:02]17294: WAF :: fetched 1 new logs [01-06-2022 14:18:02]2109: WAF :: fetched 1 new logs [01-06-2022 14:19:02]5536: WAF :: fetched 1 new logs [01-06-2022 14:24:02]22809: WAF :: fetched 1 new logs [01-06-2022 14:25:01]26310: WAF :: fetched 3 new logs [01-06-2022 14:26:02]29962: WAF :: fetched 1 new logs [01-06-2022 14:27:01]974: WAF :: fetched 2 new logs [01-06-2022 14:28:02]4431: WAF :: fetched 2 new logs [01-06-2022 14:29:01]7782: WAF :: fetched 1 new logs [01-06-2022 14:32:01]18108: WAF :: fetched 1 new logs [01-06-2022 14:33:02]21585: WAF :: fetched 2 new logs [01-06-2022 14:35:02]28488: WAF :: fetched 3 new logs [01-06-2022 14:37:01]3143: WAF :: fetched 2 new logs [01-06-2022 14:40:01]13359: WAF :: fetched 2 new logs [01-06-2022 14:41:02]16933: Checking for user cron vulnerabilities [01-06-2022 14:42:02]20287: WAF :: fetched 1 new logs [01-06-2022 14:43:01]23637: WAF :: fetched 1 new logs [01-06-2022 14:44:01]27079: Checking ditributed CMS bruteforce attacks [01-06-2022 14:45:02]30553: WAF :: fetched 1 new logs [01-06-2022 14:46:02]1728: WAF :: fetched 6 new logs [01-06-2022 14:47:01]5160: WAF :: fetched 2 new logs [01-06-2022 14:48:02]8650: WAF :: fetched 1 new logs [01-06-2022 14:49:01]12073: WAF :: fetched 1 new logs [01-06-2022 14:50:02]15595: WAF :: fetched 1 new logs [01-06-2022 14:53:02]26074: WAF :: fetched 48 new logs [01-06-2022 14:53:02]26070: Updated license status via CDN [01-06-2022 14:54:01]29479: WAF :: fetched 63 new logs [01-06-2022 14:55:02]473: WAF :: fetched 74 new logs [01-06-2022 14:56:02]4216: WAF :: fetched 56 new logs [01-06-2022 14:57:01]7663: WAF :: fetched 62 new logs [01-06-2022 14:58:02]11136: WAF :: fetched 61 new logs [01-06-2022 14:59:02]14575: WAF :: fetched 67 new logs [01-06-2022 15:00:02]17818: WAF :: fetched 23 new logs [01-06-2022 15:01:01]21808: Reseting cPGuard inotify settings [01-06-2022 15:01:01]21809: WAF :: fetched 13 new logs [01-06-2022 15:02:01]25267: WAF :: fetched 51 new logs [01-06-2022 15:03:02]28780: WAF :: fetched 75 new logs [01-06-2022 15:04:01]32328: WAF :: fetched 67 new logs [01-06-2022 15:05:02]3452: WAF :: fetched 65 new logs [01-06-2022 15:06:02]7038: WAF :: fetched 71 new logs [01-06-2022 15:07:01]10478: WAF :: fetched 22 new logs [01-06-2022 15:08:02]13940: WAF :: fetched 1 new logs [01-06-2022 15:11:01]24454: WAF :: fetched 1 new logs [01-06-2022 15:12:02]27955: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654107122 [01-06-2022 15:12:02]27955: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 15:12:04]27955: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 15:12:04]27955: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-1512/20220601-151202-Yper8kn54g5jfgjCMpp3AAAAAAQ [01-06-2022 15:12:04]27955: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [01-06-2022 15:12:04]27955: WAF :: fetched 1 new logs [01-06-2022 15:13:02]31470: WAF :: fetched 4 new logs [01-06-2022 15:15:02]6099: WAF :: fetched 1 new logs [01-06-2022 15:16:01]9827: WAF :: fetched 1 new logs [01-06-2022 15:18:02]16891: WAF :: fetched 3 new logs [01-06-2022 15:19:02]20378: WAF :: fetched 4 new logs [01-06-2022 15:20:01]23871: WAF :: fetched 7 new logs [01-06-2022 15:21:01]27531: WAF :: fetched 7 new logs [01-06-2022 15:22:02]31062: WAF :: fetched 6 new logs [01-06-2022 15:23:01]2115: WAF :: fetched 5 new logs [01-06-2022 15:24:01]5585: WAF :: fetched 1 new logs [01-06-2022 15:26:01]12623: WAF :: fetched 1 new logs [01-06-2022 15:27:02]16088: WAF :: fetched 5 new logs [01-06-2022 15:31:01]30089: WAF :: fetched 5 new logs [01-06-2022 15:32:01]1205: WAF :: fetched 4 new logs [01-06-2022 15:33:01]4677: WAF :: fetched 1 new logs [01-06-2022 15:34:02]8181: WAF :: fetched 3 new logs [01-06-2022 15:35:01]11542: WAF :: fetched 2 new logs [01-06-2022 15:40:02]28864: WAF :: fetched 1 new logs [01-06-2022 15:41:01]32511: WAF :: fetched 6 new logs [01-06-2022 15:41:01]32511: Checking for user cron vulnerabilities [01-06-2022 15:43:01]7037: WAF :: fetched 1 new logs [01-06-2022 15:44:02]10498: Checking ditributed CMS bruteforce attacks [01-06-2022 15:47:01]21040: WAF :: fetched 3 new logs [01-06-2022 15:48:01]24460: WAF :: fetched 2 new logs [01-06-2022 15:52:02]6081: WAF :: fetched 2 new logs [01-06-2022 15:56:02]19920: WAF :: fetched 6 new logs [01-06-2022 15:57:01]23303: WAF :: fetched 1 new logs [01-06-2022 15:58:02]26725: WAF :: fetched 2 new logs [01-06-2022 15:59:01]30182: WAF :: fetched 3 new logs [01-06-2022 16:01:02]5078: WAF :: fetched 6 new logs [01-06-2022 16:02:01]8560: WAF :: fetched 4 new logs [01-06-2022 16:03:01]11976: WAF :: fetched 2 new logs [01-06-2022 16:04:01]15383: WAF :: fetched 2 new logs [01-06-2022 16:05:01]18824: WAF :: fetched 4 new logs [01-06-2022 16:06:02]22432: WAF :: fetched 2 new logs [01-06-2022 16:07:01]25895: WAF :: fetched 3 new logs [01-06-2022 16:08:01]29356: WAF :: fetched 5 new logs [01-06-2022 16:11:01]7453: WAF :: fetched 1 new logs [01-06-2022 16:12:02]10901: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654110722 [01-06-2022 16:12:02]10901: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 16:12:04]10901: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 16:12:04]10901: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-1612/20220601-161202-Ype6AlH1J3WqIPO06siUowAAACM [01-06-2022 16:12:04]10901: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 16:12:04]10901: WAF :: fetched 101 new logs [01-06-2022 16:13:02]14268: WAF :: fetched 2 new logs [01-06-2022 16:18:02]31451: WAF :: fetched 1 new logs [01-06-2022 16:21:01]9893: WAF :: fetched 1 new logs [01-06-2022 16:28:01]1540: WAF :: fetched 2 new logs [01-06-2022 16:29:02]5014: WAF :: fetched 1 new logs [01-06-2022 16:31:01]11943: WAF :: fetched 6 new logs [01-06-2022 16:40:02]11102: WAF :: fetched 3 new logs [01-06-2022 16:41:02]14682: WAF :: fetched 3 new logs [01-06-2022 16:41:02]14682: Checking for user cron vulnerabilities [01-06-2022 16:42:02]18156: WAF :: fetched 1 new logs [01-06-2022 16:43:02]21565: WAF :: fetched 3 new logs [01-06-2022 16:44:01]24950: Checking ditributed CMS bruteforce attacks [01-06-2022 16:48:02]6624: WAF :: fetched 1 new logs [01-06-2022 16:50:01]13485: WAF :: fetched 1 new logs [01-06-2022 16:51:02]17008: WAF :: fetched 1 new logs [01-06-2022 16:52:02]20469: WAF :: fetched 4 new logs [01-06-2022 16:53:01]23904: WAF :: fetched 2 new logs [01-06-2022 16:55:02]30708: WAF :: fetched 2 new logs [01-06-2022 16:56:01]1845: WAF :: fetched 2 new logs [01-06-2022 16:57:02]5402: WAF :: fetched 3 new logs [01-06-2022 16:58:01]8758: WAF :: fetched 9 new logs [01-06-2022 17:00:02]15370: WAF :: fetched 2 new logs [01-06-2022 17:01:01]19319: WAF :: fetched 4 new logs [01-06-2022 17:02:02]22873: WAF :: fetched 1 new logs [01-06-2022 17:03:02]26284: WAF :: fetched 3 new logs [01-06-2022 17:04:01]29730: WAF :: fetched 6 new logs [01-06-2022 17:05:02]821: WAF :: fetched 324 new logs [01-06-2022 17:06:02]4360: WAF :: fetched 1107 new logs [01-06-2022 17:07:02]7874: WAF :: fetched 10 new logs [01-06-2022 17:08:02]11292: WAF :: fetched 6 new logs [01-06-2022 17:09:02]14785: WAF :: fetched 5 new logs [01-06-2022 17:10:01]18222: WAF :: fetched 2 new logs [01-06-2022 17:11:02]21777: WAF :: fetched 1 new logs [01-06-2022 17:12:01]25240: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654114321 [01-06-2022 17:12:01]25240: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 17:12:03]25240: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 17:12:04]25240: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-1712/20220601-171201-YpfIEeitLCDsC1HDEGf8lgAAABM [01-06-2022 17:12:04]25240: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 17:12:04]25240: WAF :: fetched 2 new logs [01-06-2022 17:14:01]32099: WAF :: fetched 2 new logs [01-06-2022 17:15:02]3226: WAF :: fetched 4 new logs [01-06-2022 17:16:02]6871: WAF :: fetched 1 new logs [01-06-2022 17:17:01]10387: WAF :: fetched 20 new logs [01-06-2022 17:18:02]13783: WAF :: fetched 41 new logs [01-06-2022 17:19:01]17409: httpd.conf changed. Refreshing watchlist. [01-06-2022 17:19:01]17410: WAF :: fetched 17 new logs [01-06-2022 17:20:01]20936: WAF :: fetched 1 new logs [01-06-2022 17:21:02]24504: WAF :: fetched 2 new logs [01-06-2022 17:22:02]28027: WAF :: fetched 2 new logs [01-06-2022 17:23:01]31600: httpd.conf changed. Refreshing watchlist. [01-06-2022 17:24:02]2674: WAF :: fetched 2 new logs [01-06-2022 17:25:01]6004: WAF :: fetched 1 new logs [01-06-2022 17:29:01]19741: WAF :: fetched 1 new logs [01-06-2022 17:30:02]23170: WAF :: fetched 2 new logs [01-06-2022 17:31:01]26602: WAF :: fetched 3 new logs [01-06-2022 17:32:02]30217: WAF :: fetched 1 new logs [01-06-2022 17:34:02]4679: WAF :: fetched 1 new logs [01-06-2022 17:35:01]8112: WAF :: fetched 2 new logs [01-06-2022 17:37:02]14996: WAF :: fetched 1 new logs [01-06-2022 17:38:02]18368: WAF :: fetched 4 new logs [01-06-2022 17:40:02]25163: WAF :: fetched 1 new logs [01-06-2022 17:41:01]28628: Checking for user cron vulnerabilities [01-06-2022 17:42:01]32114: WAF :: fetched 1 new logs [01-06-2022 17:43:02]3208: WAF :: fetched 1 new logs [01-06-2022 17:44:01]6502: Checking ditributed CMS bruteforce attacks [01-06-2022 17:44:01]6502: WAF :: fetched 2 new logs [01-06-2022 17:45:02]9900: WAF :: fetched 1 new logs [01-06-2022 17:47:02]16898: WAF :: fetched 1 new logs [01-06-2022 17:50:02]27174: WAF :: fetched 1 new logs [01-06-2022 17:52:02]2011: WAF :: fetched 1 new logs [01-06-2022 17:53:02]5359: WAF :: fetched 1 new logs [01-06-2022 17:56:01]15723: WAF :: fetched 1 new logs [01-06-2022 17:57:02]19240: WAF :: fetched 2 new logs [01-06-2022 17:58:02]22593: WAF :: fetched 1 new logs [01-06-2022 18:02:01]4197: WAF :: fetched 1 new logs [01-06-2022 18:03:02]7583: WAF :: fetched 2 new logs [01-06-2022 18:04:02]10966: WAF :: fetched 1 new logs [01-06-2022 18:05:01]14432: WAF :: fetched 2 new logs [01-06-2022 18:06:02]17894: WAF :: fetched 1 new logs [01-06-2022 18:09:02]28109: WAF :: fetched 1 new logs [01-06-2022 18:11:02]2793: WAF :: fetched 1 new logs [01-06-2022 18:12:01]6228: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654117921 [01-06-2022 18:12:01]6228: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 18:12:03]6228: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 18:12:04]6228: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-1812/20220601-181201-YpfWIV4rNNNawIUOdNGPeQAAABU [01-06-2022 18:12:04]6228: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 18:12:04]6228: WAF :: fetched 3 new logs [01-06-2022 18:13:01]9608: WAF :: fetched 1 new logs [01-06-2022 18:15:01]16355: WAF :: fetched 1 new logs [01-06-2022 18:18:01]26644: WAF :: fetched 1 new logs [01-06-2022 18:20:01]1047: WAF :: fetched 1 new logs [01-06-2022 18:21:02]4579: WAF :: fetched 1 new logs [01-06-2022 18:24:02]14865: WAF :: fetched 2 new logs [01-06-2022 18:30:01]2954: WAF :: fetched 1 new logs [01-06-2022 18:32:02]9838: WAF :: fetched 2 new logs [01-06-2022 18:33:01]13163: WAF :: fetched 2 new logs [01-06-2022 18:34:02]16554: WAF :: fetched 1 new logs [01-06-2022 18:35:02]19922: WAF :: fetched 2 new logs [01-06-2022 18:37:01]26820: WAF :: fetched 1 new logs [01-06-2022 18:40:02]4879: WAF :: fetched 27 new logs [01-06-2022 18:41:01]8280: Checking for user cron vulnerabilities [01-06-2022 18:42:02]11845: WAF :: fetched 1 new logs [01-06-2022 18:44:01]18629: Checking ditributed CMS bruteforce attacks [01-06-2022 18:45:01]22045: WAF :: fetched 1 new logs [01-06-2022 18:49:02]3630: WAF :: fetched 1 new logs [01-06-2022 18:51:02]10537: WAF :: fetched 1 new logs [01-06-2022 18:52:01]14001: WAF :: fetched 1 new logs [01-06-2022 18:53:01]17362: WAF :: fetched 4 new logs [01-06-2022 18:54:02]20791: WAF :: fetched 1 new logs [01-06-2022 18:55:01]24138: WAF :: fetched 11 new logs [01-06-2022 18:56:02]27582: WAF :: fetched 2 new logs [01-06-2022 18:57:01]31098: WAF :: fetched 1 new logs [01-06-2022 18:58:02]2181: WAF :: fetched 1 new logs [01-06-2022 18:59:02]5632: WAF :: fetched 1 new logs [01-06-2022 19:00:01]8734: WAF :: fetched 1 new logs [01-06-2022 19:01:02]12744: WAF :: fetched 1 new logs [01-06-2022 19:07:01]1202: httpd.conf changed. Refreshing watchlist. [01-06-2022 19:08:01]4711: WAF :: fetched 1 new logs [01-06-2022 19:11:01]15225: httpd.conf changed. Refreshing watchlist. [01-06-2022 19:12:02]18777: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654121522 [01-06-2022 19:12:02]18777: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 19:12:04]18777: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 19:12:04]18777: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-1912/20220601-191202-YpfkMnmlTHgcxJWGpV6dtwAAACg [01-06-2022 19:12:04]18777: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 19:12:04]18777: WAF :: fetched 2 new logs [01-06-2022 19:15:01]28971: WAF :: fetched 1 new logs [01-06-2022 19:27:01]5586: WAF :: fetched 2 new logs [01-06-2022 19:29:01]12482: WAF :: fetched 5 new logs [01-06-2022 19:30:02]15963: WAF :: fetched 1 new logs [01-06-2022 19:31:01]19380: WAF :: fetched 1 new logs [01-06-2022 19:32:02]22959: WAF :: fetched 9 new logs [01-06-2022 19:33:01]26350: WAF :: fetched 1 new logs [01-06-2022 19:34:02]29845: WAF :: fetched 1 new logs [01-06-2022 19:36:02]4385: WAF :: fetched 1 new logs [01-06-2022 19:37:01]8005: WAF :: fetched 1 new logs [01-06-2022 19:41:02]22416: Checking for user cron vulnerabilities [01-06-2022 19:42:01]25994: WAF :: fetched 3 new logs [01-06-2022 19:44:02]674: Checking ditributed CMS bruteforce attacks [01-06-2022 19:44:02]674: WAF :: fetched 2 new logs [01-06-2022 19:45:01]: Checking for definition updates [01-06-2022 19:45:01]4244: WAF :: fetched 2 new logs [01-06-2022 19:48:01]14871: WAF :: fetched 2 new logs [01-06-2022 19:49:02]18458: WAF :: fetched 1 new logs [01-06-2022 19:50:02]22280: WAF :: fetched 7 new logs [01-06-2022 19:52:02]30216: WAF :: fetched 1 new logs [01-06-2022 19:54:02]5019: WAF :: fetched 2 new logs [01-06-2022 19:56:01]14021: WAF :: fetched 3 new logs [01-06-2022 19:57:01]18976: WAF :: fetched 5 new logs [01-06-2022 19:58:02]23004: WAF :: fetched 5 new logs [01-06-2022 19:59:02]27173: WAF :: fetched 5 new logs [01-06-2022 20:00:01]30528: WAF :: fetched 1 new logs [01-06-2022 20:02:01]6056: WAF :: fetched 1 new logs [01-06-2022 20:04:02]13161: WAF :: fetched 1 new logs [01-06-2022 20:09:01]31001: WAF :: fetched 1 new logs [01-06-2022 20:10:01]2166: WAF :: fetched 2 new logs [01-06-2022 20:12:01]9369: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654125121 [01-06-2022 20:12:01]9369: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 20:12:03]9369: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 20:12:04]9369: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-2012/20220601-201201-YpfyQT_eLsDiohwSM9imEwAAABk [01-06-2022 20:12:04]9369: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 20:15:01]19895: WAF :: fetched 3 new logs [01-06-2022 20:17:01]27020: WAF :: fetched 2 new logs [01-06-2022 20:19:02]1819: WAF :: fetched 1 new logs [01-06-2022 20:24:01]19695: WAF :: fetched 23 new logs [01-06-2022 20:25:02]23269: WAF :: fetched 25 new logs [01-06-2022 20:26:01]26869: WAF :: fetched 25 new logs [01-06-2022 20:27:02]30566: WAF :: fetched 6 new logs [01-06-2022 20:28:02]1732: WAF :: fetched 20 new logs [01-06-2022 20:29:01]5286: WAF :: fetched 31 new logs [01-06-2022 20:30:02]8901: WAF :: fetched 27 new logs [01-06-2022 20:31:01]12470: WAF :: fetched 24 new logs [01-06-2022 20:32:01]16115: WAF :: fetched 10 new logs [01-06-2022 20:34:01]23164: WAF :: fetched 1 new logs [01-06-2022 20:36:02]30319: WAF :: fetched 2 new logs [01-06-2022 20:38:02]5145: WAF :: fetched 1 new logs [01-06-2022 20:39:01]8677: WAF :: fetched 1 new logs [01-06-2022 20:40:02]12175: WAF :: fetched 1 new logs [01-06-2022 20:41:01]15696: WAF :: fetched 2 new logs [01-06-2022 20:41:01]15696: Checking for user cron vulnerabilities [01-06-2022 20:44:02]26348: Checking ditributed CMS bruteforce attacks [01-06-2022 20:45:01]29833: WAF :: fetched 3 new logs [01-06-2022 20:46:02]1018: WAF :: fetched 2 new logs [01-06-2022 20:49:02]11657: WAF :: fetched 1 new logs [01-06-2022 20:50:02]15453: WAF :: fetched 4 new logs [01-06-2022 20:50:02]15454: httpd.conf changed. Refreshing watchlist. [01-06-2022 20:52:01]22607: WAF :: fetched 1 new logs [01-06-2022 20:54:01]29699: WAF :: fetched 1 new logs [01-06-2022 20:58:02]11630: WAF :: fetched 1 new logs [01-06-2022 21:01:02]22309: WAF :: fetched 1 new logs [01-06-2022 21:02:01]25946: WAF :: fetched 1 new logs [01-06-2022 21:03:02]29508: WAF :: fetched 2 new logs [01-06-2022 21:04:01]581: WAF :: fetched 1 new logs [01-06-2022 21:11:01]25382: httpd.conf changed. Refreshing watchlist. [01-06-2022 21:12:02]29047: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654128722 [01-06-2022 21:12:02]29047: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 21:12:04]29047: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 21:12:04]29047: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-2112/20220601-211202-YpgAUkBkWWEq5WiuG8qzuAAAABU [01-06-2022 21:12:04]29047: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 21:12:05]29047: WAF :: fetched 2 new logs [01-06-2022 21:14:01]3719: WAF :: fetched 1 new logs [01-06-2022 21:19:02]21486: WAF :: fetched 2 new logs [01-06-2022 21:20:02]25012: WAF :: fetched 1 new logs [01-06-2022 21:21:01]28645: WAF :: fetched 1 new logs [01-06-2022 21:22:02]32294: WAF :: fetched 1 new logs [01-06-2022 21:23:01]3482: WAF :: fetched 4 new logs [01-06-2022 21:24:01]7065: WAF :: fetched 3 new logs [01-06-2022 21:25:02]10639: WAF :: fetched 4 new logs [01-06-2022 21:31:02]32010: WAF :: fetched 2 new logs [01-06-2022 21:32:01]3245: WAF :: fetched 7 new logs [01-06-2022 21:33:02]6825: WAF :: fetched 2 new logs [01-06-2022 21:34:02]10291: WAF :: fetched 1 new logs [01-06-2022 21:35:01]13797: WAF :: fetched 2 new logs [01-06-2022 21:36:02]17339: WAF :: fetched 1 new logs [01-06-2022 21:37:01]20874: WAF :: fetched 2 new logs [01-06-2022 21:38:02]24400: WAF :: fetched 2 new logs [01-06-2022 21:39:01]27856: WAF :: fetched 1 new logs [01-06-2022 21:41:01]2650: Checking for user cron vulnerabilities [01-06-2022 21:43:02]9728: WAF :: fetched 1 new logs [01-06-2022 21:44:01]13163: Checking ditributed CMS bruteforce attacks [01-06-2022 21:44:01]13163: WAF :: fetched 2 new logs [01-06-2022 21:46:02]20193: WAF :: fetched 1 new logs [01-06-2022 21:49:01]30791: WAF :: fetched 3 new logs [01-06-2022 21:50:02]1937: WAF :: fetched 6 new logs [01-06-2022 21:52:02]9028: WAF :: fetched 1 new logs [01-06-2022 21:53:02]12628: WAF :: fetched 5 new logs [01-06-2022 21:54:01]16092: WAF :: fetched 1 new logs [01-06-2022 21:55:02]19613: WAF :: fetched 2 new logs [01-06-2022 21:57:02]26633: WAF :: fetched 1 new logs [01-06-2022 22:00:02]4683: WAF :: fetched 1 new logs [01-06-2022 22:07:07]29647: Performing Domain reputation checks [01-06-2022 22:09:01]4322: WAF :: fetched 1 new logs [01-06-2022 22:12:02]14921: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654132322 [01-06-2022 22:12:02]14921: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 22:12:04]14921: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 22:12:04]14921: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-2212/20220601-221202-YpgOYtAl76h8oX62fwumuAAAACk [01-06-2022 22:12:04]14921: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 22:12:04]14921: WAF :: fetched 1 new logs [01-06-2022 22:15:02]25482: WAF :: fetched 1 new logs [01-06-2022 22:17:01]32677: WAF :: fetched 1 new logs [01-06-2022 22:25:01]28606: WAF :: fetched 1 new logs [01-06-2022 22:26:02]32161: WAF :: fetched 3 new logs [01-06-2022 22:27:02]3347: WAF :: fetched 2 new logs [01-06-2022 22:28:02]6913: WAF :: fetched 1 new logs [01-06-2022 22:29:01]10396: WAF :: fetched 5 new logs [01-06-2022 22:30:02]13911: WAF :: fetched 2 new logs [01-06-2022 22:31:01]17442: WAF :: fetched 5 new logs [01-06-2022 22:32:02]20989: WAF :: fetched 1 new logs [01-06-2022 22:33:02]24534: WAF :: fetched 3 new logs [01-06-2022 22:34:02]27996: WAF :: fetched 1 new logs [01-06-2022 22:35:01]31502: WAF :: fetched 1 new logs [01-06-2022 22:36:02]2732: WAF :: fetched 2 new logs [01-06-2022 22:37:02]6205: WAF :: fetched 4 new logs [01-06-2022 22:39:02]13256: WAF :: fetched 2 new logs [01-06-2022 22:40:02]16723: WAF :: fetched 2 new logs [01-06-2022 22:41:01]20260: WAF :: fetched 1 new logs [01-06-2022 22:41:01]20260: Checking for user cron vulnerabilities [01-06-2022 22:43:01]27285: WAF :: fetched 1 new logs [01-06-2022 22:44:02]30801: Checking ditributed CMS bruteforce attacks [01-06-2022 22:44:02]30801: WAF :: fetched 2 new logs [01-06-2022 22:45:01]1882: WAF :: fetched 2 new logs [01-06-2022 22:46:02]5446: WAF :: fetched 1 new logs [01-06-2022 22:48:02]12557: WAF :: fetched 2 new logs [01-06-2022 22:51:02]22988: WAF :: fetched 2 new logs [01-06-2022 22:52:01]26474: WAF :: fetched 6 new logs [01-06-2022 22:53:02]30113: WAF :: fetched 3 new logs [01-06-2022 22:54:01]1176: WAF :: fetched 2 new logs [01-06-2022 22:55:02]4733: WAF :: fetched 1 new logs [01-06-2022 22:58:02]15201: WAF :: fetched 3 new logs [01-06-2022 23:01:01]25714: WAF :: fetched 2 new logs [01-06-2022 23:02:02]29227: WAF :: fetched 1 new logs [01-06-2022 23:05:01]7230: WAF :: fetched 1 new logs [01-06-2022 23:06:02]10757: WAF :: fetched 1 new logs [01-06-2022 23:07:01]14299: WAF :: fetched 2 new logs [01-06-2022 23:07:46]14479: Performed RBL check for 23.111.136.34. [01-06-2022 23:08:01]17843: WAF :: fetched 1 new logs [01-06-2022 23:09:02]21296: WAF :: fetched 3 new logs [01-06-2022 23:10:01]24730: WAF :: fetched 1 new logs [01-06-2022 23:11:02]28264: WAF :: fetched 1 new logs [01-06-2022 23:12:02]31720: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654135922 [01-06-2022 23:12:02]31720: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-06-2022 23:12:04]31720: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-06-2022 23:12:04]31720: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220601/20220601-2312/20220601-231202-YpgccplqZPP0XFXtyrCSYgAAAD0 [01-06-2022 23:12:04]31720: WAF :: No suitable log file found. Using SQLite.. [01-06-2022 23:12:04]31720: WAF :: fetched 3 new logs [01-06-2022 23:13:02]2924: WAF :: fetched 3 new logs [01-06-2022 23:14:01]6412: WAF :: fetched 3 new logs [01-06-2022 23:19:01]23642: WAF :: fetched 3 new logs [01-06-2022 23:20:02]27095: WAF :: fetched 1 new logs [01-06-2022 23:22:02]1707: WAF :: fetched 1 new logs [01-06-2022 23:23:02]5246: WAF :: fetched 1 new logs [01-06-2022 23:24:01]8661: WAF :: fetched 1 new logs [01-06-2022 23:25:02]12114: WAF :: fetched 1 new logs [01-06-2022 23:26:01]15571: WAF :: fetched 3 new logs [01-06-2022 23:28:02]22501: WAF :: fetched 4 new logs [01-06-2022 23:30:02]29387: WAF :: fetched 2 new logs [01-06-2022 23:34:02]11013: WAF :: fetched 1 new logs [01-06-2022 23:35:01]14429: WAF :: fetched 1 new logs [01-06-2022 23:39:01]28328: WAF :: fetched 1 new logs [01-06-2022 23:40:02]31863: WAF :: fetched 6 new logs [01-06-2022 23:41:01]3042: Checking for user cron vulnerabilities [01-06-2022 23:43:01]10007: WAF :: fetched 1 new logs [01-06-2022 23:44:02]13481: Checking ditributed CMS bruteforce attacks [01-06-2022 23:44:02]13481: WAF :: fetched 1 new logs [01-06-2022 23:45:02]16896: WAF :: fetched 2 new logs [01-06-2022 23:46:01]20397: WAF :: fetched 1 new logs [01-06-2022 23:47:02]23864: WAF :: fetched 1 new logs [01-06-2022 23:48:01]27361: WAF :: fetched 2 new logs [01-06-2022 23:49:02]30892: WAF :: fetched 2 new logs [01-06-2022 23:52:02]9009: WAF :: fetched 1 new logs [01-06-2022 23:54:01]15863: httpd.conf changed. Refreshing watchlist. [01-06-2022 23:54:01]15864: WAF :: fetched 3 new logs [01-06-2022 23:55:02]19544: WAF :: fetched 1 new logs [01-06-2022 23:57:01]26472: WAF :: fetched 2 new logs [01-06-2022 23:58:02]30097: WAF :: fetched 2 new logs [01-06-2022 23:59:01]1170: WAF :: fetched 1 new logs [02-06-2022 00:00:01]4428: WAF :: fetched 1 new logs [02-06-2022 00:01:02]8596: httpd.conf changed. Refreshing watchlist. [02-06-2022 00:01:02]8594: WAF :: fetched 1 new logs [02-06-2022 00:01:03]8594: Sending daily report for June 2, 2022 [02-06-2022 00:04:02]19111: WAF :: fetched 1 new logs [02-06-2022 00:05:01]22557: WAF :: fetched 1 new logs [02-06-2022 00:05:01]22557: Deleted 0 entries older than 6 MONTH from scanner_logs [02-06-2022 00:05:01]22557: Deleted 0 files from Quarantine [02-06-2022 00:09:02]4184: WAF :: fetched 5 new logs [02-06-2022 00:11:01]11094: WAF :: fetched 2 new logs [02-06-2022 00:12:02]14573: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654139522 [02-06-2022 00:12:02]14573: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 00:12:04]14573: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 00:12:04]14573: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-0012/20220602-001202-YpgqgrxQVXYbRS5teirEUwAAAAQ [02-06-2022 00:12:04]14573: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 00:12:04]14573: WAF :: fetched 5 new logs [02-06-2022 00:13:01]18073: WAF :: fetched 1 new logs [02-06-2022 00:16:02]28489: WAF :: fetched 1 new logs [02-06-2022 00:17:01]31916: WAF :: fetched 2 new logs [02-06-2022 00:19:01]6586: WAF :: fetched 2 new logs [02-06-2022 00:22:01]16904: WAF :: fetched 2 new logs [02-06-2022 00:23:02]20430: WAF :: fetched 2 new logs [02-06-2022 00:24:02]23819: WAF :: fetched 3 new logs [02-06-2022 00:25:02]27213: WAF :: fetched 2 new logs [02-06-2022 00:26:01]30745: WAF :: fetched 1 new logs [02-06-2022 00:27:02]1813: WAF :: fetched 1 new logs [02-06-2022 00:28:01]5371: WAF :: fetched 1 new logs [02-06-2022 00:36:01]684: WAF :: fetched 2 new logs [02-06-2022 00:40:02]14675: WAF :: fetched 2 new logs [02-06-2022 00:41:01]18108: Checking for user cron vulnerabilities [02-06-2022 00:44:02]28572: Checking ditributed CMS bruteforce attacks [02-06-2022 00:44:02]28572: WAF :: fetched 1 new logs [02-06-2022 00:45:01]: Checking for software updates [02-06-2022 00:51:02]20479: WAF :: fetched 1 new logs [02-06-2022 00:53:02]27427: WAF :: fetched 1 new logs [02-06-2022 00:54:01]30880: WAF :: fetched 2 new logs [02-06-2022 01:05:01]6516: WAF :: fetched 5 new logs [02-06-2022 01:10:02]24469: WAF :: fetched 1 new logs [02-06-2022 01:12:01]31827: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654143121 [02-06-2022 01:12:01]31827: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 01:12:03]31827: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 01:12:03]31827: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-0112/20220602-011201-Ypg4kZqzMDjZQguTRCIDfQAAAAc [02-06-2022 01:12:03]31827: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [02-06-2022 01:12:04]31827: WAF :: fetched 1 new logs [02-06-2022 01:13:02]3199: WAF :: fetched 2 new logs [02-06-2022 01:14:01]6830: WAF :: fetched 1 new logs [02-06-2022 01:15:02]10400: WAF :: fetched 33 new logs [02-06-2022 01:18:02]21492: WAF :: fetched 1 new logs [02-06-2022 01:19:01]25143: WAF :: fetched 2 new logs [02-06-2022 01:20:02]28902: WAF :: fetched 3 new logs [02-06-2022 01:26:01]18228: WAF :: fetched 1 new logs [02-06-2022 01:27:01]21725: WAF :: fetched 1 new logs [02-06-2022 01:28:02]25610: WAF :: fetched 2 new logs [02-06-2022 01:29:01]29293: WAF :: fetched 2 new logs [02-06-2022 01:32:02]8290: WAF :: fetched 1 new logs [02-06-2022 01:36:01]22780: WAF :: fetched 1 new logs [02-06-2022 01:37:02]26332: WAF :: fetched 1 new logs [02-06-2022 01:38:01]29911: WAF :: fetched 1 new logs [02-06-2022 01:41:01]8873: Checking for user cron vulnerabilities [02-06-2022 01:44:02]20501: Checking ditributed CMS bruteforce attacks [02-06-2022 01:44:02]20501: WAF :: fetched 2 new logs [02-06-2022 01:45:01]: Checking for definition updates [02-06-2022 01:45:01]24084: WAF :: fetched 1 new logs [02-06-2022 01:46:02]27649: WAF :: fetched 9 new logs [02-06-2022 01:47:01]31374: WAF :: fetched 16 new logs [02-06-2022 01:51:01]13844: WAF :: fetched 1 new logs [02-06-2022 01:56:01]31528: WAF :: fetched 1 new logs [02-06-2022 01:57:02]3076: WAF :: fetched 1 new logs [02-06-2022 01:58:01]6629: WAF :: fetched 5 new logs [02-06-2022 02:01:01]17385: WAF :: fetched 1 new logs [02-06-2022 02:02:02]20948: WAF :: fetched 1 new logs [02-06-2022 02:05:02]31517: WAF :: fetched 3 new logs [02-06-2022 02:07:02]6212: WAF :: fetched 1 new logs [02-06-2022 02:08:01]9747: WAF :: fetched 1 new logs [02-06-2022 02:09:01]13255: WAF :: fetched 2 new logs [02-06-2022 02:12:02]23799: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654146722 [02-06-2022 02:12:02]23799: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 02:12:04]23799: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 02:12:04]23799: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-0212/20220602-021202-YphGonNYkEaMc8tWmwNP_AAAABA [02-06-2022 02:12:04]23799: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 02:12:05]23799: WAF :: fetched 70 new logs [02-06-2022 02:14:01]30852: WAF :: fetched 4 new logs [02-06-2022 02:22:02]26500: WAF :: fetched 2 new logs [02-06-2022 02:26:01]8291: WAF :: fetched 2 new logs [02-06-2022 02:36:02]11094: WAF :: fetched 1 new logs [02-06-2022 02:37:01]14569: WAF :: fetched 1 new logs [02-06-2022 02:41:01]28767: Checking for user cron vulnerabilities [02-06-2022 02:44:01]6990: Checking ditributed CMS bruteforce attacks [02-06-2022 02:45:01]10470: WAF :: fetched 5 new logs [02-06-2022 02:46:02]14038: WAF :: fetched 2 new logs [02-06-2022 02:51:02]31700: WAF :: fetched 13 new logs [02-06-2022 02:52:01]2800: WAF :: fetched 61 new logs [02-06-2022 02:53:01]6315: WAF :: fetched 56 new logs [02-06-2022 02:53:01]6311: Updated license status via CDN [02-06-2022 02:54:02]9885: WAF :: fetched 58 new logs [02-06-2022 02:55:01]13551: WAF :: fetched 58 new logs [02-06-2022 02:56:02]17978: WAF :: fetched 49 new logs [02-06-2022 02:57:01]21661: WAF :: fetched 56 new logs [02-06-2022 02:58:02]25292: WAF :: fetched 39 new logs [02-06-2022 03:00:02]32115: WAF :: fetched 1 new logs [02-06-2022 03:00:03]32115: Found and updated 32 CMS installations [02-06-2022 03:01:00]32115: Wordpress installation #9 oabilheus.org.br has errors [02-06-2022 03:03:26]32115: Sending CMS version vulnerability report emails to cpanel users [02-06-2022 03:03:29]32115: Checking wordpress installations for suspicious directories [02-06-2022 03:04:22]11248: Sending CMS version vulnerability report emails to cpanel users [02-06-2022 03:04:25]11248: Checking wordpress installations for suspicious directories [02-06-2022 03:08:02]29742: WAF :: fetched 1 new logs [02-06-2022 03:12:01]11941: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654150321 [02-06-2022 03:12:01]11941: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 03:12:03]11941: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 03:12:04]11941: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-0312/20220602-031201-YphUsUIbmsC2OOP95Z52BAAAAAE [02-06-2022 03:12:04]11941: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 03:12:04]11941: WAF :: fetched 1 new logs [02-06-2022 03:13:02]15480: WAF :: fetched 5 new logs [02-06-2022 03:15:02]23180: WAF :: fetched 1 new logs [02-06-2022 03:17:01]30378: WAF :: fetched 1 new logs [02-06-2022 03:18:02]1549: WAF :: fetched 1 new logs [02-06-2022 03:21:01]24886: WAF :: fetched 6 new logs [02-06-2022 03:23:01]21314: WAF :: fetched 1 new logs [02-06-2022 03:25:02]28780: WAF :: fetched 1 new logs [02-06-2022 03:26:01]32335: WAF :: fetched 1 new logs [02-06-2022 03:31:01]17287: WAF :: fetched 2 new logs [02-06-2022 03:33:02]24196: WAF :: fetched 2 new logs [02-06-2022 03:36:01]2376: WAF :: fetched 1 new logs [02-06-2022 03:37:02]5932: WAF :: fetched 1 new logs [02-06-2022 03:41:01]19798: WAF :: fetched 2 new logs [02-06-2022 03:41:01]19798: Checking for user cron vulnerabilities [02-06-2022 03:44:01]30219: Checking ditributed CMS bruteforce attacks [02-06-2022 03:46:02]4864: WAF :: fetched 1 new logs [02-06-2022 03:47:02]8256: WAF :: fetched 1 new logs [02-06-2022 03:49:01]15594: WAF :: fetched 1 new logs [02-06-2022 03:50:02]19364: WAF :: fetched 27 new logs [02-06-2022 03:51:01]22814: WAF :: fetched 40 new logs [02-06-2022 03:52:02]26327: WAF :: fetched 41 new logs [02-06-2022 03:53:02]29840: WAF :: fetched 28 new logs [02-06-2022 03:54:01]1084: WAF :: fetched 41 new logs [02-06-2022 03:55:02]4711: WAF :: fetched 37 new logs [02-06-2022 03:56:01]8317: WAF :: fetched 38 new logs [02-06-2022 03:57:02]11813: WAF :: fetched 33 new logs [02-06-2022 03:58:02]15362: WAF :: fetched 17 new logs [02-06-2022 04:01:01]26464: WAF :: fetched 1 new logs [02-06-2022 04:02:01]29979: WAF :: fetched 3 new logs [02-06-2022 04:03:02]1079: WAF :: fetched 2 new logs [02-06-2022 04:04:01]4653: WAF :: fetched 1 new logs [02-06-2022 04:05:02]8112: WAF :: fetched 2 new logs [02-06-2022 04:12:02]32457: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654153922 [02-06-2022 04:12:02]32457: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 04:12:04]32457: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 04:12:04]32457: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-0412/20220602-041202-YphiwnRngR9_roInU04hPwAAABE [02-06-2022 04:12:04]32457: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [02-06-2022 04:12:04]32457: WAF :: fetched 1 new logs [02-06-2022 04:13:01]3572: WAF :: fetched 1 new logs [02-06-2022 04:14:02]7149: WAF :: fetched 2 new logs [02-06-2022 04:17:01]17558: WAF :: fetched 1 new logs [02-06-2022 04:28:01]23588: WAF :: fetched 2 new logs [02-06-2022 04:32:01]5324: WAF :: fetched 2 new logs [02-06-2022 04:33:02]8797: WAF :: fetched 1 new logs [02-06-2022 04:38:02]26271: WAF :: fetched 1 new logs [02-06-2022 04:40:01]898: WAF :: fetched 1 new logs [02-06-2022 04:41:02]4521: WAF :: fetched 1 new logs [02-06-2022 04:41:02]4521: Checking for user cron vulnerabilities [02-06-2022 04:42:01]7995: WAF :: fetched 2 new logs [02-06-2022 04:43:02]11467: WAF :: fetched 1 new logs [02-06-2022 04:44:01]14987: Checking ditributed CMS bruteforce attacks [02-06-2022 04:44:02]14987: WAF :: fetched 3 new logs [02-06-2022 04:47:01]25358: WAF :: fetched 1 new logs [02-06-2022 04:48:01]28824: WAF :: fetched 1 new logs [02-06-2022 04:59:02]2710: WAF :: fetched 14 new logs [02-06-2022 05:01:42]9854: Starting daily scan on files updated in last 24 hrs [02-06-2022 05:02:02]13362: WAF :: fetched 1 new logs [02-06-2022 05:03:01]16850: WAF :: fetched 1 new logs [02-06-2022 05:12:02]16163: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654157522 [02-06-2022 05:12:02]16163: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 05:12:04]16163: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 05:12:04]16163: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-0512/20220602-051202-Yphw0mzJ1QJoYBt2l1ttvwAAAAY [02-06-2022 05:12:04]16163: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [02-06-2022 05:12:04]16163: WAF :: fetched 1 new logs [02-06-2022 05:13:01]19647: WAF :: fetched 1 new logs [02-06-2022 05:14:02]23222: WAF :: fetched 1 new logs [02-06-2022 05:20:02]11873: WAF :: fetched 1 new logs [02-06-2022 05:23:02]22389: WAF :: fetched 1 new logs [02-06-2022 05:33:02]24914: WAF :: fetched 1 new logs [02-06-2022 05:37:02]6702: WAF :: fetched 3 new logs [02-06-2022 05:38:01]10136: WAF :: fetched 1 new logs [02-06-2022 05:39:01]13742: WAF :: fetched 1 new logs [02-06-2022 05:41:01]20693: Checking for user cron vulnerabilities [02-06-2022 05:44:01]31131: Checking ditributed CMS bruteforce attacks [02-06-2022 05:44:01]31131: WAF :: fetched 1 new logs [02-06-2022 05:50:02]19437: WAF :: fetched 2 new logs [02-06-2022 05:54:02]837: WAF :: fetched 1 new logs [02-06-2022 05:55:01]4341: WAF :: fetched 1 new logs [02-06-2022 06:07:01]13653: WAF :: fetched 4 new logs [02-06-2022 06:11:01]27450: WAF :: fetched 1 new logs [02-06-2022 06:12:02]31028: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654161122 [02-06-2022 06:12:02]31028: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 06:12:04]31028: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 06:12:04]31028: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-0612/20220602-061202-Yph-4hyz5GZka_Z_PKwwRAAAAAE [02-06-2022 06:12:04]31028: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [02-06-2022 06:12:04]31028: WAF :: fetched 1 new logs [02-06-2022 06:13:01]2082: WAF :: fetched 1 new logs [02-06-2022 06:23:01]4367: WAF :: fetched 1 new logs [02-06-2022 06:27:01]18345: WAF :: fetched 1 new logs [02-06-2022 06:29:02]25266: WAF :: fetched 1 new logs [02-06-2022 06:30:01]28719: WAF :: fetched 1 new logs [02-06-2022 06:31:02]32220: WAF :: fetched 1 new logs [02-06-2022 06:36:02]17196: WAF :: fetched 1 new logs [02-06-2022 06:37:01]20592: WAF :: fetched 2 new logs [02-06-2022 06:41:02]2124: Checking for user cron vulnerabilities [02-06-2022 06:42:01]5590: WAF :: fetched 1 new logs [02-06-2022 06:44:01]12526: Checking ditributed CMS bruteforce attacks [02-06-2022 06:46:02]19314: WAF :: fetched 3 new logs [02-06-2022 06:47:01]22780: WAF :: fetched 1 new logs [02-06-2022 06:49:01]29783: WAF :: fetched 2 new logs [02-06-2022 06:51:01]4406: WAF :: fetched 1 new logs [02-06-2022 06:52:01]7805: WAF :: fetched 1 new logs [02-06-2022 06:53:01]11210: WAF :: fetched 4 new logs [02-06-2022 06:54:02]14766: WAF :: fetched 3 new logs [02-06-2022 06:56:01]21606: WAF :: fetched 1 new logs [02-06-2022 07:04:02]17151: WAF :: fetched 2 new logs [02-06-2022 07:11:01]9052: WAF :: fetched 1 new logs [02-06-2022 07:12:02]12514: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654164722 [02-06-2022 07:12:02]12514: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 07:12:04]12514: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 07:12:04]12514: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-0712/20220602-071202-YpiM8iyczwZh_Meqip827QAAABI [02-06-2022 07:12:04]12514: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 07:12:04]12514: WAF :: fetched 57 new logs [02-06-2022 07:15:01]22818: WAF :: fetched 2 new logs [02-06-2022 07:16:02]26291: WAF :: fetched 4 new logs [02-06-2022 07:17:02]29717: WAF :: fetched 3 new logs [02-06-2022 07:18:01]691: WAF :: fetched 1 new logs [02-06-2022 07:19:01]4291: WAF :: fetched 3 new logs [02-06-2022 07:21:01]11286: WAF :: fetched 1 new logs [02-06-2022 07:22:02]14735: WAF :: fetched 2 new logs [02-06-2022 07:24:01]21608: WAF :: fetched 5 new logs [02-06-2022 07:31:02]13632: WAF :: fetched 1 new logs [02-06-2022 07:33:02]20531: WAF :: fetched 2 new logs [02-06-2022 07:41:02]16118: Checking for user cron vulnerabilities [02-06-2022 07:44:01]26488: Checking ditributed CMS bruteforce attacks [02-06-2022 07:45:01]: Checking for definition updates [02-06-2022 07:45:01]30011: WAF :: fetched 1 new logs [02-06-2022 07:47:01]4602: WAF :: fetched 2 new logs [02-06-2022 07:48:01]8011: WAF :: fetched 2 new logs [02-06-2022 07:51:02]18508: WAF :: fetched 3 new logs [02-06-2022 07:52:01]21911: WAF :: fetched 4 new logs [02-06-2022 07:56:02]3529: WAF :: fetched 1 new logs [02-06-2022 08:02:01]24656: WAF :: fetched 2 new logs [02-06-2022 08:03:02]28126: WAF :: fetched 2 new logs [02-06-2022 08:05:02]2816: WAF :: fetched 2 new logs [02-06-2022 08:06:01]6267: WAF :: fetched 2 new logs [02-06-2022 08:07:02]9702: WAF :: fetched 1 new logs [02-06-2022 08:11:01]23622: WAF :: fetched 1 new logs [02-06-2022 08:12:02]27101: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654168322 [02-06-2022 08:12:02]27101: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 08:12:04]27101: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 08:12:04]27101: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-0812/20220602-081202-YpibAhB97U97TMpAfoWEUQAAABU [02-06-2022 08:12:04]27101: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [02-06-2022 08:12:04]27101: WAF :: fetched 1 new logs [02-06-2022 08:13:01]30517: WAF :: fetched 1 new logs [02-06-2022 08:15:01]5135: WAF :: fetched 3 new logs [02-06-2022 08:16:02]8662: WAF :: fetched 2 new logs [02-06-2022 08:17:01]12062: WAF :: fetched 1 new logs [02-06-2022 08:18:02]15617: WAF :: fetched 1 new logs [02-06-2022 08:19:02]19083: WAF :: fetched 2 new logs [02-06-2022 08:20:01]22757: WAF :: fetched 1 new logs [02-06-2022 08:20:01]22774: httpd.conf changed. Refreshing watchlist. [02-06-2022 08:21:02]26351: WAF :: fetched 1 new logs [02-06-2022 08:22:01]29815: WAF :: fetched 2 new logs [02-06-2022 08:24:02]4493: WAF :: fetched 2 new logs [02-06-2022 08:24:02]4488: httpd.conf changed. Refreshing watchlist. [02-06-2022 08:25:02]8008: WAF :: fetched 2 new logs [02-06-2022 08:27:01]14902: WAF :: fetched 3 new logs [02-06-2022 08:29:01]21824: WAF :: fetched 1 new logs [02-06-2022 08:31:02]29106: WAF :: fetched 1 new logs [02-06-2022 08:34:01]7504: WAF :: fetched 1 new logs [02-06-2022 08:35:01]11019: WAF :: fetched 18 new logs [02-06-2022 08:36:02]14532: WAF :: fetched 1 new logs [02-06-2022 08:37:01]17926: WAF :: fetched 1 new logs [02-06-2022 08:39:01]24956: WAF :: fetched 1 new logs [02-06-2022 08:41:02]32070: Checking for user cron vulnerabilities [02-06-2022 08:43:01]6707: WAF :: fetched 2 new logs [02-06-2022 08:44:02]10211: Checking ditributed CMS bruteforce attacks [02-06-2022 08:45:01]13710: WAF :: fetched 1 new logs [02-06-2022 08:46:01]17229: WAF :: fetched 2 new logs [02-06-2022 08:47:02]20714: WAF :: fetched 1 new logs [02-06-2022 08:48:01]24133: WAF :: fetched 1 new logs [02-06-2022 08:49:02]27612: WAF :: fetched 2 new logs [02-06-2022 08:50:02]31152: WAF :: fetched 1 new logs [02-06-2022 08:55:02]16306: WAF :: fetched 1 new logs [02-06-2022 08:57:01]23261: WAF :: fetched 4 new logs [02-06-2022 09:00:02]1107: WAF :: fetched 2 new logs [02-06-2022 09:05:02]19224: WAF :: fetched 1 new logs [02-06-2022 09:06:02]22687: WAF :: fetched 1 new logs [02-06-2022 09:10:02]4392: WAF :: fetched 2 new logs [02-06-2022 09:11:02]7908: WAF :: fetched 3 new logs [02-06-2022 09:12:01]11451: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654171921 [02-06-2022 09:12:01]11451: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 09:12:03]11451: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 09:12:04]11451: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-0912/20220602-091201-YpipETv77rnlxjXpdEdJMQAAAB0 [02-06-2022 09:12:04]11451: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 09:12:04]11451: WAF :: fetched 52 new logs [02-06-2022 09:21:01]11008: WAF :: fetched 1 new logs [02-06-2022 09:22:02]14528: WAF :: fetched 1 new logs [02-06-2022 09:24:01]21532: WAF :: fetched 1 new logs [02-06-2022 09:25:02]25151: WAF :: fetched 5 new logs [02-06-2022 09:26:02]28778: WAF :: fetched 4 new logs [02-06-2022 09:28:01]3534: WAF :: fetched 1 new logs [02-06-2022 09:29:01]6967: WAF :: fetched 1 new logs [02-06-2022 09:36:02]31893: WAF :: fetched 2 new logs [02-06-2022 09:40:02]13662: WAF :: fetched 1 new logs [02-06-2022 09:41:01]17362: WAF :: fetched 28 new logs [02-06-2022 09:41:01]17362: Checking for user cron vulnerabilities [02-06-2022 09:42:02]20969: WAF :: fetched 1 new logs [02-06-2022 09:43:02]24462: WAF :: fetched 3 new logs [02-06-2022 09:44:01]27974: Checking ditributed CMS bruteforce attacks [02-06-2022 09:46:02]3020: httpd.conf changed. Refreshing watchlist. [02-06-2022 09:47:01]6594: WAF :: fetched 1 new logs [02-06-2022 09:48:01]10199: WAF :: fetched 2 new logs [02-06-2022 09:50:02]17329: WAF :: fetched 6 new logs [02-06-2022 09:51:01]20891: WAF :: fetched 2 new logs [02-06-2022 09:52:01]24394: WAF :: fetched 6 new logs [02-06-2022 09:53:02]27897: WAF :: fetched 2 new logs [02-06-2022 09:56:02]6322: WAF :: fetched 2 new logs [02-06-2022 09:57:01]9790: WAF :: fetched 2 new logs [02-06-2022 10:03:01]31164: WAF :: fetched 1 new logs [02-06-2022 10:06:01]9574: WAF :: fetched 1 new logs [02-06-2022 10:12:02]31150: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654175522 [02-06-2022 10:12:02]31150: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 10:12:04]31150: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 10:12:04]31150: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-1012/20220602-101202-Ypi3IsVQ8ceFpW80jecBcQAAACk [02-06-2022 10:12:04]31150: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 10:12:04]31150: WAF :: fetched 2 new logs [02-06-2022 10:16:01]13075: WAF :: fetched 1 new logs [02-06-2022 10:17:02]16567: WAF :: fetched 1 new logs [02-06-2022 10:18:02]20081: WAF :: fetched 1 new logs [02-06-2022 10:19:01]23522: WAF :: fetched 1 new logs [02-06-2022 10:21:02]30734: WAF :: fetched 1 new logs [02-06-2022 10:24:01]8981: WAF :: fetched 3 new logs [02-06-2022 10:28:02]23276: WAF :: fetched 1 new logs [02-06-2022 10:29:01]26730: WAF :: fetched 1 new logs [02-06-2022 10:30:02]30470: WAF :: fetched 6 new logs [02-06-2022 10:34:02]12606: WAF :: fetched 2 new logs [02-06-2022 10:35:02]16190: WAF :: fetched 1 new logs [02-06-2022 10:39:02]30422: WAF :: fetched 3 new logs [02-06-2022 10:40:02]1735: WAF :: fetched 1 new logs [02-06-2022 10:41:01]5307: Checking for user cron vulnerabilities [02-06-2022 10:44:01]15963: Checking ditributed CMS bruteforce attacks [02-06-2022 10:53:02]15517: WAF :: fetched 1 new logs [02-06-2022 10:55:01]22604: WAF :: fetched 1 new logs [02-06-2022 10:56:01]26178: WAF :: fetched 2 new logs [02-06-2022 10:57:01]29746: WAF :: fetched 2 new logs [02-06-2022 10:59:02]4407: WAF :: fetched 2 new logs [02-06-2022 11:00:01]7729: WAF :: fetched 3 new logs [02-06-2022 11:01:02]11740: WAF :: fetched 1 new logs [02-06-2022 11:03:01]18701: WAF :: fetched 1 new logs [02-06-2022 11:04:02]22241: WAF :: fetched 2 new logs [02-06-2022 11:06:01]29559: WAF :: fetched 1 new logs [02-06-2022 11:07:59]894: Performed RBL check for 23.111.136.34. [02-06-2022 11:08:01]4408: WAF :: fetched 1 new logs [02-06-2022 11:12:02]18649: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654179122 [02-06-2022 11:12:02]18649: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 11:12:04]18649: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 11:12:04]18649: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-1112/20220602-111202-YpjFMq_82HlsSeIrqdBPdgAAAAg [02-06-2022 11:12:04]18649: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 11:13:01]22182: WAF :: fetched 2 new logs [02-06-2022 11:14:02]25764: WAF :: fetched 2 new logs [02-06-2022 11:15:01]29428: WAF :: fetched 3 new logs [02-06-2022 11:16:01]573: WAF :: fetched 3 new logs [02-06-2022 11:17:01]4228: WAF :: fetched 1 new logs [02-06-2022 11:18:02]7786: WAF :: fetched 3 new logs [02-06-2022 11:20:02]14887: WAF :: fetched 2 new logs [02-06-2022 11:21:02]18465: WAF :: fetched 5 new logs [02-06-2022 11:22:01]22008: WAF :: fetched 2 new logs [02-06-2022 11:23:02]25527: WAF :: fetched 1 new logs [02-06-2022 11:27:01]7531: WAF :: fetched 3 new logs [02-06-2022 11:28:02]11058: WAF :: fetched 1 new logs [02-06-2022 11:31:02]21770: WAF :: fetched 1 new logs [02-06-2022 11:33:02]28885: WAF :: fetched 5 new logs [02-06-2022 11:34:01]32358: WAF :: fetched 8 new logs [02-06-2022 11:35:02]3649: WAF :: fetched 5 new logs [02-06-2022 11:36:02]7170: WAF :: fetched 2 new logs [02-06-2022 11:37:01]10600: WAF :: fetched 1 new logs [02-06-2022 11:38:02]14253: WAF :: fetched 2 new logs [02-06-2022 11:39:02]17746: WAF :: fetched 2 new logs [02-06-2022 11:40:02]21436: WAF :: fetched 3 new logs [02-06-2022 11:41:01]24996: WAF :: fetched 2 new logs [02-06-2022 11:41:01]24996: Checking for user cron vulnerabilities [02-06-2022 11:42:02]28572: WAF :: fetched 2 new logs [02-06-2022 11:43:01]32065: WAF :: fetched 2 new logs [02-06-2022 11:44:02]3277: Checking ditributed CMS bruteforce attacks [02-06-2022 11:44:02]3277: WAF :: fetched 2 new logs [02-06-2022 11:45:02]6835: WAF :: fetched 1 new logs [02-06-2022 11:46:01]10455: WAF :: fetched 6 new logs [02-06-2022 11:47:02]14020: WAF :: fetched 2 new logs [02-06-2022 11:48:01]17502: WAF :: fetched 1 new logs [02-06-2022 11:49:02]21007: WAF :: fetched 1 new logs [02-06-2022 11:50:02]24603: WAF :: fetched 1 new logs [02-06-2022 11:53:02]3077: WAF :: fetched 2 new logs [02-06-2022 11:54:01]6568: WAF :: fetched 1 new logs [02-06-2022 11:55:02]10269: WAF :: fetched 1 new logs [02-06-2022 11:59:02]24480: WAF :: fetched 4 new logs [02-06-2022 12:00:02]27873: WAF :: fetched 5 new logs [02-06-2022 12:01:02]31965: WAF :: fetched 4 new logs [02-06-2022 12:02:02]3243: WAF :: fetched 1 new logs [02-06-2022 12:03:01]6713: WAF :: fetched 1 new logs [02-06-2022 12:06:01]17483: WAF :: fetched 2 new logs [02-06-2022 12:07:02]21017: WAF :: fetched 2 new logs [02-06-2022 12:08:01]24425: WAF :: fetched 1 new logs [02-06-2022 12:09:01]27903: WAF :: fetched 2 new logs [02-06-2022 12:10:02]31551: WAF :: fetched 1 new logs [02-06-2022 12:11:02]2745: WAF :: fetched 1 new logs [02-06-2022 12:12:01]6571: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654182721 [02-06-2022 12:12:01]6571: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 12:12:03]6571: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 12:12:04]6571: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-1212/20220602-121201-YpjTQY0hn0WDXg84Weo_PAAAAA8 [02-06-2022 12:12:04]6571: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 12:13:02]10545: WAF :: fetched 1 new logs [02-06-2022 12:17:01]24546: WAF :: fetched 2 new logs [02-06-2022 12:19:01]31539: WAF :: fetched 1 new logs [02-06-2022 12:20:01]2834: WAF :: fetched 1 new logs [02-06-2022 12:22:02]10000: WAF :: fetched 1 new logs [02-06-2022 12:25:02]20778: httpd.conf changed. Refreshing watchlist. [02-06-2022 12:26:01]24499: WAF :: fetched 3 new logs [02-06-2022 12:27:02]28128: WAF :: fetched 2 new logs [02-06-2022 12:28:02]31751: WAF :: fetched 5 new logs [02-06-2022 12:29:01]3017: WAF :: fetched 7 new logs [02-06-2022 12:30:02]6786: httpd.conf changed. Refreshing watchlist. [02-06-2022 12:32:01]13977: WAF :: fetched 1 new logs [02-06-2022 12:34:01]21005: WAF :: fetched 3 new logs [02-06-2022 12:35:02]24666: WAF :: fetched 4 new logs [02-06-2022 12:36:01]28316: WAF :: fetched 2 new logs [02-06-2022 12:37:01]31856: WAF :: fetched 1 new logs [02-06-2022 12:39:01]6625: WAF :: fetched 2 new logs [02-06-2022 12:40:02]10214: WAF :: fetched 2 new logs [02-06-2022 12:41:02]13840: WAF :: fetched 3 new logs [02-06-2022 12:41:02]13840: Checking for user cron vulnerabilities [02-06-2022 12:42:01]17376: WAF :: fetched 3 new logs [02-06-2022 12:43:02]20925: WAF :: fetched 1 new logs [02-06-2022 12:44:01]24396: Checking ditributed CMS bruteforce attacks [02-06-2022 12:44:01]24396: WAF :: fetched 3 new logs [02-06-2022 12:45:02]: Checking for software updates [02-06-2022 12:52:01]20908: WAF :: fetched 1 new logs [02-06-2022 12:53:02]24506: WAF :: fetched 1 new logs [02-06-2022 12:54:01]28111: WAF :: fetched 1 new logs [02-06-2022 12:59:01]13587: WAF :: fetched 1 new logs [02-06-2022 13:01:02]20969: WAF :: fetched 1 new logs [02-06-2022 13:02:01]24542: WAF :: fetched 1 new logs [02-06-2022 13:04:01]31633: WAF :: fetched 2 new logs [02-06-2022 13:05:02]2859: WAF :: fetched 3 new logs [02-06-2022 13:08:02]13567: WAF :: fetched 1 new logs [02-06-2022 13:09:02]17079: WAF :: fetched 2 new logs [02-06-2022 13:10:01]20575: WAF :: fetched 5 new logs [02-06-2022 13:12:01]27833: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654186321 [02-06-2022 13:12:01]27833: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 13:12:03]27833: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 13:12:04]27833: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-1312/20220602-131201-YpjhUXTGRCycLUxxdbuUkgAAABA [02-06-2022 13:12:04]27833: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 13:12:04]27833: WAF :: fetched 1 new logs [02-06-2022 13:13:02]31430: WAF :: fetched 3 new logs [02-06-2022 13:14:02]2627: WAF :: fetched 2 new logs [02-06-2022 13:15:01]6173: WAF :: fetched 4 new logs [02-06-2022 13:21:01]27567: WAF :: fetched 3 new logs [02-06-2022 13:22:02]31125: WAF :: fetched 3 new logs [02-06-2022 13:26:01]13007: WAF :: fetched 2 new logs [02-06-2022 13:28:01]19985: WAF :: fetched 1 new logs [02-06-2022 13:29:02]23539: WAF :: fetched 4 new logs [02-06-2022 13:31:01]30801: WAF :: fetched 2 new logs [02-06-2022 13:32:02]2034: WAF :: fetched 1 new logs [02-06-2022 13:33:02]5633: WAF :: fetched 1 new logs [02-06-2022 13:34:01]9146: WAF :: fetched 4 new logs [02-06-2022 13:35:02]12727: WAF :: fetched 5 new logs [02-06-2022 13:36:02]16361: WAF :: fetched 5 new logs [02-06-2022 13:37:01]19920: WAF :: fetched 15 new logs [02-06-2022 13:38:02]23443: WAF :: fetched 1 new logs [02-06-2022 13:39:01]27027: WAF :: fetched 2 new logs [02-06-2022 13:40:02]30575: WAF :: fetched 1 new logs [02-06-2022 13:41:02]1868: WAF :: fetched 3 new logs [02-06-2022 13:41:02]1868: Checking for user cron vulnerabilities [02-06-2022 13:44:01]12544: Checking ditributed CMS bruteforce attacks [02-06-2022 13:44:02]12544: WAF :: fetched 1 new logs [02-06-2022 13:45:01]: Checking for definition updates [02-06-2022 13:45:01]16084: WAF :: fetched 1 new logs [02-06-2022 13:46:02]19810: WAF :: fetched 2 new logs [02-06-2022 13:47:02]23310: WAF :: fetched 3 new logs [02-06-2022 13:48:02]26853: WAF :: fetched 643 new logs [02-06-2022 13:49:01]30424: WAF :: fetched 593 new logs [02-06-2022 13:50:02]1686: WAF :: fetched 5 new logs [02-06-2022 13:51:01]5458: WAF :: fetched 2 new logs [02-06-2022 13:53:01]12712: WAF :: fetched 3 new logs [02-06-2022 13:54:01]16222: WAF :: fetched 1 new logs [02-06-2022 13:55:02]19793: WAF :: fetched 3 new logs [02-06-2022 13:56:02]23494: WAF :: fetched 2 new logs [02-06-2022 13:57:01]27012: WAF :: fetched 2 new logs [02-06-2022 13:58:02]30620: WAF :: fetched 1 new logs [02-06-2022 14:00:02]5168: WAF :: fetched 1 new logs [02-06-2022 14:03:02]16581: WAF :: fetched 1 new logs [02-06-2022 14:04:01]20205: WAF :: fetched 1 new logs [02-06-2022 14:06:01]27553: WAF :: fetched 2 new logs [02-06-2022 14:07:02]31176: WAF :: fetched 2 new logs [02-06-2022 14:11:01]13274: WAF :: fetched 1 new logs [02-06-2022 14:12:01]16875: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654189921 [02-06-2022 14:12:01]16875: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 14:12:03]16875: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 14:12:03]16875: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-1412/20220602-141201-YpjvYRFKG71COw7HyjLziwAAABI [02-06-2022 14:12:03]16875: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 14:12:04]16875: WAF :: fetched 6 new logs [02-06-2022 14:14:01]24043: WAF :: fetched 1 new logs [02-06-2022 14:18:02]6162: WAF :: fetched 1 new logs [02-06-2022 14:20:01]13258: WAF :: fetched 2 new logs [02-06-2022 14:21:02]16969: WAF :: fetched 2 new logs [02-06-2022 14:22:01]20482: WAF :: fetched 2 new logs [02-06-2022 14:23:02]24018: WAF :: fetched 3 new logs [02-06-2022 14:24:01]27384: WAF :: fetched 1 new logs [02-06-2022 14:25:02]31133: WAF :: fetched 1 new logs [02-06-2022 14:26:02]2518: WAF :: fetched 1 new logs [02-06-2022 14:27:01]6089: WAF :: fetched 1 new logs [02-06-2022 14:28:01]9707: WAF :: fetched 2 new logs [02-06-2022 14:29:02]13256: WAF :: fetched 1 new logs [02-06-2022 14:32:02]24027: WAF :: fetched 1 new logs [02-06-2022 14:35:02]2294: WAF :: fetched 1 new logs [02-06-2022 14:36:01]5992: WAF :: fetched 1 new logs [02-06-2022 14:37:02]9514: WAF :: fetched 3 new logs [02-06-2022 14:38:02]13008: WAF :: fetched 2 new logs [02-06-2022 14:41:01]23816: Checking for user cron vulnerabilities [02-06-2022 14:43:02]31012: WAF :: fetched 1 new logs [02-06-2022 14:44:01]2211: Checking ditributed CMS bruteforce attacks [02-06-2022 14:45:01]5880: WAF :: fetched 1 new logs [02-06-2022 14:49:01]20175: WAF :: fetched 1 new logs [02-06-2022 14:50:01]23661: WAF :: fetched 4 new logs [02-06-2022 14:51:02]27448: WAF :: fetched 5 new logs [02-06-2022 14:53:03]2292: Updated license status via CDN [02-06-2022 14:54:02]5871: WAF :: fetched 6 new logs [02-06-2022 14:56:01]13183: WAF :: fetched 1 new logs [02-06-2022 14:57:02]16747: WAF :: fetched 3 new logs [02-06-2022 14:58:02]20298: WAF :: fetched 3 new logs [02-06-2022 15:01:01]31322: Reseting cPGuard inotify settings [02-06-2022 15:01:01]31319: WAF :: fetched 2 new logs [02-06-2022 15:02:02]2559: WAF :: fetched 6 new logs [02-06-2022 15:03:01]5855: WAF :: fetched 7 new logs [02-06-2022 15:04:02]9751: WAF :: fetched 5 new logs [02-06-2022 15:05:02]13377: WAF :: fetched 2 new logs [02-06-2022 15:06:01]17055: WAF :: fetched 1 new logs [02-06-2022 15:07:02]20583: WAF :: fetched 3 new logs [02-06-2022 15:08:01]24035: WAF :: fetched 5 new logs [02-06-2022 15:09:02]27624: WAF :: fetched 3 new logs [02-06-2022 15:10:02]31134: WAF :: fetched 4 new logs [02-06-2022 15:12:02]6179: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654193522 [02-06-2022 15:12:02]6179: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 15:12:04]6179: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 15:12:04]6179: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-1512/20220602-151202-Ypj9cuamPYmNpSt3S1Jw7AAAACA [02-06-2022 15:12:04]6179: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 15:12:04]6179: WAF :: fetched 1 new logs [02-06-2022 15:13:02]9784: WAF :: fetched 2 new logs [02-06-2022 15:14:01]13296: WAF :: fetched 4 new logs [02-06-2022 15:17:02]24003: WAF :: fetched 1 new logs [02-06-2022 15:18:02]27484: WAF :: fetched 1 new logs [02-06-2022 15:24:01]16636: WAF :: fetched 1 new logs [02-06-2022 15:25:02]20150: WAF :: fetched 2 new logs [02-06-2022 15:27:01]27323: WAF :: fetched 3 new logs [02-06-2022 15:28:02]30931: WAF :: fetched 1 new logs [02-06-2022 15:29:01]2058: WAF :: fetched 1 new logs [02-06-2022 15:30:02]5628: WAF :: fetched 5 new logs [02-06-2022 15:31:02]9246: WAF :: fetched 1 new logs [02-06-2022 15:32:01]12761: WAF :: fetched 1 new logs [02-06-2022 15:33:02]16335: WAF :: fetched 4 new logs [02-06-2022 15:34:01]19756: WAF :: fetched 2 new logs [02-06-2022 15:38:01]1829: WAF :: fetched 62 new logs [02-06-2022 15:39:02]5444: WAF :: fetched 72 new logs [02-06-2022 15:40:02]8980: WAF :: fetched 72 new logs [02-06-2022 15:41:01]12676: WAF :: fetched 169 new logs [02-06-2022 15:41:01]12676: Checking for user cron vulnerabilities [02-06-2022 15:42:02]16218: WAF :: fetched 186 new logs [02-06-2022 15:43:01]19718: WAF :: fetched 98 new logs [02-06-2022 15:44:02]23309: Checking ditributed CMS bruteforce attacks [02-06-2022 15:44:02]23309: WAF :: fetched 67 new logs [02-06-2022 15:45:02]26827: WAF :: fetched 70 new logs [02-06-2022 15:46:01]30517: WAF :: fetched 71 new logs [02-06-2022 15:47:01]1726: WAF :: fetched 64 new logs [02-06-2022 15:48:02]5304: WAF :: fetched 81 new logs [02-06-2022 15:49:01]8768: WAF :: fetched 60 new logs [02-06-2022 15:50:02]12351: WAF :: fetched 72 new logs [02-06-2022 15:51:01]16032: WAF :: fetched 22 new logs [02-06-2022 15:52:02]19641: WAF :: fetched 1 new logs [02-06-2022 15:53:02]23161: WAF :: fetched 1 new logs [02-06-2022 15:54:01]26720: WAF :: fetched 1 new logs [02-06-2022 15:58:02]8668: WAF :: fetched 2 new logs [02-06-2022 15:59:01]12180: WAF :: fetched 3 new logs [02-06-2022 16:00:02]15483: WAF :: fetched 3 new logs [02-06-2022 16:04:02]30337: WAF :: fetched 1 new logs [02-06-2022 16:06:01]5196: WAF :: fetched 2 new logs [02-06-2022 16:11:01]22877: WAF :: fetched 1 new logs [02-06-2022 16:12:02]26487: httpd.conf changed. Refreshing watchlist. [02-06-2022 16:12:02]26462: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654197122 [02-06-2022 16:12:02]26462: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 16:12:04]26462: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 16:12:04]26462: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-1612/20220602-161202-YpkLgpKkfxFZDhhlK7YEvgAAABo [02-06-2022 16:12:04]26462: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 16:12:04]26462: WAF :: fetched 2 new logs [02-06-2022 16:13:01]30154: httpd.conf changed. Refreshing watchlist. [02-06-2022 16:13:02]30152: WAF :: fetched 1 new logs [02-06-2022 16:14:01]1321: WAF :: fetched 1 new logs [02-06-2022 16:15:01]5016: WAF :: fetched 4 new logs [02-06-2022 16:16:02]8752: WAF :: fetched 4 new logs [02-06-2022 16:17:02]12298: WAF :: fetched 3 new logs [02-06-2022 16:18:01]15899: httpd.conf changed. Refreshing watchlist. [02-06-2022 16:19:02]19453: WAF :: fetched 1 new logs [02-06-2022 16:23:02]1499: WAF :: fetched 1 new logs [02-06-2022 16:24:01]5026: WAF :: fetched 1 new logs [02-06-2022 16:25:02]8583: WAF :: fetched 1 new logs [02-06-2022 16:27:02]15939: WAF :: fetched 2 new logs [02-06-2022 16:29:01]23016: WAF :: fetched 1 new logs [02-06-2022 16:30:02]26646: WAF :: fetched 1 new logs [02-06-2022 16:31:01]30335: WAF :: fetched 4 new logs [02-06-2022 16:35:02]12198: WAF :: fetched 11 new logs [02-06-2022 16:36:01]15862: WAF :: fetched 58 new logs [02-06-2022 16:37:02]19444: WAF :: fetched 61 new logs [02-06-2022 16:38:02]22961: WAF :: fetched 39 new logs [02-06-2022 16:39:01]26486: WAF :: fetched 58 new logs [02-06-2022 16:40:02]30059: WAF :: fetched 68 new logs [02-06-2022 16:41:02]1321: WAF :: fetched 50 new logs [02-06-2022 16:41:02]1321: Checking for user cron vulnerabilities [02-06-2022 16:42:02]4932: WAF :: fetched 64 new logs [02-06-2022 16:43:02]8507: WAF :: fetched 67 new logs [02-06-2022 16:44:01]12048: Checking ditributed CMS bruteforce attacks [02-06-2022 16:44:01]12048: WAF :: fetched 75 new logs [02-06-2022 16:45:01]15611: WAF :: fetched 64 new logs [02-06-2022 16:46:02]19371: WAF :: fetched 36 new logs [02-06-2022 16:47:01]22913: WAF :: fetched 2 new logs [02-06-2022 16:48:01]26486: WAF :: fetched 43 new logs [02-06-2022 16:49:01]30113: WAF :: fetched 1 new logs [02-06-2022 16:50:02]1241: WAF :: fetched 1 new logs [02-06-2022 16:53:02]11915: WAF :: fetched 1 new logs [02-06-2022 16:54:02]15425: WAF :: fetched 4 new logs [02-06-2022 16:55:02]18962: WAF :: fetched 4 new logs [02-06-2022 16:56:01]22594: WAF :: fetched 2 new logs [02-06-2022 16:57:01]26173: WAF :: fetched 2 new logs [02-06-2022 16:58:01]29687: WAF :: fetched 4 new logs [02-06-2022 16:59:02]821: WAF :: fetched 4 new logs [02-06-2022 17:00:01]4150: WAF :: fetched 2 new logs [02-06-2022 17:01:01]8305: WAF :: fetched 4 new logs [02-06-2022 17:02:02]11894: WAF :: fetched 1 new logs [02-06-2022 17:07:01]29795: WAF :: fetched 2 new logs [02-06-2022 17:08:02]907: WAF :: fetched 3 new logs [02-06-2022 17:09:02]4528: WAF :: fetched 3 new logs [02-06-2022 17:11:01]11658: WAF :: fetched 1 new logs [02-06-2022 17:12:02]15171: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654200722 [02-06-2022 17:12:02]15171: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 17:12:04]15171: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 17:12:04]15171: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-1712/20220602-171202-YpkZkr6W4-S13FFesfRKZAAAACo [02-06-2022 17:12:04]15171: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 17:12:04]15171: WAF :: fetched 2 new logs [02-06-2022 17:15:02]25750: WAF :: fetched 1 new logs [02-06-2022 17:20:02]11073: WAF :: fetched 2 new logs [02-06-2022 17:21:02]14711: WAF :: fetched 1 new logs [02-06-2022 17:27:02]3617: WAF :: fetched 1 new logs [02-06-2022 17:28:02]7169: WAF :: fetched 2 new logs [02-06-2022 17:29:02]10696: WAF :: fetched 3 new logs [02-06-2022 17:30:02]14240: WAF :: fetched 1 new logs [02-06-2022 17:31:01]17916: WAF :: fetched 2 new logs [02-06-2022 17:35:02]31982: WAF :: fetched 1 new logs [02-06-2022 17:37:02]6727: WAF :: fetched 1 new logs [02-06-2022 17:38:02]10202: WAF :: fetched 3 new logs [02-06-2022 17:40:02]17318: WAF :: fetched 1 new logs [02-06-2022 17:41:01]20845: WAF :: fetched 1 new logs [02-06-2022 17:41:01]20845: Checking for user cron vulnerabilities [02-06-2022 17:43:02]28004: WAF :: fetched 1 new logs [02-06-2022 17:44:01]31504: Checking ditributed CMS bruteforce attacks [02-06-2022 17:45:01]2701: WAF :: fetched 1 new logs [02-06-2022 17:46:02]6282: WAF :: fetched 2 new logs [02-06-2022 17:47:02]9828: WAF :: fetched 4 new logs [02-06-2022 17:48:01]13383: WAF :: fetched 1 new logs [02-06-2022 17:49:01]16880: WAF :: fetched 1 new logs [02-06-2022 17:50:02]20454: WAF :: fetched 1 new logs [02-06-2022 17:51:02]23968: WAF :: fetched 1 new logs [02-06-2022 17:55:02]5809: WAF :: fetched 1 new logs [02-06-2022 17:56:02]9323: WAF :: fetched 1 new logs [02-06-2022 17:57:02]12959: WAF :: fetched 1 new logs [02-06-2022 17:58:01]16527: WAF :: fetched 3 new logs [02-06-2022 17:59:01]20024: WAF :: fetched 1 new logs [02-06-2022 18:00:02]23254: WAF :: fetched 2 new logs [02-06-2022 18:01:01]27239: WAF :: fetched 1 new logs [02-06-2022 18:02:02]30861: WAF :: fetched 1 new logs [02-06-2022 18:03:01]1932: WAF :: fetched 2 new logs [02-06-2022 18:04:02]5459: WAF :: fetched 1 new logs [02-06-2022 18:05:01]8897: WAF :: fetched 15 new logs [02-06-2022 18:06:02]12441: WAF :: fetched 3 new logs [02-06-2022 18:09:02]22919: WAF :: fetched 2 new logs [02-06-2022 18:10:01]26443: WAF :: fetched 3 new logs [02-06-2022 18:11:02]29993: WAF :: fetched 31 new logs [02-06-2022 18:12:02]1203: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654204322 [02-06-2022 18:12:02]1203: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 18:12:04]1203: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 18:12:04]1203: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-1812/20220602-181202-Ypknol-fTBzPaGn1jJUIgAAAAEE [02-06-2022 18:12:04]1203: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 18:12:04]1203: WAF :: fetched 5 new logs [02-06-2022 18:13:02]4712: WAF :: fetched 1 new logs [02-06-2022 18:14:01]8128: WAF :: fetched 2 new logs [02-06-2022 18:15:02]11701: WAF :: fetched 2 new logs [02-06-2022 18:18:01]22274: WAF :: fetched 2 new logs [02-06-2022 18:19:02]25834: WAF :: fetched 4 new logs [02-06-2022 18:23:02]7613: WAF :: fetched 54 new logs [02-06-2022 18:24:01]11054: WAF :: fetched 57 new logs [02-06-2022 18:25:02]14593: WAF :: fetched 99 new logs [02-06-2022 18:26:02]18051: WAF :: fetched 60 new logs [02-06-2022 18:27:01]21586: WAF :: fetched 100 new logs [02-06-2022 18:28:02]25076: WAF :: fetched 34 new logs [02-06-2022 18:29:01]28562: WAF :: fetched 100 new logs [02-06-2022 18:30:02]32084: WAF :: fetched 29 new logs [02-06-2022 18:31:02]3284: WAF :: fetched 120 new logs [02-06-2022 18:32:01]6832: WAF :: fetched 54 new logs [02-06-2022 18:33:02]10316: WAF :: fetched 34 new logs [02-06-2022 18:36:01]20691: WAF :: fetched 1 new logs [02-06-2022 18:38:02]27798: WAF :: fetched 4 new logs [02-06-2022 18:39:02]31291: WAF :: fetched 1 new logs [02-06-2022 18:40:02]2411: WAF :: fetched 2 new logs [02-06-2022 18:41:01]5920: WAF :: fetched 1 new logs [02-06-2022 18:41:01]5920: Checking for user cron vulnerabilities [02-06-2022 18:42:01]9465: WAF :: fetched 1 new logs [02-06-2022 18:44:01]16436: Checking ditributed CMS bruteforce attacks [02-06-2022 18:44:02]16436: WAF :: fetched 1 new logs [02-06-2022 18:45:01]19939: WAF :: fetched 2 new logs [02-06-2022 18:46:02]23547: WAF :: fetched 2 new logs [02-06-2022 18:48:01]30773: WAF :: fetched 2 new logs [02-06-2022 18:49:02]1907: WAF :: fetched 1 new logs [02-06-2022 18:50:02]5374: WAF :: fetched 1 new logs [02-06-2022 18:51:01]8890: WAF :: fetched 1 new logs [02-06-2022 18:54:01]19395: WAF :: fetched 1 new logs [02-06-2022 18:55:02]22871: WAF :: fetched 7 new logs [02-06-2022 18:56:01]26338: WAF :: fetched 6 new logs [02-06-2022 18:58:02]1006: WAF :: fetched 2 new logs [02-06-2022 19:02:01]15192: WAF :: fetched 1 new logs [02-06-2022 19:03:01]18657: WAF :: fetched 1 new logs [02-06-2022 19:05:01]25622: WAF :: fetched 4 new logs [02-06-2022 19:06:01]29144: WAF :: fetched 2 new logs [02-06-2022 19:07:02]32717: WAF :: fetched 3 new logs [02-06-2022 19:08:01]3848: WAF :: fetched 3 new logs [02-06-2022 19:09:02]7356: WAF :: fetched 2 new logs [02-06-2022 19:10:02]10801: WAF :: fetched 1 new logs [02-06-2022 19:12:02]17859: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654207922 [02-06-2022 19:12:02]17859: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 19:12:04]17859: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 19:12:04]17859: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-1912/20220602-191202-Ypk1sg5Xj_YpyJmMnM-P0AAAABY [02-06-2022 19:12:04]17859: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 19:12:05]17859: WAF :: fetched 2 new logs [02-06-2022 19:13:01]21297: WAF :: fetched 2 new logs [02-06-2022 19:16:01]31727: WAF :: fetched 1 new logs [02-06-2022 19:22:02]20451: WAF :: fetched 1 new logs [02-06-2022 19:25:02]30928: WAF :: fetched 1 new logs [02-06-2022 19:29:01]12560: WAF :: fetched 2 new logs [02-06-2022 19:30:01]16091: WAF :: fetched 1 new logs [02-06-2022 19:32:02]23239: WAF :: fetched 1 new logs [02-06-2022 19:33:02]26732: WAF :: fetched 2 new logs [02-06-2022 19:36:01]4925: WAF :: fetched 2 new logs [02-06-2022 19:37:02]8570: WAF :: fetched 2 new logs [02-06-2022 19:40:02]19155: WAF :: fetched 2 new logs [02-06-2022 19:41:02]22657: WAF :: fetched 1 new logs [02-06-2022 19:41:02]22657: Checking for user cron vulnerabilities [02-06-2022 19:42:02]26271: WAF :: fetched 3 new logs [02-06-2022 19:44:01]776: Checking ditributed CMS bruteforce attacks [02-06-2022 19:44:02]776: WAF :: fetched 1 new logs [02-06-2022 19:45:01]: Checking for definition updates [02-06-2022 19:45:01]4320: WAF :: fetched 1 new logs [02-06-2022 19:47:01]11304: WAF :: fetched 2 new logs [02-06-2022 19:50:01]21765: WAF :: fetched 5 new logs [02-06-2022 19:51:02]25300: WAF :: fetched 2 new logs [02-06-2022 19:52:01]28858: WAF :: fetched 1 new logs [02-06-2022 19:57:02]13960: WAF :: fetched 1 new logs [02-06-2022 19:58:01]17450: WAF :: fetched 1 new logs [02-06-2022 20:03:02]2768: WAF :: fetched 1 new logs [02-06-2022 20:04:01]6205: WAF :: fetched 1 new logs [02-06-2022 20:05:02]9645: WAF :: fetched 2 new logs [02-06-2022 20:07:02]16691: WAF :: fetched 1 new logs [02-06-2022 20:10:02]27152: WAF :: fetched 1 new logs [02-06-2022 20:12:02]1847: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654211522 [02-06-2022 20:12:02]1847: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 20:12:04]1847: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 20:12:04]1847: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-2012/20220602-201202-YplDwsO7fvbWDCqM8TQ3mgAAAAE [02-06-2022 20:12:04]1847: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [02-06-2022 20:12:04]1847: WAF :: fetched 1 new logs [02-06-2022 20:13:01]5394: WAF :: fetched 2 new logs [02-06-2022 20:17:02]19423: WAF :: fetched 2 new logs [02-06-2022 20:18:01]22880: WAF :: fetched 3 new logs [02-06-2022 20:19:01]26372: WAF :: fetched 2 new logs [02-06-2022 20:20:02]29915: WAF :: fetched 2 new logs [02-06-2022 20:21:01]1072: WAF :: fetched 3 new logs [02-06-2022 20:25:01]15064: WAF :: fetched 1 new logs [02-06-2022 20:28:01]25536: WAF :: fetched 1 new logs [02-06-2022 20:29:02]29013: WAF :: fetched 1 new logs [02-06-2022 20:31:01]3688: WAF :: fetched 1 new logs [02-06-2022 20:32:01]7255: WAF :: fetched 1 new logs [02-06-2022 20:34:02]14174: WAF :: fetched 1 new logs [02-06-2022 20:37:02]24581: WAF :: fetched 1 new logs [02-06-2022 20:39:01]31523: WAF :: fetched 6 new logs [02-06-2022 20:40:02]2723: WAF :: fetched 2 new logs [02-06-2022 20:41:01]6210: WAF :: fetched 5 new logs [02-06-2022 20:41:01]6210: Checking for user cron vulnerabilities [02-06-2022 20:42:02]9790: WAF :: fetched 3 new logs [02-06-2022 20:43:01]13312: WAF :: fetched 3 new logs [02-06-2022 20:44:02]16819: Checking ditributed CMS bruteforce attacks [02-06-2022 20:44:02]16819: WAF :: fetched 3 new logs [02-06-2022 20:45:01]20251: WAF :: fetched 1 new logs [02-06-2022 20:47:01]27309: WAF :: fetched 4 new logs [02-06-2022 20:48:01]30781: WAF :: fetched 7 new logs [02-06-2022 20:50:01]5346: WAF :: fetched 1 new logs [02-06-2022 20:53:01]15852: WAF :: fetched 2 new logs [02-06-2022 20:54:01]19324: WAF :: fetched 3 new logs [02-06-2022 20:56:01]26308: WAF :: fetched 2 new logs [02-06-2022 20:57:01]29887: WAF :: fetched 4 new logs [02-06-2022 20:59:01]4480: WAF :: fetched 1 new logs [02-06-2022 21:01:01]11657: WAF :: fetched 1 new logs [02-06-2022 21:02:01]15256: WAF :: fetched 1 new logs [02-06-2022 21:03:02]18769: WAF :: fetched 1 new logs [02-06-2022 21:04:01]22189: WAF :: fetched 3 new logs [02-06-2022 21:05:02]25679: WAF :: fetched 1 new logs [02-06-2022 21:07:02]32764: WAF :: fetched 3 new logs [02-06-2022 21:09:02]7359: WAF :: fetched 1 new logs [02-06-2022 21:10:01]10822: WAF :: fetched 5 new logs [02-06-2022 21:11:01]14374: WAF :: fetched 2 new logs [02-06-2022 21:12:01]17925: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654215121 [02-06-2022 21:12:01]17925: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 21:12:03]17925: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 21:12:03]17925: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-2112/20220602-211201-YplR0RRDAkisDCnp7J9JowAAACU [02-06-2022 21:12:03]17925: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 21:12:04]17925: WAF :: fetched 59 new logs [02-06-2022 21:13:02]21447: WAF :: fetched 15 new logs [02-06-2022 21:14:01]24878: WAF :: fetched 23 new logs [02-06-2022 21:16:01]31900: WAF :: fetched 1 new logs [02-06-2022 21:18:02]6599: WAF :: fetched 1 new logs [02-06-2022 21:19:02]10019: WAF :: fetched 5 new logs [02-06-2022 21:20:01]13503: WAF :: fetched 6 new logs [02-06-2022 21:21:02]17075: WAF :: fetched 7 new logs [02-06-2022 21:22:01]20593: WAF :: fetched 5 new logs [02-06-2022 21:23:02]24080: WAF :: fetched 3 new logs [02-06-2022 21:24:02]27567: WAF :: fetched 2 new logs [02-06-2022 21:25:02]31091: WAF :: fetched 2 new logs [02-06-2022 21:26:01]2281: WAF :: fetched 7 new logs [02-06-2022 21:27:02]5910: WAF :: fetched 3 new logs [02-06-2022 21:28:01]9387: WAF :: fetched 7 new logs [02-06-2022 21:29:02]12919: WAF :: fetched 4 new logs [02-06-2022 21:30:01]16361: WAF :: fetched 2 new logs [02-06-2022 21:34:01]30505: WAF :: fetched 1 new logs [02-06-2022 21:39:02]15921: WAF :: fetched 5 new logs [02-06-2022 21:41:02]23015: WAF :: fetched 1 new logs [02-06-2022 21:41:02]23015: Checking for user cron vulnerabilities [02-06-2022 21:42:01]26573: WAF :: fetched 2 new logs [02-06-2022 21:44:01]1246: Checking ditributed CMS bruteforce attacks [02-06-2022 21:44:01]1246: WAF :: fetched 3 new logs [02-06-2022 21:45:01]4878: WAF :: fetched 6 new logs [02-06-2022 21:46:01]8428: WAF :: fetched 2 new logs [02-06-2022 21:47:02]12053: WAF :: fetched 1 new logs [02-06-2022 21:48:01]15583: WAF :: fetched 2 new logs [02-06-2022 21:50:01]22673: WAF :: fetched 1 new logs [02-06-2022 21:51:02]26262: WAF :: fetched 2 new logs [02-06-2022 21:52:01]29879: WAF :: fetched 7 new logs [02-06-2022 21:53:02]1027: WAF :: fetched 3 new logs [02-06-2022 21:54:02]4547: WAF :: fetched 1 new logs [02-06-2022 21:55:02]8074: WAF :: fetched 2 new logs [02-06-2022 21:56:02]11562: WAF :: fetched 3 new logs [02-06-2022 21:57:01]15135: WAF :: fetched 3 new logs [02-06-2022 21:58:02]18679: WAF :: fetched 4 new logs [02-06-2022 22:00:02]25391: WAF :: fetched 3 new logs [02-06-2022 22:01:01]29461: WAF :: fetched 4 new logs [02-06-2022 22:02:02]688: WAF :: fetched 2 new logs [02-06-2022 22:04:02]7818: WAF :: fetched 1 new logs [02-06-2022 22:05:02]11313: WAF :: fetched 1 new logs [02-06-2022 22:07:09]18406: Performing Domain reputation checks [02-06-2022 22:08:02]21955: WAF :: fetched 3 new logs [02-06-2022 22:09:02]25534: WAF :: fetched 4 new logs [02-06-2022 22:10:01]29014: WAF :: fetched 2 new logs [02-06-2022 22:11:02]32614: WAF :: fetched 2 new logs [02-06-2022 22:12:01]3866: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654218721 [02-06-2022 22:12:01]3866: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 22:12:03]3866: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 22:12:04]3866: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-2212/20220602-221201-Yplf4QPA0Fzv2jwU6mgb1wAAAA8 [02-06-2022 22:12:04]3866: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 22:12:04]3866: WAF :: fetched 4 new logs [02-06-2022 22:13:01]7307: WAF :: fetched 3 new logs [02-06-2022 22:15:01]14365: WAF :: fetched 4 new logs [02-06-2022 22:16:02]17981: WAF :: fetched 3 new logs [02-06-2022 22:17:02]21536: WAF :: fetched 1 new logs [02-06-2022 22:19:02]28687: WAF :: fetched 3 new logs [02-06-2022 22:21:01]3462: WAF :: fetched 1 new logs [02-06-2022 22:22:02]7017: WAF :: fetched 1 new logs [02-06-2022 22:23:01]10515: WAF :: fetched 1 new logs [02-06-2022 22:28:01]28221: WAF :: fetched 1 new logs [02-06-2022 22:29:01]31744: WAF :: fetched 1 new logs [02-06-2022 22:30:02]2993: WAF :: fetched 2 new logs [02-06-2022 22:33:01]13599: WAF :: fetched 1 new logs [02-06-2022 22:34:02]17127: WAF :: fetched 2 new logs [02-06-2022 22:35:01]20594: WAF :: fetched 3 new logs [02-06-2022 22:38:02]31332: WAF :: fetched 2 new logs [02-06-2022 22:39:01]2624: WAF :: fetched 1 new logs [02-06-2022 22:41:01]9749: WAF :: fetched 3 new logs [02-06-2022 22:41:01]9749: Checking for user cron vulnerabilities [02-06-2022 22:42:02]13273: WAF :: fetched 5 new logs [02-06-2022 22:44:01]20297: Checking ditributed CMS bruteforce attacks [02-06-2022 22:46:01]27317: WAF :: fetched 2 new logs [02-06-2022 22:47:01]30894: WAF :: fetched 1 new logs [02-06-2022 22:51:01]12724: WAF :: fetched 4 new logs [02-06-2022 22:52:02]16247: WAF :: fetched 3 new logs [02-06-2022 22:53:02]19853: WAF :: fetched 1 new logs [02-06-2022 22:54:01]23334: WAF :: fetched 1 new logs [02-06-2022 22:59:02]8701: WAF :: fetched 1 new logs [02-06-2022 23:00:02]11948: WAF :: fetched 1 new logs [02-06-2022 23:03:01]22988: WAF :: fetched 1 new logs [02-06-2022 23:04:02]26518: WAF :: fetched 1 new logs [02-06-2022 23:05:02]30060: WAF :: fetched 1 new logs [02-06-2022 23:07:02]4927: WAF :: fetched 6 new logs [02-06-2022 23:07:43]5091: Performed RBL check for 23.111.136.34. [02-06-2022 23:08:01]8488: WAF :: fetched 2 new logs [02-06-2022 23:10:01]15517: WAF :: fetched 2 new logs [02-06-2022 23:11:02]19085: WAF :: fetched 8 new logs [02-06-2022 23:12:01]22547: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654222321 [02-06-2022 23:12:01]22547: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-06-2022 23:12:03]22547: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-06-2022 23:12:04]22547: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220602/20220602-2312/20220602-231201-Yplt8c8P-qFHfNpMxbU2ZwAAABY [02-06-2022 23:12:04]22547: WAF :: No suitable log file found. Using SQLite.. [02-06-2022 23:12:04]22547: WAF :: fetched 2 new logs [02-06-2022 23:13:02]26150: WAF :: fetched 1 new logs [02-06-2022 23:14:01]29662: WAF :: fetched 2 new logs [02-06-2022 23:15:02]795: WAF :: fetched 3 new logs [02-06-2022 23:16:01]4424: WAF :: fetched 6 new logs [02-06-2022 23:17:01]7886: WAF :: fetched 1 new logs [02-06-2022 23:23:01]29141: WAF :: fetched 2 new logs [02-06-2022 23:24:02]32631: WAF :: fetched 1 new logs [02-06-2022 23:27:02]10859: WAF :: fetched 1 new logs [02-06-2022 23:28:01]14380: WAF :: fetched 7 new logs [02-06-2022 23:33:02]31972: WAF :: fetched 2 new logs [02-06-2022 23:34:01]3082: WAF :: fetched 1 new logs [02-06-2022 23:35:02]6575: WAF :: fetched 2 new logs [02-06-2022 23:36:01]10085: WAF :: fetched 4 new logs [02-06-2022 23:37:02]13567: WAF :: fetched 3 new logs [02-06-2022 23:38:01]17090: WAF :: fetched 2 new logs [02-06-2022 23:39:01]20624: WAF :: fetched 1 new logs [02-06-2022 23:41:01]27664: Checking for user cron vulnerabilities [02-06-2022 23:43:02]2411: WAF :: fetched 1 new logs [02-06-2022 23:44:01]5831: Checking ditributed CMS bruteforce attacks [02-06-2022 23:47:01]16274: WAF :: fetched 2 new logs [02-06-2022 23:48:02]19856: WAF :: fetched 3 new logs [02-06-2022 23:49:01]23328: WAF :: fetched 3 new logs [02-06-2022 23:50:02]26845: WAF :: fetched 5 new logs [02-06-2022 23:51:02]30397: WAF :: fetched 2 new logs [02-06-2022 23:54:01]8535: WAF :: fetched 2 new logs [02-06-2022 23:55:02]12084: WAF :: fetched 1 new logs [02-06-2022 23:56:02]15640: httpd.conf changed. Refreshing watchlist. [02-06-2022 23:56:02]15650: WAF :: fetched 2 new logs [02-06-2022 23:57:01]19120: WAF :: fetched 1 new logs [02-06-2022 23:58:02]22703: WAF :: fetched 2 new logs [02-06-2022 23:59:01]26159: WAF :: fetched 2 new logs [03-06-2022 00:00:02]29472: WAF :: fetched 1 new logs [03-06-2022 00:01:03]1061: Sending daily report for June 3, 2022 [03-06-2022 00:05:02]15218: WAF :: fetched 1 new logs [03-06-2022 00:05:02]15218: Deleted 0 entries older than 6 MONTH from scanner_logs [03-06-2022 00:05:02]15218: Deleted 0 files from Quarantine [03-06-2022 00:09:02]29252: WAF :: fetched 1 new logs [03-06-2022 00:11:02]3934: WAF :: fetched 1 new logs [03-06-2022 00:12:02]7410: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654225922 [03-06-2022 00:12:02]7410: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 00:12:04]7410: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 00:12:04]7410: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-0012/20220603-001202-Ypl8Au07TLwCLsFSO8vXswAAABM [03-06-2022 00:12:04]7410: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 00:12:04]7410: WAF :: fetched 1 new logs [03-06-2022 00:16:01]21494: WAF :: fetched 2 new logs [03-06-2022 00:17:02]24998: WAF :: fetched 2 new logs [03-06-2022 00:19:02]32042: WAF :: fetched 84 new logs [03-06-2022 00:20:02]3234: WAF :: fetched 114 new logs [03-06-2022 00:21:01]6761: WAF :: fetched 2 new logs [03-06-2022 00:22:02]10263: WAF :: fetched 1 new logs [03-06-2022 00:23:01]13828: WAF :: fetched 1 new logs [03-06-2022 00:24:01]17296: WAF :: fetched 1 new logs [03-06-2022 00:25:02]20771: WAF :: fetched 2 new logs [03-06-2022 00:30:02]5883: WAF :: fetched 2 new logs [03-06-2022 00:31:01]9319: WAF :: fetched 1 new logs [03-06-2022 00:32:02]12839: WAF :: fetched 1 new logs [03-06-2022 00:35:02]23346: WAF :: fetched 1 new logs [03-06-2022 00:36:01]26820: WAF :: fetched 1 new logs [03-06-2022 00:38:01]1485: WAF :: fetched 2 new logs [03-06-2022 00:39:02]5026: WAF :: fetched 4 new logs [03-06-2022 00:40:02]8495: WAF :: fetched 3 new logs [03-06-2022 00:41:01]11978: WAF :: fetched 1 new logs [03-06-2022 00:41:01]11978: Checking for user cron vulnerabilities [03-06-2022 00:44:01]22574: Checking ditributed CMS bruteforce attacks [03-06-2022 00:45:01]: Checking for software updates [03-06-2022 00:45:02]26073: WAF :: fetched 1 new logs [03-06-2022 00:46:01]29559: WAF :: fetched 1 new logs [03-06-2022 00:47:02]631: WAF :: fetched 1 new logs [03-06-2022 00:48:02]4258: WAF :: fetched 6 new logs [03-06-2022 00:50:02]11164: WAF :: fetched 1 new logs [03-06-2022 00:51:01]14621: WAF :: fetched 4 new logs [03-06-2022 00:58:01]6716: WAF :: fetched 1 new logs [03-06-2022 01:00:02]13382: WAF :: fetched 1 new logs [03-06-2022 01:01:02]17964: WAF :: fetched 2 new logs [03-06-2022 01:02:01]21646: WAF :: fetched 1 new logs [03-06-2022 01:04:01]29455: WAF :: fetched 5 new logs [03-06-2022 01:07:01]8313: WAF :: fetched 2 new logs [03-06-2022 01:08:02]11896: WAF :: fetched 1 new logs [03-06-2022 01:10:02]19183: WAF :: fetched 1 new logs [03-06-2022 01:11:01]22698: WAF :: fetched 3 new logs [03-06-2022 01:12:02]26198: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654229522 [03-06-2022 01:12:02]26198: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 01:12:04]26198: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 01:12:04]26198: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-0112/20220603-011202-YpmKEulLtCkOMatXbq55CAAAAAs [03-06-2022 01:12:04]26198: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 01:12:04]26198: WAF :: fetched 3 new logs [03-06-2022 01:15:02]4778: WAF :: fetched 17 new logs [03-06-2022 01:16:02]8325: WAF :: fetched 60 new logs [03-06-2022 01:17:01]11918: WAF :: fetched 56 new logs [03-06-2022 01:18:02]15812: WAF :: fetched 61 new logs [03-06-2022 01:19:01]19450: WAF :: fetched 63 new logs [03-06-2022 01:20:02]23238: WAF :: fetched 62 new logs [03-06-2022 01:21:02]26814: WAF :: fetched 54 new logs [03-06-2022 01:22:01]30303: WAF :: fetched 39 new logs [03-06-2022 01:23:02]1480: WAF :: fetched 1 new logs [03-06-2022 01:24:01]5325: WAF :: fetched 1 new logs [03-06-2022 01:25:02]9004: WAF :: fetched 33 new logs [03-06-2022 01:26:02]12724: WAF :: fetched 86 new logs [03-06-2022 01:27:01]16241: WAF :: fetched 85 new logs [03-06-2022 01:28:02]20116: WAF :: fetched 79 new logs [03-06-2022 01:29:01]23762: WAF :: fetched 79 new logs [03-06-2022 01:30:02]27457: WAF :: fetched 55 new logs [03-06-2022 01:31:01]31334: WAF :: fetched 87 new logs [03-06-2022 01:32:02]2869: WAF :: fetched 64 new logs [03-06-2022 01:33:01]6337: WAF :: fetched 34 new logs [03-06-2022 01:34:02]10142: WAF :: fetched 31 new logs [03-06-2022 01:35:02]13645: WAF :: fetched 35 new logs [03-06-2022 01:36:01]17630: WAF :: fetched 29 new logs [03-06-2022 01:41:01]4196: Checking for user cron vulnerabilities [03-06-2022 01:43:02]11253: WAF :: fetched 1 new logs [03-06-2022 01:44:01]14984: Checking ditributed CMS bruteforce attacks [03-06-2022 01:45:01]: Checking for definition updates [03-06-2022 01:45:01]18684: WAF :: fetched 1 new logs [03-06-2022 01:49:01]630: WAF :: fetched 1 new logs [03-06-2022 01:50:01]4224: WAF :: fetched 2 new logs [03-06-2022 01:52:01]11253: WAF :: fetched 1 new logs [03-06-2022 01:53:02]15049: WAF :: fetched 3 new logs [03-06-2022 01:58:01]32620: WAF :: fetched 1 new logs [03-06-2022 02:01:02]10868: WAF :: fetched 1 new logs [03-06-2022 02:06:02]28476: WAF :: fetched 14 new logs [03-06-2022 02:07:01]31993: WAF :: fetched 18 new logs [03-06-2022 02:12:01]17161: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654233121 [03-06-2022 02:12:01]17161: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 02:12:03]17161: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 02:12:03]17161: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-0212/20220603-021201-YpmYIaTCIv23TkXVqKa2hgAAAA0 [03-06-2022 02:12:03]17161: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 02:12:04]17161: WAF :: fetched 2 new logs [03-06-2022 02:14:01]24180: WAF :: fetched 2 new logs [03-06-2022 02:17:01]2271: WAF :: fetched 2 new logs [03-06-2022 02:18:02]5885: WAF :: fetched 1 new logs [03-06-2022 02:19:02]9292: WAF :: fetched 1 new logs [03-06-2022 02:26:02]1263: WAF :: fetched 1 new logs [03-06-2022 02:28:02]8267: WAF :: fetched 1 new logs [03-06-2022 02:29:01]11687: WAF :: fetched 4 new logs [03-06-2022 02:30:02]15200: WAF :: fetched 4 new logs [03-06-2022 02:40:02]17734: WAF :: fetched 1 new logs [03-06-2022 02:41:01]21235: Checking for user cron vulnerabilities [03-06-2022 02:43:02]29484: WAF :: fetched 1 new logs [03-06-2022 02:44:01]623: Checking ditributed CMS bruteforce attacks [03-06-2022 02:44:01]623: WAF :: fetched 3 new logs [03-06-2022 02:45:02]4355: WAF :: fetched 1 new logs [03-06-2022 02:50:02]21905: WAF :: fetched 2 new logs [03-06-2022 02:51:01]25521: WAF :: fetched 2 new logs [03-06-2022 02:52:01]29149: WAF :: fetched 5 new logs [03-06-2022 02:53:02]32705: WAF :: fetched 2 new logs [03-06-2022 02:53:02]32700: Updated license status via CDN [03-06-2022 02:59:01]22116: WAF :: fetched 5 new logs [03-06-2022 03:00:02]25535: WAF :: fetched 3 new logs [03-06-2022 03:00:04]25535: Found and updated 32 CMS installations [03-06-2022 03:01:02]29573: WAF :: fetched 1 new logs [03-06-2022 03:02:34]25535: Sending CMS version vulnerability report emails to cpanel users [03-06-2022 03:02:37]25535: Checking wordpress installations for suspicious directories [03-06-2022 03:04:22]5177: Sending CMS version vulnerability report emails to cpanel users [03-06-2022 03:04:25]5177: Checking wordpress installations for suspicious directories [03-06-2022 03:12:01]5323: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654236721 [03-06-2022 03:12:01]5323: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 03:12:03]5323: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 03:12:04]5323: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-0312/20220603-031201-YpmmMXsLzVmBvwili2fQXQAAAAA [03-06-2022 03:12:04]5323: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-06-2022 03:12:04]5323: WAF :: fetched 5 new logs [03-06-2022 03:13:02]8887: WAF :: fetched 5 new logs [03-06-2022 03:19:02]29795: WAF :: fetched 2 new logs [03-06-2022 03:20:01]1141: WAF :: fetched 3 new logs [03-06-2022 03:21:01]4987: WAF :: fetched 2 new logs [03-06-2022 03:24:02]15702: WAF :: fetched 1 new logs [03-06-2022 03:25:01]18295: WAF :: fetched 1 new logs [03-06-2022 03:27:02]19403: WAF :: fetched 1 new logs [03-06-2022 03:34:01]20994: WAF :: fetched 1 new logs [03-06-2022 03:35:01]24426: WAF :: fetched 2 new logs [03-06-2022 03:38:01]2467: WAF :: fetched 2 new logs [03-06-2022 03:39:01]6029: WAF :: fetched 1 new logs [03-06-2022 03:40:02]9474: WAF :: fetched 2 new logs [03-06-2022 03:41:01]12719: Checking for user cron vulnerabilities [03-06-2022 03:42:02]16364: WAF :: fetched 66 new logs [03-06-2022 03:44:02]23287: Checking ditributed CMS bruteforce attacks [03-06-2022 03:45:01]26705: WAF :: fetched 14 new logs [03-06-2022 03:47:02]1268: WAF :: fetched 2 new logs [03-06-2022 03:48:01]4763: WAF :: fetched 1 new logs [03-06-2022 03:49:01]8229: WAF :: fetched 2 new logs [03-06-2022 03:50:02]11697: WAF :: fetched 1 new logs [03-06-2022 03:51:01]15169: WAF :: fetched 4 new logs [03-06-2022 03:52:01]18616: WAF :: fetched 3 new logs [03-06-2022 03:53:02]22082: WAF :: fetched 2 new logs [03-06-2022 03:54:02]25577: WAF :: fetched 1 new logs [03-06-2022 03:58:01]7100: WAF :: fetched 2 new logs [03-06-2022 04:00:02]13783: WAF :: fetched 1 new logs [03-06-2022 04:12:02]23564: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654240322 [03-06-2022 04:12:02]23564: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 04:12:04]23564: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 04:12:04]23564: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-0412/20220603-041202-Ypm0Qg7Rir_MJ5fI9nrc-wAAAAQ [03-06-2022 04:12:04]23564: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-06-2022 04:12:04]23564: WAF :: fetched 1 new logs [03-06-2022 04:13:01]27057: WAF :: fetched 1 new logs [03-06-2022 04:24:02]522: WAF :: fetched 1 new logs [03-06-2022 04:26:02]7567: WAF :: fetched 14 new logs [03-06-2022 04:27:01]10997: WAF :: fetched 2 new logs [03-06-2022 04:28:01]14426: WAF :: fetched 1 new logs [03-06-2022 04:29:02]17970: WAF :: fetched 1 new logs [03-06-2022 04:35:01]6449: WAF :: fetched 1 new logs [03-06-2022 04:38:02]16803: WAF :: fetched 1 new logs [03-06-2022 04:40:02]23800: WAF :: fetched 1 new logs [03-06-2022 04:41:01]27322: Checking for user cron vulnerabilities [03-06-2022 04:43:01]1862: WAF :: fetched 3 new logs [03-06-2022 04:44:01]5401: Checking ditributed CMS bruteforce attacks [03-06-2022 04:48:01]19190: WAF :: fetched 1 new logs [03-06-2022 04:51:01]29673: WAF :: fetched 1 new logs [03-06-2022 04:52:01]672: WAF :: fetched 1 new logs [03-06-2022 04:55:01]11126: WAF :: fetched 1 new logs [03-06-2022 04:59:01]24933: WAF :: fetched 4 new logs [03-06-2022 05:01:42]32029: Starting daily scan on files updated in last 24 hrs [03-06-2022 05:02:01]3150: WAF :: fetched 1 new logs [03-06-2022 05:03:02]6669: WAF :: fetched 1 new logs [03-06-2022 05:04:02]10153: WAF :: fetched 1 new logs [03-06-2022 05:06:01]17125: WAF :: fetched 1 new logs [03-06-2022 05:09:01]27517: WAF :: fetched 1 new logs [03-06-2022 05:12:01]5590: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654243921 [03-06-2022 05:12:01]5590: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 05:12:03]5590: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 05:12:03]5590: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-0512/20220603-051201-YpnCUYsmdGDhudKvSFgOBQAAAAM [03-06-2022 05:12:03]5590: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-06-2022 05:12:04]5590: WAF :: fetched 1 new logs [03-06-2022 05:13:02]9070: WAF :: fetched 1 new logs [03-06-2022 05:14:02]12534: WAF :: fetched 2 new logs [03-06-2022 05:16:01]19417: WAF :: fetched 1 new logs [03-06-2022 05:19:02]29799: WAF :: fetched 5 new logs [03-06-2022 05:23:01]11235: WAF :: fetched 2 new logs [03-06-2022 05:27:02]25190: WAF :: fetched 1 new logs [03-06-2022 05:29:01]32125: WAF :: fetched 1 new logs [03-06-2022 05:30:01]3243: WAF :: fetched 1 new logs [03-06-2022 05:32:02]10217: WAF :: fetched 1 new logs [03-06-2022 05:33:01]13642: WAF :: fetched 1 new logs [03-06-2022 05:34:01]17154: WAF :: fetched 7 new logs [03-06-2022 05:41:01]9120: Checking for user cron vulnerabilities [03-06-2022 05:42:01]12559: WAF :: fetched 1 new logs [03-06-2022 05:43:01]15982: WAF :: fetched 1 new logs [03-06-2022 05:44:02]19527: Checking ditributed CMS bruteforce attacks [03-06-2022 05:45:02]22912: WAF :: fetched 1 new logs [03-06-2022 05:48:01]812: WAF :: fetched 2 new logs [03-06-2022 05:50:02]7905: WAF :: fetched 4 new logs [03-06-2022 05:51:01]11334: WAF :: fetched 3 new logs [03-06-2022 05:58:01]3122: WAF :: fetched 1 new logs [03-06-2022 06:01:02]13721: WAF :: fetched 2 new logs [03-06-2022 06:02:01]17184: WAF :: fetched 1 new logs [03-06-2022 06:04:02]24109: WAF :: fetched 1 new logs [03-06-2022 06:12:01]19357: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654247521 [03-06-2022 06:12:01]19357: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 06:12:03]19357: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 06:12:04]19357: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-0612/20220603-061201-YpnQYQM4KAKJwsgdbV5uBgAAAAA [03-06-2022 06:12:04]19357: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-06-2022 06:12:04]19357: WAF :: fetched 1 new logs [03-06-2022 06:13:01]22766: WAF :: fetched 1 new logs [03-06-2022 06:17:01]4298: WAF :: fetched 6 new logs [03-06-2022 06:20:01]14640: WAF :: fetched 2 new logs [03-06-2022 06:23:02]24917: WAF :: fetched 1 new logs [03-06-2022 06:34:01]30874: WAF :: fetched 1 new logs [03-06-2022 06:35:01]1997: WAF :: fetched 2 new logs [03-06-2022 06:36:01]5487: WAF :: fetched 2 new logs [03-06-2022 06:37:02]8905: WAF :: fetched 1 new logs [03-06-2022 06:38:02]12314: WAF :: fetched 1 new logs [03-06-2022 06:41:01]22718: Checking for user cron vulnerabilities [03-06-2022 06:42:01]26133: WAF :: fetched 34 new logs [03-06-2022 06:44:02]687: Checking ditributed CMS bruteforce attacks [03-06-2022 06:48:01]14521: WAF :: fetched 1 new logs [03-06-2022 06:53:02]31845: WAF :: fetched 2 new logs [03-06-2022 06:55:02]6495: WAF :: fetched 2 new logs [03-06-2022 06:57:01]13382: WAF :: fetched 2 new logs [03-06-2022 07:02:01]30960: WAF :: fetched 1 new logs [03-06-2022 07:03:01]1996: WAF :: fetched 2 new logs [03-06-2022 07:11:02]29775: WAF :: fetched 1 new logs [03-06-2022 07:12:01]814: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654251121 [03-06-2022 07:12:01]814: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 07:12:03]814: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 07:12:04]814: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-0712/20220603-071201-YpnecfAKwA4xHd_HOa1TgQAAAA8 [03-06-2022 07:12:04]814: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 07:12:04]814: WAF :: fetched 227 new logs [03-06-2022 07:15:01]11235: WAF :: fetched 1 new logs [03-06-2022 07:17:01]18122: WAF :: fetched 1 new logs [03-06-2022 07:20:02]28660: WAF :: fetched 1 new logs [03-06-2022 07:24:02]10259: WAF :: fetched 2 new logs [03-06-2022 07:25:02]13709: WAF :: fetched 3 new logs [03-06-2022 07:33:01]9188: WAF :: fetched 5 new logs [03-06-2022 07:34:02]12779: WAF :: fetched 4 new logs [03-06-2022 07:35:02]16210: WAF :: fetched 3 new logs [03-06-2022 07:36:02]19712: WAF :: fetched 1 new logs [03-06-2022 07:39:02]30195: WAF :: fetched 1 new logs [03-06-2022 07:41:01]4781: WAF :: fetched 1 new logs [03-06-2022 07:41:01]4781: Checking for user cron vulnerabilities [03-06-2022 07:42:02]8237: WAF :: fetched 1 new logs [03-06-2022 07:43:01]11711: WAF :: fetched 1 new logs [03-06-2022 07:44:02]15312: Checking ditributed CMS bruteforce attacks [03-06-2022 07:44:02]15312: WAF :: fetched 2 new logs [03-06-2022 07:45:01]: Checking for definition updates [03-06-2022 07:46:01]22207: WAF :: fetched 1 new logs [03-06-2022 07:50:02]3814: WAF :: fetched 2 new logs [03-06-2022 07:51:01]7259: WAF :: fetched 1 new logs [03-06-2022 07:54:02]17693: WAF :: fetched 1 new logs [03-06-2022 07:56:02]24579: WAF :: fetched 1 new logs [03-06-2022 07:57:01]28020: WAF :: fetched 1 new logs [03-06-2022 08:00:01]5836: WAF :: fetched 2 new logs [03-06-2022 08:01:02]9745: WAF :: fetched 4 new logs [03-06-2022 08:07:01]30586: WAF :: fetched 1 new logs [03-06-2022 08:09:01]5274: WAF :: fetched 1 new logs [03-06-2022 08:10:01]8715: WAF :: fetched 5 new logs [03-06-2022 08:11:02]12252: WAF :: fetched 1 new logs [03-06-2022 08:12:01]15664: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654254721 [03-06-2022 08:12:01]15664: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 08:12:03]15664: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 08:12:04]15664: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-0812/20220603-081201-YpnsgcsnXyyvYx2IAFnukgAAAAw [03-06-2022 08:12:04]15664: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-06-2022 08:12:04]15664: WAF :: fetched 1 new logs [03-06-2022 08:15:02]26013: WAF :: fetched 1 new logs [03-06-2022 08:16:01]29481: WAF :: fetched 3 new logs [03-06-2022 08:17:01]470: WAF :: fetched 3 new logs [03-06-2022 08:19:01]7544: WAF :: fetched 1 new logs [03-06-2022 08:23:02]21474: WAF :: fetched 1 new logs [03-06-2022 08:25:01]28504: WAF :: fetched 3 new logs [03-06-2022 08:26:02]32070: WAF :: fetched 1 new logs [03-06-2022 08:30:02]13656: WAF :: fetched 1 new logs [03-06-2022 08:35:02]31222: WAF :: fetched 1 new logs [03-06-2022 08:36:01]2433: WAF :: fetched 7 new logs [03-06-2022 08:38:01]9300: WAF :: fetched 3 new logs [03-06-2022 08:41:02]19937: WAF :: fetched 1 new logs [03-06-2022 08:41:02]19937: Checking for user cron vulnerabilities [03-06-2022 08:44:01]30331: Checking ditributed CMS bruteforce attacks [03-06-2022 08:46:01]5127: WAF :: fetched 1 new logs [03-06-2022 08:50:02]19249: WAF :: fetched 1 new logs [03-06-2022 08:51:01]22742: WAF :: fetched 1 new logs [03-06-2022 08:52:02]26202: WAF :: fetched 15 new logs [03-06-2022 08:54:01]792: WAF :: fetched 1 new logs [03-06-2022 08:56:01]7957: WAF :: fetched 18 new logs [03-06-2022 08:58:02]14936: WAF :: fetched 1 new logs [03-06-2022 08:59:01]18406: WAF :: fetched 2 new logs [03-06-2022 09:02:01]29333: WAF :: fetched 1 new logs [03-06-2022 09:03:01]359: WAF :: fetched 3 new logs [03-06-2022 09:04:02]4057: WAF :: fetched 2 new logs [03-06-2022 09:05:01]7570: WAF :: fetched 118 new logs [03-06-2022 09:06:02]11158: WAF :: fetched 1 new logs [03-06-2022 09:08:01]18167: WAF :: fetched 2 new logs [03-06-2022 09:09:02]21732: WAF :: fetched 5 new logs [03-06-2022 09:10:01]25360: WAF :: fetched 5 new logs [03-06-2022 09:11:01]28904: WAF :: fetched 1 new logs [03-06-2022 09:12:02]32477: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654258322 [03-06-2022 09:12:02]32477: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 09:12:04]32477: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 09:12:04]32477: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-0912/20220603-091202-Ypn6kv6M5IUx2RIMpV1nJwAAADQ [03-06-2022 09:12:04]32477: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 09:12:04]32477: WAF :: fetched 179 new logs [03-06-2022 09:13:01]3622: WAF :: fetched 1 new logs [03-06-2022 09:14:02]7210: WAF :: fetched 2 new logs [03-06-2022 09:15:02]10810: WAF :: fetched 1 new logs [03-06-2022 09:22:02]3375: WAF :: fetched 42 new logs [03-06-2022 09:23:01]6786: WAF :: fetched 1 new logs [03-06-2022 09:24:02]10544: WAF :: fetched 1 new logs [03-06-2022 09:25:01]14138: WAF :: fetched 1 new logs [03-06-2022 09:26:02]17712: WAF :: fetched 2 new logs [03-06-2022 09:28:02]24825: WAF :: fetched 1 new logs [03-06-2022 09:29:02]28322: WAF :: fetched 2 new logs [03-06-2022 09:30:01]31980: WAF :: fetched 4 new logs [03-06-2022 09:36:02]21119: WAF :: fetched 1 new logs [03-06-2022 09:39:02]31789: WAF :: fetched 1 new logs [03-06-2022 09:41:01]6581: Checking for user cron vulnerabilities [03-06-2022 09:42:02]10094: WAF :: fetched 2 new logs [03-06-2022 09:44:01]17085: Checking ditributed CMS bruteforce attacks [03-06-2022 09:45:02]20698: WAF :: fetched 1 new logs [03-06-2022 09:47:02]27830: WAF :: fetched 2 new logs [03-06-2022 09:51:02]9744: WAF :: fetched 2 new logs [03-06-2022 09:53:02]16881: WAF :: fetched 2 new logs [03-06-2022 09:54:01]20410: WAF :: fetched 2 new logs [03-06-2022 09:57:01]31128: WAF :: fetched 3 new logs [03-06-2022 09:58:02]2287: WAF :: fetched 3 new logs [03-06-2022 09:59:01]5761: WAF :: fetched 1 new logs [03-06-2022 10:00:02]9068: WAF :: fetched 4 new logs [03-06-2022 10:01:01]13086: WAF :: fetched 1 new logs [03-06-2022 10:02:02]16669: WAF :: fetched 2 new logs [03-06-2022 10:04:01]23811: WAF :: fetched 1 new logs [03-06-2022 10:08:01]6251: WAF :: fetched 2 new logs [03-06-2022 10:10:02]13575: WAF :: fetched 1 new logs [03-06-2022 10:11:02]17264: WAF :: fetched 1 new logs [03-06-2022 10:12:01]20857: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654261921 [03-06-2022 10:12:01]20857: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 10:12:03]20857: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 10:12:03]20857: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-1012/20220603-101201-YpoIobtpOi8FvmTdD6hoyAAAABw [03-06-2022 10:12:03]20857: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 10:12:04]20857: WAF :: fetched 1 new logs [03-06-2022 10:14:01]28189: WAF :: fetched 1 new logs [03-06-2022 10:19:01]14024: WAF :: fetched 16 new logs [03-06-2022 10:20:02]17766: WAF :: fetched 1 new logs [03-06-2022 10:21:01]21382: WAF :: fetched 1 new logs [03-06-2022 10:27:02]10572: WAF :: fetched 2 new logs [03-06-2022 10:28:02]14024: WAF :: fetched 3 new logs [03-06-2022 10:29:01]17616: WAF :: fetched 4 new logs [03-06-2022 10:30:01]21216: WAF :: fetched 3 new logs [03-06-2022 10:41:02]28763: WAF :: fetched 1 new logs [03-06-2022 10:41:02]28763: Checking for user cron vulnerabilities [03-06-2022 10:44:02]7320: Checking ditributed CMS bruteforce attacks [03-06-2022 10:46:01]14656: WAF :: fetched 5 new logs [03-06-2022 10:51:02]589: WAF :: fetched 1 new logs [03-06-2022 10:53:01]7972: WAF :: fetched 2 new logs [03-06-2022 10:55:02]15294: WAF :: fetched 3 new logs [03-06-2022 10:57:02]22557: WAF :: fetched 1 new logs [03-06-2022 10:58:02]26157: WAF :: fetched 1 new logs [03-06-2022 11:01:02]4916: WAF :: fetched 5 new logs [03-06-2022 11:02:01]8545: WAF :: fetched 19 new logs [03-06-2022 11:03:02]12241: WAF :: fetched 10 new logs [03-06-2022 11:08:19]26977: Performed RBL check for 23.111.136.34. [03-06-2022 11:10:02]5369: WAF :: fetched 2 new logs [03-06-2022 11:11:02]8967: WAF :: fetched 4 new logs [03-06-2022 11:12:01]12589: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654265521 [03-06-2022 11:12:01]12589: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 11:12:03]12589: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 11:12:03]12589: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-1112/20220603-111201-YpoWsZZS3oo36IwdBsRLGwAAACg [03-06-2022 11:12:03]12589: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 11:12:04]12589: WAF :: fetched 3 new logs [03-06-2022 11:13:02]16277: WAF :: fetched 1 new logs [03-06-2022 11:14:01]19822: WAF :: fetched 1 new logs [03-06-2022 11:17:01]30890: WAF :: fetched 1 new logs [03-06-2022 11:20:02]9583: WAF :: fetched 1 new logs [03-06-2022 11:21:02]13270: WAF :: fetched 1 new logs [03-06-2022 11:22:01]16886: WAF :: fetched 2 new logs [03-06-2022 11:23:02]20486: WAF :: fetched 2 new logs [03-06-2022 11:24:01]24058: WAF :: fetched 3 new logs [03-06-2022 11:26:01]31387: WAF :: fetched 3 new logs [03-06-2022 11:28:02]6138: WAF :: fetched 1 new logs [03-06-2022 11:30:01]13330: WAF :: fetched 1 new logs [03-06-2022 11:31:02]17003: WAF :: fetched 1 new logs [03-06-2022 11:32:01]20530: WAF :: fetched 1 new logs [03-06-2022 11:35:01]31388: WAF :: fetched 2 new logs [03-06-2022 11:36:02]2749: WAF :: fetched 3 new logs [03-06-2022 11:37:02]6319: WAF :: fetched 1 new logs [03-06-2022 11:39:02]13618: WAF :: fetched 2 new logs [03-06-2022 11:40:02]17279: WAF :: fetched 2 new logs [03-06-2022 11:41:01]20941: WAF :: fetched 1 new logs [03-06-2022 11:41:01]20941: Checking for user cron vulnerabilities [03-06-2022 11:42:02]24615: WAF :: fetched 5 new logs [03-06-2022 11:44:02]31862: Checking ditributed CMS bruteforce attacks [03-06-2022 11:44:02]31862: WAF :: fetched 1 new logs [03-06-2022 11:45:02]3160: WAF :: fetched 9 new logs [03-06-2022 11:46:01]6719: WAF :: fetched 2 new logs [03-06-2022 11:47:02]10265: WAF :: fetched 2 new logs [03-06-2022 11:48:02]13735: WAF :: fetched 1 new logs [03-06-2022 11:49:01]17277: WAF :: fetched 2 new logs [03-06-2022 11:50:02]20869: WAF :: fetched 1 new logs [03-06-2022 11:51:01]24441: WAF :: fetched 4 new logs [03-06-2022 11:54:02]2849: WAF :: fetched 2 new logs [03-06-2022 11:58:02]17212: WAF :: fetched 1 new logs [03-06-2022 12:04:02]6468: WAF :: fetched 3 new logs [03-06-2022 12:07:02]17165: WAF :: fetched 3 new logs [03-06-2022 12:10:02]27873: WAF :: fetched 2 new logs [03-06-2022 12:12:02]3625: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654269122 [03-06-2022 12:12:02]3625: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 12:12:04]3625: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 12:12:04]3625: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-1212/20220603-121202-YpokwqRTYpllJBb3aYVvmAAAADg [03-06-2022 12:12:04]3625: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 12:12:04]3625: WAF :: fetched 2 new logs [03-06-2022 12:13:02]7145: WAF :: fetched 1 new logs [03-06-2022 12:14:01]10679: WAF :: fetched 1 new logs [03-06-2022 12:15:01]14328: WAF :: fetched 2 new logs [03-06-2022 12:17:02]21503: WAF :: fetched 1 new logs [03-06-2022 12:18:01]25027: WAF :: fetched 2 new logs [03-06-2022 12:20:01]32303: WAF :: fetched 1 new logs [03-06-2022 12:21:01]3639: WAF :: fetched 5 new logs [03-06-2022 12:22:02]7208: WAF :: fetched 29 new logs [03-06-2022 12:23:01]10734: WAF :: fetched 67 new logs [03-06-2022 12:24:02]14252: WAF :: fetched 66 new logs [03-06-2022 12:25:02]17828: WAF :: fetched 63 new logs [03-06-2022 12:26:01]21382: WAF :: fetched 57 new logs [03-06-2022 12:27:02]24931: WAF :: fetched 69 new logs [03-06-2022 12:28:02]28535: WAF :: fetched 66 new logs [03-06-2022 12:29:01]32053: WAF :: fetched 34 new logs [03-06-2022 12:30:01]3371: WAF :: fetched 27 new logs [03-06-2022 12:34:01]17519: WAF :: fetched 2 new logs [03-06-2022 12:35:02]21144: WAF :: fetched 2 new logs [03-06-2022 12:37:02]28160: WAF :: fetched 1 new logs [03-06-2022 12:38:02]31701: WAF :: fetched 2 new logs [03-06-2022 12:40:02]6536: WAF :: fetched 3 new logs [03-06-2022 12:41:01]10076: Checking for user cron vulnerabilities [03-06-2022 12:44:01]20639: Checking ditributed CMS bruteforce attacks [03-06-2022 12:45:01]: Checking for software updates [03-06-2022 12:45:01]24201: WAF :: fetched 2 new logs [03-06-2022 12:50:01]9584: WAF :: fetched 2 new logs [03-06-2022 12:51:02]13244: WAF :: fetched 3 new logs [03-06-2022 12:52:02]16732: WAF :: fetched 3 new logs [03-06-2022 12:53:02]20266: WAF :: fetched 2 new logs [03-06-2022 12:59:02]9086: WAF :: fetched 1 new logs [03-06-2022 13:05:02]30753: WAF :: fetched 1 new logs [03-06-2022 13:07:01]5457: WAF :: fetched 1 new logs [03-06-2022 13:09:01]12443: WAF :: fetched 1 new logs [03-06-2022 13:10:02]16179: WAF :: fetched 1 new logs [03-06-2022 13:12:01]23211: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654272721 [03-06-2022 13:12:01]23211: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 13:12:03]23211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 13:12:03]23211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-1312/20220603-131201-Ypoy0YNqO89hfMAJz1nfRgAAAA0 [03-06-2022 13:12:03]23211: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-06-2022 13:12:03]23211: WAF :: fetched 2 new logs [03-06-2022 13:13:02]26727: WAF :: fetched 2 new logs [03-06-2022 13:16:01]5096: WAF :: fetched 2 new logs [03-06-2022 13:19:02]15601: WAF :: fetched 1 new logs [03-06-2022 13:22:02]26270: WAF :: fetched 1 new logs [03-06-2022 13:26:01]8163: WAF :: fetched 5 new logs [03-06-2022 13:27:02]11734: WAF :: fetched 3 new logs [03-06-2022 13:29:02]18745: WAF :: fetched 4 new logs [03-06-2022 13:31:01]25878: WAF :: fetched 4 new logs [03-06-2022 13:35:01]7626: WAF :: fetched 4 new logs [03-06-2022 13:38:01]18177: WAF :: fetched 2 new logs [03-06-2022 13:39:02]21815: WAF :: fetched 2 new logs [03-06-2022 13:40:01]25392: WAF :: fetched 3 new logs [03-06-2022 13:41:01]29131: WAF :: fetched 1 new logs [03-06-2022 13:41:01]29131: Checking for user cron vulnerabilities [03-06-2022 13:43:02]4013: WAF :: fetched 2 new logs [03-06-2022 13:44:01]7557: Checking ditributed CMS bruteforce attacks [03-06-2022 13:45:01]: Checking for definition updates [03-06-2022 13:45:01]11117: WAF :: fetched 3 new logs [03-06-2022 13:47:01]18438: WAF :: fetched 1 new logs [03-06-2022 13:48:02]22040: WAF :: fetched 3 new logs [03-06-2022 13:49:01]25707: WAF :: fetched 2 new logs [03-06-2022 13:50:02]29375: WAF :: fetched 4 new logs [03-06-2022 13:53:02]7838: WAF :: fetched 1 new logs [03-06-2022 13:54:01]11365: WAF :: fetched 4 new logs [03-06-2022 13:55:01]14907: WAF :: fetched 4 new logs [03-06-2022 13:59:02]29556: WAF :: fetched 2 new logs [03-06-2022 14:01:02]4855: WAF :: fetched 2 new logs [03-06-2022 14:02:02]8506: WAF :: fetched 2 new logs [03-06-2022 14:03:01]12132: WAF :: fetched 1 new logs [03-06-2022 14:04:01]15778: WAF :: fetched 2 new logs [03-06-2022 14:06:01]23155: WAF :: fetched 3 new logs [03-06-2022 14:10:01]5192: WAF :: fetched 2 new logs [03-06-2022 14:11:01]8867: WAF :: fetched 1 new logs [03-06-2022 14:12:02]12476: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654276322 [03-06-2022 14:12:02]12476: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 14:12:04]12476: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 14:12:04]12476: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-1412/20220603-141202-YppA4itqz3SbnJToObnj7wAAAA0 [03-06-2022 14:12:04]12476: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 14:12:04]12476: WAF :: fetched 60 new logs [03-06-2022 14:17:02]30678: WAF :: fetched 5 new logs [03-06-2022 14:18:01]1888: WAF :: fetched 5 new logs [03-06-2022 14:19:02]5472: WAF :: fetched 1 new logs [03-06-2022 14:20:01]9025: WAF :: fetched 1 new logs [03-06-2022 14:23:01]19717: WAF :: fetched 2 new logs [03-06-2022 14:25:02]26833: WAF :: fetched 3 new logs [03-06-2022 14:26:01]30564: WAF :: fetched 1 new logs [03-06-2022 14:27:02]1818: WAF :: fetched 2 new logs [03-06-2022 14:29:02]9027: WAF :: fetched 22 new logs [03-06-2022 14:30:02]12560: WAF :: fetched 49 new logs [03-06-2022 14:31:02]16316: WAF :: fetched 90 new logs [03-06-2022 14:32:01]19873: WAF :: fetched 94 new logs [03-06-2022 14:33:02]23485: WAF :: fetched 94 new logs [03-06-2022 14:34:01]27041: WAF :: fetched 72 new logs [03-06-2022 14:35:02]30628: WAF :: fetched 3 new logs [03-06-2022 14:36:02]1940: WAF :: fetched 79 new logs [03-06-2022 14:37:01]5553: WAF :: fetched 89 new logs [03-06-2022 14:38:02]9114: WAF :: fetched 32 new logs [03-06-2022 14:39:01]12683: WAF :: fetched 30 new logs [03-06-2022 14:40:02]16252: WAF :: fetched 6 new logs [03-06-2022 14:41:02]20010: WAF :: fetched 3 new logs [03-06-2022 14:41:02]20010: Checking for user cron vulnerabilities [03-06-2022 14:42:01]23587: WAF :: fetched 6 new logs [03-06-2022 14:43:02]27217: WAF :: fetched 4 new logs [03-06-2022 14:44:01]30803: Checking ditributed CMS bruteforce attacks [03-06-2022 14:44:01]30803: WAF :: fetched 3 new logs [03-06-2022 14:50:02]19922: WAF :: fetched 1 new logs [03-06-2022 14:52:02]27237: WAF :: fetched 1 new logs [03-06-2022 14:53:02]30718: Updated license status via CDN [03-06-2022 14:54:02]1963: WAF :: fetched 1 new logs [03-06-2022 14:55:01]5539: WAF :: fetched 1 new logs [03-06-2022 14:56:02]9285: WAF :: fetched 4 new logs [03-06-2022 14:57:01]12787: WAF :: fetched 1 new logs [03-06-2022 14:59:02]19942: WAF :: fetched 1 new logs [03-06-2022 15:01:02]27327: Reseting cPGuard inotify settings [03-06-2022 15:01:02]27324: WAF :: fetched 30 new logs [03-06-2022 15:04:01]5794: WAF :: fetched 1 new logs [03-06-2022 15:05:02]9335: WAF :: fetched 2 new logs [03-06-2022 15:06:01]13060: WAF :: fetched 3 new logs [03-06-2022 15:07:02]16607: WAF :: fetched 2 new logs [03-06-2022 15:09:01]23636: WAF :: fetched 52 new logs [03-06-2022 15:10:02]27193: WAF :: fetched 47 new logs [03-06-2022 15:11:01]30858: WAF :: fetched 2 new logs [03-06-2022 15:12:02]2100: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654279922 [03-06-2022 15:12:02]2100: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 15:12:04]2100: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 15:12:04]2100: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-1512/20220603-151202-YppO8htp-IKneJEpER8mQwAAAA4 [03-06-2022 15:12:04]2100: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 15:12:04]2100: WAF :: fetched 40 new logs [03-06-2022 15:13:02]5660: WAF :: fetched 41 new logs [03-06-2022 15:14:01]9212: WAF :: fetched 50 new logs [03-06-2022 15:15:02]12732: WAF :: fetched 56 new logs [03-06-2022 15:16:02]16356: WAF :: fetched 64 new logs [03-06-2022 15:17:01]19840: WAF :: fetched 64 new logs [03-06-2022 15:18:02]23448: WAF :: fetched 75 new logs [03-06-2022 15:19:01]26973: WAF :: fetched 76 new logs [03-06-2022 15:20:02]30577: WAF :: fetched 78 new logs [03-06-2022 15:21:02]1999: WAF :: fetched 74 new logs [03-06-2022 15:22:01]5682: WAF :: fetched 78 new logs [03-06-2022 15:23:02]9286: WAF :: fetched 34 new logs [03-06-2022 15:24:02]12856: WAF :: fetched 4 new logs [03-06-2022 15:25:01]16389: WAF :: fetched 1 new logs [03-06-2022 15:26:01]20183: WAF :: fetched 2 new logs [03-06-2022 15:28:01]27373: WAF :: fetched 1 new logs [03-06-2022 15:29:02]31014: WAF :: fetched 5 new logs [03-06-2022 15:30:01]2239: WAF :: fetched 1 new logs [03-06-2022 15:33:01]13053: WAF :: fetched 1 new logs [03-06-2022 15:34:02]16645: httpd.conf changed. Refreshing watchlist. [03-06-2022 15:36:02]23885: WAF :: fetched 1 new logs [03-06-2022 15:37:02]27403: WAF :: fetched 2 new logs [03-06-2022 15:38:01]31006: WAF :: fetched 1 new logs [03-06-2022 15:39:01]2213: WAF :: fetched 78 new logs [03-06-2022 15:40:02]5832: WAF :: fetched 122 new logs [03-06-2022 15:41:01]9612: httpd.conf changed. Refreshing watchlist. [03-06-2022 15:41:01]9606: WAF :: fetched 111 new logs [03-06-2022 15:41:01]9606: Checking for user cron vulnerabilities [03-06-2022 15:42:01]13194: WAF :: fetched 116 new logs [03-06-2022 15:43:02]16775: WAF :: fetched 27 new logs [03-06-2022 15:44:01]20345: Checking ditributed CMS bruteforce attacks [03-06-2022 15:44:01]20345: WAF :: fetched 99 new logs [03-06-2022 15:45:02]24054: httpd.conf changed. Refreshing watchlist. [03-06-2022 15:45:02]24044: WAF :: fetched 132 new logs [03-06-2022 15:46:01]27801: WAF :: fetched 174 new logs [03-06-2022 15:47:02]31524: WAF :: fetched 214 new logs [03-06-2022 15:48:01]2799: WAF :: fetched 131 new logs [03-06-2022 15:49:02]6419: WAF :: fetched 303 new logs [03-06-2022 15:50:02]10016: WAF :: fetched 154 new logs [03-06-2022 15:51:01]13673: WAF :: fetched 174 new logs [03-06-2022 15:52:02]17286: WAF :: fetched 64 new logs [03-06-2022 15:53:02]20913: httpd.conf changed. Refreshing watchlist. [03-06-2022 15:53:02]20914: WAF :: fetched 4 new logs [03-06-2022 15:54:02]24440: WAF :: fetched 256 new logs [03-06-2022 15:55:02]28027: WAF :: fetched 322 new logs [03-06-2022 15:56:01]31769: WAF :: fetched 230 new logs [03-06-2022 15:57:02]3042: WAF :: fetched 280 new logs [03-06-2022 15:58:02]6552: WAF :: fetched 333 new logs [03-06-2022 15:59:01]10063: WAF :: fetched 273 new logs [03-06-2022 16:00:02]13323: WAF :: fetched 131 new logs [03-06-2022 16:01:02]17443: WAF :: fetched 219 new logs [03-06-2022 16:02:01]20993: WAF :: fetched 212 new logs [03-06-2022 16:03:02]24614: WAF :: fetched 151 new logs [03-06-2022 16:04:02]28157: WAF :: fetched 172 new logs [03-06-2022 16:05:02]31806: WAF :: fetched 99 new logs [03-06-2022 16:06:02]3147: WAF :: fetched 116 new logs [03-06-2022 16:07:01]6713: WAF :: fetched 122 new logs [03-06-2022 16:08:02]10256: WAF :: fetched 105 new logs [03-06-2022 16:09:01]13746: WAF :: fetched 16 new logs [03-06-2022 16:11:02]21058: WAF :: fetched 2 new logs [03-06-2022 16:12:01]24615: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654283521 [03-06-2022 16:12:01]24615: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 16:12:03]24615: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 16:12:03]24615: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-1612/20220603-161201-YppdAdbHfEVMDd6PF2_5iAAAACY [03-06-2022 16:12:03]24615: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 16:13:02]28246: WAF :: fetched 1 new logs [03-06-2022 16:14:01]31845: WAF :: fetched 2 new logs [03-06-2022 16:17:02]10368: WAF :: fetched 1 new logs [03-06-2022 16:19:01]17514: WAF :: fetched 4 new logs [03-06-2022 16:21:01]24786: WAF :: fetched 1 new logs [03-06-2022 16:22:02]28389: WAF :: fetched 3 new logs [03-06-2022 16:24:01]3205: WAF :: fetched 1 new logs [03-06-2022 16:26:01]10478: WAF :: fetched 1 new logs [03-06-2022 16:29:02]21162: WAF :: fetched 13 new logs [03-06-2022 16:31:02]28512: WAF :: fetched 2 new logs [03-06-2022 16:32:01]32047: WAF :: fetched 1 new logs [03-06-2022 16:33:01]3263: WAF :: fetched 2 new logs [03-06-2022 16:35:02]10257: WAF :: fetched 5 new logs [03-06-2022 16:36:01]13910: WAF :: fetched 2 new logs [03-06-2022 16:37:01]17395: WAF :: fetched 1 new logs [03-06-2022 16:38:02]20975: WAF :: fetched 2 new logs [03-06-2022 16:39:01]24622: WAF :: fetched 2 new logs [03-06-2022 16:40:02]28214: WAF :: fetched 1 new logs [03-06-2022 16:41:02]32013: Checking for user cron vulnerabilities [03-06-2022 16:43:01]6830: WAF :: fetched 1 new logs [03-06-2022 16:44:01]10351: Checking ditributed CMS bruteforce attacks [03-06-2022 16:44:02]10351: WAF :: fetched 4 new logs [03-06-2022 16:46:01]17556: WAF :: fetched 1 new logs [03-06-2022 16:47:02]21109: WAF :: fetched 2 new logs [03-06-2022 16:48:02]24733: httpd.conf changed. Refreshing watchlist. [03-06-2022 16:50:02]32136: httpd.conf changed. Refreshing watchlist. [03-06-2022 16:51:02]3557: WAF :: fetched 1 new logs [03-06-2022 16:53:02]10930: httpd.conf changed. Refreshing watchlist. [03-06-2022 16:53:02]10928: WAF :: fetched 1 new logs [03-06-2022 16:54:02]14538: WAF :: fetched 1 new logs [03-06-2022 16:55:02]18073: WAF :: fetched 3 new logs [03-06-2022 16:56:02]21857: WAF :: fetched 1 new logs [03-06-2022 16:57:02]25484: WAF :: fetched 3 new logs [03-06-2022 17:02:02]11286: WAF :: fetched 1 new logs [03-06-2022 17:03:01]14813: WAF :: fetched 4 new logs [03-06-2022 17:07:02]29149: WAF :: fetched 2 new logs [03-06-2022 17:08:02]32688: WAF :: fetched 4 new logs [03-06-2022 17:11:01]11208: WAF :: fetched 2 new logs [03-06-2022 17:12:01]14782: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654287121 [03-06-2022 17:12:01]14782: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 17:12:03]14782: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 17:12:03]14782: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-1712/20220603-171201-YpprEXFQ6q0H68OWRS8C7wAAADc [03-06-2022 17:12:03]14782: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-06-2022 17:12:04]14782: WAF :: fetched 2 new logs [03-06-2022 17:16:02]29036: WAF :: fetched 5 new logs [03-06-2022 17:17:02]32586: WAF :: fetched 4 new logs [03-06-2022 17:18:01]3815: WAF :: fetched 1 new logs [03-06-2022 17:19:02]7441: WAF :: fetched 1 new logs [03-06-2022 17:22:01]18158: WAF :: fetched 1 new logs [03-06-2022 17:32:01]21353: WAF :: fetched 2 new logs [03-06-2022 17:33:01]24902: WAF :: fetched 3 new logs [03-06-2022 17:34:02]28487: WAF :: fetched 4 new logs [03-06-2022 17:35:01]32081: WAF :: fetched 8 new logs [03-06-2022 17:37:01]7096: WAF :: fetched 1 new logs [03-06-2022 17:39:02]14327: WAF :: fetched 84 new logs [03-06-2022 17:40:02]17906: WAF :: fetched 115 new logs [03-06-2022 17:41:01]21593: WAF :: fetched 149 new logs [03-06-2022 17:41:01]21593: Checking for user cron vulnerabilities [03-06-2022 17:42:01]25194: WAF :: fetched 120 new logs [03-06-2022 17:43:02]28760: WAF :: fetched 1 new logs [03-06-2022 17:44:01]32233: Checking ditributed CMS bruteforce attacks [03-06-2022 17:45:01]3512: WAF :: fetched 3 new logs [03-06-2022 17:48:01]14298: WAF :: fetched 1 new logs [03-06-2022 17:50:01]21347: WAF :: fetched 3 new logs [03-06-2022 17:51:01]24978: WAF :: fetched 118 new logs [03-06-2022 17:52:02]28549: WAF :: fetched 161 new logs [03-06-2022 17:53:02]32007: WAF :: fetched 197 new logs [03-06-2022 17:54:01]3191: WAF :: fetched 224 new logs [03-06-2022 17:55:02]6748: WAF :: fetched 253 new logs [03-06-2022 17:56:01]10345: WAF :: fetched 306 new logs [03-06-2022 17:57:02]13900: WAF :: fetched 357 new logs [03-06-2022 17:58:02]17361: WAF :: fetched 355 new logs [03-06-2022 17:59:01]20794: WAF :: fetched 358 new logs [03-06-2022 18:00:02]24074: WAF :: fetched 357 new logs [03-06-2022 18:01:02]28134: WAF :: fetched 355 new logs [03-06-2022 18:02:02]31764: WAF :: fetched 356 new logs [03-06-2022 18:03:01]2949: WAF :: fetched 350 new logs [03-06-2022 18:04:02]6500: WAF :: fetched 355 new logs [03-06-2022 18:05:02]9944: WAF :: fetched 352 new logs [03-06-2022 18:06:01]13538: WAF :: fetched 347 new logs [03-06-2022 18:07:02]17120: WAF :: fetched 359 new logs [03-06-2022 18:08:02]20640: WAF :: fetched 359 new logs [03-06-2022 18:09:02]24208: WAF :: fetched 359 new logs [03-06-2022 18:10:02]27703: WAF :: fetched 344 new logs [03-06-2022 18:11:02]31309: WAF :: fetched 355 new logs [03-06-2022 18:12:02]2501: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654290722 [03-06-2022 18:12:02]2501: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 18:12:04]2501: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 18:12:04]2501: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-1812/20220603-181202-Ypp5Iljg-JIgW2mPt6quzAAAAAI [03-06-2022 18:12:04]2501: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 18:12:07]2501: WAF :: fetched 6261 new logs [03-06-2022 18:13:01]5972: WAF :: fetched 315 new logs [03-06-2022 18:14:02]9495: WAF :: fetched 295 new logs [03-06-2022 18:15:01]12965: WAF :: fetched 214 new logs [03-06-2022 18:16:02]16645: WAF :: fetched 109 new logs [03-06-2022 18:17:02]20158: WAF :: fetched 102 new logs [03-06-2022 18:18:01]23636: WAF :: fetched 101 new logs [03-06-2022 18:19:02]27185: WAF :: fetched 119 new logs [03-06-2022 18:20:01]30698: WAF :: fetched 111 new logs [03-06-2022 18:21:01]1942: WAF :: fetched 114 new logs [03-06-2022 18:22:02]5533: WAF :: fetched 25 new logs [03-06-2022 18:23:02]9023: WAF :: fetched 113 new logs [03-06-2022 18:24:01]12513: WAF :: fetched 119 new logs [03-06-2022 18:25:02]16035: WAF :: fetched 109 new logs [03-06-2022 18:26:02]19595: WAF :: fetched 23 new logs [03-06-2022 18:27:01]23094: WAF :: fetched 91 new logs [03-06-2022 18:28:02]26581: WAF :: fetched 116 new logs [03-06-2022 18:29:01]30049: WAF :: fetched 62 new logs [03-06-2022 18:31:02]4805: WAF :: fetched 1 new logs [03-06-2022 18:32:01]8321: WAF :: fetched 95 new logs [03-06-2022 18:33:02]11817: WAF :: fetched 110 new logs [03-06-2022 18:34:01]15291: WAF :: fetched 102 new logs [03-06-2022 18:37:01]25939: WAF :: fetched 1 new logs [03-06-2022 18:41:01]7630: Checking for user cron vulnerabilities [03-06-2022 18:42:01]11246: WAF :: fetched 4 new logs [03-06-2022 18:44:01]18388: Checking ditributed CMS bruteforce attacks [03-06-2022 18:44:02]18388: WAF :: fetched 1058 new logs [03-06-2022 18:45:03]21962: WAF :: fetched 1394 new logs [03-06-2022 18:47:01]29292: WAF :: fetched 5 new logs [03-06-2022 18:48:02]533: WAF :: fetched 5 new logs [03-06-2022 18:49:01]4230: WAF :: fetched 1 new logs [03-06-2022 18:50:01]7835: WAF :: fetched 1 new logs [03-06-2022 18:59:01]8616: WAF :: fetched 1 new logs [03-06-2022 19:01:02]16134: WAF :: fetched 2 new logs [03-06-2022 19:02:01]19939: WAF :: fetched 2 new logs [03-06-2022 19:07:02]5664: WAF :: fetched 1 new logs [03-06-2022 19:08:01]9090: WAF :: fetched 2 new logs [03-06-2022 19:09:01]12588: WAF :: fetched 1 new logs [03-06-2022 19:11:01]19610: WAF :: fetched 1 new logs [03-06-2022 19:12:02]23211: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654294322 [03-06-2022 19:12:02]23211: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 19:12:04]23211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 19:12:04]23211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-1912/20220603-191202-YpqHMpAtRH-fiwIAWm9gzgAAAAE [03-06-2022 19:12:04]23211: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 19:12:04]23211: WAF :: fetched 1 new logs [03-06-2022 19:13:02]26703: WAF :: fetched 2 new logs [03-06-2022 19:14:01]30175: WAF :: fetched 1 new logs [03-06-2022 19:15:02]1303: WAF :: fetched 3 new logs [03-06-2022 19:18:02]11928: WAF :: fetched 2 new logs [03-06-2022 19:21:01]22320: WAF :: fetched 4 new logs [03-06-2022 19:23:01]29338: WAF :: fetched 2 new logs [03-06-2022 19:24:01]331: WAF :: fetched 1 new logs [03-06-2022 19:27:02]10939: WAF :: fetched 2 new logs [03-06-2022 19:28:02]14271: WAF :: fetched 1 new logs [03-06-2022 19:30:02]21059: WAF :: fetched 2 new logs [03-06-2022 19:31:01]24493: WAF :: fetched 1 new logs [03-06-2022 19:41:01]26321: WAF :: fetched 1 new logs [03-06-2022 19:41:01]26321: Checking for user cron vulnerabilities [03-06-2022 19:43:01]831: WAF :: fetched 6 new logs [03-06-2022 19:44:01]4275: Checking ditributed CMS bruteforce attacks [03-06-2022 19:44:01]4275: WAF :: fetched 1 new logs [03-06-2022 19:45:01]: Checking for definition updates [03-06-2022 19:45:02]7717: WAF :: fetched 1 new logs [03-06-2022 19:45:04]7718: Updated virus defnition : malware.expert.fp [03-06-2022 19:47:02]14632: WAF :: fetched 2 new logs [03-06-2022 19:48:02]17986: WAF :: fetched 6 new logs [03-06-2022 19:54:01]6103: WAF :: fetched 1 new logs [03-06-2022 19:55:02]9497: WAF :: fetched 2 new logs [03-06-2022 19:56:01]12886: WAF :: fetched 2 new logs [03-06-2022 20:01:02]30063: WAF :: fetched 1234 new logs [03-06-2022 20:02:04]1223: WAF :: fetched 4575 new logs [03-06-2022 20:03:01]4619: WAF :: fetched 1 new logs [03-06-2022 20:04:01]8016: WAF :: fetched 1 new logs [03-06-2022 20:05:02]11378: WAF :: fetched 2 new logs [03-06-2022 20:06:02]14762: WAF :: fetched 3 new logs [03-06-2022 20:07:01]18162: WAF :: fetched 17 new logs [03-06-2022 20:08:01]21548: WAF :: fetched 19 new logs [03-06-2022 20:09:02]25007: WAF :: fetched 7 new logs [03-06-2022 20:12:02]3035: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654297922 [03-06-2022 20:12:02]3035: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 20:12:04]3035: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 20:12:04]3035: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-2012/20220603-201202-YpqVQuWHipVhMEUGOruJiAAAABM [03-06-2022 20:12:04]3035: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 20:12:04]3035: WAF :: fetched 2 new logs [03-06-2022 20:13:01]6403: WAF :: fetched 1 new logs [03-06-2022 20:14:02]9779: WAF :: fetched 3 new logs [03-06-2022 20:15:02]13139: WAF :: fetched 1 new logs [03-06-2022 20:17:02]20024: WAF :: fetched 1 new logs [03-06-2022 20:18:01]23346: WAF :: fetched 1 new logs [03-06-2022 20:19:02]26753: WAF :: fetched 2 new logs [03-06-2022 20:20:01]30139: WAF :: fetched 2 new logs [03-06-2022 20:22:02]4855: WAF :: fetched 1 new logs [03-06-2022 20:23:02]8226: WAF :: fetched 2 new logs [03-06-2022 20:24:01]11599: WAF :: fetched 1 new logs [03-06-2022 20:26:02]18337: WAF :: fetched 343 new logs [03-06-2022 20:27:01]21736: WAF :: fetched 817 new logs [03-06-2022 20:28:02]25097: WAF :: fetched 315 new logs [03-06-2022 20:30:02]31886: WAF :: fetched 3 new logs [03-06-2022 20:31:02]2925: WAF :: fetched 2 new logs [03-06-2022 20:34:01]13138: WAF :: fetched 1 new logs [03-06-2022 20:35:02]16549: WAF :: fetched 4 new logs [03-06-2022 20:36:02]19940: WAF :: fetched 2 new logs [03-06-2022 20:38:02]26693: WAF :: fetched 3 new logs [03-06-2022 20:39:01]30065: WAF :: fetched 2 new logs [03-06-2022 20:40:02]1092: WAF :: fetched 1 new logs [03-06-2022 20:41:01]4552: Checking for user cron vulnerabilities [03-06-2022 20:44:01]14712: Checking ditributed CMS bruteforce attacks [03-06-2022 20:44:01]14712: WAF :: fetched 2 new logs [03-06-2022 20:45:02]18058: WAF :: fetched 2 new logs [03-06-2022 20:46:02]21422: WAF :: fetched 1 new logs [03-06-2022 20:47:01]24896: WAF :: fetched 3 new logs [03-06-2022 20:49:01]31618: WAF :: fetched 4 new logs [03-06-2022 20:52:02]9543: WAF :: fetched 1 new logs [03-06-2022 20:56:01]22967: WAF :: fetched 1 new logs [03-06-2022 21:02:01]11147: WAF :: fetched 1 new logs [03-06-2022 21:03:02]14564: WAF :: fetched 5 new logs [03-06-2022 21:05:02]21324: WAF :: fetched 1 new logs [03-06-2022 21:09:01]2496: WAF :: fetched 1 new logs [03-06-2022 21:10:02]5903: WAF :: fetched 1 new logs [03-06-2022 21:12:01]12711: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654301521 [03-06-2022 21:12:01]12711: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 21:12:03]12711: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 21:12:04]12711: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-2112/20220603-211201-YpqjUfH2gIOMto98IVUH_QAAAA0 [03-06-2022 21:12:04]12711: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-06-2022 21:12:04]12711: WAF :: fetched 1 new logs [03-06-2022 21:15:01]22852: WAF :: fetched 2 new logs [03-06-2022 21:19:02]4216: WAF :: fetched 1 new logs [03-06-2022 21:24:01]21316: WAF :: fetched 1 new logs [03-06-2022 21:26:02]28180: WAF :: fetched 2 new logs [03-06-2022 21:27:01]31639: WAF :: fetched 2 new logs [03-06-2022 21:28:02]2669: WAF :: fetched 1 new logs [03-06-2022 21:29:01]6009: WAF :: fetched 1 new logs [03-06-2022 21:30:01]9368: WAF :: fetched 1 new logs [03-06-2022 21:33:02]19675: WAF :: fetched 1 new logs [03-06-2022 21:35:01]26431: WAF :: fetched 1 new logs [03-06-2022 21:37:01]924: WAF :: fetched 4 new logs [03-06-2022 21:41:02]14550: Checking for user cron vulnerabilities [03-06-2022 21:42:01]17993: WAF :: fetched 2 new logs [03-06-2022 21:43:02]21437: WAF :: fetched 5 new logs [03-06-2022 21:44:01]24804: Checking ditributed CMS bruteforce attacks [03-06-2022 21:44:02]24804: WAF :: fetched 2 new logs [03-06-2022 21:45:01]28250: WAF :: fetched 1 new logs [03-06-2022 21:46:02]31731: WAF :: fetched 3 new logs [03-06-2022 21:47:01]2867: WAF :: fetched 6 new logs [03-06-2022 21:48:02]6268: WAF :: fetched 1 new logs [03-06-2022 21:49:01]9690: WAF :: fetched 3 new logs [03-06-2022 21:54:02]26799: WAF :: fetched 2 new logs [03-06-2022 21:58:01]8297: WAF :: fetched 1 new logs [03-06-2022 21:59:02]11714: WAF :: fetched 1 new logs [03-06-2022 22:01:02]18790: WAF :: fetched 2 new logs [03-06-2022 22:02:02]22239: WAF :: fetched 1 new logs [03-06-2022 22:03:01]25641: WAF :: fetched 2 new logs [03-06-2022 22:04:02]29106: WAF :: fetched 2 new logs [03-06-2022 22:05:02]32566: WAF :: fetched 1 new logs [03-06-2022 22:07:01]7205: WAF :: fetched 6 new logs [03-06-2022 22:07:08]7207: Performing Domain reputation checks [03-06-2022 22:09:01]14016: WAF :: fetched 4 new logs [03-06-2022 22:10:01]17419: WAF :: fetched 2 new logs [03-06-2022 22:12:01]24324: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654305121 [03-06-2022 22:12:01]24324: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 22:12:03]24324: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 22:12:03]24324: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-2212/20220603-221201-YpqxYTZ_59J5CQnL0VJcFwAAAAQ [03-06-2022 22:12:03]24324: WAF :: No suitable log file found. Using SQLite.. [03-06-2022 22:12:04]24324: WAF :: fetched 51 new logs [03-06-2022 22:18:02]12650: WAF :: fetched 1 new logs [03-06-2022 22:19:01]15946: WAF :: fetched 2 new logs [03-06-2022 22:20:01]19360: WAF :: fetched 1 new logs [03-06-2022 22:22:02]26315: WAF :: fetched 6 new logs [03-06-2022 22:25:01]4206: WAF :: fetched 2 new logs [03-06-2022 22:33:01]31871: WAF :: fetched 1 new logs [03-06-2022 22:34:01]2940: WAF :: fetched 1 new logs [03-06-2022 22:39:01]20155: WAF :: fetched 2 new logs [03-06-2022 22:41:01]27037: Checking for user cron vulnerabilities [03-06-2022 22:42:02]30596: WAF :: fetched 1188 new logs [03-06-2022 22:43:02]1586: WAF :: fetched 1546 new logs [03-06-2022 22:44:01]5045: Checking ditributed CMS bruteforce attacks [03-06-2022 22:44:01]5045: WAF :: fetched 9 new logs [03-06-2022 22:46:01]11949: WAF :: fetched 2 new logs [03-06-2022 22:47:01]15477: WAF :: fetched 1 new logs [03-06-2022 22:50:02]25752: WAF :: fetched 1 new logs [03-06-2022 22:58:01]20926: WAF :: fetched 3 new logs [03-06-2022 22:59:02]24385: WAF :: fetched 3 new logs [03-06-2022 23:00:01]27534: WAF :: fetched 2 new logs [03-06-2022 23:01:01]31492: WAF :: fetched 7 new logs [03-06-2022 23:04:01]9475: WAF :: fetched 1 new logs [03-06-2022 23:05:02]12893: WAF :: fetched 2 new logs [03-06-2022 23:06:02]16305: WAF :: fetched 1 new logs [03-06-2022 23:07:01]19817: WAF :: fetched 4 new logs [03-06-2022 23:07:51]19981: Performed RBL check for 23.111.136.34. [03-06-2022 23:08:01]23220: WAF :: fetched 1 new logs [03-06-2022 23:09:02]26666: WAF :: fetched 1 new logs [03-06-2022 23:10:01]30123: WAF :: fetched 2 new logs [03-06-2022 23:12:02]4943: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654308722 [03-06-2022 23:12:02]4943: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-06-2022 23:12:04]4943: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-06-2022 23:12:04]4943: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220603/20220603-2312/20220603-231202-Ypq_cvcpFLc2VucXoNIY4wAAAAM [03-06-2022 23:12:04]4943: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-06-2022 23:12:04]4943: WAF :: fetched 1 new logs [03-06-2022 23:13:01]8371: WAF :: fetched 2 new logs [03-06-2022 23:14:02]11795: WAF :: fetched 1 new logs [03-06-2022 23:15:02]15126: WAF :: fetched 2 new logs [03-06-2022 23:16:01]18588: WAF :: fetched 2 new logs [03-06-2022 23:17:02]22085: WAF :: fetched 1 new logs [03-06-2022 23:18:01]25491: WAF :: fetched 1 new logs [03-06-2022 23:20:02]32474: WAF :: fetched 2 new logs [03-06-2022 23:22:02]7079: WAF :: fetched 3 new logs [03-06-2022 23:24:02]13896: WAF :: fetched 1 new logs [03-06-2022 23:26:02]20740: WAF :: fetched 1 new logs [03-06-2022 23:27:02]24186: WAF :: fetched 1 new logs [03-06-2022 23:28:01]27602: WAF :: fetched 3 new logs [03-06-2022 23:29:02]31062: WAF :: fetched 2 new logs [03-06-2022 23:30:03]2129: WAF :: fetched 1717 new logs [03-06-2022 23:32:02]9225: WAF :: fetched 1 new logs [03-06-2022 23:34:02]16041: WAF :: fetched 2 new logs [03-06-2022 23:36:01]22830: WAF :: fetched 14 new logs [03-06-2022 23:37:01]26294: WAF :: fetched 65 new logs [03-06-2022 23:38:02]29792: WAF :: fetched 52 new logs [03-06-2022 23:39:02]784: WAF :: fetched 61 new logs [03-06-2022 23:40:01]4240: WAF :: fetched 48 new logs [03-06-2022 23:41:02]7738: WAF :: fetched 1 new logs [03-06-2022 23:41:02]7738: Checking for user cron vulnerabilities [03-06-2022 23:42:02]11161: WAF :: fetched 2 new logs [03-06-2022 23:44:01]18015: Checking ditributed CMS bruteforce attacks [03-06-2022 23:44:01]18015: WAF :: fetched 2 new logs [03-06-2022 23:46:01]24835: WAF :: fetched 4 new logs [03-06-2022 23:48:01]31811: WAF :: fetched 4 new logs [03-06-2022 23:52:02]13221: WAF :: fetched 1 new logs [03-06-2022 23:53:02]16762: WAF :: fetched 28 new logs [03-06-2022 23:54:01]20153: WAF :: fetched 46 new logs [03-06-2022 23:55:01]23663: WAF :: fetched 7 new logs [03-06-2022 23:55:02]23665: httpd.conf changed. Refreshing watchlist. [03-06-2022 23:56:01]27061: WAF :: fetched 1 new logs [03-06-2022 23:57:02]30530: WAF :: fetched 6 new logs [03-06-2022 23:59:02]5109: WAF :: fetched 1 new logs [04-06-2022 00:01:02]12317: httpd.conf changed. Refreshing watchlist. [04-06-2022 00:01:04]12314: Sending daily report for June 4, 2022 [04-06-2022 00:04:02]22666: WAF :: fetched 2 new logs [04-06-2022 00:05:02]26079: WAF :: fetched 1 new logs [04-06-2022 00:05:02]26079: Deleted 0 entries older than 6 MONTH from scanner_logs [04-06-2022 00:05:02]26079: Deleted 0 files from Quarantine [04-06-2022 00:07:02]506: WAF :: fetched 8 new logs [04-06-2022 00:12:01]17957: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654312321 [04-06-2022 00:12:01]17957: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 00:12:03]17957: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 00:12:04]17957: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-0012/20220604-001201-YprNgbJpHqLOUGlTBxBpfQAAAAI [04-06-2022 00:12:04]17957: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 00:12:05]17957: WAF :: fetched 1264 new logs [04-06-2022 00:13:01]21510: WAF :: fetched 2 new logs [04-06-2022 00:14:02]25020: WAF :: fetched 3 new logs [04-06-2022 00:15:01]28448: WAF :: fetched 3 new logs [04-06-2022 00:16:02]31922: WAF :: fetched 2 new logs [04-06-2022 00:17:01]2944: WAF :: fetched 1 new logs [04-06-2022 00:19:01]9858: WAF :: fetched 1 new logs [04-06-2022 00:21:02]16732: WAF :: fetched 3 new logs [04-06-2022 00:23:02]23705: WAF :: fetched 1 new logs [04-06-2022 00:24:01]27150: WAF :: fetched 2 new logs [04-06-2022 00:35:02]32233: WAF :: fetched 1 new logs [04-06-2022 00:39:02]13564: WAF :: fetched 2 new logs [04-06-2022 00:41:02]20372: Checking for user cron vulnerabilities [04-06-2022 00:44:01]30577: Checking ditributed CMS bruteforce attacks [04-06-2022 00:44:02]30577: WAF :: fetched 2 new logs [04-06-2022 00:45:01]: Checking for software updates [04-06-2022 00:45:01]1548: WAF :: fetched 1 new logs [04-06-2022 00:46:02]5048: WAF :: fetched 1 new logs [04-06-2022 00:59:01]16852: WAF :: fetched 2 new logs [04-06-2022 01:06:01]10684: WAF :: fetched 1 new logs [04-06-2022 01:09:02]21214: WAF :: fetched 1 new logs [04-06-2022 01:12:02]31827: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654315922 [04-06-2022 01:12:02]31827: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 01:12:04]31827: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 01:12:04]31827: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-0112/20220604-011202-YprbkvewTFoVjryMO_5meAAAAAY [04-06-2022 01:12:04]31827: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-06-2022 01:12:04]31827: WAF :: fetched 1 new logs [04-06-2022 01:15:01]9845: WAF :: fetched 1 new logs [04-06-2022 01:19:01]24381: WAF :: fetched 1 new logs [04-06-2022 01:20:02]28065: WAF :: fetched 1 new logs [04-06-2022 01:24:01]9956: WAF :: fetched 1 new logs [04-06-2022 01:25:02]13550: WAF :: fetched 1 new logs [04-06-2022 01:26:01]16989: WAF :: fetched 1 new logs [04-06-2022 01:27:02]20556: WAF :: fetched 1 new logs [04-06-2022 01:32:01]6613: WAF :: fetched 1 new logs [04-06-2022 01:33:01]10315: WAF :: fetched 3 new logs [04-06-2022 01:34:02]13768: WAF :: fetched 4 new logs [04-06-2022 01:36:01]20851: WAF :: fetched 1 new logs [04-06-2022 01:37:02]24341: WAF :: fetched 3 new logs [04-06-2022 01:40:02]2937: WAF :: fetched 1 new logs [04-06-2022 01:41:02]6533: WAF :: fetched 1 new logs [04-06-2022 01:41:02]6533: Checking for user cron vulnerabilities [04-06-2022 01:44:01]17748: Checking ditributed CMS bruteforce attacks [04-06-2022 01:44:01]17748: WAF :: fetched 2 new logs [04-06-2022 01:45:01]: Checking for definition updates [04-06-2022 01:46:01]24548: WAF :: fetched 3 new logs [04-06-2022 01:49:02]3208: WAF :: fetched 1 new logs [04-06-2022 01:50:01]6631: WAF :: fetched 1 new logs [04-06-2022 01:53:02]17252: WAF :: fetched 14 new logs [04-06-2022 01:54:01]20647: WAF :: fetched 1 new logs [04-06-2022 01:55:02]24126: WAF :: fetched 5 new logs [04-06-2022 01:56:01]27698: WAF :: fetched 3 new logs [04-06-2022 01:58:01]2540: WAF :: fetched 2 new logs [04-06-2022 01:59:02]5935: WAF :: fetched 1 new logs [04-06-2022 02:03:01]20002: WAF :: fetched 2 new logs [04-06-2022 02:04:02]23500: WAF :: fetched 1 new logs [04-06-2022 02:05:01]26928: WAF :: fetched 7 new logs [04-06-2022 02:12:02]18791: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654319522 [04-06-2022 02:12:02]18791: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 02:12:04]18791: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 02:12:04]18791: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-0212/20220604-021202-YprpolYaMH4SIP8z92uEngAAAAg [04-06-2022 02:12:04]18791: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-06-2022 02:12:04]18791: WAF :: fetched 1 new logs [04-06-2022 02:13:02]22332: WAF :: fetched 1 new logs [04-06-2022 02:14:02]25744: WAF :: fetched 1 new logs [04-06-2022 02:15:01]29186: WAF :: fetched 1 new logs [04-06-2022 02:16:02]32680: WAF :: fetched 1 new logs [04-06-2022 02:17:01]3782: WAF :: fetched 2 new logs [04-06-2022 02:23:02]24580: WAF :: fetched 2 new logs [04-06-2022 02:24:01]27956: WAF :: fetched 1 new logs [04-06-2022 02:26:02]2557: WAF :: fetched 2 new logs [04-06-2022 02:27:01]5962: WAF :: fetched 1 new logs [04-06-2022 02:30:02]16315: WAF :: fetched 2 new logs [04-06-2022 02:31:01]19733: WAF :: fetched 1 new logs [04-06-2022 02:32:02]23204: WAF :: fetched 3 new logs [04-06-2022 02:33:02]26719: WAF :: fetched 1 new logs [04-06-2022 02:34:01]30201: WAF :: fetched 1 new logs [04-06-2022 02:39:01]15119: WAF :: fetched 2 new logs [04-06-2022 02:41:01]22110: Checking for user cron vulnerabilities [04-06-2022 02:43:02]29283: WAF :: fetched 4 new logs [04-06-2022 02:44:01]908: Checking ditributed CMS bruteforce attacks [04-06-2022 02:44:01]908: WAF :: fetched 2 new logs [04-06-2022 02:47:02]12109: WAF :: fetched 1 new logs [04-06-2022 02:48:01]15582: WAF :: fetched 2 new logs [04-06-2022 02:51:01]26132: WAF :: fetched 1 new logs [04-06-2022 02:52:02]29782: WAF :: fetched 1 new logs [04-06-2022 02:53:02]836: Updated license status via CDN [04-06-2022 03:00:02]25930: WAF :: fetched 1 new logs [04-06-2022 03:00:05]25930: Found and updated 32 CMS installations [04-06-2022 03:01:01]29904: WAF :: fetched 1 new logs [04-06-2022 03:02:02]1338: WAF :: fetched 3 new logs [04-06-2022 03:02:37]25930: Sending CMS version vulnerability report emails to cpanel users [04-06-2022 03:02:40]25930: Checking wordpress installations for suspicious directories [04-06-2022 03:03:02]5448: WAF :: fetched 4 new logs [04-06-2022 03:04:01]9130: WAF :: fetched 5 new logs [04-06-2022 03:04:24]5493: Sending CMS version vulnerability report emails to cpanel users [04-06-2022 03:04:27]5493: Checking wordpress installations for suspicious directories [04-06-2022 03:05:02]12962: WAF :: fetched 1 new logs [04-06-2022 03:06:01]16800: WAF :: fetched 1 new logs [04-06-2022 03:08:02]23896: WAF :: fetched 2 new logs [04-06-2022 03:09:01]27329: WAF :: fetched 1 new logs [04-06-2022 03:10:02]30806: WAF :: fetched 1 new logs [04-06-2022 03:11:01]1903: WAF :: fetched 3 new logs [04-06-2022 03:12:02]3545: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654323122 [04-06-2022 03:12:02]3545: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 03:12:04]3545: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 03:12:04]3545: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-0312/20220604-031202-Ypr3spM8ej8lBr9pPXSZQAAAAAA [04-06-2022 03:12:04]3545: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 03:12:04]3545: WAF :: fetched 87 new logs [04-06-2022 03:13:01]22335: WAF :: fetched 1 new logs [04-06-2022 03:14:02]4749: WAF :: fetched 4 new logs [04-06-2022 03:15:02]17887: WAF :: fetched 2 new logs [04-06-2022 03:20:02]2871: WAF :: fetched 2 new logs [04-06-2022 03:27:02]27136: WAF :: fetched 2 new logs [04-06-2022 03:31:02]9301: WAF :: fetched 2 new logs [04-06-2022 03:33:02]16570: WAF :: fetched 1 new logs [04-06-2022 03:35:01]23545: WAF :: fetched 1 new logs [04-06-2022 03:37:02]30865: WAF :: fetched 1 new logs [04-06-2022 03:38:01]2186: WAF :: fetched 1 new logs [04-06-2022 03:39:02]5715: WAF :: fetched 1 new logs [04-06-2022 03:41:01]12637: Checking for user cron vulnerabilities [04-06-2022 03:42:02]16090: WAF :: fetched 674 new logs [04-06-2022 03:43:01]19564: WAF :: fetched 375 new logs [04-06-2022 03:44:02]22999: Checking ditributed CMS bruteforce attacks [04-06-2022 03:51:01]14734: WAF :: fetched 1 new logs [04-06-2022 03:53:01]21636: WAF :: fetched 1 new logs [04-06-2022 03:55:01]28457: WAF :: fetched 1 new logs [04-06-2022 03:59:02]9852: WAF :: fetched 1 new logs [04-06-2022 04:10:01]15649: WAF :: fetched 2 new logs [04-06-2022 04:11:01]19110: WAF :: fetched 2 new logs [04-06-2022 04:12:02]22538: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654326722 [04-06-2022 04:12:02]22538: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 04:12:04]22538: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 04:12:04]22538: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-0412/20220604-041202-YpsFwhIvR0DtdV_a5_GmkAAAAAA [04-06-2022 04:12:04]22538: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 04:12:04]22538: WAF :: fetched 6 new logs [04-06-2022 04:14:02]29469: WAF :: fetched 1 new logs [04-06-2022 04:18:02]10960: WAF :: fetched 1 new logs [04-06-2022 04:20:01]17740: WAF :: fetched 1 new logs [04-06-2022 04:22:01]24667: WAF :: fetched 3 new logs [04-06-2022 04:23:01]28117: WAF :: fetched 1 new logs [04-06-2022 04:24:02]31614: WAF :: fetched 2 new logs [04-06-2022 04:25:01]2714: WAF :: fetched 1 new logs [04-06-2022 04:27:02]9593: WAF :: fetched 1 new logs [04-06-2022 04:29:02]16554: WAF :: fetched 2 new logs [04-06-2022 04:30:02]19954: WAF :: fetched 1 new logs [04-06-2022 04:32:02]26864: WAF :: fetched 1 new logs [04-06-2022 04:33:01]30316: WAF :: fetched 3 new logs [04-06-2022 04:36:01]8121: WAF :: fetched 1 new logs [04-06-2022 04:37:02]11705: WAF :: fetched 2 new logs [04-06-2022 04:38:02]15100: WAF :: fetched 1 new logs [04-06-2022 04:39:01]18642: WAF :: fetched 1 new logs [04-06-2022 04:40:02]22104: WAF :: fetched 1 new logs [04-06-2022 04:41:01]25534: Checking for user cron vulnerabilities [04-06-2022 04:42:02]29021: WAF :: fetched 1 new logs [04-06-2022 04:44:02]3660: Checking ditributed CMS bruteforce attacks [04-06-2022 04:44:02]3660: WAF :: fetched 1 new logs [04-06-2022 04:47:02]13955: WAF :: fetched 4 new logs [04-06-2022 04:48:01]17325: WAF :: fetched 1 new logs [04-06-2022 04:49:02]20873: WAF :: fetched 1 new logs [04-06-2022 04:50:02]24313: WAF :: fetched 2 new logs [04-06-2022 04:51:01]27798: WAF :: fetched 1 new logs [04-06-2022 04:53:01]2228: WAF :: fetched 1 new logs [04-06-2022 04:54:02]5771: WAF :: fetched 1 new logs [04-06-2022 04:55:02]9161: WAF :: fetched 1 new logs [04-06-2022 05:01:42]29940: Starting daily scan on files updated in last 24 hrs [04-06-2022 05:02:01]997: WAF :: fetched 1 new logs [04-06-2022 05:05:02]11415: WAF :: fetched 1 new logs [04-06-2022 05:06:02]14834: WAF :: fetched 1 new logs [04-06-2022 05:10:02]28531: WAF :: fetched 1 new logs [04-06-2022 05:12:02]3147: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654330322 [04-06-2022 05:12:02]3147: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 05:12:04]3147: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 05:12:04]3147: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-0512/20220604-051202-YpsT0jBCZsnG5svu-FKXFwAAAAc [04-06-2022 05:12:04]3147: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-06-2022 05:12:05]3147: WAF :: fetched 1 new logs [04-06-2022 05:13:01]6496: WAF :: fetched 2 new logs [04-06-2022 05:14:02]9984: WAF :: fetched 1 new logs [04-06-2022 05:15:02]13383: WAF :: fetched 2 new logs [04-06-2022 05:16:01]16861: WAF :: fetched 1 new logs [04-06-2022 05:18:02]23673: WAF :: fetched 1 new logs [04-06-2022 05:19:02]27180: WAF :: fetched 1 new logs [04-06-2022 05:20:01]30640: WAF :: fetched 1 new logs [04-06-2022 05:26:02]19330: WAF :: fetched 30 new logs [04-06-2022 05:27:02]22674: WAF :: fetched 66 new logs [04-06-2022 05:28:01]26081: WAF :: fetched 64 new logs [04-06-2022 05:29:02]29612: WAF :: fetched 62 new logs [04-06-2022 05:30:02]556: WAF :: fetched 14 new logs [04-06-2022 05:34:02]14420: WAF :: fetched 3 new logs [04-06-2022 05:38:02]28115: WAF :: fetched 3 new logs [04-06-2022 05:41:02]6189: Checking for user cron vulnerabilities [04-06-2022 05:43:02]12965: WAF :: fetched 1 new logs [04-06-2022 05:44:01]16397: Checking ditributed CMS bruteforce attacks [04-06-2022 05:44:02]16397: WAF :: fetched 2 new logs [04-06-2022 05:45:01]19790: WAF :: fetched 1 new logs [04-06-2022 05:46:02]23239: WAF :: fetched 4 new logs [04-06-2022 05:51:02]8090: WAF :: fetched 1 new logs [04-06-2022 05:53:01]14821: WAF :: fetched 5 new logs [04-06-2022 05:58:02]31920: WAF :: fetched 1 new logs [04-06-2022 05:59:01]3002: WAF :: fetched 2 new logs [04-06-2022 06:01:02]9974: WAF :: fetched 46 new logs [04-06-2022 06:02:01]13345: WAF :: fetched 167 new logs [04-06-2022 06:03:02]16741: WAF :: fetched 175 new logs [04-06-2022 06:04:02]20177: WAF :: fetched 84 new logs [04-06-2022 06:11:01]11622: WAF :: fetched 1 new logs [04-06-2022 06:12:02]15003: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654333922 [04-06-2022 06:12:02]15003: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 06:12:04]15003: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 06:12:04]15003: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-0612/20220604-061202-Ypsh4h8OVUyylTo1nbZrgQAAAAM [04-06-2022 06:12:04]15003: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 06:12:05]15003: WAF :: fetched 585 new logs [04-06-2022 06:13:01]18358: WAF :: fetched 1 new logs [04-06-2022 06:14:02]21837: WAF :: fetched 2 new logs [04-06-2022 06:15:02]25176: WAF :: fetched 2 new logs [04-06-2022 06:18:02]3065: WAF :: fetched 1 new logs [04-06-2022 06:25:02]26788: WAF :: fetched 6 new logs [04-06-2022 06:26:01]30173: WAF :: fetched 1 new logs [04-06-2022 06:31:01]14942: WAF :: fetched 1 new logs [04-06-2022 06:32:02]18351: WAF :: fetched 1 new logs [04-06-2022 06:36:01]31945: WAF :: fetched 1 new logs [04-06-2022 06:38:01]6309: WAF :: fetched 1 new logs [04-06-2022 06:41:01]16562: Checking for user cron vulnerabilities [04-06-2022 06:44:02]26757: Checking ditributed CMS bruteforce attacks [04-06-2022 06:44:02]26757: WAF :: fetched 1 new logs [04-06-2022 06:45:01]30120: WAF :: fetched 1 new logs [04-06-2022 06:46:01]1117: WAF :: fetched 1 new logs [04-06-2022 06:50:02]14752: WAF :: fetched 1 new logs [04-06-2022 06:55:02]31885: WAF :: fetched 1 new logs [04-06-2022 06:57:02]6314: WAF :: fetched 1 new logs [04-06-2022 06:59:02]13115: WAF :: fetched 3 new logs [04-06-2022 07:01:02]20133: WAF :: fetched 3 new logs [04-06-2022 07:05:02]1600: WAF :: fetched 1 new logs [04-06-2022 07:07:02]8511: WAF :: fetched 1 new logs [04-06-2022 07:09:01]15418: WAF :: fetched 1 new logs [04-06-2022 07:11:01]22263: WAF :: fetched 1 new logs [04-06-2022 07:12:02]25700: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654337522 [04-06-2022 07:12:02]25700: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 07:12:04]25700: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 07:12:04]25700: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-0712/20220604-071202-Ypsv8vvRudvXH24GunbO9gAAACA [04-06-2022 07:12:04]25700: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 07:12:04]25700: WAF :: fetched 2 new logs [04-06-2022 07:14:02]32664: WAF :: fetched 1 new logs [04-06-2022 07:16:02]7154: WAF :: fetched 1 new logs [04-06-2022 07:20:02]21165: WAF :: fetched 1 new logs [04-06-2022 07:22:01]32102: httpd.conf changed. Refreshing watchlist. [04-06-2022 07:29:01]31714: WAF :: fetched 2 new logs [04-06-2022 07:33:01]13924: WAF :: fetched 1 new logs [04-06-2022 07:40:01]5944: WAF :: fetched 2 new logs [04-06-2022 07:41:02]9557: Checking for user cron vulnerabilities [04-06-2022 07:44:02]19712: Checking ditributed CMS bruteforce attacks [04-06-2022 07:45:01]: Checking for definition updates [04-06-2022 07:56:01]28603: WAF :: fetched 2 new logs [04-06-2022 07:58:02]3101: WAF :: fetched 1 new logs [04-06-2022 08:03:01]20730: WAF :: fetched 1 new logs [04-06-2022 08:05:02]27464: WAF :: fetched 1 new logs [04-06-2022 08:07:01]2400: WAF :: fetched 1 new logs [04-06-2022 08:10:01]13035: WAF :: fetched 1 new logs [04-06-2022 08:11:02]16550: WAF :: fetched 1 new logs [04-06-2022 08:12:01]19710: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654341121 [04-06-2022 08:12:01]19710: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 08:12:03]19710: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 08:12:04]19710: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-0812/20220604-081201-Yps-AQAAj5_p8w7s3K9YlQAAAAg [04-06-2022 08:12:04]19710: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 08:12:04]19710: WAF :: fetched 1 new logs [04-06-2022 08:13:01]23170: WAF :: fetched 1 new logs [04-06-2022 08:16:02]1540: WAF :: fetched 1 new logs [04-06-2022 08:27:01]7302: WAF :: fetched 3 new logs [04-06-2022 08:29:02]14178: WAF :: fetched 2 new logs [04-06-2022 08:31:02]21427: httpd.conf changed. Refreshing watchlist. [04-06-2022 08:35:02]2656: WAF :: fetched 1 new logs [04-06-2022 08:41:02]23973: Checking for user cron vulnerabilities [04-06-2022 08:44:02]1475: Checking ditributed CMS bruteforce attacks [04-06-2022 08:46:01]8811: WAF :: fetched 1 new logs [04-06-2022 08:47:02]12204: WAF :: fetched 1 new logs [04-06-2022 08:48:01]15494: WAF :: fetched 4 new logs [04-06-2022 08:50:01]22434: WAF :: fetched 3 new logs [04-06-2022 08:52:02]29340: WAF :: fetched 1 new logs [04-06-2022 08:55:02]7415: WAF :: fetched 4 new logs [04-06-2022 08:59:01]21453: WAF :: fetched 1 new logs [04-06-2022 09:00:02]24802: WAF :: fetched 4 new logs [04-06-2022 09:01:01]28541: WAF :: fetched 1 new logs [04-06-2022 09:07:01]17222: WAF :: fetched 4 new logs [04-06-2022 09:08:01]20732: WAF :: fetched 3 new logs [04-06-2022 09:12:02]1981: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654344722 [04-06-2022 09:12:02]1981: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 09:12:04]1981: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 09:12:04]1981: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-0912/20220604-091202-YptMEqNNMjOy1DetNChJnwAAAAg [04-06-2022 09:12:04]1981: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 09:12:04]1981: WAF :: fetched 1 new logs [04-06-2022 09:21:01]874: WAF :: fetched 1 new logs [04-06-2022 09:23:01]8173: WAF :: fetched 2 new logs [04-06-2022 09:26:01]18197: WAF :: fetched 1 new logs [04-06-2022 09:27:01]22447: httpd.conf changed. Refreshing watchlist. [04-06-2022 09:28:02]25940: WAF :: fetched 1 new logs [04-06-2022 09:30:02]32572: WAF :: fetched 3 new logs [04-06-2022 09:31:01]3230: WAF :: fetched 2 new logs [04-06-2022 09:39:02]31667: WAF :: fetched 1 new logs [04-06-2022 09:41:01]5740: Checking for user cron vulnerabilities [04-06-2022 09:44:02]16226: Checking ditributed CMS bruteforce attacks [04-06-2022 09:45:01]19554: WAF :: fetched 1 new logs [04-06-2022 09:46:01]22983: WAF :: fetched 1 new logs [04-06-2022 09:47:02]26810: WAF :: fetched 4 new logs [04-06-2022 09:48:01]30146: WAF :: fetched 1 new logs [04-06-2022 09:49:01]1144: WAF :: fetched 1 new logs [04-06-2022 09:51:01]8235: WAF :: fetched 1 new logs [04-06-2022 09:54:01]18442: WAF :: fetched 1 new logs [04-06-2022 10:05:01]24038: WAF :: fetched 4 new logs [04-06-2022 10:06:02]27444: WAF :: fetched 2 new logs [04-06-2022 10:08:01]2461: WAF :: fetched 2 new logs [04-06-2022 10:09:01]5877: WAF :: fetched 1 new logs [04-06-2022 10:10:02]9593: WAF :: fetched 1 new logs [04-06-2022 10:11:01]12933: WAF :: fetched 2 new logs [04-06-2022 10:12:01]16270: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654348321 [04-06-2022 10:12:01]16270: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 10:12:03]16270: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 10:12:03]16270: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-1012/20220604-101201-YptaIZ1jv5g4oU-LgRYmTwAAAAM [04-06-2022 10:12:03]16270: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-06-2022 10:12:04]16270: WAF :: fetched 1 new logs [04-06-2022 10:13:01]19719: WAF :: fetched 1 new logs [04-06-2022 10:14:02]23182: WAF :: fetched 2 new logs [04-06-2022 10:15:01]26505: WAF :: fetched 1 new logs [04-06-2022 10:17:01]824: WAF :: fetched 1 new logs [04-06-2022 10:23:02]21993: WAF :: fetched 134 new logs [04-06-2022 10:24:01]25677: WAF :: fetched 195 new logs [04-06-2022 10:26:01]32336: WAF :: fetched 1 new logs [04-06-2022 10:27:02]3358: WAF :: fetched 1 new logs [04-06-2022 10:38:02]9557: WAF :: fetched 1 new logs [04-06-2022 10:41:02]19840: Checking for user cron vulnerabilities [04-06-2022 10:43:02]26689: WAF :: fetched 1 new logs [04-06-2022 10:44:01]30118: Checking ditributed CMS bruteforce attacks [04-06-2022 10:44:02]30118: WAF :: fetched 2 new logs [04-06-2022 10:55:01]3549: WAF :: fetched 2 new logs [04-06-2022 10:57:02]10624: WAF :: fetched 212 new logs [04-06-2022 10:58:01]14369: WAF :: fetched 24 new logs [04-06-2022 10:59:02]17839: WAF :: fetched 8 new logs [04-06-2022 11:02:01]28215: WAF :: fetched 2 new logs [04-06-2022 11:04:02]2756: WAF :: fetched 1 new logs [04-06-2022 11:06:02]9860: WAF :: fetched 1 new logs [04-06-2022 11:07:47]13360: Performed RBL check for 23.111.136.34. [04-06-2022 11:08:02]16742: WAF :: fetched 3 new logs [04-06-2022 11:10:02]23883: WAF :: fetched 1 new logs [04-06-2022 11:12:02]30753: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654351922 [04-06-2022 11:12:02]30753: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 11:12:04]30753: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 11:12:04]30753: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-1112/20220604-111202-YptoMnGjbTE3ptnpPzOBQgAAAAg [04-06-2022 11:12:04]30753: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 11:12:05]30753: WAF :: fetched 474 new logs [04-06-2022 11:19:01]22785: WAF :: fetched 1 new logs [04-06-2022 11:20:01]26447: WAF :: fetched 3 new logs [04-06-2022 11:22:02]777: WAF :: fetched 1 new logs [04-06-2022 11:23:02]4156: WAF :: fetched 1 new logs [04-06-2022 11:24:01]7871: WAF :: fetched 1 new logs [04-06-2022 11:25:01]11220: WAF :: fetched 1 new logs [04-06-2022 11:29:01]25895: WAF :: fetched 2 new logs [04-06-2022 11:32:02]4507: httpd.conf changed. Refreshing watchlist. [04-06-2022 11:34:01]11930: httpd.conf changed. Refreshing watchlist. [04-06-2022 11:37:02]22118: httpd.conf changed. Refreshing watchlist. [04-06-2022 11:41:01]4081: Checking for user cron vulnerabilities [04-06-2022 11:42:01]7611: WAF :: fetched 1 new logs [04-06-2022 11:44:01]14638: Checking ditributed CMS bruteforce attacks [04-06-2022 11:53:01]13968: WAF :: fetched 1 new logs [04-06-2022 11:54:02]17475: WAF :: fetched 1 new logs [04-06-2022 11:57:02]27543: WAF :: fetched 1 new logs [04-06-2022 11:58:01]30921: WAF :: fetched 2 new logs [04-06-2022 11:59:01]2542: WAF :: fetched 3 new logs [04-06-2022 12:00:01]5813: WAF :: fetched 3 new logs [04-06-2022 12:03:01]16738: WAF :: fetched 2 new logs [04-06-2022 12:05:02]23736: WAF :: fetched 1 new logs [04-06-2022 12:12:02]17214: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654355522 [04-06-2022 12:12:02]17214: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 12:12:04]17214: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 12:12:04]17214: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-1212/20220604-121202-Ypt2QglA1BC_nD5M--lK6wAAABA [04-06-2022 12:12:04]17214: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-06-2022 12:12:04]17214: WAF :: fetched 2 new logs [04-06-2022 12:13:01]20680: WAF :: fetched 1 new logs [04-06-2022 12:16:02]31310: WAF :: fetched 2 new logs [04-06-2022 12:17:01]2352: WAF :: fetched 2 new logs [04-06-2022 12:19:01]9687: WAF :: fetched 2 new logs [04-06-2022 12:21:02]17322: WAF :: fetched 1 new logs [04-06-2022 12:35:02]1831: WAF :: fetched 3 new logs [04-06-2022 12:40:02]20149: WAF :: fetched 1 new logs [04-06-2022 12:41:01]23622: WAF :: fetched 1 new logs [04-06-2022 12:41:01]23622: Checking for user cron vulnerabilities [04-06-2022 12:42:01]27102: WAF :: fetched 1 new logs [04-06-2022 12:44:01]1638: Checking ditributed CMS bruteforce attacks [04-06-2022 12:45:02]: Checking for software updates [04-06-2022 12:45:02]5219: WAF :: fetched 6 new logs [04-06-2022 12:48:02]15753: WAF :: fetched 1 new logs [04-06-2022 12:51:02]26807: WAF :: fetched 1 new logs [04-06-2022 12:52:01]30306: WAF :: fetched 2 new logs [04-06-2022 12:56:02]11941: WAF :: fetched 3 new logs [04-06-2022 12:57:01]15306: WAF :: fetched 1 new logs [04-06-2022 12:58:01]18690: WAF :: fetched 3 new logs [04-06-2022 12:59:02]22309: WAF :: fetched 4 new logs [04-06-2022 13:00:01]25974: WAF :: fetched 4 new logs [04-06-2022 13:01:01]29928: WAF :: fetched 2 new logs [04-06-2022 13:02:01]923: WAF :: fetched 1 new logs [04-06-2022 13:12:02]4259: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654359122 [04-06-2022 13:12:02]4259: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 13:12:04]4259: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 13:12:04]4259: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-1312/20220604-131202-YpuEUtWDiCRrPRs799jxIAAAAA8 [04-06-2022 13:12:04]4259: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-06-2022 13:12:04]4259: WAF :: fetched 1 new logs [04-06-2022 13:13:01]7752: WAF :: fetched 1 new logs [04-06-2022 13:15:01]14966: WAF :: fetched 4 new logs [04-06-2022 13:18:02]25433: WAF :: fetched 2 new logs [04-06-2022 13:20:01]32713: WAF :: fetched 2 new logs [04-06-2022 13:21:02]3934: WAF :: fetched 3 new logs [04-06-2022 13:27:01]24694: WAF :: fetched 3 new logs [04-06-2022 13:31:02]7320: WAF :: fetched 3 new logs [04-06-2022 13:32:01]10759: WAF :: fetched 1 new logs [04-06-2022 13:39:02]2566: WAF :: fetched 3 new logs [04-06-2022 13:40:01]6040: WAF :: fetched 2 new logs [04-06-2022 13:41:01]10200: Checking for user cron vulnerabilities [04-06-2022 13:44:02]20634: Checking ditributed CMS bruteforce attacks [04-06-2022 13:45:01]: Checking for definition updates [04-06-2022 13:55:01]27282: WAF :: fetched 2 new logs [04-06-2022 13:59:01]9028: WAF :: fetched 1 new logs [04-06-2022 14:02:01]19959: WAF :: fetched 3 new logs [04-06-2022 14:03:01]23309: WAF :: fetched 1 new logs [04-06-2022 14:04:02]26797: WAF :: fetched 1 new logs [04-06-2022 14:05:01]30162: WAF :: fetched 2 new logs [04-06-2022 14:07:02]4680: WAF :: fetched 4 new logs [04-06-2022 14:12:02]22474: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654362722 [04-06-2022 14:12:02]22474: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 14:12:04]22474: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 14:12:04]22474: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-1412/20220604-141202-YpuSYsYI7PZEI9siw9NNhAAAAAs [04-06-2022 14:12:04]22474: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 14:12:04]22474: WAF :: fetched 61 new logs [04-06-2022 14:19:02]14476: WAF :: fetched 2 new logs [04-06-2022 14:23:01]28795: WAF :: fetched 2 new logs [04-06-2022 14:25:01]3429: WAF :: fetched 1 new logs [04-06-2022 14:28:02]14017: WAF :: fetched 1 new logs [04-06-2022 14:32:01]29063: WAF :: fetched 2 new logs [04-06-2022 14:40:01]24551: WAF :: fetched 1 new logs [04-06-2022 14:41:02]27993: Checking for user cron vulnerabilities [04-06-2022 14:44:01]6236: Checking ditributed CMS bruteforce attacks [04-06-2022 14:45:01]9925: WAF :: fetched 2 new logs [04-06-2022 14:50:01]26779: WAF :: fetched 1 new logs [04-06-2022 14:53:02]5142: Updated license status via CDN [04-06-2022 14:57:02]18893: WAF :: fetched 36 new logs [04-06-2022 14:58:01]22104: WAF :: fetched 129 new logs [04-06-2022 14:59:01]25480: WAF :: fetched 197 new logs [04-06-2022 15:00:02]28750: WAF :: fetched 200 new logs [04-06-2022 15:01:01]32476: WAF :: fetched 142 new logs [04-06-2022 15:01:01]32477: Reseting cPGuard inotify settings [04-06-2022 15:02:02]4056: WAF :: fetched 87 new logs [04-06-2022 15:03:01]7545: WAF :: fetched 70 new logs [04-06-2022 15:04:01]10982: WAF :: fetched 53 new logs [04-06-2022 15:05:02]14414: WAF :: fetched 38 new logs [04-06-2022 15:06:01]17705: WAF :: fetched 56 new logs [04-06-2022 15:07:02]21144: WAF :: fetched 59 new logs [04-06-2022 15:08:02]24540: WAF :: fetched 60 new logs [04-06-2022 15:09:01]27984: WAF :: fetched 54 new logs [04-06-2022 15:10:02]31475: WAF :: fetched 57 new logs [04-06-2022 15:11:01]2467: WAF :: fetched 51 new logs [04-06-2022 15:12:02]6588: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654366322 [04-06-2022 15:12:02]6588: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 15:12:04]6588: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 15:12:04]6588: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-1512/20220604-151202-Ypugcg32XcJxzeX3rbqEIAAAABo [04-06-2022 15:12:04]6588: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 15:12:04]6588: WAF :: fetched 66 new logs [04-06-2022 15:13:01]9889: WAF :: fetched 61 new logs [04-06-2022 15:14:01]13314: WAF :: fetched 64 new logs [04-06-2022 15:15:02]16908: WAF :: fetched 64 new logs [04-06-2022 15:16:01]20359: WAF :: fetched 57 new logs [04-06-2022 15:17:01]23779: WAF :: fetched 53 new logs [04-06-2022 15:18:02]27167: WAF :: fetched 55 new logs [04-06-2022 15:19:01]30488: WAF :: fetched 38 new logs [04-06-2022 15:20:02]1696: WAF :: fetched 56 new logs [04-06-2022 15:21:02]5217: WAF :: fetched 39 new logs [04-06-2022 15:22:01]9337: WAF :: fetched 50 new logs [04-06-2022 15:23:02]12829: WAF :: fetched 49 new logs [04-06-2022 15:24:01]16326: WAF :: fetched 41 new logs [04-06-2022 15:25:01]19811: WAF :: fetched 37 new logs [04-06-2022 15:26:02]23363: WAF :: fetched 47 new logs [04-06-2022 15:27:01]26806: WAF :: fetched 39 new logs [04-06-2022 15:28:02]30208: WAF :: fetched 43 new logs [04-06-2022 15:29:01]1229: WAF :: fetched 40 new logs [04-06-2022 15:30:02]4866: WAF :: fetched 49 new logs [04-06-2022 15:31:02]8965: WAF :: fetched 46 new logs [04-06-2022 15:32:01]12868: WAF :: fetched 24 new logs [04-06-2022 15:33:02]17047: WAF :: fetched 47 new logs [04-06-2022 15:34:01]20476: WAF :: fetched 36 new logs [04-06-2022 15:35:02]24034: WAF :: fetched 34 new logs [04-06-2022 15:36:01]27486: WAF :: fetched 32 new logs [04-06-2022 15:41:01]12209: Checking for user cron vulnerabilities [04-06-2022 15:43:02]19674: WAF :: fetched 2 new logs [04-06-2022 15:44:01]23208: Checking ditributed CMS bruteforce attacks [04-06-2022 15:47:01]1164: WAF :: fetched 1 new logs [04-06-2022 15:51:02]15325: WAF :: fetched 6 new logs [04-06-2022 16:03:01]26234: WAF :: fetched 1 new logs [04-06-2022 16:05:02]917: WAF :: fetched 1 new logs [04-06-2022 16:12:01]25306: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654369921 [04-06-2022 16:12:01]25306: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 16:12:03]25306: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 16:12:03]25306: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-1612/20220604-161201-YpuugTVlOhckv_CKWTfZ7QAAAAE [04-06-2022 16:12:03]25306: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 16:15:02]3784: WAF :: fetched 28 new logs [04-06-2022 16:16:01]7405: WAF :: fetched 71 new logs [04-06-2022 16:17:02]10856: WAF :: fetched 91 new logs [04-06-2022 16:18:01]14254: WAF :: fetched 116 new logs [04-06-2022 16:19:01]17752: WAF :: fetched 105 new logs [04-06-2022 16:20:01]21289: WAF :: fetched 88 new logs [04-06-2022 16:21:01]24673: WAF :: fetched 118 new logs [04-06-2022 16:22:02]28068: WAF :: fetched 120 new logs [04-06-2022 16:23:01]31918: WAF :: fetched 59 new logs [04-06-2022 16:24:01]3080: WAF :: fetched 30 new logs [04-06-2022 16:25:01]6667: WAF :: fetched 30 new logs [04-06-2022 16:26:01]10116: WAF :: fetched 15 new logs [04-06-2022 16:36:02]13787: WAF :: fetched 2 new logs [04-06-2022 16:38:01]20443: WAF :: fetched 1 new logs [04-06-2022 16:41:02]30754: Checking for user cron vulnerabilities [04-06-2022 16:44:01]8713: Checking ditributed CMS bruteforce attacks [04-06-2022 16:44:01]8713: WAF :: fetched 1 new logs [04-06-2022 16:45:01]12184: WAF :: fetched 1 new logs [04-06-2022 16:47:01]18925: WAF :: fetched 4 new logs [04-06-2022 16:48:02]22417: WAF :: fetched 2 new logs [04-06-2022 16:50:01]29199: WAF :: fetched 2 new logs [04-06-2022 16:51:02]32555: WAF :: fetched 2 new logs [04-06-2022 16:56:02]17800: WAF :: fetched 1 new logs [04-06-2022 17:04:02]13042: WAF :: fetched 1 new logs [04-06-2022 17:08:02]26385: WAF :: fetched 3 new logs [04-06-2022 17:09:01]29527: WAF :: fetched 1 new logs [04-06-2022 17:10:02]700: WAF :: fetched 1 new logs [04-06-2022 17:12:01]7537: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654373521 [04-06-2022 17:12:01]7537: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 17:12:03]7537: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 17:12:03]7537: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-1712/20220604-171201-Ypu8kczbxFomvJFS4LwtOQAAAAY [04-06-2022 17:12:03]7537: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 17:12:03]7537: WAF :: fetched 1 new logs [04-06-2022 17:31:02]8086: WAF :: fetched 1 new logs [04-06-2022 17:41:02]11001: Checking for user cron vulnerabilities [04-06-2022 17:44:01]21447: Checking ditributed CMS bruteforce attacks [04-06-2022 17:44:02]21447: WAF :: fetched 1 new logs [04-06-2022 17:45:01]24779: WAF :: fetched 1 new logs [04-06-2022 17:46:02]28189: WAF :: fetched 1 new logs [04-06-2022 17:52:01]16124: WAF :: fetched 1 new logs [04-06-2022 17:53:02]19415: WAF :: fetched 4 new logs [04-06-2022 17:54:01]22787: WAF :: fetched 2 new logs [04-06-2022 17:56:02]30146: WAF :: fetched 2 new logs [04-06-2022 18:04:01]25068: WAF :: fetched 2 new logs [04-06-2022 18:10:02]13754: WAF :: fetched 1 new logs [04-06-2022 18:12:01]20380: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654377121 [04-06-2022 18:12:01]20380: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 18:12:03]20380: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 18:12:03]20380: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-1812/20220604-181201-YpvKobJyWRTu_IsyQ2Cs9QAAAAw [04-06-2022 18:12:03]20380: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 18:12:03]20380: WAF :: fetched 2 new logs [04-06-2022 18:15:02]31002: WAF :: fetched 1 new logs [04-06-2022 18:23:02]25612: WAF :: fetched 1 new logs [04-06-2022 18:25:02]427: WAF :: fetched 1 new logs [04-06-2022 18:31:01]21587: WAF :: fetched 1 new logs [04-06-2022 18:41:02]23037: Checking for user cron vulnerabilities [04-06-2022 18:42:01]26346: WAF :: fetched 1 new logs [04-06-2022 18:44:01]396: Checking ditributed CMS bruteforce attacks [04-06-2022 18:44:01]396: WAF :: fetched 34 new logs [04-06-2022 18:45:01]4444: WAF :: fetched 58 new logs [04-06-2022 18:46:01]7914: WAF :: fetched 45 new logs [04-06-2022 18:47:01]11086: WAF :: fetched 2 new logs [04-06-2022 18:53:02]31180: WAF :: fetched 2 new logs [04-06-2022 18:56:02]9616: WAF :: fetched 1 new logs [04-06-2022 19:02:01]29882: WAF :: fetched 1 new logs [04-06-2022 19:05:02]7801: WAF :: fetched 2 new logs [04-06-2022 19:07:01]15071: WAF :: fetched 2 new logs [04-06-2022 19:08:02]18468: WAF :: fetched 1 new logs [04-06-2022 19:09:01]21876: WAF :: fetched 1 new logs [04-06-2022 19:10:02]25159: WAF :: fetched 1 new logs [04-06-2022 19:12:01]31752: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654380721 [04-06-2022 19:12:01]31752: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 19:12:03]31752: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 19:12:03]31752: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-1912/20220604-191201-YpvYsTn21Uq-ULI_rS6B0wAAABU [04-06-2022 19:12:03]31752: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 19:16:01]13516: WAF :: fetched 1 new logs [04-06-2022 19:19:01]23447: WAF :: fetched 1 new logs [04-06-2022 19:20:02]26875: WAF :: fetched 1 new logs [04-06-2022 19:21:01]30378: WAF :: fetched 4 new logs [04-06-2022 19:29:01]25358: WAF :: fetched 1 new logs [04-06-2022 19:30:02]28765: WAF :: fetched 1 new logs [04-06-2022 19:34:01]11395: WAF :: fetched 2 new logs [04-06-2022 19:38:01]25137: WAF :: fetched 2 new logs [04-06-2022 19:39:01]28463: WAF :: fetched 1 new logs [04-06-2022 19:40:01]31772: WAF :: fetched 1 new logs [04-06-2022 19:41:01]2846: WAF :: fetched 5 new logs [04-06-2022 19:41:01]2846: Checking for user cron vulnerabilities [04-06-2022 19:43:01]9654: WAF :: fetched 2 new logs [04-06-2022 19:44:02]13021: Checking ditributed CMS bruteforce attacks [04-06-2022 19:44:02]13021: WAF :: fetched 5 new logs [04-06-2022 19:45:01]: Checking for definition updates [04-06-2022 19:45:01]16379: WAF :: fetched 1 new logs [04-06-2022 19:45:07]16384: Updated virus defnition : malware.expert.ndb [04-06-2022 19:47:02]23627: WAF :: fetched 1 new logs [04-06-2022 19:48:01]26864: WAF :: fetched 1 new logs [04-06-2022 19:49:02]30239: WAF :: fetched 2 new logs [04-06-2022 19:54:02]14988: WAF :: fetched 1 new logs [04-06-2022 19:56:02]22368: WAF :: fetched 1 new logs [04-06-2022 19:57:01]25676: WAF :: fetched 3 new logs [04-06-2022 20:00:01]2960: WAF :: fetched 2 new logs [04-06-2022 20:01:02]7117: WAF :: fetched 3 new logs [04-06-2022 20:04:02]16949: WAF :: fetched 1 new logs [04-06-2022 20:05:01]20218: WAF :: fetched 1 new logs [04-06-2022 20:06:02]24077: WAF :: fetched 1 new logs [04-06-2022 20:08:01]30642: WAF :: fetched 1 new logs [04-06-2022 20:09:01]1567: WAF :: fetched 1 new logs [04-06-2022 20:12:02]11905: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654384322 [04-06-2022 20:12:02]11905: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 20:12:04]11905: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 20:12:04]11905: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-2012/20220604-201202-Ypvmwk35d4_jNGkXtTEXmgAAAAs [04-06-2022 20:12:04]11905: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-06-2022 20:12:04]11905: WAF :: fetched 1 new logs [04-06-2022 20:13:01]15134: WAF :: fetched 1 new logs [04-06-2022 20:15:02]21919: WAF :: fetched 1 new logs [04-06-2022 20:16:01]25280: WAF :: fetched 2 new logs [04-06-2022 20:17:02]29118: WAF :: fetched 2 new logs [04-06-2022 20:18:01]32361: WAF :: fetched 3 new logs [04-06-2022 20:20:02]6958: WAF :: fetched 1 new logs [04-06-2022 20:21:01]10396: WAF :: fetched 2 new logs [04-06-2022 20:26:01]27312: WAF :: fetched 1 new logs [04-06-2022 20:28:01]2097: WAF :: fetched 2 new logs [04-06-2022 20:29:02]5512: WAF :: fetched 5 new logs [04-06-2022 20:30:01]8966: WAF :: fetched 1 new logs [04-06-2022 20:32:01]16377: WAF :: fetched 3 new logs [04-06-2022 20:39:02]7999: WAF :: fetched 1 new logs [04-06-2022 20:41:01]14832: Checking for user cron vulnerabilities [04-06-2022 20:42:01]18122: WAF :: fetched 2 new logs [04-06-2022 20:43:02]21474: WAF :: fetched 4 new logs [04-06-2022 20:44:01]24780: Checking ditributed CMS bruteforce attacks [04-06-2022 20:44:01]24780: WAF :: fetched 1 new logs [04-06-2022 20:45:02]28119: WAF :: fetched 2 new logs [04-06-2022 20:46:01]31506: WAF :: fetched 1 new logs [04-06-2022 20:47:02]3049: WAF :: fetched 1 new logs [04-06-2022 20:48:01]6490: WAF :: fetched 5 new logs [04-06-2022 20:49:02]9903: WAF :: fetched 3 new logs [04-06-2022 20:50:02]13246: WAF :: fetched 1 new logs [04-06-2022 20:53:01]23350: WAF :: fetched 21 new logs [04-06-2022 20:54:01]26735: WAF :: fetched 44 new logs [04-06-2022 20:55:01]30070: WAF :: fetched 43 new logs [04-06-2022 20:56:02]1224: WAF :: fetched 50 new logs [04-06-2022 20:57:01]5113: WAF :: fetched 117 new logs [04-06-2022 20:58:02]8760: WAF :: fetched 117 new logs [04-06-2022 20:59:01]12095: WAF :: fetched 75 new logs [04-06-2022 21:00:02]15232: WAF :: fetched 74 new logs [04-06-2022 21:01:02]19148: WAF :: fetched 76 new logs [04-06-2022 21:02:01]22514: WAF :: fetched 77 new logs [04-06-2022 21:03:02]25919: WAF :: fetched 76 new logs [04-06-2022 21:04:02]29375: WAF :: fetched 76 new logs [04-06-2022 21:05:01]331: WAF :: fetched 76 new logs [04-06-2022 21:06:02]3944: WAF :: fetched 70 new logs [04-06-2022 21:07:01]7895: WAF :: fetched 75 new logs [04-06-2022 21:08:01]11279: WAF :: fetched 78 new logs [04-06-2022 21:09:02]14747: WAF :: fetched 114 new logs [04-06-2022 21:10:02]18119: WAF :: fetched 147 new logs [04-06-2022 21:11:01]21624: WAF :: fetched 175 new logs [04-06-2022 21:12:02]25015: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654387922 [04-06-2022 21:12:02]25015: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 21:12:04]25015: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 21:12:04]25015: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-2112/20220604-211202-Ypv00k9kyNGkbMTf7NwR9gAAAAg [04-06-2022 21:12:04]25015: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 21:12:05]25015: WAF :: fetched 1415 new logs [04-06-2022 21:13:01]28314: WAF :: fetched 60 new logs [04-06-2022 21:14:01]31679: WAF :: fetched 70 new logs [04-06-2022 21:15:02]2726: WAF :: fetched 65 new logs [04-06-2022 21:16:02]6261: WAF :: fetched 68 new logs [04-06-2022 21:17:01]9721: WAF :: fetched 52 new logs [04-06-2022 21:18:01]13575: WAF :: fetched 51 new logs [04-06-2022 21:19:02]16912: WAF :: fetched 56 new logs [04-06-2022 21:20:01]20225: WAF :: fetched 56 new logs [04-06-2022 21:21:02]23661: WAF :: fetched 55 new logs [04-06-2022 21:22:01]26974: WAF :: fetched 50 new logs [04-06-2022 21:23:02]30295: WAF :: fetched 60 new logs [04-06-2022 21:24:01]1337: WAF :: fetched 58 new logs [04-06-2022 21:25:01]4666: WAF :: fetched 57 new logs [04-06-2022 21:26:02]8318: WAF :: fetched 53 new logs [04-06-2022 21:27:01]11567: WAF :: fetched 59 new logs [04-06-2022 21:28:01]15409: WAF :: fetched 66 new logs [04-06-2022 21:29:01]18761: WAF :: fetched 53 new logs [04-06-2022 21:30:02]22127: WAF :: fetched 50 new logs [04-06-2022 21:31:01]25725: WAF :: fetched 60 new logs [04-06-2022 21:32:01]29010: WAF :: fetched 67 new logs [04-06-2022 21:33:02]32272: WAF :: fetched 94 new logs [04-06-2022 21:34:01]3194: WAF :: fetched 63 new logs [04-06-2022 21:35:01]6714: WAF :: fetched 53 new logs [04-06-2022 21:36:01]10154: WAF :: fetched 60 new logs [04-06-2022 21:37:02]13589: WAF :: fetched 56 new logs [04-06-2022 21:38:01]17461: WAF :: fetched 62 new logs [04-06-2022 21:39:02]20848: WAF :: fetched 59 new logs [04-06-2022 21:40:01]24470: WAF :: fetched 68 new logs [04-06-2022 21:41:02]28154: WAF :: fetched 68 new logs [04-06-2022 21:41:02]28154: Checking for user cron vulnerabilities [04-06-2022 21:42:01]31607: WAF :: fetched 65 new logs [04-06-2022 21:43:01]2749: WAF :: fetched 55 new logs [04-06-2022 21:44:01]6079: Checking ditributed CMS bruteforce attacks [04-06-2022 21:44:02]6079: WAF :: fetched 70 new logs [04-06-2022 21:45:01]9489: WAF :: fetched 67 new logs [04-06-2022 21:46:02]12960: WAF :: fetched 69 new logs [04-06-2022 21:47:01]16271: WAF :: fetched 68 new logs [04-06-2022 21:48:01]20042: WAF :: fetched 73 new logs [04-06-2022 21:49:02]23421: WAF :: fetched 74 new logs [04-06-2022 21:50:02]26647: WAF :: fetched 75 new logs [04-06-2022 21:51:02]30103: WAF :: fetched 70 new logs [04-06-2022 21:52:01]953: WAF :: fetched 68 new logs [04-06-2022 21:53:02]4422: WAF :: fetched 73 new logs [04-06-2022 21:54:01]7870: WAF :: fetched 78 new logs [04-06-2022 21:55:01]11119: WAF :: fetched 70 new logs [04-06-2022 21:56:02]14553: WAF :: fetched 31 new logs [04-06-2022 22:00:01]27895: WAF :: fetched 19 new logs [04-06-2022 22:01:01]31781: WAF :: fetched 67 new logs [04-06-2022 22:02:01]2771: WAF :: fetched 63 new logs [04-06-2022 22:03:02]6087: WAF :: fetched 71 new logs [04-06-2022 22:04:01]9531: WAF :: fetched 25 new logs [04-06-2022 22:07:01]19668: WAF :: fetched 268 new logs [04-06-2022 22:07:09]19663: Performing Domain reputation checks [04-06-2022 22:08:02]23570: WAF :: fetched 366 new logs [04-06-2022 22:09:02]26904: WAF :: fetched 332 new logs [04-06-2022 22:10:01]30290: WAF :: fetched 274 new logs [04-06-2022 22:11:02]1397: WAF :: fetched 260 new logs [04-06-2022 22:12:02]4701: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654391522 [04-06-2022 22:12:02]4701: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 22:12:04]4701: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 22:12:04]4701: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-2212/20220604-221202-YpwC4jg3N7skWrq4b6ZqxQAAAAA [04-06-2022 22:12:04]4701: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 22:12:04]4701: WAF :: fetched 252 new logs [04-06-2022 22:13:01]8147: WAF :: fetched 184 new logs [04-06-2022 22:14:02]11398: WAF :: fetched 141 new logs [04-06-2022 22:15:01]14807: WAF :: fetched 1 new logs [04-06-2022 22:19:01]28251: WAF :: fetched 1 new logs [04-06-2022 22:22:01]5853: WAF :: fetched 1 new logs [04-06-2022 22:25:02]15998: WAF :: fetched 1 new logs [04-06-2022 22:26:01]19413: WAF :: fetched 4 new logs [04-06-2022 22:33:02]11255: WAF :: fetched 2 new logs [04-06-2022 22:34:01]14566: WAF :: fetched 3 new logs [04-06-2022 22:35:02]17892: WAF :: fetched 7 new logs [04-06-2022 22:36:01]21421: WAF :: fetched 2 new logs [04-06-2022 22:38:02]28047: WAF :: fetched 1 new logs [04-06-2022 22:39:01]31927: WAF :: fetched 2 new logs [04-06-2022 22:41:02]6640: WAF :: fetched 2 new logs [04-06-2022 22:41:02]6640: Checking for user cron vulnerabilities [04-06-2022 22:42:01]9921: WAF :: fetched 3 new logs [04-06-2022 22:43:02]13221: WAF :: fetched 53 new logs [04-06-2022 22:44:01]16657: Checking ditributed CMS bruteforce attacks [04-06-2022 22:44:02]16657: WAF :: fetched 75 new logs [04-06-2022 22:45:01]20052: WAF :: fetched 76 new logs [04-06-2022 22:46:02]23519: WAF :: fetched 30 new logs [04-06-2022 22:47:01]26852: WAF :: fetched 2 new logs [04-06-2022 22:50:01]5172: WAF :: fetched 1 new logs [04-06-2022 22:55:01]22058: WAF :: fetched 1 new logs [04-06-2022 23:00:01]6928: WAF :: fetched 2 new logs [04-06-2022 23:02:01]14003: WAF :: fetched 1 new logs [04-06-2022 23:04:01]20681: WAF :: fetched 1 new logs [04-06-2022 23:07:01]30833: WAF :: fetched 1 new logs [04-06-2022 23:07:38]30979: Performed RBL check for 23.111.136.34. [04-06-2022 23:12:02]15342: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654395122 [04-06-2022 23:12:02]15342: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-06-2022 23:12:04]15342: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-06-2022 23:12:04]15342: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220604/20220604-2312/20220604-231202-YpwQ8qNOYMRFv4Ic6grriAAAAAI [04-06-2022 23:12:04]15342: WAF :: No suitable log file found. Using SQLite.. [04-06-2022 23:12:04]15342: WAF :: fetched 2 new logs [04-06-2022 23:14:02]22016: WAF :: fetched 2 new logs [04-06-2022 23:16:02]28773: WAF :: fetched 16 new logs [04-06-2022 23:17:01]32030: WAF :: fetched 38 new logs [04-06-2022 23:18:01]2964: WAF :: fetched 18 new logs [04-06-2022 23:19:02]7088: WAF :: fetched 32 new logs [04-06-2022 23:20:01]10338: WAF :: fetched 24 new logs [04-06-2022 23:21:01]13828: WAF :: fetched 24 new logs [04-06-2022 23:22:02]17119: WAF :: fetched 1 new logs [04-06-2022 23:23:01]20353: WAF :: fetched 1 new logs [04-06-2022 23:31:01]15747: WAF :: fetched 45 new logs [04-06-2022 23:32:02]19467: WAF :: fetched 136 new logs [04-06-2022 23:33:01]22954: WAF :: fetched 167 new logs [04-06-2022 23:34:02]26296: WAF :: fetched 163 new logs [04-06-2022 23:35:02]29501: WAF :: fetched 160 new logs [04-06-2022 23:36:01]557: WAF :: fetched 182 new logs [04-06-2022 23:37:02]3938: WAF :: fetched 175 new logs [04-06-2022 23:38:01]7361: WAF :: fetched 176 new logs [04-06-2022 23:39:01]10651: WAF :: fetched 154 new logs [04-06-2022 23:40:02]14480: WAF :: fetched 175 new logs [04-06-2022 23:41:01]17880: WAF :: fetched 191 new logs [04-06-2022 23:41:01]17880: Checking for user cron vulnerabilities [04-06-2022 23:42:02]21230: WAF :: fetched 183 new logs [04-06-2022 23:43:01]24574: WAF :: fetched 207 new logs [04-06-2022 23:44:01]27873: Checking ditributed CMS bruteforce attacks [04-06-2022 23:44:01]27873: WAF :: fetched 176 new logs [04-06-2022 23:45:02]31235: WAF :: fetched 180 new logs [04-06-2022 23:46:01]2234: WAF :: fetched 172 new logs [04-06-2022 23:47:02]5578: WAF :: fetched 158 new logs [04-06-2022 23:48:01]9112: WAF :: fetched 186 new logs [04-06-2022 23:49:02]12541: WAF :: fetched 196 new logs [04-06-2022 23:50:02]16452: WAF :: fetched 146 new logs [04-06-2022 23:51:01]19846: WAF :: fetched 184 new logs [04-06-2022 23:52:02]23186: WAF :: fetched 193 new logs [04-06-2022 23:53:02]26536: WAF :: fetched 187 new logs [04-06-2022 23:54:01]29847: WAF :: fetched 199 new logs [04-06-2022 23:55:02]776: WAF :: fetched 207 new logs [04-06-2022 23:56:02]4236: WAF :: fetched 234 new logs [04-06-2022 23:57:01]7871: WAF :: fetched 169 new logs [04-06-2022 23:57:01]7870: httpd.conf changed. Refreshing watchlist. [04-06-2022 23:58:02]11146: WAF :: fetched 135 new logs [04-06-2022 23:59:01]14418: WAF :: fetched 131 new logs [05-06-2022 00:00:01]18014: WAF :: fetched 134 new logs [05-06-2022 00:01:02]21989: WAF :: fetched 140 new logs [05-06-2022 00:01:02]21988: httpd.conf changed. Refreshing watchlist. [05-06-2022 00:01:04]21989: Sending daily report for June 5, 2022 [05-06-2022 00:02:02]25393: WAF :: fetched 181 new logs [05-06-2022 00:03:02]28946: WAF :: fetched 171 new logs [05-06-2022 00:04:02]32274: WAF :: fetched 133 new logs [05-06-2022 00:05:02]3499: WAF :: fetched 181 new logs [05-06-2022 00:05:02]3502: httpd.conf changed. Refreshing watchlist. [05-06-2022 00:05:02]3499: Deleted 0 entries older than 6 MONTH from scanner_logs [05-06-2022 00:05:02]3499: Deleted 0 files from Quarantine [05-06-2022 00:06:01]7246: WAF :: fetched 265 new logs [05-06-2022 00:07:02]10751: WAF :: fetched 136 new logs [05-06-2022 00:08:01]14037: WAF :: fetched 66 new logs [05-06-2022 00:09:01]17514: WAF :: fetched 65 new logs [05-06-2022 00:10:02]21398: WAF :: fetched 65 new logs [05-06-2022 00:11:01]24733: WAF :: fetched 64 new logs [05-06-2022 00:12:01]28170: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654398721 [05-06-2022 00:12:01]28170: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 00:12:03]28170: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 00:12:03]28170: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-0012/20220605-001201-YpwfAegR1cCV74Bxht6srQAAAAQ [05-06-2022 00:12:03]28170: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-06-2022 00:12:04]28170: WAF :: fetched 74 new logs [05-06-2022 00:13:02]31559: WAF :: fetched 65 new logs [05-06-2022 00:16:02]9751: WAF :: fetched 15 new logs [05-06-2022 00:17:02]13351: WAF :: fetched 75 new logs [05-06-2022 00:18:01]16864: WAF :: fetched 112 new logs [05-06-2022 00:19:02]20375: WAF :: fetched 114 new logs [05-06-2022 00:20:02]23993: WAF :: fetched 40 new logs [05-06-2022 00:20:02]23977: httpd.conf changed. Refreshing watchlist. [05-06-2022 00:21:01]28056: WAF :: fetched 44 new logs [05-06-2022 00:22:02]31675: WAF :: fetched 42 new logs [05-06-2022 00:23:01]2674: WAF :: fetched 24 new logs [05-06-2022 00:24:01]6433: httpd.conf changed. Refreshing watchlist. [05-06-2022 00:25:02]9946: WAF :: fetched 1 new logs [05-06-2022 00:31:01]30489: WAF :: fetched 1 new logs [05-06-2022 00:33:01]5078: WAF :: fetched 1 new logs [05-06-2022 00:36:01]15495: WAF :: fetched 1 new logs [05-06-2022 00:36:01]15496: httpd.conf changed. Refreshing watchlist. [05-06-2022 00:37:02]19043: WAF :: fetched 2 new logs [05-06-2022 00:37:02]19045: httpd.conf changed. Refreshing watchlist. [05-06-2022 00:38:02]22568: WAF :: fetched 1 new logs [05-06-2022 00:41:02]747: Checking for user cron vulnerabilities [05-06-2022 00:42:02]4529: httpd.conf changed. Refreshing watchlist. [05-06-2022 00:44:01]11682: Checking ditributed CMS bruteforce attacks [05-06-2022 00:45:02]: Checking for software updates [05-06-2022 00:46:02]18493: httpd.conf changed. Refreshing watchlist. [05-06-2022 00:47:01]21844: WAF :: fetched 3 new logs [05-06-2022 00:48:02]25209: WAF :: fetched 5 new logs [05-06-2022 00:49:01]28504: WAF :: fetched 3 new logs [05-06-2022 00:50:01]31884: httpd.conf changed. Refreshing watchlist. [05-06-2022 00:52:01]7082: WAF :: fetched 6 new logs [05-06-2022 00:53:02]10412: WAF :: fetched 6 new logs [05-06-2022 00:58:02]27708: WAF :: fetched 1 new logs [05-06-2022 01:02:02]10757: WAF :: fetched 5 new logs [05-06-2022 01:03:01]14235: WAF :: fetched 2 new logs [05-06-2022 01:04:02]17752: WAF :: fetched 5 new logs [05-06-2022 01:05:01]21293: WAF :: fetched 1 new logs [05-06-2022 01:06:01]24858: WAF :: fetched 1 new logs [05-06-2022 01:12:01]14205: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654402321 [05-06-2022 01:12:01]14205: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 01:12:03]14205: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 01:12:04]14205: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-0112/20220605-011201-YpwtEcbCIcKg3SJycuJxbAAAAAw [05-06-2022 01:12:04]14205: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-06-2022 01:12:04]14205: WAF :: fetched 1 new logs [05-06-2022 01:20:02]9196: WAF :: fetched 1 new logs [05-06-2022 01:21:01]12608: WAF :: fetched 1 new logs [05-06-2022 01:23:01]19889: WAF :: fetched 1 new logs [05-06-2022 01:35:02]29465: WAF :: fetched 1 new logs [05-06-2022 01:38:01]7324: WAF :: fetched 1 new logs [05-06-2022 01:39:02]10933: WAF :: fetched 3 new logs [05-06-2022 01:40:01]14447: WAF :: fetched 3 new logs [05-06-2022 01:41:01]17980: WAF :: fetched 1 new logs [05-06-2022 01:41:01]17980: Checking for user cron vulnerabilities [05-06-2022 01:42:02]22155: WAF :: fetched 2 new logs [05-06-2022 01:43:01]25444: WAF :: fetched 1 new logs [05-06-2022 01:44:02]28929: Checking ditributed CMS bruteforce attacks [05-06-2022 01:44:02]28929: WAF :: fetched 1 new logs [05-06-2022 01:45:01]: Checking for definition updates [05-06-2022 01:45:05]32314: Updated virus defnition : malware.expert.ndb [05-06-2022 01:49:01]13655: WAF :: fetched 1 new logs [05-06-2022 01:51:02]20942: WAF :: fetched 1 new logs [05-06-2022 01:53:01]28277: WAF :: fetched 1 new logs [05-06-2022 02:08:01]16594: WAF :: fetched 1 new logs [05-06-2022 02:12:02]30971: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654405922 [05-06-2022 02:12:02]30971: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 02:12:04]30971: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 02:12:04]30971: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-0212/20220605-021202-Ypw7IlmGP9fpDRBEPjUm_AAAABU [05-06-2022 02:12:04]30971: WAF :: No suitable log file found. Using SQLite.. [05-06-2022 02:12:05]30971: WAF :: fetched 506 new logs [05-06-2022 02:21:02]30074: WAF :: fetched 1 new logs [05-06-2022 02:26:01]15472: WAF :: fetched 1 new logs [05-06-2022 02:28:01]22163: WAF :: fetched 2 new logs [05-06-2022 02:37:02]20579: WAF :: fetched 1 new logs [05-06-2022 02:40:02]30691: httpd.conf changed. Refreshing watchlist. [05-06-2022 02:41:01]1700: Checking for user cron vulnerabilities [05-06-2022 02:44:01]12486: Checking ditributed CMS bruteforce attacks [05-06-2022 02:44:01]12486: WAF :: fetched 1 new logs [05-06-2022 02:47:02]22930: WAF :: fetched 2 new logs [05-06-2022 02:48:02]26328: WAF :: fetched 1 new logs [05-06-2022 02:53:02]11492: Updated license status via CDN [05-06-2022 02:55:01]18185: WAF :: fetched 1 new logs [05-06-2022 03:00:29]2313: Found and updated 32 CMS installations [05-06-2022 03:00:41]2313: Wordpress installation #1 brgestor.com.br has errors [05-06-2022 03:01:01]2313: Wordpress installation #2 clinicasantanadehomeopatia.com.br has errors [05-06-2022 03:01:25]2313: Wordpress installation #4 labvida.net has errors [05-06-2022 03:01:54]2313: Wordpress installation #9 oabilheus.org.br has errors [05-06-2022 03:03:01]13762: WAF :: fetched 2 new logs [05-06-2022 03:03:23]2313: Wordpress installation #21 easy2speak.com.br has errors [05-06-2022 03:03:47]2313: Wordpress installation #23 blueseasurf.com.br has errors [05-06-2022 03:03:59]13799: Wordpress installation #21 easy2speak.com.br has errors [05-06-2022 03:04:02]17367: WAF :: fetched 2 new logs [05-06-2022 03:04:06]2313: Wordpress installation #24 janehildabadaroart.com.br has errors [05-06-2022 03:04:23]2313: Wordpress installation #25 ltcertificadora.com.br has errors [05-06-2022 03:04:35]13799: Wordpress installation #26 bibokinha.idcartao.com has errors [05-06-2022 03:04:37]2313: Wordpress installation #26 bibokinha.idcartao.com has errors [05-06-2022 03:04:49]13799: Wordpress installation #27 site.foxcard.com.br has errors [05-06-2022 03:04:50]2313: Wordpress installation #27 site.foxcard.com.br has errors [05-06-2022 03:05:32]13799: Wordpress installation #33 bibokinha.com.br has errors [05-06-2022 03:05:33]2313: Wordpress installation #33 bibokinha.com.br has errors [05-06-2022 03:05:51]2313: Wordpress installation #34 fazendayrere.com.br has errors [05-06-2022 03:05:51]13799: Wordpress installation #34 fazendayrere.com.br has errors [05-06-2022 03:06:07]2313: Wordpress installation #35 luanbrasil.com.br has errors [05-06-2022 03:06:07]13799: Wordpress installation #35 luanbrasil.com.br has errors [05-06-2022 03:06:23]13799: Wordpress installation #37 site.zipcard.app has errors [05-06-2022 03:06:23]2313: Wordpress installation #37 site.zipcard.app has errors [05-06-2022 03:06:39]13799: Wordpress installation #38 onedicoes.com.br has errors [05-06-2022 03:06:39]2313: Wordpress installation #38 onedicoes.com.br has errors [05-06-2022 03:07:00]2313: Wordpress installation #40 guardian-ba.com.br has errors [05-06-2022 03:07:01]13799: Wordpress installation #40 guardian-ba.com.br has errors [05-06-2022 03:07:07]2313: Sending CMS version vulnerability report emails to cpanel users [05-06-2022 03:07:07]13799: Sending CMS version vulnerability report emails to cpanel users [05-06-2022 03:07:10]13799: Checking wordpress installations for suspicious directories [05-06-2022 03:07:10]2313: Checking wordpress installations for suspicious directories [05-06-2022 03:11:01]9317: WAF :: fetched 1 new logs [05-06-2022 03:12:01]12610: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654409521 [05-06-2022 03:12:01]12610: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 03:12:03]12610: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 03:12:04]12610: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-0312/20220605-031201-YpxJMf9kfKg0EzCDpV_E_AAAAAE [05-06-2022 03:12:04]12610: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-06-2022 03:12:04]12610: WAF :: fetched 1 new logs [05-06-2022 03:19:01]4164: WAF :: fetched 1 new logs [05-06-2022 03:28:02]3158: WAF :: fetched 1 new logs [05-06-2022 03:29:02]7316: WAF :: fetched 2 new logs [05-06-2022 03:32:01]18054: WAF :: fetched 1 new logs [05-06-2022 03:39:01]9235: WAF :: fetched 1 new logs [05-06-2022 03:41:01]11828: Checking for user cron vulnerabilities [05-06-2022 03:44:01]31450: Checking ditributed CMS bruteforce attacks [05-06-2022 03:47:02]9605: WAF :: fetched 3 new logs [05-06-2022 03:58:01]16227: WAF :: fetched 1 new logs [05-06-2022 04:12:02]376: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654413122 [05-06-2022 04:12:02]376: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 04:12:04]376: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 04:12:04]376: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-0412/20220605-041202-YpxXQtAJwtc4z4lZhHlHsQAAAAM [05-06-2022 04:12:04]376: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-06-2022 04:12:04]376: WAF :: fetched 1 new logs [05-06-2022 04:13:01]3853: WAF :: fetched 1 new logs [05-06-2022 04:16:01]14637: WAF :: fetched 1 new logs [05-06-2022 04:41:02]5433: Checking for user cron vulnerabilities [05-06-2022 04:44:01]15734: Checking ditributed CMS bruteforce attacks [05-06-2022 05:01:42]10100: Starting weekly scan on files updated within a week [05-06-2022 05:12:01]15548: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654416721 [05-06-2022 05:12:01]15548: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 05:12:03]15548: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 05:12:04]15548: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-0512/20220605-051201-YpxlUTlHuQj9-FBjJi2wlQAAAAQ [05-06-2022 05:12:04]15548: WAF :: No suitable log file found. Using SQLite.. [05-06-2022 05:12:04]15548: WAF :: fetched 8 new logs [05-06-2022 05:13:02]18959: WAF :: fetched 1 new logs [05-06-2022 05:26:02]31620: WAF :: fetched 1 new logs [05-06-2022 05:32:02]19627: WAF :: fetched 1 new logs [05-06-2022 05:41:02]18578: WAF :: fetched 1 new logs [05-06-2022 05:41:02]18578: Checking for user cron vulnerabilities [05-06-2022 05:42:01]21915: WAF :: fetched 1 new logs [05-06-2022 05:44:01]28466: Checking ditributed CMS bruteforce attacks [05-06-2022 05:45:02]32670: WAF :: fetched 1 new logs [05-06-2022 05:47:02]7391: WAF :: fetched 1 new logs [05-06-2022 05:48:02]10880: WAF :: fetched 1 new logs [05-06-2022 05:54:02]31386: WAF :: fetched 1 new logs [05-06-2022 06:03:01]30119: WAF :: fetched 1 new logs [05-06-2022 06:12:01]28978: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654420321 [05-06-2022 06:12:01]28978: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 06:12:03]28978: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 06:12:04]28978: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-0612/20220605-061201-YpxzYfds-C1UGP2xz7jMSwAAAAI [05-06-2022 06:12:04]28978: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-06-2022 06:12:04]28978: WAF :: fetched 1 new logs [05-06-2022 06:14:01]3574: WAF :: fetched 1 new logs [05-06-2022 06:15:01]6774: WAF :: fetched 1 new logs [05-06-2022 06:25:02]8148: WAF :: fetched 2 new logs [05-06-2022 06:33:02]3663: WAF :: fetched 2 new logs [05-06-2022 06:38:02]21198: WAF :: fetched 1 new logs [05-06-2022 06:41:02]31379: Checking for user cron vulnerabilities [05-06-2022 06:44:02]9346: Checking ditributed CMS bruteforce attacks [05-06-2022 06:48:01]23323: WAF :: fetched 2 new logs [05-06-2022 06:54:01]11477: WAF :: fetched 1 new logs [05-06-2022 07:10:02]2454: WAF :: fetched 1 new logs [05-06-2022 07:12:02]9104: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654423922 [05-06-2022 07:12:02]9104: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 07:12:04]9104: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 07:12:04]9104: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-0712/20220605-071202-YpyBcgSJ6LVVzVpXtBxk8gAAAAQ [05-06-2022 07:12:04]9104: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-06-2022 07:12:04]9104: WAF :: fetched 1 new logs [05-06-2022 07:13:01]12482: WAF :: fetched 1 new logs [05-06-2022 07:14:01]15876: WAF :: fetched 2 new logs [05-06-2022 07:15:02]19198: WAF :: fetched 5 new logs [05-06-2022 07:16:01]22567: WAF :: fetched 2 new logs [05-06-2022 07:17:02]26482: WAF :: fetched 2 new logs [05-06-2022 07:18:01]29979: WAF :: fetched 5 new logs [05-06-2022 07:20:02]4476: WAF :: fetched 1 new logs [05-06-2022 07:24:01]18324: WAF :: fetched 3 new logs [05-06-2022 07:25:02]21676: WAF :: fetched 1 new logs [05-06-2022 07:30:02]6950: WAF :: fetched 1 new logs [05-06-2022 07:31:01]10351: WAF :: fetched 1 new logs [05-06-2022 07:39:02]5857: WAF :: fetched 1 new logs [05-06-2022 07:41:01]12723: Checking for user cron vulnerabilities [05-06-2022 07:44:01]22909: Checking ditributed CMS bruteforce attacks [05-06-2022 07:45:01]: Checking for definition updates [05-06-2022 07:45:02]26209: WAF :: fetched 9 new logs [05-06-2022 07:47:02]1144: WAF :: fetched 3 new logs [05-06-2022 07:48:01]4628: WAF :: fetched 5 new logs [05-06-2022 07:54:02]24976: WAF :: fetched 2 new logs [05-06-2022 07:55:01]28302: WAF :: fetched 2 new logs [05-06-2022 08:07:01]4683: WAF :: fetched 1 new logs [05-06-2022 08:09:02]12115: WAF :: fetched 1 new logs [05-06-2022 08:11:01]18948: WAF :: fetched 2 new logs [05-06-2022 08:12:02]22333: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654427522 [05-06-2022 08:12:02]22333: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 08:12:04]22333: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 08:12:04]22333: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-0812/20220605-081202-YpyPglPiwKnbBjrqoNClTgAAAAE [05-06-2022 08:12:04]22333: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-06-2022 08:12:04]22333: WAF :: fetched 1 new logs [05-06-2022 08:13:01]25732: WAF :: fetched 1 new logs [05-06-2022 08:18:02]10892: WAF :: fetched 1 new logs [05-06-2022 08:19:01]14219: WAF :: fetched 1 new logs [05-06-2022 08:20:02]17586: WAF :: fetched 215 new logs [05-06-2022 08:21:01]20950: WAF :: fetched 39 new logs [05-06-2022 08:33:02]29911: WAF :: fetched 1 new logs [05-06-2022 08:41:02]25394: WAF :: fetched 1 new logs [05-06-2022 08:41:02]25394: Checking for user cron vulnerabilities [05-06-2022 08:44:01]3426: Checking ditributed CMS bruteforce attacks [05-06-2022 08:59:02]23036: WAF :: fetched 1 new logs [05-06-2022 09:07:01]18077: WAF :: fetched 1 new logs [05-06-2022 09:10:01]28722: WAF :: fetched 1 new logs [05-06-2022 09:12:02]3201: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654431122 [05-06-2022 09:12:02]3201: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 09:12:04]3201: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 09:12:04]3201: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-0912/20220605-091202-Ypydkph7_-46AkVEN07V9AAAAAQ [05-06-2022 09:12:04]3201: WAF :: No suitable log file found. Using SQLite.. [05-06-2022 09:12:04]3201: WAF :: fetched 251 new logs [05-06-2022 09:15:02]13560: WAF :: fetched 2 new logs [05-06-2022 09:16:01]16955: WAF :: fetched 1 new logs [05-06-2022 09:24:01]12879: WAF :: fetched 1 new logs [05-06-2022 09:26:01]19391: WAF :: fetched 1 new logs [05-06-2022 09:30:01]1227: WAF :: fetched 1 new logs [05-06-2022 09:34:01]15043: WAF :: fetched 1 new logs [05-06-2022 09:36:02]21710: WAF :: fetched 1 new logs [05-06-2022 09:37:01]25042: WAF :: fetched 2 new logs [05-06-2022 09:38:02]28352: WAF :: fetched 3 new logs [05-06-2022 09:39:01]32255: WAF :: fetched 3 new logs [05-06-2022 09:40:01]3255: WAF :: fetched 1 new logs [05-06-2022 09:41:02]6893: Checking for user cron vulnerabilities [05-06-2022 09:44:01]17067: Checking ditributed CMS bruteforce attacks [05-06-2022 09:50:01]5131: WAF :: fetched 1 new logs [05-06-2022 10:05:01]24746: WAF :: fetched 1 new logs [05-06-2022 10:07:01]31722: WAF :: fetched 1 new logs [05-06-2022 10:12:02]16975: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654434722 [05-06-2022 10:12:02]16975: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 10:12:04]16975: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 10:12:04]16975: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-1012/20220605-101202-Ypyroq37Ov1vKHGOaxn0hAAAAAs [05-06-2022 10:12:04]16975: WAF :: No suitable log file found. Using SQLite.. [05-06-2022 10:12:04]16975: WAF :: fetched 2 new logs [05-06-2022 10:22:01]19321: WAF :: fetched 1 new logs [05-06-2022 10:24:01]26266: WAF :: fetched 5 new logs [05-06-2022 10:25:02]29631: WAF :: fetched 1 new logs [05-06-2022 10:26:02]594: WAF :: fetched 2 new logs [05-06-2022 10:27:01]4032: WAF :: fetched 2 new logs [05-06-2022 10:28:02]7590: WAF :: fetched 2 new logs [05-06-2022 10:29:01]11037: WAF :: fetched 3 new logs [05-06-2022 10:34:01]28341: WAF :: fetched 1 new logs [05-06-2022 10:35:01]31701: WAF :: fetched 2 new logs [05-06-2022 10:36:02]2877: WAF :: fetched 3 new logs [05-06-2022 10:38:02]10100: WAF :: fetched 1 new logs [05-06-2022 10:39:02]13493: WAF :: fetched 1 new logs [05-06-2022 10:41:02]20897: Checking for user cron vulnerabilities [05-06-2022 10:44:01]30740: Checking ditributed CMS bruteforce attacks [05-06-2022 10:44:02]30740: WAF :: fetched 18 new logs [05-06-2022 10:45:01]2020: WAF :: fetched 86 new logs [05-06-2022 10:46:02]5708: WAF :: fetched 48 new logs [05-06-2022 10:50:02]19533: WAF :: fetched 2 new logs [05-06-2022 10:51:02]22909: WAF :: fetched 4 new logs [05-06-2022 10:52:01]26827: WAF :: fetched 2 new logs [05-06-2022 10:54:02]1163: WAF :: fetched 1 new logs [05-06-2022 10:55:02]4635: WAF :: fetched 3 new logs [05-06-2022 10:56:01]8043: WAF :: fetched 2 new logs [05-06-2022 10:57:02]11433: WAF :: fetched 1 new logs [05-06-2022 10:58:01]14680: WAF :: fetched 3 new logs [05-06-2022 11:01:01]25097: WAF :: fetched 1 new logs [05-06-2022 11:02:01]28928: WAF :: fetched 1 new logs [05-06-2022 11:03:02]32410: WAF :: fetched 1 new logs [05-06-2022 11:04:01]3435: WAF :: fetched 2 new logs [05-06-2022 11:05:02]7039: WAF :: fetched 1 new logs [05-06-2022 11:06:01]10436: WAF :: fetched 3 new logs [05-06-2022 11:08:03]13965: Performed RBL check for 23.111.136.34. [05-06-2022 11:11:02]27498: WAF :: fetched 1 new logs [05-06-2022 11:12:02]31441: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654438322 [05-06-2022 11:12:02]31441: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 11:12:04]31441: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 11:12:04]31441: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-1112/20220605-111202-Ypy5svlWoOMxXqQYUmyUbQAAABU [05-06-2022 11:12:04]31441: WAF :: No suitable log file found. Using SQLite.. [05-06-2022 11:12:04]31441: WAF :: fetched 2 new logs [05-06-2022 11:20:02]26332: WAF :: fetched 4 new logs [05-06-2022 11:31:01]32076: WAF :: fetched 2 new logs [05-06-2022 11:32:02]3163: WAF :: fetched 2 new logs [05-06-2022 11:33:02]7168: WAF :: fetched 1 new logs [05-06-2022 11:34:02]10596: WAF :: fetched 1 new logs [05-06-2022 11:41:01]2114: WAF :: fetched 2 new logs [05-06-2022 11:41:01]2114: Checking for user cron vulnerabilities [05-06-2022 11:42:02]5574: WAF :: fetched 1 new logs [05-06-2022 11:43:01]9539: WAF :: fetched 3 new logs [05-06-2022 11:44:01]12596: Checking ditributed CMS bruteforce attacks [05-06-2022 11:45:02]15946: WAF :: fetched 1 new logs [05-06-2022 11:46:01]19251: WAF :: fetched 3 new logs [05-06-2022 11:47:01]22548: WAF :: fetched 3 new logs [05-06-2022 11:48:02]25905: WAF :: fetched 2 new logs [05-06-2022 11:49:01]29379: WAF :: fetched 1 new logs [05-06-2022 11:50:02]32670: WAF :: fetched 2 new logs [05-06-2022 11:56:02]21265: WAF :: fetched 4 new logs [05-06-2022 11:57:01]24658: WAF :: fetched 1 new logs [05-06-2022 11:58:02]28180: WAF :: fetched 2 new logs [05-06-2022 11:59:01]31683: WAF :: fetched 1 new logs [05-06-2022 12:00:02]2444: WAF :: fetched 4 new logs [05-06-2022 12:04:01]17265: WAF :: fetched 1 new logs [05-06-2022 12:07:01]27961: WAF :: fetched 3 new logs [05-06-2022 12:12:01]13118: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654441921 [05-06-2022 12:12:01]13118: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 12:12:04]13118: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-1212/20220605-121201-YpzHwd5am41cS-S-fIz7hgAAAAk [05-06-2022 12:12:04]13118: WAF :: No suitable log file found. Using SQLite.. [05-06-2022 12:12:04]13118: WAF :: fetched 1 new logs [05-06-2022 12:15:02]24074: WAF :: fetched 1 new logs [05-06-2022 12:16:01]27544: WAF :: fetched 1 new logs [05-06-2022 12:18:02]1820: WAF :: fetched 2 new logs [05-06-2022 12:19:01]5317: WAF :: fetched 1 new logs [05-06-2022 12:22:01]15719: WAF :: fetched 1 new logs [05-06-2022 12:23:02]19334: WAF :: fetched 2 new logs [05-06-2022 12:24:02]22743: WAF :: fetched 1 new logs [05-06-2022 12:26:02]30602: WAF :: fetched 2 new logs [05-06-2022 12:28:01]5186: WAF :: fetched 3 new logs [05-06-2022 12:31:02]15477: WAF :: fetched 1 new logs [05-06-2022 12:33:01]22335: WAF :: fetched 2 new logs [05-06-2022 12:36:02]866: WAF :: fetched 2 new logs [05-06-2022 12:39:01]10962: WAF :: fetched 2 new logs [05-06-2022 12:40:01]14408: WAF :: fetched 1 new logs [05-06-2022 12:41:02]17846: WAF :: fetched 1 new logs [05-06-2022 12:41:02]17846: Checking for user cron vulnerabilities [05-06-2022 12:43:01]24624: WAF :: fetched 1 new logs [05-06-2022 12:44:01]27932: Checking ditributed CMS bruteforce attacks [05-06-2022 12:44:02]27932: WAF :: fetched 2 new logs [05-06-2022 12:45:01]: Checking for software updates [05-06-2022 12:47:01]6448: WAF :: fetched 1 new logs [05-06-2022 12:49:02]13124: WAF :: fetched 1 new logs [05-06-2022 12:54:02]30394: WAF :: fetched 1 new logs [05-06-2022 12:55:01]1935: WAF :: fetched 1 new logs [05-06-2022 12:56:01]5584: WAF :: fetched 1 new logs [05-06-2022 12:59:02]15916: WAF :: fetched 2 new logs [05-06-2022 13:01:01]22822: WAF :: fetched 1 new logs [05-06-2022 13:02:02]26441: WAF :: fetched 1 new logs [05-06-2022 13:05:02]4467: WAF :: fetched 1 new logs [05-06-2022 13:12:01]29170: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654445521 [05-06-2022 13:12:01]29170: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 13:12:03]29170: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 13:12:04]29170: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-1312/20220605-131201-YpzV0XxfSdaGRG4wsiZG4QAAAAs [05-06-2022 13:12:04]29170: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-06-2022 13:12:04]29170: WAF :: fetched 1 new logs [05-06-2022 13:13:01]32651: WAF :: fetched 1 new logs [05-06-2022 13:16:01]11304: WAF :: fetched 3 new logs [05-06-2022 13:19:02]21507: WAF :: fetched 4 new logs [05-06-2022 13:20:01]24997: WAF :: fetched 2 new logs [05-06-2022 13:21:02]28369: WAF :: fetched 1 new logs [05-06-2022 13:23:01]2860: WAF :: fetched 2 new logs [05-06-2022 13:34:01]8509: WAF :: fetched 1 new logs [05-06-2022 13:35:02]12126: WAF :: fetched 1 new logs [05-06-2022 13:37:02]19470: WAF :: fetched 2 new logs [05-06-2022 13:39:01]26234: WAF :: fetched 1 new logs [05-06-2022 13:41:01]649: Checking for user cron vulnerabilities [05-06-2022 13:43:02]7653: WAF :: fetched 2 new logs [05-06-2022 13:44:01]11078: Checking ditributed CMS bruteforce attacks [05-06-2022 13:44:01]11078: WAF :: fetched 1 new logs [05-06-2022 13:45:01]: Checking for definition updates [05-06-2022 13:45:01]14572: WAF :: fetched 1 new logs [05-06-2022 13:46:01]18045: WAF :: fetched 3 new logs [05-06-2022 13:47:01]21832: WAF :: fetched 1 new logs [05-06-2022 13:48:02]25240: WAF :: fetched 1 new logs [05-06-2022 13:54:02]13472: WAF :: fetched 1 new logs [05-06-2022 13:55:01]16870: WAF :: fetched 3 new logs [05-06-2022 13:56:02]20270: WAF :: fetched 1 new logs [05-06-2022 13:59:02]31114: WAF :: fetched 1 new logs [05-06-2022 14:00:01]1818: WAF :: fetched 2 new logs [05-06-2022 14:02:02]9307: WAF :: fetched 1 new logs [05-06-2022 14:07:01]26737: WAF :: fetched 1 new logs [05-06-2022 14:11:02]8204: WAF :: fetched 3 new logs [05-06-2022 14:12:02]11523: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654449122 [05-06-2022 14:12:02]11523: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 14:12:04]11523: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 14:12:04]11523: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-1412/20220605-141202-Ypzj4lC6FL0ZrYl0P06twQAAAAM [05-06-2022 14:12:04]11523: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-06-2022 14:12:04]11523: WAF :: fetched 1 new logs [05-06-2022 14:13:01]14828: WAF :: fetched 1 new logs [05-06-2022 14:16:02]25060: WAF :: fetched 2 new logs [05-06-2022 14:29:01]5263: WAF :: fetched 2 new logs [05-06-2022 14:31:02]12356: WAF :: fetched 1 new logs [05-06-2022 14:33:01]19107: WAF :: fetched 3 new logs [05-06-2022 14:36:01]29346: WAF :: fetched 1 new logs [05-06-2022 14:41:01]14643: WAF :: fetched 1 new logs [05-06-2022 14:41:01]14643: Checking for user cron vulnerabilities [05-06-2022 14:42:01]18044: WAF :: fetched 3 new logs [05-06-2022 14:44:01]24859: Checking ditributed CMS bruteforce attacks [05-06-2022 14:44:02]24859: WAF :: fetched 1 new logs [05-06-2022 14:46:02]31761: WAF :: fetched 2 new logs [05-06-2022 14:47:02]2698: WAF :: fetched 4 new logs [05-06-2022 14:53:02]23799: WAF :: fetched 1 new logs [05-06-2022 14:53:03]23801: Updated license status via CDN [05-06-2022 14:54:01]27087: WAF :: fetched 4 new logs [05-06-2022 14:55:01]30603: WAF :: fetched 1 new logs [05-06-2022 14:57:01]5190: WAF :: fetched 2 new logs [05-06-2022 14:58:01]9249: WAF :: fetched 3 new logs [05-06-2022 15:00:01]15586: WAF :: fetched 1 new logs [05-06-2022 15:01:01]19395: Reseting cPGuard inotify settings [05-06-2022 15:08:02]11357: WAF :: fetched 1 new logs [05-06-2022 15:12:02]25086: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654452722 [05-06-2022 15:12:02]25086: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 15:12:04]25086: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 15:12:04]25086: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-1512/20220605-151202-Ypzx8kvLHi8QjIHEtZn86gAAAAk [05-06-2022 15:12:04]25086: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-06-2022 15:12:04]25086: WAF :: fetched 1 new logs [05-06-2022 15:13:01]28603: WAF :: fetched 1 new logs [05-06-2022 15:15:01]3140: WAF :: fetched 2 new logs [05-06-2022 15:22:02]27319: WAF :: fetched 2 new logs [05-06-2022 15:23:01]30654: WAF :: fetched 3 new logs [05-06-2022 15:24:01]1707: WAF :: fetched 2 new logs [05-06-2022 15:27:02]12119: WAF :: fetched 1 new logs [05-06-2022 15:29:01]19196: WAF :: fetched 1 new logs [05-06-2022 15:33:01]32709: WAF :: fetched 2 new logs [05-06-2022 15:34:02]3721: WAF :: fetched 2 new logs [05-06-2022 15:35:01]7326: WAF :: fetched 1 new logs [05-06-2022 15:38:01]17314: WAF :: fetched 2 new logs [05-06-2022 15:41:02]27985: WAF :: fetched 1 new logs [05-06-2022 15:41:02]27985: Checking for user cron vulnerabilities [05-06-2022 15:44:02]5319: Checking ditributed CMS bruteforce attacks [05-06-2022 15:44:02]5319: WAF :: fetched 1 new logs [05-06-2022 15:49:02]22713: WAF :: fetched 2 new logs [05-06-2022 15:51:01]29549: WAF :: fetched 1 new logs [05-06-2022 15:53:01]3959: WAF :: fetched 3 new logs [05-06-2022 16:01:01]31838: WAF :: fetched 3 new logs [05-06-2022 16:05:02]13374: WAF :: fetched 1 new logs [05-06-2022 16:12:01]5121: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654456321 [05-06-2022 16:12:01]5121: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 16:12:03]5121: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 16:12:03]5121: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-1612/20220605-161201-Yp0AAUE3ujySq8IEUoWHFwAAAAM [05-06-2022 16:12:03]5121: WAF :: No suitable log file found. Using SQLite.. [05-06-2022 16:12:04]5121: WAF :: fetched 93 new logs [05-06-2022 16:13:02]8584: WAF :: fetched 5 new logs [05-06-2022 16:21:02]4016: WAF :: fetched 1 new logs [05-06-2022 16:24:02]14209: WAF :: fetched 43 new logs [05-06-2022 16:25:01]17580: WAF :: fetched 44 new logs [05-06-2022 16:26:01]20977: WAF :: fetched 24 new logs [05-06-2022 16:27:01]24301: WAF :: fetched 48 new logs [05-06-2022 16:28:01]27595: WAF :: fetched 15 new logs [05-06-2022 16:29:02]31503: WAF :: fetched 2 new logs [05-06-2022 16:32:02]9432: WAF :: fetched 1 new logs [05-06-2022 16:34:02]16163: WAF :: fetched 7 new logs [05-06-2022 16:35:01]19533: WAF :: fetched 13 new logs [05-06-2022 16:36:01]22949: WAF :: fetched 71 new logs [05-06-2022 16:37:02]26302: WAF :: fetched 75 new logs [05-06-2022 16:38:01]29737: WAF :: fetched 53 new logs [05-06-2022 16:39:01]754: WAF :: fetched 64 new logs [05-06-2022 16:40:02]4860: WAF :: fetched 62 new logs [05-06-2022 16:41:02]8458: WAF :: fetched 63 new logs [05-06-2022 16:41:02]8458: Checking for user cron vulnerabilities [05-06-2022 16:42:01]11763: WAF :: fetched 59 new logs [05-06-2022 16:43:01]15255: WAF :: fetched 66 new logs [05-06-2022 16:44:01]18729: Checking ditributed CMS bruteforce attacks [05-06-2022 16:44:02]18729: WAF :: fetched 8 new logs [05-06-2022 16:45:01]22192: WAF :: fetched 1 new logs [05-06-2022 16:46:02]25872: WAF :: fetched 1 new logs [05-06-2022 16:52:01]14180: WAF :: fetched 2 new logs [05-06-2022 16:53:01]17612: WAF :: fetched 1 new logs [05-06-2022 16:54:01]20992: WAF :: fetched 1 new logs [05-06-2022 16:59:01]5347: WAF :: fetched 1 new logs [05-06-2022 17:04:02]23139: WAF :: fetched 2 new logs [05-06-2022 17:05:02]26483: WAF :: fetched 3 new logs [05-06-2022 17:09:01]7710: WAF :: fetched 1 new logs [05-06-2022 17:10:02]11485: WAF :: fetched 1 new logs [05-06-2022 17:12:02]18258: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654459922 [05-06-2022 17:12:02]18258: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 17:12:04]18258: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 17:12:04]18258: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-1712/20220605-171202-Yp0OEkINwQBUy7--yrmBPQAAABI [05-06-2022 17:12:04]18258: WAF :: No suitable log file found. Using SQLite.. [05-06-2022 17:12:04]18258: WAF :: fetched 3 new logs [05-06-2022 17:13:02]21507: WAF :: fetched 4 new logs [05-06-2022 17:14:01]24773: WAF :: fetched 3 new logs [05-06-2022 17:17:01]2659: WAF :: fetched 1 new logs [05-06-2022 17:18:02]6037: WAF :: fetched 3 new logs [05-06-2022 17:19:01]9420: WAF :: fetched 3 new logs [05-06-2022 17:20:02]13304: WAF :: fetched 1 new logs [05-06-2022 17:22:02]20169: WAF :: fetched 2 new logs [05-06-2022 17:23:01]23420: WAF :: fetched 2 new logs [05-06-2022 17:24:01]26852: WAF :: fetched 2 new logs [05-06-2022 17:25:02]30176: WAF :: fetched 2 new logs [05-06-2022 17:26:01]1084: WAF :: fetched 1 new logs [05-06-2022 17:27:02]4613: WAF :: fetched 1 new logs [05-06-2022 17:28:01]8075: WAF :: fetched 2 new logs [05-06-2022 17:29:01]11353: WAF :: fetched 4 new logs [05-06-2022 17:30:02]15127: WAF :: fetched 1 new logs [05-06-2022 17:32:02]21825: WAF :: fetched 1 new logs [05-06-2022 17:41:01]19826: Checking for user cron vulnerabilities [05-06-2022 17:43:01]26593: WAF :: fetched 1 new logs [05-06-2022 17:44:01]29827: Checking ditributed CMS bruteforce attacks [05-06-2022 17:45:02]721: WAF :: fetched 2 new logs [05-06-2022 17:55:02]1873: WAF :: fetched 2 new logs [05-06-2022 17:56:01]5275: WAF :: fetched 1 new logs [05-06-2022 17:57:01]8657: WAF :: fetched 2 new logs [05-06-2022 17:58:02]11962: WAF :: fetched 3 new logs [05-06-2022 18:00:02]18288: WAF :: fetched 1 new logs [05-06-2022 18:06:01]7111: WAF :: fetched 2 new logs [05-06-2022 18:07:02]10389: WAF :: fetched 1 new logs [05-06-2022 18:09:01]16946: WAF :: fetched 2 new logs [05-06-2022 18:12:01]27337: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654463521 [05-06-2022 18:12:01]27337: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 18:12:03]27337: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 18:12:03]27337: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-1812/20220605-181201-Yp0cIUhjFq9F03thKu4OxgAAAAY [05-06-2022 18:12:03]27337: WAF :: No suitable log file found. Using SQLite.. [05-06-2022 18:12:03]27337: WAF :: fetched 3 new logs [05-06-2022 18:13:02]30700: WAF :: fetched 1 new logs [05-06-2022 18:14:01]1602: WAF :: fetched 2 new logs [05-06-2022 18:16:01]8646: WAF :: fetched 1 new logs [05-06-2022 18:17:02]11912: WAF :: fetched 1 new logs [05-06-2022 18:20:02]21784: WAF :: fetched 1 new logs [05-06-2022 18:39:01]21408: WAF :: fetched 2 new logs [05-06-2022 18:40:01]24718: WAF :: fetched 2 new logs [05-06-2022 18:41:02]28489: WAF :: fetched 2 new logs [05-06-2022 18:41:02]28489: Checking for user cron vulnerabilities [05-06-2022 18:44:02]6651: Checking ditributed CMS bruteforce attacks [05-06-2022 18:48:01]19900: WAF :: fetched 1 new logs [05-06-2022 18:51:01]29924: WAF :: fetched 5 new logs [05-06-2022 18:52:02]1322: WAF :: fetched 1 new logs [05-06-2022 19:01:01]31486: WAF :: fetched 1 new logs [05-06-2022 19:02:01]2977: WAF :: fetched 1 new logs [05-06-2022 19:04:01]9794: WAF :: fetched 1 new logs [05-06-2022 19:12:02]4288: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654467122 [05-06-2022 19:12:02]4288: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 19:12:04]4288: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 19:12:04]4288: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-1912/20220605-191202-Yp0qMk0cBzQs4sP1O2lGhQAAABQ [05-06-2022 19:12:04]4288: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-06-2022 19:12:04]4288: WAF :: fetched 1 new logs [05-06-2022 19:13:01]7860: WAF :: fetched 1 new logs [05-06-2022 19:15:02]14569: WAF :: fetched 3 new logs [05-06-2022 19:16:01]17969: WAF :: fetched 1 new logs [05-06-2022 19:17:01]21244: WAF :: fetched 1 new logs [05-06-2022 19:18:01]24490: WAF :: fetched 1 new logs [05-06-2022 19:20:01]31099: WAF :: fetched 1 new logs [05-06-2022 19:21:02]2162: WAF :: fetched 3 new logs [05-06-2022 19:22:01]5490: WAF :: fetched 1 new logs [05-06-2022 19:23:01]9436: WAF :: fetched 1 new logs [05-06-2022 19:24:02]12826: WAF :: fetched 3 new logs [05-06-2022 19:25:01]16086: WAF :: fetched 4 new logs [05-06-2022 19:28:01]25986: WAF :: fetched 2 new logs [05-06-2022 19:29:02]29301: WAF :: fetched 2 new logs [05-06-2022 19:31:01]3314: WAF :: fetched 1 new logs [05-06-2022 19:32:02]6782: WAF :: fetched 1 new logs [05-06-2022 19:33:01]10540: WAF :: fetched 2 new logs [05-06-2022 19:34:02]13830: WAF :: fetched 3 new logs [05-06-2022 19:35:01]16984: WAF :: fetched 4 new logs [05-06-2022 19:36:02]20513: WAF :: fetched 3 new logs [05-06-2022 19:38:02]26997: WAF :: fetched 4 new logs [05-06-2022 19:39:02]30285: WAF :: fetched 3 new logs [05-06-2022 19:40:01]1148: WAF :: fetched 5 new logs [05-06-2022 19:41:02]4688: WAF :: fetched 2 new logs [05-06-2022 19:41:02]4688: Checking for user cron vulnerabilities [05-06-2022 19:42:01]8053: WAF :: fetched 1 new logs [05-06-2022 19:43:01]11817: WAF :: fetched 2 new logs [05-06-2022 19:44:01]15066: Checking ditributed CMS bruteforce attacks [05-06-2022 19:45:01]: Checking for definition updates [05-06-2022 19:46:01]21745: WAF :: fetched 3 new logs [05-06-2022 19:47:02]25017: WAF :: fetched 1 new logs [05-06-2022 19:54:01]16292: WAF :: fetched 14 new logs [05-06-2022 19:55:02]19632: WAF :: fetched 29 new logs [05-06-2022 19:56:01]23004: WAF :: fetched 34 new logs [05-06-2022 19:57:01]26305: WAF :: fetched 30 new logs [05-06-2022 19:58:02]29663: WAF :: fetched 31 new logs [05-06-2022 19:59:01]412: WAF :: fetched 27 new logs [05-06-2022 20:00:02]3451: WAF :: fetched 26 new logs [05-06-2022 20:01:02]7408: WAF :: fetched 26 new logs [05-06-2022 20:02:01]10669: WAF :: fetched 20 new logs [05-06-2022 20:07:01]27649: WAF :: fetched 1 new logs [05-06-2022 20:10:01]5179: WAF :: fetched 1 new logs [05-06-2022 20:11:02]8790: WAF :: fetched 1 new logs [05-06-2022 20:12:02]12133: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654470722 [05-06-2022 20:12:02]12133: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 20:12:04]12133: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 20:12:04]12133: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-2012/20220605-201202-Yp04Qiv2yvZtaxuVpP_vKAAAAA4 [05-06-2022 20:12:04]12133: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-06-2022 20:12:04]12133: WAF :: fetched 2 new logs [05-06-2022 20:13:01]16139: WAF :: fetched 1 new logs [05-06-2022 20:14:02]19553: WAF :: fetched 2 new logs [05-06-2022 20:15:01]22762: WAF :: fetched 5 new logs [05-06-2022 20:18:01]32573: WAF :: fetched 2 new logs [05-06-2022 20:20:02]6944: WAF :: fetched 2 new logs [05-06-2022 20:21:01]10318: WAF :: fetched 3 new logs [05-06-2022 20:22:02]13682: WAF :: fetched 1 new logs [05-06-2022 20:37:02]31461: WAF :: fetched 2 new logs [05-06-2022 20:41:02]12351: WAF :: fetched 3 new logs [05-06-2022 20:41:02]12351: Checking for user cron vulnerabilities [05-06-2022 20:43:01]19008: WAF :: fetched 69 new logs [05-06-2022 20:44:02]22741: Checking ditributed CMS bruteforce attacks [05-06-2022 20:44:02]22741: WAF :: fetched 73 new logs [05-06-2022 20:45:02]26025: WAF :: fetched 76 new logs [05-06-2022 20:46:01]29311: WAF :: fetched 72 new logs [05-06-2022 20:47:02]32674: WAF :: fetched 76 new logs [05-06-2022 20:48:02]3571: WAF :: fetched 76 new logs [05-06-2022 20:49:01]7152: WAF :: fetched 25 new logs [05-06-2022 20:53:02]20474: WAF :: fetched 171 new logs [05-06-2022 20:54:01]24204: WAF :: fetched 165 new logs [05-06-2022 20:55:02]27500: WAF :: fetched 127 new logs [05-06-2022 20:58:02]5217: WAF :: fetched 2 new logs [05-06-2022 20:59:01]8597: WAF :: fetched 5 new logs [05-06-2022 21:00:02]11611: WAF :: fetched 6 new logs [05-06-2022 21:05:02]29192: WAF :: fetched 2 new logs [05-06-2022 21:07:01]3422: WAF :: fetched 2 new logs [05-06-2022 21:08:02]6917: WAF :: fetched 2 new logs [05-06-2022 21:09:02]10172: WAF :: fetched 5 new logs [05-06-2022 21:10:01]13484: WAF :: fetched 4 new logs [05-06-2022 21:12:02]20181: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654474322 [05-06-2022 21:12:02]20181: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 21:12:04]20181: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 21:12:04]20181: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-2112/20220605-211202-Yp1GUqfDBZKmtjpEA2TiWQAAAAY [05-06-2022 21:12:04]20181: WAF :: No suitable log file found. Using SQLite.. [05-06-2022 21:12:04]20181: WAF :: fetched 786 new logs [05-06-2022 21:20:02]14889: WAF :: fetched 2 new logs [05-06-2022 21:21:01]18259: WAF :: fetched 5 new logs [05-06-2022 21:22:02]21634: WAF :: fetched 2 new logs [05-06-2022 21:23:01]24769: WAF :: fetched 4 new logs [05-06-2022 21:24:01]28080: WAF :: fetched 3 new logs [05-06-2022 21:27:01]6344: WAF :: fetched 33 new logs [05-06-2022 21:28:01]9721: WAF :: fetched 122 new logs [05-06-2022 21:29:02]13107: WAF :: fetched 128 new logs [05-06-2022 21:30:02]16402: WAF :: fetched 111 new logs [05-06-2022 21:31:01]19711: WAF :: fetched 54 new logs [05-06-2022 21:32:02]23097: WAF :: fetched 40 new logs [05-06-2022 21:33:01]25948: WAF :: fetched 48 new logs [05-06-2022 21:34:01]29287: WAF :: fetched 2 new logs [05-06-2022 21:35:01]621: WAF :: fetched 1 new logs [05-06-2022 21:41:02]20966: Checking for user cron vulnerabilities [05-06-2022 21:44:01]30809: Checking ditributed CMS bruteforce attacks [05-06-2022 21:45:01]2152: WAF :: fetched 2 new logs [05-06-2022 21:46:02]5499: WAF :: fetched 6 new logs [05-06-2022 21:47:01]8955: WAF :: fetched 3 new logs [05-06-2022 21:48:02]12288: WAF :: fetched 2 new logs [05-06-2022 21:51:02]22141: WAF :: fetched 1 new logs [05-06-2022 21:53:01]28701: WAF :: fetched 1 new logs [05-06-2022 21:54:01]31995: WAF :: fetched 1 new logs [05-06-2022 21:57:02]10723: WAF :: fetched 1 new logs [05-06-2022 21:59:01]17546: WAF :: fetched 1 new logs [05-06-2022 22:00:02]20593: WAF :: fetched 2 new logs [05-06-2022 22:01:01]24482: WAF :: fetched 1 new logs [05-06-2022 22:02:02]27977: WAF :: fetched 3 new logs [05-06-2022 22:04:01]2271: WAF :: fetched 4 new logs [05-06-2022 22:05:01]6340: WAF :: fetched 26 new logs [05-06-2022 22:06:02]9762: WAF :: fetched 51 new logs [05-06-2022 22:07:01]13072: WAF :: fetched 57 new logs [05-06-2022 22:07:07]13062: Performing Domain reputation checks [05-06-2022 22:08:02]16435: WAF :: fetched 42 new logs [05-06-2022 22:11:02]26550: WAF :: fetched 1 new logs [05-06-2022 22:12:01]30167: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654477921 [05-06-2022 22:12:01]30167: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 22:12:03]30167: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 22:12:03]30167: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-2212/20220605-221201-Yp1UYTokmlzNUgaTuHJY8gAAAAk [05-06-2022 22:12:03]30167: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-06-2022 22:12:04]30167: WAF :: fetched 1 new logs [05-06-2022 22:13:02]1088: WAF :: fetched 2 new logs [05-06-2022 22:14:01]4530: WAF :: fetched 4 new logs [05-06-2022 22:16:02]11673: WAF :: fetched 1 new logs [05-06-2022 22:22:01]31746: WAF :: fetched 1 new logs [05-06-2022 22:36:02]15226: WAF :: fetched 1 new logs [05-06-2022 22:40:01]28936: WAF :: fetched 1 new logs [05-06-2022 22:41:01]32375: Checking for user cron vulnerabilities [05-06-2022 22:44:02]10420: Checking ditributed CMS bruteforce attacks [05-06-2022 22:49:02]27728: WAF :: fetched 1 new logs [05-06-2022 22:59:01]29587: WAF :: fetched 54 new logs [05-06-2022 23:00:02]32665: WAF :: fetched 93 new logs [05-06-2022 23:01:02]4137: WAF :: fetched 86 new logs [05-06-2022 23:02:01]7771: WAF :: fetched 3 new logs [05-06-2022 23:05:01]17805: WAF :: fetched 1 new logs [05-06-2022 23:07:01]25099: WAF :: fetched 1 new logs [05-06-2022 23:07:38]25252: Performed RBL check for 23.111.136.34. [05-06-2022 23:09:01]31891: WAF :: fetched 3 new logs [05-06-2022 23:10:01]2792: WAF :: fetched 1 new logs [05-06-2022 23:12:01]9788: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654481521 [05-06-2022 23:12:01]9788: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-06-2022 23:12:03]9788: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-06-2022 23:12:04]9788: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220605/20220605-2312/20220605-231201-Yp1icQu981dV9RhgXth2hgAAAAA [05-06-2022 23:12:04]9788: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-06-2022 23:12:04]9788: WAF :: fetched 2 new logs [05-06-2022 23:14:01]16373: WAF :: fetched 1 new logs [05-06-2022 23:15:01]19703: WAF :: fetched 1 new logs [05-06-2022 23:16:02]23492: WAF :: fetched 2 new logs [05-06-2022 23:17:01]26829: WAF :: fetched 1 new logs [05-06-2022 23:19:01]1152: WAF :: fetched 1 new logs [05-06-2022 23:20:01]4446: WAF :: fetched 1 new logs [05-06-2022 23:22:02]11047: WAF :: fetched 1 new logs [05-06-2022 23:23:01]14370: WAF :: fetched 1 new logs [05-06-2022 23:24:02]17840: WAF :: fetched 2 new logs [05-06-2022 23:25:01]21103: WAF :: fetched 1 new logs [05-06-2022 23:28:01]31656: WAF :: fetched 2 new logs [05-06-2022 23:29:02]2683: WAF :: fetched 1 new logs [05-06-2022 23:30:01]6067: WAF :: fetched 1 new logs [05-06-2022 23:31:01]9614: WAF :: fetched 1 new logs [05-06-2022 23:32:02]13027: WAF :: fetched 1 new logs [05-06-2022 23:34:02]19781: WAF :: fetched 4 new logs [05-06-2022 23:35:02]23011: WAF :: fetched 1 new logs [05-06-2022 23:37:02]30238: WAF :: fetched 2 new logs [05-06-2022 23:39:01]4568: WAF :: fetched 1 new logs [05-06-2022 23:40:02]8099: WAF :: fetched 1 new logs [05-06-2022 23:41:01]11453: Checking for user cron vulnerabilities [05-06-2022 23:42:02]14878: WAF :: fetched 88 new logs [05-06-2022 23:43:01]18182: WAF :: fetched 145 new logs [05-06-2022 23:44:01]21527: Checking ditributed CMS bruteforce attacks [05-06-2022 23:44:01]21527: WAF :: fetched 160 new logs [05-06-2022 23:45:02]24874: WAF :: fetched 76 new logs [05-06-2022 23:47:01]31961: WAF :: fetched 1 new logs [05-06-2022 23:49:01]6510: WAF :: fetched 1 new logs [05-06-2022 23:50:01]9943: WAF :: fetched 1 new logs [05-06-2022 23:51:02]13403: WAF :: fetched 1 new logs [05-06-2022 23:52:01]16900: WAF :: fetched 1 new logs [05-06-2022 23:53:02]20333: WAF :: fetched 1 new logs [05-06-2022 23:54:02]23650: WAF :: fetched 1 new logs [05-06-2022 23:55:01]26997: WAF :: fetched 1 new logs [05-06-2022 23:56:01]30380: WAF :: fetched 1 new logs [05-06-2022 23:57:02]1860: WAF :: fetched 1 new logs [05-06-2022 23:58:02]5354: httpd.conf changed. Refreshing watchlist. [05-06-2022 23:59:01]8839: WAF :: fetched 1 new logs [06-06-2022 00:00:02]12023: WAF :: fetched 1 new logs [06-06-2022 00:00:02]12018: httpd.conf changed. Refreshing watchlist. [06-06-2022 00:01:02]16028: httpd.conf changed. Refreshing watchlist. [06-06-2022 00:01:03]16030: Sending daily report for June 6, 2022 [06-06-2022 00:02:01]19496: WAF :: fetched 1 new logs [06-06-2022 00:04:01]26164: WAF :: fetched 1 new logs [06-06-2022 00:05:02]29543: WAF :: fetched 1 new logs [06-06-2022 00:05:02]29543: Deleted 0 entries older than 6 MONTH from scanner_logs [06-06-2022 00:05:02]29543: Deleted 0 files from Quarantine [06-06-2022 00:07:01]4513: WAF :: fetched 1 new logs [06-06-2022 00:09:01]11459: WAF :: fetched 1 new logs [06-06-2022 00:10:02]14908: WAF :: fetched 1 new logs [06-06-2022 00:12:01]21636: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654485121 [06-06-2022 00:12:01]21636: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 00:12:03]21636: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 00:12:03]21636: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-0012/20220606-001201-Yp1wgSOn2Ha80W7bDIoiqgAAAAU [06-06-2022 00:12:03]21636: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-06-2022 00:12:04]21636: WAF :: fetched 2 new logs [06-06-2022 00:14:01]28323: WAF :: fetched 2 new logs [06-06-2022 00:15:02]31708: WAF :: fetched 1 new logs [06-06-2022 00:17:01]6886: WAF :: fetched 2 new logs [06-06-2022 00:19:02]13624: WAF :: fetched 2 new logs [06-06-2022 00:20:02]16971: WAF :: fetched 1 new logs [06-06-2022 00:22:02]23516: WAF :: fetched 1 new logs [06-06-2022 00:24:01]30259: WAF :: fetched 1 new logs [06-06-2022 00:25:02]1132: WAF :: fetched 2 new logs [06-06-2022 00:27:02]8754: WAF :: fetched 1 new logs [06-06-2022 00:29:01]15516: WAF :: fetched 1 new logs [06-06-2022 00:32:02]25710: WAF :: fetched 1 new logs [06-06-2022 00:40:01]21126: WAF :: fetched 1 new logs [06-06-2022 00:41:01]24542: Checking for user cron vulnerabilities [06-06-2022 00:44:02]2327: Checking ditributed CMS bruteforce attacks [06-06-2022 00:45:01]: Checking for software updates [06-06-2022 00:45:02]5695: WAF :: fetched 1 new logs [06-06-2022 00:53:01]1050: WAF :: fetched 1 new logs [06-06-2022 00:55:01]7985: WAF :: fetched 1 new logs [06-06-2022 01:01:01]28982: WAF :: fetched 1 new logs [06-06-2022 01:03:01]3527: WAF :: fetched 7 new logs [06-06-2022 01:05:02]11166: WAF :: fetched 4 new logs [06-06-2022 01:10:01]28731: WAF :: fetched 2 new logs [06-06-2022 01:11:01]32140: WAF :: fetched 1 new logs [06-06-2022 01:12:02]2714: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654488722 [06-06-2022 01:12:02]2714: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 01:12:04]2714: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 01:12:04]2714: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-0112/20220606-011202-Yp1-kpO9FoMItPfloGXo4AAAAAc [06-06-2022 01:12:04]2714: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-06-2022 01:12:04]2714: WAF :: fetched 1 new logs [06-06-2022 01:13:01]6337: WAF :: fetched 1 new logs [06-06-2022 01:26:02]18836: WAF :: fetched 2 new logs [06-06-2022 01:41:01]7187: Checking for user cron vulnerabilities [06-06-2022 01:44:01]17422: Checking ditributed CMS bruteforce attacks [06-06-2022 01:45:01]: Checking for definition updates [06-06-2022 01:47:02]27561: WAF :: fetched 1 new logs [06-06-2022 01:52:01]12997: WAF :: fetched 23 new logs [06-06-2022 01:53:01]16469: WAF :: fetched 213 new logs [06-06-2022 01:56:02]26706: WAF :: fetched 1 new logs [06-06-2022 01:59:02]5224: WAF :: fetched 1 new logs [06-06-2022 02:02:01]15457: WAF :: fetched 1 new logs [06-06-2022 02:03:01]19033: WAF :: fetched 1 new logs [06-06-2022 02:12:02]18131: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654492322 [06-06-2022 02:12:02]18131: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 02:12:04]18131: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 02:12:04]18131: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-0212/20220606-021202-Yp2Mon1dCjn5RZ_9WhxpKwAAAAI [06-06-2022 02:12:04]18131: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-06-2022 02:12:04]18131: WAF :: fetched 2 new logs [06-06-2022 02:13:01]21627: WAF :: fetched 1 new logs [06-06-2022 02:20:02]14057: WAF :: fetched 1 new logs [06-06-2022 02:26:02]2542: WAF :: fetched 1 new logs [06-06-2022 02:27:02]6054: WAF :: fetched 5 new logs [06-06-2022 02:37:01]9279: WAF :: fetched 1 new logs [06-06-2022 02:41:01]23693: Checking for user cron vulnerabilities [06-06-2022 02:42:02]27287: WAF :: fetched 3 new logs [06-06-2022 02:44:01]1810: Checking ditributed CMS bruteforce attacks [06-06-2022 02:44:01]1810: WAF :: fetched 1 new logs [06-06-2022 02:53:03]1021: Updated license status via CDN [06-06-2022 02:54:01]4583: WAF :: fetched 1 new logs [06-06-2022 02:56:02]11731: WAF :: fetched 1 new logs [06-06-2022 03:00:22]26075: Found and updated 32 CMS installations [06-06-2022 03:02:01]1425: WAF :: fetched 3 new logs [06-06-2022 03:03:21]26075: Sending CMS version vulnerability report emails to cpanel users [06-06-2022 03:03:24]26075: Checking wordpress installations for suspicious directories [06-06-2022 03:04:37]5268: Sending CMS version vulnerability report emails to cpanel users [06-06-2022 03:04:40]5268: Checking wordpress installations for suspicious directories [06-06-2022 03:06:02]16695: WAF :: fetched 1 new logs [06-06-2022 03:12:01]5698: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654495921 [06-06-2022 03:12:01]5698: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 03:12:03]5698: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 03:12:04]5698: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-0312/20220606-031201-Yp2asb-XGL1mkQ1HSnK36wAAAAc [06-06-2022 03:12:04]5698: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 03:12:04]5698: WAF :: fetched 761 new logs [06-06-2022 03:17:01]23317: WAF :: fetched 2 new logs [06-06-2022 03:18:01]26922: WAF :: fetched 1 new logs [06-06-2022 03:22:01]9282: WAF :: fetched 1 new logs [06-06-2022 03:23:02]12883: WAF :: fetched 2 new logs [06-06-2022 03:31:01]9006: WAF :: fetched 1 new logs [06-06-2022 03:35:02]23108: WAF :: fetched 2 new logs [06-06-2022 03:41:01]14925: Checking for user cron vulnerabilities [06-06-2022 03:42:02]18537: WAF :: fetched 1 new logs [06-06-2022 03:43:02]21616: WAF :: fetched 1 new logs [06-06-2022 03:44:01]24884: Checking ditributed CMS bruteforce attacks [06-06-2022 03:44:01]24884: WAF :: fetched 1 new logs [06-06-2022 03:48:01]6839: WAF :: fetched 1 new logs [06-06-2022 03:49:01]10452: WAF :: fetched 4 new logs [06-06-2022 03:50:01]14397: WAF :: fetched 2 new logs [06-06-2022 03:52:01]21321: WAF :: fetched 1 new logs [06-06-2022 03:54:01]28321: WAF :: fetched 4 new logs [06-06-2022 03:56:02]2880: WAF :: fetched 2 new logs [06-06-2022 03:57:01]6389: WAF :: fetched 1 new logs [06-06-2022 04:08:01]13904: WAF :: fetched 1 new logs [06-06-2022 04:09:02]17454: WAF :: fetched 2 new logs [06-06-2022 04:12:02]28368: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654499522 [06-06-2022 04:12:02]28368: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 04:12:04]28368: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 04:12:04]28368: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-0412/20220606-041202-Yp2ownc62XCTM6qzMuYW1QAAAAU [06-06-2022 04:12:04]28368: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-06-2022 04:12:04]28368: WAF :: fetched 1 new logs [06-06-2022 04:13:01]31886: WAF :: fetched 1 new logs [06-06-2022 04:19:02]20761: WAF :: fetched 1 new logs [06-06-2022 04:21:01]28291: WAF :: fetched 1 new logs [06-06-2022 04:26:01]13836: WAF :: fetched 2 new logs [06-06-2022 04:37:02]20478: WAF :: fetched 1 new logs [06-06-2022 04:40:02]31210: WAF :: fetched 1 new logs [06-06-2022 04:41:01]2961: Checking for user cron vulnerabilities [06-06-2022 04:44:01]13990: Checking ditributed CMS bruteforce attacks [06-06-2022 04:46:02]21139: WAF :: fetched 5 new logs [06-06-2022 05:01:02]10944: WAF :: fetched 17 new logs [06-06-2022 05:01:43]10950: Starting daily scan on files updated in last 24 hrs [06-06-2022 05:02:01]14974: WAF :: fetched 107 new logs [06-06-2022 05:03:02]18774: WAF :: fetched 85 new logs [06-06-2022 05:04:01]22319: WAF :: fetched 25 new logs [06-06-2022 05:05:02]25939: WAF :: fetched 1 new logs [06-06-2022 05:11:01]15089: WAF :: fetched 1 new logs [06-06-2022 05:12:02]19214: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654503122 [06-06-2022 05:12:02]19214: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 05:12:04]19214: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 05:12:04]19214: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-0512/20220606-051202-Yp220nc62XCTM6qzMuYYBwAAAAU [06-06-2022 05:12:04]19214: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-06-2022 05:12:04]19214: WAF :: fetched 1 new logs [06-06-2022 05:13:02]22807: WAF :: fetched 1 new logs [06-06-2022 05:14:01]26339: WAF :: fetched 1 new logs [06-06-2022 05:23:02]26453: WAF :: fetched 1 new logs [06-06-2022 05:26:01]4432: WAF :: fetched 1 new logs [06-06-2022 05:38:02]15269: WAF :: fetched 4 new logs [06-06-2022 05:41:02]25938: Checking for user cron vulnerabilities [06-06-2022 05:44:01]4859: Checking ditributed CMS bruteforce attacks [06-06-2022 05:58:01]22970: WAF :: fetched 1 new logs [06-06-2022 06:00:01]29772: WAF :: fetched 1 new logs [06-06-2022 06:06:01]19929: WAF :: fetched 1 new logs [06-06-2022 06:08:01]26799: WAF :: fetched 1 new logs [06-06-2022 06:12:02]9072: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654506722 [06-06-2022 06:12:02]9072: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 06:12:04]9072: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 06:12:04]9072: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-0612/20220606-061202-Yp3E4lEiwYp4eL-z9aN1FwAAAAU [06-06-2022 06:12:04]9072: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 06:12:04]9072: WAF :: fetched 231 new logs [06-06-2022 06:14:02]16861: WAF :: fetched 1 new logs [06-06-2022 06:29:02]5723: WAF :: fetched 1 new logs [06-06-2022 06:31:02]13089: WAF :: fetched 1 new logs [06-06-2022 06:32:01]16485: WAF :: fetched 1 new logs [06-06-2022 06:33:01]20473: WAF :: fetched 1 new logs [06-06-2022 06:34:02]24312: WAF :: fetched 1 new logs [06-06-2022 06:35:01]27853: WAF :: fetched 2 new logs [06-06-2022 06:40:01]13106: WAF :: fetched 1 new logs [06-06-2022 06:41:01]16640: Checking for user cron vulnerabilities [06-06-2022 06:43:01]24147: WAF :: fetched 1 new logs [06-06-2022 06:44:01]27792: Checking ditributed CMS bruteforce attacks [06-06-2022 06:52:01]23689: WAF :: fetched 2 new logs [06-06-2022 06:53:02]27632: WAF :: fetched 1 new logs [06-06-2022 06:56:02]5919: WAF :: fetched 1 new logs [06-06-2022 06:57:01]9358: WAF :: fetched 2 new logs [06-06-2022 06:58:02]13013: WAF :: fetched 3 new logs [06-06-2022 06:59:01]16632: WAF :: fetched 3 new logs [06-06-2022 07:12:01]30331: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654510321 [06-06-2022 07:12:01]30331: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 07:12:03]30331: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 07:12:04]30331: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-0712/20220606-071201-Yp3S8dgQ7kSLgOWxYDjvsgAAAAQ [06-06-2022 07:12:04]30331: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 07:12:04]30331: WAF :: fetched 1 new logs [06-06-2022 07:13:02]1429: WAF :: fetched 1 new logs [06-06-2022 07:15:01]9198: WAF :: fetched 4 new logs [06-06-2022 07:17:01]16258: WAF :: fetched 1 new logs [06-06-2022 07:19:02]23303: WAF :: fetched 1 new logs [06-06-2022 07:22:02]1384: WAF :: fetched 1 new logs [06-06-2022 07:41:01]5070: WAF :: fetched 1 new logs [06-06-2022 07:41:01]5070: Checking for user cron vulnerabilities [06-06-2022 07:44:01]16687: Checking ditributed CMS bruteforce attacks [06-06-2022 07:45:01]: Checking for definition updates [06-06-2022 07:45:02]20187: WAF :: fetched 1 new logs [06-06-2022 07:46:01]23666: WAF :: fetched 2 new logs [06-06-2022 07:47:02]27191: WAF :: fetched 119 new logs [06-06-2022 07:48:01]30633: WAF :: fetched 139 new logs [06-06-2022 07:49:02]1890: WAF :: fetched 74 new logs [06-06-2022 07:50:01]5435: WAF :: fetched 3 new logs [06-06-2022 07:51:01]9220: WAF :: fetched 1 new logs [06-06-2022 07:52:02]12726: WAF :: fetched 1 new logs [06-06-2022 07:55:02]23831: WAF :: fetched 1 new logs [06-06-2022 07:58:01]1930: WAF :: fetched 2 new logs [06-06-2022 08:00:02]8948: WAF :: fetched 6 new logs [06-06-2022 08:01:01]13131: WAF :: fetched 1 new logs [06-06-2022 08:07:01]2331: WAF :: fetched 1 new logs [06-06-2022 08:10:02]13320: WAF :: fetched 1 new logs [06-06-2022 08:12:01]20265: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654513921 [06-06-2022 08:12:01]20265: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 08:12:03]20265: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 08:12:03]20265: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-0812/20220606-081201-Yp3hASjOjFkbYne2Df5DsgAAAAw [06-06-2022 08:12:03]20265: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 08:12:03]20265: WAF :: fetched 1 new logs [06-06-2022 08:16:01]2438: WAF :: fetched 1 new logs [06-06-2022 08:18:02]9737: WAF :: fetched 2 new logs [06-06-2022 08:20:01]16968: WAF :: fetched 2 new logs [06-06-2022 08:27:01]10212: WAF :: fetched 3 new logs [06-06-2022 08:29:02]17434: WAF :: fetched 1 new logs [06-06-2022 08:37:02]14099: WAF :: fetched 1 new logs [06-06-2022 08:38:01]17393: WAF :: fetched 1 new logs [06-06-2022 08:39:02]21321: WAF :: fetched 1 new logs [06-06-2022 08:41:01]28425: Checking for user cron vulnerabilities [06-06-2022 08:43:01]3076: WAF :: fetched 3 new logs [06-06-2022 08:44:02]7002: Checking ditributed CMS bruteforce attacks [06-06-2022 08:45:01]10983: WAF :: fetched 2 new logs [06-06-2022 08:49:02]25139: WAF :: fetched 1 new logs [06-06-2022 08:50:02]28544: WAF :: fetched 1 new logs [06-06-2022 08:56:01]17707: WAF :: fetched 1 new logs [06-06-2022 09:01:02]3273: WAF :: fetched 1 new logs [06-06-2022 09:04:01]13924: WAF :: fetched 2 new logs [06-06-2022 09:06:01]21676: WAF :: fetched 2 new logs [06-06-2022 09:10:02]3542: WAF :: fetched 1 new logs [06-06-2022 09:10:02]3537: httpd.conf changed. Refreshing watchlist. [06-06-2022 09:12:01]10872: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654517521 [06-06-2022 09:12:01]10872: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 09:12:03]10872: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 09:12:03]10872: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-0912/20220606-091201-Yp3vEWcNtoLH-FXdxffeCQAAAA4 [06-06-2022 09:12:03]10872: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-06-2022 09:12:03]10872: WAF :: fetched 1 new logs [06-06-2022 09:14:01]17925: WAF :: fetched 5 new logs [06-06-2022 09:17:01]28825: WAF :: fetched 1 new logs [06-06-2022 09:20:02]7476: WAF :: fetched 2 new logs [06-06-2022 09:22:01]14634: WAF :: fetched 1 new logs [06-06-2022 09:25:01]25311: WAF :: fetched 1 new logs [06-06-2022 09:41:01]19132: Checking for user cron vulnerabilities [06-06-2022 09:43:01]26265: WAF :: fetched 1 new logs [06-06-2022 09:44:02]29791: Checking ditributed CMS bruteforce attacks [06-06-2022 09:50:02]19226: WAF :: fetched 2 new logs [06-06-2022 09:51:01]22537: WAF :: fetched 1 new logs [06-06-2022 09:52:02]25937: WAF :: fetched 4 new logs [06-06-2022 09:53:01]29493: WAF :: fetched 3 new logs [06-06-2022 09:54:01]495: WAF :: fetched 2 new logs [06-06-2022 09:55:01]4176: WAF :: fetched 1 new logs [06-06-2022 09:56:01]8346: WAF :: fetched 1 new logs [06-06-2022 09:58:02]15457: WAF :: fetched 2 new logs [06-06-2022 09:59:01]18891: WAF :: fetched 1 new logs [06-06-2022 10:02:01]29617: WAF :: fetched 2 new logs [06-06-2022 10:05:01]8246: WAF :: fetched 2 new logs [06-06-2022 10:07:02]16028: WAF :: fetched 1 new logs [06-06-2022 10:08:01]19645: WAF :: fetched 1 new logs [06-06-2022 10:10:02]26861: WAF :: fetched 1 new logs [06-06-2022 10:12:01]1537: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654521121 [06-06-2022 10:12:01]1537: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 10:12:03]1537: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 10:12:03]1537: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-1012/20220606-101201-Yp39IW2eIgsnP-3qROtWugAAAAc [06-06-2022 10:12:03]1537: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-06-2022 10:12:04]1537: WAF :: fetched 1 new logs [06-06-2022 10:13:02]5277: WAF :: fetched 2 new logs [06-06-2022 10:14:01]9020: WAF :: fetched 2 new logs [06-06-2022 10:17:01]20286: WAF :: fetched 2 new logs [06-06-2022 10:18:02]23783: WAF :: fetched 2 new logs [06-06-2022 10:21:01]2273: WAF :: fetched 1 new logs [06-06-2022 10:22:01]6035: WAF :: fetched 1 new logs [06-06-2022 10:23:02]9747: WAF :: fetched 2 new logs [06-06-2022 10:30:01]3184: WAF :: fetched 3 new logs [06-06-2022 10:36:02]25136: WAF :: fetched 1 new logs [06-06-2022 10:37:02]29439: WAF :: fetched 4 new logs [06-06-2022 10:37:02]29436: httpd.conf changed. Refreshing watchlist. [06-06-2022 10:38:01]637: WAF :: fetched 1 new logs [06-06-2022 10:38:01]634: httpd.conf changed. Refreshing watchlist. [06-06-2022 10:41:01]11875: Checking for user cron vulnerabilities [06-06-2022 10:43:01]19101: WAF :: fetched 3 new logs [06-06-2022 10:44:01]22776: Checking ditributed CMS bruteforce attacks [06-06-2022 10:44:01]22776: WAF :: fetched 2 new logs [06-06-2022 10:45:01]26385: WAF :: fetched 3 new logs [06-06-2022 10:46:02]30050: WAF :: fetched 1 new logs [06-06-2022 10:52:01]19513: WAF :: fetched 2 new logs [06-06-2022 10:54:02]26498: WAF :: fetched 1 new logs [06-06-2022 10:58:02]9146: WAF :: fetched 4 new logs [06-06-2022 10:59:01]12693: WAF :: fetched 2 new logs [06-06-2022 11:00:02]15969: WAF :: fetched 1 new logs [06-06-2022 11:01:01]20079: WAF :: fetched 2 new logs [06-06-2022 11:02:02]23815: WAF :: fetched 2 new logs [06-06-2022 11:04:01]30842: WAF :: fetched 1 new logs [06-06-2022 11:06:01]5589: WAF :: fetched 2 new logs [06-06-2022 11:07:01]9726: WAF :: fetched 2 new logs [06-06-2022 11:08:01]9884: Performed RBL check for 23.111.136.34. [06-06-2022 11:08:02]13213: WAF :: fetched 4 new logs [06-06-2022 11:09:01]16794: WAF :: fetched 2 new logs [06-06-2022 11:10:02]20367: WAF :: fetched 3 new logs [06-06-2022 11:11:02]23980: WAF :: fetched 2 new logs [06-06-2022 11:12:01]27602: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654524721 [06-06-2022 11:12:01]27602: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 11:12:03]27602: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 11:12:04]27602: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-1112/20220606-111201-Yp4LMSHsuuthjIFpnxUi3gAAACE [06-06-2022 11:12:04]27602: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 11:12:04]27602: WAF :: fetched 68 new logs [06-06-2022 11:26:01]14301: WAF :: fetched 1 new logs [06-06-2022 11:30:01]28955: WAF :: fetched 4 new logs [06-06-2022 11:32:01]3866: WAF :: fetched 1 new logs [06-06-2022 11:33:01]7581: WAF :: fetched 1 new logs [06-06-2022 11:36:01]18447: WAF :: fetched 1 new logs [06-06-2022 11:38:01]25902: WAF :: fetched 1 new logs [06-06-2022 11:39:01]29511: WAF :: fetched 1 new logs [06-06-2022 11:40:02]725: WAF :: fetched 2 new logs [06-06-2022 11:41:01]4462: Checking for user cron vulnerabilities [06-06-2022 11:44:01]15080: Checking ditributed CMS bruteforce attacks [06-06-2022 11:45:02]18916: WAF :: fetched 1 new logs [06-06-2022 11:46:02]22454: WAF :: fetched 2 new logs [06-06-2022 11:54:02]26378: WAF :: fetched 1 new logs [06-06-2022 11:55:02]30075: WAF :: fetched 1 new logs [06-06-2022 11:58:02]9199: WAF :: fetched 1 new logs [06-06-2022 12:00:02]16231: WAF :: fetched 3 new logs [06-06-2022 12:02:02]23732: WAF :: fetched 4 new logs [06-06-2022 12:04:01]30879: WAF :: fetched 1 new logs [06-06-2022 12:05:02]2064: WAF :: fetched 2 new logs [06-06-2022 12:06:02]6161: WAF :: fetched 2 new logs [06-06-2022 12:07:01]9976: WAF :: fetched 3 new logs [06-06-2022 12:08:02]13896: WAF :: fetched 1 new logs [06-06-2022 12:11:02]24643: WAF :: fetched 1 new logs [06-06-2022 12:12:02]28026: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654528322 [06-06-2022 12:12:02]28026: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 12:12:04]28026: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 12:12:04]28026: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-1212/20220606-121202-Yp4ZQoQuDqIwNKn4mr5c3wAAAAg [06-06-2022 12:12:04]28026: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 12:12:04]28026: WAF :: fetched 2 new logs [06-06-2022 12:18:02]17597: WAF :: fetched 1 new logs [06-06-2022 12:20:01]24816: WAF :: fetched 3 new logs [06-06-2022 12:24:01]6868: WAF :: fetched 1 new logs [06-06-2022 12:27:01]17494: WAF :: fetched 1 new logs [06-06-2022 12:32:01]3446: WAF :: fetched 1 new logs [06-06-2022 12:33:01]7165: WAF :: fetched 4 new logs [06-06-2022 12:35:02]14297: WAF :: fetched 1 new logs [06-06-2022 12:36:01]17882: WAF :: fetched 2 new logs [06-06-2022 12:37:02]21458: WAF :: fetched 1 new logs [06-06-2022 12:41:01]3317: Checking for user cron vulnerabilities [06-06-2022 12:42:02]6949: WAF :: fetched 1 new logs [06-06-2022 12:43:01]10460: WAF :: fetched 1 new logs [06-06-2022 12:44:02]14028: Checking ditributed CMS bruteforce attacks [06-06-2022 12:44:02]14028: WAF :: fetched 1 new logs [06-06-2022 12:45:01]: Checking for software updates [06-06-2022 12:50:01]2979: WAF :: fetched 3 new logs [06-06-2022 12:59:01]2734: WAF :: fetched 2 new logs [06-06-2022 13:00:02]6068: WAF :: fetched 5 new logs [06-06-2022 13:02:01]13683: WAF :: fetched 2 new logs [06-06-2022 13:03:02]17195: WAF :: fetched 3 new logs [06-06-2022 13:04:01]20606: WAF :: fetched 4 new logs [06-06-2022 13:05:02]24193: WAF :: fetched 2 new logs [06-06-2022 13:07:02]31249: WAF :: fetched 2 new logs [06-06-2022 13:08:01]2257: WAF :: fetched 1 new logs [06-06-2022 13:10:02]9882: WAF :: fetched 1 new logs [06-06-2022 13:11:01]13547: WAF :: fetched 1 new logs [06-06-2022 13:12:02]17271: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654531922 [06-06-2022 13:12:02]17271: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 13:12:04]17271: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 13:12:04]17271: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-1312/20220606-131202-Yp4nUsu_CbcbzC3B8pLz4AAAABY [06-06-2022 13:12:04]17271: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 13:12:04]17271: WAF :: fetched 5 new logs [06-06-2022 13:13:01]20734: WAF :: fetched 1 new logs [06-06-2022 13:14:02]24358: WAF :: fetched 5 new logs [06-06-2022 13:15:01]27927: WAF :: fetched 2 new logs [06-06-2022 13:16:02]31575: WAF :: fetched 2 new logs [06-06-2022 13:17:02]2682: WAF :: fetched 1 new logs [06-06-2022 13:18:01]6383: WAF :: fetched 4 new logs [06-06-2022 13:19:02]10460: WAF :: fetched 4 new logs [06-06-2022 13:20:01]14148: WAF :: fetched 5 new logs [06-06-2022 13:21:01]17663: WAF :: fetched 2 new logs [06-06-2022 13:22:02]21254: WAF :: fetched 2 new logs [06-06-2022 13:23:01]24783: WAF :: fetched 3 new logs [06-06-2022 13:24:01]28511: WAF :: fetched 4 new logs [06-06-2022 13:25:01]32198: WAF :: fetched 3 new logs [06-06-2022 13:27:01]7204: WAF :: fetched 1 new logs [06-06-2022 13:28:01]10683: WAF :: fetched 1 new logs [06-06-2022 13:29:02]14179: WAF :: fetched 2 new logs [06-06-2022 13:30:01]18290: WAF :: fetched 5 new logs [06-06-2022 13:31:01]21835: WAF :: fetched 2 new logs [06-06-2022 13:32:02]25280: WAF :: fetched 3 new logs [06-06-2022 13:33:01]28717: WAF :: fetched 1 new logs [06-06-2022 13:34:01]32169: WAF :: fetched 4 new logs [06-06-2022 13:35:02]3469: WAF :: fetched 5 new logs [06-06-2022 13:37:01]10700: WAF :: fetched 2 new logs [06-06-2022 13:38:02]14132: WAF :: fetched 2 new logs [06-06-2022 13:39:01]17652: WAF :: fetched 3 new logs [06-06-2022 13:40:02]21734: WAF :: fetched 1 new logs [06-06-2022 13:41:01]24869: Checking for user cron vulnerabilities [06-06-2022 13:43:01]31974: WAF :: fetched 2 new logs [06-06-2022 13:44:02]3140: Checking ditributed CMS bruteforce attacks [06-06-2022 13:45:01]: Checking for definition updates [06-06-2022 13:45:01]6818: WAF :: fetched 2 new logs [06-06-2022 13:46:01]10399: WAF :: fetched 2 new logs [06-06-2022 13:48:01]17531: WAF :: fetched 2 new logs [06-06-2022 13:49:02]21069: WAF :: fetched 3 new logs [06-06-2022 13:50:01]25236: WAF :: fetched 1 new logs [06-06-2022 13:51:01]28990: WAF :: fetched 1 new logs [06-06-2022 13:52:02]32564: WAF :: fetched 2 new logs [06-06-2022 13:54:01]7424: WAF :: fetched 13 new logs [06-06-2022 13:55:02]11018: WAF :: fetched 42 new logs [06-06-2022 13:56:01]14534: WAF :: fetched 40 new logs [06-06-2022 13:57:01]18096: WAF :: fetched 44 new logs [06-06-2022 13:58:02]21603: WAF :: fetched 25 new logs [06-06-2022 14:05:01]15059: WAF :: fetched 1 new logs [06-06-2022 14:06:01]18702: WAF :: fetched 1 new logs [06-06-2022 14:08:01]25641: WAF :: fetched 1 new logs [06-06-2022 14:11:02]4571: WAF :: fetched 3 new logs [06-06-2022 14:12:01]8348: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654535521 [06-06-2022 14:12:01]8348: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 14:12:03]8348: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 14:12:03]8348: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-1412/20220606-141201-Yp41YZn7GBg5LYg5iqrqlgAAABg [06-06-2022 14:12:03]8348: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 14:12:04]8348: WAF :: fetched 2 new logs [06-06-2022 14:13:02]11997: WAF :: fetched 1 new logs [06-06-2022 14:17:01]23645: WAF :: fetched 1 new logs [06-06-2022 14:20:01]32031: WAF :: fetched 1 new logs [06-06-2022 14:22:02]5490: WAF :: fetched 2 new logs [06-06-2022 14:23:02]8232: WAF :: fetched 1 new logs [06-06-2022 14:24:01]11021: WAF :: fetched 2 new logs [06-06-2022 14:25:02]13814: WAF :: fetched 4 new logs [06-06-2022 14:26:02]24940: WAF :: fetched 1 new logs [06-06-2022 14:27:01]29609: WAF :: fetched 3 new logs [06-06-2022 14:28:02]1254: WAF :: fetched 3 new logs [06-06-2022 14:29:01]4781: WAF :: fetched 1 new logs [06-06-2022 14:32:01]15784: WAF :: fetched 2 new logs [06-06-2022 14:40:01]12155: WAF :: fetched 1 new logs [06-06-2022 14:41:02]16091: Checking for user cron vulnerabilities [06-06-2022 14:44:01]26535: Checking ditributed CMS bruteforce attacks [06-06-2022 14:44:02]26535: WAF :: fetched 3 new logs [06-06-2022 14:47:01]5555: WAF :: fetched 1 new logs [06-06-2022 14:51:01]19548: WAF :: fetched 1 new logs [06-06-2022 14:53:02]26916: Updated license status via CDN [06-06-2022 14:59:01]17009: WAF :: fetched 2 new logs [06-06-2022 14:59:01]17013: httpd.conf changed. Refreshing watchlist. [06-06-2022 15:01:01]24051: Reseting cPGuard inotify settings [06-06-2022 15:02:02]28001: WAF :: fetched 1 new logs [06-06-2022 15:05:01]6266: WAF :: fetched 1 new logs [06-06-2022 15:08:01]17693: WAF :: fetched 1 new logs [06-06-2022 15:12:02]32251: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654539122 [06-06-2022 15:12:02]32251: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 15:12:04]32251: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 15:12:04]32251: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-1512/20220606-151202-Yp5Dcty17q3U5yteKbIt4QAAABY [06-06-2022 15:12:04]32251: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 15:12:04]32251: WAF :: fetched 3 new logs [06-06-2022 15:20:01]29344: WAF :: fetched 1 new logs [06-06-2022 15:23:01]8062: WAF :: fetched 1 new logs [06-06-2022 15:24:02]11742: WAF :: fetched 3 new logs [06-06-2022 15:25:01]15368: WAF :: fetched 1 new logs [06-06-2022 15:26:01]19109: WAF :: fetched 1 new logs [06-06-2022 15:27:02]22572: WAF :: fetched 1 new logs [06-06-2022 15:29:01]30074: WAF :: fetched 1 new logs [06-06-2022 15:30:02]1175: WAF :: fetched 2 new logs [06-06-2022 15:33:01]12117: WAF :: fetched 2 new logs [06-06-2022 15:34:01]15898: WAF :: fetched 2 new logs [06-06-2022 15:35:02]19473: WAF :: fetched 14 new logs [06-06-2022 15:36:01]23170: WAF :: fetched 29 new logs [06-06-2022 15:37:01]26645: WAF :: fetched 59 new logs [06-06-2022 15:38:01]30669: WAF :: fetched 64 new logs [06-06-2022 15:39:01]1789: WAF :: fetched 63 new logs [06-06-2022 15:40:02]5456: WAF :: fetched 61 new logs [06-06-2022 15:41:01]9197: WAF :: fetched 33 new logs [06-06-2022 15:41:01]9197: Checking for user cron vulnerabilities [06-06-2022 15:44:02]19935: Checking ditributed CMS bruteforce attacks [06-06-2022 15:44:02]19935: WAF :: fetched 1 new logs [06-06-2022 15:46:01]27179: WAF :: fetched 1 new logs [06-06-2022 15:47:02]30441: WAF :: fetched 1 new logs [06-06-2022 15:48:01]2025: WAF :: fetched 2 new logs [06-06-2022 15:50:02]9119: WAF :: fetched 1 new logs [06-06-2022 15:52:02]16621: WAF :: fetched 1 new logs [06-06-2022 15:53:01]20078: WAF :: fetched 1 new logs [06-06-2022 15:54:01]23562: WAF :: fetched 2 new logs [06-06-2022 15:56:01]30872: WAF :: fetched 4 new logs [06-06-2022 15:57:01]2016: WAF :: fetched 4 new logs [06-06-2022 15:58:02]6121: WAF :: fetched 1 new logs [06-06-2022 15:59:01]9442: WAF :: fetched 2 new logs [06-06-2022 16:00:02]12821: WAF :: fetched 4 new logs [06-06-2022 16:01:01]17129: WAF :: fetched 6 new logs [06-06-2022 16:02:01]20717: WAF :: fetched 3 new logs [06-06-2022 16:04:01]27750: WAF :: fetched 1 new logs [06-06-2022 16:07:01]6298: WAF :: fetched 2 new logs [06-06-2022 16:12:01]24903: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654542721 [06-06-2022 16:12:01]24903: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 16:12:03]24903: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 16:12:04]24903: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-1612/20220606-161201-Yp5RgSDh1ElAQs6DJJGZfgAAAAM [06-06-2022 16:12:04]24903: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 16:12:04]24903: WAF :: fetched 1 new logs [06-06-2022 16:13:01]28453: WAF :: fetched 1 new logs [06-06-2022 16:15:01]3046: WAF :: fetched 1 new logs [06-06-2022 16:16:02]7093: httpd.conf changed. Refreshing watchlist. [06-06-2022 16:18:01]14309: WAF :: fetched 2 new logs [06-06-2022 16:26:02]11326: WAF :: fetched 2 new logs [06-06-2022 16:27:01]14886: WAF :: fetched 1 new logs [06-06-2022 16:30:01]25865: WAF :: fetched 3 new logs [06-06-2022 16:34:01]7766: WAF :: fetched 2 new logs [06-06-2022 16:35:02]11278: WAF :: fetched 1 new logs [06-06-2022 16:38:02]22238: WAF :: fetched 1 new logs [06-06-2022 16:39:01]26303: WAF :: fetched 1 new logs [06-06-2022 16:41:02]1455: Checking for user cron vulnerabilities [06-06-2022 16:42:01]4945: WAF :: fetched 2 new logs [06-06-2022 16:43:02]8598: WAF :: fetched 1 new logs [06-06-2022 16:44:01]12117: Checking ditributed CMS bruteforce attacks [06-06-2022 16:44:01]12117: WAF :: fetched 1 new logs [06-06-2022 16:46:02]19487: WAF :: fetched 1 new logs [06-06-2022 16:47:01]22586: WAF :: fetched 1 new logs [06-06-2022 16:50:01]1082: WAF :: fetched 1 new logs [06-06-2022 16:51:02]4895: WAF :: fetched 2 new logs [06-06-2022 16:53:01]11810: WAF :: fetched 1 new logs [06-06-2022 16:54:02]15419: WAF :: fetched 1 new logs [06-06-2022 16:56:01]22538: WAF :: fetched 2 new logs [06-06-2022 16:58:01]29420: WAF :: fetched 1 new logs [06-06-2022 16:59:01]919: WAF :: fetched 2 new logs [06-06-2022 17:01:01]8396: WAF :: fetched 2 new logs [06-06-2022 17:03:02]15648: WAF :: fetched 3 new logs [06-06-2022 17:04:01]19044: WAF :: fetched 1 new logs [06-06-2022 17:05:02]22549: WAF :: fetched 1 new logs [06-06-2022 17:06:02]26057: WAF :: fetched 3 new logs [06-06-2022 17:12:02]15323: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654546322 [06-06-2022 17:12:02]15323: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 17:12:04]15323: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 17:12:04]15323: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-1712/20220606-171202-Yp5fkjFVSJK8RN68czeexgAAAAY [06-06-2022 17:12:04]15323: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 17:12:04]15323: WAF :: fetched 1 new logs [06-06-2022 17:13:01]18700: WAF :: fetched 39 new logs [06-06-2022 17:14:01]22150: WAF :: fetched 53 new logs [06-06-2022 17:15:02]25595: WAF :: fetched 53 new logs [06-06-2022 17:16:01]29196: WAF :: fetched 54 new logs [06-06-2022 17:24:01]25323: WAF :: fetched 2 new logs [06-06-2022 17:27:01]3463: WAF :: fetched 1 new logs [06-06-2022 17:34:01]28768: WAF :: fetched 1 new logs [06-06-2022 17:38:02]10417: WAF :: fetched 1 new logs [06-06-2022 17:41:02]21495: Checking for user cron vulnerabilities [06-06-2022 17:44:02]31850: Checking ditributed CMS bruteforce attacks [06-06-2022 17:46:01]6639: WAF :: fetched 2 new logs [06-06-2022 17:48:02]13508: WAF :: fetched 1 new logs [06-06-2022 17:49:01]17071: WAF :: fetched 1 new logs [06-06-2022 17:51:01]24711: WAF :: fetched 1 new logs [06-06-2022 17:53:01]31626: WAF :: fetched 1 new logs [06-06-2022 17:54:02]2477: httpd.conf changed. Refreshing watchlist. [06-06-2022 17:59:02]20095: httpd.conf changed. Refreshing watchlist. [06-06-2022 18:04:01]5886: WAF :: fetched 2 new logs [06-06-2022 18:05:02]9325: WAF :: fetched 4 new logs [06-06-2022 18:07:02]16257: WAF :: fetched 1 new logs [06-06-2022 18:11:01]30501: WAF :: fetched 1 new logs [06-06-2022 18:12:02]1500: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654549922 [06-06-2022 18:12:02]1500: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 18:12:04]1500: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 18:12:04]1500: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-1812/20220606-181202-Yp5toueYguF7uuGVn-0otQAAABo [06-06-2022 18:12:04]1500: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 18:12:04]1500: WAF :: fetched 3 new logs [06-06-2022 18:17:01]18955: WAF :: fetched 1 new logs [06-06-2022 18:27:02]21691: WAF :: fetched 1 new logs [06-06-2022 18:34:01]13928: WAF :: fetched 1 new logs [06-06-2022 18:37:01]24392: WAF :: fetched 1 new logs [06-06-2022 18:38:02]27735: WAF :: fetched 3 new logs [06-06-2022 18:41:02]6169: WAF :: fetched 4 new logs [06-06-2022 18:41:02]6169: Checking for user cron vulnerabilities [06-06-2022 18:42:01]9556: WAF :: fetched 3 new logs [06-06-2022 18:44:01]16418: Checking ditributed CMS bruteforce attacks [06-06-2022 18:49:01]1017: WAF :: fetched 3 new logs [06-06-2022 18:50:01]4037: WAF :: fetched 1 new logs [06-06-2022 18:53:02]14980: WAF :: fetched 1 new logs [06-06-2022 18:55:01]21751: WAF :: fetched 2 new logs [06-06-2022 18:56:02]25189: WAF :: fetched 1 new logs [06-06-2022 18:58:01]32052: WAF :: fetched 3 new logs [06-06-2022 19:00:01]6212: WAF :: fetched 2 new logs [06-06-2022 19:01:01]10666: WAF :: fetched 5 new logs [06-06-2022 19:02:01]14248: WAF :: fetched 1 new logs [06-06-2022 19:03:01]17756: WAF :: fetched 1 new logs [06-06-2022 19:04:02]21252: WAF :: fetched 1 new logs [06-06-2022 19:05:01]24609: WAF :: fetched 1 new logs [06-06-2022 19:07:02]31585: WAF :: fetched 1 new logs [06-06-2022 19:08:01]2553: WAF :: fetched 3 new logs [06-06-2022 19:09:01]5960: WAF :: fetched 4 new logs [06-06-2022 19:11:02]13375: WAF :: fetched 1 new logs [06-06-2022 19:12:02]16947: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654553522 [06-06-2022 19:12:02]16947: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 19:12:04]16947: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 19:12:04]16947: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-1912/20220606-191202-Yp57sl-UZO9sdG-9O0dhNAAAAAM [06-06-2022 19:12:04]16947: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 19:12:04]16947: WAF :: fetched 1 new logs [06-06-2022 19:13:01]20386: WAF :: fetched 3 new logs [06-06-2022 19:14:01]23803: WAF :: fetched 1 new logs [06-06-2022 19:15:01]27135: WAF :: fetched 1 new logs [06-06-2022 19:16:01]30590: WAF :: fetched 3 new logs [06-06-2022 19:17:02]1655: WAF :: fetched 2 new logs [06-06-2022 19:20:02]12013: WAF :: fetched 1 new logs [06-06-2022 19:25:02]29965: WAF :: fetched 1 new logs [06-06-2022 19:26:01]1080: WAF :: fetched 1 new logs [06-06-2022 19:31:01]18545: WAF :: fetched 2 new logs [06-06-2022 19:34:01]29470: WAF :: fetched 2 new logs [06-06-2022 19:36:01]3823: WAF :: fetched 3 new logs [06-06-2022 19:40:02]17902: WAF :: fetched 3 new logs [06-06-2022 19:40:02]17904: httpd.conf changed. Refreshing watchlist. [06-06-2022 19:41:01]21482: WAF :: fetched 1 new logs [06-06-2022 19:41:01]21482: Checking for user cron vulnerabilities [06-06-2022 19:43:02]28974: WAF :: fetched 3 new logs [06-06-2022 19:44:01]32254: Checking ditributed CMS bruteforce attacks [06-06-2022 19:44:02]32254: WAF :: fetched 1 new logs [06-06-2022 19:45:01]: Checking for definition updates [06-06-2022 19:45:04]3247: Updated virus defnition : malware.expert.ndb [06-06-2022 19:46:02]6971: httpd.conf changed. Refreshing watchlist. [06-06-2022 19:49:02]17030: httpd.conf changed. Refreshing watchlist. [06-06-2022 19:50:01]20475: WAF :: fetched 1 new logs [06-06-2022 19:53:01]31298: WAF :: fetched 2 new logs [06-06-2022 20:06:01]12227: WAF :: fetched 1 new logs [06-06-2022 20:10:01]25931: WAF :: fetched 2 new logs [06-06-2022 20:11:02]29475: WAF :: fetched 1 new logs [06-06-2022 20:12:02]1008: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654557122 [06-06-2022 20:12:02]1008: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 20:12:04]1008: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 20:12:04]1008: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-2012/20220606-201202-Yp6JwkTrkU_FGy9wLbnwggAAAAI [06-06-2022 20:12:04]1008: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-06-2022 20:12:04]1008: WAF :: fetched 1 new logs [06-06-2022 20:13:01]4508: WAF :: fetched 1 new logs [06-06-2022 20:17:02]18385: WAF :: fetched 2 new logs [06-06-2022 20:19:02]25068: WAF :: fetched 2 new logs [06-06-2022 20:20:01]28515: WAF :: fetched 3 new logs [06-06-2022 20:21:01]31921: WAF :: fetched 2 new logs [06-06-2022 20:22:02]3422: WAF :: fetched 5 new logs [06-06-2022 20:23:01]6952: WAF :: fetched 4 new logs [06-06-2022 20:24:02]10353: WAF :: fetched 1 new logs [06-06-2022 20:25:02]13690: WAF :: fetched 3 new logs [06-06-2022 20:26:01]17307: WAF :: fetched 3 new logs [06-06-2022 20:27:02]20758: WAF :: fetched 2 new logs [06-06-2022 20:28:01]24036: WAF :: fetched 1 new logs [06-06-2022 20:29:01]27403: WAF :: fetched 1 new logs [06-06-2022 20:31:02]1927: httpd.conf changed. Refreshing watchlist. [06-06-2022 20:33:02]9405: WAF :: fetched 1 new logs [06-06-2022 20:36:02]19530: WAF :: fetched 3 new logs [06-06-2022 20:39:01]29231: WAF :: fetched 1 new logs [06-06-2022 20:41:02]3625: Checking for user cron vulnerabilities [06-06-2022 20:44:01]14133: Checking ditributed CMS bruteforce attacks [06-06-2022 20:51:01]5459: WAF :: fetched 1 new logs [06-06-2022 20:52:02]8849: WAF :: fetched 1 new logs [06-06-2022 20:54:01]16105: WAF :: fetched 2 new logs [06-06-2022 20:57:02]26382: WAF :: fetched 1 new logs [06-06-2022 21:02:01]11155: WAF :: fetched 2 new logs [06-06-2022 21:03:02]15130: WAF :: fetched 5 new logs [06-06-2022 21:07:02]28609: WAF :: fetched 2 new logs [06-06-2022 21:08:01]31926: WAF :: fetched 2 new logs [06-06-2022 21:12:02]13112: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654560722 [06-06-2022 21:12:02]13112: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 21:12:04]13112: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 21:12:04]13112: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-2112/20220606-211202-Yp6X0hQvqCp7jc7g88zcLQAAAAM [06-06-2022 21:12:04]13112: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 21:12:04]13112: WAF :: fetched 39 new logs [06-06-2022 21:14:02]20365: WAF :: fetched 1 new logs [06-06-2022 21:15:02]23777: WAF :: fetched 1 new logs [06-06-2022 21:22:02]15505: WAF :: fetched 1 new logs [06-06-2022 21:23:01]19270: WAF :: fetched 1 new logs [06-06-2022 21:26:01]29439: WAF :: fetched 1 new logs [06-06-2022 21:27:02]453: WAF :: fetched 1 new logs [06-06-2022 21:28:01]3847: WAF :: fetched 1 new logs [06-06-2022 21:29:01]7198: WAF :: fetched 1 new logs [06-06-2022 21:31:01]13530: WAF :: fetched 2 new logs [06-06-2022 21:32:01]17082: WAF :: fetched 1 new logs [06-06-2022 21:33:02]20407: WAF :: fetched 1 new logs [06-06-2022 21:35:02]27650: WAF :: fetched 1 new logs [06-06-2022 21:39:02]8762: WAF :: fetched 1 new logs [06-06-2022 21:41:02]15580: Checking for user cron vulnerabilities [06-06-2022 21:44:01]25922: Checking ditributed CMS bruteforce attacks [06-06-2022 21:45:01]29422: WAF :: fetched 1 new logs [06-06-2022 21:45:01]29419: httpd.conf changed. Refreshing watchlist. [06-06-2022 21:51:01]17348: WAF :: fetched 1 new logs [06-06-2022 21:58:01]8890: WAF :: fetched 2 new logs [06-06-2022 21:59:02]12165: WAF :: fetched 1 new logs [06-06-2022 22:00:01]15465: WAF :: fetched 3 new logs [06-06-2022 22:01:02]19281: WAF :: fetched 4 new logs [06-06-2022 22:06:01]4294: WAF :: fetched 1 new logs [06-06-2022 22:07:02]7679: WAF :: fetched 1 new logs [06-06-2022 22:07:09]7683: Performing Domain reputation checks [06-06-2022 22:12:01]24661: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654564321 [06-06-2022 22:12:01]24661: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 22:12:03]24661: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 22:12:03]24661: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-2212/20220606-221201-Yp6l4eUcSF2PcIuIoRMSLAAAAAU [06-06-2022 22:12:03]24661: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 22:12:03]24661: WAF :: fetched 2 new logs [06-06-2022 22:13:02]28044: WAF :: fetched 2 new logs [06-06-2022 22:15:02]2854: WAF :: fetched 1 new logs [06-06-2022 22:17:01]9732: WAF :: fetched 2 new logs [06-06-2022 22:18:02]13126: WAF :: fetched 2 new logs [06-06-2022 22:19:01]16593: WAF :: fetched 1 new logs [06-06-2022 22:32:02]28691: WAF :: fetched 3 new logs [06-06-2022 22:36:01]10479: httpd.conf changed. Refreshing watchlist. [06-06-2022 22:37:01]13961: WAF :: fetched 2 new logs [06-06-2022 22:41:01]27723: Checking for user cron vulnerabilities [06-06-2022 22:42:01]31226: WAF :: fetched 1 new logs [06-06-2022 22:43:02]2217: WAF :: fetched 1 new logs [06-06-2022 22:44:01]6057: Checking ditributed CMS bruteforce attacks [06-06-2022 22:47:02]18905: WAF :: fetched 2 new logs [06-06-2022 22:48:01]21788: WAF :: fetched 9 new logs [06-06-2022 22:49:01]24670: WAF :: fetched 8 new logs [06-06-2022 22:50:02]27354: WAF :: fetched 12 new logs [06-06-2022 22:51:01]30049: WAF :: fetched 8 new logs [06-06-2022 22:52:01]359: WAF :: fetched 8 new logs [06-06-2022 22:53:02]3160: WAF :: fetched 8 new logs [06-06-2022 22:54:01]5875: WAF :: fetched 4 new logs [06-06-2022 22:55:02]8565: WAF :: fetched 9 new logs [06-06-2022 22:56:01]11231: WAF :: fetched 6 new logs [06-06-2022 22:57:01]13959: WAF :: fetched 7 new logs [06-06-2022 22:58:01]16596: WAF :: fetched 8 new logs [06-06-2022 22:59:01]19213: WAF :: fetched 10 new logs [06-06-2022 23:00:02]21632: WAF :: fetched 8 new logs [06-06-2022 23:01:01]24785: WAF :: fetched 8 new logs [06-06-2022 23:02:02]27538: WAF :: fetched 10 new logs [06-06-2022 23:03:01]30201: WAF :: fetched 10 new logs [06-06-2022 23:04:02]372: WAF :: fetched 10 new logs [06-06-2022 23:05:02]3096: WAF :: fetched 9 new logs [06-06-2022 23:06:02]5896: WAF :: fetched 11 new logs [06-06-2022 23:07:01]8689: WAF :: fetched 7 new logs [06-06-2022 23:07:38]8851: Performed RBL check for 23.111.136.34. [06-06-2022 23:08:02]11353: WAF :: fetched 10 new logs [06-06-2022 23:09:01]14123: WAF :: fetched 10 new logs [06-06-2022 23:09:01]14127: httpd.conf changed. Refreshing watchlist. [06-06-2022 23:10:02]16844: WAF :: fetched 13 new logs [06-06-2022 23:10:02]16843: httpd.conf changed. Refreshing watchlist. [06-06-2022 23:11:01]19515: WAF :: fetched 6 new logs [06-06-2022 23:12:02]22337: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654567922 [06-06-2022 23:12:02]22337: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-06-2022 23:12:04]22337: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-06-2022 23:12:04]22337: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220606/20220606-2312/20220606-231202-Yp6z8nIMlGDVYASCgaw4RwAAADU [06-06-2022 23:12:04]22337: WAF :: No suitable log file found. Using SQLite.. [06-06-2022 23:12:04]22337: WAF :: fetched 9 new logs [06-06-2022 23:13:01]25063: WAF :: fetched 10 new logs [06-06-2022 23:14:01]27732: WAF :: fetched 9 new logs [06-06-2022 23:15:01]30397: WAF :: fetched 9 new logs [06-06-2022 23:16:02]731: WAF :: fetched 8 new logs [06-06-2022 23:17:01]3506: WAF :: fetched 8 new logs [06-06-2022 23:18:02]6285: WAF :: fetched 10 new logs [06-06-2022 23:19:01]8674: WAF :: fetched 8 new logs [06-06-2022 23:20:02]11684: WAF :: fetched 12 new logs [06-06-2022 23:21:01]14399: WAF :: fetched 7 new logs [06-06-2022 23:22:02]17152: WAF :: fetched 11 new logs [06-06-2022 23:23:01]19817: WAF :: fetched 5 new logs [06-06-2022 23:24:01]22485: WAF :: fetched 11 new logs [06-06-2022 23:25:01]25105: WAF :: fetched 7 new logs [06-06-2022 23:26:02]27812: WAF :: fetched 6 new logs [06-06-2022 23:27:01]30468: WAF :: fetched 9 new logs [06-06-2022 23:28:01]702: WAF :: fetched 14 new logs [06-06-2022 23:29:02]3430: WAF :: fetched 16 new logs [06-06-2022 23:30:01]6164: WAF :: fetched 9 new logs [06-06-2022 23:31:02]8850: WAF :: fetched 7 new logs [06-06-2022 23:32:01]11567: WAF :: fetched 6 new logs [06-06-2022 23:33:01]14231: WAF :: fetched 8 new logs [06-06-2022 23:34:01]16858: WAF :: fetched 8 new logs [06-06-2022 23:35:02]19481: WAF :: fetched 10 new logs [06-06-2022 23:36:02]22154: WAF :: fetched 12 new logs [06-06-2022 23:37:01]24806: WAF :: fetched 12 new logs [06-06-2022 23:38:01]27481: WAF :: fetched 4 new logs [06-06-2022 23:39:02]30192: WAF :: fetched 10 new logs [06-06-2022 23:40:02]365: WAF :: fetched 10 new logs [06-06-2022 23:41:02]3147: WAF :: fetched 6 new logs [06-06-2022 23:41:02]3147: Checking for user cron vulnerabilities [06-06-2022 23:42:01]5851: WAF :: fetched 11 new logs [06-06-2022 23:43:01]8580: WAF :: fetched 6 new logs [06-06-2022 23:44:01]11281: Checking ditributed CMS bruteforce attacks [06-06-2022 23:44:02]11281: WAF :: fetched 10 new logs [06-06-2022 23:45:01]13891: WAF :: fetched 6 new logs [06-06-2022 23:46:01]16566: WAF :: fetched 9 new logs [06-06-2022 23:47:01]19173: WAF :: fetched 7 new logs [06-06-2022 23:48:02]21910: WAF :: fetched 17 new logs [06-06-2022 23:49:01]24594: WAF :: fetched 3 new logs [06-06-2022 23:50:02]27310: WAF :: fetched 8 new logs [06-06-2022 23:51:02]30028: WAF :: fetched 12 new logs [06-06-2022 23:52:01]32665: WAF :: fetched 10 new logs [06-06-2022 23:53:01]3044: WAF :: fetched 10 new logs [06-06-2022 23:54:01]5774: WAF :: fetched 3 new logs [06-06-2022 23:55:02]8500: httpd.conf changed. Refreshing watchlist. [06-06-2022 23:56:01]11182: WAF :: fetched 1 new logs [06-06-2022 23:59:01]19238: WAF :: fetched 2 new logs [07-06-2022 00:01:02]24944: httpd.conf changed. Refreshing watchlist. [07-06-2022 00:01:04]24937: Sending daily report for June 7, 2022 [07-06-2022 00:05:01]3348: WAF :: fetched 9 new logs [07-06-2022 00:05:01]3348: Deleted 0 entries older than 6 MONTH from scanner_logs [07-06-2022 00:05:01]3348: Deleted 0 files from Quarantine [07-06-2022 00:06:02]6115: WAF :: fetched 1 new logs [07-06-2022 00:07:01]8765: WAF :: fetched 6 new logs [07-06-2022 00:10:01]16716: WAF :: fetched 1 new logs [07-06-2022 00:11:01]19387: WAF :: fetched 1 new logs [07-06-2022 00:12:02]22032: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654571522 [07-06-2022 00:12:02]22032: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 00:12:04]22032: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 00:12:04]22032: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-0012/20220607-001202-Yp7CAjeKcizs3Lpd1d-QYAAAACM [07-06-2022 00:12:04]22032: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 00:12:04]22032: WAF :: fetched 2 new logs [07-06-2022 00:20:01]11147: WAF :: fetched 7 new logs [07-06-2022 00:21:01]13801: WAF :: fetched 2 new logs [07-06-2022 00:22:02]16496: WAF :: fetched 5 new logs [07-06-2022 00:23:01]19215: WAF :: fetched 1 new logs [07-06-2022 00:24:02]21897: WAF :: fetched 3 new logs [07-06-2022 00:25:01]24533: WAF :: fetched 2 new logs [07-06-2022 00:26:01]27259: WAF :: fetched 11 new logs [07-06-2022 00:34:02]16196: WAF :: fetched 1 new logs [07-06-2022 00:37:02]24136: WAF :: fetched 10 new logs [07-06-2022 00:39:02]29514: WAF :: fetched 11 new logs [07-06-2022 00:41:01]2403: Checking for user cron vulnerabilities [07-06-2022 00:44:01]10472: Checking ditributed CMS bruteforce attacks [07-06-2022 00:45:01]: Checking for software updates [07-06-2022 00:45:02]13132: WAF :: fetched 1 new logs [07-06-2022 00:46:01]15775: WAF :: fetched 1 new logs [07-06-2022 00:48:01]21112: WAF :: fetched 1 new logs [07-06-2022 00:50:02]26391: WAF :: fetched 5 new logs [07-06-2022 00:53:01]1996: WAF :: fetched 1 new logs [07-06-2022 00:58:01]15277: WAF :: fetched 1 new logs [07-06-2022 00:59:02]17872: WAF :: fetched 2 new logs [07-06-2022 01:04:02]32356: WAF :: fetched 2 new logs [07-06-2022 01:05:01]2982: WAF :: fetched 1 new logs [07-06-2022 01:06:01]5946: WAF :: fetched 2 new logs [07-06-2022 01:08:01]11651: WAF :: fetched 1 new logs [07-06-2022 01:09:01]14298: WAF :: fetched 1 new logs [07-06-2022 01:10:02]16952: WAF :: fetched 2 new logs [07-06-2022 01:11:02]19819: WAF :: fetched 3 new logs [07-06-2022 01:12:01]22600: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654575121 [07-06-2022 01:12:01]22600: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 01:12:03]22600: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 01:12:03]22600: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-0112/20220607-011201-Yp7QEU7NgEFXAv6hRKiOmwAAABU [07-06-2022 01:12:03]22600: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-06-2022 01:12:04]22600: WAF :: fetched 1 new logs [07-06-2022 01:15:01]30987: WAF :: fetched 2 new logs [07-06-2022 01:17:01]3922: WAF :: fetched 3 new logs [07-06-2022 01:19:01]9693: WAF :: fetched 8 new logs [07-06-2022 01:20:02]12366: WAF :: fetched 4 new logs [07-06-2022 01:21:01]15045: WAF :: fetched 4 new logs [07-06-2022 01:22:01]17889: httpd.conf changed. Refreshing watchlist. [07-06-2022 01:23:02]20681: WAF :: fetched 4 new logs [07-06-2022 01:24:01]23406: WAF :: fetched 181 new logs [07-06-2022 01:25:02]26400: WAF :: fetched 75 new logs [07-06-2022 01:26:02]29401: httpd.conf changed. Refreshing watchlist. [07-06-2022 01:33:01]16966: WAF :: fetched 1 new logs [07-06-2022 01:39:01]2009: WAF :: fetched 2 new logs [07-06-2022 01:40:02]5044: WAF :: fetched 1 new logs [07-06-2022 01:41:01]7755: Checking for user cron vulnerabilities [07-06-2022 01:42:02]10860: WAF :: fetched 6 new logs [07-06-2022 01:43:01]13737: WAF :: fetched 2 new logs [07-06-2022 01:44:02]16612: Checking ditributed CMS bruteforce attacks [07-06-2022 01:44:02]16612: WAF :: fetched 4 new logs [07-06-2022 01:45:01]: Checking for definition updates [07-06-2022 01:45:01]19772: WAF :: fetched 1 new logs [07-06-2022 01:46:01]22748: WAF :: fetched 1 new logs [07-06-2022 01:49:02]31051: WAF :: fetched 2 new logs [07-06-2022 01:51:01]4443: WAF :: fetched 2 new logs [07-06-2022 01:56:02]18104: WAF :: fetched 4 new logs [07-06-2022 01:58:01]23584: httpd.conf changed. Refreshing watchlist. [07-06-2022 02:00:01]28977: WAF :: fetched 3 new logs [07-06-2022 02:01:02]32056: WAF :: fetched 1 new logs [07-06-2022 02:02:01]2319: WAF :: fetched 1 new logs [07-06-2022 02:08:01]18416: WAF :: fetched 7 new logs [07-06-2022 02:09:02]21075: WAF :: fetched 1 new logs [07-06-2022 02:11:02]26401: WAF :: fetched 17 new logs [07-06-2022 02:12:02]28996: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654578722 [07-06-2022 02:12:02]28996: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 02:12:04]28996: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 02:12:04]28996: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-0212/20220607-021202-Yp7eIpPSAW9Ml2HyPv3nyAAAAAA [07-06-2022 02:12:04]28996: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 02:12:04]28996: WAF :: fetched 297 new logs [07-06-2022 02:13:01]31714: WAF :: fetched 25 new logs [07-06-2022 02:14:01]2001: WAF :: fetched 28 new logs [07-06-2022 02:15:01]4687: WAF :: fetched 34 new logs [07-06-2022 02:16:02]7383: WAF :: fetched 22 new logs [07-06-2022 02:17:01]10001: WAF :: fetched 2 new logs [07-06-2022 02:18:02]12722: WAF :: fetched 1 new logs [07-06-2022 02:19:02]15347: WAF :: fetched 1 new logs [07-06-2022 02:31:01]14879: WAF :: fetched 1 new logs [07-06-2022 02:33:02]20253: WAF :: fetched 1 new logs [07-06-2022 02:34:01]22859: WAF :: fetched 2 new logs [07-06-2022 02:35:02]25499: WAF :: fetched 1 new logs [07-06-2022 02:36:01]28189: WAF :: fetched 1 new logs [07-06-2022 02:39:02]5111: WAF :: fetched 1 new logs [07-06-2022 02:40:01]7928: WAF :: fetched 1 new logs [07-06-2022 02:41:02]10655: Checking for user cron vulnerabilities [07-06-2022 02:42:01]13105: WAF :: fetched 2 new logs [07-06-2022 02:44:01]18585: Checking ditributed CMS bruteforce attacks [07-06-2022 02:44:01]18585: WAF :: fetched 1 new logs [07-06-2022 02:47:02]26734: WAF :: fetched 1 new logs [07-06-2022 02:48:01]29589: WAF :: fetched 4 new logs [07-06-2022 02:49:01]32440: WAF :: fetched 1 new logs [07-06-2022 02:51:01]5588: WAF :: fetched 28 new logs [07-06-2022 02:52:02]8334: WAF :: fetched 87 new logs [07-06-2022 02:53:01]11526: WAF :: fetched 7 new logs [07-06-2022 02:53:02]11527: Updated license status via CDN [07-06-2022 02:54:01]14434: WAF :: fetched 1 new logs [07-06-2022 02:55:02]17096: WAF :: fetched 1 new logs [07-06-2022 02:57:02]22621: WAF :: fetched 1 new logs [07-06-2022 02:58:01]25416: WAF :: fetched 4 new logs [07-06-2022 02:59:02]28543: WAF :: fetched 3 new logs [07-06-2022 03:00:01]30868: WAF :: fetched 3 new logs [07-06-2022 03:00:04]30868: Found and updated 32 CMS installations [07-06-2022 03:01:01]1648: WAF :: fetched 3 new logs [07-06-2022 03:02:02]4583: WAF :: fetched 14 new logs [07-06-2022 03:03:00]30868: Sending CMS version vulnerability report emails to cpanel users [07-06-2022 03:03:01]7514: WAF :: fetched 4 new logs [07-06-2022 03:03:03]30868: Checking wordpress installations for suspicious directories [07-06-2022 03:04:24]7550: Sending CMS version vulnerability report emails to cpanel users [07-06-2022 03:04:27]7550: Checking wordpress installations for suspicious directories [07-06-2022 03:06:01]16099: WAF :: fetched 1 new logs [07-06-2022 03:07:02]18715: WAF :: fetched 4 new logs [07-06-2022 03:08:01]21416: WAF :: fetched 1 new logs [07-06-2022 03:10:02]26642: WAF :: fetched 1 new logs [07-06-2022 03:12:02]29428: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654582322 [07-06-2022 03:12:02]29428: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 03:12:04]29428: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 03:12:04]29428: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-0312/20220607-031202-Yp7sMhb_fye8akweQhYxwwAAAA0 [07-06-2022 03:12:04]29428: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 03:12:04]29428: WAF :: fetched 1 new logs [07-06-2022 03:13:01]18943: WAF :: fetched 3 new logs [07-06-2022 03:14:01]31811: WAF :: fetched 1 new logs [07-06-2022 03:15:02]9874: WAF :: fetched 6 new logs [07-06-2022 03:16:01]12808: WAF :: fetched 3 new logs [07-06-2022 03:17:02]15478: WAF :: fetched 7 new logs [07-06-2022 03:18:01]18322: WAF :: fetched 6 new logs [07-06-2022 03:19:02]21186: WAF :: fetched 8 new logs [07-06-2022 03:20:01]23952: WAF :: fetched 3 new logs [07-06-2022 03:21:02]26781: WAF :: fetched 1 new logs [07-06-2022 03:22:01]29513: WAF :: fetched 4 new logs [07-06-2022 03:23:01]32531: WAF :: fetched 2 new logs [07-06-2022 03:24:02]3007: WAF :: fetched 7 new logs [07-06-2022 03:25:01]5737: WAF :: fetched 5 new logs [07-06-2022 03:26:02]8434: WAF :: fetched 3 new logs [07-06-2022 03:27:01]11076: WAF :: fetched 4 new logs [07-06-2022 03:28:01]13769: WAF :: fetched 3 new logs [07-06-2022 03:29:02]16425: WAF :: fetched 5 new logs [07-06-2022 03:30:01]19044: WAF :: fetched 3 new logs [07-06-2022 03:31:02]21725: WAF :: fetched 2 new logs [07-06-2022 03:32:01]24338: WAF :: fetched 1 new logs [07-06-2022 03:33:01]27054: WAF :: fetched 2 new logs [07-06-2022 03:34:02]29717: WAF :: fetched 5 new logs [07-06-2022 03:35:01]32326: WAF :: fetched 4 new logs [07-06-2022 03:36:01]2667: WAF :: fetched 5 new logs [07-06-2022 03:37:02]5405: WAF :: fetched 2 new logs [07-06-2022 03:38:01]8080: WAF :: fetched 1 new logs [07-06-2022 03:40:02]13367: WAF :: fetched 1 new logs [07-06-2022 03:41:01]16030: Checking for user cron vulnerabilities [07-06-2022 03:42:01]18694: WAF :: fetched 1 new logs [07-06-2022 03:44:01]23982: Checking ditributed CMS bruteforce attacks [07-06-2022 03:46:01]29285: WAF :: fetched 4 new logs [07-06-2022 03:47:01]31915: WAF :: fetched 1 new logs [07-06-2022 03:49:01]4995: WAF :: fetched 3 new logs [07-06-2022 03:50:02]7627: WAF :: fetched 4 new logs [07-06-2022 03:51:01]10310: WAF :: fetched 4 new logs [07-06-2022 03:52:01]12919: WAF :: fetched 1 new logs [07-06-2022 03:53:02]15637: WAF :: fetched 2 new logs [07-06-2022 03:56:02]23544: WAF :: fetched 4 new logs [07-06-2022 03:57:01]26155: WAF :: fetched 2 new logs [07-06-2022 03:58:01]28849: WAF :: fetched 1 new logs [07-06-2022 04:00:02]1413: WAF :: fetched 2 new logs [07-06-2022 04:04:01]12714: httpd.conf changed. Refreshing watchlist. [07-06-2022 04:08:02]23322: WAF :: fetched 4 new logs [07-06-2022 04:09:01]25964: WAF :: fetched 1 new logs [07-06-2022 04:12:01]1461: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654585921 [07-06-2022 04:12:01]1461: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 04:12:03]1461: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 04:12:03]1461: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-0412/20220607-041201-Yp76QUlVOchhFalrKD1EWQAAAAQ [07-06-2022 04:12:03]1461: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 04:12:04]1461: WAF :: fetched 1 new logs [07-06-2022 04:14:01]6861: WAF :: fetched 9 new logs [07-06-2022 04:15:02]9513: WAF :: fetched 13 new logs [07-06-2022 04:16:01]12164: WAF :: fetched 7 new logs [07-06-2022 04:17:01]14790: WAF :: fetched 9 new logs [07-06-2022 04:18:02]17557: WAF :: fetched 6 new logs [07-06-2022 04:19:01]20152: WAF :: fetched 5 new logs [07-06-2022 04:20:02]22784: WAF :: fetched 9 new logs [07-06-2022 04:21:01]25445: WAF :: fetched 5 new logs [07-06-2022 04:22:01]28071: WAF :: fetched 11 new logs [07-06-2022 04:23:01]30739: WAF :: fetched 10 new logs [07-06-2022 04:24:02]979: WAF :: fetched 8 new logs [07-06-2022 04:25:01]3636: WAF :: fetched 11 new logs [07-06-2022 04:26:01]6352: WAF :: fetched 11 new logs [07-06-2022 04:27:02]9005: WAF :: fetched 22 new logs [07-06-2022 04:28:01]11663: WAF :: fetched 16 new logs [07-06-2022 04:29:02]14319: WAF :: fetched 22 new logs [07-06-2022 04:30:02]16943: WAF :: fetched 24 new logs [07-06-2022 04:31:01]19571: WAF :: fetched 21 new logs [07-06-2022 04:32:01]22197: WAF :: fetched 24 new logs [07-06-2022 04:33:02]24895: WAF :: fetched 3 new logs [07-06-2022 04:37:01]3050: WAF :: fetched 9 new logs [07-06-2022 04:38:02]5770: WAF :: fetched 14 new logs [07-06-2022 04:39:01]8447: WAF :: fetched 4 new logs [07-06-2022 04:40:02]11113: WAF :: fetched 5 new logs [07-06-2022 04:41:02]13788: WAF :: fetched 4 new logs [07-06-2022 04:41:02]13788: Checking for user cron vulnerabilities [07-06-2022 04:42:02]16397: WAF :: fetched 10 new logs [07-06-2022 04:43:01]18987: WAF :: fetched 3 new logs [07-06-2022 04:44:02]21662: Checking ditributed CMS bruteforce attacks [07-06-2022 04:44:02]21662: WAF :: fetched 9 new logs [07-06-2022 04:45:01]24246: WAF :: fetched 7 new logs [07-06-2022 04:46:02]26909: WAF :: fetched 7 new logs [07-06-2022 04:47:01]29501: WAF :: fetched 10 new logs [07-06-2022 04:48:01]32107: WAF :: fetched 9 new logs [07-06-2022 04:49:02]2422: WAF :: fetched 10 new logs [07-06-2022 04:50:01]5097: WAF :: fetched 10 new logs [07-06-2022 04:51:02]7771: WAF :: fetched 6 new logs [07-06-2022 04:52:02]10323: WAF :: fetched 12 new logs [07-06-2022 04:53:01]12983: WAF :: fetched 10 new logs [07-06-2022 04:54:02]15690: WAF :: fetched 11 new logs [07-06-2022 04:55:01]18258: WAF :: fetched 7 new logs [07-06-2022 04:56:02]20915: WAF :: fetched 10 new logs [07-06-2022 04:57:02]23503: WAF :: fetched 9 new logs [07-06-2022 04:58:01]26084: WAF :: fetched 5 new logs [07-06-2022 04:59:02]28820: WAF :: fetched 5 new logs [07-06-2022 05:00:01]31140: WAF :: fetched 10 new logs [07-06-2022 05:01:01]1866: WAF :: fetched 5 new logs [07-06-2022 05:01:41]1877: Starting daily scan on files updated in last 24 hrs [07-06-2022 05:02:02]4614: WAF :: fetched 10 new logs [07-06-2022 05:03:01]7200: WAF :: fetched 8 new logs [07-06-2022 05:04:02]9906: WAF :: fetched 1 new logs [07-06-2022 05:05:02]12487: WAF :: fetched 6 new logs [07-06-2022 05:06:01]15147: WAF :: fetched 9 new logs [07-06-2022 05:07:02]17733: WAF :: fetched 11 new logs [07-06-2022 05:08:01]20304: WAF :: fetched 9 new logs [07-06-2022 05:09:02]23004: WAF :: fetched 6 new logs [07-06-2022 05:10:02]25610: WAF :: fetched 8 new logs [07-06-2022 05:11:02]28226: WAF :: fetched 5 new logs [07-06-2022 05:12:01]30831: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654589521 [07-06-2022 05:12:01]30831: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 05:12:03]30831: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 05:12:04]30831: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-0512/20220607-051201-Yp8IUbXGOaUbPWX6stmQRAAAAAU [07-06-2022 05:12:04]30831: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 05:12:04]30831: WAF :: fetched 9 new logs [07-06-2022 05:13:02]1082: WAF :: fetched 1 new logs [07-06-2022 05:14:01]3818: WAF :: fetched 4 new logs [07-06-2022 05:15:01]6453: WAF :: fetched 2 new logs [07-06-2022 05:16:02]9141: WAF :: fetched 1 new logs [07-06-2022 05:17:01]11737: WAF :: fetched 3 new logs [07-06-2022 05:18:02]14362: WAF :: fetched 102 new logs [07-06-2022 05:19:02]17034: WAF :: fetched 71 new logs [07-06-2022 05:20:01]19643: WAF :: fetched 8 new logs [07-06-2022 05:21:02]22327: WAF :: fetched 11 new logs [07-06-2022 05:22:01]24895: WAF :: fetched 6 new logs [07-06-2022 05:24:02]30198: WAF :: fetched 1 new logs [07-06-2022 05:37:02]32514: WAF :: fetched 1 new logs [07-06-2022 05:38:01]2781: WAF :: fetched 1 new logs [07-06-2022 05:39:02]5633: WAF :: fetched 1 new logs [07-06-2022 05:40:02]8348: WAF :: fetched 5 new logs [07-06-2022 05:41:01]11054: WAF :: fetched 2 new logs [07-06-2022 05:41:01]11054: Checking for user cron vulnerabilities [07-06-2022 05:42:02]13753: WAF :: fetched 1 new logs [07-06-2022 05:43:01]16340: WAF :: fetched 2 new logs [07-06-2022 05:44:02]19082: Checking ditributed CMS bruteforce attacks [07-06-2022 05:44:02]19082: WAF :: fetched 3 new logs [07-06-2022 05:45:01]21559: WAF :: fetched 1 new logs [07-06-2022 05:46:02]24373: WAF :: fetched 2 new logs [07-06-2022 05:47:02]26963: WAF :: fetched 2 new logs [07-06-2022 05:48:01]29620: WAF :: fetched 1 new logs [07-06-2022 05:49:02]32350: WAF :: fetched 4 new logs [07-06-2022 05:50:01]2588: WAF :: fetched 2 new logs [07-06-2022 05:51:01]5350: WAF :: fetched 4 new logs [07-06-2022 05:52:02]8007: WAF :: fetched 3 new logs [07-06-2022 05:53:01]10617: WAF :: fetched 2 new logs [07-06-2022 05:54:02]13378: WAF :: fetched 5 new logs [07-06-2022 05:55:01]16029: WAF :: fetched 4 new logs [07-06-2022 05:57:02]21403: WAF :: fetched 1 new logs [07-06-2022 05:59:02]26747: WAF :: fetched 1 new logs [07-06-2022 06:00:02]29110: WAF :: fetched 3 new logs [07-06-2022 06:01:01]32284: WAF :: fetched 3 new logs [07-06-2022 06:02:02]2583: WAF :: fetched 1 new logs [07-06-2022 06:05:02]10736: WAF :: fetched 3 new logs [07-06-2022 06:08:01]18659: WAF :: fetched 1 new logs [07-06-2022 06:11:01]26729: WAF :: fetched 66 new logs [07-06-2022 06:12:02]29425: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654593122 [07-06-2022 06:12:02]29425: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 06:12:04]29425: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 06:12:04]29425: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-0612/20220607-061202-Yp8WYiqAVFRyY0AdmGOi4wAAAA0 [07-06-2022 06:12:04]29425: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 06:12:04]29425: WAF :: fetched 164 new logs [07-06-2022 06:14:02]2398: WAF :: fetched 1 new logs [07-06-2022 06:20:02]18466: WAF :: fetched 1 new logs [07-06-2022 06:21:01]21116: WAF :: fetched 3 new logs [07-06-2022 06:22:02]23785: WAF :: fetched 1 new logs [07-06-2022 06:24:01]29164: WAF :: fetched 1 new logs [07-06-2022 06:25:02]31873: WAF :: fetched 23 new logs [07-06-2022 06:30:01]13032: WAF :: fetched 6 new logs [07-06-2022 06:34:02]23760: WAF :: fetched 1 new logs [07-06-2022 06:35:01]26386: WAF :: fetched 3 new logs [07-06-2022 06:37:02]31684: WAF :: fetched 2 new logs [07-06-2022 06:38:01]1868: WAF :: fetched 3 new logs [07-06-2022 06:39:02]4679: WAF :: fetched 1 new logs [07-06-2022 06:41:01]9998: Checking for user cron vulnerabilities [07-06-2022 06:43:01]15218: WAF :: fetched 3 new logs [07-06-2022 06:44:01]17900: Checking ditributed CMS bruteforce attacks [07-06-2022 06:45:01]20523: WAF :: fetched 1 new logs [07-06-2022 06:48:01]28399: WAF :: fetched 1 new logs [07-06-2022 06:49:02]31135: WAF :: fetched 1 new logs [07-06-2022 06:51:02]4150: WAF :: fetched 4 new logs [07-06-2022 06:52:02]6772: WAF :: fetched 6 new logs [07-06-2022 06:53:01]9434: WAF :: fetched 5 new logs [07-06-2022 06:55:01]14780: WAF :: fetched 2 new logs [07-06-2022 06:56:01]17471: WAF :: fetched 1 new logs [07-06-2022 06:57:02]20124: WAF :: fetched 2 new logs [07-06-2022 06:58:01]22754: WAF :: fetched 5 new logs [07-06-2022 06:59:02]25456: WAF :: fetched 1 new logs [07-06-2022 07:00:02]27764: WAF :: fetched 1 new logs [07-06-2022 07:01:01]30939: WAF :: fetched 2 new logs [07-06-2022 07:08:01]17417: WAF :: fetched 4 new logs [07-06-2022 07:09:01]20161: WAF :: fetched 8 new logs [07-06-2022 07:11:01]25376: WAF :: fetched 1 new logs [07-06-2022 07:12:02]28300: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654596722 [07-06-2022 07:12:02]28300: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 07:12:04]28300: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 07:12:04]28300: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-0712/20220607-071202-Yp8kcoLVYKgr112XTxFQVwAAAAg [07-06-2022 07:12:04]28300: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 07:12:04]28300: WAF :: fetched 2 new logs [07-06-2022 07:13:01]30916: WAF :: fetched 1 new logs [07-06-2022 07:15:01]4031: WAF :: fetched 1 new logs [07-06-2022 07:16:01]6811: WAF :: fetched 5 new logs [07-06-2022 07:17:02]9474: WAF :: fetched 1 new logs [07-06-2022 07:20:01]17574: WAF :: fetched 1 new logs [07-06-2022 07:21:01]20276: WAF :: fetched 1 new logs [07-06-2022 07:22:02]22966: WAF :: fetched 4 new logs [07-06-2022 07:23:01]25577: WAF :: fetched 2 new logs [07-06-2022 07:24:01]28276: WAF :: fetched 1 new logs [07-06-2022 07:30:01]11855: WAF :: fetched 1 new logs [07-06-2022 07:35:01]25152: WAF :: fetched 3 new logs [07-06-2022 07:37:02]30485: WAF :: fetched 2 new logs [07-06-2022 07:38:01]719: WAF :: fetched 1 new logs [07-06-2022 07:39:02]3556: WAF :: fetched 2 new logs [07-06-2022 07:40:01]6217: WAF :: fetched 1 new logs [07-06-2022 07:41:01]8932: Checking for user cron vulnerabilities [07-06-2022 07:42:02]11559: WAF :: fetched 1 new logs [07-06-2022 07:43:01]14188: WAF :: fetched 5 new logs [07-06-2022 07:44:02]16920: Checking ditributed CMS bruteforce attacks [07-06-2022 07:44:02]16920: WAF :: fetched 3 new logs [07-06-2022 07:45:01]: Checking for definition updates [07-06-2022 07:45:01]19567: WAF :: fetched 1 new logs [07-06-2022 07:47:02]24882: WAF :: fetched 3 new logs [07-06-2022 07:53:02]8415: WAF :: fetched 2 new logs [07-06-2022 07:54:01]11136: WAF :: fetched 1 new logs [07-06-2022 07:56:01]16451: WAF :: fetched 1 new logs [07-06-2022 07:57:01]19154: WAF :: fetched 3 new logs [07-06-2022 07:58:02]21833: WAF :: fetched 3 new logs [07-06-2022 07:59:01]24534: WAF :: fetched 2 new logs [07-06-2022 08:00:02]26920: WAF :: fetched 3 new logs [07-06-2022 08:01:02]30079: WAF :: fetched 2 new logs [07-06-2022 08:02:01]32727: WAF :: fetched 1 new logs [07-06-2022 08:03:02]3006: WAF :: fetched 2 new logs [07-06-2022 08:04:01]5730: WAF :: fetched 3 new logs [07-06-2022 08:05:02]8362: WAF :: fetched 1 new logs [07-06-2022 08:11:01]24228: WAF :: fetched 2 new logs [07-06-2022 08:12:01]26880: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654600321 [07-06-2022 08:12:01]26880: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 08:12:03]26880: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 08:12:03]26880: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-0812/20220607-081201-Yp8ygS5n9ydO3-E557hsRAAAAAk [07-06-2022 08:12:03]26880: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-06-2022 08:12:04]26880: WAF :: fetched 1 new logs [07-06-2022 08:13:02]29594: WAF :: fetched 1 new logs [07-06-2022 08:14:01]32241: WAF :: fetched 1 new logs [07-06-2022 08:15:02]2604: WAF :: fetched 1 new logs [07-06-2022 08:16:01]5341: WAF :: fetched 2 new logs [07-06-2022 08:18:01]10594: WAF :: fetched 1 new logs [07-06-2022 08:19:01]13286: WAF :: fetched 1 new logs [07-06-2022 08:22:01]21139: WAF :: fetched 1 new logs [07-06-2022 08:23:02]23735: WAF :: fetched 1 new logs [07-06-2022 08:25:01]28980: WAF :: fetched 2 new logs [07-06-2022 08:30:02]9757: WAF :: fetched 1 new logs [07-06-2022 08:31:01]12386: WAF :: fetched 2 new logs [07-06-2022 08:38:01]30758: WAF :: fetched 1 new logs [07-06-2022 08:39:02]1097: WAF :: fetched 1 new logs [07-06-2022 08:40:04]3744: WAF :: fetched 2417 new logs [07-06-2022 08:41:04]6471: WAF :: fetched 2598 new logs [07-06-2022 08:41:04]6471: Checking for user cron vulnerabilities [07-06-2022 08:42:04]9135: WAF :: fetched 2533 new logs [07-06-2022 08:43:02]11788: WAF :: fetched 1044 new logs [07-06-2022 08:44:02]14506: Checking ditributed CMS bruteforce attacks [07-06-2022 08:44:02]14506: WAF :: fetched 3 new logs [07-06-2022 08:47:02]22338: WAF :: fetched 1 new logs [07-06-2022 08:53:02]6049: WAF :: fetched 2 new logs [07-06-2022 08:54:01]8767: WAF :: fetched 4 new logs [07-06-2022 08:55:02]11423: WAF :: fetched 1 new logs [07-06-2022 08:56:02]14062: WAF :: fetched 1 new logs [07-06-2022 08:59:02]22022: WAF :: fetched 5 new logs [07-06-2022 09:00:02]24393: WAF :: fetched 3 new logs [07-06-2022 09:01:01]27592: WAF :: fetched 1 new logs [07-06-2022 09:03:01]595: WAF :: fetched 1 new logs [07-06-2022 09:04:01]3443: WAF :: fetched 2 new logs [07-06-2022 09:05:02]6201: WAF :: fetched 3 new logs [07-06-2022 09:06:01]8914: WAF :: fetched 1 new logs [07-06-2022 09:07:02]11670: WAF :: fetched 41 new logs [07-06-2022 09:08:01]14335: WAF :: fetched 67 new logs [07-06-2022 09:09:02]17136: WAF :: fetched 68 new logs [07-06-2022 09:10:01]19848: WAF :: fetched 46 new logs [07-06-2022 09:11:01]22592: WAF :: fetched 2 new logs [07-06-2022 09:12:02]25331: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654603922 [07-06-2022 09:12:02]25331: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 09:12:04]25331: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 09:12:04]25331: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-0912/20220607-091202-Yp9AkmNgQdb_MqzGYk--WAAAABE [07-06-2022 09:12:04]25331: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 09:12:07]25331: WAF :: fetched 6249 new logs [07-06-2022 09:13:02]28017: WAF :: fetched 2 new logs [07-06-2022 09:16:02]3850: WAF :: fetched 2 new logs [07-06-2022 09:17:01]6523: WAF :: fetched 3 new logs [07-06-2022 09:19:01]11925: WAF :: fetched 2 new logs [07-06-2022 09:21:02]17399: WAF :: fetched 1 new logs [07-06-2022 09:22:01]20039: WAF :: fetched 1 new logs [07-06-2022 09:23:01]22709: WAF :: fetched 4 new logs [07-06-2022 09:24:02]25412: WAF :: fetched 2 new logs [07-06-2022 09:25:01]28061: WAF :: fetched 19 new logs [07-06-2022 09:26:01]30790: WAF :: fetched 4 new logs [07-06-2022 09:28:01]3803: WAF :: fetched 3 new logs [07-06-2022 09:30:02]9223: WAF :: fetched 1 new logs [07-06-2022 09:31:01]11950: WAF :: fetched 6 new logs [07-06-2022 09:40:02]3889: WAF :: fetched 1 new logs [07-06-2022 09:41:02]6683: Checking for user cron vulnerabilities [07-06-2022 09:42:01]9379: WAF :: fetched 3 new logs [07-06-2022 09:44:01]14758: Checking ditributed CMS bruteforce attacks [07-06-2022 09:46:01]20422: WAF :: fetched 1 new logs [07-06-2022 09:47:02]23092: WAF :: fetched 2 new logs [07-06-2022 09:48:01]25728: WAF :: fetched 2 new logs [07-06-2022 09:51:01]1242: WAF :: fetched 1 new logs [07-06-2022 09:52:02]4308: WAF :: fetched 4 new logs [07-06-2022 09:55:02]12360: WAF :: fetched 3 new logs [07-06-2022 09:57:02]17764: WAF :: fetched 1 new logs [07-06-2022 09:58:01]20063: WAF :: fetched 4 new logs [07-06-2022 10:01:02]28659: WAF :: fetched 4 new logs [07-06-2022 10:02:01]31338: WAF :: fetched 3 new logs [07-06-2022 10:03:01]1607: WAF :: fetched 2 new logs [07-06-2022 10:06:02]9842: WAF :: fetched 6 new logs [07-06-2022 10:08:01]15145: WAF :: fetched 7 new logs [07-06-2022 10:09:01]17830: WAF :: fetched 13 new logs [07-06-2022 10:10:02]20654: WAF :: fetched 1 new logs [07-06-2022 10:12:02]26043: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654607522 [07-06-2022 10:12:02]26043: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 10:12:04]26043: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 10:12:04]26043: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-1012/20220607-101202-Yp9Oot0DCDwLMkFLFszmHQAAACM [07-06-2022 10:12:04]26043: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 10:12:04]26043: WAF :: fetched 7 new logs [07-06-2022 10:15:02]1921: WAF :: fetched 1 new logs [07-06-2022 10:18:02]9948: WAF :: fetched 7 new logs [07-06-2022 10:20:02]15545: WAF :: fetched 1 new logs [07-06-2022 10:22:01]20989: WAF :: fetched 1 new logs [07-06-2022 10:24:01]26419: WAF :: fetched 1 new logs [07-06-2022 10:25:02]29215: WAF :: fetched 1 new logs [07-06-2022 10:27:01]2211: WAF :: fetched 1 new logs [07-06-2022 10:29:01]7690: WAF :: fetched 5 new logs [07-06-2022 10:30:01]10417: WAF :: fetched 2 new logs [07-06-2022 10:31:02]13177: WAF :: fetched 3 new logs [07-06-2022 10:33:01]18571: WAF :: fetched 1 new logs [07-06-2022 10:34:02]21285: WAF :: fetched 2 new logs [07-06-2022 10:35:01]24067: WAF :: fetched 2 new logs [07-06-2022 10:35:01]24062: httpd.conf changed. Refreshing watchlist. [07-06-2022 10:38:02]32192: WAF :: fetched 1 new logs [07-06-2022 10:39:01]2506: WAF :: fetched 2 new logs [07-06-2022 10:40:02]5367: WAF :: fetched 1 new logs [07-06-2022 10:41:01]8200: Checking for user cron vulnerabilities [07-06-2022 10:43:02]13637: WAF :: fetched 5 new logs [07-06-2022 10:44:01]16276: Checking ditributed CMS bruteforce attacks [07-06-2022 10:44:01]16276: WAF :: fetched 5 new logs [07-06-2022 10:45:02]19018: WAF :: fetched 8 new logs [07-06-2022 10:46:01]21765: WAF :: fetched 11 new logs [07-06-2022 10:47:02]24497: WAF :: fetched 7 new logs [07-06-2022 10:49:02]30016: WAF :: fetched 1 new logs [07-06-2022 10:49:02]30022: httpd.conf changed. Refreshing watchlist. [07-06-2022 10:50:01]309: WAF :: fetched 1 new logs [07-06-2022 10:53:02]8802: WAF :: fetched 6 new logs [07-06-2022 10:54:02]11524: WAF :: fetched 1 new logs [07-06-2022 10:55:02]14298: WAF :: fetched 3 new logs [07-06-2022 10:58:01]22363: WAF :: fetched 7 new logs [07-06-2022 11:00:02]27602: WAF :: fetched 3 new logs [07-06-2022 11:01:01]30793: WAF :: fetched 1 new logs [07-06-2022 11:02:02]1115: WAF :: fetched 2 new logs [07-06-2022 11:03:01]3838: WAF :: fetched 2 new logs [07-06-2022 11:04:01]6547: WAF :: fetched 1 new logs [07-06-2022 11:05:02]9325: WAF :: fetched 4 new logs [07-06-2022 11:06:01]12043: WAF :: fetched 4 new logs [07-06-2022 11:08:02]17453: WAF :: fetched 1 new logs [07-06-2022 11:08:14]14904: Performed RBL check for 23.111.136.34. [07-06-2022 11:12:02]28451: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654611122 [07-06-2022 11:12:02]28451: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 11:12:04]28451: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 11:12:04]28451: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-1112/20220607-111202-Yp9csjyYVcYtdQ_SFbGzjgAAAAA [07-06-2022 11:12:04]28451: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-06-2022 11:12:04]28451: WAF :: fetched 1 new logs [07-06-2022 11:13:01]31084: WAF :: fetched 1 new logs [07-06-2022 11:16:02]7034: WAF :: fetched 1 new logs [07-06-2022 11:17:02]9745: WAF :: fetched 5 new logs [07-06-2022 11:19:02]15097: WAF :: fetched 1 new logs [07-06-2022 11:20:01]17878: WAF :: fetched 8 new logs [07-06-2022 11:22:02]23322: WAF :: fetched 6 new logs [07-06-2022 11:22:27]20670: WAF :: fetched 4 new logs [07-06-2022 11:23:01]26022: WAF :: fetched 9 new logs [07-06-2022 11:24:02]28733: WAF :: fetched 5 new logs [07-06-2022 11:29:02]10011: WAF :: fetched 1 new logs [07-06-2022 11:31:02]15473: WAF :: fetched 2 new logs [07-06-2022 11:32:02]18217: WAF :: fetched 1 new logs [07-06-2022 11:39:01]4717: WAF :: fetched 1 new logs [07-06-2022 11:40:01]7466: WAF :: fetched 2 new logs [07-06-2022 11:41:01]10218: Checking for user cron vulnerabilities [07-06-2022 11:43:02]15539: WAF :: fetched 1 new logs [07-06-2022 11:44:01]18158: Checking ditributed CMS bruteforce attacks [07-06-2022 11:46:02]23821: WAF :: fetched 2 new logs [07-06-2022 11:47:01]26463: WAF :: fetched 1 new logs [07-06-2022 11:48:01]29209: WAF :: fetched 2 new logs [07-06-2022 11:49:02]31938: WAF :: fetched 2 new logs [07-06-2022 11:50:01]2392: WAF :: fetched 4 new logs [07-06-2022 11:52:02]7922: WAF :: fetched 4 new logs [07-06-2022 11:53:01]10615: WAF :: fetched 4 new logs [07-06-2022 11:56:02]18683: WAF :: fetched 1 new logs [07-06-2022 11:58:02]24013: httpd.conf changed. Refreshing watchlist. [07-06-2022 11:59:01]26634: WAF :: fetched 1 new logs [07-06-2022 12:00:01]29156: WAF :: fetched 2 new logs [07-06-2022 12:02:02]2711: WAF :: fetched 691 new logs [07-06-2022 12:03:01]5452: WAF :: fetched 190 new logs [07-06-2022 12:04:02]8181: WAF :: fetched 2 new logs [07-06-2022 12:06:01]14648: httpd.conf changed. Refreshing watchlist. [07-06-2022 12:07:02]17481: WAF :: fetched 2 new logs [07-06-2022 12:09:01]22806: httpd.conf changed. Refreshing watchlist. [07-06-2022 12:12:01]30966: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654614721 [07-06-2022 12:12:01]30966: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 12:12:03]30966: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 12:12:03]30966: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-1212/20220607-121201-Yp9qweHORvVHSvCdFsOS1QAAABU [07-06-2022 12:12:03]30966: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 12:12:04]30966: WAF :: fetched 746 new logs [07-06-2022 12:15:02]6934: httpd.conf changed. Refreshing watchlist. [07-06-2022 12:16:01]9633: WAF :: fetched 1 new logs [07-06-2022 12:17:02]12416: WAF :: fetched 4 new logs [07-06-2022 12:17:02]12418: httpd.conf changed. Refreshing watchlist. [07-06-2022 12:18:01]15164: WAF :: fetched 2 new logs [07-06-2022 12:19:01]17826: WAF :: fetched 2 new logs [07-06-2022 12:20:02]20697: WAF :: fetched 2 new logs [07-06-2022 12:20:02]20700: httpd.conf changed. Refreshing watchlist. [07-06-2022 12:21:01]23345: WAF :: fetched 1 new logs [07-06-2022 12:22:02]26079: WAF :: fetched 1 new logs [07-06-2022 12:24:01]31467: WAF :: fetched 6 new logs [07-06-2022 12:25:02]1822: WAF :: fetched 1 new logs [07-06-2022 12:27:01]7403: WAF :: fetched 2 new logs [07-06-2022 12:28:01]10040: WAF :: fetched 2 new logs [07-06-2022 12:29:01]12676: WAF :: fetched 4 new logs [07-06-2022 12:30:02]15471: WAF :: fetched 2 new logs [07-06-2022 12:31:02]18154: WAF :: fetched 5 new logs [07-06-2022 12:32:01]20855: WAF :: fetched 2 new logs [07-06-2022 12:34:01]26238: WAF :: fetched 2 new logs [07-06-2022 12:35:01]29148: WAF :: fetched 7 new logs [07-06-2022 12:36:01]32025: WAF :: fetched 12 new logs [07-06-2022 12:37:02]2459: WAF :: fetched 1 new logs [07-06-2022 12:38:01]5271: WAF :: fetched 1 new logs [07-06-2022 12:41:01]13483: WAF :: fetched 1 new logs [07-06-2022 12:41:01]13483: Checking for user cron vulnerabilities [07-06-2022 12:42:02]16147: WAF :: fetched 2 new logs [07-06-2022 12:43:01]18787: WAF :: fetched 1 new logs [07-06-2022 12:44:02]21441: Checking ditributed CMS bruteforce attacks [07-06-2022 12:44:02]21441: WAF :: fetched 2 new logs [07-06-2022 12:45:01]: Checking for software updates [07-06-2022 12:45:01]24155: WAF :: fetched 16 new logs [07-06-2022 12:46:02]26942: WAF :: fetched 1436 new logs [07-06-2022 12:47:02]29629: WAF :: fetched 8 new logs [07-06-2022 12:52:02]10842: WAF :: fetched 1 new logs [07-06-2022 12:56:01]21652: WAF :: fetched 1 new logs [07-06-2022 12:58:01]26919: WAF :: fetched 2 new logs [07-06-2022 12:59:01]29567: WAF :: fetched 2 new logs [07-06-2022 13:03:02]8416: WAF :: fetched 1 new logs [07-06-2022 13:09:01]25115: WAF :: fetched 2 new logs [07-06-2022 13:10:01]27987: WAF :: fetched 6 new logs [07-06-2022 13:11:01]30917: WAF :: fetched 4 new logs [07-06-2022 13:12:01]1201: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654618321 [07-06-2022 13:12:01]1201: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 13:12:03]1201: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 13:12:03]1201: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-1312/20220607-131201-Yp940SrAc9rEPoJGiya5KgAAABM [07-06-2022 13:12:03]1201: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-06-2022 13:12:03]1201: WAF :: fetched 1 new logs [07-06-2022 13:13:02]4043: WAF :: fetched 2 new logs [07-06-2022 13:15:02]9673: WAF :: fetched 1 new logs [07-06-2022 13:17:02]15002: WAF :: fetched 1 new logs [07-06-2022 13:18:01]17639: WAF :: fetched 1 new logs [07-06-2022 13:19:01]20280: WAF :: fetched 1 new logs [07-06-2022 13:21:02]25795: WAF :: fetched 1 new logs [07-06-2022 13:22:01]28446: WAF :: fetched 3 new logs [07-06-2022 13:24:02]1387: WAF :: fetched 3 new logs [07-06-2022 13:26:02]6894: WAF :: fetched 4 new logs [07-06-2022 13:29:01]14829: WAF :: fetched 1 new logs [07-06-2022 13:30:01]17592: WAF :: fetched 22 new logs [07-06-2022 13:31:02]20409: WAF :: fetched 10 new logs [07-06-2022 13:32:01]23061: WAF :: fetched 1 new logs [07-06-2022 13:33:01]25768: WAF :: fetched 1 new logs [07-06-2022 13:34:02]28502: WAF :: fetched 1 new logs [07-06-2022 13:36:01]1688: WAF :: fetched 1 new logs [07-06-2022 13:37:02]4438: WAF :: fetched 1 new logs [07-06-2022 13:41:02]15412: WAF :: fetched 791 new logs [07-06-2022 13:41:02]15412: Checking for user cron vulnerabilities [07-06-2022 13:42:02]18048: WAF :: fetched 945 new logs [07-06-2022 13:43:01]20757: WAF :: fetched 3 new logs [07-06-2022 13:44:01]23426: Checking ditributed CMS bruteforce attacks [07-06-2022 13:45:01]: Checking for definition updates [07-06-2022 13:45:04]26126: Updated virus defnition : signatures.ndb [07-06-2022 13:46:02]28911: WAF :: fetched 1 new logs [07-06-2022 13:48:01]1927: WAF :: fetched 2 new logs [07-06-2022 13:49:01]4718: WAF :: fetched 4 new logs [07-06-2022 13:50:02]7573: WAF :: fetched 3 new logs [07-06-2022 13:51:01]10304: WAF :: fetched 5 new logs [07-06-2022 13:52:02]12972: WAF :: fetched 2 new logs [07-06-2022 13:53:01]15575: WAF :: fetched 3 new logs [07-06-2022 13:54:02]18370: WAF :: fetched 4 new logs [07-06-2022 13:55:01]21101: WAF :: fetched 2 new logs [07-06-2022 13:56:02]23831: WAF :: fetched 1 new logs [07-06-2022 14:00:02]1971: WAF :: fetched 1 new logs [07-06-2022 14:01:01]4932: WAF :: fetched 1 new logs [07-06-2022 14:02:02]8049: WAF :: fetched 10 new logs [07-06-2022 14:03:01]10742: WAF :: fetched 1 new logs [07-06-2022 14:04:02]13484: WAF :: fetched 1 new logs [07-06-2022 14:07:01]21662: WAF :: fetched 2 new logs [07-06-2022 14:08:01]24307: WAF :: fetched 1 new logs [07-06-2022 14:11:01]32674: WAF :: fetched 1 new logs [07-06-2022 14:12:02]3057: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654621922 [07-06-2022 14:12:02]3057: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 14:12:04]3057: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 14:12:04]3057: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-1412/20220607-141202-Yp-G4vxnOKwPcx47hMhx8wAAADM [07-06-2022 14:12:04]3057: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 14:12:04]3057: WAF :: fetched 79 new logs [07-06-2022 14:14:02]8555: WAF :: fetched 3 new logs [07-06-2022 14:15:01]11309: WAF :: fetched 4 new logs [07-06-2022 14:16:01]14078: WAF :: fetched 1 new logs [07-06-2022 14:17:02]16769: WAF :: fetched 5 new logs [07-06-2022 14:18:01]19454: WAF :: fetched 1 new logs [07-06-2022 14:19:02]22194: WAF :: fetched 2 new logs [07-06-2022 14:22:02]30552: WAF :: fetched 6 new logs [07-06-2022 14:24:01]3580: WAF :: fetched 1 new logs [07-06-2022 14:25:02]6355: WAF :: fetched 5 new logs [07-06-2022 14:26:01]9139: WAF :: fetched 3 new logs [07-06-2022 14:28:02]14654: WAF :: fetched 4 new logs [07-06-2022 14:30:02]20065: WAF :: fetched 4 new logs [07-06-2022 14:32:02]25718: WAF :: fetched 1 new logs [07-06-2022 14:34:01]31186: WAF :: fetched 3 new logs [07-06-2022 14:36:02]4711: WAF :: fetched 2 new logs [07-06-2022 14:37:01]7546: WAF :: fetched 3 new logs [07-06-2022 14:39:02]13146: WAF :: fetched 2 new logs [07-06-2022 14:40:01]15929: WAF :: fetched 1 new logs [07-06-2022 14:41:01]18808: Checking for user cron vulnerabilities [07-06-2022 14:42:02]21631: WAF :: fetched 1 new logs [07-06-2022 14:43:01]24402: WAF :: fetched 3 new logs [07-06-2022 14:44:02]27180: Checking ditributed CMS bruteforce attacks [07-06-2022 14:44:02]27180: WAF :: fetched 3 new logs [07-06-2022 14:45:01]30007: WAF :: fetched 8 new logs [07-06-2022 14:46:01]545: WAF :: fetched 2 new logs [07-06-2022 14:47:02]3400: WAF :: fetched 2 new logs [07-06-2022 14:48:01]6172: WAF :: fetched 1 new logs [07-06-2022 14:49:02]8995: WAF :: fetched 267 new logs [07-06-2022 14:50:02]11735: WAF :: fetched 1039 new logs [07-06-2022 14:52:01]17452: httpd.conf changed. Refreshing watchlist. [07-06-2022 14:53:02]20268: WAF :: fetched 1 new logs [07-06-2022 14:53:03]20269: Updated license status via CDN [07-06-2022 14:53:03]20269: httpd.conf changed. Refreshing watchlist. [07-06-2022 14:55:02]25741: WAF :: fetched 1 new logs [07-06-2022 14:57:01]31471: WAF :: fetched 3 new logs [07-06-2022 14:57:01]31473: httpd.conf changed. Refreshing watchlist. [07-06-2022 14:58:01]1891: WAF :: fetched 1 new logs [07-06-2022 14:59:02]4777: WAF :: fetched 4 new logs [07-06-2022 15:00:02]7291: WAF :: fetched 1 new logs [07-06-2022 15:01:02]10633: Reseting cPGuard inotify settings [07-06-2022 15:03:02]16167: WAF :: fetched 1 new logs [07-06-2022 15:04:01]18998: WAF :: fetched 2 new logs [07-06-2022 15:05:02]21748: WAF :: fetched 2 new logs [07-06-2022 15:06:01]24631: WAF :: fetched 31 new logs [07-06-2022 15:11:01]6445: WAF :: fetched 3 new logs [07-06-2022 15:12:01]9254: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654625521 [07-06-2022 15:12:01]9254: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 15:12:03]9254: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 15:12:04]9254: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-1512/20220607-151201-Yp-U8ZyIfsjgAAQboQ-ctwAAAA8 [07-06-2022 15:12:04]9254: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 15:12:04]9254: WAF :: fetched 2 new logs [07-06-2022 15:13:02]12089: WAF :: fetched 1 new logs [07-06-2022 15:14:01]14832: WAF :: fetched 2 new logs [07-06-2022 15:15:02]17619: WAF :: fetched 8 new logs [07-06-2022 15:16:01]20583: WAF :: fetched 1 new logs [07-06-2022 15:17:01]23316: WAF :: fetched 1 new logs [07-06-2022 15:18:02]26108: WAF :: fetched 2 new logs [07-06-2022 15:19:01]28891: WAF :: fetched 1 new logs [07-06-2022 15:24:02]10693: WAF :: fetched 1 new logs [07-06-2022 15:25:01]13451: WAF :: fetched 6 new logs [07-06-2022 15:26:02]16419: WAF :: fetched 21 new logs [07-06-2022 15:27:02]19145: WAF :: fetched 3 new logs [07-06-2022 15:28:01]21880: WAF :: fetched 1 new logs [07-06-2022 15:30:02]27535: WAF :: fetched 1 new logs [07-06-2022 15:32:02]959: WAF :: fetched 1 new logs [07-06-2022 15:33:01]3870: WAF :: fetched 5 new logs [07-06-2022 15:34:02]6672: WAF :: fetched 2 new logs [07-06-2022 15:41:02]26469: WAF :: fetched 1 new logs [07-06-2022 15:41:02]26469: Checking for user cron vulnerabilities [07-06-2022 15:44:01]2409: Checking ditributed CMS bruteforce attacks [07-06-2022 15:44:01]2409: WAF :: fetched 1 new logs [07-06-2022 15:45:01]5384: WAF :: fetched 1 new logs [07-06-2022 15:46:02]8379: WAF :: fetched 2 new logs [07-06-2022 15:48:02]14142: WAF :: fetched 4 new logs [07-06-2022 15:49:02]16974: WAF :: fetched 3 new logs [07-06-2022 15:51:01]22670: WAF :: fetched 2 new logs [07-06-2022 15:54:02]30942: WAF :: fetched 1 new logs [07-06-2022 15:57:02]7080: WAF :: fetched 1 new logs [07-06-2022 15:59:01]12636: WAF :: fetched 1 new logs [07-06-2022 16:02:01]21284: WAF :: fetched 2 new logs [07-06-2022 16:04:01]26845: WAF :: fetched 1 new logs [07-06-2022 16:07:01]2945: WAF :: fetched 1 new logs [07-06-2022 16:08:01]5838: WAF :: fetched 2 new logs [07-06-2022 16:10:01]11409: WAF :: fetched 1 new logs [07-06-2022 16:12:02]17102: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654629122 [07-06-2022 16:12:02]17102: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 16:12:04]17102: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 16:12:04]17102: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-1612/20220607-161202-Yp-jAsGjU1xu7Sn3OY34BwAAABM [07-06-2022 16:12:04]17102: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 16:12:04]17102: WAF :: fetched 1 new logs [07-06-2022 16:17:01]31261: httpd.conf changed. Refreshing watchlist. [07-06-2022 16:18:02]1714: WAF :: fetched 1 new logs [07-06-2022 16:24:01]18706: WAF :: fetched 6 new logs [07-06-2022 16:26:01]24392: WAF :: fetched 1 new logs [07-06-2022 16:28:02]30043: WAF :: fetched 2 new logs [07-06-2022 16:29:01]310: WAF :: fetched 2 new logs [07-06-2022 16:30:02]3128: WAF :: fetched 2 new logs [07-06-2022 16:33:01]11747: WAF :: fetched 2 new logs [07-06-2022 16:36:01]20174: WAF :: fetched 1 new logs [07-06-2022 16:37:02]23007: WAF :: fetched 2 new logs [07-06-2022 16:39:01]28697: WAF :: fetched 4 new logs [07-06-2022 16:41:01]2023: Checking for user cron vulnerabilities [07-06-2022 16:42:01]4891: WAF :: fetched 2 new logs [07-06-2022 16:44:01]10480: Checking ditributed CMS bruteforce attacks [07-06-2022 16:44:01]10480: WAF :: fetched 3 new logs [07-06-2022 16:45:02]13288: WAF :: fetched 5 new logs [07-06-2022 16:46:01]16163: WAF :: fetched 2 new logs [07-06-2022 16:48:01]21794: WAF :: fetched 2 new logs [07-06-2022 16:49:01]24627: WAF :: fetched 3 new logs [07-06-2022 16:51:01]30470: WAF :: fetched 1 new logs [07-06-2022 16:52:02]851: WAF :: fetched 3 new logs [07-06-2022 16:53:01]3667: WAF :: fetched 1 new logs [07-06-2022 16:56:01]12176: WAF :: fetched 1 new logs [07-06-2022 16:57:02]14985: WAF :: fetched 1 new logs [07-06-2022 16:58:02]17793: WAF :: fetched 1 new logs [07-06-2022 16:59:01]20557: WAF :: fetched 1 new logs [07-06-2022 17:01:02]26523: WAF :: fetched 1 new logs [07-06-2022 17:02:01]29177: WAF :: fetched 2 new logs [07-06-2022 17:03:02]32207: WAF :: fetched 1 new logs [07-06-2022 17:06:02]8511: WAF :: fetched 5 new logs [07-06-2022 17:07:02]11300: WAF :: fetched 1 new logs [07-06-2022 17:08:01]14084: WAF :: fetched 3 new logs [07-06-2022 17:10:02]19682: WAF :: fetched 1 new logs [07-06-2022 17:11:01]22662: WAF :: fetched 3 new logs [07-06-2022 17:12:02]25425: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654632722 [07-06-2022 17:12:02]25425: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 17:12:04]25425: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 17:12:04]25425: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-1712/20220607-171202-Yp-xElgbH9a1QUDtgPAdcwAAABI [07-06-2022 17:12:04]25425: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 17:12:04]25425: WAF :: fetched 2 new logs [07-06-2022 17:15:01]1410: WAF :: fetched 1 new logs [07-06-2022 17:19:02]13098: WAF :: fetched 1 new logs [07-06-2022 17:20:01]15939: WAF :: fetched 51 new logs [07-06-2022 17:21:01]18948: WAF :: fetched 1 new logs [07-06-2022 17:23:01]24436: WAF :: fetched 1 new logs [07-06-2022 17:25:01]30090: WAF :: fetched 1 new logs [07-06-2022 17:28:02]6371: WAF :: fetched 3 new logs [07-06-2022 17:29:01]9104: WAF :: fetched 4 new logs [07-06-2022 17:30:02]11876: WAF :: fetched 2 new logs [07-06-2022 17:31:01]14765: WAF :: fetched 1 new logs [07-06-2022 17:33:02]20290: WAF :: fetched 1 new logs [07-06-2022 17:35:02]25874: WAF :: fetched 1 new logs [07-06-2022 17:38:01]2047: WAF :: fetched 1 new logs [07-06-2022 17:40:01]8041: WAF :: fetched 2 new logs [07-06-2022 17:41:01]11057: Checking for user cron vulnerabilities [07-06-2022 17:44:01]19701: Checking ditributed CMS bruteforce attacks [07-06-2022 17:44:01]19701: WAF :: fetched 3 new logs [07-06-2022 17:45:02]22556: WAF :: fetched 3 new logs [07-06-2022 17:46:01]25449: WAF :: fetched 6 new logs [07-06-2022 17:47:02]28253: WAF :: fetched 4 new logs [07-06-2022 17:48:01]31029: WAF :: fetched 3 new logs [07-06-2022 17:49:01]1419: WAF :: fetched 1 new logs [07-06-2022 17:50:01]4188: WAF :: fetched 1 new logs [07-06-2022 17:51:01]7176: WAF :: fetched 4 new logs [07-06-2022 17:52:02]9903: WAF :: fetched 4 new logs [07-06-2022 17:54:02]15345: WAF :: fetched 1 new logs [07-06-2022 17:55:02]18129: WAF :: fetched 4 new logs [07-06-2022 17:56:01]20944: WAF :: fetched 1 new logs [07-06-2022 17:57:02]23675: WAF :: fetched 1 new logs [07-06-2022 18:00:02]31515: WAF :: fetched 3 new logs [07-06-2022 18:01:01]2484: WAF :: fetched 3 new logs [07-06-2022 18:02:02]5297: WAF :: fetched 2 new logs [07-06-2022 18:12:02]32592: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654636322 [07-06-2022 18:12:02]32592: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 18:12:04]32592: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 18:12:04]32592: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-1812/20220607-181202-Yp-_ImziIGggoTzbkXEpcwAAAAY [07-06-2022 18:12:04]32592: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 18:12:04]32592: WAF :: fetched 1 new logs [07-06-2022 18:41:02]15453: Checking for user cron vulnerabilities [07-06-2022 18:44:01]23587: Checking ditributed CMS bruteforce attacks [07-06-2022 19:12:01]3886: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654639921 [07-06-2022 19:12:01]3886: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 19:12:03]3886: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 19:12:03]3886: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-1912/20220607-191201-Yp_NMa_Zfpmt8hW55vqEQgAAADM [07-06-2022 19:12:03]3886: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 19:41:02]18480: Checking for user cron vulnerabilities [07-06-2022 19:44:01]26702: Checking ditributed CMS bruteforce attacks [07-06-2022 19:45:01]: Checking for definition updates [07-06-2022 19:45:02]29419: Updated virus defnition : malware.expert.fp [07-06-2022 20:12:01]7259: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654643521 [07-06-2022 20:12:01]7259: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 20:12:03]7259: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 20:12:03]7259: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-2012/20220607-201201-Yp_bQSh5z4ZQTZQXAyKJnQAAAAE [07-06-2022 20:12:03]7259: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 20:41:02]22086: Checking for user cron vulnerabilities [07-06-2022 20:44:01]30228: Checking ditributed CMS bruteforce attacks [07-06-2022 21:12:02]10332: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654647122 [07-06-2022 21:12:02]10332: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 21:12:04]10332: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 21:12:04]10332: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-2112/20220607-211202-Yp_pUru6cDPvqZDl0w5U9wAAAC8 [07-06-2022 21:12:04]10332: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 21:41:02]25133: Checking for user cron vulnerabilities [07-06-2022 21:44:01]885: Checking ditributed CMS bruteforce attacks [07-06-2022 22:07:08]31630: Performing Domain reputation checks [07-06-2022 22:12:02]12940: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654650722 [07-06-2022 22:12:02]12940: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 22:12:04]12940: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 22:12:04]12940: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-2212/20220607-221202-Yp_3Yr1LPQUADl67p4txUgAAAEA [07-06-2022 22:12:04]12940: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 22:41:01]27937: Checking for user cron vulnerabilities [07-06-2022 22:44:01]3813: Checking ditributed CMS bruteforce attacks [07-06-2022 22:49:01]17570: WAF :: fetched 5 new logs [07-06-2022 22:50:02]20293: WAF :: fetched 42 new logs [07-06-2022 22:51:01]23035: WAF :: fetched 49 new logs [07-06-2022 22:52:01]25814: WAF :: fetched 27 new logs [07-06-2022 22:53:02]28552: WAF :: fetched 4 new logs [07-06-2022 22:54:01]31262: WAF :: fetched 7 new logs [07-06-2022 22:55:02]1608: WAF :: fetched 19 new logs [07-06-2022 22:56:01]4474: WAF :: fetched 10 new logs [07-06-2022 22:57:01]7322: WAF :: fetched 18 new logs [07-06-2022 22:59:01]12750: WAF :: fetched 6 new logs [07-06-2022 23:00:02]15223: WAF :: fetched 30 new logs [07-06-2022 23:01:02]18470: WAF :: fetched 31 new logs [07-06-2022 23:02:01]21323: WAF :: fetched 14 new logs [07-06-2022 23:03:02]24020: WAF :: fetched 8 new logs [07-06-2022 23:07:42]2777: Performed RBL check for 23.111.136.34. [07-06-2022 23:09:02]8102: WAF :: fetched 2 new logs [07-06-2022 23:10:02]10803: WAF :: fetched 1 new logs [07-06-2022 23:12:02]16347: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654654322 [07-06-2022 23:12:02]16347: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-06-2022 23:12:04]16347: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-06-2022 23:12:04]16347: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220607/20220607-2312/20220607-231202-YqAFcprF9ePtl44TcBLV5wAAABA [07-06-2022 23:12:04]16347: WAF :: No suitable log file found. Using SQLite.. [07-06-2022 23:12:04]16347: WAF :: fetched 1 new logs [07-06-2022 23:19:01]2824: WAF :: fetched 2 new logs [07-06-2022 23:20:02]5658: WAF :: fetched 4 new logs [07-06-2022 23:21:01]8419: WAF :: fetched 3 new logs [07-06-2022 23:22:02]11174: WAF :: fetched 1 new logs [07-06-2022 23:30:02]396: WAF :: fetched 1 new logs [07-06-2022 23:31:01]3233: WAF :: fetched 1 new logs [07-06-2022 23:32:02]6076: WAF :: fetched 1 new logs [07-06-2022 23:34:02]11468: WAF :: fetched 1 new logs [07-06-2022 23:38:02]22377: WAF :: fetched 1 new logs [07-06-2022 23:40:01]27738: WAF :: fetched 3 new logs [07-06-2022 23:41:02]30536: Checking for user cron vulnerabilities [07-06-2022 23:42:01]862: WAF :: fetched 1 new logs [07-06-2022 23:43:02]3627: WAF :: fetched 1 new logs [07-06-2022 23:44:01]6355: Checking ditributed CMS bruteforce attacks [07-06-2022 23:44:01]6355: WAF :: fetched 5 new logs [07-06-2022 23:45:02]9081: WAF :: fetched 2 new logs [07-06-2022 23:46:02]11785: WAF :: fetched 2 new logs [07-06-2022 23:47:01]14503: WAF :: fetched 1 new logs [07-06-2022 23:48:02]17238: WAF :: fetched 1 new logs [07-06-2022 23:53:02]31138: WAF :: fetched 5 new logs [07-06-2022 23:54:02]1489: httpd.conf changed. Refreshing watchlist. [07-06-2022 23:55:01]4253: WAF :: fetched 2 new logs [07-06-2022 23:56:02]7042: WAF :: fetched 3 new logs [07-06-2022 23:59:02]15194: WAF :: fetched 3 new logs [08-06-2022 00:00:01]17587: WAF :: fetched 2 new logs [08-06-2022 00:01:01]20969: httpd.conf changed. Refreshing watchlist. [08-06-2022 00:01:03]20968: Sending daily report for June 8, 2022 [08-06-2022 00:03:01]26559: WAF :: fetched 3 new logs [08-06-2022 00:04:02]29406: WAF :: fetched 3 new logs [08-06-2022 00:05:01]32142: WAF :: fetched 1 new logs [08-06-2022 00:05:02]32142: Deleted 0 entries older than 6 MONTH from scanner_logs [08-06-2022 00:05:02]32142: Deleted 0 files from Quarantine [08-06-2022 00:06:01]2523: WAF :: fetched 1 new logs [08-06-2022 00:12:01]19068: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654657921 [08-06-2022 00:12:01]19068: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 00:12:03]19068: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 00:12:04]19068: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-0012/20220608-001201-YqATgd4FOAdVqNbvKzXFxAAAABM [08-06-2022 00:12:04]19068: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 00:12:04]19068: WAF :: fetched 8 new logs [08-06-2022 00:14:01]24446: WAF :: fetched 2 new logs [08-06-2022 00:15:01]27130: WAF :: fetched 2 new logs [08-06-2022 00:16:02]29969: WAF :: fetched 2 new logs [08-06-2022 00:17:01]32680: WAF :: fetched 1 new logs [08-06-2022 00:23:02]16703: WAF :: fetched 5 new logs [08-06-2022 00:25:02]22167: WAF :: fetched 1 new logs [08-06-2022 00:26:02]24910: WAF :: fetched 1 new logs [08-06-2022 00:27:01]27625: WAF :: fetched 1 new logs [08-06-2022 00:28:02]30444: WAF :: fetched 1 new logs [08-06-2022 00:31:01]6316: WAF :: fetched 3 new logs [08-06-2022 00:33:01]11783: WAF :: fetched 2 new logs [08-06-2022 00:34:01]14481: WAF :: fetched 1 new logs [08-06-2022 00:35:02]17204: WAF :: fetched 1 new logs [08-06-2022 00:37:01]22572: WAF :: fetched 1 new logs [08-06-2022 00:41:01]1209: WAF :: fetched 1 new logs [08-06-2022 00:41:01]1209: Checking for user cron vulnerabilities [08-06-2022 00:41:01]1234: httpd.conf changed. Refreshing watchlist. [08-06-2022 00:44:01]9571: Checking ditributed CMS bruteforce attacks [08-06-2022 00:45:01]: Checking for software updates [08-06-2022 00:46:01]14948: WAF :: fetched 2 new logs [08-06-2022 00:47:02]17751: WAF :: fetched 4 new logs [08-06-2022 00:47:02]17752: httpd.conf changed. Refreshing watchlist. [08-06-2022 00:48:01]20505: WAF :: fetched 1 new logs [08-06-2022 00:49:02]23261: WAF :: fetched 4 new logs [08-06-2022 00:50:01]25933: WAF :: fetched 4 new logs [08-06-2022 00:51:01]28651: WAF :: fetched 9 new logs [08-06-2022 00:52:02]31356: WAF :: fetched 3 new logs [08-06-2022 00:54:02]4565: WAF :: fetched 1 new logs [08-06-2022 00:56:02]10023: WAF :: fetched 8 new logs [08-06-2022 00:58:01]15507: WAF :: fetched 1 new logs [08-06-2022 01:00:01]20594: WAF :: fetched 6 new logs [08-06-2022 01:03:01]30656: WAF :: fetched 1 new logs [08-06-2022 01:06:01]7239: WAF :: fetched 1 new logs [08-06-2022 01:07:02]10190: WAF :: fetched 1 new logs [08-06-2022 01:12:02]24372: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654661522 [08-06-2022 01:12:02]24372: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 01:12:04]24372: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 01:12:04]24372: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-0112/20220608-011202-YqAhkoEyet-MIjxJMqv8sAAAABE [08-06-2022 01:12:04]24372: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [08-06-2022 01:12:04]24372: WAF :: fetched 1 new logs [08-06-2022 01:13:01]27317: WAF :: fetched 1 new logs [08-06-2022 01:14:01]30034: WAF :: fetched 2 new logs [08-06-2022 01:16:01]3780: WAF :: fetched 1 new logs [08-06-2022 01:19:02]12326: WAF :: fetched 1 new logs [08-06-2022 01:20:02]15367: WAF :: fetched 1 new logs [08-06-2022 01:21:01]18283: WAF :: fetched 1 new logs [08-06-2022 01:23:01]23988: WAF :: fetched 3 new logs [08-06-2022 01:24:02]27035: WAF :: fetched 1 new logs [08-06-2022 01:25:02]30016: WAF :: fetched 1 new logs [08-06-2022 01:29:02]9476: WAF :: fetched 1 new logs [08-06-2022 01:32:01]18331: WAF :: fetched 1 new logs [08-06-2022 01:41:02]12333: Checking for user cron vulnerabilities [08-06-2022 01:42:02]15277: WAF :: fetched 5 new logs [08-06-2022 01:43:01]18024: WAF :: fetched 1 new logs [08-06-2022 01:44:01]20841: Checking ditributed CMS bruteforce attacks [08-06-2022 01:45:01]: Checking for definition updates [08-06-2022 01:49:01]2198: WAF :: fetched 6 new logs [08-06-2022 01:50:02]5400: WAF :: fetched 3 new logs [08-06-2022 01:54:01]16306: WAF :: fetched 8 new logs [08-06-2022 02:00:02]32146: WAF :: fetched 1 new logs [08-06-2022 02:01:01]2927: WAF :: fetched 1 new logs [08-06-2022 02:04:02]11291: WAF :: fetched 1 new logs [08-06-2022 02:06:01]16760: WAF :: fetched 2 new logs [08-06-2022 02:07:01]19452: WAF :: fetched 3 new logs [08-06-2022 02:11:01]30346: WAF :: fetched 2 new logs [08-06-2022 02:12:02]588: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654665122 [08-06-2022 02:12:02]588: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 02:12:04]588: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 02:12:04]588: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-0212/20220608-021202-YqAvonM-zuDNGs_2cn3NqgAAABU [08-06-2022 02:12:04]588: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 02:12:04]588: WAF :: fetched 38 new logs [08-06-2022 02:19:01]19661: WAF :: fetched 1 new logs [08-06-2022 02:20:02]22369: WAF :: fetched 2 new logs [08-06-2022 02:21:01]25090: WAF :: fetched 1 new logs [08-06-2022 02:23:02]30537: WAF :: fetched 6 new logs [08-06-2022 02:24:01]739: WAF :: fetched 2 new logs [08-06-2022 02:27:02]9061: WAF :: fetched 1 new logs [08-06-2022 02:31:01]21242: WAF :: fetched 1 new logs [08-06-2022 02:32:02]23968: WAF :: fetched 1 new logs [08-06-2022 02:36:01]3311: WAF :: fetched 1 new logs [08-06-2022 02:37:02]6656: WAF :: fetched 1 new logs [08-06-2022 02:38:01]9401: WAF :: fetched 1 new logs [08-06-2022 02:39:01]12308: WAF :: fetched 1 new logs [08-06-2022 02:40:02]15030: WAF :: fetched 10 new logs [08-06-2022 02:41:01]18217: Checking for user cron vulnerabilities [08-06-2022 02:42:01]20955: WAF :: fetched 11 new logs [08-06-2022 02:43:02]23715: WAF :: fetched 8 new logs [08-06-2022 02:44:01]26367: Checking ditributed CMS bruteforce attacks [08-06-2022 02:44:01]26367: WAF :: fetched 13 new logs [08-06-2022 02:45:02]29062: WAF :: fetched 7 new logs [08-06-2022 02:46:01]31718: WAF :: fetched 37 new logs [08-06-2022 02:47:01]2112: WAF :: fetched 31 new logs [08-06-2022 02:48:02]4977: WAF :: fetched 59 new logs [08-06-2022 02:49:01]7635: WAF :: fetched 59 new logs [08-06-2022 02:50:02]10707: WAF :: fetched 41 new logs [08-06-2022 02:51:01]13411: WAF :: fetched 6 new logs [08-06-2022 02:52:02]16440: WAF :: fetched 9 new logs [08-06-2022 02:53:01]19240: WAF :: fetched 27 new logs [08-06-2022 02:53:02]19237: Updated license status via CDN [08-06-2022 02:54:02]22153: WAF :: fetched 15 new logs [08-06-2022 02:57:01]31072: WAF :: fetched 1 new logs [08-06-2022 03:00:02]6831: Found and updated 32 CMS installations [08-06-2022 03:01:02]10158: WAF :: fetched 1 new logs [08-06-2022 03:02:01]13062: WAF :: fetched 1 new logs [08-06-2022 03:02:24]6831: Wordpress installation #40 guardian-ba.com.br has errors [08-06-2022 03:02:28]6831: Sending CMS version vulnerability report emails to cpanel users [08-06-2022 03:02:31]6831: Checking wordpress installations for suspicious directories [08-06-2022 03:04:01]19154: WAF :: fetched 5 new logs [08-06-2022 03:04:26]16253: Sending CMS version vulnerability report emails to cpanel users [08-06-2022 03:04:29]16253: Checking wordpress installations for suspicious directories [08-06-2022 03:05:01]22085: WAF :: fetched 1 new logs [08-06-2022 03:06:01]24786: WAF :: fetched 4 new logs [08-06-2022 03:07:02]27469: WAF :: fetched 8 new logs [08-06-2022 03:08:01]30209: WAF :: fetched 12 new logs [08-06-2022 03:09:01]409: WAF :: fetched 2 new logs [08-06-2022 03:12:02]8700: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654668722 [08-06-2022 03:12:02]8700: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 03:12:04]8700: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 03:12:04]8700: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-0312/20220608-031202-YqA9siZTAvaDEtbmDo_HVQAAAAg [08-06-2022 03:12:04]8700: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 03:16:01]19465: WAF :: fetched 1 new logs [08-06-2022 03:23:01]3580: WAF :: fetched 3 new logs [08-06-2022 03:24:02]24931: WAF :: fetched 1 new logs [08-06-2022 03:29:02]24072: WAF :: fetched 1 new logs [08-06-2022 03:30:01]26769: WAF :: fetched 1 new logs [08-06-2022 03:32:01]32201: WAF :: fetched 1 new logs [08-06-2022 03:33:02]2616: WAF :: fetched 3 new logs [08-06-2022 03:35:02]8102: WAF :: fetched 1 new logs [08-06-2022 03:37:01]13440: WAF :: fetched 2 new logs [08-06-2022 03:39:01]18890: WAF :: fetched 2 new logs [08-06-2022 03:40:02]21571: WAF :: fetched 5 new logs [08-06-2022 03:41:01]24309: Checking for user cron vulnerabilities [08-06-2022 03:42:02]27020: WAF :: fetched 1 new logs [08-06-2022 03:44:02]32414: Checking ditributed CMS bruteforce attacks [08-06-2022 03:44:02]32414: WAF :: fetched 1 new logs [08-06-2022 03:46:01]5500: WAF :: fetched 7 new logs [08-06-2022 03:47:02]8195: WAF :: fetched 2 new logs [08-06-2022 03:48:01]10932: WAF :: fetched 1 new logs [08-06-2022 03:49:01]13620: WAF :: fetched 3 new logs [08-06-2022 03:50:02]16367: WAF :: fetched 1 new logs [08-06-2022 03:51:01]18930: WAF :: fetched 2 new logs [08-06-2022 03:52:02]21779: WAF :: fetched 6 new logs [08-06-2022 03:53:01]24536: WAF :: fetched 3 new logs [08-06-2022 03:58:01]5767: WAF :: fetched 2 new logs [08-06-2022 04:03:01]19581: WAF :: fetched 1 new logs [08-06-2022 04:05:01]25000: WAF :: fetched 2 new logs [08-06-2022 04:06:02]27721: WAF :: fetched 14 new logs [08-06-2022 04:08:01]667: WAF :: fetched 1 new logs [08-06-2022 04:09:02]3456: WAF :: fetched 1 new logs [08-06-2022 04:12:02]11563: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654672322 [08-06-2022 04:12:02]11563: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 04:12:04]11563: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 04:12:04]11563: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-0412/20220608-041202-YqBLwsSmoObkdZ9RMqufuwAAAA8 [08-06-2022 04:12:04]11563: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [08-06-2022 04:12:04]11563: WAF :: fetched 1 new logs [08-06-2022 04:13:01]14336: WAF :: fetched 2 new logs [08-06-2022 04:14:02]17052: WAF :: fetched 1 new logs [08-06-2022 04:15:01]19734: WAF :: fetched 3 new logs [08-06-2022 04:24:02]11902: WAF :: fetched 1 new logs [08-06-2022 04:26:01]17341: WAF :: fetched 1 new logs [08-06-2022 04:28:01]22775: WAF :: fetched 7 new logs [08-06-2022 04:29:02]25449: WAF :: fetched 12 new logs [08-06-2022 04:30:02]28181: WAF :: fetched 2 new logs [08-06-2022 04:36:02]12183: WAF :: fetched 7 new logs [08-06-2022 04:37:01]14819: WAF :: fetched 5 new logs [08-06-2022 04:39:02]20277: WAF :: fetched 5 new logs [08-06-2022 04:40:01]22938: WAF :: fetched 1 new logs [08-06-2022 04:41:02]25705: Checking for user cron vulnerabilities [08-06-2022 04:42:02]28368: WAF :: fetched 1 new logs [08-06-2022 04:44:02]1450: Checking ditributed CMS bruteforce attacks [08-06-2022 04:45:01]4182: WAF :: fetched 1 new logs [08-06-2022 04:46:02]6946: WAF :: fetched 2 new logs [08-06-2022 04:48:01]12359: WAF :: fetched 10 new logs [08-06-2022 04:51:01]20538: WAF :: fetched 1 new logs [08-06-2022 04:52:01]23183: WAF :: fetched 1 new logs [08-06-2022 04:55:02]31402: WAF :: fetched 1 new logs [08-06-2022 04:56:01]1751: WAF :: fetched 5 new logs [08-06-2022 04:57:02]4544: WAF :: fetched 2 new logs [08-06-2022 04:58:01]7301: WAF :: fetched 1 new logs [08-06-2022 04:59:02]10005: WAF :: fetched 1 new logs [08-06-2022 05:01:42]15639: Starting daily scan on files updated in last 24 hrs [08-06-2022 05:02:01]18322: WAF :: fetched 26 new logs [08-06-2022 05:04:01]23764: WAF :: fetched 1 new logs [08-06-2022 05:06:02]29166: WAF :: fetched 2 new logs [08-06-2022 05:08:01]2268: WAF :: fetched 6 new logs [08-06-2022 05:09:01]5033: WAF :: fetched 2 new logs [08-06-2022 05:11:01]10434: WAF :: fetched 16 new logs [08-06-2022 05:12:02]13102: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654675922 [08-06-2022 05:12:02]13102: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 05:12:04]13102: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 05:12:04]13102: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-0512/20220608-051202-YqBZ0vFnVPBePuB34h-HRwAAAAs [08-06-2022 05:12:04]13102: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 05:12:04]13102: WAF :: fetched 85 new logs [08-06-2022 05:14:02]18577: WAF :: fetched 1 new logs [08-06-2022 05:15:02]21254: WAF :: fetched 1 new logs [08-06-2022 05:16:01]23978: WAF :: fetched 2 new logs [08-06-2022 05:17:02]26718: WAF :: fetched 3 new logs [08-06-2022 05:18:01]29473: WAF :: fetched 1 new logs [08-06-2022 05:20:02]2492: WAF :: fetched 1 new logs [08-06-2022 05:22:02]8053: WAF :: fetched 3 new logs [08-06-2022 05:25:02]16164: WAF :: fetched 5 new logs [08-06-2022 05:27:02]21503: WAF :: fetched 1 new logs [08-06-2022 05:28:01]24047: WAF :: fetched 1 new logs [08-06-2022 05:32:02]2710: WAF :: fetched 2 new logs [08-06-2022 05:33:01]5495: WAF :: fetched 1 new logs [08-06-2022 05:35:01]10938: WAF :: fetched 1 new logs [08-06-2022 05:37:02]16388: WAF :: fetched 6 new logs [08-06-2022 05:39:02]21849: WAF :: fetched 1 new logs [08-06-2022 05:41:01]27296: WAF :: fetched 2 new logs [08-06-2022 05:41:01]27296: Checking for user cron vulnerabilities [08-06-2022 05:42:02]30015: WAF :: fetched 3 new logs [08-06-2022 05:43:01]32670: WAF :: fetched 1 new logs [08-06-2022 05:44:01]3060: Checking ditributed CMS bruteforce attacks [08-06-2022 05:45:02]5846: WAF :: fetched 1 new logs [08-06-2022 05:47:01]11332: WAF :: fetched 2 new logs [08-06-2022 05:51:02]22218: WAF :: fetched 1 new logs [08-06-2022 05:54:01]30255: WAF :: fetched 1 new logs [08-06-2022 05:58:01]8653: WAF :: fetched 2 new logs [08-06-2022 05:59:02]11412: WAF :: fetched 7 new logs [08-06-2022 06:00:02]13803: WAF :: fetched 11 new logs [08-06-2022 06:03:01]22285: WAF :: fetched 1 new logs [08-06-2022 06:06:01]30389: WAF :: fetched 1 new logs [08-06-2022 06:07:02]617: WAF :: fetched 4 new logs [08-06-2022 06:08:01]3342: WAF :: fetched 1 new logs [08-06-2022 06:11:01]11579: WAF :: fetched 1 new logs [08-06-2022 06:12:02]14252: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654679522 [08-06-2022 06:12:02]14252: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 06:12:04]14252: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 06:12:04]14252: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-0612/20220608-061202-YqBn4p1w3MEsi57iOphH7QAAAAM [08-06-2022 06:12:04]14252: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 06:12:04]14252: WAF :: fetched 1 new logs [08-06-2022 06:13:01]16919: WAF :: fetched 1 new logs [08-06-2022 06:14:02]19693: WAF :: fetched 1 new logs [08-06-2022 06:16:01]25094: WAF :: fetched 1 new logs [08-06-2022 06:19:02]823: WAF :: fetched 1 new logs [08-06-2022 06:20:01]3552: WAF :: fetched 3 new logs [08-06-2022 06:21:01]6376: WAF :: fetched 3 new logs [08-06-2022 06:22:02]9092: WAF :: fetched 3 new logs [08-06-2022 06:23:01]11724: WAF :: fetched 1 new logs [08-06-2022 06:24:02]14514: WAF :: fetched 6 new logs [08-06-2022 06:26:01]19879: WAF :: fetched 1 new logs [08-06-2022 06:27:01]22671: WAF :: fetched 1 new logs [08-06-2022 06:28:02]25325: WAF :: fetched 6 new logs [08-06-2022 06:29:01]28063: WAF :: fetched 18 new logs [08-06-2022 06:30:01]30719: WAF :: fetched 9 new logs [08-06-2022 06:31:02]1100: WAF :: fetched 15 new logs [08-06-2022 06:32:02]3893: WAF :: fetched 18 new logs [08-06-2022 06:33:01]6626: WAF :: fetched 17 new logs [08-06-2022 06:34:02]9428: WAF :: fetched 17 new logs [08-06-2022 06:35:02]12107: WAF :: fetched 14 new logs [08-06-2022 06:36:02]14842: WAF :: fetched 14 new logs [08-06-2022 06:37:01]17502: WAF :: fetched 13 new logs [08-06-2022 06:38:01]20203: WAF :: fetched 15 new logs [08-06-2022 06:39:01]22912: WAF :: fetched 3 new logs [08-06-2022 06:41:01]28377: WAF :: fetched 7 new logs [08-06-2022 06:41:01]28377: Checking for user cron vulnerabilities [08-06-2022 06:44:01]4138: Checking ditributed CMS bruteforce attacks [08-06-2022 06:44:01]4138: WAF :: fetched 5 new logs [08-06-2022 06:46:02]9531: WAF :: fetched 1 new logs [08-06-2022 06:49:01]17584: WAF :: fetched 5 new logs [08-06-2022 06:54:01]30930: WAF :: fetched 4 new logs [08-06-2022 06:57:02]6657: WAF :: fetched 23 new logs [08-06-2022 06:59:01]11991: WAF :: fetched 1 new logs [08-06-2022 07:04:01]25607: WAF :: fetched 5 new logs [08-06-2022 07:08:01]3946: WAF :: fetched 1 new logs [08-06-2022 07:12:02]14753: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654683122 [08-06-2022 07:12:02]14753: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 07:12:04]14753: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 07:12:04]14753: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-0712/20220608-071202-YqB18vWFjmVSKluBsKu5UQAAACU [08-06-2022 07:12:04]14753: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 07:12:04]14753: WAF :: fetched 2 new logs [08-06-2022 07:13:02]17410: WAF :: fetched 1 new logs [08-06-2022 07:14:01]20035: WAF :: fetched 1 new logs [08-06-2022 07:18:01]30637: WAF :: fetched 1 new logs [08-06-2022 07:27:01]22627: WAF :: fetched 1 new logs [08-06-2022 07:29:02]28066: WAF :: fetched 7 new logs [08-06-2022 07:30:01]30730: WAF :: fetched 1 new logs [08-06-2022 07:34:01]9163: WAF :: fetched 1 new logs [08-06-2022 07:35:02]11829: WAF :: fetched 2 new logs [08-06-2022 07:36:02]14530: WAF :: fetched 3 new logs [08-06-2022 07:38:02]19859: WAF :: fetched 1 new logs [08-06-2022 07:39:01]22565: WAF :: fetched 28 new logs [08-06-2022 07:40:02]25268: WAF :: fetched 46 new logs [08-06-2022 07:41:01]28001: WAF :: fetched 53 new logs [08-06-2022 07:41:01]28001: Checking for user cron vulnerabilities [08-06-2022 07:42:02]30695: WAF :: fetched 49 new logs [08-06-2022 07:43:02]900: WAF :: fetched 55 new logs [08-06-2022 07:44:01]3686: Checking ditributed CMS bruteforce attacks [08-06-2022 07:44:02]3686: WAF :: fetched 36 new logs [08-06-2022 07:45:01]: Checking for definition updates [08-06-2022 07:45:04]6391: Updated virus defnition : malware.expert.ndb [08-06-2022 07:46:02]9121: WAF :: fetched 1 new logs [08-06-2022 07:48:02]14377: WAF :: fetched 1 new logs [08-06-2022 07:49:01]17089: WAF :: fetched 2 new logs [08-06-2022 07:59:01]11415: WAF :: fetched 1 new logs [08-06-2022 08:00:01]13828: WAF :: fetched 1 new logs [08-06-2022 08:02:01]19644: WAF :: fetched 1 new logs [08-06-2022 08:05:02]27768: WAF :: fetched 2 new logs [08-06-2022 08:10:01]8912: WAF :: fetched 1 new logs [08-06-2022 08:12:02]14335: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654686722 [08-06-2022 08:12:02]14335: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 08:12:04]14335: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 08:12:04]14335: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-0812/20220608-081202-YqCEApY_TebQdDpE3h9TcQAAABU [08-06-2022 08:12:04]14335: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 08:12:04]14335: WAF :: fetched 1 new logs [08-06-2022 08:13:01]17013: WAF :: fetched 9 new logs [08-06-2022 08:14:02]19771: WAF :: fetched 1 new logs [08-06-2022 08:16:02]25113: WAF :: fetched 1 new logs [08-06-2022 08:17:01]27731: WAF :: fetched 2 new logs [08-06-2022 08:18:02]30426: WAF :: fetched 2 new logs [08-06-2022 08:21:02]6298: WAF :: fetched 1 new logs [08-06-2022 08:23:02]11611: WAF :: fetched 1 new logs [08-06-2022 08:27:01]22329: WAF :: fetched 1 new logs [08-06-2022 08:28:02]24983: WAF :: fetched 1 new logs [08-06-2022 08:29:01]27739: WAF :: fetched 2 new logs [08-06-2022 08:30:01]30449: WAF :: fetched 1 new logs [08-06-2022 08:32:01]3418: WAF :: fetched 2 new logs [08-06-2022 08:33:02]6271: WAF :: fetched 1 new logs [08-06-2022 08:36:01]14145: WAF :: fetched 1 new logs [08-06-2022 08:39:02]22429: WAF :: fetched 4 new logs [08-06-2022 08:40:01]25056: WAF :: fetched 1 new logs [08-06-2022 08:41:01]27826: WAF :: fetched 5 new logs [08-06-2022 08:41:01]27826: Checking for user cron vulnerabilities [08-06-2022 08:42:02]30465: WAF :: fetched 3 new logs [08-06-2022 08:44:01]3602: Checking ditributed CMS bruteforce attacks [08-06-2022 08:44:01]3602: WAF :: fetched 5 new logs [08-06-2022 08:47:02]11748: WAF :: fetched 1 new logs [08-06-2022 08:50:02]19885: WAF :: fetched 1 new logs [08-06-2022 08:58:02]9252: WAF :: fetched 3 new logs [08-06-2022 08:59:01]11954: WAF :: fetched 2 new logs [08-06-2022 09:00:02]14382: WAF :: fetched 2 new logs [08-06-2022 09:03:02]22997: WAF :: fetched 1 new logs [08-06-2022 09:06:01]31123: WAF :: fetched 9 new logs [08-06-2022 09:10:02]9637: WAF :: fetched 2 new logs [08-06-2022 09:12:01]15057: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654690321 [08-06-2022 09:12:01]15057: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 09:12:03]15057: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 09:12:03]15057: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-0912/20220608-091201-YqCSERRizWH1dLuYUEKmVgAAABE [08-06-2022 09:12:03]15057: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 09:12:03]15057: WAF :: fetched 1 new logs [08-06-2022 09:13:02]17794: WAF :: fetched 1 new logs [08-06-2022 09:14:01]20525: WAF :: fetched 2 new logs [08-06-2022 09:15:02]23235: WAF :: fetched 7 new logs [08-06-2022 09:16:01]25947: WAF :: fetched 2 new logs [08-06-2022 09:17:01]28612: WAF :: fetched 1 new logs [08-06-2022 09:23:01]12616: WAF :: fetched 2 new logs [08-06-2022 09:24:01]15372: WAF :: fetched 1 new logs [08-06-2022 09:28:01]26282: WAF :: fetched 1 new logs [08-06-2022 09:30:01]31763: WAF :: fetched 1 new logs [08-06-2022 09:33:01]7587: WAF :: fetched 19 new logs [08-06-2022 09:34:01]10382: WAF :: fetched 55 new logs [08-06-2022 09:35:02]13057: WAF :: fetched 57 new logs [08-06-2022 09:36:01]15839: WAF :: fetched 39 new logs [08-06-2022 09:37:01]18487: WAF :: fetched 1 new logs [08-06-2022 09:38:02]21191: WAF :: fetched 2 new logs [08-06-2022 09:39:01]23951: WAF :: fetched 1 new logs [08-06-2022 09:40:02]26697: WAF :: fetched 1 new logs [08-06-2022 09:41:01]29462: WAF :: fetched 2 new logs [08-06-2022 09:41:01]29462: Checking for user cron vulnerabilities [08-06-2022 09:42:01]32143: WAF :: fetched 4 new logs [08-06-2022 09:43:02]2484: WAF :: fetched 3 new logs [08-06-2022 09:44:01]5366: Checking ditributed CMS bruteforce attacks [08-06-2022 09:45:01]8078: WAF :: fetched 34 new logs [08-06-2022 09:46:02]10886: WAF :: fetched 1 new logs [08-06-2022 09:48:01]16226: WAF :: fetched 3 new logs [08-06-2022 09:49:01]19021: WAF :: fetched 1 new logs [08-06-2022 09:50:02]21756: WAF :: fetched 1 new logs [08-06-2022 09:52:01]27189: WAF :: fetched 1 new logs [08-06-2022 09:55:01]3027: WAF :: fetched 3 new logs [08-06-2022 09:56:02]5881: WAF :: fetched 1 new logs [08-06-2022 10:02:02]22562: WAF :: fetched 3 new logs [08-06-2022 10:03:01]25240: WAF :: fetched 1 new logs [08-06-2022 10:05:02]30753: WAF :: fetched 2 new logs [08-06-2022 10:06:01]1132: WAF :: fetched 2 new logs [08-06-2022 10:07:02]3999: WAF :: fetched 1 new logs [08-06-2022 10:09:01]9554: WAF :: fetched 5 new logs [08-06-2022 10:10:02]12329: WAF :: fetched 5 new logs [08-06-2022 10:11:01]15129: WAF :: fetched 5 new logs [08-06-2022 10:12:02]17898: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654693922 [08-06-2022 10:12:02]17898: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 10:12:04]17898: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 10:12:04]17898: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-1012/20220608-101202-YqCgIoRV-iY5vmFwBfLJbgAAACE [08-06-2022 10:12:04]17898: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 10:12:04]17898: WAF :: fetched 2 new logs [08-06-2022 10:14:01]23383: WAF :: fetched 1 new logs [08-06-2022 10:15:02]26162: WAF :: fetched 2 new logs [08-06-2022 10:16:01]28907: WAF :: fetched 2 new logs [08-06-2022 10:17:02]31945: WAF :: fetched 1 new logs [08-06-2022 10:18:01]2268: WAF :: fetched 2 new logs [08-06-2022 10:19:01]5069: WAF :: fetched 2 new logs [08-06-2022 10:21:01]10622: WAF :: fetched 5 new logs [08-06-2022 10:22:01]13343: WAF :: fetched 3 new logs [08-06-2022 10:23:02]16057: WAF :: fetched 41 new logs [08-06-2022 10:24:02]18803: WAF :: fetched 27 new logs [08-06-2022 10:25:01]21613: WAF :: fetched 32 new logs [08-06-2022 10:26:02]24470: WAF :: fetched 30 new logs [08-06-2022 10:27:01]27171: WAF :: fetched 29 new logs [08-06-2022 10:28:02]29952: WAF :: fetched 1 new logs [08-06-2022 10:30:01]3323: WAF :: fetched 4 new logs [08-06-2022 10:31:01]6168: WAF :: fetched 6 new logs [08-06-2022 10:33:01]11570: WAF :: fetched 20 new logs [08-06-2022 10:36:01]19915: WAF :: fetched 1 new logs [08-06-2022 10:41:02]1574: Checking for user cron vulnerabilities [08-06-2022 10:42:01]4320: WAF :: fetched 5 new logs [08-06-2022 10:43:02]7109: WAF :: fetched 2 new logs [08-06-2022 10:44:01]9854: Checking ditributed CMS bruteforce attacks [08-06-2022 10:45:01]12628: WAF :: fetched 2 new logs [08-06-2022 10:46:02]15548: WAF :: fetched 3 new logs [08-06-2022 10:49:02]23842: WAF :: fetched 4 new logs [08-06-2022 10:50:01]26663: WAF :: fetched 4 new logs [08-06-2022 10:52:02]32306: WAF :: fetched 4 new logs [08-06-2022 10:54:01]5521: WAF :: fetched 7 new logs [08-06-2022 10:55:01]8349: WAF :: fetched 1 new logs [08-06-2022 10:56:02]11242: WAF :: fetched 2 new logs [08-06-2022 10:56:02]11240: httpd.conf changed. Refreshing watchlist. [08-06-2022 11:00:02]22339: WAF :: fetched 1 new logs [08-06-2022 11:02:02]28403: WAF :: fetched 1 new logs [08-06-2022 11:03:01]31160: WAF :: fetched 1 new logs [08-06-2022 11:05:02]4554: WAF :: fetched 2 new logs [08-06-2022 11:06:01]7491: WAF :: fetched 5 new logs [08-06-2022 11:07:01]10285: WAF :: fetched 2 new logs [08-06-2022 11:07:54]10441: Performed RBL check for 23.111.136.34. [08-06-2022 11:08:02]13016: WAF :: fetched 1 new logs [08-06-2022 11:09:01]15756: WAF :: fetched 1 new logs [08-06-2022 11:10:02]18739: WAF :: fetched 4 new logs [08-06-2022 11:12:02]24398: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654697522 [08-06-2022 11:12:02]24398: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 11:12:04]24398: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 11:12:04]24398: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-1112/20220608-111202-YqCuMudj0RLhvNJxVa6zrQAAAEc [08-06-2022 11:12:04]24398: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 11:12:04]24398: WAF :: fetched 1 new logs [08-06-2022 11:13:01]27135: WAF :: fetched 1 new logs [08-06-2022 11:15:01]32691: WAF :: fetched 1 new logs [08-06-2022 11:17:02]5925: WAF :: fetched 1 new logs [08-06-2022 11:20:01]14423: WAF :: fetched 7 new logs [08-06-2022 11:21:01]17270: WAF :: fetched 32 new logs [08-06-2022 11:23:01]22717: WAF :: fetched 12 new logs [08-06-2022 11:24:02]25483: WAF :: fetched 30 new logs [08-06-2022 11:25:01]28220: WAF :: fetched 39 new logs [08-06-2022 11:26:01]30973: WAF :: fetched 51 new logs [08-06-2022 11:27:02]1330: WAF :: fetched 55 new logs [08-06-2022 11:28:01]4118: WAF :: fetched 43 new logs [08-06-2022 11:29:02]6935: WAF :: fetched 16 new logs [08-06-2022 11:41:01]7835: Checking for user cron vulnerabilities [08-06-2022 11:42:01]10537: WAF :: fetched 1 new logs [08-06-2022 11:43:02]13313: WAF :: fetched 1 new logs [08-06-2022 11:44:01]15983: Checking ditributed CMS bruteforce attacks [08-06-2022 11:44:01]15983: WAF :: fetched 2 new logs [08-06-2022 11:45:02]18862: WAF :: fetched 3 new logs [08-06-2022 11:46:01]21707: WAF :: fetched 1 new logs [08-06-2022 11:47:01]24415: WAF :: fetched 2 new logs [08-06-2022 11:48:02]27202: WAF :: fetched 1 new logs [08-06-2022 11:51:01]3114: WAF :: fetched 1 new logs [08-06-2022 11:53:02]8702: WAF :: fetched 1 new logs [08-06-2022 11:54:01]11432: WAF :: fetched 2 new logs [08-06-2022 11:55:01]14342: WAF :: fetched 2 new logs [08-06-2022 11:56:01]17142: WAF :: fetched 3 new logs [08-06-2022 11:57:02]19886: WAF :: fetched 2 new logs [08-06-2022 11:58:01]22614: WAF :: fetched 1 new logs [08-06-2022 11:59:01]25347: WAF :: fetched 2 new logs [08-06-2022 12:00:02]27953: WAF :: fetched 2 new logs [08-06-2022 12:02:01]1631: WAF :: fetched 1 new logs [08-06-2022 12:04:01]7683: WAF :: fetched 3 new logs [08-06-2022 12:05:02]10936: WAF :: fetched 2 new logs [08-06-2022 12:06:01]13748: WAF :: fetched 3 new logs [08-06-2022 12:07:01]16447: WAF :: fetched 17 new logs [08-06-2022 12:08:02]19283: WAF :: fetched 58 new logs [08-06-2022 12:09:02]22028: WAF :: fetched 55 new logs [08-06-2022 12:10:01]24853: WAF :: fetched 53 new logs [08-06-2022 12:11:02]27677: WAF :: fetched 54 new logs [08-06-2022 12:12:02]30457: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654701122 [08-06-2022 12:12:02]30457: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 12:12:04]30457: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 12:12:04]30457: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-1212/20220608-121202-YqC8Qu7wfNbGHs7goQW9UAAAAA8 [08-06-2022 12:12:04]30457: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 12:12:04]30457: WAF :: fetched 17 new logs [08-06-2022 12:13:01]887: WAF :: fetched 12 new logs [08-06-2022 12:14:02]3757: WAF :: fetched 14 new logs [08-06-2022 12:15:01]6626: WAF :: fetched 12 new logs [08-06-2022 12:16:01]9540: WAF :: fetched 9 new logs [08-06-2022 12:17:02]12333: WAF :: fetched 11 new logs [08-06-2022 12:18:01]15148: WAF :: fetched 2 new logs [08-06-2022 12:19:01]17927: WAF :: fetched 1 new logs [08-06-2022 12:20:02]20809: WAF :: fetched 4 new logs [08-06-2022 12:21:01]23574: WAF :: fetched 2 new logs [08-06-2022 12:22:01]26315: WAF :: fetched 1 new logs [08-06-2022 12:23:01]29011: WAF :: fetched 2 new logs [08-06-2022 12:24:02]31759: WAF :: fetched 1 new logs [08-06-2022 12:30:01]15981: WAF :: fetched 1 new logs [08-06-2022 12:32:01]21568: WAF :: fetched 2 new logs [08-06-2022 12:33:01]24326: WAF :: fetched 1 new logs [08-06-2022 12:38:02]6097: WAF :: fetched 1 new logs [08-06-2022 12:41:02]14537: Checking for user cron vulnerabilities [08-06-2022 12:42:01]17266: WAF :: fetched 2 new logs [08-06-2022 12:43:01]20016: WAF :: fetched 1 new logs [08-06-2022 12:44:01]22752: Checking ditributed CMS bruteforce attacks [08-06-2022 12:44:01]22752: WAF :: fetched 3 new logs [08-06-2022 12:45:02]: Checking for software updates [08-06-2022 12:45:02]25630: WAF :: fetched 1 new logs [08-06-2022 12:46:02]28440: WAF :: fetched 4 new logs [08-06-2022 12:47:01]31211: WAF :: fetched 2 new logs [08-06-2022 12:50:02]7243: WAF :: fetched 1 new logs [08-06-2022 12:53:02]15679: WAF :: fetched 1 new logs [08-06-2022 12:54:02]18386: WAF :: fetched 1 new logs [08-06-2022 12:56:01]24036: WAF :: fetched 11 new logs [08-06-2022 12:57:01]26744: WAF :: fetched 35 new logs [08-06-2022 12:58:02]29474: WAF :: fetched 32 new logs [08-06-2022 12:59:01]32151: WAF :: fetched 31 new logs [08-06-2022 13:00:01]2248: WAF :: fetched 35 new logs [08-06-2022 13:01:02]5583: WAF :: fetched 21 new logs [08-06-2022 13:02:01]8349: WAF :: fetched 5 new logs [08-06-2022 13:04:02]13788: WAF :: fetched 2 new logs [08-06-2022 13:05:02]16578: WAF :: fetched 2 new logs [08-06-2022 13:07:01]22082: WAF :: fetched 7 new logs [08-06-2022 13:08:01]24755: WAF :: fetched 2 new logs [08-06-2022 13:09:02]27533: WAF :: fetched 3 new logs [08-06-2022 13:10:01]30327: WAF :: fetched 1 new logs [08-06-2022 13:12:02]3603: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654704722 [08-06-2022 13:12:02]3603: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 13:12:04]3603: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 13:12:04]3603: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-1312/20220608-131202-YqDKUvgHH3Rc91QI0hRtSwAAADw [08-06-2022 13:12:04]3603: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 13:12:04]3603: WAF :: fetched 5 new logs [08-06-2022 13:13:01]6469: WAF :: fetched 1 new logs [08-06-2022 13:14:02]9275: WAF :: fetched 2 new logs [08-06-2022 13:21:01]29371: WAF :: fetched 2 new logs [08-06-2022 13:25:01]8603: WAF :: fetched 3 new logs [08-06-2022 13:26:02]11805: WAF :: fetched 4 new logs [08-06-2022 13:27:02]14692: WAF :: fetched 1 new logs [08-06-2022 13:28:01]17556: WAF :: fetched 2 new logs [08-06-2022 13:29:01]20390: WAF :: fetched 1 new logs [08-06-2022 13:30:02]23313: WAF :: fetched 1 new logs [08-06-2022 13:36:01]8262: WAF :: fetched 2 new logs [08-06-2022 13:38:02]13866: WAF :: fetched 1 new logs [08-06-2022 13:40:02]19502: WAF :: fetched 2 new logs [08-06-2022 13:41:02]22322: Checking for user cron vulnerabilities [08-06-2022 13:42:01]25114: WAF :: fetched 1 new logs [08-06-2022 13:43:02]27915: WAF :: fetched 2 new logs [08-06-2022 13:44:01]30616: Checking ditributed CMS bruteforce attacks [08-06-2022 13:44:01]30616: WAF :: fetched 8 new logs [08-06-2022 13:45:02]: Checking for definition updates [08-06-2022 13:45:02]1116: WAF :: fetched 1 new logs [08-06-2022 13:49:01]12343: WAF :: fetched 1 new logs [08-06-2022 13:50:02]15195: WAF :: fetched 3 new logs [08-06-2022 13:51:01]18007: WAF :: fetched 4 new logs [08-06-2022 13:52:01]20831: WAF :: fetched 1 new logs [08-06-2022 13:56:02]32063: WAF :: fetched 3 new logs [08-06-2022 13:57:01]2257: WAF :: fetched 4 new logs [08-06-2022 13:59:02]8112: WAF :: fetched 2 new logs [08-06-2022 14:06:01]28004: WAF :: fetched 1 new logs [08-06-2022 14:10:01]6882: WAF :: fetched 7 new logs [08-06-2022 14:12:02]12583: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654708322 [08-06-2022 14:12:02]12583: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 14:12:04]12583: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 14:12:04]12583: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-1412/20220608-141202-YqDYYqGRDf_Y0qTy-7O1EAAAABA [08-06-2022 14:12:04]12583: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 14:13:01]15313: WAF :: fetched 41 new logs [08-06-2022 14:14:02]18132: WAF :: fetched 60 new logs [08-06-2022 14:15:02]21015: WAF :: fetched 2 new logs [08-06-2022 14:16:01]23818: WAF :: fetched 5 new logs [08-06-2022 14:17:02]26590: WAF :: fetched 2 new logs [08-06-2022 14:18:01]29337: WAF :: fetched 1 new logs [08-06-2022 14:19:01]32124: WAF :: fetched 5 new logs [08-06-2022 14:20:02]2704: WAF :: fetched 4 new logs [08-06-2022 14:21:02]5665: WAF :: fetched 1 new logs [08-06-2022 14:22:01]8422: WAF :: fetched 3 new logs [08-06-2022 14:23:01]11211: WAF :: fetched 1 new logs [08-06-2022 14:24:01]13965: WAF :: fetched 1 new logs [08-06-2022 14:25:02]16808: WAF :: fetched 3 new logs [08-06-2022 14:26:02]19646: WAF :: fetched 2 new logs [08-06-2022 14:27:01]22486: WAF :: fetched 1 new logs [08-06-2022 14:29:01]28002: WAF :: fetched 1 new logs [08-06-2022 14:31:02]1220: WAF :: fetched 1 new logs [08-06-2022 14:32:01]4104: WAF :: fetched 21 new logs [08-06-2022 14:33:02]6967: WAF :: fetched 1 new logs [08-06-2022 14:34:01]9807: WAF :: fetched 5 new logs [08-06-2022 14:37:01]18460: WAF :: fetched 7 new logs [08-06-2022 14:38:02]21294: WAF :: fetched 2 new logs [08-06-2022 14:39:01]24094: WAF :: fetched 1 new logs [08-06-2022 14:40:02]27019: WAF :: fetched 2 new logs [08-06-2022 14:41:01]29892: WAF :: fetched 2 new logs [08-06-2022 14:41:01]29892: Checking for user cron vulnerabilities [08-06-2022 14:42:01]32667: WAF :: fetched 3 new logs [08-06-2022 14:43:01]3102: WAF :: fetched 1 new logs [08-06-2022 14:44:01]5998: Checking ditributed CMS bruteforce attacks [08-06-2022 14:44:02]5998: WAF :: fetched 3 new logs [08-06-2022 14:45:02]8865: WAF :: fetched 1 new logs [08-06-2022 14:46:01]11757: WAF :: fetched 2 new logs [08-06-2022 14:47:02]14577: WAF :: fetched 2 new logs [08-06-2022 14:48:01]17384: WAF :: fetched 12 new logs [08-06-2022 14:49:01]20183: WAF :: fetched 3 new logs [08-06-2022 14:50:02]23149: WAF :: fetched 2 new logs [08-06-2022 14:51:02]26111: WAF :: fetched 1 new logs [08-06-2022 14:52:02]28926: WAF :: fetched 1 new logs [08-06-2022 14:53:03]31763: Updated license status via CDN [08-06-2022 14:54:01]2162: WAF :: fetched 5 new logs [08-06-2022 14:56:02]7960: WAF :: fetched 6 new logs [08-06-2022 14:57:01]10718: WAF :: fetched 3 new logs [08-06-2022 14:58:02]13505: WAF :: fetched 1 new logs [08-06-2022 14:59:01]16246: WAF :: fetched 2 new logs [08-06-2022 15:01:02]22138: Reseting cPGuard inotify settings [08-06-2022 15:02:01]24910: WAF :: fetched 4 new logs [08-06-2022 15:03:02]27747: WAF :: fetched 1 new logs [08-06-2022 15:04:01]30512: WAF :: fetched 3 new logs [08-06-2022 15:05:02]1017: WAF :: fetched 25 new logs [08-06-2022 15:06:01]3975: WAF :: fetched 7 new logs [08-06-2022 15:07:01]6892: WAF :: fetched 5 new logs [08-06-2022 15:08:01]9719: WAF :: fetched 2 new logs [08-06-2022 15:10:02]15499: WAF :: fetched 6 new logs [08-06-2022 15:11:01]18413: WAF :: fetched 2 new logs [08-06-2022 15:12:02]21273: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654711922 [08-06-2022 15:12:02]21273: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 15:12:04]21273: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 15:12:04]21273: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-1512/20220608-151202-YqDmckRn1nTwmLepYTgd2wAAAD0 [08-06-2022 15:12:04]21273: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 15:12:04]21273: WAF :: fetched 1 new logs [08-06-2022 15:13:01]23988: WAF :: fetched 5 new logs [08-06-2022 15:14:01]26699: WAF :: fetched 3 new logs [08-06-2022 15:15:02]29525: WAF :: fetched 4 new logs [08-06-2022 15:20:01]11330: WAF :: fetched 5 new logs [08-06-2022 15:23:01]19682: WAF :: fetched 2 new logs [08-06-2022 15:24:02]22445: WAF :: fetched 3 new logs [08-06-2022 15:25:01]25180: WAF :: fetched 2 new logs [08-06-2022 15:26:01]28105: WAF :: fetched 9 new logs [08-06-2022 15:27:02]30909: WAF :: fetched 5 new logs [08-06-2022 15:28:01]1469: WAF :: fetched 11 new logs [08-06-2022 15:30:01]7254: WAF :: fetched 1 new logs [08-06-2022 15:32:01]13006: WAF :: fetched 3 new logs [08-06-2022 15:33:02]15749: WAF :: fetched 2 new logs [08-06-2022 15:35:02]21251: WAF :: fetched 1 new logs [08-06-2022 15:36:01]24168: WAF :: fetched 1 new logs [08-06-2022 15:37:01]26945: WAF :: fetched 1 new logs [08-06-2022 15:39:02]32471: WAF :: fetched 2 new logs [08-06-2022 15:40:01]2901: WAF :: fetched 1 new logs [08-06-2022 15:41:01]5952: WAF :: fetched 1 new logs [08-06-2022 15:41:01]5952: Checking for user cron vulnerabilities [08-06-2022 15:44:01]14270: Checking ditributed CMS bruteforce attacks [08-06-2022 15:44:01]14270: WAF :: fetched 3 new logs [08-06-2022 15:45:02]17006: WAF :: fetched 4 new logs [08-06-2022 15:46:01]19952: WAF :: fetched 2 new logs [08-06-2022 15:48:02]25624: WAF :: fetched 1 new logs [08-06-2022 15:49:01]28486: WAF :: fetched 3 new logs [08-06-2022 15:51:02]1959: WAF :: fetched 3 new logs [08-06-2022 15:52:01]4830: WAF :: fetched 4 new logs [08-06-2022 15:53:01]7685: WAF :: fetched 6 new logs [08-06-2022 15:54:02]10521: WAF :: fetched 4 new logs [08-06-2022 15:55:01]13308: WAF :: fetched 1 new logs [08-06-2022 15:56:02]16275: WAF :: fetched 4 new logs [08-06-2022 15:57:02]19027: WAF :: fetched 11 new logs [08-06-2022 15:58:01]21766: WAF :: fetched 10 new logs [08-06-2022 15:59:02]24543: WAF :: fetched 7 new logs [08-06-2022 16:00:01]27021: WAF :: fetched 6 new logs [08-06-2022 16:01:02]30323: WAF :: fetched 5 new logs [08-06-2022 16:02:01]688: WAF :: fetched 3 new logs [08-06-2022 16:03:01]3533: WAF :: fetched 1 new logs [08-06-2022 16:04:01]6368: WAF :: fetched 3 new logs [08-06-2022 16:06:02]12009: WAF :: fetched 6 new logs [08-06-2022 16:09:01]20169: WAF :: fetched 2 new logs [08-06-2022 16:11:01]25950: WAF :: fetched 1 new logs [08-06-2022 16:12:01]28709: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654715521 [08-06-2022 16:12:01]28709: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 16:12:03]28709: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 16:12:03]28709: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-1612/20220608-161201-YqD0gT-IA6aFyFyom8COdwAAAAU [08-06-2022 16:12:03]28709: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 16:12:03]28709: WAF :: fetched 1 new logs [08-06-2022 16:15:02]4750: WAF :: fetched 1 new logs [08-06-2022 16:21:01]21656: WAF :: fetched 1 new logs [08-06-2022 16:22:01]24373: WAF :: fetched 2 new logs [08-06-2022 16:24:01]29850: WAF :: fetched 1 new logs [08-06-2022 16:25:02]32553: WAF :: fetched 1 new logs [08-06-2022 16:26:01]3003: WAF :: fetched 2 new logs [08-06-2022 16:28:01]8548: WAF :: fetched 3 new logs [08-06-2022 16:29:01]11285: WAF :: fetched 1 new logs [08-06-2022 16:30:02]14071: WAF :: fetched 2 new logs [08-06-2022 16:31:01]16987: WAF :: fetched 1 new logs [08-06-2022 16:32:01]19786: WAF :: fetched 2 new logs [08-06-2022 16:33:01]22539: WAF :: fetched 1 new logs [08-06-2022 16:33:01]22538: httpd.conf changed. Refreshing watchlist. [08-06-2022 16:34:02]25379: httpd.conf changed. Refreshing watchlist. [08-06-2022 16:39:02]7010: httpd.conf changed. Refreshing watchlist. [08-06-2022 16:41:01]12773: Checking for user cron vulnerabilities [08-06-2022 16:44:01]20977: Checking ditributed CMS bruteforce attacks [08-06-2022 16:44:01]20977: WAF :: fetched 29 new logs [08-06-2022 16:47:01]29365: WAF :: fetched 1 new logs [08-06-2022 16:50:01]5410: WAF :: fetched 3 new logs [08-06-2022 16:51:02]8382: WAF :: fetched 1 new logs [08-06-2022 16:52:02]11143: WAF :: fetched 3 new logs [08-06-2022 16:54:02]16704: WAF :: fetched 4 new logs [08-06-2022 17:03:02]9696: WAF :: fetched 1 new logs [08-06-2022 17:04:02]12499: WAF :: fetched 1 new logs [08-06-2022 17:05:01]15303: WAF :: fetched 3 new logs [08-06-2022 17:11:02]32433: WAF :: fetched 1 new logs [08-06-2022 17:12:02]2910: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654719122 [08-06-2022 17:12:02]2910: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 17:12:04]2910: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 17:12:04]2910: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-1712/20220608-171202-YqECkvDvmvdZTpd2vL4K3gAAACQ [08-06-2022 17:12:04]2910: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 17:12:04]2910: WAF :: fetched 1 new logs [08-06-2022 17:14:02]8896: WAF :: fetched 1 new logs [08-06-2022 17:15:01]11774: WAF :: fetched 1 new logs [08-06-2022 17:17:01]17534: WAF :: fetched 2 new logs [08-06-2022 17:18:01]20386: WAF :: fetched 2 new logs [08-06-2022 17:20:01]26121: WAF :: fetched 2 new logs [08-06-2022 17:21:01]29048: WAF :: fetched 1 new logs [08-06-2022 17:22:02]31950: WAF :: fetched 1 new logs [08-06-2022 17:22:02]31951: httpd.conf changed. Refreshing watchlist. [08-06-2022 17:23:02]2490: WAF :: fetched 4 new logs [08-06-2022 17:23:02]2488: httpd.conf changed. Refreshing watchlist. [08-06-2022 17:24:01]5394: WAF :: fetched 4 new logs [08-06-2022 17:25:01]8197: WAF :: fetched 1 new logs [08-06-2022 17:26:02]11242: WAF :: fetched 1 new logs [08-06-2022 17:27:02]14034: WAF :: fetched 3 new logs [08-06-2022 17:28:01]16826: WAF :: fetched 5 new logs [08-06-2022 17:30:01]22493: WAF :: fetched 2 new logs [08-06-2022 17:31:01]25452: WAF :: fetched 7 new logs [08-06-2022 17:32:02]28328: WAF :: fetched 3 new logs [08-06-2022 17:33:01]31140: WAF :: fetched 33 new logs [08-06-2022 17:34:02]1595: WAF :: fetched 2 new logs [08-06-2022 17:39:02]15740: WAF :: fetched 1 new logs [08-06-2022 17:41:01]21533: Checking for user cron vulnerabilities [08-06-2022 17:43:01]27139: WAF :: fetched 1 new logs [08-06-2022 17:44:02]29989: Checking ditributed CMS bruteforce attacks [08-06-2022 17:45:01]32701: WAF :: fetched 2 new logs [08-06-2022 17:47:01]6110: WAF :: fetched 4 new logs [08-06-2022 17:48:01]8927: WAF :: fetched 2 new logs [08-06-2022 17:49:02]11675: WAF :: fetched 1 new logs [08-06-2022 17:50:01]14408: WAF :: fetched 5 new logs [08-06-2022 17:51:01]17288: WAF :: fetched 3 new logs [08-06-2022 17:53:01]22750: WAF :: fetched 12 new logs [08-06-2022 17:54:02]25474: WAF :: fetched 17 new logs [08-06-2022 17:55:01]28216: WAF :: fetched 46 new logs [08-06-2022 17:56:01]31136: WAF :: fetched 40 new logs [08-06-2022 17:57:02]1478: WAF :: fetched 38 new logs [08-06-2022 17:58:01]4220: WAF :: fetched 36 new logs [08-06-2022 17:59:01]6925: WAF :: fetched 39 new logs [08-06-2022 18:00:02]9396: WAF :: fetched 39 new logs [08-06-2022 18:01:01]12634: WAF :: fetched 39 new logs [08-06-2022 18:02:01]15325: WAF :: fetched 22 new logs [08-06-2022 18:05:02]23572: WAF :: fetched 9 new logs [08-06-2022 18:06:02]26465: WAF :: fetched 7 new logs [08-06-2022 18:09:01]2316: WAF :: fetched 1 new logs [08-06-2022 18:12:02]10860: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654722722 [08-06-2022 18:12:02]10860: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 18:12:04]10860: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 18:12:04]10860: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-1812/20220608-181202-YqEQoj0-_-6ibJbJ6BNYxwAAACs [08-06-2022 18:12:04]10860: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [08-06-2022 18:12:04]10860: WAF :: fetched 1 new logs [08-06-2022 18:13:01]13607: WAF :: fetched 3 new logs [08-06-2022 18:15:02]19099: WAF :: fetched 1 new logs [08-06-2022 18:17:01]24648: WAF :: fetched 1 new logs [08-06-2022 18:18:02]27436: WAF :: fetched 2 new logs [08-06-2022 18:20:02]509: WAF :: fetched 1 new logs [08-06-2022 18:22:01]6325: WAF :: fetched 1 new logs [08-06-2022 18:23:02]9146: WAF :: fetched 1 new logs [08-06-2022 18:24:01]11907: WAF :: fetched 1 new logs [08-06-2022 18:27:01]20312: WAF :: fetched 2 new logs [08-06-2022 18:32:01]2107: WAF :: fetched 2 new logs [08-06-2022 18:35:01]10672: WAF :: fetched 1 new logs [08-06-2022 18:40:01]24691: WAF :: fetched 1 new logs [08-06-2022 18:41:02]27770: Checking for user cron vulnerabilities [08-06-2022 18:43:02]886: WAF :: fetched 5 new logs [08-06-2022 18:44:01]3661: Checking ditributed CMS bruteforce attacks [08-06-2022 18:45:01]6519: WAF :: fetched 5 new logs [08-06-2022 18:48:02]14956: WAF :: fetched 1 new logs [08-06-2022 18:52:01]26096: WAF :: fetched 1 new logs [08-06-2022 18:54:01]31621: WAF :: fetched 1 new logs [08-06-2022 18:56:02]5024: WAF :: fetched 1 new logs [08-06-2022 18:57:01]7764: WAF :: fetched 1 new logs [08-06-2022 18:58:02]10529: WAF :: fetched 3 new logs [08-06-2022 18:59:01]13246: WAF :: fetched 1 new logs [08-06-2022 19:00:02]15742: WAF :: fetched 1 new logs [08-06-2022 19:03:01]24591: WAF :: fetched 1 new logs [08-06-2022 19:06:01]523: WAF :: fetched 2 new logs [08-06-2022 19:10:02]11700: WAF :: fetched 1 new logs [08-06-2022 19:11:01]14595: WAF :: fetched 4 new logs [08-06-2022 19:12:01]17395: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654726321 [08-06-2022 19:12:01]17395: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 19:12:03]17395: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 19:12:03]17395: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-1912/20220608-191201-YqEesbgQBmrb9C174dfv6gAAAB8 [08-06-2022 19:12:03]17395: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 19:12:03]17395: WAF :: fetched 46 new logs [08-06-2022 19:15:01]25743: WAF :: fetched 7 new logs [08-06-2022 19:16:01]28660: WAF :: fetched 4 new logs [08-06-2022 19:17:01]31400: WAF :: fetched 3 new logs [08-06-2022 19:18:02]1823: WAF :: fetched 3 new logs [08-06-2022 19:20:02]7523: WAF :: fetched 8 new logs [08-06-2022 19:22:02]13209: WAF :: fetched 1 new logs [08-06-2022 19:23:01]15880: WAF :: fetched 1 new logs [08-06-2022 19:29:01]32470: WAF :: fetched 1 new logs [08-06-2022 19:36:01]19818: WAF :: fetched 4 new logs [08-06-2022 19:37:01]22527: WAF :: fetched 2 new logs [08-06-2022 19:41:01]722: WAF :: fetched 1 new logs [08-06-2022 19:41:01]722: Checking for user cron vulnerabilities [08-06-2022 19:42:01]3589: WAF :: fetched 2 new logs [08-06-2022 19:44:01]9024: Checking ditributed CMS bruteforce attacks [08-06-2022 19:44:02]9024: WAF :: fetched 1 new logs [08-06-2022 19:45:01]: Checking for definition updates [08-06-2022 19:46:02]14616: WAF :: fetched 4 new logs [08-06-2022 19:50:02]25459: WAF :: fetched 3 new logs [08-06-2022 19:53:01]1461: WAF :: fetched 2 new logs [08-06-2022 19:55:02]7143: WAF :: fetched 3 new logs [08-06-2022 19:57:01]12809: WAF :: fetched 1 new logs [08-06-2022 19:58:01]15635: WAF :: fetched 3 new logs [08-06-2022 19:58:01]15632: httpd.conf changed. Refreshing watchlist. [08-06-2022 19:59:01]18487: WAF :: fetched 2 new logs [08-06-2022 19:59:01]18490: httpd.conf changed. Refreshing watchlist. [08-06-2022 20:00:02]21039: WAF :: fetched 1 new logs [08-06-2022 20:03:02]29836: WAF :: fetched 3 new logs [08-06-2022 20:04:01]32594: WAF :: fetched 5 new logs [08-06-2022 20:04:01]32580: httpd.conf changed. Refreshing watchlist. [08-06-2022 20:05:02]2953: WAF :: fetched 1 new logs [08-06-2022 20:11:01]19410: WAF :: fetched 1 new logs [08-06-2022 20:12:01]22137: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654729921 [08-06-2022 20:12:01]22137: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 20:12:03]22137: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 20:12:03]22137: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-2012/20220608-201201-YqEsweKGQkVpHArwfV7Y4QAAAB4 [08-06-2022 20:12:03]22137: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 20:12:03]22137: WAF :: fetched 3 new logs [08-06-2022 20:13:02]24808: WAF :: fetched 1 new logs [08-06-2022 20:14:02]27452: WAF :: fetched 1 new logs [08-06-2022 20:17:02]3136: WAF :: fetched 1 new logs [08-06-2022 20:18:02]5903: WAF :: fetched 1 new logs [08-06-2022 20:21:01]14117: WAF :: fetched 1 new logs [08-06-2022 20:22:02]17061: WAF :: fetched 1 new logs [08-06-2022 20:23:02]19778: WAF :: fetched 1 new logs [08-06-2022 20:24:01]22538: WAF :: fetched 2 new logs [08-06-2022 20:25:02]25338: WAF :: fetched 2 new logs [08-06-2022 20:29:01]4136: WAF :: fetched 1 new logs [08-06-2022 20:30:02]6891: WAF :: fetched 1 new logs [08-06-2022 20:31:01]9623: WAF :: fetched 2 new logs [08-06-2022 20:32:02]12466: WAF :: fetched 7 new logs [08-06-2022 20:34:02]17846: WAF :: fetched 3 new logs [08-06-2022 20:37:01]25936: WAF :: fetched 1 new logs [08-06-2022 20:38:02]28659: WAF :: fetched 2 new logs [08-06-2022 20:41:01]4608: WAF :: fetched 2 new logs [08-06-2022 20:41:01]4608: Checking for user cron vulnerabilities [08-06-2022 20:43:01]10165: WAF :: fetched 1 new logs [08-06-2022 20:44:02]12885: Checking ditributed CMS bruteforce attacks [08-06-2022 20:44:02]12885: WAF :: fetched 2 new logs [08-06-2022 20:47:02]21223: WAF :: fetched 2 new logs [08-06-2022 20:50:02]29176: WAF :: fetched 4 new logs [08-06-2022 20:51:02]31912: WAF :: fetched 5 new logs [08-06-2022 20:52:01]2285: WAF :: fetched 5 new logs [08-06-2022 20:53:02]5069: WAF :: fetched 4 new logs [08-06-2022 20:55:02]10399: WAF :: fetched 2 new logs [08-06-2022 20:56:01]13046: WAF :: fetched 3 new logs [08-06-2022 20:57:01]15809: WAF :: fetched 1 new logs [08-06-2022 20:58:02]18471: WAF :: fetched 3 new logs [08-06-2022 20:59:01]21071: WAF :: fetched 2 new logs [08-06-2022 21:02:02]29463: WAF :: fetched 1 new logs [08-06-2022 21:03:01]32117: WAF :: fetched 1 new logs [08-06-2022 21:07:01]10741: WAF :: fetched 2 new logs [08-06-2022 21:08:02]13440: WAF :: fetched 5 new logs [08-06-2022 21:09:01]16132: WAF :: fetched 3 new logs [08-06-2022 21:11:02]21653: WAF :: fetched 3 new logs [08-06-2022 21:12:02]24413: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654733522 [08-06-2022 21:12:02]24413: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 21:12:04]24413: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 21:12:04]24413: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-2112/20220608-211202-YqE60qpD3T0TMQMjAJpT1QAAAB0 [08-06-2022 21:12:04]24413: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 21:12:04]24413: WAF :: fetched 2 new logs [08-06-2022 21:13:02]27131: WAF :: fetched 1 new logs [08-06-2022 21:14:01]29777: WAF :: fetched 1 new logs [08-06-2022 21:17:01]5620: WAF :: fetched 1 new logs [08-06-2022 21:20:01]13681: WAF :: fetched 1 new logs [08-06-2022 21:22:01]19238: WAF :: fetched 2 new logs [08-06-2022 21:23:01]21933: WAF :: fetched 2 new logs [08-06-2022 21:24:02]24663: WAF :: fetched 3 new logs [08-06-2022 21:25:01]27337: WAF :: fetched 3 new logs [08-06-2022 21:26:02]30070: WAF :: fetched 3 new logs [08-06-2022 21:35:02]22093: WAF :: fetched 80 new logs [08-06-2022 21:36:01]24815: WAF :: fetched 52 new logs [08-06-2022 21:37:02]27558: WAF :: fetched 61 new logs [08-06-2022 21:38:01]30203: WAF :: fetched 349 new logs [08-06-2022 21:39:02]501: WAF :: fetched 244 new logs [08-06-2022 21:40:02]3191: WAF :: fetched 205 new logs [08-06-2022 21:41:02]6063: Checking for user cron vulnerabilities [08-06-2022 21:42:01]8811: WAF :: fetched 1 new logs [08-06-2022 21:43:01]11459: WAF :: fetched 1 new logs [08-06-2022 21:44:01]14126: Checking ditributed CMS bruteforce attacks [08-06-2022 21:45:01]16825: WAF :: fetched 1 new logs [08-06-2022 21:47:01]22281: WAF :: fetched 1 new logs [08-06-2022 21:48:01]24978: WAF :: fetched 1 new logs [08-06-2022 21:49:02]27658: WAF :: fetched 1 new logs [08-06-2022 21:51:02]592: WAF :: fetched 2 new logs [08-06-2022 21:53:01]6099: WAF :: fetched 1 new logs [08-06-2022 21:54:02]8808: WAF :: fetched 1 new logs [08-06-2022 21:56:02]14274: WAF :: fetched 1 new logs [08-06-2022 21:57:01]17072: WAF :: fetched 3 new logs [08-06-2022 22:02:01]30976: httpd.conf changed. Refreshing watchlist. [08-06-2022 22:03:02]1296: WAF :: fetched 6 new logs [08-06-2022 22:05:02]6713: WAF :: fetched 5 new logs [08-06-2022 22:07:02]12259: WAF :: fetched 3 new logs [08-06-2022 22:07:09]12256: Performing Domain reputation checks [08-06-2022 22:08:01]15003: WAF :: fetched 3 new logs [08-06-2022 22:10:02]20538: WAF :: fetched 1 new logs [08-06-2022 22:11:01]23312: WAF :: fetched 3 new logs [08-06-2022 22:12:02]26184: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654737122 [08-06-2022 22:12:02]26184: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 22:12:04]26184: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 22:12:04]26184: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-2212/20220608-221202-YqFI4oLZroqXLS_MOGGk9QAAAAY [08-06-2022 22:12:04]26184: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 22:12:04]26184: WAF :: fetched 1 new logs [08-06-2022 22:13:01]28892: WAF :: fetched 2 new logs [08-06-2022 22:15:02]1905: WAF :: fetched 1 new logs [08-06-2022 22:18:01]10122: WAF :: fetched 4 new logs [08-06-2022 22:19:02]12766: WAF :: fetched 1 new logs [08-06-2022 22:20:01]15420: WAF :: fetched 1 new logs [08-06-2022 22:21:02]18133: WAF :: fetched 1 new logs [08-06-2022 22:22:02]20864: WAF :: fetched 2 new logs [08-06-2022 22:24:02]26177: WAF :: fetched 1 new logs [08-06-2022 22:25:01]28844: WAF :: fetched 1 new logs [08-06-2022 22:28:01]4630: WAF :: fetched 1 new logs [08-06-2022 22:29:02]7335: WAF :: fetched 3 new logs [08-06-2022 22:30:01]10013: WAF :: fetched 2 new logs [08-06-2022 22:32:01]15531: WAF :: fetched 12 new logs [08-06-2022 22:33:01]18238: WAF :: fetched 24 new logs [08-06-2022 22:34:02]20939: WAF :: fetched 32 new logs [08-06-2022 22:35:01]23603: WAF :: fetched 37 new logs [08-06-2022 22:36:02]26370: WAF :: fetched 34 new logs [08-06-2022 22:37:01]29109: WAF :: fetched 35 new logs [08-06-2022 22:38:01]31764: WAF :: fetched 31 new logs [08-06-2022 22:39:02]2106: WAF :: fetched 34 new logs [08-06-2022 22:40:01]4892: WAF :: fetched 34 new logs [08-06-2022 22:41:02]7693: WAF :: fetched 38 new logs [08-06-2022 22:41:02]7693: Checking for user cron vulnerabilities [08-06-2022 22:42:01]10392: WAF :: fetched 30 new logs [08-06-2022 22:43:01]13092: WAF :: fetched 22 new logs [08-06-2022 22:44:01]15889: Checking ditributed CMS bruteforce attacks [08-06-2022 22:48:02]27057: WAF :: fetched 4 new logs [08-06-2022 22:49:01]29747: WAF :: fetched 2 new logs [08-06-2022 22:50:02]32472: WAF :: fetched 3 new logs [08-06-2022 22:51:01]2886: WAF :: fetched 2 new logs [08-06-2022 22:53:02]8429: WAF :: fetched 1 new logs [08-06-2022 22:58:02]21762: WAF :: fetched 1 new logs [08-06-2022 23:02:01]32719: WAF :: fetched 1 new logs [08-06-2022 23:03:02]3032: WAF :: fetched 2 new logs [08-06-2022 23:04:01]5737: WAF :: fetched 1 new logs [08-06-2022 23:07:02]13921: WAF :: fetched 3 new logs [08-06-2022 23:08:20]14074: Performed RBL check for 23.111.136.34. [08-06-2022 23:09:02]19229: WAF :: fetched 1 new logs [08-06-2022 23:10:01]21735: WAF :: fetched 2 new logs [08-06-2022 23:11:02]24625: WAF :: fetched 3 new logs [08-06-2022 23:12:01]27372: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654740721 [08-06-2022 23:12:01]27372: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-06-2022 23:12:03]27372: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-06-2022 23:12:04]27372: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220608/20220608-2312/20220608-231201-YqFW8eFcgoAyrJx0mS33RAAAAAM [08-06-2022 23:12:04]27372: WAF :: No suitable log file found. Using SQLite.. [08-06-2022 23:12:04]27372: WAF :: fetched 1 new logs [08-06-2022 23:13:01]30045: WAF :: fetched 1 new logs [08-06-2022 23:14:02]32767: WAF :: fetched 1 new logs [08-06-2022 23:16:02]5837: WAF :: fetched 1 new logs [08-06-2022 23:24:02]27261: WAF :: fetched 2 new logs [08-06-2022 23:28:01]5695: WAF :: fetched 2 new logs [08-06-2022 23:29:02]8376: WAF :: fetched 3 new logs [08-06-2022 23:30:01]11031: WAF :: fetched 1 new logs [08-06-2022 23:31:01]13721: WAF :: fetched 2 new logs [08-06-2022 23:32:02]16483: WAF :: fetched 1 new logs [08-06-2022 23:37:02]29932: WAF :: fetched 1 new logs [08-06-2022 23:39:02]2871: WAF :: fetched 1 new logs [08-06-2022 23:41:01]8448: WAF :: fetched 1 new logs [08-06-2022 23:41:01]8448: Checking for user cron vulnerabilities [08-06-2022 23:44:01]16534: Checking ditributed CMS bruteforce attacks [08-06-2022 23:44:01]16534: WAF :: fetched 3 new logs [08-06-2022 23:46:01]21921: WAF :: fetched 1 new logs [08-06-2022 23:47:01]24662: WAF :: fetched 4 new logs [08-06-2022 23:50:02]32701: WAF :: fetched 7 new logs [08-06-2022 23:51:02]2992: WAF :: fetched 38 new logs [08-06-2022 23:52:01]5820: WAF :: fetched 43 new logs [08-06-2022 23:53:02]8617: WAF :: fetched 34 new logs [08-06-2022 23:54:02]11270: WAF :: fetched 21 new logs [08-06-2022 23:55:01]14009: WAF :: fetched 28 new logs [08-06-2022 23:55:01]14032: httpd.conf changed. Refreshing watchlist. [08-06-2022 23:56:01]16741: WAF :: fetched 31 new logs [08-06-2022 23:57:02]19568: WAF :: fetched 3 new logs [08-06-2022 23:58:01]22217: WAF :: fetched 1 new logs [09-06-2022 00:00:02]27302: WAF :: fetched 2 new logs [09-06-2022 00:01:01]30644: httpd.conf changed. Refreshing watchlist. [09-06-2022 00:01:03]30643: Sending daily report for June 9, 2022 [09-06-2022 00:02:02]1172: WAF :: fetched 1 new logs [09-06-2022 00:02:02]1176: httpd.conf changed. Refreshing watchlist. [09-06-2022 00:03:01]3943: WAF :: fetched 1 new logs [09-06-2022 00:04:01]6712: WAF :: fetched 5 new logs [09-06-2022 00:05:02]9429: Deleted 0 entries older than 6 MONTH from scanner_logs [09-06-2022 00:05:02]9429: Deleted 0 files from Quarantine [09-06-2022 00:07:01]14931: WAF :: fetched 7 new logs [09-06-2022 00:08:02]17624: WAF :: fetched 11 new logs [09-06-2022 00:09:01]20335: WAF :: fetched 47 new logs [09-06-2022 00:10:02]23107: WAF :: fetched 55 new logs [09-06-2022 00:11:01]25843: WAF :: fetched 54 new logs [09-06-2022 00:12:02]28706: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654744322 [09-06-2022 00:12:02]28706: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 00:12:04]28706: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 00:12:04]28706: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-0012/20220609-001202-YqFlAnvsFcBKLx7xSLZSngAAAAQ [09-06-2022 00:12:04]28706: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 00:12:04]28706: WAF :: fetched 74 new logs [09-06-2022 00:13:01]31425: WAF :: fetched 39 new logs [09-06-2022 00:14:01]1761: WAF :: fetched 24 new logs [09-06-2022 00:15:02]4590: WAF :: fetched 28 new logs [09-06-2022 00:16:01]7370: WAF :: fetched 30 new logs [09-06-2022 00:17:01]10151: WAF :: fetched 27 new logs [09-06-2022 00:18:02]12913: WAF :: fetched 26 new logs [09-06-2022 00:19:01]15618: WAF :: fetched 26 new logs [09-06-2022 00:20:02]18389: WAF :: fetched 37 new logs [09-06-2022 00:21:01]21127: WAF :: fetched 34 new logs [09-06-2022 00:22:01]23928: WAF :: fetched 34 new logs [09-06-2022 00:23:02]26641: WAF :: fetched 31 new logs [09-06-2022 00:28:02]7959: WAF :: fetched 1 new logs [09-06-2022 00:29:01]10615: WAF :: fetched 2 new logs [09-06-2022 00:32:01]18882: WAF :: fetched 1 new logs [09-06-2022 00:35:02]27023: WAF :: fetched 1 new logs [09-06-2022 00:39:01]5605: WAF :: fetched 1 new logs [09-06-2022 00:40:01]8382: WAF :: fetched 1 new logs [09-06-2022 00:41:02]11130: WAF :: fetched 2 new logs [09-06-2022 00:41:02]11130: Checking for user cron vulnerabilities [09-06-2022 00:42:01]13516: WAF :: fetched 3 new logs [09-06-2022 00:43:01]16588: WAF :: fetched 2 new logs [09-06-2022 00:44:01]19214: Checking ditributed CMS bruteforce attacks [09-06-2022 00:44:01]19214: WAF :: fetched 1 new logs [09-06-2022 00:45:01]: Checking for software updates [09-06-2022 00:49:01]32616: WAF :: fetched 1 new logs [09-06-2022 00:50:02]2897: WAF :: fetched 1 new logs [09-06-2022 00:52:02]8366: WAF :: fetched 1 new logs [09-06-2022 00:54:01]13607: WAF :: fetched 1 new logs [09-06-2022 00:55:02]16288: WAF :: fetched 30 new logs [09-06-2022 00:56:01]18929: WAF :: fetched 35 new logs [09-06-2022 00:57:02]21690: WAF :: fetched 25 new logs [09-06-2022 00:58:01]24178: WAF :: fetched 22 new logs [09-06-2022 00:59:02]26942: WAF :: fetched 28 new logs [09-06-2022 01:00:01]29315: WAF :: fetched 33 new logs [09-06-2022 01:01:01]652: WAF :: fetched 5 new logs [09-06-2022 01:02:02]3656: WAF :: fetched 1 new logs [09-06-2022 01:03:02]6680: WAF :: fetched 6 new logs [09-06-2022 01:04:01]9515: WAF :: fetched 1 new logs [09-06-2022 01:08:01]21280: WAF :: fetched 3 new logs [09-06-2022 01:09:01]24010: WAF :: fetched 4 new logs [09-06-2022 01:10:02]26787: WAF :: fetched 1 new logs [09-06-2022 01:12:01]32565: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654747921 [09-06-2022 01:12:01]32565: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 01:12:03]32565: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 01:12:03]32565: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-0112/20220609-011201-YqFzEUbso-yJA_5DEjrSMgAAAAw [09-06-2022 01:12:03]32565: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [09-06-2022 01:12:04]32565: WAF :: fetched 1 new logs [09-06-2022 01:13:02]3105: WAF :: fetched 2 new logs [09-06-2022 01:14:01]6120: WAF :: fetched 2 new logs [09-06-2022 01:15:02]8833: WAF :: fetched 2 new logs [09-06-2022 01:16:02]11611: WAF :: fetched 2 new logs [09-06-2022 01:17:01]14676: WAF :: fetched 3 new logs [09-06-2022 01:18:02]17886: WAF :: fetched 1 new logs [09-06-2022 01:23:02]307: WAF :: fetched 1 new logs [09-06-2022 01:24:02]3213: WAF :: fetched 2 new logs [09-06-2022 01:25:02]6378: WAF :: fetched 2 new logs [09-06-2022 01:28:01]15407: WAF :: fetched 5 new logs [09-06-2022 01:30:02]21267: WAF :: fetched 6 new logs [09-06-2022 01:32:02]26978: WAF :: fetched 3 new logs [09-06-2022 01:36:02]6198: WAF :: fetched 2 new logs [09-06-2022 01:37:01]9168: WAF :: fetched 5 new logs [09-06-2022 01:38:01]12329: WAF :: fetched 1 new logs [09-06-2022 01:39:01]15191: WAF :: fetched 3 new logs [09-06-2022 01:40:02]18072: WAF :: fetched 1 new logs [09-06-2022 01:41:01]20827: Checking for user cron vulnerabilities [09-06-2022 01:44:01]29495: Checking ditributed CMS bruteforce attacks [09-06-2022 01:44:01]29495: WAF :: fetched 1 new logs [09-06-2022 01:45:01]: Checking for definition updates [09-06-2022 01:45:02]32250: WAF :: fetched 1 new logs [09-06-2022 01:48:01]8419: WAF :: fetched 3 new logs [09-06-2022 01:49:01]11074: WAF :: fetched 1 new logs [09-06-2022 01:51:01]16489: WAF :: fetched 2 new logs [09-06-2022 01:52:02]19249: WAF :: fetched 2 new logs [09-06-2022 01:54:01]25139: WAF :: fetched 3 new logs [09-06-2022 01:56:01]30530: WAF :: fetched 1 new logs [09-06-2022 02:00:02]8796: WAF :: fetched 1 new logs [09-06-2022 02:03:02]17399: WAF :: fetched 1 new logs [09-06-2022 02:08:01]30779: WAF :: fetched 6 new logs [09-06-2022 02:09:02]1029: WAF :: fetched 1 new logs [09-06-2022 02:10:01]3734: WAF :: fetched 1 new logs [09-06-2022 02:11:02]6522: WAF :: fetched 1 new logs [09-06-2022 02:12:02]9156: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654751522 [09-06-2022 02:12:02]9156: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 02:12:04]9156: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 02:12:04]9156: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-0212/20220609-021202-YqGBIv19YkMw9lnh7H3XNQAAAAU [09-06-2022 02:12:04]9156: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [09-06-2022 02:12:04]9156: WAF :: fetched 1 new logs [09-06-2022 02:13:01]11891: WAF :: fetched 2 new logs [09-06-2022 02:15:02]17233: WAF :: fetched 1 new logs [09-06-2022 02:16:02]19890: WAF :: fetched 1 new logs [09-06-2022 02:19:01]27968: WAF :: fetched 1 new logs [09-06-2022 02:21:02]1052: WAF :: fetched 1 new logs [09-06-2022 02:24:01]9352: WAF :: fetched 1 new logs [09-06-2022 02:25:02]12078: WAF :: fetched 1 new logs [09-06-2022 02:29:01]23150: WAF :: fetched 5 new logs [09-06-2022 02:30:02]25937: WAF :: fetched 7 new logs [09-06-2022 02:31:01]28683: WAF :: fetched 1 new logs [09-06-2022 02:33:02]2861: WAF :: fetched 1 new logs [09-06-2022 02:34:01]5833: WAF :: fetched 2 new logs [09-06-2022 02:36:01]11355: WAF :: fetched 2 new logs [09-06-2022 02:37:02]14138: WAF :: fetched 5 new logs [09-06-2022 02:38:01]17197: WAF :: fetched 5 new logs [09-06-2022 02:39:01]20093: WAF :: fetched 1 new logs [09-06-2022 02:41:01]26225: WAF :: fetched 2 new logs [09-06-2022 02:41:01]26225: Checking for user cron vulnerabilities [09-06-2022 02:44:01]2385: Checking ditributed CMS bruteforce attacks [09-06-2022 02:46:01]7916: WAF :: fetched 1 new logs [09-06-2022 02:47:01]11005: WAF :: fetched 1 new logs [09-06-2022 02:48:02]14029: WAF :: fetched 6 new logs [09-06-2022 02:50:02]19411: WAF :: fetched 1 new logs [09-06-2022 02:51:02]22124: WAF :: fetched 1 new logs [09-06-2022 02:52:01]24861: WAF :: fetched 4 new logs [09-06-2022 02:53:02]27692: Updated license status via CDN [09-06-2022 02:56:02]3565: WAF :: fetched 1 new logs [09-06-2022 03:00:02]14861: WAF :: fetched 1 new logs [09-06-2022 03:00:03]14861: Found and updated 32 CMS installations [09-06-2022 03:02:01]21659: WAF :: fetched 7 new logs [09-06-2022 03:02:04]14861: Sending CMS version vulnerability report emails to cpanel users [09-06-2022 03:02:07]14861: Checking wordpress installations for suspicious directories [09-06-2022 03:03:02]25009: WAF :: fetched 2 new logs [09-06-2022 03:04:26]25038: Sending CMS version vulnerability report emails to cpanel users [09-06-2022 03:04:29]25038: Checking wordpress installations for suspicious directories [09-06-2022 03:06:02]2272: WAF :: fetched 1 new logs [09-06-2022 03:08:01]8150: WAF :: fetched 3 new logs [09-06-2022 03:09:01]10918: WAF :: fetched 2 new logs [09-06-2022 03:12:02]19635: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654755122 [09-06-2022 03:12:02]19635: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 03:12:04]19635: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 03:12:04]19635: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-0312/20220609-031202-YqGPMt-mZnQRxutIWb6SwQAAAAs [09-06-2022 03:12:04]19635: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [09-06-2022 03:12:04]19635: WAF :: fetched 1 new logs [09-06-2022 03:13:01]22401: WAF :: fetched 1 new logs [09-06-2022 03:14:01]25059: WAF :: fetched 1 new logs [09-06-2022 03:17:02]679: WAF :: fetched 1 new logs [09-06-2022 03:21:01]11705: WAF :: fetched 3 new logs [09-06-2022 03:22:01]14364: WAF :: fetched 2 new logs [09-06-2022 03:23:01]17077: WAF :: fetched 79 new logs [09-06-2022 03:24:01]19717: WAF :: fetched 84 new logs [09-06-2022 03:25:01]22376: WAF :: fetched 63 new logs [09-06-2022 03:26:02]25067: WAF :: fetched 10 new logs [09-06-2022 03:29:02]635: WAF :: fetched 5 new logs [09-06-2022 03:30:02]3372: WAF :: fetched 36 new logs [09-06-2022 03:32:01]8729: WAF :: fetched 1 new logs [09-06-2022 03:35:02]11382: WAF :: fetched 14 new logs [09-06-2022 03:36:01]21049: WAF :: fetched 1 new logs [09-06-2022 03:41:02]2072: Checking for user cron vulnerabilities [09-06-2022 03:44:01]10158: Checking ditributed CMS bruteforce attacks [09-06-2022 03:47:01]18192: WAF :: fetched 1 new logs [09-06-2022 03:49:01]23590: WAF :: fetched 1 new logs [09-06-2022 03:51:02]29024: WAF :: fetched 2 new logs [09-06-2022 03:54:01]4869: WAF :: fetched 6 new logs [09-06-2022 03:55:01]7540: WAF :: fetched 3 new logs [09-06-2022 03:56:01]10205: WAF :: fetched 3 new logs [09-06-2022 04:01:01]23774: WAF :: fetched 1 new logs [09-06-2022 04:08:02]10274: WAF :: fetched 2 new logs [09-06-2022 04:12:02]20865: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654758722 [09-06-2022 04:12:02]20865: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 04:12:04]20865: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 04:12:04]20865: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-0412/20220609-041202-YqGdQhp_VgjMY9YVyK2CIQAAAAM [09-06-2022 04:12:04]20865: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [09-06-2022 04:12:04]20865: WAF :: fetched 1 new logs [09-06-2022 04:13:02]23595: WAF :: fetched 4 new logs [09-06-2022 04:14:01]26246: WAF :: fetched 1 new logs [09-06-2022 04:15:01]28917: WAF :: fetched 1 new logs [09-06-2022 04:18:01]4765: WAF :: fetched 3 new logs [09-06-2022 04:19:02]7467: WAF :: fetched 3 new logs [09-06-2022 04:21:02]12886: WAF :: fetched 1 new logs [09-06-2022 04:24:01]20979: WAF :: fetched 2 new logs [09-06-2022 04:27:01]28955: WAF :: fetched 2 new logs [09-06-2022 04:28:01]31716: WAF :: fetched 5 new logs [09-06-2022 04:29:02]2035: WAF :: fetched 3 new logs [09-06-2022 04:30:01]4787: WAF :: fetched 1 new logs [09-06-2022 04:32:01]10270: WAF :: fetched 2 new logs [09-06-2022 04:34:01]15781: WAF :: fetched 1 new logs [09-06-2022 04:36:02]21391: WAF :: fetched 2 new logs [09-06-2022 04:41:02]3009: Checking for user cron vulnerabilities [09-06-2022 04:43:02]8747: WAF :: fetched 1 new logs [09-06-2022 04:44:01]11404: Checking ditributed CMS bruteforce attacks [09-06-2022 04:44:02]11404: WAF :: fetched 1 new logs [09-06-2022 04:55:02]8727: WAF :: fetched 24 new logs [09-06-2022 04:56:01]11401: WAF :: fetched 31 new logs [09-06-2022 04:57:02]14077: WAF :: fetched 30 new logs [09-06-2022 04:58:01]16808: WAF :: fetched 30 new logs [09-06-2022 04:59:01]19452: WAF :: fetched 37 new logs [09-06-2022 05:00:02]21852: WAF :: fetched 33 new logs [09-06-2022 05:01:01]24969: WAF :: fetched 32 new logs [09-06-2022 05:01:42]24977: Starting daily scan on files updated in last 24 hrs [09-06-2022 05:02:01]27650: WAF :: fetched 4 new logs [09-06-2022 05:04:01]670: WAF :: fetched 1 new logs [09-06-2022 05:07:01]8768: WAF :: fetched 1 new logs [09-06-2022 05:08:02]11507: WAF :: fetched 2 new logs [09-06-2022 05:11:01]19506: WAF :: fetched 1 new logs [09-06-2022 05:12:02]22215: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654762322 [09-06-2022 05:12:02]22215: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 05:12:04]22215: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 05:12:04]22215: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-0512/20220609-051202-YqGrUuzxmuX-MVJsOvy9dwAAAAs [09-06-2022 05:12:04]22215: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 05:12:05]22215: WAF :: fetched 497 new logs [09-06-2022 05:15:02]30275: WAF :: fetched 1 new logs [09-06-2022 05:21:01]14390: WAF :: fetched 1 new logs [09-06-2022 05:22:01]17158: WAF :: fetched 7 new logs [09-06-2022 05:33:02]14765: WAF :: fetched 1 new logs [09-06-2022 05:40:02]1127: WAF :: fetched 1 new logs [09-06-2022 05:41:01]3969: Checking for user cron vulnerabilities [09-06-2022 05:42:01]6662: WAF :: fetched 1 new logs [09-06-2022 05:43:02]9431: WAF :: fetched 1 new logs [09-06-2022 05:44:01]12089: Checking ditributed CMS bruteforce attacks [09-06-2022 05:45:02]14775: WAF :: fetched 1 new logs [09-06-2022 05:46:01]17465: WAF :: fetched 1 new logs [09-06-2022 05:50:02]28222: WAF :: fetched 3 new logs [09-06-2022 05:51:01]30772: WAF :: fetched 3 new logs [09-06-2022 05:52:02]1181: WAF :: fetched 1 new logs [09-06-2022 05:53:01]3950: WAF :: fetched 1 new logs [09-06-2022 05:54:01]6704: WAF :: fetched 2 new logs [09-06-2022 05:57:02]14808: WAF :: fetched 1 new logs [09-06-2022 06:06:01]7248: WAF :: fetched 2 new logs [09-06-2022 06:09:01]15375: WAF :: fetched 2 new logs [09-06-2022 06:10:01]18142: WAF :: fetched 1 new logs [09-06-2022 06:11:01]20911: WAF :: fetched 2 new logs [09-06-2022 06:12:02]23663: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654765922 [09-06-2022 06:12:02]23663: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 06:12:04]23663: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 06:12:04]23663: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-0612/20220609-061202-YqG5YmhwnmDJb4myRctS3wAAAAo [09-06-2022 06:12:04]23663: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [09-06-2022 06:12:04]23663: WAF :: fetched 1 new logs [09-06-2022 06:13:01]26404: WAF :: fetched 2 new logs [09-06-2022 06:15:02]31983: WAF :: fetched 2 new logs [09-06-2022 06:16:01]2423: WAF :: fetched 1 new logs [09-06-2022 06:20:01]13430: WAF :: fetched 1 new logs [09-06-2022 06:21:01]16169: WAF :: fetched 4 new logs [09-06-2022 06:22:02]18863: WAF :: fetched 50 new logs [09-06-2022 06:23:01]21486: WAF :: fetched 48 new logs [09-06-2022 06:24:02]24307: WAF :: fetched 50 new logs [09-06-2022 06:25:01]27000: WAF :: fetched 81 new logs [09-06-2022 06:26:01]29749: WAF :: fetched 16 new logs [09-06-2022 06:29:02]5892: WAF :: fetched 1 new logs [09-06-2022 06:32:01]14272: WAF :: fetched 1 new logs [09-06-2022 06:33:01]17078: WAF :: fetched 1 new logs [09-06-2022 06:34:02]19993: WAF :: fetched 1 new logs [09-06-2022 06:41:02]7521: Checking for user cron vulnerabilities [09-06-2022 06:44:01]15908: Checking ditributed CMS bruteforce attacks [09-06-2022 06:44:01]15908: WAF :: fetched 7 new logs [09-06-2022 06:49:01]29548: WAF :: fetched 1 new logs [09-06-2022 06:50:02]32362: WAF :: fetched 1 new logs [09-06-2022 06:51:01]2716: WAF :: fetched 3 new logs [09-06-2022 06:52:01]5509: WAF :: fetched 2 new logs [09-06-2022 06:53:02]8186: WAF :: fetched 40 new logs [09-06-2022 06:54:01]10894: WAF :: fetched 12 new logs [09-06-2022 06:55:02]13567: WAF :: fetched 1 new logs [09-06-2022 06:57:02]18951: WAF :: fetched 1 new logs [09-06-2022 06:58:02]21604: WAF :: fetched 1 new logs [09-06-2022 06:59:01]24362: WAF :: fetched 2 new logs [09-06-2022 07:00:02]26750: WAF :: fetched 1 new logs [09-06-2022 07:03:02]3092: WAF :: fetched 3 new logs [09-06-2022 07:07:01]14357: WAF :: fetched 1 new logs [09-06-2022 07:08:02]17149: WAF :: fetched 2 new logs [09-06-2022 07:09:01]19953: WAF :: fetched 1 new logs [09-06-2022 07:12:01]28121: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654769521 [09-06-2022 07:12:01]28121: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 07:12:03]28121: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 07:12:04]28121: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-0712/20220609-071201-YqHHcVwD4aCzXjgySbDBmgAAABQ [09-06-2022 07:12:04]28121: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [09-06-2022 07:12:04]28121: WAF :: fetched 3 new logs [09-06-2022 07:14:02]1211: WAF :: fetched 3 new logs [09-06-2022 07:16:02]6788: WAF :: fetched 1 new logs [09-06-2022 07:19:02]14908: WAF :: fetched 1 new logs [09-06-2022 07:20:01]17664: WAF :: fetched 1 new logs [09-06-2022 07:22:01]23173: WAF :: fetched 4 new logs [09-06-2022 07:23:01]25890: WAF :: fetched 1 new logs [09-06-2022 07:24:02]28760: WAF :: fetched 2 new logs [09-06-2022 07:25:01]31458: WAF :: fetched 1 new logs [09-06-2022 07:28:02]7447: WAF :: fetched 1 new logs [09-06-2022 07:30:02]12920: WAF :: fetched 3 new logs [09-06-2022 07:31:02]15590: WAF :: fetched 1 new logs [09-06-2022 07:32:01]18231: WAF :: fetched 1 new logs [09-06-2022 07:35:02]26331: WAF :: fetched 1 new logs [09-06-2022 07:36:01]29094: WAF :: fetched 1 new logs [09-06-2022 07:38:01]2030: WAF :: fetched 1 new logs [09-06-2022 07:40:02]7590: WAF :: fetched 1 new logs [09-06-2022 07:41:01]10334: Checking for user cron vulnerabilities [09-06-2022 07:43:02]15761: WAF :: fetched 2 new logs [09-06-2022 07:44:01]18487: Checking ditributed CMS bruteforce attacks [09-06-2022 07:45:01]: Checking for definition updates [09-06-2022 07:45:01]21170: WAF :: fetched 2 new logs [09-06-2022 07:46:02]23932: WAF :: fetched 1 new logs [09-06-2022 07:49:02]32223: WAF :: fetched 1 new logs [09-06-2022 07:52:01]8134: WAF :: fetched 1 new logs [09-06-2022 07:55:01]16258: WAF :: fetched 34 new logs [09-06-2022 07:56:01]18946: WAF :: fetched 2 new logs [09-06-2022 07:59:02]27129: WAF :: fetched 2 new logs [09-06-2022 08:01:01]32710: WAF :: fetched 2 new logs [09-06-2022 08:04:02]8661: WAF :: fetched 1 new logs [09-06-2022 08:05:01]11319: WAF :: fetched 2 new logs [09-06-2022 08:06:01]14077: WAF :: fetched 1 new logs [09-06-2022 08:08:01]19412: WAF :: fetched 2 new logs [09-06-2022 08:09:01]22128: WAF :: fetched 7 new logs [09-06-2022 08:10:02]24848: WAF :: fetched 5 new logs [09-06-2022 08:11:01]27545: WAF :: fetched 4 new logs [09-06-2022 08:12:01]30170: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654773121 [09-06-2022 08:12:01]30170: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 08:12:03]30170: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 08:12:03]30170: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-0812/20220609-081201-YqHVgXVdmixQuptG-T96owAAAA4 [09-06-2022 08:12:03]30170: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 08:12:04]30170: WAF :: fetched 305 new logs [09-06-2022 08:17:01]11298: WAF :: fetched 7 new logs [09-06-2022 08:19:01]16778: WAF :: fetched 6 new logs [09-06-2022 08:20:02]19486: WAF :: fetched 3 new logs [09-06-2022 08:23:02]27481: WAF :: fetched 2 new logs [09-06-2022 08:29:02]11571: WAF :: fetched 24 new logs [09-06-2022 08:30:01]14342: WAF :: fetched 39 new logs [09-06-2022 08:31:01]17133: WAF :: fetched 39 new logs [09-06-2022 08:32:02]19901: WAF :: fetched 38 new logs [09-06-2022 08:33:01]22613: WAF :: fetched 38 new logs [09-06-2022 08:39:01]6970: WAF :: fetched 1 new logs [09-06-2022 08:41:01]12730: WAF :: fetched 1 new logs [09-06-2022 08:41:01]12730: Checking for user cron vulnerabilities [09-06-2022 08:43:01]18304: WAF :: fetched 2 new logs [09-06-2022 08:44:01]21210: Checking ditributed CMS bruteforce attacks [09-06-2022 08:44:02]21210: WAF :: fetched 1 new logs [09-06-2022 08:47:01]29364: WAF :: fetched 1 new logs [09-06-2022 08:48:01]32064: WAF :: fetched 2 new logs [09-06-2022 08:49:02]2552: WAF :: fetched 3 new logs [09-06-2022 08:50:01]5408: WAF :: fetched 4 new logs [09-06-2022 08:51:02]8244: WAF :: fetched 1 new logs [09-06-2022 08:53:01]13698: WAF :: fetched 1 new logs [09-06-2022 08:55:01]19293: WAF :: fetched 1 new logs [09-06-2022 09:01:01]3671: WAF :: fetched 1 new logs [09-06-2022 09:05:01]14662: WAF :: fetched 2 new logs [09-06-2022 09:07:02]20198: WAF :: fetched 3 new logs [09-06-2022 09:08:01]22807: WAF :: fetched 1 new logs [09-06-2022 09:09:02]25663: WAF :: fetched 1 new logs [09-06-2022 09:11:02]31262: WAF :: fetched 4 new logs [09-06-2022 09:12:02]1553: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654776722 [09-06-2022 09:12:02]1553: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 09:12:04]1553: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 09:12:04]1553: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-0912/20220609-091202-YqHjkl3ZwkuB0XI5kuF0PwAAAAw [09-06-2022 09:12:04]1553: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 09:12:04]1553: WAF :: fetched 3 new logs [09-06-2022 09:13:02]4347: WAF :: fetched 2 new logs [09-06-2022 09:19:01]20915: WAF :: fetched 4 new logs [09-06-2022 09:20:02]23620: WAF :: fetched 2 new logs [09-06-2022 09:21:02]26362: WAF :: fetched 2 new logs [09-06-2022 09:22:01]29141: WAF :: fetched 1 new logs [09-06-2022 09:24:02]2436: WAF :: fetched 1 new logs [09-06-2022 09:31:02]22313: WAF :: fetched 1 new logs [09-06-2022 09:32:01]25127: WAF :: fetched 3 new logs [09-06-2022 09:34:02]30897: WAF :: fetched 1 new logs [09-06-2022 09:37:01]6778: WAF :: fetched 2 new logs [09-06-2022 09:38:02]9454: WAF :: fetched 13 new logs [09-06-2022 09:39:02]12244: WAF :: fetched 18 new logs [09-06-2022 09:40:01]14980: WAF :: fetched 16 new logs [09-06-2022 09:41:02]17807: WAF :: fetched 16 new logs [09-06-2022 09:41:02]17807: Checking for user cron vulnerabilities [09-06-2022 09:42:01]20494: WAF :: fetched 12 new logs [09-06-2022 09:43:02]23199: WAF :: fetched 16 new logs [09-06-2022 09:44:02]25961: Checking ditributed CMS bruteforce attacks [09-06-2022 09:44:02]25961: WAF :: fetched 16 new logs [09-06-2022 09:45:02]28645: WAF :: fetched 20 new logs [09-06-2022 09:46:01]31355: WAF :: fetched 21 new logs [09-06-2022 09:47:01]1666: WAF :: fetched 21 new logs [09-06-2022 09:48:02]4513: WAF :: fetched 16 new logs [09-06-2022 09:49:01]7279: WAF :: fetched 2 new logs [09-06-2022 09:50:02]9985: WAF :: fetched 2 new logs [09-06-2022 09:51:01]12731: WAF :: fetched 2 new logs [09-06-2022 09:52:01]15403: WAF :: fetched 2 new logs [09-06-2022 09:53:02]18105: WAF :: fetched 2 new logs [09-06-2022 09:54:02]20893: WAF :: fetched 3 new logs [09-06-2022 09:55:01]23603: WAF :: fetched 2 new logs [09-06-2022 09:56:01]26363: WAF :: fetched 5 new logs [09-06-2022 09:57:01]29157: WAF :: fetched 1 new logs [09-06-2022 09:59:01]2259: WAF :: fetched 1 new logs [09-06-2022 10:04:02]16176: WAF :: fetched 4 new logs [09-06-2022 10:06:02]21815: WAF :: fetched 1 new logs [09-06-2022 10:07:01]24531: WAF :: fetched 1 new logs [09-06-2022 10:08:01]27231: WAF :: fetched 1 new logs [09-06-2022 10:10:02]346: WAF :: fetched 2 new logs [09-06-2022 10:11:01]3252: WAF :: fetched 4 new logs [09-06-2022 10:12:01]6078: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654780321 [09-06-2022 10:12:01]6078: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 10:12:03]6078: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 10:12:03]6078: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-1012/20220609-101201-YqHxoV43oDLtRjzH6wdyKAAAACE [09-06-2022 10:12:03]6078: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 10:12:04]6078: WAF :: fetched 3 new logs [09-06-2022 10:13:02]8886: WAF :: fetched 1 new logs [09-06-2022 10:16:01]17360: WAF :: fetched 5 new logs [09-06-2022 10:17:01]20120: WAF :: fetched 12 new logs [09-06-2022 10:18:02]22881: WAF :: fetched 22 new logs [09-06-2022 10:19:01]25672: WAF :: fetched 17 new logs [09-06-2022 10:20:02]28399: WAF :: fetched 22 new logs [09-06-2022 10:21:02]31209: WAF :: fetched 19 new logs [09-06-2022 10:22:01]1600: WAF :: fetched 15 new logs [09-06-2022 10:23:02]4457: WAF :: fetched 19 new logs [09-06-2022 10:24:02]7295: WAF :: fetched 23 new logs [09-06-2022 10:25:01]10095: WAF :: fetched 19 new logs [09-06-2022 10:26:02]12903: WAF :: fetched 14 new logs [09-06-2022 10:27:01]15664: WAF :: fetched 13 new logs [09-06-2022 10:28:02]18510: WAF :: fetched 22 new logs [09-06-2022 10:29:02]21366: WAF :: fetched 20 new logs [09-06-2022 10:30:01]24228: WAF :: fetched 17 new logs [09-06-2022 10:31:02]27024: WAF :: fetched 15 new logs [09-06-2022 10:32:01]29717: WAF :: fetched 13 new logs [09-06-2022 10:33:01]32655: WAF :: fetched 15 new logs [09-06-2022 10:34:02]3187: WAF :: fetched 14 new logs [09-06-2022 10:35:01]5972: WAF :: fetched 10 new logs [09-06-2022 10:36:02]8770: WAF :: fetched 8 new logs [09-06-2022 10:37:01]11489: WAF :: fetched 20 new logs [09-06-2022 10:38:02]14235: WAF :: fetched 15 new logs [09-06-2022 10:39:01]17045: WAF :: fetched 22 new logs [09-06-2022 10:40:01]19775: WAF :: fetched 19 new logs [09-06-2022 10:41:02]22625: WAF :: fetched 17 new logs [09-06-2022 10:41:02]22625: Checking for user cron vulnerabilities [09-06-2022 10:42:01]25353: WAF :: fetched 16 new logs [09-06-2022 10:43:01]28069: WAF :: fetched 16 new logs [09-06-2022 10:44:01]30872: Checking ditributed CMS bruteforce attacks [09-06-2022 10:44:01]30872: WAF :: fetched 19 new logs [09-06-2022 10:45:02]1178: WAF :: fetched 19 new logs [09-06-2022 10:46:02]4049: WAF :: fetched 15 new logs [09-06-2022 10:47:01]6814: WAF :: fetched 12 new logs [09-06-2022 10:48:02]9587: WAF :: fetched 13 new logs [09-06-2022 10:49:01]12316: WAF :: fetched 4 new logs [09-06-2022 10:58:02]5285: WAF :: fetched 1 new logs [09-06-2022 11:02:01]16699: WAF :: fetched 2 new logs [09-06-2022 11:07:48]30780: Performed RBL check for 23.111.136.34. [09-06-2022 11:08:01]995: WAF :: fetched 1 new logs [09-06-2022 11:12:02]12235: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654783922 [09-06-2022 11:12:02]12235: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 11:12:04]12235: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 11:12:04]12235: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-1112/20220609-111202-YqH_slixl_RAa7CS8C59IAAAABs [09-06-2022 11:12:04]12235: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 11:15:01]20550: WAF :: fetched 3 new logs [09-06-2022 11:17:01]26031: WAF :: fetched 3 new logs [09-06-2022 11:18:02]28810: WAF :: fetched 5 new logs [09-06-2022 11:19:02]31575: WAF :: fetched 1 new logs [09-06-2022 11:20:01]2200: WAF :: fetched 3 new logs [09-06-2022 11:21:01]5200: WAF :: fetched 35 new logs [09-06-2022 11:22:02]8068: WAF :: fetched 36 new logs [09-06-2022 11:23:01]10829: WAF :: fetched 34 new logs [09-06-2022 11:24:02]13658: WAF :: fetched 43 new logs [09-06-2022 11:25:01]16508: WAF :: fetched 36 new logs [09-06-2022 11:26:02]19397: WAF :: fetched 49 new logs [09-06-2022 11:27:01]22112: WAF :: fetched 14 new logs [09-06-2022 11:28:02]24831: WAF :: fetched 1 new logs [09-06-2022 11:30:01]30439: WAF :: fetched 30 new logs [09-06-2022 11:31:02]899: WAF :: fetched 49 new logs [09-06-2022 11:32:02]3729: WAF :: fetched 66 new logs [09-06-2022 11:33:02]6544: WAF :: fetched 60 new logs [09-06-2022 11:34:01]9349: WAF :: fetched 57 new logs [09-06-2022 11:35:02]12179: WAF :: fetched 62 new logs [09-06-2022 11:36:01]15000: WAF :: fetched 68 new logs [09-06-2022 11:37:01]17755: WAF :: fetched 44 new logs [09-06-2022 11:38:02]20477: WAF :: fetched 50 new logs [09-06-2022 11:39:01]23170: WAF :: fetched 52 new logs [09-06-2022 11:40:02]26026: WAF :: fetched 3 new logs [09-06-2022 11:41:02]28853: WAF :: fetched 2 new logs [09-06-2022 11:41:02]28853: Checking for user cron vulnerabilities [09-06-2022 11:43:01]1881: WAF :: fetched 11 new logs [09-06-2022 11:44:01]4850: Checking ditributed CMS bruteforce attacks [09-06-2022 11:44:02]4850: WAF :: fetched 50 new logs [09-06-2022 11:45:01]7737: WAF :: fetched 34 new logs [09-06-2022 11:46:02]10636: WAF :: fetched 33 new logs [09-06-2022 11:47:02]13412: WAF :: fetched 36 new logs [09-06-2022 11:48:02]16224: WAF :: fetched 44 new logs [09-06-2022 11:49:02]19062: WAF :: fetched 29 new logs [09-06-2022 11:50:01]21918: WAF :: fetched 9 new logs [09-06-2022 11:55:01]3604: WAF :: fetched 1 new logs [09-06-2022 11:57:02]9384: WAF :: fetched 1 new logs [09-06-2022 11:58:01]12230: WAF :: fetched 3 new logs [09-06-2022 12:00:02]17836: WAF :: fetched 3 new logs [09-06-2022 12:01:01]21182: WAF :: fetched 1 new logs [09-06-2022 12:03:01]27007: WAF :: fetched 1 new logs [09-06-2022 12:09:01]12775: WAF :: fetched 4 new logs [09-06-2022 12:10:02]15753: WAF :: fetched 3 new logs [09-06-2022 12:11:01]18653: WAF :: fetched 1 new logs [09-06-2022 12:12:01]21434: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654787521 [09-06-2022 12:12:02]21434: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 12:12:04]21434: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 12:12:04]21434: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-1212/20220609-121202-YqINwt2-TXTl0R6gyOZldgAAAAo [09-06-2022 12:12:04]21434: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 12:12:04]21434: WAF :: fetched 15 new logs [09-06-2022 12:13:02]24303: WAF :: fetched 52 new logs [09-06-2022 12:14:01]27056: WAF :: fetched 55 new logs [09-06-2022 12:15:02]29950: WAF :: fetched 53 new logs [09-06-2022 12:16:01]311: WAF :: fetched 53 new logs [09-06-2022 12:17:01]3176: WAF :: fetched 64 new logs [09-06-2022 12:18:02]6010: WAF :: fetched 51 new logs [09-06-2022 12:19:01]8723: WAF :: fetched 8 new logs [09-06-2022 12:20:02]11568: WAF :: fetched 1 new logs [09-06-2022 12:21:01]14389: WAF :: fetched 1 new logs [09-06-2022 12:22:01]17167: WAF :: fetched 2 new logs [09-06-2022 12:23:02]19983: WAF :: fetched 4 new logs [09-06-2022 12:24:01]22712: WAF :: fetched 1 new logs [09-06-2022 12:25:02]25574: WAF :: fetched 1 new logs [09-06-2022 12:27:01]31122: WAF :: fetched 1 new logs [09-06-2022 12:28:02]1509: WAF :: fetched 1 new logs [09-06-2022 12:37:02]26824: WAF :: fetched 7 new logs [09-06-2022 12:38:02]29635: WAF :: fetched 4 new logs [09-06-2022 12:39:01]32535: WAF :: fetched 1 new logs [09-06-2022 12:41:01]6035: WAF :: fetched 1 new logs [09-06-2022 12:41:01]6035: Checking for user cron vulnerabilities [09-06-2022 12:43:01]11572: WAF :: fetched 3 new logs [09-06-2022 12:44:01]14372: Checking ditributed CMS bruteforce attacks [09-06-2022 12:45:01]: Checking for software updates [09-06-2022 12:45:01]17191: WAF :: fetched 1 new logs [09-06-2022 12:46:02]20042: httpd.conf changed. Refreshing watchlist. [09-06-2022 12:47:02]22815: httpd.conf changed. Refreshing watchlist. [09-06-2022 12:48:01]25546: WAF :: fetched 15 new logs [09-06-2022 12:49:02]28337: WAF :: fetched 26 new logs [09-06-2022 12:50:02]31173: WAF :: fetched 33 new logs [09-06-2022 12:51:02]1700: WAF :: fetched 27 new logs [09-06-2022 12:51:02]1687: httpd.conf changed. Refreshing watchlist. [09-06-2022 12:52:01]4578: WAF :: fetched 33 new logs [09-06-2022 12:53:02]7341: WAF :: fetched 36 new logs [09-06-2022 12:54:01]10031: WAF :: fetched 33 new logs [09-06-2022 12:55:02]12876: WAF :: fetched 34 new logs [09-06-2022 12:56:01]15636: WAF :: fetched 33 new logs [09-06-2022 12:57:02]18350: WAF :: fetched 35 new logs [09-06-2022 12:58:01]21011: WAF :: fetched 36 new logs [09-06-2022 12:59:01]23775: WAF :: fetched 14 new logs [09-06-2022 13:03:01]2703: WAF :: fetched 2 new logs [09-06-2022 13:08:01]16738: WAF :: fetched 1 new logs [09-06-2022 13:10:01]22443: WAF :: fetched 1 new logs [09-06-2022 13:11:02]25339: WAF :: fetched 1 new logs [09-06-2022 13:12:02]28131: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654791122 [09-06-2022 13:12:02]28131: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 13:12:04]28131: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 13:12:04]28131: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-1312/20220609-131202-YqIb0sD7Oaie5Okjw7wtCQAAACA [09-06-2022 13:12:04]28131: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 13:12:04]28131: WAF :: fetched 1 new logs [09-06-2022 13:14:02]1323: WAF :: fetched 1 new logs [09-06-2022 13:15:01]4289: WAF :: fetched 4 new logs [09-06-2022 13:16:02]7142: WAF :: fetched 1 new logs [09-06-2022 13:17:02]9821: WAF :: fetched 2 new logs [09-06-2022 13:18:01]12563: WAF :: fetched 1 new logs [09-06-2022 13:22:02]23640: WAF :: fetched 1 new logs [09-06-2022 13:25:01]31937: WAF :: fetched 2 new logs [09-06-2022 13:34:02]24632: WAF :: fetched 1 new logs [09-06-2022 13:41:02]12519: WAF :: fetched 4 new logs [09-06-2022 13:41:02]12519: Checking for user cron vulnerabilities [09-06-2022 13:42:02]15383: WAF :: fetched 1 new logs [09-06-2022 13:44:02]21140: Checking ditributed CMS bruteforce attacks [09-06-2022 13:45:01]: Checking for definition updates [09-06-2022 13:48:02]365: WAF :: fetched 1 new logs [09-06-2022 13:50:01]6312: WAF :: fetched 2 new logs [09-06-2022 13:54:02]17443: WAF :: fetched 1 new logs [09-06-2022 13:57:01]25792: WAF :: fetched 4 new logs [09-06-2022 13:58:01]28567: WAF :: fetched 2 new logs [09-06-2022 14:00:01]1493: WAF :: fetched 2 new logs [09-06-2022 14:01:02]4869: WAF :: fetched 3 new logs [09-06-2022 14:02:01]7732: WAF :: fetched 1 new logs [09-06-2022 14:03:01]10502: WAF :: fetched 2 new logs [09-06-2022 14:07:02]21812: WAF :: fetched 1 new logs [09-06-2022 14:09:02]27412: WAF :: fetched 1 new logs [09-06-2022 14:12:02]3749: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654794722 [09-06-2022 14:12:02]3749: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 14:12:04]3749: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 14:12:04]3749: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-1412/20220609-141202-YqIp4lMOMiHlv7PMlF2BowAAAAk [09-06-2022 14:12:04]3749: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 14:12:04]3749: WAF :: fetched 2 new logs [09-06-2022 14:14:02]9406: WAF :: fetched 1 new logs [09-06-2022 14:15:01]12301: WAF :: fetched 1 new logs [09-06-2022 14:22:02]31884: WAF :: fetched 2 new logs [09-06-2022 14:23:01]2236: WAF :: fetched 1 new logs [09-06-2022 14:27:02]13731: WAF :: fetched 9 new logs [09-06-2022 14:28:01]16493: WAF :: fetched 14 new logs [09-06-2022 14:29:02]19318: WAF :: fetched 11 new logs [09-06-2022 14:30:01]22208: WAF :: fetched 6 new logs [09-06-2022 14:31:01]25137: WAF :: fetched 12 new logs [09-06-2022 14:32:02]27976: WAF :: fetched 9 new logs [09-06-2022 14:33:02]30735: WAF :: fetched 24 new logs [09-06-2022 14:34:01]1180: WAF :: fetched 35 new logs [09-06-2022 14:35:02]4167: WAF :: fetched 54 new logs [09-06-2022 14:36:02]7002: WAF :: fetched 62 new logs [09-06-2022 14:37:02]9828: WAF :: fetched 47 new logs [09-06-2022 14:38:02]12647: WAF :: fetched 44 new logs [09-06-2022 14:39:01]15421: WAF :: fetched 27 new logs [09-06-2022 14:40:02]18353: WAF :: fetched 43 new logs [09-06-2022 14:41:01]21199: WAF :: fetched 36 new logs [09-06-2022 14:41:01]21199: Checking for user cron vulnerabilities [09-06-2022 14:42:01]23920: WAF :: fetched 36 new logs [09-06-2022 14:43:02]26653: WAF :: fetched 42 new logs [09-06-2022 14:44:01]29355: Checking ditributed CMS bruteforce attacks [09-06-2022 14:44:01]29355: WAF :: fetched 24 new logs [09-06-2022 14:45:02]32202: WAF :: fetched 37 new logs [09-06-2022 14:46:02]2720: WAF :: fetched 28 new logs [09-06-2022 14:47:01]5575: WAF :: fetched 36 new logs [09-06-2022 14:48:02]8422: WAF :: fetched 42 new logs [09-06-2022 14:49:02]11245: WAF :: fetched 43 new logs [09-06-2022 14:50:01]14097: WAF :: fetched 50 new logs [09-06-2022 14:51:01]16985: WAF :: fetched 40 new logs [09-06-2022 14:52:02]19757: WAF :: fetched 44 new logs [09-06-2022 14:53:01]22596: WAF :: fetched 55 new logs [09-06-2022 14:53:02]22587: Updated license status via CDN [09-06-2022 14:54:02]25387: WAF :: fetched 44 new logs [09-06-2022 14:55:02]28194: WAF :: fetched 56 new logs [09-06-2022 14:56:01]30983: WAF :: fetched 38 new logs [09-06-2022 14:57:02]1371: WAF :: fetched 11 new logs [09-06-2022 14:58:01]4233: WAF :: fetched 9 new logs [09-06-2022 14:59:01]7060: WAF :: fetched 10 new logs [09-06-2022 15:00:02]9653: WAF :: fetched 16 new logs [09-06-2022 15:01:01]12946: WAF :: fetched 15 new logs [09-06-2022 15:01:01]12944: Reseting cPGuard inotify settings [09-06-2022 15:02:02]15764: WAF :: fetched 16 new logs [09-06-2022 15:03:01]18549: WAF :: fetched 10 new logs [09-06-2022 15:04:01]21728: WAF :: fetched 5 new logs [09-06-2022 15:05:02]24663: WAF :: fetched 13 new logs [09-06-2022 15:06:01]27550: WAF :: fetched 18 new logs [09-06-2022 15:07:01]30348: WAF :: fetched 17 new logs [09-06-2022 15:08:02]816: WAF :: fetched 20 new logs [09-06-2022 15:09:01]3615: WAF :: fetched 11 new logs [09-06-2022 15:10:02]6598: WAF :: fetched 9 new logs [09-06-2022 15:11:01]9429: WAF :: fetched 12 new logs [09-06-2022 15:12:02]12233: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654798322 [09-06-2022 15:12:02]12233: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 15:12:04]12233: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 15:12:04]12233: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-1512/20220609-151202-YqI38idoLco9m-NnQXqUUwAAAAM [09-06-2022 15:12:04]12233: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 15:12:04]12233: WAF :: fetched 14 new logs [09-06-2022 15:13:02]14992: WAF :: fetched 2 new logs [09-06-2022 15:15:02]20675: WAF :: fetched 5 new logs [09-06-2022 15:16:02]23619: WAF :: fetched 10 new logs [09-06-2022 15:17:01]26454: WAF :: fetched 7 new logs [09-06-2022 15:18:01]29269: WAF :: fetched 6 new logs [09-06-2022 15:19:01]32034: WAF :: fetched 4 new logs [09-06-2022 15:20:01]2603: WAF :: fetched 7 new logs [09-06-2022 15:21:02]5635: WAF :: fetched 7 new logs [09-06-2022 15:22:01]8509: WAF :: fetched 7 new logs [09-06-2022 15:23:01]11416: WAF :: fetched 5 new logs [09-06-2022 15:24:01]14315: WAF :: fetched 5 new logs [09-06-2022 15:25:02]17290: WAF :: fetched 2 new logs [09-06-2022 15:26:01]20280: WAF :: fetched 6 new logs [09-06-2022 15:28:02]26166: WAF :: fetched 2 new logs [09-06-2022 15:31:01]2636: WAF :: fetched 3 new logs [09-06-2022 15:32:01]5479: WAF :: fetched 5 new logs [09-06-2022 15:33:02]8294: WAF :: fetched 1 new logs [09-06-2022 15:34:01]11080: WAF :: fetched 1 new logs [09-06-2022 15:35:01]13954: WAF :: fetched 1 new logs [09-06-2022 15:39:02]25140: WAF :: fetched 2 new logs [09-06-2022 15:40:01]27953: WAF :: fetched 1 new logs [09-06-2022 15:41:01]30848: WAF :: fetched 1 new logs [09-06-2022 15:41:01]30848: Checking for user cron vulnerabilities [09-06-2022 15:42:02]1421: WAF :: fetched 3 new logs [09-06-2022 15:44:01]7113: Checking ditributed CMS bruteforce attacks [09-06-2022 15:47:02]15665: WAF :: fetched 1 new logs [09-06-2022 15:48:01]18423: WAF :: fetched 7 new logs [09-06-2022 15:49:01]21238: WAF :: fetched 6 new logs [09-06-2022 15:50:02]24087: WAF :: fetched 6 new logs [09-06-2022 15:51:01]26868: WAF :: fetched 5 new logs [09-06-2022 15:52:01]29615: WAF :: fetched 4 new logs [09-06-2022 15:54:01]2776: WAF :: fetched 4 new logs [09-06-2022 15:56:02]8515: WAF :: fetched 2 new logs [09-06-2022 15:58:01]14017: WAF :: fetched 1 new logs [09-06-2022 16:01:01]22536: WAF :: fetched 1 new logs [09-06-2022 16:04:01]30930: WAF :: fetched 2 new logs [09-06-2022 16:06:02]4339: WAF :: fetched 2 new logs [09-06-2022 16:07:01]7188: WAF :: fetched 7 new logs [09-06-2022 16:10:01]15634: WAF :: fetched 1 new logs [09-06-2022 16:11:02]18603: WAF :: fetched 1 new logs [09-06-2022 16:12:01]21387: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654801921 [09-06-2022 16:12:01]21387: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 16:12:03]21387: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 16:12:04]21387: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-1612/20220609-161201-YqJGAXihc7n_DLxBRC9w5wAAAB0 [09-06-2022 16:12:04]21387: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [09-06-2022 16:12:04]21387: WAF :: fetched 2 new logs [09-06-2022 16:16:02]32615: WAF :: fetched 1 new logs [09-06-2022 16:17:01]2955: WAF :: fetched 1 new logs [09-06-2022 16:18:02]5795: WAF :: fetched 1 new logs [09-06-2022 16:20:01]11336: WAF :: fetched 1 new logs [09-06-2022 16:24:01]22457: WAF :: fetched 2 new logs [09-06-2022 16:26:01]28234: WAF :: fetched 4 new logs [09-06-2022 16:27:01]31022: WAF :: fetched 1 new logs [09-06-2022 16:29:01]4258: WAF :: fetched 3 new logs [09-06-2022 16:30:02]7106: WAF :: fetched 1 new logs [09-06-2022 16:35:01]21021: WAF :: fetched 2 new logs [09-06-2022 16:36:02]23943: WAF :: fetched 1 new logs [09-06-2022 16:37:01]26604: WAF :: fetched 6 new logs [09-06-2022 16:38:01]29249: WAF :: fetched 5 new logs [09-06-2022 16:39:02]32035: WAF :: fetched 2 new logs [09-06-2022 16:40:01]2382: WAF :: fetched 1 new logs [09-06-2022 16:41:01]5464: Checking for user cron vulnerabilities [09-06-2022 16:42:02]8217: WAF :: fetched 1 new logs [09-06-2022 16:43:01]10931: WAF :: fetched 6 new logs [09-06-2022 16:44:01]13769: Checking ditributed CMS bruteforce attacks [09-06-2022 16:45:01]16482: WAF :: fetched 1 new logs [09-06-2022 16:46:02]19396: WAF :: fetched 2 new logs [09-06-2022 16:48:02]25034: WAF :: fetched 1 new logs [09-06-2022 16:49:02]27760: WAF :: fetched 2 new logs [09-06-2022 16:50:01]30465: WAF :: fetched 2 new logs [09-06-2022 16:52:01]3899: WAF :: fetched 1 new logs [09-06-2022 16:53:01]6689: WAF :: fetched 1 new logs [09-06-2022 16:55:01]12206: WAF :: fetched 1 new logs [09-06-2022 16:56:02]15149: WAF :: fetched 3 new logs [09-06-2022 16:57:01]17889: WAF :: fetched 1 new logs [09-06-2022 16:58:01]20707: WAF :: fetched 4 new logs [09-06-2022 16:59:02]23625: WAF :: fetched 1 new logs [09-06-2022 17:00:01]26105: WAF :: fetched 1 new logs [09-06-2022 17:01:01]29472: WAF :: fetched 1 new logs [09-06-2022 17:06:01]11485: WAF :: fetched 2 new logs [09-06-2022 17:08:02]17065: WAF :: fetched 2 new logs [09-06-2022 17:09:01]19824: WAF :: fetched 4 new logs [09-06-2022 17:10:01]22642: WAF :: fetched 9 new logs [09-06-2022 17:11:02]25587: WAF :: fetched 7 new logs [09-06-2022 17:12:01]28280: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654805521 [09-06-2022 17:12:01]28280: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 17:12:03]28280: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 17:12:04]28280: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-1712/20220609-171201-YqJUEaTMWOOEpMORxkub-wAAABU [09-06-2022 17:12:04]28280: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 17:12:04]28280: WAF :: fetched 76 new logs [09-06-2022 17:13:02]31119: WAF :: fetched 4 new logs [09-06-2022 17:14:02]1454: WAF :: fetched 6 new logs [09-06-2022 17:15:02]4272: WAF :: fetched 9 new logs [09-06-2022 17:16:01]7231: WAF :: fetched 5 new logs [09-06-2022 17:17:02]10026: WAF :: fetched 1 new logs [09-06-2022 17:18:01]12790: WAF :: fetched 1 new logs [09-06-2022 17:19:01]15558: WAF :: fetched 1 new logs [09-06-2022 17:22:02]23964: WAF :: fetched 1 new logs [09-06-2022 17:24:01]29428: WAF :: fetched 1 new logs [09-06-2022 17:25:01]32174: WAF :: fetched 1 new logs [09-06-2022 17:26:02]2731: WAF :: fetched 1 new logs [09-06-2022 17:27:01]5607: WAF :: fetched 2 new logs [09-06-2022 17:28:01]8316: WAF :: fetched 1 new logs [09-06-2022 17:30:01]13800: WAF :: fetched 1 new logs [09-06-2022 17:31:02]16684: WAF :: fetched 3 new logs [09-06-2022 17:32:01]19399: WAF :: fetched 2 new logs [09-06-2022 17:38:02]3578: WAF :: fetched 2 new logs [09-06-2022 17:39:01]6387: WAF :: fetched 2 new logs [09-06-2022 17:40:01]9124: WAF :: fetched 1 new logs [09-06-2022 17:41:02]12071: Checking for user cron vulnerabilities [09-06-2022 17:43:02]17547: WAF :: fetched 5 new logs [09-06-2022 17:44:01]20232: Checking ditributed CMS bruteforce attacks [09-06-2022 17:44:02]20232: WAF :: fetched 5 new logs [09-06-2022 17:45:01]22947: WAF :: fetched 1 new logs [09-06-2022 17:47:02]28548: WAF :: fetched 3 new logs [09-06-2022 17:48:01]31273: WAF :: fetched 2 new logs [09-06-2022 17:51:01]7495: WAF :: fetched 1 new logs [09-06-2022 17:52:01]10200: WAF :: fetched 1 new logs [09-06-2022 17:53:01]12919: WAF :: fetched 2 new logs [09-06-2022 17:54:02]15585: WAF :: fetched 2 new logs [09-06-2022 17:58:01]26679: WAF :: fetched 2 new logs [09-06-2022 18:01:01]2829: WAF :: fetched 1 new logs [09-06-2022 18:02:02]5684: WAF :: fetched 1 new logs [09-06-2022 18:03:02]8399: WAF :: fetched 1 new logs [09-06-2022 18:05:02]13903: WAF :: fetched 1 new logs [09-06-2022 18:06:01]16730: WAF :: fetched 3 new logs [09-06-2022 18:08:02]22213: WAF :: fetched 1 new logs [09-06-2022 18:09:01]24933: WAF :: fetched 1 new logs [09-06-2022 18:11:02]30556: WAF :: fetched 2 new logs [09-06-2022 18:12:01]918: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654809121 [09-06-2022 18:12:01]918: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 18:12:03]918: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 18:12:04]918: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-1812/20220609-181201-YqJiIZnWRCzNZeomsuQIKgAAAC4 [09-06-2022 18:12:04]918: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 18:12:04]918: WAF :: fetched 2 new logs [09-06-2022 18:14:01]6451: WAF :: fetched 1 new logs [09-06-2022 18:15:02]9209: WAF :: fetched 1 new logs [09-06-2022 18:16:01]12037: WAF :: fetched 1 new logs [09-06-2022 18:17:02]14764: WAF :: fetched 1 new logs [09-06-2022 18:19:01]20289: WAF :: fetched 1 new logs [09-06-2022 18:20:02]23050: WAF :: fetched 1 new logs [09-06-2022 18:22:01]28618: WAF :: fetched 1 new logs [09-06-2022 18:23:02]31317: WAF :: fetched 1 new logs [09-06-2022 18:25:01]4461: WAF :: fetched 3 new logs [09-06-2022 18:26:02]7323: WAF :: fetched 3 new logs [09-06-2022 18:28:02]12769: WAF :: fetched 1 new logs [09-06-2022 18:34:02]29172: WAF :: fetched 4 new logs [09-06-2022 18:36:02]2459: WAF :: fetched 3 new logs [09-06-2022 18:37:02]5200: WAF :: fetched 1 new logs [09-06-2022 18:41:01]16284: Checking for user cron vulnerabilities [09-06-2022 18:44:01]24371: Checking ditributed CMS bruteforce attacks [09-06-2022 18:44:02]24371: WAF :: fetched 3 new logs [09-06-2022 18:46:01]29997: WAF :: fetched 2 new logs [09-06-2022 18:47:02]32745: WAF :: fetched 1 new logs [09-06-2022 18:53:02]16836: WAF :: fetched 1 new logs [09-06-2022 18:55:02]22259: WAF :: fetched 1 new logs [09-06-2022 18:56:01]25084: WAF :: fetched 1 new logs [09-06-2022 18:57:01]27854: WAF :: fetched 4 new logs [09-06-2022 18:58:02]30542: WAF :: fetched 5 new logs [09-06-2022 18:59:02]842: WAF :: fetched 3 new logs [09-06-2022 19:05:02]17490: WAF :: fetched 1 new logs [09-06-2022 19:09:01]28504: WAF :: fetched 1 new logs [09-06-2022 19:10:02]31317: WAF :: fetched 3 new logs [09-06-2022 19:11:01]1497: WAF :: fetched 2 new logs [09-06-2022 19:12:02]4561: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654812722 [09-06-2022 19:12:02]4561: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 19:12:04]4561: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 19:12:04]4561: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-1912/20220609-191202-YqJwMlveOKnHXy-u6y2h_AAAAAc [09-06-2022 19:12:04]4561: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 19:12:04]4561: WAF :: fetched 1 new logs [09-06-2022 19:14:01]9951: WAF :: fetched 2 new logs [09-06-2022 19:15:02]12657: WAF :: fetched 1 new logs [09-06-2022 19:16:02]15475: WAF :: fetched 3 new logs [09-06-2022 19:17:01]18212: WAF :: fetched 2 new logs [09-06-2022 19:18:02]20934: WAF :: fetched 2 new logs [09-06-2022 19:19:01]23627: WAF :: fetched 2 new logs [09-06-2022 19:20:01]26381: WAF :: fetched 1 new logs [09-06-2022 19:23:02]2315: WAF :: fetched 2 new logs [09-06-2022 19:24:01]5107: WAF :: fetched 1 new logs [09-06-2022 19:25:01]7860: WAF :: fetched 2 new logs [09-06-2022 19:26:02]10764: WAF :: fetched 1 new logs [09-06-2022 19:28:02]16198: WAF :: fetched 2 new logs [09-06-2022 19:29:01]18948: WAF :: fetched 1 new logs [09-06-2022 19:30:01]21675: WAF :: fetched 1 new logs [09-06-2022 19:31:02]24542: WAF :: fetched 2 new logs [09-06-2022 19:32:02]27287: WAF :: fetched 5 new logs [09-06-2022 19:33:01]30057: WAF :: fetched 3 new logs [09-06-2022 19:35:02]3260: WAF :: fetched 1 new logs [09-06-2022 19:36:01]6234: WAF :: fetched 2 new logs [09-06-2022 19:39:01]14380: WAF :: fetched 1 new logs [09-06-2022 19:40:02]17135: WAF :: fetched 1 new logs [09-06-2022 19:41:01]20072: WAF :: fetched 3 new logs [09-06-2022 19:41:01]20072: Checking for user cron vulnerabilities [09-06-2022 19:43:01]25279: WAF :: fetched 2 new logs [09-06-2022 19:44:01]28228: Checking ditributed CMS bruteforce attacks [09-06-2022 19:44:02]28228: WAF :: fetched 1 new logs [09-06-2022 19:45:01]: Checking for definition updates [09-06-2022 19:46:01]1450: WAF :: fetched 1 new logs [09-06-2022 19:48:01]7009: WAF :: fetched 12 new logs [09-06-2022 19:49:02]9694: WAF :: fetched 12 new logs [09-06-2022 19:51:01]15263: WAF :: fetched 2 new logs [09-06-2022 19:52:01]17990: WAF :: fetched 2 new logs [09-06-2022 19:54:02]23484: WAF :: fetched 2 new logs [09-06-2022 19:55:01]26200: WAF :: fetched 1 new logs [09-06-2022 19:56:01]29048: WAF :: fetched 4 new logs [09-06-2022 19:57:02]31765: WAF :: fetched 2 new logs [09-06-2022 19:58:01]2109: WAF :: fetched 5 new logs [09-06-2022 20:00:02]7279: WAF :: fetched 2 new logs [09-06-2022 20:01:01]10609: WAF :: fetched 5 new logs [09-06-2022 20:04:02]18755: WAF :: fetched 1 new logs [09-06-2022 20:05:02]21455: WAF :: fetched 1 new logs [09-06-2022 20:07:01]27110: WAF :: fetched 4 new logs [09-06-2022 20:08:02]29855: WAF :: fetched 2 new logs [09-06-2022 20:09:01]32598: WAF :: fetched 6 new logs [09-06-2022 20:10:02]3023: WAF :: fetched 4 new logs [09-06-2022 20:11:02]5943: WAF :: fetched 7 new logs [09-06-2022 20:12:01]8762: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654816321 [09-06-2022 20:12:01]8762: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 20:12:03]8762: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 20:12:03]8762: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-2012/20220609-201201-YqJ-QVWzar1CvTkQn3O0fAAAABA [09-06-2022 20:12:03]8762: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 20:12:04]8762: WAF :: fetched 2 new logs [09-06-2022 20:13:02]11542: WAF :: fetched 2 new logs [09-06-2022 20:15:02]16896: WAF :: fetched 2 new logs [09-06-2022 20:20:01]30561: WAF :: fetched 3 new logs [09-06-2022 20:21:01]1029: WAF :: fetched 2 new logs [09-06-2022 20:22:02]3821: WAF :: fetched 1 new logs [09-06-2022 20:23:01]6531: WAF :: fetched 6 new logs [09-06-2022 20:24:02]9275: WAF :: fetched 25 new logs [09-06-2022 20:29:01]23029: WAF :: fetched 2 new logs [09-06-2022 20:30:01]25715: WAF :: fetched 6 new logs [09-06-2022 20:31:01]28587: WAF :: fetched 1 new logs [09-06-2022 20:32:02]31316: WAF :: fetched 5 new logs [09-06-2022 20:41:01]23812: Checking for user cron vulnerabilities [09-06-2022 20:42:02]26560: WAF :: fetched 1 new logs [09-06-2022 20:43:01]29274: WAF :: fetched 1 new logs [09-06-2022 20:44:02]31981: Checking ditributed CMS bruteforce attacks [09-06-2022 20:46:01]5229: WAF :: fetched 1 new logs [09-06-2022 20:47:02]7979: WAF :: fetched 2 new logs [09-06-2022 20:48:01]10708: WAF :: fetched 1 new logs [09-06-2022 20:49:02]13424: WAF :: fetched 2 new logs [09-06-2022 20:52:02]21753: WAF :: fetched 2 new logs [09-06-2022 20:53:01]24472: WAF :: fetched 8 new logs [09-06-2022 20:54:02]27232: WAF :: fetched 14 new logs [09-06-2022 20:55:01]29957: WAF :: fetched 17 new logs [09-06-2022 20:56:01]313: WAF :: fetched 22 new logs [09-06-2022 20:57:02]3167: WAF :: fetched 21 new logs [09-06-2022 20:58:01]5933: WAF :: fetched 21 new logs [09-06-2022 20:59:02]8669: WAF :: fetched 21 new logs [09-06-2022 21:00:01]11101: WAF :: fetched 13 new logs [09-06-2022 21:01:01]14433: WAF :: fetched 42 new logs [09-06-2022 21:02:02]17182: WAF :: fetched 11 new logs [09-06-2022 21:03:01]19878: WAF :: fetched 8 new logs [09-06-2022 21:04:02]22660: WAF :: fetched 10 new logs [09-06-2022 21:05:01]25332: WAF :: fetched 12 new logs [09-06-2022 21:06:01]28178: WAF :: fetched 14 new logs [09-06-2022 21:07:01]30944: WAF :: fetched 11 new logs [09-06-2022 21:08:02]1270: WAF :: fetched 28 new logs [09-06-2022 21:09:01]4084: WAF :: fetched 20 new logs [09-06-2022 21:10:02]6858: WAF :: fetched 11 new logs [09-06-2022 21:11:02]9657: WAF :: fetched 18 new logs [09-06-2022 21:12:01]12423: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654819921 [09-06-2022 21:12:01]12423: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 21:12:03]12423: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 21:12:03]12423: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-2112/20220609-211201-YqKMUaw9sy2X9aNxMG-qgQAAAAg [09-06-2022 21:12:03]12423: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 21:12:04]12423: WAF :: fetched 23 new logs [09-06-2022 21:13:01]15129: WAF :: fetched 17 new logs [09-06-2022 21:14:02]17897: WAF :: fetched 15 new logs [09-06-2022 21:15:02]20605: WAF :: fetched 8 new logs [09-06-2022 21:16:01]23374: WAF :: fetched 16 new logs [09-06-2022 21:17:02]26225: WAF :: fetched 11 new logs [09-06-2022 21:21:01]4848: WAF :: fetched 1 new logs [09-06-2022 21:23:01]10368: WAF :: fetched 3 new logs [09-06-2022 21:28:02]24141: WAF :: fetched 1 new logs [09-06-2022 21:31:02]32389: WAF :: fetched 1 new logs [09-06-2022 21:33:01]5664: WAF :: fetched 2 new logs [09-06-2022 21:40:01]24910: WAF :: fetched 4 new logs [09-06-2022 21:41:02]27734: Checking for user cron vulnerabilities [09-06-2022 21:42:01]30486: WAF :: fetched 1 new logs [09-06-2022 21:43:02]828: WAF :: fetched 1 new logs [09-06-2022 21:44:01]3385: Checking ditributed CMS bruteforce attacks [09-06-2022 21:44:01]3385: WAF :: fetched 7 new logs [09-06-2022 21:45:02]6394: WAF :: fetched 1 new logs [09-06-2022 21:46:01]9170: WAF :: fetched 1 new logs [09-06-2022 21:48:02]14651: WAF :: fetched 2 new logs [09-06-2022 21:49:01]17348: WAF :: fetched 2 new logs [09-06-2022 21:50:02]20109: WAF :: fetched 15 new logs [09-06-2022 21:51:02]22888: WAF :: fetched 25 new logs [09-06-2022 21:52:01]25704: WAF :: fetched 22 new logs [09-06-2022 21:53:02]28416: WAF :: fetched 19 new logs [09-06-2022 21:54:01]31125: WAF :: fetched 8 new logs [09-06-2022 21:55:01]1455: WAF :: fetched 11 new logs [09-06-2022 21:56:02]4317: WAF :: fetched 9 new logs [09-06-2022 21:57:01]7150: WAF :: fetched 15 new logs [09-06-2022 21:58:02]9859: WAF :: fetched 20 new logs [09-06-2022 21:59:01]12489: WAF :: fetched 22 new logs [09-06-2022 22:00:01]14874: WAF :: fetched 18 new logs [09-06-2022 22:01:02]18099: WAF :: fetched 16 new logs [09-06-2022 22:02:01]20955: WAF :: fetched 25 new logs [09-06-2022 22:03:01]23659: WAF :: fetched 21 new logs [09-06-2022 22:04:02]26391: WAF :: fetched 32 new logs [09-06-2022 22:05:01]29094: WAF :: fetched 16 new logs [09-06-2022 22:06:02]31908: WAF :: fetched 96 new logs [09-06-2022 22:07:01]2333: WAF :: fetched 100 new logs [09-06-2022 22:07:08]2339: Performing Domain reputation checks [09-06-2022 22:08:01]5119: WAF :: fetched 108 new logs [09-06-2022 22:09:02]7881: WAF :: fetched 105 new logs [09-06-2022 22:10:01]10582: WAF :: fetched 88 new logs [09-06-2022 22:11:02]13384: WAF :: fetched 128 new logs [09-06-2022 22:12:02]16146: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654823522 [09-06-2022 22:12:02]16146: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 22:12:04]16146: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 22:12:04]16146: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-2212/20220609-221202-YqKaYgfYSPW_91QrezxgfgAAABM [09-06-2022 22:12:04]16146: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 22:12:04]16146: WAF :: fetched 144 new logs [09-06-2022 22:13:01]18864: WAF :: fetched 109 new logs [09-06-2022 22:14:02]21579: WAF :: fetched 57 new logs [09-06-2022 22:15:01]24250: WAF :: fetched 38 new logs [09-06-2022 22:16:02]27013: WAF :: fetched 91 new logs [09-06-2022 22:17:01]29785: WAF :: fetched 114 new logs [09-06-2022 22:18:02]32562: WAF :: fetched 114 new logs [09-06-2022 22:19:01]2887: WAF :: fetched 131 new logs [09-06-2022 22:20:01]5675: WAF :: fetched 66 new logs [09-06-2022 22:21:02]8482: WAF :: fetched 75 new logs [09-06-2022 22:22:01]11221: WAF :: fetched 77 new logs [09-06-2022 22:23:01]13930: WAF :: fetched 42 new logs [09-06-2022 22:24:02]16640: WAF :: fetched 74 new logs [09-06-2022 22:25:01]19335: WAF :: fetched 69 new logs [09-06-2022 22:26:02]22124: WAF :: fetched 85 new logs [09-06-2022 22:27:01]24915: WAF :: fetched 43 new logs [09-06-2022 22:28:01]27633: WAF :: fetched 50 new logs [09-06-2022 22:29:02]30365: WAF :: fetched 73 new logs [09-06-2022 22:30:01]685: WAF :: fetched 49 new logs [09-06-2022 22:31:02]3539: WAF :: fetched 73 new logs [09-06-2022 22:32:02]6424: WAF :: fetched 96 new logs [09-06-2022 22:33:01]9118: WAF :: fetched 95 new logs [09-06-2022 22:34:02]11824: WAF :: fetched 100 new logs [09-06-2022 22:35:01]14499: WAF :: fetched 59 new logs [09-06-2022 22:36:01]17246: WAF :: fetched 52 new logs [09-06-2022 22:37:01]20063: WAF :: fetched 41 new logs [09-06-2022 22:38:01]22751: WAF :: fetched 33 new logs [09-06-2022 22:39:02]25491: WAF :: fetched 39 new logs [09-06-2022 22:40:01]28263: WAF :: fetched 40 new logs [09-06-2022 22:41:01]31038: WAF :: fetched 45 new logs [09-06-2022 22:41:01]31038: Checking for user cron vulnerabilities [09-06-2022 22:42:01]1449: WAF :: fetched 41 new logs [09-06-2022 22:43:02]4202: WAF :: fetched 38 new logs [09-06-2022 22:44:01]6934: Checking ditributed CMS bruteforce attacks [09-06-2022 22:44:01]6934: WAF :: fetched 39 new logs [09-06-2022 22:45:01]9595: WAF :: fetched 24 new logs [09-06-2022 22:46:02]12372: WAF :: fetched 46 new logs [09-06-2022 22:47:01]15145: WAF :: fetched 30 new logs [09-06-2022 22:48:02]17880: WAF :: fetched 22 new logs [09-06-2022 22:49:01]20584: WAF :: fetched 45 new logs [09-06-2022 22:50:02]23346: WAF :: fetched 19 new logs [09-06-2022 22:51:02]26075: WAF :: fetched 26 new logs [09-06-2022 22:52:01]28826: WAF :: fetched 15 new logs [09-06-2022 22:53:02]31580: WAF :: fetched 21 new logs [09-06-2022 22:54:01]1896: WAF :: fetched 20 new logs [09-06-2022 22:55:02]4721: WAF :: fetched 14 new logs [09-06-2022 22:56:02]7497: WAF :: fetched 19 new logs [09-06-2022 22:57:01]10289: WAF :: fetched 32 new logs [09-06-2022 22:58:02]13004: WAF :: fetched 25 new logs [09-06-2022 22:59:01]15657: WAF :: fetched 19 new logs [09-06-2022 23:00:01]18085: WAF :: fetched 11 new logs [09-06-2022 23:01:02]21337: WAF :: fetched 12 new logs [09-06-2022 23:02:01]24129: WAF :: fetched 11 new logs [09-06-2022 23:03:01]26859: WAF :: fetched 14 new logs [09-06-2022 23:04:02]29590: WAF :: fetched 7 new logs [09-06-2022 23:07:37]5750: Performed RBL check for 23.111.136.34. [09-06-2022 23:08:01]8311: WAF :: fetched 2 new logs [09-06-2022 23:09:02]11045: WAF :: fetched 1 new logs [09-06-2022 23:11:02]16555: WAF :: fetched 2 new logs [09-06-2022 23:12:01]19298: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654827121 [09-06-2022 23:12:01]19298: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-06-2022 23:12:03]19298: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-06-2022 23:12:04]19298: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220609/20220609-2312/20220609-231201-YqKocW6xpAkR67_wNs8dvgAAABE [09-06-2022 23:12:04]19298: WAF :: No suitable log file found. Using SQLite.. [09-06-2022 23:12:04]19298: WAF :: fetched 13 new logs [09-06-2022 23:13:01]22006: WAF :: fetched 10 new logs [09-06-2022 23:14:02]24731: WAF :: fetched 10 new logs [09-06-2022 23:15:02]27456: WAF :: fetched 12 new logs [09-06-2022 23:16:02]30180: WAF :: fetched 9 new logs [09-06-2022 23:17:01]552: WAF :: fetched 16 new logs [09-06-2022 23:18:02]3335: WAF :: fetched 15 new logs [09-06-2022 23:19:01]6088: WAF :: fetched 19 new logs [09-06-2022 23:20:02]8910: WAF :: fetched 12 new logs [09-06-2022 23:21:01]11363: WAF :: fetched 13 new logs [09-06-2022 23:22:02]14438: WAF :: fetched 21 new logs [09-06-2022 23:23:01]17101: WAF :: fetched 22 new logs [09-06-2022 23:24:02]19801: WAF :: fetched 17 new logs [09-06-2022 23:26:01]25239: WAF :: fetched 2 new logs [09-06-2022 23:27:02]28035: WAF :: fetched 1 new logs [09-06-2022 23:33:02]12323: WAF :: fetched 1 new logs [09-06-2022 23:38:01]26098: WAF :: fetched 4 new logs [09-06-2022 23:39:02]28837: WAF :: fetched 4 new logs [09-06-2022 23:40:01]31594: WAF :: fetched 2 new logs [09-06-2022 23:41:02]2128: Checking for user cron vulnerabilities [09-06-2022 23:42:01]5039: WAF :: fetched 2 new logs [09-06-2022 23:44:01]10547: Checking ditributed CMS bruteforce attacks [09-06-2022 23:44:01]10547: WAF :: fetched 104 new logs [09-06-2022 23:48:02]21564: WAF :: fetched 1 new logs [09-06-2022 23:52:01]32517: WAF :: fetched 1 new logs [09-06-2022 23:53:02]2926: WAF :: fetched 1 new logs [09-06-2022 23:54:02]5725: WAF :: fetched 2 new logs [09-06-2022 23:55:02]8515: WAF :: fetched 2 new logs [09-06-2022 23:55:02]8514: httpd.conf changed. Refreshing watchlist. [09-06-2022 23:57:01]14115: WAF :: fetched 1 new logs [09-06-2022 23:58:02]16852: WAF :: fetched 30 new logs [09-06-2022 23:59:01]19538: WAF :: fetched 59 new logs [10-06-2022 00:00:02]22011: WAF :: fetched 41 new logs [10-06-2022 00:01:02]25335: WAF :: fetched 55 new logs [10-06-2022 00:01:04]25335: Sending daily report for June 10, 2022 [10-06-2022 00:02:01]28199: WAF :: fetched 56 new logs [10-06-2022 00:03:02]30932: WAF :: fetched 66 new logs [10-06-2022 00:04:01]1201: WAF :: fetched 41 new logs [10-06-2022 00:05:01]3953: WAF :: fetched 45 new logs [10-06-2022 00:05:01]3953: Deleted 0 entries older than 6 MONTH from scanner_logs [10-06-2022 00:05:01]3953: Deleted 0 files from Quarantine [10-06-2022 00:06:02]6868: WAF :: fetched 52 new logs [10-06-2022 00:06:02]6865: httpd.conf changed. Refreshing watchlist. [10-06-2022 00:07:01]9654: WAF :: fetched 60 new logs [10-06-2022 00:08:02]12394: WAF :: fetched 72 new logs [10-06-2022 00:09:01]15119: WAF :: fetched 63 new logs [10-06-2022 00:10:01]17854: WAF :: fetched 30 new logs [10-06-2022 00:11:02]20711: WAF :: fetched 36 new logs [10-06-2022 00:11:02]20717: httpd.conf changed. Refreshing watchlist. [10-06-2022 00:12:02]23481: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654830722 [10-06-2022 00:12:02]23481: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 00:12:04]23481: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 00:12:04]23481: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-0012/20220610-001202-YqK2gl5_Tui1vsl_u7Zt7wAAABQ [10-06-2022 00:12:04]23481: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 00:12:04]23481: WAF :: fetched 42 new logs [10-06-2022 00:13:01]26185: WAF :: fetched 68 new logs [10-06-2022 00:14:02]28910: WAF :: fetched 39 new logs [10-06-2022 00:15:01]31610: WAF :: fetched 24 new logs [10-06-2022 00:16:02]2058: WAF :: fetched 51 new logs [10-06-2022 00:17:02]4941: WAF :: fetched 39 new logs [10-06-2022 00:18:01]7696: WAF :: fetched 43 new logs [10-06-2022 00:19:02]10451: WAF :: fetched 40 new logs [10-06-2022 00:20:01]13146: WAF :: fetched 36 new logs [10-06-2022 00:21:01]15867: WAF :: fetched 19 new logs [10-06-2022 00:22:02]18681: WAF :: fetched 16 new logs [10-06-2022 00:23:01]21372: WAF :: fetched 8 new logs [10-06-2022 00:25:01]26772: WAF :: fetched 4 new logs [10-06-2022 00:26:01]29542: WAF :: fetched 5 new logs [10-06-2022 00:27:02]32332: WAF :: fetched 6 new logs [10-06-2022 00:28:01]2643: WAF :: fetched 1 new logs [10-06-2022 00:29:02]5444: WAF :: fetched 2 new logs [10-06-2022 00:30:02]8172: WAF :: fetched 12 new logs [10-06-2022 00:35:02]21736: WAF :: fetched 1 new logs [10-06-2022 00:38:01]29931: WAF :: fetched 1 new logs [10-06-2022 00:39:01]32621: WAF :: fetched 2 new logs [10-06-2022 00:41:01]5771: Checking for user cron vulnerabilities [10-06-2022 00:44:01]13903: Checking ditributed CMS bruteforce attacks [10-06-2022 00:45:02]: Checking for software updates [10-06-2022 00:45:02]16607: WAF :: fetched 3 new logs [10-06-2022 01:00:02]24730: WAF :: fetched 1 new logs [10-06-2022 01:01:02]28567: WAF :: fetched 2 new logs [10-06-2022 01:02:01]31357: WAF :: fetched 5 new logs [10-06-2022 01:03:02]1675: WAF :: fetched 26 new logs [10-06-2022 01:04:01]4437: WAF :: fetched 31 new logs [10-06-2022 01:05:01]7297: WAF :: fetched 25 new logs [10-06-2022 01:06:02]10418: WAF :: fetched 32 new logs [10-06-2022 01:07:01]13473: WAF :: fetched 27 new logs [10-06-2022 01:08:01]16441: WAF :: fetched 31 new logs [10-06-2022 01:09:02]19413: WAF :: fetched 30 new logs [10-06-2022 01:10:01]22240: WAF :: fetched 77 new logs [10-06-2022 01:11:02]25045: WAF :: fetched 83 new logs [10-06-2022 01:12:02]27771: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654834322 [10-06-2022 01:12:02]27771: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 01:12:04]27771: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 01:12:04]27771: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-0112/20220610-011202-YqLEkhVzqVyh0k09zFN5CgAAAAE [10-06-2022 01:12:04]27771: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 01:12:04]27771: WAF :: fetched 89 new logs [10-06-2022 01:13:01]30705: WAF :: fetched 40 new logs [10-06-2022 01:14:02]1121: WAF :: fetched 24 new logs [10-06-2022 01:15:01]3743: WAF :: fetched 2 new logs [10-06-2022 01:16:02]6791: WAF :: fetched 1 new logs [10-06-2022 01:21:02]21301: WAF :: fetched 1 new logs [10-06-2022 01:22:01]24331: WAF :: fetched 9 new logs [10-06-2022 01:23:01]27157: WAF :: fetched 11 new logs [10-06-2022 01:24:02]29864: WAF :: fetched 8 new logs [10-06-2022 01:25:01]32665: WAF :: fetched 11 new logs [10-06-2022 01:26:02]3193: WAF :: fetched 16 new logs [10-06-2022 01:27:01]6188: WAF :: fetched 16 new logs [10-06-2022 01:28:02]9082: WAF :: fetched 12 new logs [10-06-2022 01:29:01]11862: WAF :: fetched 14 new logs [10-06-2022 01:30:01]14606: WAF :: fetched 12 new logs [10-06-2022 01:31:02]17763: WAF :: fetched 18 new logs [10-06-2022 01:32:01]20812: WAF :: fetched 11 new logs [10-06-2022 01:33:02]23663: WAF :: fetched 4 new logs [10-06-2022 01:34:02]26776: WAF :: fetched 13 new logs [10-06-2022 01:35:01]29735: WAF :: fetched 7 new logs [10-06-2022 01:36:01]32561: WAF :: fetched 12 new logs [10-06-2022 01:37:02]3256: WAF :: fetched 13 new logs [10-06-2022 01:38:01]5981: WAF :: fetched 15 new logs [10-06-2022 01:39:02]9167: WAF :: fetched 61 new logs [10-06-2022 01:40:01]12004: WAF :: fetched 75 new logs [10-06-2022 01:41:01]14970: WAF :: fetched 90 new logs [10-06-2022 01:41:01]14970: Checking for user cron vulnerabilities [10-06-2022 01:42:02]17834: WAF :: fetched 105 new logs [10-06-2022 01:43:01]20458: WAF :: fetched 93 new logs [10-06-2022 01:44:02]23196: Checking ditributed CMS bruteforce attacks [10-06-2022 01:44:02]23196: WAF :: fetched 81 new logs [10-06-2022 01:45:01]: Checking for definition updates [10-06-2022 01:45:01]26348: WAF :: fetched 58 new logs [10-06-2022 01:46:01]29400: WAF :: fetched 33 new logs [10-06-2022 01:47:01]32381: WAF :: fetched 36 new logs [10-06-2022 01:48:02]2678: WAF :: fetched 33 new logs [10-06-2022 01:49:01]5432: WAF :: fetched 22 new logs [10-06-2022 01:50:02]8528: WAF :: fetched 25 new logs [10-06-2022 01:51:01]11516: WAF :: fetched 29 new logs [10-06-2022 01:52:01]14403: WAF :: fetched 34 new logs [10-06-2022 01:53:02]17309: WAF :: fetched 22 new logs [10-06-2022 01:54:01]20105: WAF :: fetched 12 new logs [10-06-2022 01:55:02]22827: WAF :: fetched 14 new logs [10-06-2022 01:56:01]25534: WAF :: fetched 16 new logs [10-06-2022 01:57:01]28282: WAF :: fetched 16 new logs [10-06-2022 01:58:02]31049: WAF :: fetched 29 new logs [10-06-2022 01:59:01]1619: WAF :: fetched 34 new logs [10-06-2022 02:00:02]4201: WAF :: fetched 23 new logs [10-06-2022 02:01:01]7037: WAF :: fetched 31 new logs [10-06-2022 02:02:02]10280: WAF :: fetched 36 new logs [10-06-2022 02:03:01]12981: WAF :: fetched 30 new logs [10-06-2022 02:04:01]15684: WAF :: fetched 36 new logs [10-06-2022 02:05:02]18379: WAF :: fetched 24 new logs [10-06-2022 02:06:01]21100: WAF :: fetched 22 new logs [10-06-2022 02:07:02]23867: WAF :: fetched 20 new logs [10-06-2022 02:08:01]26585: WAF :: fetched 21 new logs [10-06-2022 02:09:02]29276: WAF :: fetched 19 new logs [10-06-2022 02:10:01]31985: WAF :: fetched 23 new logs [10-06-2022 02:11:01]2401: WAF :: fetched 52 new logs [10-06-2022 02:11:01]2402: httpd.conf changed. Refreshing watchlist. [10-06-2022 02:12:02]5177: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654837922 [10-06-2022 02:12:02]5177: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 02:12:04]5177: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 02:12:04]5177: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-0212/20220610-021202-YqLSonGsZYqg-XySNxEnPQAAAAA [10-06-2022 02:12:04]5177: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 02:12:04]5177: WAF :: fetched 74 new logs [10-06-2022 02:13:01]7948: WAF :: fetched 61 new logs [10-06-2022 02:14:02]10638: WAF :: fetched 12 new logs [10-06-2022 02:15:02]13283: WAF :: fetched 7 new logs [10-06-2022 02:16:01]15993: WAF :: fetched 18 new logs [10-06-2022 02:17:02]18682: WAF :: fetched 26 new logs [10-06-2022 02:18:01]21533: WAF :: fetched 17 new logs [10-06-2022 02:19:02]24251: WAF :: fetched 15 new logs [10-06-2022 02:20:01]26690: WAF :: fetched 13 new logs [10-06-2022 02:21:02]29709: WAF :: fetched 16 new logs [10-06-2022 02:22:01]32369: WAF :: fetched 11 new logs [10-06-2022 02:23:01]2795: WAF :: fetched 13 new logs [10-06-2022 02:24:02]5566: WAF :: fetched 10 new logs [10-06-2022 02:25:02]8234: WAF :: fetched 6 new logs [10-06-2022 02:26:01]10984: WAF :: fetched 8 new logs [10-06-2022 02:27:01]13670: WAF :: fetched 14 new logs [10-06-2022 02:28:02]16450: WAF :: fetched 6 new logs [10-06-2022 02:29:01]19123: WAF :: fetched 3 new logs [10-06-2022 02:34:01]32692: WAF :: fetched 2 new logs [10-06-2022 02:41:01]19403: Checking for user cron vulnerabilities [10-06-2022 02:43:01]24851: WAF :: fetched 4 new logs [10-06-2022 02:44:02]27570: Checking ditributed CMS bruteforce attacks [10-06-2022 02:44:02]27570: WAF :: fetched 2 new logs [10-06-2022 02:45:02]30250: WAF :: fetched 1 new logs [10-06-2022 02:46:01]529: WAF :: fetched 7 new logs [10-06-2022 02:47:02]3319: WAF :: fetched 4 new logs [10-06-2022 02:49:02]10042: WAF :: fetched 1 new logs [10-06-2022 02:53:02]21135: Updated license status via CDN [10-06-2022 02:56:02]29441: WAF :: fetched 3 new logs [10-06-2022 02:57:02]32183: WAF :: fetched 1 new logs [10-06-2022 03:00:02]8078: WAF :: fetched 2 new logs [10-06-2022 03:00:03]8078: Found and updated 32 CMS installations [10-06-2022 03:00:47]8078: Wordpress installation #5 meusiteimobiliario.com.br has errors [10-06-2022 03:01:01]11307: WAF :: fetched 2 new logs [10-06-2022 03:01:02]8078: Wordpress installation #9 oabilheus.org.br has errors [10-06-2022 03:02:02]14502: WAF :: fetched 1 new logs [10-06-2022 03:02:34]8078: Sending CMS version vulnerability report emails to cpanel users [10-06-2022 03:02:37]8078: Checking wordpress installations for suspicious directories [10-06-2022 03:03:01]17969: WAF :: fetched 3 new logs [10-06-2022 03:03:22]18001: Wordpress installation #5 meusiteimobiliario.com.br has errors [10-06-2022 03:03:36]18001: Wordpress installation #9 oabilheus.org.br has errors [10-06-2022 03:04:47]18001: Sending CMS version vulnerability report emails to cpanel users [10-06-2022 03:04:50]18001: Checking wordpress installations for suspicious directories [10-06-2022 03:05:01]24092: WAF :: fetched 2 new logs [10-06-2022 03:10:02]5709: WAF :: fetched 3 new logs [10-06-2022 03:12:01]11486: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654841521 [10-06-2022 03:12:01]11486: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 03:12:03]11486: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 03:12:03]11486: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-0312/20220610-031201-YqLgsZWx97MJtkp2v0CObwAAAA0 [10-06-2022 03:12:03]11486: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 03:12:04]11486: WAF :: fetched 1 new logs [10-06-2022 03:17:01]24956: WAF :: fetched 2 new logs [10-06-2022 03:18:02]27743: WAF :: fetched 1 new logs [10-06-2022 03:19:01]30406: WAF :: fetched 3 new logs [10-06-2022 03:22:01]6212: WAF :: fetched 1 new logs [10-06-2022 03:23:02]8977: WAF :: fetched 1 new logs [10-06-2022 03:27:01]19638: WAF :: fetched 1 new logs [10-06-2022 03:29:01]25036: WAF :: fetched 1 new logs [10-06-2022 03:30:02]27770: WAF :: fetched 2 new logs [10-06-2022 03:31:01]30664: WAF :: fetched 1 new logs [10-06-2022 03:33:02]4420: WAF :: fetched 1 new logs [10-06-2022 03:36:02]12624: WAF :: fetched 1 new logs [10-06-2022 03:37:01]15374: WAF :: fetched 1 new logs [10-06-2022 03:40:01]23886: WAF :: fetched 1 new logs [10-06-2022 03:41:02]26986: WAF :: fetched 2 new logs [10-06-2022 03:41:02]26986: Checking for user cron vulnerabilities [10-06-2022 03:42:01]29682: WAF :: fetched 1 new logs [10-06-2022 03:44:02]606: Checking ditributed CMS bruteforce attacks [10-06-2022 03:45:01]21047: WAF :: fetched 3 new logs [10-06-2022 03:46:02]831: WAF :: fetched 4 new logs [10-06-2022 03:47:01]12647: WAF :: fetched 1 new logs [10-06-2022 03:48:01]15407: WAF :: fetched 1 new logs [10-06-2022 03:49:02]18093: WAF :: fetched 2 new logs [10-06-2022 03:50:01]20742: WAF :: fetched 2 new logs [10-06-2022 03:51:01]23454: WAF :: fetched 2 new logs [10-06-2022 03:55:01]1804: WAF :: fetched 1 new logs [10-06-2022 03:57:02]7273: WAF :: fetched 3 new logs [10-06-2022 03:58:01]9972: WAF :: fetched 2 new logs [10-06-2022 03:59:02]12638: WAF :: fetched 4 new logs [10-06-2022 04:02:01]20831: WAF :: fetched 4 new logs [10-06-2022 04:03:02]23597: WAF :: fetched 4 new logs [10-06-2022 04:04:01]26237: WAF :: fetched 4 new logs [10-06-2022 04:05:02]28907: WAF :: fetched 5 new logs [10-06-2022 04:06:01]31580: WAF :: fetched 9 new logs [10-06-2022 04:07:01]1828: WAF :: fetched 15 new logs [10-06-2022 04:08:02]4673: WAF :: fetched 11 new logs [10-06-2022 04:09:01]7339: WAF :: fetched 12 new logs [10-06-2022 04:10:02]10038: WAF :: fetched 13 new logs [10-06-2022 04:11:01]12695: WAF :: fetched 15 new logs [10-06-2022 04:12:02]15462: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654845122 [10-06-2022 04:12:02]15462: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 04:12:04]15462: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 04:12:04]15462: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-0412/20220610-041202-YqLuwpCVw25EdfEZG3Ya0wAAAA4 [10-06-2022 04:12:04]15462: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 04:12:04]15462: WAF :: fetched 15 new logs [10-06-2022 04:13:01]18227: WAF :: fetched 8 new logs [10-06-2022 04:14:01]20893: WAF :: fetched 2 new logs [10-06-2022 04:15:02]23605: WAF :: fetched 5 new logs [10-06-2022 04:16:01]26288: WAF :: fetched 2 new logs [10-06-2022 04:18:01]31562: WAF :: fetched 7 new logs [10-06-2022 04:19:02]2012: WAF :: fetched 2 new logs [10-06-2022 04:20:01]4737: WAF :: fetched 1 new logs [10-06-2022 04:23:01]12798: WAF :: fetched 2 new logs [10-06-2022 04:24:02]15542: WAF :: fetched 3 new logs [10-06-2022 04:25:02]18204: WAF :: fetched 1 new logs [10-06-2022 04:28:02]26319: WAF :: fetched 2 new logs [10-06-2022 04:30:02]31610: WAF :: fetched 1 new logs [10-06-2022 04:31:01]1929: WAF :: fetched 2 new logs [10-06-2022 04:32:01]4732: WAF :: fetched 3 new logs [10-06-2022 04:33:02]7529: WAF :: fetched 2 new logs [10-06-2022 04:34:01]10245: WAF :: fetched 2 new logs [10-06-2022 04:35:02]12943: WAF :: fetched 3 new logs [10-06-2022 04:37:01]18300: WAF :: fetched 2 new logs [10-06-2022 04:39:01]23712: WAF :: fetched 1 new logs [10-06-2022 04:41:02]29162: WAF :: fetched 1 new logs [10-06-2022 04:41:02]29162: Checking for user cron vulnerabilities [10-06-2022 04:43:02]2256: WAF :: fetched 2 new logs [10-06-2022 04:44:01]4964: Checking ditributed CMS bruteforce attacks [10-06-2022 04:46:02]10355: WAF :: fetched 1 new logs [10-06-2022 04:47:01]13044: WAF :: fetched 2 new logs [10-06-2022 04:50:01]21096: WAF :: fetched 3 new logs [10-06-2022 04:51:02]23826: WAF :: fetched 2 new logs [10-06-2022 04:59:01]12920: WAF :: fetched 1 new logs [10-06-2022 05:01:42]18430: Starting daily scan on files updated in last 24 hrs [10-06-2022 05:03:02]23908: WAF :: fetched 2 new logs [10-06-2022 05:05:01]29218: WAF :: fetched 1 new logs [10-06-2022 05:07:01]2200: WAF :: fetched 3 new logs [10-06-2022 05:08:01]5023: WAF :: fetched 1 new logs [10-06-2022 05:10:01]10400: WAF :: fetched 3 new logs [10-06-2022 05:12:02]15836: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654848722 [10-06-2022 05:12:02]15836: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 05:12:04]15836: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 05:12:04]15836: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-0512/20220610-051202-YqL80t8glHIquXPAIKtGmwAAABA [10-06-2022 05:12:04]15836: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 05:12:04]15836: WAF :: fetched 1 new logs [10-06-2022 05:21:02]7821: WAF :: fetched 1 new logs [10-06-2022 05:22:01]10472: WAF :: fetched 1 new logs [10-06-2022 05:26:02]21267: WAF :: fetched 1 new logs [10-06-2022 05:31:02]2327: WAF :: fetched 4 new logs [10-06-2022 05:33:02]7809: WAF :: fetched 2 new logs [10-06-2022 05:36:01]15809: WAF :: fetched 1 new logs [10-06-2022 05:38:02]21227: WAF :: fetched 1 new logs [10-06-2022 05:39:01]23874: WAF :: fetched 3 new logs [10-06-2022 05:40:01]26524: WAF :: fetched 4 new logs [10-06-2022 05:41:02]29279: WAF :: fetched 2 new logs [10-06-2022 05:41:02]29279: Checking for user cron vulnerabilities [10-06-2022 05:42:01]31916: WAF :: fetched 1 new logs [10-06-2022 05:43:02]2319: WAF :: fetched 1 new logs [10-06-2022 05:44:01]5008: Checking ditributed CMS bruteforce attacks [10-06-2022 05:44:01]5008: WAF :: fetched 3 new logs [10-06-2022 05:45:01]7663: WAF :: fetched 2 new logs [10-06-2022 05:46:02]10393: WAF :: fetched 1 new logs [10-06-2022 05:47:01]13053: WAF :: fetched 1 new logs [10-06-2022 05:48:02]15857: WAF :: fetched 1 new logs [10-06-2022 05:49:01]18504: WAF :: fetched 2 new logs [10-06-2022 05:50:02]21179: WAF :: fetched 1 new logs [10-06-2022 05:52:01]26548: WAF :: fetched 82 new logs [10-06-2022 05:53:01]29306: WAF :: fetched 82 new logs [10-06-2022 05:54:02]32019: WAF :: fetched 5 new logs [10-06-2022 05:56:02]5119: WAF :: fetched 2 new logs [10-06-2022 05:59:02]13132: WAF :: fetched 1 new logs [10-06-2022 06:02:02]21415: WAF :: fetched 1 new logs [10-06-2022 06:03:01]24171: WAF :: fetched 3 new logs [10-06-2022 06:04:02]26813: WAF :: fetched 1 new logs [10-06-2022 06:05:02]29476: WAF :: fetched 3 new logs [10-06-2022 06:06:01]32215: WAF :: fetched 1 new logs [10-06-2022 06:09:02]8079: WAF :: fetched 1 new logs [10-06-2022 06:10:02]10758: WAF :: fetched 1 new logs [10-06-2022 06:12:02]16181: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654852322 [10-06-2022 06:12:02]16181: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 06:12:04]16181: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 06:12:04]16181: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-0612/20220610-061202-YqMK4g7XtOerrTUXWYchFAAAABc [10-06-2022 06:12:04]16181: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 06:12:04]16181: WAF :: fetched 1 new logs [10-06-2022 06:16:02]27037: WAF :: fetched 1 new logs [10-06-2022 06:19:01]2567: WAF :: fetched 1 new logs [10-06-2022 06:24:02]16490: WAF :: fetched 1 new logs [10-06-2022 06:25:01]19176: WAF :: fetched 2 new logs [10-06-2022 06:31:01]3201: WAF :: fetched 2 new logs [10-06-2022 06:35:02]14069: WAF :: fetched 3 new logs [10-06-2022 06:37:02]19486: WAF :: fetched 2 new logs [10-06-2022 06:38:01]22129: WAF :: fetched 1 new logs [10-06-2022 06:40:01]27562: WAF :: fetched 1 new logs [10-06-2022 06:41:02]30309: Checking for user cron vulnerabilities [10-06-2022 06:44:01]5762: Checking ditributed CMS bruteforce attacks [10-06-2022 06:52:01]27596: WAF :: fetched 1 new logs [10-06-2022 06:53:02]30340: WAF :: fetched 1 new logs [10-06-2022 06:56:01]6046: WAF :: fetched 2 new logs [10-06-2022 06:57:02]8728: WAF :: fetched 2 new logs [10-06-2022 07:00:01]16481: WAF :: fetched 2 new logs [10-06-2022 07:09:01]9023: WAF :: fetched 1 new logs [10-06-2022 07:12:02]17139: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654855922 [10-06-2022 07:12:02]17139: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 07:12:04]17139: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 07:12:04]17139: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-0712/20220610-071202-YqMY8paT1ALL4Ag1P8PvPAAAAAA [10-06-2022 07:12:04]17139: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 07:12:04]17139: WAF :: fetched 1 new logs [10-06-2022 07:17:02]30670: WAF :: fetched 1 new logs [10-06-2022 07:18:01]975: WAF :: fetched 1 new logs [10-06-2022 07:19:01]3839: WAF :: fetched 6 new logs [10-06-2022 07:20:02]6601: WAF :: fetched 3 new logs [10-06-2022 07:21:02]9314: WAF :: fetched 1 new logs [10-06-2022 07:24:02]17428: WAF :: fetched 1 new logs [10-06-2022 07:27:01]25867: WAF :: fetched 1 new logs [10-06-2022 07:27:01]25872: httpd.conf changed. Refreshing watchlist. [10-06-2022 07:31:02]4901: WAF :: fetched 1 new logs [10-06-2022 07:33:02]10354: WAF :: fetched 1 new logs [10-06-2022 07:35:01]15793: WAF :: fetched 1 new logs [10-06-2022 07:36:02]18548: WAF :: fetched 5 new logs [10-06-2022 07:37:01]21027: WAF :: fetched 1 new logs [10-06-2022 07:40:01]29328: WAF :: fetched 2 new logs [10-06-2022 07:41:02]32178: WAF :: fetched 1 new logs [10-06-2022 07:41:02]32178: Checking for user cron vulnerabilities [10-06-2022 07:42:01]2493: WAF :: fetched 5 new logs [10-06-2022 07:43:01]5299: WAF :: fetched 1 new logs [10-06-2022 07:44:02]8130: Checking ditributed CMS bruteforce attacks [10-06-2022 07:45:01]: Checking for definition updates [10-06-2022 07:46:01]13590: WAF :: fetched 1 new logs [10-06-2022 07:49:01]21802: WAF :: fetched 1 new logs [10-06-2022 07:51:02]27295: WAF :: fetched 1 new logs [10-06-2022 07:53:01]318: WAF :: fetched 1 new logs [10-06-2022 07:56:01]8642: WAF :: fetched 1 new logs [10-06-2022 07:58:01]13979: WAF :: fetched 1 new logs [10-06-2022 07:59:01]16747: WAF :: fetched 1 new logs [10-06-2022 08:00:01]19225: WAF :: fetched 3 new logs [10-06-2022 08:03:01]27996: WAF :: fetched 2 new logs [10-06-2022 08:04:02]30808: WAF :: fetched 12 new logs [10-06-2022 08:05:01]1152: WAF :: fetched 15 new logs [10-06-2022 08:06:02]3978: WAF :: fetched 1 new logs [10-06-2022 08:07:01]6794: WAF :: fetched 24 new logs [10-06-2022 08:07:01]6795: httpd.conf changed. Refreshing watchlist. [10-06-2022 08:08:02]9573: WAF :: fetched 9 new logs [10-06-2022 08:10:01]15038: WAF :: fetched 6 new logs [10-06-2022 08:11:02]17831: WAF :: fetched 33 new logs [10-06-2022 08:12:01]20510: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654859521 [10-06-2022 08:12:01]20510: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 08:12:03]20510: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 08:12:04]20510: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-0812/20220610-081201-YqMnAVsRJ5gRmywhhLuZEQAAAB4 [10-06-2022 08:12:04]20510: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 08:12:04]20510: WAF :: fetched 18 new logs [10-06-2022 08:13:02]23205: WAF :: fetched 25 new logs [10-06-2022 08:14:01]25977: WAF :: fetched 23 new logs [10-06-2022 08:15:01]28697: WAF :: fetched 9 new logs [10-06-2022 08:16:02]31451: WAF :: fetched 11 new logs [10-06-2022 08:17:01]1745: WAF :: fetched 8 new logs [10-06-2022 08:18:02]4597: WAF :: fetched 15 new logs [10-06-2022 08:19:01]7376: WAF :: fetched 2 new logs [10-06-2022 08:23:02]18230: WAF :: fetched 2 new logs [10-06-2022 08:27:01]29095: WAF :: fetched 3 new logs [10-06-2022 08:29:01]2188: WAF :: fetched 3 new logs [10-06-2022 08:30:02]5017: WAF :: fetched 2 new logs [10-06-2022 08:32:01]10556: WAF :: fetched 1 new logs [10-06-2022 08:35:02]18733: WAF :: fetched 1 new logs [10-06-2022 08:38:01]26798: WAF :: fetched 1 new logs [10-06-2022 08:39:02]29587: WAF :: fetched 2 new logs [10-06-2022 08:40:02]32325: WAF :: fetched 1 new logs [10-06-2022 08:41:01]2738: WAF :: fetched 1 new logs [10-06-2022 08:41:01]2738: Checking for user cron vulnerabilities [10-06-2022 08:42:02]5519: WAF :: fetched 1 new logs [10-06-2022 08:44:01]11004: Checking ditributed CMS bruteforce attacks [10-06-2022 08:44:01]11004: WAF :: fetched 1 new logs [10-06-2022 08:48:02]22185: WAF :: fetched 1 new logs [10-06-2022 08:49:01]25091: WAF :: fetched 2 new logs [10-06-2022 08:50:02]27993: WAF :: fetched 1 new logs [10-06-2022 08:57:01]15531: WAF :: fetched 1 new logs [10-06-2022 08:58:02]18320: WAF :: fetched 1 new logs [10-06-2022 08:59:01]21139: WAF :: fetched 1 new logs [10-06-2022 09:00:01]23660: WAF :: fetched 1 new logs [10-06-2022 09:01:02]26972: WAF :: fetched 3 new logs [10-06-2022 09:03:02]32617: WAF :: fetched 3 new logs [10-06-2022 09:04:02]3101: WAF :: fetched 10 new logs [10-06-2022 09:05:01]5937: WAF :: fetched 3 new logs [10-06-2022 09:06:02]8839: WAF :: fetched 4 new logs [10-06-2022 09:07:01]11644: WAF :: fetched 4 new logs [10-06-2022 09:08:02]14445: WAF :: fetched 3 new logs [10-06-2022 09:09:01]17340: WAF :: fetched 3 new logs [10-06-2022 09:11:01]23050: WAF :: fetched 1 new logs [10-06-2022 09:12:02]25929: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654863122 [10-06-2022 09:12:02]25929: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 09:12:04]25929: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 09:12:04]25929: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-0912/20220610-091202-YqM1EjIZXPeNiU4YSy-KFwAAAAE [10-06-2022 09:12:04]25929: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 09:12:04]25929: WAF :: fetched 1 new logs [10-06-2022 09:13:02]28741: WAF :: fetched 2 new logs [10-06-2022 09:14:01]31583: WAF :: fetched 2 new logs [10-06-2022 09:16:02]4992: WAF :: fetched 1 new logs [10-06-2022 09:18:02]10595: WAF :: fetched 1 new logs [10-06-2022 09:24:01]27785: WAF :: fetched 2 new logs [10-06-2022 09:26:01]1058: WAF :: fetched 1 new logs [10-06-2022 09:27:01]3857: WAF :: fetched 1 new logs [10-06-2022 09:29:02]9597: WAF :: fetched 14 new logs [10-06-2022 09:30:02]12319: WAF :: fetched 42 new logs [10-06-2022 09:31:01]15186: WAF :: fetched 44 new logs [10-06-2022 09:32:02]18007: WAF :: fetched 38 new logs [10-06-2022 09:33:01]20811: WAF :: fetched 36 new logs [10-06-2022 09:34:02]23649: WAF :: fetched 14 new logs [10-06-2022 09:36:01]29224: WAF :: fetched 3 new logs [10-06-2022 09:37:02]31972: WAF :: fetched 1 new logs [10-06-2022 09:38:01]2355: WAF :: fetched 4 new logs [10-06-2022 09:39:01]5228: WAF :: fetched 2 new logs [10-06-2022 09:40:02]8025: WAF :: fetched 1 new logs [10-06-2022 09:41:02]10865: WAF :: fetched 3 new logs [10-06-2022 09:41:02]10865: Checking for user cron vulnerabilities [10-06-2022 09:42:02]13623: WAF :: fetched 4 new logs [10-06-2022 09:43:02]16449: WAF :: fetched 2 new logs [10-06-2022 09:44:01]19286: Checking ditributed CMS bruteforce attacks [10-06-2022 09:44:02]19286: WAF :: fetched 2 new logs [10-06-2022 09:45:02]21986: WAF :: fetched 7 new logs [10-06-2022 09:48:01]30323: WAF :: fetched 5 new logs [10-06-2022 09:49:01]769: WAF :: fetched 2 new logs [10-06-2022 09:51:01]6469: WAF :: fetched 1 new logs [10-06-2022 09:52:01]9176: WAF :: fetched 1 new logs [10-06-2022 09:53:01]11965: WAF :: fetched 3 new logs [10-06-2022 09:54:02]14831: WAF :: fetched 1 new logs [10-06-2022 09:59:01]28873: WAF :: fetched 2 new logs [10-06-2022 10:00:01]31521: WAF :: fetched 1 new logs [10-06-2022 10:02:01]5313: WAF :: fetched 1 new logs [10-06-2022 10:05:02]13724: WAF :: fetched 2 new logs [10-06-2022 10:09:01]24896: WAF :: fetched 4 new logs [10-06-2022 10:12:01]1081: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654866721 [10-06-2022 10:12:01]1081: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 10:12:03]1081: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 10:12:03]1081: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-1012/20220610-101201-YqNDIZKCtlaJETQQpasW_QAAAC0 [10-06-2022 10:12:03]1081: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 10:13:01]3933: WAF :: fetched 19 new logs [10-06-2022 10:14:02]6834: WAF :: fetched 29 new logs [10-06-2022 10:15:02]9719: WAF :: fetched 19 new logs [10-06-2022 10:16:01]12600: WAF :: fetched 1 new logs [10-06-2022 10:17:02]15426: WAF :: fetched 26 new logs [10-06-2022 10:18:01]18145: WAF :: fetched 31 new logs [10-06-2022 10:19:02]21044: WAF :: fetched 19 new logs [10-06-2022 10:20:01]23858: WAF :: fetched 17 new logs [10-06-2022 10:22:01]29564: WAF :: fetched 20 new logs [10-06-2022 10:24:02]2794: WAF :: fetched 13 new logs [10-06-2022 10:25:02]5630: WAF :: fetched 1 new logs [10-06-2022 10:26:02]8495: WAF :: fetched 1 new logs [10-06-2022 10:27:01]10968: WAF :: fetched 1 new logs [10-06-2022 10:29:01]16872: WAF :: fetched 1 new logs [10-06-2022 10:33:01]28159: WAF :: fetched 1 new logs [10-06-2022 10:34:02]31186: WAF :: fetched 2 new logs [10-06-2022 10:35:01]1601: WAF :: fetched 2 new logs [10-06-2022 10:36:01]4599: WAF :: fetched 1 new logs [10-06-2022 10:38:01]10303: WAF :: fetched 1 new logs [10-06-2022 10:39:02]13231: WAF :: fetched 2 new logs [10-06-2022 10:40:01]16063: WAF :: fetched 1 new logs [10-06-2022 10:41:01]19032: WAF :: fetched 1 new logs [10-06-2022 10:41:01]19032: Checking for user cron vulnerabilities [10-06-2022 10:42:01]21882: WAF :: fetched 1 new logs [10-06-2022 10:43:02]24745: WAF :: fetched 1 new logs [10-06-2022 10:44:01]27637: Checking ditributed CMS bruteforce attacks [10-06-2022 10:44:01]27637: WAF :: fetched 1 new logs [10-06-2022 10:45:01]30439: WAF :: fetched 5 new logs [10-06-2022 10:48:01]6729: WAF :: fetched 4 new logs [10-06-2022 10:49:01]9663: WAF :: fetched 1 new logs [10-06-2022 10:50:02]12502: WAF :: fetched 1 new logs [10-06-2022 10:52:01]18181: WAF :: fetched 1 new logs [10-06-2022 10:55:01]26825: WAF :: fetched 5 new logs [10-06-2022 10:57:01]32485: WAF :: fetched 1 new logs [10-06-2022 10:58:01]2989: WAF :: fetched 4 new logs [10-06-2022 11:01:02]11629: WAF :: fetched 1 new logs [10-06-2022 11:03:02]17348: WAF :: fetched 1 new logs [10-06-2022 11:07:02]28500: WAF :: fetched 1 new logs [10-06-2022 11:07:45]28661: Performed RBL check for 23.111.136.34. [10-06-2022 11:08:01]31237: WAF :: fetched 3 new logs [10-06-2022 11:12:02]10129: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654870322 [10-06-2022 11:12:02]10129: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 11:12:04]10129: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 11:12:04]10129: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-1112/20220610-111202-YqNRMq-pSmWTpwkBG3pVHAAAAAs [10-06-2022 11:12:04]10129: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 11:12:04]10129: WAF :: fetched 3 new logs [10-06-2022 11:14:01]15650: WAF :: fetched 1 new logs [10-06-2022 11:15:02]18479: WAF :: fetched 4 new logs [10-06-2022 11:16:01]21274: WAF :: fetched 2 new logs [10-06-2022 11:19:02]29616: WAF :: fetched 1 new logs [10-06-2022 11:25:01]14076: WAF :: fetched 4 new logs [10-06-2022 11:28:01]22450: WAF :: fetched 1 new logs [10-06-2022 11:30:01]28163: WAF :: fetched 1 new logs [10-06-2022 11:31:01]31033: WAF :: fetched 1 new logs [10-06-2022 11:33:01]4283: WAF :: fetched 1 new logs [10-06-2022 11:34:02]7308: WAF :: fetched 3 new logs [10-06-2022 11:35:01]10041: WAF :: fetched 1 new logs [10-06-2022 11:36:02]12895: WAF :: fetched 2 new logs [10-06-2022 11:41:01]27214: Checking for user cron vulnerabilities [10-06-2022 11:43:01]377: WAF :: fetched 2 new logs [10-06-2022 11:44:01]3340: Checking ditributed CMS bruteforce attacks [10-06-2022 11:45:02]6210: WAF :: fetched 1 new logs [10-06-2022 11:46:01]9079: WAF :: fetched 1 new logs [10-06-2022 11:47:02]11911: WAF :: fetched 1 new logs [10-06-2022 11:49:01]17686: WAF :: fetched 1 new logs [10-06-2022 11:55:01]2191: WAF :: fetched 6 new logs [10-06-2022 11:56:02]5087: WAF :: fetched 1 new logs [10-06-2022 11:57:01]7878: WAF :: fetched 6 new logs [10-06-2022 11:58:02]10650: WAF :: fetched 5 new logs [10-06-2022 11:59:01]13445: WAF :: fetched 2 new logs [10-06-2022 12:02:01]22394: WAF :: fetched 2 new logs [10-06-2022 12:03:02]25666: WAF :: fetched 3 new logs [10-06-2022 12:04:02]28841: WAF :: fetched 2 new logs [10-06-2022 12:08:01]7759: WAF :: fetched 7 new logs [10-06-2022 12:12:02]19017: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654873922 [10-06-2022 12:12:02]19017: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 12:12:04]19017: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 12:12:04]19017: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-1212/20220610-121202-YqNfQnTtfArzM2r_koO7TQAAABI [10-06-2022 12:12:04]19017: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 12:16:01]30356: WAF :: fetched 1 new logs [10-06-2022 12:19:02]6379: WAF :: fetched 4 new logs [10-06-2022 12:20:02]9276: WAF :: fetched 1 new logs [10-06-2022 12:21:02]12183: WAF :: fetched 1 new logs [10-06-2022 12:22:02]14961: WAF :: fetched 2 new logs [10-06-2022 12:23:02]17798: WAF :: fetched 1 new logs [10-06-2022 12:24:02]20586: WAF :: fetched 1 new logs [10-06-2022 12:25:01]23110: WAF :: fetched 1 new logs [10-06-2022 12:26:01]26292: WAF :: fetched 3 new logs [10-06-2022 12:27:01]29044: WAF :: fetched 3 new logs [10-06-2022 12:29:01]2227: WAF :: fetched 1 new logs [10-06-2022 12:30:01]5177: WAF :: fetched 1 new logs [10-06-2022 12:31:01]8003: WAF :: fetched 2 new logs [10-06-2022 12:33:01]13536: WAF :: fetched 2 new logs [10-06-2022 12:36:01]22050: WAF :: fetched 2 new logs [10-06-2022 12:37:02]24834: WAF :: fetched 5 new logs [10-06-2022 12:38:02]27608: WAF :: fetched 38 new logs [10-06-2022 12:41:02]3803: Checking for user cron vulnerabilities [10-06-2022 12:42:02]6603: WAF :: fetched 1 new logs [10-06-2022 12:44:01]12185: Checking ditributed CMS bruteforce attacks [10-06-2022 12:45:01]: Checking for software updates [10-06-2022 12:46:01]17880: WAF :: fetched 3 new logs [10-06-2022 12:47:02]20783: WAF :: fetched 4 new logs [10-06-2022 12:48:01]23563: WAF :: fetched 1 new logs [10-06-2022 12:50:01]29300: WAF :: fetched 5 new logs [10-06-2022 12:52:02]2577: WAF :: fetched 1 new logs [10-06-2022 12:53:01]5382: WAF :: fetched 2 new logs [10-06-2022 12:54:01]8203: WAF :: fetched 1 new logs [10-06-2022 12:55:02]11136: WAF :: fetched 1 new logs [10-06-2022 12:57:02]16743: WAF :: fetched 2 new logs [10-06-2022 12:59:02]22201: WAF :: fetched 1 new logs [10-06-2022 13:00:02]24780: WAF :: fetched 3 new logs [10-06-2022 13:02:02]30889: WAF :: fetched 4 new logs [10-06-2022 13:03:01]1328: WAF :: fetched 2 new logs [10-06-2022 13:04:01]4128: WAF :: fetched 4 new logs [10-06-2022 13:05:02]7053: WAF :: fetched 7 new logs [10-06-2022 13:06:01]9890: WAF :: fetched 13 new logs [10-06-2022 13:07:01]12657: WAF :: fetched 4 new logs [10-06-2022 13:08:02]15421: WAF :: fetched 3 new logs [10-06-2022 13:10:02]21076: WAF :: fetched 3 new logs [10-06-2022 13:12:01]26623: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654877521 [10-06-2022 13:12:01]26623: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 13:12:03]26623: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 13:12:03]26623: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-1312/20220610-131201-YqNtUZYpKebJf3-iPVMguAAAADA [10-06-2022 13:12:03]26623: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 13:12:04]26623: WAF :: fetched 2 new logs [10-06-2022 13:13:02]29408: WAF :: fetched 2 new logs [10-06-2022 13:16:02]5525: WAF :: fetched 1 new logs [10-06-2022 13:17:01]8310: WAF :: fetched 7 new logs [10-06-2022 13:18:02]11140: WAF :: fetched 2 new logs [10-06-2022 13:20:02]16798: WAF :: fetched 1 new logs [10-06-2022 13:21:02]19600: WAF :: fetched 2 new logs [10-06-2022 13:22:01]22375: WAF :: fetched 1 new logs [10-06-2022 13:25:02]30807: WAF :: fetched 1 new logs [10-06-2022 13:27:01]4048: WAF :: fetched 1 new logs [10-06-2022 13:30:02]12525: WAF :: fetched 2 new logs [10-06-2022 13:31:01]15330: WAF :: fetched 6 new logs [10-06-2022 13:32:01]18092: WAF :: fetched 6 new logs [10-06-2022 13:33:02]20921: WAF :: fetched 8 new logs [10-06-2022 13:34:01]23596: WAF :: fetched 1 new logs [10-06-2022 13:35:02]26490: WAF :: fetched 4 new logs [10-06-2022 13:36:01]29396: WAF :: fetched 1 new logs [10-06-2022 13:38:02]2698: WAF :: fetched 1 new logs [10-06-2022 13:41:01]11557: WAF :: fetched 4 new logs [10-06-2022 13:41:01]11557: Checking for user cron vulnerabilities [10-06-2022 13:43:01]17226: WAF :: fetched 1 new logs [10-06-2022 13:44:02]20129: Checking ditributed CMS bruteforce attacks [10-06-2022 13:45:02]: Checking for definition updates [10-06-2022 13:47:02]28740: WAF :: fetched 1 new logs [10-06-2022 13:48:02]31595: WAF :: fetched 5 new logs [10-06-2022 13:49:01]2001: WAF :: fetched 2 new logs [10-06-2022 13:50:02]5028: WAF :: fetched 3 new logs [10-06-2022 13:51:01]7982: WAF :: fetched 6 new logs [10-06-2022 13:55:01]19203: WAF :: fetched 2 new logs [10-06-2022 13:56:01]22043: WAF :: fetched 4 new logs [10-06-2022 13:58:01]27651: WAF :: fetched 2 new logs [10-06-2022 13:59:01]30515: WAF :: fetched 13 new logs [10-06-2022 14:00:02]754: WAF :: fetched 38 new logs [10-06-2022 14:01:01]4220: WAF :: fetched 2 new logs [10-06-2022 14:02:02]7133: WAF :: fetched 5 new logs [10-06-2022 14:03:02]10292: WAF :: fetched 39 new logs [10-06-2022 14:04:01]13166: WAF :: fetched 14 new logs [10-06-2022 14:05:02]16097: WAF :: fetched 22 new logs [10-06-2022 14:06:01]18954: WAF :: fetched 28 new logs [10-06-2022 14:07:02]21875: WAF :: fetched 15 new logs [10-06-2022 14:08:01]24653: WAF :: fetched 36 new logs [10-06-2022 14:09:02]27461: WAF :: fetched 23 new logs [10-06-2022 14:10:02]30275: WAF :: fetched 71 new logs [10-06-2022 14:11:01]670: WAF :: fetched 7 new logs [10-06-2022 14:12:02]3543: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654881122 [10-06-2022 14:12:02]3543: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 14:12:04]3543: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 14:12:04]3543: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-1412/20220610-141202-YqN7YoygWMGDVLTan6_BigAAABM [10-06-2022 14:12:04]3543: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 14:12:04]3543: WAF :: fetched 25 new logs [10-06-2022 14:13:01]6353: WAF :: fetched 6 new logs [10-06-2022 14:14:01]9115: WAF :: fetched 5 new logs [10-06-2022 14:15:02]12004: WAF :: fetched 9 new logs [10-06-2022 14:16:01]14797: WAF :: fetched 10 new logs [10-06-2022 14:17:02]17599: WAF :: fetched 3 new logs [10-06-2022 14:18:01]20200: WAF :: fetched 41 new logs [10-06-2022 14:19:02]23269: WAF :: fetched 13 new logs [10-06-2022 14:20:01]26124: WAF :: fetched 11 new logs [10-06-2022 14:21:01]28986: WAF :: fetched 9 new logs [10-06-2022 14:22:01]31720: WAF :: fetched 2 new logs [10-06-2022 14:23:02]2142: WAF :: fetched 11 new logs [10-06-2022 14:24:01]4950: WAF :: fetched 38 new logs [10-06-2022 14:25:02]7916: WAF :: fetched 18 new logs [10-06-2022 14:26:01]10756: WAF :: fetched 5 new logs [10-06-2022 14:27:01]13569: WAF :: fetched 9 new logs [10-06-2022 14:33:01]30705: WAF :: fetched 1 new logs [10-06-2022 14:34:02]1172: WAF :: fetched 4 new logs [10-06-2022 14:35:02]4117: WAF :: fetched 2 new logs [10-06-2022 14:36:01]7155: WAF :: fetched 1 new logs [10-06-2022 14:39:02]15634: WAF :: fetched 2 new logs [10-06-2022 14:40:02]18508: WAF :: fetched 1 new logs [10-06-2022 14:41:01]21500: WAF :: fetched 1 new logs [10-06-2022 14:41:01]21500: Checking for user cron vulnerabilities [10-06-2022 14:42:02]24427: WAF :: fetched 19 new logs [10-06-2022 14:43:01]27330: WAF :: fetched 72 new logs [10-06-2022 14:44:02]30207: Checking ditributed CMS bruteforce attacks [10-06-2022 14:44:02]30207: WAF :: fetched 60 new logs [10-06-2022 14:45:01]725: WAF :: fetched 19 new logs [10-06-2022 14:46:01]3855: WAF :: fetched 9 new logs [10-06-2022 14:47:01]6789: WAF :: fetched 1 new logs [10-06-2022 14:48:02]9656: WAF :: fetched 6 new logs [10-06-2022 14:49:01]12556: WAF :: fetched 6 new logs [10-06-2022 14:52:01]21260: WAF :: fetched 1 new logs [10-06-2022 14:53:02]24109: WAF :: fetched 2 new logs [10-06-2022 14:53:02]24115: Updated license status via CDN [10-06-2022 14:54:01]26906: WAF :: fetched 2 new logs [10-06-2022 14:56:02]32587: WAF :: fetched 7 new logs [10-06-2022 14:57:01]2957: WAF :: fetched 27 new logs [10-06-2022 14:58:02]5881: WAF :: fetched 1 new logs [10-06-2022 14:59:01]8668: WAF :: fetched 19 new logs [10-06-2022 15:00:01]11369: WAF :: fetched 57 new logs [10-06-2022 15:01:01]14651: Reseting cPGuard inotify settings [10-06-2022 15:01:01]14649: WAF :: fetched 54 new logs [10-06-2022 15:02:02]17541: WAF :: fetched 41 new logs [10-06-2022 15:03:02]20393: WAF :: fetched 47 new logs [10-06-2022 15:04:02]23149: WAF :: fetched 53 new logs [10-06-2022 15:05:01]26056: WAF :: fetched 58 new logs [10-06-2022 15:06:02]29019: WAF :: fetched 52 new logs [10-06-2022 15:07:02]31856: WAF :: fetched 52 new logs [10-06-2022 15:08:02]2251: WAF :: fetched 58 new logs [10-06-2022 15:09:01]5186: WAF :: fetched 63 new logs [10-06-2022 15:10:01]8121: WAF :: fetched 63 new logs [10-06-2022 15:11:01]10987: WAF :: fetched 66 new logs [10-06-2022 15:12:02]13820: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654884722 [10-06-2022 15:12:02]13820: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 15:12:04]13820: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 15:12:04]13820: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-1512/20220610-151202-YqOJchwznYqBibpnWKFA7QAAABo [10-06-2022 15:12:04]13820: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 15:12:04]13820: WAF :: fetched 60 new logs [10-06-2022 15:13:01]16546: WAF :: fetched 9 new logs [10-06-2022 15:14:01]19306: WAF :: fetched 2 new logs [10-06-2022 15:15:01]22174: WAF :: fetched 1 new logs [10-06-2022 15:17:02]27945: WAF :: fetched 2 new logs [10-06-2022 15:18:01]30693: WAF :: fetched 8 new logs [10-06-2022 15:19:01]1191: WAF :: fetched 6 new logs [10-06-2022 15:20:02]4342: WAF :: fetched 4 new logs [10-06-2022 15:20:02]4356: httpd.conf changed. Refreshing watchlist. [10-06-2022 15:21:02]7316: WAF :: fetched 6 new logs [10-06-2022 15:22:01]10288: WAF :: fetched 3 new logs [10-06-2022 15:22:01]10286: httpd.conf changed. Refreshing watchlist. [10-06-2022 15:23:01]13125: WAF :: fetched 1 new logs [10-06-2022 15:24:02]15965: WAF :: fetched 1 new logs [10-06-2022 15:25:01]18887: WAF :: fetched 1 new logs [10-06-2022 15:26:01]21746: WAF :: fetched 3 new logs [10-06-2022 15:27:02]24633: WAF :: fetched 2 new logs [10-06-2022 15:27:02]24632: httpd.conf changed. Refreshing watchlist. [10-06-2022 15:28:02]27553: httpd.conf changed. Refreshing watchlist. [10-06-2022 15:29:02]30364: WAF :: fetched 4 new logs [10-06-2022 15:30:01]838: WAF :: fetched 1 new logs [10-06-2022 15:31:02]3890: WAF :: fetched 3 new logs [10-06-2022 15:32:02]6727: WAF :: fetched 2 new logs [10-06-2022 15:33:01]9570: WAF :: fetched 4 new logs [10-06-2022 15:34:02]12456: WAF :: fetched 4 new logs [10-06-2022 15:35:02]15344: WAF :: fetched 14 new logs [10-06-2022 15:36:01]18231: WAF :: fetched 2 new logs [10-06-2022 15:37:02]21043: WAF :: fetched 5 new logs [10-06-2022 15:38:01]23828: WAF :: fetched 3 new logs [10-06-2022 15:39:02]26741: WAF :: fetched 2 new logs [10-06-2022 15:40:01]29675: WAF :: fetched 3 new logs [10-06-2022 15:41:01]32579: Checking for user cron vulnerabilities [10-06-2022 15:44:02]8770: Checking ditributed CMS bruteforce attacks [10-06-2022 15:44:02]8774: httpd.conf changed. Refreshing watchlist. [10-06-2022 15:48:02]20351: httpd.conf changed. Refreshing watchlist. [10-06-2022 15:50:02]26049: WAF :: fetched 1 new logs [10-06-2022 15:51:02]28948: WAF :: fetched 2 new logs [10-06-2022 15:52:01]31476: WAF :: fetched 2 new logs [10-06-2022 15:53:01]2131: WAF :: fetched 1 new logs [10-06-2022 15:56:02]10700: WAF :: fetched 1 new logs [10-06-2022 15:59:01]19074: WAF :: fetched 2 new logs [10-06-2022 16:01:02]25032: WAF :: fetched 2 new logs [10-06-2022 16:02:02]27891: WAF :: fetched 2 new logs [10-06-2022 16:03:01]30602: WAF :: fetched 2 new logs [10-06-2022 16:06:01]6908: WAF :: fetched 1 new logs [10-06-2022 16:07:01]9670: WAF :: fetched 1 new logs [10-06-2022 16:08:02]12470: WAF :: fetched 6 new logs [10-06-2022 16:09:01]15232: WAF :: fetched 18 new logs [10-06-2022 16:10:02]18160: WAF :: fetched 25 new logs [10-06-2022 16:11:01]21014: WAF :: fetched 14 new logs [10-06-2022 16:12:02]23803: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654888322 [10-06-2022 16:12:02]23803: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 16:12:04]23803: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 16:12:04]23803: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-1612/20220610-161202-YqOXggWnb7NKGmHS1kxOYQAAAAA [10-06-2022 16:12:04]23803: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 16:12:04]23803: WAF :: fetched 1 new logs [10-06-2022 16:14:01]29381: WAF :: fetched 2 new logs [10-06-2022 16:16:01]2708: WAF :: fetched 1 new logs [10-06-2022 16:17:02]5623: WAF :: fetched 2 new logs [10-06-2022 16:18:01]8342: WAF :: fetched 1 new logs [10-06-2022 16:22:02]19770: WAF :: fetched 1 new logs [10-06-2022 16:25:01]28216: WAF :: fetched 1 new logs [10-06-2022 16:26:02]31062: WAF :: fetched 4 new logs [10-06-2022 16:27:02]1477: WAF :: fetched 46 new logs [10-06-2022 16:28:01]4308: WAF :: fetched 48 new logs [10-06-2022 16:29:02]7112: WAF :: fetched 51 new logs [10-06-2022 16:30:01]9954: WAF :: fetched 6 new logs [10-06-2022 16:31:01]12772: WAF :: fetched 1 new logs [10-06-2022 16:32:02]15583: WAF :: fetched 2 new logs [10-06-2022 16:33:01]18355: WAF :: fetched 2 new logs [10-06-2022 16:34:01]21147: WAF :: fetched 8 new logs [10-06-2022 16:36:01]26860: WAF :: fetched 1 new logs [10-06-2022 16:37:02]29683: WAF :: fetched 1 new logs [10-06-2022 16:41:01]8766: Checking for user cron vulnerabilities [10-06-2022 16:42:02]11574: WAF :: fetched 4 new logs [10-06-2022 16:43:01]14321: WAF :: fetched 2 new logs [10-06-2022 16:44:01]17116: Checking ditributed CMS bruteforce attacks [10-06-2022 16:47:02]25581: WAF :: fetched 3 new logs [10-06-2022 16:50:02]1643: WAF :: fetched 3 new logs [10-06-2022 16:54:01]12919: WAF :: fetched 1 new logs [10-06-2022 16:55:02]15827: WAF :: fetched 6 new logs [10-06-2022 16:56:01]18696: WAF :: fetched 4 new logs [10-06-2022 16:57:02]21538: WAF :: fetched 3 new logs [10-06-2022 16:58:02]24278: WAF :: fetched 2 new logs [10-06-2022 17:01:02]524: WAF :: fetched 3 new logs [10-06-2022 17:06:02]14619: WAF :: fetched 2 new logs [10-06-2022 17:07:01]17351: WAF :: fetched 4 new logs [10-06-2022 17:08:02]20172: WAF :: fetched 4 new logs [10-06-2022 17:09:01]22952: WAF :: fetched 3 new logs [10-06-2022 17:10:01]25767: WAF :: fetched 1 new logs [10-06-2022 17:11:02]28679: WAF :: fetched 2 new logs [10-06-2022 17:12:01]31409: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654891921 [10-06-2022 17:12:01]31409: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 17:12:03]31409: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 17:12:04]31409: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-1712/20220610-171201-YqOlkU45MMGl9pcU__sSZQAAADI [10-06-2022 17:12:04]31409: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 17:12:04]31409: WAF :: fetched 3 new logs [10-06-2022 17:13:02]1817: WAF :: fetched 15 new logs [10-06-2022 17:14:01]4629: WAF :: fetched 29 new logs [10-06-2022 17:15:01]7424: WAF :: fetched 33 new logs [10-06-2022 17:16:02]10313: WAF :: fetched 29 new logs [10-06-2022 17:17:01]13069: WAF :: fetched 27 new logs [10-06-2022 17:18:02]15888: WAF :: fetched 29 new logs [10-06-2022 17:19:02]18664: WAF :: fetched 31 new logs [10-06-2022 17:20:01]21056: WAF :: fetched 32 new logs [10-06-2022 17:21:01]24392: WAF :: fetched 33 new logs [10-06-2022 17:22:02]27122: WAF :: fetched 30 new logs [10-06-2022 17:23:01]29875: WAF :: fetched 28 new logs [10-06-2022 17:24:01]32636: WAF :: fetched 29 new logs [10-06-2022 17:25:01]3018: WAF :: fetched 16 new logs [10-06-2022 17:28:01]11562: WAF :: fetched 5 new logs [10-06-2022 17:29:02]14323: WAF :: fetched 1 new logs [10-06-2022 17:30:01]17057: WAF :: fetched 2 new logs [10-06-2022 17:31:01]19971: WAF :: fetched 5 new logs [10-06-2022 17:32:02]22745: WAF :: fetched 6 new logs [10-06-2022 17:33:02]25480: WAF :: fetched 8 new logs [10-06-2022 17:34:01]28195: WAF :: fetched 2 new logs [10-06-2022 17:35:01]30952: WAF :: fetched 3 new logs [10-06-2022 17:36:01]1487: WAF :: fetched 3 new logs [10-06-2022 17:37:02]4284: WAF :: fetched 2 new logs [10-06-2022 17:38:01]7021: WAF :: fetched 1 new logs [10-06-2022 17:41:01]15632: Checking for user cron vulnerabilities [10-06-2022 17:42:02]18521: WAF :: fetched 1 new logs [10-06-2022 17:43:01]21239: WAF :: fetched 5 new logs [10-06-2022 17:44:02]24065: Checking ditributed CMS bruteforce attacks [10-06-2022 17:44:02]24065: WAF :: fetched 2 new logs [10-06-2022 17:48:02]2883: WAF :: fetched 1 new logs [10-06-2022 17:54:01]19441: WAF :: fetched 1 new logs [10-06-2022 17:55:01]22432: WAF :: fetched 5 new logs [10-06-2022 17:56:02]25342: WAF :: fetched 5 new logs [10-06-2022 17:57:01]28068: WAF :: fetched 2 new logs [10-06-2022 17:58:01]30791: WAF :: fetched 1 new logs [10-06-2022 18:00:01]3705: WAF :: fetched 1 new logs [10-06-2022 18:10:02]32195: WAF :: fetched 3 new logs [10-06-2022 18:11:01]2695: WAF :: fetched 1 new logs [10-06-2022 18:12:02]5522: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654895522 [10-06-2022 18:12:02]5522: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 18:12:04]5522: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 18:12:04]5522: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-1812/20220610-181202-YqOzolOxvG-hEWm3utaMTQAAAAY [10-06-2022 18:12:04]5522: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 18:12:04]5522: WAF :: fetched 2 new logs [10-06-2022 18:15:02]13756: WAF :: fetched 3 new logs [10-06-2022 18:16:01]16607: WAF :: fetched 4 new logs [10-06-2022 18:17:02]19360: WAF :: fetched 109 new logs [10-06-2022 18:18:01]22029: WAF :: fetched 2 new logs [10-06-2022 18:19:02]24749: WAF :: fetched 3 new logs [10-06-2022 18:20:01]27489: WAF :: fetched 91 new logs [10-06-2022 18:21:01]30313: WAF :: fetched 1 new logs [10-06-2022 18:22:02]634: WAF :: fetched 1 new logs [10-06-2022 18:23:01]3387: WAF :: fetched 20 new logs [10-06-2022 18:24:02]6188: WAF :: fetched 48 new logs [10-06-2022 18:25:01]8889: WAF :: fetched 63 new logs [10-06-2022 18:26:01]11684: WAF :: fetched 73 new logs [10-06-2022 18:27:02]14419: WAF :: fetched 71 new logs [10-06-2022 18:28:01]17102: WAF :: fetched 57 new logs [10-06-2022 18:30:02]22511: WAF :: fetched 60 new logs [10-06-2022 18:31:01]25374: WAF :: fetched 48 new logs [10-06-2022 18:32:02]28166: WAF :: fetched 68 new logs [10-06-2022 18:33:01]30854: WAF :: fetched 73 new logs [10-06-2022 18:34:01]1151: WAF :: fetched 66 new logs [10-06-2022 18:35:02]4024: WAF :: fetched 12 new logs [10-06-2022 18:36:01]6875: WAF :: fetched 1 new logs [10-06-2022 18:37:02]9599: WAF :: fetched 2 new logs [10-06-2022 18:38:01]12268: WAF :: fetched 1 new logs [10-06-2022 18:39:02]14988: WAF :: fetched 8 new logs [10-06-2022 18:40:01]17674: WAF :: fetched 7 new logs [10-06-2022 18:41:02]20674: WAF :: fetched 4 new logs [10-06-2022 18:41:02]20674: Checking for user cron vulnerabilities [10-06-2022 18:42:01]23369: WAF :: fetched 1 new logs [10-06-2022 18:43:02]26078: WAF :: fetched 5 new logs [10-06-2022 18:44:01]28758: Checking ditributed CMS bruteforce attacks [10-06-2022 18:44:01]28758: WAF :: fetched 5 new logs [10-06-2022 18:45:02]31466: WAF :: fetched 9 new logs [10-06-2022 18:46:01]1607: WAF :: fetched 4 new logs [10-06-2022 18:47:02]4716: WAF :: fetched 5 new logs [10-06-2022 18:48:01]7426: WAF :: fetched 9 new logs [10-06-2022 18:49:02]10152: WAF :: fetched 3 new logs [10-06-2022 18:50:01]12863: WAF :: fetched 14 new logs [10-06-2022 18:51:01]15770: WAF :: fetched 6 new logs [10-06-2022 18:52:02]18499: WAF :: fetched 15 new logs [10-06-2022 18:53:01]21204: WAF :: fetched 3 new logs [10-06-2022 18:54:02]23940: WAF :: fetched 2 new logs [10-06-2022 18:55:02]26640: WAF :: fetched 1 new logs [10-06-2022 18:56:02]29471: WAF :: fetched 4 new logs [10-06-2022 18:57:01]32146: WAF :: fetched 75 new logs [10-06-2022 18:58:01]2508: WAF :: fetched 93 new logs [10-06-2022 18:59:02]5336: WAF :: fetched 95 new logs [10-06-2022 19:00:01]7794: WAF :: fetched 87 new logs [10-06-2022 19:01:02]11158: WAF :: fetched 30 new logs [10-06-2022 19:06:01]24901: WAF :: fetched 1 new logs [10-06-2022 19:07:02]27618: WAF :: fetched 1 new logs [10-06-2022 19:08:01]30322: WAF :: fetched 1 new logs [10-06-2022 19:09:02]601: WAF :: fetched 1 new logs [10-06-2022 19:12:01]9063: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654899121 [10-06-2022 19:12:01]9063: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 19:12:04]9063: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-1912/20220610-191201-YqPBsbhIidwOT68L-M-VXAAAAAI [10-06-2022 19:12:04]9063: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [10-06-2022 19:12:04]9063: WAF :: fetched 2 new logs [10-06-2022 19:17:01]22760: WAF :: fetched 3 new logs [10-06-2022 19:19:02]28266: WAF :: fetched 7 new logs [10-06-2022 19:20:01]31083: WAF :: fetched 18 new logs [10-06-2022 19:21:01]1626: WAF :: fetched 2 new logs [10-06-2022 19:22:01]4465: WAF :: fetched 4 new logs [10-06-2022 19:23:02]7210: WAF :: fetched 2 new logs [10-06-2022 19:24:01]9922: WAF :: fetched 3 new logs [10-06-2022 19:27:02]18174: WAF :: fetched 1 new logs [10-06-2022 19:28:01]20887: WAF :: fetched 1 new logs [10-06-2022 19:31:01]29261: WAF :: fetched 1 new logs [10-06-2022 19:35:01]7891: WAF :: fetched 2 new logs [10-06-2022 19:37:01]13453: WAF :: fetched 1 new logs [10-06-2022 19:39:01]18906: WAF :: fetched 1 new logs [10-06-2022 19:41:02]24587: WAF :: fetched 3 new logs [10-06-2022 19:41:02]24587: Checking for user cron vulnerabilities [10-06-2022 19:42:01]27260: WAF :: fetched 2 new logs [10-06-2022 19:44:01]32713: Checking ditributed CMS bruteforce attacks [10-06-2022 19:44:01]32713: WAF :: fetched 2 new logs [10-06-2022 19:45:02]: Checking for definition updates [10-06-2022 19:47:01]8700: WAF :: fetched 5 new logs [10-06-2022 19:48:02]11449: WAF :: fetched 2 new logs [10-06-2022 19:51:02]19738: WAF :: fetched 3 new logs [10-06-2022 19:52:01]22501: WAF :: fetched 1 new logs [10-06-2022 19:53:02]25197: WAF :: fetched 1 new logs [10-06-2022 19:55:01]30611: WAF :: fetched 2 new logs [10-06-2022 19:56:02]1124: WAF :: fetched 32 new logs [10-06-2022 19:57:01]4083: WAF :: fetched 2 new logs [10-06-2022 19:59:01]9565: WAF :: fetched 1 new logs [10-06-2022 20:00:01]12092: WAF :: fetched 1 new logs [10-06-2022 20:04:01]23599: WAF :: fetched 1 new logs [10-06-2022 20:05:02]26303: WAF :: fetched 1 new logs [10-06-2022 20:10:01]7860: WAF :: fetched 2 new logs [10-06-2022 20:12:02]13512: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654902722 [10-06-2022 20:12:02]13512: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 20:12:04]13512: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 20:12:04]13512: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-2012/20220610-201202-YqPPwo3-UC9pGokAV-H0IgAAACI [10-06-2022 20:12:04]13512: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 20:12:04]13512: WAF :: fetched 88 new logs [10-06-2022 20:20:01]3047: WAF :: fetched 2 new logs [10-06-2022 20:21:02]6044: WAF :: fetched 5 new logs [10-06-2022 20:29:02]27904: WAF :: fetched 1 new logs [10-06-2022 20:31:01]1062: WAF :: fetched 14 new logs [10-06-2022 20:32:02]3877: WAF :: fetched 18 new logs [10-06-2022 20:33:02]6662: WAF :: fetched 1 new logs [10-06-2022 20:34:01]8949: WAF :: fetched 1 new logs [10-06-2022 20:36:02]14964: WAF :: fetched 1 new logs [10-06-2022 20:37:02]17657: WAF :: fetched 1 new logs [10-06-2022 20:38:02]20406: WAF :: fetched 3 new logs [10-06-2022 20:40:01]25830: WAF :: fetched 4 new logs [10-06-2022 20:41:01]28693: WAF :: fetched 1 new logs [10-06-2022 20:41:01]28693: Checking for user cron vulnerabilities [10-06-2022 20:42:01]31420: WAF :: fetched 2 new logs [10-06-2022 20:44:01]4606: Checking ditributed CMS bruteforce attacks [10-06-2022 20:44:01]4606: WAF :: fetched 1 new logs [10-06-2022 20:45:01]7378: WAF :: fetched 3 new logs [10-06-2022 20:46:02]10304: WAF :: fetched 2 new logs [10-06-2022 20:49:01]18443: WAF :: fetched 4 new logs [10-06-2022 20:50:02]21202: WAF :: fetched 2 new logs [10-06-2022 20:51:01]24013: WAF :: fetched 1 new logs [10-06-2022 20:52:02]26736: WAF :: fetched 2 new logs [10-06-2022 20:53:02]29443: WAF :: fetched 3 new logs [10-06-2022 20:54:01]32148: WAF :: fetched 2 new logs [10-06-2022 20:59:01]13567: WAF :: fetched 3 new logs [10-06-2022 21:00:02]16070: WAF :: fetched 1 new logs [10-06-2022 21:02:02]22124: WAF :: fetched 2 new logs [10-06-2022 21:03:02]24838: WAF :: fetched 24 new logs [10-06-2022 21:06:02]611: WAF :: fetched 1 new logs [10-06-2022 21:08:01]6170: WAF :: fetched 1 new logs [10-06-2022 21:09:02]8891: WAF :: fetched 4 new logs [10-06-2022 21:10:01]11626: WAF :: fetched 1 new logs [10-06-2022 21:12:02]17150: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654906322 [10-06-2022 21:12:02]17150: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 21:12:04]17150: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 21:12:04]17150: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-2112/20220610-211202-YqPd0mPZ5B00XU5VeL1XagAAAAY [10-06-2022 21:12:04]17150: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 21:12:04]17150: WAF :: fetched 4 new logs [10-06-2022 21:15:01]25327: WAF :: fetched 1 new logs [10-06-2022 21:18:01]1111: WAF :: fetched 1 new logs [10-06-2022 21:19:02]3926: WAF :: fetched 3 new logs [10-06-2022 21:20:01]6667: WAF :: fetched 7 new logs [10-06-2022 21:21:01]9528: WAF :: fetched 3 new logs [10-06-2022 21:23:01]14953: WAF :: fetched 1 new logs [10-06-2022 21:25:01]20391: WAF :: fetched 2 new logs [10-06-2022 21:26:01]23272: WAF :: fetched 5 new logs [10-06-2022 21:33:01]10112: WAF :: fetched 1 new logs [10-06-2022 21:36:01]18416: WAF :: fetched 3 new logs [10-06-2022 21:37:02]21163: WAF :: fetched 3 new logs [10-06-2022 21:38:01]23865: WAF :: fetched 8 new logs [10-06-2022 21:39:01]26592: WAF :: fetched 3 new logs [10-06-2022 21:40:02]29351: WAF :: fetched 5 new logs [10-06-2022 21:41:01]32215: WAF :: fetched 3 new logs [10-06-2022 21:41:01]32215: Checking for user cron vulnerabilities [10-06-2022 21:42:02]2625: WAF :: fetched 4 new logs [10-06-2022 21:43:01]5418: WAF :: fetched 2 new logs [10-06-2022 21:44:01]8109: Checking ditributed CMS bruteforce attacks [10-06-2022 21:44:01]8109: WAF :: fetched 13 new logs [10-06-2022 21:45:02]10871: WAF :: fetched 18 new logs [10-06-2022 21:46:01]13669: WAF :: fetched 88 new logs [10-06-2022 21:47:02]16420: WAF :: fetched 110 new logs [10-06-2022 21:48:02]19132: WAF :: fetched 132 new logs [10-06-2022 21:49:01]21864: WAF :: fetched 177 new logs [10-06-2022 21:50:02]24630: WAF :: fetched 132 new logs [10-06-2022 21:51:01]27463: WAF :: fetched 128 new logs [10-06-2022 21:52:02]30213: WAF :: fetched 91 new logs [10-06-2022 21:53:01]411: WAF :: fetched 85 new logs [10-06-2022 21:54:01]3211: WAF :: fetched 73 new logs [10-06-2022 21:55:02]6029: WAF :: fetched 60 new logs [10-06-2022 21:56:01]8910: WAF :: fetched 54 new logs [10-06-2022 21:57:02]11647: WAF :: fetched 39 new logs [10-06-2022 21:58:01]14359: WAF :: fetched 26 new logs [10-06-2022 21:59:02]17104: WAF :: fetched 35 new logs [10-06-2022 22:00:01]19578: WAF :: fetched 47 new logs [10-06-2022 22:01:02]22903: WAF :: fetched 49 new logs [10-06-2022 22:02:01]25509: WAF :: fetched 34 new logs [10-06-2022 22:03:02]28350: WAF :: fetched 24 new logs [10-06-2022 22:04:01]31025: WAF :: fetched 25 new logs [10-06-2022 22:05:01]1357: WAF :: fetched 20 new logs [10-06-2022 22:06:02]4318: WAF :: fetched 24 new logs [10-06-2022 22:07:01]7090: WAF :: fetched 17 new logs [10-06-2022 22:07:07]7088: Performing Domain reputation checks [10-06-2022 22:10:01]15276: WAF :: fetched 4 new logs [10-06-2022 22:12:02]20843: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654909922 [10-06-2022 22:12:02]20843: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 22:12:04]20843: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 22:12:04]20843: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-2212/20220610-221202-YqPr4uorMZI6g88jPWkTCAAAAAA [10-06-2022 22:12:04]20843: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [10-06-2022 22:12:04]20843: WAF :: fetched 2 new logs [10-06-2022 22:13:02]23563: WAF :: fetched 3 new logs [10-06-2022 22:14:01]26276: WAF :: fetched 2 new logs [10-06-2022 22:15:01]29004: WAF :: fetched 2 new logs [10-06-2022 22:16:02]31781: WAF :: fetched 7 new logs [10-06-2022 22:17:01]2184: WAF :: fetched 3 new logs [10-06-2022 22:18:01]4962: WAF :: fetched 3 new logs [10-06-2022 22:21:01]13200: WAF :: fetched 5 new logs [10-06-2022 22:22:01]16064: WAF :: fetched 1 new logs [10-06-2022 22:23:01]18818: WAF :: fetched 2 new logs [10-06-2022 22:24:02]21539: WAF :: fetched 4 new logs [10-06-2022 22:25:01]24224: WAF :: fetched 3 new logs [10-06-2022 22:26:01]26970: WAF :: fetched 2 new logs [10-06-2022 22:27:02]29777: WAF :: fetched 6 new logs [10-06-2022 22:28:02]32443: WAF :: fetched 4 new logs [10-06-2022 22:29:02]2760: WAF :: fetched 1 new logs [10-06-2022 22:30:02]5561: WAF :: fetched 1 new logs [10-06-2022 22:31:02]8379: WAF :: fetched 3 new logs [10-06-2022 22:32:02]11180: WAF :: fetched 1 new logs [10-06-2022 22:33:02]13860: WAF :: fetched 1 new logs [10-06-2022 22:35:02]19254: WAF :: fetched 1 new logs [10-06-2022 22:38:02]27497: WAF :: fetched 1 new logs [10-06-2022 22:40:01]469: WAF :: fetched 1 new logs [10-06-2022 22:41:02]3340: Checking for user cron vulnerabilities [10-06-2022 22:44:02]11611: Checking ditributed CMS bruteforce attacks [10-06-2022 22:44:02]11611: WAF :: fetched 1 new logs [10-06-2022 22:46:02]17033: WAF :: fetched 1 new logs [10-06-2022 22:49:01]25224: WAF :: fetched 3 new logs [10-06-2022 22:51:02]30711: WAF :: fetched 1 new logs [10-06-2022 22:53:01]3838: WAF :: fetched 1 new logs [10-06-2022 22:54:02]6661: WAF :: fetched 2 new logs [10-06-2022 22:55:02]9351: WAF :: fetched 2 new logs [10-06-2022 23:01:02]25890: WAF :: fetched 2 new logs [10-06-2022 23:02:01]28688: WAF :: fetched 2 new logs [10-06-2022 23:04:01]1686: WAF :: fetched 2 new logs [10-06-2022 23:05:01]4512: WAF :: fetched 7 new logs [10-06-2022 23:07:57]10221: Performed RBL check for 23.111.136.34. [10-06-2022 23:08:01]12754: WAF :: fetched 1 new logs [10-06-2022 23:12:02]23757: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654913522 [10-06-2022 23:12:02]23757: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-06-2022 23:12:04]23757: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-06-2022 23:12:04]23757: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220610/20220610-2312/20220610-231202-YqP58lShDycD-qxj9XMD3gAAAAk [10-06-2022 23:12:04]23757: WAF :: No suitable log file found. Using SQLite.. [10-06-2022 23:12:04]23757: WAF :: fetched 73 new logs [10-06-2022 23:13:01]26508: WAF :: fetched 1 new logs [10-06-2022 23:14:02]29214: WAF :: fetched 2 new logs [10-06-2022 23:19:01]10527: WAF :: fetched 1 new logs [10-06-2022 23:22:01]18810: WAF :: fetched 4 new logs [10-06-2022 23:23:02]21588: WAF :: fetched 1 new logs [10-06-2022 23:24:01]24308: WAF :: fetched 1 new logs [10-06-2022 23:26:02]29791: WAF :: fetched 1 new logs [10-06-2022 23:29:01]5658: WAF :: fetched 1 new logs [10-06-2022 23:30:01]8397: WAF :: fetched 4 new logs [10-06-2022 23:39:02]826: WAF :: fetched 1 new logs [10-06-2022 23:40:02]3601: WAF :: fetched 1 new logs [10-06-2022 23:41:01]6017: Checking for user cron vulnerabilities [10-06-2022 23:44:01]14666: Checking ditributed CMS bruteforce attacks [10-06-2022 23:45:01]17390: WAF :: fetched 1 new logs [10-06-2022 23:47:01]23033: WAF :: fetched 3 new logs [10-06-2022 23:48:02]25787: WAF :: fetched 1 new logs [10-06-2022 23:51:02]1606: WAF :: fetched 1 new logs [10-06-2022 23:52:01]4463: WAF :: fetched 1 new logs [10-06-2022 23:53:02]7228: WAF :: fetched 1 new logs [10-06-2022 23:54:02]9892: WAF :: fetched 1 new logs [10-06-2022 23:55:01]12685: WAF :: fetched 1 new logs [10-06-2022 23:55:01]12688: httpd.conf changed. Refreshing watchlist. [10-06-2022 23:57:02]18270: WAF :: fetched 66 new logs [10-06-2022 23:58:01]20970: WAF :: fetched 3 new logs [10-06-2022 23:59:01]23675: WAF :: fetched 1 new logs [11-06-2022 00:00:01]26124: WAF :: fetched 5 new logs [11-06-2022 00:01:02]29431: WAF :: fetched 1 new logs [11-06-2022 00:01:04]29431: Sending daily report for June 11, 2022 [11-06-2022 00:02:01]32272: WAF :: fetched 2 new logs [11-06-2022 00:05:01]8175: Deleted 0 entries older than 6 MONTH from scanner_logs [11-06-2022 00:05:01]8175: Deleted 0 files from Quarantine [11-06-2022 00:07:02]13703: WAF :: fetched 1 new logs [11-06-2022 00:10:01]21766: WAF :: fetched 2 new logs [11-06-2022 00:11:01]24518: WAF :: fetched 2 new logs [11-06-2022 00:12:02]27349: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654917122 [11-06-2022 00:12:02]27349: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 00:12:04]27349: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 00:12:04]27349: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-0012/20220611-001202-YqQIAu2AcP8YEDUm4hvkjAAAACE [11-06-2022 00:12:04]27349: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 00:12:04]27349: WAF :: fetched 2 new logs [11-06-2022 00:13:01]30024: WAF :: fetched 4 new logs [11-06-2022 00:14:02]32736: WAF :: fetched 1 new logs [11-06-2022 00:15:01]3048: WAF :: fetched 4 new logs [11-06-2022 00:16:02]5976: WAF :: fetched 3 new logs [11-06-2022 00:22:01]22808: WAF :: fetched 1 new logs [11-06-2022 00:23:01]25536: WAF :: fetched 3 new logs [11-06-2022 00:27:02]4102: WAF :: fetched 2 new logs [11-06-2022 00:28:01]6827: WAF :: fetched 4 new logs [11-06-2022 00:29:02]9555: WAF :: fetched 3 new logs [11-06-2022 00:37:01]31602: WAF :: fetched 2 new logs [11-06-2022 00:38:02]1919: WAF :: fetched 1 new logs [11-06-2022 00:39:01]4676: WAF :: fetched 2 new logs [11-06-2022 00:41:01]10234: WAF :: fetched 1 new logs [11-06-2022 00:41:01]10234: Checking for user cron vulnerabilities [11-06-2022 00:43:02]15811: WAF :: fetched 2 new logs [11-06-2022 00:44:01]18545: Checking ditributed CMS bruteforce attacks [11-06-2022 00:44:01]18545: WAF :: fetched 1 new logs [11-06-2022 00:45:02]: Checking for software updates [11-06-2022 00:48:01]29422: WAF :: fetched 3 new logs [11-06-2022 00:53:01]10785: WAF :: fetched 1 new logs [11-06-2022 00:54:02]13478: WAF :: fetched 1 new logs [11-06-2022 00:58:01]24333: WAF :: fetched 1 new logs [11-06-2022 00:59:02]27065: WAF :: fetched 2 new logs [11-06-2022 01:05:01]13061: WAF :: fetched 2 new logs [11-06-2022 01:08:02]21820: WAF :: fetched 1 new logs [11-06-2022 01:11:02]30385: WAF :: fetched 2 new logs [11-06-2022 01:12:02]737: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654920722 [11-06-2022 01:12:02]737: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 01:12:04]737: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 01:12:04]737: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-0112/20220611-011202-YqQWEvznBtSE5HCl807IxQAAAAY [11-06-2022 01:12:04]737: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 01:12:04]737: WAF :: fetched 1 new logs [11-06-2022 01:13:02]3681: WAF :: fetched 1 new logs [11-06-2022 01:15:02]9461: WAF :: fetched 5 new logs [11-06-2022 01:16:01]12377: WAF :: fetched 1 new logs [11-06-2022 01:17:01]15445: WAF :: fetched 1 new logs [11-06-2022 01:26:02]9483: WAF :: fetched 1 new logs [11-06-2022 01:28:01]15655: WAF :: fetched 2 new logs [11-06-2022 01:41:02]21558: Checking for user cron vulnerabilities [11-06-2022 01:44:01]30008: Checking ditributed CMS bruteforce attacks [11-06-2022 01:44:02]30008: WAF :: fetched 1 new logs [11-06-2022 01:45:01]: Checking for definition updates [11-06-2022 01:47:01]6572: WAF :: fetched 5 new logs [11-06-2022 01:48:01]9298: WAF :: fetched 1 new logs [11-06-2022 01:53:02]23398: WAF :: fetched 1 new logs [11-06-2022 01:58:02]5014: WAF :: fetched 1 new logs [11-06-2022 01:59:01]7720: WAF :: fetched 2 new logs [11-06-2022 02:00:02]10121: WAF :: fetched 4 new logs [11-06-2022 02:05:01]24216: WAF :: fetched 1 new logs [11-06-2022 02:12:01]10972: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654924321 [11-06-2022 02:12:01]10972: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 02:12:03]10972: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 02:12:04]10972: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-0212/20220611-021201-YqQkIfQTtmLE0SplMtaDbgAAABA [11-06-2022 02:12:04]10972: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-06-2022 02:12:04]10972: WAF :: fetched 1 new logs [11-06-2022 02:14:02]16332: WAF :: fetched 16 new logs [11-06-2022 02:15:02]19019: WAF :: fetched 9 new logs [11-06-2022 02:17:01]24551: WAF :: fetched 1 new logs [11-06-2022 02:20:01]32672: WAF :: fetched 1 new logs [11-06-2022 02:21:01]3103: WAF :: fetched 8 new logs [11-06-2022 02:22:02]6011: WAF :: fetched 12 new logs [11-06-2022 02:24:01]11375: WAF :: fetched 2 new logs [11-06-2022 02:25:01]14082: WAF :: fetched 4 new logs [11-06-2022 02:26:02]16800: WAF :: fetched 6 new logs [11-06-2022 02:28:01]22218: WAF :: fetched 1 new logs [11-06-2022 02:30:01]27631: WAF :: fetched 7 new logs [11-06-2022 02:31:01]30364: WAF :: fetched 1 new logs [11-06-2022 02:32:02]730: WAF :: fetched 3 new logs [11-06-2022 02:33:01]3472: WAF :: fetched 3 new logs [11-06-2022 02:34:02]6281: WAF :: fetched 8 new logs [11-06-2022 02:37:01]14580: WAF :: fetched 1 new logs [11-06-2022 02:38:01]17247: WAF :: fetched 3 new logs [11-06-2022 02:41:01]26434: WAF :: fetched 1 new logs [11-06-2022 02:41:01]26434: Checking for user cron vulnerabilities [11-06-2022 02:42:02]29639: WAF :: fetched 3 new logs [11-06-2022 02:44:01]2743: Checking ditributed CMS bruteforce attacks [11-06-2022 02:44:01]2743: WAF :: fetched 2 new logs [11-06-2022 02:46:02]8494: WAF :: fetched 1 new logs [11-06-2022 02:50:01]19539: WAF :: fetched 1 new logs [11-06-2022 02:52:01]25258: WAF :: fetched 2 new logs [11-06-2022 02:53:02]28009: Updated license status via CDN [11-06-2022 02:54:01]30804: WAF :: fetched 2 new logs [11-06-2022 02:55:01]1486: WAF :: fetched 3 new logs [11-06-2022 03:00:02]15384: Found and updated 32 CMS installations [11-06-2022 03:02:15]15384: Sending CMS version vulnerability report emails to cpanel users [11-06-2022 03:02:18]15384: Checking wordpress installations for suspicious directories [11-06-2022 03:04:01]28308: WAF :: fetched 1 new logs [11-06-2022 03:04:28]25392: Sending CMS version vulnerability report emails to cpanel users [11-06-2022 03:04:31]25392: Checking wordpress installations for suspicious directories [11-06-2022 03:07:02]4459: WAF :: fetched 4 new logs [11-06-2022 03:08:01]6950: WAF :: fetched 2 new logs [11-06-2022 03:12:02]18027: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654927922 [11-06-2022 03:12:02]18027: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 03:12:04]18027: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 03:12:04]18027: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-0312/20220611-031202-YqQyMo4Z0OSRoAN0AIBUnwAAAAg [11-06-2022 03:12:04]18027: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 03:12:04]18027: WAF :: fetched 87 new logs [11-06-2022 03:21:01]11077: WAF :: fetched 1 new logs [11-06-2022 03:28:02]21214: WAF :: fetched 1 new logs [11-06-2022 03:29:01]29688: WAF :: fetched 131 new logs [11-06-2022 03:30:02]6161: WAF :: fetched 546 new logs [11-06-2022 03:31:02]8934: WAF :: fetched 538 new logs [11-06-2022 03:32:01]11698: WAF :: fetched 118 new logs [11-06-2022 03:34:01]17227: WAF :: fetched 1 new logs [11-06-2022 03:35:02]19916: WAF :: fetched 1 new logs [11-06-2022 03:37:02]25363: WAF :: fetched 1 new logs [11-06-2022 03:41:01]4003: Checking for user cron vulnerabilities [11-06-2022 03:42:02]6758: WAF :: fetched 1 new logs [11-06-2022 03:44:01]12200: Checking ditributed CMS bruteforce attacks [11-06-2022 03:50:02]28629: WAF :: fetched 1 new logs [11-06-2022 03:53:01]4566: WAF :: fetched 1 new logs [11-06-2022 03:56:01]12790: WAF :: fetched 1 new logs [11-06-2022 03:57:02]15524: WAF :: fetched 1 new logs [11-06-2022 04:06:01]8270: WAF :: fetched 2 new logs [11-06-2022 04:12:02]24850: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654931522 [11-06-2022 04:12:02]24850: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 04:12:04]24850: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 04:12:04]24850: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-0412/20220611-041202-YqRAQmabUJEvM5dvb1fD8gAAAAg [11-06-2022 04:12:04]24850: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 04:12:04]24850: WAF :: fetched 1 new logs [11-06-2022 04:19:01]11702: WAF :: fetched 1 new logs [11-06-2022 04:25:01]28103: WAF :: fetched 14 new logs [11-06-2022 04:26:02]30860: WAF :: fetched 28 new logs [11-06-2022 04:27:01]1125: WAF :: fetched 43 new logs [11-06-2022 04:28:01]3963: WAF :: fetched 25 new logs [11-06-2022 04:33:02]17696: WAF :: fetched 1 new logs [11-06-2022 04:34:01]20389: WAF :: fetched 1 new logs [11-06-2022 04:35:02]23125: WAF :: fetched 1 new logs [11-06-2022 04:36:02]25831: WAF :: fetched 3 new logs [11-06-2022 04:40:02]4383: WAF :: fetched 2 new logs [11-06-2022 04:41:02]7157: WAF :: fetched 1 new logs [11-06-2022 04:41:02]7157: Checking for user cron vulnerabilities [11-06-2022 04:43:02]12703: WAF :: fetched 1 new logs [11-06-2022 04:44:01]15369: Checking ditributed CMS bruteforce attacks [11-06-2022 04:47:02]23498: WAF :: fetched 1 new logs [11-06-2022 04:48:01]26257: WAF :: fetched 28 new logs [11-06-2022 04:57:02]18407: WAF :: fetched 1 new logs [11-06-2022 05:00:01]26329: WAF :: fetched 1 new logs [11-06-2022 05:01:42]29577: Starting daily scan on files updated in last 24 hrs [11-06-2022 05:06:02]11085: WAF :: fetched 1 new logs [11-06-2022 05:10:02]21931: WAF :: fetched 1 new logs [11-06-2022 05:11:01]24404: WAF :: fetched 2 new logs [11-06-2022 05:12:01]27331: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654935121 [11-06-2022 05:12:01]27331: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 05:12:03]27331: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 05:12:04]27331: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-0512/20220611-051201-YqROUatt0r2-g16SQnlwdwAAAAc [11-06-2022 05:12:04]27331: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 05:12:04]27331: WAF :: fetched 3 new logs [11-06-2022 05:13:02]30167: WAF :: fetched 35 new logs [11-06-2022 05:14:01]371: WAF :: fetched 2 new logs [11-06-2022 05:23:01]25216: WAF :: fetched 8 new logs [11-06-2022 05:24:02]27938: WAF :: fetched 1 new logs [11-06-2022 05:41:01]9823: Checking for user cron vulnerabilities [11-06-2022 05:42:02]12538: WAF :: fetched 2 new logs [11-06-2022 05:44:01]17957: Checking ditributed CMS bruteforce attacks [11-06-2022 05:47:01]26126: WAF :: fetched 1 new logs [11-06-2022 05:49:02]31637: WAF :: fetched 1 new logs [11-06-2022 05:54:02]12967: WAF :: fetched 2 new logs [11-06-2022 05:55:01]15662: WAF :: fetched 3 new logs [11-06-2022 05:56:02]18455: WAF :: fetched 2 new logs [11-06-2022 05:58:01]23964: WAF :: fetched 1 new logs [11-06-2022 06:01:01]32404: WAF :: fetched 6 new logs [11-06-2022 06:04:02]8436: WAF :: fetched 1 new logs [11-06-2022 06:05:01]11194: WAF :: fetched 1 new logs [11-06-2022 06:09:02]22227: WAF :: fetched 3 new logs [11-06-2022 06:12:02]30308: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654938722 [11-06-2022 06:12:02]30308: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 06:12:04]30308: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 06:12:04]30308: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-0612/20220611-061202-YqRcYnaKCi9Jag2qYVXjmAAAAAs [11-06-2022 06:12:04]30308: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 06:12:04]30308: WAF :: fetched 1 new logs [11-06-2022 06:16:02]9046: WAF :: fetched 21 new logs [11-06-2022 06:17:01]11810: WAF :: fetched 8 new logs [11-06-2022 06:18:02]14804: WAF :: fetched 1 new logs [11-06-2022 06:25:02]1816: WAF :: fetched 1 new logs [11-06-2022 06:27:02]7679: WAF :: fetched 5 new logs [11-06-2022 06:28:01]10503: WAF :: fetched 14 new logs [11-06-2022 06:30:02]16027: WAF :: fetched 12 new logs [11-06-2022 06:31:01]18891: WAF :: fetched 7 new logs [11-06-2022 06:32:02]21756: WAF :: fetched 2 new logs [11-06-2022 06:33:01]24565: WAF :: fetched 4 new logs [11-06-2022 06:34:02]27299: WAF :: fetched 2 new logs [11-06-2022 06:36:01]311: WAF :: fetched 1 new logs [11-06-2022 06:37:02]3160: WAF :: fetched 2 new logs [11-06-2022 06:38:01]5997: WAF :: fetched 3 new logs [11-06-2022 06:39:02]8681: WAF :: fetched 2 new logs [11-06-2022 06:40:01]11363: WAF :: fetched 6 new logs [11-06-2022 06:41:01]14180: WAF :: fetched 3 new logs [11-06-2022 06:41:01]14180: Checking for user cron vulnerabilities [11-06-2022 06:44:01]22363: Checking ditributed CMS bruteforce attacks [11-06-2022 06:45:01]25102: WAF :: fetched 31 new logs [11-06-2022 06:46:02]27916: WAF :: fetched 6 new logs [11-06-2022 06:47:01]30651: WAF :: fetched 7 new logs [11-06-2022 06:48:02]1041: WAF :: fetched 1 new logs [11-06-2022 06:49:02]3761: WAF :: fetched 8 new logs [11-06-2022 06:50:01]6481: WAF :: fetched 2 new logs [11-06-2022 06:55:01]20147: WAF :: fetched 1 new logs [11-06-2022 06:56:02]22949: WAF :: fetched 6 new logs [11-06-2022 06:58:01]28360: WAF :: fetched 4 new logs [11-06-2022 06:59:02]31033: WAF :: fetched 5 new logs [11-06-2022 07:01:01]4259: WAF :: fetched 5 new logs [11-06-2022 07:05:01]15064: WAF :: fetched 2 new logs [11-06-2022 07:06:02]17930: WAF :: fetched 2 new logs [11-06-2022 07:12:01]1778: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654942321 [11-06-2022 07:12:01]1778: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 07:12:03]1778: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 07:12:04]1778: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-0712/20220611-071201-YqRqcchCE_wUtvX6dX5KCwAAAAU [11-06-2022 07:12:04]1778: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 07:12:04]1778: WAF :: fetched 3 new logs [11-06-2022 07:13:02]4720: WAF :: fetched 1 new logs [11-06-2022 07:15:01]10123: WAF :: fetched 1 new logs [11-06-2022 07:16:01]12845: WAF :: fetched 3 new logs [11-06-2022 07:17:02]15615: WAF :: fetched 14 new logs [11-06-2022 07:18:02]18403: WAF :: fetched 6 new logs [11-06-2022 07:24:01]2719: WAF :: fetched 1 new logs [11-06-2022 07:25:02]5603: WAF :: fetched 1 new logs [11-06-2022 07:27:01]11154: WAF :: fetched 2 new logs [11-06-2022 07:32:02]25095: WAF :: fetched 1 new logs [11-06-2022 07:34:02]30836: WAF :: fetched 1 new logs [11-06-2022 07:36:01]4193: WAF :: fetched 2 new logs [11-06-2022 07:40:02]15759: WAF :: fetched 1 new logs [11-06-2022 07:41:01]18703: WAF :: fetched 1 new logs [11-06-2022 07:41:01]18703: Checking for user cron vulnerabilities [11-06-2022 07:44:01]27055: Checking ditributed CMS bruteforce attacks [11-06-2022 07:45:01]: Checking for definition updates [11-06-2022 07:47:01]2959: WAF :: fetched 1 new logs [11-06-2022 07:51:01]14377: WAF :: fetched 3 new logs [11-06-2022 07:53:01]19963: WAF :: fetched 3 new logs [11-06-2022 07:54:02]22792: WAF :: fetched 2 new logs [11-06-2022 07:58:01]1677: WAF :: fetched 1 new logs [11-06-2022 07:59:02]4495: WAF :: fetched 4 new logs [11-06-2022 08:07:02]26540: WAF :: fetched 6 new logs [11-06-2022 08:08:01]29256: WAF :: fetched 1 new logs [11-06-2022 08:11:01]5238: WAF :: fetched 1 new logs [11-06-2022 08:12:01]7980: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654945921 [11-06-2022 08:12:01]7980: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 08:12:03]7980: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 08:12:03]7980: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-0812/20220611-081201-YqR4gfULYh2k2OCI_W0R4QAAAAQ [11-06-2022 08:12:03]7980: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 08:14:01]13521: WAF :: fetched 2 new logs [11-06-2022 08:16:02]18935: WAF :: fetched 1 new logs [11-06-2022 08:18:01]24367: WAF :: fetched 1 new logs [11-06-2022 08:19:02]27178: WAF :: fetched 1 new logs [11-06-2022 08:22:02]3003: WAF :: fetched 6 new logs [11-06-2022 08:23:01]5796: WAF :: fetched 2 new logs [11-06-2022 08:27:02]16904: WAF :: fetched 1 new logs [11-06-2022 08:36:01]9459: WAF :: fetched 1 new logs [11-06-2022 08:37:01]12162: WAF :: fetched 1 new logs [11-06-2022 08:41:01]23052: Checking for user cron vulnerabilities [11-06-2022 08:44:02]31238: Checking ditributed CMS bruteforce attacks [11-06-2022 08:45:01]1559: WAF :: fetched 4 new logs [11-06-2022 08:46:02]4388: WAF :: fetched 3 new logs [11-06-2022 08:47:01]7055: WAF :: fetched 1 new logs [11-06-2022 08:48:01]9757: WAF :: fetched 1 new logs [11-06-2022 08:52:02]20660: WAF :: fetched 3 new logs [11-06-2022 08:53:01]23340: WAF :: fetched 2 new logs [11-06-2022 08:58:02]4642: WAF :: fetched 1 new logs [11-06-2022 09:01:02]13135: WAF :: fetched 4 new logs [11-06-2022 09:01:02]13133: httpd.conf changed. Refreshing watchlist. [11-06-2022 09:04:02]21527: WAF :: fetched 2 new logs [11-06-2022 09:06:01]26935: WAF :: fetched 2 new logs [11-06-2022 09:09:01]2694: WAF :: fetched 4 new logs [11-06-2022 09:12:01]10933: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654949521 [11-06-2022 09:12:01]10933: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 09:12:03]10933: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 09:12:04]10933: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-0912/20220611-091201-YqSGkb6lqlPQ2nruB7a9DwAAACs [11-06-2022 09:12:04]10933: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-06-2022 09:12:04]10933: WAF :: fetched 1 new logs [11-06-2022 09:14:01]16433: WAF :: fetched 3 new logs [11-06-2022 09:15:02]19154: WAF :: fetched 1 new logs [11-06-2022 09:17:01]24552: WAF :: fetched 1 new logs [11-06-2022 09:18:02]27266: WAF :: fetched 1 new logs [11-06-2022 09:19:01]30020: WAF :: fetched 1 new logs [11-06-2022 09:20:01]32756: WAF :: fetched 1 new logs [11-06-2022 09:22:01]5930: WAF :: fetched 7 new logs [11-06-2022 09:24:02]11504: WAF :: fetched 1 new logs [11-06-2022 09:25:01]14269: WAF :: fetched 2 new logs [11-06-2022 09:26:02]17075: WAF :: fetched 5 new logs [11-06-2022 09:27:02]19784: WAF :: fetched 2 new logs [11-06-2022 09:28:01]22449: WAF :: fetched 4 new logs [11-06-2022 09:29:02]25276: WAF :: fetched 2 new logs [11-06-2022 09:30:01]27978: WAF :: fetched 2 new logs [11-06-2022 09:31:02]30724: WAF :: fetched 5 new logs [11-06-2022 09:32:01]916: WAF :: fetched 5 new logs [11-06-2022 09:33:02]3775: WAF :: fetched 4 new logs [11-06-2022 09:34:02]6627: WAF :: fetched 1 new logs [11-06-2022 09:37:01]14859: WAF :: fetched 2 new logs [11-06-2022 09:40:02]23279: WAF :: fetched 3 new logs [11-06-2022 09:41:01]26041: WAF :: fetched 3 new logs [11-06-2022 09:41:01]26041: Checking for user cron vulnerabilities [11-06-2022 09:43:01]31420: WAF :: fetched 1 new logs [11-06-2022 09:44:01]1782: Checking ditributed CMS bruteforce attacks [11-06-2022 09:45:02]4607: WAF :: fetched 3 new logs [11-06-2022 09:46:01]7330: WAF :: fetched 42 new logs [11-06-2022 09:47:02]10095: WAF :: fetched 3 new logs [11-06-2022 09:48:01]12824: WAF :: fetched 19 new logs [11-06-2022 09:52:02]23825: WAF :: fetched 3 new logs [11-06-2022 09:53:01]26500: WAF :: fetched 22 new logs [11-06-2022 09:54:02]29311: WAF :: fetched 5 new logs [11-06-2022 09:57:01]5329: WAF :: fetched 4 new logs [11-06-2022 09:59:01]10824: WAF :: fetched 36 new logs [11-06-2022 10:00:02]13327: WAF :: fetched 79 new logs [11-06-2022 10:03:02]21989: WAF :: fetched 2 new logs [11-06-2022 10:06:01]30186: WAF :: fetched 18 new logs [11-06-2022 10:09:02]6129: WAF :: fetched 5 new logs [11-06-2022 10:10:02]8861: WAF :: fetched 3 new logs [11-06-2022 10:12:02]14395: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654953122 [11-06-2022 10:12:02]14395: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 10:12:04]14395: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 10:12:04]14395: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-1012/20220611-101202-YqSUop2scexpQlNXrpWaHQAAABA [11-06-2022 10:12:04]14395: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 10:12:04]14395: WAF :: fetched 244 new logs [11-06-2022 10:14:02]19912: WAF :: fetched 44 new logs [11-06-2022 10:15:02]22578: WAF :: fetched 60 new logs [11-06-2022 10:17:02]27993: WAF :: fetched 2 new logs [11-06-2022 10:19:02]1057: WAF :: fetched 35 new logs [11-06-2022 10:21:01]6623: WAF :: fetched 1 new logs [11-06-2022 10:22:01]9348: WAF :: fetched 1 new logs [11-06-2022 10:24:02]14849: WAF :: fetched 1 new logs [11-06-2022 10:28:01]25658: WAF :: fetched 1 new logs [11-06-2022 10:34:01]9822: WAF :: fetched 1 new logs [11-06-2022 10:35:02]12550: WAF :: fetched 2 new logs [11-06-2022 10:37:02]17958: WAF :: fetched 1 new logs [11-06-2022 10:38:01]20661: WAF :: fetched 2 new logs [11-06-2022 10:40:01]26143: WAF :: fetched 2 new logs [11-06-2022 10:41:01]28880: WAF :: fetched 1 new logs [11-06-2022 10:41:01]28880: Checking for user cron vulnerabilities [11-06-2022 10:44:02]4771: Checking ditributed CMS bruteforce attacks [11-06-2022 10:47:01]13056: WAF :: fetched 2 new logs [11-06-2022 10:48:01]15825: WAF :: fetched 4 new logs [11-06-2022 10:49:01]18612: WAF :: fetched 3 new logs [11-06-2022 10:50:02]21336: WAF :: fetched 1 new logs [11-06-2022 10:53:02]29553: WAF :: fetched 5 new logs [11-06-2022 10:54:01]32341: WAF :: fetched 6 new logs [11-06-2022 10:56:01]5153: WAF :: fetched 1 new logs [11-06-2022 10:58:01]10969: WAF :: fetched 1 new logs [11-06-2022 10:59:01]13768: WAF :: fetched 1 new logs [11-06-2022 11:02:01]22252: WAF :: fetched 2 new logs [11-06-2022 11:03:02]24962: WAF :: fetched 31 new logs [11-06-2022 11:04:02]27739: WAF :: fetched 55 new logs [11-06-2022 11:05:01]30442: WAF :: fetched 62 new logs [11-06-2022 11:06:02]828: WAF :: fetched 51 new logs [11-06-2022 11:07:01]3433: WAF :: fetched 50 new logs [11-06-2022 11:08:01]6377: WAF :: fetched 56 new logs [11-06-2022 11:08:02]3746: Performed RBL check for 23.111.136.34. [11-06-2022 11:09:02]9242: WAF :: fetched 56 new logs [11-06-2022 11:12:02]17563: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654956722 [11-06-2022 11:12:02]17563: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 11:12:04]17563: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 11:12:04]17563: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-1112/20220611-111202-YqSislNvpVwcwHOSd7zlBAAAACk [11-06-2022 11:12:04]17563: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 11:12:04]17563: WAF :: fetched 2 new logs [11-06-2022 11:13:02]20344: WAF :: fetched 2 new logs [11-06-2022 11:14:01]23209: WAF :: fetched 4 new logs [11-06-2022 11:18:02]1811: WAF :: fetched 1 new logs [11-06-2022 11:21:02]10209: WAF :: fetched 1 new logs [11-06-2022 11:22:01]12907: WAF :: fetched 2 new logs [11-06-2022 11:24:02]18578: WAF :: fetched 1 new logs [11-06-2022 11:25:01]21285: WAF :: fetched 4 new logs [11-06-2022 11:26:02]24026: WAF :: fetched 1 new logs [11-06-2022 11:27:02]26756: WAF :: fetched 1 new logs [11-06-2022 11:28:01]29524: WAF :: fetched 1 new logs [11-06-2022 11:29:02]32331: WAF :: fetched 1 new logs [11-06-2022 11:32:01]8241: WAF :: fetched 1 new logs [11-06-2022 11:33:02]10999: WAF :: fetched 3 new logs [11-06-2022 11:37:01]21949: WAF :: fetched 3 new logs [11-06-2022 11:38:02]24673: WAF :: fetched 6 new logs [11-06-2022 11:40:01]29996: WAF :: fetched 2 new logs [11-06-2022 11:41:02]474: WAF :: fetched 1 new logs [11-06-2022 11:41:02]474: Checking for user cron vulnerabilities [11-06-2022 11:44:02]8796: Checking ditributed CMS bruteforce attacks [11-06-2022 11:45:02]11524: WAF :: fetched 1 new logs [11-06-2022 11:47:02]17064: WAF :: fetched 1 new logs [11-06-2022 11:48:01]19709: WAF :: fetched 1 new logs [11-06-2022 11:49:02]22513: WAF :: fetched 1 new logs [11-06-2022 11:50:02]25189: WAF :: fetched 1 new logs [11-06-2022 11:52:01]30674: WAF :: fetched 1 new logs [11-06-2022 11:53:02]1017: WAF :: fetched 3 new logs [11-06-2022 11:54:01]3818: WAF :: fetched 2 new logs [11-06-2022 11:56:01]9304: WAF :: fetched 4 new logs [11-06-2022 12:02:01]26226: WAF :: fetched 1 new logs [11-06-2022 12:06:02]5328: WAF :: fetched 1 new logs [11-06-2022 12:08:01]10822: WAF :: fetched 1 new logs [11-06-2022 12:09:02]13644: WAF :: fetched 5 new logs [11-06-2022 12:10:02]16347: WAF :: fetched 1 new logs [11-06-2022 12:11:01]19122: WAF :: fetched 2 new logs [11-06-2022 12:12:02]21824: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654960322 [11-06-2022 12:12:02]21824: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 12:12:04]21824: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 12:12:04]21824: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-1212/20220611-121202-YqSwwm0qscBNWYGhr9a69wAAAAQ [11-06-2022 12:12:04]21824: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 12:12:04]21824: WAF :: fetched 9 new logs [11-06-2022 12:13:01]24220: WAF :: fetched 1 new logs [11-06-2022 12:15:01]30007: WAF :: fetched 1 new logs [11-06-2022 12:18:02]5941: WAF :: fetched 1 new logs [11-06-2022 12:19:01]8713: WAF :: fetched 2 new logs [11-06-2022 12:20:01]11474: WAF :: fetched 2 new logs [11-06-2022 12:21:02]14282: WAF :: fetched 3 new logs [11-06-2022 12:22:01]16983: WAF :: fetched 1 new logs [11-06-2022 12:23:01]19690: WAF :: fetched 2 new logs [11-06-2022 12:24:02]22463: WAF :: fetched 6 new logs [11-06-2022 12:25:01]25167: WAF :: fetched 3 new logs [11-06-2022 12:29:02]3790: WAF :: fetched 1 new logs [11-06-2022 12:30:01]6595: WAF :: fetched 3 new logs [11-06-2022 12:31:02]9364: WAF :: fetched 2 new logs [11-06-2022 12:32:01]12055: WAF :: fetched 2 new logs [11-06-2022 12:34:02]17619: WAF :: fetched 2 new logs [11-06-2022 12:36:02]23040: WAF :: fetched 2 new logs [11-06-2022 12:37:01]25705: WAF :: fetched 4 new logs [11-06-2022 12:39:02]31232: WAF :: fetched 6 new logs [11-06-2022 12:40:01]1473: WAF :: fetched 4 new logs [11-06-2022 12:41:02]4428: Checking for user cron vulnerabilities [11-06-2022 12:42:01]7154: WAF :: fetched 1 new logs [11-06-2022 12:44:01]12629: Checking ditributed CMS bruteforce attacks [11-06-2022 12:45:01]: Checking for software updates [11-06-2022 12:46:02]18136: WAF :: fetched 1 new logs [11-06-2022 12:48:02]23585: WAF :: fetched 1 new logs [11-06-2022 12:50:02]29159: WAF :: fetched 3 new logs [11-06-2022 12:51:02]31937: WAF :: fetched 3 new logs [11-06-2022 12:52:02]2286: WAF :: fetched 1 new logs [11-06-2022 12:53:01]5092: WAF :: fetched 2 new logs [11-06-2022 12:54:01]7951: WAF :: fetched 5 new logs [11-06-2022 12:55:02]10688: WAF :: fetched 5 new logs [11-06-2022 12:56:01]13415: WAF :: fetched 3 new logs [11-06-2022 12:57:02]16218: WAF :: fetched 5 new logs [11-06-2022 12:58:01]18924: WAF :: fetched 3 new logs [11-06-2022 12:59:01]21710: WAF :: fetched 3 new logs [11-06-2022 13:00:02]24150: WAF :: fetched 23 new logs [11-06-2022 13:01:01]27347: WAF :: fetched 10 new logs [11-06-2022 13:02:01]30103: WAF :: fetched 3 new logs [11-06-2022 13:06:02]8756: WAF :: fetched 1 new logs [11-06-2022 13:08:02]14153: WAF :: fetched 4 new logs [11-06-2022 13:10:01]19650: WAF :: fetched 1 new logs [11-06-2022 13:11:02]22408: WAF :: fetched 1 new logs [11-06-2022 13:12:01]25108: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654963921 [11-06-2022 13:12:01]25108: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 13:12:03]25108: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 13:12:03]25108: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-1312/20220611-131201-YqS-0dB65Bw3_o5VVAWW1wAAAA8 [11-06-2022 13:12:03]25108: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 13:12:04]25108: WAF :: fetched 2 new logs [11-06-2022 13:13:02]27824: WAF :: fetched 5 new logs [11-06-2022 13:20:02]14799: WAF :: fetched 1 new logs [11-06-2022 13:21:02]17558: WAF :: fetched 1 new logs [11-06-2022 13:26:01]31239: WAF :: fetched 156 new logs [11-06-2022 13:27:02]1584: WAF :: fetched 412 new logs [11-06-2022 13:28:02]4341: WAF :: fetched 352 new logs [11-06-2022 13:29:02]7074: WAF :: fetched 246 new logs [11-06-2022 13:30:02]9908: WAF :: fetched 182 new logs [11-06-2022 13:31:01]12663: WAF :: fetched 104 new logs [11-06-2022 13:32:02]15435: WAF :: fetched 1 new logs [11-06-2022 13:33:01]18154: WAF :: fetched 2 new logs [11-06-2022 13:34:02]20930: WAF :: fetched 1 new logs [11-06-2022 13:35:01]23713: WAF :: fetched 1 new logs [11-06-2022 13:36:01]26476: WAF :: fetched 1 new logs [11-06-2022 13:39:02]2176: WAF :: fetched 4 new logs [11-06-2022 13:41:02]7822: Checking for user cron vulnerabilities [11-06-2022 13:42:01]10513: WAF :: fetched 1 new logs [11-06-2022 13:43:01]13194: WAF :: fetched 1 new logs [11-06-2022 13:44:01]15938: Checking ditributed CMS bruteforce attacks [11-06-2022 13:45:01]: Checking for definition updates [11-06-2022 13:46:02]21463: WAF :: fetched 1 new logs [11-06-2022 13:47:01]24118: WAF :: fetched 2 new logs [11-06-2022 13:48:02]26879: WAF :: fetched 4 new logs [11-06-2022 13:49:02]29538: WAF :: fetched 1 new logs [11-06-2022 13:50:01]32335: WAF :: fetched 3 new logs [11-06-2022 13:51:02]2717: WAF :: fetched 1 new logs [11-06-2022 13:53:02]8204: WAF :: fetched 3 new logs [11-06-2022 14:00:02]27095: WAF :: fetched 2 new logs [11-06-2022 14:06:02]11728: WAF :: fetched 2 new logs [11-06-2022 14:07:01]14430: WAF :: fetched 1 new logs [11-06-2022 14:08:02]17151: WAF :: fetched 2 new logs [11-06-2022 14:11:01]25389: WAF :: fetched 1 new logs [11-06-2022 14:12:02]28201: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654967522 [11-06-2022 14:12:02]28201: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 14:12:04]28201: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 14:12:04]28201: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-1412/20220611-141202-YqTM4kEO2Q3nZTE5C9C17AAAADs [11-06-2022 14:12:04]28201: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 14:12:04]28201: WAF :: fetched 5 new logs [11-06-2022 14:14:02]1202: WAF :: fetched 3 new logs [11-06-2022 14:20:02]17963: WAF :: fetched 2 new logs [11-06-2022 14:25:02]32089: WAF :: fetched 1 new logs [11-06-2022 14:26:01]2482: WAF :: fetched 1 new logs [11-06-2022 14:29:01]10832: WAF :: fetched 2 new logs [11-06-2022 14:32:02]19407: WAF :: fetched 2 new logs [11-06-2022 14:33:02]22118: WAF :: fetched 60 new logs [11-06-2022 14:34:02]24837: WAF :: fetched 92 new logs [11-06-2022 14:35:02]27635: WAF :: fetched 74 new logs [11-06-2022 14:36:01]30396: WAF :: fetched 1 new logs [11-06-2022 14:38:01]3422: WAF :: fetched 1 new logs [11-06-2022 14:39:02]6240: WAF :: fetched 1 new logs [11-06-2022 14:40:02]9045: WAF :: fetched 1 new logs [11-06-2022 14:41:01]11882: WAF :: fetched 3 new logs [11-06-2022 14:41:01]11882: Checking for user cron vulnerabilities [11-06-2022 14:42:02]14631: WAF :: fetched 3 new logs [11-06-2022 14:43:01]17361: WAF :: fetched 3 new logs [11-06-2022 14:44:02]20115: Checking ditributed CMS bruteforce attacks [11-06-2022 14:44:02]20115: WAF :: fetched 1 new logs [11-06-2022 14:44:02]20114: httpd.conf changed. Refreshing watchlist. [11-06-2022 14:45:02]22984: httpd.conf changed. Refreshing watchlist. [11-06-2022 14:46:01]25785: WAF :: fetched 2 new logs [11-06-2022 14:47:02]28551: WAF :: fetched 1 new logs [11-06-2022 14:48:02]31289: WAF :: fetched 1 new logs [11-06-2022 14:49:02]1612: httpd.conf changed. Refreshing watchlist. [11-06-2022 14:50:01]4515: WAF :: fetched 3 new logs [11-06-2022 14:51:02]7326: WAF :: fetched 2 new logs [11-06-2022 14:53:02]12764: Updated license status via CDN [11-06-2022 14:55:01]18265: WAF :: fetched 7 new logs [11-06-2022 14:56:02]21050: WAF :: fetched 7 new logs [11-06-2022 14:57:02]23734: WAF :: fetched 3 new logs [11-06-2022 14:58:01]26436: WAF :: fetched 1 new logs [11-06-2022 14:59:02]29177: WAF :: fetched 2 new logs [11-06-2022 15:01:02]2526: Reseting cPGuard inotify settings [11-06-2022 15:07:02]19050: WAF :: fetched 5 new logs [11-06-2022 15:12:02]32703: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654971122 [11-06-2022 15:12:02]32703: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 15:12:04]32703: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 15:12:04]32703: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-1512/20220611-151202-YqTa8iyYz0pUXbYt8GaZjgAAAA0 [11-06-2022 15:12:04]32703: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-06-2022 15:12:04]32703: WAF :: fetched 1 new logs [11-06-2022 15:13:01]3006: WAF :: fetched 3 new logs [11-06-2022 15:14:01]5804: WAF :: fetched 1 new logs [11-06-2022 15:16:02]11377: WAF :: fetched 2 new logs [11-06-2022 15:17:01]14061: WAF :: fetched 1 new logs [11-06-2022 15:19:01]19470: WAF :: fetched 1 new logs [11-06-2022 15:23:02]30475: WAF :: fetched 58 new logs [11-06-2022 15:24:01]787: WAF :: fetched 98 new logs [11-06-2022 15:25:02]3614: WAF :: fetched 79 new logs [11-06-2022 15:26:02]6437: WAF :: fetched 2 new logs [11-06-2022 15:28:02]11873: WAF :: fetched 3 new logs [11-06-2022 15:29:01]14585: WAF :: fetched 8 new logs [11-06-2022 15:30:02]17431: WAF :: fetched 6 new logs [11-06-2022 15:31:02]20143: WAF :: fetched 3 new logs [11-06-2022 15:32:01]22855: WAF :: fetched 20 new logs [11-06-2022 15:33:02]25568: WAF :: fetched 5 new logs [11-06-2022 15:36:02]1459: WAF :: fetched 2 new logs [11-06-2022 15:40:01]12432: WAF :: fetched 2 new logs [11-06-2022 15:41:02]15238: WAF :: fetched 1 new logs [11-06-2022 15:41:02]15238: Checking for user cron vulnerabilities [11-06-2022 15:43:02]20609: WAF :: fetched 3 new logs [11-06-2022 15:44:01]23314: Checking ditributed CMS bruteforce attacks [11-06-2022 15:47:01]31561: WAF :: fetched 2 new logs [11-06-2022 15:50:02]7513: WAF :: fetched 1 new logs [11-06-2022 15:51:01]10216: WAF :: fetched 1 new logs [11-06-2022 15:52:02]12953: WAF :: fetched 2 new logs [11-06-2022 15:54:01]18356: WAF :: fetched 1 new logs [11-06-2022 15:56:01]23821: WAF :: fetched 1 new logs [11-06-2022 16:01:01]5397: WAF :: fetched 1 new logs [11-06-2022 16:04:02]13543: WAF :: fetched 2 new logs [11-06-2022 16:07:01]21746: WAF :: fetched 3 new logs [11-06-2022 16:08:02]24502: WAF :: fetched 2 new logs [11-06-2022 16:09:01]27163: WAF :: fetched 1 new logs [11-06-2022 16:10:02]30005: WAF :: fetched 1 new logs [11-06-2022 16:11:02]32753: WAF :: fetched 3 new logs [11-06-2022 16:12:01]3097: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654974721 [11-06-2022 16:12:01]3097: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 16:12:03]3097: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 16:12:03]3097: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-1612/20220611-161201-YqTpAVY6ebkwhGhGaL2QfgAAACo [11-06-2022 16:12:03]3097: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 16:12:04]3097: WAF :: fetched 294 new logs [11-06-2022 16:13:02]5889: WAF :: fetched 3 new logs [11-06-2022 16:17:01]16798: WAF :: fetched 1 new logs [11-06-2022 16:19:01]22161: WAF :: fetched 3 new logs [11-06-2022 16:20:01]24965: WAF :: fetched 1 new logs [11-06-2022 16:21:02]27816: WAF :: fetched 3 new logs [11-06-2022 16:26:01]9066: WAF :: fetched 1 new logs [11-06-2022 16:29:01]17168: WAF :: fetched 1 new logs [11-06-2022 16:30:02]19963: WAF :: fetched 1 new logs [11-06-2022 16:31:02]22806: WAF :: fetched 1 new logs [11-06-2022 16:33:02]28272: WAF :: fetched 1 new logs [11-06-2022 16:34:01]30987: WAF :: fetched 1 new logs [11-06-2022 16:35:02]1425: WAF :: fetched 5 new logs [11-06-2022 16:36:01]4272: WAF :: fetched 8 new logs [11-06-2022 16:39:02]12571: WAF :: fetched 1 new logs [11-06-2022 16:41:01]18135: Checking for user cron vulnerabilities [11-06-2022 16:42:02]20861: WAF :: fetched 1 new logs [11-06-2022 16:43:01]23546: WAF :: fetched 1 new logs [11-06-2022 16:44:02]26266: Checking ditributed CMS bruteforce attacks [11-06-2022 16:45:02]29063: WAF :: fetched 11 new logs [11-06-2022 16:46:01]31801: WAF :: fetched 3 new logs [11-06-2022 16:50:02]10359: WAF :: fetched 1 new logs [11-06-2022 16:51:01]13133: WAF :: fetched 1 new logs [11-06-2022 16:58:01]32125: WAF :: fetched 2 new logs [11-06-2022 17:00:01]5023: WAF :: fetched 1 new logs [11-06-2022 17:04:01]16314: WAF :: fetched 1 new logs [11-06-2022 17:05:01]19117: WAF :: fetched 1 new logs [11-06-2022 17:07:01]24513: WAF :: fetched 1 new logs [11-06-2022 17:09:01]29922: WAF :: fetched 4 new logs [11-06-2022 17:10:02]32737: WAF :: fetched 1 new logs [11-06-2022 17:11:01]3109: WAF :: fetched 3 new logs [11-06-2022 17:12:02]5877: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654978322 [11-06-2022 17:12:02]5877: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 17:12:04]5877: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 17:12:04]5877: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-1712/20220611-171202-YqT3Eqdq6Hwdf_XRn3023wAAAAw [11-06-2022 17:12:04]5877: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-06-2022 17:12:04]5877: WAF :: fetched 1 new logs [11-06-2022 17:13:01]8164: WAF :: fetched 1 new logs [11-06-2022 17:14:02]11272: WAF :: fetched 2 new logs [11-06-2022 17:15:02]14078: WAF :: fetched 1 new logs [11-06-2022 17:19:01]24882: WAF :: fetched 2 new logs [11-06-2022 17:20:02]27679: WAF :: fetched 7 new logs [11-06-2022 17:21:01]30435: WAF :: fetched 2 new logs [11-06-2022 17:22:02]716: WAF :: fetched 2 new logs [11-06-2022 17:23:01]3464: WAF :: fetched 1 new logs [11-06-2022 17:25:02]9014: WAF :: fetched 2 new logs [11-06-2022 17:27:02]14437: WAF :: fetched 1 new logs [11-06-2022 17:28:01]17080: WAF :: fetched 1 new logs [11-06-2022 17:30:02]22565: WAF :: fetched 2 new logs [11-06-2022 17:31:01]25280: WAF :: fetched 3 new logs [11-06-2022 17:33:01]30685: WAF :: fetched 1 new logs [11-06-2022 17:36:01]6612: WAF :: fetched 5 new logs [11-06-2022 17:37:01]9320: WAF :: fetched 2 new logs [11-06-2022 17:38:01]12030: WAF :: fetched 1 new logs [11-06-2022 17:40:01]17549: WAF :: fetched 3 new logs [11-06-2022 17:41:02]20335: WAF :: fetched 3 new logs [11-06-2022 17:41:02]20335: Checking for user cron vulnerabilities [11-06-2022 17:42:01]23017: WAF :: fetched 4 new logs [11-06-2022 17:43:01]25694: WAF :: fetched 5 new logs [11-06-2022 17:44:01]28413: Checking ditributed CMS bruteforce attacks [11-06-2022 17:44:02]28413: WAF :: fetched 9 new logs [11-06-2022 17:45:01]31157: WAF :: fetched 10 new logs [11-06-2022 17:47:01]4261: WAF :: fetched 3 new logs [11-06-2022 17:48:01]6987: WAF :: fetched 3 new logs [11-06-2022 17:53:01]20651: WAF :: fetched 1 new logs [11-06-2022 17:54:02]23378: WAF :: fetched 1 new logs [11-06-2022 17:55:01]26155: WAF :: fetched 1 new logs [11-06-2022 17:59:01]4572: WAF :: fetched 1 new logs [11-06-2022 18:00:01]7105: WAF :: fetched 2 new logs [11-06-2022 18:01:02]10363: WAF :: fetched 1 new logs [11-06-2022 18:03:01]15773: WAF :: fetched 2 new logs [11-06-2022 18:05:01]21234: WAF :: fetched 1 new logs [11-06-2022 18:06:02]24006: WAF :: fetched 2 new logs [11-06-2022 18:07:02]26693: WAF :: fetched 3 new logs [11-06-2022 18:08:01]29408: WAF :: fetched 11 new logs [11-06-2022 18:09:02]32147: WAF :: fetched 103 new logs [11-06-2022 18:10:02]2534: WAF :: fetched 210 new logs [11-06-2022 18:11:01]5395: WAF :: fetched 82 new logs [11-06-2022 18:12:02]8118: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654981922 [11-06-2022 18:12:02]8118: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 18:12:04]8118: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 18:12:04]8118: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-1812/20220611-181202-YqUFImINdko_in7x5s9jGgAAAB4 [11-06-2022 18:12:04]8118: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 18:12:04]8118: WAF :: fetched 372 new logs [11-06-2022 18:14:01]13434: WAF :: fetched 100 new logs [11-06-2022 18:16:01]18965: WAF :: fetched 30 new logs [11-06-2022 18:17:01]21643: WAF :: fetched 76 new logs [11-06-2022 18:19:01]27045: WAF :: fetched 69 new logs [11-06-2022 18:20:02]29813: WAF :: fetched 14 new logs [11-06-2022 18:21:01]32596: WAF :: fetched 1 new logs [11-06-2022 18:23:02]5688: WAF :: fetched 110 new logs [11-06-2022 18:24:01]8347: WAF :: fetched 1 new logs [11-06-2022 18:25:02]11042: WAF :: fetched 62 new logs [11-06-2022 18:26:01]13847: WAF :: fetched 39 new logs [11-06-2022 18:31:02]27549: WAF :: fetched 1 new logs [11-06-2022 18:32:01]30226: WAF :: fetched 2 new logs [11-06-2022 18:36:01]8893: WAF :: fetched 2 new logs [11-06-2022 18:38:01]14228: WAF :: fetched 1 new logs [11-06-2022 18:40:01]19595: WAF :: fetched 1 new logs [11-06-2022 18:41:01]22457: Checking for user cron vulnerabilities [11-06-2022 18:42:02]25162: WAF :: fetched 96 new logs [11-06-2022 18:44:02]30579: Checking ditributed CMS bruteforce attacks [11-06-2022 18:45:01]888: WAF :: fetched 1 new logs [11-06-2022 18:51:01]17538: WAF :: fetched 2 new logs [11-06-2022 18:57:02]1538: WAF :: fetched 1 new logs [11-06-2022 18:58:01]4313: WAF :: fetched 1 new logs [11-06-2022 18:59:02]7064: WAF :: fetched 3 new logs [11-06-2022 19:00:02]9525: WAF :: fetched 70 new logs [11-06-2022 19:01:01]12802: WAF :: fetched 61 new logs [11-06-2022 19:02:02]15594: WAF :: fetched 75 new logs [11-06-2022 19:04:01]21010: WAF :: fetched 106 new logs [11-06-2022 19:05:02]23740: WAF :: fetched 103 new logs [11-06-2022 19:06:02]26549: WAF :: fetched 92 new logs [11-06-2022 19:10:02]5073: WAF :: fetched 5 new logs [11-06-2022 19:11:01]7906: WAF :: fetched 79 new logs [11-06-2022 19:12:02]10617: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654985522 [11-06-2022 19:12:02]10617: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 19:12:04]10617: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 19:12:04]10617: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-1912/20220611-191202-YqUTMuJAltnbS4A7BlRhzQAAAA0 [11-06-2022 19:12:04]10617: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 19:12:04]10617: WAF :: fetched 16 new logs [11-06-2022 19:14:01]15990: WAF :: fetched 140 new logs [11-06-2022 19:15:02]18726: WAF :: fetched 44 new logs [11-06-2022 19:18:01]26942: WAF :: fetched 3 new logs [11-06-2022 19:20:02]32389: WAF :: fetched 1 new logs [11-06-2022 19:23:01]8335: WAF :: fetched 1 new logs [11-06-2022 19:24:01]11023: WAF :: fetched 1 new logs [11-06-2022 19:26:01]16530: WAF :: fetched 3 new logs [11-06-2022 19:30:01]27265: WAF :: fetched 1 new logs [11-06-2022 19:31:02]30137: WAF :: fetched 3 new logs [11-06-2022 19:32:01]359: WAF :: fetched 1 new logs [11-06-2022 19:35:02]8662: WAF :: fetched 1 new logs [11-06-2022 19:38:02]16869: WAF :: fetched 1 new logs [11-06-2022 19:39:01]19542: WAF :: fetched 6 new logs [11-06-2022 19:41:01]25167: Checking for user cron vulnerabilities [11-06-2022 19:42:02]27864: WAF :: fetched 4 new logs [11-06-2022 19:44:01]861: Checking ditributed CMS bruteforce attacks [11-06-2022 19:45:02]: Checking for definition updates [11-06-2022 19:48:02]11921: WAF :: fetched 3 new logs [11-06-2022 19:49:01]14626: WAF :: fetched 2 new logs [11-06-2022 19:50:02]17384: WAF :: fetched 9 new logs [11-06-2022 19:51:01]20081: WAF :: fetched 2 new logs [11-06-2022 19:53:01]25653: WAF :: fetched 1 new logs [11-06-2022 19:54:01]28374: WAF :: fetched 4 new logs [11-06-2022 19:55:02]31129: WAF :: fetched 1 new logs [11-06-2022 19:56:02]1503: WAF :: fetched 52 new logs [11-06-2022 19:57:01]4256: WAF :: fetched 98 new logs [11-06-2022 19:58:02]7016: WAF :: fetched 92 new logs [11-06-2022 19:59:02]9686: WAF :: fetched 2 new logs [11-06-2022 20:00:01]12085: WAF :: fetched 2 new logs [11-06-2022 20:01:01]15388: WAF :: fetched 58 new logs [11-06-2022 20:02:02]18136: WAF :: fetched 67 new logs [11-06-2022 20:03:01]20814: WAF :: fetched 55 new logs [11-06-2022 20:04:01]23482: WAF :: fetched 55 new logs [11-06-2022 20:05:02]26261: WAF :: fetched 60 new logs [11-06-2022 20:06:01]29067: WAF :: fetched 54 new logs [11-06-2022 20:07:01]31795: WAF :: fetched 36 new logs [11-06-2022 20:08:01]2144: WAF :: fetched 21 new logs [11-06-2022 20:09:02]4969: WAF :: fetched 6 new logs [11-06-2022 20:10:01]7673: WAF :: fetched 2 new logs [11-06-2022 20:11:02]10558: WAF :: fetched 2 new logs [11-06-2022 20:12:02]13254: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654989122 [11-06-2022 20:12:02]13254: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 20:12:04]13254: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 20:12:04]13254: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-2012/20220611-201202-YqUhQiCy12w91iXB2j3ggwAAADM [11-06-2022 20:12:04]13254: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 20:12:04]13254: WAF :: fetched 1 new logs [11-06-2022 20:14:02]18700: WAF :: fetched 4 new logs [11-06-2022 20:15:01]21365: WAF :: fetched 3 new logs [11-06-2022 20:16:01]24180: WAF :: fetched 2 new logs [11-06-2022 20:17:02]26914: WAF :: fetched 1 new logs [11-06-2022 20:18:01]29638: WAF :: fetched 1 new logs [11-06-2022 20:23:01]11062: WAF :: fetched 2 new logs [11-06-2022 20:24:01]13756: WAF :: fetched 2 new logs [11-06-2022 20:25:01]16469: WAF :: fetched 2 new logs [11-06-2022 20:26:02]19306: WAF :: fetched 5 new logs [11-06-2022 20:28:02]24673: WAF :: fetched 1 new logs [11-06-2022 20:32:01]3275: WAF :: fetched 1 new logs [11-06-2022 20:33:02]6078: WAF :: fetched 2 new logs [11-06-2022 20:34:01]8795: WAF :: fetched 1 new logs [11-06-2022 20:36:02]14368: WAF :: fetched 4 new logs [11-06-2022 20:37:01]17060: WAF :: fetched 3 new logs [11-06-2022 20:38:02]19785: WAF :: fetched 5 new logs [11-06-2022 20:39:02]22450: WAF :: fetched 2 new logs [11-06-2022 20:41:02]28108: WAF :: fetched 1 new logs [11-06-2022 20:41:02]28108: Checking for user cron vulnerabilities [11-06-2022 20:44:01]4023: Checking ditributed CMS bruteforce attacks [11-06-2022 20:46:02]9697: WAF :: fetched 2 new logs [11-06-2022 20:55:01]1872: WAF :: fetched 5 new logs [11-06-2022 20:56:02]4839: WAF :: fetched 5 new logs [11-06-2022 20:57:02]7557: WAF :: fetched 4 new logs [11-06-2022 20:58:01]10265: WAF :: fetched 2 new logs [11-06-2022 21:01:01]18753: WAF :: fetched 2 new logs [11-06-2022 21:02:02]21512: WAF :: fetched 1 new logs [11-06-2022 21:03:01]24203: WAF :: fetched 1 new logs [11-06-2022 21:05:01]29623: WAF :: fetched 2 new logs [11-06-2022 21:06:02]32536: WAF :: fetched 8 new logs [11-06-2022 21:07:01]2839: WAF :: fetched 1 new logs [11-06-2022 21:11:02]13865: WAF :: fetched 3 new logs [11-06-2022 21:12:01]16596: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654992721 [11-06-2022 21:12:01]16596: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 21:12:03]16596: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 21:12:03]16596: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-2112/20220611-211201-YqUvUeHb68IuQ6mtAGwnBgAAAAY [11-06-2022 21:12:03]16596: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 21:12:04]16596: WAF :: fetched 4 new logs [11-06-2022 21:13:02]19358: WAF :: fetched 5 new logs [11-06-2022 21:14:01]22046: WAF :: fetched 3 new logs [11-06-2022 21:15:02]24777: WAF :: fetched 4 new logs [11-06-2022 21:16:02]27577: WAF :: fetched 2 new logs [11-06-2022 21:17:01]30283: WAF :: fetched 2 new logs [11-06-2022 21:18:02]609: WAF :: fetched 2 new logs [11-06-2022 21:19:01]3350: WAF :: fetched 3 new logs [11-06-2022 21:20:02]6183: WAF :: fetched 3 new logs [11-06-2022 21:21:02]9097: WAF :: fetched 3 new logs [11-06-2022 21:23:01]14519: WAF :: fetched 1 new logs [11-06-2022 21:30:01]1123: WAF :: fetched 1 new logs [11-06-2022 21:31:01]4016: WAF :: fetched 1 new logs [11-06-2022 21:32:02]6795: WAF :: fetched 1 new logs [11-06-2022 21:33:01]9463: WAF :: fetched 2 new logs [11-06-2022 21:34:02]12173: WAF :: fetched 2 new logs [11-06-2022 21:38:01]22914: WAF :: fetched 1 new logs [11-06-2022 21:40:02]28512: WAF :: fetched 4 new logs [11-06-2022 21:41:01]31341: Checking for user cron vulnerabilities [11-06-2022 21:44:01]7127: Checking ditributed CMS bruteforce attacks [11-06-2022 21:44:01]7127: WAF :: fetched 1 new logs [11-06-2022 21:48:02]18181: WAF :: fetched 1 new logs [11-06-2022 21:50:02]23610: WAF :: fetched 1 new logs [11-06-2022 21:53:02]31822: WAF :: fetched 3 new logs [11-06-2022 21:55:01]4922: WAF :: fetched 10 new logs [11-06-2022 21:56:02]7778: WAF :: fetched 14 new logs [11-06-2022 21:57:01]10463: WAF :: fetched 9 new logs [11-06-2022 21:58:01]13146: WAF :: fetched 5 new logs [11-06-2022 22:00:02]18330: WAF :: fetched 2 new logs [11-06-2022 22:01:02]21629: WAF :: fetched 2 new logs [11-06-2022 22:06:01]3071: WAF :: fetched 2 new logs [11-06-2022 22:07:07]5865: Performing Domain reputation checks [11-06-2022 22:11:01]16969: WAF :: fetched 1 new logs [11-06-2022 22:12:02]19666: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654996322 [11-06-2022 22:12:02]19666: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 22:12:04]19666: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 22:12:04]19666: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-2212/20220611-221202-YqU9Yhwj7nFsFDx_BurwowAAAAc [11-06-2022 22:12:04]19666: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-06-2022 22:12:04]19666: WAF :: fetched 1 new logs [11-06-2022 22:13:01]22259: WAF :: fetched 1 new logs [11-06-2022 22:17:02]918: WAF :: fetched 2 new logs [11-06-2022 22:18:02]3617: WAF :: fetched 2 new logs [11-06-2022 22:20:02]9127: WAF :: fetched 3 new logs [11-06-2022 22:23:02]17369: WAF :: fetched 2 new logs [11-06-2022 22:25:02]22757: WAF :: fetched 1 new logs [11-06-2022 22:29:01]1295: WAF :: fetched 5 new logs [11-06-2022 22:30:01]4077: WAF :: fetched 2 new logs [11-06-2022 22:31:02]6995: WAF :: fetched 2 new logs [11-06-2022 22:34:01]15109: WAF :: fetched 1 new logs [11-06-2022 22:35:02]17901: WAF :: fetched 4 new logs [11-06-2022 22:37:01]23383: WAF :: fetched 1 new logs [11-06-2022 22:40:02]31607: WAF :: fetched 1 new logs [11-06-2022 22:41:01]2092: Checking for user cron vulnerabilities [11-06-2022 22:44:01]10368: Checking ditributed CMS bruteforce attacks [11-06-2022 22:44:01]10368: WAF :: fetched 1 new logs [11-06-2022 22:45:02]13086: WAF :: fetched 1 new logs [11-06-2022 22:46:01]15923: WAF :: fetched 3 new logs [11-06-2022 22:49:02]24051: WAF :: fetched 2 new logs [11-06-2022 22:54:01]5534: WAF :: fetched 1 new logs [11-06-2022 22:58:02]16507: WAF :: fetched 3 new logs [11-06-2022 22:59:01]19229: WAF :: fetched 2 new logs [11-06-2022 23:01:01]24952: WAF :: fetched 1 new logs [11-06-2022 23:02:01]27702: WAF :: fetched 2 new logs [11-06-2022 23:03:02]30472: WAF :: fetched 4 new logs [11-06-2022 23:05:02]3561: WAF :: fetched 3 new logs [11-06-2022 23:06:01]6452: WAF :: fetched 3 new logs [11-06-2022 23:07:01]9193: WAF :: fetched 2 new logs [11-06-2022 23:08:02]11926: WAF :: fetched 3 new logs [11-06-2022 23:08:02]9354: Performed RBL check for 23.111.136.34. [11-06-2022 23:10:02]17350: WAF :: fetched 1 new logs [11-06-2022 23:12:01]22870: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1654999921 [11-06-2022 23:12:01]22870: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-06-2022 23:12:03]22870: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-06-2022 23:12:03]22870: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220611/20220611-2312/20220611-231201-YqVLcUMF--twhuZqoIGWvwAAAAM [11-06-2022 23:12:03]22870: WAF :: No suitable log file found. Using SQLite.. [11-06-2022 23:12:04]22870: WAF :: fetched 34 new logs [11-06-2022 23:13:01]25561: WAF :: fetched 1 new logs [11-06-2022 23:14:02]28279: WAF :: fetched 2 new logs [11-06-2022 23:18:01]6942: WAF :: fetched 3 new logs [11-06-2022 23:19:02]9653: WAF :: fetched 1 new logs [11-06-2022 23:20:02]12356: WAF :: fetched 1 new logs [11-06-2022 23:21:01]15108: WAF :: fetched 10 new logs [11-06-2022 23:24:01]23274: WAF :: fetched 5 new logs [11-06-2022 23:26:01]28708: WAF :: fetched 1 new logs [11-06-2022 23:28:01]1798: WAF :: fetched 4 new logs [11-06-2022 23:29:02]4633: WAF :: fetched 1 new logs [11-06-2022 23:35:01]21179: WAF :: fetched 1 new logs [11-06-2022 23:36:02]23954: WAF :: fetched 2 new logs [11-06-2022 23:37:01]26700: WAF :: fetched 1 new logs [11-06-2022 23:40:01]2492: WAF :: fetched 1 new logs [11-06-2022 23:41:02]5363: Checking for user cron vulnerabilities [11-06-2022 23:44:01]13477: Checking ditributed CMS bruteforce attacks [11-06-2022 23:44:01]13477: WAF :: fetched 2 new logs [11-06-2022 23:45:02]16192: WAF :: fetched 9 new logs [11-06-2022 23:46:01]18917: WAF :: fetched 5 new logs [11-06-2022 23:47:01]21640: WAF :: fetched 4 new logs [11-06-2022 23:48:02]24371: WAF :: fetched 2 new logs [11-06-2022 23:49:01]27029: WAF :: fetched 2 new logs [11-06-2022 23:50:02]29826: WAF :: fetched 1 new logs [11-06-2022 23:51:02]32544: WAF :: fetched 1 new logs [11-06-2022 23:54:01]8610: WAF :: fetched 2 new logs [11-06-2022 23:54:01]8599: httpd.conf changed. Refreshing watchlist. [11-06-2022 23:55:02]11376: WAF :: fetched 8 new logs [11-06-2022 23:56:02]14168: httpd.conf changed. Refreshing watchlist. [11-06-2022 23:57:01]16970: WAF :: fetched 2 new logs [12-06-2022 00:01:02]28292: httpd.conf changed. Refreshing watchlist. [12-06-2022 00:01:03]28286: Sending daily report for June 12, 2022 [12-06-2022 00:02:01]31306: httpd.conf changed. Refreshing watchlist. [12-06-2022 00:03:02]1722: WAF :: fetched 2 new logs [12-06-2022 00:05:01]7666: Deleted 0 entries older than 6 MONTH from scanner_logs [12-06-2022 00:05:01]7666: Deleted 0 files from Quarantine [12-06-2022 00:06:02]10440: WAF :: fetched 1 new logs [12-06-2022 00:10:01]21400: WAF :: fetched 3 new logs [12-06-2022 00:11:02]24263: WAF :: fetched 1 new logs [12-06-2022 00:12:01]27027: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655003521 [12-06-2022 00:12:01]27027: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 00:12:03]27027: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 00:12:04]27027: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-0012/20220612-001201-YqVZgcGsuUXoinvNtX3U9AAAAB0 [12-06-2022 00:12:04]27027: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 00:12:04]27027: WAF :: fetched 9 new logs [12-06-2022 00:15:01]2799: WAF :: fetched 1 new logs [12-06-2022 00:16:01]5630: WAF :: fetched 2 new logs [12-06-2022 00:17:01]8409: WAF :: fetched 3 new logs [12-06-2022 00:18:02]11117: WAF :: fetched 2 new logs [12-06-2022 00:19:01]13781: WAF :: fetched 2 new logs [12-06-2022 00:20:02]16551: WAF :: fetched 3 new logs [12-06-2022 00:21:01]19262: WAF :: fetched 1 new logs [12-06-2022 00:22:01]22020: WAF :: fetched 2 new logs [12-06-2022 00:24:01]27400: WAF :: fetched 3 new logs [12-06-2022 00:25:02]30164: WAF :: fetched 4 new logs [12-06-2022 00:26:02]404: WAF :: fetched 2 new logs [12-06-2022 00:27:01]3309: WAF :: fetched 4 new logs [12-06-2022 00:28:02]6070: WAF :: fetched 1 new logs [12-06-2022 00:29:01]8746: WAF :: fetched 2 new logs [12-06-2022 00:32:01]16996: WAF :: fetched 3 new logs [12-06-2022 00:33:02]19714: WAF :: fetched 1 new logs [12-06-2022 00:34:01]22400: WAF :: fetched 3 new logs [12-06-2022 00:35:02]25109: WAF :: fetched 3 new logs [12-06-2022 00:36:01]27837: WAF :: fetched 2 new logs [12-06-2022 00:37:01]30644: WAF :: fetched 1 new logs [12-06-2022 00:38:01]960: WAF :: fetched 3 new logs [12-06-2022 00:39:02]3723: WAF :: fetched 3 new logs [12-06-2022 00:41:02]9213: WAF :: fetched 29 new logs [12-06-2022 00:41:02]9213: Checking for user cron vulnerabilities [12-06-2022 00:42:01]11962: WAF :: fetched 4 new logs [12-06-2022 00:43:01]14665: WAF :: fetched 1 new logs [12-06-2022 00:44:01]17399: Checking ditributed CMS bruteforce attacks [12-06-2022 00:44:02]17399: WAF :: fetched 2 new logs [12-06-2022 00:45:01]: Checking for software updates [12-06-2022 00:45:01]20075: WAF :: fetched 2 new logs [12-06-2022 00:46:02]22797: WAF :: fetched 1 new logs [12-06-2022 00:49:02]30915: WAF :: fetched 2 new logs [12-06-2022 00:50:01]1228: WAF :: fetched 1 new logs [12-06-2022 00:51:02]4132: WAF :: fetched 2 new logs [12-06-2022 00:52:01]6923: WAF :: fetched 1 new logs [12-06-2022 00:57:02]20654: WAF :: fetched 3 new logs [12-06-2022 00:58:01]23327: WAF :: fetched 4 new logs [12-06-2022 00:59:02]26023: WAF :: fetched 8 new logs [12-06-2022 01:00:01]28486: WAF :: fetched 9 new logs [12-06-2022 01:01:01]32373: WAF :: fetched 5 new logs [12-06-2022 01:02:01]2909: WAF :: fetched 8 new logs [12-06-2022 01:03:02]5863: WAF :: fetched 9 new logs [12-06-2022 01:04:01]8735: WAF :: fetched 2 new logs [12-06-2022 01:07:01]17781: WAF :: fetched 1 new logs [12-06-2022 01:08:01]20722: WAF :: fetched 1 new logs [12-06-2022 01:11:01]29277: WAF :: fetched 2 new logs [12-06-2022 01:12:02]32062: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655007122 [12-06-2022 01:12:02]32062: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 01:12:04]32062: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 01:12:04]32062: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-0112/20220612-011202-YqVnkl4gOmuDFD0yD_51fwAAAAo [12-06-2022 01:12:04]32062: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 01:12:04]32062: WAF :: fetched 3 new logs [12-06-2022 01:13:01]2353: WAF :: fetched 1 new logs [12-06-2022 01:17:02]13339: WAF :: fetched 1 new logs [12-06-2022 01:18:01]16046: WAF :: fetched 5 new logs [12-06-2022 01:19:01]19073: WAF :: fetched 1 new logs [12-06-2022 01:22:02]27279: WAF :: fetched 1 new logs [12-06-2022 01:27:02]9102: WAF :: fetched 1 new logs [12-06-2022 01:34:02]28885: WAF :: fetched 2 new logs [12-06-2022 01:38:01]7901: WAF :: fetched 3 new logs [12-06-2022 01:41:01]16117: Checking for user cron vulnerabilities [12-06-2022 01:44:02]24691: Checking ditributed CMS bruteforce attacks [12-06-2022 01:45:01]: Checking for definition updates [12-06-2022 01:47:01]792: WAF :: fetched 2 new logs [12-06-2022 01:51:02]12163: WAF :: fetched 1 new logs [12-06-2022 01:53:01]18298: WAF :: fetched 2 new logs [12-06-2022 01:54:02]21138: WAF :: fetched 1 new logs [12-06-2022 01:56:02]26781: WAF :: fetched 1 new logs [12-06-2022 01:58:01]358: WAF :: fetched 1 new logs [12-06-2022 02:01:02]9217: WAF :: fetched 2 new logs [12-06-2022 02:02:01]12062: WAF :: fetched 9 new logs [12-06-2022 02:05:01]20241: WAF :: fetched 1 new logs [12-06-2022 02:10:01]1938: WAF :: fetched 2 new logs [12-06-2022 02:11:02]4780: WAF :: fetched 2 new logs [12-06-2022 02:12:01]7490: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655010721 [12-06-2022 02:12:01]7490: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 02:12:03]7490: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 02:12:04]7490: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-0212/20220612-021201-YqV1oZgDRbYotDlkycsCmAAAABg [12-06-2022 02:12:04]7490: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 02:12:04]7490: WAF :: fetched 4 new logs [12-06-2022 02:13:02]10670: WAF :: fetched 1 new logs [12-06-2022 02:14:01]13649: WAF :: fetched 2 new logs [12-06-2022 02:18:01]24699: WAF :: fetched 1 new logs [12-06-2022 02:19:01]27466: WAF :: fetched 2 new logs [12-06-2022 02:21:02]706: WAF :: fetched 387 new logs [12-06-2022 02:22:01]3883: WAF :: fetched 474 new logs [12-06-2022 02:23:02]6832: WAF :: fetched 166 new logs [12-06-2022 02:31:01]29256: WAF :: fetched 1 new logs [12-06-2022 02:33:01]2565: WAF :: fetched 7 new logs [12-06-2022 02:34:01]5565: WAF :: fetched 12 new logs [12-06-2022 02:35:02]8496: WAF :: fetched 6 new logs [12-06-2022 02:36:01]11170: WAF :: fetched 7 new logs [12-06-2022 02:37:01]14089: WAF :: fetched 5 new logs [12-06-2022 02:38:02]16789: WAF :: fetched 34 new logs [12-06-2022 02:41:02]25132: Checking for user cron vulnerabilities [12-06-2022 02:42:01]28188: WAF :: fetched 7 new logs [12-06-2022 02:43:01]30854: WAF :: fetched 4 new logs [12-06-2022 02:44:01]1137: Checking ditributed CMS bruteforce attacks [12-06-2022 02:44:02]1137: WAF :: fetched 1 new logs [12-06-2022 02:45:02]3940: WAF :: fetched 5 new logs [12-06-2022 02:46:01]6702: WAF :: fetched 1 new logs [12-06-2022 02:49:01]14849: WAF :: fetched 1 new logs [12-06-2022 02:51:02]20276: WAF :: fetched 1 new logs [12-06-2022 02:53:03]25784: Updated license status via CDN [12-06-2022 03:00:52]12572: Found and updated 32 CMS installations [12-06-2022 03:01:02]15751: WAF :: fetched 2 new logs [12-06-2022 03:01:05]12572: Wordpress installation #1 brgestor.com.br has errors [12-06-2022 03:01:26]12572: Wordpress installation #5 meusiteimobiliario.com.br has errors [12-06-2022 03:01:41]12572: Wordpress installation #9 oabilheus.org.br has errors [12-06-2022 03:02:37]12572: Wordpress installation #17 ajuda.meusiteimobiliario.com.br has errors [12-06-2022 03:03:02]21475: WAF :: fetched 1 new logs [12-06-2022 03:03:10]12572: Wordpress installation #23 blueseasurf.com.br has errors [12-06-2022 03:03:46]12572: Wordpress installation #26 bibokinha.idcartao.com has errors [12-06-2022 03:04:05]12572: Wordpress installation #28 pricilamartins.com has errors [12-06-2022 03:04:34]12572: Wordpress installation #34 fazendayrere.com.br has errors [12-06-2022 03:04:35]21518: Wordpress installation #34 fazendayrere.com.br has errors [12-06-2022 03:04:51]21518: Wordpress installation #36 suryaeventos.com.br has errors [12-06-2022 03:05:01]27401: WAF :: fetched 6 new logs [12-06-2022 03:05:08]12572: Wordpress installation #39 imoblux.com.br has errors [12-06-2022 03:05:08]21518: Wordpress installation #39 imoblux.com.br has errors [12-06-2022 03:05:25]21518: Sending CMS version vulnerability report emails to cpanel users [12-06-2022 03:05:25]12572: Sending CMS version vulnerability report emails to cpanel users [12-06-2022 03:05:28]12572: Checking wordpress installations for suspicious directories [12-06-2022 03:05:28]21518: Checking wordpress installations for suspicious directories [12-06-2022 03:06:02]30558: WAF :: fetched 1 new logs [12-06-2022 03:07:01]918: WAF :: fetched 3 new logs [12-06-2022 03:08:02]29816: WAF :: fetched 1 new logs [12-06-2022 03:09:01]11991: WAF :: fetched 10 new logs [12-06-2022 03:12:01]16433: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655014321 [12-06-2022 03:12:01]16433: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 03:12:03]16433: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 03:12:04]16433: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-0312/20220612-031201-YqWDsYjSgI9doIGDvwxo_QAAAAs [12-06-2022 03:12:04]16433: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-06-2022 03:12:04]16433: WAF :: fetched 1 new logs [12-06-2022 03:16:01]27309: WAF :: fetched 2 new logs [12-06-2022 03:17:01]30127: WAF :: fetched 2 new logs [12-06-2022 03:18:02]351: WAF :: fetched 1 new logs [12-06-2022 03:20:02]5915: WAF :: fetched 1 new logs [12-06-2022 03:24:02]16856: WAF :: fetched 1 new logs [12-06-2022 03:25:02]19528: WAF :: fetched 2 new logs [12-06-2022 03:31:01]3543: WAF :: fetched 1 new logs [12-06-2022 03:32:02]6439: WAF :: fetched 2 new logs [12-06-2022 03:34:01]11789: WAF :: fetched 2 new logs [12-06-2022 03:37:01]20021: WAF :: fetched 1 new logs [12-06-2022 03:38:02]22739: WAF :: fetched 1 new logs [12-06-2022 03:40:02]28155: WAF :: fetched 1 new logs [12-06-2022 03:41:01]30891: Checking for user cron vulnerabilities [12-06-2022 03:43:01]4030: WAF :: fetched 1 new logs [12-06-2022 03:44:02]6781: Checking ditributed CMS bruteforce attacks [12-06-2022 03:46:01]12407: WAF :: fetched 2 new logs [12-06-2022 03:47:01]15246: WAF :: fetched 1 new logs [12-06-2022 03:48:01]17900: WAF :: fetched 3 new logs [12-06-2022 03:50:01]23292: WAF :: fetched 1 new logs [12-06-2022 03:52:01]28812: WAF :: fetched 1 new logs [12-06-2022 03:57:01]10136: WAF :: fetched 2 new logs [12-06-2022 04:03:01]27901: WAF :: fetched 4 new logs [12-06-2022 04:05:01]1330: WAF :: fetched 6 new logs [12-06-2022 04:07:02]7165: WAF :: fetched 2 new logs [12-06-2022 04:08:01]9895: WAF :: fetched 2 new logs [12-06-2022 04:09:02]12588: WAF :: fetched 3 new logs [12-06-2022 04:12:01]20769: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655017921 [12-06-2022 04:12:01]20769: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 04:12:03]20769: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 04:12:04]20769: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-0412/20220612-041201-YqWRwWBT10O7ANkzCuUpkwAAAAA [12-06-2022 04:12:04]20769: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 04:12:05]20769: WAF :: fetched 34 new logs [12-06-2022 04:13:02]23536: WAF :: fetched 2 new logs [12-06-2022 04:14:02]26211: WAF :: fetched 3 new logs [12-06-2022 04:15:01]28931: WAF :: fetched 3 new logs [12-06-2022 04:17:01]1938: WAF :: fetched 2 new logs [12-06-2022 04:19:02]7715: WAF :: fetched 1 new logs [12-06-2022 04:24:02]21325: WAF :: fetched 2 new logs [12-06-2022 04:25:02]24003: WAF :: fetched 1 new logs [12-06-2022 04:26:01]26764: WAF :: fetched 1 new logs [12-06-2022 04:27:01]29525: WAF :: fetched 2 new logs [12-06-2022 04:28:02]32456: WAF :: fetched 2 new logs [12-06-2022 04:29:01]3073: WAF :: fetched 1 new logs [12-06-2022 04:30:02]5981: WAF :: fetched 6 new logs [12-06-2022 04:31:02]8715: WAF :: fetched 3 new logs [12-06-2022 04:32:01]11516: WAF :: fetched 3 new logs [12-06-2022 04:33:02]14521: WAF :: fetched 2 new logs [12-06-2022 04:34:01]17205: WAF :: fetched 1 new logs [12-06-2022 04:35:02]19963: WAF :: fetched 1 new logs [12-06-2022 04:37:02]25607: WAF :: fetched 2 new logs [12-06-2022 04:38:02]28772: WAF :: fetched 3 new logs [12-06-2022 04:39:01]31603: WAF :: fetched 3 new logs [12-06-2022 04:41:01]5009: Checking for user cron vulnerabilities [12-06-2022 04:43:02]10577: WAF :: fetched 1 new logs [12-06-2022 04:44:01]13403: Checking ditributed CMS bruteforce attacks [12-06-2022 04:48:02]24383: WAF :: fetched 2 new logs [12-06-2022 04:49:02]27597: WAF :: fetched 2 new logs [12-06-2022 04:51:01]808: WAF :: fetched 2 new logs [12-06-2022 04:53:02]6559: WAF :: fetched 1 new logs [12-06-2022 04:54:01]9302: WAF :: fetched 5 new logs [12-06-2022 04:59:02]23093: WAF :: fetched 2 new logs [12-06-2022 05:01:42]28829: Starting weekly scan on files updated within a week [12-06-2022 05:03:01]2438: WAF :: fetched 1 new logs [12-06-2022 05:10:01]22798: WAF :: fetched 4 new logs [12-06-2022 05:11:02]26061: WAF :: fetched 4 new logs [12-06-2022 05:12:01]28870: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655021521 [12-06-2022 05:12:01]28870: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 05:12:03]28870: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 05:12:05]28870: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-0512/20220612-051201-YqWf0ZJ2cWSZNEtWsubP_wAAAAo [12-06-2022 05:12:05]28870: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 05:12:05]28870: WAF :: fetched 2 new logs [12-06-2022 05:17:02]10715: WAF :: fetched 30 new logs [12-06-2022 05:21:01]21839: WAF :: fetched 3 new logs [12-06-2022 05:22:02]24552: WAF :: fetched 1 new logs [12-06-2022 05:24:01]30121: WAF :: fetched 1 new logs [12-06-2022 05:30:02]14161: WAF :: fetched 2 new logs [12-06-2022 05:31:01]16978: WAF :: fetched 1 new logs [12-06-2022 05:34:01]25179: WAF :: fetched 2 new logs [12-06-2022 05:35:02]27899: WAF :: fetched 2 new logs [12-06-2022 05:36:01]30649: WAF :: fetched 1 new logs [12-06-2022 05:38:01]3908: WAF :: fetched 1 new logs [12-06-2022 05:40:02]9341: WAF :: fetched 1 new logs [12-06-2022 05:41:01]12047: Checking for user cron vulnerabilities [12-06-2022 05:44:02]20254: Checking ditributed CMS bruteforce attacks [12-06-2022 05:45:01]22930: WAF :: fetched 1 new logs [12-06-2022 05:46:01]25658: WAF :: fetched 2 new logs [12-06-2022 05:47:02]28373: WAF :: fetched 1 new logs [12-06-2022 05:48:01]31129: WAF :: fetched 2 new logs [12-06-2022 05:49:02]1440: WAF :: fetched 2 new logs [12-06-2022 05:51:01]7032: WAF :: fetched 2 new logs [12-06-2022 05:52:02]9733: WAF :: fetched 1 new logs [12-06-2022 05:53:01]12495: WAF :: fetched 1 new logs [12-06-2022 05:58:02]26079: WAF :: fetched 1 new logs [12-06-2022 05:59:02]28748: WAF :: fetched 1 new logs [12-06-2022 06:01:02]2025: WAF :: fetched 6 new logs [12-06-2022 06:02:01]4822: WAF :: fetched 1 new logs [12-06-2022 06:04:02]10400: WAF :: fetched 2 new logs [12-06-2022 06:09:01]23910: WAF :: fetched 1 new logs [12-06-2022 06:10:01]26806: WAF :: fetched 1 new logs [12-06-2022 06:12:01]32235: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655025121 [12-06-2022 06:12:01]32235: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 06:12:03]32235: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 06:12:03]32235: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-0612/20220612-061201-YqWt4SNgqD5URHt8zi5gewAAAAA [12-06-2022 06:12:03]32235: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-06-2022 06:12:04]32235: WAF :: fetched 1 new logs [12-06-2022 06:14:01]5487: WAF :: fetched 1 new logs [12-06-2022 06:15:02]8196: WAF :: fetched 1 new logs [12-06-2022 06:16:01]10939: WAF :: fetched 2 new logs [12-06-2022 06:17:02]13615: WAF :: fetched 2 new logs [12-06-2022 06:19:01]19165: WAF :: fetched 1 new logs [12-06-2022 06:20:02]21887: WAF :: fetched 2 new logs [12-06-2022 06:28:02]11574: WAF :: fetched 1 new logs [12-06-2022 06:32:02]22501: WAF :: fetched 3 new logs [12-06-2022 06:35:02]30733: WAF :: fetched 4 new logs [12-06-2022 06:36:01]1086: WAF :: fetched 1 new logs [12-06-2022 06:37:02]3847: WAF :: fetched 2 new logs [12-06-2022 06:39:01]9303: WAF :: fetched 2 new logs [12-06-2022 06:41:01]14740: WAF :: fetched 1 new logs [12-06-2022 06:41:01]14740: Checking for user cron vulnerabilities [12-06-2022 06:42:02]17496: WAF :: fetched 2 new logs [12-06-2022 06:43:01]20231: WAF :: fetched 4 new logs [12-06-2022 06:44:01]22934: Checking ditributed CMS bruteforce attacks [12-06-2022 06:44:01]22934: WAF :: fetched 2 new logs [12-06-2022 06:45:01]25659: WAF :: fetched 2 new logs [12-06-2022 06:46:02]28377: WAF :: fetched 2 new logs [12-06-2022 06:48:01]1568: WAF :: fetched 3 new logs [12-06-2022 06:49:02]4469: WAF :: fetched 4 new logs [12-06-2022 06:50:01]7223: WAF :: fetched 2 new logs [12-06-2022 06:51:02]10087: WAF :: fetched 3 new logs [12-06-2022 06:52:02]12784: WAF :: fetched 2 new logs [12-06-2022 06:53:01]15584: WAF :: fetched 3 new logs [12-06-2022 06:54:02]18283: WAF :: fetched 5 new logs [12-06-2022 06:55:01]21103: WAF :: fetched 3 new logs [12-06-2022 06:56:01]23880: WAF :: fetched 3 new logs [12-06-2022 06:57:01]26596: WAF :: fetched 4 new logs [12-06-2022 07:00:02]2235: WAF :: fetched 2 new logs [12-06-2022 07:01:01]5545: WAF :: fetched 2 new logs [12-06-2022 07:06:01]19728: WAF :: fetched 1 new logs [12-06-2022 07:07:02]22600: WAF :: fetched 1 new logs [12-06-2022 07:08:01]25394: WAF :: fetched 1 new logs [12-06-2022 07:09:02]28186: WAF :: fetched 3 new logs [12-06-2022 07:12:02]4267: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655028722 [12-06-2022 07:12:02]4267: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 07:12:04]4267: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 07:12:04]4267: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-0712/20220612-071202-YqW78qsqs2zXCKSRD-nN0AAAAA0 [12-06-2022 07:12:04]4267: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 07:12:06]4267: WAF :: fetched 63 new logs [12-06-2022 07:15:01]12456: WAF :: fetched 1 new logs [12-06-2022 07:16:02]15181: WAF :: fetched 2 new logs [12-06-2022 07:17:01]17844: WAF :: fetched 1 new logs [12-06-2022 07:23:02]1752: WAF :: fetched 3 new logs [12-06-2022 07:24:01]4516: WAF :: fetched 2 new logs [12-06-2022 07:31:02]24390: WAF :: fetched 6 new logs [12-06-2022 07:37:01]8383: WAF :: fetched 1 new logs [12-06-2022 07:38:02]11150: WAF :: fetched 2 new logs [12-06-2022 07:41:01]19320: Checking for user cron vulnerabilities [12-06-2022 07:42:01]21991: WAF :: fetched 3 new logs [12-06-2022 07:44:01]27543: Checking ditributed CMS bruteforce attacks [12-06-2022 07:45:01]: Checking for definition updates [12-06-2022 07:45:01]30239: WAF :: fetched 2 new logs [12-06-2022 07:47:01]3321: WAF :: fetched 1 new logs [12-06-2022 07:48:01]6212: WAF :: fetched 1 new logs [12-06-2022 07:50:01]11643: WAF :: fetched 2 new logs [12-06-2022 07:55:01]25197: WAF :: fetched 3 new logs [12-06-2022 07:56:01]27906: WAF :: fetched 1 new logs [12-06-2022 07:57:02]30574: WAF :: fetched 1 new logs [12-06-2022 08:08:01]28454: WAF :: fetched 1 new logs [12-06-2022 08:10:01]1884: WAF :: fetched 1 new logs [12-06-2022 08:12:01]7511: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655032321 [12-06-2022 08:12:02]7511: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 08:12:04]7511: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 08:12:04]7511: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-0812/20220612-081202-YqXKARoU7kilRqTFHIUSGgAAAAM [12-06-2022 08:12:04]7511: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 08:12:04]7511: WAF :: fetched 2 new logs [12-06-2022 08:13:02]10460: WAF :: fetched 4 new logs [12-06-2022 08:14:01]13233: WAF :: fetched 2 new logs [12-06-2022 08:16:01]18727: WAF :: fetched 1 new logs [12-06-2022 08:17:02]21558: WAF :: fetched 2 new logs [12-06-2022 08:21:02]32678: WAF :: fetched 1 new logs [12-06-2022 08:23:01]5857: WAF :: fetched 2 new logs [12-06-2022 08:32:01]30963: WAF :: fetched 1 new logs [12-06-2022 08:38:02]15347: WAF :: fetched 2 new logs [12-06-2022 08:41:02]23493: WAF :: fetched 6 new logs [12-06-2022 08:41:02]23493: Checking for user cron vulnerabilities [12-06-2022 08:43:02]28972: WAF :: fetched 3 new logs [12-06-2022 08:44:01]31934: Checking ditributed CMS bruteforce attacks [12-06-2022 08:44:02]31934: WAF :: fetched 1 new logs [12-06-2022 08:46:01]5251: WAF :: fetched 1 new logs [12-06-2022 08:48:02]10891: WAF :: fetched 1 new logs [12-06-2022 08:49:01]13574: WAF :: fetched 6 new logs [12-06-2022 08:50:01]16419: WAF :: fetched 1 new logs [12-06-2022 08:51:02]19274: WAF :: fetched 1 new logs [12-06-2022 08:52:01]21947: WAF :: fetched 4 new logs [12-06-2022 09:01:02]14538: WAF :: fetched 1 new logs [12-06-2022 09:02:01]17283: WAF :: fetched 3 new logs [12-06-2022 09:03:01]20080: WAF :: fetched 2 new logs [12-06-2022 09:04:01]22789: WAF :: fetched 2 new logs [12-06-2022 09:07:02]30941: WAF :: fetched 6 new logs [12-06-2022 09:09:01]4174: WAF :: fetched 5 new logs [12-06-2022 09:10:02]6946: WAF :: fetched 1 new logs [12-06-2022 09:11:01]9661: WAF :: fetched 1 new logs [12-06-2022 09:12:01]12445: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655035921 [12-06-2022 09:12:01]12445: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 09:12:03]12445: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 09:12:04]12445: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-0912/20220612-091201-YqXYEd0TXu-RxNs77471pAAAAA8 [12-06-2022 09:12:04]12445: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 09:12:04]12445: WAF :: fetched 2 new logs [12-06-2022 09:13:02]15299: WAF :: fetched 1 new logs [12-06-2022 09:14:02]18037: WAF :: fetched 1 new logs [12-06-2022 09:15:01]20816: WAF :: fetched 1 new logs [12-06-2022 09:19:01]31853: WAF :: fetched 2 new logs [12-06-2022 09:20:02]2314: WAF :: fetched 1 new logs [12-06-2022 09:21:02]5111: WAF :: fetched 2 new logs [12-06-2022 09:22:01]7835: WAF :: fetched 3 new logs [12-06-2022 09:23:02]10543: WAF :: fetched 1 new logs [12-06-2022 09:24:01]13415: WAF :: fetched 2 new logs [12-06-2022 09:27:02]21979: WAF :: fetched 1 new logs [12-06-2022 09:28:01]24656: WAF :: fetched 1 new logs [12-06-2022 09:30:02]30264: WAF :: fetched 1 new logs [12-06-2022 09:38:02]20193: WAF :: fetched 3 new logs [12-06-2022 09:39:02]23268: WAF :: fetched 2 new logs [12-06-2022 09:41:01]28839: WAF :: fetched 1 new logs [12-06-2022 09:41:01]28839: Checking for user cron vulnerabilities [12-06-2022 09:42:02]31666: WAF :: fetched 1 new logs [12-06-2022 09:44:01]4930: Checking ditributed CMS bruteforce attacks [12-06-2022 09:46:01]10649: WAF :: fetched 1 new logs [12-06-2022 09:47:02]13396: WAF :: fetched 2 new logs [12-06-2022 09:49:02]18975: WAF :: fetched 5 new logs [12-06-2022 09:52:02]27245: WAF :: fetched 1 new logs [12-06-2022 09:53:01]29988: WAF :: fetched 9 new logs [12-06-2022 09:54:01]400: WAF :: fetched 4 new logs [12-06-2022 09:56:01]6053: WAF :: fetched 1 new logs [12-06-2022 09:59:01]14503: WAF :: fetched 2 new logs [12-06-2022 10:02:01]22977: WAF :: fetched 6 new logs [12-06-2022 10:03:02]25658: WAF :: fetched 16 new logs [12-06-2022 10:04:01]28561: WAF :: fetched 2 new logs [12-06-2022 10:05:02]31277: WAF :: fetched 4 new logs [12-06-2022 10:06:01]1639: WAF :: fetched 6 new logs [12-06-2022 10:07:01]4424: WAF :: fetched 1 new logs [12-06-2022 10:09:01]9955: WAF :: fetched 2 new logs [12-06-2022 10:10:02]12717: WAF :: fetched 1 new logs [12-06-2022 10:12:01]18123: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655039521 [12-06-2022 10:12:01]18123: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 10:12:03]18123: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 10:12:03]18123: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-1012/20220612-101201-YqXmIUUD7h1nF_XkxDU2lAAAAAw [12-06-2022 10:12:03]18123: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 10:12:04]18123: WAF :: fetched 2 new logs [12-06-2022 10:16:01]28955: WAF :: fetched 1 new logs [12-06-2022 10:17:01]31604: WAF :: fetched 2 new logs [12-06-2022 10:18:02]1875: WAF :: fetched 1 new logs [12-06-2022 10:21:02]10103: WAF :: fetched 3 new logs [12-06-2022 10:22:02]12807: WAF :: fetched 1 new logs [12-06-2022 10:24:02]18235: WAF :: fetched 1 new logs [12-06-2022 10:25:02]20856: WAF :: fetched 1 new logs [12-06-2022 10:27:02]26197: WAF :: fetched 3 new logs [12-06-2022 10:29:01]31547: WAF :: fetched 4 new logs [12-06-2022 10:32:02]7298: WAF :: fetched 1 new logs [12-06-2022 10:34:02]12726: WAF :: fetched 1 new logs [12-06-2022 10:39:02]26120: WAF :: fetched 1 new logs [12-06-2022 10:41:01]31500: Checking for user cron vulnerabilities [12-06-2022 10:44:01]7286: Checking ditributed CMS bruteforce attacks [12-06-2022 10:45:02]9956: WAF :: fetched 6 new logs [12-06-2022 10:46:01]12640: WAF :: fetched 3 new logs [12-06-2022 10:49:01]20751: WAF :: fetched 1 new logs [12-06-2022 10:50:02]23460: WAF :: fetched 1 new logs [12-06-2022 10:51:01]26199: WAF :: fetched 2 new logs [12-06-2022 10:54:01]1902: WAF :: fetched 3 new logs [12-06-2022 10:55:02]4686: WAF :: fetched 2 new logs [12-06-2022 10:57:01]10040: WAF :: fetched 3 new logs [12-06-2022 10:58:02]12725: WAF :: fetched 1 new logs [12-06-2022 10:59:01]15488: WAF :: fetched 1 new logs [12-06-2022 11:00:02]17907: WAF :: fetched 2 new logs [12-06-2022 11:02:01]23795: WAF :: fetched 3 new logs [12-06-2022 11:03:02]26489: WAF :: fetched 1 new logs [12-06-2022 11:07:53]5186: Performed RBL check for 23.111.136.34. [12-06-2022 11:09:02]10576: WAF :: fetched 1 new logs [12-06-2022 11:12:02]18703: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655043122 [12-06-2022 11:12:02]18703: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 11:12:04]18703: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 11:12:04]18703: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-1112/20220612-111202-YqX0MsX3X-QTv3QXnaB1pwAAACM [12-06-2022 11:12:04]18703: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-06-2022 11:12:04]18703: WAF :: fetched 1 new logs [12-06-2022 11:13:01]21420: WAF :: fetched 2 new logs [12-06-2022 11:14:01]24222: WAF :: fetched 1 new logs [12-06-2022 11:15:01]26984: WAF :: fetched 4 new logs [12-06-2022 11:16:02]29729: WAF :: fetched 2 new logs [12-06-2022 11:17:01]32355: WAF :: fetched 3 new logs [12-06-2022 11:18:02]2738: WAF :: fetched 3 new logs [12-06-2022 11:19:01]5603: WAF :: fetched 1 new logs [12-06-2022 11:20:01]8379: WAF :: fetched 3 new logs [12-06-2022 11:22:01]13740: WAF :: fetched 1 new logs [12-06-2022 11:24:02]19190: WAF :: fetched 1 new logs [12-06-2022 11:25:02]21865: WAF :: fetched 2 new logs [12-06-2022 11:26:01]24563: WAF :: fetched 1 new logs [12-06-2022 11:29:01]32566: WAF :: fetched 1 new logs [12-06-2022 11:32:01]8446: WAF :: fetched 1 new logs [12-06-2022 11:36:02]19309: WAF :: fetched 3 new logs [12-06-2022 11:38:02]24617: WAF :: fetched 2 new logs [12-06-2022 11:40:02]30033: WAF :: fetched 2 new logs [12-06-2022 11:41:02]32705: WAF :: fetched 2 new logs [12-06-2022 11:41:02]32705: Checking for user cron vulnerabilities [12-06-2022 11:42:02]3016: WAF :: fetched 2 new logs [12-06-2022 11:43:01]5721: WAF :: fetched 1 new logs [12-06-2022 11:44:01]8513: Checking ditributed CMS bruteforce attacks [12-06-2022 11:44:01]8513: WAF :: fetched 5 new logs [12-06-2022 11:45:02]11149: WAF :: fetched 4 new logs [12-06-2022 11:46:01]13893: WAF :: fetched 1 new logs [12-06-2022 11:47:02]16549: WAF :: fetched 1 new logs [12-06-2022 11:52:02]29978: WAF :: fetched 2 new logs [12-06-2022 11:53:02]32598: WAF :: fetched 3 new logs [12-06-2022 11:54:01]2986: WAF :: fetched 3 new logs [12-06-2022 11:55:02]5745: WAF :: fetched 1 new logs [12-06-2022 11:56:01]8403: WAF :: fetched 3 new logs [12-06-2022 11:58:02]13725: WAF :: fetched 1 new logs [12-06-2022 11:59:02]16489: WAF :: fetched 2 new logs [12-06-2022 12:01:01]22000: WAF :: fetched 2 new logs [12-06-2022 12:05:02]1248: WAF :: fetched 2 new logs [12-06-2022 12:06:01]3985: WAF :: fetched 2 new logs [12-06-2022 12:09:01]12071: WAF :: fetched 1 new logs [12-06-2022 12:10:02]14792: WAF :: fetched 2 new logs [12-06-2022 12:11:02]17516: WAF :: fetched 57 new logs [12-06-2022 12:12:02]20156: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655046722 [12-06-2022 12:12:02]20156: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 12:12:04]20156: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 12:12:04]20156: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-1212/20220612-121202-YqYCQgx4kefEVMb9nKvuTQAAACQ [12-06-2022 12:12:04]20156: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 12:12:04]20156: WAF :: fetched 156 new logs [12-06-2022 12:13:01]22851: WAF :: fetched 50 new logs [12-06-2022 12:14:02]25624: WAF :: fetched 55 new logs [12-06-2022 12:15:02]28270: WAF :: fetched 51 new logs [12-06-2022 12:16:01]30984: WAF :: fetched 51 new logs [12-06-2022 12:17:02]1262: WAF :: fetched 39 new logs [12-06-2022 12:18:01]3952: WAF :: fetched 22 new logs [12-06-2022 12:21:02]12110: WAF :: fetched 2 new logs [12-06-2022 12:23:01]17457: WAF :: fetched 4 new logs [12-06-2022 12:25:02]22832: WAF :: fetched 1 new logs [12-06-2022 12:26:01]25551: WAF :: fetched 1 new logs [12-06-2022 12:30:02]3894: WAF :: fetched 2 new logs [12-06-2022 12:33:02]11969: WAF :: fetched 2 new logs [12-06-2022 12:34:01]14734: WAF :: fetched 3 new logs [12-06-2022 12:35:02]17431: WAF :: fetched 2 new logs [12-06-2022 12:36:01]20119: WAF :: fetched 4 new logs [12-06-2022 12:37:01]22750: WAF :: fetched 2 new logs [12-06-2022 12:39:01]28156: WAF :: fetched 1 new logs [12-06-2022 12:41:02]1126: WAF :: fetched 38 new logs [12-06-2022 12:41:02]1126: Checking for user cron vulnerabilities [12-06-2022 12:44:01]9278: Checking ditributed CMS bruteforce attacks [12-06-2022 12:45:02]: Checking for software updates [12-06-2022 12:48:02]19955: WAF :: fetched 1 new logs [12-06-2022 12:50:02]25380: WAF :: fetched 2 new logs [12-06-2022 12:55:01]6445: WAF :: fetched 2 new logs [12-06-2022 12:56:02]9151: WAF :: fetched 1 new logs [12-06-2022 12:57:01]11775: WAF :: fetched 4 new logs [12-06-2022 12:58:01]14449: WAF :: fetched 4 new logs [12-06-2022 13:00:01]19589: WAF :: fetched 1 new logs [12-06-2022 13:01:02]22743: WAF :: fetched 2 new logs [12-06-2022 13:03:01]28097: WAF :: fetched 3 new logs [12-06-2022 13:05:01]1062: WAF :: fetched 1 new logs [12-06-2022 13:07:02]6558: WAF :: fetched 1 new logs [12-06-2022 13:09:02]11973: WAF :: fetched 1 new logs [12-06-2022 13:10:02]14628: WAF :: fetched 2 new logs [12-06-2022 13:12:02]20041: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655050322 [12-06-2022 13:12:02]20041: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 13:12:04]20041: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 13:12:04]20041: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-1312/20220612-131202-YqYQUtiM2IlwVNvnCl9e6QAAAAo [12-06-2022 13:12:04]20041: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 13:12:04]20041: WAF :: fetched 1 new logs [12-06-2022 13:13:01]22677: WAF :: fetched 3 new logs [12-06-2022 13:14:02]25475: WAF :: fetched 5 new logs [12-06-2022 13:15:01]28156: WAF :: fetched 1 new logs [12-06-2022 13:16:02]30838: WAF :: fetched 4 new logs [12-06-2022 13:17:01]1045: WAF :: fetched 3 new logs [12-06-2022 13:18:01]3779: WAF :: fetched 3 new logs [12-06-2022 13:19:01]6550: WAF :: fetched 1 new logs [12-06-2022 13:20:02]9252: WAF :: fetched 3 new logs [12-06-2022 13:21:01]11948: WAF :: fetched 5 new logs [12-06-2022 13:22:02]14639: WAF :: fetched 1 new logs [12-06-2022 13:23:02]17311: WAF :: fetched 1 new logs [12-06-2022 13:24:01]20041: WAF :: fetched 2 new logs [12-06-2022 13:25:01]22698: WAF :: fetched 3 new logs [12-06-2022 13:26:02]25401: WAF :: fetched 1 new logs [12-06-2022 13:27:02]28056: WAF :: fetched 1 new logs [12-06-2022 13:29:02]1078: WAF :: fetched 1 new logs [12-06-2022 13:30:01]3824: WAF :: fetched 1 new logs [12-06-2022 13:31:01]6538: WAF :: fetched 2 new logs [12-06-2022 13:34:02]14621: WAF :: fetched 2 new logs [12-06-2022 13:35:02]17246: WAF :: fetched 4 new logs [12-06-2022 13:36:01]19965: WAF :: fetched 2 new logs [12-06-2022 13:40:01]30638: WAF :: fetched 4 new logs [12-06-2022 13:41:01]945: WAF :: fetched 4 new logs [12-06-2022 13:41:01]945: Checking for user cron vulnerabilities [12-06-2022 13:43:01]6347: WAF :: fetched 6 new logs [12-06-2022 13:44:02]9083: Checking ditributed CMS bruteforce attacks [12-06-2022 13:44:02]9083: WAF :: fetched 2 new logs [12-06-2022 13:45:01]: Checking for definition updates [12-06-2022 13:45:01]11715: WAF :: fetched 1 new logs [12-06-2022 13:51:01]27878: WAF :: fetched 1 new logs [12-06-2022 13:56:01]8931: WAF :: fetched 1 new logs [12-06-2022 13:58:02]14272: WAF :: fetched 1 new logs [12-06-2022 14:00:01]19409: WAF :: fetched 1 new logs [12-06-2022 14:02:01]25225: WAF :: fetched 2 new logs [12-06-2022 14:04:02]30593: WAF :: fetched 1 new logs [12-06-2022 14:06:02]3708: WAF :: fetched 2 new logs [12-06-2022 14:07:01]6373: WAF :: fetched 2 new logs [12-06-2022 14:08:01]9060: WAF :: fetched 1 new logs [12-06-2022 14:12:02]19844: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655053922 [12-06-2022 14:12:02]19844: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 14:12:04]19844: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 14:12:04]19844: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-1412/20220612-141202-YqYeYh1gUM0lVr_zGGhruQAAABU [12-06-2022 14:12:04]19844: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-06-2022 14:12:04]19844: WAF :: fetched 1 new logs [12-06-2022 14:13:01]22509: WAF :: fetched 1 new logs [12-06-2022 14:17:01]867: WAF :: fetched 2 new logs [12-06-2022 14:19:01]6294: WAF :: fetched 2 new logs [12-06-2022 14:22:01]14435: WAF :: fetched 2 new logs [12-06-2022 14:24:01]19696: WAF :: fetched 2 new logs [12-06-2022 14:29:01]618: WAF :: fetched 2 new logs [12-06-2022 14:32:01]8867: WAF :: fetched 2 new logs [12-06-2022 14:33:02]11530: WAF :: fetched 1 new logs [12-06-2022 14:35:02]16917: WAF :: fetched 1 new logs [12-06-2022 14:38:01]24922: WAF :: fetched 1 new logs [12-06-2022 14:41:01]571: WAF :: fetched 1 new logs [12-06-2022 14:41:01]571: Checking for user cron vulnerabilities [12-06-2022 14:42:02]3294: WAF :: fetched 5 new logs [12-06-2022 14:44:01]8652: Checking ditributed CMS bruteforce attacks [12-06-2022 14:50:02]24743: WAF :: fetched 2 new logs [12-06-2022 14:51:01]27473: WAF :: fetched 2 new logs [12-06-2022 14:52:01]30121: WAF :: fetched 20 new logs [12-06-2022 14:53:01]32750: WAF :: fetched 20 new logs [12-06-2022 14:53:02]32742: Updated license status via CDN [12-06-2022 14:59:02]16491: WAF :: fetched 2 new logs [12-06-2022 15:01:01]22065: Reseting cPGuard inotify settings [12-06-2022 15:03:01]27390: WAF :: fetched 1 new logs [12-06-2022 15:07:02]5890: WAF :: fetched 1 new logs [12-06-2022 15:12:02]19376: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655057522 [12-06-2022 15:12:02]19376: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 15:12:04]19376: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 15:12:04]19376: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-1512/20220612-151202-YqYschsq4FvgW-Rrfyfs6QAAABA [12-06-2022 15:12:04]19376: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 15:12:04]19376: WAF :: fetched 56 new logs [12-06-2022 15:18:01]3065: WAF :: fetched 1 new logs [12-06-2022 15:20:02]8557: WAF :: fetched 3 new logs [12-06-2022 15:22:02]13940: WAF :: fetched 2 new logs [12-06-2022 15:25:02]22014: WAF :: fetched 2 new logs [12-06-2022 15:26:01]24713: WAF :: fetched 1 new logs [12-06-2022 15:27:02]27384: WAF :: fetched 2 new logs [12-06-2022 15:28:01]30013: WAF :: fetched 1 new logs [12-06-2022 15:29:01]32667: WAF :: fetched 2 new logs [12-06-2022 15:30:01]3057: WAF :: fetched 2 new logs [12-06-2022 15:34:01]13880: WAF :: fetched 2 new logs [12-06-2022 15:41:02]32734: WAF :: fetched 1 new logs [12-06-2022 15:41:02]32734: Checking for user cron vulnerabilities [12-06-2022 15:42:01]3023: WAF :: fetched 2 new logs [12-06-2022 15:44:01]8385: Checking ditributed CMS bruteforce attacks [12-06-2022 15:44:01]8385: WAF :: fetched 1 new logs [12-06-2022 15:45:02]11149: WAF :: fetched 4 new logs [12-06-2022 15:47:01]16509: WAF :: fetched 2 new logs [12-06-2022 15:48:02]19164: WAF :: fetched 2 new logs [12-06-2022 15:49:01]21800: WAF :: fetched 2 new logs [12-06-2022 15:50:02]24588: WAF :: fetched 2 new logs [12-06-2022 15:52:01]29912: WAF :: fetched 1 new logs [12-06-2022 15:54:01]2828: WAF :: fetched 2 new logs [12-06-2022 15:58:01]13637: WAF :: fetched 29 new logs [12-06-2022 15:59:02]16291: WAF :: fetched 3 new logs [12-06-2022 16:00:01]18763: WAF :: fetched 1 new logs [12-06-2022 16:01:02]21919: WAF :: fetched 1 new logs [12-06-2022 16:03:02]27264: WAF :: fetched 1 new logs [12-06-2022 16:06:01]2932: WAF :: fetched 4 new logs [12-06-2022 16:09:01]11002: WAF :: fetched 30 new logs [12-06-2022 16:10:02]13760: WAF :: fetched 4 new logs [12-06-2022 16:11:01]16476: WAF :: fetched 2 new logs [12-06-2022 16:12:01]19109: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655061121 [12-06-2022 16:12:01]19109: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 16:12:03]19109: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 16:12:03]19109: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-1612/20220612-161201-YqY6gatmedg43XZPj__2FwAAABY [12-06-2022 16:12:03]19109: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-06-2022 16:12:03]19109: WAF :: fetched 1 new logs [12-06-2022 16:13:02]21794: WAF :: fetched 1 new logs [12-06-2022 16:14:01]24403: WAF :: fetched 2 new logs [12-06-2022 16:16:02]29831: WAF :: fetched 1 new logs [12-06-2022 16:20:02]8265: WAF :: fetched 1 new logs [12-06-2022 16:23:01]16278: WAF :: fetched 1 new logs [12-06-2022 16:24:02]18974: WAF :: fetched 1 new logs [12-06-2022 16:25:01]21685: WAF :: fetched 1 new logs [12-06-2022 16:28:01]29719: WAF :: fetched 2 new logs [12-06-2022 16:29:02]32370: WAF :: fetched 1 new logs [12-06-2022 16:34:01]13556: WAF :: fetched 2 new logs [12-06-2022 16:38:01]24271: WAF :: fetched 3 new logs [12-06-2022 16:39:02]26937: WAF :: fetched 2 new logs [12-06-2022 16:40:01]29673: WAF :: fetched 2 new logs [12-06-2022 16:41:01]32376: Checking for user cron vulnerabilities [12-06-2022 16:44:01]8009: Checking ditributed CMS bruteforce attacks [12-06-2022 16:45:02]10762: WAF :: fetched 4 new logs [12-06-2022 16:49:02]21454: WAF :: fetched 1 new logs [12-06-2022 16:57:02]10700: WAF :: fetched 1 new logs [12-06-2022 16:58:01]13354: WAF :: fetched 7 new logs [12-06-2022 16:59:01]16025: WAF :: fetched 7 new logs [12-06-2022 17:00:01]18492: WAF :: fetched 2 new logs [12-06-2022 17:02:01]24352: WAF :: fetched 1 new logs [12-06-2022 17:05:01]32406: WAF :: fetched 1 new logs [12-06-2022 17:06:02]2737: WAF :: fetched 2 new logs [12-06-2022 17:07:01]5438: WAF :: fetched 4 new logs [12-06-2022 17:08:01]8107: WAF :: fetched 1 new logs [12-06-2022 17:09:02]10834: WAF :: fetched 10 new logs [12-06-2022 17:10:01]13604: WAF :: fetched 1 new logs [12-06-2022 17:11:02]16346: WAF :: fetched 3 new logs [12-06-2022 17:12:02]18984: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655064722 [12-06-2022 17:12:02]18984: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 17:12:04]18984: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 17:12:04]18984: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-1712/20220612-171202-YqZIkr309tVN8U3d7sZ06gAAABM [12-06-2022 17:12:04]18984: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 17:12:04]18984: WAF :: fetched 45 new logs [12-06-2022 17:13:01]21705: WAF :: fetched 2 new logs [12-06-2022 17:17:01]32508: WAF :: fetched 5 new logs [12-06-2022 17:18:02]2967: WAF :: fetched 1 new logs [12-06-2022 17:21:01]11161: WAF :: fetched 5 new logs [12-06-2022 17:22:01]13831: WAF :: fetched 2 new logs [12-06-2022 17:25:02]21896: WAF :: fetched 1 new logs [12-06-2022 17:27:02]27196: WAF :: fetched 3 new logs [12-06-2022 17:30:01]2867: WAF :: fetched 3 new logs [12-06-2022 17:31:01]5685: WAF :: fetched 3 new logs [12-06-2022 17:33:01]10990: WAF :: fetched 6 new logs [12-06-2022 17:36:01]19144: WAF :: fetched 4 new logs [12-06-2022 17:37:02]21795: WAF :: fetched 1 new logs [12-06-2022 17:38:01]24416: WAF :: fetched 1 new logs [12-06-2022 17:39:01]27051: WAF :: fetched 2 new logs [12-06-2022 17:41:01]32522: Checking for user cron vulnerabilities [12-06-2022 17:43:02]5521: WAF :: fetched 5 new logs [12-06-2022 17:44:01]8160: Checking ditributed CMS bruteforce attacks [12-06-2022 17:44:01]8160: WAF :: fetched 3 new logs [12-06-2022 17:45:02]10937: WAF :: fetched 1 new logs [12-06-2022 17:46:01]13598: WAF :: fetched 1 new logs [12-06-2022 17:47:02]16292: WAF :: fetched 4 new logs [12-06-2022 17:48:01]18917: WAF :: fetched 1 new logs [12-06-2022 17:50:02]24278: WAF :: fetched 2 new logs [12-06-2022 17:52:01]29573: WAF :: fetched 1 new logs [12-06-2022 17:53:01]32218: WAF :: fetched 1 new logs [12-06-2022 17:55:01]5328: WAF :: fetched 1 new logs [12-06-2022 17:56:01]8024: WAF :: fetched 2 new logs [12-06-2022 17:58:01]13337: WAF :: fetched 1 new logs [12-06-2022 18:01:01]21656: WAF :: fetched 1 new logs [12-06-2022 18:03:01]27008: WAF :: fetched 3 new logs [12-06-2022 18:08:01]8247: WAF :: fetched 1 new logs [12-06-2022 18:09:02]10897: WAF :: fetched 1 new logs [12-06-2022 18:10:01]13672: WAF :: fetched 16 new logs [12-06-2022 18:11:02]16431: WAF :: fetched 4 new logs [12-06-2022 18:12:02]19062: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655068322 [12-06-2022 18:12:02]19062: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 18:12:04]19062: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 18:12:04]19062: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-1812/20220612-181202-YqZWouGSQWEz22P4WhDgfgAAAAU [12-06-2022 18:12:04]19062: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-06-2022 18:12:04]19062: WAF :: fetched 1 new logs [12-06-2022 18:13:01]21728: WAF :: fetched 2 new logs [12-06-2022 18:14:02]24378: WAF :: fetched 7 new logs [12-06-2022 18:18:02]2819: WAF :: fetched 1 new logs [12-06-2022 18:22:01]13676: WAF :: fetched 5 new logs [12-06-2022 18:23:02]16338: WAF :: fetched 31 new logs [12-06-2022 18:25:01]21675: WAF :: fetched 1 new logs [12-06-2022 18:27:01]27044: WAF :: fetched 1 new logs [12-06-2022 18:29:01]32303: WAF :: fetched 1 new logs [12-06-2022 18:30:01]2686: WAF :: fetched 3 new logs [12-06-2022 18:32:01]8180: WAF :: fetched 1 new logs [12-06-2022 18:37:01]21569: WAF :: fetched 1 new logs [12-06-2022 18:41:01]32264: Checking for user cron vulnerabilities [12-06-2022 18:42:01]2502: WAF :: fetched 1 new logs [12-06-2022 18:43:02]5278: WAF :: fetched 1 new logs [12-06-2022 18:44:01]7925: Checking ditributed CMS bruteforce attacks [12-06-2022 18:47:01]16387: WAF :: fetched 1 new logs [12-06-2022 18:54:01]2794: WAF :: fetched 2 new logs [12-06-2022 18:55:01]5581: WAF :: fetched 3 new logs [12-06-2022 18:56:02]8314: WAF :: fetched 1 new logs [12-06-2022 19:00:01]18661: WAF :: fetched 1 new logs [12-06-2022 19:01:02]21845: WAF :: fetched 3 new logs [12-06-2022 19:02:01]24521: WAF :: fetched 1 new logs [12-06-2022 19:03:02]27179: WAF :: fetched 3 new logs [12-06-2022 19:04:01]29821: WAF :: fetched 34 new logs [12-06-2022 19:05:02]32532: WAF :: fetched 4 new logs [12-06-2022 19:07:01]5613: WAF :: fetched 5 new logs [12-06-2022 19:08:02]8339: WAF :: fetched 31 new logs [12-06-2022 19:10:02]13732: WAF :: fetched 1 new logs [12-06-2022 19:11:02]16446: WAF :: fetched 1 new logs [12-06-2022 19:12:01]19103: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655071921 [12-06-2022 19:12:01]19103: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 19:12:03]19103: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 19:12:03]19103: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-1912/20220612-191201-YqZksesND1wcl7OZscU3UgAAABg [12-06-2022 19:12:03]19103: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 19:12:04]19103: WAF :: fetched 128 new logs [12-06-2022 19:13:02]21743: WAF :: fetched 1 new logs [12-06-2022 19:15:02]27019: WAF :: fetched 2 new logs [12-06-2022 19:17:01]32426: WAF :: fetched 1 new logs [12-06-2022 19:19:02]5422: WAF :: fetched 1 new logs [12-06-2022 19:21:01]10846: WAF :: fetched 1 new logs [12-06-2022 19:24:01]18782: WAF :: fetched 1 new logs [12-06-2022 19:26:01]24208: WAF :: fetched 1 new logs [12-06-2022 19:27:02]26875: WAF :: fetched 2 new logs [12-06-2022 19:29:01]32144: WAF :: fetched 1 new logs [12-06-2022 19:36:01]18617: WAF :: fetched 2 new logs [12-06-2022 19:37:02]21266: WAF :: fetched 1 new logs [12-06-2022 19:41:01]32008: Checking for user cron vulnerabilities [12-06-2022 19:44:01]7658: Checking ditributed CMS bruteforce attacks [12-06-2022 19:45:01]: Checking for definition updates [12-06-2022 19:50:01]23655: WAF :: fetched 1 new logs [12-06-2022 19:51:02]26514: WAF :: fetched 2 new logs [12-06-2022 19:52:01]29107: WAF :: fetched 3 new logs [12-06-2022 19:53:01]31743: WAF :: fetched 2 new logs [12-06-2022 19:58:01]12731: WAF :: fetched 1 new logs [12-06-2022 20:00:02]17745: WAF :: fetched 1 new logs [12-06-2022 20:03:01]26343: WAF :: fetched 1 new logs [12-06-2022 20:04:01]28992: WAF :: fetched 11 new logs [12-06-2022 20:05:02]31621: WAF :: fetched 17 new logs [12-06-2022 20:06:01]2012: WAF :: fetched 2 new logs [12-06-2022 20:09:02]10061: WAF :: fetched 2 new logs [12-06-2022 20:11:01]15546: WAF :: fetched 3 new logs [12-06-2022 20:12:02]18253: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655075522 [12-06-2022 20:12:02]18253: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 20:12:04]18253: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 20:12:04]18253: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-2012/20220612-201202-YqZywpz6TrlkAioSgVylxgAAAAA [12-06-2022 20:12:04]18253: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 20:12:04]18253: WAF :: fetched 3 new logs [12-06-2022 20:14:02]23577: WAF :: fetched 2 new logs [12-06-2022 20:17:02]31756: WAF :: fetched 5 new logs [12-06-2022 20:23:02]15472: WAF :: fetched 1 new logs [12-06-2022 20:24:01]18096: WAF :: fetched 2 new logs [12-06-2022 20:26:01]23523: WAF :: fetched 1 new logs [12-06-2022 20:27:01]26171: WAF :: fetched 1 new logs [12-06-2022 20:29:02]31434: WAF :: fetched 4 new logs [12-06-2022 20:30:02]1717: WAF :: fetched 26 new logs [12-06-2022 20:31:01]4710: WAF :: fetched 2 new logs [12-06-2022 20:35:02]15392: WAF :: fetched 6 new logs [12-06-2022 20:38:01]23436: WAF :: fetched 2 new logs [12-06-2022 20:39:01]26094: WAF :: fetched 1 new logs [12-06-2022 20:41:01]31496: Checking for user cron vulnerabilities [12-06-2022 20:43:02]4471: WAF :: fetched 1 new logs [12-06-2022 20:44:01]7148: Checking ditributed CMS bruteforce attacks [12-06-2022 20:44:01]7148: WAF :: fetched 1 new logs [12-06-2022 20:45:02]9830: WAF :: fetched 2 new logs [12-06-2022 20:46:01]12605: WAF :: fetched 2 new logs [12-06-2022 20:47:01]15272: WAF :: fetched 3 new logs [12-06-2022 20:50:02]23215: WAF :: fetched 2 new logs [12-06-2022 20:51:02]25999: WAF :: fetched 4 new logs [12-06-2022 20:53:02]31299: WAF :: fetched 2 new logs [12-06-2022 20:59:01]14983: WAF :: fetched 5 new logs [12-06-2022 21:00:01]17437: WAF :: fetched 2 new logs [12-06-2022 21:01:02]20725: WAF :: fetched 5 new logs [12-06-2022 21:02:01]23376: WAF :: fetched 2 new logs [12-06-2022 21:03:02]26046: WAF :: fetched 4 new logs [12-06-2022 21:04:01]28700: WAF :: fetched 1 new logs [12-06-2022 21:12:01]17847: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655079121 [12-06-2022 21:12:01]17847: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 21:12:03]17847: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 21:12:04]17847: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-2112/20220612-211201-YqaA0UFbsu5F_K7H6xT3BQAAAAc [12-06-2022 21:12:04]17847: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-06-2022 21:12:04]17847: WAF :: fetched 1 new logs [12-06-2022 21:13:01]20478: WAF :: fetched 1 new logs [12-06-2022 21:14:02]23108: WAF :: fetched 2 new logs [12-06-2022 21:15:01]25723: WAF :: fetched 2 new logs [12-06-2022 21:16:02]28522: WAF :: fetched 1 new logs [12-06-2022 21:17:01]31137: WAF :: fetched 1 new logs [12-06-2022 21:22:01]12231: WAF :: fetched 3 new logs [12-06-2022 21:23:02]14926: WAF :: fetched 1 new logs [12-06-2022 21:24:01]17543: WAF :: fetched 1 new logs [12-06-2022 21:32:01]6845: WAF :: fetched 1 new logs [12-06-2022 21:36:02]17621: WAF :: fetched 1 new logs [12-06-2022 21:37:01]20096: WAF :: fetched 4 new logs [12-06-2022 21:41:01]30914: Checking for user cron vulnerabilities [12-06-2022 21:44:02]6552: Checking ditributed CMS bruteforce attacks [12-06-2022 21:45:01]9203: WAF :: fetched 5 new logs [12-06-2022 21:46:01]11951: WAF :: fetched 3 new logs [12-06-2022 21:47:02]14622: WAF :: fetched 4 new logs [12-06-2022 21:48:01]17237: WAF :: fetched 1 new logs [12-06-2022 21:49:02]19881: WAF :: fetched 33 new logs [12-06-2022 21:52:02]27904: WAF :: fetched 1 new logs [12-06-2022 21:56:01]6204: WAF :: fetched 6 new logs [12-06-2022 21:57:02]8860: WAF :: fetched 1 new logs [12-06-2022 21:58:01]11526: WAF :: fetched 2 new logs [12-06-2022 21:59:01]14137: WAF :: fetched 3 new logs [12-06-2022 22:00:02]16503: WAF :: fetched 3 new logs [12-06-2022 22:02:02]22402: WAF :: fetched 1 new logs [12-06-2022 22:03:01]25014: WAF :: fetched 3 new logs [12-06-2022 22:04:01]27646: WAF :: fetched 3 new logs [12-06-2022 22:05:02]30314: WAF :: fetched 2 new logs [12-06-2022 22:06:01]632: WAF :: fetched 4 new logs [12-06-2022 22:07:01]3329: WAF :: fetched 2 new logs [12-06-2022 22:07:06]3336: Performing Domain reputation checks [12-06-2022 22:12:01]16809: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655082721 [12-06-2022 22:12:01]16809: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 22:12:03]16809: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 22:12:04]16809: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-2212/20220612-221201-YqaO4QEjmSL6O57OBl9CLAAAABI [12-06-2022 22:12:04]16809: WAF :: No suitable log file found. Using SQLite.. [12-06-2022 22:12:04]16809: WAF :: fetched 66 new logs [12-06-2022 22:20:02]5839: WAF :: fetched 1 new logs [12-06-2022 22:21:01]8387: WAF :: fetched 1 new logs [12-06-2022 22:22:02]11317: WAF :: fetched 1 new logs [12-06-2022 22:23:01]13948: WAF :: fetched 1 new logs [12-06-2022 22:24:02]16758: WAF :: fetched 1 new logs [12-06-2022 22:27:02]25381: WAF :: fetched 1 new logs [12-06-2022 22:35:01]14416: WAF :: fetched 1 new logs [12-06-2022 22:36:02]17287: WAF :: fetched 1 new logs [12-06-2022 22:37:02]19949: WAF :: fetched 1 new logs [12-06-2022 22:41:01]30669: Checking for user cron vulnerabilities [12-06-2022 22:44:02]6389: Checking ditributed CMS bruteforce attacks [12-06-2022 22:45:02]9084: WAF :: fetched 1 new logs [12-06-2022 22:48:01]17267: WAF :: fetched 1 new logs [12-06-2022 22:49:02]19918: WAF :: fetched 1 new logs [12-06-2022 22:50:01]22552: WAF :: fetched 1 new logs [12-06-2022 22:56:02]6412: WAF :: fetched 2 new logs [12-06-2022 22:57:02]9035: WAF :: fetched 1 new logs [12-06-2022 23:05:01]30886: WAF :: fetched 1 new logs [12-06-2022 23:06:02]1316: WAF :: fetched 1 new logs [12-06-2022 23:07:01]4041: WAF :: fetched 1 new logs [12-06-2022 23:07:40]4204: Performed RBL check for 23.111.136.34. [12-06-2022 23:08:02]6778: WAF :: fetched 2 new logs [12-06-2022 23:12:01]17478: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655086321 [12-06-2022 23:12:01]17478: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-06-2022 23:12:03]17478: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-06-2022 23:12:03]17478: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220612/20220612-2312/20220612-231201-Yqac8ZQIx4tJEvh-fu7UIAAAABE [12-06-2022 23:12:03]17478: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-06-2022 23:12:04]17478: WAF :: fetched 1 new logs [12-06-2022 23:13:02]20160: WAF :: fetched 1 new logs [12-06-2022 23:16:01]28214: WAF :: fetched 1 new logs [12-06-2022 23:19:02]3772: WAF :: fetched 1 new logs [12-06-2022 23:20:02]6482: WAF :: fetched 1 new logs [12-06-2022 23:23:01]14354: WAF :: fetched 1 new logs [12-06-2022 23:26:02]22596: WAF :: fetched 1 new logs [12-06-2022 23:29:02]30544: WAF :: fetched 2 new logs [12-06-2022 23:30:01]804: WAF :: fetched 3 new logs [12-06-2022 23:32:02]6350: WAF :: fetched 2 new logs [12-06-2022 23:33:01]8998: WAF :: fetched 40 new logs [12-06-2022 23:34:02]11673: WAF :: fetched 4 new logs [12-06-2022 23:35:01]14311: WAF :: fetched 4 new logs [12-06-2022 23:36:01]17125: WAF :: fetched 4 new logs [12-06-2022 23:37:02]19747: WAF :: fetched 5 new logs [12-06-2022 23:40:01]27634: WAF :: fetched 1 new logs [12-06-2022 23:41:02]30424: Checking for user cron vulnerabilities [12-06-2022 23:42:01]625: WAF :: fetched 1 new logs [12-06-2022 23:44:01]6009: Checking ditributed CMS bruteforce attacks [12-06-2022 23:49:01]19394: WAF :: fetched 2 new logs [12-06-2022 23:50:01]22097: WAF :: fetched 4 new logs [12-06-2022 23:51:02]24888: WAF :: fetched 1 new logs [12-06-2022 23:52:01]27499: WAF :: fetched 2 new logs [12-06-2022 23:54:01]32694: httpd.conf changed. Refreshing watchlist. [12-06-2022 23:56:02]6158: httpd.conf changed. Refreshing watchlist. [12-06-2022 23:58:02]11502: httpd.conf changed. Refreshing watchlist. [12-06-2022 23:59:01]14131: WAF :: fetched 1 new logs [13-06-2022 00:01:02]19930: httpd.conf changed. Refreshing watchlist. [13-06-2022 00:01:03]19928: Sending daily report for June 13, 2022 [13-06-2022 00:02:01]22743: httpd.conf changed. Refreshing watchlist. [13-06-2022 00:03:02]25504: WAF :: fetched 1 new logs [13-06-2022 00:03:02]25486: httpd.conf changed. Refreshing watchlist. [13-06-2022 00:05:02]30812: Deleted 0 entries older than 6 MONTH from scanner_logs [13-06-2022 00:05:02]30812: Deleted 0 files from Quarantine [13-06-2022 00:07:01]3897: WAF :: fetched 1 new logs [13-06-2022 00:11:02]14676: WAF :: fetched 1 new logs [13-06-2022 00:12:01]17329: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655089921 [13-06-2022 00:12:01]17329: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 00:12:03]17329: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 00:12:03]17329: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-0012/20220613-001201-YqarAYYjTnxHKsfQxHss6QAAABo [13-06-2022 00:12:03]17329: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 00:12:04]17329: WAF :: fetched 71 new logs [13-06-2022 00:13:01]19987: WAF :: fetched 2 new logs [13-06-2022 00:18:02]1026: WAF :: fetched 6 new logs [13-06-2022 00:19:01]3712: WAF :: fetched 2 new logs [13-06-2022 00:27:01]25260: WAF :: fetched 1 new logs [13-06-2022 00:31:02]3561: WAF :: fetched 1 new logs [13-06-2022 00:33:02]9009: WAF :: fetched 1 new logs [13-06-2022 00:34:01]11605: WAF :: fetched 3 new logs [13-06-2022 00:35:02]14277: WAF :: fetched 1 new logs [13-06-2022 00:37:01]19688: WAF :: fetched 1 new logs [13-06-2022 00:39:01]24941: WAF :: fetched 4 new logs [13-06-2022 00:40:02]27588: WAF :: fetched 3 new logs [13-06-2022 00:41:01]30295: WAF :: fetched 5 new logs [13-06-2022 00:41:01]30295: Checking for user cron vulnerabilities [13-06-2022 00:42:02]595: WAF :: fetched 4 new logs [13-06-2022 00:43:01]3269: WAF :: fetched 1 new logs [13-06-2022 00:44:02]6006: Checking ditributed CMS bruteforce attacks [13-06-2022 00:44:02]6006: WAF :: fetched 3 new logs [13-06-2022 00:45:01]: Checking for software updates [13-06-2022 00:45:01]8637: WAF :: fetched 2 new logs [13-06-2022 00:46:01]11329: WAF :: fetched 2 new logs [13-06-2022 00:47:02]14072: WAF :: fetched 3 new logs [13-06-2022 00:48:01]16678: WAF :: fetched 3 new logs [13-06-2022 00:49:02]19321: WAF :: fetched 5 new logs [13-06-2022 00:50:02]21911: WAF :: fetched 6 new logs [13-06-2022 00:51:01]24599: WAF :: fetched 1 new logs [13-06-2022 00:53:01]29948: WAF :: fetched 2 new logs [13-06-2022 00:57:02]8347: WAF :: fetched 1 new logs [13-06-2022 00:58:01]11015: WAF :: fetched 1 new logs [13-06-2022 01:00:02]15998: WAF :: fetched 1 new logs [13-06-2022 01:01:01]19925: WAF :: fetched 3 new logs [13-06-2022 01:02:02]22996: WAF :: fetched 1 new logs [13-06-2022 01:03:01]26059: WAF :: fetched 3 new logs [13-06-2022 01:09:01]10901: WAF :: fetched 2 new logs [13-06-2022 01:10:02]13576: WAF :: fetched 12 new logs [13-06-2022 01:11:01]16511: WAF :: fetched 41 new logs [13-06-2022 01:12:01]19424: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655093521 [13-06-2022 01:12:01]19424: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 01:12:03]19424: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 01:12:03]19424: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-0112/20220613-011201-Yqa5EZ7qWpjzOx5G9kxGfwAAAAU [13-06-2022 01:12:03]19424: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 01:12:03]19424: WAF :: fetched 5 new logs [13-06-2022 01:14:02]25051: WAF :: fetched 1 new logs [13-06-2022 01:16:01]31082: WAF :: fetched 5 new logs [13-06-2022 01:17:02]1416: WAF :: fetched 20 new logs [13-06-2022 01:24:01]21757: WAF :: fetched 1 new logs [13-06-2022 01:25:02]24843: WAF :: fetched 2 new logs [13-06-2022 01:29:01]3869: WAF :: fetched 1 new logs [13-06-2022 01:30:01]7104: WAF :: fetched 2 new logs [13-06-2022 01:31:01]9886: WAF :: fetched 3 new logs [13-06-2022 01:32:02]13012: WAF :: fetched 6 new logs [13-06-2022 01:33:01]16097: WAF :: fetched 2 new logs [13-06-2022 01:34:01]19029: WAF :: fetched 3 new logs [13-06-2022 01:35:02]21707: WAF :: fetched 2 new logs [13-06-2022 01:36:02]24728: WAF :: fetched 3 new logs [13-06-2022 01:37:02]27693: WAF :: fetched 7 new logs [13-06-2022 01:38:01]30384: WAF :: fetched 3 new logs [13-06-2022 01:41:01]6423: Checking for user cron vulnerabilities [13-06-2022 01:42:02]9204: WAF :: fetched 2 new logs [13-06-2022 01:43:02]11999: WAF :: fetched 2 new logs [13-06-2022 01:44:01]14863: Checking ditributed CMS bruteforce attacks [13-06-2022 01:44:01]14863: WAF :: fetched 2 new logs [13-06-2022 01:45:02]: Checking for definition updates [13-06-2022 01:45:02]17533: WAF :: fetched 2 new logs [13-06-2022 01:46:01]20051: WAF :: fetched 4 new logs [13-06-2022 01:47:02]22906: WAF :: fetched 2 new logs [13-06-2022 01:48:01]25518: WAF :: fetched 1 new logs [13-06-2022 01:49:02]28161: WAF :: fetched 2 new logs [13-06-2022 01:52:02]3984: WAF :: fetched 1 new logs [13-06-2022 01:53:01]6666: WAF :: fetched 1 new logs [13-06-2022 01:57:01]17445: WAF :: fetched 1 new logs [13-06-2022 01:59:02]22790: WAF :: fetched 1 new logs [13-06-2022 02:04:02]5345: WAF :: fetched 3 new logs [13-06-2022 02:05:01]8153: WAF :: fetched 5 new logs [13-06-2022 02:06:02]11044: WAF :: fetched 8 new logs [13-06-2022 02:07:01]13774: WAF :: fetched 2 new logs [13-06-2022 02:08:01]16446: WAF :: fetched 5 new logs [13-06-2022 02:09:02]19273: WAF :: fetched 4 new logs [13-06-2022 02:10:02]22322: WAF :: fetched 4 new logs [13-06-2022 02:11:01]25367: WAF :: fetched 5 new logs [13-06-2022 02:12:01]28700: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655097121 [13-06-2022 02:12:01]28700: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 02:12:03]28700: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 02:12:03]28700: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-0212/20220613-021201-YqbHIVTBZZRjGhQlRnWLMQAAAAo [13-06-2022 02:12:03]28700: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 02:12:04]28700: WAF :: fetched 6 new logs [13-06-2022 02:13:02]31460: WAF :: fetched 4 new logs [13-06-2022 02:14:01]1888: WAF :: fetched 2 new logs [13-06-2022 02:15:01]4668: WAF :: fetched 1 new logs [13-06-2022 02:18:02]13472: WAF :: fetched 2 new logs [13-06-2022 02:19:01]16137: WAF :: fetched 1 new logs [13-06-2022 02:23:02]28228: WAF :: fetched 1 new logs [13-06-2022 02:24:01]31227: WAF :: fetched 4 new logs [13-06-2022 02:25:01]1814: WAF :: fetched 3 new logs [13-06-2022 02:27:01]7531: WAF :: fetched 1 new logs [13-06-2022 02:29:01]12715: WAF :: fetched 1 new logs [13-06-2022 02:30:02]15606: WAF :: fetched 1 new logs [13-06-2022 02:38:02]4878: WAF :: fetched 1 new logs [13-06-2022 02:39:02]7544: WAF :: fetched 1 new logs [13-06-2022 02:41:02]12974: WAF :: fetched 1 new logs [13-06-2022 02:41:02]12974: Checking for user cron vulnerabilities [13-06-2022 02:44:01]21059: Checking ditributed CMS bruteforce attacks [13-06-2022 02:45:01]23651: WAF :: fetched 24 new logs [13-06-2022 02:46:02]26419: WAF :: fetched 4 new logs [13-06-2022 02:47:01]29153: WAF :: fetched 1 new logs [13-06-2022 02:48:02]31836: WAF :: fetched 1 new logs [13-06-2022 02:51:02]7588: WAF :: fetched 1 new logs [13-06-2022 02:52:01]10314: WAF :: fetched 29 new logs [13-06-2022 02:53:02]12976: Updated license status via CDN [13-06-2022 03:00:02]31412: WAF :: fetched 1 new logs [13-06-2022 03:00:05]31412: Found and updated 32 CMS installations [13-06-2022 03:01:02]2300: WAF :: fetched 3 new logs [13-06-2022 03:02:01]5359: WAF :: fetched 1 new logs [13-06-2022 03:02:46]31412: Sending CMS version vulnerability report emails to cpanel users [13-06-2022 03:02:49]31412: Checking wordpress installations for suspicious directories [13-06-2022 03:04:01]11271: WAF :: fetched 1 new logs [13-06-2022 03:04:26]8403: Sending CMS version vulnerability report emails to cpanel users [13-06-2022 03:04:29]8403: Checking wordpress installations for suspicious directories [13-06-2022 03:06:01]16930: WAF :: fetched 3 new logs [13-06-2022 03:07:01]19682: WAF :: fetched 1 new logs [13-06-2022 03:12:02]699: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655100722 [13-06-2022 03:12:02]699: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 03:12:04]699: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 03:12:04]699: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-0312/20220613-031202-YqbVMqmo6_OkDC16ZNmu9wAAAAE [13-06-2022 03:12:04]699: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [13-06-2022 03:12:04]699: WAF :: fetched 1 new logs [13-06-2022 03:13:01]3415: WAF :: fetched 2 new logs [13-06-2022 03:17:02]14294: WAF :: fetched 3 new logs [13-06-2022 03:22:02]27758: WAF :: fetched 1 new logs [13-06-2022 03:24:01]624: WAF :: fetched 1 new logs [13-06-2022 03:25:02]3392: WAF :: fetched 2 new logs [13-06-2022 03:26:01]6136: WAF :: fetched 5 new logs [13-06-2022 03:27:01]8883: WAF :: fetched 33 new logs [13-06-2022 03:29:01]14220: WAF :: fetched 1 new logs [13-06-2022 03:40:02]11465: WAF :: fetched 1 new logs [13-06-2022 03:41:01]14184: Checking for user cron vulnerabilities [13-06-2022 03:42:02]16961: WAF :: fetched 2 new logs [13-06-2022 03:44:01]22234: Checking ditributed CMS bruteforce attacks [13-06-2022 03:48:02]15603: WAF :: fetched 4 new logs [13-06-2022 03:49:01]28137: WAF :: fetched 3 new logs [13-06-2022 03:50:01]7579: WAF :: fetched 5 new logs [13-06-2022 04:02:01]8151: WAF :: fetched 1 new logs [13-06-2022 04:04:01]13533: WAF :: fetched 1 new logs [13-06-2022 04:05:02]16265: WAF :: fetched 5 new logs [13-06-2022 04:06:01]18966: WAF :: fetched 107 new logs [13-06-2022 04:07:02]21741: WAF :: fetched 110 new logs [13-06-2022 04:08:01]24423: WAF :: fetched 95 new logs [13-06-2022 04:09:01]27152: WAF :: fetched 104 new logs [13-06-2022 04:10:02]29900: WAF :: fetched 92 new logs [13-06-2022 04:11:01]32631: WAF :: fetched 106 new logs [13-06-2022 04:12:01]3047: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655104321 [13-06-2022 04:12:02]3047: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 04:12:04]3047: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 04:12:04]3047: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-0412/20220613-041202-YqbjQr4U3BoUsdy1DYP2jAAAAAU [13-06-2022 04:12:04]3047: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 04:12:04]3047: WAF :: fetched 591 new logs [13-06-2022 04:13:02]5832: WAF :: fetched 2 new logs [13-06-2022 04:24:02]3364: WAF :: fetched 1 new logs [13-06-2022 04:27:01]11653: WAF :: fetched 3 new logs [13-06-2022 04:32:01]25223: WAF :: fetched 1 new logs [13-06-2022 04:33:02]27951: WAF :: fetched 1 new logs [13-06-2022 04:37:01]6509: WAF :: fetched 1 new logs [13-06-2022 04:40:02]14628: WAF :: fetched 6 new logs [13-06-2022 04:41:01]17399: Checking for user cron vulnerabilities [13-06-2022 04:43:02]22874: WAF :: fetched 1 new logs [13-06-2022 04:44:01]25549: Checking ditributed CMS bruteforce attacks [13-06-2022 04:51:02]12240: WAF :: fetched 1 new logs [13-06-2022 04:59:02]1569: WAF :: fetched 1 new logs [13-06-2022 05:00:02]4040: WAF :: fetched 7 new logs [13-06-2022 05:01:41]7258: Starting daily scan on files updated in last 24 hrs [13-06-2022 05:02:02]10069: WAF :: fetched 1 new logs [13-06-2022 05:04:02]15497: WAF :: fetched 2 new logs [13-06-2022 05:05:02]18192: WAF :: fetched 1 new logs [13-06-2022 05:09:02]29022: WAF :: fetched 19 new logs [13-06-2022 05:12:02]4783: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655107922 [13-06-2022 05:12:02]4783: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 05:12:04]4783: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 05:12:04]4783: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-0512/20220613-051202-YqbxUo9yoJ9asJV7pnIsqAAAAA4 [13-06-2022 05:12:04]4783: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [13-06-2022 05:12:04]4783: WAF :: fetched 1 new logs [13-06-2022 05:13:01]7484: WAF :: fetched 1 new logs [13-06-2022 05:14:01]10164: WAF :: fetched 1 new logs [13-06-2022 05:17:02]18139: WAF :: fetched 25 new logs [13-06-2022 05:18:01]20693: WAF :: fetched 10 new logs [13-06-2022 05:22:01]31541: WAF :: fetched 2 new logs [13-06-2022 05:39:02]12533: WAF :: fetched 1 new logs [13-06-2022 05:41:01]17883: Checking for user cron vulnerabilities [13-06-2022 05:43:01]23274: WAF :: fetched 1 new logs [13-06-2022 05:44:01]25923: Checking ditributed CMS bruteforce attacks [13-06-2022 05:56:02]25735: WAF :: fetched 2 new logs [13-06-2022 06:08:01]25972: WAF :: fetched 1 new logs [13-06-2022 06:12:01]4307: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655111521 [13-06-2022 06:12:01]4307: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 06:12:03]4307: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 06:12:04]4307: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-0612/20220613-061201-Yqb_YattiypxTDinb7QtwQAAAAY [13-06-2022 06:12:04]4307: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [13-06-2022 06:12:04]4307: WAF :: fetched 1 new logs [13-06-2022 06:20:01]25894: WAF :: fetched 3 new logs [13-06-2022 06:23:01]1593: WAF :: fetched 1 new logs [13-06-2022 06:30:02]20645: WAF :: fetched 1 new logs [13-06-2022 06:35:01]1582: WAF :: fetched 1 new logs [13-06-2022 06:41:01]17849: Checking for user cron vulnerabilities [13-06-2022 06:44:02]25911: Checking ditributed CMS bruteforce attacks [13-06-2022 06:46:01]31238: WAF :: fetched 1 new logs [13-06-2022 06:48:01]4293: WAF :: fetched 3 new logs [13-06-2022 06:49:02]7015: WAF :: fetched 1 new logs [13-06-2022 06:50:01]9674: WAF :: fetched 1 new logs [13-06-2022 06:52:02]15068: WAF :: fetched 2 new logs [13-06-2022 06:53:01]17801: WAF :: fetched 1 new logs [13-06-2022 06:55:01]23103: WAF :: fetched 1 new logs [13-06-2022 06:57:02]28434: WAF :: fetched 3 new logs [13-06-2022 06:58:01]31164: WAF :: fetched 1 new logs [13-06-2022 06:59:01]1417: WAF :: fetched 1 new logs [13-06-2022 07:00:01]3893: WAF :: fetched 1 new logs [13-06-2022 07:01:02]7158: WAF :: fetched 1 new logs [13-06-2022 07:02:01]9854: WAF :: fetched 1 new logs [13-06-2022 07:03:01]12606: WAF :: fetched 1 new logs [13-06-2022 07:04:02]15320: WAF :: fetched 20 new logs [13-06-2022 07:06:01]20635: WAF :: fetched 3 new logs [13-06-2022 07:07:02]23284: WAF :: fetched 3 new logs [13-06-2022 07:11:01]1671: WAF :: fetched 2 new logs [13-06-2022 07:12:02]4444: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655115122 [13-06-2022 07:12:02]4444: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 07:12:04]4444: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 07:12:04]4444: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-0712/20220613-071202-YqcNctPF6_JGoNZ4Yi_nQAAAAAI [13-06-2022 07:12:04]4444: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [13-06-2022 07:12:04]4444: WAF :: fetched 3 new logs [13-06-2022 07:13:01]7194: WAF :: fetched 1 new logs [13-06-2022 07:16:01]15241: WAF :: fetched 1 new logs [13-06-2022 07:17:01]17888: WAF :: fetched 1 new logs [13-06-2022 07:21:01]28719: WAF :: fetched 1 new logs [13-06-2022 07:22:02]31418: WAF :: fetched 1 new logs [13-06-2022 07:23:02]1741: WAF :: fetched 1 new logs [13-06-2022 07:25:02]7197: WAF :: fetched 1 new logs [13-06-2022 07:26:01]9872: WAF :: fetched 1 new logs [13-06-2022 07:28:02]15277: WAF :: fetched 1 new logs [13-06-2022 07:32:01]26005: WAF :: fetched 1 new logs [13-06-2022 07:37:01]7169: WAF :: fetched 1 new logs [13-06-2022 07:41:02]17965: Checking for user cron vulnerabilities [13-06-2022 07:44:01]25953: Checking ditributed CMS bruteforce attacks [13-06-2022 07:45:01]: Checking for definition updates [13-06-2022 07:51:02]12586: WAF :: fetched 2 new logs [13-06-2022 07:55:01]23313: WAF :: fetched 1 new logs [13-06-2022 07:56:01]26012: WAF :: fetched 1 new logs [13-06-2022 07:58:01]31260: WAF :: fetched 1 new logs [13-06-2022 08:01:02]7385: WAF :: fetched 2 new logs [13-06-2022 08:02:01]10120: WAF :: fetched 1 new logs [13-06-2022 08:04:02]15594: WAF :: fetched 2 new logs [13-06-2022 08:09:02]29107: WAF :: fetched 1 new logs [13-06-2022 08:12:02]4871: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655118722 [13-06-2022 08:12:02]4871: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 08:12:04]4871: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 08:12:04]4871: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-0812/20220613-081202-YqcbguQNQqEeyfNesDtTSQAAAAc [13-06-2022 08:12:04]4871: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 08:12:04]4871: WAF :: fetched 81 new logs [13-06-2022 08:14:01]10393: WAF :: fetched 2 new logs [13-06-2022 08:15:02]13092: WAF :: fetched 2 new logs [13-06-2022 08:17:01]18441: WAF :: fetched 4 new logs [13-06-2022 08:18:02]21207: WAF :: fetched 1 new logs [13-06-2022 08:25:02]7876: WAF :: fetched 2 new logs [13-06-2022 08:30:01]21481: WAF :: fetched 2 new logs [13-06-2022 08:31:02]24231: WAF :: fetched 1 new logs [13-06-2022 08:32:01]26908: WAF :: fetched 1 new logs [13-06-2022 08:33:01]29680: WAF :: fetched 1 new logs [13-06-2022 08:35:01]2647: WAF :: fetched 1 new logs [13-06-2022 08:36:02]5453: WAF :: fetched 2 new logs [13-06-2022 08:41:02]19085: WAF :: fetched 4 new logs [13-06-2022 08:41:02]19085: Checking for user cron vulnerabilities [13-06-2022 08:42:01]21745: WAF :: fetched 2 new logs [13-06-2022 08:43:02]24515: WAF :: fetched 6 new logs [13-06-2022 08:44:01]27147: Checking ditributed CMS bruteforce attacks [13-06-2022 08:44:02]27147: WAF :: fetched 5 new logs [13-06-2022 08:45:01]29829: WAF :: fetched 5 new logs [13-06-2022 08:46:02]32608: WAF :: fetched 9 new logs [13-06-2022 08:47:01]2932: WAF :: fetched 3 new logs [13-06-2022 08:48:01]5764: WAF :: fetched 7 new logs [13-06-2022 08:50:01]11278: WAF :: fetched 2 new logs [13-06-2022 08:52:01]16896: WAF :: fetched 2 new logs [13-06-2022 08:53:01]19713: WAF :: fetched 5 new logs [13-06-2022 08:54:02]22517: WAF :: fetched 7 new logs [13-06-2022 08:55:01]25317: WAF :: fetched 2 new logs [13-06-2022 08:57:02]31008: WAF :: fetched 2 new logs [13-06-2022 08:59:02]4189: WAF :: fetched 1 new logs [13-06-2022 09:01:02]9973: WAF :: fetched 1 new logs [13-06-2022 09:10:01]2423: WAF :: fetched 1 new logs [13-06-2022 09:12:02]8042: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655122322 [13-06-2022 09:12:02]8042: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 09:12:04]8042: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 09:12:04]8042: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-0912/20220613-091202-Yqcpkgu2hJRYVv4rqWjq7AAAAAw [13-06-2022 09:12:04]8042: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [13-06-2022 09:12:04]8042: WAF :: fetched 1 new logs [13-06-2022 09:13:01]10836: WAF :: fetched 4 new logs [13-06-2022 09:15:01]16439: WAF :: fetched 1 new logs [13-06-2022 09:17:02]21955: WAF :: fetched 3 new logs [13-06-2022 09:18:02]24725: WAF :: fetched 3 new logs [13-06-2022 09:19:01]27417: WAF :: fetched 1 new logs [13-06-2022 09:20:01]30173: WAF :: fetched 1 new logs [13-06-2022 09:22:01]3576: WAF :: fetched 3 new logs [13-06-2022 09:23:02]6741: WAF :: fetched 1 new logs [13-06-2022 09:24:01]9505: WAF :: fetched 3 new logs [13-06-2022 09:26:02]15147: WAF :: fetched 2 new logs [13-06-2022 09:27:02]17917: WAF :: fetched 2 new logs [13-06-2022 09:28:01]20730: WAF :: fetched 3 new logs [13-06-2022 09:29:02]23470: WAF :: fetched 7 new logs [13-06-2022 09:32:02]31842: WAF :: fetched 2 new logs [13-06-2022 09:33:01]2269: WAF :: fetched 1 new logs [13-06-2022 09:34:02]5102: WAF :: fetched 1 new logs [13-06-2022 09:36:01]10619: WAF :: fetched 2 new logs [13-06-2022 09:38:01]16232: WAF :: fetched 2 new logs [13-06-2022 09:41:01]24528: Checking for user cron vulnerabilities [13-06-2022 09:43:01]30105: WAF :: fetched 4 new logs [13-06-2022 09:44:01]415: Checking ditributed CMS bruteforce attacks [13-06-2022 09:44:01]415: WAF :: fetched 1 new logs [13-06-2022 09:49:01]14582: WAF :: fetched 4 new logs [13-06-2022 09:50:02]17320: WAF :: fetched 17 new logs [13-06-2022 09:51:01]20168: WAF :: fetched 37 new logs [13-06-2022 09:52:02]22944: WAF :: fetched 35 new logs [13-06-2022 09:53:01]25755: WAF :: fetched 45 new logs [13-06-2022 09:54:02]28453: WAF :: fetched 33 new logs [13-06-2022 09:55:01]31156: WAF :: fetched 24 new logs [13-06-2022 09:56:01]1549: WAF :: fetched 34 new logs [13-06-2022 09:57:02]4371: WAF :: fetched 29 new logs [13-06-2022 09:58:02]7224: WAF :: fetched 31 new logs [13-06-2022 09:59:02]9953: WAF :: fetched 40 new logs [13-06-2022 10:00:02]12430: WAF :: fetched 18 new logs [13-06-2022 10:01:01]15736: WAF :: fetched 36 new logs [13-06-2022 10:02:01]18552: WAF :: fetched 33 new logs [13-06-2022 10:03:01]21397: WAF :: fetched 36 new logs [13-06-2022 10:04:02]24207: WAF :: fetched 39 new logs [13-06-2022 10:05:01]26924: WAF :: fetched 26 new logs [13-06-2022 10:06:01]29704: WAF :: fetched 39 new logs [13-06-2022 10:07:02]32452: WAF :: fetched 37 new logs [13-06-2022 10:08:01]2866: WAF :: fetched 33 new logs [13-06-2022 10:09:02]5692: WAF :: fetched 40 new logs [13-06-2022 10:10:02]8414: WAF :: fetched 16 new logs [13-06-2022 10:11:01]11248: WAF :: fetched 24 new logs [13-06-2022 10:12:02]14021: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655125922 [13-06-2022 10:12:02]14021: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 10:12:04]14021: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 10:12:04]14021: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-1012/20220613-101202-Yqc3ouOu8HYbW5Z89Jpe_QAAAAw [13-06-2022 10:12:04]14021: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 10:12:05]14021: WAF :: fetched 617 new logs [13-06-2022 10:13:01]16727: WAF :: fetched 1 new logs [13-06-2022 10:15:02]22283: WAF :: fetched 1 new logs [13-06-2022 10:18:01]30618: WAF :: fetched 1 new logs [13-06-2022 10:22:01]9741: WAF :: fetched 1 new logs [13-06-2022 10:24:01]15483: WAF :: fetched 1 new logs [13-06-2022 10:25:02]18292: WAF :: fetched 2 new logs [13-06-2022 10:27:02]23995: WAF :: fetched 10 new logs [13-06-2022 10:28:02]26845: WAF :: fetched 227 new logs [13-06-2022 10:29:01]29783: WAF :: fetched 294 new logs [13-06-2022 10:30:02]32709: WAF :: fetched 194 new logs [13-06-2022 10:31:01]3148: WAF :: fetched 48 new logs [13-06-2022 10:32:01]5967: WAF :: fetched 57 new logs [13-06-2022 10:33:02]8701: WAF :: fetched 72 new logs [13-06-2022 10:34:01]11491: WAF :: fetched 29 new logs [13-06-2022 10:36:01]17057: WAF :: fetched 3 new logs [13-06-2022 10:38:02]22501: WAF :: fetched 2 new logs [13-06-2022 10:39:01]25278: WAF :: fetched 3 new logs [13-06-2022 10:41:02]31002: WAF :: fetched 2 new logs [13-06-2022 10:41:02]31002: Checking for user cron vulnerabilities [13-06-2022 10:43:01]4128: WAF :: fetched 1 new logs [13-06-2022 10:44:01]7059: Checking ditributed CMS bruteforce attacks [13-06-2022 10:50:02]23846: WAF :: fetched 3 new logs [13-06-2022 10:51:02]26737: WAF :: fetched 3 new logs [13-06-2022 10:52:01]29498: WAF :: fetched 3 new logs [13-06-2022 10:53:02]32326: WAF :: fetched 2 new logs [13-06-2022 10:54:01]2815: WAF :: fetched 4 new logs [13-06-2022 10:55:01]5670: WAF :: fetched 2 new logs [13-06-2022 10:56:01]8576: WAF :: fetched 3 new logs [13-06-2022 10:57:02]11389: WAF :: fetched 1 new logs [13-06-2022 10:58:02]14266: WAF :: fetched 1 new logs [13-06-2022 10:59:02]17134: WAF :: fetched 2 new logs [13-06-2022 11:00:01]19622: WAF :: fetched 2 new logs [13-06-2022 11:01:01]22991: WAF :: fetched 19 new logs [13-06-2022 11:02:02]25805: WAF :: fetched 1 new logs [13-06-2022 11:03:01]28416: WAF :: fetched 1 new logs [13-06-2022 11:04:02]31396: WAF :: fetched 1 new logs [13-06-2022 11:07:50]7674: Performed RBL check for 23.111.136.34. [13-06-2022 11:10:01]15948: WAF :: fetched 1 new logs [13-06-2022 11:12:02]21709: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655129522 [13-06-2022 11:12:02]21709: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 11:12:04]21709: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 11:12:04]21709: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-1112/20220613-111202-YqdFsqEQUOZZIhADBgy8HAAAAA0 [13-06-2022 11:12:04]21709: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 11:12:04]21709: WAF :: fetched 5 new logs [13-06-2022 11:15:01]30111: WAF :: fetched 1 new logs [13-06-2022 11:16:02]563: WAF :: fetched 3 new logs [13-06-2022 11:17:01]3400: WAF :: fetched 3 new logs [13-06-2022 11:18:02]6304: WAF :: fetched 2 new logs [13-06-2022 11:20:01]11960: WAF :: fetched 3 new logs [13-06-2022 11:22:01]17612: WAF :: fetched 1 new logs [13-06-2022 11:23:02]20398: WAF :: fetched 5 new logs [13-06-2022 11:25:01]26022: WAF :: fetched 1 new logs [13-06-2022 11:26:02]28892: WAF :: fetched 1 new logs [13-06-2022 11:38:01]30266: WAF :: fetched 1 new logs [13-06-2022 11:39:01]704: WAF :: fetched 3 new logs [13-06-2022 11:40:02]3653: WAF :: fetched 3 new logs [13-06-2022 11:41:01]6266: WAF :: fetched 7 new logs [13-06-2022 11:41:01]6266: Checking for user cron vulnerabilities [13-06-2022 11:44:02]15052: Checking ditributed CMS bruteforce attacks [13-06-2022 11:45:02]17931: httpd.conf changed. Refreshing watchlist. [13-06-2022 11:46:02]20853: WAF :: fetched 1 new logs [13-06-2022 11:46:02]20846: httpd.conf changed. Refreshing watchlist. [13-06-2022 11:48:01]26488: WAF :: fetched 2 new logs [13-06-2022 11:50:01]32225: WAF :: fetched 5 new logs [13-06-2022 11:51:01]2700: httpd.conf changed. Refreshing watchlist. [13-06-2022 11:54:02]11260: WAF :: fetched 2 new logs [13-06-2022 12:02:01]1967: WAF :: fetched 52 new logs [13-06-2022 12:03:02]5310: WAF :: fetched 58 new logs [13-06-2022 12:04:01]8156: WAF :: fetched 59 new logs [13-06-2022 12:05:01]10897: WAF :: fetched 66 new logs [13-06-2022 12:06:02]13738: WAF :: fetched 49 new logs [13-06-2022 12:07:01]16471: WAF :: fetched 59 new logs [13-06-2022 12:09:01]21849: WAF :: fetched 2 new logs [13-06-2022 12:10:02]24889: WAF :: fetched 3 new logs [13-06-2022 12:11:01]27787: WAF :: fetched 2 new logs [13-06-2022 12:12:01]30599: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655133121 [13-06-2022 12:12:01]30599: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 12:12:03]30599: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 12:12:03]30599: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-1212/20220613-121201-YqdTwet6uepsA8GxfW8LNgAAABw [13-06-2022 12:12:03]30599: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 12:12:03]30599: WAF :: fetched 2 new logs [13-06-2022 12:13:02]920: WAF :: fetched 1 new logs [13-06-2022 12:14:01]3803: WAF :: fetched 1 new logs [13-06-2022 12:16:01]9274: WAF :: fetched 1 new logs [13-06-2022 12:17:02]12195: WAF :: fetched 3 new logs [13-06-2022 12:20:01]20519: WAF :: fetched 6 new logs [13-06-2022 12:25:02]1999: WAF :: fetched 3 new logs [13-06-2022 12:26:02]4885: WAF :: fetched 1 new logs [13-06-2022 12:28:01]10396: WAF :: fetched 2 new logs [13-06-2022 12:29:02]13241: WAF :: fetched 1 new logs [13-06-2022 12:31:01]18838: WAF :: fetched 2 new logs [13-06-2022 12:34:01]26997: WAF :: fetched 1 new logs [13-06-2022 12:36:02]377: WAF :: fetched 17 new logs [13-06-2022 12:37:02]3202: WAF :: fetched 111 new logs [13-06-2022 12:38:01]5984: WAF :: fetched 92 new logs [13-06-2022 12:39:02]8828: WAF :: fetched 102 new logs [13-06-2022 12:40:02]11561: WAF :: fetched 94 new logs [13-06-2022 12:41:01]14359: WAF :: fetched 80 new logs [13-06-2022 12:41:01]14359: Checking for user cron vulnerabilities [13-06-2022 12:42:02]17103: WAF :: fetched 100 new logs [13-06-2022 12:43:01]19803: WAF :: fetched 68 new logs [13-06-2022 12:44:01]22657: Checking ditributed CMS bruteforce attacks [13-06-2022 12:44:01]22657: WAF :: fetched 33 new logs [13-06-2022 12:45:01]: Checking for software updates [13-06-2022 12:45:02]25421: WAF :: fetched 32 new logs [13-06-2022 12:46:01]28277: WAF :: fetched 38 new logs [13-06-2022 12:47:02]31127: WAF :: fetched 35 new logs [13-06-2022 12:48:01]1460: WAF :: fetched 21 new logs [13-06-2022 12:50:02]7158: WAF :: fetched 2 new logs [13-06-2022 12:51:01]9916: WAF :: fetched 1 new logs [13-06-2022 12:52:01]12676: WAF :: fetched 2 new logs [13-06-2022 12:56:02]23872: WAF :: fetched 1 new logs [13-06-2022 13:01:02]5574: WAF :: fetched 1 new logs [13-06-2022 13:04:02]13878: WAF :: fetched 1 new logs [13-06-2022 13:05:02]16595: WAF :: fetched 6 new logs [13-06-2022 13:06:01]19121: WAF :: fetched 26 new logs [13-06-2022 13:07:01]22157: WAF :: fetched 3 new logs [13-06-2022 13:08:02]24910: WAF :: fetched 3 new logs [13-06-2022 13:09:02]27703: WAF :: fetched 5 new logs [13-06-2022 13:11:01]804: WAF :: fetched 1 new logs [13-06-2022 13:12:01]3559: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655136721 [13-06-2022 13:12:01]3559: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 13:12:03]3559: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 13:12:04]3559: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-1312/20220613-131201-Yqdh0cZOBUPr1G99HFX2HgAAABk [13-06-2022 13:12:04]3559: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 13:12:04]3559: WAF :: fetched 1 new logs [13-06-2022 13:13:01]6356: WAF :: fetched 1 new logs [13-06-2022 13:14:01]9194: WAF :: fetched 4 new logs [13-06-2022 13:15:01]11957: WAF :: fetched 7 new logs [13-06-2022 13:16:01]14748: WAF :: fetched 1 new logs [13-06-2022 13:19:01]23006: WAF :: fetched 1 new logs [13-06-2022 13:23:01]1614: WAF :: fetched 3 new logs [13-06-2022 13:24:01]4516: WAF :: fetched 4 new logs [13-06-2022 13:27:01]12790: WAF :: fetched 3 new logs [13-06-2022 13:35:01]2650: WAF :: fetched 4 new logs [13-06-2022 13:36:01]5511: WAF :: fetched 1 new logs [13-06-2022 13:37:01]8229: WAF :: fetched 3 new logs [13-06-2022 13:38:02]11048: WAF :: fetched 1 new logs [13-06-2022 13:39:01]13848: WAF :: fetched 1 new logs [13-06-2022 13:40:02]16627: WAF :: fetched 1 new logs [13-06-2022 13:41:01]19441: Checking for user cron vulnerabilities [13-06-2022 13:44:01]27976: Checking ditributed CMS bruteforce attacks [13-06-2022 13:45:01]: Checking for definition updates [13-06-2022 13:45:01]30749: WAF :: fetched 7 new logs [13-06-2022 13:45:05]30733: Updated virus defnition : signatures.ndb [13-06-2022 13:47:02]3915: WAF :: fetched 4 new logs [13-06-2022 13:54:02]23617: WAF :: fetched 1 new logs [13-06-2022 13:55:01]26388: WAF :: fetched 2 new logs [13-06-2022 13:56:02]29251: WAF :: fetched 3 new logs [13-06-2022 14:00:01]7739: WAF :: fetched 4 new logs [13-06-2022 14:01:02]11023: WAF :: fetched 7 new logs [13-06-2022 14:02:02]13806: WAF :: fetched 5 new logs [13-06-2022 14:03:01]16309: WAF :: fetched 1 new logs [13-06-2022 14:06:01]24625: WAF :: fetched 2 new logs [13-06-2022 14:07:01]27508: WAF :: fetched 2 new logs [13-06-2022 14:08:01]30313: WAF :: fetched 4 new logs [13-06-2022 14:12:01]8981: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655140321 [13-06-2022 14:12:01]8981: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 14:12:03]8981: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 14:12:04]8981: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-1412/20220613-141201-Yqdv4fVT4SK3rIapWDIlFAAAACI [13-06-2022 14:12:04]8981: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 14:12:04]8981: WAF :: fetched 1 new logs [13-06-2022 14:14:02]14617: WAF :: fetched 1 new logs [13-06-2022 14:16:02]20158: WAF :: fetched 3 new logs [13-06-2022 14:17:01]22739: WAF :: fetched 1 new logs [13-06-2022 14:19:02]28397: WAF :: fetched 1 new logs [13-06-2022 14:20:01]31077: WAF :: fetched 12 new logs [13-06-2022 14:21:02]1501: WAF :: fetched 10 new logs [13-06-2022 14:22:01]4149: WAF :: fetched 2 new logs [13-06-2022 14:23:01]7057: WAF :: fetched 2 new logs [13-06-2022 14:24:02]9836: WAF :: fetched 34 new logs [13-06-2022 14:25:02]12570: WAF :: fetched 35 new logs [13-06-2022 14:26:01]15433: WAF :: fetched 27 new logs [13-06-2022 14:27:02]18181: WAF :: fetched 15 new logs [13-06-2022 14:28:01]20930: WAF :: fetched 2 new logs [13-06-2022 14:29:02]23720: WAF :: fetched 16 new logs [13-06-2022 14:30:01]26418: WAF :: fetched 17 new logs [13-06-2022 14:31:01]29228: WAF :: fetched 37 new logs [13-06-2022 14:32:02]31973: WAF :: fetched 11 new logs [13-06-2022 14:33:01]2286: WAF :: fetched 19 new logs [13-06-2022 14:34:02]5179: WAF :: fetched 26 new logs [13-06-2022 14:35:02]7960: WAF :: fetched 2 new logs [13-06-2022 14:36:02]10708: WAF :: fetched 7 new logs [13-06-2022 14:37:01]13432: WAF :: fetched 4 new logs [13-06-2022 14:38:02]16148: WAF :: fetched 2 new logs [13-06-2022 14:40:02]21695: WAF :: fetched 1 new logs [13-06-2022 14:41:02]24501: WAF :: fetched 1 new logs [13-06-2022 14:41:02]24501: Checking for user cron vulnerabilities [13-06-2022 14:44:01]450: Checking ditributed CMS bruteforce attacks [13-06-2022 14:44:02]450: WAF :: fetched 1 new logs [13-06-2022 14:46:02]6246: WAF :: fetched 2 new logs [13-06-2022 14:48:01]11794: WAF :: fetched 1 new logs [13-06-2022 14:49:02]14659: WAF :: fetched 2 new logs [13-06-2022 14:52:02]22953: WAF :: fetched 1 new logs [13-06-2022 14:53:02]25637: Updated license status via CDN [13-06-2022 14:54:01]28431: WAF :: fetched 4 new logs [13-06-2022 14:55:02]31202: WAF :: fetched 2 new logs [13-06-2022 14:56:01]1618: WAF :: fetched 4 new logs [13-06-2022 14:57:02]4423: WAF :: fetched 5 new logs [13-06-2022 14:58:02]7172: WAF :: fetched 2 new logs [13-06-2022 14:59:01]9909: WAF :: fetched 1 new logs [13-06-2022 15:01:02]15695: Reseting cPGuard inotify settings [13-06-2022 15:02:01]18413: WAF :: fetched 6 new logs [13-06-2022 15:06:02]29321: WAF :: fetched 4 new logs [13-06-2022 15:08:01]2487: WAF :: fetched 1 new logs [13-06-2022 15:09:02]5367: WAF :: fetched 2 new logs [13-06-2022 15:11:02]10952: WAF :: fetched 2 new logs [13-06-2022 15:12:02]13619: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655143922 [13-06-2022 15:12:02]13619: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 15:12:04]13619: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 15:12:04]13619: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-1512/20220613-151202-Yqd98vXHJxkQ5bg3hc63uAAAABs [13-06-2022 15:12:04]13619: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 15:12:04]13619: WAF :: fetched 1 new logs [13-06-2022 15:15:01]22034: WAF :: fetched 16 new logs [13-06-2022 15:22:01]9376: WAF :: fetched 2 new logs [13-06-2022 15:24:02]14865: WAF :: fetched 1 new logs [13-06-2022 15:30:02]31681: httpd.conf changed. Refreshing watchlist. [13-06-2022 15:32:02]5056: WAF :: fetched 1 new logs [13-06-2022 15:35:01]13495: httpd.conf changed. Refreshing watchlist. [13-06-2022 15:36:01]16412: WAF :: fetched 3 new logs [13-06-2022 15:36:01]16410: httpd.conf changed. Refreshing watchlist. [13-06-2022 15:39:01]24661: WAF :: fetched 1 new logs [13-06-2022 15:40:02]27892: WAF :: fetched 1 new logs [13-06-2022 15:40:02]27899: httpd.conf changed. Refreshing watchlist. [13-06-2022 15:41:02]30733: Checking for user cron vulnerabilities [13-06-2022 15:41:02]30730: httpd.conf changed. Refreshing watchlist. [13-06-2022 15:42:01]1119: WAF :: fetched 2 new logs [13-06-2022 15:43:02]3971: WAF :: fetched 2 new logs [13-06-2022 15:44:01]6744: Checking ditributed CMS bruteforce attacks [13-06-2022 15:44:02]6744: WAF :: fetched 5 new logs [13-06-2022 15:45:01]9544: WAF :: fetched 4 new logs [13-06-2022 15:46:02]12403: WAF :: fetched 1 new logs [13-06-2022 15:47:01]15100: WAF :: fetched 1 new logs [13-06-2022 15:48:01]17926: WAF :: fetched 1 new logs [13-06-2022 15:50:01]23565: WAF :: fetched 2 new logs [13-06-2022 15:51:02]26420: WAF :: fetched 1 new logs [13-06-2022 15:55:01]5193: WAF :: fetched 1 new logs [13-06-2022 15:57:01]10727: WAF :: fetched 3 new logs [13-06-2022 15:58:02]13540: WAF :: fetched 2 new logs [13-06-2022 15:59:01]16217: WAF :: fetched 3 new logs [13-06-2022 16:04:01]30275: WAF :: fetched 1 new logs [13-06-2022 16:05:02]878: WAF :: fetched 3 new logs [13-06-2022 16:06:01]3660: WAF :: fetched 1 new logs [13-06-2022 16:08:01]9527: WAF :: fetched 1 new logs [13-06-2022 16:10:01]15201: WAF :: fetched 1 new logs [13-06-2022 16:11:02]18126: WAF :: fetched 4 new logs [13-06-2022 16:12:02]20905: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655147522 [13-06-2022 16:12:02]20905: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 16:12:04]20905: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 16:12:04]20905: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-1612/20220613-161202-YqeMArLfPhXBs9pvVc0LSAAAADg [13-06-2022 16:12:04]20905: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 16:12:04]20905: WAF :: fetched 4 new logs [13-06-2022 16:16:02]32104: WAF :: fetched 1 new logs [13-06-2022 16:19:02]8000: WAF :: fetched 2 new logs [13-06-2022 16:20:01]10833: WAF :: fetched 1 new logs [13-06-2022 16:21:01]13715: WAF :: fetched 3 new logs [13-06-2022 16:22:02]16511: WAF :: fetched 3 new logs [13-06-2022 16:27:01]30513: WAF :: fetched 8 new logs [13-06-2022 16:28:01]855: WAF :: fetched 10 new logs [13-06-2022 16:29:01]3705: WAF :: fetched 3 new logs [13-06-2022 16:30:02]6637: WAF :: fetched 5 new logs [13-06-2022 16:32:01]12268: WAF :: fetched 2 new logs [13-06-2022 16:34:02]17771: WAF :: fetched 2 new logs [13-06-2022 16:35:01]20614: WAF :: fetched 1 new logs [13-06-2022 16:36:01]23490: WAF :: fetched 4 new logs [13-06-2022 16:37:02]26274: WAF :: fetched 3 new logs [13-06-2022 16:38:01]29008: WAF :: fetched 1 new logs [13-06-2022 16:39:01]31784: WAF :: fetched 4 new logs [13-06-2022 16:40:02]2305: WAF :: fetched 1 new logs [13-06-2022 16:41:01]5071: Checking for user cron vulnerabilities [13-06-2022 16:43:01]10771: WAF :: fetched 1 new logs [13-06-2022 16:44:01]13507: Checking ditributed CMS bruteforce attacks [13-06-2022 16:47:01]22011: WAF :: fetched 1 new logs [13-06-2022 16:49:02]27511: WAF :: fetched 1 new logs [13-06-2022 16:50:01]30335: WAF :: fetched 2 new logs [13-06-2022 16:51:01]733: WAF :: fetched 1 new logs [13-06-2022 16:54:02]9129: WAF :: fetched 1 new logs [13-06-2022 17:01:02]28956: WAF :: fetched 1 new logs [13-06-2022 17:03:01]2174: WAF :: fetched 5 new logs [13-06-2022 17:05:02]7834: WAF :: fetched 3 new logs [13-06-2022 17:09:01]18867: WAF :: fetched 1 new logs [13-06-2022 17:10:02]21743: WAF :: fetched 1 new logs [13-06-2022 17:12:02]27171: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655151122 [13-06-2022 17:12:02]27171: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 17:12:04]27171: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 17:12:04]27171: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-1712/20220613-171202-YqeaEo9cviwDOmIMc2IiAQAAACE [13-06-2022 17:12:04]27171: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 17:12:04]27171: WAF :: fetched 1 new logs [13-06-2022 17:13:01]29914: WAF :: fetched 4 new logs [13-06-2022 17:14:01]32606: WAF :: fetched 3 new logs [13-06-2022 17:15:02]3042: WAF :: fetched 2 new logs [13-06-2022 17:16:01]5852: WAF :: fetched 2 new logs [13-06-2022 17:17:01]8551: WAF :: fetched 2 new logs [13-06-2022 17:18:02]11302: WAF :: fetched 1 new logs [13-06-2022 17:22:02]22380: WAF :: fetched 1 new logs [13-06-2022 17:23:01]25071: WAF :: fetched 7 new logs [13-06-2022 17:24:01]27777: WAF :: fetched 1 new logs [13-06-2022 17:30:01]11894: WAF :: fetched 2 new logs [13-06-2022 17:32:01]17390: WAF :: fetched 1 new logs [13-06-2022 17:36:02]28333: WAF :: fetched 2 new logs [13-06-2022 17:38:02]1376: WAF :: fetched 1 new logs [13-06-2022 17:40:01]6891: WAF :: fetched 2 new logs [13-06-2022 17:41:02]9721: WAF :: fetched 1 new logs [13-06-2022 17:41:02]9721: Checking for user cron vulnerabilities [13-06-2022 17:42:01]12378: WAF :: fetched 2 new logs [13-06-2022 17:43:01]15093: WAF :: fetched 1 new logs [13-06-2022 17:44:01]17807: Checking ditributed CMS bruteforce attacks [13-06-2022 17:44:01]17807: WAF :: fetched 3 new logs [13-06-2022 17:45:01]20572: WAF :: fetched 1 new logs [13-06-2022 17:46:02]23323: WAF :: fetched 1 new logs [13-06-2022 17:47:01]25955: WAF :: fetched 1 new logs [13-06-2022 17:48:02]28721: WAF :: fetched 1 new logs [13-06-2022 17:49:01]31370: WAF :: fetched 2 new logs [13-06-2022 17:50:01]1716: WAF :: fetched 3 new logs [13-06-2022 17:51:02]4565: WAF :: fetched 1 new logs [13-06-2022 17:52:01]7241: WAF :: fetched 1 new logs [13-06-2022 17:55:01]15399: WAF :: fetched 3 new logs [13-06-2022 17:58:01]23472: WAF :: fetched 1 new logs [13-06-2022 18:08:01]18689: WAF :: fetched 1 new logs [13-06-2022 18:12:02]29670: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655154722 [13-06-2022 18:12:02]29670: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 18:12:04]29670: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 18:12:04]29670: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-1812/20220613-181202-YqeoIp3kQ6nOJiHRccAAKQAAAAk [13-06-2022 18:12:04]29670: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 18:12:04]29670: WAF :: fetched 2 new logs [13-06-2022 18:15:02]5471: WAF :: fetched 2 new logs [13-06-2022 18:19:01]16258: WAF :: fetched 16 new logs [13-06-2022 18:20:02]19108: WAF :: fetched 87 new logs [13-06-2022 18:21:01]21816: WAF :: fetched 2 new logs [13-06-2022 18:22:01]24487: WAF :: fetched 2 new logs [13-06-2022 18:23:02]27197: WAF :: fetched 91 new logs [13-06-2022 18:24:01]29880: WAF :: fetched 1 new logs [13-06-2022 18:25:02]32678: WAF :: fetched 3 new logs [13-06-2022 18:26:01]3073: WAF :: fetched 3 new logs [13-06-2022 18:27:02]5805: WAF :: fetched 2 new logs [13-06-2022 18:28:01]8534: WAF :: fetched 15 new logs [13-06-2022 18:29:02]11200: WAF :: fetched 3 new logs [13-06-2022 18:30:01]13948: WAF :: fetched 2 new logs [13-06-2022 18:31:01]16670: WAF :: fetched 2 new logs [13-06-2022 18:32:02]19392: WAF :: fetched 2 new logs [13-06-2022 18:33:01]22112: WAF :: fetched 6 new logs [13-06-2022 18:35:01]27625: WAF :: fetched 1 new logs [13-06-2022 18:41:01]11686: Checking for user cron vulnerabilities [13-06-2022 18:44:02]19710: Checking ditributed CMS bruteforce attacks [13-06-2022 18:49:02]927: WAF :: fetched 1 new logs [13-06-2022 18:52:02]9254: WAF :: fetched 1 new logs [13-06-2022 18:55:01]17333: WAF :: fetched 1 new logs [13-06-2022 18:56:01]20067: WAF :: fetched 3 new logs [13-06-2022 18:57:01]22783: WAF :: fetched 6 new logs [13-06-2022 18:58:02]25483: WAF :: fetched 1 new logs [13-06-2022 18:59:01]28158: WAF :: fetched 1 new logs [13-06-2022 19:05:02]12862: WAF :: fetched 2 new logs [13-06-2022 19:09:02]23849: WAF :: fetched 2 new logs [13-06-2022 19:11:02]29441: WAF :: fetched 1 new logs [13-06-2022 19:12:01]32123: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655158321 [13-06-2022 19:12:01]32123: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 19:12:03]32123: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 19:12:04]32123: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-1912/20220613-191201-Yqe2MebKTLGnBC-qZBlEEwAAAA8 [13-06-2022 19:12:04]32123: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [13-06-2022 19:12:04]32123: WAF :: fetched 1 new logs [13-06-2022 19:13:01]2452: WAF :: fetched 1 new logs [13-06-2022 19:15:02]8101: WAF :: fetched 4 new logs [13-06-2022 19:18:01]16292: WAF :: fetched 2 new logs [13-06-2022 19:20:02]21849: WAF :: fetched 2 new logs [13-06-2022 19:21:01]24621: WAF :: fetched 5 new logs [13-06-2022 19:22:02]27400: WAF :: fetched 1 new logs [13-06-2022 19:23:01]30133: WAF :: fetched 2 new logs [13-06-2022 19:24:01]455: WAF :: fetched 1 new logs [13-06-2022 19:25:02]3370: WAF :: fetched 5 new logs [13-06-2022 19:26:01]6189: WAF :: fetched 3 new logs [13-06-2022 19:27:02]8985: WAF :: fetched 3 new logs [13-06-2022 19:28:01]11683: WAF :: fetched 1 new logs [13-06-2022 19:32:02]22807: WAF :: fetched 1 new logs [13-06-2022 19:34:02]28299: WAF :: fetched 1 new logs [13-06-2022 19:37:02]4369: WAF :: fetched 3 new logs [13-06-2022 19:38:02]7103: WAF :: fetched 1 new logs [13-06-2022 19:39:01]9853: WAF :: fetched 5 new logs [13-06-2022 19:40:01]12786: WAF :: fetched 6 new logs [13-06-2022 19:41:02]15556: WAF :: fetched 3 new logs [13-06-2022 19:41:02]15556: Checking for user cron vulnerabilities [13-06-2022 19:42:01]18237: WAF :: fetched 1 new logs [13-06-2022 19:44:01]23702: Checking ditributed CMS bruteforce attacks [13-06-2022 19:44:02]23702: WAF :: fetched 4 new logs [13-06-2022 19:45:01]: Checking for definition updates [13-06-2022 19:45:01]26465: WAF :: fetched 7 new logs [13-06-2022 19:46:02]29213: WAF :: fetched 1 new logs [13-06-2022 19:47:01]31876: WAF :: fetched 1 new logs [13-06-2022 19:48:02]2230: WAF :: fetched 2 new logs [13-06-2022 19:52:01]13306: WAF :: fetched 1 new logs [13-06-2022 19:53:01]16068: WAF :: fetched 3 new logs [13-06-2022 19:54:02]18827: WAF :: fetched 3 new logs [13-06-2022 19:55:01]21667: WAF :: fetched 2 new logs [13-06-2022 19:56:02]24480: WAF :: fetched 1 new logs [13-06-2022 19:58:02]29976: WAF :: fetched 6 new logs [13-06-2022 19:59:02]32666: WAF :: fetched 4 new logs [13-06-2022 20:00:01]2823: WAF :: fetched 4 new logs [13-06-2022 20:01:02]6151: WAF :: fetched 5 new logs [13-06-2022 20:02:01]8876: WAF :: fetched 2 new logs [13-06-2022 20:03:01]11592: WAF :: fetched 4 new logs [13-06-2022 20:04:02]14335: WAF :: fetched 5 new logs [13-06-2022 20:05:01]17045: WAF :: fetched 1 new logs [13-06-2022 20:07:02]22592: WAF :: fetched 3 new logs [13-06-2022 20:09:02]28055: WAF :: fetched 1 new logs [13-06-2022 20:10:01]30823: WAF :: fetched 4 new logs [13-06-2022 20:11:01]1260: WAF :: fetched 1 new logs [13-06-2022 20:12:02]4039: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655161922 [13-06-2022 20:12:02]4039: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 20:12:04]4039: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 20:12:04]4039: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-2012/20220613-201202-YqfEQoKqVQd5GC-WNYq86wAAAEU [13-06-2022 20:12:04]4039: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 20:12:04]4039: WAF :: fetched 91 new logs [13-06-2022 20:17:02]17833: WAF :: fetched 1 new logs [13-06-2022 20:21:02]28729: WAF :: fetched 11 new logs [13-06-2022 20:22:01]31425: WAF :: fetched 15 new logs [13-06-2022 20:28:02]15314: WAF :: fetched 1 new logs [13-06-2022 20:29:02]17952: WAF :: fetched 1 new logs [13-06-2022 20:31:02]23521: WAF :: fetched 1 new logs [13-06-2022 20:35:01]1845: WAF :: fetched 1 new logs [13-06-2022 20:37:02]7466: WAF :: fetched 2 new logs [13-06-2022 20:38:02]10129: WAF :: fetched 5 new logs [13-06-2022 20:41:02]18310: Checking for user cron vulnerabilities [13-06-2022 20:42:01]20969: WAF :: fetched 3 new logs [13-06-2022 20:43:02]23652: WAF :: fetched 14 new logs [13-06-2022 20:44:01]26288: Checking ditributed CMS bruteforce attacks [13-06-2022 20:44:01]26288: WAF :: fetched 1 new logs [13-06-2022 20:49:01]7568: WAF :: fetched 1 new logs [13-06-2022 20:50:02]10245: WAF :: fetched 1 new logs [13-06-2022 20:55:02]23820: WAF :: fetched 1 new logs [13-06-2022 20:59:01]2295: WAF :: fetched 1 new logs [13-06-2022 21:06:02]21591: WAF :: fetched 5 new logs [13-06-2022 21:07:01]24260: WAF :: fetched 3 new logs [13-06-2022 21:08:02]26967: WAF :: fetched 1 new logs [13-06-2022 21:12:01]5527: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655165521 [13-06-2022 21:12:01]5527: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 21:12:03]5527: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 21:12:04]5527: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-2112/20220613-211201-YqfSUa_BDvMWXcmhr727IQAAABY [13-06-2022 21:12:04]5527: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 21:19:02]24458: WAF :: fetched 1 new logs [13-06-2022 21:20:02]27094: WAF :: fetched 2 new logs [13-06-2022 21:21:01]29950: WAF :: fetched 1 new logs [13-06-2022 21:22:02]32665: WAF :: fetched 33 new logs [13-06-2022 21:26:01]11281: WAF :: fetched 2 new logs [13-06-2022 21:28:01]16569: WAF :: fetched 1 new logs [13-06-2022 21:30:01]21938: WAF :: fetched 1 new logs [13-06-2022 21:32:01]27448: WAF :: fetched 2 new logs [13-06-2022 21:35:01]3078: WAF :: fetched 1 new logs [13-06-2022 21:41:02]19442: WAF :: fetched 1 new logs [13-06-2022 21:41:02]19442: Checking for user cron vulnerabilities [13-06-2022 21:44:02]27454: Checking ditributed CMS bruteforce attacks [13-06-2022 21:44:02]27454: WAF :: fetched 5 new logs [13-06-2022 21:45:01]30109: WAF :: fetched 23 new logs [13-06-2022 21:49:02]8569: WAF :: fetched 5 new logs [13-06-2022 21:58:01]32728: WAF :: fetched 1 new logs [13-06-2022 21:59:01]2994: WAF :: fetched 31 new logs [13-06-2022 22:00:02]5479: WAF :: fetched 64 new logs [13-06-2022 22:01:01]8731: WAF :: fetched 66 new logs [13-06-2022 22:02:01]11406: WAF :: fetched 33 new logs [13-06-2022 22:06:02]22231: WAF :: fetched 1 new logs [13-06-2022 22:07:07]24874: Performing Domain reputation checks [13-06-2022 22:11:02]3350: WAF :: fetched 2 new logs [13-06-2022 22:12:02]6066: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655169122 [13-06-2022 22:12:02]6066: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 22:12:04]6066: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 22:12:04]6066: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-2212/20220613-221202-YqfgYspFQx5yBk5tLFYtrwAAAA8 [13-06-2022 22:12:04]6066: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [13-06-2022 22:12:04]6066: WAF :: fetched 1 new logs [13-06-2022 22:13:01]8762: WAF :: fetched 2 new logs [13-06-2022 22:14:02]11451: WAF :: fetched 2 new logs [13-06-2022 22:16:02]16924: WAF :: fetched 2 new logs [13-06-2022 22:17:01]19589: WAF :: fetched 6 new logs [13-06-2022 22:18:01]22231: WAF :: fetched 1 new logs [13-06-2022 22:25:01]8777: WAF :: fetched 2 new logs [13-06-2022 22:26:01]11593: WAF :: fetched 2 new logs [13-06-2022 22:27:02]14294: WAF :: fetched 3 new logs [13-06-2022 22:29:01]19653: WAF :: fetched 6 new logs [13-06-2022 22:30:02]22401: WAF :: fetched 1 new logs [13-06-2022 22:31:02]25168: WAF :: fetched 2 new logs [13-06-2022 22:32:01]27828: WAF :: fetched 4 new logs [13-06-2022 22:34:01]722: WAF :: fetched 2 new logs [13-06-2022 22:35:01]3430: WAF :: fetched 2 new logs [13-06-2022 22:37:01]9020: WAF :: fetched 3 new logs [13-06-2022 22:38:02]11693: WAF :: fetched 2 new logs [13-06-2022 22:39:02]14359: WAF :: fetched 1 new logs [13-06-2022 22:41:02]19865: Checking for user cron vulnerabilities [13-06-2022 22:42:01]22535: WAF :: fetched 1 new logs [13-06-2022 22:44:01]27871: Checking ditributed CMS bruteforce attacks [13-06-2022 22:44:02]27871: WAF :: fetched 1 new logs [13-06-2022 22:45:01]30519: WAF :: fetched 4 new logs [13-06-2022 22:46:02]949: WAF :: fetched 3 new logs [13-06-2022 22:47:01]3632: WAF :: fetched 1 new logs [13-06-2022 22:48:01]6364: WAF :: fetched 1 new logs [13-06-2022 22:49:02]9053: WAF :: fetched 3 new logs [13-06-2022 22:51:01]14491: WAF :: fetched 4 new logs [13-06-2022 22:52:02]17173: WAF :: fetched 2 new logs [13-06-2022 22:53:01]19820: WAF :: fetched 4 new logs [13-06-2022 22:54:02]22509: WAF :: fetched 3 new logs [13-06-2022 23:00:02]6046: WAF :: fetched 2 new logs [13-06-2022 23:01:02]9306: WAF :: fetched 3 new logs [13-06-2022 23:02:01]12005: WAF :: fetched 2 new logs [13-06-2022 23:03:02]14719: WAF :: fetched 1 new logs [13-06-2022 23:05:02]20045: WAF :: fetched 2 new logs [13-06-2022 23:06:02]22830: WAF :: fetched 2 new logs [13-06-2022 23:07:45]25717: Performed RBL check for 23.111.136.34. [13-06-2022 23:08:02]28278: WAF :: fetched 1 new logs [13-06-2022 23:12:01]6808: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655172721 [13-06-2022 23:12:01]6808: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-06-2022 23:12:03]6808: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-06-2022 23:12:03]6808: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220613/20220613-2312/20220613-231201-YqfucUu0_cl8w5zAqO4b_QAAABc [13-06-2022 23:12:03]6808: WAF :: No suitable log file found. Using SQLite.. [13-06-2022 23:12:04]6808: WAF :: fetched 59 new logs [13-06-2022 23:20:02]28276: WAF :: fetched 2 new logs [13-06-2022 23:21:01]31104: WAF :: fetched 4 new logs [13-06-2022 23:31:01]25626: WAF :: fetched 1 new logs [13-06-2022 23:32:02]28291: WAF :: fetched 1 new logs [13-06-2022 23:40:02]17433: WAF :: fetched 6 new logs [13-06-2022 23:41:01]20224: WAF :: fetched 4 new logs [13-06-2022 23:41:01]20224: Checking for user cron vulnerabilities [13-06-2022 23:42:01]22857: WAF :: fetched 1 new logs [13-06-2022 23:43:02]25517: WAF :: fetched 26 new logs [13-06-2022 23:44:01]28141: Checking ditributed CMS bruteforce attacks [13-06-2022 23:44:01]28141: WAF :: fetched 5 new logs [13-06-2022 23:50:01]11915: WAF :: fetched 28 new logs [13-06-2022 23:51:02]14725: WAF :: fetched 13 new logs [13-06-2022 23:52:02]17425: WAF :: fetched 12 new logs [13-06-2022 23:55:01]25445: httpd.conf changed. Refreshing watchlist. [14-06-2022 00:01:01]9786: httpd.conf changed. Refreshing watchlist. [14-06-2022 00:01:03]9789: Sending daily report for June 14, 2022 [14-06-2022 00:02:02]12580: httpd.conf changed. Refreshing watchlist. [14-06-2022 00:03:01]15353: httpd.conf changed. Refreshing watchlist. [14-06-2022 00:04:02]18034: WAF :: fetched 1 new logs [14-06-2022 00:05:01]20372: Deleted 0 entries older than 6 MONTH from scanner_logs [14-06-2022 00:05:01]20372: Deleted 0 files from Quarantine [14-06-2022 00:08:02]28880: WAF :: fetched 1 new logs [14-06-2022 00:11:01]4652: WAF :: fetched 1 new logs [14-06-2022 00:12:01]7283: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655176321 [14-06-2022 00:12:01]7283: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 00:12:03]7283: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 00:12:03]7283: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-0012/20220614-001201-Yqf8gYgORe6fd_fTMCXJvwAAAAI [14-06-2022 00:12:03]7283: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [14-06-2022 00:12:03]7283: WAF :: fetched 1 new logs [14-06-2022 00:15:02]15247: WAF :: fetched 128 new logs [14-06-2022 00:21:01]31372: WAF :: fetched 1 new logs [14-06-2022 00:23:01]4336: WAF :: fetched 1 new logs [14-06-2022 00:36:01]6991: WAF :: fetched 2 new logs [14-06-2022 00:37:02]9648: WAF :: fetched 1 new logs [14-06-2022 00:38:01]12275: WAF :: fetched 5 new logs [14-06-2022 00:41:01]20448: WAF :: fetched 2 new logs [14-06-2022 00:41:01]20448: Checking for user cron vulnerabilities [14-06-2022 00:42:02]23100: WAF :: fetched 4 new logs [14-06-2022 00:43:01]25715: WAF :: fetched 4 new logs [14-06-2022 00:44:02]28393: Checking ditributed CMS bruteforce attacks [14-06-2022 00:45:01]: Checking for software updates [14-06-2022 00:53:01]20122: WAF :: fetched 1 new logs [14-06-2022 00:58:01]981: WAF :: fetched 3 new logs [14-06-2022 00:59:01]3666: WAF :: fetched 2 new logs [14-06-2022 01:02:01]12840: WAF :: fetched 1 new logs [14-06-2022 01:10:02]3194: WAF :: fetched 2 new logs [14-06-2022 01:12:02]9021: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655179922 [14-06-2022 01:12:02]9021: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 01:12:04]9021: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 01:12:04]9021: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-0112/20220614-011202-YqgKkqNF8KOxN8Ls-eVFMAAAABM [14-06-2022 01:12:04]9021: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 01:12:04]9021: WAF :: fetched 136 new logs [14-06-2022 01:13:01]11746: WAF :: fetched 1 new logs [14-06-2022 01:16:01]20136: WAF :: fetched 4 new logs [14-06-2022 01:20:02]31626: WAF :: fetched 1 new logs [14-06-2022 01:26:02]16103: WAF :: fetched 3 new logs [14-06-2022 01:30:02]27529: WAF :: fetched 1 new logs [14-06-2022 01:36:01]12400: WAF :: fetched 1 new logs [14-06-2022 01:37:01]15516: WAF :: fetched 1 new logs [14-06-2022 01:39:02]21122: WAF :: fetched 6 new logs [14-06-2022 01:41:02]27126: Checking for user cron vulnerabilities [14-06-2022 01:43:01]32665: WAF :: fetched 1 new logs [14-06-2022 01:44:02]2998: Checking ditributed CMS bruteforce attacks [14-06-2022 01:45:01]: Checking for definition updates [14-06-2022 01:53:02]27940: WAF :: fetched 3 new logs [14-06-2022 01:54:01]30778: WAF :: fetched 1 new logs [14-06-2022 01:55:01]1191: WAF :: fetched 3 new logs [14-06-2022 02:03:02]22851: WAF :: fetched 1 new logs [14-06-2022 02:11:02]11821: WAF :: fetched 1 new logs [14-06-2022 02:12:01]14525: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655183521 [14-06-2022 02:12:01]14525: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 02:12:03]14525: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 02:12:04]14525: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-0212/20220614-021201-YqgYoZf4O5dDbUIRuQOTYAAAAAg [14-06-2022 02:12:04]14525: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 02:12:04]14525: WAF :: fetched 2 new logs [14-06-2022 02:14:02]19802: WAF :: fetched 6 new logs [14-06-2022 02:15:02]22425: WAF :: fetched 1 new logs [14-06-2022 02:16:01]25105: WAF :: fetched 4 new logs [14-06-2022 02:18:01]30414: WAF :: fetched 27 new logs [14-06-2022 02:23:01]11409: WAF :: fetched 25 new logs [14-06-2022 02:25:01]16692: WAF :: fetched 2 new logs [14-06-2022 02:26:01]19357: WAF :: fetched 1 new logs [14-06-2022 02:29:01]28575: WAF :: fetched 1 new logs [14-06-2022 02:41:01]30045: Checking for user cron vulnerabilities [14-06-2022 02:44:02]6287: Checking ditributed CMS bruteforce attacks [14-06-2022 02:44:02]6287: WAF :: fetched 1 new logs [14-06-2022 02:45:01]8915: WAF :: fetched 1 new logs [14-06-2022 02:51:02]24934: WAF :: fetched 1 new logs [14-06-2022 02:53:03]30696: Updated license status via CDN [14-06-2022 02:55:01]3898: WAF :: fetched 3 new logs [14-06-2022 02:58:02]12418: WAF :: fetched 1 new logs [14-06-2022 03:00:02]17827: Found and updated 32 CMS installations [14-06-2022 03:02:13]17827: Sending CMS version vulnerability report emails to cpanel users [14-06-2022 03:02:16]17827: Checking wordpress installations for suspicious directories [14-06-2022 03:04:25]27247: Sending CMS version vulnerability report emails to cpanel users [14-06-2022 03:04:28]27247: Checking wordpress installations for suspicious directories [14-06-2022 03:12:02]19866: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655187122 [14-06-2022 03:12:02]19866: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 03:12:04]19866: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 03:12:04]19866: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-0312/20220614-031202-Yqgmsuv6f8if6X44jwF-FQAAAAo [14-06-2022 03:12:04]19866: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 03:12:04]19866: WAF :: fetched 1 new logs [14-06-2022 03:18:01]1141: WAF :: fetched 2 new logs [14-06-2022 03:19:02]23885: WAF :: fetched 1 new logs [14-06-2022 03:22:02]16125: WAF :: fetched 1 new logs [14-06-2022 03:23:01]18816: WAF :: fetched 2 new logs [14-06-2022 03:25:01]24144: WAF :: fetched 27 new logs [14-06-2022 03:32:01]10609: WAF :: fetched 1 new logs [14-06-2022 03:41:02]2119: WAF :: fetched 1 new logs [14-06-2022 03:41:02]2119: Checking for user cron vulnerabilities [14-06-2022 03:44:01]10118: Checking ditributed CMS bruteforce attacks [14-06-2022 03:45:01]12753: WAF :: fetched 2 new logs [14-06-2022 03:47:01]18147: WAF :: fetched 1 new logs [14-06-2022 03:49:01]23414: WAF :: fetched 1 new logs [14-06-2022 03:51:02]28735: WAF :: fetched 1 new logs [14-06-2022 03:56:01]9684: WAF :: fetched 1 new logs [14-06-2022 04:02:01]25848: WAF :: fetched 1 new logs [14-06-2022 04:03:02]28518: WAF :: fetched 1 new logs [14-06-2022 04:04:01]31129: WAF :: fetched 3 new logs [14-06-2022 04:05:01]1359: WAF :: fetched 1 new logs [14-06-2022 04:07:01]6848: WAF :: fetched 1 new logs [14-06-2022 04:08:01]9514: WAF :: fetched 1 new logs [14-06-2022 04:09:02]12155: WAF :: fetched 1 new logs [14-06-2022 04:12:02]20200: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655190722 [14-06-2022 04:12:02]20200: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 04:12:04]20200: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 04:12:04]20200: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-0412/20220614-041202-Yqg0wtNwe0KWQtMmtgBniwAAAAE [14-06-2022 04:12:04]20200: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 04:12:04]20200: WAF :: fetched 5 new logs [14-06-2022 04:18:01]3736: WAF :: fetched 1 new logs [14-06-2022 04:19:01]6394: WAF :: fetched 2 new logs [14-06-2022 04:20:01]9077: WAF :: fetched 1 new logs [14-06-2022 04:23:01]17125: WAF :: fetched 2 new logs [14-06-2022 04:24:02]19773: WAF :: fetched 1 new logs [14-06-2022 04:29:02]557: WAF :: fetched 2 new logs [14-06-2022 04:35:01]16580: WAF :: fetched 2 new logs [14-06-2022 04:36:01]19287: WAF :: fetched 2 new logs [14-06-2022 04:38:02]24624: WAF :: fetched 1 new logs [14-06-2022 04:41:01]32555: Checking for user cron vulnerabilities [14-06-2022 04:44:01]8235: Checking ditributed CMS bruteforce attacks [14-06-2022 04:45:02]10844: WAF :: fetched 2 new logs [14-06-2022 04:50:02]24119: WAF :: fetched 1 new logs [14-06-2022 04:51:02]26798: WAF :: fetched 2 new logs [14-06-2022 04:52:01]29508: WAF :: fetched 1 new logs [14-06-2022 04:53:02]32137: WAF :: fetched 1 new logs [14-06-2022 05:00:02]18082: WAF :: fetched 1 new logs [14-06-2022 05:01:42]21187: Starting daily scan on files updated in last 24 hrs [14-06-2022 05:02:01]23934: WAF :: fetched 31 new logs [14-06-2022 05:05:02]31845: WAF :: fetched 2 new logs [14-06-2022 05:08:01]7559: WAF :: fetched 2 new logs [14-06-2022 05:09:02]10194: WAF :: fetched 1 new logs [14-06-2022 05:11:02]15549: WAF :: fetched 1 new logs [14-06-2022 05:12:02]18269: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655194322 [14-06-2022 05:12:02]18269: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 05:12:04]18269: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 05:12:04]18269: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-0512/20220614-051202-YqhC0p6-wmUVB4DM89DtvAAAAAM [14-06-2022 05:12:04]18269: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 05:12:04]18269: WAF :: fetched 2 new logs [14-06-2022 05:13:01]20885: WAF :: fetched 1 new logs [14-06-2022 05:18:01]1729: WAF :: fetched 1 new logs [14-06-2022 05:26:02]22964: WAF :: fetched 1 new logs [14-06-2022 05:27:01]25648: WAF :: fetched 1 new logs [14-06-2022 05:29:01]30864: WAF :: fetched 1 new logs [14-06-2022 05:30:02]1206: WAF :: fetched 13 new logs [14-06-2022 05:38:02]22575: WAF :: fetched 3 new logs [14-06-2022 05:40:01]27794: WAF :: fetched 1 new logs [14-06-2022 05:41:02]30456: Checking for user cron vulnerabilities [14-06-2022 05:44:01]6137: Checking ditributed CMS bruteforce attacks [14-06-2022 05:44:02]6137: WAF :: fetched 1 new logs [14-06-2022 05:49:02]19356: WAF :: fetched 11 new logs [14-06-2022 05:55:01]2840: WAF :: fetched 1 new logs [14-06-2022 05:59:01]13574: WAF :: fetched 2 new logs [14-06-2022 06:12:02]16048: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655197922 [14-06-2022 06:12:02]16048: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 06:12:04]16048: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 06:12:04]16048: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-0612/20220614-061202-YqhQ4sMcBimUJzFzKHnE3gAAAAo [14-06-2022 06:12:04]16048: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [14-06-2022 06:12:04]16048: WAF :: fetched 1 new logs [14-06-2022 06:13:01]18679: WAF :: fetched 1 new logs [14-06-2022 06:19:02]2223: WAF :: fetched 1 new logs [14-06-2022 06:23:02]12928: WAF :: fetched 3 new logs [14-06-2022 06:26:01]20910: WAF :: fetched 1 new logs [14-06-2022 06:28:02]26412: WAF :: fetched 2 new logs [14-06-2022 06:32:01]4700: WAF :: fetched 2 new logs [14-06-2022 06:34:01]10039: WAF :: fetched 1 new logs [14-06-2022 06:35:02]12722: WAF :: fetched 2 new logs [14-06-2022 06:36:02]15404: WAF :: fetched 6 new logs [14-06-2022 06:37:01]18029: WAF :: fetched 1 new logs [14-06-2022 06:38:02]20768: WAF :: fetched 2 new logs [14-06-2022 06:39:01]23384: WAF :: fetched 4 new logs [14-06-2022 06:40:02]26094: WAF :: fetched 4 new logs [14-06-2022 06:41:02]28714: Checking for user cron vulnerabilities [14-06-2022 06:44:01]4441: Checking ditributed CMS bruteforce attacks [14-06-2022 06:45:02]7111: WAF :: fetched 1 new logs [14-06-2022 06:47:01]12383: WAF :: fetched 1 new logs [14-06-2022 06:52:02]25708: WAF :: fetched 1 new logs [14-06-2022 06:53:01]28386: WAF :: fetched 30 new logs [14-06-2022 06:54:01]30992: WAF :: fetched 10 new logs [14-06-2022 06:55:02]1273: WAF :: fetched 1 new logs [14-06-2022 06:56:01]3955: WAF :: fetched 4 new logs [14-06-2022 06:58:01]9351: WAF :: fetched 2 new logs [14-06-2022 06:59:01]11975: WAF :: fetched 2 new logs [14-06-2022 07:00:02]14336: WAF :: fetched 1 new logs [14-06-2022 07:01:01]17503: WAF :: fetched 2 new logs [14-06-2022 07:02:02]20153: WAF :: fetched 3 new logs [14-06-2022 07:04:01]25472: WAF :: fetched 6 new logs [14-06-2022 07:06:01]30809: WAF :: fetched 5 new logs [14-06-2022 07:11:01]11896: WAF :: fetched 2 new logs [14-06-2022 07:12:02]14581: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655201522 [14-06-2022 07:12:02]14581: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 07:12:04]14581: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 07:12:04]14581: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-0712/20220614-071202-Yqhe8npWkZO9QhhFBCN_ygAAAAY [14-06-2022 07:12:04]14581: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [14-06-2022 07:12:04]14581: WAF :: fetched 1 new logs [14-06-2022 07:13:01]17282: WAF :: fetched 2 new logs [14-06-2022 07:14:02]19916: WAF :: fetched 1 new logs [14-06-2022 07:15:02]22504: WAF :: fetched 1 new logs [14-06-2022 07:18:01]30454: WAF :: fetched 2 new logs [14-06-2022 07:19:02]663: WAF :: fetched 2 new logs [14-06-2022 07:21:01]6124: WAF :: fetched 3 new logs [14-06-2022 07:23:01]11451: WAF :: fetched 2 new logs [14-06-2022 07:26:02]19418: WAF :: fetched 1 new logs [14-06-2022 07:28:01]24750: WAF :: fetched 3 new logs [14-06-2022 07:31:02]32739: WAF :: fetched 10 new logs [14-06-2022 07:32:01]2989: WAF :: fetched 23 new logs [14-06-2022 07:33:01]5786: WAF :: fetched 6 new logs [14-06-2022 07:34:01]8454: WAF :: fetched 5 new logs [14-06-2022 07:35:01]11114: WAF :: fetched 2 new logs [14-06-2022 07:36:02]13873: WAF :: fetched 2 new logs [14-06-2022 07:38:02]19175: WAF :: fetched 1 new logs [14-06-2022 07:39:01]21792: WAF :: fetched 3 new logs [14-06-2022 07:41:02]27209: Checking for user cron vulnerabilities [14-06-2022 07:43:01]32558: WAF :: fetched 1 new logs [14-06-2022 07:44:01]2878: Checking ditributed CMS bruteforce attacks [14-06-2022 07:44:02]2878: WAF :: fetched 6 new logs [14-06-2022 07:45:01]: Checking for definition updates [14-06-2022 07:45:01]5568: WAF :: fetched 2 new logs [14-06-2022 07:48:01]13608: WAF :: fetched 2 new logs [14-06-2022 07:50:01]18965: WAF :: fetched 1 new logs [14-06-2022 07:53:02]27096: WAF :: fetched 2 new logs [14-06-2022 07:54:01]29740: WAF :: fetched 2 new logs [14-06-2022 07:57:01]5409: WAF :: fetched 1 new logs [14-06-2022 07:58:02]8137: WAF :: fetched 1 new logs [14-06-2022 08:01:01]16277: WAF :: fetched 3 new logs [14-06-2022 08:02:01]18971: WAF :: fetched 5 new logs [14-06-2022 08:03:02]21706: WAF :: fetched 1 new logs [14-06-2022 08:05:01]26985: WAF :: fetched 1 new logs [14-06-2022 08:06:02]29700: WAF :: fetched 2 new logs [14-06-2022 08:07:01]32307: WAF :: fetched 2 new logs [14-06-2022 08:09:02]5486: WAF :: fetched 1 new logs [14-06-2022 08:12:01]13388: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655205121 [14-06-2022 08:12:01]13388: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 08:12:03]13388: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 08:12:03]13388: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-0812/20220614-081201-YqhtAVB-8icfYyGOi0hJMQAAABU [14-06-2022 08:12:03]13388: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 08:12:04]13388: WAF :: fetched 149 new logs [14-06-2022 08:16:01]24248: WAF :: fetched 1 new logs [14-06-2022 08:17:02]26924: WAF :: fetched 4 new logs [14-06-2022 08:18:01]29519: WAF :: fetched 1 new logs [14-06-2022 08:20:01]2611: WAF :: fetched 2 new logs [14-06-2022 08:24:02]13486: WAF :: fetched 1 new logs [14-06-2022 08:25:01]16135: WAF :: fetched 2 new logs [14-06-2022 08:27:02]21560: WAF :: fetched 4 new logs [14-06-2022 08:28:01]24333: WAF :: fetched 2 new logs [14-06-2022 08:32:01]2752: WAF :: fetched 2 new logs [14-06-2022 08:33:01]5588: WAF :: fetched 2 new logs [14-06-2022 08:35:01]10906: WAF :: fetched 2 new logs [14-06-2022 08:38:01]19019: WAF :: fetched 1 new logs [14-06-2022 08:40:01]24392: WAF :: fetched 1 new logs [14-06-2022 08:41:01]27167: WAF :: fetched 1 new logs [14-06-2022 08:41:01]27167: Checking for user cron vulnerabilities [14-06-2022 08:43:01]32572: WAF :: fetched 33 new logs [14-06-2022 08:44:02]2863: Checking ditributed CMS bruteforce attacks [14-06-2022 08:51:01]21846: WAF :: fetched 1 new logs [14-06-2022 08:52:02]24532: WAF :: fetched 2 new logs [14-06-2022 08:55:02]32544: WAF :: fetched 1 new logs [14-06-2022 08:57:02]5709: WAF :: fetched 1 new logs [14-06-2022 09:00:02]13633: WAF :: fetched 11 new logs [14-06-2022 09:03:02]22426: WAF :: fetched 1 new logs [14-06-2022 09:05:02]27832: WAF :: fetched 4 new logs [14-06-2022 09:06:02]30595: WAF :: fetched 2 new logs [14-06-2022 09:10:01]9338: WAF :: fetched 1 new logs [14-06-2022 09:11:01]12051: WAF :: fetched 1 new logs [14-06-2022 09:12:02]14756: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655208722 [14-06-2022 09:12:02]14756: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 09:12:04]14756: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 09:12:04]14756: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-0912/20220614-091202-Yqh7ErtzvibufvsAh7xLBQAAABo [14-06-2022 09:12:04]14756: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 09:12:04]14756: WAF :: fetched 2 new logs [14-06-2022 09:14:02]20228: WAF :: fetched 2 new logs [14-06-2022 09:17:02]28403: WAF :: fetched 4 new logs [14-06-2022 09:18:01]31160: WAF :: fetched 1 new logs [14-06-2022 09:19:02]1472: WAF :: fetched 4 new logs [14-06-2022 09:20:02]4219: WAF :: fetched 3 new logs [14-06-2022 09:21:01]7046: WAF :: fetched 7 new logs [14-06-2022 09:22:02]9803: WAF :: fetched 2 new logs [14-06-2022 09:23:01]12569: WAF :: fetched 3 new logs [14-06-2022 09:24:01]15294: WAF :: fetched 1 new logs [14-06-2022 09:25:02]18001: WAF :: fetched 4 new logs [14-06-2022 09:26:01]20761: WAF :: fetched 1 new logs [14-06-2022 09:27:02]23490: WAF :: fetched 3 new logs [14-06-2022 09:28:01]26256: WAF :: fetched 5 new logs [14-06-2022 09:29:01]28978: WAF :: fetched 1 new logs [14-06-2022 09:34:02]10517: WAF :: fetched 1 new logs [14-06-2022 09:35:01]13210: WAF :: fetched 44 new logs [14-06-2022 09:36:02]16062: WAF :: fetched 34 new logs [14-06-2022 09:37:02]18751: WAF :: fetched 56 new logs [14-06-2022 09:38:01]21493: WAF :: fetched 64 new logs [14-06-2022 09:39:02]24181: WAF :: fetched 46 new logs [14-06-2022 09:40:01]26881: WAF :: fetched 46 new logs [14-06-2022 09:41:01]29666: WAF :: fetched 8 new logs [14-06-2022 09:41:01]29666: Checking for user cron vulnerabilities [14-06-2022 09:44:02]5771: Checking ditributed CMS bruteforce attacks [14-06-2022 09:45:01]8581: httpd.conf changed. Refreshing watchlist. [14-06-2022 09:46:01]11481: WAF :: fetched 2 new logs [14-06-2022 09:46:01]11476: httpd.conf changed. Refreshing watchlist. [14-06-2022 09:47:02]14259: WAF :: fetched 1 new logs [14-06-2022 09:48:01]17099: WAF :: fetched 1 new logs [14-06-2022 09:49:02]19888: WAF :: fetched 1 new logs [14-06-2022 09:50:02]22595: WAF :: fetched 4 new logs [14-06-2022 09:51:01]25516: httpd.conf changed. Refreshing watchlist. [14-06-2022 09:53:01]31119: WAF :: fetched 1 new logs [14-06-2022 09:56:01]7218: WAF :: fetched 2 new logs [14-06-2022 09:57:02]9952: WAF :: fetched 1 new logs [14-06-2022 09:58:01]12739: WAF :: fetched 3 new logs [14-06-2022 09:59:02]15535: httpd.conf changed. Refreshing watchlist. [14-06-2022 10:03:01]27143: WAF :: fetched 5 new logs [14-06-2022 10:07:01]6137: WAF :: fetched 1 new logs [14-06-2022 10:09:02]12044: WAF :: fetched 1 new logs [14-06-2022 10:10:01]14767: WAF :: fetched 2 new logs [14-06-2022 10:11:01]17623: WAF :: fetched 1 new logs [14-06-2022 10:12:01]20360: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655212321 [14-06-2022 10:12:01]20360: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 10:12:03]20360: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 10:12:04]20360: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-1012/20220614-101201-YqiJIcj-cTsrTYyKLqqXrwAAACw [14-06-2022 10:12:04]20360: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 10:12:04]20360: WAF :: fetched 2 new logs [14-06-2022 10:13:01]23222: WAF :: fetched 1 new logs [14-06-2022 10:14:02]26119: WAF :: fetched 1 new logs [14-06-2022 10:16:02]31805: WAF :: fetched 1 new logs [14-06-2022 10:19:02]7936: WAF :: fetched 1 new logs [14-06-2022 10:20:01]10819: WAF :: fetched 2 new logs [14-06-2022 10:21:01]13766: WAF :: fetched 1 new logs [14-06-2022 10:22:02]16603: WAF :: fetched 3 new logs [14-06-2022 10:24:02]22520: WAF :: fetched 1 new logs [14-06-2022 10:25:01]25451: WAF :: fetched 2 new logs [14-06-2022 10:29:02]4772: WAF :: fetched 2 new logs [14-06-2022 10:30:01]7607: WAF :: fetched 2 new logs [14-06-2022 10:31:02]10579: WAF :: fetched 1 new logs [14-06-2022 10:35:02]22055: WAF :: fetched 5 new logs [14-06-2022 10:36:01]24926: WAF :: fetched 1 new logs [14-06-2022 10:37:01]28793: WAF :: fetched 2 new logs [14-06-2022 10:38:02]32103: WAF :: fetched 5 new logs [14-06-2022 10:39:02]3797: WAF :: fetched 6 new logs [14-06-2022 10:40:02]7225: WAF :: fetched 1 new logs [14-06-2022 10:41:01]10150: WAF :: fetched 3 new logs [14-06-2022 10:41:01]10150: Checking for user cron vulnerabilities [14-06-2022 10:44:01]18608: Checking ditributed CMS bruteforce attacks [14-06-2022 10:44:01]18608: WAF :: fetched 1 new logs [14-06-2022 10:46:01]24242: WAF :: fetched 1 new logs [14-06-2022 10:49:02]1030: WAF :: fetched 1 new logs [14-06-2022 10:51:02]6973: WAF :: fetched 4 new logs [14-06-2022 10:53:02]12691: WAF :: fetched 1 new logs [14-06-2022 10:54:01]15439: WAF :: fetched 1 new logs [14-06-2022 10:56:02]21225: WAF :: fetched 2 new logs [14-06-2022 10:57:01]24034: WAF :: fetched 1 new logs [14-06-2022 11:01:01]3422: WAF :: fetched 2 new logs [14-06-2022 11:07:01]23016: WAF :: fetched 2 new logs [14-06-2022 11:07:48]23171: Performed RBL check for 23.111.136.34. [14-06-2022 11:08:01]26022: WAF :: fetched 5 new logs [14-06-2022 11:09:02]29027: WAF :: fetched 6 new logs [14-06-2022 11:10:02]31893: WAF :: fetched 2 new logs [14-06-2022 11:11:01]2569: WAF :: fetched 3 new logs [14-06-2022 11:12:02]5521: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655215922 [14-06-2022 11:12:02]5521: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 11:12:04]5521: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 11:12:04]5521: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-1112/20220614-111202-YqiXMhvdzfqqSas00p0gwAAAABY [14-06-2022 11:12:04]5521: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 11:12:04]5521: WAF :: fetched 2 new logs [14-06-2022 11:13:01]8361: WAF :: fetched 4 new logs [14-06-2022 11:14:01]11304: WAF :: fetched 2 new logs [14-06-2022 11:15:02]14114: WAF :: fetched 2 new logs [14-06-2022 11:16:01]16996: WAF :: fetched 2 new logs [14-06-2022 11:19:01]25654: WAF :: fetched 1 new logs [14-06-2022 11:20:02]28675: WAF :: fetched 4 new logs [14-06-2022 11:21:01]31432: WAF :: fetched 3 new logs [14-06-2022 11:22:02]2075: WAF :: fetched 2 new logs [14-06-2022 11:24:01]8033: WAF :: fetched 3 new logs [14-06-2022 11:25:02]10921: WAF :: fetched 1 new logs [14-06-2022 11:28:02]19693: WAF :: fetched 5 new logs [14-06-2022 11:29:01]22540: WAF :: fetched 2 new logs [14-06-2022 11:30:02]25347: WAF :: fetched 4 new logs [14-06-2022 11:31:01]28244: WAF :: fetched 2 new logs [14-06-2022 11:32:01]31009: WAF :: fetched 2 new logs [14-06-2022 11:35:02]6959: WAF :: fetched 3 new logs [14-06-2022 11:36:02]9754: WAF :: fetched 10 new logs [14-06-2022 11:37:01]12621: WAF :: fetched 1 new logs [14-06-2022 11:38:02]15392: WAF :: fetched 2 new logs [14-06-2022 11:39:01]18247: WAF :: fetched 1 new logs [14-06-2022 11:41:02]23859: WAF :: fetched 3 new logs [14-06-2022 11:41:02]23859: Checking for user cron vulnerabilities [14-06-2022 11:42:01]26642: WAF :: fetched 1 new logs [14-06-2022 11:44:01]32119: Checking ditributed CMS bruteforce attacks [14-06-2022 11:44:01]32119: WAF :: fetched 1 new logs [14-06-2022 11:45:01]2525: WAF :: fetched 2 new logs [14-06-2022 11:46:02]5332: WAF :: fetched 2 new logs [14-06-2022 11:48:02]10635: WAF :: fetched 2 new logs [14-06-2022 11:49:01]13414: WAF :: fetched 2 new logs [14-06-2022 11:50:02]16325: WAF :: fetched 9 new logs [14-06-2022 11:51:01]19247: WAF :: fetched 3 new logs [14-06-2022 11:53:02]24697: WAF :: fetched 2 new logs [14-06-2022 11:56:01]699: WAF :: fetched 2 new logs [14-06-2022 11:57:01]3621: WAF :: fetched 3 new logs [14-06-2022 11:58:02]6490: WAF :: fetched 7 new logs [14-06-2022 12:01:02]15098: WAF :: fetched 2 new logs [14-06-2022 12:01:02]15096: httpd.conf changed. Refreshing watchlist. [14-06-2022 12:02:01]18425: WAF :: fetched 4 new logs [14-06-2022 12:03:01]21347: WAF :: fetched 6 new logs [14-06-2022 12:05:01]26886: WAF :: fetched 2 new logs [14-06-2022 12:06:02]29688: WAF :: fetched 1 new logs [14-06-2022 12:09:02]5629: WAF :: fetched 1 new logs [14-06-2022 12:11:02]11128: WAF :: fetched 1 new logs [14-06-2022 12:12:02]13843: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655219522 [14-06-2022 12:12:02]13843: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 12:12:04]13843: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 12:12:04]13843: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-1212/20220614-121202-YqilQsBk1ML-uyN2D0ic0gAAAA4 [14-06-2022 12:12:04]13843: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 12:12:04]13843: WAF :: fetched 5 new logs [14-06-2022 12:13:01]16558: WAF :: fetched 3 new logs [14-06-2022 12:14:01]19325: WAF :: fetched 3 new logs [14-06-2022 12:15:02]22080: WAF :: fetched 3 new logs [14-06-2022 12:16:01]24847: WAF :: fetched 4 new logs [14-06-2022 12:17:02]27544: WAF :: fetched 4 new logs [14-06-2022 12:18:01]30240: WAF :: fetched 2 new logs [14-06-2022 12:20:02]3406: WAF :: fetched 2 new logs [14-06-2022 12:21:01]6269: WAF :: fetched 2 new logs [14-06-2022 12:24:01]14444: WAF :: fetched 1 new logs [14-06-2022 12:26:02]19931: WAF :: fetched 1 new logs [14-06-2022 12:27:01]22599: WAF :: fetched 1 new logs [14-06-2022 12:28:02]25298: WAF :: fetched 5 new logs [14-06-2022 12:31:01]1191: WAF :: fetched 3 new logs [14-06-2022 12:32:02]4003: WAF :: fetched 1 new logs [14-06-2022 12:34:02]9541: WAF :: fetched 1 new logs [14-06-2022 12:35:01]12240: WAF :: fetched 4 new logs [14-06-2022 12:36:01]15044: WAF :: fetched 3 new logs [14-06-2022 12:37:02]17797: WAF :: fetched 2 new logs [14-06-2022 12:38:01]20504: WAF :: fetched 7 new logs [14-06-2022 12:39:01]23292: WAF :: fetched 1 new logs [14-06-2022 12:41:01]28790: WAF :: fetched 1 new logs [14-06-2022 12:41:01]28790: Checking for user cron vulnerabilities [14-06-2022 12:42:02]31553: WAF :: fetched 3 new logs [14-06-2022 12:44:01]4762: Checking ditributed CMS bruteforce attacks [14-06-2022 12:45:02]: Checking for software updates [14-06-2022 12:46:01]10266: WAF :: fetched 1 new logs [14-06-2022 12:48:02]15676: WAF :: fetched 3 new logs [14-06-2022 12:50:02]21146: WAF :: fetched 3 new logs [14-06-2022 12:51:01]23897: WAF :: fetched 2 new logs [14-06-2022 12:52:02]26633: WAF :: fetched 8 new logs [14-06-2022 12:53:01]29309: WAF :: fetched 1 new logs [14-06-2022 12:54:01]32101: WAF :: fetched 4 new logs [14-06-2022 12:57:02]7988: WAF :: fetched 3 new logs [14-06-2022 12:59:01]13508: WAF :: fetched 3 new logs [14-06-2022 13:00:02]15976: WAF :: fetched 6 new logs [14-06-2022 13:01:01]19233: WAF :: fetched 2 new logs [14-06-2022 13:03:02]24738: WAF :: fetched 3 new logs [14-06-2022 13:06:02]772: WAF :: fetched 1 new logs [14-06-2022 13:07:02]3552: WAF :: fetched 3 new logs [14-06-2022 13:08:01]6402: WAF :: fetched 2 new logs [14-06-2022 13:09:02]9225: WAF :: fetched 1 new logs [14-06-2022 13:12:02]17460: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655223122 [14-06-2022 13:12:02]17460: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 13:12:04]17460: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 13:12:04]17460: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-1312/20220614-131202-YqizUsysud73GQdE2fH34gAAABU [14-06-2022 13:12:04]17460: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 13:12:04]17460: WAF :: fetched 1 new logs [14-06-2022 13:13:01]20139: WAF :: fetched 1 new logs [14-06-2022 13:14:02]22940: WAF :: fetched 1 new logs [14-06-2022 13:15:01]25597: WAF :: fetched 1 new logs [14-06-2022 13:16:01]28343: WAF :: fetched 1 new logs [14-06-2022 13:17:02]31050: WAF :: fetched 2 new logs [14-06-2022 13:20:02]6964: WAF :: fetched 3 new logs [14-06-2022 13:21:01]9799: WAF :: fetched 5 new logs [14-06-2022 13:23:01]15247: WAF :: fetched 2 new logs [14-06-2022 13:25:01]20704: WAF :: fetched 1 new logs [14-06-2022 13:26:01]23469: WAF :: fetched 2 new logs [14-06-2022 13:27:02]26226: WAF :: fetched 1 new logs [14-06-2022 13:28:01]28920: WAF :: fetched 2 new logs [14-06-2022 13:30:02]2136: WAF :: fetched 1 new logs [14-06-2022 13:31:01]4959: WAF :: fetched 2 new logs [14-06-2022 13:32:02]7770: WAF :: fetched 1 new logs [14-06-2022 13:34:01]13225: WAF :: fetched 3 new logs [14-06-2022 13:35:02]15987: WAF :: fetched 5 new logs [14-06-2022 13:36:01]18790: WAF :: fetched 3 new logs [14-06-2022 13:37:01]21535: WAF :: fetched 1 new logs [14-06-2022 13:38:02]24289: WAF :: fetched 4 new logs [14-06-2022 13:39:01]27056: WAF :: fetched 3 new logs [14-06-2022 13:40:02]29772: WAF :: fetched 6 new logs [14-06-2022 13:41:02]32557: WAF :: fetched 1 new logs [14-06-2022 13:41:02]32557: Checking for user cron vulnerabilities [14-06-2022 13:42:01]2875: WAF :: fetched 4 new logs [14-06-2022 13:43:02]5711: WAF :: fetched 2 new logs [14-06-2022 13:44:01]8503: Checking ditributed CMS bruteforce attacks [14-06-2022 13:45:02]: Checking for definition updates [14-06-2022 13:45:02]11224: WAF :: fetched 6 new logs [14-06-2022 13:45:08]11242: Updated virus defnition : signatures.ndb [14-06-2022 13:45:09]11242: Updated virus defnition : malware.expert.ndb [14-06-2022 13:45:09]11242: Updated virus defnition : malware.expert.hdb [14-06-2022 13:46:01]13789: WAF :: fetched 1 new logs [14-06-2022 13:47:02]16705: WAF :: fetched 5 new logs [14-06-2022 13:48:01]19376: WAF :: fetched 1 new logs [14-06-2022 13:50:02]24871: WAF :: fetched 2 new logs [14-06-2022 13:52:02]30449: WAF :: fetched 2 new logs [14-06-2022 13:54:01]3519: WAF :: fetched 1 new logs [14-06-2022 13:55:02]6315: WAF :: fetched 2 new logs [14-06-2022 13:57:02]11755: WAF :: fetched 1 new logs [14-06-2022 13:59:02]17274: WAF :: fetched 2 new logs [14-06-2022 14:00:01]19720: WAF :: fetched 9 new logs [14-06-2022 14:01:01]22931: WAF :: fetched 1 new logs [14-06-2022 14:02:02]25735: WAF :: fetched 3 new logs [14-06-2022 14:07:02]7218: WAF :: fetched 1 new logs [14-06-2022 14:10:02]15489: WAF :: fetched 5 new logs [14-06-2022 14:11:01]18234: WAF :: fetched 1 new logs [14-06-2022 14:12:01]20972: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655226721 [14-06-2022 14:12:01]20972: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 14:12:03]20972: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 14:12:03]20972: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-1412/20220614-141201-YqjBYR4rbO6y4919m-FmfwAAAAU [14-06-2022 14:12:03]20972: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 14:12:04]20972: WAF :: fetched 2 new logs [14-06-2022 14:13:02]23694: WAF :: fetched 1 new logs [14-06-2022 14:14:01]26443: WAF :: fetched 5 new logs [14-06-2022 14:15:01]29201: WAF :: fetched 2 new logs [14-06-2022 14:16:02]31975: WAF :: fetched 1 new logs [14-06-2022 14:17:01]2179: WAF :: fetched 1 new logs [14-06-2022 14:18:02]5146: WAF :: fetched 1 new logs [14-06-2022 14:19:01]7918: WAF :: fetched 2 new logs [14-06-2022 14:20:02]10710: WAF :: fetched 4 new logs [14-06-2022 14:21:01]13513: WAF :: fetched 1 new logs [14-06-2022 14:22:01]16284: WAF :: fetched 1 new logs [14-06-2022 14:24:01]21836: WAF :: fetched 6 new logs [14-06-2022 14:27:01]30135: WAF :: fetched 2 new logs [14-06-2022 14:28:02]487: WAF :: fetched 2 new logs [14-06-2022 14:29:01]3314: WAF :: fetched 4 new logs [14-06-2022 14:30:01]6126: WAF :: fetched 1 new logs [14-06-2022 14:31:02]8919: WAF :: fetched 6 new logs [14-06-2022 14:34:01]17385: WAF :: fetched 2 new logs [14-06-2022 14:36:02]22987: WAF :: fetched 1 new logs [14-06-2022 14:37:01]25697: WAF :: fetched 2 new logs [14-06-2022 14:38:02]28456: WAF :: fetched 1 new logs [14-06-2022 14:40:01]1620: WAF :: fetched 3 new logs [14-06-2022 14:41:02]4495: WAF :: fetched 3 new logs [14-06-2022 14:41:02]4495: Checking for user cron vulnerabilities [14-06-2022 14:42:01]7204: WAF :: fetched 3 new logs [14-06-2022 14:43:01]9898: WAF :: fetched 4 new logs [14-06-2022 14:44:01]12735: Checking ditributed CMS bruteforce attacks [14-06-2022 14:44:02]12735: WAF :: fetched 2 new logs [14-06-2022 14:45:01]15475: WAF :: fetched 3 new logs [14-06-2022 14:46:02]18344: WAF :: fetched 14 new logs [14-06-2022 14:47:01]21037: WAF :: fetched 2 new logs [14-06-2022 14:50:02]29355: WAF :: fetched 3 new logs [14-06-2022 14:51:02]32147: WAF :: fetched 2 new logs [14-06-2022 14:52:01]2498: WAF :: fetched 4 new logs [14-06-2022 14:53:02]5320: Updated license status via CDN [14-06-2022 14:55:01]10861: WAF :: fetched 1 new logs [14-06-2022 14:56:02]13665: WAF :: fetched 2 new logs [14-06-2022 14:58:02]19209: httpd.conf changed. Refreshing watchlist. [14-06-2022 14:59:01]22094: WAF :: fetched 3 new logs [14-06-2022 14:59:02]22092: httpd.conf changed. Refreshing watchlist. [14-06-2022 15:00:01]24602: WAF :: fetched 6 new logs [14-06-2022 15:01:02]27973: Reseting cPGuard inotify settings [14-06-2022 15:01:02]27971: WAF :: fetched 3 new logs [14-06-2022 15:02:02]30764: WAF :: fetched 7 new logs [14-06-2022 15:03:02]1334: httpd.conf changed. Refreshing watchlist. [14-06-2022 15:04:02]4248: WAF :: fetched 3 new logs [14-06-2022 15:05:01]7022: WAF :: fetched 1 new logs [14-06-2022 15:06:01]9829: WAF :: fetched 1 new logs [14-06-2022 15:07:02]12548: WAF :: fetched 5 new logs [14-06-2022 15:08:01]15297: WAF :: fetched 3 new logs [14-06-2022 15:09:01]18145: WAF :: fetched 1 new logs [14-06-2022 15:10:01]20952: WAF :: fetched 11 new logs [14-06-2022 15:12:01]26581: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655230321 [14-06-2022 15:12:01]26581: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 15:12:03]26581: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 15:12:03]26581: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-1512/20220614-151201-YqjPcVpQFzADqtLjeXr3vAAAAAo [14-06-2022 15:12:03]26581: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 15:12:04]26581: WAF :: fetched 2 new logs [14-06-2022 15:14:01]32164: WAF :: fetched 2 new logs [14-06-2022 15:15:01]2542: WAF :: fetched 2 new logs [14-06-2022 15:16:02]5488: WAF :: fetched 2 new logs [14-06-2022 15:17:01]8231: WAF :: fetched 1 new logs [14-06-2022 15:18:01]10992: WAF :: fetched 5 new logs [14-06-2022 15:19:01]13764: WAF :: fetched 2 new logs [14-06-2022 15:20:02]16547: WAF :: fetched 3 new logs [14-06-2022 15:24:02]27651: WAF :: fetched 3 new logs [14-06-2022 15:25:01]30413: WAF :: fetched 2 new logs [14-06-2022 15:26:02]848: WAF :: fetched 8 new logs [14-06-2022 15:27:01]3608: WAF :: fetched 6 new logs [14-06-2022 15:28:02]6425: WAF :: fetched 1 new logs [14-06-2022 15:29:01]9261: WAF :: fetched 3 new logs [14-06-2022 15:30:02]12052: WAF :: fetched 2 new logs [14-06-2022 15:31:02]14850: WAF :: fetched 5 new logs [14-06-2022 15:32:01]17634: WAF :: fetched 3 new logs [14-06-2022 15:33:01]20411: WAF :: fetched 5 new logs [14-06-2022 15:34:01]23180: WAF :: fetched 2 new logs [14-06-2022 15:35:02]25959: WAF :: fetched 6 new logs [14-06-2022 15:36:01]28783: WAF :: fetched 8 new logs [14-06-2022 15:37:02]31524: WAF :: fetched 4 new logs [14-06-2022 15:38:02]1822: WAF :: fetched 3 new logs [14-06-2022 15:39:01]4705: WAF :: fetched 3 new logs [14-06-2022 15:40:02]7461: WAF :: fetched 3 new logs [14-06-2022 15:41:01]10227: Checking for user cron vulnerabilities [14-06-2022 15:42:01]12937: WAF :: fetched 4 new logs [14-06-2022 15:43:02]15678: WAF :: fetched 1 new logs [14-06-2022 15:44:01]18461: Checking ditributed CMS bruteforce attacks [14-06-2022 15:45:02]21187: WAF :: fetched 10 new logs [14-06-2022 15:46:01]23960: WAF :: fetched 2 new logs [14-06-2022 15:48:02]29672: WAF :: fetched 3 new logs [14-06-2022 15:51:01]5742: WAF :: fetched 18 new logs [14-06-2022 15:52:01]8493: WAF :: fetched 8 new logs [14-06-2022 15:54:01]14011: WAF :: fetched 2 new logs [14-06-2022 15:55:02]16789: WAF :: fetched 2 new logs [14-06-2022 15:56:01]19162: WAF :: fetched 4 new logs [14-06-2022 15:59:01]27742: WAF :: fetched 5 new logs [14-06-2022 16:00:01]30239: WAF :: fetched 10 new logs [14-06-2022 16:04:01]9516: WAF :: fetched 2 new logs [14-06-2022 16:05:02]12360: WAF :: fetched 2 new logs [14-06-2022 16:09:01]23435: WAF :: fetched 1 new logs [14-06-2022 16:10:02]26317: WAF :: fetched 4 new logs [14-06-2022 16:11:01]29086: WAF :: fetched 1 new logs [14-06-2022 16:12:02]31836: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655233922 [14-06-2022 16:12:02]31836: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 16:12:04]31836: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 16:12:04]31836: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-1612/20220614-161202-YqjdgjJTCBNr1dS4tugGzgAAAAM [14-06-2022 16:12:04]31836: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 16:12:04]31836: WAF :: fetched 1 new logs [14-06-2022 16:15:02]7744: WAF :: fetched 1 new logs [14-06-2022 16:16:01]10520: WAF :: fetched 7 new logs [14-06-2022 16:17:02]13257: WAF :: fetched 1 new logs [14-06-2022 16:18:01]15942: WAF :: fetched 3 new logs [14-06-2022 16:19:02]18623: WAF :: fetched 1 new logs [14-06-2022 16:20:01]21471: WAF :: fetched 3 new logs [14-06-2022 16:21:02]24328: WAF :: fetched 6 new logs [14-06-2022 16:22:02]27070: WAF :: fetched 1 new logs [14-06-2022 16:23:01]29785: WAF :: fetched 2 new logs [14-06-2022 16:25:02]3094: WAF :: fetched 10 new logs [14-06-2022 16:27:02]8848: WAF :: fetched 3 new logs [14-06-2022 16:28:02]11556: WAF :: fetched 5 new logs [14-06-2022 16:29:01]14309: WAF :: fetched 5 new logs [14-06-2022 16:30:02]17171: WAF :: fetched 2 new logs [14-06-2022 16:31:02]20020: WAF :: fetched 4 new logs [14-06-2022 16:32:01]22795: WAF :: fetched 5 new logs [14-06-2022 16:34:02]28284: WAF :: fetched 4 new logs [14-06-2022 16:35:01]31069: WAF :: fetched 5 new logs [14-06-2022 16:36:02]1499: WAF :: fetched 3 new logs [14-06-2022 16:38:01]6997: WAF :: fetched 8 new logs [14-06-2022 16:39:02]9724: WAF :: fetched 1 new logs [14-06-2022 16:40:01]12525: WAF :: fetched 3 new logs [14-06-2022 16:41:01]15299: WAF :: fetched 5 new logs [14-06-2022 16:41:01]15299: Checking for user cron vulnerabilities [14-06-2022 16:42:02]18043: WAF :: fetched 2 new logs [14-06-2022 16:44:01]23490: Checking ditributed CMS bruteforce attacks [14-06-2022 16:45:02]26353: WAF :: fetched 2 new logs [14-06-2022 16:47:02]31916: WAF :: fetched 2 new logs [14-06-2022 16:48:02]2243: WAF :: fetched 2 new logs [14-06-2022 16:50:02]7898: WAF :: fetched 3 new logs [14-06-2022 16:51:01]10731: WAF :: fetched 1 new logs [14-06-2022 16:52:02]13463: WAF :: fetched 3 new logs [14-06-2022 16:54:01]18959: WAF :: fetched 7 new logs [14-06-2022 16:55:02]21740: WAF :: fetched 4 new logs [14-06-2022 16:58:02]29907: WAF :: fetched 3 new logs [14-06-2022 16:59:01]32701: WAF :: fetched 3 new logs [14-06-2022 17:00:02]2879: WAF :: fetched 4 new logs [14-06-2022 17:02:01]8942: WAF :: fetched 3 new logs [14-06-2022 17:04:01]14419: WAF :: fetched 2 new logs [14-06-2022 17:05:02]17297: WAF :: fetched 4 new logs [14-06-2022 17:07:01]22720: WAF :: fetched 1 new logs [14-06-2022 17:08:02]25482: WAF :: fetched 1 new logs [14-06-2022 17:09:01]28196: WAF :: fetched 3 new logs [14-06-2022 17:10:01]31009: WAF :: fetched 2 new logs [14-06-2022 17:12:01]4219: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655237521 [14-06-2022 17:12:01]4219: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 17:12:03]4219: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 17:12:03]4219: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-1712/20220614-171201-YqjrkaTyGiEKD7QARy1-gQAAACA [14-06-2022 17:12:03]4219: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 17:12:04]4219: WAF :: fetched 3 new logs [14-06-2022 17:13:02]7001: WAF :: fetched 1 new logs [14-06-2022 17:15:01]12499: WAF :: fetched 2 new logs [14-06-2022 17:16:02]15307: WAF :: fetched 3 new logs [14-06-2022 17:17:02]17999: WAF :: fetched 5 new logs [14-06-2022 17:19:01]23415: WAF :: fetched 2 new logs [14-06-2022 17:21:01]29067: WAF :: fetched 5 new logs [14-06-2022 17:22:01]31794: WAF :: fetched 2 new logs [14-06-2022 17:23:02]2159: WAF :: fetched 1 new logs [14-06-2022 17:24:02]4940: WAF :: fetched 2 new logs [14-06-2022 17:26:01]10524: WAF :: fetched 2 new logs [14-06-2022 17:27:02]13233: WAF :: fetched 5 new logs [14-06-2022 17:28:01]15925: WAF :: fetched 2 new logs [14-06-2022 17:29:02]18628: WAF :: fetched 1 new logs [14-06-2022 17:30:01]21384: WAF :: fetched 2 new logs [14-06-2022 17:32:02]26899: WAF :: fetched 2 new logs [14-06-2022 17:33:01]29565: WAF :: fetched 2 new logs [14-06-2022 17:35:02]2777: WAF :: fetched 2 new logs [14-06-2022 17:36:01]5657: WAF :: fetched 2 new logs [14-06-2022 17:38:01]11091: WAF :: fetched 6 new logs [14-06-2022 17:39:01]13786: WAF :: fetched 2 new logs [14-06-2022 17:41:02]19472: Checking for user cron vulnerabilities [14-06-2022 17:42:01]22172: WAF :: fetched 1 new logs [14-06-2022 17:43:02]24919: WAF :: fetched 2 new logs [14-06-2022 17:44:02]27699: Checking ditributed CMS bruteforce attacks [14-06-2022 17:44:02]27699: WAF :: fetched 1 new logs [14-06-2022 17:45:02]30514: WAF :: fetched 1 new logs [14-06-2022 17:46:02]969: WAF :: fetched 3 new logs [14-06-2022 17:48:02]6552: WAF :: fetched 4 new logs [14-06-2022 17:49:01]9277: WAF :: fetched 11 new logs [14-06-2022 17:51:01]14855: WAF :: fetched 2 new logs [14-06-2022 17:52:02]17549: WAF :: fetched 10 new logs [14-06-2022 17:53:01]20210: WAF :: fetched 4 new logs [14-06-2022 17:56:01]28446: WAF :: fetched 4 new logs [14-06-2022 17:57:02]31190: WAF :: fetched 9 new logs [14-06-2022 17:58:01]1480: WAF :: fetched 2 new logs [14-06-2022 17:59:02]4223: WAF :: fetched 2 new logs [14-06-2022 18:00:01]6761: WAF :: fetched 2 new logs [14-06-2022 18:01:01]9887: WAF :: fetched 6 new logs [14-06-2022 18:04:02]17976: WAF :: fetched 4 new logs [14-06-2022 18:06:02]23462: WAF :: fetched 2 new logs [14-06-2022 18:07:01]26143: WAF :: fetched 2 new logs [14-06-2022 18:08:02]28895: WAF :: fetched 4 new logs [14-06-2022 18:10:01]1982: WAF :: fetched 3 new logs [14-06-2022 18:11:02]4813: WAF :: fetched 2 new logs [14-06-2022 18:12:01]7514: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655241121 [14-06-2022 18:12:01]7514: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 18:12:03]7514: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 18:12:04]7514: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-1812/20220614-181201-Yqj5oZbnVzUx0g90ayngVwAAAB8 [14-06-2022 18:12:04]7514: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 18:12:04]7514: WAF :: fetched 188 new logs [14-06-2022 18:13:02]10225: WAF :: fetched 34 new logs [14-06-2022 18:14:02]12890: WAF :: fetched 80 new logs [14-06-2022 18:15:01]15706: WAF :: fetched 134 new logs [14-06-2022 18:16:01]18434: WAF :: fetched 6 new logs [14-06-2022 18:17:02]21111: WAF :: fetched 1 new logs [14-06-2022 18:18:01]23748: WAF :: fetched 4 new logs [14-06-2022 18:19:01]26429: WAF :: fetched 5 new logs [14-06-2022 18:20:02]29227: WAF :: fetched 2 new logs [14-06-2022 18:21:01]31957: WAF :: fetched 4 new logs [14-06-2022 18:22:02]2288: WAF :: fetched 3 new logs [14-06-2022 18:23:02]4985: WAF :: fetched 1 new logs [14-06-2022 18:24:01]7641: WAF :: fetched 3 new logs [14-06-2022 18:25:02]10398: WAF :: fetched 2 new logs [14-06-2022 18:27:01]15752: WAF :: fetched 2 new logs [14-06-2022 18:28:02]18463: WAF :: fetched 2 new logs [14-06-2022 18:29:01]21090: WAF :: fetched 2 new logs [14-06-2022 18:30:01]23855: WAF :: fetched 7 new logs [14-06-2022 18:31:02]26649: WAF :: fetched 1 new logs [14-06-2022 18:32:01]29339: WAF :: fetched 1 new logs [14-06-2022 18:33:02]32054: WAF :: fetched 4 new logs [14-06-2022 18:34:02]2350: WAF :: fetched 1 new logs [14-06-2022 18:35:01]5222: WAF :: fetched 2 new logs [14-06-2022 18:41:02]21516: WAF :: fetched 14 new logs [14-06-2022 18:41:02]21516: Checking for user cron vulnerabilities [14-06-2022 18:43:01]26982: WAF :: fetched 82 new logs [14-06-2022 18:44:02]29678: Checking ditributed CMS bruteforce attacks [14-06-2022 18:44:02]29678: WAF :: fetched 15 new logs [14-06-2022 18:45:01]32395: WAF :: fetched 3 new logs [14-06-2022 18:46:02]2847: WAF :: fetched 2 new logs [14-06-2022 18:47:01]5557: WAF :: fetched 5 new logs [14-06-2022 18:48:02]8321: WAF :: fetched 4 new logs [14-06-2022 18:49:01]10991: WAF :: fetched 6 new logs [14-06-2022 18:50:01]13772: WAF :: fetched 2 new logs [14-06-2022 18:51:02]16495: WAF :: fetched 6 new logs [14-06-2022 18:54:02]24463: WAF :: fetched 59 new logs [14-06-2022 18:55:01]27211: WAF :: fetched 21 new logs [14-06-2022 18:56:02]29912: WAF :: fetched 4 new logs [14-06-2022 19:00:01]8154: WAF :: fetched 3 new logs [14-06-2022 19:01:02]11337: WAF :: fetched 1 new logs [14-06-2022 19:04:01]19335: WAF :: fetched 2 new logs [14-06-2022 19:07:01]27416: WAF :: fetched 1 new logs [14-06-2022 19:08:02]30169: WAF :: fetched 5 new logs [14-06-2022 19:10:02]3265: WAF :: fetched 1 new logs [14-06-2022 19:12:02]8741: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655244722 [14-06-2022 19:12:02]8741: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 19:12:04]8741: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 19:12:04]8741: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-1912/20220614-191202-YqkHsqyXhxuR2RgcypNMKAAAABM [14-06-2022 19:12:04]8741: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 19:12:04]8741: WAF :: fetched 1 new logs [14-06-2022 19:13:01]11405: WAF :: fetched 4 new logs [14-06-2022 19:14:01]14059: WAF :: fetched 2 new logs [14-06-2022 19:15:02]16838: WAF :: fetched 2 new logs [14-06-2022 19:16:02]19542: WAF :: fetched 12 new logs [14-06-2022 19:17:01]22174: WAF :: fetched 3 new logs [14-06-2022 19:18:02]24846: WAF :: fetched 3 new logs [14-06-2022 19:19:02]27486: WAF :: fetched 1 new logs [14-06-2022 19:20:01]30262: WAF :: fetched 1 new logs [14-06-2022 19:21:02]597: WAF :: fetched 5 new logs [14-06-2022 19:22:01]3309: WAF :: fetched 4 new logs [14-06-2022 19:23:02]6043: WAF :: fetched 2 new logs [14-06-2022 19:24:02]8691: WAF :: fetched 4 new logs [14-06-2022 19:25:01]11417: WAF :: fetched 7 new logs [14-06-2022 19:26:02]14241: WAF :: fetched 5 new logs [14-06-2022 19:30:02]24983: WAF :: fetched 2 new logs [14-06-2022 19:31:01]27680: WAF :: fetched 1 new logs [14-06-2022 19:32:02]30407: WAF :: fetched 4 new logs [14-06-2022 19:33:01]628: WAF :: fetched 1 new logs [14-06-2022 19:34:01]3338: WAF :: fetched 1 new logs [14-06-2022 19:35:02]6174: WAF :: fetched 1 new logs [14-06-2022 19:36:01]8867: WAF :: fetched 6 new logs [14-06-2022 19:37:02]11575: WAF :: fetched 2 new logs [14-06-2022 19:38:02]14191: WAF :: fetched 1 new logs [14-06-2022 19:39:01]16827: WAF :: fetched 1 new logs [14-06-2022 19:41:01]22237: Checking for user cron vulnerabilities [14-06-2022 19:42:02]24919: WAF :: fetched 3 new logs [14-06-2022 19:44:02]30196: Checking ditributed CMS bruteforce attacks [14-06-2022 19:44:02]30196: WAF :: fetched 1 new logs [14-06-2022 19:45:01]: Checking for definition updates [14-06-2022 19:45:02]564: WAF :: fetched 3 new logs [14-06-2022 19:47:02]6046: WAF :: fetched 6 new logs [14-06-2022 19:48:01]8685: WAF :: fetched 2 new logs [14-06-2022 19:49:02]11373: WAF :: fetched 1 new logs [14-06-2022 19:50:01]13924: WAF :: fetched 1 new logs [14-06-2022 19:52:01]19472: WAF :: fetched 1 new logs [14-06-2022 19:53:01]22109: WAF :: fetched 1 new logs [14-06-2022 19:54:02]24745: WAF :: fetched 1 new logs [14-06-2022 19:56:01]30115: WAF :: fetched 2 new logs [14-06-2022 19:57:02]330: WAF :: fetched 2 new logs [14-06-2022 19:59:02]5802: WAF :: fetched 2 new logs [14-06-2022 20:01:01]11350: WAF :: fetched 3 new logs [14-06-2022 20:02:02]14016: WAF :: fetched 4 new logs [14-06-2022 20:04:01]19313: WAF :: fetched 35 new logs [14-06-2022 20:05:02]22123: WAF :: fetched 33 new logs [14-06-2022 20:07:01]27442: WAF :: fetched 2 new logs [14-06-2022 20:08:01]30102: WAF :: fetched 6 new logs [14-06-2022 20:12:01]8575: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655248321 [14-06-2022 20:12:01]8575: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 20:12:03]8575: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 20:12:04]8575: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-2012/20220614-201201-YqkVwRcW9nTNie82zRoXkQAAABE [14-06-2022 20:12:04]8575: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [14-06-2022 20:12:04]8575: WAF :: fetched 1 new logs [14-06-2022 20:13:02]11217: WAF :: fetched 2 new logs [14-06-2022 20:14:01]13883: WAF :: fetched 1 new logs [14-06-2022 20:15:01]16603: WAF :: fetched 2 new logs [14-06-2022 20:16:01]19300: WAF :: fetched 1 new logs [14-06-2022 20:17:01]21914: WAF :: fetched 3 new logs [14-06-2022 20:19:02]27245: WAF :: fetched 2 new logs [14-06-2022 20:20:01]30038: WAF :: fetched 7 new logs [14-06-2022 20:21:01]368: WAF :: fetched 1 new logs [14-06-2022 20:23:01]5899: WAF :: fetched 2 new logs [14-06-2022 20:24:02]8617: WAF :: fetched 3 new logs [14-06-2022 20:25:01]11360: WAF :: fetched 2 new logs [14-06-2022 20:26:01]14072: WAF :: fetched 2 new logs [14-06-2022 20:27:02]16796: WAF :: fetched 2 new logs [14-06-2022 20:28:01]19478: WAF :: fetched 2 new logs [14-06-2022 20:29:02]22106: WAF :: fetched 2 new logs [14-06-2022 20:31:01]27543: WAF :: fetched 4 new logs [14-06-2022 20:33:01]466: WAF :: fetched 2 new logs [14-06-2022 20:34:02]3167: WAF :: fetched 1 new logs [14-06-2022 20:35:01]5997: WAF :: fetched 1 new logs [14-06-2022 20:36:01]8715: WAF :: fetched 1 new logs [14-06-2022 20:38:01]13998: WAF :: fetched 7 new logs [14-06-2022 20:39:01]16629: WAF :: fetched 2 new logs [14-06-2022 20:41:02]22079: WAF :: fetched 5 new logs [14-06-2022 20:41:02]22079: Checking for user cron vulnerabilities [14-06-2022 20:42:01]24716: WAF :: fetched 2 new logs [14-06-2022 20:43:02]27352: WAF :: fetched 4 new logs [14-06-2022 20:44:01]29995: Checking ditributed CMS bruteforce attacks [14-06-2022 20:44:01]29995: WAF :: fetched 2 new logs [14-06-2022 20:46:02]3045: WAF :: fetched 4 new logs [14-06-2022 20:47:01]5726: WAF :: fetched 2 new logs [14-06-2022 20:48:02]8392: WAF :: fetched 1 new logs [14-06-2022 20:52:01]19096: WAF :: fetched 2 new logs [14-06-2022 20:54:01]24290: WAF :: fetched 5 new logs [14-06-2022 20:55:01]27105: WAF :: fetched 44 new logs [14-06-2022 20:56:01]29809: WAF :: fetched 140 new logs [14-06-2022 20:57:02]32482: WAF :: fetched 149 new logs [14-06-2022 20:58:01]2727: WAF :: fetched 1 new logs [14-06-2022 20:59:02]5489: WAF :: fetched 4 new logs [14-06-2022 21:00:01]7944: WAF :: fetched 1 new logs [14-06-2022 21:01:02]11152: WAF :: fetched 1 new logs [14-06-2022 21:02:01]13834: WAF :: fetched 2 new logs [14-06-2022 21:03:01]16514: WAF :: fetched 1 new logs [14-06-2022 21:04:02]19195: WAF :: fetched 5 new logs [14-06-2022 21:05:01]21879: WAF :: fetched 4 new logs [14-06-2022 21:06:01]24598: WAF :: fetched 4 new logs [14-06-2022 21:07:01]27236: WAF :: fetched 5 new logs [14-06-2022 21:08:02]29950: WAF :: fetched 2 new logs [14-06-2022 21:09:02]32562: WAF :: fetched 5 new logs [14-06-2022 21:10:02]2873: WAF :: fetched 8 new logs [14-06-2022 21:11:01]5690: WAF :: fetched 3 new logs [14-06-2022 21:12:02]8344: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655251922 [14-06-2022 21:12:02]8344: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 21:12:04]8344: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 21:12:04]8344: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-2112/20220614-211202-Yqkj0go2CQz0Cu5k6ebhHQAAAAQ [14-06-2022 21:12:04]8344: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [14-06-2022 21:12:04]8344: WAF :: fetched 1 new logs [14-06-2022 21:13:01]10972: WAF :: fetched 8 new logs [14-06-2022 21:14:02]13636: WAF :: fetched 14 new logs [14-06-2022 21:15:01]16270: WAF :: fetched 28 new logs [14-06-2022 21:16:02]19018: WAF :: fetched 1 new logs [14-06-2022 21:17:01]21628: WAF :: fetched 4 new logs [14-06-2022 21:18:01]24257: WAF :: fetched 4 new logs [14-06-2022 21:19:02]26910: WAF :: fetched 4 new logs [14-06-2022 21:20:01]29540: WAF :: fetched 7 new logs [14-06-2022 21:21:02]32316: WAF :: fetched 8 new logs [14-06-2022 21:22:01]2661: WAF :: fetched 6 new logs [14-06-2022 21:23:01]5404: WAF :: fetched 2 new logs [14-06-2022 21:24:01]8089: WAF :: fetched 4 new logs [14-06-2022 21:25:01]10754: WAF :: fetched 2 new logs [14-06-2022 21:26:02]13533: WAF :: fetched 4 new logs [14-06-2022 21:27:01]16199: WAF :: fetched 5 new logs [14-06-2022 21:28:01]18836: WAF :: fetched 3 new logs [14-06-2022 21:29:02]21504: WAF :: fetched 5 new logs [14-06-2022 21:30:01]24163: WAF :: fetched 6 new logs [14-06-2022 21:31:01]26925: WAF :: fetched 7 new logs [14-06-2022 21:32:02]29665: WAF :: fetched 16 new logs [14-06-2022 21:33:01]32336: WAF :: fetched 118 new logs [14-06-2022 21:34:02]2655: WAF :: fetched 122 new logs [14-06-2022 21:35:02]5355: WAF :: fetched 7 new logs [14-06-2022 21:36:02]8146: WAF :: fetched 4 new logs [14-06-2022 21:37:01]10803: WAF :: fetched 4 new logs [14-06-2022 21:38:02]13482: WAF :: fetched 3 new logs [14-06-2022 21:39:02]16139: WAF :: fetched 5 new logs [14-06-2022 21:40:02]18796: WAF :: fetched 1 new logs [14-06-2022 21:41:01]21604: WAF :: fetched 2 new logs [14-06-2022 21:41:01]21604: Checking for user cron vulnerabilities [14-06-2022 21:43:01]26889: WAF :: fetched 2 new logs [14-06-2022 21:44:02]29576: Checking ditributed CMS bruteforce attacks [14-06-2022 21:44:02]29576: WAF :: fetched 3 new logs [14-06-2022 21:45:01]32217: WAF :: fetched 1 new logs [14-06-2022 21:48:02]8036: WAF :: fetched 4 new logs [14-06-2022 21:49:02]10686: WAF :: fetched 5 new logs [14-06-2022 21:50:02]13402: WAF :: fetched 2 new logs [14-06-2022 21:53:02]21463: WAF :: fetched 5 new logs [14-06-2022 21:54:01]24049: WAF :: fetched 4 new logs [14-06-2022 21:56:01]29503: WAF :: fetched 5 new logs [14-06-2022 21:57:01]32166: WAF :: fetched 1 new logs [14-06-2022 21:58:02]2473: WAF :: fetched 6 new logs [14-06-2022 21:59:01]5221: WAF :: fetched 6 new logs [14-06-2022 22:00:01]7604: WAF :: fetched 2 new logs [14-06-2022 22:01:01]10822: WAF :: fetched 7 new logs [14-06-2022 22:02:02]13507: WAF :: fetched 6 new logs [14-06-2022 22:03:01]16166: WAF :: fetched 80 new logs [14-06-2022 22:04:01]18834: WAF :: fetched 53 new logs [14-06-2022 22:06:01]24240: WAF :: fetched 2 new logs [14-06-2022 22:07:01]26927: WAF :: fetched 2 new logs [14-06-2022 22:07:07]26930: Performing Domain reputation checks [14-06-2022 22:08:02]29644: WAF :: fetched 2 new logs [14-06-2022 22:09:01]32286: WAF :: fetched 4 new logs [14-06-2022 22:10:02]2595: WAF :: fetched 2 new logs [14-06-2022 22:11:01]5396: WAF :: fetched 1 new logs [14-06-2022 22:12:01]8041: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655255521 [14-06-2022 22:12:01]8041: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 22:12:03]8041: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 22:12:03]8041: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-2212/20220614-221201-Yqkx4X_2wd1jK2tbMQyRfgAAABk [14-06-2022 22:12:03]8041: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [14-06-2022 22:12:03]8041: WAF :: fetched 1 new logs [14-06-2022 22:13:02]10702: WAF :: fetched 2 new logs [14-06-2022 22:15:02]15971: WAF :: fetched 1 new logs [14-06-2022 22:16:01]18679: WAF :: fetched 2 new logs [14-06-2022 22:17:01]21330: WAF :: fetched 3 new logs [14-06-2022 22:18:02]23969: WAF :: fetched 1 new logs [14-06-2022 22:19:01]26739: WAF :: fetched 2 new logs [14-06-2022 22:20:02]29416: WAF :: fetched 3 new logs [14-06-2022 22:21:02]32275: WAF :: fetched 7 new logs [14-06-2022 22:22:01]2535: WAF :: fetched 4 new logs [14-06-2022 22:23:02]5265: WAF :: fetched 4 new logs [14-06-2022 22:24:01]7913: WAF :: fetched 2 new logs [14-06-2022 22:25:02]10617: WAF :: fetched 4 new logs [14-06-2022 22:27:01]15927: WAF :: fetched 2 new logs [14-06-2022 22:29:01]21252: WAF :: fetched 100 new logs [14-06-2022 22:30:02]23925: WAF :: fetched 21 new logs [14-06-2022 22:31:01]26659: WAF :: fetched 6 new logs [14-06-2022 22:32:01]29347: WAF :: fetched 4 new logs [14-06-2022 22:33:02]32018: WAF :: fetched 5 new logs [14-06-2022 22:34:01]2233: WAF :: fetched 1 new logs [14-06-2022 22:35:02]4980: WAF :: fetched 2 new logs [14-06-2022 22:36:02]7736: WAF :: fetched 2 new logs [14-06-2022 22:37:01]10353: WAF :: fetched 4 new logs [14-06-2022 22:40:02]18298: WAF :: fetched 87 new logs [14-06-2022 22:41:01]21019: WAF :: fetched 35 new logs [14-06-2022 22:41:01]21019: Checking for user cron vulnerabilities [14-06-2022 22:44:01]28933: Checking ditributed CMS bruteforce attacks [14-06-2022 22:44:01]28933: WAF :: fetched 2 new logs [14-06-2022 22:46:01]1977: WAF :: fetched 1 new logs [14-06-2022 22:47:01]4784: WAF :: fetched 79 new logs [14-06-2022 22:48:02]7484: WAF :: fetched 40 new logs [14-06-2022 22:49:01]10134: WAF :: fetched 3 new logs [14-06-2022 22:50:02]12837: WAF :: fetched 2 new logs [14-06-2022 22:52:01]18352: WAF :: fetched 2 new logs [14-06-2022 22:54:01]23714: WAF :: fetched 7 new logs [14-06-2022 22:55:02]26425: WAF :: fetched 3 new logs [14-06-2022 22:56:02]29191: WAF :: fetched 1 new logs [14-06-2022 22:57:01]31862: WAF :: fetched 2 new logs [14-06-2022 22:58:02]2166: WAF :: fetched 3 new logs [14-06-2022 22:59:01]4867: WAF :: fetched 3 new logs [14-06-2022 23:00:01]7326: WAF :: fetched 3 new logs [14-06-2022 23:01:02]10587: WAF :: fetched 2 new logs [14-06-2022 23:02:01]13263: WAF :: fetched 7 new logs [14-06-2022 23:03:02]15973: WAF :: fetched 10 new logs [14-06-2022 23:04:02]18642: WAF :: fetched 6 new logs [14-06-2022 23:05:01]21301: WAF :: fetched 5 new logs [14-06-2022 23:06:02]24110: WAF :: fetched 7 new logs [14-06-2022 23:07:01]26738: WAF :: fetched 6 new logs [14-06-2022 23:07:39]26908: Performed RBL check for 23.111.136.34. [14-06-2022 23:08:01]29480: WAF :: fetched 8 new logs [14-06-2022 23:09:02]32213: WAF :: fetched 7 new logs [14-06-2022 23:10:01]2529: WAF :: fetched 8 new logs [14-06-2022 23:11:02]5496: WAF :: fetched 6 new logs [14-06-2022 23:12:01]8161: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655259121 [14-06-2022 23:12:01]8161: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-06-2022 23:12:03]8161: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-06-2022 23:12:04]8161: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220614/20220614-2312/20220614-231201-Yqk_8ZRsv8bmb-abPz_HXwAAAAU [14-06-2022 23:12:04]8161: WAF :: No suitable log file found. Using SQLite.. [14-06-2022 23:12:04]8161: WAF :: fetched 1206 new logs [14-06-2022 23:13:02]10864: WAF :: fetched 3 new logs [14-06-2022 23:15:01]16187: WAF :: fetched 2 new logs [14-06-2022 23:17:01]21592: WAF :: fetched 2 new logs [14-06-2022 23:18:02]24554: WAF :: fetched 2 new logs [14-06-2022 23:19:01]27185: WAF :: fetched 1 new logs [14-06-2022 23:20:01]29884: WAF :: fetched 3 new logs [14-06-2022 23:21:02]32749: WAF :: fetched 6 new logs [14-06-2022 23:22:01]3070: WAF :: fetched 2 new logs [14-06-2022 23:23:02]5836: WAF :: fetched 7 new logs [14-06-2022 23:24:01]8496: WAF :: fetched 6 new logs [14-06-2022 23:25:01]11153: WAF :: fetched 4 new logs [14-06-2022 23:26:02]13947: WAF :: fetched 6 new logs [14-06-2022 23:27:01]16626: WAF :: fetched 9 new logs [14-06-2022 23:28:02]19301: WAF :: fetched 4 new logs [14-06-2022 23:29:01]21923: WAF :: fetched 4 new logs [14-06-2022 23:30:01]24603: WAF :: fetched 4 new logs [14-06-2022 23:31:02]27418: WAF :: fetched 3 new logs [14-06-2022 23:32:01]30054: WAF :: fetched 4 new logs [14-06-2022 23:34:01]2955: WAF :: fetched 3 new logs [14-06-2022 23:35:02]5694: WAF :: fetched 5 new logs [14-06-2022 23:37:01]11134: WAF :: fetched 2 new logs [14-06-2022 23:40:02]19082: WAF :: fetched 4 new logs [14-06-2022 23:41:02]21866: WAF :: fetched 1 new logs [14-06-2022 23:41:02]21866: Checking for user cron vulnerabilities [14-06-2022 23:42:01]24543: WAF :: fetched 1 new logs [14-06-2022 23:44:01]29878: Checking ditributed CMS bruteforce attacks [14-06-2022 23:44:01]29878: WAF :: fetched 2 new logs [14-06-2022 23:45:02]32587: WAF :: fetched 8 new logs [14-06-2022 23:47:02]5728: WAF :: fetched 70 new logs [14-06-2022 23:48:02]8411: WAF :: fetched 28 new logs [14-06-2022 23:49:01]11081: WAF :: fetched 2 new logs [14-06-2022 23:52:01]19264: WAF :: fetched 1 new logs [14-06-2022 23:54:02]24714: WAF :: fetched 3 new logs [14-06-2022 23:55:01]27433: WAF :: fetched 5 new logs [14-06-2022 23:55:01]27429: httpd.conf changed. Refreshing watchlist. [14-06-2022 23:56:02]30232: WAF :: fetched 6 new logs [14-06-2022 23:58:01]3154: WAF :: fetched 1 new logs [14-06-2022 23:59:02]5909: WAF :: fetched 84 new logs [15-06-2022 00:00:02]8332: WAF :: fetched 96 new logs [15-06-2022 00:01:01]11727: WAF :: fetched 69 new logs [15-06-2022 00:01:02]11729: httpd.conf changed. Refreshing watchlist. [15-06-2022 00:01:04]11727: Sending daily report for June 15, 2022 [15-06-2022 00:02:01]14458: WAF :: fetched 22 new logs [15-06-2022 00:03:02]17136: WAF :: fetched 2 new logs [15-06-2022 00:04:01]19741: WAF :: fetched 6 new logs [15-06-2022 00:05:02]22422: Deleted 3 entries older than 6 MONTH from scanner_logs [15-06-2022 00:05:02]22422: Deleted 0 files from Quarantine [15-06-2022 00:06:01]25200: WAF :: fetched 3 new logs [15-06-2022 00:07:01]27878: WAF :: fetched 8 new logs [15-06-2022 00:09:01]911: WAF :: fetched 1 new logs [15-06-2022 00:10:02]3672: WAF :: fetched 2 new logs [15-06-2022 00:11:02]6558: WAF :: fetched 5 new logs [15-06-2022 00:12:01]9246: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655262721 [15-06-2022 00:12:01]9246: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 00:12:03]9246: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 00:12:03]9246: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-0012/20220615-001201-YqlOAW5wdHgOToYStR9_fAAAAA4 [15-06-2022 00:12:03]9246: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [15-06-2022 00:12:04]9246: WAF :: fetched 1 new logs [15-06-2022 00:13:02]11967: WAF :: fetched 6 new logs [15-06-2022 00:14:01]14625: WAF :: fetched 6 new logs [15-06-2022 00:17:01]22759: WAF :: fetched 9 new logs [15-06-2022 00:18:02]25447: WAF :: fetched 2 new logs [15-06-2022 00:19:01]28092: WAF :: fetched 81 new logs [15-06-2022 00:20:01]30747: WAF :: fetched 78 new logs [15-06-2022 00:21:02]1172: WAF :: fetched 130 new logs [15-06-2022 00:22:01]3854: WAF :: fetched 49 new logs [15-06-2022 00:23:02]6536: WAF :: fetched 3 new logs [15-06-2022 00:24:01]9186: WAF :: fetched 2 new logs [15-06-2022 00:26:02]14661: WAF :: fetched 9 new logs [15-06-2022 00:29:01]22584: WAF :: fetched 2 new logs [15-06-2022 00:30:02]25302: WAF :: fetched 1 new logs [15-06-2022 00:32:01]30707: WAF :: fetched 1 new logs [15-06-2022 00:35:02]6434: WAF :: fetched 2 new logs [15-06-2022 00:37:01]11837: WAF :: fetched 2 new logs [15-06-2022 00:38:02]14498: WAF :: fetched 3 new logs [15-06-2022 00:39:01]17148: WAF :: fetched 2 new logs [15-06-2022 00:40:02]19787: WAF :: fetched 2 new logs [15-06-2022 00:41:02]22534: Checking for user cron vulnerabilities [15-06-2022 00:42:01]25164: WAF :: fetched 2 new logs [15-06-2022 00:44:01]30463: Checking ditributed CMS bruteforce attacks [15-06-2022 00:44:01]30463: WAF :: fetched 2 new logs [15-06-2022 00:45:01]: Checking for software updates [15-06-2022 00:45:02]691: WAF :: fetched 4 new logs [15-06-2022 00:46:01]3528: WAF :: fetched 6 new logs [15-06-2022 00:47:02]6268: WAF :: fetched 3 new logs [15-06-2022 00:48:02]8921: WAF :: fetched 4 new logs [15-06-2022 00:50:01]14283: WAF :: fetched 2 new logs [15-06-2022 00:53:02]22351: WAF :: fetched 2 new logs [15-06-2022 00:54:02]24969: WAF :: fetched 1 new logs [15-06-2022 00:55:01]27689: WAF :: fetched 6 new logs [15-06-2022 00:56:02]30478: WAF :: fetched 39 new logs [15-06-2022 00:57:01]678: WAF :: fetched 80 new logs [15-06-2022 00:58:02]3417: WAF :: fetched 4 new logs [15-06-2022 00:59:01]5923: WAF :: fetched 4 new logs [15-06-2022 01:02:02]15260: WAF :: fetched 2 new logs [15-06-2022 01:05:02]24091: WAF :: fetched 3 new logs [15-06-2022 01:06:01]27034: WAF :: fetched 4 new logs [15-06-2022 01:07:01]29823: WAF :: fetched 2 new logs [15-06-2022 01:08:02]32750: WAF :: fetched 4 new logs [15-06-2022 01:09:02]2992: WAF :: fetched 8 new logs [15-06-2022 01:12:02]11557: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655266322 [15-06-2022 01:12:02]11557: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 01:12:04]11557: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 01:12:04]11557: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-0112/20220615-011202-YqlcEgJBDZiz0-J09U_1vwAAACI [15-06-2022 01:12:04]11557: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [15-06-2022 01:12:04]11557: WAF :: fetched 1 new logs [15-06-2022 01:13:01]14210: WAF :: fetched 26 new logs [15-06-2022 01:14:02]16884: WAF :: fetched 5 new logs [15-06-2022 01:15:02]19668: WAF :: fetched 3 new logs [15-06-2022 01:16:01]22644: WAF :: fetched 5 new logs [15-06-2022 01:17:02]25380: WAF :: fetched 5 new logs [15-06-2022 01:18:01]28073: WAF :: fetched 6 new logs [15-06-2022 01:20:01]1628: WAF :: fetched 4 new logs [15-06-2022 01:21:01]4752: WAF :: fetched 4 new logs [15-06-2022 01:22:02]7485: WAF :: fetched 2 new logs [15-06-2022 01:23:01]10102: WAF :: fetched 3 new logs [15-06-2022 01:25:01]15752: WAF :: fetched 2 new logs [15-06-2022 01:27:02]21528: WAF :: fetched 42 new logs [15-06-2022 01:28:01]24238: WAF :: fetched 52 new logs [15-06-2022 01:29:01]26936: WAF :: fetched 64 new logs [15-06-2022 01:30:02]30100: WAF :: fetched 47 new logs [15-06-2022 01:31:01]489: WAF :: fetched 46 new logs [15-06-2022 01:32:02]3331: WAF :: fetched 2 new logs [15-06-2022 01:33:01]6245: WAF :: fetched 2 new logs [15-06-2022 01:35:02]12121: WAF :: fetched 1 new logs [15-06-2022 01:36:02]14909: WAF :: fetched 7 new logs [15-06-2022 01:37:02]17763: WAF :: fetched 7 new logs [15-06-2022 01:38:01]20399: WAF :: fetched 2 new logs [15-06-2022 01:39:02]23451: WAF :: fetched 4 new logs [15-06-2022 01:40:01]26368: WAF :: fetched 4 new logs [15-06-2022 01:41:01]29263: WAF :: fetched 1 new logs [15-06-2022 01:41:01]29263: Checking for user cron vulnerabilities [15-06-2022 01:42:02]32248: WAF :: fetched 1 new logs [15-06-2022 01:43:01]2808: WAF :: fetched 120 new logs [15-06-2022 01:44:02]5811: Checking ditributed CMS bruteforce attacks [15-06-2022 01:44:02]5811: WAF :: fetched 189 new logs [15-06-2022 01:45:01]: Checking for definition updates [15-06-2022 01:45:01]8645: WAF :: fetched 57 new logs [15-06-2022 01:47:01]14035: WAF :: fetched 3 new logs [15-06-2022 01:49:02]19674: WAF :: fetched 1 new logs [15-06-2022 01:51:02]25377: WAF :: fetched 4 new logs [15-06-2022 01:53:02]31025: WAF :: fetched 4 new logs [15-06-2022 01:56:02]6767: WAF :: fetched 4 new logs [15-06-2022 01:57:01]9445: WAF :: fetched 2 new logs [15-06-2022 01:58:02]12111: WAF :: fetched 1 new logs [15-06-2022 01:59:01]14988: WAF :: fetched 3 new logs [15-06-2022 02:00:02]17592: WAF :: fetched 3 new logs [15-06-2022 02:01:02]20744: WAF :: fetched 4 new logs [15-06-2022 02:02:01]23445: WAF :: fetched 2 new logs [15-06-2022 02:03:01]26099: WAF :: fetched 6 new logs [15-06-2022 02:04:01]28726: WAF :: fetched 2 new logs [15-06-2022 02:05:02]31397: WAF :: fetched 4 new logs [15-06-2022 02:06:01]1710: WAF :: fetched 6 new logs [15-06-2022 02:07:01]4522: WAF :: fetched 2 new logs [15-06-2022 02:08:01]7283: WAF :: fetched 5 new logs [15-06-2022 02:09:02]9999: WAF :: fetched 124 new logs [15-06-2022 02:10:01]12655: WAF :: fetched 6 new logs [15-06-2022 02:11:02]15394: WAF :: fetched 1 new logs [15-06-2022 02:12:02]18126: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655269922 [15-06-2022 02:12:02]18126: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 02:12:04]18126: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 02:12:04]18126: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-0212/20220615-021202-YqlqIol6YKoVNc6bp2d7rAAAAAs [15-06-2022 02:12:04]18126: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 02:12:05]18126: WAF :: fetched 1072 new logs [15-06-2022 02:15:01]26163: WAF :: fetched 1 new logs [15-06-2022 02:17:02]31606: WAF :: fetched 6 new logs [15-06-2022 02:18:01]1808: WAF :: fetched 2 new logs [15-06-2022 02:19:01]4532: WAF :: fetched 4 new logs [15-06-2022 02:21:02]9913: WAF :: fetched 1 new logs [15-06-2022 02:22:01]12663: WAF :: fetched 1 new logs [15-06-2022 02:24:01]18020: WAF :: fetched 4 new logs [15-06-2022 02:25:02]20699: WAF :: fetched 4 new logs [15-06-2022 02:26:02]23375: WAF :: fetched 2 new logs [15-06-2022 02:27:01]26144: WAF :: fetched 10 new logs [15-06-2022 02:28:02]28812: WAF :: fetched 3 new logs [15-06-2022 02:29:01]31399: WAF :: fetched 4 new logs [15-06-2022 02:30:01]1673: WAF :: fetched 3 new logs [15-06-2022 02:31:02]4453: WAF :: fetched 2 new logs [15-06-2022 02:32:01]7172: WAF :: fetched 1 new logs [15-06-2022 02:33:01]9809: WAF :: fetched 2 new logs [15-06-2022 02:34:02]12442: WAF :: fetched 4 new logs [15-06-2022 02:37:01]20172: WAF :: fetched 2 new logs [15-06-2022 02:38:02]23137: WAF :: fetched 1 new logs [15-06-2022 02:41:02]31121: Checking for user cron vulnerabilities [15-06-2022 02:43:01]4417: WAF :: fetched 6 new logs [15-06-2022 02:44:01]7850: Checking ditributed CMS bruteforce attacks [15-06-2022 02:44:02]7850: WAF :: fetched 2 new logs [15-06-2022 02:45:01]10651: WAF :: fetched 3 new logs [15-06-2022 02:46:02]13508: WAF :: fetched 4 new logs [15-06-2022 02:48:01]18832: WAF :: fetched 4 new logs [15-06-2022 02:49:02]21541: WAF :: fetched 2 new logs [15-06-2022 02:51:01]27268: WAF :: fetched 2 new logs [15-06-2022 02:52:01]30188: WAF :: fetched 1 new logs [15-06-2022 02:53:02]904: Updated license status via CDN [15-06-2022 02:55:01]6673: WAF :: fetched 1 new logs [15-06-2022 02:56:01]9473: WAF :: fetched 4 new logs [15-06-2022 03:00:03]20411: Found and updated 32 CMS installations [15-06-2022 03:02:02]26637: WAF :: fetched 5 new logs [15-06-2022 03:02:30]20411: Sending CMS version vulnerability report emails to cpanel users [15-06-2022 03:02:33]20411: Checking wordpress installations for suspicious directories [15-06-2022 03:03:01]29550: WAF :: fetched 12 new logs [15-06-2022 03:04:01]32466: WAF :: fetched 6 new logs [15-06-2022 03:04:27]29585: Sending CMS version vulnerability report emails to cpanel users [15-06-2022 03:04:30]29585: Checking wordpress installations for suspicious directories [15-06-2022 03:05:02]3049: WAF :: fetched 1 new logs [15-06-2022 03:06:01]5840: WAF :: fetched 1 new logs [15-06-2022 03:07:02]8622: WAF :: fetched 2 new logs [15-06-2022 03:08:01]11315: WAF :: fetched 46 new logs [15-06-2022 03:09:01]13989: WAF :: fetched 118 new logs [15-06-2022 03:10:02]16692: WAF :: fetched 44 new logs [15-06-2022 03:11:01]19384: WAF :: fetched 1 new logs [15-06-2022 03:12:01]22124: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655273521 [15-06-2022 03:12:01]22124: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 03:12:03]22124: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 03:12:03]22124: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-0312/20220615-031201-Yql4MWlhgLNJsU_I8M6T3wAAABI [15-06-2022 03:12:03]22124: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [15-06-2022 03:12:04]22124: WAF :: fetched 1 new logs [15-06-2022 03:13:02]24819: WAF :: fetched 76 new logs [15-06-2022 03:14:01]27436: WAF :: fetched 52 new logs [15-06-2022 03:15:02]30114: WAF :: fetched 3 new logs [15-06-2022 03:17:01]3510: WAF :: fetched 3 new logs [15-06-2022 03:18:01]6478: WAF :: fetched 3 new logs [15-06-2022 03:19:02]9195: WAF :: fetched 3 new logs [15-06-2022 03:20:02]11900: WAF :: fetched 2 new logs [15-06-2022 03:22:02]17550: WAF :: fetched 2 new logs [15-06-2022 03:24:01]23148: WAF :: fetched 6 new logs [15-06-2022 03:25:02]25994: WAF :: fetched 115 new logs [15-06-2022 03:27:02]31951: WAF :: fetched 1 new logs [15-06-2022 03:28:01]32630: WAF :: fetched 4 new logs [15-06-2022 03:29:02]23718: WAF :: fetched 7 new logs [15-06-2022 03:30:02]2212: WAF :: fetched 5 new logs [15-06-2022 03:31:01]11862: WAF :: fetched 1 new logs [15-06-2022 03:33:01]17239: WAF :: fetched 4 new logs [15-06-2022 03:35:02]22531: WAF :: fetched 4 new logs [15-06-2022 03:36:01]25199: WAF :: fetched 3 new logs [15-06-2022 03:38:01]30604: WAF :: fetched 2 new logs [15-06-2022 03:39:01]879: WAF :: fetched 117 new logs [15-06-2022 03:41:01]6314: WAF :: fetched 1 new logs [15-06-2022 03:41:01]6314: Checking for user cron vulnerabilities [15-06-2022 03:43:01]11697: WAF :: fetched 1 new logs [15-06-2022 03:44:02]14336: Checking ditributed CMS bruteforce attacks [15-06-2022 03:44:02]14336: WAF :: fetched 6 new logs [15-06-2022 03:45:02]16980: WAF :: fetched 4 new logs [15-06-2022 03:46:01]19660: WAF :: fetched 5 new logs [15-06-2022 03:47:02]22406: WAF :: fetched 5 new logs [15-06-2022 03:48:01]25027: WAF :: fetched 7 new logs [15-06-2022 03:49:01]27665: WAF :: fetched 4 new logs [15-06-2022 03:50:02]30377: WAF :: fetched 5 new logs [15-06-2022 03:51:01]622: WAF :: fetched 6 new logs [15-06-2022 03:52:02]3426: WAF :: fetched 2 new logs [15-06-2022 03:54:01]8776: WAF :: fetched 1 new logs [15-06-2022 03:55:01]11420: WAF :: fetched 2 new logs [15-06-2022 03:56:01]14105: WAF :: fetched 1 new logs [15-06-2022 03:57:02]16857: WAF :: fetched 2 new logs [15-06-2022 03:58:02]19472: WAF :: fetched 2 new logs [15-06-2022 04:00:02]24577: WAF :: fetched 3 new logs [15-06-2022 04:02:02]30515: WAF :: fetched 1 new logs [15-06-2022 04:03:01]825: WAF :: fetched 1 new logs [15-06-2022 04:04:01]3533: WAF :: fetched 1 new logs [15-06-2022 04:12:01]25196: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655277121 [15-06-2022 04:12:01]25196: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 04:12:03]25196: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 04:12:04]25196: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-0412/20220615-041201-YqmGQZM06-5FxE4JstW5MAAAAAY [15-06-2022 04:12:04]25196: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [15-06-2022 04:12:04]25196: WAF :: fetched 1 new logs [15-06-2022 04:13:01]27880: WAF :: fetched 1 new logs [15-06-2022 04:14:02]30536: WAF :: fetched 3 new logs [15-06-2022 04:15:02]774: WAF :: fetched 24 new logs [15-06-2022 04:16:01]3482: WAF :: fetched 1 new logs [15-06-2022 04:18:01]8919: WAF :: fetched 2 new logs [15-06-2022 04:19:01]11561: WAF :: fetched 3 new logs [15-06-2022 04:21:02]16931: WAF :: fetched 1 new logs [15-06-2022 04:23:02]22347: WAF :: fetched 3 new logs [15-06-2022 04:24:01]24861: WAF :: fetched 6 new logs [15-06-2022 04:25:02]27620: WAF :: fetched 5 new logs [15-06-2022 04:26:02]30302: WAF :: fetched 7 new logs [15-06-2022 04:27:02]581: WAF :: fetched 6 new logs [15-06-2022 04:28:01]3299: WAF :: fetched 5 new logs [15-06-2022 04:29:01]5990: WAF :: fetched 5 new logs [15-06-2022 04:30:01]8683: WAF :: fetched 5 new logs [15-06-2022 04:31:02]11385: WAF :: fetched 1 new logs [15-06-2022 04:35:01]22090: WAF :: fetched 5 new logs [15-06-2022 04:36:02]24777: WAF :: fetched 3 new logs [15-06-2022 04:39:02]406: WAF :: fetched 1 new logs [15-06-2022 04:41:02]5904: WAF :: fetched 1 new logs [15-06-2022 04:41:02]5904: Checking for user cron vulnerabilities [15-06-2022 04:43:02]11267: WAF :: fetched 2 new logs [15-06-2022 04:44:01]13870: Checking ditributed CMS bruteforce attacks [15-06-2022 04:44:02]13870: WAF :: fetched 1 new logs [15-06-2022 04:45:01]16523: WAF :: fetched 2 new logs [15-06-2022 04:46:02]19260: WAF :: fetched 4 new logs [15-06-2022 04:47:01]21947: WAF :: fetched 4 new logs [15-06-2022 04:48:02]24631: WAF :: fetched 6 new logs [15-06-2022 04:49:01]27286: WAF :: fetched 5 new logs [15-06-2022 04:50:01]29938: WAF :: fetched 3 new logs [15-06-2022 04:51:02]32680: WAF :: fetched 9 new logs [15-06-2022 04:52:01]2979: WAF :: fetched 2 new logs [15-06-2022 04:53:02]5717: WAF :: fetched 1 new logs [15-06-2022 04:54:02]8373: WAF :: fetched 2 new logs [15-06-2022 04:55:01]11017: WAF :: fetched 4 new logs [15-06-2022 04:56:02]13714: WAF :: fetched 2 new logs [15-06-2022 04:59:02]21694: WAF :: fetched 1 new logs [15-06-2022 05:01:42]27207: Starting daily scan on files updated in last 24 hrs [15-06-2022 05:02:02]29948: WAF :: fetched 1 new logs [15-06-2022 05:07:02]11002: WAF :: fetched 3 new logs [15-06-2022 05:08:01]13706: WAF :: fetched 76 new logs [15-06-2022 05:09:02]16381: WAF :: fetched 70 new logs [15-06-2022 05:10:01]19005: WAF :: fetched 9 new logs [15-06-2022 05:11:01]21713: WAF :: fetched 44 new logs [15-06-2022 05:12:02]24466: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655280722 [15-06-2022 05:12:02]24466: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 05:12:04]24466: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 05:12:04]24466: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-0512/20220615-051202-YqmUUlZ8fZAEem_2bJ9qtQAAAAA [15-06-2022 05:12:04]24466: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 05:12:05]24466: WAF :: fetched 683 new logs [15-06-2022 05:13:01]27081: WAF :: fetched 1 new logs [15-06-2022 05:14:02]29735: WAF :: fetched 1 new logs [15-06-2022 05:15:01]32295: WAF :: fetched 5 new logs [15-06-2022 05:16:02]2690: WAF :: fetched 4 new logs [15-06-2022 05:17:01]5484: WAF :: fetched 6 new logs [15-06-2022 05:18:01]8133: WAF :: fetched 4 new logs [15-06-2022 05:19:01]10782: WAF :: fetched 5 new logs [15-06-2022 05:20:01]13432: WAF :: fetched 3 new logs [15-06-2022 05:22:02]18967: WAF :: fetched 2 new logs [15-06-2022 05:23:01]21601: WAF :: fetched 1 new logs [15-06-2022 05:24:01]24250: WAF :: fetched 1 new logs [15-06-2022 05:28:02]2608: WAF :: fetched 12 new logs [15-06-2022 05:29:01]5310: WAF :: fetched 81 new logs [15-06-2022 05:31:01]10662: WAF :: fetched 1 new logs [15-06-2022 05:32:02]13413: WAF :: fetched 2 new logs [15-06-2022 05:35:01]21346: WAF :: fetched 2 new logs [15-06-2022 05:37:01]26796: WAF :: fetched 2 new logs [15-06-2022 05:41:02]5165: WAF :: fetched 1 new logs [15-06-2022 05:41:02]5165: Checking for user cron vulnerabilities [15-06-2022 05:44:01]13246: Checking ditributed CMS bruteforce attacks [15-06-2022 05:45:01]15969: WAF :: fetched 3 new logs [15-06-2022 05:46:02]18736: WAF :: fetched 2 new logs [15-06-2022 05:47:01]21436: WAF :: fetched 1 new logs [15-06-2022 05:48:01]24101: WAF :: fetched 1 new logs [15-06-2022 05:49:02]26770: WAF :: fetched 2 new logs [15-06-2022 05:50:01]29431: WAF :: fetched 5 new logs [15-06-2022 05:51:02]32135: WAF :: fetched 4 new logs [15-06-2022 05:52:01]2452: WAF :: fetched 1 new logs [15-06-2022 05:53:01]5188: WAF :: fetched 2 new logs [15-06-2022 05:54:02]7866: WAF :: fetched 3 new logs [15-06-2022 05:55:01]10474: WAF :: fetched 1 new logs [15-06-2022 05:56:02]13179: WAF :: fetched 59 new logs [15-06-2022 05:57:02]15917: WAF :: fetched 27 new logs [15-06-2022 05:58:01]18553: WAF :: fetched 3 new logs [15-06-2022 05:59:02]21221: WAF :: fetched 3 new logs [15-06-2022 06:00:01]23586: WAF :: fetched 2 new logs [15-06-2022 06:02:02]29550: WAF :: fetched 3 new logs [15-06-2022 06:03:01]32177: WAF :: fetched 2 new logs [15-06-2022 06:04:02]2481: WAF :: fetched 4 new logs [15-06-2022 06:05:02]5220: WAF :: fetched 3 new logs [15-06-2022 06:06:01]7926: WAF :: fetched 3 new logs [15-06-2022 06:07:02]10707: WAF :: fetched 1 new logs [15-06-2022 06:12:02]24151: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655284322 [15-06-2022 06:12:02]24151: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 06:12:04]24151: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 06:12:04]24151: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-0612/20220615-061202-YqmiYuORk9L9OBJGBDhGsQAAAAw [15-06-2022 06:12:04]24151: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 06:12:04]24151: WAF :: fetched 2 new logs [15-06-2022 06:13:01]26805: WAF :: fetched 1 new logs [15-06-2022 06:14:02]29482: WAF :: fetched 1 new logs [15-06-2022 06:15:02]32153: WAF :: fetched 1 new logs [15-06-2022 06:16:01]2487: WAF :: fetched 1 new logs [15-06-2022 06:17:01]5313: WAF :: fetched 68 new logs [15-06-2022 06:18:02]8035: WAF :: fetched 122 new logs [15-06-2022 06:24:01]24179: WAF :: fetched 1 new logs [15-06-2022 06:25:02]26895: WAF :: fetched 38 new logs [15-06-2022 06:26:02]29604: WAF :: fetched 55 new logs [15-06-2022 06:31:02]10912: WAF :: fetched 3 new logs [15-06-2022 06:33:02]16332: WAF :: fetched 1 new logs [15-06-2022 06:34:01]18990: WAF :: fetched 2 new logs [15-06-2022 06:39:01]32434: WAF :: fetched 1 new logs [15-06-2022 06:41:01]5516: Checking for user cron vulnerabilities [15-06-2022 06:43:02]10935: WAF :: fetched 2 new logs [15-06-2022 06:44:01]13562: Checking ditributed CMS bruteforce attacks [15-06-2022 06:45:01]16249: WAF :: fetched 1 new logs [15-06-2022 06:46:02]18986: WAF :: fetched 887 new logs [15-06-2022 06:47:01]21672: WAF :: fetched 639 new logs [15-06-2022 06:48:02]24348: WAF :: fetched 1 new logs [15-06-2022 06:50:02]29655: WAF :: fetched 1 new logs [15-06-2022 06:51:01]32312: WAF :: fetched 29 new logs [15-06-2022 06:52:01]2632: WAF :: fetched 150 new logs [15-06-2022 06:53:02]5398: WAF :: fetched 108 new logs [15-06-2022 06:54:02]8044: WAF :: fetched 1 new logs [15-06-2022 06:56:02]13368: WAF :: fetched 1 new logs [15-06-2022 06:57:01]16019: WAF :: fetched 4 new logs [15-06-2022 06:58:02]18775: WAF :: fetched 1 new logs [15-06-2022 07:02:02]29657: WAF :: fetched 1 new logs [15-06-2022 07:03:01]32344: WAF :: fetched 4 new logs [15-06-2022 07:04:02]2632: WAF :: fetched 17 new logs [15-06-2022 07:05:01]5229: WAF :: fetched 57 new logs [15-06-2022 07:07:01]10651: WAF :: fetched 1 new logs [15-06-2022 07:08:02]13434: WAF :: fetched 1 new logs [15-06-2022 07:09:02]16082: WAF :: fetched 2 new logs [15-06-2022 07:10:01]18733: WAF :: fetched 2 new logs [15-06-2022 07:11:02]21468: WAF :: fetched 2 new logs [15-06-2022 07:12:01]24084: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655287921 [15-06-2022 07:12:01]24084: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 07:12:03]24084: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 07:12:04]24084: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-0712/20220615-071201-YqmwcW_Z1Agm_a3qJ4Pu6wAAABQ [15-06-2022 07:12:04]24084: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 07:12:04]24084: WAF :: fetched 1 new logs [15-06-2022 07:13:02]26846: WAF :: fetched 1 new logs [15-06-2022 07:14:02]29501: WAF :: fetched 1 new logs [15-06-2022 07:15:01]32205: WAF :: fetched 2 new logs [15-06-2022 07:18:02]8152: WAF :: fetched 1 new logs [15-06-2022 07:20:01]13513: WAF :: fetched 2 new logs [15-06-2022 07:22:02]18972: WAF :: fetched 5 new logs [15-06-2022 07:23:01]21700: WAF :: fetched 2 new logs [15-06-2022 07:24:02]24365: WAF :: fetched 1 new logs [15-06-2022 07:25:01]26998: WAF :: fetched 4 new logs [15-06-2022 07:30:02]8075: WAF :: fetched 2 new logs [15-06-2022 07:31:01]10787: WAF :: fetched 4 new logs [15-06-2022 07:33:01]16166: WAF :: fetched 2 new logs [15-06-2022 07:34:01]18818: WAF :: fetched 1 new logs [15-06-2022 07:35:02]21498: WAF :: fetched 2 new logs [15-06-2022 07:36:01]24197: WAF :: fetched 4 new logs [15-06-2022 07:37:02]26899: WAF :: fetched 4 new logs [15-06-2022 07:38:01]29659: WAF :: fetched 4 new logs [15-06-2022 07:39:02]32332: WAF :: fetched 1 new logs [15-06-2022 07:41:01]5420: Checking for user cron vulnerabilities [15-06-2022 07:42:02]8183: WAF :: fetched 1 new logs [15-06-2022 07:44:02]13564: Checking ditributed CMS bruteforce attacks [15-06-2022 07:45:01]: Checking for definition updates [15-06-2022 07:47:02]21571: WAF :: fetched 1 new logs [15-06-2022 07:50:01]29645: WAF :: fetched 1 new logs [15-06-2022 07:54:02]8167: WAF :: fetched 1 new logs [15-06-2022 07:55:01]10852: WAF :: fetched 2 new logs [15-06-2022 07:56:01]13608: WAF :: fetched 1 new logs [15-06-2022 08:00:01]24157: WAF :: fetched 1 new logs [15-06-2022 08:04:02]3202: WAF :: fetched 1 new logs [15-06-2022 08:06:01]8714: WAF :: fetched 4 new logs [15-06-2022 08:07:01]11388: WAF :: fetched 3 new logs [15-06-2022 08:08:02]14285: WAF :: fetched 1 new logs [15-06-2022 08:09:01]17022: WAF :: fetched 2 new logs [15-06-2022 08:10:02]19811: WAF :: fetched 2 new logs [15-06-2022 08:11:02]22613: WAF :: fetched 2 new logs [15-06-2022 08:12:02]25327: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655291522 [15-06-2022 08:12:02]25327: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 08:12:04]25327: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 08:12:04]25327: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-0812/20220615-081202-Yqm-gmm0SITGzhgjVKF78gAAAAk [15-06-2022 08:12:04]25327: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 08:12:04]25327: WAF :: fetched 3 new logs [15-06-2022 08:14:02]30786: WAF :: fetched 2 new logs [15-06-2022 08:19:01]12063: WAF :: fetched 3 new logs [15-06-2022 08:20:02]14762: WAF :: fetched 7 new logs [15-06-2022 08:25:02]28348: WAF :: fetched 102 new logs [15-06-2022 08:26:02]31048: WAF :: fetched 1 new logs [15-06-2022 08:27:01]1359: WAF :: fetched 1 new logs [15-06-2022 08:28:02]4219: WAF :: fetched 105 new logs [15-06-2022 08:29:01]6891: WAF :: fetched 12 new logs [15-06-2022 08:30:01]9587: WAF :: fetched 1 new logs [15-06-2022 08:33:02]17869: WAF :: fetched 2 new logs [15-06-2022 08:34:01]20532: WAF :: fetched 1 new logs [15-06-2022 08:35:01]23277: WAF :: fetched 2 new logs [15-06-2022 08:36:02]26047: WAF :: fetched 2 new logs [15-06-2022 08:37:01]28733: WAF :: fetched 3 new logs [15-06-2022 08:40:01]4565: WAF :: fetched 1 new logs [15-06-2022 08:41:02]7350: WAF :: fetched 2 new logs [15-06-2022 08:41:02]7350: Checking for user cron vulnerabilities [15-06-2022 08:42:01]10021: WAF :: fetched 1 new logs [15-06-2022 08:44:01]15439: Checking ditributed CMS bruteforce attacks [15-06-2022 08:44:01]15439: WAF :: fetched 4 new logs [15-06-2022 08:47:01]23480: WAF :: fetched 1 new logs [15-06-2022 08:48:02]26251: WAF :: fetched 2 new logs [15-06-2022 08:53:01]7649: WAF :: fetched 1 new logs [15-06-2022 08:54:02]10369: WAF :: fetched 1 new logs [15-06-2022 08:55:01]13033: WAF :: fetched 2 new logs [15-06-2022 08:56:02]15873: WAF :: fetched 1 new logs [15-06-2022 08:57:02]18643: WAF :: fetched 4 new logs [15-06-2022 08:58:01]21475: WAF :: fetched 2 new logs [15-06-2022 08:59:01]24259: WAF :: fetched 5 new logs [15-06-2022 09:00:02]26750: WAF :: fetched 1 new logs [15-06-2022 09:01:02]29982: WAF :: fetched 2 new logs [15-06-2022 09:06:02]11493: WAF :: fetched 2 new logs [15-06-2022 09:07:01]14239: WAF :: fetched 4 new logs [15-06-2022 09:08:02]17123: WAF :: fetched 89 new logs [15-06-2022 09:12:01]28149: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655295121 [15-06-2022 09:12:01]28149: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 09:12:03]28149: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 09:12:04]28149: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-0912/20220615-091201-YqnMkZJIhhXZb2k1oHKp4gAAAAk [15-06-2022 09:12:04]28149: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 09:12:04]28149: WAF :: fetched 1 new logs [15-06-2022 09:15:01]4148: WAF :: fetched 15 new logs [15-06-2022 09:16:02]6980: WAF :: fetched 137 new logs [15-06-2022 09:17:02]9648: WAF :: fetched 55 new logs [15-06-2022 09:18:01]12507: WAF :: fetched 3 new logs [15-06-2022 09:21:02]21007: WAF :: fetched 1 new logs [15-06-2022 09:23:01]26696: WAF :: fetched 2 new logs [15-06-2022 09:24:01]29582: WAF :: fetched 5 new logs [15-06-2022 09:26:01]2990: WAF :: fetched 1 new logs [15-06-2022 09:27:02]5940: WAF :: fetched 1 new logs [15-06-2022 09:28:01]8826: WAF :: fetched 2 new logs [15-06-2022 09:29:02]11701: WAF :: fetched 1 new logs [15-06-2022 09:33:01]22961: WAF :: fetched 18 new logs [15-06-2022 09:34:02]25657: WAF :: fetched 131 new logs [15-06-2022 09:35:01]28355: WAF :: fetched 107 new logs [15-06-2022 09:36:01]31108: WAF :: fetched 61 new logs [15-06-2022 09:37:02]1418: WAF :: fetched 1 new logs [15-06-2022 09:39:02]6932: WAF :: fetched 1 new logs [15-06-2022 09:40:02]9706: WAF :: fetched 1 new logs [15-06-2022 09:41:01]12513: WAF :: fetched 4 new logs [15-06-2022 09:41:01]12513: Checking for user cron vulnerabilities [15-06-2022 09:43:01]17969: WAF :: fetched 1 new logs [15-06-2022 09:44:01]20676: Checking ditributed CMS bruteforce attacks [15-06-2022 09:44:01]20676: WAF :: fetched 4 new logs [15-06-2022 09:45:02]23443: WAF :: fetched 4 new logs [15-06-2022 09:46:02]26210: WAF :: fetched 1 new logs [15-06-2022 09:47:01]28918: WAF :: fetched 1 new logs [15-06-2022 09:48:02]31747: WAF :: fetched 3 new logs [15-06-2022 09:49:01]2032: WAF :: fetched 2 new logs [15-06-2022 09:50:02]4840: WAF :: fetched 2 new logs [15-06-2022 09:52:01]10301: WAF :: fetched 3 new logs [15-06-2022 09:53:02]13097: WAF :: fetched 1 new logs [15-06-2022 09:54:01]15584: WAF :: fetched 30 new logs [15-06-2022 09:55:02]18485: WAF :: fetched 144 new logs [15-06-2022 09:56:01]21235: WAF :: fetched 21 new logs [15-06-2022 09:57:02]23992: WAF :: fetched 3 new logs [15-06-2022 09:58:02]26775: WAF :: fetched 4 new logs [15-06-2022 09:59:01]29501: WAF :: fetched 2 new logs [15-06-2022 10:00:02]31910: WAF :: fetched 4 new logs [15-06-2022 10:01:01]2740: WAF :: fetched 3 new logs [15-06-2022 10:02:01]5540: WAF :: fetched 8 new logs [15-06-2022 10:03:02]8342: WAF :: fetched 3 new logs [15-06-2022 10:04:02]11019: WAF :: fetched 6 new logs [15-06-2022 10:05:01]13701: WAF :: fetched 2 new logs [15-06-2022 10:06:01]16487: WAF :: fetched 9 new logs [15-06-2022 10:07:02]19233: WAF :: fetched 6 new logs [15-06-2022 10:08:01]22001: WAF :: fetched 6 new logs [15-06-2022 10:09:02]24717: WAF :: fetched 7 new logs [15-06-2022 10:10:02]27447: WAF :: fetched 4 new logs [15-06-2022 10:11:01]30210: WAF :: fetched 2 new logs [15-06-2022 10:12:02]508: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655298722 [15-06-2022 10:12:02]508: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 10:12:04]508: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 10:12:04]508: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-1012/20220615-101202-Yqnaoo8JlRAigyzOmAz8fgAAAAA [15-06-2022 10:12:04]508: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 10:12:04]508: WAF :: fetched 3 new logs [15-06-2022 10:14:01]6118: WAF :: fetched 2 new logs [15-06-2022 10:15:02]8850: WAF :: fetched 1 new logs [15-06-2022 10:16:01]11639: WAF :: fetched 4 new logs [15-06-2022 10:17:02]14385: WAF :: fetched 7 new logs [15-06-2022 10:18:02]17151: WAF :: fetched 60 new logs [15-06-2022 10:19:01]19945: WAF :: fetched 127 new logs [15-06-2022 10:20:02]22717: WAF :: fetched 78 new logs [15-06-2022 10:21:01]25529: WAF :: fetched 109 new logs [15-06-2022 10:22:02]28308: WAF :: fetched 1 new logs [15-06-2022 10:23:02]31078: WAF :: fetched 48 new logs [15-06-2022 10:24:01]1433: WAF :: fetched 144 new logs [15-06-2022 10:25:02]4254: WAF :: fetched 86 new logs [15-06-2022 10:26:02]7080: WAF :: fetched 6 new logs [15-06-2022 10:27:02]9852: WAF :: fetched 3 new logs [15-06-2022 10:28:01]12631: WAF :: fetched 4 new logs [15-06-2022 10:29:01]15361: WAF :: fetched 2 new logs [15-06-2022 10:30:02]18177: WAF :: fetched 89 new logs [15-06-2022 10:31:01]20913: WAF :: fetched 19 new logs [15-06-2022 10:32:01]23657: WAF :: fetched 1 new logs [15-06-2022 10:34:02]29165: WAF :: fetched 2 new logs [15-06-2022 10:38:01]7970: WAF :: fetched 6 new logs [15-06-2022 10:41:01]16187: WAF :: fetched 3 new logs [15-06-2022 10:41:01]16187: Checking for user cron vulnerabilities [15-06-2022 10:42:02]18886: WAF :: fetched 4 new logs [15-06-2022 10:44:02]24333: Checking ditributed CMS bruteforce attacks [15-06-2022 10:47:02]32473: WAF :: fetched 2 new logs [15-06-2022 10:51:01]11239: WAF :: fetched 1 new logs [15-06-2022 10:52:02]13950: WAF :: fetched 1 new logs [15-06-2022 10:55:02]22264: WAF :: fetched 1 new logs [15-06-2022 10:56:01]25024: WAF :: fetched 1 new logs [15-06-2022 11:04:02]14952: WAF :: fetched 1 new logs [15-06-2022 11:07:02]23131: WAF :: fetched 1 new logs [15-06-2022 11:07:56]23291: Performed RBL check for 23.111.136.34. [15-06-2022 11:09:01]28758: WAF :: fetched 71 new logs [15-06-2022 11:10:02]31537: WAF :: fetched 1195 new logs [15-06-2022 11:11:02]1972: WAF :: fetched 3 new logs [15-06-2022 11:12:02]4864: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655302322 [15-06-2022 11:12:02]4864: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 11:12:04]4864: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 11:12:04]4864: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-1112/20220615-111202-YqnospV8bwY52s-stnrZ9gAAABs [15-06-2022 11:12:04]4864: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 11:12:04]4864: WAF :: fetched 5 new logs [15-06-2022 11:15:02]13113: WAF :: fetched 1 new logs [15-06-2022 11:17:01]18625: WAF :: fetched 2 new logs [15-06-2022 11:18:02]21501: WAF :: fetched 1 new logs [15-06-2022 11:23:01]2861: WAF :: fetched 1 new logs [15-06-2022 11:24:02]5754: WAF :: fetched 2 new logs [15-06-2022 11:27:01]14064: WAF :: fetched 1 new logs [15-06-2022 11:30:02]22264: WAF :: fetched 2 new logs [15-06-2022 11:31:01]25009: WAF :: fetched 3 new logs [15-06-2022 11:32:01]27766: WAF :: fetched 1 new logs [15-06-2022 11:33:02]30595: WAF :: fetched 2 new logs [15-06-2022 11:40:02]17498: WAF :: fetched 1 new logs [15-06-2022 11:41:01]20197: WAF :: fetched 4 new logs [15-06-2022 11:41:01]20197: Checking for user cron vulnerabilities [15-06-2022 11:42:02]22991: WAF :: fetched 1 new logs [15-06-2022 11:44:01]28462: Checking ditributed CMS bruteforce attacks [15-06-2022 11:44:01]28462: WAF :: fetched 2 new logs [15-06-2022 11:46:01]1580: WAF :: fetched 2 new logs [15-06-2022 11:48:01]7202: WAF :: fetched 1 new logs [15-06-2022 11:49:01]9936: WAF :: fetched 1 new logs [15-06-2022 11:50:02]12694: WAF :: fetched 4 new logs [15-06-2022 11:51:01]15527: WAF :: fetched 3 new logs [15-06-2022 11:52:02]18232: WAF :: fetched 3 new logs [15-06-2022 11:56:01]29384: WAF :: fetched 2 new logs [15-06-2022 11:57:02]32089: WAF :: fetched 1 new logs [15-06-2022 11:59:01]5280: WAF :: fetched 1 new logs [15-06-2022 12:00:02]7764: WAF :: fetched 2 new logs [15-06-2022 12:01:01]11418: WAF :: fetched 1 new logs [15-06-2022 12:02:01]14583: WAF :: fetched 1 new logs [15-06-2022 12:06:01]25533: WAF :: fetched 2 new logs [15-06-2022 12:08:02]31039: WAF :: fetched 1 new logs [15-06-2022 12:09:01]1401: WAF :: fetched 1 new logs [15-06-2022 12:10:02]4249: WAF :: fetched 3 new logs [15-06-2022 12:11:01]7094: WAF :: fetched 2 new logs [15-06-2022 12:12:01]9808: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655305921 [15-06-2022 12:12:01]9808: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 12:12:03]9808: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 12:12:03]9808: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-1212/20220615-121201-Yqn2wUxqszv06Lc4GoSjrwAAABk [15-06-2022 12:12:03]9808: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 12:12:03]9808: WAF :: fetched 4 new logs [15-06-2022 12:13:02]12532: WAF :: fetched 3 new logs [15-06-2022 12:17:01]23496: WAF :: fetched 1 new logs [15-06-2022 12:19:02]29054: WAF :: fetched 1 new logs [15-06-2022 12:21:01]2223: WAF :: fetched 1 new logs [15-06-2022 12:23:01]7735: WAF :: fetched 1 new logs [15-06-2022 12:27:01]18722: WAF :: fetched 1 new logs [15-06-2022 12:28:02]21481: WAF :: fetched 5 new logs [15-06-2022 12:34:02]5639: WAF :: fetched 3 new logs [15-06-2022 12:35:01]8335: WAF :: fetched 2 new logs [15-06-2022 12:37:01]13809: WAF :: fetched 1 new logs [15-06-2022 12:38:01]16507: WAF :: fetched 1 new logs [15-06-2022 12:40:01]22030: WAF :: fetched 1 new logs [15-06-2022 12:41:01]24864: WAF :: fetched 2 new logs [15-06-2022 12:41:01]24864: Checking for user cron vulnerabilities [15-06-2022 12:44:02]723: Checking ditributed CMS bruteforce attacks [15-06-2022 12:44:02]723: WAF :: fetched 1 new logs [15-06-2022 12:45:01]: Checking for software updates [15-06-2022 12:46:02]6355: WAF :: fetched 1 new logs [15-06-2022 12:54:01]28305: WAF :: fetched 1 new logs [15-06-2022 12:58:02]6872: WAF :: fetched 3 new logs [15-06-2022 13:00:01]12060: WAF :: fetched 1 new logs [15-06-2022 13:02:01]17953: WAF :: fetched 1 new logs [15-06-2022 13:03:02]20707: WAF :: fetched 1 new logs [15-06-2022 13:04:02]23457: WAF :: fetched 1 new logs [15-06-2022 13:05:01]26209: WAF :: fetched 2 new logs [15-06-2022 13:06:02]28986: WAF :: fetched 4 new logs [15-06-2022 13:07:02]31689: WAF :: fetched 1 new logs [15-06-2022 13:08:01]2124: WAF :: fetched 11 new logs [15-06-2022 13:09:02]5026: WAF :: fetched 1 new logs [15-06-2022 13:10:01]7715: WAF :: fetched 9 new logs [15-06-2022 13:11:02]10512: WAF :: fetched 8 new logs [15-06-2022 13:12:02]13130: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655309522 [15-06-2022 13:12:02]13130: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 13:12:04]13130: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 13:12:04]13130: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-1312/20220615-131202-YqoE0sLg72vakMn_6WDfuwAAABU [15-06-2022 13:12:04]13130: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 13:12:04]13130: WAF :: fetched 13 new logs [15-06-2022 13:13:01]15832: WAF :: fetched 8 new logs [15-06-2022 13:14:02]18575: WAF :: fetched 3 new logs [15-06-2022 13:15:01]21202: WAF :: fetched 4 new logs [15-06-2022 13:18:01]29265: WAF :: fetched 12 new logs [15-06-2022 13:19:02]32095: WAF :: fetched 32 new logs [15-06-2022 13:20:01]2352: WAF :: fetched 1 new logs [15-06-2022 13:21:02]5224: WAF :: fetched 3 new logs [15-06-2022 13:22:01]7868: WAF :: fetched 1 new logs [15-06-2022 13:23:01]10523: WAF :: fetched 2 new logs [15-06-2022 13:24:02]13330: WAF :: fetched 3 new logs [15-06-2022 13:25:01]16014: WAF :: fetched 2 new logs [15-06-2022 13:26:02]18747: WAF :: fetched 36 new logs [15-06-2022 13:27:01]21379: WAF :: fetched 3 new logs [15-06-2022 13:28:01]24045: WAF :: fetched 1 new logs [15-06-2022 13:29:02]26870: WAF :: fetched 2 new logs [15-06-2022 13:30:01]29535: WAF :: fetched 1 new logs [15-06-2022 13:32:01]2596: WAF :: fetched 6 new logs [15-06-2022 13:33:01]5343: WAF :: fetched 8 new logs [15-06-2022 13:34:02]8110: WAF :: fetched 5 new logs [15-06-2022 13:35:02]10789: WAF :: fetched 7 new logs [15-06-2022 13:36:01]13580: WAF :: fetched 7 new logs [15-06-2022 13:37:02]16339: WAF :: fetched 8 new logs [15-06-2022 13:38:02]19125: WAF :: fetched 52 new logs [15-06-2022 13:39:01]21924: WAF :: fetched 117 new logs [15-06-2022 13:40:01]24681: WAF :: fetched 105 new logs [15-06-2022 13:41:02]27558: WAF :: fetched 147 new logs [15-06-2022 13:41:02]27558: Checking for user cron vulnerabilities [15-06-2022 13:42:01]30376: WAF :: fetched 165 new logs [15-06-2022 13:43:02]889: WAF :: fetched 112 new logs [15-06-2022 13:44:01]3841: Checking ditributed CMS bruteforce attacks [15-06-2022 13:44:02]3841: WAF :: fetched 142 new logs [15-06-2022 13:45:01]: Checking for definition updates [15-06-2022 13:45:01]6719: WAF :: fetched 98 new logs [15-06-2022 13:45:03]6723: Updated virus defnition : malware.expert.ndb [15-06-2022 13:45:06]6723: Updated virus defnition : malware.expert.hdb [15-06-2022 13:46:02]9577: WAF :: fetched 87 new logs [15-06-2022 13:47:01]12301: WAF :: fetched 49 new logs [15-06-2022 13:49:02]17822: WAF :: fetched 1 new logs [15-06-2022 13:51:02]23377: WAF :: fetched 1 new logs [15-06-2022 13:58:01]10262: WAF :: fetched 5 new logs [15-06-2022 14:00:02]15578: WAF :: fetched 2 new logs [15-06-2022 14:02:02]21674: WAF :: fetched 2 new logs [15-06-2022 14:04:01]27173: WAF :: fetched 2 new logs [15-06-2022 14:05:02]29910: WAF :: fetched 1 new logs [15-06-2022 14:07:02]3065: WAF :: fetched 2 new logs [15-06-2022 14:08:01]5963: WAF :: fetched 2 new logs [15-06-2022 14:10:02]11559: WAF :: fetched 1 new logs [15-06-2022 14:12:01]17099: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655313121 [15-06-2022 14:12:01]17099: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 14:12:03]17099: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 14:12:03]17099: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-1412/20220615-141201-YqoS4bmij5Uu4j8mCT-kVwAAABM [15-06-2022 14:12:03]17099: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 14:12:03]17099: WAF :: fetched 2 new logs [15-06-2022 14:13:02]19825: WAF :: fetched 2 new logs [15-06-2022 14:15:02]25365: WAF :: fetched 2 new logs [15-06-2022 14:17:01]30818: WAF :: fetched 1 new logs [15-06-2022 14:20:02]6835: WAF :: fetched 1 new logs [15-06-2022 14:22:02]12344: WAF :: fetched 2 new logs [15-06-2022 14:23:01]15033: WAF :: fetched 2 new logs [15-06-2022 14:24:01]17815: WAF :: fetched 1 new logs [15-06-2022 14:26:01]23294: WAF :: fetched 1 new logs [15-06-2022 14:28:01]28887: WAF :: fetched 1 new logs [15-06-2022 14:34:02]13168: WAF :: fetched 1 new logs [15-06-2022 14:38:01]24035: WAF :: fetched 3 new logs [15-06-2022 14:40:02]29687: WAF :: fetched 1 new logs [15-06-2022 14:41:01]32507: WAF :: fetched 1 new logs [15-06-2022 14:41:01]32507: Checking for user cron vulnerabilities [15-06-2022 14:42:01]2852: WAF :: fetched 1 new logs [15-06-2022 14:43:02]5709: WAF :: fetched 2 new logs [15-06-2022 14:44:01]8470: Checking ditributed CMS bruteforce attacks [15-06-2022 14:44:01]8470: WAF :: fetched 3 new logs [15-06-2022 14:45:02]11225: WAF :: fetched 1 new logs [15-06-2022 14:47:02]16670: WAF :: fetched 1 new logs [15-06-2022 14:49:01]22127: WAF :: fetched 1 new logs [15-06-2022 14:50:01]24968: WAF :: fetched 1 new logs [15-06-2022 14:51:02]27823: WAF :: fetched 1 new logs [15-06-2022 14:52:01]30547: WAF :: fetched 2 new logs [15-06-2022 14:53:02]892: WAF :: fetched 3 new logs [15-06-2022 14:53:03]886: Updated license status via CDN [15-06-2022 14:54:02]3777: WAF :: fetched 1 new logs [15-06-2022 14:55:02]6549: WAF :: fetched 2 new logs [15-06-2022 14:56:01]9361: WAF :: fetched 1 new logs [15-06-2022 14:58:01]15092: WAF :: fetched 3 new logs [15-06-2022 14:59:01]17862: WAF :: fetched 3 new logs [15-06-2022 15:00:01]20349: WAF :: fetched 1 new logs [15-06-2022 15:01:01]23592: Reseting cPGuard inotify settings [15-06-2022 15:01:01]23590: WAF :: fetched 2 new logs [15-06-2022 15:02:02]26442: WAF :: fetched 1 new logs [15-06-2022 15:03:01]29188: WAF :: fetched 1 new logs [15-06-2022 15:04:02]32017: WAF :: fetched 2 new logs [15-06-2022 15:05:02]2325: WAF :: fetched 8 new logs [15-06-2022 15:06:01]5157: WAF :: fetched 21 new logs [15-06-2022 15:07:02]7880: WAF :: fetched 20 new logs [15-06-2022 15:08:01]10606: WAF :: fetched 11 new logs [15-06-2022 15:09:01]13426: WAF :: fetched 8 new logs [15-06-2022 15:10:02]16224: WAF :: fetched 10 new logs [15-06-2022 15:11:01]19015: WAF :: fetched 6 new logs [15-06-2022 15:12:01]21763: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655316721 [15-06-2022 15:12:01]21763: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 15:12:03]21763: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 15:12:03]21763: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-1512/20220615-151201-Yqog8bXmMrSYNRJgMC5fFAAAAE8 [15-06-2022 15:12:03]21763: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 15:12:03]21763: WAF :: fetched 20 new logs [15-06-2022 15:13:01]24494: WAF :: fetched 13 new logs [15-06-2022 15:14:01]27359: WAF :: fetched 3 new logs [15-06-2022 15:14:01]27355: httpd.conf changed. Refreshing watchlist. [15-06-2022 15:15:01]30216: WAF :: fetched 7 new logs [15-06-2022 15:15:01]30205: httpd.conf changed. Refreshing watchlist. [15-06-2022 15:16:02]800: WAF :: fetched 4 new logs [15-06-2022 15:20:02]12179: httpd.conf changed. Refreshing watchlist. [15-06-2022 15:22:01]17795: WAF :: fetched 2 new logs [15-06-2022 15:23:02]20669: WAF :: fetched 1 new logs [15-06-2022 15:24:01]23532: WAF :: fetched 9 new logs [15-06-2022 15:25:02]26329: WAF :: fetched 2 new logs [15-06-2022 15:28:02]2366: WAF :: fetched 1 new logs [15-06-2022 15:29:01]5288: WAF :: fetched 2 new logs [15-06-2022 15:30:02]8068: WAF :: fetched 2 new logs [15-06-2022 15:31:01]10976: WAF :: fetched 1 new logs [15-06-2022 15:32:01]13725: WAF :: fetched 1 new logs [15-06-2022 15:34:01]19344: WAF :: fetched 2 new logs [15-06-2022 15:35:02]22098: WAF :: fetched 2 new logs [15-06-2022 15:36:02]24950: WAF :: fetched 1 new logs [15-06-2022 15:37:01]27667: WAF :: fetched 1 new logs [15-06-2022 15:38:02]30427: WAF :: fetched 1 new logs [15-06-2022 15:39:02]856: WAF :: fetched 2 new logs [15-06-2022 15:40:02]3657: WAF :: fetched 3 new logs [15-06-2022 15:41:01]6619: Checking for user cron vulnerabilities [15-06-2022 15:44:01]14867: Checking ditributed CMS bruteforce attacks [15-06-2022 15:51:01]1997: WAF :: fetched 2 new logs [15-06-2022 15:53:01]7766: WAF :: fetched 3 new logs [15-06-2022 15:54:01]10672: WAF :: fetched 7 new logs [15-06-2022 15:55:02]13551: WAF :: fetched 6 new logs [15-06-2022 15:56:01]16367: WAF :: fetched 5 new logs [15-06-2022 15:57:02]19251: WAF :: fetched 2 new logs [15-06-2022 15:58:01]21833: WAF :: fetched 5 new logs [15-06-2022 15:59:02]24929: WAF :: fetched 3 new logs [15-06-2022 16:00:02]27386: WAF :: fetched 3 new logs [15-06-2022 16:02:01]995: WAF :: fetched 3 new logs [15-06-2022 16:05:01]9533: WAF :: fetched 25 new logs [15-06-2022 16:06:02]12422: httpd.conf changed. Refreshing watchlist. [15-06-2022 16:07:02]15278: httpd.conf changed. Refreshing watchlist. [15-06-2022 16:08:01]18094: WAF :: fetched 1 new logs [15-06-2022 16:09:02]20979: WAF :: fetched 1 new logs [15-06-2022 16:10:01]23740: WAF :: fetched 1 new logs [15-06-2022 16:11:01]26582: WAF :: fetched 2 new logs [15-06-2022 16:12:02]29481: httpd.conf changed. Refreshing watchlist. [15-06-2022 16:12:02]29476: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655320322 [15-06-2022 16:12:02]29476: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 16:12:04]29476: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 16:12:04]29476: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-1612/20220615-161202-YqovArViiy1nI5yXV2BU9AAAAAs [15-06-2022 16:12:04]29476: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 16:12:04]29476: WAF :: fetched 3 new logs [15-06-2022 16:15:02]5524: WAF :: fetched 3 new logs [15-06-2022 16:17:02]11874: WAF :: fetched 5 new logs [15-06-2022 16:19:02]17621: WAF :: fetched 4 new logs [15-06-2022 16:20:02]20376: WAF :: fetched 2 new logs [15-06-2022 16:21:01]23197: WAF :: fetched 9 new logs [15-06-2022 16:23:02]28656: WAF :: fetched 1 new logs [15-06-2022 16:25:01]1891: WAF :: fetched 1 new logs [15-06-2022 16:30:01]15902: WAF :: fetched 2 new logs [15-06-2022 16:31:01]18728: WAF :: fetched 5 new logs [15-06-2022 16:33:01]24250: WAF :: fetched 2 new logs [15-06-2022 16:34:02]27156: WAF :: fetched 3 new logs [15-06-2022 16:35:02]29858: WAF :: fetched 2 new logs [15-06-2022 16:36:02]32640: WAF :: fetched 3 new logs [15-06-2022 16:37:01]3010: WAF :: fetched 4 new logs [15-06-2022 16:38:02]5890: WAF :: fetched 2 new logs [15-06-2022 16:39:01]8720: WAF :: fetched 1 new logs [15-06-2022 16:40:02]11487: WAF :: fetched 2 new logs [15-06-2022 16:41:02]14246: Checking for user cron vulnerabilities [15-06-2022 16:44:01]22546: Checking ditributed CMS bruteforce attacks [15-06-2022 16:44:01]22546: WAF :: fetched 1 new logs [15-06-2022 16:48:01]1260: WAF :: fetched 1 new logs [15-06-2022 16:49:02]4147: WAF :: fetched 3 new logs [15-06-2022 16:50:01]6888: WAF :: fetched 3 new logs [15-06-2022 16:54:01]17926: WAF :: fetched 3 new logs [15-06-2022 16:55:01]20727: WAF :: fetched 1 new logs [15-06-2022 16:58:02]28934: WAF :: fetched 1 new logs [15-06-2022 16:59:01]31638: WAF :: fetched 1 new logs [15-06-2022 17:01:02]5134: WAF :: fetched 3 new logs [15-06-2022 17:02:02]7845: WAF :: fetched 1 new logs [15-06-2022 17:04:02]13385: WAF :: fetched 2 new logs [15-06-2022 17:05:02]16125: WAF :: fetched 3 new logs [15-06-2022 17:06:01]18895: WAF :: fetched 3 new logs [15-06-2022 17:08:01]24353: WAF :: fetched 3 new logs [15-06-2022 17:11:01]366: WAF :: fetched 3 new logs [15-06-2022 17:12:02]3251: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655323922 [15-06-2022 17:12:02]3251: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 17:12:04]3251: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 17:12:04]3251: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-1712/20220615-171202-Yqo9EoSMLrrr8G2bxQqaMwAAAAA [15-06-2022 17:12:04]3251: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 17:12:04]3251: WAF :: fetched 5 new logs [15-06-2022 17:14:02]8721: WAF :: fetched 3 new logs [15-06-2022 17:15:02]11557: WAF :: fetched 1 new logs [15-06-2022 17:16:01]14346: WAF :: fetched 3 new logs [15-06-2022 17:19:01]22545: WAF :: fetched 2 new logs [15-06-2022 17:20:01]25359: WAF :: fetched 1 new logs [15-06-2022 17:25:01]6873: WAF :: fetched 1 new logs [15-06-2022 17:26:01]9618: WAF :: fetched 2 new logs [15-06-2022 17:27:02]12358: WAF :: fetched 7 new logs [15-06-2022 17:28:02]15049: WAF :: fetched 2 new logs [15-06-2022 17:29:01]17743: WAF :: fetched 2 new logs [15-06-2022 17:30:02]20581: WAF :: fetched 5 new logs [15-06-2022 17:31:01]23362: WAF :: fetched 9 new logs [15-06-2022 17:33:01]28920: WAF :: fetched 1 new logs [15-06-2022 17:35:02]2045: WAF :: fetched 2 new logs [15-06-2022 17:36:01]4841: WAF :: fetched 1 new logs [15-06-2022 17:38:02]10218: WAF :: fetched 1 new logs [15-06-2022 17:39:01]12932: WAF :: fetched 5 new logs [15-06-2022 17:40:02]15739: WAF :: fetched 1 new logs [15-06-2022 17:41:02]18509: Checking for user cron vulnerabilities [15-06-2022 17:42:01]21244: WAF :: fetched 1 new logs [15-06-2022 17:43:02]23977: WAF :: fetched 1 new logs [15-06-2022 17:44:01]26664: Checking ditributed CMS bruteforce attacks [15-06-2022 17:44:01]26664: WAF :: fetched 1 new logs [15-06-2022 17:45:01]29457: WAF :: fetched 2 new logs [15-06-2022 17:46:02]32180: WAF :: fetched 1 new logs [15-06-2022 17:50:02]10751: WAF :: fetched 1 new logs [15-06-2022 17:53:02]18912: WAF :: fetched 3 new logs [15-06-2022 17:55:02]24444: WAF :: fetched 1 new logs [15-06-2022 17:56:02]27163: WAF :: fetched 1 new logs [15-06-2022 17:57:01]29862: WAF :: fetched 2 new logs [15-06-2022 17:58:02]32554: WAF :: fetched 1 new logs [15-06-2022 17:59:01]2805: WAF :: fetched 1 new logs [15-06-2022 18:00:02]5357: WAF :: fetched 1 new logs [15-06-2022 18:01:02]8527: WAF :: fetched 1 new logs [15-06-2022 18:03:02]13884: WAF :: fetched 1 new logs [15-06-2022 18:09:01]29909: WAF :: fetched 1 new logs [15-06-2022 18:10:02]32666: WAF :: fetched 1 new logs [15-06-2022 18:12:02]5754: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655327522 [15-06-2022 18:12:02]5754: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 18:12:04]5754: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 18:12:04]5754: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-1812/20220615-181202-YqpLIidyJcFU6Xz8UL2ITgAAABw [15-06-2022 18:12:04]5754: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [15-06-2022 18:12:04]5754: WAF :: fetched 1 new logs [15-06-2022 18:13:01]8408: WAF :: fetched 3 new logs [15-06-2022 18:14:01]11092: WAF :: fetched 1 new logs [15-06-2022 18:15:02]13870: WAF :: fetched 1 new logs [15-06-2022 18:19:01]24472: WAF :: fetched 2 new logs [15-06-2022 18:21:01]29975: WAF :: fetched 1 new logs [15-06-2022 18:23:01]2885: WAF :: fetched 1 new logs [15-06-2022 18:25:02]8410: WAF :: fetched 3 new logs [15-06-2022 18:26:01]11075: WAF :: fetched 3 new logs [15-06-2022 18:29:02]19068: WAF :: fetched 1 new logs [15-06-2022 18:31:02]24525: WAF :: fetched 2 new logs [15-06-2022 18:41:01]19013: Checking for user cron vulnerabilities [15-06-2022 18:44:01]26908: Checking ditributed CMS bruteforce attacks [15-06-2022 18:44:01]26908: WAF :: fetched 1 new logs [15-06-2022 18:45:02]29694: WAF :: fetched 2 new logs [15-06-2022 18:47:01]2663: WAF :: fetched 3 new logs [15-06-2022 18:48:02]5418: WAF :: fetched 6 new logs [15-06-2022 18:49:01]8113: WAF :: fetched 6 new logs [15-06-2022 18:50:02]10857: WAF :: fetched 2 new logs [15-06-2022 18:51:01]13596: WAF :: fetched 4 new logs [15-06-2022 18:52:01]16272: WAF :: fetched 3 new logs [15-06-2022 18:53:02]18932: WAF :: fetched 1 new logs [15-06-2022 18:54:01]21551: WAF :: fetched 4 new logs [15-06-2022 18:55:02]24290: WAF :: fetched 4 new logs [15-06-2022 18:56:02]26965: WAF :: fetched 64 new logs [15-06-2022 18:57:01]29636: WAF :: fetched 63 new logs [15-06-2022 18:58:02]32342: WAF :: fetched 45 new logs [15-06-2022 18:59:01]2591: WAF :: fetched 66 new logs [15-06-2022 19:00:02]5145: WAF :: fetched 4 new logs [15-06-2022 19:01:02]8295: WAF :: fetched 3 new logs [15-06-2022 19:03:02]13691: WAF :: fetched 2 new logs [15-06-2022 19:05:01]19023: WAF :: fetched 14 new logs [15-06-2022 19:12:02]5574: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655331122 [15-06-2022 19:12:02]5574: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 19:12:04]5574: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 19:12:04]5574: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-1912/20220615-191202-YqpZMpEjRD4JAt1UkqBmKwAAAAE [15-06-2022 19:12:04]5574: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 19:12:04]5574: WAF :: fetched 260 new logs [15-06-2022 19:13:01]8237: WAF :: fetched 11 new logs [15-06-2022 19:14:02]10898: WAF :: fetched 63 new logs [15-06-2022 19:15:02]13624: WAF :: fetched 73 new logs [15-06-2022 19:16:01]16356: WAF :: fetched 58 new logs [15-06-2022 19:17:02]18993: WAF :: fetched 58 new logs [15-06-2022 19:18:01]21601: WAF :: fetched 48 new logs [15-06-2022 19:19:02]24269: WAF :: fetched 42 new logs [15-06-2022 19:20:02]26978: WAF :: fetched 3 new logs [15-06-2022 19:21:01]29744: WAF :: fetched 4 new logs [15-06-2022 19:22:02]32416: WAF :: fetched 1 new logs [15-06-2022 19:23:01]2662: WAF :: fetched 1 new logs [15-06-2022 19:24:02]5410: WAF :: fetched 4 new logs [15-06-2022 19:25:01]8132: WAF :: fetched 1 new logs [15-06-2022 19:26:01]10873: WAF :: fetched 5 new logs [15-06-2022 19:27:02]13508: WAF :: fetched 2 new logs [15-06-2022 19:28:01]16117: WAF :: fetched 2 new logs [15-06-2022 19:29:02]18806: WAF :: fetched 2 new logs [15-06-2022 19:30:02]21507: WAF :: fetched 3 new logs [15-06-2022 19:34:01]32122: WAF :: fetched 2 new logs [15-06-2022 19:35:01]2461: WAF :: fetched 1 new logs [15-06-2022 19:36:02]5230: WAF :: fetched 3 new logs [15-06-2022 19:41:02]18553: Checking for user cron vulnerabilities [15-06-2022 19:42:01]21140: WAF :: fetched 2 new logs [15-06-2022 19:44:01]26436: Checking ditributed CMS bruteforce attacks [15-06-2022 19:45:01]: Checking for definition updates [15-06-2022 19:45:05]29170: Updated virus defnition : malware.expert.ndb [15-06-2022 19:48:01]4845: WAF :: fetched 1 new logs [15-06-2022 19:50:02]10298: httpd.conf changed. Refreshing watchlist. [15-06-2022 19:53:01]18355: WAF :: fetched 1 new logs [15-06-2022 19:56:02]26458: WAF :: fetched 3 new logs [15-06-2022 19:57:01]29078: WAF :: fetched 2 new logs [15-06-2022 20:01:01]7599: WAF :: fetched 2 new logs [15-06-2022 20:02:02]10261: WAF :: fetched 1 new logs [15-06-2022 20:05:01]18205: WAF :: fetched 5 new logs [15-06-2022 20:06:01]20891: WAF :: fetched 1 new logs [15-06-2022 20:07:02]23541: WAF :: fetched 2 new logs [15-06-2022 20:09:02]28952: WAF :: fetched 2 new logs [15-06-2022 20:11:01]1964: WAF :: fetched 2 new logs [15-06-2022 20:12:02]4711: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655334722 [15-06-2022 20:12:02]4711: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 20:12:04]4711: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 20:12:04]4711: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-2012/20220615-201202-YqpnQukI9q3pIIVezWPH6AAAABE [15-06-2022 20:12:04]4711: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 20:12:04]4711: WAF :: fetched 1 new logs [15-06-2022 20:16:01]15463: WAF :: fetched 2 new logs [15-06-2022 20:18:01]20739: WAF :: fetched 2 new logs [15-06-2022 20:19:02]23376: WAF :: fetched 2 new logs [15-06-2022 20:20:01]26094: WAF :: fetched 1 new logs [15-06-2022 20:21:01]28807: WAF :: fetched 1 new logs [15-06-2022 20:24:02]4507: WAF :: fetched 2 new logs [15-06-2022 20:25:01]7244: WAF :: fetched 1 new logs [15-06-2022 20:28:01]15310: WAF :: fetched 1 new logs [15-06-2022 20:28:01]15319: httpd.conf changed. Refreshing watchlist. [15-06-2022 20:29:02]18129: WAF :: fetched 2 new logs [15-06-2022 20:30:02]20870: WAF :: fetched 6 new logs [15-06-2022 20:32:01]26368: httpd.conf changed. Refreshing watchlist. [15-06-2022 20:34:01]31654: WAF :: fetched 1 new logs [15-06-2022 20:39:01]12591: WAF :: fetched 1 new logs [15-06-2022 20:40:01]15337: WAF :: fetched 4 new logs [15-06-2022 20:41:01]17983: Checking for user cron vulnerabilities [15-06-2022 20:42:02]20613: WAF :: fetched 2 new logs [15-06-2022 20:43:01]23201: WAF :: fetched 1 new logs [15-06-2022 20:44:02]25839: Checking ditributed CMS bruteforce attacks [15-06-2022 20:47:02]1421: WAF :: fetched 2 new logs [15-06-2022 20:48:01]4077: WAF :: fetched 1 new logs [15-06-2022 20:51:01]12194: WAF :: fetched 2 new logs [15-06-2022 20:52:02]14888: WAF :: fetched 14 new logs [15-06-2022 20:53:01]17488: WAF :: fetched 17 new logs [15-06-2022 20:54:02]20133: WAF :: fetched 8 new logs [15-06-2022 21:04:01]14570: WAF :: fetched 1 new logs [15-06-2022 21:08:02]25348: WAF :: fetched 2 new logs [15-06-2022 21:09:01]27894: WAF :: fetched 3 new logs [15-06-2022 21:11:01]970: WAF :: fetched 2 new logs [15-06-2022 21:12:01]3658: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655338321 [15-06-2022 21:12:01]3658: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 21:12:03]3658: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 21:12:03]3658: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-2112/20220615-211201-Yqp1UUo6pXCGUzT-49JGgwAAAAA [15-06-2022 21:12:03]3658: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 21:12:03]3658: WAF :: fetched 3 new logs [15-06-2022 21:14:01]9022: WAF :: fetched 1 new logs [15-06-2022 21:17:02]17039: WAF :: fetched 1 new logs [15-06-2022 21:22:01]30339: WAF :: fetched 2 new logs [15-06-2022 21:29:01]16527: WAF :: fetched 6 new logs [15-06-2022 21:30:02]19272: WAF :: fetched 6 new logs [15-06-2022 21:33:02]27196: WAF :: fetched 1 new logs [15-06-2022 21:34:01]29773: WAF :: fetched 4 new logs [15-06-2022 21:35:02]32489: WAF :: fetched 2 new logs [15-06-2022 21:36:01]2801: WAF :: fetched 1 new logs [15-06-2022 21:41:01]16139: Checking for user cron vulnerabilities [15-06-2022 21:44:01]24009: Checking ditributed CMS bruteforce attacks [15-06-2022 21:47:02]32012: WAF :: fetched 1 new logs [15-06-2022 21:53:01]15578: WAF :: fetched 1 new logs [15-06-2022 21:59:01]31445: WAF :: fetched 3 new logs [15-06-2022 22:00:01]1514: WAF :: fetched 2 new logs [15-06-2022 22:01:02]4786: WAF :: fetched 2 new logs [15-06-2022 22:02:01]7413: WAF :: fetched 3 new logs [15-06-2022 22:03:02]10051: WAF :: fetched 3 new logs [15-06-2022 22:04:01]12671: WAF :: fetched 4 new logs [15-06-2022 22:05:01]15374: WAF :: fetched 3 new logs [15-06-2022 22:06:02]18150: WAF :: fetched 4 new logs [15-06-2022 22:07:01]20818: WAF :: fetched 4 new logs [15-06-2022 22:07:07]20822: Performing Domain reputation checks [15-06-2022 22:11:01]31479: WAF :: fetched 1 new logs [15-06-2022 22:12:02]1714: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655341922 [15-06-2022 22:12:02]1714: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 22:12:04]1714: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 22:12:04]1714: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-2212/20220615-221202-YqqDYuSJRTU-rBlpbMaBfgAAAAE [15-06-2022 22:12:04]1714: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [15-06-2022 22:12:04]1714: WAF :: fetched 1 new logs [15-06-2022 22:13:01]4406: WAF :: fetched 4 new logs [15-06-2022 22:16:01]12387: WAF :: fetched 3 new logs [15-06-2022 22:23:02]30833: WAF :: fetched 1 new logs [15-06-2022 22:25:01]3677: WAF :: fetched 2 new logs [15-06-2022 22:29:01]14368: WAF :: fetched 6 new logs [15-06-2022 22:32:01]22418: WAF :: fetched 1 new logs [15-06-2022 22:32:02]22414: httpd.conf changed. Refreshing watchlist. [15-06-2022 22:33:01]25040: WAF :: fetched 2 new logs [15-06-2022 22:37:02]3336: WAF :: fetched 2 new logs [15-06-2022 22:41:01]14014: WAF :: fetched 2 new logs [15-06-2022 22:41:01]14014: Checking for user cron vulnerabilities [15-06-2022 22:43:01]19243: WAF :: fetched 1 new logs [15-06-2022 22:44:01]21893: Checking ditributed CMS bruteforce attacks [15-06-2022 22:45:01]24521: WAF :: fetched 2 new logs [15-06-2022 22:46:02]27293: WAF :: fetched 1 new logs [15-06-2022 22:54:01]16155: WAF :: fetched 1 new logs [15-06-2022 22:58:01]26762: WAF :: fetched 2 new logs [15-06-2022 23:00:02]31689: WAF :: fetched 323 new logs [15-06-2022 23:01:02]2484: WAF :: fetched 827 new logs [15-06-2022 23:02:02]5204: WAF :: fetched 919 new logs [15-06-2022 23:03:02]7835: WAF :: fetched 656 new logs [15-06-2022 23:04:01]10451: WAF :: fetched 115 new logs [15-06-2022 23:05:02]13080: WAF :: fetched 120 new logs [15-06-2022 23:06:01]15647: WAF :: fetched 59 new logs [15-06-2022 23:07:42]18590: Performed RBL check for 23.111.136.34. [15-06-2022 23:08:01]21086: WAF :: fetched 2 new logs [15-06-2022 23:12:02]31730: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655345522 [15-06-2022 23:12:02]31730: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-06-2022 23:12:04]31730: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-06-2022 23:12:04]31730: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220615/20220615-2312/20220615-231202-YqqRcm0Ps9OgxKszp9negwAAABc [15-06-2022 23:12:04]31730: WAF :: No suitable log file found. Using SQLite.. [15-06-2022 23:12:05]31730: WAF :: fetched 2070 new logs [15-06-2022 23:16:01]10064: WAF :: fetched 1 new logs [15-06-2022 23:17:02]12689: WAF :: fetched 2 new logs [15-06-2022 23:18:01]15292: WAF :: fetched 4 new logs [15-06-2022 23:19:02]17927: WAF :: fetched 17 new logs [15-06-2022 23:20:02]20541: WAF :: fetched 10 new logs [15-06-2022 23:21:01]23304: WAF :: fetched 2 new logs [15-06-2022 23:30:02]14746: WAF :: fetched 2 new logs [15-06-2022 23:31:01]17468: WAF :: fetched 1 new logs [15-06-2022 23:40:02]9032: WAF :: fetched 2 new logs [15-06-2022 23:41:01]11759: Checking for user cron vulnerabilities [15-06-2022 23:44:01]19619: Checking ditributed CMS bruteforce attacks [15-06-2022 23:48:02]30245: WAF :: fetched 1 new logs [15-06-2022 23:54:01]13768: WAF :: fetched 1 new logs [15-06-2022 23:55:02]16661: WAF :: fetched 1 new logs [15-06-2022 23:55:02]16656: httpd.conf changed. Refreshing watchlist. [15-06-2022 23:56:01]19390: WAF :: fetched 2 new logs [15-06-2022 23:58:01]24604: WAF :: fetched 1 new logs [15-06-2022 23:59:01]27209: WAF :: fetched 2 new logs [16-06-2022 00:00:02]29602: WAF :: fetched 11 new logs [16-06-2022 00:01:04]454: Sending daily report for June 16, 2022 [16-06-2022 00:03:01]5916: WAF :: fetched 1 new logs [16-06-2022 00:05:02]11183: WAF :: fetched 1 new logs [16-06-2022 00:05:02]11183: Deleted 0 entries older than 6 MONTH from scanner_logs [16-06-2022 00:05:02]11183: Deleted 0 files from Quarantine [16-06-2022 00:06:01]13932: WAF :: fetched 2 new logs [16-06-2022 00:07:02]16597: WAF :: fetched 5 new logs [16-06-2022 00:08:01]19266: WAF :: fetched 3 new logs [16-06-2022 00:09:01]21878: WAF :: fetched 6 new logs [16-06-2022 00:10:02]24536: WAF :: fetched 8 new logs [16-06-2022 00:11:01]27316: WAF :: fetched 6 new logs [16-06-2022 00:12:01]29941: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655349121 [16-06-2022 00:12:01]29941: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 00:12:03]29941: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 00:12:03]29941: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-0012/20220616-001201-Yqqfge4EqUTYmjyycNsyjwAAAA8 [16-06-2022 00:12:03]29941: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 00:12:03]29941: WAF :: fetched 4 new logs [16-06-2022 00:13:02]32593: WAF :: fetched 4 new logs [16-06-2022 00:14:01]2839: WAF :: fetched 4 new logs [16-06-2022 00:15:02]5606: WAF :: fetched 3 new logs [16-06-2022 00:16:02]8476: WAF :: fetched 3 new logs [16-06-2022 00:17:01]11122: WAF :: fetched 2 new logs [16-06-2022 00:18:01]13791: WAF :: fetched 4 new logs [16-06-2022 00:20:01]19092: WAF :: fetched 1 new logs [16-06-2022 00:21:02]21901: WAF :: fetched 5 new logs [16-06-2022 00:23:01]27078: WAF :: fetched 2 new logs [16-06-2022 00:24:02]29732: WAF :: fetched 6 new logs [16-06-2022 00:25:01]32375: WAF :: fetched 2 new logs [16-06-2022 00:26:02]2788: WAF :: fetched 4 new logs [16-06-2022 00:27:01]5481: WAF :: fetched 3 new logs [16-06-2022 00:28:01]8120: WAF :: fetched 3 new logs [16-06-2022 00:29:02]10726: WAF :: fetched 1 new logs [16-06-2022 00:30:01]13359: WAF :: fetched 3 new logs [16-06-2022 00:31:01]16165: WAF :: fetched 2 new logs [16-06-2022 00:34:02]24030: WAF :: fetched 1 new logs [16-06-2022 00:35:01]26656: WAF :: fetched 3 new logs [16-06-2022 00:41:01]10472: Checking for user cron vulnerabilities [16-06-2022 00:43:01]15780: WAF :: fetched 3 new logs [16-06-2022 00:44:01]18449: Checking ditributed CMS bruteforce attacks [16-06-2022 00:45:02]: Checking for software updates [16-06-2022 00:46:01]23802: WAF :: fetched 6 new logs [16-06-2022 00:47:01]26433: WAF :: fetched 3 new logs [16-06-2022 00:49:01]31713: WAF :: fetched 1 new logs [16-06-2022 00:51:02]4818: WAF :: fetched 6 new logs [16-06-2022 00:52:01]7434: WAF :: fetched 1 new logs [16-06-2022 00:55:02]15328: WAF :: fetched 1 new logs [16-06-2022 00:57:01]20691: WAF :: fetched 1 new logs [16-06-2022 01:00:02]28267: WAF :: fetched 1 new logs [16-06-2022 01:04:01]8575: WAF :: fetched 2 new logs [16-06-2022 01:10:01]25395: WAF :: fetched 1 new logs [16-06-2022 01:12:02]30906: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655352722 [16-06-2022 01:12:02]30906: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 01:12:04]30906: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 01:12:04]30906: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-0112/20220616-011202-YqqtkkxXjPRZiXQui5SYogAAABU [16-06-2022 01:12:04]30906: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 01:12:04]30906: WAF :: fetched 3 new logs [16-06-2022 01:13:01]1462: WAF :: fetched 2 new logs [16-06-2022 01:16:01]9770: WAF :: fetched 2 new logs [16-06-2022 01:19:02]18076: WAF :: fetched 1 new logs [16-06-2022 01:23:02]29543: WAF :: fetched 2 new logs [16-06-2022 01:24:02]32166: WAF :: fetched 1 new logs [16-06-2022 01:25:01]2733: WAF :: fetched 6 new logs [16-06-2022 01:27:01]8460: WAF :: fetched 2 new logs [16-06-2022 01:28:01]11284: WAF :: fetched 1 new logs [16-06-2022 01:29:02]13991: WAF :: fetched 2 new logs [16-06-2022 01:31:01]19968: WAF :: fetched 5 new logs [16-06-2022 01:32:02]22728: WAF :: fetched 2 new logs [16-06-2022 01:33:01]25614: WAF :: fetched 2 new logs [16-06-2022 01:35:02]31374: WAF :: fetched 1 new logs [16-06-2022 01:36:01]1744: WAF :: fetched 4 new logs [16-06-2022 01:37:02]4744: WAF :: fetched 3 new logs [16-06-2022 01:38:01]7368: WAF :: fetched 6 new logs [16-06-2022 01:39:01]10358: WAF :: fetched 11 new logs [16-06-2022 01:40:02]13337: WAF :: fetched 7 new logs [16-06-2022 01:41:01]16210: WAF :: fetched 7 new logs [16-06-2022 01:41:01]16210: Checking for user cron vulnerabilities [16-06-2022 01:42:02]19208: WAF :: fetched 11 new logs [16-06-2022 01:43:01]22212: WAF :: fetched 12 new logs [16-06-2022 01:44:02]25121: Checking ditributed CMS bruteforce attacks [16-06-2022 01:44:02]25121: WAF :: fetched 6 new logs [16-06-2022 01:45:01]: Checking for definition updates [16-06-2022 01:45:01]27918: WAF :: fetched 7 new logs [16-06-2022 01:46:01]30693: WAF :: fetched 8 new logs [16-06-2022 01:47:02]964: WAF :: fetched 5 new logs [16-06-2022 01:48:01]3882: WAF :: fetched 8 new logs [16-06-2022 01:49:02]6884: WAF :: fetched 14 new logs [16-06-2022 01:50:02]9661: WAF :: fetched 11 new logs [16-06-2022 01:51:01]12404: WAF :: fetched 16 new logs [16-06-2022 01:52:02]15182: WAF :: fetched 19 new logs [16-06-2022 01:53:01]18024: WAF :: fetched 14 new logs [16-06-2022 01:54:01]20667: WAF :: fetched 16 new logs [16-06-2022 01:55:02]23314: WAF :: fetched 5 new logs [16-06-2022 01:56:01]26023: WAF :: fetched 7 new logs [16-06-2022 01:57:02]28716: WAF :: fetched 6 new logs [16-06-2022 01:58:01]31353: WAF :: fetched 6 new logs [16-06-2022 01:59:01]1704: WAF :: fetched 12 new logs [16-06-2022 02:00:02]4423: WAF :: fetched 7 new logs [16-06-2022 02:01:01]7663: WAF :: fetched 8 new logs [16-06-2022 02:02:01]10316: WAF :: fetched 8 new logs [16-06-2022 02:03:02]12991: WAF :: fetched 11 new logs [16-06-2022 02:04:01]15623: WAF :: fetched 14 new logs [16-06-2022 02:05:01]18285: WAF :: fetched 6 new logs [16-06-2022 02:06:02]21018: WAF :: fetched 9 new logs [16-06-2022 02:07:01]23629: WAF :: fetched 5 new logs [16-06-2022 02:08:02]26346: WAF :: fetched 8 new logs [16-06-2022 02:09:02]28986: WAF :: fetched 11 new logs [16-06-2022 02:10:01]31630: WAF :: fetched 4 new logs [16-06-2022 02:11:02]2018: WAF :: fetched 13 new logs [16-06-2022 02:12:01]4710: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655356321 [16-06-2022 02:12:01]4710: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 02:12:03]4710: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 02:12:04]4710: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-0212/20220616-021201-Yqq7oZZNTnJhHUYaW9gUEQAAAAU [16-06-2022 02:12:04]4710: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 02:12:04]4710: WAF :: fetched 11 new logs [16-06-2022 02:13:01]7368: WAF :: fetched 6 new logs [16-06-2022 02:14:02]9995: WAF :: fetched 12 new logs [16-06-2022 02:15:01]12632: WAF :: fetched 7 new logs [16-06-2022 02:16:02]15437: WAF :: fetched 11 new logs [16-06-2022 02:17:02]18016: WAF :: fetched 11 new logs [16-06-2022 02:18:01]20663: WAF :: fetched 11 new logs [16-06-2022 02:19:02]23280: WAF :: fetched 5 new logs [16-06-2022 02:20:01]25935: WAF :: fetched 7 new logs [16-06-2022 02:21:01]28734: WAF :: fetched 2 new logs [16-06-2022 02:22:02]31365: WAF :: fetched 4 new logs [16-06-2022 02:23:02]1588: WAF :: fetched 2 new logs [16-06-2022 02:24:01]4270: WAF :: fetched 2 new logs [16-06-2022 02:26:01]9683: WAF :: fetched 2 new logs [16-06-2022 02:31:02]22929: WAF :: fetched 2 new logs [16-06-2022 02:32:01]25548: WAF :: fetched 2 new logs [16-06-2022 02:33:02]28206: WAF :: fetched 4 new logs [16-06-2022 02:34:01]30836: WAF :: fetched 2 new logs [16-06-2022 02:35:01]1070: WAF :: fetched 2 new logs [16-06-2022 02:36:02]3886: WAF :: fetched 7 new logs [16-06-2022 02:37:01]6538: WAF :: fetched 4 new logs [16-06-2022 02:38:02]9185: WAF :: fetched 2 new logs [16-06-2022 02:40:01]15595: WAF :: fetched 1 new logs [16-06-2022 02:41:02]18625: WAF :: fetched 4 new logs [16-06-2022 02:41:02]18625: Checking for user cron vulnerabilities [16-06-2022 02:42:01]21245: WAF :: fetched 1 new logs [16-06-2022 02:44:01]26591: Checking ditributed CMS bruteforce attacks [16-06-2022 02:44:01]26591: WAF :: fetched 1 new logs [16-06-2022 02:45:02]29501: WAF :: fetched 1 new logs [16-06-2022 02:46:02]32459: WAF :: fetched 3 new logs [16-06-2022 02:48:02]6119: WAF :: fetched 2 new logs [16-06-2022 02:50:01]11722: WAF :: fetched 4 new logs [16-06-2022 02:51:02]14571: WAF :: fetched 3 new logs [16-06-2022 02:53:02]20113: WAF :: fetched 25 new logs [16-06-2022 02:53:03]20112: Updated license status via CDN [16-06-2022 02:54:01]23040: WAF :: fetched 1 new logs [16-06-2022 02:56:02]28500: WAF :: fetched 7 new logs [16-06-2022 02:57:01]31118: WAF :: fetched 4 new logs [16-06-2022 02:58:02]1410: WAF :: fetched 2 new logs [16-06-2022 02:59:02]4071: WAF :: fetched 2 new logs [16-06-2022 03:00:01]6417: WAF :: fetched 1 new logs [16-06-2022 03:00:02]6417: Found and updated 32 CMS installations [16-06-2022 03:01:02]9725: WAF :: fetched 7 new logs [16-06-2022 03:02:21]6417: Sending CMS version vulnerability report emails to cpanel users [16-06-2022 03:02:24]6417: Checking wordpress installations for suspicious directories [16-06-2022 03:03:01]15612: WAF :: fetched 2 new logs [16-06-2022 03:04:34]15636: Sending CMS version vulnerability report emails to cpanel users [16-06-2022 03:04:37]15636: Checking wordpress installations for suspicious directories [16-06-2022 03:08:01]29451: WAF :: fetched 2 new logs [16-06-2022 03:09:02]32087: WAF :: fetched 2 new logs [16-06-2022 03:10:01]2475: WAF :: fetched 2 new logs [16-06-2022 03:11:02]5553: WAF :: fetched 5 new logs [16-06-2022 03:12:02]8443: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655359922 [16-06-2022 03:12:02]8443: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 03:12:04]8443: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 03:12:04]8443: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-0312/20220616-031202-YqrJsnZqSF2O8E5FZZBX0wAAAAk [16-06-2022 03:12:04]8443: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 03:12:04]8443: WAF :: fetched 2 new logs [16-06-2022 03:13:01]11145: WAF :: fetched 2 new logs [16-06-2022 03:14:02]13855: WAF :: fetched 7 new logs [16-06-2022 03:15:01]16667: WAF :: fetched 29 new logs [16-06-2022 03:16:02]19425: WAF :: fetched 5 new logs [16-06-2022 03:17:01]22220: WAF :: fetched 1 new logs [16-06-2022 03:18:02]25061: WAF :: fetched 2 new logs [16-06-2022 03:19:02]27786: WAF :: fetched 1 new logs [16-06-2022 03:20:02]30725: WAF :: fetched 5 new logs [16-06-2022 03:21:01]1184: WAF :: fetched 9 new logs [16-06-2022 03:22:01]4047: WAF :: fetched 6 new logs [16-06-2022 03:23:02]6784: WAF :: fetched 13 new logs [16-06-2022 03:24:01]9402: WAF :: fetched 10 new logs [16-06-2022 03:25:02]12053: WAF :: fetched 9 new logs [16-06-2022 03:26:02]14719: WAF :: fetched 6 new logs [16-06-2022 03:27:01]17421: WAF :: fetched 4 new logs [16-06-2022 03:28:01]20055: WAF :: fetched 8 new logs [16-06-2022 03:29:02]22712: WAF :: fetched 8 new logs [16-06-2022 03:30:01]25353: WAF :: fetched 11 new logs [16-06-2022 03:31:02]28047: WAF :: fetched 6 new logs [16-06-2022 03:32:01]30701: WAF :: fetched 13 new logs [16-06-2022 03:33:02]1021: WAF :: fetched 8 new logs [16-06-2022 03:34:01]3668: WAF :: fetched 10 new logs [16-06-2022 03:35:01]6354: WAF :: fetched 10 new logs [16-06-2022 03:36:02]6586: WAF :: fetched 8 new logs [16-06-2022 03:37:01]25149: WAF :: fetched 4 new logs [16-06-2022 03:38:02]7111: WAF :: fetched 8 new logs [16-06-2022 03:39:02]18510: WAF :: fetched 11 new logs [16-06-2022 03:40:01]21179: WAF :: fetched 10 new logs [16-06-2022 03:41:02]23883: WAF :: fetched 9 new logs [16-06-2022 03:41:02]23883: Checking for user cron vulnerabilities [16-06-2022 03:42:01]26507: WAF :: fetched 7 new logs [16-06-2022 03:43:02]29238: WAF :: fetched 13 new logs [16-06-2022 03:44:01]31827: Checking ditributed CMS bruteforce attacks [16-06-2022 03:44:01]31827: WAF :: fetched 12 new logs [16-06-2022 03:45:02]2079: WAF :: fetched 10 new logs [16-06-2022 03:46:01]4763: WAF :: fetched 7 new logs [16-06-2022 03:47:01]7499: WAF :: fetched 10 new logs [16-06-2022 03:48:02]10129: WAF :: fetched 2 new logs [16-06-2022 03:49:01]12856: WAF :: fetched 1 new logs [16-06-2022 03:50:02]15638: WAF :: fetched 1 new logs [16-06-2022 03:51:01]18295: WAF :: fetched 1 new logs [16-06-2022 03:52:01]20990: WAF :: fetched 2 new logs [16-06-2022 03:53:02]23607: WAF :: fetched 2 new logs [16-06-2022 03:55:02]28872: WAF :: fetched 4 new logs [16-06-2022 04:03:01]18045: WAF :: fetched 1 new logs [16-06-2022 04:04:01]20662: WAF :: fetched 1 new logs [16-06-2022 04:05:02]23318: WAF :: fetched 1 new logs [16-06-2022 04:08:01]31302: WAF :: fetched 2 new logs [16-06-2022 04:10:01]4206: WAF :: fetched 1 new logs [16-06-2022 04:12:01]9631: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655363521 [16-06-2022 04:12:01]9631: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 04:12:03]9631: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 04:12:04]9631: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-0412/20220616-041201-YqrXwa4A_N4F4pmB6MSfkAAAAB0 [16-06-2022 04:12:04]9631: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 04:14:01]14917: WAF :: fetched 1 new logs [16-06-2022 04:20:02]30766: WAF :: fetched 1 new logs [16-06-2022 04:23:01]6469: WAF :: fetched 3 new logs [16-06-2022 04:29:01]22282: WAF :: fetched 1 new logs [16-06-2022 04:30:01]24937: WAF :: fetched 1 new logs [16-06-2022 04:32:01]30340: WAF :: fetched 1 new logs [16-06-2022 04:34:01]3263: WAF :: fetched 2 new logs [16-06-2022 04:35:01]5950: WAF :: fetched 3 new logs [16-06-2022 04:39:02]16689: WAF :: fetched 2 new logs [16-06-2022 04:41:02]21981: Checking for user cron vulnerabilities [16-06-2022 04:43:02]27287: WAF :: fetched 1 new logs [16-06-2022 04:44:01]29885: Checking ditributed CMS bruteforce attacks [16-06-2022 04:44:02]29885: WAF :: fetched 1 new logs [16-06-2022 04:48:01]8226: WAF :: fetched 1 new logs [16-06-2022 04:49:01]10876: WAF :: fetched 1 new logs [16-06-2022 04:50:02]13539: WAF :: fetched 1 new logs [16-06-2022 04:51:01]16200: WAF :: fetched 13 new logs [16-06-2022 04:53:01]21521: WAF :: fetched 28 new logs [16-06-2022 04:55:02]26803: WAF :: fetched 1 new logs [16-06-2022 04:57:02]32176: WAF :: fetched 3 new logs [16-06-2022 04:58:01]2411: WAF :: fetched 1 new logs [16-06-2022 05:01:01]10595: WAF :: fetched 1 new logs [16-06-2022 05:01:41]10591: Starting daily scan on files updated in last 24 hrs [16-06-2022 05:02:02]13396: WAF :: fetched 1 new logs [16-06-2022 05:07:01]26626: WAF :: fetched 2 new logs [16-06-2022 05:09:01]31924: WAF :: fetched 1 new logs [16-06-2022 05:10:02]2219: WAF :: fetched 2 new logs [16-06-2022 05:11:01]4953: WAF :: fetched 3 new logs [16-06-2022 05:12:01]7705: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655367121 [16-06-2022 05:12:01]7705: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 05:12:03]7705: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 05:12:03]7705: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-0512/20220616-051201-Yqrl0QcKiEt5wqWpCARU8gAAAAg [16-06-2022 05:12:03]7705: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 05:12:04]7705: WAF :: fetched 13 new logs [16-06-2022 05:16:01]18214: WAF :: fetched 1 new logs [16-06-2022 05:17:02]20947: WAF :: fetched 2 new logs [16-06-2022 05:19:01]26182: WAF :: fetched 2 new logs [16-06-2022 05:20:02]28835: WAF :: fetched 1 new logs [16-06-2022 05:23:01]4515: WAF :: fetched 2 new logs [16-06-2022 05:24:02]7170: WAF :: fetched 1 new logs [16-06-2022 05:30:02]23055: WAF :: fetched 3 new logs [16-06-2022 05:33:01]30997: WAF :: fetched 2 new logs [16-06-2022 05:41:01]19967: Checking for user cron vulnerabilities [16-06-2022 05:43:02]25360: WAF :: fetched 2 new logs [16-06-2022 05:44:01]27956: Checking ditributed CMS bruteforce attacks [16-06-2022 05:44:01]27956: WAF :: fetched 2 new logs [16-06-2022 06:00:02]5396: WAF :: fetched 3 new logs [16-06-2022 06:03:02]13900: WAF :: fetched 8 new logs [16-06-2022 06:04:01]16507: WAF :: fetched 2 new logs [16-06-2022 06:09:01]29790: WAF :: fetched 2 new logs [16-06-2022 06:11:01]2704: WAF :: fetched 3 new logs [16-06-2022 06:12:02]5509: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655370722 [16-06-2022 06:12:02]5509: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 06:12:04]5509: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 06:12:04]5509: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-0612/20220616-061202-Yqrz4ttciOEOvEuUumu4YAAAAA4 [16-06-2022 06:12:04]5509: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [16-06-2022 06:12:05]5509: WAF :: fetched 7 new logs [16-06-2022 06:13:02]8118: WAF :: fetched 7 new logs [16-06-2022 06:14:01]10751: WAF :: fetched 8 new logs [16-06-2022 06:15:02]13410: WAF :: fetched 8 new logs [16-06-2022 06:16:01]16070: WAF :: fetched 5 new logs [16-06-2022 06:20:01]26598: WAF :: fetched 2 new logs [16-06-2022 06:21:02]29380: WAF :: fetched 3 new logs [16-06-2022 06:24:02]5038: WAF :: fetched 1 new logs [16-06-2022 06:29:02]18444: WAF :: fetched 1 new logs [16-06-2022 06:30:01]21069: WAF :: fetched 17 new logs [16-06-2022 06:31:02]23745: WAF :: fetched 11 new logs [16-06-2022 06:32:02]26481: WAF :: fetched 2 new logs [16-06-2022 06:35:01]2047: WAF :: fetched 3 new logs [16-06-2022 06:36:02]4792: WAF :: fetched 1 new logs [16-06-2022 06:40:01]15399: WAF :: fetched 2 new logs [16-06-2022 06:41:02]18068: Checking for user cron vulnerabilities [16-06-2022 06:44:01]26013: Checking ditributed CMS bruteforce attacks [16-06-2022 06:46:02]31291: WAF :: fetched 1 new logs [16-06-2022 06:47:01]1572: WAF :: fetched 2 new logs [16-06-2022 06:48:02]4283: WAF :: fetched 24 new logs [16-06-2022 06:49:02]6925: WAF :: fetched 1 new logs [16-06-2022 06:50:02]9588: WAF :: fetched 2 new logs [16-06-2022 06:51:01]11884: WAF :: fetched 6 new logs [16-06-2022 06:52:02]15018: WAF :: fetched 6 new logs [16-06-2022 06:53:01]17629: WAF :: fetched 5 new logs [16-06-2022 06:54:01]20255: WAF :: fetched 2 new logs [16-06-2022 06:55:02]22892: WAF :: fetched 2 new logs [16-06-2022 06:56:02]25523: WAF :: fetched 6 new logs [16-06-2022 06:57:02]28238: WAF :: fetched 2 new logs [16-06-2022 06:58:01]30526: WAF :: fetched 3 new logs [16-06-2022 07:01:02]6686: WAF :: fetched 9 new logs [16-06-2022 07:02:01]9253: WAF :: fetched 1 new logs [16-06-2022 07:08:01]25289: WAF :: fetched 1 new logs [16-06-2022 07:11:01]370: WAF :: fetched 1 new logs [16-06-2022 07:12:01]3553: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655374321 [16-06-2022 07:12:01]3553: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 07:12:03]3553: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 07:12:03]3553: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-0712/20220616-071201-YqsB8Ush4AfvYw3PoxDg-AAAAA8 [16-06-2022 07:12:03]3553: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 07:12:04]3553: WAF :: fetched 112 new logs [16-06-2022 07:14:01]8859: WAF :: fetched 2 new logs [16-06-2022 07:15:02]11522: WAF :: fetched 3 new logs [16-06-2022 07:16:02]14153: WAF :: fetched 1 new logs [16-06-2022 07:18:02]19481: WAF :: fetched 1 new logs [16-06-2022 07:20:01]24759: WAF :: fetched 1 new logs [16-06-2022 07:21:01]27425: WAF :: fetched 14 new logs [16-06-2022 07:23:01]32698: WAF :: fetched 1 new logs [16-06-2022 07:27:01]11074: WAF :: fetched 1 new logs [16-06-2022 07:28:02]13667: WAF :: fetched 2 new logs [16-06-2022 07:29:02]16339: WAF :: fetched 1 new logs [16-06-2022 07:31:01]21629: WAF :: fetched 3 new logs [16-06-2022 07:32:01]24346: WAF :: fetched 1 new logs [16-06-2022 07:35:01]32239: WAF :: fetched 1 new logs [16-06-2022 07:36:01]2546: WAF :: fetched 3 new logs [16-06-2022 07:37:02]5368: WAF :: fetched 6 new logs [16-06-2022 07:38:02]8007: WAF :: fetched 1 new logs [16-06-2022 07:41:01]15631: Checking for user cron vulnerabilities [16-06-2022 07:44:01]23956: Checking ditributed CMS bruteforce attacks [16-06-2022 07:45:01]: Checking for definition updates [16-06-2022 07:45:01]26604: WAF :: fetched 1 new logs [16-06-2022 07:46:01]29272: WAF :: fetched 1 new logs [16-06-2022 07:59:01]31703: WAF :: fetched 1 new logs [16-06-2022 08:00:01]1695: WAF :: fetched 1 new logs [16-06-2022 08:08:01]23728: WAF :: fetched 1 new logs [16-06-2022 08:10:01]29027: WAF :: fetched 1 new logs [16-06-2022 08:11:02]31748: WAF :: fetched 1 new logs [16-06-2022 08:12:02]1998: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655377922 [16-06-2022 08:12:02]1998: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 08:12:04]1998: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 08:12:04]1998: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-0812/20220616-081202-YqsQAiH84KM-ksLEsZ-YYgAAAAE [16-06-2022 08:12:04]1998: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 08:12:04]1998: WAF :: fetched 3 new logs [16-06-2022 08:14:02]7396: WAF :: fetched 2 new logs [16-06-2022 08:15:01]10015: WAF :: fetched 2 new logs [16-06-2022 08:16:01]12701: WAF :: fetched 2 new logs [16-06-2022 08:17:01]15383: WAF :: fetched 2 new logs [16-06-2022 08:18:02]18144: WAF :: fetched 2 new logs [16-06-2022 08:19:02]20783: WAF :: fetched 2 new logs [16-06-2022 08:20:01]23425: WAF :: fetched 6 new logs [16-06-2022 08:21:02]26149: WAF :: fetched 5 new logs [16-06-2022 08:22:02]28757: WAF :: fetched 4 new logs [16-06-2022 08:23:01]31489: WAF :: fetched 9 new logs [16-06-2022 08:24:02]1729: WAF :: fetched 7 new logs [16-06-2022 08:25:01]4444: WAF :: fetched 4 new logs [16-06-2022 08:26:02]7149: WAF :: fetched 4 new logs [16-06-2022 08:27:01]9725: WAF :: fetched 1 new logs [16-06-2022 08:28:02]12471: WAF :: fetched 2 new logs [16-06-2022 08:29:01]15097: WAF :: fetched 1 new logs [16-06-2022 08:30:02]17801: WAF :: fetched 1 new logs [16-06-2022 08:31:01]20445: WAF :: fetched 2 new logs [16-06-2022 08:32:01]23083: WAF :: fetched 3 new logs [16-06-2022 08:33:02]25833: WAF :: fetched 1 new logs [16-06-2022 08:40:02]12140: WAF :: fetched 1 new logs [16-06-2022 08:41:01]14825: Checking for user cron vulnerabilities [16-06-2022 08:42:02]17519: WAF :: fetched 2 new logs [16-06-2022 08:44:01]22833: Checking ditributed CMS bruteforce attacks [16-06-2022 08:47:01]30774: WAF :: fetched 1 new logs [16-06-2022 08:49:02]3816: WAF :: fetched 1 new logs [16-06-2022 08:50:01]6489: WAF :: fetched 1 new logs [16-06-2022 08:52:01]11831: WAF :: fetched 1 new logs [16-06-2022 08:55:02]19843: WAF :: fetched 3 new logs [16-06-2022 08:59:01]30461: WAF :: fetched 1 new logs [16-06-2022 09:02:02]6367: WAF :: fetched 1 new logs [16-06-2022 09:05:01]14338: WAF :: fetched 1 new logs [16-06-2022 09:07:02]19639: WAF :: fetched 1 new logs [16-06-2022 09:11:01]30351: WAF :: fetched 1 new logs [16-06-2022 09:12:02]568: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655381522 [16-06-2022 09:12:02]568: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 09:12:04]568: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 09:12:04]568: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-0912/20220616-091202-YqseEkJZ3GOG2lGbPv7i9gAAABU [16-06-2022 09:12:04]568: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 09:12:04]568: WAF :: fetched 2 new logs [16-06-2022 09:14:02]6033: WAF :: fetched 1 new logs [16-06-2022 09:16:02]11318: WAF :: fetched 2 new logs [16-06-2022 09:20:02]21971: WAF :: fetched 1 new logs [16-06-2022 09:21:02]24633: WAF :: fetched 1 new logs [16-06-2022 09:23:02]30009: WAF :: fetched 2 new logs [16-06-2022 09:24:01]32637: WAF :: fetched 5 new logs [16-06-2022 09:28:02]11010: WAF :: fetched 2 new logs [16-06-2022 09:30:01]16331: WAF :: fetched 1 new logs [16-06-2022 09:32:02]21687: WAF :: fetched 2 new logs [16-06-2022 09:34:01]27045: WAF :: fetched 4 new logs [16-06-2022 09:35:02]29696: WAF :: fetched 2 new logs [16-06-2022 09:36:02]32368: WAF :: fetched 2 new logs [16-06-2022 09:37:01]2651: WAF :: fetched 2 new logs [16-06-2022 09:38:02]5489: WAF :: fetched 2 new logs [16-06-2022 09:39:01]8121: WAF :: fetched 2 new logs [16-06-2022 09:41:02]13477: Checking for user cron vulnerabilities [16-06-2022 09:44:01]21492: Checking ditributed CMS bruteforce attacks [16-06-2022 09:45:02]24131: WAF :: fetched 1 new logs [16-06-2022 09:46:01]26857: WAF :: fetched 2 new logs [16-06-2022 09:47:02]29475: WAF :: fetched 5 new logs [16-06-2022 09:48:01]32019: WAF :: fetched 7 new logs [16-06-2022 09:49:02]2422: WAF :: fetched 6 new logs [16-06-2022 09:50:01]5123: WAF :: fetched 7 new logs [16-06-2022 09:51:01]7816: WAF :: fetched 5 new logs [16-06-2022 09:54:02]15921: WAF :: fetched 1 new logs [16-06-2022 09:56:01]21257: WAF :: fetched 1 new logs [16-06-2022 09:58:02]26655: WAF :: fetched 1 new logs [16-06-2022 10:06:01]16034: WAF :: fetched 1 new logs [16-06-2022 10:08:01]21395: WAF :: fetched 1 new logs [16-06-2022 10:10:01]26716: WAF :: fetched 1 new logs [16-06-2022 10:12:02]32030: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655385122 [16-06-2022 10:12:02]32030: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 10:12:04]32030: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 10:12:04]32030: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-1012/20220616-101202-YqssIm9z1FKJWFvFcr1r4QAAAA8 [16-06-2022 10:12:04]32030: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 10:12:04]32030: WAF :: fetched 2 new logs [16-06-2022 10:15:02]7710: WAF :: fetched 3 new logs [16-06-2022 10:19:01]18396: WAF :: fetched 1 new logs [16-06-2022 10:20:02]21067: WAF :: fetched 1 new logs [16-06-2022 10:25:01]1987: WAF :: fetched 2 new logs [16-06-2022 10:26:02]4788: WAF :: fetched 1 new logs [16-06-2022 10:29:02]12720: WAF :: fetched 1 new logs [16-06-2022 10:36:02]31639: WAF :: fetched 1 new logs [16-06-2022 10:38:01]4706: WAF :: fetched 1 new logs [16-06-2022 10:40:01]10059: WAF :: fetched 1 new logs [16-06-2022 10:41:01]12776: Checking for user cron vulnerabilities [16-06-2022 10:42:02]15456: WAF :: fetched 1 new logs [16-06-2022 10:44:01]20798: Checking ditributed CMS bruteforce attacks [16-06-2022 10:47:02]28842: WAF :: fetched 1 new logs [16-06-2022 10:51:01]7279: WAF :: fetched 1 new logs [16-06-2022 10:52:02]9920: WAF :: fetched 1 new logs [16-06-2022 10:56:01]20641: WAF :: fetched 2 new logs [16-06-2022 11:01:01]1796: WAF :: fetched 1 new logs [16-06-2022 11:03:01]7360: WAF :: fetched 2 new logs [16-06-2022 11:05:02]12681: WAF :: fetched 1 new logs [16-06-2022 11:07:02]18040: WAF :: fetched 3 new logs [16-06-2022 11:07:38]18198: Performed RBL check for 23.111.136.34. Blacklisted by 1hosts [16-06-2022 11:09:02]23457: WAF :: fetched 2 new logs [16-06-2022 11:12:02]31475: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655388722 [16-06-2022 11:12:02]31475: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 11:12:04]31475: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 11:12:04]31475: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-1112/20220616-111202-Yqs6Mq2ytXf13WcEx8XbIgAAAAo [16-06-2022 11:12:04]31475: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 11:12:04]31475: WAF :: fetched 3 new logs [16-06-2022 11:17:02]12556: WAF :: fetched 1 new logs [16-06-2022 11:19:02]17957: WAF :: fetched 7 new logs [16-06-2022 11:20:02]20649: WAF :: fetched 8 new logs [16-06-2022 11:21:01]23345: WAF :: fetched 4 new logs [16-06-2022 11:22:02]26046: WAF :: fetched 2 new logs [16-06-2022 11:26:01]4581: WAF :: fetched 1 new logs [16-06-2022 11:30:02]15502: WAF :: fetched 1 new logs [16-06-2022 11:31:01]18172: WAF :: fetched 2 new logs [16-06-2022 11:38:01]4866: WAF :: fetched 4 new logs [16-06-2022 11:41:01]13017: Checking for user cron vulnerabilities [16-06-2022 11:44:01]21165: Checking ditributed CMS bruteforce attacks [16-06-2022 11:44:01]21165: WAF :: fetched 1 new logs [16-06-2022 11:46:02]26577: WAF :: fetched 1 new logs [16-06-2022 11:47:01]29222: WAF :: fetched 1 new logs [16-06-2022 11:49:02]2243: WAF :: fetched 1 new logs [16-06-2022 11:54:02]15714: WAF :: fetched 1 new logs [16-06-2022 11:55:01]18338: WAF :: fetched 1 new logs [16-06-2022 11:58:02]26384: WAF :: fetched 1 new logs [16-06-2022 12:03:01]7662: WAF :: fetched 1 new logs [16-06-2022 12:05:02]12983: WAF :: fetched 2 new logs [16-06-2022 12:09:01]23692: WAF :: fetched 1 new logs [16-06-2022 12:10:02]26401: WAF :: fetched 1 new logs [16-06-2022 12:12:01]31740: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655392321 [16-06-2022 12:12:01]31740: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 12:12:03]31740: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 12:12:03]31740: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-1212/20220616-121201-YqtIQeO35ivEhSztyfMlMgAAAAM [16-06-2022 12:12:03]31740: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 12:12:04]31740: WAF :: fetched 1 new logs [16-06-2022 12:15:01]7493: WAF :: fetched 1 new logs [16-06-2022 12:16:01]10242: WAF :: fetched 1 new logs [16-06-2022 12:17:02]13148: WAF :: fetched 1 new logs [16-06-2022 12:19:02]19157: WAF :: fetched 1 new logs [16-06-2022 12:20:02]21835: WAF :: fetched 2 new logs [16-06-2022 12:22:02]27168: WAF :: fetched 1 new logs [16-06-2022 12:27:01]8272: WAF :: fetched 1 new logs [16-06-2022 12:30:01]16312: WAF :: fetched 1 new logs [16-06-2022 12:32:02]21665: WAF :: fetched 1 new logs [16-06-2022 12:34:01]27036: WAF :: fetched 2 new logs [16-06-2022 12:35:02]29739: WAF :: fetched 21 new logs [16-06-2022 12:39:01]8243: WAF :: fetched 2 new logs [16-06-2022 12:41:01]13633: WAF :: fetched 2 new logs [16-06-2022 12:41:01]13633: Checking for user cron vulnerabilities [16-06-2022 12:43:01]19069: WAF :: fetched 2 new logs [16-06-2022 12:44:01]21714: Checking ditributed CMS bruteforce attacks [16-06-2022 12:44:01]21714: WAF :: fetched 1 new logs [16-06-2022 12:45:01]: Checking for software updates [16-06-2022 12:45:02]24434: WAF :: fetched 5 new logs [16-06-2022 12:47:02]29772: WAF :: fetched 2 new logs [16-06-2022 12:49:01]2744: WAF :: fetched 1 new logs [16-06-2022 12:50:02]5519: WAF :: fetched 4 new logs [16-06-2022 12:51:01]8204: WAF :: fetched 1 new logs [16-06-2022 12:54:01]16178: WAF :: fetched 1 new logs [16-06-2022 12:56:01]21467: WAF :: fetched 2 new logs [16-06-2022 12:57:01]24075: WAF :: fetched 6 new logs [16-06-2022 13:01:02]2549: WAF :: fetched 4 new logs [16-06-2022 13:02:01]5268: WAF :: fetched 7 new logs [16-06-2022 13:03:02]8011: WAF :: fetched 1 new logs [16-06-2022 13:04:01]10668: WAF :: fetched 1 new logs [16-06-2022 13:05:02]13310: WAF :: fetched 5 new logs [16-06-2022 13:06:01]16004: WAF :: fetched 1 new logs [16-06-2022 13:08:01]21321: WAF :: fetched 2 new logs [16-06-2022 13:09:01]23963: WAF :: fetched 4 new logs [16-06-2022 13:10:02]26636: WAF :: fetched 1 new logs [16-06-2022 13:11:01]29271: WAF :: fetched 2 new logs [16-06-2022 13:12:02]31924: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655395922 [16-06-2022 13:12:02]31924: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 13:12:04]31924: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 13:12:04]31924: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-1312/20220616-131202-YqtWUg5J75JU5uWKNmE4VAAAAAA [16-06-2022 13:12:04]31924: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [16-06-2022 13:12:04]31924: WAF :: fetched 1 new logs [16-06-2022 13:13:01]2172: WAF :: fetched 1 new logs [16-06-2022 13:15:01]7634: WAF :: fetched 5 new logs [16-06-2022 13:16:01]10321: WAF :: fetched 3 new logs [16-06-2022 13:17:02]12978: WAF :: fetched 4 new logs [16-06-2022 13:21:01]23639: WAF :: fetched 2 new logs [16-06-2022 13:22:01]26280: WAF :: fetched 7 new logs [16-06-2022 13:23:01]28926: WAF :: fetched 5 new logs [16-06-2022 13:24:02]31687: WAF :: fetched 2 new logs [16-06-2022 13:25:01]1963: WAF :: fetched 6 new logs [16-06-2022 13:26:02]4805: WAF :: fetched 2 new logs [16-06-2022 13:31:01]18204: WAF :: fetched 1 new logs [16-06-2022 13:32:01]20871: WAF :: fetched 9 new logs [16-06-2022 13:33:02]23510: WAF :: fetched 4 new logs [16-06-2022 13:34:01]26197: WAF :: fetched 2 new logs [16-06-2022 13:35:01]28849: WAF :: fetched 3 new logs [16-06-2022 13:36:02]31562: WAF :: fetched 1 new logs [16-06-2022 13:39:01]7170: WAF :: fetched 1 new logs [16-06-2022 13:40:01]9835: WAF :: fetched 1 new logs [16-06-2022 13:41:02]12564: Checking for user cron vulnerabilities [16-06-2022 13:44:01]20517: Checking ditributed CMS bruteforce attacks [16-06-2022 13:44:01]20517: WAF :: fetched 2 new logs [16-06-2022 13:45:01]: Checking for definition updates [16-06-2022 13:45:01]23125: WAF :: fetched 2 new logs [16-06-2022 13:45:03]23128: Updated virus defnition : malware.expert.ndb [16-06-2022 13:47:01]28458: WAF :: fetched 1 new logs [16-06-2022 13:49:01]1462: WAF :: fetched 1 new logs [16-06-2022 13:55:01]17574: WAF :: fetched 1 new logs [16-06-2022 13:56:01]20235: WAF :: fetched 4 new logs [16-06-2022 13:57:02]22874: WAF :: fetched 1 new logs [16-06-2022 14:02:01]4065: WAF :: fetched 2 new logs [16-06-2022 14:03:01]6735: WAF :: fetched 1 new logs [16-06-2022 14:04:01]9468: WAF :: fetched 2 new logs [16-06-2022 14:06:02]14810: WAF :: fetched 1 new logs [16-06-2022 14:07:01]17437: WAF :: fetched 6 new logs [16-06-2022 14:08:02]20158: WAF :: fetched 1 new logs [16-06-2022 14:10:01]25520: WAF :: fetched 2 new logs [16-06-2022 14:11:02]28249: WAF :: fetched 2 new logs [16-06-2022 14:12:01]30863: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655399521 [16-06-2022 14:12:01]30863: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 14:12:03]30863: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 14:12:04]30863: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-1412/20220616-141201-YqtkYb3l6kbVc5CkIpoq6gAAAA8 [16-06-2022 14:12:04]30863: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 14:12:04]30863: WAF :: fetched 74 new logs [16-06-2022 14:13:02]1129: WAF :: fetched 4 new logs [16-06-2022 14:14:01]3894: WAF :: fetched 2 new logs [16-06-2022 14:16:01]9251: WAF :: fetched 2 new logs [16-06-2022 14:17:02]11867: WAF :: fetched 2 new logs [16-06-2022 14:18:01]14491: WAF :: fetched 1 new logs [16-06-2022 14:21:02]22553: WAF :: fetched 1 new logs [16-06-2022 14:22:01]25209: WAF :: fetched 1 new logs [16-06-2022 14:24:01]30586: WAF :: fetched 1 new logs [16-06-2022 14:27:02]6294: WAF :: fetched 2 new logs [16-06-2022 14:28:02]8914: WAF :: fetched 1 new logs [16-06-2022 14:32:01]19649: WAF :: fetched 1 new logs [16-06-2022 14:34:01]24983: WAF :: fetched 1 new logs [16-06-2022 14:35:02]27649: WAF :: fetched 3 new logs [16-06-2022 14:39:01]6050: WAF :: fetched 1 new logs [16-06-2022 14:40:02]8763: WAF :: fetched 2 new logs [16-06-2022 14:41:01]11428: WAF :: fetched 3 new logs [16-06-2022 14:41:01]11428: Checking for user cron vulnerabilities [16-06-2022 14:42:01]14079: WAF :: fetched 4 new logs [16-06-2022 14:43:02]16718: WAF :: fetched 6 new logs [16-06-2022 14:44:01]19431: Checking ditributed CMS bruteforce attacks [16-06-2022 14:44:01]19431: WAF :: fetched 6 new logs [16-06-2022 14:45:01]22085: WAF :: fetched 2 new logs [16-06-2022 14:46:02]24776: WAF :: fetched 4 new logs [16-06-2022 14:47:01]27398: WAF :: fetched 4 new logs [16-06-2022 14:48:02]30038: WAF :: fetched 3 new logs [16-06-2022 14:49:01]32748: WAF :: fetched 1 new logs [16-06-2022 14:50:01]3036: WAF :: fetched 4 new logs [16-06-2022 14:51:02]5844: WAF :: fetched 8 new logs [16-06-2022 14:52:01]8462: WAF :: fetched 3 new logs [16-06-2022 14:53:02]11128: WAF :: fetched 2 new logs [16-06-2022 14:53:03]11133: Updated license status via CDN [16-06-2022 14:55:01]16508: WAF :: fetched 2 new logs [16-06-2022 14:56:02]19206: WAF :: fetched 1 new logs [16-06-2022 14:59:02]27230: WAF :: fetched 1 new logs [16-06-2022 15:01:01]32736: Reseting cPGuard inotify settings [16-06-2022 15:03:01]5788: WAF :: fetched 2 new logs [16-06-2022 15:05:01]11103: WAF :: fetched 1 new logs [16-06-2022 15:09:02]22066: WAF :: fetched 1 new logs [16-06-2022 15:11:01]27405: WAF :: fetched 1 new logs [16-06-2022 15:12:02]30132: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655403122 [16-06-2022 15:12:02]30132: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 15:12:04]30132: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 15:12:04]30132: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-1512/20220616-151202-YqtyclKECTg5Btz_wbw8ggAAADk [16-06-2022 15:12:04]30132: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 15:12:04]30132: WAF :: fetched 4 new logs [16-06-2022 15:13:01]32760: WAF :: fetched 2 new logs [16-06-2022 15:16:01]8531: WAF :: fetched 2 new logs [16-06-2022 15:17:01]11207: WAF :: fetched 4 new logs [16-06-2022 15:18:02]13876: WAF :: fetched 4 new logs [16-06-2022 15:20:02]19296: WAF :: fetched 1 new logs [16-06-2022 15:21:01]21968: WAF :: fetched 2 new logs [16-06-2022 15:22:01]24661: WAF :: fetched 1 new logs [16-06-2022 15:24:01]30044: WAF :: fetched 2 new logs [16-06-2022 15:25:02]32743: WAF :: fetched 4 new logs [16-06-2022 15:26:02]3016: WAF :: fetched 3 new logs [16-06-2022 15:30:02]13966: WAF :: fetched 1 new logs [16-06-2022 15:33:02]22036: WAF :: fetched 8 new logs [16-06-2022 15:34:01]24770: WAF :: fetched 1 new logs [16-06-2022 15:35:02]27463: WAF :: fetched 4 new logs [16-06-2022 15:36:02]30197: WAF :: fetched 1 new logs [16-06-2022 15:39:02]5965: WAF :: fetched 1 new logs [16-06-2022 15:40:02]8628: WAF :: fetched 2 new logs [16-06-2022 15:41:02]11337: WAF :: fetched 1 new logs [16-06-2022 15:41:02]11337: Checking for user cron vulnerabilities [16-06-2022 15:43:02]16683: WAF :: fetched 7 new logs [16-06-2022 15:44:01]19410: Checking ditributed CMS bruteforce attacks [16-06-2022 15:45:01]22102: WAF :: fetched 2 new logs [16-06-2022 15:47:01]27472: WAF :: fetched 1 new logs [16-06-2022 15:51:01]6013: WAF :: fetched 2 new logs [16-06-2022 15:52:02]8704: WAF :: fetched 1 new logs [16-06-2022 15:53:01]11362: WAF :: fetched 2 new logs [16-06-2022 16:05:01]11777: WAF :: fetched 1 new logs [16-06-2022 16:06:02]14574: WAF :: fetched 1 new logs [16-06-2022 16:12:02]30848: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655406722 [16-06-2022 16:12:02]30848: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 16:12:04]30848: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 16:12:04]30848: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-1612/20220616-161202-YquAgj5EKRbGf2pXzRuCqQAAABs [16-06-2022 16:12:04]30848: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 16:12:04]30848: WAF :: fetched 1 new logs [16-06-2022 16:14:02]3994: WAF :: fetched 1 new logs [16-06-2022 16:18:01]14844: WAF :: fetched 1 new logs [16-06-2022 16:23:01]28508: WAF :: fetched 1 new logs [16-06-2022 16:24:02]31317: WAF :: fetched 1 new logs [16-06-2022 16:36:01]31669: WAF :: fetched 2 new logs [16-06-2022 16:37:02]2005: WAF :: fetched 4 new logs [16-06-2022 16:38:01]4781: WAF :: fetched 2 new logs [16-06-2022 16:39:02]7563: WAF :: fetched 1 new logs [16-06-2022 16:41:01]13012: Checking for user cron vulnerabilities [16-06-2022 16:42:02]15696: WAF :: fetched 4 new logs [16-06-2022 16:43:01]18352: WAF :: fetched 3 new logs [16-06-2022 16:44:02]21179: Checking ditributed CMS bruteforce attacks [16-06-2022 16:44:02]21179: WAF :: fetched 1 new logs [16-06-2022 16:45:01]23858: WAF :: fetched 3 new logs [16-06-2022 16:46:01]26611: WAF :: fetched 1 new logs [16-06-2022 16:47:01]29312: WAF :: fetched 1 new logs [16-06-2022 16:48:02]32071: WAF :: fetched 10 new logs [16-06-2022 16:49:01]2447: WAF :: fetched 9 new logs [16-06-2022 16:50:02]5283: WAF :: fetched 8 new logs [16-06-2022 16:51:02]8035: WAF :: fetched 3 new logs [16-06-2022 16:52:01]10751: WAF :: fetched 4 new logs [16-06-2022 16:53:02]13444: WAF :: fetched 1 new logs [16-06-2022 16:54:01]16272: WAF :: fetched 6 new logs [16-06-2022 16:55:01]19029: WAF :: fetched 6 new logs [16-06-2022 16:56:02]21775: WAF :: fetched 2 new logs [16-06-2022 16:57:01]24432: WAF :: fetched 4 new logs [16-06-2022 16:58:02]27180: WAF :: fetched 4 new logs [16-06-2022 16:59:02]29915: WAF :: fetched 3 new logs [16-06-2022 17:00:01]32336: WAF :: fetched 3 new logs [16-06-2022 17:01:02]3104: WAF :: fetched 2 new logs [16-06-2022 17:02:01]5896: WAF :: fetched 1 new logs [16-06-2022 17:03:01]8584: WAF :: fetched 1 new logs [16-06-2022 17:08:02]22295: WAF :: fetched 25 new logs [16-06-2022 17:12:01]817: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655410321 [16-06-2022 17:12:01]817: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 17:12:03]817: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 17:12:04]817: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-1712/20220616-171201-YquOkZKvm-xLXrr7oj_cbwAAAAo [16-06-2022 17:12:04]817: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [16-06-2022 17:12:04]817: WAF :: fetched 2 new logs [16-06-2022 17:13:01]3550: WAF :: fetched 3 new logs [16-06-2022 17:15:01]9181: WAF :: fetched 2 new logs [16-06-2022 17:16:02]11918: WAF :: fetched 1 new logs [16-06-2022 17:18:01]17338: WAF :: fetched 1 new logs [16-06-2022 17:20:01]22865: WAF :: fetched 1 new logs [16-06-2022 17:24:02]1395: WAF :: fetched 2 new logs [16-06-2022 17:25:01]4110: WAF :: fetched 4 new logs [16-06-2022 17:31:01]20433: WAF :: fetched 1 new logs [16-06-2022 17:32:01]23151: WAF :: fetched 3 new logs [16-06-2022 17:33:02]25897: WAF :: fetched 3 new logs [16-06-2022 17:34:01]28714: WAF :: fetched 40 new logs [16-06-2022 17:35:02]31478: WAF :: fetched 1 new logs [16-06-2022 17:36:01]1697: WAF :: fetched 1 new logs [16-06-2022 17:39:02]10127: WAF :: fetched 1 new logs [16-06-2022 17:40:02]12896: WAF :: fetched 2 new logs [16-06-2022 17:41:02]15694: WAF :: fetched 2 new logs [16-06-2022 17:41:02]15694: Checking for user cron vulnerabilities [16-06-2022 17:44:01]23916: Checking ditributed CMS bruteforce attacks [16-06-2022 17:45:01]26593: WAF :: fetched 2 new logs [16-06-2022 17:51:02]10669: WAF :: fetched 2 new logs [16-06-2022 17:53:01]15981: WAF :: fetched 1 new logs [16-06-2022 17:54:02]18774: WAF :: fetched 4 new logs [16-06-2022 17:55:01]21463: WAF :: fetched 3 new logs [16-06-2022 17:56:02]24181: WAF :: fetched 7 new logs [16-06-2022 17:57:01]26691: WAF :: fetched 6 new logs [16-06-2022 17:58:02]29521: WAF :: fetched 7 new logs [16-06-2022 17:59:01]32228: WAF :: fetched 6 new logs [16-06-2022 18:00:02]2312: WAF :: fetched 8 new logs [16-06-2022 18:01:02]5550: WAF :: fetched 6 new logs [16-06-2022 18:02:01]8275: WAF :: fetched 5 new logs [16-06-2022 18:03:02]10997: WAF :: fetched 1 new logs [16-06-2022 18:04:01]13714: WAF :: fetched 1 new logs [16-06-2022 18:06:02]19185: WAF :: fetched 1 new logs [16-06-2022 18:07:02]21932: WAF :: fetched 1 new logs [16-06-2022 18:08:02]24674: WAF :: fetched 1 new logs [16-06-2022 18:10:01]30176: WAF :: fetched 2 new logs [16-06-2022 18:12:01]3368: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655413921 [16-06-2022 18:12:01]3368: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 18:12:03]3368: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 18:12:04]3368: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-1812/20220616-181201-Yqucoc9QVO_HM9XkpFJurgAAAC8 [16-06-2022 18:12:04]3368: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 18:12:04]3368: WAF :: fetched 95 new logs [16-06-2022 18:13:02]6197: WAF :: fetched 1 new logs [16-06-2022 18:15:01]11740: WAF :: fetched 2 new logs [16-06-2022 18:21:01]28145: WAF :: fetched 1 new logs [16-06-2022 18:32:01]25753: WAF :: fetched 4 new logs [16-06-2022 18:34:01]31042: WAF :: fetched 1 new logs [16-06-2022 18:35:02]1513: WAF :: fetched 2 new logs [16-06-2022 18:36:01]4300: WAF :: fetched 2 new logs [16-06-2022 18:39:01]12380: WAF :: fetched 4 new logs [16-06-2022 18:40:02]15174: WAF :: fetched 4 new logs [16-06-2022 18:41:02]17920: WAF :: fetched 3 new logs [16-06-2022 18:41:02]17920: Checking for user cron vulnerabilities [16-06-2022 18:42:01]20622: WAF :: fetched 2 new logs [16-06-2022 18:43:02]23362: WAF :: fetched 4 new logs [16-06-2022 18:44:01]25997: Checking ditributed CMS bruteforce attacks [16-06-2022 18:44:01]25997: WAF :: fetched 3 new logs [16-06-2022 18:45:01]28787: WAF :: fetched 2 new logs [16-06-2022 18:46:02]31506: WAF :: fetched 2 new logs [16-06-2022 18:47:01]1743: WAF :: fetched 2 new logs [16-06-2022 18:48:02]4567: WAF :: fetched 3 new logs [16-06-2022 18:49:01]7236: WAF :: fetched 3 new logs [16-06-2022 18:50:01]10020: WAF :: fetched 2 new logs [16-06-2022 18:54:01]20761: WAF :: fetched 3 new logs [16-06-2022 18:57:02]28929: WAF :: fetched 1 new logs [16-06-2022 18:59:02]1878: WAF :: fetched 6 new logs [16-06-2022 19:00:02]4467: WAF :: fetched 6 new logs [16-06-2022 19:01:01]7665: WAF :: fetched 7 new logs [16-06-2022 19:02:02]10424: WAF :: fetched 5 new logs [16-06-2022 19:03:02]13116: WAF :: fetched 8 new logs [16-06-2022 19:04:01]15789: WAF :: fetched 10 new logs [16-06-2022 19:05:01]18569: WAF :: fetched 6 new logs [16-06-2022 19:06:01]21281: WAF :: fetched 9 new logs [16-06-2022 19:07:02]24009: WAF :: fetched 7 new logs [16-06-2022 19:08:01]26688: WAF :: fetched 3 new logs [16-06-2022 19:09:02]29439: WAF :: fetched 7 new logs [16-06-2022 19:10:02]32195: WAF :: fetched 8 new logs [16-06-2022 19:11:01]2567: WAF :: fetched 10 new logs [16-06-2022 19:12:02]5333: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655417522 [16-06-2022 19:12:02]5333: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 19:12:04]5333: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 19:12:04]5333: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-1912/20220616-191202-Yquqsj3JrWvyBz3E9U801AAAAAI [16-06-2022 19:12:04]5333: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 19:12:04]5333: WAF :: fetched 16 new logs [16-06-2022 19:13:01]8026: WAF :: fetched 4 new logs [16-06-2022 19:14:01]10691: WAF :: fetched 5 new logs [16-06-2022 19:15:02]13464: WAF :: fetched 11 new logs [16-06-2022 19:16:01]16182: WAF :: fetched 10 new logs [16-06-2022 19:17:02]18897: WAF :: fetched 6 new logs [16-06-2022 19:18:01]21565: WAF :: fetched 6 new logs [16-06-2022 19:19:01]24226: WAF :: fetched 5 new logs [16-06-2022 19:20:02]27001: WAF :: fetched 7 new logs [16-06-2022 19:21:01]29815: WAF :: fetched 4 new logs [16-06-2022 19:22:02]32510: WAF :: fetched 2 new logs [16-06-2022 19:23:01]2792: WAF :: fetched 4 new logs [16-06-2022 19:24:02]5590: WAF :: fetched 6 new logs [16-06-2022 19:25:01]8229: WAF :: fetched 6 new logs [16-06-2022 19:26:01]11155: WAF :: fetched 2 new logs [16-06-2022 19:27:01]13844: WAF :: fetched 2 new logs [16-06-2022 19:28:02]16579: WAF :: fetched 11 new logs [16-06-2022 19:29:01]19281: WAF :: fetched 18 new logs [16-06-2022 19:30:02]22124: WAF :: fetched 10 new logs [16-06-2022 19:31:02]24882: WAF :: fetched 9 new logs [16-06-2022 19:32:01]27622: WAF :: fetched 10 new logs [16-06-2022 19:33:02]30360: WAF :: fetched 12 new logs [16-06-2022 19:34:01]580: WAF :: fetched 16 new logs [16-06-2022 19:35:02]3440: WAF :: fetched 11 new logs [16-06-2022 19:36:02]6199: WAF :: fetched 5 new logs [16-06-2022 19:37:01]8850: WAF :: fetched 9 new logs [16-06-2022 19:38:02]11533: WAF :: fetched 5 new logs [16-06-2022 19:40:01]16956: WAF :: fetched 1 new logs [16-06-2022 19:41:02]19702: WAF :: fetched 2 new logs [16-06-2022 19:41:02]19702: Checking for user cron vulnerabilities [16-06-2022 19:42:01]22305: WAF :: fetched 2 new logs [16-06-2022 19:44:01]27583: Checking ditributed CMS bruteforce attacks [16-06-2022 19:45:01]: Checking for definition updates [16-06-2022 19:46:02]604: WAF :: fetched 1 new logs [16-06-2022 19:47:01]3313: WAF :: fetched 3 new logs [16-06-2022 19:48:02]6065: WAF :: fetched 4 new logs [16-06-2022 19:49:02]8732: WAF :: fetched 5 new logs [16-06-2022 19:50:01]11507: WAF :: fetched 5 new logs [16-06-2022 19:51:02]14250: WAF :: fetched 10 new logs [16-06-2022 19:52:01]16866: WAF :: fetched 7 new logs [16-06-2022 19:53:02]19556: WAF :: fetched 9 new logs [16-06-2022 19:54:01]22207: WAF :: fetched 10 new logs [16-06-2022 19:55:02]24937: WAF :: fetched 4 new logs [16-06-2022 19:56:01]27596: WAF :: fetched 4 new logs [16-06-2022 19:57:01]30295: WAF :: fetched 10 new logs [16-06-2022 19:58:02]552: WAF :: fetched 5 new logs [16-06-2022 19:59:01]3288: WAF :: fetched 5 new logs [16-06-2022 20:00:01]5817: WAF :: fetched 3 new logs [16-06-2022 20:01:02]9010: WAF :: fetched 3 new logs [16-06-2022 20:02:01]11650: WAF :: fetched 1 new logs [16-06-2022 20:03:01]14321: WAF :: fetched 1 new logs [16-06-2022 20:10:01]641: WAF :: fetched 1 new logs [16-06-2022 20:11:01]3421: WAF :: fetched 3 new logs [16-06-2022 20:12:02]6185: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655421122 [16-06-2022 20:12:02]6185: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 20:12:04]6185: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 20:12:04]6185: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-2012/20220616-201202-Yqu4wiYeOUIgMUNyh6sdIwAAAA8 [16-06-2022 20:12:04]6185: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 20:12:04]6185: WAF :: fetched 5 new logs [16-06-2022 20:13:01]8821: WAF :: fetched 9 new logs [16-06-2022 20:14:02]11494: WAF :: fetched 7 new logs [16-06-2022 20:15:02]14191: WAF :: fetched 9 new logs [16-06-2022 20:16:01]16866: WAF :: fetched 13 new logs [16-06-2022 20:17:02]19528: WAF :: fetched 14 new logs [16-06-2022 20:18:01]22140: WAF :: fetched 12 new logs [16-06-2022 20:19:02]24787: WAF :: fetched 3 new logs [16-06-2022 20:20:02]27504: WAF :: fetched 11 new logs [16-06-2022 20:21:01]30190: WAF :: fetched 12 new logs [16-06-2022 20:22:02]394: WAF :: fetched 6 new logs [16-06-2022 20:23:01]3102: WAF :: fetched 6 new logs [16-06-2022 20:24:02]5876: WAF :: fetched 2 new logs [16-06-2022 20:25:02]8644: WAF :: fetched 9 new logs [16-06-2022 20:26:01]11350: WAF :: fetched 7 new logs [16-06-2022 20:27:02]14056: WAF :: fetched 3 new logs [16-06-2022 20:29:01]19363: WAF :: fetched 2 new logs [16-06-2022 20:31:01]24859: WAF :: fetched 2 new logs [16-06-2022 20:32:02]27610: WAF :: fetched 8 new logs [16-06-2022 20:34:02]515: WAF :: fetched 1 new logs [16-06-2022 20:35:02]3327: WAF :: fetched 1 new logs [16-06-2022 20:36:01]6084: WAF :: fetched 3 new logs [16-06-2022 20:37:02]8763: WAF :: fetched 4 new logs [16-06-2022 20:38:02]11444: WAF :: fetched 9 new logs [16-06-2022 20:39:01]14107: WAF :: fetched 4 new logs [16-06-2022 20:41:01]19645: Checking for user cron vulnerabilities [16-06-2022 20:43:01]24993: WAF :: fetched 1 new logs [16-06-2022 20:44:02]27739: Checking ditributed CMS bruteforce attacks [16-06-2022 20:44:02]27739: WAF :: fetched 86 new logs [16-06-2022 20:45:02]30496: WAF :: fetched 1 new logs [16-06-2022 20:47:02]3593: WAF :: fetched 1 new logs [16-06-2022 20:50:02]11859: WAF :: fetched 2 new logs [16-06-2022 20:53:01]19932: WAF :: fetched 1 new logs [16-06-2022 20:54:02]22672: WAF :: fetched 2 new logs [16-06-2022 20:55:02]25468: WAF :: fetched 5 new logs [16-06-2022 20:57:02]30882: WAF :: fetched 1 new logs [16-06-2022 21:00:01]6411: WAF :: fetched 1 new logs [16-06-2022 21:01:02]9724: WAF :: fetched 1 new logs [16-06-2022 21:02:01]12126: WAF :: fetched 1 new logs [16-06-2022 21:03:01]15098: WAF :: fetched 1 new logs [16-06-2022 21:04:01]17773: WAF :: fetched 1 new logs [16-06-2022 21:05:02]20581: WAF :: fetched 2 new logs [16-06-2022 21:09:01]31434: WAF :: fetched 1 new logs [16-06-2022 21:10:02]1831: WAF :: fetched 2 new logs [16-06-2022 21:11:01]4629: WAF :: fetched 1 new logs [16-06-2022 21:12:01]7372: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655424721 [16-06-2022 21:12:01]7372: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 21:12:03]7372: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 21:12:03]7372: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-2112/20220616-211201-YqvG0auJ5nOF0zfOE-RlxgAAACw [16-06-2022 21:12:03]7372: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 21:12:03]7372: WAF :: fetched 1 new logs [16-06-2022 21:15:01]15491: WAF :: fetched 1 new logs [16-06-2022 21:18:01]23610: WAF :: fetched 1 new logs [16-06-2022 21:19:02]26295: WAF :: fetched 3 new logs [16-06-2022 21:20:01]29068: WAF :: fetched 6 new logs [16-06-2022 21:21:01]31813: WAF :: fetched 6 new logs [16-06-2022 21:22:02]2188: WAF :: fetched 5 new logs [16-06-2022 21:23:01]4890: WAF :: fetched 5 new logs [16-06-2022 21:24:02]7690: WAF :: fetched 9 new logs [16-06-2022 21:25:01]10394: WAF :: fetched 6 new logs [16-06-2022 21:26:01]13136: WAF :: fetched 2 new logs [16-06-2022 21:27:02]15875: WAF :: fetched 1 new logs [16-06-2022 21:30:02]24073: WAF :: fetched 1 new logs [16-06-2022 21:32:02]29511: WAF :: fetched 2 new logs [16-06-2022 21:33:01]32160: WAF :: fetched 1 new logs [16-06-2022 21:34:01]2477: WAF :: fetched 2 new logs [16-06-2022 21:36:01]8026: WAF :: fetched 1 new logs [16-06-2022 21:37:01]10731: WAF :: fetched 14 new logs [16-06-2022 21:38:01]13472: WAF :: fetched 5 new logs [16-06-2022 21:39:02]16212: WAF :: fetched 4 new logs [16-06-2022 21:40:02]18966: WAF :: fetched 5 new logs [16-06-2022 21:41:01]21703: WAF :: fetched 5 new logs [16-06-2022 21:41:01]21703: Checking for user cron vulnerabilities [16-06-2022 21:42:02]24385: WAF :: fetched 8 new logs [16-06-2022 21:43:02]27046: WAF :: fetched 5 new logs [16-06-2022 21:44:01]29717: Checking ditributed CMS bruteforce attacks [16-06-2022 21:44:01]29717: WAF :: fetched 1 new logs [16-06-2022 21:45:02]32513: WAF :: fetched 1 new logs [16-06-2022 21:46:01]2854: WAF :: fetched 6 new logs [16-06-2022 21:47:01]5593: WAF :: fetched 5 new logs [16-06-2022 21:48:02]8290: WAF :: fetched 8 new logs [16-06-2022 21:49:01]10968: WAF :: fetched 5 new logs [16-06-2022 21:50:02]13773: WAF :: fetched 8 new logs [16-06-2022 21:51:02]16461: WAF :: fetched 6 new logs [16-06-2022 21:52:01]19139: WAF :: fetched 5 new logs [16-06-2022 21:53:02]21833: WAF :: fetched 2 new logs [16-06-2022 21:54:01]24484: WAF :: fetched 3 new logs [16-06-2022 21:55:02]27265: WAF :: fetched 4 new logs [16-06-2022 21:57:02]32626: WAF :: fetched 1 new logs [16-06-2022 22:01:01]11339: WAF :: fetched 1 new logs [16-06-2022 22:02:02]14084: WAF :: fetched 1 new logs [16-06-2022 22:03:02]16830: WAF :: fetched 4 new logs [16-06-2022 22:04:01]19523: WAF :: fetched 4 new logs [16-06-2022 22:05:02]22321: WAF :: fetched 4 new logs [16-06-2022 22:06:01]25057: WAF :: fetched 10 new logs [16-06-2022 22:07:02]27739: WAF :: fetched 8 new logs [16-06-2022 22:07:09]27740: Performing Domain reputation checks [16-06-2022 22:08:02]30419: WAF :: fetched 8 new logs [16-06-2022 22:09:01]650: WAF :: fetched 12 new logs [16-06-2022 22:10:02]3506: WAF :: fetched 9 new logs [16-06-2022 22:11:01]6294: WAF :: fetched 10 new logs [16-06-2022 22:12:02]9013: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655428322 [16-06-2022 22:12:02]9013: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 22:12:04]9013: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 22:12:04]9013: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-2212/20220616-221202-YqvU4v4ixMDXaBvE1oZkSgAAAAg [16-06-2022 22:12:04]9013: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 22:12:04]9013: WAF :: fetched 10 new logs [16-06-2022 22:13:01]11670: WAF :: fetched 7 new logs [16-06-2022 22:14:01]14367: WAF :: fetched 2 new logs [16-06-2022 22:15:02]17162: WAF :: fetched 6 new logs [16-06-2022 22:18:02]25243: WAF :: fetched 3 new logs [16-06-2022 22:21:02]1022: WAF :: fetched 4 new logs [16-06-2022 22:22:01]3775: WAF :: fetched 5 new logs [16-06-2022 22:23:02]6517: WAF :: fetched 6 new logs [16-06-2022 22:24:01]9188: WAF :: fetched 1 new logs [16-06-2022 22:25:01]11955: WAF :: fetched 3 new logs [16-06-2022 22:26:02]14687: WAF :: fetched 5 new logs [16-06-2022 22:27:01]17337: WAF :: fetched 5 new logs [16-06-2022 22:28:02]20033: WAF :: fetched 7 new logs [16-06-2022 22:29:01]22693: WAF :: fetched 10 new logs [16-06-2022 22:30:01]25457: WAF :: fetched 5 new logs [16-06-2022 22:31:02]28192: WAF :: fetched 1 new logs [16-06-2022 22:32:01]30892: WAF :: fetched 2 new logs [16-06-2022 22:34:01]3908: WAF :: fetched 4 new logs [16-06-2022 22:39:01]17465: WAF :: fetched 2 new logs [16-06-2022 22:40:01]20246: WAF :: fetched 2 new logs [16-06-2022 22:41:02]23016: WAF :: fetched 10 new logs [16-06-2022 22:41:02]23016: Checking for user cron vulnerabilities [16-06-2022 22:44:01]31023: Checking ditributed CMS bruteforce attacks [16-06-2022 22:46:02]4189: WAF :: fetched 1 new logs [16-06-2022 22:49:02]12194: WAF :: fetched 1 new logs [16-06-2022 22:50:01]14960: WAF :: fetched 1 new logs [16-06-2022 22:51:01]17665: WAF :: fetched 1 new logs [16-06-2022 22:53:02]23134: WAF :: fetched 4 new logs [16-06-2022 22:54:01]25838: WAF :: fetched 3 new logs [16-06-2022 22:55:02]28606: WAF :: fetched 4 new logs [16-06-2022 22:56:01]31336: WAF :: fetched 5 new logs [16-06-2022 22:57:02]1632: WAF :: fetched 7 new logs [16-06-2022 22:58:01]4229: WAF :: fetched 7 new logs [16-06-2022 22:59:02]7098: WAF :: fetched 11 new logs [16-06-2022 23:00:01]9528: WAF :: fetched 3 new logs [16-06-2022 23:01:02]12758: WAF :: fetched 7 new logs [16-06-2022 23:03:01]18166: WAF :: fetched 3 new logs [16-06-2022 23:07:01]29089: WAF :: fetched 2 new logs [16-06-2022 23:07:38]29247: Performed RBL check for 23.111.136.34. [16-06-2022 23:08:01]31780: WAF :: fetched 2 new logs [16-06-2022 23:09:02]2047: WAF :: fetched 1 new logs [16-06-2022 23:11:01]7641: WAF :: fetched 3 new logs [16-06-2022 23:12:02]10313: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655431922 [16-06-2022 23:12:02]10313: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-06-2022 23:12:04]10313: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-06-2022 23:12:04]10313: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220616/20220616-2312/20220616-231202-Yqvi8gf7kScesK8bTt8R2AAAAAU [16-06-2022 23:12:04]10313: WAF :: No suitable log file found. Using SQLite.. [16-06-2022 23:12:04]10313: WAF :: fetched 4 new logs [16-06-2022 23:13:02]12946: WAF :: fetched 6 new logs [16-06-2022 23:14:01]15621: WAF :: fetched 5 new logs [16-06-2022 23:15:02]18316: WAF :: fetched 4 new logs [16-06-2022 23:16:01]21116: WAF :: fetched 10 new logs [16-06-2022 23:17:01]23762: WAF :: fetched 11 new logs [16-06-2022 23:18:01]26459: WAF :: fetched 7 new logs [16-06-2022 23:19:02]29150: WAF :: fetched 5 new logs [16-06-2022 23:20:02]31862: WAF :: fetched 5 new logs [16-06-2022 23:21:01]2289: WAF :: fetched 8 new logs [16-06-2022 23:22:02]5062: WAF :: fetched 7 new logs [16-06-2022 23:23:01]7693: WAF :: fetched 3 new logs [16-06-2022 23:24:01]10374: WAF :: fetched 2 new logs [16-06-2022 23:25:02]13078: WAF :: fetched 4 new logs [16-06-2022 23:26:01]15885: WAF :: fetched 11 new logs [16-06-2022 23:27:01]18572: WAF :: fetched 6 new logs [16-06-2022 23:28:02]21251: WAF :: fetched 7 new logs [16-06-2022 23:29:01]23739: WAF :: fetched 8 new logs [16-06-2022 23:30:02]26602: WAF :: fetched 6 new logs [16-06-2022 23:31:01]29397: WAF :: fetched 6 new logs [16-06-2022 23:32:01]32095: WAF :: fetched 7 new logs [16-06-2022 23:33:01]2413: WAF :: fetched 4 new logs [16-06-2022 23:34:01]5135: WAF :: fetched 1 new logs [16-06-2022 23:36:02]10624: WAF :: fetched 6 new logs [16-06-2022 23:37:01]13294: WAF :: fetched 14 new logs [16-06-2022 23:38:02]15981: WAF :: fetched 29 new logs [16-06-2022 23:40:01]21341: WAF :: fetched 1 new logs [16-06-2022 23:41:02]24143: WAF :: fetched 4 new logs [16-06-2022 23:41:02]24143: Checking for user cron vulnerabilities [16-06-2022 23:42:01]26776: WAF :: fetched 9 new logs [16-06-2022 23:43:02]29475: WAF :: fetched 7 new logs [16-06-2022 23:44:01]32114: Checking ditributed CMS bruteforce attacks [16-06-2022 23:44:01]32114: WAF :: fetched 13 new logs [16-06-2022 23:45:02]2418: WAF :: fetched 18 new logs [16-06-2022 23:46:01]5315: WAF :: fetched 12 new logs [16-06-2022 23:47:01]8023: WAF :: fetched 10 new logs [16-06-2022 23:48:02]10739: WAF :: fetched 15 new logs [16-06-2022 23:49:01]13418: WAF :: fetched 16 new logs [16-06-2022 23:50:02]16223: WAF :: fetched 10 new logs [16-06-2022 23:51:01]19056: WAF :: fetched 13 new logs [16-06-2022 23:52:02]21754: WAF :: fetched 16 new logs [16-06-2022 23:53:02]24472: WAF :: fetched 18 new logs [16-06-2022 23:54:01]27240: WAF :: fetched 20 new logs [16-06-2022 23:54:01]27247: httpd.conf changed. Refreshing watchlist. [16-06-2022 23:55:02]29972: WAF :: fetched 18 new logs [16-06-2022 23:56:02]329: WAF :: fetched 22 new logs [16-06-2022 23:56:02]330: httpd.conf changed. Refreshing watchlist. [16-06-2022 23:57:01]3097: WAF :: fetched 16 new logs [16-06-2022 23:58:02]5852: WAF :: fetched 7 new logs [16-06-2022 23:59:01]8524: WAF :: fetched 8 new logs [17-06-2022 00:00:01]10982: WAF :: fetched 5 new logs [17-06-2022 00:01:02]14348: WAF :: fetched 1 new logs [17-06-2022 00:01:04]14348: Sending daily report for June 17, 2022 [17-06-2022 00:02:01]17066: WAF :: fetched 1 new logs [17-06-2022 00:05:02]25146: WAF :: fetched 3 new logs [17-06-2022 00:05:02]25146: Deleted 0 entries older than 6 MONTH from scanner_logs [17-06-2022 00:05:02]25146: Deleted 0 files from Quarantine [17-06-2022 00:06:02]27994: WAF :: fetched 7 new logs [17-06-2022 00:07:01]30684: WAF :: fetched 8 new logs [17-06-2022 00:08:01]989: WAF :: fetched 4 new logs [17-06-2022 00:09:02]3743: WAF :: fetched 8 new logs [17-06-2022 00:10:01]6517: WAF :: fetched 5 new logs [17-06-2022 00:11:02]9429: WAF :: fetched 7 new logs [17-06-2022 00:12:01]12081: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655435521 [17-06-2022 00:12:01]12081: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 00:12:03]12081: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 00:12:04]12081: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-0012/20220617-001201-YqvxAfDXo2o2UmVCSRmZJAAAABo [17-06-2022 00:12:04]12081: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 00:12:04]12081: WAF :: fetched 7 new logs [17-06-2022 00:13:02]14779: WAF :: fetched 2 new logs [17-06-2022 00:14:01]17430: WAF :: fetched 7 new logs [17-06-2022 00:15:01]20123: WAF :: fetched 4 new logs [17-06-2022 00:16:02]22956: WAF :: fetched 2 new logs [17-06-2022 00:17:01]25612: WAF :: fetched 5 new logs [17-06-2022 00:18:02]28292: WAF :: fetched 6 new logs [17-06-2022 00:19:02]30942: WAF :: fetched 9 new logs [17-06-2022 00:20:02]1235: WAF :: fetched 8 new logs [17-06-2022 00:21:01]4107: WAF :: fetched 1 new logs [17-06-2022 00:22:01]6795: WAF :: fetched 2 new logs [17-06-2022 00:24:02]12186: WAF :: fetched 37 new logs [17-06-2022 00:25:01]14853: WAF :: fetched 3 new logs [17-06-2022 00:28:01]23000: WAF :: fetched 1 new logs [17-06-2022 00:29:02]25699: WAF :: fetched 2 new logs [17-06-2022 00:30:01]28359: WAF :: fetched 1 new logs [17-06-2022 00:31:01]31158: WAF :: fetched 3 new logs [17-06-2022 00:32:02]1470: WAF :: fetched 2 new logs [17-06-2022 00:33:01]4154: WAF :: fetched 21 new logs [17-06-2022 00:34:02]6881: WAF :: fetched 5 new logs [17-06-2022 00:35:01]9530: WAF :: fetched 4 new logs [17-06-2022 00:36:01]12316: WAF :: fetched 6 new logs [17-06-2022 00:37:02]14998: WAF :: fetched 8 new logs [17-06-2022 00:38:01]17635: WAF :: fetched 14 new logs [17-06-2022 00:39:02]20362: WAF :: fetched 14 new logs [17-06-2022 00:40:02]23034: WAF :: fetched 9 new logs [17-06-2022 00:41:01]25881: WAF :: fetched 7 new logs [17-06-2022 00:41:01]25881: Checking for user cron vulnerabilities [17-06-2022 00:42:02]28595: WAF :: fetched 7 new logs [17-06-2022 00:43:01]31252: WAF :: fetched 7 new logs [17-06-2022 00:44:01]1618: Checking ditributed CMS bruteforce attacks [17-06-2022 00:44:01]1618: WAF :: fetched 9 new logs [17-06-2022 00:45:01]: Checking for software updates [17-06-2022 00:45:02]4383: WAF :: fetched 2 new logs [17-06-2022 00:46:01]7199: WAF :: fetched 1 new logs [17-06-2022 00:56:01]1908: WAF :: fetched 2 new logs [17-06-2022 00:59:01]10053: WAF :: fetched 4 new logs [17-06-2022 01:00:02]12507: WAF :: fetched 3 new logs [17-06-2022 01:01:01]16391: WAF :: fetched 10 new logs [17-06-2022 01:02:02]19287: WAF :: fetched 7 new logs [17-06-2022 01:03:01]22160: WAF :: fetched 6 new logs [17-06-2022 01:04:02]25163: WAF :: fetched 5 new logs [17-06-2022 01:05:01]28126: WAF :: fetched 7 new logs [17-06-2022 01:06:01]31230: WAF :: fetched 12 new logs [17-06-2022 01:07:02]1715: WAF :: fetched 4 new logs [17-06-2022 01:08:01]4733: WAF :: fetched 1 new logs [17-06-2022 01:10:01]10141: WAF :: fetched 1 new logs [17-06-2022 01:12:01]16000: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655439121 [17-06-2022 01:12:01]16000: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 01:12:03]16000: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 01:12:04]16000: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-0112/20220617-011201-Yqv_EQVDyteutiqxKGUoAQAAAAI [17-06-2022 01:12:04]16000: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 01:12:04]16000: WAF :: fetched 3 new logs [17-06-2022 01:16:02]27340: WAF :: fetched 1 new logs [17-06-2022 01:19:01]3570: WAF :: fetched 8 new logs [17-06-2022 01:24:01]17819: WAF :: fetched 4 new logs [17-06-2022 01:25:01]20823: WAF :: fetched 5 new logs [17-06-2022 01:26:02]23700: WAF :: fetched 7 new logs [17-06-2022 01:27:01]26470: WAF :: fetched 5 new logs [17-06-2022 01:28:02]29282: WAF :: fetched 6 new logs [17-06-2022 01:30:02]2960: WAF :: fetched 1 new logs [17-06-2022 01:31:01]5875: WAF :: fetched 3 new logs [17-06-2022 01:32:02]8901: WAF :: fetched 3 new logs [17-06-2022 01:33:01]11789: WAF :: fetched 6 new logs [17-06-2022 01:34:01]14591: WAF :: fetched 3 new logs [17-06-2022 01:35:02]17353: WAF :: fetched 4 new logs [17-06-2022 01:36:01]20416: WAF :: fetched 4 new logs [17-06-2022 01:37:01]23074: WAF :: fetched 9 new logs [17-06-2022 01:38:02]26283: WAF :: fetched 5 new logs [17-06-2022 01:39:01]29087: WAF :: fetched 2 new logs [17-06-2022 01:40:02]31993: WAF :: fetched 2 new logs [17-06-2022 01:41:02]2818: Checking for user cron vulnerabilities [17-06-2022 01:42:01]5974: WAF :: fetched 1 new logs [17-06-2022 01:44:01]11576: Checking ditributed CMS bruteforce attacks [17-06-2022 01:44:01]11576: WAF :: fetched 2 new logs [17-06-2022 01:45:02]: Checking for definition updates [17-06-2022 01:46:01]17436: WAF :: fetched 1 new logs [17-06-2022 01:50:02]28840: WAF :: fetched 2 new logs [17-06-2022 01:51:02]31660: WAF :: fetched 1 new logs [17-06-2022 01:52:01]1940: WAF :: fetched 1 new logs [17-06-2022 01:53:01]4743: WAF :: fetched 1 new logs [17-06-2022 01:54:01]7410: WAF :: fetched 1 new logs [17-06-2022 01:56:02]13322: WAF :: fetched 1 new logs [17-06-2022 01:58:02]18739: WAF :: fetched 1 new logs [17-06-2022 01:59:01]21400: WAF :: fetched 2 new logs [17-06-2022 02:00:02]23829: WAF :: fetched 4 new logs [17-06-2022 02:02:01]29794: WAF :: fetched 15 new logs [17-06-2022 02:03:02]32503: WAF :: fetched 11 new logs [17-06-2022 02:04:01]2749: WAF :: fetched 2 new logs [17-06-2022 02:05:01]5493: WAF :: fetched 1 new logs [17-06-2022 02:06:02]8342: WAF :: fetched 2 new logs [17-06-2022 02:07:01]10989: WAF :: fetched 7 new logs [17-06-2022 02:08:02]13725: WAF :: fetched 9 new logs [17-06-2022 02:09:02]16369: WAF :: fetched 7 new logs [17-06-2022 02:10:02]19043: WAF :: fetched 12 new logs [17-06-2022 02:11:01]21781: WAF :: fetched 17 new logs [17-06-2022 02:12:01]24532: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655442721 [17-06-2022 02:12:01]24532: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 02:12:03]24532: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 02:12:04]24532: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-0212/20220617-021201-YqwNIelzLotGY6iEcMINBwAAAAU [17-06-2022 02:12:04]24532: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 02:12:04]24532: WAF :: fetched 13 new logs [17-06-2022 02:13:02]27269: WAF :: fetched 1 new logs [17-06-2022 02:14:02]29605: WAF :: fetched 4 new logs [17-06-2022 02:15:01]32662: WAF :: fetched 1 new logs [17-06-2022 02:16:01]3079: WAF :: fetched 6 new logs [17-06-2022 02:17:02]5851: WAF :: fetched 6 new logs [17-06-2022 02:18:01]8520: WAF :: fetched 3 new logs [17-06-2022 02:19:02]11204: WAF :: fetched 3 new logs [17-06-2022 02:20:01]13862: WAF :: fetched 4 new logs [17-06-2022 02:21:02]16687: WAF :: fetched 2 new logs [17-06-2022 02:22:01]19352: WAF :: fetched 6 new logs [17-06-2022 02:23:02]22018: WAF :: fetched 3 new logs [17-06-2022 02:24:02]24685: WAF :: fetched 4 new logs [17-06-2022 02:25:01]27359: WAF :: fetched 1 new logs [17-06-2022 02:26:02]30156: WAF :: fetched 2 new logs [17-06-2022 02:28:02]3150: WAF :: fetched 2 new logs [17-06-2022 02:29:01]5853: WAF :: fetched 1 new logs [17-06-2022 02:32:02]14437: WAF :: fetched 1 new logs [17-06-2022 02:36:01]26321: WAF :: fetched 26 new logs [17-06-2022 02:37:02]29002: WAF :: fetched 7 new logs [17-06-2022 02:38:01]31698: WAF :: fetched 2 new logs [17-06-2022 02:39:01]2161: WAF :: fetched 1 new logs [17-06-2022 02:40:02]4950: WAF :: fetched 1 new logs [17-06-2022 02:41:02]7932: WAF :: fetched 1 new logs [17-06-2022 02:41:02]7932: Checking for user cron vulnerabilities [17-06-2022 02:42:02]10599: WAF :: fetched 1 new logs [17-06-2022 02:44:01]16181: Checking ditributed CMS bruteforce attacks [17-06-2022 02:51:01]3877: WAF :: fetched 4 new logs [17-06-2022 02:53:02]9538: Updated license status via CDN [17-06-2022 02:54:01]12489: WAF :: fetched 3 new logs [17-06-2022 02:55:02]15149: WAF :: fetched 1 new logs [17-06-2022 02:56:01]17925: WAF :: fetched 6 new logs [17-06-2022 02:57:01]20608: WAF :: fetched 3 new logs [17-06-2022 02:59:01]25917: WAF :: fetched 5 new logs [17-06-2022 03:00:02]28337: WAF :: fetched 3 new logs [17-06-2022 03:00:06]28337: Found and updated 32 CMS installations [17-06-2022 03:01:02]31673: WAF :: fetched 6 new logs [17-06-2022 03:02:01]2274: WAF :: fetched 4 new logs [17-06-2022 03:02:22]28337: Sending CMS version vulnerability report emails to cpanel users [17-06-2022 03:02:25]28337: Checking wordpress installations for suspicious directories [17-06-2022 03:03:02]5313: WAF :: fetched 2 new logs [17-06-2022 03:04:25]5361: Sending CMS version vulnerability report emails to cpanel users [17-06-2022 03:04:28]5361: Checking wordpress installations for suspicious directories [17-06-2022 03:05:02]11212: WAF :: fetched 25 new logs [17-06-2022 03:07:01]16711: WAF :: fetched 1 new logs [17-06-2022 03:11:02]29897: WAF :: fetched 1 new logs [17-06-2022 03:12:02]32754: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655446322 [17-06-2022 03:12:02]32754: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 03:12:04]32754: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 03:12:04]32754: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-0312/20220617-031202-YqwbMkRw7gVu7jvdufNX8gAAABc [17-06-2022 03:12:04]32754: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [17-06-2022 03:12:04]32754: WAF :: fetched 1 new logs [17-06-2022 03:13:01]3241: WAF :: fetched 1 new logs [17-06-2022 03:17:02]14928: WAF :: fetched 35 new logs [17-06-2022 03:18:01]17668: WAF :: fetched 13 new logs [17-06-2022 03:19:02]20572: WAF :: fetched 10 new logs [17-06-2022 03:20:02]23269: WAF :: fetched 5 new logs [17-06-2022 03:21:01]26094: WAF :: fetched 7 new logs [17-06-2022 03:22:02]28784: WAF :: fetched 9 new logs [17-06-2022 03:23:02]31473: WAF :: fetched 7 new logs [17-06-2022 03:24:01]1741: WAF :: fetched 19 new logs [17-06-2022 03:25:01]4514: WAF :: fetched 25 new logs [17-06-2022 03:26:01]7314: WAF :: fetched 6 new logs [17-06-2022 03:27:02]9992: WAF :: fetched 6 new logs [17-06-2022 03:28:02]12666: WAF :: fetched 9 new logs [17-06-2022 03:29:01]15328: WAF :: fetched 4 new logs [17-06-2022 03:30:02]18043: WAF :: fetched 9 new logs [17-06-2022 03:31:01]20859: WAF :: fetched 14 new logs [17-06-2022 03:32:01]23552: WAF :: fetched 14 new logs [17-06-2022 03:33:02]26256: WAF :: fetched 11 new logs [17-06-2022 03:34:01]28921: WAF :: fetched 7 new logs [17-06-2022 03:35:02]31630: WAF :: fetched 5 new logs [17-06-2022 03:36:02]2033: WAF :: fetched 8 new logs [17-06-2022 03:37:01]4813: WAF :: fetched 9 new logs [17-06-2022 03:38:02]7518: WAF :: fetched 4 new logs [17-06-2022 03:39:01]10162: WAF :: fetched 1 new logs [17-06-2022 03:41:02]15682: Checking for user cron vulnerabilities [17-06-2022 03:44:01]23685: Checking ditributed CMS bruteforce attacks [17-06-2022 03:45:02]26375: WAF :: fetched 1 new logs [17-06-2022 03:49:01]4874: WAF :: fetched 1 new logs [17-06-2022 03:53:01]15705: WAF :: fetched 8 new logs [17-06-2022 03:55:02]21062: WAF :: fetched 3 new logs [17-06-2022 03:57:02]26521: WAF :: fetched 3 new logs [17-06-2022 03:59:01]31844: WAF :: fetched 1 new logs [17-06-2022 04:01:01]5155: WAF :: fetched 1 new logs [17-06-2022 04:10:02]29431: WAF :: fetched 4 new logs [17-06-2022 04:11:01]32154: WAF :: fetched 8 new logs [17-06-2022 04:12:01]2491: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655449921 [17-06-2022 04:12:01]2491: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 04:12:03]2491: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 04:12:03]2491: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-0412/20220617-041201-YqwpQaSdehcmdkyErtxtYQAAAAw [17-06-2022 04:12:03]2491: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 04:12:04]2491: WAF :: fetched 198 new logs [17-06-2022 04:13:02]5241: WAF :: fetched 2 new logs [17-06-2022 04:14:01]7897: WAF :: fetched 3 new logs [17-06-2022 04:15:02]10579: WAF :: fetched 5 new logs [17-06-2022 04:16:01]13265: WAF :: fetched 4 new logs [17-06-2022 04:17:01]15999: WAF :: fetched 4 new logs [17-06-2022 04:18:02]18692: WAF :: fetched 3 new logs [17-06-2022 04:19:01]21337: WAF :: fetched 1 new logs [17-06-2022 04:20:02]24055: WAF :: fetched 3 new logs [17-06-2022 04:22:01]29510: WAF :: fetched 2 new logs [17-06-2022 04:25:01]5271: WAF :: fetched 2 new logs [17-06-2022 04:26:02]7996: WAF :: fetched 4 new logs [17-06-2022 04:27:02]10720: WAF :: fetched 3 new logs [17-06-2022 04:28:01]13397: WAF :: fetched 4 new logs [17-06-2022 04:29:02]16116: WAF :: fetched 25 new logs [17-06-2022 04:30:01]18765: WAF :: fetched 2 new logs [17-06-2022 04:31:01]21502: WAF :: fetched 6 new logs [17-06-2022 04:32:02]24281: WAF :: fetched 7 new logs [17-06-2022 04:33:01]26948: WAF :: fetched 5 new logs [17-06-2022 04:36:02]2591: WAF :: fetched 1 new logs [17-06-2022 04:39:02]10857: WAF :: fetched 1 new logs [17-06-2022 04:41:01]16369: Checking for user cron vulnerabilities [17-06-2022 04:42:02]19111: WAF :: fetched 3 new logs [17-06-2022 04:43:01]21725: WAF :: fetched 3 new logs [17-06-2022 04:44:02]24424: Checking ditributed CMS bruteforce attacks [17-06-2022 04:44:02]24424: WAF :: fetched 10 new logs [17-06-2022 04:45:01]27094: WAF :: fetched 4 new logs [17-06-2022 04:46:02]29798: WAF :: fetched 5 new logs [17-06-2022 04:47:01]32522: WAF :: fetched 4 new logs [17-06-2022 04:48:01]2782: WAF :: fetched 3 new logs [17-06-2022 04:49:02]5515: WAF :: fetched 9 new logs [17-06-2022 04:50:01]8185: WAF :: fetched 3 new logs [17-06-2022 04:51:02]10908: WAF :: fetched 6 new logs [17-06-2022 04:52:02]13625: WAF :: fetched 5 new logs [17-06-2022 04:53:01]16282: WAF :: fetched 3 new logs [17-06-2022 04:54:02]18953: WAF :: fetched 1 new logs [17-06-2022 04:55:01]21576: WAF :: fetched 1 new logs [17-06-2022 04:56:01]24271: WAF :: fetched 1 new logs [17-06-2022 04:59:02]32422: WAF :: fetched 2 new logs [17-06-2022 05:01:41]5654: Starting daily scan on files updated in last 24 hrs [17-06-2022 05:02:02]8465: WAF :: fetched 1 new logs [17-06-2022 05:03:02]11120: WAF :: fetched 31 new logs [17-06-2022 05:04:01]13793: WAF :: fetched 2 new logs [17-06-2022 05:08:01]24429: WAF :: fetched 2 new logs [17-06-2022 05:12:01]3063: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655453521 [17-06-2022 05:12:01]3063: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 05:12:03]3063: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 05:12:03]3063: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-0512/20220617-051201-Yqw3UXnbxQkcUgPuRVCP3AAAAAI [17-06-2022 05:12:03]3063: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 05:12:03]3063: WAF :: fetched 1 new logs [17-06-2022 05:14:01]8486: WAF :: fetched 1 new logs [17-06-2022 05:16:02]13917: WAF :: fetched 1 new logs [17-06-2022 05:19:02]21991: WAF :: fetched 3 new logs [17-06-2022 05:23:01]377: WAF :: fetched 2 new logs [17-06-2022 05:24:02]3131: WAF :: fetched 2 new logs [17-06-2022 05:25:01]5870: WAF :: fetched 4 new logs [17-06-2022 05:26:01]8618: WAF :: fetched 4 new logs [17-06-2022 05:27:02]11381: WAF :: fetched 5 new logs [17-06-2022 05:28:01]14045: WAF :: fetched 3 new logs [17-06-2022 05:29:02]16715: WAF :: fetched 3 new logs [17-06-2022 05:30:01]19432: WAF :: fetched 5 new logs [17-06-2022 05:31:02]22180: WAF :: fetched 1 new logs [17-06-2022 05:33:02]27619: WAF :: fetched 1 new logs [17-06-2022 05:38:02]8896: WAF :: fetched 2 new logs [17-06-2022 05:39:01]11643: WAF :: fetched 1 new logs [17-06-2022 05:40:02]14433: WAF :: fetched 5 new logs [17-06-2022 05:41:01]17154: WAF :: fetched 4 new logs [17-06-2022 05:41:01]17154: Checking for user cron vulnerabilities [17-06-2022 05:42:01]19927: WAF :: fetched 3 new logs [17-06-2022 05:43:02]22578: WAF :: fetched 7 new logs [17-06-2022 05:44:01]25227: Checking ditributed CMS bruteforce attacks [17-06-2022 05:44:01]25227: WAF :: fetched 8 new logs [17-06-2022 05:45:02]27910: WAF :: fetched 4 new logs [17-06-2022 05:50:02]9238: WAF :: fetched 3 new logs [17-06-2022 05:51:02]11985: WAF :: fetched 4 new logs [17-06-2022 05:52:01]14751: WAF :: fetched 4 new logs [17-06-2022 05:53:02]17494: WAF :: fetched 5 new logs [17-06-2022 05:54:02]20170: WAF :: fetched 7 new logs [17-06-2022 05:55:01]22880: WAF :: fetched 3 new logs [17-06-2022 05:56:01]25653: WAF :: fetched 3 new logs [17-06-2022 05:57:02]28473: WAF :: fetched 2 new logs [17-06-2022 05:59:02]1500: WAF :: fetched 3 new logs [17-06-2022 06:04:01]15492: WAF :: fetched 1 new logs [17-06-2022 06:05:02]18219: WAF :: fetched 3 new logs [17-06-2022 06:06:01]20960: WAF :: fetched 3 new logs [17-06-2022 06:07:02]23770: WAF :: fetched 8 new logs [17-06-2022 06:08:01]26488: WAF :: fetched 7 new logs [17-06-2022 06:09:01]29243: WAF :: fetched 3 new logs [17-06-2022 06:10:01]32002: WAF :: fetched 4 new logs [17-06-2022 06:11:01]2387: WAF :: fetched 9 new logs [17-06-2022 06:12:01]5284: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655457121 [17-06-2022 06:12:01]5284: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 06:12:03]5284: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 06:12:04]5284: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-0612/20220617-061201-YqxFYf5_z8NYi2TUoV7RAgAAAAg [17-06-2022 06:12:04]5284: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 06:12:04]5284: WAF :: fetched 5 new logs [17-06-2022 06:13:02]8021: WAF :: fetched 3 new logs [17-06-2022 06:14:01]10711: WAF :: fetched 1 new logs [17-06-2022 06:15:01]13443: WAF :: fetched 3 new logs [17-06-2022 06:17:01]19059: WAF :: fetched 30 new logs [17-06-2022 06:18:01]21734: WAF :: fetched 1 new logs [17-06-2022 06:19:02]24451: WAF :: fetched 2 new logs [17-06-2022 06:20:01]27160: WAF :: fetched 1 new logs [17-06-2022 06:22:01]32737: WAF :: fetched 4 new logs [17-06-2022 06:23:01]3069: WAF :: fetched 3 new logs [17-06-2022 06:24:02]5889: WAF :: fetched 4 new logs [17-06-2022 06:25:01]8615: WAF :: fetched 8 new logs [17-06-2022 06:26:02]11399: WAF :: fetched 4 new logs [17-06-2022 06:27:02]14298: WAF :: fetched 12 new logs [17-06-2022 06:28:02]17026: WAF :: fetched 9 new logs [17-06-2022 06:29:01]19779: WAF :: fetched 10 new logs [17-06-2022 06:30:01]22519: WAF :: fetched 15 new logs [17-06-2022 06:31:02]25316: WAF :: fetched 6 new logs [17-06-2022 06:32:01]28101: WAF :: fetched 22 new logs [17-06-2022 06:33:02]30862: WAF :: fetched 7 new logs [17-06-2022 06:35:01]3945: WAF :: fetched 1 new logs [17-06-2022 06:37:01]9616: WAF :: fetched 1 new logs [17-06-2022 06:38:02]12505: WAF :: fetched 1 new logs [17-06-2022 06:39:02]15196: WAF :: fetched 3 new logs [17-06-2022 06:40:02]17944: WAF :: fetched 3 new logs [17-06-2022 06:41:01]20715: WAF :: fetched 8 new logs [17-06-2022 06:41:01]20715: Checking for user cron vulnerabilities [17-06-2022 06:42:01]23528: WAF :: fetched 2 new logs [17-06-2022 06:43:02]26276: WAF :: fetched 6 new logs [17-06-2022 06:44:01]28865: Checking ditributed CMS bruteforce attacks [17-06-2022 06:44:01]28865: WAF :: fetched 7 new logs [17-06-2022 06:45:02]31750: WAF :: fetched 7 new logs [17-06-2022 06:47:02]4997: WAF :: fetched 1 new logs [17-06-2022 06:48:01]7684: WAF :: fetched 1 new logs [17-06-2022 06:49:01]10392: WAF :: fetched 2 new logs [17-06-2022 06:50:02]13159: WAF :: fetched 23 new logs [17-06-2022 06:51:01]15911: WAF :: fetched 2 new logs [17-06-2022 06:52:02]18719: WAF :: fetched 4 new logs [17-06-2022 06:53:02]21403: WAF :: fetched 7 new logs [17-06-2022 06:54:01]24111: WAF :: fetched 4 new logs [17-06-2022 06:55:02]26878: WAF :: fetched 25 new logs [17-06-2022 06:56:01]29631: WAF :: fetched 55 new logs [17-06-2022 06:57:02]32513: WAF :: fetched 4 new logs [17-06-2022 06:58:01]2867: WAF :: fetched 5 new logs [17-06-2022 06:59:01]5673: WAF :: fetched 4 new logs [17-06-2022 07:01:01]11372: WAF :: fetched 1 new logs [17-06-2022 07:04:02]19741: WAF :: fetched 9 new logs [17-06-2022 07:06:01]25216: WAF :: fetched 4 new logs [17-06-2022 07:07:02]28051: WAF :: fetched 5 new logs [17-06-2022 07:08:01]30790: WAF :: fetched 10 new logs [17-06-2022 07:09:02]1122: WAF :: fetched 10 new logs [17-06-2022 07:10:01]3897: WAF :: fetched 9 new logs [17-06-2022 07:11:01]6675: WAF :: fetched 8 new logs [17-06-2022 07:12:02]9513: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655460722 [17-06-2022 07:12:02]9513: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 07:12:04]9513: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 07:12:04]9513: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-0712/20220617-071202-YqxTckdWkL1zhdh5lCkNwwAAAAg [17-06-2022 07:12:04]9513: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 07:12:04]9513: WAF :: fetched 13 new logs [17-06-2022 07:13:01]12197: WAF :: fetched 9 new logs [17-06-2022 07:14:02]14931: WAF :: fetched 12 new logs [17-06-2022 07:15:01]17652: WAF :: fetched 19 new logs [17-06-2022 07:16:02]20397: WAF :: fetched 19 new logs [17-06-2022 07:17:01]23207: WAF :: fetched 5 new logs [17-06-2022 07:18:02]25978: WAF :: fetched 7 new logs [17-06-2022 07:19:02]28674: WAF :: fetched 5 new logs [17-06-2022 07:20:01]31413: WAF :: fetched 1 new logs [17-06-2022 07:21:02]1807: WAF :: fetched 4 new logs [17-06-2022 07:22:01]4679: WAF :: fetched 10 new logs [17-06-2022 07:23:01]7397: WAF :: fetched 5 new logs [17-06-2022 07:24:02]10137: WAF :: fetched 7 new logs [17-06-2022 07:25:01]12830: WAF :: fetched 7 new logs [17-06-2022 07:26:02]15618: WAF :: fetched 6 new logs [17-06-2022 07:27:01]18403: WAF :: fetched 7 new logs [17-06-2022 07:28:01]21175: WAF :: fetched 13 new logs [17-06-2022 07:29:02]23921: WAF :: fetched 12 new logs [17-06-2022 07:30:01]26643: WAF :: fetched 7 new logs [17-06-2022 07:31:02]29456: WAF :: fetched 6 new logs [17-06-2022 07:32:01]32258: WAF :: fetched 7 new logs [17-06-2022 07:33:01]2635: WAF :: fetched 2 new logs [17-06-2022 07:34:02]5468: WAF :: fetched 6 new logs [17-06-2022 07:35:01]8200: WAF :: fetched 9 new logs [17-06-2022 07:36:02]11038: WAF :: fetched 4 new logs [17-06-2022 07:38:01]16601: WAF :: fetched 1 new logs [17-06-2022 07:39:02]19385: WAF :: fetched 4 new logs [17-06-2022 07:40:02]22157: WAF :: fetched 4 new logs [17-06-2022 07:41:01]24913: WAF :: fetched 5 new logs [17-06-2022 07:41:01]24913: Checking for user cron vulnerabilities [17-06-2022 07:42:02]27749: WAF :: fetched 5 new logs [17-06-2022 07:43:01]30306: WAF :: fetched 5 new logs [17-06-2022 07:44:02]854: Checking ditributed CMS bruteforce attacks [17-06-2022 07:44:02]854: WAF :: fetched 10 new logs [17-06-2022 07:45:01]: Checking for definition updates [17-06-2022 07:45:01]3622: WAF :: fetched 10 new logs [17-06-2022 07:46:01]6481: WAF :: fetched 15 new logs [17-06-2022 07:47:02]9376: WAF :: fetched 6 new logs [17-06-2022 07:48:02]12088: WAF :: fetched 8 new logs [17-06-2022 07:49:02]14804: WAF :: fetched 5 new logs [17-06-2022 07:50:01]17553: WAF :: fetched 6 new logs [17-06-2022 07:51:02]20383: WAF :: fetched 3 new logs [17-06-2022 07:52:01]23210: WAF :: fetched 6 new logs [17-06-2022 07:53:01]25943: WAF :: fetched 4 new logs [17-06-2022 07:54:02]28721: WAF :: fetched 8 new logs [17-06-2022 07:55:01]31494: WAF :: fetched 5 new logs [17-06-2022 07:56:02]1895: WAF :: fetched 4 new logs [17-06-2022 07:57:01]4821: WAF :: fetched 1 new logs [17-06-2022 08:03:02]21664: WAF :: fetched 2 new logs [17-06-2022 08:05:01]27210: WAF :: fetched 1 new logs [17-06-2022 08:06:01]30011: WAF :: fetched 3 new logs [17-06-2022 08:07:02]413: WAF :: fetched 5 new logs [17-06-2022 08:08:01]3253: WAF :: fetched 7 new logs [17-06-2022 08:09:02]6084: WAF :: fetched 5 new logs [17-06-2022 08:10:02]8857: WAF :: fetched 5 new logs [17-06-2022 08:11:01]11659: WAF :: fetched 7 new logs [17-06-2022 08:12:02]14512: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655464322 [17-06-2022 08:12:02]14512: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 08:12:04]14512: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 08:12:04]14512: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-0812/20220617-081202-YqxhgiOgz1h5shcAzkAulgAAABQ [17-06-2022 08:12:04]14512: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 08:12:04]14512: WAF :: fetched 24 new logs [17-06-2022 08:13:01]17205: WAF :: fetched 9 new logs [17-06-2022 08:14:02]19960: WAF :: fetched 5 new logs [17-06-2022 08:16:01]25457: WAF :: fetched 1 new logs [17-06-2022 08:18:01]30883: WAF :: fetched 32 new logs [17-06-2022 08:19:02]1413: WAF :: fetched 1 new logs [17-06-2022 08:25:02]18240: WAF :: fetched 1 new logs [17-06-2022 08:27:01]24033: WAF :: fetched 3 new logs [17-06-2022 08:28:02]26787: WAF :: fetched 1 new logs [17-06-2022 08:30:02]32287: WAF :: fetched 7 new logs [17-06-2022 08:31:02]2671: WAF :: fetched 4 new logs [17-06-2022 08:32:01]5620: WAF :: fetched 12 new logs [17-06-2022 08:33:01]8343: WAF :: fetched 4 new logs [17-06-2022 08:34:02]11095: WAF :: fetched 5 new logs [17-06-2022 08:35:02]13861: WAF :: fetched 4 new logs [17-06-2022 08:36:01]16663: WAF :: fetched 7 new logs [17-06-2022 08:37:01]19475: WAF :: fetched 4 new logs [17-06-2022 08:38:02]22216: WAF :: fetched 1 new logs [17-06-2022 08:41:02]30477: WAF :: fetched 3 new logs [17-06-2022 08:41:02]30477: Checking for user cron vulnerabilities [17-06-2022 08:42:01]889: WAF :: fetched 1 new logs [17-06-2022 08:43:02]3722: WAF :: fetched 3 new logs [17-06-2022 08:44:01]6486: Checking ditributed CMS bruteforce attacks [17-06-2022 08:44:01]6486: WAF :: fetched 3 new logs [17-06-2022 08:45:02]9260: WAF :: fetched 2 new logs [17-06-2022 08:46:01]12056: WAF :: fetched 1 new logs [17-06-2022 08:48:02]17653: WAF :: fetched 1 new logs [17-06-2022 08:50:02]23208: WAF :: fetched 1 new logs [17-06-2022 08:55:02]4892: WAF :: fetched 1 new logs [17-06-2022 08:56:01]7670: WAF :: fetched 4 new logs [17-06-2022 08:57:01]10455: WAF :: fetched 8 new logs [17-06-2022 08:58:02]13248: WAF :: fetched 26 new logs [17-06-2022 08:59:01]15996: WAF :: fetched 32 new logs [17-06-2022 09:00:02]18556: WAF :: fetched 76 new logs [17-06-2022 09:04:02]30170: WAF :: fetched 1 new logs [17-06-2022 09:06:02]3394: WAF :: fetched 1 new logs [17-06-2022 09:07:02]6238: WAF :: fetched 2 new logs [17-06-2022 09:08:01]9041: WAF :: fetched 1 new logs [17-06-2022 09:10:01]14553: WAF :: fetched 1 new logs [17-06-2022 09:12:02]20157: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655467922 [17-06-2022 09:12:02]20157: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 09:12:04]20157: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 09:12:04]20157: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-0912/20220617-091202-Yqxvku1Me710yVu0YQ5JsAAAABY [17-06-2022 09:12:04]20157: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 09:12:04]20157: WAF :: fetched 3 new logs [17-06-2022 09:13:02]22972: WAF :: fetched 1 new logs [17-06-2022 09:14:01]25720: WAF :: fetched 84 new logs [17-06-2022 09:15:02]28496: WAF :: fetched 2 new logs [17-06-2022 09:16:02]31244: WAF :: fetched 6 new logs [17-06-2022 09:17:01]1591: WAF :: fetched 3 new logs [17-06-2022 09:18:01]4551: WAF :: fetched 3 new logs [17-06-2022 09:19:01]7263: WAF :: fetched 4 new logs [17-06-2022 09:20:02]10046: WAF :: fetched 10 new logs [17-06-2022 09:21:01]12792: WAF :: fetched 5 new logs [17-06-2022 09:22:02]15557: WAF :: fetched 5 new logs [17-06-2022 09:24:02]21194: WAF :: fetched 1 new logs [17-06-2022 09:26:02]26689: WAF :: fetched 1 new logs [17-06-2022 09:27:02]29394: WAF :: fetched 2 new logs [17-06-2022 09:28:01]32214: WAF :: fetched 7 new logs [17-06-2022 09:29:02]2587: WAF :: fetched 7 new logs [17-06-2022 09:30:01]5367: WAF :: fetched 4 new logs [17-06-2022 09:31:02]8181: WAF :: fetched 9 new logs [17-06-2022 09:32:02]10919: WAF :: fetched 32 new logs [17-06-2022 09:33:01]13752: WAF :: fetched 25 new logs [17-06-2022 09:34:01]16501: WAF :: fetched 58 new logs [17-06-2022 09:35:02]19307: WAF :: fetched 6 new logs [17-06-2022 09:36:01]22075: WAF :: fetched 9 new logs [17-06-2022 09:37:01]24829: WAF :: fetched 7 new logs [17-06-2022 09:38:01]27649: WAF :: fetched 12 new logs [17-06-2022 09:39:01]30433: WAF :: fetched 15 new logs [17-06-2022 09:40:01]863: WAF :: fetched 34 new logs [17-06-2022 09:41:02]3749: WAF :: fetched 9 new logs [17-06-2022 09:41:02]3749: Checking for user cron vulnerabilities [17-06-2022 09:42:01]6538: WAF :: fetched 7 new logs [17-06-2022 09:43:02]9401: WAF :: fetched 6 new logs [17-06-2022 09:44:01]12118: Checking ditributed CMS bruteforce attacks [17-06-2022 09:44:02]12118: WAF :: fetched 22 new logs [17-06-2022 09:45:01]14915: WAF :: fetched 24 new logs [17-06-2022 09:47:01]20438: WAF :: fetched 4 new logs [17-06-2022 09:48:02]23277: WAF :: fetched 83 new logs [17-06-2022 09:51:01]31553: WAF :: fetched 2 new logs [17-06-2022 09:52:01]1893: WAF :: fetched 6 new logs [17-06-2022 09:53:02]4854: WAF :: fetched 8 new logs [17-06-2022 09:54:01]7588: WAF :: fetched 5 new logs [17-06-2022 09:55:02]10352: WAF :: fetched 9 new logs [17-06-2022 09:56:02]13126: WAF :: fetched 12 new logs [17-06-2022 09:57:01]15882: WAF :: fetched 15 new logs [17-06-2022 09:58:02]18710: WAF :: fetched 9 new logs [17-06-2022 09:59:01]21448: WAF :: fetched 5 new logs [17-06-2022 10:00:02]23925: WAF :: fetched 27 new logs [17-06-2022 10:01:02]27163: WAF :: fetched 19 new logs [17-06-2022 10:02:01]30015: WAF :: fetched 14 new logs [17-06-2022 10:03:02]407: WAF :: fetched 29 new logs [17-06-2022 10:04:01]3281: WAF :: fetched 6 new logs [17-06-2022 10:05:02]6130: WAF :: fetched 4 new logs [17-06-2022 10:12:01]25631: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655471521 [17-06-2022 10:12:01]25631: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 10:12:03]25631: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 10:12:04]25631: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-1012/20220617-101201-Yqx9oQsCojhGDnTlONuz3QAAABg [17-06-2022 10:12:04]25631: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 10:12:04]25631: WAF :: fetched 1 new logs [17-06-2022 10:13:02]28559: WAF :: fetched 1 new logs [17-06-2022 10:14:01]31315: WAF :: fetched 1 new logs [17-06-2022 10:16:02]4633: WAF :: fetched 2 new logs [17-06-2022 10:17:01]7371: WAF :: fetched 3 new logs [17-06-2022 10:18:02]10298: WAF :: fetched 9 new logs [17-06-2022 10:23:01]24293: WAF :: fetched 19 new logs [17-06-2022 10:24:02]27161: WAF :: fetched 11 new logs [17-06-2022 10:25:01]29948: WAF :: fetched 10 new logs [17-06-2022 10:26:02]307: WAF :: fetched 7 new logs [17-06-2022 10:27:01]3160: WAF :: fetched 12 new logs [17-06-2022 10:28:01]6105: WAF :: fetched 149 new logs [17-06-2022 10:29:02]8890: WAF :: fetched 29 new logs [17-06-2022 10:30:02]11678: WAF :: fetched 34 new logs [17-06-2022 10:31:01]14540: WAF :: fetched 16 new logs [17-06-2022 10:32:02]17342: WAF :: fetched 38 new logs [17-06-2022 10:33:01]20202: WAF :: fetched 14 new logs [17-06-2022 10:34:01]23004: WAF :: fetched 13 new logs [17-06-2022 10:35:02]25837: WAF :: fetched 10 new logs [17-06-2022 10:36:01]28670: WAF :: fetched 7 new logs [17-06-2022 10:37:02]31478: WAF :: fetched 5 new logs [17-06-2022 10:38:02]1936: WAF :: fetched 11 new logs [17-06-2022 10:39:01]4908: WAF :: fetched 66 new logs [17-06-2022 10:40:02]7844: WAF :: fetched 13 new logs [17-06-2022 10:41:02]10728: WAF :: fetched 45 new logs [17-06-2022 10:41:02]10728: Checking for user cron vulnerabilities [17-06-2022 10:42:01]13559: WAF :: fetched 16 new logs [17-06-2022 10:43:02]16563: WAF :: fetched 18 new logs [17-06-2022 10:44:01]19414: Checking ditributed CMS bruteforce attacks [17-06-2022 10:44:01]19414: WAF :: fetched 12 new logs [17-06-2022 10:45:01]22314: WAF :: fetched 6 new logs [17-06-2022 10:46:02]25248: WAF :: fetched 6 new logs [17-06-2022 10:47:01]28029: WAF :: fetched 4 new logs [17-06-2022 10:48:02]31017: WAF :: fetched 11 new logs [17-06-2022 10:49:02]1452: WAF :: fetched 9 new logs [17-06-2022 10:50:01]4414: WAF :: fetched 3 new logs [17-06-2022 10:51:01]7289: WAF :: fetched 8 new logs [17-06-2022 10:52:02]10067: WAF :: fetched 15 new logs [17-06-2022 10:53:02]12885: WAF :: fetched 21 new logs [17-06-2022 10:54:01]15670: WAF :: fetched 7 new logs [17-06-2022 10:55:02]18513: WAF :: fetched 6 new logs [17-06-2022 10:56:02]21351: WAF :: fetched 32 new logs [17-06-2022 10:57:01]24159: WAF :: fetched 12 new logs [17-06-2022 10:58:02]27072: WAF :: fetched 10 new logs [17-06-2022 10:59:01]29874: WAF :: fetched 6 new logs [17-06-2022 11:00:01]32404: WAF :: fetched 6 new logs [17-06-2022 11:01:01]3393: WAF :: fetched 7 new logs [17-06-2022 11:02:02]6278: WAF :: fetched 5 new logs [17-06-2022 11:06:01]17472: WAF :: fetched 4 new logs [17-06-2022 11:07:44]20442: Performed RBL check for 23.111.136.34. [17-06-2022 11:08:02]23225: WAF :: fetched 11 new logs [17-06-2022 11:09:01]26081: WAF :: fetched 19 new logs [17-06-2022 11:11:02]31748: WAF :: fetched 1 new logs [17-06-2022 11:12:02]2153: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655475122 [17-06-2022 11:12:02]2153: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 11:12:04]2153: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 11:12:04]2153: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-1112/20220617-111202-YqyLshOwZwtyIAozJ44oawAAAA4 [17-06-2022 11:12:04]2153: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 11:12:04]2153: WAF :: fetched 7 new logs [17-06-2022 11:15:02]10697: WAF :: fetched 8 new logs [17-06-2022 11:16:01]13567: WAF :: fetched 2 new logs [17-06-2022 11:18:01]19296: WAF :: fetched 31 new logs [17-06-2022 11:19:01]22099: WAF :: fetched 60 new logs [17-06-2022 11:20:02]25071: WAF :: fetched 1 new logs [17-06-2022 11:21:01]28003: WAF :: fetched 5 new logs [17-06-2022 11:22:02]30842: WAF :: fetched 22 new logs [17-06-2022 11:24:02]4237: WAF :: fetched 55 new logs [17-06-2022 11:25:02]7126: WAF :: fetched 58 new logs [17-06-2022 11:26:02]10041: WAF :: fetched 37 new logs [17-06-2022 11:27:02]12815: WAF :: fetched 99 new logs [17-06-2022 11:29:01]18504: WAF :: fetched 3 new logs [17-06-2022 11:30:02]21385: WAF :: fetched 22 new logs [17-06-2022 11:31:01]24254: WAF :: fetched 157 new logs [17-06-2022 11:32:01]27170: WAF :: fetched 97 new logs [17-06-2022 11:33:01]30087: WAF :: fetched 4 new logs [17-06-2022 11:34:01]402: WAF :: fetched 32 new logs [17-06-2022 11:35:02]3333: WAF :: fetched 9 new logs [17-06-2022 11:36:01]6327: WAF :: fetched 15 new logs [17-06-2022 11:37:02]9154: WAF :: fetched 15 new logs [17-06-2022 11:38:02]12009: WAF :: fetched 74 new logs [17-06-2022 11:39:01]14832: WAF :: fetched 44 new logs [17-06-2022 11:40:02]17704: WAF :: fetched 1 new logs [17-06-2022 11:41:01]20533: WAF :: fetched 4 new logs [17-06-2022 11:41:01]20533: Checking for user cron vulnerabilities [17-06-2022 11:42:02]23381: WAF :: fetched 6 new logs [17-06-2022 11:43:01]26312: WAF :: fetched 5 new logs [17-06-2022 11:44:01]29139: Checking ditributed CMS bruteforce attacks [17-06-2022 11:44:01]29139: WAF :: fetched 2 new logs [17-06-2022 11:45:01]31952: WAF :: fetched 28 new logs [17-06-2022 11:46:01]2443: WAF :: fetched 3 new logs [17-06-2022 11:47:02]5386: WAF :: fetched 9 new logs [17-06-2022 11:48:02]8240: WAF :: fetched 9 new logs [17-06-2022 11:49:01]11001: WAF :: fetched 4 new logs [17-06-2022 11:50:02]13806: WAF :: fetched 35 new logs [17-06-2022 11:51:02]16639: WAF :: fetched 3 new logs [17-06-2022 11:53:02]22235: WAF :: fetched 31 new logs [17-06-2022 11:54:01]24967: WAF :: fetched 3 new logs [17-06-2022 11:57:01]775: WAF :: fetched 33 new logs [17-06-2022 11:58:02]3789: WAF :: fetched 16 new logs [17-06-2022 12:01:02]12375: WAF :: fetched 1 new logs [17-06-2022 12:03:01]18904: WAF :: fetched 1 new logs [17-06-2022 12:04:01]21657: WAF :: fetched 22 new logs [17-06-2022 12:05:02]24436: WAF :: fetched 1 new logs [17-06-2022 12:06:01]27223: WAF :: fetched 1 new logs [17-06-2022 12:08:01]459: WAF :: fetched 15 new logs [17-06-2022 12:09:02]3314: WAF :: fetched 35 new logs [17-06-2022 12:12:02]11805: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655478722 [17-06-2022 12:12:02]11805: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 12:12:04]11805: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 12:12:04]11805: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-1212/20220617-121202-YqyZwpFhp0jSPfx3BydAowAAAA0 [17-06-2022 12:12:04]11805: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [17-06-2022 12:12:04]11805: WAF :: fetched 1 new logs [17-06-2022 12:13:01]14636: WAF :: fetched 10 new logs [17-06-2022 12:14:02]17364: WAF :: fetched 159 new logs [17-06-2022 12:15:02]20089: WAF :: fetched 69 new logs [17-06-2022 12:16:01]23058: WAF :: fetched 67 new logs [17-06-2022 12:17:02]26381: WAF :: fetched 37 new logs [17-06-2022 12:18:01]29213: WAF :: fetched 44 new logs [17-06-2022 12:19:02]31972: WAF :: fetched 20 new logs [17-06-2022 12:20:02]2350: WAF :: fetched 232 new logs [17-06-2022 12:21:01]5226: WAF :: fetched 107 new logs [17-06-2022 12:22:02]8054: WAF :: fetched 205 new logs [17-06-2022 12:23:01]10905: WAF :: fetched 103 new logs [17-06-2022 12:24:01]13618: WAF :: fetched 2 new logs [17-06-2022 12:25:02]16416: WAF :: fetched 82 new logs [17-06-2022 12:26:01]19199: WAF :: fetched 66 new logs [17-06-2022 12:27:02]21949: WAF :: fetched 10 new logs [17-06-2022 12:28:01]24780: WAF :: fetched 40 new logs [17-06-2022 12:29:01]27519: WAF :: fetched 6 new logs [17-06-2022 12:30:02]30303: WAF :: fetched 75 new logs [17-06-2022 12:31:01]677: WAF :: fetched 48 new logs [17-06-2022 12:32:02]3528: WAF :: fetched 5 new logs [17-06-2022 12:33:01]6393: WAF :: fetched 56 new logs [17-06-2022 12:34:01]9148: WAF :: fetched 296 new logs [17-06-2022 12:35:02]11953: WAF :: fetched 5 new logs [17-06-2022 12:36:01]14576: WAF :: fetched 6 new logs [17-06-2022 12:37:02]17530: WAF :: fetched 110 new logs [17-06-2022 12:38:01]20353: WAF :: fetched 19 new logs [17-06-2022 12:39:02]23172: WAF :: fetched 14 new logs [17-06-2022 12:40:01]25914: WAF :: fetched 5 new logs [17-06-2022 12:41:01]28701: WAF :: fetched 5 new logs [17-06-2022 12:41:01]28701: Checking for user cron vulnerabilities [17-06-2022 12:42:02]31492: WAF :: fetched 3 new logs [17-06-2022 12:43:01]1927: WAF :: fetched 5 new logs [17-06-2022 12:44:01]4795: Checking ditributed CMS bruteforce attacks [17-06-2022 12:44:01]4795: WAF :: fetched 39 new logs [17-06-2022 12:45:02]: Checking for software updates [17-06-2022 12:45:02]7582: WAF :: fetched 26 new logs [17-06-2022 12:46:01]10401: WAF :: fetched 16 new logs [17-06-2022 12:47:01]13138: WAF :: fetched 3 new logs [17-06-2022 12:49:01]18794: WAF :: fetched 9 new logs [17-06-2022 12:50:02]21574: WAF :: fetched 8 new logs [17-06-2022 12:51:02]24386: WAF :: fetched 12 new logs [17-06-2022 12:52:02]27160: WAF :: fetched 14 new logs [17-06-2022 12:53:01]30001: WAF :: fetched 16 new logs [17-06-2022 12:54:01]32758: WAF :: fetched 16 new logs [17-06-2022 12:55:01]3101: WAF :: fetched 7 new logs [17-06-2022 12:56:02]6000: WAF :: fetched 19 new logs [17-06-2022 12:57:01]8749: WAF :: fetched 51 new logs [17-06-2022 12:58:02]11628: WAF :: fetched 21 new logs [17-06-2022 12:59:01]14366: WAF :: fetched 14 new logs [17-06-2022 13:00:02]16866: WAF :: fetched 7 new logs [17-06-2022 13:01:02]20121: WAF :: fetched 6 new logs [17-06-2022 13:02:02]22904: WAF :: fetched 6 new logs [17-06-2022 13:03:01]25719: WAF :: fetched 8 new logs [17-06-2022 13:04:02]28479: WAF :: fetched 8 new logs [17-06-2022 13:06:01]1663: WAF :: fetched 1 new logs [17-06-2022 13:08:01]7350: WAF :: fetched 5 new logs [17-06-2022 13:09:01]10099: WAF :: fetched 36 new logs [17-06-2022 13:10:01]12866: WAF :: fetched 33 new logs [17-06-2022 13:11:02]15692: WAF :: fetched 11 new logs [17-06-2022 13:12:01]18452: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655482321 [17-06-2022 13:12:01]18452: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 13:12:03]18452: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 13:12:04]18452: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-1312/20220617-131201-Yqyn0f8QeuURS9uQSt9ItgAAAB8 [17-06-2022 13:12:04]18452: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 13:12:05]18452: WAF :: fetched 1764 new logs [17-06-2022 13:15:01]26839: WAF :: fetched 1 new logs [17-06-2022 13:19:02]5745: WAF :: fetched 1 new logs [17-06-2022 13:20:01]8554: WAF :: fetched 2 new logs [17-06-2022 13:21:02]11421: WAF :: fetched 7 new logs [17-06-2022 13:22:01]14155: WAF :: fetched 9 new logs [17-06-2022 13:23:01]17013: WAF :: fetched 14 new logs [17-06-2022 13:24:02]19785: WAF :: fetched 6 new logs [17-06-2022 13:25:01]22513: WAF :: fetched 10 new logs [17-06-2022 13:26:02]25331: WAF :: fetched 39 new logs [17-06-2022 13:27:01]28042: WAF :: fetched 10 new logs [17-06-2022 13:28:02]30910: WAF :: fetched 14 new logs [17-06-2022 13:29:02]1273: WAF :: fetched 10 new logs [17-06-2022 13:30:02]4112: WAF :: fetched 2 new logs [17-06-2022 13:31:01]6947: WAF :: fetched 1 new logs [17-06-2022 13:32:01]9744: WAF :: fetched 1 new logs [17-06-2022 13:34:01]15373: WAF :: fetched 4 new logs [17-06-2022 13:36:01]20964: WAF :: fetched 1 new logs [17-06-2022 13:37:01]23727: WAF :: fetched 2 new logs [17-06-2022 13:38:02]26644: WAF :: fetched 11 new logs [17-06-2022 13:39:01]29403: WAF :: fetched 2 new logs [17-06-2022 13:40:02]32211: WAF :: fetched 1 new logs [17-06-2022 13:41:01]2673: WAF :: fetched 2 new logs [17-06-2022 13:41:01]2673: Checking for user cron vulnerabilities [17-06-2022 13:42:01]5498: WAF :: fetched 1 new logs [17-06-2022 13:43:02]8408: WAF :: fetched 1 new logs [17-06-2022 13:44:01]11159: Checking ditributed CMS bruteforce attacks [17-06-2022 13:44:01]11159: WAF :: fetched 5 new logs [17-06-2022 13:45:02]: Checking for definition updates [17-06-2022 13:46:01]16781: WAF :: fetched 1 new logs [17-06-2022 13:47:01]19532: WAF :: fetched 12 new logs [17-06-2022 13:48:01]22389: WAF :: fetched 33 new logs [17-06-2022 13:49:02]25178: WAF :: fetched 41 new logs [17-06-2022 13:50:01]27942: WAF :: fetched 11 new logs [17-06-2022 13:51:02]30783: WAF :: fetched 17 new logs [17-06-2022 13:52:01]1151: WAF :: fetched 10 new logs [17-06-2022 13:53:01]4158: WAF :: fetched 11 new logs [17-06-2022 13:54:02]6953: WAF :: fetched 33 new logs [17-06-2022 13:55:01]9784: WAF :: fetched 9 new logs [17-06-2022 13:56:02]12701: WAF :: fetched 59 new logs [17-06-2022 13:57:02]15504: WAF :: fetched 4 new logs [17-06-2022 13:58:01]18357: WAF :: fetched 3 new logs [17-06-2022 13:59:02]21187: WAF :: fetched 34 new logs [17-06-2022 14:00:02]23733: WAF :: fetched 4 new logs [17-06-2022 14:01:01]27097: WAF :: fetched 4 new logs [17-06-2022 14:02:02]29955: WAF :: fetched 4 new logs [17-06-2022 14:03:01]339: WAF :: fetched 3 new logs [17-06-2022 14:04:02]3339: WAF :: fetched 1 new logs [17-06-2022 14:05:01]6158: WAF :: fetched 12 new logs [17-06-2022 14:06:02]9057: WAF :: fetched 3 new logs [17-06-2022 14:07:01]12006: WAF :: fetched 2 new logs [17-06-2022 14:08:01]14830: WAF :: fetched 3 new logs [17-06-2022 14:09:02]17717: WAF :: fetched 8 new logs [17-06-2022 14:10:01]20524: WAF :: fetched 6 new logs [17-06-2022 14:11:01]23443: WAF :: fetched 14 new logs [17-06-2022 14:12:02]26375: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655485922 [17-06-2022 14:12:02]26375: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 14:12:04]26375: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 14:12:04]26375: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-1412/20220617-141202-Yqy14sl49hMYkZM73tiuhAAAAA4 [17-06-2022 14:12:04]26375: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 14:12:04]26375: WAF :: fetched 8 new logs [17-06-2022 14:13:01]29287: WAF :: fetched 20 new logs [17-06-2022 14:14:01]32248: WAF :: fetched 18 new logs [17-06-2022 14:15:02]3234: WAF :: fetched 6 new logs [17-06-2022 14:16:01]6563: WAF :: fetched 38 new logs [17-06-2022 14:18:01]12818: WAF :: fetched 1 new logs [17-06-2022 14:19:01]15746: WAF :: fetched 1 new logs [17-06-2022 14:21:01]21421: WAF :: fetched 3 new logs [17-06-2022 14:22:01]24211: WAF :: fetched 2 new logs [17-06-2022 14:23:02]27061: WAF :: fetched 8 new logs [17-06-2022 14:24:01]29870: WAF :: fetched 1 new logs [17-06-2022 14:25:01]32733: WAF :: fetched 1 new logs [17-06-2022 14:30:02]14508: WAF :: fetched 1 new logs [17-06-2022 14:32:02]20270: WAF :: fetched 3 new logs [17-06-2022 14:33:01]23032: WAF :: fetched 1 new logs [17-06-2022 14:36:01]31529: WAF :: fetched 1 new logs [17-06-2022 14:38:01]4790: WAF :: fetched 2 new logs [17-06-2022 14:39:02]7644: WAF :: fetched 2 new logs [17-06-2022 14:40:01]10492: WAF :: fetched 29 new logs [17-06-2022 14:41:01]13331: WAF :: fetched 4 new logs [17-06-2022 14:41:01]13331: Checking for user cron vulnerabilities [17-06-2022 14:42:02]16194: WAF :: fetched 30 new logs [17-06-2022 14:44:01]21817: Checking ditributed CMS bruteforce attacks [17-06-2022 14:44:01]21817: WAF :: fetched 1 new logs [17-06-2022 14:48:02]646: WAF :: fetched 1 new logs [17-06-2022 14:49:01]3566: WAF :: fetched 2 new logs [17-06-2022 14:50:02]6503: WAF :: fetched 2 new logs [17-06-2022 14:51:01]9073: WAF :: fetched 1 new logs [17-06-2022 14:53:02]14908: Updated license status via CDN [17-06-2022 14:56:01]22958: WAF :: fetched 30 new logs [17-06-2022 14:57:02]26174: WAF :: fetched 6 new logs [17-06-2022 14:58:01]28964: WAF :: fetched 1 new logs [17-06-2022 15:00:01]1963: WAF :: fetched 3 new logs [17-06-2022 15:01:01]5370: Reseting cPGuard inotify settings [17-06-2022 15:01:01]5375: WAF :: fetched 10 new logs [17-06-2022 15:02:02]8253: WAF :: fetched 14 new logs [17-06-2022 15:03:01]11010: WAF :: fetched 5 new logs [17-06-2022 15:04:01]13917: WAF :: fetched 12 new logs [17-06-2022 15:05:02]16721: WAF :: fetched 74 new logs [17-06-2022 15:06:01]19574: WAF :: fetched 16 new logs [17-06-2022 15:07:02]22380: WAF :: fetched 15 new logs [17-06-2022 15:08:02]25165: WAF :: fetched 27 new logs [17-06-2022 15:09:02]28047: WAF :: fetched 26 new logs [17-06-2022 15:10:01]30843: WAF :: fetched 24 new logs [17-06-2022 15:11:02]1309: WAF :: fetched 48 new logs [17-06-2022 15:12:01]4154: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655489521 [17-06-2022 15:12:01]4154: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 15:12:03]4154: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 15:12:04]4154: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-1512/20220617-151201-YqzD8RJMglF34VwfYwYpcQAAAAI [17-06-2022 15:12:04]4154: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 15:12:04]4154: WAF :: fetched 21 new logs [17-06-2022 15:13:02]7023: WAF :: fetched 16 new logs [17-06-2022 15:14:01]9835: WAF :: fetched 16 new logs [17-06-2022 15:15:01]12598: WAF :: fetched 8 new logs [17-06-2022 15:16:02]15421: WAF :: fetched 10 new logs [17-06-2022 15:17:01]18186: WAF :: fetched 11 new logs [17-06-2022 15:18:02]20995: WAF :: fetched 11 new logs [17-06-2022 15:19:01]23814: WAF :: fetched 16 new logs [17-06-2022 15:20:01]26607: WAF :: fetched 7 new logs [17-06-2022 15:21:02]29508: WAF :: fetched 14 new logs [17-06-2022 15:22:01]32270: WAF :: fetched 19 new logs [17-06-2022 15:23:02]2771: WAF :: fetched 28 new logs [17-06-2022 15:24:01]5738: WAF :: fetched 16 new logs [17-06-2022 15:25:01]8712: WAF :: fetched 14 new logs [17-06-2022 15:26:02]11562: WAF :: fetched 4 new logs [17-06-2022 15:27:01]14337: WAF :: fetched 13 new logs [17-06-2022 15:28:02]17113: WAF :: fetched 15 new logs [17-06-2022 15:29:01]19935: WAF :: fetched 17 new logs [17-06-2022 15:30:01]22793: WAF :: fetched 22 new logs [17-06-2022 15:31:01]25686: WAF :: fetched 22 new logs [17-06-2022 15:32:02]28523: WAF :: fetched 16 new logs [17-06-2022 15:33:01]31267: WAF :: fetched 10 new logs [17-06-2022 15:34:01]1738: WAF :: fetched 13 new logs [17-06-2022 15:35:02]4648: WAF :: fetched 8 new logs [17-06-2022 15:36:01]7510: WAF :: fetched 13 new logs [17-06-2022 15:37:02]10322: WAF :: fetched 20 new logs [17-06-2022 15:38:02]13042: WAF :: fetched 16 new logs [17-06-2022 15:39:01]15885: WAF :: fetched 20 new logs [17-06-2022 15:40:02]18688: WAF :: fetched 8 new logs [17-06-2022 15:41:01]21584: WAF :: fetched 15 new logs [17-06-2022 15:41:01]21584: Checking for user cron vulnerabilities [17-06-2022 15:42:01]24406: WAF :: fetched 26 new logs [17-06-2022 15:43:02]27180: WAF :: fetched 24 new logs [17-06-2022 15:44:01]30052: Checking ditributed CMS bruteforce attacks [17-06-2022 15:44:02]30052: WAF :: fetched 32 new logs [17-06-2022 15:45:02]455: WAF :: fetched 29 new logs [17-06-2022 15:46:02]3457: WAF :: fetched 22 new logs [17-06-2022 15:47:01]6325: WAF :: fetched 19 new logs [17-06-2022 15:48:02]9149: WAF :: fetched 14 new logs [17-06-2022 15:49:01]12015: WAF :: fetched 8 new logs [17-06-2022 15:50:01]14830: WAF :: fetched 16 new logs [17-06-2022 15:51:02]17681: WAF :: fetched 18 new logs [17-06-2022 15:52:01]20443: WAF :: fetched 22 new logs [17-06-2022 15:53:01]23182: WAF :: fetched 17 new logs [17-06-2022 15:54:01]26060: WAF :: fetched 33 new logs [17-06-2022 15:55:02]28840: WAF :: fetched 12 new logs [17-06-2022 15:56:02]31678: WAF :: fetched 14 new logs [17-06-2022 15:57:01]2066: WAF :: fetched 47 new logs [17-06-2022 15:58:02]4978: WAF :: fetched 24 new logs [17-06-2022 15:59:01]7815: WAF :: fetched 38 new logs [17-06-2022 16:00:02]10376: WAF :: fetched 24 new logs [17-06-2022 16:01:02]13667: WAF :: fetched 14 new logs [17-06-2022 16:02:01]16470: WAF :: fetched 20 new logs [17-06-2022 16:03:02]19307: WAF :: fetched 20 new logs [17-06-2022 16:04:01]22178: WAF :: fetched 12 new logs [17-06-2022 16:05:01]24949: WAF :: fetched 5 new logs [17-06-2022 16:06:01]27815: WAF :: fetched 26 new logs [17-06-2022 16:07:02]30619: WAF :: fetched 22 new logs [17-06-2022 16:08:01]1034: WAF :: fetched 49 new logs [17-06-2022 16:09:02]4040: WAF :: fetched 5 new logs [17-06-2022 16:10:01]6855: WAF :: fetched 10 new logs [17-06-2022 16:11:02]9764: WAF :: fetched 15 new logs [17-06-2022 16:12:02]12548: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655493122 [17-06-2022 16:12:02]12548: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 16:12:04]12548: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 16:12:04]12548: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-1612/20220617-161202-YqzSAjoq-w3lr1SqtbeZLQAAAAk [17-06-2022 16:12:04]12548: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 16:12:04]12548: WAF :: fetched 14 new logs [17-06-2022 16:13:01]15325: WAF :: fetched 17 new logs [17-06-2022 16:14:02]18198: WAF :: fetched 7 new logs [17-06-2022 16:15:01]20963: WAF :: fetched 66 new logs [17-06-2022 16:16:02]23857: WAF :: fetched 57 new logs [17-06-2022 16:17:01]26649: WAF :: fetched 17 new logs [17-06-2022 16:18:01]29489: WAF :: fetched 1 new logs [17-06-2022 16:19:01]32400: WAF :: fetched 1 new logs [17-06-2022 16:20:02]2870: WAF :: fetched 4 new logs [17-06-2022 16:20:02]2867: httpd.conf changed. Refreshing watchlist. [17-06-2022 16:21:01]5865: WAF :: fetched 5 new logs [17-06-2022 16:22:02]8662: WAF :: fetched 5 new logs [17-06-2022 16:23:01]11445: WAF :: fetched 9 new logs [17-06-2022 16:24:02]14355: WAF :: fetched 5 new logs [17-06-2022 16:25:01]17132: WAF :: fetched 43 new logs [17-06-2022 16:26:02]20090: WAF :: fetched 5 new logs [17-06-2022 16:26:02]20109: httpd.conf changed. Refreshing watchlist. [17-06-2022 16:27:01]22869: WAF :: fetched 5 new logs [17-06-2022 16:28:02]25691: WAF :: fetched 3 new logs [17-06-2022 16:29:02]28564: WAF :: fetched 8 new logs [17-06-2022 16:30:01]31124: WAF :: fetched 5 new logs [17-06-2022 16:31:01]1794: WAF :: fetched 5 new logs [17-06-2022 16:32:02]4750: WAF :: fetched 3 new logs [17-06-2022 16:33:01]7577: WAF :: fetched 7 new logs [17-06-2022 16:34:02]10436: WAF :: fetched 5 new logs [17-06-2022 16:35:02]13331: WAF :: fetched 4 new logs [17-06-2022 16:36:01]16195: WAF :: fetched 11 new logs [17-06-2022 16:37:02]19035: WAF :: fetched 6 new logs [17-06-2022 16:38:01]21625: WAF :: fetched 1 new logs [17-06-2022 16:39:01]24691: WAF :: fetched 98 new logs [17-06-2022 16:41:01]30234: Checking for user cron vulnerabilities [17-06-2022 16:43:01]3597: WAF :: fetched 1 new logs [17-06-2022 16:44:02]6558: Checking ditributed CMS bruteforce attacks [17-06-2022 16:45:01]9313: WAF :: fetched 4 new logs [17-06-2022 16:46:01]12208: WAF :: fetched 4 new logs [17-06-2022 16:47:02]14951: WAF :: fetched 3 new logs [17-06-2022 16:48:01]17741: WAF :: fetched 7 new logs [17-06-2022 16:49:01]20697: WAF :: fetched 10 new logs [17-06-2022 16:50:01]23539: WAF :: fetched 26 new logs [17-06-2022 16:51:02]26387: WAF :: fetched 86 new logs [17-06-2022 16:52:02]29177: WAF :: fetched 7 new logs [17-06-2022 16:53:01]31927: WAF :: fetched 13 new logs [17-06-2022 16:54:02]2418: WAF :: fetched 12 new logs [17-06-2022 16:55:01]5246: WAF :: fetched 8 new logs [17-06-2022 16:56:01]8100: WAF :: fetched 8 new logs [17-06-2022 16:57:02]10943: WAF :: fetched 9 new logs [17-06-2022 16:58:02]13724: WAF :: fetched 11 new logs [17-06-2022 16:59:01]16578: WAF :: fetched 11 new logs [17-06-2022 17:00:02]19090: WAF :: fetched 13 new logs [17-06-2022 17:01:01]22163: WAF :: fetched 9 new logs [17-06-2022 17:02:02]25235: WAF :: fetched 10 new logs [17-06-2022 17:03:01]28054: WAF :: fetched 7 new logs [17-06-2022 17:04:01]30895: WAF :: fetched 7 new logs [17-06-2022 17:05:02]1351: WAF :: fetched 7 new logs [17-06-2022 17:06:02]4219: WAF :: fetched 9 new logs [17-06-2022 17:07:01]7029: WAF :: fetched 6 new logs [17-06-2022 17:08:02]9818: WAF :: fetched 3 new logs [17-06-2022 17:09:01]12674: WAF :: fetched 5 new logs [17-06-2022 17:10:02]15507: WAF :: fetched 3 new logs [17-06-2022 17:11:02]18330: WAF :: fetched 31 new logs [17-06-2022 17:12:01]21097: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655496721 [17-06-2022 17:12:01]21097: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 17:12:03]21097: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 17:12:04]21097: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-1712/20220617-171201-YqzgEdZe32esbZCtvdKFWgAAABY [17-06-2022 17:12:04]21097: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 17:12:04]21097: WAF :: fetched 81 new logs [17-06-2022 17:13:02]23886: WAF :: fetched 283 new logs [17-06-2022 17:14:02]26715: WAF :: fetched 47 new logs [17-06-2022 17:15:01]29475: WAF :: fetched 4 new logs [17-06-2022 17:16:02]32331: WAF :: fetched 76 new logs [17-06-2022 17:17:01]2690: WAF :: fetched 21 new logs [17-06-2022 17:18:02]5578: WAF :: fetched 25 new logs [17-06-2022 17:19:02]8370: WAF :: fetched 16 new logs [17-06-2022 17:20:01]11149: WAF :: fetched 16 new logs [17-06-2022 17:21:02]13996: WAF :: fetched 20 new logs [17-06-2022 17:22:01]16738: WAF :: fetched 11 new logs [17-06-2022 17:23:01]19522: WAF :: fetched 5 new logs [17-06-2022 17:24:01]22360: WAF :: fetched 6 new logs [17-06-2022 17:25:02]25160: WAF :: fetched 7 new logs [17-06-2022 17:26:01]27970: WAF :: fetched 2 new logs [17-06-2022 17:27:02]30716: WAF :: fetched 3 new logs [17-06-2022 17:28:01]1077: WAF :: fetched 7 new logs [17-06-2022 17:29:01]3997: WAF :: fetched 10 new logs [17-06-2022 17:30:02]6852: WAF :: fetched 15 new logs [17-06-2022 17:31:01]9712: WAF :: fetched 16 new logs [17-06-2022 17:32:02]12540: WAF :: fetched 3 new logs [17-06-2022 17:33:02]15266: WAF :: fetched 1 new logs [17-06-2022 17:35:01]20909: WAF :: fetched 30 new logs [17-06-2022 17:36:02]23781: WAF :: fetched 6 new logs [17-06-2022 17:37:02]26564: WAF :: fetched 10 new logs [17-06-2022 17:38:01]29310: WAF :: fetched 3 new logs [17-06-2022 17:39:02]32151: WAF :: fetched 5 new logs [17-06-2022 17:40:01]2577: WAF :: fetched 7 new logs [17-06-2022 17:41:01]5455: WAF :: fetched 8 new logs [17-06-2022 17:41:01]5455: Checking for user cron vulnerabilities [17-06-2022 17:42:02]8266: WAF :: fetched 11 new logs [17-06-2022 17:43:01]11083: WAF :: fetched 39 new logs [17-06-2022 17:44:01]13926: Checking ditributed CMS bruteforce attacks [17-06-2022 17:44:02]13926: WAF :: fetched 9 new logs [17-06-2022 17:45:01]16681: WAF :: fetched 4 new logs [17-06-2022 17:46:02]19536: WAF :: fetched 21 new logs [17-06-2022 17:47:01]22269: WAF :: fetched 6 new logs [17-06-2022 17:48:02]25053: WAF :: fetched 6 new logs [17-06-2022 17:49:02]27888: WAF :: fetched 8 new logs [17-06-2022 17:50:01]30714: WAF :: fetched 11 new logs [17-06-2022 17:51:02]1138: WAF :: fetched 9 new logs [17-06-2022 17:52:01]3936: WAF :: fetched 11 new logs [17-06-2022 17:53:01]6743: WAF :: fetched 13 new logs [17-06-2022 17:54:02]9631: WAF :: fetched 25 new logs [17-06-2022 17:55:01]12450: WAF :: fetched 15 new logs [17-06-2022 17:56:01]15358: WAF :: fetched 18 new logs [17-06-2022 17:57:02]18175: WAF :: fetched 20 new logs [17-06-2022 17:58:02]20958: WAF :: fetched 19 new logs [17-06-2022 17:59:01]23809: WAF :: fetched 24 new logs [17-06-2022 18:00:02]26338: WAF :: fetched 45 new logs [17-06-2022 18:01:01]29236: WAF :: fetched 19 new logs [17-06-2022 18:02:02]32448: WAF :: fetched 20 new logs [17-06-2022 18:03:01]2834: WAF :: fetched 25 new logs [17-06-2022 18:04:02]5754: WAF :: fetched 12 new logs [17-06-2022 18:05:02]8509: WAF :: fetched 6 new logs [17-06-2022 18:06:01]11354: WAF :: fetched 9 new logs [17-06-2022 18:07:01]14143: WAF :: fetched 5 new logs [17-06-2022 18:08:02]16965: WAF :: fetched 8 new logs [17-06-2022 18:09:01]19820: WAF :: fetched 3 new logs [17-06-2022 18:10:02]22668: WAF :: fetched 2 new logs [17-06-2022 18:10:02]22665: httpd.conf changed. Refreshing watchlist. [17-06-2022 18:11:02]25518: WAF :: fetched 9 new logs [17-06-2022 18:12:01]28336: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655500321 [17-06-2022 18:12:01]28336: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 18:12:03]28336: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 18:12:03]28336: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-1812/20220617-181201-YqzuIcwlbe3oJ_6GE1wlGAAAAB0 [17-06-2022 18:12:03]28336: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 18:12:04]28336: WAF :: fetched 6 new logs [17-06-2022 18:13:02]31143: WAF :: fetched 10 new logs [17-06-2022 18:14:01]1648: WAF :: fetched 5 new logs [17-06-2022 18:14:01]1645: httpd.conf changed. Refreshing watchlist. [17-06-2022 18:15:02]4516: WAF :: fetched 12 new logs [17-06-2022 18:16:01]7378: WAF :: fetched 10 new logs [17-06-2022 18:17:02]10171: WAF :: fetched 33 new logs [17-06-2022 18:18:02]12934: WAF :: fetched 4 new logs [17-06-2022 18:19:01]15749: WAF :: fetched 1 new logs [17-06-2022 18:20:02]18528: WAF :: fetched 9 new logs [17-06-2022 18:21:01]21326: WAF :: fetched 3 new logs [17-06-2022 18:22:02]24068: WAF :: fetched 4 new logs [17-06-2022 18:26:02]2876: WAF :: fetched 16 new logs [17-06-2022 18:27:02]5684: WAF :: fetched 2 new logs [17-06-2022 18:28:01]8412: WAF :: fetched 8 new logs [17-06-2022 18:29:02]11243: WAF :: fetched 7 new logs [17-06-2022 18:30:01]14003: WAF :: fetched 31 new logs [17-06-2022 18:31:02]16815: WAF :: fetched 6 new logs [17-06-2022 18:32:01]19557: WAF :: fetched 9 new logs [17-06-2022 18:33:01]22300: WAF :: fetched 7 new logs [17-06-2022 18:34:02]25135: WAF :: fetched 8 new logs [17-06-2022 18:35:01]27911: WAF :: fetched 31 new logs [17-06-2022 18:36:02]30733: WAF :: fetched 7 new logs [17-06-2022 18:37:02]1099: WAF :: fetched 10 new logs [17-06-2022 18:38:01]3886: WAF :: fetched 35 new logs [17-06-2022 18:39:02]6831: WAF :: fetched 20 new logs [17-06-2022 18:40:01]9541: WAF :: fetched 22 new logs [17-06-2022 18:41:01]12383: WAF :: fetched 9 new logs [17-06-2022 18:41:01]12383: Checking for user cron vulnerabilities [17-06-2022 18:42:02]15166: WAF :: fetched 7 new logs [17-06-2022 18:43:01]17891: WAF :: fetched 38 new logs [17-06-2022 18:44:02]20771: Checking ditributed CMS bruteforce attacks [17-06-2022 18:44:02]20771: WAF :: fetched 15 new logs [17-06-2022 18:45:01]23511: WAF :: fetched 11 new logs [17-06-2022 18:46:01]26327: WAF :: fetched 12 new logs [17-06-2022 18:47:02]29105: WAF :: fetched 35 new logs [17-06-2022 18:48:02]31905: WAF :: fetched 72 new logs [17-06-2022 18:49:02]2332: WAF :: fetched 400 new logs [17-06-2022 18:50:01]5183: WAF :: fetched 58 new logs [17-06-2022 18:51:02]8002: WAF :: fetched 92 new logs [17-06-2022 18:52:01]10752: WAF :: fetched 2 new logs [17-06-2022 18:53:01]13478: WAF :: fetched 6 new logs [17-06-2022 18:54:02]16297: WAF :: fetched 1 new logs [17-06-2022 18:55:01]18994: WAF :: fetched 1 new logs [17-06-2022 18:56:02]21811: WAF :: fetched 8 new logs [17-06-2022 18:57:01]24536: WAF :: fetched 1 new logs [17-06-2022 18:58:02]27340: WAF :: fetched 8 new logs [17-06-2022 18:59:02]30123: WAF :: fetched 4 new logs [17-06-2022 19:00:01]32674: WAF :: fetched 25 new logs [17-06-2022 19:01:02]3579: WAF :: fetched 10 new logs [17-06-2022 19:02:01]6422: WAF :: fetched 31 new logs [17-06-2022 19:03:01]9205: WAF :: fetched 18 new logs [17-06-2022 19:04:01]12043: WAF :: fetched 28 new logs [17-06-2022 19:05:02]14908: WAF :: fetched 7 new logs [17-06-2022 19:06:02]17695: WAF :: fetched 15 new logs [17-06-2022 19:07:01]20430: WAF :: fetched 12 new logs [17-06-2022 19:08:02]23260: WAF :: fetched 4 new logs [17-06-2022 19:09:01]26099: WAF :: fetched 5 new logs [17-06-2022 19:10:02]28921: WAF :: fetched 1 new logs [17-06-2022 19:11:02]31723: WAF :: fetched 6 new logs [17-06-2022 19:12:01]2127: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655503921 [17-06-2022 19:12:01]2127: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 19:12:03]2127: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 19:12:04]2127: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-1912/20220617-191201-Yqz8MSMlEMilp37Jcf79pAAAAAc [17-06-2022 19:12:04]2127: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 19:12:04]2127: WAF :: fetched 8 new logs [17-06-2022 19:13:02]5003: WAF :: fetched 2 new logs [17-06-2022 19:15:02]10635: WAF :: fetched 1 new logs [17-06-2022 19:17:01]16256: WAF :: fetched 3 new logs [17-06-2022 19:18:01]19013: WAF :: fetched 73 new logs [17-06-2022 19:19:02]21783: WAF :: fetched 1 new logs [17-06-2022 19:20:01]24600: WAF :: fetched 4 new logs [17-06-2022 19:21:02]27422: WAF :: fetched 1 new logs [17-06-2022 19:22:01]30150: WAF :: fetched 2 new logs [17-06-2022 19:23:01]504: WAF :: fetched 70 new logs [17-06-2022 19:24:02]3384: WAF :: fetched 11 new logs [17-06-2022 19:29:02]17266: WAF :: fetched 6 new logs [17-06-2022 19:30:01]20095: WAF :: fetched 11 new logs [17-06-2022 19:31:02]22948: WAF :: fetched 7 new logs [17-06-2022 19:32:01]25688: WAF :: fetched 14 new logs [17-06-2022 19:33:01]28435: WAF :: fetched 14 new logs [17-06-2022 19:34:01]31157: WAF :: fetched 12 new logs [17-06-2022 19:35:02]1603: WAF :: fetched 8 new logs [17-06-2022 19:36:02]4464: WAF :: fetched 7 new logs [17-06-2022 19:37:01]7255: WAF :: fetched 4 new logs [17-06-2022 19:38:02]10046: WAF :: fetched 4 new logs [17-06-2022 19:39:01]12801: WAF :: fetched 5 new logs [17-06-2022 19:40:02]15704: WAF :: fetched 4 new logs [17-06-2022 19:41:01]18514: Checking for user cron vulnerabilities [17-06-2022 19:42:02]21296: WAF :: fetched 7 new logs [17-06-2022 19:43:02]24067: WAF :: fetched 64 new logs [17-06-2022 19:44:01]26846: Checking ditributed CMS bruteforce attacks [17-06-2022 19:44:01]26846: WAF :: fetched 8 new logs [17-06-2022 19:45:02]: Checking for definition updates [17-06-2022 19:45:02]29738: WAF :: fetched 6 new logs [17-06-2022 19:46:01]32550: WAF :: fetched 5 new logs [17-06-2022 19:47:01]2947: WAF :: fetched 7 new logs [17-06-2022 19:48:02]5846: WAF :: fetched 13 new logs [17-06-2022 19:49:01]8611: WAF :: fetched 43 new logs [17-06-2022 19:50:02]11510: WAF :: fetched 6 new logs [17-06-2022 19:51:01]14348: WAF :: fetched 3 new logs [17-06-2022 19:52:01]17098: WAF :: fetched 7 new logs [17-06-2022 19:53:02]19931: WAF :: fetched 6 new logs [17-06-2022 19:54:01]22665: WAF :: fetched 4 new logs [17-06-2022 19:55:02]25524: WAF :: fetched 4 new logs [17-06-2022 19:56:01]28323: WAF :: fetched 9 new logs [17-06-2022 19:57:01]31067: WAF :: fetched 6 new logs [17-06-2022 19:58:02]1411: WAF :: fetched 82 new logs [17-06-2022 19:59:01]4198: WAF :: fetched 5 new logs [17-06-2022 20:00:02]6798: WAF :: fetched 1 new logs [17-06-2022 20:01:02]10067: WAF :: fetched 2 new logs [17-06-2022 20:03:02]15577: WAF :: fetched 4 new logs [17-06-2022 20:04:01]18318: WAF :: fetched 29 new logs [17-06-2022 20:06:02]23980: WAF :: fetched 5 new logs [17-06-2022 20:07:01]26742: WAF :: fetched 4 new logs [17-06-2022 20:08:02]29537: WAF :: fetched 12 new logs [17-06-2022 20:09:01]32262: WAF :: fetched 25 new logs [17-06-2022 20:10:01]2734: WAF :: fetched 10 new logs [17-06-2022 20:11:02]5634: WAF :: fetched 13 new logs [17-06-2022 20:12:01]8359: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655507521 [17-06-2022 20:12:01]8359: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 20:12:03]8359: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 20:12:03]8359: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-2012/20220617-201201-Yq0KQYNFxnAS-omC4EPDfgAAABc [17-06-2022 20:12:03]8359: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 20:12:04]8359: WAF :: fetched 16 new logs [17-06-2022 20:13:02]11155: WAF :: fetched 13 new logs [17-06-2022 20:14:02]13896: WAF :: fetched 3 new logs [17-06-2022 20:15:01]16726: WAF :: fetched 2 new logs [17-06-2022 20:16:02]19536: WAF :: fetched 12 new logs [17-06-2022 20:17:01]22236: WAF :: fetched 1 new logs [17-06-2022 20:18:01]24983: WAF :: fetched 111 new logs [17-06-2022 20:19:02]27776: WAF :: fetched 28 new logs [17-06-2022 20:20:01]30594: WAF :: fetched 5 new logs [17-06-2022 20:21:02]977: WAF :: fetched 13 new logs [17-06-2022 20:23:02]6609: WAF :: fetched 3 new logs [17-06-2022 20:24:01]9347: WAF :: fetched 5 new logs [17-06-2022 20:25:02]12223: WAF :: fetched 11 new logs [17-06-2022 20:26:02]14994: WAF :: fetched 11 new logs [17-06-2022 20:27:01]17761: WAF :: fetched 11 new logs [17-06-2022 20:28:02]20534: WAF :: fetched 6 new logs [17-06-2022 20:29:01]23271: WAF :: fetched 8 new logs [17-06-2022 20:30:02]26182: WAF :: fetched 22 new logs [17-06-2022 20:31:02]28977: WAF :: fetched 13 new logs [17-06-2022 20:32:01]31729: WAF :: fetched 1 new logs [17-06-2022 20:33:02]2131: WAF :: fetched 4 new logs [17-06-2022 20:34:01]4980: WAF :: fetched 84 new logs [17-06-2022 20:35:02]7854: WAF :: fetched 77 new logs [17-06-2022 20:36:01]10655: WAF :: fetched 7 new logs [17-06-2022 20:37:01]13419: WAF :: fetched 12 new logs [17-06-2022 20:38:02]16218: WAF :: fetched 23 new logs [17-06-2022 20:39:01]18993: WAF :: fetched 7 new logs [17-06-2022 20:40:02]21870: WAF :: fetched 40 new logs [17-06-2022 20:41:01]24669: WAF :: fetched 11 new logs [17-06-2022 20:41:01]24669: Checking for user cron vulnerabilities [17-06-2022 20:42:01]27434: WAF :: fetched 8 new logs [17-06-2022 20:43:02]30266: WAF :: fetched 33 new logs [17-06-2022 20:44:01]659: Checking ditributed CMS bruteforce attacks [17-06-2022 20:44:01]659: WAF :: fetched 45 new logs [17-06-2022 20:45:01]3621: WAF :: fetched 46 new logs [17-06-2022 20:46:02]6520: WAF :: fetched 44 new logs [17-06-2022 20:47:01]9317: WAF :: fetched 43 new logs [17-06-2022 20:48:02]12111: WAF :: fetched 34 new logs [17-06-2022 20:49:01]14871: WAF :: fetched 36 new logs [17-06-2022 20:50:01]17729: WAF :: fetched 101 new logs [17-06-2022 20:51:02]20525: WAF :: fetched 144 new logs [17-06-2022 20:52:01]23261: WAF :: fetched 50 new logs [17-06-2022 20:53:02]26052: WAF :: fetched 8 new logs [17-06-2022 20:54:01]28784: WAF :: fetched 35 new logs [17-06-2022 20:55:01]31610: WAF :: fetched 37 new logs [17-06-2022 20:56:02]2048: WAF :: fetched 4 new logs [17-06-2022 20:57:01]4850: WAF :: fetched 17 new logs [17-06-2022 20:58:02]7589: WAF :: fetched 1 new logs [17-06-2022 20:59:02]10255: WAF :: fetched 24 new logs [17-06-2022 21:01:02]16028: WAF :: fetched 93 new logs [17-06-2022 21:02:02]18745: WAF :: fetched 238 new logs [17-06-2022 21:03:01]21472: WAF :: fetched 66 new logs [17-06-2022 21:04:02]24257: WAF :: fetched 49 new logs [17-06-2022 21:06:02]29785: WAF :: fetched 1 new logs [17-06-2022 21:07:01]32487: WAF :: fetched 58 new logs [17-06-2022 21:08:01]2836: WAF :: fetched 26 new logs [17-06-2022 21:10:02]8428: WAF :: fetched 3 new logs [17-06-2022 21:11:02]11182: WAF :: fetched 2 new logs [17-06-2022 21:12:01]13983: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655511121 [17-06-2022 21:12:01]13983: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 21:12:03]13983: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 21:12:03]13983: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-2112/20220617-211201-Yq0YUVxlWffxVq0csZuThQAAAAc [17-06-2022 21:12:04]13983: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 21:12:04]13983: WAF :: fetched 96 new logs [17-06-2022 21:13:02]16706: WAF :: fetched 7 new logs [17-06-2022 21:14:01]19437: WAF :: fetched 4 new logs [17-06-2022 21:15:01]22300: WAF :: fetched 5 new logs [17-06-2022 21:16:02]25076: WAF :: fetched 39 new logs [17-06-2022 21:17:01]27784: WAF :: fetched 34 new logs [17-06-2022 21:18:02]30522: WAF :: fetched 9 new logs [17-06-2022 21:19:01]838: WAF :: fetched 61 new logs [17-06-2022 21:20:01]3722: WAF :: fetched 37 new logs [17-06-2022 21:21:01]6558: WAF :: fetched 27 new logs [17-06-2022 21:23:01]11951: WAF :: fetched 26 new logs [17-06-2022 21:24:02]14798: WAF :: fetched 14 new logs [17-06-2022 21:25:02]17605: WAF :: fetched 10 new logs [17-06-2022 21:27:02]23057: WAF :: fetched 5 new logs [17-06-2022 21:28:01]25821: WAF :: fetched 66 new logs [17-06-2022 21:29:02]28531: WAF :: fetched 67 new logs [17-06-2022 21:30:01]31405: WAF :: fetched 57 new logs [17-06-2022 21:31:01]1745: WAF :: fetched 12 new logs [17-06-2022 21:32:02]4584: WAF :: fetched 7 new logs [17-06-2022 21:33:01]7261: WAF :: fetched 7 new logs [17-06-2022 21:34:02]10002: WAF :: fetched 24 new logs [17-06-2022 21:35:01]12791: WAF :: fetched 3 new logs [17-06-2022 21:36:01]15521: WAF :: fetched 2 new logs [17-06-2022 21:37:02]18259: WAF :: fetched 4 new logs [17-06-2022 21:38:01]20942: WAF :: fetched 2 new logs [17-06-2022 21:39:02]23663: WAF :: fetched 9 new logs [17-06-2022 21:40:02]26494: WAF :: fetched 7 new logs [17-06-2022 21:41:02]29251: WAF :: fetched 6 new logs [17-06-2022 21:41:02]29251: Checking for user cron vulnerabilities [17-06-2022 21:42:01]32014: WAF :: fetched 10 new logs [17-06-2022 21:43:02]2350: WAF :: fetched 8 new logs [17-06-2022 21:44:01]5083: Checking ditributed CMS bruteforce attacks [17-06-2022 21:44:01]5083: WAF :: fetched 6 new logs [17-06-2022 21:45:02]7959: WAF :: fetched 2 new logs [17-06-2022 21:46:02]10668: WAF :: fetched 29 new logs [17-06-2022 21:47:01]13370: WAF :: fetched 69 new logs [17-06-2022 21:48:02]16119: WAF :: fetched 7 new logs [17-06-2022 21:49:01]18765: WAF :: fetched 9 new logs [17-06-2022 21:50:01]21562: WAF :: fetched 7 new logs [17-06-2022 21:51:02]24300: WAF :: fetched 59 new logs [17-06-2022 21:52:01]26979: WAF :: fetched 6 new logs [17-06-2022 21:53:01]29675: WAF :: fetched 4 new logs [17-06-2022 21:54:02]32399: WAF :: fetched 43 new logs [17-06-2022 21:55:02]2771: WAF :: fetched 5 new logs [17-06-2022 21:56:02]5533: WAF :: fetched 9 new logs [17-06-2022 21:57:01]8201: WAF :: fetched 4 new logs [17-06-2022 21:58:02]10890: WAF :: fetched 8 new logs [17-06-2022 21:59:01]13527: WAF :: fetched 7 new logs [17-06-2022 22:00:02]15998: WAF :: fetched 8 new logs [17-06-2022 22:01:01]19132: WAF :: fetched 43 new logs [17-06-2022 22:02:02]21852: WAF :: fetched 32 new logs [17-06-2022 22:05:02]29926: WAF :: fetched 1 new logs [17-06-2022 22:07:08]2858: Performing Domain reputation checks [17-06-2022 22:10:02]11048: WAF :: fetched 24 new logs [17-06-2022 22:11:01]13592: WAF :: fetched 74 new logs [17-06-2022 22:12:02]16465: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655514722 [17-06-2022 22:12:02]16465: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 22:12:04]16465: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 22:12:04]16465: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-2212/20220617-221202-Yq0mYgLBc6nKVa7rDn91IAAAABA [17-06-2022 22:12:04]16465: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 22:12:04]16465: WAF :: fetched 2 new logs [17-06-2022 22:13:01]19100: WAF :: fetched 2 new logs [17-06-2022 22:14:01]21762: WAF :: fetched 19 new logs [17-06-2022 22:15:02]24530: WAF :: fetched 1 new logs [17-06-2022 22:16:01]27221: WAF :: fetched 89 new logs [17-06-2022 22:17:02]29855: WAF :: fetched 2 new logs [17-06-2022 22:19:01]2809: WAF :: fetched 1 new logs [17-06-2022 22:21:01]8395: WAF :: fetched 1 new logs [17-06-2022 22:29:01]29825: WAF :: fetched 1 new logs [17-06-2022 22:31:01]2923: WAF :: fetched 2 new logs [17-06-2022 22:32:02]5703: WAF :: fetched 26 new logs [17-06-2022 22:34:02]11067: WAF :: fetched 4 new logs [17-06-2022 22:35:02]13836: WAF :: fetched 2 new logs [17-06-2022 22:37:01]19187: WAF :: fetched 2 new logs [17-06-2022 22:38:02]21849: WAF :: fetched 5 new logs [17-06-2022 22:39:01]24495: WAF :: fetched 3 new logs [17-06-2022 22:40:01]27319: WAF :: fetched 6 new logs [17-06-2022 22:41:01]30013: WAF :: fetched 7 new logs [17-06-2022 22:41:01]30013: Checking for user cron vulnerabilities [17-06-2022 22:42:02]32731: WAF :: fetched 25 new logs [17-06-2022 22:43:01]2990: WAF :: fetched 4 new logs [17-06-2022 22:44:02]5773: Checking ditributed CMS bruteforce attacks [17-06-2022 22:45:01]8536: WAF :: fetched 1 new logs [17-06-2022 22:47:02]13904: WAF :: fetched 1 new logs [17-06-2022 22:48:01]16526: WAF :: fetched 1 new logs [17-06-2022 22:49:02]19179: WAF :: fetched 1 new logs [17-06-2022 22:50:02]21910: WAF :: fetched 4 new logs [17-06-2022 22:51:01]24628: WAF :: fetched 54 new logs [17-06-2022 22:52:02]27336: WAF :: fetched 171 new logs [17-06-2022 22:54:02]32659: WAF :: fetched 49 new logs [17-06-2022 22:55:01]3037: WAF :: fetched 108 new logs [17-06-2022 22:56:02]5796: WAF :: fetched 118 new logs [17-06-2022 22:59:02]13704: WAF :: fetched 69 new logs [17-06-2022 23:01:01]19290: WAF :: fetched 1 new logs [17-06-2022 23:02:02]22005: WAF :: fetched 22 new logs [17-06-2022 23:03:01]24605: WAF :: fetched 43 new logs [17-06-2022 23:04:01]27300: WAF :: fetched 24 new logs [17-06-2022 23:06:02]316: WAF :: fetched 21 new logs [17-06-2022 23:07:47]3235: Performed RBL check for 23.111.136.34. [17-06-2022 23:08:01]5789: WAF :: fetched 1 new logs [17-06-2022 23:10:01]11192: WAF :: fetched 141 new logs [17-06-2022 23:11:02]13936: WAF :: fetched 80 new logs [17-06-2022 23:12:02]16537: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655518322 [17-06-2022 23:12:02]16537: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-06-2022 23:12:04]16537: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-06-2022 23:12:04]16537: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220617/20220617-2312/20220617-231202-Yq00cosKNQDOvo0Nslmu8QAAABA [17-06-2022 23:12:04]16537: WAF :: No suitable log file found. Using SQLite.. [17-06-2022 23:12:04]16537: WAF :: fetched 21 new logs [17-06-2022 23:13:01]19204: WAF :: fetched 27 new logs [17-06-2022 23:14:02]21878: WAF :: fetched 75 new logs [17-06-2022 23:17:01]29940: WAF :: fetched 31 new logs [17-06-2022 23:20:01]5631: WAF :: fetched 25 new logs [17-06-2022 23:21:02]8445: WAF :: fetched 1 new logs [17-06-2022 23:22:01]11057: WAF :: fetched 5 new logs [17-06-2022 23:27:01]24479: WAF :: fetched 25 new logs [17-06-2022 23:28:02]27157: WAF :: fetched 1 new logs [17-06-2022 23:29:01]29788: WAF :: fetched 2 new logs [17-06-2022 23:32:02]5641: WAF :: fetched 1 new logs [17-06-2022 23:34:01]10990: WAF :: fetched 4 new logs [17-06-2022 23:35:02]13810: WAF :: fetched 52 new logs [17-06-2022 23:36:02]16517: WAF :: fetched 3 new logs [17-06-2022 23:37:01]19165: WAF :: fetched 5 new logs [17-06-2022 23:38:02]21855: WAF :: fetched 3 new logs [17-06-2022 23:39:01]24507: WAF :: fetched 2 new logs [17-06-2022 23:40:01]27262: WAF :: fetched 1 new logs [17-06-2022 23:41:01]30009: WAF :: fetched 2 new logs [17-06-2022 23:41:01]30009: Checking for user cron vulnerabilities [17-06-2022 23:42:02]32705: WAF :: fetched 6 new logs [17-06-2022 23:43:02]2938: WAF :: fetched 4 new logs [17-06-2022 23:44:01]5697: Checking ditributed CMS bruteforce attacks [17-06-2022 23:44:01]5697: WAF :: fetched 99 new logs [17-06-2022 23:45:02]8493: WAF :: fetched 28 new logs [17-06-2022 23:46:01]11183: WAF :: fetched 7 new logs [17-06-2022 23:47:01]13807: WAF :: fetched 10 new logs [17-06-2022 23:48:02]16454: WAF :: fetched 34 new logs [17-06-2022 23:49:01]19115: WAF :: fetched 6 new logs [17-06-2022 23:50:02]22018: WAF :: fetched 10 new logs [17-06-2022 23:51:02]24682: WAF :: fetched 7 new logs [17-06-2022 23:52:02]27348: WAF :: fetched 7 new logs [17-06-2022 23:53:02]30169: WAF :: fetched 14 new logs [17-06-2022 23:54:01]566: WAF :: fetched 16 new logs [17-06-2022 23:55:02]4846: WAF :: fetched 77 new logs [17-06-2022 23:55:02]4851: httpd.conf changed. Refreshing watchlist. [17-06-2022 23:56:02]8105: WAF :: fetched 50 new logs [17-06-2022 23:57:02]11004: WAF :: fetched 12 new logs [17-06-2022 23:57:02]11013: httpd.conf changed. Refreshing watchlist. [18-06-2022 00:01:01]22159: httpd.conf changed. Refreshing watchlist. [18-06-2022 00:01:04]22186: Sending daily report for June 18, 2022 [18-06-2022 00:02:02]24883: WAF :: fetched 1 new logs [18-06-2022 00:03:01]27576: WAF :: fetched 2 new logs [18-06-2022 00:04:02]30264: WAF :: fetched 44 new logs [18-06-2022 00:05:01]538: WAF :: fetched 18 new logs [18-06-2022 00:05:02]538: Deleted 0 entries older than 6 MONTH from scanner_logs [18-06-2022 00:05:02]538: Deleted 0 files from Quarantine [18-06-2022 00:06:01]3340: WAF :: fetched 14 new logs [18-06-2022 00:07:02]6100: WAF :: fetched 16 new logs [18-06-2022 00:08:01]8761: WAF :: fetched 13 new logs [18-06-2022 00:09:02]11425: WAF :: fetched 11 new logs [18-06-2022 00:10:02]14094: WAF :: fetched 13 new logs [18-06-2022 00:11:01]16853: WAF :: fetched 9 new logs [18-06-2022 00:12:02]19582: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655521922 [18-06-2022 00:12:02]19582: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 00:12:04]19582: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 00:12:04]19582: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-0012/20220618-001202-Yq1CgtTFVFvTthcJq2GjxgAAABc [18-06-2022 00:12:04]19582: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 00:12:04]19582: WAF :: fetched 5 new logs [18-06-2022 00:13:01]22032: WAF :: fetched 13 new logs [18-06-2022 00:14:02]24868: WAF :: fetched 12 new logs [18-06-2022 00:15:01]27529: WAF :: fetched 83 new logs [18-06-2022 00:16:02]30407: WAF :: fetched 3 new logs [18-06-2022 00:17:01]588: WAF :: fetched 29 new logs [18-06-2022 00:19:02]6103: WAF :: fetched 2 new logs [18-06-2022 00:20:01]8778: WAF :: fetched 2 new logs [18-06-2022 00:21:02]11587: WAF :: fetched 7 new logs [18-06-2022 00:22:01]14256: WAF :: fetched 5 new logs [18-06-2022 00:23:01]16904: WAF :: fetched 30 new logs [18-06-2022 00:24:02]19558: WAF :: fetched 11 new logs [18-06-2022 00:25:01]22247: WAF :: fetched 16 new logs [18-06-2022 00:26:01]25002: WAF :: fetched 6 new logs [18-06-2022 00:27:02]27670: WAF :: fetched 17 new logs [18-06-2022 00:28:01]30287: WAF :: fetched 32 new logs [18-06-2022 00:29:02]493: WAF :: fetched 200 new logs [18-06-2022 00:30:02]3249: WAF :: fetched 110 new logs [18-06-2022 00:31:01]6091: WAF :: fetched 139 new logs [18-06-2022 00:32:02]8785: WAF :: fetched 6 new logs [18-06-2022 00:33:01]11431: WAF :: fetched 5 new logs [18-06-2022 00:34:02]14077: WAF :: fetched 6 new logs [18-06-2022 00:35:01]16728: WAF :: fetched 5 new logs [18-06-2022 00:36:02]19535: WAF :: fetched 2 new logs [18-06-2022 00:37:01]22152: WAF :: fetched 1 new logs [18-06-2022 00:38:01]24796: WAF :: fetched 1 new logs [18-06-2022 00:40:01]30089: WAF :: fetched 21 new logs [18-06-2022 00:41:01]380: WAF :: fetched 26 new logs [18-06-2022 00:41:01]380: Checking for user cron vulnerabilities [18-06-2022 00:42:02]3166: WAF :: fetched 1 new logs [18-06-2022 00:43:01]5881: WAF :: fetched 1 new logs [18-06-2022 00:44:01]8606: Checking ditributed CMS bruteforce attacks [18-06-2022 00:45:01]: Checking for software updates [18-06-2022 00:45:02]11321: WAF :: fetched 1 new logs [18-06-2022 00:47:02]16765: WAF :: fetched 3 new logs [18-06-2022 00:50:02]24737: WAF :: fetched 30 new logs [18-06-2022 00:51:01]27507: WAF :: fetched 3 new logs [18-06-2022 00:54:01]3164: WAF :: fetched 21 new logs [18-06-2022 00:55:02]5875: WAF :: fetched 36 new logs [18-06-2022 00:56:01]8682: WAF :: fetched 11 new logs [18-06-2022 00:57:02]11369: WAF :: fetched 2 new logs [18-06-2022 00:58:02]13993: WAF :: fetched 69 new logs [18-06-2022 00:59:01]16650: WAF :: fetched 96 new logs [18-06-2022 01:00:02]19050: WAF :: fetched 110 new logs [18-06-2022 01:01:01]22974: WAF :: fetched 5 new logs [18-06-2022 01:02:02]25915: WAF :: fetched 5 new logs [18-06-2022 01:03:01]28841: WAF :: fetched 9 new logs [18-06-2022 01:04:01]31772: WAF :: fetched 7 new logs [18-06-2022 01:05:01]2437: WAF :: fetched 5 new logs [18-06-2022 01:07:01]8353: WAF :: fetched 6 new logs [18-06-2022 01:08:02]11187: WAF :: fetched 5 new logs [18-06-2022 01:09:02]13808: WAF :: fetched 9 new logs [18-06-2022 01:10:01]16522: WAF :: fetched 3 new logs [18-06-2022 01:11:02]19593: WAF :: fetched 7 new logs [18-06-2022 01:12:02]22306: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655525522 [18-06-2022 01:12:02]22306: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 01:12:04]22306: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 01:12:04]22306: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-0112/20220618-011202-Yq1QkjCVRA7wlbEvDy1SmAAAAB8 [18-06-2022 01:12:04]22306: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 01:12:04]22306: WAF :: fetched 8 new logs [18-06-2022 01:13:01]24973: WAF :: fetched 5 new logs [18-06-2022 01:14:02]27781: WAF :: fetched 14 new logs [18-06-2022 01:15:01]30711: WAF :: fetched 3 new logs [18-06-2022 01:16:01]1126: WAF :: fetched 4 new logs [18-06-2022 01:17:02]3910: WAF :: fetched 18 new logs [18-06-2022 01:18:01]6918: WAF :: fetched 22 new logs [18-06-2022 01:19:02]9907: WAF :: fetched 33 new logs [18-06-2022 01:20:01]12794: WAF :: fetched 4 new logs [18-06-2022 01:21:02]15703: WAF :: fetched 4 new logs [18-06-2022 01:22:02]18322: WAF :: fetched 13 new logs [18-06-2022 01:23:01]20974: WAF :: fetched 19 new logs [18-06-2022 01:25:02]26627: WAF :: fetched 2 new logs [18-06-2022 01:26:01]29596: WAF :: fetched 31 new logs [18-06-2022 01:27:01]32418: WAF :: fetched 2 new logs [18-06-2022 01:29:01]5670: WAF :: fetched 25 new logs [18-06-2022 01:30:02]8752: WAF :: fetched 12 new logs [18-06-2022 01:31:01]11611: WAF :: fetched 1 new logs [18-06-2022 01:32:01]14372: WAF :: fetched 1 new logs [18-06-2022 01:33:01]17405: WAF :: fetched 1 new logs [18-06-2022 01:37:02]28639: WAF :: fetched 4 new logs [18-06-2022 01:38:01]31582: WAF :: fetched 1 new logs [18-06-2022 01:39:01]2100: WAF :: fetched 6 new logs [18-06-2022 01:40:02]5000: WAF :: fetched 7 new logs [18-06-2022 01:41:01]8173: WAF :: fetched 4 new logs [18-06-2022 01:41:01]8173: Checking for user cron vulnerabilities [18-06-2022 01:42:02]11300: WAF :: fetched 51 new logs [18-06-2022 01:43:02]14180: WAF :: fetched 65 new logs [18-06-2022 01:44:01]16784: Checking ditributed CMS bruteforce attacks [18-06-2022 01:44:02]16784: WAF :: fetched 36 new logs [18-06-2022 01:45:01]: Checking for definition updates [18-06-2022 01:45:01]19560: WAF :: fetched 23 new logs [18-06-2022 01:46:01]22740: WAF :: fetched 9 new logs [18-06-2022 01:47:02]25455: WAF :: fetched 7 new logs [18-06-2022 01:48:01]28150: WAF :: fetched 3 new logs [18-06-2022 01:49:02]30819: WAF :: fetched 5 new logs [18-06-2022 01:50:01]1424: WAF :: fetched 3 new logs [18-06-2022 01:51:02]4281: WAF :: fetched 4 new logs [18-06-2022 01:52:01]6944: WAF :: fetched 1 new logs [18-06-2022 01:53:02]9605: WAF :: fetched 3 new logs [18-06-2022 01:54:01]12285: WAF :: fetched 1 new logs [18-06-2022 01:55:01]14933: WAF :: fetched 5 new logs [18-06-2022 01:56:02]17967: WAF :: fetched 6 new logs [18-06-2022 01:58:01]23400: WAF :: fetched 1 new logs [18-06-2022 01:59:01]26052: WAF :: fetched 6 new logs [18-06-2022 02:00:02]28423: WAF :: fetched 65 new logs [18-06-2022 02:01:02]31613: WAF :: fetched 6 new logs [18-06-2022 02:02:01]1879: WAF :: fetched 7 new logs [18-06-2022 02:03:02]4649: WAF :: fetched 5 new logs [18-06-2022 02:04:02]7276: WAF :: fetched 5 new logs [18-06-2022 02:05:01]9907: WAF :: fetched 4 new logs [18-06-2022 02:06:02]12695: WAF :: fetched 6 new logs [18-06-2022 02:07:01]15294: WAF :: fetched 5 new logs [18-06-2022 02:08:02]17952: WAF :: fetched 1 new logs [18-06-2022 02:09:01]20585: WAF :: fetched 4 new logs [18-06-2022 02:10:01]23227: WAF :: fetched 23 new logs [18-06-2022 02:11:02]26035: WAF :: fetched 7 new logs [18-06-2022 02:12:02]28644: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655529122 [18-06-2022 02:12:02]28644: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 02:12:04]28644: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 02:12:04]28644: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-0212/20220618-021202-Yq1eovjHLlp6DCN-Lm_9WAAAABY [18-06-2022 02:12:04]28644: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 02:12:04]28644: WAF :: fetched 2 new logs [18-06-2022 02:13:01]31291: WAF :: fetched 5 new logs [18-06-2022 02:14:01]1483: WAF :: fetched 7 new logs [18-06-2022 02:15:02]4235: WAF :: fetched 5 new logs [18-06-2022 02:16:02]7023: WAF :: fetched 26 new logs [18-06-2022 02:17:01]9654: WAF :: fetched 32 new logs [18-06-2022 02:18:01]12287: WAF :: fetched 8 new logs [18-06-2022 02:19:02]14934: WAF :: fetched 6 new logs [18-06-2022 02:20:01]17576: WAF :: fetched 69 new logs [18-06-2022 02:21:02]20401: WAF :: fetched 7 new logs [18-06-2022 02:22:02]23059: WAF :: fetched 5 new logs [18-06-2022 02:23:01]25702: WAF :: fetched 6 new logs [18-06-2022 02:24:02]28353: WAF :: fetched 13 new logs [18-06-2022 02:25:01]30976: WAF :: fetched 11 new logs [18-06-2022 02:26:01]1340: WAF :: fetched 8 new logs [18-06-2022 02:27:02]4030: WAF :: fetched 33 new logs [18-06-2022 02:28:02]6679: WAF :: fetched 40 new logs [18-06-2022 02:29:01]9317: WAF :: fetched 67 new logs [18-06-2022 02:30:02]12023: WAF :: fetched 102 new logs [18-06-2022 02:31:01]14749: WAF :: fetched 12 new logs [18-06-2022 02:32:02]17391: WAF :: fetched 11 new logs [18-06-2022 02:33:01]20032: WAF :: fetched 92 new logs [18-06-2022 02:34:01]22691: WAF :: fetched 13 new logs [18-06-2022 02:35:02]25351: WAF :: fetched 8 new logs [18-06-2022 02:36:01]28103: WAF :: fetched 11 new logs [18-06-2022 02:37:02]30725: WAF :: fetched 8 new logs [18-06-2022 02:39:01]3590: WAF :: fetched 9 new logs [18-06-2022 02:41:01]9094: WAF :: fetched 3 new logs [18-06-2022 02:41:01]9094: Checking for user cron vulnerabilities [18-06-2022 02:43:02]15264: WAF :: fetched 2 new logs [18-06-2022 02:44:01]18276: Checking ditributed CMS bruteforce attacks [18-06-2022 02:44:01]18276: WAF :: fetched 6 new logs [18-06-2022 02:45:02]21074: WAF :: fetched 3 new logs [18-06-2022 02:46:01]23832: WAF :: fetched 8 new logs [18-06-2022 02:47:01]26479: WAF :: fetched 8 new logs [18-06-2022 02:48:01]29164: WAF :: fetched 10 new logs [18-06-2022 02:49:01]31940: WAF :: fetched 8 new logs [18-06-2022 02:50:01]2264: WAF :: fetched 10 new logs [18-06-2022 02:51:01]5264: WAF :: fetched 11 new logs [18-06-2022 02:52:02]7898: WAF :: fetched 3 new logs [18-06-2022 02:53:01]10704: WAF :: fetched 25 new logs [18-06-2022 02:53:02]10707: Updated license status via CDN [18-06-2022 02:54:02]13431: WAF :: fetched 10 new logs [18-06-2022 02:55:02]16089: WAF :: fetched 14 new logs [18-06-2022 03:00:02]30019: WAF :: fetched 1 new logs [18-06-2022 03:00:02]30019: Found and updated 32 CMS installations [18-06-2022 03:01:37]30019: Wordpress installation #23 blueseasurf.com.br has errors [18-06-2022 03:02:44]30019: Sending CMS version vulnerability report emails to cpanel users [18-06-2022 03:02:47]30019: Checking wordpress installations for suspicious directories [18-06-2022 03:03:01]6902: WAF :: fetched 1 new logs [18-06-2022 03:04:01]9970: WAF :: fetched 3 new logs [18-06-2022 03:04:24]6978: Sending CMS version vulnerability report emails to cpanel users [18-06-2022 03:04:27]6978: Checking wordpress installations for suspicious directories [18-06-2022 03:05:01]13170: WAF :: fetched 1 new logs [18-06-2022 03:06:02]16170: WAF :: fetched 1 new logs [18-06-2022 03:07:01]18787: WAF :: fetched 1 new logs [18-06-2022 03:08:02]20325: WAF :: fetched 5 new logs [18-06-2022 03:09:02]15811: WAF :: fetched 5 new logs [18-06-2022 03:10:01]26224: WAF :: fetched 4 new logs [18-06-2022 03:11:02]31111: WAF :: fetched 9 new logs [18-06-2022 03:12:01]1361: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655532721 [18-06-2022 03:12:01]1361: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 03:12:03]1361: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 03:12:04]1361: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-0312/20220618-031201-Yq1ssQHpMBwvA1JnMismTAAAABE [18-06-2022 03:12:04]1361: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 03:12:04]1361: WAF :: fetched 7 new logs [18-06-2022 03:13:02]4074: WAF :: fetched 7 new logs [18-06-2022 03:14:02]6726: WAF :: fetched 49 new logs [18-06-2022 03:15:01]9393: WAF :: fetched 2 new logs [18-06-2022 03:16:02]12169: WAF :: fetched 1 new logs [18-06-2022 03:17:01]14769: WAF :: fetched 3 new logs [18-06-2022 03:18:02]17434: WAF :: fetched 11 new logs [18-06-2022 03:19:02]20080: WAF :: fetched 34 new logs [18-06-2022 03:21:02]25515: WAF :: fetched 55 new logs [18-06-2022 03:22:02]28150: WAF :: fetched 18 new logs [18-06-2022 03:23:01]30935: WAF :: fetched 1 new logs [18-06-2022 03:24:02]1394: WAF :: fetched 49 new logs [18-06-2022 03:25:01]4245: WAF :: fetched 2 new logs [18-06-2022 03:26:01]7204: WAF :: fetched 3 new logs [18-06-2022 03:27:02]9870: WAF :: fetched 5 new logs [18-06-2022 03:28:01]12548: WAF :: fetched 9 new logs [18-06-2022 03:29:02]15345: WAF :: fetched 28 new logs [18-06-2022 03:30:01]17983: WAF :: fetched 6 new logs [18-06-2022 03:31:02]20945: WAF :: fetched 31 new logs [18-06-2022 03:32:01]23761: WAF :: fetched 57 new logs [18-06-2022 03:33:01]26406: WAF :: fetched 105 new logs [18-06-2022 03:34:02]29389: WAF :: fetched 69 new logs [18-06-2022 03:35:01]32092: WAF :: fetched 11 new logs [18-06-2022 03:36:02]2646: WAF :: fetched 72 new logs [18-06-2022 03:37:01]5405: WAF :: fetched 4 new logs [18-06-2022 03:38:01]8080: WAF :: fetched 6 new logs [18-06-2022 03:39:02]10726: WAF :: fetched 7 new logs [18-06-2022 03:40:01]13361: WAF :: fetched 8 new logs [18-06-2022 03:41:02]16156: WAF :: fetched 4 new logs [18-06-2022 03:41:02]16156: Checking for user cron vulnerabilities [18-06-2022 03:42:01]18594: WAF :: fetched 4 new logs [18-06-2022 03:43:02]21423: WAF :: fetched 5 new logs [18-06-2022 03:44:01]24025: Checking ditributed CMS bruteforce attacks [18-06-2022 03:44:01]24025: WAF :: fetched 6 new logs [18-06-2022 03:45:01]26655: WAF :: fetched 4 new logs [18-06-2022 03:46:02]29415: WAF :: fetched 2 new logs [18-06-2022 03:47:01]32025: WAF :: fetched 3 new logs [18-06-2022 03:48:02]2290: WAF :: fetched 2 new logs [18-06-2022 03:49:02]4958: WAF :: fetched 4 new logs [18-06-2022 03:50:01]7621: WAF :: fetched 26 new logs [18-06-2022 03:51:01]10385: WAF :: fetched 4 new logs [18-06-2022 03:52:02]13020: WAF :: fetched 3 new logs [18-06-2022 03:53:01]15611: WAF :: fetched 1 new logs [18-06-2022 03:57:02]26247: WAF :: fetched 2 new logs [18-06-2022 03:59:02]31491: WAF :: fetched 26 new logs [18-06-2022 04:00:01]1466: WAF :: fetched 22 new logs [18-06-2022 04:02:02]7469: WAF :: fetched 22 new logs [18-06-2022 04:03:01]10097: WAF :: fetched 1 new logs [18-06-2022 04:07:02]20732: WAF :: fetched 1 new logs [18-06-2022 04:08:01]23357: WAF :: fetched 1 new logs [18-06-2022 04:09:02]25976: WAF :: fetched 4 new logs [18-06-2022 04:10:01]28617: WAF :: fetched 3 new logs [18-06-2022 04:11:02]31416: WAF :: fetched 4 new logs [18-06-2022 04:12:02]1635: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655536322 [18-06-2022 04:12:02]1635: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 04:12:04]1635: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 04:12:04]1635: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-0412/20220618-041202-Yq16wuBZ22kAE5KIkz4HcAAAAA8 [18-06-2022 04:12:04]1635: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 04:12:04]1635: WAF :: fetched 5 new logs [18-06-2022 04:13:01]4346: WAF :: fetched 6 new logs [18-06-2022 04:14:02]7005: WAF :: fetched 6 new logs [18-06-2022 04:15:02]9645: WAF :: fetched 6 new logs [18-06-2022 04:16:01]12395: WAF :: fetched 7 new logs [18-06-2022 04:17:02]15025: WAF :: fetched 3 new logs [18-06-2022 04:18:01]17634: WAF :: fetched 1 new logs [18-06-2022 04:19:01]20271: WAF :: fetched 3 new logs [18-06-2022 04:20:02]22949: WAF :: fetched 6 new logs [18-06-2022 04:21:01]25706: WAF :: fetched 30 new logs [18-06-2022 04:22:02]28369: WAF :: fetched 26 new logs [18-06-2022 04:23:01]30985: WAF :: fetched 74 new logs [18-06-2022 04:24:01]1189: WAF :: fetched 10 new logs [18-06-2022 04:25:02]3928: WAF :: fetched 9 new logs [18-06-2022 04:26:01]6703: WAF :: fetched 15 new logs [18-06-2022 04:27:02]9368: WAF :: fetched 12 new logs [18-06-2022 04:28:02]12008: WAF :: fetched 35 new logs [18-06-2022 04:29:01]14649: WAF :: fetched 59 new logs [18-06-2022 04:30:02]17334: WAF :: fetched 22 new logs [18-06-2022 04:31:01]20126: WAF :: fetched 2 new logs [18-06-2022 04:35:02]30789: WAF :: fetched 1 new logs [18-06-2022 04:36:02]1167: WAF :: fetched 5 new logs [18-06-2022 04:37:01]3842: WAF :: fetched 9 new logs [18-06-2022 04:38:02]6559: WAF :: fetched 3 new logs [18-06-2022 04:41:02]14606: Checking for user cron vulnerabilities [18-06-2022 04:42:01]17219: WAF :: fetched 54 new logs [18-06-2022 04:43:02]19880: WAF :: fetched 12 new logs [18-06-2022 04:44:01]22503: Checking ditributed CMS bruteforce attacks [18-06-2022 04:44:01]22503: WAF :: fetched 43 new logs [18-06-2022 04:45:02]25159: WAF :: fetched 14 new logs [18-06-2022 04:46:02]27890: WAF :: fetched 11 new logs [18-06-2022 04:47:01]30500: WAF :: fetched 11 new logs [18-06-2022 04:48:01]730: WAF :: fetched 10 new logs [18-06-2022 04:49:02]3424: WAF :: fetched 9 new logs [18-06-2022 04:50:02]6155: WAF :: fetched 35 new logs [18-06-2022 04:51:01]8885: WAF :: fetched 2 new logs [18-06-2022 04:52:01]11578: WAF :: fetched 1 new logs [18-06-2022 04:53:01]14198: WAF :: fetched 1 new logs [18-06-2022 04:54:02]16852: WAF :: fetched 24 new logs [18-06-2022 04:58:01]27534: WAF :: fetched 3 new logs [18-06-2022 04:59:02]30172: WAF :: fetched 1 new logs [18-06-2022 05:00:01]32561: WAF :: fetched 3 new logs [18-06-2022 05:01:02]3371: WAF :: fetched 7 new logs [18-06-2022 05:01:42]3369: Starting daily scan on files updated in last 24 hrs [18-06-2022 05:02:01]6127: WAF :: fetched 24 new logs [18-06-2022 05:04:02]11433: WAF :: fetched 3 new logs [18-06-2022 05:05:01]14041: WAF :: fetched 1 new logs [18-06-2022 05:06:02]16759: WAF :: fetched 2 new logs [18-06-2022 05:07:01]19336: WAF :: fetched 3 new logs [18-06-2022 05:08:01]22066: WAF :: fetched 34 new logs [18-06-2022 05:10:02]27411: WAF :: fetched 1 new logs [18-06-2022 05:11:01]30090: WAF :: fetched 67 new logs [18-06-2022 05:12:02]364: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655539922 [18-06-2022 05:12:02]364: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 05:12:04]364: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 05:12:04]364: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-0512/20220618-051202-Yq2I0nytBw0K1OQBVGnTOQAAAAo [18-06-2022 05:12:04]364: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 05:12:05]364: WAF :: fetched 52 new logs [18-06-2022 05:13:02]3088: WAF :: fetched 9 new logs [18-06-2022 05:14:01]5770: WAF :: fetched 4 new logs [18-06-2022 05:15:02]8464: WAF :: fetched 4 new logs [18-06-2022 05:16:01]11142: WAF :: fetched 5 new logs [18-06-2022 05:17:02]13880: WAF :: fetched 5 new logs [18-06-2022 05:18:01]16512: WAF :: fetched 3 new logs [18-06-2022 05:19:01]19137: WAF :: fetched 80 new logs [18-06-2022 05:20:02]21813: WAF :: fetched 38 new logs [18-06-2022 05:21:01]24471: WAF :: fetched 32 new logs [18-06-2022 05:22:02]27232: WAF :: fetched 9 new logs [18-06-2022 05:23:02]29829: WAF :: fetched 6 new logs [18-06-2022 05:24:01]32477: WAF :: fetched 4 new logs [18-06-2022 05:25:01]2768: WAF :: fetched 6 new logs [18-06-2022 05:26:02]5536: WAF :: fetched 6 new logs [18-06-2022 05:27:01]8238: WAF :: fetched 3 new logs [18-06-2022 05:28:02]10891: WAF :: fetched 70 new logs [18-06-2022 05:29:01]13521: WAF :: fetched 56 new logs [18-06-2022 05:30:01]16176: WAF :: fetched 87 new logs [18-06-2022 05:31:02]18868: WAF :: fetched 31 new logs [18-06-2022 05:32:01]21595: WAF :: fetched 43 new logs [18-06-2022 05:33:02]24249: WAF :: fetched 125 new logs [18-06-2022 05:34:01]26877: WAF :: fetched 26 new logs [18-06-2022 05:35:01]29506: WAF :: fetched 21 new logs [18-06-2022 05:36:02]32219: WAF :: fetched 56 new logs [18-06-2022 05:37:02]2564: WAF :: fetched 30 new logs [18-06-2022 05:39:02]7973: WAF :: fetched 29 new logs [18-06-2022 05:40:01]10620: WAF :: fetched 26 new logs [18-06-2022 05:41:02]13315: Checking for user cron vulnerabilities [18-06-2022 05:42:01]15977: WAF :: fetched 27 new logs [18-06-2022 05:43:02]18693: WAF :: fetched 7 new logs [18-06-2022 05:44:01]21327: Checking ditributed CMS bruteforce attacks [18-06-2022 05:44:01]21327: WAF :: fetched 48 new logs [18-06-2022 05:45:01]24011: WAF :: fetched 16 new logs [18-06-2022 05:46:02]26696: WAF :: fetched 137 new logs [18-06-2022 05:47:01]29386: WAF :: fetched 26 new logs [18-06-2022 05:48:02]32057: WAF :: fetched 44 new logs [18-06-2022 05:49:01]2302: WAF :: fetched 6 new logs [18-06-2022 05:50:02]5055: WAF :: fetched 45 new logs [18-06-2022 05:51:02]7761: WAF :: fetched 30 new logs [18-06-2022 05:52:02]10489: WAF :: fetched 6 new logs [18-06-2022 05:53:01]13140: WAF :: fetched 7 new logs [18-06-2022 05:54:01]15765: WAF :: fetched 3 new logs [18-06-2022 05:55:02]18426: WAF :: fetched 6 new logs [18-06-2022 05:56:01]21067: WAF :: fetched 136 new logs [18-06-2022 05:57:02]23803: WAF :: fetched 100 new logs [18-06-2022 05:58:01]26452: WAF :: fetched 167 new logs [18-06-2022 05:59:01]29075: WAF :: fetched 10 new logs [18-06-2022 06:00:02]31450: WAF :: fetched 13 new logs [18-06-2022 06:01:01]2229: WAF :: fetched 90 new logs [18-06-2022 06:02:02]5060: WAF :: fetched 93 new logs [18-06-2022 06:03:02]7695: WAF :: fetched 11 new logs [18-06-2022 06:04:01]10323: WAF :: fetched 6 new logs [18-06-2022 06:05:02]13012: WAF :: fetched 5 new logs [18-06-2022 06:06:02]15665: WAF :: fetched 525 new logs [18-06-2022 06:07:01]18364: WAF :: fetched 67 new logs [18-06-2022 06:08:02]21028: WAF :: fetched 33 new logs [18-06-2022 06:09:01]23645: WAF :: fetched 13 new logs [18-06-2022 06:10:02]26307: WAF :: fetched 7 new logs [18-06-2022 06:11:01]28970: WAF :: fetched 3 new logs [18-06-2022 06:12:01]31712: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655543521 [18-06-2022 06:12:01]31712: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 06:12:03]31712: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 06:12:03]31712: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-0612/20220618-061201-Yq2W4UqlUizWtiCZ0qCU0QAAABE [18-06-2022 06:12:03]31712: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 06:12:04]31712: WAF :: fetched 25 new logs [18-06-2022 06:13:01]1979: WAF :: fetched 5 new logs [18-06-2022 06:14:02]4724: WAF :: fetched 1 new logs [18-06-2022 06:15:02]7375: WAF :: fetched 48 new logs [18-06-2022 06:16:01]10111: WAF :: fetched 16 new logs [18-06-2022 06:17:02]12873: WAF :: fetched 112 new logs [18-06-2022 06:18:01]15481: WAF :: fetched 39 new logs [18-06-2022 06:19:01]18157: WAF :: fetched 60 new logs [18-06-2022 06:20:02]20850: WAF :: fetched 36 new logs [18-06-2022 06:21:02]23533: WAF :: fetched 12 new logs [18-06-2022 06:22:01]26257: WAF :: fetched 8 new logs [18-06-2022 06:23:01]28886: WAF :: fetched 4 new logs [18-06-2022 06:24:02]31613: WAF :: fetched 4 new logs [18-06-2022 06:25:01]1832: WAF :: fetched 22 new logs [18-06-2022 06:26:02]4608: WAF :: fetched 5 new logs [18-06-2022 06:27:02]7463: WAF :: fetched 3 new logs [18-06-2022 06:28:01]10112: WAF :: fetched 27 new logs [18-06-2022 06:29:02]12717: WAF :: fetched 5 new logs [18-06-2022 06:30:01]15358: WAF :: fetched 75 new logs [18-06-2022 06:31:02]18056: WAF :: fetched 9 new logs [18-06-2022 06:32:02]20770: WAF :: fetched 14 new logs [18-06-2022 06:33:02]23422: WAF :: fetched 7 new logs [18-06-2022 06:34:01]26115: WAF :: fetched 5 new logs [18-06-2022 06:35:01]28734: WAF :: fetched 32 new logs [18-06-2022 06:36:02]31433: WAF :: fetched 6 new logs [18-06-2022 06:37:01]1731: WAF :: fetched 6 new logs [18-06-2022 06:38:02]4501: WAF :: fetched 8 new logs [18-06-2022 06:39:01]7138: WAF :: fetched 9 new logs [18-06-2022 06:40:01]9827: WAF :: fetched 27 new logs [18-06-2022 06:41:02]12530: WAF :: fetched 2 new logs [18-06-2022 06:41:02]12530: Checking for user cron vulnerabilities [18-06-2022 06:42:01]15242: WAF :: fetched 1 new logs [18-06-2022 06:43:02]17823: WAF :: fetched 2 new logs [18-06-2022 06:44:01]20434: Checking ditributed CMS bruteforce attacks [18-06-2022 06:44:02]20434: WAF :: fetched 4 new logs [18-06-2022 06:46:01]25750: WAF :: fetched 3 new logs [18-06-2022 06:48:02]31103: WAF :: fetched 6 new logs [18-06-2022 06:49:01]1358: WAF :: fetched 11 new logs [18-06-2022 06:51:02]6802: WAF :: fetched 19 new logs [18-06-2022 06:52:01]9520: WAF :: fetched 4 new logs [18-06-2022 06:53:02]12187: WAF :: fetched 2 new logs [18-06-2022 06:54:01]14818: WAF :: fetched 3 new logs [18-06-2022 06:55:01]17455: WAF :: fetched 4 new logs [18-06-2022 06:56:01]20161: WAF :: fetched 3 new logs [18-06-2022 06:57:02]22864: WAF :: fetched 5 new logs [18-06-2022 06:58:01]25472: WAF :: fetched 4 new logs [18-06-2022 06:59:01]28114: WAF :: fetched 26 new logs [18-06-2022 07:00:02]30462: WAF :: fetched 30 new logs [18-06-2022 07:01:01]1178: WAF :: fetched 34 new logs [18-06-2022 07:02:02]4010: WAF :: fetched 1 new logs [18-06-2022 07:03:01]6673: WAF :: fetched 3 new logs [18-06-2022 07:04:01]9299: WAF :: fetched 1 new logs [18-06-2022 07:05:02]11976: WAF :: fetched 10 new logs [18-06-2022 07:06:01]14612: WAF :: fetched 21 new logs [18-06-2022 07:07:02]17368: WAF :: fetched 5 new logs [18-06-2022 07:08:02]20023: WAF :: fetched 35 new logs [18-06-2022 07:09:01]22656: WAF :: fetched 2 new logs [18-06-2022 07:10:02]25329: WAF :: fetched 5 new logs [18-06-2022 07:11:01]27974: WAF :: fetched 4 new logs [18-06-2022 07:12:01]30713: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655547121 [18-06-2022 07:12:01]30713: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 07:12:03]30713: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 07:12:03]30713: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-0712/20220618-071201-Yq2k8TWydJ2QFXiMUjuu8AAAAAo [18-06-2022 07:12:03]30713: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 07:12:04]30713: WAF :: fetched 56 new logs [18-06-2022 07:13:02]975: WAF :: fetched 7 new logs [18-06-2022 07:14:01]3630: WAF :: fetched 8 new logs [18-06-2022 07:15:02]6364: WAF :: fetched 4 new logs [18-06-2022 07:16:01]9012: WAF :: fetched 8 new logs [18-06-2022 07:17:01]11803: WAF :: fetched 42 new logs [18-06-2022 07:18:02]14450: WAF :: fetched 37 new logs [18-06-2022 07:19:01]17059: WAF :: fetched 67 new logs [18-06-2022 07:20:02]19755: WAF :: fetched 91 new logs [18-06-2022 07:21:02]22418: WAF :: fetched 8 new logs [18-06-2022 07:22:02]25128: WAF :: fetched 11 new logs [18-06-2022 07:23:01]27626: WAF :: fetched 6 new logs [18-06-2022 07:24:02]30442: WAF :: fetched 6 new logs [18-06-2022 07:25:01]637: WAF :: fetched 8 new logs [18-06-2022 07:26:02]3417: WAF :: fetched 11 new logs [18-06-2022 07:27:01]6198: WAF :: fetched 17 new logs [18-06-2022 07:28:01]8828: WAF :: fetched 109 new logs [18-06-2022 07:29:02]11530: WAF :: fetched 34 new logs [18-06-2022 07:30:01]14213: WAF :: fetched 3 new logs [18-06-2022 07:31:02]16953: WAF :: fetched 31 new logs [18-06-2022 07:32:01]19687: WAF :: fetched 2 new logs [18-06-2022 07:33:01]22342: WAF :: fetched 4 new logs [18-06-2022 07:34:01]25003: WAF :: fetched 8 new logs [18-06-2022 07:35:02]27715: WAF :: fetched 65 new logs [18-06-2022 07:36:02]30418: WAF :: fetched 37 new logs [18-06-2022 07:37:01]744: WAF :: fetched 7 new logs [18-06-2022 07:38:02]3503: WAF :: fetched 6 new logs [18-06-2022 07:39:01]6226: WAF :: fetched 3 new logs [18-06-2022 07:40:02]9002: WAF :: fetched 2 new logs [18-06-2022 07:41:02]11689: Checking for user cron vulnerabilities [18-06-2022 07:44:01]19796: Checking ditributed CMS bruteforce attacks [18-06-2022 07:44:02]19796: WAF :: fetched 17 new logs [18-06-2022 07:45:01]: Checking for definition updates [18-06-2022 07:46:02]25202: WAF :: fetched 4 new logs [18-06-2022 07:47:01]27588: WAF :: fetched 8 new logs [18-06-2022 07:48:02]30641: WAF :: fetched 34 new logs [18-06-2022 07:49:01]888: WAF :: fetched 15 new logs [18-06-2022 07:50:02]3666: WAF :: fetched 21 new logs [18-06-2022 07:51:02]6455: WAF :: fetched 4 new logs [18-06-2022 07:52:01]9226: WAF :: fetched 6 new logs [18-06-2022 07:53:02]11900: WAF :: fetched 3 new logs [18-06-2022 07:54:01]14556: WAF :: fetched 7 new logs [18-06-2022 07:57:01]22635: WAF :: fetched 1 new logs [18-06-2022 07:58:02]25274: WAF :: fetched 17 new logs [18-06-2022 07:59:01]27913: WAF :: fetched 41 new logs [18-06-2022 08:00:02]30307: WAF :: fetched 25 new logs [18-06-2022 08:01:02]1036: WAF :: fetched 16 new logs [18-06-2022 08:02:01]3907: WAF :: fetched 13 new logs [18-06-2022 08:03:02]6640: WAF :: fetched 16 new logs [18-06-2022 08:04:01]9294: WAF :: fetched 44 new logs [18-06-2022 08:05:01]11956: WAF :: fetched 6 new logs [18-06-2022 08:06:01]14649: WAF :: fetched 2 new logs [18-06-2022 08:08:01]20082: WAF :: fetched 5 new logs [18-06-2022 08:09:01]22725: WAF :: fetched 1 new logs [18-06-2022 08:10:02]25421: WAF :: fetched 6 new logs [18-06-2022 08:11:01]28107: WAF :: fetched 2 new logs [18-06-2022 08:12:02]30875: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655550722 [18-06-2022 08:12:02]30875: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 08:12:04]30875: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 08:12:04]30875: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-0812/20220618-081202-Yq2zAs3hRSDFFBMv0ttZWwAAAAk [18-06-2022 08:12:04]30875: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 08:12:05]30875: WAF :: fetched 1 new logs [18-06-2022 08:13:02]1104: WAF :: fetched 2 new logs [18-06-2022 08:15:01]6532: WAF :: fetched 4 new logs [18-06-2022 08:16:02]9301: WAF :: fetched 2 new logs [18-06-2022 08:17:01]11848: WAF :: fetched 6 new logs [18-06-2022 08:18:02]14701: WAF :: fetched 5 new logs [18-06-2022 08:19:01]17323: WAF :: fetched 6 new logs [18-06-2022 08:20:01]20022: WAF :: fetched 2 new logs [18-06-2022 08:21:01]22734: WAF :: fetched 3 new logs [18-06-2022 08:22:02]25480: WAF :: fetched 9 new logs [18-06-2022 08:23:02]28132: WAF :: fetched 9 new logs [18-06-2022 08:24:01]30766: WAF :: fetched 3 new logs [18-06-2022 08:25:02]1090: WAF :: fetched 1 new logs [18-06-2022 08:26:01]3655: WAF :: fetched 4 new logs [18-06-2022 08:27:02]6663: WAF :: fetched 9 new logs [18-06-2022 08:28:01]9330: WAF :: fetched 5 new logs [18-06-2022 08:29:02]12033: WAF :: fetched 62 new logs [18-06-2022 08:30:02]14704: WAF :: fetched 40 new logs [18-06-2022 08:31:01]17444: WAF :: fetched 8 new logs [18-06-2022 08:32:02]20259: WAF :: fetched 21 new logs [18-06-2022 08:33:01]22924: WAF :: fetched 10 new logs [18-06-2022 08:34:01]25551: WAF :: fetched 12 new logs [18-06-2022 08:35:02]28288: WAF :: fetched 5 new logs [18-06-2022 08:36:01]30971: WAF :: fetched 9 new logs [18-06-2022 08:37:02]1333: WAF :: fetched 81 new logs [18-06-2022 08:38:02]4042: WAF :: fetched 9 new logs [18-06-2022 08:39:01]6741: WAF :: fetched 3 new logs [18-06-2022 08:40:02]9422: WAF :: fetched 14 new logs [18-06-2022 08:41:01]12125: WAF :: fetched 12 new logs [18-06-2022 08:41:01]12125: Checking for user cron vulnerabilities [18-06-2022 08:42:02]14901: WAF :: fetched 10 new logs [18-06-2022 08:43:02]17551: WAF :: fetched 12 new logs [18-06-2022 08:44:02]20194: Checking ditributed CMS bruteforce attacks [18-06-2022 08:44:02]20194: WAF :: fetched 8 new logs [18-06-2022 08:45:02]22893: WAF :: fetched 24 new logs [18-06-2022 08:46:01]25596: WAF :: fetched 29 new logs [18-06-2022 08:48:01]31012: WAF :: fetched 100 new logs [18-06-2022 08:49:02]1274: WAF :: fetched 96 new logs [18-06-2022 08:50:02]4017: WAF :: fetched 75 new logs [18-06-2022 08:51:01]6763: WAF :: fetched 31 new logs [18-06-2022 08:52:02]9515: WAF :: fetched 1 new logs [18-06-2022 08:53:01]12145: WAF :: fetched 51 new logs [18-06-2022 08:54:02]14862: WAF :: fetched 141 new logs [18-06-2022 08:55:02]17493: WAF :: fetched 99 new logs [18-06-2022 08:56:01]20188: WAF :: fetched 31 new logs [18-06-2022 08:57:02]22932: WAF :: fetched 31 new logs [18-06-2022 08:58:01]25589: WAF :: fetched 4 new logs [18-06-2022 08:59:02]28342: WAF :: fetched 1 new logs [18-06-2022 09:02:01]4463: WAF :: fetched 2 new logs [18-06-2022 09:09:01]23307: WAF :: fetched 2 new logs [18-06-2022 09:10:01]25968: WAF :: fetched 1 new logs [18-06-2022 09:11:01]28659: WAF :: fetched 3 new logs [18-06-2022 09:12:01]31414: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655554321 [18-06-2022 09:12:01]31414: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 09:12:03]31414: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 09:12:03]31414: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-0912/20220618-091201-Yq3BEZjKK8S1e06JbsvXnAAAAAk [18-06-2022 09:12:03]31414: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 09:12:04]31414: WAF :: fetched 6 new logs [18-06-2022 09:13:02]1670: WAF :: fetched 6 new logs [18-06-2022 09:14:01]4385: WAF :: fetched 5 new logs [18-06-2022 09:15:02]7107: WAF :: fetched 30 new logs [18-06-2022 09:16:01]9797: WAF :: fetched 5 new logs [18-06-2022 09:17:01]12550: WAF :: fetched 55 new logs [18-06-2022 09:18:02]15220: WAF :: fetched 29 new logs [18-06-2022 09:19:01]17865: WAF :: fetched 6 new logs [18-06-2022 09:20:02]20583: WAF :: fetched 7 new logs [18-06-2022 09:21:01]23269: WAF :: fetched 5 new logs [18-06-2022 09:22:01]26011: WAF :: fetched 18 new logs [18-06-2022 09:23:02]28675: WAF :: fetched 23 new logs [18-06-2022 09:24:02]31295: WAF :: fetched 9 new logs [18-06-2022 09:25:01]1589: WAF :: fetched 33 new logs [18-06-2022 09:26:01]4346: WAF :: fetched 14 new logs [18-06-2022 09:27:01]7143: WAF :: fetched 7 new logs [18-06-2022 09:28:01]9781: WAF :: fetched 6 new logs [18-06-2022 09:29:02]12469: WAF :: fetched 8 new logs [18-06-2022 09:30:01]15120: WAF :: fetched 5 new logs [18-06-2022 09:31:02]17854: WAF :: fetched 5 new logs [18-06-2022 09:33:01]23322: WAF :: fetched 56 new logs [18-06-2022 09:34:02]26031: WAF :: fetched 7 new logs [18-06-2022 09:35:01]28659: WAF :: fetched 9 new logs [18-06-2022 09:36:01]31415: WAF :: fetched 7 new logs [18-06-2022 09:37:02]1807: WAF :: fetched 9 new logs [18-06-2022 09:38:01]4533: WAF :: fetched 12 new logs [18-06-2022 09:39:02]7226: WAF :: fetched 8 new logs [18-06-2022 09:40:01]9934: WAF :: fetched 13 new logs [18-06-2022 09:41:01]12669: WAF :: fetched 138 new logs [18-06-2022 09:41:01]12669: Checking for user cron vulnerabilities [18-06-2022 09:42:02]15488: WAF :: fetched 201 new logs [18-06-2022 09:43:01]18121: WAF :: fetched 82 new logs [18-06-2022 09:44:02]20803: Checking ditributed CMS bruteforce attacks [18-06-2022 09:44:02]20803: WAF :: fetched 143 new logs [18-06-2022 09:45:02]23474: WAF :: fetched 107 new logs [18-06-2022 09:46:01]26174: WAF :: fetched 168 new logs [18-06-2022 09:47:02]28929: WAF :: fetched 201 new logs [18-06-2022 09:48:01]31582: WAF :: fetched 50 new logs [18-06-2022 09:49:02]1888: WAF :: fetched 71 new logs [18-06-2022 09:50:02]4626: WAF :: fetched 5 new logs [18-06-2022 09:51:01]7400: WAF :: fetched 140 new logs [18-06-2022 09:52:02]10173: WAF :: fetched 30 new logs [18-06-2022 09:53:01]12847: WAF :: fetched 86 new logs [18-06-2022 09:54:02]15560: WAF :: fetched 35 new logs [18-06-2022 09:55:01]18266: WAF :: fetched 2 new logs [18-06-2022 09:56:02]20996: WAF :: fetched 120 new logs [18-06-2022 09:57:01]23683: WAF :: fetched 72 new logs [18-06-2022 09:58:02]26478: WAF :: fetched 3 new logs [18-06-2022 09:59:01]28967: WAF :: fetched 3 new logs [18-06-2022 10:00:02]31574: WAF :: fetched 13 new logs [18-06-2022 10:01:02]2332: WAF :: fetched 122 new logs [18-06-2022 10:02:01]5153: WAF :: fetched 2 new logs [18-06-2022 10:03:02]7907: WAF :: fetched 3 new logs [18-06-2022 10:04:01]10434: WAF :: fetched 52 new logs [18-06-2022 10:05:02]13252: WAF :: fetched 31 new logs [18-06-2022 10:07:01]18603: WAF :: fetched 6 new logs [18-06-2022 10:08:02]21398: WAF :: fetched 17 new logs [18-06-2022 10:11:01]29490: WAF :: fetched 4 new logs [18-06-2022 10:12:01]32180: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655557921 [18-06-2022 10:12:01]32180: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 10:12:03]32180: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 10:12:04]32180: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-1012/20220618-101201-Yq3PIVq1IHR8hU4lTrHPLAAAAA0 [18-06-2022 10:12:04]32180: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 10:12:04]32180: WAF :: fetched 5 new logs [18-06-2022 10:13:02]2552: WAF :: fetched 69 new logs [18-06-2022 10:14:02]5284: WAF :: fetched 27 new logs [18-06-2022 10:15:01]7937: WAF :: fetched 3 new logs [18-06-2022 10:16:01]10662: WAF :: fetched 73 new logs [18-06-2022 10:17:02]13317: WAF :: fetched 20 new logs [18-06-2022 10:18:01]16038: WAF :: fetched 3 new logs [18-06-2022 10:19:02]18731: WAF :: fetched 6 new logs [18-06-2022 10:20:02]21399: WAF :: fetched 22 new logs [18-06-2022 10:22:01]26769: WAF :: fetched 2 new logs [18-06-2022 10:23:02]29506: WAF :: fetched 1 new logs [18-06-2022 10:24:01]32196: WAF :: fetched 2 new logs [18-06-2022 10:25:01]2476: WAF :: fetched 2 new logs [18-06-2022 10:26:02]5327: WAF :: fetched 6 new logs [18-06-2022 10:27:01]8092: WAF :: fetched 44 new logs [18-06-2022 10:28:02]10953: httpd.conf changed. Refreshing watchlist. [18-06-2022 10:33:01]24517: WAF :: fetched 14 new logs [18-06-2022 10:34:02]27251: WAF :: fetched 11 new logs [18-06-2022 10:34:02]27250: httpd.conf changed. Refreshing watchlist. [18-06-2022 10:35:02]29891: WAF :: fetched 7 new logs [18-06-2022 10:37:02]2869: WAF :: fetched 6 new logs [18-06-2022 10:38:02]5686: WAF :: fetched 9 new logs [18-06-2022 10:39:01]8376: WAF :: fetched 6 new logs [18-06-2022 10:40:02]11120: WAF :: fetched 1 new logs [18-06-2022 10:41:01]13827: WAF :: fetched 8 new logs [18-06-2022 10:41:01]13827: Checking for user cron vulnerabilities [18-06-2022 10:42:02]16557: WAF :: fetched 9 new logs [18-06-2022 10:43:01]19255: WAF :: fetched 37 new logs [18-06-2022 10:44:01]21942: Checking ditributed CMS bruteforce attacks [18-06-2022 10:44:01]21942: WAF :: fetched 6 new logs [18-06-2022 10:45:02]24697: WAF :: fetched 6 new logs [18-06-2022 10:46:01]27398: WAF :: fetched 7 new logs [18-06-2022 10:47:02]30136: WAF :: fetched 8 new logs [18-06-2022 10:51:02]8731: WAF :: fetched 5 new logs [18-06-2022 10:52:01]11392: WAF :: fetched 8 new logs [18-06-2022 10:53:01]14137: WAF :: fetched 3 new logs [18-06-2022 10:54:02]16785: WAF :: fetched 7 new logs [18-06-2022 10:55:02]19426: WAF :: fetched 4 new logs [18-06-2022 10:56:01]22107: WAF :: fetched 1 new logs [18-06-2022 10:57:02]24742: WAF :: fetched 6 new logs [18-06-2022 10:58:01]27500: WAF :: fetched 5 new logs [18-06-2022 10:59:01]30154: WAF :: fetched 5 new logs [18-06-2022 11:00:02]32539: WAF :: fetched 6 new logs [18-06-2022 11:01:01]3323: WAF :: fetched 13 new logs [18-06-2022 11:02:02]6156: WAF :: fetched 28 new logs [18-06-2022 11:03:02]8890: WAF :: fetched 42 new logs [18-06-2022 11:04:01]11562: WAF :: fetched 29 new logs [18-06-2022 11:05:02]14245: WAF :: fetched 27 new logs [18-06-2022 11:06:01]16936: WAF :: fetched 38 new logs [18-06-2022 11:07:01]19562: WAF :: fetched 16 new logs [18-06-2022 11:07:55]19734: Performed RBL check for 23.111.136.34. [18-06-2022 11:08:02]22356: WAF :: fetched 12 new logs [18-06-2022 11:09:01]24982: WAF :: fetched 8 new logs [18-06-2022 11:10:02]27669: WAF :: fetched 3 new logs [18-06-2022 11:11:01]30359: WAF :: fetched 161 new logs [18-06-2022 11:12:02]593: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655561522 [18-06-2022 11:12:02]593: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 11:12:04]593: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 11:12:04]593: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-1112/20220618-111202-Yq3dMkAZzG4SobMTc5o35gAAAAg [18-06-2022 11:12:04]593: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 11:12:05]593: WAF :: fetched 11 new logs [18-06-2022 11:13:02]3377: WAF :: fetched 8 new logs [18-06-2022 11:14:02]6130: WAF :: fetched 3 new logs [18-06-2022 11:15:01]8814: WAF :: fetched 5 new logs [18-06-2022 11:16:02]11539: WAF :: fetched 2 new logs [18-06-2022 11:17:02]14204: WAF :: fetched 33 new logs [18-06-2022 11:19:02]19675: WAF :: fetched 2 new logs [18-06-2022 11:20:01]22313: WAF :: fetched 3 new logs [18-06-2022 11:21:01]25106: WAF :: fetched 1 new logs [18-06-2022 11:22:02]27802: WAF :: fetched 26 new logs [18-06-2022 11:23:01]30520: WAF :: fetched 5 new logs [18-06-2022 11:24:02]714: WAF :: fetched 6 new logs [18-06-2022 11:25:01]3436: WAF :: fetched 7 new logs [18-06-2022 11:26:01]6214: WAF :: fetched 10 new logs [18-06-2022 11:27:02]8914: WAF :: fetched 35 new logs [18-06-2022 11:28:01]11685: WAF :: fetched 17 new logs [18-06-2022 11:29:02]14428: WAF :: fetched 22 new logs [18-06-2022 11:30:02]17096: WAF :: fetched 12 new logs [18-06-2022 11:31:01]19841: WAF :: fetched 10 new logs [18-06-2022 11:32:02]22578: WAF :: fetched 15 new logs [18-06-2022 11:33:01]25366: WAF :: fetched 17 new logs [18-06-2022 11:34:02]28030: WAF :: fetched 8 new logs [18-06-2022 11:35:02]30691: WAF :: fetched 2 new logs [18-06-2022 11:36:01]1006: WAF :: fetched 5 new logs [18-06-2022 11:37:02]3741: WAF :: fetched 7 new logs [18-06-2022 11:38:01]6528: WAF :: fetched 8 new logs [18-06-2022 11:39:01]9219: WAF :: fetched 5 new logs [18-06-2022 11:40:01]11920: WAF :: fetched 5 new logs [18-06-2022 11:41:02]14655: WAF :: fetched 5 new logs [18-06-2022 11:41:02]14655: Checking for user cron vulnerabilities [18-06-2022 11:42:01]17321: WAF :: fetched 5 new logs [18-06-2022 11:43:02]20075: WAF :: fetched 52 new logs [18-06-2022 11:44:01]22726: Checking ditributed CMS bruteforce attacks [18-06-2022 11:44:02]22726: WAF :: fetched 2 new logs [18-06-2022 11:46:02]28158: WAF :: fetched 3 new logs [18-06-2022 11:47:01]30843: WAF :: fetched 2 new logs [18-06-2022 11:48:01]1222: WAF :: fetched 3 new logs [18-06-2022 11:49:01]3991: WAF :: fetched 27 new logs [18-06-2022 11:51:02]9493: WAF :: fetched 3 new logs [18-06-2022 11:52:01]12178: WAF :: fetched 1 new logs [18-06-2022 11:54:01]17602: WAF :: fetched 4 new logs [18-06-2022 11:55:02]20268: WAF :: fetched 34 new logs [18-06-2022 11:56:01]22972: WAF :: fetched 3 new logs [18-06-2022 11:57:02]25668: WAF :: fetched 1 new logs [18-06-2022 11:58:01]28410: WAF :: fetched 7 new logs [18-06-2022 11:59:02]31066: WAF :: fetched 10 new logs [18-06-2022 12:00:01]996: WAF :: fetched 12 new logs [18-06-2022 12:01:01]4305: WAF :: fetched 21 new logs [18-06-2022 12:02:02]7129: WAF :: fetched 24 new logs [18-06-2022 12:03:01]9946: WAF :: fetched 21 new logs [18-06-2022 12:04:01]12644: WAF :: fetched 22 new logs [18-06-2022 12:05:02]15355: WAF :: fetched 20 new logs [18-06-2022 12:06:01]18109: WAF :: fetched 20 new logs [18-06-2022 12:07:01]20821: WAF :: fetched 15 new logs [18-06-2022 12:08:02]23700: WAF :: fetched 8 new logs [18-06-2022 12:09:01]26386: WAF :: fetched 9 new logs [18-06-2022 12:10:02]29108: WAF :: fetched 1 new logs [18-06-2022 12:11:01]31796: WAF :: fetched 3 new logs [18-06-2022 12:12:01]2109: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655565121 [18-06-2022 12:12:01]2109: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 12:12:03]2109: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 12:12:03]2109: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-1212/20220618-121201-Yq3rQbgC8RRoZSc2R6E4hgAAABg [18-06-2022 12:12:03]2109: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 12:12:04]2109: WAF :: fetched 7 new logs [18-06-2022 12:13:02]4944: WAF :: fetched 9 new logs [18-06-2022 12:14:01]7600: WAF :: fetched 8 new logs [18-06-2022 12:15:02]10302: WAF :: fetched 6 new logs [18-06-2022 12:16:02]13442: WAF :: fetched 7 new logs [18-06-2022 12:17:01]16542: WAF :: fetched 13 new logs [18-06-2022 12:18:02]19341: WAF :: fetched 6 new logs [18-06-2022 12:19:02]21995: WAF :: fetched 8 new logs [18-06-2022 12:20:01]24679: WAF :: fetched 5 new logs [18-06-2022 12:21:01]27403: WAF :: fetched 3 new logs [18-06-2022 12:22:02]30096: WAF :: fetched 142 new logs [18-06-2022 12:24:01]3076: WAF :: fetched 3 new logs [18-06-2022 12:25:02]5917: WAF :: fetched 10 new logs [18-06-2022 12:27:02]11296: WAF :: fetched 1 new logs [18-06-2022 12:28:02]14044: WAF :: fetched 3 new logs [18-06-2022 12:29:01]16741: WAF :: fetched 2 new logs [18-06-2022 12:30:02]19421: WAF :: fetched 13 new logs [18-06-2022 12:31:01]22187: WAF :: fetched 9 new logs [18-06-2022 12:32:02]24920: WAF :: fetched 4 new logs [18-06-2022 12:33:02]27676: WAF :: fetched 5 new logs [18-06-2022 12:34:01]30350: WAF :: fetched 5 new logs [18-06-2022 12:35:02]632: WAF :: fetched 7 new logs [18-06-2022 12:36:01]3410: WAF :: fetched 9 new logs [18-06-2022 12:37:01]6122: WAF :: fetched 4 new logs [18-06-2022 12:38:02]8889: WAF :: fetched 29 new logs [18-06-2022 12:39:01]11573: WAF :: fetched 27 new logs [18-06-2022 12:40:02]14279: WAF :: fetched 40 new logs [18-06-2022 12:41:02]16952: WAF :: fetched 10 new logs [18-06-2022 12:41:02]16952: Checking for user cron vulnerabilities [18-06-2022 12:42:01]19607: WAF :: fetched 12 new logs [18-06-2022 12:43:01]22366: WAF :: fetched 13 new logs [18-06-2022 12:44:01]25020: Checking ditributed CMS bruteforce attacks [18-06-2022 12:44:01]25020: WAF :: fetched 24 new logs [18-06-2022 12:45:01]: Checking for software updates [18-06-2022 12:45:02]27729: WAF :: fetched 8 new logs [18-06-2022 12:46:01]30413: WAF :: fetched 5 new logs [18-06-2022 12:47:02]647: WAF :: fetched 12 new logs [18-06-2022 12:48:01]3513: WAF :: fetched 37 new logs [18-06-2022 12:49:01]6240: WAF :: fetched 23 new logs [18-06-2022 12:50:02]8908: WAF :: fetched 11 new logs [18-06-2022 12:51:01]11648: WAF :: fetched 7 new logs [18-06-2022 12:52:02]14315: WAF :: fetched 8 new logs [18-06-2022 12:53:01]17010: WAF :: fetched 36 new logs [18-06-2022 12:54:01]19659: WAF :: fetched 8 new logs [18-06-2022 12:55:02]22334: WAF :: fetched 7 new logs [18-06-2022 12:56:01]25021: WAF :: fetched 31 new logs [18-06-2022 12:57:01]27695: WAF :: fetched 13 new logs [18-06-2022 12:58:02]30449: WAF :: fetched 11 new logs [18-06-2022 12:59:01]489: WAF :: fetched 13 new logs [18-06-2022 13:00:02]3157: WAF :: fetched 32 new logs [18-06-2022 13:01:02]6346: WAF :: fetched 15 new logs [18-06-2022 13:02:02]9066: WAF :: fetched 12 new logs [18-06-2022 13:03:01]11820: WAF :: fetched 8 new logs [18-06-2022 13:04:02]14450: WAF :: fetched 7 new logs [18-06-2022 13:05:01]17154: WAF :: fetched 20 new logs [18-06-2022 13:06:02]19910: WAF :: fetched 26 new logs [18-06-2022 13:07:01]22627: WAF :: fetched 16 new logs [18-06-2022 13:08:02]25468: WAF :: fetched 24 new logs [18-06-2022 13:09:02]28146: WAF :: fetched 38 new logs [18-06-2022 13:10:01]30814: WAF :: fetched 35 new logs [18-06-2022 13:11:01]1190: WAF :: fetched 89 new logs [18-06-2022 13:12:01]3950: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655568721 [18-06-2022 13:12:01]3950: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 13:12:03]3950: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 13:12:03]3950: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-1312/20220618-131201-Yq35Uas5SI0hq23EyupjkwAAAAI [18-06-2022 13:12:03]3950: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 13:12:04]3950: WAF :: fetched 15 new logs [18-06-2022 13:13:02]6795: WAF :: fetched 43 new logs [18-06-2022 13:14:01]9427: WAF :: fetched 9 new logs [18-06-2022 13:15:02]12123: WAF :: fetched 13 new logs [18-06-2022 13:16:02]14826: WAF :: fetched 28 new logs [18-06-2022 13:17:01]17483: WAF :: fetched 16 new logs [18-06-2022 13:18:02]20256: WAF :: fetched 51 new logs [18-06-2022 13:19:01]22908: WAF :: fetched 18 new logs [18-06-2022 13:20:02]25636: WAF :: fetched 15 new logs [18-06-2022 13:21:02]28341: WAF :: fetched 18 new logs [18-06-2022 13:22:01]31009: WAF :: fetched 22 new logs [18-06-2022 13:23:01]1363: WAF :: fetched 13 new logs [18-06-2022 13:24:02]4074: WAF :: fetched 12 new logs [18-06-2022 13:25:01]6685: WAF :: fetched 9 new logs [18-06-2022 13:26:02]9460: WAF :: fetched 18 new logs [18-06-2022 13:27:02]12098: WAF :: fetched 18 new logs [18-06-2022 13:28:02]14840: WAF :: fetched 16 new logs [18-06-2022 13:29:01]17478: WAF :: fetched 25 new logs [18-06-2022 13:30:02]20161: WAF :: fetched 18 new logs [18-06-2022 13:31:01]22864: WAF :: fetched 22 new logs [18-06-2022 13:32:01]25574: WAF :: fetched 19 new logs [18-06-2022 13:33:02]28348: WAF :: fetched 8 new logs [18-06-2022 13:34:01]30977: WAF :: fetched 13 new logs [18-06-2022 13:35:02]1275: WAF :: fetched 11 new logs [18-06-2022 13:36:01]4027: WAF :: fetched 17 new logs [18-06-2022 13:37:02]6754: WAF :: fetched 4 new logs [18-06-2022 13:41:01]17112: WAF :: fetched 3 new logs [18-06-2022 13:41:01]17112: Checking for user cron vulnerabilities [18-06-2022 13:42:02]20225: WAF :: fetched 6 new logs [18-06-2022 13:43:01]22973: WAF :: fetched 15 new logs [18-06-2022 13:44:02]25662: Checking ditributed CMS bruteforce attacks [18-06-2022 13:44:02]25662: WAF :: fetched 22 new logs [18-06-2022 13:45:01]: Checking for definition updates [18-06-2022 13:45:02]28315: WAF :: fetched 10 new logs [18-06-2022 13:46:01]30932: WAF :: fetched 13 new logs [18-06-2022 13:47:02]1356: WAF :: fetched 42 new logs [18-06-2022 13:48:02]4171: WAF :: fetched 11 new logs [18-06-2022 13:49:02]6875: WAF :: fetched 14 new logs [18-06-2022 13:50:01]9535: WAF :: fetched 11 new logs [18-06-2022 13:51:02]12345: WAF :: fetched 14 new logs [18-06-2022 13:52:01]14975: WAF :: fetched 11 new logs [18-06-2022 13:53:02]17727: WAF :: fetched 8 new logs [18-06-2022 13:54:02]20349: WAF :: fetched 17 new logs [18-06-2022 13:55:01]23004: WAF :: fetched 13 new logs [18-06-2022 13:56:02]25723: WAF :: fetched 9 new logs [18-06-2022 13:57:01]28272: WAF :: fetched 12 new logs [18-06-2022 13:58:01]31155: WAF :: fetched 11 new logs [18-06-2022 13:59:01]1414: WAF :: fetched 15 new logs [18-06-2022 14:00:02]3905: WAF :: fetched 8 new logs [18-06-2022 14:01:02]7108: WAF :: fetched 15 new logs [18-06-2022 14:02:01]9824: WAF :: fetched 8 new logs [18-06-2022 14:03:02]12667: WAF :: fetched 13 new logs [18-06-2022 14:04:01]15312: WAF :: fetched 7 new logs [18-06-2022 14:05:01]18011: WAF :: fetched 8 new logs [18-06-2022 14:06:02]20739: WAF :: fetched 10 new logs [18-06-2022 14:07:01]23402: WAF :: fetched 11 new logs [18-06-2022 14:08:02]26234: WAF :: fetched 11 new logs [18-06-2022 14:09:01]28723: WAF :: fetched 15 new logs [18-06-2022 14:10:02]31615: WAF :: fetched 22 new logs [18-06-2022 14:11:01]1977: WAF :: fetched 11 new logs [18-06-2022 14:12:02]4812: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655572322 [18-06-2022 14:12:02]4812: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 14:12:04]4812: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 14:12:04]4812: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-1412/20220618-141202-Yq4HYipSivVbdLwET74WwQAAAAc [18-06-2022 14:12:04]4812: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 14:12:04]4812: WAF :: fetched 10 new logs [18-06-2022 14:13:02]7543: WAF :: fetched 7 new logs [18-06-2022 14:14:01]10222: WAF :: fetched 16 new logs [18-06-2022 14:15:02]12923: WAF :: fetched 25 new logs [18-06-2022 14:16:01]15640: WAF :: fetched 20 new logs [18-06-2022 14:17:02]18303: WAF :: fetched 19 new logs [18-06-2022 14:18:01]20931: WAF :: fetched 9 new logs [18-06-2022 14:19:02]23697: WAF :: fetched 8 new logs [18-06-2022 14:20:01]26411: WAF :: fetched 7 new logs [18-06-2022 14:21:01]29129: WAF :: fetched 22 new logs [18-06-2022 14:22:02]31801: WAF :: fetched 19 new logs [18-06-2022 14:23:01]2151: WAF :: fetched 20 new logs [18-06-2022 14:24:02]4910: WAF :: fetched 37 new logs [18-06-2022 14:25:02]7612: WAF :: fetched 13 new logs [18-06-2022 14:26:01]10332: WAF :: fetched 17 new logs [18-06-2022 14:27:02]13061: WAF :: fetched 16 new logs [18-06-2022 14:28:01]15838: WAF :: fetched 17 new logs [18-06-2022 14:29:02]18506: WAF :: fetched 18 new logs [18-06-2022 14:30:01]21197: WAF :: fetched 16 new logs [18-06-2022 14:31:02]23927: WAF :: fetched 14 new logs [18-06-2022 14:32:01]26624: WAF :: fetched 16 new logs [18-06-2022 14:33:01]29390: WAF :: fetched 9 new logs [18-06-2022 14:34:02]32082: WAF :: fetched 22 new logs [18-06-2022 14:35:01]2356: WAF :: fetched 9 new logs [18-06-2022 14:36:02]5251: WAF :: fetched 11 new logs [18-06-2022 14:37:01]7993: WAF :: fetched 12 new logs [18-06-2022 14:38:01]10819: WAF :: fetched 44 new logs [18-06-2022 14:39:02]13586: WAF :: fetched 4 new logs [18-06-2022 14:40:01]16316: WAF :: fetched 10 new logs [18-06-2022 14:41:02]19165: WAF :: fetched 4 new logs [18-06-2022 14:41:02]19165: Checking for user cron vulnerabilities [18-06-2022 14:42:01]21846: WAF :: fetched 14 new logs [18-06-2022 14:43:01]24649: WAF :: fetched 15 new logs [18-06-2022 14:44:01]27366: Checking ditributed CMS bruteforce attacks [18-06-2022 14:44:02]27366: WAF :: fetched 10 new logs [18-06-2022 14:45:01]30071: WAF :: fetched 15 new logs [18-06-2022 14:46:01]407: WAF :: fetched 15 new logs [18-06-2022 14:47:02]3251: WAF :: fetched 12 new logs [18-06-2022 14:48:01]6096: WAF :: fetched 10 new logs [18-06-2022 14:49:02]8832: WAF :: fetched 16 new logs [18-06-2022 14:50:01]11552: WAF :: fetched 13 new logs [18-06-2022 14:51:01]14343: WAF :: fetched 8 new logs [18-06-2022 14:52:02]17049: WAF :: fetched 18 new logs [18-06-2022 14:53:01]19764: WAF :: fetched 25 new logs [18-06-2022 14:53:02]19757: Updated license status via CDN [18-06-2022 14:54:01]22448: WAF :: fetched 16 new logs [18-06-2022 14:55:01]25133: WAF :: fetched 45 new logs [18-06-2022 14:56:02]27892: WAF :: fetched 25 new logs [18-06-2022 14:57:01]30513: WAF :: fetched 75 new logs [18-06-2022 14:58:01]848: WAF :: fetched 169 new logs [18-06-2022 14:59:02]3606: WAF :: fetched 195 new logs [18-06-2022 15:00:02]6075: WAF :: fetched 18 new logs [18-06-2022 15:01:02]9275: Reseting cPGuard inotify settings [18-06-2022 15:01:02]9277: WAF :: fetched 19 new logs [18-06-2022 15:02:01]12048: WAF :: fetched 18 new logs [18-06-2022 15:03:02]14845: WAF :: fetched 23 new logs [18-06-2022 15:04:01]17538: WAF :: fetched 15 new logs [18-06-2022 15:05:01]20248: WAF :: fetched 18 new logs [18-06-2022 15:06:02]22995: WAF :: fetched 107 new logs [18-06-2022 15:07:01]25664: WAF :: fetched 24 new logs [18-06-2022 15:08:02]28431: WAF :: fetched 19 new logs [18-06-2022 15:09:02]31139: WAF :: fetched 11 new logs [18-06-2022 15:10:01]1439: WAF :: fetched 20 new logs [18-06-2022 15:11:02]4219: WAF :: fetched 14 new logs [18-06-2022 15:12:01]6965: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655575921 [18-06-2022 15:12:01]6965: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 15:12:03]6965: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 15:12:04]6965: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-1512/20220618-151201-Yq4VcXvvIqT89rTR5aoMBQAAABM [18-06-2022 15:12:04]6965: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 15:12:04]6965: WAF :: fetched 26 new logs [18-06-2022 15:13:02]9681: WAF :: fetched 18 new logs [18-06-2022 15:14:02]12444: WAF :: fetched 11 new logs [18-06-2022 15:15:01]15135: WAF :: fetched 14 new logs [18-06-2022 15:16:01]17842: WAF :: fetched 18 new logs [18-06-2022 15:17:01]20513: WAF :: fetched 16 new logs [18-06-2022 15:18:02]23217: WAF :: fetched 11 new logs [18-06-2022 15:19:01]25985: WAF :: fetched 22 new logs [18-06-2022 15:20:02]28704: WAF :: fetched 24 new logs [18-06-2022 15:21:02]31405: WAF :: fetched 24 new logs [18-06-2022 15:22:01]1695: WAF :: fetched 29 new logs [18-06-2022 15:23:02]4521: WAF :: fetched 26 new logs [18-06-2022 15:24:01]6957: WAF :: fetched 12 new logs [18-06-2022 15:25:02]9991: WAF :: fetched 25 new logs [18-06-2022 15:26:01]12692: WAF :: fetched 50 new logs [18-06-2022 15:27:02]15386: WAF :: fetched 44 new logs [18-06-2022 15:28:01]18064: WAF :: fetched 12 new logs [18-06-2022 15:29:02]20848: WAF :: fetched 22 new logs [18-06-2022 15:30:01]23509: WAF :: fetched 21 new logs [18-06-2022 15:31:01]26260: WAF :: fetched 44 new logs [18-06-2022 15:32:02]29007: WAF :: fetched 9 new logs [18-06-2022 15:33:01]31640: WAF :: fetched 17 new logs [18-06-2022 15:34:02]2030: WAF :: fetched 8 new logs [18-06-2022 15:35:01]4765: WAF :: fetched 10 new logs [18-06-2022 15:36:01]7521: WAF :: fetched 5 new logs [18-06-2022 15:37:02]10206: WAF :: fetched 9 new logs [18-06-2022 15:38:01]12861: WAF :: fetched 4 new logs [18-06-2022 15:39:02]15640: WAF :: fetched 39 new logs [18-06-2022 15:40:01]18138: WAF :: fetched 3 new logs [18-06-2022 15:41:02]21040: WAF :: fetched 11 new logs [18-06-2022 15:41:02]21040: Checking for user cron vulnerabilities [18-06-2022 15:42:01]23648: WAF :: fetched 25 new logs [18-06-2022 15:43:02]26363: WAF :: fetched 12 new logs [18-06-2022 15:44:01]29092: Checking ditributed CMS bruteforce attacks [18-06-2022 15:44:02]29092: WAF :: fetched 10 new logs [18-06-2022 15:45:01]31794: WAF :: fetched 42 new logs [18-06-2022 15:46:02]2155: WAF :: fetched 39 new logs [18-06-2022 15:47:01]4864: WAF :: fetched 31 new logs [18-06-2022 15:48:02]7562: WAF :: fetched 21 new logs [18-06-2022 15:49:02]10304: WAF :: fetched 22 new logs [18-06-2022 15:50:01]13067: WAF :: fetched 33 new logs [18-06-2022 15:51:02]15821: WAF :: fetched 13 new logs [18-06-2022 15:52:01]18472: WAF :: fetched 14 new logs [18-06-2022 15:53:02]21154: WAF :: fetched 27 new logs [18-06-2022 15:54:01]23947: WAF :: fetched 12 new logs [18-06-2022 15:55:02]26715: WAF :: fetched 20 new logs [18-06-2022 15:56:02]29472: WAF :: fetched 21 new logs [18-06-2022 15:57:02]32149: WAF :: fetched 8 new logs [18-06-2022 15:58:01]2510: WAF :: fetched 9 new logs [18-06-2022 15:59:02]5366: WAF :: fetched 12 new logs [18-06-2022 16:00:02]7807: WAF :: fetched 6 new logs [18-06-2022 16:01:01]10974: WAF :: fetched 9 new logs [18-06-2022 16:02:02]13718: WAF :: fetched 5 new logs [18-06-2022 16:03:01]16407: WAF :: fetched 5 new logs [18-06-2022 16:04:02]19169: WAF :: fetched 9 new logs [18-06-2022 16:05:01]21848: WAF :: fetched 4 new logs [18-06-2022 16:06:01]24575: WAF :: fetched 4 new logs [18-06-2022 16:07:02]27301: WAF :: fetched 5 new logs [18-06-2022 16:08:02]30017: WAF :: fetched 36 new logs [18-06-2022 16:09:02]301: WAF :: fetched 7 new logs [18-06-2022 16:10:01]3110: WAF :: fetched 30 new logs [18-06-2022 16:11:02]5939: WAF :: fetched 11 new logs [18-06-2022 16:12:01]8646: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655579521 [18-06-2022 16:12:01]8646: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 16:12:03]8646: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 16:12:04]8646: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-1612/20220618-161201-Yq4jgcW4YAXQwL8csQpqRwAAABg [18-06-2022 16:12:04]8646: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 16:12:04]8646: WAF :: fetched 10 new logs [18-06-2022 16:13:01]11322: WAF :: fetched 7 new logs [18-06-2022 16:14:02]14127: WAF :: fetched 13 new logs [18-06-2022 16:15:01]16849: WAF :: fetched 12 new logs [18-06-2022 16:16:02]19595: WAF :: fetched 40 new logs [18-06-2022 16:17:02]22251: WAF :: fetched 8 new logs [18-06-2022 16:18:01]24904: WAF :: fetched 9 new logs [18-06-2022 16:19:02]27726: WAF :: fetched 6 new logs [18-06-2022 16:20:01]30386: WAF :: fetched 9 new logs [18-06-2022 16:21:02]703: WAF :: fetched 8 new logs [18-06-2022 16:22:02]3453: WAF :: fetched 7 new logs [18-06-2022 16:23:01]6222: WAF :: fetched 9 new logs [18-06-2022 16:24:01]8983: WAF :: fetched 8 new logs [18-06-2022 16:25:02]11666: WAF :: fetched 5 new logs [18-06-2022 16:26:01]14405: WAF :: fetched 5 new logs [18-06-2022 16:27:02]17124: WAF :: fetched 14 new logs [18-06-2022 16:28:01]19792: WAF :: fetched 12 new logs [18-06-2022 16:29:01]22545: WAF :: fetched 10 new logs [18-06-2022 16:30:02]25291: WAF :: fetched 9 new logs [18-06-2022 16:31:02]28032: WAF :: fetched 10 new logs [18-06-2022 16:32:01]30717: WAF :: fetched 12 new logs [18-06-2022 16:33:02]1013: WAF :: fetched 203 new logs [18-06-2022 16:34:01]3824: WAF :: fetched 14 new logs [18-06-2022 16:35:02]6588: WAF :: fetched 12 new logs [18-06-2022 16:36:02]9322: WAF :: fetched 7 new logs [18-06-2022 16:37:02]12002: WAF :: fetched 10 new logs [18-06-2022 16:38:01]14662: WAF :: fetched 10 new logs [18-06-2022 16:39:01]17433: WAF :: fetched 9 new logs [18-06-2022 16:40:02]20162: WAF :: fetched 11 new logs [18-06-2022 16:41:01]22884: WAF :: fetched 8 new logs [18-06-2022 16:41:01]22884: Checking for user cron vulnerabilities [18-06-2022 16:42:02]25600: WAF :: fetched 19 new logs [18-06-2022 16:43:01]28289: WAF :: fetched 8 new logs [18-06-2022 16:44:01]31065: Checking ditributed CMS bruteforce attacks [18-06-2022 16:44:02]31065: WAF :: fetched 6 new logs [18-06-2022 16:45:01]1319: WAF :: fetched 10 new logs [18-06-2022 16:46:02]4097: WAF :: fetched 16 new logs [18-06-2022 16:47:02]6818: WAF :: fetched 17 new logs [18-06-2022 16:48:01]9500: WAF :: fetched 22 new logs [18-06-2022 16:49:02]12284: WAF :: fetched 22 new logs [18-06-2022 16:50:01]14977: WAF :: fetched 20 new logs [18-06-2022 16:51:02]17706: WAF :: fetched 14 new logs [18-06-2022 16:52:02]20386: WAF :: fetched 25 new logs [18-06-2022 16:53:01]23052: WAF :: fetched 17 new logs [18-06-2022 16:54:02]25866: WAF :: fetched 10 new logs [18-06-2022 16:55:01]28530: WAF :: fetched 4 new logs [18-06-2022 16:56:02]31268: WAF :: fetched 7 new logs [18-06-2022 16:57:02]1534: WAF :: fetched 15 new logs [18-06-2022 16:58:01]4306: WAF :: fetched 13 new logs [18-06-2022 16:59:02]7149: WAF :: fetched 6 new logs [18-06-2022 17:00:01]9541: WAF :: fetched 11 new logs [18-06-2022 17:01:02]12683: WAF :: fetched 5 new logs [18-06-2022 17:02:01]15407: WAF :: fetched 7 new logs [18-06-2022 17:03:02]18101: WAF :: fetched 6 new logs [18-06-2022 17:04:02]20865: WAF :: fetched 12 new logs [18-06-2022 17:05:01]23550: WAF :: fetched 5 new logs [18-06-2022 17:06:01]26315: WAF :: fetched 8 new logs [18-06-2022 17:07:01]29005: WAF :: fetched 10 new logs [18-06-2022 17:08:02]31761: WAF :: fetched 8 new logs [18-06-2022 17:09:02]2170: WAF :: fetched 7 new logs [18-06-2022 17:10:01]4932: WAF :: fetched 13 new logs [18-06-2022 17:11:02]7700: WAF :: fetched 9 new logs [18-06-2022 17:12:02]10373: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655583122 [18-06-2022 17:12:02]10373: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 17:12:04]10373: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 17:12:04]10373: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-1712/20220618-171202-Yq4xkhZyF8dFGx3i7M1eIQAAABA [18-06-2022 17:12:04]10373: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 17:12:04]10373: WAF :: fetched 7 new logs [18-06-2022 17:13:01]13065: WAF :: fetched 11 new logs [18-06-2022 17:14:02]15881: WAF :: fetched 31 new logs [18-06-2022 17:15:01]18526: WAF :: fetched 110 new logs [18-06-2022 17:16:02]21275: WAF :: fetched 12 new logs [18-06-2022 17:17:02]23953: WAF :: fetched 10 new logs [18-06-2022 17:18:01]26654: WAF :: fetched 9 new logs [18-06-2022 17:19:02]29468: WAF :: fetched 11 new logs [18-06-2022 17:20:01]32131: WAF :: fetched 17 new logs [18-06-2022 17:21:01]2500: WAF :: fetched 21 new logs [18-06-2022 17:22:01]5259: WAF :: fetched 23 new logs [18-06-2022 17:23:02]7969: WAF :: fetched 23 new logs [18-06-2022 17:24:02]10761: WAF :: fetched 23 new logs [18-06-2022 17:25:01]13485: WAF :: fetched 157 new logs [18-06-2022 17:26:02]16255: WAF :: fetched 93 new logs [18-06-2022 17:27:01]18921: WAF :: fetched 74 new logs [18-06-2022 17:28:02]21638: WAF :: fetched 13 new logs [18-06-2022 17:29:02]24376: WAF :: fetched 15 new logs [18-06-2022 17:30:01]27118: WAF :: fetched 14 new logs [18-06-2022 17:31:02]29900: WAF :: fetched 24 new logs [18-06-2022 17:32:01]32603: WAF :: fetched 12 new logs [18-06-2022 17:33:02]2961: WAF :: fetched 75 new logs [18-06-2022 17:34:02]5797: WAF :: fetched 15 new logs [18-06-2022 17:35:01]8526: WAF :: fetched 14 new logs [18-06-2022 17:36:02]11292: WAF :: fetched 28 new logs [18-06-2022 17:37:02]13966: WAF :: fetched 13 new logs [18-06-2022 17:38:01]16643: WAF :: fetched 17 new logs [18-06-2022 17:39:02]19452: WAF :: fetched 23 new logs [18-06-2022 17:40:01]22144: WAF :: fetched 15 new logs [18-06-2022 17:41:01]24887: WAF :: fetched 5 new logs [18-06-2022 17:41:01]24887: Checking for user cron vulnerabilities [18-06-2022 17:42:02]27611: WAF :: fetched 8 new logs [18-06-2022 17:43:01]30263: WAF :: fetched 12 new logs [18-06-2022 17:44:02]609: Checking ditributed CMS bruteforce attacks [18-06-2022 17:44:02]609: WAF :: fetched 8 new logs [18-06-2022 17:45:02]3400: WAF :: fetched 13 new logs [18-06-2022 17:46:01]6216: WAF :: fetched 16 new logs [18-06-2022 17:47:02]8941: WAF :: fetched 59 new logs [18-06-2022 17:48:02]11642: WAF :: fetched 10 new logs [18-06-2022 17:49:01]14427: WAF :: fetched 7 new logs [18-06-2022 17:50:02]17116: WAF :: fetched 10 new logs [18-06-2022 17:51:01]19899: WAF :: fetched 15 new logs [18-06-2022 17:52:02]22631: WAF :: fetched 18 new logs [18-06-2022 17:53:01]25314: WAF :: fetched 110 new logs [18-06-2022 17:54:02]28124: WAF :: fetched 15 new logs [18-06-2022 17:55:02]30747: WAF :: fetched 51 new logs [18-06-2022 17:56:01]1075: WAF :: fetched 22 new logs [18-06-2022 17:57:02]3840: WAF :: fetched 22 new logs [18-06-2022 17:58:01]6534: WAF :: fetched 23 new logs [18-06-2022 17:59:01]9308: WAF :: fetched 36 new logs [18-06-2022 18:00:02]11753: WAF :: fetched 78 new logs [18-06-2022 18:01:01]14932: WAF :: fetched 20 new logs [18-06-2022 18:02:02]17646: WAF :: fetched 53 new logs [18-06-2022 18:03:02]20322: WAF :: fetched 19 new logs [18-06-2022 18:04:01]23074: WAF :: fetched 17 new logs [18-06-2022 18:05:02]25803: WAF :: fetched 19 new logs [18-06-2022 18:06:02]28566: WAF :: fetched 14 new logs [18-06-2022 18:07:01]31250: WAF :: fetched 6 new logs [18-06-2022 18:08:02]1544: WAF :: fetched 6 new logs [18-06-2022 18:09:01]4436: WAF :: fetched 7 new logs [18-06-2022 18:10:02]7148: WAF :: fetched 2 new logs [18-06-2022 18:12:02]12521: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655586722 [18-06-2022 18:12:02]12521: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 18:12:04]12521: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 18:12:04]12521: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-1812/20220618-181202-Yq4_ou6Jr03hSuUyf6y4wAAAAAI [18-06-2022 18:12:04]12521: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 18:15:01]20673: WAF :: fetched 3 new logs [18-06-2022 18:16:02]23464: WAF :: fetched 4 new logs [18-06-2022 18:17:01]26129: WAF :: fetched 8 new logs [18-06-2022 18:18:01]28813: WAF :: fetched 10 new logs [18-06-2022 18:19:02]31576: WAF :: fetched 172 new logs [18-06-2022 18:20:01]1868: WAF :: fetched 162 new logs [18-06-2022 18:21:02]4735: WAF :: fetched 25 new logs [18-06-2022 18:22:02]7389: WAF :: fetched 6 new logs [18-06-2022 18:23:01]10067: WAF :: fetched 5 new logs [18-06-2022 18:24:02]12865: WAF :: fetched 6 new logs [18-06-2022 18:25:01]15527: WAF :: fetched 110 new logs [18-06-2022 18:26:02]18311: WAF :: fetched 77 new logs [18-06-2022 18:27:02]20978: WAF :: fetched 18 new logs [18-06-2022 18:28:01]23638: WAF :: fetched 5 new logs [18-06-2022 18:30:01]29149: WAF :: fetched 69 new logs [18-06-2022 18:31:01]31865: WAF :: fetched 110 new logs [18-06-2022 18:32:02]2209: WAF :: fetched 67 new logs [18-06-2022 18:34:02]7773: WAF :: fetched 53 new logs [18-06-2022 18:35:02]10492: WAF :: fetched 50 new logs [18-06-2022 18:36:01]13254: WAF :: fetched 85 new logs [18-06-2022 18:37:02]16016: WAF :: fetched 150 new logs [18-06-2022 18:38:01]18698: WAF :: fetched 2 new logs [18-06-2022 18:39:02]21504: WAF :: fetched 62 new logs [18-06-2022 18:40:02]24196: WAF :: fetched 26 new logs [18-06-2022 18:41:01]26971: WAF :: fetched 47 new logs [18-06-2022 18:41:01]26971: Checking for user cron vulnerabilities [18-06-2022 18:42:02]29697: WAF :: fetched 76 new logs [18-06-2022 18:43:01]32352: WAF :: fetched 9 new logs [18-06-2022 18:44:01]2740: Checking ditributed CMS bruteforce attacks [18-06-2022 18:44:01]2740: WAF :: fetched 5 new logs [18-06-2022 18:45:02]5526: WAF :: fetched 10 new logs [18-06-2022 18:46:01]8278: WAF :: fetched 8 new logs [18-06-2022 18:47:02]10967: WAF :: fetched 3 new logs [18-06-2022 18:48:02]13655: WAF :: fetched 4 new logs [18-06-2022 18:49:01]16430: WAF :: fetched 18 new logs [18-06-2022 18:50:02]19175: WAF :: fetched 38 new logs [18-06-2022 18:51:01]21990: WAF :: fetched 50 new logs [18-06-2022 18:51:01]21995: httpd.conf changed. Refreshing watchlist. [18-06-2022 18:52:02]24718: WAF :: fetched 16 new logs [18-06-2022 18:53:01]27419: WAF :: fetched 24 new logs [18-06-2022 18:54:02]30233: WAF :: fetched 51 new logs [18-06-2022 18:55:02]459: WAF :: fetched 14 new logs [18-06-2022 18:56:01]3343: WAF :: fetched 44 new logs [18-06-2022 18:56:01]3328: httpd.conf changed. Refreshing watchlist. [18-06-2022 18:57:01]6088: WAF :: fetched 23 new logs [18-06-2022 18:58:02]8845: WAF :: fetched 6 new logs [18-06-2022 18:59:01]11586: WAF :: fetched 1 new logs [18-06-2022 19:00:01]14022: WAF :: fetched 5 new logs [18-06-2022 19:01:02]17255: WAF :: fetched 21 new logs [18-06-2022 19:02:01]20001: WAF :: fetched 1 new logs [18-06-2022 19:04:01]25450: WAF :: fetched 1 new logs [18-06-2022 19:05:01]28163: WAF :: fetched 2 new logs [18-06-2022 19:06:02]30924: WAF :: fetched 89 new logs [18-06-2022 19:07:01]1220: WAF :: fetched 34 new logs [18-06-2022 19:08:02]4046: WAF :: fetched 9 new logs [18-06-2022 19:09:01]6864: WAF :: fetched 2 new logs [18-06-2022 19:11:02]12367: WAF :: fetched 1 new logs [18-06-2022 19:12:01]15050: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655590321 [18-06-2022 19:12:01]15050: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 19:12:03]15050: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 19:12:04]15050: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-1912/20220618-191201-Yq5NsUBBQJK-5-eI6i05kAAAAAw [18-06-2022 19:12:04]15050: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 19:12:04]15050: WAF :: fetched 61 new logs [18-06-2022 19:13:02]17773: WAF :: fetched 77 new logs [18-06-2022 19:14:02]20538: WAF :: fetched 1 new logs [18-06-2022 19:15:01]23236: WAF :: fetched 1 new logs [18-06-2022 19:17:01]28689: WAF :: fetched 3 new logs [18-06-2022 19:20:02]4643: WAF :: fetched 1 new logs [18-06-2022 19:21:02]7386: WAF :: fetched 27 new logs [18-06-2022 19:22:01]10080: WAF :: fetched 4 new logs [18-06-2022 19:23:02]12782: WAF :: fetched 7 new logs [18-06-2022 19:24:01]15527: WAF :: fetched 6 new logs [18-06-2022 19:25:02]18225: WAF :: fetched 5 new logs [18-06-2022 19:26:01]20946: WAF :: fetched 9 new logs [18-06-2022 19:27:01]23614: WAF :: fetched 2 new logs [18-06-2022 19:28:02]26336: WAF :: fetched 1 new logs [18-06-2022 19:29:01]29054: WAF :: fetched 5 new logs [18-06-2022 19:30:02]31774: WAF :: fetched 1 new logs [18-06-2022 19:31:01]2123: WAF :: fetched 5 new logs [18-06-2022 19:32:02]4933: WAF :: fetched 1 new logs [18-06-2022 19:33:01]7626: WAF :: fetched 6 new logs [18-06-2022 19:34:02]10401: WAF :: fetched 2 new logs [18-06-2022 19:36:01]15832: WAF :: fetched 5 new logs [18-06-2022 19:38:02]21231: WAF :: fetched 2 new logs [18-06-2022 19:40:02]26715: WAF :: fetched 1 new logs [18-06-2022 19:41:01]29434: WAF :: fetched 23 new logs [18-06-2022 19:41:02]29434: Checking for user cron vulnerabilities [18-06-2022 19:44:01]5301: Checking ditributed CMS bruteforce attacks [18-06-2022 19:44:01]5301: WAF :: fetched 5 new logs [18-06-2022 19:45:01]: Checking for definition updates [18-06-2022 19:45:01]7977: WAF :: fetched 158 new logs [18-06-2022 19:46:02]10783: WAF :: fetched 27 new logs [18-06-2022 19:47:01]13440: WAF :: fetched 7 new logs [18-06-2022 19:48:02]16192: WAF :: fetched 9 new logs [18-06-2022 19:49:02]18961: WAF :: fetched 12 new logs [18-06-2022 19:50:02]21729: WAF :: fetched 41 new logs [18-06-2022 19:51:01]24478: WAF :: fetched 6 new logs [18-06-2022 19:52:02]27210: WAF :: fetched 14 new logs [18-06-2022 19:53:01]29838: WAF :: fetched 28 new logs [18-06-2022 19:54:01]32576: WAF :: fetched 2 new logs [18-06-2022 19:56:01]5725: WAF :: fetched 2 new logs [18-06-2022 19:58:01]11139: WAF :: fetched 47 new logs [18-06-2022 19:59:02]13896: WAF :: fetched 15 new logs [18-06-2022 20:00:01]16329: WAF :: fetched 1 new logs [18-06-2022 20:05:01]30497: WAF :: fetched 19 new logs [18-06-2022 20:06:02]784: WAF :: fetched 7 new logs [18-06-2022 20:08:02]6126: WAF :: fetched 35 new logs [18-06-2022 20:09:02]8830: WAF :: fetched 9 new logs [18-06-2022 20:10:01]11603: WAF :: fetched 141 new logs [18-06-2022 20:11:02]14379: WAF :: fetched 29 new logs [18-06-2022 20:12:02]17061: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655593922 [18-06-2022 20:12:02]17061: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 20:12:04]17061: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 20:12:04]17061: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-2012/20220618-201202-Yq5bwvfsUK55NFj_FEFjXAAAAAo [18-06-2022 20:12:04]17061: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 20:13:01]19761: WAF :: fetched 1 new logs [18-06-2022 20:16:01]27970: WAF :: fetched 3 new logs [18-06-2022 20:17:02]30667: WAF :: fetched 3 new logs [18-06-2022 20:18:01]924: WAF :: fetched 6 new logs [18-06-2022 20:19:02]3719: WAF :: fetched 4 new logs [18-06-2022 20:20:02]6561: WAF :: fetched 2 new logs [18-06-2022 20:21:01]9312: WAF :: fetched 42 new logs [18-06-2022 20:22:02]12026: WAF :: fetched 8 new logs [18-06-2022 20:23:01]14706: WAF :: fetched 4 new logs [18-06-2022 20:25:01]20180: WAF :: fetched 3 new logs [18-06-2022 20:29:02]30935: WAF :: fetched 1 new logs [18-06-2022 20:31:01]4154: WAF :: fetched 10 new logs [18-06-2022 20:32:02]6923: WAF :: fetched 13 new logs [18-06-2022 20:33:01]9578: WAF :: fetched 4 new logs [18-06-2022 20:34:01]12270: WAF :: fetched 7 new logs [18-06-2022 20:35:02]15064: WAF :: fetched 6 new logs [18-06-2022 20:36:01]17781: WAF :: fetched 5 new logs [18-06-2022 20:37:02]20511: WAF :: fetched 6 new logs [18-06-2022 20:38:01]23158: WAF :: fetched 8 new logs [18-06-2022 20:39:01]25843: WAF :: fetched 5 new logs [18-06-2022 20:40:02]28672: WAF :: fetched 2 new logs [18-06-2022 20:41:02]31390: WAF :: fetched 2 new logs [18-06-2022 20:41:02]31390: Checking for user cron vulnerabilities [18-06-2022 20:42:02]1693: WAF :: fetched 1 new logs [18-06-2022 20:43:01]4461: WAF :: fetched 2 new logs [18-06-2022 20:44:01]7189: Checking ditributed CMS bruteforce attacks [18-06-2022 20:47:02]15391: WAF :: fetched 2 new logs [18-06-2022 20:50:01]23220: WAF :: fetched 3 new logs [18-06-2022 20:55:01]4541: WAF :: fetched 2 new logs [18-06-2022 20:56:01]7249: WAF :: fetched 22 new logs [18-06-2022 20:58:01]12609: WAF :: fetched 2 new logs [18-06-2022 20:59:02]15322: WAF :: fetched 2 new logs [18-06-2022 21:01:02]21029: WAF :: fetched 1 new logs [18-06-2022 21:02:01]23734: WAF :: fetched 1 new logs [18-06-2022 21:03:01]26352: WAF :: fetched 27 new logs [18-06-2022 21:06:01]1991: WAF :: fetched 2 new logs [18-06-2022 21:07:01]4745: WAF :: fetched 1 new logs [18-06-2022 21:08:02]7489: WAF :: fetched 1 new logs [18-06-2022 21:09:01]10155: WAF :: fetched 2 new logs [18-06-2022 21:11:02]15682: WAF :: fetched 3 new logs [18-06-2022 21:12:02]18407: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655597522 [18-06-2022 21:12:02]18407: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 21:12:04]18407: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 21:12:04]18407: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-2112/20220618-211202-Yq5p0pRaHipOcr0bYvTs3AAAAAY [18-06-2022 21:12:04]18407: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 21:12:04]18407: WAF :: fetched 3 new logs [18-06-2022 21:14:02]23737: WAF :: fetched 1 new logs [18-06-2022 21:16:02]29216: WAF :: fetched 1 new logs [18-06-2022 21:17:02]31891: WAF :: fetched 2 new logs [18-06-2022 21:18:01]2204: WAF :: fetched 62 new logs [18-06-2022 21:19:02]5011: WAF :: fetched 10 new logs [18-06-2022 21:20:01]7785: WAF :: fetched 5 new logs [18-06-2022 21:21:01]10538: WAF :: fetched 12 new logs [18-06-2022 21:22:01]13232: WAF :: fetched 9 new logs [18-06-2022 21:23:02]15915: WAF :: fetched 7 new logs [18-06-2022 21:24:01]18555: WAF :: fetched 1 new logs [18-06-2022 21:26:02]24026: WAF :: fetched 2 new logs [18-06-2022 21:27:01]26683: WAF :: fetched 3 new logs [18-06-2022 21:28:02]29376: WAF :: fetched 1 new logs [18-06-2022 21:30:01]2425: WAF :: fetched 1 new logs [18-06-2022 21:33:02]10691: WAF :: fetched 4 new logs [18-06-2022 21:34:02]13349: WAF :: fetched 4 new logs [18-06-2022 21:35:02]16147: WAF :: fetched 3 new logs [18-06-2022 21:36:01]18875: WAF :: fetched 7 new logs [18-06-2022 21:37:02]21573: WAF :: fetched 4 new logs [18-06-2022 21:38:01]24250: WAF :: fetched 5 new logs [18-06-2022 21:39:01]26938: WAF :: fetched 7 new logs [18-06-2022 21:40:02]29783: WAF :: fetched 8 new logs [18-06-2022 21:41:01]32450: WAF :: fetched 8 new logs [18-06-2022 21:41:01]32450: Checking for user cron vulnerabilities [18-06-2022 21:42:01]2778: WAF :: fetched 2 new logs [18-06-2022 21:43:02]5560: WAF :: fetched 6 new logs [18-06-2022 21:44:01]8228: Checking ditributed CMS bruteforce attacks [18-06-2022 21:44:01]8228: WAF :: fetched 49 new logs [18-06-2022 21:45:02]11082: WAF :: fetched 9 new logs [18-06-2022 21:46:02]13817: WAF :: fetched 18 new logs [18-06-2022 21:47:01]16490: WAF :: fetched 1 new logs [18-06-2022 21:48:02]19210: WAF :: fetched 2 new logs [18-06-2022 21:49:02]21864: WAF :: fetched 90 new logs [18-06-2022 21:50:01]24507: WAF :: fetched 111 new logs [18-06-2022 21:51:02]27482: WAF :: fetched 42 new logs [18-06-2022 21:52:01]30145: WAF :: fetched 18 new logs [18-06-2022 21:53:02]452: WAF :: fetched 165 new logs [18-06-2022 21:54:02]3194: WAF :: fetched 41 new logs [18-06-2022 21:55:02]6038: WAF :: fetched 38 new logs [18-06-2022 21:56:01]8769: WAF :: fetched 45 new logs [18-06-2022 21:57:02]11477: WAF :: fetched 4 new logs [18-06-2022 21:58:01]14143: WAF :: fetched 4 new logs [18-06-2022 21:59:02]16853: WAF :: fetched 11 new logs [18-06-2022 22:00:02]19323: WAF :: fetched 9 new logs [18-06-2022 22:01:01]22490: WAF :: fetched 11 new logs [18-06-2022 22:02:02]25243: WAF :: fetched 4 new logs [18-06-2022 22:03:01]27939: WAF :: fetched 30 new logs [18-06-2022 22:04:02]30647: WAF :: fetched 9 new logs [18-06-2022 22:05:01]886: WAF :: fetched 7 new logs [18-06-2022 22:06:01]3845: WAF :: fetched 8 new logs [18-06-2022 22:07:01]6570: WAF :: fetched 8 new logs [18-06-2022 22:07:08]6552: Performing Domain reputation checks [18-06-2022 22:08:02]9315: WAF :: fetched 7 new logs [18-06-2022 22:09:01]11974: WAF :: fetched 8 new logs [18-06-2022 22:10:02]14799: WAF :: fetched 4 new logs [18-06-2022 22:11:02]17501: WAF :: fetched 22 new logs [18-06-2022 22:12:02]20220: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655601122 [18-06-2022 22:12:02]20220: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 22:12:04]20220: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 22:12:04]20220: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-2212/20220618-221202-Yq534vOFmmHaM8pnmAzF0QAAABQ [18-06-2022 22:12:04]20220: WAF :: No suitable log file found. Using SQLite.. [18-06-2022 22:12:04]20220: WAF :: fetched 18 new logs [18-06-2022 22:13:01]22886: WAF :: fetched 4 new logs [18-06-2022 22:14:02]25608: WAF :: fetched 8 new logs [18-06-2022 22:15:02]28362: WAF :: fetched 3 new logs [18-06-2022 22:16:01]31053: WAF :: fetched 5 new logs [18-06-2022 22:17:02]1389: WAF :: fetched 24 new logs [18-06-2022 22:18:01]3965: WAF :: fetched 1 new logs [18-06-2022 22:19:02]6836: WAF :: fetched 36 new logs [18-06-2022 22:20:01]9581: WAF :: fetched 28 new logs [18-06-2022 22:21:02]12364: WAF :: fetched 3 new logs [18-06-2022 22:22:01]15049: WAF :: fetched 4 new logs [18-06-2022 22:23:01]17718: WAF :: fetched 13 new logs [18-06-2022 22:24:02]20427: WAF :: fetched 23 new logs [18-06-2022 22:25:01]23210: WAF :: fetched 2 new logs [18-06-2022 22:26:02]25945: WAF :: fetched 30 new logs [18-06-2022 22:28:01]31328: WAF :: fetched 32 new logs [18-06-2022 22:29:02]1680: WAF :: fetched 54 new logs [18-06-2022 22:30:02]4551: WAF :: fetched 1 new logs [18-06-2022 22:31:01]7310: WAF :: fetched 4 new logs [18-06-2022 22:32:01]10013: WAF :: fetched 3 new logs [18-06-2022 22:33:02]12707: WAF :: fetched 121 new logs [18-06-2022 22:34:01]15367: WAF :: fetched 9 new logs [18-06-2022 22:35:01]18140: WAF :: fetched 45 new logs [18-06-2022 22:36:02]20885: WAF :: fetched 56 new logs [18-06-2022 22:37:01]23569: WAF :: fetched 11 new logs [18-06-2022 22:38:01]26229: WAF :: fetched 4 new logs [18-06-2022 22:39:02]28942: WAF :: fetched 7 new logs [18-06-2022 22:40:01]31737: WAF :: fetched 3 new logs [18-06-2022 22:41:01]2115: WAF :: fetched 7 new logs [18-06-2022 22:41:01]2115: Checking for user cron vulnerabilities [18-06-2022 22:42:02]4927: WAF :: fetched 2 new logs [18-06-2022 22:43:01]7645: WAF :: fetched 2 new logs [18-06-2022 22:44:02]10326: Checking ditributed CMS bruteforce attacks [18-06-2022 22:47:02]18578: WAF :: fetched 1 new logs [18-06-2022 22:48:01]21240: WAF :: fetched 8 new logs [18-06-2022 22:49:02]23917: WAF :: fetched 2 new logs [18-06-2022 22:50:01]26674: WAF :: fetched 1 new logs [18-06-2022 22:51:01]29430: WAF :: fetched 1 new logs [18-06-2022 22:52:02]32146: WAF :: fetched 2 new logs [18-06-2022 22:53:01]2444: WAF :: fetched 1 new logs [18-06-2022 22:54:02]5231: WAF :: fetched 4 new logs [18-06-2022 22:55:02]7992: WAF :: fetched 37 new logs [18-06-2022 22:56:01]10729: WAF :: fetched 4 new logs [18-06-2022 22:57:02]13414: WAF :: fetched 3 new logs [18-06-2022 22:58:01]16090: WAF :: fetched 5 new logs [18-06-2022 22:59:02]18793: WAF :: fetched 5 new logs [18-06-2022 23:00:02]21285: WAF :: fetched 1 new logs [18-06-2022 23:01:02]24480: WAF :: fetched 6 new logs [18-06-2022 23:02:01]27199: WAF :: fetched 8 new logs [18-06-2022 23:03:02]29914: WAF :: fetched 7 new logs [18-06-2022 23:04:01]32584: WAF :: fetched 7 new logs [18-06-2022 23:05:01]2981: WAF :: fetched 3 new logs [18-06-2022 23:06:02]5788: WAF :: fetched 6 new logs [18-06-2022 23:07:01]8475: WAF :: fetched 1 new logs [18-06-2022 23:07:59]8646: Performed RBL check for 23.111.136.34. [18-06-2022 23:08:02]11238: WAF :: fetched 2 new logs [18-06-2022 23:09:01]13933: WAF :: fetched 3 new logs [18-06-2022 23:11:02]19494: WAF :: fetched 3 new logs [18-06-2022 23:12:01]22198: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655604721 [18-06-2022 23:12:01]22198: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-06-2022 23:12:03]22198: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-06-2022 23:12:04]22198: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220618/20220618-2312/20220618-231201-Yq6F8dGv0Q57sDeJrJwgkQAAABg [18-06-2022 23:12:04]22198: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [18-06-2022 23:12:04]22198: WAF :: fetched 1 new logs [18-06-2022 23:14:02]27589: WAF :: fetched 1 new logs [18-06-2022 23:15:02]30369: WAF :: fetched 3 new logs [18-06-2022 23:16:01]644: WAF :: fetched 3 new logs [18-06-2022 23:17:02]3420: WAF :: fetched 5 new logs [18-06-2022 23:18:01]6205: WAF :: fetched 5 new logs [18-06-2022 23:19:01]8861: WAF :: fetched 11 new logs [18-06-2022 23:20:02]11696: WAF :: fetched 2 new logs [18-06-2022 23:21:01]14425: WAF :: fetched 9 new logs [18-06-2022 23:22:02]17117: WAF :: fetched 9 new logs [18-06-2022 23:23:01]19795: WAF :: fetched 23 new logs [18-06-2022 23:24:02]22493: WAF :: fetched 24 new logs [18-06-2022 23:25:02]25288: WAF :: fetched 20 new logs [18-06-2022 23:26:01]28022: WAF :: fetched 55 new logs [18-06-2022 23:27:02]30706: WAF :: fetched 23 new logs [18-06-2022 23:28:01]952: WAF :: fetched 17 new logs [18-06-2022 23:29:02]3690: WAF :: fetched 9 new logs [18-06-2022 23:30:02]6511: WAF :: fetched 4 new logs [18-06-2022 23:31:01]9240: WAF :: fetched 1 new logs [18-06-2022 23:33:01]14640: WAF :: fetched 17 new logs [18-06-2022 23:34:02]17355: WAF :: fetched 2 new logs [18-06-2022 23:35:01]20110: WAF :: fetched 1 new logs [18-06-2022 23:36:01]22908: WAF :: fetched 1 new logs [18-06-2022 23:40:02]1370: WAF :: fetched 1 new logs [18-06-2022 23:41:01]4147: WAF :: fetched 33 new logs [18-06-2022 23:41:01]4147: Checking for user cron vulnerabilities [18-06-2022 23:42:02]6910: WAF :: fetched 16 new logs [18-06-2022 23:43:02]9576: WAF :: fetched 24 new logs [18-06-2022 23:44:01]12254: Checking ditributed CMS bruteforce attacks [18-06-2022 23:44:01]12254: WAF :: fetched 9 new logs [18-06-2022 23:45:02]15076: WAF :: fetched 7 new logs [18-06-2022 23:46:01]17786: WAF :: fetched 5 new logs [18-06-2022 23:47:02]20510: WAF :: fetched 4 new logs [18-06-2022 23:48:01]23074: WAF :: fetched 2 new logs [18-06-2022 23:49:02]25942: WAF :: fetched 11 new logs [18-06-2022 23:50:01]28844: WAF :: fetched 4 new logs [18-06-2022 23:51:02]31579: WAF :: fetched 3 new logs [18-06-2022 23:52:02]1863: WAF :: fetched 5 new logs [18-06-2022 23:53:02]4770: WAF :: fetched 107 new logs [18-06-2022 23:54:02]7621: httpd.conf changed. Refreshing watchlist. [18-06-2022 23:54:02]7610: WAF :: fetched 72 new logs [18-06-2022 23:55:01]11158: WAF :: fetched 48 new logs [18-06-2022 23:55:01]11162: httpd.conf changed. Refreshing watchlist. [18-06-2022 23:56:01]14435: WAF :: fetched 120 new logs [18-06-2022 23:57:02]17597: httpd.conf changed. Refreshing watchlist. [18-06-2022 23:57:02]17595: WAF :: fetched 31 new logs [18-06-2022 23:58:01]20235: WAF :: fetched 11 new logs [18-06-2022 23:59:02]22960: WAF :: fetched 205 new logs [19-06-2022 00:00:02]25456: WAF :: fetched 10 new logs [19-06-2022 00:01:02]28796: WAF :: fetched 7 new logs [19-06-2022 00:01:02]28792: httpd.conf changed. Refreshing watchlist. [19-06-2022 00:01:04]28796: Sending daily report for June 19, 2022 [19-06-2022 00:02:01]31617: httpd.conf changed. Refreshing watchlist. [19-06-2022 00:02:01]31614: WAF :: fetched 10 new logs [19-06-2022 00:03:02]2336: WAF :: fetched 7 new logs [19-06-2022 00:04:04]5145: WAF :: fetched 10 new logs [19-06-2022 00:05:01]7829: WAF :: fetched 5 new logs [19-06-2022 00:05:01]7829: Deleted 0 entries older than 6 MONTH from scanner_logs [19-06-2022 00:05:01]7829: Deleted 0 files from Quarantine [19-06-2022 00:06:02]10639: WAF :: fetched 8 new logs [19-06-2022 00:07:02]13325: WAF :: fetched 11 new logs [19-06-2022 00:08:01]16037: WAF :: fetched 7 new logs [19-06-2022 00:09:01]18749: WAF :: fetched 5 new logs [19-06-2022 00:10:02]21552: WAF :: fetched 8 new logs [19-06-2022 00:11:01]24302: WAF :: fetched 39 new logs [19-06-2022 00:12:02]27008: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655608322 [19-06-2022 00:12:02]27008: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 00:12:04]27008: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 00:12:04]27008: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-0012/20220619-001202-Yq6UAhGzkpRU2SqZIuoVPAAAABI [19-06-2022 00:12:04]27008: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 00:12:05]27008: WAF :: fetched 869 new logs [19-06-2022 00:13:01]29666: WAF :: fetched 1 new logs [19-06-2022 00:14:01]32369: WAF :: fetched 3 new logs [19-06-2022 00:15:02]2780: WAF :: fetched 2 new logs [19-06-2022 00:16:01]5589: WAF :: fetched 6 new logs [19-06-2022 00:17:02]8340: WAF :: fetched 2 new logs [19-06-2022 00:18:02]11014: WAF :: fetched 4 new logs [19-06-2022 00:19:01]13711: WAF :: fetched 6 new logs [19-06-2022 00:20:01]16528: WAF :: fetched 2 new logs [19-06-2022 00:21:02]19267: WAF :: fetched 1 new logs [19-06-2022 00:25:01]30115: WAF :: fetched 1 new logs [19-06-2022 00:26:01]414: WAF :: fetched 10 new logs [19-06-2022 00:27:02]3203: WAF :: fetched 12 new logs [19-06-2022 00:28:01]5957: WAF :: fetched 7 new logs [19-06-2022 00:29:02]8696: WAF :: fetched 29 new logs [19-06-2022 00:30:02]11470: WAF :: fetched 11 new logs [19-06-2022 00:31:01]14186: WAF :: fetched 8 new logs [19-06-2022 00:32:02]16926: WAF :: fetched 33 new logs [19-06-2022 00:33:01]19593: WAF :: fetched 28 new logs [19-06-2022 00:34:02]22290: WAF :: fetched 4 new logs [19-06-2022 00:35:02]25032: WAF :: fetched 1 new logs [19-06-2022 00:36:01]27766: WAF :: fetched 1 new logs [19-06-2022 00:37:02]30479: WAF :: fetched 1 new logs [19-06-2022 00:38:01]601: WAF :: fetched 2 new logs [19-06-2022 00:39:02]3477: WAF :: fetched 3 new logs [19-06-2022 00:40:01]6355: WAF :: fetched 5 new logs [19-06-2022 00:41:02]9116: WAF :: fetched 1 new logs [19-06-2022 00:41:02]9116: Checking for user cron vulnerabilities [19-06-2022 00:42:01]11768: WAF :: fetched 30 new logs [19-06-2022 00:43:02]14463: WAF :: fetched 30 new logs [19-06-2022 00:44:01]17190: Checking ditributed CMS bruteforce attacks [19-06-2022 00:44:01]17190: WAF :: fetched 54 new logs [19-06-2022 00:45:02]: Checking for software updates [19-06-2022 00:45:02]20008: WAF :: fetched 5 new logs [19-06-2022 00:46:02]22728: WAF :: fetched 11 new logs [19-06-2022 00:47:01]25384: WAF :: fetched 23 new logs [19-06-2022 00:48:02]28082: WAF :: fetched 4 new logs [19-06-2022 00:49:01]30769: WAF :: fetched 7 new logs [19-06-2022 00:50:01]1130: WAF :: fetched 21 new logs [19-06-2022 00:51:02]3935: WAF :: fetched 35 new logs [19-06-2022 00:52:01]6691: WAF :: fetched 1 new logs [19-06-2022 00:53:02]9370: WAF :: fetched 1 new logs [19-06-2022 00:54:02]12086: WAF :: fetched 2 new logs [19-06-2022 00:58:02]23272: WAF :: fetched 2 new logs [19-06-2022 01:05:01]11563: WAF :: fetched 28 new logs [19-06-2022 01:07:01]17548: WAF :: fetched 137 new logs [19-06-2022 01:08:02]20360: WAF :: fetched 163 new logs [19-06-2022 01:09:01]23013: WAF :: fetched 10 new logs [19-06-2022 01:10:01]25941: WAF :: fetched 3 new logs [19-06-2022 01:11:02]28739: WAF :: fetched 1 new logs [19-06-2022 01:12:01]31429: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655611921 [19-06-2022 01:12:01]31429: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 01:12:03]31429: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 01:12:04]31429: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-0112/20220619-011201-Yq6iEaCBTUlfgjOih0Y3sgAAABg [19-06-2022 01:12:04]31429: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 01:12:04]31429: WAF :: fetched 29 new logs [19-06-2022 01:13:02]1739: WAF :: fetched 1 new logs [19-06-2022 01:14:02]4520: WAF :: fetched 2 new logs [19-06-2022 01:15:01]7268: WAF :: fetched 4 new logs [19-06-2022 01:16:02]10408: WAF :: fetched 126 new logs [19-06-2022 01:17:01]13074: WAF :: fetched 128 new logs [19-06-2022 01:18:02]15783: WAF :: fetched 84 new logs [19-06-2022 01:19:02]18459: WAF :: fetched 3 new logs [19-06-2022 01:20:02]21152: WAF :: fetched 8 new logs [19-06-2022 01:21:02]23966: WAF :: fetched 5 new logs [19-06-2022 01:22:01]26746: WAF :: fetched 8 new logs [19-06-2022 01:23:02]29520: WAF :: fetched 27 new logs [19-06-2022 01:24:01]32284: WAF :: fetched 95 new logs [19-06-2022 01:25:02]2702: WAF :: fetched 80 new logs [19-06-2022 01:26:01]5624: WAF :: fetched 45 new logs [19-06-2022 01:27:02]8389: WAF :: fetched 24 new logs [19-06-2022 01:28:02]11163: WAF :: fetched 23 new logs [19-06-2022 01:29:01]13962: WAF :: fetched 8 new logs [19-06-2022 01:30:02]17022: WAF :: fetched 129 new logs [19-06-2022 01:31:01]19880: WAF :: fetched 37 new logs [19-06-2022 01:32:01]22853: WAF :: fetched 15 new logs [19-06-2022 01:33:02]25633: WAF :: fetched 13 new logs [19-06-2022 01:34:01]28291: WAF :: fetched 9 new logs [19-06-2022 01:35:02]30987: WAF :: fetched 3 new logs [19-06-2022 01:36:02]1419: WAF :: fetched 63 new logs [19-06-2022 01:37:01]4120: WAF :: fetched 11 new logs [19-06-2022 01:38:02]6888: WAF :: fetched 8 new logs [19-06-2022 01:39:01]9725: WAF :: fetched 1 new logs [19-06-2022 01:40:02]12660: WAF :: fetched 3 new logs [19-06-2022 01:41:02]15497: WAF :: fetched 1 new logs [19-06-2022 01:41:02]15497: Checking for user cron vulnerabilities [19-06-2022 01:44:01]23843: Checking ditributed CMS bruteforce attacks [19-06-2022 01:44:01]23843: WAF :: fetched 2 new logs [19-06-2022 01:45:02]: Checking for definition updates [19-06-2022 01:45:02]26604: WAF :: fetched 2 new logs [19-06-2022 01:46:02]29370: WAF :: fetched 2 new logs [19-06-2022 01:47:01]32026: WAF :: fetched 5 new logs [19-06-2022 01:48:02]2399: WAF :: fetched 6 new logs [19-06-2022 01:49:01]5353: WAF :: fetched 5 new logs [19-06-2022 01:50:02]8463: WAF :: fetched 45 new logs [19-06-2022 01:51:02]11257: WAF :: fetched 3 new logs [19-06-2022 01:52:02]14003: WAF :: fetched 3 new logs [19-06-2022 01:53:02]16720: WAF :: fetched 21 new logs [19-06-2022 01:55:02]22181: WAF :: fetched 1 new logs [19-06-2022 01:57:02]28172: WAF :: fetched 54 new logs [19-06-2022 01:58:01]30971: WAF :: fetched 2 new logs [19-06-2022 02:01:01]7324: WAF :: fetched 1 new logs [19-06-2022 02:02:02]10057: WAF :: fetched 3 new logs [19-06-2022 02:04:01]15431: WAF :: fetched 4 new logs [19-06-2022 02:05:02]18480: WAF :: fetched 6 new logs [19-06-2022 02:06:01]21525: WAF :: fetched 41 new logs [19-06-2022 02:07:02]24182: WAF :: fetched 3 new logs [19-06-2022 02:08:01]26856: WAF :: fetched 2 new logs [19-06-2022 02:09:01]29651: WAF :: fetched 10 new logs [19-06-2022 02:10:02]32542: WAF :: fetched 54 new logs [19-06-2022 02:11:01]3398: WAF :: fetched 4 new logs [19-06-2022 02:12:01]6375: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655615521 [19-06-2022 02:12:01]6375: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 02:12:03]6375: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 02:12:03]6375: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-0212/20220619-021201-Yq6wIXEqymxNfLIGkP2EIQAAAAo [19-06-2022 02:12:03]6375: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 02:12:04]6375: WAF :: fetched 8 new logs [19-06-2022 02:13:02]9298: WAF :: fetched 10 new logs [19-06-2022 02:14:01]12228: WAF :: fetched 13 new logs [19-06-2022 02:15:02]15015: WAF :: fetched 12 new logs [19-06-2022 02:16:02]17840: WAF :: fetched 14 new logs [19-06-2022 02:17:01]20514: WAF :: fetched 16 new logs [19-06-2022 02:18:02]23182: WAF :: fetched 16 new logs [19-06-2022 02:19:01]25848: WAF :: fetched 3 new logs [19-06-2022 02:20:01]28646: WAF :: fetched 5 new logs [19-06-2022 02:21:02]31858: WAF :: fetched 8 new logs [19-06-2022 02:22:01]2360: WAF :: fetched 17 new logs [19-06-2022 02:23:02]5206: WAF :: fetched 10 new logs [19-06-2022 02:24:01]7892: WAF :: fetched 7 new logs [19-06-2022 02:25:02]10637: WAF :: fetched 8 new logs [19-06-2022 02:26:01]13537: WAF :: fetched 14 new logs [19-06-2022 02:27:01]16535: WAF :: fetched 13 new logs [19-06-2022 02:28:02]19286: WAF :: fetched 1 new logs [19-06-2022 02:29:02]21907: WAF :: fetched 2 new logs [19-06-2022 02:30:01]24593: WAF :: fetched 2 new logs [19-06-2022 02:31:02]27435: WAF :: fetched 5 new logs [19-06-2022 02:32:01]30212: WAF :: fetched 6 new logs [19-06-2022 02:33:02]484: WAF :: fetched 8 new logs [19-06-2022 02:34:01]3269: WAF :: fetched 5 new logs [19-06-2022 02:35:02]6097: WAF :: fetched 3 new logs [19-06-2022 02:36:01]8919: WAF :: fetched 3 new logs [19-06-2022 02:37:02]11994: WAF :: fetched 3 new logs [19-06-2022 02:38:01]14702: WAF :: fetched 4 new logs [19-06-2022 02:39:02]17472: WAF :: fetched 7 new logs [19-06-2022 02:40:02]20136: WAF :: fetched 4 new logs [19-06-2022 02:41:01]22951: WAF :: fetched 2 new logs [19-06-2022 02:41:01]22951: Checking for user cron vulnerabilities [19-06-2022 02:42:01]25612: WAF :: fetched 5 new logs [19-06-2022 02:43:02]28298: WAF :: fetched 3 new logs [19-06-2022 02:44:01]30947: Checking ditributed CMS bruteforce attacks [19-06-2022 02:44:05]30947: WAF :: fetched 3 new logs [19-06-2022 02:45:02]1156: WAF :: fetched 3 new logs [19-06-2022 02:46:02]4027: WAF :: fetched 11 new logs [19-06-2022 02:47:01]6728: WAF :: fetched 8 new logs [19-06-2022 02:48:02]9518: WAF :: fetched 4 new logs [19-06-2022 02:49:01]12178: WAF :: fetched 6 new logs [19-06-2022 02:50:02]14887: WAF :: fetched 6 new logs [19-06-2022 02:51:01]17729: WAF :: fetched 7 new logs [19-06-2022 02:53:02]23204: WAF :: fetched 5 new logs [19-06-2022 02:53:03]23205: Updated license status via CDN [19-06-2022 02:54:02]25859: WAF :: fetched 1 new logs [19-06-2022 02:58:02]4449: WAF :: fetched 2 new logs [19-06-2022 02:59:02]7226: WAF :: fetched 1 new logs [19-06-2022 03:00:01]9609: WAF :: fetched 3 new logs [19-06-2022 03:01:02]12893: WAF :: fetched 1 new logs [19-06-2022 03:01:25]9609: Found and updated 32 CMS installations [19-06-2022 03:01:37]9609: Wordpress installation #1 brgestor.com.br has errors [19-06-2022 03:02:01]9609: Wordpress installation #5 meusiteimobiliario.com.br has errors [19-06-2022 03:02:16]9609: Wordpress installation #9 oabilheus.org.br has errors [19-06-2022 03:02:45]9609: Wordpress installation #15 contratopronto.net has errors [19-06-2022 03:03:20]9609: Wordpress installation #17 ajuda.meusiteimobiliario.com.br has errors [19-06-2022 03:03:36]18442: Wordpress installation #15 contratopronto.net has errors [19-06-2022 03:04:02]21490: WAF :: fetched 2 new logs [19-06-2022 03:04:14]9609: Wordpress installation #24 janehildabadaroart.com.br has errors [19-06-2022 03:04:15]18442: Wordpress installation #24 janehildabadaroart.com.br has errors [19-06-2022 03:04:35]9609: Wordpress installation #26 bibokinha.idcartao.com has errors [19-06-2022 03:04:35]18442: Wordpress installation #26 bibokinha.idcartao.com has errors [19-06-2022 03:04:54]9609: Wordpress installation #28 pricilamartins.com has errors [19-06-2022 03:04:54]18442: Wordpress installation #28 pricilamartins.com has errors [19-06-2022 03:05:12]18442: Wordpress installation #32 site.meucartaovirtual.com.br has errors [19-06-2022 03:05:13]9609: Wordpress installation #32 site.meucartaovirtual.com.br has errors [19-06-2022 03:05:34]18442: Wordpress installation #34 fazendayrere.com.br has errors [19-06-2022 03:05:34]9609: Wordpress installation #34 fazendayrere.com.br has errors [19-06-2022 03:05:51]9609: Wordpress installation #35 luanbrasil.com.br has errors [19-06-2022 03:05:51]18442: Wordpress installation #35 luanbrasil.com.br has errors [19-06-2022 03:06:05]18442: Wordpress installation #36 suryaeventos.com.br has errors [19-06-2022 03:06:05]9609: Wordpress installation #36 suryaeventos.com.br has errors [19-06-2022 03:06:21]18442: Wordpress installation #37 site.zipcard.app has errors [19-06-2022 03:06:21]9609: Wordpress installation #37 site.zipcard.app has errors [19-06-2022 03:06:42]18442: Sending CMS version vulnerability report emails to cpanel users [19-06-2022 03:06:42]9609: Sending CMS version vulnerability report emails to cpanel users [19-06-2022 03:06:45]9609: Checking wordpress installations for suspicious directories [19-06-2022 03:06:45]18442: Checking wordpress installations for suspicious directories [19-06-2022 03:07:01]30378: WAF :: fetched 4 new logs [19-06-2022 03:08:02]913: WAF :: fetched 3 new logs [19-06-2022 03:09:01]3622: WAF :: fetched 8 new logs [19-06-2022 03:10:02]6414: WAF :: fetched 9 new logs [19-06-2022 03:11:02]9230: WAF :: fetched 14 new logs [19-06-2022 03:12:01]11912: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655619121 [19-06-2022 03:12:01]11912: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 03:12:03]11912: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 03:12:05]11912: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-0312/20220619-031201-Yq6-MYdhntv1rAOOyw0P9gAAAA0 [19-06-2022 03:12:05]11912: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 03:12:05]11912: WAF :: fetched 7 new logs [19-06-2022 03:13:02]14759: WAF :: fetched 8 new logs [19-06-2022 03:15:01]20250: WAF :: fetched 8 new logs [19-06-2022 03:16:01]23051: WAF :: fetched 3 new logs [19-06-2022 03:26:02]18305: WAF :: fetched 3 new logs [19-06-2022 03:27:02]20961: WAF :: fetched 6 new logs [19-06-2022 03:28:02]23678: WAF :: fetched 4 new logs [19-06-2022 03:29:01]26319: WAF :: fetched 1 new logs [19-06-2022 03:30:02]29063: WAF :: fetched 1 new logs [19-06-2022 03:31:01]31847: WAF :: fetched 3 new logs [19-06-2022 03:32:02]2190: WAF :: fetched 4 new logs [19-06-2022 03:33:02]4929: WAF :: fetched 6 new logs [19-06-2022 03:34:01]7692: WAF :: fetched 6 new logs [19-06-2022 03:35:02]10409: WAF :: fetched 8 new logs [19-06-2022 03:36:01]13454: WAF :: fetched 13 new logs [19-06-2022 03:37:01]16137: WAF :: fetched 14 new logs [19-06-2022 03:38:02]18909: WAF :: fetched 9 new logs [19-06-2022 03:39:01]21581: WAF :: fetched 16 new logs [19-06-2022 03:40:02]24294: WAF :: fetched 16 new logs [19-06-2022 03:41:01]27098: WAF :: fetched 7 new logs [19-06-2022 03:41:01]27098: Checking for user cron vulnerabilities [19-06-2022 03:42:01]29892: WAF :: fetched 10 new logs [19-06-2022 03:43:02]32616: WAF :: fetched 14 new logs [19-06-2022 03:44:01]29036: Checking ditributed CMS bruteforce attacks [19-06-2022 03:44:04]29036: WAF :: fetched 17 new logs [19-06-2022 03:45:02]13898: WAF :: fetched 7 new logs [19-06-2022 03:46:01]564: WAF :: fetched 10 new logs [19-06-2022 03:47:02]12867: WAF :: fetched 9 new logs [19-06-2022 03:48:01]15545: WAF :: fetched 12 new logs [19-06-2022 03:49:01]18258: WAF :: fetched 3 new logs [19-06-2022 03:50:02]20970: WAF :: fetched 2 new logs [19-06-2022 03:57:02]7691: WAF :: fetched 1 new logs [19-06-2022 03:59:01]13788: WAF :: fetched 1 new logs [19-06-2022 04:00:02]16738: WAF :: fetched 1 new logs [19-06-2022 04:02:02]22876: WAF :: fetched 7 new logs [19-06-2022 04:04:01]28214: WAF :: fetched 3 new logs [19-06-2022 04:05:02]30978: WAF :: fetched 2 new logs [19-06-2022 04:06:01]1365: WAF :: fetched 7 new logs [19-06-2022 04:07:02]4114: WAF :: fetched 2 new logs [19-06-2022 04:08:02]6819: WAF :: fetched 1 new logs [19-06-2022 04:09:01]9515: WAF :: fetched 9 new logs [19-06-2022 04:10:02]12271: WAF :: fetched 7 new logs [19-06-2022 04:11:01]15091: WAF :: fetched 7 new logs [19-06-2022 04:12:01]17924: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655622721 [19-06-2022 04:12:01]17924: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 04:12:03]17924: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 04:12:05]17924: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-0412/20220619-041201-Yq7MQaWcXB1cdQyT_IpNDwAAAAI [19-06-2022 04:12:05]17924: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 04:12:05]17924: WAF :: fetched 8 new logs [19-06-2022 04:13:02]20674: WAF :: fetched 14 new logs [19-06-2022 04:14:01]23496: WAF :: fetched 16 new logs [19-06-2022 04:15:02]26200: WAF :: fetched 12 new logs [19-06-2022 04:16:02]29030: WAF :: fetched 9 new logs [19-06-2022 04:17:01]31928: WAF :: fetched 6 new logs [19-06-2022 04:18:02]2315: WAF :: fetched 3 new logs [19-06-2022 04:19:01]5311: WAF :: fetched 2 new logs [19-06-2022 04:26:02]25165: WAF :: fetched 2 new logs [19-06-2022 04:27:02]28030: WAF :: fetched 1 new logs [19-06-2022 04:28:01]30986: WAF :: fetched 1 new logs [19-06-2022 04:29:02]1378: WAF :: fetched 2 new logs [19-06-2022 04:31:01]6990: WAF :: fetched 2 new logs [19-06-2022 04:32:02]9717: WAF :: fetched 1 new logs [19-06-2022 04:35:02]17739: WAF :: fetched 1 new logs [19-06-2022 04:39:02]28811: WAF :: fetched 1 new logs [19-06-2022 04:41:02]2399: Checking for user cron vulnerabilities [19-06-2022 04:44:01]10873: Checking ditributed CMS bruteforce attacks [19-06-2022 04:47:01]19494: WAF :: fetched 3 new logs [19-06-2022 04:48:02]22348: WAF :: fetched 4 new logs [19-06-2022 04:49:01]25231: WAF :: fetched 6 new logs [19-06-2022 04:50:02]28001: WAF :: fetched 8 new logs [19-06-2022 04:51:01]30822: WAF :: fetched 3 new logs [19-06-2022 04:52:02]1136: WAF :: fetched 4 new logs [19-06-2022 04:53:01]3851: WAF :: fetched 3 new logs [19-06-2022 04:54:01]6567: WAF :: fetched 3 new logs [19-06-2022 04:55:02]9270: WAF :: fetched 6 new logs [19-06-2022 04:56:01]12076: WAF :: fetched 10 new logs [19-06-2022 04:57:02]14754: WAF :: fetched 2 new logs [19-06-2022 04:59:01]20080: WAF :: fetched 1 new logs [19-06-2022 05:00:01]22483: WAF :: fetched 6 new logs [19-06-2022 05:01:01]25687: WAF :: fetched 3 new logs [19-06-2022 05:01:41]25679: Starting weekly scan on files updated within a week [19-06-2022 05:02:02]28385: WAF :: fetched 5 new logs [19-06-2022 05:03:02]31056: WAF :: fetched 5 new logs [19-06-2022 05:04:01]1320: WAF :: fetched 7 new logs [19-06-2022 05:05:02]4070: WAF :: fetched 6 new logs [19-06-2022 05:06:01]6893: WAF :: fetched 6 new logs [19-06-2022 05:07:01]9540: WAF :: fetched 2 new logs [19-06-2022 05:08:02]12233: WAF :: fetched 5 new logs [19-06-2022 05:09:01]14887: WAF :: fetched 5 new logs [19-06-2022 05:10:02]17614: WAF :: fetched 5 new logs [19-06-2022 05:11:01]20081: WAF :: fetched 6 new logs [19-06-2022 05:12:02]23076: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655626322 [19-06-2022 05:12:02]23076: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 05:12:04]23076: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 05:12:04]23076: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-0512/20220619-051202-Yq7aUnshe6oWOtdNsFzmaQAAAAc [19-06-2022 05:12:04]23076: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 05:12:04]23076: WAF :: fetched 5 new logs [19-06-2022 05:13:01]25713: WAF :: fetched 4 new logs [19-06-2022 05:14:01]28386: WAF :: fetched 9 new logs [19-06-2022 05:15:02]31098: WAF :: fetched 7 new logs [19-06-2022 05:16:01]1491: WAF :: fetched 8 new logs [19-06-2022 05:17:02]4208: WAF :: fetched 8 new logs [19-06-2022 05:18:02]6933: WAF :: fetched 8 new logs [19-06-2022 05:19:01]9601: WAF :: fetched 11 new logs [19-06-2022 05:20:02]12327: WAF :: fetched 13 new logs [19-06-2022 05:21:01]15080: WAF :: fetched 20 new logs [19-06-2022 05:22:02]17791: WAF :: fetched 17 new logs [19-06-2022 05:23:01]20448: WAF :: fetched 7 new logs [19-06-2022 05:24:02]23092: WAF :: fetched 11 new logs [19-06-2022 05:25:01]25802: WAF :: fetched 15 new logs [19-06-2022 05:26:01]28632: WAF :: fetched 17 new logs [19-06-2022 05:27:01]31510: WAF :: fetched 19 new logs [19-06-2022 05:28:02]1791: WAF :: fetched 8 new logs [19-06-2022 05:29:01]4632: WAF :: fetched 6 new logs [19-06-2022 05:30:01]7369: WAF :: fetched 4 new logs [19-06-2022 05:31:02]10296: WAF :: fetched 5 new logs [19-06-2022 05:32:01]13007: WAF :: fetched 8 new logs [19-06-2022 05:33:02]15805: WAF :: fetched 3 new logs [19-06-2022 05:34:01]18456: WAF :: fetched 1 new logs [19-06-2022 05:36:02]23976: WAF :: fetched 1 new logs [19-06-2022 05:39:01]32009: WAF :: fetched 6 new logs [19-06-2022 05:40:02]2302: WAF :: fetched 1 new logs [19-06-2022 05:41:01]5188: Checking for user cron vulnerabilities [19-06-2022 05:42:01]7912: WAF :: fetched 1 new logs [19-06-2022 05:43:01]10551: WAF :: fetched 2 new logs [19-06-2022 05:44:02]13288: Checking ditributed CMS bruteforce attacks [19-06-2022 05:44:02]13288: WAF :: fetched 1 new logs [19-06-2022 05:46:01]18764: WAF :: fetched 4 new logs [19-06-2022 05:47:02]21420: WAF :: fetched 4 new logs [19-06-2022 05:50:02]29548: WAF :: fetched 5 new logs [19-06-2022 05:51:01]32189: WAF :: fetched 2 new logs [19-06-2022 05:52:02]2743: WAF :: fetched 4 new logs [19-06-2022 05:53:02]5481: WAF :: fetched 2 new logs [19-06-2022 05:55:02]10793: WAF :: fetched 4 new logs [19-06-2022 05:56:02]13522: WAF :: fetched 5 new logs [19-06-2022 05:57:01]16226: WAF :: fetched 6 new logs [19-06-2022 05:58:02]19060: WAF :: fetched 5 new logs [19-06-2022 05:59:01]22074: WAF :: fetched 6 new logs [19-06-2022 06:00:02]24816: WAF :: fetched 5 new logs [19-06-2022 06:01:01]28068: WAF :: fetched 9 new logs [19-06-2022 06:02:01]30821: WAF :: fetched 3 new logs [19-06-2022 06:03:01]1110: WAF :: fetched 1 new logs [19-06-2022 06:08:01]14868: WAF :: fetched 1 new logs [19-06-2022 06:09:02]17565: WAF :: fetched 3 new logs [19-06-2022 06:12:02]25917: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655629922 [19-06-2022 06:12:02]25917: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 06:12:04]25917: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 06:12:04]25917: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-0612/20220619-061202-Yq7oYrV8hn54pN-1b4u2PQAAABA [19-06-2022 06:12:04]25917: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 06:12:04]25917: WAF :: fetched 1 new logs [19-06-2022 06:19:02]12749: WAF :: fetched 1 new logs [19-06-2022 06:21:02]18235: WAF :: fetched 1 new logs [19-06-2022 06:22:02]20971: WAF :: fetched 2 new logs [19-06-2022 06:23:01]23615: WAF :: fetched 1 new logs [19-06-2022 06:25:01]29036: WAF :: fetched 1 new logs [19-06-2022 06:26:02]31780: WAF :: fetched 4 new logs [19-06-2022 06:27:02]2275: WAF :: fetched 1 new logs [19-06-2022 06:29:02]7732: WAF :: fetched 2 new logs [19-06-2022 06:30:01]10411: WAF :: fetched 2 new logs [19-06-2022 06:31:01]13132: WAF :: fetched 4 new logs [19-06-2022 06:32:02]15917: WAF :: fetched 7 new logs [19-06-2022 06:33:01]18599: WAF :: fetched 5 new logs [19-06-2022 06:34:02]21251: WAF :: fetched 2 new logs [19-06-2022 06:35:02]23929: WAF :: fetched 3 new logs [19-06-2022 06:36:01]26713: WAF :: fetched 7 new logs [19-06-2022 06:37:02]29479: WAF :: fetched 6 new logs [19-06-2022 06:38:01]32158: WAF :: fetched 2 new logs [19-06-2022 06:39:02]2469: WAF :: fetched 5 new logs [19-06-2022 06:40:02]5267: WAF :: fetched 12 new logs [19-06-2022 06:41:02]8000: WAF :: fetched 16 new logs [19-06-2022 06:41:02]8000: Checking for user cron vulnerabilities [19-06-2022 06:42:01]10438: WAF :: fetched 9 new logs [19-06-2022 06:43:02]13471: WAF :: fetched 13 new logs [19-06-2022 06:44:01]16144: Checking ditributed CMS bruteforce attacks [19-06-2022 06:44:01]16144: WAF :: fetched 12 new logs [19-06-2022 06:45:02]18886: WAF :: fetched 10 new logs [19-06-2022 06:46:01]21565: WAF :: fetched 8 new logs [19-06-2022 06:47:01]24337: WAF :: fetched 3 new logs [19-06-2022 06:48:02]27076: WAF :: fetched 3 new logs [19-06-2022 06:52:02]5682: WAF :: fetched 1 new logs [19-06-2022 06:53:01]8343: WAF :: fetched 1 new logs [19-06-2022 06:55:02]13674: WAF :: fetched 1 new logs [19-06-2022 06:56:01]16388: WAF :: fetched 3 new logs [19-06-2022 06:57:02]19167: WAF :: fetched 7 new logs [19-06-2022 06:58:01]21809: WAF :: fetched 9 new logs [19-06-2022 06:59:02]24504: WAF :: fetched 5 new logs [19-06-2022 07:00:02]26917: WAF :: fetched 6 new logs [19-06-2022 07:01:01]30085: WAF :: fetched 9 new logs [19-06-2022 07:02:02]456: WAF :: fetched 13 new logs [19-06-2022 07:03:01]3205: WAF :: fetched 3 new logs [19-06-2022 07:04:02]5954: WAF :: fetched 1 new logs [19-06-2022 07:06:02]11387: WAF :: fetched 2 new logs [19-06-2022 07:07:01]14165: WAF :: fetched 18 new logs [19-06-2022 07:08:02]16912: WAF :: fetched 5 new logs [19-06-2022 07:09:01]19612: WAF :: fetched 21 new logs [19-06-2022 07:10:02]22339: WAF :: fetched 4 new logs [19-06-2022 07:11:02]25087: WAF :: fetched 25 new logs [19-06-2022 07:12:02]27913: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655633522 [19-06-2022 07:12:02]27913: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 07:12:04]27913: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 07:12:04]27913: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-0712/20220619-071202-Yq72cmuyODS1HOZ0znanlgAAAAc [19-06-2022 07:12:04]27913: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 07:12:04]27913: WAF :: fetched 29 new logs [19-06-2022 07:13:02]30611: WAF :: fetched 10 new logs [19-06-2022 07:14:01]900: WAF :: fetched 1 new logs [19-06-2022 07:15:01]3662: WAF :: fetched 11 new logs [19-06-2022 07:16:02]6197: WAF :: fetched 30 new logs [19-06-2022 07:17:01]9384: WAF :: fetched 36 new logs [19-06-2022 07:18:02]12090: WAF :: fetched 25 new logs [19-06-2022 07:19:02]14755: WAF :: fetched 11 new logs [19-06-2022 07:20:01]17469: WAF :: fetched 8 new logs [19-06-2022 07:21:02]20233: WAF :: fetched 12 new logs [19-06-2022 07:22:01]22952: WAF :: fetched 16 new logs [19-06-2022 07:23:02]25682: WAF :: fetched 17 new logs [19-06-2022 07:24:01]28209: WAF :: fetched 28 new logs [19-06-2022 07:25:02]31033: WAF :: fetched 8 new logs [19-06-2022 07:26:01]1327: WAF :: fetched 7 new logs [19-06-2022 07:28:02]6919: WAF :: fetched 15 new logs [19-06-2022 07:29:02]9600: WAF :: fetched 20 new logs [19-06-2022 07:30:01]12267: WAF :: fetched 17 new logs [19-06-2022 07:31:01]14989: WAF :: fetched 18 new logs [19-06-2022 07:32:02]17773: WAF :: fetched 17 new logs [19-06-2022 07:34:02]23156: WAF :: fetched 7 new logs [19-06-2022 07:35:02]25852: WAF :: fetched 17 new logs [19-06-2022 07:36:02]28548: WAF :: fetched 10 new logs [19-06-2022 07:37:01]31277: WAF :: fetched 16 new logs [19-06-2022 07:38:02]1539: WAF :: fetched 12 new logs [19-06-2022 07:39:01]4250: WAF :: fetched 18 new logs [19-06-2022 07:40:02]7021: WAF :: fetched 14 new logs [19-06-2022 07:41:02]9667: WAF :: fetched 9 new logs [19-06-2022 07:41:02]9667: Checking for user cron vulnerabilities [19-06-2022 07:42:01]12386: WAF :: fetched 1 new logs [19-06-2022 07:43:02]15076: WAF :: fetched 11 new logs [19-06-2022 07:44:01]17756: Checking ditributed CMS bruteforce attacks [19-06-2022 07:45:01]: Checking for definition updates [19-06-2022 07:45:01]20437: WAF :: fetched 10 new logs [19-06-2022 07:46:01]23149: WAF :: fetched 5 new logs [19-06-2022 07:47:02]25916: WAF :: fetched 15 new logs [19-06-2022 07:48:02]28594: WAF :: fetched 10 new logs [19-06-2022 07:53:02]9846: WAF :: fetched 4 new logs [19-06-2022 07:54:01]12504: WAF :: fetched 6 new logs [19-06-2022 07:55:02]15239: WAF :: fetched 1 new logs [19-06-2022 07:56:01]17978: WAF :: fetched 26 new logs [19-06-2022 07:57:02]20733: WAF :: fetched 11 new logs [19-06-2022 07:58:01]23426: WAF :: fetched 26 new logs [19-06-2022 07:59:02]26157: WAF :: fetched 25 new logs [19-06-2022 08:00:02]28552: WAF :: fetched 25 new logs [19-06-2022 08:01:01]31743: WAF :: fetched 31 new logs [19-06-2022 08:02:02]2207: WAF :: fetched 23 new logs [19-06-2022 08:03:02]4967: WAF :: fetched 8 new logs [19-06-2022 08:04:01]7667: WAF :: fetched 15 new logs [19-06-2022 08:05:01]10343: WAF :: fetched 7 new logs [19-06-2022 08:06:02]13079: WAF :: fetched 25 new logs [19-06-2022 08:07:01]15820: WAF :: fetched 38 new logs [19-06-2022 08:08:02]18548: WAF :: fetched 36 new logs [19-06-2022 08:09:02]21183: WAF :: fetched 27 new logs [19-06-2022 08:10:01]23889: WAF :: fetched 13 new logs [19-06-2022 08:11:02]26632: WAF :: fetched 3 new logs [19-06-2022 08:12:02]29372: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655637122 [19-06-2022 08:12:02]29372: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 08:12:04]29372: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 08:12:04]29372: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-0812/20220619-081202-Yq8EgjQh31oiIdIPwf0f2QAAAA0 [19-06-2022 08:12:04]29372: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 08:12:04]29372: WAF :: fetched 7 new logs [19-06-2022 08:13:01]32049: WAF :: fetched 8 new logs [19-06-2022 08:14:02]2333: WAF :: fetched 13 new logs [19-06-2022 08:15:01]5090: WAF :: fetched 5 new logs [19-06-2022 08:16:02]7832: WAF :: fetched 8 new logs [19-06-2022 08:17:01]10568: WAF :: fetched 4 new logs [19-06-2022 08:18:02]13249: WAF :: fetched 5 new logs [19-06-2022 08:19:01]15918: WAF :: fetched 7 new logs [19-06-2022 08:20:02]18613: WAF :: fetched 9 new logs [19-06-2022 08:21:01]21362: WAF :: fetched 7 new logs [19-06-2022 08:22:02]24143: WAF :: fetched 2 new logs [19-06-2022 08:23:02]26843: WAF :: fetched 5 new logs [19-06-2022 08:24:02]29528: WAF :: fetched 5 new logs [19-06-2022 08:25:02]32182: WAF :: fetched 4 new logs [19-06-2022 08:26:01]2541: WAF :: fetched 6 new logs [19-06-2022 08:27:02]5402: WAF :: fetched 5 new logs [19-06-2022 08:28:01]8092: WAF :: fetched 10 new logs [19-06-2022 08:29:02]10768: WAF :: fetched 4 new logs [19-06-2022 08:30:02]13445: WAF :: fetched 5 new logs [19-06-2022 08:31:01]16190: WAF :: fetched 1 new logs [19-06-2022 08:32:02]18968: WAF :: fetched 5 new logs [19-06-2022 08:33:01]21655: WAF :: fetched 8 new logs [19-06-2022 08:34:02]24328: WAF :: fetched 20 new logs [19-06-2022 08:35:01]27028: WAF :: fetched 20 new logs [19-06-2022 08:36:02]29821: WAF :: fetched 9 new logs [19-06-2022 08:37:02]32552: WAF :: fetched 4 new logs [19-06-2022 08:38:01]2884: WAF :: fetched 4 new logs [19-06-2022 08:39:01]5637: WAF :: fetched 1 new logs [19-06-2022 08:40:02]8345: WAF :: fetched 1 new logs [19-06-2022 08:41:01]11017: Checking for user cron vulnerabilities [19-06-2022 08:43:02]16463: WAF :: fetched 3 new logs [19-06-2022 08:44:01]19153: Checking ditributed CMS bruteforce attacks [19-06-2022 08:48:01]29995: WAF :: fetched 1 new logs [19-06-2022 08:50:02]2986: WAF :: fetched 1 new logs [19-06-2022 08:53:01]11269: WAF :: fetched 2 new logs [19-06-2022 08:54:02]13980: WAF :: fetched 44 new logs [19-06-2022 08:57:02]22141: WAF :: fetched 1 new logs [19-06-2022 09:04:02]9207: WAF :: fetched 1 new logs [19-06-2022 09:06:02]14784: WAF :: fetched 1 new logs [19-06-2022 09:07:02]17621: WAF :: fetched 1 new logs [19-06-2022 09:09:02]23032: WAF :: fetched 1 new logs [19-06-2022 09:11:02]28508: WAF :: fetched 1 new logs [19-06-2022 09:12:02]31268: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655640722 [19-06-2022 09:12:02]31268: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 09:12:04]31268: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 09:12:04]31268: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-0912/20220619-091202-Yq8Sko-d2H_OZnzzwOknQgAAABE [19-06-2022 09:12:04]31268: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 09:12:04]31268: WAF :: fetched 1 new logs [19-06-2022 09:13:02]1549: WAF :: fetched 1 new logs [19-06-2022 09:15:01]7022: WAF :: fetched 1 new logs [19-06-2022 09:19:01]17889: WAF :: fetched 1 new logs [19-06-2022 09:20:01]20601: WAF :: fetched 4 new logs [19-06-2022 09:21:02]23393: WAF :: fetched 4 new logs [19-06-2022 09:22:01]26166: WAF :: fetched 7 new logs [19-06-2022 09:23:02]28881: WAF :: fetched 6 new logs [19-06-2022 09:24:02]31531: WAF :: fetched 7 new logs [19-06-2022 09:25:01]1794: WAF :: fetched 2 new logs [19-06-2022 09:26:01]4623: WAF :: fetched 2 new logs [19-06-2022 09:27:02]7424: WAF :: fetched 1 new logs [19-06-2022 09:28:01]10100: WAF :: fetched 1 new logs [19-06-2022 09:39:02]7722: WAF :: fetched 4 new logs [19-06-2022 09:40:02]10413: WAF :: fetched 6 new logs [19-06-2022 09:41:01]13101: WAF :: fetched 11 new logs [19-06-2022 09:41:01]13101: Checking for user cron vulnerabilities [19-06-2022 09:42:02]16013: WAF :: fetched 10 new logs [19-06-2022 09:43:01]18707: WAF :: fetched 11 new logs [19-06-2022 09:44:02]21455: Checking ditributed CMS bruteforce attacks [19-06-2022 09:44:02]21455: WAF :: fetched 6 new logs [19-06-2022 09:45:01]24133: WAF :: fetched 5 new logs [19-06-2022 09:46:01]26943: WAF :: fetched 10 new logs [19-06-2022 09:47:01]29687: WAF :: fetched 9 new logs [19-06-2022 09:48:02]32398: WAF :: fetched 5 new logs [19-06-2022 09:49:01]2704: WAF :: fetched 3 new logs [19-06-2022 09:50:02]5530: WAF :: fetched 4 new logs [19-06-2022 09:51:02]8264: WAF :: fetched 1 new logs [19-06-2022 09:53:02]13671: WAF :: fetched 2 new logs [19-06-2022 09:54:02]16416: WAF :: fetched 2 new logs [19-06-2022 09:59:01]29981: WAF :: fetched 1 new logs [19-06-2022 10:00:02]32387: WAF :: fetched 1 new logs [19-06-2022 10:01:02]3258: WAF :: fetched 5 new logs [19-06-2022 10:02:01]6131: WAF :: fetched 6 new logs [19-06-2022 10:03:02]8872: WAF :: fetched 5 new logs [19-06-2022 10:04:02]11513: WAF :: fetched 4 new logs [19-06-2022 10:05:01]14237: WAF :: fetched 4 new logs [19-06-2022 10:06:02]16985: WAF :: fetched 7 new logs [19-06-2022 10:07:01]19739: WAF :: fetched 7 new logs [19-06-2022 10:08:02]22405: WAF :: fetched 3 new logs [19-06-2022 10:09:01]25097: WAF :: fetched 4 new logs [19-06-2022 10:10:02]27845: WAF :: fetched 8 new logs [19-06-2022 10:11:02]30576: WAF :: fetched 9 new logs [19-06-2022 10:12:01]960: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655644321 [19-06-2022 10:12:01]960: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 10:12:03]960: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 10:12:04]960: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-1012/20220619-101201-Yq8goahnj2ZcPTg0sahHuwAAAAM [19-06-2022 10:12:04]960: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 10:12:04]960: WAF :: fetched 8 new logs [19-06-2022 10:13:02]3728: WAF :: fetched 6 new logs [19-06-2022 10:14:01]6498: WAF :: fetched 7 new logs [19-06-2022 10:15:01]9208: WAF :: fetched 10 new logs [19-06-2022 10:16:02]11960: WAF :: fetched 7 new logs [19-06-2022 10:17:01]14778: WAF :: fetched 12 new logs [19-06-2022 10:18:02]17568: WAF :: fetched 14 new logs [19-06-2022 10:19:01]20278: WAF :: fetched 14 new logs [19-06-2022 10:20:01]23004: WAF :: fetched 11 new logs [19-06-2022 10:21:02]25881: WAF :: fetched 4 new logs [19-06-2022 10:22:01]28679: WAF :: fetched 6 new logs [19-06-2022 10:23:01]31388: WAF :: fetched 4 new logs [19-06-2022 10:24:01]1741: WAF :: fetched 7 new logs [19-06-2022 10:25:02]4570: WAF :: fetched 5 new logs [19-06-2022 10:26:02]7362: WAF :: fetched 32 new logs [19-06-2022 10:27:01]10133: WAF :: fetched 67 new logs [19-06-2022 10:28:02]12830: WAF :: fetched 1 new logs [19-06-2022 10:30:02]18192: WAF :: fetched 1 new logs [19-06-2022 10:32:02]23717: WAF :: fetched 5 new logs [19-06-2022 10:33:01]26473: WAF :: fetched 6 new logs [19-06-2022 10:34:01]29140: WAF :: fetched 5 new logs [19-06-2022 10:35:01]31851: WAF :: fetched 36 new logs [19-06-2022 10:36:02]2196: WAF :: fetched 8 new logs [19-06-2022 10:37:01]5027: WAF :: fetched 7 new logs [19-06-2022 10:38:02]7736: WAF :: fetched 2 new logs [19-06-2022 10:39:02]10396: WAF :: fetched 1 new logs [19-06-2022 10:41:02]15912: Checking for user cron vulnerabilities [19-06-2022 10:42:02]18682: WAF :: fetched 15 new logs [19-06-2022 10:43:01]21370: WAF :: fetched 18 new logs [19-06-2022 10:44:01]24064: Checking ditributed CMS bruteforce attacks [19-06-2022 10:44:02]24064: WAF :: fetched 13 new logs [19-06-2022 10:45:01]26818: WAF :: fetched 15 new logs [19-06-2022 10:46:02]29539: WAF :: fetched 22 new logs [19-06-2022 10:47:02]32319: WAF :: fetched 14 new logs [19-06-2022 10:48:01]2654: WAF :: fetched 4 new logs [19-06-2022 10:49:01]5442: WAF :: fetched 5 new logs [19-06-2022 10:50:02]8148: WAF :: fetched 2 new logs [19-06-2022 10:51:01]10880: WAF :: fetched 7 new logs [19-06-2022 10:52:02]13668: WAF :: fetched 4 new logs [19-06-2022 10:53:01]16330: WAF :: fetched 6 new logs [19-06-2022 10:54:01]19012: WAF :: fetched 23 new logs [19-06-2022 10:55:02]21679: WAF :: fetched 103 new logs [19-06-2022 10:56:01]24380: WAF :: fetched 110 new logs [19-06-2022 10:57:02]27150: WAF :: fetched 87 new logs [19-06-2022 10:58:01]29866: WAF :: fetched 58 new logs [19-06-2022 10:59:02]32547: WAF :: fetched 51 new logs [19-06-2022 11:00:02]2584: WAF :: fetched 44 new logs [19-06-2022 11:01:02]5849: WAF :: fetched 5 new logs [19-06-2022 11:02:01]8608: WAF :: fetched 1 new logs [19-06-2022 11:03:02]11302: WAF :: fetched 1 new logs [19-06-2022 11:04:01]13997: WAF :: fetched 2 new logs [19-06-2022 11:07:01]22122: WAF :: fetched 1 new logs [19-06-2022 11:07:48]22291: Performed RBL check for 23.111.136.34. [19-06-2022 11:10:02]30304: WAF :: fetched 2 new logs [19-06-2022 11:12:01]3354: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655647921 [19-06-2022 11:12:01]3354: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 11:12:03]3354: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 11:12:04]3354: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-1112/20220619-111201-Yq8usT17G3MBrP8ZqsvrqAAAABk [19-06-2022 11:12:04]3354: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 11:12:04]3354: WAF :: fetched 2 new logs [19-06-2022 11:14:01]8895: WAF :: fetched 2 new logs [19-06-2022 11:15:02]11572: WAF :: fetched 1 new logs [19-06-2022 11:24:01]3709: WAF :: fetched 2 new logs [19-06-2022 11:25:01]6495: WAF :: fetched 2 new logs [19-06-2022 11:26:02]9256: WAF :: fetched 6 new logs [19-06-2022 11:27:02]11968: WAF :: fetched 3 new logs [19-06-2022 11:28:01]14759: WAF :: fetched 7 new logs [19-06-2022 11:29:02]17484: WAF :: fetched 11 new logs [19-06-2022 11:30:01]20119: WAF :: fetched 6 new logs [19-06-2022 11:31:02]22884: WAF :: fetched 7 new logs [19-06-2022 11:32:01]25584: WAF :: fetched 12 new logs [19-06-2022 11:33:02]28418: WAF :: fetched 5 new logs [19-06-2022 11:34:02]31096: WAF :: fetched 2 new logs [19-06-2022 11:35:02]1389: WAF :: fetched 2 new logs [19-06-2022 11:36:01]4188: WAF :: fetched 3 new logs [19-06-2022 11:38:02]9685: WAF :: fetched 2 new logs [19-06-2022 11:39:01]12343: WAF :: fetched 1 new logs [19-06-2022 11:41:02]17848: WAF :: fetched 1 new logs [19-06-2022 11:41:02]17848: Checking for user cron vulnerabilities [19-06-2022 11:43:02]23289: WAF :: fetched 38 new logs [19-06-2022 11:44:01]26035: Checking ditributed CMS bruteforce attacks [19-06-2022 11:44:01]26035: WAF :: fetched 85 new logs [19-06-2022 11:45:02]28727: WAF :: fetched 2 new logs [19-06-2022 11:46:02]31471: WAF :: fetched 1 new logs [19-06-2022 11:47:01]1730: WAF :: fetched 3 new logs [19-06-2022 11:49:01]7265: WAF :: fetched 1 new logs [19-06-2022 11:53:02]18216: WAF :: fetched 1 new logs [19-06-2022 11:54:02]20916: WAF :: fetched 4 new logs [19-06-2022 11:55:01]23617: WAF :: fetched 5 new logs [19-06-2022 11:56:01]26391: WAF :: fetched 8 new logs [19-06-2022 11:57:02]29164: WAF :: fetched 34 new logs [19-06-2022 11:58:01]31989: WAF :: fetched 7 new logs [19-06-2022 11:59:02]2339: WAF :: fetched 7 new logs [19-06-2022 12:00:02]4805: WAF :: fetched 3 new logs [19-06-2022 12:01:02]8059: WAF :: fetched 4 new logs [19-06-2022 12:02:01]10777: WAF :: fetched 5 new logs [19-06-2022 12:03:01]13581: WAF :: fetched 4 new logs [19-06-2022 12:04:02]16296: WAF :: fetched 4 new logs [19-06-2022 12:05:01]19017: WAF :: fetched 6 new logs [19-06-2022 12:06:01]21831: WAF :: fetched 4 new logs [19-06-2022 12:07:02]24571: WAF :: fetched 7 new logs [19-06-2022 12:08:01]27366: WAF :: fetched 3 new logs [19-06-2022 12:09:02]30075: WAF :: fetched 7 new logs [19-06-2022 12:10:01]32751: WAF :: fetched 5 new logs [19-06-2022 12:11:01]3189: WAF :: fetched 7 new logs [19-06-2022 12:12:02]6003: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655651522 [19-06-2022 12:12:02]6003: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 12:12:04]6003: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 12:12:04]6003: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-1212/20220619-121202-Yq88wn1i1lAsasXq95bNQQAAAAY [19-06-2022 12:12:04]6003: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 12:12:04]6003: WAF :: fetched 6 new logs [19-06-2022 12:13:01]8779: WAF :: fetched 6 new logs [19-06-2022 12:14:02]11540: WAF :: fetched 9 new logs [19-06-2022 12:15:01]14338: WAF :: fetched 4 new logs [19-06-2022 12:16:01]17449: WAF :: fetched 3 new logs [19-06-2022 12:17:02]20259: WAF :: fetched 4 new logs [19-06-2022 12:19:02]26198: WAF :: fetched 4 new logs [19-06-2022 12:20:02]28907: WAF :: fetched 4 new logs [19-06-2022 12:21:02]31724: WAF :: fetched 5 new logs [19-06-2022 12:27:01]15731: WAF :: fetched 3 new logs [19-06-2022 12:28:02]18519: WAF :: fetched 1 new logs [19-06-2022 12:31:02]26682: WAF :: fetched 4 new logs [19-06-2022 12:32:01]29386: WAF :: fetched 4 new logs [19-06-2022 12:33:02]32176: WAF :: fetched 2 new logs [19-06-2022 12:34:02]2467: WAF :: fetched 1 new logs [19-06-2022 12:35:01]5261: WAF :: fetched 1 new logs [19-06-2022 12:36:02]8022: WAF :: fetched 1 new logs [19-06-2022 12:39:02]16187: WAF :: fetched 1 new logs [19-06-2022 12:40:02]18896: WAF :: fetched 3 new logs [19-06-2022 12:41:01]21604: WAF :: fetched 5 new logs [19-06-2022 12:41:01]21604: Checking for user cron vulnerabilities [19-06-2022 12:42:02]24305: WAF :: fetched 1 new logs [19-06-2022 12:44:02]29840: Checking ditributed CMS bruteforce attacks [19-06-2022 12:44:02]29840: WAF :: fetched 2 new logs [19-06-2022 12:45:01]: Checking for software updates [19-06-2022 12:45:02]32521: WAF :: fetched 2 new logs [19-06-2022 12:46:01]2893: WAF :: fetched 4 new logs [19-06-2022 12:47:02]5674: WAF :: fetched 13 new logs [19-06-2022 12:48:01]8456: WAF :: fetched 7 new logs [19-06-2022 12:49:02]11171: WAF :: fetched 1 new logs [19-06-2022 12:51:01]16679: WAF :: fetched 6 new logs [19-06-2022 12:52:02]19397: WAF :: fetched 3 new logs [19-06-2022 12:54:02]24922: WAF :: fetched 1 new logs [19-06-2022 12:55:01]27696: WAF :: fetched 6 new logs [19-06-2022 12:56:01]30418: WAF :: fetched 4 new logs [19-06-2022 12:57:02]706: WAF :: fetched 8 new logs [19-06-2022 12:58:01]3573: WAF :: fetched 9 new logs [19-06-2022 12:59:01]6397: WAF :: fetched 9 new logs [19-06-2022 13:00:02]8864: WAF :: fetched 6 new logs [19-06-2022 13:01:01]12016: WAF :: fetched 6 new logs [19-06-2022 13:02:01]14816: WAF :: fetched 5 new logs [19-06-2022 13:03:02]17686: WAF :: fetched 8 new logs [19-06-2022 13:04:01]20381: WAF :: fetched 5 new logs [19-06-2022 13:05:02]23114: WAF :: fetched 5 new logs [19-06-2022 13:06:01]25874: WAF :: fetched 5 new logs [19-06-2022 13:07:02]28607: WAF :: fetched 2 new logs [19-06-2022 13:08:01]31447: WAF :: fetched 4 new logs [19-06-2022 13:09:02]1795: WAF :: fetched 2 new logs [19-06-2022 13:10:02]4650: WAF :: fetched 6 new logs [19-06-2022 13:11:01]7487: WAF :: fetched 6 new logs [19-06-2022 13:12:02]10215: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655655122 [19-06-2022 13:12:02]10215: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 13:12:04]10215: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 13:12:04]10215: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-1312/20220619-131202-Yq9K0vewHCyKzhitOllAqQAAAAw [19-06-2022 13:12:04]10215: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 13:12:04]10215: WAF :: fetched 3 new logs [19-06-2022 13:15:01]18515: WAF :: fetched 1 new logs [19-06-2022 13:19:01]29584: WAF :: fetched 6 new logs [19-06-2022 13:20:02]32273: WAF :: fetched 6 new logs [19-06-2022 13:21:02]2657: WAF :: fetched 8 new logs [19-06-2022 13:22:01]5473: WAF :: fetched 6 new logs [19-06-2022 13:23:02]8262: WAF :: fetched 5 new logs [19-06-2022 13:24:01]10934: WAF :: fetched 13 new logs [19-06-2022 13:25:02]13660: WAF :: fetched 10 new logs [19-06-2022 13:26:01]16463: WAF :: fetched 3 new logs [19-06-2022 13:27:02]19189: WAF :: fetched 4 new logs [19-06-2022 13:28:02]21932: WAF :: fetched 1 new logs [19-06-2022 13:29:01]24630: WAF :: fetched 5 new logs [19-06-2022 13:30:02]27365: WAF :: fetched 2 new logs [19-06-2022 13:31:01]30094: WAF :: fetched 2 new logs [19-06-2022 13:32:02]348: WAF :: fetched 2 new logs [19-06-2022 13:34:01]6006: WAF :: fetched 1 new logs [19-06-2022 13:35:02]8739: WAF :: fetched 1 new logs [19-06-2022 13:38:01]17007: WAF :: fetched 8 new logs [19-06-2022 13:39:02]19736: WAF :: fetched 13 new logs [19-06-2022 13:40:02]22412: WAF :: fetched 12 new logs [19-06-2022 13:41:02]25176: WAF :: fetched 18 new logs [19-06-2022 13:41:02]25176: Checking for user cron vulnerabilities [19-06-2022 13:42:01]27877: WAF :: fetched 18 new logs [19-06-2022 13:43:01]30651: WAF :: fetched 13 new logs [19-06-2022 13:44:01]971: Checking ditributed CMS bruteforce attacks [19-06-2022 13:44:02]971: WAF :: fetched 6 new logs [19-06-2022 13:45:01]: Checking for definition updates [19-06-2022 13:45:01]3731: WAF :: fetched 12 new logs [19-06-2022 13:46:02]6582: WAF :: fetched 14 new logs [19-06-2022 13:47:01]9278: WAF :: fetched 11 new logs [19-06-2022 13:48:02]12100: WAF :: fetched 15 new logs [19-06-2022 13:49:02]14801: WAF :: fetched 6 new logs [19-06-2022 13:50:01]17554: WAF :: fetched 2 new logs [19-06-2022 13:54:02]28558: WAF :: fetched 1 new logs [19-06-2022 13:55:01]31255: WAF :: fetched 1 new logs [19-06-2022 13:56:02]1653: WAF :: fetched 10 new logs [19-06-2022 13:57:01]4477: WAF :: fetched 16 new logs [19-06-2022 13:58:01]7339: WAF :: fetched 14 new logs [19-06-2022 13:59:02]10071: WAF :: fetched 5 new logs [19-06-2022 14:00:02]12543: WAF :: fetched 8 new logs [19-06-2022 14:01:02]15801: WAF :: fetched 10 new logs [19-06-2022 14:02:01]18471: WAF :: fetched 4 new logs [19-06-2022 14:04:01]24252: WAF :: fetched 3 new logs [19-06-2022 14:05:02]27020: WAF :: fetched 2 new logs [19-06-2022 14:06:02]29789: WAF :: fetched 5 new logs [19-06-2022 14:07:01]32337: WAF :: fetched 9 new logs [19-06-2022 14:08:01]2950: WAF :: fetched 5 new logs [19-06-2022 14:09:02]5729: WAF :: fetched 35 new logs [19-06-2022 14:10:02]8461: WAF :: fetched 4 new logs [19-06-2022 14:11:01]11145: WAF :: fetched 5 new logs [19-06-2022 14:12:02]13970: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655658722 [19-06-2022 14:12:02]13970: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 14:12:04]13970: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 14:12:04]13970: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-1412/20220619-141202-Yq9Y4syARDBuIunW3I6DqgAAACQ [19-06-2022 14:12:04]13970: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 14:12:04]13970: WAF :: fetched 10 new logs [19-06-2022 14:13:01]16773: WAF :: fetched 6 new logs [19-06-2022 14:14:02]19513: WAF :: fetched 5 new logs [19-06-2022 14:15:02]22194: WAF :: fetched 5 new logs [19-06-2022 14:16:01]24962: WAF :: fetched 4 new logs [19-06-2022 14:17:01]27685: WAF :: fetched 1 new logs [19-06-2022 14:18:02]30470: WAF :: fetched 1 new logs [19-06-2022 14:19:02]714: WAF :: fetched 4 new logs [19-06-2022 14:20:01]3434: WAF :: fetched 1 new logs [19-06-2022 14:21:01]6341: WAF :: fetched 2 new logs [19-06-2022 14:22:02]9010: WAF :: fetched 8 new logs [19-06-2022 14:23:02]11822: WAF :: fetched 13 new logs [19-06-2022 14:24:02]14526: WAF :: fetched 15 new logs [19-06-2022 14:25:01]17235: WAF :: fetched 11 new logs [19-06-2022 14:26:02]20007: WAF :: fetched 1 new logs [19-06-2022 14:27:02]22699: WAF :: fetched 1 new logs [19-06-2022 14:28:01]25410: WAF :: fetched 2 new logs [19-06-2022 14:30:02]30831: WAF :: fetched 3 new logs [19-06-2022 14:32:01]3926: WAF :: fetched 1 new logs [19-06-2022 14:33:02]6775: WAF :: fetched 1 new logs [19-06-2022 14:34:01]9446: WAF :: fetched 1 new logs [19-06-2022 14:35:01]12127: WAF :: fetched 4 new logs [19-06-2022 14:36:01]14877: WAF :: fetched 4 new logs [19-06-2022 14:37:02]17645: WAF :: fetched 3 new logs [19-06-2022 14:38:02]20420: WAF :: fetched 2 new logs [19-06-2022 14:39:02]23103: WAF :: fetched 2 new logs [19-06-2022 14:40:01]25830: WAF :: fetched 1 new logs [19-06-2022 14:41:02]28585: Checking for user cron vulnerabilities [19-06-2022 14:43:01]1566: WAF :: fetched 1 new logs [19-06-2022 14:44:01]4374: Checking ditributed CMS bruteforce attacks [19-06-2022 14:44:01]4374: WAF :: fetched 1 new logs [19-06-2022 14:46:02]9801: WAF :: fetched 1 new logs [19-06-2022 14:47:02]12478: WAF :: fetched 1 new logs [19-06-2022 14:48:01]15171: WAF :: fetched 2 new logs [19-06-2022 14:51:02]23410: WAF :: fetched 1 new logs [19-06-2022 14:53:01]28833: WAF :: fetched 3 new logs [19-06-2022 14:53:02]28834: Updated license status via CDN [19-06-2022 14:54:02]31533: WAF :: fetched 4 new logs [19-06-2022 14:55:02]1834: WAF :: fetched 8 new logs [19-06-2022 14:56:01]4644: WAF :: fetched 7 new logs [19-06-2022 14:57:01]7388: WAF :: fetched 13 new logs [19-06-2022 14:58:02]10166: WAF :: fetched 15 new logs [19-06-2022 14:59:02]12862: WAF :: fetched 12 new logs [19-06-2022 15:00:01]15269: WAF :: fetched 6 new logs [19-06-2022 15:01:01]18473: Reseting cPGuard inotify settings [19-06-2022 15:01:01]18461: WAF :: fetched 5 new logs [19-06-2022 15:02:01]21188: WAF :: fetched 6 new logs [19-06-2022 15:03:02]23968: WAF :: fetched 8 new logs [19-06-2022 15:04:02]26654: WAF :: fetched 3 new logs [19-06-2022 15:05:01]29344: WAF :: fetched 3 new logs [19-06-2022 15:06:02]32050: WAF :: fetched 7 new logs [19-06-2022 15:07:01]2303: WAF :: fetched 11 new logs [19-06-2022 15:08:01]5146: WAF :: fetched 6 new logs [19-06-2022 15:10:01]10564: WAF :: fetched 8 new logs [19-06-2022 15:11:01]13281: WAF :: fetched 7 new logs [19-06-2022 15:12:01]15971: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655662321 [19-06-2022 15:12:01]15971: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 15:12:03]15971: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 15:12:04]15971: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-1512/20220619-151201-Yq9m8VbHDnxNEYchwvVcWQAAABE [19-06-2022 15:12:04]15971: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 15:12:04]15971: WAF :: fetched 8 new logs [19-06-2022 15:13:02]18754: WAF :: fetched 3 new logs [19-06-2022 15:14:01]21422: WAF :: fetched 5 new logs [19-06-2022 15:15:02]24085: WAF :: fetched 5 new logs [19-06-2022 15:16:01]26773: WAF :: fetched 6 new logs [19-06-2022 15:17:02]29474: WAF :: fetched 8 new logs [19-06-2022 15:18:02]32202: WAF :: fetched 1 new logs [19-06-2022 15:19:02]2514: WAF :: fetched 1 new logs [19-06-2022 15:21:01]8032: WAF :: fetched 1 new logs [19-06-2022 15:22:02]10731: WAF :: fetched 1 new logs [19-06-2022 15:24:01]16136: WAF :: fetched 1 new logs [19-06-2022 15:26:02]21522: WAF :: fetched 4 new logs [19-06-2022 15:27:02]24165: WAF :: fetched 10 new logs [19-06-2022 15:28:02]26949: WAF :: fetched 8 new logs [19-06-2022 15:29:01]29422: WAF :: fetched 11 new logs [19-06-2022 15:30:02]32375: WAF :: fetched 10 new logs [19-06-2022 15:31:01]2674: WAF :: fetched 12 new logs [19-06-2022 15:32:01]5491: WAF :: fetched 66 new logs [19-06-2022 15:33:01]8299: WAF :: fetched 99 new logs [19-06-2022 15:34:01]11048: WAF :: fetched 99 new logs [19-06-2022 15:35:02]13832: WAF :: fetched 96 new logs [19-06-2022 15:36:01]16694: WAF :: fetched 22 new logs [19-06-2022 15:37:02]19442: WAF :: fetched 87 new logs [19-06-2022 15:38:01]22192: WAF :: fetched 12 new logs [19-06-2022 15:39:01]24871: WAF :: fetched 11 new logs [19-06-2022 15:40:01]27602: WAF :: fetched 7 new logs [19-06-2022 15:41:01]30306: WAF :: fetched 1 new logs [19-06-2022 15:41:01]30306: Checking for user cron vulnerabilities [19-06-2022 15:42:02]615: WAF :: fetched 1 new logs [19-06-2022 15:43:01]3428: WAF :: fetched 2 new logs [19-06-2022 15:44:01]6194: Checking ditributed CMS bruteforce attacks [19-06-2022 15:44:02]6194: WAF :: fetched 2 new logs [19-06-2022 15:45:01]8883: WAF :: fetched 3 new logs [19-06-2022 15:46:02]11602: WAF :: fetched 5 new logs [19-06-2022 15:47:01]14239: WAF :: fetched 4 new logs [19-06-2022 15:48:02]17068: WAF :: fetched 4 new logs [19-06-2022 15:49:02]19776: WAF :: fetched 6 new logs [19-06-2022 15:50:01]22401: WAF :: fetched 8 new logs [19-06-2022 15:51:02]25219: WAF :: fetched 11 new logs [19-06-2022 15:52:01]27882: WAF :: fetched 7 new logs [19-06-2022 15:54:01]818: WAF :: fetched 2 new logs [19-06-2022 15:57:02]9064: WAF :: fetched 4 new logs [19-06-2022 15:58:02]11787: WAF :: fetched 6 new logs [19-06-2022 15:59:01]14469: WAF :: fetched 7 new logs [19-06-2022 16:00:02]16951: WAF :: fetched 4 new logs [19-06-2022 16:01:02]20120: WAF :: fetched 5 new logs [19-06-2022 16:02:02]22859: WAF :: fetched 8 new logs [19-06-2022 16:03:01]25608: WAF :: fetched 4 new logs [19-06-2022 16:04:01]28362: WAF :: fetched 1 new logs [19-06-2022 16:08:01]6887: WAF :: fetched 2 new logs [19-06-2022 16:10:02]12682: WAF :: fetched 3 new logs [19-06-2022 16:11:01]15648: WAF :: fetched 4 new logs [19-06-2022 16:12:02]18563: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655665922 [19-06-2022 16:12:02]18563: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 16:12:04]18563: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 16:12:04]18563: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-1612/20220619-161202-Yq91AkGoGt5wwnIZOUTS5QAAABc [19-06-2022 16:12:04]18563: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 16:12:04]18563: WAF :: fetched 10 new logs [19-06-2022 16:13:02]21250: WAF :: fetched 4 new logs [19-06-2022 16:14:01]23790: WAF :: fetched 9 new logs [19-06-2022 16:15:01]26788: WAF :: fetched 6 new logs [19-06-2022 16:16:02]29545: WAF :: fetched 9 new logs [19-06-2022 16:17:02]32286: WAF :: fetched 1 new logs [19-06-2022 16:18:01]2754: WAF :: fetched 2 new logs [19-06-2022 16:19:01]5722: WAF :: fetched 1 new logs [19-06-2022 16:21:02]11623: WAF :: fetched 1 new logs [19-06-2022 16:24:02]20233: WAF :: fetched 1 new logs [19-06-2022 16:26:02]25732: WAF :: fetched 1 new logs [19-06-2022 16:27:01]28420: WAF :: fetched 2 new logs [19-06-2022 16:28:01]31221: WAF :: fetched 2 new logs [19-06-2022 16:29:02]1664: WAF :: fetched 2 new logs [19-06-2022 16:30:01]4562: WAF :: fetched 1 new logs [19-06-2022 16:31:02]7334: WAF :: fetched 3 new logs [19-06-2022 16:32:02]10071: WAF :: fetched 2 new logs [19-06-2022 16:34:01]15565: WAF :: fetched 1 new logs [19-06-2022 16:35:02]18274: WAF :: fetched 1 new logs [19-06-2022 16:41:02]2635: Checking for user cron vulnerabilities [19-06-2022 16:44:01]11162: Checking ditributed CMS bruteforce attacks [19-06-2022 16:47:02]19271: WAF :: fetched 1 new logs [19-06-2022 16:50:02]27481: WAF :: fetched 1 new logs [19-06-2022 16:51:01]30122: WAF :: fetched 1 new logs [19-06-2022 16:52:01]552: WAF :: fetched 1 new logs [19-06-2022 16:53:02]3435: WAF :: fetched 1 new logs [19-06-2022 16:55:02]9111: WAF :: fetched 1 new logs [19-06-2022 17:00:01]22444: WAF :: fetched 1 new logs [19-06-2022 17:01:02]25645: WAF :: fetched 2 new logs [19-06-2022 17:02:01]28085: WAF :: fetched 1 new logs [19-06-2022 17:03:01]31077: WAF :: fetched 2 new logs [19-06-2022 17:04:01]1527: WAF :: fetched 3 new logs [19-06-2022 17:05:02]4294: WAF :: fetched 2 new logs [19-06-2022 17:06:02]7142: WAF :: fetched 1 new logs [19-06-2022 17:07:01]9766: WAF :: fetched 1 new logs [19-06-2022 17:11:01]20749: WAF :: fetched 1 new logs [19-06-2022 17:12:02]23566: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655669522 [19-06-2022 17:12:02]23566: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 17:12:04]23566: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 17:12:05]23566: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-1712/20220619-171202-Yq-DEu9yVDzcoXAJaKKBowAAAAY [19-06-2022 17:12:05]23566: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 17:12:05]23566: WAF :: fetched 3 new logs [19-06-2022 17:13:02]26270: WAF :: fetched 12 new logs [19-06-2022 17:14:01]29042: WAF :: fetched 7 new logs [19-06-2022 17:15:02]31727: WAF :: fetched 4 new logs [19-06-2022 17:16:01]1723: WAF :: fetched 4 new logs [19-06-2022 17:17:01]4808: WAF :: fetched 8 new logs [19-06-2022 17:18:02]7518: WAF :: fetched 4 new logs [19-06-2022 17:19:01]10196: WAF :: fetched 6 new logs [19-06-2022 17:20:01]12993: WAF :: fetched 4 new logs [19-06-2022 17:21:01]15774: WAF :: fetched 8 new logs [19-06-2022 17:22:02]18477: WAF :: fetched 5 new logs [19-06-2022 17:23:02]21183: WAF :: fetched 2 new logs [19-06-2022 17:24:01]23912: WAF :: fetched 2 new logs [19-06-2022 17:25:01]26617: WAF :: fetched 5 new logs [19-06-2022 17:26:02]29347: WAF :: fetched 5 new logs [19-06-2022 17:27:01]31959: WAF :: fetched 8 new logs [19-06-2022 17:28:01]2445: WAF :: fetched 4 new logs [19-06-2022 17:29:02]5344: WAF :: fetched 1 new logs [19-06-2022 17:30:01]8042: WAF :: fetched 2 new logs [19-06-2022 17:33:01]16249: WAF :: fetched 1 new logs [19-06-2022 17:35:02]21714: WAF :: fetched 3 new logs [19-06-2022 17:36:02]24458: WAF :: fetched 1 new logs [19-06-2022 17:38:01]29792: WAF :: fetched 4 new logs [19-06-2022 17:39:02]32604: WAF :: fetched 2 new logs [19-06-2022 17:41:01]5776: WAF :: fetched 2 new logs [19-06-2022 17:41:01]5776: Checking for user cron vulnerabilities [19-06-2022 17:44:01]14032: Checking ditributed CMS bruteforce attacks [19-06-2022 17:44:02]14032: WAF :: fetched 1 new logs [19-06-2022 17:48:01]24558: WAF :: fetched 1 new logs [19-06-2022 17:49:01]27683: WAF :: fetched 6 new logs [19-06-2022 17:50:02]30402: WAF :: fetched 6 new logs [19-06-2022 17:51:01]522: WAF :: fetched 5 new logs [19-06-2022 17:52:02]3488: WAF :: fetched 5 new logs [19-06-2022 17:53:01]6210: WAF :: fetched 5 new logs [19-06-2022 17:54:02]9125: WAF :: fetched 7 new logs [19-06-2022 17:55:02]11891: WAF :: fetched 3 new logs [19-06-2022 17:56:01]14669: WAF :: fetched 4 new logs [19-06-2022 17:57:01]17384: WAF :: fetched 10 new logs [19-06-2022 17:58:01]20108: WAF :: fetched 7 new logs [19-06-2022 17:59:02]22893: WAF :: fetched 6 new logs [19-06-2022 18:00:01]25284: WAF :: fetched 7 new logs [19-06-2022 18:01:02]28557: WAF :: fetched 7 new logs [19-06-2022 18:02:01]31106: WAF :: fetched 5 new logs [19-06-2022 18:03:01]1568: WAF :: fetched 3 new logs [19-06-2022 18:07:01]12580: WAF :: fetched 2 new logs [19-06-2022 18:08:02]15280: WAF :: fetched 5 new logs [19-06-2022 18:09:02]18109: WAF :: fetched 3 new logs [19-06-2022 18:10:01]20801: WAF :: fetched 3 new logs [19-06-2022 18:12:02]26212: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655673122 [19-06-2022 18:12:02]26212: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 18:12:04]26212: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 18:12:04]26212: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-1812/20220619-181202-Yq-RIhk2p7THxdylznEHWwAAAAQ [19-06-2022 18:12:04]26212: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [19-06-2022 18:12:04]26212: WAF :: fetched 1 new logs [19-06-2022 18:13:01]28883: WAF :: fetched 1 new logs [19-06-2022 18:14:02]31696: WAF :: fetched 1 new logs [19-06-2022 18:15:01]1982: WAF :: fetched 1 new logs [19-06-2022 18:17:02]7569: WAF :: fetched 1 new logs [19-06-2022 18:18:01]10338: WAF :: fetched 7 new logs [19-06-2022 18:21:01]18616: WAF :: fetched 36 new logs [19-06-2022 18:22:02]21315: WAF :: fetched 2 new logs [19-06-2022 18:23:01]23968: WAF :: fetched 8 new logs [19-06-2022 18:24:01]26731: WAF :: fetched 2 new logs [19-06-2022 18:25:01]29411: WAF :: fetched 1 new logs [19-06-2022 18:26:02]32150: WAF :: fetched 2 new logs [19-06-2022 18:27:01]2445: WAF :: fetched 2 new logs [19-06-2022 18:29:02]7982: WAF :: fetched 6 new logs [19-06-2022 18:30:01]10606: WAF :: fetched 11 new logs [19-06-2022 18:31:01]13393: WAF :: fetched 11 new logs [19-06-2022 18:32:01]16090: WAF :: fetched 6 new logs [19-06-2022 18:33:01]18791: WAF :: fetched 9 new logs [19-06-2022 18:34:01]21557: WAF :: fetched 9 new logs [19-06-2022 18:35:01]24239: WAF :: fetched 4 new logs [19-06-2022 18:36:01]26977: WAF :: fetched 1 new logs [19-06-2022 18:38:02]32338: WAF :: fetched 10 new logs [19-06-2022 18:39:01]2730: WAF :: fetched 2 new logs [19-06-2022 18:40:01]5546: WAF :: fetched 5 new logs [19-06-2022 18:41:01]8281: WAF :: fetched 2 new logs [19-06-2022 18:41:01]8281: Checking for user cron vulnerabilities [19-06-2022 18:42:02]10979: WAF :: fetched 4 new logs [19-06-2022 18:43:01]13659: WAF :: fetched 7 new logs [19-06-2022 18:44:02]16459: Checking ditributed CMS bruteforce attacks [19-06-2022 18:44:02]16459: WAF :: fetched 8 new logs [19-06-2022 18:45:01]19114: WAF :: fetched 4 new logs [19-06-2022 18:46:01]21860: WAF :: fetched 9 new logs [19-06-2022 18:47:02]24523: WAF :: fetched 9 new logs [19-06-2022 18:48:01]27090: WAF :: fetched 6 new logs [19-06-2022 18:49:02]29991: WAF :: fetched 6 new logs [19-06-2022 18:50:01]32641: WAF :: fetched 1 new logs [19-06-2022 18:53:01]8516: WAF :: fetched 3 new logs [19-06-2022 18:54:02]11301: WAF :: fetched 5 new logs [19-06-2022 18:55:01]14017: WAF :: fetched 5 new logs [19-06-2022 18:56:02]16784: WAF :: fetched 8 new logs [19-06-2022 18:57:01]19467: WAF :: fetched 6 new logs [19-06-2022 18:58:01]22169: WAF :: fetched 9 new logs [19-06-2022 18:59:02]24996: WAF :: fetched 8 new logs [19-06-2022 19:00:01]27382: WAF :: fetched 7 new logs [19-06-2022 19:01:01]30568: WAF :: fetched 5 new logs [19-06-2022 19:02:01]835: WAF :: fetched 4 new logs [19-06-2022 19:03:01]3611: WAF :: fetched 1 new logs [19-06-2022 19:04:02]6464: WAF :: fetched 1 new logs [19-06-2022 19:07:01]14628: WAF :: fetched 2 new logs [19-06-2022 19:08:02]17357: WAF :: fetched 3 new logs [19-06-2022 19:09:01]20105: WAF :: fetched 8 new logs [19-06-2022 19:10:02]22833: WAF :: fetched 7 new logs [19-06-2022 19:11:01]25608: WAF :: fetched 10 new logs [19-06-2022 19:12:01]28312: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655676721 [19-06-2022 19:12:01]28312: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 19:12:03]28312: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 19:12:04]28312: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-1912/20220619-191201-Yq-fMWI6F-bNQLzKMqjEQwAAAA0 [19-06-2022 19:12:04]28312: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 19:12:04]28312: WAF :: fetched 226 new logs [19-06-2022 19:13:02]31006: WAF :: fetched 21 new logs [19-06-2022 19:14:01]1345: WAF :: fetched 16 new logs [19-06-2022 19:15:02]4100: WAF :: fetched 14 new logs [19-06-2022 19:16:01]6489: WAF :: fetched 8 new logs [19-06-2022 19:17:02]9597: WAF :: fetched 4 new logs [19-06-2022 19:18:01]12302: WAF :: fetched 11 new logs [19-06-2022 19:19:02]15084: WAF :: fetched 11 new logs [19-06-2022 19:20:02]17799: WAF :: fetched 4 new logs [19-06-2022 19:21:02]20573: WAF :: fetched 5 new logs [19-06-2022 19:22:01]23284: WAF :: fetched 11 new logs [19-06-2022 19:23:02]25977: WAF :: fetched 5 new logs [19-06-2022 19:24:02]28742: WAF :: fetched 2 new logs [19-06-2022 19:25:01]31426: WAF :: fetched 4 new logs [19-06-2022 19:26:01]1809: WAF :: fetched 7 new logs [19-06-2022 19:27:01]4623: WAF :: fetched 13 new logs [19-06-2022 19:28:01]7370: WAF :: fetched 11 new logs [19-06-2022 19:29:02]10179: WAF :: fetched 6 new logs [19-06-2022 19:30:01]12670: WAF :: fetched 4 new logs [19-06-2022 19:31:01]15661: WAF :: fetched 4 new logs [19-06-2022 19:32:01]18363: WAF :: fetched 5 new logs [19-06-2022 19:33:01]21078: WAF :: fetched 8 new logs [19-06-2022 19:34:02]23863: WAF :: fetched 8 new logs [19-06-2022 19:35:02]26533: WAF :: fetched 5 new logs [19-06-2022 19:36:02]29256: WAF :: fetched 1 new logs [19-06-2022 19:41:02]10573: WAF :: fetched 4 new logs [19-06-2022 19:41:02]10573: Checking for user cron vulnerabilities [19-06-2022 19:42:01]13009: WAF :: fetched 3 new logs [19-06-2022 19:43:02]15989: WAF :: fetched 3 new logs [19-06-2022 19:44:02]18795: Checking ditributed CMS bruteforce attacks [19-06-2022 19:44:02]18795: WAF :: fetched 4 new logs [19-06-2022 19:45:01]: Checking for definition updates [19-06-2022 19:45:02]21088: Updated virus defnition : malware.expert.ndb [19-06-2022 19:45:05]21088: Updated virus defnition : malware.expert.hdb [19-06-2022 19:46:01]24203: WAF :: fetched 1 new logs [19-06-2022 19:49:01]32385: WAF :: fetched 1 new logs [19-06-2022 19:51:01]5558: WAF :: fetched 1 new logs [19-06-2022 19:52:01]8312: WAF :: fetched 2 new logs [19-06-2022 19:56:02]19409: WAF :: fetched 4 new logs [19-06-2022 19:57:02]22149: WAF :: fetched 8 new logs [19-06-2022 19:58:01]24867: WAF :: fetched 6 new logs [19-06-2022 19:59:02]27688: WAF :: fetched 6 new logs [19-06-2022 20:00:02]30147: WAF :: fetched 7 new logs [19-06-2022 20:01:01]1065: WAF :: fetched 7 new logs [19-06-2022 20:02:01]3916: WAF :: fetched 4 new logs [19-06-2022 20:04:01]9514: WAF :: fetched 1 new logs [19-06-2022 20:06:01]14603: WAF :: fetched 1 new logs [19-06-2022 20:07:01]17688: WAF :: fetched 1 new logs [19-06-2022 20:08:01]20396: WAF :: fetched 2 new logs [19-06-2022 20:09:01]23228: WAF :: fetched 5 new logs [19-06-2022 20:10:02]25983: WAF :: fetched 3 new logs [19-06-2022 20:11:02]28760: WAF :: fetched 6 new logs [19-06-2022 20:12:02]31438: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655680322 [19-06-2022 20:12:02]31438: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 20:12:04]31438: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 20:12:04]31438: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-2012/20220619-201202-Yq-tQumqbCmwl3_iXhEqPwAAAAg [19-06-2022 20:12:04]31438: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 20:12:04]31438: WAF :: fetched 4 new logs [19-06-2022 20:13:02]1785: WAF :: fetched 2 new logs [19-06-2022 20:14:02]4670: WAF :: fetched 2 new logs [19-06-2022 20:15:01]7023: WAF :: fetched 4 new logs [19-06-2022 20:16:01]10105: WAF :: fetched 6 new logs [19-06-2022 20:17:01]12809: WAF :: fetched 5 new logs [19-06-2022 20:18:01]15510: WAF :: fetched 15 new logs [19-06-2022 20:19:01]18281: WAF :: fetched 13 new logs [19-06-2022 20:20:02]21016: WAF :: fetched 7 new logs [19-06-2022 20:21:02]23813: WAF :: fetched 6 new logs [19-06-2022 20:22:02]26530: WAF :: fetched 6 new logs [19-06-2022 20:23:02]29228: WAF :: fetched 2 new logs [19-06-2022 20:24:01]31642: WAF :: fetched 5 new logs [19-06-2022 20:25:01]2381: WAF :: fetched 5 new logs [19-06-2022 20:26:01]5286: WAF :: fetched 1 new logs [19-06-2022 20:27:01]7999: WAF :: fetched 6 new logs [19-06-2022 20:28:01]10729: WAF :: fetched 2 new logs [19-06-2022 20:29:02]13523: WAF :: fetched 4 new logs [19-06-2022 20:30:02]16271: WAF :: fetched 5 new logs [19-06-2022 20:31:02]19060: WAF :: fetched 6 new logs [19-06-2022 20:32:01]21692: WAF :: fetched 5 new logs [19-06-2022 20:33:01]24513: WAF :: fetched 5 new logs [19-06-2022 20:34:01]27345: WAF :: fetched 20 new logs [19-06-2022 20:35:01]30029: WAF :: fetched 11 new logs [19-06-2022 20:36:02]338: WAF :: fetched 8 new logs [19-06-2022 20:37:02]3156: WAF :: fetched 8 new logs [19-06-2022 20:38:02]5986: WAF :: fetched 20 new logs [19-06-2022 20:39:01]8456: WAF :: fetched 30 new logs [19-06-2022 20:40:01]11535: WAF :: fetched 5 new logs [19-06-2022 20:41:01]14311: WAF :: fetched 5 new logs [19-06-2022 20:41:01]14311: Checking for user cron vulnerabilities [19-06-2022 20:42:01]17046: WAF :: fetched 7 new logs [19-06-2022 20:43:02]19709: WAF :: fetched 3 new logs [19-06-2022 20:44:02]22536: Checking ditributed CMS bruteforce attacks [19-06-2022 20:44:02]22536: WAF :: fetched 10 new logs [19-06-2022 20:45:01]24967: WAF :: fetched 1 new logs [19-06-2022 20:46:02]28001: WAF :: fetched 5 new logs [19-06-2022 20:47:02]30668: WAF :: fetched 5 new logs [19-06-2022 20:48:02]997: WAF :: fetched 12 new logs [19-06-2022 20:49:01]3501: WAF :: fetched 13 new logs [19-06-2022 20:50:01]6617: WAF :: fetched 10 new logs [19-06-2022 20:51:01]9377: WAF :: fetched 6 new logs [19-06-2022 20:52:02]12065: WAF :: fetched 7 new logs [19-06-2022 20:53:02]14757: WAF :: fetched 9 new logs [19-06-2022 20:54:02]17544: WAF :: fetched 9 new logs [19-06-2022 20:55:02]20267: WAF :: fetched 4 new logs [19-06-2022 20:56:01]23035: WAF :: fetched 3 new logs [19-06-2022 20:57:02]25765: WAF :: fetched 1 new logs [19-06-2022 20:58:01]28441: WAF :: fetched 2 new logs [19-06-2022 20:59:01]31186: WAF :: fetched 5 new logs [19-06-2022 21:01:02]4627: WAF :: fetched 2 new logs [19-06-2022 21:03:01]10027: WAF :: fetched 1 new logs [19-06-2022 21:04:02]12785: WAF :: fetched 6 new logs [19-06-2022 21:05:01]15538: WAF :: fetched 6 new logs [19-06-2022 21:06:02]18398: WAF :: fetched 22 new logs [19-06-2022 21:07:02]21122: WAF :: fetched 10 new logs [19-06-2022 21:08:01]23843: WAF :: fetched 12 new logs [19-06-2022 21:09:02]26628: WAF :: fetched 8 new logs [19-06-2022 21:10:01]29410: WAF :: fetched 13 new logs [19-06-2022 21:11:01]32178: WAF :: fetched 9 new logs [19-06-2022 21:12:02]2577: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655683922 [19-06-2022 21:12:02]2577: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 21:12:04]2577: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 21:12:04]2577: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-2112/20220619-211202-Yq-7Ut05guYntCyjKveyKgAAAA0 [19-06-2022 21:12:04]2577: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 21:12:04]2577: WAF :: fetched 6 new logs [19-06-2022 21:13:01]5328: WAF :: fetched 6 new logs [19-06-2022 21:14:01]8041: WAF :: fetched 11 new logs [19-06-2022 21:15:01]10798: WAF :: fetched 7 new logs [19-06-2022 21:16:02]13542: WAF :: fetched 9 new logs [19-06-2022 21:17:01]15973: WAF :: fetched 4 new logs [19-06-2022 21:18:02]18928: WAF :: fetched 3 new logs [19-06-2022 21:19:01]21590: WAF :: fetched 2 new logs [19-06-2022 21:20:02]24408: WAF :: fetched 3 new logs [19-06-2022 21:21:02]27159: WAF :: fetched 2 new logs [19-06-2022 21:22:01]29822: WAF :: fetched 15 new logs [19-06-2022 21:23:02]32535: WAF :: fetched 8 new logs [19-06-2022 21:24:01]2890: WAF :: fetched 4 new logs [19-06-2022 21:25:02]5831: WAF :: fetched 4 new logs [19-06-2022 21:26:01]8376: WAF :: fetched 9 new logs [19-06-2022 21:27:02]11314: WAF :: fetched 5 new logs [19-06-2022 21:28:01]13975: WAF :: fetched 10 new logs [19-06-2022 21:41:01]17795: Checking for user cron vulnerabilities [19-06-2022 21:44:01]25952: Checking ditributed CMS bruteforce attacks [19-06-2022 22:07:08]24247: Performing Domain reputation checks [19-06-2022 22:12:01]5597: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655687521 [19-06-2022 22:12:01]5597: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 22:12:03]5597: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 22:12:04]5597: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-2212/20220619-221201-Yq_JYTp0M2IByzKhRYdSawAAABs [19-06-2022 22:12:04]5597: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 22:41:02]20136: Checking for user cron vulnerabilities [19-06-2022 22:44:01]28388: Checking ditributed CMS bruteforce attacks [19-06-2022 23:07:47]27947: Performed RBL check for 23.111.136.34. [19-06-2022 23:12:02]9073: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655691122 [19-06-2022 23:12:02]9073: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-06-2022 23:12:04]9073: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-06-2022 23:12:04]9073: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220619/20220619-2312/20220619-231202-Yq_XcnVWgYyYnPPv6ulxRgAAABo [19-06-2022 23:12:04]9073: WAF :: No suitable log file found. Using SQLite.. [19-06-2022 23:41:01]23111: Checking for user cron vulnerabilities [19-06-2022 23:44:01]31234: Checking ditributed CMS bruteforce attacks [19-06-2022 23:56:02]799: httpd.conf changed. Refreshing watchlist. [19-06-2022 23:58:02]7701: httpd.conf changed. Refreshing watchlist. [20-06-2022 00:01:02]17031: httpd.conf changed. Refreshing watchlist. [20-06-2022 00:01:04]17030: Sending daily report for June 20, 2022 [20-06-2022 00:02:02]19897: httpd.conf changed. Refreshing watchlist. [20-06-2022 00:05:01]28115: Deleted 0 entries older than 6 MONTH from scanner_logs [20-06-2022 00:05:01]28115: Deleted 0 files from Quarantine [20-06-2022 00:12:02]15058: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655694722 [20-06-2022 00:12:02]15058: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 00:12:04]15058: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 00:12:04]15058: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-0012/20220620-001202-Yq_lgsxDxOpxy3kn2vvaCgAAAAc [20-06-2022 00:12:04]15058: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 00:41:01]29387: Checking for user cron vulnerabilities [20-06-2022 00:44:02]5306: Checking ditributed CMS bruteforce attacks [20-06-2022 00:45:01]: Checking for software updates [20-06-2022 01:12:01]19813: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655698321 [20-06-2022 01:12:01]19813: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 01:12:03]19813: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 01:12:03]19813: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-0112/20220620-011201-Yq_zkXczkkYuNeGyh3yKyQAAABI [20-06-2022 01:12:03]19813: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 01:41:02]7772: Checking for user cron vulnerabilities [20-06-2022 01:44:02]15813: Checking ditributed CMS bruteforce attacks [20-06-2022 01:45:01]: Checking for definition updates [20-06-2022 02:10:02]23533: WAF :: fetched 1 new logs [20-06-2022 02:12:02]29004: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655701922 [20-06-2022 02:12:02]29004: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 02:12:04]29004: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 02:12:04]29004: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-0212/20220620-021202-YrABoofZVrtv5vX1VKEklgAAAAE [20-06-2022 02:12:04]29004: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 02:12:05]29004: WAF :: fetched 1 new logs [20-06-2022 02:13:01]31868: WAF :: fetched 4 new logs [20-06-2022 02:14:01]2398: WAF :: fetched 6 new logs [20-06-2022 02:15:01]5367: WAF :: fetched 6 new logs [20-06-2022 02:16:02]8650: WAF :: fetched 5 new logs [20-06-2022 02:17:01]11702: WAF :: fetched 3 new logs [20-06-2022 02:18:01]14382: WAF :: fetched 3 new logs [20-06-2022 02:19:01]17231: WAF :: fetched 2 new logs [20-06-2022 02:20:02]19920: WAF :: fetched 6 new logs [20-06-2022 02:21:01]23170: WAF :: fetched 2 new logs [20-06-2022 02:22:02]25978: WAF :: fetched 4 new logs [20-06-2022 02:23:01]28627: WAF :: fetched 3 new logs [20-06-2022 02:24:01]31298: WAF :: fetched 3 new logs [20-06-2022 02:26:01]4815: WAF :: fetched 1 new logs [20-06-2022 02:27:02]7879: WAF :: fetched 14 new logs [20-06-2022 02:28:01]10875: WAF :: fetched 21 new logs [20-06-2022 02:29:01]13733: WAF :: fetched 14 new logs [20-06-2022 02:30:02]16870: WAF :: fetched 15 new logs [20-06-2022 02:31:01]19870: WAF :: fetched 11 new logs [20-06-2022 02:32:02]22586: WAF :: fetched 11 new logs [20-06-2022 02:33:02]25257: WAF :: fetched 57 new logs [20-06-2022 02:34:01]27909: WAF :: fetched 28 new logs [20-06-2022 02:35:02]30582: WAF :: fetched 13 new logs [20-06-2022 02:36:01]965: WAF :: fetched 80 new logs [20-06-2022 02:37:02]3667: WAF :: fetched 76 new logs [20-06-2022 02:38:02]6366: WAF :: fetched 74 new logs [20-06-2022 02:39:02]9030: WAF :: fetched 72 new logs [20-06-2022 02:40:01]11805: WAF :: fetched 45 new logs [20-06-2022 02:41:02]14615: WAF :: fetched 12 new logs [20-06-2022 02:41:02]14615: Checking for user cron vulnerabilities [20-06-2022 02:42:01]17255: WAF :: fetched 16 new logs [20-06-2022 02:43:02]19953: WAF :: fetched 14 new logs [20-06-2022 02:44:01]22622: Checking ditributed CMS bruteforce attacks [20-06-2022 02:44:02]22622: WAF :: fetched 16 new logs [20-06-2022 02:45:01]25287: WAF :: fetched 16 new logs [20-06-2022 02:46:02]28080: WAF :: fetched 16 new logs [20-06-2022 02:47:01]30613: WAF :: fetched 9 new logs [20-06-2022 02:48:01]990: WAF :: fetched 9 new logs [20-06-2022 02:49:02]3685: WAF :: fetched 3 new logs [20-06-2022 02:50:01]6436: WAF :: fetched 1 new logs [20-06-2022 02:52:02]11937: WAF :: fetched 3 new logs [20-06-2022 02:53:02]14570: Updated license status via CDN [20-06-2022 02:55:01]19879: WAF :: fetched 1 new logs [20-06-2022 02:56:01]22670: WAF :: fetched 2 new logs [20-06-2022 02:57:02]25353: WAF :: fetched 2 new logs [20-06-2022 03:00:03]622: Found and updated 32 CMS installations [20-06-2022 03:02:01]7028: WAF :: fetched 4 new logs [20-06-2022 03:02:48]622: Sending CMS version vulnerability report emails to cpanel users [20-06-2022 03:02:51]622: Checking wordpress installations for suspicious directories [20-06-2022 03:03:01]10016: WAF :: fetched 7 new logs [20-06-2022 03:04:02]12965: WAF :: fetched 4 new logs [20-06-2022 03:04:30]10059: Sending CMS version vulnerability report emails to cpanel users [20-06-2022 03:04:33]10059: Checking wordpress installations for suspicious directories [20-06-2022 03:05:01]15917: WAF :: fetched 3 new logs [20-06-2022 03:06:02]18711: WAF :: fetched 4 new logs [20-06-2022 03:07:02]21343: WAF :: fetched 8 new logs [20-06-2022 03:08:01]23984: WAF :: fetched 1 new logs [20-06-2022 03:10:01]29293: WAF :: fetched 1 new logs [20-06-2022 03:11:01]32079: WAF :: fetched 1 new logs [20-06-2022 03:12:02]2429: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655705522 [20-06-2022 03:12:02]2429: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 03:12:04]2429: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 03:12:04]2429: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-0312/20220620-031202-YrAPsg53CGmE1O_hnppvVwAAAAk [20-06-2022 03:12:04]2429: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 03:12:04]2429: WAF :: fetched 7 new logs [20-06-2022 03:13:01]5198: WAF :: fetched 3 new logs [20-06-2022 03:15:01]10556: WAF :: fetched 2 new logs [20-06-2022 03:16:01]11279: WAF :: fetched 4 new logs [20-06-2022 03:17:02]4102: WAF :: fetched 10 new logs [20-06-2022 03:18:01]13715: WAF :: fetched 9 new logs [20-06-2022 03:19:02]22944: WAF :: fetched 5 new logs [20-06-2022 03:20:01]25590: WAF :: fetched 6 new logs [20-06-2022 03:21:01]28411: WAF :: fetched 7 new logs [20-06-2022 03:22:02]31061: WAF :: fetched 6 new logs [20-06-2022 03:23:01]1288: WAF :: fetched 1 new logs [20-06-2022 03:24:02]4038: WAF :: fetched 1 new logs [20-06-2022 03:27:01]12167: WAF :: fetched 2 new logs [20-06-2022 03:29:02]17508: WAF :: fetched 1 new logs [20-06-2022 03:31:01]22927: WAF :: fetched 2 new logs [20-06-2022 03:32:02]25630: WAF :: fetched 8 new logs [20-06-2022 03:33:01]28258: WAF :: fetched 2 new logs [20-06-2022 03:34:01]30916: WAF :: fetched 2 new logs [20-06-2022 03:36:01]4009: WAF :: fetched 1 new logs [20-06-2022 03:37:02]6690: WAF :: fetched 2 new logs [20-06-2022 03:38:02]9404: WAF :: fetched 3 new logs [20-06-2022 03:39:01]12037: WAF :: fetched 2 new logs [20-06-2022 03:40:01]14715: WAF :: fetched 4 new logs [20-06-2022 03:41:02]17484: WAF :: fetched 8 new logs [20-06-2022 03:41:02]17484: Checking for user cron vulnerabilities [20-06-2022 03:42:02]20144: WAF :: fetched 2 new logs [20-06-2022 03:43:01]22764: WAF :: fetched 10 new logs [20-06-2022 03:44:02]25447: Checking ditributed CMS bruteforce attacks [20-06-2022 03:44:02]25447: WAF :: fetched 11 new logs [20-06-2022 03:45:02]28126: WAF :: fetched 16 new logs [20-06-2022 03:46:01]30878: WAF :: fetched 11 new logs [20-06-2022 03:47:02]1151: WAF :: fetched 6 new logs [20-06-2022 03:48:01]3865: WAF :: fetched 4 new logs [20-06-2022 03:49:02]6568: WAF :: fetched 10 new logs [20-06-2022 03:50:01]9223: WAF :: fetched 9 new logs [20-06-2022 03:51:01]12011: WAF :: fetched 10 new logs [20-06-2022 03:52:02]14685: WAF :: fetched 10 new logs [20-06-2022 03:53:01]17286: WAF :: fetched 9 new logs [20-06-2022 03:54:02]19981: WAF :: fetched 11 new logs [20-06-2022 03:55:01]22613: WAF :: fetched 13 new logs [20-06-2022 03:56:01]25377: WAF :: fetched 13 new logs [20-06-2022 03:57:02]28057: WAF :: fetched 11 new logs [20-06-2022 03:58:01]30670: WAF :: fetched 9 new logs [20-06-2022 03:59:02]946: WAF :: fetched 8 new logs [20-06-2022 04:00:02]3387: WAF :: fetched 8 new logs [20-06-2022 04:01:01]6663: WAF :: fetched 8 new logs [20-06-2022 04:02:02]9398: WAF :: fetched 5 new logs [20-06-2022 04:03:01]12029: WAF :: fetched 4 new logs [20-06-2022 04:04:02]14708: WAF :: fetched 6 new logs [20-06-2022 04:05:01]17344: WAF :: fetched 3 new logs [20-06-2022 04:06:01]20118: WAF :: fetched 4 new logs [20-06-2022 04:07:02]22806: WAF :: fetched 3 new logs [20-06-2022 04:08:01]25436: WAF :: fetched 3 new logs [20-06-2022 04:12:02]3992: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655709122 [20-06-2022 04:12:02]3992: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 04:12:04]3992: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 04:12:04]3992: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-0412/20220620-041202-YrAdwuwdtXKhM21kU93ocAAAABY [20-06-2022 04:12:04]3992: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 04:12:04]3992: WAF :: fetched 1 new logs [20-06-2022 04:17:01]17594: WAF :: fetched 1 new logs [20-06-2022 04:25:01]6813: WAF :: fetched 2 new logs [20-06-2022 04:26:02]9626: WAF :: fetched 1 new logs [20-06-2022 04:28:02]14981: WAF :: fetched 10 new logs [20-06-2022 04:29:01]17586: WAF :: fetched 9 new logs [20-06-2022 04:30:02]20306: WAF :: fetched 10 new logs [20-06-2022 04:31:02]23089: WAF :: fetched 12 new logs [20-06-2022 04:32:01]25737: WAF :: fetched 13 new logs [20-06-2022 04:33:02]28395: WAF :: fetched 22 new logs [20-06-2022 04:34:01]31021: WAF :: fetched 19 new logs [20-06-2022 04:35:02]1313: WAF :: fetched 13 new logs [20-06-2022 04:36:02]4142: WAF :: fetched 14 new logs [20-06-2022 04:37:01]6826: WAF :: fetched 10 new logs [20-06-2022 04:38:02]9521: WAF :: fetched 5 new logs [20-06-2022 04:39:01]12164: WAF :: fetched 3 new logs [20-06-2022 04:40:02]14889: WAF :: fetched 6 new logs [20-06-2022 04:41:02]17627: WAF :: fetched 1 new logs [20-06-2022 04:41:02]17627: Checking for user cron vulnerabilities [20-06-2022 04:42:01]20301: WAF :: fetched 2 new logs [20-06-2022 04:43:02]22963: WAF :: fetched 1 new logs [20-06-2022 04:44:01]25652: Checking ditributed CMS bruteforce attacks [20-06-2022 04:44:01]25652: WAF :: fetched 23 new logs [20-06-2022 04:45:01]28311: WAF :: fetched 68 new logs [20-06-2022 04:46:02]31096: WAF :: fetched 77 new logs [20-06-2022 04:47:01]1350: WAF :: fetched 79 new logs [20-06-2022 04:48:02]4101: WAF :: fetched 76 new logs [20-06-2022 04:49:01]6767: WAF :: fetched 72 new logs [20-06-2022 04:50:02]9561: WAF :: fetched 58 new logs [20-06-2022 04:51:02]12398: WAF :: fetched 13 new logs [20-06-2022 04:52:01]15056: WAF :: fetched 10 new logs [20-06-2022 04:53:02]17728: WAF :: fetched 8 new logs [20-06-2022 04:54:01]20374: WAF :: fetched 7 new logs [20-06-2022 04:55:01]23029: WAF :: fetched 5 new logs [20-06-2022 04:56:02]25839: WAF :: fetched 8 new logs [20-06-2022 04:57:01]28474: WAF :: fetched 9 new logs [20-06-2022 04:58:02]31157: WAF :: fetched 6 new logs [20-06-2022 04:59:01]1424: WAF :: fetched 52 new logs [20-06-2022 05:00:01]3855: WAF :: fetched 88 new logs [20-06-2022 05:01:02]7169: WAF :: fetched 86 new logs [20-06-2022 05:01:42]7171: Starting daily scan on files updated in last 24 hrs [20-06-2022 05:02:01]9886: WAF :: fetched 90 new logs [20-06-2022 05:03:02]12619: WAF :: fetched 100 new logs [20-06-2022 05:04:02]15273: WAF :: fetched 6 new logs [20-06-2022 05:05:01]17953: WAF :: fetched 6 new logs [20-06-2022 05:06:02]20738: WAF :: fetched 5 new logs [20-06-2022 05:07:01]23407: WAF :: fetched 5 new logs [20-06-2022 05:08:02]26059: WAF :: fetched 34 new logs [20-06-2022 05:09:01]28719: WAF :: fetched 5 new logs [20-06-2022 05:10:02]31447: WAF :: fetched 13 new logs [20-06-2022 05:11:02]1836: WAF :: fetched 15 new logs [20-06-2022 05:12:01]4618: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655712721 [20-06-2022 05:12:01]4618: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 05:12:03]4618: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 05:12:03]4618: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-0512/20220620-051201-YrAr0YkpNV3IRP32xKd2zAAAAC8 [20-06-2022 05:12:03]4618: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 05:12:04]4618: WAF :: fetched 10 new logs [20-06-2022 05:13:02]7304: WAF :: fetched 16 new logs [20-06-2022 05:14:01]9972: WAF :: fetched 17 new logs [20-06-2022 05:15:02]12655: WAF :: fetched 13 new logs [20-06-2022 05:16:02]15443: WAF :: fetched 13 new logs [20-06-2022 05:17:01]18089: WAF :: fetched 7 new logs [20-06-2022 05:18:02]20799: WAF :: fetched 8 new logs [20-06-2022 05:19:01]23425: WAF :: fetched 7 new logs [20-06-2022 05:20:02]26161: WAF :: fetched 3 new logs [20-06-2022 05:21:02]28940: WAF :: fetched 7 new logs [20-06-2022 05:22:01]31598: WAF :: fetched 5 new logs [20-06-2022 05:23:02]1879: WAF :: fetched 6 new logs [20-06-2022 05:24:01]4467: WAF :: fetched 2 new logs [20-06-2022 05:25:02]7307: WAF :: fetched 3 new logs [20-06-2022 05:26:01]10086: WAF :: fetched 2 new logs [20-06-2022 05:27:02]12782: WAF :: fetched 1 new logs [20-06-2022 05:28:02]15435: WAF :: fetched 2 new logs [20-06-2022 05:29:01]18067: WAF :: fetched 5 new logs [20-06-2022 05:30:02]20756: WAF :: fetched 3 new logs [20-06-2022 05:31:01]23543: WAF :: fetched 7 new logs [20-06-2022 05:32:01]26235: WAF :: fetched 5 new logs [20-06-2022 05:33:02]28944: WAF :: fetched 5 new logs [20-06-2022 05:34:01]31592: WAF :: fetched 5 new logs [20-06-2022 05:35:02]1921: WAF :: fetched 4 new logs [20-06-2022 05:36:02]4853: WAF :: fetched 8 new logs [20-06-2022 05:37:01]7562: WAF :: fetched 9 new logs [20-06-2022 05:38:02]10304: WAF :: fetched 9 new logs [20-06-2022 05:39:01]12991: WAF :: fetched 13 new logs [20-06-2022 05:40:02]15755: WAF :: fetched 7 new logs [20-06-2022 05:41:01]18559: WAF :: fetched 15 new logs [20-06-2022 05:41:01]18559: Checking for user cron vulnerabilities [20-06-2022 05:42:02]21293: WAF :: fetched 4 new logs [20-06-2022 05:43:01]23973: WAF :: fetched 3 new logs [20-06-2022 05:44:02]26711: Checking ditributed CMS bruteforce attacks [20-06-2022 05:46:01]32193: WAF :: fetched 1 new logs [20-06-2022 05:49:01]7985: WAF :: fetched 28 new logs [20-06-2022 05:50:02]10746: WAF :: fetched 1 new logs [20-06-2022 05:52:02]16344: WAF :: fetched 3 new logs [20-06-2022 05:53:01]19114: WAF :: fetched 1 new logs [20-06-2022 05:54:02]21937: WAF :: fetched 5 new logs [20-06-2022 05:55:01]24722: WAF :: fetched 4 new logs [20-06-2022 05:56:01]27542: WAF :: fetched 3 new logs [20-06-2022 05:57:02]30247: WAF :: fetched 5 new logs [20-06-2022 05:58:01]582: WAF :: fetched 3 new logs [20-06-2022 05:59:02]3484: WAF :: fetched 5 new logs [20-06-2022 06:00:02]6077: WAF :: fetched 4 new logs [20-06-2022 06:01:01]9508: WAF :: fetched 8 new logs [20-06-2022 06:02:02]12391: WAF :: fetched 8 new logs [20-06-2022 06:03:01]15144: WAF :: fetched 5 new logs [20-06-2022 06:04:02]17968: WAF :: fetched 2 new logs [20-06-2022 06:05:02]20658: WAF :: fetched 3 new logs [20-06-2022 06:06:01]23418: WAF :: fetched 21 new logs [20-06-2022 06:07:01]26081: WAF :: fetched 181 new logs [20-06-2022 06:08:01]28725: WAF :: fetched 8 new logs [20-06-2022 06:09:02]31404: WAF :: fetched 5 new logs [20-06-2022 06:10:02]1665: WAF :: fetched 4 new logs [20-06-2022 06:11:01]4604: WAF :: fetched 1 new logs [20-06-2022 06:12:01]7305: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655716321 [20-06-2022 06:12:01]7305: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 06:12:03]7305: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 06:12:03]7305: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-0612/20220620-061201-YrA54RPP2Al8wb9hzR3XQQAAAAI [20-06-2022 06:12:03]7305: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 06:12:04]7305: WAF :: fetched 1 new logs [20-06-2022 06:14:02]12663: WAF :: fetched 1 new logs [20-06-2022 06:16:01]18120: WAF :: fetched 1 new logs [20-06-2022 06:18:01]23457: WAF :: fetched 1 new logs [20-06-2022 06:22:02]1891: WAF :: fetched 1 new logs [20-06-2022 06:23:02]4621: WAF :: fetched 1 new logs [20-06-2022 06:25:01]9971: WAF :: fetched 1 new logs [20-06-2022 06:26:02]12783: WAF :: fetched 1 new logs [20-06-2022 06:27:01]15571: WAF :: fetched 1 new logs [20-06-2022 06:29:02]20886: WAF :: fetched 5 new logs [20-06-2022 06:30:01]23569: WAF :: fetched 8 new logs [20-06-2022 06:31:02]26379: WAF :: fetched 7 new logs [20-06-2022 06:32:02]29033: WAF :: fetched 7 new logs [20-06-2022 06:33:01]31670: WAF :: fetched 7 new logs [20-06-2022 06:34:02]1986: WAF :: fetched 9 new logs [20-06-2022 06:39:01]15555: WAF :: fetched 6 new logs [20-06-2022 06:40:01]18189: WAF :: fetched 3 new logs [20-06-2022 06:41:02]21012: WAF :: fetched 4 new logs [20-06-2022 06:41:02]21012: Checking for user cron vulnerabilities [20-06-2022 06:42:01]23649: WAF :: fetched 8 new logs [20-06-2022 06:43:02]26355: WAF :: fetched 5 new logs [20-06-2022 06:44:01]29048: Checking ditributed CMS bruteforce attacks [20-06-2022 06:44:02]29048: WAF :: fetched 4 new logs [20-06-2022 06:45:01]31703: WAF :: fetched 4 new logs [20-06-2022 06:46:02]2086: WAF :: fetched 5 new logs [20-06-2022 06:47:01]4803: WAF :: fetched 2 new logs [20-06-2022 06:48:02]7533: WAF :: fetched 6 new logs [20-06-2022 06:49:02]10217: WAF :: fetched 8 new logs [20-06-2022 06:50:01]12918: WAF :: fetched 11 new logs [20-06-2022 06:51:02]15729: WAF :: fetched 3 new logs [20-06-2022 06:52:01]18392: WAF :: fetched 3 new logs [20-06-2022 06:55:01]26400: WAF :: fetched 3 new logs [20-06-2022 06:56:02]29148: WAF :: fetched 6 new logs [20-06-2022 06:57:02]31841: WAF :: fetched 11 new logs [20-06-2022 06:58:02]2127: WAF :: fetched 4 new logs [20-06-2022 06:59:01]4877: WAF :: fetched 7 new logs [20-06-2022 07:00:02]7348: WAF :: fetched 8 new logs [20-06-2022 07:01:02]10559: WAF :: fetched 9 new logs [20-06-2022 07:02:01]13299: WAF :: fetched 6 new logs [20-06-2022 07:03:02]16003: WAF :: fetched 2 new logs [20-06-2022 07:04:01]18658: WAF :: fetched 8 new logs [20-06-2022 07:05:02]21339: WAF :: fetched 9 new logs [20-06-2022 07:06:02]24065: WAF :: fetched 13 new logs [20-06-2022 07:07:01]26777: WAF :: fetched 6 new logs [20-06-2022 07:08:02]29479: WAF :: fetched 3 new logs [20-06-2022 07:09:01]32132: WAF :: fetched 8 new logs [20-06-2022 07:10:01]2480: WAF :: fetched 8 new logs [20-06-2022 07:11:02]5316: WAF :: fetched 10 new logs [20-06-2022 07:12:01]8076: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655719921 [20-06-2022 07:12:04]8076: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 07:12:06]8076: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 07:12:06]8076: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-0712/20220620-071204-YrBH9H3zBXaIEUfNky3cyAAAAAk [20-06-2022 07:12:06]8076: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 07:12:06]8076: WAF :: fetched 17 new logs [20-06-2022 07:13:02]10797: WAF :: fetched 9 new logs [20-06-2022 07:14:02]13443: WAF :: fetched 8 new logs [20-06-2022 07:15:01]16143: WAF :: fetched 4 new logs [20-06-2022 07:16:01]18844: WAF :: fetched 7 new logs [20-06-2022 07:17:02]21636: WAF :: fetched 2 new logs [20-06-2022 07:18:01]24297: WAF :: fetched 86 new logs [20-06-2022 07:19:02]26970: WAF :: fetched 114 new logs [20-06-2022 07:20:02]29625: WAF :: fetched 104 new logs [20-06-2022 07:21:01]32345: WAF :: fetched 96 new logs [20-06-2022 07:22:02]2723: WAF :: fetched 57 new logs [20-06-2022 07:23:01]5418: WAF :: fetched 1 new logs [20-06-2022 07:24:02]8130: WAF :: fetched 1 new logs [20-06-2022 07:27:01]16245: WAF :: fetched 1 new logs [20-06-2022 07:28:01]18906: WAF :: fetched 3 new logs [20-06-2022 07:29:02]21583: WAF :: fetched 1 new logs [20-06-2022 07:30:01]24227: WAF :: fetched 4 new logs [20-06-2022 07:31:02]26973: WAF :: fetched 4 new logs [20-06-2022 07:32:02]29736: WAF :: fetched 9 new logs [20-06-2022 07:33:02]32389: WAF :: fetched 8 new logs [20-06-2022 07:34:01]2679: WAF :: fetched 12 new logs [20-06-2022 07:35:01]5442: WAF :: fetched 12 new logs [20-06-2022 07:36:02]8227: WAF :: fetched 12 new logs [20-06-2022 07:37:01]10981: WAF :: fetched 5 new logs [20-06-2022 07:38:02]13642: WAF :: fetched 4 new logs [20-06-2022 07:39:01]16336: WAF :: fetched 2 new logs [20-06-2022 07:40:02]19034: WAF :: fetched 3 new logs [20-06-2022 07:41:01]21721: WAF :: fetched 3 new logs [20-06-2022 07:41:01]21721: Checking for user cron vulnerabilities [20-06-2022 07:42:01]24477: WAF :: fetched 6 new logs [20-06-2022 07:43:02]27181: WAF :: fetched 11 new logs [20-06-2022 07:44:01]29832: Checking ditributed CMS bruteforce attacks [20-06-2022 07:44:01]29832: WAF :: fetched 7 new logs [20-06-2022 07:45:02]: Checking for definition updates [20-06-2022 07:46:01]2863: WAF :: fetched 1 new logs [20-06-2022 07:47:01]5702: WAF :: fetched 1 new logs [20-06-2022 07:48:02]8420: WAF :: fetched 1 new logs [20-06-2022 07:50:02]13825: WAF :: fetched 1 new logs [20-06-2022 07:53:01]21980: WAF :: fetched 1 new logs [20-06-2022 07:54:02]24670: WAF :: fetched 5 new logs [20-06-2022 07:55:01]27347: WAF :: fetched 6 new logs [20-06-2022 07:57:01]352: WAF :: fetched 1 new logs [20-06-2022 08:02:01]14282: WAF :: fetched 4 new logs [20-06-2022 08:03:01]16959: WAF :: fetched 2 new logs [20-06-2022 08:04:02]19650: WAF :: fetched 10 new logs [20-06-2022 08:05:01]22206: WAF :: fetched 3 new logs [20-06-2022 08:06:02]25059: WAF :: fetched 81 new logs [20-06-2022 08:07:01]27764: WAF :: fetched 4 new logs [20-06-2022 08:08:01]30402: WAF :: fetched 9 new logs [20-06-2022 08:09:02]659: WAF :: fetched 9 new logs [20-06-2022 08:10:01]3372: WAF :: fetched 14 new logs [20-06-2022 08:11:01]6191: WAF :: fetched 14 new logs [20-06-2022 08:12:02]9001: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655723522 [20-06-2022 08:12:02]9001: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 08:12:04]9001: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 08:12:04]9001: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-0812/20220620-081202-YrBWAvgugLbAvZjpq91fNAAAAAU [20-06-2022 08:12:04]9001: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 08:12:04]9001: WAF :: fetched 22 new logs [20-06-2022 08:13:01]11687: WAF :: fetched 15 new logs [20-06-2022 08:14:02]14401: WAF :: fetched 15 new logs [20-06-2022 08:15:01]17054: WAF :: fetched 12 new logs [20-06-2022 08:16:01]19753: WAF :: fetched 8 new logs [20-06-2022 08:17:02]22542: WAF :: fetched 95 new logs [20-06-2022 08:18:01]25231: WAF :: fetched 5 new logs [20-06-2022 08:19:02]27936: WAF :: fetched 40 new logs [20-06-2022 08:20:02]30559: WAF :: fetched 52 new logs [20-06-2022 08:21:01]888: WAF :: fetched 5 new logs [20-06-2022 08:22:02]3748: WAF :: fetched 10 new logs [20-06-2022 08:23:01]6493: WAF :: fetched 7 new logs [20-06-2022 08:24:02]9197: WAF :: fetched 6 new logs [20-06-2022 08:25:02]11855: WAF :: fetched 14 new logs [20-06-2022 08:26:01]14631: WAF :: fetched 15 new logs [20-06-2022 08:27:02]17429: WAF :: fetched 13 new logs [20-06-2022 08:28:01]20061: WAF :: fetched 7 new logs [20-06-2022 08:29:01]22748: WAF :: fetched 5 new logs [20-06-2022 08:30:02]25496: WAF :: fetched 4 new logs [20-06-2022 08:31:01]28207: WAF :: fetched 3 new logs [20-06-2022 08:32:02]30982: WAF :: fetched 9 new logs [20-06-2022 08:33:01]1258: WAF :: fetched 6 new logs [20-06-2022 08:34:02]4018: WAF :: fetched 6 new logs [20-06-2022 08:35:01]6749: WAF :: fetched 12 new logs [20-06-2022 08:36:01]9506: WAF :: fetched 19 new logs [20-06-2022 08:37:02]12271: WAF :: fetched 16 new logs [20-06-2022 08:38:01]14956: WAF :: fetched 18 new logs [20-06-2022 08:39:02]17702: WAF :: fetched 19 new logs [20-06-2022 08:40:02]20397: WAF :: fetched 20 new logs [20-06-2022 08:41:01]23153: WAF :: fetched 14 new logs [20-06-2022 08:41:01]23153: Checking for user cron vulnerabilities [20-06-2022 08:42:02]25972: WAF :: fetched 7 new logs [20-06-2022 08:43:02]28681: WAF :: fetched 33 new logs [20-06-2022 08:44:01]31488: Checking ditributed CMS bruteforce attacks [20-06-2022 08:44:01]31488: WAF :: fetched 211 new logs [20-06-2022 08:45:02]1805: WAF :: fetched 25 new logs [20-06-2022 08:46:01]4678: WAF :: fetched 14 new logs [20-06-2022 08:47:02]7522: WAF :: fetched 8 new logs [20-06-2022 08:48:02]10244: WAF :: fetched 8 new logs [20-06-2022 08:49:02]12940: WAF :: fetched 11 new logs [20-06-2022 08:50:01]15650: WAF :: fetched 7 new logs [20-06-2022 08:51:02]18457: WAF :: fetched 9 new logs [20-06-2022 08:52:02]21329: WAF :: fetched 7 new logs [20-06-2022 08:53:01]23970: WAF :: fetched 11 new logs [20-06-2022 08:54:01]26694: WAF :: fetched 8 new logs [20-06-2022 08:55:02]29436: WAF :: fetched 8 new logs [20-06-2022 08:56:01]32203: WAF :: fetched 46 new logs [20-06-2022 08:57:01]2648: WAF :: fetched 63 new logs [20-06-2022 08:58:02]5438: WAF :: fetched 44 new logs [20-06-2022 08:59:01]8096: WAF :: fetched 39 new logs [20-06-2022 09:00:01]10583: WAF :: fetched 26 new logs [20-06-2022 09:01:02]13784: WAF :: fetched 1 new logs [20-06-2022 09:04:02]22005: WAF :: fetched 1 new logs [20-06-2022 09:05:01]24741: WAF :: fetched 4 new logs [20-06-2022 09:06:02]27534: WAF :: fetched 1 new logs [20-06-2022 09:07:01]30299: WAF :: fetched 4 new logs [20-06-2022 09:08:01]604: WAF :: fetched 5 new logs [20-06-2022 09:09:02]3451: WAF :: fetched 5 new logs [20-06-2022 09:10:01]6187: WAF :: fetched 2 new logs [20-06-2022 09:11:02]8974: WAF :: fetched 3 new logs [20-06-2022 09:12:02]11738: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655727122 [20-06-2022 09:12:02]11738: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 09:12:04]11738: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 09:12:04]11738: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-0912/20220620-091202-YrBkEl6Djsh_RNDms_w6FgAAAAc [20-06-2022 09:12:04]11738: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [20-06-2022 09:12:04]11738: WAF :: fetched 1 new logs [20-06-2022 09:13:01]14396: WAF :: fetched 1 new logs [20-06-2022 09:14:02]17131: WAF :: fetched 5 new logs [20-06-2022 09:15:01]19855: WAF :: fetched 7 new logs [20-06-2022 09:16:02]22658: WAF :: fetched 5 new logs [20-06-2022 09:17:01]25411: WAF :: fetched 5 new logs [20-06-2022 09:18:02]28142: WAF :: fetched 7 new logs [20-06-2022 09:19:02]30833: WAF :: fetched 7 new logs [20-06-2022 09:20:01]1230: WAF :: fetched 5 new logs [20-06-2022 09:21:02]4098: WAF :: fetched 4 new logs [20-06-2022 09:22:02]6919: WAF :: fetched 8 new logs [20-06-2022 09:23:02]9646: WAF :: fetched 11 new logs [20-06-2022 09:24:01]12362: WAF :: fetched 12 new logs [20-06-2022 09:25:02]15133: WAF :: fetched 13 new logs [20-06-2022 09:26:01]17921: WAF :: fetched 9 new logs [20-06-2022 09:27:01]20731: WAF :: fetched 11 new logs [20-06-2022 09:28:02]23472: WAF :: fetched 5 new logs [20-06-2022 09:29:01]26167: WAF :: fetched 4 new logs [20-06-2022 09:30:02]28889: WAF :: fetched 5 new logs [20-06-2022 09:31:01]31718: WAF :: fetched 9 new logs [20-06-2022 09:32:02]2149: WAF :: fetched 5 new logs [20-06-2022 09:33:02]4906: WAF :: fetched 7 new logs [20-06-2022 09:34:01]7648: WAF :: fetched 6 new logs [20-06-2022 09:35:02]10385: WAF :: fetched 5 new logs [20-06-2022 09:36:02]13187: WAF :: fetched 11 new logs [20-06-2022 09:37:01]15997: WAF :: fetched 6 new logs [20-06-2022 09:38:02]18724: WAF :: fetched 12 new logs [20-06-2022 09:39:01]21482: WAF :: fetched 6 new logs [20-06-2022 09:40:02]24273: WAF :: fetched 4 new logs [20-06-2022 09:41:01]27114: WAF :: fetched 7 new logs [20-06-2022 09:41:01]27114: Checking for user cron vulnerabilities [20-06-2022 09:42:02]30029: WAF :: fetched 6 new logs [20-06-2022 09:43:01]32672: WAF :: fetched 18 new logs [20-06-2022 09:44:01]3052: Checking ditributed CMS bruteforce attacks [20-06-2022 09:44:01]3052: WAF :: fetched 26 new logs [20-06-2022 09:45:02]5974: WAF :: fetched 20 new logs [20-06-2022 09:46:02]8775: WAF :: fetched 81 new logs [20-06-2022 09:47:01]11653: WAF :: fetched 104 new logs [20-06-2022 09:48:02]14489: WAF :: fetched 110 new logs [20-06-2022 09:49:01]17238: WAF :: fetched 103 new logs [20-06-2022 09:50:02]20070: WAF :: fetched 67 new logs [20-06-2022 09:51:02]22913: WAF :: fetched 108 new logs [20-06-2022 09:52:02]25755: WAF :: fetched 55 new logs [20-06-2022 09:53:01]28441: WAF :: fetched 11 new logs [20-06-2022 09:54:02]31215: WAF :: fetched 12 new logs [20-06-2022 09:55:02]1540: WAF :: fetched 14 new logs [20-06-2022 09:56:01]4475: WAF :: fetched 8 new logs [20-06-2022 09:57:01]7257: WAF :: fetched 6 new logs [20-06-2022 09:59:01]12805: WAF :: fetched 2 new logs [20-06-2022 10:00:02]15266: WAF :: fetched 1 new logs [20-06-2022 10:02:01]21369: WAF :: fetched 1 new logs [20-06-2022 10:03:02]24170: WAF :: fetched 2 new logs [20-06-2022 10:04:01]26917: WAF :: fetched 4 new logs [20-06-2022 10:05:01]29692: WAF :: fetched 1 new logs [20-06-2022 10:06:02]32524: WAF :: fetched 7 new logs [20-06-2022 10:09:01]8648: WAF :: fetched 2 new logs [20-06-2022 10:10:02]11488: WAF :: fetched 4 new logs [20-06-2022 10:11:01]14259: WAF :: fetched 1 new logs [20-06-2022 10:12:02]17242: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655730722 [20-06-2022 10:12:02]17242: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 10:12:04]17242: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 10:12:04]17242: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-1012/20220620-101202-YrByIhEwunm5zJtFvcAy-gAAABo [20-06-2022 10:12:04]17242: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 10:12:05]17242: WAF :: fetched 801 new logs [20-06-2022 10:13:01]20061: WAF :: fetched 4 new logs [20-06-2022 10:14:02]22903: WAF :: fetched 4 new logs [20-06-2022 10:15:02]25759: WAF :: fetched 75 new logs [20-06-2022 10:16:02]28722: WAF :: fetched 99 new logs [20-06-2022 10:17:02]31562: WAF :: fetched 100 new logs [20-06-2022 10:18:02]1877: WAF :: fetched 106 new logs [20-06-2022 10:19:01]4725: WAF :: fetched 89 new logs [20-06-2022 10:20:02]7596: WAF :: fetched 10 new logs [20-06-2022 10:21:02]10456: WAF :: fetched 4 new logs [20-06-2022 10:22:01]13321: WAF :: fetched 12 new logs [20-06-2022 10:23:02]16160: WAF :: fetched 7 new logs [20-06-2022 10:24:02]18850: WAF :: fetched 8 new logs [20-06-2022 10:25:01]21593: WAF :: fetched 5 new logs [20-06-2022 10:26:02]24465: WAF :: fetched 4 new logs [20-06-2022 10:27:01]27305: WAF :: fetched 3 new logs [20-06-2022 10:29:02]413: WAF :: fetched 1 new logs [20-06-2022 10:30:01]3319: WAF :: fetched 3 new logs [20-06-2022 10:33:01]11843: WAF :: fetched 2 new logs [20-06-2022 10:34:02]14648: WAF :: fetched 5 new logs [20-06-2022 10:35:02]17493: WAF :: fetched 6 new logs [20-06-2022 10:36:01]20383: WAF :: fetched 6 new logs [20-06-2022 10:37:02]23255: WAF :: fetched 6 new logs [20-06-2022 10:38:01]26004: WAF :: fetched 3 new logs [20-06-2022 10:39:02]28833: WAF :: fetched 4 new logs [20-06-2022 10:40:02]31606: WAF :: fetched 6 new logs [20-06-2022 10:41:01]2088: WAF :: fetched 13 new logs [20-06-2022 10:41:01]2088: Checking for user cron vulnerabilities [20-06-2022 10:42:01]5018: WAF :: fetched 6 new logs [20-06-2022 10:43:01]7750: WAF :: fetched 1 new logs [20-06-2022 10:44:01]10547: Checking ditributed CMS bruteforce attacks [20-06-2022 10:44:02]10547: WAF :: fetched 1 new logs [20-06-2022 10:45:01]13327: WAF :: fetched 4 new logs [20-06-2022 10:47:01]18925: WAF :: fetched 1 new logs [20-06-2022 10:48:02]21887: WAF :: fetched 4 new logs [20-06-2022 10:51:02]30201: WAF :: fetched 3 new logs [20-06-2022 10:52:02]566: WAF :: fetched 3 new logs [20-06-2022 10:53:01]3371: WAF :: fetched 2 new logs [20-06-2022 10:55:01]9051: WAF :: fetched 3 new logs [20-06-2022 10:56:02]11865: WAF :: fetched 2 new logs [20-06-2022 10:57:02]14814: WAF :: fetched 6 new logs [20-06-2022 10:58:01]17576: WAF :: fetched 2 new logs [20-06-2022 10:59:02]20354: WAF :: fetched 2 new logs [20-06-2022 11:00:01]22807: WAF :: fetched 7 new logs [20-06-2022 11:01:01]26218: WAF :: fetched 7 new logs [20-06-2022 11:02:02]29102: WAF :: fetched 8 new logs [20-06-2022 11:03:01]31817: WAF :: fetched 8 new logs [20-06-2022 11:04:02]2257: WAF :: fetched 16 new logs [20-06-2022 11:05:02]5134: WAF :: fetched 12 new logs [20-06-2022 11:06:02]8036: WAF :: fetched 11 new logs [20-06-2022 11:07:01]10922: WAF :: fetched 12 new logs [20-06-2022 11:08:00]11083: Performed RBL check for 23.111.136.34. [20-06-2022 11:12:02]24976: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655734322 [20-06-2022 11:12:02]24976: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 11:12:04]24976: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 11:12:04]24976: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-1112/20220620-111202-YrCAMgLUBDuVLfY8i6ggzgAAABc [20-06-2022 11:12:04]24976: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 11:12:04]24976: WAF :: fetched 2 new logs [20-06-2022 11:13:01]27707: WAF :: fetched 2 new logs [20-06-2022 11:15:02]801: WAF :: fetched 1 new logs [20-06-2022 11:16:01]3662: WAF :: fetched 2 new logs [20-06-2022 11:17:02]6695: WAF :: fetched 1 new logs [20-06-2022 11:18:01]9494: WAF :: fetched 1 new logs [20-06-2022 11:19:01]12269: WAF :: fetched 2 new logs [20-06-2022 11:20:02]15118: WAF :: fetched 3 new logs [20-06-2022 11:21:01]17849: WAF :: fetched 3 new logs [20-06-2022 11:22:02]20873: WAF :: fetched 3 new logs [20-06-2022 11:23:01]23686: WAF :: fetched 1 new logs [20-06-2022 11:24:02]26534: WAF :: fetched 5 new logs [20-06-2022 11:25:02]29252: WAF :: fetched 3 new logs [20-06-2022 11:26:01]32102: WAF :: fetched 6 new logs [20-06-2022 11:27:02]2630: WAF :: fetched 3 new logs [20-06-2022 11:28:01]5462: WAF :: fetched 3 new logs [20-06-2022 11:29:02]8225: WAF :: fetched 8 new logs [20-06-2022 11:30:02]11016: WAF :: fetched 11 new logs [20-06-2022 11:31:01]13831: WAF :: fetched 8 new logs [20-06-2022 11:32:02]16754: WAF :: fetched 6 new logs [20-06-2022 11:33:02]19455: WAF :: fetched 11 new logs [20-06-2022 11:34:01]22211: WAF :: fetched 9 new logs [20-06-2022 11:35:02]24985: WAF :: fetched 7 new logs [20-06-2022 11:36:01]27800: WAF :: fetched 8 new logs [20-06-2022 11:37:01]30633: WAF :: fetched 2 new logs [20-06-2022 11:38:02]1007: WAF :: fetched 1 new logs [20-06-2022 11:41:02]9616: Checking for user cron vulnerabilities [20-06-2022 11:42:02]12442: WAF :: fetched 2 new logs [20-06-2022 11:43:01]15161: WAF :: fetched 5 new logs [20-06-2022 11:44:02]18014: Checking ditributed CMS bruteforce attacks [20-06-2022 11:44:02]18014: WAF :: fetched 9 new logs [20-06-2022 11:45:01]20750: WAF :: fetched 11 new logs [20-06-2022 11:46:02]23611: WAF :: fetched 19 new logs [20-06-2022 11:47:02]26426: WAF :: fetched 16 new logs [20-06-2022 11:48:01]29204: WAF :: fetched 18 new logs [20-06-2022 11:49:02]32048: WAF :: fetched 13 new logs [20-06-2022 11:50:01]2507: WAF :: fetched 10 new logs [20-06-2022 11:51:02]5497: WAF :: fetched 8 new logs [20-06-2022 11:52:02]8390: WAF :: fetched 4 new logs [20-06-2022 11:53:01]11246: WAF :: fetched 7 new logs [20-06-2022 11:56:01]19633: WAF :: fetched 2 new logs [20-06-2022 11:57:02]22528: WAF :: fetched 4 new logs [20-06-2022 11:58:02]25344: WAF :: fetched 4 new logs [20-06-2022 11:59:02]28151: WAF :: fetched 3 new logs [20-06-2022 12:00:01]30632: WAF :: fetched 6 new logs [20-06-2022 12:01:02]1551: WAF :: fetched 10 new logs [20-06-2022 12:02:02]4499: WAF :: fetched 8 new logs [20-06-2022 12:03:01]7375: WAF :: fetched 8 new logs [20-06-2022 12:04:02]10173: WAF :: fetched 8 new logs [20-06-2022 12:05:02]12944: WAF :: fetched 7 new logs [20-06-2022 12:06:02]15760: WAF :: fetched 5 new logs [20-06-2022 12:07:01]18459: WAF :: fetched 4 new logs [20-06-2022 12:08:02]21257: WAF :: fetched 3 new logs [20-06-2022 12:09:02]24007: WAF :: fetched 8 new logs [20-06-2022 12:10:01]26740: WAF :: fetched 13 new logs [20-06-2022 12:11:02]29542: WAF :: fetched 12 new logs [20-06-2022 12:12:01]32211: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655737921 [20-06-2022 12:12:01]32211: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 12:12:03]32211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 12:12:04]32211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-1212/20220620-121201-YrCOQW-1G83vRSQCpivI7QAAABQ [20-06-2022 12:12:04]32211: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 12:12:04]32211: WAF :: fetched 9 new logs [20-06-2022 12:13:02]2605: WAF :: fetched 26 new logs [20-06-2022 12:14:01]5376: WAF :: fetched 9 new logs [20-06-2022 12:15:02]8138: WAF :: fetched 11 new logs [20-06-2022 12:16:01]10890: WAF :: fetched 13 new logs [20-06-2022 12:17:02]14252: WAF :: fetched 5 new logs [20-06-2022 12:18:01]17356: WAF :: fetched 1 new logs [20-06-2022 12:19:02]20119: WAF :: fetched 2 new logs [20-06-2022 12:21:02]25707: WAF :: fetched 2 new logs [20-06-2022 12:23:01]31253: WAF :: fetched 6 new logs [20-06-2022 12:25:02]4560: WAF :: fetched 2 new logs [20-06-2022 12:26:01]7502: WAF :: fetched 1 new logs [20-06-2022 12:27:02]10277: WAF :: fetched 3 new logs [20-06-2022 12:28:01]13095: WAF :: fetched 3 new logs [20-06-2022 12:29:01]15838: WAF :: fetched 5 new logs [20-06-2022 12:30:02]18657: WAF :: fetched 9 new logs [20-06-2022 12:31:01]21459: WAF :: fetched 3 new logs [20-06-2022 12:32:02]24312: WAF :: fetched 6 new logs [20-06-2022 12:33:02]27074: WAF :: fetched 1 new logs [20-06-2022 12:37:01]5801: WAF :: fetched 2 new logs [20-06-2022 12:38:02]8701: WAF :: fetched 1 new logs [20-06-2022 12:39:01]11461: WAF :: fetched 2 new logs [20-06-2022 12:41:02]17071: WAF :: fetched 6 new logs [20-06-2022 12:41:02]17071: Checking for user cron vulnerabilities [20-06-2022 12:42:01]19826: WAF :: fetched 9 new logs [20-06-2022 12:43:02]22693: WAF :: fetched 12 new logs [20-06-2022 12:44:01]25435: Checking ditributed CMS bruteforce attacks [20-06-2022 12:44:02]25435: WAF :: fetched 5 new logs [20-06-2022 12:45:01]: Checking for software updates [20-06-2022 12:45:01]28207: WAF :: fetched 8 new logs [20-06-2022 12:46:02]30996: WAF :: fetched 14 new logs [20-06-2022 12:47:01]1288: WAF :: fetched 5 new logs [20-06-2022 12:48:02]4201: WAF :: fetched 2 new logs [20-06-2022 12:49:02]6964: WAF :: fetched 1 new logs [20-06-2022 12:50:01]9737: WAF :: fetched 2 new logs [20-06-2022 12:51:02]12578: WAF :: fetched 1 new logs [20-06-2022 12:52:02]15316: WAF :: fetched 3 new logs [20-06-2022 12:55:01]23594: WAF :: fetched 5 new logs [20-06-2022 12:57:02]29155: WAF :: fetched 2 new logs [20-06-2022 12:59:02]2309: WAF :: fetched 4 new logs [20-06-2022 13:00:02]4807: WAF :: fetched 5 new logs [20-06-2022 13:01:01]8030: WAF :: fetched 1 new logs [20-06-2022 13:04:01]16383: WAF :: fetched 2 new logs [20-06-2022 13:05:02]19147: WAF :: fetched 3 new logs [20-06-2022 13:06:01]21915: WAF :: fetched 2 new logs [20-06-2022 13:07:02]24715: WAF :: fetched 9 new logs [20-06-2022 13:08:02]27528: WAF :: fetched 3 new logs [20-06-2022 13:09:02]30308: WAF :: fetched 2 new logs [20-06-2022 13:12:02]6296: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655741522 [20-06-2022 13:12:02]6296: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 13:12:04]6296: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 13:12:04]6296: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-1312/20220620-131202-YrCcUlz6Y2wSTsAVCL_OLQAAAAQ [20-06-2022 13:12:04]6296: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 13:13:01]9139: WAF :: fetched 14 new logs [20-06-2022 13:14:02]11883: WAF :: fetched 3 new logs [20-06-2022 13:15:01]14681: WAF :: fetched 3 new logs [20-06-2022 13:16:01]17503: WAF :: fetched 3 new logs [20-06-2022 13:17:02]20262: WAF :: fetched 3 new logs [20-06-2022 13:18:01]23067: WAF :: fetched 2 new logs [20-06-2022 13:21:01]31404: WAF :: fetched 1 new logs [20-06-2022 13:22:01]1744: WAF :: fetched 8 new logs [20-06-2022 13:23:02]4666: WAF :: fetched 10 new logs [20-06-2022 13:24:02]7392: WAF :: fetched 7 new logs [20-06-2022 13:25:01]10172: WAF :: fetched 13 new logs [20-06-2022 13:26:02]13012: WAF :: fetched 10 new logs [20-06-2022 13:27:02]15767: WAF :: fetched 6 new logs [20-06-2022 13:28:01]18561: WAF :: fetched 13 new logs [20-06-2022 13:29:02]21328: WAF :: fetched 79 new logs [20-06-2022 13:30:02]24073: WAF :: fetched 80 new logs [20-06-2022 13:31:01]26923: WAF :: fetched 90 new logs [20-06-2022 13:32:02]29711: WAF :: fetched 69 new logs [20-06-2022 13:33:01]32578: WAF :: fetched 54 new logs [20-06-2022 13:34:02]2986: WAF :: fetched 6 new logs [20-06-2022 13:35:02]5812: WAF :: fetched 9 new logs [20-06-2022 13:36:01]8714: WAF :: fetched 6 new logs [20-06-2022 13:37:02]11541: WAF :: fetched 2 new logs [20-06-2022 13:38:01]14327: WAF :: fetched 5 new logs [20-06-2022 13:39:02]17066: WAF :: fetched 3 new logs [20-06-2022 13:40:02]19804: WAF :: fetched 4 new logs [20-06-2022 13:41:01]22646: WAF :: fetched 2 new logs [20-06-2022 13:41:01]22646: Checking for user cron vulnerabilities [20-06-2022 13:42:02]25417: WAF :: fetched 1 new logs [20-06-2022 13:43:01]28224: WAF :: fetched 2 new logs [20-06-2022 13:44:01]30980: Checking ditributed CMS bruteforce attacks [20-06-2022 13:45:01]: Checking for definition updates [20-06-2022 13:45:02]1321: WAF :: fetched 3 new logs [20-06-2022 13:46:01]4195: WAF :: fetched 1 new logs [20-06-2022 13:47:02]7051: WAF :: fetched 2 new logs [20-06-2022 13:48:02]9838: WAF :: fetched 17 new logs [20-06-2022 13:49:01]12590: WAF :: fetched 1 new logs [20-06-2022 13:50:02]15402: WAF :: fetched 1 new logs [20-06-2022 13:51:01]18298: WAF :: fetched 4 new logs [20-06-2022 13:52:02]21139: WAF :: fetched 3 new logs [20-06-2022 13:52:02]21141: httpd.conf changed. Refreshing watchlist. [20-06-2022 13:53:01]23999: WAF :: fetched 1 new logs [20-06-2022 13:56:02]32378: WAF :: fetched 2 new logs [20-06-2022 13:57:01]2864: httpd.conf changed. Refreshing watchlist. [20-06-2022 13:57:01]2875: WAF :: fetched 60 new logs [20-06-2022 13:58:01]5868: WAF :: fetched 13 new logs [20-06-2022 13:59:02]8731: WAF :: fetched 9 new logs [20-06-2022 14:00:01]11205: WAF :: fetched 8 new logs [20-06-2022 14:01:02]14462: WAF :: fetched 10 new logs [20-06-2022 14:02:02]17322: WAF :: fetched 5 new logs [20-06-2022 14:03:01]20222: WAF :: fetched 5 new logs [20-06-2022 14:04:02]23021: WAF :: fetched 1 new logs [20-06-2022 14:07:02]31440: WAF :: fetched 4 new logs [20-06-2022 14:08:01]1920: WAF :: fetched 8 new logs [20-06-2022 14:09:02]4792: WAF :: fetched 7 new logs [20-06-2022 14:10:02]7582: httpd.conf changed. Refreshing watchlist. [20-06-2022 14:11:02]10536: WAF :: fetched 1 new logs [20-06-2022 14:11:02]10532: httpd.conf changed. Refreshing watchlist. [20-06-2022 14:12:01]13320: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655745121 [20-06-2022 14:12:01]13320: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 14:12:03]13320: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 14:12:03]13320: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-1412/20220620-141201-YrCqYRVZuf2-zxYf5xP6rwAAAB8 [20-06-2022 14:12:03]13320: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 14:12:04]13320: WAF :: fetched 5 new logs [20-06-2022 14:13:02]16233: WAF :: fetched 7 new logs [20-06-2022 14:14:02]18974: WAF :: fetched 5 new logs [20-06-2022 14:15:02]21807: WAF :: fetched 9 new logs [20-06-2022 14:16:02]24725: WAF :: fetched 10 new logs [20-06-2022 14:16:02]24721: httpd.conf changed. Refreshing watchlist. [20-06-2022 14:17:01]27503: WAF :: fetched 6 new logs [20-06-2022 14:18:01]30365: WAF :: fetched 1 new logs [20-06-2022 14:19:02]723: WAF :: fetched 5 new logs [20-06-2022 14:20:01]3643: WAF :: fetched 3 new logs [20-06-2022 14:21:02]6652: WAF :: fetched 3 new logs [20-06-2022 14:22:02]9448: WAF :: fetched 1 new logs [20-06-2022 14:23:01]12303: WAF :: fetched 1 new logs [20-06-2022 14:24:02]15090: WAF :: fetched 3 new logs [20-06-2022 14:28:02]26400: WAF :: fetched 6 new logs [20-06-2022 14:29:01]29163: WAF :: fetched 2 new logs [20-06-2022 14:30:01]31989: WAF :: fetched 1 new logs [20-06-2022 14:32:02]5319: WAF :: fetched 2 new logs [20-06-2022 14:33:01]8169: WAF :: fetched 1 new logs [20-06-2022 14:34:01]10954: WAF :: fetched 2 new logs [20-06-2022 14:35:02]13734: WAF :: fetched 1 new logs [20-06-2022 14:37:01]19288: WAF :: fetched 2 new logs [20-06-2022 14:38:02]22179: WAF :: fetched 2 new logs [20-06-2022 14:40:01]27785: WAF :: fetched 2 new logs [20-06-2022 14:41:02]30723: WAF :: fetched 2 new logs [20-06-2022 14:41:02]30723: Checking for user cron vulnerabilities [20-06-2022 14:42:02]1047: WAF :: fetched 2 new logs [20-06-2022 14:44:02]6799: Checking ditributed CMS bruteforce attacks [20-06-2022 14:44:02]6799: WAF :: fetched 5 new logs [20-06-2022 14:45:01]9622: WAF :: fetched 6 new logs [20-06-2022 14:46:01]12495: WAF :: fetched 1 new logs [20-06-2022 14:47:02]15304: WAF :: fetched 5 new logs [20-06-2022 14:48:01]18153: WAF :: fetched 9 new logs [20-06-2022 14:49:02]20961: WAF :: fetched 9 new logs [20-06-2022 14:50:01]23740: WAF :: fetched 11 new logs [20-06-2022 14:51:01]26686: WAF :: fetched 30 new logs [20-06-2022 14:52:02]29495: WAF :: fetched 15 new logs [20-06-2022 14:53:02]32302: WAF :: fetched 16 new logs [20-06-2022 14:53:02]32303: Updated license status via CDN [20-06-2022 14:54:01]2651: WAF :: fetched 19 new logs [20-06-2022 14:55:02]5504: WAF :: fetched 21 new logs [20-06-2022 14:56:01]8352: WAF :: fetched 14 new logs [20-06-2022 14:57:02]11179: WAF :: fetched 11 new logs [20-06-2022 14:58:02]14009: WAF :: fetched 15 new logs [20-06-2022 14:59:01]16745: WAF :: fetched 15 new logs [20-06-2022 15:00:02]19232: WAF :: fetched 10 new logs [20-06-2022 15:01:01]22502: Reseting cPGuard inotify settings [20-06-2022 15:01:01]22500: WAF :: fetched 1 new logs [20-06-2022 15:02:02]25321: WAF :: fetched 3 new logs [20-06-2022 15:03:01]28110: WAF :: fetched 5 new logs [20-06-2022 15:04:02]30923: WAF :: fetched 5 new logs [20-06-2022 15:05:02]1273: WAF :: fetched 3 new logs [20-06-2022 15:06:01]4203: WAF :: fetched 7 new logs [20-06-2022 15:07:02]7016: WAF :: fetched 14 new logs [20-06-2022 15:08:01]9840: WAF :: fetched 3 new logs [20-06-2022 15:09:01]12559: WAF :: fetched 7 new logs [20-06-2022 15:10:02]15331: WAF :: fetched 5 new logs [20-06-2022 15:11:01]18098: WAF :: fetched 7 new logs [20-06-2022 15:12:02]20921: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655748722 [20-06-2022 15:12:02]20921: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 15:12:04]20921: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 15:12:04]20921: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-1512/20220620-151202-YrC4cpfope6FXYJbfRms6QAAACU [20-06-2022 15:12:04]20921: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 15:12:04]20921: WAF :: fetched 7 new logs [20-06-2022 15:13:02]23748: WAF :: fetched 11 new logs [20-06-2022 15:14:01]26528: WAF :: fetched 12 new logs [20-06-2022 15:15:01]29314: WAF :: fetched 7 new logs [20-06-2022 15:16:02]32216: WAF :: fetched 9 new logs [20-06-2022 15:17:02]2554: WAF :: fetched 9 new logs [20-06-2022 15:18:02]5532: WAF :: fetched 8 new logs [20-06-2022 15:19:01]8320: WAF :: fetched 14 new logs [20-06-2022 15:20:02]11128: WAF :: fetched 9 new logs [20-06-2022 15:21:02]13994: WAF :: fetched 15 new logs [20-06-2022 15:22:01]16735: WAF :: fetched 8 new logs [20-06-2022 15:23:02]19624: WAF :: fetched 7 new logs [20-06-2022 15:24:01]22344: WAF :: fetched 7 new logs [20-06-2022 15:25:02]25170: WAF :: fetched 1 new logs [20-06-2022 15:26:02]28038: WAF :: fetched 6 new logs [20-06-2022 15:27:01]30815: WAF :: fetched 5 new logs [20-06-2022 15:28:02]1298: WAF :: fetched 3 new logs [20-06-2022 15:29:02]4148: WAF :: fetched 5 new logs [20-06-2022 15:30:01]6989: WAF :: fetched 7 new logs [20-06-2022 15:31:02]9861: WAF :: fetched 6 new logs [20-06-2022 15:33:01]15545: WAF :: fetched 3 new logs [20-06-2022 15:34:01]18346: WAF :: fetched 8 new logs [20-06-2022 15:35:02]21219: WAF :: fetched 6 new logs [20-06-2022 15:36:01]24107: WAF :: fetched 6 new logs [20-06-2022 15:37:02]26913: WAF :: fetched 3 new logs [20-06-2022 15:38:02]29790: WAF :: fetched 8 new logs [20-06-2022 15:39:02]32618: WAF :: fetched 9 new logs [20-06-2022 15:40:02]3056: WAF :: fetched 15 new logs [20-06-2022 15:41:01]6008: Checking for user cron vulnerabilities [20-06-2022 15:44:01]14461: Checking ditributed CMS bruteforce attacks [20-06-2022 15:45:01]17190: WAF :: fetched 8 new logs [20-06-2022 15:46:02]20094: WAF :: fetched 21 new logs [20-06-2022 15:47:01]22826: WAF :: fetched 12 new logs [20-06-2022 15:48:01]25694: WAF :: fetched 20 new logs [20-06-2022 15:49:02]28487: WAF :: fetched 13 new logs [20-06-2022 15:50:01]31295: WAF :: fetched 13 new logs [20-06-2022 15:51:02]1829: WAF :: fetched 14 new logs [20-06-2022 15:52:01]4686: WAF :: fetched 5 new logs [20-06-2022 15:53:01]7600: WAF :: fetched 5 new logs [20-06-2022 15:54:02]10433: WAF :: fetched 8 new logs [20-06-2022 15:55:01]13210: WAF :: fetched 77 new logs [20-06-2022 15:56:02]16091: WAF :: fetched 282 new logs [20-06-2022 15:57:02]19071: WAF :: fetched 124 new logs [20-06-2022 16:00:02]28432: WAF :: fetched 1 new logs [20-06-2022 16:04:01]8122: WAF :: fetched 2 new logs [20-06-2022 16:05:02]10920: WAF :: fetched 2 new logs [20-06-2022 16:06:01]13738: WAF :: fetched 2 new logs [20-06-2022 16:08:02]19392: WAF :: fetched 1 new logs [20-06-2022 16:09:02]22173: WAF :: fetched 1 new logs [20-06-2022 16:10:01]24971: WAF :: fetched 1 new logs [20-06-2022 16:11:02]27841: WAF :: fetched 3 new logs [20-06-2022 16:12:02]30651: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655752322 [20-06-2022 16:12:02]30651: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 16:12:04]30651: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 16:12:04]30651: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-1612/20220620-161202-YrDGgvVg4yxPqzaPouahnQAAAAw [20-06-2022 16:12:04]30651: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 16:12:04]30651: WAF :: fetched 1 new logs [20-06-2022 16:13:01]1118: WAF :: fetched 4 new logs [20-06-2022 16:14:02]3984: WAF :: fetched 6 new logs [20-06-2022 16:15:02]6824: WAF :: fetched 5 new logs [20-06-2022 16:16:02]9676: WAF :: fetched 6 new logs [20-06-2022 16:17:01]12471: WAF :: fetched 12 new logs [20-06-2022 16:18:02]15378: WAF :: fetched 7 new logs [20-06-2022 16:19:02]18150: WAF :: fetched 7 new logs [20-06-2022 16:20:02]20971: WAF :: fetched 7 new logs [20-06-2022 16:21:01]23872: WAF :: fetched 1 new logs [20-06-2022 16:22:01]26599: WAF :: fetched 3 new logs [20-06-2022 16:23:02]29496: WAF :: fetched 7 new logs [20-06-2022 16:24:01]32278: WAF :: fetched 7 new logs [20-06-2022 16:25:01]2760: WAF :: fetched 9 new logs [20-06-2022 16:26:02]5810: WAF :: fetched 2 new logs [20-06-2022 16:29:02]14229: WAF :: fetched 8 new logs [20-06-2022 16:30:02]16997: WAF :: fetched 3 new logs [20-06-2022 16:31:01]19945: WAF :: fetched 1 new logs [20-06-2022 16:33:02]25710: WAF :: fetched 4 new logs [20-06-2022 16:35:02]31475: WAF :: fetched 5 new logs [20-06-2022 16:36:01]2008: WAF :: fetched 3 new logs [20-06-2022 16:37:01]4943: WAF :: fetched 2 new logs [20-06-2022 16:38:01]8156: WAF :: fetched 2 new logs [20-06-2022 16:39:01]11324: WAF :: fetched 95 new logs [20-06-2022 16:40:01]14330: WAF :: fetched 94 new logs [20-06-2022 16:41:01]17345: WAF :: fetched 42 new logs [20-06-2022 16:41:01]17345: Checking for user cron vulnerabilities [20-06-2022 16:42:01]20212: WAF :: fetched 2 new logs [20-06-2022 16:43:02]23183: WAF :: fetched 1 new logs [20-06-2022 16:44:01]25964: Checking ditributed CMS bruteforce attacks [20-06-2022 16:44:01]25964: WAF :: fetched 3 new logs [20-06-2022 16:45:02]28788: WAF :: fetched 1 new logs [20-06-2022 16:46:02]31696: WAF :: fetched 5 new logs [20-06-2022 16:47:01]2075: WAF :: fetched 5 new logs [20-06-2022 16:48:02]5088: WAF :: fetched 4 new logs [20-06-2022 16:49:01]7930: WAF :: fetched 4 new logs [20-06-2022 16:50:01]10703: WAF :: fetched 4 new logs [20-06-2022 16:51:02]13594: WAF :: fetched 2 new logs [20-06-2022 16:52:01]16418: WAF :: fetched 3 new logs [20-06-2022 16:53:02]19403: WAF :: fetched 2 new logs [20-06-2022 16:54:02]22127: WAF :: fetched 1 new logs [20-06-2022 16:55:01]24969: WAF :: fetched 4 new logs [20-06-2022 16:56:01]27826: WAF :: fetched 10 new logs [20-06-2022 16:57:02]30635: WAF :: fetched 4 new logs [20-06-2022 16:58:01]1043: WAF :: fetched 9 new logs [20-06-2022 16:59:01]3903: WAF :: fetched 12 new logs [20-06-2022 17:00:02]6504: WAF :: fetched 5 new logs [20-06-2022 17:01:01]9873: WAF :: fetched 2 new logs [20-06-2022 17:02:02]12702: WAF :: fetched 1 new logs [20-06-2022 17:03:01]15503: WAF :: fetched 5 new logs [20-06-2022 17:04:01]18312: WAF :: fetched 3 new logs [20-06-2022 17:07:01]26849: WAF :: fetched 1 new logs [20-06-2022 17:08:01]29614: WAF :: fetched 3 new logs [20-06-2022 17:11:01]5901: WAF :: fetched 1 new logs [20-06-2022 17:12:02]8720: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655755922 [20-06-2022 17:12:02]8720: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 17:12:04]8720: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 17:12:04]8720: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-1712/20220620-171202-YrDUkhnJSBpSRNzzC1xxeAAAADo [20-06-2022 17:12:04]8720: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 17:12:04]8720: WAF :: fetched 4 new logs [20-06-2022 17:13:01]11477: WAF :: fetched 1 new logs [20-06-2022 17:14:02]14355: WAF :: fetched 1 new logs [20-06-2022 17:15:02]17143: WAF :: fetched 3 new logs [20-06-2022 17:16:01]20003: WAF :: fetched 1 new logs [20-06-2022 17:20:02]31517: WAF :: fetched 1 new logs [20-06-2022 17:21:01]1972: WAF :: fetched 3 new logs [20-06-2022 17:24:01]10474: WAF :: fetched 1 new logs [20-06-2022 17:26:01]16166: WAF :: fetched 10 new logs [20-06-2022 17:27:02]19030: WAF :: fetched 14 new logs [20-06-2022 17:28:02]21735: WAF :: fetched 14 new logs [20-06-2022 17:29:02]24542: WAF :: fetched 5 new logs [20-06-2022 17:30:01]27315: WAF :: fetched 1 new logs [20-06-2022 17:34:01]6281: WAF :: fetched 1 new logs [20-06-2022 17:37:02]14792: WAF :: fetched 1 new logs [20-06-2022 17:38:01]17523: WAF :: fetched 2 new logs [20-06-2022 17:39:01]20432: WAF :: fetched 1 new logs [20-06-2022 17:41:01]26081: WAF :: fetched 5 new logs [20-06-2022 17:41:01]26081: Checking for user cron vulnerabilities [20-06-2022 17:42:02]28872: WAF :: fetched 2 new logs [20-06-2022 17:43:02]31587: WAF :: fetched 4 new logs [20-06-2022 17:44:01]2044: Checking ditributed CMS bruteforce attacks [20-06-2022 17:44:01]2044: WAF :: fetched 11 new logs [20-06-2022 17:45:02]4959: WAF :: fetched 2 new logs [20-06-2022 17:46:01]7755: WAF :: fetched 7 new logs [20-06-2022 17:47:02]10544: WAF :: fetched 7 new logs [20-06-2022 17:48:02]13335: WAF :: fetched 11 new logs [20-06-2022 17:49:01]16199: WAF :: fetched 4 new logs [20-06-2022 17:50:02]19020: WAF :: fetched 3 new logs [20-06-2022 17:51:02]21824: WAF :: fetched 4 new logs [20-06-2022 17:52:01]24569: WAF :: fetched 8 new logs [20-06-2022 17:53:02]27296: WAF :: fetched 6 new logs [20-06-2022 17:54:01]30104: WAF :: fetched 7 new logs [20-06-2022 17:55:02]408: WAF :: fetched 35 new logs [20-06-2022 17:56:02]3253: WAF :: fetched 5 new logs [20-06-2022 17:57:02]6090: WAF :: fetched 8 new logs [20-06-2022 17:58:01]8878: WAF :: fetched 11 new logs [20-06-2022 17:59:02]11724: WAF :: fetched 4 new logs [20-06-2022 18:00:02]14160: WAF :: fetched 5 new logs [20-06-2022 18:01:01]17395: WAF :: fetched 2 new logs [20-06-2022 18:02:01]20254: WAF :: fetched 8 new logs [20-06-2022 18:03:02]23035: WAF :: fetched 10 new logs [20-06-2022 18:04:01]25811: WAF :: fetched 7 new logs [20-06-2022 18:05:02]28580: WAF :: fetched 8 new logs [20-06-2022 18:06:01]31498: WAF :: fetched 3 new logs [20-06-2022 18:07:01]1861: WAF :: fetched 17 new logs [20-06-2022 18:08:02]4746: WAF :: fetched 4 new logs [20-06-2022 18:09:01]7553: WAF :: fetched 1 new logs [20-06-2022 18:10:02]10361: WAF :: fetched 3 new logs [20-06-2022 18:11:02]13103: WAF :: fetched 2 new logs [20-06-2022 18:12:01]15838: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655759521 [20-06-2022 18:12:01]15838: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 18:12:03]15838: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 18:12:03]15838: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-1812/20220620-181201-YrDioRzmMuq87qXlzkIL9QAAACg [20-06-2022 18:12:03]15838: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 18:12:03]15838: WAF :: fetched 4 new logs [20-06-2022 18:13:02]18646: WAF :: fetched 4 new logs [20-06-2022 18:15:02]24225: WAF :: fetched 1 new logs [20-06-2022 18:18:02]32591: WAF :: fetched 81 new logs [20-06-2022 18:19:02]3040: WAF :: fetched 4 new logs [20-06-2022 18:21:02]8794: WAF :: fetched 2 new logs [20-06-2022 18:22:01]11544: WAF :: fetched 7 new logs [20-06-2022 18:23:01]14284: WAF :: fetched 1 new logs [20-06-2022 18:24:02]17099: WAF :: fetched 1 new logs [20-06-2022 18:26:02]22759: WAF :: fetched 10 new logs [20-06-2022 18:27:01]25540: WAF :: fetched 9 new logs [20-06-2022 18:28:02]28321: WAF :: fetched 48 new logs [20-06-2022 18:29:02]31121: WAF :: fetched 133 new logs [20-06-2022 18:30:01]1468: WAF :: fetched 15 new logs [20-06-2022 18:31:02]4372: WAF :: fetched 3 new logs [20-06-2022 18:32:01]7175: WAF :: fetched 10 new logs [20-06-2022 18:34:01]12701: WAF :: fetched 3 new logs [20-06-2022 18:35:02]15459: WAF :: fetched 7 new logs [20-06-2022 18:36:02]18216: WAF :: fetched 2 new logs [20-06-2022 18:37:01]20989: WAF :: fetched 2 new logs [20-06-2022 18:38:02]23715: WAF :: fetched 1 new logs [20-06-2022 18:39:01]26519: WAF :: fetched 8 new logs [20-06-2022 18:40:02]29250: WAF :: fetched 9 new logs [20-06-2022 18:41:02]31938: WAF :: fetched 9 new logs [20-06-2022 18:41:02]31938: Checking for user cron vulnerabilities [20-06-2022 18:42:01]2280: WAF :: fetched 72 new logs [20-06-2022 18:43:01]4992: WAF :: fetched 295 new logs [20-06-2022 18:44:01]7777: Checking ditributed CMS bruteforce attacks [20-06-2022 18:44:02]7777: WAF :: fetched 12 new logs [20-06-2022 18:45:01]10425: WAF :: fetched 114 new logs [20-06-2022 18:46:02]13156: WAF :: fetched 171 new logs [20-06-2022 18:47:01]15808: WAF :: fetched 6 new logs [20-06-2022 18:48:01]18477: WAF :: fetched 8 new logs [20-06-2022 18:51:01]26569: WAF :: fetched 2 new logs [20-06-2022 18:54:02]2197: WAF :: fetched 2 new logs [20-06-2022 18:58:01]12940: WAF :: fetched 3 new logs [20-06-2022 18:59:02]15651: WAF :: fetched 1 new logs [20-06-2022 19:00:02]17989: WAF :: fetched 1 new logs [20-06-2022 19:01:02]21201: WAF :: fetched 3 new logs [20-06-2022 19:02:01]23948: WAF :: fetched 1 new logs [20-06-2022 19:03:01]26589: WAF :: fetched 5 new logs [20-06-2022 19:06:02]2301: WAF :: fetched 2 new logs [20-06-2022 19:10:01]13000: WAF :: fetched 4 new logs [20-06-2022 19:11:02]15737: WAF :: fetched 3 new logs [20-06-2022 19:12:02]18395: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655763122 [20-06-2022 19:12:02]18395: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 19:12:04]18395: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 19:12:04]18395: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-1912/20220620-191202-YrDwslIGyGH2vMRLyU454wAAACk [20-06-2022 19:12:04]18395: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 19:12:04]18395: WAF :: fetched 5 new logs [20-06-2022 19:17:02]31680: WAF :: fetched 7 new logs [20-06-2022 19:18:01]1902: WAF :: fetched 7 new logs [20-06-2022 19:19:01]4732: WAF :: fetched 6 new logs [20-06-2022 19:20:02]7421: WAF :: fetched 8 new logs [20-06-2022 19:21:02]10124: WAF :: fetched 8 new logs [20-06-2022 19:22:01]12775: WAF :: fetched 3 new logs [20-06-2022 19:26:01]23513: WAF :: fetched 31 new logs [20-06-2022 19:28:02]28786: WAF :: fetched 1 new logs [20-06-2022 19:29:01]31527: WAF :: fetched 2 new logs [20-06-2022 19:33:02]9965: WAF :: fetched 2 new logs [20-06-2022 19:36:01]18000: WAF :: fetched 2 new logs [20-06-2022 19:38:02]23343: WAF :: fetched 4 new logs [20-06-2022 19:41:02]31454: Checking for user cron vulnerabilities [20-06-2022 19:42:01]1667: WAF :: fetched 1 new logs [20-06-2022 19:43:02]4439: WAF :: fetched 5 new logs [20-06-2022 19:44:01]7179: Checking ditributed CMS bruteforce attacks [20-06-2022 19:44:02]7179: WAF :: fetched 9 new logs [20-06-2022 19:45:01]: Checking for definition updates [20-06-2022 19:45:01]9830: WAF :: fetched 7 new logs [20-06-2022 19:46:02]12548: WAF :: fetched 7 new logs [20-06-2022 19:47:01]15191: WAF :: fetched 8 new logs [20-06-2022 19:48:02]17908: WAF :: fetched 6 new logs [20-06-2022 19:49:02]20691: WAF :: fetched 6 new logs [20-06-2022 19:50:01]23447: WAF :: fetched 2 new logs [20-06-2022 19:51:02]26232: WAF :: fetched 2 new logs [20-06-2022 19:53:01]31604: WAF :: fetched 1 new logs [20-06-2022 19:54:02]1992: WAF :: fetched 1 new logs [20-06-2022 19:55:01]4738: WAF :: fetched 26 new logs [20-06-2022 19:59:02]15640: WAF :: fetched 1 new logs [20-06-2022 20:00:01]18025: WAF :: fetched 2 new logs [20-06-2022 20:01:02]21178: WAF :: fetched 2 new logs [20-06-2022 20:02:02]23887: WAF :: fetched 43 new logs [20-06-2022 20:05:01]31907: WAF :: fetched 2 new logs [20-06-2022 20:06:02]2440: WAF :: fetched 3 new logs [20-06-2022 20:12:01]18670: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655766721 [20-06-2022 20:12:01]18670: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 20:12:03]18670: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 20:12:04]18670: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-2012/20220620-201201-YrD-wb6zMpwz0lydEV_9twAAABY [20-06-2022 20:12:04]18670: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 20:12:04]18670: WAF :: fetched 1 new logs [20-06-2022 20:19:01]5310: WAF :: fetched 4 new logs [20-06-2022 20:20:02]8080: WAF :: fetched 6 new logs [20-06-2022 20:21:02]10780: WAF :: fetched 9 new logs [20-06-2022 20:22:01]13472: WAF :: fetched 6 new logs [20-06-2022 20:23:02]16145: WAF :: fetched 5 new logs [20-06-2022 20:24:01]18893: WAF :: fetched 5 new logs [20-06-2022 20:25:01]21552: WAF :: fetched 4 new logs [20-06-2022 20:26:02]24273: WAF :: fetched 6 new logs [20-06-2022 20:27:01]26981: WAF :: fetched 1 new logs [20-06-2022 20:28:02]29740: WAF :: fetched 3 new logs [20-06-2022 20:30:01]2780: WAF :: fetched 1 new logs [20-06-2022 20:31:02]5611: WAF :: fetched 4 new logs [20-06-2022 20:32:01]8310: WAF :: fetched 8 new logs [20-06-2022 20:33:01]10992: WAF :: fetched 7 new logs [20-06-2022 20:34:02]13796: WAF :: fetched 4 new logs [20-06-2022 20:35:01]16448: WAF :: fetched 5 new logs [20-06-2022 20:36:02]19179: WAF :: fetched 7 new logs [20-06-2022 20:37:01]21846: WAF :: fetched 12 new logs [20-06-2022 20:38:01]24570: WAF :: fetched 6 new logs [20-06-2022 20:39:02]27354: WAF :: fetched 4 new logs [20-06-2022 20:40:01]30012: WAF :: fetched 5 new logs [20-06-2022 20:41:01]32721: WAF :: fetched 7 new logs [20-06-2022 20:41:01]32721: Checking for user cron vulnerabilities [20-06-2022 20:42:02]3078: WAF :: fetched 7 new logs [20-06-2022 20:43:01]5786: WAF :: fetched 2 new logs [20-06-2022 20:44:02]8617: Checking ditributed CMS bruteforce attacks [20-06-2022 20:47:02]16698: WAF :: fetched 2 new logs [20-06-2022 20:48:01]19340: WAF :: fetched 7 new logs [20-06-2022 20:49:02]22111: WAF :: fetched 4 new logs [20-06-2022 20:50:02]24828: WAF :: fetched 5 new logs [20-06-2022 20:51:01]27575: WAF :: fetched 9 new logs [20-06-2022 20:52:02]30323: WAF :: fetched 13 new logs [20-06-2022 20:53:01]497: WAF :: fetched 14 new logs [20-06-2022 20:54:02]3437: WAF :: fetched 9 new logs [20-06-2022 20:55:02]6165: WAF :: fetched 9 new logs [20-06-2022 20:56:01]8867: WAF :: fetched 8 new logs [20-06-2022 20:57:02]11596: WAF :: fetched 13 new logs [20-06-2022 20:58:01]14270: WAF :: fetched 8 new logs [20-06-2022 20:59:01]17016: WAF :: fetched 3 new logs [20-06-2022 21:00:02]19447: WAF :: fetched 8 new logs [20-06-2022 21:01:02]22671: WAF :: fetched 2 new logs [20-06-2022 21:02:02]25416: WAF :: fetched 2 new logs [20-06-2022 21:03:02]28130: WAF :: fetched 6 new logs [20-06-2022 21:04:01]30900: WAF :: fetched 7 new logs [20-06-2022 21:05:02]1169: WAF :: fetched 9 new logs [20-06-2022 21:06:01]3956: WAF :: fetched 11 new logs [20-06-2022 21:07:02]6744: WAF :: fetched 14 new logs [20-06-2022 21:08:02]9393: WAF :: fetched 15 new logs [20-06-2022 21:09:01]12157: WAF :: fetched 10 new logs [20-06-2022 21:10:02]14903: WAF :: fetched 8 new logs [20-06-2022 21:11:01]17648: WAF :: fetched 3 new logs [20-06-2022 21:12:02]20335: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655770322 [20-06-2022 21:12:02]20335: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 21:12:04]20335: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 21:12:04]20335: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-2112/20220620-211202-YrEM0quzZ1vyNsW8e4WJFAAAACw [20-06-2022 21:12:04]20335: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 21:12:04]20335: WAF :: fetched 2 new logs [20-06-2022 21:16:01]31206: WAF :: fetched 1 new logs [20-06-2022 21:17:02]1655: WAF :: fetched 2 new logs [20-06-2022 21:20:02]9946: WAF :: fetched 37 new logs [20-06-2022 21:21:01]12685: WAF :: fetched 76 new logs [20-06-2022 21:22:01]15378: WAF :: fetched 11 new logs [20-06-2022 21:23:02]18084: WAF :: fetched 11 new logs [20-06-2022 21:24:02]20863: WAF :: fetched 9 new logs [20-06-2022 21:25:01]23563: WAF :: fetched 9 new logs [20-06-2022 21:26:02]26325: WAF :: fetched 10 new logs [20-06-2022 21:27:01]28993: WAF :: fetched 10 new logs [20-06-2022 21:28:01]31632: WAF :: fetched 6 new logs [20-06-2022 21:29:02]2006: WAF :: fetched 1 new logs [20-06-2022 21:30:01]4771: WAF :: fetched 13 new logs [20-06-2022 21:31:02]7541: WAF :: fetched 12 new logs [20-06-2022 21:34:02]15764: WAF :: fetched 3 new logs [20-06-2022 21:36:02]21267: WAF :: fetched 2 new logs [20-06-2022 21:38:02]26709: WAF :: fetched 2 new logs [20-06-2022 21:39:01]29523: WAF :: fetched 2 new logs [20-06-2022 21:41:01]2648: Checking for user cron vulnerabilities [20-06-2022 21:42:02]5470: WAF :: fetched 1 new logs [20-06-2022 21:44:01]10927: Checking ditributed CMS bruteforce attacks [20-06-2022 21:46:01]16357: WAF :: fetched 4 new logs [20-06-2022 21:48:01]21733: WAF :: fetched 4 new logs [20-06-2022 21:49:01]24536: WAF :: fetched 5 new logs [20-06-2022 21:50:02]27311: WAF :: fetched 40 new logs [20-06-2022 21:51:02]30031: WAF :: fetched 8 new logs [20-06-2022 21:52:01]32754: WAF :: fetched 11 new logs [20-06-2022 21:53:02]3070: WAF :: fetched 19 new logs [20-06-2022 21:54:01]5901: WAF :: fetched 12 new logs [20-06-2022 21:55:01]8583: WAF :: fetched 4 new logs [20-06-2022 21:56:02]11385: WAF :: fetched 9 new logs [20-06-2022 21:57:01]14076: WAF :: fetched 7 new logs [20-06-2022 21:58:02]16773: WAF :: fetched 6 new logs [20-06-2022 21:59:01]19509: WAF :: fetched 2 new logs [20-06-2022 22:00:01]21970: WAF :: fetched 6 new logs [20-06-2022 22:01:02]25223: WAF :: fetched 3 new logs [20-06-2022 22:02:02]27922: WAF :: fetched 8 new logs [20-06-2022 22:03:01]30629: WAF :: fetched 5 new logs [20-06-2022 22:06:02]6600: WAF :: fetched 2 new logs [20-06-2022 22:07:01]9306: WAF :: fetched 5 new logs [20-06-2022 22:07:07]9301: Performing Domain reputation checks [20-06-2022 22:08:01]11984: WAF :: fetched 4 new logs [20-06-2022 22:09:02]14718: WAF :: fetched 4 new logs [20-06-2022 22:10:01]17438: WAF :: fetched 3 new logs [20-06-2022 22:11:01]20176: WAF :: fetched 2 new logs [20-06-2022 22:12:02]22873: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655773922 [20-06-2022 22:12:02]22873: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 22:12:04]22873: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 22:12:04]22873: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-2212/20220620-221202-YrEa4gEyb3ABpmAqNgDzIQAAAAw [20-06-2022 22:12:04]22873: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 22:12:04]22873: WAF :: fetched 7 new logs [20-06-2022 22:13:02]25580: WAF :: fetched 1 new logs [20-06-2022 22:15:02]31048: WAF :: fetched 5 new logs [20-06-2022 22:16:01]1353: WAF :: fetched 5 new logs [20-06-2022 22:17:01]4095: WAF :: fetched 5 new logs [20-06-2022 22:18:02]6851: WAF :: fetched 7 new logs [20-06-2022 22:19:01]9542: WAF :: fetched 6 new logs [20-06-2022 22:20:02]12360: WAF :: fetched 3 new logs [20-06-2022 22:21:01]15079: WAF :: fetched 1 new logs [20-06-2022 22:22:01]17753: WAF :: fetched 3 new logs [20-06-2022 22:23:02]20525: WAF :: fetched 1 new logs [20-06-2022 22:24:01]23192: WAF :: fetched 1 new logs [20-06-2022 22:25:02]25960: WAF :: fetched 3 new logs [20-06-2022 22:26:01]28659: WAF :: fetched 4 new logs [20-06-2022 22:27:01]31369: WAF :: fetched 5 new logs [20-06-2022 22:28:02]1654: WAF :: fetched 3 new logs [20-06-2022 22:29:02]4375: WAF :: fetched 4 new logs [20-06-2022 22:30:01]7189: WAF :: fetched 8 new logs [20-06-2022 22:31:01]9884: WAF :: fetched 3 new logs [20-06-2022 22:32:02]12672: WAF :: fetched 1 new logs [20-06-2022 22:33:01]15324: WAF :: fetched 2 new logs [20-06-2022 22:34:02]17979: WAF :: fetched 3 new logs [20-06-2022 22:35:01]20766: WAF :: fetched 3 new logs [20-06-2022 22:36:01]23495: WAF :: fetched 2 new logs [20-06-2022 22:37:02]26188: WAF :: fetched 3 new logs [20-06-2022 22:38:01]28884: WAF :: fetched 5 new logs [20-06-2022 22:39:02]31576: WAF :: fetched 2 new logs [20-06-2022 22:40:02]1924: WAF :: fetched 7 new logs [20-06-2022 22:41:01]4760: WAF :: fetched 7 new logs [20-06-2022 22:41:01]4760: Checking for user cron vulnerabilities [20-06-2022 22:42:02]7501: WAF :: fetched 2 new logs [20-06-2022 22:43:01]10140: WAF :: fetched 1 new logs [20-06-2022 22:44:02]12851: Checking ditributed CMS bruteforce attacks [20-06-2022 22:47:02]20995: WAF :: fetched 1 new logs [20-06-2022 22:51:01]31849: WAF :: fetched 3 new logs [20-06-2022 22:52:02]2154: WAF :: fetched 1 new logs [20-06-2022 22:53:02]4901: WAF :: fetched 3 new logs [20-06-2022 22:54:01]7594: WAF :: fetched 6 new logs [20-06-2022 22:55:02]10380: WAF :: fetched 4 new logs [20-06-2022 22:56:01]13054: WAF :: fetched 7 new logs [20-06-2022 22:57:01]15749: WAF :: fetched 6 new logs [20-06-2022 22:58:02]18461: WAF :: fetched 7 new logs [20-06-2022 22:59:01]21124: WAF :: fetched 9 new logs [20-06-2022 23:00:02]23602: WAF :: fetched 5 new logs [20-06-2022 23:01:02]26795: WAF :: fetched 1 new logs [20-06-2022 23:03:02]32205: WAF :: fetched 1 new logs [20-06-2022 23:04:01]2447: WAF :: fetched 2 new logs [20-06-2022 23:07:57]10909: Performed RBL check for 23.111.136.34. [20-06-2022 23:08:01]13425: WAF :: fetched 2 new logs [20-06-2022 23:09:01]16086: WAF :: fetched 2 new logs [20-06-2022 23:10:02]18885: WAF :: fetched 7 new logs [20-06-2022 23:11:01]21597: WAF :: fetched 11 new logs [20-06-2022 23:12:02]24284: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655777522 [20-06-2022 23:12:02]24284: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-06-2022 23:12:04]24284: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-06-2022 23:12:04]24284: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220620/20220620-2312/20220620-231202-YrEo8grlkPm1etyManolKQAAABQ [20-06-2022 23:12:04]24284: WAF :: No suitable log file found. Using SQLite.. [20-06-2022 23:12:04]24284: WAF :: fetched 6 new logs [20-06-2022 23:13:01]26942: WAF :: fetched 6 new logs [20-06-2022 23:14:01]29615: WAF :: fetched 12 new logs [20-06-2022 23:15:02]32425: WAF :: fetched 8 new logs [20-06-2022 23:16:01]2760: WAF :: fetched 6 new logs [20-06-2022 23:17:01]5503: WAF :: fetched 4 new logs [20-06-2022 23:18:02]8223: WAF :: fetched 2 new logs [20-06-2022 23:19:01]10919: WAF :: fetched 2 new logs [20-06-2022 23:20:02]13764: WAF :: fetched 2 new logs [20-06-2022 23:21:02]16488: WAF :: fetched 2 new logs [20-06-2022 23:22:01]19251: WAF :: fetched 1 new logs [20-06-2022 23:23:02]21936: WAF :: fetched 1 new logs [20-06-2022 23:24:01]24648: WAF :: fetched 7 new logs [20-06-2022 23:25:01]27410: WAF :: fetched 4 new logs [20-06-2022 23:26:02]30188: WAF :: fetched 2 new logs [20-06-2022 23:27:01]390: WAF :: fetched 3 new logs [20-06-2022 23:29:01]5887: WAF :: fetched 2 new logs [20-06-2022 23:30:01]8640: WAF :: fetched 3 new logs [20-06-2022 23:31:02]11382: WAF :: fetched 2 new logs [20-06-2022 23:32:01]14087: WAF :: fetched 2 new logs [20-06-2022 23:33:02]16787: WAF :: fetched 3 new logs [20-06-2022 23:34:01]19432: WAF :: fetched 1 new logs [20-06-2022 23:38:02]30433: WAF :: fetched 1 new logs [20-06-2022 23:39:01]632: WAF :: fetched 2 new logs [20-06-2022 23:40:02]3514: WAF :: fetched 1 new logs [20-06-2022 23:41:02]6323: Checking for user cron vulnerabilities [20-06-2022 23:43:01]11738: WAF :: fetched 2 new logs [20-06-2022 23:44:01]14491: Checking ditributed CMS bruteforce attacks [20-06-2022 23:44:02]14491: WAF :: fetched 4 new logs [20-06-2022 23:45:01]17259: WAF :: fetched 5 new logs [20-06-2022 23:46:02]20013: WAF :: fetched 8 new logs [20-06-2022 23:47:02]22679: WAF :: fetched 4 new logs [20-06-2022 23:48:01]25346: WAF :: fetched 2 new logs [20-06-2022 23:49:02]28033: WAF :: fetched 5 new logs [20-06-2022 23:50:01]30933: WAF :: fetched 4 new logs [20-06-2022 23:51:01]1239: WAF :: fetched 3 new logs [20-06-2022 23:52:02]3982: WAF :: fetched 2 new logs [20-06-2022 23:53:01]6796: WAF :: fetched 3 new logs [20-06-2022 23:54:01]9571: WAF :: fetched 5 new logs [20-06-2022 23:55:02]13316: WAF :: fetched 27 new logs [20-06-2022 23:55:02]13323: httpd.conf changed. Refreshing watchlist. [20-06-2022 23:56:01]16805: WAF :: fetched 51 new logs [20-06-2022 23:57:02]19586: WAF :: fetched 9 new logs [20-06-2022 23:57:02]19577: httpd.conf changed. Refreshing watchlist. [20-06-2022 23:58:02]22254: WAF :: fetched 12 new logs [20-06-2022 23:59:02]24910: WAF :: fetched 7 new logs [21-06-2022 00:00:02]27411: WAF :: fetched 13 new logs [21-06-2022 00:01:01]30638: WAF :: fetched 14 new logs [21-06-2022 00:01:04]30638: Sending daily report for June 21, 2022 [21-06-2022 00:02:01]966: WAF :: fetched 7 new logs [21-06-2022 00:03:02]3711: WAF :: fetched 9 new logs [21-06-2022 00:04:02]6406: WAF :: fetched 7 new logs [21-06-2022 00:05:01]9204: WAF :: fetched 2 new logs [21-06-2022 00:05:01]9204: Deleted 0 entries older than 6 MONTH from scanner_logs [21-06-2022 00:05:01]9204: Deleted 0 files from Quarantine [21-06-2022 00:06:01]11931: WAF :: fetched 28 new logs [21-06-2022 00:07:02]14651: WAF :: fetched 3 new logs [21-06-2022 00:08:02]17329: WAF :: fetched 8 new logs [21-06-2022 00:09:01]19992: WAF :: fetched 8 new logs [21-06-2022 00:10:02]22829: WAF :: fetched 6 new logs [21-06-2022 00:11:01]25529: WAF :: fetched 5 new logs [21-06-2022 00:12:01]28222: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655781121 [21-06-2022 00:12:01]28222: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 00:12:03]28222: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 00:12:03]28222: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-0012/20220621-001201-YrE3AYtGqQ4dVflAYAdlBwAAAA0 [21-06-2022 00:12:03]28222: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 00:12:03]28222: WAF :: fetched 2 new logs [21-06-2022 00:13:02]30889: WAF :: fetched 1 new logs [21-06-2022 00:15:02]3918: WAF :: fetched 3 new logs [21-06-2022 00:16:01]6731: WAF :: fetched 6 new logs [21-06-2022 00:18:01]12053: WAF :: fetched 1 new logs [21-06-2022 00:19:01]14802: WAF :: fetched 9 new logs [21-06-2022 00:21:01]20342: WAF :: fetched 1 new logs [21-06-2022 00:23:01]25634: WAF :: fetched 4 new logs [21-06-2022 00:24:01]28350: WAF :: fetched 2 new logs [21-06-2022 00:31:01]14896: WAF :: fetched 1 new logs [21-06-2022 00:32:02]17850: WAF :: fetched 4 new logs [21-06-2022 00:33:02]20568: WAF :: fetched 5 new logs [21-06-2022 00:34:02]23244: WAF :: fetched 9 new logs [21-06-2022 00:35:01]26003: WAF :: fetched 2 new logs [21-06-2022 00:36:02]28757: WAF :: fetched 4 new logs [21-06-2022 00:37:01]31392: WAF :: fetched 12 new logs [21-06-2022 00:38:02]1653: WAF :: fetched 13 new logs [21-06-2022 00:39:02]4363: WAF :: fetched 17 new logs [21-06-2022 00:40:01]7144: WAF :: fetched 30 new logs [21-06-2022 00:41:02]9851: WAF :: fetched 12 new logs [21-06-2022 00:41:02]9851: Checking for user cron vulnerabilities [21-06-2022 00:42:01]12469: WAF :: fetched 12 new logs [21-06-2022 00:43:01]15146: WAF :: fetched 12 new logs [21-06-2022 00:44:01]17886: Checking ditributed CMS bruteforce attacks [21-06-2022 00:44:02]17886: WAF :: fetched 13 new logs [21-06-2022 00:45:01]: Checking for software updates [21-06-2022 00:45:01]20604: WAF :: fetched 6 new logs [21-06-2022 00:46:01]23349: WAF :: fetched 5 new logs [21-06-2022 00:51:02]4700: WAF :: fetched 4 new logs [21-06-2022 00:52:01]7409: WAF :: fetched 9 new logs [21-06-2022 00:53:02]10106: WAF :: fetched 7 new logs [21-06-2022 00:54:02]12812: WAF :: fetched 7 new logs [21-06-2022 00:55:01]15949: WAF :: fetched 4 new logs [21-06-2022 00:56:02]18702: WAF :: fetched 1 new logs [21-06-2022 01:02:01]3208: WAF :: fetched 1 new logs [21-06-2022 01:04:02]8741: WAF :: fetched 2 new logs [21-06-2022 01:05:01]11766: WAF :: fetched 3 new logs [21-06-2022 01:06:02]14680: WAF :: fetched 5 new logs [21-06-2022 01:07:01]17503: WAF :: fetched 8 new logs [21-06-2022 01:08:01]20356: WAF :: fetched 3 new logs [21-06-2022 01:09:02]23177: WAF :: fetched 9 new logs [21-06-2022 01:10:01]26039: WAF :: fetched 8 new logs [21-06-2022 01:11:02]28862: WAF :: fetched 6 new logs [21-06-2022 01:12:02]31630: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655784722 [21-06-2022 01:12:02]31630: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 01:12:04]31630: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 01:12:04]31630: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-0112/20220621-011202-YrFFEh3z354D8UbYo6rMRwAAAA4 [21-06-2022 01:12:04]31630: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 01:12:04]31630: WAF :: fetched 7 new logs [21-06-2022 01:13:01]1854: WAF :: fetched 4 new logs [21-06-2022 01:19:02]18383: WAF :: fetched 1 new logs [21-06-2022 01:20:01]21207: WAF :: fetched 1 new logs [21-06-2022 01:21:02]24040: WAF :: fetched 2 new logs [21-06-2022 01:22:01]26765: WAF :: fetched 1 new logs [21-06-2022 01:24:02]32188: WAF :: fetched 2 new logs [21-06-2022 01:26:02]5436: WAF :: fetched 2 new logs [21-06-2022 01:27:02]8303: WAF :: fetched 3 new logs [21-06-2022 01:28:01]11248: WAF :: fetched 2 new logs [21-06-2022 01:29:02]14428: WAF :: fetched 4 new logs [21-06-2022 01:30:01]17296: WAF :: fetched 5 new logs [21-06-2022 01:31:02]20048: WAF :: fetched 2 new logs [21-06-2022 01:32:01]22663: WAF :: fetched 6 new logs [21-06-2022 01:33:02]25333: WAF :: fetched 3 new logs [21-06-2022 01:34:02]28086: WAF :: fetched 5 new logs [21-06-2022 01:35:01]30962: WAF :: fetched 4 new logs [21-06-2022 01:36:02]1399: WAF :: fetched 4 new logs [21-06-2022 01:38:01]6913: WAF :: fetched 2 new logs [21-06-2022 01:39:02]9604: WAF :: fetched 1 new logs [21-06-2022 01:41:02]15521: Checking for user cron vulnerabilities [21-06-2022 01:42:01]18271: WAF :: fetched 3 new logs [21-06-2022 01:44:01]23690: Checking ditributed CMS bruteforce attacks [21-06-2022 01:45:01]: Checking for definition updates [21-06-2022 01:45:01]26667: WAF :: fetched 4 new logs [21-06-2022 01:49:02]5485: WAF :: fetched 1 new logs [21-06-2022 01:51:02]10936: WAF :: fetched 1 new logs [21-06-2022 01:52:02]13843: WAF :: fetched 5 new logs [21-06-2022 01:53:01]16701: WAF :: fetched 8 new logs [21-06-2022 01:54:02]19471: WAF :: fetched 13 new logs [21-06-2022 01:55:01]22297: WAF :: fetched 4 new logs [21-06-2022 01:56:01]25078: WAF :: fetched 1 new logs [21-06-2022 01:57:02]28060: WAF :: fetched 3 new logs [21-06-2022 01:58:01]30825: WAF :: fetched 3 new logs [21-06-2022 01:59:02]1346: WAF :: fetched 10 new logs [21-06-2022 02:00:02]4000: WAF :: fetched 10 new logs [21-06-2022 02:01:01]7265: WAF :: fetched 12 new logs [21-06-2022 02:02:01]9933: WAF :: fetched 8 new logs [21-06-2022 02:03:01]12527: WAF :: fetched 10 new logs [21-06-2022 02:04:01]15183: WAF :: fetched 15 new logs [21-06-2022 02:05:02]17981: WAF :: fetched 12 new logs [21-06-2022 02:06:02]20869: WAF :: fetched 15 new logs [21-06-2022 02:07:01]23658: WAF :: fetched 15 new logs [21-06-2022 02:08:02]26472: WAF :: fetched 11 new logs [21-06-2022 02:09:02]29174: WAF :: fetched 10 new logs [21-06-2022 02:10:01]31885: WAF :: fetched 12 new logs [21-06-2022 02:11:02]2195: WAF :: fetched 8 new logs [21-06-2022 02:12:01]5151: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655788321 [21-06-2022 02:12:02]5151: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 02:12:04]5151: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 02:12:04]5151: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-0212/20220621-021202-YrFTIg6VnQ5c_qIlEkCamAAAAAQ [21-06-2022 02:12:04]5151: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 02:12:04]5151: WAF :: fetched 1 new logs [21-06-2022 02:13:02]7848: WAF :: fetched 3 new logs [21-06-2022 02:14:01]10453: WAF :: fetched 3 new logs [21-06-2022 02:15:01]13185: WAF :: fetched 3 new logs [21-06-2022 02:16:02]15882: WAF :: fetched 3 new logs [21-06-2022 02:19:02]23793: WAF :: fetched 1 new logs [21-06-2022 02:21:02]29698: WAF :: fetched 3 new logs [21-06-2022 02:24:02]5248: WAF :: fetched 4 new logs [21-06-2022 02:25:01]7939: WAF :: fetched 5 new logs [21-06-2022 02:26:01]10623: WAF :: fetched 8 new logs [21-06-2022 02:27:02]13294: WAF :: fetched 6 new logs [21-06-2022 02:28:01]15905: WAF :: fetched 27 new logs [21-06-2022 02:29:02]18540: WAF :: fetched 7 new logs [21-06-2022 02:30:02]21229: WAF :: fetched 4 new logs [21-06-2022 02:31:01]23931: WAF :: fetched 5 new logs [21-06-2022 02:32:02]26607: WAF :: fetched 2 new logs [21-06-2022 02:34:02]31858: WAF :: fetched 1 new logs [21-06-2022 02:37:02]7545: WAF :: fetched 2 new logs [21-06-2022 02:38:01]10181: WAF :: fetched 4 new logs [21-06-2022 02:39:02]12818: WAF :: fetched 8 new logs [21-06-2022 02:40:02]15540: WAF :: fetched 65 new logs [21-06-2022 02:41:01]18240: WAF :: fetched 63 new logs [21-06-2022 02:41:01]18240: Checking for user cron vulnerabilities [21-06-2022 02:42:02]20890: WAF :: fetched 53 new logs [21-06-2022 02:43:02]23495: WAF :: fetched 62 new logs [21-06-2022 02:44:02]26150: Checking ditributed CMS bruteforce attacks [21-06-2022 02:44:02]26150: WAF :: fetched 77 new logs [21-06-2022 02:45:02]28910: WAF :: fetched 30 new logs [21-06-2022 02:46:02]31594: WAF :: fetched 9 new logs [21-06-2022 02:47:01]1823: WAF :: fetched 26 new logs [21-06-2022 02:48:02]4560: WAF :: fetched 52 new logs [21-06-2022 02:49:01]7196: WAF :: fetched 59 new logs [21-06-2022 02:50:01]9915: WAF :: fetched 70 new logs [21-06-2022 02:51:02]12607: WAF :: fetched 76 new logs [21-06-2022 02:52:01]15221: WAF :: fetched 55 new logs [21-06-2022 02:53:02]17871: WAF :: fetched 73 new logs [21-06-2022 02:53:02]17868: Updated license status via CDN [21-06-2022 02:54:02]20483: WAF :: fetched 29 new logs [21-06-2022 02:55:01]23165: WAF :: fetched 7 new logs [21-06-2022 02:56:02]25864: WAF :: fetched 9 new logs [21-06-2022 02:57:01]28488: WAF :: fetched 7 new logs [21-06-2022 02:58:01]31144: WAF :: fetched 8 new logs [21-06-2022 02:59:01]1374: WAF :: fetched 3 new logs [21-06-2022 03:00:02]3873: WAF :: fetched 3 new logs [21-06-2022 03:00:05]3873: Found and updated 32 CMS installations [21-06-2022 03:01:01]7148: WAF :: fetched 4 new logs [21-06-2022 03:02:02]10057: WAF :: fetched 4 new logs [21-06-2022 03:02:28]3873: Sending CMS version vulnerability report emails to cpanel users [21-06-2022 03:02:31]3873: Checking wordpress installations for suspicious directories [21-06-2022 03:03:01]12925: WAF :: fetched 6 new logs [21-06-2022 03:04:01]15855: WAF :: fetched 3 new logs [21-06-2022 03:04:25]12961: Sending CMS version vulnerability report emails to cpanel users [21-06-2022 03:04:28]12961: Checking wordpress installations for suspicious directories [21-06-2022 03:05:02]18842: WAF :: fetched 2 new logs [21-06-2022 03:07:02]24170: WAF :: fetched 3 new logs [21-06-2022 03:08:01]26817: WAF :: fetched 6 new logs [21-06-2022 03:09:02]29480: WAF :: fetched 2 new logs [21-06-2022 03:10:02]32120: WAF :: fetched 17 new logs [21-06-2022 03:11:01]2543: WAF :: fetched 3 new logs [21-06-2022 03:12:02]5261: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655791922 [21-06-2022 03:12:02]5261: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 03:12:04]5261: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 03:12:04]5261: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-0312/20220621-031202-YrFhMtQ0u4o5SfFMmQjuVQAAABA [21-06-2022 03:12:04]5261: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [21-06-2022 03:12:04]5261: WAF :: fetched 1 new logs [21-06-2022 03:13:01]7915: WAF :: fetched 3 new logs [21-06-2022 03:15:02]13391: WAF :: fetched 1 new logs [21-06-2022 03:16:01]16745: WAF :: fetched 3 new logs [21-06-2022 03:17:02]19853: WAF :: fetched 4 new logs [21-06-2022 03:18:01]22486: WAF :: fetched 8 new logs [21-06-2022 03:19:01]23347: WAF :: fetched 7 new logs [21-06-2022 03:20:02]16029: WAF :: fetched 6 new logs [21-06-2022 03:21:01]26290: WAF :: fetched 5 new logs [21-06-2022 03:22:02]2438: WAF :: fetched 4 new logs [21-06-2022 03:23:01]5119: WAF :: fetched 10 new logs [21-06-2022 03:24:01]7758: WAF :: fetched 7 new logs [21-06-2022 03:25:02]10475: WAF :: fetched 7 new logs [21-06-2022 03:26:01]13326: WAF :: fetched 8 new logs [21-06-2022 03:27:02]16086: WAF :: fetched 8 new logs [21-06-2022 03:28:01]18858: WAF :: fetched 6 new logs [21-06-2022 03:29:01]21548: WAF :: fetched 5 new logs [21-06-2022 03:30:02]24380: WAF :: fetched 5 new logs [21-06-2022 03:31:02]27207: WAF :: fetched 5 new logs [21-06-2022 03:32:01]30123: WAF :: fetched 6 new logs [21-06-2022 03:33:02]567: WAF :: fetched 7 new logs [21-06-2022 03:34:02]3492: WAF :: fetched 5 new logs [21-06-2022 03:35:01]6225: WAF :: fetched 3 new logs [21-06-2022 03:36:02]8996: WAF :: fetched 1 new logs [21-06-2022 03:37:02]11619: WAF :: fetched 5 new logs [21-06-2022 03:39:02]17047: WAF :: fetched 2 new logs [21-06-2022 03:40:01]19680: WAF :: fetched 5 new logs [21-06-2022 03:41:01]22408: WAF :: fetched 1 new logs [21-06-2022 03:41:01]22408: Checking for user cron vulnerabilities [21-06-2022 03:42:02]25249: WAF :: fetched 3 new logs [21-06-2022 03:43:01]28022: WAF :: fetched 5 new logs [21-06-2022 03:44:02]30788: Checking ditributed CMS bruteforce attacks [21-06-2022 03:44:02]30788: WAF :: fetched 7 new logs [21-06-2022 03:45:01]969: WAF :: fetched 8 new logs [21-06-2022 03:46:01]3776: WAF :: fetched 9 new logs [21-06-2022 03:47:02]6439: WAF :: fetched 7 new logs [21-06-2022 03:48:01]9042: WAF :: fetched 7 new logs [21-06-2022 03:49:02]11616: WAF :: fetched 6 new logs [21-06-2022 03:50:01]14233: WAF :: fetched 12 new logs [21-06-2022 03:51:02]17004: WAF :: fetched 9 new logs [21-06-2022 03:52:01]19579: WAF :: fetched 5 new logs [21-06-2022 03:53:01]22201: WAF :: fetched 11 new logs [21-06-2022 03:54:02]24807: WAF :: fetched 7 new logs [21-06-2022 03:55:01]27398: WAF :: fetched 6 new logs [21-06-2022 03:56:02]30140: WAF :: fetched 5 new logs [21-06-2022 03:57:02]32695: WAF :: fetched 6 new logs [21-06-2022 03:58:01]2960: WAF :: fetched 4 new logs [21-06-2022 03:59:02]5964: WAF :: fetched 5 new logs [21-06-2022 04:00:01]8375: WAF :: fetched 2 new logs [21-06-2022 04:01:01]11762: WAF :: fetched 5 new logs [21-06-2022 04:02:02]14505: WAF :: fetched 150 new logs [21-06-2022 04:03:01]17186: WAF :: fetched 98 new logs [21-06-2022 04:04:02]19959: WAF :: fetched 7 new logs [21-06-2022 04:05:01]22677: WAF :: fetched 15 new logs [21-06-2022 04:06:01]25517: WAF :: fetched 10 new logs [21-06-2022 04:07:02]28247: WAF :: fetched 12 new logs [21-06-2022 04:08:01]30874: WAF :: fetched 11 new logs [21-06-2022 04:09:02]1405: WAF :: fetched 9 new logs [21-06-2022 04:10:02]4202: WAF :: fetched 8 new logs [21-06-2022 04:11:01]7152: WAF :: fetched 11 new logs [21-06-2022 04:12:02]9867: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655795522 [21-06-2022 04:12:02]9867: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 04:12:04]9867: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 04:12:04]9867: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-0412/20220621-041202-YrFvQhcNFHljd56SuoK3jQAAAAo [21-06-2022 04:12:04]9867: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 04:12:05]9867: WAF :: fetched 449 new logs [21-06-2022 04:13:01]12494: WAF :: fetched 3 new logs [21-06-2022 04:14:01]15112: WAF :: fetched 2 new logs [21-06-2022 04:15:02]17773: WAF :: fetched 2 new logs [21-06-2022 04:17:02]23108: WAF :: fetched 5 new logs [21-06-2022 04:18:02]25727: WAF :: fetched 7 new logs [21-06-2022 04:19:01]28334: WAF :: fetched 2 new logs [21-06-2022 04:20:02]31005: WAF :: fetched 2 new logs [21-06-2022 04:21:01]1152: WAF :: fetched 8 new logs [21-06-2022 04:22:01]3996: WAF :: fetched 5 new logs [21-06-2022 04:23:02]6688: WAF :: fetched 193 new logs [21-06-2022 04:24:01]9255: WAF :: fetched 4 new logs [21-06-2022 04:25:02]11877: WAF :: fetched 2 new logs [21-06-2022 04:26:01]14611: WAF :: fetched 3 new logs [21-06-2022 04:27:01]17226: WAF :: fetched 3 new logs [21-06-2022 04:28:02]19818: WAF :: fetched 2 new logs [21-06-2022 04:29:01]22352: WAF :: fetched 2 new logs [21-06-2022 04:31:01]27723: WAF :: fetched 1 new logs [21-06-2022 04:34:01]3135: WAF :: fetched 3 new logs [21-06-2022 04:35:02]5863: WAF :: fetched 3 new logs [21-06-2022 04:36:02]8606: WAF :: fetched 6 new logs [21-06-2022 04:37:02]11205: WAF :: fetched 6 new logs [21-06-2022 04:38:02]13798: WAF :: fetched 2 new logs [21-06-2022 04:39:01]16413: WAF :: fetched 4 new logs [21-06-2022 04:40:02]19065: WAF :: fetched 11 new logs [21-06-2022 04:41:01]21741: WAF :: fetched 6 new logs [21-06-2022 04:41:01]21741: Checking for user cron vulnerabilities [21-06-2022 04:42:02]24337: WAF :: fetched 6 new logs [21-06-2022 04:43:02]26892: WAF :: fetched 5 new logs [21-06-2022 04:44:01]29505: Checking ditributed CMS bruteforce attacks [21-06-2022 04:44:01]29505: WAF :: fetched 2 new logs [21-06-2022 04:45:02]32140: WAF :: fetched 2 new logs [21-06-2022 04:49:01]10386: WAF :: fetched 1 new logs [21-06-2022 04:54:01]23519: WAF :: fetched 2 new logs [21-06-2022 04:55:02]26139: WAF :: fetched 3 new logs [21-06-2022 04:59:01]4196: WAF :: fetched 3 new logs [21-06-2022 05:00:02]6651: WAF :: fetched 1 new logs [21-06-2022 05:01:01]9847: WAF :: fetched 2 new logs [21-06-2022 05:01:41]9842: Starting daily scan on files updated in last 24 hrs [21-06-2022 05:02:01]12482: WAF :: fetched 5 new logs [21-06-2022 05:03:02]15108: WAF :: fetched 4 new logs [21-06-2022 05:04:01]17722: WAF :: fetched 3 new logs [21-06-2022 05:05:02]20363: WAF :: fetched 4 new logs [21-06-2022 05:06:01]23094: WAF :: fetched 3 new logs [21-06-2022 05:07:01]25669: WAF :: fetched 5 new logs [21-06-2022 05:08:02]28288: WAF :: fetched 1 new logs [21-06-2022 05:09:01]30885: WAF :: fetched 3 new logs [21-06-2022 05:10:02]1127: WAF :: fetched 1 new logs [21-06-2022 05:12:01]6516: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655799121 [21-06-2022 05:12:01]6516: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 05:12:03]6516: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 05:12:03]6516: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-0512/20220621-051201-YrF9Ua1URoKg6XyRwWwlAAAAAAg [21-06-2022 05:12:03]6516: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 05:12:04]6516: WAF :: fetched 3 new logs [21-06-2022 05:14:01]11721: WAF :: fetched 1 new logs [21-06-2022 05:16:01]17061: WAF :: fetched 1 new logs [21-06-2022 05:17:01]19650: WAF :: fetched 1 new logs [21-06-2022 05:18:02]22307: WAF :: fetched 4 new logs [21-06-2022 05:19:01]24852: WAF :: fetched 2 new logs [21-06-2022 05:25:01]8313: WAF :: fetched 24 new logs [21-06-2022 05:26:02]11036: WAF :: fetched 107 new logs [21-06-2022 05:27:01]13670: WAF :: fetched 100 new logs [21-06-2022 05:28:02]16292: WAF :: fetched 113 new logs [21-06-2022 05:29:02]18883: WAF :: fetched 88 new logs [21-06-2022 05:30:01]21486: WAF :: fetched 8 new logs [21-06-2022 05:31:02]24216: WAF :: fetched 6 new logs [21-06-2022 05:32:02]26801: WAF :: fetched 2 new logs [21-06-2022 05:33:01]29399: WAF :: fetched 5 new logs [21-06-2022 05:34:02]32017: WAF :: fetched 7 new logs [21-06-2022 05:35:02]2197: WAF :: fetched 3 new logs [21-06-2022 05:36:01]5010: WAF :: fetched 4 new logs [21-06-2022 05:37:02]7627: WAF :: fetched 4 new logs [21-06-2022 05:38:01]10188: WAF :: fetched 2 new logs [21-06-2022 05:40:02]15424: WAF :: fetched 2 new logs [21-06-2022 05:41:01]18177: WAF :: fetched 2 new logs [21-06-2022 05:41:01]18177: Checking for user cron vulnerabilities [21-06-2022 05:42:02]20797: WAF :: fetched 1 new logs [21-06-2022 05:44:01]25965: Checking ditributed CMS bruteforce attacks [21-06-2022 05:44:01]25965: WAF :: fetched 1 new logs [21-06-2022 05:46:01]31260: WAF :: fetched 1 new logs [21-06-2022 05:49:01]6730: WAF :: fetched 2 new logs [21-06-2022 05:50:02]9368: WAF :: fetched 5 new logs [21-06-2022 05:51:02]12101: WAF :: fetched 12 new logs [21-06-2022 05:52:01]14693: WAF :: fetched 11 new logs [21-06-2022 05:53:01]17318: WAF :: fetched 9 new logs [21-06-2022 05:54:01]19920: WAF :: fetched 10 new logs [21-06-2022 05:55:01]22531: WAF :: fetched 8 new logs [21-06-2022 05:56:02]25335: WAF :: fetched 12 new logs [21-06-2022 05:57:02]27933: WAF :: fetched 11 new logs [21-06-2022 05:58:01]30547: WAF :: fetched 7 new logs [21-06-2022 05:59:02]772: WAF :: fetched 5 new logs [21-06-2022 06:00:01]3124: WAF :: fetched 8 new logs [21-06-2022 06:01:01]6371: WAF :: fetched 4 new logs [21-06-2022 06:02:02]9050: WAF :: fetched 4 new logs [21-06-2022 06:03:01]11615: WAF :: fetched 3 new logs [21-06-2022 06:04:01]14246: WAF :: fetched 8 new logs [21-06-2022 06:05:02]16886: WAF :: fetched 8 new logs [21-06-2022 06:06:01]19618: WAF :: fetched 7 new logs [21-06-2022 06:07:02]22242: WAF :: fetched 3 new logs [21-06-2022 06:08:02]24794: WAF :: fetched 3 new logs [21-06-2022 06:12:02]2975: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655802722 [21-06-2022 06:12:02]2975: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 06:12:04]2975: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 06:12:04]2975: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-0612/20220621-061202-YrGLYss0Yby1GmyuEPDhCAAAABQ [21-06-2022 06:12:04]2975: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 06:12:05]2975: WAF :: fetched 1 new logs [21-06-2022 06:13:02]5637: WAF :: fetched 1 new logs [21-06-2022 06:15:02]10932: WAF :: fetched 1 new logs [21-06-2022 06:18:02]18960: WAF :: fetched 1 new logs [21-06-2022 06:19:01]21595: WAF :: fetched 2 new logs [21-06-2022 06:20:02]24277: WAF :: fetched 4 new logs [21-06-2022 06:21:01]26999: WAF :: fetched 1 new logs [21-06-2022 06:23:02]32252: WAF :: fetched 1 new logs [21-06-2022 06:24:01]2487: WAF :: fetched 1 new logs [21-06-2022 06:25:02]5226: WAF :: fetched 3 new logs [21-06-2022 06:26:01]7972: WAF :: fetched 1 new logs [21-06-2022 06:27:01]10698: WAF :: fetched 1 new logs [21-06-2022 06:28:02]13299: WAF :: fetched 1 new logs [21-06-2022 06:29:01]15889: WAF :: fetched 2 new logs [21-06-2022 06:30:02]18542: WAF :: fetched 1 new logs [21-06-2022 06:31:01]21330: WAF :: fetched 1 new logs [21-06-2022 06:34:02]29139: WAF :: fetched 1 new logs [21-06-2022 06:35:01]31681: WAF :: fetched 3 new logs [21-06-2022 06:36:02]2108: WAF :: fetched 1 new logs [21-06-2022 06:37:01]4760: WAF :: fetched 6 new logs [21-06-2022 06:39:02]9995: WAF :: fetched 1 new logs [21-06-2022 06:41:02]15395: Checking for user cron vulnerabilities [21-06-2022 06:42:01]18009: WAF :: fetched 4 new logs [21-06-2022 06:43:01]20621: WAF :: fetched 3 new logs [21-06-2022 06:44:01]23291: Checking ditributed CMS bruteforce attacks [21-06-2022 06:44:02]23291: WAF :: fetched 8 new logs [21-06-2022 06:45:01]25883: WAF :: fetched 8 new logs [21-06-2022 06:46:02]28610: WAF :: fetched 10 new logs [21-06-2022 06:47:01]31246: WAF :: fetched 13 new logs [21-06-2022 06:48:02]1495: WAF :: fetched 7 new logs [21-06-2022 06:49:01]4160: WAF :: fetched 10 new logs [21-06-2022 06:50:02]6880: WAF :: fetched 12 new logs [21-06-2022 06:51:01]9422: WAF :: fetched 12 new logs [21-06-2022 06:52:02]12263: WAF :: fetched 6 new logs [21-06-2022 06:53:01]14901: WAF :: fetched 6 new logs [21-06-2022 06:54:01]17527: WAF :: fetched 7 new logs [21-06-2022 06:55:02]20155: WAF :: fetched 6 new logs [21-06-2022 06:56:01]22822: WAF :: fetched 5 new logs [21-06-2022 06:57:01]25382: WAF :: fetched 7 new logs [21-06-2022 06:58:01]27984: WAF :: fetched 8 new logs [21-06-2022 06:59:02]30592: WAF :: fetched 15 new logs [21-06-2022 07:00:02]452: WAF :: fetched 11 new logs [21-06-2022 07:01:01]3684: WAF :: fetched 13 new logs [21-06-2022 07:02:02]6400: WAF :: fetched 15 new logs [21-06-2022 07:03:01]8985: WAF :: fetched 12 new logs [21-06-2022 07:04:02]11593: WAF :: fetched 9 new logs [21-06-2022 07:05:02]14176: WAF :: fetched 4 new logs [21-06-2022 07:06:01]16867: WAF :: fetched 17 new logs [21-06-2022 07:07:01]19496: WAF :: fetched 10 new logs [21-06-2022 07:08:01]22051: WAF :: fetched 14 new logs [21-06-2022 07:09:02]24660: WAF :: fetched 9 new logs [21-06-2022 07:10:01]27276: WAF :: fetched 8 new logs [21-06-2022 07:11:02]30064: WAF :: fetched 13 new logs [21-06-2022 07:12:02]32607: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655806322 [21-06-2022 07:12:02]32607: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 07:12:04]32607: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 07:12:04]32607: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-0712/20220621-071202-YrGZcmKT1J0Y0mFq23ULhQAAABA [21-06-2022 07:12:04]32607: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 07:12:04]32607: WAF :: fetched 12 new logs [21-06-2022 07:13:01]2841: WAF :: fetched 11 new logs [21-06-2022 07:14:02]5560: WAF :: fetched 2 new logs [21-06-2022 07:15:01]8181: WAF :: fetched 3 new logs [21-06-2022 07:16:01]10883: WAF :: fetched 3 new logs [21-06-2022 07:17:02]13484: WAF :: fetched 10 new logs [21-06-2022 07:18:01]16093: WAF :: fetched 7 new logs [21-06-2022 07:19:02]18709: WAF :: fetched 3 new logs [21-06-2022 07:20:02]21300: WAF :: fetched 6 new logs [21-06-2022 07:21:01]24015: WAF :: fetched 5 new logs [21-06-2022 07:22:02]26631: WAF :: fetched 7 new logs [21-06-2022 07:23:01]29186: WAF :: fetched 4 new logs [21-06-2022 07:25:02]1954: WAF :: fetched 1 new logs [21-06-2022 07:26:02]4751: WAF :: fetched 3 new logs [21-06-2022 07:27:01]7363: WAF :: fetched 1 new logs [21-06-2022 07:28:02]9952: WAF :: fetched 1 new logs [21-06-2022 07:29:01]12539: WAF :: fetched 4 new logs [21-06-2022 07:31:02]17945: WAF :: fetched 3 new logs [21-06-2022 07:32:01]20548: WAF :: fetched 1 new logs [21-06-2022 07:34:01]25716: WAF :: fetched 2 new logs [21-06-2022 07:35:01]28317: WAF :: fetched 2 new logs [21-06-2022 07:36:01]31071: WAF :: fetched 2 new logs [21-06-2022 07:37:02]1281: WAF :: fetched 2 new logs [21-06-2022 07:39:02]6552: WAF :: fetched 2 new logs [21-06-2022 07:40:02]9130: WAF :: fetched 3 new logs [21-06-2022 07:41:01]11904: WAF :: fetched 8 new logs [21-06-2022 07:41:01]11904: Checking for user cron vulnerabilities [21-06-2022 07:42:02]14525: WAF :: fetched 7 new logs [21-06-2022 07:43:01]17098: WAF :: fetched 8 new logs [21-06-2022 07:44:01]19735: Checking ditributed CMS bruteforce attacks [21-06-2022 07:44:01]19735: WAF :: fetched 11 new logs [21-06-2022 07:45:01]: Checking for definition updates [21-06-2022 07:45:02]22326: WAF :: fetched 9 new logs [21-06-2022 07:46:01]25021: WAF :: fetched 11 new logs [21-06-2022 07:47:02]27669: WAF :: fetched 4 new logs [21-06-2022 07:48:01]30258: WAF :: fetched 8 new logs [21-06-2022 07:49:02]403: WAF :: fetched 1 new logs [21-06-2022 07:50:01]3115: WAF :: fetched 2 new logs [21-06-2022 07:51:02]6016: WAF :: fetched 1 new logs [21-06-2022 07:52:02]8657: WAF :: fetched 1 new logs [21-06-2022 07:53:01]11240: WAF :: fetched 1 new logs [21-06-2022 07:54:02]13867: WAF :: fetched 2 new logs [21-06-2022 07:55:01]16499: WAF :: fetched 1 new logs [21-06-2022 07:56:02]19258: WAF :: fetched 2 new logs [21-06-2022 07:57:02]21914: WAF :: fetched 5 new logs [21-06-2022 08:01:01]32568: WAF :: fetched 2 new logs [21-06-2022 08:03:01]5491: WAF :: fetched 3 new logs [21-06-2022 08:08:01]18708: WAF :: fetched 1 new logs [21-06-2022 08:09:02]21353: WAF :: fetched 3 new logs [21-06-2022 08:11:01]26669: WAF :: fetched 1 new logs [21-06-2022 08:12:02]29379: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655809922 [21-06-2022 08:12:02]29379: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 08:12:04]29379: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 08:12:04]29379: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-0812/20220621-081202-YrGngnDv89WLjksLi8n9_QAAAAo [21-06-2022 08:12:04]29379: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 08:12:04]29379: WAF :: fetched 2 new logs [21-06-2022 08:13:01]31964: WAF :: fetched 1 new logs [21-06-2022 08:15:02]4870: WAF :: fetched 2 new logs [21-06-2022 08:16:01]7531: WAF :: fetched 3 new logs [21-06-2022 08:17:02]10220: WAF :: fetched 1 new logs [21-06-2022 08:18:01]12829: WAF :: fetched 5 new logs [21-06-2022 08:19:01]15445: WAF :: fetched 3 new logs [21-06-2022 08:20:02]18136: WAF :: fetched 5 new logs [21-06-2022 08:21:01]20821: WAF :: fetched 4 new logs [21-06-2022 08:22:01]23531: WAF :: fetched 2 new logs [21-06-2022 08:23:02]26167: WAF :: fetched 2 new logs [21-06-2022 08:24:01]28753: WAF :: fetched 4 new logs [21-06-2022 08:25:01]31372: WAF :: fetched 3 new logs [21-06-2022 08:26:01]1637: WAF :: fetched 6 new logs [21-06-2022 08:27:02]4428: WAF :: fetched 6 new logs [21-06-2022 08:28:01]7061: WAF :: fetched 2 new logs [21-06-2022 08:29:02]9686: WAF :: fetched 4 new logs [21-06-2022 08:32:02]17745: WAF :: fetched 1 new logs [21-06-2022 08:33:01]20369: WAF :: fetched 1 new logs [21-06-2022 08:34:02]22999: WAF :: fetched 2 new logs [21-06-2022 08:35:02]25621: WAF :: fetched 1 new logs [21-06-2022 08:36:01]28301: WAF :: fetched 1 new logs [21-06-2022 08:37:02]31022: WAF :: fetched 5 new logs [21-06-2022 08:38:01]1233: WAF :: fetched 3 new logs [21-06-2022 08:39:02]3937: WAF :: fetched 2 new logs [21-06-2022 08:41:01]9366: WAF :: fetched 1 new logs [21-06-2022 08:41:01]9366: Checking for user cron vulnerabilities [21-06-2022 08:42:02]12067: WAF :: fetched 1 new logs [21-06-2022 08:43:02]14697: WAF :: fetched 2 new logs [21-06-2022 08:44:01]17399: Checking ditributed CMS bruteforce attacks [21-06-2022 08:44:01]17399: WAF :: fetched 1 new logs [21-06-2022 08:46:02]22756: WAF :: fetched 3 new logs [21-06-2022 08:47:01]25524: WAF :: fetched 4 new logs [21-06-2022 08:48:02]28203: WAF :: fetched 3 new logs [21-06-2022 08:49:02]30839: WAF :: fetched 4 new logs [21-06-2022 08:50:01]1148: WAF :: fetched 7 new logs [21-06-2022 08:51:02]3967: WAF :: fetched 5 new logs [21-06-2022 08:52:01]6711: WAF :: fetched 3 new logs [21-06-2022 08:53:01]9382: WAF :: fetched 3 new logs [21-06-2022 08:54:02]12056: WAF :: fetched 4 new logs [21-06-2022 08:55:01]14762: WAF :: fetched 7 new logs [21-06-2022 08:56:01]17627: WAF :: fetched 7 new logs [21-06-2022 08:57:02]20418: WAF :: fetched 3 new logs [21-06-2022 08:59:02]25805: WAF :: fetched 1 new logs [21-06-2022 09:00:02]28179: WAF :: fetched 1 new logs [21-06-2022 09:01:01]31359: WAF :: fetched 1 new logs [21-06-2022 09:02:02]1786: WAF :: fetched 3 new logs [21-06-2022 09:05:01]9984: WAF :: fetched 3 new logs [21-06-2022 09:06:02]12743: WAF :: fetched 4 new logs [21-06-2022 09:07:02]15488: WAF :: fetched 1 new logs [21-06-2022 09:09:02]21125: WAF :: fetched 1 new logs [21-06-2022 09:10:01]23949: WAF :: fetched 1 new logs [21-06-2022 09:11:02]26883: WAF :: fetched 9 new logs [21-06-2022 09:12:02]29803: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655813522 [21-06-2022 09:12:02]29803: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 09:12:04]29803: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 09:12:04]29803: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-0912/20220621-091202-YrG1kqNvExlxY1JUP60uswAAACM [21-06-2022 09:12:04]29803: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 09:12:04]29803: WAF :: fetched 17 new logs [21-06-2022 09:13:01]32601: WAF :: fetched 12 new logs [21-06-2022 09:14:02]3022: WAF :: fetched 12 new logs [21-06-2022 09:15:01]5861: WAF :: fetched 15 new logs [21-06-2022 09:16:02]8709: WAF :: fetched 10 new logs [21-06-2022 09:17:02]11559: WAF :: fetched 16 new logs [21-06-2022 09:18:01]14486: WAF :: fetched 20 new logs [21-06-2022 09:19:02]17429: WAF :: fetched 9 new logs [21-06-2022 09:20:02]20242: WAF :: fetched 7 new logs [21-06-2022 09:21:01]23152: WAF :: fetched 8 new logs [21-06-2022 09:22:02]25947: WAF :: fetched 7 new logs [21-06-2022 09:23:01]28572: WAF :: fetched 2 new logs [21-06-2022 09:24:02]31249: WAF :: fetched 2 new logs [21-06-2022 09:25:01]1505: WAF :: fetched 3 new logs [21-06-2022 09:26:02]4320: WAF :: fetched 2 new logs [21-06-2022 09:27:02]7098: WAF :: fetched 2 new logs [21-06-2022 09:28:02]9815: WAF :: fetched 3 new logs [21-06-2022 09:29:01]12611: WAF :: fetched 2 new logs [21-06-2022 09:30:02]15416: WAF :: fetched 2 new logs [21-06-2022 09:31:01]18254: WAF :: fetched 1 new logs [21-06-2022 09:32:01]21084: WAF :: fetched 1 new logs [21-06-2022 09:33:01]23840: WAF :: fetched 4 new logs [21-06-2022 09:34:01]26573: WAF :: fetched 2 new logs [21-06-2022 09:35:01]29257: WAF :: fetched 7 new logs [21-06-2022 09:36:01]32077: WAF :: fetched 8 new logs [21-06-2022 09:37:02]2535: WAF :: fetched 5 new logs [21-06-2022 09:38:01]5270: WAF :: fetched 6 new logs [21-06-2022 09:39:02]8021: WAF :: fetched 5 new logs [21-06-2022 09:40:01]10757: WAF :: fetched 9 new logs [21-06-2022 09:41:01]13509: WAF :: fetched 6 new logs [21-06-2022 09:41:01]13509: Checking for user cron vulnerabilities [21-06-2022 09:42:02]16314: WAF :: fetched 3 new logs [21-06-2022 09:43:02]18992: WAF :: fetched 2 new logs [21-06-2022 09:44:01]21716: Checking ditributed CMS bruteforce attacks [21-06-2022 09:44:02]21716: WAF :: fetched 1 new logs [21-06-2022 09:45:01]24545: WAF :: fetched 1 new logs [21-06-2022 09:46:01]27357: WAF :: fetched 2 new logs [21-06-2022 09:48:02]485: WAF :: fetched 1 new logs [21-06-2022 09:50:02]6089: WAF :: fetched 1 new logs [21-06-2022 09:51:01]8844: WAF :: fetched 1 new logs [21-06-2022 09:52:01]11681: WAF :: fetched 3 new logs [21-06-2022 09:53:02]14394: WAF :: fetched 1 new logs [21-06-2022 09:57:01]25337: WAF :: fetched 2 new logs [21-06-2022 09:58:02]28109: WAF :: fetched 8 new logs [21-06-2022 09:59:01]30832: WAF :: fetched 6 new logs [21-06-2022 10:00:02]758: WAF :: fetched 6 new logs [21-06-2022 10:01:02]4062: WAF :: fetched 4 new logs [21-06-2022 10:02:01]6891: WAF :: fetched 3 new logs [21-06-2022 10:03:02]9570: WAF :: fetched 1 new logs [21-06-2022 10:04:02]12197: WAF :: fetched 1 new logs [21-06-2022 10:06:01]17612: WAF :: fetched 2 new logs [21-06-2022 10:07:02]20392: WAF :: fetched 5 new logs [21-06-2022 10:08:01]23110: WAF :: fetched 3 new logs [21-06-2022 10:09:02]25833: WAF :: fetched 6 new logs [21-06-2022 10:10:02]28497: WAF :: fetched 7 new logs [21-06-2022 10:11:01]31317: WAF :: fetched 6 new logs [21-06-2022 10:12:02]1619: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655817122 [21-06-2022 10:12:02]1619: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 10:12:04]1619: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 10:12:04]1619: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-1012/20220621-101202-YrHDovhy3IIPnHoEYLY6pAAAACw [21-06-2022 10:12:04]1619: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 10:12:04]1619: WAF :: fetched 5 new logs [21-06-2022 10:13:01]4383: WAF :: fetched 5 new logs [21-06-2022 10:14:02]7094: WAF :: fetched 7 new logs [21-06-2022 10:15:01]9792: WAF :: fetched 4 new logs [21-06-2022 10:16:02]12573: WAF :: fetched 2 new logs [21-06-2022 10:17:01]15298: WAF :: fetched 1 new logs [21-06-2022 10:18:01]18028: WAF :: fetched 4 new logs [21-06-2022 10:19:02]20775: WAF :: fetched 2 new logs [21-06-2022 10:20:01]23427: WAF :: fetched 1 new logs [21-06-2022 10:22:01]29093: WAF :: fetched 2 new logs [21-06-2022 10:24:01]2154: WAF :: fetched 1 new logs [21-06-2022 10:26:02]7644: WAF :: fetched 2 new logs [21-06-2022 10:28:02]13105: WAF :: fetched 1 new logs [21-06-2022 10:30:02]18401: WAF :: fetched 3 new logs [21-06-2022 10:31:02]21238: WAF :: fetched 2 new logs [21-06-2022 10:33:01]26920: WAF :: fetched 3 new logs [21-06-2022 10:34:02]29650: WAF :: fetched 1 new logs [21-06-2022 10:35:01]32009: WAF :: fetched 4 new logs [21-06-2022 10:36:02]2698: WAF :: fetched 8 new logs [21-06-2022 10:37:01]5562: WAF :: fetched 7 new logs [21-06-2022 10:38:02]8306: WAF :: fetched 8 new logs [21-06-2022 10:39:02]11059: WAF :: fetched 5 new logs [21-06-2022 10:40:02]13819: WAF :: fetched 5 new logs [21-06-2022 10:41:01]16529: WAF :: fetched 6 new logs [21-06-2022 10:41:01]16529: Checking for user cron vulnerabilities [21-06-2022 10:42:02]19404: WAF :: fetched 4 new logs [21-06-2022 10:43:01]22109: WAF :: fetched 10 new logs [21-06-2022 10:44:02]24973: Checking ditributed CMS bruteforce attacks [21-06-2022 10:44:02]24973: WAF :: fetched 1 new logs [21-06-2022 10:45:02]27854: WAF :: fetched 5 new logs [21-06-2022 10:46:02]30744: WAF :: fetched 10 new logs [21-06-2022 10:47:02]1165: WAF :: fetched 2 new logs [21-06-2022 10:48:01]3991: WAF :: fetched 4 new logs [21-06-2022 10:49:02]6818: WAF :: fetched 4 new logs [21-06-2022 10:50:01]9605: WAF :: fetched 4 new logs [21-06-2022 10:51:02]12457: WAF :: fetched 8 new logs [21-06-2022 10:52:02]15244: WAF :: fetched 4 new logs [21-06-2022 10:53:01]17851: WAF :: fetched 8 new logs [21-06-2022 10:54:02]20546: WAF :: fetched 8 new logs [21-06-2022 10:55:01]23224: WAF :: fetched 2 new logs [21-06-2022 10:56:01]26013: WAF :: fetched 4 new logs [21-06-2022 10:57:02]28780: WAF :: fetched 7 new logs [21-06-2022 10:58:01]31463: WAF :: fetched 5 new logs [21-06-2022 10:59:02]1783: WAF :: fetched 7 new logs [21-06-2022 11:00:01]4290: WAF :: fetched 4 new logs [21-06-2022 11:01:02]7555: WAF :: fetched 3 new logs [21-06-2022 11:02:01]10411: WAF :: fetched 2 new logs [21-06-2022 11:03:01]13123: WAF :: fetched 5 new logs [21-06-2022 11:04:01]15852: WAF :: fetched 7 new logs [21-06-2022 11:05:02]18566: WAF :: fetched 8 new logs [21-06-2022 11:06:01]21314: WAF :: fetched 5 new logs [21-06-2022 11:07:02]24087: WAF :: fetched 3 new logs [21-06-2022 11:08:02]26842: WAF :: fetched 6 new logs [21-06-2022 11:08:06]24269: Performed RBL check for 23.111.136.34. [21-06-2022 11:09:01]29611: WAF :: fetched 5 new logs [21-06-2022 11:10:01]32412: WAF :: fetched 7 new logs [21-06-2022 11:11:01]2867: WAF :: fetched 5 new logs [21-06-2022 11:12:01]5770: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655820721 [21-06-2022 11:12:01]5770: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 11:12:03]5770: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 11:12:04]5770: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-1112/20220621-111201-YrHRsVzpNdXhUfnoDT6FugAAADU [21-06-2022 11:12:04]5770: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 11:12:04]5770: WAF :: fetched 4 new logs [21-06-2022 11:13:01]8495: WAF :: fetched 4 new logs [21-06-2022 11:14:02]11291: WAF :: fetched 5 new logs [21-06-2022 11:16:02]16875: WAF :: fetched 2 new logs [21-06-2022 11:17:01]19694: WAF :: fetched 1 new logs [21-06-2022 11:19:01]25191: WAF :: fetched 1 new logs [21-06-2022 11:21:02]30772: WAF :: fetched 4 new logs [21-06-2022 11:22:01]1151: WAF :: fetched 2 new logs [21-06-2022 11:23:01]3875: WAF :: fetched 1 new logs [21-06-2022 11:26:01]12026: WAF :: fetched 4 new logs [21-06-2022 11:27:02]14818: WAF :: fetched 6 new logs [21-06-2022 11:28:02]17478: WAF :: fetched 9 new logs [21-06-2022 11:29:01]20132: WAF :: fetched 2 new logs [21-06-2022 11:30:02]22843: WAF :: fetched 4 new logs [21-06-2022 11:31:01]25526: WAF :: fetched 7 new logs [21-06-2022 11:32:02]28339: WAF :: fetched 4 new logs [21-06-2022 11:33:02]30976: WAF :: fetched 5 new logs [21-06-2022 11:34:01]1219: WAF :: fetched 4 new logs [21-06-2022 11:35:02]3996: WAF :: fetched 2 new logs [21-06-2022 11:36:01]6664: WAF :: fetched 3 new logs [21-06-2022 11:37:02]9659: WAF :: fetched 3 new logs [21-06-2022 11:38:01]12332: WAF :: fetched 1 new logs [21-06-2022 11:41:02]20465: Checking for user cron vulnerabilities [21-06-2022 11:42:02]23261: WAF :: fetched 3 new logs [21-06-2022 11:43:01]25951: WAF :: fetched 2 new logs [21-06-2022 11:44:02]28709: Checking ditributed CMS bruteforce attacks [21-06-2022 11:44:02]28709: WAF :: fetched 1 new logs [21-06-2022 11:45:01]31443: WAF :: fetched 3 new logs [21-06-2022 11:46:02]1801: WAF :: fetched 1 new logs [21-06-2022 11:48:01]7436: WAF :: fetched 1 new logs [21-06-2022 11:49:02]10106: WAF :: fetched 1 new logs [21-06-2022 11:50:01]12798: WAF :: fetched 1 new logs [21-06-2022 11:51:02]15553: WAF :: fetched 4 new logs [21-06-2022 11:52:02]18258: WAF :: fetched 5 new logs [21-06-2022 11:53:01]20921: WAF :: fetched 1 new logs [21-06-2022 11:54:02]23642: WAF :: fetched 3 new logs [21-06-2022 11:56:02]28968: WAF :: fetched 1 new logs [21-06-2022 11:58:01]2070: WAF :: fetched 3 new logs [21-06-2022 11:59:02]4892: WAF :: fetched 1 new logs [21-06-2022 12:00:01]7283: WAF :: fetched 1 new logs [21-06-2022 12:03:01]16123: WAF :: fetched 10 new logs [21-06-2022 12:04:02]18792: WAF :: fetched 9 new logs [21-06-2022 12:05:01]21451: WAF :: fetched 1 new logs [21-06-2022 12:06:01]24196: WAF :: fetched 5 new logs [21-06-2022 12:08:01]29645: WAF :: fetched 4 new logs [21-06-2022 12:09:02]32292: WAF :: fetched 1 new logs [21-06-2022 12:10:02]2561: WAF :: fetched 6 new logs [21-06-2022 12:11:01]5337: WAF :: fetched 6 new logs [21-06-2022 12:12:02]8089: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655824322 [21-06-2022 12:12:02]8089: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 12:12:04]8089: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 12:12:04]8089: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-1212/20220621-121202-YrHfwrAaACgG2BkBJAc7FgAAAEU [21-06-2022 12:12:04]8089: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 12:12:04]8089: WAF :: fetched 6 new logs [21-06-2022 12:13:01]10718: WAF :: fetched 5 new logs [21-06-2022 12:14:02]13392: WAF :: fetched 7 new logs [21-06-2022 12:15:02]16061: WAF :: fetched 8 new logs [21-06-2022 12:16:01]19287: WAF :: fetched 203 new logs [21-06-2022 12:17:02]22442: WAF :: fetched 5 new logs [21-06-2022 12:18:01]25075: WAF :: fetched 4 new logs [21-06-2022 12:19:01]27744: WAF :: fetched 9 new logs [21-06-2022 12:20:02]30451: WAF :: fetched 16 new logs [21-06-2022 12:21:01]768: WAF :: fetched 23 new logs [21-06-2022 12:22:02]3513: WAF :: fetched 14 new logs [21-06-2022 12:23:01]6191: WAF :: fetched 12 new logs [21-06-2022 12:24:02]8927: WAF :: fetched 14 new logs [21-06-2022 12:25:01]11713: WAF :: fetched 7 new logs [21-06-2022 12:26:02]14444: WAF :: fetched 5 new logs [21-06-2022 12:28:02]19844: WAF :: fetched 1 new logs [21-06-2022 12:29:01]22514: WAF :: fetched 1 new logs [21-06-2022 12:30:02]25232: WAF :: fetched 3 new logs [21-06-2022 12:31:02]27949: WAF :: fetched 1 new logs [21-06-2022 12:32:01]30695: WAF :: fetched 1 new logs [21-06-2022 12:34:01]3712: WAF :: fetched 5 new logs [21-06-2022 12:35:02]6472: WAF :: fetched 3 new logs [21-06-2022 12:37:02]11939: WAF :: fetched 2 new logs [21-06-2022 12:38:02]14566: WAF :: fetched 8 new logs [21-06-2022 12:39:01]17221: WAF :: fetched 1 new logs [21-06-2022 12:40:02]19911: WAF :: fetched 1 new logs [21-06-2022 12:41:01]22609: Checking for user cron vulnerabilities [21-06-2022 12:42:02]25301: WAF :: fetched 1 new logs [21-06-2022 12:43:02]27932: WAF :: fetched 2 new logs [21-06-2022 12:44:01]30559: Checking ditributed CMS bruteforce attacks [21-06-2022 12:44:01]30559: WAF :: fetched 4 new logs [21-06-2022 12:45:02]: Checking for software updates [21-06-2022 12:46:02]3530: WAF :: fetched 2 new logs [21-06-2022 12:47:01]6225: WAF :: fetched 4 new logs [21-06-2022 12:48:02]8974: WAF :: fetched 8 new logs [21-06-2022 12:49:01]11602: WAF :: fetched 9 new logs [21-06-2022 12:50:02]14284: WAF :: fetched 8 new logs [21-06-2022 12:51:01]17042: WAF :: fetched 10 new logs [21-06-2022 12:52:01]19756: WAF :: fetched 7 new logs [21-06-2022 12:53:01]22584: WAF :: fetched 6 new logs [21-06-2022 12:54:02]25229: WAF :: fetched 1 new logs [21-06-2022 12:55:01]27887: WAF :: fetched 2 new logs [21-06-2022 12:56:02]30616: WAF :: fetched 3 new logs [21-06-2022 12:57:02]828: WAF :: fetched 1 new logs [21-06-2022 12:58:01]3569: WAF :: fetched 2 new logs [21-06-2022 13:00:01]8692: WAF :: fetched 1 new logs [21-06-2022 13:01:01]11797: WAF :: fetched 4 new logs [21-06-2022 13:02:02]14483: WAF :: fetched 6 new logs [21-06-2022 13:03:01]17237: WAF :: fetched 8 new logs [21-06-2022 13:04:02]19910: WAF :: fetched 8 new logs [21-06-2022 13:05:02]22576: WAF :: fetched 2 new logs [21-06-2022 13:08:01]30663: WAF :: fetched 4 new logs [21-06-2022 13:09:02]882: WAF :: fetched 4 new logs [21-06-2022 13:10:02]3530: WAF :: fetched 2 new logs [21-06-2022 13:11:01]6329: WAF :: fetched 5 new logs [21-06-2022 13:12:02]9015: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655827922 [21-06-2022 13:12:02]9015: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 13:12:04]9015: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 13:12:04]9015: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-1312/20220621-131202-YrHt0mGaF4sAEHdvmFK1MgAAAC4 [21-06-2022 13:12:04]9015: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 13:12:05]9015: WAF :: fetched 5 new logs [21-06-2022 13:13:02]11782: WAF :: fetched 1 new logs [21-06-2022 13:14:01]14435: WAF :: fetched 1 new logs [21-06-2022 13:15:01]17103: WAF :: fetched 1 new logs [21-06-2022 13:16:02]19840: WAF :: fetched 1 new logs [21-06-2022 13:17:02]22434: WAF :: fetched 1 new logs [21-06-2022 13:18:01]25160: WAF :: fetched 2 new logs [21-06-2022 13:19:02]27834: WAF :: fetched 2 new logs [21-06-2022 13:20:02]30485: WAF :: fetched 2 new logs [21-06-2022 13:21:02]754: WAF :: fetched 4 new logs [21-06-2022 13:22:01]3464: WAF :: fetched 1 new logs [21-06-2022 13:24:01]8884: WAF :: fetched 4 new logs [21-06-2022 13:25:02]11584: WAF :: fetched 2 new logs [21-06-2022 13:26:01]14249: WAF :: fetched 7 new logs [21-06-2022 13:27:02]16920: WAF :: fetched 7 new logs [21-06-2022 13:28:02]19652: WAF :: fetched 4 new logs [21-06-2022 13:29:01]22276: WAF :: fetched 4 new logs [21-06-2022 13:30:02]24994: WAF :: fetched 3 new logs [21-06-2022 13:31:01]27687: WAF :: fetched 8 new logs [21-06-2022 13:32:02]30380: WAF :: fetched 11 new logs [21-06-2022 13:33:02]647: WAF :: fetched 14 new logs [21-06-2022 13:34:01]3467: WAF :: fetched 7 new logs [21-06-2022 13:35:01]6279: WAF :: fetched 5 new logs [21-06-2022 13:36:02]9029: WAF :: fetched 4 new logs [21-06-2022 13:37:01]11653: WAF :: fetched 12 new logs [21-06-2022 13:38:02]14377: WAF :: fetched 6 new logs [21-06-2022 13:39:02]17043: WAF :: fetched 6 new logs [21-06-2022 13:40:01]19728: WAF :: fetched 3 new logs [21-06-2022 13:41:02]22516: WAF :: fetched 5 new logs [21-06-2022 13:41:02]22516: Checking for user cron vulnerabilities [21-06-2022 13:42:02]25181: WAF :: fetched 2 new logs [21-06-2022 13:43:01]27898: WAF :: fetched 3 new logs [21-06-2022 13:44:01]30522: Checking ditributed CMS bruteforce attacks [21-06-2022 13:45:01]: Checking for definition updates [21-06-2022 13:46:01]3560: WAF :: fetched 2 new logs [21-06-2022 13:47:02]6316: WAF :: fetched 1 new logs [21-06-2022 13:48:01]9001: WAF :: fetched 2 new logs [21-06-2022 13:49:01]11645: WAF :: fetched 4 new logs [21-06-2022 13:50:02]14391: WAF :: fetched 5 new logs [21-06-2022 13:50:02]14394: httpd.conf changed. Refreshing watchlist. [21-06-2022 13:51:01]17158: WAF :: fetched 3 new logs [21-06-2022 13:52:01]19849: WAF :: fetched 5 new logs [21-06-2022 13:53:02]22622: WAF :: fetched 5 new logs [21-06-2022 13:54:02]25334: WAF :: fetched 9 new logs [21-06-2022 13:55:01]28195: httpd.conf changed. Refreshing watchlist. [21-06-2022 13:55:01]28194: WAF :: fetched 48 new logs [21-06-2022 13:56:02]30943: WAF :: fetched 6 new logs [21-06-2022 13:57:01]1212: WAF :: fetched 3 new logs [21-06-2022 13:58:01]4081: WAF :: fetched 8 new logs [21-06-2022 13:59:02]6788: WAF :: fetched 5 new logs [21-06-2022 14:00:01]9245: WAF :: fetched 3 new logs [21-06-2022 14:01:02]12459: WAF :: fetched 2 new logs [21-06-2022 14:02:01]15071: WAF :: fetched 6 new logs [21-06-2022 14:03:02]17888: WAF :: fetched 1 new logs [21-06-2022 14:04:02]20568: WAF :: fetched 2 new logs [21-06-2022 14:05:01]23262: WAF :: fetched 2 new logs [21-06-2022 14:06:02]26025: WAF :: fetched 1 new logs [21-06-2022 14:08:01]31433: WAF :: fetched 4 new logs [21-06-2022 14:09:02]1732: WAF :: fetched 26 new logs [21-06-2022 14:10:01]4451: WAF :: fetched 7 new logs [21-06-2022 14:11:01]7170: WAF :: fetched 8 new logs [21-06-2022 14:12:02]9856: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655831522 [21-06-2022 14:12:02]9856: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 14:12:04]9856: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 14:12:04]9856: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-1412/20220621-141202-YrH74u0AxUrS1bB5Ow6dJgAAACY [21-06-2022 14:12:04]9856: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 14:12:04]9856: WAF :: fetched 4 new logs [21-06-2022 14:13:01]12604: WAF :: fetched 9 new logs [21-06-2022 14:14:02]15275: WAF :: fetched 9 new logs [21-06-2022 14:15:02]17887: WAF :: fetched 214 new logs [21-06-2022 14:16:01]20583: WAF :: fetched 85 new logs [21-06-2022 14:17:01]23216: WAF :: fetched 4 new logs [21-06-2022 14:18:01]25907: WAF :: fetched 6 new logs [21-06-2022 14:19:02]28569: WAF :: fetched 5 new logs [21-06-2022 14:20:01]31219: WAF :: fetched 7 new logs [21-06-2022 14:21:01]1529: WAF :: fetched 9 new logs [21-06-2022 14:22:02]4250: WAF :: fetched 4 new logs [21-06-2022 14:23:01]6983: WAF :: fetched 3 new logs [21-06-2022 14:26:02]15022: WAF :: fetched 1 new logs [21-06-2022 14:31:02]28525: WAF :: fetched 1 new logs [21-06-2022 14:33:01]1490: WAF :: fetched 1 new logs [21-06-2022 14:34:02]4217: WAF :: fetched 2 new logs [21-06-2022 14:35:01]6948: WAF :: fetched 3 new logs [21-06-2022 14:37:02]12347: WAF :: fetched 1 new logs [21-06-2022 14:38:01]15095: WAF :: fetched 4 new logs [21-06-2022 14:39:02]17852: WAF :: fetched 2 new logs [21-06-2022 14:40:02]20542: WAF :: fetched 3 new logs [21-06-2022 14:41:01]23272: WAF :: fetched 2 new logs [21-06-2022 14:41:01]23272: Checking for user cron vulnerabilities [21-06-2022 14:42:02]25977: WAF :: fetched 5 new logs [21-06-2022 14:43:02]28742: WAF :: fetched 4 new logs [21-06-2022 14:44:01]31412: Checking ditributed CMS bruteforce attacks [21-06-2022 14:44:01]31412: WAF :: fetched 4 new logs [21-06-2022 14:45:02]1750: WAF :: fetched 4 new logs [21-06-2022 14:46:01]4602: WAF :: fetched 11 new logs [21-06-2022 14:47:01]7240: WAF :: fetched 6 new logs [21-06-2022 14:48:02]10000: WAF :: fetched 2 new logs [21-06-2022 14:49:01]12651: WAF :: fetched 3 new logs [21-06-2022 14:50:02]15325: WAF :: fetched 1 new logs [21-06-2022 14:51:02]17998: WAF :: fetched 2 new logs [21-06-2022 14:53:02]23427: WAF :: fetched 1 new logs [21-06-2022 14:53:03]23425: Updated license status via CDN [21-06-2022 14:54:02]26063: WAF :: fetched 1 new logs [21-06-2022 14:55:01]28746: WAF :: fetched 1 new logs [21-06-2022 14:57:02]1733: WAF :: fetched 1 new logs [21-06-2022 14:58:01]4560: WAF :: fetched 1 new logs [21-06-2022 14:59:01]7163: WAF :: fetched 3 new logs [21-06-2022 15:00:02]9619: WAF :: fetched 5 new logs [21-06-2022 15:01:01]12738: Reseting cPGuard inotify settings [21-06-2022 15:02:02]15443: WAF :: fetched 1 new logs [21-06-2022 15:03:01]18127: WAF :: fetched 1 new logs [21-06-2022 15:04:01]20806: WAF :: fetched 6 new logs [21-06-2022 15:06:01]26196: WAF :: fetched 3 new logs [21-06-2022 15:08:02]31575: WAF :: fetched 2 new logs [21-06-2022 15:09:01]1810: WAF :: fetched 1 new logs [21-06-2022 15:10:02]4603: WAF :: fetched 2 new logs [21-06-2022 15:11:01]7308: WAF :: fetched 2 new logs [21-06-2022 15:12:02]9977: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655835122 [21-06-2022 15:12:02]9977: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 15:12:04]9977: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 15:12:04]9977: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-1512/20220621-151202-YrIJ8gcBEbu2u8VQNusLlQAAABc [21-06-2022 15:12:04]9977: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 15:12:04]9977: WAF :: fetched 3 new logs [21-06-2022 15:16:01]20610: WAF :: fetched 2 new logs [21-06-2022 15:17:02]23275: WAF :: fetched 2 new logs [21-06-2022 15:18:01]26010: WAF :: fetched 3 new logs [21-06-2022 15:19:01]28704: WAF :: fetched 5 new logs [21-06-2022 15:20:02]31367: WAF :: fetched 3 new logs [21-06-2022 15:21:01]1685: WAF :: fetched 2 new logs [21-06-2022 15:22:02]4533: WAF :: fetched 4 new logs [21-06-2022 15:23:01]7049: WAF :: fetched 2 new logs [21-06-2022 15:25:01]12653: WAF :: fetched 2 new logs [21-06-2022 15:26:01]15351: WAF :: fetched 1 new logs [21-06-2022 15:27:01]18014: WAF :: fetched 3 new logs [21-06-2022 15:28:02]20742: WAF :: fetched 2 new logs [21-06-2022 15:29:02]23409: WAF :: fetched 3 new logs [21-06-2022 15:30:02]26051: WAF :: fetched 7 new logs [21-06-2022 15:31:01]28819: WAF :: fetched 4 new logs [21-06-2022 15:32:02]31504: WAF :: fetched 7 new logs [21-06-2022 15:33:01]1863: WAF :: fetched 6 new logs [21-06-2022 15:34:02]4608: WAF :: fetched 7 new logs [21-06-2022 15:35:02]7227: WAF :: fetched 6 new logs [21-06-2022 15:36:01]10022: WAF :: fetched 3 new logs [21-06-2022 15:37:02]12733: WAF :: fetched 4 new logs [21-06-2022 15:38:01]15512: WAF :: fetched 10 new logs [21-06-2022 15:39:01]18237: WAF :: fetched 22 new logs [21-06-2022 15:40:02]20942: WAF :: fetched 19 new logs [21-06-2022 15:41:01]23660: WAF :: fetched 14 new logs [21-06-2022 15:41:01]23660: Checking for user cron vulnerabilities [21-06-2022 15:42:02]26353: WAF :: fetched 17 new logs [21-06-2022 15:43:02]29074: WAF :: fetched 14 new logs [21-06-2022 15:44:01]31720: Checking ditributed CMS bruteforce attacks [21-06-2022 15:44:01]31720: WAF :: fetched 16 new logs [21-06-2022 15:45:01]1998: WAF :: fetched 6 new logs [21-06-2022 15:46:01]4814: WAF :: fetched 6 new logs [21-06-2022 15:47:02]7470: WAF :: fetched 1 new logs [21-06-2022 15:49:02]12904: WAF :: fetched 1 new logs [21-06-2022 15:54:02]26527: WAF :: fetched 1 new logs [21-06-2022 15:56:01]31975: WAF :: fetched 1 new logs [21-06-2022 15:57:02]2367: WAF :: fetched 1 new logs [21-06-2022 15:58:01]5180: WAF :: fetched 80 new logs [21-06-2022 15:59:01]7832: WAF :: fetched 78 new logs [21-06-2022 16:00:01]10219: WAF :: fetched 29 new logs [21-06-2022 16:01:02]13430: WAF :: fetched 2 new logs [21-06-2022 16:02:01]16042: WAF :: fetched 7 new logs [21-06-2022 16:03:02]18931: WAF :: fetched 11 new logs [21-06-2022 16:04:01]21567: WAF :: fetched 10 new logs [21-06-2022 16:05:02]24252: WAF :: fetched 7 new logs [21-06-2022 16:06:01]26994: WAF :: fetched 18 new logs [21-06-2022 16:07:02]29651: WAF :: fetched 6 new logs [21-06-2022 16:08:02]32367: WAF :: fetched 7 new logs [21-06-2022 16:09:01]2646: WAF :: fetched 4 new logs [21-06-2022 16:10:02]5359: WAF :: fetched 3 new logs [21-06-2022 16:11:01]8093: WAF :: fetched 1 new logs [21-06-2022 16:12:02]10791: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655838722 [21-06-2022 16:12:02]10791: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 16:12:04]10791: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 16:12:04]10791: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-1612/20220621-161202-YrIYAhNiOv7GycbGmHGVsgAAAAI [21-06-2022 16:12:04]10791: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 16:12:04]10791: WAF :: fetched 1 new logs [21-06-2022 16:13:02]13508: WAF :: fetched 1 new logs [21-06-2022 16:15:02]18852: WAF :: fetched 3 new logs [21-06-2022 16:20:02]32200: WAF :: fetched 1 new logs [21-06-2022 16:25:02]13512: WAF :: fetched 3 new logs [21-06-2022 16:26:01]16246: WAF :: fetched 5 new logs [21-06-2022 16:27:02]18932: WAF :: fetched 2 new logs [21-06-2022 16:28:01]21558: WAF :: fetched 1 new logs [21-06-2022 16:29:02]24393: WAF :: fetched 3 new logs [21-06-2022 16:30:01]27131: WAF :: fetched 2 new logs [21-06-2022 16:32:02]301: WAF :: fetched 1 new logs [21-06-2022 16:33:02]3283: WAF :: fetched 2 new logs [21-06-2022 16:34:02]6116: WAF :: fetched 2 new logs [21-06-2022 16:35:01]8931: WAF :: fetched 6 new logs [21-06-2022 16:36:02]11807: WAF :: fetched 6 new logs [21-06-2022 16:37:01]14476: WAF :: fetched 24 new logs [21-06-2022 16:38:01]17234: WAF :: fetched 9 new logs [21-06-2022 16:39:02]19924: WAF :: fetched 11 new logs [21-06-2022 16:40:01]22602: WAF :: fetched 11 new logs [21-06-2022 16:41:01]25360: WAF :: fetched 10 new logs [21-06-2022 16:41:01]25360: Checking for user cron vulnerabilities [21-06-2022 16:42:02]28047: WAF :: fetched 9 new logs [21-06-2022 16:43:01]30790: WAF :: fetched 14 new logs [21-06-2022 16:44:02]1189: Checking ditributed CMS bruteforce attacks [21-06-2022 16:44:02]1189: WAF :: fetched 9 new logs [21-06-2022 16:45:02]3969: WAF :: fetched 11 new logs [21-06-2022 16:46:01]6718: WAF :: fetched 4 new logs [21-06-2022 16:47:01]9405: WAF :: fetched 7 new logs [21-06-2022 16:48:02]12248: WAF :: fetched 6 new logs [21-06-2022 16:49:01]14932: WAF :: fetched 1 new logs [21-06-2022 16:50:02]17644: WAF :: fetched 4 new logs [21-06-2022 16:51:01]20297: WAF :: fetched 6 new logs [21-06-2022 16:52:02]22970: WAF :: fetched 6 new logs [21-06-2022 16:53:01]25701: WAF :: fetched 7 new logs [21-06-2022 16:55:02]30998: WAF :: fetched 1 new logs [21-06-2022 16:58:01]6862: WAF :: fetched 4 new logs [21-06-2022 16:59:02]9551: WAF :: fetched 1 new logs [21-06-2022 17:00:02]11917: WAF :: fetched 1 new logs [21-06-2022 17:01:01]15151: WAF :: fetched 1 new logs [21-06-2022 17:03:02]20681: WAF :: fetched 10 new logs [21-06-2022 17:04:01]23353: WAF :: fetched 7 new logs [21-06-2022 17:05:02]26059: WAF :: fetched 14 new logs [21-06-2022 17:06:01]28798: WAF :: fetched 12 new logs [21-06-2022 17:07:01]31474: WAF :: fetched 19 new logs [21-06-2022 17:08:02]1839: WAF :: fetched 18 new logs [21-06-2022 17:09:01]4592: WAF :: fetched 11 new logs [21-06-2022 17:10:02]7318: WAF :: fetched 15 new logs [21-06-2022 17:11:01]10047: WAF :: fetched 14 new logs [21-06-2022 17:12:01]12695: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655842321 [21-06-2022 17:12:01]12695: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 17:12:03]12695: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 17:12:03]12695: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-1712/20220621-171201-YrImEaM1WP6A2nh_57FlTQAAABc [21-06-2022 17:12:03]12695: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 17:12:04]12695: WAF :: fetched 6 new logs [21-06-2022 17:13:02]15464: WAF :: fetched 7 new logs [21-06-2022 17:14:01]18094: WAF :: fetched 2 new logs [21-06-2022 17:15:02]20744: WAF :: fetched 1 new logs [21-06-2022 17:16:02]23445: WAF :: fetched 3 new logs [21-06-2022 17:17:01]26140: WAF :: fetched 1 new logs [21-06-2022 17:18:02]28864: WAF :: fetched 10 new logs [21-06-2022 17:19:01]31502: WAF :: fetched 9 new logs [21-06-2022 17:20:02]1759: WAF :: fetched 3 new logs [21-06-2022 17:21:01]4526: WAF :: fetched 5 new logs [21-06-2022 17:22:01]7174: WAF :: fetched 4 new logs [21-06-2022 17:23:02]9833: WAF :: fetched 4 new logs [21-06-2022 17:24:01]12518: WAF :: fetched 4 new logs [21-06-2022 17:25:02]15181: WAF :: fetched 5 new logs [21-06-2022 17:26:02]17841: WAF :: fetched 1 new logs [21-06-2022 17:27:01]20523: WAF :: fetched 4 new logs [21-06-2022 17:28:02]23236: WAF :: fetched 6 new logs [21-06-2022 17:29:02]25924: WAF :: fetched 7 new logs [21-06-2022 17:30:01]28549: WAF :: fetched 7 new logs [21-06-2022 17:31:01]31236: WAF :: fetched 4 new logs [21-06-2022 17:32:02]1503: WAF :: fetched 8 new logs [21-06-2022 17:33:01]4193: WAF :: fetched 4 new logs [21-06-2022 17:34:02]6982: WAF :: fetched 9 new logs [21-06-2022 17:35:02]9576: WAF :: fetched 4 new logs [21-06-2022 17:36:01]12294: WAF :: fetched 8 new logs [21-06-2022 17:37:02]14928: WAF :: fetched 8 new logs [21-06-2022 17:38:01]17546: WAF :: fetched 8 new logs [21-06-2022 17:39:02]20259: WAF :: fetched 6 new logs [21-06-2022 17:40:02]22894: WAF :: fetched 4 new logs [21-06-2022 17:41:01]25621: WAF :: fetched 4 new logs [21-06-2022 17:41:01]25621: Checking for user cron vulnerabilities [21-06-2022 17:42:02]28316: WAF :: fetched 6 new logs [21-06-2022 17:43:01]30889: WAF :: fetched 10 new logs [21-06-2022 17:44:01]1173: Checking ditributed CMS bruteforce attacks [21-06-2022 17:44:02]1173: WAF :: fetched 10 new logs [21-06-2022 17:45:01]3842: WAF :: fetched 91 new logs [21-06-2022 17:46:02]6569: WAF :: fetched 73 new logs [21-06-2022 17:47:01]9182: WAF :: fetched 67 new logs [21-06-2022 17:48:02]11809: WAF :: fetched 14 new logs [21-06-2022 17:49:02]14458: WAF :: fetched 21 new logs [21-06-2022 17:50:01]17041: WAF :: fetched 16 new logs [21-06-2022 17:51:02]19784: WAF :: fetched 17 new logs [21-06-2022 17:52:01]22363: WAF :: fetched 18 new logs [21-06-2022 17:53:01]24991: WAF :: fetched 47 new logs [21-06-2022 17:54:02]27711: WAF :: fetched 16 new logs [21-06-2022 17:55:01]30320: WAF :: fetched 11 new logs [21-06-2022 17:56:02]590: WAF :: fetched 10 new logs [21-06-2022 17:57:02]3261: WAF :: fetched 4 new logs [21-06-2022 17:58:01]5928: WAF :: fetched 2 new logs [21-06-2022 17:59:01]8667: WAF :: fetched 2 new logs [21-06-2022 18:00:02]11056: WAF :: fetched 1 new logs [21-06-2022 18:01:01]14193: WAF :: fetched 2 new logs [21-06-2022 18:05:01]24973: WAF :: fetched 2 new logs [21-06-2022 18:06:02]27727: WAF :: fetched 1 new logs [21-06-2022 18:07:01]30323: WAF :: fetched 1 new logs [21-06-2022 18:08:02]556: WAF :: fetched 12 new logs [21-06-2022 18:09:01]3332: WAF :: fetched 9 new logs [21-06-2022 18:10:01]6014: WAF :: fetched 4 new logs [21-06-2022 18:11:02]8794: WAF :: fetched 3 new logs [21-06-2022 18:12:01]11418: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655845921 [21-06-2022 18:12:01]11418: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 18:12:03]11418: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 18:12:04]11418: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-1812/20220621-181201-YrI0IYEo5amEoDrYX5K9YQAAAD8 [21-06-2022 18:12:04]11418: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 18:12:04]11418: WAF :: fetched 1 new logs [21-06-2022 18:13:02]14038: WAF :: fetched 1 new logs [21-06-2022 18:15:01]19397: WAF :: fetched 6 new logs [21-06-2022 18:16:02]22243: WAF :: fetched 3 new logs [21-06-2022 18:17:01]24829: WAF :: fetched 2 new logs [21-06-2022 18:18:02]27458: WAF :: fetched 4 new logs [21-06-2022 18:19:02]30139: WAF :: fetched 4 new logs [21-06-2022 18:20:01]32732: WAF :: fetched 4 new logs [21-06-2022 18:21:02]3034: WAF :: fetched 7 new logs [21-06-2022 18:22:01]5706: WAF :: fetched 9 new logs [21-06-2022 18:23:01]8289: WAF :: fetched 6 new logs [21-06-2022 18:24:02]11069: WAF :: fetched 7 new logs [21-06-2022 18:25:01]13634: WAF :: fetched 4 new logs [21-06-2022 18:26:02]16325: WAF :: fetched 6 new logs [21-06-2022 18:27:01]18908: WAF :: fetched 5 new logs [21-06-2022 18:28:02]21510: WAF :: fetched 2 new logs [21-06-2022 18:30:02]26775: WAF :: fetched 1 new logs [21-06-2022 18:31:01]29417: WAF :: fetched 3 new logs [21-06-2022 18:32:01]32034: WAF :: fetched 1 new logs [21-06-2022 18:33:02]2260: WAF :: fetched 1 new logs [21-06-2022 18:34:01]4977: WAF :: fetched 2 new logs [21-06-2022 18:35:02]7614: WAF :: fetched 3 new logs [21-06-2022 18:36:02]10244: WAF :: fetched 7 new logs [21-06-2022 18:37:01]12859: WAF :: fetched 8 new logs [21-06-2022 18:38:02]15461: WAF :: fetched 8 new logs [21-06-2022 18:39:01]18129: WAF :: fetched 8 new logs [21-06-2022 18:40:02]20779: WAF :: fetched 7 new logs [21-06-2022 18:41:02]23409: WAF :: fetched 7 new logs [21-06-2022 18:41:02]23409: Checking for user cron vulnerabilities [21-06-2022 18:42:01]26016: WAF :: fetched 3 new logs [21-06-2022 18:43:02]28644: WAF :: fetched 5 new logs [21-06-2022 18:44:01]31316: Checking ditributed CMS bruteforce attacks [21-06-2022 18:44:01]31316: WAF :: fetched 5 new logs [21-06-2022 18:45:01]1516: WAF :: fetched 7 new logs [21-06-2022 18:46:02]4214: WAF :: fetched 6 new logs [21-06-2022 18:47:01]6803: WAF :: fetched 5 new logs [21-06-2022 18:48:02]9426: WAF :: fetched 3 new logs [21-06-2022 18:49:01]12098: WAF :: fetched 2 new logs [21-06-2022 18:51:02]17353: WAF :: fetched 1 new logs [21-06-2022 18:54:01]25147: WAF :: fetched 5 new logs [21-06-2022 18:55:02]27762: WAF :: fetched 7 new logs [21-06-2022 18:56:01]30372: WAF :: fetched 4 new logs [21-06-2022 18:57:01]506: WAF :: fetched 4 new logs [21-06-2022 18:58:02]3173: WAF :: fetched 3 new logs [21-06-2022 18:59:01]5901: WAF :: fetched 2 new logs [21-06-2022 19:03:01]16573: WAF :: fetched 5 new logs [21-06-2022 19:04:02]19359: WAF :: fetched 7 new logs [21-06-2022 19:05:01]22009: WAF :: fetched 3 new logs [21-06-2022 19:06:01]24640: WAF :: fetched 7 new logs [21-06-2022 19:07:02]27315: WAF :: fetched 6 new logs [21-06-2022 19:08:02]29918: WAF :: fetched 7 new logs [21-06-2022 19:09:02]32604: WAF :: fetched 8 new logs [21-06-2022 19:10:01]2834: WAF :: fetched 2 new logs [21-06-2022 19:11:02]5681: WAF :: fetched 6 new logs [21-06-2022 19:12:01]8297: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655849521 [21-06-2022 19:12:01]8297: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 19:12:03]8297: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 19:12:04]8297: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-1912/20220621-191201-YrJCMVo8rfbzpqd0yPlJqAAAACY [21-06-2022 19:12:04]8297: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 19:12:04]8297: WAF :: fetched 5 new logs [21-06-2022 19:13:02]10923: WAF :: fetched 6 new logs [21-06-2022 19:14:02]13555: WAF :: fetched 1 new logs [21-06-2022 19:15:01]16177: WAF :: fetched 2 new logs [21-06-2022 19:16:02]18814: WAF :: fetched 7 new logs [21-06-2022 19:18:01]23948: WAF :: fetched 2 new logs [21-06-2022 19:19:02]26701: WAF :: fetched 1 new logs [21-06-2022 19:20:01]29256: WAF :: fetched 5 new logs [21-06-2022 19:21:02]31982: WAF :: fetched 6 new logs [21-06-2022 19:22:02]2188: WAF :: fetched 7 new logs [21-06-2022 19:23:01]4868: WAF :: fetched 13 new logs [21-06-2022 19:24:02]7586: WAF :: fetched 5 new logs [21-06-2022 19:25:01]10168: WAF :: fetched 8 new logs [21-06-2022 19:26:02]12839: WAF :: fetched 4 new logs [21-06-2022 19:27:02]15434: WAF :: fetched 6 new logs [21-06-2022 19:28:01]18057: WAF :: fetched 9 new logs [21-06-2022 19:29:02]20783: WAF :: fetched 2 new logs [21-06-2022 19:30:01]23354: WAF :: fetched 3 new logs [21-06-2022 19:31:01]26084: WAF :: fetched 1 new logs [21-06-2022 19:32:01]28760: WAF :: fetched 2 new logs [21-06-2022 19:33:02]31362: WAF :: fetched 2 new logs [21-06-2022 19:36:02]6945: WAF :: fetched 1 new logs [21-06-2022 19:39:01]14739: WAF :: fetched 3 new logs [21-06-2022 19:40:02]17389: WAF :: fetched 1 new logs [21-06-2022 19:41:02]19976: WAF :: fetched 1 new logs [21-06-2022 19:41:02]19976: Checking for user cron vulnerabilities [21-06-2022 19:43:02]25251: WAF :: fetched 2 new logs [21-06-2022 19:44:01]27968: Checking ditributed CMS bruteforce attacks [21-06-2022 19:44:01]27968: WAF :: fetched 1 new logs [21-06-2022 19:45:01]: Checking for definition updates [21-06-2022 19:45:01]30581: WAF :: fetched 2 new logs [21-06-2022 19:46:02]855: WAF :: fetched 2 new logs [21-06-2022 19:47:01]3513: WAF :: fetched 1 new logs [21-06-2022 19:48:01]6259: WAF :: fetched 1 new logs [21-06-2022 19:49:02]8968: WAF :: fetched 3 new logs [21-06-2022 19:51:02]14308: WAF :: fetched 4 new logs [21-06-2022 19:52:02]16913: WAF :: fetched 13 new logs [21-06-2022 19:53:01]19531: WAF :: fetched 25 new logs [21-06-2022 19:54:02]22329: WAF :: fetched 14 new logs [21-06-2022 19:55:01]24908: WAF :: fetched 6 new logs [21-06-2022 19:56:02]27604: WAF :: fetched 4 new logs [21-06-2022 19:57:02]30196: WAF :: fetched 5 new logs [21-06-2022 19:58:01]333: WAF :: fetched 9 new logs [21-06-2022 19:59:02]3116: WAF :: fetched 3 new logs [21-06-2022 20:00:02]5496: WAF :: fetched 1 new logs [21-06-2022 20:03:02]13796: WAF :: fetched 3 new logs [21-06-2022 20:04:02]16482: WAF :: fetched 2 new logs [21-06-2022 20:05:01]19097: WAF :: fetched 1 new logs [21-06-2022 20:06:02]21784: WAF :: fetched 7 new logs [21-06-2022 20:08:02]26954: WAF :: fetched 5 new logs [21-06-2022 20:09:01]29699: WAF :: fetched 6 new logs [21-06-2022 20:10:02]32378: WAF :: fetched 12 new logs [21-06-2022 20:11:01]2635: WAF :: fetched 6 new logs [21-06-2022 20:12:02]5325: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655853122 [21-06-2022 20:12:02]5325: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 20:12:04]5325: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 20:12:04]5325: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-2012/20220621-201202-YrJQQi1hUYfJ4VNvF-qgSQAAAAc [21-06-2022 20:12:04]5325: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 20:12:05]5325: WAF :: fetched 10 new logs [21-06-2022 20:13:02]7888: WAF :: fetched 8 new logs [21-06-2022 20:14:01]10636: WAF :: fetched 9 new logs [21-06-2022 20:15:02]13269: WAF :: fetched 6 new logs [21-06-2022 20:16:01]15877: WAF :: fetched 10 new logs [21-06-2022 20:17:01]18462: WAF :: fetched 9 new logs [21-06-2022 20:18:02]21144: WAF :: fetched 13 new logs [21-06-2022 20:19:01]23786: WAF :: fetched 5 new logs [21-06-2022 20:20:02]26475: WAF :: fetched 1 new logs [21-06-2022 20:21:02]29160: WAF :: fetched 4 new logs [21-06-2022 20:22:01]31793: WAF :: fetched 2 new logs [21-06-2022 20:23:02]2030: WAF :: fetched 4 new logs [21-06-2022 20:25:02]7413: WAF :: fetched 7 new logs [21-06-2022 20:26:02]10007: WAF :: fetched 5 new logs [21-06-2022 20:27:01]12629: WAF :: fetched 6 new logs [21-06-2022 20:28:02]15241: WAF :: fetched 10 new logs [21-06-2022 20:29:01]17899: WAF :: fetched 6 new logs [21-06-2022 20:30:02]20579: WAF :: fetched 7 new logs [21-06-2022 20:31:02]23217: WAF :: fetched 4 new logs [21-06-2022 20:32:01]25836: WAF :: fetched 6 new logs [21-06-2022 20:33:02]28456: WAF :: fetched 4 new logs [21-06-2022 20:34:01]31130: WAF :: fetched 8 new logs [21-06-2022 20:35:02]1359: WAF :: fetched 3 new logs [21-06-2022 20:36:02]4067: WAF :: fetched 1 new logs [21-06-2022 20:37:01]6719: WAF :: fetched 1 new logs [21-06-2022 20:38:02]9347: WAF :: fetched 1 new logs [21-06-2022 20:39:01]12044: WAF :: fetched 2 new logs [21-06-2022 20:40:01]14644: WAF :: fetched 1 new logs [21-06-2022 20:41:02]17362: Checking for user cron vulnerabilities [21-06-2022 20:42:01]19938: WAF :: fetched 4 new logs [21-06-2022 20:43:02]22544: WAF :: fetched 4 new logs [21-06-2022 20:44:01]25252: Checking ditributed CMS bruteforce attacks [21-06-2022 20:45:01]27858: WAF :: fetched 3 new logs [21-06-2022 20:47:01]683: WAF :: fetched 1 new logs [21-06-2022 20:48:01]3356: WAF :: fetched 2 new logs [21-06-2022 20:49:02]6149: WAF :: fetched 6 new logs [21-06-2022 20:50:02]8807: WAF :: fetched 3 new logs [21-06-2022 20:51:01]11501: WAF :: fetched 2 new logs [21-06-2022 20:54:01]19612: WAF :: fetched 2 new logs [21-06-2022 20:55:02]22331: WAF :: fetched 1 new logs [21-06-2022 20:56:02]25016: WAF :: fetched 5 new logs [21-06-2022 20:57:01]27698: WAF :: fetched 11 new logs [21-06-2022 20:58:02]30410: WAF :: fetched 4 new logs [21-06-2022 20:59:01]695: WAF :: fetched 3 new logs [21-06-2022 21:00:01]3165: WAF :: fetched 5 new logs [21-06-2022 21:01:01]6419: WAF :: fetched 2 new logs [21-06-2022 21:02:02]9116: WAF :: fetched 7 new logs [21-06-2022 21:03:01]11706: WAF :: fetched 5 new logs [21-06-2022 21:04:02]14425: WAF :: fetched 13 new logs [21-06-2022 21:05:01]17015: WAF :: fetched 8 new logs [21-06-2022 21:06:01]19763: WAF :: fetched 42 new logs [21-06-2022 21:07:02]22407: WAF :: fetched 4 new logs [21-06-2022 21:08:01]25067: WAF :: fetched 5 new logs [21-06-2022 21:09:02]27842: WAF :: fetched 5 new logs [21-06-2022 21:10:02]30474: WAF :: fetched 6 new logs [21-06-2022 21:11:01]804: WAF :: fetched 5 new logs [21-06-2022 21:12:02]3545: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655856722 [21-06-2022 21:12:02]3545: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 21:12:04]3545: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 21:12:04]3545: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-2112/20220621-211202-YrJeUvTGeEAw0nrtiixPOQAAAAI [21-06-2022 21:12:04]3545: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 21:12:04]3545: WAF :: fetched 5 new logs [21-06-2022 21:13:01]6212: WAF :: fetched 3 new logs [21-06-2022 21:14:01]8924: WAF :: fetched 2 new logs [21-06-2022 21:15:01]11573: WAF :: fetched 2 new logs [21-06-2022 21:16:02]14264: WAF :: fetched 3 new logs [21-06-2022 21:17:01]16869: WAF :: fetched 8 new logs [21-06-2022 21:18:01]19485: WAF :: fetched 5 new logs [21-06-2022 21:20:01]24792: WAF :: fetched 3 new logs [21-06-2022 21:21:02]27531: WAF :: fetched 18 new logs [21-06-2022 21:22:01]30140: WAF :: fetched 9 new logs [21-06-2022 21:23:02]32758: WAF :: fetched 9 new logs [21-06-2022 21:24:02]3076: WAF :: fetched 9 new logs [21-06-2022 21:25:01]5737: WAF :: fetched 7 new logs [21-06-2022 21:26:02]8408: WAF :: fetched 10 new logs [21-06-2022 21:27:01]10804: WAF :: fetched 7 new logs [21-06-2022 21:28:02]13633: WAF :: fetched 2 new logs [21-06-2022 21:29:01]16307: WAF :: fetched 2 new logs [21-06-2022 21:30:02]18925: WAF :: fetched 3 new logs [21-06-2022 21:31:02]21550: WAF :: fetched 1 new logs [21-06-2022 21:32:02]24179: WAF :: fetched 2 new logs [21-06-2022 21:33:01]26801: WAF :: fetched 3 new logs [21-06-2022 21:34:01]29474: WAF :: fetched 8 new logs [21-06-2022 21:35:01]32139: WAF :: fetched 4 new logs [21-06-2022 21:36:01]2454: WAF :: fetched 5 new logs [21-06-2022 21:37:01]5202: WAF :: fetched 5 new logs [21-06-2022 21:38:01]7776: WAF :: fetched 9 new logs [21-06-2022 21:39:02]10503: WAF :: fetched 7 new logs [21-06-2022 21:40:01]13192: WAF :: fetched 3 new logs [21-06-2022 21:41:02]15944: WAF :: fetched 7 new logs [21-06-2022 21:41:02]15944: Checking for user cron vulnerabilities [21-06-2022 21:42:02]18536: WAF :: fetched 3 new logs [21-06-2022 21:44:02]23867: Checking ditributed CMS bruteforce attacks [21-06-2022 21:46:01]29120: WAF :: fetched 10 new logs [21-06-2022 21:47:02]31751: WAF :: fetched 9 new logs [21-06-2022 21:50:01]7384: WAF :: fetched 1 new logs [21-06-2022 21:52:02]12716: WAF :: fetched 4 new logs [21-06-2022 21:53:01]15276: WAF :: fetched 1 new logs [21-06-2022 21:54:02]17972: WAF :: fetched 2 new logs [21-06-2022 21:55:02]20606: WAF :: fetched 5 new logs [21-06-2022 21:56:01]23274: WAF :: fetched 6 new logs [21-06-2022 21:57:02]25868: WAF :: fetched 6 new logs [21-06-2022 21:58:01]28501: WAF :: fetched 3 new logs [21-06-2022 21:59:02]31252: WAF :: fetched 4 new logs [21-06-2022 22:00:02]1189: WAF :: fetched 8 new logs [21-06-2022 22:01:01]4438: WAF :: fetched 5 new logs [21-06-2022 22:02:02]7114: WAF :: fetched 5 new logs [21-06-2022 22:03:01]9557: WAF :: fetched 1 new logs [21-06-2022 22:04:02]12382: WAF :: fetched 2 new logs [21-06-2022 22:05:01]14981: WAF :: fetched 1 new logs [21-06-2022 22:06:02]17773: WAF :: fetched 5 new logs [21-06-2022 22:07:02]20389: WAF :: fetched 8 new logs [21-06-2022 22:07:08]20369: Performing Domain reputation checks [21-06-2022 22:08:01]23001: WAF :: fetched 12 new logs [21-06-2022 22:09:02]25764: WAF :: fetched 9 new logs [21-06-2022 22:10:02]28438: WAF :: fetched 18 new logs [21-06-2022 22:11:01]31069: WAF :: fetched 10 new logs [21-06-2022 22:12:02]1419: httpd.conf changed. Refreshing watchlist. [21-06-2022 22:12:02]1422: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655860322 [21-06-2022 22:12:02]1422: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 22:12:04]1422: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 22:12:04]1422: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-2212/20220621-221202-YrJsYpjV9mBEmtKcn80bwgAAAAw [21-06-2022 22:12:04]1422: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 22:12:04]1422: WAF :: fetched 26 new logs [21-06-2022 22:13:01]4148: WAF :: fetched 12 new logs [21-06-2022 22:14:01]6924: WAF :: fetched 8 new logs [21-06-2022 22:15:02]9787: WAF :: fetched 9 new logs [21-06-2022 22:16:01]12485: httpd.conf changed. Refreshing watchlist. [21-06-2022 22:16:01]12487: WAF :: fetched 10 new logs [21-06-2022 22:17:01]15086: WAF :: fetched 10 new logs [21-06-2022 22:18:02]17726: WAF :: fetched 15 new logs [21-06-2022 22:19:01]20149: WAF :: fetched 10 new logs [21-06-2022 22:20:02]23025: WAF :: fetched 14 new logs [21-06-2022 22:21:01]25687: WAF :: fetched 14 new logs [21-06-2022 22:22:02]28325: WAF :: fetched 18 new logs [21-06-2022 22:23:02]30970: WAF :: fetched 17 new logs [21-06-2022 22:24:01]1139: WAF :: fetched 11 new logs [21-06-2022 22:25:02]3941: WAF :: fetched 5 new logs [21-06-2022 22:26:01]6587: WAF :: fetched 34 new logs [21-06-2022 22:27:02]9204: WAF :: fetched 5 new logs [21-06-2022 22:28:01]11816: WAF :: fetched 3 new logs [21-06-2022 22:29:01]14396: WAF :: fetched 1 new logs [21-06-2022 22:30:02]17131: WAF :: fetched 1 new logs [21-06-2022 22:36:02]638: WAF :: fetched 1 new logs [21-06-2022 22:37:01]3369: WAF :: fetched 3 new logs [21-06-2022 22:39:01]8674: WAF :: fetched 6 new logs [21-06-2022 22:40:02]11401: WAF :: fetched 1 new logs [21-06-2022 22:41:02]14059: WAF :: fetched 6 new logs [21-06-2022 22:41:02]14059: Checking for user cron vulnerabilities [21-06-2022 22:42:01]16683: WAF :: fetched 3 new logs [21-06-2022 22:43:02]19343: WAF :: fetched 3 new logs [21-06-2022 22:44:01]22028: Checking ditributed CMS bruteforce attacks [21-06-2022 22:44:01]22028: WAF :: fetched 5 new logs [21-06-2022 22:45:02]24728: WAF :: fetched 5 new logs [21-06-2022 22:46:01]27379: WAF :: fetched 3 new logs [21-06-2022 22:47:02]30087: WAF :: fetched 7 new logs [21-06-2022 22:48:02]32706: WAF :: fetched 4 new logs [21-06-2022 22:49:01]2947: WAF :: fetched 2 new logs [21-06-2022 22:50:02]5751: WAF :: fetched 3 new logs [21-06-2022 22:51:02]8469: WAF :: fetched 5 new logs [21-06-2022 22:52:01]11121: WAF :: fetched 2 new logs [21-06-2022 22:53:02]13752: WAF :: fetched 3 new logs [21-06-2022 22:54:01]16389: WAF :: fetched 6 new logs [21-06-2022 22:55:02]19107: WAF :: fetched 4 new logs [21-06-2022 22:56:02]21761: WAF :: fetched 2 new logs [21-06-2022 22:57:01]24375: WAF :: fetched 1 new logs [21-06-2022 22:58:02]27045: WAF :: fetched 2 new logs [21-06-2022 22:59:02]29625: WAF :: fetched 2 new logs [21-06-2022 23:00:02]32042: WAF :: fetched 5 new logs [21-06-2022 23:01:01]2783: WAF :: fetched 4 new logs [21-06-2022 23:02:02]5548: WAF :: fetched 10 new logs [21-06-2022 23:03:01]8140: WAF :: fetched 5 new logs [21-06-2022 23:04:02]10834: WAF :: fetched 12 new logs [21-06-2022 23:05:02]13499: WAF :: fetched 25 new logs [21-06-2022 23:06:01]16171: WAF :: fetched 11 new logs [21-06-2022 23:07:02]18794: WAF :: fetched 9 new logs [21-06-2022 23:07:48]18951: Performed RBL check for 23.111.136.34. [21-06-2022 23:08:02]21366: WAF :: fetched 8 new logs [21-06-2022 23:09:01]23991: WAF :: fetched 8 new logs [21-06-2022 23:10:02]26703: WAF :: fetched 8 new logs [21-06-2022 23:11:01]29313: WAF :: fetched 4 new logs [21-06-2022 23:12:02]31962: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655863922 [21-06-2022 23:12:02]31962: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-06-2022 23:12:04]31962: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-06-2022 23:12:04]31962: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220621/20220621-2312/20220621-231202-YrJ6cs9FAFuEx24WkDW33QAAABM [21-06-2022 23:12:04]31962: WAF :: No suitable log file found. Using SQLite.. [21-06-2022 23:12:04]31962: WAF :: fetched 9 new logs [21-06-2022 23:13:02]2160: WAF :: fetched 13 new logs [21-06-2022 23:14:01]4831: WAF :: fetched 18 new logs [21-06-2022 23:15:02]7571: WAF :: fetched 10 new logs [21-06-2022 23:16:01]10213: WAF :: fetched 12 new logs [21-06-2022 23:17:02]12860: WAF :: fetched 9 new logs [21-06-2022 23:18:02]15440: WAF :: fetched 7 new logs [21-06-2022 23:19:01]18023: WAF :: fetched 6 new logs [21-06-2022 23:20:02]20745: WAF :: fetched 4 new logs [21-06-2022 23:21:01]23451: WAF :: fetched 1 new logs [21-06-2022 23:22:01]26038: WAF :: fetched 2 new logs [21-06-2022 23:23:02]28651: WAF :: fetched 3 new logs [21-06-2022 23:24:01]31259: WAF :: fetched 3 new logs [21-06-2022 23:25:02]1609: WAF :: fetched 3 new logs [21-06-2022 23:27:02]7042: WAF :: fetched 2 new logs [21-06-2022 23:28:02]9677: WAF :: fetched 1 new logs [21-06-2022 23:30:02]15104: WAF :: fetched 1 new logs [21-06-2022 23:31:01]17728: WAF :: fetched 97 new logs [21-06-2022 23:32:02]20392: WAF :: fetched 38 new logs [21-06-2022 23:37:01]1270: WAF :: fetched 2 new logs [21-06-2022 23:39:01]6545: WAF :: fetched 3 new logs [21-06-2022 23:40:02]9289: WAF :: fetched 78 new logs [21-06-2022 23:41:02]11945: WAF :: fetched 204 new logs [21-06-2022 23:41:02]11945: Checking for user cron vulnerabilities [21-06-2022 23:42:01]14535: WAF :: fetched 3 new logs [21-06-2022 23:43:01]17138: WAF :: fetched 4 new logs [21-06-2022 23:44:01]19767: Checking ditributed CMS bruteforce attacks [21-06-2022 23:44:02]19767: WAF :: fetched 11 new logs [21-06-2022 23:45:01]22488: WAF :: fetched 11 new logs [21-06-2022 23:46:01]25092: WAF :: fetched 7 new logs [21-06-2022 23:47:02]27726: WAF :: fetched 6 new logs [21-06-2022 23:48:02]30300: WAF :: fetched 12 new logs [21-06-2022 23:49:02]477: WAF :: fetched 16 new logs [21-06-2022 23:50:01]3372: WAF :: fetched 69 new logs [21-06-2022 23:51:02]6090: WAF :: fetched 6 new logs [21-06-2022 23:52:01]8710: WAF :: fetched 5 new logs [21-06-2022 23:53:02]11358: WAF :: fetched 6 new logs [21-06-2022 23:54:01]14155: WAF :: fetched 6 new logs [21-06-2022 23:55:02]17445: WAF :: fetched 23 new logs [21-06-2022 23:55:02]17433: httpd.conf changed. Refreshing watchlist. [21-06-2022 23:56:02]21103: httpd.conf changed. Refreshing watchlist. [21-06-2022 23:56:02]21104: WAF :: fetched 42 new logs [21-06-2022 23:57:01]23960: WAF :: fetched 42 new logs [21-06-2022 23:58:02]26592: WAF :: fetched 4 new logs [22-06-2022 00:00:01]31776: httpd.conf changed. Refreshing watchlist. [22-06-2022 00:01:02]2613: WAF :: fetched 1 new logs [22-06-2022 00:01:02]2610: httpd.conf changed. Refreshing watchlist. [22-06-2022 00:01:04]2613: Sending daily report for June 22, 2022 [22-06-2022 00:02:02]5407: WAF :: fetched 6 new logs [22-06-2022 00:02:02]5406: httpd.conf changed. Refreshing watchlist. [22-06-2022 00:03:01]8026: WAF :: fetched 4 new logs [22-06-2022 00:05:01]13297: WAF :: fetched 2 new logs [22-06-2022 00:05:01]13297: Deleted 0 entries older than 6 MONTH from scanner_logs [22-06-2022 00:05:01]13297: Deleted 0 files from Quarantine [22-06-2022 00:06:02]16073: WAF :: fetched 5 new logs [22-06-2022 00:07:02]18643: WAF :: fetched 1 new logs [22-06-2022 00:08:01]21261: WAF :: fetched 4 new logs [22-06-2022 00:09:02]23857: WAF :: fetched 5 new logs [22-06-2022 00:10:01]26523: WAF :: fetched 7 new logs [22-06-2022 00:11:01]29180: WAF :: fetched 15 new logs [22-06-2022 00:12:02]31816: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655867522 [22-06-2022 00:12:02]31816: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 00:12:04]31816: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 00:12:04]31816: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-0012/20220622-001202-YrKIgiTmFMG9UxeqnP3qAgAAAAU [22-06-2022 00:12:04]31816: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 00:12:04]31816: WAF :: fetched 13 new logs [22-06-2022 00:13:02]2033: WAF :: fetched 11 new logs [22-06-2022 00:14:02]4748: WAF :: fetched 8 new logs [22-06-2022 00:15:02]7439: WAF :: fetched 14 new logs [22-06-2022 00:16:02]10182: WAF :: fetched 12 new logs [22-06-2022 00:17:01]12753: WAF :: fetched 7 new logs [22-06-2022 00:18:01]15340: WAF :: fetched 1 new logs [22-06-2022 00:19:02]17989: WAF :: fetched 4 new logs [22-06-2022 00:20:01]20679: WAF :: fetched 7 new logs [22-06-2022 00:21:01]23325: WAF :: fetched 8 new logs [22-06-2022 00:22:02]25902: WAF :: fetched 5 new logs [22-06-2022 00:23:01]28500: WAF :: fetched 9 new logs [22-06-2022 00:24:02]31117: WAF :: fetched 9 new logs [22-06-2022 00:25:01]1401: WAF :: fetched 2 new logs [22-06-2022 00:26:02]4119: WAF :: fetched 33 new logs [22-06-2022 00:27:02]6735: WAF :: fetched 56 new logs [22-06-2022 00:28:01]9336: WAF :: fetched 4 new logs [22-06-2022 00:29:02]11950: WAF :: fetched 7 new logs [22-06-2022 00:30:01]14640: WAF :: fetched 6 new logs [22-06-2022 00:31:01]17303: WAF :: fetched 7 new logs [22-06-2022 00:32:02]20004: WAF :: fetched 2 new logs [22-06-2022 00:33:01]22610: WAF :: fetched 2 new logs [22-06-2022 00:34:02]25209: WAF :: fetched 5 new logs [22-06-2022 00:35:02]27906: WAF :: fetched 7 new logs [22-06-2022 00:36:01]30575: WAF :: fetched 1 new logs [22-06-2022 00:37:02]784: WAF :: fetched 4 new logs [22-06-2022 00:38:01]3394: WAF :: fetched 3 new logs [22-06-2022 00:39:02]6091: WAF :: fetched 3 new logs [22-06-2022 00:40:02]8778: WAF :: fetched 6 new logs [22-06-2022 00:41:01]11527: WAF :: fetched 12 new logs [22-06-2022 00:41:01]11527: Checking for user cron vulnerabilities [22-06-2022 00:42:02]14179: WAF :: fetched 7 new logs [22-06-2022 00:43:01]16705: WAF :: fetched 11 new logs [22-06-2022 00:44:02]19491: Checking ditributed CMS bruteforce attacks [22-06-2022 00:44:02]19491: WAF :: fetched 15 new logs [22-06-2022 00:45:01]: Checking for software updates [22-06-2022 00:45:01]22236: WAF :: fetched 14 new logs [22-06-2022 00:46:01]24947: WAF :: fetched 14 new logs [22-06-2022 00:47:02]27611: WAF :: fetched 13 new logs [22-06-2022 00:48:01]30267: WAF :: fetched 10 new logs [22-06-2022 00:49:02]457: WAF :: fetched 6 new logs [22-06-2022 00:50:02]3242: WAF :: fetched 6 new logs [22-06-2022 00:51:01]5934: WAF :: fetched 4 new logs [22-06-2022 00:52:02]8535: WAF :: fetched 4 new logs [22-06-2022 00:53:01]11077: WAF :: fetched 2 new logs [22-06-2022 00:54:01]13648: WAF :: fetched 2 new logs [22-06-2022 00:55:02]16358: WAF :: fetched 5 new logs [22-06-2022 00:56:02]19010: WAF :: fetched 4 new logs [22-06-2022 00:57:01]21613: WAF :: fetched 6 new logs [22-06-2022 00:58:01]24216: WAF :: fetched 3 new logs [22-06-2022 00:59:02]26817: WAF :: fetched 5 new logs [22-06-2022 01:00:01]29220: WAF :: fetched 8 new logs [22-06-2022 01:01:01]619: WAF :: fetched 5 new logs [22-06-2022 01:02:02]3562: WAF :: fetched 4 new logs [22-06-2022 01:03:01]6467: WAF :: fetched 5 new logs [22-06-2022 01:04:02]9455: WAF :: fetched 4 new logs [22-06-2022 01:05:02]12491: WAF :: fetched 5 new logs [22-06-2022 01:07:02]18150: WAF :: fetched 2 new logs [22-06-2022 01:08:02]21051: WAF :: fetched 1 new logs [22-06-2022 01:09:01]23681: WAF :: fetched 4 new logs [22-06-2022 01:10:02]26456: WAF :: fetched 7 new logs [22-06-2022 01:11:02]29330: WAF :: fetched 5 new logs [22-06-2022 01:12:01]32240: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655871121 [22-06-2022 01:12:01]32240: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 01:12:03]32240: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 01:12:04]32240: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-0112/20220622-011201-YrKWkVaLiY7iR-V49dOdzgAAAAY [22-06-2022 01:12:04]32240: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 01:12:04]32240: WAF :: fetched 7 new logs [22-06-2022 01:13:02]2516: WAF :: fetched 8 new logs [22-06-2022 01:14:01]5340: WAF :: fetched 14 new logs [22-06-2022 01:15:01]8176: WAF :: fetched 3 new logs [22-06-2022 01:16:02]11121: WAF :: fetched 5 new logs [22-06-2022 01:17:01]13718: WAF :: fetched 2 new logs [22-06-2022 01:20:01]22443: WAF :: fetched 1 new logs [22-06-2022 01:22:02]28017: WAF :: fetched 13 new logs [22-06-2022 01:23:01]30661: WAF :: fetched 202 new logs [22-06-2022 01:24:02]1155: WAF :: fetched 3 new logs [22-06-2022 01:25:01]4075: WAF :: fetched 1 new logs [22-06-2022 01:26:02]6894: WAF :: fetched 6 new logs [22-06-2022 01:27:01]9644: WAF :: fetched 3 new logs [22-06-2022 01:28:01]12282: WAF :: fetched 5 new logs [22-06-2022 01:29:02]15333: WAF :: fetched 6 new logs [22-06-2022 01:30:01]18225: WAF :: fetched 5 new logs [22-06-2022 01:31:01]20945: WAF :: fetched 4 new logs [22-06-2022 01:32:02]23720: WAF :: fetched 6 new logs [22-06-2022 01:33:01]26702: WAF :: fetched 5 new logs [22-06-2022 01:34:02]29527: WAF :: fetched 7 new logs [22-06-2022 01:35:02]32200: WAF :: fetched 4 new logs [22-06-2022 01:36:01]2691: WAF :: fetched 3 new logs [22-06-2022 01:37:02]5382: WAF :: fetched 1 new logs [22-06-2022 01:38:01]8323: WAF :: fetched 1 new logs [22-06-2022 01:40:02]13996: WAF :: fetched 1 new logs [22-06-2022 01:41:01]16803: Checking for user cron vulnerabilities [22-06-2022 01:44:01]25502: Checking ditributed CMS bruteforce attacks [22-06-2022 01:44:02]25502: WAF :: fetched 1 new logs [22-06-2022 01:45:02]: Checking for definition updates [22-06-2022 01:45:02]28160: WAF :: fetched 1 new logs [22-06-2022 01:47:02]1084: WAF :: fetched 2 new logs [22-06-2022 01:48:01]3968: WAF :: fetched 5 new logs [22-06-2022 01:49:02]6821: WAF :: fetched 6 new logs [22-06-2022 01:50:02]9588: WAF :: fetched 10 new logs [22-06-2022 01:51:01]12225: WAF :: fetched 26 new logs [22-06-2022 01:52:02]15099: WAF :: fetched 16 new logs [22-06-2022 01:53:01]17751: WAF :: fetched 28 new logs [22-06-2022 01:54:01]20387: WAF :: fetched 44 new logs [22-06-2022 01:55:02]23099: WAF :: fetched 13 new logs [22-06-2022 01:56:01]25688: WAF :: fetched 5 new logs [22-06-2022 01:57:02]28369: WAF :: fetched 15 new logs [22-06-2022 01:58:02]30936: WAF :: fetched 20 new logs [22-06-2022 01:59:01]1516: WAF :: fetched 20 new logs [22-06-2022 02:00:02]3987: WAF :: fetched 46 new logs [22-06-2022 02:01:02]7121: WAF :: fetched 126 new logs [22-06-2022 02:02:02]9772: WAF :: fetched 26 new logs [22-06-2022 02:03:01]12233: WAF :: fetched 20 new logs [22-06-2022 02:04:02]14969: WAF :: fetched 28 new logs [22-06-2022 02:05:02]17626: WAF :: fetched 27 new logs [22-06-2022 02:06:01]20313: WAF :: fetched 30 new logs [22-06-2022 02:07:02]22916: WAF :: fetched 31 new logs [22-06-2022 02:08:01]25479: WAF :: fetched 9 new logs [22-06-2022 02:09:02]28075: WAF :: fetched 13 new logs [22-06-2022 02:10:02]30754: WAF :: fetched 1 new logs [22-06-2022 02:11:01]977: WAF :: fetched 4 new logs [22-06-2022 02:12:02]3615: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655874722 [22-06-2022 02:12:02]3615: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 02:12:04]3615: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 02:12:04]3615: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-0212/20220622-021202-YrKkosCC_YpRIw9uJoRH1wAAAAE [22-06-2022 02:12:04]3615: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 02:12:04]3615: WAF :: fetched 8 new logs [22-06-2022 02:13:01]6294: WAF :: fetched 3 new logs [22-06-2022 02:14:02]8853: WAF :: fetched 1 new logs [22-06-2022 02:15:01]11529: WAF :: fetched 2 new logs [22-06-2022 02:16:02]14144: WAF :: fetched 1 new logs [22-06-2022 02:17:02]16726: WAF :: fetched 1 new logs [22-06-2022 02:18:01]19316: WAF :: fetched 4 new logs [22-06-2022 02:19:02]21912: WAF :: fetched 3 new logs [22-06-2022 02:20:01]24569: WAF :: fetched 1 new logs [22-06-2022 02:21:02]27255: WAF :: fetched 2 new logs [22-06-2022 02:22:01]29825: WAF :: fetched 6 new logs [22-06-2022 02:23:01]32398: WAF :: fetched 3 new logs [22-06-2022 02:24:02]2660: WAF :: fetched 7 new logs [22-06-2022 02:25:01]5394: WAF :: fetched 6 new logs [22-06-2022 02:26:02]8037: WAF :: fetched 9 new logs [22-06-2022 02:27:01]10582: WAF :: fetched 8 new logs [22-06-2022 02:28:01]13162: WAF :: fetched 11 new logs [22-06-2022 02:29:02]15769: WAF :: fetched 11 new logs [22-06-2022 02:30:01]18336: WAF :: fetched 10 new logs [22-06-2022 02:31:02]21097: WAF :: fetched 9 new logs [22-06-2022 02:32:01]23712: WAF :: fetched 6 new logs [22-06-2022 02:33:02]26329: WAF :: fetched 9 new logs [22-06-2022 02:34:01]28890: WAF :: fetched 17 new logs [22-06-2022 02:35:01]31584: WAF :: fetched 35 new logs [22-06-2022 02:36:02]1802: WAF :: fetched 1 new logs [22-06-2022 02:37:01]4463: WAF :: fetched 1 new logs [22-06-2022 02:41:01]14991: Checking for user cron vulnerabilities [22-06-2022 02:42:01]18319: WAF :: fetched 5 new logs [22-06-2022 02:44:01]24079: Checking ditributed CMS bruteforce attacks [22-06-2022 02:48:01]2397: WAF :: fetched 1 new logs [22-06-2022 02:49:01]5323: WAF :: fetched 1 new logs [22-06-2022 02:50:01]8227: WAF :: fetched 2 new logs [22-06-2022 02:51:02]11071: WAF :: fetched 1 new logs [22-06-2022 02:52:01]14065: WAF :: fetched 2 new logs [22-06-2022 02:53:02]17068: Updated license status via CDN [22-06-2022 02:55:01]22540: WAF :: fetched 2 new logs [22-06-2022 02:56:01]25460: WAF :: fetched 1 new logs [22-06-2022 02:57:02]28090: WAF :: fetched 1 new logs [22-06-2022 02:58:01]30809: WAF :: fetched 1 new logs [22-06-2022 02:59:02]1382: WAF :: fetched 1 new logs [22-06-2022 03:00:02]3931: WAF :: fetched 2 new logs [22-06-2022 03:00:03]3931: Found and updated 32 CMS installations [22-06-2022 03:01:01]7247: WAF :: fetched 1 new logs [22-06-2022 03:02:21]3931: Sending CMS version vulnerability report emails to cpanel users [22-06-2022 03:02:24]3931: Checking wordpress installations for suspicious directories [22-06-2022 03:03:01]13007: WAF :: fetched 1 new logs [22-06-2022 03:04:22]13051: Sending CMS version vulnerability report emails to cpanel users [22-06-2022 03:04:25]13051: Checking wordpress installations for suspicious directories [22-06-2022 03:05:02]18745: WAF :: fetched 4 new logs [22-06-2022 03:06:01]21434: WAF :: fetched 1 new logs [22-06-2022 03:07:02]24026: WAF :: fetched 6 new logs [22-06-2022 03:08:01]26589: WAF :: fetched 7 new logs [22-06-2022 03:09:01]29174: WAF :: fetched 10 new logs [22-06-2022 03:10:02]31809: WAF :: fetched 3 new logs [22-06-2022 03:11:01]2137: WAF :: fetched 8 new logs [22-06-2022 03:12:01]4805: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655878321 [22-06-2022 03:12:01]4805: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 03:12:03]4805: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 03:12:03]4805: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-0312/20220622-031201-YrKysabfpG8wNPx7v35sGwAAAAA [22-06-2022 03:12:03]4805: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 03:12:04]4805: WAF :: fetched 5 new logs [22-06-2022 03:13:01]7416: WAF :: fetched 10 new logs [22-06-2022 03:14:02]10001: WAF :: fetched 5 new logs [22-06-2022 03:16:01]15309: WAF :: fetched 7 new logs [22-06-2022 03:17:02]16531: WAF :: fetched 1 new logs [22-06-2022 03:18:01]11464: WAF :: fetched 2 new logs [22-06-2022 03:20:02]27294: WAF :: fetched 8 new logs [22-06-2022 03:23:01]3156: WAF :: fetched 2 new logs [22-06-2022 03:24:01]6077: WAF :: fetched 1 new logs [22-06-2022 03:25:02]8767: WAF :: fetched 4 new logs [22-06-2022 03:26:01]11571: WAF :: fetched 7 new logs [22-06-2022 03:27:02]14252: WAF :: fetched 13 new logs [22-06-2022 03:28:02]16933: WAF :: fetched 4 new logs [22-06-2022 03:29:01]19698: WAF :: fetched 1 new logs [22-06-2022 03:30:02]22549: WAF :: fetched 1 new logs [22-06-2022 03:32:01]28210: WAF :: fetched 2 new logs [22-06-2022 03:33:02]30855: WAF :: fetched 3 new logs [22-06-2022 03:35:02]3598: WAF :: fetched 2 new logs [22-06-2022 03:37:02]8999: WAF :: fetched 3 new logs [22-06-2022 03:38:01]11586: WAF :: fetched 3 new logs [22-06-2022 03:39:02]14193: WAF :: fetched 1 new logs [22-06-2022 03:40:02]16746: WAF :: fetched 1 new logs [22-06-2022 03:41:02]19435: WAF :: fetched 6 new logs [22-06-2022 03:41:02]19435: Checking for user cron vulnerabilities [22-06-2022 03:43:01]24591: WAF :: fetched 1 new logs [22-06-2022 03:44:01]27188: Checking ditributed CMS bruteforce attacks [22-06-2022 03:44:02]27188: WAF :: fetched 2 new logs [22-06-2022 03:49:02]7851: WAF :: fetched 2 new logs [22-06-2022 03:50:01]10433: WAF :: fetched 29 new logs [22-06-2022 03:51:02]13150: WAF :: fetched 31 new logs [22-06-2022 03:52:01]15678: WAF :: fetched 22 new logs [22-06-2022 03:53:01]18251: WAF :: fetched 4 new logs [22-06-2022 03:54:02]20847: WAF :: fetched 2 new logs [22-06-2022 03:55:01]23411: WAF :: fetched 5 new logs [22-06-2022 03:56:02]26099: WAF :: fetched 9 new logs [22-06-2022 03:57:01]28527: WAF :: fetched 11 new logs [22-06-2022 03:58:02]31226: WAF :: fetched 6 new logs [22-06-2022 03:59:01]1361: WAF :: fetched 101 new logs [22-06-2022 04:00:01]3706: WAF :: fetched 9 new logs [22-06-2022 04:01:02]6953: WAF :: fetched 6 new logs [22-06-2022 04:02:01]9545: WAF :: fetched 7 new logs [22-06-2022 04:03:02]12144: WAF :: fetched 4 new logs [22-06-2022 04:04:01]14690: WAF :: fetched 2 new logs [22-06-2022 04:05:02]17307: WAF :: fetched 2 new logs [22-06-2022 04:09:01]27699: WAF :: fetched 1 new logs [22-06-2022 04:10:02]30314: WAF :: fetched 4 new logs [22-06-2022 04:11:02]576: WAF :: fetched 5 new logs [22-06-2022 04:12:01]3208: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655881921 [22-06-2022 04:12:01]3208: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 04:12:03]3208: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 04:12:04]3208: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-0412/20220622-041201-YrLAwcDmFaTKLoa8EM0yqgAAAAU [22-06-2022 04:12:04]3208: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 04:12:04]3208: WAF :: fetched 12 new logs [22-06-2022 04:13:02]5858: WAF :: fetched 3 new logs [22-06-2022 04:14:02]8440: WAF :: fetched 7 new logs [22-06-2022 04:15:01]11035: WAF :: fetched 5 new logs [22-06-2022 04:16:02]13764: WAF :: fetched 8 new logs [22-06-2022 04:17:01]16324: WAF :: fetched 6 new logs [22-06-2022 04:18:02]18944: WAF :: fetched 2 new logs [22-06-2022 04:19:02]21514: WAF :: fetched 1 new logs [22-06-2022 04:20:01]24096: WAF :: fetched 1 new logs [22-06-2022 04:21:02]26839: WAF :: fetched 7 new logs [22-06-2022 04:22:01]29389: WAF :: fetched 6 new logs [22-06-2022 04:23:02]31996: WAF :: fetched 11 new logs [22-06-2022 04:24:02]2159: WAF :: fetched 6 new logs [22-06-2022 04:25:01]4820: WAF :: fetched 5 new logs [22-06-2022 04:26:02]7551: WAF :: fetched 4 new logs [22-06-2022 04:27:01]10097: WAF :: fetched 5 new logs [22-06-2022 04:28:02]12661: WAF :: fetched 6 new logs [22-06-2022 04:29:01]15242: WAF :: fetched 3 new logs [22-06-2022 04:30:02]17835: WAF :: fetched 1 new logs [22-06-2022 04:33:02]25744: WAF :: fetched 1 new logs [22-06-2022 04:34:02]28297: WAF :: fetched 98 new logs [22-06-2022 04:35:01]30872: WAF :: fetched 23 new logs [22-06-2022 04:36:02]1203: WAF :: fetched 123 new logs [22-06-2022 04:37:01]3803: WAF :: fetched 144 new logs [22-06-2022 04:40:02]11591: WAF :: fetched 2 new logs [22-06-2022 04:41:01]14288: Checking for user cron vulnerabilities [22-06-2022 04:44:01]22029: Checking ditributed CMS bruteforce attacks [22-06-2022 04:46:02]27318: WAF :: fetched 1 new logs [22-06-2022 04:50:02]5325: WAF :: fetched 1 new logs [22-06-2022 04:51:02]8038: WAF :: fetched 1 new logs [22-06-2022 04:52:01]10630: WAF :: fetched 1 new logs [22-06-2022 04:53:02]13210: WAF :: fetched 1 new logs [22-06-2022 04:54:01]15750: WAF :: fetched 2 new logs [22-06-2022 05:01:42]1870: Starting daily scan on files updated in last 24 hrs [22-06-2022 05:02:01]4573: WAF :: fetched 1 new logs [22-06-2022 05:03:02]7170: WAF :: fetched 5 new logs [22-06-2022 05:04:02]9704: WAF :: fetched 6 new logs [22-06-2022 05:05:01]12273: WAF :: fetched 3 new logs [22-06-2022 05:07:01]17502: WAF :: fetched 6 new logs [22-06-2022 05:08:02]20093: WAF :: fetched 16 new logs [22-06-2022 05:09:02]22641: WAF :: fetched 4 new logs [22-06-2022 05:10:01]25189: WAF :: fetched 5 new logs [22-06-2022 05:11:02]27952: WAF :: fetched 2 new logs [22-06-2022 05:12:01]30353: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655885521 [22-06-2022 05:12:01]30353: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 05:12:03]30353: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 05:12:03]30353: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-0512/20220622-051201-YrLO0d0-J_vP5GEdSp5dKwAAAAA [22-06-2022 05:12:03]30353: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 05:12:04]30353: WAF :: fetched 5 new logs [22-06-2022 05:13:02]646: WAF :: fetched 5 new logs [22-06-2022 05:14:01]3808: WAF :: fetched 3 new logs [22-06-2022 05:15:02]6837: WAF :: fetched 9 new logs [22-06-2022 05:16:02]9514: WAF :: fetched 14 new logs [22-06-2022 05:17:01]12084: WAF :: fetched 16 new logs [22-06-2022 05:18:02]14681: WAF :: fetched 9 new logs [22-06-2022 05:19:01]17227: WAF :: fetched 4 new logs [22-06-2022 05:20:02]19840: WAF :: fetched 3 new logs [22-06-2022 05:21:02]22495: WAF :: fetched 8 new logs [22-06-2022 05:22:02]25051: WAF :: fetched 5 new logs [22-06-2022 05:25:02]370: WAF :: fetched 1 new logs [22-06-2022 05:27:02]5815: WAF :: fetched 1 new logs [22-06-2022 05:28:02]8341: WAF :: fetched 28 new logs [22-06-2022 05:32:01]18779: WAF :: fetched 4 new logs [22-06-2022 05:33:02]21368: WAF :: fetched 2 new logs [22-06-2022 05:34:01]23928: WAF :: fetched 8 new logs [22-06-2022 05:35:02]26508: WAF :: fetched 4 new logs [22-06-2022 05:36:01]29179: WAF :: fetched 5 new logs [22-06-2022 05:37:01]31745: WAF :: fetched 6 new logs [22-06-2022 05:38:02]1920: WAF :: fetched 4 new logs [22-06-2022 05:40:02]7228: WAF :: fetched 1 new logs [22-06-2022 05:41:02]9906: Checking for user cron vulnerabilities [22-06-2022 05:42:01]12478: WAF :: fetched 1 new logs [22-06-2022 05:43:02]15065: WAF :: fetched 1 new logs [22-06-2022 05:44:01]17617: Checking ditributed CMS bruteforce attacks [22-06-2022 05:44:01]17617: WAF :: fetched 1 new logs [22-06-2022 05:45:02]20216: WAF :: fetched 8 new logs [22-06-2022 05:46:02]22897: WAF :: fetched 7 new logs [22-06-2022 05:47:01]25442: WAF :: fetched 10 new logs [22-06-2022 05:48:02]28077: WAF :: fetched 9 new logs [22-06-2022 05:49:01]30605: WAF :: fetched 9 new logs [22-06-2022 05:50:01]751: WAF :: fetched 7 new logs [22-06-2022 05:51:02]3519: WAF :: fetched 7 new logs [22-06-2022 05:52:01]6150: WAF :: fetched 7 new logs [22-06-2022 05:53:02]8728: WAF :: fetched 1 new logs [22-06-2022 05:54:01]10961: WAF :: fetched 2 new logs [22-06-2022 05:55:01]13881: WAF :: fetched 2 new logs [22-06-2022 05:56:01]16579: WAF :: fetched 2 new logs [22-06-2022 05:57:02]19145: WAF :: fetched 1 new logs [22-06-2022 06:00:02]26586: WAF :: fetched 1 new logs [22-06-2022 06:01:01]29771: WAF :: fetched 3 new logs [22-06-2022 06:02:02]32424: WAF :: fetched 2 new logs [22-06-2022 06:07:02]13187: WAF :: fetched 2 new logs [22-06-2022 06:08:01]15770: WAF :: fetched 3 new logs [22-06-2022 06:09:01]18373: WAF :: fetched 3 new logs [22-06-2022 06:11:02]23652: WAF :: fetched 2 new logs [22-06-2022 06:12:01]26266: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655889121 [22-06-2022 06:12:01]26266: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 06:12:03]26266: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 06:12:04]26266: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-0612/20220622-061201-YrLc4S0ljJVqGNO7GKYk8wAAAA0 [22-06-2022 06:12:04]26266: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-06-2022 06:12:04]26266: WAF :: fetched 1 new logs [22-06-2022 06:13:02]28905: WAF :: fetched 3 new logs [22-06-2022 06:14:01]31468: WAF :: fetched 1 new logs [22-06-2022 06:15:01]1668: WAF :: fetched 2 new logs [22-06-2022 06:16:01]4538: WAF :: fetched 4 new logs [22-06-2022 06:17:02]7194: WAF :: fetched 13 new logs [22-06-2022 06:18:01]9725: WAF :: fetched 14 new logs [22-06-2022 06:19:02]12341: WAF :: fetched 1 new logs [22-06-2022 06:20:02]14953: WAF :: fetched 3 new logs [22-06-2022 06:21:01]17687: WAF :: fetched 3 new logs [22-06-2022 06:22:01]20268: WAF :: fetched 7 new logs [22-06-2022 06:23:02]22875: WAF :: fetched 3 new logs [22-06-2022 06:24:01]25427: WAF :: fetched 1 new logs [22-06-2022 06:25:02]28077: WAF :: fetched 5 new logs [22-06-2022 06:26:02]30749: WAF :: fetched 2 new logs [22-06-2022 06:27:01]1051: WAF :: fetched 2 new logs [22-06-2022 06:28:02]3669: WAF :: fetched 4 new logs [22-06-2022 06:29:01]6316: WAF :: fetched 3 new logs [22-06-2022 06:30:02]8917: WAF :: fetched 1 new logs [22-06-2022 06:31:02]11616: WAF :: fetched 4 new logs [22-06-2022 06:32:01]14216: WAF :: fetched 2 new logs [22-06-2022 06:33:02]16861: WAF :: fetched 9 new logs [22-06-2022 06:34:01]19426: WAF :: fetched 11 new logs [22-06-2022 06:35:02]22045: WAF :: fetched 9 new logs [22-06-2022 06:36:02]24744: WAF :: fetched 12 new logs [22-06-2022 06:37:02]27356: WAF :: fetched 8 new logs [22-06-2022 06:38:02]29981: WAF :: fetched 10 new logs [22-06-2022 06:39:01]32625: WAF :: fetched 17 new logs [22-06-2022 06:40:02]2900: WAF :: fetched 12 new logs [22-06-2022 06:41:02]5755: WAF :: fetched 9 new logs [22-06-2022 06:41:02]5755: Checking for user cron vulnerabilities [22-06-2022 06:42:01]8360: WAF :: fetched 7 new logs [22-06-2022 06:43:02]10955: WAF :: fetched 10 new logs [22-06-2022 06:44:01]13517: Checking ditributed CMS bruteforce attacks [22-06-2022 06:44:02]13517: WAF :: fetched 7 new logs [22-06-2022 06:45:01]16155: WAF :: fetched 4 new logs [22-06-2022 06:46:02]18882: WAF :: fetched 1 new logs [22-06-2022 06:48:02]24051: WAF :: fetched 1 new logs [22-06-2022 06:53:02]4912: WAF :: fetched 1 new logs [22-06-2022 06:54:02]7539: WAF :: fetched 2 new logs [22-06-2022 06:55:01]10130: WAF :: fetched 3 new logs [22-06-2022 06:58:01]18031: WAF :: fetched 1 new logs [22-06-2022 06:59:02]20634: WAF :: fetched 1 new logs [22-06-2022 07:04:01]1549: WAF :: fetched 1 new logs [22-06-2022 07:05:02]4289: WAF :: fetched 1 new logs [22-06-2022 07:06:01]7068: WAF :: fetched 1 new logs [22-06-2022 07:07:01]9690: WAF :: fetched 1 new logs [22-06-2022 07:08:01]12309: WAF :: fetched 5 new logs [22-06-2022 07:09:02]14927: WAF :: fetched 1 new logs [22-06-2022 07:10:01]17546: WAF :: fetched 4 new logs [22-06-2022 07:11:01]20318: WAF :: fetched 4 new logs [22-06-2022 07:12:02]22968: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655892722 [22-06-2022 07:12:02]22968: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 07:12:04]22968: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 07:12:04]22968: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-0712/20220622-071202-YrLq8rVtOsHMfZ6KCK2JhQAAAAY [22-06-2022 07:12:04]22968: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 07:12:05]22968: WAF :: fetched 169 new logs [22-06-2022 07:13:01]25605: WAF :: fetched 3 new logs [22-06-2022 07:14:02]28261: WAF :: fetched 1 new logs [22-06-2022 07:16:02]1202: WAF :: fetched 3 new logs [22-06-2022 07:18:02]6536: WAF :: fetched 2 new logs [22-06-2022 07:19:02]9136: WAF :: fetched 2 new logs [22-06-2022 07:20:01]11778: WAF :: fetched 1 new logs [22-06-2022 07:21:02]14543: WAF :: fetched 2 new logs [22-06-2022 07:22:01]17104: WAF :: fetched 24 new logs [22-06-2022 07:23:01]19721: WAF :: fetched 1 new logs [22-06-2022 07:24:01]22300: WAF :: fetched 3 new logs [22-06-2022 07:25:01]24931: WAF :: fetched 7 new logs [22-06-2022 07:26:02]27662: WAF :: fetched 10 new logs [22-06-2022 07:27:02]30255: WAF :: fetched 11 new logs [22-06-2022 07:28:01]376: WAF :: fetched 5 new logs [22-06-2022 07:29:02]3082: WAF :: fetched 10 new logs [22-06-2022 07:30:02]5837: WAF :: fetched 4 new logs [22-06-2022 07:32:02]11282: WAF :: fetched 1 new logs [22-06-2022 07:36:01]21879: WAF :: fetched 2 new logs [22-06-2022 07:38:01]27152: WAF :: fetched 1 new logs [22-06-2022 07:39:02]29841: WAF :: fetched 4 new logs [22-06-2022 07:40:02]32471: WAF :: fetched 7 new logs [22-06-2022 07:41:01]2810: WAF :: fetched 11 new logs [22-06-2022 07:41:01]2810: Checking for user cron vulnerabilities [22-06-2022 07:42:02]5697: WAF :: fetched 5 new logs [22-06-2022 07:43:02]8303: WAF :: fetched 7 new logs [22-06-2022 07:44:01]10896: Checking ditributed CMS bruteforce attacks [22-06-2022 07:44:02]10896: WAF :: fetched 6 new logs [22-06-2022 07:45:01]: Checking for definition updates [22-06-2022 07:45:01]13490: WAF :: fetched 8 new logs [22-06-2022 07:47:01]18829: WAF :: fetched 1 new logs [22-06-2022 07:48:02]21472: WAF :: fetched 1 new logs [22-06-2022 07:51:02]29407: WAF :: fetched 3 new logs [22-06-2022 07:52:01]32075: WAF :: fetched 1 new logs [22-06-2022 07:53:02]2299: WAF :: fetched 1 new logs [22-06-2022 07:55:02]7676: WAF :: fetched 2 new logs [22-06-2022 07:59:01]18324: WAF :: fetched 1 new logs [22-06-2022 08:01:02]23897: WAF :: fetched 4 new logs [22-06-2022 08:02:01]26678: WAF :: fetched 3 new logs [22-06-2022 08:03:02]29352: WAF :: fetched 3 new logs [22-06-2022 08:04:01]31994: WAF :: fetched 2 new logs [22-06-2022 08:05:02]2298: WAF :: fetched 1 new logs [22-06-2022 08:06:02]5079: WAF :: fetched 2 new logs [22-06-2022 08:07:02]7832: WAF :: fetched 1 new logs [22-06-2022 08:08:01]10461: WAF :: fetched 3 new logs [22-06-2022 08:09:01]13138: WAF :: fetched 2 new logs [22-06-2022 08:10:01]15782: WAF :: fetched 1 new logs [22-06-2022 08:12:01]21147: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655896321 [22-06-2022 08:12:01]21147: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 08:12:03]21147: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 08:12:03]21147: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-0812/20220622-081201-YrL5AbDXihzOpNdZJ1t6vAAAAB0 [22-06-2022 08:12:03]21147: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-06-2022 08:12:04]21147: WAF :: fetched 3 new logs [22-06-2022 08:15:02]29056: WAF :: fetched 2 new logs [22-06-2022 08:16:01]31723: WAF :: fetched 1 new logs [22-06-2022 08:17:02]2086: WAF :: fetched 2 new logs [22-06-2022 08:18:01]4776: WAF :: fetched 3 new logs [22-06-2022 08:19:02]7451: WAF :: fetched 1 new logs [22-06-2022 08:20:02]10075: WAF :: fetched 2 new logs [22-06-2022 08:21:01]12764: WAF :: fetched 5 new logs [22-06-2022 08:22:02]15481: WAF :: fetched 8 new logs [22-06-2022 08:23:01]18065: WAF :: fetched 9 new logs [22-06-2022 08:24:02]20713: WAF :: fetched 10 new logs [22-06-2022 08:25:01]23294: WAF :: fetched 7 new logs [22-06-2022 08:26:01]25964: WAF :: fetched 10 new logs [22-06-2022 08:27:02]28702: WAF :: fetched 6 new logs [22-06-2022 08:28:01]31360: WAF :: fetched 5 new logs [22-06-2022 08:29:02]1614: WAF :: fetched 3 new logs [22-06-2022 08:30:01]4294: WAF :: fetched 4 new logs [22-06-2022 08:31:01]7055: WAF :: fetched 10 new logs [22-06-2022 08:32:02]9822: WAF :: fetched 3 new logs [22-06-2022 08:33:01]12420: WAF :: fetched 3 new logs [22-06-2022 08:34:02]15064: WAF :: fetched 2 new logs [22-06-2022 08:35:01]17692: WAF :: fetched 6 new logs [22-06-2022 08:37:01]23055: WAF :: fetched 3 new logs [22-06-2022 08:38:02]25727: WAF :: fetched 2 new logs [22-06-2022 08:39:02]28313: WAF :: fetched 1 new logs [22-06-2022 08:40:01]30979: WAF :: fetched 7 new logs [22-06-2022 08:41:02]1298: WAF :: fetched 10 new logs [22-06-2022 08:41:02]1298: Checking for user cron vulnerabilities [22-06-2022 08:42:01]4090: WAF :: fetched 10 new logs [22-06-2022 08:43:02]6829: WAF :: fetched 7 new logs [22-06-2022 08:44:01]9430: Checking ditributed CMS bruteforce attacks [22-06-2022 08:44:02]9430: WAF :: fetched 13 new logs [22-06-2022 08:45:01]12078: WAF :: fetched 11 new logs [22-06-2022 08:46:02]14852: WAF :: fetched 1 new logs [22-06-2022 08:47:01]17581: WAF :: fetched 6 new logs [22-06-2022 08:48:01]20188: WAF :: fetched 2 new logs [22-06-2022 08:49:02]22850: WAF :: fetched 4 new logs [22-06-2022 08:50:01]25491: WAF :: fetched 1 new logs [22-06-2022 08:51:02]28232: WAF :: fetched 1 new logs [22-06-2022 08:52:01]30938: WAF :: fetched 1 new logs [22-06-2022 08:53:01]1168: WAF :: fetched 5 new logs [22-06-2022 08:54:02]3893: WAF :: fetched 3 new logs [22-06-2022 08:55:01]6589: WAF :: fetched 3 new logs [22-06-2022 08:57:02]12075: WAF :: fetched 4 new logs [22-06-2022 08:58:01]14751: WAF :: fetched 3 new logs [22-06-2022 08:59:01]17449: WAF :: fetched 5 new logs [22-06-2022 09:00:02]19821: WAF :: fetched 13 new logs [22-06-2022 09:01:01]22956: WAF :: fetched 7 new logs [22-06-2022 09:02:02]25770: WAF :: fetched 9 new logs [22-06-2022 09:03:01]28417: WAF :: fetched 15 new logs [22-06-2022 09:04:01]31109: WAF :: fetched 12 new logs [22-06-2022 09:05:02]1456: WAF :: fetched 2 new logs [22-06-2022 09:06:01]4207: WAF :: fetched 1 new logs [22-06-2022 09:08:01]9642: WAF :: fetched 1 new logs [22-06-2022 09:09:01]12321: WAF :: fetched 2 new logs [22-06-2022 09:10:02]15044: WAF :: fetched 5 new logs [22-06-2022 09:11:01]17798: WAF :: fetched 2 new logs [22-06-2022 09:12:01]20568: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655899921 [22-06-2022 09:12:01]20568: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 09:12:03]20568: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 09:12:03]20568: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-0912/20220622-091201-YrMHEbJxO8N_oJBFlj3dnwAAABY [22-06-2022 09:12:03]20568: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 09:12:04]20568: WAF :: fetched 195 new logs [22-06-2022 09:15:02]28503: WAF :: fetched 2 new logs [22-06-2022 09:16:02]31180: WAF :: fetched 1 new logs [22-06-2022 09:19:01]6906: WAF :: fetched 2 new logs [22-06-2022 09:22:02]15088: WAF :: fetched 1 new logs [22-06-2022 09:23:01]17751: WAF :: fetched 2 new logs [22-06-2022 09:26:01]25879: WAF :: fetched 2 new logs [22-06-2022 09:31:01]7384: WAF :: fetched 4 new logs [22-06-2022 09:33:01]13115: WAF :: fetched 3 new logs [22-06-2022 09:34:02]15835: WAF :: fetched 3 new logs [22-06-2022 09:37:01]24043: WAF :: fetched 3 new logs [22-06-2022 09:38:01]26713: WAF :: fetched 5 new logs [22-06-2022 09:39:02]29391: WAF :: fetched 3 new logs [22-06-2022 09:40:01]32064: WAF :: fetched 2 new logs [22-06-2022 09:41:02]2552: WAF :: fetched 1 new logs [22-06-2022 09:41:02]2552: Checking for user cron vulnerabilities [22-06-2022 09:43:01]8502: WAF :: fetched 2 new logs [22-06-2022 09:44:02]11370: Checking ditributed CMS bruteforce attacks [22-06-2022 09:44:02]11370: WAF :: fetched 3 new logs [22-06-2022 09:45:01]14198: WAF :: fetched 2 new logs [22-06-2022 09:50:01]27967: WAF :: fetched 2 new logs [22-06-2022 09:51:02]30741: WAF :: fetched 3 new logs [22-06-2022 09:52:02]1067: WAF :: fetched 1 new logs [22-06-2022 09:53:01]3811: WAF :: fetched 1 new logs [22-06-2022 09:54:02]6577: WAF :: fetched 2 new logs [22-06-2022 09:56:01]12122: WAF :: fetched 8 new logs [22-06-2022 09:57:02]14949: WAF :: fetched 10 new logs [22-06-2022 09:58:01]17613: WAF :: fetched 8 new logs [22-06-2022 09:59:01]20306: WAF :: fetched 12 new logs [22-06-2022 10:00:02]22715: WAF :: fetched 13 new logs [22-06-2022 10:01:01]25998: WAF :: fetched 12 new logs [22-06-2022 10:02:01]28838: WAF :: fetched 3 new logs [22-06-2022 10:03:01]31525: WAF :: fetched 1 new logs [22-06-2022 10:05:01]4578: WAF :: fetched 1 new logs [22-06-2022 10:06:02]7400: WAF :: fetched 1 new logs [22-06-2022 10:09:02]15547: WAF :: fetched 3 new logs [22-06-2022 10:10:02]18273: WAF :: fetched 9 new logs [22-06-2022 10:11:01]21068: WAF :: fetched 11 new logs [22-06-2022 10:12:02]23895: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655903522 [22-06-2022 10:12:02]23895: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 10:12:04]23895: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 10:12:04]23895: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-1012/20220622-101202-YrMVIrWvfPFrVe_EgD26fgAAAA4 [22-06-2022 10:12:04]23895: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 10:12:04]23895: WAF :: fetched 8 new logs [22-06-2022 10:13:01]26567: WAF :: fetched 9 new logs [22-06-2022 10:14:01]29293: WAF :: fetched 8 new logs [22-06-2022 10:15:01]32044: WAF :: fetched 5 new logs [22-06-2022 10:16:02]2416: WAF :: fetched 3 new logs [22-06-2022 10:17:01]5307: WAF :: fetched 3 new logs [22-06-2022 10:19:02]10698: WAF :: fetched 1 new logs [22-06-2022 10:20:01]13404: WAF :: fetched 1 new logs [22-06-2022 10:22:01]18867: WAF :: fetched 1 new logs [22-06-2022 10:23:02]21545: WAF :: fetched 2 new logs [22-06-2022 10:28:02]2620: WAF :: fetched 2 new logs [22-06-2022 10:29:01]5383: WAF :: fetched 2 new logs [22-06-2022 10:31:02]10772: WAF :: fetched 1 new logs [22-06-2022 10:32:01]13532: WAF :: fetched 4 new logs [22-06-2022 10:33:02]16241: WAF :: fetched 2 new logs [22-06-2022 10:34:01]18888: WAF :: fetched 3 new logs [22-06-2022 10:35:01]21586: WAF :: fetched 4 new logs [22-06-2022 10:36:02]24363: WAF :: fetched 1 new logs [22-06-2022 10:37:01]27080: WAF :: fetched 1 new logs [22-06-2022 10:39:01]32290: WAF :: fetched 1 new logs [22-06-2022 10:40:02]2746: WAF :: fetched 12 new logs [22-06-2022 10:41:01]5561: WAF :: fetched 3 new logs [22-06-2022 10:41:01]5561: Checking for user cron vulnerabilities [22-06-2022 10:42:01]8279: WAF :: fetched 1 new logs [22-06-2022 10:43:02]10979: WAF :: fetched 4 new logs [22-06-2022 10:44:01]13671: Checking ditributed CMS bruteforce attacks [22-06-2022 10:44:01]13671: WAF :: fetched 1 new logs [22-06-2022 10:46:01]19211: WAF :: fetched 3 new logs [22-06-2022 10:47:01]21945: WAF :: fetched 3 new logs [22-06-2022 10:48:02]24595: WAF :: fetched 1 new logs [22-06-2022 10:51:01]32453: WAF :: fetched 3 new logs [22-06-2022 10:52:02]3062: WAF :: fetched 1 new logs [22-06-2022 10:53:01]5815: WAF :: fetched 4 new logs [22-06-2022 10:54:02]8570: WAF :: fetched 7 new logs [22-06-2022 10:55:02]11194: WAF :: fetched 3 new logs [22-06-2022 10:56:01]13941: WAF :: fetched 2 new logs [22-06-2022 10:58:01]19365: WAF :: fetched 7 new logs [22-06-2022 10:59:01]22088: WAF :: fetched 3 new logs [22-06-2022 11:00:02]24534: WAF :: fetched 2 new logs [22-06-2022 11:01:01]27722: WAF :: fetched 6 new logs [22-06-2022 11:02:01]30479: WAF :: fetched 6 new logs [22-06-2022 11:03:02]793: WAF :: fetched 12 new logs [22-06-2022 11:04:01]3536: WAF :: fetched 8 new logs [22-06-2022 11:05:01]6322: WAF :: fetched 19 new logs [22-06-2022 11:06:02]9090: WAF :: fetched 16 new logs [22-06-2022 11:07:02]11884: WAF :: fetched 8 new logs [22-06-2022 11:08:02]14543: WAF :: fetched 2 new logs [22-06-2022 11:08:06]12040: Performed RBL check for 23.111.136.34. [22-06-2022 11:09:01]17189: WAF :: fetched 2 new logs [22-06-2022 11:10:02]19885: WAF :: fetched 84 new logs [22-06-2022 11:11:02]22562: WAF :: fetched 70 new logs [22-06-2022 11:12:02]25327: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655907122 [22-06-2022 11:12:02]25327: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 11:12:04]25327: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 11:12:04]25327: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-1112/20220622-111202-YrMjMmLqJsYlgOTZ7KxYzgAAACM [22-06-2022 11:12:04]25327: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 11:12:04]25327: WAF :: fetched 1 new logs [22-06-2022 11:14:02]30647: WAF :: fetched 1 new logs [22-06-2022 11:15:01]855: WAF :: fetched 2 new logs [22-06-2022 11:16:02]3644: WAF :: fetched 3 new logs [22-06-2022 11:17:01]6428: WAF :: fetched 10 new logs [22-06-2022 11:18:02]9158: WAF :: fetched 15 new logs [22-06-2022 11:19:01]11747: WAF :: fetched 14 new logs [22-06-2022 11:20:02]14496: WAF :: fetched 12 new logs [22-06-2022 11:21:02]17218: WAF :: fetched 3 new logs [22-06-2022 11:22:01]20005: WAF :: fetched 3 new logs [22-06-2022 11:23:01]22679: WAF :: fetched 4 new logs [22-06-2022 11:24:02]25367: WAF :: fetched 1 new logs [22-06-2022 11:25:01]28026: WAF :: fetched 2 new logs [22-06-2022 11:26:02]30769: WAF :: fetched 1 new logs [22-06-2022 11:27:01]1125: WAF :: fetched 5 new logs [22-06-2022 11:28:02]3884: WAF :: fetched 3 new logs [22-06-2022 11:29:01]6415: WAF :: fetched 2 new logs [22-06-2022 11:30:02]9401: WAF :: fetched 1 new logs [22-06-2022 11:31:01]12175: WAF :: fetched 1 new logs [22-06-2022 11:32:01]14921: WAF :: fetched 9 new logs [22-06-2022 11:33:01]17599: WAF :: fetched 24 new logs [22-06-2022 11:34:02]20267: WAF :: fetched 22 new logs [22-06-2022 11:35:01]22952: WAF :: fetched 22 new logs [22-06-2022 11:36:02]25689: WAF :: fetched 33 new logs [22-06-2022 11:37:02]28464: WAF :: fetched 26 new logs [22-06-2022 11:38:01]31122: WAF :: fetched 38 new logs [22-06-2022 11:39:01]1410: WAF :: fetched 38 new logs [22-06-2022 11:40:02]4204: WAF :: fetched 33 new logs [22-06-2022 11:41:01]6952: WAF :: fetched 45 new logs [22-06-2022 11:41:01]6952: Checking for user cron vulnerabilities [22-06-2022 11:42:02]9719: WAF :: fetched 58 new logs [22-06-2022 11:43:02]12325: WAF :: fetched 33 new logs [22-06-2022 11:44:01]15026: Checking ditributed CMS bruteforce attacks [22-06-2022 11:44:01]15026: WAF :: fetched 2 new logs [22-06-2022 11:45:02]17697: WAF :: fetched 1 new logs [22-06-2022 11:46:01]20413: WAF :: fetched 3 new logs [22-06-2022 11:47:01]23151: WAF :: fetched 1 new logs [22-06-2022 11:48:02]25837: WAF :: fetched 1 new logs [22-06-2022 11:50:02]31189: WAF :: fetched 3 new logs [22-06-2022 11:51:02]1526: WAF :: fetched 8 new logs [22-06-2022 11:52:01]4404: WAF :: fetched 11 new logs [22-06-2022 11:53:02]7187: WAF :: fetched 15 new logs [22-06-2022 11:54:01]9816: WAF :: fetched 15 new logs [22-06-2022 11:55:02]12458: WAF :: fetched 7 new logs [22-06-2022 11:56:02]15165: WAF :: fetched 2 new logs [22-06-2022 11:57:01]17983: WAF :: fetched 1 new logs [22-06-2022 11:58:02]20697: WAF :: fetched 1 new logs [22-06-2022 11:59:01]23321: WAF :: fetched 2 new logs [22-06-2022 12:01:01]28910: WAF :: fetched 2 new logs [22-06-2022 12:02:02]31731: WAF :: fetched 3 new logs [22-06-2022 12:03:02]1958: WAF :: fetched 1 new logs [22-06-2022 12:05:01]7383: WAF :: fetched 2 new logs [22-06-2022 12:06:02]10115: WAF :: fetched 4 new logs [22-06-2022 12:07:01]12795: WAF :: fetched 1 new logs [22-06-2022 12:10:02]20819: WAF :: fetched 2 new logs [22-06-2022 12:11:01]23561: WAF :: fetched 1 new logs [22-06-2022 12:12:01]26286: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655910721 [22-06-2022 12:12:02]26286: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 12:12:04]26286: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 12:12:04]26286: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-1212/20220622-121202-YrMxQnxQvTIwpPUIoRHSnQAAAAw [22-06-2022 12:12:04]26286: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 12:12:05]26286: WAF :: fetched 3 new logs [22-06-2022 12:16:02]5538: WAF :: fetched 1 new logs [22-06-2022 12:17:02]8382: WAF :: fetched 1 new logs [22-06-2022 12:18:01]11033: WAF :: fetched 2 new logs [22-06-2022 12:22:01]21743: WAF :: fetched 2 new logs [22-06-2022 12:24:01]27035: WAF :: fetched 3 new logs [22-06-2022 12:25:02]29741: WAF :: fetched 2 new logs [22-06-2022 12:26:02]32424: WAF :: fetched 2 new logs [22-06-2022 12:28:02]5505: WAF :: fetched 1 new logs [22-06-2022 12:34:01]21725: WAF :: fetched 3 new logs [22-06-2022 12:35:01]24423: WAF :: fetched 10 new logs [22-06-2022 12:36:02]27178: WAF :: fetched 12 new logs [22-06-2022 12:37:01]29874: WAF :: fetched 16 new logs [22-06-2022 12:38:02]32584: WAF :: fetched 5 new logs [22-06-2022 12:39:01]2855: WAF :: fetched 3 new logs [22-06-2022 12:40:01]5631: WAF :: fetched 5 new logs [22-06-2022 12:41:02]8393: WAF :: fetched 4 new logs [22-06-2022 12:41:02]8393: Checking for user cron vulnerabilities [22-06-2022 12:42:01]11062: WAF :: fetched 22 new logs [22-06-2022 12:43:02]13794: WAF :: fetched 69 new logs [22-06-2022 12:44:01]16446: Checking ditributed CMS bruteforce attacks [22-06-2022 12:45:01]: Checking for software updates [22-06-2022 12:45:01]19146: WAF :: fetched 3 new logs [22-06-2022 12:47:01]24557: WAF :: fetched 1 new logs [22-06-2022 12:51:01]3175: WAF :: fetched 3 new logs [22-06-2022 12:52:02]5958: WAF :: fetched 2 new logs [22-06-2022 12:53:01]8716: WAF :: fetched 26 new logs [22-06-2022 12:55:02]14103: WAF :: fetched 1 new logs [22-06-2022 12:56:01]16861: WAF :: fetched 1 new logs [22-06-2022 12:57:02]19538: WAF :: fetched 2 new logs [22-06-2022 12:58:01]22282: WAF :: fetched 2 new logs [22-06-2022 12:59:01]24986: WAF :: fetched 1 new logs [22-06-2022 13:00:02]27411: WAF :: fetched 1 new logs [22-06-2022 13:01:01]30567: WAF :: fetched 1 new logs [22-06-2022 13:02:01]861: WAF :: fetched 4 new logs [22-06-2022 13:03:02]3682: WAF :: fetched 1 new logs [22-06-2022 13:04:02]6404: WAF :: fetched 1 new logs [22-06-2022 13:05:02]9089: WAF :: fetched 3 new logs [22-06-2022 13:06:01]11815: WAF :: fetched 3 new logs [22-06-2022 13:07:01]14476: WAF :: fetched 1 new logs [22-06-2022 13:08:02]17323: WAF :: fetched 1 new logs [22-06-2022 13:12:02]28221: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655914322 [22-06-2022 13:12:02]28221: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 13:12:04]28221: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 13:12:04]28221: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-1312/20220622-131202-YrM_UjPtZn2TjDmk7bwkPwAAABw [22-06-2022 13:12:04]28221: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 13:16:01]6698: WAF :: fetched 1 new logs [22-06-2022 13:18:01]12200: WAF :: fetched 1 new logs [22-06-2022 13:19:02]14974: WAF :: fetched 3 new logs [22-06-2022 13:21:02]20442: WAF :: fetched 1 new logs [22-06-2022 13:22:01]23071: WAF :: fetched 2 new logs [22-06-2022 13:24:02]28441: WAF :: fetched 6 new logs [22-06-2022 13:28:01]6861: WAF :: fetched 1 new logs [22-06-2022 13:29:02]9542: WAF :: fetched 3 new logs [22-06-2022 13:31:02]14930: WAF :: fetched 1 new logs [22-06-2022 13:32:01]17590: WAF :: fetched 3 new logs [22-06-2022 13:33:02]20325: WAF :: fetched 1 new logs [22-06-2022 13:34:01]22951: WAF :: fetched 1 new logs [22-06-2022 13:36:02]28354: WAF :: fetched 1 new logs [22-06-2022 13:37:01]31007: WAF :: fetched 2 new logs [22-06-2022 13:41:01]9415: WAF :: fetched 1 new logs [22-06-2022 13:41:01]9415: Checking for user cron vulnerabilities [22-06-2022 13:43:02]14882: WAF :: fetched 3 new logs [22-06-2022 13:44:01]17561: Checking ditributed CMS bruteforce attacks [22-06-2022 13:45:02]: Checking for definition updates [22-06-2022 13:45:08]20248: Updated virus defnition : signatures.ndb [22-06-2022 13:45:09]20248: Updated virus defnition : malware.expert.ndb [22-06-2022 13:47:01]25608: WAF :: fetched 1 new logs [22-06-2022 13:48:02]28489: WAF :: fetched 4 new logs [22-06-2022 13:49:01]31221: WAF :: fetched 10 new logs [22-06-2022 13:50:02]1573: WAF :: fetched 1 new logs [22-06-2022 13:51:02]4440: WAF :: fetched 2 new logs [22-06-2022 13:52:01]7217: WAF :: fetched 1 new logs [22-06-2022 13:53:02]9996: WAF :: fetched 1 new logs [22-06-2022 13:54:01]12742: WAF :: fetched 1 new logs [22-06-2022 13:58:02]23782: WAF :: fetched 1 new logs [22-06-2022 14:05:02]10872: WAF :: fetched 1 new logs [22-06-2022 14:06:02]13625: WAF :: fetched 1 new logs [22-06-2022 14:07:01]16469: WAF :: fetched 1 new logs [22-06-2022 14:08:02]19261: WAF :: fetched 1 new logs [22-06-2022 14:09:01]21915: WAF :: fetched 1 new logs [22-06-2022 14:10:02]24638: WAF :: fetched 3 new logs [22-06-2022 14:12:01]30138: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655917921 [22-06-2022 14:12:01]30138: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 14:12:03]30138: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 14:12:03]30138: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-1412/20220622-141201-YrNNYcY2gGLHLxRRcV4ZBAAAAD0 [22-06-2022 14:12:03]30138: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 14:12:04]30138: WAF :: fetched 2 new logs [22-06-2022 14:13:01]532: WAF :: fetched 1 new logs [22-06-2022 14:18:02]14668: WAF :: fetched 11 new logs [22-06-2022 14:19:01]17367: WAF :: fetched 16 new logs [22-06-2022 14:20:02]20103: WAF :: fetched 15 new logs [22-06-2022 14:21:01]22871: WAF :: fetched 1 new logs [22-06-2022 14:24:01]31162: WAF :: fetched 1 new logs [22-06-2022 14:26:02]4262: WAF :: fetched 2 new logs [22-06-2022 14:27:02]7078: WAF :: fetched 3 new logs [22-06-2022 14:27:02]7076: httpd.conf changed. Refreshing watchlist. [22-06-2022 14:28:01]9833: WAF :: fetched 1 new logs [22-06-2022 14:29:02]12553: WAF :: fetched 4 new logs [22-06-2022 14:30:02]15249: WAF :: fetched 4 new logs [22-06-2022 14:31:02]18023: WAF :: fetched 6 new logs [22-06-2022 14:32:01]20770: WAF :: fetched 2 new logs [22-06-2022 14:33:01]23493: WAF :: fetched 1 new logs [22-06-2022 14:34:02]26176: WAF :: fetched 3 new logs [22-06-2022 14:35:01]28871: WAF :: fetched 2 new logs [22-06-2022 14:36:02]31705: WAF :: fetched 3 new logs [22-06-2022 14:37:02]2002: WAF :: fetched 19 new logs [22-06-2022 14:38:01]4876: WAF :: fetched 19 new logs [22-06-2022 14:39:02]7600: WAF :: fetched 4 new logs [22-06-2022 14:40:01]10250: WAF :: fetched 4 new logs [22-06-2022 14:41:02]13050: Checking for user cron vulnerabilities [22-06-2022 14:42:02]15737: WAF :: fetched 2 new logs [22-06-2022 14:43:01]18497: WAF :: fetched 3 new logs [22-06-2022 14:44:01]21179: Checking ditributed CMS bruteforce attacks [22-06-2022 14:45:02]23861: WAF :: fetched 3 new logs [22-06-2022 14:46:02]26621: WAF :: fetched 5 new logs [22-06-2022 14:47:02]29299: WAF :: fetched 4 new logs [22-06-2022 14:48:01]31988: WAF :: fetched 4 new logs [22-06-2022 14:49:02]2492: WAF :: fetched 3 new logs [22-06-2022 14:50:01]5260: WAF :: fetched 3 new logs [22-06-2022 14:51:02]8075: WAF :: fetched 8 new logs [22-06-2022 14:52:02]10702: WAF :: fetched 1 new logs [22-06-2022 14:53:01]13413: WAF :: fetched 8 new logs [22-06-2022 14:53:02]13409: Updated license status via CDN [22-06-2022 14:54:02]16147: WAF :: fetched 3 new logs [22-06-2022 14:55:02]18811: WAF :: fetched 6 new logs [22-06-2022 14:56:01]21572: WAF :: fetched 15 new logs [22-06-2022 14:57:02]24273: WAF :: fetched 21 new logs [22-06-2022 14:58:01]27032: WAF :: fetched 2 new logs [22-06-2022 15:00:02]32117: WAF :: fetched 4 new logs [22-06-2022 15:01:01]2922: Reseting cPGuard inotify settings [22-06-2022 15:03:02]8635: WAF :: fetched 3 new logs [22-06-2022 15:04:01]11299: WAF :: fetched 5 new logs [22-06-2022 15:05:02]14046: WAF :: fetched 3 new logs [22-06-2022 15:06:02]16859: WAF :: fetched 1 new logs [22-06-2022 15:08:02]22425: WAF :: fetched 4 new logs [22-06-2022 15:09:01]25079: WAF :: fetched 5 new logs [22-06-2022 15:10:01]27810: WAF :: fetched 7 new logs [22-06-2022 15:11:02]30622: WAF :: fetched 5 new logs [22-06-2022 15:12:01]897: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655921521 [22-06-2022 15:12:01]897: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 15:12:03]897: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 15:12:04]897: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-1512/20220622-151201-YrNbcTAyvBBfWaegVfljkQAAAAc [22-06-2022 15:12:04]897: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 15:12:04]897: WAF :: fetched 8 new logs [22-06-2022 15:13:02]3813: WAF :: fetched 7 new logs [22-06-2022 15:14:02]6536: WAF :: fetched 2 new logs [22-06-2022 15:15:02]9195: WAF :: fetched 4 new logs [22-06-2022 15:16:01]11966: WAF :: fetched 2 new logs [22-06-2022 15:17:02]14677: WAF :: fetched 5 new logs [22-06-2022 15:18:01]17401: WAF :: fetched 3 new logs [22-06-2022 15:19:02]20242: WAF :: fetched 3 new logs [22-06-2022 15:20:01]22971: WAF :: fetched 7 new logs [22-06-2022 15:21:01]25757: WAF :: fetched 2 new logs [22-06-2022 15:22:02]28451: WAF :: fetched 3 new logs [22-06-2022 15:23:01]31215: WAF :: fetched 5 new logs [22-06-2022 15:24:02]1552: WAF :: fetched 13 new logs [22-06-2022 15:25:02]4344: WAF :: fetched 10 new logs [22-06-2022 15:26:01]7129: WAF :: fetched 7 new logs [22-06-2022 15:27:02]9877: WAF :: fetched 11 new logs [22-06-2022 15:28:01]12630: WAF :: fetched 7 new logs [22-06-2022 15:29:02]15346: WAF :: fetched 4 new logs [22-06-2022 15:30:02]18068: WAF :: fetched 3 new logs [22-06-2022 15:31:01]20764: WAF :: fetched 4 new logs [22-06-2022 15:34:01]28915: WAF :: fetched 3 new logs [22-06-2022 15:35:02]31697: WAF :: fetched 21 new logs [22-06-2022 15:36:01]2060: WAF :: fetched 17 new logs [22-06-2022 15:37:02]4812: WAF :: fetched 10 new logs [22-06-2022 15:38:02]7588: WAF :: fetched 21 new logs [22-06-2022 15:39:01]10267: WAF :: fetched 22 new logs [22-06-2022 15:40:02]12988: WAF :: fetched 3 new logs [22-06-2022 15:41:02]15787: WAF :: fetched 2 new logs [22-06-2022 15:41:02]15787: Checking for user cron vulnerabilities [22-06-2022 15:42:02]18455: WAF :: fetched 30 new logs [22-06-2022 15:43:01]21276: WAF :: fetched 1 new logs [22-06-2022 15:44:01]23967: Checking ditributed CMS bruteforce attacks [22-06-2022 15:45:01]26603: WAF :: fetched 2 new logs [22-06-2022 15:47:02]32123: WAF :: fetched 2 new logs [22-06-2022 15:49:01]5367: WAF :: fetched 1 new logs [22-06-2022 15:50:02]8102: WAF :: fetched 1 new logs [22-06-2022 15:51:02]10881: WAF :: fetched 3 new logs [22-06-2022 15:52:01]13551: WAF :: fetched 1 new logs [22-06-2022 15:54:01]19032: WAF :: fetched 2 new logs [22-06-2022 15:56:02]24461: WAF :: fetched 2 new logs [22-06-2022 15:57:01]27090: WAF :: fetched 2 new logs [22-06-2022 15:58:02]29936: WAF :: fetched 1 new logs [22-06-2022 15:59:01]32566: WAF :: fetched 24 new logs [22-06-2022 16:00:02]2623: WAF :: fetched 13 new logs [22-06-2022 16:01:02]5965: WAF :: fetched 1 new logs [22-06-2022 16:02:01]8722: WAF :: fetched 1 new logs [22-06-2022 16:03:02]11615: WAF :: fetched 1 new logs [22-06-2022 16:04:01]14198: WAF :: fetched 31 new logs [22-06-2022 16:05:02]17072: WAF :: fetched 1 new logs [22-06-2022 16:06:01]19823: WAF :: fetched 2 new logs [22-06-2022 16:07:02]22613: WAF :: fetched 2 new logs [22-06-2022 16:09:01]28091: WAF :: fetched 2 new logs [22-06-2022 16:11:01]1160: WAF :: fetched 4 new logs [22-06-2022 16:12:02]3973: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655925122 [22-06-2022 16:12:02]3973: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 16:12:04]3973: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 16:12:04]3973: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-1612/20220622-161202-YrNpgt-gzrODh-soNA2juwAAAAg [22-06-2022 16:12:04]3973: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 16:12:04]3973: WAF :: fetched 2 new logs [22-06-2022 16:13:02]6904: WAF :: fetched 1 new logs [22-06-2022 16:14:02]9618: WAF :: fetched 31 new logs [22-06-2022 16:15:01]12328: WAF :: fetched 12 new logs [22-06-2022 16:16:02]15453: WAF :: fetched 1 new logs [22-06-2022 16:17:01]19747: WAF :: fetched 2 new logs [22-06-2022 16:18:02]22671: WAF :: fetched 3 new logs [22-06-2022 16:20:01]28019: WAF :: fetched 6 new logs [22-06-2022 16:21:01]30863: WAF :: fetched 1 new logs [22-06-2022 16:22:02]1219: WAF :: fetched 1 new logs [22-06-2022 16:23:01]4090: WAF :: fetched 1 new logs [22-06-2022 16:24:01]6956: WAF :: fetched 1 new logs [22-06-2022 16:25:02]9747: WAF :: fetched 1 new logs [22-06-2022 16:26:02]12542: WAF :: fetched 1 new logs [22-06-2022 16:28:01]18150: WAF :: fetched 3 new logs [22-06-2022 16:29:02]20846: WAF :: fetched 4 new logs [22-06-2022 16:30:02]23556: WAF :: fetched 3 new logs [22-06-2022 16:32:02]29147: WAF :: fetched 1 new logs [22-06-2022 16:33:02]31958: WAF :: fetched 4 new logs [22-06-2022 16:34:02]2364: WAF :: fetched 1 new logs [22-06-2022 16:36:02]8010: WAF :: fetched 2 new logs [22-06-2022 16:37:02]10702: WAF :: fetched 3 new logs [22-06-2022 16:38:01]13531: WAF :: fetched 4 new logs [22-06-2022 16:39:02]16374: WAF :: fetched 2 new logs [22-06-2022 16:40:01]19104: WAF :: fetched 1 new logs [22-06-2022 16:41:01]21890: Checking for user cron vulnerabilities [22-06-2022 16:44:01]30259: Checking ditributed CMS bruteforce attacks [22-06-2022 16:44:01]30259: WAF :: fetched 1 new logs [22-06-2022 16:45:02]525: WAF :: fetched 1 new logs [22-06-2022 16:47:02]6200: WAF :: fetched 2 new logs [22-06-2022 16:48:02]9065: WAF :: fetched 9 new logs [22-06-2022 16:49:01]11803: WAF :: fetched 25 new logs [22-06-2022 16:50:02]14673: WAF :: fetched 1 new logs [22-06-2022 16:51:01]17559: WAF :: fetched 4 new logs [22-06-2022 16:52:02]20261: WAF :: fetched 3 new logs [22-06-2022 16:53:02]23045: WAF :: fetched 1 new logs [22-06-2022 16:55:01]28427: WAF :: fetched 2 new logs [22-06-2022 16:55:03]28427: API call failed for url https://api.recaptcha.cloud/add Status : 500 [22-06-2022 16:56:02]31252: WAF :: fetched 2 new logs [22-06-2022 16:57:01]1371: WAF :: fetched 3 new logs [22-06-2022 16:59:01]7359: WAF :: fetched 3 new logs [22-06-2022 17:01:02]13031: WAF :: fetched 2 new logs [22-06-2022 17:03:02]18703: WAF :: fetched 6 new logs [22-06-2022 17:04:01]21408: WAF :: fetched 36 new logs [22-06-2022 17:05:02]24210: WAF :: fetched 25 new logs [22-06-2022 17:06:02]26972: WAF :: fetched 13 new logs [22-06-2022 17:07:01]29720: WAF :: fetched 12 new logs [22-06-2022 17:08:02]32482: WAF :: fetched 32 new logs [22-06-2022 17:09:02]2816: WAF :: fetched 2 new logs [22-06-2022 17:10:01]5634: WAF :: fetched 1 new logs [22-06-2022 17:11:02]8417: WAF :: fetched 1 new logs [22-06-2022 17:12:01]11151: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655928721 [22-06-2022 17:12:01]11151: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 17:12:03]11151: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 17:12:04]11151: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-1712/20220622-171201-YrN3kR87ZYl2TMKBgFdWrgAAAEM [22-06-2022 17:12:04]11151: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-06-2022 17:12:04]11151: WAF :: fetched 2 new logs [22-06-2022 17:13:01]13971: WAF :: fetched 1 new logs [22-06-2022 17:14:02]16673: WAF :: fetched 1 new logs [22-06-2022 17:15:01]19371: WAF :: fetched 22 new logs [22-06-2022 17:16:02]22211: WAF :: fetched 3 new logs [22-06-2022 17:17:01]24929: WAF :: fetched 7 new logs [22-06-2022 17:18:01]27694: WAF :: fetched 5 new logs [22-06-2022 17:19:02]30410: WAF :: fetched 5 new logs [22-06-2022 17:21:01]3461: WAF :: fetched 5 new logs [22-06-2022 17:22:02]6265: WAF :: fetched 3 new logs [22-06-2022 17:23:01]9034: WAF :: fetched 3 new logs [22-06-2022 17:26:02]17184: WAF :: fetched 2 new logs [22-06-2022 17:27:02]19921: WAF :: fetched 1 new logs [22-06-2022 17:28:01]22706: WAF :: fetched 4 new logs [22-06-2022 17:29:02]25454: WAF :: fetched 2 new logs [22-06-2022 17:30:02]28103: WAF :: fetched 3 new logs [22-06-2022 17:31:01]30834: WAF :: fetched 4 new logs [22-06-2022 17:32:01]1131: WAF :: fetched 9 new logs [22-06-2022 17:33:01]3888: WAF :: fetched 2 new logs [22-06-2022 17:34:02]6632: WAF :: fetched 2 new logs [22-06-2022 17:36:02]12095: WAF :: fetched 9 new logs [22-06-2022 17:37:01]14752: WAF :: fetched 1 new logs [22-06-2022 17:38:01]17466: WAF :: fetched 1 new logs [22-06-2022 17:39:01]20239: WAF :: fetched 2 new logs [22-06-2022 17:40:02]22962: WAF :: fetched 1 new logs [22-06-2022 17:41:01]25730: WAF :: fetched 2 new logs [22-06-2022 17:41:01]25730: Checking for user cron vulnerabilities [22-06-2022 17:42:02]28757: WAF :: fetched 1 new logs [22-06-2022 17:43:02]31912: WAF :: fetched 3 new logs [22-06-2022 17:44:01]4257: Checking ditributed CMS bruteforce attacks [22-06-2022 17:44:01]4257: WAF :: fetched 4 new logs [22-06-2022 17:46:01]10114: WAF :: fetched 1 new logs [22-06-2022 17:47:02]13051: WAF :: fetched 4 new logs [22-06-2022 17:48:01]15848: WAF :: fetched 3 new logs [22-06-2022 17:49:02]18763: WAF :: fetched 6 new logs [22-06-2022 17:50:02]21509: WAF :: fetched 1 new logs [22-06-2022 17:51:01]24399: WAF :: fetched 3 new logs [22-06-2022 17:52:02]27110: WAF :: fetched 5 new logs [22-06-2022 17:53:02]29835: WAF :: fetched 2 new logs [22-06-2022 17:54:01]32633: WAF :: fetched 17 new logs [22-06-2022 17:55:01]2911: WAF :: fetched 36 new logs [22-06-2022 17:58:01]11116: WAF :: fetched 6 new logs [22-06-2022 17:59:02]13857: WAF :: fetched 4 new logs [22-06-2022 18:00:01]16263: WAF :: fetched 2 new logs [22-06-2022 18:01:02]19439: WAF :: fetched 1 new logs [22-06-2022 18:03:01]24786: WAF :: fetched 1 new logs [22-06-2022 18:04:02]27541: WAF :: fetched 1 new logs [22-06-2022 18:05:01]30176: WAF :: fetched 3 new logs [22-06-2022 18:06:02]459: WAF :: fetched 5 new logs [22-06-2022 18:07:02]3179: WAF :: fetched 52 new logs [22-06-2022 18:08:01]5917: WAF :: fetched 8 new logs [22-06-2022 18:09:02]8674: WAF :: fetched 2 new logs [22-06-2022 18:10:01]11368: WAF :: fetched 4 new logs [22-06-2022 18:11:02]14092: WAF :: fetched 1 new logs [22-06-2022 18:12:02]16798: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655932322 [22-06-2022 18:12:02]16798: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 18:12:04]16798: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 18:12:04]16798: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-1812/20220622-181202-YrOFosO5yTiwZivtIJZe6QAAABs [22-06-2022 18:12:04]16798: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 18:12:04]16798: WAF :: fetched 201 new logs [22-06-2022 18:13:01]19477: WAF :: fetched 2 new logs [22-06-2022 18:14:02]22262: WAF :: fetched 3 new logs [22-06-2022 18:15:01]24989: WAF :: fetched 4 new logs [22-06-2022 18:16:01]27752: WAF :: fetched 41 new logs [22-06-2022 18:17:02]30422: WAF :: fetched 3 new logs [22-06-2022 18:19:02]3409: WAF :: fetched 1 new logs [22-06-2022 18:20:01]6184: WAF :: fetched 2 new logs [22-06-2022 18:21:02]8913: WAF :: fetched 44 new logs [22-06-2022 18:22:01]11605: WAF :: fetched 1 new logs [22-06-2022 18:23:01]14254: WAF :: fetched 46 new logs [22-06-2022 18:24:02]17028: WAF :: fetched 33 new logs [22-06-2022 18:25:01]19703: WAF :: fetched 27 new logs [22-06-2022 18:26:02]22438: WAF :: fetched 3 new logs [22-06-2022 18:27:02]25072: WAF :: fetched 2 new logs [22-06-2022 18:28:01]27759: WAF :: fetched 4 new logs [22-06-2022 18:29:01]30474: WAF :: fetched 2 new logs [22-06-2022 18:30:01]704: WAF :: fetched 1 new logs [22-06-2022 18:31:02]3526: WAF :: fetched 2 new logs [22-06-2022 18:32:02]6346: WAF :: fetched 3 new logs [22-06-2022 18:33:02]9013: WAF :: fetched 4 new logs [22-06-2022 18:34:01]11784: WAF :: fetched 1 new logs [22-06-2022 18:35:02]14595: WAF :: fetched 4 new logs [22-06-2022 18:35:02]14591: httpd.conf changed. Refreshing watchlist. [22-06-2022 18:36:01]17346: WAF :: fetched 44 new logs [22-06-2022 18:37:02]20035: WAF :: fetched 5 new logs [22-06-2022 18:38:01]22666: WAF :: fetched 2 new logs [22-06-2022 18:39:02]25529: httpd.conf changed. Refreshing watchlist. [22-06-2022 18:39:02]25531: WAF :: fetched 31 new logs [22-06-2022 18:40:02]28186: WAF :: fetched 66 new logs [22-06-2022 18:41:01]30876: Checking for user cron vulnerabilities [22-06-2022 18:42:02]1138: WAF :: fetched 3 new logs [22-06-2022 18:43:01]3819: WAF :: fetched 1 new logs [22-06-2022 18:44:01]6635: Checking ditributed CMS bruteforce attacks [22-06-2022 18:44:01]6635: WAF :: fetched 1 new logs [22-06-2022 18:45:02]9301: WAF :: fetched 1 new logs [22-06-2022 18:47:02]14596: WAF :: fetched 9 new logs [22-06-2022 18:48:01]17240: WAF :: fetched 29 new logs [22-06-2022 18:49:01]19996: WAF :: fetched 1 new logs [22-06-2022 18:50:02]22676: WAF :: fetched 1 new logs [22-06-2022 18:51:01]25374: WAF :: fetched 27 new logs [22-06-2022 18:53:02]30687: WAF :: fetched 3 new logs [22-06-2022 18:54:01]1044: WAF :: fetched 1 new logs [22-06-2022 18:55:02]3788: WAF :: fetched 2 new logs [22-06-2022 18:59:01]14503: WAF :: fetched 5 new logs [22-06-2022 19:00:02]16916: WAF :: fetched 1 new logs [22-06-2022 19:01:02]20112: WAF :: fetched 48 new logs [22-06-2022 19:02:01]22830: WAF :: fetched 3 new logs [22-06-2022 19:03:02]25604: WAF :: fetched 38 new logs [22-06-2022 19:04:01]28333: WAF :: fetched 3 new logs [22-06-2022 19:06:02]1360: WAF :: fetched 1 new logs [22-06-2022 19:07:01]4121: WAF :: fetched 34 new logs [22-06-2022 19:08:02]6910: WAF :: fetched 1 new logs [22-06-2022 19:09:02]9675: WAF :: fetched 4 new logs [22-06-2022 19:10:01]12385: WAF :: fetched 1 new logs [22-06-2022 19:11:02]15165: WAF :: fetched 1 new logs [22-06-2022 19:12:01]17860: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655935921 [22-06-2022 19:12:01]17860: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 19:12:03]17860: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 19:12:04]17860: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-1912/20220622-191201-YrOTsQ--4fysFkdBakw1UgAAAB0 [22-06-2022 19:12:04]17860: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 19:12:04]17860: WAF :: fetched 1 new logs [22-06-2022 19:13:02]20595: WAF :: fetched 3 new logs [22-06-2022 19:15:01]25990: WAF :: fetched 3 new logs [22-06-2022 19:16:02]28697: WAF :: fetched 2 new logs [22-06-2022 19:19:02]4430: WAF :: fetched 1 new logs [22-06-2022 19:20:01]7138: WAF :: fetched 2 new logs [22-06-2022 19:21:02]9891: WAF :: fetched 3 new logs [22-06-2022 19:22:02]12634: WAF :: fetched 8 new logs [22-06-2022 19:23:01]15360: WAF :: fetched 4 new logs [22-06-2022 19:24:02]18148: WAF :: fetched 1 new logs [22-06-2022 19:25:01]20807: WAF :: fetched 5 new logs [22-06-2022 19:26:02]23582: WAF :: fetched 3 new logs [22-06-2022 19:27:01]26260: WAF :: fetched 7 new logs [22-06-2022 19:28:01]28907: WAF :: fetched 1 new logs [22-06-2022 19:29:02]31704: WAF :: fetched 5 new logs [22-06-2022 19:30:01]2003: WAF :: fetched 5 new logs [22-06-2022 19:31:01]4953: WAF :: fetched 2 new logs [22-06-2022 19:32:02]7737: WAF :: fetched 1 new logs [22-06-2022 19:33:01]10398: WAF :: fetched 2 new logs [22-06-2022 19:34:01]13154: WAF :: fetched 39 new logs [22-06-2022 19:35:02]15872: WAF :: fetched 1 new logs [22-06-2022 19:36:01]18588: WAF :: fetched 17 new logs [22-06-2022 19:37:02]21252: WAF :: fetched 23 new logs [22-06-2022 19:41:01]32090: WAF :: fetched 2 new logs [22-06-2022 19:41:01]32090: Checking for user cron vulnerabilities [22-06-2022 19:42:01]2424: WAF :: fetched 1 new logs [22-06-2022 19:44:01]7934: Checking ditributed CMS bruteforce attacks [22-06-2022 19:44:01]7934: WAF :: fetched 1 new logs [22-06-2022 19:45:02]: Checking for definition updates [22-06-2022 19:45:02]10580: WAF :: fetched 1 new logs [22-06-2022 19:45:07]10583: Updated virus defnition : malware.expert.ndb [22-06-2022 19:46:01]13279: WAF :: fetched 1 new logs [22-06-2022 19:48:02]18753: WAF :: fetched 4 new logs [22-06-2022 19:49:02]21494: WAF :: fetched 1 new logs [22-06-2022 19:50:01]24165: WAF :: fetched 1 new logs [22-06-2022 19:51:01]26897: WAF :: fetched 1 new logs [22-06-2022 19:52:02]29563: WAF :: fetched 1 new logs [22-06-2022 19:53:01]32199: WAF :: fetched 2 new logs [22-06-2022 19:54:02]2602: WAF :: fetched 1 new logs [22-06-2022 19:56:01]8007: WAF :: fetched 3 new logs [22-06-2022 19:58:01]13283: WAF :: fetched 1 new logs [22-06-2022 19:59:02]16062: WAF :: fetched 1 new logs [22-06-2022 20:00:02]18380: WAF :: fetched 1 new logs [22-06-2022 20:03:01]26875: WAF :: fetched 4 new logs [22-06-2022 20:04:01]29593: WAF :: fetched 2 new logs [22-06-2022 20:06:01]2532: WAF :: fetched 2 new logs [22-06-2022 20:08:02]7929: WAF :: fetched 2 new logs [22-06-2022 20:09:01]10600: WAF :: fetched 1 new logs [22-06-2022 20:10:02]13255: WAF :: fetched 2 new logs [22-06-2022 20:12:02]18637: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655939522 [22-06-2022 20:12:02]18637: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 20:12:04]18637: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 20:12:04]18637: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-2012/20220622-201202-YrOhwj_HMB-ZtcGOiDZGPwAAAAg [22-06-2022 20:12:04]18637: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 20:12:04]18637: WAF :: fetched 4 new logs [22-06-2022 20:13:01]21249: WAF :: fetched 1 new logs [22-06-2022 20:14:01]23955: WAF :: fetched 2 new logs [22-06-2022 20:15:02]26662: WAF :: fetched 1 new logs [22-06-2022 20:16:02]29339: WAF :: fetched 1 new logs [22-06-2022 20:17:01]31993: WAF :: fetched 3 new logs [22-06-2022 20:18:02]2330: WAF :: fetched 1 new logs [22-06-2022 20:21:02]10626: WAF :: fetched 1 new logs [22-06-2022 20:23:02]15985: WAF :: fetched 4 new logs [22-06-2022 20:24:01]18713: WAF :: fetched 3 new logs [22-06-2022 20:25:01]21391: WAF :: fetched 1 new logs [22-06-2022 20:29:02]32216: WAF :: fetched 2 new logs [22-06-2022 20:30:01]2496: WAF :: fetched 2 new logs [22-06-2022 20:31:01]5301: WAF :: fetched 3 new logs [22-06-2022 20:33:02]10590: WAF :: fetched 4 new logs [22-06-2022 20:34:02]13365: WAF :: fetched 2 new logs [22-06-2022 20:35:01]16074: WAF :: fetched 7 new logs [22-06-2022 20:36:02]18920: WAF :: fetched 1 new logs [22-06-2022 20:37:02]21642: WAF :: fetched 1 new logs [22-06-2022 20:39:02]27113: WAF :: fetched 1 new logs [22-06-2022 20:40:01]29779: WAF :: fetched 1 new logs [22-06-2022 20:41:02]32539: WAF :: fetched 3 new logs [22-06-2022 20:41:02]32539: Checking for user cron vulnerabilities [22-06-2022 20:42:01]2781: WAF :: fetched 1 new logs [22-06-2022 20:43:01]5495: WAF :: fetched 2 new logs [22-06-2022 20:44:01]8279: Checking ditributed CMS bruteforce attacks [22-06-2022 20:44:02]8279: WAF :: fetched 3 new logs [22-06-2022 20:45:01]10896: WAF :: fetched 1 new logs [22-06-2022 20:46:02]13627: WAF :: fetched 2 new logs [22-06-2022 20:47:01]16274: WAF :: fetched 1 new logs [22-06-2022 20:48:01]18898: WAF :: fetched 1 new logs [22-06-2022 20:50:01]24246: WAF :: fetched 12 new logs [22-06-2022 20:51:02]26955: WAF :: fetched 3 new logs [22-06-2022 20:52:01]29573: WAF :: fetched 1 new logs [22-06-2022 20:56:01]7933: WAF :: fetched 1 new logs [22-06-2022 20:58:02]13176: WAF :: fetched 1 new logs [22-06-2022 20:59:01]15922: WAF :: fetched 1 new logs [22-06-2022 21:00:02]18301: WAF :: fetched 2 new logs [22-06-2022 21:05:02]32057: WAF :: fetched 5 new logs [22-06-2022 21:06:01]2328: WAF :: fetched 1 new logs [22-06-2022 21:09:01]10477: WAF :: fetched 3 new logs [22-06-2022 21:11:01]15861: WAF :: fetched 2 new logs [22-06-2022 21:12:02]18640: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655943122 [22-06-2022 21:12:02]18640: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 21:12:04]18640: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 21:12:04]18640: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-2112/20220622-211202-YrOv0l-JhGDVZuyUgxqubAAAAAU [22-06-2022 21:12:04]18640: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 21:12:04]18640: WAF :: fetched 4 new logs [22-06-2022 21:13:02]21289: WAF :: fetched 1 new logs [22-06-2022 21:18:02]2259: WAF :: fetched 1 new logs [22-06-2022 21:19:01]5142: WAF :: fetched 1 new logs [22-06-2022 21:24:02]18585: WAF :: fetched 1 new logs [22-06-2022 21:25:01]21197: WAF :: fetched 3 new logs [22-06-2022 21:27:02]26609: WAF :: fetched 2 new logs [22-06-2022 21:29:02]32028: WAF :: fetched 2 new logs [22-06-2022 21:32:02]7884: WAF :: fetched 3 new logs [22-06-2022 21:33:01]10500: WAF :: fetched 2 new logs [22-06-2022 21:34:02]13263: WAF :: fetched 1 new logs [22-06-2022 21:35:02]15928: WAF :: fetched 3 new logs [22-06-2022 21:36:01]18637: WAF :: fetched 2 new logs [22-06-2022 21:37:02]21295: WAF :: fetched 2 new logs [22-06-2022 21:38:01]23935: WAF :: fetched 1 new logs [22-06-2022 21:40:01]29296: WAF :: fetched 1 new logs [22-06-2022 21:41:02]31976: WAF :: fetched 2 new logs [22-06-2022 21:41:02]31976: Checking for user cron vulnerabilities [22-06-2022 21:43:02]4959: WAF :: fetched 3 new logs [22-06-2022 21:44:01]7659: Checking ditributed CMS bruteforce attacks [22-06-2022 21:44:02]7659: WAF :: fetched 2 new logs [22-06-2022 21:45:01]10279: WAF :: fetched 4 new logs [22-06-2022 21:46:02]12996: WAF :: fetched 4 new logs [22-06-2022 21:47:01]15603: WAF :: fetched 1 new logs [22-06-2022 21:48:01]18227: WAF :: fetched 1 new logs [22-06-2022 21:51:02]26310: WAF :: fetched 1 new logs [22-06-2022 21:54:02]1862: WAF :: fetched 2 new logs [22-06-2022 21:55:01]4599: WAF :: fetched 3 new logs [22-06-2022 21:55:03]4599: API call failed for url https://api.recaptcha.cloud/add Status : 500 [22-06-2022 21:57:02]9965: WAF :: fetched 2 new logs [22-06-2022 21:58:01]12584: WAF :: fetched 2 new logs [22-06-2022 21:59:02]15393: WAF :: fetched 2 new logs [22-06-2022 22:00:02]17736: WAF :: fetched 1 new logs [22-06-2022 22:03:01]26155: WAF :: fetched 1 new logs [22-06-2022 22:04:02]28899: WAF :: fetched 3 new logs [22-06-2022 22:05:02]31509: WAF :: fetched 5 new logs [22-06-2022 22:06:02]1804: WAF :: fetched 3 new logs [22-06-2022 22:07:01]4529: WAF :: fetched 1 new logs [22-06-2022 22:07:09]4527: Performing Domain reputation checks [22-06-2022 22:08:01]7218: WAF :: fetched 3 new logs [22-06-2022 22:09:02]9925: WAF :: fetched 1 new logs [22-06-2022 22:10:01]12589: WAF :: fetched 1 new logs [22-06-2022 22:11:02]15275: WAF :: fetched 2 new logs [22-06-2022 22:12:02]17888: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655946722 [22-06-2022 22:12:04]17888: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 22:12:06]17888: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 22:12:06]17888: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-2212/20220622-221204-YrO95HssItIZtR7hHEm3iwAAACM [22-06-2022 22:12:06]17888: WAF :: No suitable log file found. Using SQLite.. [22-06-2022 22:12:06]17888: WAF :: fetched 3 new logs [22-06-2022 22:13:01]20543: WAF :: fetched 1 new logs [22-06-2022 22:14:02]23310: WAF :: fetched 2 new logs [22-06-2022 22:15:01]25984: WAF :: fetched 1 new logs [22-06-2022 22:16:02]28688: WAF :: fetched 2 new logs [22-06-2022 22:22:02]12516: WAF :: fetched 4 new logs [22-06-2022 22:23:02]15147: WAF :: fetched 4 new logs [22-06-2022 22:24:01]17830: WAF :: fetched 3 new logs [22-06-2022 22:26:01]23118: WAF :: fetched 2 new logs [22-06-2022 22:27:02]25753: WAF :: fetched 1 new logs [22-06-2022 22:28:01]28360: WAF :: fetched 5 new logs [22-06-2022 22:29:01]31020: WAF :: fetched 2 new logs [22-06-2022 22:30:02]1318: WAF :: fetched 7 new logs [22-06-2022 22:31:01]4014: WAF :: fetched 5 new logs [22-06-2022 22:32:02]6714: WAF :: fetched 4 new logs [22-06-2022 22:33:02]9301: WAF :: fetched 2 new logs [22-06-2022 22:35:02]14694: WAF :: fetched 2 new logs [22-06-2022 22:36:01]17311: WAF :: fetched 3 new logs [22-06-2022 22:37:02]19959: WAF :: fetched 3 new logs [22-06-2022 22:38:02]22547: WAF :: fetched 3 new logs [22-06-2022 22:39:01]25158: WAF :: fetched 2 new logs [22-06-2022 22:40:02]27896: WAF :: fetched 2 new logs [22-06-2022 22:41:01]30553: WAF :: fetched 4 new logs [22-06-2022 22:41:01]30553: Checking for user cron vulnerabilities [22-06-2022 22:42:02]777: WAF :: fetched 2 new logs [22-06-2022 22:44:01]6121: Checking ditributed CMS bruteforce attacks [22-06-2022 22:44:01]6121: WAF :: fetched 4 new logs [22-06-2022 22:45:02]8842: WAF :: fetched 2 new logs [22-06-2022 22:46:01]11462: WAF :: fetched 1 new logs [22-06-2022 22:47:02]14085: WAF :: fetched 5 new logs [22-06-2022 22:49:01]19335: WAF :: fetched 1 new logs [22-06-2022 22:50:02]22114: WAF :: fetched 1 new logs [22-06-2022 22:52:01]27335: WAF :: fetched 1 new logs [22-06-2022 22:53:02]29965: WAF :: fetched 1 new logs [22-06-2022 22:55:02]2922: WAF :: fetched 1 new logs [22-06-2022 22:57:01]8203: WAF :: fetched 2 new logs [22-06-2022 23:03:01]24191: WAF :: fetched 2 new logs [22-06-2022 23:04:01]26809: WAF :: fetched 1 new logs [22-06-2022 23:06:01]32202: WAF :: fetched 2 new logs [22-06-2022 23:07:02]2449: WAF :: fetched 1 new logs [22-06-2022 23:07:53]2601: Performed RBL check for 23.111.136.34. [22-06-2022 23:09:01]7734: WAF :: fetched 1 new logs [22-06-2022 23:10:02]10437: WAF :: fetched 2 new logs [22-06-2022 23:12:02]15707: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655950322 [22-06-2022 23:12:02]15707: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-06-2022 23:12:04]15707: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-06-2022 23:12:04]15707: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220622/20220622-2312/20220622-231202-YrPL8mFZId0s25RsmfZl7QAAAAQ [22-06-2022 23:12:04]15707: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-06-2022 23:12:04]15707: WAF :: fetched 2 new logs [22-06-2022 23:13:02]18278: WAF :: fetched 2 new logs [22-06-2022 23:15:02]23608: WAF :: fetched 4 new logs [22-06-2022 23:16:01]26251: WAF :: fetched 6 new logs [22-06-2022 23:17:02]28871: WAF :: fetched 3 new logs [22-06-2022 23:18:01]31445: WAF :: fetched 1 new logs [22-06-2022 23:19:02]1639: WAF :: fetched 3 new logs [22-06-2022 23:20:01]4445: WAF :: fetched 3 new logs [22-06-2022 23:22:01]9712: WAF :: fetched 5 new logs [22-06-2022 23:23:01]12318: WAF :: fetched 4 new logs [22-06-2022 23:24:02]14928: WAF :: fetched 3 new logs [22-06-2022 23:26:02]20295: WAF :: fetched 4 new logs [22-06-2022 23:27:02]22884: WAF :: fetched 2 new logs [22-06-2022 23:29:02]28125: WAF :: fetched 1 new logs [22-06-2022 23:30:02]30859: WAF :: fetched 2 new logs [22-06-2022 23:33:01]6487: WAF :: fetched 3 new logs [22-06-2022 23:35:02]11834: WAF :: fetched 44 new logs [22-06-2022 23:36:01]14486: WAF :: fetched 1 new logs [22-06-2022 23:37:02]17115: WAF :: fetched 3 new logs [22-06-2022 23:40:01]25049: WAF :: fetched 6 new logs [22-06-2022 23:41:01]27723: WAF :: fetched 1 new logs [22-06-2022 23:41:01]27723: Checking for user cron vulnerabilities [22-06-2022 23:42:01]30312: WAF :: fetched 2 new logs [22-06-2022 23:43:02]506: WAF :: fetched 5 new logs [22-06-2022 23:44:01]3179: Checking ditributed CMS bruteforce attacks [22-06-2022 23:44:02]3179: WAF :: fetched 15 new logs [22-06-2022 23:45:01]5926: WAF :: fetched 26 new logs [22-06-2022 23:47:01]11189: WAF :: fetched 2 new logs [22-06-2022 23:48:02]13835: WAF :: fetched 6 new logs [22-06-2022 23:50:01]19266: WAF :: fetched 2 new logs [22-06-2022 23:51:02]21944: WAF :: fetched 1 new logs [22-06-2022 23:52:01]24558: WAF :: fetched 1 new logs [22-06-2022 23:54:02]30251: WAF :: fetched 9 new logs [22-06-2022 23:54:02]30252: httpd.conf changed. Refreshing watchlist. [22-06-2022 23:55:01]1493: WAF :: fetched 58 new logs [22-06-2022 23:56:02]5480: httpd.conf changed. Refreshing watchlist. [22-06-2022 23:56:02]5481: WAF :: fetched 87 new logs [22-06-2022 23:57:01]8230: WAF :: fetched 21 new logs [22-06-2022 23:59:01]13393: WAF :: fetched 2 new logs [23-06-2022 00:01:02]19123: WAF :: fetched 4 new logs [23-06-2022 00:01:02]19126: httpd.conf changed. Refreshing watchlist. [23-06-2022 00:01:04]19123: Sending daily report for June 23, 2022 [23-06-2022 00:05:02]29673: WAF :: fetched 2 new logs [23-06-2022 00:05:02]29673: Deleted 0 entries older than 6 MONTH from scanner_logs [23-06-2022 00:05:02]29673: Deleted 0 files from Quarantine [23-06-2022 00:06:02]32325: WAF :: fetched 2 new logs [23-06-2022 00:07:01]2569: WAF :: fetched 6 new logs [23-06-2022 00:08:02]5314: WAF :: fetched 1 new logs [23-06-2022 00:09:01]7954: WAF :: fetched 2 new logs [23-06-2022 00:10:02]10769: WAF :: fetched 2 new logs [23-06-2022 00:12:01]16126: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655953921 [23-06-2022 00:12:01]16126: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 00:12:03]16126: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 00:12:03]16126: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-0012/20220623-001201-YrPaAXF3uRfSnQY1F4FC9QAAAAQ [23-06-2022 00:12:03]16126: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 00:12:04]16126: WAF :: fetched 282 new logs [23-06-2022 00:13:02]18812: WAF :: fetched 1 new logs [23-06-2022 00:14:01]21469: WAF :: fetched 2 new logs [23-06-2022 00:15:02]24284: WAF :: fetched 2 new logs [23-06-2022 00:16:02]27013: WAF :: fetched 2 new logs [23-06-2022 00:18:02]32366: WAF :: fetched 1 new logs [23-06-2022 00:22:01]10670: WAF :: fetched 3 new logs [23-06-2022 00:23:02]13309: WAF :: fetched 29 new logs [23-06-2022 00:24:02]15922: WAF :: fetched 18 new logs [23-06-2022 00:27:02]23856: WAF :: fetched 3 new logs [23-06-2022 00:28:01]26446: WAF :: fetched 2 new logs [23-06-2022 00:29:02]29062: WAF :: fetched 3 new logs [23-06-2022 00:30:02]31751: WAF :: fetched 1 new logs [23-06-2022 00:31:01]2023: WAF :: fetched 2 new logs [23-06-2022 00:32:02]4775: WAF :: fetched 2 new logs [23-06-2022 00:33:01]7401: WAF :: fetched 3 new logs [23-06-2022 00:34:02]10039: WAF :: fetched 1 new logs [23-06-2022 00:36:02]15372: WAF :: fetched 2 new logs [23-06-2022 00:40:01]25856: WAF :: fetched 2 new logs [23-06-2022 00:41:02]28558: WAF :: fetched 2 new logs [23-06-2022 00:41:02]28558: Checking for user cron vulnerabilities [23-06-2022 00:42:01]31147: WAF :: fetched 1 new logs [23-06-2022 00:43:02]1377: WAF :: fetched 3 new logs [23-06-2022 00:44:01]4037: Checking ditributed CMS bruteforce attacks [23-06-2022 00:44:02]4037: WAF :: fetched 2 new logs [23-06-2022 00:45:01]: Checking for software updates [23-06-2022 00:45:01]6789: WAF :: fetched 1 new logs [23-06-2022 00:47:01]12061: WAF :: fetched 1 new logs [23-06-2022 00:48:02]14664: WAF :: fetched 1 new logs [23-06-2022 00:49:02]17242: WAF :: fetched 1 new logs [23-06-2022 00:51:02]22612: WAF :: fetched 2 new logs [23-06-2022 00:53:01]27858: WAF :: fetched 1 new logs [23-06-2022 00:54:02]30523: WAF :: fetched 6 new logs [23-06-2022 00:55:02]1164: WAF :: fetched 3 new logs [23-06-2022 00:55:03]1164: API call failed for url https://api.recaptcha.cloud/add Status : 500 [23-06-2022 00:56:02]4208: WAF :: fetched 1 new logs [23-06-2022 00:58:02]9464: WAF :: fetched 12 new logs [23-06-2022 00:59:01]12019: WAF :: fetched 5 new logs [23-06-2022 01:00:02]14433: WAF :: fetched 2 new logs [23-06-2022 01:01:02]18172: WAF :: fetched 1 new logs [23-06-2022 01:02:01]20998: WAF :: fetched 2 new logs [23-06-2022 01:03:02]23757: WAF :: fetched 1 new logs [23-06-2022 01:04:01]26718: WAF :: fetched 2 new logs [23-06-2022 01:05:02]29651: WAF :: fetched 2 new logs [23-06-2022 01:06:01]32477: WAF :: fetched 2 new logs [23-06-2022 01:07:02]2925: WAF :: fetched 1 new logs [23-06-2022 01:08:01]5858: WAF :: fetched 2 new logs [23-06-2022 01:09:01]8522: WAF :: fetched 7 new logs [23-06-2022 01:10:02]11268: WAF :: fetched 4 new logs [23-06-2022 01:11:01]13955: WAF :: fetched 24 new logs [23-06-2022 01:12:02]16924: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655957522 [23-06-2022 01:12:02]16924: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 01:12:04]16924: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 01:12:04]16924: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-0112/20220623-011202-YrPoEna9qKnsvLGO6W0EOwAAABY [23-06-2022 01:12:04]16924: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 01:12:04]16924: WAF :: fetched 5 new logs [23-06-2022 01:13:01]19529: WAF :: fetched 3 new logs [23-06-2022 01:15:02]25194: WAF :: fetched 3 new logs [23-06-2022 01:17:02]30569: WAF :: fetched 2 new logs [23-06-2022 01:19:02]3690: WAF :: fetched 1 new logs [23-06-2022 01:20:01]6748: WAF :: fetched 1 new logs [23-06-2022 01:21:02]9652: WAF :: fetched 3 new logs [23-06-2022 01:22:01]12436: WAF :: fetched 3 new logs [23-06-2022 01:23:01]15047: WAF :: fetched 2 new logs [23-06-2022 01:24:02]17673: WAF :: fetched 1 new logs [23-06-2022 01:25:01]20427: WAF :: fetched 1 new logs [23-06-2022 01:26:02]23415: WAF :: fetched 1 new logs [23-06-2022 01:27:02]26260: WAF :: fetched 14 new logs [23-06-2022 01:28:01]29088: WAF :: fetched 3 new logs [23-06-2022 01:29:02]31748: WAF :: fetched 2 new logs [23-06-2022 01:30:01]2219: WAF :: fetched 2 new logs [23-06-2022 01:32:02]8186: WAF :: fetched 2 new logs [23-06-2022 01:33:01]10818: WAF :: fetched 1 new logs [23-06-2022 01:34:02]13724: WAF :: fetched 1 new logs [23-06-2022 01:35:02]16738: WAF :: fetched 1 new logs [23-06-2022 01:36:01]19552: WAF :: fetched 2 new logs [23-06-2022 01:37:02]22167: WAF :: fetched 1 new logs [23-06-2022 01:38:02]25017: WAF :: fetched 1 new logs [23-06-2022 01:39:01]27623: WAF :: fetched 1 new logs [23-06-2022 01:40:02]30480: WAF :: fetched 2 new logs [23-06-2022 01:41:02]1079: WAF :: fetched 3 new logs [23-06-2022 01:41:02]1079: Checking for user cron vulnerabilities [23-06-2022 01:42:01]3952: WAF :: fetched 2 new logs [23-06-2022 01:43:02]6782: WAF :: fetched 4 new logs [23-06-2022 01:44:01]9597: Checking ditributed CMS bruteforce attacks [23-06-2022 01:44:01]9597: WAF :: fetched 3 new logs [23-06-2022 01:45:01]: Checking for definition updates [23-06-2022 01:45:02]12749: WAF :: fetched 2 new logs [23-06-2022 01:49:02]23776: WAF :: fetched 3 new logs [23-06-2022 01:50:02]26585: WAF :: fetched 3 new logs [23-06-2022 01:51:01]29483: WAF :: fetched 3 new logs [23-06-2022 01:52:02]32424: WAF :: fetched 3 new logs [23-06-2022 01:53:01]2776: WAF :: fetched 1 new logs [23-06-2022 01:54:01]5492: WAF :: fetched 2 new logs [23-06-2022 01:55:02]8202: WAF :: fetched 1 new logs [23-06-2022 01:56:01]11093: WAF :: fetched 1 new logs [23-06-2022 01:57:02]13788: WAF :: fetched 2 new logs [23-06-2022 01:58:01]16365: WAF :: fetched 1 new logs [23-06-2022 02:00:02]21373: WAF :: fetched 3 new logs [23-06-2022 02:01:01]24258: WAF :: fetched 1 new logs [23-06-2022 02:02:02]27129: WAF :: fetched 10 new logs [23-06-2022 02:03:01]29769: WAF :: fetched 3 new logs [23-06-2022 02:04:02]32438: WAF :: fetched 5 new logs [23-06-2022 02:05:02]3160: WAF :: fetched 10 new logs [23-06-2022 02:06:01]5912: WAF :: fetched 5 new logs [23-06-2022 02:07:02]8558: WAF :: fetched 10 new logs [23-06-2022 02:08:02]11144: WAF :: fetched 8 new logs [23-06-2022 02:09:01]13718: WAF :: fetched 8 new logs [23-06-2022 02:10:02]16464: WAF :: fetched 10 new logs [23-06-2022 02:11:01]19101: WAF :: fetched 6 new logs [23-06-2022 02:12:02]21760: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655961122 [23-06-2022 02:12:02]21760: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 02:12:04]21760: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 02:12:04]21760: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-0212/20220623-021202-YrP2IrCNQb9AxrwI37vPJwAAABA [23-06-2022 02:12:04]21760: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 02:12:05]21760: WAF :: fetched 5 new logs [23-06-2022 02:13:02]24380: WAF :: fetched 7 new logs [23-06-2022 02:14:01]26960: WAF :: fetched 1 new logs [23-06-2022 02:15:02]29705: WAF :: fetched 3 new logs [23-06-2022 02:16:01]32369: WAF :: fetched 2 new logs [23-06-2022 02:17:02]2638: WAF :: fetched 3 new logs [23-06-2022 02:18:01]5362: WAF :: fetched 8 new logs [23-06-2022 02:19:02]8006: WAF :: fetched 7 new logs [23-06-2022 02:20:02]10753: WAF :: fetched 1 new logs [23-06-2022 02:21:01]13445: WAF :: fetched 5 new logs [23-06-2022 02:22:02]16138: WAF :: fetched 2 new logs [23-06-2022 02:24:01]21388: WAF :: fetched 3 new logs [23-06-2022 02:25:02]24123: WAF :: fetched 1 new logs [23-06-2022 02:26:01]26789: WAF :: fetched 4 new logs [23-06-2022 02:27:01]29421: WAF :: fetched 1 new logs [23-06-2022 02:28:02]32093: WAF :: fetched 2 new logs [23-06-2022 02:29:01]2329: WAF :: fetched 3 new logs [23-06-2022 02:30:02]5197: WAF :: fetched 2 new logs [23-06-2022 02:31:02]7855: WAF :: fetched 4 new logs [23-06-2022 02:32:01]10479: WAF :: fetched 1 new logs [23-06-2022 02:34:01]15726: WAF :: fetched 3 new logs [23-06-2022 02:35:01]18434: WAF :: fetched 1 new logs [23-06-2022 02:37:01]23687: WAF :: fetched 3 new logs [23-06-2022 02:38:02]26324: WAF :: fetched 4 new logs [23-06-2022 02:39:01]28884: WAF :: fetched 2 new logs [23-06-2022 02:40:02]31603: WAF :: fetched 1 new logs [23-06-2022 02:41:02]1855: WAF :: fetched 3 new logs [23-06-2022 02:41:02]1855: Checking for user cron vulnerabilities [23-06-2022 02:42:01]4532: WAF :: fetched 1 new logs [23-06-2022 02:44:01]9770: Checking ditributed CMS bruteforce attacks [23-06-2022 02:44:01]9770: WAF :: fetched 1 new logs [23-06-2022 02:46:02]15103: WAF :: fetched 2 new logs [23-06-2022 02:47:01]17683: WAF :: fetched 1 new logs [23-06-2022 02:53:02]1026: Updated license status via CDN [23-06-2022 02:57:01]11664: WAF :: fetched 1 new logs [23-06-2022 02:59:01]16991: WAF :: fetched 1 new logs [23-06-2022 03:00:01]19493: WAF :: fetched 1 new logs [23-06-2022 03:00:24]19493: Found and updated 32 CMS installations [23-06-2022 03:01:02]22663: WAF :: fetched 1 new logs [23-06-2022 03:02:01]25471: WAF :: fetched 31 new logs [23-06-2022 03:02:50]19493: Sending CMS version vulnerability report emails to cpanel users [23-06-2022 03:02:53]19493: Checking wordpress installations for suspicious directories [23-06-2022 03:03:02]28465: WAF :: fetched 2 new logs [23-06-2022 03:04:01]31335: WAF :: fetched 3 new logs [23-06-2022 03:04:24]28501: Sending CMS version vulnerability report emails to cpanel users [23-06-2022 03:04:27]28501: Checking wordpress installations for suspicious directories [23-06-2022 03:06:01]4651: WAF :: fetched 1 new logs [23-06-2022 03:07:01]7275: WAF :: fetched 1 new logs [23-06-2022 03:08:02]9892: WAF :: fetched 2 new logs [23-06-2022 03:10:02]15189: WAF :: fetched 17 new logs [23-06-2022 03:11:01]17835: WAF :: fetched 11 new logs [23-06-2022 03:12:01]18556: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655964721 [23-06-2022 03:12:01]18556: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 03:12:03]18556: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 03:12:03]18556: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-0312/20220623-031201-YrQEMaI8oxpKnrJ1YAwpJAAAAA4 [23-06-2022 03:12:03]18556: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [23-06-2022 03:12:03]18556: WAF :: fetched 1 new logs [23-06-2022 03:14:01]20756: WAF :: fetched 2 new logs [23-06-2022 03:15:02]30281: WAF :: fetched 1 new logs [23-06-2022 03:16:01]520: WAF :: fetched 2 new logs [23-06-2022 03:19:01]8512: WAF :: fetched 3 new logs [23-06-2022 03:21:02]13847: WAF :: fetched 34 new logs [23-06-2022 03:22:01]16471: WAF :: fetched 1 new logs [23-06-2022 03:24:01]21497: WAF :: fetched 1 new logs [23-06-2022 03:26:02]26958: WAF :: fetched 1 new logs [23-06-2022 03:27:01]29542: WAF :: fetched 3 new logs [23-06-2022 03:28:02]32181: WAF :: fetched 2 new logs [23-06-2022 03:29:01]2372: WAF :: fetched 5 new logs [23-06-2022 03:30:01]5132: WAF :: fetched 3 new logs [23-06-2022 03:31:02]7865: WAF :: fetched 2 new logs [23-06-2022 03:32:01]10499: WAF :: fetched 2 new logs [23-06-2022 03:33:01]13105: WAF :: fetched 2 new logs [23-06-2022 03:34:02]15762: WAF :: fetched 1 new logs [23-06-2022 03:35:01]18429: WAF :: fetched 2 new logs [23-06-2022 03:36:02]21203: WAF :: fetched 2 new logs [23-06-2022 03:39:02]29050: WAF :: fetched 3 new logs [23-06-2022 03:41:01]2098: Checking for user cron vulnerabilities [23-06-2022 03:43:01]7484: WAF :: fetched 2 new logs [23-06-2022 03:44:01]10147: Checking ditributed CMS bruteforce attacks [23-06-2022 03:45:02]12776: WAF :: fetched 1 new logs [23-06-2022 03:46:02]15516: WAF :: fetched 1 new logs [23-06-2022 03:48:02]20826: WAF :: fetched 1 new logs [23-06-2022 03:53:02]1743: WAF :: fetched 1 new logs [23-06-2022 03:54:01]4460: WAF :: fetched 1 new logs [23-06-2022 03:55:01]7116: WAF :: fetched 6 new logs [23-06-2022 03:58:02]15156: WAF :: fetched 12 new logs [23-06-2022 03:59:01]17744: WAF :: fetched 1 new logs [23-06-2022 04:01:02]23326: WAF :: fetched 1 new logs [23-06-2022 04:02:01]25972: WAF :: fetched 1 new logs [23-06-2022 04:03:02]28618: WAF :: fetched 1 new logs [23-06-2022 04:05:01]1468: WAF :: fetched 3 new logs [23-06-2022 04:07:01]6967: WAF :: fetched 1 new logs [23-06-2022 04:08:02]9619: WAF :: fetched 1 new logs [23-06-2022 04:09:01]12244: WAF :: fetched 3 new logs [23-06-2022 04:10:02]14915: WAF :: fetched 3 new logs [23-06-2022 04:11:02]17644: WAF :: fetched 3 new logs [23-06-2022 04:12:01]20272: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655968321 [23-06-2022 04:12:01]20272: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 04:12:03]20272: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 04:12:04]20272: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-0412/20220623-041201-YrQSQdSPgX56uNNdXWfTdwAAAAk [23-06-2022 04:12:04]20272: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 04:12:04]20272: WAF :: fetched 79 new logs [23-06-2022 04:13:01]22896: WAF :: fetched 4 new logs [23-06-2022 04:14:02]25539: WAF :: fetched 1 new logs [23-06-2022 04:16:02]31435: WAF :: fetched 1 new logs [23-06-2022 04:17:01]2310: WAF :: fetched 1 new logs [23-06-2022 04:18:02]5242: WAF :: fetched 1 new logs [23-06-2022 04:19:01]7914: WAF :: fetched 1 new logs [23-06-2022 04:20:01]10564: WAF :: fetched 3 new logs [23-06-2022 04:21:02]13313: WAF :: fetched 1 new logs [23-06-2022 04:23:02]18513: WAF :: fetched 2 new logs [23-06-2022 04:24:01]21177: WAF :: fetched 2 new logs [23-06-2022 04:26:02]26851: WAF :: fetched 1 new logs [23-06-2022 04:29:01]3114: WAF :: fetched 1 new logs [23-06-2022 04:30:01]6179: WAF :: fetched 1 new logs [23-06-2022 04:31:01]8937: WAF :: fetched 4 new logs [23-06-2022 04:32:02]11706: WAF :: fetched 1 new logs [23-06-2022 04:34:01]17015: WAF :: fetched 1 new logs [23-06-2022 04:35:02]19693: WAF :: fetched 4 new logs [23-06-2022 04:36:01]22437: WAF :: fetched 6 new logs [23-06-2022 04:41:01]4016: Checking for user cron vulnerabilities [23-06-2022 04:43:01]9358: WAF :: fetched 1 new logs [23-06-2022 04:44:02]12036: Checking ditributed CMS bruteforce attacks [23-06-2022 04:44:02]12036: WAF :: fetched 1 new logs [23-06-2022 04:45:02]14662: WAF :: fetched 1 new logs [23-06-2022 04:49:02]25345: WAF :: fetched 1 new logs [23-06-2022 04:50:02]27964: WAF :: fetched 2 new logs [23-06-2022 04:57:02]15103: WAF :: fetched 2 new logs [23-06-2022 04:58:01]17926: WAF :: fetched 1 new logs [23-06-2022 04:59:02]20804: WAF :: fetched 1 new logs [23-06-2022 05:01:41]26826: Starting daily scan on files updated in last 24 hrs [23-06-2022 05:04:02]2811: WAF :: fetched 27 new logs [23-06-2022 05:05:02]5537: WAF :: fetched 2 new logs [23-06-2022 05:07:01]10947: WAF :: fetched 1 new logs [23-06-2022 05:08:01]13575: WAF :: fetched 5 new logs [23-06-2022 05:09:02]16217: WAF :: fetched 2 new logs [23-06-2022 05:10:01]18866: WAF :: fetched 1 new logs [23-06-2022 05:11:02]21613: WAF :: fetched 2 new logs [23-06-2022 05:12:02]24216: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655971922 [23-06-2022 05:12:02]24216: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 05:12:04]24216: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 05:12:04]24216: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-0512/20220623-051202-YrQgUhtas5Wbm4URAiFvaAAAAA4 [23-06-2022 05:12:04]24216: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 05:12:04]24216: WAF :: fetched 2 new logs [23-06-2022 05:13:01]26864: WAF :: fetched 2 new logs [23-06-2022 05:16:02]2509: WAF :: fetched 1 new logs [23-06-2022 05:17:01]5212: WAF :: fetched 1 new logs [23-06-2022 05:18:02]7887: WAF :: fetched 3 new logs [23-06-2022 05:19:01]10485: WAF :: fetched 1 new logs [23-06-2022 05:20:02]13159: WAF :: fetched 1 new logs [23-06-2022 05:21:02]15921: WAF :: fetched 2 new logs [23-06-2022 05:22:01]18570: WAF :: fetched 3 new logs [23-06-2022 05:23:02]21220: WAF :: fetched 1 new logs [23-06-2022 05:29:01]4825: WAF :: fetched 3 new logs [23-06-2022 05:30:01]7469: WAF :: fetched 1 new logs [23-06-2022 05:32:01]12692: WAF :: fetched 1 new logs [23-06-2022 05:36:02]23548: WAF :: fetched 2 new logs [23-06-2022 05:37:01]26160: WAF :: fetched 1 new logs [23-06-2022 05:38:02]28834: WAF :: fetched 1 new logs [23-06-2022 05:41:02]4616: WAF :: fetched 1 new logs [23-06-2022 05:41:02]4616: Checking for user cron vulnerabilities [23-06-2022 05:42:01]7250: WAF :: fetched 3 new logs [23-06-2022 05:43:02]9896: WAF :: fetched 6 new logs [23-06-2022 05:44:01]12526: Checking ditributed CMS bruteforce attacks [23-06-2022 05:44:01]12526: WAF :: fetched 7 new logs [23-06-2022 05:45:01]15156: WAF :: fetched 1 new logs [23-06-2022 05:46:02]17913: WAF :: fetched 4 new logs [23-06-2022 05:47:01]20522: WAF :: fetched 1 new logs [23-06-2022 05:48:02]23164: WAF :: fetched 2 new logs [23-06-2022 05:49:01]25780: WAF :: fetched 4 new logs [23-06-2022 05:50:02]28467: WAF :: fetched 2 new logs [23-06-2022 05:51:01]31180: WAF :: fetched 3 new logs [23-06-2022 05:52:02]1499: WAF :: fetched 5 new logs [23-06-2022 05:53:02]4156: WAF :: fetched 1 new logs [23-06-2022 05:54:01]6838: WAF :: fetched 2 new logs [23-06-2022 05:55:02]9502: WAF :: fetched 3 new logs [23-06-2022 05:56:01]12251: WAF :: fetched 4 new logs [23-06-2022 05:57:01]14878: WAF :: fetched 3 new logs [23-06-2022 05:58:02]17502: WAF :: fetched 1 new logs [23-06-2022 06:00:02]22467: WAF :: fetched 6 new logs [23-06-2022 06:01:02]25670: WAF :: fetched 12 new logs [23-06-2022 06:02:01]28321: WAF :: fetched 1 new logs [23-06-2022 06:03:02]31001: WAF :: fetched 2 new logs [23-06-2022 06:05:02]3918: WAF :: fetched 1 new logs [23-06-2022 06:06:02]6716: WAF :: fetched 1 new logs [23-06-2022 06:07:01]9356: WAF :: fetched 1 new logs [23-06-2022 06:08:01]11983: WAF :: fetched 1 new logs [23-06-2022 06:09:01]14614: WAF :: fetched 13 new logs [23-06-2022 06:10:02]17278: WAF :: fetched 8 new logs [23-06-2022 06:11:01]19988: WAF :: fetched 7 new logs [23-06-2022 06:12:02]22642: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655975522 [23-06-2022 06:12:02]22642: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 06:12:04]22642: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 06:12:04]22642: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-0612/20220623-061202-YrQuYvG4a1_HsYZga4b3nQAAABE [23-06-2022 06:12:04]22642: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 06:13:02]25262: WAF :: fetched 3 new logs [23-06-2022 06:15:02]30524: WAF :: fetched 1 new logs [23-06-2022 06:17:01]3580: WAF :: fetched 2 new logs [23-06-2022 06:18:01]6317: WAF :: fetched 5 new logs [23-06-2022 06:19:01]8962: WAF :: fetched 1 new logs [23-06-2022 06:20:01]11608: WAF :: fetched 14 new logs [23-06-2022 06:21:01]14357: WAF :: fetched 1 new logs [23-06-2022 06:22:01]16984: WAF :: fetched 1 new logs [23-06-2022 06:23:02]19650: WAF :: fetched 4 new logs [23-06-2022 06:24:02]22258: WAF :: fetched 2 new logs [23-06-2022 06:25:02]24900: WAF :: fetched 1 new logs [23-06-2022 06:26:02]27662: WAF :: fetched 4 new logs [23-06-2022 06:27:02]30436: WAF :: fetched 4 new logs [23-06-2022 06:29:01]3337: WAF :: fetched 1 new logs [23-06-2022 06:30:02]6104: WAF :: fetched 28 new logs [23-06-2022 06:31:02]8827: WAF :: fetched 1 new logs [23-06-2022 06:32:02]11506: WAF :: fetched 1 new logs [23-06-2022 06:34:01]16787: WAF :: fetched 2 new logs [23-06-2022 06:35:01]19450: WAF :: fetched 1 new logs [23-06-2022 06:36:01]22222: WAF :: fetched 2 new logs [23-06-2022 06:37:01]24853: WAF :: fetched 1 new logs [23-06-2022 06:38:01]27479: WAF :: fetched 2 new logs [23-06-2022 06:39:01]30100: WAF :: fetched 2 new logs [23-06-2022 06:40:01]307: WAF :: fetched 1 new logs [23-06-2022 06:41:01]3167: Checking for user cron vulnerabilities [23-06-2022 06:42:01]5898: WAF :: fetched 2 new logs [23-06-2022 06:44:01]11182: Checking ditributed CMS bruteforce attacks [23-06-2022 06:44:01]11182: WAF :: fetched 2 new logs [23-06-2022 06:46:02]16563: WAF :: fetched 3 new logs [23-06-2022 06:49:02]24454: WAF :: fetched 1 new logs [23-06-2022 06:51:02]29811: WAF :: fetched 1 new logs [23-06-2022 06:54:02]5431: WAF :: fetched 1 new logs [23-06-2022 06:55:02]8084: WAF :: fetched 1 new logs [23-06-2022 06:57:02]13499: WAF :: fetched 1 new logs [23-06-2022 06:58:02]16106: WAF :: fetched 1 new logs [23-06-2022 06:59:01]18739: WAF :: fetched 1 new logs [23-06-2022 07:00:02]21088: WAF :: fetched 3 new logs [23-06-2022 07:01:02]24324: WAF :: fetched 1 new logs [23-06-2022 07:02:02]26974: WAF :: fetched 1 new logs [23-06-2022 07:03:02]29640: WAF :: fetched 4 new logs [23-06-2022 07:06:02]5419: WAF :: fetched 2 new logs [23-06-2022 07:07:02]8083: WAF :: fetched 3 new logs [23-06-2022 07:08:02]10785: WAF :: fetched 4 new logs [23-06-2022 07:10:02]16108: WAF :: fetched 1 new logs [23-06-2022 07:12:02]21527: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655979122 [23-06-2022 07:12:02]21527: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 07:12:04]21527: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 07:12:04]21527: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-0712/20220623-071202-YrQ8cg7vLSlb1LUePrRLWwAAAAc [23-06-2022 07:12:04]21527: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 07:12:04]21527: WAF :: fetched 1 new logs [23-06-2022 07:13:02]24213: WAF :: fetched 6 new logs [23-06-2022 07:14:02]26856: WAF :: fetched 1 new logs [23-06-2022 07:15:01]29487: WAF :: fetched 2 new logs [23-06-2022 07:17:01]2529: WAF :: fetched 2 new logs [23-06-2022 07:18:01]5264: WAF :: fetched 3 new logs [23-06-2022 07:21:01]13371: WAF :: fetched 3 new logs [23-06-2022 07:22:01]16004: WAF :: fetched 2 new logs [23-06-2022 07:23:01]18638: WAF :: fetched 4 new logs [23-06-2022 07:28:02]32043: WAF :: fetched 6 new logs [23-06-2022 07:29:02]2309: WAF :: fetched 8 new logs [23-06-2022 07:30:02]5060: WAF :: fetched 10 new logs [23-06-2022 07:31:01]7468: WAF :: fetched 7 new logs [23-06-2022 07:32:01]10513: WAF :: fetched 5 new logs [23-06-2022 07:33:01]13180: WAF :: fetched 5 new logs [23-06-2022 07:34:01]15828: WAF :: fetched 1 new logs [23-06-2022 07:35:01]18444: WAF :: fetched 2 new logs [23-06-2022 07:37:02]23857: WAF :: fetched 1 new logs [23-06-2022 07:38:02]26501: WAF :: fetched 5 new logs [23-06-2022 07:39:01]29075: WAF :: fetched 1 new logs [23-06-2022 07:40:01]31784: WAF :: fetched 2 new logs [23-06-2022 07:41:01]2237: WAF :: fetched 2 new logs [23-06-2022 07:41:01]2237: Checking for user cron vulnerabilities [23-06-2022 07:44:01]10330: Checking ditributed CMS bruteforce attacks [23-06-2022 07:44:02]10330: WAF :: fetched 2 new logs [23-06-2022 07:45:02]: Checking for definition updates [23-06-2022 07:45:02]13034: WAF :: fetched 3 new logs [23-06-2022 07:47:02]18473: WAF :: fetched 1 new logs [23-06-2022 07:48:01]21155: WAF :: fetched 1 new logs [23-06-2022 07:49:01]23773: WAF :: fetched 1 new logs [23-06-2022 07:50:02]26447: WAF :: fetched 1 new logs [23-06-2022 07:52:02]31855: WAF :: fetched 2 new logs [23-06-2022 07:53:01]2103: WAF :: fetched 2 new logs [23-06-2022 07:54:02]4905: WAF :: fetched 2 new logs [23-06-2022 07:55:01]7549: WAF :: fetched 1 new logs [23-06-2022 07:57:01]12968: WAF :: fetched 3 new logs [23-06-2022 07:58:02]15655: WAF :: fetched 6 new logs [23-06-2022 08:00:01]20647: WAF :: fetched 1 new logs [23-06-2022 08:01:02]23975: WAF :: fetched 2 new logs [23-06-2022 08:03:01]29295: WAF :: fetched 2 new logs [23-06-2022 08:04:02]32032: WAF :: fetched 5 new logs [23-06-2022 08:05:01]2297: WAF :: fetched 2 new logs [23-06-2022 08:06:02]5284: WAF :: fetched 12 new logs [23-06-2022 08:07:02]7933: WAF :: fetched 4 new logs [23-06-2022 08:10:02]15852: WAF :: fetched 2 new logs [23-06-2022 08:12:02]21339: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655982722 [23-06-2022 08:12:02]21339: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 08:12:04]21339: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 08:12:04]21339: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-0812/20220623-081202-YrRKgpFoXtxXA9uT5dviWQAAAAU [23-06-2022 08:12:04]21339: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 08:12:04]21339: WAF :: fetched 1 new logs [23-06-2022 08:13:01]23958: WAF :: fetched 1 new logs [23-06-2022 08:16:01]32060: WAF :: fetched 1 new logs [23-06-2022 08:17:02]2365: WAF :: fetched 1 new logs [23-06-2022 08:18:01]5119: WAF :: fetched 1 new logs [23-06-2022 08:21:01]13251: WAF :: fetched 1 new logs [23-06-2022 08:24:02]21235: WAF :: fetched 1 new logs [23-06-2022 08:25:02]23927: WAF :: fetched 2 new logs [23-06-2022 08:26:01]26721: WAF :: fetched 3 new logs [23-06-2022 08:27:02]29393: WAF :: fetched 1 new logs [23-06-2022 08:32:02]10741: WAF :: fetched 2 new logs [23-06-2022 08:33:01]13013: WAF :: fetched 2 new logs [23-06-2022 08:34:02]16057: WAF :: fetched 26 new logs [23-06-2022 08:35:01]18880: WAF :: fetched 6 new logs [23-06-2022 08:36:02]22006: WAF :: fetched 3 new logs [23-06-2022 08:37:02]24711: WAF :: fetched 1 new logs [23-06-2022 08:38:01]27403: WAF :: fetched 3 new logs [23-06-2022 08:39:02]30191: WAF :: fetched 2 new logs [23-06-2022 08:40:01]356: WAF :: fetched 3 new logs [23-06-2022 08:41:01]3176: WAF :: fetched 1 new logs [23-06-2022 08:41:01]3176: Checking for user cron vulnerabilities [23-06-2022 08:42:02]6085: WAF :: fetched 2 new logs [23-06-2022 08:44:01]11440: Checking ditributed CMS bruteforce attacks [23-06-2022 08:45:02]14190: WAF :: fetched 2 new logs [23-06-2022 08:46:02]16952: WAF :: fetched 2 new logs [23-06-2022 08:47:01]19722: WAF :: fetched 29 new logs [23-06-2022 08:48:02]22438: WAF :: fetched 3 new logs [23-06-2022 08:49:01]24944: WAF :: fetched 1 new logs [23-06-2022 08:50:02]27919: WAF :: fetched 1 new logs [23-06-2022 08:52:02]1025: WAF :: fetched 3 new logs [23-06-2022 08:53:01]3812: WAF :: fetched 2 new logs [23-06-2022 08:54:02]6532: WAF :: fetched 7 new logs [23-06-2022 08:55:01]9203: WAF :: fetched 1 new logs [23-06-2022 08:56:01]11952: WAF :: fetched 4 new logs [23-06-2022 08:57:02]14740: WAF :: fetched 3 new logs [23-06-2022 08:59:01]20053: WAF :: fetched 2 new logs [23-06-2022 09:00:02]22452: WAF :: fetched 3 new logs [23-06-2022 09:01:02]25609: WAF :: fetched 7 new logs [23-06-2022 09:02:01]28436: WAF :: fetched 4 new logs [23-06-2022 09:03:02]31134: WAF :: fetched 9 new logs [23-06-2022 09:04:01]1463: WAF :: fetched 6 new logs [23-06-2022 09:05:02]4341: WAF :: fetched 7 new logs [23-06-2022 09:06:01]7176: WAF :: fetched 6 new logs [23-06-2022 09:10:01]18004: WAF :: fetched 1 new logs [23-06-2022 09:11:01]20829: WAF :: fetched 2 new logs [23-06-2022 09:12:02]23642: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655986322 [23-06-2022 09:12:02]23642: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 09:12:04]23642: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 09:12:04]23642: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-0912/20220623-091202-YrRYksxrhk374lc1RfBjdgAAABU [23-06-2022 09:12:04]23642: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 09:12:05]23642: WAF :: fetched 2 new logs [23-06-2022 09:13:01]26277: WAF :: fetched 2 new logs [23-06-2022 09:15:02]31804: WAF :: fetched 5 new logs [23-06-2022 09:16:01]2176: WAF :: fetched 1 new logs [23-06-2022 09:17:02]5049: WAF :: fetched 2 new logs [23-06-2022 09:18:01]7761: WAF :: fetched 5 new logs [23-06-2022 09:19:02]10495: WAF :: fetched 5 new logs [23-06-2022 09:20:02]13184: WAF :: fetched 1 new logs [23-06-2022 09:23:01]21461: WAF :: fetched 1 new logs [23-06-2022 09:24:02]24209: WAF :: fetched 1 new logs [23-06-2022 09:25:02]26889: WAF :: fetched 1 new logs [23-06-2022 09:26:01]29607: WAF :: fetched 2 new logs [23-06-2022 09:27:02]32438: WAF :: fetched 2 new logs [23-06-2022 09:28:02]2768: WAF :: fetched 1 new logs [23-06-2022 09:29:01]5369: WAF :: fetched 1 new logs [23-06-2022 09:30:02]8302: WAF :: fetched 1 new logs [23-06-2022 09:31:01]10624: WAF :: fetched 1 new logs [23-06-2022 09:32:02]13797: WAF :: fetched 2 new logs [23-06-2022 09:33:01]16444: WAF :: fetched 1 new logs [23-06-2022 09:37:02]27390: WAF :: fetched 1 new logs [23-06-2022 09:38:02]30116: WAF :: fetched 5 new logs [23-06-2022 09:39:01]346: WAF :: fetched 1 new logs [23-06-2022 09:41:01]5986: Checking for user cron vulnerabilities [23-06-2022 09:42:01]8777: WAF :: fetched 5 new logs [23-06-2022 09:43:02]11635: WAF :: fetched 7 new logs [23-06-2022 09:44:01]14338: Checking ditributed CMS bruteforce attacks [23-06-2022 09:44:01]14338: WAF :: fetched 2 new logs [23-06-2022 09:45:02]17078: WAF :: fetched 4 new logs [23-06-2022 09:46:02]19945: WAF :: fetched 5 new logs [23-06-2022 09:47:01]22715: WAF :: fetched 2 new logs [23-06-2022 09:48:02]25423: WAF :: fetched 2 new logs [23-06-2022 09:49:01]28113: WAF :: fetched 2 new logs [23-06-2022 09:50:02]30869: WAF :: fetched 3 new logs [23-06-2022 09:51:02]1263: WAF :: fetched 6 new logs [23-06-2022 09:52:02]4080: WAF :: fetched 5 new logs [23-06-2022 09:53:01]6859: WAF :: fetched 2 new logs [23-06-2022 09:54:01]9603: WAF :: fetched 2 new logs [23-06-2022 09:57:02]17955: WAF :: fetched 1 new logs [23-06-2022 09:58:01]20750: WAF :: fetched 2 new logs [23-06-2022 10:00:02]25924: WAF :: fetched 2 new logs [23-06-2022 10:01:01]29158: WAF :: fetched 2 new logs [23-06-2022 10:06:01]10745: httpd.conf changed. Refreshing watchlist. [23-06-2022 10:06:01]10746: WAF :: fetched 1 new logs [23-06-2022 10:07:02]13610: WAF :: fetched 3 new logs [23-06-2022 10:08:02]16414: WAF :: fetched 1 new logs [23-06-2022 10:08:02]16415: httpd.conf changed. Refreshing watchlist. [23-06-2022 10:09:01]19207: WAF :: fetched 8 new logs [23-06-2022 10:10:02]22038: WAF :: fetched 2 new logs [23-06-2022 10:11:01]24812: WAF :: fetched 2 new logs [23-06-2022 10:12:01]27627: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655989921 [23-06-2022 10:12:01]27627: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 10:12:03]27627: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 10:12:03]27627: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-1012/20220623-101201-YrRmoZAR4DWZBwrvEe5_DwAAAAs [23-06-2022 10:12:03]27627: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 10:12:04]27627: WAF :: fetched 4 new logs [23-06-2022 10:13:02]30337: WAF :: fetched 7 new logs [23-06-2022 10:14:01]598: WAF :: fetched 1 new logs [23-06-2022 10:15:02]3419: WAF :: fetched 2 new logs [23-06-2022 10:16:02]6293: WAF :: fetched 2 new logs [23-06-2022 10:17:01]9104: WAF :: fetched 3 new logs [23-06-2022 10:18:02]11814: WAF :: fetched 5 new logs [23-06-2022 10:19:01]14488: WAF :: fetched 6 new logs [23-06-2022 10:22:01]22825: WAF :: fetched 1 new logs [23-06-2022 10:24:02]28268: WAF :: fetched 1 new logs [23-06-2022 10:26:02]1526: WAF :: fetched 1 new logs [23-06-2022 10:27:01]4506: WAF :: fetched 1 new logs [23-06-2022 10:28:02]7238: WAF :: fetched 2 new logs [23-06-2022 10:29:02]9916: WAF :: fetched 6 new logs [23-06-2022 10:30:01]12646: WAF :: fetched 2 new logs [23-06-2022 10:32:01]18298: WAF :: fetched 2 new logs [23-06-2022 10:33:01]21053: WAF :: fetched 1 new logs [23-06-2022 10:34:02]23807: WAF :: fetched 1 new logs [23-06-2022 10:35:01]26486: WAF :: fetched 3 new logs [23-06-2022 10:36:01]29318: WAF :: fetched 9 new logs [23-06-2022 10:37:02]32163: WAF :: fetched 1 new logs [23-06-2022 10:38:01]2500: WAF :: fetched 2 new logs [23-06-2022 10:39:02]5302: WAF :: fetched 3 new logs [23-06-2022 10:40:01]8015: WAF :: fetched 3 new logs [23-06-2022 10:41:01]10878: Checking for user cron vulnerabilities [23-06-2022 10:43:01]16442: WAF :: fetched 2 new logs [23-06-2022 10:44:01]19216: Checking ditributed CMS bruteforce attacks [23-06-2022 10:44:01]19216: WAF :: fetched 1 new logs [23-06-2022 10:45:02]21970: WAF :: fetched 1 new logs [23-06-2022 10:46:01]24754: WAF :: fetched 2 new logs [23-06-2022 10:47:01]27544: WAF :: fetched 1 new logs [23-06-2022 10:48:02]30221: WAF :: fetched 2 new logs [23-06-2022 10:49:02]568: WAF :: fetched 1 new logs [23-06-2022 10:50:01]3383: WAF :: fetched 1 new logs [23-06-2022 10:51:02]6300: WAF :: fetched 1 new logs [23-06-2022 10:53:01]11880: WAF :: fetched 3 new logs [23-06-2022 10:54:02]14630: WAF :: fetched 3 new logs [23-06-2022 10:55:01]17398: WAF :: fetched 1 new logs [23-06-2022 10:56:02]20307: WAF :: fetched 2 new logs [23-06-2022 10:57:01]23160: WAF :: fetched 1 new logs [23-06-2022 10:59:02]28748: WAF :: fetched 24 new logs [23-06-2022 11:00:01]31298: WAF :: fetched 3 new logs [23-06-2022 11:03:02]8115: WAF :: fetched 1 new logs [23-06-2022 11:04:01]10855: WAF :: fetched 4 new logs [23-06-2022 11:05:02]13669: WAF :: fetched 1 new logs [23-06-2022 11:06:02]16517: WAF :: fetched 2 new logs [23-06-2022 11:07:01]19368: WAF :: fetched 1 new logs [23-06-2022 11:07:51]19527: Performed RBL check for 23.111.136.34. [23-06-2022 11:08:02]22221: WAF :: fetched 1 new logs [23-06-2022 11:09:01]25025: WAF :: fetched 4 new logs [23-06-2022 11:10:02]27864: WAF :: fetched 1 new logs [23-06-2022 11:11:01]30519: WAF :: fetched 2 new logs [23-06-2022 11:12:02]1156: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655993522 [23-06-2022 11:12:02]1156: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 11:12:04]1156: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 11:12:04]1156: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-1112/20220623-111202-YrR0sojMl98vHDn-H6TsVwAAACs [23-06-2022 11:12:04]1156: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 11:12:04]1156: WAF :: fetched 2 new logs [23-06-2022 11:13:01]3972: WAF :: fetched 5 new logs [23-06-2022 11:14:02]6768: WAF :: fetched 3 new logs [23-06-2022 11:15:01]9491: WAF :: fetched 3 new logs [23-06-2022 11:16:02]12318: WAF :: fetched 5 new logs [23-06-2022 11:17:02]15127: WAF :: fetched 2 new logs [23-06-2022 11:19:02]20629: WAF :: fetched 1 new logs [23-06-2022 11:20:01]23415: WAF :: fetched 1 new logs [23-06-2022 11:22:02]29186: WAF :: fetched 1 new logs [23-06-2022 11:23:01]31865: WAF :: fetched 6 new logs [23-06-2022 11:24:02]2290: WAF :: fetched 7 new logs [23-06-2022 11:25:01]5132: WAF :: fetched 3 new logs [23-06-2022 11:26:02]7986: WAF :: fetched 3 new logs [23-06-2022 11:27:02]10825: WAF :: fetched 18 new logs [23-06-2022 11:28:01]13408: WAF :: fetched 1 new logs [23-06-2022 11:30:01]19153: WAF :: fetched 1 new logs [23-06-2022 11:31:01]21991: WAF :: fetched 2 new logs [23-06-2022 11:32:02]24873: WAF :: fetched 3 new logs [23-06-2022 11:33:01]27577: WAF :: fetched 3 new logs [23-06-2022 11:34:02]30350: WAF :: fetched 8 new logs [23-06-2022 11:35:01]645: WAF :: fetched 3 new logs [23-06-2022 11:37:02]6459: WAF :: fetched 3 new logs [23-06-2022 11:38:01]9182: WAF :: fetched 1 new logs [23-06-2022 11:39:02]11987: WAF :: fetched 1 new logs [23-06-2022 11:40:02]14746: WAF :: fetched 7 new logs [23-06-2022 11:41:01]17529: WAF :: fetched 4 new logs [23-06-2022 11:41:01]17529: Checking for user cron vulnerabilities [23-06-2022 11:43:01]23059: WAF :: fetched 1 new logs [23-06-2022 11:44:02]25823: Checking ditributed CMS bruteforce attacks [23-06-2022 11:44:02]25823: WAF :: fetched 5 new logs [23-06-2022 11:45:02]28530: WAF :: fetched 1 new logs [23-06-2022 11:46:01]31299: WAF :: fetched 2 new logs [23-06-2022 11:47:02]1732: WAF :: fetched 1 new logs [23-06-2022 11:48:02]4540: WAF :: fetched 2 new logs [23-06-2022 11:49:01]7311: WAF :: fetched 2 new logs [23-06-2022 11:50:02]10125: WAF :: fetched 2 new logs [23-06-2022 11:51:01]12869: WAF :: fetched 3 new logs [23-06-2022 11:53:01]18351: WAF :: fetched 1 new logs [23-06-2022 11:54:02]21081: WAF :: fetched 3 new logs [23-06-2022 11:55:02]23819: WAF :: fetched 1 new logs [23-06-2022 11:56:01]26593: WAF :: fetched 1 new logs [23-06-2022 12:01:02]8155: WAF :: fetched 1 new logs [23-06-2022 12:02:02]10905: WAF :: fetched 2 new logs [23-06-2022 12:03:01]13559: WAF :: fetched 1 new logs [23-06-2022 12:04:02]16313: WAF :: fetched 1 new logs [23-06-2022 12:05:02]19040: WAF :: fetched 2 new logs [23-06-2022 12:06:01]21816: WAF :: fetched 1 new logs [23-06-2022 12:07:02]24612: WAF :: fetched 2 new logs [23-06-2022 12:08:01]27244: WAF :: fetched 2 new logs [23-06-2022 12:10:02]32643: WAF :: fetched 3 new logs [23-06-2022 12:11:01]3057: WAF :: fetched 5 new logs [23-06-2022 12:12:01]5920: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1655997121 [23-06-2022 12:12:01]5920: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 12:12:03]5920: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 12:12:04]5920: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-1212/20220623-121201-YrSCwSZx8qSulzSH16ycaAAAAAI [23-06-2022 12:12:04]5920: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 12:12:04]5920: WAF :: fetched 4 new logs [23-06-2022 12:13:01]8631: WAF :: fetched 1 new logs [23-06-2022 12:14:02]11318: WAF :: fetched 1 new logs [23-06-2022 12:15:01]14327: WAF :: fetched 3 new logs [23-06-2022 12:16:02]17598: WAF :: fetched 2 new logs [23-06-2022 12:17:02]20391: WAF :: fetched 3 new logs [23-06-2022 12:19:02]25835: WAF :: fetched 4 new logs [23-06-2022 12:20:01]28580: WAF :: fetched 5 new logs [23-06-2022 12:21:02]31344: WAF :: fetched 1 new logs [23-06-2022 12:22:02]1768: WAF :: fetched 4 new logs [23-06-2022 12:24:02]7327: WAF :: fetched 3 new logs [23-06-2022 12:25:02]9999: WAF :: fetched 2 new logs [23-06-2022 12:26:01]12703: WAF :: fetched 2 new logs [23-06-2022 12:27:02]15544: WAF :: fetched 1 new logs [23-06-2022 12:28:02]18241: WAF :: fetched 3 new logs [23-06-2022 12:29:01]20948: WAF :: fetched 4 new logs [23-06-2022 12:30:02]23653: WAF :: fetched 1 new logs [23-06-2022 12:31:02]26386: WAF :: fetched 3 new logs [23-06-2022 12:32:01]29211: WAF :: fetched 2 new logs [23-06-2022 12:33:02]31920: WAF :: fetched 2 new logs [23-06-2022 12:35:02]5009: WAF :: fetched 2 new logs [23-06-2022 12:36:01]7620: WAF :: fetched 2 new logs [23-06-2022 12:37:02]10531: WAF :: fetched 9 new logs [23-06-2022 12:38:01]13179: WAF :: fetched 17 new logs [23-06-2022 12:39:02]15856: WAF :: fetched 17 new logs [23-06-2022 12:40:01]18544: WAF :: fetched 12 new logs [23-06-2022 12:41:01]21344: WAF :: fetched 6 new logs [23-06-2022 12:41:01]21344: Checking for user cron vulnerabilities [23-06-2022 12:42:02]24119: WAF :: fetched 9 new logs [23-06-2022 12:43:01]26771: WAF :: fetched 2 new logs [23-06-2022 12:44:01]29434: Checking ditributed CMS bruteforce attacks [23-06-2022 12:44:01]29434: WAF :: fetched 2 new logs [23-06-2022 12:45:01]: Checking for software updates [23-06-2022 12:45:02]32128: WAF :: fetched 1 new logs [23-06-2022 12:46:01]2454: WAF :: fetched 12 new logs [23-06-2022 12:47:02]5338: WAF :: fetched 8 new logs [23-06-2022 12:48:01]8003: WAF :: fetched 1 new logs [23-06-2022 12:51:01]16074: WAF :: fetched 4 new logs [23-06-2022 12:52:02]18870: WAF :: fetched 1 new logs [23-06-2022 12:53:01]21531: WAF :: fetched 5 new logs [23-06-2022 12:54:01]24176: WAF :: fetched 2 new logs [23-06-2022 12:55:02]26890: WAF :: fetched 4 new logs [23-06-2022 12:56:01]29645: WAF :: fetched 29 new logs [23-06-2022 12:57:02]32451: WAF :: fetched 2 new logs [23-06-2022 12:58:02]2712: WAF :: fetched 5 new logs [23-06-2022 13:00:02]7868: WAF :: fetched 3 new logs [23-06-2022 13:01:01]11040: WAF :: fetched 5 new logs [23-06-2022 13:04:01]19240: WAF :: fetched 2 new logs [23-06-2022 13:06:01]24659: WAF :: fetched 1 new logs [23-06-2022 13:07:01]27397: WAF :: fetched 1 new logs [23-06-2022 13:08:02]30042: WAF :: fetched 4 new logs [23-06-2022 13:10:01]3004: WAF :: fetched 2 new logs [23-06-2022 13:11:02]5847: WAF :: fetched 4 new logs [23-06-2022 13:12:02]8551: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656000722 [23-06-2022 13:12:02]8551: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 13:12:04]8551: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 13:12:04]8551: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-1312/20220623-131202-YrSQ0tqlT_0uM2_j0zWJ8QAAACc [23-06-2022 13:12:04]8551: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 13:14:01]13896: WAF :: fetched 6 new logs [23-06-2022 13:15:02]16584: WAF :: fetched 2 new logs [23-06-2022 13:16:02]19302: WAF :: fetched 3 new logs [23-06-2022 13:17:01]22014: WAF :: fetched 2 new logs [23-06-2022 13:18:02]24711: WAF :: fetched 2 new logs [23-06-2022 13:21:02]367: WAF :: fetched 2 new logs [23-06-2022 13:22:02]3168: WAF :: fetched 4 new logs [23-06-2022 13:23:01]6047: WAF :: fetched 3 new logs [23-06-2022 13:24:02]8716: WAF :: fetched 7 new logs [23-06-2022 13:25:01]11378: WAF :: fetched 4 new logs [23-06-2022 13:26:02]14137: WAF :: fetched 5 new logs [23-06-2022 13:27:01]16791: WAF :: fetched 2 new logs [23-06-2022 13:28:01]19567: WAF :: fetched 3 new logs [23-06-2022 13:29:02]22301: WAF :: fetched 2 new logs [23-06-2022 13:30:02]25002: WAF :: fetched 4 new logs [23-06-2022 13:31:02]27751: WAF :: fetched 2 new logs [23-06-2022 13:32:01]30410: WAF :: fetched 7 new logs [23-06-2022 13:33:02]818: WAF :: fetched 4 new logs [23-06-2022 13:34:01]3505: WAF :: fetched 3 new logs [23-06-2022 13:35:01]6356: WAF :: fetched 3 new logs [23-06-2022 13:36:01]9129: WAF :: fetched 5 new logs [23-06-2022 13:37:01]11778: WAF :: fetched 4 new logs [23-06-2022 13:38:02]14571: WAF :: fetched 1 new logs [23-06-2022 13:39:01]17251: WAF :: fetched 1 new logs [23-06-2022 13:40:01]19941: WAF :: fetched 4 new logs [23-06-2022 13:41:01]22692: WAF :: fetched 3 new logs [23-06-2022 13:41:01]22692: Checking for user cron vulnerabilities [23-06-2022 13:42:01]25402: WAF :: fetched 2 new logs [23-06-2022 13:43:01]28186: WAF :: fetched 1 new logs [23-06-2022 13:44:02]30937: Checking ditributed CMS bruteforce attacks [23-06-2022 13:44:02]30937: WAF :: fetched 3 new logs [23-06-2022 13:45:02]: Checking for definition updates [23-06-2022 13:45:02]1205: WAF :: fetched 3 new logs [23-06-2022 13:46:01]3967: WAF :: fetched 4 new logs [23-06-2022 13:47:02]6726: WAF :: fetched 4 new logs [23-06-2022 13:48:02]9453: WAF :: fetched 2 new logs [23-06-2022 13:49:01]12123: WAF :: fetched 2 new logs [23-06-2022 13:50:02]14852: WAF :: fetched 2 new logs [23-06-2022 13:51:01]17633: WAF :: fetched 6 new logs [23-06-2022 13:52:01]20309: WAF :: fetched 3 new logs [23-06-2022 13:53:02]23068: WAF :: fetched 2 new logs [23-06-2022 13:54:02]25728: WAF :: fetched 4 new logs [23-06-2022 13:55:02]28469: WAF :: fetched 1 new logs [23-06-2022 13:56:01]31200: WAF :: fetched 5 new logs [23-06-2022 13:58:01]4340: WAF :: fetched 2 new logs [23-06-2022 13:59:02]7119: WAF :: fetched 3 new logs [23-06-2022 14:00:01]9561: WAF :: fetched 2 new logs [23-06-2022 14:01:01]12753: WAF :: fetched 2 new logs [23-06-2022 14:02:01]15500: WAF :: fetched 3 new logs [23-06-2022 14:03:02]18357: WAF :: fetched 3 new logs [23-06-2022 14:04:02]21049: WAF :: fetched 3 new logs [23-06-2022 14:05:02]23831: WAF :: fetched 3 new logs [23-06-2022 14:06:02]26614: WAF :: fetched 2 new logs [23-06-2022 14:07:02]29294: WAF :: fetched 1 new logs [23-06-2022 14:08:01]31719: WAF :: fetched 2 new logs [23-06-2022 14:09:02]2479: WAF :: fetched 4 new logs [23-06-2022 14:10:02]5286: WAF :: fetched 5 new logs [23-06-2022 14:11:01]8075: WAF :: fetched 1 new logs [23-06-2022 14:12:01]10779: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656004321 [23-06-2022 14:12:01]10779: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 14:12:03]10779: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 14:12:03]10779: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-1412/20220623-141201-YrSe4XZhDvnHnJiHvd5slQAAAB0 [23-06-2022 14:12:03]10779: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 14:12:03]10779: WAF :: fetched 1 new logs [23-06-2022 14:13:01]13597: WAF :: fetched 1 new logs [23-06-2022 14:14:01]16265: WAF :: fetched 4 new logs [23-06-2022 14:15:02]18974: WAF :: fetched 2 new logs [23-06-2022 14:16:02]21648: WAF :: fetched 3 new logs [23-06-2022 14:18:01]27039: WAF :: fetched 2 new logs [23-06-2022 14:21:01]2817: WAF :: fetched 1 new logs [23-06-2022 14:22:02]5584: WAF :: fetched 3 new logs [23-06-2022 14:24:01]10648: WAF :: fetched 1 new logs [23-06-2022 14:25:02]13690: WAF :: fetched 2 new logs [23-06-2022 14:27:01]19110: WAF :: fetched 2 new logs [23-06-2022 14:28:01]21892: WAF :: fetched 6 new logs [23-06-2022 14:29:01]24587: WAF :: fetched 3 new logs [23-06-2022 14:30:01]27347: WAF :: fetched 3 new logs [23-06-2022 14:31:01]30097: WAF :: fetched 1 new logs [23-06-2022 14:32:02]361: WAF :: fetched 1 new logs [23-06-2022 14:34:02]5975: WAF :: fetched 1 new logs [23-06-2022 14:36:02]11549: WAF :: fetched 3 new logs [23-06-2022 14:37:01]14263: WAF :: fetched 1 new logs [23-06-2022 14:38:01]17050: WAF :: fetched 2 new logs [23-06-2022 14:39:02]19796: WAF :: fetched 6 new logs [23-06-2022 14:40:02]22477: WAF :: fetched 3 new logs [23-06-2022 14:41:02]25273: WAF :: fetched 2 new logs [23-06-2022 14:41:02]25273: Checking for user cron vulnerabilities [23-06-2022 14:42:02]27936: WAF :: fetched 1 new logs [23-06-2022 14:43:02]30725: WAF :: fetched 3 new logs [23-06-2022 14:44:01]1068: Checking ditributed CMS bruteforce attacks [23-06-2022 14:44:02]1068: WAF :: fetched 3 new logs [23-06-2022 14:45:01]3775: WAF :: fetched 5 new logs [23-06-2022 14:46:02]6605: WAF :: fetched 1 new logs [23-06-2022 14:47:01]9324: WAF :: fetched 3 new logs [23-06-2022 14:48:02]12096: WAF :: fetched 2 new logs [23-06-2022 14:49:02]14795: WAF :: fetched 2 new logs [23-06-2022 14:50:02]17476: WAF :: fetched 3 new logs [23-06-2022 14:51:01]20143: WAF :: fetched 3 new logs [23-06-2022 14:52:02]22982: WAF :: fetched 5 new logs [23-06-2022 14:53:01]25507: WAF :: fetched 5 new logs [23-06-2022 14:53:02]25502: Updated license status via CDN [23-06-2022 14:55:01]31110: WAF :: fetched 4 new logs [23-06-2022 14:56:01]1518: WAF :: fetched 4 new logs [23-06-2022 14:58:01]7082: WAF :: fetched 1 new logs [23-06-2022 14:59:02]9770: WAF :: fetched 2 new logs [23-06-2022 15:00:01]12200: WAF :: fetched 1 new logs [23-06-2022 15:01:02]15418: Reseting cPGuard inotify settings [23-06-2022 15:01:02]15421: WAF :: fetched 2 new logs [23-06-2022 15:02:02]18133: WAF :: fetched 2 new logs [23-06-2022 15:03:01]20925: WAF :: fetched 5 new logs [23-06-2022 15:04:01]23621: WAF :: fetched 5 new logs [23-06-2022 15:06:02]29103: WAF :: fetched 1 new logs [23-06-2022 15:07:01]31756: WAF :: fetched 1 new logs [23-06-2022 15:09:01]4943: WAF :: fetched 1 new logs [23-06-2022 15:10:01]7680: WAF :: fetched 2 new logs [23-06-2022 15:12:01]13115: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656007921 [23-06-2022 15:12:01]13115: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 15:12:03]13115: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 15:12:03]13115: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-1512/20220623-151201-YrSs8YiU2gQb10uAzVp6nQAAAC8 [23-06-2022 15:12:03]13115: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 15:12:04]13115: WAF :: fetched 1 new logs [23-06-2022 15:13:01]15928: WAF :: fetched 1 new logs [23-06-2022 15:14:01]18652: WAF :: fetched 1 new logs [23-06-2022 15:16:02]24091: WAF :: fetched 1 new logs [23-06-2022 15:17:01]26458: WAF :: fetched 8 new logs [23-06-2022 15:18:02]29664: WAF :: fetched 4 new logs [23-06-2022 15:19:01]31963: WAF :: fetched 5 new logs [23-06-2022 15:20:01]2742: WAF :: fetched 6 new logs [23-06-2022 15:21:02]5673: WAF :: fetched 4 new logs [23-06-2022 15:23:02]11228: WAF :: fetched 5 new logs [23-06-2022 15:24:01]13620: WAF :: fetched 2 new logs [23-06-2022 15:25:01]16669: WAF :: fetched 1 new logs [23-06-2022 15:26:02]19436: WAF :: fetched 1 new logs [23-06-2022 15:27:02]22170: WAF :: fetched 5 new logs [23-06-2022 15:28:02]25011: WAF :: fetched 1 new logs [23-06-2022 15:29:02]27729: WAF :: fetched 2 new logs [23-06-2022 15:30:02]30489: WAF :: fetched 1 new logs [23-06-2022 15:31:02]853: WAF :: fetched 1 new logs [23-06-2022 15:32:01]3229: WAF :: fetched 2 new logs [23-06-2022 15:33:01]6435: WAF :: fetched 2 new logs [23-06-2022 15:34:02]9185: WAF :: fetched 3 new logs [23-06-2022 15:35:02]11878: WAF :: fetched 1 new logs [23-06-2022 15:36:01]14696: WAF :: fetched 2 new logs [23-06-2022 15:38:01]20178: WAF :: fetched 1 new logs [23-06-2022 15:39:02]22910: WAF :: fetched 1 new logs [23-06-2022 15:40:01]25597: WAF :: fetched 4 new logs [23-06-2022 15:41:01]28350: WAF :: fetched 5 new logs [23-06-2022 15:41:01]28350: Checking for user cron vulnerabilities [23-06-2022 15:44:02]4266: Checking ditributed CMS bruteforce attacks [23-06-2022 15:44:02]4266: WAF :: fetched 1 new logs [23-06-2022 15:45:02]7052: WAF :: fetched 3 new logs [23-06-2022 15:46:02]9841: WAF :: fetched 2 new logs [23-06-2022 15:47:02]12558: WAF :: fetched 2 new logs [23-06-2022 15:48:02]15365: WAF :: fetched 3 new logs [23-06-2022 15:49:01]18052: WAF :: fetched 1 new logs [23-06-2022 15:50:01]20791: WAF :: fetched 1 new logs [23-06-2022 15:51:01]23588: WAF :: fetched 2 new logs [23-06-2022 15:52:01]26233: WAF :: fetched 2 new logs [23-06-2022 15:53:02]29012: WAF :: fetched 1 new logs [23-06-2022 15:54:01]31783: WAF :: fetched 3 new logs [23-06-2022 15:54:01]31785: httpd.conf changed. Refreshing watchlist. [23-06-2022 15:55:02]2136: WAF :: fetched 1 new logs [23-06-2022 15:56:02]4974: WAF :: fetched 2 new logs [23-06-2022 15:57:02]7683: WAF :: fetched 4 new logs [23-06-2022 15:58:02]10438: WAF :: fetched 6 new logs [23-06-2022 15:59:01]13012: WAF :: fetched 102 new logs [23-06-2022 15:59:01]13011: httpd.conf changed. Refreshing watchlist. [23-06-2022 16:00:02]15750: WAF :: fetched 6 new logs [23-06-2022 16:01:01]18592: WAF :: fetched 20 new logs [23-06-2022 16:02:02]21764: WAF :: fetched 32 new logs [23-06-2022 16:03:01]24563: WAF :: fetched 2 new logs [23-06-2022 16:04:01]27263: WAF :: fetched 2 new logs [23-06-2022 16:05:01]29938: WAF :: fetched 2 new logs [23-06-2022 16:06:01]32682: WAF :: fetched 1 new logs [23-06-2022 16:07:02]3057: WAF :: fetched 4 new logs [23-06-2022 16:08:02]5977: WAF :: fetched 3 new logs [23-06-2022 16:09:02]8680: WAF :: fetched 2 new logs [23-06-2022 16:10:02]11413: WAF :: fetched 2 new logs [23-06-2022 16:11:02]14166: WAF :: fetched 3 new logs [23-06-2022 16:12:02]16836: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656011522 [23-06-2022 16:12:02]16836: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 16:12:04]16836: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 16:12:04]16836: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-1612/20220623-161202-YrS7ApPbRYgv_xCvP0p8lwAAACw [23-06-2022 16:12:04]16836: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 16:12:04]16836: WAF :: fetched 1 new logs [23-06-2022 16:13:01]19640: WAF :: fetched 1 new logs [23-06-2022 16:14:01]22313: WAF :: fetched 4 new logs [23-06-2022 16:15:01]25017: WAF :: fetched 1 new logs [23-06-2022 16:16:01]27743: WAF :: fetched 7 new logs [23-06-2022 16:17:02]30446: WAF :: fetched 2 new logs [23-06-2022 16:18:01]859: WAF :: fetched 1 new logs [23-06-2022 16:19:01]3661: WAF :: fetched 1 new logs [23-06-2022 16:20:01]6420: WAF :: fetched 1 new logs [23-06-2022 16:21:02]9303: WAF :: fetched 1 new logs [23-06-2022 16:22:02]12094: WAF :: fetched 8 new logs [23-06-2022 16:23:02]14917: WAF :: fetched 2 new logs [23-06-2022 16:24:01]17606: WAF :: fetched 1 new logs [23-06-2022 16:25:01]20302: WAF :: fetched 3 new logs [23-06-2022 16:26:01]23051: WAF :: fetched 1 new logs [23-06-2022 16:27:01]25759: WAF :: fetched 2 new logs [23-06-2022 16:28:02]28568: WAF :: fetched 3 new logs [23-06-2022 16:29:02]31250: WAF :: fetched 1 new logs [23-06-2022 16:36:01]18207: WAF :: fetched 1 new logs [23-06-2022 16:37:01]20895: WAF :: fetched 1 new logs [23-06-2022 16:40:02]29050: WAF :: fetched 1 new logs [23-06-2022 16:41:01]31787: WAF :: fetched 1 new logs [23-06-2022 16:41:01]31787: Checking for user cron vulnerabilities [23-06-2022 16:44:02]7890: Checking ditributed CMS bruteforce attacks [23-06-2022 16:44:02]7890: WAF :: fetched 2 new logs [23-06-2022 16:45:01]10538: WAF :: fetched 1 new logs [23-06-2022 16:46:01]13291: WAF :: fetched 3 new logs [23-06-2022 16:47:01]16139: WAF :: fetched 4 new logs [23-06-2022 16:49:02]21610: WAF :: fetched 3 new logs [23-06-2022 16:50:01]24345: WAF :: fetched 4 new logs [23-06-2022 16:51:01]27086: WAF :: fetched 3 new logs [23-06-2022 16:52:01]29876: WAF :: fetched 3 new logs [23-06-2022 16:53:01]32676: WAF :: fetched 2 new logs [23-06-2022 16:54:01]2951: WAF :: fetched 1 new logs [23-06-2022 16:55:01]5718: WAF :: fetched 1 new logs [23-06-2022 16:57:01]11106: WAF :: fetched 3 new logs [23-06-2022 16:58:01]13924: WAF :: fetched 4 new logs [23-06-2022 16:59:02]16625: WAF :: fetched 1 new logs [23-06-2022 17:00:01]19050: WAF :: fetched 1 new logs [23-06-2022 17:01:01]22264: WAF :: fetched 1 new logs [23-06-2022 17:02:01]25036: WAF :: fetched 3 new logs [23-06-2022 17:03:01]27954: WAF :: fetched 4 new logs [23-06-2022 17:04:02]30679: WAF :: fetched 2 new logs [23-06-2022 17:05:02]964: WAF :: fetched 1 new logs [23-06-2022 17:06:02]3740: WAF :: fetched 1 new logs [23-06-2022 17:07:02]6545: WAF :: fetched 26 new logs [23-06-2022 17:08:01]9359: WAF :: fetched 1 new logs [23-06-2022 17:09:02]12027: WAF :: fetched 3 new logs [23-06-2022 17:10:01]14722: WAF :: fetched 1 new logs [23-06-2022 17:11:01]17447: WAF :: fetched 1 new logs [23-06-2022 17:12:02]20197: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656015122 [23-06-2022 17:12:02]20197: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 17:12:04]20197: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 17:12:04]20197: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-1712/20220623-171202-YrTJEuaj5IFYbUYrQeM2wAAAABw [23-06-2022 17:12:04]20197: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 17:12:04]20197: WAF :: fetched 1 new logs [23-06-2022 17:13:02]22939: WAF :: fetched 4 new logs [23-06-2022 17:14:01]25652: WAF :: fetched 4 new logs [23-06-2022 17:15:01]28337: WAF :: fetched 4 new logs [23-06-2022 17:16:01]31062: WAF :: fetched 6 new logs [23-06-2022 17:17:02]1403: WAF :: fetched 4 new logs [23-06-2022 17:18:02]4265: WAF :: fetched 1 new logs [23-06-2022 17:19:01]6985: WAF :: fetched 2 new logs [23-06-2022 17:21:02]12494: WAF :: fetched 2 new logs [23-06-2022 17:22:01]14809: WAF :: fetched 2 new logs [23-06-2022 17:23:01]17897: WAF :: fetched 2 new logs [23-06-2022 17:25:01]23355: WAF :: fetched 4 new logs [23-06-2022 17:27:02]28805: WAF :: fetched 2 new logs [23-06-2022 17:28:02]31587: WAF :: fetched 2 new logs [23-06-2022 17:29:01]1880: WAF :: fetched 2 new logs [23-06-2022 17:30:01]4693: WAF :: fetched 3 new logs [23-06-2022 17:31:01]7472: WAF :: fetched 7 new logs [23-06-2022 17:32:02]10179: WAF :: fetched 2 new logs [23-06-2022 17:33:01]12941: WAF :: fetched 4 new logs [23-06-2022 17:35:02]18377: WAF :: fetched 18 new logs [23-06-2022 17:36:02]21166: WAF :: fetched 15 new logs [23-06-2022 17:37:02]23868: WAF :: fetched 30 new logs [23-06-2022 17:38:01]26649: WAF :: fetched 30 new logs [23-06-2022 17:39:01]29387: WAF :: fetched 13 new logs [23-06-2022 17:40:01]32090: WAF :: fetched 16 new logs [23-06-2022 17:41:01]2473: WAF :: fetched 6 new logs [23-06-2022 17:41:01]2473: Checking for user cron vulnerabilities [23-06-2022 17:42:02]5287: WAF :: fetched 4 new logs [23-06-2022 17:43:02]8041: WAF :: fetched 1 new logs [23-06-2022 17:44:01]10453: Checking ditributed CMS bruteforce attacks [23-06-2022 17:44:01]10453: WAF :: fetched 2 new logs [23-06-2022 17:45:01]13404: WAF :: fetched 37 new logs [23-06-2022 17:46:02]16211: WAF :: fetched 13 new logs [23-06-2022 17:47:01]18882: WAF :: fetched 22 new logs [23-06-2022 17:48:02]21724: WAF :: fetched 16 new logs [23-06-2022 17:49:02]24442: WAF :: fetched 8 new logs [23-06-2022 17:50:02]27183: WAF :: fetched 24 new logs [23-06-2022 17:51:01]29942: WAF :: fetched 8 new logs [23-06-2022 17:52:02]32618: WAF :: fetched 6 new logs [23-06-2022 17:53:02]3016: WAF :: fetched 37 new logs [23-06-2022 17:54:01]5724: WAF :: fetched 9 new logs [23-06-2022 17:55:01]8423: WAF :: fetched 1 new logs [23-06-2022 17:56:01]11121: WAF :: fetched 1 new logs [23-06-2022 17:58:01]16662: WAF :: fetched 4 new logs [23-06-2022 17:59:02]19410: WAF :: fetched 11 new logs [23-06-2022 18:00:02]21794: WAF :: fetched 9 new logs [23-06-2022 18:01:02]24965: WAF :: fetched 5 new logs [23-06-2022 18:03:01]30458: WAF :: fetched 1 new logs [23-06-2022 18:04:02]722: WAF :: fetched 1 new logs [23-06-2022 18:05:02]3455: WAF :: fetched 7 new logs [23-06-2022 18:08:02]11732: WAF :: fetched 2 new logs [23-06-2022 18:10:02]17124: WAF :: fetched 6 new logs [23-06-2022 18:10:02]17128: httpd.conf changed. Refreshing watchlist. [23-06-2022 18:11:02]19847: httpd.conf changed. Refreshing watchlist. [23-06-2022 18:11:02]19857: WAF :: fetched 1 new logs [23-06-2022 18:12:02]22508: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656018722 [23-06-2022 18:12:02]22508: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 18:12:04]22508: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 18:12:04]22508: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-1812/20220623-181202-YrTXIrzRNXd37OyB44TstgAAACw [23-06-2022 18:12:04]22508: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 18:12:04]22508: WAF :: fetched 3 new logs [23-06-2022 18:13:02]25219: WAF :: fetched 3 new logs [23-06-2022 18:14:02]27962: WAF :: fetched 4 new logs [23-06-2022 18:15:02]30694: WAF :: fetched 7 new logs [23-06-2022 18:15:02]30696: httpd.conf changed. Refreshing watchlist. [23-06-2022 18:16:02]1064: WAF :: fetched 2 new logs [23-06-2022 18:17:01]3799: WAF :: fetched 5 new logs [23-06-2022 18:18:01]6583: WAF :: fetched 3 new logs [23-06-2022 18:19:02]9346: WAF :: fetched 7 new logs [23-06-2022 18:20:02]12007: WAF :: fetched 35 new logs [23-06-2022 18:21:02]14728: WAF :: fetched 4 new logs [23-06-2022 18:22:01]17400: WAF :: fetched 2 new logs [23-06-2022 18:24:02]22884: WAF :: fetched 2 new logs [23-06-2022 18:25:02]25571: WAF :: fetched 2 new logs [23-06-2022 18:26:01]28240: WAF :: fetched 1 new logs [23-06-2022 18:29:02]3973: WAF :: fetched 1 new logs [23-06-2022 18:30:01]6683: WAF :: fetched 2 new logs [23-06-2022 18:31:02]9437: WAF :: fetched 2 new logs [23-06-2022 18:32:01]12119: WAF :: fetched 1 new logs [23-06-2022 18:33:02]14878: WAF :: fetched 2 new logs [23-06-2022 18:34:02]17641: WAF :: fetched 3 new logs [23-06-2022 18:35:02]20339: WAF :: fetched 2 new logs [23-06-2022 18:38:02]28448: WAF :: fetched 2 new logs [23-06-2022 18:39:02]31214: WAF :: fetched 3 new logs [23-06-2022 18:40:02]1512: WAF :: fetched 4 new logs [23-06-2022 18:41:02]4280: Checking for user cron vulnerabilities [23-06-2022 18:42:02]6985: WAF :: fetched 2 new logs [23-06-2022 18:44:01]12382: Checking ditributed CMS bruteforce attacks [23-06-2022 18:44:02]12382: WAF :: fetched 1 new logs [23-06-2022 18:45:02]15050: WAF :: fetched 1 new logs [23-06-2022 18:46:01]17772: WAF :: fetched 2 new logs [23-06-2022 18:48:02]23059: WAF :: fetched 1 new logs [23-06-2022 18:49:01]25807: WAF :: fetched 2 new logs [23-06-2022 18:50:01]28554: WAF :: fetched 1 new logs [23-06-2022 18:51:02]31342: WAF :: fetched 2 new logs [23-06-2022 18:52:02]1649: WAF :: fetched 3 new logs [23-06-2022 18:53:01]4379: WAF :: fetched 1 new logs [23-06-2022 18:54:02]7179: WAF :: fetched 3 new logs [23-06-2022 18:57:02]15218: WAF :: fetched 1 new logs [23-06-2022 18:58:01]17483: WAF :: fetched 3 new logs [23-06-2022 18:59:02]20632: WAF :: fetched 2 new logs [23-06-2022 19:01:01]26225: WAF :: fetched 3 new logs [23-06-2022 19:02:01]28970: WAF :: fetched 2 new logs [23-06-2022 19:04:02]2076: WAF :: fetched 3 new logs [23-06-2022 19:05:01]4857: WAF :: fetched 4 new logs [23-06-2022 19:06:01]7582: WAF :: fetched 3 new logs [23-06-2022 19:08:01]12893: WAF :: fetched 5 new logs [23-06-2022 19:09:01]15636: WAF :: fetched 1 new logs [23-06-2022 19:10:02]18312: WAF :: fetched 1 new logs [23-06-2022 19:11:01]20991: WAF :: fetched 1 new logs [23-06-2022 19:12:01]23656: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656022321 [23-06-2022 19:12:01]23656: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 19:12:03]23656: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 19:12:04]23656: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-1912/20220623-191201-YrTlMUcB1IgT9UyAJIdQ8gAAABM [23-06-2022 19:12:04]23656: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 19:12:04]23656: WAF :: fetched 3 new logs [23-06-2022 19:13:02]26362: WAF :: fetched 3 new logs [23-06-2022 19:14:02]29133: WAF :: fetched 4 new logs [23-06-2022 19:15:02]31805: WAF :: fetched 3 new logs [23-06-2022 19:19:01]9882: WAF :: fetched 1 new logs [23-06-2022 19:20:01]12985: WAF :: fetched 2 new logs [23-06-2022 19:21:02]15715: WAF :: fetched 3 new logs [23-06-2022 19:22:02]18359: WAF :: fetched 2 new logs [23-06-2022 19:23:01]20989: WAF :: fetched 2 new logs [23-06-2022 19:24:01]23730: WAF :: fetched 1 new logs [23-06-2022 19:25:02]26486: WAF :: fetched 1 new logs [23-06-2022 19:28:02]2141: WAF :: fetched 3 new logs [23-06-2022 19:30:01]7670: WAF :: fetched 1 new logs [23-06-2022 19:31:01]10368: WAF :: fetched 3 new logs [23-06-2022 19:32:01]13055: WAF :: fetched 3 new logs [23-06-2022 19:33:02]15723: WAF :: fetched 1 new logs [23-06-2022 19:34:01]18427: WAF :: fetched 2 new logs [23-06-2022 19:37:01]26494: WAF :: fetched 4 new logs [23-06-2022 19:39:01]31922: WAF :: fetched 1 new logs [23-06-2022 19:41:02]5087: WAF :: fetched 1 new logs [23-06-2022 19:41:02]5087: Checking for user cron vulnerabilities [23-06-2022 19:43:02]10464: WAF :: fetched 6 new logs [23-06-2022 19:44:01]13242: Checking ditributed CMS bruteforce attacks [23-06-2022 19:44:01]13242: WAF :: fetched 1 new logs [23-06-2022 19:45:01]: Checking for definition updates [23-06-2022 19:45:01]15937: WAF :: fetched 1 new logs [23-06-2022 19:47:01]21373: WAF :: fetched 3 new logs [23-06-2022 19:48:01]24040: WAF :: fetched 1 new logs [23-06-2022 19:49:02]26805: WAF :: fetched 5 new logs [23-06-2022 19:50:02]29496: WAF :: fetched 3 new logs [23-06-2022 19:51:01]32205: WAF :: fetched 4 new logs [23-06-2022 19:52:02]2480: WAF :: fetched 1 new logs [23-06-2022 19:53:01]5217: WAF :: fetched 1 new logs [23-06-2022 19:54:02]7972: WAF :: fetched 4 new logs [23-06-2022 19:55:02]10607: WAF :: fetched 2 new logs [23-06-2022 19:56:01]13123: WAF :: fetched 3 new logs [23-06-2022 19:57:01]15942: WAF :: fetched 1 new logs [23-06-2022 19:58:02]18639: WAF :: fetched 1 new logs [23-06-2022 19:59:02]21412: WAF :: fetched 2 new logs [23-06-2022 20:01:01]27012: WAF :: fetched 6 new logs [23-06-2022 20:02:02]29710: WAF :: fetched 1 new logs [23-06-2022 20:03:01]32345: WAF :: fetched 2 new logs [23-06-2022 20:04:01]2708: WAF :: fetched 6 new logs [23-06-2022 20:05:02]5466: WAF :: fetched 4 new logs [23-06-2022 20:06:02]8126: WAF :: fetched 8 new logs [23-06-2022 20:08:02]13396: WAF :: fetched 1 new logs [23-06-2022 20:10:02]18836: WAF :: fetched 4 new logs [23-06-2022 20:11:01]21542: WAF :: fetched 2 new logs [23-06-2022 20:12:01]24174: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656025921 [23-06-2022 20:12:01]24174: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 20:12:03]24174: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 20:12:04]24174: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-2012/20220623-201201-YrTzQeRlLUJgspxBdvGSBAAAAA4 [23-06-2022 20:12:04]24174: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 20:12:04]24174: WAF :: fetched 2 new logs [23-06-2022 20:13:01]26843: WAF :: fetched 2 new logs [23-06-2022 20:15:01]32272: WAF :: fetched 1 new logs [23-06-2022 20:16:01]2604: WAF :: fetched 1 new logs [23-06-2022 20:20:02]13469: WAF :: fetched 2 new logs [23-06-2022 20:22:01]18907: WAF :: fetched 5 new logs [23-06-2022 20:23:01]21549: WAF :: fetched 4 new logs [23-06-2022 20:24:01]24335: WAF :: fetched 2 new logs [23-06-2022 20:25:01]27023: WAF :: fetched 2 new logs [23-06-2022 20:26:02]29771: WAF :: fetched 6 new logs [23-06-2022 20:27:01]32391: WAF :: fetched 1 new logs [23-06-2022 20:28:01]2644: WAF :: fetched 1 new logs [23-06-2022 20:29:02]5461: WAF :: fetched 4 new logs [23-06-2022 20:31:01]10829: WAF :: fetched 3 new logs [23-06-2022 20:32:01]13489: WAF :: fetched 3 new logs [23-06-2022 20:33:01]16146: WAF :: fetched 3 new logs [23-06-2022 20:38:02]29496: WAF :: fetched 6 new logs [23-06-2022 20:39:01]32237: WAF :: fetched 1 new logs [23-06-2022 20:40:01]2526: WAF :: fetched 1 new logs [23-06-2022 20:41:02]5302: Checking for user cron vulnerabilities [23-06-2022 20:42:02]7931: WAF :: fetched 6 new logs [23-06-2022 20:43:02]10567: WAF :: fetched 2 new logs [23-06-2022 20:44:01]13283: Checking ditributed CMS bruteforce attacks [23-06-2022 20:44:01]13283: WAF :: fetched 1 new logs [23-06-2022 20:45:01]15927: WAF :: fetched 2 new logs [23-06-2022 20:46:02]18633: WAF :: fetched 2 new logs [23-06-2022 20:47:02]21280: WAF :: fetched 2 new logs [23-06-2022 20:49:02]26659: WAF :: fetched 2 new logs [23-06-2022 20:50:01]29325: WAF :: fetched 1 new logs [23-06-2022 20:51:02]32068: WAF :: fetched 2 new logs [23-06-2022 20:52:01]2352: WAF :: fetched 2 new logs [23-06-2022 20:53:01]5100: WAF :: fetched 5 new logs [23-06-2022 20:54:02]7881: WAF :: fetched 2 new logs [23-06-2022 20:55:02]10506: WAF :: fetched 2 new logs [23-06-2022 20:56:02]13179: WAF :: fetched 1 new logs [23-06-2022 20:57:01]15841: WAF :: fetched 4 new logs [23-06-2022 20:58:02]18505: WAF :: fetched 1 new logs [23-06-2022 20:59:02]21214: WAF :: fetched 1 new logs [23-06-2022 21:00:02]23602: WAF :: fetched 1 new logs [23-06-2022 21:01:01]26828: WAF :: fetched 1 new logs [23-06-2022 21:07:01]10629: WAF :: fetched 2 new logs [23-06-2022 21:08:02]13298: WAF :: fetched 8 new logs [23-06-2022 21:09:01]16066: WAF :: fetched 4 new logs [23-06-2022 21:10:01]18739: WAF :: fetched 5 new logs [23-06-2022 21:12:02]24095: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656029522 [23-06-2022 21:12:03]24095: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 21:12:05]24095: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 21:12:05]24095: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-2112/20220623-211203-YrUBU4fg1Kf1_hkoHzATHQAAAB4 [23-06-2022 21:12:05]24095: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 21:12:05]24095: WAF :: fetched 3 new logs [23-06-2022 21:13:02]26749: WAF :: fetched 1 new logs [23-06-2022 21:14:01]29481: WAF :: fetched 1 new logs [23-06-2022 21:17:02]5159: WAF :: fetched 1 new logs [23-06-2022 21:19:01]10563: WAF :: fetched 2 new logs [23-06-2022 21:20:02]13273: WAF :: fetched 5 new logs [23-06-2022 21:21:02]15990: WAF :: fetched 5 new logs [23-06-2022 21:22:01]18608: WAF :: fetched 2 new logs [23-06-2022 21:23:01]21246: WAF :: fetched 2 new logs [23-06-2022 21:27:01]32053: WAF :: fetched 6 new logs [23-06-2022 21:28:01]2344: WAF :: fetched 1 new logs [23-06-2022 21:29:01]5134: WAF :: fetched 6 new logs [23-06-2022 21:30:02]7850: WAF :: fetched 2 new logs [23-06-2022 21:31:01]10161: WAF :: fetched 2 new logs [23-06-2022 21:32:02]13208: WAF :: fetched 3 new logs [23-06-2022 21:33:02]15860: WAF :: fetched 4 new logs [23-06-2022 21:35:02]21207: WAF :: fetched 1 new logs [23-06-2022 21:37:02]26560: WAF :: fetched 1 new logs [23-06-2022 21:38:02]29190: WAF :: fetched 1 new logs [23-06-2022 21:39:01]31546: WAF :: fetched 1 new logs [23-06-2022 21:41:01]4950: Checking for user cron vulnerabilities [23-06-2022 21:43:01]10233: WAF :: fetched 1 new logs [23-06-2022 21:44:01]12939: Checking ditributed CMS bruteforce attacks [23-06-2022 21:44:01]12939: WAF :: fetched 4 new logs [23-06-2022 21:45:01]15608: WAF :: fetched 3 new logs [23-06-2022 21:46:02]18356: WAF :: fetched 1 new logs [23-06-2022 21:47:01]20978: WAF :: fetched 1 new logs [23-06-2022 21:48:01]23640: WAF :: fetched 3 new logs [23-06-2022 21:51:02]31784: WAF :: fetched 5 new logs [23-06-2022 21:52:02]2010: WAF :: fetched 2 new logs [23-06-2022 21:53:01]4735: WAF :: fetched 1 new logs [23-06-2022 21:55:01]10138: WAF :: fetched 2 new logs [23-06-2022 21:56:02]12829: WAF :: fetched 1 new logs [23-06-2022 21:57:01]15434: WAF :: fetched 2 new logs [23-06-2022 21:58:02]18082: WAF :: fetched 4 new logs [23-06-2022 21:59:01]20796: WAF :: fetched 3 new logs [23-06-2022 22:00:02]23178: WAF :: fetched 5 new logs [23-06-2022 22:01:02]26307: WAF :: fetched 4 new logs [23-06-2022 22:02:01]29011: WAF :: fetched 4 new logs [23-06-2022 22:03:02]31679: WAF :: fetched 5 new logs [23-06-2022 22:05:02]4748: WAF :: fetched 1 new logs [23-06-2022 22:07:01]10069: WAF :: fetched 3 new logs [23-06-2022 22:07:07]10071: Performing Domain reputation checks [23-06-2022 22:08:02]12720: WAF :: fetched 2 new logs [23-06-2022 22:09:01]15434: WAF :: fetched 1 new logs [23-06-2022 22:10:02]18088: WAF :: fetched 1 new logs [23-06-2022 22:11:01]20848: WAF :: fetched 1 new logs [23-06-2022 22:12:01]23501: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656033121 [23-06-2022 22:12:01]23501: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 22:12:03]23501: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 22:12:03]23501: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-2212/20220623-221201-YrUPYelLIM8-8D90PrWqTwAAAB0 [23-06-2022 22:12:03]23501: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 22:12:04]23501: WAF :: fetched 7 new logs [23-06-2022 22:15:02]31548: WAF :: fetched 3 new logs [23-06-2022 22:16:01]1448: WAF :: fetched 3 new logs [23-06-2022 22:17:02]4567: WAF :: fetched 3 new logs [23-06-2022 22:18:01]7212: WAF :: fetched 7 new logs [23-06-2022 22:19:02]9956: WAF :: fetched 4 new logs [23-06-2022 22:20:02]12592: WAF :: fetched 9 new logs [23-06-2022 22:21:02]15289: WAF :: fetched 1 new logs [23-06-2022 22:22:02]17900: WAF :: fetched 2 new logs [23-06-2022 22:23:01]20545: WAF :: fetched 4 new logs [23-06-2022 22:24:01]23244: WAF :: fetched 2 new logs [23-06-2022 22:25:01]25918: WAF :: fetched 1 new logs [23-06-2022 22:26:02]28655: WAF :: fetched 2 new logs [23-06-2022 22:27:01]31309: WAF :: fetched 5 new logs [23-06-2022 22:28:02]1555: WAF :: fetched 1 new logs [23-06-2022 22:29:02]4283: WAF :: fetched 3 new logs [23-06-2022 22:31:02]9705: WAF :: fetched 1 new logs [23-06-2022 22:34:02]17709: WAF :: fetched 57 new logs [23-06-2022 22:35:02]20364: WAF :: fetched 2 new logs [23-06-2022 22:36:01]23115: WAF :: fetched 4 new logs [23-06-2022 22:37:02]25810: WAF :: fetched 3 new logs [23-06-2022 22:38:02]28476: WAF :: fetched 28 new logs [23-06-2022 22:39:01]31229: WAF :: fetched 100 new logs [23-06-2022 22:40:02]1514: WAF :: fetched 2 new logs [23-06-2022 22:41:01]4312: WAF :: fetched 2 new logs [23-06-2022 22:41:01]4312: Checking for user cron vulnerabilities [23-06-2022 22:42:01]7037: WAF :: fetched 2 new logs [23-06-2022 22:44:01]12507: Checking ditributed CMS bruteforce attacks [23-06-2022 22:44:01]12507: WAF :: fetched 4 new logs [23-06-2022 22:45:02]15149: WAF :: fetched 24 new logs [23-06-2022 22:46:01]17800: WAF :: fetched 4 new logs [23-06-2022 22:48:02]23110: WAF :: fetched 3 new logs [23-06-2022 22:49:01]25846: WAF :: fetched 2 new logs [23-06-2022 22:50:02]28521: WAF :: fetched 2 new logs [23-06-2022 22:51:02]31222: WAF :: fetched 1 new logs [23-06-2022 22:52:01]1461: WAF :: fetched 6 new logs [23-06-2022 22:54:01]6944: WAF :: fetched 1 new logs [23-06-2022 22:56:02]12275: WAF :: fetched 5 new logs [23-06-2022 22:57:01]14916: WAF :: fetched 2 new logs [23-06-2022 22:59:02]20273: WAF :: fetched 4 new logs [23-06-2022 23:00:02]22616: WAF :: fetched 3 new logs [23-06-2022 23:01:02]25727: WAF :: fetched 1 new logs [23-06-2022 23:02:01]28392: WAF :: fetched 6 new logs [23-06-2022 23:03:02]31089: WAF :: fetched 4 new logs [23-06-2022 23:04:02]1384: WAF :: fetched 1 new logs [23-06-2022 23:06:02]6817: WAF :: fetched 2 new logs [23-06-2022 23:07:02]9467: WAF :: fetched 3 new logs [23-06-2022 23:07:55]9631: Performed RBL check for 23.111.136.34. [23-06-2022 23:08:01]12099: WAF :: fetched 1 new logs [23-06-2022 23:09:02]14799: WAF :: fetched 3 new logs [23-06-2022 23:10:01]17473: WAF :: fetched 3 new logs [23-06-2022 23:11:02]20177: WAF :: fetched 5 new logs [23-06-2022 23:12:02]22813: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656036722 [23-06-2022 23:12:02]22813: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-06-2022 23:12:04]22813: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-06-2022 23:12:04]22813: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220623/20220623-2312/20220623-231202-YrUdcmUt6igJ7kXINEG4cQAAAAQ [23-06-2022 23:12:04]22813: WAF :: No suitable log file found. Using SQLite.. [23-06-2022 23:12:04]22813: WAF :: fetched 5 new logs [23-06-2022 23:13:01]25458: WAF :: fetched 3 new logs [23-06-2022 23:14:02]28147: WAF :: fetched 4 new logs [23-06-2022 23:15:01]30838: WAF :: fetched 2 new logs [23-06-2022 23:16:01]1093: WAF :: fetched 6 new logs [23-06-2022 23:18:01]6421: WAF :: fetched 1 new logs [23-06-2022 23:19:02]9104: WAF :: fetched 2 new logs [23-06-2022 23:22:02]17177: WAF :: fetched 6 new logs [23-06-2022 23:24:02]22406: WAF :: fetched 3 new logs [23-06-2022 23:25:02]25120: WAF :: fetched 1 new logs [23-06-2022 23:26:01]27787: WAF :: fetched 5 new logs [23-06-2022 23:27:02]30478: WAF :: fetched 4 new logs [23-06-2022 23:28:02]667: WAF :: fetched 2 new logs [23-06-2022 23:29:01]3353: WAF :: fetched 2 new logs [23-06-2022 23:31:01]8840: WAF :: fetched 1 new logs [23-06-2022 23:33:02]14134: WAF :: fetched 2 new logs [23-06-2022 23:35:02]19472: WAF :: fetched 2 new logs [23-06-2022 23:36:02]22124: WAF :: fetched 1 new logs [23-06-2022 23:37:01]24772: WAF :: fetched 4 new logs [23-06-2022 23:38:02]27446: WAF :: fetched 1 new logs [23-06-2022 23:41:01]3186: WAF :: fetched 3 new logs [23-06-2022 23:41:01]3186: Checking for user cron vulnerabilities [23-06-2022 23:42:02]5912: WAF :: fetched 4 new logs [23-06-2022 23:43:02]8544: WAF :: fetched 3 new logs [23-06-2022 23:44:01]11176: Checking ditributed CMS bruteforce attacks [23-06-2022 23:44:01]11176: WAF :: fetched 3 new logs [23-06-2022 23:45:02]13928: WAF :: fetched 2 new logs [23-06-2022 23:47:01]19198: WAF :: fetched 1 new logs [23-06-2022 23:49:01]24496: WAF :: fetched 1 new logs [23-06-2022 23:50:02]27399: WAF :: fetched 3 new logs [23-06-2022 23:51:02]30079: WAF :: fetched 6 new logs [23-06-2022 23:52:01]32712: WAF :: fetched 2 new logs [23-06-2022 23:53:01]3074: WAF :: fetched 2 new logs [23-06-2022 23:54:02]6224: WAF :: fetched 13 new logs [23-06-2022 23:55:02]10907: WAF :: fetched 67 new logs [23-06-2022 23:55:02]10902: httpd.conf changed. Refreshing watchlist. [23-06-2022 23:56:01]14102: WAF :: fetched 9 new logs [23-06-2022 23:57:01]16794: WAF :: fetched 21 new logs [23-06-2022 23:59:02]22060: WAF :: fetched 1 new logs [24-06-2022 00:00:02]24509: WAF :: fetched 1 new logs [24-06-2022 00:01:01]27797: WAF :: fetched 3 new logs [24-06-2022 00:01:01]27802: httpd.conf changed. Refreshing watchlist. [24-06-2022 00:01:04]27797: Sending daily report for June 24, 2022 [24-06-2022 00:02:02]30505: WAF :: fetched 7 new logs [24-06-2022 00:04:02]3371: WAF :: fetched 10 new logs [24-06-2022 00:05:01]6033: Deleted 0 entries older than 6 MONTH from scanner_logs [24-06-2022 00:05:01]6033: Deleted 0 files from Quarantine [24-06-2022 00:06:02]8850: WAF :: fetched 1 new logs [24-06-2022 00:07:01]11464: WAF :: fetched 3 new logs [24-06-2022 00:08:01]14131: WAF :: fetched 1 new logs [24-06-2022 00:11:02]22221: WAF :: fetched 5 new logs [24-06-2022 00:12:02]24869: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656040322 [24-06-2022 00:12:02]24869: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 00:12:04]24869: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 00:12:04]24869: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-0012/20220624-001202-YrUrgmq9VmFivvqZTv2PtAAAABE [24-06-2022 00:12:04]24869: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 00:12:04]24869: WAF :: fetched 4 new logs [24-06-2022 00:13:01]27482: WAF :: fetched 2 new logs [24-06-2022 00:14:02]30134: WAF :: fetched 3 new logs [24-06-2022 00:15:01]357: WAF :: fetched 1 new logs [24-06-2022 00:16:02]3180: WAF :: fetched 2 new logs [24-06-2022 00:17:02]5861: WAF :: fetched 4 new logs [24-06-2022 00:18:01]8500: WAF :: fetched 3 new logs [24-06-2022 00:19:02]11164: WAF :: fetched 3 new logs [24-06-2022 00:21:01]16602: WAF :: fetched 1 new logs [24-06-2022 00:22:02]19250: WAF :: fetched 3 new logs [24-06-2022 00:23:01]21845: WAF :: fetched 2 new logs [24-06-2022 00:24:02]24505: WAF :: fetched 5 new logs [24-06-2022 00:25:02]27194: WAF :: fetched 2 new logs [24-06-2022 00:26:02]29858: WAF :: fetched 2 new logs [24-06-2022 00:27:01]32474: WAF :: fetched 1 new logs [24-06-2022 00:28:02]2724: WAF :: fetched 3 new logs [24-06-2022 00:29:02]5379: WAF :: fetched 3 new logs [24-06-2022 00:30:01]8191: WAF :: fetched 4 new logs [24-06-2022 00:32:01]13555: WAF :: fetched 5 new logs [24-06-2022 00:33:02]16217: WAF :: fetched 3 new logs [24-06-2022 00:34:02]18830: WAF :: fetched 4 new logs [24-06-2022 00:35:01]21531: WAF :: fetched 1 new logs [24-06-2022 00:36:02]24228: WAF :: fetched 3 new logs [24-06-2022 00:37:01]26861: WAF :: fetched 5 new logs [24-06-2022 00:38:02]29509: WAF :: fetched 10 new logs [24-06-2022 00:39:02]32150: WAF :: fetched 3 new logs [24-06-2022 00:40:01]2506: WAF :: fetched 2 new logs [24-06-2022 00:41:02]5301: WAF :: fetched 4 new logs [24-06-2022 00:41:02]5301: Checking for user cron vulnerabilities [24-06-2022 00:42:01]7913: WAF :: fetched 2 new logs [24-06-2022 00:43:01]10570: WAF :: fetched 2 new logs [24-06-2022 00:44:01]13289: Checking ditributed CMS bruteforce attacks [24-06-2022 00:44:02]13289: WAF :: fetched 1 new logs [24-06-2022 00:45:01]: Checking for software updates [24-06-2022 00:46:02]18681: WAF :: fetched 1 new logs [24-06-2022 00:47:01]21310: WAF :: fetched 1 new logs [24-06-2022 00:48:01]23974: WAF :: fetched 4 new logs [24-06-2022 00:49:02]26611: WAF :: fetched 2 new logs [24-06-2022 00:50:01]29326: WAF :: fetched 4 new logs [24-06-2022 00:51:02]32023: WAF :: fetched 1 new logs [24-06-2022 00:52:02]2250: WAF :: fetched 2 new logs [24-06-2022 00:54:02]7594: WAF :: fetched 3 new logs [24-06-2022 00:55:01]10441: WAF :: fetched 29 new logs [24-06-2022 00:56:02]13513: WAF :: fetched 2 new logs [24-06-2022 00:57:02]16111: WAF :: fetched 1 new logs [24-06-2022 00:58:01]18716: WAF :: fetched 1 new logs [24-06-2022 00:59:02]21389: WAF :: fetched 2 new logs [24-06-2022 01:00:02]23791: WAF :: fetched 2 new logs [24-06-2022 01:01:02]27666: WAF :: fetched 6 new logs [24-06-2022 01:02:02]30502: WAF :: fetched 3 new logs [24-06-2022 01:03:01]930: WAF :: fetched 4 new logs [24-06-2022 01:04:02]3925: WAF :: fetched 1 new logs [24-06-2022 01:05:01]6852: WAF :: fetched 5 new logs [24-06-2022 01:06:01]9815: WAF :: fetched 3 new logs [24-06-2022 01:07:02]12669: WAF :: fetched 5 new logs [24-06-2022 01:08:01]15469: WAF :: fetched 6 new logs [24-06-2022 01:09:02]18148: WAF :: fetched 3 new logs [24-06-2022 01:12:01]26533: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656043921 [24-06-2022 01:12:01]26533: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 01:12:03]26533: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 01:12:04]26533: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-0112/20220624-011201-YrU5kYgOpX-7ogf7fIVG3QAAABM [24-06-2022 01:12:04]26533: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 01:12:04]26533: WAF :: fetched 1 new logs [24-06-2022 01:13:01]29174: WAF :: fetched 2 new logs [24-06-2022 01:14:02]31941: WAF :: fetched 3 new logs [24-06-2022 01:15:01]2333: WAF :: fetched 1 new logs [24-06-2022 01:17:01]7837: WAF :: fetched 1 new logs [24-06-2022 01:18:01]10498: WAF :: fetched 2 new logs [24-06-2022 01:19:02]13381: WAF :: fetched 2 new logs [24-06-2022 01:20:01]16452: WAF :: fetched 1 new logs [24-06-2022 01:21:01]19355: WAF :: fetched 4 new logs [24-06-2022 01:22:02]22047: WAF :: fetched 1 new logs [24-06-2022 01:23:01]24615: WAF :: fetched 2 new logs [24-06-2022 01:25:01]30063: WAF :: fetched 1 new logs [24-06-2022 01:26:01]575: WAF :: fetched 2 new logs [24-06-2022 01:27:02]3340: WAF :: fetched 2 new logs [24-06-2022 01:28:01]6193: WAF :: fetched 3 new logs [24-06-2022 01:29:02]8819: WAF :: fetched 2 new logs [24-06-2022 01:30:02]11865: WAF :: fetched 3 new logs [24-06-2022 01:31:02]14773: WAF :: fetched 7 new logs [24-06-2022 01:32:02]17467: WAF :: fetched 3 new logs [24-06-2022 01:33:01]20415: WAF :: fetched 1 new logs [24-06-2022 01:34:02]23413: WAF :: fetched 5 new logs [24-06-2022 01:35:02]26280: WAF :: fetched 1 new logs [24-06-2022 01:36:02]29006: WAF :: fetched 1 new logs [24-06-2022 01:40:02]8351: WAF :: fetched 5 new logs [24-06-2022 01:41:01]11180: WAF :: fetched 5 new logs [24-06-2022 01:41:01]11180: Checking for user cron vulnerabilities [24-06-2022 01:42:02]14274: WAF :: fetched 4 new logs [24-06-2022 01:43:02]17142: WAF :: fetched 26 new logs [24-06-2022 01:44:01]20055: Checking ditributed CMS bruteforce attacks [24-06-2022 01:44:01]20055: WAF :: fetched 2 new logs [24-06-2022 01:45:02]: Checking for definition updates [24-06-2022 01:45:02]22923: WAF :: fetched 1 new logs [24-06-2022 01:46:01]25531: WAF :: fetched 2 new logs [24-06-2022 01:47:01]28133: WAF :: fetched 4 new logs [24-06-2022 01:48:02]31110: WAF :: fetched 2 new logs [24-06-2022 01:50:01]4322: WAF :: fetched 6 new logs [24-06-2022 01:51:01]7027: WAF :: fetched 3 new logs [24-06-2022 01:52:02]9989: WAF :: fetched 7 new logs [24-06-2022 01:53:01]12599: WAF :: fetched 6 new logs [24-06-2022 01:54:02]15188: WAF :: fetched 4 new logs [24-06-2022 01:55:02]17855: WAF :: fetched 1 new logs [24-06-2022 01:56:01]20485: WAF :: fetched 4 new logs [24-06-2022 01:57:02]23163: WAF :: fetched 6 new logs [24-06-2022 01:58:01]25788: WAF :: fetched 4 new logs [24-06-2022 01:59:02]28743: WAF :: fetched 3 new logs [24-06-2022 02:00:02]31141: WAF :: fetched 5 new logs [24-06-2022 02:01:01]1835: WAF :: fetched 2 new logs [24-06-2022 02:02:01]4631: WAF :: fetched 4 new logs [24-06-2022 02:03:02]7265: WAF :: fetched 5 new logs [24-06-2022 02:04:01]9815: WAF :: fetched 1 new logs [24-06-2022 02:05:02]12533: WAF :: fetched 3 new logs [24-06-2022 02:06:02]15172: WAF :: fetched 1 new logs [24-06-2022 02:07:01]17745: WAF :: fetched 2 new logs [24-06-2022 02:08:02]20382: WAF :: fetched 5 new logs [24-06-2022 02:09:01]22975: WAF :: fetched 2 new logs [24-06-2022 02:10:02]25686: WAF :: fetched 1 new logs [24-06-2022 02:11:01]28322: WAF :: fetched 4 new logs [24-06-2022 02:12:01]30930: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656047521 [24-06-2022 02:12:01]30930: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 02:12:03]30930: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 02:12:03]30930: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-0212/20220624-021201-YrVHoe_LjoNMWmmbHyCO7AAAAAs [24-06-2022 02:12:03]30930: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 02:12:04]30930: WAF :: fetched 6 new logs [24-06-2022 02:13:02]1147: WAF :: fetched 6 new logs [24-06-2022 02:14:01]3800: WAF :: fetched 8 new logs [24-06-2022 02:16:02]9135: WAF :: fetched 2 new logs [24-06-2022 02:17:01]11748: WAF :: fetched 3 new logs [24-06-2022 02:18:02]14378: WAF :: fetched 3 new logs [24-06-2022 02:19:01]16957: WAF :: fetched 1 new logs [24-06-2022 02:20:02]19649: WAF :: fetched 4 new logs [24-06-2022 02:22:01]24846: WAF :: fetched 2 new logs [24-06-2022 02:23:02]27465: WAF :: fetched 5 new logs [24-06-2022 02:24:01]30063: WAF :: fetched 5 new logs [24-06-2022 02:25:02]300: WAF :: fetched 2 new logs [24-06-2022 02:26:02]3006: WAF :: fetched 3 new logs [24-06-2022 02:27:01]5666: WAF :: fetched 2 new logs [24-06-2022 02:28:02]8285: WAF :: fetched 1 new logs [24-06-2022 02:29:01]10829: WAF :: fetched 5 new logs [24-06-2022 02:30:01]13502: WAF :: fetched 3 new logs [24-06-2022 02:31:02]16156: WAF :: fetched 1 new logs [24-06-2022 02:32:01]18757: WAF :: fetched 2 new logs [24-06-2022 02:33:02]21371: WAF :: fetched 3 new logs [24-06-2022 02:34:02]23971: WAF :: fetched 3 new logs [24-06-2022 02:35:01]26632: WAF :: fetched 1 new logs [24-06-2022 02:36:02]29260: WAF :: fetched 3 new logs [24-06-2022 02:37:01]31840: WAF :: fetched 1 new logs [24-06-2022 02:38:01]2046: WAF :: fetched 5 new logs [24-06-2022 02:39:02]4702: WAF :: fetched 4 new logs [24-06-2022 02:40:01]7379: WAF :: fetched 1 new logs [24-06-2022 02:41:01]10018: Checking for user cron vulnerabilities [24-06-2022 02:42:02]12651: WAF :: fetched 2 new logs [24-06-2022 02:43:01]15212: WAF :: fetched 7 new logs [24-06-2022 02:44:02]17852: Checking ditributed CMS bruteforce attacks [24-06-2022 02:44:02]17852: WAF :: fetched 4 new logs [24-06-2022 02:45:01]20560: WAF :: fetched 2 new logs [24-06-2022 02:47:01]25781: WAF :: fetched 1 new logs [24-06-2022 02:49:02]32163: WAF :: fetched 5 new logs [24-06-2022 02:51:01]5337: WAF :: fetched 1 new logs [24-06-2022 02:52:01]7975: WAF :: fetched 1 new logs [24-06-2022 02:53:01]10515: Updated license status via CDN [24-06-2022 02:55:01]15771: WAF :: fetched 1 new logs [24-06-2022 02:56:02]18458: WAF :: fetched 3 new logs [24-06-2022 02:57:01]21107: WAF :: fetched 2 new logs [24-06-2022 02:59:01]26516: WAF :: fetched 1 new logs [24-06-2022 03:00:01]28901: WAF :: fetched 14 new logs [24-06-2022 03:00:05]28901: Found and updated 32 CMS installations [24-06-2022 03:01:02]32122: WAF :: fetched 16 new logs [24-06-2022 03:02:01]2716: WAF :: fetched 2 new logs [24-06-2022 03:02:19]28901: Sending CMS version vulnerability report emails to cpanel users [24-06-2022 03:02:22]28901: Checking wordpress installations for suspicious directories [24-06-2022 03:03:02]5752: WAF :: fetched 1 new logs [24-06-2022 03:04:01]8610: WAF :: fetched 2 new logs [24-06-2022 03:04:29]5780: Sending CMS version vulnerability report emails to cpanel users [24-06-2022 03:04:32]5780: Checking wordpress installations for suspicious directories [24-06-2022 03:05:01]11822: WAF :: fetched 1 new logs [24-06-2022 03:08:02]20232: WAF :: fetched 4 new logs [24-06-2022 03:09:02]22784: WAF :: fetched 10 new logs [24-06-2022 03:10:01]25661: WAF :: fetched 4 new logs [24-06-2022 03:11:02]28349: WAF :: fetched 2 new logs [24-06-2022 03:12:01]30945: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656051121 [24-06-2022 03:12:01]30945: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 03:12:03]30945: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 03:12:04]30945: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-0312/20220624-031201-YrVVsbAaxoxIHcTKWXe2mQAAAAg [24-06-2022 03:12:04]30945: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 03:12:04]30945: WAF :: fetched 7 new logs [24-06-2022 03:13:02]1195: WAF :: fetched 2 new logs [24-06-2022 03:14:01]3741: WAF :: fetched 5 new logs [24-06-2022 03:16:01]9177: WAF :: fetched 1 new logs [24-06-2022 03:17:01]12042: WAF :: fetched 3 new logs [24-06-2022 03:18:02]14945: WAF :: fetched 4 new logs [24-06-2022 03:19:01]17539: WAF :: fetched 4 new logs [24-06-2022 03:20:01]20259: WAF :: fetched 5 new logs [24-06-2022 03:21:02]22941: WAF :: fetched 3 new logs [24-06-2022 03:22:01]25549: WAF :: fetched 4 new logs [24-06-2022 03:23:02]28242: WAF :: fetched 5 new logs [24-06-2022 03:24:02]30834: WAF :: fetched 2 new logs [24-06-2022 03:25:02]1170: WAF :: fetched 4 new logs [24-06-2022 03:26:01]3910: WAF :: fetched 2 new logs [24-06-2022 03:27:01]6581: WAF :: fetched 1 new logs [24-06-2022 03:28:02]9270: WAF :: fetched 1 new logs [24-06-2022 03:29:01]11873: WAF :: fetched 6 new logs [24-06-2022 03:30:02]14596: WAF :: fetched 1 new logs [24-06-2022 03:31:02]17206: WAF :: fetched 4 new logs [24-06-2022 03:32:02]19832: WAF :: fetched 23 new logs [24-06-2022 03:33:01]22403: WAF :: fetched 1 new logs [24-06-2022 03:34:02]24988: WAF :: fetched 2 new logs [24-06-2022 03:35:01]27666: WAF :: fetched 4 new logs [24-06-2022 03:36:01]30289: WAF :: fetched 1 new logs [24-06-2022 03:37:02]399: WAF :: fetched 1 new logs [24-06-2022 03:38:01]3058: WAF :: fetched 2 new logs [24-06-2022 03:39:01]5967: WAF :: fetched 4 new logs [24-06-2022 03:40:02]8807: WAF :: fetched 6 new logs [24-06-2022 03:41:01]11638: WAF :: fetched 12 new logs [24-06-2022 03:41:01]11638: Checking for user cron vulnerabilities [24-06-2022 03:42:02]14381: WAF :: fetched 1 new logs [24-06-2022 03:43:02]15517: WAF :: fetched 1 new logs [24-06-2022 03:44:01]10476: Checking ditributed CMS bruteforce attacks [24-06-2022 03:44:01]10476: WAF :: fetched 1 new logs [24-06-2022 03:45:02]17140: WAF :: fetched 9 new logs [24-06-2022 03:46:01]26821: WAF :: fetched 2 new logs [24-06-2022 03:47:02]29555: WAF :: fetched 5 new logs [24-06-2022 03:48:01]32295: WAF :: fetched 3 new logs [24-06-2022 03:49:02]2580: WAF :: fetched 3 new logs [24-06-2022 03:50:02]5574: WAF :: fetched 3 new logs [24-06-2022 03:51:01]8346: WAF :: fetched 3 new logs [24-06-2022 03:52:02]11158: WAF :: fetched 4 new logs [24-06-2022 03:54:02]16427: WAF :: fetched 1 new logs [24-06-2022 03:55:02]19058: WAF :: fetched 1 new logs [24-06-2022 03:59:02]29437: WAF :: fetched 2 new logs [24-06-2022 04:00:02]31732: WAF :: fetched 1 new logs [24-06-2022 04:02:02]5209: WAF :: fetched 1 new logs [24-06-2022 04:04:02]10383: WAF :: fetched 1 new logs [24-06-2022 04:05:01]13021: WAF :: fetched 3 new logs [24-06-2022 04:06:02]15767: WAF :: fetched 4 new logs [24-06-2022 04:07:01]18344: WAF :: fetched 3 new logs [24-06-2022 04:08:01]20908: WAF :: fetched 4 new logs [24-06-2022 04:09:02]23495: WAF :: fetched 2 new logs [24-06-2022 04:10:01]26090: WAF :: fetched 1 new logs [24-06-2022 04:11:02]28800: WAF :: fetched 2 new logs [24-06-2022 04:12:02]31402: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656054722 [24-06-2022 04:12:02]31402: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 04:12:04]31402: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 04:12:04]31402: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-0412/20220624-041202-YrVjwmX1hNkFOyYolAdvFAAAAAY [24-06-2022 04:12:04]31402: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 04:12:04]31402: WAF :: fetched 3 new logs [24-06-2022 04:13:01]1631: WAF :: fetched 2 new logs [24-06-2022 04:14:02]4269: WAF :: fetched 4 new logs [24-06-2022 04:15:02]6862: WAF :: fetched 3 new logs [24-06-2022 04:16:01]9563: WAF :: fetched 1 new logs [24-06-2022 04:18:01]14738: WAF :: fetched 1 new logs [24-06-2022 04:19:02]17307: WAF :: fetched 1 new logs [24-06-2022 04:20:02]19895: WAF :: fetched 1 new logs [24-06-2022 04:22:01]25246: WAF :: fetched 4 new logs [24-06-2022 04:23:01]27812: WAF :: fetched 2 new logs [24-06-2022 04:24:02]30461: WAF :: fetched 1 new logs [24-06-2022 04:25:01]600: WAF :: fetched 6 new logs [24-06-2022 04:26:02]3421: WAF :: fetched 2 new logs [24-06-2022 04:27:02]6086: WAF :: fetched 4 new logs [24-06-2022 04:29:02]11310: WAF :: fetched 26 new logs [24-06-2022 04:30:02]13916: WAF :: fetched 74 new logs [24-06-2022 04:31:01]16623: WAF :: fetched 57 new logs [24-06-2022 04:32:01]19219: WAF :: fetched 65 new logs [24-06-2022 04:33:02]21792: WAF :: fetched 74 new logs [24-06-2022 04:34:02]24335: WAF :: fetched 72 new logs [24-06-2022 04:35:01]26924: WAF :: fetched 69 new logs [24-06-2022 04:36:02]29636: WAF :: fetched 10 new logs [24-06-2022 04:37:01]32167: WAF :: fetched 1 new logs [24-06-2022 04:38:01]2350: WAF :: fetched 5 new logs [24-06-2022 04:39:02]5041: WAF :: fetched 3 new logs [24-06-2022 04:40:02]7666: WAF :: fetched 3 new logs [24-06-2022 04:41:01]10356: Checking for user cron vulnerabilities [24-06-2022 04:43:01]15385: WAF :: fetched 3 new logs [24-06-2022 04:44:02]18129: Checking ditributed CMS bruteforce attacks [24-06-2022 04:45:01]20706: WAF :: fetched 1 new logs [24-06-2022 04:46:01]23392: WAF :: fetched 3 new logs [24-06-2022 04:47:02]26002: WAF :: fetched 2 new logs [24-06-2022 04:48:01]28560: WAF :: fetched 3 new logs [24-06-2022 04:49:02]31188: WAF :: fetched 2 new logs [24-06-2022 04:50:01]1351: WAF :: fetched 2 new logs [24-06-2022 04:52:01]6715: WAF :: fetched 2 new logs [24-06-2022 04:54:02]11944: WAF :: fetched 4 new logs [24-06-2022 04:55:02]14569: WAF :: fetched 6 new logs [24-06-2022 04:56:01]17225: WAF :: fetched 1 new logs [24-06-2022 04:59:02]24973: WAF :: fetched 5 new logs [24-06-2022 05:00:02]27281: WAF :: fetched 3 new logs [24-06-2022 05:01:02]30489: WAF :: fetched 2 new logs [24-06-2022 05:01:42]30483: Starting daily scan on files updated in last 24 hrs [24-06-2022 05:02:02]1890: WAF :: fetched 4 new logs [24-06-2022 05:03:01]5008: WAF :: fetched 7 new logs [24-06-2022 05:04:02]7638: WAF :: fetched 2 new logs [24-06-2022 05:05:01]10087: WAF :: fetched 1 new logs [24-06-2022 05:06:02]12906: WAF :: fetched 1 new logs [24-06-2022 05:07:01]15472: WAF :: fetched 2 new logs [24-06-2022 05:09:02]20723: WAF :: fetched 1 new logs [24-06-2022 05:10:02]23283: WAF :: fetched 2 new logs [24-06-2022 05:11:02]25993: WAF :: fetched 2 new logs [24-06-2022 05:12:01]28588: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656058321 [24-06-2022 05:12:01]28588: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 05:12:03]28588: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 05:12:03]28588: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-0512/20220624-051201-YrVx0TpMDbJznbB-_x7BYAAAAAw [24-06-2022 05:12:03]28588: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 05:12:04]28588: WAF :: fetched 2 new logs [24-06-2022 05:13:02]31175: WAF :: fetched 1 new logs [24-06-2022 05:14:01]1312: WAF :: fetched 2 new logs [24-06-2022 05:15:02]3983: WAF :: fetched 2 new logs [24-06-2022 05:19:01]14631: WAF :: fetched 3 new logs [24-06-2022 05:21:01]19787: WAF :: fetched 30 new logs [24-06-2022 05:22:01]22494: WAF :: fetched 1 new logs [24-06-2022 05:25:02]30272: WAF :: fetched 1 new logs [24-06-2022 05:26:01]503: WAF :: fetched 3 new logs [24-06-2022 05:28:02]5874: WAF :: fetched 1 new logs [24-06-2022 05:29:01]8446: WAF :: fetched 1 new logs [24-06-2022 05:31:02]13750: WAF :: fetched 2 new logs [24-06-2022 05:32:02]16387: WAF :: fetched 4 new logs [24-06-2022 05:33:01]18990: WAF :: fetched 2 new logs [24-06-2022 05:34:02]21563: WAF :: fetched 1 new logs [24-06-2022 05:35:02]24109: WAF :: fetched 1 new logs [24-06-2022 05:36:01]26824: WAF :: fetched 2 new logs [24-06-2022 05:38:02]32068: WAF :: fetched 2 new logs [24-06-2022 05:39:01]2269: WAF :: fetched 1 new logs [24-06-2022 05:41:02]7628: Checking for user cron vulnerabilities [24-06-2022 05:42:01]10282: WAF :: fetched 3 new logs [24-06-2022 05:43:02]12881: WAF :: fetched 2 new logs [24-06-2022 05:44:01]15443: Checking ditributed CMS bruteforce attacks [24-06-2022 05:44:01]15443: WAF :: fetched 1 new logs [24-06-2022 05:47:01]23300: WAF :: fetched 1 new logs [24-06-2022 05:52:02]4182: WAF :: fetched 3 new logs [24-06-2022 05:53:02]6803: WAF :: fetched 4 new logs [24-06-2022 05:54:01]9431: WAF :: fetched 2 new logs [24-06-2022 05:55:02]12026: WAF :: fetched 1 new logs [24-06-2022 05:56:01]14710: WAF :: fetched 2 new logs [24-06-2022 05:57:01]17306: WAF :: fetched 3 new logs [24-06-2022 05:58:02]19932: WAF :: fetched 4 new logs [24-06-2022 05:59:01]22495: WAF :: fetched 1 new logs [24-06-2022 06:00:02]24792: WAF :: fetched 1 new logs [24-06-2022 06:01:01]28064: WAF :: fetched 1 new logs [24-06-2022 06:02:02]30719: WAF :: fetched 3 new logs [24-06-2022 06:04:01]3498: WAF :: fetched 1 new logs [24-06-2022 06:07:01]11447: WAF :: fetched 4 new logs [24-06-2022 06:08:02]14051: WAF :: fetched 1 new logs [24-06-2022 06:12:01]24626: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656061921 [24-06-2022 06:12:01]24626: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 06:12:03]24626: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 06:12:04]24626: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-0612/20220624-061201-YrV_4Xkg1h6LU4klXgAi2wAAAAI [24-06-2022 06:12:04]24626: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 06:13:02]27259: WAF :: fetched 3 new logs [24-06-2022 06:15:01]32433: WAF :: fetched 1 new logs [24-06-2022 06:18:02]8124: WAF :: fetched 3 new logs [24-06-2022 06:19:01]10738: WAF :: fetched 1 new logs [24-06-2022 06:20:01]13408: WAF :: fetched 3 new logs [24-06-2022 06:22:01]18706: WAF :: fetched 2 new logs [24-06-2022 06:24:01]23888: WAF :: fetched 2 new logs [24-06-2022 06:25:01]26511: WAF :: fetched 1 new logs [24-06-2022 06:26:02]29234: WAF :: fetched 2 new logs [24-06-2022 06:27:02]31947: WAF :: fetched 3 new logs [24-06-2022 06:28:02]2195: WAF :: fetched 3 new logs [24-06-2022 06:29:01]4903: WAF :: fetched 1 new logs [24-06-2022 06:31:01]10230: WAF :: fetched 7 new logs [24-06-2022 06:34:01]18098: WAF :: fetched 2 new logs [24-06-2022 06:36:01]23492: WAF :: fetched 1 new logs [24-06-2022 06:37:01]26162: WAF :: fetched 2 new logs [24-06-2022 06:41:02]4414: Checking for user cron vulnerabilities [24-06-2022 06:42:02]7102: WAF :: fetched 4 new logs [24-06-2022 06:44:01]12350: Checking ditributed CMS bruteforce attacks [24-06-2022 06:45:01]15000: WAF :: fetched 6 new logs [24-06-2022 06:46:02]17699: WAF :: fetched 1 new logs [24-06-2022 06:47:01]20252: WAF :: fetched 2 new logs [24-06-2022 06:48:02]22917: WAF :: fetched 2 new logs [24-06-2022 06:50:01]28118: WAF :: fetched 2 new logs [24-06-2022 06:52:01]1027: WAF :: fetched 1 new logs [24-06-2022 06:54:01]6328: WAF :: fetched 5 new logs [24-06-2022 06:56:02]11752: WAF :: fetched 2 new logs [24-06-2022 06:57:01]14349: WAF :: fetched 4 new logs [24-06-2022 06:59:01]19553: WAF :: fetched 6 new logs [24-06-2022 07:01:02]25126: WAF :: fetched 1 new logs [24-06-2022 07:02:01]27807: WAF :: fetched 2 new logs [24-06-2022 07:03:02]30538: WAF :: fetched 2 new logs [24-06-2022 07:04:01]641: WAF :: fetched 1 new logs [24-06-2022 07:05:02]3361: WAF :: fetched 1 new logs [24-06-2022 07:08:02]11359: WAF :: fetched 4 new logs [24-06-2022 07:09:02]13962: WAF :: fetched 1 new logs [24-06-2022 07:10:01]16606: WAF :: fetched 4 new logs [24-06-2022 07:11:02]19320: WAF :: fetched 2 new logs [24-06-2022 07:12:01]21785: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656065521 [24-06-2022 07:12:01]21785: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 07:12:03]21785: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 07:12:03]21785: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-0712/20220624-071201-YrWN8UJW33s_DRTelXGJcAAAAA0 [24-06-2022 07:12:03]21785: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 07:12:04]21785: WAF :: fetched 2 new logs [24-06-2022 07:17:01]2613: WAF :: fetched 4 new logs [24-06-2022 07:18:02]5339: WAF :: fetched 1 new logs [24-06-2022 07:20:01]10719: WAF :: fetched 1 new logs [24-06-2022 07:21:02]13494: WAF :: fetched 2 new logs [24-06-2022 07:22:01]16162: WAF :: fetched 2 new logs [24-06-2022 07:23:02]18744: WAF :: fetched 3 new logs [24-06-2022 07:24:01]21359: WAF :: fetched 6 new logs [24-06-2022 07:26:02]26745: WAF :: fetched 7 new logs [24-06-2022 07:27:01]29343: WAF :: fetched 2 new logs [24-06-2022 07:28:02]31962: WAF :: fetched 1 new logs [24-06-2022 07:29:02]2171: WAF :: fetched 2 new logs [24-06-2022 07:30:01]4917: WAF :: fetched 9 new logs [24-06-2022 07:31:02]7716: WAF :: fetched 30 new logs [24-06-2022 07:38:02]26224: WAF :: fetched 2 new logs [24-06-2022 07:41:02]1911: WAF :: fetched 2 new logs [24-06-2022 07:41:02]1911: Checking for user cron vulnerabilities [24-06-2022 07:42:01]4697: WAF :: fetched 1 new logs [24-06-2022 07:43:02]7318: WAF :: fetched 3 new logs [24-06-2022 07:44:01]9927: Checking ditributed CMS bruteforce attacks [24-06-2022 07:44:02]9927: WAF :: fetched 4 new logs [24-06-2022 07:45:01]: Checking for definition updates [24-06-2022 07:45:01]12555: WAF :: fetched 2 new logs [24-06-2022 07:45:02]12554: Updated virus defnition : malware.expert.ndb [24-06-2022 07:47:01]17864: WAF :: fetched 1 new logs [24-06-2022 07:50:01]25863: WAF :: fetched 2 new logs [24-06-2022 07:51:02]28636: WAF :: fetched 3 new logs [24-06-2022 07:52:01]31252: WAF :: fetched 4 new logs [24-06-2022 07:53:01]1452: WAF :: fetched 5 new logs [24-06-2022 07:55:01]6781: WAF :: fetched 1 new logs [24-06-2022 07:56:02]9602: WAF :: fetched 3 new logs [24-06-2022 07:57:02]12266: WAF :: fetched 3 new logs [24-06-2022 07:58:01]14914: WAF :: fetched 2 new logs [24-06-2022 07:59:02]17522: WAF :: fetched 1 new logs [24-06-2022 08:01:02]23122: WAF :: fetched 1 new logs [24-06-2022 08:06:02]4067: WAF :: fetched 1 new logs [24-06-2022 08:08:02]9452: WAF :: fetched 2 new logs [24-06-2022 08:09:02]12079: WAF :: fetched 3 new logs [24-06-2022 08:11:02]17496: WAF :: fetched 2 new logs [24-06-2022 08:12:02]20109: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656069122 [24-06-2022 08:12:02]20109: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 08:12:04]20109: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 08:12:04]20109: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-0812/20220624-081202-YrWcAr1xykYdijVGsLc_BwAAAAc [24-06-2022 08:12:04]20109: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 08:12:04]20109: WAF :: fetched 2 new logs [24-06-2022 08:14:02]25368: WAF :: fetched 1 new logs [24-06-2022 08:16:02]30755: WAF :: fetched 1 new logs [24-06-2022 08:17:02]890: WAF :: fetched 2 new logs [24-06-2022 08:19:02]6282: WAF :: fetched 3 new logs [24-06-2022 08:21:01]11785: WAF :: fetched 2 new logs [24-06-2022 08:22:02]14439: WAF :: fetched 3 new logs [24-06-2022 08:23:01]17004: WAF :: fetched 3 new logs [24-06-2022 08:24:02]19632: WAF :: fetched 1 new logs [24-06-2022 08:26:01]24970: WAF :: fetched 1 new logs [24-06-2022 08:27:02]27585: WAF :: fetched 2 new logs [24-06-2022 08:28:01]30189: WAF :: fetched 7 new logs [24-06-2022 08:29:01]305: WAF :: fetched 4 new logs [24-06-2022 08:30:02]3048: WAF :: fetched 4 new logs [24-06-2022 08:31:01]5949: WAF :: fetched 1 new logs [24-06-2022 08:32:02]8656: WAF :: fetched 1 new logs [24-06-2022 08:33:01]11308: WAF :: fetched 5 new logs [24-06-2022 08:38:02]24498: WAF :: fetched 1 new logs [24-06-2022 08:39:01]27240: WAF :: fetched 2 new logs [24-06-2022 08:40:02]29959: WAF :: fetched 1 new logs [24-06-2022 08:41:02]32628: WAF :: fetched 3 new logs [24-06-2022 08:41:02]32628: Checking for user cron vulnerabilities [24-06-2022 08:42:01]2940: WAF :: fetched 3 new logs [24-06-2022 08:43:01]5628: WAF :: fetched 1 new logs [24-06-2022 08:44:01]8345: Checking ditributed CMS bruteforce attacks [24-06-2022 08:44:02]8345: WAF :: fetched 3 new logs [24-06-2022 08:45:01]11074: WAF :: fetched 2 new logs [24-06-2022 08:46:02]13870: WAF :: fetched 2 new logs [24-06-2022 08:47:01]16467: WAF :: fetched 1 new logs [24-06-2022 08:48:01]19099: WAF :: fetched 2 new logs [24-06-2022 08:49:01]21675: WAF :: fetched 1 new logs [24-06-2022 08:50:02]24308: WAF :: fetched 4 new logs [24-06-2022 08:52:01]29700: WAF :: fetched 6 new logs [24-06-2022 08:53:02]32291: WAF :: fetched 5 new logs [24-06-2022 08:54:01]2479: WAF :: fetched 3 new logs [24-06-2022 08:56:02]7875: WAF :: fetched 2 new logs [24-06-2022 08:57:01]10635: WAF :: fetched 1 new logs [24-06-2022 08:58:02]13322: WAF :: fetched 3 new logs [24-06-2022 08:59:01]15894: WAF :: fetched 1 new logs [24-06-2022 09:00:02]18234: WAF :: fetched 1 new logs [24-06-2022 09:01:01]21287: WAF :: fetched 1 new logs [24-06-2022 09:02:02]24006: WAF :: fetched 1 new logs [24-06-2022 09:04:01]29203: WAF :: fetched 2 new logs [24-06-2022 09:05:02]31877: WAF :: fetched 1 new logs [24-06-2022 09:06:01]2229: WAF :: fetched 1 new logs [24-06-2022 09:07:02]5031: WAF :: fetched 3 new logs [24-06-2022 09:10:02]12961: WAF :: fetched 2 new logs [24-06-2022 09:11:01]15621: WAF :: fetched 3 new logs [24-06-2022 09:12:02]18385: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656072722 [24-06-2022 09:12:02]18385: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 09:12:04]18385: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 09:12:04]18385: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-0912/20220624-091202-YrWqEvNgiRO5EA9Va2Am1AAAACU [24-06-2022 09:12:04]18385: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 09:12:05]18385: WAF :: fetched 4 new logs [24-06-2022 09:13:02]21089: WAF :: fetched 1 new logs [24-06-2022 09:15:02]26329: WAF :: fetched 3 new logs [24-06-2022 09:16:01]29035: WAF :: fetched 3 new logs [24-06-2022 09:18:01]2023: WAF :: fetched 2 new logs [24-06-2022 09:19:02]4830: WAF :: fetched 3 new logs [24-06-2022 09:20:02]7444: WAF :: fetched 2 new logs [24-06-2022 09:21:01]10196: WAF :: fetched 1 new logs [24-06-2022 09:24:01]18313: WAF :: fetched 4 new logs [24-06-2022 09:25:02]20957: WAF :: fetched 1 new logs [24-06-2022 09:27:01]26431: WAF :: fetched 2 new logs [24-06-2022 09:28:02]29053: WAF :: fetched 1 new logs [24-06-2022 09:30:01]1958: WAF :: fetched 1 new logs [24-06-2022 09:31:02]4787: WAF :: fetched 2 new logs [24-06-2022 09:32:01]7532: WAF :: fetched 1 new logs [24-06-2022 09:34:02]12925: WAF :: fetched 2 new logs [24-06-2022 09:36:02]18392: WAF :: fetched 2 new logs [24-06-2022 09:37:01]21086: WAF :: fetched 2 new logs [24-06-2022 09:38:02]23752: WAF :: fetched 3 new logs [24-06-2022 09:41:02]31804: WAF :: fetched 1 new logs [24-06-2022 09:41:02]31804: Checking for user cron vulnerabilities [24-06-2022 09:44:01]7789: Checking ditributed CMS bruteforce attacks [24-06-2022 09:44:02]7789: WAF :: fetched 3 new logs [24-06-2022 09:46:02]13269: WAF :: fetched 5 new logs [24-06-2022 09:47:02]16034: WAF :: fetched 1 new logs [24-06-2022 09:48:01]18714: WAF :: fetched 2 new logs [24-06-2022 09:49:01]21370: WAF :: fetched 2 new logs [24-06-2022 09:50:02]24093: WAF :: fetched 1 new logs [24-06-2022 09:51:01]26784: WAF :: fetched 1 new logs [24-06-2022 09:52:01]29548: WAF :: fetched 1 new logs [24-06-2022 09:54:01]2514: WAF :: fetched 1 new logs [24-06-2022 09:55:02]5219: WAF :: fetched 3 new logs [24-06-2022 09:57:01]10639: WAF :: fetched 2 new logs [24-06-2022 10:00:02]18428: WAF :: fetched 1 new logs [24-06-2022 10:01:02]21548: WAF :: fetched 5 new logs [24-06-2022 10:02:01]24332: WAF :: fetched 2 new logs [24-06-2022 10:03:01]26963: WAF :: fetched 2 new logs [24-06-2022 10:04:02]29601: WAF :: fetched 5 new logs [24-06-2022 10:06:02]2568: WAF :: fetched 2 new logs [24-06-2022 10:07:01]5325: WAF :: fetched 2 new logs [24-06-2022 10:08:01]7959: WAF :: fetched 2 new logs [24-06-2022 10:09:01]10596: WAF :: fetched 5 new logs [24-06-2022 10:10:02]13278: WAF :: fetched 2 new logs [24-06-2022 10:11:01]15938: WAF :: fetched 3 new logs [24-06-2022 10:12:01]18681: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656076321 [24-06-2022 10:12:01]18681: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 10:12:03]18681: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 10:12:03]18681: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-1012/20220624-101201-YrW4IURc4l0EXoQlDa9AWwAAAAg [24-06-2022 10:12:03]18681: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 10:12:04]18681: WAF :: fetched 1 new logs [24-06-2022 10:13:02]21343: WAF :: fetched 5 new logs [24-06-2022 10:16:02]29472: WAF :: fetched 2 new logs [24-06-2022 10:17:02]32267: WAF :: fetched 5 new logs [24-06-2022 10:18:02]2554: WAF :: fetched 9 new logs [24-06-2022 10:19:01]5270: WAF :: fetched 3 new logs [24-06-2022 10:20:02]8090: WAF :: fetched 4 new logs [24-06-2022 10:23:02]16170: WAF :: fetched 2 new logs [24-06-2022 10:24:01]18887: WAF :: fetched 1 new logs [24-06-2022 10:25:02]21644: WAF :: fetched 4 new logs [24-06-2022 10:27:01]27258: WAF :: fetched 2 new logs [24-06-2022 10:28:02]29955: WAF :: fetched 2 new logs [24-06-2022 10:29:01]32622: WAF :: fetched 1 new logs [24-06-2022 10:30:01]2954: WAF :: fetched 3 new logs [24-06-2022 10:31:02]5834: WAF :: fetched 1 new logs [24-06-2022 10:32:01]8613: WAF :: fetched 5 new logs [24-06-2022 10:34:02]14282: WAF :: fetched 1 new logs [24-06-2022 10:35:01]16975: WAF :: fetched 3 new logs [24-06-2022 10:36:01]19733: WAF :: fetched 3 new logs [24-06-2022 10:38:01]25162: WAF :: fetched 2 new logs [24-06-2022 10:39:01]27841: WAF :: fetched 3 new logs [24-06-2022 10:40:02]30530: WAF :: fetched 3 new logs [24-06-2022 10:41:02]813: WAF :: fetched 2 new logs [24-06-2022 10:41:02]813: Checking for user cron vulnerabilities [24-06-2022 10:44:01]9249: Checking ditributed CMS bruteforce attacks [24-06-2022 10:46:02]14837: WAF :: fetched 1 new logs [24-06-2022 10:47:01]17655: WAF :: fetched 2 new logs [24-06-2022 10:48:02]20438: WAF :: fetched 2 new logs [24-06-2022 10:49:01]23184: WAF :: fetched 1 new logs [24-06-2022 10:50:02]25916: WAF :: fetched 1 new logs [24-06-2022 10:51:02]28736: WAF :: fetched 2 new logs [24-06-2022 10:53:02]1965: WAF :: fetched 2 new logs [24-06-2022 10:55:01]7625: WAF :: fetched 2 new logs [24-06-2022 10:56:02]10458: WAF :: fetched 3 new logs [24-06-2022 10:57:02]13239: WAF :: fetched 2 new logs [24-06-2022 10:58:01]15926: WAF :: fetched 1 new logs [24-06-2022 10:59:02]18731: WAF :: fetched 2 new logs [24-06-2022 11:00:02]21252: WAF :: fetched 7 new logs [24-06-2022 11:01:01]24471: WAF :: fetched 2 new logs [24-06-2022 11:02:02]27277: WAF :: fetched 1 new logs [24-06-2022 11:03:01]29861: WAF :: fetched 1 new logs [24-06-2022 11:06:01]5679: WAF :: fetched 2 new logs [24-06-2022 11:07:02]8425: WAF :: fetched 2 new logs [24-06-2022 11:08:02]11047: WAF :: fetched 1 new logs [24-06-2022 11:08:23]8583: Performed RBL check for 23.111.136.34. [24-06-2022 11:09:01]13711: WAF :: fetched 2 new logs [24-06-2022 11:11:01]18884: WAF :: fetched 4 new logs [24-06-2022 11:12:02]21763: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656079922 [24-06-2022 11:12:02]21763: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 11:12:04]21763: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 11:12:04]21763: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-1112/20220624-111202-YrXGMmsKhrKNsJX289fcLQAAAAE [24-06-2022 11:12:04]21763: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 11:12:04]21763: WAF :: fetched 4 new logs [24-06-2022 11:13:01]24444: WAF :: fetched 5 new logs [24-06-2022 11:14:01]27126: WAF :: fetched 1 new logs [24-06-2022 11:15:02]29804: WAF :: fetched 6 new logs [24-06-2022 11:16:01]32551: WAF :: fetched 4 new logs [24-06-2022 11:19:02]8272: WAF :: fetched 1 new logs [24-06-2022 11:20:02]10983: WAF :: fetched 3 new logs [24-06-2022 11:21:01]13770: WAF :: fetched 6 new logs [24-06-2022 11:22:02]16497: WAF :: fetched 1 new logs [24-06-2022 11:23:01]19079: WAF :: fetched 8 new logs [24-06-2022 11:24:02]21815: WAF :: fetched 3 new logs [24-06-2022 11:25:02]24522: WAF :: fetched 3 new logs [24-06-2022 11:26:02]27326: WAF :: fetched 4 new logs [24-06-2022 11:27:01]30090: WAF :: fetched 3 new logs [24-06-2022 11:28:02]363: WAF :: fetched 6 new logs [24-06-2022 11:29:02]3145: WAF :: fetched 3 new logs [24-06-2022 11:30:01]5950: WAF :: fetched 2 new logs [24-06-2022 11:31:02]8722: WAF :: fetched 9 new logs [24-06-2022 11:32:02]11554: WAF :: fetched 3 new logs [24-06-2022 11:34:01]16960: WAF :: fetched 5 new logs [24-06-2022 11:35:02]19632: WAF :: fetched 3 new logs [24-06-2022 11:36:02]22293: WAF :: fetched 1 new logs [24-06-2022 11:37:01]25025: WAF :: fetched 5 new logs [24-06-2022 11:39:02]30347: WAF :: fetched 1 new logs [24-06-2022 11:41:02]3292: WAF :: fetched 2 new logs [24-06-2022 11:41:02]3292: Checking for user cron vulnerabilities [24-06-2022 11:42:02]6078: WAF :: fetched 1 new logs [24-06-2022 11:44:01]11632: Checking ditributed CMS bruteforce attacks [24-06-2022 11:44:01]11632: WAF :: fetched 7 new logs [24-06-2022 11:45:02]14505: WAF :: fetched 2 new logs [24-06-2022 11:46:02]17413: WAF :: fetched 2 new logs [24-06-2022 11:47:01]20246: WAF :: fetched 1 new logs [24-06-2022 11:49:02]25597: WAF :: fetched 8 new logs [24-06-2022 11:50:01]28328: WAF :: fetched 1 new logs [24-06-2022 11:51:01]31096: WAF :: fetched 2 new logs [24-06-2022 11:52:02]1495: WAF :: fetched 1 new logs [24-06-2022 11:53:01]4152: WAF :: fetched 4 new logs [24-06-2022 11:54:02]6863: WAF :: fetched 5 new logs [24-06-2022 11:55:01]9507: WAF :: fetched 4 new logs [24-06-2022 11:56:02]12285: WAF :: fetched 3 new logs [24-06-2022 11:57:01]14913: WAF :: fetched 3 new logs [24-06-2022 11:58:02]17667: WAF :: fetched 1 new logs [24-06-2022 11:59:01]20278: WAF :: fetched 1 new logs [24-06-2022 12:00:01]22682: WAF :: fetched 1 new logs [24-06-2022 12:01:02]25885: WAF :: fetched 1 new logs [24-06-2022 12:02:01]28600: WAF :: fetched 6 new logs [24-06-2022 12:03:01]31296: WAF :: fetched 4 new logs [24-06-2022 12:05:01]4202: WAF :: fetched 1 new logs [24-06-2022 12:06:01]6983: WAF :: fetched 2 new logs [24-06-2022 12:07:02]9779: WAF :: fetched 2 new logs [24-06-2022 12:08:01]12280: WAF :: fetched 4 new logs [24-06-2022 12:09:02]15015: WAF :: fetched 20 new logs [24-06-2022 12:10:02]17649: WAF :: fetched 12 new logs [24-06-2022 12:11:01]20450: WAF :: fetched 1 new logs [24-06-2022 12:12:01]23206: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656083521 [24-06-2022 12:12:01]23206: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 12:12:03]23206: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 12:12:03]23206: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-1212/20220624-121201-YrXUQYkEYFWm0XCp16N8NQAAACw [24-06-2022 12:12:03]23206: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 12:12:04]23206: WAF :: fetched 3 new logs [24-06-2022 12:13:02]25970: WAF :: fetched 3 new logs [24-06-2022 12:14:01]28597: WAF :: fetched 1 new logs [24-06-2022 12:16:02]2439: WAF :: fetched 2 new logs [24-06-2022 12:17:01]5243: WAF :: fetched 2 new logs [24-06-2022 12:19:01]10510: WAF :: fetched 1 new logs [24-06-2022 12:20:01]13207: WAF :: fetched 7 new logs [24-06-2022 12:21:02]16016: WAF :: fetched 5 new logs [24-06-2022 12:22:02]18686: WAF :: fetched 1 new logs [24-06-2022 12:23:01]21354: WAF :: fetched 2 new logs [24-06-2022 12:24:02]24001: WAF :: fetched 2 new logs [24-06-2022 12:26:02]29312: WAF :: fetched 2 new logs [24-06-2022 12:27:01]31929: WAF :: fetched 8 new logs [24-06-2022 12:28:02]2215: WAF :: fetched 3 new logs [24-06-2022 12:29:01]4894: WAF :: fetched 4 new logs [24-06-2022 12:30:02]7613: WAF :: fetched 2 new logs [24-06-2022 12:31:02]10301: WAF :: fetched 1 new logs [24-06-2022 12:32:01]13100: WAF :: fetched 1 new logs [24-06-2022 12:33:02]15716: WAF :: fetched 4 new logs [24-06-2022 12:34:01]18345: WAF :: fetched 2 new logs [24-06-2022 12:35:02]21046: WAF :: fetched 2 new logs [24-06-2022 12:36:02]23734: WAF :: fetched 5 new logs [24-06-2022 12:37:01]26458: WAF :: fetched 1 new logs [24-06-2022 12:39:01]31791: WAF :: fetched 3 new logs [24-06-2022 12:40:02]2084: WAF :: fetched 2 new logs [24-06-2022 12:41:02]4841: WAF :: fetched 2 new logs [24-06-2022 12:41:02]4841: Checking for user cron vulnerabilities [24-06-2022 12:43:02]10249: WAF :: fetched 2 new logs [24-06-2022 12:44:01]12931: Checking ditributed CMS bruteforce attacks [24-06-2022 12:44:02]12931: WAF :: fetched 1 new logs [24-06-2022 12:45:01]: Checking for software updates [24-06-2022 12:47:02]21269: WAF :: fetched 3 new logs [24-06-2022 12:52:01]2491: WAF :: fetched 1 new logs [24-06-2022 12:53:02]5202: WAF :: fetched 3 new logs [24-06-2022 12:54:01]7957: WAF :: fetched 2 new logs [24-06-2022 12:55:01]10732: WAF :: fetched 8 new logs [24-06-2022 12:56:02]13522: WAF :: fetched 3 new logs [24-06-2022 12:57:01]16254: WAF :: fetched 1 new logs [24-06-2022 12:58:02]18887: WAF :: fetched 5 new logs [24-06-2022 12:59:02]21555: WAF :: fetched 2 new logs [24-06-2022 13:01:01]27099: WAF :: fetched 5 new logs [24-06-2022 13:02:02]29880: WAF :: fetched 1 new logs [24-06-2022 13:03:01]32443: WAF :: fetched 2 new logs [24-06-2022 13:04:01]2671: WAF :: fetched 1 new logs [24-06-2022 13:05:02]5373: WAF :: fetched 2 new logs [24-06-2022 13:06:01]8060: WAF :: fetched 3 new logs [24-06-2022 13:07:02]10780: WAF :: fetched 3 new logs [24-06-2022 13:08:02]13406: WAF :: fetched 4 new logs [24-06-2022 13:09:02]16050: WAF :: fetched 1 new logs [24-06-2022 13:10:02]18672: WAF :: fetched 1 new logs [24-06-2022 13:11:01]21443: WAF :: fetched 1 new logs [24-06-2022 13:12:02]24168: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656087122 [24-06-2022 13:12:02]24168: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 13:12:04]24168: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 13:12:04]24168: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-1312/20220624-131202-YrXiUjXV4nzWEX3VZYudIgAAAA4 [24-06-2022 13:12:04]24168: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 13:12:04]24168: WAF :: fetched 7 new logs [24-06-2022 13:13:01]26815: WAF :: fetched 3 new logs [24-06-2022 13:19:01]10476: WAF :: fetched 1 new logs [24-06-2022 13:22:02]18685: WAF :: fetched 3 new logs [24-06-2022 13:23:01]21272: WAF :: fetched 2 new logs [24-06-2022 13:24:01]23896: WAF :: fetched 1 new logs [24-06-2022 13:25:02]26538: WAF :: fetched 2 new logs [24-06-2022 13:26:01]29295: WAF :: fetched 2 new logs [24-06-2022 13:27:01]31969: WAF :: fetched 2 new logs [24-06-2022 13:28:02]2244: WAF :: fetched 3 new logs [24-06-2022 13:30:02]7554: WAF :: fetched 1 new logs [24-06-2022 13:31:02]10248: WAF :: fetched 2 new logs [24-06-2022 13:32:01]12968: WAF :: fetched 2 new logs [24-06-2022 13:33:02]15648: WAF :: fetched 1 new logs [24-06-2022 13:34:01]18253: WAF :: fetched 1 new logs [24-06-2022 13:35:01]20864: WAF :: fetched 3 new logs [24-06-2022 13:36:02]23581: WAF :: fetched 1 new logs [24-06-2022 13:37:01]26262: WAF :: fetched 3 new logs [24-06-2022 13:39:02]31541: WAF :: fetched 1 new logs [24-06-2022 13:40:02]1810: WAF :: fetched 2 new logs [24-06-2022 13:41:01]4570: WAF :: fetched 3 new logs [24-06-2022 13:41:01]4570: Checking for user cron vulnerabilities [24-06-2022 13:42:02]7218: WAF :: fetched 5 new logs [24-06-2022 13:43:01]9936: WAF :: fetched 6 new logs [24-06-2022 13:44:02]12687: Checking ditributed CMS bruteforce attacks [24-06-2022 13:44:02]12687: WAF :: fetched 5 new logs [24-06-2022 13:45:01]: Checking for definition updates [24-06-2022 13:45:02]15460: WAF :: fetched 9 new logs [24-06-2022 13:46:01]18264: WAF :: fetched 12 new logs [24-06-2022 13:47:02]20949: WAF :: fetched 10 new logs [24-06-2022 13:48:02]23657: WAF :: fetched 1 new logs [24-06-2022 13:49:02]26307: WAF :: fetched 1 new logs [24-06-2022 13:50:02]29044: WAF :: fetched 3 new logs [24-06-2022 13:51:01]31787: WAF :: fetched 2 new logs [24-06-2022 13:52:01]2132: WAF :: fetched 4 new logs [24-06-2022 13:54:02]7874: WAF :: fetched 2 new logs [24-06-2022 13:56:02]13443: WAF :: fetched 3 new logs [24-06-2022 13:58:02]19026: WAF :: fetched 3 new logs [24-06-2022 14:00:01]24285: WAF :: fetched 4 new logs [24-06-2022 14:01:02]27514: WAF :: fetched 7 new logs [24-06-2022 14:02:01]29916: WAF :: fetched 1 new logs [24-06-2022 14:03:01]496: WAF :: fetched 7 new logs [24-06-2022 14:04:01]3228: WAF :: fetched 4 new logs [24-06-2022 14:05:02]5954: WAF :: fetched 2 new logs [24-06-2022 14:06:01]8634: WAF :: fetched 3 new logs [24-06-2022 14:07:02]11344: WAF :: fetched 3 new logs [24-06-2022 14:08:01]13916: WAF :: fetched 9 new logs [24-06-2022 14:09:01]16803: WAF :: fetched 2 new logs [24-06-2022 14:10:01]19510: WAF :: fetched 1 new logs [24-06-2022 14:11:01]22230: WAF :: fetched 2 new logs [24-06-2022 14:12:02]24950: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656090722 [24-06-2022 14:12:02]24950: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 14:12:04]24950: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 14:12:04]24950: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-1412/20220624-141202-YrXwYvGLSPvtqHsofy_0SgAAAAo [24-06-2022 14:12:04]24950: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 14:12:04]24950: WAF :: fetched 1 new logs [24-06-2022 14:13:02]27697: WAF :: fetched 1 new logs [24-06-2022 14:16:01]3447: WAF :: fetched 4 new logs [24-06-2022 14:17:02]6181: WAF :: fetched 1 new logs [24-06-2022 14:18:02]9004: WAF :: fetched 2 new logs [24-06-2022 14:19:02]11661: WAF :: fetched 1 new logs [24-06-2022 14:20:02]14388: WAF :: fetched 3 new logs [24-06-2022 14:21:01]17181: WAF :: fetched 1 new logs [24-06-2022 14:22:01]19879: WAF :: fetched 3 new logs [24-06-2022 14:23:02]22764: WAF :: fetched 3 new logs [24-06-2022 14:24:02]25467: WAF :: fetched 3 new logs [24-06-2022 14:25:01]28079: WAF :: fetched 3 new logs [24-06-2022 14:26:02]30999: WAF :: fetched 7 new logs [24-06-2022 14:27:01]1306: WAF :: fetched 9 new logs [24-06-2022 14:28:02]4206: WAF :: fetched 1 new logs [24-06-2022 14:29:01]6856: WAF :: fetched 2 new logs [24-06-2022 14:32:02]15238: WAF :: fetched 8 new logs [24-06-2022 14:33:02]17992: WAF :: fetched 1 new logs [24-06-2022 14:34:01]20563: WAF :: fetched 2 new logs [24-06-2022 14:37:01]28692: WAF :: fetched 4 new logs [24-06-2022 14:39:01]1987: WAF :: fetched 3 new logs [24-06-2022 14:40:02]4779: WAF :: fetched 1 new logs [24-06-2022 14:41:01]7348: WAF :: fetched 1 new logs [24-06-2022 14:41:01]7348: Checking for user cron vulnerabilities [24-06-2022 14:42:01]10258: WAF :: fetched 2 new logs [24-06-2022 14:44:02]15869: Checking ditributed CMS bruteforce attacks [24-06-2022 14:44:02]15869: WAF :: fetched 2 new logs [24-06-2022 14:45:01]18415: WAF :: fetched 5 new logs [24-06-2022 14:46:02]21517: WAF :: fetched 3 new logs [24-06-2022 14:47:01]24228: WAF :: fetched 1 new logs [24-06-2022 14:49:01]29809: WAF :: fetched 1 new logs [24-06-2022 14:50:02]32765: WAF :: fetched 1 new logs [24-06-2022 14:51:02]3305: WAF :: fetched 1 new logs [24-06-2022 14:51:02]3314: httpd.conf changed. Refreshing watchlist. [24-06-2022 14:52:01]5909: WAF :: fetched 2 new logs [24-06-2022 14:53:02]9011: Updated license status via CDN [24-06-2022 14:54:02]11735: WAF :: fetched 4 new logs [24-06-2022 14:55:01]14544: httpd.conf changed. Refreshing watchlist. [24-06-2022 14:55:01]14541: WAF :: fetched 41 new logs [24-06-2022 14:56:02]17426: WAF :: fetched 20 new logs [24-06-2022 14:57:02]20071: WAF :: fetched 3 new logs [24-06-2022 14:58:01]22735: WAF :: fetched 2 new logs [24-06-2022 14:59:01]25540: WAF :: fetched 1 new logs [24-06-2022 15:00:02]27990: WAF :: fetched 1 new logs [24-06-2022 15:01:02]31151: Reseting cPGuard inotify settings [24-06-2022 15:03:02]4512: WAF :: fetched 1 new logs [24-06-2022 15:04:02]7310: WAF :: fetched 3 new logs [24-06-2022 15:05:02]10097: WAF :: fetched 2 new logs [24-06-2022 15:06:01]12663: WAF :: fetched 4 new logs [24-06-2022 15:07:01]15617: WAF :: fetched 1 new logs [24-06-2022 15:08:02]18489: WAF :: fetched 2 new logs [24-06-2022 15:09:02]21250: WAF :: fetched 5 new logs [24-06-2022 15:10:01]24038: WAF :: fetched 6 new logs [24-06-2022 15:11:01]27025: WAF :: fetched 3 new logs [24-06-2022 15:12:02]29840: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656094322 [24-06-2022 15:12:02]29840: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 15:12:04]29840: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 15:12:04]29840: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-1512/20220624-151202-YrX-cnjx4CHowIbjVB08BQAAAAQ [24-06-2022 15:12:04]29840: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 15:12:04]29840: WAF :: fetched 4 new logs [24-06-2022 15:13:02]32653: WAF :: fetched 2 new logs [24-06-2022 15:14:01]2825: WAF :: fetched 6 new logs [24-06-2022 15:15:01]5832: WAF :: fetched 1 new logs [24-06-2022 15:21:01]22327: WAF :: fetched 2 new logs [24-06-2022 15:22:02]25023: WAF :: fetched 5 new logs [24-06-2022 15:23:02]27790: WAF :: fetched 2 new logs [24-06-2022 15:24:01]30276: WAF :: fetched 3 new logs [24-06-2022 15:26:02]3503: WAF :: fetched 3 new logs [24-06-2022 15:27:02]6284: WAF :: fetched 8 new logs [24-06-2022 15:28:01]8924: WAF :: fetched 2 new logs [24-06-2022 15:29:01]11701: WAF :: fetched 1 new logs [24-06-2022 15:30:02]14406: WAF :: fetched 3 new logs [24-06-2022 15:31:02]17237: WAF :: fetched 6 new logs [24-06-2022 15:32:02]19950: WAF :: fetched 1 new logs [24-06-2022 15:34:01]25411: WAF :: fetched 3 new logs [24-06-2022 15:35:01]28211: WAF :: fetched 2 new logs [24-06-2022 15:37:02]1291: WAF :: fetched 3 new logs [24-06-2022 15:38:01]3896: WAF :: fetched 2 new logs [24-06-2022 15:40:02]9468: WAF :: fetched 3 new logs [24-06-2022 15:41:02]12192: WAF :: fetched 2 new logs [24-06-2022 15:41:02]12192: Checking for user cron vulnerabilities [24-06-2022 15:42:02]14844: WAF :: fetched 3 new logs [24-06-2022 15:43:01]17341: WAF :: fetched 3 new logs [24-06-2022 15:44:01]20327: Checking ditributed CMS bruteforce attacks [24-06-2022 15:44:02]20327: WAF :: fetched 7 new logs [24-06-2022 15:45:02]23047: WAF :: fetched 4 new logs [24-06-2022 15:46:01]25849: WAF :: fetched 21 new logs [24-06-2022 15:47:02]28732: WAF :: fetched 35 new logs [24-06-2022 15:48:02]31500: WAF :: fetched 31 new logs [24-06-2022 15:49:01]1732: WAF :: fetched 35 new logs [24-06-2022 15:50:02]4635: WAF :: fetched 44 new logs [24-06-2022 15:51:02]7472: WAF :: fetched 31 new logs [24-06-2022 15:52:01]10152: WAF :: fetched 30 new logs [24-06-2022 15:53:02]12956: WAF :: fetched 25 new logs [24-06-2022 15:54:02]15658: WAF :: fetched 31 new logs [24-06-2022 15:55:01]18336: WAF :: fetched 28 new logs [24-06-2022 15:56:02]21200: WAF :: fetched 32 new logs [24-06-2022 15:57:02]23989: WAF :: fetched 26 new logs [24-06-2022 15:58:02]26901: WAF :: fetched 28 new logs [24-06-2022 15:59:01]29705: WAF :: fetched 26 new logs [24-06-2022 16:00:02]32180: WAF :: fetched 26 new logs [24-06-2022 16:01:01]3054: WAF :: fetched 40 new logs [24-06-2022 16:02:01]5864: WAF :: fetched 47 new logs [24-06-2022 16:03:02]8755: WAF :: fetched 44 new logs [24-06-2022 16:04:01]11491: WAF :: fetched 5 new logs [24-06-2022 16:05:02]14329: WAF :: fetched 6 new logs [24-06-2022 16:06:02]17215: WAF :: fetched 4 new logs [24-06-2022 16:07:01]19904: WAF :: fetched 1 new logs [24-06-2022 16:08:02]22733: WAF :: fetched 2 new logs [24-06-2022 16:09:01]25327: WAF :: fetched 1 new logs [24-06-2022 16:11:02]30768: WAF :: fetched 1 new logs [24-06-2022 16:12:01]1039: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656097921 [24-06-2022 16:12:01]1039: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 16:12:03]1039: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 16:12:04]1039: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-1612/20220624-161201-YrYMgXeEwFppAcup10Oo4wAAAAE [24-06-2022 16:12:04]1039: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 16:12:04]1039: WAF :: fetched 3 new logs [24-06-2022 16:14:01]6654: WAF :: fetched 2 new logs [24-06-2022 16:15:02]9577: WAF :: fetched 2 new logs [24-06-2022 16:16:02]12277: WAF :: fetched 4 new logs [24-06-2022 16:17:02]14964: WAF :: fetched 4 new logs [24-06-2022 16:18:01]17696: WAF :: fetched 1 new logs [24-06-2022 16:19:01]20436: WAF :: fetched 1 new logs [24-06-2022 16:20:02]23139: WAF :: fetched 1 new logs [24-06-2022 16:21:01]25581: WAF :: fetched 2 new logs [24-06-2022 16:22:02]28445: WAF :: fetched 2 new logs [24-06-2022 16:23:02]31176: WAF :: fetched 1 new logs [24-06-2022 16:24:01]1458: WAF :: fetched 4 new logs [24-06-2022 16:25:02]4227: WAF :: fetched 3 new logs [24-06-2022 16:26:01]6999: WAF :: fetched 3 new logs [24-06-2022 16:27:02]9609: WAF :: fetched 2 new logs [24-06-2022 16:28:01]12306: WAF :: fetched 8 new logs [24-06-2022 16:29:01]14995: WAF :: fetched 3 new logs [24-06-2022 16:30:02]17687: WAF :: fetched 1 new logs [24-06-2022 16:31:01]20476: WAF :: fetched 1 new logs [24-06-2022 16:32:02]23191: WAF :: fetched 2 new logs [24-06-2022 16:34:01]28509: WAF :: fetched 2 new logs [24-06-2022 16:36:02]1499: WAF :: fetched 3 new logs [24-06-2022 16:37:01]4195: WAF :: fetched 1 new logs [24-06-2022 16:38:02]7123: WAF :: fetched 1 new logs [24-06-2022 16:39:02]9841: WAF :: fetched 3 new logs [24-06-2022 16:40:01]12577: WAF :: fetched 1 new logs [24-06-2022 16:41:02]15295: WAF :: fetched 1 new logs [24-06-2022 16:41:02]15295: Checking for user cron vulnerabilities [24-06-2022 16:42:01]17909: WAF :: fetched 3 new logs [24-06-2022 16:43:02]20725: WAF :: fetched 2 new logs [24-06-2022 16:44:01]23435: Checking ditributed CMS bruteforce attacks [24-06-2022 16:44:01]23435: WAF :: fetched 3 new logs [24-06-2022 16:46:01]28934: WAF :: fetched 3 new logs [24-06-2022 16:47:02]31668: WAF :: fetched 4 new logs [24-06-2022 16:48:01]2109: WAF :: fetched 2 new logs [24-06-2022 16:50:01]7821: WAF :: fetched 4 new logs [24-06-2022 16:51:01]10685: WAF :: fetched 5 new logs [24-06-2022 16:53:01]16246: WAF :: fetched 4 new logs [24-06-2022 16:56:01]24233: WAF :: fetched 4 new logs [24-06-2022 16:57:01]26898: WAF :: fetched 1 new logs [24-06-2022 16:58:02]29735: WAF :: fetched 2 new logs [24-06-2022 17:00:02]2357: WAF :: fetched 5 new logs [24-06-2022 17:01:02]5571: WAF :: fetched 3 new logs [24-06-2022 17:02:01]8219: WAF :: fetched 1 new logs [24-06-2022 17:03:02]10949: WAF :: fetched 1 new logs [24-06-2022 17:05:02]16175: WAF :: fetched 1 new logs [24-06-2022 17:08:01]24291: WAF :: fetched 2 new logs [24-06-2022 17:09:02]27025: WAF :: fetched 3 new logs [24-06-2022 17:10:02]29626: WAF :: fetched 10 new logs [24-06-2022 17:11:02]32352: WAF :: fetched 8 new logs [24-06-2022 17:12:01]2598: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656101521 [24-06-2022 17:12:01]2598: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 17:12:03]2598: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 17:12:04]2598: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-1712/20220624-171201-YrYakbCGmf0Y-t_MS6HV8AAAAA0 [24-06-2022 17:12:04]2598: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 17:12:04]2598: WAF :: fetched 2 new logs [24-06-2022 17:13:02]5440: WAF :: fetched 2 new logs [24-06-2022 17:16:02]13737: WAF :: fetched 2 new logs [24-06-2022 17:17:02]16431: WAF :: fetched 4 new logs [24-06-2022 17:18:01]19216: WAF :: fetched 1 new logs [24-06-2022 17:20:01]24505: WAF :: fetched 2 new logs [24-06-2022 17:22:01]29918: WAF :: fetched 4 new logs [24-06-2022 17:23:02]32648: WAF :: fetched 3 new logs [24-06-2022 17:24:01]2885: WAF :: fetched 3 new logs [24-06-2022 17:25:02]5595: WAF :: fetched 1 new logs [24-06-2022 17:26:02]8273: WAF :: fetched 2 new logs [24-06-2022 17:27:01]10886: WAF :: fetched 2 new logs [24-06-2022 17:28:02]13775: WAF :: fetched 2 new logs [24-06-2022 17:29:01]16416: WAF :: fetched 3 new logs [24-06-2022 17:30:01]19083: WAF :: fetched 6 new logs [24-06-2022 17:31:02]21847: WAF :: fetched 5 new logs [24-06-2022 17:32:01]24609: WAF :: fetched 1 new logs [24-06-2022 17:33:02]27411: WAF :: fetched 6 new logs [24-06-2022 17:34:01]30112: WAF :: fetched 1 new logs [24-06-2022 17:35:01]32766: WAF :: fetched 1 new logs [24-06-2022 17:38:02]8719: WAF :: fetched 1 new logs [24-06-2022 17:40:01]13976: WAF :: fetched 3 new logs [24-06-2022 17:41:02]16714: WAF :: fetched 1 new logs [24-06-2022 17:41:02]16714: Checking for user cron vulnerabilities [24-06-2022 17:44:01]24747: Checking ditributed CMS bruteforce attacks [24-06-2022 17:44:01]24747: WAF :: fetched 1 new logs [24-06-2022 17:45:02]27539: WAF :: fetched 3 new logs [24-06-2022 17:46:02]30301: WAF :: fetched 7 new logs [24-06-2022 17:47:01]537: WAF :: fetched 1 new logs [24-06-2022 17:50:02]8972: WAF :: fetched 4 new logs [24-06-2022 17:51:02]11682: WAF :: fetched 2 new logs [24-06-2022 17:53:02]17130: WAF :: fetched 1 new logs [24-06-2022 17:54:01]19816: WAF :: fetched 2 new logs [24-06-2022 17:55:02]22585: WAF :: fetched 4 new logs [24-06-2022 17:56:02]25298: WAF :: fetched 3 new logs [24-06-2022 17:57:01]27903: WAF :: fetched 3 new logs [24-06-2022 17:58:02]30668: WAF :: fetched 1 new logs [24-06-2022 17:59:01]873: WAF :: fetched 2 new logs [24-06-2022 18:00:01]3240: WAF :: fetched 4 new logs [24-06-2022 18:01:02]6486: WAF :: fetched 1 new logs [24-06-2022 18:02:01]9113: WAF :: fetched 2 new logs [24-06-2022 18:03:02]11795: WAF :: fetched 1 new logs [24-06-2022 18:04:01]14402: WAF :: fetched 1 new logs [24-06-2022 18:05:02]17077: WAF :: fetched 5 new logs [24-06-2022 18:08:02]25137: WAF :: fetched 2 new logs [24-06-2022 18:09:01]27846: WAF :: fetched 2 new logs [24-06-2022 18:10:02]30590: WAF :: fetched 2 new logs [24-06-2022 18:11:02]879: WAF :: fetched 1 new logs [24-06-2022 18:12:01]3539: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656105121 [24-06-2022 18:12:01]3539: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 18:12:03]3539: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 18:12:03]3539: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-1812/20220624-181201-YrYooejNmBVS_AdVHCefEAAAABY [24-06-2022 18:12:03]3539: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 18:12:04]3539: WAF :: fetched 2 new logs [24-06-2022 18:13:01]6367: httpd.conf changed. Refreshing watchlist. [24-06-2022 18:13:01]6364: WAF :: fetched 8 new logs [24-06-2022 18:14:01]9128: WAF :: fetched 4 new logs [24-06-2022 18:15:02]11849: WAF :: fetched 1 new logs [24-06-2022 18:16:02]14601: WAF :: fetched 4 new logs [24-06-2022 18:17:01]17188: WAF :: fetched 3 new logs [24-06-2022 18:18:02]19848: WAF :: fetched 2 new logs [24-06-2022 18:19:01]22504: WAF :: fetched 2 new logs [24-06-2022 18:20:02]25202: WAF :: fetched 3 new logs [24-06-2022 18:21:02]27917: WAF :: fetched 3 new logs [24-06-2022 18:26:02]8869: WAF :: fetched 2 new logs [24-06-2022 18:28:02]14096: WAF :: fetched 1 new logs [24-06-2022 18:29:01]16749: WAF :: fetched 5 new logs [24-06-2022 18:32:01]24753: WAF :: fetched 5 new logs [24-06-2022 18:33:02]27343: WAF :: fetched 1 new logs [24-06-2022 18:34:01]30016: WAF :: fetched 6 new logs [24-06-2022 18:35:02]32723: WAF :: fetched 2 new logs [24-06-2022 18:39:01]10814: WAF :: fetched 1 new logs [24-06-2022 18:41:01]16181: WAF :: fetched 1 new logs [24-06-2022 18:41:01]16181: Checking for user cron vulnerabilities [24-06-2022 18:42:02]18776: WAF :: fetched 2 new logs [24-06-2022 18:44:02]24179: Checking ditributed CMS bruteforce attacks [24-06-2022 18:44:02]24179: WAF :: fetched 3 new logs [24-06-2022 18:45:02]26812: WAF :: fetched 3 new logs [24-06-2022 18:46:01]29541: WAF :: fetched 3 new logs [24-06-2022 18:47:02]32261: WAF :: fetched 1 new logs [24-06-2022 18:48:01]2513: WAF :: fetched 2 new logs [24-06-2022 18:49:02]5393: WAF :: fetched 2 new logs [24-06-2022 18:50:02]8095: WAF :: fetched 24 new logs [24-06-2022 18:51:01]10901: WAF :: fetched 2 new logs [24-06-2022 18:52:02]13581: WAF :: fetched 1 new logs [24-06-2022 18:53:01]16215: WAF :: fetched 1 new logs [24-06-2022 18:54:02]18996: WAF :: fetched 1 new logs [24-06-2022 18:57:02]27136: WAF :: fetched 3 new logs [24-06-2022 18:58:01]29703: WAF :: fetched 2 new logs [24-06-2022 18:59:02]32369: WAF :: fetched 1 new logs [24-06-2022 19:00:02]2289: WAF :: fetched 3 new logs [24-06-2022 19:02:02]8191: WAF :: fetched 1 new logs [24-06-2022 19:04:01]13452: WAF :: fetched 2 new logs [24-06-2022 19:05:01]16142: WAF :: fetched 2 new logs [24-06-2022 19:06:02]18849: WAF :: fetched 2 new logs [24-06-2022 19:07:01]21502: WAF :: fetched 5 new logs [24-06-2022 19:09:02]26766: WAF :: fetched 1 new logs [24-06-2022 19:10:01]29369: WAF :: fetched 6 new logs [24-06-2022 19:11:02]31984: WAF :: fetched 6 new logs [24-06-2022 19:12:01]2273: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656108721 [24-06-2022 19:12:01]2273: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 19:12:03]2273: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 19:12:03]2273: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-1912/20220624-191201-YrY2sUAeEglV7E76EiE_kAAAAAg [24-06-2022 19:12:03]2273: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 19:12:04]2273: WAF :: fetched 1 new logs [24-06-2022 19:14:01]7721: WAF :: fetched 3 new logs [24-06-2022 19:15:01]10299: WAF :: fetched 4 new logs [24-06-2022 19:16:02]12974: WAF :: fetched 1 new logs [24-06-2022 19:17:01]15537: WAF :: fetched 1 new logs [24-06-2022 19:19:01]20924: WAF :: fetched 1 new logs [24-06-2022 19:20:02]23565: WAF :: fetched 2 new logs [24-06-2022 19:21:02]26192: WAF :: fetched 2 new logs [24-06-2022 19:22:02]28807: WAF :: fetched 1 new logs [24-06-2022 19:23:01]31416: WAF :: fetched 3 new logs [24-06-2022 19:24:01]1711: WAF :: fetched 4 new logs [24-06-2022 19:25:02]4465: WAF :: fetched 2 new logs [24-06-2022 19:26:01]7109: WAF :: fetched 2 new logs [24-06-2022 19:27:02]9772: WAF :: fetched 2 new logs [24-06-2022 19:28:02]12421: WAF :: fetched 2 new logs [24-06-2022 19:29:01]15152: WAF :: fetched 1 new logs [24-06-2022 19:30:02]17790: WAF :: fetched 2 new logs [24-06-2022 19:31:01]20392: WAF :: fetched 2 new logs [24-06-2022 19:34:01]28219: WAF :: fetched 1 new logs [24-06-2022 19:36:02]1061: WAF :: fetched 2 new logs [24-06-2022 19:37:01]3616: WAF :: fetched 1 new logs [24-06-2022 19:38:01]6288: WAF :: fetched 1 new logs [24-06-2022 19:39:02]9056: WAF :: fetched 2 new logs [24-06-2022 19:41:01]14381: WAF :: fetched 2 new logs [24-06-2022 19:41:01]14381: Checking for user cron vulnerabilities [24-06-2022 19:43:01]19590: WAF :: fetched 3 new logs [24-06-2022 19:44:01]22319: Checking ditributed CMS bruteforce attacks [24-06-2022 19:44:01]22319: WAF :: fetched 2 new logs [24-06-2022 19:45:02]: Checking for definition updates [24-06-2022 19:45:10]24983: Updated virus defnition : malware.expert.ndb [24-06-2022 19:45:10]24983: Updated virus defnition : malware.expert.fp [24-06-2022 19:46:02]27600: WAF :: fetched 2 new logs [24-06-2022 19:47:01]30224: WAF :: fetched 5 new logs [24-06-2022 19:48:02]340: WAF :: fetched 2 new logs [24-06-2022 19:53:02]16736: WAF :: fetched 7 new logs [24-06-2022 19:54:02]19382: WAF :: fetched 3 new logs [24-06-2022 19:55:01]21964: WAF :: fetched 4 new logs [24-06-2022 19:56:02]24702: WAF :: fetched 2 new logs [24-06-2022 19:57:01]27615: WAF :: fetched 1 new logs [24-06-2022 19:58:01]30224: WAF :: fetched 1 new logs [24-06-2022 19:59:02]493: WAF :: fetched 5 new logs [24-06-2022 20:00:02]3071: WAF :: fetched 1 new logs [24-06-2022 20:01:01]6275: WAF :: fetched 1 new logs [24-06-2022 20:02:01]8873: WAF :: fetched 2 new logs [24-06-2022 20:04:02]14150: WAF :: fetched 1 new logs [24-06-2022 20:05:01]16744: WAF :: fetched 1 new logs [24-06-2022 20:06:02]19342: WAF :: fetched 1 new logs [24-06-2022 20:09:02]27165: WAF :: fetched 1 new logs [24-06-2022 20:10:01]29717: WAF :: fetched 1 new logs [24-06-2022 20:12:02]2556: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656112322 [24-06-2022 20:12:02]2556: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 20:12:04]2556: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 20:12:04]2556: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-2012/20220624-201202-YrZEwrNYg5vo1FQEz2sT8AAAABs [24-06-2022 20:12:04]2556: WAF :: No suitable log file found. Using SQLite.. [24-06-2022 20:12:04]2556: WAF :: fetched 5 new logs [24-06-2022 20:13:01]5481: WAF :: fetched 4 new logs [24-06-2022 20:14:02]8196: WAF :: fetched 1 new logs [24-06-2022 20:16:01]13595: WAF :: fetched 3 new logs [24-06-2022 20:16:01]13598: httpd.conf changed. Refreshing watchlist. [24-06-2022 20:17:02]16397: WAF :: fetched 10 new logs [24-06-2022 20:18:01]18979: WAF :: fetched 1 new logs [24-06-2022 20:20:02]24520: WAF :: fetched 4 new logs [24-06-2022 20:21:02]27159: WAF :: fetched 3 new logs [24-06-2022 20:22:01]29758: WAF :: fetched 7 new logs [24-06-2022 20:23:02]32317: WAF :: fetched 3 new logs [24-06-2022 20:24:01]2612: WAF :: fetched 4 new logs [24-06-2022 20:26:02]8157: WAF :: fetched 2 new logs [24-06-2022 20:27:01]10765: WAF :: fetched 2 new logs [24-06-2022 20:28:02]13457: WAF :: fetched 2 new logs [24-06-2022 20:29:01]16361: WAF :: fetched 3 new logs [24-06-2022 20:30:02]18989: WAF :: fetched 5 new logs [24-06-2022 20:31:02]21794: WAF :: fetched 1 new logs [24-06-2022 20:33:02]27153: WAF :: fetched 2 new logs [24-06-2022 20:35:01]32528: WAF :: fetched 1 new logs [24-06-2022 20:37:01]5503: WAF :: fetched 6 new logs [24-06-2022 20:38:02]8135: WAF :: fetched 1 new logs [24-06-2022 20:39:01]10805: WAF :: fetched 4 new logs [24-06-2022 20:40:02]13420: WAF :: fetched 1 new logs [24-06-2022 20:41:01]16028: Checking for user cron vulnerabilities [24-06-2022 20:42:01]18628: WAF :: fetched 1 new logs [24-06-2022 20:43:02]21182: WAF :: fetched 1 new logs [24-06-2022 20:44:01]25952: Checking ditributed CMS bruteforce attacks [24-06-2022 20:44:01]25952: WAF :: fetched 2 new logs [24-06-2022 20:45:02]28997: WAF :: fetched 2 new logs [24-06-2022 20:46:02]31615: WAF :: fetched 3 new logs [24-06-2022 20:47:01]1861: WAF :: fetched 1 new logs [24-06-2022 20:48:02]4828: WAF :: fetched 1 new logs [24-06-2022 20:49:01]7572: WAF :: fetched 1 new logs [24-06-2022 20:50:02]10495: WAF :: fetched 2 new logs [24-06-2022 20:52:02]15711: WAF :: fetched 2 new logs [24-06-2022 20:54:02]21337: WAF :: fetched 4 new logs [24-06-2022 20:55:02]23900: WAF :: fetched 1 new logs [24-06-2022 20:56:01]26530: WAF :: fetched 1 new logs [24-06-2022 20:57:02]29141: WAF :: fetched 1 new logs [24-06-2022 20:59:02]1965: WAF :: fetched 1 new logs [24-06-2022 21:00:02]4385: WAF :: fetched 1 new logs [24-06-2022 21:01:01]7619: WAF :: fetched 1 new logs [24-06-2022 21:04:01]15523: WAF :: fetched 4 new logs [24-06-2022 21:06:01]21243: WAF :: fetched 3 new logs [24-06-2022 21:07:02]23869: WAF :: fetched 3 new logs [24-06-2022 21:09:01]29117: WAF :: fetched 1 new logs [24-06-2022 21:10:02]31772: WAF :: fetched 2 new logs [24-06-2022 21:11:01]2044: WAF :: fetched 2 new logs [24-06-2022 21:12:02]4731: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656115922 [24-06-2022 21:12:02]4731: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 21:12:04]4731: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 21:12:04]4731: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-2112/20220624-211202-YrZS0ki-Qwa1HamrVEW1LAAAAAM [24-06-2022 21:12:04]4731: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [24-06-2022 21:12:04]4731: WAF :: fetched 1 new logs [24-06-2022 21:13:01]7506: WAF :: fetched 2 new logs [24-06-2022 21:14:01]10471: WAF :: fetched 7 new logs [24-06-2022 21:15:02]13059: WAF :: fetched 2 new logs [24-06-2022 21:16:01]15667: WAF :: fetched 2 new logs [24-06-2022 21:17:02]18235: WAF :: fetched 3 new logs [24-06-2022 21:18:02]20819: WAF :: fetched 4 new logs [24-06-2022 21:19:01]23511: WAF :: fetched 8 new logs [24-06-2022 21:20:02]26326: WAF :: fetched 6 new logs [24-06-2022 21:21:01]28770: WAF :: fetched 3 new logs [24-06-2022 21:22:02]31765: WAF :: fetched 11 new logs [24-06-2022 21:23:01]1909: WAF :: fetched 2 new logs [24-06-2022 21:24:02]4697: WAF :: fetched 2 new logs [24-06-2022 21:25:02]7245: WAF :: fetched 1 new logs [24-06-2022 21:26:01]9962: WAF :: fetched 2 new logs [24-06-2022 21:27:02]12974: WAF :: fetched 4 new logs [24-06-2022 21:28:01]15736: WAF :: fetched 1 new logs [24-06-2022 21:29:01]18568: WAF :: fetched 2 new logs [24-06-2022 21:30:02]21240: WAF :: fetched 4 new logs [24-06-2022 21:32:02]26436: WAF :: fetched 4 new logs [24-06-2022 21:33:01]29000: WAF :: fetched 8 new logs [24-06-2022 21:34:01]31678: WAF :: fetched 4 new logs [24-06-2022 21:35:02]1955: WAF :: fetched 10 new logs [24-06-2022 21:36:01]4674: WAF :: fetched 6 new logs [24-06-2022 21:37:02]7630: WAF :: fetched 2 new logs [24-06-2022 21:38:02]10463: WAF :: fetched 2 new logs [24-06-2022 21:40:02]15859: WAF :: fetched 1 new logs [24-06-2022 21:41:01]18778: Checking for user cron vulnerabilities [24-06-2022 21:42:01]21399: WAF :: fetched 3 new logs [24-06-2022 21:43:02]24250: WAF :: fetched 2 new logs [24-06-2022 21:44:01]29404: Checking ditributed CMS bruteforce attacks [24-06-2022 21:44:01]29404: WAF :: fetched 5 new logs [24-06-2022 21:45:01]32233: WAF :: fetched 1 new logs [24-06-2022 21:46:02]2538: WAF :: fetched 2 new logs [24-06-2022 21:47:01]5417: WAF :: fetched 4 new logs [24-06-2022 21:48:02]8199: WAF :: fetched 2 new logs [24-06-2022 21:50:02]13514: WAF :: fetched 2 new logs [24-06-2022 21:51:01]16327: WAF :: fetched 1 new logs [24-06-2022 21:52:02]19102: WAF :: fetched 4 new logs [24-06-2022 21:53:02]21680: WAF :: fetched 1 new logs [24-06-2022 21:54:01]24604: WAF :: fetched 1 new logs [24-06-2022 21:55:02]27300: WAF :: fetched 4 new logs [24-06-2022 21:57:01]32755: WAF :: fetched 2 new logs [24-06-2022 21:59:01]5803: WAF :: fetched 5 new logs [24-06-2022 22:00:02]8535: WAF :: fetched 3 new logs [24-06-2022 22:02:01]14375: WAF :: fetched 2 new logs [24-06-2022 22:03:02]17023: WAF :: fetched 2 new logs [24-06-2022 22:07:01]27620: WAF :: fetched 3 new logs [24-06-2022 22:07:08]27618: Performing Domain reputation checks [24-06-2022 22:08:02]30331: WAF :: fetched 4 new logs [24-06-2022 22:09:01]574: WAF :: fetched 5 new logs [24-06-2022 22:10:01]3625: WAF :: fetched 6 new logs [24-06-2022 22:11:02]6534: WAF :: fetched 2 new logs [24-06-2022 22:12:01]9133: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656119521 [24-06-2022 22:12:01]9133: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 22:12:03]9133: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 22:12:03]9133: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-2212/20220624-221201-YrZg4VOy2KdcYXxarRMBtQAAAAw [24-06-2022 22:12:03]9133: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [24-06-2022 22:12:04]9133: WAF :: fetched 1 new logs [24-06-2022 22:13:02]11805: WAF :: fetched 1 new logs [24-06-2022 22:14:01]14539: WAF :: fetched 3 new logs [24-06-2022 22:15:02]17209: WAF :: fetched 3 new logs [24-06-2022 22:16:02]19865: WAF :: fetched 2 new logs [24-06-2022 22:17:01]22461: WAF :: fetched 3 new logs [24-06-2022 22:18:02]25085: WAF :: fetched 2 new logs [24-06-2022 22:19:01]27764: WAF :: fetched 3 new logs [24-06-2022 22:21:02]657: WAF :: fetched 1 new logs [24-06-2022 22:23:02]6491: WAF :: fetched 3 new logs [24-06-2022 22:24:01]9174: WAF :: fetched 3 new logs [24-06-2022 22:25:01]11829: WAF :: fetched 6 new logs [24-06-2022 22:26:02]14476: WAF :: fetched 1 new logs [24-06-2022 22:28:02]19973: WAF :: fetched 1 new logs [24-06-2022 22:31:02]28345: WAF :: fetched 3 new logs [24-06-2022 22:34:01]4006: WAF :: fetched 1 new logs [24-06-2022 22:35:01]6677: WAF :: fetched 4 new logs [24-06-2022 22:36:01]9347: WAF :: fetched 3 new logs [24-06-2022 22:37:02]12203: WAF :: fetched 3 new logs [24-06-2022 22:38:01]15045: WAF :: fetched 2 new logs [24-06-2022 22:39:02]17758: WAF :: fetched 1 new logs [24-06-2022 22:40:02]20354: WAF :: fetched 1 new logs [24-06-2022 22:41:01]23177: WAF :: fetched 1 new logs [24-06-2022 22:41:01]23177: Checking for user cron vulnerabilities [24-06-2022 22:42:02]26110: WAF :: fetched 4 new logs [24-06-2022 22:44:02]32677: Checking ditributed CMS bruteforce attacks [24-06-2022 22:44:02]32677: WAF :: fetched 1 new logs [24-06-2022 22:45:02]2920: WAF :: fetched 5 new logs [24-06-2022 22:46:01]7358: WAF :: fetched 4 new logs [24-06-2022 22:47:02]11059: WAF :: fetched 2 new logs [24-06-2022 22:48:01]13663: WAF :: fetched 3 new logs [24-06-2022 22:49:01]16354: WAF :: fetched 7 new logs [24-06-2022 22:50:02]19060: WAF :: fetched 9 new logs [24-06-2022 22:51:01]21790: WAF :: fetched 2 new logs [24-06-2022 22:52:02]24487: WAF :: fetched 4 new logs [24-06-2022 22:53:01]27054: WAF :: fetched 1 new logs [24-06-2022 22:54:01]30035: WAF :: fetched 5 new logs [24-06-2022 22:55:02]32678: WAF :: fetched 5 new logs [24-06-2022 22:56:01]2958: WAF :: fetched 5 new logs [24-06-2022 22:57:02]5666: WAF :: fetched 2 new logs [24-06-2022 22:58:02]8331: WAF :: fetched 1 new logs [24-06-2022 22:59:01]11313: WAF :: fetched 2 new logs [24-06-2022 23:00:02]13681: WAF :: fetched 5 new logs [24-06-2022 23:01:01]17130: WAF :: fetched 2 new logs [24-06-2022 23:02:01]19807: WAF :: fetched 2 new logs [24-06-2022 23:03:02]22404: WAF :: fetched 2 new logs [24-06-2022 23:04:01]25077: WAF :: fetched 2 new logs [24-06-2022 23:05:01]27728: WAF :: fetched 5 new logs [24-06-2022 23:06:02]30432: WAF :: fetched 2 new logs [24-06-2022 23:07:01]619: WAF :: fetched 1 new logs [24-06-2022 23:07:52]807: Performed RBL check for 23.111.136.34. [24-06-2022 23:08:01]3319: WAF :: fetched 5 new logs [24-06-2022 23:09:02]6083: WAF :: fetched 5 new logs [24-06-2022 23:10:01]8917: WAF :: fetched 2 new logs [24-06-2022 23:11:02]12111: WAF :: fetched 2 new logs [24-06-2022 23:12:02]14715: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656123122 [24-06-2022 23:12:02]14715: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-06-2022 23:12:04]14715: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-06-2022 23:12:04]14715: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220624/20220624-2312/20220624-231202-YrZu8rGKI1rX7-r1ifyIVwAAAAA [24-06-2022 23:12:04]14715: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [24-06-2022 23:12:04]14715: WAF :: fetched 1 new logs [24-06-2022 23:13:01]17379: WAF :: fetched 5 new logs [24-06-2022 23:14:02]20353: WAF :: fetched 3 new logs [24-06-2022 23:15:01]23171: WAF :: fetched 2 new logs [24-06-2022 23:16:02]25907: WAF :: fetched 2 new logs [24-06-2022 23:17:02]28469: WAF :: fetched 1 new logs [24-06-2022 23:18:02]31075: WAF :: fetched 2 new logs [24-06-2022 23:19:01]1319: WAF :: fetched 1 new logs [24-06-2022 23:20:02]4168: WAF :: fetched 4 new logs [24-06-2022 23:21:01]7474: WAF :: fetched 10 new logs [24-06-2022 23:22:01]10165: WAF :: fetched 2 new logs [24-06-2022 23:23:02]12811: WAF :: fetched 5 new logs [24-06-2022 23:24:01]15400: WAF :: fetched 3 new logs [24-06-2022 23:25:02]18249: WAF :: fetched 5 new logs [24-06-2022 23:26:01]21142: WAF :: fetched 1 new logs [24-06-2022 23:27:01]23856: WAF :: fetched 5 new logs [24-06-2022 23:29:01]29204: WAF :: fetched 5 new logs [24-06-2022 23:31:02]2399: WAF :: fetched 1 new logs [24-06-2022 23:32:01]5271: WAF :: fetched 1 new logs [24-06-2022 23:33:02]7925: WAF :: fetched 1 new logs [24-06-2022 23:34:01]10563: WAF :: fetched 4 new logs [24-06-2022 23:35:01]13270: WAF :: fetched 1 new logs [24-06-2022 23:36:01]15926: WAF :: fetched 2 new logs [24-06-2022 23:37:02]18556: WAF :: fetched 10 new logs [24-06-2022 23:38:01]21233: WAF :: fetched 2 new logs [24-06-2022 23:39:01]24295: WAF :: fetched 7 new logs [24-06-2022 23:40:01]27016: WAF :: fetched 3 new logs [24-06-2022 23:41:02]29671: WAF :: fetched 1 new logs [24-06-2022 23:41:02]29671: Checking for user cron vulnerabilities [24-06-2022 23:42:01]32169: WAF :: fetched 2 new logs [24-06-2022 23:43:02]2684: WAF :: fetched 1 new logs [24-06-2022 23:44:01]8838: Checking ditributed CMS bruteforce attacks [24-06-2022 23:44:02]8838: WAF :: fetched 1 new logs [24-06-2022 23:45:01]12384: WAF :: fetched 2 new logs [24-06-2022 23:46:02]15057: WAF :: fetched 2 new logs [24-06-2022 23:47:01]17682: WAF :: fetched 1 new logs [24-06-2022 23:48:02]20727: WAF :: fetched 2 new logs [24-06-2022 23:49:02]23294: WAF :: fetched 1 new logs [24-06-2022 23:50:01]26072: WAF :: fetched 3 new logs [24-06-2022 23:51:02]28757: WAF :: fetched 2 new logs [24-06-2022 23:52:01]31359: WAF :: fetched 6 new logs [24-06-2022 23:53:01]1920: WAF :: fetched 5 new logs [24-06-2022 23:54:02]4948: WAF :: fetched 15 new logs [24-06-2022 23:54:02]4955: httpd.conf changed. Refreshing watchlist. [24-06-2022 23:55:01]8847: WAF :: fetched 146 new logs [24-06-2022 23:56:02]12018: httpd.conf changed. Refreshing watchlist. [24-06-2022 23:56:02]12029: WAF :: fetched 14 new logs [24-06-2022 23:57:01]15173: WAF :: fetched 9 new logs [24-06-2022 23:58:02]17955: WAF :: fetched 5 new logs [25-06-2022 00:01:01]26286: WAF :: fetched 1 new logs [25-06-2022 00:01:01]26288: httpd.conf changed. Refreshing watchlist. [25-06-2022 00:01:04]26286: Sending daily report for June 25, 2022 [25-06-2022 00:02:02]29328: WAF :: fetched 2 new logs [25-06-2022 00:02:02]29322: httpd.conf changed. Refreshing watchlist. [25-06-2022 00:05:02]5436: WAF :: fetched 2 new logs [25-06-2022 00:05:02]5436: Deleted 0 entries older than 6 MONTH from scanner_logs [25-06-2022 00:05:02]5436: Deleted 0 files from Quarantine [25-06-2022 00:06:01]8093: WAF :: fetched 2 new logs [25-06-2022 00:07:02]10745: WAF :: fetched 1 new logs [25-06-2022 00:08:02]13578: WAF :: fetched 3 new logs [25-06-2022 00:09:02]16194: WAF :: fetched 6 new logs [25-06-2022 00:10:01]18929: WAF :: fetched 3 new logs [25-06-2022 00:11:02]21849: WAF :: fetched 2 new logs [25-06-2022 00:12:01]24484: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656126721 [25-06-2022 00:12:01]24484: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 00:12:03]24484: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 00:12:04]24484: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-0012/20220625-001201-YrZ9ASIZckBrkO6MZEx4MQAAAB0 [25-06-2022 00:12:04]24484: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 00:12:04]24484: WAF :: fetched 497 new logs [25-06-2022 00:13:01]27111: WAF :: fetched 1 new logs [25-06-2022 00:14:02]29733: WAF :: fetched 2 new logs [25-06-2022 00:15:01]32624: WAF :: fetched 2 new logs [25-06-2022 00:16:02]3007: WAF :: fetched 4 new logs [25-06-2022 00:18:01]8358: WAF :: fetched 4 new logs [25-06-2022 00:19:01]11227: WAF :: fetched 3 new logs [25-06-2022 00:20:02]14109: WAF :: fetched 1 new logs [25-06-2022 00:25:02]27692: WAF :: fetched 1 new logs [25-06-2022 00:26:01]30533: WAF :: fetched 2 new logs [25-06-2022 00:27:01]866: WAF :: fetched 4 new logs [25-06-2022 00:29:01]6438: WAF :: fetched 1 new logs [25-06-2022 00:30:02]9245: WAF :: fetched 3 new logs [25-06-2022 00:31:01]11871: WAF :: fetched 2 new logs [25-06-2022 00:32:01]14490: WAF :: fetched 2 new logs [25-06-2022 00:33:01]17090: WAF :: fetched 1 new logs [25-06-2022 00:34:02]19915: WAF :: fetched 1 new logs [25-06-2022 00:35:02]22620: WAF :: fetched 2 new logs [25-06-2022 00:36:01]25572: WAF :: fetched 7 new logs [25-06-2022 00:37:02]28223: WAF :: fetched 3 new logs [25-06-2022 00:38:01]30803: WAF :: fetched 4 new logs [25-06-2022 00:39:02]986: WAF :: fetched 1 new logs [25-06-2022 00:40:02]3986: WAF :: fetched 1 new logs [25-06-2022 00:41:01]6730: WAF :: fetched 2 new logs [25-06-2022 00:41:01]6730: Checking for user cron vulnerabilities [25-06-2022 00:42:02]9405: WAF :: fetched 3 new logs [25-06-2022 00:43:01]11977: WAF :: fetched 1 new logs [25-06-2022 00:44:02]17881: Checking ditributed CMS bruteforce attacks [25-06-2022 00:44:02]17881: WAF :: fetched 2 new logs [25-06-2022 00:45:01]: Checking for software updates [25-06-2022 00:45:02]22856: WAF :: fetched 8 new logs [25-06-2022 00:46:01]25737: WAF :: fetched 1 new logs [25-06-2022 00:47:02]28565: WAF :: fetched 1 new logs [25-06-2022 00:48:01]31175: WAF :: fetched 1 new logs [25-06-2022 00:49:01]1376: WAF :: fetched 4 new logs [25-06-2022 00:50:02]4305: WAF :: fetched 3 new logs [25-06-2022 00:51:01]7198: WAF :: fetched 3 new logs [25-06-2022 00:53:02]12697: WAF :: fetched 4 new logs [25-06-2022 00:54:01]15319: WAF :: fetched 1 new logs [25-06-2022 00:55:02]18003: WAF :: fetched 4 new logs [25-06-2022 00:56:01]20812: WAF :: fetched 2 new logs [25-06-2022 00:57:02]23449: WAF :: fetched 5 new logs [25-06-2022 00:58:02]26236: WAF :: fetched 15 new logs [25-06-2022 00:59:01]28812: WAF :: fetched 7 new logs [25-06-2022 01:00:02]31215: WAF :: fetched 5 new logs [25-06-2022 01:01:02]2821: WAF :: fetched 4 new logs [25-06-2022 01:02:01]6240: WAF :: fetched 7 new logs [25-06-2022 01:03:02]9062: WAF :: fetched 5 new logs [25-06-2022 01:04:02]11917: WAF :: fetched 2 new logs [25-06-2022 01:05:01]14881: WAF :: fetched 4 new logs [25-06-2022 01:06:01]17779: WAF :: fetched 4 new logs [25-06-2022 01:07:01]20548: WAF :: fetched 2 new logs [25-06-2022 01:08:02]23801: WAF :: fetched 3 new logs [25-06-2022 01:09:01]26522: WAF :: fetched 4 new logs [25-06-2022 01:10:02]29267: WAF :: fetched 2 new logs [25-06-2022 01:12:01]2490: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656130321 [25-06-2022 01:12:01]2490: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 01:12:03]2490: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 01:12:03]2490: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-0112/20220625-011201-YraLEQotGzmkZMCkIcFvAAAAAAk [25-06-2022 01:12:03]2490: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 01:12:04]2490: WAF :: fetched 6 new logs [25-06-2022 01:13:02]5178: WAF :: fetched 2 new logs [25-06-2022 01:14:02]7916: WAF :: fetched 2 new logs [25-06-2022 01:15:02]10832: WAF :: fetched 2 new logs [25-06-2022 01:16:02]13564: WAF :: fetched 1 new logs [25-06-2022 01:17:02]16211: WAF :: fetched 1 new logs [25-06-2022 01:18:01]19141: WAF :: fetched 2 new logs [25-06-2022 01:19:02]22052: WAF :: fetched 1 new logs [25-06-2022 01:20:02]25169: WAF :: fetched 2 new logs [25-06-2022 01:21:02]28358: WAF :: fetched 2 new logs [25-06-2022 01:23:02]1144: WAF :: fetched 2 new logs [25-06-2022 01:24:01]3721: WAF :: fetched 3 new logs [25-06-2022 01:25:01]6619: WAF :: fetched 2 new logs [25-06-2022 01:26:02]9613: WAF :: fetched 5 new logs [25-06-2022 01:27:01]12601: WAF :: fetched 3 new logs [25-06-2022 01:28:02]15389: WAF :: fetched 5 new logs [25-06-2022 01:30:02]21285: WAF :: fetched 1 new logs [25-06-2022 01:31:01]24381: WAF :: fetched 1 new logs [25-06-2022 01:32:01]27122: WAF :: fetched 6 new logs [25-06-2022 01:33:02]30362: WAF :: fetched 2 new logs [25-06-2022 01:35:02]3854: WAF :: fetched 1 new logs [25-06-2022 01:36:02]6762: WAF :: fetched 2 new logs [25-06-2022 01:37:02]9601: WAF :: fetched 2 new logs [25-06-2022 01:39:02]14952: WAF :: fetched 1 new logs [25-06-2022 01:40:02]17992: WAF :: fetched 1 new logs [25-06-2022 01:41:01]20852: Checking for user cron vulnerabilities [25-06-2022 01:42:02]23844: WAF :: fetched 3 new logs [25-06-2022 01:44:01]666: Checking ditributed CMS bruteforce attacks [25-06-2022 01:44:01]666: WAF :: fetched 1 new logs [25-06-2022 01:45:01]: Checking for definition updates [25-06-2022 01:45:02]7073: WAF :: fetched 3 new logs [25-06-2022 01:46:01]9745: WAF :: fetched 3 new logs [25-06-2022 01:47:02]12378: WAF :: fetched 2 new logs [25-06-2022 01:48:02]15091: WAF :: fetched 2 new logs [25-06-2022 01:49:01]18200: WAF :: fetched 5 new logs [25-06-2022 01:50:02]21181: WAF :: fetched 6 new logs [25-06-2022 01:51:02]24131: WAF :: fetched 1 new logs [25-06-2022 01:52:01]26880: WAF :: fetched 2 new logs [25-06-2022 01:53:02]29786: WAF :: fetched 2 new logs [25-06-2022 01:54:02]32377: WAF :: fetched 3 new logs [25-06-2022 01:56:02]5392: WAF :: fetched 1 new logs [25-06-2022 01:58:01]10936: WAF :: fetched 2 new logs [25-06-2022 01:59:02]13728: WAF :: fetched 1 new logs [25-06-2022 02:02:02]22331: WAF :: fetched 3 new logs [25-06-2022 02:04:01]27572: WAF :: fetched 2 new logs [25-06-2022 02:05:01]30255: WAF :: fetched 1 new logs [25-06-2022 02:07:02]3149: WAF :: fetched 3 new logs [25-06-2022 02:09:01]8639: WAF :: fetched 2 new logs [25-06-2022 02:10:02]11333: WAF :: fetched 1 new logs [25-06-2022 02:11:01]13950: WAF :: fetched 1 new logs [25-06-2022 02:12:01]16522: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656133921 [25-06-2022 02:12:01]16522: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 02:12:03]16522: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 02:12:03]16522: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-0212/20220625-021201-YraZIcGLmMi02oi-huYnGAAAAAI [25-06-2022 02:12:03]16522: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 02:12:04]16522: WAF :: fetched 2 new logs [25-06-2022 02:13:02]19198: WAF :: fetched 3 new logs [25-06-2022 02:14:01]22187: WAF :: fetched 2 new logs [25-06-2022 02:15:02]25036: WAF :: fetched 4 new logs [25-06-2022 02:16:01]27901: WAF :: fetched 1 new logs [25-06-2022 02:19:02]3754: WAF :: fetched 2 new logs [25-06-2022 02:20:02]6521: WAF :: fetched 1 new logs [25-06-2022 02:21:01]9198: WAF :: fetched 3 new logs [25-06-2022 02:22:02]11805: WAF :: fetched 1 new logs [25-06-2022 02:23:02]14358: WAF :: fetched 1 new logs [25-06-2022 02:24:02]16981: WAF :: fetched 1 new logs [25-06-2022 02:25:01]19670: WAF :: fetched 1 new logs [25-06-2022 02:26:02]22583: WAF :: fetched 4 new logs [25-06-2022 02:27:01]25129: WAF :: fetched 1 new logs [25-06-2022 02:30:01]546: WAF :: fetched 1 new logs [25-06-2022 02:31:02]3249: WAF :: fetched 3 new logs [25-06-2022 02:37:02]19046: WAF :: fetched 2 new logs [25-06-2022 02:38:01]21697: WAF :: fetched 3 new logs [25-06-2022 02:39:02]24798: WAF :: fetched 1 new logs [25-06-2022 02:41:01]30109: Checking for user cron vulnerabilities [25-06-2022 02:42:02]32719: WAF :: fetched 2 new logs [25-06-2022 02:44:02]9755: Checking ditributed CMS bruteforce attacks [25-06-2022 02:44:02]9755: WAF :: fetched 1 new logs [25-06-2022 02:45:02]16129: WAF :: fetched 1 new logs [25-06-2022 02:46:01]18758: WAF :: fetched 2 new logs [25-06-2022 02:47:02]21349: WAF :: fetched 4 new logs [25-06-2022 02:48:01]23987: WAF :: fetched 2 new logs [25-06-2022 02:53:02]5122: WAF :: fetched 2 new logs [25-06-2022 02:53:02]5124: Updated license status via CDN [25-06-2022 02:54:01]7747: WAF :: fetched 1 new logs [25-06-2022 02:55:01]10435: WAF :: fetched 1 new logs [25-06-2022 02:56:02]13139: WAF :: fetched 2 new logs [25-06-2022 02:57:01]16186: WAF :: fetched 3 new logs [25-06-2022 03:00:05]25495: Found and updated 32 CMS installations [25-06-2022 03:00:49]25495: Wordpress installation #9 oabilheus.org.br has errors [25-06-2022 03:01:01]28796: WAF :: fetched 2 new logs [25-06-2022 03:02:40]25495: Sending CMS version vulnerability report emails to cpanel users [25-06-2022 03:02:43]25495: Checking wordpress installations for suspicious directories [25-06-2022 03:04:22]2240: Sending CMS version vulnerability report emails to cpanel users [25-06-2022 03:04:26]2240: Checking wordpress installations for suspicious directories [25-06-2022 03:05:02]8086: WAF :: fetched 3 new logs [25-06-2022 03:06:01]11251: WAF :: fetched 2 new logs [25-06-2022 03:08:02]16529: WAF :: fetched 2 new logs [25-06-2022 03:10:02]21874: WAF :: fetched 2 new logs [25-06-2022 03:11:01]24595: WAF :: fetched 1 new logs [25-06-2022 03:12:02]27205: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656137522 [25-06-2022 03:12:02]27205: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 03:12:04]27205: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 03:12:04]27205: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-0312/20220625-031202-YranMhSH2gS2esnOI_LHvgAAAAU [25-06-2022 03:12:04]27205: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-06-2022 03:12:04]27205: WAF :: fetched 2 new logs [25-06-2022 03:13:01]30288: WAF :: fetched 1 new logs [25-06-2022 03:15:01]3529: WAF :: fetched 1 new logs [25-06-2022 03:16:02]6425: WAF :: fetched 1 new logs [25-06-2022 03:17:01]9023: WAF :: fetched 3 new logs [25-06-2022 03:18:01]11800: WAF :: fetched 2 new logs [25-06-2022 03:19:02]14541: WAF :: fetched 4 new logs [25-06-2022 03:20:01]17266: WAF :: fetched 3 new logs [25-06-2022 03:21:01]19899: WAF :: fetched 6 new logs [25-06-2022 03:22:02]19635: WAF :: fetched 20 new logs [25-06-2022 03:23:01]9736: WAF :: fetched 10 new logs [25-06-2022 03:24:01]21544: WAF :: fetched 4 new logs [25-06-2022 03:25:02]1086: WAF :: fetched 13 new logs [25-06-2022 03:26:01]3854: WAF :: fetched 1 new logs [25-06-2022 03:27:01]6489: WAF :: fetched 2 new logs [25-06-2022 03:28:02]9140: WAF :: fetched 3 new logs [25-06-2022 03:29:01]11890: WAF :: fetched 4 new logs [25-06-2022 03:30:01]14573: WAF :: fetched 2 new logs [25-06-2022 03:31:02]17674: WAF :: fetched 1 new logs [25-06-2022 03:32:01]20445: WAF :: fetched 3 new logs [25-06-2022 03:33:01]23130: WAF :: fetched 2 new logs [25-06-2022 03:34:02]26141: WAF :: fetched 3 new logs [25-06-2022 03:35:01]29097: WAF :: fetched 2 new logs [25-06-2022 03:36:02]31786: WAF :: fetched 3 new logs [25-06-2022 03:37:02]1933: WAF :: fetched 2 new logs [25-06-2022 03:38:01]4809: WAF :: fetched 1 new logs [25-06-2022 03:39:02]7430: WAF :: fetched 2 new logs [25-06-2022 03:40:01]10085: WAF :: fetched 2 new logs [25-06-2022 03:41:01]12690: WAF :: fetched 2 new logs [25-06-2022 03:41:01]12690: Checking for user cron vulnerabilities [25-06-2022 03:42:02]15314: WAF :: fetched 1 new logs [25-06-2022 03:43:02]18186: WAF :: fetched 2 new logs [25-06-2022 03:44:02]24426: Checking ditributed CMS bruteforce attacks [25-06-2022 03:44:02]24426: WAF :: fetched 1 new logs [25-06-2022 03:46:01]2059: WAF :: fetched 3 new logs [25-06-2022 03:47:02]4900: WAF :: fetched 2 new logs [25-06-2022 03:48:01]7706: WAF :: fetched 2 new logs [25-06-2022 03:49:01]10287: WAF :: fetched 1 new logs [25-06-2022 03:50:02]12940: WAF :: fetched 1 new logs [25-06-2022 03:51:01]15594: WAF :: fetched 1 new logs [25-06-2022 03:52:02]18188: WAF :: fetched 1 new logs [25-06-2022 03:53:01]20857: WAF :: fetched 3 new logs [25-06-2022 03:54:02]23688: WAF :: fetched 1 new logs [25-06-2022 03:55:02]26412: WAF :: fetched 1 new logs [25-06-2022 03:56:01]29287: WAF :: fetched 1 new logs [25-06-2022 03:57:02]32168: WAF :: fetched 2 new logs [25-06-2022 03:58:01]2726: WAF :: fetched 1 new logs [25-06-2022 03:59:02]5473: WAF :: fetched 2 new logs [25-06-2022 04:01:01]11391: WAF :: fetched 1 new logs [25-06-2022 04:03:01]16958: WAF :: fetched 4 new logs [25-06-2022 04:04:02]20066: WAF :: fetched 2 new logs [25-06-2022 04:05:01]22715: WAF :: fetched 4 new logs [25-06-2022 04:06:02]25888: WAF :: fetched 1 new logs [25-06-2022 04:07:02]28870: WAF :: fetched 5 new logs [25-06-2022 04:08:01]31616: WAF :: fetched 3 new logs [25-06-2022 04:09:02]2039: WAF :: fetched 1 new logs [25-06-2022 04:10:02]4723: WAF :: fetched 6 new logs [25-06-2022 04:11:01]7472: WAF :: fetched 1 new logs [25-06-2022 04:12:02]10084: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656141122 [25-06-2022 04:12:02]10084: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 04:12:04]10084: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 04:12:04]10084: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-0412/20220625-041202-Yra1QoDDJITrXmebhaoMzQAAAAk [25-06-2022 04:12:04]10084: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 04:12:04]10084: WAF :: fetched 108 new logs [25-06-2022 04:13:01]12643: WAF :: fetched 1 new logs [25-06-2022 04:15:01]17796: WAF :: fetched 3 new logs [25-06-2022 04:16:02]20563: WAF :: fetched 5 new logs [25-06-2022 04:17:02]23141: WAF :: fetched 1 new logs [25-06-2022 04:18:01]25770: WAF :: fetched 2 new logs [25-06-2022 04:19:01]28369: WAF :: fetched 4 new logs [25-06-2022 04:20:02]30996: WAF :: fetched 2 new logs [25-06-2022 04:22:01]4445: WAF :: fetched 1 new logs [25-06-2022 04:23:02]7107: WAF :: fetched 1 new logs [25-06-2022 04:26:01]15285: WAF :: fetched 1 new logs [25-06-2022 04:27:02]17937: WAF :: fetched 1 new logs [25-06-2022 04:28:01]20537: WAF :: fetched 1 new logs [25-06-2022 04:29:02]23153: WAF :: fetched 1 new logs [25-06-2022 04:30:01]25995: WAF :: fetched 2 new logs [25-06-2022 04:33:01]1744: WAF :: fetched 2 new logs [25-06-2022 04:34:02]4501: WAF :: fetched 1 new logs [25-06-2022 04:36:01]9939: WAF :: fetched 5 new logs [25-06-2022 04:37:02]12668: WAF :: fetched 1 new logs [25-06-2022 04:38:02]15220: WAF :: fetched 1 new logs [25-06-2022 04:41:01]23126: Checking for user cron vulnerabilities [25-06-2022 04:42:01]25701: WAF :: fetched 1 new logs [25-06-2022 04:44:01]2100: Checking ditributed CMS bruteforce attacks [25-06-2022 04:44:01]2100: WAF :: fetched 1 new logs [25-06-2022 04:45:02]9193: WAF :: fetched 30 new logs [25-06-2022 04:51:01]26992: WAF :: fetched 1 new logs [25-06-2022 04:52:01]29577: WAF :: fetched 2 new logs [25-06-2022 04:53:02]32191: WAF :: fetched 2 new logs [25-06-2022 04:59:01]16364: WAF :: fetched 1 new logs [25-06-2022 05:00:02]18689: WAF :: fetched 1 new logs [25-06-2022 05:01:01]21858: WAF :: fetched 2 new logs [25-06-2022 05:01:41]21859: Starting daily scan on files updated in last 24 hrs [25-06-2022 05:02:02]24662: WAF :: fetched 1 new logs [25-06-2022 05:03:01]27387: WAF :: fetched 3 new logs [25-06-2022 05:04:02]29993: WAF :: fetched 3 new logs [25-06-2022 05:06:01]3234: WAF :: fetched 1 new logs [25-06-2022 05:07:02]5901: WAF :: fetched 4 new logs [25-06-2022 05:08:01]8498: WAF :: fetched 3 new logs [25-06-2022 05:10:02]13679: WAF :: fetched 2 new logs [25-06-2022 05:11:01]16382: WAF :: fetched 2 new logs [25-06-2022 05:12:02]18971: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656144722 [25-06-2022 05:12:02]18971: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 05:12:04]18971: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 05:12:04]18971: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-0512/20220625-051202-YrbDUmDTxFaX3wie4wFzfwAAABE [25-06-2022 05:12:04]18971: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 05:12:04]18971: WAF :: fetched 1 new logs [25-06-2022 05:15:02]27294: WAF :: fetched 2 new logs [25-06-2022 05:17:02]32610: WAF :: fetched 3 new logs [25-06-2022 05:18:02]2803: WAF :: fetched 3 new logs [25-06-2022 05:19:01]5471: WAF :: fetched 3 new logs [25-06-2022 05:20:02]8160: WAF :: fetched 4 new logs [25-06-2022 05:21:01]10969: WAF :: fetched 2 new logs [25-06-2022 05:22:02]13576: WAF :: fetched 2 new logs [25-06-2022 05:27:02]26911: WAF :: fetched 4 new logs [25-06-2022 05:28:01]29502: WAF :: fetched 3 new logs [25-06-2022 05:29:02]32146: WAF :: fetched 4 new logs [25-06-2022 05:32:01]8407: WAF :: fetched 2 new logs [25-06-2022 05:33:02]11083: WAF :: fetched 4 new logs [25-06-2022 05:34:01]13685: WAF :: fetched 52 new logs [25-06-2022 05:35:02]16493: WAF :: fetched 13 new logs [25-06-2022 05:36:02]19447: WAF :: fetched 4 new logs [25-06-2022 05:37:02]22036: WAF :: fetched 1 new logs [25-06-2022 05:38:01]24604: WAF :: fetched 3 new logs [25-06-2022 05:39:02]27263: WAF :: fetched 4 new logs [25-06-2022 05:41:01]32618: WAF :: fetched 1 new logs [25-06-2022 05:41:01]32618: Checking for user cron vulnerabilities [25-06-2022 05:42:02]3129: WAF :: fetched 1 new logs [25-06-2022 05:44:01]12055: Checking ditributed CMS bruteforce attacks [25-06-2022 05:44:01]12055: WAF :: fetched 2 new logs [25-06-2022 05:49:01]31732: WAF :: fetched 9 new logs [25-06-2022 05:50:01]1957: WAF :: fetched 1 new logs [25-06-2022 05:51:02]4768: WAF :: fetched 1 new logs [25-06-2022 05:52:01]7406: WAF :: fetched 1 new logs [25-06-2022 05:53:02]10353: WAF :: fetched 2 new logs [25-06-2022 05:54:02]13008: WAF :: fetched 1 new logs [25-06-2022 05:55:01]15820: WAF :: fetched 1 new logs [25-06-2022 06:00:01]28940: WAF :: fetched 1 new logs [25-06-2022 06:01:02]32132: WAF :: fetched 3 new logs [25-06-2022 06:02:02]2372: WAF :: fetched 1 new logs [25-06-2022 06:04:02]7629: WAF :: fetched 1 new logs [25-06-2022 06:05:01]10384: WAF :: fetched 1 new logs [25-06-2022 06:07:02]15925: WAF :: fetched 2 new logs [25-06-2022 06:09:02]21095: WAF :: fetched 1 new logs [25-06-2022 06:10:02]24051: WAF :: fetched 3 new logs [25-06-2022 06:12:02]29385: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656148322 [25-06-2022 06:12:02]29385: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 06:12:04]29385: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 06:12:04]29385: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-0612/20220625-061202-YrbRYiM_kot7Tw3P9F0HSwAAAAk [25-06-2022 06:12:04]29385: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 06:14:02]2224: WAF :: fetched 2 new logs [25-06-2022 06:15:02]4899: WAF :: fetched 4 new logs [25-06-2022 06:16:01]7770: WAF :: fetched 5 new logs [25-06-2022 06:17:02]10597: WAF :: fetched 4 new logs [25-06-2022 06:18:02]13186: WAF :: fetched 2 new logs [25-06-2022 06:19:02]16049: WAF :: fetched 2 new logs [25-06-2022 06:20:01]18668: WAF :: fetched 5 new logs [25-06-2022 06:21:02]21385: WAF :: fetched 2 new logs [25-06-2022 06:22:01]23960: WAF :: fetched 1 new logs [25-06-2022 06:23:02]26566: WAF :: fetched 2 new logs [25-06-2022 06:24:02]29272: WAF :: fetched 1 new logs [25-06-2022 06:25:01]31969: WAF :: fetched 1 new logs [25-06-2022 06:26:02]2381: WAF :: fetched 2 new logs [25-06-2022 06:27:01]5311: WAF :: fetched 6 new logs [25-06-2022 06:28:01]8208: WAF :: fetched 3 new logs [25-06-2022 06:29:02]11186: WAF :: fetched 4 new logs [25-06-2022 06:30:01]13896: WAF :: fetched 4 new logs [25-06-2022 06:31:02]16662: WAF :: fetched 1 new logs [25-06-2022 06:32:01]19302: WAF :: fetched 3 new logs [25-06-2022 06:33:01]21934: WAF :: fetched 3 new logs [25-06-2022 06:34:02]24647: WAF :: fetched 3 new logs [25-06-2022 06:35:01]27412: WAF :: fetched 3 new logs [25-06-2022 06:36:02]30496: WAF :: fetched 1 new logs [25-06-2022 06:37:02]776: WAF :: fetched 3 new logs [25-06-2022 06:38:01]3421: WAF :: fetched 5 new logs [25-06-2022 06:39:02]6098: WAF :: fetched 4 new logs [25-06-2022 06:40:02]8741: WAF :: fetched 1 new logs [25-06-2022 06:41:01]11484: WAF :: fetched 1 new logs [25-06-2022 06:41:01]11484: Checking for user cron vulnerabilities [25-06-2022 06:42:02]14151: WAF :: fetched 3 new logs [25-06-2022 06:43:01]16792: WAF :: fetched 6 new logs [25-06-2022 06:44:01]23020: Checking ditributed CMS bruteforce attacks [25-06-2022 06:44:01]23020: WAF :: fetched 4 new logs [25-06-2022 06:45:01]29969: WAF :: fetched 1 new logs [25-06-2022 06:46:02]2848: WAF :: fetched 1 new logs [25-06-2022 06:47:02]5522: WAF :: fetched 1 new logs [25-06-2022 06:48:01]8245: WAF :: fetched 2 new logs [25-06-2022 06:50:01]13506: WAF :: fetched 1 new logs [25-06-2022 06:51:02]16328: WAF :: fetched 1 new logs [25-06-2022 06:55:02]26842: WAF :: fetched 2 new logs [25-06-2022 06:57:02]32222: WAF :: fetched 2 new logs [25-06-2022 06:58:01]2421: WAF :: fetched 1 new logs [25-06-2022 07:00:02]7483: WAF :: fetched 3 new logs [25-06-2022 07:01:01]10657: WAF :: fetched 1 new logs [25-06-2022 07:02:01]13330: WAF :: fetched 2 new logs [25-06-2022 07:03:02]15992: WAF :: fetched 1 new logs [25-06-2022 07:06:01]23941: WAF :: fetched 1 new logs [25-06-2022 07:07:02]26570: WAF :: fetched 1 new logs [25-06-2022 07:08:01]29193: WAF :: fetched 3 new logs [25-06-2022 07:11:01]4889: WAF :: fetched 1 new logs [25-06-2022 07:12:02]7532: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656151922 [25-06-2022 07:12:02]7532: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 07:12:04]7532: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 07:12:04]7532: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-0712/20220625-071202-YrbfcgcZSV5Qy2ejIA9eiQAAAA4 [25-06-2022 07:12:04]7532: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 07:12:04]7532: WAF :: fetched 8 new logs [25-06-2022 07:13:01]10170: WAF :: fetched 3 new logs [25-06-2022 07:14:02]12799: WAF :: fetched 3 new logs [25-06-2022 07:15:02]15406: WAF :: fetched 1 new logs [25-06-2022 07:16:01]18140: WAF :: fetched 1 new logs [25-06-2022 07:17:02]20765: WAF :: fetched 2 new logs [25-06-2022 07:18:01]23386: WAF :: fetched 1 new logs [25-06-2022 07:20:02]28652: WAF :: fetched 2 new logs [25-06-2022 07:21:01]31387: WAF :: fetched 2 new logs [25-06-2022 07:22:02]1600: WAF :: fetched 1 new logs [25-06-2022 07:27:02]14927: WAF :: fetched 6 new logs [25-06-2022 07:28:01]17518: WAF :: fetched 3 new logs [25-06-2022 07:29:01]20106: WAF :: fetched 1 new logs [25-06-2022 07:30:02]22769: WAF :: fetched 4 new logs [25-06-2022 07:31:01]25519: WAF :: fetched 4 new logs [25-06-2022 07:33:02]30813: WAF :: fetched 5 new logs [25-06-2022 07:34:01]1051: WAF :: fetched 1 new logs [25-06-2022 07:35:02]3723: WAF :: fetched 2 new logs [25-06-2022 07:36:01]6538: WAF :: fetched 2 new logs [25-06-2022 07:37:02]9205: WAF :: fetched 1 new logs [25-06-2022 07:38:02]11798: WAF :: fetched 3 new logs [25-06-2022 07:39:01]14416: WAF :: fetched 2 new logs [25-06-2022 07:40:01]17093: WAF :: fetched 1 new logs [25-06-2022 07:41:02]19818: Checking for user cron vulnerabilities [25-06-2022 07:42:01]22475: WAF :: fetched 2 new logs [25-06-2022 07:44:01]31447: Checking ditributed CMS bruteforce attacks [25-06-2022 07:44:02]31447: WAF :: fetched 1 new logs [25-06-2022 07:45:01]: Checking for definition updates [25-06-2022 07:46:02]11847: WAF :: fetched 10 new logs [25-06-2022 07:49:02]20341: WAF :: fetched 2 new logs [25-06-2022 07:53:01]31177: WAF :: fetched 6 new logs [25-06-2022 07:55:02]4181: WAF :: fetched 1 new logs [25-06-2022 07:56:01]7088: WAF :: fetched 1 new logs [25-06-2022 07:58:02]12395: WAF :: fetched 1 new logs [25-06-2022 07:59:02]15007: WAF :: fetched 1 new logs [25-06-2022 08:00:01]17348: WAF :: fetched 3 new logs [25-06-2022 08:01:02]20606: WAF :: fetched 4 new logs [25-06-2022 08:02:01]23455: WAF :: fetched 1 new logs [25-06-2022 08:03:01]26080: WAF :: fetched 1 new logs [25-06-2022 08:05:01]31601: WAF :: fetched 2 new logs [25-06-2022 08:06:02]1968: WAF :: fetched 2 new logs [25-06-2022 08:07:01]4643: WAF :: fetched 1 new logs [25-06-2022 08:08:02]7317: WAF :: fetched 1 new logs [25-06-2022 08:09:01]9948: WAF :: fetched 3 new logs [25-06-2022 08:10:01]12551: WAF :: fetched 2 new logs [25-06-2022 08:12:01]17938: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656155521 [25-06-2022 08:12:01]17938: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 08:12:03]17938: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 08:12:04]17938: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-0812/20220625-081201-YrbtgWWT7xCoV8l42DsNywAAAAE [25-06-2022 08:12:04]17938: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 08:12:04]17938: WAF :: fetched 13 new logs [25-06-2022 08:13:02]20816: WAF :: fetched 2 new logs [25-06-2022 08:14:01]23428: WAF :: fetched 4 new logs [25-06-2022 08:15:01]26071: WAF :: fetched 2 new logs [25-06-2022 08:16:02]28843: WAF :: fetched 4 new logs [25-06-2022 08:20:02]7269: WAF :: fetched 1 new logs [25-06-2022 08:21:01]10084: WAF :: fetched 1 new logs [25-06-2022 08:22:02]12902: WAF :: fetched 2 new logs [25-06-2022 08:23:01]15507: WAF :: fetched 3 new logs [25-06-2022 08:24:01]18135: WAF :: fetched 1 new logs [25-06-2022 08:25:02]20806: WAF :: fetched 2 new logs [25-06-2022 08:27:02]26178: WAF :: fetched 39 new logs [25-06-2022 08:28:02]28857: WAF :: fetched 35 new logs [25-06-2022 08:29:01]31490: WAF :: fetched 2 new logs [25-06-2022 08:30:02]1956: WAF :: fetched 1 new logs [25-06-2022 08:31:01]4874: WAF :: fetched 1 new logs [25-06-2022 08:32:01]7546: WAF :: fetched 2 new logs [25-06-2022 08:33:01]10223: WAF :: fetched 2 new logs [25-06-2022 08:34:02]12882: WAF :: fetched 3 new logs [25-06-2022 08:35:02]15526: WAF :: fetched 1 new logs [25-06-2022 08:36:01]18275: WAF :: fetched 4 new logs [25-06-2022 08:38:01]23712: WAF :: fetched 2 new logs [25-06-2022 08:39:02]26564: WAF :: fetched 2 new logs [25-06-2022 08:40:02]29216: WAF :: fetched 3 new logs [25-06-2022 08:41:01]31940: WAF :: fetched 4 new logs [25-06-2022 08:41:01]31940: Checking for user cron vulnerabilities [25-06-2022 08:42:02]2372: WAF :: fetched 6 new logs [25-06-2022 08:43:01]5186: WAF :: fetched 3 new logs [25-06-2022 08:44:01]11386: Checking ditributed CMS bruteforce attacks [25-06-2022 08:44:02]11386: WAF :: fetched 1 new logs [25-06-2022 08:45:01]17797: WAF :: fetched 1 new logs [25-06-2022 08:46:01]24451: WAF :: fetched 3 new logs [25-06-2022 08:47:02]27180: WAF :: fetched 5 new logs [25-06-2022 08:48:01]29787: WAF :: fetched 4 new logs [25-06-2022 08:49:02]32748: WAF :: fetched 8 new logs [25-06-2022 08:50:02]3006: WAF :: fetched 9 new logs [25-06-2022 08:51:01]5748: WAF :: fetched 6 new logs [25-06-2022 08:52:01]8496: WAF :: fetched 4 new logs [25-06-2022 08:53:02]11195: WAF :: fetched 3 new logs [25-06-2022 08:54:01]13791: WAF :: fetched 1 new logs [25-06-2022 08:55:02]16606: WAF :: fetched 2 new logs [25-06-2022 08:56:02]19323: WAF :: fetched 2 new logs [25-06-2022 08:57:01]22033: WAF :: fetched 1 new logs [25-06-2022 08:58:02]25024: WAF :: fetched 2 new logs [25-06-2022 08:59:01]27642: WAF :: fetched 1 new logs [25-06-2022 09:00:02]29999: WAF :: fetched 3 new logs [25-06-2022 09:01:02]727: WAF :: fetched 85 new logs [25-06-2022 09:02:01]3584: WAF :: fetched 93 new logs [25-06-2022 09:03:02]6859: WAF :: fetched 99 new logs [25-06-2022 09:04:02]9547: WAF :: fetched 97 new logs [25-06-2022 09:05:02]12174: WAF :: fetched 84 new logs [25-06-2022 09:06:01]14846: WAF :: fetched 1 new logs [25-06-2022 09:10:01]25875: WAF :: fetched 2 new logs [25-06-2022 09:11:02]28611: WAF :: fetched 1 new logs [25-06-2022 09:12:02]31327: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656159122 [25-06-2022 09:12:02]31327: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 09:12:04]31327: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 09:12:04]31327: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-0912/20220625-091202-Yrb7klM_Zt3EGJqAWYd4-wAAAAY [25-06-2022 09:12:04]31327: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 09:12:04]31327: WAF :: fetched 1 new logs [25-06-2022 09:13:01]1822: WAF :: fetched 3 new logs [25-06-2022 09:14:02]4534: WAF :: fetched 1 new logs [25-06-2022 09:15:01]7201: WAF :: fetched 1 new logs [25-06-2022 09:16:02]10123: WAF :: fetched 2 new logs [25-06-2022 09:17:02]13022: WAF :: fetched 4 new logs [25-06-2022 09:18:01]15664: WAF :: fetched 1 new logs [25-06-2022 09:20:01]21046: WAF :: fetched 4 new logs [25-06-2022 09:22:02]26879: WAF :: fetched 2 new logs [25-06-2022 09:24:02]32450: WAF :: fetched 1 new logs [25-06-2022 09:25:01]2719: WAF :: fetched 1 new logs [25-06-2022 09:26:01]5657: WAF :: fetched 2 new logs [25-06-2022 09:27:02]8675: WAF :: fetched 2 new logs [25-06-2022 09:32:02]22044: WAF :: fetched 1 new logs [25-06-2022 09:33:02]24939: WAF :: fetched 1 new logs [25-06-2022 09:34:01]27603: WAF :: fetched 52 new logs [25-06-2022 09:36:01]893: WAF :: fetched 6 new logs [25-06-2022 09:37:01]3682: WAF :: fetched 2 new logs [25-06-2022 09:38:02]6413: WAF :: fetched 1 new logs [25-06-2022 09:39:01]9272: WAF :: fetched 2 new logs [25-06-2022 09:41:02]14815: WAF :: fetched 1 new logs [25-06-2022 09:41:02]14815: Checking for user cron vulnerabilities [25-06-2022 09:44:01]26709: Checking ditributed CMS bruteforce attacks [25-06-2022 09:46:02]8458: WAF :: fetched 1 new logs [25-06-2022 09:47:01]11151: WAF :: fetched 2 new logs [25-06-2022 09:48:02]13866: WAF :: fetched 2 new logs [25-06-2022 09:49:01]16507: WAF :: fetched 3 new logs [25-06-2022 09:50:01]19156: WAF :: fetched 1 new logs [25-06-2022 09:51:02]22193: WAF :: fetched 5 new logs [25-06-2022 09:52:01]24967: WAF :: fetched 9 new logs [25-06-2022 09:53:02]27638: WAF :: fetched 6 new logs [25-06-2022 09:54:01]30273: WAF :: fetched 6 new logs [25-06-2022 09:55:01]474: WAF :: fetched 3 new logs [25-06-2022 09:56:02]3241: WAF :: fetched 3 new logs [25-06-2022 09:57:01]6198: WAF :: fetched 3 new logs [25-06-2022 09:58:02]9046: WAF :: fetched 1 new logs [25-06-2022 10:01:02]17274: WAF :: fetched 2 new logs [25-06-2022 10:02:02]19993: WAF :: fetched 4 new logs [25-06-2022 10:03:01]22374: WAF :: fetched 2 new logs [25-06-2022 10:04:02]25351: WAF :: fetched 5 new logs [25-06-2022 10:05:01]28086: WAF :: fetched 1 new logs [25-06-2022 10:06:02]31051: WAF :: fetched 3 new logs [25-06-2022 10:07:02]1551: WAF :: fetched 1 new logs [25-06-2022 10:08:02]4271: WAF :: fetched 2 new logs [25-06-2022 10:10:02]9978: WAF :: fetched 1 new logs [25-06-2022 10:11:01]12677: WAF :: fetched 2 new logs [25-06-2022 10:12:01]15369: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656162721 [25-06-2022 10:12:01]15369: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 10:12:03]15369: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 10:12:03]15369: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-1012/20220625-101201-YrcJoa2Po8AlQ-Ql8YnTCAAAABU [25-06-2022 10:12:03]15369: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 10:12:04]15369: WAF :: fetched 2 new logs [25-06-2022 10:13:02]18038: WAF :: fetched 2 new logs [25-06-2022 10:15:02]23297: WAF :: fetched 1 new logs [25-06-2022 10:16:02]25955: WAF :: fetched 1 new logs [25-06-2022 10:17:01]28680: WAF :: fetched 1 new logs [25-06-2022 10:18:02]31365: WAF :: fetched 1 new logs [25-06-2022 10:19:02]1591: WAF :: fetched 4 new logs [25-06-2022 10:20:02]4422: WAF :: fetched 1 new logs [25-06-2022 10:24:01]15158: WAF :: fetched 1 new logs [25-06-2022 10:25:02]17836: WAF :: fetched 2 new logs [25-06-2022 10:26:02]20530: WAF :: fetched 2 new logs [25-06-2022 10:30:02]31184: WAF :: fetched 1 new logs [25-06-2022 10:33:01]6956: WAF :: fetched 2 new logs [25-06-2022 10:34:02]9612: WAF :: fetched 6 new logs [25-06-2022 10:35:02]12314: WAF :: fetched 4 new logs [25-06-2022 10:36:01]15047: WAF :: fetched 1 new logs [25-06-2022 10:37:02]17778: WAF :: fetched 7 new logs [25-06-2022 10:38:01]20398: WAF :: fetched 3 new logs [25-06-2022 10:39:01]23076: WAF :: fetched 2 new logs [25-06-2022 10:41:01]28448: WAF :: fetched 4 new logs [25-06-2022 10:41:01]28448: Checking for user cron vulnerabilities [25-06-2022 10:42:01]31261: WAF :: fetched 2 new logs [25-06-2022 10:43:02]1473: WAF :: fetched 1 new logs [25-06-2022 10:44:01]7579: Checking ditributed CMS bruteforce attacks [25-06-2022 10:45:02]14846: WAF :: fetched 2 new logs [25-06-2022 10:46:01]21428: WAF :: fetched 2 new logs [25-06-2022 10:47:01]25166: WAF :: fetched 3 new logs [25-06-2022 10:49:01]30486: WAF :: fetched 1 new logs [25-06-2022 10:51:02]3503: WAF :: fetched 1 new logs [25-06-2022 10:54:01]11781: WAF :: fetched 2 new logs [25-06-2022 10:56:01]17185: WAF :: fetched 1 new logs [25-06-2022 10:58:01]22597: WAF :: fetched 2 new logs [25-06-2022 10:59:01]25221: WAF :: fetched 5 new logs [25-06-2022 11:01:01]30808: WAF :: fetched 1 new logs [25-06-2022 11:02:02]1196: WAF :: fetched 1 new logs [25-06-2022 11:03:02]3897: WAF :: fetched 4 new logs [25-06-2022 11:06:01]11968: WAF :: fetched 1 new logs [25-06-2022 11:07:01]14731: WAF :: fetched 4 new logs [25-06-2022 11:07:41]14888: Performed RBL check for 23.111.136.34. Blacklisted by 1hosts [25-06-2022 11:08:02]17360: WAF :: fetched 1 new logs [25-06-2022 11:09:01]20005: WAF :: fetched 1 new logs [25-06-2022 11:11:02]25392: WAF :: fetched 3 new logs [25-06-2022 11:12:02]28135: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656166322 [25-06-2022 11:12:02]28135: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 11:12:04]28135: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 11:12:04]28135: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-1112/20220625-111202-YrcXsl72oZJuy4noc3eeKgAAAA4 [25-06-2022 11:12:04]28135: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 11:12:04]28135: WAF :: fetched 3 new logs [25-06-2022 11:14:02]1106: WAF :: fetched 1 new logs [25-06-2022 11:16:02]6538: WAF :: fetched 18 new logs [25-06-2022 11:17:01]9255: WAF :: fetched 13 new logs [25-06-2022 11:18:01]11919: WAF :: fetched 2 new logs [25-06-2022 11:20:01]17299: WAF :: fetched 22 new logs [25-06-2022 11:21:01]20093: WAF :: fetched 1 new logs [25-06-2022 11:22:02]22843: WAF :: fetched 3 new logs [25-06-2022 11:23:01]25515: WAF :: fetched 5 new logs [25-06-2022 11:24:02]28191: WAF :: fetched 1 new logs [25-06-2022 11:25:02]30824: WAF :: fetched 2 new logs [25-06-2022 11:26:01]1149: WAF :: fetched 6 new logs [25-06-2022 11:27:02]3985: WAF :: fetched 2 new logs [25-06-2022 11:28:01]6666: WAF :: fetched 1 new logs [25-06-2022 11:29:01]9320: WAF :: fetched 2 new logs [25-06-2022 11:30:02]11985: WAF :: fetched 23 new logs [25-06-2022 11:31:01]14653: WAF :: fetched 1 new logs [25-06-2022 11:32:02]17511: WAF :: fetched 2 new logs [25-06-2022 11:36:01]28038: WAF :: fetched 5 new logs [25-06-2022 11:37:02]30769: WAF :: fetched 5 new logs [25-06-2022 11:38:01]1020: WAF :: fetched 6 new logs [25-06-2022 11:39:02]3714: WAF :: fetched 1 new logs [25-06-2022 11:40:02]6400: WAF :: fetched 1 new logs [25-06-2022 11:41:01]9076: Checking for user cron vulnerabilities [25-06-2022 11:42:02]11836: WAF :: fetched 1 new logs [25-06-2022 11:44:02]20958: Checking ditributed CMS bruteforce attacks [25-06-2022 11:47:01]32445: WAF :: fetched 1 new logs [25-06-2022 11:49:01]5467: WAF :: fetched 5 new logs [25-06-2022 11:50:02]11495: WAF :: fetched 2 new logs [25-06-2022 11:51:01]16271: WAF :: fetched 2 new logs [25-06-2022 11:52:02]19048: WAF :: fetched 3 new logs [25-06-2022 11:53:02]21667: WAF :: fetched 1 new logs [25-06-2022 11:54:01]24346: WAF :: fetched 1 new logs [25-06-2022 11:55:01]27038: WAF :: fetched 4 new logs [25-06-2022 11:56:02]29788: WAF :: fetched 5 new logs [25-06-2022 11:57:02]32517: WAF :: fetched 3 new logs [25-06-2022 11:58:01]2787: WAF :: fetched 2 new logs [25-06-2022 11:59:02]5518: WAF :: fetched 3 new logs [25-06-2022 12:00:02]7954: WAF :: fetched 1 new logs [25-06-2022 12:02:02]13873: WAF :: fetched 2 new logs [25-06-2022 12:03:01]16555: WAF :: fetched 5 new logs [25-06-2022 12:04:02]19234: WAF :: fetched 8 new logs [25-06-2022 12:05:01]21898: WAF :: fetched 4 new logs [25-06-2022 12:06:02]24575: WAF :: fetched 1 new logs [25-06-2022 12:07:02]27332: WAF :: fetched 2 new logs [25-06-2022 12:09:02]32743: WAF :: fetched 5 new logs [25-06-2022 12:11:02]5794: WAF :: fetched 2 new logs [25-06-2022 12:12:01]8548: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656169921 [25-06-2022 12:12:01]8548: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 12:12:03]8548: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 12:12:04]8548: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-1212/20220625-121201-YrclwTHEu0N1tvdv-0T8HgAAACg [25-06-2022 12:12:04]8548: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 12:12:04]8548: WAF :: fetched 3 new logs [25-06-2022 12:13:01]11213: WAF :: fetched 3 new logs [25-06-2022 12:16:01]20129: WAF :: fetched 2 new logs [25-06-2022 12:17:01]22888: WAF :: fetched 3 new logs [25-06-2022 12:18:01]25506: WAF :: fetched 1 new logs [25-06-2022 12:20:01]30816: WAF :: fetched 3 new logs [25-06-2022 12:21:02]1151: WAF :: fetched 1 new logs [25-06-2022 12:22:02]3949: WAF :: fetched 1 new logs [25-06-2022 12:23:01]6624: WAF :: fetched 3 new logs [25-06-2022 12:24:02]9339: WAF :: fetched 3 new logs [25-06-2022 12:25:01]11882: WAF :: fetched 2 new logs [25-06-2022 12:26:02]14673: WAF :: fetched 3 new logs [25-06-2022 12:28:02]20005: WAF :: fetched 1 new logs [25-06-2022 12:30:01]25276: WAF :: fetched 1 new logs [25-06-2022 12:32:02]30805: WAF :: fetched 2 new logs [25-06-2022 12:33:02]1041: WAF :: fetched 4 new logs [25-06-2022 12:34:01]3729: WAF :: fetched 3 new logs [25-06-2022 12:36:01]9046: WAF :: fetched 5 new logs [25-06-2022 12:37:02]11904: WAF :: fetched 4 new logs [25-06-2022 12:38:01]14499: WAF :: fetched 2 new logs [25-06-2022 12:39:02]17141: WAF :: fetched 3 new logs [25-06-2022 12:40:02]19787: WAF :: fetched 1 new logs [25-06-2022 12:41:02]22463: WAF :: fetched 1 new logs [25-06-2022 12:41:02]22463: Checking for user cron vulnerabilities [25-06-2022 12:42:01]25193: WAF :: fetched 1 new logs [25-06-2022 12:43:01]27804: WAF :: fetched 1 new logs [25-06-2022 12:44:01]1680: Checking ditributed CMS bruteforce attacks [25-06-2022 12:44:02]1680: WAF :: fetched 1 new logs [25-06-2022 12:45:01]: Checking for software updates [25-06-2022 12:47:02]13109: WAF :: fetched 1 new logs [25-06-2022 12:48:01]15841: WAF :: fetched 1 new logs [25-06-2022 12:50:02]25801: WAF :: fetched 1 new logs [25-06-2022 12:51:01]28874: WAF :: fetched 2 new logs [25-06-2022 12:52:01]31632: WAF :: fetched 5 new logs [25-06-2022 12:53:01]1859: WAF :: fetched 1 new logs [25-06-2022 12:56:02]9954: WAF :: fetched 3 new logs [25-06-2022 12:57:01]12665: WAF :: fetched 2 new logs [25-06-2022 12:58:01]15290: WAF :: fetched 1 new logs [25-06-2022 12:59:02]17948: WAF :: fetched 3 new logs [25-06-2022 13:03:01]28754: WAF :: fetched 2 new logs [25-06-2022 13:04:02]31412: WAF :: fetched 2 new logs [25-06-2022 13:05:01]1659: WAF :: fetched 1 new logs [25-06-2022 13:07:02]7208: WAF :: fetched 1 new logs [25-06-2022 13:10:02]15153: WAF :: fetched 1 new logs [25-06-2022 13:12:01]20638: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656173521 [25-06-2022 13:12:01]20638: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 13:12:03]20638: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 13:12:03]20638: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-1312/20220625-131201-Yrcz0cwn2TFnodM9Xl0mwAAAACc [25-06-2022 13:12:03]20638: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 13:12:04]20638: WAF :: fetched 7 new logs [25-06-2022 13:13:02]23287: WAF :: fetched 3 new logs [25-06-2022 13:14:01]25895: WAF :: fetched 4 new logs [25-06-2022 13:18:01]4300: WAF :: fetched 1 new logs [25-06-2022 13:20:01]9715: WAF :: fetched 3 new logs [25-06-2022 13:21:01]12474: WAF :: fetched 2 new logs [25-06-2022 13:24:01]20481: WAF :: fetched 1 new logs [25-06-2022 13:30:02]4174: WAF :: fetched 1 new logs [25-06-2022 13:32:02]9663: WAF :: fetched 2 new logs [25-06-2022 13:33:01]12271: WAF :: fetched 1 new logs [25-06-2022 13:34:01]14907: WAF :: fetched 2 new logs [25-06-2022 13:35:02]17569: WAF :: fetched 1 new logs [25-06-2022 13:36:01]20265: WAF :: fetched 26 new logs [25-06-2022 13:37:02]22988: WAF :: fetched 29 new logs [25-06-2022 13:38:02]25623: WAF :: fetched 66 new logs [25-06-2022 13:39:01]28282: WAF :: fetched 70 new logs [25-06-2022 13:41:01]1204: WAF :: fetched 2 new logs [25-06-2022 13:41:01]1204: Checking for user cron vulnerabilities [25-06-2022 13:42:02]3980: WAF :: fetched 3 new logs [25-06-2022 13:43:01]6686: WAF :: fetched 1 new logs [25-06-2022 13:44:01]12719: Checking ditributed CMS bruteforce attacks [25-06-2022 13:44:01]12719: WAF :: fetched 1 new logs [25-06-2022 13:45:01]: Checking for definition updates [25-06-2022 13:45:01]17783: WAF :: fetched 3 new logs [25-06-2022 13:46:02]20473: WAF :: fetched 4 new logs [25-06-2022 13:47:01]23142: WAF :: fetched 4 new logs [25-06-2022 13:48:01]25870: WAF :: fetched 1 new logs [25-06-2022 13:49:02]29412: WAF :: fetched 1 new logs [25-06-2022 13:50:01]3762: WAF :: fetched 3 new logs [25-06-2022 13:51:01]8557: WAF :: fetched 4 new logs [25-06-2022 13:52:02]11268: WAF :: fetched 3 new logs [25-06-2022 13:53:01]13971: WAF :: fetched 2 new logs [25-06-2022 13:54:01]16623: WAF :: fetched 1 new logs [25-06-2022 13:55:01]19268: WAF :: fetched 2 new logs [25-06-2022 13:56:02]21972: WAF :: fetched 2 new logs [25-06-2022 13:57:01]24601: WAF :: fetched 1 new logs [25-06-2022 13:58:02]27392: WAF :: fetched 3 new logs [25-06-2022 14:07:01]19109: WAF :: fetched 3 new logs [25-06-2022 14:08:02]21835: WAF :: fetched 1 new logs [25-06-2022 14:09:01]24423: WAF :: fetched 3 new logs [25-06-2022 14:10:01]27109: WAF :: fetched 9 new logs [25-06-2022 14:11:02]29821: WAF :: fetched 1 new logs [25-06-2022 14:12:01]32477: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656177121 [25-06-2022 14:12:01]32477: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 14:12:03]32477: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 14:12:03]32477: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-1412/20220625-141201-YrdB4Sp7nj2d8N4NhI2lfAAAADo [25-06-2022 14:12:03]32477: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 14:12:04]32477: WAF :: fetched 4 new logs [25-06-2022 14:13:02]2825: WAF :: fetched 9 new logs [25-06-2022 14:14:02]5525: WAF :: fetched 3 new logs [25-06-2022 14:15:01]8167: WAF :: fetched 2 new logs [25-06-2022 14:16:02]10888: WAF :: fetched 3 new logs [25-06-2022 14:17:01]13486: WAF :: fetched 3 new logs [25-06-2022 14:20:02]21517: WAF :: fetched 3 new logs [25-06-2022 14:21:01]24188: WAF :: fetched 3 new logs [25-06-2022 14:22:01]26830: WAF :: fetched 6 new logs [25-06-2022 14:23:01]29550: WAF :: fetched 5 new logs [25-06-2022 14:25:01]2452: WAF :: fetched 1 new logs [25-06-2022 14:26:02]5249: WAF :: fetched 10 new logs [25-06-2022 14:27:01]7888: WAF :: fetched 5 new logs [25-06-2022 14:28:01]10588: WAF :: fetched 4 new logs [25-06-2022 14:29:02]13227: WAF :: fetched 5 new logs [25-06-2022 14:30:01]15841: WAF :: fetched 3 new logs [25-06-2022 14:31:02]18538: WAF :: fetched 7 new logs [25-06-2022 14:32:02]21163: WAF :: fetched 16 new logs [25-06-2022 14:33:02]23858: WAF :: fetched 13 new logs [25-06-2022 14:34:01]26473: WAF :: fetched 20 new logs [25-06-2022 14:35:02]29148: WAF :: fetched 5 new logs [25-06-2022 14:36:01]31799: WAF :: fetched 16 new logs [25-06-2022 14:37:01]2075: WAF :: fetched 12 new logs [25-06-2022 14:38:01]4904: WAF :: fetched 13 new logs [25-06-2022 14:39:02]7571: WAF :: fetched 8 new logs [25-06-2022 14:40:02]10251: WAF :: fetched 5 new logs [25-06-2022 14:41:02]12965: WAF :: fetched 1 new logs [25-06-2022 14:41:02]12965: Checking for user cron vulnerabilities [25-06-2022 14:42:01]15625: WAF :: fetched 3 new logs [25-06-2022 14:43:01]18334: WAF :: fetched 1 new logs [25-06-2022 14:44:01]24974: Checking ditributed CMS bruteforce attacks [25-06-2022 14:44:02]24974: WAF :: fetched 2 new logs [25-06-2022 14:45:01]27626: WAF :: fetched 2 new logs [25-06-2022 14:46:02]30373: WAF :: fetched 1 new logs [25-06-2022 14:47:02]558: WAF :: fetched 2 new logs [25-06-2022 14:48:01]3368: WAF :: fetched 1 new logs [25-06-2022 14:50:01]12859: WAF :: fetched 3 new logs [25-06-2022 14:51:01]15530: WAF :: fetched 4 new logs [25-06-2022 14:53:02]20841: Updated license status via CDN [25-06-2022 14:54:02]25720: WAF :: fetched 1 new logs [25-06-2022 14:56:02]380: WAF :: fetched 4 new logs [25-06-2022 14:57:01]3080: WAF :: fetched 2 new logs [25-06-2022 14:58:02]5902: WAF :: fetched 1 new logs [25-06-2022 15:00:01]10902: WAF :: fetched 7 new logs [25-06-2022 15:01:02]13997: Reseting cPGuard inotify settings [25-06-2022 15:01:02]13996: WAF :: fetched 1 new logs [25-06-2022 15:02:01]16612: WAF :: fetched 4 new logs [25-06-2022 15:03:02]19339: WAF :: fetched 15 new logs [25-06-2022 15:04:02]21921: WAF :: fetched 24 new logs [25-06-2022 15:05:01]24533: WAF :: fetched 16 new logs [25-06-2022 15:06:02]27212: WAF :: fetched 7 new logs [25-06-2022 15:07:01]29814: WAF :: fetched 2 new logs [25-06-2022 15:08:01]32517: WAF :: fetched 5 new logs [25-06-2022 15:09:02]2779: WAF :: fetched 14 new logs [25-06-2022 15:10:02]5497: WAF :: fetched 23 new logs [25-06-2022 15:11:01]8224: WAF :: fetched 20 new logs [25-06-2022 15:12:02]10894: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656180722 [25-06-2022 15:12:02]10894: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 15:12:04]10894: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 15:12:04]10894: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-1512/20220625-151202-YrdP8lKtgkjO6voFDkeQ7gAAAAk [25-06-2022 15:12:04]10894: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 15:12:04]10894: WAF :: fetched 9 new logs [25-06-2022 15:13:01]13589: WAF :: fetched 1 new logs [25-06-2022 15:14:02]16246: WAF :: fetched 3 new logs [25-06-2022 15:15:02]18819: WAF :: fetched 3 new logs [25-06-2022 15:17:02]24097: WAF :: fetched 1 new logs [25-06-2022 15:20:02]32068: WAF :: fetched 1 new logs [25-06-2022 15:21:01]2383: WAF :: fetched 3 new logs [25-06-2022 15:22:01]5084: WAF :: fetched 5 new logs [25-06-2022 15:23:02]7793: WAF :: fetched 3 new logs [25-06-2022 15:24:01]10439: WAF :: fetched 7 new logs [25-06-2022 15:25:02]13069: WAF :: fetched 4 new logs [25-06-2022 15:26:02]15767: WAF :: fetched 2 new logs [25-06-2022 15:29:01]23683: WAF :: fetched 2 new logs [25-06-2022 15:30:02]26361: WAF :: fetched 1 new logs [25-06-2022 15:31:02]29045: WAF :: fetched 3 new logs [25-06-2022 15:32:01]31697: WAF :: fetched 1 new logs [25-06-2022 15:33:01]2049: WAF :: fetched 1 new logs [25-06-2022 15:34:02]4816: WAF :: fetched 4 new logs [25-06-2022 15:35:01]7440: WAF :: fetched 3 new logs [25-06-2022 15:36:01]10148: WAF :: fetched 4 new logs [25-06-2022 15:37:02]12804: WAF :: fetched 2 new logs [25-06-2022 15:38:01]15477: WAF :: fetched 1 new logs [25-06-2022 15:39:02]18127: WAF :: fetched 2 new logs [25-06-2022 15:40:02]20738: WAF :: fetched 2 new logs [25-06-2022 15:41:01]23395: WAF :: fetched 2 new logs [25-06-2022 15:41:01]23395: Checking for user cron vulnerabilities [25-06-2022 15:42:02]25993: WAF :: fetched 4 new logs [25-06-2022 15:43:01]28653: WAF :: fetched 1 new logs [25-06-2022 15:44:02]32126: Checking ditributed CMS bruteforce attacks [25-06-2022 15:44:02]32126: WAF :: fetched 2 new logs [25-06-2022 15:45:02]2350: WAF :: fetched 3 new logs [25-06-2022 15:46:01]5105: WAF :: fetched 1 new logs [25-06-2022 15:47:02]7745: WAF :: fetched 25 new logs [25-06-2022 15:48:01]12390: WAF :: fetched 1 new logs [25-06-2022 15:49:02]19705: WAF :: fetched 2 new logs [25-06-2022 15:50:01]24738: WAF :: fetched 1 new logs [25-06-2022 15:52:01]31391: WAF :: fetched 5 new logs [25-06-2022 15:53:01]1736: WAF :: fetched 1 new logs [25-06-2022 15:54:02]4524: WAF :: fetched 1 new logs [25-06-2022 15:55:01]7198: WAF :: fetched 1 new logs [25-06-2022 15:56:02]9895: WAF :: fetched 5 new logs [25-06-2022 15:57:02]12563: WAF :: fetched 7 new logs [25-06-2022 15:59:02]17938: WAF :: fetched 3 new logs [25-06-2022 16:00:01]20267: WAF :: fetched 2 new logs [25-06-2022 16:01:01]23387: WAF :: fetched 6 new logs [25-06-2022 16:02:02]26082: WAF :: fetched 6 new logs [25-06-2022 16:03:01]28773: WAF :: fetched 3 new logs [25-06-2022 16:04:02]31429: WAF :: fetched 2 new logs [25-06-2022 16:06:01]4432: WAF :: fetched 1 new logs [25-06-2022 16:07:02]7077: WAF :: fetched 1 new logs [25-06-2022 16:08:01]9799: WAF :: fetched 2 new logs [25-06-2022 16:09:01]12429: WAF :: fetched 1 new logs [25-06-2022 16:10:01]15067: WAF :: fetched 1 new logs [25-06-2022 16:11:02]17755: WAF :: fetched 2 new logs [25-06-2022 16:12:01]20388: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656184321 [25-06-2022 16:12:01]20388: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 16:12:03]20388: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 16:12:03]20388: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-1612/20220625-161201-YrdeAVcQz2vzL-nwOoZLQgAAAAE [25-06-2022 16:12:03]20388: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 16:12:04]20388: WAF :: fetched 4 new logs [25-06-2022 16:13:02]23133: WAF :: fetched 1 new logs [25-06-2022 16:16:02]31069: WAF :: fetched 1 new logs [25-06-2022 16:17:01]1285: WAF :: fetched 3 new logs [25-06-2022 16:18:02]4110: WAF :: fetched 2 new logs [25-06-2022 16:19:02]6818: WAF :: fetched 4 new logs [25-06-2022 16:22:02]14788: WAF :: fetched 2 new logs [25-06-2022 16:23:01]17499: WAF :: fetched 2 new logs [25-06-2022 16:24:02]20135: WAF :: fetched 26 new logs [25-06-2022 16:25:01]22731: WAF :: fetched 1 new logs [25-06-2022 16:26:01]25410: WAF :: fetched 5 new logs [25-06-2022 16:28:01]30748: WAF :: fetched 31 new logs [25-06-2022 16:29:02]1021: WAF :: fetched 1 new logs [25-06-2022 16:30:01]3662: WAF :: fetched 1 new logs [25-06-2022 16:31:02]6442: WAF :: fetched 10 new logs [25-06-2022 16:32:01]9115: WAF :: fetched 116 new logs [25-06-2022 16:33:02]11869: WAF :: fetched 132 new logs [25-06-2022 16:34:01]14482: WAF :: fetched 83 new logs [25-06-2022 16:35:02]17118: WAF :: fetched 103 new logs [25-06-2022 16:36:02]19726: WAF :: fetched 1 new logs [25-06-2022 16:38:02]25065: WAF :: fetched 2 new logs [25-06-2022 16:39:02]27695: WAF :: fetched 1 new logs [25-06-2022 16:40:02]30373: WAF :: fetched 1 new logs [25-06-2022 16:41:01]592: WAF :: fetched 1 new logs [25-06-2022 16:41:01]592: Checking for user cron vulnerabilities [25-06-2022 16:42:02]3321: WAF :: fetched 1 new logs [25-06-2022 16:44:02]9194: Checking ditributed CMS bruteforce attacks [25-06-2022 16:45:02]11849: WAF :: fetched 5 new logs [25-06-2022 16:46:01]14514: WAF :: fetched 4 new logs [25-06-2022 16:47:02]17207: WAF :: fetched 3 new logs [25-06-2022 16:48:02]20919: WAF :: fetched 13 new logs [25-06-2022 16:49:01]23566: WAF :: fetched 9 new logs [25-06-2022 16:50:02]26227: WAF :: fetched 4 new logs [25-06-2022 16:51:01]28928: WAF :: fetched 7 new logs [25-06-2022 16:52:02]31651: WAF :: fetched 7 new logs [25-06-2022 16:53:02]6077: WAF :: fetched 11 new logs [25-06-2022 16:54:01]12876: WAF :: fetched 8 new logs [25-06-2022 16:55:02]18191: WAF :: fetched 3 new logs [25-06-2022 16:56:01]20809: WAF :: fetched 1 new logs [25-06-2022 16:57:02]23452: WAF :: fetched 1 new logs [25-06-2022 16:58:01]26156: WAF :: fetched 1 new logs [25-06-2022 16:59:02]28782: WAF :: fetched 1 new logs [25-06-2022 17:00:02]31166: WAF :: fetched 1 new logs [25-06-2022 17:01:01]1905: WAF :: fetched 1 new logs [25-06-2022 17:02:02]4710: WAF :: fetched 1 new logs [25-06-2022 17:03:01]7415: WAF :: fetched 1 new logs [25-06-2022 17:04:02]10089: WAF :: fetched 1 new logs [25-06-2022 17:05:02]12707: WAF :: fetched 2 new logs [25-06-2022 17:06:01]15395: WAF :: fetched 2 new logs [25-06-2022 17:10:01]25983: WAF :: fetched 1 new logs [25-06-2022 17:12:02]31318: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656187922 [25-06-2022 17:12:02]31318: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 17:12:04]31318: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 17:12:04]31318: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-1712/20220625-171202-YrdsEpQ4B-OsArMHgyLyaAAAAAc [25-06-2022 17:12:04]31318: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 17:12:04]31318: WAF :: fetched 3 new logs [25-06-2022 17:13:01]1634: WAF :: fetched 3 new logs [25-06-2022 17:14:01]4337: WAF :: fetched 1 new logs [25-06-2022 17:15:02]7084: WAF :: fetched 2 new logs [25-06-2022 17:16:01]9769: WAF :: fetched 2 new logs [25-06-2022 17:18:02]15090: WAF :: fetched 1 new logs [25-06-2022 17:19:01]17705: WAF :: fetched 4 new logs [25-06-2022 17:23:01]28427: WAF :: fetched 5 new logs [25-06-2022 17:24:02]31194: WAF :: fetched 3 new logs [25-06-2022 17:25:01]1380: WAF :: fetched 2 new logs [25-06-2022 17:26:02]4186: WAF :: fetched 1 new logs [25-06-2022 17:27:02]6868: WAF :: fetched 2 new logs [25-06-2022 17:28:01]9589: WAF :: fetched 1 new logs [25-06-2022 17:30:02]14891: WAF :: fetched 2 new logs [25-06-2022 17:31:01]17603: WAF :: fetched 2 new logs [25-06-2022 17:32:01]20254: WAF :: fetched 4 new logs [25-06-2022 17:33:02]22996: WAF :: fetched 3 new logs [25-06-2022 17:34:01]25621: WAF :: fetched 3 new logs [25-06-2022 17:36:01]30942: WAF :: fetched 2 new logs [25-06-2022 17:37:02]1176: WAF :: fetched 3 new logs [25-06-2022 17:40:02]9279: WAF :: fetched 1 new logs [25-06-2022 17:41:01]11950: WAF :: fetched 4 new logs [25-06-2022 17:41:01]11950: Checking for user cron vulnerabilities [25-06-2022 17:42:01]14571: WAF :: fetched 2 new logs [25-06-2022 17:43:02]17290: WAF :: fetched 2 new logs [25-06-2022 17:44:01]23972: Checking ditributed CMS bruteforce attacks [25-06-2022 17:47:02]5990: WAF :: fetched 2 new logs [25-06-2022 17:52:02]19442: WAF :: fetched 5 new logs [25-06-2022 17:53:01]22143: WAF :: fetched 1 new logs [25-06-2022 17:54:02]24789: WAF :: fetched 1 new logs [25-06-2022 17:55:02]27407: WAF :: fetched 4 new logs [25-06-2022 17:56:01]30116: WAF :: fetched 6 new logs [25-06-2022 17:58:01]3107: WAF :: fetched 6 new logs [25-06-2022 17:59:02]5829: WAF :: fetched 4 new logs [25-06-2022 18:00:02]8202: WAF :: fetched 5 new logs [25-06-2022 18:01:01]11341: WAF :: fetched 4 new logs [25-06-2022 18:02:01]14083: WAF :: fetched 4 new logs [25-06-2022 18:03:02]16856: WAF :: fetched 4 new logs [25-06-2022 18:05:02]22171: WAF :: fetched 3 new logs [25-06-2022 18:06:02]24890: WAF :: fetched 2 new logs [25-06-2022 18:07:01]27535: WAF :: fetched 6 new logs [25-06-2022 18:08:02]30268: WAF :: fetched 4 new logs [25-06-2022 18:09:01]480: WAF :: fetched 2 new logs [25-06-2022 18:10:02]3224: WAF :: fetched 7 new logs [25-06-2022 18:11:01]5963: WAF :: fetched 3 new logs [25-06-2022 18:12:01]8837: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656191521 [25-06-2022 18:12:01]8837: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 18:12:03]8837: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 18:12:03]8837: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-1812/20220625-181201-Yrd6IWNTMR1Jw2A25KZiKQAAACI [25-06-2022 18:12:03]8837: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 18:12:04]8837: WAF :: fetched 4 new logs [25-06-2022 18:13:01]11568: WAF :: fetched 2 new logs [25-06-2022 18:14:02]14221: WAF :: fetched 10 new logs [25-06-2022 18:15:01]16852: WAF :: fetched 5 new logs [25-06-2022 18:16:01]19579: WAF :: fetched 3 new logs [25-06-2022 18:17:01]22208: WAF :: fetched 3 new logs [25-06-2022 18:18:02]24940: WAF :: fetched 3 new logs [25-06-2022 18:19:01]27576: WAF :: fetched 3 new logs [25-06-2022 18:20:02]30232: WAF :: fetched 2 new logs [25-06-2022 18:21:02]414: WAF :: fetched 2 new logs [25-06-2022 18:22:01]3130: WAF :: fetched 2 new logs [25-06-2022 18:23:02]5918: WAF :: fetched 1 new logs [25-06-2022 18:24:01]8567: WAF :: fetched 1 new logs [25-06-2022 18:25:02]11261: WAF :: fetched 4 new logs [25-06-2022 18:26:02]13918: WAF :: fetched 1 new logs [25-06-2022 18:27:02]16564: WAF :: fetched 3 new logs [25-06-2022 18:28:01]19233: WAF :: fetched 2 new logs [25-06-2022 18:30:02]24546: WAF :: fetched 1 new logs [25-06-2022 18:31:01]27260: WAF :: fetched 2 new logs [25-06-2022 18:32:02]29941: WAF :: fetched 1 new logs [25-06-2022 18:33:01]32540: WAF :: fetched 1 new logs [25-06-2022 18:38:01]13461: WAF :: fetched 4 new logs [25-06-2022 18:39:01]16197: WAF :: fetched 3 new logs [25-06-2022 18:40:02]18865: WAF :: fetched 6 new logs [25-06-2022 18:41:01]21521: WAF :: fetched 3 new logs [25-06-2022 18:41:01]21521: Checking for user cron vulnerabilities [25-06-2022 18:42:01]24138: WAF :: fetched 2 new logs [25-06-2022 18:43:02]26778: WAF :: fetched 6 new logs [25-06-2022 18:44:01]32345: Checking ditributed CMS bruteforce attacks [25-06-2022 18:44:01]32345: WAF :: fetched 1 new logs [25-06-2022 18:46:02]5325: WAF :: fetched 1 new logs [25-06-2022 18:47:01]7943: WAF :: fetched 3 new logs [25-06-2022 18:48:02]10634: WAF :: fetched 1 new logs [25-06-2022 18:49:01]13294: WAF :: fetched 2 new logs [25-06-2022 18:50:02]15945: WAF :: fetched 1 new logs [25-06-2022 18:51:02]18593: WAF :: fetched 3 new logs [25-06-2022 18:52:01]21245: WAF :: fetched 7 new logs [25-06-2022 18:53:02]23876: WAF :: fetched 5 new logs [25-06-2022 18:54:01]26578: WAF :: fetched 3 new logs [25-06-2022 18:56:01]4878: WAF :: fetched 2 new logs [25-06-2022 18:57:02]7523: WAF :: fetched 1 new logs [25-06-2022 18:59:02]12891: WAF :: fetched 1 new logs [25-06-2022 19:00:02]15227: WAF :: fetched 2 new logs [25-06-2022 19:01:01]18352: WAF :: fetched 1 new logs [25-06-2022 19:03:01]23638: WAF :: fetched 4 new logs [25-06-2022 19:04:02]26410: WAF :: fetched 3 new logs [25-06-2022 19:05:02]29039: WAF :: fetched 5 new logs [25-06-2022 19:06:01]32255: WAF :: fetched 2 new logs [25-06-2022 19:07:02]4191: WAF :: fetched 1 new logs [25-06-2022 19:08:02]6844: WAF :: fetched 1 new logs [25-06-2022 19:09:01]9586: WAF :: fetched 1 new logs [25-06-2022 19:10:02]12240: WAF :: fetched 1 new logs [25-06-2022 19:11:02]14871: WAF :: fetched 3 new logs [25-06-2022 19:12:01]17471: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656195121 [25-06-2022 19:12:01]17471: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 19:12:03]17471: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 19:12:03]17471: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-1912/20220625-191201-YreIMUc4qSuvhs7uxZetBgAAABA [25-06-2022 19:12:03]17471: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-06-2022 19:12:04]17471: WAF :: fetched 2 new logs [25-06-2022 19:14:01]22792: WAF :: fetched 1 new logs [25-06-2022 19:15:02]25416: WAF :: fetched 2 new logs [25-06-2022 19:16:01]28052: WAF :: fetched 2 new logs [25-06-2022 19:17:01]30729: WAF :: fetched 6 new logs [25-06-2022 19:18:02]959: WAF :: fetched 1 new logs [25-06-2022 19:19:01]3677: WAF :: fetched 1 new logs [25-06-2022 19:20:02]6432: WAF :: fetched 2 new logs [25-06-2022 19:21:01]9057: WAF :: fetched 6 new logs [25-06-2022 19:22:01]11672: WAF :: fetched 2 new logs [25-06-2022 19:23:02]14326: WAF :: fetched 3 new logs [25-06-2022 19:24:01]16981: WAF :: fetched 5 new logs [25-06-2022 19:25:02]19625: WAF :: fetched 7 new logs [25-06-2022 19:26:01]22275: WAF :: fetched 2 new logs [25-06-2022 19:27:02]24922: WAF :: fetched 5 new logs [25-06-2022 19:28:01]27545: WAF :: fetched 5 new logs [25-06-2022 19:29:01]30239: WAF :: fetched 2 new logs [25-06-2022 19:30:01]399: WAF :: fetched 4 new logs [25-06-2022 19:31:01]3139: WAF :: fetched 1 new logs [25-06-2022 19:33:01]8512: WAF :: fetched 5 new logs [25-06-2022 19:34:02]11286: WAF :: fetched 1 new logs [25-06-2022 19:35:02]13915: WAF :: fetched 37 new logs [25-06-2022 19:36:02]16558: WAF :: fetched 2 new logs [25-06-2022 19:37:01]19208: WAF :: fetched 1 new logs [25-06-2022 19:38:02]21866: WAF :: fetched 1 new logs [25-06-2022 19:39:01]24563: WAF :: fetched 4 new logs [25-06-2022 19:40:02]27252: WAF :: fetched 2 new logs [25-06-2022 19:41:02]29951: WAF :: fetched 8 new logs [25-06-2022 19:41:02]29951: Checking for user cron vulnerabilities [25-06-2022 19:42:01]32588: WAF :: fetched 8 new logs [25-06-2022 19:43:02]2858: WAF :: fetched 8 new logs [25-06-2022 19:44:01]5986: Checking ditributed CMS bruteforce attacks [25-06-2022 19:44:01]5986: WAF :: fetched 9 new logs [25-06-2022 19:45:02]: Checking for definition updates [25-06-2022 19:45:02]8642: WAF :: fetched 2 new logs [25-06-2022 19:46:01]11282: WAF :: fetched 2 new logs [25-06-2022 19:47:01]13890: WAF :: fetched 1 new logs [25-06-2022 19:48:02]17336: WAF :: fetched 1 new logs [25-06-2022 19:49:01]20009: WAF :: fetched 1 new logs [25-06-2022 19:50:02]22686: WAF :: fetched 2 new logs [25-06-2022 19:51:02]25339: WAF :: fetched 1 new logs [25-06-2022 19:52:02]28271: WAF :: fetched 3 new logs [25-06-2022 19:53:01]31956: WAF :: fetched 3 new logs [25-06-2022 19:54:01]2299: WAF :: fetched 5 new logs [25-06-2022 19:55:02]5022: WAF :: fetched 2 new logs [25-06-2022 19:57:01]10318: WAF :: fetched 2 new logs [25-06-2022 19:58:02]12962: WAF :: fetched 3 new logs [25-06-2022 19:59:01]15670: WAF :: fetched 1 new logs [25-06-2022 20:00:02]18026: WAF :: fetched 4 new logs [25-06-2022 20:01:02]21154: WAF :: fetched 3 new logs [25-06-2022 20:02:01]23842: WAF :: fetched 4 new logs [25-06-2022 20:03:02]27284: WAF :: fetched 3 new logs [25-06-2022 20:04:01]30706: WAF :: fetched 6 new logs [25-06-2022 20:05:02]989: WAF :: fetched 4 new logs [25-06-2022 20:07:02]6442: WAF :: fetched 2 new logs [25-06-2022 20:08:02]9062: WAF :: fetched 2 new logs [25-06-2022 20:09:01]11767: WAF :: fetched 1 new logs [25-06-2022 20:10:01]14437: WAF :: fetched 1 new logs [25-06-2022 20:11:01]17103: WAF :: fetched 2 new logs [25-06-2022 20:12:02]19810: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656198722 [25-06-2022 20:12:02]19810: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 20:12:04]19810: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 20:12:04]19810: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-2012/20220625-201202-YreWQm3cUzJ9dEfQMnzxsgAAAAA [25-06-2022 20:12:04]19810: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 20:12:04]19810: WAF :: fetched 167 new logs [25-06-2022 20:13:01]22425: WAF :: fetched 5 new logs [25-06-2022 20:14:02]25516: WAF :: fetched 3 new logs [25-06-2022 20:15:01]28161: WAF :: fetched 5 new logs [25-06-2022 20:16:01]31294: WAF :: fetched 6 new logs [25-06-2022 20:17:02]2873: WAF :: fetched 3 new logs [25-06-2022 20:18:01]5572: WAF :: fetched 1 new logs [25-06-2022 20:19:02]8327: WAF :: fetched 1 new logs [25-06-2022 20:20:02]11007: WAF :: fetched 4 new logs [25-06-2022 20:21:01]15371: WAF :: fetched 2 new logs [25-06-2022 20:22:02]22146: WAF :: fetched 2 new logs [25-06-2022 20:23:01]24836: WAF :: fetched 4 new logs [25-06-2022 20:24:02]27570: WAF :: fetched 4 new logs [25-06-2022 20:25:01]30160: WAF :: fetched 1 new logs [25-06-2022 20:26:02]458: WAF :: fetched 4 new logs [25-06-2022 20:28:01]5856: WAF :: fetched 1 new logs [25-06-2022 20:29:02]8604: WAF :: fetched 1 new logs [25-06-2022 20:30:01]11254: WAF :: fetched 5 new logs [25-06-2022 20:31:02]13955: WAF :: fetched 6 new logs [25-06-2022 20:32:02]16595: WAF :: fetched 4 new logs [25-06-2022 20:34:02]21938: WAF :: fetched 3 new logs [25-06-2022 20:35:01]24562: WAF :: fetched 2 new logs [25-06-2022 20:36:02]27295: WAF :: fetched 2 new logs [25-06-2022 20:37:02]29921: WAF :: fetched 2 new logs [25-06-2022 20:38:01]32552: WAF :: fetched 1 new logs [25-06-2022 20:39:02]2899: WAF :: fetched 2 new logs [25-06-2022 20:40:01]5623: WAF :: fetched 1 new logs [25-06-2022 20:41:02]8335: WAF :: fetched 2 new logs [25-06-2022 20:41:02]8335: Checking for user cron vulnerabilities [25-06-2022 20:43:01]13573: WAF :: fetched 1 new logs [25-06-2022 20:44:02]17048: Checking ditributed CMS bruteforce attacks [25-06-2022 20:44:02]17048: WAF :: fetched 2 new logs [25-06-2022 20:45:01]19681: WAF :: fetched 2 new logs [25-06-2022 20:46:02]22390: WAF :: fetched 2 new logs [25-06-2022 20:48:01]29288: WAF :: fetched 2 new logs [25-06-2022 20:49:01]31995: WAF :: fetched 4 new logs [25-06-2022 20:50:02]2267: WAF :: fetched 3 new logs [25-06-2022 20:51:01]5004: WAF :: fetched 4 new logs [25-06-2022 20:52:01]7671: WAF :: fetched 4 new logs [25-06-2022 20:53:02]10365: WAF :: fetched 9 new logs [25-06-2022 20:54:01]13048: WAF :: fetched 1 new logs [25-06-2022 20:57:01]20962: WAF :: fetched 5 new logs [25-06-2022 20:58:02]23623: WAF :: fetched 7 new logs [25-06-2022 20:59:01]27391: WAF :: fetched 4 new logs [25-06-2022 21:00:02]29773: WAF :: fetched 11 new logs [25-06-2022 21:01:02]426: WAF :: fetched 3 new logs [25-06-2022 21:02:01]3169: WAF :: fetched 3 new logs [25-06-2022 21:03:02]6845: WAF :: fetched 4 new logs [25-06-2022 21:04:01]9562: WAF :: fetched 7 new logs [25-06-2022 21:05:02]12215: WAF :: fetched 2 new logs [25-06-2022 21:06:02]14852: WAF :: fetched 2 new logs [25-06-2022 21:07:01]17467: WAF :: fetched 3 new logs [25-06-2022 21:08:02]20108: WAF :: fetched 1 new logs [25-06-2022 21:10:02]25471: WAF :: fetched 2 new logs [25-06-2022 21:11:02]28120: WAF :: fetched 1 new logs [25-06-2022 21:12:02]834: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656202322 [25-06-2022 21:12:02]834: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 21:12:04]834: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 21:12:04]834: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-2112/20220625-211202-YrekUs-mLr4srmZtIVE_3QAAAAo [25-06-2022 21:12:04]834: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 21:13:01]5551: WAF :: fetched 1 new logs [25-06-2022 21:14:01]8254: WAF :: fetched 1 new logs [25-06-2022 21:15:02]10929: WAF :: fetched 2 new logs [25-06-2022 21:16:01]13569: WAF :: fetched 1 new logs [25-06-2022 21:18:01]18760: WAF :: fetched 1 new logs [25-06-2022 21:19:02]21528: WAF :: fetched 2 new logs [25-06-2022 21:20:02]24173: WAF :: fetched 1 new logs [25-06-2022 21:21:01]27301: WAF :: fetched 6 new logs [25-06-2022 21:22:01]30117: WAF :: fetched 4 new logs [25-06-2022 21:24:01]2671: WAF :: fetched 3 new logs [25-06-2022 21:25:02]5785: WAF :: fetched 5 new logs [25-06-2022 21:26:01]8656: WAF :: fetched 2 new logs [25-06-2022 21:27:02]11289: WAF :: fetched 2 new logs [25-06-2022 21:31:01]21911: WAF :: fetched 3 new logs [25-06-2022 21:32:02]24626: WAF :: fetched 1 new logs [25-06-2022 21:33:02]27233: WAF :: fetched 2 new logs [25-06-2022 21:34:01]29966: WAF :: fetched 1 new logs [25-06-2022 21:35:02]32639: WAF :: fetched 1 new logs [25-06-2022 21:39:01]10946: WAF :: fetched 2 new logs [25-06-2022 21:40:02]13617: WAF :: fetched 5 new logs [25-06-2022 21:41:02]16285: WAF :: fetched 6 new logs [25-06-2022 21:41:02]16285: Checking for user cron vulnerabilities [25-06-2022 21:42:01]18934: WAF :: fetched 2 new logs [25-06-2022 21:43:02]21595: WAF :: fetched 1 new logs [25-06-2022 21:44:01]24335: Checking ditributed CMS bruteforce attacks [25-06-2022 21:44:01]24335: WAF :: fetched 3 new logs [25-06-2022 21:45:02]26980: WAF :: fetched 3 new logs [25-06-2022 21:46:02]29648: WAF :: fetched 2 new logs [25-06-2022 21:47:01]32288: WAF :: fetched 1 new logs [25-06-2022 21:48:02]5530: WAF :: fetched 2 new logs [25-06-2022 21:49:01]8955: WAF :: fetched 2 new logs [25-06-2022 21:50:02]11637: WAF :: fetched 5 new logs [25-06-2022 21:51:02]14310: WAF :: fetched 7 new logs [25-06-2022 21:52:01]16931: WAF :: fetched 5 new logs [25-06-2022 21:54:01]23201: WAF :: fetched 2 new logs [25-06-2022 21:55:02]25837: WAF :: fetched 1 new logs [25-06-2022 21:56:02]28483: WAF :: fetched 1 new logs [25-06-2022 21:57:01]31693: WAF :: fetched 1 new logs [25-06-2022 21:58:02]6281: WAF :: fetched 1 new logs [25-06-2022 21:59:02]10441: WAF :: fetched 2 new logs [25-06-2022 22:01:01]15963: WAF :: fetched 2 new logs [25-06-2022 22:02:02]18656: WAF :: fetched 3 new logs [25-06-2022 22:03:01]21297: WAF :: fetched 3 new logs [25-06-2022 22:04:02]24003: WAF :: fetched 4 new logs [25-06-2022 22:05:01]26624: WAF :: fetched 3 new logs [25-06-2022 22:06:02]29377: WAF :: fetched 1 new logs [25-06-2022 22:07:01]31997: WAF :: fetched 3 new logs [25-06-2022 22:07:07]31996: Performing Domain reputation checks [25-06-2022 22:08:01]2260: WAF :: fetched 2 new logs [25-06-2022 22:09:02]5100: WAF :: fetched 1 new logs [25-06-2022 22:10:02]7722: WAF :: fetched 1 new logs [25-06-2022 22:11:01]10408: WAF :: fetched 1 new logs [25-06-2022 22:12:02]13103: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656205922 [25-06-2022 22:12:02]13103: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 22:12:04]13103: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 22:12:04]13103: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-2212/20220625-221202-YreyYoVAJfM1Pcx9LgPtHwAAAAI [25-06-2022 22:12:04]13103: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 22:12:04]13103: WAF :: fetched 3 new logs [25-06-2022 22:13:01]15701: WAF :: fetched 2 new logs [25-06-2022 22:15:02]21054: WAF :: fetched 2 new logs [25-06-2022 22:16:01]23765: WAF :: fetched 4 new logs [25-06-2022 22:17:02]26370: WAF :: fetched 2 new logs [25-06-2022 22:18:01]29018: WAF :: fetched 2 new logs [25-06-2022 22:19:01]31712: WAF :: fetched 1 new logs [25-06-2022 22:21:01]4717: WAF :: fetched 1 new logs [25-06-2022 22:22:02]7374: WAF :: fetched 1 new logs [25-06-2022 22:24:02]12661: WAF :: fetched 1 new logs [25-06-2022 22:25:01]15332: WAF :: fetched 1 new logs [25-06-2022 22:27:01]20301: WAF :: fetched 3 new logs [25-06-2022 22:28:02]23325: WAF :: fetched 1 new logs [25-06-2022 22:29:01]25999: WAF :: fetched 1 new logs [25-06-2022 22:30:02]28654: WAF :: fetched 1 new logs [25-06-2022 22:32:01]1579: WAF :: fetched 3 new logs [25-06-2022 22:33:02]4268: WAF :: fetched 3 new logs [25-06-2022 22:34:01]7009: WAF :: fetched 2 new logs [25-06-2022 22:35:02]9656: WAF :: fetched 4 new logs [25-06-2022 22:36:01]12302: WAF :: fetched 4 new logs [25-06-2022 22:37:02]14940: WAF :: fetched 4 new logs [25-06-2022 22:38:02]17564: WAF :: fetched 2 new logs [25-06-2022 22:39:01]20281: WAF :: fetched 5 new logs [25-06-2022 22:40:02]22952: WAF :: fetched 2 new logs [25-06-2022 22:41:01]25608: WAF :: fetched 1 new logs [25-06-2022 22:41:01]25608: Checking for user cron vulnerabilities [25-06-2022 22:42:01]28265: WAF :: fetched 2 new logs [25-06-2022 22:43:02]30914: WAF :: fetched 1 new logs [25-06-2022 22:44:01]1665: Checking ditributed CMS bruteforce attacks [25-06-2022 22:46:01]7068: WAF :: fetched 2 new logs [25-06-2022 22:47:02]9702: WAF :: fetched 3 new logs [25-06-2022 22:51:02]21201: WAF :: fetched 3 new logs [25-06-2022 22:52:01]23783: WAF :: fetched 5 new logs [25-06-2022 22:53:02]26396: WAF :: fetched 3 new logs [25-06-2022 22:55:02]31723: WAF :: fetched 1 new logs [25-06-2022 22:57:02]4637: WAF :: fetched 7 new logs [25-06-2022 22:58:01]7224: WAF :: fetched 1 new logs [25-06-2022 22:59:02]10862: WAF :: fetched 1 new logs [25-06-2022 23:00:01]13154: WAF :: fetched 1 new logs [25-06-2022 23:01:02]16260: WAF :: fetched 7 new logs [25-06-2022 23:02:01]18916: WAF :: fetched 2 new logs [25-06-2022 23:03:01]21705: WAF :: fetched 5 new logs [25-06-2022 23:05:01]27062: WAF :: fetched 7 new logs [25-06-2022 23:06:02]29744: WAF :: fetched 1 new logs [25-06-2022 23:07:54]32542: Performed RBL check for 23.111.136.34. [25-06-2022 23:11:02]10774: WAF :: fetched 7 new logs [25-06-2022 23:12:02]13363: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656209522 [25-06-2022 23:12:02]13363: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-06-2022 23:12:04]13363: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-06-2022 23:12:04]13363: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220625/20220625-2312/20220625-231202-YrfAct8HSR5fDfsM1Y9L6wAAAAY [25-06-2022 23:12:04]13363: WAF :: No suitable log file found. Using SQLite.. [25-06-2022 23:12:04]13363: WAF :: fetched 1 new logs [25-06-2022 23:13:01]15977: WAF :: fetched 3 new logs [25-06-2022 23:14:02]20007: WAF :: fetched 2 new logs [25-06-2022 23:15:01]22631: WAF :: fetched 7 new logs [25-06-2022 23:17:02]27868: WAF :: fetched 3 new logs [25-06-2022 23:19:02]2662: WAF :: fetched 1 new logs [25-06-2022 23:20:01]5392: WAF :: fetched 1 new logs [25-06-2022 23:22:02]10702: WAF :: fetched 2 new logs [25-06-2022 23:23:01]14190: WAF :: fetched 1 new logs [25-06-2022 23:25:01]19540: WAF :: fetched 1 new logs [25-06-2022 23:27:01]24835: WAF :: fetched 1 new logs [25-06-2022 23:28:01]30297: WAF :: fetched 1 new logs [25-06-2022 23:29:02]2487: WAF :: fetched 4 new logs [25-06-2022 23:30:01]5199: WAF :: fetched 1 new logs [25-06-2022 23:33:01]13549: WAF :: fetched 2 new logs [25-06-2022 23:36:02]21536: WAF :: fetched 1 new logs [25-06-2022 23:37:01]24200: WAF :: fetched 2 new logs [25-06-2022 23:38:01]26811: WAF :: fetched 1 new logs [25-06-2022 23:41:02]2513: WAF :: fetched 3 new logs [25-06-2022 23:41:02]2513: Checking for user cron vulnerabilities [25-06-2022 23:44:01]10549: Checking ditributed CMS bruteforce attacks [25-06-2022 23:46:02]15975: WAF :: fetched 2 new logs [25-06-2022 23:48:02]24542: WAF :: fetched 3 new logs [25-06-2022 23:49:02]555: WAF :: fetched 1 new logs [25-06-2022 23:51:02]6494: WAF :: fetched 2 new logs [25-06-2022 23:52:01]9126: WAF :: fetched 1 new logs [25-06-2022 23:53:01]11857: WAF :: fetched 1 new logs [25-06-2022 23:54:02]14885: WAF :: fetched 17 new logs [25-06-2022 23:55:02]18607: WAF :: fetched 70 new logs [25-06-2022 23:55:02]18610: httpd.conf changed. Refreshing watchlist. [25-06-2022 23:58:01]26697: WAF :: fetched 1 new logs [25-06-2022 23:59:02]29379: WAF :: fetched 2 new logs [26-06-2022 00:01:01]2745: httpd.conf changed. Refreshing watchlist. [26-06-2022 00:01:04]2762: Sending daily report for June 26, 2022 [26-06-2022 00:02:02]5693: httpd.conf changed. Refreshing watchlist. [26-06-2022 00:02:02]5691: WAF :: fetched 2 new logs [26-06-2022 00:03:01]8629: WAF :: fetched 1 new logs [26-06-2022 00:04:02]11473: WAF :: fetched 1 new logs [26-06-2022 00:05:02]14271: WAF :: fetched 28 new logs [26-06-2022 00:05:02]14271: Deleted 0 entries older than 6 MONTH from scanner_logs [26-06-2022 00:05:02]14271: Deleted 0 files from Quarantine [26-06-2022 00:06:01]17031: WAF :: fetched 2 new logs [26-06-2022 00:07:02]19723: WAF :: fetched 5 new logs [26-06-2022 00:08:01]22363: WAF :: fetched 2 new logs [26-06-2022 00:09:02]25066: WAF :: fetched 4 new logs [26-06-2022 00:10:02]27821: WAF :: fetched 2 new logs [26-06-2022 00:11:01]30499: WAF :: fetched 1 new logs [26-06-2022 00:12:02]778: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656213122 [26-06-2022 00:12:02]778: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 00:12:04]778: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 00:12:04]778: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-0012/20220626-001202-YrfOgjD17HO085mx9sV0_QAAAAw [26-06-2022 00:12:04]778: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 00:12:04]778: WAF :: fetched 3 new logs [26-06-2022 00:13:02]3544: WAF :: fetched 3 new logs [26-06-2022 00:14:01]6397: WAF :: fetched 1 new logs [26-06-2022 00:15:01]9228: WAF :: fetched 3 new logs [26-06-2022 00:16:02]12018: WAF :: fetched 2 new logs [26-06-2022 00:17:01]14663: WAF :: fetched 1 new logs [26-06-2022 00:18:02]17377: WAF :: fetched 3 new logs [26-06-2022 00:19:01]20063: WAF :: fetched 1 new logs [26-06-2022 00:20:01]22879: WAF :: fetched 3 new logs [26-06-2022 00:21:02]25644: WAF :: fetched 3 new logs [26-06-2022 00:22:01]28264: WAF :: fetched 7 new logs [26-06-2022 00:23:02]30935: WAF :: fetched 2 new logs [26-06-2022 00:24:02]1192: WAF :: fetched 3 new logs [26-06-2022 00:25:01]4003: WAF :: fetched 2 new logs [26-06-2022 00:26:02]6782: WAF :: fetched 1 new logs [26-06-2022 00:27:01]9464: WAF :: fetched 3 new logs [26-06-2022 00:28:02]12165: WAF :: fetched 1 new logs [26-06-2022 00:29:02]14792: WAF :: fetched 2 new logs [26-06-2022 00:30:01]17625: WAF :: fetched 3 new logs [26-06-2022 00:31:02]20450: WAF :: fetched 2 new logs [26-06-2022 00:32:01]23106: WAF :: fetched 3 new logs [26-06-2022 00:33:01]25772: WAF :: fetched 6 new logs [26-06-2022 00:34:02]28608: WAF :: fetched 4 new logs [26-06-2022 00:35:01]31409: WAF :: fetched 3 new logs [26-06-2022 00:36:02]1731: WAF :: fetched 2 new logs [26-06-2022 00:37:02]4444: WAF :: fetched 1 new logs [26-06-2022 00:38:01]7139: WAF :: fetched 2 new logs [26-06-2022 00:39:01]9766: WAF :: fetched 7 new logs [26-06-2022 00:40:02]12615: WAF :: fetched 1 new logs [26-06-2022 00:41:02]15355: WAF :: fetched 2 new logs [26-06-2022 00:41:02]15355: Checking for user cron vulnerabilities [26-06-2022 00:43:02]20755: WAF :: fetched 3 new logs [26-06-2022 00:44:01]23543: Checking ditributed CMS bruteforce attacks [26-06-2022 00:44:01]23543: WAF :: fetched 3 new logs [26-06-2022 00:45:02]: Checking for software updates [26-06-2022 00:46:02]28944: WAF :: fetched 4 new logs [26-06-2022 00:47:01]31631: WAF :: fetched 6 new logs [26-06-2022 00:49:01]6080: WAF :: fetched 1 new logs [26-06-2022 00:50:02]8946: WAF :: fetched 3 new logs [26-06-2022 00:51:01]13426: WAF :: fetched 1 new logs [26-06-2022 00:54:01]21385: WAF :: fetched 2 new logs [26-06-2022 00:55:02]24143: WAF :: fetched 5 new logs [26-06-2022 00:56:01]26840: WAF :: fetched 3 new logs [26-06-2022 00:57:01]29498: WAF :: fetched 1 new logs [26-06-2022 00:58:02]32120: WAF :: fetched 1 new logs [26-06-2022 01:01:01]8572: WAF :: fetched 1 new logs [26-06-2022 01:03:01]14716: WAF :: fetched 4 new logs [26-06-2022 01:04:02]17716: WAF :: fetched 1 new logs [26-06-2022 01:05:02]20692: WAF :: fetched 3 new logs [26-06-2022 01:06:01]24562: WAF :: fetched 2 new logs [26-06-2022 01:09:01]2062: WAF :: fetched 2 new logs [26-06-2022 01:10:02]4975: WAF :: fetched 2 new logs [26-06-2022 01:12:01]13694: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656216721 [26-06-2022 01:12:01]13694: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 01:12:03]13694: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 01:12:04]13694: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-0112/20220626-011201-Yrfckbb6lUzbsa4GRqzwggAAABQ [26-06-2022 01:12:04]13694: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 01:12:04]13694: WAF :: fetched 4 new logs [26-06-2022 01:13:02]18090: WAF :: fetched 1 new logs [26-06-2022 01:14:01]20552: WAF :: fetched 1 new logs [26-06-2022 01:15:02]23465: WAF :: fetched 2 new logs [26-06-2022 01:16:01]26356: WAF :: fetched 2 new logs [26-06-2022 01:17:01]29302: WAF :: fetched 1 new logs [26-06-2022 01:20:01]5187: WAF :: fetched 2 new logs [26-06-2022 01:21:01]8056: WAF :: fetched 1 new logs [26-06-2022 01:22:02]10737: WAF :: fetched 1 new logs [26-06-2022 01:24:02]16275: WAF :: fetched 2 new logs [26-06-2022 01:25:02]19145: WAF :: fetched 2 new logs [26-06-2022 01:26:01]21864: WAF :: fetched 2 new logs [26-06-2022 01:27:02]24580: WAF :: fetched 1 new logs [26-06-2022 01:28:01]27309: WAF :: fetched 3 new logs [26-06-2022 01:29:01]30213: WAF :: fetched 1 new logs [26-06-2022 01:30:02]830: WAF :: fetched 3 new logs [26-06-2022 01:32:02]6693: WAF :: fetched 3 new logs [26-06-2022 01:33:02]9453: WAF :: fetched 63 new logs [26-06-2022 01:34:01]12106: WAF :: fetched 55 new logs [26-06-2022 01:35:02]14873: WAF :: fetched 83 new logs [26-06-2022 01:36:02]17606: WAF :: fetched 90 new logs [26-06-2022 01:37:01]20252: WAF :: fetched 50 new logs [26-06-2022 01:38:02]22940: WAF :: fetched 97 new logs [26-06-2022 01:39:01]25583: WAF :: fetched 94 new logs [26-06-2022 01:40:02]28404: WAF :: fetched 43 new logs [26-06-2022 01:41:02]31239: WAF :: fetched 2 new logs [26-06-2022 01:41:02]31239: Checking for user cron vulnerabilities [26-06-2022 01:42:01]1737: WAF :: fetched 4 new logs [26-06-2022 01:43:02]4514: WAF :: fetched 2 new logs [26-06-2022 01:44:01]8247: Checking ditributed CMS bruteforce attacks [26-06-2022 01:45:02]: Checking for definition updates [26-06-2022 01:45:02]11047: WAF :: fetched 1 new logs [26-06-2022 01:49:01]21913: WAF :: fetched 1 new logs [26-06-2022 01:50:02]24655: WAF :: fetched 2 new logs [26-06-2022 01:52:01]30525: WAF :: fetched 1 new logs [26-06-2022 01:56:02]12934: WAF :: fetched 3 new logs [26-06-2022 01:57:01]15746: WAF :: fetched 3 new logs [26-06-2022 01:58:02]18824: WAF :: fetched 2 new logs [26-06-2022 02:01:02]27455: WAF :: fetched 4 new logs [26-06-2022 02:06:02]15533: WAF :: fetched 2 new logs [26-06-2022 02:07:02]18309: WAF :: fetched 1 new logs [26-06-2022 02:10:02]27004: WAF :: fetched 3 new logs [26-06-2022 02:11:01]29779: WAF :: fetched 3 new logs [26-06-2022 02:12:02]32454: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656220322 [26-06-2022 02:12:02]32454: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 02:12:04]32454: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 02:12:04]32454: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-0212/20220626-021202-Yrfqov6-hG9STq9mfmF2kQAAAAI [26-06-2022 02:12:04]32454: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 02:12:04]32454: WAF :: fetched 4 new logs [26-06-2022 02:13:01]2698: WAF :: fetched 4 new logs [26-06-2022 02:14:01]5423: WAF :: fetched 1 new logs [26-06-2022 02:17:02]13747: WAF :: fetched 1 new logs [26-06-2022 02:18:02]16787: WAF :: fetched 1 new logs [26-06-2022 02:23:02]30886: WAF :: fetched 1 new logs [26-06-2022 02:24:01]1140: WAF :: fetched 21 new logs [26-06-2022 02:25:02]3936: WAF :: fetched 6 new logs [26-06-2022 02:30:01]18094: WAF :: fetched 1 new logs [26-06-2022 02:31:02]21192: WAF :: fetched 1 new logs [26-06-2022 02:32:02]24075: WAF :: fetched 1 new logs [26-06-2022 02:33:01]26825: WAF :: fetched 5 new logs [26-06-2022 02:34:02]29495: WAF :: fetched 8 new logs [26-06-2022 02:35:01]32239: WAF :: fetched 1 new logs [26-06-2022 02:36:01]2593: WAF :: fetched 4 new logs [26-06-2022 02:37:02]5332: WAF :: fetched 1 new logs [26-06-2022 02:38:01]8028: WAF :: fetched 1 new logs [26-06-2022 02:39:02]10986: WAF :: fetched 3 new logs [26-06-2022 02:40:02]13732: WAF :: fetched 2 new logs [26-06-2022 02:41:01]16421: WAF :: fetched 100 new logs [26-06-2022 02:41:01]16421: Checking for user cron vulnerabilities [26-06-2022 02:42:02]19144: WAF :: fetched 107 new logs [26-06-2022 02:43:02]21800: WAF :: fetched 99 new logs [26-06-2022 02:44:01]26951: Checking ditributed CMS bruteforce attacks [26-06-2022 02:44:01]26951: WAF :: fetched 9 new logs [26-06-2022 02:45:02]29717: WAF :: fetched 2 new logs [26-06-2022 02:46:01]32396: WAF :: fetched 1 new logs [26-06-2022 02:47:02]2676: WAF :: fetched 3 new logs [26-06-2022 02:48:01]5749: WAF :: fetched 2 new logs [26-06-2022 02:50:02]17823: WAF :: fetched 2 new logs [26-06-2022 02:51:02]20533: WAF :: fetched 4 new logs [26-06-2022 02:52:01]23296: WAF :: fetched 4 new logs [26-06-2022 02:53:02]26297: Updated license status via CDN [26-06-2022 02:54:01]28957: WAF :: fetched 2 new logs [26-06-2022 02:55:02]31763: WAF :: fetched 1 new logs [26-06-2022 02:58:02]7516: WAF :: fetched 1 new logs [26-06-2022 02:59:01]10257: WAF :: fetched 6 new logs [26-06-2022 03:00:02]12754: WAF :: fetched 3 new logs [26-06-2022 03:01:29]12754: Found and updated 32 CMS installations [26-06-2022 03:01:42]12754: Wordpress installation #1 brgestor.com.br has errors [26-06-2022 03:02:02]18624: WAF :: fetched 1 new logs [26-06-2022 03:02:07]12754: Wordpress installation #5 meusiteimobiliario.com.br has errors [26-06-2022 03:02:26]12754: Wordpress installation #9 oabilheus.org.br has errors [26-06-2022 03:02:59]12754: Wordpress installation #14 apoionordeste.com.br has errors [26-06-2022 03:03:21]12754: Wordpress installation #16 kecolima.com.br has errors [26-06-2022 03:03:42]12754: Wordpress installation #20 cursomassoterapia.com has errors [26-06-2022 03:04:02]24359: WAF :: fetched 1 new logs [26-06-2022 03:04:26]12754: Wordpress installation #29 adsgestaomkt.com.br has errors [26-06-2022 03:04:26]21362: Wordpress installation #29 adsgestaomkt.com.br has errors [26-06-2022 03:04:52]12754: Wordpress installation #32 site.meucartaovirtual.com.br has errors [26-06-2022 03:04:52]21362: Wordpress installation #32 site.meucartaovirtual.com.br has errors [26-06-2022 03:05:02]27388: WAF :: fetched 1 new logs [26-06-2022 03:05:11]12754: Wordpress installation #34 fazendayrere.com.br has errors [26-06-2022 03:05:11]21362: Wordpress installation #34 fazendayrere.com.br has errors [26-06-2022 03:05:34]12754: Wordpress installation #39 imoblux.com.br has errors [26-06-2022 03:05:34]21362: Wordpress installation #39 imoblux.com.br has errors [26-06-2022 03:06:01]30319: WAF :: fetched 2 new logs [26-06-2022 03:06:02]21362: Sending CMS version vulnerability report emails to cpanel users [26-06-2022 03:06:02]12754: Wordpress installation #42 suryart.com.br has errors [26-06-2022 03:06:03]12754: Sending CMS version vulnerability report emails to cpanel users [26-06-2022 03:06:05]21362: Checking wordpress installations for suspicious directories [26-06-2022 03:06:06]12754: Checking wordpress installations for suspicious directories [26-06-2022 03:07:02]887: WAF :: fetched 3 new logs [26-06-2022 03:08:01]3572: WAF :: fetched 2 new logs [26-06-2022 03:09:02]6342: WAF :: fetched 1 new logs [26-06-2022 03:10:02]9077: WAF :: fetched 1 new logs [26-06-2022 03:11:01]11807: WAF :: fetched 1 new logs [26-06-2022 03:12:02]14512: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656223922 [26-06-2022 03:12:02]14512: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 03:12:04]14512: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 03:12:04]14512: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-0312/20220626-031202-Yrf4sp2Kz_yu0T4ugKH0JgAAAAw [26-06-2022 03:12:04]14512: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 03:12:04]14512: WAF :: fetched 1 new logs [26-06-2022 03:13:01]17185: WAF :: fetched 1 new logs [26-06-2022 03:14:02]19859: WAF :: fetched 2 new logs [26-06-2022 03:15:02]22586: WAF :: fetched 1 new logs [26-06-2022 03:17:02]27914: WAF :: fetched 2 new logs [26-06-2022 03:18:02]30555: WAF :: fetched 2 new logs [26-06-2022 03:19:01]838: WAF :: fetched 7 new logs [26-06-2022 03:20:02]3757: WAF :: fetched 4 new logs [26-06-2022 03:21:02]6540: WAF :: fetched 3 new logs [26-06-2022 03:22:01]9231: WAF :: fetched 2 new logs [26-06-2022 03:23:02]11905: WAF :: fetched 2 new logs [26-06-2022 03:24:01]14552: WAF :: fetched 1 new logs [26-06-2022 03:25:02]17306: WAF :: fetched 1 new logs [26-06-2022 03:27:02]22727: WAF :: fetched 3 new logs [26-06-2022 03:28:02]25442: WAF :: fetched 4 new logs [26-06-2022 03:29:01]28074: WAF :: fetched 3 new logs [26-06-2022 03:30:02]30867: WAF :: fetched 2 new logs [26-06-2022 03:31:02]1136: WAF :: fetched 1 new logs [26-06-2022 03:32:01]3863: WAF :: fetched 1 new logs [26-06-2022 03:33:02]6629: WAF :: fetched 1 new logs [26-06-2022 03:34:02]9295: WAF :: fetched 2 new logs [26-06-2022 03:35:01]12063: WAF :: fetched 9 new logs [26-06-2022 03:36:02]14800: WAF :: fetched 7 new logs [26-06-2022 03:37:01]17450: WAF :: fetched 7 new logs [26-06-2022 03:38:02]17842: WAF :: fetched 6 new logs [26-06-2022 03:39:02]1117: WAF :: fetched 5 new logs [26-06-2022 03:41:01]1301: Checking for user cron vulnerabilities [26-06-2022 03:44:02]9399: Checking ditributed CMS bruteforce attacks [26-06-2022 03:44:02]9399: WAF :: fetched 4 new logs [26-06-2022 03:46:01]14807: WAF :: fetched 2 new logs [26-06-2022 03:47:02]17521: WAF :: fetched 2 new logs [26-06-2022 03:48:02]20172: WAF :: fetched 4 new logs [26-06-2022 03:50:02]31669: WAF :: fetched 1 new logs [26-06-2022 03:51:02]6816: WAF :: fetched 1 new logs [26-06-2022 03:52:01]11460: WAF :: fetched 1 new logs [26-06-2022 03:54:01]16954: WAF :: fetched 1 new logs [26-06-2022 03:56:02]22383: WAF :: fetched 1 new logs [26-06-2022 03:57:01]25130: WAF :: fetched 1 new logs [26-06-2022 03:58:02]27884: WAF :: fetched 1 new logs [26-06-2022 03:59:01]30545: WAF :: fetched 3 new logs [26-06-2022 04:01:02]4108: WAF :: fetched 1 new logs [26-06-2022 04:02:01]6851: WAF :: fetched 4 new logs [26-06-2022 04:04:02]12140: WAF :: fetched 2 new logs [26-06-2022 04:05:01]14856: WAF :: fetched 4 new logs [26-06-2022 04:08:02]23048: WAF :: fetched 1 new logs [26-06-2022 04:09:02]25672: WAF :: fetched 3 new logs [26-06-2022 04:10:01]28377: WAF :: fetched 5 new logs [26-06-2022 04:11:02]31124: WAF :: fetched 1 new logs [26-06-2022 04:12:01]1346: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656227521 [26-06-2022 04:12:01]1346: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 04:12:03]1346: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 04:12:05]1346: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-0412/20220626-041201-YrgGwT2Y86DGHIzh6NkJBQAAAA4 [26-06-2022 04:12:05]1346: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 04:12:05]1346: WAF :: fetched 6 new logs [26-06-2022 04:13:02]4069: WAF :: fetched 2 new logs [26-06-2022 04:14:01]6752: WAF :: fetched 1 new logs [26-06-2022 04:15:02]9414: WAF :: fetched 4 new logs [26-06-2022 04:16:01]12286: WAF :: fetched 1 new logs [26-06-2022 04:17:01]15637: WAF :: fetched 4 new logs [26-06-2022 04:18:02]18813: WAF :: fetched 5 new logs [26-06-2022 04:19:01]21559: WAF :: fetched 3 new logs [26-06-2022 04:20:02]24257: WAF :: fetched 1 new logs [26-06-2022 04:22:02]29761: WAF :: fetched 1 new logs [26-06-2022 04:23:02]32397: WAF :: fetched 1 new logs [26-06-2022 04:24:01]2696: WAF :: fetched 1 new logs [26-06-2022 04:26:01]8286: WAF :: fetched 1 new logs [26-06-2022 04:27:02]11018: WAF :: fetched 2 new logs [26-06-2022 04:29:02]16516: WAF :: fetched 1 new logs [26-06-2022 04:30:02]19405: WAF :: fetched 1 new logs [26-06-2022 04:33:02]27818: WAF :: fetched 2 new logs [26-06-2022 04:35:01]806: WAF :: fetched 2 new logs [26-06-2022 04:36:01]3963: WAF :: fetched 1 new logs [26-06-2022 04:37:02]7094: WAF :: fetched 2 new logs [26-06-2022 04:38:01]9912: WAF :: fetched 1 new logs [26-06-2022 04:40:02]15543: WAF :: fetched 1 new logs [26-06-2022 04:41:01]18499: WAF :: fetched 3 new logs [26-06-2022 04:41:01]18499: Checking for user cron vulnerabilities [26-06-2022 04:44:01]3380: Checking ditributed CMS bruteforce attacks [26-06-2022 04:46:01]9386: WAF :: fetched 5 new logs [26-06-2022 04:47:02]12077: WAF :: fetched 19 new logs [26-06-2022 04:52:01]26253: WAF :: fetched 2 new logs [26-06-2022 04:53:02]29127: WAF :: fetched 2 new logs [26-06-2022 04:54:01]31788: WAF :: fetched 1 new logs [26-06-2022 04:55:02]2122: WAF :: fetched 18 new logs [26-06-2022 04:56:02]4966: WAF :: fetched 1 new logs [26-06-2022 04:57:01]7761: WAF :: fetched 1 new logs [26-06-2022 04:58:02]10451: WAF :: fetched 15 new logs [26-06-2022 04:59:01]13126: WAF :: fetched 2 new logs [26-06-2022 05:01:02]18829: WAF :: fetched 6 new logs [26-06-2022 05:01:42]18830: Starting weekly scan on files updated within a week [26-06-2022 05:04:02]26907: WAF :: fetched 1 new logs [26-06-2022 05:06:01]32531: WAF :: fetched 1 new logs [26-06-2022 05:07:02]3101: WAF :: fetched 1 new logs [26-06-2022 05:09:02]8950: WAF :: fetched 3 new logs [26-06-2022 05:10:02]11723: WAF :: fetched 1 new logs [26-06-2022 05:11:01]14733: WAF :: fetched 2 new logs [26-06-2022 05:12:02]17585: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656231122 [26-06-2022 05:12:02]17585: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 05:12:04]17585: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 05:12:05]17585: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-0512/20220626-051202-YrgU0nYCnHZaNXmMYq4pFwAAAAI [26-06-2022 05:12:05]17585: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 05:12:05]17585: WAF :: fetched 4 new logs [26-06-2022 05:14:01]23205: WAF :: fetched 2 new logs [26-06-2022 05:16:01]29152: WAF :: fetched 2 new logs [26-06-2022 05:17:01]31986: WAF :: fetched 17 new logs [26-06-2022 05:18:02]2377: WAF :: fetched 1 new logs [26-06-2022 05:19:01]5140: WAF :: fetched 1 new logs [26-06-2022 05:20:02]7908: WAF :: fetched 4 new logs [26-06-2022 05:21:02]10700: WAF :: fetched 1 new logs [26-06-2022 05:22:01]13378: WAF :: fetched 1 new logs [26-06-2022 05:23:02]16096: WAF :: fetched 3 new logs [26-06-2022 05:24:02]18794: WAF :: fetched 2 new logs [26-06-2022 05:25:01]21487: WAF :: fetched 6 new logs [26-06-2022 05:26:01]24310: WAF :: fetched 4 new logs [26-06-2022 05:27:01]26957: WAF :: fetched 1 new logs [26-06-2022 05:29:01]32302: WAF :: fetched 5 new logs [26-06-2022 05:30:02]2656: WAF :: fetched 1 new logs [26-06-2022 05:31:02]5499: WAF :: fetched 1 new logs [26-06-2022 05:33:02]10941: WAF :: fetched 18 new logs [26-06-2022 05:34:01]13588: WAF :: fetched 5 new logs [26-06-2022 05:37:01]21810: WAF :: fetched 2 new logs [26-06-2022 05:38:02]25507: WAF :: fetched 5 new logs [26-06-2022 05:39:01]28156: WAF :: fetched 1 new logs [26-06-2022 05:41:02]1264: Checking for user cron vulnerabilities [26-06-2022 05:42:02]4032: WAF :: fetched 2 new logs [26-06-2022 05:43:01]6768: WAF :: fetched 5 new logs [26-06-2022 05:44:01]9443: Checking ditributed CMS bruteforce attacks [26-06-2022 05:44:01]9443: WAF :: fetched 2 new logs [26-06-2022 05:47:02]17593: WAF :: fetched 10 new logs [26-06-2022 05:48:01]20280: WAF :: fetched 6 new logs [26-06-2022 05:49:02]25263: WAF :: fetched 8 new logs [26-06-2022 05:51:01]30756: WAF :: fetched 5 new logs [26-06-2022 05:53:01]3781: WAF :: fetched 3 new logs [26-06-2022 05:54:02]6582: WAF :: fetched 2 new logs [26-06-2022 05:55:02]9259: WAF :: fetched 1 new logs [26-06-2022 05:56:01]12050: WAF :: fetched 3 new logs [26-06-2022 05:58:01]17440: WAF :: fetched 1 new logs [26-06-2022 05:59:01]20116: WAF :: fetched 2 new logs [26-06-2022 06:02:01]29699: WAF :: fetched 1 new logs [26-06-2022 06:06:01]13151: WAF :: fetched 4 new logs [26-06-2022 06:07:02]17326: WAF :: fetched 2 new logs [26-06-2022 06:10:01]25333: WAF :: fetched 2 new logs [26-06-2022 06:12:02]30824: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656234722 [26-06-2022 06:12:02]30824: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 06:12:04]30824: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 06:12:04]30824: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-0612/20220626-061202-Yrgi4ku_CnCpbdxfZYvtmQAAABM [26-06-2022 06:12:04]30824: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 06:12:04]30824: WAF :: fetched 3 new logs [26-06-2022 06:13:01]1128: WAF :: fetched 3 new logs [26-06-2022 06:14:02]3904: WAF :: fetched 1 new logs [26-06-2022 06:15:01]6658: WAF :: fetched 4 new logs [26-06-2022 06:16:01]9520: WAF :: fetched 5 new logs [26-06-2022 06:17:02]12204: WAF :: fetched 1 new logs [26-06-2022 06:18:01]14882: WAF :: fetched 2 new logs [26-06-2022 06:19:02]17615: WAF :: fetched 5 new logs [26-06-2022 06:20:02]20275: WAF :: fetched 4 new logs [26-06-2022 06:21:01]23134: WAF :: fetched 2 new logs [26-06-2022 06:27:02]7275: WAF :: fetched 1 new logs [26-06-2022 06:29:01]12622: WAF :: fetched 1 new logs [26-06-2022 06:30:02]15351: WAF :: fetched 3 new logs [26-06-2022 06:31:02]18174: WAF :: fetched 2 new logs [26-06-2022 06:32:01]20855: WAF :: fetched 1 new logs [26-06-2022 06:33:02]23553: WAF :: fetched 5 new logs [26-06-2022 06:34:01]26243: WAF :: fetched 1 new logs [26-06-2022 06:35:01]28938: WAF :: fetched 1 new logs [26-06-2022 06:36:02]31766: WAF :: fetched 1 new logs [26-06-2022 06:37:01]2070: WAF :: fetched 3 new logs [26-06-2022 06:38:02]6816: WAF :: fetched 5 new logs [26-06-2022 06:40:01]12241: WAF :: fetched 3 new logs [26-06-2022 06:41:02]15083: WAF :: fetched 1 new logs [26-06-2022 06:41:02]15083: Checking for user cron vulnerabilities [26-06-2022 06:43:02]25034: WAF :: fetched 5 new logs [26-06-2022 06:44:01]30216: Checking ditributed CMS bruteforce attacks [26-06-2022 06:44:02]30216: WAF :: fetched 1 new logs [26-06-2022 06:45:02]490: WAF :: fetched 3 new logs [26-06-2022 06:46:01]3373: WAF :: fetched 4 new logs [26-06-2022 06:47:02]6164: WAF :: fetched 3 new logs [26-06-2022 06:48:01]8888: WAF :: fetched 1 new logs [26-06-2022 06:49:02]11573: WAF :: fetched 4 new logs [26-06-2022 06:50:02]14299: WAF :: fetched 1 new logs [26-06-2022 06:52:02]19888: WAF :: fetched 3 new logs [26-06-2022 06:54:01]25256: WAF :: fetched 2 new logs [26-06-2022 06:55:02]27977: WAF :: fetched 1 new logs [26-06-2022 06:56:01]30776: WAF :: fetched 1 new logs [26-06-2022 06:57:02]1086: WAF :: fetched 3 new logs [26-06-2022 06:58:02]3789: WAF :: fetched 2 new logs [26-06-2022 06:59:01]6512: WAF :: fetched 2 new logs [26-06-2022 07:00:02]8978: WAF :: fetched 1 new logs [26-06-2022 07:01:02]12250: WAF :: fetched 1 new logs [26-06-2022 07:03:02]17680: WAF :: fetched 1 new logs [26-06-2022 07:07:01]28542: WAF :: fetched 2 new logs [26-06-2022 07:08:02]31238: WAF :: fetched 1 new logs [26-06-2022 07:10:02]4324: WAF :: fetched 1 new logs [26-06-2022 07:11:01]7206: WAF :: fetched 5 new logs [26-06-2022 07:12:01]9906: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656238321 [26-06-2022 07:12:01]9906: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 07:12:03]9906: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 07:12:03]9906: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-0712/20220626-071201-Yrgw8Ut5Y8-lw6HrUurzwQAAABE [26-06-2022 07:12:03]9906: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 07:12:04]9906: WAF :: fetched 3 new logs [26-06-2022 07:14:02]15262: WAF :: fetched 3 new logs [26-06-2022 07:15:01]17973: WAF :: fetched 2 new logs [26-06-2022 07:18:01]26176: WAF :: fetched 1 new logs [26-06-2022 07:19:02]28881: WAF :: fetched 2 new logs [26-06-2022 07:21:02]2023: WAF :: fetched 3 new logs [26-06-2022 07:22:01]4789: WAF :: fetched 2 new logs [26-06-2022 07:24:02]10248: WAF :: fetched 1 new logs [26-06-2022 07:26:02]15758: WAF :: fetched 2 new logs [26-06-2022 07:27:01]18465: WAF :: fetched 2 new logs [26-06-2022 07:29:02]23811: WAF :: fetched 1 new logs [26-06-2022 07:30:01]26492: WAF :: fetched 3 new logs [26-06-2022 07:31:02]29335: WAF :: fetched 2 new logs [26-06-2022 07:32:02]32000: WAF :: fetched 2 new logs [26-06-2022 07:33:01]2299: WAF :: fetched 3 new logs [26-06-2022 07:35:01]7815: WAF :: fetched 2 new logs [26-06-2022 07:36:02]10703: WAF :: fetched 1 new logs [26-06-2022 07:37:02]13420: WAF :: fetched 1 new logs [26-06-2022 07:38:02]18729: WAF :: fetched 1 new logs [26-06-2022 07:39:01]21402: WAF :: fetched 2 new logs [26-06-2022 07:41:02]26890: WAF :: fetched 2 new logs [26-06-2022 07:41:02]26890: Checking for user cron vulnerabilities [26-06-2022 07:42:01]29536: WAF :: fetched 1 new logs [26-06-2022 07:43:02]32264: WAF :: fetched 1 new logs [26-06-2022 07:44:01]2504: Checking ditributed CMS bruteforce attacks [26-06-2022 07:45:01]: Checking for definition updates [26-06-2022 07:45:01]5306: WAF :: fetched 2 new logs [26-06-2022 07:46:02]8152: WAF :: fetched 6 new logs [26-06-2022 07:48:02]13498: WAF :: fetched 2 new logs [26-06-2022 07:49:02]18338: WAF :: fetched 1 new logs [26-06-2022 07:50:01]21108: WAF :: fetched 22 new logs [26-06-2022 07:51:02]23899: WAF :: fetched 17 new logs [26-06-2022 07:53:02]31453: WAF :: fetched 3 new logs [26-06-2022 07:54:01]3762: WAF :: fetched 3 new logs [26-06-2022 07:55:02]6512: WAF :: fetched 1 new logs [26-06-2022 07:56:02]9268: WAF :: fetched 1 new logs [26-06-2022 07:57:01]11973: WAF :: fetched 2 new logs [26-06-2022 07:59:01]17345: WAF :: fetched 1 new logs [26-06-2022 08:01:02]23078: WAF :: fetched 2 new logs [26-06-2022 08:02:01]25797: WAF :: fetched 4 new logs [26-06-2022 08:03:02]28460: WAF :: fetched 1 new logs [26-06-2022 08:04:01]31058: WAF :: fetched 1 new logs [26-06-2022 08:05:02]1344: WAF :: fetched 1 new logs [26-06-2022 08:06:02]4175: WAF :: fetched 2 new logs [26-06-2022 08:09:01]12068: WAF :: fetched 3 new logs [26-06-2022 08:10:02]14788: WAF :: fetched 1 new logs [26-06-2022 08:11:01]17677: WAF :: fetched 4 new logs [26-06-2022 08:12:02]20447: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656241922 [26-06-2022 08:12:02]20447: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 08:12:04]20447: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 08:12:04]20447: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-0812/20220626-081202-Yrg_Ai41PvC9XFKI-XWDKgAAABo [26-06-2022 08:12:04]20447: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 08:12:05]20447: WAF :: fetched 1 new logs [26-06-2022 08:19:01]7118: WAF :: fetched 1 new logs [26-06-2022 08:20:02]9802: WAF :: fetched 3 new logs [26-06-2022 08:21:01]12593: WAF :: fetched 1 new logs [26-06-2022 08:22:01]15294: WAF :: fetched 4 new logs [26-06-2022 08:23:02]17970: WAF :: fetched 1 new logs [26-06-2022 08:24:01]20641: WAF :: fetched 5 new logs [26-06-2022 08:25:02]23290: WAF :: fetched 2 new logs [26-06-2022 08:26:01]26047: WAF :: fetched 3 new logs [26-06-2022 08:27:01]28762: WAF :: fetched 2 new logs [26-06-2022 08:31:02]7560: WAF :: fetched 2 new logs [26-06-2022 08:32:01]10229: WAF :: fetched 2 new logs [26-06-2022 08:33:02]12887: WAF :: fetched 4 new logs [26-06-2022 08:34:01]15604: WAF :: fetched 6 new logs [26-06-2022 08:37:02]24066: WAF :: fetched 3 new logs [26-06-2022 08:41:01]5777: WAF :: fetched 2 new logs [26-06-2022 08:41:01]5777: Checking for user cron vulnerabilities [26-06-2022 08:43:01]11912: WAF :: fetched 2 new logs [26-06-2022 08:44:01]14629: Checking ditributed CMS bruteforce attacks [26-06-2022 08:46:01]26046: WAF :: fetched 2 new logs [26-06-2022 08:47:02]28737: WAF :: fetched 4 new logs [26-06-2022 08:48:02]31513: WAF :: fetched 1 new logs [26-06-2022 08:49:01]1886: WAF :: fetched 4 new logs [26-06-2022 08:50:01]4680: WAF :: fetched 4 new logs [26-06-2022 08:51:02]7559: WAF :: fetched 5 new logs [26-06-2022 08:52:01]10238: WAF :: fetched 2 new logs [26-06-2022 08:53:01]12952: WAF :: fetched 3 new logs [26-06-2022 08:54:02]15617: WAF :: fetched 2 new logs [26-06-2022 08:55:01]18298: WAF :: fetched 4 new logs [26-06-2022 08:56:02]21166: WAF :: fetched 4 new logs [26-06-2022 08:57:01]23847: WAF :: fetched 4 new logs [26-06-2022 08:58:01]26539: WAF :: fetched 4 new logs [26-06-2022 08:59:02]29225: WAF :: fetched 2 new logs [26-06-2022 09:00:01]31603: WAF :: fetched 2 new logs [26-06-2022 09:01:01]2484: WAF :: fetched 3 new logs [26-06-2022 09:02:02]5324: WAF :: fetched 11 new logs [26-06-2022 09:03:01]8026: WAF :: fetched 12 new logs [26-06-2022 09:04:02]10698: WAF :: fetched 12 new logs [26-06-2022 09:05:02]13364: WAF :: fetched 14 new logs [26-06-2022 09:06:01]16102: WAF :: fetched 7 new logs [26-06-2022 09:07:02]18872: WAF :: fetched 6 new logs [26-06-2022 09:08:02]21512: WAF :: fetched 2 new logs [26-06-2022 09:09:01]24202: WAF :: fetched 6 new logs [26-06-2022 09:10:02]27013: WAF :: fetched 2 new logs [26-06-2022 09:12:01]32536: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656245521 [26-06-2022 09:12:01]32536: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 09:12:03]32536: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 09:12:04]32536: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-0912/20220626-091201-YrhNEe4DMK3E7yOyPbbp-QAAAAE [26-06-2022 09:12:04]32536: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 09:12:04]32536: WAF :: fetched 1 new logs [26-06-2022 09:13:02]2839: WAF :: fetched 6 new logs [26-06-2022 09:14:01]5676: WAF :: fetched 2 new logs [26-06-2022 09:16:02]11319: WAF :: fetched 2 new logs [26-06-2022 09:17:01]14031: WAF :: fetched 1 new logs [26-06-2022 09:19:02]19491: WAF :: fetched 5 new logs [26-06-2022 09:20:01]22178: WAF :: fetched 3 new logs [26-06-2022 09:21:02]24911: WAF :: fetched 2 new logs [26-06-2022 09:22:02]27656: WAF :: fetched 4 new logs [26-06-2022 09:23:01]30351: WAF :: fetched 1 new logs [26-06-2022 09:25:01]3319: WAF :: fetched 2 new logs [26-06-2022 09:30:02]16933: WAF :: fetched 4 new logs [26-06-2022 09:31:01]19673: WAF :: fetched 2 new logs [26-06-2022 09:33:01]25132: WAF :: fetched 1 new logs [26-06-2022 09:34:02]27839: WAF :: fetched 2 new logs [26-06-2022 09:36:01]769: WAF :: fetched 2 new logs [26-06-2022 09:37:02]3611: WAF :: fetched 2 new logs [26-06-2022 09:38:01]6644: WAF :: fetched 2 new logs [26-06-2022 09:39:02]9340: WAF :: fetched 2 new logs [26-06-2022 09:40:01]11990: WAF :: fetched 4 new logs [26-06-2022 09:41:01]14707: WAF :: fetched 1 new logs [26-06-2022 09:41:01]14707: Checking for user cron vulnerabilities [26-06-2022 09:42:02]19436: WAF :: fetched 2 new logs [26-06-2022 09:44:01]31783: Checking ditributed CMS bruteforce attacks [26-06-2022 09:46:02]4982: WAF :: fetched 1 new logs [26-06-2022 09:47:01]7737: WAF :: fetched 1 new logs [26-06-2022 09:48:02]10428: WAF :: fetched 4 new logs [26-06-2022 09:49:01]13105: WAF :: fetched 1 new logs [26-06-2022 09:50:02]15838: WAF :: fetched 1 new logs [26-06-2022 09:51:02]18559: WAF :: fetched 2 new logs [26-06-2022 09:52:01]21336: WAF :: fetched 3 new logs [26-06-2022 09:53:02]24016: WAF :: fetched 3 new logs [26-06-2022 09:54:01]26640: WAF :: fetched 5 new logs [26-06-2022 09:56:01]32046: WAF :: fetched 1 new logs [26-06-2022 09:57:02]2444: WAF :: fetched 5 new logs [26-06-2022 09:59:02]7910: WAF :: fetched 1 new logs [26-06-2022 10:01:01]13410: WAF :: fetched 2 new logs [26-06-2022 10:02:02]16242: WAF :: fetched 4 new logs [26-06-2022 10:03:01]18885: WAF :: fetched 2 new logs [26-06-2022 10:04:01]21586: WAF :: fetched 3 new logs [26-06-2022 10:05:02]24251: WAF :: fetched 1 new logs [26-06-2022 10:06:01]26939: WAF :: fetched 1 new logs [26-06-2022 10:07:02]29654: WAF :: fetched 2 new logs [26-06-2022 10:08:01]32325: WAF :: fetched 4 new logs [26-06-2022 10:11:01]8041: WAF :: fetched 2 new logs [26-06-2022 10:12:01]10785: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656249121 [26-06-2022 10:12:01]10785: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 10:12:03]10785: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 10:12:04]10785: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-1012/20220626-101201-YrhbIV8yHX_S8F-rJeG1AwAAACA [26-06-2022 10:12:04]10785: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [26-06-2022 10:12:04]10785: WAF :: fetched 1 new logs [26-06-2022 10:13:01]13457: WAF :: fetched 2 new logs [26-06-2022 10:14:02]16192: WAF :: fetched 1 new logs [26-06-2022 10:15:02]18918: WAF :: fetched 1 new logs [26-06-2022 10:16:01]21640: WAF :: fetched 4 new logs [26-06-2022 10:19:01]29754: WAF :: fetched 3 new logs [26-06-2022 10:20:02]32510: WAF :: fetched 5 new logs [26-06-2022 10:21:01]2800: WAF :: fetched 2 new logs [26-06-2022 10:22:02]5645: WAF :: fetched 1 new logs [26-06-2022 10:24:01]10987: WAF :: fetched 1 new logs [26-06-2022 10:25:02]13635: WAF :: fetched 2 new logs [26-06-2022 10:27:01]19089: WAF :: fetched 30 new logs [26-06-2022 10:28:01]21765: WAF :: fetched 6 new logs [26-06-2022 10:30:01]27079: WAF :: fetched 13 new logs [26-06-2022 10:31:02]29795: WAF :: fetched 2 new logs [26-06-2022 10:32:02]32540: WAF :: fetched 2 new logs [26-06-2022 10:33:01]2880: WAF :: fetched 2 new logs [26-06-2022 10:34:01]5607: WAF :: fetched 2 new logs [26-06-2022 10:35:02]8307: WAF :: fetched 4 new logs [26-06-2022 10:36:01]10991: WAF :: fetched 2 new logs [26-06-2022 10:37:02]13867: WAF :: fetched 7 new logs [26-06-2022 10:38:02]19969: WAF :: fetched 6 new logs [26-06-2022 10:39:01]22683: WAF :: fetched 4 new logs [26-06-2022 10:40:02]25356: WAF :: fetched 1 new logs [26-06-2022 10:41:01]28023: Checking for user cron vulnerabilities [26-06-2022 10:42:02]30785: WAF :: fetched 1 new logs [26-06-2022 10:43:01]842: WAF :: fetched 1 new logs [26-06-2022 10:44:02]3719: Checking ditributed CMS bruteforce attacks [26-06-2022 10:44:02]3719: WAF :: fetched 6 new logs [26-06-2022 10:45:02]6480: WAF :: fetched 2 new logs [26-06-2022 10:46:01]9168: WAF :: fetched 4 new logs [26-06-2022 10:47:02]11889: WAF :: fetched 1 new logs [26-06-2022 10:49:02]18767: WAF :: fetched 1 new logs [26-06-2022 10:50:02]22464: WAF :: fetched 1 new logs [26-06-2022 10:51:01]25158: WAF :: fetched 2 new logs [26-06-2022 10:52:02]27901: WAF :: fetched 1 new logs [26-06-2022 10:53:01]30523: WAF :: fetched 2 new logs [26-06-2022 10:55:02]4345: WAF :: fetched 1 new logs [26-06-2022 10:56:01]7072: WAF :: fetched 3 new logs [26-06-2022 10:57:02]9810: WAF :: fetched 4 new logs [26-06-2022 10:58:02]12517: WAF :: fetched 1 new logs [26-06-2022 10:59:01]18422: WAF :: fetched 4 new logs [26-06-2022 11:00:02]20950: WAF :: fetched 3 new logs [26-06-2022 11:01:01]24069: WAF :: fetched 1 new logs [26-06-2022 11:03:02]29483: WAF :: fetched 1 new logs [26-06-2022 11:04:01]32118: WAF :: fetched 2 new logs [26-06-2022 11:05:02]2397: WAF :: fetched 2 new logs [26-06-2022 11:06:02]5191: WAF :: fetched 2 new logs [26-06-2022 11:07:01]7964: WAF :: fetched 2 new logs [26-06-2022 11:07:52]8125: Performed RBL check for 23.111.136.34. [26-06-2022 11:08:02]10625: WAF :: fetched 1 new logs [26-06-2022 11:09:01]13274: WAF :: fetched 2 new logs [26-06-2022 11:10:01]15910: WAF :: fetched 1 new logs [26-06-2022 11:11:02]18629: WAF :: fetched 1 new logs [26-06-2022 11:12:01]21374: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656252721 [26-06-2022 11:12:01]21374: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 11:12:03]21374: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 11:12:04]21374: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-1112/20220626-111201-YrhpMZrW6rUpTsH-2f04jAAAAAQ [26-06-2022 11:12:04]21374: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 11:12:04]21374: WAF :: fetched 115 new logs [26-06-2022 11:14:02]26640: WAF :: fetched 7 new logs [26-06-2022 11:15:01]29309: WAF :: fetched 5 new logs [26-06-2022 11:16:02]32003: WAF :: fetched 5 new logs [26-06-2022 11:17:01]2341: WAF :: fetched 4 new logs [26-06-2022 11:18:01]5117: WAF :: fetched 1 new logs [26-06-2022 11:19:02]7815: WAF :: fetched 1 new logs [26-06-2022 11:21:02]13180: WAF :: fetched 4 new logs [26-06-2022 11:23:01]18555: WAF :: fetched 3 new logs [26-06-2022 11:24:02]21219: WAF :: fetched 1 new logs [26-06-2022 11:26:02]26701: WAF :: fetched 1 new logs [26-06-2022 11:28:02]32243: WAF :: fetched 4 new logs [26-06-2022 11:29:01]2560: WAF :: fetched 4 new logs [26-06-2022 11:30:02]5571: WAF :: fetched 4 new logs [26-06-2022 11:31:02]8417: WAF :: fetched 3 new logs [26-06-2022 11:31:02]8420: httpd.conf changed. Refreshing watchlist. [26-06-2022 11:33:02]13957: WAF :: fetched 4 new logs [26-06-2022 11:34:02]16821: WAF :: fetched 4 new logs [26-06-2022 11:35:01]19532: WAF :: fetched 7 new logs [26-06-2022 11:36:02]22398: httpd.conf changed. Refreshing watchlist. [26-06-2022 11:36:02]22400: WAF :: fetched 59 new logs [26-06-2022 11:37:02]25128: WAF :: fetched 1 new logs [26-06-2022 11:38:01]27818: WAF :: fetched 7 new logs [26-06-2022 11:39:02]30569: WAF :: fetched 6 new logs [26-06-2022 11:40:01]855: WAF :: fetched 1 new logs [26-06-2022 11:41:01]3674: WAF :: fetched 1 new logs [26-06-2022 11:41:01]3674: Checking for user cron vulnerabilities [26-06-2022 11:42:01]7187: WAF :: fetched 4 new logs [26-06-2022 11:43:02]9911: WAF :: fetched 4 new logs [26-06-2022 11:44:01]12537: Checking ditributed CMS bruteforce attacks [26-06-2022 11:44:02]12537: WAF :: fetched 2 new logs [26-06-2022 11:45:02]15239: WAF :: fetched 1 new logs [26-06-2022 11:46:01]17927: WAF :: fetched 2 new logs [26-06-2022 11:47:01]20724: WAF :: fetched 1 new logs [26-06-2022 11:49:01]31982: WAF :: fetched 4 new logs [26-06-2022 11:50:02]5742: WAF :: fetched 6 new logs [26-06-2022 11:52:01]11256: WAF :: fetched 2 new logs [26-06-2022 11:53:02]13881: WAF :: fetched 6 new logs [26-06-2022 11:55:01]19189: WAF :: fetched 1 new logs [26-06-2022 11:56:02]21863: WAF :: fetched 1 new logs [26-06-2022 11:57:01]24572: WAF :: fetched 3 new logs [26-06-2022 11:58:02]27228: WAF :: fetched 2 new logs [26-06-2022 12:00:01]32218: WAF :: fetched 6 new logs [26-06-2022 12:01:02]3017: WAF :: fetched 2 new logs [26-06-2022 12:02:01]5836: WAF :: fetched 4 new logs [26-06-2022 12:03:02]8511: WAF :: fetched 3 new logs [26-06-2022 12:05:02]13817: WAF :: fetched 1 new logs [26-06-2022 12:06:02]16510: WAF :: fetched 2 new logs [26-06-2022 12:07:01]19234: WAF :: fetched 3 new logs [26-06-2022 12:08:02]21898: WAF :: fetched 3 new logs [26-06-2022 12:09:02]24535: WAF :: fetched 3 new logs [26-06-2022 12:10:01]27244: WAF :: fetched 2 new logs [26-06-2022 12:12:02]32684: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656256322 [26-06-2022 12:12:02]32684: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 12:12:04]32684: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 12:12:04]32684: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-1212/20220626-121202-Yrh3Qq1wRvINBsEIztYk8wAAAAE [26-06-2022 12:12:04]32684: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 12:12:04]32684: WAF :: fetched 1 new logs [26-06-2022 12:13:01]3024: WAF :: fetched 2 new logs [26-06-2022 12:15:01]8761: WAF :: fetched 1 new logs [26-06-2022 12:17:02]14671: WAF :: fetched 2 new logs [26-06-2022 12:18:01]17327: WAF :: fetched 1 new logs [26-06-2022 12:19:02]20007: WAF :: fetched 1 new logs [26-06-2022 12:20:01]22682: WAF :: fetched 2 new logs [26-06-2022 12:21:02]25411: WAF :: fetched 3 new logs [26-06-2022 12:23:01]30796: WAF :: fetched 1 new logs [26-06-2022 12:24:02]1079: WAF :: fetched 5 new logs [26-06-2022 12:25:02]3816: WAF :: fetched 2 new logs [26-06-2022 12:26:02]6588: WAF :: fetched 3 new logs [26-06-2022 12:27:01]9355: WAF :: fetched 2 new logs [26-06-2022 12:28:02]12027: WAF :: fetched 3 new logs [26-06-2022 12:29:01]14668: WAF :: fetched 5 new logs [26-06-2022 12:30:02]17349: WAF :: fetched 4 new logs [26-06-2022 12:31:02]20123: WAF :: fetched 22 new logs [26-06-2022 12:32:01]22888: WAF :: fetched 1 new logs [26-06-2022 12:33:02]25580: WAF :: fetched 3 new logs [26-06-2022 12:34:01]28218: WAF :: fetched 5 new logs [26-06-2022 12:36:02]1180: WAF :: fetched 2 new logs [26-06-2022 12:37:01]3968: WAF :: fetched 2 new logs [26-06-2022 12:38:02]10220: WAF :: fetched 1 new logs [26-06-2022 12:39:02]12827: WAF :: fetched 2 new logs [26-06-2022 12:40:01]15497: WAF :: fetched 1 new logs [26-06-2022 12:41:02]18235: Checking for user cron vulnerabilities [26-06-2022 12:42:01]24225: WAF :: fetched 1 new logs [26-06-2022 12:43:01]28005: WAF :: fetched 6 new logs [26-06-2022 12:44:01]30670: Checking ditributed CMS bruteforce attacks [26-06-2022 12:44:02]30670: WAF :: fetched 8 new logs [26-06-2022 12:45:01]: Checking for software updates [26-06-2022 12:45:01]898: WAF :: fetched 1 new logs [26-06-2022 12:50:02]14510: WAF :: fetched 1 new logs [26-06-2022 12:51:01]17215: WAF :: fetched 3 new logs [26-06-2022 12:52:01]19968: WAF :: fetched 3 new logs [26-06-2022 12:53:02]22613: WAF :: fetched 2 new logs [26-06-2022 12:54:01]25264: WAF :: fetched 4 new logs [26-06-2022 12:55:02]27914: WAF :: fetched 2 new logs [26-06-2022 12:56:02]30608: WAF :: fetched 7 new logs [26-06-2022 12:57:01]910: WAF :: fetched 11 new logs [26-06-2022 12:58:02]3651: WAF :: fetched 6 new logs [26-06-2022 12:59:01]6359: WAF :: fetched 4 new logs [26-06-2022 13:00:02]8758: WAF :: fetched 6 new logs [26-06-2022 13:01:02]11976: WAF :: fetched 7 new logs [26-06-2022 13:02:01]14719: WAF :: fetched 1 new logs [26-06-2022 13:03:02]17381: WAF :: fetched 2 new logs [26-06-2022 13:04:02]20048: WAF :: fetched 1 new logs [26-06-2022 13:05:02]22704: WAF :: fetched 4 new logs [26-06-2022 13:06:01]25407: WAF :: fetched 4 new logs [26-06-2022 13:07:01]28152: WAF :: fetched 6 new logs [26-06-2022 13:08:02]30824: WAF :: fetched 7 new logs [26-06-2022 13:09:01]1047: WAF :: fetched 6 new logs [26-06-2022 13:10:02]3763: WAF :: fetched 6 new logs [26-06-2022 13:11:01]6512: WAF :: fetched 8 new logs [26-06-2022 13:12:02]9302: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656259922 [26-06-2022 13:12:02]9302: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 13:12:04]9302: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 13:12:04]9302: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-1312/20220626-131202-YriFUp2yEG_ijpAQrwt83gAAABo [26-06-2022 13:12:04]9302: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 13:12:05]9302: WAF :: fetched 28 new logs [26-06-2022 13:13:02]11983: WAF :: fetched 8 new logs [26-06-2022 13:14:01]14616: WAF :: fetched 4 new logs [26-06-2022 13:15:01]17261: WAF :: fetched 3 new logs [26-06-2022 13:16:02]20020: WAF :: fetched 6 new logs [26-06-2022 13:17:01]22771: WAF :: fetched 2 new logs [26-06-2022 13:18:02]25617: WAF :: fetched 4 new logs [26-06-2022 13:19:02]28236: WAF :: fetched 6 new logs [26-06-2022 13:20:01]30894: WAF :: fetched 1 new logs [26-06-2022 13:21:02]1453: WAF :: fetched 6 new logs [26-06-2022 13:22:01]4211: WAF :: fetched 6 new logs [26-06-2022 13:23:02]6942: WAF :: fetched 7 new logs [26-06-2022 13:24:02]9600: WAF :: fetched 10 new logs [26-06-2022 13:25:02]12235: WAF :: fetched 3 new logs [26-06-2022 13:26:02]14950: WAF :: fetched 9 new logs [26-06-2022 13:27:01]17734: WAF :: fetched 5 new logs [26-06-2022 13:28:02]20493: WAF :: fetched 3 new logs [26-06-2022 13:29:01]23109: WAF :: fetched 9 new logs [26-06-2022 13:30:01]25785: WAF :: fetched 9 new logs [26-06-2022 13:31:02]28514: WAF :: fetched 15 new logs [26-06-2022 13:32:01]31252: WAF :: fetched 6 new logs [26-06-2022 13:33:02]1514: WAF :: fetched 7 new logs [26-06-2022 13:34:02]4196: WAF :: fetched 2 new logs [26-06-2022 13:35:01]6931: WAF :: fetched 2 new logs [26-06-2022 13:37:01]13128: WAF :: fetched 5 new logs [26-06-2022 13:38:02]23479: WAF :: fetched 3 new logs [26-06-2022 13:39:01]26086: WAF :: fetched 7 new logs [26-06-2022 13:40:02]28759: WAF :: fetched 1 new logs [26-06-2022 13:41:01]31450: WAF :: fetched 2 new logs [26-06-2022 13:41:01]31450: Checking for user cron vulnerabilities [26-06-2022 13:42:01]1778: WAF :: fetched 2 new logs [26-06-2022 13:43:02]4593: WAF :: fetched 2 new logs [26-06-2022 13:44:01]7235: Checking ditributed CMS bruteforce attacks [26-06-2022 13:44:01]7235: WAF :: fetched 2 new logs [26-06-2022 13:45:02]: Checking for definition updates [26-06-2022 13:45:02]9938: WAF :: fetched 1 new logs [26-06-2022 13:47:01]15352: WAF :: fetched 2 new logs [26-06-2022 13:48:02]18114: WAF :: fetched 3 new logs [26-06-2022 13:49:01]20810: WAF :: fetched 2 new logs [26-06-2022 13:50:02]23593: WAF :: fetched 6 new logs [26-06-2022 13:51:02]26293: WAF :: fetched 7 new logs [26-06-2022 13:52:01]29014: WAF :: fetched 3 new logs [26-06-2022 13:54:01]1929: WAF :: fetched 1 new logs [26-06-2022 13:55:02]4683: WAF :: fetched 2 new logs [26-06-2022 13:56:02]7343: WAF :: fetched 2 new logs [26-06-2022 13:57:01]10007: WAF :: fetched 23 new logs [26-06-2022 13:59:01]15343: WAF :: fetched 2 new logs [26-06-2022 14:00:01]17769: WAF :: fetched 1 new logs [26-06-2022 14:01:02]21005: WAF :: fetched 5 new logs [26-06-2022 14:02:01]23696: WAF :: fetched 4 new logs [26-06-2022 14:03:02]26439: WAF :: fetched 2 new logs [26-06-2022 14:04:02]29070: WAF :: fetched 21 new logs [26-06-2022 14:05:01]31719: WAF :: fetched 79 new logs [26-06-2022 14:06:02]2072: WAF :: fetched 2 new logs [26-06-2022 14:07:01]4754: WAF :: fetched 36 new logs [26-06-2022 14:08:02]7529: WAF :: fetched 4 new logs [26-06-2022 14:09:02]10153: WAF :: fetched 11 new logs [26-06-2022 14:10:01]12797: WAF :: fetched 66 new logs [26-06-2022 14:11:02]15552: WAF :: fetched 51 new logs [26-06-2022 14:12:01]18125: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656263521 [26-06-2022 14:12:01]18125: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 14:12:03]18125: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 14:12:04]18125: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-1412/20220626-141201-YriTYQOCqobuqh6MQBLDvwAAAAw [26-06-2022 14:12:04]18125: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 14:12:04]18125: WAF :: fetched 59 new logs [26-06-2022 14:13:02]20952: WAF :: fetched 54 new logs [26-06-2022 14:14:02]23572: WAF :: fetched 60 new logs [26-06-2022 14:15:01]26222: WAF :: fetched 53 new logs [26-06-2022 14:16:02]28925: WAF :: fetched 48 new logs [26-06-2022 14:17:02]31578: WAF :: fetched 48 new logs [26-06-2022 14:18:01]1885: WAF :: fetched 57 new logs [26-06-2022 14:19:02]4602: WAF :: fetched 50 new logs [26-06-2022 14:20:01]7311: WAF :: fetched 1 new logs [26-06-2022 14:21:01]9997: WAF :: fetched 1 new logs [26-06-2022 14:22:02]12670: WAF :: fetched 3 new logs [26-06-2022 14:24:02]18073: WAF :: fetched 3 new logs [26-06-2022 14:25:02]20771: WAF :: fetched 2 new logs [26-06-2022 14:26:01]23474: WAF :: fetched 1 new logs [26-06-2022 14:27:02]26155: WAF :: fetched 4 new logs [26-06-2022 14:29:02]31530: WAF :: fetched 2 new logs [26-06-2022 14:30:02]1786: WAF :: fetched 5 new logs [26-06-2022 14:31:01]4587: WAF :: fetched 1 new logs [26-06-2022 14:32:02]7285: WAF :: fetched 1 new logs [26-06-2022 14:33:01]9993: WAF :: fetched 2 new logs [26-06-2022 14:34:01]12686: WAF :: fetched 7 new logs [26-06-2022 14:35:02]15327: WAF :: fetched 2 new logs [26-06-2022 14:36:01]17971: WAF :: fetched 3 new logs [26-06-2022 14:38:01]24374: WAF :: fetched 1 new logs [26-06-2022 14:39:02]27026: WAF :: fetched 3 new logs [26-06-2022 14:40:02]29688: WAF :: fetched 5 new logs [26-06-2022 14:41:01]32371: Checking for user cron vulnerabilities [26-06-2022 14:42:02]2971: WAF :: fetched 1 new logs [26-06-2022 14:43:01]5765: WAF :: fetched 5 new logs [26-06-2022 14:44:02]10673: Checking ditributed CMS bruteforce attacks [26-06-2022 14:45:02]18664: WAF :: fetched 3 new logs [26-06-2022 14:46:01]21747: WAF :: fetched 1 new logs [26-06-2022 14:47:02]24410: WAF :: fetched 3 new logs [26-06-2022 14:48:01]27097: WAF :: fetched 2 new logs [26-06-2022 14:49:01]29736: WAF :: fetched 2 new logs [26-06-2022 14:50:02]32397: WAF :: fetched 5 new logs [26-06-2022 14:52:02]5457: WAF :: fetched 3 new logs [26-06-2022 14:53:01]8214: WAF :: fetched 1 new logs [26-06-2022 14:53:02]8199: Updated license status via CDN [26-06-2022 14:54:02]10856: WAF :: fetched 2 new logs [26-06-2022 14:55:02]13474: WAF :: fetched 1 new logs [26-06-2022 14:56:01]16182: WAF :: fetched 6 new logs [26-06-2022 14:57:02]18914: WAF :: fetched 5 new logs [26-06-2022 14:58:01]21608: WAF :: fetched 1 new logs [26-06-2022 14:59:02]24287: WAF :: fetched 1 new logs [26-06-2022 15:00:02]26621: WAF :: fetched 6 new logs [26-06-2022 15:01:01]29758: Reseting cPGuard inotify settings [26-06-2022 15:01:01]29766: WAF :: fetched 4 new logs [26-06-2022 15:02:02]32443: WAF :: fetched 2 new logs [26-06-2022 15:03:01]2772: WAF :: fetched 3 new logs [26-06-2022 15:05:02]8203: WAF :: fetched 7 new logs [26-06-2022 15:06:01]10889: WAF :: fetched 3 new logs [26-06-2022 15:08:02]16242: WAF :: fetched 5 new logs [26-06-2022 15:09:01]18937: WAF :: fetched 6 new logs [26-06-2022 15:10:02]21641: WAF :: fetched 3 new logs [26-06-2022 15:12:02]26974: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656267122 [26-06-2022 15:12:02]26974: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 15:12:04]26974: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 15:12:04]26974: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-1512/20220626-151202-YrihcnUgGbTFzN8Qsbb1VAAAAB8 [26-06-2022 15:12:04]26974: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 15:12:04]26974: WAF :: fetched 6 new logs [26-06-2022 15:13:01]29655: WAF :: fetched 5 new logs [26-06-2022 15:14:02]32312: WAF :: fetched 3 new logs [26-06-2022 15:15:02]2575: WAF :: fetched 4 new logs [26-06-2022 15:16:01]5362: WAF :: fetched 4 new logs [26-06-2022 15:18:01]10640: WAF :: fetched 1 new logs [26-06-2022 15:19:01]13212: WAF :: fetched 2 new logs [26-06-2022 15:20:02]15904: WAF :: fetched 2 new logs [26-06-2022 15:21:01]18589: WAF :: fetched 4 new logs [26-06-2022 15:23:02]23991: WAF :: fetched 2 new logs [26-06-2022 15:24:01]26637: WAF :: fetched 5 new logs [26-06-2022 15:25:02]29285: WAF :: fetched 9 new logs [26-06-2022 15:26:01]31956: WAF :: fetched 2 new logs [26-06-2022 15:27:02]2230: WAF :: fetched 6 new logs [26-06-2022 15:28:01]5001: WAF :: fetched 3 new logs [26-06-2022 15:29:02]7657: WAF :: fetched 8 new logs [26-06-2022 15:32:02]15640: WAF :: fetched 4 new logs [26-06-2022 15:33:01]18314: WAF :: fetched 3 new logs [26-06-2022 15:35:02]23679: WAF :: fetched 1 new logs [26-06-2022 15:37:01]28929: WAF :: fetched 2 new logs [26-06-2022 15:38:02]4824: WAF :: fetched 10 new logs [26-06-2022 15:39:01]11107: WAF :: fetched 5 new logs [26-06-2022 15:40:01]13760: WAF :: fetched 4 new logs [26-06-2022 15:41:02]16513: WAF :: fetched 3 new logs [26-06-2022 15:41:02]16513: Checking for user cron vulnerabilities [26-06-2022 15:42:01]19218: WAF :: fetched 2 new logs [26-06-2022 15:43:02]21930: WAF :: fetched 1 new logs [26-06-2022 15:44:01]24560: Checking ditributed CMS bruteforce attacks [26-06-2022 15:45:01]27196: WAF :: fetched 3 new logs [26-06-2022 15:46:02]29854: WAF :: fetched 2 new logs [26-06-2022 15:47:01]32467: WAF :: fetched 1 new logs [26-06-2022 15:48:01]2818: WAF :: fetched 2 new logs [26-06-2022 15:49:02]5565: WAF :: fetched 4 new logs [26-06-2022 15:50:01]8211: WAF :: fetched 4 new logs [26-06-2022 15:51:01]10961: WAF :: fetched 2 new logs [26-06-2022 15:52:02]13635: WAF :: fetched 6 new logs [26-06-2022 15:53:01]16349: WAF :: fetched 1 new logs [26-06-2022 15:54:01]19063: WAF :: fetched 3 new logs [26-06-2022 15:55:02]21769: WAF :: fetched 3 new logs [26-06-2022 15:56:01]24442: WAF :: fetched 4 new logs [26-06-2022 15:57:02]27131: WAF :: fetched 2 new logs [26-06-2022 15:59:01]32497: WAF :: fetched 1 new logs [26-06-2022 16:00:02]2498: WAF :: fetched 4 new logs [26-06-2022 16:01:01]5728: WAF :: fetched 6 new logs [26-06-2022 16:02:02]8463: WAF :: fetched 2 new logs [26-06-2022 16:03:02]11184: WAF :: fetched 1 new logs [26-06-2022 16:06:01]19165: WAF :: fetched 2 new logs [26-06-2022 16:07:01]21803: WAF :: fetched 6 new logs [26-06-2022 16:08:02]24545: WAF :: fetched 3 new logs [26-06-2022 16:09:01]27205: WAF :: fetched 3 new logs [26-06-2022 16:10:02]29895: WAF :: fetched 1 new logs [26-06-2022 16:11:02]32566: WAF :: fetched 1 new logs [26-06-2022 16:12:02]2833: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656270722 [26-06-2022 16:12:02]2833: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 16:12:04]2833: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 16:12:04]2833: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-1612/20220626-161202-YrivgvpE-pc293rUkJNOwwAAABo [26-06-2022 16:12:04]2833: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 16:12:04]2833: WAF :: fetched 2 new logs [26-06-2022 16:13:01]5603: WAF :: fetched 1 new logs [26-06-2022 16:14:01]8272: WAF :: fetched 4 new logs [26-06-2022 16:15:02]10945: WAF :: fetched 2 new logs [26-06-2022 16:17:02]16291: WAF :: fetched 1 new logs [26-06-2022 16:18:01]19033: WAF :: fetched 5 new logs [26-06-2022 16:19:01]21678: WAF :: fetched 2 new logs [26-06-2022 16:20:02]24381: WAF :: fetched 1 new logs [26-06-2022 16:21:01]27071: WAF :: fetched 3 new logs [26-06-2022 16:22:02]29740: WAF :: fetched 1 new logs [26-06-2022 16:24:01]2706: WAF :: fetched 3 new logs [26-06-2022 16:25:02]5464: WAF :: fetched 1 new logs [26-06-2022 16:28:02]13482: WAF :: fetched 4 new logs [26-06-2022 16:29:01]16113: WAF :: fetched 5 new logs [26-06-2022 16:30:02]18868: WAF :: fetched 6 new logs [26-06-2022 16:31:02]21549: WAF :: fetched 2 new logs [26-06-2022 16:32:01]24234: WAF :: fetched 1 new logs [26-06-2022 16:33:02]26958: WAF :: fetched 1 new logs [26-06-2022 16:34:01]29578: WAF :: fetched 27 new logs [26-06-2022 16:37:02]5618: WAF :: fetched 1 new logs [26-06-2022 16:38:02]10140: WAF :: fetched 2 new logs [26-06-2022 16:39:02]12903: WAF :: fetched 3 new logs [26-06-2022 16:40:01]15663: WAF :: fetched 3 new logs [26-06-2022 16:41:02]18405: WAF :: fetched 68 new logs [26-06-2022 16:41:02]18405: Checking for user cron vulnerabilities [26-06-2022 16:42:02]24496: WAF :: fetched 68 new logs [26-06-2022 16:43:01]29076: WAF :: fetched 2 new logs [26-06-2022 16:44:01]31775: Checking ditributed CMS bruteforce attacks [26-06-2022 16:44:02]31775: WAF :: fetched 3 new logs [26-06-2022 16:45:01]2088: WAF :: fetched 6 new logs [26-06-2022 16:46:02]4899: WAF :: fetched 3 new logs [26-06-2022 16:47:01]8791: WAF :: fetched 3 new logs [26-06-2022 16:48:02]11565: WAF :: fetched 2 new logs [26-06-2022 16:49:02]14199: WAF :: fetched 1 new logs [26-06-2022 16:50:01]16893: WAF :: fetched 3 new logs [26-06-2022 16:51:02]19693: WAF :: fetched 1 new logs [26-06-2022 16:52:01]22354: WAF :: fetched 2 new logs [26-06-2022 16:53:01]25092: WAF :: fetched 4 new logs [26-06-2022 16:54:02]27762: WAF :: fetched 6 new logs [26-06-2022 16:55:02]30405: WAF :: fetched 7 new logs [26-06-2022 16:56:02]623: WAF :: fetched 2 new logs [26-06-2022 16:57:01]3364: WAF :: fetched 1 new logs [26-06-2022 16:58:01]6178: WAF :: fetched 3 new logs [26-06-2022 16:59:02]8869: WAF :: fetched 1 new logs [26-06-2022 17:00:01]11254: WAF :: fetched 6 new logs [26-06-2022 17:01:01]14370: WAF :: fetched 6 new logs [26-06-2022 17:02:02]17075: WAF :: fetched 3 new logs [26-06-2022 17:03:01]19861: WAF :: fetched 5 new logs [26-06-2022 17:04:01]22557: WAF :: fetched 3 new logs [26-06-2022 17:05:02]25263: WAF :: fetched 3 new logs [26-06-2022 17:06:02]27983: WAF :: fetched 5 new logs [26-06-2022 17:07:02]30613: WAF :: fetched 2 new logs [26-06-2022 17:10:01]6369: WAF :: fetched 1 new logs [26-06-2022 17:12:02]11776: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656274322 [26-06-2022 17:12:02]11776: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 17:12:04]11776: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 17:12:04]11776: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-1712/20220626-171202-Yri9kjvvhk9e6s9B6xYBUgAAAAQ [26-06-2022 17:12:04]11776: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 17:12:04]11776: WAF :: fetched 2 new logs [26-06-2022 17:13:01]14540: WAF :: fetched 2 new logs [26-06-2022 17:16:01]22637: WAF :: fetched 2 new logs [26-06-2022 17:23:02]9189: WAF :: fetched 5 new logs [26-06-2022 17:24:01]11819: WAF :: fetched 1 new logs [26-06-2022 17:25:02]14498: WAF :: fetched 1 new logs [26-06-2022 17:26:01]17170: WAF :: fetched 2 new logs [26-06-2022 17:27:02]19874: WAF :: fetched 1 new logs [26-06-2022 17:28:01]22615: WAF :: fetched 3 new logs [26-06-2022 17:29:02]25293: WAF :: fetched 1 new logs [26-06-2022 17:31:01]30713: WAF :: fetched 1 new logs [26-06-2022 17:32:01]992: WAF :: fetched 2 new logs [26-06-2022 17:33:01]3842: WAF :: fetched 4 new logs [26-06-2022 17:34:02]6554: WAF :: fetched 1 new logs [26-06-2022 17:35:02]9215: WAF :: fetched 2 new logs [26-06-2022 17:36:01]11954: WAF :: fetched 3 new logs [26-06-2022 17:37:02]14617: WAF :: fetched 3 new logs [26-06-2022 17:38:02]22739: WAF :: fetched 1 new logs [26-06-2022 17:39:01]28974: WAF :: fetched 7 new logs [26-06-2022 17:40:02]31666: WAF :: fetched 2 new logs [26-06-2022 17:41:01]1984: WAF :: fetched 4 new logs [26-06-2022 17:41:01]1984: Checking for user cron vulnerabilities [26-06-2022 17:42:01]4740: WAF :: fetched 3 new logs [26-06-2022 17:43:02]7496: WAF :: fetched 1 new logs [26-06-2022 17:44:01]10162: Checking ditributed CMS bruteforce attacks [26-06-2022 17:44:01]10162: WAF :: fetched 1 new logs [26-06-2022 17:45:02]12830: WAF :: fetched 7 new logs [26-06-2022 17:46:01]15544: WAF :: fetched 4 new logs [26-06-2022 17:47:02]18263: WAF :: fetched 4 new logs [26-06-2022 17:48:01]21064: WAF :: fetched 9 new logs [26-06-2022 17:49:01]23746: WAF :: fetched 3 new logs [26-06-2022 17:50:02]26427: WAF :: fetched 4 new logs [26-06-2022 17:51:01]29103: WAF :: fetched 1 new logs [26-06-2022 17:52:02]31783: WAF :: fetched 2 new logs [26-06-2022 17:53:02]2108: WAF :: fetched 4 new logs [26-06-2022 17:54:01]4861: WAF :: fetched 1 new logs [26-06-2022 17:55:02]7538: WAF :: fetched 3 new logs [26-06-2022 17:56:02]10216: WAF :: fetched 2 new logs [26-06-2022 17:57:01]12851: WAF :: fetched 2 new logs [26-06-2022 17:59:01]18273: WAF :: fetched 1 new logs [26-06-2022 18:00:01]20699: WAF :: fetched 1 new logs [26-06-2022 18:02:01]26570: WAF :: fetched 2 new logs [26-06-2022 18:03:01]29324: WAF :: fetched 3 new logs [26-06-2022 18:04:02]31973: WAF :: fetched 1 new logs [26-06-2022 18:05:01]2252: WAF :: fetched 2 new logs [26-06-2022 18:07:01]7719: WAF :: fetched 2 new logs [26-06-2022 18:08:01]10492: WAF :: fetched 9 new logs [26-06-2022 18:09:02]13144: WAF :: fetched 8 new logs [26-06-2022 18:10:01]15804: WAF :: fetched 5 new logs [26-06-2022 18:11:02]18574: WAF :: fetched 6 new logs [26-06-2022 18:12:01]21274: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656277921 [26-06-2022 18:12:01]21274: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 18:12:03]21274: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 18:12:04]21274: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-1812/20220626-181201-YrjLoVIq3Y3dKJVUN0jlzQAAACM [26-06-2022 18:12:04]21274: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 18:12:04]21274: WAF :: fetched 3 new logs [26-06-2022 18:14:02]26662: WAF :: fetched 1 new logs [26-06-2022 18:15:01]29306: WAF :: fetched 13 new logs [26-06-2022 18:19:02]7787: WAF :: fetched 2 new logs [26-06-2022 18:20:01]10460: WAF :: fetched 2 new logs [26-06-2022 18:21:02]13183: WAF :: fetched 4 new logs [26-06-2022 18:22:01]15833: WAF :: fetched 1 new logs [26-06-2022 18:23:02]18639: WAF :: fetched 4 new logs [26-06-2022 18:24:02]21299: WAF :: fetched 2 new logs [26-06-2022 18:25:01]24001: WAF :: fetched 3 new logs [26-06-2022 18:26:02]26745: WAF :: fetched 4 new logs [26-06-2022 18:27:01]29338: WAF :: fetched 1 new logs [26-06-2022 18:28:01]32105: WAF :: fetched 4 new logs [26-06-2022 18:29:02]2347: WAF :: fetched 2 new logs [26-06-2022 18:30:01]5085: WAF :: fetched 4 new logs [26-06-2022 18:31:02]7872: WAF :: fetched 3 new logs [26-06-2022 18:32:01]10551: WAF :: fetched 1 new logs [26-06-2022 18:35:02]18618: WAF :: fetched 1 new logs [26-06-2022 18:37:02]24013: WAF :: fetched 4 new logs [26-06-2022 18:39:01]29446: WAF :: fetched 2 new logs [26-06-2022 18:41:01]2435: Checking for user cron vulnerabilities [26-06-2022 18:43:01]8804: WAF :: fetched 2 new logs [26-06-2022 18:44:01]11484: Checking ditributed CMS bruteforce attacks [26-06-2022 18:44:01]11484: WAF :: fetched 2 new logs [26-06-2022 18:47:02]27205: WAF :: fetched 2 new logs [26-06-2022 18:48:01]29894: WAF :: fetched 1 new logs [26-06-2022 18:49:01]32603: WAF :: fetched 3 new logs [26-06-2022 18:50:02]2925: WAF :: fetched 2 new logs [26-06-2022 18:51:01]5687: WAF :: fetched 1 new logs [26-06-2022 18:52:02]8352: WAF :: fetched 2 new logs [26-06-2022 18:53:01]10987: WAF :: fetched 2 new logs [26-06-2022 18:55:01]16380: WAF :: fetched 1 new logs [26-06-2022 18:56:01]19140: WAF :: fetched 1 new logs [26-06-2022 19:00:02]29579: WAF :: fetched 4 new logs [26-06-2022 19:02:02]3210: WAF :: fetched 1 new logs [26-06-2022 19:03:01]5973: WAF :: fetched 4 new logs [26-06-2022 19:04:01]8739: WAF :: fetched 3 new logs [26-06-2022 19:05:02]11437: WAF :: fetched 6 new logs [26-06-2022 19:06:01]14122: WAF :: fetched 4 new logs [26-06-2022 19:07:02]16812: WAF :: fetched 6 new logs [26-06-2022 19:08:02]19521: WAF :: fetched 2 new logs [26-06-2022 19:09:01]22276: WAF :: fetched 3 new logs [26-06-2022 19:10:02]24965: WAF :: fetched 4 new logs [26-06-2022 19:11:01]27615: WAF :: fetched 3 new logs [26-06-2022 19:12:02]30334: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656281522 [26-06-2022 19:12:02]30334: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 19:12:04]30334: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 19:12:04]30334: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-1912/20220626-191202-YrjZsmZ4W9GhB_C0anLxswAAAAQ [26-06-2022 19:12:04]30334: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 19:12:04]30334: WAF :: fetched 9 new logs [26-06-2022 19:13:01]503: WAF :: fetched 1 new logs [26-06-2022 19:14:01]3291: WAF :: fetched 4 new logs [26-06-2022 19:15:02]6041: WAF :: fetched 4 new logs [26-06-2022 19:16:02]8776: WAF :: fetched 3 new logs [26-06-2022 19:17:02]11395: WAF :: fetched 1 new logs [26-06-2022 19:18:01]14036: WAF :: fetched 4 new logs [26-06-2022 19:19:02]16769: WAF :: fetched 2 new logs [26-06-2022 19:20:01]19494: WAF :: fetched 4 new logs [26-06-2022 19:21:01]22207: WAF :: fetched 2 new logs [26-06-2022 19:22:02]24883: WAF :: fetched 3 new logs [26-06-2022 19:23:02]27527: WAF :: fetched 2 new logs [26-06-2022 19:24:01]30260: WAF :: fetched 4 new logs [26-06-2022 19:25:01]514: WAF :: fetched 6 new logs [26-06-2022 19:26:01]3260: WAF :: fetched 3 new logs [26-06-2022 19:27:02]6007: WAF :: fetched 8 new logs [26-06-2022 19:28:01]8655: WAF :: fetched 6 new logs [26-06-2022 19:29:02]11409: WAF :: fetched 1 new logs [26-06-2022 19:30:02]14075: WAF :: fetched 4 new logs [26-06-2022 19:31:01]16788: WAF :: fetched 2 new logs [26-06-2022 19:32:02]19539: WAF :: fetched 1 new logs [26-06-2022 19:33:01]22238: WAF :: fetched 2 new logs [26-06-2022 19:34:02]24995: WAF :: fetched 3 new logs [26-06-2022 19:35:02]27642: WAF :: fetched 1 new logs [26-06-2022 19:36:01]30333: WAF :: fetched 1 new logs [26-06-2022 19:37:02]601: WAF :: fetched 4 new logs [26-06-2022 19:38:01]3550: WAF :: fetched 3 new logs [26-06-2022 19:39:01]6376: WAF :: fetched 2 new logs [26-06-2022 19:41:02]11805: WAF :: fetched 2 new logs [26-06-2022 19:41:02]11805: Checking for user cron vulnerabilities [26-06-2022 19:43:01]17095: WAF :: fetched 1 new logs [26-06-2022 19:44:01]19895: Checking ditributed CMS bruteforce attacks [26-06-2022 19:45:01]: Checking for definition updates [26-06-2022 19:45:02]22599: WAF :: fetched 3 new logs [26-06-2022 19:46:01]25338: WAF :: fetched 6 new logs [26-06-2022 19:47:02]28011: WAF :: fetched 1 new logs [26-06-2022 19:48:01]507: WAF :: fetched 4 new logs [26-06-2022 19:49:02]3396: WAF :: fetched 2 new logs [26-06-2022 19:50:01]6165: WAF :: fetched 2 new logs [26-06-2022 19:51:01]8895: WAF :: fetched 29 new logs [26-06-2022 19:54:01]16826: WAF :: fetched 3 new logs [26-06-2022 19:55:02]19736: WAF :: fetched 7 new logs [26-06-2022 19:56:01]22443: WAF :: fetched 3 new logs [26-06-2022 19:58:01]2192: WAF :: fetched 4 new logs [26-06-2022 19:59:01]4985: WAF :: fetched 1 new logs [26-06-2022 20:00:02]7414: WAF :: fetched 4 new logs [26-06-2022 20:01:01]10570: WAF :: fetched 2 new logs [26-06-2022 20:02:01]13308: WAF :: fetched 7 new logs [26-06-2022 20:03:02]15988: WAF :: fetched 2 new logs [26-06-2022 20:04:01]18784: WAF :: fetched 2 new logs [26-06-2022 20:06:01]24183: WAF :: fetched 2 new logs [26-06-2022 20:07:01]26820: WAF :: fetched 1 new logs [26-06-2022 20:08:02]29483: WAF :: fetched 2 new logs [26-06-2022 20:09:01]32242: WAF :: fetched 2 new logs [26-06-2022 20:10:02]2579: WAF :: fetched 1 new logs [26-06-2022 20:11:01]5337: WAF :: fetched 2 new logs [26-06-2022 20:12:01]8049: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656285121 [26-06-2022 20:12:01]8049: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 20:12:03]8049: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 20:12:03]8049: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-2012/20220626-201201-YrjnwXesoLypk1RBi4IAyAAAADc [26-06-2022 20:12:03]8049: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 20:12:04]8049: WAF :: fetched 1 new logs [26-06-2022 20:13:02]10731: WAF :: fetched 3 new logs [26-06-2022 20:14:01]13479: WAF :: fetched 7 new logs [26-06-2022 20:15:02]16200: WAF :: fetched 5 new logs [26-06-2022 20:16:02]18995: WAF :: fetched 3 new logs [26-06-2022 20:17:01]21684: WAF :: fetched 5 new logs [26-06-2022 20:18:02]24396: WAF :: fetched 2 new logs [26-06-2022 20:19:01]27132: WAF :: fetched 1 new logs [26-06-2022 20:21:02]32597: WAF :: fetched 2 new logs [26-06-2022 20:22:01]2809: WAF :: fetched 2 new logs [26-06-2022 20:23:02]5694: WAF :: fetched 3 new logs [26-06-2022 20:24:01]8513: WAF :: fetched 5 new logs [26-06-2022 20:25:02]11252: WAF :: fetched 1 new logs [26-06-2022 20:26:01]13966: WAF :: fetched 2 new logs [26-06-2022 20:29:02]22262: WAF :: fetched 1 new logs [26-06-2022 20:30:02]24981: WAF :: fetched 4 new logs [26-06-2022 20:31:01]27753: WAF :: fetched 4 new logs [26-06-2022 20:32:01]30487: WAF :: fetched 2 new logs [26-06-2022 20:33:02]779: WAF :: fetched 3 new logs [26-06-2022 20:34:01]3605: WAF :: fetched 3 new logs [26-06-2022 20:35:02]6392: WAF :: fetched 1 new logs [26-06-2022 20:36:02]9086: WAF :: fetched 1 new logs [26-06-2022 20:37:02]11749: WAF :: fetched 1 new logs [26-06-2022 20:38:01]17941: WAF :: fetched 2 new logs [26-06-2022 20:39:02]24836: WAF :: fetched 1 new logs [26-06-2022 20:41:01]767: WAF :: fetched 4 new logs [26-06-2022 20:41:01]767: Checking for user cron vulnerabilities [26-06-2022 20:42:02]3494: WAF :: fetched 2 new logs [26-06-2022 20:43:01]6211: WAF :: fetched 2 new logs [26-06-2022 20:44:02]8945: Checking ditributed CMS bruteforce attacks [26-06-2022 20:44:02]8945: WAF :: fetched 1 new logs [26-06-2022 20:45:02]11631: WAF :: fetched 1 new logs [26-06-2022 20:46:01]14331: WAF :: fetched 2 new logs [26-06-2022 20:47:01]17021: WAF :: fetched 7 new logs [26-06-2022 20:49:02]22478: WAF :: fetched 2 new logs [26-06-2022 20:51:02]27920: WAF :: fetched 2 new logs [26-06-2022 20:52:01]30543: WAF :: fetched 1 new logs [26-06-2022 20:53:02]829: WAF :: fetched 2 new logs [26-06-2022 20:55:01]6367: WAF :: fetched 5 new logs [26-06-2022 20:56:02]9158: WAF :: fetched 16 new logs [26-06-2022 20:57:01]11804: WAF :: fetched 15 new logs [26-06-2022 20:58:01]14498: WAF :: fetched 1 new logs [26-06-2022 20:59:02]17253: WAF :: fetched 3 new logs [26-06-2022 21:00:01]19672: WAF :: fetched 2 new logs [26-06-2022 21:01:02]22869: WAF :: fetched 4 new logs [26-06-2022 21:02:01]25451: WAF :: fetched 2 new logs [26-06-2022 21:03:02]28234: WAF :: fetched 1 new logs [26-06-2022 21:04:02]31011: WAF :: fetched 1 new logs [26-06-2022 21:05:02]1237: WAF :: fetched 1 new logs [26-06-2022 21:06:01]4052: WAF :: fetched 1 new logs [26-06-2022 21:08:01]9422: WAF :: fetched 3 new logs [26-06-2022 21:09:02]12197: WAF :: fetched 4 new logs [26-06-2022 21:10:02]14999: WAF :: fetched 6 new logs [26-06-2022 21:11:01]17741: WAF :: fetched 4 new logs [26-06-2022 21:12:02]20460: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656288722 [26-06-2022 21:12:02]20460: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 21:12:04]20460: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 21:12:04]20460: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-2112/20220626-211202-Yrj10uQyzQzwssR2jnFS5AAAABI [26-06-2022 21:12:04]20460: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [26-06-2022 21:12:04]20460: WAF :: fetched 1 new logs [26-06-2022 21:13:01]23155: WAF :: fetched 4 new logs [26-06-2022 21:15:01]28590: WAF :: fetched 1 new logs [26-06-2022 21:17:02]1503: WAF :: fetched 5 new logs [26-06-2022 21:18:01]4216: WAF :: fetched 4 new logs [26-06-2022 21:19:02]7049: WAF :: fetched 5 new logs [26-06-2022 21:20:02]9744: WAF :: fetched 4 new logs [26-06-2022 21:21:02]12458: WAF :: fetched 3 new logs [26-06-2022 21:22:01]15138: WAF :: fetched 2 new logs [26-06-2022 21:23:02]17812: WAF :: fetched 6 new logs [26-06-2022 21:24:01]20567: WAF :: fetched 1 new logs [26-06-2022 21:25:01]23222: WAF :: fetched 2 new logs [26-06-2022 21:26:02]25899: WAF :: fetched 1 new logs [26-06-2022 21:27:01]28544: WAF :: fetched 1 new logs [26-06-2022 21:28:02]31230: WAF :: fetched 2 new logs [26-06-2022 21:29:01]1571: WAF :: fetched 1 new logs [26-06-2022 21:31:02]7110: WAF :: fetched 1 new logs [26-06-2022 21:32:01]9822: WAF :: fetched 1 new logs [26-06-2022 21:33:02]12498: WAF :: fetched 3 new logs [26-06-2022 21:35:01]17936: WAF :: fetched 1 new logs [26-06-2022 21:36:02]20701: WAF :: fetched 1 new logs [26-06-2022 21:37:01]23349: WAF :: fetched 2 new logs [26-06-2022 21:38:02]29303: WAF :: fetched 1 new logs [26-06-2022 21:41:02]5032: WAF :: fetched 3 new logs [26-06-2022 21:41:02]5032: Checking for user cron vulnerabilities [26-06-2022 21:42:01]7664: WAF :: fetched 4 new logs [26-06-2022 21:44:01]19693: Checking ditributed CMS bruteforce attacks [26-06-2022 21:44:02]19693: WAF :: fetched 4 new logs [26-06-2022 21:45:01]22339: WAF :: fetched 37 new logs [26-06-2022 21:46:02]25031: WAF :: fetched 4 new logs [26-06-2022 21:47:01]27638: WAF :: fetched 8 new logs [26-06-2022 21:48:02]30307: WAF :: fetched 7 new logs [26-06-2022 21:49:01]564: WAF :: fetched 7 new logs [26-06-2022 21:50:02]3336: WAF :: fetched 13 new logs [26-06-2022 21:51:01]6003: WAF :: fetched 4 new logs [26-06-2022 21:52:02]8718: WAF :: fetched 3 new logs [26-06-2022 21:53:01]11335: WAF :: fetched 3 new logs [26-06-2022 21:54:01]14057: WAF :: fetched 3 new logs [26-06-2022 21:55:02]16702: WAF :: fetched 3 new logs [26-06-2022 21:57:02]22027: WAF :: fetched 1 new logs [26-06-2022 21:58:01]24615: WAF :: fetched 13 new logs [26-06-2022 21:59:02]27354: WAF :: fetched 13 new logs [26-06-2022 22:00:01]29734: WAF :: fetched 11 new logs [26-06-2022 22:01:02]412: WAF :: fetched 13 new logs [26-06-2022 22:02:02]3180: WAF :: fetched 7 new logs [26-06-2022 22:03:01]5901: WAF :: fetched 3 new logs [26-06-2022 22:04:01]8610: WAF :: fetched 5 new logs [26-06-2022 22:05:01]11300: WAF :: fetched 5 new logs [26-06-2022 22:06:01]14032: WAF :: fetched 1 new logs [26-06-2022 22:07:02]16654: WAF :: fetched 4 new logs [26-06-2022 22:07:08]16652: Performing Domain reputation checks [26-06-2022 22:09:01]22005: WAF :: fetched 3 new logs [26-06-2022 22:10:02]24621: WAF :: fetched 2 new logs [26-06-2022 22:12:02]29902: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656292322 [26-06-2022 22:12:02]29902: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 22:12:04]29902: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 22:12:04]29902: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-2212/20220626-221202-YrkD4m-6EbfSFTZZIGeVPwAAACE [26-06-2022 22:12:04]29902: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 22:12:05]29902: WAF :: fetched 175 new logs [26-06-2022 22:13:02]32540: WAF :: fetched 2 new logs [26-06-2022 22:14:02]2898: WAF :: fetched 2 new logs [26-06-2022 22:17:02]10979: WAF :: fetched 2 new logs [26-06-2022 22:18:01]13592: WAF :: fetched 4 new logs [26-06-2022 22:19:02]16327: WAF :: fetched 2 new logs [26-06-2022 22:20:01]18952: WAF :: fetched 5 new logs [26-06-2022 22:21:01]21665: WAF :: fetched 9 new logs [26-06-2022 22:22:02]24345: httpd.conf changed. Refreshing watchlist. [26-06-2022 22:23:01]27069: httpd.conf changed. Refreshing watchlist. [26-06-2022 22:23:01]27058: WAF :: fetched 3 new logs [26-06-2022 22:24:02]29811: WAF :: fetched 1 new logs [26-06-2022 22:25:01]32424: WAF :: fetched 3 new logs [26-06-2022 22:26:02]2728: WAF :: fetched 3 new logs [26-06-2022 22:27:02]5431: WAF :: fetched 3 new logs [26-06-2022 22:28:01]8128: WAF :: fetched 56 new logs [26-06-2022 22:29:02]10906: httpd.conf changed. Refreshing watchlist. [26-06-2022 22:29:02]10905: WAF :: fetched 1 new logs [26-06-2022 22:30:02]13518: WAF :: fetched 2 new logs [26-06-2022 22:31:01]16177: WAF :: fetched 3 new logs [26-06-2022 22:32:02]18885: WAF :: fetched 2 new logs [26-06-2022 22:33:01]21484: WAF :: fetched 3 new logs [26-06-2022 22:34:02]24218: WAF :: fetched 1 new logs [26-06-2022 22:37:02]32184: WAF :: fetched 1 new logs [26-06-2022 22:39:01]14111: WAF :: fetched 3 new logs [26-06-2022 22:40:02]16760: WAF :: fetched 1 new logs [26-06-2022 22:41:01]19450: WAF :: fetched 2 new logs [26-06-2022 22:41:01]19450: Checking for user cron vulnerabilities [26-06-2022 22:42:02]22141: WAF :: fetched 9 new logs [26-06-2022 22:43:01]24748: WAF :: fetched 5 new logs [26-06-2022 22:44:01]27454: Checking ditributed CMS bruteforce attacks [26-06-2022 22:44:01]27454: WAF :: fetched 2 new logs [26-06-2022 22:45:02]30122: WAF :: fetched 2 new logs [26-06-2022 22:46:01]32764: WAF :: fetched 2 new logs [26-06-2022 22:47:02]3021: WAF :: fetched 2 new logs [26-06-2022 22:48:02]5737: WAF :: fetched 3 new logs [26-06-2022 22:49:01]8472: WAF :: fetched 7 new logs [26-06-2022 22:50:01]11121: WAF :: fetched 3 new logs [26-06-2022 22:51:02]13811: WAF :: fetched 1 new logs [26-06-2022 22:52:01]16402: WAF :: fetched 1 new logs [26-06-2022 22:53:02]19054: WAF :: fetched 1 new logs [26-06-2022 22:54:02]21768: WAF :: fetched 1 new logs [26-06-2022 22:55:01]24398: WAF :: fetched 1 new logs [26-06-2022 22:56:02]27066: WAF :: fetched 1 new logs [26-06-2022 22:57:01]29703: WAF :: fetched 3 new logs [26-06-2022 22:58:01]32348: WAF :: fetched 4 new logs [26-06-2022 22:59:02]2693: WAF :: fetched 4 new logs [26-06-2022 23:00:01]5113: WAF :: fetched 1 new logs [26-06-2022 23:02:01]10869: WAF :: fetched 1 new logs [26-06-2022 23:04:02]16182: WAF :: fetched 1 new logs [26-06-2022 23:05:01]18853: WAF :: fetched 3 new logs [26-06-2022 23:06:02]21529: WAF :: fetched 2 new logs [26-06-2022 23:07:58]24248: Performed RBL check for 23.111.136.34. [26-06-2022 23:08:01]26682: WAF :: fetched 1 new logs [26-06-2022 23:10:01]31970: WAF :: fetched 3 new logs [26-06-2022 23:11:02]2288: WAF :: fetched 1 new logs [26-06-2022 23:12:02]4952: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656295922 [26-06-2022 23:12:02]4952: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-06-2022 23:12:04]4952: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-06-2022 23:12:04]4952: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220626/20220626-2312/20220626-231202-YrkR8uoUGZH7m28SXt6tkQAAABc [26-06-2022 23:12:04]4952: WAF :: No suitable log file found. Using SQLite.. [26-06-2022 23:12:04]4952: WAF :: fetched 1 new logs [26-06-2022 23:15:02]12899: WAF :: fetched 1 new logs [26-06-2022 23:16:01]15586: WAF :: fetched 3 new logs [26-06-2022 23:17:02]18204: WAF :: fetched 1 new logs [26-06-2022 23:18:01]20807: WAF :: fetched 2 new logs [26-06-2022 23:19:02]23512: WAF :: fetched 1 new logs [26-06-2022 23:20:01]26133: WAF :: fetched 2 new logs [26-06-2022 23:21:02]28792: WAF :: fetched 3 new logs [26-06-2022 23:22:01]31381: WAF :: fetched 3 new logs [26-06-2022 23:23:02]1595: WAF :: fetched 2 new logs [26-06-2022 23:27:01]12229: WAF :: fetched 3 new logs [26-06-2022 23:28:02]14868: WAF :: fetched 3 new logs [26-06-2022 23:29:01]17516: WAF :: fetched 4 new logs [26-06-2022 23:30:02]20209: WAF :: fetched 3 new logs [26-06-2022 23:31:02]22873: WAF :: fetched 2 new logs [26-06-2022 23:32:01]25553: WAF :: fetched 1 new logs [26-06-2022 23:33:02]28225: WAF :: fetched 1 new logs [26-06-2022 23:34:01]30978: WAF :: fetched 1 new logs [26-06-2022 23:35:02]1237: WAF :: fetched 1 new logs [26-06-2022 23:36:02]3978: WAF :: fetched 1 new logs [26-06-2022 23:38:02]9348: WAF :: fetched 2 new logs [26-06-2022 23:39:01]11897: WAF :: fetched 2 new logs [26-06-2022 23:41:01]17452: WAF :: fetched 2 new logs [26-06-2022 23:41:01]17452: Checking for user cron vulnerabilities [26-06-2022 23:43:02]26017: WAF :: fetched 1 new logs [26-06-2022 23:44:01]28635: Checking ditributed CMS bruteforce attacks [26-06-2022 23:46:01]6054: WAF :: fetched 1 new logs [26-06-2022 23:47:02]11436: WAF :: fetched 1 new logs [26-06-2022 23:48:01]14035: WAF :: fetched 2 new logs [26-06-2022 23:49:02]16679: WAF :: fetched 2 new logs [26-06-2022 23:51:01]22092: WAF :: fetched 1 new logs [26-06-2022 23:52:02]24704: WAF :: fetched 2 new logs [26-06-2022 23:53:01]27391: WAF :: fetched 2 new logs [26-06-2022 23:55:02]365: WAF :: fetched 66 new logs [26-06-2022 23:56:01]3152: httpd.conf changed. Refreshing watchlist. [26-06-2022 23:56:01]3157: WAF :: fetched 3 new logs [26-06-2022 23:57:01]5828: WAF :: fetched 1 new logs [26-06-2022 23:58:01]8461: WAF :: fetched 1 new logs [26-06-2022 23:59:02]11066: WAF :: fetched 1 new logs [27-06-2022 00:00:01]13513: WAF :: fetched 2 new logs [27-06-2022 00:01:01]16816: httpd.conf changed. Refreshing watchlist. [27-06-2022 00:01:01]16817: WAF :: fetched 3 new logs [27-06-2022 00:01:04]16817: Sending daily report for June 27, 2022 [27-06-2022 00:03:01]22228: WAF :: fetched 2 new logs [27-06-2022 00:04:02]24843: WAF :: fetched 3 new logs [27-06-2022 00:05:01]27584: WAF :: fetched 48 new logs [27-06-2022 00:05:02]27584: Deleted 0 entries older than 6 MONTH from scanner_logs [27-06-2022 00:05:02]27584: Deleted 0 files from Quarantine [27-06-2022 00:06:01]30238: WAF :: fetched 27 new logs [27-06-2022 00:07:01]361: WAF :: fetched 1 new logs [27-06-2022 00:11:02]11160: WAF :: fetched 1 new logs [27-06-2022 00:12:01]13819: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656299521 [27-06-2022 00:12:01]13819: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 00:12:03]13819: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 00:12:04]13819: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-0012/20220627-001201-YrkgAXy0iKzHPItOg5gpqgAAAAQ [27-06-2022 00:12:04]13819: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [27-06-2022 00:12:04]13819: WAF :: fetched 1 new logs [27-06-2022 00:14:02]19062: WAF :: fetched 3 new logs [27-06-2022 00:16:02]24494: WAF :: fetched 3 new logs [27-06-2022 00:19:01]32289: WAF :: fetched 9 new logs [27-06-2022 00:20:01]2636: WAF :: fetched 13 new logs [27-06-2022 00:21:01]5361: WAF :: fetched 15 new logs [27-06-2022 00:22:02]7973: WAF :: fetched 13 new logs [27-06-2022 00:23:01]10556: WAF :: fetched 8 new logs [27-06-2022 00:24:02]13238: WAF :: fetched 7 new logs [27-06-2022 00:25:01]15949: WAF :: fetched 6 new logs [27-06-2022 00:26:01]18588: WAF :: fetched 2 new logs [27-06-2022 00:27:02]21245: WAF :: fetched 8 new logs [27-06-2022 00:28:01]23831: WAF :: fetched 2 new logs [27-06-2022 00:29:02]26427: WAF :: fetched 1 new logs [27-06-2022 00:31:01]31764: WAF :: fetched 1 new logs [27-06-2022 00:33:01]4687: WAF :: fetched 2 new logs [27-06-2022 00:34:01]7344: WAF :: fetched 3 new logs [27-06-2022 00:35:02]10080: WAF :: fetched 11 new logs [27-06-2022 00:36:01]12735: WAF :: fetched 4 new logs [27-06-2022 00:37:02]15391: WAF :: fetched 2 new logs [27-06-2022 00:38:01]20783: WAF :: fetched 2 new logs [27-06-2022 00:39:01]27124: WAF :: fetched 2 new logs [27-06-2022 00:41:01]4171: WAF :: fetched 2 new logs [27-06-2022 00:41:01]4171: Checking for user cron vulnerabilities [27-06-2022 00:42:02]6849: WAF :: fetched 2 new logs [27-06-2022 00:44:01]12057: Checking ditributed CMS bruteforce attacks [27-06-2022 00:44:01]12057: WAF :: fetched 2 new logs [27-06-2022 00:45:02]: Checking for software updates [27-06-2022 00:45:02]14828: WAF :: fetched 4 new logs [27-06-2022 00:46:01]17442: WAF :: fetched 3 new logs [27-06-2022 00:47:01]20101: WAF :: fetched 4 new logs [27-06-2022 00:48:02]22767: WAF :: fetched 6 new logs [27-06-2022 00:50:01]28090: WAF :: fetched 1 new logs [27-06-2022 00:52:01]931: WAF :: fetched 2 new logs [27-06-2022 00:53:02]3606: WAF :: fetched 3 new logs [27-06-2022 00:54:02]6246: WAF :: fetched 1 new logs [27-06-2022 00:56:02]11602: WAF :: fetched 1 new logs [27-06-2022 00:58:02]16867: WAF :: fetched 2 new logs [27-06-2022 00:59:01]19500: WAF :: fetched 2 new logs [27-06-2022 01:01:02]25764: WAF :: fetched 5 new logs [27-06-2022 01:02:01]28555: WAF :: fetched 4 new logs [27-06-2022 01:03:02]31387: WAF :: fetched 2 new logs [27-06-2022 01:06:02]7807: WAF :: fetched 4 new logs [27-06-2022 01:09:02]16132: WAF :: fetched 1 new logs [27-06-2022 01:10:01]18885: WAF :: fetched 1 new logs [27-06-2022 01:12:02]24693: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656303122 [27-06-2022 01:12:02]24693: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 01:12:04]24693: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 01:12:04]24693: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-0112/20220627-011202-YrkuEoGLLtnpUh3Z1q6cBwAAABQ [27-06-2022 01:12:04]24693: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 01:12:04]24693: WAF :: fetched 127 new logs [27-06-2022 01:13:01]27454: WAF :: fetched 2 new logs [27-06-2022 01:17:02]6630: WAF :: fetched 1 new logs [27-06-2022 01:19:01]12370: WAF :: fetched 3 new logs [27-06-2022 01:22:02]20742: WAF :: fetched 2 new logs [27-06-2022 01:23:02]23536: WAF :: fetched 21 new logs [27-06-2022 01:25:02]29150: WAF :: fetched 1 new logs [27-06-2022 01:28:01]5615: WAF :: fetched 2 new logs [27-06-2022 01:29:02]8587: WAF :: fetched 2 new logs [27-06-2022 01:31:01]14271: WAF :: fetched 3 new logs [27-06-2022 01:33:02]20055: WAF :: fetched 1 new logs [27-06-2022 01:35:02]25809: WAF :: fetched 1 new logs [27-06-2022 01:36:02]28919: WAF :: fetched 1 new logs [27-06-2022 01:38:01]2246: WAF :: fetched 2 new logs [27-06-2022 01:39:01]4953: WAF :: fetched 1 new logs [27-06-2022 01:40:02]8064: WAF :: fetched 2 new logs [27-06-2022 01:41:01]10942: Checking for user cron vulnerabilities [27-06-2022 01:42:02]13909: WAF :: fetched 3 new logs [27-06-2022 01:43:02]16854: WAF :: fetched 5 new logs [27-06-2022 01:44:01]19514: Checking ditributed CMS bruteforce attacks [27-06-2022 01:44:02]19514: WAF :: fetched 1 new logs [27-06-2022 01:45:01]: Checking for definition updates [27-06-2022 01:45:01]22251: WAF :: fetched 1 new logs [27-06-2022 01:50:01]13111: WAF :: fetched 2 new logs [27-06-2022 01:52:01]18439: WAF :: fetched 2 new logs [27-06-2022 01:54:02]23742: WAF :: fetched 2 new logs [27-06-2022 01:56:02]29060: WAF :: fetched 1 new logs [27-06-2022 02:03:02]15366: WAF :: fetched 1 new logs [27-06-2022 02:04:01]17969: WAF :: fetched 1 new logs [27-06-2022 02:05:02]20728: WAF :: fetched 1 new logs [27-06-2022 02:08:02]28633: WAF :: fetched 2 new logs [27-06-2022 02:09:01]31196: WAF :: fetched 1 new logs [27-06-2022 02:10:02]1507: WAF :: fetched 2 new logs [27-06-2022 02:11:01]4214: WAF :: fetched 2 new logs [27-06-2022 02:12:01]6852: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656306721 [27-06-2022 02:12:01]6852: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 02:12:03]6852: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 02:12:03]6852: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-0212/20220627-021201-Yrk8IQlzrGPEHvuWITSbpAAAAAM [27-06-2022 02:12:03]6852: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 02:12:04]6852: WAF :: fetched 2 new logs [27-06-2022 02:13:02]9501: WAF :: fetched 1 new logs [27-06-2022 02:14:01]12082: WAF :: fetched 1 new logs [27-06-2022 02:15:02]14817: WAF :: fetched 4 new logs [27-06-2022 02:16:02]17436: WAF :: fetched 1 new logs [27-06-2022 02:18:02]22727: WAF :: fetched 2 new logs [27-06-2022 02:23:02]4937: WAF :: fetched 8 new logs [27-06-2022 02:24:01]7699: WAF :: fetched 3 new logs [27-06-2022 02:32:02]30273: WAF :: fetched 2 new logs [27-06-2022 02:34:01]3381: WAF :: fetched 2 new logs [27-06-2022 02:35:02]6311: WAF :: fetched 1 new logs [27-06-2022 02:37:02]12089: WAF :: fetched 1 new logs [27-06-2022 02:38:01]19660: WAF :: fetched 1 new logs [27-06-2022 02:39:01]26331: WAF :: fetched 4 new logs [27-06-2022 02:40:02]29048: WAF :: fetched 2 new logs [27-06-2022 02:41:01]31693: Checking for user cron vulnerabilities [27-06-2022 02:42:01]2273: WAF :: fetched 1 new logs [27-06-2022 02:43:02]5253: WAF :: fetched 1 new logs [27-06-2022 02:44:01]8047: Checking ditributed CMS bruteforce attacks [27-06-2022 02:46:01]14071: WAF :: fetched 2 new logs [27-06-2022 02:47:01]16947: WAF :: fetched 4 new logs [27-06-2022 02:48:01]19835: WAF :: fetched 4 new logs [27-06-2022 02:49:02]22500: WAF :: fetched 1 new logs [27-06-2022 02:50:02]25176: WAF :: fetched 1 new logs [27-06-2022 02:51:01]27880: WAF :: fetched 1 new logs [27-06-2022 02:52:02]30490: WAF :: fetched 2 new logs [27-06-2022 02:53:01]626: WAF :: fetched 1 new logs [27-06-2022 02:53:02]617: Updated license status via CDN [27-06-2022 02:54:01]3319: WAF :: fetched 4 new logs [27-06-2022 02:57:01]11347: WAF :: fetched 4 new logs [27-06-2022 02:58:01]13967: WAF :: fetched 4 new logs [27-06-2022 02:59:02]16620: WAF :: fetched 4 new logs [27-06-2022 03:00:01]19071: WAF :: fetched 2 new logs [27-06-2022 03:00:03]19071: Found and updated 32 CMS installations [27-06-2022 03:02:02]25174: WAF :: fetched 1 new logs [27-06-2022 03:02:35]19071: Sending CMS version vulnerability report emails to cpanel users [27-06-2022 03:02:38]19071: Checking wordpress installations for suspicious directories [27-06-2022 03:03:01]28060: WAF :: fetched 1 new logs [27-06-2022 03:04:02]30976: WAF :: fetched 2 new logs [27-06-2022 03:04:25]28106: Sending CMS version vulnerability report emails to cpanel users [27-06-2022 03:04:28]28106: Checking wordpress installations for suspicious directories [27-06-2022 03:05:01]1611: WAF :: fetched 2 new logs [27-06-2022 03:06:02]4470: WAF :: fetched 2 new logs [27-06-2022 03:08:01]9836: WAF :: fetched 1 new logs [27-06-2022 03:09:02]12479: WAF :: fetched 3 new logs [27-06-2022 03:11:02]17817: WAF :: fetched 3 new logs [27-06-2022 03:12:01]20451: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656310321 [27-06-2022 03:12:01]20451: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 03:12:03]20451: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 03:12:04]20451: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-0312/20220627-031201-YrlKMQDR4ZSJIjb-okk8jAAAAAQ [27-06-2022 03:12:04]20451: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 03:12:04]20451: WAF :: fetched 3 new logs [27-06-2022 03:16:01]31015: WAF :: fetched 1 new logs [27-06-2022 03:17:02]1229: WAF :: fetched 3 new logs [27-06-2022 03:20:01]9323: WAF :: fetched 3 new logs [27-06-2022 03:23:01]17197: WAF :: fetched 3 new logs [27-06-2022 03:24:02]19897: WAF :: fetched 2 new logs [27-06-2022 03:25:01]22648: WAF :: fetched 1 new logs [27-06-2022 03:27:02]10697: WAF :: fetched 1 new logs [27-06-2022 03:28:01]22496: WAF :: fetched 4 new logs [27-06-2022 03:29:02]2288: WAF :: fetched 1 new logs [27-06-2022 03:30:01]5081: WAF :: fetched 3 new logs [27-06-2022 03:31:02]7748: WAF :: fetched 6 new logs [27-06-2022 03:33:02]13008: WAF :: fetched 1 new logs [27-06-2022 03:34:01]15601: WAF :: fetched 1 new logs [27-06-2022 03:35:02]18334: WAF :: fetched 2 new logs [27-06-2022 03:37:01]23617: WAF :: fetched 1 new logs [27-06-2022 03:39:02]959: WAF :: fetched 1 new logs [27-06-2022 03:40:02]3727: WAF :: fetched 4 new logs [27-06-2022 03:41:01]6435: Checking for user cron vulnerabilities [27-06-2022 03:44:01]19712: Checking ditributed CMS bruteforce attacks [27-06-2022 03:44:01]19712: WAF :: fetched 1 new logs [27-06-2022 03:45:02]22473: WAF :: fetched 3 new logs [27-06-2022 03:46:01]25120: WAF :: fetched 3 new logs [27-06-2022 03:47:02]27745: WAF :: fetched 1 new logs [27-06-2022 03:48:02]30330: WAF :: fetched 3 new logs [27-06-2022 03:49:01]499: WAF :: fetched 2 new logs [27-06-2022 03:50:02]3296: WAF :: fetched 2 new logs [27-06-2022 03:53:02]11256: WAF :: fetched 2 new logs [27-06-2022 03:54:01]13859: WAF :: fetched 1 new logs [27-06-2022 03:56:02]19223: WAF :: fetched 2 new logs [27-06-2022 04:00:02]29506: WAF :: fetched 1 new logs [27-06-2022 04:01:02]32568: WAF :: fetched 2 new logs [27-06-2022 04:02:01]2829: WAF :: fetched 1 new logs [27-06-2022 04:03:02]5528: WAF :: fetched 2 new logs [27-06-2022 04:04:01]8147: WAF :: fetched 1 new logs [27-06-2022 04:05:01]10834: WAF :: fetched 1 new logs [27-06-2022 04:06:02]13487: WAF :: fetched 1 new logs [27-06-2022 04:07:01]16091: WAF :: fetched 1 new logs [27-06-2022 04:08:02]18744: WAF :: fetched 2 new logs [27-06-2022 04:09:01]21214: WAF :: fetched 2 new logs [27-06-2022 04:10:02]24116: WAF :: fetched 3 new logs [27-06-2022 04:11:01]26731: WAF :: fetched 1 new logs [27-06-2022 04:12:01]29351: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656313921 [27-06-2022 04:12:01]29351: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 04:12:03]29351: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 04:12:03]29351: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-0412/20220627-041201-YrlYQdFNhCgPh6xoUJgAVwAAAAM [27-06-2022 04:12:03]29351: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [27-06-2022 04:12:04]29351: WAF :: fetched 2 new logs [27-06-2022 04:13:02]31976: WAF :: fetched 2 new logs [27-06-2022 04:14:01]2133: WAF :: fetched 1 new logs [27-06-2022 04:15:02]4945: WAF :: fetched 3 new logs [27-06-2022 04:16:01]7571: WAF :: fetched 1 new logs [27-06-2022 04:17:02]10209: WAF :: fetched 2 new logs [27-06-2022 04:18:02]12799: WAF :: fetched 2 new logs [27-06-2022 04:19:01]15413: WAF :: fetched 5 new logs [27-06-2022 04:20:02]18151: WAF :: fetched 3 new logs [27-06-2022 04:23:01]26048: WAF :: fetched 37 new logs [27-06-2022 04:24:02]28677: WAF :: fetched 1 new logs [27-06-2022 04:25:02]31364: WAF :: fetched 5 new logs [27-06-2022 04:26:01]1648: WAF :: fetched 5 new logs [27-06-2022 04:27:02]4422: WAF :: fetched 3 new logs [27-06-2022 04:29:01]9621: WAF :: fetched 2 new logs [27-06-2022 04:30:02]12361: WAF :: fetched 4 new logs [27-06-2022 04:31:01]15050: WAF :: fetched 3 new logs [27-06-2022 04:32:02]17731: WAF :: fetched 2 new logs [27-06-2022 04:33:01]20048: WAF :: fetched 2 new logs [27-06-2022 04:34:02]22970: WAF :: fetched 1 new logs [27-06-2022 04:35:01]25581: WAF :: fetched 1 new logs [27-06-2022 04:38:02]2021: WAF :: fetched 1 new logs [27-06-2022 04:39:01]4695: WAF :: fetched 3 new logs [27-06-2022 04:40:01]7328: WAF :: fetched 1 new logs [27-06-2022 04:41:02]10081: Checking for user cron vulnerabilities [27-06-2022 04:43:02]15268: WAF :: fetched 79 new logs [27-06-2022 04:44:01]17843: Checking ditributed CMS bruteforce attacks [27-06-2022 04:44:02]17843: WAF :: fetched 119 new logs [27-06-2022 04:45:02]20498: WAF :: fetched 74 new logs [27-06-2022 04:46:01]23279: WAF :: fetched 83 new logs [27-06-2022 04:47:02]25893: WAF :: fetched 82 new logs [27-06-2022 04:48:01]28752: WAF :: fetched 86 new logs [27-06-2022 04:49:02]31839: WAF :: fetched 58 new logs [27-06-2022 04:50:02]2031: WAF :: fetched 30 new logs [27-06-2022 04:51:01]4857: WAF :: fetched 76 new logs [27-06-2022 04:52:02]7506: WAF :: fetched 65 new logs [27-06-2022 04:53:02]10090: WAF :: fetched 63 new logs [27-06-2022 04:54:01]12676: WAF :: fetched 54 new logs [27-06-2022 04:55:01]15327: WAF :: fetched 46 new logs [27-06-2022 04:56:01]18034: WAF :: fetched 71 new logs [27-06-2022 04:57:02]22328: WAF :: fetched 92 new logs [27-06-2022 04:58:01]28577: WAF :: fetched 93 new logs [27-06-2022 04:59:02]32581: WAF :: fetched 69 new logs [27-06-2022 05:00:02]2531: WAF :: fetched 34 new logs [27-06-2022 05:01:01]5762: WAF :: fetched 43 new logs [27-06-2022 05:01:41]5761: Starting daily scan on files updated in last 24 hrs [27-06-2022 05:02:02]8410: WAF :: fetched 60 new logs [27-06-2022 05:03:01]12247: WAF :: fetched 98 new logs [27-06-2022 05:04:02]17063: WAF :: fetched 69 new logs [27-06-2022 05:05:01]19627: WAF :: fetched 68 new logs [27-06-2022 05:06:02]22405: WAF :: fetched 81 new logs [27-06-2022 05:07:02]25019: WAF :: fetched 116 new logs [27-06-2022 05:08:01]27617: WAF :: fetched 97 new logs [27-06-2022 05:09:02]30251: WAF :: fetched 105 new logs [27-06-2022 05:10:02]443: WAF :: fetched 86 new logs [27-06-2022 05:11:01]3242: WAF :: fetched 22 new logs [27-06-2022 05:12:02]5949: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656317522 [27-06-2022 05:12:02]5949: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 05:12:04]5949: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 05:12:04]5949: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-0512/20220627-051202-YrlmUtkwIEVJwSityKparwAAAAA [27-06-2022 05:12:04]5949: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 05:12:05]5949: WAF :: fetched 1813 new logs [27-06-2022 05:13:01]8560: WAF :: fetched 2 new logs [27-06-2022 05:14:02]11189: WAF :: fetched 3 new logs [27-06-2022 05:16:02]16495: WAF :: fetched 3 new logs [27-06-2022 05:17:01]19136: WAF :: fetched 2 new logs [27-06-2022 05:18:02]21752: WAF :: fetched 1 new logs [27-06-2022 05:19:01]24393: WAF :: fetched 1 new logs [27-06-2022 05:20:02]27049: WAF :: fetched 4 new logs [27-06-2022 05:21:01]29762: WAF :: fetched 1 new logs [27-06-2022 05:25:02]7912: WAF :: fetched 2 new logs [27-06-2022 05:26:01]10624: WAF :: fetched 4 new logs [27-06-2022 05:27:02]13278: WAF :: fetched 3 new logs [27-06-2022 05:28:01]15854: WAF :: fetched 1 new logs [27-06-2022 05:29:02]18462: WAF :: fetched 2 new logs [27-06-2022 05:35:02]1935: WAF :: fetched 1 new logs [27-06-2022 05:36:01]4764: WAF :: fetched 1 new logs [27-06-2022 05:37:02]7400: WAF :: fetched 2 new logs [27-06-2022 05:39:02]21702: WAF :: fetched 1 new logs [27-06-2022 05:40:02]25535: WAF :: fetched 4 new logs [27-06-2022 05:41:02]28334: WAF :: fetched 1 new logs [27-06-2022 05:41:02]28334: Checking for user cron vulnerabilities [27-06-2022 05:43:01]1218: WAF :: fetched 1 new logs [27-06-2022 05:44:01]3917: Checking ditributed CMS bruteforce attacks [27-06-2022 05:44:01]3917: WAF :: fetched 2 new logs [27-06-2022 05:45:02]6615: WAF :: fetched 1 new logs [27-06-2022 05:46:01]9372: WAF :: fetched 2 new logs [27-06-2022 05:48:01]14653: WAF :: fetched 2 new logs [27-06-2022 05:50:02]19982: WAF :: fetched 2 new logs [27-06-2022 05:51:01]22714: WAF :: fetched 2 new logs [27-06-2022 05:54:01]30541: WAF :: fetched 3 new logs [27-06-2022 05:55:02]728: WAF :: fetched 8 new logs [27-06-2022 05:56:01]3496: WAF :: fetched 26 new logs [27-06-2022 05:57:02]6166: WAF :: fetched 30 new logs [27-06-2022 05:58:01]8798: WAF :: fetched 27 new logs [27-06-2022 05:59:02]11447: WAF :: fetched 15 new logs [27-06-2022 06:00:02]13852: WAF :: fetched 24 new logs [27-06-2022 06:01:01]17026: WAF :: fetched 24 new logs [27-06-2022 06:02:02]19734: WAF :: fetched 24 new logs [27-06-2022 06:03:01]22320: WAF :: fetched 26 new logs [27-06-2022 06:04:01]24948: WAF :: fetched 47 new logs [27-06-2022 06:05:02]27571: WAF :: fetched 18 new logs [27-06-2022 06:06:01]30276: WAF :: fetched 13 new logs [27-06-2022 06:07:01]454: WAF :: fetched 13 new logs [27-06-2022 06:08:02]3211: WAF :: fetched 23 new logs [27-06-2022 06:09:01]5876: WAF :: fetched 17 new logs [27-06-2022 06:10:01]8542: WAF :: fetched 7 new logs [27-06-2022 06:11:02]11325: WAF :: fetched 7 new logs [27-06-2022 06:12:02]13925: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656321122 [27-06-2022 06:12:02]13925: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 06:12:04]13925: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 06:12:04]13925: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-0612/20220627-061202-Yrl0YvS7MX5710ZMioLrxQAAAAw [27-06-2022 06:12:04]13925: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 06:12:05]13925: WAF :: fetched 1 new logs [27-06-2022 06:13:01]16571: WAF :: fetched 2 new logs [27-06-2022 06:16:01]24589: WAF :: fetched 1 new logs [27-06-2022 06:18:01]29848: WAF :: fetched 3 new logs [27-06-2022 06:22:02]8148: WAF :: fetched 3 new logs [27-06-2022 06:25:01]16011: WAF :: fetched 25 new logs [27-06-2022 06:26:02]18761: WAF :: fetched 3 new logs [27-06-2022 06:29:02]26749: WAF :: fetched 3 new logs [27-06-2022 06:34:02]7663: WAF :: fetched 1 new logs [27-06-2022 06:37:01]15608: WAF :: fetched 1 new logs [27-06-2022 06:38:02]20615: WAF :: fetched 1 new logs [27-06-2022 06:41:02]28597: Checking for user cron vulnerabilities [27-06-2022 06:42:01]31835: WAF :: fetched 1 new logs [27-06-2022 06:44:01]11709: Checking ditributed CMS bruteforce attacks [27-06-2022 06:44:02]11709: WAF :: fetched 1 new logs [27-06-2022 06:45:01]14361: WAF :: fetched 2 new logs [27-06-2022 06:47:01]19753: WAF :: fetched 2 new logs [27-06-2022 06:51:02]30383: WAF :: fetched 1 new logs [27-06-2022 06:52:01]562: WAF :: fetched 4 new logs [27-06-2022 06:53:01]3285: WAF :: fetched 1 new logs [27-06-2022 06:55:01]8614: WAF :: fetched 1 new logs [27-06-2022 06:56:02]11408: WAF :: fetched 2 new logs [27-06-2022 06:57:02]14010: WAF :: fetched 3 new logs [27-06-2022 06:58:01]16657: WAF :: fetched 1 new logs [27-06-2022 07:02:02]27550: WAF :: fetched 1 new logs [27-06-2022 07:03:01]30146: WAF :: fetched 1 new logs [27-06-2022 07:05:02]3093: WAF :: fetched 1 new logs [27-06-2022 07:06:01]5922: WAF :: fetched 1 new logs [27-06-2022 07:07:02]8568: WAF :: fetched 3 new logs [27-06-2022 07:08:01]11161: WAF :: fetched 3 new logs [27-06-2022 07:09:02]13795: WAF :: fetched 1 new logs [27-06-2022 07:12:01]21821: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656324721 [27-06-2022 07:12:01]21821: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 07:12:03]21821: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 07:12:04]21821: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-0712/20220627-071201-YrmCcQb5-Jr10H7FZIQeUgAAAAg [27-06-2022 07:12:04]21821: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [27-06-2022 07:12:04]21821: WAF :: fetched 1 new logs [27-06-2022 07:14:02]27134: WAF :: fetched 1 new logs [27-06-2022 07:16:02]32544: WAF :: fetched 1 new logs [27-06-2022 07:17:01]2813: WAF :: fetched 1 new logs [27-06-2022 07:18:02]5527: WAF :: fetched 1 new logs [27-06-2022 07:19:02]8147: WAF :: fetched 2 new logs [27-06-2022 07:20:01]10807: WAF :: fetched 5 new logs [27-06-2022 07:21:02]13588: WAF :: fetched 1 new logs [27-06-2022 07:26:02]26847: WAF :: fetched 71 new logs [27-06-2022 07:27:02]29460: WAF :: fetched 69 new logs [27-06-2022 07:28:01]32054: WAF :: fetched 66 new logs [27-06-2022 07:29:02]2318: WAF :: fetched 67 new logs [27-06-2022 07:30:01]5025: WAF :: fetched 66 new logs [27-06-2022 07:31:02]7799: WAF :: fetched 71 new logs [27-06-2022 07:32:01]10231: WAF :: fetched 69 new logs [27-06-2022 07:33:02]13053: WAF :: fetched 63 new logs [27-06-2022 07:34:01]15670: WAF :: fetched 67 new logs [27-06-2022 07:35:02]18306: WAF :: fetched 62 new logs [27-06-2022 07:36:01]21085: WAF :: fetched 61 new logs [27-06-2022 07:37:02]23733: WAF :: fetched 67 new logs [27-06-2022 07:38:02]28789: WAF :: fetched 71 new logs [27-06-2022 07:39:01]31410: WAF :: fetched 73 new logs [27-06-2022 07:40:02]1685: WAF :: fetched 64 new logs [27-06-2022 07:41:02]4507: WAF :: fetched 67 new logs [27-06-2022 07:41:02]4507: Checking for user cron vulnerabilities [27-06-2022 07:42:01]8151: WAF :: fetched 71 new logs [27-06-2022 07:43:02]10796: WAF :: fetched 73 new logs [27-06-2022 07:44:01]13409: Checking ditributed CMS bruteforce attacks [27-06-2022 07:44:01]13409: WAF :: fetched 71 new logs [27-06-2022 07:45:02]: Checking for definition updates [27-06-2022 07:45:02]16096: WAF :: fetched 64 new logs [27-06-2022 07:45:06]16088: Updated virus defnition : signatures.ndb [27-06-2022 07:46:02]18830: WAF :: fetched 68 new logs [27-06-2022 07:47:01]21769: WAF :: fetched 70 new logs [27-06-2022 07:48:02]24424: WAF :: fetched 71 new logs [27-06-2022 07:49:01]31783: WAF :: fetched 66 new logs [27-06-2022 07:50:02]2112: WAF :: fetched 64 new logs [27-06-2022 07:51:01]4801: WAF :: fetched 69 new logs [27-06-2022 07:52:02]7656: WAF :: fetched 68 new logs [27-06-2022 07:53:01]10288: WAF :: fetched 70 new logs [27-06-2022 07:54:02]12982: WAF :: fetched 72 new logs [27-06-2022 07:55:02]15627: WAF :: fetched 64 new logs [27-06-2022 07:56:01]18456: WAF :: fetched 70 new logs [27-06-2022 07:57:02]21156: WAF :: fetched 70 new logs [27-06-2022 07:58:02]23798: WAF :: fetched 72 new logs [27-06-2022 07:59:01]26460: WAF :: fetched 69 new logs [27-06-2022 08:00:02]28864: WAF :: fetched 63 new logs [27-06-2022 08:01:01]32098: WAF :: fetched 68 new logs [27-06-2022 08:02:02]2487: WAF :: fetched 70 new logs [27-06-2022 08:03:02]5191: WAF :: fetched 70 new logs [27-06-2022 08:04:01]7863: WAF :: fetched 71 new logs [27-06-2022 08:05:02]10525: WAF :: fetched 65 new logs [27-06-2022 08:06:02]13300: WAF :: fetched 76 new logs [27-06-2022 08:07:02]15964: WAF :: fetched 71 new logs [27-06-2022 08:08:02]18563: WAF :: fetched 71 new logs [27-06-2022 08:09:01]21211: WAF :: fetched 70 new logs [27-06-2022 08:10:02]23872: WAF :: fetched 64 new logs [27-06-2022 08:11:02]26601: WAF :: fetched 73 new logs [27-06-2022 08:12:02]29242: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656328322 [27-06-2022 08:12:02]29242: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 08:12:04]29242: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 08:12:04]29242: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-0812/20220627-081202-YrmQgj-Cr_0iVavkHPFh5wAAAAg [27-06-2022 08:12:04]29242: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 08:12:06]29242: WAF :: fetched 2459 new logs [27-06-2022 08:13:01]31863: WAF :: fetched 53 new logs [27-06-2022 08:14:02]2169: WAF :: fetched 47 new logs [27-06-2022 08:15:01]4869: WAF :: fetched 42 new logs [27-06-2022 08:16:02]7635: WAF :: fetched 48 new logs [27-06-2022 08:17:02]10229: WAF :: fetched 38 new logs [27-06-2022 08:18:01]12862: WAF :: fetched 31 new logs [27-06-2022 08:19:02]15523: WAF :: fetched 51 new logs [27-06-2022 08:20:02]18150: WAF :: fetched 37 new logs [27-06-2022 08:21:01]20927: WAF :: fetched 36 new logs [27-06-2022 08:22:02]23615: WAF :: fetched 57 new logs [27-06-2022 08:23:01]26249: WAF :: fetched 48 new logs [27-06-2022 08:24:02]28918: WAF :: fetched 41 new logs [27-06-2022 08:25:02]31544: WAF :: fetched 53 new logs [27-06-2022 08:26:01]1913: WAF :: fetched 47 new logs [27-06-2022 08:27:02]4676: WAF :: fetched 43 new logs [27-06-2022 08:28:01]7160: WAF :: fetched 49 new logs [27-06-2022 08:29:01]9952: WAF :: fetched 52 new logs [27-06-2022 08:30:02]12597: WAF :: fetched 47 new logs [27-06-2022 08:31:02]15339: WAF :: fetched 53 new logs [27-06-2022 08:32:01]18033: WAF :: fetched 20 new logs [27-06-2022 08:34:01]23346: WAF :: fetched 2 new logs [27-06-2022 08:36:02]28749: WAF :: fetched 2 new logs [27-06-2022 08:37:01]31386: WAF :: fetched 3 new logs [27-06-2022 08:38:01]7614: WAF :: fetched 3 new logs [27-06-2022 08:40:01]15582: WAF :: fetched 1 new logs [27-06-2022 08:41:02]18358: WAF :: fetched 1 new logs [27-06-2022 08:41:02]18358: Checking for user cron vulnerabilities [27-06-2022 08:42:01]20999: WAF :: fetched 2 new logs [27-06-2022 08:43:01]23687: WAF :: fetched 7 new logs [27-06-2022 08:44:02]26370: Checking ditributed CMS bruteforce attacks [27-06-2022 08:44:02]26370: WAF :: fetched 1 new logs [27-06-2022 08:45:01]28991: WAF :: fetched 24 new logs [27-06-2022 08:46:02]31758: WAF :: fetched 11 new logs [27-06-2022 08:47:01]1598: WAF :: fetched 4 new logs [27-06-2022 08:52:02]15548: WAF :: fetched 3 new logs [27-06-2022 08:53:01]18180: WAF :: fetched 2 new logs [27-06-2022 08:54:01]20858: WAF :: fetched 1 new logs [27-06-2022 08:55:02]23502: WAF :: fetched 5 new logs [27-06-2022 08:56:01]26282: WAF :: fetched 4 new logs [27-06-2022 08:57:02]29078: WAF :: fetched 2 new logs [27-06-2022 08:58:02]31739: WAF :: fetched 2 new logs [27-06-2022 08:59:01]2004: WAF :: fetched 7 new logs [27-06-2022 09:00:02]4450: WAF :: fetched 2 new logs [27-06-2022 09:02:01]10371: WAF :: fetched 2 new logs [27-06-2022 09:03:02]13035: WAF :: fetched 2 new logs [27-06-2022 09:04:01]15703: WAF :: fetched 2 new logs [27-06-2022 09:05:02]18372: WAF :: fetched 5 new logs [27-06-2022 09:06:02]21116: WAF :: fetched 1 new logs [27-06-2022 09:07:01]23897: WAF :: fetched 5 new logs [27-06-2022 09:08:02]26566: WAF :: fetched 3 new logs [27-06-2022 09:09:01]29195: WAF :: fetched 2 new logs [27-06-2022 09:10:01]31885: WAF :: fetched 2 new logs [27-06-2022 09:12:01]5056: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656331921 [27-06-2022 09:12:01]5056: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 09:12:03]5056: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 09:12:04]5056: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-0912/20220627-091201-YrmekeVdJWAhc8wtE-N7SgAAABQ [27-06-2022 09:12:04]5056: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 09:12:04]5056: WAF :: fetched 2 new logs [27-06-2022 09:13:01]7738: WAF :: fetched 3 new logs [27-06-2022 09:15:01]13216: WAF :: fetched 2 new logs [27-06-2022 09:16:02]15997: WAF :: fetched 2 new logs [27-06-2022 09:17:02]18695: WAF :: fetched 2 new logs [27-06-2022 09:18:01]21417: WAF :: fetched 3 new logs [27-06-2022 09:19:02]24164: WAF :: fetched 4 new logs [27-06-2022 09:20:01]26862: WAF :: fetched 2 new logs [27-06-2022 09:21:02]29690: WAF :: fetched 2 new logs [27-06-2022 09:22:02]32374: WAF :: fetched 4 new logs [27-06-2022 09:23:01]2694: WAF :: fetched 3 new logs [27-06-2022 09:24:02]5457: WAF :: fetched 1 new logs [27-06-2022 09:25:02]8151: WAF :: fetched 3 new logs [27-06-2022 09:26:01]10896: WAF :: fetched 3 new logs [27-06-2022 09:27:02]13738: WAF :: fetched 3 new logs [27-06-2022 09:28:01]16415: WAF :: fetched 2 new logs [27-06-2022 09:29:02]19179: WAF :: fetched 1 new logs [27-06-2022 09:30:02]21939: WAF :: fetched 1 new logs [27-06-2022 09:31:01]24859: WAF :: fetched 2 new logs [27-06-2022 09:32:02]27789: WAF :: fetched 4 new logs [27-06-2022 09:33:02]30477: WAF :: fetched 3 new logs [27-06-2022 09:34:01]785: WAF :: fetched 5 new logs [27-06-2022 09:35:02]3533: WAF :: fetched 3 new logs [27-06-2022 09:36:02]6357: WAF :: fetched 2 new logs [27-06-2022 09:39:01]22058: WAF :: fetched 1 new logs [27-06-2022 09:40:02]27806: WAF :: fetched 2 new logs [27-06-2022 09:41:02]30466: WAF :: fetched 5 new logs [27-06-2022 09:41:02]30466: Checking for user cron vulnerabilities [27-06-2022 09:42:01]908: WAF :: fetched 3 new logs [27-06-2022 09:43:02]3778: WAF :: fetched 5 new logs [27-06-2022 09:44:01]6518: Checking ditributed CMS bruteforce attacks [27-06-2022 09:44:01]6518: WAF :: fetched 3 new logs [27-06-2022 09:45:02]9301: WAF :: fetched 3 new logs [27-06-2022 09:46:02]12054: WAF :: fetched 1 new logs [27-06-2022 09:48:02]17579: WAF :: fetched 5 new logs [27-06-2022 09:49:01]20269: WAF :: fetched 2 new logs [27-06-2022 09:50:02]23057: WAF :: fetched 5 new logs [27-06-2022 09:51:02]25795: WAF :: fetched 3 new logs [27-06-2022 09:52:01]28618: WAF :: fetched 3 new logs [27-06-2022 09:53:02]31404: WAF :: fetched 1 new logs [27-06-2022 09:54:02]1696: WAF :: fetched 3 new logs [27-06-2022 09:55:01]4467: WAF :: fetched 1 new logs [27-06-2022 09:56:01]7163: WAF :: fetched 1 new logs [27-06-2022 09:57:02]9936: WAF :: fetched 3 new logs [27-06-2022 09:59:02]15333: WAF :: fetched 8 new logs [27-06-2022 10:00:02]17793: WAF :: fetched 1 new logs [27-06-2022 10:01:01]21072: WAF :: fetched 2 new logs [27-06-2022 10:02:02]23890: WAF :: fetched 2 new logs [27-06-2022 10:03:01]26636: WAF :: fetched 1 new logs [27-06-2022 10:04:02]29332: WAF :: fetched 4 new logs [27-06-2022 10:05:02]32027: WAF :: fetched 2 new logs [27-06-2022 10:06:01]2448: WAF :: fetched 4 new logs [27-06-2022 10:07:02]5313: WAF :: fetched 1 new logs [27-06-2022 10:08:01]7967: WAF :: fetched 1 new logs [27-06-2022 10:09:02]10652: WAF :: fetched 3 new logs [27-06-2022 10:10:02]13323: WAF :: fetched 2 new logs [27-06-2022 10:11:01]16046: WAF :: fetched 1 new logs [27-06-2022 10:12:02]18836: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656335522 [27-06-2022 10:12:02]18836: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 10:12:04]18836: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 10:12:04]18836: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-1012/20220627-101202-Yrmsolo_9GP4cXbdcIvQwgAAAAM [27-06-2022 10:12:04]18836: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 10:13:01]21551: WAF :: fetched 1 new logs [27-06-2022 10:14:01]24253: WAF :: fetched 4 new logs [27-06-2022 10:16:02]29716: WAF :: fetched 2 new logs [27-06-2022 10:17:01]32443: WAF :: fetched 1 new logs [27-06-2022 10:18:01]2780: WAF :: fetched 1 new logs [27-06-2022 10:19:01]5572: WAF :: fetched 3 new logs [27-06-2022 10:20:01]8344: WAF :: fetched 3 new logs [27-06-2022 10:22:02]13900: WAF :: fetched 3 new logs [27-06-2022 10:24:02]19262: WAF :: fetched 2 new logs [27-06-2022 10:25:01]21969: WAF :: fetched 3 new logs [27-06-2022 10:26:02]24784: WAF :: fetched 3 new logs [27-06-2022 10:27:02]27513: WAF :: fetched 1 new logs [27-06-2022 10:28:01]30186: WAF :: fetched 4 new logs [27-06-2022 10:29:02]478: WAF :: fetched 4 new logs [27-06-2022 10:30:02]3252: WAF :: fetched 4 new logs [27-06-2022 10:33:02]11631: WAF :: fetched 1 new logs [27-06-2022 10:34:01]14341: WAF :: fetched 1 new logs [27-06-2022 10:35:02]17098: WAF :: fetched 2 new logs [27-06-2022 10:36:02]20004: WAF :: fetched 2 new logs [27-06-2022 10:37:01]22935: WAF :: fetched 4 new logs [27-06-2022 10:38:02]28737: WAF :: fetched 5 new logs [27-06-2022 10:39:02]31473: WAF :: fetched 1 new logs [27-06-2022 10:40:01]1855: WAF :: fetched 4 new logs [27-06-2022 10:41:02]4872: WAF :: fetched 2 new logs [27-06-2022 10:41:02]4872: Checking for user cron vulnerabilities [27-06-2022 10:42:02]7710: WAF :: fetched 1 new logs [27-06-2022 10:43:01]11739: WAF :: fetched 2 new logs [27-06-2022 10:44:02]14532: Checking ditributed CMS bruteforce attacks [27-06-2022 10:44:02]14532: WAF :: fetched 2 new logs [27-06-2022 10:45:02]17271: WAF :: fetched 1 new logs [27-06-2022 10:46:01]20001: WAF :: fetched 1 new logs [27-06-2022 10:47:02]24990: WAF :: fetched 1 new logs [27-06-2022 10:49:02]1586: WAF :: fetched 2 new logs [27-06-2022 10:50:02]4289: WAF :: fetched 3 new logs [27-06-2022 10:52:02]9923: WAF :: fetched 2 new logs [27-06-2022 10:53:02]12716: WAF :: fetched 3 new logs [27-06-2022 10:54:01]15401: WAF :: fetched 3 new logs [27-06-2022 10:55:01]18122: WAF :: fetched 1 new logs [27-06-2022 10:56:02]20862: WAF :: fetched 1 new logs [27-06-2022 10:57:01]23659: WAF :: fetched 1 new logs [27-06-2022 11:01:02]2616: WAF :: fetched 4 new logs [27-06-2022 11:02:01]5559: WAF :: fetched 3 new logs [27-06-2022 11:03:02]8310: WAF :: fetched 2 new logs [27-06-2022 11:04:01]11027: WAF :: fetched 1 new logs [27-06-2022 11:05:01]13797: WAF :: fetched 3 new logs [27-06-2022 11:06:02]16655: WAF :: fetched 1 new logs [27-06-2022 11:07:01]19423: WAF :: fetched 1 new logs [27-06-2022 11:08:02]19589: Performed RBL check for 23.111.136.34. [27-06-2022 11:08:02]22252: WAF :: fetched 4 new logs [27-06-2022 11:11:02]30556: WAF :: fetched 4 new logs [27-06-2022 11:12:02]951: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656339122 [27-06-2022 11:12:02]951: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 11:12:04]951: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 11:12:04]951: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-1112/20220627-111202-Yrm6stLVV9-P2n-6I9KRegAAACM [27-06-2022 11:12:04]951: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 11:12:04]951: WAF :: fetched 4 new logs [27-06-2022 11:13:01]3649: WAF :: fetched 1 new logs [27-06-2022 11:14:02]6448: WAF :: fetched 1 new logs [27-06-2022 11:15:01]9138: WAF :: fetched 1 new logs [27-06-2022 11:16:02]11893: WAF :: fetched 1 new logs [27-06-2022 11:18:01]17367: WAF :: fetched 1 new logs [27-06-2022 11:20:01]22775: WAF :: fetched 1 new logs [27-06-2022 11:21:02]25577: WAF :: fetched 1 new logs [27-06-2022 11:27:02]10014: WAF :: fetched 4 new logs [27-06-2022 11:29:01]15463: WAF :: fetched 4 new logs [27-06-2022 11:30:02]18264: WAF :: fetched 7 new logs [27-06-2022 11:36:02]2761: WAF :: fetched 2 new logs [27-06-2022 11:37:01]5647: WAF :: fetched 1 new logs [27-06-2022 11:41:01]24749: Checking for user cron vulnerabilities [27-06-2022 11:42:01]27968: WAF :: fetched 1 new logs [27-06-2022 11:44:01]1042: Checking ditributed CMS bruteforce attacks [27-06-2022 11:44:01]1042: WAF :: fetched 2 new logs [27-06-2022 11:46:02]6810: WAF :: fetched 1 new logs [27-06-2022 11:47:02]9665: WAF :: fetched 3 new logs [27-06-2022 11:48:01]12439: WAF :: fetched 1 new logs [27-06-2022 11:50:02]17886: WAF :: fetched 1 new logs [27-06-2022 11:52:01]23536: WAF :: fetched 2 new logs [27-06-2022 11:53:02]26366: WAF :: fetched 2 new logs [27-06-2022 11:54:02]29144: WAF :: fetched 2 new logs [27-06-2022 11:55:01]31960: WAF :: fetched 2 new logs [27-06-2022 11:56:02]2417: WAF :: fetched 83 new logs [27-06-2022 11:57:01]5303: WAF :: fetched 2 new logs [27-06-2022 11:58:01]8127: WAF :: fetched 1 new logs [27-06-2022 12:01:02]16808: WAF :: fetched 3 new logs [27-06-2022 12:03:02]22508: WAF :: fetched 1 new logs [27-06-2022 12:04:01]25289: WAF :: fetched 5 new logs [27-06-2022 12:05:02]28117: WAF :: fetched 3 new logs [27-06-2022 12:06:02]30954: WAF :: fetched 2 new logs [27-06-2022 12:07:01]1441: WAF :: fetched 1 new logs [27-06-2022 12:08:02]4373: WAF :: fetched 2 new logs [27-06-2022 12:09:02]7199: WAF :: fetched 2 new logs [27-06-2022 12:10:01]9998: WAF :: fetched 1 new logs [27-06-2022 12:11:02]12903: WAF :: fetched 4 new logs [27-06-2022 12:12:02]15758: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656342722 [27-06-2022 12:12:02]15758: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 12:12:04]15758: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 12:12:04]15758: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-1212/20220627-121202-YrnIwus4DObWc6OcPWVjiAAAAA8 [27-06-2022 12:12:04]15758: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 12:12:04]15758: WAF :: fetched 4 new logs [27-06-2022 12:14:02]21365: WAF :: fetched 2 new logs [27-06-2022 12:16:01]27762: WAF :: fetched 1 new logs [27-06-2022 12:17:01]30556: WAF :: fetched 1 new logs [27-06-2022 12:18:01]921: WAF :: fetched 3 new logs [27-06-2022 12:19:02]3747: WAF :: fetched 6 new logs [27-06-2022 12:20:02]6500: WAF :: fetched 4 new logs [27-06-2022 12:21:01]9273: WAF :: fetched 1 new logs [27-06-2022 12:22:01]12098: WAF :: fetched 3 new logs [27-06-2022 12:23:02]14873: WAF :: fetched 2 new logs [27-06-2022 12:24:01]17606: WAF :: fetched 2 new logs [27-06-2022 12:25:02]20441: WAF :: fetched 4 new logs [27-06-2022 12:26:01]23314: WAF :: fetched 3 new logs [27-06-2022 12:27:02]26136: WAF :: fetched 2 new logs [27-06-2022 12:29:01]31688: WAF :: fetched 1 new logs [27-06-2022 12:30:02]2202: WAF :: fetched 2 new logs [27-06-2022 12:31:02]5150: WAF :: fetched 1 new logs [27-06-2022 12:32:01]8053: WAF :: fetched 7 new logs [27-06-2022 12:33:02]10914: WAF :: fetched 3 new logs [27-06-2022 12:34:02]13705: WAF :: fetched 4 new logs [27-06-2022 12:35:01]16569: WAF :: fetched 1 new logs [27-06-2022 12:36:02]19459: WAF :: fetched 1 new logs [27-06-2022 12:38:01]32632: WAF :: fetched 2 new logs [27-06-2022 12:39:02]3104: WAF :: fetched 1 new logs [27-06-2022 12:40:01]5969: WAF :: fetched 2 new logs [27-06-2022 12:41:01]8885: WAF :: fetched 2 new logs [27-06-2022 12:41:01]8885: Checking for user cron vulnerabilities [27-06-2022 12:42:01]11748: WAF :: fetched 2 new logs [27-06-2022 12:43:02]14511: WAF :: fetched 2 new logs [27-06-2022 12:44:01]17222: Checking ditributed CMS bruteforce attacks [27-06-2022 12:44:01]17222: WAF :: fetched 2 new logs [27-06-2022 12:45:02]: Checking for software updates [27-06-2022 12:45:02]20030: WAF :: fetched 4 new logs [27-06-2022 12:46:02]22828: WAF :: fetched 4 new logs [27-06-2022 12:47:02]25689: WAF :: fetched 1 new logs [27-06-2022 12:50:02]1641: WAF :: fetched 1 new logs [27-06-2022 12:51:01]4537: WAF :: fetched 1 new logs [27-06-2022 12:53:01]10150: WAF :: fetched 1 new logs [27-06-2022 12:54:02]12923: WAF :: fetched 1 new logs [27-06-2022 12:56:01]18441: WAF :: fetched 3 new logs [27-06-2022 12:57:02]21290: WAF :: fetched 2 new logs [27-06-2022 12:58:01]24026: WAF :: fetched 3 new logs [27-06-2022 12:59:02]26811: WAF :: fetched 1 new logs [27-06-2022 13:00:02]29288: WAF :: fetched 2 new logs [27-06-2022 13:01:01]32531: WAF :: fetched 2 new logs [27-06-2022 13:03:01]5692: WAF :: fetched 1 new logs [27-06-2022 13:04:01]8461: WAF :: fetched 1 new logs [27-06-2022 13:05:02]11119: WAF :: fetched 3 new logs [27-06-2022 13:07:02]16633: WAF :: fetched 4 new logs [27-06-2022 13:08:01]19332: WAF :: fetched 3 new logs [27-06-2022 13:10:02]24756: WAF :: fetched 1 new logs [27-06-2022 13:12:02]30272: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656346322 [27-06-2022 13:12:02]30272: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 13:12:04]30272: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 13:12:04]30272: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-1312/20220627-131202-YrnW0sot3g3DweUascz8SwAAABk [27-06-2022 13:12:04]30272: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 13:12:04]30272: WAF :: fetched 1 new logs [27-06-2022 13:15:02]5951: WAF :: fetched 1 new logs [27-06-2022 13:16:01]8689: WAF :: fetched 1 new logs [27-06-2022 13:17:02]11527: WAF :: fetched 2 new logs [27-06-2022 13:18:02]14223: WAF :: fetched 3 new logs [27-06-2022 13:20:01]19586: WAF :: fetched 2 new logs [27-06-2022 13:21:02]22337: WAF :: fetched 2 new logs [27-06-2022 13:22:01]25090: WAF :: fetched 3 new logs [27-06-2022 13:23:02]27789: WAF :: fetched 1 new logs [27-06-2022 13:24:02]30535: WAF :: fetched 5 new logs [27-06-2022 13:25:01]820: WAF :: fetched 3 new logs [27-06-2022 13:26:02]3670: WAF :: fetched 1 new logs [27-06-2022 13:28:02]9193: WAF :: fetched 4 new logs [27-06-2022 13:29:02]11894: WAF :: fetched 1 new logs [27-06-2022 13:31:02]17451: WAF :: fetched 1 new logs [27-06-2022 13:33:02]23083: WAF :: fetched 6 new logs [27-06-2022 13:34:02]25804: WAF :: fetched 4 new logs [27-06-2022 13:35:01]28489: WAF :: fetched 3 new logs [27-06-2022 13:36:02]31214: WAF :: fetched 6 new logs [27-06-2022 13:37:02]1542: WAF :: fetched 2 new logs [27-06-2022 13:39:02]7607: WAF :: fetched 1 new logs [27-06-2022 13:40:01]10281: WAF :: fetched 3 new logs [27-06-2022 13:41:01]12980: WAF :: fetched 2 new logs [27-06-2022 13:41:01]12980: Checking for user cron vulnerabilities [27-06-2022 13:42:02]15790: WAF :: fetched 5 new logs [27-06-2022 13:43:01]18408: WAF :: fetched 5 new logs [27-06-2022 13:44:02]21168: Checking ditributed CMS bruteforce attacks [27-06-2022 13:44:02]21168: WAF :: fetched 5 new logs [27-06-2022 13:45:01]: Checking for definition updates [27-06-2022 13:45:01]23818: WAF :: fetched 2 new logs [27-06-2022 13:46:01]26507: WAF :: fetched 2 new logs [27-06-2022 13:47:02]29319: WAF :: fetched 4 new logs [27-06-2022 13:48:01]567: WAF :: fetched 1 new logs [27-06-2022 13:52:02]14190: WAF :: fetched 2 new logs [27-06-2022 13:54:02]19535: WAF :: fetched 2 new logs [27-06-2022 13:57:02]28072: WAF :: fetched 2 new logs [27-06-2022 13:58:01]3497: WAF :: fetched 2 new logs [27-06-2022 14:01:01]11919: WAF :: fetched 1 new logs [27-06-2022 14:02:02]14685: WAF :: fetched 1 new logs [27-06-2022 14:05:02]22732: WAF :: fetched 1 new logs [27-06-2022 14:06:02]25503: WAF :: fetched 2 new logs [27-06-2022 14:07:01]28209: WAF :: fetched 1 new logs [27-06-2022 14:10:01]3910: WAF :: fetched 2 new logs [27-06-2022 14:12:01]9418: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656349921 [27-06-2022 14:12:01]9418: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 14:12:03]9418: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 14:12:04]9418: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-1412/20220627-141201-Yrnk4Z2M7PrSe0TObqOokQAAAAw [27-06-2022 14:12:04]9418: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 14:12:04]9418: WAF :: fetched 3 new logs [27-06-2022 14:13:01]12207: WAF :: fetched 2 new logs [27-06-2022 14:14:02]14901: WAF :: fetched 1 new logs [27-06-2022 14:16:01]20302: WAF :: fetched 2 new logs [27-06-2022 14:17:02]23025: WAF :: fetched 3 new logs [27-06-2022 14:18:02]25786: WAF :: fetched 3 new logs [27-06-2022 14:20:02]31208: WAF :: fetched 1 new logs [27-06-2022 14:21:01]1555: WAF :: fetched 1 new logs [27-06-2022 14:23:02]7111: WAF :: fetched 1 new logs [27-06-2022 14:26:01]15058: WAF :: fetched 4 new logs [27-06-2022 14:27:02]17805: WAF :: fetched 2 new logs [27-06-2022 14:28:01]20612: WAF :: fetched 2 new logs [27-06-2022 14:29:01]23263: WAF :: fetched 3 new logs [27-06-2022 14:30:02]26030: WAF :: fetched 1 new logs [27-06-2022 14:31:02]28695: WAF :: fetched 1 new logs [27-06-2022 14:32:01]31383: WAF :: fetched 1 new logs [27-06-2022 14:33:02]1762: WAF :: fetched 1 new logs [27-06-2022 14:35:01]7169: WAF :: fetched 4 new logs [27-06-2022 14:36:02]9887: WAF :: fetched 2 new logs [27-06-2022 14:37:01]12568: WAF :: fetched 2 new logs [27-06-2022 14:38:01]20136: WAF :: fetched 3 new logs [27-06-2022 14:40:02]30647: WAF :: fetched 1 new logs [27-06-2022 14:41:01]976: WAF :: fetched 2 new logs [27-06-2022 14:41:01]976: Checking for user cron vulnerabilities [27-06-2022 14:42:02]3735: WAF :: fetched 2 new logs [27-06-2022 14:44:01]9211: Checking ditributed CMS bruteforce attacks [27-06-2022 14:44:01]9211: WAF :: fetched 2 new logs [27-06-2022 14:45:02]11891: WAF :: fetched 2 new logs [27-06-2022 14:47:01]17251: WAF :: fetched 2 new logs [27-06-2022 14:48:02]20011: WAF :: fetched 2 new logs [27-06-2022 14:49:01]22687: WAF :: fetched 3 new logs [27-06-2022 14:50:02]25378: WAF :: fetched 3 new logs [27-06-2022 14:51:02]28056: WAF :: fetched 1 new logs [27-06-2022 14:53:02]1042: WAF :: fetched 1 new logs [27-06-2022 14:53:03]1039: Updated license status via CDN [27-06-2022 14:55:01]6477: WAF :: fetched 5 new logs [27-06-2022 14:56:02]9216: WAF :: fetched 8 new logs [27-06-2022 14:57:01]11836: WAF :: fetched 1 new logs [27-06-2022 14:58:02]14633: WAF :: fetched 6 new logs [27-06-2022 14:59:02]17323: WAF :: fetched 5 new logs [27-06-2022 15:00:02]19705: WAF :: fetched 1 new logs [27-06-2022 15:01:01]22876: Reseting cPGuard inotify settings [27-06-2022 15:01:01]22877: WAF :: fetched 7 new logs [27-06-2022 15:02:02]25604: WAF :: fetched 4 new logs [27-06-2022 15:03:01]28274: WAF :: fetched 4 new logs [27-06-2022 15:05:02]1159: WAF :: fetched 3 new logs [27-06-2022 15:06:02]3987: WAF :: fetched 4 new logs [27-06-2022 15:07:01]6738: WAF :: fetched 2 new logs [27-06-2022 15:11:02]17699: WAF :: fetched 1 new logs [27-06-2022 15:12:01]20394: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656353521 [27-06-2022 15:12:01]20394: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 15:12:03]20394: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 15:12:03]20394: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-1512/20220627-151201-Yrny8RzZyg8qfIY3Vc8sFwAAAEA [27-06-2022 15:12:03]20394: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 15:12:04]20394: WAF :: fetched 3 new logs [27-06-2022 15:14:02]25801: WAF :: fetched 1 new logs [27-06-2022 15:17:01]1477: WAF :: fetched 4 new logs [27-06-2022 15:18:02]4344: WAF :: fetched 1 new logs [27-06-2022 15:19:02]7096: WAF :: fetched 6 new logs [27-06-2022 15:20:02]9793: WAF :: fetched 3 new logs [27-06-2022 15:21:01]12507: WAF :: fetched 2 new logs [27-06-2022 15:22:02]15219: WAF :: fetched 2 new logs [27-06-2022 15:23:02]17960: WAF :: fetched 1 new logs [27-06-2022 15:24:01]20632: WAF :: fetched 4 new logs [27-06-2022 15:25:02]23364: WAF :: fetched 1 new logs [27-06-2022 15:26:02]26121: WAF :: fetched 5 new logs [27-06-2022 15:27:02]28753: WAF :: fetched 27 new logs [27-06-2022 15:28:01]31283: WAF :: fetched 26 new logs [27-06-2022 15:29:02]1888: WAF :: fetched 1 new logs [27-06-2022 15:30:02]4761: WAF :: fetched 4 new logs [27-06-2022 15:31:01]7568: WAF :: fetched 4 new logs [27-06-2022 15:32:02]10239: WAF :: fetched 3 new logs [27-06-2022 15:33:01]13022: WAF :: fetched 23 new logs [27-06-2022 15:34:01]15725: WAF :: fetched 2 new logs [27-06-2022 15:35:02]18404: WAF :: fetched 5 new logs [27-06-2022 15:36:02]21187: WAF :: fetched 15 new logs [27-06-2022 15:37:01]23899: WAF :: fetched 12 new logs [27-06-2022 15:38:02]27953: WAF :: fetched 17 new logs [27-06-2022 15:39:01]30632: WAF :: fetched 6 new logs [27-06-2022 15:40:01]975: WAF :: fetched 1 new logs [27-06-2022 15:41:02]3834: WAF :: fetched 15 new logs [27-06-2022 15:41:02]3834: Checking for user cron vulnerabilities [27-06-2022 15:42:01]10587: WAF :: fetched 8 new logs [27-06-2022 15:43:02]13430: WAF :: fetched 7 new logs [27-06-2022 15:44:01]15720: Checking ditributed CMS bruteforce attacks [27-06-2022 15:44:01]15720: WAF :: fetched 1 new logs [27-06-2022 15:45:02]18820: WAF :: fetched 1 new logs [27-06-2022 15:46:01]21558: WAF :: fetched 3 new logs [27-06-2022 15:47:02]25190: WAF :: fetched 3 new logs [27-06-2022 15:48:02]27997: WAF :: fetched 28 new logs [27-06-2022 15:49:02]30712: WAF :: fetched 1 new logs [27-06-2022 15:50:01]1041: WAF :: fetched 4 new logs [27-06-2022 15:51:01]6177: WAF :: fetched 14 new logs [27-06-2022 15:52:02]8902: WAF :: fetched 20 new logs [27-06-2022 15:54:02]14359: WAF :: fetched 1 new logs [27-06-2022 15:55:01]17054: WAF :: fetched 3 new logs [27-06-2022 15:56:02]19871: WAF :: fetched 12 new logs [27-06-2022 15:57:02]22595: WAF :: fetched 27 new logs [27-06-2022 15:58:01]25368: WAF :: fetched 3 new logs [27-06-2022 15:59:02]28059: WAF :: fetched 1 new logs [27-06-2022 16:00:02]30469: WAF :: fetched 8 new logs [27-06-2022 16:01:01]1241: WAF :: fetched 22 new logs [27-06-2022 16:02:02]4134: WAF :: fetched 42 new logs [27-06-2022 16:03:01]6927: WAF :: fetched 51 new logs [27-06-2022 16:04:01]9626: WAF :: fetched 17 new logs [27-06-2022 16:08:02]20690: WAF :: fetched 7 new logs [27-06-2022 16:09:02]23432: WAF :: fetched 4 new logs [27-06-2022 16:11:02]28971: WAF :: fetched 2 new logs [27-06-2022 16:12:02]31662: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656357122 [27-06-2022 16:12:03]31662: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 16:12:05]31662: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 16:12:05]31662: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-1612/20220627-161203-YroBA2xP-Kx-WAGSfwTQJAAAACI [27-06-2022 16:12:05]31662: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 16:12:05]31662: WAF :: fetched 7 new logs [27-06-2022 16:13:01]2042: WAF :: fetched 21 new logs [27-06-2022 16:14:01]4816: WAF :: fetched 53 new logs [27-06-2022 16:15:01]7522: WAF :: fetched 32 new logs [27-06-2022 16:16:02]10303: WAF :: fetched 37 new logs [27-06-2022 16:17:01]12976: WAF :: fetched 15 new logs [27-06-2022 16:18:02]15790: WAF :: fetched 1 new logs [27-06-2022 16:19:02]18468: WAF :: fetched 24 new logs [27-06-2022 16:20:01]21189: WAF :: fetched 2 new logs [27-06-2022 16:21:02]24011: WAF :: fetched 4 new logs [27-06-2022 16:22:02]26809: WAF :: fetched 1 new logs [27-06-2022 16:24:02]32305: WAF :: fetched 2 new logs [27-06-2022 16:25:01]2620: WAF :: fetched 6 new logs [27-06-2022 16:26:01]5489: WAF :: fetched 30 new logs [27-06-2022 16:28:02]11100: WAF :: fetched 16 new logs [27-06-2022 16:29:02]13897: WAF :: fetched 46 new logs [27-06-2022 16:30:01]16655: WAF :: fetched 96 new logs [27-06-2022 16:31:02]19427: WAF :: fetched 3 new logs [27-06-2022 16:32:02]22134: WAF :: fetched 48 new logs [27-06-2022 16:33:01]24998: WAF :: fetched 32 new logs [27-06-2022 16:34:02]27759: WAF :: fetched 17 new logs [27-06-2022 16:35:02]30443: WAF :: fetched 2 new logs [27-06-2022 16:36:01]912: WAF :: fetched 6 new logs [27-06-2022 16:37:02]3754: WAF :: fetched 8 new logs [27-06-2022 16:38:01]6646: WAF :: fetched 5 new logs [27-06-2022 16:39:02]9433: WAF :: fetched 6 new logs [27-06-2022 16:40:02]16658: WAF :: fetched 9 new logs [27-06-2022 16:41:02]20248: WAF :: fetched 15 new logs [27-06-2022 16:41:02]20248: Checking for user cron vulnerabilities [27-06-2022 16:42:01]22981: WAF :: fetched 4 new logs [27-06-2022 16:43:02]25781: WAF :: fetched 3 new logs [27-06-2022 16:44:01]28485: Checking ditributed CMS bruteforce attacks [27-06-2022 16:44:01]28485: WAF :: fetched 3 new logs [27-06-2022 16:45:02]2109: WAF :: fetched 7 new logs [27-06-2022 16:46:02]5178: WAF :: fetched 4 new logs [27-06-2022 16:47:01]9508: WAF :: fetched 1 new logs [27-06-2022 16:48:01]13798: WAF :: fetched 4 new logs [27-06-2022 16:50:02]19554: WAF :: fetched 16 new logs [27-06-2022 16:51:02]22371: WAF :: fetched 6 new logs [27-06-2022 16:52:01]25255: WAF :: fetched 1 new logs [27-06-2022 16:53:02]28201: WAF :: fetched 16 new logs [27-06-2022 16:54:01]30987: WAF :: fetched 13 new logs [27-06-2022 16:55:02]1404: WAF :: fetched 2 new logs [27-06-2022 16:56:02]4288: WAF :: fetched 14 new logs [27-06-2022 16:57:01]7096: WAF :: fetched 2 new logs [27-06-2022 16:58:02]9899: WAF :: fetched 37 new logs [27-06-2022 16:59:01]12589: WAF :: fetched 4 new logs [27-06-2022 17:00:02]15074: WAF :: fetched 15 new logs [27-06-2022 17:01:01]18276: WAF :: fetched 7 new logs [27-06-2022 17:02:01]21022: WAF :: fetched 1 new logs [27-06-2022 17:03:02]23882: WAF :: fetched 7 new logs [27-06-2022 17:04:01]26596: WAF :: fetched 25 new logs [27-06-2022 17:05:02]29318: WAF :: fetched 10 new logs [27-06-2022 17:06:01]32075: WAF :: fetched 2 new logs [27-06-2022 17:07:01]2458: WAF :: fetched 36 new logs [27-06-2022 17:08:02]5313: WAF :: fetched 6 new logs [27-06-2022 17:09:01]8068: WAF :: fetched 5 new logs [27-06-2022 17:10:02]10842: WAF :: fetched 24 new logs [27-06-2022 17:11:01]13518: WAF :: fetched 2 new logs [27-06-2022 17:12:02]16243: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656360722 [27-06-2022 17:12:02]16243: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 17:12:04]16243: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 17:12:04]16243: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-1712/20220627-171202-YroPEgAEv06RZaSrD2EbHQAAACc [27-06-2022 17:12:04]16243: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 17:12:04]16243: WAF :: fetched 1 new logs [27-06-2022 17:13:01]18984: WAF :: fetched 2 new logs [27-06-2022 17:15:02]24366: WAF :: fetched 1 new logs [27-06-2022 17:16:01]27109: WAF :: fetched 1 new logs [27-06-2022 17:17:02]29772: WAF :: fetched 1 new logs [27-06-2022 17:18:02]32521: WAF :: fetched 1 new logs [27-06-2022 17:20:02]5560: WAF :: fetched 26 new logs [27-06-2022 17:21:01]7914: WAF :: fetched 2 new logs [27-06-2022 17:23:01]13720: WAF :: fetched 4 new logs [27-06-2022 17:26:01]21689: WAF :: fetched 1 new logs [27-06-2022 17:27:02]24398: WAF :: fetched 2 new logs [27-06-2022 17:29:02]29782: WAF :: fetched 1 new logs [27-06-2022 17:30:02]32404: WAF :: fetched 5 new logs [27-06-2022 17:31:01]2715: WAF :: fetched 4 new logs [27-06-2022 17:32:02]5487: WAF :: fetched 2 new logs [27-06-2022 17:33:01]8261: WAF :: fetched 3 new logs [27-06-2022 17:36:01]16268: WAF :: fetched 2 new logs [27-06-2022 17:37:02]18927: WAF :: fetched 1 new logs [27-06-2022 17:38:01]29670: WAF :: fetched 3 new logs [27-06-2022 17:40:02]2580: WAF :: fetched 1 new logs [27-06-2022 17:41:01]5396: WAF :: fetched 3 new logs [27-06-2022 17:41:01]5396: Checking for user cron vulnerabilities [27-06-2022 17:42:02]8081: WAF :: fetched 1 new logs [27-06-2022 17:43:02]10792: WAF :: fetched 3 new logs [27-06-2022 17:44:01]13169: Checking ditributed CMS bruteforce attacks [27-06-2022 17:44:01]13169: WAF :: fetched 3 new logs [27-06-2022 17:45:02]16067: WAF :: fetched 3 new logs [27-06-2022 17:46:02]18777: WAF :: fetched 1 new logs [27-06-2022 17:47:01]21420: WAF :: fetched 2 new logs [27-06-2022 17:48:02]24149: WAF :: fetched 1 new logs [27-06-2022 17:50:02]29484: WAF :: fetched 3 new logs [27-06-2022 17:51:01]32056: WAF :: fetched 2 new logs [27-06-2022 17:52:02]2458: WAF :: fetched 4 new logs [27-06-2022 17:53:01]5213: WAF :: fetched 1 new logs [27-06-2022 17:54:01]7940: WAF :: fetched 2 new logs [27-06-2022 17:55:02]10600: WAF :: fetched 3 new logs [27-06-2022 17:56:02]13274: WAF :: fetched 6 new logs [27-06-2022 17:57:01]15592: WAF :: fetched 4 new logs [27-06-2022 17:59:02]21372: WAF :: fetched 5 new logs [27-06-2022 18:01:01]26995: WAF :: fetched 2 new logs [27-06-2022 18:02:02]29649: WAF :: fetched 1 new logs [27-06-2022 18:03:02]32395: WAF :: fetched 2 new logs [27-06-2022 18:04:01]2701: WAF :: fetched 3 new logs [27-06-2022 18:05:02]5432: WAF :: fetched 1 new logs [27-06-2022 18:06:01]8123: WAF :: fetched 2 new logs [27-06-2022 18:07:02]10791: WAF :: fetched 3 new logs [27-06-2022 18:08:01]13471: WAF :: fetched 1 new logs [27-06-2022 18:09:01]16116: WAF :: fetched 3 new logs [27-06-2022 18:10:02]18784: WAF :: fetched 2 new logs [27-06-2022 18:11:01]21524: WAF :: fetched 6 new logs [27-06-2022 18:12:02]24186: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656364322 [27-06-2022 18:12:02]24186: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 18:12:04]24186: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 18:12:04]24186: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-1812/20220627-181202-YrodIjWuYdNHxW8wphgLiQAAACQ [27-06-2022 18:12:04]24186: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 18:12:04]24186: WAF :: fetched 1 new logs [27-06-2022 18:13:01]26904: WAF :: fetched 3 new logs [27-06-2022 18:14:01]29540: WAF :: fetched 3 new logs [27-06-2022 18:15:02]32237: WAF :: fetched 1 new logs [27-06-2022 18:16:01]2425: WAF :: fetched 3 new logs [27-06-2022 18:17:02]5285: WAF :: fetched 1 new logs [27-06-2022 18:18:01]8034: WAF :: fetched 1 new logs [27-06-2022 18:20:02]13308: WAF :: fetched 2 new logs [27-06-2022 18:21:01]16026: WAF :: fetched 1 new logs [27-06-2022 18:22:02]18685: WAF :: fetched 3 new logs [27-06-2022 18:23:01]21521: WAF :: fetched 2 new logs [27-06-2022 18:24:02]24215: WAF :: fetched 3 new logs [27-06-2022 18:25:02]26940: WAF :: fetched 3 new logs [27-06-2022 18:26:01]29687: WAF :: fetched 1 new logs [27-06-2022 18:27:02]32351: WAF :: fetched 1 new logs [27-06-2022 18:28:01]2644: WAF :: fetched 3 new logs [27-06-2022 18:29:01]5299: WAF :: fetched 3 new logs [27-06-2022 18:30:02]7989: WAF :: fetched 1 new logs [27-06-2022 18:31:01]10653: WAF :: fetched 1 new logs [27-06-2022 18:32:02]13304: WAF :: fetched 2 new logs [27-06-2022 18:33:02]15995: WAF :: fetched 2 new logs [27-06-2022 18:34:01]18646: WAF :: fetched 4 new logs [27-06-2022 18:35:02]21352: WAF :: fetched 1 new logs [27-06-2022 18:36:01]24057: WAF :: fetched 1 new logs [27-06-2022 18:37:02]26743: WAF :: fetched 1 new logs [27-06-2022 18:38:02]5174: WAF :: fetched 7 new logs [27-06-2022 18:39:01]7823: WAF :: fetched 6 new logs [27-06-2022 18:41:01]13185: WAF :: fetched 1 new logs [27-06-2022 18:41:01]13185: Checking for user cron vulnerabilities [27-06-2022 18:42:01]15819: WAF :: fetched 2 new logs [27-06-2022 18:43:01]18540: WAF :: fetched 1 new logs [27-06-2022 18:44:01]21197: Checking ditributed CMS bruteforce attacks [27-06-2022 18:45:02]23832: WAF :: fetched 1 new logs [27-06-2022 18:46:02]26504: WAF :: fetched 9 new logs [27-06-2022 18:47:01]28878: WAF :: fetched 23 new logs [27-06-2022 18:48:02]31869: WAF :: fetched 3 new logs [27-06-2022 18:49:01]2102: WAF :: fetched 2 new logs [27-06-2022 18:50:01]4836: WAF :: fetched 7 new logs [27-06-2022 18:51:02]7523: WAF :: fetched 3 new logs [27-06-2022 18:53:01]12787: WAF :: fetched 1 new logs [27-06-2022 18:54:02]15444: WAF :: fetched 3 new logs [27-06-2022 18:55:01]18028: WAF :: fetched 12 new logs [27-06-2022 18:56:02]20797: WAF :: fetched 18 new logs [27-06-2022 18:57:01]23440: WAF :: fetched 2 new logs [27-06-2022 18:58:01]26116: WAF :: fetched 3 new logs [27-06-2022 19:00:01]31138: WAF :: fetched 5 new logs [27-06-2022 19:01:01]1855: WAF :: fetched 1 new logs [27-06-2022 19:02:02]4657: WAF :: fetched 3 new logs [27-06-2022 19:03:01]7388: WAF :: fetched 1 new logs [27-06-2022 19:06:01]15500: WAF :: fetched 1 new logs [27-06-2022 19:07:02]18221: WAF :: fetched 1 new logs [27-06-2022 19:08:01]20870: WAF :: fetched 3 new logs [27-06-2022 19:09:01]23648: WAF :: fetched 2 new logs [27-06-2022 19:10:01]26376: WAF :: fetched 2 new logs [27-06-2022 19:11:01]29092: WAF :: fetched 1 new logs [27-06-2022 19:12:01]31736: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656367921 [27-06-2022 19:12:01]31736: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 19:12:03]31736: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 19:12:04]31736: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-1912/20220627-191201-YrorMc6yvyypIV0-arwWyAAAADw [27-06-2022 19:12:04]31736: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 19:12:04]31736: WAF :: fetched 5 new logs [27-06-2022 19:13:01]1987: WAF :: fetched 1 new logs [27-06-2022 19:14:01]4820: WAF :: fetched 2 new logs [27-06-2022 19:16:01]10042: WAF :: fetched 1 new logs [27-06-2022 19:17:02]12765: WAF :: fetched 3 new logs [27-06-2022 19:18:02]15393: WAF :: fetched 6 new logs [27-06-2022 19:20:01]20725: WAF :: fetched 1 new logs [27-06-2022 19:20:01]20692: httpd.conf changed. Refreshing watchlist. [27-06-2022 19:21:02]23582: httpd.conf changed. Refreshing watchlist. [27-06-2022 19:21:02]23578: WAF :: fetched 4 new logs [27-06-2022 19:22:02]26254: WAF :: fetched 1 new logs [27-06-2022 19:25:01]1918: WAF :: fetched 9 new logs [27-06-2022 19:25:01]1920: httpd.conf changed. Refreshing watchlist. [27-06-2022 19:26:02]4712: WAF :: fetched 4 new logs [27-06-2022 19:28:02]9981: WAF :: fetched 12 new logs [27-06-2022 19:29:01]12660: WAF :: fetched 8 new logs [27-06-2022 19:30:01]15314: WAF :: fetched 5 new logs [27-06-2022 19:31:02]18030: WAF :: fetched 9 new logs [27-06-2022 19:32:01]20631: WAF :: fetched 3 new logs [27-06-2022 19:34:02]25957: WAF :: fetched 2 new logs [27-06-2022 19:35:01]28599: WAF :: fetched 4 new logs [27-06-2022 19:36:02]31338: WAF :: fetched 2 new logs [27-06-2022 19:37:01]1546: WAF :: fetched 2 new logs [27-06-2022 19:38:01]9526: WAF :: fetched 2 new logs [27-06-2022 19:39:02]16416: WAF :: fetched 3 new logs [27-06-2022 19:40:01]19038: WAF :: fetched 2 new logs [27-06-2022 19:41:02]21734: WAF :: fetched 1 new logs [27-06-2022 19:41:02]21734: Checking for user cron vulnerabilities [27-06-2022 19:43:01]26989: WAF :: fetched 2 new logs [27-06-2022 19:44:01]29678: Checking ditributed CMS bruteforce attacks [27-06-2022 19:44:01]29678: WAF :: fetched 2 new logs [27-06-2022 19:45:02]: Checking for definition updates [27-06-2022 19:45:02]32390: WAF :: fetched 3 new logs [27-06-2022 19:45:06]32388: Updated virus defnition : malware.expert.ndb [27-06-2022 19:46:01]2689: WAF :: fetched 2 new logs [27-06-2022 19:47:01]5402: WAF :: fetched 6 new logs [27-06-2022 19:48:02]8044: WAF :: fetched 6 new logs [27-06-2022 19:49:01]10722: WAF :: fetched 8 new logs [27-06-2022 19:51:02]16004: WAF :: fetched 6 new logs [27-06-2022 19:52:01]18634: WAF :: fetched 4 new logs [27-06-2022 19:53:02]21240: WAF :: fetched 2 new logs [27-06-2022 19:54:01]23931: WAF :: fetched 1 new logs [27-06-2022 19:55:02]26574: WAF :: fetched 1 new logs [27-06-2022 19:58:02]2061: WAF :: fetched 2 new logs [27-06-2022 19:59:01]4782: WAF :: fetched 2 new logs [27-06-2022 20:00:02]7168: WAF :: fetched 2 new logs [27-06-2022 20:02:01]12848: WAF :: fetched 1 new logs [27-06-2022 20:03:02]15453: WAF :: fetched 5 new logs [27-06-2022 20:04:01]18134: WAF :: fetched 2 new logs [27-06-2022 20:05:02]20759: WAF :: fetched 7 new logs [27-06-2022 20:06:01]23394: WAF :: fetched 2 new logs [27-06-2022 20:07:02]26057: WAF :: fetched 2 new logs [27-06-2022 20:08:02]28617: WAF :: fetched 2 new logs [27-06-2022 20:10:01]1634: WAF :: fetched 1 new logs [27-06-2022 20:11:02]4411: WAF :: fetched 2 new logs [27-06-2022 20:12:01]7041: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656371521 [27-06-2022 20:12:01]7041: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 20:12:03]7041: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 20:12:04]7041: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-2012/20220627-201201-Yro5QVGVRwvwc8ju0blF1gAAABE [27-06-2022 20:12:04]7041: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 20:12:04]7041: WAF :: fetched 3 new logs [27-06-2022 20:13:02]9649: WAF :: fetched 2 new logs [27-06-2022 20:14:02]12295: WAF :: fetched 3 new logs [27-06-2022 20:15:01]14903: WAF :: fetched 1 new logs [27-06-2022 20:16:02]17576: WAF :: fetched 31 new logs [27-06-2022 20:17:01]20177: WAF :: fetched 2 new logs [27-06-2022 20:18:02]22781: WAF :: fetched 2 new logs [27-06-2022 20:19:02]25443: WAF :: fetched 3 new logs [27-06-2022 20:20:01]28067: WAF :: fetched 4 new logs [27-06-2022 20:21:02]30769: WAF :: fetched 2 new logs [27-06-2022 20:22:01]939: WAF :: fetched 29 new logs [27-06-2022 20:23:02]3626: WAF :: fetched 11 new logs [27-06-2022 20:24:02]6419: WAF :: fetched 9 new logs [27-06-2022 20:25:01]9052: WAF :: fetched 5 new logs [27-06-2022 20:26:01]11685: WAF :: fetched 4 new logs [27-06-2022 20:27:02]14343: WAF :: fetched 8 new logs [27-06-2022 20:28:01]16879: WAF :: fetched 5 new logs [27-06-2022 20:29:02]19565: WAF :: fetched 2 new logs [27-06-2022 20:30:01]22140: WAF :: fetched 1 new logs [27-06-2022 20:33:01]29977: WAF :: fetched 8 new logs [27-06-2022 20:34:02]32685: WAF :: fetched 18 new logs [27-06-2022 20:35:01]2892: WAF :: fetched 1 new logs [27-06-2022 20:37:02]8262: WAF :: fetched 15 new logs [27-06-2022 20:41:01]25565: Checking for user cron vulnerabilities [27-06-2022 20:43:02]31277: WAF :: fetched 1 new logs [27-06-2022 20:44:01]4645: Checking ditributed CMS bruteforce attacks [27-06-2022 20:45:02]7270: WAF :: fetched 2 new logs [27-06-2022 20:46:01]9878: WAF :: fetched 2 new logs [27-06-2022 20:47:02]12470: WAF :: fetched 2 new logs [27-06-2022 20:48:02]15066: WAF :: fetched 13 new logs [27-06-2022 20:51:02]23012: WAF :: fetched 2 new logs [27-06-2022 20:52:01]25565: WAF :: fetched 2 new logs [27-06-2022 20:53:02]28161: WAF :: fetched 1 new logs [27-06-2022 20:54:01]30841: WAF :: fetched 1 new logs [27-06-2022 20:55:01]1081: WAF :: fetched 4 new logs [27-06-2022 20:56:02]3828: WAF :: fetched 8 new logs [27-06-2022 20:57:01]6473: WAF :: fetched 1 new logs [27-06-2022 20:58:02]9130: WAF :: fetched 4 new logs [27-06-2022 20:59:02]11782: WAF :: fetched 4 new logs [27-06-2022 21:00:01]14112: WAF :: fetched 1 new logs [27-06-2022 21:01:02]17242: WAF :: fetched 5 new logs [27-06-2022 21:02:01]19821: WAF :: fetched 1 new logs [27-06-2022 21:03:02]22436: WAF :: fetched 1 new logs [27-06-2022 21:04:02]25078: WAF :: fetched 1 new logs [27-06-2022 21:06:02]30287: WAF :: fetched 1 new logs [27-06-2022 21:07:01]466: WAF :: fetched 10 new logs [27-06-2022 21:08:02]3233: WAF :: fetched 5 new logs [27-06-2022 21:09:02]5946: WAF :: fetched 4 new logs [27-06-2022 21:10:01]8568: WAF :: fetched 2 new logs [27-06-2022 21:12:02]13778: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656375122 [27-06-2022 21:12:02]13778: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 21:12:04]13778: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 21:12:04]13778: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-2112/20220627-211202-YrpHUpXmhkaXyMriOX5NdwAAAAg [27-06-2022 21:12:04]13778: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 21:12:04]13778: WAF :: fetched 1 new logs [27-06-2022 21:13:01]16394: WAF :: fetched 1 new logs [27-06-2022 21:14:02]19059: WAF :: fetched 3 new logs [27-06-2022 21:16:02]24296: WAF :: fetched 9 new logs [27-06-2022 21:17:02]26868: WAF :: fetched 2 new logs [27-06-2022 21:18:01]29472: WAF :: fetched 4 new logs [27-06-2022 21:19:02]32250: WAF :: fetched 7 new logs [27-06-2022 21:20:02]2446: WAF :: fetched 1 new logs [27-06-2022 21:21:01]5230: WAF :: fetched 2 new logs [27-06-2022 21:22:02]7889: WAF :: fetched 5 new logs [27-06-2022 21:23:01]10464: WAF :: fetched 2 new logs [27-06-2022 21:24:01]13160: WAF :: fetched 4 new logs [27-06-2022 21:25:02]15778: WAF :: fetched 43 new logs [27-06-2022 21:26:01]18453: httpd.conf changed. Refreshing watchlist. [27-06-2022 21:26:01]18456: WAF :: fetched 1 new logs [27-06-2022 21:27:02]21168: httpd.conf changed. Refreshing watchlist. [27-06-2022 21:27:02]21165: WAF :: fetched 1 new logs [27-06-2022 21:28:02]23803: WAF :: fetched 4 new logs [27-06-2022 21:29:01]26490: WAF :: fetched 2 new logs [27-06-2022 21:30:02]29114: WAF :: fetched 2 new logs [27-06-2022 21:31:01]31730: WAF :: fetched 6 new logs [27-06-2022 21:32:02]1976: WAF :: fetched 3 new logs [27-06-2022 21:33:02]4660: WAF :: fetched 3 new logs [27-06-2022 21:38:02]22462: WAF :: fetched 1 new logs [27-06-2022 21:40:01]32042: WAF :: fetched 2 new logs [27-06-2022 21:41:02]2361: WAF :: fetched 2 new logs [27-06-2022 21:41:02]2361: Checking for user cron vulnerabilities [27-06-2022 21:42:02]5021: WAF :: fetched 2 new logs [27-06-2022 21:43:02]7611: WAF :: fetched 3 new logs [27-06-2022 21:44:01]10303: Checking ditributed CMS bruteforce attacks [27-06-2022 21:44:02]10303: WAF :: fetched 1 new logs [27-06-2022 21:45:01]12889: WAF :: fetched 1 new logs [27-06-2022 21:47:01]18103: WAF :: fetched 1 new logs [27-06-2022 21:48:01]20736: WAF :: fetched 1 new logs [27-06-2022 21:49:02]23432: WAF :: fetched 2 new logs [27-06-2022 21:50:02]26016: WAF :: fetched 2 new logs [27-06-2022 21:51:01]28664: WAF :: fetched 2 new logs [27-06-2022 21:52:02]31286: WAF :: fetched 3 new logs [27-06-2022 21:53:01]1510: WAF :: fetched 2 new logs [27-06-2022 21:55:02]6991: WAF :: fetched 2 new logs [27-06-2022 21:56:01]9644: WAF :: fetched 2 new logs [27-06-2022 21:57:02]12254: WAF :: fetched 2 new logs [27-06-2022 21:58:01]14853: WAF :: fetched 10 new logs [27-06-2022 21:59:01]17558: WAF :: fetched 22 new logs [27-06-2022 22:00:01]19908: WAF :: fetched 22 new logs [27-06-2022 22:01:02]23073: WAF :: fetched 35 new logs [27-06-2022 22:02:01]25678: WAF :: fetched 20 new logs [27-06-2022 22:03:02]28299: WAF :: fetched 19 new logs [27-06-2022 22:04:02]30949: WAF :: fetched 22 new logs [27-06-2022 22:05:01]1167: WAF :: fetched 23 new logs [27-06-2022 22:06:01]3893: WAF :: fetched 22 new logs [27-06-2022 22:07:02]6555: WAF :: fetched 5 new logs [27-06-2022 22:07:07]6556: Performing Domain reputation checks [27-06-2022 22:08:01]9113: WAF :: fetched 6 new logs [27-06-2022 22:09:01]11815: WAF :: fetched 2 new logs [27-06-2022 22:10:02]14497: WAF :: fetched 2 new logs [27-06-2022 22:12:02]19733: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656378722 [27-06-2022 22:12:02]19733: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 22:12:04]19733: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 22:12:04]19733: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-2212/20220627-221202-YrpVYqvbH0Z8wcZJtJmqugAAABg [27-06-2022 22:12:04]19733: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 22:12:04]19733: WAF :: fetched 2 new logs [27-06-2022 22:13:01]22326: WAF :: fetched 1 new logs [27-06-2022 22:14:02]25040: WAF :: fetched 4 new logs [27-06-2022 22:15:02]27655: WAF :: fetched 4 new logs [27-06-2022 22:16:01]30323: WAF :: fetched 1 new logs [27-06-2022 22:17:02]536: WAF :: fetched 1 new logs [27-06-2022 22:19:01]5984: WAF :: fetched 3 new logs [27-06-2022 22:20:02]8679: WAF :: fetched 1 new logs [27-06-2022 22:22:01]14006: WAF :: fetched 6 new logs [27-06-2022 22:23:02]16662: WAF :: fetched 3 new logs [27-06-2022 22:24:01]19343: WAF :: fetched 1 new logs [27-06-2022 22:30:02]2757: WAF :: fetched 3 new logs [27-06-2022 22:31:02]5452: WAF :: fetched 3 new logs [27-06-2022 22:32:01]8099: WAF :: fetched 4 new logs [27-06-2022 22:33:01]10689: WAF :: fetched 1 new logs [27-06-2022 22:34:02]13382: WAF :: fetched 7 new logs [27-06-2022 22:35:02]15962: WAF :: fetched 5 new logs [27-06-2022 22:36:01]18581: WAF :: fetched 1 new logs [27-06-2022 22:39:01]27658: WAF :: fetched 2 new logs [27-06-2022 22:40:02]30305: WAF :: fetched 1 new logs [27-06-2022 22:41:01]532: WAF :: fetched 1 new logs [27-06-2022 22:41:01]532: Checking for user cron vulnerabilities [27-06-2022 22:44:01]8572: Checking ditributed CMS bruteforce attacks [27-06-2022 22:44:01]8572: WAF :: fetched 1 new logs [27-06-2022 22:45:02]11189: WAF :: fetched 1 new logs [27-06-2022 22:46:02]13812: WAF :: fetched 1 new logs [27-06-2022 22:47:01]16416: WAF :: fetched 10 new logs [27-06-2022 22:48:02]19236: WAF :: fetched 1 new logs [27-06-2022 22:49:01]23182: WAF :: fetched 2 new logs [27-06-2022 22:50:02]25828: WAF :: fetched 3 new logs [27-06-2022 22:52:02]31054: WAF :: fetched 1 new logs [27-06-2022 22:53:01]1207: WAF :: fetched 2 new logs [27-06-2022 22:54:02]3968: WAF :: fetched 2 new logs [27-06-2022 22:55:01]6562: WAF :: fetched 1 new logs [27-06-2022 22:57:02]12594: WAF :: fetched 2 new logs [27-06-2022 22:59:02]25418: WAF :: fetched 2 new logs [27-06-2022 23:00:01]27908: WAF :: fetched 5 new logs [27-06-2022 23:01:01]30966: WAF :: fetched 2 new logs [27-06-2022 23:02:02]1231: WAF :: fetched 4 new logs [27-06-2022 23:03:01]3881: WAF :: fetched 3 new logs [27-06-2022 23:04:02]6582: WAF :: fetched 1 new logs [27-06-2022 23:05:02]9144: WAF :: fetched 8 new logs [27-06-2022 23:07:02]14415: WAF :: fetched 2 new logs [27-06-2022 23:07:46]14568: Performed RBL check for 23.111.136.34. [27-06-2022 23:08:01]16960: WAF :: fetched 3 new logs [27-06-2022 23:09:01]19600: WAF :: fetched 1 new logs [27-06-2022 23:10:02]22216: WAF :: fetched 1 new logs [27-06-2022 23:12:01]27372: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656382321 [27-06-2022 23:12:02]27372: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-06-2022 23:12:04]27372: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-06-2022 23:12:04]27372: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220627/20220627-2312/20220627-231202-Yrpjcv6cLsFkdpt-HftTDQAAAAw [27-06-2022 23:12:04]27372: WAF :: No suitable log file found. Using SQLite.. [27-06-2022 23:12:04]27372: WAF :: fetched 2 new logs [27-06-2022 23:13:02]29975: WAF :: fetched 2 new logs [27-06-2022 23:16:01]5484: WAF :: fetched 4 new logs [27-06-2022 23:17:02]8064: WAF :: fetched 31 new logs [27-06-2022 23:18:01]10625: WAF :: fetched 1 new logs [27-06-2022 23:20:02]15882: WAF :: fetched 1 new logs [27-06-2022 23:22:02]21106: WAF :: fetched 4 new logs [27-06-2022 23:25:02]28908: WAF :: fetched 7 new logs [27-06-2022 23:26:01]31541: WAF :: fetched 25 new logs [27-06-2022 23:27:02]1788: WAF :: fetched 27 new logs [27-06-2022 23:28:01]4481: WAF :: fetched 3 new logs [27-06-2022 23:29:02]7145: WAF :: fetched 2 new logs [27-06-2022 23:30:02]9720: WAF :: fetched 8 new logs [27-06-2022 23:31:02]12351: WAF :: fetched 5 new logs [27-06-2022 23:32:02]14981: WAF :: fetched 1 new logs [27-06-2022 23:33:02]17572: WAF :: fetched 2 new logs [27-06-2022 23:34:01]20231: WAF :: fetched 2 new logs [27-06-2022 23:35:02]22858: WAF :: fetched 24 new logs [27-06-2022 23:36:01]25480: WAF :: fetched 2 new logs [27-06-2022 23:37:02]28082: WAF :: fetched 2 new logs [27-06-2022 23:38:02]2374: WAF :: fetched 8 new logs [27-06-2022 23:39:01]9256: WAF :: fetched 7 new logs [27-06-2022 23:40:02]14428: WAF :: fetched 2 new logs [27-06-2022 23:41:02]17059: WAF :: fetched 15 new logs [27-06-2022 23:41:02]17059: Checking for user cron vulnerabilities [27-06-2022 23:44:01]24860: Checking ditributed CMS bruteforce attacks [27-06-2022 23:46:01]30074: WAF :: fetched 1 new logs [27-06-2022 23:48:02]2830: WAF :: fetched 3 new logs [27-06-2022 23:50:02]8242: WAF :: fetched 12 new logs [27-06-2022 23:51:02]10899: WAF :: fetched 3 new logs [27-06-2022 23:52:01]13452: WAF :: fetched 3 new logs [27-06-2022 23:54:01]18662: WAF :: fetched 38 new logs [27-06-2022 23:55:02]21478: WAF :: fetched 101 new logs [27-06-2022 23:56:02]24821: WAF :: fetched 134 new logs [27-06-2022 23:57:01]27900: httpd.conf changed. Refreshing watchlist. [27-06-2022 23:57:01]27912: WAF :: fetched 67 new logs [27-06-2022 23:58:02]30519: WAF :: fetched 1 new logs [27-06-2022 23:59:02]632: WAF :: fetched 9 new logs [28-06-2022 00:00:01]3108: WAF :: fetched 1 new logs [28-06-2022 00:01:02]6372: WAF :: fetched 20 new logs [28-06-2022 00:01:02]6375: httpd.conf changed. Refreshing watchlist. [28-06-2022 00:01:04]6372: Sending daily report for June 28, 2022 [28-06-2022 00:02:02]8991: WAF :: fetched 12 new logs [28-06-2022 00:03:01]11595: WAF :: fetched 13 new logs [28-06-2022 00:04:02]14204: WAF :: fetched 12 new logs [28-06-2022 00:05:02]16890: Deleted 0 entries older than 6 MONTH from scanner_logs [28-06-2022 00:05:02]16890: Deleted 0 files from Quarantine [28-06-2022 00:07:02]22148: WAF :: fetched 3 new logs [28-06-2022 00:08:02]24747: WAF :: fetched 8 new logs [28-06-2022 00:09:01]27373: WAF :: fetched 1 new logs [28-06-2022 00:10:01]30084: WAF :: fetched 4 new logs [28-06-2022 00:11:02]32724: WAF :: fetched 7 new logs [28-06-2022 00:12:01]2951: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656385921 [28-06-2022 00:12:01]2951: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 00:12:03]2951: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 00:12:04]2951: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-0012/20220628-001201-YrpxgUMg8ulyZ-yiI36idQAAACo [28-06-2022 00:12:04]2951: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 00:12:04]2951: WAF :: fetched 2 new logs [28-06-2022 00:14:02]8238: WAF :: fetched 3 new logs [28-06-2022 00:15:01]10956: WAF :: fetched 1 new logs [28-06-2022 00:16:02]13599: WAF :: fetched 13 new logs [28-06-2022 00:17:01]16198: WAF :: fetched 5 new logs [28-06-2022 00:19:02]21432: WAF :: fetched 5 new logs [28-06-2022 00:20:01]24101: WAF :: fetched 5 new logs [28-06-2022 00:21:01]26835: WAF :: fetched 11 new logs [28-06-2022 00:22:01]29425: WAF :: fetched 11 new logs [28-06-2022 00:23:02]32018: WAF :: fetched 3 new logs [28-06-2022 00:24:01]2196: WAF :: fetched 16 new logs [28-06-2022 00:25:02]4946: WAF :: fetched 14 new logs [28-06-2022 00:27:01]10097: WAF :: fetched 14 new logs [28-06-2022 00:28:02]12684: WAF :: fetched 8 new logs [28-06-2022 00:29:01]15239: WAF :: fetched 2 new logs [28-06-2022 00:30:02]17962: WAF :: fetched 1 new logs [28-06-2022 00:31:02]20571: WAF :: fetched 13 new logs [28-06-2022 00:32:01]23178: WAF :: fetched 2 new logs [28-06-2022 00:33:02]25784: WAF :: fetched 5 new logs [28-06-2022 00:34:01]28364: WAF :: fetched 2 new logs [28-06-2022 00:35:02]31066: WAF :: fetched 10 new logs [28-06-2022 00:36:02]1273: WAF :: fetched 1 new logs [28-06-2022 00:37:01]3920: WAF :: fetched 5 new logs [28-06-2022 00:38:02]6936: WAF :: fetched 25 new logs [28-06-2022 00:39:01]9528: WAF :: fetched 3 new logs [28-06-2022 00:40:02]12261: WAF :: fetched 2 new logs [28-06-2022 00:41:01]14899: WAF :: fetched 3 new logs [28-06-2022 00:41:01]14899: Checking for user cron vulnerabilities [28-06-2022 00:42:02]17498: WAF :: fetched 1 new logs [28-06-2022 00:43:01]20103: WAF :: fetched 11 new logs [28-06-2022 00:44:02]23479: Checking ditributed CMS bruteforce attacks [28-06-2022 00:44:02]23479: WAF :: fetched 14 new logs [28-06-2022 00:45:01]: Checking for software updates [28-06-2022 00:46:01]28793: WAF :: fetched 4 new logs [28-06-2022 00:47:02]31381: WAF :: fetched 21 new logs [28-06-2022 00:48:01]1696: WAF :: fetched 12 new logs [28-06-2022 00:49:01]5209: WAF :: fetched 8 new logs [28-06-2022 00:50:02]7909: WAF :: fetched 2 new logs [28-06-2022 00:51:01]10525: WAF :: fetched 11 new logs [28-06-2022 00:52:02]13128: WAF :: fetched 18 new logs [28-06-2022 00:53:02]17870: WAF :: fetched 49 new logs [28-06-2022 00:54:01]24471: WAF :: fetched 48 new logs [28-06-2022 00:55:02]27177: WAF :: fetched 1 new logs [28-06-2022 00:56:01]30121: WAF :: fetched 24 new logs [28-06-2022 00:57:02]1889: WAF :: fetched 10 new logs [28-06-2022 00:58:02]4545: WAF :: fetched 10 new logs [28-06-2022 01:00:02]9511: WAF :: fetched 2 new logs [28-06-2022 01:01:01]13239: WAF :: fetched 5 new logs [28-06-2022 01:02:02]15989: WAF :: fetched 6 new logs [28-06-2022 01:03:02]18646: WAF :: fetched 1 new logs [28-06-2022 01:05:02]24488: WAF :: fetched 1 new logs [28-06-2022 01:07:01]30245: WAF :: fetched 15 new logs [28-06-2022 01:09:02]3384: WAF :: fetched 3 new logs [28-06-2022 01:10:02]6158: WAF :: fetched 2 new logs [28-06-2022 01:12:01]11819: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656389521 [28-06-2022 01:12:01]11819: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 01:12:03]11819: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 01:12:04]11819: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-0112/20220628-011201-Yrp_ka5DkVr49lBeMaCZLgAAAAI [28-06-2022 01:12:04]11819: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 01:14:02]17116: WAF :: fetched 2 new logs [28-06-2022 01:15:01]19910: WAF :: fetched 4 new logs [28-06-2022 01:16:02]22637: WAF :: fetched 9 new logs [28-06-2022 01:17:02]25483: WAF :: fetched 17 new logs [28-06-2022 01:18:01]28116: WAF :: fetched 20 new logs [28-06-2022 01:19:02]30770: WAF :: fetched 28 new logs [28-06-2022 01:20:01]1344: WAF :: fetched 22 new logs [28-06-2022 01:21:01]4464: WAF :: fetched 1 new logs [28-06-2022 01:22:02]7327: WAF :: fetched 22 new logs [28-06-2022 01:23:01]9975: WAF :: fetched 35 new logs [28-06-2022 01:24:02]12553: WAF :: fetched 21 new logs [28-06-2022 01:25:02]15373: WAF :: fetched 30 new logs [28-06-2022 01:26:01]18217: WAF :: fetched 4 new logs [28-06-2022 01:27:02]20967: WAF :: fetched 1 new logs [28-06-2022 01:28:01]23675: WAF :: fetched 6 new logs [28-06-2022 01:29:01]26298: WAF :: fetched 15 new logs [28-06-2022 01:30:02]29445: WAF :: fetched 22 new logs [28-06-2022 01:31:02]32209: WAF :: fetched 7 new logs [28-06-2022 01:32:01]2510: WAF :: fetched 6 new logs [28-06-2022 01:33:02]5526: WAF :: fetched 2 new logs [28-06-2022 01:34:02]8415: WAF :: fetched 1 new logs [28-06-2022 01:35:01]11103: WAF :: fetched 1 new logs [28-06-2022 01:36:02]14005: WAF :: fetched 24 new logs [28-06-2022 01:37:01]16615: WAF :: fetched 12 new logs [28-06-2022 01:38:01]19780: WAF :: fetched 6 new logs [28-06-2022 01:39:02]22810: WAF :: fetched 9 new logs [28-06-2022 01:40:01]25551: WAF :: fetched 8 new logs [28-06-2022 01:41:01]28391: Checking for user cron vulnerabilities [28-06-2022 01:44:02]14392: Checking ditributed CMS bruteforce attacks [28-06-2022 01:44:02]14392: WAF :: fetched 1 new logs [28-06-2022 01:45:01]: Checking for definition updates [28-06-2022 01:45:02]17023: WAF :: fetched 4 new logs [28-06-2022 01:46:02]19699: WAF :: fetched 1 new logs [28-06-2022 01:48:02]25226: WAF :: fetched 1 new logs [28-06-2022 01:50:01]30646: WAF :: fetched 1 new logs [28-06-2022 01:51:02]949: WAF :: fetched 2 new logs [28-06-2022 01:55:01]11634: WAF :: fetched 2 new logs [28-06-2022 01:56:01]14240: WAF :: fetched 1 new logs [28-06-2022 01:57:02]17083: WAF :: fetched 1 new logs [28-06-2022 02:02:02]30419: WAF :: fetched 2 new logs [28-06-2022 02:04:02]3147: WAF :: fetched 2 new logs [28-06-2022 02:06:01]8456: WAF :: fetched 2 new logs [28-06-2022 02:09:01]16145: WAF :: fetched 2 new logs [28-06-2022 02:11:01]21402: WAF :: fetched 1 new logs [28-06-2022 02:12:01]23973: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656393121 [28-06-2022 02:12:01]23973: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 02:12:03]23973: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 02:12:03]23973: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-0212/20220628-021201-YrqNoRLtgDMnr4t8AwSIJwAAAAo [28-06-2022 02:12:03]23973: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [28-06-2022 02:12:04]23973: WAF :: fetched 1 new logs [28-06-2022 02:13:02]26624: WAF :: fetched 5 new logs [28-06-2022 02:14:01]29182: WAF :: fetched 3 new logs [28-06-2022 02:15:02]31841: WAF :: fetched 2 new logs [28-06-2022 02:19:02]9863: WAF :: fetched 1 new logs [28-06-2022 02:21:02]15099: WAF :: fetched 1 new logs [28-06-2022 02:22:01]17639: WAF :: fetched 2 new logs [28-06-2022 02:24:01]22776: WAF :: fetched 3 new logs [28-06-2022 02:26:01]28040: WAF :: fetched 1 new logs [28-06-2022 02:27:02]30618: WAF :: fetched 2 new logs [28-06-2022 02:28:02]705: WAF :: fetched 3 new logs [28-06-2022 02:29:01]3313: WAF :: fetched 2 new logs [28-06-2022 02:30:02]6055: WAF :: fetched 3 new logs [28-06-2022 02:31:01]8644: WAF :: fetched 6 new logs [28-06-2022 02:32:01]11206: WAF :: fetched 4 new logs [28-06-2022 02:34:02]16337: WAF :: fetched 3 new logs [28-06-2022 02:35:02]18990: WAF :: fetched 6 new logs [28-06-2022 02:36:01]21621: WAF :: fetched 3 new logs [28-06-2022 02:37:02]24251: WAF :: fetched 4 new logs [28-06-2022 02:38:01]31603: WAF :: fetched 3 new logs [28-06-2022 02:39:02]6074: WAF :: fetched 4 new logs [28-06-2022 02:40:01]9025: WAF :: fetched 2 new logs [28-06-2022 02:41:02]12291: WAF :: fetched 2 new logs [28-06-2022 02:41:02]12291: Checking for user cron vulnerabilities [28-06-2022 02:42:02]15269: WAF :: fetched 5 new logs [28-06-2022 02:43:01]17991: WAF :: fetched 3 new logs [28-06-2022 02:44:02]20593: Checking ditributed CMS bruteforce attacks [28-06-2022 02:44:02]20593: WAF :: fetched 13 new logs [28-06-2022 02:45:01]23277: WAF :: fetched 48 new logs [28-06-2022 02:46:02]25944: WAF :: fetched 44 new logs [28-06-2022 02:47:02]28518: WAF :: fetched 38 new logs [28-06-2022 02:48:02]31046: WAF :: fetched 21 new logs [28-06-2022 02:49:01]1374: WAF :: fetched 24 new logs [28-06-2022 02:50:02]4328: WAF :: fetched 44 new logs [28-06-2022 02:51:01]7151: WAF :: fetched 26 new logs [28-06-2022 02:52:01]9848: WAF :: fetched 1 new logs [28-06-2022 02:53:02]12707: WAF :: fetched 1 new logs [28-06-2022 02:53:02]12712: Updated license status via CDN [28-06-2022 02:55:02]18505: WAF :: fetched 1 new logs [28-06-2022 02:56:01]20939: WAF :: fetched 3 new logs [28-06-2022 02:59:02]29280: WAF :: fetched 3 new logs [28-06-2022 03:00:02]31918: Found and updated 32 CMS installations [28-06-2022 03:02:24]31918: Sending CMS version vulnerability report emails to cpanel users [28-06-2022 03:02:27]31918: Checking wordpress installations for suspicious directories [28-06-2022 03:03:01]8389: WAF :: fetched 6 new logs [28-06-2022 03:04:02]11213: WAF :: fetched 1 new logs [28-06-2022 03:04:24]8437: Sending CMS version vulnerability report emails to cpanel users [28-06-2022 03:04:27]8437: Checking wordpress installations for suspicious directories [28-06-2022 03:05:01]14142: WAF :: fetched 3 new logs [28-06-2022 03:06:02]16753: WAF :: fetched 5 new logs [28-06-2022 03:07:02]19319: WAF :: fetched 1 new logs [28-06-2022 03:08:02]21849: WAF :: fetched 4 new logs [28-06-2022 03:09:01]24431: WAF :: fetched 2 new logs [28-06-2022 03:10:02]27155: WAF :: fetched 4 new logs [28-06-2022 03:11:01]29735: WAF :: fetched 2 new logs [28-06-2022 03:12:02]32321: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656396722 [28-06-2022 03:12:02]32321: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 03:12:04]32321: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 03:12:04]32321: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-0312/20220628-031202-YrqbstmGXXIMNdj68oNyUQAAABQ [28-06-2022 03:12:04]32321: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 03:12:05]32321: WAF :: fetched 298 new logs [28-06-2022 03:13:02]2826: WAF :: fetched 2 new logs [28-06-2022 03:14:01]5730: WAF :: fetched 3 new logs [28-06-2022 03:18:02]16605: WAF :: fetched 1 new logs [28-06-2022 03:20:02]22121: WAF :: fetched 2 new logs [28-06-2022 03:21:02]25006: WAF :: fetched 36 new logs [28-06-2022 03:22:02]27646: WAF :: fetched 57 new logs [28-06-2022 03:23:01]30387: WAF :: fetched 1 new logs [28-06-2022 03:24:02]556: WAF :: fetched 3 new logs [28-06-2022 03:25:01]587: WAF :: fetched 2 new logs [28-06-2022 03:26:02]21739: WAF :: fetched 8 new logs [28-06-2022 03:27:02]2646: WAF :: fetched 1 new logs [28-06-2022 03:31:02]20479: WAF :: fetched 1 new logs [28-06-2022 03:32:02]23029: WAF :: fetched 1 new logs [28-06-2022 03:34:02]28172: WAF :: fetched 3 new logs [28-06-2022 03:35:01]30824: WAF :: fetched 1 new logs [28-06-2022 03:37:01]3588: WAF :: fetched 1 new logs [28-06-2022 03:38:01]8128: WAF :: fetched 3 new logs [28-06-2022 03:39:01]10703: WAF :: fetched 3 new logs [28-06-2022 03:40:02]13373: WAF :: fetched 2 new logs [28-06-2022 03:41:02]15952: Checking for user cron vulnerabilities [28-06-2022 03:44:01]31394: Checking ditributed CMS bruteforce attacks [28-06-2022 03:44:02]31394: WAF :: fetched 1 new logs [28-06-2022 03:45:02]1654: WAF :: fetched 1 new logs [28-06-2022 03:47:02]6874: WAF :: fetched 1 new logs [28-06-2022 03:49:01]11976: WAF :: fetched 1 new logs [28-06-2022 03:50:02]14651: WAF :: fetched 3 new logs [28-06-2022 03:52:01]19817: WAF :: fetched 2 new logs [28-06-2022 03:54:01]24934: WAF :: fetched 3 new logs [28-06-2022 03:55:02]27611: WAF :: fetched 1 new logs [28-06-2022 03:56:02]30175: WAF :: fetched 1 new logs [28-06-2022 03:57:01]32760: WAF :: fetched 1 new logs [28-06-2022 03:58:02]2954: WAF :: fetched 3 new logs [28-06-2022 03:59:01]5554: WAF :: fetched 1 new logs [28-06-2022 04:02:01]13679: WAF :: fetched 1 new logs [28-06-2022 04:04:01]18819: WAF :: fetched 1 new logs [28-06-2022 04:05:02]21499: WAF :: fetched 1 new logs [28-06-2022 04:06:02]24070: WAF :: fetched 3 new logs [28-06-2022 04:07:01]26769: WAF :: fetched 5 new logs [28-06-2022 04:08:02]29328: WAF :: fetched 3 new logs [28-06-2022 04:09:02]31909: WAF :: fetched 2 new logs [28-06-2022 04:10:01]2161: WAF :: fetched 4 new logs [28-06-2022 04:11:02]4878: WAF :: fetched 1 new logs [28-06-2022 04:12:01]7419: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656400321 [28-06-2022 04:12:01]7419: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 04:12:03]7419: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 04:12:04]7419: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-0412/20220628-041201-YrqpwQkm9FfwISmFZwJXswAAAAw [28-06-2022 04:12:04]7419: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 04:12:04]7419: WAF :: fetched 4 new logs [28-06-2022 04:13:02]10009: WAF :: fetched 2 new logs [28-06-2022 04:14:02]12531: WAF :: fetched 1 new logs [28-06-2022 04:15:01]15167: WAF :: fetched 2 new logs [28-06-2022 04:16:02]17797: WAF :: fetched 1 new logs [28-06-2022 04:17:01]20339: WAF :: fetched 1 new logs [28-06-2022 04:18:02]22932: WAF :: fetched 2 new logs [28-06-2022 04:19:01]25464: WAF :: fetched 4 new logs [28-06-2022 04:20:01]28058: WAF :: fetched 1 new logs [28-06-2022 04:21:02]30767: WAF :: fetched 3 new logs [28-06-2022 04:22:01]909: WAF :: fetched 4 new logs [28-06-2022 04:24:02]6093: WAF :: fetched 1 new logs [28-06-2022 04:29:02]18999: WAF :: fetched 1 new logs [28-06-2022 04:30:01]21543: WAF :: fetched 4 new logs [28-06-2022 04:31:02]24273: WAF :: fetched 3 new logs [28-06-2022 04:34:01]31814: WAF :: fetched 1 new logs [28-06-2022 04:37:01]7398: WAF :: fetched 1 new logs [28-06-2022 04:38:01]14350: WAF :: fetched 4 new logs [28-06-2022 04:39:02]22021: WAF :: fetched 3 new logs [28-06-2022 04:40:01]24805: WAF :: fetched 1 new logs [28-06-2022 04:41:02]27513: Checking for user cron vulnerabilities [28-06-2022 04:43:01]32627: WAF :: fetched 1 new logs [28-06-2022 04:44:01]2840: Checking ditributed CMS bruteforce attacks [28-06-2022 04:44:02]2840: WAF :: fetched 1 new logs [28-06-2022 04:45:01]5477: WAF :: fetched 4 new logs [28-06-2022 04:46:02]8165: WAF :: fetched 1 new logs [28-06-2022 04:47:02]10686: WAF :: fetched 2 new logs [28-06-2022 04:53:01]26367: WAF :: fetched 3 new logs [28-06-2022 04:54:01]28982: WAF :: fetched 4 new logs [28-06-2022 04:55:01]31571: WAF :: fetched 4 new logs [28-06-2022 04:56:02]1909: WAF :: fetched 1 new logs [28-06-2022 04:58:02]7224: WAF :: fetched 3 new logs [28-06-2022 04:59:02]9789: WAF :: fetched 1 new logs [28-06-2022 05:00:01]12105: WAF :: fetched 3 new logs [28-06-2022 05:01:42]15240: Starting daily scan on files updated in last 24 hrs [28-06-2022 05:02:02]17798: WAF :: fetched 2 new logs [28-06-2022 05:03:01]20355: WAF :: fetched 1 new logs [28-06-2022 05:04:02]22944: WAF :: fetched 3 new logs [28-06-2022 05:05:01]25513: WAF :: fetched 4 new logs [28-06-2022 05:06:02]28263: WAF :: fetched 1 new logs [28-06-2022 05:08:01]940: WAF :: fetched 1 new logs [28-06-2022 05:09:02]3524: WAF :: fetched 5 new logs [28-06-2022 05:10:01]6136: WAF :: fetched 4 new logs [28-06-2022 05:12:02]11376: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656403922 [28-06-2022 05:12:02]11376: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 05:12:04]11376: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 05:12:04]11376: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-0512/20220628-051202-Yrq30uug6ynzp9nOnknqlQAAAAQ [28-06-2022 05:12:04]11376: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 05:12:04]11376: WAF :: fetched 2 new logs [28-06-2022 05:14:02]16530: WAF :: fetched 2 new logs [28-06-2022 05:17:02]24343: WAF :: fetched 13 new logs [28-06-2022 05:18:01]26930: WAF :: fetched 2 new logs [28-06-2022 05:19:02]29491: WAF :: fetched 1 new logs [28-06-2022 05:22:02]5026: WAF :: fetched 3 new logs [28-06-2022 05:23:01]7493: WAF :: fetched 1 new logs [28-06-2022 05:24:01]10109: WAF :: fetched 2 new logs [28-06-2022 05:26:02]15361: WAF :: fetched 2 new logs [28-06-2022 05:27:01]17795: WAF :: fetched 1 new logs [28-06-2022 05:28:02]20495: WAF :: fetched 1 new logs [28-06-2022 05:32:02]30913: WAF :: fetched 2 new logs [28-06-2022 05:33:01]1042: WAF :: fetched 2 new logs [28-06-2022 05:35:02]6250: WAF :: fetched 1 new logs [28-06-2022 05:36:01]8856: WAF :: fetched 5 new logs [28-06-2022 05:37:01]11488: WAF :: fetched 1 new logs [28-06-2022 05:41:01]22637: WAF :: fetched 2 new logs [28-06-2022 05:41:01]22637: Checking for user cron vulnerabilities [28-06-2022 05:44:01]8020: Checking ditributed CMS bruteforce attacks [28-06-2022 05:48:01]18462: WAF :: fetched 1 new logs [28-06-2022 05:49:02]21007: WAF :: fetched 4 new logs [28-06-2022 05:50:01]23561: WAF :: fetched 1 new logs [28-06-2022 05:55:01]4242: WAF :: fetched 1 new logs [28-06-2022 05:56:02]6956: WAF :: fetched 3 new logs [28-06-2022 05:57:01]9429: WAF :: fetched 3 new logs [28-06-2022 06:00:02]16914: WAF :: fetched 3 new logs [28-06-2022 06:01:01]19783: WAF :: fetched 1 new logs [28-06-2022 06:03:02]25273: WAF :: fetched 2 new logs [28-06-2022 06:05:01]30473: WAF :: fetched 1 new logs [28-06-2022 06:06:02]751: WAF :: fetched 2 new logs [28-06-2022 06:07:02]3394: WAF :: fetched 1 new logs [28-06-2022 06:08:01]6025: WAF :: fetched 3 new logs [28-06-2022 06:09:02]8658: WAF :: fetched 1 new logs [28-06-2022 06:10:01]11238: WAF :: fetched 1 new logs [28-06-2022 06:11:01]13979: WAF :: fetched 6 new logs [28-06-2022 06:12:02]16558: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656407522 [28-06-2022 06:12:02]16558: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 06:12:04]16558: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 06:12:04]16558: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-0612/20220628-061202-YrrF4vqWktJg-XKbYed4vgAAABg [28-06-2022 06:12:04]16558: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 06:12:04]16558: WAF :: fetched 6 new logs [28-06-2022 06:13:02]19113: WAF :: fetched 3 new logs [28-06-2022 06:16:02]26973: WAF :: fetched 1 new logs [28-06-2022 06:17:02]29553: WAF :: fetched 1 new logs [28-06-2022 06:18:02]32106: WAF :: fetched 3 new logs [28-06-2022 06:19:02]2292: WAF :: fetched 2 new logs [28-06-2022 06:20:01]4905: WAF :: fetched 2 new logs [28-06-2022 06:21:02]7656: WAF :: fetched 4 new logs [28-06-2022 06:22:02]10235: WAF :: fetched 6 new logs [28-06-2022 06:25:02]17904: WAF :: fetched 1 new logs [28-06-2022 06:27:01]23288: WAF :: fetched 1 new logs [28-06-2022 06:28:02]25831: WAF :: fetched 4 new logs [28-06-2022 06:29:02]28406: WAF :: fetched 3 new logs [28-06-2022 06:30:01]30886: WAF :: fetched 1 new logs [28-06-2022 06:31:02]1238: WAF :: fetched 2 new logs [28-06-2022 06:35:01]11589: WAF :: fetched 1 new logs [28-06-2022 06:36:02]14299: WAF :: fetched 1 new logs [28-06-2022 06:37:01]16888: WAF :: fetched 1 new logs [28-06-2022 06:38:02]23986: WAF :: fetched 3 new logs [28-06-2022 06:39:02]28242: WAF :: fetched 1 new logs [28-06-2022 06:40:02]30832: WAF :: fetched 2 new logs [28-06-2022 06:41:02]1107: Checking for user cron vulnerabilities [28-06-2022 06:42:01]3724: WAF :: fetched 5 new logs [28-06-2022 06:44:01]12587: Checking ditributed CMS bruteforce attacks [28-06-2022 06:44:01]12587: WAF :: fetched 1 new logs [28-06-2022 06:45:02]15148: WAF :: fetched 2 new logs [28-06-2022 06:46:01]17823: WAF :: fetched 1 new logs [28-06-2022 06:47:02]20400: WAF :: fetched 6 new logs [28-06-2022 06:48:01]22949: WAF :: fetched 3 new logs [28-06-2022 06:49:02]25544: WAF :: fetched 4 new logs [28-06-2022 06:50:01]28144: WAF :: fetched 3 new logs [28-06-2022 06:51:02]30842: WAF :: fetched 2 new logs [28-06-2022 06:52:01]986: WAF :: fetched 2 new logs [28-06-2022 06:53:01]3549: WAF :: fetched 1 new logs [28-06-2022 06:54:02]6203: WAF :: fetched 1 new logs [28-06-2022 06:56:01]11413: WAF :: fetched 2 new logs [28-06-2022 06:57:02]14001: WAF :: fetched 2 new logs [28-06-2022 06:58:02]16557: WAF :: fetched 28 new logs [28-06-2022 06:59:01]19130: WAF :: fetched 34 new logs [28-06-2022 07:00:02]21427: WAF :: fetched 26 new logs [28-06-2022 07:01:02]24620: WAF :: fetched 28 new logs [28-06-2022 07:02:01]27266: WAF :: fetched 30 new logs [28-06-2022 07:03:02]29839: WAF :: fetched 16 new logs [28-06-2022 07:04:02]32439: WAF :: fetched 2 new logs [28-06-2022 07:05:01]2642: WAF :: fetched 4 new logs [28-06-2022 07:06:02]5456: WAF :: fetched 3 new logs [28-06-2022 07:08:01]10556: WAF :: fetched 1 new logs [28-06-2022 07:09:02]13154: WAF :: fetched 7 new logs [28-06-2022 07:10:01]15717: WAF :: fetched 1 new logs [28-06-2022 07:11:01]18429: WAF :: fetched 9 new logs [28-06-2022 07:12:02]21003: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656411122 [28-06-2022 07:12:02]21003: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 07:12:04]21003: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 07:12:04]21003: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-0712/20220628-071202-YrrT8ky0-J1t0s_7CqXeawAAAAU [28-06-2022 07:12:04]21003: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 07:12:04]21003: WAF :: fetched 2 new logs [28-06-2022 07:13:02]23603: WAF :: fetched 2 new logs [28-06-2022 07:14:01]26194: WAF :: fetched 1 new logs [28-06-2022 07:15:01]28791: WAF :: fetched 1 new logs [28-06-2022 07:16:02]31490: WAF :: fetched 3 new logs [28-06-2022 07:17:02]1606: WAF :: fetched 2 new logs [28-06-2022 07:18:02]4251: WAF :: fetched 3 new logs [28-06-2022 07:19:01]6872: WAF :: fetched 1 new logs [28-06-2022 07:20:01]9477: WAF :: fetched 5 new logs [28-06-2022 07:21:02]12207: WAF :: fetched 6 new logs [28-06-2022 07:22:02]14781: WAF :: fetched 1 new logs [28-06-2022 07:23:02]17397: WAF :: fetched 2 new logs [28-06-2022 07:24:01]19964: WAF :: fetched 3 new logs [28-06-2022 07:27:02]27937: WAF :: fetched 3 new logs [28-06-2022 07:28:02]30534: WAF :: fetched 1 new logs [28-06-2022 07:29:01]714: WAF :: fetched 2 new logs [28-06-2022 07:31:01]6217: WAF :: fetched 2 new logs [28-06-2022 07:32:02]8854: WAF :: fetched 3 new logs [28-06-2022 07:33:02]11433: WAF :: fetched 1 new logs [28-06-2022 07:34:01]14086: WAF :: fetched 3 new logs [28-06-2022 07:35:02]16773: WAF :: fetched 1 new logs [28-06-2022 07:36:02]19464: WAF :: fetched 19 new logs [28-06-2022 07:37:01]22014: WAF :: fetched 23 new logs [28-06-2022 07:38:02]24906: WAF :: fetched 24 new logs [28-06-2022 07:39:01]27470: WAF :: fetched 32 new logs [28-06-2022 07:40:01]30086: WAF :: fetched 17 new logs [28-06-2022 07:41:02]336: WAF :: fetched 9 new logs [28-06-2022 07:41:02]336: Checking for user cron vulnerabilities [28-06-2022 07:42:01]3007: WAF :: fetched 12 new logs [28-06-2022 07:43:02]5682: WAF :: fetched 10 new logs [28-06-2022 07:44:01]8147: Checking ditributed CMS bruteforce attacks [28-06-2022 07:44:01]8147: WAF :: fetched 20 new logs [28-06-2022 07:45:01]: Checking for definition updates [28-06-2022 07:45:02]10852: WAF :: fetched 13 new logs [28-06-2022 07:46:01]13361: WAF :: fetched 9 new logs [28-06-2022 07:47:02]16143: WAF :: fetched 22 new logs [28-06-2022 07:48:01]19670: WAF :: fetched 34 new logs [28-06-2022 07:49:02]22272: WAF :: fetched 26 new logs [28-06-2022 07:50:02]24831: WAF :: fetched 8 new logs [28-06-2022 07:51:01]27582: WAF :: fetched 5 new logs [28-06-2022 07:52:02]30186: WAF :: fetched 15 new logs [28-06-2022 07:53:01]32749: WAF :: fetched 14 new logs [28-06-2022 07:54:02]2974: WAF :: fetched 7 new logs [28-06-2022 07:55:02]5615: WAF :: fetched 11 new logs [28-06-2022 07:56:02]8300: WAF :: fetched 5 new logs [28-06-2022 07:57:01]14124: WAF :: fetched 5 new logs [28-06-2022 07:58:01]21904: WAF :: fetched 11 new logs [28-06-2022 07:59:02]24719: WAF :: fetched 4 new logs [28-06-2022 08:01:02]30257: WAF :: fetched 1 new logs [28-06-2022 08:02:02]346: WAF :: fetched 1 new logs [28-06-2022 08:03:01]3089: WAF :: fetched 1 new logs [28-06-2022 08:04:02]5769: WAF :: fetched 1 new logs [28-06-2022 08:05:01]8360: WAF :: fetched 1 new logs [28-06-2022 08:06:01]11091: WAF :: fetched 4 new logs [28-06-2022 08:07:02]13698: WAF :: fetched 11 new logs [28-06-2022 08:08:01]16258: WAF :: fetched 20 new logs [28-06-2022 08:09:02]18866: WAF :: fetched 12 new logs [28-06-2022 08:10:01]21341: WAF :: fetched 28 new logs [28-06-2022 08:11:02]24155: WAF :: fetched 38 new logs [28-06-2022 08:12:02]26755: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656414722 [28-06-2022 08:12:02]26755: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 08:12:04]26755: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 08:12:04]26755: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-0812/20220628-081202-YrriAsejaPDkTPpxzZQgZQAAAAQ [28-06-2022 08:12:04]26755: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 08:12:04]26755: WAF :: fetched 14 new logs [28-06-2022 08:13:01]29329: WAF :: fetched 14 new logs [28-06-2022 08:14:02]31929: WAF :: fetched 5 new logs [28-06-2022 08:15:01]2100: WAF :: fetched 25 new logs [28-06-2022 08:16:02]4890: WAF :: fetched 27 new logs [28-06-2022 08:17:01]7446: WAF :: fetched 5 new logs [28-06-2022 08:18:01]10008: WAF :: fetched 26 new logs [28-06-2022 08:19:02]12640: WAF :: fetched 3 new logs [28-06-2022 08:21:02]17932: WAF :: fetched 2 new logs [28-06-2022 08:22:01]20503: WAF :: fetched 2 new logs [28-06-2022 08:23:01]23111: WAF :: fetched 3 new logs [28-06-2022 08:24:02]25714: WAF :: fetched 5 new logs [28-06-2022 08:25:01]28329: WAF :: fetched 7 new logs [28-06-2022 08:26:02]31011: WAF :: fetched 3 new logs [28-06-2022 08:27:02]1199: WAF :: fetched 1 new logs [28-06-2022 08:30:02]9042: WAF :: fetched 3 new logs [28-06-2022 08:31:01]11776: WAF :: fetched 24 new logs [28-06-2022 08:34:01]19582: WAF :: fetched 6 new logs [28-06-2022 08:35:02]22180: WAF :: fetched 2 new logs [28-06-2022 08:37:02]27516: WAF :: fetched 1 new logs [28-06-2022 08:38:02]2203: WAF :: fetched 1 new logs [28-06-2022 08:39:01]9916: WAF :: fetched 2 new logs [28-06-2022 08:41:01]15781: Checking for user cron vulnerabilities [28-06-2022 08:44:01]23543: Checking ditributed CMS bruteforce attacks [28-06-2022 08:47:02]31515: WAF :: fetched 4 new logs [28-06-2022 08:48:01]1675: WAF :: fetched 2 new logs [28-06-2022 08:50:02]6970: WAF :: fetched 1 new logs [28-06-2022 08:51:01]9589: WAF :: fetched 2 new logs [28-06-2022 08:52:02]12243: WAF :: fetched 2 new logs [28-06-2022 08:53:01]14800: WAF :: fetched 4 new logs [28-06-2022 08:55:02]20028: WAF :: fetched 4 new logs [28-06-2022 08:56:02]22595: WAF :: fetched 2 new logs [28-06-2022 08:58:02]27881: WAF :: fetched 4 new logs [28-06-2022 08:59:01]30527: WAF :: fetched 2 new logs [28-06-2022 09:01:02]3597: WAF :: fetched 1 new logs [28-06-2022 09:02:01]6379: WAF :: fetched 1 new logs [28-06-2022 09:03:02]9029: WAF :: fetched 2 new logs [28-06-2022 09:05:01]14341: WAF :: fetched 3 new logs [28-06-2022 09:07:01]19786: WAF :: fetched 3 new logs [28-06-2022 09:08:02]22459: WAF :: fetched 2 new logs [28-06-2022 09:11:02]30443: WAF :: fetched 2 new logs [28-06-2022 09:12:01]806: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656418321 [28-06-2022 09:12:01]806: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 09:12:03]806: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 09:12:04]806: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-0912/20220628-091201-YrrwERSOmyoBlGAvr9OjqQAAAAA [28-06-2022 09:12:04]806: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 09:12:04]806: WAF :: fetched 2 new logs [28-06-2022 09:14:01]6187: WAF :: fetched 4 new logs [28-06-2022 09:16:02]11484: WAF :: fetched 4 new logs [28-06-2022 09:17:01]14198: WAF :: fetched 1 new logs [28-06-2022 09:18:02]16836: WAF :: fetched 1 new logs [28-06-2022 09:21:02]24892: WAF :: fetched 1 new logs [28-06-2022 09:22:01]27631: WAF :: fetched 3 new logs [28-06-2022 09:24:01]495: WAF :: fetched 2 new logs [28-06-2022 09:25:01]3147: WAF :: fetched 1 new logs [28-06-2022 09:28:02]11192: WAF :: fetched 3 new logs [28-06-2022 09:29:02]13771: WAF :: fetched 2 new logs [28-06-2022 09:30:02]16448: WAF :: fetched 1 new logs [28-06-2022 09:32:02]21799: WAF :: fetched 4 new logs [28-06-2022 09:33:02]24412: WAF :: fetched 12 new logs [28-06-2022 09:34:01]27090: WAF :: fetched 2 new logs [28-06-2022 09:35:02]29773: WAF :: fetched 1 new logs [28-06-2022 09:39:01]10054: WAF :: fetched 2 new logs [28-06-2022 09:41:02]15418: WAF :: fetched 1 new logs [28-06-2022 09:41:02]15418: Checking for user cron vulnerabilities [28-06-2022 09:44:01]24468: Checking ditributed CMS bruteforce attacks [28-06-2022 09:45:02]27510: WAF :: fetched 1 new logs [28-06-2022 09:47:01]508: WAF :: fetched 2 new logs [28-06-2022 09:48:02]3326: WAF :: fetched 3 new logs [28-06-2022 09:49:01]8815: WAF :: fetched 20 new logs [28-06-2022 09:50:02]15520: WAF :: fetched 3 new logs [28-06-2022 09:51:02]18238: WAF :: fetched 7 new logs [28-06-2022 09:52:01]20938: WAF :: fetched 6 new logs [28-06-2022 09:53:02]23677: WAF :: fetched 2 new logs [28-06-2022 09:54:01]26306: WAF :: fetched 6 new logs [28-06-2022 09:55:01]29018: WAF :: fetched 3 new logs [28-06-2022 09:56:02]31767: WAF :: fetched 4 new logs [28-06-2022 09:58:02]4911: WAF :: fetched 1 new logs [28-06-2022 09:59:02]7588: WAF :: fetched 3 new logs [28-06-2022 10:00:01]9938: WAF :: fetched 1 new logs [28-06-2022 10:03:01]18605: WAF :: fetched 1 new logs [28-06-2022 10:04:02]21279: WAF :: fetched 1 new logs [28-06-2022 10:05:01]24008: WAF :: fetched 1 new logs [28-06-2022 10:06:02]26830: WAF :: fetched 3 new logs [28-06-2022 10:07:02]29593: WAF :: fetched 1 new logs [28-06-2022 10:08:02]32294: WAF :: fetched 4 new logs [28-06-2022 10:09:02]2619: WAF :: fetched 5 new logs [28-06-2022 10:10:01]5432: WAF :: fetched 2 new logs [28-06-2022 10:11:02]8225: WAF :: fetched 1 new logs [28-06-2022 10:12:02]11081: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656421922 [28-06-2022 10:12:02]11081: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 10:12:04]11081: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 10:12:04]11081: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-1012/20220628-101202-Yrr-InUzewuLj5yKJGj5ZQAAAA8 [28-06-2022 10:12:04]11081: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 10:12:04]11081: WAF :: fetched 5 new logs [28-06-2022 10:13:02]13832: WAF :: fetched 5 new logs [28-06-2022 10:14:02]16499: WAF :: fetched 2 new logs [28-06-2022 10:15:01]19270: WAF :: fetched 7 new logs [28-06-2022 10:21:01]3845: WAF :: fetched 2 new logs [28-06-2022 10:22:01]6776: WAF :: fetched 2 new logs [28-06-2022 10:23:02]9493: WAF :: fetched 1 new logs [28-06-2022 10:24:01]12231: WAF :: fetched 2 new logs [28-06-2022 10:25:02]15066: WAF :: fetched 5 new logs [28-06-2022 10:26:01]17791: WAF :: fetched 5 new logs [28-06-2022 10:27:01]20612: WAF :: fetched 1 new logs [28-06-2022 10:28:02]23293: WAF :: fetched 9 new logs [28-06-2022 10:29:01]25973: WAF :: fetched 3 new logs [28-06-2022 10:30:02]28703: WAF :: fetched 4 new logs [28-06-2022 10:31:02]31510: WAF :: fetched 1 new logs [28-06-2022 10:32:02]1963: WAF :: fetched 58 new logs [28-06-2022 10:33:01]4713: WAF :: fetched 85 new logs [28-06-2022 10:34:02]7473: WAF :: fetched 17 new logs [28-06-2022 10:36:01]12951: WAF :: fetched 4 new logs [28-06-2022 10:41:02]3631: WAF :: fetched 1 new logs [28-06-2022 10:41:02]3631: Checking for user cron vulnerabilities [28-06-2022 10:42:01]6506: WAF :: fetched 2 new logs [28-06-2022 10:43:02]9246: WAF :: fetched 1 new logs [28-06-2022 10:44:01]11939: Checking ditributed CMS bruteforce attacks [28-06-2022 10:44:01]11939: WAF :: fetched 1 new logs [28-06-2022 10:45:01]14669: WAF :: fetched 1 new logs [28-06-2022 10:46:02]17481: WAF :: fetched 4 new logs [28-06-2022 10:47:01]20286: WAF :: fetched 2 new logs [28-06-2022 10:48:02]22978: WAF :: fetched 2 new logs [28-06-2022 10:49:01]25661: WAF :: fetched 2 new logs [28-06-2022 10:50:01]28485: WAF :: fetched 1 new logs [28-06-2022 10:51:02]31506: WAF :: fetched 1 new logs [28-06-2022 10:52:01]1938: WAF :: fetched 1 new logs [28-06-2022 10:54:02]7598: WAF :: fetched 2 new logs [28-06-2022 10:55:01]10299: WAF :: fetched 3 new logs [28-06-2022 10:56:02]13097: WAF :: fetched 1 new logs [28-06-2022 10:57:01]15793: WAF :: fetched 4 new logs [28-06-2022 10:59:02]21154: WAF :: fetched 1 new logs [28-06-2022 11:00:01]23582: WAF :: fetched 2 new logs [28-06-2022 11:03:01]32296: WAF :: fetched 1 new logs [28-06-2022 11:05:01]5345: WAF :: fetched 5 new logs [28-06-2022 11:07:01]10989: WAF :: fetched 1 new logs [28-06-2022 11:08:02]13668: WAF :: fetched 1 new logs [28-06-2022 11:08:22]11159: Performed RBL check for 23.111.136.34. [28-06-2022 11:09:01]16361: WAF :: fetched 1 new logs [28-06-2022 11:12:01]24537: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656425521 [28-06-2022 11:12:01]24537: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 11:12:03]24537: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 11:12:03]24537: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-1112/20220628-111201-YrsMMVaEqm0gSqtXzqxM7QAAACc [28-06-2022 11:12:03]24537: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 11:12:04]24537: WAF :: fetched 2 new logs [28-06-2022 11:13:02]27188: WAF :: fetched 1 new logs [28-06-2022 11:14:01]29790: WAF :: fetched 1 new logs [28-06-2022 11:15:02]32493: WAF :: fetched 13 new logs [28-06-2022 11:16:02]2756: WAF :: fetched 1 new logs [28-06-2022 11:17:01]5540: WAF :: fetched 2 new logs [28-06-2022 11:18:02]8241: WAF :: fetched 14 new logs [28-06-2022 11:19:01]10865: WAF :: fetched 4 new logs [28-06-2022 11:20:02]13531: WAF :: fetched 4 new logs [28-06-2022 11:21:02]16177: WAF :: fetched 2 new logs [28-06-2022 11:22:01]18870: WAF :: fetched 1 new logs [28-06-2022 11:23:02]21618: WAF :: fetched 1 new logs [28-06-2022 11:25:01]27006: WAF :: fetched 6 new logs [28-06-2022 11:26:02]29747: WAF :: fetched 3 new logs [28-06-2022 11:27:01]32460: WAF :: fetched 3 new logs [28-06-2022 11:30:01]8188: WAF :: fetched 1 new logs [28-06-2022 11:33:02]16284: WAF :: fetched 1 new logs [28-06-2022 11:34:02]18888: WAF :: fetched 5 new logs [28-06-2022 11:35:01]21550: WAF :: fetched 3 new logs [28-06-2022 11:36:02]24331: WAF :: fetched 2 new logs [28-06-2022 11:37:01]26973: WAF :: fetched 1 new logs [28-06-2022 11:38:02]4966: WAF :: fetched 8 new logs [28-06-2022 11:39:01]8104: WAF :: fetched 4 new logs [28-06-2022 11:40:02]10761: WAF :: fetched 2 new logs [28-06-2022 11:41:02]13465: WAF :: fetched 2 new logs [28-06-2022 11:41:02]13465: Checking for user cron vulnerabilities [28-06-2022 11:43:02]18884: WAF :: fetched 2 new logs [28-06-2022 11:44:01]21525: Checking ditributed CMS bruteforce attacks [28-06-2022 11:45:01]24179: WAF :: fetched 1 new logs [28-06-2022 11:47:01]29540: WAF :: fetched 1 new logs [28-06-2022 11:51:02]7982: WAF :: fetched 1 new logs [28-06-2022 11:53:02]13593: WAF :: fetched 9 new logs [28-06-2022 11:54:02]16223: WAF :: fetched 9 new logs [28-06-2022 11:55:01]18859: WAF :: fetched 58 new logs [28-06-2022 11:56:02]21638: WAF :: fetched 2 new logs [28-06-2022 11:58:01]27109: WAF :: fetched 3 new logs [28-06-2022 11:59:02]29862: WAF :: fetched 4 new logs [28-06-2022 12:00:01]32281: WAF :: fetched 3 new logs [28-06-2022 12:03:02]8813: WAF :: fetched 3 new logs [28-06-2022 12:04:02]11517: WAF :: fetched 1 new logs [28-06-2022 12:05:01]14238: WAF :: fetched 2 new logs [28-06-2022 12:09:02]25059: WAF :: fetched 80 new logs [28-06-2022 12:10:02]27716: WAF :: fetched 35 new logs [28-06-2022 12:11:01]30402: WAF :: fetched 52 new logs [28-06-2022 12:12:02]687: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656429122 [28-06-2022 12:12:02]687: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 12:12:04]687: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 12:12:04]687: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-1212/20220628-121202-YrsaQgxkxzjHt5E_PRR-jgAAABs [28-06-2022 12:12:04]687: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 12:12:04]687: WAF :: fetched 14 new logs [28-06-2022 12:16:02]12441: WAF :: fetched 1 new logs [28-06-2022 12:18:01]17877: WAF :: fetched 5 new logs [28-06-2022 12:19:02]20546: WAF :: fetched 1 new logs [28-06-2022 12:20:01]23174: WAF :: fetched 1 new logs [28-06-2022 12:21:02]25975: WAF :: fetched 1 new logs [28-06-2022 12:23:01]31318: WAF :: fetched 1 new logs [28-06-2022 12:24:02]1638: WAF :: fetched 1 new logs [28-06-2022 12:26:01]7127: WAF :: fetched 1 new logs [28-06-2022 12:27:02]9876: WAF :: fetched 1 new logs [28-06-2022 12:29:02]15103: WAF :: fetched 1 new logs [28-06-2022 12:31:02]20391: WAF :: fetched 3 new logs [28-06-2022 12:34:02]28410: WAF :: fetched 2 new logs [28-06-2022 12:35:01]31043: WAF :: fetched 1 new logs [28-06-2022 12:37:01]4114: WAF :: fetched 1 new logs [28-06-2022 12:38:02]14370: WAF :: fetched 1 new logs [28-06-2022 12:39:01]17025: WAF :: fetched 8 new logs [28-06-2022 12:40:02]19698: WAF :: fetched 19 new logs [28-06-2022 12:41:01]22489: WAF :: fetched 16 new logs [28-06-2022 12:41:01]22489: Checking for user cron vulnerabilities [28-06-2022 12:42:01]25204: WAF :: fetched 18 new logs [28-06-2022 12:43:02]27863: WAF :: fetched 24 new logs [28-06-2022 12:44:01]30464: Checking ditributed CMS bruteforce attacks [28-06-2022 12:44:01]30464: WAF :: fetched 22 new logs [28-06-2022 12:45:02]: Checking for software updates [28-06-2022 12:45:02]686: WAF :: fetched 19 new logs [28-06-2022 12:46:02]3478: WAF :: fetched 18 new logs [28-06-2022 12:47:02]6254: WAF :: fetched 19 new logs [28-06-2022 12:48:01]8885: WAF :: fetched 22 new logs [28-06-2022 12:49:02]11571: WAF :: fetched 17 new logs [28-06-2022 12:50:02]14201: WAF :: fetched 5 new logs [28-06-2022 12:51:01]16918: WAF :: fetched 5 new logs [28-06-2022 12:52:02]19635: WAF :: fetched 8 new logs [28-06-2022 12:53:01]22245: WAF :: fetched 18 new logs [28-06-2022 12:54:02]24939: WAF :: fetched 22 new logs [28-06-2022 12:55:02]27589: WAF :: fetched 21 new logs [28-06-2022 12:56:01]30267: WAF :: fetched 29 new logs [28-06-2022 12:57:02]577: WAF :: fetched 22 new logs [28-06-2022 12:58:01]3295: WAF :: fetched 18 new logs [28-06-2022 12:59:02]6028: WAF :: fetched 16 new logs [28-06-2022 13:00:02]8396: WAF :: fetched 28 new logs [28-06-2022 13:01:01]11499: WAF :: fetched 2 new logs [28-06-2022 13:03:01]16733: WAF :: fetched 6 new logs [28-06-2022 13:07:02]27561: WAF :: fetched 1 new logs [28-06-2022 13:10:02]3149: WAF :: fetched 1 new logs [28-06-2022 13:11:01]5892: WAF :: fetched 3 new logs [28-06-2022 13:12:02]8659: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656432722 [28-06-2022 13:12:02]8659: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 13:12:04]8659: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 13:12:04]8659: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-1312/20220628-131202-YrsoUhpcPnMWxu1eMIGeGQAAACg [28-06-2022 13:12:04]8659: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [28-06-2022 13:12:04]8659: WAF :: fetched 3 new logs [28-06-2022 13:13:01]11266: WAF :: fetched 2 new logs [28-06-2022 13:14:02]13944: WAF :: fetched 3 new logs [28-06-2022 13:15:01]16611: WAF :: fetched 4 new logs [28-06-2022 13:16:01]19320: WAF :: fetched 2 new logs [28-06-2022 13:18:01]24795: WAF :: fetched 8 new logs [28-06-2022 13:19:02]27454: WAF :: fetched 7 new logs [28-06-2022 13:20:01]30124: WAF :: fetched 9 new logs [28-06-2022 13:21:01]332: WAF :: fetched 2 new logs [28-06-2022 13:22:02]3170: WAF :: fetched 2 new logs [28-06-2022 13:23:01]5889: WAF :: fetched 1 new logs [28-06-2022 13:25:02]11278: WAF :: fetched 2 new logs [28-06-2022 13:26:01]13998: WAF :: fetched 6 new logs [28-06-2022 13:27:02]16797: WAF :: fetched 2 new logs [28-06-2022 13:28:01]19407: WAF :: fetched 5 new logs [28-06-2022 13:29:02]22057: WAF :: fetched 1 new logs [28-06-2022 13:32:02]30240: WAF :: fetched 1 new logs [28-06-2022 13:34:02]3214: WAF :: fetched 3 new logs [28-06-2022 13:35:02]5935: WAF :: fetched 1 new logs [28-06-2022 13:36:01]8321: WAF :: fetched 1 new logs [28-06-2022 13:37:01]11347: WAF :: fetched 3 new logs [28-06-2022 13:38:01]20220: WAF :: fetched 2 new logs [28-06-2022 13:39:01]24336: WAF :: fetched 2 new logs [28-06-2022 13:40:01]27020: WAF :: fetched 3 new logs [28-06-2022 13:41:01]29706: WAF :: fetched 2 new logs [28-06-2022 13:41:01]29706: Checking for user cron vulnerabilities [28-06-2022 13:42:01]32407: WAF :: fetched 3 new logs [28-06-2022 13:43:01]2674: WAF :: fetched 5 new logs [28-06-2022 13:44:01]5358: Checking ditributed CMS bruteforce attacks [28-06-2022 13:44:01]5358: WAF :: fetched 5 new logs [28-06-2022 13:45:01]: Checking for definition updates [28-06-2022 13:45:01]7971: WAF :: fetched 1 new logs [28-06-2022 13:46:02]10670: WAF :: fetched 4 new logs [28-06-2022 13:49:02]18626: WAF :: fetched 3 new logs [28-06-2022 13:50:01]21008: WAF :: fetched 7 new logs [28-06-2022 13:51:02]24047: WAF :: fetched 3 new logs [28-06-2022 13:52:01]26695: WAF :: fetched 6 new logs [28-06-2022 13:53:02]29418: WAF :: fetched 5 new logs [28-06-2022 13:54:02]32131: WAF :: fetched 1 new logs [28-06-2022 13:55:01]2420: WAF :: fetched 50 new logs [28-06-2022 13:56:02]5290: WAF :: fetched 81 new logs [28-06-2022 13:57:01]7964: WAF :: fetched 27 new logs [28-06-2022 13:58:01]10737: WAF :: fetched 52 new logs [28-06-2022 13:59:02]13429: WAF :: fetched 35 new logs [28-06-2022 14:03:01]24493: WAF :: fetched 4 new logs [28-06-2022 14:06:01]32682: WAF :: fetched 2 new logs [28-06-2022 14:08:01]5836: WAF :: fetched 1 new logs [28-06-2022 14:09:02]8617: WAF :: fetched 4 new logs [28-06-2022 14:11:02]14142: WAF :: fetched 2 new logs [28-06-2022 14:12:01]16801: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656436321 [28-06-2022 14:12:01]16801: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 14:12:03]16801: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 14:12:03]16801: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-1412/20220628-141201-Yrs2YZU-w9c-2_rYfL5sAwAAAEQ [28-06-2022 14:12:03]16801: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 14:12:04]16801: WAF :: fetched 299 new logs [28-06-2022 14:13:02]19562: WAF :: fetched 1 new logs [28-06-2022 14:14:01]22246: WAF :: fetched 2 new logs [28-06-2022 14:15:01]25024: WAF :: fetched 4 new logs [28-06-2022 14:16:02]27760: WAF :: fetched 8 new logs [28-06-2022 14:17:01]30407: WAF :: fetched 2 new logs [28-06-2022 14:18:02]779: WAF :: fetched 5 new logs [28-06-2022 14:19:02]3579: httpd.conf changed. Refreshing watchlist. [28-06-2022 14:19:02]3583: WAF :: fetched 2 new logs [28-06-2022 14:20:01]6638: httpd.conf changed. Refreshing watchlist. [28-06-2022 14:21:02]9602: WAF :: fetched 1 new logs [28-06-2022 14:22:02]12315: WAF :: fetched 9 new logs [28-06-2022 14:23:01]15211: WAF :: fetched 2 new logs [28-06-2022 14:24:02]18069: WAF :: fetched 90 new logs [28-06-2022 14:25:02]20861: WAF :: fetched 16 new logs [28-06-2022 14:25:02]20871: httpd.conf changed. Refreshing watchlist. [28-06-2022 14:26:01]23696: WAF :: fetched 2 new logs [28-06-2022 14:27:02]26429: WAF :: fetched 2 new logs [28-06-2022 14:30:02]2349: WAF :: fetched 2 new logs [28-06-2022 14:31:02]5218: WAF :: fetched 5 new logs [28-06-2022 14:32:01]8010: WAF :: fetched 1 new logs [28-06-2022 14:35:01]16388: WAF :: fetched 2 new logs [28-06-2022 14:36:02]19206: WAF :: fetched 1 new logs [28-06-2022 14:37:02]21941: WAF :: fetched 3 new logs [28-06-2022 14:38:01]28792: WAF :: fetched 2 new logs [28-06-2022 14:39:01]31530: WAF :: fetched 1 new logs [28-06-2022 14:40:01]1980: WAF :: fetched 35 new logs [28-06-2022 14:41:02]4915: WAF :: fetched 3 new logs [28-06-2022 14:41:02]4915: Checking for user cron vulnerabilities [28-06-2022 14:42:01]8091: WAF :: fetched 7 new logs [28-06-2022 14:44:01]13677: Checking ditributed CMS bruteforce attacks [28-06-2022 14:44:02]13677: WAF :: fetched 2 new logs [28-06-2022 14:45:01]16417: WAF :: fetched 1 new logs [28-06-2022 14:46:02]19261: WAF :: fetched 1 new logs [28-06-2022 14:47:02]26333: WAF :: fetched 2 new logs [28-06-2022 14:53:02]11555: Updated license status via CDN [28-06-2022 14:54:02]14269: WAF :: fetched 4 new logs [28-06-2022 14:55:02]16979: WAF :: fetched 2 new logs [28-06-2022 14:56:01]19752: WAF :: fetched 3 new logs [28-06-2022 14:57:01]22566: WAF :: fetched 4 new logs [28-06-2022 14:58:01]25418: WAF :: fetched 6 new logs [28-06-2022 14:59:02]28082: WAF :: fetched 6 new logs [28-06-2022 15:00:02]30721: WAF :: fetched 4 new logs [28-06-2022 15:00:02]30728: httpd.conf changed. Refreshing watchlist. [28-06-2022 15:01:01]1289: Reseting cPGuard inotify settings [28-06-2022 15:01:01]1292: WAF :: fetched 2 new logs [28-06-2022 15:02:01]4427: WAF :: fetched 8 new logs [28-06-2022 15:03:02]7225: WAF :: fetched 44 new logs [28-06-2022 15:04:02]10032: httpd.conf changed. Refreshing watchlist. [28-06-2022 15:04:02]10031: WAF :: fetched 30 new logs [28-06-2022 15:05:02]12752: WAF :: fetched 5 new logs [28-06-2022 15:06:02]15485: WAF :: fetched 6 new logs [28-06-2022 15:07:01]17998: WAF :: fetched 6 new logs [28-06-2022 15:08:01]20982: WAF :: fetched 3 new logs [28-06-2022 15:09:01]23642: WAF :: fetched 1 new logs [28-06-2022 15:10:02]26375: WAF :: fetched 4 new logs [28-06-2022 15:11:02]29159: WAF :: fetched 1 new logs [28-06-2022 15:12:02]31827: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656439922 [28-06-2022 15:12:02]31827: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 15:12:04]31827: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 15:12:04]31827: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-1512/20220628-151202-YrtEcuN07Pm9uL-A1nzQywAAACI [28-06-2022 15:12:04]31827: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 15:12:04]31827: WAF :: fetched 6 new logs [28-06-2022 15:13:02]2202: WAF :: fetched 7 new logs [28-06-2022 15:14:01]4585: WAF :: fetched 4 new logs [28-06-2022 15:15:01]7649: WAF :: fetched 6 new logs [28-06-2022 15:16:01]10370: WAF :: fetched 6 new logs [28-06-2022 15:17:02]13071: WAF :: fetched 7 new logs [28-06-2022 15:18:01]15852: WAF :: fetched 7 new logs [28-06-2022 15:19:02]18581: WAF :: fetched 3 new logs [28-06-2022 15:20:02]21324: WAF :: fetched 9 new logs [28-06-2022 15:21:01]24084: WAF :: fetched 9 new logs [28-06-2022 15:22:02]26969: WAF :: fetched 13 new logs [28-06-2022 15:23:02]29751: WAF :: fetched 4 new logs [28-06-2022 15:24:02]32456: WAF :: fetched 9 new logs [28-06-2022 15:25:01]2819: WAF :: fetched 4 new logs [28-06-2022 15:26:02]5711: WAF :: fetched 4 new logs [28-06-2022 15:27:01]8404: WAF :: fetched 5 new logs [28-06-2022 15:28:02]11161: WAF :: fetched 5 new logs [28-06-2022 15:29:02]13855: WAF :: fetched 11 new logs [28-06-2022 15:30:01]16674: WAF :: fetched 3 new logs [28-06-2022 15:31:01]19446: WAF :: fetched 2 new logs [28-06-2022 15:32:02]22147: WAF :: fetched 2 new logs [28-06-2022 15:33:02]25003: WAF :: fetched 9 new logs [28-06-2022 15:34:02]27772: WAF :: fetched 6 new logs [28-06-2022 15:35:01]30502: WAF :: fetched 3 new logs [28-06-2022 15:37:01]3536: WAF :: fetched 1 new logs [28-06-2022 15:38:01]11228: WAF :: fetched 1 new logs [28-06-2022 15:39:01]18087: WAF :: fetched 6 new logs [28-06-2022 15:40:02]20780: WAF :: fetched 2 new logs [28-06-2022 15:41:01]23553: WAF :: fetched 4 new logs [28-06-2022 15:41:01]23553: Checking for user cron vulnerabilities [28-06-2022 15:42:01]26323: WAF :: fetched 2 new logs [28-06-2022 15:44:01]31836: Checking ditributed CMS bruteforce attacks [28-06-2022 15:44:01]31836: WAF :: fetched 4 new logs [28-06-2022 15:45:02]2232: WAF :: fetched 3 new logs [28-06-2022 15:46:02]5098: WAF :: fetched 5 new logs [28-06-2022 15:47:01]7792: WAF :: fetched 3 new logs [28-06-2022 15:48:02]10572: WAF :: fetched 3 new logs [28-06-2022 15:49:02]13251: WAF :: fetched 3 new logs [28-06-2022 15:50:02]15998: WAF :: fetched 3 new logs [28-06-2022 15:51:02]18813: WAF :: fetched 36 new logs [28-06-2022 15:52:02]21544: WAF :: fetched 38 new logs [28-06-2022 15:53:01]24361: WAF :: fetched 41 new logs [28-06-2022 15:54:02]27175: WAF :: fetched 41 new logs [28-06-2022 15:55:02]29870: WAF :: fetched 13 new logs [28-06-2022 15:56:01]32669: WAF :: fetched 2 new logs [28-06-2022 15:57:02]3084: WAF :: fetched 2 new logs [28-06-2022 15:58:01]5993: WAF :: fetched 1 new logs [28-06-2022 15:59:01]8772: WAF :: fetched 2 new logs [28-06-2022 16:00:02]11200: WAF :: fetched 1 new logs [28-06-2022 16:02:01]17172: WAF :: fetched 1 new logs [28-06-2022 16:03:02]19946: WAF :: fetched 5 new logs [28-06-2022 16:04:01]22588: WAF :: fetched 1 new logs [28-06-2022 16:05:02]25390: WAF :: fetched 1 new logs [28-06-2022 16:06:02]28131: WAF :: fetched 4 new logs [28-06-2022 16:08:02]1244: WAF :: fetched 1 new logs [28-06-2022 16:09:01]3962: WAF :: fetched 3 new logs [28-06-2022 16:12:01]12164: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656443521 [28-06-2022 16:12:02]12164: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 16:12:04]12164: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 16:12:04]12164: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-1612/20220628-161202-YrtSgpyhMr1hNmzmTnMKRgAAAA0 [28-06-2022 16:12:04]12164: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 16:12:04]12164: WAF :: fetched 3 new logs [28-06-2022 16:13:02]14964: WAF :: fetched 3 new logs [28-06-2022 16:14:02]17728: WAF :: fetched 3 new logs [28-06-2022 16:15:01]20530: WAF :: fetched 2 new logs [28-06-2022 16:16:01]23361: WAF :: fetched 3 new logs [28-06-2022 16:17:02]26113: WAF :: fetched 1 new logs [28-06-2022 16:18:02]28973: WAF :: fetched 5 new logs [28-06-2022 16:19:01]31655: WAF :: fetched 5 new logs [28-06-2022 16:20:02]2046: WAF :: fetched 13 new logs [28-06-2022 16:21:02]4883: WAF :: fetched 21 new logs [28-06-2022 16:22:01]7568: WAF :: fetched 4 new logs [28-06-2022 16:23:01]10350: WAF :: fetched 15 new logs [28-06-2022 16:24:02]13003: WAF :: fetched 7 new logs [28-06-2022 16:25:02]15677: WAF :: fetched 4 new logs [28-06-2022 16:26:01]18395: WAF :: fetched 8 new logs [28-06-2022 16:27:02]21094: WAF :: fetched 5 new logs [28-06-2022 16:28:01]23854: WAF :: fetched 3 new logs [28-06-2022 16:29:02]26598: WAF :: fetched 2 new logs [28-06-2022 16:30:01]29308: WAF :: fetched 6 new logs [28-06-2022 16:31:01]32037: WAF :: fetched 2 new logs [28-06-2022 16:33:01]5178: WAF :: fetched 1 new logs [28-06-2022 16:34:02]7956: WAF :: fetched 4 new logs [28-06-2022 16:35:01]10659: WAF :: fetched 27 new logs [28-06-2022 16:36:02]13420: WAF :: fetched 39 new logs [28-06-2022 16:37:02]16072: WAF :: fetched 23 new logs [28-06-2022 16:38:01]20200: WAF :: fetched 30 new logs [28-06-2022 16:39:02]22950: WAF :: fetched 23 new logs [28-06-2022 16:40:01]25638: WAF :: fetched 1 new logs [28-06-2022 16:41:02]28412: Checking for user cron vulnerabilities [28-06-2022 16:42:02]31038: WAF :: fetched 1 new logs [28-06-2022 16:44:02]4116: Checking ditributed CMS bruteforce attacks [28-06-2022 16:47:01]12135: WAF :: fetched 3 new logs [28-06-2022 16:48:02]15395: WAF :: fetched 2 new logs [28-06-2022 16:50:01]20985: WAF :: fetched 1 new logs [28-06-2022 16:51:01]23736: WAF :: fetched 1 new logs [28-06-2022 16:52:02]26436: WAF :: fetched 4 new logs [28-06-2022 16:55:02]2117: WAF :: fetched 1 new logs [28-06-2022 16:56:01]4882: WAF :: fetched 3 new logs [28-06-2022 16:57:02]9351: WAF :: fetched 3 new logs [28-06-2022 16:58:01]12071: WAF :: fetched 1 new logs [28-06-2022 16:59:01]14690: WAF :: fetched 4 new logs [28-06-2022 17:00:02]17079: WAF :: fetched 3 new logs [28-06-2022 17:01:02]20297: WAF :: fetched 3 new logs [28-06-2022 17:02:02]26917: WAF :: fetched 7 new logs [28-06-2022 17:03:01]31610: WAF :: fetched 4 new logs [28-06-2022 17:05:02]4691: WAF :: fetched 3 new logs [28-06-2022 17:06:01]7484: WAF :: fetched 1 new logs [28-06-2022 17:07:02]10172: WAF :: fetched 3 new logs [28-06-2022 17:09:02]15647: WAF :: fetched 1 new logs [28-06-2022 17:10:02]18316: WAF :: fetched 4 new logs [28-06-2022 17:11:02]21035: WAF :: fetched 24 new logs [28-06-2022 17:12:01]23740: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656447121 [28-06-2022 17:12:01]23740: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 17:12:03]23740: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 17:12:03]23740: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-1712/20220628-171201-YrtgkdGR9N-YM7pa-TJ_kwAAADc [28-06-2022 17:12:03]23740: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 17:12:04]23740: WAF :: fetched 52 new logs [28-06-2022 17:13:02]26529: WAF :: fetched 46 new logs [28-06-2022 17:14:01]29211: WAF :: fetched 42 new logs [28-06-2022 17:15:01]31895: WAF :: fetched 13 new logs [28-06-2022 17:16:02]2278: WAF :: fetched 1 new logs [28-06-2022 17:17:01]4986: WAF :: fetched 51 new logs [28-06-2022 17:20:01]13079: WAF :: fetched 2 new logs [28-06-2022 17:22:01]18448: WAF :: fetched 3 new logs [28-06-2022 17:23:02]21211: WAF :: fetched 1 new logs [28-06-2022 17:24:02]23900: WAF :: fetched 1 new logs [28-06-2022 17:25:01]26569: WAF :: fetched 4 new logs [28-06-2022 17:27:01]31946: WAF :: fetched 1 new logs [28-06-2022 17:28:02]2337: WAF :: fetched 1 new logs [28-06-2022 17:29:01]5047: WAF :: fetched 1 new logs [28-06-2022 17:30:02]7782: WAF :: fetched 3 new logs [28-06-2022 17:31:01]10461: WAF :: fetched 1 new logs [28-06-2022 17:32:01]13140: WAF :: fetched 1 new logs [28-06-2022 17:33:02]15913: WAF :: fetched 1 new logs [28-06-2022 17:36:02]23960: WAF :: fetched 2 new logs [28-06-2022 17:38:02]29369: WAF :: fetched 1 new logs [28-06-2022 17:39:01]32026: WAF :: fetched 1 new logs [28-06-2022 17:41:02]5082: WAF :: fetched 1 new logs [28-06-2022 17:41:02]5082: Checking for user cron vulnerabilities [28-06-2022 17:42:01]10993: WAF :: fetched 2 new logs [28-06-2022 17:43:02]19526: WAF :: fetched 1 new logs [28-06-2022 17:44:02]22253: Checking ditributed CMS bruteforce attacks [28-06-2022 17:45:01]24935: WAF :: fetched 2 new logs [28-06-2022 17:46:01]27646: WAF :: fetched 2 new logs [28-06-2022 17:49:02]3304: WAF :: fetched 1 new logs [28-06-2022 17:50:02]6023: WAF :: fetched 2 new logs [28-06-2022 17:52:02]11412: WAF :: fetched 1 new logs [28-06-2022 17:53:02]14113: WAF :: fetched 6 new logs [28-06-2022 17:54:01]16733: WAF :: fetched 4 new logs [28-06-2022 17:57:02]24676: WAF :: fetched 3 new logs [28-06-2022 17:59:01]29992: WAF :: fetched 2 new logs [28-06-2022 18:01:02]3169: WAF :: fetched 1 new logs [28-06-2022 18:02:01]5990: WAF :: fetched 4 new logs [28-06-2022 18:03:02]8752: WAF :: fetched 1 new logs [28-06-2022 18:04:01]11394: WAF :: fetched 2 new logs [28-06-2022 18:05:01]14138: WAF :: fetched 1 new logs [28-06-2022 18:06:02]16931: WAF :: fetched 1 new logs [28-06-2022 18:07:01]19588: WAF :: fetched 2 new logs [28-06-2022 18:08:02]22345: WAF :: fetched 2 new logs [28-06-2022 18:10:02]27623: WAF :: fetched 3 new logs [28-06-2022 18:11:01]30295: WAF :: fetched 2 new logs [28-06-2022 18:12:02]498: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656450722 [28-06-2022 18:12:02]498: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 18:12:04]498: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 18:12:04]498: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-1812/20220628-181202-YrtuokIWfl-U_JyA7dMKJAAAAAo [28-06-2022 18:12:04]498: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 18:12:05]498: WAF :: fetched 1 new logs [28-06-2022 18:13:02]3267: WAF :: fetched 3 new logs [28-06-2022 18:14:01]5940: WAF :: fetched 4 new logs [28-06-2022 18:15:02]8693: WAF :: fetched 2 new logs [28-06-2022 18:17:02]14129: WAF :: fetched 6 new logs [28-06-2022 18:18:02]16873: WAF :: fetched 4 new logs [28-06-2022 18:19:01]19539: WAF :: fetched 4 new logs [28-06-2022 18:20:02]22233: WAF :: fetched 2 new logs [28-06-2022 18:21:01]24933: WAF :: fetched 1 new logs [28-06-2022 18:22:02]27625: WAF :: fetched 1 new logs [28-06-2022 18:23:01]30332: WAF :: fetched 2 new logs [28-06-2022 18:24:02]542: WAF :: fetched 1 new logs [28-06-2022 18:26:01]6059: WAF :: fetched 1 new logs [28-06-2022 18:27:02]8814: WAF :: fetched 1 new logs [28-06-2022 18:31:02]19607: WAF :: fetched 3 new logs [28-06-2022 18:32:02]22259: WAF :: fetched 1 new logs [28-06-2022 18:34:02]27723: WAF :: fetched 1 new logs [28-06-2022 18:36:02]669: WAF :: fetched 1 new logs [28-06-2022 18:40:01]11796: WAF :: fetched 1 new logs [28-06-2022 18:41:02]14512: Checking for user cron vulnerabilities [28-06-2022 18:43:02]19808: WAF :: fetched 1 new logs [28-06-2022 18:44:01]25653: Checking ditributed CMS bruteforce attacks [28-06-2022 18:45:02]805: WAF :: fetched 1 new logs [28-06-2022 18:47:01]6251: WAF :: fetched 5 new logs [28-06-2022 18:48:02]8973: WAF :: fetched 15 new logs [28-06-2022 18:49:01]11692: WAF :: fetched 10 new logs [28-06-2022 18:50:02]14343: WAF :: fetched 2 new logs [28-06-2022 18:52:01]19631: WAF :: fetched 2 new logs [28-06-2022 18:53:02]22260: WAF :: fetched 1 new logs [28-06-2022 18:54:01]25064: WAF :: fetched 5 new logs [28-06-2022 18:55:02]27763: WAF :: fetched 1 new logs [28-06-2022 18:56:02]30412: WAF :: fetched 5 new logs [28-06-2022 18:57:02]600: WAF :: fetched 2 new logs [28-06-2022 18:58:02]3291: WAF :: fetched 1 new logs [28-06-2022 18:59:01]6107: WAF :: fetched 4 new logs [28-06-2022 19:00:02]8541: WAF :: fetched 4 new logs [28-06-2022 19:01:02]11624: WAF :: fetched 3 new logs [28-06-2022 19:05:01]22329: WAF :: fetched 1 new logs [28-06-2022 19:07:01]27672: WAF :: fetched 2 new logs [28-06-2022 19:08:01]30294: WAF :: fetched 1 new logs [28-06-2022 19:09:02]627: WAF :: fetched 1 new logs [28-06-2022 19:10:01]3319: WAF :: fetched 2 new logs [28-06-2022 19:11:02]6060: WAF :: fetched 1 new logs [28-06-2022 19:12:02]8725: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656454322 [28-06-2022 19:12:02]8725: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 19:12:04]8725: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 19:12:04]8725: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-1912/20220628-191202-Yrt8srkuiIQqEgM1aIDMvwAAAAI [28-06-2022 19:12:04]8725: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 19:12:04]8725: WAF :: fetched 2 new logs [28-06-2022 19:13:01]11379: WAF :: fetched 2 new logs [28-06-2022 19:17:01]22044: WAF :: fetched 2 new logs [28-06-2022 19:18:02]24710: WAF :: fetched 4 new logs [28-06-2022 19:19:02]27405: WAF :: fetched 35 new logs [28-06-2022 19:20:01]30084: WAF :: fetched 4 new logs [28-06-2022 19:21:02]361: WAF :: fetched 1 new logs [28-06-2022 19:27:01]16460: WAF :: fetched 3 new logs [28-06-2022 19:28:01]19049: WAF :: fetched 4 new logs [28-06-2022 19:29:02]21756: WAF :: fetched 1 new logs [28-06-2022 19:30:01]24355: WAF :: fetched 1 new logs [28-06-2022 19:31:02]27090: WAF :: fetched 2 new logs [28-06-2022 19:32:02]29727: WAF :: fetched 26 new logs [28-06-2022 19:33:02]32370: WAF :: fetched 26 new logs [28-06-2022 19:34:01]2699: WAF :: fetched 31 new logs [28-06-2022 19:35:02]5429: WAF :: fetched 29 new logs [28-06-2022 19:36:02]8121: WAF :: fetched 16 new logs [28-06-2022 19:37:01]10735: WAF :: fetched 28 new logs [28-06-2022 19:38:02]20119: WAF :: fetched 31 new logs [28-06-2022 19:39:01]23966: WAF :: fetched 24 new logs [28-06-2022 19:40:02]26641: WAF :: fetched 23 new logs [28-06-2022 19:41:02]29322: WAF :: fetched 22 new logs [28-06-2022 19:41:02]29322: Checking for user cron vulnerabilities [28-06-2022 19:42:01]31945: WAF :: fetched 25 new logs [28-06-2022 19:43:02]2195: WAF :: fetched 21 new logs [28-06-2022 19:44:01]4968: Checking ditributed CMS bruteforce attacks [28-06-2022 19:44:01]4968: WAF :: fetched 6 new logs [28-06-2022 19:45:01]: Checking for definition updates [28-06-2022 19:45:01]7603: WAF :: fetched 3 new logs [28-06-2022 19:46:02]10266: WAF :: fetched 1 new logs [28-06-2022 19:48:02]15559: WAF :: fetched 2 new logs [28-06-2022 19:49:02]18316: WAF :: fetched 6 new logs [28-06-2022 19:50:01]20929: WAF :: fetched 6 new logs [28-06-2022 19:51:02]23701: WAF :: fetched 8 new logs [28-06-2022 19:52:01]26315: WAF :: fetched 3 new logs [28-06-2022 19:53:02]28966: WAF :: fetched 2 new logs [28-06-2022 19:54:02]31644: WAF :: fetched 1 new logs [28-06-2022 19:57:01]7344: WAF :: fetched 2 new logs [28-06-2022 19:58:02]9992: WAF :: fetched 2 new logs [28-06-2022 19:59:01]12742: WAF :: fetched 16 new logs [28-06-2022 20:02:01]21020: WAF :: fetched 4 new logs [28-06-2022 20:03:02]23674: WAF :: fetched 1 new logs [28-06-2022 20:04:01]26368: WAF :: fetched 2 new logs [28-06-2022 20:06:02]31711: WAF :: fetched 3 new logs [28-06-2022 20:07:01]1900: WAF :: fetched 1 new logs [28-06-2022 20:08:02]4613: WAF :: fetched 1 new logs [28-06-2022 20:11:02]12692: WAF :: fetched 1 new logs [28-06-2022 20:12:01]15296: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656457921 [28-06-2022 20:12:01]15296: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 20:12:03]15296: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 20:12:04]15296: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-2012/20220628-201201-YruKwdxik02_kxd23g-6dQAAAAc [28-06-2022 20:12:04]15296: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 20:12:04]15296: WAF :: fetched 11 new logs [28-06-2022 20:13:02]17966: WAF :: fetched 1 new logs [28-06-2022 20:14:01]20617: WAF :: fetched 1 new logs [28-06-2022 20:15:01]23283: WAF :: fetched 3 new logs [28-06-2022 20:16:02]25950: WAF :: fetched 1 new logs [28-06-2022 20:18:02]31255: WAF :: fetched 5 new logs [28-06-2022 20:19:02]1572: WAF :: fetched 4 new logs [28-06-2022 20:21:02]7043: WAF :: fetched 7 new logs [28-06-2022 20:23:02]12359: WAF :: fetched 5 new logs [28-06-2022 20:24:02]15068: WAF :: fetched 3 new logs [28-06-2022 20:25:02]17729: WAF :: fetched 2 new logs [28-06-2022 20:26:02]20418: WAF :: fetched 3 new logs [28-06-2022 20:27:02]23078: WAF :: fetched 4 new logs [28-06-2022 20:28:01]25335: WAF :: fetched 3 new logs [28-06-2022 20:29:02]28483: WAF :: fetched 6 new logs [28-06-2022 20:30:02]31168: WAF :: fetched 2 new logs [28-06-2022 20:31:01]1048: WAF :: fetched 4 new logs [28-06-2022 20:32:01]4177: WAF :: fetched 3 new logs [28-06-2022 20:33:01]6885: WAF :: fetched 4 new logs [28-06-2022 20:34:01]9629: WAF :: fetched 6 new logs [28-06-2022 20:35:01]12324: WAF :: fetched 2 new logs [28-06-2022 20:36:02]15027: WAF :: fetched 3 new logs [28-06-2022 20:37:02]17614: WAF :: fetched 4 new logs [28-06-2022 20:38:01]24654: WAF :: fetched 4 new logs [28-06-2022 20:39:02]31729: WAF :: fetched 7 new logs [28-06-2022 20:40:01]1975: WAF :: fetched 2 new logs [28-06-2022 20:41:02]4736: WAF :: fetched 1 new logs [28-06-2022 20:41:02]4736: Checking for user cron vulnerabilities [28-06-2022 20:42:02]7370: WAF :: fetched 3 new logs [28-06-2022 20:44:01]12697: Checking ditributed CMS bruteforce attacks [28-06-2022 20:44:01]12697: WAF :: fetched 1 new logs [28-06-2022 20:45:02]15367: WAF :: fetched 3 new logs [28-06-2022 20:46:01]18024: WAF :: fetched 5 new logs [28-06-2022 20:47:02]20680: WAF :: fetched 4 new logs [28-06-2022 20:48:02]23294: WAF :: fetched 1 new logs [28-06-2022 20:49:01]26017: WAF :: fetched 4 new logs [28-06-2022 20:50:02]28659: WAF :: fetched 1 new logs [28-06-2022 20:51:01]31306: WAF :: fetched 1 new logs [28-06-2022 20:52:01]1549: WAF :: fetched 2 new logs [28-06-2022 20:53:02]4273: WAF :: fetched 2 new logs [28-06-2022 20:54:01]7095: WAF :: fetched 1 new logs [28-06-2022 20:55:02]9781: WAF :: fetched 2 new logs [28-06-2022 20:56:02]12422: WAF :: fetched 1 new logs [28-06-2022 20:58:02]17773: WAF :: fetched 1 new logs [28-06-2022 20:59:01]20481: WAF :: fetched 1 new logs [28-06-2022 21:00:01]22843: WAF :: fetched 2 new logs [28-06-2022 21:01:02]25990: WAF :: fetched 1 new logs [28-06-2022 21:04:02]1600: WAF :: fetched 1 new logs [28-06-2022 21:05:01]4282: WAF :: fetched 1 new logs [28-06-2022 21:06:02]6994: WAF :: fetched 3 new logs [28-06-2022 21:07:01]9636: WAF :: fetched 29 new logs [28-06-2022 21:08:02]12366: WAF :: fetched 1 new logs [28-06-2022 21:10:01]17819: WAF :: fetched 3 new logs [28-06-2022 21:12:01]23156: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656461521 [28-06-2022 21:12:01]23156: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 21:12:03]23156: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 21:12:04]23156: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-2112/20220628-211201-YruY0duzLS6qZZwu1BSI4AAAAAE [28-06-2022 21:12:04]23156: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 21:12:04]23156: WAF :: fetched 3 new logs [28-06-2022 21:15:01]31278: WAF :: fetched 2 new logs [28-06-2022 21:16:02]1607: WAF :: fetched 4 new logs [28-06-2022 21:17:02]4372: WAF :: fetched 1 new logs [28-06-2022 21:18:01]7074: WAF :: fetched 1 new logs [28-06-2022 21:19:02]9832: WAF :: fetched 5 new logs [28-06-2022 21:21:01]15194: WAF :: fetched 3 new logs [28-06-2022 21:22:01]17877: WAF :: fetched 4 new logs [28-06-2022 21:23:02]20515: WAF :: fetched 3 new logs [28-06-2022 21:27:02]31187: WAF :: fetched 37 new logs [28-06-2022 21:28:01]1353: WAF :: fetched 34 new logs [28-06-2022 21:29:01]4200: WAF :: fetched 39 new logs [28-06-2022 21:30:02]6911: WAF :: fetched 28 new logs [28-06-2022 21:31:01]9444: WAF :: fetched 23 new logs [28-06-2022 21:33:02]14849: WAF :: fetched 29 new logs [28-06-2022 21:34:02]17602: WAF :: fetched 22 new logs [28-06-2022 21:35:01]20246: WAF :: fetched 30 new logs [28-06-2022 21:36:02]23021: WAF :: fetched 5 new logs [28-06-2022 21:37:02]25707: WAF :: fetched 25 new logs [28-06-2022 21:38:01]28885: WAF :: fetched 22 new logs [28-06-2022 21:39:02]31617: WAF :: fetched 12 new logs [28-06-2022 21:40:01]1819: WAF :: fetched 14 new logs [28-06-2022 21:41:02]4632: WAF :: fetched 16 new logs [28-06-2022 21:41:02]4632: Checking for user cron vulnerabilities [28-06-2022 21:42:02]9432: WAF :: fetched 14 new logs [28-06-2022 21:43:01]16062: WAF :: fetched 14 new logs [28-06-2022 21:44:01]20906: Checking ditributed CMS bruteforce attacks [28-06-2022 21:44:02]20906: WAF :: fetched 13 new logs [28-06-2022 21:45:01]23518: WAF :: fetched 17 new logs [28-06-2022 21:46:01]26229: WAF :: fetched 12 new logs [28-06-2022 21:47:02]28836: WAF :: fetched 14 new logs [28-06-2022 21:48:01]31435: WAF :: fetched 17 new logs [28-06-2022 21:49:02]1836: WAF :: fetched 2 new logs [28-06-2022 21:50:02]4558: WAF :: fetched 2 new logs [28-06-2022 21:51:01]7308: WAF :: fetched 2 new logs [28-06-2022 21:52:01]9927: WAF :: fetched 3 new logs [28-06-2022 21:53:02]12566: WAF :: fetched 1 new logs [28-06-2022 21:56:02]20581: WAF :: fetched 3 new logs [28-06-2022 21:58:02]25829: WAF :: fetched 1 new logs [28-06-2022 22:00:02]30971: WAF :: fetched 1 new logs [28-06-2022 22:01:01]1368: WAF :: fetched 4 new logs [28-06-2022 22:02:02]4532: WAF :: fetched 2 new logs [28-06-2022 22:07:08]17794: Performing Domain reputation checks [28-06-2022 22:08:02]20447: WAF :: fetched 4 new logs [28-06-2022 22:09:01]23141: WAF :: fetched 2 new logs [28-06-2022 22:10:01]25791: WAF :: fetched 1 new logs [28-06-2022 22:11:02]28520: WAF :: fetched 1 new logs [28-06-2022 22:12:01]31117: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656465121 [28-06-2022 22:12:01]31117: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 22:12:03]31117: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 22:12:03]31117: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-2212/20220628-221201-Yrum4fmOLt3MFwaBDT-8DAAAAAk [28-06-2022 22:12:03]31117: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 22:12:04]31117: WAF :: fetched 1 new logs [28-06-2022 22:13:01]1332: WAF :: fetched 2 new logs [28-06-2022 22:14:02]4093: WAF :: fetched 8 new logs [28-06-2022 22:15:01]6735: WAF :: fetched 1 new logs [28-06-2022 22:16:01]9448: WAF :: fetched 6 new logs [28-06-2022 22:17:02]12067: WAF :: fetched 7 new logs [28-06-2022 22:18:01]14709: WAF :: fetched 2 new logs [28-06-2022 22:19:02]17455: WAF :: fetched 1 new logs [28-06-2022 22:23:01]28204: WAF :: fetched 7 new logs [28-06-2022 22:25:02]1301: WAF :: fetched 3 new logs [28-06-2022 22:26:01]4177: WAF :: fetched 2 new logs [28-06-2022 22:27:02]6926: WAF :: fetched 10 new logs [28-06-2022 22:28:02]9636: WAF :: fetched 1 new logs [28-06-2022 22:29:02]12428: WAF :: fetched 1 new logs [28-06-2022 22:30:01]15140: WAF :: fetched 26 new logs [28-06-2022 22:31:02]17963: WAF :: fetched 3 new logs [28-06-2022 22:32:02]20649: WAF :: fetched 1 new logs [28-06-2022 22:33:01]23310: WAF :: fetched 2 new logs [28-06-2022 22:35:01]28774: WAF :: fetched 16 new logs [28-06-2022 22:36:02]31531: WAF :: fetched 17 new logs [28-06-2022 22:37:02]1818: WAF :: fetched 7 new logs [28-06-2022 22:38:01]8409: WAF :: fetched 14 new logs [28-06-2022 22:39:02]14967: WAF :: fetched 9 new logs [28-06-2022 22:40:02]17655: WAF :: fetched 13 new logs [28-06-2022 22:41:01]20379: WAF :: fetched 10 new logs [28-06-2022 22:41:01]20379: Checking for user cron vulnerabilities [28-06-2022 22:42:02]23079: WAF :: fetched 12 new logs [28-06-2022 22:43:01]25732: WAF :: fetched 6 new logs [28-06-2022 22:44:01]28541: Checking ditributed CMS bruteforce attacks [28-06-2022 22:44:02]28541: WAF :: fetched 10 new logs [28-06-2022 22:45:01]31185: WAF :: fetched 11 new logs [28-06-2022 22:46:02]1501: WAF :: fetched 10 new logs [28-06-2022 22:47:01]4181: WAF :: fetched 8 new logs [28-06-2022 22:48:02]6891: WAF :: fetched 14 new logs [28-06-2022 22:49:02]9599: WAF :: fetched 12 new logs [28-06-2022 22:50:02]12308: WAF :: fetched 8 new logs [28-06-2022 22:51:01]15006: WAF :: fetched 9 new logs [28-06-2022 22:52:01]17674: WAF :: fetched 4 new logs [28-06-2022 22:53:02]20340: WAF :: fetched 10 new logs [28-06-2022 22:54:01]23052: WAF :: fetched 8 new logs [28-06-2022 22:55:02]25723: WAF :: fetched 45 new logs [28-06-2022 22:56:02]28408: WAF :: fetched 12 new logs [28-06-2022 22:57:01]31001: WAF :: fetched 7 new logs [28-06-2022 22:58:02]1256: WAF :: fetched 6 new logs [28-06-2022 22:59:01]4042: WAF :: fetched 8 new logs [28-06-2022 23:00:02]6462: WAF :: fetched 10 new logs [28-06-2022 23:01:02]9602: WAF :: fetched 12 new logs [28-06-2022 23:02:01]12309: WAF :: fetched 4 new logs [28-06-2022 23:03:02]14945: WAF :: fetched 8 new logs [28-06-2022 23:04:02]17673: WAF :: fetched 6 new logs [28-06-2022 23:05:02]20316: WAF :: fetched 10 new logs [28-06-2022 23:06:01]23040: WAF :: fetched 6 new logs [28-06-2022 23:07:02]25765: WAF :: fetched 3 new logs [28-06-2022 23:07:57]25934: Performed RBL check for 23.111.136.34. [28-06-2022 23:08:01]28403: WAF :: fetched 9 new logs [28-06-2022 23:09:01]31121: WAF :: fetched 7 new logs [28-06-2022 23:10:02]1424: WAF :: fetched 8 new logs [28-06-2022 23:11:02]4192: WAF :: fetched 4 new logs [28-06-2022 23:12:02]6906: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656468722 [28-06-2022 23:12:02]6906: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-06-2022 23:12:04]6906: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-06-2022 23:12:04]6906: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220628/20220628-2312/20220628-231202-Yru08vLovokp_hvHsoQmIgAAACU [28-06-2022 23:12:04]6906: WAF :: No suitable log file found. Using SQLite.. [28-06-2022 23:12:04]6906: WAF :: fetched 2 new logs [28-06-2022 23:15:02]14957: WAF :: fetched 3 new logs [28-06-2022 23:17:01]20273: WAF :: fetched 2 new logs [28-06-2022 23:18:02]22954: WAF :: fetched 1 new logs [28-06-2022 23:19:01]25551: WAF :: fetched 2 new logs [28-06-2022 23:20:01]28280: WAF :: fetched 2 new logs [28-06-2022 23:21:02]30952: WAF :: fetched 5 new logs [28-06-2022 23:22:01]1090: WAF :: fetched 1 new logs [28-06-2022 23:23:02]3683: WAF :: fetched 3 new logs [28-06-2022 23:24:01]6260: WAF :: fetched 1 new logs [28-06-2022 23:26:02]11518: WAF :: fetched 24 new logs [28-06-2022 23:27:02]14069: WAF :: fetched 3 new logs [28-06-2022 23:28:01]16655: WAF :: fetched 1 new logs [28-06-2022 23:31:01]24423: WAF :: fetched 3 new logs [28-06-2022 23:32:02]26997: WAF :: fetched 1 new logs [28-06-2022 23:33:01]29550: WAF :: fetched 1 new logs [28-06-2022 23:34:02]32119: WAF :: fetched 2 new logs [28-06-2022 23:35:01]2367: WAF :: fetched 3 new logs [28-06-2022 23:37:02]7583: WAF :: fetched 2 new logs [28-06-2022 23:38:01]13506: WAF :: fetched 5 new logs [28-06-2022 23:39:02]16767: WAF :: fetched 7 new logs [28-06-2022 23:40:02]19429: WAF :: fetched 4 new logs [28-06-2022 23:41:01]22084: WAF :: fetched 7 new logs [28-06-2022 23:41:01]22084: Checking for user cron vulnerabilities [28-06-2022 23:42:02]24718: WAF :: fetched 3 new logs [28-06-2022 23:43:01]29506: WAF :: fetched 3 new logs [28-06-2022 23:44:01]1812: Checking ditributed CMS bruteforce attacks [28-06-2022 23:44:01]1812: WAF :: fetched 2 new logs [28-06-2022 23:45:02]4624: WAF :: fetched 1 new logs [28-06-2022 23:46:01]7261: WAF :: fetched 1 new logs [28-06-2022 23:48:01]12505: WAF :: fetched 4 new logs [28-06-2022 23:49:02]15153: WAF :: fetched 1 new logs [28-06-2022 23:50:01]17999: WAF :: fetched 5 new logs [28-06-2022 23:51:02]20740: WAF :: fetched 3 new logs [28-06-2022 23:52:02]23357: WAF :: fetched 3 new logs [28-06-2022 23:54:01]28778: WAF :: fetched 1 new logs [28-06-2022 23:55:01]31715: WAF :: fetched 61 new logs [28-06-2022 23:56:02]2060: httpd.conf changed. Refreshing watchlist. [29-06-2022 00:00:01]12584: WAF :: fetched 2 new logs [29-06-2022 00:01:02]15967: httpd.conf changed. Refreshing watchlist. [29-06-2022 00:01:02]15951: WAF :: fetched 6 new logs [29-06-2022 00:01:05]15951: Sending daily report for June 29, 2022 [29-06-2022 00:02:02]18666: WAF :: fetched 1 new logs [29-06-2022 00:04:02]23934: WAF :: fetched 2 new logs [29-06-2022 00:05:01]26709: WAF :: fetched 2 new logs [29-06-2022 00:05:02]26709: Deleted 0 entries older than 6 MONTH from scanner_logs [29-06-2022 00:05:02]26709: Deleted 0 files from Quarantine [29-06-2022 00:07:02]32079: WAF :: fetched 2 new logs [29-06-2022 00:08:01]2391: WAF :: fetched 1 new logs [29-06-2022 00:09:02]5193: WAF :: fetched 1 new logs [29-06-2022 00:10:02]7978: WAF :: fetched 1 new logs [29-06-2022 00:11:02]10698: WAF :: fetched 2 new logs [29-06-2022 00:12:01]13381: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656472321 [29-06-2022 00:12:01]13381: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 00:12:03]13381: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 00:12:04]13381: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-0012/20220629-001201-YrvDAfnajloGgkSriIbE9gAAABo [29-06-2022 00:12:04]13381: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 00:12:04]13381: WAF :: fetched 3 new logs [29-06-2022 00:14:02]18711: WAF :: fetched 1 new logs [29-06-2022 00:15:01]21458: WAF :: fetched 2 new logs [29-06-2022 00:16:02]24143: WAF :: fetched 2 new logs [29-06-2022 00:17:01]26772: WAF :: fetched 2 new logs [29-06-2022 00:20:01]2397: WAF :: fetched 2 new logs [29-06-2022 00:21:02]5227: WAF :: fetched 7 new logs [29-06-2022 00:23:01]10474: WAF :: fetched 2 new logs [29-06-2022 00:25:01]15813: WAF :: fetched 2 new logs [29-06-2022 00:26:02]18485: WAF :: fetched 1 new logs [29-06-2022 00:27:02]21114: WAF :: fetched 1 new logs [29-06-2022 00:31:01]31764: WAF :: fetched 2 new logs [29-06-2022 00:32:02]2081: WAF :: fetched 1 new logs [29-06-2022 00:36:01]12821: WAF :: fetched 4 new logs [29-06-2022 00:37:02]15508: WAF :: fetched 1 new logs [29-06-2022 00:38:02]20589: WAF :: fetched 1 new logs [29-06-2022 00:39:01]23225: WAF :: fetched 4 new logs [29-06-2022 00:40:02]25990: WAF :: fetched 6 new logs [29-06-2022 00:41:01]28642: WAF :: fetched 3 new logs [29-06-2022 00:41:01]28642: Checking for user cron vulnerabilities [29-06-2022 00:42:02]31245: WAF :: fetched 2 new logs [29-06-2022 00:43:02]4190: WAF :: fetched 2 new logs [29-06-2022 00:44:01]9930: Checking ditributed CMS bruteforce attacks [29-06-2022 00:44:01]9930: WAF :: fetched 6 new logs [29-06-2022 00:45:02]: Checking for software updates [29-06-2022 00:45:02]12645: WAF :: fetched 1 new logs [29-06-2022 00:46:02]15269: WAF :: fetched 4 new logs [29-06-2022 00:47:01]17899: WAF :: fetched 3 new logs [29-06-2022 00:49:02]23200: WAF :: fetched 1 new logs [29-06-2022 00:50:01]25936: WAF :: fetched 2 new logs [29-06-2022 00:51:02]28651: WAF :: fetched 3 new logs [29-06-2022 00:52:02]31286: WAF :: fetched 3 new logs [29-06-2022 00:53:01]1528: WAF :: fetched 2 new logs [29-06-2022 00:54:02]4279: WAF :: fetched 5 new logs [29-06-2022 00:55:01]7054: WAF :: fetched 1 new logs [29-06-2022 00:59:01]17709: WAF :: fetched 1 new logs [29-06-2022 01:01:02]24025: WAF :: fetched 2 new logs [29-06-2022 01:02:01]26864: WAF :: fetched 1 new logs [29-06-2022 01:04:02]32725: WAF :: fetched 2 new logs [29-06-2022 01:05:01]3336: WAF :: fetched 1 new logs [29-06-2022 01:06:01]6205: WAF :: fetched 1 new logs [29-06-2022 01:07:02]9186: WAF :: fetched 4 new logs [29-06-2022 01:09:02]14657: WAF :: fetched 3 new logs [29-06-2022 01:11:01]20210: WAF :: fetched 1 new logs [29-06-2022 01:12:02]23023: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656475922 [29-06-2022 01:12:02]23023: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 01:12:04]23023: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 01:12:04]23023: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-0112/20220629-011202-YrvREvTGUzP2nJmxpHbeoAAAAAo [29-06-2022 01:12:04]23023: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 01:12:05]23023: WAF :: fetched 3 new logs [29-06-2022 01:13:02]25624: WAF :: fetched 4 new logs [29-06-2022 01:15:01]31256: WAF :: fetched 2 new logs [29-06-2022 01:16:02]1624: WAF :: fetched 1 new logs [29-06-2022 01:18:01]7136: WAF :: fetched 2 new logs [29-06-2022 01:19:02]10078: WAF :: fetched 1 new logs [29-06-2022 01:20:01]13047: WAF :: fetched 1 new logs [29-06-2022 01:21:02]16089: WAF :: fetched 1 new logs [29-06-2022 01:22:02]18683: WAF :: fetched 1 new logs [29-06-2022 01:23:01]21297: WAF :: fetched 2 new logs [29-06-2022 01:24:02]23962: WAF :: fetched 3 new logs [29-06-2022 01:25:01]26872: WAF :: fetched 1 new logs [29-06-2022 01:26:01]29757: WAF :: fetched 5 new logs [29-06-2022 01:27:02]32568: WAF :: fetched 3 new logs [29-06-2022 01:28:01]2906: WAF :: fetched 1 new logs [29-06-2022 01:29:02]5688: WAF :: fetched 2 new logs [29-06-2022 01:30:02]8913: WAF :: fetched 4 new logs [29-06-2022 01:31:01]11652: WAF :: fetched 1 new logs [29-06-2022 01:32:02]14392: WAF :: fetched 3 new logs [29-06-2022 01:36:01]25719: WAF :: fetched 2 new logs [29-06-2022 01:37:02]28330: WAF :: fetched 6 new logs [29-06-2022 01:38:02]31501: WAF :: fetched 1 new logs [29-06-2022 01:39:01]2053: WAF :: fetched 2 new logs [29-06-2022 01:41:01]7677: Checking for user cron vulnerabilities [29-06-2022 01:42:01]10763: WAF :: fetched 3 new logs [29-06-2022 01:44:01]16386: Checking ditributed CMS bruteforce attacks [29-06-2022 01:44:01]16386: WAF :: fetched 2 new logs [29-06-2022 01:45:02]: Checking for definition updates [29-06-2022 01:45:02]19080: WAF :: fetched 2 new logs [29-06-2022 01:45:04]19078: Updated virus defnition : malware.expert.fp [29-06-2022 01:47:01]24224: WAF :: fetched 2 new logs [29-06-2022 01:48:02]27501: WAF :: fetched 1 new logs [29-06-2022 01:49:02]30066: WAF :: fetched 4 new logs [29-06-2022 01:50:01]608: WAF :: fetched 1 new logs [29-06-2022 01:52:02]6088: WAF :: fetched 3 new logs [29-06-2022 01:53:01]8932: WAF :: fetched 1 new logs [29-06-2022 01:54:02]11795: WAF :: fetched 3 new logs [29-06-2022 01:55:01]14487: WAF :: fetched 2 new logs [29-06-2022 01:57:02]19932: WAF :: fetched 2 new logs [29-06-2022 01:59:02]25214: WAF :: fetched 1 new logs [29-06-2022 02:02:02]1307: WAF :: fetched 1 new logs [29-06-2022 02:03:01]3906: WAF :: fetched 1 new logs [29-06-2022 02:04:02]6585: WAF :: fetched 2 new logs [29-06-2022 02:05:02]9225: WAF :: fetched 3 new logs [29-06-2022 02:06:01]14377: WAF :: fetched 4 new logs [29-06-2022 02:07:01]19760: WAF :: fetched 2 new logs [29-06-2022 02:08:02]24365: WAF :: fetched 1 new logs [29-06-2022 02:11:02]32319: WAF :: fetched 2 new logs [29-06-2022 02:12:01]2511: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656479521 [29-06-2022 02:12:01]2511: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 02:12:03]2511: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 02:12:04]2511: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-0212/20220629-021201-YrvfIc6Tk-3HDkzFfEuLSQAAAAc [29-06-2022 02:12:04]2511: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 02:12:04]2511: WAF :: fetched 1 new logs [29-06-2022 02:13:02]5212: WAF :: fetched 9 new logs [29-06-2022 02:14:02]7747: WAF :: fetched 8 new logs [29-06-2022 02:15:01]10409: WAF :: fetched 5 new logs [29-06-2022 02:16:02]13026: WAF :: fetched 1 new logs [29-06-2022 02:19:02]20722: WAF :: fetched 4 new logs [29-06-2022 02:21:02]26022: WAF :: fetched 2 new logs [29-06-2022 02:23:02]31212: WAF :: fetched 1 new logs [29-06-2022 02:25:01]4130: WAF :: fetched 2 new logs [29-06-2022 02:26:02]6775: WAF :: fetched 2 new logs [29-06-2022 02:27:01]9161: WAF :: fetched 3 new logs [29-06-2022 02:28:01]11916: WAF :: fetched 1 new logs [29-06-2022 02:29:02]14548: WAF :: fetched 2 new logs [29-06-2022 02:30:01]17176: WAF :: fetched 1 new logs [29-06-2022 02:31:01]19819: WAF :: fetched 1 new logs [29-06-2022 02:34:01]27549: WAF :: fetched 1 new logs [29-06-2022 02:36:02]352: WAF :: fetched 2 new logs [29-06-2022 02:37:02]3024: WAF :: fetched 1 new logs [29-06-2022 02:40:01]16409: WAF :: fetched 1 new logs [29-06-2022 02:41:01]19036: Checking for user cron vulnerabilities [29-06-2022 02:43:02]24140: WAF :: fetched 1 new logs [29-06-2022 02:44:01]26707: Checking ditributed CMS bruteforce attacks [29-06-2022 02:44:01]26707: WAF :: fetched 1 new logs [29-06-2022 02:45:02]29388: WAF :: fetched 1 new logs [29-06-2022 02:50:02]11510: WAF :: fetched 1 new logs [29-06-2022 02:52:02]16799: WAF :: fetched 1 new logs [29-06-2022 02:53:02]19521: Updated license status via CDN [29-06-2022 02:54:02]22326: WAF :: fetched 2 new logs [29-06-2022 02:56:01]27878: WAF :: fetched 32 new logs [29-06-2022 02:57:02]30889: WAF :: fetched 7 new logs [29-06-2022 02:58:02]1361: WAF :: fetched 3 new logs [29-06-2022 02:59:01]4040: WAF :: fetched 7 new logs [29-06-2022 03:00:02]6638: WAF :: fetched 5 new logs [29-06-2022 03:00:03]6638: Found and updated 32 CMS installations [29-06-2022 03:00:32]6638: Wordpress installation #2 clinicasantanadehomeopatia.com.br has errors [29-06-2022 03:01:01]9882: WAF :: fetched 5 new logs [29-06-2022 03:01:25]6638: Wordpress installation #16 kecolima.com.br has errors [29-06-2022 03:02:02]12650: WAF :: fetched 8 new logs [29-06-2022 03:03:01]15449: WAF :: fetched 5 new logs [29-06-2022 03:03:10]6638: Sending CMS version vulnerability report emails to cpanel users [29-06-2022 03:03:13]6638: Checking wordpress installations for suspicious directories [29-06-2022 03:04:01]18899: WAF :: fetched 2 new logs [29-06-2022 03:04:27]15502: Sending CMS version vulnerability report emails to cpanel users [29-06-2022 03:04:31]15502: Checking wordpress installations for suspicious directories [29-06-2022 03:06:01]24679: WAF :: fetched 2 new logs [29-06-2022 03:07:02]27286: WAF :: fetched 3 new logs [29-06-2022 03:08:01]29849: WAF :: fetched 2 new logs [29-06-2022 03:09:01]32451: WAF :: fetched 3 new logs [29-06-2022 03:10:02]2812: WAF :: fetched 6 new logs [29-06-2022 03:11:01]5532: WAF :: fetched 1 new logs [29-06-2022 03:12:01]8129: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656483121 [29-06-2022 03:12:01]8129: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 03:12:03]8129: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 03:12:03]8129: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-0312/20220629-031201-YrvtMXSPdQPgtoGjtJXdaAAAACg [29-06-2022 03:12:03]8129: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 03:12:04]8129: WAF :: fetched 4 new logs [29-06-2022 03:13:02]10750: WAF :: fetched 2 new logs [29-06-2022 03:14:01]13323: WAF :: fetched 4 new logs [29-06-2022 03:15:02]16007: WAF :: fetched 1 new logs [29-06-2022 03:17:01]21174: WAF :: fetched 1 new logs [29-06-2022 03:19:01]26345: WAF :: fetched 2 new logs [29-06-2022 03:22:01]1811: WAF :: fetched 1 new logs [29-06-2022 03:24:02]7182: WAF :: fetched 1 new logs [29-06-2022 03:27:01]15403: WAF :: fetched 24 new logs [29-06-2022 03:28:01]18228: WAF :: fetched 8 new logs [29-06-2022 03:31:01]21375: WAF :: fetched 20 new logs [29-06-2022 03:33:01]1725: WAF :: fetched 1 new logs [29-06-2022 03:34:02]4640: WAF :: fetched 2 new logs [29-06-2022 03:36:02]10481: WAF :: fetched 1 new logs [29-06-2022 03:38:02]17803: WAF :: fetched 1 new logs [29-06-2022 03:39:01]20359: WAF :: fetched 19 new logs [29-06-2022 03:40:01]23061: WAF :: fetched 40 new logs [29-06-2022 03:41:02]25722: WAF :: fetched 40 new logs [29-06-2022 03:41:02]25722: Checking for user cron vulnerabilities [29-06-2022 03:42:01]28280: WAF :: fetched 35 new logs [29-06-2022 03:43:02]30856: WAF :: fetched 15 new logs [29-06-2022 03:44:01]1030: Checking ditributed CMS bruteforce attacks [29-06-2022 03:45:01]6022: WAF :: fetched 2 new logs [29-06-2022 03:46:01]10874: WAF :: fetched 4 new logs [29-06-2022 03:48:02]16104: WAF :: fetched 3 new logs [29-06-2022 03:49:01]18667: WAF :: fetched 1 new logs [29-06-2022 03:50:02]21361: WAF :: fetched 1 new logs [29-06-2022 03:51:01]23980: WAF :: fetched 1 new logs [29-06-2022 03:53:01]29167: WAF :: fetched 1 new logs [29-06-2022 03:54:02]32024: WAF :: fetched 5 new logs [29-06-2022 03:55:02]2364: WAF :: fetched 9 new logs [29-06-2022 03:56:02]5078: WAF :: fetched 6 new logs [29-06-2022 03:57:01]7508: WAF :: fetched 4 new logs [29-06-2022 03:58:02]10273: WAF :: fetched 7 new logs [29-06-2022 03:59:01]12831: WAF :: fetched 5 new logs [29-06-2022 04:00:02]15197: WAF :: fetched 4 new logs [29-06-2022 04:01:02]18272: WAF :: fetched 1 new logs [29-06-2022 04:02:01]20861: WAF :: fetched 1 new logs [29-06-2022 04:04:02]25985: WAF :: fetched 1 new logs [29-06-2022 04:05:01]28552: WAF :: fetched 2 new logs [29-06-2022 04:06:02]31267: WAF :: fetched 2 new logs [29-06-2022 04:07:01]1439: WAF :: fetched 1 new logs [29-06-2022 04:08:02]4072: WAF :: fetched 1 new logs [29-06-2022 04:10:02]9305: WAF :: fetched 1 new logs [29-06-2022 04:11:02]11985: WAF :: fetched 2 new logs [29-06-2022 04:12:01]14597: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656486721 [29-06-2022 04:12:01]14597: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 04:12:03]14597: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 04:12:03]14597: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-0412/20220629-041201-Yrv7QRESBoQma5K_1KdscAAAAAk [29-06-2022 04:12:03]14597: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 04:12:04]14597: WAF :: fetched 1 new logs [29-06-2022 04:13:02]17203: WAF :: fetched 5 new logs [29-06-2022 04:14:01]19757: WAF :: fetched 2 new logs [29-06-2022 04:16:02]25126: WAF :: fetched 4 new logs [29-06-2022 04:17:02]27692: WAF :: fetched 4 new logs [29-06-2022 04:18:01]30260: WAF :: fetched 2 new logs [29-06-2022 04:19:01]406: WAF :: fetched 1 new logs [29-06-2022 04:22:01]8508: WAF :: fetched 2 new logs [29-06-2022 04:24:02]13773: WAF :: fetched 1 new logs [29-06-2022 04:24:02]13771: httpd.conf changed. Refreshing watchlist. [29-06-2022 04:27:02]21762: WAF :: fetched 2 new logs [29-06-2022 04:28:02]24459: httpd.conf changed. Refreshing watchlist. [29-06-2022 04:28:02]24458: WAF :: fetched 8 new logs [29-06-2022 04:35:02]10599: WAF :: fetched 1 new logs [29-06-2022 04:37:02]15932: WAF :: fetched 2 new logs [29-06-2022 04:39:02]23499: WAF :: fetched 4 new logs [29-06-2022 04:40:02]26106: WAF :: fetched 1 new logs [29-06-2022 04:41:02]28806: WAF :: fetched 4 new logs [29-06-2022 04:41:02]28806: Checking for user cron vulnerabilities [29-06-2022 04:42:01]31414: WAF :: fetched 2 new logs [29-06-2022 04:43:02]4032: WAF :: fetched 2 new logs [29-06-2022 04:44:01]6910: Checking ditributed CMS bruteforce attacks [29-06-2022 04:47:01]14710: WAF :: fetched 1 new logs [29-06-2022 04:48:02]17361: WAF :: fetched 1 new logs [29-06-2022 04:50:01]22509: WAF :: fetched 3 new logs [29-06-2022 04:52:01]27844: WAF :: fetched 1 new logs [29-06-2022 04:53:01]30427: WAF :: fetched 1 new logs [29-06-2022 04:54:02]685: WAF :: fetched 3 new logs [29-06-2022 04:56:01]6096: WAF :: fetched 3 new logs [29-06-2022 04:57:02]8712: WAF :: fetched 2 new logs [29-06-2022 04:58:01]11263: WAF :: fetched 2 new logs [29-06-2022 05:00:02]16136: WAF :: fetched 2 new logs [29-06-2022 05:01:01]19294: WAF :: fetched 2 new logs [29-06-2022 05:01:41]19286: Starting daily scan on files updated in last 24 hrs [29-06-2022 05:03:01]24499: WAF :: fetched 1 new logs [29-06-2022 05:07:02]2622: WAF :: fetched 2 new logs [29-06-2022 05:10:02]10456: WAF :: fetched 1 new logs [29-06-2022 05:12:02]15745: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656490322 [29-06-2022 05:12:02]15745: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 05:12:04]15745: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 05:12:04]15745: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-0512/20220629-051202-YrwJUlvqs6xZe8aAx8AG3QAAABA [29-06-2022 05:12:04]15745: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 05:12:05]15745: WAF :: fetched 3 new logs [29-06-2022 05:13:01]18298: WAF :: fetched 6 new logs [29-06-2022 05:15:02]23456: WAF :: fetched 1 new logs [29-06-2022 05:16:01]26137: WAF :: fetched 2 new logs [29-06-2022 05:17:02]28714: WAF :: fetched 1 new logs [29-06-2022 05:18:02]31308: WAF :: fetched 1 new logs [29-06-2022 05:19:01]1541: WAF :: fetched 2 new logs [29-06-2022 05:22:02]9539: WAF :: fetched 5 new logs [29-06-2022 05:23:02]12109: WAF :: fetched 4 new logs [29-06-2022 05:24:01]14590: WAF :: fetched 1 new logs [29-06-2022 05:25:02]17342: WAF :: fetched 1 new logs [29-06-2022 05:26:01]20037: WAF :: fetched 2 new logs [29-06-2022 05:27:01]22684: WAF :: fetched 1 new logs [29-06-2022 05:28:02]25294: WAF :: fetched 2 new logs [29-06-2022 05:29:01]27880: WAF :: fetched 2 new logs [29-06-2022 05:31:02]867: WAF :: fetched 1 new logs [29-06-2022 05:32:01]3571: WAF :: fetched 2 new logs [29-06-2022 05:33:02]6267: WAF :: fetched 5 new logs [29-06-2022 05:34:01]8904: WAF :: fetched 4 new logs [29-06-2022 05:35:02]11552: WAF :: fetched 1 new logs [29-06-2022 05:36:02]14348: WAF :: fetched 38 new logs [29-06-2022 05:37:01]16923: WAF :: fetched 3 new logs [29-06-2022 05:41:02]31607: Checking for user cron vulnerabilities [29-06-2022 05:42:01]1841: WAF :: fetched 1 new logs [29-06-2022 05:43:01]4517: WAF :: fetched 2 new logs [29-06-2022 05:44:01]7117: Checking ditributed CMS bruteforce attacks [29-06-2022 05:44:01]7117: WAF :: fetched 2 new logs [29-06-2022 05:45:02]9719: WAF :: fetched 2 new logs [29-06-2022 05:46:02]12414: WAF :: fetched 119 new logs [29-06-2022 05:47:02]14989: WAF :: fetched 28 new logs [29-06-2022 05:48:02]17587: WAF :: fetched 1 new logs [29-06-2022 05:51:02]25461: WAF :: fetched 1 new logs [29-06-2022 05:52:02]28078: WAF :: fetched 1 new logs [29-06-2022 05:53:01]30689: WAF :: fetched 7 new logs [29-06-2022 05:55:01]3489: WAF :: fetched 1 new logs [29-06-2022 05:56:02]6252: WAF :: fetched 1 new logs [29-06-2022 05:57:01]8795: WAF :: fetched 1 new logs [29-06-2022 05:58:02]11398: WAF :: fetched 1 new logs [29-06-2022 06:00:01]16215: WAF :: fetched 1 new logs [29-06-2022 06:01:02]19402: WAF :: fetched 1 new logs [29-06-2022 06:03:01]24588: WAF :: fetched 4 new logs [29-06-2022 06:09:01]7902: WAF :: fetched 1 new logs [29-06-2022 06:10:01]10470: WAF :: fetched 9 new logs [29-06-2022 06:11:02]13209: WAF :: fetched 2 new logs [29-06-2022 06:12:01]15717: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656493921 [29-06-2022 06:12:01]15717: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 06:12:03]15717: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 06:12:03]15717: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-0612/20220629-061201-YrwXYVqODYwo0ByL-aLWpAAAAAI [29-06-2022 06:12:03]15717: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 06:12:04]15717: WAF :: fetched 3 new logs [29-06-2022 06:17:01]28802: WAF :: fetched 5 new logs [29-06-2022 06:18:02]31396: WAF :: fetched 1 new logs [29-06-2022 06:20:02]4240: WAF :: fetched 4 new logs [29-06-2022 06:21:02]6985: WAF :: fetched 4 new logs [29-06-2022 06:22:01]9589: WAF :: fetched 1 new logs [29-06-2022 06:23:02]12202: WAF :: fetched 3 new logs [29-06-2022 06:24:02]14776: WAF :: fetched 1 new logs [29-06-2022 06:25:01]17357: WAF :: fetched 2 new logs [29-06-2022 06:26:02]20108: WAF :: fetched 6 new logs [29-06-2022 06:27:01]22821: WAF :: fetched 3 new logs [29-06-2022 06:28:01]25368: WAF :: fetched 3 new logs [29-06-2022 06:30:01]30494: WAF :: fetched 6 new logs [29-06-2022 06:31:02]875: WAF :: fetched 22 new logs [29-06-2022 06:32:01]3474: WAF :: fetched 19 new logs [29-06-2022 06:33:01]6104: WAF :: fetched 19 new logs [29-06-2022 06:34:02]8731: WAF :: fetched 19 new logs [29-06-2022 06:35:01]11267: WAF :: fetched 18 new logs [29-06-2022 06:36:02]13974: WAF :: fetched 18 new logs [29-06-2022 06:37:02]16562: WAF :: fetched 15 new logs [29-06-2022 06:38:01]19787: WAF :: fetched 14 new logs [29-06-2022 06:39:02]22389: WAF :: fetched 23 new logs [29-06-2022 06:40:01]25002: WAF :: fetched 6 new logs [29-06-2022 06:41:02]27726: Checking for user cron vulnerabilities [29-06-2022 06:43:01]3575: WAF :: fetched 3 new logs [29-06-2022 06:44:02]6241: Checking ditributed CMS bruteforce attacks [29-06-2022 06:44:02]6241: WAF :: fetched 2 new logs [29-06-2022 06:45:01]8822: WAF :: fetched 1 new logs [29-06-2022 06:48:02]16785: WAF :: fetched 1 new logs [29-06-2022 06:51:02]24708: WAF :: fetched 1 new logs [29-06-2022 06:54:02]32505: WAF :: fetched 1 new logs [29-06-2022 06:55:01]2753: WAF :: fetched 2 new logs [29-06-2022 06:56:02]5589: WAF :: fetched 4 new logs [29-06-2022 06:57:01]8149: WAF :: fetched 4 new logs [29-06-2022 06:58:01]10712: WAF :: fetched 3 new logs [29-06-2022 07:00:02]15618: WAF :: fetched 2 new logs [29-06-2022 07:01:02]18784: WAF :: fetched 3 new logs [29-06-2022 07:02:01]21386: WAF :: fetched 3 new logs [29-06-2022 07:03:02]24001: WAF :: fetched 28 new logs [29-06-2022 07:04:01]26540: WAF :: fetched 27 new logs [29-06-2022 07:05:01]29178: WAF :: fetched 25 new logs [29-06-2022 07:06:02]31904: WAF :: fetched 11 new logs [29-06-2022 07:07:01]2109: WAF :: fetched 25 new logs [29-06-2022 07:08:02]4820: WAF :: fetched 24 new logs [29-06-2022 07:09:01]7421: WAF :: fetched 14 new logs [29-06-2022 07:10:01]10028: WAF :: fetched 18 new logs [29-06-2022 07:11:02]12753: WAF :: fetched 16 new logs [29-06-2022 07:12:01]15358: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656497521 [29-06-2022 07:12:02]15358: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 07:12:04]15358: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 07:12:05]15358: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-0712/20220629-071202-YrwlcpwfrS1JpyUSHGtA4QAAADU [29-06-2022 07:12:05]15358: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 07:12:05]15358: WAF :: fetched 21 new logs [29-06-2022 07:13:02]18043: WAF :: fetched 16 new logs [29-06-2022 07:14:02]20674: WAF :: fetched 16 new logs [29-06-2022 07:15:01]23391: WAF :: fetched 31 new logs [29-06-2022 07:16:02]26138: WAF :: fetched 26 new logs [29-06-2022 07:17:01]28750: WAF :: fetched 21 new logs [29-06-2022 07:18:02]31410: WAF :: fetched 10 new logs [29-06-2022 07:19:02]1637: WAF :: fetched 1 new logs [29-06-2022 07:21:02]7144: WAF :: fetched 1 new logs [29-06-2022 07:22:01]9705: WAF :: fetched 2 new logs [29-06-2022 07:24:02]14852: WAF :: fetched 2 new logs [29-06-2022 07:26:02]20177: WAF :: fetched 1 new logs [29-06-2022 07:27:01]22722: WAF :: fetched 1 new logs [29-06-2022 07:29:02]27928: WAF :: fetched 29 new logs [29-06-2022 07:30:01]30542: WAF :: fetched 1 new logs [29-06-2022 07:31:02]942: WAF :: fetched 5 new logs [29-06-2022 07:33:02]6273: WAF :: fetched 2 new logs [29-06-2022 07:34:01]8834: WAF :: fetched 1 new logs [29-06-2022 07:35:01]11468: WAF :: fetched 3 new logs [29-06-2022 07:36:02]14261: WAF :: fetched 5 new logs [29-06-2022 07:37:01]16656: WAF :: fetched 2 new logs [29-06-2022 07:38:02]20827: WAF :: fetched 3 new logs [29-06-2022 07:40:02]26072: WAF :: fetched 1 new logs [29-06-2022 07:41:02]28782: WAF :: fetched 3 new logs [29-06-2022 07:41:02]28782: Checking for user cron vulnerabilities [29-06-2022 07:43:02]1610: WAF :: fetched 1 new logs [29-06-2022 07:44:01]4280: Checking ditributed CMS bruteforce attacks [29-06-2022 07:44:02]4280: WAF :: fetched 2 new logs [29-06-2022 07:45:01]: Checking for definition updates [29-06-2022 07:46:02]9658: WAF :: fetched 8 new logs [29-06-2022 07:47:01]12210: WAF :: fetched 5 new logs [29-06-2022 07:48:01]14878: WAF :: fetched 4 new logs [29-06-2022 07:49:02]17471: WAF :: fetched 5 new logs [29-06-2022 07:50:02]20055: WAF :: fetched 1 new logs [29-06-2022 07:51:01]22623: WAF :: fetched 1 new logs [29-06-2022 07:52:01]25377: WAF :: fetched 2 new logs [29-06-2022 07:54:01]30458: WAF :: fetched 1 new logs [29-06-2022 07:55:02]805: WAF :: fetched 1 new logs [29-06-2022 07:56:01]3489: WAF :: fetched 2 new logs [29-06-2022 07:57:01]6158: WAF :: fetched 1 new logs [29-06-2022 07:58:02]8753: WAF :: fetched 4 new logs [29-06-2022 07:59:02]11368: WAF :: fetched 1 new logs [29-06-2022 08:00:01]13699: WAF :: fetched 1 new logs [29-06-2022 08:01:02]16874: WAF :: fetched 1 new logs [29-06-2022 08:02:02]19491: WAF :: fetched 1 new logs [29-06-2022 08:03:02]22103: WAF :: fetched 2 new logs [29-06-2022 08:04:01]24518: WAF :: fetched 2 new logs [29-06-2022 08:05:01]27370: WAF :: fetched 3 new logs [29-06-2022 08:06:02]30146: WAF :: fetched 3 new logs [29-06-2022 08:07:01]32645: WAF :: fetched 1 new logs [29-06-2022 08:08:02]3034: WAF :: fetched 3 new logs [29-06-2022 08:10:01]8354: WAF :: fetched 2 new logs [29-06-2022 08:11:02]11129: WAF :: fetched 1 new logs [29-06-2022 08:12:01]13678: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656501121 [29-06-2022 08:12:01]13678: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 08:12:03]13678: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 08:12:03]13678: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-0812/20220629-081201-YrwzgR65PMRl3YBUwA_RhwAAAAw [29-06-2022 08:12:03]13678: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 08:12:04]13678: WAF :: fetched 2 new logs [29-06-2022 08:14:02]18972: WAF :: fetched 2 new logs [29-06-2022 08:17:01]26857: WAF :: fetched 2 new logs [29-06-2022 08:18:02]29490: WAF :: fetched 2 new logs [29-06-2022 08:19:01]32099: WAF :: fetched 2 new logs [29-06-2022 08:20:01]2412: WAF :: fetched 1 new logs [29-06-2022 08:21:01]5184: WAF :: fetched 1 new logs [29-06-2022 08:22:02]7805: WAF :: fetched 3 new logs [29-06-2022 08:23:01]10399: WAF :: fetched 4 new logs [29-06-2022 08:24:01]12983: WAF :: fetched 1 new logs [29-06-2022 08:25:02]15626: WAF :: fetched 5 new logs [29-06-2022 08:26:01]18364: WAF :: fetched 5 new logs [29-06-2022 08:29:01]26224: WAF :: fetched 6 new logs [29-06-2022 08:31:01]31647: WAF :: fetched 1 new logs [29-06-2022 08:32:01]1927: WAF :: fetched 3 new logs [29-06-2022 08:33:02]4687: WAF :: fetched 1 new logs [29-06-2022 08:34:01]7305: WAF :: fetched 2 new logs [29-06-2022 08:35:02]9969: WAF :: fetched 2 new logs [29-06-2022 08:36:02]12724: WAF :: fetched 1 new logs [29-06-2022 08:38:02]18349: WAF :: fetched 25 new logs [29-06-2022 08:39:01]20933: WAF :: fetched 3 new logs [29-06-2022 08:40:01]23568: WAF :: fetched 3 new logs [29-06-2022 08:41:01]26328: WAF :: fetched 1 new logs [29-06-2022 08:41:01]26328: Checking for user cron vulnerabilities [29-06-2022 08:42:01]30066: WAF :: fetched 26 new logs [29-06-2022 08:43:02]1473: WAF :: fetched 9 new logs [29-06-2022 08:44:01]4212: Checking ditributed CMS bruteforce attacks [29-06-2022 08:44:01]4212: WAF :: fetched 1 new logs [29-06-2022 08:45:02]6868: WAF :: fetched 5 new logs [29-06-2022 08:47:02]12241: WAF :: fetched 1 new logs [29-06-2022 08:48:02]14835: WAF :: fetched 5 new logs [29-06-2022 08:50:02]20022: WAF :: fetched 1 new logs [29-06-2022 08:51:01]22583: WAF :: fetched 1 new logs [29-06-2022 08:52:02]25421: WAF :: fetched 2 new logs [29-06-2022 08:54:02]30717: WAF :: fetched 1 new logs [29-06-2022 08:55:02]994: WAF :: fetched 1 new logs [29-06-2022 08:56:01]3850: WAF :: fetched 1 new logs [29-06-2022 08:57:02]6690: WAF :: fetched 1 new logs [29-06-2022 08:58:01]9431: WAF :: fetched 2 new logs [29-06-2022 08:59:02]12171: WAF :: fetched 2 new logs [29-06-2022 09:00:02]14649: WAF :: fetched 4 new logs [29-06-2022 09:01:01]17826: WAF :: fetched 3 new logs [29-06-2022 09:06:01]32020: WAF :: fetched 4 new logs [29-06-2022 09:07:02]2450: WAF :: fetched 3 new logs [29-06-2022 09:08:02]5198: WAF :: fetched 2 new logs [29-06-2022 09:10:01]10571: WAF :: fetched 1 new logs [29-06-2022 09:12:01]16068: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656504721 [29-06-2022 09:12:01]16068: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 09:12:03]16068: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 09:12:04]16068: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-0912/20220629-091201-YrxBkXd4aonsuHylX3rYjwAAAB8 [29-06-2022 09:12:04]16068: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 09:12:04]16068: WAF :: fetched 3 new logs [29-06-2022 09:13:02]18804: WAF :: fetched 5 new logs [29-06-2022 09:14:02]21446: WAF :: fetched 3 new logs [29-06-2022 09:15:01]24208: WAF :: fetched 2 new logs [29-06-2022 09:16:02]27088: WAF :: fetched 1 new logs [29-06-2022 09:17:02]29907: WAF :: fetched 1 new logs [29-06-2022 09:18:01]32731: WAF :: fetched 1 new logs [29-06-2022 09:19:01]3183: WAF :: fetched 2 new logs [29-06-2022 09:21:01]8977: WAF :: fetched 1 new logs [29-06-2022 09:22:02]11902: WAF :: fetched 2 new logs [29-06-2022 09:23:01]14668: WAF :: fetched 5 new logs [29-06-2022 09:24:01]17515: WAF :: fetched 2 new logs [29-06-2022 09:26:02]23243: WAF :: fetched 5 new logs [29-06-2022 09:28:02]28742: WAF :: fetched 1 new logs [29-06-2022 09:29:01]31438: WAF :: fetched 3 new logs [29-06-2022 09:30:02]1760: WAF :: fetched 1 new logs [29-06-2022 09:31:01]4124: WAF :: fetched 1 new logs [29-06-2022 09:32:02]7302: WAF :: fetched 3 new logs [29-06-2022 09:33:01]9918: WAF :: fetched 1 new logs [29-06-2022 09:35:02]15163: WAF :: fetched 3 new logs [29-06-2022 09:37:02]20647: WAF :: fetched 2 new logs [29-06-2022 09:38:01]24986: WAF :: fetched 6 new logs [29-06-2022 09:41:01]1612: WAF :: fetched 4 new logs [29-06-2022 09:41:01]1612: Checking for user cron vulnerabilities [29-06-2022 09:42:02]4469: WAF :: fetched 1 new logs [29-06-2022 09:43:02]7205: WAF :: fetched 1 new logs [29-06-2022 09:44:01]9881: Checking ditributed CMS bruteforce attacks [29-06-2022 09:44:01]9881: WAF :: fetched 2 new logs [29-06-2022 09:45:02]12685: WAF :: fetched 1 new logs [29-06-2022 09:47:02]18199: WAF :: fetched 1 new logs [29-06-2022 09:48:01]20711: WAF :: fetched 1 new logs [29-06-2022 09:49:02]23543: WAF :: fetched 1 new logs [29-06-2022 09:51:01]28903: WAF :: fetched 12 new logs [29-06-2022 09:52:02]31709: WAF :: fetched 5 new logs [29-06-2022 09:53:01]1848: WAF :: fetched 2 new logs [29-06-2022 09:54:02]4677: WAF :: fetched 1 new logs [29-06-2022 09:55:01]7314: WAF :: fetched 5 new logs [29-06-2022 09:56:02]10031: WAF :: fetched 1 new logs [29-06-2022 09:58:01]15301: WAF :: fetched 1 new logs [29-06-2022 09:59:02]17944: WAF :: fetched 1 new logs [29-06-2022 10:01:01]23504: WAF :: fetched 3 new logs [29-06-2022 10:02:02]26308: WAF :: fetched 1 new logs [29-06-2022 10:03:01]28925: WAF :: fetched 3 new logs [29-06-2022 10:04:01]31652: WAF :: fetched 1 new logs [29-06-2022 10:06:01]4808: WAF :: fetched 2 new logs [29-06-2022 10:10:02]15587: WAF :: fetched 1 new logs [29-06-2022 10:11:02]18396: WAF :: fetched 4 new logs [29-06-2022 10:12:01]21116: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656508321 [29-06-2022 10:12:01]21116: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 10:12:03]21116: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 10:12:03]21116: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-1012/20220629-101201-YrxPoZyBMslz18gTZN6FowAAABM [29-06-2022 10:12:03]21116: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 10:12:04]21116: WAF :: fetched 4 new logs [29-06-2022 10:13:02]23797: WAF :: fetched 1 new logs [29-06-2022 10:14:01]26404: WAF :: fetched 1 new logs [29-06-2022 10:15:02]29089: WAF :: fetched 1 new logs [29-06-2022 10:16:02]31823: WAF :: fetched 3 new logs [29-06-2022 10:17:01]2192: WAF :: fetched 6 new logs [29-06-2022 10:18:02]4929: WAF :: fetched 2 new logs [29-06-2022 10:19:01]7408: WAF :: fetched 2 new logs [29-06-2022 10:20:02]10278: WAF :: fetched 2 new logs [29-06-2022 10:22:01]15752: WAF :: fetched 4 new logs [29-06-2022 10:23:02]18413: WAF :: fetched 1 new logs [29-06-2022 10:24:01]21052: WAF :: fetched 4 new logs [29-06-2022 10:25:02]23746: WAF :: fetched 2 new logs [29-06-2022 10:26:02]26453: WAF :: fetched 2 new logs [29-06-2022 10:28:02]31943: WAF :: fetched 2 new logs [29-06-2022 10:29:02]2225: WAF :: fetched 3 new logs [29-06-2022 10:33:02]13150: WAF :: fetched 1 new logs [29-06-2022 10:34:02]15786: WAF :: fetched 3 new logs [29-06-2022 10:35:02]18459: WAF :: fetched 2 new logs [29-06-2022 10:36:02]21191: WAF :: fetched 2 new logs [29-06-2022 10:37:01]24061: WAF :: fetched 3 new logs [29-06-2022 10:39:02]29523: WAF :: fetched 1 new logs [29-06-2022 10:41:02]2700: WAF :: fetched 1 new logs [29-06-2022 10:41:02]2700: Checking for user cron vulnerabilities [29-06-2022 10:43:01]8452: WAF :: fetched 6 new logs [29-06-2022 10:44:02]11192: Checking ditributed CMS bruteforce attacks [29-06-2022 10:44:02]11192: WAF :: fetched 43 new logs [29-06-2022 10:45:02]13876: WAF :: fetched 99 new logs [29-06-2022 10:46:01]16713: WAF :: fetched 76 new logs [29-06-2022 10:47:02]19520: WAF :: fetched 82 new logs [29-06-2022 10:48:02]22277: WAF :: fetched 80 new logs [29-06-2022 10:49:01]25049: WAF :: fetched 107 new logs [29-06-2022 10:50:02]27866: WAF :: fetched 157 new logs [29-06-2022 10:51:02]30603: WAF :: fetched 178 new logs [29-06-2022 10:52:01]1030: WAF :: fetched 155 new logs [29-06-2022 10:53:01]3888: WAF :: fetched 189 new logs [29-06-2022 10:54:02]6586: WAF :: fetched 164 new logs [29-06-2022 10:55:02]9262: WAF :: fetched 207 new logs [29-06-2022 10:56:01]11993: WAF :: fetched 174 new logs [29-06-2022 10:57:02]14781: WAF :: fetched 155 new logs [29-06-2022 10:58:01]17454: WAF :: fetched 156 new logs [29-06-2022 10:59:02]20153: WAF :: fetched 56 new logs [29-06-2022 11:00:02]22625: WAF :: fetched 29 new logs [29-06-2022 11:04:01]3069: WAF :: fetched 3 new logs [29-06-2022 11:06:01]8705: WAF :: fetched 1 new logs [29-06-2022 11:07:02]11573: WAF :: fetched 1 new logs [29-06-2022 11:07:55]11750: Performed RBL check for 23.111.136.34. [29-06-2022 11:08:01]14356: WAF :: fetched 1 new logs [29-06-2022 11:09:02]17151: WAF :: fetched 3 new logs [29-06-2022 11:11:01]22771: WAF :: fetched 2 new logs [29-06-2022 11:12:02]25623: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656511922 [29-06-2022 11:12:02]25623: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 11:12:04]25623: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 11:12:04]25623: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-1112/20220629-111202-YrxdsoLgG-U2_xgJKhNfYQAAABo [29-06-2022 11:12:04]25623: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 11:12:04]25623: WAF :: fetched 2 new logs [29-06-2022 11:14:01]30962: WAF :: fetched 2 new logs [29-06-2022 11:15:02]1353: WAF :: fetched 13 new logs [29-06-2022 11:16:02]4299: WAF :: fetched 6 new logs [29-06-2022 11:17:01]7140: WAF :: fetched 9 new logs [29-06-2022 11:19:02]12538: WAF :: fetched 3 new logs [29-06-2022 11:20:01]15200: WAF :: fetched 3 new logs [29-06-2022 11:21:02]17969: WAF :: fetched 4 new logs [29-06-2022 11:22:02]20720: WAF :: fetched 4 new logs [29-06-2022 11:23:01]23409: WAF :: fetched 4 new logs [29-06-2022 11:24:02]26129: WAF :: fetched 1 new logs [29-06-2022 11:25:02]28830: WAF :: fetched 4 new logs [29-06-2022 11:26:01]31569: WAF :: fetched 1 new logs [29-06-2022 11:27:02]2060: WAF :: fetched 3 new logs [29-06-2022 11:28:01]4866: WAF :: fetched 2 new logs [29-06-2022 11:29:02]7556: WAF :: fetched 5 new logs [29-06-2022 11:31:01]12980: WAF :: fetched 1 new logs [29-06-2022 11:32:02]15788: WAF :: fetched 2 new logs [29-06-2022 11:36:02]26647: WAF :: fetched 2 new logs [29-06-2022 11:38:02]32280: WAF :: fetched 17 new logs [29-06-2022 11:39:02]2544: WAF :: fetched 20 new logs [29-06-2022 11:40:02]5334: WAF :: fetched 18 new logs [29-06-2022 11:41:01]8073: WAF :: fetched 17 new logs [29-06-2022 11:41:01]8073: Checking for user cron vulnerabilities [29-06-2022 11:42:02]10973: WAF :: fetched 11 new logs [29-06-2022 11:43:01]13661: WAF :: fetched 14 new logs [29-06-2022 11:44:02]16387: Checking ditributed CMS bruteforce attacks [29-06-2022 11:44:02]16387: WAF :: fetched 14 new logs [29-06-2022 11:45:02]19082: WAF :: fetched 20 new logs [29-06-2022 11:46:01]21854: WAF :: fetched 17 new logs [29-06-2022 11:47:02]24681: WAF :: fetched 15 new logs [29-06-2022 11:48:01]27340: WAF :: fetched 16 new logs [29-06-2022 11:49:01]30028: WAF :: fetched 2 new logs [29-06-2022 11:50:02]32747: WAF :: fetched 2 new logs [29-06-2022 11:51:01]3184: WAF :: fetched 1 new logs [29-06-2022 11:53:01]8671: WAF :: fetched 3 new logs [29-06-2022 11:54:02]11562: WAF :: fetched 1 new logs [29-06-2022 11:55:01]14307: WAF :: fetched 2 new logs [29-06-2022 11:55:01]14298: httpd.conf changed. Refreshing watchlist. [29-06-2022 11:56:01]17122: WAF :: fetched 8 new logs [29-06-2022 11:57:02]19889: WAF :: fetched 3 new logs [29-06-2022 11:59:01]25388: httpd.conf changed. Refreshing watchlist. [29-06-2022 11:59:01]25377: WAF :: fetched 1 new logs [29-06-2022 12:00:01]27933: WAF :: fetched 39 new logs [29-06-2022 12:01:02]31150: WAF :: fetched 9 new logs [29-06-2022 12:03:01]4422: httpd.conf changed. Refreshing watchlist. [29-06-2022 12:03:01]4413: WAF :: fetched 2 new logs [29-06-2022 12:07:02]15444: WAF :: fetched 1 new logs [29-06-2022 12:08:01]17910: WAF :: fetched 7 new logs [29-06-2022 12:10:01]23502: WAF :: fetched 1 new logs [29-06-2022 12:11:01]26365: httpd.conf changed. Refreshing watchlist. [29-06-2022 12:12:02]29125: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656515522 [29-06-2022 12:12:02]29125: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 12:12:04]29125: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 12:12:04]29125: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-1212/20220629-121202-YrxrwkHue93pPygpwobM8wAAACE [29-06-2022 12:12:04]29125: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 12:12:04]29125: WAF :: fetched 1 new logs [29-06-2022 12:14:02]2447: WAF :: fetched 2 new logs [29-06-2022 12:15:01]5759: WAF :: fetched 6 new logs [29-06-2022 12:16:01]8552: WAF :: fetched 4 new logs [29-06-2022 12:20:01]19169: WAF :: fetched 1 new logs [29-06-2022 12:21:02]22090: WAF :: fetched 6 new logs [29-06-2022 12:25:01]363: WAF :: fetched 1 new logs [29-06-2022 12:26:01]3198: WAF :: fetched 2 new logs [29-06-2022 12:28:02]8744: WAF :: fetched 1 new logs [29-06-2022 12:30:02]14091: WAF :: fetched 2 new logs [29-06-2022 12:31:01]16787: WAF :: fetched 1 new logs [29-06-2022 12:32:02]19575: WAF :: fetched 1 new logs [29-06-2022 12:34:01]24819: WAF :: fetched 1 new logs [29-06-2022 12:36:01]30183: WAF :: fetched 4 new logs [29-06-2022 12:37:02]497: WAF :: fetched 4 new logs [29-06-2022 12:40:02]8713: WAF :: fetched 1 new logs [29-06-2022 12:41:01]11411: WAF :: fetched 1 new logs [29-06-2022 12:41:01]11411: Checking for user cron vulnerabilities [29-06-2022 12:42:02]14369: WAF :: fetched 3 new logs [29-06-2022 12:44:02]19638: Checking ditributed CMS bruteforce attacks [29-06-2022 12:45:01]: Checking for software updates [29-06-2022 12:46:01]24999: WAF :: fetched 1 new logs [29-06-2022 12:48:01]30334: WAF :: fetched 1 new logs [29-06-2022 12:49:01]556: WAF :: fetched 1 new logs [29-06-2022 12:51:02]6051: WAF :: fetched 6 new logs [29-06-2022 12:53:02]11474: WAF :: fetched 1 new logs [29-06-2022 12:55:02]16796: WAF :: fetched 1 new logs [29-06-2022 12:56:02]19443: WAF :: fetched 2 new logs [29-06-2022 12:58:02]24858: WAF :: fetched 2 new logs [29-06-2022 12:59:02]27483: WAF :: fetched 1 new logs [29-06-2022 13:00:01]29870: WAF :: fetched 4 new logs [29-06-2022 13:01:02]610: WAF :: fetched 3 new logs [29-06-2022 13:02:01]3437: WAF :: fetched 2 new logs [29-06-2022 13:03:01]6167: WAF :: fetched 1 new logs [29-06-2022 13:04:02]8890: WAF :: fetched 1 new logs [29-06-2022 13:05:01]11538: WAF :: fetched 9 new logs [29-06-2022 13:07:02]17039: WAF :: fetched 1 new logs [29-06-2022 13:10:02]25050: WAF :: fetched 3 new logs [29-06-2022 13:12:02]30614: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656519122 [29-06-2022 13:12:02]30614: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 13:12:04]30614: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 13:12:04]30614: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-1312/20220629-131202-Yrx50nHs33pYMw7PLGYDuQAAABc [29-06-2022 13:12:04]30614: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 13:12:04]30614: WAF :: fetched 4 new logs [29-06-2022 13:13:01]885: WAF :: fetched 1 new logs [29-06-2022 13:15:01]6153: WAF :: fetched 2 new logs [29-06-2022 13:17:01]11817: WAF :: fetched 1 new logs [29-06-2022 13:18:02]14482: WAF :: fetched 1 new logs [29-06-2022 13:19:02]17147: WAF :: fetched 1 new logs [29-06-2022 13:21:02]22534: WAF :: fetched 1 new logs [29-06-2022 13:23:02]28032: WAF :: fetched 2 new logs [29-06-2022 13:24:01]30658: WAF :: fetched 3 new logs [29-06-2022 13:25:01]914: WAF :: fetched 1 new logs [29-06-2022 13:26:02]3729: WAF :: fetched 1 new logs [29-06-2022 13:27:01]6472: WAF :: fetched 3 new logs [29-06-2022 13:28:02]9153: WAF :: fetched 1 new logs [29-06-2022 13:30:02]14465: WAF :: fetched 1 new logs [29-06-2022 13:31:01]17170: WAF :: fetched 5 new logs [29-06-2022 13:32:01]19942: WAF :: fetched 3 new logs [29-06-2022 13:33:01]22603: WAF :: fetched 3 new logs [29-06-2022 13:34:01]25293: WAF :: fetched 3 new logs [29-06-2022 13:39:02]6568: WAF :: fetched 4 new logs [29-06-2022 13:40:01]9357: WAF :: fetched 1 new logs [29-06-2022 13:41:02]12201: Checking for user cron vulnerabilities [29-06-2022 13:42:02]14950: WAF :: fetched 4 new logs [29-06-2022 13:43:01]17661: WAF :: fetched 1 new logs [29-06-2022 13:44:02]20407: Checking ditributed CMS bruteforce attacks [29-06-2022 13:44:02]20407: WAF :: fetched 1 new logs [29-06-2022 13:45:01]: Checking for definition updates [29-06-2022 13:45:01]23135: WAF :: fetched 5 new logs [29-06-2022 13:46:01]25856: WAF :: fetched 1 new logs [29-06-2022 13:48:01]31301: WAF :: fetched 33 new logs [29-06-2022 13:49:02]1645: WAF :: fetched 4 new logs [29-06-2022 13:50:02]4425: WAF :: fetched 2 new logs [29-06-2022 13:51:01]7207: WAF :: fetched 2 new logs [29-06-2022 13:52:02]9931: WAF :: fetched 2 new logs [29-06-2022 13:53:01]12669: WAF :: fetched 2 new logs [29-06-2022 13:54:01]15422: WAF :: fetched 2 new logs [29-06-2022 13:56:02]20877: WAF :: fetched 2 new logs [29-06-2022 13:57:02]23640: WAF :: fetched 5 new logs [29-06-2022 14:00:02]31413: WAF :: fetched 3 new logs [29-06-2022 14:01:01]2209: WAF :: fetched 1 new logs [29-06-2022 14:02:01]5057: WAF :: fetched 4 new logs [29-06-2022 14:03:02]7872: WAF :: fetched 2 new logs [29-06-2022 14:04:01]10532: WAF :: fetched 3 new logs [29-06-2022 14:05:02]13191: WAF :: fetched 1 new logs [29-06-2022 14:06:02]15871: WAF :: fetched 1 new logs [29-06-2022 14:08:02]21311: WAF :: fetched 1 new logs [29-06-2022 14:09:01]23937: WAF :: fetched 2 new logs [29-06-2022 14:10:02]26657: WAF :: fetched 4 new logs [29-06-2022 14:12:01]32010: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656522721 [29-06-2022 14:12:01]32010: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 14:12:03]32010: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 14:12:03]32010: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-1412/20220629-141201-YryH4W1ns6hE_-HLZD93CwAAABI [29-06-2022 14:12:03]32010: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 14:12:04]32010: WAF :: fetched 4 new logs [29-06-2022 14:13:02]2509: WAF :: fetched 1 new logs [29-06-2022 14:14:01]5333: WAF :: fetched 6 new logs [29-06-2022 14:15:02]8051: WAF :: fetched 3 new logs [29-06-2022 14:16:02]10729: WAF :: fetched 5 new logs [29-06-2022 14:17:01]13409: WAF :: fetched 1 new logs [29-06-2022 14:18:02]16196: WAF :: fetched 2 new logs [29-06-2022 14:20:02]21599: WAF :: fetched 1 new logs [29-06-2022 14:21:02]24334: WAF :: fetched 2 new logs [29-06-2022 14:22:01]26987: WAF :: fetched 2 new logs [29-06-2022 14:23:02]29811: WAF :: fetched 3 new logs [29-06-2022 14:24:01]32452: WAF :: fetched 2 new logs [29-06-2022 14:26:02]5595: WAF :: fetched 1 new logs [29-06-2022 14:28:02]11003: WAF :: fetched 1 new logs [29-06-2022 14:29:01]13632: WAF :: fetched 2 new logs [29-06-2022 14:30:01]16321: WAF :: fetched 45 new logs [29-06-2022 14:31:02]19110: WAF :: fetched 60 new logs [29-06-2022 14:32:01]21771: WAF :: fetched 51 new logs [29-06-2022 14:33:02]24564: WAF :: fetched 45 new logs [29-06-2022 14:34:02]27309: WAF :: fetched 54 new logs [29-06-2022 14:35:01]29983: WAF :: fetched 58 new logs [29-06-2022 14:36:01]32724: WAF :: fetched 55 new logs [29-06-2022 14:37:02]3056: WAF :: fetched 59 new logs [29-06-2022 14:38:01]5860: WAF :: fetched 53 new logs [29-06-2022 14:39:02]8619: WAF :: fetched 49 new logs [29-06-2022 14:40:02]11429: WAF :: fetched 38 new logs [29-06-2022 14:41:01]14220: WAF :: fetched 1 new logs [29-06-2022 14:41:01]14220: Checking for user cron vulnerabilities [29-06-2022 14:42:02]16952: WAF :: fetched 2 new logs [29-06-2022 14:44:01]22436: Checking ditributed CMS bruteforce attacks [29-06-2022 14:44:01]22436: WAF :: fetched 2 new logs [29-06-2022 14:45:02]25206: WAF :: fetched 1 new logs [29-06-2022 14:46:01]27992: WAF :: fetched 2 new logs [29-06-2022 14:47:02]30728: WAF :: fetched 2 new logs [29-06-2022 14:48:02]1095: WAF :: fetched 3 new logs [29-06-2022 14:50:02]6556: WAF :: fetched 3 new logs [29-06-2022 14:51:01]9199: WAF :: fetched 4 new logs [29-06-2022 14:52:01]11867: WAF :: fetched 2 new logs [29-06-2022 14:53:02]14658: WAF :: fetched 1 new logs [29-06-2022 14:53:02]14655: Updated license status via CDN [29-06-2022 14:54:01]17324: WAF :: fetched 1 new logs [29-06-2022 14:55:02]20090: WAF :: fetched 5 new logs [29-06-2022 14:56:02]22825: WAF :: fetched 1 new logs [29-06-2022 14:57:01]25484: WAF :: fetched 2 new logs [29-06-2022 14:58:02]28232: WAF :: fetched 2 new logs [29-06-2022 15:00:02]969: WAF :: fetched 3 new logs [29-06-2022 15:01:02]4225: Reseting cPGuard inotify settings [29-06-2022 15:02:01]7045: WAF :: fetched 3 new logs [29-06-2022 15:03:02]9816: WAF :: fetched 3 new logs [29-06-2022 15:04:01]12436: WAF :: fetched 3 new logs [29-06-2022 15:05:02]15200: WAF :: fetched 2 new logs [29-06-2022 15:06:02]17883: WAF :: fetched 2 new logs [29-06-2022 15:08:02]23392: WAF :: fetched 5 new logs [29-06-2022 15:10:01]28691: WAF :: fetched 1 new logs [29-06-2022 15:12:01]1714: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656526321 [29-06-2022 15:12:01]1714: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 15:12:03]1714: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 15:12:03]1714: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-1512/20220629-151201-YryV8XNntL1TCWqoK9lEmQAAAC4 [29-06-2022 15:12:04]1714: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 15:12:04]1714: WAF :: fetched 5 new logs [29-06-2022 15:13:02]4608: WAF :: fetched 3 new logs [29-06-2022 15:14:02]7294: WAF :: fetched 1 new logs [29-06-2022 15:15:01]9993: WAF :: fetched 2 new logs [29-06-2022 15:17:02]15490: WAF :: fetched 1 new logs [29-06-2022 15:18:01]18227: WAF :: fetched 4 new logs [29-06-2022 15:21:01]26498: WAF :: fetched 1 new logs [29-06-2022 15:23:01]31855: WAF :: fetched 1 new logs [29-06-2022 15:25:02]4920: WAF :: fetched 1 new logs [29-06-2022 15:26:02]7657: WAF :: fetched 3 new logs [29-06-2022 15:27:01]10333: WAF :: fetched 3 new logs [29-06-2022 15:33:02]26732: WAF :: fetched 2 new logs [29-06-2022 15:34:01]29407: WAF :: fetched 3 new logs [29-06-2022 15:38:02]8120: WAF :: fetched 1 new logs [29-06-2022 15:39:01]10800: WAF :: fetched 1 new logs [29-06-2022 15:41:02]16257: Checking for user cron vulnerabilities [29-06-2022 15:43:02]21740: WAF :: fetched 1 new logs [29-06-2022 15:44:01]24481: Checking ditributed CMS bruteforce attacks [29-06-2022 15:44:01]24481: WAF :: fetched 1 new logs [29-06-2022 15:45:02]27184: WAF :: fetched 3 new logs [29-06-2022 15:50:02]8459: WAF :: fetched 32 new logs [29-06-2022 15:51:01]11209: WAF :: fetched 2 new logs [29-06-2022 15:52:02]13983: WAF :: fetched 1 new logs [29-06-2022 15:54:02]19386: WAF :: fetched 2 new logs [29-06-2022 15:55:02]22047: WAF :: fetched 1 new logs [29-06-2022 15:58:02]30339: WAF :: fetched 6 new logs [29-06-2022 15:59:01]574: WAF :: fetched 5 new logs [29-06-2022 16:01:01]6431: WAF :: fetched 1 new logs [29-06-2022 16:03:02]11969: WAF :: fetched 3 new logs [29-06-2022 16:05:02]17378: WAF :: fetched 1 new logs [29-06-2022 16:06:01]20105: WAF :: fetched 1 new logs [29-06-2022 16:08:02]25618: WAF :: fetched 1 new logs [29-06-2022 16:10:01]30958: WAF :: fetched 2 new logs [29-06-2022 16:11:01]1351: WAF :: fetched 2 new logs [29-06-2022 16:12:02]4113: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656529922 [29-06-2022 16:12:02]4113: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 16:12:04]4113: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 16:12:04]4113: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-1612/20220629-161202-YrykAmZWqnGLmsqUb48BmgAAAC0 [29-06-2022 16:12:04]4113: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 16:12:04]4113: WAF :: fetched 5 new logs [29-06-2022 16:15:01]12265: WAF :: fetched 2 new logs [29-06-2022 16:16:01]15019: WAF :: fetched 2 new logs [29-06-2022 16:17:02]17774: WAF :: fetched 1 new logs [29-06-2022 16:18:02]20562: WAF :: fetched 2 new logs [29-06-2022 16:19:01]23238: WAF :: fetched 1 new logs [29-06-2022 16:22:01]31600: WAF :: fetched 2 new logs [29-06-2022 16:23:02]2025: WAF :: fetched 1 new logs [29-06-2022 16:24:01]4764: WAF :: fetched 2 new logs [29-06-2022 16:25:02]7514: WAF :: fetched 3 new logs [29-06-2022 16:26:02]10215: WAF :: fetched 1 new logs [29-06-2022 16:27:02]12862: WAF :: fetched 1 new logs [29-06-2022 16:28:01]15606: WAF :: fetched 1 new logs [29-06-2022 16:29:01]18302: WAF :: fetched 2 new logs [29-06-2022 16:34:01]31893: WAF :: fetched 2 new logs [29-06-2022 16:37:02]7729: WAF :: fetched 3 new logs [29-06-2022 16:38:02]10515: WAF :: fetched 8 new logs [29-06-2022 16:39:01]13188: WAF :: fetched 7 new logs [29-06-2022 16:41:02]18618: WAF :: fetched 1 new logs [29-06-2022 16:41:02]18618: Checking for user cron vulnerabilities [29-06-2022 16:42:01]21294: WAF :: fetched 4 new logs [29-06-2022 16:43:02]24034: WAF :: fetched 1 new logs [29-06-2022 16:44:01]26688: Checking ditributed CMS bruteforce attacks [29-06-2022 16:44:01]26688: WAF :: fetched 2 new logs [29-06-2022 16:45:01]29390: WAF :: fetched 1 new logs [29-06-2022 16:47:01]2378: WAF :: fetched 1 new logs [29-06-2022 16:48:02]5243: WAF :: fetched 3 new logs [29-06-2022 16:50:01]10666: WAF :: fetched 2 new logs [29-06-2022 16:51:02]13460: WAF :: fetched 2 new logs [29-06-2022 16:52:01]16150: WAF :: fetched 1 new logs [29-06-2022 16:53:02]18929: WAF :: fetched 5 new logs [29-06-2022 16:54:02]21606: WAF :: fetched 7 new logs [29-06-2022 16:55:01]24315: WAF :: fetched 4 new logs [29-06-2022 16:56:02]27079: WAF :: fetched 2 new logs [29-06-2022 16:57:01]29730: WAF :: fetched 2 new logs [29-06-2022 16:58:02]32470: WAF :: fetched 2 new logs [29-06-2022 17:01:01]8420: WAF :: fetched 2 new logs [29-06-2022 17:02:02]11164: WAF :: fetched 2 new logs [29-06-2022 17:03:01]13982: WAF :: fetched 2 new logs [29-06-2022 17:07:01]24804: WAF :: fetched 1 new logs [29-06-2022 17:09:01]30188: WAF :: fetched 1 new logs [29-06-2022 17:10:01]411: WAF :: fetched 2 new logs [29-06-2022 17:11:02]3244: WAF :: fetched 2 new logs [29-06-2022 17:12:01]5954: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656533521 [29-06-2022 17:12:01]5954: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 17:12:03]5954: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 17:12:04]5954: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-1712/20220629-171201-YryyEYpsgyECZeKodV5aBwAAABQ [29-06-2022 17:12:04]5954: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 17:12:04]5954: WAF :: fetched 2 new logs [29-06-2022 17:13:02]8758: WAF :: fetched 3 new logs [29-06-2022 17:14:02]11375: WAF :: fetched 1 new logs [29-06-2022 17:15:01]14012: WAF :: fetched 3 new logs [29-06-2022 17:16:02]16801: WAF :: fetched 14 new logs [29-06-2022 17:17:01]19472: WAF :: fetched 24 new logs [29-06-2022 17:18:02]22219: WAF :: fetched 16 new logs [29-06-2022 17:22:02]611: WAF :: fetched 2 new logs [29-06-2022 17:23:01]3435: WAF :: fetched 2 new logs [29-06-2022 17:24:02]6214: WAF :: fetched 1 new logs [29-06-2022 17:27:01]14432: WAF :: fetched 1 new logs [29-06-2022 17:28:02]17206: WAF :: fetched 1 new logs [29-06-2022 17:30:01]22593: WAF :: fetched 2 new logs [29-06-2022 17:31:02]25372: WAF :: fetched 1 new logs [29-06-2022 17:32:01]28125: WAF :: fetched 2 new logs [29-06-2022 17:35:01]3998: WAF :: fetched 1 new logs [29-06-2022 17:37:01]9456: WAF :: fetched 3 new logs [29-06-2022 17:38:01]12214: WAF :: fetched 2 new logs [29-06-2022 17:39:02]14876: WAF :: fetched 1 new logs [29-06-2022 17:40:01]17601: WAF :: fetched 2 new logs [29-06-2022 17:41:02]20342: WAF :: fetched 1 new logs [29-06-2022 17:41:02]20342: Checking for user cron vulnerabilities [29-06-2022 17:42:02]22964: WAF :: fetched 7 new logs [29-06-2022 17:43:01]25700: WAF :: fetched 2 new logs [29-06-2022 17:44:01]28385: Checking ditributed CMS bruteforce attacks [29-06-2022 17:44:02]28385: WAF :: fetched 2 new logs [29-06-2022 17:45:01]31039: WAF :: fetched 4 new logs [29-06-2022 17:46:02]1408: WAF :: fetched 4 new logs [29-06-2022 17:47:01]4112: WAF :: fetched 1 new logs [29-06-2022 17:49:02]9524: WAF :: fetched 3 new logs [29-06-2022 17:50:01]12181: WAF :: fetched 2 new logs [29-06-2022 17:51:02]14885: WAF :: fetched 1 new logs [29-06-2022 17:53:02]20248: WAF :: fetched 1 new logs [29-06-2022 17:54:02]22926: WAF :: fetched 1 new logs [29-06-2022 17:56:02]28342: WAF :: fetched 3 new logs [29-06-2022 17:57:01]30958: WAF :: fetched 3 new logs [29-06-2022 17:59:02]4051: WAF :: fetched 2 new logs [29-06-2022 18:00:01]6512: WAF :: fetched 2 new logs [29-06-2022 18:02:02]12262: WAF :: fetched 3 new logs [29-06-2022 18:03:01]15027: WAF :: fetched 3 new logs [29-06-2022 18:05:02]20298: WAF :: fetched 1 new logs [29-06-2022 18:06:01]22995: WAF :: fetched 1 new logs [29-06-2022 18:07:02]25655: WAF :: fetched 2 new logs [29-06-2022 18:12:02]6622: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656537122 [29-06-2022 18:12:02]6622: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 18:12:04]6622: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 18:12:04]6622: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-1812/20220629-181202-YrzAIuPSVKH2o7Le1l3lTgAAAAc [29-06-2022 18:12:04]6622: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 18:12:05]6622: WAF :: fetched 1 new logs [29-06-2022 18:14:01]12035: WAF :: fetched 2 new logs [29-06-2022 18:15:02]14693: WAF :: fetched 5 new logs [29-06-2022 18:16:01]17366: WAF :: fetched 1 new logs [29-06-2022 18:22:02]1255: WAF :: fetched 2 new logs [29-06-2022 18:23:02]4031: WAF :: fetched 2 new logs [29-06-2022 18:24:01]6752: WAF :: fetched 2 new logs [29-06-2022 18:25:02]9440: WAF :: fetched 1 new logs [29-06-2022 18:26:01]12106: WAF :: fetched 1 new logs [29-06-2022 18:27:02]14787: WAF :: fetched 1 new logs [29-06-2022 18:28:02]17471: WAF :: fetched 2 new logs [29-06-2022 18:30:02]22770: WAF :: fetched 4 new logs [29-06-2022 18:31:01]25567: WAF :: fetched 4 new logs [29-06-2022 18:32:02]28305: WAF :: fetched 3 new logs [29-06-2022 18:34:01]1252: WAF :: fetched 2 new logs [29-06-2022 18:37:02]9352: WAF :: fetched 2 new logs [29-06-2022 18:39:02]14752: WAF :: fetched 2 new logs [29-06-2022 18:40:02]17360: WAF :: fetched 2 new logs [29-06-2022 18:41:01]20136: Checking for user cron vulnerabilities [29-06-2022 18:42:01]22828: WAF :: fetched 1 new logs [29-06-2022 18:43:02]25524: WAF :: fetched 2 new logs [29-06-2022 18:44:01]28228: Checking ditributed CMS bruteforce attacks [29-06-2022 18:44:02]28228: WAF :: fetched 1 new logs [29-06-2022 18:46:02]1223: WAF :: fetched 1 new logs [29-06-2022 18:47:01]3934: WAF :: fetched 3 new logs [29-06-2022 18:48:02]6692: WAF :: fetched 2 new logs [29-06-2022 18:49:02]9341: WAF :: fetched 2 new logs [29-06-2022 18:50:01]11996: WAF :: fetched 1 new logs [29-06-2022 18:51:02]14696: WAF :: fetched 3 new logs [29-06-2022 18:52:01]17299: WAF :: fetched 4 new logs [29-06-2022 18:53:01]19946: WAF :: fetched 3 new logs [29-06-2022 18:54:02]22688: WAF :: fetched 6 new logs [29-06-2022 18:55:02]25285: WAF :: fetched 1 new logs [29-06-2022 18:56:01]27980: WAF :: fetched 4 new logs [29-06-2022 18:57:02]30646: WAF :: fetched 1 new logs [29-06-2022 18:58:01]901: WAF :: fetched 3 new logs [29-06-2022 18:59:01]3654: WAF :: fetched 1 new logs [29-06-2022 19:06:02]22567: WAF :: fetched 5 new logs [29-06-2022 19:07:01]25212: WAF :: fetched 2 new logs [29-06-2022 19:08:02]27908: WAF :: fetched 5 new logs [29-06-2022 19:12:01]6211: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656540721 [29-06-2022 19:12:01]6211: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 19:12:03]6211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 19:12:03]6211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-1912/20220629-191201-YrzOMb1Szwqbt7updIpFwAAAACM [29-06-2022 19:12:03]6211: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 19:12:04]6211: WAF :: fetched 2 new logs [29-06-2022 19:13:02]8883: WAF :: fetched 3 new logs [29-06-2022 19:14:01]11547: WAF :: fetched 1 new logs [29-06-2022 19:16:01]16507: WAF :: fetched 2 new logs [29-06-2022 19:17:02]19545: WAF :: fetched 1 new logs [29-06-2022 19:19:02]24830: WAF :: fetched 1 new logs [29-06-2022 19:23:02]3066: WAF :: fetched 1 new logs [29-06-2022 19:25:02]8471: WAF :: fetched 1 new logs [29-06-2022 19:27:02]13774: WAF :: fetched 1 new logs [29-06-2022 19:30:02]21829: WAF :: fetched 13 new logs [29-06-2022 19:32:02]27108: WAF :: fetched 4 new logs [29-06-2022 19:33:02]29742: WAF :: fetched 1 new logs [29-06-2022 19:35:02]2715: WAF :: fetched 3 new logs [29-06-2022 19:36:02]5503: WAF :: fetched 3 new logs [29-06-2022 19:37:01]8127: WAF :: fetched 5 new logs [29-06-2022 19:38:02]10841: WAF :: fetched 5 new logs [29-06-2022 19:39:02]13579: WAF :: fetched 2 new logs [29-06-2022 19:40:02]16242: WAF :: fetched 1 new logs [29-06-2022 19:41:02]18899: WAF :: fetched 1 new logs [29-06-2022 19:41:02]18899: Checking for user cron vulnerabilities [29-06-2022 19:44:01]26845: Checking ditributed CMS bruteforce attacks [29-06-2022 19:45:01]: Checking for definition updates [29-06-2022 19:46:02]32093: WAF :: fetched 3 new logs [29-06-2022 19:48:02]5036: WAF :: fetched 3 new logs [29-06-2022 19:49:02]7750: WAF :: fetched 2 new logs [29-06-2022 19:51:02]13017: WAF :: fetched 1 new logs [29-06-2022 19:54:02]20970: WAF :: fetched 2 new logs [29-06-2022 19:55:02]23552: WAF :: fetched 2 new logs [29-06-2022 19:56:02]26248: WAF :: fetched 2 new logs [29-06-2022 19:57:02]28851: WAF :: fetched 2 new logs [29-06-2022 19:58:02]31409: WAF :: fetched 2 new logs [29-06-2022 19:59:01]1708: WAF :: fetched 3 new logs [29-06-2022 20:01:01]7266: WAF :: fetched 3 new logs [29-06-2022 20:02:01]9906: WAF :: fetched 1 new logs [29-06-2022 20:03:01]12540: WAF :: fetched 2 new logs [29-06-2022 20:05:02]17842: WAF :: fetched 1 new logs [29-06-2022 20:06:02]20553: WAF :: fetched 2 new logs [29-06-2022 20:07:01]23129: WAF :: fetched 4 new logs [29-06-2022 20:08:01]25789: WAF :: fetched 1 new logs [29-06-2022 20:09:02]28501: WAF :: fetched 6 new logs [29-06-2022 20:10:01]30738: WAF :: fetched 1 new logs [29-06-2022 20:11:01]1420: WAF :: fetched 2 new logs [29-06-2022 20:12:01]4126: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656544321 [29-06-2022 20:12:01]4126: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 20:12:03]4126: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 20:12:03]4126: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-2012/20220629-201201-YrzcQTpKImXsR6HLBDvt4gAAAB8 [29-06-2022 20:12:03]4126: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 20:12:04]4126: WAF :: fetched 8 new logs [29-06-2022 20:13:01]6817: WAF :: fetched 2 new logs [29-06-2022 20:14:02]9524: WAF :: fetched 9 new logs [29-06-2022 20:17:02]17422: WAF :: fetched 26 new logs [29-06-2022 20:20:02]25394: WAF :: fetched 1 new logs [29-06-2022 20:22:01]30693: WAF :: fetched 2 new logs [29-06-2022 20:23:01]899: WAF :: fetched 3 new logs [29-06-2022 20:24:01]3665: WAF :: fetched 1 new logs [29-06-2022 20:25:01]6369: WAF :: fetched 3 new logs [29-06-2022 20:26:01]9045: WAF :: fetched 2 new logs [29-06-2022 20:27:01]11647: WAF :: fetched 1 new logs [29-06-2022 20:28:02]14271: WAF :: fetched 1 new logs [29-06-2022 20:30:02]19634: WAF :: fetched 2 new logs [29-06-2022 20:32:02]24967: WAF :: fetched 3 new logs [29-06-2022 20:33:02]27609: WAF :: fetched 4 new logs [29-06-2022 20:34:02]30270: WAF :: fetched 2 new logs [29-06-2022 20:35:02]495: WAF :: fetched 7 new logs [29-06-2022 20:36:02]3250: WAF :: fetched 2 new logs [29-06-2022 20:38:02]8689: WAF :: fetched 4 new logs [29-06-2022 20:39:02]11364: WAF :: fetched 1 new logs [29-06-2022 20:40:02]14019: WAF :: fetched 2 new logs [29-06-2022 20:41:01]16310: Checking for user cron vulnerabilities [29-06-2022 20:42:01]19337: WAF :: fetched 1 new logs [29-06-2022 20:43:01]21982: WAF :: fetched 32 new logs [29-06-2022 20:44:01]24681: Checking ditributed CMS bruteforce attacks [29-06-2022 20:44:01]24681: WAF :: fetched 2 new logs [29-06-2022 20:45:02]27300: WAF :: fetched 2 new logs [29-06-2022 20:48:01]2866: WAF :: fetched 9 new logs [29-06-2022 20:49:02]5617: WAF :: fetched 13 new logs [29-06-2022 20:50:02]8272: WAF :: fetched 1 new logs [29-06-2022 20:52:02]13548: WAF :: fetched 1 new logs [29-06-2022 20:54:01]18602: WAF :: fetched 1 new logs [29-06-2022 20:55:01]21548: WAF :: fetched 4 new logs [29-06-2022 20:56:01]24162: WAF :: fetched 1 new logs [29-06-2022 20:57:01]26811: WAF :: fetched 1 new logs [29-06-2022 20:58:01]29414: WAF :: fetched 1 new logs [29-06-2022 20:59:01]32113: WAF :: fetched 2 new logs [29-06-2022 21:00:02]2060: WAF :: fetched 2 new logs [29-06-2022 21:01:02]5440: WAF :: fetched 1 new logs [29-06-2022 21:02:02]8084: WAF :: fetched 2 new logs [29-06-2022 21:04:02]13418: WAF :: fetched 1 new logs [29-06-2022 21:06:02]18700: WAF :: fetched 3 new logs [29-06-2022 21:07:02]21303: WAF :: fetched 2 new logs [29-06-2022 21:08:02]23916: WAF :: fetched 3 new logs [29-06-2022 21:11:01]31615: WAF :: fetched 4 new logs [29-06-2022 21:12:02]2195: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656547922 [29-06-2022 21:12:02]2195: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 21:12:04]2195: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 21:12:04]2195: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-2112/20220629-211202-YrzqUiuEFuOJkIGBi5VsKQAAACA [29-06-2022 21:12:04]2195: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 21:12:05]2195: WAF :: fetched 3 new logs [29-06-2022 21:14:01]7164: WAF :: fetched 3 new logs [29-06-2022 21:15:01]10229: WAF :: fetched 3 new logs [29-06-2022 21:16:01]12899: WAF :: fetched 4 new logs [29-06-2022 21:17:01]15531: WAF :: fetched 3 new logs [29-06-2022 21:18:01]18149: WAF :: fetched 2 new logs [29-06-2022 21:19:01]20866: WAF :: fetched 3 new logs [29-06-2022 21:20:02]23501: WAF :: fetched 3 new logs [29-06-2022 21:22:02]28748: WAF :: fetched 1 new logs [29-06-2022 21:23:02]31350: WAF :: fetched 1 new logs [29-06-2022 21:24:01]1225: WAF :: fetched 1 new logs [29-06-2022 21:25:02]4302: WAF :: fetched 1 new logs [29-06-2022 21:26:02]6942: WAF :: fetched 6 new logs [29-06-2022 21:27:01]9355: WAF :: fetched 5 new logs [29-06-2022 21:28:02]12210: WAF :: fetched 4 new logs [29-06-2022 21:29:02]14903: WAF :: fetched 3 new logs [29-06-2022 21:30:02]17516: WAF :: fetched 1 new logs [29-06-2022 21:31:02]20199: WAF :: fetched 6 new logs [29-06-2022 21:33:02]25443: WAF :: fetched 1 new logs [29-06-2022 21:34:02]28138: WAF :: fetched 2 new logs [29-06-2022 21:35:02]30770: WAF :: fetched 3 new logs [29-06-2022 21:38:01]6580: WAF :: fetched 1 new logs [29-06-2022 21:40:02]11939: WAF :: fetched 1 new logs [29-06-2022 21:41:02]14667: Checking for user cron vulnerabilities [29-06-2022 21:44:02]22727: Checking ditributed CMS bruteforce attacks [29-06-2022 21:44:02]22727: WAF :: fetched 1 new logs [29-06-2022 21:45:01]25018: WAF :: fetched 2 new logs [29-06-2022 21:46:01]28050: WAF :: fetched 2 new logs [29-06-2022 21:48:01]907: WAF :: fetched 3 new logs [29-06-2022 21:49:01]3660: WAF :: fetched 2 new logs [29-06-2022 21:50:02]6402: WAF :: fetched 4 new logs [29-06-2022 21:51:02]9109: WAF :: fetched 2 new logs [29-06-2022 21:52:01]11734: WAF :: fetched 4 new logs [29-06-2022 21:53:02]14362: WAF :: fetched 1 new logs [29-06-2022 21:54:02]17048: WAF :: fetched 5 new logs [29-06-2022 21:57:01]24965: WAF :: fetched 1 new logs [29-06-2022 21:59:01]29804: WAF :: fetched 2 new logs [29-06-2022 22:00:02]32517: WAF :: fetched 2 new logs [29-06-2022 22:01:01]3250: WAF :: fetched 1 new logs [29-06-2022 22:02:02]5940: WAF :: fetched 27 new logs [29-06-2022 22:03:01]8539: WAF :: fetched 4 new logs [29-06-2022 22:04:02]11235: WAF :: fetched 1 new logs [29-06-2022 22:05:01]13805: WAF :: fetched 1 new logs [29-06-2022 22:06:02]16528: WAF :: fetched 1 new logs [29-06-2022 22:07:02]19101: WAF :: fetched 4 new logs [29-06-2022 22:07:07]19095: Performing Domain reputation checks [29-06-2022 22:08:01]21703: WAF :: fetched 1 new logs [29-06-2022 22:09:02]24417: WAF :: fetched 32 new logs [29-06-2022 22:12:01]32236: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656551521 [29-06-2022 22:12:01]32236: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 22:12:03]32236: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 22:12:03]32236: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-2212/20220629-221201-Yrz4YWPAhCDs1XOwdraqfQAAACk [29-06-2022 22:12:03]32236: WAF :: No suitable log file found. Using SQLite.. [29-06-2022 22:12:04]32236: WAF :: fetched 5 new logs [29-06-2022 22:13:02]2534: WAF :: fetched 2 new logs [29-06-2022 22:14:01]5284: WAF :: fetched 1 new logs [29-06-2022 22:16:02]10539: WAF :: fetched 5 new logs [29-06-2022 22:17:01]13126: WAF :: fetched 1 new logs [29-06-2022 22:18:02]15769: WAF :: fetched 31 new logs [29-06-2022 22:19:01]18432: WAF :: fetched 7 new logs [29-06-2022 22:20:02]21077: WAF :: fetched 3 new logs [29-06-2022 22:21:02]23673: WAF :: fetched 26 new logs [29-06-2022 22:22:01]26286: WAF :: fetched 15 new logs [29-06-2022 22:23:02]28932: WAF :: fetched 3 new logs [29-06-2022 22:24:01]31610: WAF :: fetched 1 new logs [29-06-2022 22:26:02]4583: WAF :: fetched 5 new logs [29-06-2022 22:27:01]7186: WAF :: fetched 3 new logs [29-06-2022 22:28:02]9798: WAF :: fetched 1 new logs [29-06-2022 22:29:01]12492: WAF :: fetched 11 new logs [29-06-2022 22:30:02]15133: WAF :: fetched 5 new logs [29-06-2022 22:31:02]17818: WAF :: fetched 4 new logs [29-06-2022 22:32:01]20494: WAF :: fetched 1 new logs [29-06-2022 22:33:02]23123: WAF :: fetched 2 new logs [29-06-2022 22:34:01]25839: WAF :: fetched 3 new logs [29-06-2022 22:35:02]28450: WAF :: fetched 1 new logs [29-06-2022 22:36:02]31070: WAF :: fetched 1 new logs [29-06-2022 22:37:01]1262: WAF :: fetched 6 new logs [29-06-2022 22:38:02]3952: WAF :: fetched 5 new logs [29-06-2022 22:39:02]6630: WAF :: fetched 2 new logs [29-06-2022 22:40:02]9221: WAF :: fetched 1 new logs [29-06-2022 22:41:01]11875: Checking for user cron vulnerabilities [29-06-2022 22:44:02]19745: Checking ditributed CMS bruteforce attacks [29-06-2022 22:46:01]25016: WAF :: fetched 2 new logs [29-06-2022 22:48:02]30224: WAF :: fetched 2 new logs [29-06-2022 22:49:01]468: WAF :: fetched 1 new logs [29-06-2022 22:50:02]3148: WAF :: fetched 3 new logs [29-06-2022 22:51:01]5843: WAF :: fetched 4 new logs [29-06-2022 22:52:02]8455: WAF :: fetched 3 new logs [29-06-2022 22:53:01]11000: WAF :: fetched 2 new logs [29-06-2022 22:56:01]18921: WAF :: fetched 1 new logs [29-06-2022 23:00:02]29157: WAF :: fetched 1 new logs [29-06-2022 23:01:01]32228: WAF :: fetched 1 new logs [29-06-2022 23:02:01]2485: WAF :: fetched 2 new logs [29-06-2022 23:06:02]13047: WAF :: fetched 1 new logs [29-06-2022 23:07:01]15636: WAF :: fetched 6 new logs [29-06-2022 23:07:41]15803: Performed RBL check for 23.111.136.34. [29-06-2022 23:08:02]18240: WAF :: fetched 1 new logs [29-06-2022 23:09:02]20935: WAF :: fetched 1 new logs [29-06-2022 23:12:02]28782: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656555122 [29-06-2022 23:12:02]28782: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-06-2022 23:12:04]28782: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-06-2022 23:12:04]28782: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220629/20220629-2312/20220629-231202-Yr0GcpD8j3LF4YKTwv9AywAAAAw [29-06-2022 23:12:04]28782: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [29-06-2022 23:12:04]28782: WAF :: fetched 1 new logs [29-06-2022 23:13:01]31365: WAF :: fetched 1 new logs [29-06-2022 23:14:02]1644: WAF :: fetched 2 new logs [29-06-2022 23:15:01]4299: WAF :: fetched 4 new logs [29-06-2022 23:16:02]7020: WAF :: fetched 2 new logs [29-06-2022 23:17:02]9613: WAF :: fetched 4 new logs [29-06-2022 23:18:01]12227: WAF :: fetched 1 new logs [29-06-2022 23:19:02]14916: WAF :: fetched 1 new logs [29-06-2022 23:20:01]17517: WAF :: fetched 1 new logs [29-06-2022 23:22:02]22783: WAF :: fetched 1 new logs [29-06-2022 23:23:01]25401: WAF :: fetched 2 new logs [29-06-2022 23:24:02]28089: WAF :: fetched 5 new logs [29-06-2022 23:26:01]872: WAF :: fetched 1 new logs [29-06-2022 23:28:01]6179: WAF :: fetched 2 new logs [29-06-2022 23:29:02]8880: WAF :: fetched 1 new logs [29-06-2022 23:31:01]14129: WAF :: fetched 1 new logs [29-06-2022 23:32:02]16763: WAF :: fetched 2 new logs [29-06-2022 23:33:01]19314: WAF :: fetched 39 new logs [29-06-2022 23:34:02]22002: WAF :: fetched 41 new logs [29-06-2022 23:35:01]24651: WAF :: fetched 37 new logs [29-06-2022 23:36:01]27297: WAF :: fetched 15 new logs [29-06-2022 23:37:01]29883: WAF :: fetched 36 new logs [29-06-2022 23:38:02]32544: WAF :: fetched 30 new logs [29-06-2022 23:39:02]2832: WAF :: fetched 37 new logs [29-06-2022 23:40:01]5652: WAF :: fetched 17 new logs [29-06-2022 23:41:01]8275: WAF :: fetched 1 new logs [29-06-2022 23:41:01]8275: Checking for user cron vulnerabilities [29-06-2022 23:42:02]10881: WAF :: fetched 1 new logs [29-06-2022 23:44:02]16038: Checking ditributed CMS bruteforce attacks [29-06-2022 23:45:01]18676: WAF :: fetched 1 new logs [29-06-2022 23:46:01]21302: WAF :: fetched 6 new logs [29-06-2022 23:47:02]23938: WAF :: fetched 2 new logs [29-06-2022 23:48:01]26549: WAF :: fetched 2 new logs [29-06-2022 23:49:02]29175: WAF :: fetched 6 new logs [29-06-2022 23:50:01]31661: WAF :: fetched 3 new logs [29-06-2022 23:51:02]2167: WAF :: fetched 1 new logs [29-06-2022 23:52:01]4791: WAF :: fetched 1 new logs [29-06-2022 23:54:02]10150: WAF :: fetched 3 new logs [29-06-2022 23:55:01]13514: WAF :: fetched 38 new logs [29-06-2022 23:56:02]16993: httpd.conf changed. Refreshing watchlist. [29-06-2022 23:56:02]16992: WAF :: fetched 108 new logs [29-06-2022 23:57:02]19638: WAF :: fetched 74 new logs [29-06-2022 23:58:01]22328: WAF :: fetched 15 new logs [29-06-2022 23:58:01]22329: httpd.conf changed. Refreshing watchlist. [29-06-2022 23:59:02]25032: WAF :: fetched 127 new logs [30-06-2022 00:00:02]27673: httpd.conf changed. Refreshing watchlist. [30-06-2022 00:00:02]27703: WAF :: fetched 63 new logs [30-06-2022 00:01:02]30913: WAF :: fetched 6 new logs [30-06-2022 00:01:02]30908: httpd.conf changed. Refreshing watchlist. [30-06-2022 00:01:04]30913: Sending daily report for June 30, 2022 [30-06-2022 00:02:01]1259: WAF :: fetched 3 new logs [30-06-2022 00:02:01]1256: httpd.conf changed. Refreshing watchlist. [30-06-2022 00:03:02]3926: WAF :: fetched 2 new logs [30-06-2022 00:04:01]6540: WAF :: fetched 1 new logs [30-06-2022 00:05:01]9225: WAF :: fetched 1 new logs [30-06-2022 00:05:02]9225: Deleted 0 entries older than 6 MONTH from scanner_logs [30-06-2022 00:05:02]9225: Deleted 0 files from Quarantine [30-06-2022 00:06:01]11875: WAF :: fetched 1 new logs [30-06-2022 00:07:02]14489: WAF :: fetched 18 new logs [30-06-2022 00:08:01]17043: WAF :: fetched 11 new logs [30-06-2022 00:09:02]19690: WAF :: fetched 1 new logs [30-06-2022 00:10:01]22356: WAF :: fetched 1 new logs [30-06-2022 00:10:01]22369: httpd.conf changed. Refreshing watchlist. [30-06-2022 00:11:01]25072: httpd.conf changed. Refreshing watchlist. [30-06-2022 00:12:02]27712: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656558722 [30-06-2022 00:12:02]27712: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 00:12:04]27712: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 00:12:04]27712: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-0012/20220630-001202-Yr0Uglvj-Cx0A56hg8KsAAAAABQ [30-06-2022 00:12:04]27712: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 00:12:05]27712: WAF :: fetched 608 new logs [30-06-2022 00:13:02]30260: WAF :: fetched 1 new logs [30-06-2022 00:16:01]5969: WAF :: fetched 46 new logs [30-06-2022 00:17:02]8588: WAF :: fetched 22 new logs [30-06-2022 00:18:02]11182: httpd.conf changed. Refreshing watchlist. [30-06-2022 00:19:01]13781: WAF :: fetched 8 new logs [30-06-2022 00:20:02]16449: WAF :: fetched 1 new logs [30-06-2022 00:23:01]24233: WAF :: fetched 1 new logs [30-06-2022 00:24:02]26862: WAF :: fetched 3 new logs [30-06-2022 00:27:02]2357: WAF :: fetched 1 new logs [30-06-2022 00:29:02]7578: WAF :: fetched 1 new logs [30-06-2022 00:31:02]12923: WAF :: fetched 2 new logs [30-06-2022 00:33:01]18108: WAF :: fetched 1 new logs [30-06-2022 00:35:01]23453: WAF :: fetched 1 new logs [30-06-2022 00:36:02]26136: WAF :: fetched 1 new logs [30-06-2022 00:37:02]28702: WAF :: fetched 5 new logs [30-06-2022 00:38:01]31340: WAF :: fetched 33 new logs [30-06-2022 00:39:02]1543: WAF :: fetched 18 new logs [30-06-2022 00:40:01]4252: WAF :: fetched 36 new logs [30-06-2022 00:41:02]6961: WAF :: fetched 22 new logs [30-06-2022 00:41:02]6961: Checking for user cron vulnerabilities [30-06-2022 00:42:02]9549: WAF :: fetched 9 new logs [30-06-2022 00:43:01]12140: WAF :: fetched 21 new logs [30-06-2022 00:44:02]14818: Checking ditributed CMS bruteforce attacks [30-06-2022 00:44:02]14818: WAF :: fetched 20 new logs [30-06-2022 00:45:01]: Checking for software updates [30-06-2022 00:45:01]17529: WAF :: fetched 10 new logs [30-06-2022 00:46:02]20315: WAF :: fetched 22 new logs [30-06-2022 00:47:02]22920: WAF :: fetched 28 new logs [30-06-2022 00:48:01]25624: WAF :: fetched 34 new logs [30-06-2022 00:49:02]28291: WAF :: fetched 7 new logs [30-06-2022 00:50:01]30948: WAF :: fetched 12 new logs [30-06-2022 00:51:01]1260: WAF :: fetched 11 new logs [30-06-2022 00:52:02]3920: WAF :: fetched 14 new logs [30-06-2022 00:53:02]6533: WAF :: fetched 22 new logs [30-06-2022 00:54:02]9162: WAF :: fetched 27 new logs [30-06-2022 00:55:02]11853: WAF :: fetched 11 new logs [30-06-2022 00:56:01]14722: WAF :: fetched 11 new logs [30-06-2022 00:58:01]20075: WAF :: fetched 2 new logs [30-06-2022 00:59:02]22709: WAF :: fetched 3 new logs [30-06-2022 01:00:02]25203: WAF :: fetched 8 new logs [30-06-2022 01:01:01]29056: WAF :: fetched 6 new logs [30-06-2022 01:02:02]32101: WAF :: fetched 4 new logs [30-06-2022 01:03:01]2607: WAF :: fetched 7 new logs [30-06-2022 01:04:02]5719: WAF :: fetched 8 new logs [30-06-2022 01:05:02]8717: WAF :: fetched 2 new logs [30-06-2022 01:06:01]11573: WAF :: fetched 3 new logs [30-06-2022 01:07:02]14536: WAF :: fetched 3 new logs [30-06-2022 01:09:01]20107: WAF :: fetched 3 new logs [30-06-2022 01:11:01]25621: WAF :: fetched 2 new logs [30-06-2022 01:12:02]28568: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656562322 [30-06-2022 01:12:02]28568: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 01:12:04]28568: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 01:12:04]28568: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-0112/20220630-011202-Yr0ikotrLYevOI2J23XDkwAAAAM [30-06-2022 01:12:04]28568: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 01:12:04]28568: WAF :: fetched 3 new logs [30-06-2022 01:13:01]31172: WAF :: fetched 3 new logs [30-06-2022 01:14:02]1416: WAF :: fetched 1 new logs [30-06-2022 01:16:02]7397: WAF :: fetched 2 new logs [30-06-2022 01:19:02]15684: WAF :: fetched 1 new logs [30-06-2022 01:20:01]18670: WAF :: fetched 1 new logs [30-06-2022 01:23:02]27357: WAF :: fetched 4 new logs [30-06-2022 01:25:02]780: WAF :: fetched 1 new logs [30-06-2022 01:26:02]4550: WAF :: fetched 3 new logs [30-06-2022 01:27:01]7253: WAF :: fetched 1 new logs [30-06-2022 01:28:01]10067: WAF :: fetched 1 new logs [30-06-2022 01:29:02]12841: WAF :: fetched 1 new logs [30-06-2022 01:30:02]16010: WAF :: fetched 17 new logs [30-06-2022 01:31:01]18791: WAF :: fetched 1 new logs [30-06-2022 01:33:01]24758: WAF :: fetched 1 new logs [30-06-2022 01:35:02]30379: WAF :: fetched 1 new logs [30-06-2022 01:36:01]914: WAF :: fetched 1 new logs [30-06-2022 01:37:02]3581: WAF :: fetched 3 new logs [30-06-2022 01:38:02]6638: WAF :: fetched 3 new logs [30-06-2022 01:39:02]9611: WAF :: fetched 2 new logs [30-06-2022 01:40:01]12385: WAF :: fetched 1 new logs [30-06-2022 01:41:02]15327: Checking for user cron vulnerabilities [30-06-2022 01:42:02]18392: WAF :: fetched 2 new logs [30-06-2022 01:44:01]24189: Checking ditributed CMS bruteforce attacks [30-06-2022 01:44:02]24189: WAF :: fetched 3 new logs [30-06-2022 01:45:01]: Checking for definition updates [30-06-2022 01:45:01]26836: WAF :: fetched 4 new logs [30-06-2022 01:45:07]26846: Updated virus defnition : malware.expert.ndb [30-06-2022 01:46:02]29566: WAF :: fetched 2 new logs [30-06-2022 01:47:02]32241: WAF :: fetched 3 new logs [30-06-2022 01:48:02]2968: WAF :: fetched 1 new logs [30-06-2022 01:50:02]8597: WAF :: fetched 1 new logs [30-06-2022 01:51:01]11290: WAF :: fetched 3 new logs [30-06-2022 01:53:01]16783: WAF :: fetched 1 new logs [30-06-2022 01:55:02]21953: WAF :: fetched 1 new logs [30-06-2022 01:56:01]24607: WAF :: fetched 3 new logs [30-06-2022 01:57:02]27353: WAF :: fetched 4 new logs [30-06-2022 01:58:01]30055: WAF :: fetched 4 new logs [30-06-2022 01:59:02]512: WAF :: fetched 1 new logs [30-06-2022 02:02:02]8936: WAF :: fetched 4 new logs [30-06-2022 02:04:02]14149: WAF :: fetched 19 new logs [30-06-2022 02:05:01]16866: WAF :: fetched 1 new logs [30-06-2022 02:06:01]19546: WAF :: fetched 1 new logs [30-06-2022 02:09:02]27440: WAF :: fetched 2 new logs [30-06-2022 02:10:02]30107: WAF :: fetched 1 new logs [30-06-2022 02:11:02]308: WAF :: fetched 1 new logs [30-06-2022 02:12:01]3031: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656565921 [30-06-2022 02:12:01]3031: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 02:12:03]3031: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 02:12:04]3031: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-0212/20220630-021201-Yr0woUZOq0BvhfnR5BiEMQAAABM [30-06-2022 02:12:04]3031: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 02:12:04]3031: WAF :: fetched 5 new logs [30-06-2022 02:13:01]5732: WAF :: fetched 2 new logs [30-06-2022 02:14:02]8354: WAF :: fetched 5 new logs [30-06-2022 02:15:02]11069: WAF :: fetched 53 new logs [30-06-2022 02:16:01]13774: httpd.conf changed. Refreshing watchlist. [30-06-2022 02:16:01]13772: WAF :: fetched 18 new logs [30-06-2022 02:17:02]16521: WAF :: fetched 1 new logs [30-06-2022 02:18:02]19285: WAF :: fetched 2 new logs [30-06-2022 02:19:01]21953: WAF :: fetched 1 new logs [30-06-2022 02:21:02]27374: WAF :: fetched 1 new logs [30-06-2022 02:22:01]30085: WAF :: fetched 2 new logs [30-06-2022 02:26:02]8359: WAF :: fetched 1 new logs [30-06-2022 02:27:01]10977: WAF :: fetched 1 new logs [30-06-2022 02:29:02]16354: WAF :: fetched 2 new logs [30-06-2022 02:30:01]19063: WAF :: fetched 3 new logs [30-06-2022 02:31:02]21766: WAF :: fetched 4 new logs [30-06-2022 02:34:02]29698: WAF :: fetched 2 new logs [30-06-2022 02:35:01]32355: WAF :: fetched 2 new logs [30-06-2022 02:36:02]2687: WAF :: fetched 2 new logs [30-06-2022 02:37:02]5377: WAF :: fetched 1 new logs [30-06-2022 02:38:01]8019: WAF :: fetched 4 new logs [30-06-2022 02:39:02]10669: WAF :: fetched 3 new logs [30-06-2022 02:40:01]13351: WAF :: fetched 1 new logs [30-06-2022 02:41:02]16110: WAF :: fetched 1 new logs [30-06-2022 02:41:02]16110: Checking for user cron vulnerabilities [30-06-2022 02:42:02]18717: WAF :: fetched 1 new logs [30-06-2022 02:43:01]21385: WAF :: fetched 1 new logs [30-06-2022 02:44:01]24087: Checking ditributed CMS bruteforce attacks [30-06-2022 02:44:02]24087: WAF :: fetched 1 new logs [30-06-2022 02:46:02]30630: WAF :: fetched 4 new logs [30-06-2022 02:47:02]1039: WAF :: fetched 1 new logs [30-06-2022 02:48:01]3713: WAF :: fetched 3 new logs [30-06-2022 02:49:02]6385: WAF :: fetched 3 new logs [30-06-2022 02:50:02]9098: WAF :: fetched 2 new logs [30-06-2022 02:52:02]14488: WAF :: fetched 1 new logs [30-06-2022 02:53:01]17223: WAF :: fetched 4 new logs [30-06-2022 02:53:02]17219: Updated license status via CDN [30-06-2022 02:54:02]20243: WAF :: fetched 7 new logs [30-06-2022 02:55:02]23017: WAF :: fetched 3 new logs [30-06-2022 02:56:01]25852: WAF :: fetched 2 new logs [30-06-2022 02:57:02]28879: WAF :: fetched 1 new logs [30-06-2022 02:58:01]31867: WAF :: fetched 1 new logs [30-06-2022 03:00:01]5059: WAF :: fetched 1 new logs [30-06-2022 03:00:02]5059: Found and updated 32 CMS installations [30-06-2022 03:01:50]5059: Wordpress installation #26 bibokinha.idcartao.com has errors [30-06-2022 03:02:02]11251: WAF :: fetched 1 new logs [30-06-2022 03:02:48]5059: Sending CMS version vulnerability report emails to cpanel users [30-06-2022 03:02:51]5059: Checking wordpress installations for suspicious directories [30-06-2022 03:03:01]14211: WAF :: fetched 1 new logs [30-06-2022 03:04:01]17181: WAF :: fetched 5 new logs [30-06-2022 03:04:26]14249: Sending CMS version vulnerability report emails to cpanel users [30-06-2022 03:04:29]14249: Checking wordpress installations for suspicious directories [30-06-2022 03:05:02]20505: WAF :: fetched 1 new logs [30-06-2022 03:06:02]23375: WAF :: fetched 2 new logs [30-06-2022 03:09:02]31245: WAF :: fetched 1 new logs [30-06-2022 03:12:01]7163: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656569521 [30-06-2022 03:12:01]7163: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 03:12:03]7163: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 03:12:04]7163: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-0312/20220630-031201-Yr0-sfalYXkwZuRVa51rXwAAAA4 [30-06-2022 03:12:04]7163: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [30-06-2022 03:12:04]7163: WAF :: fetched 2 new logs [30-06-2022 03:13:01]9799: WAF :: fetched 1 new logs [30-06-2022 03:15:01]15249: WAF :: fetched 1 new logs [30-06-2022 03:17:01]20420: WAF :: fetched 1 new logs [30-06-2022 03:18:02]23091: WAF :: fetched 4 new logs [30-06-2022 03:19:02]25637: WAF :: fetched 1 new logs [30-06-2022 03:20:01]28358: WAF :: fetched 33 new logs [30-06-2022 03:21:02]31037: WAF :: fetched 3 new logs [30-06-2022 03:22:01]1237: WAF :: fetched 4 new logs [30-06-2022 03:25:02]9408: WAF :: fetched 2 new logs [30-06-2022 03:26:01]12020: WAF :: fetched 3 new logs [30-06-2022 03:27:02]14639: WAF :: fetched 2 new logs [30-06-2022 03:28:01]17459: WAF :: fetched 4 new logs [30-06-2022 03:30:02]21364: WAF :: fetched 1 new logs [30-06-2022 03:35:02]6153: WAF :: fetched 2 new logs [30-06-2022 03:36:02]8992: WAF :: fetched 1 new logs [30-06-2022 03:37:02]11586: WAF :: fetched 6 new logs [30-06-2022 03:38:01]14128: WAF :: fetched 2 new logs [30-06-2022 03:41:01]22743: WAF :: fetched 4 new logs [30-06-2022 03:41:01]22743: Checking for user cron vulnerabilities [30-06-2022 03:42:01]25341: WAF :: fetched 3 new logs [30-06-2022 03:43:01]27902: WAF :: fetched 1 new logs [30-06-2022 03:44:01]30475: Checking ditributed CMS bruteforce attacks [30-06-2022 03:45:01]660: WAF :: fetched 1 new logs [30-06-2022 03:46:02]3370: WAF :: fetched 1 new logs [30-06-2022 03:47:02]6020: WAF :: fetched 4 new logs [30-06-2022 03:48:01]8598: WAF :: fetched 2 new logs [30-06-2022 03:49:02]11233: WAF :: fetched 6 new logs [30-06-2022 03:50:01]13929: WAF :: fetched 35 new logs [30-06-2022 03:51:01]16571: WAF :: fetched 2 new logs [30-06-2022 03:52:01]19189: WAF :: fetched 2 new logs [30-06-2022 03:53:02]21784: WAF :: fetched 7 new logs [30-06-2022 03:54:02]24391: WAF :: fetched 2 new logs [30-06-2022 03:55:01]27044: WAF :: fetched 2 new logs [30-06-2022 03:56:01]29637: WAF :: fetched 1 new logs [30-06-2022 03:57:01]32200: WAF :: fetched 1 new logs [30-06-2022 03:58:02]2405: WAF :: fetched 3 new logs [30-06-2022 04:00:02]7433: WAF :: fetched 2 new logs [30-06-2022 04:01:01]10482: WAF :: fetched 5 new logs [30-06-2022 04:04:02]18245: WAF :: fetched 48 new logs [30-06-2022 04:05:01]20978: WAF :: fetched 183 new logs [30-06-2022 04:06:02]23936: WAF :: fetched 2 new logs [30-06-2022 04:07:01]26712: WAF :: fetched 11 new logs [30-06-2022 04:08:02]29617: WAF :: fetched 6 new logs [30-06-2022 04:09:02]32374: WAF :: fetched 38 new logs [30-06-2022 04:10:02]2658: WAF :: fetched 200 new logs [30-06-2022 04:11:01]5342: WAF :: fetched 269 new logs [30-06-2022 04:12:02]7937: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656573122 [30-06-2022 04:12:02]7937: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 04:12:04]7937: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 04:12:04]7937: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-0412/20220630-041202-Yr1MwgiG5oDEMC57yj_0agAAAAc [30-06-2022 04:12:04]7937: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 04:12:05]7937: WAF :: fetched 865 new logs [30-06-2022 04:13:01]10649: WAF :: fetched 33 new logs [30-06-2022 04:14:02]13534: WAF :: fetched 3 new logs [30-06-2022 04:15:01]16474: WAF :: fetched 23 new logs [30-06-2022 04:16:01]19129: WAF :: fetched 287 new logs [30-06-2022 04:17:01]21702: WAF :: fetched 284 new logs [30-06-2022 04:18:02]24295: WAF :: fetched 109 new logs [30-06-2022 04:19:01]26840: WAF :: fetched 1 new logs [30-06-2022 04:20:02]29461: WAF :: fetched 1 new logs [30-06-2022 04:21:01]32131: WAF :: fetched 1 new logs [30-06-2022 04:22:02]2317: WAF :: fetched 2 new logs [30-06-2022 04:24:02]7508: WAF :: fetched 3 new logs [30-06-2022 04:25:02]10098: WAF :: fetched 5 new logs [30-06-2022 04:27:02]15400: WAF :: fetched 2 new logs [30-06-2022 04:28:01]17789: WAF :: fetched 3 new logs [30-06-2022 04:30:01]23044: WAF :: fetched 3 new logs [30-06-2022 04:31:02]25753: WAF :: fetched 1 new logs [30-06-2022 04:36:01]6369: WAF :: fetched 1 new logs [30-06-2022 04:37:02]8972: WAF :: fetched 1 new logs [30-06-2022 04:39:02]14071: WAF :: fetched 1 new logs [30-06-2022 04:41:01]19348: WAF :: fetched 2 new logs [30-06-2022 04:41:01]19348: Checking for user cron vulnerabilities [30-06-2022 04:42:02]21961: WAF :: fetched 3 new logs [30-06-2022 04:43:01]24520: WAF :: fetched 2 new logs [30-06-2022 04:44:02]27093: Checking ditributed CMS bruteforce attacks [30-06-2022 04:44:02]27093: WAF :: fetched 2 new logs [30-06-2022 04:46:02]32344: WAF :: fetched 1 new logs [30-06-2022 04:48:02]5158: WAF :: fetched 1 new logs [30-06-2022 04:49:02]7706: WAF :: fetched 1 new logs [30-06-2022 04:53:02]18110: WAF :: fetched 3 new logs [30-06-2022 04:54:02]20656: WAF :: fetched 1 new logs [30-06-2022 04:55:02]23256: WAF :: fetched 4 new logs [30-06-2022 04:57:01]28466: WAF :: fetched 2 new logs [30-06-2022 04:58:02]31045: WAF :: fetched 2 new logs [30-06-2022 04:59:02]1192: WAF :: fetched 2 new logs [30-06-2022 05:01:42]6710: Starting daily scan on files updated in last 24 hrs [30-06-2022 05:02:01]9274: WAF :: fetched 1 new logs [30-06-2022 05:03:01]11871: WAF :: fetched 2 new logs [30-06-2022 05:04:02]14475: WAF :: fetched 1 new logs [30-06-2022 05:05:01]17008: WAF :: fetched 2 new logs [30-06-2022 05:06:02]19720: WAF :: fetched 2 new logs [30-06-2022 05:07:01]22235: WAF :: fetched 11 new logs [30-06-2022 05:08:01]24773: WAF :: fetched 1 new logs [30-06-2022 05:09:02]27346: WAF :: fetched 2 new logs [30-06-2022 05:10:01]29890: WAF :: fetched 3 new logs [30-06-2022 05:12:02]2708: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656576722 [30-06-2022 05:12:02]2708: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 05:12:04]2708: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 05:12:04]2708: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-0512/20220630-051202-Yr1a0mXWgZ6PlJhpIVpVLwAAAA0 [30-06-2022 05:12:04]2708: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 05:12:04]2708: WAF :: fetched 3 new logs [30-06-2022 05:13:01]5350: WAF :: fetched 3 new logs [30-06-2022 05:14:02]7921: WAF :: fetched 2 new logs [30-06-2022 05:16:02]13240: WAF :: fetched 5 new logs [30-06-2022 05:17:01]15800: WAF :: fetched 1 new logs [30-06-2022 05:18:02]18369: WAF :: fetched 13 new logs [30-06-2022 05:19:01]20910: WAF :: fetched 67 new logs [30-06-2022 05:20:02]23527: WAF :: fetched 67 new logs [30-06-2022 05:21:02]26195: WAF :: fetched 52 new logs [30-06-2022 05:22:02]28771: WAF :: fetched 56 new logs [30-06-2022 05:23:02]31318: WAF :: fetched 65 new logs [30-06-2022 05:24:01]1458: WAF :: fetched 32 new logs [30-06-2022 05:25:02]4105: WAF :: fetched 2 new logs [30-06-2022 05:26:01]6794: WAF :: fetched 6 new logs [30-06-2022 05:27:02]9390: WAF :: fetched 3 new logs [30-06-2022 05:28:02]11921: WAF :: fetched 1 new logs [30-06-2022 05:29:01]14510: WAF :: fetched 1 new logs [30-06-2022 05:30:02]17096: WAF :: fetched 8 new logs [30-06-2022 05:31:02]19829: WAF :: fetched 1 new logs [30-06-2022 05:32:01]22416: WAF :: fetched 3 new logs [30-06-2022 05:33:02]25019: WAF :: fetched 2 new logs [30-06-2022 05:34:02]27588: WAF :: fetched 3 new logs [30-06-2022 05:35:01]30171: WAF :: fetched 2 new logs [30-06-2022 05:36:01]488: WAF :: fetched 3 new logs [30-06-2022 05:37:02]3198: WAF :: fetched 5 new logs [30-06-2022 05:38:01]5767: WAF :: fetched 6 new logs [30-06-2022 05:39:02]8493: WAF :: fetched 1 new logs [30-06-2022 05:40:02]11090: WAF :: fetched 1 new logs [30-06-2022 05:41:01]13801: WAF :: fetched 15 new logs [30-06-2022 05:41:01]13801: Checking for user cron vulnerabilities [30-06-2022 05:42:02]16400: WAF :: fetched 1 new logs [30-06-2022 05:43:01]18971: WAF :: fetched 4 new logs [30-06-2022 05:44:02]21569: Checking ditributed CMS bruteforce attacks [30-06-2022 05:44:02]21569: WAF :: fetched 6 new logs [30-06-2022 05:45:02]24072: WAF :: fetched 15 new logs [30-06-2022 05:46:01]26738: WAF :: fetched 18 new logs [30-06-2022 05:47:02]29341: WAF :: fetched 11 new logs [30-06-2022 05:48:01]31871: WAF :: fetched 14 new logs [30-06-2022 05:49:02]2048: WAF :: fetched 15 new logs [30-06-2022 05:50:01]4695: WAF :: fetched 20 new logs [30-06-2022 05:51:02]7421: WAF :: fetched 25 new logs [30-06-2022 05:52:02]9955: WAF :: fetched 14 new logs [30-06-2022 05:53:01]12526: WAF :: fetched 18 new logs [30-06-2022 05:54:02]15145: WAF :: fetched 29 new logs [30-06-2022 05:55:01]17699: WAF :: fetched 19 new logs [30-06-2022 05:56:02]20389: WAF :: fetched 1 new logs [30-06-2022 05:57:02]22967: WAF :: fetched 1 new logs [30-06-2022 05:58:01]25511: WAF :: fetched 2 new logs [30-06-2022 06:00:02]30384: WAF :: fetched 1 new logs [30-06-2022 06:01:01]1108: WAF :: fetched 1 new logs [30-06-2022 06:02:02]3801: WAF :: fetched 2 new logs [30-06-2022 06:03:02]6401: WAF :: fetched 3 new logs [30-06-2022 06:05:02]11544: WAF :: fetched 3 new logs [30-06-2022 06:07:02]16795: WAF :: fetched 5 new logs [30-06-2022 06:08:01]19347: WAF :: fetched 4 new logs [30-06-2022 06:09:02]21948: WAF :: fetched 6 new logs [30-06-2022 06:10:02]24486: WAF :: fetched 2 new logs [30-06-2022 06:11:02]27185: WAF :: fetched 2 new logs [30-06-2022 06:12:01]29743: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656580321 [30-06-2022 06:12:01]29743: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 06:12:03]29743: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 06:12:03]29743: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-0612/20220630-061201-Yr1o4S_XYzKq2UYAHRKIDAAAABU [30-06-2022 06:12:03]29743: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 06:12:04]29743: WAF :: fetched 3 new logs [30-06-2022 06:14:01]2499: WAF :: fetched 2 new logs [30-06-2022 06:15:02]5148: WAF :: fetched 9 new logs [30-06-2022 06:16:02]7871: WAF :: fetched 1 new logs [30-06-2022 06:17:01]10436: WAF :: fetched 1 new logs [30-06-2022 06:18:02]13052: WAF :: fetched 3 new logs [30-06-2022 06:19:01]15616: WAF :: fetched 3 new logs [30-06-2022 06:20:01]18179: WAF :: fetched 2 new logs [30-06-2022 06:21:01]20862: WAF :: fetched 3 new logs [30-06-2022 06:24:01]28603: WAF :: fetched 10 new logs [30-06-2022 06:25:02]31185: WAF :: fetched 1 new logs [30-06-2022 06:27:02]4218: WAF :: fetched 2 new logs [30-06-2022 06:29:02]9377: WAF :: fetched 4 new logs [30-06-2022 06:30:02]11938: WAF :: fetched 6 new logs [30-06-2022 06:33:02]19745: WAF :: fetched 1 new logs [30-06-2022 06:34:01]22168: WAF :: fetched 2 new logs [30-06-2022 06:35:02]24898: WAF :: fetched 2 new logs [30-06-2022 06:36:02]27626: WAF :: fetched 2 new logs [30-06-2022 06:39:01]2934: WAF :: fetched 2 new logs [30-06-2022 06:40:02]5656: WAF :: fetched 3 new logs [30-06-2022 06:41:01]8380: WAF :: fetched 4 new logs [30-06-2022 06:41:01]8380: Checking for user cron vulnerabilities [30-06-2022 06:43:02]13658: WAF :: fetched 2 new logs [30-06-2022 06:44:01]16276: Checking ditributed CMS bruteforce attacks [30-06-2022 06:44:01]16276: WAF :: fetched 1 new logs [30-06-2022 06:45:02]18954: WAF :: fetched 6 new logs [30-06-2022 06:46:02]21745: WAF :: fetched 6 new logs [30-06-2022 06:47:02]24352: WAF :: fetched 2 new logs [30-06-2022 06:48:02]26938: WAF :: fetched 1 new logs [30-06-2022 06:49:01]29511: WAF :: fetched 1 new logs [30-06-2022 06:50:02]32149: WAF :: fetched 2 new logs [30-06-2022 06:51:02]2491: WAF :: fetched 4 new logs [30-06-2022 06:53:02]7742: WAF :: fetched 4 new logs [30-06-2022 06:54:01]10319: WAF :: fetched 7 new logs [30-06-2022 06:57:01]18159: WAF :: fetched 1 new logs [30-06-2022 07:00:02]25545: WAF :: fetched 1 new logs [30-06-2022 07:04:01]4189: WAF :: fetched 1 new logs [30-06-2022 07:06:01]9549: WAF :: fetched 1 new logs [30-06-2022 07:07:02]12163: WAF :: fetched 4 new logs [30-06-2022 07:08:02]14745: WAF :: fetched 3 new logs [30-06-2022 07:09:01]17312: WAF :: fetched 3 new logs [30-06-2022 07:10:02]19908: WAF :: fetched 1 new logs [30-06-2022 07:11:02]22602: WAF :: fetched 1 new logs [30-06-2022 07:12:01]25158: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656583921 [30-06-2022 07:12:01]25158: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 07:12:03]25158: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 07:12:03]25158: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-0712/20220630-071201-Yr128RW1M8qIjCFVAgRFQQAAAAI [30-06-2022 07:12:03]25158: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [30-06-2022 07:12:04]25158: WAF :: fetched 1 new logs [30-06-2022 07:13:01]27770: WAF :: fetched 4 new logs [30-06-2022 07:14:01]30303: WAF :: fetched 2 new logs [30-06-2022 07:16:01]3188: WAF :: fetched 2 new logs [30-06-2022 07:17:02]5858: WAF :: fetched 2 new logs [30-06-2022 07:18:01]8412: WAF :: fetched 3 new logs [30-06-2022 07:19:01]11021: WAF :: fetched 9 new logs [30-06-2022 07:20:02]13667: WAF :: fetched 3 new logs [30-06-2022 07:22:02]19008: WAF :: fetched 2 new logs [30-06-2022 07:23:01]21559: WAF :: fetched 6 new logs [30-06-2022 07:24:02]24118: WAF :: fetched 4 new logs [30-06-2022 07:25:01]26694: WAF :: fetched 2 new logs [30-06-2022 07:28:01]2199: WAF :: fetched 1 new logs [30-06-2022 07:29:02]4892: WAF :: fetched 1 new logs [30-06-2022 07:30:01]7480: WAF :: fetched 2 new logs [30-06-2022 07:31:01]10228: WAF :: fetched 3 new logs [30-06-2022 07:33:01]15462: WAF :: fetched 2 new logs [30-06-2022 07:34:02]18102: WAF :: fetched 2 new logs [30-06-2022 07:36:01]23316: WAF :: fetched 6 new logs [30-06-2022 07:37:02]25927: WAF :: fetched 1 new logs [30-06-2022 07:38:01]28498: WAF :: fetched 4 new logs [30-06-2022 07:39:02]31148: WAF :: fetched 1 new logs [30-06-2022 07:40:02]1336: WAF :: fetched 1 new logs [30-06-2022 07:41:02]4093: Checking for user cron vulnerabilities [30-06-2022 07:42:01]6718: WAF :: fetched 2 new logs [30-06-2022 07:43:02]9327: WAF :: fetched 6 new logs [30-06-2022 07:44:01]11894: Checking ditributed CMS bruteforce attacks [30-06-2022 07:44:01]11894: WAF :: fetched 5 new logs [30-06-2022 07:45:02]: Checking for definition updates [30-06-2022 07:45:02]14529: WAF :: fetched 3 new logs [30-06-2022 07:46:02]17241: WAF :: fetched 1 new logs [30-06-2022 07:49:01]24994: WAF :: fetched 1 new logs [30-06-2022 07:50:02]27618: WAF :: fetched 3 new logs [30-06-2022 07:53:02]3198: WAF :: fetched 1 new logs [30-06-2022 07:54:01]5839: WAF :: fetched 2 new logs [30-06-2022 07:55:02]8493: WAF :: fetched 1 new logs [30-06-2022 07:56:02]11195: WAF :: fetched 1 new logs [30-06-2022 07:57:01]13810: WAF :: fetched 2 new logs [30-06-2022 07:59:01]19006: WAF :: fetched 1 new logs [30-06-2022 08:01:01]24192: WAF :: fetched 1 new logs [30-06-2022 08:02:02]27148: WAF :: fetched 1 new logs [30-06-2022 08:03:02]29749: WAF :: fetched 1 new logs [30-06-2022 08:04:01]32372: WAF :: fetched 3 new logs [30-06-2022 08:05:02]2648: WAF :: fetched 4 new logs [30-06-2022 08:06:01]5418: WAF :: fetched 2 new logs [30-06-2022 08:07:02]8069: WAF :: fetched 4 new logs [30-06-2022 08:08:02]10652: WAF :: fetched 6 new logs [30-06-2022 08:09:01]13165: WAF :: fetched 7 new logs [30-06-2022 08:10:02]15903: WAF :: fetched 2 new logs [30-06-2022 08:11:01]18609: WAF :: fetched 1 new logs [30-06-2022 08:12:02]21193: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656587522 [30-06-2022 08:12:02]21193: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 08:12:04]21193: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 08:12:04]21193: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-0812/20220630-081202-Yr2FAkQvBxDAnwTWuR_jnQAAABQ [30-06-2022 08:12:04]21193: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 08:12:04]21193: WAF :: fetched 103 new logs [30-06-2022 08:14:02]26377: WAF :: fetched 2 new logs [30-06-2022 08:15:02]28984: WAF :: fetched 2 new logs [30-06-2022 08:16:01]31683: WAF :: fetched 4 new logs [30-06-2022 08:17:02]1897: WAF :: fetched 2 new logs [30-06-2022 08:18:01]4583: WAF :: fetched 2 new logs [30-06-2022 08:19:02]7216: WAF :: fetched 1 new logs [30-06-2022 08:20:02]9820: WAF :: fetched 8 new logs [30-06-2022 08:21:01]12588: WAF :: fetched 15 new logs [30-06-2022 08:22:02]15177: WAF :: fetched 20 new logs [30-06-2022 08:23:01]17650: WAF :: fetched 18 new logs [30-06-2022 08:24:02]20391: WAF :: fetched 12 new logs [30-06-2022 08:25:01]22931: WAF :: fetched 12 new logs [30-06-2022 08:26:02]25697: WAF :: fetched 21 new logs [30-06-2022 08:27:01]28342: WAF :: fetched 11 new logs [30-06-2022 08:28:02]30935: WAF :: fetched 24 new logs [30-06-2022 08:29:02]1135: WAF :: fetched 18 new logs [30-06-2022 08:30:02]3781: WAF :: fetched 16 new logs [30-06-2022 08:31:02]6598: WAF :: fetched 27 new logs [30-06-2022 08:32:01]9205: WAF :: fetched 19 new logs [30-06-2022 08:33:02]11823: WAF :: fetched 31 new logs [30-06-2022 08:34:01]14424: WAF :: fetched 40 new logs [30-06-2022 08:35:02]17043: WAF :: fetched 45 new logs [30-06-2022 08:36:02]19777: WAF :: fetched 39 new logs [30-06-2022 08:37:01]22370: WAF :: fetched 38 new logs [30-06-2022 08:38:02]24984: WAF :: fetched 37 new logs [30-06-2022 08:39:01]27593: WAF :: fetched 47 new logs [30-06-2022 08:40:02]30255: WAF :: fetched 33 new logs [30-06-2022 08:41:02]592: WAF :: fetched 40 new logs [30-06-2022 08:41:02]592: Checking for user cron vulnerabilities [30-06-2022 08:42:01]3326: WAF :: fetched 27 new logs [30-06-2022 08:43:02]6060: WAF :: fetched 34 new logs [30-06-2022 08:44:01]8638: Checking ditributed CMS bruteforce attacks [30-06-2022 08:44:02]8638: WAF :: fetched 38 new logs [30-06-2022 08:45:01]11250: WAF :: fetched 48 new logs [30-06-2022 08:46:02]14013: WAF :: fetched 29 new logs [30-06-2022 08:47:01]16596: WAF :: fetched 37 new logs [30-06-2022 08:48:02]19228: WAF :: fetched 46 new logs [30-06-2022 08:49:02]21809: WAF :: fetched 41 new logs [30-06-2022 08:50:01]24418: WAF :: fetched 31 new logs [30-06-2022 08:51:02]27198: WAF :: fetched 34 new logs [30-06-2022 08:52:01]29816: WAF :: fetched 36 new logs [30-06-2022 08:53:01]32422: WAF :: fetched 35 new logs [30-06-2022 08:54:02]2698: WAF :: fetched 39 new logs [30-06-2022 08:55:02]5425: WAF :: fetched 35 new logs [30-06-2022 08:56:01]8176: WAF :: fetched 41 new logs [30-06-2022 08:57:02]10812: WAF :: fetched 76 new logs [30-06-2022 08:58:01]13421: WAF :: fetched 47 new logs [30-06-2022 08:59:01]16021: WAF :: fetched 66 new logs [30-06-2022 09:00:02]18429: WAF :: fetched 59 new logs [30-06-2022 09:01:02]21710: WAF :: fetched 49 new logs [30-06-2022 09:02:01]24444: WAF :: fetched 45 new logs [30-06-2022 09:03:02]27198: WAF :: fetched 71 new logs [30-06-2022 09:04:01]29844: WAF :: fetched 85 new logs [30-06-2022 09:05:01]32493: WAF :: fetched 96 new logs [30-06-2022 09:06:02]2936: WAF :: fetched 120 new logs [30-06-2022 09:07:02]5732: WAF :: fetched 121 new logs [30-06-2022 09:08:02]8470: WAF :: fetched 153 new logs [30-06-2022 09:09:01]11244: WAF :: fetched 168 new logs [30-06-2022 09:10:02]14034: WAF :: fetched 170 new logs [30-06-2022 09:11:02]16807: WAF :: fetched 180 new logs [30-06-2022 09:12:01]19566: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656591121 [30-06-2022 09:12:01]19566: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 09:12:03]19566: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 09:12:04]19566: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-0912/20220630-091201-Yr2TEbXdcPqhs4zmRAF84wAAAAE [30-06-2022 09:12:04]19566: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 09:12:04]19566: WAF :: fetched 209 new logs [30-06-2022 09:13:02]22330: httpd.conf changed. Refreshing watchlist. [30-06-2022 09:13:02]22331: WAF :: fetched 171 new logs [30-06-2022 09:14:02]25043: WAF :: fetched 178 new logs [30-06-2022 09:15:02]27732: WAF :: fetched 221 new logs [30-06-2022 09:16:02]30402: WAF :: fetched 145 new logs [30-06-2022 09:17:01]657: WAF :: fetched 175 new logs [30-06-2022 09:18:02]3451: WAF :: fetched 237 new logs [30-06-2022 09:19:02]6203: httpd.conf changed. Refreshing watchlist. [30-06-2022 09:19:02]6205: WAF :: fetched 232 new logs [30-06-2022 09:20:01]8880: httpd.conf changed. Refreshing watchlist. [30-06-2022 09:20:01]8881: WAF :: fetched 247 new logs [30-06-2022 09:21:02]11627: WAF :: fetched 285 new logs [30-06-2022 09:22:02]14397: WAF :: fetched 274 new logs [30-06-2022 09:23:01]17109: WAF :: fetched 243 new logs [30-06-2022 09:24:02]19754: WAF :: fetched 281 new logs [30-06-2022 09:25:02]22379: WAF :: fetched 245 new logs [30-06-2022 09:26:02]25040: WAF :: fetched 353 new logs [30-06-2022 09:27:02]27787: WAF :: fetched 384 new logs [30-06-2022 09:28:02]30457: WAF :: fetched 282 new logs [30-06-2022 09:29:02]610: WAF :: fetched 166 new logs [30-06-2022 09:30:01]3347: WAF :: fetched 82 new logs [30-06-2022 09:31:02]6117: WAF :: fetched 10 new logs [30-06-2022 09:33:02]11602: WAF :: fetched 1 new logs [30-06-2022 09:34:02]14263: WAF :: fetched 7 new logs [30-06-2022 09:35:01]16953: WAF :: fetched 1 new logs [30-06-2022 09:36:02]19760: WAF :: fetched 2 new logs [30-06-2022 09:37:01]22577: WAF :: fetched 14 new logs [30-06-2022 09:38:02]25327: WAF :: fetched 32 new logs [30-06-2022 09:41:01]918: Checking for user cron vulnerabilities [30-06-2022 09:42:01]3645: WAF :: fetched 1 new logs [30-06-2022 09:43:02]6397: WAF :: fetched 2 new logs [30-06-2022 09:44:01]9091: Checking ditributed CMS bruteforce attacks [30-06-2022 09:44:01]9091: WAF :: fetched 1 new logs [30-06-2022 09:45:02]11789: WAF :: fetched 2 new logs [30-06-2022 09:46:02]14460: WAF :: fetched 1 new logs [30-06-2022 09:52:01]30643: WAF :: fetched 4 new logs [30-06-2022 09:53:02]918: WAF :: fetched 1 new logs [30-06-2022 09:54:01]3576: WAF :: fetched 5 new logs [30-06-2022 09:55:02]6258: WAF :: fetched 1 new logs [30-06-2022 09:56:01]8993: WAF :: fetched 3 new logs [30-06-2022 09:57:02]11751: WAF :: fetched 1 new logs [30-06-2022 09:58:01]14451: WAF :: fetched 3 new logs [30-06-2022 10:00:02]19509: WAF :: fetched 1 new logs [30-06-2022 10:01:01]22696: WAF :: fetched 1 new logs [30-06-2022 10:02:02]25457: WAF :: fetched 2 new logs [30-06-2022 10:03:01]27775: WAF :: fetched 1 new logs [30-06-2022 10:06:02]3911: WAF :: fetched 2 new logs [30-06-2022 10:08:02]9329: WAF :: fetched 2 new logs [30-06-2022 10:09:01]11933: WAF :: fetched 1 new logs [30-06-2022 10:10:02]14577: WAF :: fetched 2 new logs [30-06-2022 10:11:02]17282: WAF :: fetched 2 new logs [30-06-2022 10:12:01]20070: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656594721 [30-06-2022 10:12:01]20070: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 10:12:03]20070: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 10:12:03]20070: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-1012/20220630-101201-Yr2hIcM0SZNy-v8-cygeywAAACQ [30-06-2022 10:12:03]20070: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 10:12:04]20070: WAF :: fetched 3 new logs [30-06-2022 10:14:01]25364: WAF :: fetched 1 new logs [30-06-2022 10:15:02]28044: WAF :: fetched 1 new logs [30-06-2022 10:16:02]30722: WAF :: fetched 1 new logs [30-06-2022 10:18:02]3636: WAF :: fetched 3 new logs [30-06-2022 10:19:02]6270: WAF :: fetched 2 new logs [30-06-2022 10:20:01]8934: WAF :: fetched 1 new logs [30-06-2022 10:23:02]17092: WAF :: fetched 1 new logs [30-06-2022 10:24:01]19766: WAF :: fetched 2 new logs [30-06-2022 10:27:02]27859: WAF :: fetched 1 new logs [30-06-2022 10:28:02]30488: WAF :: fetched 4 new logs [30-06-2022 10:30:02]3509: WAF :: fetched 3 new logs [30-06-2022 10:32:01]9155: WAF :: fetched 1 new logs [30-06-2022 10:33:01]11804: WAF :: fetched 4 new logs [30-06-2022 10:34:02]14413: WAF :: fetched 1 new logs [30-06-2022 10:36:02]19776: WAF :: fetched 2 new logs [30-06-2022 10:38:01]25117: WAF :: fetched 24 new logs [30-06-2022 10:39:02]27742: WAF :: fetched 1 new logs [30-06-2022 10:40:01]30371: WAF :: fetched 11 new logs [30-06-2022 10:41:01]613: WAF :: fetched 19 new logs [30-06-2022 10:41:01]613: Checking for user cron vulnerabilities [30-06-2022 10:42:02]3398: WAF :: fetched 8 new logs [30-06-2022 10:43:01]6044: WAF :: fetched 2 new logs [30-06-2022 10:44:02]8732: Checking ditributed CMS bruteforce attacks [30-06-2022 10:44:02]8732: WAF :: fetched 9 new logs [30-06-2022 10:45:02]11375: WAF :: fetched 4 new logs [30-06-2022 10:46:01]14064: WAF :: fetched 1 new logs [30-06-2022 10:47:02]16769: WAF :: fetched 5 new logs [30-06-2022 10:48:01]19372: WAF :: fetched 7 new logs [30-06-2022 10:49:02]22048: WAF :: fetched 2 new logs [30-06-2022 10:50:02]24731: WAF :: fetched 2 new logs [30-06-2022 10:51:01]27427: WAF :: fetched 1 new logs [30-06-2022 10:52:02]30138: WAF :: fetched 1 new logs [30-06-2022 10:54:01]2987: WAF :: fetched 5 new logs [30-06-2022 10:55:02]5783: WAF :: fetched 1 new logs [30-06-2022 10:56:01]8503: WAF :: fetched 1 new logs [30-06-2022 10:57:02]11353: WAF :: fetched 3 new logs [30-06-2022 10:58:02]14034: WAF :: fetched 3 new logs [30-06-2022 10:59:02]16650: WAF :: fetched 1 new logs [30-06-2022 11:00:02]19032: WAF :: fetched 2 new logs [30-06-2022 11:01:02]22146: WAF :: fetched 4 new logs [30-06-2022 11:02:01]24902: WAF :: fetched 2 new logs [30-06-2022 11:03:02]27559: WAF :: fetched 3 new logs [30-06-2022 11:04:02]30197: WAF :: fetched 1 new logs [30-06-2022 11:06:02]3176: WAF :: fetched 2 new logs [30-06-2022 11:07:54]6093: Performed RBL check for 23.111.136.34. [30-06-2022 11:08:02]8564: WAF :: fetched 3 new logs [30-06-2022 11:09:02]11220: WAF :: fetched 2 new logs [30-06-2022 11:10:01]13868: WAF :: fetched 1 new logs [30-06-2022 11:11:01]16625: WAF :: fetched 2 new logs [30-06-2022 11:12:01]19359: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656598321 [30-06-2022 11:12:01]19359: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 11:12:03]19359: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 11:12:04]19359: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-1112/20220630-111201-Yr2vMe21WjDloL1tcf9L2wAAAAE [30-06-2022 11:12:04]19359: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 11:12:04]19359: WAF :: fetched 1 new logs [30-06-2022 11:14:02]24619: WAF :: fetched 2 new logs [30-06-2022 11:16:01]30056: WAF :: fetched 4 new logs [30-06-2022 11:17:02]313: WAF :: fetched 4 new logs [30-06-2022 11:18:02]3046: WAF :: fetched 8 new logs [30-06-2022 11:19:01]5709: WAF :: fetched 1 new logs [30-06-2022 11:20:02]8478: WAF :: fetched 3 new logs [30-06-2022 11:21:02]11234: WAF :: fetched 3 new logs [30-06-2022 11:22:01]14045: WAF :: fetched 4 new logs [30-06-2022 11:23:01]16733: WAF :: fetched 4 new logs [30-06-2022 11:24:02]19353: WAF :: fetched 2 new logs [30-06-2022 11:25:01]22098: WAF :: fetched 1 new logs [30-06-2022 11:26:02]24915: WAF :: fetched 2 new logs [30-06-2022 11:27:01]27607: WAF :: fetched 3 new logs [30-06-2022 11:28:02]30369: WAF :: fetched 3 new logs [30-06-2022 11:29:02]616: WAF :: fetched 4 new logs [30-06-2022 11:30:02]3329: WAF :: fetched 2 new logs [30-06-2022 11:31:01]6212: WAF :: fetched 3 new logs [30-06-2022 11:32:02]9031: WAF :: fetched 29 new logs [30-06-2022 11:33:02]11723: WAF :: fetched 4 new logs [30-06-2022 11:34:02]14358: WAF :: fetched 11 new logs [30-06-2022 11:35:01]17023: WAF :: fetched 4 new logs [30-06-2022 11:36:02]19872: WAF :: fetched 38 new logs [30-06-2022 11:37:01]22677: WAF :: fetched 36 new logs [30-06-2022 11:38:02]25415: WAF :: fetched 28 new logs [30-06-2022 11:39:02]28125: WAF :: fetched 48 new logs [30-06-2022 11:40:02]30778: WAF :: fetched 13 new logs [30-06-2022 11:41:01]1189: WAF :: fetched 2 new logs [30-06-2022 11:41:01]1189: Checking for user cron vulnerabilities [30-06-2022 11:42:02]3992: WAF :: fetched 1 new logs [30-06-2022 11:43:02]6672: WAF :: fetched 6 new logs [30-06-2022 11:44:01]9348: Checking ditributed CMS bruteforce attacks [30-06-2022 11:44:01]9348: WAF :: fetched 1 new logs [30-06-2022 11:45:02]11999: WAF :: fetched 1 new logs [30-06-2022 11:46:02]14674: WAF :: fetched 4 new logs [30-06-2022 11:47:01]17403: WAF :: fetched 2 new logs [30-06-2022 11:48:02]20146: WAF :: fetched 1 new logs [30-06-2022 11:49:01]22750: WAF :: fetched 2 new logs [30-06-2022 11:50:02]25411: WAF :: fetched 2 new logs [30-06-2022 11:51:01]28258: WAF :: fetched 5 new logs [30-06-2022 11:53:01]1261: WAF :: fetched 3 new logs [30-06-2022 11:54:02]4007: WAF :: fetched 4 new logs [30-06-2022 11:55:02]6708: WAF :: fetched 2 new logs [30-06-2022 11:58:01]15031: WAF :: fetched 3 new logs [30-06-2022 11:59:02]17679: WAF :: fetched 6 new logs [30-06-2022 12:00:02]20083: WAF :: fetched 1 new logs [30-06-2022 12:01:01]23235: WAF :: fetched 2 new logs [30-06-2022 12:02:02]26041: WAF :: fetched 1 new logs [30-06-2022 12:04:01]31362: WAF :: fetched 1 new logs [30-06-2022 12:07:01]7303: WAF :: fetched 5 new logs [30-06-2022 12:09:02]12567: WAF :: fetched 4 new logs [30-06-2022 12:11:01]18015: WAF :: fetched 5 new logs [30-06-2022 12:12:01]20730: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656601921 [30-06-2022 12:12:03]20730: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 12:12:05]20730: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 12:12:05]20730: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-1212/20220630-121203-Yr29QwyjMYjWo1APBj_pOAAAABk [30-06-2022 12:12:05]20730: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 12:12:06]20730: WAF :: fetched 1 new logs [30-06-2022 12:13:02]23422: WAF :: fetched 1 new logs [30-06-2022 12:14:01]26415: WAF :: fetched 6 new logs [30-06-2022 12:15:02]29574: WAF :: fetched 2 new logs [30-06-2022 12:17:01]2659: WAF :: fetched 3 new logs [30-06-2022 12:18:01]5366: WAF :: fetched 3 new logs [30-06-2022 12:24:01]21547: WAF :: fetched 2 new logs [30-06-2022 12:25:01]24131: WAF :: fetched 3 new logs [30-06-2022 12:26:02]26953: WAF :: fetched 3 new logs [30-06-2022 12:27:01]29620: WAF :: fetched 2 new logs [30-06-2022 12:28:02]32326: WAF :: fetched 7 new logs [30-06-2022 12:29:02]2545: WAF :: fetched 6 new logs [30-06-2022 12:30:01]5287: WAF :: fetched 1 new logs [30-06-2022 12:31:01]8022: WAF :: fetched 1 new logs [30-06-2022 12:33:01]13395: WAF :: fetched 3 new logs [30-06-2022 12:34:02]16098: WAF :: fetched 1 new logs [30-06-2022 12:36:02]21436: WAF :: fetched 1 new logs [30-06-2022 12:37:02]24159: WAF :: fetched 4 new logs [30-06-2022 12:38:02]26850: WAF :: fetched 1 new logs [30-06-2022 12:39:01]29457: WAF :: fetched 4 new logs [30-06-2022 12:41:02]2524: Checking for user cron vulnerabilities [30-06-2022 12:42:01]5383: WAF :: fetched 3 new logs [30-06-2022 12:43:02]8046: WAF :: fetched 2 new logs [30-06-2022 12:44:01]10638: Checking ditributed CMS bruteforce attacks [30-06-2022 12:44:02]10638: WAF :: fetched 3 new logs [30-06-2022 12:45:01]: Checking for software updates [30-06-2022 12:45:01]13341: WAF :: fetched 10 new logs [30-06-2022 12:47:02]18776: WAF :: fetched 5 new logs [30-06-2022 12:48:01]21437: WAF :: fetched 5 new logs [30-06-2022 12:49:02]24132: WAF :: fetched 2 new logs [30-06-2022 12:50:02]26732: WAF :: fetched 1 new logs [30-06-2022 12:51:01]29433: WAF :: fetched 8 new logs [30-06-2022 12:52:02]32180: WAF :: fetched 4 new logs [30-06-2022 12:53:01]2395: WAF :: fetched 5 new logs [30-06-2022 12:54:02]5094: WAF :: fetched 3 new logs [30-06-2022 12:56:01]10409: WAF :: fetched 4 new logs [30-06-2022 12:57:01]13190: WAF :: fetched 8 new logs [30-06-2022 12:58:01]15852: WAF :: fetched 1 new logs [30-06-2022 12:59:02]18484: WAF :: fetched 1 new logs [30-06-2022 13:00:02]20847: WAF :: fetched 1 new logs [30-06-2022 13:01:01]23980: WAF :: fetched 2 new logs [30-06-2022 13:02:02]26754: WAF :: fetched 3 new logs [30-06-2022 13:03:01]29219: WAF :: fetched 2 new logs [30-06-2022 13:06:02]5098: WAF :: fetched 1 new logs [30-06-2022 13:09:02]13148: WAF :: fetched 4 new logs [30-06-2022 13:10:01]15793: WAF :: fetched 8 new logs [30-06-2022 13:11:02]18506: WAF :: fetched 3 new logs [30-06-2022 13:12:02]21202: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656605522 [30-06-2022 13:12:02]21202: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 13:12:04]21202: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 13:12:04]21202: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-1312/20220630-131202-Yr3LUrk3yrpUlHrVnETIgQAAAAA [30-06-2022 13:12:04]21202: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 13:12:04]21202: WAF :: fetched 1 new logs [30-06-2022 13:13:01]23820: WAF :: fetched 4 new logs [30-06-2022 13:14:01]26452: WAF :: fetched 7 new logs [30-06-2022 13:15:02]29112: WAF :: fetched 2 new logs [30-06-2022 13:16:01]31839: WAF :: fetched 4 new logs [30-06-2022 13:17:02]2205: WAF :: fetched 1 new logs [30-06-2022 13:18:02]4914: WAF :: fetched 2 new logs [30-06-2022 13:19:01]7586: WAF :: fetched 4 new logs [30-06-2022 13:20:01]10201: WAF :: fetched 4 new logs [30-06-2022 13:23:02]18295: WAF :: fetched 1 new logs [30-06-2022 13:24:01]20955: WAF :: fetched 1 new logs [30-06-2022 13:26:02]26255: WAF :: fetched 3 new logs [30-06-2022 13:27:01]28967: WAF :: fetched 3 new logs [30-06-2022 13:28:02]31594: WAF :: fetched 1 new logs [30-06-2022 13:29:02]1846: WAF :: fetched 3 new logs [30-06-2022 13:30:02]4631: WAF :: fetched 3 new logs [30-06-2022 13:31:01]7382: WAF :: fetched 5 new logs [30-06-2022 13:32:02]10119: WAF :: fetched 3 new logs [30-06-2022 13:33:01]12523: WAF :: fetched 5 new logs [30-06-2022 13:34:02]15362: WAF :: fetched 7 new logs [30-06-2022 13:35:01]17988: WAF :: fetched 2 new logs [30-06-2022 13:36:02]20761: WAF :: fetched 14 new logs [30-06-2022 13:37:02]23485: WAF :: fetched 13 new logs [30-06-2022 13:38:01]26184: WAF :: fetched 10 new logs [30-06-2022 13:39:01]28937: WAF :: fetched 16 new logs [30-06-2022 13:40:02]31631: WAF :: fetched 18 new logs [30-06-2022 13:41:01]1918: WAF :: fetched 23 new logs [30-06-2022 13:41:01]1918: Checking for user cron vulnerabilities [30-06-2022 13:42:02]4749: WAF :: fetched 18 new logs [30-06-2022 13:43:02]7387: WAF :: fetched 18 new logs [30-06-2022 13:44:01]10036: Checking ditributed CMS bruteforce attacks [30-06-2022 13:44:01]10036: WAF :: fetched 20 new logs [30-06-2022 13:45:01]: Checking for definition updates [30-06-2022 13:45:02]12679: WAF :: fetched 36 new logs [30-06-2022 13:46:01]15409: WAF :: fetched 29 new logs [30-06-2022 13:47:02]18154: WAF :: fetched 3 new logs [30-06-2022 13:48:02]20872: WAF :: fetched 2 new logs [30-06-2022 13:49:02]23566: httpd.conf changed. Refreshing watchlist. [30-06-2022 13:49:02]23567: WAF :: fetched 8 new logs [30-06-2022 13:50:01]26284: WAF :: fetched 2 new logs [30-06-2022 13:51:01]29035: WAF :: fetched 2 new logs [30-06-2022 13:52:01]31795: WAF :: fetched 3 new logs [30-06-2022 13:53:02]2065: WAF :: fetched 1 new logs [30-06-2022 13:55:02]7432: WAF :: fetched 4 new logs [30-06-2022 13:56:01]10075: WAF :: fetched 1 new logs [30-06-2022 13:57:01]12740: WAF :: fetched 6 new logs [30-06-2022 13:58:02]15492: WAF :: fetched 2 new logs [30-06-2022 13:59:02]18069: WAF :: fetched 1 new logs [30-06-2022 14:03:02]29119: WAF :: fetched 4 new logs [30-06-2022 14:04:01]31818: WAF :: fetched 3 new logs [30-06-2022 14:05:02]2134: WAF :: fetched 1 new logs [30-06-2022 14:07:02]7762: WAF :: fetched 2 new logs [30-06-2022 14:08:01]10363: WAF :: fetched 2 new logs [30-06-2022 14:09:02]13081: WAF :: fetched 4 new logs [30-06-2022 14:10:02]15707: WAF :: fetched 7 new logs [30-06-2022 14:11:01]18427: WAF :: fetched 1 new logs [30-06-2022 14:12:02]21166: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656609122 [30-06-2022 14:12:02]21166: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 14:12:04]21166: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 14:12:04]21166: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-1412/20220630-141202-Yr3ZYquSarpD_Z4KIvV74gAAADY [30-06-2022 14:12:04]21166: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 14:12:04]21166: WAF :: fetched 3 new logs [30-06-2022 14:13:02]23893: WAF :: fetched 1 new logs [30-06-2022 14:14:01]26488: WAF :: fetched 2 new logs [30-06-2022 14:15:02]29191: WAF :: fetched 4 new logs [30-06-2022 14:16:01]31898: WAF :: fetched 1 new logs [30-06-2022 14:17:02]2213: WAF :: fetched 4 new logs [30-06-2022 14:18:02]5009: WAF :: fetched 3 new logs [30-06-2022 14:19:02]7602: WAF :: fetched 2 new logs [30-06-2022 14:20:01]10334: httpd.conf changed. Refreshing watchlist. [30-06-2022 14:20:01]10333: WAF :: fetched 1 new logs [30-06-2022 14:21:02]13145: WAF :: fetched 5 new logs [30-06-2022 14:23:01]18501: WAF :: fetched 1 new logs [30-06-2022 14:24:01]21327: httpd.conf changed. Refreshing watchlist. [30-06-2022 14:25:02]24073: WAF :: fetched 10 new logs [30-06-2022 14:27:02]29580: WAF :: fetched 1 new logs [30-06-2022 14:28:02]32294: WAF :: fetched 1 new logs [30-06-2022 14:29:01]2545: WAF :: fetched 1 new logs [30-06-2022 14:30:02]5400: WAF :: fetched 4 new logs [30-06-2022 14:31:02]8121: WAF :: fetched 4 new logs [30-06-2022 14:32:02]10869: WAF :: fetched 2 new logs [30-06-2022 14:34:01]16273: WAF :: fetched 1 new logs [30-06-2022 14:36:02]21596: WAF :: fetched 2 new logs [30-06-2022 14:38:01]27016: WAF :: fetched 3 new logs [30-06-2022 14:39:02]29698: WAF :: fetched 14 new logs [30-06-2022 14:40:01]32293: WAF :: fetched 19 new logs [30-06-2022 14:41:02]2722: WAF :: fetched 24 new logs [30-06-2022 14:41:02]2722: Checking for user cron vulnerabilities [30-06-2022 14:42:02]5439: WAF :: fetched 20 new logs [30-06-2022 14:43:01]8178: WAF :: fetched 18 new logs [30-06-2022 14:44:02]10788: Checking ditributed CMS bruteforce attacks [30-06-2022 14:44:02]10788: WAF :: fetched 19 new logs [30-06-2022 14:45:02]13376: WAF :: fetched 15 new logs [30-06-2022 14:46:01]16109: WAF :: fetched 20 new logs [30-06-2022 14:47:01]18787: WAF :: fetched 23 new logs [30-06-2022 14:48:02]21539: WAF :: fetched 22 new logs [30-06-2022 14:49:01]24207: WAF :: fetched 10 new logs [30-06-2022 14:50:02]27010: WAF :: fetched 8 new logs [30-06-2022 14:52:01]32344: WAF :: fetched 5 new logs [30-06-2022 14:53:02]2691: WAF :: fetched 2 new logs [30-06-2022 14:53:02]2693: Updated license status via CDN [30-06-2022 14:54:01]5399: WAF :: fetched 1 new logs [30-06-2022 14:56:02]10780: WAF :: fetched 1 new logs [30-06-2022 14:57:01]13492: WAF :: fetched 4 new logs [30-06-2022 15:00:02]21265: WAF :: fetched 1 new logs [30-06-2022 15:01:01]24459: Reseting cPGuard inotify settings [30-06-2022 15:01:01]24451: WAF :: fetched 2 new logs [30-06-2022 15:02:02]27137: WAF :: fetched 60 new logs [30-06-2022 15:03:01]29881: WAF :: fetched 1 new logs [30-06-2022 15:04:02]32572: WAF :: fetched 6 new logs [30-06-2022 15:07:01]8339: WAF :: fetched 1 new logs [30-06-2022 15:08:02]11099: WAF :: fetched 100 new logs [30-06-2022 15:09:02]13802: WAF :: fetched 1 new logs [30-06-2022 15:10:01]16490: WAF :: fetched 1 new logs [30-06-2022 15:11:02]19299: WAF :: fetched 1 new logs [30-06-2022 15:12:01]21957: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656612721 [30-06-2022 15:12:01]21957: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 15:12:03]21957: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 15:12:04]21957: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-1512/20220630-151201-Yr3ncRSC_r1lOwpCFix6XgAAACQ [30-06-2022 15:12:04]21957: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 15:12:04]21957: WAF :: fetched 1 new logs [30-06-2022 15:13:02]24716: WAF :: fetched 4 new logs [30-06-2022 15:15:02]30034: WAF :: fetched 1 new logs [30-06-2022 15:17:01]3041: WAF :: fetched 1 new logs [30-06-2022 15:18:02]5982: WAF :: fetched 3 new logs [30-06-2022 15:20:02]11419: WAF :: fetched 3 new logs [30-06-2022 15:21:02]14197: WAF :: fetched 3 new logs [30-06-2022 15:22:01]16889: WAF :: fetched 2 new logs [30-06-2022 15:23:02]19733: WAF :: fetched 8 new logs [30-06-2022 15:24:01]22431: WAF :: fetched 3 new logs [30-06-2022 15:25:01]25160: WAF :: fetched 2 new logs [30-06-2022 15:26:02]27912: WAF :: fetched 3 new logs [30-06-2022 15:27:01]30586: WAF :: fetched 3 new logs [30-06-2022 15:28:02]1010: WAF :: fetched 4 new logs [30-06-2022 15:30:01]6470: WAF :: fetched 3 new logs [30-06-2022 15:34:02]17351: WAF :: fetched 1 new logs [30-06-2022 15:35:01]20067: WAF :: fetched 1 new logs [30-06-2022 15:36:02]22933: WAF :: fetched 3 new logs [30-06-2022 15:37:01]25615: WAF :: fetched 7 new logs [30-06-2022 15:38:02]28499: WAF :: fetched 4 new logs [30-06-2022 15:39:02]31147: WAF :: fetched 1 new logs [30-06-2022 15:41:02]4448: WAF :: fetched 2 new logs [30-06-2022 15:41:02]4448: Checking for user cron vulnerabilities [30-06-2022 15:42:01]7130: WAF :: fetched 4 new logs [30-06-2022 15:43:02]9949: WAF :: fetched 3 new logs [30-06-2022 15:44:01]12686: Checking ditributed CMS bruteforce attacks [30-06-2022 15:44:02]12686: WAF :: fetched 1 new logs [30-06-2022 15:45:01]15390: WAF :: fetched 3 new logs [30-06-2022 15:46:02]18225: WAF :: fetched 4 new logs [30-06-2022 15:47:01]20786: WAF :: fetched 3 new logs [30-06-2022 15:48:02]23816: WAF :: fetched 1 new logs [30-06-2022 15:49:01]26542: WAF :: fetched 2 new logs [30-06-2022 15:50:01]29287: WAF :: fetched 2 new logs [30-06-2022 15:52:01]2354: WAF :: fetched 3 new logs [30-06-2022 15:54:02]7934: WAF :: fetched 1 new logs [30-06-2022 15:55:01]10649: WAF :: fetched 3 new logs [30-06-2022 15:56:01]13395: WAF :: fetched 1 new logs [30-06-2022 15:57:02]16091: WAF :: fetched 1 new logs [30-06-2022 15:58:01]18875: WAF :: fetched 3 new logs [30-06-2022 16:00:02]24078: WAF :: fetched 3 new logs [30-06-2022 16:01:01]27268: WAF :: fetched 1 new logs [30-06-2022 16:02:02]30136: WAF :: fetched 2 new logs [30-06-2022 16:03:02]514: WAF :: fetched 4 new logs [30-06-2022 16:04:02]3403: WAF :: fetched 1 new logs [30-06-2022 16:05:01]6271: WAF :: fetched 3 new logs [30-06-2022 16:06:01]9107: WAF :: fetched 17 new logs [30-06-2022 16:07:02]11930: WAF :: fetched 18 new logs [30-06-2022 16:08:01]14721: WAF :: fetched 20 new logs [30-06-2022 16:09:02]17513: WAF :: fetched 23 new logs [30-06-2022 16:10:02]20243: WAF :: fetched 18 new logs [30-06-2022 16:11:01]23075: WAF :: fetched 19 new logs [30-06-2022 16:12:02]25939: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656616322 [30-06-2022 16:12:02]25939: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 16:12:04]25939: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 16:12:04]25939: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-1612/20220630-161202-Yr31gowOcDCwRMFcHwQ1pwAAABg [30-06-2022 16:12:04]25939: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 16:12:04]25939: WAF :: fetched 20 new logs [30-06-2022 16:13:01]28822: WAF :: fetched 19 new logs [30-06-2022 16:14:02]31591: WAF :: fetched 16 new logs [30-06-2022 16:15:02]1953: WAF :: fetched 16 new logs [30-06-2022 16:16:01]4876: WAF :: fetched 4 new logs [30-06-2022 16:19:02]13342: WAF :: fetched 3 new logs [30-06-2022 16:20:02]16073: WAF :: fetched 2 new logs [30-06-2022 16:21:01]18894: WAF :: fetched 3 new logs [30-06-2022 16:22:02]21639: WAF :: fetched 1 new logs [30-06-2022 16:23:02]24473: WAF :: fetched 8 new logs [30-06-2022 16:24:01]27215: WAF :: fetched 11 new logs [30-06-2022 16:26:01]32718: WAF :: fetched 3 new logs [30-06-2022 16:27:02]3078: WAF :: fetched 12 new logs [30-06-2022 16:28:01]5929: WAF :: fetched 1 new logs [30-06-2022 16:29:02]8673: WAF :: fetched 2 new logs [30-06-2022 16:30:02]11455: WAF :: fetched 3 new logs [30-06-2022 16:31:01]14312: WAF :: fetched 32 new logs [30-06-2022 16:32:02]17137: WAF :: fetched 3 new logs [30-06-2022 16:35:01]25448: WAF :: fetched 4 new logs [30-06-2022 16:36:01]28262: WAF :: fetched 2 new logs [30-06-2022 16:37:02]30953: WAF :: fetched 2 new logs [30-06-2022 16:38:01]1412: WAF :: fetched 3 new logs [30-06-2022 16:39:02]4196: WAF :: fetched 2 new logs [30-06-2022 16:41:01]9728: Checking for user cron vulnerabilities [30-06-2022 16:44:02]18049: Checking ditributed CMS bruteforce attacks [30-06-2022 16:44:02]18049: WAF :: fetched 4 new logs [30-06-2022 16:45:02]20797: WAF :: fetched 1 new logs [30-06-2022 16:47:02]26278: WAF :: fetched 16 new logs [30-06-2022 16:48:01]29130: WAF :: fetched 1 new logs [30-06-2022 16:49:02]31878: WAF :: fetched 7 new logs [30-06-2022 16:50:01]2267: WAF :: fetched 1 new logs [30-06-2022 16:51:02]5201: WAF :: fetched 5 new logs [30-06-2022 16:53:01]10759: WAF :: fetched 2 new logs [30-06-2022 16:57:02]21817: httpd.conf changed. Refreshing watchlist. [30-06-2022 16:59:02]27552: WAF :: fetched 5 new logs [30-06-2022 17:01:01]802: httpd.conf changed. Refreshing watchlist. [30-06-2022 17:01:01]799: WAF :: fetched 3 new logs [30-06-2022 17:02:02]3809: WAF :: fetched 11 new logs [30-06-2022 17:03:02]6650: WAF :: fetched 2 new logs [30-06-2022 17:04:01]9316: WAF :: fetched 2 new logs [30-06-2022 17:05:02]12171: WAF :: fetched 13 new logs [30-06-2022 17:06:02]14978: WAF :: fetched 1 new logs [30-06-2022 17:07:01]17697: WAF :: fetched 2 new logs [30-06-2022 17:08:01]20628: WAF :: fetched 1 new logs [30-06-2022 17:10:01]26197: WAF :: fetched 4 new logs [30-06-2022 17:12:02]31875: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656619922 [30-06-2022 17:12:02]31875: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 17:12:04]31875: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 17:12:04]31875: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-1712/20220630-171202-Yr4DklpDAlnfKtcx9c6J9QAAABI [30-06-2022 17:12:04]31875: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 17:12:04]31875: WAF :: fetched 1 new logs [30-06-2022 17:13:01]2327: WAF :: fetched 1 new logs [30-06-2022 17:14:02]5266: WAF :: fetched 2 new logs [30-06-2022 17:15:02]7987: WAF :: fetched 3 new logs [30-06-2022 17:16:02]10783: WAF :: fetched 4 new logs [30-06-2022 17:17:01]13574: WAF :: fetched 1 new logs [30-06-2022 17:18:02]16582: WAF :: fetched 2 new logs [30-06-2022 17:19:02]19351: WAF :: fetched 11 new logs [30-06-2022 17:20:01]22116: WAF :: fetched 2 new logs [30-06-2022 17:21:02]24941: WAF :: fetched 2 new logs [30-06-2022 17:22:01]27676: WAF :: fetched 1 new logs [30-06-2022 17:23:01]30482: WAF :: fetched 1 new logs [30-06-2022 17:24:02]865: WAF :: fetched 2 new logs [30-06-2022 17:25:01]3678: WAF :: fetched 1 new logs [30-06-2022 17:26:02]6559: WAF :: fetched 1 new logs [30-06-2022 17:27:02]9370: WAF :: fetched 3 new logs [30-06-2022 17:28:02]12207: WAF :: fetched 1 new logs [30-06-2022 17:29:02]14951: WAF :: fetched 1 new logs [30-06-2022 17:31:02]20606: WAF :: fetched 6 new logs [30-06-2022 17:34:02]28987: WAF :: fetched 1 new logs [30-06-2022 17:35:02]31699: WAF :: fetched 1 new logs [30-06-2022 17:39:02]10440: WAF :: fetched 1 new logs [30-06-2022 17:40:02]13161: WAF :: fetched 1 new logs [30-06-2022 17:41:01]15972: WAF :: fetched 1 new logs [30-06-2022 17:41:01]15972: Checking for user cron vulnerabilities [30-06-2022 17:44:02]24172: Checking ditributed CMS bruteforce attacks [30-06-2022 17:44:02]24172: WAF :: fetched 1 new logs [30-06-2022 17:45:02]26867: WAF :: fetched 2 new logs [30-06-2022 17:46:01]29622: WAF :: fetched 4 new logs [30-06-2022 17:47:02]32352: WAF :: fetched 3 new logs [30-06-2022 17:48:01]2794: WAF :: fetched 3 new logs [30-06-2022 17:49:01]5547: WAF :: fetched 2 new logs [30-06-2022 17:51:02]11055: WAF :: fetched 1 new logs [30-06-2022 17:54:02]19375: WAF :: fetched 2 new logs [30-06-2022 17:56:01]24825: WAF :: fetched 2 new logs [30-06-2022 17:58:01]30312: WAF :: fetched 3 new logs [30-06-2022 18:00:01]3234: WAF :: fetched 2 new logs [30-06-2022 18:02:02]9206: WAF :: fetched 4 new logs [30-06-2022 18:04:02]14680: WAF :: fetched 1 new logs [30-06-2022 18:06:01]20126: WAF :: fetched 3 new logs [30-06-2022 18:07:02]22843: WAF :: fetched 4 new logs [30-06-2022 18:08:02]25655: WAF :: fetched 297 new logs [30-06-2022 18:09:02]28320: WAF :: fetched 1 new logs [30-06-2022 18:10:01]31018: WAF :: fetched 127 new logs [30-06-2022 18:11:02]1429: WAF :: fetched 119 new logs [30-06-2022 18:12:01]4194: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656623521 [30-06-2022 18:12:02]4194: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 18:12:04]4194: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 18:12:04]4194: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-1812/20220630-181202-Yr4RokcXjQKKC8Tr2WgvVAAAAFE [30-06-2022 18:12:04]4194: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 18:12:04]4194: WAF :: fetched 347 new logs [30-06-2022 18:13:01]6964: WAF :: fetched 1 new logs [30-06-2022 18:17:01]17875: WAF :: fetched 21 new logs [30-06-2022 18:18:02]20686: WAF :: fetched 2 new logs [30-06-2022 18:20:02]26278: WAF :: fetched 2 new logs [30-06-2022 18:22:02]31841: WAF :: fetched 8 new logs [30-06-2022 18:23:01]2243: WAF :: fetched 4 new logs [30-06-2022 18:25:01]7844: WAF :: fetched 3 new logs [30-06-2022 18:26:02]10603: WAF :: fetched 4 new logs [30-06-2022 18:27:01]13281: WAF :: fetched 1 new logs [30-06-2022 18:29:01]18767: WAF :: fetched 2 new logs [30-06-2022 18:30:02]21575: WAF :: fetched 3 new logs [30-06-2022 18:31:02]24398: WAF :: fetched 2 new logs [30-06-2022 18:32:01]27143: WAF :: fetched 1 new logs [30-06-2022 18:33:02]30076: WAF :: fetched 1 new logs [30-06-2022 18:34:02]425: WAF :: fetched 1 new logs [30-06-2022 18:35:01]3345: WAF :: fetched 2 new logs [30-06-2022 18:36:01]6271: WAF :: fetched 4 new logs [30-06-2022 18:37:02]9082: WAF :: fetched 1 new logs [30-06-2022 18:38:01]12010: WAF :: fetched 1 new logs [30-06-2022 18:40:02]17678: WAF :: fetched 3 new logs [30-06-2022 18:41:01]20620: Checking for user cron vulnerabilities [30-06-2022 18:43:02]26375: WAF :: fetched 3 new logs [30-06-2022 18:44:01]29246: Checking ditributed CMS bruteforce attacks [30-06-2022 18:44:01]29246: WAF :: fetched 5 new logs [30-06-2022 18:48:02]8396: WAF :: fetched 5 new logs [30-06-2022 18:49:01]11076: WAF :: fetched 1 new logs [30-06-2022 18:53:02]22544: WAF :: fetched 1 new logs [30-06-2022 18:54:01]25395: WAF :: fetched 2 new logs [30-06-2022 18:55:02]28240: WAF :: fetched 4 new logs [30-06-2022 18:56:02]31034: WAF :: fetched 5 new logs [30-06-2022 18:57:01]1377: WAF :: fetched 1 new logs [30-06-2022 18:58:02]4383: WAF :: fetched 1 new logs [30-06-2022 18:59:01]7110: WAF :: fetched 1 new logs [30-06-2022 19:00:02]9507: WAF :: fetched 3 new logs [30-06-2022 19:01:02]12678: WAF :: fetched 1 new logs [30-06-2022 19:02:02]15388: WAF :: fetched 4 new logs [30-06-2022 19:03:01]18036: WAF :: fetched 3 new logs [30-06-2022 19:04:01]20844: WAF :: fetched 1 new logs [30-06-2022 19:05:01]23481: WAF :: fetched 1 new logs [30-06-2022 19:06:02]26226: WAF :: fetched 3 new logs [30-06-2022 19:07:01]28892: WAF :: fetched 1 new logs [30-06-2022 19:08:02]31586: WAF :: fetched 2 new logs [30-06-2022 19:09:02]1892: WAF :: fetched 4 new logs [30-06-2022 19:10:02]4738: WAF :: fetched 2 new logs [30-06-2022 19:11:01]7509: WAF :: fetched 1 new logs [30-06-2022 19:12:01]10181: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656627121 [30-06-2022 19:12:01]10181: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 19:12:03]10181: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 19:12:03]10181: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-1912/20220630-191201-Yr4fsaE2FcGXbJYfYIhWrAAAAA4 [30-06-2022 19:12:03]10181: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 19:12:04]10181: WAF :: fetched 3 new logs [30-06-2022 19:14:01]15566: WAF :: fetched 2 new logs [30-06-2022 19:15:02]18277: WAF :: fetched 1 new logs [30-06-2022 19:16:02]21000: WAF :: fetched 1 new logs [30-06-2022 19:17:01]23690: WAF :: fetched 1 new logs [30-06-2022 19:18:02]26431: WAF :: fetched 2 new logs [30-06-2022 19:19:01]29184: WAF :: fetched 1 new logs [30-06-2022 19:21:02]2294: WAF :: fetched 2 new logs [30-06-2022 19:22:01]5042: WAF :: fetched 2 new logs [30-06-2022 19:23:02]7757: WAF :: fetched 1 new logs [30-06-2022 19:27:01]18590: WAF :: fetched 2 new logs [30-06-2022 19:28:02]21290: WAF :: fetched 4 new logs [30-06-2022 19:30:01]26698: WAF :: fetched 5 new logs [30-06-2022 19:32:01]32075: WAF :: fetched 2 new logs [30-06-2022 19:33:02]2405: WAF :: fetched 4 new logs [30-06-2022 19:34:01]5248: WAF :: fetched 5 new logs [30-06-2022 19:35:02]7926: WAF :: fetched 3 new logs [30-06-2022 19:38:01]16287: WAF :: fetched 1 new logs [30-06-2022 19:39:02]19111: WAF :: fetched 2 new logs [30-06-2022 19:41:01]24552: WAF :: fetched 1 new logs [30-06-2022 19:41:01]24552: Checking for user cron vulnerabilities [30-06-2022 19:44:01]32647: Checking ditributed CMS bruteforce attacks [30-06-2022 19:45:02]: Checking for definition updates [30-06-2022 19:45:02]2966: WAF :: fetched 2 new logs [30-06-2022 19:45:06]2958: Updated virus defnition : malware.expert.ndb [30-06-2022 19:46:02]5735: WAF :: fetched 2 new logs [30-06-2022 19:48:02]11077: WAF :: fetched 3 new logs [30-06-2022 19:49:02]13805: WAF :: fetched 1 new logs [30-06-2022 19:50:01]16436: WAF :: fetched 2 new logs [30-06-2022 19:51:02]19200: WAF :: fetched 2 new logs [30-06-2022 19:52:01]21856: WAF :: fetched 2 new logs [30-06-2022 19:53:02]24619: WAF :: fetched 2 new logs [30-06-2022 19:54:02]27394: WAF :: fetched 2 new logs [30-06-2022 19:55:01]30060: WAF :: fetched 4 new logs [30-06-2022 19:56:02]351: WAF :: fetched 3 new logs [30-06-2022 19:57:01]3135: WAF :: fetched 4 new logs [30-06-2022 19:58:02]5897: WAF :: fetched 1 new logs [30-06-2022 19:59:02]8613: WAF :: fetched 3 new logs [30-06-2022 20:00:01]10996: WAF :: fetched 5 new logs [30-06-2022 20:01:02]14207: WAF :: fetched 2 new logs [30-06-2022 20:03:01]19549: WAF :: fetched 1 new logs [30-06-2022 20:05:01]24915: WAF :: fetched 2 new logs [30-06-2022 20:07:02]30330: WAF :: fetched 3 new logs [30-06-2022 20:08:01]546: WAF :: fetched 7 new logs [30-06-2022 20:09:02]3393: WAF :: fetched 5 new logs [30-06-2022 20:10:01]6163: WAF :: fetched 7 new logs [30-06-2022 20:11:02]8915: WAF :: fetched 1 new logs [30-06-2022 20:12:02]11617: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656630722 [30-06-2022 20:12:02]11617: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 20:12:04]11617: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 20:12:04]11617: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-2012/20220630-201202-Yr4twl-k6o3ZIaEnpFyiLgAAAAE [30-06-2022 20:12:04]11617: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 20:12:04]11617: WAF :: fetched 1 new logs [30-06-2022 20:13:01]14285: WAF :: fetched 2 new logs [30-06-2022 20:14:02]17075: WAF :: fetched 3 new logs [30-06-2022 20:15:01]19763: WAF :: fetched 1 new logs [30-06-2022 20:16:02]22457: WAF :: fetched 6 new logs [30-06-2022 20:17:02]25040: WAF :: fetched 3 new logs [30-06-2022 20:18:01]27680: WAF :: fetched 3 new logs [30-06-2022 20:19:02]30377: WAF :: fetched 1 new logs [30-06-2022 20:20:01]575: WAF :: fetched 1 new logs [30-06-2022 20:21:02]3377: WAF :: fetched 2 new logs [30-06-2022 20:23:02]8663: WAF :: fetched 4 new logs [30-06-2022 20:24:02]11352: WAF :: fetched 1 new logs [30-06-2022 20:25:01]13986: WAF :: fetched 7 new logs [30-06-2022 20:26:02]16720: WAF :: fetched 5 new logs [30-06-2022 20:27:01]19315: WAF :: fetched 2 new logs [30-06-2022 20:28:01]21910: WAF :: fetched 5 new logs [30-06-2022 20:29:02]24648: WAF :: fetched 28 new logs [30-06-2022 20:30:02]27332: WAF :: fetched 5 new logs [30-06-2022 20:31:01]30048: WAF :: fetched 4 new logs [30-06-2022 20:32:01]32703: WAF :: fetched 5 new logs [30-06-2022 20:33:02]2955: WAF :: fetched 2 new logs [30-06-2022 20:34:01]5717: WAF :: fetched 1 new logs [30-06-2022 20:35:02]8382: WAF :: fetched 2 new logs [30-06-2022 20:36:02]11081: WAF :: fetched 7 new logs [30-06-2022 20:37:01]13720: WAF :: fetched 1 new logs [30-06-2022 20:38:02]16406: WAF :: fetched 1 new logs [30-06-2022 20:39:01]19101: WAF :: fetched 1 new logs [30-06-2022 20:40:02]21757: WAF :: fetched 16 new logs [30-06-2022 20:41:01]24359: WAF :: fetched 2 new logs [30-06-2022 20:41:01]24359: Checking for user cron vulnerabilities [30-06-2022 20:42:02]27042: WAF :: fetched 3 new logs [30-06-2022 20:43:02]29645: WAF :: fetched 2 new logs [30-06-2022 20:44:02]32380: Checking ditributed CMS bruteforce attacks [30-06-2022 20:44:02]32380: WAF :: fetched 2 new logs [30-06-2022 20:45:02]2651: WAF :: fetched 3 new logs [30-06-2022 20:46:02]5396: WAF :: fetched 14 new logs [30-06-2022 20:47:01]8062: WAF :: fetched 26 new logs [30-06-2022 20:48:02]10752: WAF :: fetched 4 new logs [30-06-2022 20:49:01]13508: WAF :: fetched 5 new logs [30-06-2022 20:50:02]16176: WAF :: fetched 1 new logs [30-06-2022 20:51:02]18824: WAF :: fetched 1 new logs [30-06-2022 20:52:01]21422: WAF :: fetched 4 new logs [30-06-2022 20:53:02]24061: WAF :: fetched 1 new logs [30-06-2022 20:54:01]26736: WAF :: fetched 8 new logs [30-06-2022 20:55:01]29370: WAF :: fetched 2 new logs [30-06-2022 20:57:01]2240: WAF :: fetched 2 new logs [30-06-2022 20:59:02]7610: WAF :: fetched 2 new logs [30-06-2022 21:00:01]9959: WAF :: fetched 6 new logs [30-06-2022 21:01:02]13127: WAF :: fetched 14 new logs [30-06-2022 21:02:01]15749: WAF :: fetched 4 new logs [30-06-2022 21:03:02]18432: WAF :: fetched 12 new logs [30-06-2022 21:04:02]21096: WAF :: fetched 2 new logs [30-06-2022 21:05:02]23735: WAF :: fetched 4 new logs [30-06-2022 21:06:01]26389: WAF :: fetched 20 new logs [30-06-2022 21:07:01]28995: WAF :: fetched 1 new logs [30-06-2022 21:10:02]4659: WAF :: fetched 7 new logs [30-06-2022 21:11:01]7309: WAF :: fetched 20 new logs [30-06-2022 21:12:02]9995: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656634322 [30-06-2022 21:12:02]9995: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 21:12:04]9995: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 21:12:04]9995: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-2112/20220630-211202-Yr470vnAM6D1lKgouhPWbgAAABs [30-06-2022 21:12:04]9995: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 21:12:05]9995: WAF :: fetched 6 new logs [30-06-2022 21:13:02]12658: WAF :: fetched 7 new logs [30-06-2022 21:15:02]17968: WAF :: fetched 2 new logs [30-06-2022 21:16:02]20587: WAF :: fetched 1 new logs [30-06-2022 21:17:01]23203: WAF :: fetched 1 new logs [30-06-2022 21:19:01]28504: WAF :: fetched 1 new logs [30-06-2022 21:22:02]4118: WAF :: fetched 2 new logs [30-06-2022 21:23:02]6722: WAF :: fetched 4 new logs [30-06-2022 21:24:01]9411: WAF :: fetched 3 new logs [30-06-2022 21:25:01]12054: WAF :: fetched 4 new logs [30-06-2022 21:26:01]14730: WAF :: fetched 1 new logs [30-06-2022 21:31:02]27935: WAF :: fetched 1 new logs [30-06-2022 21:32:01]30560: WAF :: fetched 17 new logs [30-06-2022 21:35:01]6151: WAF :: fetched 2 new logs [30-06-2022 21:37:01]11507: WAF :: fetched 3 new logs [30-06-2022 21:38:02]14135: WAF :: fetched 1 new logs [30-06-2022 21:39:02]16793: WAF :: fetched 2 new logs [30-06-2022 21:40:01]19433: WAF :: fetched 2 new logs [30-06-2022 21:41:02]22151: Checking for user cron vulnerabilities [30-06-2022 21:43:02]27348: WAF :: fetched 2 new logs [30-06-2022 21:44:02]30007: Checking ditributed CMS bruteforce attacks [30-06-2022 21:45:02]32627: WAF :: fetched 1 new logs [30-06-2022 21:46:01]2901: WAF :: fetched 4 new logs [30-06-2022 21:47:02]5571: WAF :: fetched 1 new logs [30-06-2022 21:48:01]8159: WAF :: fetched 2 new logs [30-06-2022 21:49:02]10868: WAF :: fetched 3 new logs [30-06-2022 21:50:02]13459: WAF :: fetched 2 new logs [30-06-2022 21:51:01]16124: WAF :: fetched 1 new logs [30-06-2022 21:52:02]18764: WAF :: fetched 2 new logs [30-06-2022 21:53:02]21321: WAF :: fetched 3 new logs [30-06-2022 21:54:01]23997: WAF :: fetched 1 new logs [30-06-2022 21:55:01]26595: WAF :: fetched 1 new logs [30-06-2022 21:56:02]29347: WAF :: fetched 5 new logs [30-06-2022 21:57:02]31967: WAF :: fetched 8 new logs [30-06-2022 21:58:01]2201: WAF :: fetched 9 new logs [30-06-2022 22:00:02]7279: WAF :: fetched 3 new logs [30-06-2022 22:01:01]10429: WAF :: fetched 2 new logs [30-06-2022 22:03:02]15628: WAF :: fetched 3 new logs [30-06-2022 22:04:01]18295: WAF :: fetched 5 new logs [30-06-2022 22:05:02]20939: WAF :: fetched 2 new logs [30-06-2022 22:06:01]23624: WAF :: fetched 5 new logs [30-06-2022 22:07:01]26213: WAF :: fetched 1 new logs [30-06-2022 22:07:09]26210: Performing Domain reputation checks [30-06-2022 22:08:02]28839: WAF :: fetched 1 new logs [30-06-2022 22:11:01]4455: WAF :: fetched 1 new logs [30-06-2022 22:12:02]7088: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656637922 [30-06-2022 22:12:02]7088: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 22:12:04]7088: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 22:12:04]7088: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-2212/20220630-221202-Yr5J4iqWgaXHlV9dr65OlwAAAAM [30-06-2022 22:12:04]7088: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 22:12:04]7088: WAF :: fetched 4 new logs [30-06-2022 22:13:01]9670: WAF :: fetched 2 new logs [30-06-2022 22:14:02]12380: WAF :: fetched 3 new logs [30-06-2022 22:15:02]15012: WAF :: fetched 2 new logs [30-06-2022 22:17:02]20306: WAF :: fetched 4 new logs [30-06-2022 22:19:02]25579: WAF :: fetched 2 new logs [30-06-2022 22:21:01]30811: WAF :: fetched 3 new logs [30-06-2022 22:22:02]1067: WAF :: fetched 5 new logs [30-06-2022 22:23:01]3666: WAF :: fetched 1 new logs [30-06-2022 22:24:02]6488: WAF :: fetched 2 new logs [30-06-2022 22:25:02]9068: WAF :: fetched 3 new logs [30-06-2022 22:27:02]14325: WAF :: fetched 2 new logs [30-06-2022 22:28:02]16926: WAF :: fetched 6 new logs [30-06-2022 22:29:01]19595: WAF :: fetched 8 new logs [30-06-2022 22:30:02]22211: WAF :: fetched 2 new logs [30-06-2022 22:32:02]27585: WAF :: fetched 4 new logs [30-06-2022 22:33:01]30175: WAF :: fetched 5 new logs [30-06-2022 22:34:02]476: WAF :: fetched 3 new logs [30-06-2022 22:35:02]3124: WAF :: fetched 2 new logs [30-06-2022 22:36:01]5863: WAF :: fetched 2 new logs [30-06-2022 22:38:01]11185: WAF :: fetched 6 new logs [30-06-2022 22:39:01]13927: WAF :: fetched 2 new logs [30-06-2022 22:40:02]16600: WAF :: fetched 1 new logs [30-06-2022 22:41:01]19230: WAF :: fetched 4 new logs [30-06-2022 22:41:01]19230: Checking for user cron vulnerabilities [30-06-2022 22:43:01]24200: WAF :: fetched 1 new logs [30-06-2022 22:44:01]27143: Checking ditributed CMS bruteforce attacks [30-06-2022 22:44:02]27143: WAF :: fetched 1 new logs [30-06-2022 22:45:01]29699: WAF :: fetched 1 new logs [30-06-2022 22:46:02]32375: WAF :: fetched 7 new logs [30-06-2022 22:47:01]2559: WAF :: fetched 3 new logs [30-06-2022 22:48:01]5245: WAF :: fetched 5 new logs [30-06-2022 22:50:01]10523: WAF :: fetched 3 new logs [30-06-2022 22:52:02]15790: WAF :: fetched 1 new logs [30-06-2022 22:53:01]18388: WAF :: fetched 3 new logs [30-06-2022 22:56:02]26315: WAF :: fetched 2 new logs [30-06-2022 22:57:02]28925: WAF :: fetched 16 new logs [30-06-2022 22:58:01]31514: WAF :: fetched 22 new logs [30-06-2022 22:59:02]1838: WAF :: fetched 28 new logs [30-06-2022 23:00:02]4201: WAF :: fetched 25 new logs [30-06-2022 23:01:01]7354: WAF :: fetched 21 new logs [30-06-2022 23:02:02]10048: WAF :: fetched 26 new logs [30-06-2022 23:03:02]12618: WAF :: fetched 30 new logs [30-06-2022 23:04:01]15283: WAF :: fetched 34 new logs [30-06-2022 23:05:02]17903: WAF :: fetched 42 new logs [30-06-2022 23:06:02]20534: WAF :: fetched 52 new logs [30-06-2022 23:07:02]23164: WAF :: fetched 18 new logs [30-06-2022 23:07:55]23328: Performed RBL check for 23.111.136.34. [30-06-2022 23:08:01]25776: WAF :: fetched 15 new logs [30-06-2022 23:09:02]28470: WAF :: fetched 19 new logs [30-06-2022 23:10:02]31089: WAF :: fetched 21 new logs [30-06-2022 23:11:01]1361: WAF :: fetched 12 new logs [30-06-2022 23:12:02]4030: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656641522 [30-06-2022 23:12:02]4030: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-06-2022 23:12:04]4030: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-06-2022 23:12:04]4030: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220630/20220630-2312/20220630-231202-Yr5X8jxwCXcEllZ8CsC8tAAAABM [30-06-2022 23:12:04]4030: WAF :: No suitable log file found. Using SQLite.. [30-06-2022 23:12:04]4030: WAF :: fetched 33 new logs [30-06-2022 23:13:01]6669: WAF :: fetched 36 new logs [30-06-2022 23:14:02]9384: WAF :: fetched 22 new logs [30-06-2022 23:15:02]11985: WAF :: fetched 22 new logs [30-06-2022 23:16:01]14641: WAF :: fetched 24 new logs [30-06-2022 23:17:02]17247: WAF :: fetched 17 new logs [30-06-2022 23:18:01]19862: WAF :: fetched 13 new logs [30-06-2022 23:19:01]22550: WAF :: fetched 13 new logs [30-06-2022 23:20:02]25176: WAF :: fetched 14 new logs [30-06-2022 23:21:01]27835: WAF :: fetched 16 new logs [30-06-2022 23:22:02]30425: WAF :: fetched 16 new logs [30-06-2022 23:23:01]536: WAF :: fetched 7 new logs [30-06-2022 23:24:02]3409: WAF :: fetched 2 new logs [30-06-2022 23:25:02]6093: WAF :: fetched 7 new logs [30-06-2022 23:26:01]8712: WAF :: fetched 5 new logs [30-06-2022 23:27:02]11317: WAF :: fetched 4 new logs [30-06-2022 23:28:01]13896: WAF :: fetched 4 new logs [30-06-2022 23:29:02]16550: WAF :: fetched 3 new logs [30-06-2022 23:30:01]19149: WAF :: fetched 1 new logs [30-06-2022 23:31:02]21784: WAF :: fetched 2 new logs [30-06-2022 23:32:01]24121: WAF :: fetched 1 new logs [30-06-2022 23:33:02]27001: WAF :: fetched 3 new logs [30-06-2022 23:34:01]29632: WAF :: fetched 4 new logs [30-06-2022 23:35:01]32238: WAF :: fetched 2 new logs [30-06-2022 23:36:02]2530: WAF :: fetched 4 new logs [30-06-2022 23:37:01]5143: WAF :: fetched 5 new logs [30-06-2022 23:38:02]7795: WAF :: fetched 1 new logs [30-06-2022 23:39:02]10434: WAF :: fetched 3 new logs [30-06-2022 23:40:01]13081: WAF :: fetched 5 new logs [30-06-2022 23:41:02]15806: WAF :: fetched 3 new logs [30-06-2022 23:41:02]15806: Checking for user cron vulnerabilities [30-06-2022 23:42:01]18381: WAF :: fetched 6 new logs [30-06-2022 23:43:02]20980: WAF :: fetched 6 new logs [30-06-2022 23:44:01]23598: Checking ditributed CMS bruteforce attacks [30-06-2022 23:44:01]23598: WAF :: fetched 4 new logs [30-06-2022 23:45:02]26357: WAF :: fetched 4 new logs [30-06-2022 23:46:02]29009: WAF :: fetched 4 new logs [30-06-2022 23:47:01]31614: WAF :: fetched 4 new logs [30-06-2022 23:48:02]1820: WAF :: fetched 4 new logs [30-06-2022 23:49:01]4513: WAF :: fetched 3 new logs [30-06-2022 23:50:02]7307: WAF :: fetched 3 new logs [30-06-2022 23:51:01]9978: WAF :: fetched 2 new logs [30-06-2022 23:52:02]12604: WAF :: fetched 1 new logs [30-06-2022 23:53:02]15322: WAF :: fetched 2 new logs [30-06-2022 23:54:01]17997: httpd.conf changed. Refreshing watchlist. [30-06-2022 23:54:01]17995: WAF :: fetched 6 new logs [30-06-2022 23:55:02]21846: WAF :: fetched 65 new logs [30-06-2022 23:56:02]24743: WAF :: fetched 84 new logs [30-06-2022 23:57:01]27370: httpd.conf changed. Refreshing watchlist. [30-06-2022 23:57:01]27369: WAF :: fetched 2 new logs [30-06-2022 23:58:02]29998: WAF :: fetched 2 new logs [30-06-2022 23:59:01]32610: WAF :: fetched 6 new logs [01-07-2022 00:00:02]2653: WAF :: fetched 5 new logs [01-07-2022 00:01:02]5934: WAF :: fetched 5 new logs [01-07-2022 00:01:04]5934: Sending daily report for July 1, 2022 [01-07-2022 00:02:01]8592: WAF :: fetched 3 new logs [01-07-2022 00:03:02]11206: WAF :: fetched 2 new logs [01-07-2022 00:04:01]13659: WAF :: fetched 4 new logs [01-07-2022 00:05:02]16506: Deleted 0 entries older than 6 MONTH from scanner_logs [01-07-2022 00:05:02]16506: Deleted 0 files from Quarantine [01-07-2022 00:07:01]21746: WAF :: fetched 5 new logs [01-07-2022 00:08:02]24365: WAF :: fetched 2 new logs [01-07-2022 00:09:01]26940: WAF :: fetched 2 new logs [01-07-2022 00:10:02]29668: WAF :: fetched 4 new logs [01-07-2022 00:11:02]32280: WAF :: fetched 3 new logs [01-07-2022 00:12:01]2476: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656645121 [01-07-2022 00:12:01]2476: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 00:12:03]2476: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 00:12:03]2476: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-0012/20220701-001201-Yr5mAWFYga-BoWvyQU3wVwAAAAU [01-07-2022 00:12:03]2476: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 00:12:04]2476: WAF :: fetched 1 new logs [01-07-2022 00:13:02]5174: WAF :: fetched 3 new logs [01-07-2022 00:15:02]10385: WAF :: fetched 11 new logs [01-07-2022 00:16:02]13031: WAF :: fetched 1 new logs [01-07-2022 00:17:01]15639: WAF :: fetched 2 new logs [01-07-2022 00:18:02]18287: WAF :: fetched 1 new logs [01-07-2022 00:19:01]20902: WAF :: fetched 3 new logs [01-07-2022 00:20:02]23578: WAF :: fetched 1 new logs [01-07-2022 00:21:02]26222: WAF :: fetched 2 new logs [01-07-2022 00:22:01]28805: WAF :: fetched 1 new logs [01-07-2022 00:23:02]31411: WAF :: fetched 1 new logs [01-07-2022 00:24:02]1594: WAF :: fetched 1 new logs [01-07-2022 00:25:01]4347: WAF :: fetched 1 new logs [01-07-2022 00:28:02]12210: WAF :: fetched 1 new logs [01-07-2022 00:29:02]14785: WAF :: fetched 2 new logs [01-07-2022 00:31:02]20155: WAF :: fetched 2 new logs [01-07-2022 00:34:01]27990: WAF :: fetched 2 new logs [01-07-2022 00:35:02]30734: WAF :: fetched 2 new logs [01-07-2022 00:37:02]3611: WAF :: fetched 1 new logs [01-07-2022 00:41:01]14181: Checking for user cron vulnerabilities [01-07-2022 00:43:01]19381: WAF :: fetched 4 new logs [01-07-2022 00:44:02]22041: Checking ditributed CMS bruteforce attacks [01-07-2022 00:45:01]: Checking for software updates [01-07-2022 00:45:02]24687: WAF :: fetched 1 new logs [01-07-2022 00:47:02]29955: WAF :: fetched 7 new logs [01-07-2022 00:48:01]32477: WAF :: fetched 1 new logs [01-07-2022 00:49:01]2726: WAF :: fetched 2 new logs [01-07-2022 00:50:02]5510: WAF :: fetched 2 new logs [01-07-2022 00:51:02]8159: WAF :: fetched 1 new logs [01-07-2022 00:52:01]10720: WAF :: fetched 32 new logs [01-07-2022 00:53:02]13321: WAF :: fetched 2 new logs [01-07-2022 00:54:01]15711: WAF :: fetched 5 new logs [01-07-2022 00:55:02]18550: WAF :: fetched 3 new logs [01-07-2022 00:56:01]21171: WAF :: fetched 1 new logs [01-07-2022 00:57:02]23831: WAF :: fetched 4 new logs [01-07-2022 00:58:02]26417: WAF :: fetched 2 new logs [01-07-2022 00:59:01]29000: WAF :: fetched 3 new logs [01-07-2022 01:01:01]2719: WAF :: fetched 2 new logs [01-07-2022 01:02:02]5616: WAF :: fetched 1 new logs [01-07-2022 01:04:01]11209: WAF :: fetched 1 new logs [01-07-2022 01:06:02]17095: WAF :: fetched 6 new logs [01-07-2022 01:07:01]19723: WAF :: fetched 1 new logs [01-07-2022 01:08:02]22606: WAF :: fetched 2 new logs [01-07-2022 01:09:02]25400: WAF :: fetched 3 new logs [01-07-2022 01:10:01]28245: WAF :: fetched 6 new logs [01-07-2022 01:11:02]30946: WAF :: fetched 10 new logs [01-07-2022 01:12:01]1195: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656648721 [01-07-2022 01:12:01]1195: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 01:12:03]1195: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 01:12:04]1195: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-0112/20220701-011201-Yr50Ec6HuP-U-_dUIV446wAAAA8 [01-07-2022 01:12:04]1195: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 01:12:04]1195: WAF :: fetched 3 new logs [01-07-2022 01:13:01]4123: WAF :: fetched 2 new logs [01-07-2022 01:15:02]9505: WAF :: fetched 1 new logs [01-07-2022 01:18:02]17677: WAF :: fetched 9 new logs [01-07-2022 01:19:01]20254: WAF :: fetched 62 new logs [01-07-2022 01:22:01]28852: WAF :: fetched 3 new logs [01-07-2022 01:24:01]1901: WAF :: fetched 5 new logs [01-07-2022 01:25:02]4708: WAF :: fetched 1 new logs [01-07-2022 01:26:02]7587: WAF :: fetched 7 new logs [01-07-2022 01:27:01]10280: WAF :: fetched 2 new logs [01-07-2022 01:28:02]13028: WAF :: fetched 3 new logs [01-07-2022 01:29:02]15762: WAF :: fetched 2 new logs [01-07-2022 01:30:01]18433: WAF :: fetched 1 new logs [01-07-2022 01:31:02]21309: WAF :: fetched 1 new logs [01-07-2022 01:32:01]24290: WAF :: fetched 4 new logs [01-07-2022 01:33:01]26998: WAF :: fetched 5 new logs [01-07-2022 01:34:02]29706: WAF :: fetched 2 new logs [01-07-2022 01:36:02]3206: WAF :: fetched 4 new logs [01-07-2022 01:37:02]5844: WAF :: fetched 1 new logs [01-07-2022 01:38:01]8721: WAF :: fetched 4 new logs [01-07-2022 01:39:02]11290: WAF :: fetched 2 new logs [01-07-2022 01:40:02]14132: WAF :: fetched 1 new logs [01-07-2022 01:41:01]17190: WAF :: fetched 1 new logs [01-07-2022 01:41:01]17190: Checking for user cron vulnerabilities [01-07-2022 01:44:02]25526: Checking ditributed CMS bruteforce attacks [01-07-2022 01:44:02]25526: WAF :: fetched 2 new logs [01-07-2022 01:45:01]: Checking for definition updates [01-07-2022 01:45:02]28531: WAF :: fetched 1 new logs [01-07-2022 01:48:01]4388: WAF :: fetched 2 new logs [01-07-2022 01:49:02]7096: WAF :: fetched 1 new logs [01-07-2022 01:51:01]12929: WAF :: fetched 1 new logs [01-07-2022 01:52:02]15636: WAF :: fetched 3 new logs [01-07-2022 01:57:02]29152: WAF :: fetched 1 new logs [01-07-2022 01:58:02]31724: WAF :: fetched 2 new logs [01-07-2022 02:04:02]15730: WAF :: fetched 6 new logs [01-07-2022 02:06:02]21118: WAF :: fetched 7 new logs [01-07-2022 02:09:02]28934: WAF :: fetched 1 new logs [01-07-2022 02:12:02]4501: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656652322 [01-07-2022 02:12:02]4501: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 02:12:04]4501: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 02:12:04]4501: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-0212/20220701-021202-Yr6CIvFXyy6ZyTpZEF-f4QAAAAQ [01-07-2022 02:12:04]4501: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 02:12:04]4501: WAF :: fetched 3 new logs [01-07-2022 02:13:01]7172: WAF :: fetched 1 new logs [01-07-2022 02:16:02]15093: WAF :: fetched 2 new logs [01-07-2022 02:21:02]28384: WAF :: fetched 1 new logs [01-07-2022 02:25:01]6468: WAF :: fetched 1 new logs [01-07-2022 02:27:01]11724: WAF :: fetched 1 new logs [01-07-2022 02:28:02]14346: WAF :: fetched 1 new logs [01-07-2022 02:31:02]22335: WAF :: fetched 1 new logs [01-07-2022 02:32:01]24922: WAF :: fetched 1 new logs [01-07-2022 02:35:01]400: WAF :: fetched 2 new logs [01-07-2022 02:38:01]8465: WAF :: fetched 1 new logs [01-07-2022 02:39:02]11155: WAF :: fetched 1 new logs [01-07-2022 02:41:02]16585: WAF :: fetched 2 new logs [01-07-2022 02:41:02]16585: Checking for user cron vulnerabilities [01-07-2022 02:42:02]19214: WAF :: fetched 3 new logs [01-07-2022 02:43:01]21860: WAF :: fetched 16 new logs [01-07-2022 02:44:02]24525: Checking ditributed CMS bruteforce attacks [01-07-2022 02:44:02]24525: WAF :: fetched 11 new logs [01-07-2022 02:45:01]27258: WAF :: fetched 45 new logs [01-07-2022 02:46:01]29894: WAF :: fetched 9 new logs [01-07-2022 02:48:02]2708: WAF :: fetched 3 new logs [01-07-2022 02:51:02]12125: WAF :: fetched 2 new logs [01-07-2022 02:52:01]14570: WAF :: fetched 2 new logs [01-07-2022 02:53:02]17338: Updated license status via CDN [01-07-2022 02:55:01]22749: WAF :: fetched 2 new logs [01-07-2022 02:57:01]28247: WAF :: fetched 2 new logs [01-07-2022 02:58:02]30893: WAF :: fetched 2 new logs [01-07-2022 03:00:02]3746: WAF :: fetched 1 new logs [01-07-2022 03:00:03]3746: Found and updated 32 CMS installations [01-07-2022 03:01:02]7070: WAF :: fetched 1 new logs [01-07-2022 03:02:26]3746: Sending CMS version vulnerability report emails to cpanel users [01-07-2022 03:02:30]3746: Checking wordpress installations for suspicious directories [01-07-2022 03:03:02]12966: WAF :: fetched 1 new logs [01-07-2022 03:04:01]16132: WAF :: fetched 1 new logs [01-07-2022 03:04:28]13010: Sending CMS version vulnerability report emails to cpanel users [01-07-2022 03:04:31]13010: Checking wordpress installations for suspicious directories [01-07-2022 03:07:01]24625: WAF :: fetched 25 new logs [01-07-2022 03:08:02]27429: WAF :: fetched 2 new logs [01-07-2022 03:11:02]3008: WAF :: fetched 1 new logs [01-07-2022 03:12:01]5648: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656655921 [01-07-2022 03:12:01]5648: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 03:12:03]5648: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 03:12:04]5648: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-0312/20220701-031201-Yr6QMdXIA0ba4lF4FslXOgAAAAM [01-07-2022 03:12:04]5648: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 03:12:04]5648: WAF :: fetched 1 new logs [01-07-2022 03:13:02]8520: WAF :: fetched 6 new logs [01-07-2022 03:15:02]14139: WAF :: fetched 2 new logs [01-07-2022 03:16:01]16802: WAF :: fetched 1 new logs [01-07-2022 03:17:01]19378: WAF :: fetched 1 new logs [01-07-2022 03:19:01]24522: WAF :: fetched 1 new logs [01-07-2022 03:20:02]27278: WAF :: fetched 3 new logs [01-07-2022 03:21:02]29874: WAF :: fetched 19 new logs [01-07-2022 03:22:01]32470: WAF :: fetched 22 new logs [01-07-2022 03:23:02]2703: WAF :: fetched 16 new logs [01-07-2022 03:24:01]5340: WAF :: fetched 14 new logs [01-07-2022 03:25:02]8066: WAF :: fetched 17 new logs [01-07-2022 03:26:02]10694: WAF :: fetched 18 new logs [01-07-2022 03:27:01]13261: WAF :: fetched 25 new logs [01-07-2022 03:28:02]15921: WAF :: fetched 17 new logs [01-07-2022 03:29:01]16586: WAF :: fetched 11 new logs [01-07-2022 03:31:02]18767: WAF :: fetched 1 new logs [01-07-2022 03:33:02]30603: WAF :: fetched 1 new logs [01-07-2022 03:34:01]811: WAF :: fetched 1 new logs [01-07-2022 03:37:02]8829: WAF :: fetched 2 new logs [01-07-2022 03:39:02]14043: WAF :: fetched 2 new logs [01-07-2022 03:41:01]19360: Checking for user cron vulnerabilities [01-07-2022 03:43:02]24630: WAF :: fetched 3 new logs [01-07-2022 03:44:01]27197: Checking ditributed CMS bruteforce attacks [01-07-2022 03:47:01]2960: WAF :: fetched 29 new logs [01-07-2022 03:48:02]5828: WAF :: fetched 20 new logs [01-07-2022 03:49:02]8675: WAF :: fetched 15 new logs [01-07-2022 03:50:01]11015: WAF :: fetched 1 new logs [01-07-2022 03:54:01]22085: WAF :: fetched 1 new logs [01-07-2022 03:59:01]3596: WAF :: fetched 3 new logs [01-07-2022 04:01:02]9368: WAF :: fetched 5 new logs [01-07-2022 04:02:01]12118: WAF :: fetched 2 new logs [01-07-2022 04:03:02]14777: WAF :: fetched 4 new logs [01-07-2022 04:05:02]20057: WAF :: fetched 7 new logs [01-07-2022 04:06:01]22700: WAF :: fetched 33 new logs [01-07-2022 04:07:02]25304: WAF :: fetched 33 new logs [01-07-2022 04:08:02]27868: WAF :: fetched 1 new logs [01-07-2022 04:10:02]726: WAF :: fetched 2 new logs [01-07-2022 04:12:02]6054: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656659522 [01-07-2022 04:12:02]6054: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 04:12:04]6054: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 04:12:04]6054: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-0412/20220701-041202-Yr6eQutNIX_kl4tYuMT4dgAAABA [01-07-2022 04:12:04]6054: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [01-07-2022 04:12:04]6054: WAF :: fetched 2 new logs [01-07-2022 04:13:01]8623: WAF :: fetched 2 new logs [01-07-2022 04:14:02]11191: WAF :: fetched 2 new logs [01-07-2022 04:15:01]13844: WAF :: fetched 4 new logs [01-07-2022 04:16:02]16492: WAF :: fetched 2 new logs [01-07-2022 04:17:01]19043: WAF :: fetched 1 new logs [01-07-2022 04:18:01]21625: WAF :: fetched 1 new logs [01-07-2022 04:20:01]26880: WAF :: fetched 4 new logs [01-07-2022 04:23:01]2286: WAF :: fetched 67 new logs [01-07-2022 04:26:02]10238: WAF :: fetched 1 new logs [01-07-2022 04:29:02]17886: WAF :: fetched 1 new logs [01-07-2022 04:32:02]25789: WAF :: fetched 1 new logs [01-07-2022 04:34:02]30960: WAF :: fetched 67 new logs [01-07-2022 04:36:02]3862: WAF :: fetched 33 new logs [01-07-2022 04:37:01]6508: WAF :: fetched 1 new logs [01-07-2022 04:38:02]9153: WAF :: fetched 1 new logs [01-07-2022 04:40:01]14281: WAF :: fetched 2 new logs [01-07-2022 04:41:01]16969: Checking for user cron vulnerabilities [01-07-2022 04:42:02]19577: WAF :: fetched 5 new logs [01-07-2022 04:44:01]24722: Checking ditributed CMS bruteforce attacks [01-07-2022 04:44:01]24722: WAF :: fetched 5 new logs [01-07-2022 04:45:02]27354: WAF :: fetched 2 new logs [01-07-2022 04:47:02]32566: WAF :: fetched 20 new logs [01-07-2022 04:50:02]8012: WAF :: fetched 1 new logs [01-07-2022 04:51:02]10725: WAF :: fetched 25 new logs [01-07-2022 04:52:02]13312: WAF :: fetched 10 new logs [01-07-2022 04:54:02]18540: WAF :: fetched 1 new logs [01-07-2022 04:57:02]26403: WAF :: fetched 1 new logs [01-07-2022 04:58:01]29012: WAF :: fetched 2 new logs [01-07-2022 05:01:41]4779: Starting daily scan on files updated in last 24 hrs [01-07-2022 05:03:01]9930: WAF :: fetched 19 new logs [01-07-2022 05:04:02]12519: WAF :: fetched 3 new logs [01-07-2022 05:05:02]15092: WAF :: fetched 2 new logs [01-07-2022 05:08:01]22924: WAF :: fetched 1 new logs [01-07-2022 05:09:02]25519: WAF :: fetched 2 new logs [01-07-2022 05:11:02]30829: WAF :: fetched 1 new logs [01-07-2022 05:12:01]1002: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656663121 [01-07-2022 05:12:01]1002: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 05:12:03]1002: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 05:12:04]1002: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-0512/20220701-051201-Yr6sUVLmVSAG50_GnHtttQAAAAQ [01-07-2022 05:12:04]1002: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 05:12:04]1002: WAF :: fetched 234 new logs [01-07-2022 05:13:02]3648: WAF :: fetched 14 new logs [01-07-2022 05:16:02]11617: WAF :: fetched 1 new logs [01-07-2022 05:18:02]16727: WAF :: fetched 3 new logs [01-07-2022 05:19:01]19259: WAF :: fetched 1 new logs [01-07-2022 05:21:02]24544: WAF :: fetched 56 new logs [01-07-2022 05:22:01]27127: WAF :: fetched 8 new logs [01-07-2022 05:24:02]32273: WAF :: fetched 21 new logs [01-07-2022 05:25:02]2505: WAF :: fetched 20 new logs [01-07-2022 05:26:01]5253: WAF :: fetched 26 new logs [01-07-2022 05:27:02]7851: WAF :: fetched 22 new logs [01-07-2022 05:28:01]10390: WAF :: fetched 26 new logs [01-07-2022 05:29:02]12966: WAF :: fetched 14 new logs [01-07-2022 05:30:02]15492: WAF :: fetched 24 new logs [01-07-2022 05:31:02]18197: WAF :: fetched 3 new logs [01-07-2022 05:32:01]20783: WAF :: fetched 1 new logs [01-07-2022 05:33:01]23365: WAF :: fetched 2 new logs [01-07-2022 05:36:02]31239: WAF :: fetched 1 new logs [01-07-2022 05:37:01]1442: WAF :: fetched 1 new logs [01-07-2022 05:38:02]4123: WAF :: fetched 32 new logs [01-07-2022 05:39:02]6724: WAF :: fetched 2 new logs [01-07-2022 05:41:02]12052: Checking for user cron vulnerabilities [01-07-2022 05:42:02]14605: WAF :: fetched 1 new logs [01-07-2022 05:44:02]19743: Checking ditributed CMS bruteforce attacks [01-07-2022 05:44:02]19743: WAF :: fetched 2 new logs [01-07-2022 05:45:01]22221: WAF :: fetched 1 new logs [01-07-2022 05:46:02]25081: WAF :: fetched 5 new logs [01-07-2022 05:48:02]30223: WAF :: fetched 5 new logs [01-07-2022 05:50:02]3044: WAF :: fetched 1 new logs [01-07-2022 05:51:02]5805: WAF :: fetched 1 new logs [01-07-2022 05:53:02]10939: WAF :: fetched 1 new logs [01-07-2022 05:56:02]18770: WAF :: fetched 2 new logs [01-07-2022 05:57:01]21362: WAF :: fetched 2 new logs [01-07-2022 05:58:02]23959: WAF :: fetched 3 new logs [01-07-2022 06:00:01]28791: WAF :: fetched 1 new logs [01-07-2022 06:03:02]4816: WAF :: fetched 3 new logs [01-07-2022 06:04:01]7401: WAF :: fetched 21 new logs [01-07-2022 06:05:02]10018: WAF :: fetched 1 new logs [01-07-2022 06:07:01]15259: WAF :: fetched 1 new logs [01-07-2022 06:09:01]20492: WAF :: fetched 5 new logs [01-07-2022 06:10:02]23101: WAF :: fetched 4 new logs [01-07-2022 06:11:02]25795: WAF :: fetched 1 new logs [01-07-2022 06:12:02]28415: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656666722 [01-07-2022 06:12:02]28415: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 06:12:04]28415: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 06:12:04]28415: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-0612/20220701-061202-Yr66Ymk8hZexxO_D070ejQAAAAE [01-07-2022 06:12:04]28415: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [01-07-2022 06:12:05]28415: WAF :: fetched 2 new logs [01-07-2022 06:13:01]31024: WAF :: fetched 1 new logs [01-07-2022 06:14:01]1222: WAF :: fetched 9 new logs [01-07-2022 06:17:02]9316: WAF :: fetched 37 new logs [01-07-2022 06:18:02]11923: WAF :: fetched 50 new logs [01-07-2022 06:19:01]14531: WAF :: fetched 56 new logs [01-07-2022 06:20:02]17157: WAF :: fetched 53 new logs [01-07-2022 06:21:01]19898: WAF :: fetched 22 new logs [01-07-2022 06:24:01]27686: WAF :: fetched 40 new logs [01-07-2022 06:25:02]30329: WAF :: fetched 62 new logs [01-07-2022 06:26:01]551: WAF :: fetched 53 new logs [01-07-2022 06:27:02]3351: WAF :: fetched 59 new logs [01-07-2022 06:28:02]5938: WAF :: fetched 16 new logs [01-07-2022 06:29:01]8524: WAF :: fetched 1 new logs [01-07-2022 06:34:01]21547: WAF :: fetched 31 new logs [01-07-2022 06:35:01]24133: WAF :: fetched 7 new logs [01-07-2022 06:36:02]26871: WAF :: fetched 3 new logs [01-07-2022 06:37:02]29432: WAF :: fetched 1 new logs [01-07-2022 06:38:01]32044: WAF :: fetched 4 new logs [01-07-2022 06:39:01]2272: WAF :: fetched 2 new logs [01-07-2022 06:41:02]7670: Checking for user cron vulnerabilities [01-07-2022 06:42:01]10259: WAF :: fetched 2 new logs [01-07-2022 06:43:02]12847: WAF :: fetched 1 new logs [01-07-2022 06:44:01]15403: Checking ditributed CMS bruteforce attacks [01-07-2022 06:45:01]17990: WAF :: fetched 1 new logs [01-07-2022 06:52:01]3939: WAF :: fetched 1 new logs [01-07-2022 06:54:01]9111: WAF :: fetched 5 new logs [01-07-2022 06:55:02]11653: WAF :: fetched 35 new logs [01-07-2022 06:58:01]19489: WAF :: fetched 10 new logs [01-07-2022 06:59:02]22120: WAF :: fetched 88 new logs [01-07-2022 07:02:01]30263: WAF :: fetched 1 new logs [01-07-2022 07:03:01]468: WAF :: fetched 33 new logs [01-07-2022 07:05:01]5867: WAF :: fetched 5 new logs [01-07-2022 07:07:01]11266: WAF :: fetched 7 new logs [01-07-2022 07:08:02]13929: WAF :: fetched 3 new logs [01-07-2022 07:11:02]21952: WAF :: fetched 1 new logs [01-07-2022 07:12:01]24577: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656670321 [01-07-2022 07:12:01]24577: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 07:12:03]24577: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 07:12:04]24577: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-0712/20220701-071201-Yr7IceAb4wf1e53S5saIEAAAAAE [01-07-2022 07:12:04]24577: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [01-07-2022 07:12:04]24577: WAF :: fetched 1 new logs [01-07-2022 07:13:02]27290: WAF :: fetched 5 new logs [01-07-2022 07:14:02]29925: WAF :: fetched 4 new logs [01-07-2022 07:15:01]32553: WAF :: fetched 39 new logs [01-07-2022 07:16:02]2912: WAF :: fetched 3 new logs [01-07-2022 07:17:01]5547: WAF :: fetched 4 new logs [01-07-2022 07:18:02]8172: WAF :: fetched 3 new logs [01-07-2022 07:19:01]10745: WAF :: fetched 1 new logs [01-07-2022 07:20:02]13346: WAF :: fetched 1 new logs [01-07-2022 07:21:02]16057: WAF :: fetched 2 new logs [01-07-2022 07:22:02]18666: WAF :: fetched 5 new logs [01-07-2022 07:23:02]21279: WAF :: fetched 2 new logs [01-07-2022 07:24:01]23873: WAF :: fetched 14 new logs [01-07-2022 07:25:02]26534: WAF :: fetched 6 new logs [01-07-2022 07:26:01]29207: WAF :: fetched 8 new logs [01-07-2022 07:27:02]31779: WAF :: fetched 4 new logs [01-07-2022 07:28:02]1925: WAF :: fetched 1 new logs [01-07-2022 07:30:02]7287: WAF :: fetched 1 new logs [01-07-2022 07:31:01]9984: WAF :: fetched 1 new logs [01-07-2022 07:32:01]12560: WAF :: fetched 5 new logs [01-07-2022 07:33:02]15161: WAF :: fetched 36 new logs [01-07-2022 07:34:01]17720: WAF :: fetched 1 new logs [01-07-2022 07:39:02]30866: WAF :: fetched 4 new logs [01-07-2022 07:40:02]1048: WAF :: fetched 1 new logs [01-07-2022 07:41:01]3804: Checking for user cron vulnerabilities [01-07-2022 07:43:01]9009: WAF :: fetched 2 new logs [01-07-2022 07:44:02]11618: Checking ditributed CMS bruteforce attacks [01-07-2022 07:44:02]11618: WAF :: fetched 5 new logs [01-07-2022 07:45:01]: Checking for definition updates [01-07-2022 07:45:02]14186: WAF :: fetched 7 new logs [01-07-2022 07:46:01]16888: WAF :: fetched 6 new logs [01-07-2022 07:47:02]19493: WAF :: fetched 4 new logs [01-07-2022 07:48:01]22075: WAF :: fetched 1 new logs [01-07-2022 07:51:02]30009: WAF :: fetched 6 new logs [01-07-2022 07:52:02]32589: WAF :: fetched 9 new logs [01-07-2022 07:53:01]2769: WAF :: fetched 22 new logs [01-07-2022 07:54:02]5478: WAF :: fetched 26 new logs [01-07-2022 07:55:02]8053: WAF :: fetched 24 new logs [01-07-2022 07:56:02]10734: WAF :: fetched 23 new logs [01-07-2022 07:57:01]13284: WAF :: fetched 23 new logs [01-07-2022 07:58:02]15895: WAF :: fetched 19 new logs [01-07-2022 07:59:02]18446: WAF :: fetched 22 new logs [01-07-2022 08:00:01]20763: WAF :: fetched 55 new logs [01-07-2022 08:01:02]23984: WAF :: fetched 24 new logs [01-07-2022 08:02:02]26632: WAF :: fetched 17 new logs [01-07-2022 08:06:02]4824: WAF :: fetched 2 new logs [01-07-2022 08:09:02]12557: WAF :: fetched 1 new logs [01-07-2022 08:10:01]15141: WAF :: fetched 1 new logs [01-07-2022 08:12:01]20473: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656673921 [01-07-2022 08:12:01]20473: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 08:12:03]20473: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 08:12:04]20473: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-0812/20220701-081201-Yr7WgQyKgu2yE1ssqGC3JAAAABI [01-07-2022 08:12:04]20473: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 08:12:04]20473: WAF :: fetched 881 new logs [01-07-2022 08:14:02]25677: WAF :: fetched 3 new logs [01-07-2022 08:19:02]6510: WAF :: fetched 1 new logs [01-07-2022 08:20:01]9129: WAF :: fetched 1 new logs [01-07-2022 08:21:02]11881: WAF :: fetched 2 new logs [01-07-2022 08:22:02]14432: WAF :: fetched 1 new logs [01-07-2022 08:24:02]19672: WAF :: fetched 6 new logs [01-07-2022 08:25:01]22275: WAF :: fetched 3 new logs [01-07-2022 08:26:02]25035: WAF :: fetched 6 new logs [01-07-2022 08:30:01]3056: WAF :: fetched 2 new logs [01-07-2022 08:33:01]11176: WAF :: fetched 1 new logs [01-07-2022 08:37:02]21852: WAF :: fetched 32 new logs [01-07-2022 08:39:02]27221: httpd.conf changed. Refreshing watchlist. [01-07-2022 08:41:02]32736: WAF :: fetched 1 new logs [01-07-2022 08:41:02]32736: Checking for user cron vulnerabilities [01-07-2022 08:42:01]3015: WAF :: fetched 5 new logs [01-07-2022 08:44:02]8658: Checking ditributed CMS bruteforce attacks [01-07-2022 08:44:02]8672: httpd.conf changed. Refreshing watchlist. [01-07-2022 08:44:02]8658: WAF :: fetched 74 new logs [01-07-2022 08:45:02]11283: WAF :: fetched 2 new logs [01-07-2022 08:46:01]14084: WAF :: fetched 3 new logs [01-07-2022 08:47:01]16684: WAF :: fetched 1 new logs [01-07-2022 08:50:01]24650: WAF :: fetched 1 new logs [01-07-2022 08:51:02]27514: WAF :: fetched 1 new logs [01-07-2022 08:53:01]32745: WAF :: fetched 9 new logs [01-07-2022 08:57:01]10836: WAF :: fetched 1 new logs [01-07-2022 08:58:01]13806: WAF :: fetched 8 new logs [01-07-2022 08:59:02]16432: WAF :: fetched 2 new logs [01-07-2022 09:00:02]18820: WAF :: fetched 1 new logs [01-07-2022 09:03:02]27422: WAF :: fetched 1 new logs [01-07-2022 09:04:01]30056: WAF :: fetched 4 new logs [01-07-2022 09:05:01]32705: WAF :: fetched 3 new logs [01-07-2022 09:06:02]3117: WAF :: fetched 6 new logs [01-07-2022 09:10:01]13929: WAF :: fetched 2 new logs [01-07-2022 09:11:01]16708: WAF :: fetched 311 new logs [01-07-2022 09:12:02]19424: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656677522 [01-07-2022 09:12:02]19424: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 09:12:04]19424: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 09:12:04]19424: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-0912/20220701-091202-Yr7kknLQ8hiEoGJ1-Gw2cwAAAAU [01-07-2022 09:12:04]19424: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 09:12:05]19424: WAF :: fetched 1 new logs [01-07-2022 09:13:02]22107: WAF :: fetched 4 new logs [01-07-2022 09:14:01]24755: WAF :: fetched 5 new logs [01-07-2022 09:15:01]27447: WAF :: fetched 3 new logs [01-07-2022 09:16:02]30203: WAF :: fetched 6 new logs [01-07-2022 09:17:02]465: WAF :: fetched 2 new logs [01-07-2022 09:18:01]3139: WAF :: fetched 2 new logs [01-07-2022 09:19:02]5819: WAF :: fetched 3 new logs [01-07-2022 09:20:01]8491: WAF :: fetched 2 new logs [01-07-2022 09:21:01]11162: WAF :: fetched 1 new logs [01-07-2022 09:23:01]16464: WAF :: fetched 1 new logs [01-07-2022 09:26:01]24367: WAF :: fetched 2 new logs [01-07-2022 09:27:02]27091: WAF :: fetched 1 new logs [01-07-2022 09:34:02]13533: WAF :: fetched 3 new logs [01-07-2022 09:35:02]16186: WAF :: fetched 1 new logs [01-07-2022 09:40:02]29890: WAF :: fetched 1 new logs [01-07-2022 09:41:01]32429: Checking for user cron vulnerabilities [01-07-2022 09:42:02]3039: WAF :: fetched 1 new logs [01-07-2022 09:43:01]5822: httpd.conf changed. Refreshing watchlist. [01-07-2022 09:43:01]5835: WAF :: fetched 5 new logs [01-07-2022 09:44:02]8560: Checking ditributed CMS bruteforce attacks [01-07-2022 09:45:02]11265: WAF :: fetched 6 new logs [01-07-2022 09:46:01]14000: WAF :: fetched 2 new logs [01-07-2022 09:47:02]16787: WAF :: fetched 7 new logs [01-07-2022 09:49:01]22206: WAF :: fetched 2 new logs [01-07-2022 09:50:02]25016: WAF :: fetched 6 new logs [01-07-2022 09:51:01]27855: WAF :: fetched 2 new logs [01-07-2022 09:53:02]948: WAF :: fetched 1 new logs [01-07-2022 09:57:02]11841: WAF :: fetched 1 new logs [01-07-2022 09:58:02]14466: WAF :: fetched 1 new logs [01-07-2022 10:00:02]19643: WAF :: fetched 2 new logs [01-07-2022 10:02:02]25725: WAF :: fetched 2 new logs [01-07-2022 10:03:02]28542: WAF :: fetched 4 new logs [01-07-2022 10:04:02]31328: WAF :: fetched 2 new logs [01-07-2022 10:05:01]1716: WAF :: fetched 2 new logs [01-07-2022 10:06:02]4660: WAF :: fetched 3 new logs [01-07-2022 10:07:02]7414: WAF :: fetched 2 new logs [01-07-2022 10:08:02]10061: WAF :: fetched 1 new logs [01-07-2022 10:09:01]12841: WAF :: fetched 1 new logs [01-07-2022 10:12:02]21189: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656681122 [01-07-2022 10:12:02]21189: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 10:12:04]21189: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 10:12:04]21189: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-1012/20220701-101202-Yr7yokKrq00942-SiHt5xgAAADA [01-07-2022 10:12:04]21189: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 10:12:04]21189: WAF :: fetched 2 new logs [01-07-2022 10:13:01]23937: WAF :: fetched 5 new logs [01-07-2022 10:17:02]2933: WAF :: fetched 5 new logs [01-07-2022 10:22:01]16540: WAF :: fetched 3 new logs [01-07-2022 10:23:02]19245: WAF :: fetched 4 new logs [01-07-2022 10:24:01]21939: WAF :: fetched 6 new logs [01-07-2022 10:25:02]24619: WAF :: fetched 13 new logs [01-07-2022 10:26:01]27309: WAF :: fetched 3 new logs [01-07-2022 10:27:01]30007: WAF :: fetched 3 new logs [01-07-2022 10:28:02]32750: WAF :: fetched 5 new logs [01-07-2022 10:29:02]3092: WAF :: fetched 6 new logs [01-07-2022 10:31:01]8782: WAF :: fetched 1 new logs [01-07-2022 10:35:01]19882: WAF :: fetched 3 new logs [01-07-2022 10:36:02]22656: WAF :: fetched 24 new logs [01-07-2022 10:37:02]25388: WAF :: fetched 6 new logs [01-07-2022 10:38:01]28129: WAF :: fetched 2 new logs [01-07-2022 10:39:02]30860: WAF :: fetched 2 new logs [01-07-2022 10:40:01]1089: WAF :: fetched 1 new logs [01-07-2022 10:41:02]3935: WAF :: fetched 2 new logs [01-07-2022 10:41:02]3935: Checking for user cron vulnerabilities [01-07-2022 10:42:02]6724: WAF :: fetched 7 new logs [01-07-2022 10:43:01]9454: WAF :: fetched 2 new logs [01-07-2022 10:44:02]12182: Checking ditributed CMS bruteforce attacks [01-07-2022 10:44:02]12182: WAF :: fetched 4 new logs [01-07-2022 10:45:01]14940: WAF :: fetched 2 new logs [01-07-2022 10:46:01]17773: WAF :: fetched 7 new logs [01-07-2022 10:47:02]20568: WAF :: fetched 3 new logs [01-07-2022 10:48:02]23257: WAF :: fetched 1 new logs [01-07-2022 10:52:02]1829: WAF :: fetched 1 new logs [01-07-2022 10:54:01]7433: WAF :: fetched 1 new logs [01-07-2022 10:56:01]12883: WAF :: fetched 1 new logs [01-07-2022 10:57:01]15638: WAF :: fetched 1 new logs [01-07-2022 10:58:02]18355: WAF :: fetched 1 new logs [01-07-2022 10:59:01]21019: WAF :: fetched 1 new logs [01-07-2022 11:00:02]23407: WAF :: fetched 1 new logs [01-07-2022 11:01:02]26560: WAF :: fetched 3 new logs [01-07-2022 11:02:01]29390: WAF :: fetched 10 new logs [01-07-2022 11:04:02]2420: WAF :: fetched 7 new logs [01-07-2022 11:05:01]5235: WAF :: fetched 5 new logs [01-07-2022 11:07:44]11024: Performed RBL check for 23.111.136.34. [01-07-2022 11:10:01]19203: WAF :: fetched 1 new logs [01-07-2022 11:12:02]24919: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656684722 [01-07-2022 11:12:02]24919: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 11:12:04]24919: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 11:12:04]24919: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-1112/20220701-111202-Yr8AsmIil-02U7yZSE5jNQAAABw [01-07-2022 11:12:04]24919: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 11:12:04]24919: WAF :: fetched 3 new logs [01-07-2022 11:14:01]30458: WAF :: fetched 4 new logs [01-07-2022 11:18:01]9308: WAF :: fetched 3 new logs [01-07-2022 11:19:02]12137: WAF :: fetched 7 new logs [01-07-2022 11:23:01]23271: WAF :: fetched 2 new logs [01-07-2022 11:25:01]28876: WAF :: fetched 1 new logs [01-07-2022 11:26:01]31774: WAF :: fetched 1 new logs [01-07-2022 11:28:02]5251: WAF :: fetched 2 new logs [01-07-2022 11:29:02]8004: WAF :: fetched 1 new logs [01-07-2022 11:32:02]16451: WAF :: fetched 1 new logs [01-07-2022 11:33:01]19181: WAF :: fetched 4 new logs [01-07-2022 11:35:02]24820: WAF :: fetched 18 new logs [01-07-2022 11:36:02]27707: WAF :: fetched 13 new logs [01-07-2022 11:37:01]30542: WAF :: fetched 12 new logs [01-07-2022 11:38:02]1079: WAF :: fetched 4 new logs [01-07-2022 11:39:02]3996: WAF :: fetched 17 new logs [01-07-2022 11:40:01]6946: WAF :: fetched 37 new logs [01-07-2022 11:41:02]9920: WAF :: fetched 45 new logs [01-07-2022 11:41:02]9920: Checking for user cron vulnerabilities [01-07-2022 11:42:02]12791: WAF :: fetched 23 new logs [01-07-2022 11:43:01]15619: WAF :: fetched 17 new logs [01-07-2022 11:44:02]18457: Checking ditributed CMS bruteforce attacks [01-07-2022 11:44:02]18457: WAF :: fetched 5 new logs [01-07-2022 11:45:02]21245: WAF :: fetched 5 new logs [01-07-2022 11:46:01]24336: WAF :: fetched 32 new logs [01-07-2022 11:47:02]27220: WAF :: fetched 1 new logs [01-07-2022 11:48:02]30085: httpd.conf changed. Refreshing watchlist. [01-07-2022 11:48:02]30081: WAF :: fetched 7 new logs [01-07-2022 11:49:01]461: WAF :: fetched 1 new logs [01-07-2022 11:50:02]3371: WAF :: fetched 2 new logs [01-07-2022 11:52:01]9226: WAF :: fetched 39 new logs [01-07-2022 11:54:01]14776: WAF :: fetched 2 new logs [01-07-2022 11:56:02]20390: WAF :: fetched 18 new logs [01-07-2022 11:57:01]23194: WAF :: fetched 2 new logs [01-07-2022 11:59:01]28752: WAF :: fetched 13 new logs [01-07-2022 12:00:01]31235: WAF :: fetched 4 new logs [01-07-2022 12:02:01]5060: WAF :: fetched 3 new logs [01-07-2022 12:03:02]7847: WAF :: fetched 50 new logs [01-07-2022 12:04:02]10592: WAF :: fetched 239 new logs [01-07-2022 12:05:01]13295: WAF :: fetched 220 new logs [01-07-2022 12:06:02]16092: WAF :: fetched 173 new logs [01-07-2022 12:07:01]18909: WAF :: fetched 5 new logs [01-07-2022 12:08:01]21645: WAF :: fetched 20 new logs [01-07-2022 12:09:02]24509: httpd.conf changed. Refreshing watchlist. [01-07-2022 12:11:02]30054: WAF :: fetched 3 new logs [01-07-2022 12:12:02]377: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656688322 [01-07-2022 12:12:02]377: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 12:12:04]377: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 12:12:04]377: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-1212/20220701-121202-Yr8Owo3gOGA7qclM9YZ-7gAAACE [01-07-2022 12:12:04]377: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 12:12:04]377: WAF :: fetched 4 new logs [01-07-2022 12:14:02]6773: WAF :: fetched 1 new logs [01-07-2022 12:18:01]18012: WAF :: fetched 4 new logs [01-07-2022 12:19:01]20863: WAF :: fetched 1 new logs [01-07-2022 12:20:02]23648: WAF :: fetched 2 new logs [01-07-2022 12:21:01]26364: WAF :: fetched 1 new logs [01-07-2022 12:23:01]31790: WAF :: fetched 3 new logs [01-07-2022 12:24:02]2268: WAF :: fetched 4 new logs [01-07-2022 12:27:02]10541: WAF :: fetched 2 new logs [01-07-2022 12:28:01]13187: WAF :: fetched 3 new logs [01-07-2022 12:30:02]18622: WAF :: fetched 7 new logs [01-07-2022 12:31:01]21370: WAF :: fetched 1 new logs [01-07-2022 12:36:02]2679: WAF :: fetched 2 new logs [01-07-2022 12:37:02]5584: WAF :: fetched 1 new logs [01-07-2022 12:38:02]8360: WAF :: fetched 1 new logs [01-07-2022 12:40:02]13741: WAF :: fetched 1 new logs [01-07-2022 12:41:01]16491: WAF :: fetched 1 new logs [01-07-2022 12:41:01]16491: Checking for user cron vulnerabilities [01-07-2022 12:42:02]19309: WAF :: fetched 1 new logs [01-07-2022 12:44:01]24678: Checking ditributed CMS bruteforce attacks [01-07-2022 12:44:01]24678: WAF :: fetched 2 new logs [01-07-2022 12:45:01]: Checking for software updates [01-07-2022 12:45:02]27409: WAF :: fetched 23 new logs [01-07-2022 12:46:01]30146: WAF :: fetched 2 new logs [01-07-2022 12:47:02]495: WAF :: fetched 13 new logs [01-07-2022 12:48:02]3202: WAF :: fetched 44 new logs [01-07-2022 12:49:01]5935: WAF :: fetched 11 new logs [01-07-2022 12:50:02]8712: WAF :: fetched 9 new logs [01-07-2022 12:51:01]11504: WAF :: fetched 1 new logs [01-07-2022 12:52:01]14263: WAF :: fetched 10 new logs [01-07-2022 12:54:01]19576: WAF :: fetched 1 new logs [01-07-2022 12:55:02]22272: WAF :: fetched 10 new logs [01-07-2022 12:57:02]27744: WAF :: fetched 1 new logs [01-07-2022 12:58:02]30350: WAF :: fetched 11 new logs [01-07-2022 12:59:01]596: WAF :: fetched 41 new logs [01-07-2022 13:00:02]3061: WAF :: fetched 5 new logs [01-07-2022 13:01:02]6238: WAF :: fetched 2 new logs [01-07-2022 13:02:01]8983: WAF :: fetched 35 new logs [01-07-2022 13:03:02]11644: WAF :: fetched 61 new logs [01-07-2022 13:04:01]14231: WAF :: fetched 1 new logs [01-07-2022 13:05:02]16920: WAF :: fetched 18 new logs [01-07-2022 13:06:01]19621: WAF :: fetched 2 new logs [01-07-2022 13:08:02]25045: WAF :: fetched 1 new logs [01-07-2022 13:09:01]27709: WAF :: fetched 1 new logs [01-07-2022 13:10:02]30401: WAF :: fetched 35 new logs [01-07-2022 13:11:02]635: WAF :: fetched 132 new logs [01-07-2022 13:12:01]3433: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656691921 [01-07-2022 13:12:01]3433: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 13:12:03]3433: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 13:12:03]3433: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-1312/20220701-131201-Yr8c0bayN5NgHdp1d89MEAAAAAw [01-07-2022 13:12:03]3433: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 13:12:04]3433: WAF :: fetched 170 new logs [01-07-2022 13:13:02]6158: WAF :: fetched 56 new logs [01-07-2022 13:14:01]8798: WAF :: fetched 10 new logs [01-07-2022 13:15:02]11471: WAF :: fetched 16 new logs [01-07-2022 13:16:02]14176: WAF :: fetched 10 new logs [01-07-2022 13:17:01]16898: WAF :: fetched 18 new logs [01-07-2022 13:18:02]19581: WAF :: fetched 25 new logs [01-07-2022 13:19:01]22173: WAF :: fetched 21 new logs [01-07-2022 13:20:02]24985: WAF :: fetched 25 new logs [01-07-2022 13:21:01]27722: WAF :: fetched 7 new logs [01-07-2022 13:22:02]30463: WAF :: fetched 30 new logs [01-07-2022 13:23:01]635: WAF :: fetched 56 new logs [01-07-2022 13:24:02]3406: WAF :: fetched 10 new logs [01-07-2022 13:25:01]6128: WAF :: fetched 11 new logs [01-07-2022 13:26:02]8848: WAF :: fetched 10 new logs [01-07-2022 13:27:02]11612: WAF :: fetched 22 new logs [01-07-2022 13:28:02]14302: WAF :: fetched 37 new logs [01-07-2022 13:29:01]16921: WAF :: fetched 10 new logs [01-07-2022 13:30:02]19600: WAF :: fetched 15 new logs [01-07-2022 13:31:02]22304: WAF :: fetched 7 new logs [01-07-2022 13:32:01]25050: WAF :: fetched 7 new logs [01-07-2022 13:33:02]27696: WAF :: fetched 17 new logs [01-07-2022 13:34:01]30323: WAF :: fetched 7 new logs [01-07-2022 13:35:02]592: WAF :: fetched 10 new logs [01-07-2022 13:36:02]3352: WAF :: fetched 22 new logs [01-07-2022 13:37:01]6121: WAF :: fetched 41 new logs [01-07-2022 13:38:02]8877: WAF :: fetched 48 new logs [01-07-2022 13:39:01]11528: WAF :: fetched 30 new logs [01-07-2022 13:40:01]14207: WAF :: fetched 31 new logs [01-07-2022 13:41:02]16962: WAF :: fetched 23 new logs [01-07-2022 13:41:02]16962: Checking for user cron vulnerabilities [01-07-2022 13:42:01]19696: WAF :: fetched 49 new logs [01-07-2022 13:43:02]22385: WAF :: fetched 13 new logs [01-07-2022 13:44:01]25023: Checking ditributed CMS bruteforce attacks [01-07-2022 13:44:02]25023: WAF :: fetched 19 new logs [01-07-2022 13:45:01]: Checking for definition updates [01-07-2022 13:45:01]27693: WAF :: fetched 27 new logs [01-07-2022 13:45:03]27696: Updated virus defnition : signatures.ndb [01-07-2022 13:46:02]30512: WAF :: fetched 19 new logs [01-07-2022 13:47:02]900: WAF :: fetched 11 new logs [01-07-2022 13:48:01]3740: WAF :: fetched 1 new logs [01-07-2022 13:49:02]6577: WAF :: fetched 1 new logs [01-07-2022 13:50:02]9332: WAF :: fetched 2 new logs [01-07-2022 13:51:02]12228: WAF :: fetched 32 new logs [01-07-2022 13:52:02]15027: WAF :: fetched 2 new logs [01-07-2022 13:53:01]17786: WAF :: fetched 1 new logs [01-07-2022 13:54:02]20495: WAF :: fetched 4 new logs [01-07-2022 13:55:02]23179: WAF :: fetched 65 new logs [01-07-2022 13:56:01]25889: WAF :: fetched 74 new logs [01-07-2022 13:57:02]28654: WAF :: fetched 47 new logs [01-07-2022 13:58:02]31367: WAF :: fetched 22 new logs [01-07-2022 13:59:01]1709: WAF :: fetched 1 new logs [01-07-2022 14:00:02]4266: WAF :: fetched 3 new logs [01-07-2022 14:02:01]10276: WAF :: fetched 27 new logs [01-07-2022 14:03:02]13087: httpd.conf changed. Refreshing watchlist. [01-07-2022 14:03:02]13079: WAF :: fetched 199 new logs [01-07-2022 14:04:02]15746: WAF :: fetched 208 new logs [01-07-2022 14:05:02]18466: WAF :: fetched 204 new logs [01-07-2022 14:06:02]21173: WAF :: fetched 55 new logs [01-07-2022 14:07:01]23925: WAF :: fetched 37 new logs [01-07-2022 14:08:02]26622: WAF :: fetched 29 new logs [01-07-2022 14:09:01]29287: WAF :: fetched 5 new logs [01-07-2022 14:10:02]32062: WAF :: fetched 1 new logs [01-07-2022 14:11:02]2552: WAF :: fetched 1 new logs [01-07-2022 14:12:01]5486: httpd.conf changed. Refreshing watchlist. [01-07-2022 14:12:01]5472: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656695521 [01-07-2022 14:12:01]5472: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 14:12:03]5472: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 14:12:03]5472: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-1412/20220701-141201-Yr8q4Y6dHygyK-WBQylE3gAAACU [01-07-2022 14:12:03]5472: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 14:12:04]5472: WAF :: fetched 3 new logs [01-07-2022 14:13:02]8337: WAF :: fetched 1 new logs [01-07-2022 14:15:01]13804: WAF :: fetched 2 new logs [01-07-2022 14:16:02]16665: WAF :: fetched 10 new logs [01-07-2022 14:17:02]19408: httpd.conf changed. Refreshing watchlist. [01-07-2022 14:17:02]19403: WAF :: fetched 5 new logs [01-07-2022 14:18:01]22288: WAF :: fetched 3 new logs [01-07-2022 14:19:02]25109: WAF :: fetched 9 new logs [01-07-2022 14:20:02]27859: WAF :: fetched 10 new logs [01-07-2022 14:21:01]30817: WAF :: fetched 5 new logs [01-07-2022 14:22:02]1209: WAF :: fetched 2 new logs [01-07-2022 14:23:02]4037: WAF :: fetched 4 new logs [01-07-2022 14:24:01]6774: WAF :: fetched 1 new logs [01-07-2022 14:25:02]9513: WAF :: fetched 2 new logs [01-07-2022 14:26:01]12316: WAF :: fetched 6 new logs [01-07-2022 14:27:02]15052: WAF :: fetched 27 new logs [01-07-2022 14:28:02]17811: WAF :: fetched 24 new logs [01-07-2022 14:29:01]20727: WAF :: fetched 9 new logs [01-07-2022 14:30:02]23412: WAF :: fetched 18 new logs [01-07-2022 14:31:01]26126: WAF :: fetched 52 new logs [01-07-2022 14:32:02]28841: WAF :: fetched 11 new logs [01-07-2022 14:33:02]31594: WAF :: fetched 6 new logs [01-07-2022 14:34:02]1864: WAF :: fetched 11 new logs [01-07-2022 14:35:02]4628: WAF :: fetched 3 new logs [01-07-2022 14:36:02]7383: WAF :: fetched 9 new logs [01-07-2022 14:37:01]10115: WAF :: fetched 12 new logs [01-07-2022 14:38:02]12926: WAF :: fetched 1 new logs [01-07-2022 14:39:01]15561: WAF :: fetched 5 new logs [01-07-2022 14:40:02]18322: WAF :: fetched 6 new logs [01-07-2022 14:41:02]21045: WAF :: fetched 48 new logs [01-07-2022 14:41:02]21045: Checking for user cron vulnerabilities [01-07-2022 14:42:01]23771: WAF :: fetched 2 new logs [01-07-2022 14:43:02]26553: WAF :: fetched 11 new logs [01-07-2022 14:44:01]29174: Checking ditributed CMS bruteforce attacks [01-07-2022 14:44:01]29174: WAF :: fetched 43 new logs [01-07-2022 14:45:01]31846: WAF :: fetched 81 new logs [01-07-2022 14:46:02]2219: WAF :: fetched 20 new logs [01-07-2022 14:47:02]4932: WAF :: fetched 20 new logs [01-07-2022 14:48:01]7680: WAF :: fetched 27 new logs [01-07-2022 14:49:02]10387: WAF :: fetched 5 new logs [01-07-2022 14:50:02]13020: WAF :: fetched 3 new logs [01-07-2022 14:51:01]15783: WAF :: fetched 40 new logs [01-07-2022 14:52:02]18447: WAF :: fetched 141 new logs [01-07-2022 14:53:01]21193: WAF :: fetched 3 new logs [01-07-2022 14:53:02]21196: Updated license status via CDN [01-07-2022 14:54:02]23887: WAF :: fetched 90 new logs [01-07-2022 14:55:02]26511: WAF :: fetched 118 new logs [01-07-2022 14:56:01]29234: WAF :: fetched 7 new logs [01-07-2022 14:57:02]32015: WAF :: fetched 4 new logs [01-07-2022 14:58:01]2432: WAF :: fetched 5 new logs [01-07-2022 14:59:02]5256: WAF :: fetched 13 new logs [01-07-2022 15:00:02]7740: WAF :: fetched 29 new logs [01-07-2022 15:01:02]10935: Reseting cPGuard inotify settings [01-07-2022 15:02:01]13697: WAF :: fetched 1 new logs [01-07-2022 15:03:02]16571: WAF :: fetched 10 new logs [01-07-2022 15:04:02]19309: WAF :: fetched 14 new logs [01-07-2022 15:05:01]22051: WAF :: fetched 18 new logs [01-07-2022 15:06:02]24797: WAF :: fetched 18 new logs [01-07-2022 15:07:01]27502: WAF :: fetched 21 new logs [01-07-2022 15:08:01]30310: WAF :: fetched 17 new logs [01-07-2022 15:09:02]558: WAF :: fetched 18 new logs [01-07-2022 15:10:02]3338: WAF :: fetched 20 new logs [01-07-2022 15:11:01]6127: WAF :: fetched 20 new logs [01-07-2022 15:12:02]8877: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656699122 [01-07-2022 15:12:02]8877: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 15:12:04]8877: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 15:12:04]8877: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-1512/20220701-151202-Yr848qFUXX5yPJmJjL2_jwAAADQ [01-07-2022 15:12:04]8877: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 15:12:04]8877: WAF :: fetched 16 new logs [01-07-2022 15:13:02]11607: WAF :: fetched 9 new logs [01-07-2022 15:14:01]14267: WAF :: fetched 2 new logs [01-07-2022 15:16:02]19756: WAF :: fetched 2 new logs [01-07-2022 15:17:01]22417: WAF :: fetched 24 new logs [01-07-2022 15:18:01]25204: WAF :: fetched 17 new logs [01-07-2022 15:19:02]27865: WAF :: fetched 17 new logs [01-07-2022 15:20:01]30519: WAF :: fetched 47 new logs [01-07-2022 15:21:02]876: WAF :: fetched 7 new logs [01-07-2022 15:22:02]3561: WAF :: fetched 32 new logs [01-07-2022 15:23:02]6376: WAF :: fetched 33 new logs [01-07-2022 15:24:02]9018: WAF :: fetched 54 new logs [01-07-2022 15:25:01]11680: WAF :: fetched 36 new logs [01-07-2022 15:26:01]14415: WAF :: fetched 5 new logs [01-07-2022 15:27:02]17068: WAF :: fetched 2 new logs [01-07-2022 15:28:01]19825: WAF :: fetched 19 new logs [01-07-2022 15:29:02]22505: WAF :: fetched 51 new logs [01-07-2022 15:30:02]25187: WAF :: fetched 3 new logs [01-07-2022 15:31:02]27964: WAF :: fetched 13 new logs [01-07-2022 15:32:01]30678: WAF :: fetched 6 new logs [01-07-2022 15:35:02]7013: WAF :: fetched 6 new logs [01-07-2022 15:36:02]9774: WAF :: fetched 2 new logs [01-07-2022 15:37:02]12408: WAF :: fetched 26 new logs [01-07-2022 15:38:02]15170: WAF :: fetched 9 new logs [01-07-2022 15:41:01]23324: Checking for user cron vulnerabilities [01-07-2022 15:43:02]28783: WAF :: fetched 40 new logs [01-07-2022 15:44:01]31451: Checking ditributed CMS bruteforce attacks [01-07-2022 15:44:01]31451: WAF :: fetched 24 new logs [01-07-2022 15:45:01]1716: WAF :: fetched 5 new logs [01-07-2022 15:46:01]4530: WAF :: fetched 4 new logs [01-07-2022 15:47:02]7244: WAF :: fetched 4 new logs [01-07-2022 15:48:01]9937: WAF :: fetched 6 new logs [01-07-2022 15:49:02]12638: WAF :: fetched 19 new logs [01-07-2022 15:50:02]15250: WAF :: fetched 6 new logs [01-07-2022 15:51:01]17965: WAF :: fetched 32 new logs [01-07-2022 15:52:02]20648: WAF :: fetched 1 new logs [01-07-2022 15:53:01]23389: WAF :: fetched 121 new logs [01-07-2022 15:54:02]26056: WAF :: fetched 225 new logs [01-07-2022 15:55:02]28731: WAF :: fetched 294 new logs [01-07-2022 15:56:01]31397: WAF :: fetched 224 new logs [01-07-2022 15:57:02]1645: WAF :: fetched 101 new logs [01-07-2022 15:58:01]4449: WAF :: fetched 48 new logs [01-07-2022 15:59:02]7130: WAF :: fetched 228 new logs [01-07-2022 16:00:01]9606: WAF :: fetched 266 new logs [01-07-2022 16:01:02]12754: WAF :: fetched 345 new logs [01-07-2022 16:02:02]15473: WAF :: fetched 102 new logs [01-07-2022 16:03:01]18275: WAF :: fetched 4 new logs [01-07-2022 16:04:02]20964: WAF :: fetched 19 new logs [01-07-2022 16:05:02]23611: WAF :: fetched 6 new logs [01-07-2022 16:06:01]26368: WAF :: fetched 16 new logs [01-07-2022 16:07:02]29060: WAF :: fetched 40 new logs [01-07-2022 16:08:01]31795: WAF :: fetched 8 new logs [01-07-2022 16:09:02]2159: WAF :: fetched 2 new logs [01-07-2022 16:10:02]4887: WAF :: fetched 2 new logs [01-07-2022 16:11:02]7694: WAF :: fetched 2 new logs [01-07-2022 16:12:02]10356: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656702722 [01-07-2022 16:12:02]10356: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 16:12:04]10356: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 16:12:04]10356: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-1612/20220701-161202-Yr9HAsLeiG7tIdkTJLWlVAAAADY [01-07-2022 16:12:04]10356: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 16:12:04]10356: WAF :: fetched 5 new logs [01-07-2022 16:13:01]13132: WAF :: fetched 5 new logs [01-07-2022 16:14:02]15880: httpd.conf changed. Refreshing watchlist. [01-07-2022 16:14:02]15878: WAF :: fetched 6 new logs [01-07-2022 16:15:02]18559: WAF :: fetched 5 new logs [01-07-2022 16:16:01]21269: WAF :: fetched 2 new logs [01-07-2022 16:17:02]24001: WAF :: fetched 74 new logs [01-07-2022 16:18:02]26793: httpd.conf changed. Refreshing watchlist. [01-07-2022 16:19:02]29537: WAF :: fetched 28 new logs [01-07-2022 16:20:02]32206: WAF :: fetched 6 new logs [01-07-2022 16:21:01]2578: WAF :: fetched 2 new logs [01-07-2022 16:22:01]5322: WAF :: fetched 4 new logs [01-07-2022 16:23:02]8111: WAF :: fetched 24 new logs [01-07-2022 16:24:02]10746: WAF :: fetched 1 new logs [01-07-2022 16:25:01]13413: WAF :: fetched 3 new logs [01-07-2022 16:26:02]16152: WAF :: fetched 34 new logs [01-07-2022 16:27:02]18854: WAF :: fetched 4 new logs [01-07-2022 16:28:01]21607: WAF :: fetched 8 new logs [01-07-2022 16:30:01]26955: WAF :: fetched 1 new logs [01-07-2022 16:31:01]29672: WAF :: fetched 81 new logs [01-07-2022 16:32:02]32349: WAF :: fetched 180 new logs [01-07-2022 16:33:01]2715: WAF :: fetched 21 new logs [01-07-2022 16:34:02]5504: WAF :: fetched 181 new logs [01-07-2022 16:35:02]8229: WAF :: fetched 278 new logs [01-07-2022 16:36:01]10974: WAF :: fetched 332 new logs [01-07-2022 16:37:02]13628: WAF :: fetched 131 new logs [01-07-2022 16:38:02]16461: WAF :: fetched 257 new logs [01-07-2022 16:40:02]21887: WAF :: fetched 18 new logs [01-07-2022 16:41:02]24616: WAF :: fetched 18 new logs [01-07-2022 16:41:02]24616: Checking for user cron vulnerabilities [01-07-2022 16:42:01]27399: httpd.conf changed. Refreshing watchlist. [01-07-2022 16:42:01]27398: WAF :: fetched 44 new logs [01-07-2022 16:43:02]30334: httpd.conf changed. Refreshing watchlist. [01-07-2022 16:43:02]30331: WAF :: fetched 8 new logs [01-07-2022 16:44:01]553: Checking ditributed CMS bruteforce attacks [01-07-2022 16:44:02]553: WAF :: fetched 1 new logs [01-07-2022 16:45:02]3384: WAF :: fetched 4 new logs [01-07-2022 16:46:02]6172: WAF :: fetched 4 new logs [01-07-2022 16:47:02]8821: WAF :: fetched 7 new logs [01-07-2022 16:48:01]11519: WAF :: fetched 11 new logs [01-07-2022 16:49:02]14220: WAF :: fetched 15 new logs [01-07-2022 16:50:01]16939: WAF :: fetched 48 new logs [01-07-2022 16:51:01]19803: WAF :: fetched 21 new logs [01-07-2022 16:52:02]22442: WAF :: fetched 11 new logs [01-07-2022 16:53:02]25181: WAF :: fetched 19 new logs [01-07-2022 16:54:01]27813: WAF :: fetched 2 new logs [01-07-2022 16:55:01]30442: WAF :: fetched 17 new logs [01-07-2022 16:56:02]778: WAF :: fetched 46 new logs [01-07-2022 16:57:01]3484: WAF :: fetched 43 new logs [01-07-2022 16:58:02]6367: WAF :: fetched 8 new logs [01-07-2022 16:59:02]9039: WAF :: fetched 1 new logs [01-07-2022 17:00:01]11480: WAF :: fetched 34 new logs [01-07-2022 17:01:02]14728: WAF :: fetched 9 new logs [01-07-2022 17:02:01]17432: WAF :: fetched 4 new logs [01-07-2022 17:03:02]20204: WAF :: fetched 101 new logs [01-07-2022 17:04:02]22838: WAF :: fetched 183 new logs [01-07-2022 17:05:01]25551: WAF :: fetched 235 new logs [01-07-2022 17:06:02]28334: WAF :: fetched 236 new logs [01-07-2022 17:07:02]30999: WAF :: fetched 212 new logs [01-07-2022 17:08:01]1369: WAF :: fetched 323 new logs [01-07-2022 17:09:02]4102: WAF :: fetched 148 new logs [01-07-2022 17:10:02]6798: WAF :: fetched 180 new logs [01-07-2022 17:11:01]9500: WAF :: fetched 53 new logs [01-07-2022 17:12:02]12170: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656706322 [01-07-2022 17:12:02]12170: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 17:12:04]12170: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 17:12:04]12170: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-1712/20220701-171202-Yr9VEpdsXuf9PIC9t-hdDQAAAB8 [01-07-2022 17:12:04]12170: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 17:12:05]12170: WAF :: fetched 58 new logs [01-07-2022 17:13:02]14880: WAF :: fetched 18 new logs [01-07-2022 17:14:01]17540: WAF :: fetched 12 new logs [01-07-2022 17:15:02]20208: WAF :: fetched 22 new logs [01-07-2022 17:16:01]22894: WAF :: fetched 46 new logs [01-07-2022 17:17:02]25564: WAF :: fetched 32 new logs [01-07-2022 17:18:02]28266: WAF :: fetched 32 new logs [01-07-2022 17:19:01]30953: WAF :: fetched 32 new logs [01-07-2022 17:20:01]1205: WAF :: fetched 19 new logs [01-07-2022 17:21:02]4024: WAF :: fetched 69 new logs [01-07-2022 17:22:02]6692: WAF :: fetched 269 new logs [01-07-2022 17:23:02]9464: WAF :: fetched 173 new logs [01-07-2022 17:24:02]12161: WAF :: fetched 216 new logs [01-07-2022 17:25:01]14800: WAF :: fetched 183 new logs [01-07-2022 17:26:02]17528: WAF :: fetched 125 new logs [01-07-2022 17:27:02]20238: WAF :: fetched 245 new logs [01-07-2022 17:28:01]22951: WAF :: fetched 212 new logs [01-07-2022 17:29:02]25603: WAF :: fetched 219 new logs [01-07-2022 17:30:01]28251: WAF :: fetched 24 new logs [01-07-2022 17:31:02]30972: WAF :: fetched 28 new logs [01-07-2022 17:33:01]4082: WAF :: fetched 2 new logs [01-07-2022 17:34:02]6889: WAF :: fetched 17 new logs [01-07-2022 17:35:02]9629: WAF :: fetched 44 new logs [01-07-2022 17:36:01]12398: WAF :: fetched 50 new logs [01-07-2022 17:37:02]15158: WAF :: fetched 39 new logs [01-07-2022 17:38:01]18011: WAF :: fetched 34 new logs [01-07-2022 17:39:01]20741: WAF :: fetched 20 new logs [01-07-2022 17:40:02]23474: WAF :: fetched 1 new logs [01-07-2022 17:41:01]26156: WAF :: fetched 39 new logs [01-07-2022 17:41:01]26156: Checking for user cron vulnerabilities [01-07-2022 17:42:02]28802: WAF :: fetched 19 new logs [01-07-2022 17:43:02]31508: WAF :: fetched 66 new logs [01-07-2022 17:44:02]1789: Checking ditributed CMS bruteforce attacks [01-07-2022 17:44:02]1789: WAF :: fetched 4 new logs [01-07-2022 17:45:02]4510: WAF :: fetched 2 new logs [01-07-2022 17:46:01]7236: WAF :: fetched 29 new logs [01-07-2022 17:47:02]9867: WAF :: fetched 6 new logs [01-07-2022 17:49:01]15220: WAF :: fetched 1 new logs [01-07-2022 17:50:02]17924: WAF :: fetched 1 new logs [01-07-2022 17:51:01]20628: WAF :: fetched 22 new logs [01-07-2022 17:52:02]23279: WAF :: fetched 140 new logs [01-07-2022 17:53:02]26043: WAF :: fetched 78 new logs [01-07-2022 17:54:01]28695: WAF :: fetched 246 new logs [01-07-2022 17:55:02]31323: WAF :: fetched 51 new logs [01-07-2022 17:56:02]1546: WAF :: fetched 133 new logs [01-07-2022 17:57:02]4238: WAF :: fetched 221 new logs [01-07-2022 17:58:02]7053: WAF :: fetched 210 new logs [01-07-2022 17:59:02]9637: WAF :: fetched 74 new logs [01-07-2022 18:00:01]12001: WAF :: fetched 90 new logs [01-07-2022 18:01:02]15175: WAF :: fetched 5 new logs [01-07-2022 18:02:02]17835: WAF :: fetched 2 new logs [01-07-2022 18:03:02]20542: WAF :: fetched 2 new logs [01-07-2022 18:04:01]23191: WAF :: fetched 1 new logs [01-07-2022 18:05:02]25863: WAF :: fetched 4 new logs [01-07-2022 18:06:01]28577: WAF :: fetched 4 new logs [01-07-2022 18:08:02]1572: WAF :: fetched 2 new logs [01-07-2022 18:09:02]4285: WAF :: fetched 2 new logs [01-07-2022 18:10:02]6978: WAF :: fetched 3 new logs [01-07-2022 18:11:01]9677: WAF :: fetched 2 new logs [01-07-2022 18:12:02]12367: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656709922 [01-07-2022 18:12:02]12367: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 18:12:04]12367: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 18:12:04]12367: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-1812/20220701-181202-Yr9jIucLC5PU_2Iouu15xgAAAC0 [01-07-2022 18:12:04]12367: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 18:14:01]17802: WAF :: fetched 1 new logs [01-07-2022 18:15:02]20555: WAF :: fetched 1 new logs [01-07-2022 18:16:01]23279: WAF :: fetched 3 new logs [01-07-2022 18:19:01]31323: WAF :: fetched 2 new logs [01-07-2022 18:22:01]6706: WAF :: fetched 2 new logs [01-07-2022 18:23:02]9816: WAF :: fetched 1 new logs [01-07-2022 18:25:02]15058: WAF :: fetched 4 new logs [01-07-2022 18:26:01]17497: WAF :: fetched 29 new logs [01-07-2022 18:29:01]25819: WAF :: fetched 1 new logs [01-07-2022 18:32:02]1435: WAF :: fetched 3 new logs [01-07-2022 18:33:02]4175: WAF :: fetched 2 new logs [01-07-2022 18:34:01]6872: WAF :: fetched 4 new logs [01-07-2022 18:35:02]9551: WAF :: fetched 4 new logs [01-07-2022 18:36:01]12247: WAF :: fetched 3 new logs [01-07-2022 18:37:01]14897: WAF :: fetched 1 new logs [01-07-2022 18:38:02]17678: WAF :: fetched 1 new logs [01-07-2022 18:39:01]20264: WAF :: fetched 1 new logs [01-07-2022 18:40:02]22950: WAF :: fetched 2 new logs [01-07-2022 18:41:01]25667: WAF :: fetched 1 new logs [01-07-2022 18:41:01]25667: Checking for user cron vulnerabilities [01-07-2022 18:44:01]1332: Checking ditributed CMS bruteforce attacks [01-07-2022 18:44:02]1332: WAF :: fetched 1 new logs [01-07-2022 18:45:01]4011: WAF :: fetched 1 new logs [01-07-2022 18:46:02]6769: WAF :: fetched 3 new logs [01-07-2022 18:48:02]12120: WAF :: fetched 2 new logs [01-07-2022 18:49:02]14791: WAF :: fetched 1 new logs [01-07-2022 18:50:01]17433: WAF :: fetched 3 new logs [01-07-2022 18:51:01]20169: WAF :: fetched 2 new logs [01-07-2022 18:52:01]22796: WAF :: fetched 8 new logs [01-07-2022 18:53:01]25496: WAF :: fetched 5 new logs [01-07-2022 18:54:02]28167: WAF :: fetched 4 new logs [01-07-2022 18:55:02]30798: WAF :: fetched 9 new logs [01-07-2022 18:56:02]1081: WAF :: fetched 5 new logs [01-07-2022 18:57:01]3745: WAF :: fetched 4 new logs [01-07-2022 18:58:02]6525: WAF :: fetched 8 new logs [01-07-2022 18:59:02]9149: WAF :: fetched 1 new logs [01-07-2022 19:01:02]14693: WAF :: fetched 3 new logs [01-07-2022 19:03:02]19988: WAF :: fetched 4 new logs [01-07-2022 19:04:02]22638: WAF :: fetched 1 new logs [01-07-2022 19:06:02]27971: WAF :: fetched 2 new logs [01-07-2022 19:07:02]30576: WAF :: fetched 1 new logs [01-07-2022 19:08:01]805: WAF :: fetched 1 new logs [01-07-2022 19:09:02]3597: WAF :: fetched 1 new logs [01-07-2022 19:10:01]6304: WAF :: fetched 1 new logs [01-07-2022 19:11:02]8970: WAF :: fetched 1 new logs [01-07-2022 19:12:01]11598: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656713521 [01-07-2022 19:12:01]11598: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 19:12:03]11598: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 19:12:04]11598: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-1912/20220701-191201-Yr9xMdRT1a68TWhX0dqbzgAAABc [01-07-2022 19:12:04]11598: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 19:12:04]11598: WAF :: fetched 1 new logs [01-07-2022 19:14:02]17010: WAF :: fetched 3 new logs [01-07-2022 19:15:02]19673: WAF :: fetched 1 new logs [01-07-2022 19:16:01]22343: WAF :: fetched 1 new logs [01-07-2022 19:18:02]27670: WAF :: fetched 1 new logs [01-07-2022 19:19:01]30366: WAF :: fetched 1 new logs [01-07-2022 19:20:02]598: WAF :: fetched 1 new logs [01-07-2022 19:21:01]3365: WAF :: fetched 4 new logs [01-07-2022 19:22:02]6077: WAF :: fetched 5 new logs [01-07-2022 19:25:02]14000: WAF :: fetched 1 new logs [01-07-2022 19:26:01]16668: WAF :: fetched 3 new logs [01-07-2022 19:27:02]19280: WAF :: fetched 2 new logs [01-07-2022 19:28:01]21929: WAF :: fetched 1 new logs [01-07-2022 19:29:01]24661: WAF :: fetched 2 new logs [01-07-2022 19:30:02]27302: WAF :: fetched 1 new logs [01-07-2022 19:31:01]29969: WAF :: fetched 3 new logs [01-07-2022 19:34:01]5673: WAF :: fetched 3 new logs [01-07-2022 19:35:01]8343: WAF :: fetched 3 new logs [01-07-2022 19:36:02]11068: WAF :: fetched 10 new logs [01-07-2022 19:37:01]13671: WAF :: fetched 13 new logs [01-07-2022 19:38:02]16357: WAF :: fetched 2 new logs [01-07-2022 19:39:02]19069: WAF :: fetched 1 new logs [01-07-2022 19:40:01]21677: WAF :: fetched 3 new logs [01-07-2022 19:41:02]24383: WAF :: fetched 2 new logs [01-07-2022 19:41:02]24383: Checking for user cron vulnerabilities [01-07-2022 19:43:02]29655: WAF :: fetched 2 new logs [01-07-2022 19:44:01]32337: Checking ditributed CMS bruteforce attacks [01-07-2022 19:44:02]32337: WAF :: fetched 1 new logs [01-07-2022 19:45:01]: Checking for definition updates [01-07-2022 19:45:01]2569: WAF :: fetched 1 new logs [01-07-2022 19:46:02]5334: WAF :: fetched 1 new logs [01-07-2022 19:52:01]21214: WAF :: fetched 1 new logs [01-07-2022 19:53:02]23859: WAF :: fetched 1 new logs [01-07-2022 19:55:01]29209: WAF :: fetched 1 new logs [01-07-2022 19:56:02]31903: WAF :: fetched 1 new logs [01-07-2022 19:58:01]4878: WAF :: fetched 1 new logs [01-07-2022 19:59:02]7600: WAF :: fetched 3 new logs [01-07-2022 20:00:01]9961: WAF :: fetched 2 new logs [01-07-2022 20:01:01]13051: WAF :: fetched 1 new logs [01-07-2022 20:02:02]15742: WAF :: fetched 2 new logs [01-07-2022 20:03:01]18351: WAF :: fetched 1 new logs [01-07-2022 20:04:02]21095: WAF :: fetched 1 new logs [01-07-2022 20:06:01]26418: WAF :: fetched 2 new logs [01-07-2022 20:07:02]29066: WAF :: fetched 2 new logs [01-07-2022 20:08:01]31676: WAF :: fetched 1 new logs [01-07-2022 20:09:02]2013: WAF :: fetched 1 new logs [01-07-2022 20:12:02]10005: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656717122 [01-07-2022 20:12:02]10005: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 20:12:04]10005: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 20:12:04]10005: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-2012/20220701-201202-Yr9_QhYZzq8ReDMgK1EVigAAABQ [01-07-2022 20:12:04]10005: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 20:16:01]20660: WAF :: fetched 2 new logs [01-07-2022 20:17:02]23338: WAF :: fetched 2 new logs [01-07-2022 20:18:01]25977: WAF :: fetched 1 new logs [01-07-2022 20:19:02]28711: WAF :: fetched 3 new logs [01-07-2022 20:20:01]31381: WAF :: fetched 1 new logs [01-07-2022 20:21:01]1648: WAF :: fetched 1 new logs [01-07-2022 20:22:01]4362: WAF :: fetched 1 new logs [01-07-2022 20:24:01]9718: WAF :: fetched 3 new logs [01-07-2022 20:29:02]23003: WAF :: fetched 9 new logs [01-07-2022 20:30:01]25647: WAF :: fetched 36 new logs [01-07-2022 20:31:02]28404: WAF :: fetched 44 new logs [01-07-2022 20:32:02]31034: WAF :: fetched 40 new logs [01-07-2022 20:33:01]1249: WAF :: fetched 18 new logs [01-07-2022 20:34:02]4027: WAF :: fetched 2 new logs [01-07-2022 20:35:01]6705: WAF :: fetched 1 new logs [01-07-2022 20:36:02]9403: WAF :: fetched 1 new logs [01-07-2022 20:37:01]11965: WAF :: fetched 1 new logs [01-07-2022 20:39:02]17331: WAF :: fetched 3 new logs [01-07-2022 20:40:01]20036: WAF :: fetched 2 new logs [01-07-2022 20:41:02]22726: Checking for user cron vulnerabilities [01-07-2022 20:42:01]25335: WAF :: fetched 2 new logs [01-07-2022 20:43:01]28003: WAF :: fetched 1 new logs [01-07-2022 20:44:01]30750: Checking ditributed CMS bruteforce attacks [01-07-2022 20:45:01]932: WAF :: fetched 1 new logs [01-07-2022 20:46:02]3656: WAF :: fetched 1 new logs [01-07-2022 20:47:01]6320: WAF :: fetched 2 new logs [01-07-2022 20:48:01]8965: WAF :: fetched 1 new logs [01-07-2022 20:51:02]16999: WAF :: fetched 1 new logs [01-07-2022 20:53:02]22287: WAF :: fetched 3 new logs [01-07-2022 20:59:02]5951: WAF :: fetched 2 new logs [01-07-2022 21:00:01]8298: WAF :: fetched 8 new logs [01-07-2022 21:01:02]11411: WAF :: fetched 10 new logs [01-07-2022 21:03:01]16669: WAF :: fetched 2 new logs [01-07-2022 21:04:02]19402: WAF :: fetched 11 new logs [01-07-2022 21:05:01]22029: WAF :: fetched 6 new logs [01-07-2022 21:06:02]24724: WAF :: fetched 10 new logs [01-07-2022 21:07:02]27326: WAF :: fetched 1 new logs [01-07-2022 21:08:01]29965: WAF :: fetched 2 new logs [01-07-2022 21:10:01]2876: WAF :: fetched 1 new logs [01-07-2022 21:12:01]8278: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656720721 [01-07-2022 21:12:01]8278: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 21:12:03]8278: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 21:12:04]8278: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-2112/20220701-211201-Yr-NUTyoqic6FQyH1R15EgAAADA [01-07-2022 21:12:04]8278: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 21:12:04]8278: WAF :: fetched 2 new logs [01-07-2022 21:21:01]32268: WAF :: fetched 2 new logs [01-07-2022 21:22:02]2508: WAF :: fetched 1 new logs [01-07-2022 21:23:02]5178: WAF :: fetched 1 new logs [01-07-2022 21:24:01]7901: WAF :: fetched 1 new logs [01-07-2022 21:26:01]13155: WAF :: fetched 4 new logs [01-07-2022 21:29:02]21121: WAF :: fetched 1 new logs [01-07-2022 21:32:02]29025: WAF :: fetched 1 new logs [01-07-2022 21:35:01]4634: WAF :: fetched 1 new logs [01-07-2022 21:36:02]7338: WAF :: fetched 1 new logs [01-07-2022 21:39:01]15314: WAF :: fetched 1 new logs [01-07-2022 21:41:02]20652: WAF :: fetched 1 new logs [01-07-2022 21:41:02]20652: Checking for user cron vulnerabilities [01-07-2022 21:43:02]25841: WAF :: fetched 1 new logs [01-07-2022 21:44:01]28523: Checking ditributed CMS bruteforce attacks [01-07-2022 21:45:01]31127: WAF :: fetched 1 new logs [01-07-2022 21:47:01]4022: WAF :: fetched 1 new logs [01-07-2022 21:51:02]14741: WAF :: fetched 5 new logs [01-07-2022 21:52:02]17345: WAF :: fetched 4 new logs [01-07-2022 21:53:01]19931: WAF :: fetched 9 new logs [01-07-2022 21:54:01]22634: WAF :: fetched 6 new logs [01-07-2022 21:55:02]25336: WAF :: fetched 6 new logs [01-07-2022 21:56:01]28026: WAF :: fetched 3 new logs [01-07-2022 21:57:02]30676: WAF :: fetched 2 new logs [01-07-2022 21:58:02]856: WAF :: fetched 2 new logs [01-07-2022 21:59:01]3608: WAF :: fetched 2 new logs [01-07-2022 22:00:02]6001: WAF :: fetched 3 new logs [01-07-2022 22:01:02]9122: WAF :: fetched 1 new logs [01-07-2022 22:03:02]14358: WAF :: fetched 2 new logs [01-07-2022 22:04:01]17026: WAF :: fetched 1 new logs [01-07-2022 22:05:02]19666: WAF :: fetched 5 new logs [01-07-2022 22:06:02]22317: WAF :: fetched 2 new logs [01-07-2022 22:07:01]24940: WAF :: fetched 3 new logs [01-07-2022 22:07:08]24949: Performing Domain reputation checks [01-07-2022 22:08:02]27597: WAF :: fetched 4 new logs [01-07-2022 22:09:01]30327: WAF :: fetched 3 new logs [01-07-2022 22:10:02]536: WAF :: fetched 3 new logs [01-07-2022 22:11:02]3271: WAF :: fetched 3 new logs [01-07-2022 22:12:01]5937: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656724321 [01-07-2022 22:12:01]5937: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 22:12:03]5937: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 22:12:03]5937: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-2212/20220701-221201-Yr-bYcx2rwqQsLOLpBKuaAAAABI [01-07-2022 22:12:03]5937: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [01-07-2022 22:12:04]5937: WAF :: fetched 1 new logs [01-07-2022 22:14:01]11235: WAF :: fetched 3 new logs [01-07-2022 22:17:01]19096: WAF :: fetched 4 new logs [01-07-2022 22:18:02]21726: WAF :: fetched 3 new logs [01-07-2022 22:19:01]24405: WAF :: fetched 4 new logs [01-07-2022 22:20:02]27062: WAF :: fetched 27 new logs [01-07-2022 22:21:02]29751: WAF :: fetched 152 new logs [01-07-2022 22:22:01]32342: WAF :: fetched 1 new logs [01-07-2022 22:23:02]2599: WAF :: fetched 18 new logs [01-07-2022 22:24:01]5344: WAF :: fetched 1 new logs [01-07-2022 22:27:01]13227: WAF :: fetched 4 new logs [01-07-2022 22:30:02]21269: WAF :: fetched 1 new logs [01-07-2022 22:31:02]23978: WAF :: fetched 2 new logs [01-07-2022 22:32:02]26662: WAF :: fetched 1 new logs [01-07-2022 22:34:02]32067: WAF :: fetched 2 new logs [01-07-2022 22:35:02]2303: WAF :: fetched 1 new logs [01-07-2022 22:36:01]5078: WAF :: fetched 1 new logs [01-07-2022 22:39:01]13099: WAF :: fetched 1 new logs [01-07-2022 22:40:02]15773: WAF :: fetched 1 new logs [01-07-2022 22:41:01]18448: Checking for user cron vulnerabilities [01-07-2022 22:43:01]23648: WAF :: fetched 1 new logs [01-07-2022 22:44:02]26536: Checking ditributed CMS bruteforce attacks [01-07-2022 22:44:02]26536: WAF :: fetched 1 new logs [01-07-2022 22:48:01]4762: WAF :: fetched 1 new logs [01-07-2022 22:50:02]10202: WAF :: fetched 2 new logs [01-07-2022 22:51:01]12907: WAF :: fetched 2 new logs [01-07-2022 22:52:02]15551: WAF :: fetched 2 new logs [01-07-2022 22:53:01]18175: WAF :: fetched 2 new logs [01-07-2022 22:54:02]20923: WAF :: fetched 1 new logs [01-07-2022 22:56:01]26250: WAF :: fetched 1 new logs [01-07-2022 22:57:02]28911: WAF :: fetched 1 new logs [01-07-2022 22:58:01]31523: WAF :: fetched 10 new logs [01-07-2022 22:59:02]1857: WAF :: fetched 23 new logs [01-07-2022 23:00:01]4301: WAF :: fetched 24 new logs [01-07-2022 23:01:02]7478: WAF :: fetched 26 new logs [01-07-2022 23:02:02]10139: WAF :: fetched 23 new logs [01-07-2022 23:03:01]12788: WAF :: fetched 22 new logs [01-07-2022 23:04:02]15539: WAF :: fetched 25 new logs [01-07-2022 23:05:01]18159: WAF :: fetched 25 new logs [01-07-2022 23:06:01]20852: WAF :: fetched 26 new logs [01-07-2022 23:07:02]23541: WAF :: fetched 13 new logs [01-07-2022 23:07:45]23701: Performed RBL check for 23.111.136.34. [01-07-2022 23:09:02]28934: WAF :: fetched 1 new logs [01-07-2022 23:10:02]31575: WAF :: fetched 6 new logs [01-07-2022 23:12:02]4585: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656727922 [01-07-2022 23:12:02]4585: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-07-2022 23:12:04]4585: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-07-2022 23:12:04]4585: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220701/20220701-2312/20220701-231202-Yr-pcsCvJLDRGorJMeUo8gAAAAg [01-07-2022 23:12:04]4585: WAF :: No suitable log file found. Using SQLite.. [01-07-2022 23:12:05]4585: WAF :: fetched 374 new logs [01-07-2022 23:13:01]7257: WAF :: fetched 5 new logs [01-07-2022 23:14:01]10016: WAF :: fetched 7 new logs [01-07-2022 23:15:02]12682: WAF :: fetched 5 new logs [01-07-2022 23:16:01]15321: WAF :: fetched 1 new logs [01-07-2022 23:17:02]17992: WAF :: fetched 7 new logs [01-07-2022 23:20:02]26120: WAF :: fetched 4 new logs [01-07-2022 23:21:01]28801: WAF :: fetched 1 new logs [01-07-2022 23:22:02]31471: WAF :: fetched 3 new logs [01-07-2022 23:23:02]1709: WAF :: fetched 1 new logs [01-07-2022 23:24:01]4531: WAF :: fetched 1 new logs [01-07-2022 23:26:01]9920: WAF :: fetched 2 new logs [01-07-2022 23:27:02]12569: WAF :: fetched 1 new logs [01-07-2022 23:28:02]15164: WAF :: fetched 2 new logs [01-07-2022 23:29:01]17887: WAF :: fetched 148 new logs [01-07-2022 23:31:01]23222: WAF :: fetched 1 new logs [01-07-2022 23:32:02]25964: WAF :: fetched 1 new logs [01-07-2022 23:33:02]28595: WAF :: fetched 2 new logs [01-07-2022 23:34:01]31300: WAF :: fetched 1 new logs [01-07-2022 23:37:02]7059: WAF :: fetched 1 new logs [01-07-2022 23:41:02]17828: WAF :: fetched 2 new logs [01-07-2022 23:41:02]17828: Checking for user cron vulnerabilities [01-07-2022 23:43:01]23072: WAF :: fetched 1 new logs [01-07-2022 23:44:01]25793: Checking ditributed CMS bruteforce attacks [01-07-2022 23:44:02]25793: WAF :: fetched 1 new logs [01-07-2022 23:45:01]28487: WAF :: fetched 2 new logs [01-07-2022 23:47:02]1364: WAF :: fetched 2 new logs [01-07-2022 23:50:02]9578: WAF :: fetched 1 new logs [01-07-2022 23:53:02]17660: WAF :: fetched 1 new logs [01-07-2022 23:54:02]20421: WAF :: fetched 4 new logs [01-07-2022 23:55:01]24433: httpd.conf changed. Refreshing watchlist. [01-07-2022 23:55:01]24426: WAF :: fetched 54 new logs [01-07-2022 23:56:02]27141: WAF :: fetched 2 new logs [01-07-2022 23:57:02]29820: httpd.conf changed. Refreshing watchlist. [01-07-2022 23:58:02]32313: WAF :: fetched 1 new logs [02-07-2022 00:00:02]5264: WAF :: fetched 1 new logs [02-07-2022 00:01:05]8469: Sending daily report for July 2, 2022 [02-07-2022 00:04:02]16482: WAF :: fetched 1 new logs [02-07-2022 00:05:02]19200: WAF :: fetched 1 new logs [02-07-2022 00:05:02]19200: Deleted 0 entries older than 6 MONTH from scanner_logs [02-07-2022 00:05:02]19200: Deleted 0 files from Quarantine [02-07-2022 00:06:02]21908: WAF :: fetched 2 new logs [02-07-2022 00:07:01]24547: WAF :: fetched 1 new logs [02-07-2022 00:08:02]27183: WAF :: fetched 1 new logs [02-07-2022 00:12:02]5599: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656731522 [02-07-2022 00:12:02]5599: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 00:12:04]5599: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 00:12:04]5599: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-0012/20220702-001202-Yr-3gs-eFZis6SBAhu75NgAAAA0 [02-07-2022 00:12:04]5599: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 00:12:04]5599: WAF :: fetched 2 new logs [02-07-2022 00:16:02]16398: WAF :: fetched 2 new logs [02-07-2022 00:17:02]19118: WAF :: fetched 6 new logs [02-07-2022 00:18:01]21820: WAF :: fetched 2 new logs [02-07-2022 00:19:01]24511: WAF :: fetched 1 new logs [02-07-2022 00:20:02]27350: WAF :: fetched 5 new logs [02-07-2022 00:21:02]30114: WAF :: fetched 3 new logs [02-07-2022 00:22:01]362: WAF :: fetched 1 new logs [02-07-2022 00:27:01]13850: WAF :: fetched 1 new logs [02-07-2022 00:28:02]16498: WAF :: fetched 1 new logs [02-07-2022 00:31:02]24530: WAF :: fetched 1 new logs [02-07-2022 00:34:02]32421: WAF :: fetched 1 new logs [02-07-2022 00:35:01]2781: WAF :: fetched 4 new logs [02-07-2022 00:36:02]5568: WAF :: fetched 7 new logs [02-07-2022 00:38:02]10935: WAF :: fetched 2 new logs [02-07-2022 00:40:01]16280: WAF :: fetched 1 new logs [02-07-2022 00:41:02]18969: Checking for user cron vulnerabilities [02-07-2022 00:43:01]24273: WAF :: fetched 2 new logs [02-07-2022 00:44:02]26926: Checking ditributed CMS bruteforce attacks [02-07-2022 00:44:02]26926: WAF :: fetched 3 new logs [02-07-2022 00:45:01]: Checking for software updates [02-07-2022 01:12:02]6942: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656735122 [02-07-2022 01:12:02]6942: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 01:12:04]6942: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 01:12:04]6942: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-0112/20220702-011202-Yr_FksuimDabKWQtH9FazAAAAAY [02-07-2022 01:12:04]6942: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 01:41:01]23523: Checking for user cron vulnerabilities [02-07-2022 01:44:01]32288: Checking ditributed CMS bruteforce attacks [02-07-2022 01:45:01]: Checking for definition updates [02-07-2022 02:12:02]11128: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656738722 [02-07-2022 02:12:02]11128: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 02:12:04]11128: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 02:12:04]11128: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-0212/20220702-021202-Yr_TorF167OCo7MH6nXXUwAAAAI [02-07-2022 02:12:04]11128: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 02:41:02]22282: Checking for user cron vulnerabilities [02-07-2022 02:44:01]29974: Checking ditributed CMS bruteforce attacks [02-07-2022 02:53:02]21857: Updated license status via CDN [02-07-2022 03:00:03]8481: Found and updated 32 CMS installations [02-07-2022 03:02:23]8481: Sending CMS version vulnerability report emails to cpanel users [02-07-2022 03:02:26]8481: Checking wordpress installations for suspicious directories [02-07-2022 03:04:25]17418: Sending CMS version vulnerability report emails to cpanel users [02-07-2022 03:04:28]17418: Checking wordpress installations for suspicious directories [02-07-2022 03:12:02]10095: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656742322 [02-07-2022 03:12:02]10095: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 03:12:04]10095: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-0312/20220702-031202-Yr_hshOL5sm1rAT8S0AfDAAAAAQ [02-07-2022 03:12:04]10095: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 03:41:01]24082: Checking for user cron vulnerabilities [02-07-2022 03:44:01]32070: Checking ditributed CMS bruteforce attacks [02-07-2022 04:12:02]9132: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656745922 [02-07-2022 04:12:02]9132: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 04:12:04]9132: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 04:12:04]9132: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-0412/20220702-041202-Yr_vwqdyeFj9-sMs1iOlPAAAAA4 [02-07-2022 04:12:04]9132: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 04:41:02]19851: Checking for user cron vulnerabilities [02-07-2022 04:44:01]27612: Checking ditributed CMS bruteforce attacks [02-07-2022 05:01:41]7152: Starting daily scan on files updated in last 24 hrs [02-07-2022 05:12:01]3388: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656749521 [02-07-2022 05:12:01]3388: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 05:12:03]3388: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 05:12:04]3388: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-0512/20220702-051201-Yr_90R_gp3ZpHR-_JeJrWgAAABM [02-07-2022 05:12:04]3388: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 05:22:01]29343: WAF :: fetched 3 new logs [02-07-2022 05:24:02]2158: WAF :: fetched 1 new logs [02-07-2022 05:25:02]4785: WAF :: fetched 2 new logs [02-07-2022 05:29:02]15117: WAF :: fetched 1 new logs [02-07-2022 05:30:01]17661: WAF :: fetched 1 new logs [02-07-2022 05:31:01]20309: WAF :: fetched 5 new logs [02-07-2022 05:32:02]22909: WAF :: fetched 4 new logs [02-07-2022 05:33:02]25519: WAF :: fetched 1 new logs [02-07-2022 05:38:02]6260: WAF :: fetched 1 new logs [02-07-2022 05:40:02]11430: WAF :: fetched 8 new logs [02-07-2022 05:41:02]14010: WAF :: fetched 43 new logs [02-07-2022 05:41:02]14010: Checking for user cron vulnerabilities [02-07-2022 05:42:02]16557: WAF :: fetched 41 new logs [02-07-2022 05:43:01]19180: WAF :: fetched 44 new logs [02-07-2022 05:44:02]21736: Checking ditributed CMS bruteforce attacks [02-07-2022 05:44:02]21736: WAF :: fetched 40 new logs [02-07-2022 05:45:02]24255: WAF :: fetched 1 new logs [02-07-2022 05:48:01]32016: WAF :: fetched 2 new logs [02-07-2022 05:56:01]20339: WAF :: fetched 3 new logs [02-07-2022 05:59:02]28107: WAF :: fetched 1 new logs [02-07-2022 06:02:01]3628: WAF :: fetched 1 new logs [02-07-2022 06:04:02]8937: WAF :: fetched 1 new logs [02-07-2022 06:06:01]14103: WAF :: fetched 13 new logs [02-07-2022 06:10:02]24411: WAF :: fetched 1 new logs [02-07-2022 06:11:01]27022: WAF :: fetched 2 new logs [02-07-2022 06:12:01]29588: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656753121 [02-07-2022 06:12:01]29588: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 06:12:03]29588: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 06:12:04]29588: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-0612/20220702-061201-YsAL4dzV35TAR5qFqWu0cQAAAAk [02-07-2022 06:12:04]29588: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 06:12:04]29588: WAF :: fetched 2 new logs [02-07-2022 06:21:02]20620: WAF :: fetched 2 new logs [02-07-2022 06:26:02]1216: WAF :: fetched 1 new logs [02-07-2022 06:28:01]6620: WAF :: fetched 2 new logs [02-07-2022 06:31:02]14338: WAF :: fetched 1 new logs [02-07-2022 06:32:01]16897: WAF :: fetched 1 new logs [02-07-2022 06:36:01]27272: WAF :: fetched 2 new logs [02-07-2022 06:41:01]7941: WAF :: fetched 2 new logs [02-07-2022 06:41:01]7941: Checking for user cron vulnerabilities [02-07-2022 06:42:02]10525: WAF :: fetched 9 new logs [02-07-2022 06:43:02]13125: WAF :: fetched 7 new logs [02-07-2022 06:44:01]15687: Checking ditributed CMS bruteforce attacks [02-07-2022 06:44:02]15687: WAF :: fetched 5 new logs [02-07-2022 06:45:02]18234: WAF :: fetched 3 new logs [02-07-2022 06:47:01]23363: WAF :: fetched 1 new logs [02-07-2022 06:51:01]1326: WAF :: fetched 1 new logs [02-07-2022 06:53:01]6567: WAF :: fetched 4 new logs [02-07-2022 06:54:01]9124: WAF :: fetched 3 new logs [02-07-2022 06:55:02]11718: WAF :: fetched 1 new logs [02-07-2022 06:56:01]14313: WAF :: fetched 4 new logs [02-07-2022 06:57:02]16880: WAF :: fetched 1 new logs [02-07-2022 06:58:01]19488: WAF :: fetched 1 new logs [02-07-2022 07:02:02]29955: WAF :: fetched 3 new logs [02-07-2022 07:04:02]2788: WAF :: fetched 1 new logs [02-07-2022 07:06:02]8028: WAF :: fetched 1 new logs [02-07-2022 07:07:02]10562: WAF :: fetched 1 new logs [02-07-2022 07:10:02]18326: WAF :: fetched 2 new logs [02-07-2022 07:11:02]20918: WAF :: fetched 6 new logs [02-07-2022 07:12:01]23487: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656756721 [02-07-2022 07:12:01]23487: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 07:12:03]23487: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 07:12:03]23487: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-0712/20220702-071201-YsAZ8S79wh2tyt3Pi2q7tAAAAAk [02-07-2022 07:12:03]23487: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 07:12:04]23487: WAF :: fetched 3 new logs [02-07-2022 07:13:02]26134: WAF :: fetched 1 new logs [02-07-2022 07:14:01]28711: WAF :: fetched 3 new logs [02-07-2022 07:15:02]31301: WAF :: fetched 33 new logs [02-07-2022 07:17:01]4069: WAF :: fetched 1 new logs [02-07-2022 07:18:02]6727: WAF :: fetched 1 new logs [02-07-2022 07:20:01]11973: WAF :: fetched 9 new logs [02-07-2022 07:25:02]24948: WAF :: fetched 1 new logs [02-07-2022 07:26:01]27551: WAF :: fetched 28 new logs [02-07-2022 07:28:01]32669: WAF :: fetched 2 new logs [02-07-2022 07:31:01]8260: WAF :: fetched 10 new logs [02-07-2022 07:32:02]10855: WAF :: fetched 34 new logs [02-07-2022 07:33:01]13402: WAF :: fetched 72 new logs [02-07-2022 07:34:01]16107: WAF :: fetched 61 new logs [02-07-2022 07:35:02]18703: WAF :: fetched 45 new logs [02-07-2022 07:36:01]21301: WAF :: fetched 51 new logs [02-07-2022 07:37:02]23889: WAF :: fetched 39 new logs [02-07-2022 07:38:02]26488: WAF :: fetched 1 new logs [02-07-2022 07:39:01]29146: WAF :: fetched 9 new logs [02-07-2022 07:41:01]1965: WAF :: fetched 4 new logs [02-07-2022 07:41:01]1965: Checking for user cron vulnerabilities [02-07-2022 07:44:01]9870: Checking ditributed CMS bruteforce attacks [02-07-2022 07:44:01]9870: WAF :: fetched 2 new logs [02-07-2022 07:45:01]: Checking for definition updates [02-07-2022 07:46:01]15019: WAF :: fetched 1 new logs [02-07-2022 07:47:02]17656: WAF :: fetched 3 new logs [02-07-2022 07:48:01]20236: WAF :: fetched 1 new logs [02-07-2022 07:53:01]783: WAF :: fetched 1 new logs [02-07-2022 07:54:02]3468: WAF :: fetched 4 new logs [02-07-2022 07:59:02]16388: WAF :: fetched 1 new logs [02-07-2022 08:03:01]26902: WAF :: fetched 1 new logs [02-07-2022 08:04:02]29582: WAF :: fetched 1 new logs [02-07-2022 08:08:01]7556: WAF :: fetched 2 new logs [02-07-2022 08:09:02]10234: WAF :: fetched 1 new logs [02-07-2022 08:12:02]17948: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656760322 [02-07-2022 08:12:02]17948: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 08:12:04]17948: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 08:12:04]17948: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-0812/20220702-081202-YsAoAopmjiKkvmVPfq_wqAAAABQ [02-07-2022 08:12:04]17948: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [02-07-2022 08:12:05]17948: WAF :: fetched 1 new logs [02-07-2022 08:13:01]20521: WAF :: fetched 2 new logs [02-07-2022 08:18:01]1093: WAF :: fetched 1 new logs [02-07-2022 08:22:02]11631: WAF :: fetched 3 new logs [02-07-2022 08:24:02]16854: WAF :: fetched 3 new logs [02-07-2022 08:25:01]19410: WAF :: fetched 1 new logs [02-07-2022 08:26:02]22034: WAF :: fetched 1 new logs [02-07-2022 08:27:02]24569: WAF :: fetched 1 new logs [02-07-2022 08:31:02]2611: WAF :: fetched 3 new logs [02-07-2022 08:32:02]5210: WAF :: fetched 1 new logs [02-07-2022 08:34:02]10445: WAF :: fetched 1 new logs [02-07-2022 08:35:01]13025: WAF :: fetched 4 new logs [02-07-2022 08:36:01]15629: WAF :: fetched 2 new logs [02-07-2022 08:39:02]23596: WAF :: fetched 1 new logs [02-07-2022 08:40:02]26184: WAF :: fetched 1 new logs [02-07-2022 08:41:01]28766: WAF :: fetched 2 new logs [02-07-2022 08:41:01]28766: Checking for user cron vulnerabilities [02-07-2022 08:43:01]1473: WAF :: fetched 2 new logs [02-07-2022 08:44:02]4222: Checking ditributed CMS bruteforce attacks [02-07-2022 08:44:02]4222: WAF :: fetched 3 new logs [02-07-2022 08:45:02]6816: WAF :: fetched 7 new logs [02-07-2022 08:46:01]9441: WAF :: fetched 1 new logs [02-07-2022 08:47:02]12016: WAF :: fetched 1 new logs [02-07-2022 08:48:01]14532: WAF :: fetched 2 new logs [02-07-2022 08:49:02]17235: WAF :: fetched 1 new logs [02-07-2022 08:50:01]19808: WAF :: fetched 1 new logs [02-07-2022 08:51:01]22432: WAF :: fetched 3 new logs [02-07-2022 08:53:02]27549: WAF :: fetched 2 new logs [02-07-2022 08:54:01]30174: WAF :: fetched 3 new logs [02-07-2022 08:55:02]307: WAF :: fetched 2 new logs [02-07-2022 08:58:02]8211: WAF :: fetched 1 new logs [02-07-2022 08:59:01]10841: WAF :: fetched 3 new logs [02-07-2022 09:00:02]13130: WAF :: fetched 4 new logs [02-07-2022 09:01:02]16192: WAF :: fetched 4 new logs [02-07-2022 09:03:02]21394: WAF :: fetched 1 new logs [02-07-2022 09:04:01]24039: WAF :: fetched 1 new logs [02-07-2022 09:10:02]7403: WAF :: fetched 5 new logs [02-07-2022 09:11:01]10049: WAF :: fetched 1 new logs [02-07-2022 09:12:02]12736: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656763922 [02-07-2022 09:12:02]12736: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 09:12:04]12736: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 09:12:04]12736: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-0912/20220702-091202-YsA2EmrgCB9amxyzDl8kMQAAACQ [02-07-2022 09:12:04]12736: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 09:12:05]12736: WAF :: fetched 58 new logs [02-07-2022 09:13:02]15292: WAF :: fetched 1 new logs [02-07-2022 09:18:01]28262: WAF :: fetched 3 new logs [02-07-2022 09:19:02]30926: WAF :: fetched 1 new logs [02-07-2022 09:20:02]1094: WAF :: fetched 1 new logs [02-07-2022 09:21:02]3800: WAF :: fetched 1 new logs [02-07-2022 09:23:02]8967: WAF :: fetched 1 new logs [02-07-2022 09:25:01]14193: WAF :: fetched 3 new logs [02-07-2022 09:26:01]16793: WAF :: fetched 3 new logs [02-07-2022 09:28:02]22027: WAF :: fetched 4 new logs [02-07-2022 09:29:02]24679: WAF :: fetched 1 new logs [02-07-2022 09:31:01]29923: WAF :: fetched 3 new logs [02-07-2022 09:32:02]32564: WAF :: fetched 1 new logs [02-07-2022 09:35:02]8071: WAF :: fetched 3 new logs [02-07-2022 09:36:01]10698: WAF :: fetched 3 new logs [02-07-2022 09:37:02]13305: WAF :: fetched 1 new logs [02-07-2022 09:38:02]15889: WAF :: fetched 1 new logs [02-07-2022 09:39:01]18562: WAF :: fetched 1 new logs [02-07-2022 09:41:02]23806: WAF :: fetched 1 new logs [02-07-2022 09:41:02]23806: Checking for user cron vulnerabilities [02-07-2022 09:42:02]26416: WAF :: fetched 1 new logs [02-07-2022 09:43:02]28949: WAF :: fetched 1 new logs [02-07-2022 09:44:01]31616: Checking ditributed CMS bruteforce attacks [02-07-2022 09:44:02]31616: WAF :: fetched 1 new logs [02-07-2022 09:45:02]1797: WAF :: fetched 2 new logs [02-07-2022 09:46:01]4508: WAF :: fetched 3 new logs [02-07-2022 09:47:02]7083: WAF :: fetched 2 new logs [02-07-2022 09:48:01]9649: WAF :: fetched 7 new logs [02-07-2022 09:55:02]27896: WAF :: fetched 1 new logs [02-07-2022 09:56:02]30485: WAF :: fetched 1 new logs [02-07-2022 09:57:02]648: WAF :: fetched 1 new logs [02-07-2022 09:58:01]3246: WAF :: fetched 2 new logs [02-07-2022 09:59:02]5990: WAF :: fetched 12 new logs [02-07-2022 10:00:01]8279: WAF :: fetched 16 new logs [02-07-2022 10:01:02]11338: WAF :: fetched 19 new logs [02-07-2022 10:02:02]13933: WAF :: fetched 22 new logs [02-07-2022 10:03:02]16477: WAF :: fetched 15 new logs [02-07-2022 10:04:01]19100: WAF :: fetched 1 new logs [02-07-2022 10:05:02]21757: WAF :: fetched 2 new logs [02-07-2022 10:08:01]29573: WAF :: fetched 1 new logs [02-07-2022 10:09:02]32267: WAF :: fetched 1 new logs [02-07-2022 10:10:02]2451: WAF :: fetched 5 new logs [02-07-2022 10:11:02]5183: WAF :: fetched 2 new logs [02-07-2022 10:12:02]7847: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656767522 [02-07-2022 10:12:02]7847: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 10:12:04]7847: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 10:12:04]7847: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-1012/20220702-101202-YsBEIqiJ3Pp9kzcGZjjRFgAAABY [02-07-2022 10:12:04]7847: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 10:12:04]7847: WAF :: fetched 1 new logs [02-07-2022 10:13:01]10417: WAF :: fetched 2 new logs [02-07-2022 10:14:02]13365: httpd.conf changed. Refreshing watchlist. [02-07-2022 10:14:02]13364: WAF :: fetched 12 new logs [02-07-2022 10:17:02]21119: WAF :: fetched 1 new logs [02-07-2022 10:18:01]23730: WAF :: fetched 5 new logs [02-07-2022 10:20:02]28996: WAF :: fetched 3 new logs [02-07-2022 10:22:02]1798: WAF :: fetched 1 new logs [02-07-2022 10:23:02]4465: WAF :: fetched 2 new logs [02-07-2022 10:25:02]9826: WAF :: fetched 2 new logs [02-07-2022 10:29:02]20270: WAF :: fetched 1 new logs [02-07-2022 10:30:02]22886: WAF :: fetched 1 new logs [02-07-2022 10:31:02]25523: WAF :: fetched 1 new logs [02-07-2022 10:33:02]30752: WAF :: fetched 1 new logs [02-07-2022 10:34:01]1007: WAF :: fetched 1 new logs [02-07-2022 10:36:02]6366: WAF :: fetched 2 new logs [02-07-2022 10:37:02]8928: WAF :: fetched 1 new logs [02-07-2022 10:39:01]14306: WAF :: fetched 1 new logs [02-07-2022 10:41:02]19582: Checking for user cron vulnerabilities [02-07-2022 10:42:02]22203: WAF :: fetched 1 new logs [02-07-2022 10:43:02]24809: WAF :: fetched 1 new logs [02-07-2022 10:44:01]27509: Checking ditributed CMS bruteforce attacks [02-07-2022 10:44:01]27509: WAF :: fetched 1 new logs [02-07-2022 10:45:02]30085: WAF :: fetched 3 new logs [02-07-2022 10:46:02]32698: WAF :: fetched 1 new logs [02-07-2022 10:48:02]5610: WAF :: fetched 1 new logs [02-07-2022 10:49:01]8291: WAF :: fetched 2 new logs [02-07-2022 10:50:01]10880: WAF :: fetched 2 new logs [02-07-2022 10:53:02]18717: WAF :: fetched 2 new logs [02-07-2022 10:54:02]21556: httpd.conf changed. Refreshing watchlist. [02-07-2022 10:54:02]21558: WAF :: fetched 1 new logs [02-07-2022 10:56:01]26906: WAF :: fetched 9 new logs [02-07-2022 10:58:02]32094: WAF :: fetched 2 new logs [02-07-2022 11:00:01]4800: WAF :: fetched 2 new logs [02-07-2022 11:01:01]7928: WAF :: fetched 5 new logs [02-07-2022 11:02:02]10594: WAF :: fetched 5 new logs [02-07-2022 11:07:01]23949: WAF :: fetched 1 new logs [02-07-2022 11:07:48]24102: Performed RBL check for 23.111.136.34. [02-07-2022 11:09:02]29217: WAF :: fetched 3 new logs [02-07-2022 11:10:02]31803: WAF :: fetched 4 new logs [02-07-2022 11:11:02]2063: WAF :: fetched 1 new logs [02-07-2022 11:12:02]4797: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656771122 [02-07-2022 11:12:02]4797: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 11:12:04]4797: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 11:12:04]4797: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-1112/20220702-111202-YsBSMmrpjm2AyoeUEgRMXgAAABU [02-07-2022 11:12:04]4797: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 11:12:04]4797: WAF :: fetched 4 new logs [02-07-2022 11:13:01]7459: WAF :: fetched 5 new logs [02-07-2022 11:14:02]10150: WAF :: fetched 1 new logs [02-07-2022 11:15:02]12733: WAF :: fetched 2 new logs [02-07-2022 11:16:02]15409: WAF :: fetched 2 new logs [02-07-2022 11:18:01]20662: WAF :: fetched 2 new logs [02-07-2022 11:19:02]23415: WAF :: fetched 2 new logs [02-07-2022 11:20:02]26046: WAF :: fetched 1 new logs [02-07-2022 11:21:02]28713: WAF :: fetched 4 new logs [02-07-2022 11:22:02]31298: WAF :: fetched 2 new logs [02-07-2022 11:23:01]1536: WAF :: fetched 2 new logs [02-07-2022 11:24:01]4337: WAF :: fetched 1 new logs [02-07-2022 11:25:02]7073: WAF :: fetched 11 new logs [02-07-2022 11:27:01]12459: WAF :: fetched 1 new logs [02-07-2022 11:28:01]15053: WAF :: fetched 2 new logs [02-07-2022 11:29:02]17785: WAF :: fetched 3 new logs [02-07-2022 11:30:02]20426: WAF :: fetched 1 new logs [02-07-2022 11:32:01]25786: WAF :: fetched 4 new logs [02-07-2022 11:34:02]31085: WAF :: fetched 1 new logs [02-07-2022 11:37:01]6659: WAF :: fetched 1 new logs [02-07-2022 11:41:02]17301: WAF :: fetched 7 new logs [02-07-2022 11:41:02]17301: Checking for user cron vulnerabilities [02-07-2022 11:42:02]19964: WAF :: fetched 2 new logs [02-07-2022 11:43:02]22600: WAF :: fetched 3 new logs [02-07-2022 11:44:01]25292: Checking ditributed CMS bruteforce attacks [02-07-2022 11:44:02]25292: WAF :: fetched 2 new logs [02-07-2022 11:45:02]27908: WAF :: fetched 2 new logs [02-07-2022 11:46:01]30533: WAF :: fetched 3 new logs [02-07-2022 11:47:01]716: WAF :: fetched 3 new logs [02-07-2022 11:49:02]6090: WAF :: fetched 3 new logs [02-07-2022 11:52:02]13900: WAF :: fetched 8 new logs [02-07-2022 11:53:02]16461: WAF :: fetched 5 new logs [02-07-2022 11:54:02]19110: WAF :: fetched 2 new logs [02-07-2022 11:55:01]21736: WAF :: fetched 2 new logs [02-07-2022 11:56:02]24377: WAF :: fetched 4 new logs [02-07-2022 11:57:01]26927: WAF :: fetched 5 new logs [02-07-2022 11:58:02]29505: WAF :: fetched 3 new logs [02-07-2022 12:00:02]2034: WAF :: fetched 4 new logs [02-07-2022 12:01:02]5191: WAF :: fetched 1 new logs [02-07-2022 12:05:02]15580: WAF :: fetched 1 new logs [02-07-2022 12:08:02]23329: WAF :: fetched 1 new logs [02-07-2022 12:12:01]1316: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656774721 [02-07-2022 12:12:01]1316: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 12:12:03]1316: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 12:12:04]1316: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-1212/20220702-121201-YsBgQfMNhFEqFerv0j_cvQAAAAw [02-07-2022 12:12:04]1316: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 12:12:04]1316: WAF :: fetched 3 new logs [02-07-2022 12:13:01]4406: WAF :: fetched 4 new logs [02-07-2022 12:14:01]7336: WAF :: fetched 6 new logs [02-07-2022 12:15:01]9982: WAF :: fetched 1 new logs [02-07-2022 12:16:02]12682: WAF :: fetched 1 new logs [02-07-2022 12:17:02]15275: WAF :: fetched 1 new logs [02-07-2022 12:22:02]28332: WAF :: fetched 1 new logs [02-07-2022 12:23:02]30921: WAF :: fetched 2 new logs [02-07-2022 12:24:01]1085: WAF :: fetched 3 new logs [02-07-2022 12:26:01]6438: WAF :: fetched 2 new logs [02-07-2022 12:27:02]9028: WAF :: fetched 3 new logs [02-07-2022 12:28:02]11582: WAF :: fetched 3 new logs [02-07-2022 12:31:01]19479: WAF :: fetched 1 new logs [02-07-2022 12:32:02]22141: WAF :: fetched 15 new logs [02-07-2022 12:33:02]24712: WAF :: fetched 17 new logs [02-07-2022 12:34:01]27343: WAF :: fetched 20 new logs [02-07-2022 12:35:02]30034: WAF :: fetched 18 new logs [02-07-2022 12:36:02]32667: WAF :: fetched 21 new logs [02-07-2022 12:37:02]2867: WAF :: fetched 9 new logs [02-07-2022 12:38:01]5635: WAF :: fetched 30 new logs [02-07-2022 12:39:01]8224: WAF :: fetched 121 new logs [02-07-2022 12:40:01]10883: WAF :: fetched 123 new logs [02-07-2022 12:41:01]13516: WAF :: fetched 107 new logs [02-07-2022 12:41:01]13516: Checking for user cron vulnerabilities [02-07-2022 12:42:02]16099: WAF :: fetched 122 new logs [02-07-2022 12:43:01]18721: WAF :: fetched 119 new logs [02-07-2022 12:44:01]21313: Checking ditributed CMS bruteforce attacks [02-07-2022 12:44:01]21313: WAF :: fetched 115 new logs [02-07-2022 12:45:01]: Checking for software updates [02-07-2022 12:45:02]24091: WAF :: fetched 159 new logs [02-07-2022 12:46:02]26811: WAF :: fetched 51 new logs [02-07-2022 12:47:01]29435: WAF :: fetched 191 new logs [02-07-2022 12:48:02]32070: WAF :: fetched 189 new logs [02-07-2022 12:49:02]2354: WAF :: fetched 182 new logs [02-07-2022 12:50:02]5119: WAF :: fetched 160 new logs [02-07-2022 12:51:02]7844: WAF :: fetched 107 new logs [02-07-2022 12:52:02]10410: WAF :: fetched 123 new logs [02-07-2022 12:53:01]13050: WAF :: fetched 98 new logs [02-07-2022 12:54:02]15721: WAF :: fetched 46 new logs [02-07-2022 12:55:02]18452: WAF :: fetched 160 new logs [02-07-2022 12:56:02]21171: WAF :: fetched 147 new logs [02-07-2022 12:57:02]23933: WAF :: fetched 143 new logs [02-07-2022 12:58:01]26523: WAF :: fetched 83 new logs [02-07-2022 12:59:01]29161: WAF :: fetched 80 new logs [02-07-2022 13:00:02]31604: WAF :: fetched 55 new logs [02-07-2022 13:01:02]2333: WAF :: fetched 66 new logs [02-07-2022 13:02:02]5118: WAF :: fetched 84 new logs [02-07-2022 13:03:01]7743: WAF :: fetched 41 new logs [02-07-2022 13:04:01]10374: WAF :: fetched 49 new logs [02-07-2022 13:05:02]13105: WAF :: fetched 52 new logs [02-07-2022 13:06:02]15737: WAF :: fetched 32 new logs [02-07-2022 13:07:02]18381: WAF :: fetched 15 new logs [02-07-2022 13:08:01]21046: WAF :: fetched 93 new logs [02-07-2022 13:09:02]23786: WAF :: fetched 94 new logs [02-07-2022 13:10:01]26423: WAF :: fetched 39 new logs [02-07-2022 13:11:02]29155: WAF :: fetched 1 new logs [02-07-2022 13:12:01]31706: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656778321 [02-07-2022 13:12:03]31706: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 13:12:05]31706: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 13:12:05]31706: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-1312/20220702-131203-YsBuU5Z_GqQdVZQhGGzVKAAAAAw [02-07-2022 13:12:05]31706: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 13:12:05]31706: WAF :: fetched 2 new logs [02-07-2022 13:13:01]1894: WAF :: fetched 1 new logs [02-07-2022 13:15:01]7365: WAF :: fetched 3 new logs [02-07-2022 13:16:01]10015: WAF :: fetched 2 new logs [02-07-2022 13:18:02]15207: WAF :: fetched 16 new logs [02-07-2022 13:21:01]23211: WAF :: fetched 2 new logs [02-07-2022 13:23:02]28470: WAF :: fetched 3 new logs [02-07-2022 13:26:01]4020: WAF :: fetched 2 new logs [02-07-2022 13:28:02]9240: WAF :: fetched 3 new logs [02-07-2022 13:30:02]14604: WAF :: fetched 1 new logs [02-07-2022 13:31:01]17242: WAF :: fetched 1 new logs [02-07-2022 13:34:02]25136: WAF :: fetched 3 new logs [02-07-2022 13:35:02]27810: WAF :: fetched 5 new logs [02-07-2022 13:36:01]30466: WAF :: fetched 6 new logs [02-07-2022 13:37:02]713: WAF :: fetched 2 new logs [02-07-2022 13:39:02]6116: WAF :: fetched 2 new logs [02-07-2022 13:40:01]8879: WAF :: fetched 2 new logs [02-07-2022 13:41:01]11514: WAF :: fetched 3 new logs [02-07-2022 13:41:01]11514: Checking for user cron vulnerabilities [02-07-2022 13:42:02]14150: WAF :: fetched 5 new logs [02-07-2022 13:43:02]16725: WAF :: fetched 2 new logs [02-07-2022 13:44:01]19341: Checking ditributed CMS bruteforce attacks [02-07-2022 13:44:01]19341: WAF :: fetched 1 new logs [02-07-2022 13:45:01]: Checking for definition updates [02-07-2022 13:45:02]22076: WAF :: fetched 2 new logs [02-07-2022 13:46:01]24711: WAF :: fetched 2 new logs [02-07-2022 13:47:02]27348: WAF :: fetched 1 new logs [02-07-2022 13:53:02]10952: WAF :: fetched 1 new logs [02-07-2022 13:56:01]18973: WAF :: fetched 1 new logs [02-07-2022 13:57:02]21618: WAF :: fetched 1 new logs [02-07-2022 13:59:02]26900: WAF :: fetched 27 new logs [02-07-2022 14:01:02]32459: WAF :: fetched 2 new logs [02-07-2022 14:02:02]2711: WAF :: fetched 1 new logs [02-07-2022 14:03:02]5393: WAF :: fetched 1 new logs [02-07-2022 14:04:01]8036: WAF :: fetched 1 new logs [02-07-2022 14:05:02]10742: WAF :: fetched 2 new logs [02-07-2022 14:06:02]13406: WAF :: fetched 22 new logs [02-07-2022 14:07:01]15971: WAF :: fetched 15 new logs [02-07-2022 14:09:02]21189: WAF :: fetched 4 new logs [02-07-2022 14:10:01]23894: WAF :: fetched 1 new logs [02-07-2022 14:12:02]29183: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656781922 [02-07-2022 14:12:02]29183: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 14:12:04]29183: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 14:12:04]29183: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-1412/20220702-141202-YsB8Yg3Dh3Hu29IFqIfD5AAAAB0 [02-07-2022 14:12:04]29183: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 14:12:04]29183: WAF :: fetched 4 new logs [02-07-2022 14:13:02]31765: WAF :: fetched 2 new logs [02-07-2022 14:14:01]1981: WAF :: fetched 1 new logs [02-07-2022 14:16:02]7431: WAF :: fetched 1 new logs [02-07-2022 14:17:01]10027: WAF :: fetched 1 new logs [02-07-2022 14:18:01]12673: WAF :: fetched 9 new logs [02-07-2022 14:19:02]15288: WAF :: fetched 5 new logs [02-07-2022 14:20:01]17607: WAF :: fetched 1 new logs [02-07-2022 14:23:02]25911: WAF :: fetched 1 new logs [02-07-2022 14:28:02]6719: WAF :: fetched 2 new logs [02-07-2022 14:29:01]9295: WAF :: fetched 4 new logs [02-07-2022 14:31:01]14344: WAF :: fetched 6 new logs [02-07-2022 14:33:01]19913: WAF :: fetched 2 new logs [02-07-2022 14:34:02]22568: WAF :: fetched 2 new logs [02-07-2022 14:35:02]25242: WAF :: fetched 3 new logs [02-07-2022 14:36:01]27881: WAF :: fetched 3 new logs [02-07-2022 14:37:02]30517: WAF :: fetched 2 new logs [02-07-2022 14:38:01]677: WAF :: fetched 2 new logs [02-07-2022 14:39:02]3376: WAF :: fetched 1 new logs [02-07-2022 14:40:02]6093: WAF :: fetched 2 new logs [02-07-2022 14:41:01]8756: WAF :: fetched 3 new logs [02-07-2022 14:41:01]8756: Checking for user cron vulnerabilities [02-07-2022 14:42:02]11358: WAF :: fetched 2 new logs [02-07-2022 14:43:01]13934: WAF :: fetched 5 new logs [02-07-2022 14:44:02]16598: Checking ditributed CMS bruteforce attacks [02-07-2022 14:44:02]16598: WAF :: fetched 6 new logs [02-07-2022 14:45:02]19261: WAF :: fetched 5 new logs [02-07-2022 14:46:01]21915: WAF :: fetched 4 new logs [02-07-2022 14:47:02]24573: WAF :: fetched 1 new logs [02-07-2022 14:48:02]27156: WAF :: fetched 4 new logs [02-07-2022 14:49:01]29735: WAF :: fetched 4 new logs [02-07-2022 14:50:02]32433: WAF :: fetched 2 new logs [02-07-2022 14:51:01]2671: WAF :: fetched 1 new logs [02-07-2022 14:52:02]5397: WAF :: fetched 1 new logs [02-07-2022 14:53:02]7958: WAF :: fetched 4 new logs [02-07-2022 14:53:02]7966: Updated license status via CDN [02-07-2022 14:54:01]10546: WAF :: fetched 2 new logs [02-07-2022 14:55:02]13264: WAF :: fetched 3 new logs [02-07-2022 14:57:02]18505: WAF :: fetched 2 new logs [02-07-2022 14:58:02]21106: WAF :: fetched 2 new logs [02-07-2022 14:59:01]23686: WAF :: fetched 2 new logs [02-07-2022 15:01:01]29148: Reseting cPGuard inotify settings [02-07-2022 15:01:01]29149: WAF :: fetched 6 new logs [02-07-2022 15:02:02]31806: WAF :: fetched 2 new logs [02-07-2022 15:03:02]1938: WAF :: fetched 3 new logs [02-07-2022 15:04:01]4610: WAF :: fetched 1 new logs [02-07-2022 15:05:02]7317: WAF :: fetched 1 new logs [02-07-2022 15:09:01]17686: WAF :: fetched 1 new logs [02-07-2022 15:10:02]20395: WAF :: fetched 1 new logs [02-07-2022 15:11:01]23052: WAF :: fetched 1 new logs [02-07-2022 15:12:02]25652: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656785522 [02-07-2022 15:12:02]25652: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 15:12:04]25652: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 15:12:04]25652: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-1512/20220702-151202-YsCKcq-hQKQpyAvlwZgidAAAABE [02-07-2022 15:12:04]25652: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 15:12:04]25652: WAF :: fetched 1 new logs [02-07-2022 15:13:01]28263: WAF :: fetched 1 new logs [02-07-2022 15:14:02]30861: WAF :: fetched 4 new logs [02-07-2022 15:15:01]1074: WAF :: fetched 2 new logs [02-07-2022 15:16:02]3861: WAF :: fetched 3 new logs [02-07-2022 15:18:01]9071: WAF :: fetched 1 new logs [02-07-2022 15:19:01]11664: WAF :: fetched 1 new logs [02-07-2022 15:20:01]14372: WAF :: fetched 2 new logs [02-07-2022 15:23:01]22242: WAF :: fetched 1 new logs [02-07-2022 15:26:01]30179: WAF :: fetched 2 new logs [02-07-2022 15:27:02]328: WAF :: fetched 1 new logs [02-07-2022 15:28:01]2959: WAF :: fetched 1 new logs [02-07-2022 15:29:02]5662: WAF :: fetched 1 new logs [02-07-2022 15:30:02]8346: WAF :: fetched 2 new logs [02-07-2022 15:31:02]10983: WAF :: fetched 2 new logs [02-07-2022 15:32:02]13587: WAF :: fetched 2 new logs [02-07-2022 15:34:02]18797: WAF :: fetched 1 new logs [02-07-2022 15:35:01]21480: WAF :: fetched 3 new logs [02-07-2022 15:37:02]26756: WAF :: fetched 2 new logs [02-07-2022 15:39:02]31986: WAF :: fetched 1 new logs [02-07-2022 15:41:01]4975: Checking for user cron vulnerabilities [02-07-2022 15:44:01]12776: Checking ditributed CMS bruteforce attacks [02-07-2022 15:44:01]12776: WAF :: fetched 2 new logs [02-07-2022 15:45:02]15480: WAF :: fetched 1 new logs [02-07-2022 15:48:01]23152: WAF :: fetched 1 new logs [02-07-2022 15:50:02]28438: WAF :: fetched 3 new logs [02-07-2022 15:52:02]1295: WAF :: fetched 2 new logs [02-07-2022 15:53:02]3943: WAF :: fetched 1 new logs [02-07-2022 15:54:01]6559: WAF :: fetched 2 new logs [02-07-2022 15:55:02]9300: WAF :: fetched 30 new logs [02-07-2022 15:56:01]11919: WAF :: fetched 8 new logs [02-07-2022 15:57:02]14572: WAF :: fetched 3 new logs [02-07-2022 15:58:01]16923: WAF :: fetched 2 new logs [02-07-2022 15:59:02]19824: WAF :: fetched 3 new logs [02-07-2022 16:01:01]25308: WAF :: fetched 2 new logs [02-07-2022 16:02:02]27978: WAF :: fetched 5 new logs [02-07-2022 16:03:01]30520: WAF :: fetched 7 new logs [02-07-2022 16:04:02]741: WAF :: fetched 5 new logs [02-07-2022 16:05:02]3490: WAF :: fetched 4 new logs [02-07-2022 16:06:01]6193: WAF :: fetched 1 new logs [02-07-2022 16:07:02]8836: WAF :: fetched 3 new logs [02-07-2022 16:08:02]11453: WAF :: fetched 1 new logs [02-07-2022 16:09:01]14046: WAF :: fetched 2 new logs [02-07-2022 16:11:02]19401: WAF :: fetched 3 new logs [02-07-2022 16:12:01]22014: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656789121 [02-07-2022 16:12:01]22014: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 16:12:03]22014: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 16:12:03]22014: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-1612/20220702-161201-YsCYgV11KCLUzdJgfMo8VAAAAAs [02-07-2022 16:12:03]22014: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 16:12:04]22014: WAF :: fetched 2 new logs [02-07-2022 16:13:02]24637: WAF :: fetched 1 new logs [02-07-2022 16:15:01]29901: WAF :: fetched 1 new logs [02-07-2022 16:17:02]2736: WAF :: fetched 3 new logs [02-07-2022 16:18:01]5405: WAF :: fetched 1 new logs [02-07-2022 16:20:01]10688: WAF :: fetched 1 new logs [02-07-2022 16:21:02]13384: WAF :: fetched 1 new logs [02-07-2022 16:22:02]15940: WAF :: fetched 2 new logs [02-07-2022 16:23:01]18521: WAF :: fetched 3 new logs [02-07-2022 16:24:01]21141: WAF :: fetched 2 new logs [02-07-2022 16:27:02]29074: WAF :: fetched 1 new logs [02-07-2022 16:28:01]31657: WAF :: fetched 1 new logs [02-07-2022 16:29:02]1849: WAF :: fetched 3 new logs [02-07-2022 16:32:02]9878: WAF :: fetched 1 new logs [02-07-2022 16:34:02]15048: WAF :: fetched 1 new logs [02-07-2022 16:35:01]17594: WAF :: fetched 1 new logs [02-07-2022 16:36:02]20355: WAF :: fetched 2 new logs [02-07-2022 16:37:01]22913: WAF :: fetched 3 new logs [02-07-2022 16:38:01]25603: WAF :: fetched 4 new logs [02-07-2022 16:39:02]28204: WAF :: fetched 1 new logs [02-07-2022 16:40:01]30871: WAF :: fetched 1 new logs [02-07-2022 16:41:02]1085: Checking for user cron vulnerabilities [02-07-2022 16:42:02]3685: WAF :: fetched 1 new logs [02-07-2022 16:43:01]6356: WAF :: fetched 2 new logs [02-07-2022 16:44:02]8970: Checking ditributed CMS bruteforce attacks [02-07-2022 16:44:02]8970: WAF :: fetched 2 new logs [02-07-2022 16:45:02]11598: WAF :: fetched 1 new logs [02-07-2022 16:47:02]16839: WAF :: fetched 2 new logs [02-07-2022 16:48:01]19421: WAF :: fetched 1 new logs [02-07-2022 16:49:02]22186: WAF :: fetched 1 new logs [02-07-2022 16:50:02]24922: WAF :: fetched 1 new logs [02-07-2022 16:51:01]27665: WAF :: fetched 4 new logs [02-07-2022 16:52:02]30330: WAF :: fetched 4 new logs [02-07-2022 16:53:01]497: WAF :: fetched 2 new logs [02-07-2022 16:54:01]3237: WAF :: fetched 2 new logs [02-07-2022 16:55:02]6007: WAF :: fetched 1 new logs [02-07-2022 16:56:01]8643: WAF :: fetched 3 new logs [02-07-2022 16:57:02]11411: WAF :: fetched 2 new logs [02-07-2022 16:58:02]14084: WAF :: fetched 3 new logs [02-07-2022 17:00:01]19231: WAF :: fetched 1 new logs [02-07-2022 17:01:02]22445: WAF :: fetched 2 new logs [02-07-2022 17:03:01]27783: WAF :: fetched 4 new logs [02-07-2022 17:04:02]30413: WAF :: fetched 6 new logs [02-07-2022 17:06:02]3397: WAF :: fetched 1 new logs [02-07-2022 17:07:02]6024: WAF :: fetched 2 new logs [02-07-2022 17:08:01]8614: WAF :: fetched 1 new logs [02-07-2022 17:12:02]19142: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656792722 [02-07-2022 17:12:02]19142: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 17:12:04]19142: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 17:12:04]19142: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-1712/20220702-171202-YsCmkjmqhss3pLnue5NE4QAAAB0 [02-07-2022 17:12:04]19142: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 17:12:04]19142: WAF :: fetched 2 new logs [02-07-2022 17:13:02]21729: WAF :: fetched 2 new logs [02-07-2022 17:14:01]24350: WAF :: fetched 18 new logs [02-07-2022 17:16:02]29588: WAF :: fetched 1 new logs [02-07-2022 17:17:01]32202: WAF :: fetched 1 new logs [02-07-2022 17:20:02]7726: WAF :: fetched 1 new logs [02-07-2022 17:21:02]10433: WAF :: fetched 1 new logs [02-07-2022 17:22:01]13031: WAF :: fetched 1 new logs [02-07-2022 17:25:02]20890: WAF :: fetched 14 new logs [02-07-2022 17:26:01]23632: WAF :: fetched 5 new logs [02-07-2022 17:27:02]26278: WAF :: fetched 1 new logs [02-07-2022 17:28:02]28872: WAF :: fetched 2 new logs [02-07-2022 17:31:02]4575: WAF :: fetched 1 new logs [02-07-2022 17:32:01]7267: WAF :: fetched 2 new logs [02-07-2022 17:33:02]9906: WAF :: fetched 1 new logs [02-07-2022 17:37:01]20519: WAF :: fetched 1 new logs [02-07-2022 17:40:02]28465: WAF :: fetched 2 new logs [02-07-2022 17:41:02]31173: WAF :: fetched 2 new logs [02-07-2022 17:41:02]31173: Checking for user cron vulnerabilities [02-07-2022 17:43:01]4082: WAF :: fetched 2 new logs [02-07-2022 17:44:01]6807: Checking ditributed CMS bruteforce attacks [02-07-2022 17:44:02]6807: WAF :: fetched 4 new logs [02-07-2022 17:45:02]9402: WAF :: fetched 2 new logs [02-07-2022 17:46:02]12159: WAF :: fetched 6 new logs [02-07-2022 17:47:01]14806: WAF :: fetched 13 new logs [02-07-2022 17:48:02]17439: WAF :: fetched 1 new logs [02-07-2022 17:50:02]22690: WAF :: fetched 1 new logs [02-07-2022 17:52:01]28026: WAF :: fetched 1 new logs [02-07-2022 17:55:02]3540: WAF :: fetched 1 new logs [02-07-2022 17:58:02]11571: WAF :: fetched 1 new logs [02-07-2022 17:59:01]14170: WAF :: fetched 1 new logs [02-07-2022 18:00:02]16515: WAF :: fetched 2 new logs [02-07-2022 18:03:02]25086: WAF :: fetched 1 new logs [02-07-2022 18:07:01]3213: WAF :: fetched 2 new logs [02-07-2022 18:08:02]5970: WAF :: fetched 1 new logs [02-07-2022 18:10:01]11196: WAF :: fetched 1 new logs [02-07-2022 18:11:02]13980: WAF :: fetched 4 new logs [02-07-2022 18:12:01]16584: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656796321 [02-07-2022 18:12:01]16584: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 18:12:03]16584: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 18:12:04]16584: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-1812/20220702-181201-YsC0ofAMQhmlXm9Ri_gDMAAAAC0 [02-07-2022 18:12:04]16584: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 18:12:04]16584: WAF :: fetched 2 new logs [02-07-2022 18:13:02]19284: WAF :: fetched 5 new logs [02-07-2022 18:14:01]21875: WAF :: fetched 1 new logs [02-07-2022 18:15:02]24561: WAF :: fetched 3 new logs [02-07-2022 18:17:02]29952: WAF :: fetched 1 new logs [02-07-2022 18:18:02]32563: WAF :: fetched 38 new logs [02-07-2022 18:19:01]2787: WAF :: fetched 47 new logs [02-07-2022 18:20:02]5509: WAF :: fetched 41 new logs [02-07-2022 18:21:02]8273: WAF :: fetched 39 new logs [02-07-2022 18:22:01]10883: WAF :: fetched 16 new logs [02-07-2022 18:26:02]21414: WAF :: fetched 3 new logs [02-07-2022 18:28:01]26581: WAF :: fetched 1 new logs [02-07-2022 18:29:02]29223: WAF :: fetched 4 new logs [02-07-2022 18:30:01]31815: WAF :: fetched 34 new logs [02-07-2022 18:31:02]2182: WAF :: fetched 1 new logs [02-07-2022 18:32:01]4878: WAF :: fetched 2 new logs [02-07-2022 18:33:02]7533: WAF :: fetched 3 new logs [02-07-2022 18:34:01]10123: WAF :: fetched 1 new logs [02-07-2022 18:35:02]12753: WAF :: fetched 1 new logs [02-07-2022 18:36:02]15534: WAF :: fetched 2 new logs [02-07-2022 18:37:01]18122: WAF :: fetched 1 new logs [02-07-2022 18:39:02]23418: WAF :: fetched 4 new logs [02-07-2022 18:40:01]26036: WAF :: fetched 1 new logs [02-07-2022 18:41:02]28793: Checking for user cron vulnerabilities [02-07-2022 18:42:02]31413: WAF :: fetched 4 new logs [02-07-2022 18:44:02]4258: Checking ditributed CMS bruteforce attacks [02-07-2022 18:44:02]4258: WAF :: fetched 2 new logs [02-07-2022 18:51:01]22783: WAF :: fetched 2 new logs [02-07-2022 18:52:02]25384: WAF :: fetched 2 new logs [02-07-2022 18:53:01]27965: WAF :: fetched 1 new logs [02-07-2022 18:54:02]30567: WAF :: fetched 5 new logs [02-07-2022 18:56:01]3488: WAF :: fetched 2 new logs [02-07-2022 18:57:02]6169: WAF :: fetched 2 new logs [02-07-2022 19:02:02]19443: WAF :: fetched 1 new logs [02-07-2022 19:03:01]22071: WAF :: fetched 1 new logs [02-07-2022 19:04:01]24655: WAF :: fetched 3 new logs [02-07-2022 19:05:02]27297: WAF :: fetched 1 new logs [02-07-2022 19:06:01]29963: WAF :: fetched 1 new logs [02-07-2022 19:08:02]2763: WAF :: fetched 3 new logs [02-07-2022 19:12:01]13321: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656799921 [02-07-2022 19:12:01]13321: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 19:12:03]13321: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 19:12:03]13321: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-1912/20220702-191201-YsDCsQqFRAUJsvQxtts7rAAAABI [02-07-2022 19:12:03]13321: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 19:12:04]13321: WAF :: fetched 2 new logs [02-07-2022 19:14:01]18528: WAF :: fetched 1 new logs [02-07-2022 19:15:02]21217: WAF :: fetched 3 new logs [02-07-2022 19:19:02]31741: WAF :: fetched 5 new logs [02-07-2022 19:20:01]1934: WAF :: fetched 1 new logs [02-07-2022 19:21:02]4763: WAF :: fetched 1 new logs [02-07-2022 19:22:02]7350: WAF :: fetched 1 new logs [02-07-2022 19:24:02]12531: WAF :: fetched 1 new logs [02-07-2022 19:29:02]25587: WAF :: fetched 2 new logs [02-07-2022 19:30:01]28162: WAF :: fetched 1 new logs [02-07-2022 19:32:02]1067: WAF :: fetched 1 new logs [02-07-2022 19:33:01]3720: WAF :: fetched 1 new logs [02-07-2022 19:39:02]19672: WAF :: fetched 1 new logs [02-07-2022 19:40:01]22319: WAF :: fetched 1 new logs [02-07-2022 19:41:02]25082: Checking for user cron vulnerabilities [02-07-2022 19:42:01]27676: WAF :: fetched 5 new logs [02-07-2022 19:43:02]30307: WAF :: fetched 2 new logs [02-07-2022 19:44:01]463: Checking ditributed CMS bruteforce attacks [02-07-2022 19:44:02]463: WAF :: fetched 3 new logs [02-07-2022 19:45:01]: Checking for definition updates [02-07-2022 19:45:01]3161: WAF :: fetched 5 new logs [02-07-2022 19:46:02]5983: WAF :: fetched 5 new logs [02-07-2022 19:47:01]8581: WAF :: fetched 5 new logs [02-07-2022 19:48:02]11232: WAF :: fetched 8 new logs [02-07-2022 19:49:02]13843: WAF :: fetched 4 new logs [02-07-2022 19:50:01]16472: WAF :: fetched 8 new logs [02-07-2022 19:51:02]19254: WAF :: fetched 5 new logs [02-07-2022 19:52:01]21838: WAF :: fetched 2 new logs [02-07-2022 19:53:02]24526: WAF :: fetched 9 new logs [02-07-2022 19:54:02]27115: WAF :: fetched 8 new logs [02-07-2022 19:55:01]29712: WAF :: fetched 10 new logs [02-07-2022 19:56:02]32494: WAF :: fetched 17 new logs [02-07-2022 19:58:02]5442: WAF :: fetched 2 new logs [02-07-2022 19:59:02]8041: WAF :: fetched 5 new logs [02-07-2022 20:00:01]10397: WAF :: fetched 1 new logs [02-07-2022 20:01:02]13626: WAF :: fetched 2 new logs [02-07-2022 20:02:02]16250: WAF :: fetched 2 new logs [02-07-2022 20:03:01]18892: WAF :: fetched 2 new logs [02-07-2022 20:04:02]21546: WAF :: fetched 2 new logs [02-07-2022 20:05:01]24151: WAF :: fetched 2 new logs [02-07-2022 20:06:02]26936: WAF :: fetched 3 new logs [02-07-2022 20:07:02]29511: WAF :: fetched 2 new logs [02-07-2022 20:08:01]32129: WAF :: fetched 2 new logs [02-07-2022 20:09:02]2381: WAF :: fetched 6 new logs [02-07-2022 20:10:02]5139: WAF :: fetched 1 new logs [02-07-2022 20:12:02]10527: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656803522 [02-07-2022 20:12:02]10527: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 20:12:04]10527: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 20:12:04]10527: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-2012/20220702-201202-YsDQwpDnQKt-Y4IQB6a-IAAAABI [02-07-2022 20:12:04]10527: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 20:12:04]10527: WAF :: fetched 1 new logs [02-07-2022 20:13:01]13110: WAF :: fetched 8 new logs [02-07-2022 20:14:02]15739: WAF :: fetched 5 new logs [02-07-2022 20:15:02]18338: WAF :: fetched 3 new logs [02-07-2022 20:16:01]21086: WAF :: fetched 1 new logs [02-07-2022 20:17:02]23720: WAF :: fetched 3 new logs [02-07-2022 20:18:01]26324: WAF :: fetched 1 new logs [02-07-2022 20:21:01]1957: WAF :: fetched 1 new logs [02-07-2022 20:23:02]7256: WAF :: fetched 2 new logs [02-07-2022 20:24:01]9849: WAF :: fetched 1 new logs [02-07-2022 20:25:02]12490: WAF :: fetched 1 new logs [02-07-2022 20:26:01]15194: WAF :: fetched 1 new logs [02-07-2022 20:27:02]17830: WAF :: fetched 1 new logs [02-07-2022 20:31:01]28391: WAF :: fetched 1 new logs [02-07-2022 20:32:02]30994: WAF :: fetched 1 new logs [02-07-2022 20:33:01]1098: WAF :: fetched 1 new logs [02-07-2022 20:36:02]9298: WAF :: fetched 1 new logs [02-07-2022 20:37:02]11881: WAF :: fetched 3 new logs [02-07-2022 20:38:01]14524: WAF :: fetched 5 new logs [02-07-2022 20:39:02]17108: WAF :: fetched 2 new logs [02-07-2022 20:40:01]19683: WAF :: fetched 1 new logs [02-07-2022 20:41:02]22429: WAF :: fetched 2 new logs [02-07-2022 20:41:02]22429: Checking for user cron vulnerabilities [02-07-2022 20:42:02]25001: WAF :: fetched 1 new logs [02-07-2022 20:43:01]27570: WAF :: fetched 1 new logs [02-07-2022 20:44:01]30166: Checking ditributed CMS bruteforce attacks [02-07-2022 20:44:02]30166: WAF :: fetched 4 new logs [02-07-2022 20:45:01]32765: WAF :: fetched 3 new logs [02-07-2022 20:47:01]5750: WAF :: fetched 26 new logs [02-07-2022 20:48:02]8368: WAF :: fetched 2 new logs [02-07-2022 20:49:01]10921: WAF :: fetched 1 new logs [02-07-2022 20:50:02]13538: WAF :: fetched 3 new logs [02-07-2022 20:52:01]18839: WAF :: fetched 2 new logs [02-07-2022 20:54:01]24054: WAF :: fetched 2 new logs [02-07-2022 20:56:02]29387: WAF :: fetched 1 new logs [02-07-2022 20:58:02]2196: WAF :: fetched 3 new logs [02-07-2022 20:59:01]4862: WAF :: fetched 6 new logs [02-07-2022 21:00:02]7189: WAF :: fetched 3 new logs [02-07-2022 21:01:01]10328: WAF :: fetched 1 new logs [02-07-2022 21:02:02]12940: WAF :: fetched 3 new logs [02-07-2022 21:05:02]20711: WAF :: fetched 4 new logs [02-07-2022 21:06:01]23437: WAF :: fetched 2 new logs [02-07-2022 21:07:02]26033: WAF :: fetched 3 new logs [02-07-2022 21:09:02]31140: WAF :: fetched 1 new logs [02-07-2022 21:11:01]4084: WAF :: fetched 1 new logs [02-07-2022 21:12:02]6738: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656807122 [02-07-2022 21:12:02]6738: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 21:12:04]6738: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 21:12:04]6738: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-2112/20220702-211202-YsDe0v7bRPK9OeY3jFFiTwAAABY [02-07-2022 21:12:04]6738: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 21:12:04]6738: WAF :: fetched 2 new logs [02-07-2022 21:13:01]9297: WAF :: fetched 1 new logs [02-07-2022 21:17:02]19806: WAF :: fetched 1 new logs [02-07-2022 21:19:01]24951: WAF :: fetched 1 new logs [02-07-2022 21:20:02]27554: WAF :: fetched 1 new logs [02-07-2022 21:22:02]327: WAF :: fetched 2 new logs [02-07-2022 21:23:01]2665: WAF :: fetched 3 new logs [02-07-2022 21:24:01]5635: WAF :: fetched 5 new logs [02-07-2022 21:26:02]10967: WAF :: fetched 1 new logs [02-07-2022 21:27:01]13565: WAF :: fetched 1 new logs [02-07-2022 21:28:01]16154: WAF :: fetched 4 new logs [02-07-2022 21:29:02]18759: WAF :: fetched 3 new logs [02-07-2022 21:30:01]21326: WAF :: fetched 1 new logs [02-07-2022 21:31:02]24026: WAF :: fetched 2 new logs [02-07-2022 21:32:02]26611: WAF :: fetched 2 new logs [02-07-2022 21:33:01]29185: WAF :: fetched 3 new logs [02-07-2022 21:34:02]31770: WAF :: fetched 2 new logs [02-07-2022 21:37:02]7363: WAF :: fetched 1 new logs [02-07-2022 21:40:02]15148: WAF :: fetched 1 new logs [02-07-2022 21:41:01]17792: WAF :: fetched 12 new logs [02-07-2022 21:41:01]17792: Checking for user cron vulnerabilities [02-07-2022 21:42:02]20468: WAF :: fetched 4 new logs [02-07-2022 21:43:01]23031: WAF :: fetched 4 new logs [02-07-2022 21:44:02]25615: Checking ditributed CMS bruteforce attacks [02-07-2022 21:44:02]25615: WAF :: fetched 1 new logs [02-07-2022 21:46:01]30800: WAF :: fetched 2 new logs [02-07-2022 21:48:01]3660: WAF :: fetched 2 new logs [02-07-2022 21:50:02]8904: WAF :: fetched 2 new logs [02-07-2022 21:53:02]16771: WAF :: fetched 1 new logs [02-07-2022 21:56:01]24556: WAF :: fetched 4 new logs [02-07-2022 21:58:01]29811: WAF :: fetched 1 new logs [02-07-2022 21:59:02]32413: WAF :: fetched 2 new logs [02-07-2022 22:04:02]13338: WAF :: fetched 2 new logs [02-07-2022 22:07:01]21196: WAF :: fetched 1 new logs [02-07-2022 22:07:08]21186: Performing Domain reputation checks [02-07-2022 22:08:02]23803: WAF :: fetched 5 new logs [02-07-2022 22:09:02]26364: WAF :: fetched 1 new logs [02-07-2022 22:10:01]28998: WAF :: fetched 3 new logs [02-07-2022 22:11:02]31633: WAF :: fetched 1 new logs [02-07-2022 22:12:01]1986: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656810721 [02-07-2022 22:12:01]1986: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 22:12:03]1986: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 22:12:04]1986: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-2212/20220702-221201-YsDs4W79LG35UEwjvICBNwAAABo [02-07-2022 22:12:04]1986: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 22:12:04]1986: WAF :: fetched 2 new logs [02-07-2022 22:13:01]4640: WAF :: fetched 1 new logs [02-07-2022 22:14:02]7260: WAF :: fetched 1 new logs [02-07-2022 22:23:01]30704: WAF :: fetched 4 new logs [02-07-2022 22:24:02]882: WAF :: fetched 1 new logs [02-07-2022 22:25:02]3485: WAF :: fetched 2 new logs [02-07-2022 22:26:01]6127: WAF :: fetched 1 new logs [02-07-2022 22:28:01]11362: WAF :: fetched 1 new logs [02-07-2022 22:32:01]21826: WAF :: fetched 5 new logs [02-07-2022 22:35:01]29564: WAF :: fetched 1 new logs [02-07-2022 22:36:02]32204: WAF :: fetched 3 new logs [02-07-2022 22:40:02]10356: WAF :: fetched 1 new logs [02-07-2022 22:41:01]12971: Checking for user cron vulnerabilities [02-07-2022 22:42:02]15628: WAF :: fetched 2 new logs [02-07-2022 22:44:02]20758: Checking ditributed CMS bruteforce attacks [02-07-2022 22:44:02]20758: WAF :: fetched 1 new logs [02-07-2022 22:45:02]23330: WAF :: fetched 1 new logs [02-07-2022 22:46:02]25953: WAF :: fetched 3 new logs [02-07-2022 22:47:01]28624: WAF :: fetched 1 new logs [02-07-2022 22:48:01]31171: WAF :: fetched 1 new logs [02-07-2022 22:49:02]1397: WAF :: fetched 2 new logs [02-07-2022 22:50:01]4055: WAF :: fetched 24 new logs [02-07-2022 22:51:02]6833: WAF :: fetched 37 new logs [02-07-2022 22:52:02]9475: WAF :: fetched 4 new logs [02-07-2022 22:55:01]17218: WAF :: fetched 1 new logs [02-07-2022 22:56:02]19861: WAF :: fetched 2 new logs [02-07-2022 22:57:02]22513: WAF :: fetched 2 new logs [02-07-2022 22:58:01]25097: WAF :: fetched 1 new logs [02-07-2022 23:02:02]3298: WAF :: fetched 2 new logs [02-07-2022 23:03:01]5949: WAF :: fetched 2 new logs [02-07-2022 23:04:02]8579: WAF :: fetched 4 new logs [02-07-2022 23:05:01]11108: WAF :: fetched 1 new logs [02-07-2022 23:07:01]16296: WAF :: fetched 1 new logs [02-07-2022 23:07:57]16584: Performed RBL check for 23.111.136.34. [02-07-2022 23:08:02]19040: WAF :: fetched 1 new logs [02-07-2022 23:09:01]21600: WAF :: fetched 3 new logs [02-07-2022 23:10:02]24232: WAF :: fetched 1 new logs [02-07-2022 23:12:02]29514: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656814322 [02-07-2022 23:12:02]29514: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-07-2022 23:12:04]29514: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-07-2022 23:12:04]29514: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220702/20220702-2312/20220702-231202-YsD68vJxGa8CAdIWc7OAIAAAAAc [02-07-2022 23:12:04]29514: WAF :: No suitable log file found. Using SQLite.. [02-07-2022 23:12:04]29514: WAF :: fetched 1 new logs [02-07-2022 23:13:01]32083: WAF :: fetched 1 new logs [02-07-2022 23:15:02]4915: WAF :: fetched 1 new logs [02-07-2022 23:18:01]12712: WAF :: fetched 1 new logs [02-07-2022 23:19:02]15300: WAF :: fetched 2 new logs [02-07-2022 23:21:01]20468: WAF :: fetched 1 new logs [02-07-2022 23:23:01]25707: WAF :: fetched 3 new logs [02-07-2022 23:27:02]3790: WAF :: fetched 1 new logs [02-07-2022 23:34:01]21979: WAF :: fetched 1 new logs [02-07-2022 23:35:02]24735: WAF :: fetched 2 new logs [02-07-2022 23:41:01]8124: WAF :: fetched 4 new logs [02-07-2022 23:41:01]8124: Checking for user cron vulnerabilities [02-07-2022 23:43:02]13344: WAF :: fetched 1 new logs [02-07-2022 23:44:02]15909: Checking ditributed CMS bruteforce attacks [02-07-2022 23:44:02]15909: WAF :: fetched 2 new logs [02-07-2022 23:46:02]21104: WAF :: fetched 2 new logs [02-07-2022 23:47:02]23740: WAF :: fetched 1 new logs [02-07-2022 23:48:01]26323: WAF :: fetched 1 new logs [02-07-2022 23:53:01]7186: WAF :: fetched 1 new logs [02-07-2022 23:54:01]9802: httpd.conf changed. Refreshing watchlist. [02-07-2022 23:54:01]9797: WAF :: fetched 2 new logs [02-07-2022 23:55:02]13656: WAF :: fetched 59 new logs [02-07-2022 23:56:01]16424: httpd.conf changed. Refreshing watchlist. [02-07-2022 23:56:01]16425: WAF :: fetched 41 new logs [02-07-2022 23:57:02]19813: WAF :: fetched 37 new logs [02-07-2022 23:58:02]22407: httpd.conf changed. Refreshing watchlist. [02-07-2022 23:59:01]25006: WAF :: fetched 2 new logs [03-07-2022 00:00:02]27316: WAF :: fetched 2 new logs [03-07-2022 00:01:02]30431: WAF :: fetched 2 new logs [03-07-2022 00:01:04]30431: Sending daily report for July 3, 2022 [03-07-2022 00:04:01]6425: WAF :: fetched 1 new logs [03-07-2022 00:05:02]9143: WAF :: fetched 3 new logs [03-07-2022 00:05:02]9143: Deleted 0 entries older than 6 MONTH from scanner_logs [03-07-2022 00:05:02]9143: Deleted 0 files from Quarantine [03-07-2022 00:06:02]11797: WAF :: fetched 2 new logs [03-07-2022 00:09:01]19987: WAF :: fetched 2 new logs [03-07-2022 00:10:02]22741: WAF :: fetched 1 new logs [03-07-2022 00:11:01]25344: WAF :: fetched 3 new logs [03-07-2022 00:12:02]28045: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656817922 [03-07-2022 00:12:02]28045: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 00:12:04]28045: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 00:12:04]28045: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-0012/20220703-001202-YsEJAm7TqATRllsQF-vNYAAAAAU [03-07-2022 00:12:04]28045: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 00:12:05]28045: WAF :: fetched 2 new logs [03-07-2022 00:13:02]30583: WAF :: fetched 26 new logs [03-07-2022 00:16:01]6248: WAF :: fetched 1 new logs [03-07-2022 00:17:01]8919: WAF :: fetched 3 new logs [03-07-2022 00:19:01]14247: WAF :: fetched 1 new logs [03-07-2022 00:23:02]25123: WAF :: fetched 2 new logs [03-07-2022 00:24:01]27802: WAF :: fetched 31 new logs [03-07-2022 00:27:02]3502: WAF :: fetched 3 new logs [03-07-2022 00:30:02]11311: WAF :: fetched 1 new logs [03-07-2022 00:35:02]24474: WAF :: fetched 1 new logs [03-07-2022 00:37:02]29896: WAF :: fetched 2 new logs [03-07-2022 00:39:02]2777: WAF :: fetched 1 new logs [03-07-2022 00:41:01]8131: Checking for user cron vulnerabilities [03-07-2022 00:44:01]16033: Checking ditributed CMS bruteforce attacks [03-07-2022 00:44:02]16033: WAF :: fetched 3 new logs [03-07-2022 00:45:02]: Checking for software updates [03-07-2022 00:46:02]21353: WAF :: fetched 1 new logs [03-07-2022 00:47:01]24016: WAF :: fetched 1 new logs [03-07-2022 00:48:02]26644: WAF :: fetched 1 new logs [03-07-2022 00:50:02]31879: WAF :: fetched 3 new logs [03-07-2022 00:51:02]2151: WAF :: fetched 1 new logs [03-07-2022 00:53:01]7491: WAF :: fetched 2 new logs [03-07-2022 00:55:02]12707: WAF :: fetched 1 new logs [03-07-2022 00:58:02]20697: WAF :: fetched 3 new logs [03-07-2022 01:00:02]25596: WAF :: fetched 2 new logs [03-07-2022 01:01:02]29551: WAF :: fetched 3 new logs [03-07-2022 01:03:01]2700: WAF :: fetched 1 new logs [03-07-2022 01:04:01]5536: WAF :: fetched 4 new logs [03-07-2022 01:07:02]14296: WAF :: fetched 2 new logs [03-07-2022 01:08:01]16928: WAF :: fetched 5 new logs [03-07-2022 01:10:02]22461: WAF :: fetched 1 new logs [03-07-2022 01:11:01]25149: WAF :: fetched 1 new logs [03-07-2022 01:12:01]28026: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656821521 [03-07-2022 01:12:01]28026: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 01:12:03]28026: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 01:12:05]28026: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-0112/20220703-011201-YsEXEYpteKuZ42ejPS7o4gAAAAw [03-07-2022 01:12:05]28026: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 01:12:05]28026: WAF :: fetched 4 new logs [03-07-2022 01:13:02]30604: WAF :: fetched 5 new logs [03-07-2022 01:14:01]707: WAF :: fetched 3 new logs [03-07-2022 01:15:02]3402: WAF :: fetched 3 new logs [03-07-2022 01:16:01]6052: WAF :: fetched 1 new logs [03-07-2022 01:17:02]8793: WAF :: fetched 8 new logs [03-07-2022 01:18:02]11588: WAF :: fetched 5 new logs [03-07-2022 01:19:02]14247: WAF :: fetched 8 new logs [03-07-2022 01:20:02]16815: WAF :: fetched 6 new logs [03-07-2022 01:21:01]19455: WAF :: fetched 3 new logs [03-07-2022 01:22:02]22138: WAF :: fetched 15 new logs [03-07-2022 01:23:01]24737: WAF :: fetched 2 new logs [03-07-2022 01:24:02]27438: WAF :: fetched 7 new logs [03-07-2022 01:25:02]30199: WAF :: fetched 2 new logs [03-07-2022 01:26:01]497: WAF :: fetched 1 new logs [03-07-2022 01:27:02]3249: WAF :: fetched 2 new logs [03-07-2022 01:28:01]5879: WAF :: fetched 3 new logs [03-07-2022 01:32:02]16798: WAF :: fetched 5 new logs [03-07-2022 01:33:02]19594: WAF :: fetched 2 new logs [03-07-2022 01:34:01]22279: WAF :: fetched 1 new logs [03-07-2022 01:35:02]25119: WAF :: fetched 1 new logs [03-07-2022 01:37:02]30437: WAF :: fetched 2 new logs [03-07-2022 01:38:02]561: WAF :: fetched 1 new logs [03-07-2022 01:41:02]8462: Checking for user cron vulnerabilities [03-07-2022 01:42:01]11279: WAF :: fetched 2 new logs [03-07-2022 01:43:02]13969: WAF :: fetched 3 new logs [03-07-2022 01:44:01]16567: Checking ditributed CMS bruteforce attacks [03-07-2022 01:44:01]16567: WAF :: fetched 2 new logs [03-07-2022 01:45:02]: Checking for definition updates [03-07-2022 01:47:01]24615: WAF :: fetched 1 new logs [03-07-2022 01:48:02]27331: WAF :: fetched 2 new logs [03-07-2022 01:49:01]29963: WAF :: fetched 2 new logs [03-07-2022 01:50:02]32602: WAF :: fetched 1 new logs [03-07-2022 01:51:02]2833: WAF :: fetched 1 new logs [03-07-2022 01:54:02]11129: WAF :: fetched 1 new logs [03-07-2022 01:56:02]16482: WAF :: fetched 1 new logs [03-07-2022 01:57:01]19263: WAF :: fetched 1 new logs [03-07-2022 01:58:02]21884: WAF :: fetched 1 new logs [03-07-2022 01:59:02]24607: WAF :: fetched 1 new logs [03-07-2022 02:00:01]27256: WAF :: fetched 1 new logs [03-07-2022 02:01:02]30541: WAF :: fetched 1 new logs [03-07-2022 02:02:02]883: WAF :: fetched 1 new logs [03-07-2022 02:04:01]6204: WAF :: fetched 2 new logs [03-07-2022 02:05:01]8810: WAF :: fetched 1 new logs [03-07-2022 02:07:01]14298: WAF :: fetched 1 new logs [03-07-2022 02:08:02]16879: WAF :: fetched 2 new logs [03-07-2022 02:12:02]27978: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656825122 [03-07-2022 02:12:02]27978: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 02:12:04]27978: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 02:12:04]27978: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-0212/20220703-021202-YsElInZI6LBfODtPACbwWQAAAAA [03-07-2022 02:12:04]27978: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 02:12:05]27978: WAF :: fetched 23 new logs [03-07-2022 02:13:02]30586: WAF :: fetched 1 new logs [03-07-2022 02:14:01]720: WAF :: fetched 1 new logs [03-07-2022 02:17:02]8744: WAF :: fetched 3 new logs [03-07-2022 02:25:01]30426: WAF :: fetched 1 new logs [03-07-2022 02:27:01]3379: WAF :: fetched 4 new logs [03-07-2022 02:28:01]6099: WAF :: fetched 2 new logs [03-07-2022 02:35:01]24787: WAF :: fetched 3 new logs [03-07-2022 02:36:02]27504: WAF :: fetched 2 new logs [03-07-2022 02:37:02]30083: WAF :: fetched 2 new logs [03-07-2022 02:41:02]8538: Checking for user cron vulnerabilities [03-07-2022 02:44:01]16324: Checking ditributed CMS bruteforce attacks [03-07-2022 02:44:01]16324: WAF :: fetched 1 new logs [03-07-2022 02:45:02]18903: WAF :: fetched 1 new logs [03-07-2022 02:46:02]21573: WAF :: fetched 2 new logs [03-07-2022 02:51:02]2891: WAF :: fetched 1 new logs [03-07-2022 02:52:01]5523: WAF :: fetched 2 new logs [03-07-2022 02:53:02]8174: WAF :: fetched 1 new logs [03-07-2022 02:53:02]8176: Updated license status via CDN [03-07-2022 02:58:02]21075: WAF :: fetched 1 new logs [03-07-2022 03:01:31]25891: Found and updated 32 CMS installations [03-07-2022 03:02:00]25891: Wordpress installation #4 labvida.net has errors [03-07-2022 03:02:20]25891: Wordpress installation #5 meusiteimobiliario.com.br has errors [03-07-2022 03:02:40]25891: Wordpress installation #9 oabilheus.org.br has errors [03-07-2022 03:03:02]1936: WAF :: fetched 1 new logs [03-07-2022 03:03:24]25891: Wordpress installation #16 kecolima.com.br has errors [03-07-2022 03:03:39]25891: Wordpress installation #17 ajuda.meusiteimobiliario.com.br has errors [03-07-2022 03:04:16]25891: Wordpress installation #23 blueseasurf.com.br has errors [03-07-2022 03:04:17]1981: Wordpress installation #23 blueseasurf.com.br has errors [03-07-2022 03:04:44]1981: Wordpress installation #26 bibokinha.idcartao.com has errors [03-07-2022 03:04:44]25891: Wordpress installation #26 bibokinha.idcartao.com has errors [03-07-2022 03:05:23]1981: Wordpress installation #34 fazendayrere.com.br has errors [03-07-2022 03:05:23]25891: Wordpress installation #34 fazendayrere.com.br has errors [03-07-2022 03:05:43]1981: Wordpress installation #36 suryaeventos.com.br has errors [03-07-2022 03:05:43]25891: Wordpress installation #36 suryaeventos.com.br has errors [03-07-2022 03:05:59]1981: Wordpress installation #39 imoblux.com.br has errors [03-07-2022 03:05:59]25891: Wordpress installation #39 imoblux.com.br has errors [03-07-2022 03:06:02]10503: WAF :: fetched 3 new logs [03-07-2022 03:06:23]25891: Sending CMS version vulnerability report emails to cpanel users [03-07-2022 03:06:24]1981: Sending CMS version vulnerability report emails to cpanel users [03-07-2022 03:06:26]25891: Checking wordpress installations for suspicious directories [03-07-2022 03:06:27]1981: Checking wordpress installations for suspicious directories [03-07-2022 03:09:01]18754: WAF :: fetched 1 new logs [03-07-2022 03:12:01]26612: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656828721 [03-07-2022 03:12:01]26612: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 03:12:03]26612: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 03:12:03]26612: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-0312/20220703-031201-YsEzMcUzHFPycI-xF7LvQgAAAA4 [03-07-2022 03:12:03]26612: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-07-2022 03:12:04]26612: WAF :: fetched 1 new logs [03-07-2022 03:18:01]10111: WAF :: fetched 1 new logs [03-07-2022 03:19:02]12720: WAF :: fetched 2 new logs [03-07-2022 03:24:02]25936: WAF :: fetched 3 new logs [03-07-2022 03:27:01]26075: WAF :: fetched 1 new logs [03-07-2022 03:28:02]6030: WAF :: fetched 1 new logs [03-07-2022 03:29:01]8634: WAF :: fetched 3 new logs [03-07-2022 03:30:02]11259: WAF :: fetched 4 new logs [03-07-2022 03:31:02]13903: WAF :: fetched 3 new logs [03-07-2022 03:32:01]16500: WAF :: fetched 1 new logs [03-07-2022 03:36:01]27008: WAF :: fetched 1 new logs [03-07-2022 03:38:01]32309: WAF :: fetched 1 new logs [03-07-2022 03:41:01]7853: WAF :: fetched 1 new logs [03-07-2022 03:41:01]7853: Checking for user cron vulnerabilities [03-07-2022 03:42:01]10445: WAF :: fetched 1 new logs [03-07-2022 03:43:02]13146: WAF :: fetched 2 new logs [03-07-2022 03:44:01]15578: Checking ditributed CMS bruteforce attacks [03-07-2022 03:44:01]15578: WAF :: fetched 2 new logs [03-07-2022 03:47:02]23603: WAF :: fetched 1 new logs [03-07-2022 03:50:02]31509: WAF :: fetched 1 new logs [03-07-2022 03:55:02]12271: WAF :: fetched 1 new logs [03-07-2022 03:56:01]14874: WAF :: fetched 1 new logs [03-07-2022 03:57:02]17470: WAF :: fetched 3 new logs [03-07-2022 03:58:01]20135: WAF :: fetched 1 new logs [03-07-2022 03:59:01]22738: WAF :: fetched 1 new logs [03-07-2022 04:01:01]28153: WAF :: fetched 3 new logs [03-07-2022 04:02:02]30818: WAF :: fetched 2 new logs [03-07-2022 04:03:01]1077: WAF :: fetched 7 new logs [03-07-2022 04:04:01]3732: WAF :: fetched 2 new logs [03-07-2022 04:05:02]6407: WAF :: fetched 1 new logs [03-07-2022 04:07:02]11579: WAF :: fetched 1 new logs [03-07-2022 04:08:01]14201: WAF :: fetched 1 new logs [03-07-2022 04:09:01]16764: WAF :: fetched 3 new logs [03-07-2022 04:10:02]19375: WAF :: fetched 2 new logs [03-07-2022 04:12:02]24520: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656832322 [03-07-2022 04:12:02]24520: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 04:12:04]24520: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 04:12:04]24520: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-0412/20220703-041202-YsFBQoaMjIoEp7jQk9AduwAAABA [03-07-2022 04:12:04]24520: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 04:12:05]24520: WAF :: fetched 41 new logs [03-07-2022 04:15:02]32355: WAF :: fetched 2 new logs [03-07-2022 04:16:02]2559: WAF :: fetched 2 new logs [03-07-2022 04:18:02]7865: WAF :: fetched 1 new logs [03-07-2022 04:20:01]13008: WAF :: fetched 1 new logs [03-07-2022 04:22:01]18192: WAF :: fetched 1 new logs [03-07-2022 04:25:01]26646: WAF :: fetched 1 new logs [03-07-2022 04:27:02]32592: WAF :: fetched 1 new logs [03-07-2022 04:29:02]5583: WAF :: fetched 1 new logs [03-07-2022 04:31:01]10880: WAF :: fetched 2 new logs [03-07-2022 04:32:02]13709: WAF :: fetched 1 new logs [03-07-2022 04:37:02]26922: WAF :: fetched 34 new logs [03-07-2022 04:38:02]29686: WAF :: fetched 1 new logs [03-07-2022 04:41:01]5381: WAF :: fetched 1 new logs [03-07-2022 04:41:01]5381: Checking for user cron vulnerabilities [03-07-2022 04:44:01]13384: Checking ditributed CMS bruteforce attacks [03-07-2022 04:44:02]13384: WAF :: fetched 1 new logs [03-07-2022 04:53:02]5861: WAF :: fetched 1 new logs [03-07-2022 04:59:01]22072: WAF :: fetched 1 new logs [03-07-2022 05:00:02]24375: WAF :: fetched 3 new logs [03-07-2022 05:01:41]27438: Starting weekly scan on files updated within a week [03-07-2022 05:06:01]8206: WAF :: fetched 1 new logs [03-07-2022 05:07:02]10806: WAF :: fetched 1 new logs [03-07-2022 05:09:01]16048: WAF :: fetched 10 new logs [03-07-2022 05:10:01]18656: WAF :: fetched 14 new logs [03-07-2022 05:11:01]21292: WAF :: fetched 13 new logs [03-07-2022 05:12:02]23957: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656835922 [03-07-2022 05:12:03]23957: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 05:12:05]23957: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 05:12:06]23957: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-0512/20220703-051203-YsFPU0I-O2I8QoVxYFOjowAAAB0 [03-07-2022 05:12:06]23957: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 05:12:06]23957: WAF :: fetched 20 new logs [03-07-2022 05:13:01]26642: WAF :: fetched 11 new logs [03-07-2022 05:14:02]29251: WAF :: fetched 4 new logs [03-07-2022 05:15:01]32125: WAF :: fetched 6 new logs [03-07-2022 05:16:01]2487: WAF :: fetched 5 new logs [03-07-2022 05:17:02]5397: WAF :: fetched 9 new logs [03-07-2022 05:18:01]8109: WAF :: fetched 16 new logs [03-07-2022 05:19:02]10868: WAF :: fetched 34 new logs [03-07-2022 05:20:02]13684: WAF :: fetched 14 new logs [03-07-2022 05:21:01]16488: WAF :: fetched 21 new logs [03-07-2022 05:22:01]19265: WAF :: fetched 36 new logs [03-07-2022 05:23:02]22409: WAF :: fetched 30 new logs [03-07-2022 05:27:01]700: WAF :: fetched 1 new logs [03-07-2022 05:28:02]3454: WAF :: fetched 3 new logs [03-07-2022 05:29:01]6052: WAF :: fetched 44 new logs [03-07-2022 05:30:02]8738: WAF :: fetched 45 new logs [03-07-2022 05:31:02]11416: WAF :: fetched 48 new logs [03-07-2022 05:32:01]14125: WAF :: fetched 8 new logs [03-07-2022 05:37:01]27358: WAF :: fetched 1 new logs [03-07-2022 05:41:02]5551: WAF :: fetched 2 new logs [03-07-2022 05:41:02]5551: Checking for user cron vulnerabilities [03-07-2022 05:42:01]7991: WAF :: fetched 1 new logs [03-07-2022 05:44:01]13366: Checking ditributed CMS bruteforce attacks [03-07-2022 05:44:02]13366: WAF :: fetched 1 new logs [03-07-2022 05:46:01]18564: WAF :: fetched 1 new logs [03-07-2022 05:47:01]21161: WAF :: fetched 1 new logs [03-07-2022 05:50:02]28908: WAF :: fetched 1 new logs [03-07-2022 05:52:02]2171: WAF :: fetched 1 new logs [03-07-2022 05:56:01]12996: WAF :: fetched 1 new logs [03-07-2022 05:59:02]20765: WAF :: fetched 1 new logs [03-07-2022 06:01:01]26059: WAF :: fetched 2 new logs [03-07-2022 06:02:02]28750: WAF :: fetched 1 new logs [03-07-2022 06:05:02]4162: WAF :: fetched 1 new logs [03-07-2022 06:06:02]6819: WAF :: fetched 1 new logs [03-07-2022 06:07:01]9412: WAF :: fetched 1 new logs [03-07-2022 06:08:02]12055: WAF :: fetched 3 new logs [03-07-2022 06:12:02]22434: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656839522 [03-07-2022 06:12:02]22434: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 06:12:04]22434: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 06:12:04]22434: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-0612/20220703-061202-YsFdYnJyd9W9yU-leiEw9gAAAAY [03-07-2022 06:12:04]22434: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 06:12:04]22434: WAF :: fetched 2 new logs [03-07-2022 06:13:02]25086: WAF :: fetched 3 new logs [03-07-2022 06:15:01]30202: WAF :: fetched 1 new logs [03-07-2022 06:16:01]369: WAF :: fetched 1 new logs [03-07-2022 06:17:02]2994: WAF :: fetched 1 new logs [03-07-2022 06:19:02]8320: WAF :: fetched 1 new logs [03-07-2022 06:20:01]10853: WAF :: fetched 1 new logs [03-07-2022 06:23:02]18748: WAF :: fetched 2 new logs [03-07-2022 06:27:01]29143: WAF :: fetched 1 new logs [03-07-2022 06:28:02]31856: WAF :: fetched 5 new logs [03-07-2022 06:38:01]25478: WAF :: fetched 1 new logs [03-07-2022 06:41:01]696: WAF :: fetched 3 new logs [03-07-2022 06:41:01]696: Checking for user cron vulnerabilities [03-07-2022 06:42:02]3484: WAF :: fetched 1 new logs [03-07-2022 06:44:01]8785: Checking ditributed CMS bruteforce attacks [03-07-2022 06:44:02]8785: WAF :: fetched 1 new logs [03-07-2022 07:00:01]17559: WAF :: fetched 2 new logs [03-07-2022 07:01:02]20639: WAF :: fetched 1 new logs [03-07-2022 07:04:02]28428: WAF :: fetched 2 new logs [03-07-2022 07:05:02]30993: WAF :: fetched 2 new logs [03-07-2022 07:06:01]1187: WAF :: fetched 1 new logs [03-07-2022 07:07:02]3812: WAF :: fetched 1 new logs [03-07-2022 07:08:01]6412: WAF :: fetched 1 new logs [03-07-2022 07:09:02]9074: WAF :: fetched 1 new logs [03-07-2022 07:10:01]11649: WAF :: fetched 2 new logs [03-07-2022 07:11:02]14272: WAF :: fetched 1 new logs [03-07-2022 07:12:02]16839: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656843122 [03-07-2022 07:12:02]16839: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 07:12:04]16839: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 07:12:04]16839: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-0712/20220703-071202-YsFrcoaU2PTPSytsxd7c1wAAAA8 [03-07-2022 07:12:04]16839: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 07:12:05]16839: WAF :: fetched 4 new logs [03-07-2022 07:13:01]19274: WAF :: fetched 2 new logs [03-07-2022 07:14:02]22071: WAF :: fetched 10 new logs [03-07-2022 07:15:01]24642: WAF :: fetched 16 new logs [03-07-2022 07:16:02]27274: WAF :: fetched 13 new logs [03-07-2022 07:17:02]29792: WAF :: fetched 10 new logs [03-07-2022 07:18:01]32331: WAF :: fetched 15 new logs [03-07-2022 07:19:02]2599: WAF :: fetched 2 new logs [03-07-2022 07:20:02]5234: WAF :: fetched 1 new logs [03-07-2022 07:21:02]7874: WAF :: fetched 2 new logs [03-07-2022 07:22:01]10391: WAF :: fetched 1 new logs [03-07-2022 07:25:02]18242: WAF :: fetched 4 new logs [03-07-2022 07:26:02]20854: WAF :: fetched 1 new logs [03-07-2022 07:27:01]23410: WAF :: fetched 1 new logs [03-07-2022 07:30:02]31208: WAF :: fetched 1 new logs [03-07-2022 07:33:02]6680: WAF :: fetched 2 new logs [03-07-2022 07:39:01]22354: WAF :: fetched 2 new logs [03-07-2022 07:41:02]27612: WAF :: fetched 4 new logs [03-07-2022 07:41:02]27612: Checking for user cron vulnerabilities [03-07-2022 07:42:01]30124: WAF :: fetched 6 new logs [03-07-2022 07:43:02]32694: WAF :: fetched 2 new logs [03-07-2022 07:44:01]2949: Checking ditributed CMS bruteforce attacks [03-07-2022 07:44:01]2949: WAF :: fetched 1 new logs [03-07-2022 07:45:02]: Checking for definition updates [03-07-2022 07:48:01]13234: WAF :: fetched 1 new logs [03-07-2022 07:49:02]15973: WAF :: fetched 1 new logs [03-07-2022 07:50:01]18586: WAF :: fetched 6 new logs [03-07-2022 07:51:02]21236: WAF :: fetched 3 new logs [03-07-2022 07:52:02]23785: WAF :: fetched 1 new logs [03-07-2022 07:53:01]26337: WAF :: fetched 3 new logs [03-07-2022 07:56:02]1815: WAF :: fetched 4 new logs [03-07-2022 07:57:02]4475: WAF :: fetched 1 new logs [03-07-2022 07:58:02]7046: WAF :: fetched 3 new logs [03-07-2022 08:00:02]11977: WAF :: fetched 2 new logs [03-07-2022 08:01:01]15056: WAF :: fetched 1 new logs [03-07-2022 08:03:02]20218: WAF :: fetched 1 new logs [03-07-2022 08:04:02]22901: WAF :: fetched 1 new logs [03-07-2022 08:05:02]25458: WAF :: fetched 4 new logs [03-07-2022 08:06:02]28089: WAF :: fetched 3 new logs [03-07-2022 08:12:01]11351: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656846721 [03-07-2022 08:12:01]11351: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 08:12:03]11351: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 08:12:04]11351: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-0812/20220703-081201-YsF5gciuimMgP8EcPFriygAAAAc [03-07-2022 08:12:04]11351: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-07-2022 08:12:04]11351: WAF :: fetched 2 new logs [03-07-2022 08:14:01]16427: WAF :: fetched 3 new logs [03-07-2022 08:15:02]19145: WAF :: fetched 1 new logs [03-07-2022 08:16:02]21756: WAF :: fetched 1 new logs [03-07-2022 08:17:01]24317: WAF :: fetched 2 new logs [03-07-2022 08:20:02]32167: WAF :: fetched 2 new logs [03-07-2022 08:21:02]2412: WAF :: fetched 3 new logs [03-07-2022 08:22:01]5045: WAF :: fetched 2 new logs [03-07-2022 08:24:01]10285: WAF :: fetched 2 new logs [03-07-2022 08:26:02]15597: WAF :: fetched 3 new logs [03-07-2022 08:27:01]18144: WAF :: fetched 3 new logs [03-07-2022 08:29:01]23455: WAF :: fetched 3 new logs [03-07-2022 08:30:02]26050: WAF :: fetched 1 new logs [03-07-2022 08:31:01]28664: WAF :: fetched 4 new logs [03-07-2022 08:33:02]1421: WAF :: fetched 2 new logs [03-07-2022 08:35:01]6780: WAF :: fetched 1 new logs [03-07-2022 08:36:02]9514: WAF :: fetched 1 new logs [03-07-2022 08:37:02]12052: WAF :: fetched 1 new logs [03-07-2022 08:38:01]14637: WAF :: fetched 2 new logs [03-07-2022 08:39:02]17300: WAF :: fetched 2 new logs [03-07-2022 08:40:01]19902: WAF :: fetched 3 new logs [03-07-2022 08:41:02]22575: WAF :: fetched 1 new logs [03-07-2022 08:41:02]22575: Checking for user cron vulnerabilities [03-07-2022 08:42:02]25146: WAF :: fetched 1 new logs [03-07-2022 08:43:01]27739: WAF :: fetched 2 new logs [03-07-2022 08:44:02]30387: Checking ditributed CMS bruteforce attacks [03-07-2022 08:44:02]30387: WAF :: fetched 3 new logs [03-07-2022 08:45:01]525: WAF :: fetched 1 new logs [03-07-2022 08:46:02]3264: WAF :: fetched 1 new logs [03-07-2022 08:47:01]5846: WAF :: fetched 2 new logs [03-07-2022 08:48:01]8503: WAF :: fetched 1 new logs [03-07-2022 08:49:02]11145: WAF :: fetched 1 new logs [03-07-2022 08:51:01]16408: WAF :: fetched 2 new logs [03-07-2022 08:52:02]19005: WAF :: fetched 2 new logs [03-07-2022 08:53:02]21600: WAF :: fetched 2 new logs [03-07-2022 08:54:02]24251: WAF :: fetched 1 new logs [03-07-2022 08:59:02]4900: WAF :: fetched 2 new logs [03-07-2022 09:03:01]15492: WAF :: fetched 3 new logs [03-07-2022 09:04:02]18178: WAF :: fetched 2 new logs [03-07-2022 09:05:01]20794: WAF :: fetched 4 new logs [03-07-2022 09:06:02]23419: WAF :: fetched 3 new logs [03-07-2022 09:07:01]25999: WAF :: fetched 4 new logs [03-07-2022 09:09:01]31210: WAF :: fetched 1 new logs [03-07-2022 09:11:02]4113: WAF :: fetched 1 new logs [03-07-2022 09:12:01]6698: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656850321 [03-07-2022 09:12:01]6698: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 09:12:03]6698: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 09:12:04]6698: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-0912/20220703-091201-YsGHkXxx8_36n2CSvT0irQAAABc [03-07-2022 09:12:04]6698: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-07-2022 09:12:04]6698: WAF :: fetched 1 new logs [03-07-2022 09:13:02]9347: WAF :: fetched 5 new logs [03-07-2022 09:16:02]17195: WAF :: fetched 1 new logs [03-07-2022 09:18:01]22344: WAF :: fetched 1 new logs [03-07-2022 09:19:02]25029: WAF :: fetched 3 new logs [03-07-2022 09:20:01]27613: WAF :: fetched 5 new logs [03-07-2022 09:22:01]393: WAF :: fetched 3 new logs [03-07-2022 09:23:01]3095: WAF :: fetched 9 new logs [03-07-2022 09:24:02]5841: WAF :: fetched 1 new logs [03-07-2022 09:25:02]8529: WAF :: fetched 3 new logs [03-07-2022 09:26:02]11145: WAF :: fetched 1 new logs [03-07-2022 09:27:01]13669: WAF :: fetched 4 new logs [03-07-2022 09:29:01]18999: WAF :: fetched 2 new logs [03-07-2022 09:30:02]21661: WAF :: fetched 1 new logs [03-07-2022 09:31:02]24296: WAF :: fetched 2 new logs [03-07-2022 09:33:02]29494: WAF :: fetched 13 new logs [03-07-2022 09:34:02]32143: WAF :: fetched 25 new logs [03-07-2022 09:35:02]2296: WAF :: fetched 25 new logs [03-07-2022 09:36:01]5044: WAF :: fetched 28 new logs [03-07-2022 09:37:01]7711: WAF :: fetched 23 new logs [03-07-2022 09:38:02]10273: WAF :: fetched 25 new logs [03-07-2022 09:39:02]12897: WAF :: fetched 24 new logs [03-07-2022 09:40:01]15475: WAF :: fetched 26 new logs [03-07-2022 09:41:02]18238: WAF :: fetched 32 new logs [03-07-2022 09:41:02]18238: Checking for user cron vulnerabilities [03-07-2022 09:42:02]20816: WAF :: fetched 19 new logs [03-07-2022 09:44:01]26024: Checking ditributed CMS bruteforce attacks [03-07-2022 09:44:02]26024: WAF :: fetched 2 new logs [03-07-2022 09:45:02]28662: WAF :: fetched 1 new logs [03-07-2022 09:46:01]31195: WAF :: fetched 3 new logs [03-07-2022 09:47:01]1491: WAF :: fetched 1 new logs [03-07-2022 09:48:01]4141: WAF :: fetched 2 new logs [03-07-2022 09:49:02]6948: WAF :: fetched 2 new logs [03-07-2022 09:57:02]27825: WAF :: fetched 2 new logs [03-07-2022 10:00:01]2993: WAF :: fetched 2 new logs [03-07-2022 10:02:01]8828: WAF :: fetched 2 new logs [03-07-2022 10:09:02]27170: WAF :: fetched 2 new logs [03-07-2022 10:10:01]29748: WAF :: fetched 4 new logs [03-07-2022 10:12:01]2618: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656853921 [03-07-2022 10:12:01]2618: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 10:12:03]2618: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 10:12:04]2618: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-1012/20220703-101201-YsGVoXG5PCW9PRGm2u7RrQAAAE4 [03-07-2022 10:12:04]2618: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 10:12:04]2618: WAF :: fetched 274 new logs [03-07-2022 10:13:02]5313: WAF :: fetched 1 new logs [03-07-2022 10:14:01]7980: WAF :: fetched 2 new logs [03-07-2022 10:15:02]10588: WAF :: fetched 1 new logs [03-07-2022 10:19:02]21043: WAF :: fetched 1 new logs [03-07-2022 10:20:02]23603: WAF :: fetched 1 new logs [03-07-2022 10:22:02]28896: WAF :: fetched 2 new logs [03-07-2022 10:23:01]31466: WAF :: fetched 1 new logs [03-07-2022 10:25:01]4429: WAF :: fetched 1 new logs [03-07-2022 10:26:02]7112: WAF :: fetched 1 new logs [03-07-2022 10:29:02]14912: WAF :: fetched 2 new logs [03-07-2022 10:30:02]17484: WAF :: fetched 1 new logs [03-07-2022 10:37:02]3411: WAF :: fetched 1 new logs [03-07-2022 10:41:02]14014: Checking for user cron vulnerabilities [03-07-2022 10:42:01]16543: WAF :: fetched 1 new logs [03-07-2022 10:43:01]19181: WAF :: fetched 1 new logs [03-07-2022 10:44:01]21855: Checking ditributed CMS bruteforce attacks [03-07-2022 10:44:02]21855: WAF :: fetched 3 new logs [03-07-2022 10:45:02]24434: WAF :: fetched 1 new logs [03-07-2022 10:47:02]29693: WAF :: fetched 6 new logs [03-07-2022 10:48:01]32253: WAF :: fetched 1 new logs [03-07-2022 10:52:01]10482: WAF :: fetched 6 new logs [03-07-2022 10:53:02]13088: WAF :: fetched 3 new logs [03-07-2022 10:54:01]15680: WAF :: fetched 7 new logs [03-07-2022 10:57:02]23586: WAF :: fetched 1 new logs [03-07-2022 11:00:02]31166: WAF :: fetched 1 new logs [03-07-2022 11:02:01]4513: WAF :: fetched 2 new logs [03-07-2022 11:07:51]17790: Performed RBL check for 23.111.136.34. [03-07-2022 11:09:02]22903: WAF :: fetched 2 new logs [03-07-2022 11:11:02]28143: WAF :: fetched 1 new logs [03-07-2022 11:12:01]30719: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656857521 [03-07-2022 11:12:01]30719: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 11:12:03]30719: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 11:12:04]30719: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-1112/20220703-111201-YsGjsd9ApKPzY9Xe5ak8PgAAAA0 [03-07-2022 11:12:04]30719: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 11:12:04]30719: WAF :: fetched 7 new logs [03-07-2022 11:13:02]1011: WAF :: fetched 12 new logs [03-07-2022 11:16:02]9049: WAF :: fetched 6 new logs [03-07-2022 11:17:01]11635: WAF :: fetched 1 new logs [03-07-2022 11:19:02]16911: WAF :: fetched 4 new logs [03-07-2022 11:20:02]19505: WAF :: fetched 1 new logs [03-07-2022 11:21:02]22151: WAF :: fetched 1 new logs [03-07-2022 11:23:02]27293: WAF :: fetched 8 new logs [03-07-2022 11:24:02]29921: WAF :: fetched 1 new logs [03-07-2022 11:25:02]32583: WAF :: fetched 1 new logs [03-07-2022 11:26:02]2779: WAF :: fetched 6 new logs [03-07-2022 11:27:01]5432: WAF :: fetched 2 new logs [03-07-2022 11:28:02]8075: WAF :: fetched 11 new logs [03-07-2022 11:29:01]10697: WAF :: fetched 1 new logs [03-07-2022 11:30:02]13336: WAF :: fetched 1 new logs [03-07-2022 11:31:01]15922: WAF :: fetched 1 new logs [03-07-2022 11:32:02]18544: WAF :: fetched 2 new logs [03-07-2022 11:33:02]21136: WAF :: fetched 2 new logs [03-07-2022 11:35:02]26369: WAF :: fetched 4 new logs [03-07-2022 11:37:02]31594: WAF :: fetched 4 new logs [03-07-2022 11:38:01]1779: WAF :: fetched 1 new logs [03-07-2022 11:39:02]4541: WAF :: fetched 1 new logs [03-07-2022 11:41:02]9833: WAF :: fetched 13 new logs [03-07-2022 11:41:02]9833: Checking for user cron vulnerabilities [03-07-2022 11:42:02]12384: WAF :: fetched 23 new logs [03-07-2022 11:43:01]14940: WAF :: fetched 23 new logs [03-07-2022 11:44:01]17591: Checking ditributed CMS bruteforce attacks [03-07-2022 11:44:02]17591: WAF :: fetched 30 new logs [03-07-2022 11:45:01]20235: WAF :: fetched 23 new logs [03-07-2022 11:46:02]22905: WAF :: fetched 32 new logs [03-07-2022 11:47:02]25477: WAF :: fetched 24 new logs [03-07-2022 11:48:01]28101: WAF :: fetched 7 new logs [03-07-2022 11:49:02]30769: WAF :: fetched 19 new logs [03-07-2022 11:50:02]982: WAF :: fetched 1 new logs [03-07-2022 11:51:01]3603: WAF :: fetched 8 new logs [03-07-2022 11:52:02]6291: WAF :: fetched 17 new logs [03-07-2022 11:53:01]8861: WAF :: fetched 24 new logs [03-07-2022 11:54:02]11484: WAF :: fetched 6 new logs [03-07-2022 11:55:02]14083: WAF :: fetched 1 new logs [03-07-2022 11:56:02]16771: WAF :: fetched 2 new logs [03-07-2022 11:57:02]19339: WAF :: fetched 1 new logs [03-07-2022 11:58:01]21901: WAF :: fetched 3 new logs [03-07-2022 12:01:02]29961: WAF :: fetched 1 new logs [03-07-2022 12:03:02]2785: WAF :: fetched 7 new logs [03-07-2022 12:04:01]5463: WAF :: fetched 8 new logs [03-07-2022 12:05:02]8179: WAF :: fetched 5 new logs [03-07-2022 12:07:02]13393: WAF :: fetched 1 new logs [03-07-2022 12:08:01]15970: WAF :: fetched 1 new logs [03-07-2022 12:11:02]23860: WAF :: fetched 4 new logs [03-07-2022 12:12:01]26648: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656861121 [03-07-2022 12:12:01]26648: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 12:12:03]26648: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 12:12:04]26648: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-1212/20220703-121201-YsGxwSj16GkPnJyv5F5aAwAAAAk [03-07-2022 12:13:02]29556: WAF :: fetched 1 new logs [03-07-2022 12:14:01]32349: WAF :: fetched 2 new logs [03-07-2022 12:15:02]2647: WAF :: fetched 3 new logs [03-07-2022 12:16:01]5393: WAF :: fetched 3 new logs [03-07-2022 12:18:01]10541: WAF :: fetched 2 new logs [03-07-2022 12:19:02]13138: WAF :: fetched 1 new logs [03-07-2022 12:20:01]15768: WAF :: fetched 2 new logs [03-07-2022 12:21:02]18444: WAF :: fetched 3 new logs [03-07-2022 12:23:01]23553: WAF :: fetched 5 new logs [03-07-2022 12:25:02]28833: WAF :: fetched 6 new logs [03-07-2022 12:28:02]4273: WAF :: fetched 6 new logs [03-07-2022 12:29:02]6939: WAF :: fetched 2 new logs [03-07-2022 12:30:01]9610: WAF :: fetched 25 new logs [03-07-2022 12:31:02]12319: WAF :: fetched 1 new logs [03-07-2022 12:32:02]14931: WAF :: fetched 7 new logs [03-07-2022 12:33:02]17490: WAF :: fetched 1 new logs [03-07-2022 12:34:01]20151: WAF :: fetched 64 new logs [03-07-2022 12:36:01]25491: WAF :: fetched 1 new logs [03-07-2022 12:37:02]28093: WAF :: fetched 3 new logs [03-07-2022 12:39:01]832: WAF :: fetched 1 new logs [03-07-2022 12:41:02]6383: Checking for user cron vulnerabilities [03-07-2022 12:44:02]14171: Checking ditributed CMS bruteforce attacks [03-07-2022 12:44:07]14171: WAF :: fetched 9 new logs [03-07-2022 12:45:01]: Checking for software updates [03-07-2022 12:45:02]16833: WAF :: fetched 1 new logs [03-07-2022 12:47:01]22087: WAF :: fetched 3 new logs [03-07-2022 12:48:02]24702: WAF :: fetched 5 new logs [03-07-2022 12:49:02]27316: WAF :: fetched 5 new logs [03-07-2022 12:50:01]30001: WAF :: fetched 5 new logs [03-07-2022 12:51:02]32717: WAF :: fetched 3 new logs [03-07-2022 12:52:01]2872: WAF :: fetched 1 new logs [03-07-2022 12:54:01]8169: WAF :: fetched 24 new logs [03-07-2022 12:55:02]10858: WAF :: fetched 5 new logs [03-07-2022 12:56:01]13449: WAF :: fetched 6 new logs [03-07-2022 12:57:02]16046: WAF :: fetched 9 new logs [03-07-2022 12:58:01]18606: WAF :: fetched 6 new logs [03-07-2022 12:59:02]21212: WAF :: fetched 5 new logs [03-07-2022 13:00:01]23583: WAF :: fetched 7 new logs [03-07-2022 13:01:01]26633: WAF :: fetched 7 new logs [03-07-2022 13:02:01]29238: WAF :: fetched 8 new logs [03-07-2022 13:03:01]31834: WAF :: fetched 8 new logs [03-07-2022 13:04:02]2049: WAF :: fetched 7 new logs [03-07-2022 13:05:02]4784: WAF :: fetched 3 new logs [03-07-2022 13:06:01]7487: WAF :: fetched 7 new logs [03-07-2022 13:07:01]10068: WAF :: fetched 3 new logs [03-07-2022 13:08:02]12631: WAF :: fetched 2 new logs [03-07-2022 13:12:03]23121: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656864723 [03-07-2022 13:12:03]23121: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 13:12:05]23121: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 13:12:06]23121: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-1312/20220703-131203-YsG_0z_lEqHoJorbm2MGXAAAABU [03-07-2022 13:12:06]23121: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-07-2022 13:12:07]23121: WAF :: fetched 1 new logs [03-07-2022 13:13:02]25712: WAF :: fetched 2 new logs [03-07-2022 13:17:02]3896: WAF :: fetched 5 new logs [03-07-2022 13:18:01]6489: WAF :: fetched 3 new logs [03-07-2022 13:19:01]9102: WAF :: fetched 2 new logs [03-07-2022 13:20:02]11764: WAF :: fetched 2 new logs [03-07-2022 13:22:02]16990: WAF :: fetched 4 new logs [03-07-2022 13:23:02]19568: WAF :: fetched 6 new logs [03-07-2022 13:24:01]22170: WAF :: fetched 1 new logs [03-07-2022 13:25:02]24860: WAF :: fetched 2 new logs [03-07-2022 13:26:01]27499: WAF :: fetched 2 new logs [03-07-2022 13:27:01]30089: WAF :: fetched 5 new logs [03-07-2022 13:28:01]32666: WAF :: fetched 5 new logs [03-07-2022 13:29:02]2904: WAF :: fetched 1 new logs [03-07-2022 13:30:01]5622: WAF :: fetched 1 new logs [03-07-2022 13:34:01]16105: WAF :: fetched 1 new logs [03-07-2022 13:36:01]21444: WAF :: fetched 2 new logs [03-07-2022 13:37:02]24052: WAF :: fetched 6 new logs [03-07-2022 13:39:01]29188: WAF :: fetched 1 new logs [03-07-2022 13:41:01]2187: WAF :: fetched 1 new logs [03-07-2022 13:41:01]2187: Checking for user cron vulnerabilities [03-07-2022 13:42:02]4891: WAF :: fetched 6 new logs [03-07-2022 13:43:01]7548: WAF :: fetched 2 new logs [03-07-2022 13:44:01]10162: Checking ditributed CMS bruteforce attacks [03-07-2022 13:44:07]10162: WAF :: fetched 9 new logs [03-07-2022 13:45:03]: Checking for definition updates [03-07-2022 13:45:03]12831: WAF :: fetched 1 new logs [03-07-2022 13:46:02]15444: WAF :: fetched 8 new logs [03-07-2022 13:48:02]20707: WAF :: fetched 8 new logs [03-07-2022 13:50:02]26019: WAF :: fetched 13 new logs [03-07-2022 13:54:01]3995: WAF :: fetched 1 new logs [03-07-2022 13:55:02]6716: WAF :: fetched 1 new logs [03-07-2022 13:56:01]9341: WAF :: fetched 1 new logs [03-07-2022 13:57:03]11922: WAF :: fetched 2 new logs [03-07-2022 13:59:01]17038: WAF :: fetched 5 new logs [03-07-2022 14:04:02]30318: WAF :: fetched 2 new logs [03-07-2022 14:05:02]525: WAF :: fetched 1 new logs [03-07-2022 14:07:02]5893: WAF :: fetched 5 new logs [03-07-2022 14:08:01]8467: WAF :: fetched 5 new logs [03-07-2022 14:10:01]13695: WAF :: fetched 1 new logs [03-07-2022 14:11:02]16317: WAF :: fetched 1 new logs [03-07-2022 14:12:01]18892: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656868321 [03-07-2022 14:12:01]18892: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 14:12:03]18892: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 14:12:04]18892: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-1412/20220703-141201-YsHN4VRjZOa_7O57m3hkKwAAABI [03-07-2022 14:12:04]18892: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 14:12:09]18892: WAF :: fetched 104 new logs [03-07-2022 14:13:02]21439: WAF :: fetched 2 new logs [03-07-2022 14:14:01]23988: WAF :: fetched 2 new logs [03-07-2022 14:16:01]29314: WAF :: fetched 3 new logs [03-07-2022 14:17:02]31896: WAF :: fetched 1 new logs [03-07-2022 14:20:01]7388: WAF :: fetched 1 new logs [03-07-2022 14:23:02]15127: WAF :: fetched 2 new logs [03-07-2022 14:26:02]23068: WAF :: fetched 2 new logs [03-07-2022 14:29:02]30797: WAF :: fetched 4 new logs [03-07-2022 14:32:02]6361: WAF :: fetched 1 new logs [03-07-2022 14:35:02]14147: WAF :: fetched 4 new logs [03-07-2022 14:37:02]19368: WAF :: fetched 3 new logs [03-07-2022 14:38:01]21929: WAF :: fetched 5 new logs [03-07-2022 14:39:02]24536: WAF :: fetched 6 new logs [03-07-2022 14:41:02]29842: Checking for user cron vulnerabilities [03-07-2022 14:44:01]5222: Checking ditributed CMS bruteforce attacks [03-07-2022 14:44:07]5222: WAF :: fetched 1 new logs [03-07-2022 14:45:01]7927: WAF :: fetched 4 new logs [03-07-2022 14:46:02]10562: WAF :: fetched 4 new logs [03-07-2022 14:47:01]13091: WAF :: fetched 1 new logs [03-07-2022 14:48:02]15702: WAF :: fetched 5 new logs [03-07-2022 14:49:01]18318: WAF :: fetched 1 new logs [03-07-2022 14:51:02]23585: WAF :: fetched 2 new logs [03-07-2022 14:53:02]28748: WAF :: fetched 1 new logs [03-07-2022 14:53:02]28746: Updated license status via CDN [03-07-2022 14:54:01]31313: WAF :: fetched 1 new logs [03-07-2022 14:55:02]1593: WAF :: fetched 1 new logs [03-07-2022 14:57:01]6944: WAF :: fetched 1 new logs [03-07-2022 14:58:02]9526: WAF :: fetched 1 new logs [03-07-2022 14:59:01]12108: WAF :: fetched 3 new logs [03-07-2022 15:00:03]14470: WAF :: fetched 3 new logs [03-07-2022 15:01:02]17548: Reseting cPGuard inotify settings [03-07-2022 15:01:02]17546: WAF :: fetched 2 new logs [03-07-2022 15:02:02]20135: WAF :: fetched 1 new logs [03-07-2022 15:03:02]22786: WAF :: fetched 3 new logs [03-07-2022 15:09:03]6071: WAF :: fetched 13 new logs [03-07-2022 15:10:02]8739: WAF :: fetched 17 new logs [03-07-2022 15:11:01]11378: WAF :: fetched 13 new logs [03-07-2022 15:12:02]13945: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656871922 [03-07-2022 15:12:02]13945: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 15:12:04]13945: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 15:12:05]13945: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-1512/20220703-151202-YsHb8pqFPFxBYLK_rWwZswAAAAY [03-07-2022 15:12:05]13945: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-07-2022 15:12:05]13945: WAF :: fetched 21 new logs [03-07-2022 15:13:01]16517: WAF :: fetched 16 new logs [03-07-2022 15:14:01]19125: WAF :: fetched 22 new logs [03-07-2022 15:15:02]21800: WAF :: fetched 22 new logs [03-07-2022 15:16:01]24431: WAF :: fetched 20 new logs [03-07-2022 15:17:01]26989: WAF :: fetched 19 new logs [03-07-2022 15:18:02]29580: WAF :: fetched 21 new logs [03-07-2022 15:19:01]32125: WAF :: fetched 20 new logs [03-07-2022 15:20:02]2451: WAF :: fetched 2 new logs [03-07-2022 15:22:02]7721: WAF :: fetched 1 new logs [03-07-2022 15:23:01]10254: WAF :: fetched 1 new logs [03-07-2022 15:24:02]12860: WAF :: fetched 1 new logs [03-07-2022 15:28:02]23345: WAF :: fetched 3 new logs [03-07-2022 15:33:02]4082: WAF :: fetched 1 new logs [03-07-2022 15:35:02]9341: WAF :: fetched 3 new logs [03-07-2022 15:36:01]11972: WAF :: fetched 1 new logs [03-07-2022 15:40:02]22476: WAF :: fetched 1 new logs [03-07-2022 15:41:01]25138: Checking for user cron vulnerabilities [03-07-2022 15:43:01]30337: WAF :: fetched 1 new logs [03-07-2022 15:44:01]485: Checking ditributed CMS bruteforce attacks [03-07-2022 15:44:05]485: WAF :: fetched 3 new logs [03-07-2022 15:47:03]8547: WAF :: fetched 2 new logs [03-07-2022 15:48:01]11119: WAF :: fetched 1 new logs [03-07-2022 15:51:01]19017: WAF :: fetched 3 new logs [03-07-2022 15:52:02]21625: WAF :: fetched 2 new logs [03-07-2022 15:53:02]24184: WAF :: fetched 1 new logs [03-07-2022 15:54:02]26807: WAF :: fetched 1 new logs [03-07-2022 15:55:02]29465: WAF :: fetched 3 new logs [03-07-2022 15:56:02]32112: WAF :: fetched 1 new logs [03-07-2022 15:57:01]2329: WAF :: fetched 2 new logs [03-07-2022 15:58:01]4966: WAF :: fetched 1 new logs [03-07-2022 16:00:02]9920: WAF :: fetched 2 new logs [03-07-2022 16:02:01]15704: WAF :: fetched 1 new logs [03-07-2022 16:03:02]18289: WAF :: fetched 2 new logs [03-07-2022 16:04:02]20840: WAF :: fetched 3 new logs [03-07-2022 16:05:02]23549: WAF :: fetched 1 new logs [03-07-2022 16:06:03]26133: WAF :: fetched 2 new logs [03-07-2022 16:07:01]28734: WAF :: fetched 4 new logs [03-07-2022 16:08:01]31259: WAF :: fetched 2 new logs [03-07-2022 16:09:02]1450: WAF :: fetched 2 new logs [03-07-2022 16:11:02]6841: WAF :: fetched 1 new logs [03-07-2022 16:12:01]9414: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656875521 [03-07-2022 16:12:01]9414: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 16:12:03]9414: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 16:12:03]9414: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-1612/20220703-161201-YsHqAXRxCh2sgaFkkkG6LQAAAA4 [03-07-2022 16:12:03]9414: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 16:12:09]9414: WAF :: fetched 167 new logs [03-07-2022 16:13:02]12030: WAF :: fetched 1 new logs [03-07-2022 16:14:01]14565: WAF :: fetched 1 new logs [03-07-2022 16:18:02]25022: WAF :: fetched 1 new logs [03-07-2022 16:19:01]27553: WAF :: fetched 2 new logs [03-07-2022 16:20:02]30250: WAF :: fetched 2 new logs [03-07-2022 16:21:02]427: WAF :: fetched 1 new logs [03-07-2022 16:24:02]8275: WAF :: fetched 2 new logs [03-07-2022 16:25:02]10991: WAF :: fetched 3 new logs [03-07-2022 16:27:02]16137: WAF :: fetched 15 new logs [03-07-2022 16:33:01]31759: WAF :: fetched 1 new logs [03-07-2022 16:35:02]4655: WAF :: fetched 2 new logs [03-07-2022 16:37:02]9941: WAF :: fetched 1 new logs [03-07-2022 16:41:01]20378: WAF :: fetched 1 new logs [03-07-2022 16:41:01]20378: Checking for user cron vulnerabilities [03-07-2022 16:42:02]23019: WAF :: fetched 1 new logs [03-07-2022 16:44:01]28232: Checking ditributed CMS bruteforce attacks [03-07-2022 16:46:02]1351: WAF :: fetched 1 new logs [03-07-2022 16:47:01]4123: WAF :: fetched 1 new logs [03-07-2022 16:49:01]9627: WAF :: fetched 1 new logs [03-07-2022 16:57:02]31323: WAF :: fetched 8 new logs [03-07-2022 16:58:02]1716: WAF :: fetched 5 new logs [03-07-2022 16:59:02]4535: WAF :: fetched 2 new logs [03-07-2022 17:00:02]6884: WAF :: fetched 2 new logs [03-07-2022 17:01:01]10020: WAF :: fetched 1 new logs [03-07-2022 17:02:02]12651: WAF :: fetched 27 new logs [03-07-2022 17:03:03]15208: WAF :: fetched 41 new logs [03-07-2022 17:04:01]17788: WAF :: fetched 63 new logs [03-07-2022 17:05:02]20388: WAF :: fetched 91 new logs [03-07-2022 17:06:01]23078: WAF :: fetched 55 new logs [03-07-2022 17:07:01]25659: WAF :: fetched 41 new logs [03-07-2022 17:08:02]28255: WAF :: fetched 24 new logs [03-07-2022 17:12:03]6329: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656879123 [03-07-2022 17:12:03]6329: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 17:12:05]6329: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 17:12:07]6329: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-1712/20220703-171203-YsH4E4X3hWgpIAvuczPAtQAAAAY [03-07-2022 17:12:07]6329: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 17:12:07]6329: WAF :: fetched 1 new logs [03-07-2022 17:16:01]16749: WAF :: fetched 5 new logs [03-07-2022 17:19:01]24432: WAF :: fetched 2 new logs [03-07-2022 17:23:02]2428: WAF :: fetched 3 new logs [03-07-2022 17:24:01]5059: WAF :: fetched 1 new logs [03-07-2022 17:25:02]7662: WAF :: fetched 1 new logs [03-07-2022 17:26:01]10404: WAF :: fetched 1 new logs [03-07-2022 17:27:02]13107: WAF :: fetched 1 new logs [03-07-2022 17:32:02]26555: WAF :: fetched 2 new logs [03-07-2022 17:33:02]29108: WAF :: fetched 1 new logs [03-07-2022 17:34:01]31638: WAF :: fetched 1 new logs [03-07-2022 17:36:02]4758: WAF :: fetched 1 new logs [03-07-2022 17:37:01]7303: WAF :: fetched 1 new logs [03-07-2022 17:40:02]14957: WAF :: fetched 3 new logs [03-07-2022 17:41:01]17675: Checking for user cron vulnerabilities [03-07-2022 17:42:02]20265: WAF :: fetched 1 new logs [03-07-2022 17:44:01]25599: Checking ditributed CMS bruteforce attacks [03-07-2022 17:46:02]30912: WAF :: fetched 2 new logs [03-07-2022 17:50:02]8883: WAF :: fetched 1 new logs [03-07-2022 17:53:01]16695: WAF :: fetched 1 new logs [03-07-2022 17:54:03]19325: WAF :: fetched 5 new logs [03-07-2022 17:55:01]21542: WAF :: fetched 2 new logs [03-07-2022 17:56:02]24746: WAF :: fetched 1 new logs [03-07-2022 18:01:01]5951: WAF :: fetched 3 new logs [03-07-2022 18:06:01]19031: WAF :: fetched 1 new logs [03-07-2022 18:07:02]21609: WAF :: fetched 1 new logs [03-07-2022 18:08:01]24164: WAF :: fetched 11 new logs [03-07-2022 18:09:01]26736: WAF :: fetched 3 new logs [03-07-2022 18:10:02]29309: WAF :: fetched 4 new logs [03-07-2022 18:11:01]32152: WAF :: fetched 5 new logs [03-07-2022 18:12:02]2386: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656882722 [03-07-2022 18:12:02]2386: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 18:12:04]2386: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 18:12:05]2386: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-1812/20220703-181202-YsIGIpBjfgK8SLE36D9PqgAAAAs [03-07-2022 18:12:05]2386: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 18:12:06]2386: WAF :: fetched 15 new logs [03-07-2022 18:13:01]5133: WAF :: fetched 53 new logs [03-07-2022 18:14:01]7868: WAF :: fetched 49 new logs [03-07-2022 18:15:02]10593: WAF :: fetched 56 new logs [03-07-2022 18:16:01]13336: WAF :: fetched 54 new logs [03-07-2022 18:17:02]15909: WAF :: fetched 7 new logs [03-07-2022 18:19:01]21237: WAF :: fetched 2 new logs [03-07-2022 18:20:02]23882: WAF :: fetched 2 new logs [03-07-2022 18:22:01]29145: WAF :: fetched 1 new logs [03-07-2022 18:23:01]31729: WAF :: fetched 3 new logs [03-07-2022 18:25:02]4598: WAF :: fetched 2 new logs [03-07-2022 18:26:02]7285: WAF :: fetched 3 new logs [03-07-2022 18:27:01]9831: WAF :: fetched 8 new logs [03-07-2022 18:28:02]12390: WAF :: fetched 6 new logs [03-07-2022 18:29:01]14972: WAF :: fetched 14 new logs [03-07-2022 18:30:02]17550: WAF :: fetched 3 new logs [03-07-2022 18:31:01]20291: WAF :: fetched 2 new logs [03-07-2022 18:32:02]22896: WAF :: fetched 2 new logs [03-07-2022 18:35:01]30559: WAF :: fetched 3 new logs [03-07-2022 18:37:02]3502: WAF :: fetched 1 new logs [03-07-2022 18:39:02]8789: WAF :: fetched 2 new logs [03-07-2022 18:41:02]14105: WAF :: fetched 39 new logs [03-07-2022 18:41:02]14105: Checking for user cron vulnerabilities [03-07-2022 18:42:02]16669: WAF :: fetched 33 new logs [03-07-2022 18:43:01]19289: WAF :: fetched 43 new logs [03-07-2022 18:44:01]21910: Checking ditributed CMS bruteforce attacks [03-07-2022 18:44:09]21910: WAF :: fetched 29 new logs [03-07-2022 18:46:02]27181: WAF :: fetched 1 new logs [03-07-2022 18:47:01]29773: WAF :: fetched 2 new logs [03-07-2022 18:48:02]32393: WAF :: fetched 4 new logs [03-07-2022 18:49:01]2616: WAF :: fetched 3 new logs [03-07-2022 18:51:02]8083: WAF :: fetched 2 new logs [03-07-2022 18:52:01]10700: WAF :: fetched 6 new logs [03-07-2022 18:55:01]18571: WAF :: fetched 2 new logs [03-07-2022 18:56:02]21287: WAF :: fetched 2 new logs [03-07-2022 18:58:02]26541: WAF :: fetched 3 new logs [03-07-2022 18:59:01]29103: WAF :: fetched 3 new logs [03-07-2022 19:00:02]31433: WAF :: fetched 1 new logs [03-07-2022 19:01:02]2270: WAF :: fetched 7 new logs [03-07-2022 19:02:01]4967: WAF :: fetched 7 new logs [03-07-2022 19:03:03]7601: WAF :: fetched 2 new logs [03-07-2022 19:04:01]10160: WAF :: fetched 3 new logs [03-07-2022 19:05:02]12757: WAF :: fetched 4 new logs [03-07-2022 19:06:02]15447: WAF :: fetched 3 new logs [03-07-2022 19:07:01]18016: WAF :: fetched 3 new logs [03-07-2022 19:08:02]20667: WAF :: fetched 7 new logs [03-07-2022 19:11:02]28539: WAF :: fetched 2 new logs [03-07-2022 19:12:02]31172: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656886322 [03-07-2022 19:12:02]31172: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 19:12:04]31172: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 19:12:05]31172: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-1912/20220703-191202-YsIUMjcvmcb79-z9VtLpQQAAAAk [03-07-2022 19:12:05]31172: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 19:12:06]31172: WAF :: fetched 2 new logs [03-07-2022 19:13:02]1378: WAF :: fetched 1 new logs [03-07-2022 19:14:01]4036: WAF :: fetched 2 new logs [03-07-2022 19:15:02]6688: WAF :: fetched 1 new logs [03-07-2022 19:17:02]11937: WAF :: fetched 2 new logs [03-07-2022 19:18:01]14563: WAF :: fetched 2 new logs [03-07-2022 19:20:02]19738: WAF :: fetched 2 new logs [03-07-2022 19:21:02]22499: WAF :: fetched 1 new logs [03-07-2022 19:22:02]25091: WAF :: fetched 2 new logs [03-07-2022 19:25:02]465: WAF :: fetched 2 new logs [03-07-2022 19:27:01]5914: WAF :: fetched 6 new logs [03-07-2022 19:28:02]8500: WAF :: fetched 4 new logs [03-07-2022 19:29:01]11097: WAF :: fetched 1 new logs [03-07-2022 19:30:03]13740: WAF :: fetched 7 new logs [03-07-2022 19:31:02]16454: WAF :: fetched 2 new logs [03-07-2022 19:32:01]19086: WAF :: fetched 3 new logs [03-07-2022 19:33:02]21713: WAF :: fetched 3 new logs [03-07-2022 19:34:02]24242: WAF :: fetched 1 new logs [03-07-2022 19:35:01]26804: WAF :: fetched 2 new logs [03-07-2022 19:36:02]29523: WAF :: fetched 1 new logs [03-07-2022 19:38:02]2271: WAF :: fetched 2 new logs [03-07-2022 19:39:02]4913: WAF :: fetched 2 new logs [03-07-2022 19:40:02]7544: WAF :: fetched 5 new logs [03-07-2022 19:41:01]10214: WAF :: fetched 17 new logs [03-07-2022 19:41:01]10214: Checking for user cron vulnerabilities [03-07-2022 19:42:02]12793: WAF :: fetched 4 new logs [03-07-2022 19:43:01]15343: WAF :: fetched 4 new logs [03-07-2022 19:44:02]17919: Checking ditributed CMS bruteforce attacks [03-07-2022 19:44:09]17919: WAF :: fetched 3 new logs [03-07-2022 19:45:01]: Checking for definition updates [03-07-2022 19:45:02]20517: WAF :: fetched 2 new logs [03-07-2022 19:45:03]20514: Updated virus defnition : malware.expert.fp [03-07-2022 19:47:02]25811: WAF :: fetched 1227 new logs [03-07-2022 19:48:04]28347: WAF :: fetched 1773 new logs [03-07-2022 19:49:03]30933: WAF :: fetched 1687 new logs [03-07-2022 19:50:02]1080: WAF :: fetched 1270 new logs [03-07-2022 19:51:03]3851: WAF :: fetched 1703 new logs [03-07-2022 19:52:02]6447: WAF :: fetched 32 new logs [03-07-2022 19:53:01]8986: WAF :: fetched 2 new logs [03-07-2022 19:54:02]11585: WAF :: fetched 2 new logs [03-07-2022 19:56:01]16849: WAF :: fetched 1 new logs [03-07-2022 19:57:02]19426: WAF :: fetched 1 new logs [03-07-2022 19:58:02]21987: WAF :: fetched 5 new logs [03-07-2022 19:59:02]24542: WAF :: fetched 3 new logs [03-07-2022 20:02:01]32568: WAF :: fetched 2 new logs [03-07-2022 20:06:01]10580: WAF :: fetched 1 new logs [03-07-2022 20:07:02]13152: WAF :: fetched 1 new logs [03-07-2022 20:08:01]15704: WAF :: fetched 1 new logs [03-07-2022 20:09:01]18271: WAF :: fetched 10 new logs [03-07-2022 20:10:02]20900: WAF :: fetched 26 new logs [03-07-2022 20:11:01]23577: WAF :: fetched 48 new logs [03-07-2022 20:12:02]26137: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656889922 [03-07-2022 20:12:02]26137: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 20:12:04]26137: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 20:12:05]26137: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-2012/20220703-201202-YsIiQq3bYr-7RAwivwzidwAAAAw [03-07-2022 20:12:05]26137: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 20:12:05]26137: WAF :: fetched 21 new logs [03-07-2022 20:13:01]28690: WAF :: fetched 42 new logs [03-07-2022 20:14:01]31234: WAF :: fetched 70 new logs [03-07-2022 20:15:01]1398: WAF :: fetched 96 new logs [03-07-2022 20:16:03]4142: WAF :: fetched 44 new logs [03-07-2022 20:17:01]6736: WAF :: fetched 29 new logs [03-07-2022 20:18:02]9326: WAF :: fetched 15 new logs [03-07-2022 20:19:02]11902: WAF :: fetched 67 new logs [03-07-2022 20:20:01]14472: WAF :: fetched 36 new logs [03-07-2022 20:21:02]17202: WAF :: fetched 7 new logs [03-07-2022 20:22:01]19760: WAF :: fetched 7 new logs [03-07-2022 20:24:02]25018: WAF :: fetched 3 new logs [03-07-2022 20:25:02]27612: WAF :: fetched 668 new logs [03-07-2022 20:26:02]30274: WAF :: fetched 57 new logs [03-07-2022 20:27:02]385: WAF :: fetched 1 new logs [03-07-2022 20:28:01]3049: WAF :: fetched 1 new logs [03-07-2022 20:29:02]5697: WAF :: fetched 2 new logs [03-07-2022 20:30:01]8278: WAF :: fetched 5 new logs [03-07-2022 20:31:01]11029: WAF :: fetched 2 new logs [03-07-2022 20:33:01]16214: WAF :: fetched 3 new logs [03-07-2022 20:34:02]18806: WAF :: fetched 4 new logs [03-07-2022 20:35:02]21379: WAF :: fetched 3 new logs [03-07-2022 20:36:02]24110: WAF :: fetched 33 new logs [03-07-2022 20:37:02]26642: WAF :: fetched 2 new logs [03-07-2022 20:39:02]31835: WAF :: fetched 1 new logs [03-07-2022 20:40:01]2057: WAF :: fetched 2 new logs [03-07-2022 20:41:02]4877: WAF :: fetched 2 new logs [03-07-2022 20:41:02]4877: Checking for user cron vulnerabilities [03-07-2022 20:44:01]12516: Checking ditributed CMS bruteforce attacks [03-07-2022 20:46:02]17817: WAF :: fetched 19 new logs [03-07-2022 20:47:01]20420: WAF :: fetched 23 new logs [03-07-2022 20:48:02]23002: WAF :: fetched 33 new logs [03-07-2022 20:49:01]25529: WAF :: fetched 4 new logs [03-07-2022 20:51:01]30914: WAF :: fetched 1 new logs [03-07-2022 20:54:02]6552: WAF :: fetched 1 new logs [03-07-2022 20:55:01]9170: WAF :: fetched 4 new logs [03-07-2022 20:57:01]14356: WAF :: fetched 3 new logs [03-07-2022 20:58:02]16937: WAF :: fetched 1 new logs [03-07-2022 20:59:02]19490: WAF :: fetched 2 new logs [03-07-2022 21:00:01]21966: WAF :: fetched 3 new logs [03-07-2022 21:01:02]25130: WAF :: fetched 1 new logs [03-07-2022 21:02:01]27762: WAF :: fetched 3 new logs [03-07-2022 21:03:03]30340: WAF :: fetched 1 new logs [03-07-2022 21:04:02]463: WAF :: fetched 1 new logs [03-07-2022 21:05:02]3125: WAF :: fetched 2 new logs [03-07-2022 21:07:01]8457: WAF :: fetched 1 new logs [03-07-2022 21:11:02]18818: WAF :: fetched 1 new logs [03-07-2022 21:12:01]21443: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656893521 [03-07-2022 21:12:01]21443: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 21:12:03]21443: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 21:12:05]21443: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-2112/20220703-211201-YsIwUdZU0KlbLIJ5s6141QAAAA4 [03-07-2022 21:12:05]21443: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-07-2022 21:12:05]21443: WAF :: fetched 1 new logs [03-07-2022 21:13:02]24051: WAF :: fetched 1 new logs [03-07-2022 21:16:01]31786: WAF :: fetched 6 new logs [03-07-2022 21:17:01]2035: WAF :: fetched 5 new logs [03-07-2022 21:18:02]4746: WAF :: fetched 1 new logs [03-07-2022 21:19:01]7297: WAF :: fetched 2 new logs [03-07-2022 21:20:02]9908: WAF :: fetched 7 new logs [03-07-2022 21:21:02]12536: WAF :: fetched 1 new logs [03-07-2022 21:23:02]17744: WAF :: fetched 1 new logs [03-07-2022 21:25:02]22897: WAF :: fetched 1 new logs [03-07-2022 21:26:02]25532: WAF :: fetched 5 new logs [03-07-2022 21:27:01]28202: WAF :: fetched 3 new logs [03-07-2022 21:29:02]954: WAF :: fetched 2 new logs [03-07-2022 21:30:02]3644: WAF :: fetched 2 new logs [03-07-2022 21:31:02]6357: WAF :: fetched 7 new logs [03-07-2022 21:32:01]9028: WAF :: fetched 1 new logs [03-07-2022 21:34:02]14147: WAF :: fetched 5 new logs [03-07-2022 21:36:02]19375: WAF :: fetched 2 new logs [03-07-2022 21:37:01]22032: WAF :: fetched 2 new logs [03-07-2022 21:38:01]24617: WAF :: fetched 2 new logs [03-07-2022 21:40:01]29752: WAF :: fetched 3 new logs [03-07-2022 21:41:02]32359: WAF :: fetched 1 new logs [03-07-2022 21:41:02]32359: Checking for user cron vulnerabilities [03-07-2022 21:43:02]5339: WAF :: fetched 4 new logs [03-07-2022 21:44:01]7881: Checking ditributed CMS bruteforce attacks [03-07-2022 21:44:08]7881: WAF :: fetched 1 new logs [03-07-2022 21:48:02]18271: WAF :: fetched 2 new logs [03-07-2022 21:49:01]20869: WAF :: fetched 2 new logs [03-07-2022 21:51:02]26124: WAF :: fetched 5 new logs [03-07-2022 21:52:01]28771: WAF :: fetched 1 new logs [03-07-2022 21:53:02]31320: WAF :: fetched 1 new logs [03-07-2022 21:54:02]1481: WAF :: fetched 2 new logs [03-07-2022 21:55:02]4136: WAF :: fetched 2 new logs [03-07-2022 21:57:01]9460: WAF :: fetched 3 new logs [03-07-2022 21:58:02]12024: WAF :: fetched 1 new logs [03-07-2022 21:59:03]14601: WAF :: fetched 3 new logs [03-07-2022 22:02:01]22648: WAF :: fetched 1 new logs [03-07-2022 22:05:01]30208: WAF :: fetched 1 new logs [03-07-2022 22:06:02]324: WAF :: fetched 6 new logs [03-07-2022 22:07:01]2997: WAF :: fetched 1 new logs [03-07-2022 22:07:11]3034: Performing Domain reputation checks [03-07-2022 22:08:02]5652: WAF :: fetched 1 new logs [03-07-2022 22:09:02]8175: WAF :: fetched 1 new logs [03-07-2022 22:10:01]10719: WAF :: fetched 3 new logs [03-07-2022 22:11:02]13315: WAF :: fetched 2 new logs [03-07-2022 22:12:02]15897: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656897122 [03-07-2022 22:12:02]15897: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 22:12:04]15897: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 22:12:04]15897: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-2212/20220703-221202-YsI-YnUhdmgkOW8z89qszgAAAAs [03-07-2022 22:12:04]15897: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 22:12:07]15897: WAF :: fetched 86 new logs [03-07-2022 22:15:01]23519: WAF :: fetched 31 new logs [03-07-2022 22:20:02]3949: WAF :: fetched 3 new logs [03-07-2022 22:21:02]6552: WAF :: fetched 3 new logs [03-07-2022 22:22:01]9194: WAF :: fetched 7 new logs [03-07-2022 22:23:02]11694: WAF :: fetched 4 new logs [03-07-2022 22:25:01]16744: WAF :: fetched 1 new logs [03-07-2022 22:26:01]19293: WAF :: fetched 1 new logs [03-07-2022 22:29:01]26898: WAF :: fetched 1 new logs [03-07-2022 22:30:02]29467: WAF :: fetched 7 new logs [03-07-2022 22:31:01]32034: WAF :: fetched 2 new logs [03-07-2022 22:33:02]4943: WAF :: fetched 3 new logs [03-07-2022 22:34:02]7478: WAF :: fetched 1323 new logs [03-07-2022 22:35:02]10015: WAF :: fetched 2 new logs [03-07-2022 22:36:01]12688: WAF :: fetched 1 new logs [03-07-2022 22:37:02]15405: WAF :: fetched 1 new logs [03-07-2022 22:38:02]18007: WAF :: fetched 2 new logs [03-07-2022 22:40:02]23279: WAF :: fetched 4 new logs [03-07-2022 22:41:01]25811: WAF :: fetched 1 new logs [03-07-2022 22:41:01]25811: Checking for user cron vulnerabilities [03-07-2022 22:44:01]1039: Checking ditributed CMS bruteforce attacks [03-07-2022 22:44:06]1039: WAF :: fetched 1 new logs [03-07-2022 22:45:02]3746: WAF :: fetched 1 new logs [03-07-2022 22:48:01]11438: WAF :: fetched 6 new logs [03-07-2022 22:49:02]13942: WAF :: fetched 2 new logs [03-07-2022 22:50:01]16470: WAF :: fetched 3 new logs [03-07-2022 22:51:02]19051: WAF :: fetched 6 new logs [03-07-2022 22:52:02]21640: WAF :: fetched 4 new logs [03-07-2022 22:53:01]24149: WAF :: fetched 3 new logs [03-07-2022 22:54:02]26689: WAF :: fetched 2 new logs [03-07-2022 22:55:01]29190: WAF :: fetched 1 new logs [03-07-2022 22:56:02]31768: WAF :: fetched 6 new logs [03-07-2022 22:57:01]1984: WAF :: fetched 2 new logs [03-07-2022 22:58:02]4635: WAF :: fetched 2 new logs [03-07-2022 22:59:01]7158: WAF :: fetched 2 new logs [03-07-2022 23:00:01]9433: WAF :: fetched 2 new logs [03-07-2022 23:01:02]12477: WAF :: fetched 1 new logs [03-07-2022 23:02:02]15094: WAF :: fetched 2 new logs [03-07-2022 23:03:02]17675: WAF :: fetched 5 new logs [03-07-2022 23:05:02]22821: WAF :: fetched 6 new logs [03-07-2022 23:07:02]27950: WAF :: fetched 3 new logs [03-07-2022 23:08:01]30464: WAF :: fetched 1 new logs [03-07-2022 23:08:18]28114: Performed RBL check for 23.111.136.34. [03-07-2022 23:09:04]596: WAF :: fetched 3 new logs [03-07-2022 23:10:02]3173: WAF :: fetched 1 new logs [03-07-2022 23:11:01]5838: WAF :: fetched 1 new logs [03-07-2022 23:12:02]8465: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656900722 [03-07-2022 23:12:02]8465: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-07-2022 23:12:04]8465: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-07-2022 23:12:05]8465: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220703/20220703-2312/20220703-231202-YsJMcv92Ji1wb1-99zAYPwAAAB0 [03-07-2022 23:12:05]8465: WAF :: No suitable log file found. Using SQLite.. [03-07-2022 23:12:06]8465: WAF :: fetched 2 new logs [03-07-2022 23:13:01]11037: WAF :: fetched 2 new logs [03-07-2022 23:14:02]13578: WAF :: fetched 2 new logs [03-07-2022 23:15:02]16060: WAF :: fetched 2 new logs [03-07-2022 23:17:02]21234: WAF :: fetched 1 new logs [03-07-2022 23:19:01]26208: WAF :: fetched 1 new logs [03-07-2022 23:20:02]28753: WAF :: fetched 2 new logs [03-07-2022 23:23:01]4099: WAF :: fetched 1 new logs [03-07-2022 23:27:02]14410: WAF :: fetched 2 new logs [03-07-2022 23:28:01]16911: WAF :: fetched 3 new logs [03-07-2022 23:30:02]21960: WAF :: fetched 3 new logs [03-07-2022 23:31:01]24542: WAF :: fetched 2 new logs [03-07-2022 23:33:02]29691: WAF :: fetched 2 new logs [03-07-2022 23:34:01]32177: WAF :: fetched 1 new logs [03-07-2022 23:35:02]2321: WAF :: fetched 4 new logs [03-07-2022 23:37:01]7630: WAF :: fetched 2 new logs [03-07-2022 23:38:02]10165: WAF :: fetched 4 new logs [03-07-2022 23:41:01]17716: Checking for user cron vulnerabilities [03-07-2022 23:42:02]20351: WAF :: fetched 1 new logs [03-07-2022 23:43:02]22839: WAF :: fetched 3 new logs [03-07-2022 23:44:01]25301: Checking ditributed CMS bruteforce attacks [03-07-2022 23:45:02]27832: WAF :: fetched 3 new logs [03-07-2022 23:47:01]543: WAF :: fetched 1 new logs [03-07-2022 23:48:02]3107: WAF :: fetched 1 new logs [03-07-2022 23:49:01]5702: WAF :: fetched 3 new logs [03-07-2022 23:50:02]8295: WAF :: fetched 1 new logs [03-07-2022 23:52:01]13475: WAF :: fetched 2 new logs [03-07-2022 23:54:03]18622: WAF :: fetched 2 new logs [03-07-2022 23:55:02]21914: WAF :: fetched 38 new logs [03-07-2022 23:56:01]25276: httpd.conf changed. Refreshing watchlist. [03-07-2022 23:56:01]25263: WAF :: fetched 63 new logs [03-07-2022 23:57:02]27937: WAF :: fetched 17 new logs [03-07-2022 23:58:01]30510: httpd.conf changed. Refreshing watchlist. [03-07-2022 23:58:02]30514: WAF :: fetched 27 new logs [03-07-2022 23:59:01]849: WAF :: fetched 17 new logs [04-07-2022 00:00:02]3158: WAF :: fetched 1 new logs [04-07-2022 00:01:02]6267: WAF :: fetched 2 new logs [04-07-2022 00:01:04]6267: Sending daily report for July 4, 2022 [04-07-2022 00:02:01]9024: httpd.conf changed. Refreshing watchlist. [04-07-2022 00:02:01]9021: WAF :: fetched 2 new logs [04-07-2022 00:04:02]14076: WAF :: fetched 1 new logs [04-07-2022 00:05:02]16562: Deleted 0 entries older than 6 MONTH from scanner_logs [04-07-2022 00:05:02]16562: Deleted 0 files from Quarantine [04-07-2022 00:06:02]19134: WAF :: fetched 1 new logs [04-07-2022 00:07:01]21730: WAF :: fetched 3 new logs [04-07-2022 00:10:02]29322: WAF :: fetched 3 new logs [04-07-2022 00:11:01]31852: WAF :: fetched 1 new logs [04-07-2022 00:12:03]2047: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656904323 [04-07-2022 00:12:03]2047: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 00:12:05]2047: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 00:12:06]2047: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-0012/20220704-001203-YsJag-ShgPcm3w7w_YJN8QAAAAc [04-07-2022 00:12:06]2047: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 00:12:06]2047: WAF :: fetched 1 new logs [04-07-2022 00:14:01]7196: WAF :: fetched 1 new logs [04-07-2022 00:15:02]9755: WAF :: fetched 1 new logs [04-07-2022 00:17:01]14916: WAF :: fetched 1 new logs [04-07-2022 00:19:01]19948: WAF :: fetched 2 new logs [04-07-2022 00:20:02]22524: WAF :: fetched 2 new logs [04-07-2022 00:21:02]25115: WAF :: fetched 1 new logs [04-07-2022 00:22:01]27814: WAF :: fetched 1 new logs [04-07-2022 00:25:01]3163: WAF :: fetched 4 new logs [04-07-2022 00:26:02]6018: WAF :: fetched 4 new logs [04-07-2022 00:28:02]11213: WAF :: fetched 1 new logs [04-07-2022 00:29:02]13753: WAF :: fetched 1 new logs [04-07-2022 00:30:01]16393: WAF :: fetched 6 new logs [04-07-2022 00:31:02]19068: WAF :: fetched 2 new logs [04-07-2022 00:32:03]21616: WAF :: fetched 4 new logs [04-07-2022 00:33:01]24331: WAF :: fetched 5 new logs [04-07-2022 00:34:02]26894: WAF :: fetched 3 new logs [04-07-2022 00:36:02]32090: WAF :: fetched 3 new logs [04-07-2022 00:37:02]2265: WAF :: fetched 5 new logs [04-07-2022 00:38:02]4939: WAF :: fetched 3 new logs [04-07-2022 00:39:01]7461: WAF :: fetched 4 new logs [04-07-2022 00:41:02]12527: WAF :: fetched 1 new logs [04-07-2022 00:41:02]12527: Checking for user cron vulnerabilities [04-07-2022 00:43:02]17638: WAF :: fetched 1 new logs [04-07-2022 00:44:01]20150: Checking ditributed CMS bruteforce attacks [04-07-2022 00:44:01]20150: WAF :: fetched 1 new logs [04-07-2022 00:45:02]: Checking for software updates [04-07-2022 00:46:02]25292: WAF :: fetched 1 new logs [04-07-2022 00:47:01]27774: WAF :: fetched 3 new logs [04-07-2022 00:48:02]30412: WAF :: fetched 9 new logs [04-07-2022 00:50:02]3048: WAF :: fetched 2 new logs [04-07-2022 00:51:02]5680: WAF :: fetched 1 new logs [04-07-2022 00:57:02]21119: WAF :: fetched 1 new logs [04-07-2022 00:58:02]23778: WAF :: fetched 3 new logs [04-07-2022 01:00:01]28525: WAF :: fetched 1 new logs [04-07-2022 01:01:02]32263: WAF :: fetched 1 new logs [04-07-2022 01:02:02]2555: WAF :: fetched 1 new logs [04-07-2022 01:03:01]5387: WAF :: fetched 1 new logs [04-07-2022 01:05:02]11359: WAF :: fetched 1 new logs [04-07-2022 01:06:01]14125: WAF :: fetched 1 new logs [04-07-2022 01:10:02]24886: WAF :: fetched 2 new logs [04-07-2022 01:11:02]27655: WAF :: fetched 2 new logs [04-07-2022 01:12:02]30332: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656907922 [04-07-2022 01:12:02]30332: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 01:12:04]30332: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 01:12:07]30332: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-0112/20220704-011202-YsJoknGrI0snwMUjT-LSUwAAABA [04-07-2022 01:12:07]30332: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 01:12:07]30332: WAF :: fetched 4 new logs [04-07-2022 01:13:02]817: WAF :: fetched 1 new logs [04-07-2022 01:15:02]5962: WAF :: fetched 2 new logs [04-07-2022 01:16:01]8586: WAF :: fetched 3 new logs [04-07-2022 01:18:02]13895: WAF :: fetched 1 new logs [04-07-2022 01:19:01]16584: WAF :: fetched 251 new logs [04-07-2022 01:20:02]19275: WAF :: fetched 451 new logs [04-07-2022 01:21:01]21926: WAF :: fetched 1 new logs [04-07-2022 01:22:02]24625: WAF :: fetched 2 new logs [04-07-2022 01:23:02]27379: WAF :: fetched 2 new logs [04-07-2022 01:26:02]3428: WAF :: fetched 4 new logs [04-07-2022 01:28:01]8670: WAF :: fetched 3 new logs [04-07-2022 01:29:02]11165: WAF :: fetched 2 new logs [04-07-2022 01:31:01]16534: WAF :: fetched 3 new logs [04-07-2022 01:34:02]24827: WAF :: fetched 3 new logs [04-07-2022 01:35:03]27422: WAF :: fetched 1 new logs [04-07-2022 01:36:02]30019: WAF :: fetched 1 new logs [04-07-2022 01:37:01]32697: WAF :: fetched 1 new logs [04-07-2022 01:39:01]6076: WAF :: fetched 1 new logs [04-07-2022 01:40:01]8755: WAF :: fetched 1 new logs [04-07-2022 01:41:02]11512: WAF :: fetched 1 new logs [04-07-2022 01:41:02]11512: Checking for user cron vulnerabilities [04-07-2022 01:42:01]14353: WAF :: fetched 2 new logs [04-07-2022 01:43:02]17099: WAF :: fetched 1 new logs [04-07-2022 01:44:01]19701: Checking ditributed CMS bruteforce attacks [04-07-2022 01:45:01]: Checking for definition updates [04-07-2022 01:45:05]22239: Updated virus defnition : signatures.ndb [04-07-2022 01:46:01]25053: WAF :: fetched 1 new logs [04-07-2022 01:48:01]30381: WAF :: fetched 1 new logs [04-07-2022 01:52:02]8990: WAF :: fetched 4 new logs [04-07-2022 01:54:02]14992: WAF :: fetched 2 new logs [04-07-2022 01:58:02]25370: WAF :: fetched 2 new logs [04-07-2022 01:59:01]27906: WAF :: fetched 2 new logs [04-07-2022 02:00:02]30165: WAF :: fetched 1 new logs [04-07-2022 02:01:01]1052: WAF :: fetched 1 new logs [04-07-2022 02:03:01]6616: WAF :: fetched 1 new logs [04-07-2022 02:04:02]9214: WAF :: fetched 17 new logs [04-07-2022 02:08:01]19764: WAF :: fetched 1 new logs [04-07-2022 02:09:02]22320: WAF :: fetched 1 new logs [04-07-2022 02:12:02]30023: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656911522 [04-07-2022 02:12:02]30023: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 02:12:04]30023: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 02:12:06]30023: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-0212/20220704-021202-YsJ2oqDSC_5XKl7rztR0wAAAAAU [04-07-2022 02:12:06]30023: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-07-2022 02:12:06]30023: WAF :: fetched 1 new logs [04-07-2022 02:13:01]32619: WAF :: fetched 1 new logs [04-07-2022 02:15:02]5560: WAF :: fetched 5 new logs [04-07-2022 02:16:01]8419: WAF :: fetched 1 new logs [04-07-2022 02:17:02]10953: WAF :: fetched 3 new logs [04-07-2022 02:18:01]13539: WAF :: fetched 2 new logs [04-07-2022 02:20:02]18587: WAF :: fetched 1 new logs [04-07-2022 02:21:03]21125: WAF :: fetched 1 new logs [04-07-2022 02:22:02]23696: WAF :: fetched 2 new logs [04-07-2022 02:24:01]28758: WAF :: fetched 3 new logs [04-07-2022 02:25:02]31338: WAF :: fetched 4 new logs [04-07-2022 02:26:02]1464: WAF :: fetched 4 new logs [04-07-2022 02:27:02]4015: WAF :: fetched 1 new logs [04-07-2022 02:28:02]6698: WAF :: fetched 3 new logs [04-07-2022 02:30:04]11707: WAF :: fetched 4 new logs [04-07-2022 02:31:01]14205: WAF :: fetched 7 new logs [04-07-2022 02:33:01]19391: WAF :: fetched 3 new logs [04-07-2022 02:34:02]21904: WAF :: fetched 1 new logs [04-07-2022 02:35:02]24420: WAF :: fetched 6 new logs [04-07-2022 02:36:01]26994: WAF :: fetched 9 new logs [04-07-2022 02:37:02]29556: WAF :: fetched 6 new logs [04-07-2022 02:38:01]32125: WAF :: fetched 9 new logs [04-07-2022 02:39:03]2281: WAF :: fetched 7 new logs [04-07-2022 02:40:02]4921: WAF :: fetched 5 new logs [04-07-2022 02:41:02]7812: WAF :: fetched 8 new logs [04-07-2022 02:41:02]7812: Checking for user cron vulnerabilities [04-07-2022 02:42:01]11092: WAF :: fetched 6 new logs [04-07-2022 02:43:02]13885: WAF :: fetched 3 new logs [04-07-2022 02:44:01]16510: Checking ditributed CMS bruteforce attacks [04-07-2022 02:44:05]16510: WAF :: fetched 2 new logs [04-07-2022 02:45:01]19033: WAF :: fetched 3 new logs [04-07-2022 02:46:02]21585: WAF :: fetched 1 new logs [04-07-2022 02:47:01]24121: WAF :: fetched 1 new logs [04-07-2022 02:48:03]26962: WAF :: fetched 1 new logs [04-07-2022 02:49:02]29684: WAF :: fetched 2 new logs [04-07-2022 02:51:03]3000: WAF :: fetched 1 new logs [04-07-2022 02:52:02]6031: WAF :: fetched 3 new logs [04-07-2022 02:53:01]8736: WAF :: fetched 5 new logs [04-07-2022 02:53:02]8733: Updated license status via CDN [04-07-2022 02:54:02]11470: WAF :: fetched 21 new logs [04-07-2022 02:55:02]13945: WAF :: fetched 17 new logs [04-07-2022 02:56:02]16935: WAF :: fetched 5 new logs [04-07-2022 02:59:01]24647: WAF :: fetched 20 new logs [04-07-2022 03:00:02]26875: WAF :: fetched 16 new logs [04-07-2022 03:00:43]26875: Found and updated 32 CMS installations [04-07-2022 03:02:01]858: WAF :: fetched 18 new logs [04-07-2022 03:02:32]26875: Wordpress installation #23 blueseasurf.com.br has errors [04-07-2022 03:02:57]26875: Wordpress installation #26 bibokinha.idcartao.com has errors [04-07-2022 03:03:02]3740: WAF :: fetched 1 new logs [04-07-2022 03:03:33]26875: Wordpress installation #33 bibokinha.com.br has errors [04-07-2022 03:04:01]6964: WAF :: fetched 4 new logs [04-07-2022 03:04:18]26875: Sending CMS version vulnerability report emails to cpanel users [04-07-2022 03:04:21]26875: Checking wordpress installations for suspicious directories [04-07-2022 03:04:22]3811: Sending CMS version vulnerability report emails to cpanel users [04-07-2022 03:04:26]3811: Checking wordpress installations for suspicious directories [04-07-2022 03:05:02]10139: WAF :: fetched 9 new logs [04-07-2022 03:06:02]13046: WAF :: fetched 32 new logs [04-07-2022 03:07:02]15772: WAF :: fetched 2 new logs [04-07-2022 03:08:01]18586: WAF :: fetched 2 new logs [04-07-2022 03:09:02]21134: WAF :: fetched 5 new logs [04-07-2022 03:10:01]23669: WAF :: fetched 4 new logs [04-07-2022 03:12:02]28755: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656915122 [04-07-2022 03:12:02]28755: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 03:12:04]28755: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 03:12:04]28755: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-0312/20220704-031202-YsKEsmQaM5eriQhAAaqCAgAAAAY [04-07-2022 03:12:04]28755: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 03:12:09]28755: WAF :: fetched 194 new logs [04-07-2022 03:13:01]31390: WAF :: fetched 2 new logs [04-07-2022 03:15:01]4053: WAF :: fetched 2 new logs [04-07-2022 03:16:03]6729: WAF :: fetched 4 new logs [04-07-2022 03:18:01]11783: WAF :: fetched 2 new logs [04-07-2022 03:19:02]14314: WAF :: fetched 31 new logs [04-07-2022 03:20:02]16805: WAF :: fetched 2 new logs [04-07-2022 03:21:01]19378: WAF :: fetched 2 new logs [04-07-2022 03:22:02]21882: WAF :: fetched 1 new logs [04-07-2022 03:23:02]24491: WAF :: fetched 2 new logs [04-07-2022 03:24:01]27031: WAF :: fetched 4 new logs [04-07-2022 03:25:02]29605: WAF :: fetched 25 new logs [04-07-2022 03:26:01]32159: WAF :: fetched 1 new logs [04-07-2022 03:29:01]7502: WAF :: fetched 1 new logs [04-07-2022 03:31:02]12584: WAF :: fetched 1 new logs [04-07-2022 03:32:02]15110: WAF :: fetched 552 new logs [04-07-2022 03:33:02]17716: WAF :: fetched 815 new logs [04-07-2022 03:34:02]20246: WAF :: fetched 34 new logs [04-07-2022 03:35:01]22745: WAF :: fetched 1 new logs [04-07-2022 03:36:02]25363: WAF :: fetched 2 new logs [04-07-2022 03:37:01]27846: WAF :: fetched 1 new logs [04-07-2022 03:39:02]516: WAF :: fetched 2 new logs [04-07-2022 03:40:01]3091: WAF :: fetched 3 new logs [04-07-2022 03:41:02]5792: WAF :: fetched 2 new logs [04-07-2022 03:41:02]5792: Checking for user cron vulnerabilities [04-07-2022 03:42:02]7914: WAF :: fetched 3 new logs [04-07-2022 03:43:01]10898: WAF :: fetched 1 new logs [04-07-2022 03:44:01]13402: Checking ditributed CMS bruteforce attacks [04-07-2022 03:47:02]12982: WAF :: fetched 4 new logs [04-07-2022 03:50:02]30140: WAF :: fetched 1 new logs [04-07-2022 03:51:01]32676: WAF :: fetched 1 new logs [04-07-2022 03:52:02]2827: WAF :: fetched 2 new logs [04-07-2022 03:54:01]7983: WAF :: fetched 1 new logs [04-07-2022 03:56:01]13025: WAF :: fetched 1 new logs [04-07-2022 03:57:02]15554: WAF :: fetched 2 new logs [04-07-2022 03:58:01]18094: WAF :: fetched 2 new logs [04-07-2022 03:59:02]20653: WAF :: fetched 2 new logs [04-07-2022 04:00:02]22862: WAF :: fetched 1 new logs [04-07-2022 04:01:01]25876: WAF :: fetched 1 new logs [04-07-2022 04:02:01]28443: WAF :: fetched 1 new logs [04-07-2022 04:03:02]31064: WAF :: fetched 1 new logs [04-07-2022 04:05:06]3739: WAF :: fetched 2 new logs [04-07-2022 04:06:02]6323: WAF :: fetched 2 new logs [04-07-2022 04:07:01]8834: WAF :: fetched 1 new logs [04-07-2022 04:12:01]21554: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656918721 [04-07-2022 04:12:01]21554: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 04:12:03]21554: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 04:12:05]21554: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-0412/20220704-041201-YsKSwZ72eRxJY_WsaB7FBQAAAAE [04-07-2022 04:12:05]21554: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 04:12:05]21554: WAF :: fetched 2 new logs [04-07-2022 04:21:01]12200: WAF :: fetched 2 new logs [04-07-2022 04:22:02]14737: WAF :: fetched 3 new logs [04-07-2022 04:23:01]17321: WAF :: fetched 3 new logs [04-07-2022 04:24:02]19872: WAF :: fetched 1 new logs [04-07-2022 04:25:02]22442: WAF :: fetched 2 new logs [04-07-2022 04:27:02]27591: WAF :: fetched 2 new logs [04-07-2022 04:28:02]30150: WAF :: fetched 4 new logs [04-07-2022 04:29:02]32677: WAF :: fetched 2 new logs [04-07-2022 04:30:02]2834: WAF :: fetched 12 new logs [04-07-2022 04:31:02]5506: WAF :: fetched 9 new logs [04-07-2022 04:33:02]10578: WAF :: fetched 1 new logs [04-07-2022 04:35:01]15656: WAF :: fetched 1 new logs [04-07-2022 04:36:01]18245: WAF :: fetched 11 new logs [04-07-2022 04:37:02]20748: WAF :: fetched 1 new logs [04-07-2022 04:38:04]23240: WAF :: fetched 3 new logs [04-07-2022 04:41:02]30983: WAF :: fetched 1 new logs [04-07-2022 04:41:02]30983: Checking for user cron vulnerabilities [04-07-2022 04:42:01]1077: WAF :: fetched 4 new logs [04-07-2022 04:43:02]3666: WAF :: fetched 2 new logs [04-07-2022 04:44:01]6301: Checking ditributed CMS bruteforce attacks [04-07-2022 04:44:04]6301: WAF :: fetched 1 new logs [04-07-2022 04:45:02]8850: WAF :: fetched 3 new logs [04-07-2022 04:46:01]11410: WAF :: fetched 2 new logs [04-07-2022 04:47:01]13901: WAF :: fetched 2 new logs [04-07-2022 04:48:02]16437: WAF :: fetched 1 new logs [04-07-2022 04:50:02]21602: WAF :: fetched 1 new logs [04-07-2022 04:54:01]31713: WAF :: fetched 2 new logs [04-07-2022 04:56:02]4446: WAF :: fetched 2 new logs [04-07-2022 05:01:02]17293: WAF :: fetched 3 new logs [04-07-2022 05:01:42]17297: Starting daily scan on files updated in last 24 hrs [04-07-2022 05:06:02]30109: WAF :: fetched 1 new logs [04-07-2022 05:08:02]2734: WAF :: fetched 1 new logs [04-07-2022 05:09:01]5435: WAF :: fetched 2 new logs [04-07-2022 05:10:02]7975: WAF :: fetched 1 new logs [04-07-2022 05:11:01]10490: WAF :: fetched 4 new logs [04-07-2022 05:12:02]12990: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656922322 [04-07-2022 05:12:02]12990: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 05:12:04]12990: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 05:12:05]12990: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-0512/20220704-051202-YsKg0kjYaZ691B5j5NgUbgAAAAM [04-07-2022 05:12:05]12990: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 05:12:06]12990: WAF :: fetched 2 new logs [04-07-2022 05:13:01]15520: WAF :: fetched 2 new logs [04-07-2022 05:14:01]18089: WAF :: fetched 1 new logs [04-07-2022 05:15:02]20630: WAF :: fetched 4 new logs [04-07-2022 05:16:01]23167: WAF :: fetched 3 new logs [04-07-2022 05:19:01]30800: WAF :: fetched 2 new logs [04-07-2022 05:20:02]934: WAF :: fetched 2 new logs [04-07-2022 05:21:02]3524: WAF :: fetched 1 new logs [04-07-2022 05:22:04]6122: WAF :: fetched 1 new logs [04-07-2022 05:24:01]11185: WAF :: fetched 1 new logs [04-07-2022 05:25:02]13767: WAF :: fetched 4 new logs [04-07-2022 05:26:01]16295: WAF :: fetched 2 new logs [04-07-2022 05:33:01]1580: WAF :: fetched 2 new logs [04-07-2022 05:34:02]4289: WAF :: fetched 1 new logs [04-07-2022 05:35:02]6811: WAF :: fetched 1 new logs [04-07-2022 05:37:02]11874: WAF :: fetched 3 new logs [04-07-2022 05:39:03]16942: WAF :: fetched 1 new logs [04-07-2022 05:40:01]19478: WAF :: fetched 2 new logs [04-07-2022 05:41:02]22060: WAF :: fetched 1 new logs [04-07-2022 05:41:02]22060: Checking for user cron vulnerabilities [04-07-2022 05:43:01]27064: WAF :: fetched 3 new logs [04-07-2022 05:44:01]29658: Checking ditributed CMS bruteforce attacks [04-07-2022 05:45:01]32150: WAF :: fetched 5 new logs [04-07-2022 05:46:02]2332: WAF :: fetched 6 new logs [04-07-2022 05:50:01]12519: WAF :: fetched 2 new logs [04-07-2022 05:52:01]17603: WAF :: fetched 1 new logs [04-07-2022 05:53:02]20117: WAF :: fetched 2 new logs [04-07-2022 05:55:01]25234: WAF :: fetched 5 new logs [04-07-2022 05:56:05]27818: WAF :: fetched 2 new logs [04-07-2022 05:57:01]30360: WAF :: fetched 3 new logs [04-07-2022 05:58:02]415: WAF :: fetched 3 new logs [04-07-2022 05:59:02]3101: WAF :: fetched 2 new logs [04-07-2022 06:01:02]8430: WAF :: fetched 1 new logs [04-07-2022 06:02:02]10943: WAF :: fetched 2 new logs [04-07-2022 06:03:01]13455: WAF :: fetched 1 new logs [04-07-2022 06:06:02]21147: WAF :: fetched 1 new logs [04-07-2022 06:08:02]26164: WAF :: fetched 2 new logs [04-07-2022 06:09:01]28732: WAF :: fetched 1 new logs [04-07-2022 06:11:02]1444: WAF :: fetched 1 new logs [04-07-2022 06:12:01]3989: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656925921 [04-07-2022 06:12:01]3989: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 06:12:03]3989: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 06:12:05]3989: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-0612/20220704-061201-YsKu4WIr2PEUEewC2iTcVgAAAAA [04-07-2022 06:12:05]3989: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-07-2022 06:12:05]3989: WAF :: fetched 1 new logs [04-07-2022 06:13:03]6584: WAF :: fetched 2 new logs [04-07-2022 06:14:01]9156: WAF :: fetched 1 new logs [04-07-2022 06:15:01]11692: WAF :: fetched 1 new logs [04-07-2022 06:17:01]16835: WAF :: fetched 1 new logs [04-07-2022 06:18:02]19412: WAF :: fetched 1 new logs [04-07-2022 06:20:02]24520: WAF :: fetched 3 new logs [04-07-2022 06:21:02]27108: WAF :: fetched 2 new logs [04-07-2022 06:22:03]29631: WAF :: fetched 2 new logs [04-07-2022 06:23:02]32137: WAF :: fetched 2 new logs [04-07-2022 06:24:01]2322: WAF :: fetched 4 new logs [04-07-2022 06:25:01]4891: WAF :: fetched 1 new logs [04-07-2022 06:28:02]12610: WAF :: fetched 2 new logs [04-07-2022 06:29:01]15226: WAF :: fetched 1 new logs [04-07-2022 06:31:01]20293: WAF :: fetched 6 new logs [04-07-2022 06:32:02]22874: WAF :: fetched 4 new logs [04-07-2022 06:33:02]25397: WAF :: fetched 2 new logs [04-07-2022 06:34:01]27973: WAF :: fetched 2 new logs [04-07-2022 06:35:02]30481: WAF :: fetched 1 new logs [04-07-2022 06:36:01]591: WAF :: fetched 14 new logs [04-07-2022 06:37:02]3223: WAF :: fetched 22 new logs [04-07-2022 06:38:02]5786: WAF :: fetched 23 new logs [04-07-2022 06:39:02]8381: WAF :: fetched 25 new logs [04-07-2022 06:40:01]10946: WAF :: fetched 22 new logs [04-07-2022 06:41:01]13527: WAF :: fetched 37 new logs [04-07-2022 06:41:01]13527: Checking for user cron vulnerabilities [04-07-2022 06:42:02]16025: WAF :: fetched 23 new logs [04-07-2022 06:43:01]18538: WAF :: fetched 22 new logs [04-07-2022 06:44:02]21138: Checking ditributed CMS bruteforce attacks [04-07-2022 06:44:02]21138: WAF :: fetched 22 new logs [04-07-2022 06:45:03]23640: WAF :: fetched 24 new logs [04-07-2022 06:46:01]26221: WAF :: fetched 4 new logs [04-07-2022 06:48:01]31232: WAF :: fetched 4 new logs [04-07-2022 06:50:02]4028: WAF :: fetched 2 new logs [04-07-2022 06:51:01]6649: WAF :: fetched 9 new logs [04-07-2022 06:52:01]9191: WAF :: fetched 5 new logs [04-07-2022 06:53:02]11728: WAF :: fetched 9 new logs [04-07-2022 06:54:01]14288: WAF :: fetched 7 new logs [04-07-2022 06:55:01]16801: WAF :: fetched 4 new logs [04-07-2022 06:56:02]19411: WAF :: fetched 16 new logs [04-07-2022 06:57:01]21920: WAF :: fetched 3 new logs [04-07-2022 06:58:02]24467: WAF :: fetched 3 new logs [04-07-2022 06:59:02]27052: WAF :: fetched 1 new logs [04-07-2022 07:00:02]29308: WAF :: fetched 1 new logs [04-07-2022 07:01:01]32292: WAF :: fetched 2 new logs [04-07-2022 07:02:01]2522: WAF :: fetched 4 new logs [04-07-2022 07:03:02]5132: WAF :: fetched 3 new logs [04-07-2022 07:04:02]7732: WAF :: fetched 3 new logs [04-07-2022 07:06:02]12779: WAF :: fetched 1 new logs [04-07-2022 07:07:02]15331: WAF :: fetched 5 new logs [04-07-2022 07:08:02]17867: WAF :: fetched 2 new logs [04-07-2022 07:10:01]22999: WAF :: fetched 2 new logs [04-07-2022 07:12:02]28101: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656929522 [04-07-2022 07:12:02]28101: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 07:12:04]28101: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 07:12:04]28101: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-0712/20220704-071202-YsK88rVC7utbx0jhAe_R4gAAAAE [04-07-2022 07:12:04]28101: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 07:12:08]28101: WAF :: fetched 290 new logs [04-07-2022 07:14:02]818: WAF :: fetched 1 new logs [04-07-2022 07:16:01]6200: WAF :: fetched 1 new logs [04-07-2022 07:17:02]8743: WAF :: fetched 2 new logs [04-07-2022 07:18:02]12776: httpd.conf changed. Refreshing watchlist. [04-07-2022 07:18:02]12778: WAF :: fetched 3 new logs [04-07-2022 07:20:02]27230: WAF :: fetched 1 new logs [04-07-2022 07:26:01]15294: WAF :: fetched 2 new logs [04-07-2022 07:31:01]32492: WAF :: fetched 1 new logs [04-07-2022 07:36:01]16365: WAF :: fetched 1 new logs [04-07-2022 07:37:02]19877: WAF :: fetched 1 new logs [04-07-2022 07:39:01]26422: WAF :: fetched 1 new logs [04-07-2022 07:41:01]526: Checking for user cron vulnerabilities [04-07-2022 07:44:01]10828: Checking ditributed CMS bruteforce attacks [04-07-2022 07:45:01]: Checking for definition updates [04-07-2022 07:45:01]14080: WAF :: fetched 2 new logs [04-07-2022 07:49:02]27450: WAF :: fetched 1 new logs [04-07-2022 07:51:02]1601: WAF :: fetched 1 new logs [04-07-2022 07:58:02]24766: WAF :: fetched 2 new logs [04-07-2022 07:59:01]28051: WAF :: fetched 1 new logs [04-07-2022 08:02:01]6200: WAF :: fetched 2 new logs [04-07-2022 08:03:01]9510: WAF :: fetched 1 new logs [04-07-2022 08:04:01]12816: WAF :: fetched 1 new logs [04-07-2022 08:07:01]22802: WAF :: fetched 1 new logs [04-07-2022 08:09:01]29360: WAF :: fetched 1 new logs [04-07-2022 08:12:01]7297: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656933121 [04-07-2022 08:12:01]7297: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 08:12:03]7297: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 08:12:04]7297: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-0812/20220704-081201-YsLLAZCMKuRQsb5zpxcJIAAAAAQ [04-07-2022 08:12:04]7297: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-07-2022 08:12:04]7297: WAF :: fetched 1 new logs [04-07-2022 08:15:02]17292: WAF :: fetched 2 new logs [04-07-2022 08:16:01]20825: WAF :: fetched 2 new logs [04-07-2022 08:17:02]24124: WAF :: fetched 2 new logs [04-07-2022 08:18:01]27397: WAF :: fetched 2 new logs [04-07-2022 08:19:01]30809: WAF :: fetched 1 new logs [04-07-2022 08:20:02]1694: WAF :: fetched 2 new logs [04-07-2022 08:21:01]5070: WAF :: fetched 2 new logs [04-07-2022 08:24:01]15582: WAF :: fetched 1 new logs [04-07-2022 08:28:02]28959: WAF :: fetched 3 new logs [04-07-2022 08:29:03]32260: WAF :: fetched 1 new logs [04-07-2022 08:33:01]13511: WAF :: fetched 1 new logs [04-07-2022 08:37:01]26927: WAF :: fetched 3 new logs [04-07-2022 08:41:02]7766: Checking for user cron vulnerabilities [04-07-2022 08:42:02]11437: WAF :: fetched 1 new logs [04-07-2022 08:43:01]14646: WAF :: fetched 1 new logs [04-07-2022 08:44:01]18119: Checking ditributed CMS bruteforce attacks [04-07-2022 08:44:02]18119: WAF :: fetched 4 new logs [04-07-2022 08:47:02]28107: WAF :: fetched 4 new logs [04-07-2022 08:48:01]31551: WAF :: fetched 2 new logs [04-07-2022 08:49:02]2501: WAF :: fetched 1 new logs [04-07-2022 08:50:01]5706: WAF :: fetched 1 new logs [04-07-2022 08:53:01]16299: WAF :: fetched 2 new logs [04-07-2022 08:58:02]584: WAF :: fetched 2 new logs [04-07-2022 09:00:02]6960: WAF :: fetched 2 new logs [04-07-2022 09:02:01]14148: WAF :: fetched 4 new logs [04-07-2022 09:03:02]18050: WAF :: fetched 3 new logs [04-07-2022 09:04:01]21566: WAF :: fetched 3 new logs [04-07-2022 09:05:02]24936: WAF :: fetched 1 new logs [04-07-2022 09:06:01]28284: WAF :: fetched 1 new logs [04-07-2022 09:07:01]31580: WAF :: fetched 4 new logs [04-07-2022 09:09:01]5973: WAF :: fetched 1 new logs [04-07-2022 09:10:02]9302: WAF :: fetched 1 new logs [04-07-2022 09:12:01]15855: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656936721 [04-07-2022 09:12:01]15855: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 09:12:03]15855: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 09:12:03]15855: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-0912/20220704-091201-YsLZEYL0JrOjIIzrlqbslwAAAAw [04-07-2022 09:12:03]15855: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-07-2022 09:12:04]15855: WAF :: fetched 2 new logs [04-07-2022 09:14:01]23228: WAF :: fetched 1 new logs [04-07-2022 09:16:02]29807: WAF :: fetched 1 new logs [04-07-2022 09:19:02]7719: WAF :: fetched 1 new logs [04-07-2022 09:20:01]11064: WAF :: fetched 2 new logs [04-07-2022 09:22:01]17800: WAF :: fetched 1 new logs [04-07-2022 09:23:02]21882: WAF :: fetched 1 new logs [04-07-2022 09:29:01]9362: WAF :: fetched 1 new logs [04-07-2022 09:30:02]12637: WAF :: fetched 1 new logs [04-07-2022 09:33:01]23179: WAF :: fetched 1 new logs [04-07-2022 09:34:02]26566: WAF :: fetched 4 new logs [04-07-2022 09:35:01]29859: WAF :: fetched 1 new logs [04-07-2022 09:41:01]17602: Checking for user cron vulnerabilities [04-07-2022 09:44:01]28266: Checking ditributed CMS bruteforce attacks [04-07-2022 09:44:01]28266: WAF :: fetched 2 new logs [04-07-2022 09:45:01]31503: WAF :: fetched 3 new logs [04-07-2022 09:46:02]2543: WAF :: fetched 4 new logs [04-07-2022 09:47:02]5892: WAF :: fetched 2 new logs [04-07-2022 09:48:01]9241: WAF :: fetched 7 new logs [04-07-2022 09:49:02]12706: WAF :: fetched 8 new logs [04-07-2022 09:50:02]15992: WAF :: fetched 2 new logs [04-07-2022 09:51:01]19552: WAF :: fetched 2 new logs [04-07-2022 09:52:02]22841: WAF :: fetched 10 new logs [04-07-2022 09:53:03]26447: WAF :: fetched 3 new logs [04-07-2022 09:54:02]29936: WAF :: fetched 2 new logs [04-07-2022 09:59:02]14546: WAF :: fetched 1 new logs [04-07-2022 10:00:02]17837: WAF :: fetched 3 new logs [04-07-2022 10:01:02]21897: WAF :: fetched 5 new logs [04-07-2022 10:02:02]25007: WAF :: fetched 6 new logs [04-07-2022 10:03:02]28548: WAF :: fetched 1 new logs [04-07-2022 10:05:01]3765: WAF :: fetched 1 new logs [04-07-2022 10:08:01]14746: WAF :: fetched 4 new logs [04-07-2022 10:09:02]18458: WAF :: fetched 2 new logs [04-07-2022 10:10:01]21941: WAF :: fetched 1 new logs [04-07-2022 10:12:02]28687: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656940322 [04-07-2022 10:12:02]28687: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 10:12:04]28687: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 10:12:04]28687: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-1012/20220704-101202-YsLnIpKZ8nYc2wSluXu2_wAAAAo [04-07-2022 10:12:04]28687: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-07-2022 10:12:04]28687: WAF :: fetched 1 new logs [04-07-2022 10:13:01]32214: httpd.conf changed. Refreshing watchlist. [04-07-2022 10:13:01]32212: WAF :: fetched 1 new logs [04-07-2022 10:14:02]3831: WAF :: fetched 2 new logs [04-07-2022 10:18:01]17262: WAF :: fetched 1 new logs [04-07-2022 10:20:02]24979: WAF :: fetched 3 new logs [04-07-2022 10:21:02]28744: WAF :: fetched 1 new logs [04-07-2022 10:23:02]3316: WAF :: fetched 4 new logs [04-07-2022 10:24:01]7478: WAF :: fetched 1 new logs [04-07-2022 10:27:01]17573: WAF :: fetched 1 new logs [04-07-2022 10:29:01]24565: WAF :: fetched 2 new logs [04-07-2022 10:30:02]27910: WAF :: fetched 1 new logs [04-07-2022 10:31:02]31399: WAF :: fetched 1 new logs [04-07-2022 10:32:01]2387: WAF :: fetched 4 new logs [04-07-2022 10:33:01]5699: WAF :: fetched 3 new logs [04-07-2022 10:34:02]9760: WAF :: fetched 1 new logs [04-07-2022 10:36:02]16604: WAF :: fetched 1 new logs [04-07-2022 10:39:02]27105: WAF :: fetched 2 new logs [04-07-2022 10:40:01]30463: WAF :: fetched 1 new logs [04-07-2022 10:41:01]1576: Checking for user cron vulnerabilities [04-07-2022 10:42:02]4972: WAF :: fetched 1 new logs [04-07-2022 10:43:01]8300: WAF :: fetched 3 new logs [04-07-2022 10:44:01]12169: Checking ditributed CMS bruteforce attacks [04-07-2022 10:44:02]12169: WAF :: fetched 1 new logs [04-07-2022 10:45:01]15524: WAF :: fetched 5 new logs [04-07-2022 10:46:02]19116: WAF :: fetched 2 new logs [04-07-2022 10:49:02]29327: WAF :: fetched 1 new logs [04-07-2022 10:51:02]3786: WAF :: fetched 3 new logs [04-07-2022 10:52:02]7136: WAF :: fetched 4 new logs [04-07-2022 10:53:01]10392: WAF :: fetched 8 new logs [04-07-2022 10:54:02]14301: WAF :: fetched 3 new logs [04-07-2022 10:59:03]31171: WAF :: fetched 9 new logs [04-07-2022 11:01:01]5297: WAF :: fetched 2 new logs [04-07-2022 11:02:02]8736: WAF :: fetched 2 new logs [04-07-2022 11:03:01]12122: WAF :: fetched 1 new logs [04-07-2022 11:05:02]19542: WAF :: fetched 3 new logs [04-07-2022 11:06:01]22876: WAF :: fetched 2 new logs [04-07-2022 11:07:02]26199: WAF :: fetched 3 new logs [04-07-2022 11:08:02]29462: WAF :: fetched 3 new logs [04-07-2022 11:08:02]26359: Performed RBL check for 23.111.136.34. [04-07-2022 11:09:01]580: WAF :: fetched 3 new logs [04-07-2022 11:10:01]4026: WAF :: fetched 1 new logs [04-07-2022 11:12:01]10832: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656943921 [04-07-2022 11:12:01]10832: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 11:12:03]10832: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 11:12:04]10832: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-1112/20220704-111201-YsL1MYPwshR-vBMdclV49QAAAA4 [04-07-2022 11:12:04]10832: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 11:12:04]10832: WAF :: fetched 192 new logs [04-07-2022 11:15:01]21640: WAF :: fetched 4 new logs [04-07-2022 11:15:01]21643: httpd.conf changed. Refreshing watchlist. [04-07-2022 11:16:01]25115: WAF :: fetched 1 new logs [04-07-2022 11:19:01]2833: WAF :: fetched 2 new logs [04-07-2022 11:20:03]6232: WAF :: fetched 1 new logs [04-07-2022 11:22:02]13696: httpd.conf changed. Refreshing watchlist. [04-07-2022 11:23:01]17074: httpd.conf changed. Refreshing watchlist. [04-07-2022 11:25:01]24541: WAF :: fetched 1 new logs [04-07-2022 11:27:02]31169: WAF :: fetched 1 new logs [04-07-2022 11:29:02]5447: WAF :: fetched 1 new logs [04-07-2022 11:31:02]12191: WAF :: fetched 1 new logs [04-07-2022 11:32:01]15430: WAF :: fetched 1 new logs [04-07-2022 11:33:01]18831: WAF :: fetched 1 new logs [04-07-2022 11:34:02]22350: WAF :: fetched 1 new logs [04-07-2022 11:40:03]10629: WAF :: fetched 3 new logs [04-07-2022 11:41:01]13990: WAF :: fetched 3 new logs [04-07-2022 11:41:01]13990: Checking for user cron vulnerabilities [04-07-2022 11:42:02]17477: WAF :: fetched 1 new logs [04-07-2022 11:43:01]21078: WAF :: fetched 1 new logs [04-07-2022 11:44:01]24549: Checking ditributed CMS bruteforce attacks [04-07-2022 11:44:02]24549: WAF :: fetched 2 new logs [04-07-2022 11:45:02]28264: WAF :: fetched 2 new logs [04-07-2022 11:46:01]31587: WAF :: fetched 1 new logs [04-07-2022 11:48:02]5899: WAF :: fetched 2 new logs [04-07-2022 11:49:01]9334: WAF :: fetched 1 new logs [04-07-2022 11:50:01]12654: WAF :: fetched 1 new logs [04-07-2022 11:51:02]16069: WAF :: fetched 2 new logs [04-07-2022 11:52:01]19597: WAF :: fetched 1 new logs [04-07-2022 11:54:01]26287: WAF :: fetched 3 new logs [04-07-2022 11:59:02]11056: WAF :: fetched 1 new logs [04-07-2022 12:00:02]14087: WAF :: fetched 1 new logs [04-07-2022 12:06:01]2971: WAF :: fetched 1 new logs [04-07-2022 12:10:02]16051: WAF :: fetched 2 new logs [04-07-2022 12:11:01]19657: WAF :: fetched 3 new logs [04-07-2022 12:12:01]22920: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656947521 [04-07-2022 12:12:01]22920: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 12:12:03]22920: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 12:12:03]22920: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-1212/20220704-121201-YsMDQf6ARen3wSg_GkN_TgAAABk [04-07-2022 12:12:03]22920: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 12:12:04]22920: WAF :: fetched 2 new logs [04-07-2022 12:13:02]26274: WAF :: fetched 1 new logs [04-07-2022 12:20:01]18309: WAF :: fetched 1 new logs [04-07-2022 12:24:02]32557: WAF :: fetched 1 new logs [04-07-2022 12:25:01]3494: WAF :: fetched 1 new logs [04-07-2022 12:26:02]7443: WAF :: fetched 4 new logs [04-07-2022 12:32:02]28427: WAF :: fetched 1 new logs [04-07-2022 12:33:01]31733: WAF :: fetched 2 new logs [04-07-2022 12:34:01]2652: WAF :: fetched 1 new logs [04-07-2022 12:35:01]6113: WAF :: fetched 1 new logs [04-07-2022 12:38:01]16648: WAF :: fetched 1 new logs [04-07-2022 12:39:02]20094: WAF :: fetched 1 new logs [04-07-2022 12:41:01]26951: Checking for user cron vulnerabilities [04-07-2022 12:42:01]30333: WAF :: fetched 6 new logs [04-07-2022 12:43:01]1197: WAF :: fetched 4 new logs [04-07-2022 12:44:01]4522: Checking ditributed CMS bruteforce attacks [04-07-2022 12:44:04]4522: WAF :: fetched 1 new logs [04-07-2022 12:45:02]: Checking for software updates [04-07-2022 12:46:01]11724: WAF :: fetched 1 new logs [04-07-2022 12:47:01]14983: WAF :: fetched 3 new logs [04-07-2022 12:48:01]18355: WAF :: fetched 2 new logs [04-07-2022 12:52:01]31948: WAF :: fetched 2 new logs [04-07-2022 12:53:02]2900: WAF :: fetched 3 new logs [04-07-2022 12:54:01]6250: WAF :: fetched 3 new logs [04-07-2022 12:55:03]9690: WAF :: fetched 1 new logs [04-07-2022 12:56:01]13190: WAF :: fetched 1 new logs [04-07-2022 12:57:01]17031: WAF :: fetched 6 new logs [04-07-2022 12:58:02]20786: WAF :: fetched 1 new logs [04-07-2022 12:59:01]24200: WAF :: fetched 1 new logs [04-07-2022 13:00:01]27472: WAF :: fetched 1 new logs [04-07-2022 13:02:01]2479: WAF :: fetched 5 new logs [04-07-2022 13:03:02]5910: WAF :: fetched 1 new logs [04-07-2022 13:11:01]2628: WAF :: fetched 1 new logs [04-07-2022 13:12:01]6001: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656951121 [04-07-2022 13:12:01]6001: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 13:12:03]6001: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 13:12:04]6001: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-1312/20220704-131201-YsMRUaIO-wYbV0eQF2rUWwAAABI [04-07-2022 13:12:04]6001: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 13:12:04]6001: WAF :: fetched 1 new logs [04-07-2022 13:13:01]9319: WAF :: fetched 1 new logs [04-07-2022 13:14:01]12700: WAF :: fetched 1 new logs [04-07-2022 13:16:02]19690: WAF :: fetched 1 new logs [04-07-2022 13:21:01]4449: WAF :: fetched 3 new logs [04-07-2022 13:22:01]7785: WAF :: fetched 2 new logs [04-07-2022 13:30:01]2859: WAF :: fetched 2 new logs [04-07-2022 13:31:02]6208: WAF :: fetched 1 new logs [04-07-2022 13:40:01]4368: WAF :: fetched 1 new logs [04-07-2022 13:41:02]7773: Checking for user cron vulnerabilities [04-07-2022 13:44:02]17827: Checking ditributed CMS bruteforce attacks [04-07-2022 13:45:01]: Checking for definition updates [04-07-2022 13:46:01]24812: WAF :: fetched 1 new logs [04-07-2022 13:47:02]28609: WAF :: fetched 1 new logs [04-07-2022 13:48:01]31974: WAF :: fetched 2 new logs [04-07-2022 13:52:02]12990: WAF :: fetched 8 new logs [04-07-2022 13:54:01]19845: WAF :: fetched 3 new logs [04-07-2022 13:57:02]30372: WAF :: fetched 1 new logs [04-07-2022 14:00:02]7618: WAF :: fetched 1 new logs [04-07-2022 14:01:01]11501: WAF :: fetched 1 new logs [04-07-2022 14:03:02]18437: WAF :: fetched 1 new logs [04-07-2022 14:06:02]28632: WAF :: fetched 3 new logs [04-07-2022 14:08:02]3384: WAF :: fetched 4 new logs [04-07-2022 14:09:01]6611: WAF :: fetched 1 new logs [04-07-2022 14:12:02]16946: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656954722 [04-07-2022 14:12:02]16946: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 14:12:04]16946: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 14:12:04]16946: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-1412/20220704-141202-YsMfYsQu-wve75JtaVAfeAAAABg [04-07-2022 14:12:04]16946: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 14:12:04]16946: WAF :: fetched 2 new logs [04-07-2022 14:13:01]20509: WAF :: fetched 3 new logs [04-07-2022 14:14:02]23521: WAF :: fetched 2 new logs [04-07-2022 14:15:01]26819: WAF :: fetched 8 new logs [04-07-2022 14:16:02]30197: WAF :: fetched 3 new logs [04-07-2022 14:17:01]1004: WAF :: fetched 1 new logs [04-07-2022 14:20:02]11669: WAF :: fetched 1 new logs [04-07-2022 14:22:02]18443: WAF :: fetched 1 new logs [04-07-2022 14:26:02]32016: WAF :: fetched 1 new logs [04-07-2022 14:27:01]2931: WAF :: fetched 1 new logs [04-07-2022 14:28:02]6902: WAF :: fetched 2 new logs [04-07-2022 14:32:02]20598: WAF :: fetched 2 new logs [04-07-2022 14:33:01]23865: WAF :: fetched 2 new logs [04-07-2022 14:34:02]27150: WAF :: fetched 1 new logs [04-07-2022 14:36:01]1459: WAF :: fetched 3 new logs [04-07-2022 14:37:02]4813: WAF :: fetched 2 new logs [04-07-2022 14:40:01]15230: WAF :: fetched 9 new logs [04-07-2022 14:41:01]18856: Checking for user cron vulnerabilities [04-07-2022 14:44:01]28698: Checking ditributed CMS bruteforce attacks [04-07-2022 14:46:01]3050: WAF :: fetched 3 new logs [04-07-2022 14:47:02]6363: WAF :: fetched 1 new logs [04-07-2022 14:49:02]13428: WAF :: fetched 4 new logs [04-07-2022 14:52:01]23894: WAF :: fetched 1 new logs [04-07-2022 14:53:02]27141: WAF :: fetched 1 new logs [04-07-2022 14:53:03]27142: Updated license status via CDN [04-07-2022 14:55:01]1432: WAF :: fetched 1 new logs [04-07-2022 14:56:01]4850: WAF :: fetched 1 new logs [04-07-2022 15:01:01]22637: WAF :: fetched 1 new logs [04-07-2022 15:01:01]22638: Reseting cPGuard inotify settings [04-07-2022 15:07:02]10183: WAF :: fetched 57 new logs [04-07-2022 15:08:01]13470: WAF :: fetched 96 new logs [04-07-2022 15:09:02]17363: WAF :: fetched 25 new logs [04-07-2022 15:10:01]20796: WAF :: fetched 1 new logs [04-07-2022 15:12:02]27229: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656958322 [04-07-2022 15:12:02]27229: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 15:12:04]27229: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 15:12:05]27229: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-1512/20220704-151202-YsMtck9DIp0UdhrVqmdmigAAAAc [04-07-2022 15:12:05]27229: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 15:12:05]27229: WAF :: fetched 2 new logs [04-07-2022 15:13:01]30489: WAF :: fetched 3 new logs [04-07-2022 15:14:02]1381: WAF :: fetched 1 new logs [04-07-2022 15:16:02]8046: WAF :: fetched 1 new logs [04-07-2022 15:18:01]14626: WAF :: fetched 2 new logs [04-07-2022 15:19:02]18564: WAF :: fetched 3 new logs [04-07-2022 15:20:01]22219: WAF :: fetched 6 new logs [04-07-2022 15:21:02]25648: WAF :: fetched 1 new logs [04-07-2022 15:22:01]28896: WAF :: fetched 1 new logs [04-07-2022 15:23:01]32204: WAF :: fetched 1 new logs [04-07-2022 15:28:01]16698: WAF :: fetched 1 new logs [04-07-2022 15:30:01]24044: WAF :: fetched 1 new logs [04-07-2022 15:31:01]27486: WAF :: fetched 1 new logs [04-07-2022 15:33:01]1701: httpd.conf changed. Refreshing watchlist. [04-07-2022 15:34:01]5166: httpd.conf changed. Refreshing watchlist. [04-07-2022 15:38:01]18599: WAF :: fetched 3 new logs [04-07-2022 15:39:02]22144: httpd.conf changed. Refreshing watchlist. [04-07-2022 15:41:01]29325: Checking for user cron vulnerabilities [04-07-2022 15:42:02]32646: WAF :: fetched 1 new logs [04-07-2022 15:44:02]6752: Checking ditributed CMS bruteforce attacks [04-07-2022 15:44:02]6752: WAF :: fetched 1 new logs [04-07-2022 15:45:01]10147: WAF :: fetched 1 new logs [04-07-2022 15:52:02]1759: WAF :: fetched 1 new logs [04-07-2022 15:53:01]4912: WAF :: fetched 1 new logs [04-07-2022 15:54:01]8165: WAF :: fetched 1 new logs [04-07-2022 15:55:02]11493: WAF :: fetched 2 new logs [04-07-2022 15:56:01]14787: WAF :: fetched 1 new logs [04-07-2022 15:57:01]18110: WAF :: fetched 2 new logs [04-07-2022 15:58:01]21637: WAF :: fetched 1 new logs [04-07-2022 15:59:01]24925: WAF :: fetched 2 new logs [04-07-2022 16:00:02]28437: WAF :: fetched 2 new logs [04-07-2022 16:01:01]32359: WAF :: fetched 1 new logs [04-07-2022 16:02:02]3327: WAF :: fetched 2 new logs [04-07-2022 16:04:02]9997: WAF :: fetched 2 new logs [04-07-2022 16:09:01]26812: WAF :: fetched 1 new logs [04-07-2022 16:10:02]30597: WAF :: fetched 2 new logs [04-07-2022 16:11:01]1590: WAF :: fetched 1 new logs [04-07-2022 16:12:01]4821: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656961921 [04-07-2022 16:12:01]4821: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 16:12:03]4821: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 16:12:03]4821: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-1612/20220704-161201-YsM7gR6x8g9_ug4qqGfXFgAAAAc [04-07-2022 16:12:03]4821: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 16:12:04]4821: WAF :: fetched 4 new logs [04-07-2022 16:13:02]8056: WAF :: fetched 5 new logs [04-07-2022 16:15:02]14580: WAF :: fetched 2 new logs [04-07-2022 16:19:01]27760: WAF :: fetched 1 new logs [04-07-2022 16:22:01]5905: WAF :: fetched 1 new logs [04-07-2022 16:23:03]9152: WAF :: fetched 2 new logs [04-07-2022 16:26:01]19469: WAF :: fetched 4 new logs [04-07-2022 16:35:02]17254: WAF :: fetched 2 new logs [04-07-2022 16:36:01]20872: WAF :: fetched 3 new logs [04-07-2022 16:38:01]27448: WAF :: fetched 2 new logs [04-07-2022 16:39:01]30792: WAF :: fetched 1 new logs [04-07-2022 16:41:02]5663: WAF :: fetched 2 new logs [04-07-2022 16:41:02]5663: Checking for user cron vulnerabilities [04-07-2022 16:42:01]8980: WAF :: fetched 1 new logs [04-07-2022 16:44:02]15718: Checking ditributed CMS bruteforce attacks [04-07-2022 16:44:04]15718: WAF :: fetched 1 new logs [04-07-2022 16:45:01]19201: WAF :: fetched 1 new logs [04-07-2022 16:49:02]32652: WAF :: fetched 3 new logs [04-07-2022 16:50:01]3596: WAF :: fetched 1 new logs [04-07-2022 16:51:01]7508: WAF :: fetched 1 new logs [04-07-2022 16:52:02]10877: WAF :: fetched 3 new logs [04-07-2022 16:53:01]14085: WAF :: fetched 2 new logs [04-07-2022 16:54:02]17453: WAF :: fetched 2 new logs [04-07-2022 16:56:01]24460: WAF :: fetched 5 new logs [04-07-2022 16:58:01]30999: WAF :: fetched 4 new logs [04-07-2022 16:59:01]1823: WAF :: fetched 3 new logs [04-07-2022 17:00:02]4850: WAF :: fetched 2 new logs [04-07-2022 17:01:01]9180: WAF :: fetched 2 new logs [04-07-2022 17:02:01]12459: WAF :: fetched 3 new logs [04-07-2022 17:03:01]15730: WAF :: fetched 4 new logs [04-07-2022 17:04:02]19265: WAF :: fetched 3 new logs [04-07-2022 17:05:01]22494: WAF :: fetched 3 new logs [04-07-2022 17:06:01]25926: WAF :: fetched 5 new logs [04-07-2022 17:07:02]29186: WAF :: fetched 12 new logs [04-07-2022 17:08:01]32335: WAF :: fetched 5 new logs [04-07-2022 17:09:02]3248: WAF :: fetched 3 new logs [04-07-2022 17:11:01]10427: WAF :: fetched 2 new logs [04-07-2022 17:12:02]13753: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656965522 [04-07-2022 17:12:02]13753: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 17:12:04]13753: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 17:12:04]13753: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-1712/20220704-171202-YsNJkrh-bp-WYYt32qsE9wAAAAg [04-07-2022 17:12:04]13753: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 17:12:04]13753: WAF :: fetched 3 new logs [04-07-2022 17:13:01]17054: WAF :: fetched 1 new logs [04-07-2022 17:14:02]20605: WAF :: fetched 1 new logs [04-07-2022 17:24:01]22013: WAF :: fetched 2 new logs [04-07-2022 17:27:01]31577: WAF :: fetched 1 new logs [04-07-2022 17:32:01]16297: WAF :: fetched 1 new logs [04-07-2022 17:34:01]23027: WAF :: fetched 1 new logs [04-07-2022 17:37:01]361: WAF :: fetched 2 new logs [04-07-2022 17:38:02]3730: WAF :: fetched 1 new logs [04-07-2022 17:41:01]13735: Checking for user cron vulnerabilities [04-07-2022 17:42:01]17525: WAF :: fetched 1 new logs [04-07-2022 17:44:01]24295: Checking ditributed CMS bruteforce attacks [04-07-2022 17:46:01]30926: WAF :: fetched 3 new logs [04-07-2022 17:52:01]19038: WAF :: fetched 3 new logs [04-07-2022 18:01:01]16437: WAF :: fetched 2 new logs [04-07-2022 18:05:02]30168: WAF :: fetched 1 new logs [04-07-2022 18:06:01]1117: WAF :: fetched 2 new logs [04-07-2022 18:07:01]4309: WAF :: fetched 1 new logs [04-07-2022 18:08:01]7644: WAF :: fetched 2 new logs [04-07-2022 18:09:02]10922: WAF :: fetched 2 new logs [04-07-2022 18:10:02]14170: WAF :: fetched 1 new logs [04-07-2022 18:12:02]21521: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656969122 [04-07-2022 18:12:02]21521: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 18:12:04]21521: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 18:12:04]21521: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-1812/20220704-181202-YsNXotpOEuvorS79s-9dXgAAAAs [04-07-2022 18:12:04]21521: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 18:12:04]21521: WAF :: fetched 3 new logs [04-07-2022 18:13:01]24829: WAF :: fetched 1 new logs [04-07-2022 18:19:01]12267: WAF :: fetched 1 new logs [04-07-2022 18:23:01]26325: WAF :: fetched 2 new logs [04-07-2022 18:24:02]29589: WAF :: fetched 1 new logs [04-07-2022 18:31:02]20101: WAF :: fetched 1 new logs [04-07-2022 18:35:02]2326: WAF :: fetched 1 new logs [04-07-2022 18:36:01]7656: WAF :: fetched 1 new logs [04-07-2022 18:38:02]18121: WAF :: fetched 1 new logs [04-07-2022 18:39:02]23238: WAF :: fetched 2 new logs [04-07-2022 18:40:01]25916: WAF :: fetched 2 new logs [04-07-2022 18:41:01]28690: WAF :: fetched 2 new logs [04-07-2022 18:41:01]28690: Checking for user cron vulnerabilities [04-07-2022 18:42:03]31358: WAF :: fetched 2 new logs [04-07-2022 18:44:01]4139: Checking ditributed CMS bruteforce attacks [04-07-2022 18:44:02]4139: WAF :: fetched 3 new logs [04-07-2022 18:46:01]9545: WAF :: fetched 5 new logs [04-07-2022 18:47:02]12194: WAF :: fetched 2 new logs [04-07-2022 18:48:01]14794: WAF :: fetched 1 new logs [04-07-2022 18:51:01]22942: WAF :: fetched 3 new logs [04-07-2022 18:52:02]25583: WAF :: fetched 5 new logs [04-07-2022 18:53:01]28204: WAF :: fetched 8 new logs [04-07-2022 18:54:01]30836: WAF :: fetched 6 new logs [04-07-2022 18:55:01]1035: WAF :: fetched 5 new logs [04-07-2022 18:56:02]3828: WAF :: fetched 5 new logs [04-07-2022 18:57:01]6449: WAF :: fetched 28 new logs [04-07-2022 18:58:02]9075: WAF :: fetched 9 new logs [04-07-2022 18:59:01]11659: WAF :: fetched 6 new logs [04-07-2022 19:00:03]14023: WAF :: fetched 5 new logs [04-07-2022 19:01:01]17247: WAF :: fetched 6 new logs [04-07-2022 19:02:02]20023: WAF :: fetched 4 new logs [04-07-2022 19:03:01]22680: WAF :: fetched 7 new logs [04-07-2022 19:04:01]25326: WAF :: fetched 3 new logs [04-07-2022 19:05:02]27991: WAF :: fetched 3 new logs [04-07-2022 19:06:01]30778: WAF :: fetched 2 new logs [04-07-2022 19:07:01]1007: WAF :: fetched 1 new logs [04-07-2022 19:09:03]6227: WAF :: fetched 1 new logs [04-07-2022 19:11:01]11616: WAF :: fetched 1 new logs [04-07-2022 19:12:02]14288: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656972722 [04-07-2022 19:12:02]14288: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 19:12:04]14288: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 19:12:05]14288: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-1912/20220704-191202-YsNlsj9-tCn_AhU843iqfgAAACE [04-07-2022 19:12:05]14288: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 19:13:01]16884: WAF :: fetched 1 new logs [04-07-2022 19:16:01]25049: WAF :: fetched 1 new logs [04-07-2022 19:18:03]30315: WAF :: fetched 3 new logs [04-07-2022 19:19:01]533: WAF :: fetched 2 new logs [04-07-2022 19:20:02]3278: WAF :: fetched 16 new logs [04-07-2022 19:21:01]6024: WAF :: fetched 42 new logs [04-07-2022 19:22:01]8644: WAF :: fetched 4 new logs [04-07-2022 19:23:01]11309: WAF :: fetched 8 new logs [04-07-2022 19:24:01]13907: WAF :: fetched 8 new logs [04-07-2022 19:25:02]16612: WAF :: fetched 4 new logs [04-07-2022 19:26:01]19319: WAF :: fetched 6 new logs [04-07-2022 19:27:03]22137: WAF :: fetched 9 new logs [04-07-2022 19:28:01]24775: WAF :: fetched 4 new logs [04-07-2022 19:29:02]27432: WAF :: fetched 10 new logs [04-07-2022 19:30:01]30037: WAF :: fetched 3 new logs [04-07-2022 19:31:01]381: WAF :: fetched 6 new logs [04-07-2022 19:32:02]3130: WAF :: fetched 8 new logs [04-07-2022 19:33:01]5743: WAF :: fetched 11 new logs [04-07-2022 19:34:02]8429: WAF :: fetched 9 new logs [04-07-2022 19:35:01]10962: WAF :: fetched 9 new logs [04-07-2022 19:36:01]14086: WAF :: fetched 31 new logs [04-07-2022 19:37:01]16715: WAF :: fetched 7 new logs [04-07-2022 19:38:02]19446: WAF :: fetched 6 new logs [04-07-2022 19:39:01]22069: WAF :: fetched 4 new logs [04-07-2022 19:40:02]24739: WAF :: fetched 4 new logs [04-07-2022 19:41:01]27496: WAF :: fetched 1 new logs [04-07-2022 19:41:01]27496: Checking for user cron vulnerabilities [04-07-2022 19:42:01]30094: WAF :: fetched 1 new logs [04-07-2022 19:43:01]32735: WAF :: fetched 1 new logs [04-07-2022 19:44:01]2929: Checking ditributed CMS bruteforce attacks [04-07-2022 19:44:03]2929: WAF :: fetched 1 new logs [04-07-2022 19:45:02]: Checking for definition updates [04-07-2022 19:46:01]8401: WAF :: fetched 1 new logs [04-07-2022 19:47:01]11060: WAF :: fetched 2 new logs [04-07-2022 19:48:02]13768: WAF :: fetched 2 new logs [04-07-2022 19:49:01]16409: WAF :: fetched 2 new logs [04-07-2022 19:50:02]19167: WAF :: fetched 3 new logs [04-07-2022 19:54:01]30083: WAF :: fetched 2 new logs [04-07-2022 19:55:01]32762: WAF :: fetched 3 new logs [04-07-2022 19:56:01]3188: WAF :: fetched 2 new logs [04-07-2022 19:57:01]5840: WAF :: fetched 1 new logs [04-07-2022 19:58:02]8551: WAF :: fetched 1 new logs [04-07-2022 19:59:01]11171: WAF :: fetched 5 new logs [04-07-2022 20:00:01]13564: WAF :: fetched 2 new logs [04-07-2022 20:01:02]16791: WAF :: fetched 2 new logs [04-07-2022 20:03:03]22158: WAF :: fetched 4 new logs [04-07-2022 20:06:01]30227: WAF :: fetched 4 new logs [04-07-2022 20:07:02]442: WAF :: fetched 1 new logs [04-07-2022 20:09:01]5792: WAF :: fetched 3 new logs [04-07-2022 20:10:02]8448: WAF :: fetched 1 new logs [04-07-2022 20:11:01]11187: WAF :: fetched 2 new logs [04-07-2022 20:12:01]13861: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656976321 [04-07-2022 20:12:01]13861: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 20:12:03]13861: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 20:12:03]13861: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-2012/20220704-201201-YsNzwVK5BtN4HbGLcHD4NgAAAA0 [04-07-2022 20:12:03]13861: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 20:12:03]13861: WAF :: fetched 2 new logs [04-07-2022 20:15:01]21932: WAF :: fetched 1 new logs [04-07-2022 20:18:01]29861: WAF :: fetched 1 new logs [04-07-2022 20:19:02]32514: WAF :: fetched 1 new logs [04-07-2022 20:20:01]2816: WAF :: fetched 7 new logs [04-07-2022 20:21:01]5493: WAF :: fetched 2 new logs [04-07-2022 20:22:02]8241: WAF :: fetched 1 new logs [04-07-2022 20:23:01]10813: WAF :: fetched 1 new logs [04-07-2022 20:24:02]13464: WAF :: fetched 8 new logs [04-07-2022 20:25:01]16062: WAF :: fetched 1 new logs [04-07-2022 20:26:01]18830: WAF :: fetched 1 new logs [04-07-2022 20:27:02]21539: WAF :: fetched 2 new logs [04-07-2022 20:28:02]24139: WAF :: fetched 3 new logs [04-07-2022 20:29:02]26766: WAF :: fetched 1 new logs [04-07-2022 20:30:01]29364: WAF :: fetched 2 new logs [04-07-2022 20:31:01]31996: WAF :: fetched 3 new logs [04-07-2022 20:32:02]2360: WAF :: fetched 1 new logs [04-07-2022 20:33:01]4995: WAF :: fetched 4 new logs [04-07-2022 20:34:02]7603: WAF :: fetched 2 new logs [04-07-2022 20:35:01]10185: WAF :: fetched 5 new logs [04-07-2022 20:36:01]12856: WAF :: fetched 3 new logs [04-07-2022 20:37:02]15591: WAF :: fetched 1 new logs [04-07-2022 20:38:01]18256: WAF :: fetched 4 new logs [04-07-2022 20:39:02]20886: WAF :: fetched 1 new logs [04-07-2022 20:41:01]26191: Checking for user cron vulnerabilities [04-07-2022 20:42:01]28929: WAF :: fetched 1 new logs [04-07-2022 20:43:01]31504: WAF :: fetched 3 new logs [04-07-2022 20:44:01]1767: Checking ditributed CMS bruteforce attacks [04-07-2022 20:44:05]1767: WAF :: fetched 3 new logs [04-07-2022 20:45:02]4388: WAF :: fetched 2 new logs [04-07-2022 20:46:01]7025: WAF :: fetched 3 new logs [04-07-2022 20:47:01]9730: WAF :: fetched 2 new logs [04-07-2022 20:48:01]12321: WAF :: fetched 4 new logs [04-07-2022 20:49:02]14965: WAF :: fetched 2 new logs [04-07-2022 20:51:01]20314: WAF :: fetched 3 new logs [04-07-2022 20:52:02]22983: WAF :: fetched 2 new logs [04-07-2022 20:53:01]25556: WAF :: fetched 3 new logs [04-07-2022 20:54:02]28164: WAF :: fetched 1 new logs [04-07-2022 20:55:03]30753: WAF :: fetched 2 new logs [04-07-2022 20:57:01]3693: WAF :: fetched 2 new logs [04-07-2022 20:58:01]6294: WAF :: fetched 1 new logs [04-07-2022 21:08:01]465: WAF :: fetched 2 new logs [04-07-2022 21:11:02]8450: WAF :: fetched 2 new logs [04-07-2022 21:12:02]11165: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656979922 [04-07-2022 21:12:02]11165: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 21:12:04]11165: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 21:12:04]11165: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-2112/20220704-211202-YsOB0o0GL_u4MUNmoe9iDwAAACU [04-07-2022 21:12:04]11165: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 21:13:02]13856: WAF :: fetched 1 new logs [04-07-2022 21:14:01]16498: WAF :: fetched 1 new logs [04-07-2022 21:15:01]19252: WAF :: fetched 3 new logs [04-07-2022 21:18:01]27363: WAF :: fetched 2 new logs [04-07-2022 21:19:01]30057: WAF :: fetched 1 new logs [04-07-2022 21:22:02]5947: WAF :: fetched 3 new logs [04-07-2022 21:23:02]8608: WAF :: fetched 5 new logs [04-07-2022 21:24:01]11262: WAF :: fetched 1 new logs [04-07-2022 21:26:01]16618: WAF :: fetched 1 new logs [04-07-2022 21:27:01]19467: WAF :: fetched 3 new logs [04-07-2022 21:28:01]22219: WAF :: fetched 1 new logs [04-07-2022 21:29:01]24836: WAF :: fetched 2 new logs [04-07-2022 21:31:01]30166: WAF :: fetched 2 new logs [04-07-2022 21:33:02]3145: WAF :: fetched 2 new logs [04-07-2022 21:34:01]5768: WAF :: fetched 2 new logs [04-07-2022 21:38:01]16504: WAF :: fetched 1 new logs [04-07-2022 21:39:02]19252: WAF :: fetched 3 new logs [04-07-2022 21:40:02]21904: WAF :: fetched 2 new logs [04-07-2022 21:41:01]24591: WAF :: fetched 1 new logs [04-07-2022 21:41:01]24591: Checking for user cron vulnerabilities [04-07-2022 21:43:01]29888: WAF :: fetched 3 new logs [04-07-2022 21:44:02]32526: Checking ditributed CMS bruteforce attacks [04-07-2022 21:45:01]2784: WAF :: fetched 1 new logs [04-07-2022 21:46:01]5467: WAF :: fetched 2 new logs [04-07-2022 21:47:02]8166: WAF :: fetched 3 new logs [04-07-2022 21:48:01]10728: WAF :: fetched 2 new logs [04-07-2022 21:49:02]13345: WAF :: fetched 2 new logs [04-07-2022 21:50:02]16068: WAF :: fetched 1 new logs [04-07-2022 21:51:01]18832: WAF :: fetched 2 new logs [04-07-2022 21:52:01]21492: WAF :: fetched 2 new logs [04-07-2022 21:53:01]24100: WAF :: fetched 5 new logs [04-07-2022 21:54:01]26641: WAF :: fetched 1 new logs [04-07-2022 21:55:02]29285: WAF :: fetched 2 new logs [04-07-2022 21:58:02]4873: WAF :: fetched 1 new logs [04-07-2022 21:59:01]7529: WAF :: fetched 1 new logs [04-07-2022 22:04:02]21009: WAF :: fetched 1 new logs [04-07-2022 22:06:01]26299: WAF :: fetched 2 new logs [04-07-2022 22:07:03]29002: WAF :: fetched 2 new logs [04-07-2022 22:07:11]28996: Performing Domain reputation checks [04-07-2022 22:08:01]31611: WAF :: fetched 2 new logs [04-07-2022 22:09:02]1844: WAF :: fetched 1 new logs [04-07-2022 22:10:01]4441: WAF :: fetched 1 new logs [04-07-2022 22:12:02]9924: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656983522 [04-07-2022 22:12:02]9924: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 22:12:04]9924: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 22:12:05]9924: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-2212/20220704-221202-YsOP4nfz2GEkf9onf7_IowAAAA0 [04-07-2022 22:12:05]9924: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 22:12:05]9924: WAF :: fetched 1 new logs [04-07-2022 22:13:01]12517: WAF :: fetched 2 new logs [04-07-2022 22:14:01]15132: WAF :: fetched 2 new logs [04-07-2022 22:15:01]17803: WAF :: fetched 2 new logs [04-07-2022 22:16:02]20564: WAF :: fetched 8 new logs [04-07-2022 22:17:02]23245: WAF :: fetched 5 new logs [04-07-2022 22:18:01]25802: WAF :: fetched 1 new logs [04-07-2022 22:20:02]31093: WAF :: fetched 2 new logs [04-07-2022 22:21:01]1390: WAF :: fetched 1 new logs [04-07-2022 22:22:01]4138: WAF :: fetched 2 new logs [04-07-2022 22:23:01]6739: WAF :: fetched 4 new logs [04-07-2022 22:24:02]9376: WAF :: fetched 6 new logs [04-07-2022 22:25:03]12028: WAF :: fetched 1 new logs [04-07-2022 22:26:01]14768: WAF :: fetched 1 new logs [04-07-2022 22:29:01]22753: WAF :: fetched 2 new logs [04-07-2022 22:30:01]25391: WAF :: fetched 2 new logs [04-07-2022 22:34:02]3623: WAF :: fetched 2 new logs [04-07-2022 22:35:02]6224: WAF :: fetched 1 new logs [04-07-2022 22:37:02]11526: WAF :: fetched 1 new logs [04-07-2022 22:38:01]14100: WAF :: fetched 1 new logs [04-07-2022 22:40:02]19436: WAF :: fetched 2 new logs [04-07-2022 22:41:01]22116: Checking for user cron vulnerabilities [04-07-2022 22:43:01]27389: WAF :: fetched 1 new logs [04-07-2022 22:44:02]30022: Checking ditributed CMS bruteforce attacks [04-07-2022 22:44:04]30022: WAF :: fetched 2 new logs [04-07-2022 22:45:01]32601: WAF :: fetched 1 new logs [04-07-2022 22:46:01]2941: WAF :: fetched 1 new logs [04-07-2022 22:48:01]8292: WAF :: fetched 2 new logs [04-07-2022 22:50:02]13541: WAF :: fetched 3 new logs [04-07-2022 22:51:01]16228: WAF :: fetched 2 new logs [04-07-2022 22:52:01]19021: WAF :: fetched 1 new logs [04-07-2022 22:53:02]21639: WAF :: fetched 3 new logs [04-07-2022 22:55:01]26879: WAF :: fetched 3 new logs [04-07-2022 22:56:02]29628: WAF :: fetched 2 new logs [04-07-2022 22:57:01]32355: WAF :: fetched 1 new logs [04-07-2022 22:58:02]2570: WAF :: fetched 2 new logs [04-07-2022 23:00:02]7432: WAF :: fetched 1 new logs [04-07-2022 23:01:01]10539: WAF :: fetched 2 new logs [04-07-2022 23:02:02]13254: WAF :: fetched 1 new logs [04-07-2022 23:04:01]18491: WAF :: fetched 1 new logs [04-07-2022 23:05:02]21108: WAF :: fetched 1 new logs [04-07-2022 23:06:01]23770: WAF :: fetched 4 new logs [04-07-2022 23:07:02]26489: WAF :: fetched 1 new logs [04-07-2022 23:07:54]26644: Performed RBL check for 23.111.136.34. [04-07-2022 23:09:01]31679: WAF :: fetched 2 new logs [04-07-2022 23:10:02]1899: WAF :: fetched 3 new logs [04-07-2022 23:12:02]7234: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656987122 [04-07-2022 23:12:02]7234: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-07-2022 23:12:04]7234: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-07-2022 23:12:05]7234: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220704/20220704-2312/20220704-231202-YsOd8gZFqEH_j2BEVTpAtQAAABo [04-07-2022 23:12:05]7234: WAF :: No suitable log file found. Using SQLite.. [04-07-2022 23:12:06]7234: WAF :: fetched 3 new logs [04-07-2022 23:13:01]9824: WAF :: fetched 1 new logs [04-07-2022 23:14:01]12403: WAF :: fetched 4 new logs [04-07-2022 23:15:02]15056: WAF :: fetched 6 new logs [04-07-2022 23:16:01]17667: WAF :: fetched 4 new logs [04-07-2022 23:17:02]20492: WAF :: fetched 3 new logs [04-07-2022 23:18:01]23083: WAF :: fetched 3 new logs [04-07-2022 23:19:01]25765: WAF :: fetched 1 new logs [04-07-2022 23:21:01]31113: WAF :: fetched 4 new logs [04-07-2022 23:22:02]1391: WAF :: fetched 1 new logs [04-07-2022 23:23:01]4003: WAF :: fetched 1 new logs [04-07-2022 23:24:01]6590: WAF :: fetched 6 new logs [04-07-2022 23:25:02]9220: WAF :: fetched 5 new logs [04-07-2022 23:27:02]14567: WAF :: fetched 4 new logs [04-07-2022 23:29:02]19791: WAF :: fetched 1 new logs [04-07-2022 23:30:02]22379: WAF :: fetched 1 new logs [04-07-2022 23:33:01]30324: WAF :: fetched 1 new logs [04-07-2022 23:34:01]476: WAF :: fetched 2 new logs [04-07-2022 23:35:01]3138: WAF :: fetched 2 new logs [04-07-2022 23:36:02]5795: WAF :: fetched 1 new logs [04-07-2022 23:37:01]8450: WAF :: fetched 7 new logs [04-07-2022 23:38:02]11052: WAF :: fetched 2 new logs [04-07-2022 23:39:01]13669: WAF :: fetched 2 new logs [04-07-2022 23:41:02]19119: Checking for user cron vulnerabilities [04-07-2022 23:42:01]21829: WAF :: fetched 27 new logs [04-07-2022 23:43:02]24445: WAF :: fetched 4 new logs [04-07-2022 23:44:01]26980: Checking ditributed CMS bruteforce attacks [04-07-2022 23:44:01]26980: WAF :: fetched 1 new logs [04-07-2022 23:47:01]2541: WAF :: fetched 1 new logs [04-07-2022 23:48:02]5136: WAF :: fetched 1 new logs [04-07-2022 23:49:01]7697: WAF :: fetched 5 new logs [04-07-2022 23:50:02]10354: WAF :: fetched 4 new logs [04-07-2022 23:51:01]12984: WAF :: fetched 3 new logs [04-07-2022 23:52:01]15664: WAF :: fetched 2 new logs [04-07-2022 23:53:01]18414: WAF :: fetched 2 new logs [04-07-2022 23:54:02]21085: httpd.conf changed. Refreshing watchlist. [04-07-2022 23:55:01]23931: WAF :: fetched 2 new logs [04-07-2022 23:56:01]26645: httpd.conf changed. Refreshing watchlist. [04-07-2022 23:57:01]29356: WAF :: fetched 1 new logs [04-07-2022 23:58:01]31946: WAF :: fetched 1 new logs [04-07-2022 23:59:02]2196: WAF :: fetched 2 new logs [05-07-2022 00:01:01]7758: httpd.conf changed. Refreshing watchlist. [05-07-2022 00:01:05]7761: Sending daily report for July 5, 2022 [05-07-2022 00:02:02]10576: WAF :: fetched 2 new logs [05-07-2022 00:02:02]10578: httpd.conf changed. Refreshing watchlist. [05-07-2022 00:03:01]13165: WAF :: fetched 3 new logs [05-07-2022 00:04:02]15742: WAF :: fetched 2 new logs [05-07-2022 00:05:02]18412: Deleted 0 entries older than 6 MONTH from scanner_logs [05-07-2022 00:05:02]18412: Deleted 0 files from Quarantine [05-07-2022 00:06:01]21090: WAF :: fetched 2 new logs [05-07-2022 00:07:01]23762: WAF :: fetched 2 new logs [05-07-2022 00:08:01]26359: WAF :: fetched 1 new logs [05-07-2022 00:09:01]28937: WAF :: fetched 5 new logs [05-07-2022 00:10:01]31537: WAF :: fetched 1 new logs [05-07-2022 00:12:02]4418: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656990722 [05-07-2022 00:12:02]4418: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 00:12:04]4418: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 00:12:04]4418: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-0012/20220705-001202-YsOsAljduzy6unx8pB9aEQAAABM [05-07-2022 00:12:04]4418: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 00:12:04]4418: WAF :: fetched 1 new logs [05-07-2022 00:15:01]12184: WAF :: fetched 4 new logs [05-07-2022 00:16:02]14886: WAF :: fetched 5 new logs [05-07-2022 00:17:01]17546: WAF :: fetched 3 new logs [05-07-2022 00:18:01]20203: WAF :: fetched 1 new logs [05-07-2022 00:19:01]22859: WAF :: fetched 1 new logs [05-07-2022 00:20:01]25477: WAF :: fetched 2 new logs [05-07-2022 00:21:02]28153: WAF :: fetched 1 new logs [05-07-2022 00:22:01]30818: WAF :: fetched 3 new logs [05-07-2022 00:23:01]1001: WAF :: fetched 136 new logs [05-07-2022 00:24:01]3578: WAF :: fetched 60 new logs [05-07-2022 00:25:02]6164: WAF :: fetched 2 new logs [05-07-2022 00:28:01]14058: WAF :: fetched 2 new logs [05-07-2022 00:29:01]16644: WAF :: fetched 3 new logs [05-07-2022 00:30:02]19377: WAF :: fetched 135 new logs [05-07-2022 00:31:02]21864: WAF :: fetched 18 new logs [05-07-2022 00:32:02]24784: WAF :: fetched 2 new logs [05-07-2022 00:33:02]27333: WAF :: fetched 1 new logs [05-07-2022 00:35:03]32502: WAF :: fetched 1 new logs [05-07-2022 00:36:02]2750: WAF :: fetched 5 new logs [05-07-2022 00:37:01]5396: WAF :: fetched 193 new logs [05-07-2022 00:38:01]8001: WAF :: fetched 159 new logs [05-07-2022 00:39:01]10597: WAF :: fetched 19 new logs [05-07-2022 00:40:01]13194: WAF :: fetched 40 new logs [05-07-2022 00:41:01]15794: WAF :: fetched 7 new logs [05-07-2022 00:41:01]15794: Checking for user cron vulnerabilities [05-07-2022 00:42:01]18508: WAF :: fetched 15 new logs [05-07-2022 00:43:01]21111: WAF :: fetched 40 new logs [05-07-2022 00:44:02]23752: Checking ditributed CMS bruteforce attacks [05-07-2022 00:44:02]23752: WAF :: fetched 13 new logs [05-07-2022 00:45:01]: Checking for software updates [05-07-2022 00:45:01]26301: WAF :: fetched 9 new logs [05-07-2022 00:46:01]28944: WAF :: fetched 16 new logs [05-07-2022 00:47:01]31613: WAF :: fetched 15 new logs [05-07-2022 00:48:02]1875: WAF :: fetched 13 new logs [05-07-2022 00:49:02]4440: WAF :: fetched 16 new logs [05-07-2022 00:50:02]7072: WAF :: fetched 15 new logs [05-07-2022 00:51:01]9507: WAF :: fetched 17 new logs [05-07-2022 00:52:01]12327: WAF :: fetched 16 new logs [05-07-2022 00:53:01]14881: WAF :: fetched 9 new logs [05-07-2022 00:54:02]17482: WAF :: fetched 7 new logs [05-07-2022 00:55:02]20123: WAF :: fetched 10 new logs [05-07-2022 00:56:03]22729: WAF :: fetched 13 new logs [05-07-2022 00:57:01]25455: WAF :: fetched 10 new logs [05-07-2022 00:58:01]28049: WAF :: fetched 13 new logs [05-07-2022 00:59:01]30584: WAF :: fetched 8 new logs [05-07-2022 01:00:02]458: WAF :: fetched 9 new logs [05-07-2022 01:01:01]4376: WAF :: fetched 7 new logs [05-07-2022 01:02:02]7206: WAF :: fetched 6 new logs [05-07-2022 01:03:02]10073: WAF :: fetched 4 new logs [05-07-2022 01:04:01]12885: WAF :: fetched 3 new logs [05-07-2022 01:06:01]18791: WAF :: fetched 3 new logs [05-07-2022 01:09:01]26955: WAF :: fetched 1 new logs [05-07-2022 01:10:01]29549: WAF :: fetched 1 new logs [05-07-2022 01:11:01]32451: WAF :: fetched 1 new logs [05-07-2022 01:12:02]2805: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656994322 [05-07-2022 01:12:02]2805: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 01:12:04]2805: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 01:12:04]2805: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-0112/20220705-011202-YsO6Enf0QGbEP4V_6u8D1gAAAAo [05-07-2022 01:12:04]2805: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-07-2022 01:12:04]2805: WAF :: fetched 1 new logs [05-07-2022 01:13:02]5472: WAF :: fetched 1 new logs [05-07-2022 01:14:02]8130: WAF :: fetched 2 new logs [05-07-2022 01:16:03]13622: WAF :: fetched 3 new logs [05-07-2022 01:17:01]16211: WAF :: fetched 3 new logs [05-07-2022 01:18:02]19146: WAF :: fetched 2 new logs [05-07-2022 01:20:02]24833: WAF :: fetched 34 new logs [05-07-2022 01:24:03]3318: WAF :: fetched 1 new logs [05-07-2022 01:25:02]6204: WAF :: fetched 2 new logs [05-07-2022 01:26:01]8733: WAF :: fetched 3 new logs [05-07-2022 01:27:01]11609: WAF :: fetched 1 new logs [05-07-2022 01:28:01]14445: WAF :: fetched 1 new logs [05-07-2022 01:30:02]20306: WAF :: fetched 2 new logs [05-07-2022 01:31:01]22986: WAF :: fetched 1 new logs [05-07-2022 01:32:02]25934: WAF :: fetched 6 new logs [05-07-2022 01:35:01]1737: WAF :: fetched 2 new logs [05-07-2022 01:40:02]15289: WAF :: fetched 3 new logs [05-07-2022 01:41:01]18375: Checking for user cron vulnerabilities [05-07-2022 01:42:02]21197: WAF :: fetched 2 new logs [05-07-2022 01:44:01]27229: Checking ditributed CMS bruteforce attacks [05-07-2022 01:45:02]: Checking for definition updates [05-07-2022 01:46:01]32460: WAF :: fetched 1 new logs [05-07-2022 01:49:02]8325: WAF :: fetched 4 new logs [05-07-2022 01:50:02]11115: WAF :: fetched 2 new logs [05-07-2022 01:51:02]13867: WAF :: fetched 1 new logs [05-07-2022 01:52:01]16471: WAF :: fetched 3 new logs [05-07-2022 01:53:01]19534: WAF :: fetched 3 new logs [05-07-2022 01:57:01]29956: WAF :: fetched 6 new logs [05-07-2022 01:59:02]3231: WAF :: fetched 3 new logs [05-07-2022 02:03:01]13952: WAF :: fetched 2 new logs [05-07-2022 02:04:01]16553: WAF :: fetched 1 new logs [05-07-2022 02:06:02]21971: WAF :: fetched 2 new logs [05-07-2022 02:07:02]24575: WAF :: fetched 2 new logs [05-07-2022 02:08:02]27261: WAF :: fetched 2 new logs [05-07-2022 02:09:02]29880: WAF :: fetched 1 new logs [05-07-2022 02:10:01]32508: WAF :: fetched 3 new logs [05-07-2022 02:11:02]2814: WAF :: fetched 1 new logs [05-07-2022 02:12:01]5171: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1656997921 [05-07-2022 02:12:01]5171: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 02:12:03]5171: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 02:12:03]5171: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-0212/20220705-021201-YsPIIYUKm_HwhaZtoFkHuwAAAAY [05-07-2022 02:12:03]5171: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 02:12:04]5171: WAF :: fetched 88 new logs [05-07-2022 02:14:02]11002: WAF :: fetched 1 new logs [05-07-2022 02:15:01]13701: WAF :: fetched 2 new logs [05-07-2022 02:16:02]16377: WAF :: fetched 2 new logs [05-07-2022 02:17:01]19081: WAF :: fetched 1 new logs [05-07-2022 02:17:02]19086: httpd.conf changed. Refreshing watchlist. [05-07-2022 02:19:01]24569: WAF :: fetched 1 new logs [05-07-2022 02:20:02]27223: WAF :: fetched 1 new logs [05-07-2022 02:21:02]29884: WAF :: fetched 1 new logs [05-07-2022 02:25:02]8119: WAF :: fetched 6 new logs [05-07-2022 02:26:02]10773: WAF :: fetched 6 new logs [05-07-2022 02:29:02]18788: WAF :: fetched 1 new logs [05-07-2022 02:30:02]21414: WAF :: fetched 1 new logs [05-07-2022 02:31:02]24077: WAF :: fetched 3 new logs [05-07-2022 02:34:01]31926: WAF :: fetched 1 new logs [05-07-2022 02:37:01]7161: WAF :: fetched 7 new logs [05-07-2022 02:38:01]9963: WAF :: fetched 2 new logs [05-07-2022 02:41:01]17761: WAF :: fetched 3 new logs [05-07-2022 02:41:01]17761: Checking for user cron vulnerabilities [05-07-2022 02:43:01]23817: WAF :: fetched 1 new logs [05-07-2022 02:44:01]26898: Checking ditributed CMS bruteforce attacks [05-07-2022 02:45:02]29652: WAF :: fetched 6 new logs [05-07-2022 02:46:02]32307: WAF :: fetched 1 new logs [05-07-2022 02:47:02]2504: WAF :: fetched 2 new logs [05-07-2022 02:48:02]5200: WAF :: fetched 1 new logs [05-07-2022 02:50:01]10339: WAF :: fetched 1 new logs [05-07-2022 02:52:01]16010: WAF :: fetched 3 new logs [05-07-2022 02:53:01]18852: WAF :: fetched 25 new logs [05-07-2022 02:53:02]18851: Updated license status via CDN [05-07-2022 02:54:02]21614: WAF :: fetched 1 new logs [05-07-2022 02:55:01]24443: WAF :: fetched 2 new logs [05-07-2022 02:56:03]27456: WAF :: fetched 2 new logs [05-07-2022 02:57:01]30281: WAF :: fetched 13 new logs [05-07-2022 02:58:01]548: WAF :: fetched 49 new logs [05-07-2022 02:59:01]3324: WAF :: fetched 35 new logs [05-07-2022 03:00:01]5749: WAF :: fetched 28 new logs [05-07-2022 03:00:32]5749: Found and updated 32 CMS installations [05-07-2022 03:01:01]8905: WAF :: fetched 171 new logs [05-07-2022 03:01:58]5749: Wordpress installation #23 blueseasurf.com.br has errors [05-07-2022 03:02:01]11675: WAF :: fetched 216 new logs [05-07-2022 03:03:01]14908: WAF :: fetched 28 new logs [05-07-2022 03:03:13]5749: Sending CMS version vulnerability report emails to cpanel users [05-07-2022 03:03:16]5749: Checking wordpress installations for suspicious directories [05-07-2022 03:04:02]18236: WAF :: fetched 6 new logs [05-07-2022 03:04:21]14949: Sending CMS version vulnerability report emails to cpanel users [05-07-2022 03:04:24]14949: Checking wordpress installations for suspicious directories [05-07-2022 03:05:02]21058: WAF :: fetched 4 new logs [05-07-2022 03:06:01]23576: WAF :: fetched 7 new logs [05-07-2022 03:07:01]26319: WAF :: fetched 14 new logs [05-07-2022 03:08:01]28993: WAF :: fetched 9 new logs [05-07-2022 03:09:02]31622: WAF :: fetched 7 new logs [05-07-2022 03:10:01]1732: WAF :: fetched 10 new logs [05-07-2022 03:11:01]4498: WAF :: fetched 40 new logs [05-07-2022 03:12:01]7113: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657001521 [05-07-2022 03:12:01]7113: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 03:12:03]7113: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 03:12:05]7113: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-0312/20220705-031201-YsPWMXicECT0NPZc6hFCwAAAAA4 [05-07-2022 03:12:05]7113: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 03:12:05]7113: WAF :: fetched 14 new logs [05-07-2022 03:13:01]9755: WAF :: fetched 10 new logs [05-07-2022 03:14:02]12339: WAF :: fetched 42 new logs [05-07-2022 03:16:01]17974: WAF :: fetched 1 new logs [05-07-2022 03:17:01]20899: WAF :: fetched 2 new logs [05-07-2022 03:18:01]23541: WAF :: fetched 1 new logs [05-07-2022 03:19:01]26353: WAF :: fetched 2 new logs [05-07-2022 03:20:02]29049: WAF :: fetched 1 new logs [05-07-2022 03:21:02]31868: WAF :: fetched 1 new logs [05-07-2022 03:23:02]5175: WAF :: fetched 25 new logs [05-07-2022 03:24:01]7868: WAF :: fetched 3 new logs [05-07-2022 03:26:01]13306: WAF :: fetched 1 new logs [05-07-2022 03:27:02]15911: WAF :: fetched 1 new logs [05-07-2022 03:28:01]18438: WAF :: fetched 2 new logs [05-07-2022 03:29:01]21205: WAF :: fetched 2 new logs [05-07-2022 03:30:01]23794: WAF :: fetched 2 new logs [05-07-2022 03:31:01]21920: WAF :: fetched 1 new logs [05-07-2022 03:32:02]4459: WAF :: fetched 1 new logs [05-07-2022 03:33:01]24056: WAF :: fetched 2 new logs [05-07-2022 03:35:01]6330: WAF :: fetched 3 new logs [05-07-2022 03:36:01]8948: WAF :: fetched 1 new logs [05-07-2022 03:38:02]14194: WAF :: fetched 7 new logs [05-07-2022 03:39:01]16755: WAF :: fetched 3 new logs [05-07-2022 03:41:02]22060: WAF :: fetched 1 new logs [05-07-2022 03:41:02]22060: Checking for user cron vulnerabilities [05-07-2022 03:43:01]27381: WAF :: fetched 2 new logs [05-07-2022 03:44:01]30032: Checking ditributed CMS bruteforce attacks [05-07-2022 03:44:03]30032: WAF :: fetched 1 new logs [05-07-2022 03:46:01]2864: WAF :: fetched 4 new logs [05-07-2022 03:47:02]5435: WAF :: fetched 1 new logs [05-07-2022 03:48:02]8094: WAF :: fetched 2 new logs [05-07-2022 03:49:01]10651: WAF :: fetched 4 new logs [05-07-2022 03:50:03]13248: WAF :: fetched 1 new logs [05-07-2022 03:51:01]15882: WAF :: fetched 2 new logs [05-07-2022 03:53:01]21310: WAF :: fetched 1 new logs [05-07-2022 03:54:01]23926: WAF :: fetched 2 new logs [05-07-2022 03:55:01]26529: WAF :: fetched 2 new logs [05-07-2022 03:58:02]2017: WAF :: fetched 2 new logs [05-07-2022 04:00:01]6824: WAF :: fetched 2 new logs [05-07-2022 04:01:02]9931: WAF :: fetched 2 new logs [05-07-2022 04:02:01]12525: WAF :: fetched 2 new logs [05-07-2022 04:04:01]17811: WAF :: fetched 2 new logs [05-07-2022 04:06:01]23115: WAF :: fetched 3 new logs [05-07-2022 04:08:03]28346: WAF :: fetched 1 new logs [05-07-2022 04:09:02]30892: WAF :: fetched 2 new logs [05-07-2022 04:10:01]1050: WAF :: fetched 1 new logs [05-07-2022 04:11:01]3693: WAF :: fetched 4 new logs [05-07-2022 04:12:01]6235: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657005121 [05-07-2022 04:12:01]6235: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 04:12:03]6235: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 04:12:04]6235: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-0412/20220705-041201-YsPkQUtFmWMttnlKDOYeNQAAAAw [05-07-2022 04:12:04]6235: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 04:12:04]6235: WAF :: fetched 2 new logs [05-07-2022 04:13:01]8934: WAF :: fetched 3 new logs [05-07-2022 04:14:01]11461: WAF :: fetched 2 new logs [05-07-2022 04:15:02]14083: WAF :: fetched 2 new logs [05-07-2022 04:17:02]19428: WAF :: fetched 3 new logs [05-07-2022 04:18:01]22144: WAF :: fetched 2 new logs [05-07-2022 04:21:01]30097: WAF :: fetched 15 new logs [05-07-2022 04:22:01]32700: WAF :: fetched 1 new logs [05-07-2022 04:22:01]32706: httpd.conf changed. Refreshing watchlist. [05-07-2022 04:23:01]2988: WAF :: fetched 2 new logs [05-07-2022 04:24:01]5529: WAF :: fetched 2 new logs [05-07-2022 04:25:01]8114: WAF :: fetched 1 new logs [05-07-2022 04:26:03]10802: WAF :: fetched 2 new logs [05-07-2022 04:28:02]16004: WAF :: fetched 1 new logs [05-07-2022 04:29:02]18682: WAF :: fetched 1 new logs [05-07-2022 04:30:01]21299: WAF :: fetched 3 new logs [05-07-2022 04:31:01]23948: WAF :: fetched 1 new logs [05-07-2022 04:32:02]26620: WAF :: fetched 4 new logs [05-07-2022 04:33:01]29280: WAF :: fetched 1 new logs [05-07-2022 04:36:01]4750: WAF :: fetched 6 new logs [05-07-2022 04:37:02]7329: WAF :: fetched 2 new logs [05-07-2022 04:38:01]9969: WAF :: fetched 1 new logs [05-07-2022 04:39:02]12548: WAF :: fetched 3 new logs [05-07-2022 04:40:01]15131: WAF :: fetched 3 new logs [05-07-2022 04:41:01]17810: WAF :: fetched 1 new logs [05-07-2022 04:41:01]17810: Checking for user cron vulnerabilities [05-07-2022 04:42:02]20490: WAF :: fetched 1 new logs [05-07-2022 04:43:01]23117: WAF :: fetched 2 new logs [05-07-2022 04:44:01]25712: Checking ditributed CMS bruteforce attacks [05-07-2022 04:44:05]25712: WAF :: fetched 1 new logs [05-07-2022 04:45:01]28274: WAF :: fetched 2 new logs [05-07-2022 04:47:01]1073: WAF :: fetched 3 new logs [05-07-2022 04:49:01]6288: WAF :: fetched 1 new logs [05-07-2022 04:50:01]8844: WAF :: fetched 2 new logs [05-07-2022 04:51:01]11439: WAF :: fetched 3 new logs [05-07-2022 04:52:02]14030: WAF :: fetched 3 new logs [05-07-2022 04:54:02]19393: WAF :: fetched 5 new logs [05-07-2022 04:59:02]32615: WAF :: fetched 2 new logs [05-07-2022 05:01:02]5659: WAF :: fetched 1 new logs [05-07-2022 05:01:42]5661: Starting daily scan on files updated in last 24 hrs [05-07-2022 05:02:01]8308: WAF :: fetched 1 new logs [05-07-2022 05:03:01]11021: WAF :: fetched 2 new logs [05-07-2022 05:04:01]13611: WAF :: fetched 5 new logs [05-07-2022 05:05:01]16240: WAF :: fetched 1 new logs [05-07-2022 05:07:01]21582: WAF :: fetched 17 new logs [05-07-2022 05:08:02]24304: WAF :: fetched 6 new logs [05-07-2022 05:10:02]29494: WAF :: fetched 4 new logs [05-07-2022 05:11:02]32205: WAF :: fetched 1 new logs [05-07-2022 05:12:01]2392: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657008721 [05-07-2022 05:12:01]2392: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 05:12:03]2392: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 05:12:04]2392: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-0512/20220705-051201-YsPyUV0VpMuMX6KJ1uBDbgAAABo [05-07-2022 05:12:04]2392: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-07-2022 05:12:04]2392: WAF :: fetched 1 new logs [05-07-2022 05:16:01]12911: WAF :: fetched 2 new logs [05-07-2022 05:17:01]15500: WAF :: fetched 1 new logs [05-07-2022 05:18:01]18283: WAF :: fetched 3 new logs [05-07-2022 05:19:02]20957: WAF :: fetched 1 new logs [05-07-2022 05:20:02]23588: WAF :: fetched 2 new logs [05-07-2022 05:21:01]26318: WAF :: fetched 1 new logs [05-07-2022 05:22:02]28961: WAF :: fetched 5 new logs [05-07-2022 05:23:01]31649: WAF :: fetched 2 new logs [05-07-2022 05:24:01]1824: WAF :: fetched 1 new logs [05-07-2022 05:26:01]7000: WAF :: fetched 2 new logs [05-07-2022 05:27:02]9593: WAF :: fetched 4 new logs [05-07-2022 05:28:01]12251: WAF :: fetched 2 new logs [05-07-2022 05:29:02]14808: WAF :: fetched 1 new logs [05-07-2022 05:30:02]17426: WAF :: fetched 2 new logs [05-07-2022 05:31:03]20126: WAF :: fetched 5 new logs [05-07-2022 05:32:02]22696: WAF :: fetched 2 new logs [05-07-2022 05:34:01]28026: WAF :: fetched 1 new logs [05-07-2022 05:35:02]30659: WAF :: fetched 4 new logs [05-07-2022 05:36:01]846: WAF :: fetched 1 new logs [05-07-2022 05:37:03]3438: WAF :: fetched 3 new logs [05-07-2022 05:40:01]11216: WAF :: fetched 3 new logs [05-07-2022 05:41:02]13833: WAF :: fetched 3 new logs [05-07-2022 05:41:02]13833: Checking for user cron vulnerabilities [05-07-2022 05:42:01]16361: WAF :: fetched 2 new logs [05-07-2022 05:43:01]19106: WAF :: fetched 16 new logs [05-07-2022 05:44:02]21720: Checking ditributed CMS bruteforce attacks [05-07-2022 05:44:04]21720: WAF :: fetched 15 new logs [05-07-2022 05:45:01]24130: WAF :: fetched 19 new logs [05-07-2022 05:46:01]26971: WAF :: fetched 16 new logs [05-07-2022 05:47:01]29586: WAF :: fetched 19 new logs [05-07-2022 05:48:02]32292: WAF :: fetched 14 new logs [05-07-2022 05:49:01]2432: WAF :: fetched 8 new logs [05-07-2022 05:50:02]5047: WAF :: fetched 8 new logs [05-07-2022 05:51:01]7658: WAF :: fetched 8 new logs [05-07-2022 05:52:02]10261: WAF :: fetched 16 new logs [05-07-2022 05:53:02]12858: WAF :: fetched 11 new logs [05-07-2022 05:54:01]15441: WAF :: fetched 16 new logs [05-07-2022 05:55:02]18138: WAF :: fetched 12 new logs [05-07-2022 05:56:02]20738: WAF :: fetched 19 new logs [05-07-2022 05:57:03]23335: WAF :: fetched 14 new logs [05-07-2022 05:58:02]25985: WAF :: fetched 23 new logs [05-07-2022 05:59:01]28562: WAF :: fetched 23 new logs [05-07-2022 06:00:02]30902: WAF :: fetched 27 new logs [05-07-2022 06:01:02]1612: WAF :: fetched 23 new logs [05-07-2022 06:02:01]4184: WAF :: fetched 17 new logs [05-07-2022 06:03:02]6714: WAF :: fetched 23 new logs [05-07-2022 06:04:01]9270: WAF :: fetched 18 new logs [05-07-2022 06:05:02]11818: WAF :: fetched 29 new logs [05-07-2022 06:06:02]14451: WAF :: fetched 14 new logs [05-07-2022 06:07:02]17040: WAF :: fetched 26 new logs [05-07-2022 06:08:01]19725: WAF :: fetched 17 new logs [05-07-2022 06:09:02]22341: WAF :: fetched 19 new logs [05-07-2022 06:10:02]24935: WAF :: fetched 19 new logs [05-07-2022 06:11:02]27575: WAF :: fetched 24 new logs [05-07-2022 06:12:02]30149: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657012322 [05-07-2022 06:12:02]30149: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 06:12:04]30149: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 06:12:04]30149: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-0612/20220705-061202-YsQAYkyAmcrJ8RHnJo6icwAAAAQ [05-07-2022 06:12:04]30149: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 06:12:05]30149: WAF :: fetched 371 new logs [05-07-2022 06:13:01]32745: WAF :: fetched 14 new logs [05-07-2022 06:14:01]3027: WAF :: fetched 11 new logs [05-07-2022 06:15:02]5640: WAF :: fetched 47 new logs [05-07-2022 06:16:02]8340: WAF :: fetched 68 new logs [05-07-2022 06:17:02]10905: WAF :: fetched 21 new logs [05-07-2022 06:18:01]13467: WAF :: fetched 20 new logs [05-07-2022 06:19:01]16195: WAF :: fetched 24 new logs [05-07-2022 06:20:02]18856: WAF :: fetched 19 new logs [05-07-2022 06:21:01]21498: WAF :: fetched 21 new logs [05-07-2022 06:22:01]24058: WAF :: fetched 19 new logs [05-07-2022 06:23:02]26658: WAF :: fetched 20 new logs [05-07-2022 06:24:01]29319: WAF :: fetched 18 new logs [05-07-2022 06:25:02]31918: WAF :: fetched 27 new logs [05-07-2022 06:26:02]2154: WAF :: fetched 21 new logs [05-07-2022 06:27:01]4854: WAF :: fetched 24 new logs [05-07-2022 06:28:01]7409: WAF :: fetched 12 new logs [05-07-2022 06:29:02]10057: WAF :: fetched 18 new logs [05-07-2022 06:30:01]12683: WAF :: fetched 17 new logs [05-07-2022 06:31:02]15306: WAF :: fetched 13 new logs [05-07-2022 06:32:01]17939: WAF :: fetched 20 new logs [05-07-2022 06:33:02]20618: WAF :: fetched 20 new logs [05-07-2022 06:34:01]23284: WAF :: fetched 14 new logs [05-07-2022 06:35:01]25940: WAF :: fetched 13 new logs [05-07-2022 06:36:02]28661: WAF :: fetched 15 new logs [05-07-2022 06:37:01]31250: WAF :: fetched 16 new logs [05-07-2022 06:38:02]1398: WAF :: fetched 7 new logs [05-07-2022 06:39:02]4109: WAF :: fetched 17 new logs [05-07-2022 06:40:02]6699: WAF :: fetched 15 new logs [05-07-2022 06:41:01]9057: WAF :: fetched 8 new logs [05-07-2022 06:41:01]9057: Checking for user cron vulnerabilities [05-07-2022 06:42:01]11872: WAF :: fetched 15 new logs [05-07-2022 06:43:01]14432: WAF :: fetched 16 new logs [05-07-2022 06:44:02]17155: Checking ditributed CMS bruteforce attacks [05-07-2022 06:44:03]17155: WAF :: fetched 17 new logs [05-07-2022 06:45:01]19850: WAF :: fetched 17 new logs [05-07-2022 06:46:01]22458: WAF :: fetched 14 new logs [05-07-2022 06:47:04]25051: WAF :: fetched 24 new logs [05-07-2022 06:48:01]27651: WAF :: fetched 15 new logs [05-07-2022 06:49:02]30330: WAF :: fetched 16 new logs [05-07-2022 06:50:01]404: WAF :: fetched 20 new logs [05-07-2022 06:51:01]3071: WAF :: fetched 19 new logs [05-07-2022 06:52:01]5652: WAF :: fetched 14 new logs [05-07-2022 06:53:01]8210: WAF :: fetched 22 new logs [05-07-2022 06:54:01]10882: WAF :: fetched 15 new logs [05-07-2022 06:55:02]13484: WAF :: fetched 18 new logs [05-07-2022 06:56:02]16099: WAF :: fetched 20 new logs [05-07-2022 06:57:02]18745: WAF :: fetched 22 new logs [05-07-2022 06:58:01]21327: WAF :: fetched 23 new logs [05-07-2022 06:59:01]23980: WAF :: fetched 23 new logs [05-07-2022 07:00:02]26317: WAF :: fetched 22 new logs [05-07-2022 07:01:02]29402: WAF :: fetched 37 new logs [05-07-2022 07:02:01]32054: WAF :: fetched 13 new logs [05-07-2022 07:03:01]2211: WAF :: fetched 19 new logs [05-07-2022 07:04:01]4863: WAF :: fetched 22 new logs [05-07-2022 07:05:01]7513: WAF :: fetched 11 new logs [05-07-2022 07:06:01]10133: WAF :: fetched 13 new logs [05-07-2022 07:07:01]12694: WAF :: fetched 14 new logs [05-07-2022 07:08:02]15254: WAF :: fetched 17 new logs [05-07-2022 07:09:01]17947: WAF :: fetched 18 new logs [05-07-2022 07:10:02]20602: WAF :: fetched 15 new logs [05-07-2022 07:11:02]23295: WAF :: fetched 20 new logs [05-07-2022 07:12:01]25903: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657015921 [05-07-2022 07:12:01]25903: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 07:12:03]25903: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 07:12:05]25903: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-0712/20220705-071201-YsQOcfluQsgRB8MloR00PQAAABA [05-07-2022 07:12:05]25903: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 07:12:05]25903: WAF :: fetched 17 new logs [05-07-2022 07:13:02]28479: WAF :: fetched 19 new logs [05-07-2022 07:14:02]31173: WAF :: fetched 19 new logs [05-07-2022 07:15:02]1381: WAF :: fetched 21 new logs [05-07-2022 07:16:02]4017: WAF :: fetched 18 new logs [05-07-2022 07:17:01]6435: WAF :: fetched 11 new logs [05-07-2022 07:18:02]9170: WAF :: fetched 9 new logs [05-07-2022 07:19:01]11842: WAF :: fetched 8 new logs [05-07-2022 07:20:02]14458: WAF :: fetched 13 new logs [05-07-2022 07:21:01]17073: WAF :: fetched 14 new logs [05-07-2022 07:22:03]19717: WAF :: fetched 13 new logs [05-07-2022 07:23:02]22343: WAF :: fetched 1 new logs [05-07-2022 07:24:02]24992: WAF :: fetched 7 new logs [05-07-2022 07:25:02]27560: WAF :: fetched 7 new logs [05-07-2022 07:26:02]30213: WAF :: fetched 7 new logs [05-07-2022 07:27:02]361: WAF :: fetched 4 new logs [05-07-2022 07:28:01]2867: WAF :: fetched 3 new logs [05-07-2022 07:29:01]5621: WAF :: fetched 2 new logs [05-07-2022 07:30:02]8234: WAF :: fetched 9 new logs [05-07-2022 07:31:03]10830: WAF :: fetched 4 new logs [05-07-2022 07:32:01]13431: WAF :: fetched 5 new logs [05-07-2022 07:33:01]16026: WAF :: fetched 4 new logs [05-07-2022 07:34:01]18773: WAF :: fetched 2 new logs [05-07-2022 07:35:01]21384: WAF :: fetched 3 new logs [05-07-2022 07:36:01]24012: WAF :: fetched 8 new logs [05-07-2022 07:37:01]26605: WAF :: fetched 3 new logs [05-07-2022 07:38:01]29181: WAF :: fetched 2 new logs [05-07-2022 07:39:01]31847: WAF :: fetched 2 new logs [05-07-2022 07:40:01]2054: WAF :: fetched 2 new logs [05-07-2022 07:41:02]4781: WAF :: fetched 3 new logs [05-07-2022 07:41:02]4781: Checking for user cron vulnerabilities [05-07-2022 07:42:01]7342: WAF :: fetched 6 new logs [05-07-2022 07:43:01]9944: WAF :: fetched 2 new logs [05-07-2022 07:44:01]12576: Checking ditributed CMS bruteforce attacks [05-07-2022 07:45:02]: Checking for definition updates [05-07-2022 07:45:02]15171: WAF :: fetched 3 new logs [05-07-2022 07:47:01]20459: WAF :: fetched 34 new logs [05-07-2022 07:49:02]25730: WAF :: fetched 3 new logs [05-07-2022 07:50:02]28324: WAF :: fetched 2 new logs [05-07-2022 07:51:01]30964: WAF :: fetched 1 new logs [05-07-2022 07:53:02]3742: WAF :: fetched 1 new logs [05-07-2022 07:54:02]6479: WAF :: fetched 1 new logs [05-07-2022 07:55:01]9045: WAF :: fetched 13 new logs [05-07-2022 07:56:01]11668: WAF :: fetched 22 new logs [05-07-2022 07:57:02]14276: WAF :: fetched 14 new logs [05-07-2022 07:58:01]16817: WAF :: fetched 12 new logs [05-07-2022 07:59:02]19548: WAF :: fetched 4 new logs [05-07-2022 08:00:02]21863: WAF :: fetched 3 new logs [05-07-2022 08:01:01]24684: WAF :: fetched 3 new logs [05-07-2022 08:02:01]27617: WAF :: fetched 1 new logs [05-07-2022 08:03:01]30204: WAF :: fetched 6 new logs [05-07-2022 08:04:01]470: WAF :: fetched 1 new logs [05-07-2022 08:05:02]3137: WAF :: fetched 2 new logs [05-07-2022 08:06:01]5752: WAF :: fetched 1 new logs [05-07-2022 08:09:02]13712: WAF :: fetched 1 new logs [05-07-2022 08:11:02]19107: WAF :: fetched 4 new logs [05-07-2022 08:12:01]21751: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657019521 [05-07-2022 08:12:01]21751: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 08:12:03]21751: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 08:12:05]21751: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-0812/20220705-081201-YsQcgZkK-LpaBdgGvOz1oAAAAB4 [05-07-2022 08:12:05]21751: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 08:12:05]21751: WAF :: fetched 5 new logs [05-07-2022 08:13:01]24429: WAF :: fetched 2 new logs [05-07-2022 08:14:01]27143: WAF :: fetched 1 new logs [05-07-2022 08:15:01]29700: WAF :: fetched 2 new logs [05-07-2022 08:16:02]32408: WAF :: fetched 3 new logs [05-07-2022 08:17:01]2626: WAF :: fetched 5 new logs [05-07-2022 08:18:02]5255: WAF :: fetched 2 new logs [05-07-2022 08:19:01]7944: WAF :: fetched 2 new logs [05-07-2022 08:20:01]10585: WAF :: fetched 2 new logs [05-07-2022 08:21:01]13304: WAF :: fetched 2 new logs [05-07-2022 08:22:01]15888: WAF :: fetched 1 new logs [05-07-2022 08:23:01]18600: WAF :: fetched 2 new logs [05-07-2022 08:25:01]23997: WAF :: fetched 2 new logs [05-07-2022 08:26:01]26665: WAF :: fetched 4 new logs [05-07-2022 08:27:02]29235: WAF :: fetched 11 new logs [05-07-2022 08:28:01]31839: WAF :: fetched 13 new logs [05-07-2022 08:29:01]2159: WAF :: fetched 6 new logs [05-07-2022 08:30:02]4828: WAF :: fetched 6 new logs [05-07-2022 08:31:01]7474: WAF :: fetched 1 new logs [05-07-2022 08:32:01]10117: WAF :: fetched 1 new logs [05-07-2022 08:33:01]12731: WAF :: fetched 2 new logs [05-07-2022 08:34:02]15439: WAF :: fetched 1 new logs [05-07-2022 08:36:02]20835: WAF :: fetched 3 new logs [05-07-2022 08:37:01]23205: WAF :: fetched 1 new logs [05-07-2022 08:39:02]28870: WAF :: fetched 2 new logs [05-07-2022 08:40:01]31516: WAF :: fetched 1 new logs [05-07-2022 08:41:01]1795: WAF :: fetched 2 new logs [05-07-2022 08:41:01]1795: Checking for user cron vulnerabilities [05-07-2022 08:42:01]4485: WAF :: fetched 9 new logs [05-07-2022 08:43:01]7055: WAF :: fetched 2 new logs [05-07-2022 08:44:01]9797: Checking ditributed CMS bruteforce attacks [05-07-2022 08:44:02]9797: WAF :: fetched 2 new logs [05-07-2022 08:46:02]15118: WAF :: fetched 1 new logs [05-07-2022 08:47:02]17705: WAF :: fetched 4 new logs [05-07-2022 08:48:02]20409: WAF :: fetched 2 new logs [05-07-2022 08:49:02]23159: WAF :: fetched 3 new logs [05-07-2022 08:50:01]25724: WAF :: fetched 6 new logs [05-07-2022 08:51:02]28639: WAF :: fetched 7 new logs [05-07-2022 08:52:01]31352: WAF :: fetched 1 new logs [05-07-2022 08:56:01]9682: WAF :: fetched 2 new logs [05-07-2022 08:57:01]12413: WAF :: fetched 3 new logs [05-07-2022 08:58:02]15121: WAF :: fetched 2 new logs [05-07-2022 08:59:01]17868: WAF :: fetched 1 new logs [05-07-2022 09:00:02]20369: WAF :: fetched 1 new logs [05-07-2022 09:01:02]23543: WAF :: fetched 1 new logs [05-07-2022 09:03:01]28865: WAF :: fetched 3 new logs [05-07-2022 09:04:01]31565: WAF :: fetched 3 new logs [05-07-2022 09:05:02]1852: WAF :: fetched 1 new logs [05-07-2022 09:06:01]4566: WAF :: fetched 1 new logs [05-07-2022 09:07:02]7199: WAF :: fetched 3 new logs [05-07-2022 09:08:01]9814: WAF :: fetched 4 new logs [05-07-2022 09:09:02]12562: WAF :: fetched 6 new logs [05-07-2022 09:10:01]15195: WAF :: fetched 6 new logs [05-07-2022 09:11:01]17936: WAF :: fetched 5 new logs [05-07-2022 09:12:02]20706: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657023122 [05-07-2022 09:12:02]20706: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 09:12:04]20706: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 09:12:04]20706: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-0912/20220705-091202-YsQqkq3yIhrnbvWiAwWVmwAAAAs [05-07-2022 09:12:04]20706: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 09:12:04]20706: WAF :: fetched 7 new logs [05-07-2022 09:13:01]23376: WAF :: fetched 12 new logs [05-07-2022 09:14:03]26200: WAF :: fetched 8 new logs [05-07-2022 09:15:02]28954: WAF :: fetched 5 new logs [05-07-2022 09:16:02]31659: WAF :: fetched 8 new logs [05-07-2022 09:17:01]1658: WAF :: fetched 8 new logs [05-07-2022 09:18:01]4685: WAF :: fetched 4 new logs [05-07-2022 09:19:01]7437: WAF :: fetched 1 new logs [05-07-2022 09:20:02]10164: WAF :: fetched 1 new logs [05-07-2022 09:21:01]12945: WAF :: fetched 1 new logs [05-07-2022 09:24:01]21033: WAF :: fetched 1 new logs [05-07-2022 09:25:01]23660: WAF :: fetched 3 new logs [05-07-2022 09:27:01]29107: httpd.conf changed. Refreshing watchlist. [05-07-2022 09:28:01]31783: httpd.conf changed. Refreshing watchlist. [05-07-2022 09:29:01]2192: WAF :: fetched 3 new logs [05-07-2022 09:30:01]4827: WAF :: fetched 1 new logs [05-07-2022 09:31:02]7603: WAF :: fetched 1 new logs [05-07-2022 09:32:03]10306: WAF :: fetched 16 new logs [05-07-2022 09:33:02]13026: httpd.conf changed. Refreshing watchlist. [05-07-2022 09:37:01]23768: WAF :: fetched 2 new logs [05-07-2022 09:39:01]29477: WAF :: fetched 2 new logs [05-07-2022 09:41:01]2612: Checking for user cron vulnerabilities [05-07-2022 09:42:01]5257: WAF :: fetched 1 new logs [05-07-2022 09:43:01]7900: WAF :: fetched 1 new logs [05-07-2022 09:44:02]10674: Checking ditributed CMS bruteforce attacks [05-07-2022 09:45:01]13332: WAF :: fetched 4 new logs [05-07-2022 09:47:02]18895: WAF :: fetched 3 new logs [05-07-2022 09:48:02]21579: WAF :: fetched 2 new logs [05-07-2022 09:49:02]24402: WAF :: fetched 4 new logs [05-07-2022 09:50:02]27132: WAF :: fetched 1 new logs [05-07-2022 09:51:01]29854: WAF :: fetched 1 new logs [05-07-2022 09:53:01]2903: WAF :: fetched 1 new logs [05-07-2022 09:54:02]5699: WAF :: fetched 1 new logs [05-07-2022 09:55:01]8355: WAF :: fetched 2 new logs [05-07-2022 09:57:01]13730: WAF :: fetched 12 new logs [05-07-2022 09:58:01]16386: WAF :: fetched 23 new logs [05-07-2022 09:59:01]19191: WAF :: fetched 6 new logs [05-07-2022 10:00:02]21680: WAF :: fetched 28 new logs [05-07-2022 10:01:01]24820: WAF :: fetched 31 new logs [05-07-2022 10:02:01]27569: WAF :: fetched 17 new logs [05-07-2022 10:03:02]30267: WAF :: fetched 26 new logs [05-07-2022 10:04:01]564: WAF :: fetched 27 new logs [05-07-2022 10:05:01]3283: WAF :: fetched 25 new logs [05-07-2022 10:06:02]6034: WAF :: fetched 17 new logs [05-07-2022 10:07:01]8680: WAF :: fetched 8 new logs [05-07-2022 10:08:02]11367: WAF :: fetched 12 new logs [05-07-2022 10:09:01]14135: WAF :: fetched 18 new logs [05-07-2022 10:10:01]16820: WAF :: fetched 15 new logs [05-07-2022 10:11:02]19704: WAF :: fetched 14 new logs [05-07-2022 10:12:01]22302: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657026721 [05-07-2022 10:12:01]22302: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 10:12:03]22302: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 10:12:05]22302: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-1012/20220705-101201-YsQ4oVQYyJfgyHzrKCXCZgAAAB0 [05-07-2022 10:12:05]22302: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 10:12:05]22302: WAF :: fetched 25 new logs [05-07-2022 10:13:02]25009: WAF :: fetched 6 new logs [05-07-2022 10:14:01]27780: WAF :: fetched 15 new logs [05-07-2022 10:15:01]30419: WAF :: fetched 15 new logs [05-07-2022 10:16:02]708: WAF :: fetched 15 new logs [05-07-2022 10:17:01]3378: WAF :: fetched 17 new logs [05-07-2022 10:18:02]6058: WAF :: fetched 17 new logs [05-07-2022 10:19:01]8814: WAF :: fetched 25 new logs [05-07-2022 10:20:01]11522: WAF :: fetched 6 new logs [05-07-2022 10:22:01]17058: WAF :: fetched 2 new logs [05-07-2022 10:23:01]19786: WAF :: fetched 1 new logs [05-07-2022 10:24:02]22560: WAF :: fetched 2 new logs [05-07-2022 10:25:01]25277: WAF :: fetched 1 new logs [05-07-2022 10:26:02]28021: WAF :: fetched 5 new logs [05-07-2022 10:27:01]30686: WAF :: fetched 7 new logs [05-07-2022 10:30:01]6483: WAF :: fetched 12 new logs [05-07-2022 10:31:02]9424: WAF :: fetched 5 new logs [05-07-2022 10:32:01]12238: WAF :: fetched 6 new logs [05-07-2022 10:33:02]14989: WAF :: fetched 4 new logs [05-07-2022 10:34:01]17852: WAF :: fetched 2 new logs [05-07-2022 10:35:02]20765: WAF :: fetched 1 new logs [05-07-2022 10:36:02]23591: WAF :: fetched 5 new logs [05-07-2022 10:37:01]26257: WAF :: fetched 2 new logs [05-07-2022 10:39:02]31699: WAF :: fetched 4 new logs [05-07-2022 10:41:02]4672: Checking for user cron vulnerabilities [05-07-2022 10:44:01]13060: Checking ditributed CMS bruteforce attacks [05-07-2022 10:44:04]13060: WAF :: fetched 1 new logs [05-07-2022 10:45:01]15793: WAF :: fetched 1 new logs [05-07-2022 10:46:02]18826: WAF :: fetched 3 new logs [05-07-2022 10:47:01]21550: WAF :: fetched 4 new logs [05-07-2022 10:48:01]24476: WAF :: fetched 4 new logs [05-07-2022 10:49:02]27457: WAF :: fetched 3 new logs [05-07-2022 10:50:01]30198: WAF :: fetched 2 new logs [05-07-2022 10:51:01]628: WAF :: fetched 3 new logs [05-07-2022 10:52:02]3378: WAF :: fetched 2 new logs [05-07-2022 10:53:01]6185: WAF :: fetched 4 new logs [05-07-2022 10:54:01]9036: WAF :: fetched 1 new logs [05-07-2022 10:55:02]11820: WAF :: fetched 1 new logs [05-07-2022 10:56:02]14575: WAF :: fetched 1 new logs [05-07-2022 10:57:01]17275: WAF :: fetched 1 new logs [05-07-2022 10:58:02]20240: WAF :: fetched 1 new logs [05-07-2022 10:59:01]23203: WAF :: fetched 2 new logs [05-07-2022 11:00:01]25758: WAF :: fetched 5 new logs [05-07-2022 11:01:02]29042: WAF :: fetched 4 new logs [05-07-2022 11:02:02]31951: WAF :: fetched 11 new logs [05-07-2022 11:03:01]2357: WAF :: fetched 19 new logs [05-07-2022 11:04:02]5182: WAF :: fetched 16 new logs [05-07-2022 11:05:01]8004: WAF :: fetched 11 new logs [05-07-2022 11:06:01]10839: WAF :: fetched 9 new logs [05-07-2022 11:07:02]13632: WAF :: fetched 2 new logs [05-07-2022 11:07:59]13745: Performed RBL check for 23.111.136.34. [05-07-2022 11:08:01]16355: WAF :: fetched 1 new logs [05-07-2022 11:09:01]19268: WAF :: fetched 1 new logs [05-07-2022 11:10:01]22142: WAF :: fetched 1 new logs [05-07-2022 11:11:02]25006: WAF :: fetched 2 new logs [05-07-2022 11:12:02]27761: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657030322 [05-07-2022 11:12:02]27761: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 11:12:04]27761: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 11:12:07]27761: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-1112/20220705-111202-YsRGspAJEwkGAh_tPI_1tQAAAEc [05-07-2022 11:12:07]27761: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 11:12:07]27761: WAF :: fetched 10 new logs [05-07-2022 11:13:02]30502: WAF :: fetched 7 new logs [05-07-2022 11:14:01]687: WAF :: fetched 6 new logs [05-07-2022 11:15:02]3767: WAF :: fetched 5 new logs [05-07-2022 11:16:01]6404: WAF :: fetched 8 new logs [05-07-2022 11:17:01]9226: WAF :: fetched 7 new logs [05-07-2022 11:18:01]11921: WAF :: fetched 9 new logs [05-07-2022 11:19:02]14661: WAF :: fetched 5 new logs [05-07-2022 11:20:01]17535: WAF :: fetched 3 new logs [05-07-2022 11:21:01]20545: WAF :: fetched 4 new logs [05-07-2022 11:21:01]20549: httpd.conf changed. Refreshing watchlist. [05-07-2022 11:22:02]23309: WAF :: fetched 7 new logs [05-07-2022 11:23:01]26046: WAF :: fetched 7 new logs [05-07-2022 11:24:01]28895: WAF :: fetched 31 new logs [05-07-2022 11:26:02]2460: WAF :: fetched 5 new logs [05-07-2022 11:27:01]5214: WAF :: fetched 8 new logs [05-07-2022 11:28:01]8092: WAF :: fetched 4 new logs [05-07-2022 11:29:01]10914: WAF :: fetched 9 new logs [05-07-2022 11:30:01]13751: WAF :: fetched 4 new logs [05-07-2022 11:31:01]16642: WAF :: fetched 3 new logs [05-07-2022 11:32:02]19495: WAF :: fetched 4 new logs [05-07-2022 11:33:01]22302: WAF :: fetched 3 new logs [05-07-2022 11:34:02]25092: WAF :: fetched 3 new logs [05-07-2022 11:35:01]27930: WAF :: fetched 3 new logs [05-07-2022 11:36:01]30827: WAF :: fetched 1 new logs [05-07-2022 11:37:02]1173: WAF :: fetched 2 new logs [05-07-2022 11:39:02]6699: WAF :: fetched 1 new logs [05-07-2022 11:40:01]9527: WAF :: fetched 4 new logs [05-07-2022 11:41:01]12353: WAF :: fetched 1 new logs [05-07-2022 11:41:01]12353: Checking for user cron vulnerabilities [05-07-2022 11:42:02]15120: WAF :: fetched 5 new logs [05-07-2022 11:43:04]17924: WAF :: fetched 1 new logs [05-07-2022 11:44:01]20817: Checking ditributed CMS bruteforce attacks [05-07-2022 11:44:01]20817: WAF :: fetched 2 new logs [05-07-2022 11:45:01]26198: WAF :: fetched 2 new logs [05-07-2022 11:46:01]8481: WAF :: fetched 2 new logs [05-07-2022 11:48:02]20491: WAF :: fetched 2 new logs [05-07-2022 11:49:01]25908: WAF :: fetched 1 new logs [05-07-2022 11:51:02]2313: WAF :: fetched 4 new logs [05-07-2022 11:52:02]5558: WAF :: fetched 1 new logs [05-07-2022 11:53:01]8921: WAF :: fetched 1 new logs [05-07-2022 11:55:01]15693: WAF :: fetched 1 new logs [05-07-2022 11:56:01]19212: WAF :: fetched 1 new logs [05-07-2022 12:00:02]521: WAF :: fetched 2 new logs [05-07-2022 12:02:02]8658: WAF :: fetched 2 new logs [05-07-2022 12:09:01]641: WAF :: fetched 4 new logs [05-07-2022 12:10:02]4176: WAF :: fetched 4 new logs [05-07-2022 12:11:01]7515: WAF :: fetched 2 new logs [05-07-2022 12:12:02]10884: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657033922 [05-07-2022 12:12:02]10884: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 12:12:04]10884: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 12:12:04]10884: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-1212/20220705-121202-YsRUwsZqYMqTK6O7J3Q1EwAAAAY [05-07-2022 12:12:04]10884: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 12:12:04]10884: WAF :: fetched 3 new logs [05-07-2022 12:13:01]14266: WAF :: fetched 2 new logs [05-07-2022 12:14:02]17583: WAF :: fetched 2 new logs [05-07-2022 12:15:02]21074: WAF :: fetched 1 new logs [05-07-2022 12:16:01]24623: WAF :: fetched 2 new logs [05-07-2022 12:17:02]27989: WAF :: fetched 1 new logs [05-07-2022 12:18:01]31337: WAF :: fetched 1 new logs [05-07-2022 12:20:03]5845: WAF :: fetched 3 new logs [05-07-2022 12:21:01]9110: WAF :: fetched 4 new logs [05-07-2022 12:22:01]12438: WAF :: fetched 1 new logs [05-07-2022 12:23:01]15756: WAF :: fetched 3 new logs [05-07-2022 12:25:02]22658: WAF :: fetched 1 new logs [05-07-2022 12:27:02]29566: WAF :: fetched 1 new logs [05-07-2022 12:28:01]998: WAF :: fetched 2 new logs [05-07-2022 12:29:01]4275: WAF :: fetched 1 new logs [05-07-2022 12:32:01]14730: WAF :: fetched 1 new logs [05-07-2022 12:34:01]21512: WAF :: fetched 1 new logs [05-07-2022 12:35:01]25127: WAF :: fetched 2 new logs [05-07-2022 12:36:01]28634: WAF :: fetched 1 new logs [05-07-2022 12:37:02]31881: WAF :: fetched 1 new logs [05-07-2022 12:39:01]6758: WAF :: fetched 3 new logs [05-07-2022 12:41:01]13766: Checking for user cron vulnerabilities [05-07-2022 12:44:02]24062: Checking ditributed CMS bruteforce attacks [05-07-2022 12:44:05]24062: WAF :: fetched 4 new logs [05-07-2022 12:45:01]: Checking for software updates [05-07-2022 12:46:01]30979: WAF :: fetched 2 new logs [05-07-2022 12:47:02]1910: WAF :: fetched 1 new logs [05-07-2022 12:50:01]12584: WAF :: fetched 1 new logs [05-07-2022 12:51:01]16029: WAF :: fetched 1 new logs [05-07-2022 12:53:01]22717: WAF :: fetched 2 new logs [05-07-2022 12:54:02]26183: WAF :: fetched 2 new logs [05-07-2022 12:55:01]29577: WAF :: fetched 2 new logs [05-07-2022 12:56:02]558: WAF :: fetched 2 new logs [05-07-2022 13:07:01]6387: WAF :: fetched 1 new logs [05-07-2022 13:09:01]13534: WAF :: fetched 4 new logs [05-07-2022 13:10:02]17021: WAF :: fetched 7 new logs [05-07-2022 13:12:03]23915: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657037523 [05-07-2022 13:12:03]23915: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 13:12:05]23915: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 13:12:06]23915: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-1312/20220705-131203-YsRi04HuRbMyGA99hRshUgAAAAQ [05-07-2022 13:12:06]23915: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-07-2022 13:12:07]23915: WAF :: fetched 1 new logs [05-07-2022 13:13:02]27226: WAF :: fetched 1 new logs [05-07-2022 13:15:02]1479: WAF :: fetched 1 new logs [05-07-2022 13:16:02]4906: WAF :: fetched 13 new logs [05-07-2022 13:17:02]8238: WAF :: fetched 3 new logs [05-07-2022 13:19:02]15535: WAF :: fetched 2 new logs [05-07-2022 13:20:02]18619: WAF :: fetched 2 new logs [05-07-2022 13:22:01]25461: WAF :: fetched 1 new logs [05-07-2022 13:24:02]32092: WAF :: fetched 11 new logs [05-07-2022 13:26:02]6526: WAF :: fetched 2 new logs [05-07-2022 13:27:01]9895: WAF :: fetched 11 new logs [05-07-2022 13:28:01]13309: WAF :: fetched 7 new logs [05-07-2022 13:29:01]17139: WAF :: fetched 1 new logs [05-07-2022 13:32:01]27448: WAF :: fetched 4 new logs [05-07-2022 13:36:01]8819: WAF :: fetched 1 new logs [05-07-2022 13:41:01]26495: WAF :: fetched 1 new logs [05-07-2022 13:41:01]26495: Checking for user cron vulnerabilities [05-07-2022 13:44:01]4068: Checking ditributed CMS bruteforce attacks [05-07-2022 13:45:01]: Checking for definition updates [05-07-2022 13:45:02]7549: WAF :: fetched 1 new logs [05-07-2022 13:48:02]17588: WAF :: fetched 1 new logs [05-07-2022 13:49:02]21530: WAF :: fetched 1 new logs [05-07-2022 13:50:01]25085: WAF :: fetched 1 new logs [05-07-2022 13:56:01]12736: WAF :: fetched 3 new logs [05-07-2022 13:58:02]19510: WAF :: fetched 16 new logs [05-07-2022 13:59:02]23158: WAF :: fetched 18 new logs [05-07-2022 14:00:01]26574: WAF :: fetched 1 new logs [05-07-2022 14:03:02]4658: WAF :: fetched 2 new logs [05-07-2022 14:04:01]8016: WAF :: fetched 2 new logs [05-07-2022 14:05:02]11512: WAF :: fetched 14 new logs [05-07-2022 14:06:02]14946: WAF :: fetched 3 new logs [05-07-2022 14:07:01]18306: WAF :: fetched 2 new logs [05-07-2022 14:08:02]21724: WAF :: fetched 3 new logs [05-07-2022 14:09:01]25279: WAF :: fetched 2 new logs [05-07-2022 14:10:01]29164: WAF :: fetched 3 new logs [05-07-2022 14:11:01]32561: WAF :: fetched 4 new logs [05-07-2022 14:12:02]3494: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657041122 [05-07-2022 14:12:02]3494: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 14:12:04]3494: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 14:12:04]3494: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-1412/20220705-141202-YsRw4qounNuIjvRqZT5PyAAAAAE [05-07-2022 14:12:04]3494: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 14:12:04]3494: WAF :: fetched 111 new logs [05-07-2022 14:13:01]6826: WAF :: fetched 1 new logs [05-07-2022 14:15:02]13712: WAF :: fetched 1 new logs [05-07-2022 14:16:01]17057: WAF :: fetched 1 new logs [05-07-2022 14:17:01]20384: WAF :: fetched 4 new logs [05-07-2022 14:18:02]23770: WAF :: fetched 13 new logs [05-07-2022 14:20:02]30997: WAF :: fetched 2 new logs [05-07-2022 14:21:02]1473: WAF :: fetched 1 new logs [05-07-2022 14:24:01]11258: WAF :: fetched 1 new logs [05-07-2022 14:25:01]14652: WAF :: fetched 2 new logs [05-07-2022 14:27:01]21414: WAF :: fetched 2 new logs [05-07-2022 14:29:01]28137: WAF :: fetched 1 new logs [05-07-2022 14:30:02]31978: WAF :: fetched 2 new logs [05-07-2022 14:31:03]2992: WAF :: fetched 1 new logs [05-07-2022 14:32:01]6274: WAF :: fetched 1 new logs [05-07-2022 14:35:01]16227: WAF :: fetched 2 new logs [05-07-2022 14:37:01]23091: WAF :: fetched 1 new logs [05-07-2022 14:40:03]1140: WAF :: fetched 1 new logs [05-07-2022 14:41:01]4532: WAF :: fetched 1 new logs [05-07-2022 14:41:01]4532: Checking for user cron vulnerabilities [05-07-2022 14:42:02]7808: WAF :: fetched 1 new logs [05-07-2022 14:44:01]14345: Checking ditributed CMS bruteforce attacks [05-07-2022 14:44:01]14345: WAF :: fetched 3 new logs [05-07-2022 14:45:01]17593: WAF :: fetched 7 new logs [05-07-2022 14:46:01]21220: WAF :: fetched 1 new logs [05-07-2022 14:47:02]24595: WAF :: fetched 3 new logs [05-07-2022 14:48:01]27893: WAF :: fetched 5 new logs [05-07-2022 14:49:01]31158: WAF :: fetched 6 new logs [05-07-2022 14:50:02]2685: WAF :: fetched 5 new logs [05-07-2022 14:51:01]6093: WAF :: fetched 1 new logs [05-07-2022 14:53:02]12666: WAF :: fetched 1 new logs [05-07-2022 14:53:02]12665: Updated license status via CDN [05-07-2022 14:55:01]19190: WAF :: fetched 5 new logs [05-07-2022 14:56:01]22692: WAF :: fetched 4 new logs [05-07-2022 14:57:01]26145: WAF :: fetched 4 new logs [05-07-2022 14:58:04]29457: WAF :: fetched 11 new logs [05-07-2022 14:59:01]32724: WAF :: fetched 2 new logs [05-07-2022 15:01:02]7942: WAF :: fetched 2 new logs [05-07-2022 15:01:02]7941: Reseting cPGuard inotify settings [05-07-2022 15:03:01]14710: WAF :: fetched 1 new logs [05-07-2022 15:04:02]18138: WAF :: fetched 3 new logs [05-07-2022 15:05:01]21544: WAF :: fetched 1 new logs [05-07-2022 15:07:01]28566: WAF :: fetched 17 new logs [05-07-2022 15:12:02]13477: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657044722 [05-07-2022 15:12:02]13477: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 15:12:04]13477: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 15:12:04]13477: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-1512/20220705-151202-YsR-8pQ80w5TF_M3C5eR9wAAAAE [05-07-2022 15:12:04]13477: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 15:12:04]13477: WAF :: fetched 3 new logs [05-07-2022 15:17:02]30692: WAF :: fetched 8 new logs [05-07-2022 15:21:01]12708: WAF :: fetched 4 new logs [05-07-2022 15:25:01]26099: WAF :: fetched 1 new logs [05-07-2022 15:27:01]406: WAF :: fetched 1 new logs [05-07-2022 15:29:02]7197: WAF :: fetched 2 new logs [05-07-2022 15:33:01]20967: WAF :: fetched 2 new logs [05-07-2022 15:34:02]24425: WAF :: fetched 4 new logs [05-07-2022 15:35:01]27716: WAF :: fetched 4 new logs [05-07-2022 15:38:01]5328: WAF :: fetched 1 new logs [05-07-2022 15:39:02]8674: WAF :: fetched 7 new logs [05-07-2022 15:40:01]12054: WAF :: fetched 1 new logs [05-07-2022 15:41:01]15917: Checking for user cron vulnerabilities [05-07-2022 15:42:02]19356: WAF :: fetched 1 new logs [05-07-2022 15:44:01]26138: Checking ditributed CMS bruteforce attacks [05-07-2022 15:44:02]26138: WAF :: fetched 1 new logs [05-07-2022 15:45:02]29499: WAF :: fetched 49 new logs [05-07-2022 15:46:01]427: WAF :: fetched 52 new logs [05-07-2022 15:47:01]3706: WAF :: fetched 66 new logs [05-07-2022 15:48:01]6958: WAF :: fetched 72 new logs [05-07-2022 15:49:02]10200: WAF :: fetched 85 new logs [05-07-2022 15:50:01]13519: WAF :: fetched 78 new logs [05-07-2022 15:51:02]17474: WAF :: fetched 74 new logs [05-07-2022 15:52:01]20936: WAF :: fetched 75 new logs [05-07-2022 15:53:01]24346: WAF :: fetched 69 new logs [05-07-2022 15:54:02]27651: WAF :: fetched 57 new logs [05-07-2022 15:55:03]30994: WAF :: fetched 47 new logs [05-07-2022 15:56:01]2059: WAF :: fetched 67 new logs [05-07-2022 15:57:02]5331: WAF :: fetched 33 new logs [05-07-2022 15:58:01]8660: WAF :: fetched 10 new logs [05-07-2022 15:59:02]12096: WAF :: fetched 4 new logs [05-07-2022 16:01:01]19264: WAF :: fetched 1 new logs [05-07-2022 16:02:02]23215: WAF :: fetched 1 new logs [05-07-2022 16:09:01]14372: WAF :: fetched 3 new logs [05-07-2022 16:10:02]17698: WAF :: fetched 2 new logs [05-07-2022 16:12:01]25113: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657048321 [05-07-2022 16:12:01]25113: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 16:12:03]25113: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 16:12:04]25113: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-1612/20220705-161201-YsSNAaNhE7zkkHbN6xnAJQAAAAA [05-07-2022 16:12:04]25113: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 16:12:04]25113: WAF :: fetched 3 new logs [05-07-2022 16:13:02]28421: WAF :: fetched 1 new logs [05-07-2022 16:14:01]31677: WAF :: fetched 9 new logs [05-07-2022 16:18:02]12525: WAF :: fetched 2 new logs [05-07-2022 16:20:01]19160: WAF :: fetched 2 new logs [05-07-2022 16:22:01]26593: WAF :: fetched 2 new logs [05-07-2022 16:24:02]856: WAF :: fetched 11 new logs [05-07-2022 16:29:01]17523: WAF :: fetched 9 new logs [05-07-2022 16:30:02]20896: WAF :: fetched 7 new logs [05-07-2022 16:31:02]24421: WAF :: fetched 1 new logs [05-07-2022 16:32:01]28249: WAF :: fetched 6 new logs [05-07-2022 16:33:02]31617: WAF :: fetched 7 new logs [05-07-2022 16:34:01]2518: WAF :: fetched 1 new logs [05-07-2022 16:36:02]9349: WAF :: fetched 2 new logs [05-07-2022 16:39:01]18830: WAF :: fetched 1 new logs [05-07-2022 16:40:01]22142: WAF :: fetched 1 new logs [05-07-2022 16:41:01]25735: WAF :: fetched 5 new logs [05-07-2022 16:41:01]25735: Checking for user cron vulnerabilities [05-07-2022 16:42:01]29040: WAF :: fetched 5 new logs [05-07-2022 16:44:01]3678: Checking ditributed CMS bruteforce attacks [05-07-2022 16:49:02]20428: WAF :: fetched 2 new logs [05-07-2022 16:50:01]23860: WAF :: fetched 5 new logs [05-07-2022 16:51:01]27390: WAF :: fetched 5 new logs [05-07-2022 16:52:01]30613: WAF :: fetched 1 new logs [05-07-2022 16:55:01]8579: WAF :: fetched 1 new logs [05-07-2022 16:57:01]15443: WAF :: fetched 1 new logs [05-07-2022 16:59:01]22296: WAF :: fetched 1 new logs [05-07-2022 16:59:01]22295: httpd.conf changed. Refreshing watchlist. [05-07-2022 17:00:01]25408: WAF :: fetched 1 new logs [05-07-2022 17:01:02]29383: WAF :: fetched 3 new logs [05-07-2022 17:02:03]32703: WAF :: fetched 2 new logs [05-07-2022 17:04:01]7466: WAF :: fetched 1 new logs [05-07-2022 17:04:01]7465: httpd.conf changed. Refreshing watchlist. [05-07-2022 17:05:02]10778: WAF :: fetched 3 new logs [05-07-2022 17:06:01]14245: WAF :: fetched 10 new logs [05-07-2022 17:08:02]20974: WAF :: fetched 5 new logs [05-07-2022 17:09:01]24402: WAF :: fetched 4 new logs [05-07-2022 17:10:01]27805: WAF :: fetched 6 new logs [05-07-2022 17:11:02]31337: WAF :: fetched 3 new logs [05-07-2022 17:12:01]2214: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657051921 [05-07-2022 17:12:01]2214: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 17:12:03]2214: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 17:12:05]2214: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-1712/20220705-171201-YsSbETqHnuuLKkGoBW1cMQAAAA4 [05-07-2022 17:12:05]2214: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 17:12:05]2214: WAF :: fetched 1 new logs [05-07-2022 17:13:01]6075: WAF :: fetched 1 new logs [05-07-2022 17:17:01]19468: WAF :: fetched 5 new logs [05-07-2022 17:18:01]22729: WAF :: fetched 2 new logs [05-07-2022 17:22:02]3960: WAF :: fetched 2 new logs [05-07-2022 17:24:01]11025: WAF :: fetched 1 new logs [05-07-2022 17:27:01]21139: WAF :: fetched 2 new logs [05-07-2022 17:28:01]24523: WAF :: fetched 1 new logs [05-07-2022 17:31:01]2128: WAF :: fetched 1 new logs [05-07-2022 17:34:01]12484: WAF :: fetched 2 new logs [05-07-2022 17:35:01]15879: WAF :: fetched 1 new logs [05-07-2022 17:36:02]19501: WAF :: fetched 8 new logs [05-07-2022 17:41:02]3416: Checking for user cron vulnerabilities [05-07-2022 17:42:01]6704: WAF :: fetched 1 new logs [05-07-2022 17:43:01]9976: WAF :: fetched 1 new logs [05-07-2022 17:44:01]13719: Checking ditributed CMS bruteforce attacks [05-07-2022 17:44:04]13719: WAF :: fetched 1 new logs [05-07-2022 17:45:01]17069: WAF :: fetched 1 new logs [05-07-2022 17:48:01]27265: WAF :: fetched 2 new logs [05-07-2022 17:50:02]1403: WAF :: fetched 1 new logs [05-07-2022 17:52:01]8180: WAF :: fetched 1 new logs [05-07-2022 17:57:02]25257: WAF :: fetched 3 new logs [05-07-2022 18:00:02]2458: WAF :: fetched 1 new logs [05-07-2022 18:02:02]9614: WAF :: fetched 1 new logs [05-07-2022 18:05:02]19984: WAF :: fetched 1 new logs [05-07-2022 18:08:02]30168: WAF :: fetched 2 new logs [05-07-2022 18:10:02]4395: WAF :: fetched 1 new logs [05-07-2022 18:12:01]11045: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657055521 [05-07-2022 18:12:01]11045: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 18:12:03]11045: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 18:12:04]11045: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-1812/20220705-181201-YsSpIYrRo0ApEaNqUosdFAAAAAI [05-07-2022 18:12:04]11045: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 18:12:04]11045: WAF :: fetched 1 new logs [05-07-2022 18:13:02]14288: WAF :: fetched 1 new logs [05-07-2022 18:14:01]17480: WAF :: fetched 2 new logs [05-07-2022 18:18:01]31433: WAF :: fetched 1 new logs [05-07-2022 18:19:01]2325: WAF :: fetched 3 new logs [05-07-2022 18:20:02]5649: WAF :: fetched 4 new logs [05-07-2022 18:21:01]8950: WAF :: fetched 10 new logs [05-07-2022 18:23:01]15503: WAF :: fetched 1 new logs [05-07-2022 18:24:01]18818: WAF :: fetched 1 new logs [05-07-2022 18:26:01]25977: WAF :: fetched 1 new logs [05-07-2022 18:27:01]29306: WAF :: fetched 2 new logs [05-07-2022 18:28:02]32607: WAF :: fetched 3 new logs [05-07-2022 18:29:01]3441: WAF :: fetched 1 new logs [05-07-2022 18:35:01]23358: WAF :: fetched 2 new logs [05-07-2022 18:36:02]26792: WAF :: fetched 2 new logs [05-07-2022 18:41:02]10911: Checking for user cron vulnerabilities [05-07-2022 18:42:01]14261: WAF :: fetched 2 new logs [05-07-2022 18:44:02]20820: Checking ditributed CMS bruteforce attacks [05-07-2022 18:45:01]24747: WAF :: fetched 2 new logs [05-07-2022 18:46:02]28199: WAF :: fetched 1 new logs [05-07-2022 18:53:02]18798: WAF :: fetched 3 new logs [05-07-2022 18:56:02]29065: WAF :: fetched 1 new logs [05-07-2022 18:58:02]3177: WAF :: fetched 3 new logs [05-07-2022 19:00:02]9457: WAF :: fetched 2 new logs [05-07-2022 19:01:02]13184: WAF :: fetched 2 new logs [05-07-2022 19:02:01]16495: WAF :: fetched 3 new logs [05-07-2022 19:04:01]23050: WAF :: fetched 4 new logs [05-07-2022 19:08:02]4222: WAF :: fetched 6 new logs [05-07-2022 19:10:01]10706: WAF :: fetched 9 new logs [05-07-2022 19:11:02]14016: WAF :: fetched 1 new logs [05-07-2022 19:12:01]17253: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657059121 [05-07-2022 19:12:01]17253: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 19:12:03]17253: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 19:12:04]17253: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-1912/20220705-191201-YsS3McgJc-2RH5Agi5NmVAAAAAs [05-07-2022 19:12:04]17253: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 19:12:04]17253: WAF :: fetched 1 new logs [05-07-2022 19:14:02]23807: WAF :: fetched 1 new logs [05-07-2022 19:15:01]27051: WAF :: fetched 3 new logs [05-07-2022 19:16:01]30761: WAF :: fetched 9 new logs [05-07-2022 19:17:02]1659: WAF :: fetched 4 new logs [05-07-2022 19:18:01]4877: WAF :: fetched 9 new logs [05-07-2022 19:19:01]8124: WAF :: fetched 3 new logs [05-07-2022 19:20:02]11399: WAF :: fetched 2 new logs [05-07-2022 19:23:01]21232: WAF :: fetched 2 new logs [05-07-2022 19:24:01]24525: WAF :: fetched 1 new logs [05-07-2022 19:25:02]27705: WAF :: fetched 1 new logs [05-07-2022 19:26:01]31445: WAF :: fetched 3 new logs [05-07-2022 19:29:01]8720: WAF :: fetched 1 new logs [05-07-2022 19:32:02]18636: WAF :: fetched 1 new logs [05-07-2022 19:33:01]21840: WAF :: fetched 1 new logs [05-07-2022 19:34:02]24855: WAF :: fetched 2 new logs [05-07-2022 19:35:01]28106: WAF :: fetched 1 new logs [05-07-2022 19:37:02]2754: WAF :: fetched 1 new logs [05-07-2022 19:38:01]5967: WAF :: fetched 1 new logs [05-07-2022 19:40:02]12541: WAF :: fetched 2 new logs [05-07-2022 19:41:01]15835: WAF :: fetched 3 new logs [05-07-2022 19:41:01]15835: Checking for user cron vulnerabilities [05-07-2022 19:42:02]19220: WAF :: fetched 3 new logs [05-07-2022 19:43:01]22398: WAF :: fetched 1 new logs [05-07-2022 19:44:01]25631: Checking ditributed CMS bruteforce attacks [05-07-2022 19:44:01]25631: WAF :: fetched 1 new logs [05-07-2022 19:45:01]: Checking for definition updates [05-07-2022 19:51:02]16463: WAF :: fetched 11 new logs [05-07-2022 19:52:01]19862: WAF :: fetched 12 new logs [05-07-2022 19:55:01]29567: WAF :: fetched 1 new logs [05-07-2022 19:58:01]7528: WAF :: fetched 5 new logs [05-07-2022 20:00:02]13667: WAF :: fetched 3 new logs [05-07-2022 20:01:02]17490: WAF :: fetched 1 new logs [05-07-2022 20:02:02]21030: WAF :: fetched 3 new logs [05-07-2022 20:03:01]24465: WAF :: fetched 10 new logs [05-07-2022 20:07:01]5523: WAF :: fetched 2 new logs [05-07-2022 20:08:01]8745: WAF :: fetched 3 new logs [05-07-2022 20:09:02]11971: WAF :: fetched 6 new logs [05-07-2022 20:11:02]18579: WAF :: fetched 1 new logs [05-07-2022 20:12:02]21907: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657062722 [05-07-2022 20:12:02]21907: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 20:12:04]21907: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 20:12:04]21907: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-2012/20220705-201202-YsTFQiQ_sxtQyhCClYMGKAAAAAA [05-07-2022 20:12:04]21907: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-07-2022 20:12:04]21907: WAF :: fetched 5 new logs [05-07-2022 20:13:01]25216: WAF :: fetched 17 new logs [05-07-2022 20:14:02]28402: WAF :: fetched 3 new logs [05-07-2022 20:15:01]31638: WAF :: fetched 4 new logs [05-07-2022 20:16:01]2453: WAF :: fetched 1 new logs [05-07-2022 20:19:02]12707: WAF :: fetched 2 new logs [05-07-2022 20:21:02]19310: WAF :: fetched 3 new logs [05-07-2022 20:22:01]22633: WAF :: fetched 2 new logs [05-07-2022 20:23:01]25940: WAF :: fetched 4 new logs [05-07-2022 20:24:02]29227: WAF :: fetched 2 new logs [05-07-2022 20:25:02]32462: WAF :: fetched 14 new logs [05-07-2022 20:26:01]3318: WAF :: fetched 2 new logs [05-07-2022 20:27:02]7150: WAF :: fetched 1 new logs [05-07-2022 20:29:03]13541: WAF :: fetched 1 new logs [05-07-2022 20:30:02]16754: WAF :: fetched 1 new logs [05-07-2022 20:31:01]20089: WAF :: fetched 2 new logs [05-07-2022 20:37:02]7395: WAF :: fetched 1 new logs [05-07-2022 20:39:02]13742: WAF :: fetched 1 new logs [05-07-2022 20:40:01]16939: WAF :: fetched 1 new logs [05-07-2022 20:41:02]20241: WAF :: fetched 11 new logs [05-07-2022 20:41:02]20241: Checking for user cron vulnerabilities [05-07-2022 20:42:02]23577: WAF :: fetched 1 new logs [05-07-2022 20:44:01]29965: Checking ditributed CMS bruteforce attacks [05-07-2022 20:44:07]29965: WAF :: fetched 1 new logs [05-07-2022 20:45:01]818: WAF :: fetched 3 new logs [05-07-2022 20:49:03]14415: WAF :: fetched 1 new logs [05-07-2022 20:50:01]17597: WAF :: fetched 1 new logs [05-07-2022 20:51:01]20945: WAF :: fetched 3 new logs [05-07-2022 20:53:01]27505: WAF :: fetched 1 new logs [05-07-2022 20:54:02]30684: WAF :: fetched 1 new logs [05-07-2022 20:56:01]4690: WAF :: fetched 2 new logs [05-07-2022 20:57:02]7999: WAF :: fetched 16 new logs [05-07-2022 20:58:03]11770: WAF :: fetched 3 new logs [05-07-2022 20:59:02]14940: WAF :: fetched 1 new logs [05-07-2022 21:00:01]17916: WAF :: fetched 1 new logs [05-07-2022 21:01:02]21683: WAF :: fetched 1 new logs [05-07-2022 21:02:02]25097: WAF :: fetched 12 new logs [05-07-2022 21:06:02]5628: WAF :: fetched 2 new logs [05-07-2022 21:07:02]8912: WAF :: fetched 35 new logs [05-07-2022 21:08:01]12723: WAF :: fetched 2 new logs [05-07-2022 21:09:02]16050: WAF :: fetched 1 new logs [05-07-2022 21:11:01]22787: WAF :: fetched 1 new logs [05-07-2022 21:12:02]26206: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657066322 [05-07-2022 21:12:02]26206: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 21:12:04]26206: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 21:12:04]26206: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-2112/20220705-211202-YsTTUtL-9NpW2aubY_aN3wAAABE [05-07-2022 21:12:04]26206: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 21:12:04]26206: WAF :: fetched 117 new logs [05-07-2022 21:13:01]29397: WAF :: fetched 2 new logs [05-07-2022 21:14:02]32581: WAF :: fetched 15 new logs [05-07-2022 21:15:02]3389: WAF :: fetched 2 new logs [05-07-2022 21:16:01]6654: WAF :: fetched 12 new logs [05-07-2022 21:18:01]13622: WAF :: fetched 10 new logs [05-07-2022 21:19:01]16811: WAF :: fetched 1 new logs [05-07-2022 21:21:01]23600: WAF :: fetched 4 new logs [05-07-2022 21:23:02]30111: WAF :: fetched 2 new logs [05-07-2022 21:25:04]4080: WAF :: fetched 1 new logs [05-07-2022 21:27:01]10485: WAF :: fetched 1 new logs [05-07-2022 21:29:01]17571: WAF :: fetched 6 new logs [05-07-2022 21:30:01]20875: WAF :: fetched 1 new logs [05-07-2022 21:32:01]27526: WAF :: fetched 2 new logs [05-07-2022 21:33:01]30850: WAF :: fetched 4 new logs [05-07-2022 21:34:03]1503: WAF :: fetched 4 new logs [05-07-2022 21:36:01]7791: WAF :: fetched 1 new logs [05-07-2022 21:38:01]14911: WAF :: fetched 19 new logs [05-07-2022 21:39:02]18349: WAF :: fetched 3 new logs [05-07-2022 21:40:01]21620: WAF :: fetched 1 new logs [05-07-2022 21:41:01]24997: WAF :: fetched 2 new logs [05-07-2022 21:41:01]24997: Checking for user cron vulnerabilities [05-07-2022 21:42:01]28247: WAF :: fetched 9 new logs [05-07-2022 21:44:01]2264: Checking ditributed CMS bruteforce attacks [05-07-2022 21:44:05]2264: WAF :: fetched 1 new logs [05-07-2022 21:45:02]5951: WAF :: fetched 1 new logs [05-07-2022 21:46:01]9343: WAF :: fetched 3 new logs [05-07-2022 21:47:01]12646: WAF :: fetched 6 new logs [05-07-2022 21:48:02]16057: WAF :: fetched 4 new logs [05-07-2022 21:50:01]23058: WAF :: fetched 1 new logs [05-07-2022 21:51:02]26533: WAF :: fetched 4 new logs [05-07-2022 21:52:01]29704: WAF :: fetched 3 new logs [05-07-2022 21:53:02]491: WAF :: fetched 2 new logs [05-07-2022 21:58:01]16907: WAF :: fetched 1 new logs [05-07-2022 21:59:01]20910: WAF :: fetched 2 new logs [05-07-2022 22:01:01]27793: WAF :: fetched 1 new logs [05-07-2022 22:02:02]31046: WAF :: fetched 1 new logs [05-07-2022 22:04:02]5165: WAF :: fetched 12 new logs [05-07-2022 22:05:01]8428: WAF :: fetched 2 new logs [05-07-2022 22:06:01]11773: WAF :: fetched 1 new logs [05-07-2022 22:06:01]11767: httpd.conf changed. Refreshing watchlist. [05-07-2022 22:07:12]14989: Performing Domain reputation checks [05-07-2022 22:08:01]18386: WAF :: fetched 1 new logs [05-07-2022 22:09:01]22051: WAF :: fetched 1 new logs [05-07-2022 22:10:02]25580: WAF :: fetched 1 new logs [05-07-2022 22:12:02]32014: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657069922 [05-07-2022 22:12:02]32014: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 22:12:04]32014: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 22:12:06]32014: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-2212/20220705-221202-YsThYuLz2k6__XQAf1SI9gAAAAE [05-07-2022 22:12:06]32014: WAF :: No suitable log file found. Using SQLite.. [05-07-2022 22:13:01]2623: WAF :: fetched 5 new logs [05-07-2022 22:14:02]6219: httpd.conf changed. Refreshing watchlist. [05-07-2022 22:15:01]9516: WAF :: fetched 2 new logs [05-07-2022 22:16:03]12926: WAF :: fetched 3 new logs [05-07-2022 22:17:01]16124: WAF :: fetched 4 new logs [05-07-2022 22:20:01]26801: WAF :: fetched 9 new logs [05-07-2022 22:21:02]30135: WAF :: fetched 3 new logs [05-07-2022 22:22:01]968: WAF :: fetched 1 new logs [05-07-2022 22:26:01]14092: WAF :: fetched 2 new logs [05-07-2022 22:27:02]17369: WAF :: fetched 10 new logs [05-07-2022 22:27:02]17371: httpd.conf changed. Refreshing watchlist. [05-07-2022 22:28:02]20780: WAF :: fetched 3 new logs [05-07-2022 22:29:01]24129: WAF :: fetched 2 new logs [05-07-2022 22:31:02]31227: WAF :: fetched 1 new logs [05-07-2022 22:32:02]2062: WAF :: fetched 11 new logs [05-07-2022 22:33:01]5448: WAF :: fetched 1 new logs [05-07-2022 22:34:02]8492: WAF :: fetched 1 new logs [05-07-2022 22:35:02]11535: WAF :: fetched 3 new logs [05-07-2022 22:36:01]14898: WAF :: fetched 1 new logs [05-07-2022 22:37:01]18207: WAF :: fetched 19 new logs [05-07-2022 22:39:02]24972: WAF :: fetched 2 new logs [05-07-2022 22:41:01]31988: WAF :: fetched 13 new logs [05-07-2022 22:41:01]31988: Checking for user cron vulnerabilities [05-07-2022 22:44:01]9315: Checking ditributed CMS bruteforce attacks [05-07-2022 22:46:01]15932: WAF :: fetched 3 new logs [05-07-2022 22:47:01]19307: WAF :: fetched 2 new logs [05-07-2022 22:49:02]25936: WAF :: fetched 3 new logs [05-07-2022 22:51:01]451: WAF :: fetched 11 new logs [05-07-2022 22:53:01]7128: WAF :: fetched 3 new logs [05-07-2022 22:54:01]10357: WAF :: fetched 3 new logs [05-07-2022 22:56:01]16852: WAF :: fetched 2 new logs [05-07-2022 22:57:02]20222: WAF :: fetched 1 new logs [05-07-2022 23:00:02]30201: WAF :: fetched 1 new logs [05-07-2022 23:01:01]1657: WAF :: fetched 2 new logs [05-07-2022 23:02:01]4978: WAF :: fetched 1 new logs [05-07-2022 23:03:02]8353: WAF :: fetched 5 new logs [05-07-2022 23:07:01]21338: WAF :: fetched 8 new logs [05-07-2022 23:08:02]24787: WAF :: fetched 1 new logs [05-07-2022 23:08:19]21487: Performed RBL check for 23.111.136.34. [05-07-2022 23:09:01]28095: WAF :: fetched 1 new logs [05-07-2022 23:11:01]2804: WAF :: fetched 1 new logs [05-07-2022 23:12:01]6033: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657073521 [05-07-2022 23:12:01]6033: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-07-2022 23:12:03]6033: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-07-2022 23:12:04]6033: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220705/20220705-2312/20220705-231201-YsTvcbuIJ330YsOb2XaxwAAAAA0 [05-07-2022 23:12:04]6033: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-07-2022 23:12:05]6033: WAF :: fetched 1 new logs [05-07-2022 23:13:02]9358: WAF :: fetched 1 new logs [05-07-2022 23:14:01]12614: WAF :: fetched 2 new logs [05-07-2022 23:15:01]15881: WAF :: fetched 2 new logs [05-07-2022 23:16:02]19327: WAF :: fetched 13 new logs [05-07-2022 23:18:02]26027: WAF :: fetched 4 new logs [05-07-2022 23:19:02]29264: WAF :: fetched 1 new logs [05-07-2022 23:20:03]32507: WAF :: fetched 2 new logs [05-07-2022 23:21:01]3904: WAF :: fetched 1 new logs [05-07-2022 23:24:01]13759: WAF :: fetched 2 new logs [05-07-2022 23:25:02]17125: WAF :: fetched 1 new logs [05-07-2022 23:27:01]23794: WAF :: fetched 3 new logs [05-07-2022 23:29:02]30403: WAF :: fetched 3 new logs [05-07-2022 23:30:01]1281: WAF :: fetched 9 new logs [05-07-2022 23:31:02]5197: WAF :: fetched 5 new logs [05-07-2022 23:32:01]8426: WAF :: fetched 3 new logs [05-07-2022 23:34:02]14885: WAF :: fetched 1 new logs [05-07-2022 23:35:01]17914: WAF :: fetched 3 new logs [05-07-2022 23:36:02]21326: WAF :: fetched 6 new logs [05-07-2022 23:37:01]24686: WAF :: fetched 6 new logs [05-07-2022 23:39:02]31258: WAF :: fetched 1 new logs [05-07-2022 23:40:01]2196: WAF :: fetched 1 new logs [05-07-2022 23:41:02]6074: WAF :: fetched 2 new logs [05-07-2022 23:41:02]6074: Checking for user cron vulnerabilities [05-07-2022 23:44:01]16085: Checking ditributed CMS bruteforce attacks [05-07-2022 23:46:01]22823: WAF :: fetched 3 new logs [05-07-2022 23:49:02]32704: WAF :: fetched 2 new logs [05-07-2022 23:50:02]3501: WAF :: fetched 1 new logs [05-07-2022 23:51:01]7149: WAF :: fetched 2 new logs [05-07-2022 23:53:01]13951: WAF :: fetched 3 new logs [05-07-2022 23:54:02]17257: WAF :: fetched 1 new logs [05-07-2022 23:56:01]24023: httpd.conf changed. Refreshing watchlist. [05-07-2022 23:57:02]27221: WAF :: fetched 1 new logs [05-07-2022 23:58:01]30350: WAF :: fetched 1 new logs [06-07-2022 00:01:04]7971: Sending daily report for July 6, 2022 [06-07-2022 00:02:02]11968: WAF :: fetched 2 new logs [06-07-2022 00:05:02]21996: Deleted 0 entries older than 6 MONTH from scanner_logs [06-07-2022 00:05:02]21996: Deleted 0 files from Quarantine [06-07-2022 00:06:02]25368: WAF :: fetched 1 new logs [06-07-2022 00:08:02]31883: WAF :: fetched 4 new logs [06-07-2022 00:10:01]6168: WAF :: fetched 1 new logs [06-07-2022 00:11:02]9504: WAF :: fetched 2 new logs [06-07-2022 00:12:02]13235: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657077122 [06-07-2022 00:12:02]13235: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 00:12:04]13235: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 00:12:04]13235: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-0012/20220706-001202-YsT9giVjUhroSOZmrQvbbgAAABQ [06-07-2022 00:12:04]13235: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-07-2022 00:12:04]13235: WAF :: fetched 1 new logs [06-07-2022 00:13:01]16488: WAF :: fetched 4 new logs [06-07-2022 00:15:01]23229: WAF :: fetched 2 new logs [06-07-2022 00:17:01]29839: WAF :: fetched 1 new logs [06-07-2022 00:18:02]684: WAF :: fetched 2 new logs [06-07-2022 00:20:01]7216: WAF :: fetched 1 new logs [06-07-2022 00:22:01]14225: WAF :: fetched 2 new logs [06-07-2022 00:23:02]17465: WAF :: fetched 1 new logs [06-07-2022 00:24:02]20862: WAF :: fetched 6 new logs [06-07-2022 00:25:02]24295: WAF :: fetched 1 new logs [06-07-2022 00:27:02]30776: WAF :: fetched 2 new logs [06-07-2022 00:28:01]1531: WAF :: fetched 2 new logs [06-07-2022 00:32:02]15212: WAF :: fetched 2 new logs [06-07-2022 00:34:02]21444: WAF :: fetched 3 new logs [06-07-2022 00:35:01]24876: WAF :: fetched 9 new logs [06-07-2022 00:36:01]28164: WAF :: fetched 5 new logs [06-07-2022 00:39:02]5623: WAF :: fetched 1 new logs [06-07-2022 00:40:01]8890: WAF :: fetched 1 new logs [06-07-2022 00:41:02]12218: WAF :: fetched 1 new logs [06-07-2022 00:41:02]12218: Checking for user cron vulnerabilities [06-07-2022 00:42:02]15917: WAF :: fetched 1 new logs [06-07-2022 00:44:02]22633: Checking ditributed CMS bruteforce attacks [06-07-2022 00:44:02]22633: WAF :: fetched 2 new logs [06-07-2022 00:45:01]: Checking for software updates [06-07-2022 00:45:02]26086: WAF :: fetched 1 new logs [06-07-2022 00:46:01]29381: WAF :: fetched 6 new logs [06-07-2022 00:47:02]32662: WAF :: fetched 8 new logs [06-07-2022 00:49:01]6689: WAF :: fetched 2 new logs [06-07-2022 00:52:02]16584: WAF :: fetched 1 new logs [06-07-2022 00:53:02]20424: WAF :: fetched 5 new logs [06-07-2022 00:54:02]23839: WAF :: fetched 1 new logs [06-07-2022 00:57:02]1239: WAF :: fetched 2 new logs [06-07-2022 00:58:02]4506: WAF :: fetched 2 new logs [06-07-2022 00:59:02]7839: WAF :: fetched 2 new logs [06-07-2022 01:03:01]22941: WAF :: fetched 1 new logs [06-07-2022 01:04:01]26796: WAF :: fetched 4 new logs [06-07-2022 01:06:01]1507: WAF :: fetched 2 new logs [06-07-2022 01:07:02]5021: WAF :: fetched 2 new logs [06-07-2022 01:08:01]8506: WAF :: fetched 7 new logs [06-07-2022 01:10:02]15423: WAF :: fetched 1 new logs [06-07-2022 01:12:02]22306: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657080722 [06-07-2022 01:12:02]22306: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 01:12:04]22306: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 01:12:04]22306: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-0112/20220706-011202-YsULkgjyunlu0RF2Q2b-ngAAAAQ [06-07-2022 01:12:04]22306: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-07-2022 01:12:04]22306: WAF :: fetched 1 new logs [06-07-2022 01:13:03]26487: WAF :: fetched 1 new logs [06-07-2022 01:15:02]790: WAF :: fetched 1 new logs [06-07-2022 01:16:01]4131: WAF :: fetched 6 new logs [06-07-2022 01:19:02]14752: WAF :: fetched 2 new logs [06-07-2022 01:21:01]21605: WAF :: fetched 1 new logs [06-07-2022 01:22:02]25264: WAF :: fetched 1 new logs [06-07-2022 01:23:01]29274: WAF :: fetched 12 new logs [06-07-2022 01:25:01]4081: WAF :: fetched 1 new logs [06-07-2022 01:26:02]7457: WAF :: fetched 1 new logs [06-07-2022 01:27:02]10743: WAF :: fetched 2 new logs [06-07-2022 01:31:02]24783: WAF :: fetched 1 new logs [06-07-2022 01:32:02]27837: WAF :: fetched 3 new logs [06-07-2022 01:33:01]31308: WAF :: fetched 11 new logs [06-07-2022 01:34:02]2946: WAF :: fetched 1 new logs [06-07-2022 01:35:02]6591: WAF :: fetched 6 new logs [06-07-2022 01:37:02]13323: WAF :: fetched 4 new logs [06-07-2022 01:38:02]16897: WAF :: fetched 2 new logs [06-07-2022 01:40:02]23894: WAF :: fetched 3 new logs [06-07-2022 01:41:02]27264: WAF :: fetched 1 new logs [06-07-2022 01:41:02]27264: Checking for user cron vulnerabilities [06-07-2022 01:42:02]30349: WAF :: fetched 3 new logs [06-07-2022 01:43:02]1589: WAF :: fetched 2 new logs [06-07-2022 01:44:01]5409: Checking ditributed CMS bruteforce attacks [06-07-2022 01:44:05]5409: WAF :: fetched 3 new logs [06-07-2022 01:45:05]: Checking for definition updates [06-07-2022 01:45:45]8748: WAF :: fetched 3 new logs [06-07-2022 01:46:02]11732: WAF :: fetched 2 new logs [06-07-2022 01:47:04]15037: WAF :: fetched 4 new logs [06-07-2022 01:48:03]18778: WAF :: fetched 1 new logs [06-07-2022 01:49:02]22345: WAF :: fetched 4 new logs [06-07-2022 01:50:01]25871: WAF :: fetched 10 new logs [06-07-2022 01:51:04]29274: WAF :: fetched 3 new logs [06-07-2022 01:52:02]32383: WAF :: fetched 1 new logs [06-07-2022 01:53:02]3791: WAF :: fetched 3 new logs [06-07-2022 01:54:02]7612: WAF :: fetched 4 new logs [06-07-2022 01:55:01]11258: WAF :: fetched 2 new logs [06-07-2022 01:56:01]15162: WAF :: fetched 3 new logs [06-07-2022 01:57:01]18719: WAF :: fetched 2 new logs [06-07-2022 01:58:02]21984: WAF :: fetched 2 new logs [06-07-2022 01:59:01]25412: WAF :: fetched 1 new logs [06-07-2022 02:00:02]28530: WAF :: fetched 3 new logs [06-07-2022 02:01:02]32490: WAF :: fetched 7 new logs [06-07-2022 02:02:01]3562: WAF :: fetched 7 new logs [06-07-2022 02:03:02]6887: WAF :: fetched 4 new logs [06-07-2022 02:04:01]10378: WAF :: fetched 2 new logs [06-07-2022 02:05:02]13740: WAF :: fetched 1 new logs [06-07-2022 02:06:02]17038: WAF :: fetched 2 new logs [06-07-2022 02:07:01]20920: WAF :: fetched 2 new logs [06-07-2022 02:09:02]28024: WAF :: fetched 14 new logs [06-07-2022 02:10:02]31367: WAF :: fetched 12 new logs [06-07-2022 02:11:01]2264: WAF :: fetched 6 new logs [06-07-2022 02:12:01]5578: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657084321 [06-07-2022 02:12:01]5578: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 02:12:03]5578: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 02:12:03]5578: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-0212/20220706-021201-YsUZoQ3nx7hEpOoYzC8USQAAAAk [06-07-2022 02:12:03]5578: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 02:12:04]5578: WAF :: fetched 295 new logs [06-07-2022 02:13:02]8861: WAF :: fetched 3 new logs [06-07-2022 02:15:02]15437: WAF :: fetched 1 new logs [06-07-2022 02:16:01]18842: WAF :: fetched 13 new logs [06-07-2022 02:17:02]22572: WAF :: fetched 5 new logs [06-07-2022 02:18:02]26265: WAF :: fetched 2 new logs [06-07-2022 02:20:02]676: WAF :: fetched 2 new logs [06-07-2022 02:21:01]4281: WAF :: fetched 12 new logs [06-07-2022 02:23:01]10737: WAF :: fetched 1 new logs [06-07-2022 02:24:01]13984: WAF :: fetched 2 new logs [06-07-2022 02:25:02]17435: WAF :: fetched 3 new logs [06-07-2022 02:26:01]20862: WAF :: fetched 2 new logs [06-07-2022 02:27:01]24660: WAF :: fetched 3 new logs [06-07-2022 02:28:03]27920: WAF :: fetched 5 new logs [06-07-2022 02:30:02]2234: WAF :: fetched 4 new logs [06-07-2022 02:31:02]5524: WAF :: fetched 12 new logs [06-07-2022 02:32:01]8562: WAF :: fetched 10 new logs [06-07-2022 02:33:02]11878: WAF :: fetched 3 new logs [06-07-2022 02:34:01]15098: WAF :: fetched 2 new logs [06-07-2022 02:35:01]18521: WAF :: fetched 2 new logs [06-07-2022 02:36:02]21997: WAF :: fetched 3 new logs [06-07-2022 02:38:02]29159: WAF :: fetched 2 new logs [06-07-2022 02:39:01]32419: WAF :: fetched 1 new logs [06-07-2022 02:40:01]3418: WAF :: fetched 8 new logs [06-07-2022 02:41:02]6783: Checking for user cron vulnerabilities [06-07-2022 02:42:01]10020: WAF :: fetched 1 new logs [06-07-2022 02:43:02]13334: WAF :: fetched 2 new logs [06-07-2022 02:44:01]16648: Checking ditributed CMS bruteforce attacks [06-07-2022 02:44:06]16648: WAF :: fetched 4 new logs [06-07-2022 02:45:02]20163: WAF :: fetched 2 new logs [06-07-2022 02:46:01]23817: WAF :: fetched 1 new logs [06-07-2022 02:47:02]27114: WAF :: fetched 3 new logs [06-07-2022 02:48:01]30840: WAF :: fetched 2 new logs [06-07-2022 02:49:01]1743: WAF :: fetched 1 new logs [06-07-2022 02:50:02]5187: WAF :: fetched 1 new logs [06-07-2022 02:52:01]11713: WAF :: fetched 1 new logs [06-07-2022 02:53:02]15021: WAF :: fetched 4 new logs [06-07-2022 02:53:02]15026: Updated license status via CDN [06-07-2022 02:54:01]18420: WAF :: fetched 1 new logs [06-07-2022 02:58:01]31786: WAF :: fetched 3 new logs [06-07-2022 02:59:01]3113: WAF :: fetched 13 new logs [06-07-2022 03:00:22]6265: Found and updated 32 CMS installations [06-07-2022 03:01:01]10091: WAF :: fetched 2 new logs [06-07-2022 03:01:02]6265: Wordpress installation #9 oabilheus.org.br has errors [06-07-2022 03:02:01]13501: WAF :: fetched 1 new logs [06-07-2022 03:03:03]6265: Wordpress installation #29 adsgestaomkt.com.br has errors [06-07-2022 03:04:02]20588: WAF :: fetched 3 new logs [06-07-2022 03:04:16]6265: Sending CMS version vulnerability report emails to cpanel users [06-07-2022 03:04:19]6265: Checking wordpress installations for suspicious directories [06-07-2022 03:04:24]16930: Sending CMS version vulnerability report emails to cpanel users [06-07-2022 03:04:27]16930: Checking wordpress installations for suspicious directories [06-07-2022 03:05:01]24596: WAF :: fetched 2 new logs [06-07-2022 03:06:01]27899: WAF :: fetched 1 new logs [06-07-2022 03:07:01]31259: WAF :: fetched 1 new logs [06-07-2022 03:08:02]2222: WAF :: fetched 1 new logs [06-07-2022 03:09:01]6053: WAF :: fetched 2 new logs [06-07-2022 03:10:02]9579: WAF :: fetched 6 new logs [06-07-2022 03:12:01]16539: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657087921 [06-07-2022 03:12:01]16539: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 03:12:03]16539: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 03:12:05]16539: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-0312/20220706-031201-YsUnsRRFJnOiACr7XvRNzQAAAAM [06-07-2022 03:12:05]16539: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-07-2022 03:12:05]16539: WAF :: fetched 5 new logs [06-07-2022 03:13:02]20685: WAF :: fetched 8 new logs [06-07-2022 03:14:01]24368: WAF :: fetched 1 new logs [06-07-2022 03:15:02]27803: WAF :: fetched 17 new logs [06-07-2022 03:16:01]31113: WAF :: fetched 1 new logs [06-07-2022 03:17:01]2012: WAF :: fetched 2 new logs [06-07-2022 03:18:02]5356: WAF :: fetched 3 new logs [06-07-2022 03:19:01]8672: WAF :: fetched 3 new logs [06-07-2022 03:20:02]12569: WAF :: fetched 12 new logs [06-07-2022 03:21:02]15935: WAF :: fetched 1 new logs [06-07-2022 03:22:01]19299: WAF :: fetched 3 new logs [06-07-2022 03:23:02]22642: WAF :: fetched 1 new logs [06-07-2022 03:24:01]26085: WAF :: fetched 1 new logs [06-07-2022 03:25:02]29562: WAF :: fetched 16 new logs [06-07-2022 03:26:02]402: WAF :: fetched 21 new logs [06-07-2022 03:27:01]3882: WAF :: fetched 2 new logs [06-07-2022 03:28:03]7335: WAF :: fetched 1 new logs [06-07-2022 03:29:02]10866: WAF :: fetched 2 new logs [06-07-2022 03:30:01]14874: WAF :: fetched 2 new logs [06-07-2022 03:31:02]18441: WAF :: fetched 3 new logs [06-07-2022 03:32:02]21933: WAF :: fetched 12 new logs [06-07-2022 03:33:01]25378: WAF :: fetched 12 new logs [06-07-2022 03:34:02]29114: WAF :: fetched 3 new logs [06-07-2022 03:35:01]32506: WAF :: fetched 15 new logs [06-07-2022 03:36:02]3471: WAF :: fetched 4 new logs [06-07-2022 03:37:01]6909: WAF :: fetched 14 new logs [06-07-2022 03:39:01]13893: WAF :: fetched 2 new logs [06-07-2022 03:40:01]18123: WAF :: fetched 6 new logs [06-07-2022 03:41:02]21610: WAF :: fetched 5 new logs [06-07-2022 03:41:02]21610: Checking for user cron vulnerabilities [06-07-2022 03:42:01]25039: WAF :: fetched 2 new logs [06-07-2022 03:43:02]28368: WAF :: fetched 10 new logs [06-07-2022 03:44:01]31716: Checking ditributed CMS bruteforce attacks [06-07-2022 03:45:01]2817: WAF :: fetched 1 new logs [06-07-2022 03:46:02]6266: WAF :: fetched 2 new logs [06-07-2022 03:47:02]9587: WAF :: fetched 3 new logs [06-07-2022 03:48:01]13003: WAF :: fetched 163 new logs [06-07-2022 03:49:02]16283: WAF :: fetched 177 new logs [06-07-2022 03:50:02]19782: WAF :: fetched 117 new logs [06-07-2022 03:51:01]21210: WAF :: fetched 1 new logs [06-07-2022 03:53:02]23193: WAF :: fetched 2 new logs [06-07-2022 03:54:02]4234: WAF :: fetched 3 new logs [06-07-2022 03:55:02]7868: WAF :: fetched 2 new logs [06-07-2022 03:56:01]11549: WAF :: fetched 4 new logs [06-07-2022 03:59:02]22173: WAF :: fetched 1 new logs [06-07-2022 04:00:02]25489: WAF :: fetched 5 new logs [06-07-2022 04:01:01]29918: WAF :: fetched 12 new logs [06-07-2022 04:02:02]1040: WAF :: fetched 1 new logs [06-07-2022 04:04:01]8219: WAF :: fetched 4 new logs [06-07-2022 04:05:02]11704: WAF :: fetched 3 new logs [06-07-2022 04:06:01]15030: WAF :: fetched 2 new logs [06-07-2022 04:08:02]21721: WAF :: fetched 6 new logs [06-07-2022 04:09:02]25107: WAF :: fetched 2 new logs [06-07-2022 04:10:02]28500: WAF :: fetched 1 new logs [06-07-2022 04:11:01]32393: WAF :: fetched 1 new logs [06-07-2022 04:12:01]3266: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657091521 [06-07-2022 04:12:01]3266: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 04:12:03]3266: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 04:12:03]3266: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-0412/20220706-041201-YsU1wcFCeXawKe3vPE7GiAAAAAo [06-07-2022 04:12:03]3266: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 04:12:04]3266: WAF :: fetched 549 new logs [06-07-2022 04:13:02]6504: WAF :: fetched 1 new logs [06-07-2022 04:14:01]9748: WAF :: fetched 9 new logs [06-07-2022 04:15:02]13226: WAF :: fetched 4 new logs [06-07-2022 04:16:01]19797: WAF :: fetched 2 new logs [06-07-2022 04:20:02]782: WAF :: fetched 2 new logs [06-07-2022 04:21:01]4864: WAF :: fetched 6 new logs [06-07-2022 04:22:01]8191: WAF :: fetched 6 new logs [06-07-2022 04:23:01]11443: WAF :: fetched 4 new logs [06-07-2022 04:24:01]14731: WAF :: fetched 8 new logs [06-07-2022 04:26:01]21755: WAF :: fetched 1 new logs [06-07-2022 04:27:01]25205: WAF :: fetched 1 new logs [06-07-2022 04:28:02]28646: WAF :: fetched 2 new logs [06-07-2022 04:29:01]31901: WAF :: fetched 1 new logs [06-07-2022 04:30:02]2900: WAF :: fetched 1 new logs [06-07-2022 04:32:01]10085: WAF :: fetched 1 new logs [06-07-2022 04:34:01]16618: WAF :: fetched 87 new logs [06-07-2022 04:35:01]19860: WAF :: fetched 7 new logs [06-07-2022 04:41:01]7785: WAF :: fetched 9 new logs [06-07-2022 04:41:01]7785: Checking for user cron vulnerabilities [06-07-2022 04:43:01]14795: WAF :: fetched 2 new logs [06-07-2022 04:44:01]18225: Checking ditributed CMS bruteforce attacks [06-07-2022 04:49:01]2728: WAF :: fetched 2 new logs [06-07-2022 04:51:02]9453: WAF :: fetched 2 new logs [06-07-2022 04:57:01]30072: WAF :: fetched 1 new logs [06-07-2022 04:58:02]958: WAF :: fetched 18 new logs [06-07-2022 04:59:01]4244: WAF :: fetched 2 new logs [06-07-2022 05:01:02]11083: WAF :: fetched 1 new logs [06-07-2022 05:01:42]11078: Starting daily scan on files updated in last 24 hrs [06-07-2022 05:02:02]14881: WAF :: fetched 1 new logs [06-07-2022 05:03:01]18258: WAF :: fetched 1 new logs [06-07-2022 05:04:02]21556: WAF :: fetched 1 new logs [06-07-2022 05:05:01]25078: WAF :: fetched 1 new logs [06-07-2022 05:06:01]28446: WAF :: fetched 1 new logs [06-07-2022 05:07:02]31909: WAF :: fetched 1 new logs [06-07-2022 05:08:01]2772: WAF :: fetched 2 new logs [06-07-2022 05:10:02]9570: WAF :: fetched 1 new logs [06-07-2022 05:11:01]12974: WAF :: fetched 4 new logs [06-07-2022 05:12:02]16496: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657095122 [06-07-2022 05:12:02]16496: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 05:12:04]16496: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 05:12:05]16496: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-0512/20220706-051202-YsVD0rlXdIEjkYoLgWT5IwAAAAs [06-07-2022 05:12:05]16496: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-07-2022 05:12:05]16496: WAF :: fetched 14 new logs [06-07-2022 05:13:02]20216: WAF :: fetched 2 new logs [06-07-2022 05:14:01]23589: WAF :: fetched 1 new logs [06-07-2022 05:16:01]30323: WAF :: fetched 3 new logs [06-07-2022 05:17:02]1353: WAF :: fetched 1 new logs [06-07-2022 05:20:02]11426: WAF :: fetched 3 new logs [06-07-2022 05:22:01]18423: WAF :: fetched 1 new logs [06-07-2022 05:23:01]22223: WAF :: fetched 1 new logs [06-07-2022 05:24:02]25638: WAF :: fetched 4 new logs [06-07-2022 05:25:02]28989: WAF :: fetched 3 new logs [06-07-2022 05:26:01]32542: WAF :: fetched 2 new logs [06-07-2022 05:27:02]3458: WAF :: fetched 1 new logs [06-07-2022 05:29:02]10149: WAF :: fetched 1 new logs [06-07-2022 05:32:02]20487: WAF :: fetched 7 new logs [06-07-2022 05:33:01]24377: WAF :: fetched 1 new logs [06-07-2022 05:35:02]31078: WAF :: fetched 1 new logs [06-07-2022 05:37:02]5356: WAF :: fetched 2 new logs [06-07-2022 05:38:01]8232: WAF :: fetched 1 new logs [06-07-2022 05:40:01]14856: WAF :: fetched 2 new logs [06-07-2022 05:41:02]18489: Checking for user cron vulnerabilities [06-07-2022 05:43:01]25182: WAF :: fetched 2 new logs [06-07-2022 05:44:01]29089: Checking ditributed CMS bruteforce attacks [06-07-2022 05:44:02]29089: WAF :: fetched 1 new logs [06-07-2022 05:45:02]32505: WAF :: fetched 1 new logs [06-07-2022 05:48:01]10405: WAF :: fetched 2 new logs [06-07-2022 05:51:01]20675: WAF :: fetched 5 new logs [06-07-2022 05:52:02]24107: WAF :: fetched 1 new logs [06-07-2022 05:53:01]27428: WAF :: fetched 1 new logs [06-07-2022 05:58:01]12222: WAF :: fetched 1 new logs [06-07-2022 05:59:01]15535: WAF :: fetched 2 new logs [06-07-2022 06:01:01]22629: WAF :: fetched 1 new logs [06-07-2022 06:03:01]29388: WAF :: fetched 5 new logs [06-07-2022 06:06:01]7601: WAF :: fetched 1 new logs [06-07-2022 06:07:02]10915: WAF :: fetched 4 new logs [06-07-2022 06:08:01]14282: WAF :: fetched 1 new logs [06-07-2022 06:09:02]17597: WAF :: fetched 1 new logs [06-07-2022 06:10:02]21126: WAF :: fetched 1 new logs [06-07-2022 06:11:01]24731: WAF :: fetched 6 new logs [06-07-2022 06:12:01]28092: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657098721 [06-07-2022 06:12:01]28092: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 06:12:03]28092: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 06:12:05]28092: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-0612/20220706-061201-YsVR4SOLTCSPPogqlX8_bQAAAAQ [06-07-2022 06:12:05]28092: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 06:12:05]28092: WAF :: fetched 74 new logs [06-07-2022 06:20:01]23274: WAF :: fetched 6 new logs [06-07-2022 06:21:01]26801: WAF :: fetched 1 new logs [06-07-2022 06:22:01]30142: WAF :: fetched 1 new logs [06-07-2022 06:23:02]978: WAF :: fetched 7 new logs [06-07-2022 06:28:02]18427: WAF :: fetched 2 new logs [06-07-2022 06:29:01]21656: WAF :: fetched 3 new logs [06-07-2022 06:31:02]28625: WAF :: fetched 1 new logs [06-07-2022 06:34:01]6203: WAF :: fetched 4 new logs [06-07-2022 06:35:02]10070: WAF :: fetched 2 new logs [06-07-2022 06:38:02]19757: WAF :: fetched 3 new logs [06-07-2022 06:41:01]29997: Checking for user cron vulnerabilities [06-07-2022 06:43:02]4199: WAF :: fetched 1 new logs [06-07-2022 06:44:01]7419: Checking ditributed CMS bruteforce attacks [06-07-2022 06:45:01]10848: WAF :: fetched 2 new logs [06-07-2022 06:47:02]18255: WAF :: fetched 1 new logs [06-07-2022 06:50:02]28521: WAF :: fetched 1 new logs [06-07-2022 06:51:01]32083: WAF :: fetched 1 new logs [06-07-2022 06:52:02]2999: WAF :: fetched 1 new logs [06-07-2022 06:53:01]6387: WAF :: fetched 3 new logs [06-07-2022 06:55:02]12961: WAF :: fetched 3 new logs [06-07-2022 06:58:02]23720: WAF :: fetched 1 new logs [06-07-2022 07:01:01]1424: WAF :: fetched 3 new logs [06-07-2022 07:02:01]4838: WAF :: fetched 3 new logs [06-07-2022 07:03:02]8155: WAF :: fetched 5 new logs [06-07-2022 07:04:01]11486: WAF :: fetched 3 new logs [06-07-2022 07:05:02]14827: WAF :: fetched 1 new logs [06-07-2022 07:06:02]18859: WAF :: fetched 4 new logs [06-07-2022 07:07:01]22135: WAF :: fetched 1 new logs [06-07-2022 07:10:02]32351: WAF :: fetched 1 new logs [06-07-2022 07:12:01]6785: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657102321 [06-07-2022 07:12:01]6785: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 07:12:03]6785: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 07:12:05]6785: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-0712/20220706-071201-YsVf8ZDUYUbJq7VGKMgBngAAAAc [06-07-2022 07:12:05]6785: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-07-2022 07:12:05]6785: WAF :: fetched 9 new logs [06-07-2022 07:14:01]13410: WAF :: fetched 3 new logs [06-07-2022 07:17:01]24469: WAF :: fetched 2 new logs [06-07-2022 07:18:02]27732: WAF :: fetched 4 new logs [06-07-2022 07:19:01]31070: WAF :: fetched 2 new logs [06-07-2022 07:22:03]8816: WAF :: fetched 1 new logs [06-07-2022 07:23:01]12069: WAF :: fetched 2 new logs [06-07-2022 07:24:02]15371: WAF :: fetched 1 new logs [06-07-2022 07:25:02]18822: WAF :: fetched 1 new logs [06-07-2022 07:26:01]22267: WAF :: fetched 6 new logs [06-07-2022 07:27:02]26166: WAF :: fetched 6 new logs [06-07-2022 07:28:01]29471: WAF :: fetched 1 new logs [06-07-2022 07:29:02]305: WAF :: fetched 1 new logs [06-07-2022 07:30:02]3640: WAF :: fetched 2 new logs [06-07-2022 07:32:02]10501: WAF :: fetched 1 new logs [06-07-2022 07:33:02]13462: WAF :: fetched 8 new logs [06-07-2022 07:34:01]16638: WAF :: fetched 1 new logs [06-07-2022 07:35:02]20181: WAF :: fetched 5 new logs [06-07-2022 07:41:01]8176: WAF :: fetched 2 new logs [06-07-2022 07:41:01]8176: Checking for user cron vulnerabilities [06-07-2022 07:44:01]18267: Checking ditributed CMS bruteforce attacks [06-07-2022 07:44:05]18267: WAF :: fetched 2 new logs [06-07-2022 07:45:01]: Checking for definition updates [06-07-2022 07:45:01]21561: WAF :: fetched 2 new logs [06-07-2022 07:48:01]32178: WAF :: fetched 1 new logs [06-07-2022 07:49:03]3068: WAF :: fetched 5 new logs [06-07-2022 07:50:02]6458: WAF :: fetched 1 new logs [06-07-2022 07:51:01]9803: WAF :: fetched 2 new logs [06-07-2022 07:52:02]13175: WAF :: fetched 3 new logs [06-07-2022 07:53:01]16475: WAF :: fetched 3 new logs [06-07-2022 07:54:02]19961: WAF :: fetched 4 new logs [06-07-2022 07:55:01]23086: WAF :: fetched 1 new logs [06-07-2022 07:56:01]26622: WAF :: fetched 3 new logs [06-07-2022 07:58:04]1358: WAF :: fetched 2 new logs [06-07-2022 07:59:01]4629: WAF :: fetched 1 new logs [06-07-2022 08:00:02]7650: WAF :: fetched 2 new logs [06-07-2022 08:01:02]11436: WAF :: fetched 1 new logs [06-07-2022 08:04:01]21423: WAF :: fetched 1 new logs [06-07-2022 08:07:01]32017: WAF :: fetched 2 new logs [06-07-2022 08:08:02]3011: WAF :: fetched 1 new logs [06-07-2022 08:10:01]9588: WAF :: fetched 1 new logs [06-07-2022 08:12:02]16255: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657105922 [06-07-2022 08:12:02]16255: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 08:12:04]16255: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 08:12:04]16255: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-0812/20220706-081202-YsVuAowWMiR8_0Fhy7CpdQAAAAg [06-07-2022 08:12:04]16255: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-07-2022 08:12:04]16255: WAF :: fetched 1 new logs [06-07-2022 08:13:01]19631: WAF :: fetched 1 new logs [06-07-2022 08:14:02]23049: WAF :: fetched 1 new logs [06-07-2022 08:16:02]29876: WAF :: fetched 1 new logs [06-07-2022 08:19:01]8192: WAF :: fetched 5 new logs [06-07-2022 08:20:01]11554: WAF :: fetched 1 new logs [06-07-2022 08:21:02]14993: WAF :: fetched 3 new logs [06-07-2022 08:22:01]18483: WAF :: fetched 2 new logs [06-07-2022 08:23:02]21853: WAF :: fetched 4 new logs [06-07-2022 08:24:02]25220: WAF :: fetched 1 new logs [06-07-2022 08:25:01]28701: WAF :: fetched 5 new logs [06-07-2022 08:26:02]32093: WAF :: fetched 1 new logs [06-07-2022 08:27:01]3030: WAF :: fetched 4 new logs [06-07-2022 08:28:03]6883: WAF :: fetched 4 new logs [06-07-2022 08:30:01]13215: WAF :: fetched 1 new logs [06-07-2022 08:31:02]16541: WAF :: fetched 6 new logs [06-07-2022 08:33:01]23625: WAF :: fetched 1 new logs [06-07-2022 08:36:01]1307: WAF :: fetched 4 new logs [06-07-2022 08:37:02]4666: WAF :: fetched 6 new logs [06-07-2022 08:39:01]11719: WAF :: fetched 3 new logs [06-07-2022 08:40:02]15045: WAF :: fetched 1 new logs [06-07-2022 08:41:01]18565: WAF :: fetched 1 new logs [06-07-2022 08:41:01]18565: Checking for user cron vulnerabilities [06-07-2022 08:44:02]28898: Checking ditributed CMS bruteforce attacks [06-07-2022 08:45:01]32227: WAF :: fetched 1 new logs [06-07-2022 08:46:03]3221: WAF :: fetched 3 new logs [06-07-2022 08:48:02]9950: WAF :: fetched 3 new logs [06-07-2022 08:49:01]13834: WAF :: fetched 2 new logs [06-07-2022 08:50:02]17212: WAF :: fetched 10 new logs [06-07-2022 08:51:03]20751: WAF :: fetched 1 new logs [06-07-2022 08:53:02]27607: WAF :: fetched 5 new logs [06-07-2022 08:54:01]30834: WAF :: fetched 1 new logs [06-07-2022 08:55:03]1924: WAF :: fetched 1 new logs [06-07-2022 08:56:02]5343: WAF :: fetched 9 new logs [06-07-2022 08:57:01]8682: WAF :: fetched 4 new logs [06-07-2022 09:00:02]19071: WAF :: fetched 1 new logs [06-07-2022 09:03:02]29755: WAF :: fetched 1 new logs [06-07-2022 09:06:01]7400: WAF :: fetched 1 new logs [06-07-2022 09:07:02]10850: WAF :: fetched 1 new logs [06-07-2022 09:09:02]18238: WAF :: fetched 1 new logs [06-07-2022 09:10:02]21577: WAF :: fetched 2 new logs [06-07-2022 09:11:02]25009: WAF :: fetched 2 new logs [06-07-2022 09:12:02]28472: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657109522 [06-07-2022 09:12:02]28472: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 09:12:04]28472: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 09:12:05]28472: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-0912/20220706-091202-YsV8EtshdX5nLPW4V06mRAAAAAk [06-07-2022 09:12:05]28472: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 09:12:06]28472: WAF :: fetched 151 new logs [06-07-2022 09:16:01]9351: WAF :: fetched 1 new logs [06-07-2022 09:17:02]12712: WAF :: fetched 1 new logs [06-07-2022 09:18:01]16009: WAF :: fetched 1 new logs [06-07-2022 09:20:02]23527: WAF :: fetched 2 new logs [06-07-2022 09:22:02]30406: WAF :: fetched 3 new logs [06-07-2022 09:25:01]7981: WAF :: fetched 1 new logs [06-07-2022 09:32:02]32281: WAF :: fetched 2 new logs [06-07-2022 09:35:02]9334: WAF :: fetched 4 new logs [06-07-2022 09:36:01]12629: WAF :: fetched 1 new logs [06-07-2022 09:37:02]16116: WAF :: fetched 1 new logs [06-07-2022 09:39:02]23343: WAF :: fetched 1 new logs [06-07-2022 09:40:01]26793: WAF :: fetched 1 new logs [06-07-2022 09:41:01]30290: WAF :: fetched 1 new logs [06-07-2022 09:41:01]30290: Checking for user cron vulnerabilities [06-07-2022 09:42:02]1415: WAF :: fetched 1 new logs [06-07-2022 09:43:01]4705: WAF :: fetched 1 new logs [06-07-2022 09:44:01]8087: Checking ditributed CMS bruteforce attacks [06-07-2022 09:44:02]8087: WAF :: fetched 2 new logs [06-07-2022 09:45:02]11518: httpd.conf changed. Refreshing watchlist. [06-07-2022 09:46:02]14999: WAF :: fetched 2 new logs [06-07-2022 09:50:02]29114: httpd.conf changed. Refreshing watchlist. [06-07-2022 09:52:02]3576: WAF :: fetched 2 new logs [06-07-2022 09:56:02]17083: httpd.conf changed. Refreshing watchlist. [06-07-2022 10:03:01]9297: WAF :: fetched 3 new logs [06-07-2022 10:04:02]12538: WAF :: fetched 2 new logs [06-07-2022 10:05:01]16001: WAF :: fetched 1 new logs [06-07-2022 10:06:01]19652: WAF :: fetched 3 new logs [06-07-2022 10:12:02]8134: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657113122 [06-07-2022 10:12:02]8134: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 10:12:04]8134: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 10:12:05]8134: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-1012/20220706-101202-YsWKIoJcqmUACETzDzGbbgAAAAU [06-07-2022 10:12:05]8134: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 10:12:06]8134: WAF :: fetched 1 new logs [06-07-2022 10:15:02]18168: WAF :: fetched 4 new logs [06-07-2022 10:16:01]21335: WAF :: fetched 2 new logs [06-07-2022 10:17:01]24626: WAF :: fetched 3 new logs [06-07-2022 10:22:01]10050: WAF :: fetched 1 new logs [06-07-2022 10:26:02]23924: WAF :: fetched 1 new logs [06-07-2022 10:27:01]27297: WAF :: fetched 1 new logs [06-07-2022 10:32:01]12469: WAF :: fetched 1 new logs [06-07-2022 10:37:01]29733: WAF :: fetched 1 new logs [06-07-2022 10:39:01]4174: WAF :: fetched 2 new logs [06-07-2022 10:41:01]11507: WAF :: fetched 4 new logs [06-07-2022 10:41:01]11507: Checking for user cron vulnerabilities [06-07-2022 10:42:02]14879: WAF :: fetched 3 new logs [06-07-2022 10:44:01]21664: Checking ditributed CMS bruteforce attacks [06-07-2022 10:44:03]21664: WAF :: fetched 2 new logs [06-07-2022 10:45:01]25117: WAF :: fetched 2 new logs [06-07-2022 10:47:02]32080: WAF :: fetched 2 new logs [06-07-2022 10:50:02]9829: WAF :: fetched 1 new logs [06-07-2022 10:52:01]17166: WAF :: fetched 1 new logs [06-07-2022 10:53:01]20785: WAF :: fetched 1 new logs [06-07-2022 10:55:02]27749: WAF :: fetched 2 new logs [06-07-2022 10:59:01]8921: WAF :: fetched 2 new logs [06-07-2022 11:01:02]16432: WAF :: fetched 2 new logs [06-07-2022 11:03:01]23084: WAF :: fetched 2 new logs [06-07-2022 11:04:01]25761: WAF :: fetched 1 new logs [06-07-2022 11:07:01]1460: WAF :: fetched 2 new logs [06-07-2022 11:08:02]4139: WAF :: fetched 3 new logs [06-07-2022 11:08:27]1606: Performed RBL check for 23.111.136.34. [06-07-2022 11:09:02]6880: WAF :: fetched 2 new logs [06-07-2022 11:10:02]9695: WAF :: fetched 1 new logs [06-07-2022 11:12:04]15353: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657116724 [06-07-2022 11:12:04]15353: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 11:12:06]15353: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 11:12:07]15353: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-1112/20220706-111204-YsWYNKijwIedvlFw3LX13QAAAAU [06-07-2022 11:12:07]15353: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 11:12:07]15353: WAF :: fetched 1 new logs [06-07-2022 11:13:02]18256: WAF :: fetched 2 new logs [06-07-2022 11:14:01]21057: WAF :: fetched 1 new logs [06-07-2022 11:15:01]23765: WAF :: fetched 2 new logs [06-07-2022 11:17:01]29376: WAF :: fetched 2 new logs [06-07-2022 11:19:01]2408: WAF :: fetched 1 new logs [06-07-2022 11:20:01]5062: WAF :: fetched 2 new logs [06-07-2022 11:23:02]13368: WAF :: fetched 1 new logs [06-07-2022 11:25:01]18887: WAF :: fetched 2 new logs [06-07-2022 11:27:02]24370: WAF :: fetched 3 new logs [06-07-2022 11:29:01]29709: WAF :: fetched 2 new logs [06-07-2022 11:30:02]32480: WAF :: fetched 4 new logs [06-07-2022 11:31:02]2924: WAF :: fetched 1 new logs [06-07-2022 11:32:02]5749: WAF :: fetched 3 new logs [06-07-2022 11:33:01]8437: WAF :: fetched 6 new logs [06-07-2022 11:36:02]16665: WAF :: fetched 5 new logs [06-07-2022 11:38:02]22247: WAF :: fetched 2 new logs [06-07-2022 11:40:01]27636: WAF :: fetched 1 new logs [06-07-2022 11:41:01]30426: Checking for user cron vulnerabilities [06-07-2022 11:42:02]767: WAF :: fetched 1 new logs [06-07-2022 11:43:01]3470: WAF :: fetched 1 new logs [06-07-2022 11:44:01]6166: Checking ditributed CMS bruteforce attacks [06-07-2022 11:44:04]6166: WAF :: fetched 6 new logs [06-07-2022 11:46:01]11568: WAF :: fetched 2 new logs [06-07-2022 11:49:01]19831: WAF :: fetched 2 new logs [06-07-2022 11:50:01]22516: WAF :: fetched 1 new logs [06-07-2022 11:52:01]28023: WAF :: fetched 5 new logs [06-07-2022 11:53:01]30676: WAF :: fetched 4 new logs [06-07-2022 11:54:02]988: WAF :: fetched 3 new logs [06-07-2022 11:55:01]3692: WAF :: fetched 1 new logs [06-07-2022 11:56:02]6432: WAF :: fetched 3 new logs [06-07-2022 11:57:01]9161: WAF :: fetched 1 new logs [06-07-2022 11:58:01]11879: WAF :: fetched 4 new logs [06-07-2022 11:59:02]14555: WAF :: fetched 3 new logs [06-07-2022 12:00:01]16968: WAF :: fetched 2 new logs [06-07-2022 12:01:01]20250: WAF :: fetched 2 new logs [06-07-2022 12:02:01]22973: WAF :: fetched 4 new logs [06-07-2022 12:05:02]31019: WAF :: fetched 2 new logs [06-07-2022 12:07:02]4085: WAF :: fetched 1 new logs [06-07-2022 12:09:01]9407: WAF :: fetched 4 new logs [06-07-2022 12:10:02]12093: WAF :: fetched 3 new logs [06-07-2022 12:11:02]14788: WAF :: fetched 2 new logs [06-07-2022 12:12:02]17430: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657120322 [06-07-2022 12:12:02]17430: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 12:12:04]17430: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 12:12:06]17430: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-1212/20220706-121202-YsWmQlWhQC6xx6zJXc7CVAAAAAU [06-07-2022 12:12:06]17430: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 12:12:06]17430: WAF :: fetched 3 new logs [06-07-2022 12:13:01]20248: WAF :: fetched 12 new logs [06-07-2022 12:14:01]22864: WAF :: fetched 6 new logs [06-07-2022 12:15:02]25783: WAF :: fetched 22 new logs [06-07-2022 12:16:02]29016: WAF :: fetched 4 new logs [06-07-2022 12:17:02]31655: WAF :: fetched 2 new logs [06-07-2022 12:18:02]2057: WAF :: fetched 3 new logs [06-07-2022 12:19:01]4759: WAF :: fetched 6 new logs [06-07-2022 12:20:01]7452: WAF :: fetched 6 new logs [06-07-2022 12:21:02]10220: WAF :: fetched 2 new logs [06-07-2022 12:22:01]12847: WAF :: fetched 6 new logs [06-07-2022 12:23:01]15560: WAF :: fetched 5 new logs [06-07-2022 12:24:01]18328: WAF :: fetched 2 new logs [06-07-2022 12:25:01]21026: WAF :: fetched 2 new logs [06-07-2022 12:27:01]26346: WAF :: fetched 1 new logs [06-07-2022 12:28:02]29094: WAF :: fetched 3 new logs [06-07-2022 12:30:02]1956: WAF :: fetched 2 new logs [06-07-2022 12:31:01]4662: WAF :: fetched 6 new logs [06-07-2022 12:32:01]7434: WAF :: fetched 3 new logs [06-07-2022 12:32:01]7432: httpd.conf changed. Refreshing watchlist. [06-07-2022 12:33:01]10270: WAF :: fetched 1 new logs [06-07-2022 12:34:02]12974: WAF :: fetched 5 new logs [06-07-2022 12:35:01]15656: WAF :: fetched 3 new logs [06-07-2022 12:37:01]21180: WAF :: fetched 2 new logs [06-07-2022 12:37:02]21178: httpd.conf changed. Refreshing watchlist. [06-07-2022 12:38:01]23889: WAF :: fetched 3 new logs [06-07-2022 12:41:02]31847: Checking for user cron vulnerabilities [06-07-2022 12:42:01]2089: WAF :: fetched 2 new logs [06-07-2022 12:44:02]7335: Checking ditributed CMS bruteforce attacks [06-07-2022 12:44:06]7335: WAF :: fetched 3 new logs [06-07-2022 12:45:01]: Checking for software updates [06-07-2022 12:46:01]12728: WAF :: fetched 1 new logs [06-07-2022 12:48:01]18167: WAF :: fetched 2 new logs [06-07-2022 12:49:01]20790: WAF :: fetched 3 new logs [06-07-2022 12:50:02]23443: httpd.conf changed. Refreshing watchlist. [06-07-2022 12:51:01]26238: WAF :: fetched 2 new logs [06-07-2022 12:51:01]26234: httpd.conf changed. Refreshing watchlist. [06-07-2022 12:53:02]31542: WAF :: fetched 1 new logs [06-07-2022 12:54:02]1745: WAF :: fetched 2 new logs [06-07-2022 12:55:01]4150: WAF :: fetched 2 new logs [06-07-2022 12:56:02]7143: WAF :: fetched 11 new logs [06-07-2022 12:56:02]7132: httpd.conf changed. Refreshing watchlist. [06-07-2022 12:57:01]9797: WAF :: fetched 2 new logs [06-07-2022 12:59:02]15173: WAF :: fetched 1 new logs [06-07-2022 13:00:01]17650: WAF :: fetched 2 new logs [06-07-2022 13:03:01]26252: WAF :: fetched 1 new logs [06-07-2022 13:04:02]28891: WAF :: fetched 1 new logs [06-07-2022 13:05:02]31506: WAF :: fetched 3 new logs [06-07-2022 13:06:02]1773: WAF :: fetched 3 new logs [06-07-2022 13:10:02]12440: WAF :: fetched 2 new logs [06-07-2022 13:11:01]15090: WAF :: fetched 1 new logs [06-07-2022 13:12:01]17726: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657123921 [06-07-2022 13:12:01]17726: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 13:12:03]17726: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 13:12:04]17726: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-1312/20220706-131201-YsW0UUMpbv7r_4xyt9fFowAAABE [06-07-2022 13:12:04]17726: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 13:12:04]17726: WAF :: fetched 5 new logs [06-07-2022 13:14:01]23066: WAF :: fetched 1 new logs [06-07-2022 13:17:01]30970: WAF :: fetched 3 new logs [06-07-2022 13:21:02]9289: WAF :: fetched 1 new logs [06-07-2022 13:24:01]17279: WAF :: fetched 1 new logs [06-07-2022 13:26:02]22723: WAF :: fetched 1 new logs [06-07-2022 13:27:01]25301: WAF :: fetched 2 new logs [06-07-2022 13:28:02]28073: WAF :: fetched 3 new logs [06-07-2022 13:30:01]916: WAF :: fetched 1 new logs [06-07-2022 13:31:02]3639: WAF :: fetched 3 new logs [06-07-2022 13:34:01]11581: WAF :: fetched 2 new logs [06-07-2022 13:35:01]14156: WAF :: fetched 6 new logs [06-07-2022 13:37:01]19546: WAF :: fetched 1 new logs [06-07-2022 13:38:02]22283: WAF :: fetched 2 new logs [06-07-2022 13:39:01]24880: WAF :: fetched 1 new logs [06-07-2022 13:41:02]30208: WAF :: fetched 3 new logs [06-07-2022 13:41:02]30208: Checking for user cron vulnerabilities [06-07-2022 13:43:02]3160: WAF :: fetched 2 new logs [06-07-2022 13:44:02]5798: Checking ditributed CMS bruteforce attacks [06-07-2022 13:44:05]5798: WAF :: fetched 3 new logs [06-07-2022 13:45:01]: Checking for definition updates [06-07-2022 13:45:01]8309: WAF :: fetched 4 new logs [06-07-2022 13:45:03]8311: Updated virus defnition : signatures.ndb [06-07-2022 13:46:01]11111: WAF :: fetched 1 new logs [06-07-2022 13:47:01]13697: WAF :: fetched 7 new logs [06-07-2022 13:48:02]16430: WAF :: fetched 1 new logs [06-07-2022 13:49:01]19111: WAF :: fetched 3 new logs [06-07-2022 13:50:01]21733: WAF :: fetched 2 new logs [06-07-2022 13:52:02]27043: WAF :: fetched 4 new logs [06-07-2022 13:54:01]32406: WAF :: fetched 5 new logs [06-07-2022 13:55:01]2616: WAF :: fetched 7 new logs [06-07-2022 13:56:02]5336: WAF :: fetched 2 new logs [06-07-2022 13:57:01]7939: WAF :: fetched 2 new logs [06-07-2022 13:58:02]10698: WAF :: fetched 1 new logs [06-07-2022 14:02:01]21676: WAF :: fetched 4 new logs [06-07-2022 14:03:01]24415: WAF :: fetched 20 new logs [06-07-2022 14:04:02]27112: WAF :: fetched 12 new logs [06-07-2022 14:05:01]29759: WAF :: fetched 3 new logs [06-07-2022 14:06:01]32512: WAF :: fetched 3 new logs [06-07-2022 14:07:02]2785: WAF :: fetched 1 new logs [06-07-2022 14:08:02]5565: WAF :: fetched 1 new logs [06-07-2022 14:11:01]13608: WAF :: fetched 1 new logs [06-07-2022 14:12:02]16293: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657127522 [06-07-2022 14:12:02]16293: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 14:12:04]16293: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 14:12:05]16293: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-1412/20220706-141202-YsXCYlcsmXNjGLf3T-X0DQAAAAE [06-07-2022 14:12:05]16293: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 14:12:05]16293: WAF :: fetched 3 new logs [06-07-2022 14:14:01]21976: WAF :: fetched 5 new logs [06-07-2022 14:15:01]24691: WAF :: fetched 21 new logs [06-07-2022 14:16:03]27505: WAF :: fetched 26 new logs [06-07-2022 14:17:01]30139: WAF :: fetched 16 new logs [06-07-2022 14:18:01]468: WAF :: fetched 9 new logs [06-07-2022 14:20:02]5903: WAF :: fetched 3 new logs [06-07-2022 14:23:02]14090: WAF :: fetched 1 new logs [06-07-2022 14:24:01]16679: WAF :: fetched 1 new logs [06-07-2022 14:25:01]19403: WAF :: fetched 2 new logs [06-07-2022 14:26:02]22150: WAF :: fetched 1 new logs [06-07-2022 14:27:01]24805: WAF :: fetched 1 new logs [06-07-2022 14:28:01]27565: WAF :: fetched 5 new logs [06-07-2022 14:30:02]554: WAF :: fetched 1 new logs [06-07-2022 14:32:02]6088: WAF :: fetched 10 new logs [06-07-2022 14:34:02]11444: WAF :: fetched 3 new logs [06-07-2022 14:35:01]14082: WAF :: fetched 8 new logs [06-07-2022 14:36:01]16788: WAF :: fetched 3 new logs [06-07-2022 14:38:01]22277: WAF :: fetched 2 new logs [06-07-2022 14:39:02]24974: WAF :: fetched 3 new logs [06-07-2022 14:40:01]27491: WAF :: fetched 1 new logs [06-07-2022 14:41:01]30352: WAF :: fetched 2 new logs [06-07-2022 14:41:01]30352: Checking for user cron vulnerabilities [06-07-2022 14:42:02]584: WAF :: fetched 1 new logs [06-07-2022 14:43:03]3340: WAF :: fetched 7 new logs [06-07-2022 14:44:02]6009: Checking ditributed CMS bruteforce attacks [06-07-2022 14:48:01]16944: WAF :: fetched 1 new logs [06-07-2022 14:50:01]22389: WAF :: fetched 1 new logs [06-07-2022 14:52:02]27937: WAF :: fetched 3 new logs [06-07-2022 14:53:02]30642: Updated license status via CDN [06-07-2022 14:55:01]3638: WAF :: fetched 3 new logs [06-07-2022 14:57:01]9109: WAF :: fetched 1 new logs [06-07-2022 14:58:02]11915: WAF :: fetched 2 new logs [06-07-2022 14:59:01]14593: WAF :: fetched 4 new logs [06-07-2022 15:00:01]17094: WAF :: fetched 1 new logs [06-07-2022 15:01:01]20411: WAF :: fetched 7 new logs [06-07-2022 15:01:01]20409: Reseting cPGuard inotify settings [06-07-2022 15:02:02]23131: WAF :: fetched 3 new logs [06-07-2022 15:03:02]25864: WAF :: fetched 17 new logs [06-07-2022 15:04:01]28475: WAF :: fetched 20 new logs [06-07-2022 15:05:01]31136: WAF :: fetched 14 new logs [06-07-2022 15:06:01]1480: WAF :: fetched 11 new logs [06-07-2022 15:07:01]4177: WAF :: fetched 3 new logs [06-07-2022 15:08:02]6952: WAF :: fetched 1 new logs [06-07-2022 15:09:01]9658: WAF :: fetched 1 new logs [06-07-2022 15:10:01]12288: WAF :: fetched 1 new logs [06-07-2022 15:11:02]14995: WAF :: fetched 6 new logs [06-07-2022 15:12:01]17620: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657131121 [06-07-2022 15:12:01]17620: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 15:12:03]17620: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 15:12:04]17620: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-1512/20220706-151201-YsXQcSFo04C_fWGJCcWtKgAAABE [06-07-2022 15:12:04]17620: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 15:13:02]20524: WAF :: fetched 1 new logs [06-07-2022 15:15:01]25805: WAF :: fetched 1 new logs [06-07-2022 15:16:02]28538: WAF :: fetched 1 new logs [06-07-2022 15:17:01]31186: WAF :: fetched 3 new logs [06-07-2022 15:18:02]1517: WAF :: fetched 1 new logs [06-07-2022 15:19:02]4263: WAF :: fetched 2 new logs [06-07-2022 15:20:02]6947: WAF :: fetched 2 new logs [06-07-2022 15:22:01]12349: WAF :: fetched 1 new logs [06-07-2022 15:23:02]15076: WAF :: fetched 3 new logs [06-07-2022 15:25:02]20525: WAF :: fetched 3 new logs [06-07-2022 15:26:01]23032: WAF :: fetched 1 new logs [06-07-2022 15:27:04]25933: WAF :: fetched 4 new logs [06-07-2022 15:30:02]1540: WAF :: fetched 3 new logs [06-07-2022 15:32:02]7038: WAF :: fetched 3 new logs [06-07-2022 15:33:02]9804: WAF :: fetched 1 new logs [06-07-2022 15:35:01]15187: WAF :: fetched 1 new logs [06-07-2022 15:36:02]18125: WAF :: fetched 9 new logs [06-07-2022 15:37:02]20839: WAF :: fetched 3 new logs [06-07-2022 15:37:02]20832: httpd.conf changed. Refreshing watchlist. [06-07-2022 15:38:01]23744: WAF :: fetched 4 new logs [06-07-2022 15:38:01]23743: httpd.conf changed. Refreshing watchlist. [06-07-2022 15:39:02]26460: WAF :: fetched 7 new logs [06-07-2022 15:41:01]32054: WAF :: fetched 3 new logs [06-07-2022 15:41:01]32054: Checking for user cron vulnerabilities [06-07-2022 15:42:02]2528: WAF :: fetched 10 new logs [06-07-2022 15:42:02]2525: httpd.conf changed. Refreshing watchlist. [06-07-2022 15:43:02]5272: WAF :: fetched 6 new logs [06-07-2022 15:44:01]7882: Checking ditributed CMS bruteforce attacks [06-07-2022 15:44:05]7882: WAF :: fetched 16 new logs [06-07-2022 15:45:01]10707: WAF :: fetched 5 new logs [06-07-2022 15:46:02]13437: WAF :: fetched 9 new logs [06-07-2022 15:47:02]16224: WAF :: fetched 1 new logs [06-07-2022 15:47:02]16223: httpd.conf changed. Refreshing watchlist. [06-07-2022 15:48:01]19177: WAF :: fetched 1 new logs [06-07-2022 15:48:02]19182: httpd.conf changed. Refreshing watchlist. [06-07-2022 15:50:02]24837: WAF :: fetched 5 new logs [06-07-2022 15:50:02]24842: httpd.conf changed. Refreshing watchlist. [06-07-2022 15:51:01]27537: WAF :: fetched 2 new logs [06-07-2022 15:53:01]561: WAF :: fetched 1 new logs [06-07-2022 15:54:01]3313: httpd.conf changed. Refreshing watchlist. [06-07-2022 15:56:01]8768: WAF :: fetched 1 new logs [06-07-2022 15:58:02]14182: WAF :: fetched 3 new logs [06-07-2022 15:59:02]16832: WAF :: fetched 4 new logs [06-07-2022 16:00:01]19370: WAF :: fetched 5 new logs [06-07-2022 16:02:02]25396: WAF :: fetched 2 new logs [06-07-2022 16:03:02]28183: WAF :: fetched 4 new logs [06-07-2022 16:04:02]30905: WAF :: fetched 1 new logs [06-07-2022 16:05:01]1248: WAF :: fetched 18 new logs [06-07-2022 16:06:02]4076: WAF :: fetched 1 new logs [06-07-2022 16:12:02]20747: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657134722 [06-07-2022 16:12:02]20747: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 16:12:04]20747: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 16:12:05]20747: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-1612/20220706-161202-YsXegpPdCGBengkSJs0TewAAAEE [06-07-2022 16:12:05]20747: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-07-2022 16:12:05]20747: WAF :: fetched 1 new logs [06-07-2022 16:13:01]23514: WAF :: fetched 2 new logs [06-07-2022 16:14:01]26167: WAF :: fetched 1 new logs [06-07-2022 16:15:01]28805: WAF :: fetched 2 new logs [06-07-2022 16:16:02]31560: WAF :: fetched 4 new logs [06-07-2022 16:17:01]1816: WAF :: fetched 6 new logs [06-07-2022 16:18:02]4668: WAF :: fetched 1 new logs [06-07-2022 16:19:01]7367: WAF :: fetched 3 new logs [06-07-2022 16:20:01]10191: WAF :: fetched 3 new logs [06-07-2022 16:21:01]12908: WAF :: fetched 3 new logs [06-07-2022 16:22:01]15580: WAF :: fetched 2 new logs [06-07-2022 16:23:01]18437: WAF :: fetched 1 new logs [06-07-2022 16:24:01]21166: WAF :: fetched 2 new logs [06-07-2022 16:25:01]23821: WAF :: fetched 2 new logs [06-07-2022 16:26:01]26567: WAF :: fetched 5 new logs [06-07-2022 16:27:02]29294: WAF :: fetched 4 new logs [06-07-2022 16:28:02]32023: WAF :: fetched 4 new logs [06-07-2022 16:31:01]7527: WAF :: fetched 1 new logs [06-07-2022 16:32:02]10434: WAF :: fetched 5 new logs [06-07-2022 16:33:01]13220: WAF :: fetched 2 new logs [06-07-2022 16:35:02]18713: WAF :: fetched 8 new logs [06-07-2022 16:36:02]21514: WAF :: fetched 14 new logs [06-07-2022 16:37:01]24164: WAF :: fetched 9 new logs [06-07-2022 16:38:02]26942: WAF :: fetched 11 new logs [06-07-2022 16:39:02]29577: WAF :: fetched 5 new logs [06-07-2022 16:40:02]32223: WAF :: fetched 9 new logs [06-07-2022 16:41:01]2604: WAF :: fetched 8 new logs [06-07-2022 16:41:01]2604: Checking for user cron vulnerabilities [06-07-2022 16:42:02]5267: WAF :: fetched 7 new logs [06-07-2022 16:43:02]8040: WAF :: fetched 10 new logs [06-07-2022 16:44:02]10660: Checking ditributed CMS bruteforce attacks [06-07-2022 16:44:05]10660: WAF :: fetched 7 new logs [06-07-2022 16:45:01]13357: WAF :: fetched 7 new logs [06-07-2022 16:46:01]16084: WAF :: fetched 10 new logs [06-07-2022 16:47:01]18791: WAF :: fetched 12 new logs [06-07-2022 16:48:01]21607: WAF :: fetched 2 new logs [06-07-2022 16:49:02]24320: WAF :: fetched 4 new logs [06-07-2022 16:50:02]27142: WAF :: fetched 7 new logs [06-07-2022 16:51:02]29901: WAF :: fetched 1 new logs [06-07-2022 16:53:01]2918: WAF :: fetched 1 new logs [06-07-2022 16:54:01]5653: WAF :: fetched 1 new logs [06-07-2022 16:55:02]8343: WAF :: fetched 1 new logs [06-07-2022 16:56:01]11068: WAF :: fetched 4 new logs [06-07-2022 16:57:02]13784: WAF :: fetched 1 new logs [06-07-2022 16:59:01]19439: WAF :: fetched 2 new logs [06-07-2022 17:01:01]25129: WAF :: fetched 4 new logs [06-07-2022 17:02:01]27834: WAF :: fetched 1 new logs [06-07-2022 17:03:02]30579: WAF :: fetched 5 new logs [06-07-2022 17:04:01]809: WAF :: fetched 5 new logs [06-07-2022 17:06:01]6269: WAF :: fetched 4 new logs [06-07-2022 17:07:02]9031: WAF :: fetched 10 new logs [06-07-2022 17:08:01]11665: WAF :: fetched 9 new logs [06-07-2022 17:09:02]14511: WAF :: fetched 7 new logs [06-07-2022 17:10:01]17198: WAF :: fetched 6 new logs [06-07-2022 17:11:02]19987: WAF :: fetched 12 new logs [06-07-2022 17:12:01]22735: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657138321 [06-07-2022 17:12:01]22735: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 17:12:03]22735: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 17:12:03]22735: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-1712/20220706-171201-YsXska6F-WMaYu7MaN9A-wAAAAM [06-07-2022 17:12:03]22735: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 17:12:04]22735: WAF :: fetched 204 new logs [06-07-2022 17:13:02]25470: WAF :: fetched 6 new logs [06-07-2022 17:14:01]28205: WAF :: fetched 5 new logs [06-07-2022 17:15:01]30894: WAF :: fetched 6 new logs [06-07-2022 17:16:02]1187: WAF :: fetched 9 new logs [06-07-2022 17:17:01]3881: WAF :: fetched 2 new logs [06-07-2022 17:18:01]6545: WAF :: fetched 2 new logs [06-07-2022 17:20:01]12046: WAF :: fetched 2 new logs [06-07-2022 17:22:01]17516: WAF :: fetched 2 new logs [06-07-2022 17:23:02]20296: WAF :: fetched 2 new logs [06-07-2022 17:25:01]25832: WAF :: fetched 2 new logs [06-07-2022 17:26:01]28615: WAF :: fetched 1 new logs [06-07-2022 17:27:01]31284: WAF :: fetched 1 new logs [06-07-2022 17:28:02]1653: WAF :: fetched 2 new logs [06-07-2022 17:31:01]10197: WAF :: fetched 3 new logs [06-07-2022 17:32:04]12918: WAF :: fetched 2 new logs [06-07-2022 17:34:01]18467: WAF :: fetched 2 new logs [06-07-2022 17:36:01]24039: WAF :: fetched 1 new logs [06-07-2022 17:37:01]26713: WAF :: fetched 4 new logs [06-07-2022 17:40:01]2574: WAF :: fetched 4 new logs [06-07-2022 17:41:01]5402: WAF :: fetched 7 new logs [06-07-2022 17:41:01]5402: Checking for user cron vulnerabilities [06-07-2022 17:42:01]8218: WAF :: fetched 2 new logs [06-07-2022 17:44:01]13673: Checking ditributed CMS bruteforce attacks [06-07-2022 17:45:01]16378: WAF :: fetched 2 new logs [06-07-2022 17:48:01]24611: WAF :: fetched 3 new logs [06-07-2022 17:49:01]27418: WAF :: fetched 1 new logs [06-07-2022 17:50:01]30127: WAF :: fetched 3 new logs [06-07-2022 17:51:01]441: WAF :: fetched 2 new logs [06-07-2022 17:52:02]3221: WAF :: fetched 2 new logs [06-07-2022 18:01:01]28009: WAF :: fetched 1 new logs [06-07-2022 18:03:02]1009: WAF :: fetched 2 new logs [06-07-2022 18:04:02]3765: WAF :: fetched 1 new logs [06-07-2022 18:06:01]9179: WAF :: fetched 1 new logs [06-07-2022 18:07:02]11887: WAF :: fetched 1 new logs [06-07-2022 18:10:01]20147: WAF :: fetched 5 new logs [06-07-2022 18:11:01]22971: WAF :: fetched 3 new logs [06-07-2022 18:12:01]25694: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657141921 [06-07-2022 18:12:01]25694: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 18:12:03]25694: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 18:12:03]25694: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-1812/20220706-181201-YsX6odp0H2sSiXkRPKCTHwAAAAY [06-07-2022 18:12:03]25694: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 18:12:03]25694: WAF :: fetched 1 new logs [06-07-2022 18:14:01]31412: WAF :: fetched 3 new logs [06-07-2022 18:15:01]1713: WAF :: fetched 2 new logs [06-07-2022 18:16:01]4573: WAF :: fetched 2 new logs [06-07-2022 18:17:01]7259: WAF :: fetched 2 new logs [06-07-2022 18:18:01]9944: WAF :: fetched 2 new logs [06-07-2022 18:20:01]15395: WAF :: fetched 4 new logs [06-07-2022 18:21:01]18334: WAF :: fetched 2 new logs [06-07-2022 18:22:02]21093: WAF :: fetched 2 new logs [06-07-2022 18:24:02]26608: WAF :: fetched 2 new logs [06-07-2022 18:28:02]4950: WAF :: fetched 14 new logs [06-07-2022 18:30:02]10467: WAF :: fetched 1 new logs [06-07-2022 18:31:02]13145: WAF :: fetched 1 new logs [06-07-2022 18:36:01]26792: WAF :: fetched 1 new logs [06-07-2022 18:37:01]29460: WAF :: fetched 3 new logs [06-07-2022 18:38:01]32156: WAF :: fetched 1 new logs [06-07-2022 18:39:01]2514: WAF :: fetched 2 new logs [06-07-2022 18:40:02]5238: WAF :: fetched 1 new logs [06-07-2022 18:41:02]8007: Checking for user cron vulnerabilities [06-07-2022 18:42:02]10757: WAF :: fetched 5 new logs [06-07-2022 18:43:02]13482: WAF :: fetched 8 new logs [06-07-2022 18:44:01]16227: Checking ditributed CMS bruteforce attacks [06-07-2022 18:44:01]16227: WAF :: fetched 1 new logs [06-07-2022 18:45:02]19021: WAF :: fetched 2 new logs [06-07-2022 18:46:02]21732: WAF :: fetched 2 new logs [06-07-2022 18:47:01]24367: WAF :: fetched 2 new logs [06-07-2022 18:48:02]27057: WAF :: fetched 2 new logs [06-07-2022 18:49:01]29768: WAF :: fetched 4 new logs [06-07-2022 18:50:01]32409: WAF :: fetched 7 new logs [06-07-2022 18:51:01]2757: WAF :: fetched 2 new logs [06-07-2022 18:52:01]5398: WAF :: fetched 10 new logs [06-07-2022 18:53:01]8081: WAF :: fetched 4 new logs [06-07-2022 18:54:01]10842: WAF :: fetched 5 new logs [06-07-2022 18:55:02]13487: WAF :: fetched 2 new logs [06-07-2022 18:56:02]16147: WAF :: fetched 2 new logs [06-07-2022 18:57:02]18917: WAF :: fetched 11 new logs [06-07-2022 18:58:02]21550: WAF :: fetched 17 new logs [06-07-2022 19:00:01]26751: WAF :: fetched 2 new logs [06-07-2022 19:01:01]29944: WAF :: fetched 1 new logs [06-07-2022 19:04:01]5774: WAF :: fetched 1 new logs [06-07-2022 19:06:01]11192: WAF :: fetched 4 new logs [06-07-2022 19:07:01]13854: WAF :: fetched 8 new logs [06-07-2022 19:09:01]19303: WAF :: fetched 3 new logs [06-07-2022 19:11:01]24681: WAF :: fetched 2 new logs [06-07-2022 19:12:01]27352: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657145521 [06-07-2022 19:12:01]27352: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 19:12:03]27352: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 19:12:04]27352: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-1912/20220706-191201-YsYIsa_NLcNAYx0OHaOCIgAAACk [06-07-2022 19:12:04]27352: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 19:12:04]27352: WAF :: fetched 1 new logs [06-07-2022 19:13:02]29994: WAF :: fetched 3 new logs [06-07-2022 19:14:01]32694: WAF :: fetched 1 new logs [06-07-2022 19:16:03]5682: WAF :: fetched 8 new logs [06-07-2022 19:17:01]8375: WAF :: fetched 12 new logs [06-07-2022 19:18:02]11061: WAF :: fetched 1 new logs [06-07-2022 19:22:02]22032: WAF :: fetched 2 new logs [06-07-2022 19:24:01]27365: WAF :: fetched 1 new logs [06-07-2022 19:25:01]29999: WAF :: fetched 1 new logs [06-07-2022 19:28:01]5569: WAF :: fetched 1 new logs [06-07-2022 19:31:02]13717: WAF :: fetched 7 new logs [06-07-2022 19:32:02]16363: WAF :: fetched 8 new logs [06-07-2022 19:33:02]19110: WAF :: fetched 4 new logs [06-07-2022 19:34:01]21813: WAF :: fetched 11 new logs [06-07-2022 19:35:02]24493: WAF :: fetched 6 new logs [06-07-2022 19:36:01]27153: WAF :: fetched 8 new logs [06-07-2022 19:37:02]29895: WAF :: fetched 9 new logs [06-07-2022 19:38:01]32511: WAF :: fetched 7 new logs [06-07-2022 19:39:02]2900: WAF :: fetched 8 new logs [06-07-2022 19:40:02]5504: WAF :: fetched 3 new logs [06-07-2022 19:41:01]8202: WAF :: fetched 6 new logs [06-07-2022 19:41:01]8202: Checking for user cron vulnerabilities [06-07-2022 19:42:03]10829: WAF :: fetched 1 new logs [06-07-2022 19:44:01]16138: Checking ditributed CMS bruteforce attacks [06-07-2022 19:44:01]16138: WAF :: fetched 1 new logs [06-07-2022 19:45:01]: Checking for definition updates [06-07-2022 19:45:06]18895: Updated virus defnition : malware.expert.ndb [06-07-2022 19:46:01]21554: WAF :: fetched 14 new logs [06-07-2022 19:49:01]29524: WAF :: fetched 3 new logs [06-07-2022 19:50:02]32149: WAF :: fetched 2 new logs [06-07-2022 19:52:02]5172: WAF :: fetched 1 new logs [06-07-2022 19:55:01]13238: WAF :: fetched 1 new logs [06-07-2022 19:57:01]18713: WAF :: fetched 5 new logs [06-07-2022 19:58:02]21385: WAF :: fetched 3 new logs [06-07-2022 19:59:01]24058: WAF :: fetched 3 new logs [06-07-2022 20:00:02]26462: WAF :: fetched 1 new logs [06-07-2022 20:04:01]5259: WAF :: fetched 2 new logs [06-07-2022 20:05:01]7936: WAF :: fetched 1 new logs [06-07-2022 20:06:01]10636: WAF :: fetched 3 new logs [06-07-2022 20:07:01]13286: WAF :: fetched 3 new logs [06-07-2022 20:08:03]15891: WAF :: fetched 3 new logs [06-07-2022 20:09:02]18744: WAF :: fetched 5 new logs [06-07-2022 20:11:01]24148: WAF :: fetched 68 new logs [06-07-2022 20:12:02]26854: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657149122 [06-07-2022 20:12:02]26854: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 20:12:04]26854: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 20:12:04]26854: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-2012/20220706-201202-YsYWwtGaeV1hMjKfqGBcQwAAAEQ [06-07-2022 20:12:04]26854: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 20:12:04]26854: WAF :: fetched 83 new logs [06-07-2022 20:13:02]29523: WAF :: fetched 64 new logs [06-07-2022 20:14:02]32294: WAF :: fetched 59 new logs [06-07-2022 20:15:01]2597: WAF :: fetched 80 new logs [06-07-2022 20:16:02]5408: WAF :: fetched 80 new logs [06-07-2022 20:17:01]8086: WAF :: fetched 76 new logs [06-07-2022 20:18:01]10804: WAF :: fetched 74 new logs [06-07-2022 20:19:02]13602: WAF :: fetched 82 new logs [06-07-2022 20:20:02]16331: WAF :: fetched 85 new logs [06-07-2022 20:21:01]19113: WAF :: fetched 23 new logs [06-07-2022 20:22:01]21752: WAF :: fetched 1 new logs [06-07-2022 20:24:02]27110: WAF :: fetched 2 new logs [06-07-2022 20:25:01]29748: WAF :: fetched 1 new logs [06-07-2022 20:26:03]32462: WAF :: fetched 1 new logs [06-07-2022 20:27:01]2674: WAF :: fetched 2 new logs [06-07-2022 20:28:01]5330: WAF :: fetched 5 new logs [06-07-2022 20:29:02]8054: WAF :: fetched 2 new logs [06-07-2022 20:30:01]10720: WAF :: fetched 1 new logs [06-07-2022 20:32:02]16113: WAF :: fetched 2 new logs [06-07-2022 20:33:01]18905: WAF :: fetched 5 new logs [06-07-2022 20:34:01]21692: WAF :: fetched 1 new logs [06-07-2022 20:35:03]24382: WAF :: fetched 3 new logs [06-07-2022 20:36:01]27085: WAF :: fetched 5 new logs [06-07-2022 20:37:02]29786: WAF :: fetched 3 new logs [06-07-2022 20:39:02]2771: WAF :: fetched 2 new logs [06-07-2022 20:41:02]8165: WAF :: fetched 1 new logs [06-07-2022 20:41:02]8165: Checking for user cron vulnerabilities [06-07-2022 20:42:01]10928: WAF :: fetched 2 new logs [06-07-2022 20:44:01]16346: Checking ditributed CMS bruteforce attacks [06-07-2022 20:44:02]16346: WAF :: fetched 2 new logs [06-07-2022 20:46:02]21811: WAF :: fetched 4 new logs [06-07-2022 20:47:02]24400: WAF :: fetched 6 new logs [06-07-2022 20:48:01]26813: WAF :: fetched 2 new logs [06-07-2022 20:49:01]29812: WAF :: fetched 3 new logs [06-07-2022 20:50:01]32443: WAF :: fetched 4 new logs [06-07-2022 20:51:02]2791: WAF :: fetched 3 new logs [06-07-2022 20:52:01]5440: WAF :: fetched 1 new logs [06-07-2022 20:53:01]8089: WAF :: fetched 2 new logs [06-07-2022 20:55:01]13519: WAF :: fetched 2 new logs [06-07-2022 20:57:01]18967: WAF :: fetched 1 new logs [06-07-2022 20:58:01]21601: WAF :: fetched 1 new logs [06-07-2022 20:59:02]24380: WAF :: fetched 1 new logs [06-07-2022 21:01:01]29876: WAF :: fetched 1 new logs [06-07-2022 21:02:02]32646: WAF :: fetched 3 new logs [06-07-2022 21:07:02]13700: WAF :: fetched 2 new logs [06-07-2022 21:08:01]16333: WAF :: fetched 3 new logs [06-07-2022 21:09:02]19248: WAF :: fetched 1 new logs [06-07-2022 21:11:02]24627: WAF :: fetched 2 new logs [06-07-2022 21:12:02]27238: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657152722 [06-07-2022 21:12:02]27238: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 21:12:04]27238: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 21:12:04]27238: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-2112/20220706-211202-YsYk0raYHN3QGnvuYoY7DAAAABo [06-07-2022 21:12:04]27238: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 21:12:04]27238: WAF :: fetched 11 new logs [06-07-2022 21:16:01]5643: WAF :: fetched 3 new logs [06-07-2022 21:17:02]8310: WAF :: fetched 1 new logs [06-07-2022 21:18:01]10930: WAF :: fetched 3 new logs [06-07-2022 21:19:01]13688: WAF :: fetched 1 new logs [06-07-2022 21:23:01]24494: WAF :: fetched 2 new logs [06-07-2022 21:26:02]326: WAF :: fetched 1 new logs [06-07-2022 21:27:01]2979: WAF :: fetched 3 new logs [06-07-2022 21:28:02]5716: WAF :: fetched 4 new logs [06-07-2022 21:29:01]8434: WAF :: fetched 1 new logs [06-07-2022 21:30:02]11087: WAF :: fetched 1 new logs [06-07-2022 21:33:02]19211: WAF :: fetched 3 new logs [06-07-2022 21:35:02]24656: WAF :: fetched 2 new logs [06-07-2022 21:37:01]30055: WAF :: fetched 3 new logs [06-07-2022 21:39:01]3115: WAF :: fetched 1 new logs [06-07-2022 21:40:02]5812: WAF :: fetched 1 new logs [06-07-2022 21:41:01]8416: WAF :: fetched 3 new logs [06-07-2022 21:41:01]8416: Checking for user cron vulnerabilities [06-07-2022 21:42:01]11197: WAF :: fetched 4 new logs [06-07-2022 21:43:01]13828: WAF :: fetched 1 new logs [06-07-2022 21:44:01]16578: Checking ditributed CMS bruteforce attacks [06-07-2022 21:45:01]19309: WAF :: fetched 2 new logs [06-07-2022 21:46:04]22076: WAF :: fetched 4 new logs [06-07-2022 21:47:01]24756: WAF :: fetched 3 new logs [06-07-2022 21:48:02]27497: WAF :: fetched 2 new logs [06-07-2022 21:49:01]30204: WAF :: fetched 2 new logs [06-07-2022 21:50:02]413: WAF :: fetched 5 new logs [06-07-2022 21:51:01]2928: WAF :: fetched 1 new logs [06-07-2022 21:52:01]6020: WAF :: fetched 2 new logs [06-07-2022 21:53:01]8719: WAF :: fetched 2 new logs [06-07-2022 21:56:01]16847: WAF :: fetched 2 new logs [06-07-2022 21:57:02]19639: WAF :: fetched 3 new logs [06-07-2022 21:59:02]25035: WAF :: fetched 1 new logs [06-07-2022 22:00:01]27480: WAF :: fetched 4 new logs [06-07-2022 22:01:01]30726: WAF :: fetched 2 new logs [06-07-2022 22:02:02]1060: WAF :: fetched 4 new logs [06-07-2022 22:03:02]3733: WAF :: fetched 1 new logs [06-07-2022 22:04:01]6339: WAF :: fetched 1 new logs [06-07-2022 22:05:02]9098: WAF :: fetched 1 new logs [06-07-2022 22:06:01]11788: WAF :: fetched 1 new logs [06-07-2022 22:07:01]14456: WAF :: fetched 2 new logs [06-07-2022 22:07:12]14459: Performing Domain reputation checks [06-07-2022 22:08:02]17143: WAF :: fetched 1 new logs [06-07-2022 22:09:01]19864: WAF :: fetched 1 new logs [06-07-2022 22:11:01]25371: WAF :: fetched 1 new logs [06-07-2022 22:12:01]28231: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657156321 [06-07-2022 22:12:01]28231: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 22:12:03]28231: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 22:12:04]28231: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-2212/20220706-221201-YsYy4ROaexNHe3xoA-aE0gAAACY [06-07-2022 22:12:04]28231: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 22:12:05]28231: WAF :: fetched 14 new logs [06-07-2022 22:13:02]30893: WAF :: fetched 1 new logs [06-07-2022 22:16:01]6643: WAF :: fetched 4 new logs [06-07-2022 22:17:02]9351: WAF :: fetched 24 new logs [06-07-2022 22:20:02]17501: WAF :: fetched 5 new logs [06-07-2022 22:22:01]23111: WAF :: fetched 1 new logs [06-07-2022 22:23:01]25757: WAF :: fetched 19 new logs [06-07-2022 22:24:02]28468: WAF :: fetched 30 new logs [06-07-2022 22:25:01]31230: WAF :: fetched 19 new logs [06-07-2022 22:26:01]1536: WAF :: fetched 11 new logs [06-07-2022 22:28:01]7020: WAF :: fetched 4 new logs [06-07-2022 22:29:02]9730: WAF :: fetched 6 new logs [06-07-2022 22:30:01]12412: WAF :: fetched 3 new logs [06-07-2022 22:31:01]15170: WAF :: fetched 4 new logs [06-07-2022 22:32:01]18368: WAF :: fetched 3 new logs [06-07-2022 22:33:01]21054: WAF :: fetched 3 new logs [06-07-2022 22:34:01]23692: WAF :: fetched 2 new logs [06-07-2022 22:35:02]26435: WAF :: fetched 4 new logs [06-07-2022 22:36:01]29168: WAF :: fetched 2 new logs [06-07-2022 22:37:01]31859: WAF :: fetched 2 new logs [06-07-2022 22:38:01]2147: WAF :: fetched 2 new logs [06-07-2022 22:39:02]4729: WAF :: fetched 7 new logs [06-07-2022 22:40:01]7532: WAF :: fetched 11 new logs [06-07-2022 22:41:02]10246: WAF :: fetched 7 new logs [06-07-2022 22:41:02]10246: Checking for user cron vulnerabilities [06-07-2022 22:42:01]12856: WAF :: fetched 9 new logs [06-07-2022 22:43:01]15522: WAF :: fetched 9 new logs [06-07-2022 22:44:01]18330: Checking ditributed CMS bruteforce attacks [06-07-2022 22:44:02]18330: WAF :: fetched 10 new logs [06-07-2022 22:45:02]21100: WAF :: fetched 5 new logs [06-07-2022 22:46:01]23773: WAF :: fetched 7 new logs [06-07-2022 22:47:01]26459: WAF :: fetched 2 new logs [06-07-2022 22:52:02]7510: WAF :: fetched 1 new logs [06-07-2022 22:55:01]15547: WAF :: fetched 5 new logs [06-07-2022 22:57:01]21048: WAF :: fetched 1 new logs [06-07-2022 22:58:02]23725: WAF :: fetched 1 new logs [06-07-2022 22:59:01]26346: WAF :: fetched 5 new logs [06-07-2022 23:01:01]32111: WAF :: fetched 6 new logs [06-07-2022 23:02:02]2525: WAF :: fetched 4 new logs [06-07-2022 23:03:01]5075: WAF :: fetched 3 new logs [06-07-2022 23:04:01]7911: WAF :: fetched 4 new logs [06-07-2022 23:08:08]16120: Performed RBL check for 23.111.136.34. [06-07-2022 23:09:01]21432: WAF :: fetched 5 new logs [06-07-2022 23:10:01]24253: WAF :: fetched 1 new logs [06-07-2022 23:11:02]27030: WAF :: fetched 8 new logs [06-07-2022 23:12:02]29784: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657159922 [06-07-2022 23:12:02]29784: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-07-2022 23:12:04]29784: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-07-2022 23:12:04]29784: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220706/20220706-2312/20220706-231202-YsZA8vkgYqF-kNU30UvDtAAAABQ [06-07-2022 23:12:04]29784: WAF :: No suitable log file found. Using SQLite.. [06-07-2022 23:12:04]29784: WAF :: fetched 6 new logs [06-07-2022 23:13:03]32449: WAF :: fetched 2 new logs [06-07-2022 23:14:02]2760: WAF :: fetched 2 new logs [06-07-2022 23:16:01]15565: WAF :: fetched 5 new logs [06-07-2022 23:18:01]22225: WAF :: fetched 3 new logs [06-07-2022 23:19:02]25547: WAF :: fetched 5 new logs [06-07-2022 23:23:01]6494: WAF :: fetched 4 new logs [06-07-2022 23:24:01]9785: WAF :: fetched 6 new logs [06-07-2022 23:25:01]13099: WAF :: fetched 2 new logs [06-07-2022 23:26:02]18291: WAF :: fetched 3 new logs [06-07-2022 23:27:01]22028: WAF :: fetched 3 new logs [06-07-2022 23:28:02]25307: WAF :: fetched 3 new logs [06-07-2022 23:29:01]28630: WAF :: fetched 2 new logs [06-07-2022 23:31:02]2941: WAF :: fetched 3 new logs [06-07-2022 23:33:02]9235: WAF :: fetched 4 new logs [06-07-2022 23:35:02]15851: WAF :: fetched 3 new logs [06-07-2022 23:38:02]26265: WAF :: fetched 3 new logs [06-07-2022 23:41:02]4006: Checking for user cron vulnerabilities [06-07-2022 23:42:01]7264: WAF :: fetched 1 new logs [06-07-2022 23:43:01]10559: WAF :: fetched 1 new logs [06-07-2022 23:44:02]13807: Checking ditributed CMS bruteforce attacks [06-07-2022 23:44:02]13807: WAF :: fetched 1 new logs [06-07-2022 23:45:01]17182: WAF :: fetched 1 new logs [06-07-2022 23:46:01]20611: WAF :: fetched 2 new logs [06-07-2022 23:49:01]31035: WAF :: fetched 4 new logs [06-07-2022 23:50:02]2134: WAF :: fetched 2 new logs [06-07-2022 23:51:01]5601: WAF :: fetched 6 new logs [06-07-2022 23:52:01]8915: WAF :: fetched 4 new logs [06-07-2022 23:53:02]12336: WAF :: fetched 6 new logs [06-07-2022 23:54:01]15656: WAF :: fetched 1 new logs [06-07-2022 23:55:01]19261: WAF :: fetched 6 new logs [06-07-2022 23:55:01]19267: httpd.conf changed. Refreshing watchlist. [06-07-2022 23:56:02]22603: WAF :: fetched 2 new logs [06-07-2022 23:58:01]29714: WAF :: fetched 4 new logs [06-07-2022 23:59:02]618: WAF :: fetched 3 new logs [07-07-2022 00:00:01]3959: WAF :: fetched 1 new logs [07-07-2022 00:01:01]7915: WAF :: fetched 2 new logs [07-07-2022 00:01:01]7916: httpd.conf changed. Refreshing watchlist. [07-07-2022 00:01:04]7915: Sending daily report for July 7, 2022 [07-07-2022 00:02:02]11451: WAF :: fetched 2 new logs [07-07-2022 00:02:02]11454: httpd.conf changed. Refreshing watchlist. [07-07-2022 00:03:01]14842: httpd.conf changed. Refreshing watchlist. [07-07-2022 00:04:02]18271: WAF :: fetched 1 new logs [07-07-2022 00:05:01]21635: WAF :: fetched 3 new logs [07-07-2022 00:05:02]21635: Deleted 0 entries older than 6 MONTH from scanner_logs [07-07-2022 00:05:02]21635: Deleted 0 files from Quarantine [07-07-2022 00:06:01]25067: WAF :: fetched 2 new logs [07-07-2022 00:07:02]28948: WAF :: fetched 4 new logs [07-07-2022 00:08:01]32191: WAF :: fetched 4 new logs [07-07-2022 00:09:01]3062: WAF :: fetched 2 new logs [07-07-2022 00:10:02]6644: WAF :: fetched 3 new logs [07-07-2022 00:12:02]13317: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657163522 [07-07-2022 00:12:02]13317: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 00:12:04]13317: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 00:12:04]13317: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-0012/20220707-001202-YsZPAvldrl1sbAP2JTT6RwAAAAA [07-07-2022 00:12:04]13317: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-07-2022 00:12:05]13317: WAF :: fetched 1 new logs [07-07-2022 00:13:02]16647: WAF :: fetched 3 new logs [07-07-2022 00:17:02]30891: WAF :: fetched 1 new logs [07-07-2022 00:18:01]1821: WAF :: fetched 1 new logs [07-07-2022 00:22:02]15627: WAF :: fetched 1 new logs [07-07-2022 00:23:01]18994: WAF :: fetched 1 new logs [07-07-2022 00:24:02]22313: WAF :: fetched 1 new logs [07-07-2022 00:25:02]25708: WAF :: fetched 4 new logs [07-07-2022 00:27:01]32319: WAF :: fetched 1 new logs [07-07-2022 00:28:02]3799: WAF :: fetched 1 new logs [07-07-2022 00:30:01]10099: WAF :: fetched 1 new logs [07-07-2022 00:33:02]20122: WAF :: fetched 1 new logs [07-07-2022 00:35:01]26773: WAF :: fetched 1 new logs [07-07-2022 00:38:01]4882: WAF :: fetched 3 new logs [07-07-2022 00:41:02]15097: WAF :: fetched 2 new logs [07-07-2022 00:41:02]15097: Checking for user cron vulnerabilities [07-07-2022 00:42:02]18478: WAF :: fetched 3 new logs [07-07-2022 00:43:01]21775: WAF :: fetched 2 new logs [07-07-2022 00:44:02]25134: Checking ditributed CMS bruteforce attacks [07-07-2022 00:44:02]25134: WAF :: fetched 4 new logs [07-07-2022 00:45:01]: Checking for software updates [07-07-2022 00:49:02]10027: WAF :: fetched 1 new logs [07-07-2022 00:51:01]16793: WAF :: fetched 1 new logs [07-07-2022 00:58:02]8299: WAF :: fetched 1 new logs [07-07-2022 01:05:02]1204: WAF :: fetched 1 new logs [07-07-2022 01:06:01]4892: WAF :: fetched 1 new logs [07-07-2022 01:09:01]15664: WAF :: fetched 2 new logs [07-07-2022 01:10:02]19231: WAF :: fetched 3 new logs [07-07-2022 01:12:01]26016: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657167121 [07-07-2022 01:12:01]26016: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 01:12:03]26016: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 01:12:04]26016: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-0112/20220707-011201-YsZdEelpmqst5wEzVFJNqgAAAAI [07-07-2022 01:12:04]26016: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-07-2022 01:12:04]26016: WAF :: fetched 1 new logs [07-07-2022 01:15:03]4306: WAF :: fetched 1 new logs [07-07-2022 01:17:01]11215: WAF :: fetched 2 new logs [07-07-2022 01:24:02]4159: WAF :: fetched 1 new logs [07-07-2022 01:26:01]10909: WAF :: fetched 3 new logs [07-07-2022 01:27:02]14487: WAF :: fetched 1 new logs [07-07-2022 01:28:01]18035: WAF :: fetched 1 new logs [07-07-2022 01:33:02]3236: WAF :: fetched 1 new logs [07-07-2022 01:35:02]10302: WAF :: fetched 1 new logs [07-07-2022 01:37:02]17508: WAF :: fetched 3 new logs [07-07-2022 01:41:01]31927: Checking for user cron vulnerabilities [07-07-2022 01:43:02]6361: WAF :: fetched 1 new logs [07-07-2022 01:44:01]9964: Checking ditributed CMS bruteforce attacks [07-07-2022 01:44:01]9964: WAF :: fetched 1 new logs [07-07-2022 01:45:02]: Checking for definition updates [07-07-2022 01:47:02]20669: WAF :: fetched 1 new logs [07-07-2022 01:52:01]10307: WAF :: fetched 1 new logs [07-07-2022 01:53:02]13575: WAF :: fetched 2 new logs [07-07-2022 01:59:02]2364: WAF :: fetched 1 new logs [07-07-2022 02:00:01]6003: WAF :: fetched 3 new logs [07-07-2022 02:03:01]16546: WAF :: fetched 1 new logs [07-07-2022 02:12:02]15805: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657170722 [07-07-2022 02:12:02]15805: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 02:12:04]15805: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 02:12:04]15805: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-0212/20220707-021202-YsZrIplXbwFwulALvjT32gAAAAU [07-07-2022 02:12:04]15805: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-07-2022 02:12:04]15805: WAF :: fetched 2 new logs [07-07-2022 02:13:01]19232: WAF :: fetched 1 new logs [07-07-2022 02:22:02]17951: WAF :: fetched 1 new logs [07-07-2022 02:35:02]29803: WAF :: fetched 1 new logs [07-07-2022 02:41:02]18606: Checking for user cron vulnerabilities [07-07-2022 02:44:01]28410: Checking ditributed CMS bruteforce attacks [07-07-2022 02:48:01]9801: WAF :: fetched 1 new logs [07-07-2022 02:51:01]20365: WAF :: fetched 1 new logs [07-07-2022 02:53:02]27197: WAF :: fetched 3 new logs [07-07-2022 02:53:02]27194: Updated license status via CDN [07-07-2022 02:59:01]15543: WAF :: fetched 1 new logs [07-07-2022 03:00:19]19337: Found and updated 32 CMS installations [07-07-2022 03:01:50]19337: Wordpress installation #21 easy2speak.com.br has errors [07-07-2022 03:03:44]19337: Sending CMS version vulnerability report emails to cpanel users [07-07-2022 03:03:47]19337: Checking wordpress installations for suspicious directories [07-07-2022 03:04:36]31445: Sending CMS version vulnerability report emails to cpanel users [07-07-2022 03:04:39]31445: Checking wordpress installations for suspicious directories [07-07-2022 03:07:02]13534: WAF :: fetched 2 new logs [07-07-2022 03:12:01]31581: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657174321 [07-07-2022 03:12:01]31581: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 03:12:03]31581: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 03:12:05]31581: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-0312/20220707-031201-YsZ5Mf73wjE8gv9AYzoAWgAAAAg [07-07-2022 03:12:05]31581: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 03:12:05]31581: WAF :: fetched 73 new logs [07-07-2022 03:21:02]31618: WAF :: fetched 1 new logs [07-07-2022 03:33:01]12153: WAF :: fetched 3 new logs [07-07-2022 03:34:02]15569: WAF :: fetched 1 new logs [07-07-2022 03:35:01]19070: WAF :: fetched 1 new logs [07-07-2022 03:41:01]7440: Checking for user cron vulnerabilities [07-07-2022 03:43:01]14659: WAF :: fetched 2 new logs [07-07-2022 03:44:01]15740: Checking ditributed CMS bruteforce attacks [07-07-2022 03:47:02]31204: WAF :: fetched 1 new logs [07-07-2022 03:55:01]27259: WAF :: fetched 2 new logs [07-07-2022 03:57:01]1907: WAF :: fetched 1 new logs [07-07-2022 04:01:02]15816: WAF :: fetched 1 new logs [07-07-2022 04:11:02]18123: WAF :: fetched 1 new logs [07-07-2022 04:12:01]21533: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657177921 [07-07-2022 04:12:01]21533: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 04:12:03]21533: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 04:12:05]21533: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-0412/20220707-041201-YsaHQWnPKFgleQ5Gav_2kAAAAAI [07-07-2022 04:12:05]21533: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-07-2022 04:12:05]21533: WAF :: fetched 1 new logs [07-07-2022 04:13:02]25366: WAF :: fetched 1 new logs [07-07-2022 04:15:02]32307: WAF :: fetched 1 new logs [07-07-2022 04:18:02]10217: WAF :: fetched 1 new logs [07-07-2022 04:31:01]22519: WAF :: fetched 2 new logs [07-07-2022 04:36:02]7677: WAF :: fetched 2 new logs [07-07-2022 04:37:02]11156: WAF :: fetched 1 new logs [07-07-2022 04:39:02]18149: WAF :: fetched 1 new logs [07-07-2022 04:41:01]25037: Checking for user cron vulnerabilities [07-07-2022 04:44:02]3382: Checking ditributed CMS bruteforce attacks [07-07-2022 04:53:01]2034: WAF :: fetched 1 new logs [07-07-2022 05:00:02]26104: WAF :: fetched 1 new logs [07-07-2022 05:01:42]29914: Starting daily scan on files updated in last 24 hrs [07-07-2022 05:03:02]4287: WAF :: fetched 3 new logs [07-07-2022 05:04:02]7920: WAF :: fetched 1 new logs [07-07-2022 05:05:01]11755: WAF :: fetched 2 new logs [07-07-2022 05:08:02]22183: WAF :: fetched 1 new logs [07-07-2022 05:12:02]3161: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657181522 [07-07-2022 05:12:02]3161: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 05:12:04]3161: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 05:12:04]3161: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-0512/20220707-051202-YsaVUi1w-0nUhTv4aXBJcQAAAAU [07-07-2022 05:12:04]3161: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 05:12:04]3161: WAF :: fetched 18 new logs [07-07-2022 05:17:01]21079: WAF :: fetched 1 new logs [07-07-2022 05:19:01]27427: WAF :: fetched 1 new logs [07-07-2022 05:31:02]4183: WAF :: fetched 1 new logs [07-07-2022 05:33:02]11085: WAF :: fetched 1 new logs [07-07-2022 05:40:01]3019: WAF :: fetched 1 new logs [07-07-2022 05:41:02]6581: Checking for user cron vulnerabilities [07-07-2022 05:44:01]16897: Checking ditributed CMS bruteforce attacks [07-07-2022 05:45:02]20411: WAF :: fetched 1 new logs [07-07-2022 05:47:01]27924: WAF :: fetched 1 new logs [07-07-2022 05:53:02]16080: WAF :: fetched 1 new logs [07-07-2022 05:54:01]19644: WAF :: fetched 1 new logs [07-07-2022 05:56:01]26923: WAF :: fetched 1 new logs [07-07-2022 05:57:01]30466: WAF :: fetched 3 new logs [07-07-2022 06:05:02]25703: WAF :: fetched 1 new logs [07-07-2022 06:12:01]17885: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657185121 [07-07-2022 06:12:01]17885: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 06:12:03]17885: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 06:12:05]17885: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-0612/20220707-061201-YsajYd370m6TsjW7ISw95QAAAAQ [07-07-2022 06:12:05]17885: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 06:12:05]17885: WAF :: fetched 1 new logs [07-07-2022 06:14:01]24770: WAF :: fetched 1 new logs [07-07-2022 06:25:01]30295: WAF :: fetched 1 new logs [07-07-2022 06:40:02]18368: WAF :: fetched 4 new logs [07-07-2022 06:41:01]21805: Checking for user cron vulnerabilities [07-07-2022 06:42:01]25086: WAF :: fetched 1 new logs [07-07-2022 06:43:01]28564: WAF :: fetched 1 new logs [07-07-2022 06:44:01]31892: Checking ditributed CMS bruteforce attacks [07-07-2022 06:45:02]2908: WAF :: fetched 1 new logs [07-07-2022 06:50:02]20716: WAF :: fetched 1 new logs [07-07-2022 06:59:02]19636: WAF :: fetched 1 new logs [07-07-2022 07:03:01]1092: WAF :: fetched 1 new logs [07-07-2022 07:04:01]4594: WAF :: fetched 1 new logs [07-07-2022 07:09:02]22220: WAF :: fetched 1 new logs [07-07-2022 07:12:02]32007: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657188722 [07-07-2022 07:12:02]32007: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 07:12:04]32007: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 07:12:05]32007: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-0712/20220707-071202-YsaxcrbafySGjzVemGQBYAAAAAM [07-07-2022 07:12:05]32007: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 07:12:05]32007: WAF :: fetched 2 new logs [07-07-2022 07:14:02]6454: WAF :: fetched 1 new logs [07-07-2022 07:17:01]16645: WAF :: fetched 1 new logs [07-07-2022 07:27:01]19040: WAF :: fetched 1 new logs [07-07-2022 07:28:01]22912: WAF :: fetched 1 new logs [07-07-2022 07:30:03]29865: WAF :: fetched 1 new logs [07-07-2022 07:33:01]7914: WAF :: fetched 1 new logs [07-07-2022 07:39:01]28869: WAF :: fetched 1 new logs [07-07-2022 07:41:02]3253: WAF :: fetched 2 new logs [07-07-2022 07:41:02]3253: Checking for user cron vulnerabilities [07-07-2022 07:44:01]13437: Checking ditributed CMS bruteforce attacks [07-07-2022 07:45:01]: Checking for definition updates [07-07-2022 07:45:01]16846: WAF :: fetched 1 new logs [07-07-2022 07:52:02]8833: WAF :: fetched 1 new logs [07-07-2022 08:01:02]7916: WAF :: fetched 1 new logs [07-07-2022 08:12:02]13524: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657192322 [07-07-2022 08:12:02]13524: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 08:12:04]13524: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 08:12:05]13524: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-0812/20220707-081202-Ysa_gh-sZdBgGNVS14QqvAAAAAE [07-07-2022 08:12:05]13524: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 08:20:01]9575: WAF :: fetched 3 new logs [07-07-2022 08:21:01]13108: WAF :: fetched 1 new logs [07-07-2022 08:23:01]20026: WAF :: fetched 1 new logs [07-07-2022 08:41:01]18740: Checking for user cron vulnerabilities [07-07-2022 08:44:01]29063: Checking ditributed CMS bruteforce attacks [07-07-2022 08:45:02]32463: WAF :: fetched 1 new logs [07-07-2022 08:46:01]3696: WAF :: fetched 1 new logs [07-07-2022 08:47:02]7107: WAF :: fetched 1 new logs [07-07-2022 08:49:02]14026: WAF :: fetched 1 new logs [07-07-2022 08:52:02]25205: WAF :: fetched 1 new logs [07-07-2022 08:59:01]16741: WAF :: fetched 4 new logs [07-07-2022 09:12:02]30355: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657195922 [07-07-2022 09:12:02]30355: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 09:12:04]30355: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 09:12:05]30355: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-0912/20220707-091202-YsbNkoSRgOlyUD4qUrHgqAAAAAY [07-07-2022 09:12:05]30355: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 09:12:05]30355: WAF :: fetched 1 new logs [07-07-2022 09:18:01]18844: WAF :: fetched 1 new logs [07-07-2022 09:22:01]776: WAF :: fetched 1 new logs [07-07-2022 09:27:02]18452: WAF :: fetched 1 new logs [07-07-2022 09:30:01]28668: WAF :: fetched 1 new logs [07-07-2022 09:34:02]10834: WAF :: fetched 3 new logs [07-07-2022 09:41:01]2551: Checking for user cron vulnerabilities [07-07-2022 09:42:02]6625: WAF :: fetched 1 new logs [07-07-2022 09:43:01]9959: WAF :: fetched 1 new logs [07-07-2022 09:44:01]13535: Checking ditributed CMS bruteforce attacks [07-07-2022 09:46:01]20569: WAF :: fetched 1 new logs [07-07-2022 09:50:02]6222: WAF :: fetched 2 new logs [07-07-2022 09:51:01]11650: WAF :: fetched 1 new logs [07-07-2022 09:57:01]8762: WAF :: fetched 1 new logs [07-07-2022 09:59:01]15575: WAF :: fetched 1 new logs [07-07-2022 10:00:02]18962: WAF :: fetched 2 new logs [07-07-2022 10:02:02]27189: WAF :: fetched 1 new logs [07-07-2022 10:11:01]26444: WAF :: fetched 3 new logs [07-07-2022 10:12:02]29965: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657199522 [07-07-2022 10:12:02]29965: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 10:12:04]29965: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 10:12:05]29965: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-1012/20220707-101202-YsbbopW20jiJYs3enxXuPwAAAE8 [07-07-2022 10:12:05]29965: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-07-2022 10:12:06]29965: WAF :: fetched 1 new logs [07-07-2022 10:13:01]1476: WAF :: fetched 2 new logs [07-07-2022 10:15:02]8771: WAF :: fetched 1 new logs [07-07-2022 10:16:01]12218: WAF :: fetched 2 new logs [07-07-2022 10:20:02]26299: WAF :: fetched 3 new logs [07-07-2022 10:21:01]29732: WAF :: fetched 2 new logs [07-07-2022 10:22:02]799: WAF :: fetched 2 new logs [07-07-2022 10:23:02]4816: WAF :: fetched 1 new logs [07-07-2022 10:25:02]11783: WAF :: fetched 2 new logs [07-07-2022 10:26:02]15339: WAF :: fetched 2 new logs [07-07-2022 10:27:01]18895: WAF :: fetched 3 new logs [07-07-2022 10:34:02]11222: WAF :: fetched 2 new logs [07-07-2022 10:35:01]14781: WAF :: fetched 1 new logs [07-07-2022 10:39:02]29053: WAF :: fetched 1 new logs [07-07-2022 10:41:01]3749: WAF :: fetched 3 new logs [07-07-2022 10:41:01]3749: Checking for user cron vulnerabilities [07-07-2022 10:44:01]14624: Checking ditributed CMS bruteforce attacks [07-07-2022 10:45:01]18124: WAF :: fetched 2 new logs [07-07-2022 10:46:01]21720: WAF :: fetched 2 new logs [07-07-2022 10:50:02]3090: WAF :: fetched 2 new logs [07-07-2022 10:51:01]6731: WAF :: fetched 4 new logs [07-07-2022 10:52:02]10225: WAF :: fetched 2 new logs [07-07-2022 10:53:01]13584: WAF :: fetched 6 new logs [07-07-2022 10:54:02]17608: WAF :: fetched 2 new logs [07-07-2022 10:55:02]21154: WAF :: fetched 1 new logs [07-07-2022 10:59:01]2628: WAF :: fetched 1 new logs [07-07-2022 11:00:02]5838: WAF :: fetched 3 new logs [07-07-2022 11:01:02]9788: WAF :: fetched 2 new logs [07-07-2022 11:03:02]16720: WAF :: fetched 2 new logs [07-07-2022 11:04:02]20808: WAF :: fetched 1 new logs [07-07-2022 11:05:01]24335: WAF :: fetched 1 new logs [07-07-2022 11:07:02]31139: WAF :: fetched 1 new logs [07-07-2022 11:07:52]31304: Performed RBL check for 23.111.136.34. [07-07-2022 11:12:02]15952: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657203122 [07-07-2022 11:12:02]15952: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 11:12:04]15952: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 11:12:04]15952: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-1112/20220707-111202-Ysbpsj1CeuuzmHVAo9lYSgAAAAw [07-07-2022 11:12:04]15952: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 11:12:05]15952: WAF :: fetched 46 new logs [07-07-2022 11:13:01]19506: WAF :: fetched 1 new logs [07-07-2022 11:15:02]27035: WAF :: fetched 1 new logs [07-07-2022 11:17:02]1436: WAF :: fetched 1 new logs [07-07-2022 11:18:01]4891: WAF :: fetched 1 new logs [07-07-2022 11:28:01]8169: WAF :: fetched 1 new logs [07-07-2022 11:30:01]15231: WAF :: fetched 1 new logs [07-07-2022 11:31:01]18782: WAF :: fetched 3 new logs [07-07-2022 11:32:01]22278: WAF :: fetched 1 new logs [07-07-2022 11:33:01]25686: WAF :: fetched 1 new logs [07-07-2022 11:37:02]8010: WAF :: fetched 1 new logs [07-07-2022 11:38:02]11305: WAF :: fetched 1 new logs [07-07-2022 11:39:01]14844: WAF :: fetched 1 new logs [07-07-2022 11:41:01]21880: WAF :: fetched 3 new logs [07-07-2022 11:41:01]21880: Checking for user cron vulnerabilities [07-07-2022 11:44:01]32264: Checking ditributed CMS bruteforce attacks [07-07-2022 11:44:03]32264: WAF :: fetched 3 new logs [07-07-2022 11:45:02]3973: WAF :: fetched 2 new logs [07-07-2022 11:51:01]25020: WAF :: fetched 2 new logs [07-07-2022 11:52:02]28386: WAF :: fetched 2 new logs [07-07-2022 11:53:01]31767: WAF :: fetched 1 new logs [07-07-2022 11:55:01]6898: WAF :: fetched 1 new logs [07-07-2022 11:56:02]10447: WAF :: fetched 2 new logs [07-07-2022 11:57:01]13921: WAF :: fetched 1 new logs [07-07-2022 11:59:02]21044: WAF :: fetched 1 new logs [07-07-2022 12:00:01]24886: WAF :: fetched 2 new logs [07-07-2022 12:01:02]31000: WAF :: fetched 1 new logs [07-07-2022 12:02:01]3831: WAF :: fetched 1 new logs [07-07-2022 12:03:01]8965: WAF :: fetched 1 new logs [07-07-2022 12:07:01]26514: WAF :: fetched 2 new logs [07-07-2022 12:12:02]11600: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657206722 [07-07-2022 12:12:02]11600: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 12:12:04]11600: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 12:12:05]11600: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-1212/20220707-121202-Ysb3wtCdiWd2MIQMV-W0OgAAAAo [07-07-2022 12:12:05]11600: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 12:12:05]11600: WAF :: fetched 1 new logs [07-07-2022 12:13:01]15065: WAF :: fetched 2 new logs [07-07-2022 12:16:01]26183: WAF :: fetched 1 new logs [07-07-2022 12:19:01]4266: WAF :: fetched 1 new logs [07-07-2022 12:23:01]19107: WAF :: fetched 1 new logs [07-07-2022 12:25:02]26056: WAF :: fetched 2 new logs [07-07-2022 12:30:01]11732: WAF :: fetched 1 new logs [07-07-2022 12:33:01]22353: WAF :: fetched 1 new logs [07-07-2022 12:39:01]11449: WAF :: fetched 1 new logs [07-07-2022 12:41:01]18546: Checking for user cron vulnerabilities [07-07-2022 12:42:02]22011: WAF :: fetched 1 new logs [07-07-2022 12:44:02]28621: Checking ditributed CMS bruteforce attacks [07-07-2022 12:45:02]: Checking for software updates [07-07-2022 12:48:01]10533: WAF :: fetched 2 new logs [07-07-2022 12:49:01]13888: WAF :: fetched 8 new logs [07-07-2022 12:50:02]17398: WAF :: fetched 3 new logs [07-07-2022 12:51:01]21082: WAF :: fetched 1 new logs [07-07-2022 12:54:01]31451: WAF :: fetched 1 new logs [07-07-2022 13:01:02]24232: WAF :: fetched 1 new logs [07-07-2022 13:09:02]19382: WAF :: fetched 2 new logs [07-07-2022 13:10:01]23012: WAF :: fetched 2 new logs [07-07-2022 13:11:01]26564: httpd.conf changed. Refreshing watchlist. [07-07-2022 13:12:02]29976: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657210322 [07-07-2022 13:12:02]29976: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 13:12:04]29976: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 13:12:06]29976: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-1312/20220707-131202-YscF0mNjc4c3TbaSZg8h3AAAAAM [07-07-2022 13:12:06]29976: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-07-2022 13:12:06]29976: WAF :: fetched 1 new logs [07-07-2022 13:13:01]900: WAF :: fetched 1 new logs [07-07-2022 13:15:02]8085: WAF :: fetched 4 new logs [07-07-2022 13:15:02]8084: httpd.conf changed. Refreshing watchlist. [07-07-2022 13:16:01]11672: httpd.conf changed. Refreshing watchlist. [07-07-2022 13:19:01]22316: WAF :: fetched 2 new logs [07-07-2022 13:20:02]25882: httpd.conf changed. Refreshing watchlist. [07-07-2022 13:23:02]3812: WAF :: fetched 1 new logs [07-07-2022 13:24:01]7312: WAF :: fetched 2 new logs [07-07-2022 13:25:01]10772: WAF :: fetched 1 new logs [07-07-2022 13:27:03]18120: WAF :: fetched 1 new logs [07-07-2022 13:28:01]21558: WAF :: fetched 1 new logs [07-07-2022 13:29:02]25005: WAF :: fetched 1 new logs [07-07-2022 13:31:02]31885: WAF :: fetched 1 new logs [07-07-2022 13:38:01]24306: WAF :: fetched 1 new logs [07-07-2022 13:41:01]2451: Checking for user cron vulnerabilities [07-07-2022 13:44:02]12629: Checking ditributed CMS bruteforce attacks [07-07-2022 13:45:01]: Checking for definition updates [07-07-2022 13:49:02]30297: WAF :: fetched 1 new logs [07-07-2022 13:50:01]1393: WAF :: fetched 2 new logs [07-07-2022 13:51:01]4913: WAF :: fetched 6 new logs [07-07-2022 13:59:01]344: WAF :: fetched 3 new logs [07-07-2022 14:06:02]24646: WAF :: fetched 1 new logs [07-07-2022 14:08:02]31940: WAF :: fetched 1 new logs [07-07-2022 14:09:02]2995: WAF :: fetched 1 new logs [07-07-2022 14:10:01]6654: WAF :: fetched 2 new logs [07-07-2022 14:12:02]13440: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657213922 [07-07-2022 14:12:02]13440: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 14:12:04]13440: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 14:12:04]13440: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-1412/20220707-141202-YscT4pV-O8_GQkKlWJu0tQAAABA [07-07-2022 14:12:04]13440: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 14:12:04]13440: WAF :: fetched 22 new logs [07-07-2022 14:14:02]20360: WAF :: fetched 2 new logs [07-07-2022 14:15:01]23980: WAF :: fetched 1 new logs [07-07-2022 14:18:02]2151: WAF :: fetched 1 new logs [07-07-2022 14:26:01]29923: WAF :: fetched 2 new logs [07-07-2022 14:38:02]7498: WAF :: fetched 2 new logs [07-07-2022 14:41:02]18177: WAF :: fetched 2 new logs [07-07-2022 14:41:02]18177: Checking for user cron vulnerabilities [07-07-2022 14:42:01]21783: WAF :: fetched 2 new logs [07-07-2022 14:44:01]28516: Checking ditributed CMS bruteforce attacks [07-07-2022 14:44:05]28516: WAF :: fetched 1 new logs [07-07-2022 14:46:01]3085: WAF :: fetched 1 new logs [07-07-2022 14:51:01]20852: WAF :: fetched 1 new logs [07-07-2022 14:52:01]24216: WAF :: fetched 1 new logs [07-07-2022 14:53:02]27631: Updated license status via CDN [07-07-2022 14:54:03]31059: WAF :: fetched 1 new logs [07-07-2022 14:55:01]2212: WAF :: fetched 1 new logs [07-07-2022 15:01:02]23168: Reseting cPGuard inotify settings [07-07-2022 15:07:01]11406: WAF :: fetched 1 new logs [07-07-2022 15:09:01]18775: WAF :: fetched 1 new logs [07-07-2022 15:12:02]29064: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657217522 [07-07-2022 15:12:02]29064: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 15:12:04]29064: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 15:12:05]29064: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-1512/20220707-151202-Ysch8uqwkIcO59OwwQa6gQAAAAQ [07-07-2022 15:12:05]29064: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 15:12:05]29064: WAF :: fetched 2 new logs [07-07-2022 15:14:01]3604: WAF :: fetched 4 new logs [07-07-2022 15:16:02]10589: WAF :: fetched 1 new logs [07-07-2022 15:17:02]14047: WAF :: fetched 1 new logs [07-07-2022 15:19:02]21453: WAF :: fetched 4 new logs [07-07-2022 15:22:02]31851: WAF :: fetched 1 new logs [07-07-2022 15:24:01]6395: WAF :: fetched 2 new logs [07-07-2022 15:29:01]23612: WAF :: fetched 1 new logs [07-07-2022 15:30:02]27518: WAF :: fetched 2 new logs [07-07-2022 15:32:01]2096: WAF :: fetched 1 new logs [07-07-2022 15:33:02]5517: WAF :: fetched 5 new logs [07-07-2022 15:34:01]8887: WAF :: fetched 5 new logs [07-07-2022 15:36:02]15800: WAF :: fetched 1 new logs [07-07-2022 15:37:01]19181: WAF :: fetched 1 new logs [07-07-2022 15:38:02]22585: WAF :: fetched 1 new logs [07-07-2022 15:39:01]25904: WAF :: fetched 4 new logs [07-07-2022 15:41:02]943: WAF :: fetched 1 new logs [07-07-2022 15:41:02]943: Checking for user cron vulnerabilities [07-07-2022 15:42:01]4460: WAF :: fetched 1 new logs [07-07-2022 15:43:01]7813: WAF :: fetched 4 new logs [07-07-2022 15:44:02]11304: Checking ditributed CMS bruteforce attacks [07-07-2022 15:56:01]20053: WAF :: fetched 2 new logs [07-07-2022 16:06:01]22696: WAF :: fetched 2 new logs [07-07-2022 16:11:02]8105: WAF :: fetched 4 new logs [07-07-2022 16:12:01]11490: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657221121 [07-07-2022 16:12:01]11490: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 16:12:03]11490: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 16:12:04]11490: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-1612/20220707-161201-YscwAbErOEqEAg6Fg-xXvQAAAAk [07-07-2022 16:12:04]11490: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 16:12:04]11490: WAF :: fetched 2 new logs [07-07-2022 16:26:01]27611: WAF :: fetched 3 new logs [07-07-2022 16:29:01]5463: WAF :: fetched 4 new logs [07-07-2022 16:30:02]8910: WAF :: fetched 3 new logs [07-07-2022 16:39:01]8173: WAF :: fetched 1 new logs [07-07-2022 16:40:01]11712: WAF :: fetched 2 new logs [07-07-2022 16:41:02]15910: Checking for user cron vulnerabilities [07-07-2022 16:43:01]22862: WAF :: fetched 2 new logs [07-07-2022 16:44:01]26340: Checking ditributed CMS bruteforce attacks [07-07-2022 16:44:02]26340: WAF :: fetched 3 new logs [07-07-2022 16:45:01]29699: WAF :: fetched 1 new logs [07-07-2022 16:47:01]4338: WAF :: fetched 1 new logs [07-07-2022 16:48:01]7687: WAF :: fetched 2 new logs [07-07-2022 16:50:01]14570: WAF :: fetched 1 new logs [07-07-2022 16:59:02]13370: WAF :: fetched 2 new logs [07-07-2022 17:00:01]16538: WAF :: fetched 3 new logs [07-07-2022 17:01:02]21174: WAF :: fetched 1 new logs [07-07-2022 17:09:02]16033: WAF :: fetched 1 new logs [07-07-2022 17:10:01]19550: WAF :: fetched 2 new logs [07-07-2022 17:12:02]27037: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657224722 [07-07-2022 17:12:02]27037: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 17:12:04]27037: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 17:12:04]27037: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-1712/20220707-171202-Ysc-EqekE-opGDlh-LwNOwAAAAs [07-07-2022 17:12:04]27037: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 17:12:04]27037: WAF :: fetched 2 new logs [07-07-2022 17:13:01]30784: WAF :: fetched 5 new logs [07-07-2022 17:14:02]1208: WAF :: fetched 16 new logs [07-07-2022 17:15:01]3862: WAF :: fetched 15 new logs [07-07-2022 17:16:01]6719: WAF :: fetched 1 new logs [07-07-2022 17:21:01]20455: WAF :: fetched 1 new logs [07-07-2022 17:23:01]25781: WAF :: fetched 3 new logs [07-07-2022 17:24:02]28479: WAF :: fetched 1 new logs [07-07-2022 17:28:01]6971: WAF :: fetched 1 new logs [07-07-2022 17:30:03]12314: WAF :: fetched 2 new logs [07-07-2022 17:32:01]17803: WAF :: fetched 4 new logs [07-07-2022 17:35:02]25912: WAF :: fetched 2 new logs [07-07-2022 17:36:01]28661: WAF :: fetched 3 new logs [07-07-2022 17:37:01]31359: WAF :: fetched 9 new logs [07-07-2022 17:40:01]6985: WAF :: fetched 9 new logs [07-07-2022 17:41:02]9831: Checking for user cron vulnerabilities [07-07-2022 17:44:01]17836: Checking ditributed CMS bruteforce attacks [07-07-2022 17:45:01]20547: WAF :: fetched 1 new logs [07-07-2022 17:46:02]23453: WAF :: fetched 4 new logs [07-07-2022 17:51:02]4544: WAF :: fetched 1 new logs [07-07-2022 17:55:01]15163: WAF :: fetched 3 new logs [07-07-2022 18:02:02]2227: WAF :: fetched 2 new logs [07-07-2022 18:03:02]4855: WAF :: fetched 6 new logs [07-07-2022 18:04:01]7464: WAF :: fetched 7 new logs [07-07-2022 18:05:01]10084: WAF :: fetched 2 new logs [07-07-2022 18:06:02]12849: WAF :: fetched 3 new logs [07-07-2022 18:07:01]15453: WAF :: fetched 3 new logs [07-07-2022 18:08:01]18192: WAF :: fetched 1 new logs [07-07-2022 18:09:02]20935: WAF :: fetched 2 new logs [07-07-2022 18:10:02]23601: WAF :: fetched 3 new logs [07-07-2022 18:11:01]26366: WAF :: fetched 4 new logs [07-07-2022 18:12:02]29026: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657228322 [07-07-2022 18:12:02]29026: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 18:12:04]29026: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 18:12:04]29026: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-1812/20220707-181202-YsdMIk5hffC83gX5i_9D7wAAABQ [07-07-2022 18:12:04]29026: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-07-2022 18:12:04]29026: WAF :: fetched 3 new logs [07-07-2022 18:13:01]31689: WAF :: fetched 2 new logs [07-07-2022 18:14:02]2010: WAF :: fetched 10 new logs [07-07-2022 18:17:02]10183: WAF :: fetched 1 new logs [07-07-2022 18:18:02]12830: WAF :: fetched 1 new logs [07-07-2022 18:20:02]18252: WAF :: fetched 1 new logs [07-07-2022 18:22:01]23735: WAF :: fetched 1 new logs [07-07-2022 18:23:01]26379: WAF :: fetched 1 new logs [07-07-2022 18:25:01]31779: WAF :: fetched 1 new logs [07-07-2022 18:26:02]2244: WAF :: fetched 5 new logs [07-07-2022 18:27:01]4832: WAF :: fetched 1 new logs [07-07-2022 18:33:01]21008: WAF :: fetched 11 new logs [07-07-2022 18:35:02]26288: WAF :: fetched 2 new logs [07-07-2022 18:36:01]29092: WAF :: fetched 2 new logs [07-07-2022 18:37:02]31791: WAF :: fetched 3 new logs [07-07-2022 18:38:01]2077: WAF :: fetched 3 new logs [07-07-2022 18:39:02]4803: WAF :: fetched 4 new logs [07-07-2022 18:41:01]10285: Checking for user cron vulnerabilities [07-07-2022 18:44:01]18453: Checking ditributed CMS bruteforce attacks [07-07-2022 18:48:01]29334: WAF :: fetched 1 new logs [07-07-2022 18:51:01]5088: WAF :: fetched 20 new logs [07-07-2022 18:52:02]7926: WAF :: fetched 33 new logs [07-07-2022 18:53:01]10550: WAF :: fetched 25 new logs [07-07-2022 18:54:02]13233: WAF :: fetched 16 new logs [07-07-2022 18:55:01]15720: WAF :: fetched 3 new logs [07-07-2022 18:57:01]21421: WAF :: fetched 2 new logs [07-07-2022 18:59:02]26711: WAF :: fetched 3 new logs [07-07-2022 19:05:02]10550: WAF :: fetched 1 new logs [07-07-2022 19:06:02]13480: WAF :: fetched 2 new logs [07-07-2022 19:07:02]16094: WAF :: fetched 1 new logs [07-07-2022 19:08:01]18813: WAF :: fetched 2 new logs [07-07-2022 19:09:01]21491: WAF :: fetched 5 new logs [07-07-2022 19:10:02]24168: WAF :: fetched 3 new logs [07-07-2022 19:11:01]26940: WAF :: fetched 16 new logs [07-07-2022 19:12:01]29611: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657231921 [07-07-2022 19:12:01]29611: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 19:12:03]29611: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 19:12:04]29611: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-1912/20220707-191201-YsdaMTgoMLJ4NdbaTDE2iQAAAB0 [07-07-2022 19:12:04]29611: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 19:12:04]29611: WAF :: fetched 140 new logs [07-07-2022 19:13:02]32309: WAF :: fetched 1 new logs [07-07-2022 19:15:01]5314: WAF :: fetched 4 new logs [07-07-2022 19:16:02]8160: WAF :: fetched 1 new logs [07-07-2022 19:17:02]10794: WAF :: fetched 1 new logs [07-07-2022 19:18:02]13486: WAF :: fetched 4 new logs [07-07-2022 19:23:01]27088: WAF :: fetched 1 new logs [07-07-2022 19:27:02]5512: WAF :: fetched 5 new logs [07-07-2022 19:28:01]8111: WAF :: fetched 8 new logs [07-07-2022 19:29:02]10809: WAF :: fetched 9 new logs [07-07-2022 19:30:01]13440: WAF :: fetched 3 new logs [07-07-2022 19:31:02]16225: WAF :: fetched 4 new logs [07-07-2022 19:32:01]18950: WAF :: fetched 5 new logs [07-07-2022 19:33:01]21629: WAF :: fetched 5 new logs [07-07-2022 19:34:01]24307: WAF :: fetched 7 new logs [07-07-2022 19:35:01]26951: WAF :: fetched 6 new logs [07-07-2022 19:36:02]29763: WAF :: fetched 4 new logs [07-07-2022 19:37:01]32488: WAF :: fetched 5 new logs [07-07-2022 19:38:02]2742: WAF :: fetched 2 new logs [07-07-2022 19:39:02]5350: WAF :: fetched 1 new logs [07-07-2022 19:40:01]7977: WAF :: fetched 1 new logs [07-07-2022 19:41:02]10768: WAF :: fetched 1 new logs [07-07-2022 19:41:02]10768: Checking for user cron vulnerabilities [07-07-2022 19:42:01]13371: WAF :: fetched 3 new logs [07-07-2022 19:43:02]16042: WAF :: fetched 5 new logs [07-07-2022 19:44:01]18706: Checking ditributed CMS bruteforce attacks [07-07-2022 19:44:01]18706: WAF :: fetched 2 new logs [07-07-2022 19:45:01]: Checking for definition updates [07-07-2022 19:45:01]21357: WAF :: fetched 2 new logs [07-07-2022 19:46:02]24178: WAF :: fetched 6 new logs [07-07-2022 19:47:02]26705: WAF :: fetched 6 new logs [07-07-2022 19:48:01]29357: WAF :: fetched 4 new logs [07-07-2022 19:49:02]32003: WAF :: fetched 13 new logs [07-07-2022 19:50:01]2205: WAF :: fetched 4 new logs [07-07-2022 19:51:01]4953: WAF :: fetched 7 new logs [07-07-2022 19:52:01]7626: WAF :: fetched 7 new logs [07-07-2022 19:53:01]10251: WAF :: fetched 7 new logs [07-07-2022 19:54:02]12877: WAF :: fetched 5 new logs [07-07-2022 19:55:02]15566: WAF :: fetched 5 new logs [07-07-2022 19:56:02]18399: WAF :: fetched 3 new logs [07-07-2022 19:57:01]20995: WAF :: fetched 4 new logs [07-07-2022 19:58:01]23619: WAF :: fetched 10 new logs [07-07-2022 19:59:02]26254: WAF :: fetched 11 new logs [07-07-2022 20:00:01]28543: WAF :: fetched 5 new logs [07-07-2022 20:01:01]31730: WAF :: fetched 4 new logs [07-07-2022 20:02:01]2024: WAF :: fetched 5 new logs [07-07-2022 20:03:01]4594: WAF :: fetched 5 new logs [07-07-2022 20:04:02]7227: WAF :: fetched 9 new logs [07-07-2022 20:05:02]9810: WAF :: fetched 5 new logs [07-07-2022 20:06:01]12334: WAF :: fetched 7 new logs [07-07-2022 20:07:01]15209: WAF :: fetched 8 new logs [07-07-2022 20:08:01]17871: WAF :: fetched 13 new logs [07-07-2022 20:09:01]20562: WAF :: fetched 14 new logs [07-07-2022 20:10:01]23201: WAF :: fetched 14 new logs [07-07-2022 20:11:01]25936: WAF :: fetched 18 new logs [07-07-2022 20:12:02]28626: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657235522 [07-07-2022 20:12:02]28626: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 20:12:04]28626: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 20:12:05]28626: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-2012/20220707-201202-YsdoQmQ51Ov6pyJmnM-pcAAAAAY [07-07-2022 20:12:05]28626: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 20:12:05]28626: WAF :: fetched 19 new logs [07-07-2022 20:13:01]31309: WAF :: fetched 21 new logs [07-07-2022 20:14:02]1564: WAF :: fetched 18 new logs [07-07-2022 20:15:01]4201: WAF :: fetched 27 new logs [07-07-2022 20:16:01]6923: WAF :: fetched 16 new logs [07-07-2022 20:17:02]9625: WAF :: fetched 19 new logs [07-07-2022 20:18:01]12228: WAF :: fetched 18 new logs [07-07-2022 20:19:02]14885: WAF :: fetched 9 new logs [07-07-2022 20:20:03]17512: WAF :: fetched 17 new logs [07-07-2022 20:21:02]20328: WAF :: fetched 12 new logs [07-07-2022 20:22:02]23059: WAF :: fetched 12 new logs [07-07-2022 20:23:02]25667: WAF :: fetched 13 new logs [07-07-2022 20:24:02]28304: WAF :: fetched 7 new logs [07-07-2022 20:25:02]30930: WAF :: fetched 11 new logs [07-07-2022 20:26:01]1171: WAF :: fetched 3 new logs [07-07-2022 20:27:02]3899: WAF :: fetched 19 new logs [07-07-2022 20:28:02]6462: WAF :: fetched 9 new logs [07-07-2022 20:29:02]9113: WAF :: fetched 7 new logs [07-07-2022 20:30:02]11730: WAF :: fetched 9 new logs [07-07-2022 20:31:01]14430: WAF :: fetched 3 new logs [07-07-2022 20:32:01]17159: WAF :: fetched 17 new logs [07-07-2022 20:33:02]19839: WAF :: fetched 7 new logs [07-07-2022 20:34:01]22423: WAF :: fetched 2 new logs [07-07-2022 20:35:01]25023: WAF :: fetched 4 new logs [07-07-2022 20:36:02]27705: WAF :: fetched 7 new logs [07-07-2022 20:37:02]30421: WAF :: fetched 9 new logs [07-07-2022 20:38:01]599: WAF :: fetched 5 new logs [07-07-2022 20:39:01]3280: WAF :: fetched 7 new logs [07-07-2022 20:40:01]5934: WAF :: fetched 10 new logs [07-07-2022 20:41:01]8605: WAF :: fetched 3 new logs [07-07-2022 20:41:01]8605: Checking for user cron vulnerabilities [07-07-2022 20:42:02]11301: WAF :: fetched 6 new logs [07-07-2022 20:43:01]13871: WAF :: fetched 250 new logs [07-07-2022 20:44:02]16504: Checking ditributed CMS bruteforce attacks [07-07-2022 20:44:02]16504: WAF :: fetched 54 new logs [07-07-2022 20:45:01]19171: WAF :: fetched 164 new logs [07-07-2022 20:46:01]21830: WAF :: fetched 25 new logs [07-07-2022 20:47:02]24557: WAF :: fetched 39 new logs [07-07-2022 20:48:02]27208: WAF :: fetched 1 new logs [07-07-2022 20:49:02]29840: WAF :: fetched 121 new logs [07-07-2022 20:50:01]32428: WAF :: fetched 66 new logs [07-07-2022 20:51:01]2786: WAF :: fetched 133 new logs [07-07-2022 20:52:02]5537: WAF :: fetched 89 new logs [07-07-2022 20:53:01]8116: WAF :: fetched 163 new logs [07-07-2022 20:54:02]10684: WAF :: fetched 412 new logs [07-07-2022 20:55:01]13331: WAF :: fetched 151 new logs [07-07-2022 20:56:01]15971: WAF :: fetched 134 new logs [07-07-2022 20:57:02]18808: WAF :: fetched 76 new logs [07-07-2022 20:58:02]21397: WAF :: fetched 74 new logs [07-07-2022 20:59:01]24005: WAF :: fetched 23 new logs [07-07-2022 21:00:02]26316: WAF :: fetched 128 new logs [07-07-2022 21:01:02]29513: WAF :: fetched 69 new logs [07-07-2022 21:02:02]32262: WAF :: fetched 320 new logs [07-07-2022 21:03:03]2535: WAF :: fetched 122 new logs [07-07-2022 21:04:01]5164: WAF :: fetched 121 new logs [07-07-2022 21:05:02]7798: WAF :: fetched 103 new logs [07-07-2022 21:06:02]10446: WAF :: fetched 157 new logs [07-07-2022 21:07:01]13137: WAF :: fetched 178 new logs [07-07-2022 21:08:02]15760: WAF :: fetched 100 new logs [07-07-2022 21:09:01]18413: WAF :: fetched 99 new logs [07-07-2022 21:10:02]21044: WAF :: fetched 206 new logs [07-07-2022 21:11:02]23809: WAF :: fetched 106 new logs [07-07-2022 21:12:01]26574: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657239121 [07-07-2022 21:12:01]26574: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 21:12:03]26574: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 21:12:04]26574: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-2112/20220707-211201-Ysd2UcJj6BVspi2aRH8gWQAAABc [07-07-2022 21:12:04]26574: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 21:12:05]26574: WAF :: fetched 117 new logs [07-07-2022 21:13:02]29223: WAF :: fetched 21 new logs [07-07-2022 21:14:01]31873: WAF :: fetched 148 new logs [07-07-2022 21:15:01]2136: WAF :: fetched 78 new logs [07-07-2022 21:16:01]4813: WAF :: fetched 26 new logs [07-07-2022 21:17:02]7567: WAF :: fetched 25 new logs [07-07-2022 21:18:03]10207: WAF :: fetched 126 new logs [07-07-2022 21:19:01]12834: WAF :: fetched 56 new logs [07-07-2022 21:20:01]15450: WAF :: fetched 5 new logs [07-07-2022 21:21:02]18268: WAF :: fetched 74 new logs [07-07-2022 21:22:01]20970: WAF :: fetched 37 new logs [07-07-2022 21:23:01]23570: WAF :: fetched 175 new logs [07-07-2022 21:24:02]26345: WAF :: fetched 67 new logs [07-07-2022 21:25:01]28949: WAF :: fetched 42 new logs [07-07-2022 21:26:02]31637: WAF :: fetched 135 new logs [07-07-2022 21:27:01]1893: WAF :: fetched 127 new logs [07-07-2022 21:28:01]4538: WAF :: fetched 166 new logs [07-07-2022 21:29:02]7106: WAF :: fetched 134 new logs [07-07-2022 21:30:01]9688: WAF :: fetched 50 new logs [07-07-2022 21:31:02]12337: WAF :: fetched 32 new logs [07-07-2022 21:32:01]14959: WAF :: fetched 84 new logs [07-07-2022 21:33:02]17628: WAF :: fetched 275 new logs [07-07-2022 21:34:01]20312: WAF :: fetched 140 new logs [07-07-2022 21:35:02]22948: WAF :: fetched 81 new logs [07-07-2022 21:36:01]25608: WAF :: fetched 64 new logs [07-07-2022 21:37:01]28315: WAF :: fetched 148 new logs [07-07-2022 21:38:02]30956: WAF :: fetched 91 new logs [07-07-2022 21:39:02]1138: WAF :: fetched 80 new logs [07-07-2022 21:40:02]3788: WAF :: fetched 26 new logs [07-07-2022 21:41:01]6416: WAF :: fetched 164 new logs [07-07-2022 21:41:01]6416: Checking for user cron vulnerabilities [07-07-2022 21:42:01]9139: WAF :: fetched 160 new logs [07-07-2022 21:43:02]11762: WAF :: fetched 84 new logs [07-07-2022 21:44:01]14333: Checking ditributed CMS bruteforce attacks [07-07-2022 21:44:02]14333: WAF :: fetched 125 new logs [07-07-2022 21:45:02]16983: WAF :: fetched 77 new logs [07-07-2022 21:46:02]19737: WAF :: fetched 171 new logs [07-07-2022 21:47:01]22484: WAF :: fetched 125 new logs [07-07-2022 21:48:02]25170: WAF :: fetched 131 new logs [07-07-2022 21:49:02]27778: WAF :: fetched 47 new logs [07-07-2022 21:54:01]8715: WAF :: fetched 27 new logs [07-07-2022 21:55:02]11376: WAF :: fetched 129 new logs [07-07-2022 21:56:02]13988: WAF :: fetched 144 new logs [07-07-2022 21:57:01]16701: WAF :: fetched 25 new logs [07-07-2022 21:58:01]19414: WAF :: fetched 60 new logs [07-07-2022 21:59:01]22017: WAF :: fetched 77 new logs [07-07-2022 22:00:01]24346: WAF :: fetched 78 new logs [07-07-2022 22:01:02]27496: WAF :: fetched 46 new logs [07-07-2022 22:02:01]30202: WAF :: fetched 123 new logs [07-07-2022 22:03:02]376: WAF :: fetched 72 new logs [07-07-2022 22:04:02]3016: WAF :: fetched 127 new logs [07-07-2022 22:05:01]5415: WAF :: fetched 58 new logs [07-07-2022 22:06:02]8296: WAF :: fetched 118 new logs [07-07-2022 22:07:01]10979: WAF :: fetched 109 new logs [07-07-2022 22:07:10]10974: Performing Domain reputation checks [07-07-2022 22:08:02]13634: WAF :: fetched 80 new logs [07-07-2022 22:09:01]16200: WAF :: fetched 53 new logs [07-07-2022 22:10:02]18994: WAF :: fetched 79 new logs [07-07-2022 22:11:02]21686: WAF :: fetched 149 new logs [07-07-2022 22:12:02]24395: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657242722 [07-07-2022 22:12:02]24395: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 22:12:04]24395: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 22:12:04]24395: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-2212/20220707-221202-YseEYkdHJ8zo7xdtSEivRgAAABw [07-07-2022 22:12:04]24395: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 22:12:04]24395: WAF :: fetched 26 new logs [07-07-2022 22:13:02]27008: WAF :: fetched 19 new logs [07-07-2022 22:14:02]29637: WAF :: fetched 1 new logs [07-07-2022 22:15:01]32119: WAF :: fetched 185 new logs [07-07-2022 22:16:02]2559: WAF :: fetched 190 new logs [07-07-2022 22:17:01]5216: WAF :: fetched 23 new logs [07-07-2022 22:18:02]7851: WAF :: fetched 19 new logs [07-07-2022 22:19:01]10489: WAF :: fetched 107 new logs [07-07-2022 22:20:01]13116: WAF :: fetched 173 new logs [07-07-2022 22:21:02]15804: WAF :: fetched 104 new logs [07-07-2022 22:22:01]18553: WAF :: fetched 105 new logs [07-07-2022 22:23:01]21202: WAF :: fetched 52 new logs [07-07-2022 22:24:01]23839: WAF :: fetched 72 new logs [07-07-2022 22:25:02]26436: WAF :: fetched 78 new logs [07-07-2022 22:26:02]29119: WAF :: fetched 7 new logs [07-07-2022 22:27:01]31800: WAF :: fetched 141 new logs [07-07-2022 22:28:01]1995: WAF :: fetched 159 new logs [07-07-2022 22:29:02]4622: WAF :: fetched 80 new logs [07-07-2022 22:30:03]7227: WAF :: fetched 19 new logs [07-07-2022 22:31:02]9909: WAF :: fetched 17 new logs [07-07-2022 22:32:01]12606: WAF :: fetched 44 new logs [07-07-2022 22:33:01]15266: WAF :: fetched 91 new logs [07-07-2022 22:34:02]17957: WAF :: fetched 39 new logs [07-07-2022 22:35:01]20653: WAF :: fetched 49 new logs [07-07-2022 22:36:01]23432: WAF :: fetched 122 new logs [07-07-2022 22:37:01]26121: WAF :: fetched 138 new logs [07-07-2022 22:38:02]28785: WAF :: fetched 213 new logs [07-07-2022 22:39:02]31420: WAF :: fetched 13 new logs [07-07-2022 22:40:02]1650: WAF :: fetched 43 new logs [07-07-2022 22:41:01]4315: WAF :: fetched 33 new logs [07-07-2022 22:41:01]4315: Checking for user cron vulnerabilities [07-07-2022 22:42:02]7000: WAF :: fetched 150 new logs [07-07-2022 22:43:01]9255: WAF :: fetched 108 new logs [07-07-2022 22:44:01]12298: Checking ditributed CMS bruteforce attacks [07-07-2022 22:44:02]12298: WAF :: fetched 84 new logs [07-07-2022 22:45:02]14908: WAF :: fetched 77 new logs [07-07-2022 22:46:01]17608: WAF :: fetched 126 new logs [07-07-2022 22:47:02]20435: WAF :: fetched 79 new logs [07-07-2022 22:48:03]23117: WAF :: fetched 60 new logs [07-07-2022 22:49:02]25756: WAF :: fetched 1 new logs [07-07-2022 22:50:01]28377: WAF :: fetched 3 new logs [07-07-2022 22:51:01]31080: WAF :: fetched 63 new logs [07-07-2022 22:52:01]1349: WAF :: fetched 203 new logs [07-07-2022 22:53:01]3942: WAF :: fetched 72 new logs [07-07-2022 22:54:01]6569: WAF :: fetched 17 new logs [07-07-2022 22:55:01]9161: WAF :: fetched 80 new logs [07-07-2022 22:56:02]11895: WAF :: fetched 220 new logs [07-07-2022 22:57:01]14580: WAF :: fetched 457 new logs [07-07-2022 22:58:02]17249: WAF :: fetched 153 new logs [07-07-2022 22:59:01]19922: WAF :: fetched 68 new logs [07-07-2022 23:00:01]22333: WAF :: fetched 57 new logs [07-07-2022 23:01:01]25511: WAF :: fetched 55 new logs [07-07-2022 23:02:01]28249: WAF :: fetched 21 new logs [07-07-2022 23:03:01]30860: WAF :: fetched 73 new logs [07-07-2022 23:04:01]1036: WAF :: fetched 31 new logs [07-07-2022 23:05:02]3748: httpd.conf changed. Refreshing watchlist. [07-07-2022 23:05:02]3743: WAF :: fetched 120 new logs [07-07-2022 23:06:01]6367: WAF :: fetched 51 new logs [07-07-2022 23:07:02]9051: WAF :: fetched 146 new logs [07-07-2022 23:07:52]9210: Performed RBL check for 23.111.136.34. [07-07-2022 23:08:01]11637: WAF :: fetched 48 new logs [07-07-2022 23:09:01]14265: WAF :: fetched 82 new logs [07-07-2022 23:10:01]16903: WAF :: fetched 158 new logs [07-07-2022 23:11:01]19681: WAF :: fetched 115 new logs [07-07-2022 23:12:01]22333: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657246321 [07-07-2022 23:12:01]22333: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-07-2022 23:12:03]22333: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-07-2022 23:12:04]22333: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220707/20220707-2312/20220707-231201-YseScQ5pIsjqbn0RBeMr_AAAABE [07-07-2022 23:12:04]22333: WAF :: No suitable log file found. Using SQLite.. [07-07-2022 23:12:04]22333: WAF :: fetched 155 new logs [07-07-2022 23:13:02]24971: WAF :: fetched 31 new logs [07-07-2022 23:14:01]27572: WAF :: fetched 68 new logs [07-07-2022 23:15:02]30190: WAF :: fetched 238 new logs [07-07-2022 23:16:01]32607: WAF :: fetched 149 new logs [07-07-2022 23:17:01]3100: WAF :: fetched 83 new logs [07-07-2022 23:18:02]5721: WAF :: fetched 130 new logs [07-07-2022 23:19:01]8315: WAF :: fetched 103 new logs [07-07-2022 23:20:02]10968: WAF :: fetched 146 new logs [07-07-2022 23:21:01]13665: WAF :: fetched 26 new logs [07-07-2022 23:22:01]16317: WAF :: fetched 128 new logs [07-07-2022 23:23:01]19030: WAF :: fetched 195 new logs [07-07-2022 23:24:01]21633: WAF :: fetched 165 new logs [07-07-2022 23:25:01]24242: WAF :: fetched 76 new logs [07-07-2022 23:26:02]26963: WAF :: fetched 184 new logs [07-07-2022 23:27:01]29609: WAF :: fetched 211 new logs [07-07-2022 23:28:02]32261: WAF :: fetched 84 new logs [07-07-2022 23:29:01]2400: WAF :: fetched 67 new logs [07-07-2022 23:30:02]4985: WAF :: fetched 51 new logs [07-07-2022 23:31:02]7631: WAF :: fetched 98 new logs [07-07-2022 23:32:01]10331: WAF :: fetched 133 new logs [07-07-2022 23:33:02]12946: WAF :: fetched 85 new logs [07-07-2022 23:34:01]15507: WAF :: fetched 38 new logs [07-07-2022 23:35:01]18163: WAF :: fetched 78 new logs [07-07-2022 23:36:01]20836: WAF :: fetched 32 new logs [07-07-2022 23:37:01]23499: WAF :: fetched 51 new logs [07-07-2022 23:38:02]26070: WAF :: fetched 27 new logs [07-07-2022 23:39:01]28658: WAF :: fetched 77 new logs [07-07-2022 23:40:02]31313: WAF :: fetched 43 new logs [07-07-2022 23:41:01]1576: WAF :: fetched 106 new logs [07-07-2022 23:41:01]1576: Checking for user cron vulnerabilities [07-07-2022 23:42:01]4230: WAF :: fetched 46 new logs [07-07-2022 23:43:01]6815: WAF :: fetched 158 new logs [07-07-2022 23:44:01]9429: Checking ditributed CMS bruteforce attacks [07-07-2022 23:44:02]9429: WAF :: fetched 25 new logs [07-07-2022 23:45:01]11985: WAF :: fetched 38 new logs [07-07-2022 23:46:02]14647: WAF :: fetched 26 new logs [07-07-2022 23:47:03]17281: WAF :: fetched 35 new logs [07-07-2022 23:48:02]19976: WAF :: fetched 79 new logs [07-07-2022 23:49:02]22590: WAF :: fetched 59 new logs [07-07-2022 23:50:01]25231: WAF :: fetched 149 new logs [07-07-2022 23:51:01]27862: WAF :: fetched 163 new logs [07-07-2022 23:52:02]30536: WAF :: fetched 140 new logs [07-07-2022 23:53:01]696: WAF :: fetched 35 new logs [07-07-2022 23:54:01]3399: WAF :: fetched 42 new logs [07-07-2022 23:55:01]6661: httpd.conf changed. Refreshing watchlist. [07-07-2022 23:55:01]6662: WAF :: fetched 180 new logs [07-07-2022 23:56:01]9744: WAF :: fetched 351 new logs [07-07-2022 23:57:01]12407: WAF :: fetched 128 new logs [07-07-2022 23:58:02]15007: WAF :: fetched 60 new logs [07-07-2022 23:59:01]17548: WAF :: fetched 123 new logs [08-07-2022 00:00:02]19987: WAF :: fetched 174 new logs [08-07-2022 00:01:02]23126: WAF :: fetched 186 new logs [08-07-2022 00:01:04]23126: Sending daily report for July 8, 2022 [08-07-2022 00:02:02]25846: WAF :: fetched 28 new logs [08-07-2022 00:03:02]28457: WAF :: fetched 32 new logs [08-07-2022 00:04:03]31068: WAF :: fetched 67 new logs [08-07-2022 00:05:02]1308: WAF :: fetched 248 new logs [08-07-2022 00:05:02]1308: Deleted 0 entries older than 6 MONTH from scanner_logs [08-07-2022 00:05:02]1308: Deleted 0 files from Quarantine [08-07-2022 00:06:01]3952: WAF :: fetched 109 new logs [08-07-2022 00:07:01]6611: WAF :: fetched 92 new logs [08-07-2022 00:08:02]9287: WAF :: fetched 19 new logs [08-07-2022 00:09:01]11857: WAF :: fetched 58 new logs [08-07-2022 00:10:02]14483: WAF :: fetched 138 new logs [08-07-2022 00:11:01]16845: WAF :: fetched 146 new logs [08-07-2022 00:12:01]19907: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657249921 [08-07-2022 00:12:01]19907: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 00:12:03]19907: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 00:12:04]19907: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-0012/20220708-001201-YseggQxv7oYJ1z7-wrIcAAAAAAk [08-07-2022 00:12:04]19907: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 00:12:04]19907: WAF :: fetched 36 new logs [08-07-2022 00:13:01]22497: WAF :: fetched 166 new logs [08-07-2022 00:14:01]25106: WAF :: fetched 129 new logs [08-07-2022 00:15:02]27705: WAF :: fetched 85 new logs [08-07-2022 00:16:01]30388: WAF :: fetched 98 new logs [08-07-2022 00:17:01]644: WAF :: fetched 72 new logs [08-07-2022 00:18:02]3328: WAF :: fetched 171 new logs [08-07-2022 00:19:02]6009: WAF :: fetched 33 new logs [08-07-2022 00:20:02]8687: WAF :: fetched 1 new logs [08-07-2022 00:21:01]11109: WAF :: fetched 95 new logs [08-07-2022 00:22:02]14035: WAF :: fetched 56 new logs [08-07-2022 00:23:01]16611: WAF :: fetched 83 new logs [08-07-2022 00:24:01]19260: WAF :: fetched 27 new logs [08-07-2022 00:25:02]21865: WAF :: fetched 167 new logs [08-07-2022 00:26:01]24440: WAF :: fetched 95 new logs [08-07-2022 00:27:02]27146: WAF :: fetched 102 new logs [08-07-2022 00:28:01]29697: WAF :: fetched 18 new logs [08-07-2022 00:29:02]32286: WAF :: fetched 227 new logs [08-07-2022 00:30:02]2445: WAF :: fetched 33 new logs [08-07-2022 00:31:01]5093: WAF :: fetched 31 new logs [08-07-2022 00:32:01]7784: WAF :: fetched 17 new logs [08-07-2022 00:33:01]10423: WAF :: fetched 172 new logs [08-07-2022 00:34:01]12985: WAF :: fetched 119 new logs [08-07-2022 00:35:01]15549: WAF :: fetched 66 new logs [08-07-2022 00:36:02]18304: WAF :: fetched 70 new logs [08-07-2022 00:37:01]20948: WAF :: fetched 66 new logs [08-07-2022 00:38:01]23533: WAF :: fetched 48 new logs [08-07-2022 00:39:02]26113: WAF :: fetched 46 new logs [08-07-2022 00:40:01]28699: WAF :: fetched 62 new logs [08-07-2022 00:41:02]31370: WAF :: fetched 99 new logs [08-07-2022 00:41:02]31370: Checking for user cron vulnerabilities [08-07-2022 00:42:01]1594: WAF :: fetched 5 new logs [08-07-2022 00:43:01]4181: WAF :: fetched 4 new logs [08-07-2022 00:44:01]6820: Checking ditributed CMS bruteforce attacks [08-07-2022 00:44:02]6820: WAF :: fetched 90 new logs [08-07-2022 00:45:02]: Checking for software updates [08-07-2022 00:45:02]9402: WAF :: fetched 124 new logs [08-07-2022 00:46:02]12025: WAF :: fetched 10 new logs [08-07-2022 00:47:02]14665: WAF :: fetched 22 new logs [08-07-2022 00:48:01]17240: WAF :: fetched 42 new logs [08-07-2022 00:49:01]19910: WAF :: fetched 67 new logs [08-07-2022 00:50:02]22546: WAF :: fetched 88 new logs [08-07-2022 00:51:02]25152: WAF :: fetched 77 new logs [08-07-2022 00:52:01]27826: WAF :: fetched 5 new logs [08-07-2022 00:53:01]30391: WAF :: fetched 43 new logs [08-07-2022 00:54:02]588: WAF :: fetched 104 new logs [08-07-2022 00:55:01]3218: WAF :: fetched 168 new logs [08-07-2022 00:56:02]5835: WAF :: fetched 35 new logs [08-07-2022 00:57:01]8487: WAF :: fetched 101 new logs [08-07-2022 00:58:02]11104: WAF :: fetched 102 new logs [08-07-2022 00:59:02]13657: WAF :: fetched 196 new logs [08-07-2022 01:00:02]15959: WAF :: fetched 86 new logs [08-07-2022 01:01:01]19843: WAF :: fetched 33 new logs [08-07-2022 01:02:01]22725: WAF :: fetched 38 new logs [08-07-2022 01:03:02]25525: WAF :: fetched 59 new logs [08-07-2022 01:04:01]28502: WAF :: fetched 175 new logs [08-07-2022 01:05:02]31316: WAF :: fetched 26 new logs [08-07-2022 01:06:02]1830: WAF :: fetched 1 new logs [08-07-2022 01:07:02]4717: WAF :: fetched 99 new logs [08-07-2022 01:08:01]7408: WAF :: fetched 100 new logs [08-07-2022 01:09:01]10255: WAF :: fetched 21 new logs [08-07-2022 01:10:02]12829: WAF :: fetched 19 new logs [08-07-2022 01:11:01]15500: WAF :: fetched 90 new logs [08-07-2022 01:12:01]18348: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657253521 [08-07-2022 01:12:01]18348: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 01:12:03]18348: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 01:12:04]18348: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-0112/20220708-011201-YseukZJ6S-JgrzJ1re9XVQAAAAc [08-07-2022 01:12:04]18348: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 01:12:04]18348: WAF :: fetched 236 new logs [08-07-2022 01:13:02]21298: WAF :: fetched 44 new logs [08-07-2022 01:14:03]23896: WAF :: fetched 17 new logs [08-07-2022 01:15:02]26478: WAF :: fetched 29 new logs [08-07-2022 01:16:02]29270: WAF :: fetched 143 new logs [08-07-2022 01:17:01]32013: WAF :: fetched 6 new logs [08-07-2022 01:18:02]2473: WAF :: fetched 7 new logs [08-07-2022 01:19:02]5070: WAF :: fetched 17 new logs [08-07-2022 01:20:01]7712: WAF :: fetched 96 new logs [08-07-2022 01:21:01]10611: WAF :: fetched 2 new logs [08-07-2022 01:22:02]13500: WAF :: fetched 67 new logs [08-07-2022 01:23:04]16407: WAF :: fetched 82 new logs [08-07-2022 01:24:02]19249: WAF :: fetched 90 new logs [08-07-2022 01:25:01]21820: WAF :: fetched 108 new logs [08-07-2022 01:26:01]24429: WAF :: fetched 39 new logs [08-07-2022 01:27:02]27031: WAF :: fetched 75 new logs [08-07-2022 01:28:01]29890: WAF :: fetched 2 new logs [08-07-2022 01:29:02]318: WAF :: fetched 93 new logs [08-07-2022 01:30:02]3033: WAF :: fetched 21 new logs [08-07-2022 01:31:02]5847: WAF :: fetched 51 new logs [08-07-2022 01:32:02]8616: WAF :: fetched 145 new logs [08-07-2022 01:33:02]11723: WAF :: fetched 50 new logs [08-07-2022 01:34:01]14346: WAF :: fetched 127 new logs [08-07-2022 01:35:02]17142: WAF :: fetched 109 new logs [08-07-2022 01:36:15]19964: WAF :: fetched 70 new logs [08-07-2022 01:37:06]22855: WAF :: fetched 52 new logs [08-07-2022 01:38:02]25287: WAF :: fetched 167 new logs [08-07-2022 01:39:02]28361: WAF :: fetched 124 new logs [08-07-2022 01:40:02]30998: WAF :: fetched 149 new logs [08-07-2022 01:41:01]1511: WAF :: fetched 20 new logs [08-07-2022 01:41:01]1511: Checking for user cron vulnerabilities [08-07-2022 01:42:02]4081: WAF :: fetched 27 new logs [08-07-2022 01:43:01]6762: WAF :: fetched 20 new logs [08-07-2022 01:44:02]9675: Checking ditributed CMS bruteforce attacks [08-07-2022 01:44:02]9675: WAF :: fetched 31 new logs [08-07-2022 01:45:01]: Checking for definition updates [08-07-2022 01:45:01]12502: WAF :: fetched 62 new logs [08-07-2022 01:46:01]15199: WAF :: fetched 4 new logs [08-07-2022 01:47:02]18029: WAF :: fetched 43 new logs [08-07-2022 01:48:01]21210: WAF :: fetched 144 new logs [08-07-2022 01:49:01]24017: WAF :: fetched 54 new logs [08-07-2022 01:50:01]26907: WAF :: fetched 102 new logs [08-07-2022 01:51:01]29546: WAF :: fetched 122 new logs [08-07-2022 01:52:01]32113: WAF :: fetched 37 new logs [08-07-2022 01:53:01]2451: WAF :: fetched 25 new logs [08-07-2022 01:54:01]5213: WAF :: fetched 13 new logs [08-07-2022 01:55:02]8168: WAF :: fetched 218 new logs [08-07-2022 01:56:01]10868: WAF :: fetched 177 new logs [08-07-2022 01:57:01]13490: WAF :: fetched 63 new logs [08-07-2022 01:58:01]16372: WAF :: fetched 4 new logs [08-07-2022 01:59:02]19064: WAF :: fetched 23 new logs [08-07-2022 02:00:01]21349: WAF :: fetched 113 new logs [08-07-2022 02:01:02]24471: WAF :: fetched 39 new logs [08-07-2022 02:02:02]27054: WAF :: fetched 96 new logs [08-07-2022 02:03:01]29723: WAF :: fetched 85 new logs [08-07-2022 02:04:02]32310: WAF :: fetched 69 new logs [08-07-2022 02:05:01]2491: WAF :: fetched 62 new logs [08-07-2022 02:06:01]5230: WAF :: fetched 33 new logs [08-07-2022 02:07:01]7917: WAF :: fetched 28 new logs [08-07-2022 02:08:01]10952: WAF :: fetched 11 new logs [08-07-2022 02:09:02]13693: WAF :: fetched 39 new logs [08-07-2022 02:10:01]16330: WAF :: fetched 162 new logs [08-07-2022 02:11:02]19084: WAF :: fetched 60 new logs [08-07-2022 02:12:01]21410: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657257121 [08-07-2022 02:12:01]21410: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 02:12:03]21410: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 02:12:05]21410: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-0212/20220708-021201-Yse8oZ_jixJVrwLd0z5lRAAAABA [08-07-2022 02:12:05]21410: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 02:12:05]21410: WAF :: fetched 45 new logs [08-07-2022 02:13:01]24360: WAF :: fetched 5 new logs [08-07-2022 02:14:01]26932: WAF :: fetched 146 new logs [08-07-2022 02:15:01]29535: WAF :: fetched 114 new logs [08-07-2022 02:16:01]32123: WAF :: fetched 14 new logs [08-07-2022 02:17:04]2301: WAF :: fetched 66 new logs [08-07-2022 02:18:01]4954: WAF :: fetched 133 new logs [08-07-2022 02:19:01]7565: WAF :: fetched 31 new logs [08-07-2022 02:20:01]10159: WAF :: fetched 2 new logs [08-07-2022 02:21:02]12807: WAF :: fetched 1 new logs [08-07-2022 02:22:01]15349: WAF :: fetched 20 new logs [08-07-2022 02:23:01]18071: WAF :: fetched 11 new logs [08-07-2022 02:27:01]28465: WAF :: fetched 93 new logs [08-07-2022 02:28:01]31135: WAF :: fetched 8 new logs [08-07-2022 02:29:02]1322: WAF :: fetched 92 new logs [08-07-2022 02:30:02]3900: WAF :: fetched 61 new logs [08-07-2022 02:31:02]6559: WAF :: fetched 154 new logs [08-07-2022 02:32:01]9167: WAF :: fetched 159 new logs [08-07-2022 02:33:02]11837: WAF :: fetched 41 new logs [08-07-2022 02:34:02]14415: WAF :: fetched 5 new logs [08-07-2022 02:35:01]16980: WAF :: fetched 43 new logs [08-07-2022 02:36:01]19703: WAF :: fetched 60 new logs [08-07-2022 02:37:02]22353: WAF :: fetched 161 new logs [08-07-2022 02:38:01]25009: WAF :: fetched 52 new logs [08-07-2022 02:39:02]27619: WAF :: fetched 3 new logs [08-07-2022 02:41:02]381: WAF :: fetched 10 new logs [08-07-2022 02:41:02]381: Checking for user cron vulnerabilities [08-07-2022 02:42:01]3026: WAF :: fetched 29 new logs [08-07-2022 02:43:01]5710: WAF :: fetched 24 new logs [08-07-2022 02:44:01]8311: Checking ditributed CMS bruteforce attacks [08-07-2022 02:44:03]8311: WAF :: fetched 3 new logs [08-07-2022 02:45:01]10887: WAF :: fetched 3 new logs [08-07-2022 02:46:02]13544: WAF :: fetched 97 new logs [08-07-2022 02:47:01]16108: WAF :: fetched 61 new logs [08-07-2022 02:48:01]18855: WAF :: fetched 4 new logs [08-07-2022 02:49:02]21448: WAF :: fetched 1 new logs [08-07-2022 02:50:01]24034: WAF :: fetched 76 new logs [08-07-2022 02:51:02]26687: WAF :: fetched 112 new logs [08-07-2022 02:52:01]29232: WAF :: fetched 3 new logs [08-07-2022 02:53:02]31877: WAF :: fetched 6 new logs [08-07-2022 02:53:02]31878: Updated license status via CDN [08-07-2022 02:54:02]2077: WAF :: fetched 2 new logs [08-07-2022 02:55:01]4628: WAF :: fetched 16 new logs [08-07-2022 02:56:02]7532: WAF :: fetched 3 new logs [08-07-2022 02:57:01]10953: WAF :: fetched 2 new logs [08-07-2022 02:58:02]13803: WAF :: fetched 66 new logs [08-07-2022 02:59:02]16510: WAF :: fetched 2 new logs [08-07-2022 03:00:01]18835: WAF :: fetched 3 new logs [08-07-2022 03:00:24]18835: Found and updated 32 CMS installations [08-07-2022 03:00:59]18835: Wordpress installation #9 oabilheus.org.br has errors [08-07-2022 03:01:01]21981: WAF :: fetched 15 new logs [08-07-2022 03:02:02]24704: WAF :: fetched 38 new logs [08-07-2022 03:03:01]27505: WAF :: fetched 4 new logs [08-07-2022 03:03:15]18835: Wordpress installation #36 suryaeventos.com.br has errors [08-07-2022 03:03:31]18835: Wordpress installation #39 imoblux.com.br has errors [08-07-2022 03:04:00]18835: Wordpress installation #42 suryart.com.br has errors [08-07-2022 03:04:02]30443: WAF :: fetched 4 new logs [08-07-2022 03:04:03]18835: Sending CMS version vulnerability report emails to cpanel users [08-07-2022 03:04:06]18835: Checking wordpress installations for suspicious directories [08-07-2022 03:04:31]27542: Sending CMS version vulnerability report emails to cpanel users [08-07-2022 03:04:34]27542: Checking wordpress installations for suspicious directories [08-07-2022 03:05:01]1069: WAF :: fetched 57 new logs [08-07-2022 03:06:02]3764: WAF :: fetched 133 new logs [08-07-2022 03:07:02]6408: WAF :: fetched 35 new logs [08-07-2022 03:08:02]9186: WAF :: fetched 4 new logs [08-07-2022 03:10:01]14501: WAF :: fetched 4 new logs [08-07-2022 03:11:03]17393: WAF :: fetched 1 new logs [08-07-2022 03:12:01]20035: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657260721 [08-07-2022 03:12:01]20035: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 03:12:03]20035: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 03:12:07]20035: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-0312/20220708-031201-YsfKsYFhc_PTK7WgsDV2vAAAAAY [08-07-2022 03:12:07]20035: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 03:12:07]20035: WAF :: fetched 1 new logs [08-07-2022 03:13:02]22693: WAF :: fetched 34 new logs [08-07-2022 03:14:02]25463: WAF :: fetched 6 new logs [08-07-2022 03:15:02]28055: WAF :: fetched 6 new logs [08-07-2022 03:16:02]30696: WAF :: fetched 5 new logs [08-07-2022 03:17:01]982: WAF :: fetched 21 new logs [08-07-2022 03:18:02]3939: WAF :: fetched 21 new logs [08-07-2022 03:19:01]6875: WAF :: fetched 8 new logs [08-07-2022 03:20:02]9691: WAF :: fetched 26 new logs [08-07-2022 03:21:01]12330: WAF :: fetched 11 new logs [08-07-2022 03:22:02]14958: WAF :: fetched 4 new logs [08-07-2022 03:23:02]17831: WAF :: fetched 3 new logs [08-07-2022 03:24:01]20505: WAF :: fetched 52 new logs [08-07-2022 03:25:01]23076: WAF :: fetched 73 new logs [08-07-2022 03:26:02]25749: WAF :: fetched 55 new logs [08-07-2022 03:27:01]28343: WAF :: fetched 24 new logs [08-07-2022 03:28:02]31353: WAF :: fetched 126 new logs [08-07-2022 03:29:01]1772: WAF :: fetched 8 new logs [08-07-2022 03:30:02]2044: WAF :: fetched 21 new logs [08-07-2022 03:31:02]19375: WAF :: fetched 71 new logs [08-07-2022 03:32:01]1755: WAF :: fetched 4 new logs [08-07-2022 03:33:02]13961: WAF :: fetched 3 new logs [08-07-2022 03:34:01]16599: WAF :: fetched 4 new logs [08-07-2022 03:35:01]19314: WAF :: fetched 26 new logs [08-07-2022 03:36:02]21988: WAF :: fetched 5 new logs [08-07-2022 03:37:01]24587: WAF :: fetched 4 new logs [08-07-2022 03:38:02]27284: WAF :: fetched 2 new logs [08-07-2022 03:39:02]29838: WAF :: fetched 4 new logs [08-07-2022 03:40:01]32336: WAF :: fetched 29 new logs [08-07-2022 03:41:02]2669: WAF :: fetched 4 new logs [08-07-2022 03:41:02]2669: Checking for user cron vulnerabilities [08-07-2022 03:42:01]5199: WAF :: fetched 5 new logs [08-07-2022 03:43:02]7914: WAF :: fetched 13 new logs [08-07-2022 03:44:01]10461: Checking ditributed CMS bruteforce attacks [08-07-2022 03:44:02]10461: WAF :: fetched 3 new logs [08-07-2022 03:45:01]13022: WAF :: fetched 3 new logs [08-07-2022 03:46:01]15655: WAF :: fetched 6 new logs [08-07-2022 03:47:01]18432: WAF :: fetched 6 new logs [08-07-2022 03:48:02]21354: WAF :: fetched 6 new logs [08-07-2022 03:49:01]24208: WAF :: fetched 4 new logs [08-07-2022 03:50:01]26781: WAF :: fetched 129 new logs [08-07-2022 03:51:03]29619: WAF :: fetched 48 new logs [08-07-2022 03:52:01]32497: WAF :: fetched 20 new logs [08-07-2022 03:53:01]2863: WAF :: fetched 26 new logs [08-07-2022 03:54:01]5675: WAF :: fetched 8 new logs [08-07-2022 03:55:01]8460: WAF :: fetched 5 new logs [08-07-2022 03:56:01]11060: WAF :: fetched 3 new logs [08-07-2022 03:57:01]13846: WAF :: fetched 2 new logs [08-07-2022 03:58:02]16652: WAF :: fetched 28 new logs [08-07-2022 03:59:01]19345: WAF :: fetched 3 new logs [08-07-2022 04:00:02]21854: WAF :: fetched 4 new logs [08-07-2022 04:01:01]24980: WAF :: fetched 5 new logs [08-07-2022 04:02:01]27594: WAF :: fetched 17 new logs [08-07-2022 04:03:02]30273: WAF :: fetched 8 new logs [08-07-2022 04:04:01]451: WAF :: fetched 8 new logs [08-07-2022 04:05:01]3092: WAF :: fetched 5 new logs [08-07-2022 04:06:02]5770: WAF :: fetched 5 new logs [08-07-2022 04:07:01]8361: WAF :: fetched 14 new logs [08-07-2022 04:08:01]11026: WAF :: fetched 24 new logs [08-07-2022 04:09:02]13660: WAF :: fetched 18 new logs [08-07-2022 04:10:01]16208: WAF :: fetched 14 new logs [08-07-2022 04:11:01]18905: WAF :: fetched 54 new logs [08-07-2022 04:12:02]21510: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657264322 [08-07-2022 04:12:02]21510: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 04:12:04]21510: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 04:12:06]21510: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-0412/20220708-041202-YsfYwiZK4m9ze8qTHjEa5wAAAAM [08-07-2022 04:12:06]21510: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 04:12:06]21510: WAF :: fetched 21 new logs [08-07-2022 04:13:01]24165: WAF :: fetched 13 new logs [08-07-2022 04:14:02]26744: WAF :: fetched 4 new logs [08-07-2022 04:15:01]29247: WAF :: fetched 19 new logs [08-07-2022 04:16:02]31988: WAF :: fetched 5 new logs [08-07-2022 04:17:01]2157: WAF :: fetched 6 new logs [08-07-2022 04:18:02]4879: WAF :: fetched 15 new logs [08-07-2022 04:19:01]7464: WAF :: fetched 14 new logs [08-07-2022 04:20:04]10056: WAF :: fetched 7 new logs [08-07-2022 04:21:01]12506: WAF :: fetched 22 new logs [08-07-2022 04:22:02]15275: WAF :: fetched 18 new logs [08-07-2022 04:23:01]17930: WAF :: fetched 11 new logs [08-07-2022 04:24:02]20584: WAF :: fetched 4 new logs [08-07-2022 04:25:01]23146: WAF :: fetched 5 new logs [08-07-2022 04:26:01]25785: WAF :: fetched 25 new logs [08-07-2022 04:27:01]28334: WAF :: fetched 4 new logs [08-07-2022 04:28:01]31026: WAF :: fetched 6 new logs [08-07-2022 04:29:01]1191: WAF :: fetched 5 new logs [08-07-2022 04:30:02]3784: WAF :: fetched 7 new logs [08-07-2022 04:31:01]6420: WAF :: fetched 6 new logs [08-07-2022 04:32:01]9023: WAF :: fetched 4 new logs [08-07-2022 04:33:02]11713: WAF :: fetched 20 new logs [08-07-2022 04:34:01]14239: WAF :: fetched 2 new logs [08-07-2022 04:35:02]16801: WAF :: fetched 15 new logs [08-07-2022 04:36:02]19510: WAF :: fetched 36 new logs [08-07-2022 04:37:01]22055: WAF :: fetched 5 new logs [08-07-2022 04:38:01]24703: WAF :: fetched 4 new logs [08-07-2022 04:39:02]27312: WAF :: fetched 2 new logs [08-07-2022 04:40:01]29879: WAF :: fetched 61 new logs [08-07-2022 04:41:02]32531: WAF :: fetched 7 new logs [08-07-2022 04:41:02]32531: Checking for user cron vulnerabilities [08-07-2022 04:42:01]2618: WAF :: fetched 3 new logs [08-07-2022 04:43:01]5329: WAF :: fetched 6 new logs [08-07-2022 04:44:01]7951: Checking ditributed CMS bruteforce attacks [08-07-2022 04:44:03]7951: WAF :: fetched 79 new logs [08-07-2022 04:45:01]10503: WAF :: fetched 42 new logs [08-07-2022 04:46:02]13123: WAF :: fetched 40 new logs [08-07-2022 04:47:01]15687: WAF :: fetched 54 new logs [08-07-2022 04:48:01]18410: WAF :: fetched 107 new logs [08-07-2022 04:49:02]21019: WAF :: fetched 41 new logs [08-07-2022 04:50:01]23579: WAF :: fetched 12 new logs [08-07-2022 04:51:02]26207: WAF :: fetched 6 new logs [08-07-2022 04:52:01]28768: WAF :: fetched 15 new logs [08-07-2022 04:53:02]31417: WAF :: fetched 3 new logs [08-07-2022 04:54:02]1636: WAF :: fetched 12 new logs [08-07-2022 04:55:02]4198: WAF :: fetched 29 new logs [08-07-2022 04:56:01]6804: WAF :: fetched 35 new logs [08-07-2022 04:57:01]9378: WAF :: fetched 4 new logs [08-07-2022 04:58:02]12044: WAF :: fetched 3 new logs [08-07-2022 04:59:01]14620: WAF :: fetched 18 new logs [08-07-2022 05:00:02]16941: WAF :: fetched 9 new logs [08-07-2022 05:01:02]20093: WAF :: fetched 7 new logs [08-07-2022 05:01:42]20082: Starting daily scan on files updated in last 24 hrs [08-07-2022 05:02:01]22685: WAF :: fetched 5 new logs [08-07-2022 05:03:01]25372: WAF :: fetched 36 new logs [08-07-2022 05:04:01]27954: WAF :: fetched 7 new logs [08-07-2022 05:05:01]30512: WAF :: fetched 5 new logs [08-07-2022 05:06:01]725: WAF :: fetched 5 new logs [08-07-2022 05:07:02]3357: WAF :: fetched 19 new logs [08-07-2022 05:08:02]5971: WAF :: fetched 5 new logs [08-07-2022 05:09:01]8557: WAF :: fetched 14 new logs [08-07-2022 05:10:01]11144: WAF :: fetched 36 new logs [08-07-2022 05:11:02]13784: WAF :: fetched 55 new logs [08-07-2022 05:12:01]16332: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657267921 [08-07-2022 05:12:01]16332: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 05:12:03]16332: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 05:12:04]16332: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-0512/20220708-051201-Ysfm0fXHsE661Yhuv5MoRQAAAAo [08-07-2022 05:12:04]16332: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 05:12:04]16332: WAF :: fetched 38 new logs [08-07-2022 05:13:01]19112: WAF :: fetched 32 new logs [08-07-2022 05:14:01]21700: WAF :: fetched 39 new logs [08-07-2022 05:15:01]24277: WAF :: fetched 46 new logs [08-07-2022 05:16:02]26914: WAF :: fetched 40 new logs [08-07-2022 05:17:01]29473: WAF :: fetched 42 new logs [08-07-2022 05:18:01]32155: WAF :: fetched 66 new logs [08-07-2022 05:19:01]2347: WAF :: fetched 4 new logs [08-07-2022 05:20:01]4926: WAF :: fetched 3 new logs [08-07-2022 05:22:01]10220: WAF :: fetched 17 new logs [08-07-2022 05:23:02]12884: WAF :: fetched 1 new logs [08-07-2022 05:24:01]15437: WAF :: fetched 2 new logs [08-07-2022 05:25:02]18106: WAF :: fetched 2 new logs [08-07-2022 05:26:02]20753: WAF :: fetched 3 new logs [08-07-2022 05:27:02]23345: WAF :: fetched 11 new logs [08-07-2022 05:28:01]26018: WAF :: fetched 5 new logs [08-07-2022 05:29:01]28581: WAF :: fetched 6 new logs [08-07-2022 05:30:02]31248: WAF :: fetched 3 new logs [08-07-2022 05:31:02]1525: WAF :: fetched 4 new logs [08-07-2022 05:32:01]4169: WAF :: fetched 5 new logs [08-07-2022 05:33:01]6877: WAF :: fetched 14 new logs [08-07-2022 05:34:01]9527: WAF :: fetched 5 new logs [08-07-2022 05:35:02]12147: WAF :: fetched 3 new logs [08-07-2022 05:36:02]14780: WAF :: fetched 2 new logs [08-07-2022 05:37:01]17426: WAF :: fetched 2 new logs [08-07-2022 05:38:01]20178: WAF :: fetched 3 new logs [08-07-2022 05:39:02]22848: WAF :: fetched 5 new logs [08-07-2022 05:40:01]25483: WAF :: fetched 1 new logs [08-07-2022 05:41:01]28108: WAF :: fetched 3 new logs [08-07-2022 05:41:01]28108: Checking for user cron vulnerabilities [08-07-2022 05:42:01]30675: WAF :: fetched 1 new logs [08-07-2022 05:43:02]934: WAF :: fetched 2 new logs [08-07-2022 05:44:01]3568: Checking ditributed CMS bruteforce attacks [08-07-2022 05:44:02]3568: WAF :: fetched 4 new logs [08-07-2022 05:45:02]6264: WAF :: fetched 5 new logs [08-07-2022 05:46:01]8775: WAF :: fetched 5 new logs [08-07-2022 05:47:02]11566: WAF :: fetched 3 new logs [08-07-2022 05:48:01]14214: WAF :: fetched 3 new logs [08-07-2022 05:49:02]16932: WAF :: fetched 2 new logs [08-07-2022 05:50:01]19653: WAF :: fetched 3 new logs [08-07-2022 05:51:02]22304: WAF :: fetched 3 new logs [08-07-2022 05:53:01]27541: WAF :: fetched 1 new logs [08-07-2022 05:54:01]30200: WAF :: fetched 2 new logs [08-07-2022 05:55:02]353: WAF :: fetched 4 new logs [08-07-2022 05:56:01]3054: WAF :: fetched 4 new logs [08-07-2022 05:57:01]5690: WAF :: fetched 3 new logs [08-07-2022 05:58:02]8326: WAF :: fetched 2 new logs [08-07-2022 05:59:03]11026: WAF :: fetched 2 new logs [08-07-2022 06:00:02]13412: WAF :: fetched 2 new logs [08-07-2022 06:01:01]16515: WAF :: fetched 5 new logs [08-07-2022 06:02:01]19239: WAF :: fetched 2 new logs [08-07-2022 06:03:01]21900: WAF :: fetched 2 new logs [08-07-2022 06:04:02]24566: WAF :: fetched 2 new logs [08-07-2022 06:05:02]27202: WAF :: fetched 3 new logs [08-07-2022 06:06:01]29867: WAF :: fetched 2 new logs [08-07-2022 06:07:02]32519: WAF :: fetched 2 new logs [08-07-2022 06:08:01]2688: WAF :: fetched 2 new logs [08-07-2022 06:09:01]5405: WAF :: fetched 3 new logs [08-07-2022 06:10:02]8058: WAF :: fetched 1 new logs [08-07-2022 06:12:02]13395: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657271522 [08-07-2022 06:12:02]13395: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 06:12:04]13395: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 06:12:06]13395: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-0612/20220708-061202-Ysf04oFqwyG40A6KENdgxgAAAAc [08-07-2022 06:12:06]13395: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 06:12:06]13395: WAF :: fetched 5 new logs [08-07-2022 06:13:01]16002: WAF :: fetched 4 new logs [08-07-2022 06:14:01]18819: WAF :: fetched 5 new logs [08-07-2022 06:15:01]21458: WAF :: fetched 4 new logs [08-07-2022 06:16:01]24168: WAF :: fetched 2 new logs [08-07-2022 06:17:02]26816: WAF :: fetched 2 new logs [08-07-2022 06:18:01]29423: WAF :: fetched 3 new logs [08-07-2022 06:19:02]32159: WAF :: fetched 4 new logs [08-07-2022 06:20:01]2339: WAF :: fetched 3 new logs [08-07-2022 06:21:01]5056: WAF :: fetched 3 new logs [08-07-2022 06:22:01]7655: WAF :: fetched 2 new logs [08-07-2022 06:23:02]10292: WAF :: fetched 1 new logs [08-07-2022 06:24:01]12983: WAF :: fetched 4 new logs [08-07-2022 06:25:01]15611: WAF :: fetched 5 new logs [08-07-2022 06:26:02]18396: WAF :: fetched 6 new logs [08-07-2022 06:27:01]21161: WAF :: fetched 12 new logs [08-07-2022 06:28:01]23797: WAF :: fetched 20 new logs [08-07-2022 06:29:02]26503: WAF :: fetched 4 new logs [08-07-2022 06:30:02]29112: WAF :: fetched 3 new logs [08-07-2022 06:31:01]31795: WAF :: fetched 73 new logs [08-07-2022 06:32:01]2049: WAF :: fetched 4 new logs [08-07-2022 06:33:02]4704: WAF :: fetched 1 new logs [08-07-2022 06:34:01]7397: WAF :: fetched 41 new logs [08-07-2022 06:35:01]10046: WAF :: fetched 3 new logs [08-07-2022 06:36:01]12716: WAF :: fetched 3 new logs [08-07-2022 06:37:01]15329: WAF :: fetched 2 new logs [08-07-2022 06:38:02]18051: WAF :: fetched 4 new logs [08-07-2022 06:39:01]20787: WAF :: fetched 3 new logs [08-07-2022 06:40:02]23425: WAF :: fetched 5 new logs [08-07-2022 06:41:02]25999: WAF :: fetched 3 new logs [08-07-2022 06:41:02]25999: Checking for user cron vulnerabilities [08-07-2022 06:42:02]28782: WAF :: fetched 45 new logs [08-07-2022 06:43:01]31402: WAF :: fetched 2 new logs [08-07-2022 06:44:02]1716: Checking ditributed CMS bruteforce attacks [08-07-2022 06:44:03]1716: WAF :: fetched 2 new logs [08-07-2022 06:45:01]4320: WAF :: fetched 1 new logs [08-07-2022 06:46:01]6961: WAF :: fetched 2 new logs [08-07-2022 06:47:02]9624: WAF :: fetched 1 new logs [08-07-2022 06:48:02]12176: WAF :: fetched 1 new logs [08-07-2022 06:51:02]20319: WAF :: fetched 30 new logs [08-07-2022 06:52:01]22911: WAF :: fetched 1 new logs [08-07-2022 06:53:01]25545: WAF :: fetched 5 new logs [08-07-2022 06:54:02]28285: WAF :: fetched 2 new logs [08-07-2022 06:55:01]30926: WAF :: fetched 2 new logs [08-07-2022 07:00:01]11548: WAF :: fetched 1 new logs [08-07-2022 07:01:01]14648: WAF :: fetched 5 new logs [08-07-2022 07:02:01]17307: WAF :: fetched 2 new logs [08-07-2022 07:03:02]20036: WAF :: fetched 1 new logs [08-07-2022 07:05:02]25355: WAF :: fetched 3 new logs [08-07-2022 07:06:01]27991: WAF :: fetched 2 new logs [08-07-2022 07:08:02]878: WAF :: fetched 2 new logs [08-07-2022 07:09:01]3573: WAF :: fetched 1 new logs [08-07-2022 07:10:01]6219: WAF :: fetched 1 new logs [08-07-2022 07:11:02]8934: WAF :: fetched 3 new logs [08-07-2022 07:12:02]11561: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657275122 [08-07-2022 07:12:02]11561: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 07:12:04]11561: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 07:12:04]11561: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-0712/20220708-071202-YsgC8gfj_rJcnfWloQ_3aQAAABI [08-07-2022 07:12:04]11561: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 07:12:04]11561: WAF :: fetched 8 new logs [08-07-2022 07:13:01]14148: WAF :: fetched 2 new logs [08-07-2022 07:14:02]17011: WAF :: fetched 3 new logs [08-07-2022 07:15:01]19745: WAF :: fetched 7 new logs [08-07-2022 07:16:01]22393: WAF :: fetched 2 new logs [08-07-2022 07:17:02]25049: WAF :: fetched 2 new logs [08-07-2022 07:18:01]27685: WAF :: fetched 3 new logs [08-07-2022 07:19:01]30409: WAF :: fetched 1 new logs [08-07-2022 07:20:01]646: WAF :: fetched 3 new logs [08-07-2022 07:21:02]3392: WAF :: fetched 4 new logs [08-07-2022 07:22:01]6003: WAF :: fetched 3 new logs [08-07-2022 07:23:02]8691: WAF :: fetched 6 new logs [08-07-2022 07:24:01]11423: WAF :: fetched 8 new logs [08-07-2022 07:25:02]14108: WAF :: fetched 4 new logs [08-07-2022 07:26:01]16790: WAF :: fetched 5 new logs [08-07-2022 07:27:02]19541: WAF :: fetched 2 new logs [08-07-2022 07:28:01]22066: WAF :: fetched 1 new logs [08-07-2022 07:29:01]24851: WAF :: fetched 2 new logs [08-07-2022 07:30:03]27505: WAF :: fetched 3 new logs [08-07-2022 07:31:01]30198: WAF :: fetched 4 new logs [08-07-2022 07:32:02]480: WAF :: fetched 5 new logs [08-07-2022 07:33:01]3146: WAF :: fetched 3 new logs [08-07-2022 07:34:01]5916: WAF :: fetched 13 new logs [08-07-2022 07:35:02]8609: WAF :: fetched 1 new logs [08-07-2022 07:36:02]11292: WAF :: fetched 23 new logs [08-07-2022 07:37:01]13949: WAF :: fetched 268 new logs [08-07-2022 07:38:02]16593: WAF :: fetched 5 new logs [08-07-2022 07:39:01]19380: WAF :: fetched 3 new logs [08-07-2022 07:40:01]22062: WAF :: fetched 12 new logs [08-07-2022 07:41:02]24721: WAF :: fetched 2 new logs [08-07-2022 07:41:02]24721: Checking for user cron vulnerabilities [08-07-2022 07:42:02]27358: WAF :: fetched 4 new logs [08-07-2022 07:43:01]30024: WAF :: fetched 1 new logs [08-07-2022 07:44:01]32741: Checking ditributed CMS bruteforce attacks [08-07-2022 07:44:01]32741: WAF :: fetched 1 new logs [08-07-2022 07:45:01]: Checking for definition updates [08-07-2022 07:45:02]2978: WAF :: fetched 3 new logs [08-07-2022 07:46:01]5649: WAF :: fetched 1 new logs [08-07-2022 07:47:02]8327: WAF :: fetched 6 new logs [08-07-2022 07:48:01]10904: WAF :: fetched 737 new logs [08-07-2022 07:49:01]13742: WAF :: fetched 2 new logs [08-07-2022 07:50:01]16385: WAF :: fetched 6 new logs [08-07-2022 07:51:02]19238: WAF :: fetched 4 new logs [08-07-2022 07:52:01]21886: WAF :: fetched 5 new logs [08-07-2022 07:53:01]24514: WAF :: fetched 5 new logs [08-07-2022 07:54:02]27258: WAF :: fetched 2 new logs [08-07-2022 07:55:02]29890: WAF :: fetched 3 new logs [08-07-2022 07:56:01]32427: WAF :: fetched 4 new logs [08-07-2022 07:57:01]2847: WAF :: fetched 2 new logs [08-07-2022 07:58:01]5450: WAF :: fetched 5 new logs [08-07-2022 07:59:02]8212: WAF :: fetched 4 new logs [08-07-2022 08:00:02]10584: WAF :: fetched 1 new logs [08-07-2022 08:01:02]13793: WAF :: fetched 2 new logs [08-07-2022 08:02:02]16587: WAF :: fetched 1163 new logs [08-07-2022 08:03:02]19337: WAF :: fetched 4 new logs [08-07-2022 08:04:01]22035: WAF :: fetched 2 new logs [08-07-2022 08:05:02]24683: WAF :: fetched 1 new logs [08-07-2022 08:06:02]27381: WAF :: fetched 5 new logs [08-07-2022 08:07:01]30016: WAF :: fetched 9 new logs [08-07-2022 08:08:01]32662: WAF :: fetched 2 new logs [08-07-2022 08:09:02]3027: WAF :: fetched 7 new logs [08-07-2022 08:10:02]5652: WAF :: fetched 2 new logs [08-07-2022 08:11:01]8143: WAF :: fetched 1 new logs [08-07-2022 08:12:02]11083: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657278722 [08-07-2022 08:12:02]11083: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 08:12:04]11083: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 08:12:05]11083: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-0812/20220708-081202-YsgRAvXzUAuzFqs3OeRrbgAAAAc [08-07-2022 08:12:05]11083: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 08:12:05]11083: WAF :: fetched 3 new logs [08-07-2022 08:13:01]13713: WAF :: fetched 1 new logs [08-07-2022 08:14:02]16482: WAF :: fetched 3 new logs [08-07-2022 08:15:01]19153: WAF :: fetched 5 new logs [08-07-2022 08:16:01]21826: WAF :: fetched 4 new logs [08-07-2022 08:17:02]24491: WAF :: fetched 3 new logs [08-07-2022 08:18:01]27153: WAF :: fetched 4 new logs [08-07-2022 08:19:01]29876: WAF :: fetched 2 new logs [08-07-2022 08:20:02]32624: WAF :: fetched 9 new logs [08-07-2022 08:21:02]2899: WAF :: fetched 1 new logs [08-07-2022 08:22:02]5444: WAF :: fetched 6 new logs [08-07-2022 08:23:01]8218: WAF :: fetched 5 new logs [08-07-2022 08:24:02]10985: WAF :: fetched 3 new logs [08-07-2022 08:25:01]13472: WAF :: fetched 1 new logs [08-07-2022 08:26:02]16268: WAF :: fetched 2 new logs [08-07-2022 08:27:02]19008: WAF :: fetched 2 new logs [08-07-2022 08:28:02]21703: WAF :: fetched 8 new logs [08-07-2022 08:29:02]24424: WAF :: fetched 10 new logs [08-07-2022 08:30:01]27080: WAF :: fetched 6 new logs [08-07-2022 08:31:01]29820: WAF :: fetched 8 new logs [08-07-2022 08:32:02]32495: WAF :: fetched 7 new logs [08-07-2022 08:33:01]2728: WAF :: fetched 12 new logs [08-07-2022 08:34:01]5436: WAF :: fetched 7 new logs [08-07-2022 08:35:01]8107: WAF :: fetched 9 new logs [08-07-2022 08:36:02]10838: WAF :: fetched 8 new logs [08-07-2022 08:37:01]13489: WAF :: fetched 7 new logs [08-07-2022 08:38:01]16171: WAF :: fetched 8 new logs [08-07-2022 08:39:01]19012: WAF :: fetched 6 new logs [08-07-2022 08:40:02]21697: WAF :: fetched 3 new logs [08-07-2022 08:41:01]24383: WAF :: fetched 5 new logs [08-07-2022 08:41:01]24383: Checking for user cron vulnerabilities [08-07-2022 08:43:02]29727: WAF :: fetched 2 new logs [08-07-2022 08:44:02]32420: Checking ditributed CMS bruteforce attacks [08-07-2022 08:44:05]32420: WAF :: fetched 4 new logs [08-07-2022 08:45:01]2608: WAF :: fetched 5 new logs [08-07-2022 08:46:02]5409: WAF :: fetched 2 new logs [08-07-2022 08:47:01]8072: WAF :: fetched 1 new logs [08-07-2022 08:48:01]10726: WAF :: fetched 3 new logs [08-07-2022 08:49:01]13456: WAF :: fetched 5 new logs [08-07-2022 08:50:01]16192: WAF :: fetched 2 new logs [08-07-2022 08:51:02]19027: WAF :: fetched 2 new logs [08-07-2022 08:52:01]21671: WAF :: fetched 2 new logs [08-07-2022 08:53:02]24409: WAF :: fetched 2 new logs [08-07-2022 08:54:02]27137: WAF :: fetched 9 new logs [08-07-2022 08:55:02]29810: WAF :: fetched 12 new logs [08-07-2022 08:56:01]32456: WAF :: fetched 11 new logs [08-07-2022 08:57:02]2754: WAF :: fetched 22 new logs [08-07-2022 08:58:01]5407: WAF :: fetched 13 new logs [08-07-2022 08:59:02]8185: WAF :: fetched 11 new logs [08-07-2022 09:00:02]10620: WAF :: fetched 5 new logs [08-07-2022 09:01:04]13797: WAF :: fetched 11 new logs [08-07-2022 09:02:01]16481: WAF :: fetched 7 new logs [08-07-2022 09:03:02]19276: WAF :: fetched 3 new logs [08-07-2022 09:05:01]24676: WAF :: fetched 3 new logs [08-07-2022 09:06:01]27351: WAF :: fetched 1 new logs [08-07-2022 09:07:01]30050: WAF :: fetched 2 new logs [08-07-2022 09:08:01]32699: WAF :: fetched 4 new logs [08-07-2022 09:09:02]3061: WAF :: fetched 1 new logs [08-07-2022 09:10:01]5736: WAF :: fetched 5 new logs [08-07-2022 09:11:02]8496: WAF :: fetched 1 new logs [08-07-2022 09:12:01]11231: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657282321 [08-07-2022 09:12:04]11231: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 09:12:06]11231: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 09:12:08]11231: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-0912/20220708-091204-YsgfFOkoqgfuYZwSuIQSAwAAAB4 [08-07-2022 09:12:08]11231: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 09:12:08]11231: WAF :: fetched 10 new logs [08-07-2022 09:13:02]14035: WAF :: fetched 5 new logs [08-07-2022 09:14:01]16742: WAF :: fetched 2 new logs [08-07-2022 09:15:01]19563: WAF :: fetched 4 new logs [08-07-2022 09:16:02]22329: WAF :: fetched 3 new logs [08-07-2022 09:17:01]24995: WAF :: fetched 4 new logs [08-07-2022 09:18:01]27729: WAF :: fetched 7 new logs [08-07-2022 09:19:01]30525: WAF :: fetched 6 new logs [08-07-2022 09:21:01]3412: WAF :: fetched 3 new logs [08-07-2022 09:22:01]6321: WAF :: fetched 100 new logs [08-07-2022 09:22:01]6323: httpd.conf changed. Refreshing watchlist. [08-07-2022 09:23:02]9111: WAF :: fetched 1 new logs [08-07-2022 09:24:01]11947: WAF :: fetched 5 new logs [08-07-2022 09:25:01]14655: WAF :: fetched 2 new logs [08-07-2022 09:26:02]17487: WAF :: fetched 4 new logs [08-07-2022 09:27:02]20298: WAF :: fetched 33 new logs [08-07-2022 09:28:02]22962: WAF :: fetched 27 new logs [08-07-2022 09:28:02]22964: httpd.conf changed. Refreshing watchlist. [08-07-2022 09:29:01]25768: WAF :: fetched 4 new logs [08-07-2022 09:30:01]28436: WAF :: fetched 1 new logs [08-07-2022 09:31:02]31222: WAF :: fetched 3 new logs [08-07-2022 09:32:02]1577: WAF :: fetched 1 new logs [08-07-2022 09:33:01]4262: WAF :: fetched 4 new logs [08-07-2022 09:34:01]7047: WAF :: fetched 2 new logs [08-07-2022 09:35:02]9814: WAF :: fetched 7 new logs [08-07-2022 09:36:02]12620: WAF :: fetched 3 new logs [08-07-2022 09:37:01]15284: WAF :: fetched 7 new logs [08-07-2022 09:38:02]18050: WAF :: fetched 3 new logs [08-07-2022 09:39:02]20846: WAF :: fetched 7 new logs [08-07-2022 09:40:01]23512: WAF :: fetched 6 new logs [08-07-2022 09:41:01]26329: WAF :: fetched 6 new logs [08-07-2022 09:41:01]26329: Checking for user cron vulnerabilities [08-07-2022 09:42:01]29088: WAF :: fetched 3 new logs [08-07-2022 09:43:01]31851: WAF :: fetched 4 new logs [08-07-2022 09:44:01]2283: Checking ditributed CMS bruteforce attacks [08-07-2022 09:44:04]2283: WAF :: fetched 8 new logs [08-07-2022 09:45:02]5071: WAF :: fetched 3 new logs [08-07-2022 09:46:01]7841: WAF :: fetched 8 new logs [08-07-2022 09:47:01]10525: WAF :: fetched 6 new logs [08-07-2022 09:48:01]13248: WAF :: fetched 2 new logs [08-07-2022 09:49:02]16027: WAF :: fetched 2 new logs [08-07-2022 09:50:01]18831: WAF :: fetched 4 new logs [08-07-2022 09:51:02]21657: WAF :: fetched 5 new logs [08-07-2022 09:52:01]24338: WAF :: fetched 1 new logs [08-07-2022 09:53:02]27168: WAF :: fetched 5 new logs [08-07-2022 09:54:01]29953: WAF :: fetched 2 new logs [08-07-2022 09:55:02]32756: WAF :: fetched 3 new logs [08-07-2022 09:56:02]3189: WAF :: fetched 2 new logs [08-07-2022 09:57:02]5911: WAF :: fetched 1 new logs [08-07-2022 09:58:01]8609: WAF :: fetched 5 new logs [08-07-2022 09:59:02]11474: WAF :: fetched 5 new logs [08-07-2022 10:00:02]13900: WAF :: fetched 4 new logs [08-07-2022 10:01:02]17063: WAF :: fetched 2 new logs [08-07-2022 10:02:01]19846: WAF :: fetched 15 new logs [08-07-2022 10:03:02]22661: WAF :: fetched 1 new logs [08-07-2022 10:04:01]25499: WAF :: fetched 5 new logs [08-07-2022 10:05:01]28258: WAF :: fetched 1 new logs [08-07-2022 10:06:03]31085: WAF :: fetched 3 new logs [08-07-2022 10:07:01]1436: WAF :: fetched 4 new logs [08-07-2022 10:08:02]4227: WAF :: fetched 4 new logs [08-07-2022 10:09:01]7072: WAF :: fetched 2 new logs [08-07-2022 10:10:01]10004: WAF :: fetched 6 new logs [08-07-2022 10:11:01]12934: WAF :: fetched 3 new logs [08-07-2022 10:12:02]15752: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657285922 [08-07-2022 10:12:02]15752: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 10:12:04]15752: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 10:12:06]15752: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-1012/20220708-101202-YsgtIkd9_Wqu9tXM3D1oawAAAAI [08-07-2022 10:12:06]15752: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 10:12:06]15752: WAF :: fetched 5 new logs [08-07-2022 10:13:01]18503: WAF :: fetched 7 new logs [08-07-2022 10:14:02]21333: WAF :: fetched 2 new logs [08-07-2022 10:15:02]24159: WAF :: fetched 1 new logs [08-07-2022 10:16:01]26964: WAF :: fetched 2 new logs [08-07-2022 10:17:01]29696: WAF :: fetched 2 new logs [08-07-2022 10:18:01]32455: WAF :: fetched 7 new logs [08-07-2022 10:19:01]2987: WAF :: fetched 2 new logs [08-07-2022 10:20:02]5648: WAF :: fetched 4 new logs [08-07-2022 10:21:01]8521: WAF :: fetched 1 new logs [08-07-2022 10:22:02]11305: WAF :: fetched 5 new logs [08-07-2022 10:23:01]14066: WAF :: fetched 3 new logs [08-07-2022 10:24:01]16896: WAF :: fetched 2 new logs [08-07-2022 10:25:02]19800: WAF :: fetched 3 new logs [08-07-2022 10:26:01]22630: WAF :: fetched 2 new logs [08-07-2022 10:27:02]25372: WAF :: fetched 4 new logs [08-07-2022 10:28:03]28000: WAF :: fetched 3 new logs [08-07-2022 10:29:02]30819: WAF :: fetched 9 new logs [08-07-2022 10:30:01]1179: WAF :: fetched 3 new logs [08-07-2022 10:31:01]3990: WAF :: fetched 2 new logs [08-07-2022 10:32:02]6769: WAF :: fetched 9 new logs [08-07-2022 10:33:01]9490: WAF :: fetched 1 new logs [08-07-2022 10:34:01]12307: WAF :: fetched 4 new logs [08-07-2022 10:35:01]15095: WAF :: fetched 6 new logs [08-07-2022 10:36:02]17950: WAF :: fetched 2 new logs [08-07-2022 10:37:03]20739: WAF :: fetched 1 new logs [08-07-2022 10:38:01]23479: WAF :: fetched 1 new logs [08-07-2022 10:39:02]26266: WAF :: fetched 3 new logs [08-07-2022 10:40:01]29141: WAF :: fetched 5 new logs [08-07-2022 10:41:01]31919: WAF :: fetched 3 new logs [08-07-2022 10:41:01]31919: Checking for user cron vulnerabilities [08-07-2022 10:42:02]2154: WAF :: fetched 4 new logs [08-07-2022 10:43:01]4821: WAF :: fetched 8 new logs [08-07-2022 10:44:01]7497: Checking ditributed CMS bruteforce attacks [08-07-2022 10:44:04]7497: WAF :: fetched 7 new logs [08-07-2022 10:45:02]10307: WAF :: fetched 10 new logs [08-07-2022 10:46:02]13056: WAF :: fetched 6 new logs [08-07-2022 10:47:02]15760: WAF :: fetched 4 new logs [08-07-2022 10:48:02]18506: WAF :: fetched 4 new logs [08-07-2022 10:50:01]24128: WAF :: fetched 3 new logs [08-07-2022 10:51:02]26910: WAF :: fetched 1 new logs [08-07-2022 10:52:01]29683: WAF :: fetched 4 new logs [08-07-2022 10:53:03]32390: WAF :: fetched 3 new logs [08-07-2022 10:54:01]2826: WAF :: fetched 5 new logs [08-07-2022 10:55:02]5669: WAF :: fetched 2 new logs [08-07-2022 10:56:01]8494: WAF :: fetched 6 new logs [08-07-2022 10:57:02]11325: WAF :: fetched 8 new logs [08-07-2022 10:58:01]13993: WAF :: fetched 2 new logs [08-07-2022 10:59:01]16654: WAF :: fetched 4 new logs [08-07-2022 11:00:01]19261: WAF :: fetched 2 new logs [08-07-2022 11:01:02]22427: WAF :: fetched 2 new logs [08-07-2022 11:02:02]25128: WAF :: fetched 3 new logs [08-07-2022 11:03:01]27817: WAF :: fetched 11 new logs [08-07-2022 11:04:02]30514: WAF :: fetched 2 new logs [08-07-2022 11:05:01]808: WAF :: fetched 4 new logs [08-07-2022 11:06:02]3600: WAF :: fetched 4 new logs [08-07-2022 11:07:01]6249: WAF :: fetched 2 new logs [08-07-2022 11:08:01]8991: WAF :: fetched 8 new logs [08-07-2022 11:08:35]6400: Performed RBL check for 23.111.136.34. [08-07-2022 11:09:02]11796: WAF :: fetched 5 new logs [08-07-2022 11:10:01]14628: WAF :: fetched 6 new logs [08-07-2022 11:11:02]17447: WAF :: fetched 2 new logs [08-07-2022 11:12:01]20188: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657289521 [08-07-2022 11:12:01]20188: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 11:12:03]20188: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 11:12:05]20188: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-1112/20220708-111201-Ysg7MYMJs8eNtNv266qE_QAAAAc [08-07-2022 11:12:05]20188: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 11:12:05]20188: WAF :: fetched 2 new logs [08-07-2022 11:13:02]23073: WAF :: fetched 2 new logs [08-07-2022 11:14:01]25854: WAF :: fetched 2 new logs [08-07-2022 11:15:02]28790: WAF :: fetched 8 new logs [08-07-2022 11:16:01]31472: WAF :: fetched 1 new logs [08-07-2022 11:17:01]2004: WAF :: fetched 3 new logs [08-07-2022 11:18:02]4701: WAF :: fetched 7 new logs [08-07-2022 11:19:01]7543: WAF :: fetched 5 new logs [08-07-2022 11:20:02]10389: WAF :: fetched 2 new logs [08-07-2022 11:21:01]13197: WAF :: fetched 9 new logs [08-07-2022 11:22:02]16009: WAF :: fetched 4 new logs [08-07-2022 11:23:01]18754: WAF :: fetched 4 new logs [08-07-2022 11:24:01]21538: WAF :: fetched 6 new logs [08-07-2022 11:25:01]24401: WAF :: fetched 5 new logs [08-07-2022 11:26:01]27135: WAF :: fetched 6 new logs [08-07-2022 11:27:02]29904: WAF :: fetched 2 new logs [08-07-2022 11:28:01]32695: WAF :: fetched 5 new logs [08-07-2022 11:33:02]14394: WAF :: fetched 3 new logs [08-07-2022 11:34:02]17134: WAF :: fetched 4 new logs [08-07-2022 11:35:01]20024: WAF :: fetched 2 new logs [08-07-2022 11:36:01]22803: WAF :: fetched 4 new logs [08-07-2022 11:37:02]25501: WAF :: fetched 6 new logs [08-07-2022 11:38:01]28249: WAF :: fetched 3 new logs [08-07-2022 11:39:01]30907: WAF :: fetched 6 new logs [08-07-2022 11:40:02]1302: WAF :: fetched 4 new logs [08-07-2022 11:41:01]3881: WAF :: fetched 5 new logs [08-07-2022 11:41:01]3881: Checking for user cron vulnerabilities [08-07-2022 11:42:01]6624: WAF :: fetched 4 new logs [08-07-2022 11:43:01]9261: WAF :: fetched 4 new logs [08-07-2022 11:44:01]11992: Checking ditributed CMS bruteforce attacks [08-07-2022 11:44:04]11992: WAF :: fetched 9 new logs [08-07-2022 11:45:02]14709: WAF :: fetched 6 new logs [08-07-2022 11:46:01]17392: WAF :: fetched 4 new logs [08-07-2022 11:47:01]20213: WAF :: fetched 8 new logs [08-07-2022 11:48:01]22859: WAF :: fetched 7 new logs [08-07-2022 11:49:02]25507: WAF :: fetched 10 new logs [08-07-2022 11:50:01]28248: WAF :: fetched 12 new logs [08-07-2022 11:51:01]31075: WAF :: fetched 6 new logs [08-07-2022 11:52:02]1401: WAF :: fetched 7 new logs [08-07-2022 11:53:01]4156: WAF :: fetched 7 new logs [08-07-2022 11:54:01]6784: WAF :: fetched 10 new logs [08-07-2022 11:55:02]9587: WAF :: fetched 11 new logs [08-07-2022 11:56:02]12351: WAF :: fetched 7 new logs [08-07-2022 11:57:01]15004: WAF :: fetched 10 new logs [08-07-2022 11:58:02]17662: WAF :: fetched 12 new logs [08-07-2022 11:59:02]20349: WAF :: fetched 7 new logs [08-07-2022 12:00:01]22834: WAF :: fetched 9 new logs [08-07-2022 12:01:02]26013: WAF :: fetched 6 new logs [08-07-2022 12:02:01]28697: WAF :: fetched 7 new logs [08-07-2022 12:03:01]31349: WAF :: fetched 7 new logs [08-07-2022 12:04:03]1581: WAF :: fetched 10 new logs [08-07-2022 12:05:02]4337: WAF :: fetched 6 new logs [08-07-2022 12:06:01]7045: WAF :: fetched 7 new logs [08-07-2022 12:07:01]9673: WAF :: fetched 7 new logs [08-07-2022 12:08:01]12345: WAF :: fetched 9 new logs [08-07-2022 12:09:01]14969: WAF :: fetched 8 new logs [08-07-2022 12:10:01]17688: WAF :: fetched 11 new logs [08-07-2022 12:11:02]20479: WAF :: fetched 8 new logs [08-07-2022 12:12:01]23090: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657293121 [08-07-2022 12:12:01]23090: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 12:12:03]23090: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 12:12:05]23090: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-1212/20220708-121201-YshJQX_gniwdUGjV9TdHTgAAABQ [08-07-2022 12:12:05]23090: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 12:12:05]23090: WAF :: fetched 3 new logs [08-07-2022 12:13:04]25785: WAF :: fetched 6 new logs [08-07-2022 12:14:01]28382: WAF :: fetched 3 new logs [08-07-2022 12:15:02]31125: WAF :: fetched 8 new logs [08-07-2022 12:16:01]1541: WAF :: fetched 5 new logs [08-07-2022 12:17:02]4210: WAF :: fetched 7 new logs [08-07-2022 12:18:01]6816: WAF :: fetched 10 new logs [08-07-2022 12:19:02]9514: WAF :: fetched 9 new logs [08-07-2022 12:20:03]12232: WAF :: fetched 7 new logs [08-07-2022 12:21:01]14564: WAF :: fetched 14 new logs [08-07-2022 12:22:02]17970: WAF :: fetched 6 new logs [08-07-2022 12:23:01]20926: WAF :: fetched 5 new logs [08-07-2022 12:24:01]23771: WAF :: fetched 6 new logs [08-07-2022 12:25:01]26460: WAF :: fetched 5 new logs [08-07-2022 12:26:01]29238: WAF :: fetched 8 new logs [08-07-2022 12:27:02]31909: WAF :: fetched 7 new logs [08-07-2022 12:28:01]2148: WAF :: fetched 10 new logs [08-07-2022 12:29:01]4777: WAF :: fetched 10 new logs [08-07-2022 12:30:02]7611: WAF :: fetched 18 new logs [08-07-2022 12:31:01]10267: WAF :: fetched 6 new logs [08-07-2022 12:32:01]12899: WAF :: fetched 4 new logs [08-07-2022 12:33:01]15537: WAF :: fetched 6 new logs [08-07-2022 12:34:01]18208: WAF :: fetched 5 new logs [08-07-2022 12:35:01]20966: WAF :: fetched 8 new logs [08-07-2022 12:36:02]23750: WAF :: fetched 6 new logs [08-07-2022 12:36:02]23752: httpd.conf changed. Refreshing watchlist. [08-07-2022 12:37:02]26432: WAF :: fetched 6 new logs [08-07-2022 12:38:01]29062: WAF :: fetched 11 new logs [08-07-2022 12:39:02]31697: WAF :: fetched 7 new logs [08-07-2022 12:40:02]2061: WAF :: fetched 3 new logs [08-07-2022 12:41:01]4917: WAF :: fetched 12 new logs [08-07-2022 12:41:01]4917: Checking for user cron vulnerabilities [08-07-2022 12:41:01]4921: httpd.conf changed. Refreshing watchlist. [08-07-2022 12:42:01]7613: WAF :: fetched 7 new logs [08-07-2022 12:43:01]10250: WAF :: fetched 4 new logs [08-07-2022 12:44:01]12939: Checking ditributed CMS bruteforce attacks [08-07-2022 12:44:04]12939: WAF :: fetched 4 new logs [08-07-2022 12:45:02]: Checking for software updates [08-07-2022 12:45:02]15659: WAF :: fetched 6 new logs [08-07-2022 12:46:01]18448: WAF :: fetched 10 new logs [08-07-2022 12:47:02]21174: WAF :: fetched 9 new logs [08-07-2022 12:48:01]23798: WAF :: fetched 8 new logs [08-07-2022 12:49:02]26431: WAF :: fetched 3 new logs [08-07-2022 12:50:01]29149: WAF :: fetched 6 new logs [08-07-2022 12:51:01]31842: WAF :: fetched 9 new logs [08-07-2022 12:52:01]2114: WAF :: fetched 6 new logs [08-07-2022 12:53:02]4754: WAF :: fetched 7 new logs [08-07-2022 12:54:01]7366: WAF :: fetched 7 new logs [08-07-2022 12:55:01]10125: WAF :: fetched 5 new logs [08-07-2022 12:56:02]12833: WAF :: fetched 31 new logs [08-07-2022 12:57:02]15466: WAF :: fetched 9 new logs [08-07-2022 12:58:03]18145: WAF :: fetched 6 new logs [08-07-2022 12:59:01]20768: WAF :: fetched 6 new logs [08-07-2022 13:00:01]23242: WAF :: fetched 9 new logs [08-07-2022 13:01:02]26394: WAF :: fetched 4 new logs [08-07-2022 13:02:01]29038: WAF :: fetched 5 new logs [08-07-2022 13:03:01]31688: WAF :: fetched 5 new logs [08-07-2022 13:04:03]1998: WAF :: fetched 8 new logs [08-07-2022 13:05:02]4728: WAF :: fetched 4 new logs [08-07-2022 13:06:01]7441: WAF :: fetched 4 new logs [08-07-2022 13:07:01]10114: WAF :: fetched 7 new logs [08-07-2022 13:08:02]12784: WAF :: fetched 4 new logs [08-07-2022 13:09:01]15400: WAF :: fetched 11 new logs [08-07-2022 13:10:01]18198: WAF :: fetched 8 new logs [08-07-2022 13:11:02]20909: WAF :: fetched 7 new logs [08-07-2022 13:12:02]23580: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657296722 [08-07-2022 13:12:02]23580: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 13:12:04]23580: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 13:12:05]23580: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-1312/20220708-131202-YshXUiUaHaS2fWWksDQiawAAAB4 [08-07-2022 13:12:05]23580: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 13:12:05]23580: WAF :: fetched 9 new logs [08-07-2022 13:13:02]26214: WAF :: fetched 3 new logs [08-07-2022 13:14:01]28811: WAF :: fetched 6 new logs [08-07-2022 13:15:01]31595: WAF :: fetched 3 new logs [08-07-2022 13:16:01]1869: WAF :: fetched 10 new logs [08-07-2022 13:17:01]4477: WAF :: fetched 7 new logs [08-07-2022 13:18:01]7108: WAF :: fetched 5 new logs [08-07-2022 13:19:01]9774: WAF :: fetched 5 new logs [08-07-2022 13:20:02]12536: WAF :: fetched 3 new logs [08-07-2022 13:21:01]15184: WAF :: fetched 4 new logs [08-07-2022 13:22:02]17890: WAF :: fetched 5 new logs [08-07-2022 13:23:01]20546: WAF :: fetched 4 new logs [08-07-2022 13:24:02]23169: WAF :: fetched 4 new logs [08-07-2022 13:25:01]25816: WAF :: fetched 9 new logs [08-07-2022 13:26:01]28526: WAF :: fetched 3 new logs [08-07-2022 13:27:01]31177: WAF :: fetched 2 new logs [08-07-2022 13:28:01]1417: WAF :: fetched 7 new logs [08-07-2022 13:29:02]4847: WAF :: fetched 3 new logs [08-07-2022 13:30:02]8103: WAF :: fetched 3 new logs [08-07-2022 13:31:01]10782: WAF :: fetched 3 new logs [08-07-2022 13:32:02]13433: WAF :: fetched 3 new logs [08-07-2022 13:33:01]16110: WAF :: fetched 4 new logs [08-07-2022 13:34:01]18804: WAF :: fetched 2 new logs [08-07-2022 13:35:02]21534: WAF :: fetched 4 new logs [08-07-2022 13:36:01]24273: WAF :: fetched 5 new logs [08-07-2022 13:37:01]26888: WAF :: fetched 2 new logs [08-07-2022 13:38:01]29542: WAF :: fetched 4 new logs [08-07-2022 13:39:02]32178: WAF :: fetched 4 new logs [08-07-2022 13:40:01]2499: WAF :: fetched 10 new logs [08-07-2022 13:41:02]5233: WAF :: fetched 4 new logs [08-07-2022 13:41:02]5233: Checking for user cron vulnerabilities [08-07-2022 13:42:01]7902: WAF :: fetched 5 new logs [08-07-2022 13:43:02]10577: WAF :: fetched 8 new logs [08-07-2022 13:44:01]13246: Checking ditributed CMS bruteforce attacks [08-07-2022 13:44:01]13246: WAF :: fetched 3 new logs [08-07-2022 13:45:01]: Checking for definition updates [08-07-2022 13:45:01]16017: WAF :: fetched 4 new logs [08-07-2022 13:45:04]15993: Updated virus defnition : signatures.ndb [08-07-2022 13:45:05]15993: Updated virus defnition : malware.expert.fp [08-07-2022 13:46:01]18800: WAF :: fetched 4 new logs [08-07-2022 13:47:01]21542: WAF :: fetched 5 new logs [08-07-2022 13:48:01]24159: WAF :: fetched 3 new logs [08-07-2022 13:49:01]26814: WAF :: fetched 7 new logs [08-07-2022 13:50:01]29559: WAF :: fetched 4 new logs [08-07-2022 13:51:02]32352: WAF :: fetched 10 new logs [08-07-2022 13:52:01]2611: WAF :: fetched 6 new logs [08-07-2022 13:53:02]5271: WAF :: fetched 6 new logs [08-07-2022 13:54:02]7913: WAF :: fetched 3 new logs [08-07-2022 13:55:01]10762: WAF :: fetched 5 new logs [08-07-2022 13:56:01]13420: WAF :: fetched 5 new logs [08-07-2022 13:57:01]16051: WAF :: fetched 8 new logs [08-07-2022 13:58:01]18744: WAF :: fetched 3 new logs [08-07-2022 13:59:02]21402: WAF :: fetched 17 new logs [08-07-2022 14:00:02]23847: WAF :: fetched 12 new logs [08-07-2022 14:01:01]27041: WAF :: fetched 8 new logs [08-07-2022 14:02:01]29672: WAF :: fetched 7 new logs [08-07-2022 14:03:02]32364: WAF :: fetched 10 new logs [08-07-2022 14:04:01]2607: WAF :: fetched 6 new logs [08-07-2022 14:05:02]5385: WAF :: fetched 8 new logs [08-07-2022 14:06:01]8120: WAF :: fetched 9 new logs [08-07-2022 14:07:02]10929: WAF :: fetched 8 new logs [08-07-2022 14:08:02]13574: WAF :: fetched 13 new logs [08-07-2022 14:09:01]16164: WAF :: fetched 7 new logs [08-07-2022 14:10:02]19131: WAF :: fetched 5 new logs [08-07-2022 14:11:01]21855: WAF :: fetched 5 new logs [08-07-2022 14:12:02]24556: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657300322 [08-07-2022 14:12:02]24556: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 14:12:04]24556: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 14:12:05]24556: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-1412/20220708-141202-YshlYuMVjQVjq_1CAPoGhgAAABI [08-07-2022 14:12:05]24556: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 14:12:05]24556: WAF :: fetched 14 new logs [08-07-2022 14:13:01]27175: WAF :: fetched 9 new logs [08-07-2022 14:14:01]29852: WAF :: fetched 6 new logs [08-07-2022 14:15:02]32655: WAF :: fetched 4 new logs [08-07-2022 14:16:01]2925: WAF :: fetched 3 new logs [08-07-2022 14:17:02]5564: WAF :: fetched 7 new logs [08-07-2022 14:18:01]8225: WAF :: fetched 12 new logs [08-07-2022 14:19:01]10936: WAF :: fetched 3 new logs [08-07-2022 14:20:02]13674: WAF :: fetched 10 new logs [08-07-2022 14:21:02]16416: WAF :: fetched 15 new logs [08-07-2022 14:22:01]19075: WAF :: fetched 37 new logs [08-07-2022 14:23:01]21814: WAF :: fetched 5 new logs [08-07-2022 14:24:01]24480: WAF :: fetched 5 new logs [08-07-2022 14:25:01]27198: WAF :: fetched 9 new logs [08-07-2022 14:26:01]29962: WAF :: fetched 8 new logs [08-07-2022 14:27:01]32613: WAF :: fetched 5 new logs [08-07-2022 14:28:01]2858: WAF :: fetched 9 new logs [08-07-2022 14:29:01]5554: WAF :: fetched 10 new logs [08-07-2022 14:30:02]8381: WAF :: fetched 5 new logs [08-07-2022 14:31:02]11111: WAF :: fetched 10 new logs [08-07-2022 14:32:01]13756: WAF :: fetched 6 new logs [08-07-2022 14:33:01]16456: WAF :: fetched 9 new logs [08-07-2022 14:34:02]19222: WAF :: fetched 9 new logs [08-07-2022 14:35:01]22074: WAF :: fetched 9 new logs [08-07-2022 14:36:02]24861: WAF :: fetched 5 new logs [08-07-2022 14:37:01]27529: WAF :: fetched 5 new logs [08-07-2022 14:38:02]30202: WAF :: fetched 4 new logs [08-07-2022 14:39:03]392: WAF :: fetched 1 new logs [08-07-2022 14:40:01]3091: WAF :: fetched 7 new logs [08-07-2022 14:41:01]5912: WAF :: fetched 3 new logs [08-07-2022 14:41:01]5912: Checking for user cron vulnerabilities [08-07-2022 14:42:02]8612: WAF :: fetched 2 new logs [08-07-2022 14:43:01]11289: WAF :: fetched 3 new logs [08-07-2022 14:44:01]13929: Checking ditributed CMS bruteforce attacks [08-07-2022 14:44:02]13929: WAF :: fetched 6 new logs [08-07-2022 14:45:02]16672: WAF :: fetched 2 new logs [08-07-2022 14:46:01]19442: WAF :: fetched 3 new logs [08-07-2022 14:47:01]22092: WAF :: fetched 3 new logs [08-07-2022 14:48:02]24811: WAF :: fetched 5 new logs [08-07-2022 14:49:01]27429: WAF :: fetched 2 new logs [08-07-2022 14:50:01]30192: WAF :: fetched 6 new logs [08-07-2022 14:51:01]550: WAF :: fetched 3 new logs [08-07-2022 14:52:02]3280: WAF :: fetched 2 new logs [08-07-2022 14:53:02]5924: WAF :: fetched 19 new logs [08-07-2022 14:53:02]5926: Updated license status via CDN [08-07-2022 14:54:01]8633: WAF :: fetched 29 new logs [08-07-2022 14:55:02]11428: WAF :: fetched 4 new logs [08-07-2022 14:56:01]14105: WAF :: fetched 2 new logs [08-07-2022 14:57:01]16860: WAF :: fetched 22 new logs [08-07-2022 14:58:02]19695: WAF :: fetched 24 new logs [08-07-2022 14:59:01]22321: WAF :: fetched 39 new logs [08-07-2022 15:00:02]24827: WAF :: fetched 42 new logs [08-07-2022 15:01:01]27989: WAF :: fetched 35 new logs [08-07-2022 15:01:01]27988: Reseting cPGuard inotify settings [08-07-2022 15:02:02]30729: WAF :: fetched 35 new logs [08-07-2022 15:03:01]924: WAF :: fetched 44 new logs [08-07-2022 15:04:02]3801: WAF :: fetched 44 new logs [08-07-2022 15:05:01]6535: WAF :: fetched 40 new logs [08-07-2022 15:06:01]9306: WAF :: fetched 3 new logs [08-07-2022 15:07:01]11992: WAF :: fetched 4 new logs [08-07-2022 15:08:01]14625: WAF :: fetched 4 new logs [08-07-2022 15:09:02]17344: WAF :: fetched 3 new logs [08-07-2022 15:10:01]20097: WAF :: fetched 1 new logs [08-07-2022 15:11:02]23028: WAF :: fetched 4 new logs [08-07-2022 15:12:01]25762: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657303921 [08-07-2022 15:12:01]25762: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 15:12:03]25762: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 15:12:05]25762: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-1512/20220708-151201-YshzcQzEMIm0gB20mFtFYwAAAAs [08-07-2022 15:12:05]25762: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 15:12:05]25762: WAF :: fetched 5 new logs [08-07-2022 15:13:02]28483: WAF :: fetched 6 new logs [08-07-2022 15:14:01]31183: WAF :: fetched 4 new logs [08-07-2022 15:15:02]1628: WAF :: fetched 4 new logs [08-07-2022 15:16:01]4372: WAF :: fetched 7 new logs [08-07-2022 15:17:01]7064: WAF :: fetched 4 new logs [08-07-2022 15:18:02]9736: WAF :: fetched 2 new logs [08-07-2022 15:19:01]12403: WAF :: fetched 3 new logs [08-07-2022 15:20:02]15190: WAF :: fetched 6 new logs [08-07-2022 15:21:01]18219: WAF :: fetched 4 new logs [08-07-2022 15:22:01]20934: WAF :: fetched 3 new logs [08-07-2022 15:23:01]23685: WAF :: fetched 3 new logs [08-07-2022 15:24:01]26391: WAF :: fetched 10 new logs [08-07-2022 15:25:02]29123: WAF :: fetched 4 new logs [08-07-2022 15:26:02]31949: WAF :: fetched 6 new logs [08-07-2022 15:27:02]2243: WAF :: fetched 4 new logs [08-07-2022 15:28:01]4907: WAF :: fetched 5 new logs [08-07-2022 15:29:01]7744: WAF :: fetched 5 new logs [08-07-2022 15:30:01]10556: WAF :: fetched 2 new logs [08-07-2022 15:31:02]13515: WAF :: fetched 4 new logs [08-07-2022 15:32:02]16370: WAF :: fetched 1 new logs [08-07-2022 15:33:02]19155: WAF :: fetched 6 new logs [08-07-2022 15:34:01]21847: WAF :: fetched 10 new logs [08-07-2022 15:35:01]24569: WAF :: fetched 6 new logs [08-07-2022 15:36:02]27433: WAF :: fetched 4 new logs [08-07-2022 15:37:01]30045: WAF :: fetched 3 new logs [08-07-2022 15:38:02]32708: WAF :: fetched 3 new logs [08-07-2022 15:39:02]3014: WAF :: fetched 3 new logs [08-07-2022 15:40:01]5562: WAF :: fetched 4 new logs [08-07-2022 15:41:02]8555: WAF :: fetched 2 new logs [08-07-2022 15:41:02]8555: Checking for user cron vulnerabilities [08-07-2022 15:42:01]11230: WAF :: fetched 2 new logs [08-07-2022 15:43:02]13949: WAF :: fetched 2 new logs [08-07-2022 15:44:01]16649: Checking ditributed CMS bruteforce attacks [08-07-2022 15:44:03]16649: WAF :: fetched 10 new logs [08-07-2022 15:45:02]19407: WAF :: fetched 6 new logs [08-07-2022 15:46:01]22219: WAF :: fetched 5 new logs [08-07-2022 15:47:01]24852: WAF :: fetched 4 new logs [08-07-2022 15:48:01]27527: WAF :: fetched 5 new logs [08-07-2022 15:49:01]30237: WAF :: fetched 2 new logs [08-07-2022 15:50:01]412: WAF :: fetched 4 new logs [08-07-2022 15:51:02]3370: WAF :: fetched 3 new logs [08-07-2022 15:52:02]5987: WAF :: fetched 4 new logs [08-07-2022 15:53:02]8630: WAF :: fetched 6 new logs [08-07-2022 15:54:01]11342: WAF :: fetched 6 new logs [08-07-2022 15:55:01]14062: WAF :: fetched 5 new logs [08-07-2022 15:56:01]16856: WAF :: fetched 4 new logs [08-07-2022 15:57:02]19615: WAF :: fetched 10 new logs [08-07-2022 15:58:01]22243: WAF :: fetched 6 new logs [08-07-2022 15:59:01]24959: WAF :: fetched 18 new logs [08-07-2022 16:00:02]27483: WAF :: fetched 1 new logs [08-07-2022 16:01:01]30741: WAF :: fetched 6 new logs [08-07-2022 16:06:02]12335: WAF :: fetched 1 new logs [08-07-2022 16:08:01]17515: WAF :: fetched 7 new logs [08-07-2022 16:09:02]20440: WAF :: fetched 4 new logs [08-07-2022 16:10:01]23165: WAF :: fetched 2 new logs [08-07-2022 16:11:02]26012: WAF :: fetched 7 new logs [08-07-2022 16:12:02]28738: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657307522 [08-07-2022 16:12:02]28738: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 16:12:04]28738: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 16:12:05]28738: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-1612/20220708-161202-YsiBgkzFvirldc37LJt4cgAAACg [08-07-2022 16:12:05]28738: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 16:12:05]28738: WAF :: fetched 2 new logs [08-07-2022 16:13:02]31492: WAF :: fetched 4 new logs [08-07-2022 16:14:03]1600: WAF :: fetched 2 new logs [08-07-2022 16:15:02]4386: WAF :: fetched 1 new logs [08-07-2022 16:16:01]7232: WAF :: fetched 3 new logs [08-07-2022 16:17:02]9884: WAF :: fetched 3 new logs [08-07-2022 16:18:01]12555: WAF :: fetched 4 new logs [08-07-2022 16:19:01]15211: WAF :: fetched 2 new logs [08-07-2022 16:20:02]17967: WAF :: fetched 4 new logs [08-07-2022 16:21:01]20813: WAF :: fetched 3 new logs [08-07-2022 16:22:02]23551: WAF :: fetched 7 new logs [08-07-2022 16:23:01]26200: WAF :: fetched 4 new logs [08-07-2022 16:24:01]28853: WAF :: fetched 5 new logs [08-07-2022 16:25:02]31471: WAF :: fetched 2 new logs [08-07-2022 16:26:01]1855: WAF :: fetched 8 new logs [08-07-2022 16:27:01]4530: WAF :: fetched 3 new logs [08-07-2022 16:28:01]7281: WAF :: fetched 6 new logs [08-07-2022 16:29:02]9987: WAF :: fetched 3 new logs [08-07-2022 16:30:01]12684: WAF :: fetched 1 new logs [08-07-2022 16:31:01]15656: WAF :: fetched 6 new logs [08-07-2022 16:32:01]18400: WAF :: fetched 6 new logs [08-07-2022 16:33:02]21164: WAF :: fetched 3 new logs [08-07-2022 16:34:02]23822: WAF :: fetched 6 new logs [08-07-2022 16:35:01]26487: WAF :: fetched 8 new logs [08-07-2022 16:36:01]29350: WAF :: fetched 6 new logs [08-07-2022 16:37:02]32154: WAF :: fetched 4 new logs [08-07-2022 16:38:01]2447: WAF :: fetched 7 new logs [08-07-2022 16:39:02]5119: WAF :: fetched 4 new logs [08-07-2022 16:40:03]7754: WAF :: fetched 2 new logs [08-07-2022 16:41:02]10627: WAF :: fetched 3 new logs [08-07-2022 16:41:02]10627: Checking for user cron vulnerabilities [08-07-2022 16:42:01]13244: WAF :: fetched 6 new logs [08-07-2022 16:43:02]15926: WAF :: fetched 27 new logs [08-07-2022 16:44:01]18664: Checking ditributed CMS bruteforce attacks [08-07-2022 16:44:04]18664: WAF :: fetched 8 new logs [08-07-2022 16:45:02]21303: WAF :: fetched 4 new logs [08-07-2022 16:46:01]24179: WAF :: fetched 3 new logs [08-07-2022 16:47:01]26863: WAF :: fetched 5 new logs [08-07-2022 16:48:02]29488: WAF :: fetched 4 new logs [08-07-2022 16:49:01]32135: WAF :: fetched 3 new logs [08-07-2022 16:50:02]2438: WAF :: fetched 8 new logs [08-07-2022 16:51:01]5302: WAF :: fetched 10 new logs [08-07-2022 16:52:01]7922: WAF :: fetched 4 new logs [08-07-2022 16:53:02]10582: WAF :: fetched 4 new logs [08-07-2022 16:54:01]13226: WAF :: fetched 6 new logs [08-07-2022 16:55:02]15890: WAF :: fetched 8 new logs [08-07-2022 16:56:01]18700: WAF :: fetched 6 new logs [08-07-2022 16:57:03]21315: WAF :: fetched 2 new logs [08-07-2022 16:58:01]23943: WAF :: fetched 2 new logs [08-07-2022 16:59:02]26624: WAF :: fetched 4 new logs [08-07-2022 17:00:01]29005: WAF :: fetched 4 new logs [08-07-2022 17:01:02]32283: WAF :: fetched 1 new logs [08-07-2022 17:02:01]2562: WAF :: fetched 12 new logs [08-07-2022 17:03:01]5270: WAF :: fetched 7 new logs [08-07-2022 17:04:02]7997: WAF :: fetched 6 new logs [08-07-2022 17:05:01]10662: WAF :: fetched 4 new logs [08-07-2022 17:06:03]13496: WAF :: fetched 5 new logs [08-07-2022 17:07:01]16146: WAF :: fetched 3 new logs [08-07-2022 17:08:02]18891: WAF :: fetched 3 new logs [08-07-2022 17:09:01]21557: WAF :: fetched 2 new logs [08-07-2022 17:10:01]24297: WAF :: fetched 3 new logs [08-07-2022 17:11:02]27187: WAF :: fetched 10 new logs [08-07-2022 17:12:02]29823: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657311122 [08-07-2022 17:12:02]29823: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 17:12:04]29823: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 17:12:05]29823: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-1712/20220708-171202-YsiPkj5SyTvvPKnRoPeBmgAAADA [08-07-2022 17:12:05]29823: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 17:12:05]29823: WAF :: fetched 6 new logs [08-07-2022 17:13:01]32511: WAF :: fetched 3 new logs [08-07-2022 17:14:02]2820: WAF :: fetched 3 new logs [08-07-2022 17:15:02]5509: WAF :: fetched 3 new logs [08-07-2022 17:16:01]8433: WAF :: fetched 1 new logs [08-07-2022 17:17:02]11131: WAF :: fetched 3 new logs [08-07-2022 17:18:01]13781: WAF :: fetched 2 new logs [08-07-2022 17:19:01]16516: WAF :: fetched 5 new logs [08-07-2022 17:20:01]19278: WAF :: fetched 3 new logs [08-07-2022 17:21:01]22090: WAF :: fetched 6 new logs [08-07-2022 17:22:02]24842: WAF :: fetched 7 new logs [08-07-2022 17:23:01]27522: WAF :: fetched 1 new logs [08-07-2022 17:24:02]30265: WAF :: fetched 3 new logs [08-07-2022 17:25:01]463: WAF :: fetched 2 new logs [08-07-2022 17:26:01]3294: WAF :: fetched 3 new logs [08-07-2022 17:27:02]5955: WAF :: fetched 7 new logs [08-07-2022 17:28:01]8667: WAF :: fetched 2 new logs [08-07-2022 17:29:01]11405: WAF :: fetched 4 new logs [08-07-2022 17:30:02]14090: WAF :: fetched 4 new logs [08-07-2022 17:31:01]16954: WAF :: fetched 3 new logs [08-07-2022 17:32:02]19793: WAF :: fetched 2 new logs [08-07-2022 17:33:03]22445: WAF :: fetched 6 new logs [08-07-2022 17:34:01]25066: WAF :: fetched 5 new logs [08-07-2022 17:35:02]27761: WAF :: fetched 4 new logs [08-07-2022 17:36:01]30511: WAF :: fetched 3 new logs [08-07-2022 17:37:02]818: WAF :: fetched 7 new logs [08-07-2022 17:38:01]3525: WAF :: fetched 3 new logs [08-07-2022 17:39:01]6278: WAF :: fetched 3 new logs [08-07-2022 17:40:02]9051: WAF :: fetched 3 new logs [08-07-2022 17:41:01]11848: WAF :: fetched 2 new logs [08-07-2022 17:41:01]11848: Checking for user cron vulnerabilities [08-07-2022 17:42:02]14529: WAF :: fetched 2 new logs [08-07-2022 17:44:01]19942: Checking ditributed CMS bruteforce attacks [08-07-2022 17:44:02]19942: WAF :: fetched 3 new logs [08-07-2022 17:45:02]22604: WAF :: fetched 3 new logs [08-07-2022 17:46:02]25416: WAF :: fetched 9 new logs [08-07-2022 17:47:01]27952: WAF :: fetched 3 new logs [08-07-2022 17:48:02]30821: WAF :: fetched 7 new logs [08-07-2022 17:49:01]1055: WAF :: fetched 9 new logs [08-07-2022 17:50:01]3760: WAF :: fetched 8 new logs [08-07-2022 17:51:01]6575: WAF :: fetched 11 new logs [08-07-2022 17:52:01]9209: WAF :: fetched 6 new logs [08-07-2022 17:53:01]11909: WAF :: fetched 3 new logs [08-07-2022 17:54:02]14621: WAF :: fetched 2 new logs [08-07-2022 17:55:02]17288: WAF :: fetched 3 new logs [08-07-2022 17:56:02]20155: WAF :: fetched 3 new logs [08-07-2022 17:57:01]22773: WAF :: fetched 3 new logs [08-07-2022 17:58:01]25445: WAF :: fetched 6 new logs [08-07-2022 17:59:01]28079: WAF :: fetched 3 new logs [08-07-2022 18:00:01]30473: WAF :: fetched 3 new logs [08-07-2022 18:01:02]1381: WAF :: fetched 5 new logs [08-07-2022 18:02:02]4115: WAF :: fetched 2 new logs [08-07-2022 18:03:02]6784: WAF :: fetched 3 new logs [08-07-2022 18:04:01]9321: WAF :: fetched 3 new logs [08-07-2022 18:05:01]12086: WAF :: fetched 3 new logs [08-07-2022 18:06:01]14883: WAF :: fetched 2 new logs [08-07-2022 18:07:02]17547: WAF :: fetched 3 new logs [08-07-2022 18:08:01]20266: WAF :: fetched 3 new logs [08-07-2022 18:09:03]22902: WAF :: fetched 4 new logs [08-07-2022 18:10:01]25628: WAF :: fetched 4 new logs [08-07-2022 18:11:01]28423: WAF :: fetched 3 new logs [08-07-2022 18:12:02]31094: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657314722 [08-07-2022 18:12:02]31094: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 18:12:04]31094: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 18:12:04]31094: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-1812/20220708-181202-Ysidoh862jgdsHPgeHZuNAAAACI [08-07-2022 18:12:04]31094: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 18:12:04]31094: WAF :: fetched 5 new logs [08-07-2022 18:13:01]1378: WAF :: fetched 10 new logs [08-07-2022 18:14:02]4144: WAF :: fetched 2 new logs [08-07-2022 18:15:01]6761: WAF :: fetched 8 new logs [08-07-2022 18:16:01]9613: WAF :: fetched 6 new logs [08-07-2022 18:17:02]12252: WAF :: fetched 8 new logs [08-07-2022 18:18:02]14964: WAF :: fetched 1 new logs [08-07-2022 18:19:01]17483: WAF :: fetched 2 new logs [08-07-2022 18:20:01]20437: WAF :: fetched 3 new logs [08-07-2022 18:21:02]23195: WAF :: fetched 3 new logs [08-07-2022 18:22:02]25859: WAF :: fetched 2 new logs [08-07-2022 18:23:02]28508: WAF :: fetched 2 new logs [08-07-2022 18:24:01]31104: WAF :: fetched 2 new logs [08-07-2022 18:25:01]1460: WAF :: fetched 3 new logs [08-07-2022 18:26:01]4297: WAF :: fetched 2 new logs [08-07-2022 18:27:02]6978: WAF :: fetched 4 new logs [08-07-2022 18:28:02]9582: WAF :: fetched 4 new logs [08-07-2022 18:29:01]12037: WAF :: fetched 1 new logs [08-07-2022 18:30:01]14841: WAF :: fetched 2 new logs [08-07-2022 18:31:01]17569: WAF :: fetched 2 new logs [08-07-2022 18:32:01]20334: WAF :: fetched 4 new logs [08-07-2022 18:33:01]22969: WAF :: fetched 3 new logs [08-07-2022 18:34:01]25555: WAF :: fetched 4 new logs [08-07-2022 18:35:03]28196: WAF :: fetched 2 new logs [08-07-2022 18:36:01]30992: WAF :: fetched 2 new logs [08-07-2022 18:37:01]1200: WAF :: fetched 2 new logs [08-07-2022 18:38:02]3867: WAF :: fetched 5 new logs [08-07-2022 18:39:01]6443: WAF :: fetched 4 new logs [08-07-2022 18:40:02]9096: WAF :: fetched 2 new logs [08-07-2022 18:41:01]11858: WAF :: fetched 12 new logs [08-07-2022 18:41:01]11858: Checking for user cron vulnerabilities [08-07-2022 18:42:01]14457: WAF :: fetched 2 new logs [08-07-2022 18:43:02]17102: WAF :: fetched 9 new logs [08-07-2022 18:44:01]19800: Checking ditributed CMS bruteforce attacks [08-07-2022 18:44:01]19800: WAF :: fetched 3 new logs [08-07-2022 18:49:01]733: WAF :: fetched 27 new logs [08-07-2022 18:50:02]3459: WAF :: fetched 1 new logs [08-07-2022 18:51:01]6250: WAF :: fetched 1 new logs [08-07-2022 18:55:02]16982: WAF :: fetched 3 new logs [08-07-2022 18:57:01]22438: WAF :: fetched 3 new logs [08-07-2022 18:58:02]25142: WAF :: fetched 2 new logs [08-07-2022 18:59:01]27798: WAF :: fetched 1 new logs [08-07-2022 19:01:02]1060: WAF :: fetched 1 new logs [08-07-2022 19:02:01]3774: WAF :: fetched 2 new logs [08-07-2022 19:04:01]8963: WAF :: fetched 4 new logs [08-07-2022 19:07:01]17253: WAF :: fetched 1 new logs [08-07-2022 19:08:02]20080: WAF :: fetched 8 new logs [08-07-2022 19:09:01]22724: WAF :: fetched 2 new logs [08-07-2022 19:10:01]25436: WAF :: fetched 6 new logs [08-07-2022 19:11:02]28288: WAF :: fetched 1 new logs [08-07-2022 19:12:02]30944: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657318322 [08-07-2022 19:12:02]30944: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 19:12:04]30944: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 19:12:04]30944: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-1912/20220708-191202-YsirskTL5Rad1i83pot5qwAAABA [08-07-2022 19:12:04]30944: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 19:12:04]30944: WAF :: fetched 2 new logs [08-07-2022 19:13:01]1248: WAF :: fetched 4 new logs [08-07-2022 19:14:02]3947: WAF :: fetched 2 new logs [08-07-2022 19:17:01]12158: WAF :: fetched 5 new logs [08-07-2022 19:22:02]25855: WAF :: fetched 3 new logs [08-07-2022 19:24:02]31248: WAF :: fetched 3 new logs [08-07-2022 19:26:01]4300: WAF :: fetched 3 new logs [08-07-2022 19:27:02]6962: WAF :: fetched 1 new logs [08-07-2022 19:29:01]12352: WAF :: fetched 27 new logs [08-07-2022 19:31:01]17992: WAF :: fetched 1 new logs [08-07-2022 19:33:02]23548: WAF :: fetched 1 new logs [08-07-2022 19:34:01]26250: WAF :: fetched 1 new logs [08-07-2022 19:35:02]29025: WAF :: fetched 5 new logs [08-07-2022 19:38:02]4806: WAF :: fetched 3 new logs [08-07-2022 19:39:02]7464: WAF :: fetched 4 new logs [08-07-2022 19:41:01]12800: Checking for user cron vulnerabilities [08-07-2022 19:44:02]20966: Checking ditributed CMS bruteforce attacks [08-07-2022 19:44:02]20966: WAF :: fetched 1 new logs [08-07-2022 19:45:02]: Checking for definition updates [08-07-2022 19:46:01]26225: WAF :: fetched 2 new logs [08-07-2022 19:47:01]29100: WAF :: fetched 1 new logs [08-07-2022 19:48:02]31778: WAF :: fetched 3 new logs [08-07-2022 19:49:02]2034: WAF :: fetched 3 new logs [08-07-2022 19:50:02]4712: WAF :: fetched 1 new logs [08-07-2022 19:51:01]7390: WAF :: fetched 2 new logs [08-07-2022 19:52:02]10208: WAF :: fetched 1 new logs [08-07-2022 19:53:02]12882: WAF :: fetched 1 new logs [08-07-2022 19:56:01]21167: WAF :: fetched 2 new logs [08-07-2022 19:58:01]26565: WAF :: fetched 3 new logs [08-07-2022 19:59:02]29283: WAF :: fetched 2 new logs [08-07-2022 20:02:04]5339: WAF :: fetched 6 new logs [08-07-2022 20:03:01]8025: WAF :: fetched 4 new logs [08-07-2022 20:06:01]16254: WAF :: fetched 2 new logs [08-07-2022 20:07:02]19017: WAF :: fetched 2 new logs [08-07-2022 20:08:01]21642: WAF :: fetched 3 new logs [08-07-2022 20:10:02]26980: WAF :: fetched 4 new logs [08-07-2022 20:12:02]32548: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657321922 [08-07-2022 20:12:02]32548: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 20:12:04]32548: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 20:12:04]32548: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-2012/20220708-201202-Ysi5wluZn1cU-Goe0S5hAwAAACc [08-07-2022 20:12:04]32548: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 20:12:04]32548: WAF :: fetched 3 new logs [08-07-2022 20:14:02]5536: WAF :: fetched 1 new logs [08-07-2022 20:15:01]8225: WAF :: fetched 1 new logs [08-07-2022 20:18:02]16504: WAF :: fetched 1 new logs [08-07-2022 20:19:01]19297: WAF :: fetched 5 new logs [08-07-2022 20:20:02]21982: WAF :: fetched 4 new logs [08-07-2022 20:21:02]24829: WAF :: fetched 17 new logs [08-07-2022 20:22:02]27506: WAF :: fetched 3 new logs [08-07-2022 20:23:01]30109: WAF :: fetched 3 new logs [08-07-2022 20:24:01]321: WAF :: fetched 1 new logs [08-07-2022 20:25:01]3061: WAF :: fetched 1 new logs [08-07-2022 20:26:01]5768: WAF :: fetched 5 new logs [08-07-2022 20:27:01]8538: WAF :: fetched 1 new logs [08-07-2022 20:28:02]11218: WAF :: fetched 7 new logs [08-07-2022 20:29:01]13909: WAF :: fetched 9 new logs [08-07-2022 20:30:02]16671: WAF :: fetched 6 new logs [08-07-2022 20:31:01]19471: WAF :: fetched 4 new logs [08-07-2022 20:32:01]22225: WAF :: fetched 11 new logs [08-07-2022 20:33:02]24944: WAF :: fetched 13 new logs [08-07-2022 20:34:02]27607: WAF :: fetched 12 new logs [08-07-2022 20:35:01]30230: WAF :: fetched 2 new logs [08-07-2022 20:39:02]8548: WAF :: fetched 3 new logs [08-07-2022 20:40:02]11268: WAF :: fetched 1 new logs [08-07-2022 20:41:01]14014: WAF :: fetched 1 new logs [08-07-2022 20:41:01]14014: Checking for user cron vulnerabilities [08-07-2022 20:42:01]16807: WAF :: fetched 3 new logs [08-07-2022 20:43:02]19575: WAF :: fetched 1 new logs [08-07-2022 20:44:01]22333: Checking ditributed CMS bruteforce attacks [08-07-2022 20:44:02]22333: WAF :: fetched 3 new logs [08-07-2022 20:45:02]25000: WAF :: fetched 3 new logs [08-07-2022 20:46:02]27765: WAF :: fetched 3 new logs [08-07-2022 20:47:01]30478: WAF :: fetched 2 new logs [08-07-2022 20:48:01]674: WAF :: fetched 1 new logs [08-07-2022 20:49:02]3392: WAF :: fetched 5 new logs [08-07-2022 20:50:01]6072: WAF :: fetched 1 new logs [08-07-2022 20:51:01]8823: WAF :: fetched 2 new logs [08-07-2022 20:52:03]11561: WAF :: fetched 2 new logs [08-07-2022 20:53:01]14192: WAF :: fetched 2 new logs [08-07-2022 20:54:02]16876: WAF :: fetched 2 new logs [08-07-2022 20:55:01]19677: WAF :: fetched 2 new logs [08-07-2022 20:56:02]22429: WAF :: fetched 4 new logs [08-07-2022 20:57:01]25152: WAF :: fetched 10 new logs [08-07-2022 20:58:01]27833: WAF :: fetched 6 new logs [08-07-2022 20:59:01]30520: WAF :: fetched 3 new logs [08-07-2022 21:00:01]484: WAF :: fetched 2 new logs [08-07-2022 21:01:01]3764: WAF :: fetched 2 new logs [08-07-2022 21:02:01]6575: WAF :: fetched 4 new logs [08-07-2022 21:03:01]9249: WAF :: fetched 4 new logs [08-07-2022 21:04:02]11945: WAF :: fetched 7 new logs [08-07-2022 21:05:01]14666: WAF :: fetched 5 new logs [08-07-2022 21:06:02]17396: WAF :: fetched 5 new logs [08-07-2022 21:07:01]20276: WAF :: fetched 6 new logs [08-07-2022 21:08:01]23010: WAF :: fetched 4 new logs [08-07-2022 21:09:02]25691: WAF :: fetched 3 new logs [08-07-2022 21:10:02]28404: WAF :: fetched 4 new logs [08-07-2022 21:11:02]31111: WAF :: fetched 7 new logs [08-07-2022 21:12:01]1433: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657325521 [08-07-2022 21:12:01]1433: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 21:12:03]1433: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 21:12:03]1433: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-2112/20220708-211201-YsjH0Ym30rXDVcdHGbvJewAAABQ [08-07-2022 21:12:03]1433: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 21:12:04]1433: WAF :: fetched 5 new logs [08-07-2022 21:13:01]4180: WAF :: fetched 8 new logs [08-07-2022 21:14:01]6841: WAF :: fetched 4 new logs [08-07-2022 21:15:01]9520: WAF :: fetched 2 new logs [08-07-2022 21:16:01]12310: WAF :: fetched 8 new logs [08-07-2022 21:17:01]15057: WAF :: fetched 5 new logs [08-07-2022 21:18:02]17710: WAF :: fetched 3 new logs [08-07-2022 21:19:02]20527: WAF :: fetched 4 new logs [08-07-2022 21:20:02]23251: WAF :: fetched 5 new logs [08-07-2022 21:21:01]25818: WAF :: fetched 6 new logs [08-07-2022 21:22:01]28704: WAF :: fetched 6 new logs [08-07-2022 21:23:01]31358: WAF :: fetched 3 new logs [08-07-2022 21:24:02]1645: WAF :: fetched 9 new logs [08-07-2022 21:25:01]4297: WAF :: fetched 2 new logs [08-07-2022 21:26:02]7066: WAF :: fetched 6 new logs [08-07-2022 21:27:01]9794: WAF :: fetched 9 new logs [08-07-2022 21:28:02]12542: WAF :: fetched 4 new logs [08-07-2022 21:29:01]15178: WAF :: fetched 9 new logs [08-07-2022 21:30:01]17893: WAF :: fetched 4 new logs [08-07-2022 21:31:02]20679: WAF :: fetched 1 new logs [08-07-2022 21:32:02]23459: WAF :: fetched 4 new logs [08-07-2022 21:33:02]26124: WAF :: fetched 2 new logs [08-07-2022 21:34:01]28743: WAF :: fetched 3 new logs [08-07-2022 21:35:02]31488: WAF :: fetched 1 new logs [08-07-2022 21:36:01]1833: WAF :: fetched 3 new logs [08-07-2022 21:37:02]4618: WAF :: fetched 4 new logs [08-07-2022 21:38:02]7245: WAF :: fetched 3 new logs [08-07-2022 21:39:01]9671: WAF :: fetched 4 new logs [08-07-2022 21:40:01]12542: WAF :: fetched 2 new logs [08-07-2022 21:41:01]15255: WAF :: fetched 2 new logs [08-07-2022 21:41:01]15255: Checking for user cron vulnerabilities [08-07-2022 21:42:01]18072: WAF :: fetched 3 new logs [08-07-2022 21:43:01]20749: WAF :: fetched 1 new logs [08-07-2022 21:44:01]23505: Checking ditributed CMS bruteforce attacks [08-07-2022 21:44:01]23505: WAF :: fetched 8 new logs [08-07-2022 21:45:02]26204: WAF :: fetched 3 new logs [08-07-2022 21:46:01]28883: WAF :: fetched 3 new logs [08-07-2022 21:48:01]1869: WAF :: fetched 5 new logs [08-07-2022 21:49:01]4560: WAF :: fetched 1 new logs [08-07-2022 21:50:02]7253: WAF :: fetched 2 new logs [08-07-2022 21:51:01]9919: WAF :: fetched 5 new logs [08-07-2022 21:52:04]12670: WAF :: fetched 6 new logs [08-07-2022 21:53:01]15229: WAF :: fetched 3 new logs [08-07-2022 21:54:01]18076: WAF :: fetched 7 new logs [08-07-2022 21:55:01]20744: WAF :: fetched 3 new logs [08-07-2022 21:56:01]23418: WAF :: fetched 3 new logs [08-07-2022 21:57:02]26200: WAF :: fetched 3 new logs [08-07-2022 21:58:01]28857: WAF :: fetched 6 new logs [08-07-2022 21:59:02]31524: WAF :: fetched 1 new logs [08-07-2022 22:00:02]1494: WAF :: fetched 2 new logs [08-07-2022 22:01:01]4595: WAF :: fetched 2 new logs [08-07-2022 22:03:01]10254: WAF :: fetched 3 new logs [08-07-2022 22:04:01]13001: WAF :: fetched 1 new logs [08-07-2022 22:05:01]15684: WAF :: fetched 3 new logs [08-07-2022 22:06:02]18521: WAF :: fetched 1 new logs [08-07-2022 22:07:01]21253: WAF :: fetched 2 new logs [08-07-2022 22:07:11]21245: Performing Domain reputation checks [08-07-2022 22:08:02]23957: WAF :: fetched 2 new logs [08-07-2022 22:09:02]26612: WAF :: fetched 1 new logs [08-07-2022 22:10:02]29305: WAF :: fetched 2 new logs [08-07-2022 22:11:02]32065: WAF :: fetched 3 new logs [08-07-2022 22:12:02]2415: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657329122 [08-07-2022 22:12:02]2415: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 22:12:04]2415: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 22:12:04]2415: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-2212/20220708-221202-YsjV4pZT9x5OcEGULl8yUwAAAAw [08-07-2022 22:12:04]2415: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 22:12:04]2415: WAF :: fetched 2 new logs [08-07-2022 22:14:02]7795: WAF :: fetched 4 new logs [08-07-2022 22:15:01]10452: WAF :: fetched 5 new logs [08-07-2022 22:16:02]13138: WAF :: fetched 9 new logs [08-07-2022 22:17:01]15817: WAF :: fetched 5 new logs [08-07-2022 22:18:01]18563: WAF :: fetched 6 new logs [08-07-2022 22:19:01]21289: WAF :: fetched 7 new logs [08-07-2022 22:20:01]23990: WAF :: fetched 3 new logs [08-07-2022 22:21:02]26767: WAF :: fetched 6 new logs [08-07-2022 22:22:01]29530: WAF :: fetched 2 new logs [08-07-2022 22:23:02]32132: WAF :: fetched 5 new logs [08-07-2022 22:24:02]2374: WAF :: fetched 9 new logs [08-07-2022 22:25:01]4940: WAF :: fetched 8 new logs [08-07-2022 22:26:02]7622: WAF :: fetched 8 new logs [08-07-2022 22:27:01]10275: WAF :: fetched 7 new logs [08-07-2022 22:28:01]12875: WAF :: fetched 7 new logs [08-07-2022 22:29:02]15502: WAF :: fetched 13 new logs [08-07-2022 22:30:01]18172: WAF :: fetched 7 new logs [08-07-2022 22:31:02]20884: WAF :: fetched 6 new logs [08-07-2022 22:32:01]23438: WAF :: fetched 8 new logs [08-07-2022 22:33:01]26182: WAF :: fetched 10 new logs [08-07-2022 22:34:01]28806: WAF :: fetched 8 new logs [08-07-2022 22:35:03]31476: WAF :: fetched 7 new logs [08-07-2022 22:36:01]1736: WAF :: fetched 9 new logs [08-07-2022 22:37:02]4486: WAF :: fetched 10 new logs [08-07-2022 22:38:01]7066: WAF :: fetched 12 new logs [08-07-2022 22:39:02]9675: WAF :: fetched 15 new logs [08-07-2022 22:40:02]12336: WAF :: fetched 11 new logs [08-07-2022 22:41:01]14932: WAF :: fetched 9 new logs [08-07-2022 22:41:01]14932: Checking for user cron vulnerabilities [08-07-2022 22:42:02]17637: WAF :: fetched 8 new logs [08-07-2022 22:43:02]20301: WAF :: fetched 11 new logs [08-07-2022 22:44:01]22888: Checking ditributed CMS bruteforce attacks [08-07-2022 22:44:02]22888: WAF :: fetched 7 new logs [08-07-2022 22:45:02]25480: WAF :: fetched 4 new logs [08-07-2022 22:46:01]28122: WAF :: fetched 10 new logs [08-07-2022 22:47:01]30800: WAF :: fetched 5 new logs [08-07-2022 22:48:02]1022: WAF :: fetched 10 new logs [08-07-2022 22:49:01]3611: WAF :: fetched 9 new logs [08-07-2022 22:50:02]6200: WAF :: fetched 10 new logs [08-07-2022 22:51:01]8828: WAF :: fetched 8 new logs [08-07-2022 22:52:01]11570: WAF :: fetched 9 new logs [08-07-2022 22:53:02]14215: WAF :: fetched 13 new logs [08-07-2022 22:54:01]16800: WAF :: fetched 14 new logs [08-07-2022 22:55:01]19497: WAF :: fetched 8 new logs [08-07-2022 22:56:01]22158: WAF :: fetched 7 new logs [08-07-2022 22:57:01]24861: WAF :: fetched 12 new logs [08-07-2022 22:58:02]27594: WAF :: fetched 14 new logs [08-07-2022 22:59:01]30181: WAF :: fetched 8 new logs [08-07-2022 23:00:02]32530: WAF :: fetched 14 new logs [08-07-2022 23:01:01]3229: WAF :: fetched 11 new logs [08-07-2022 23:02:01]5950: WAF :: fetched 7 new logs [08-07-2022 23:03:02]8544: WAF :: fetched 10 new logs [08-07-2022 23:04:02]11201: WAF :: fetched 7 new logs [08-07-2022 23:05:01]13751: WAF :: fetched 34 new logs [08-07-2022 23:06:01]16382: WAF :: fetched 5 new logs [08-07-2022 23:07:02]19202: WAF :: fetched 5 new logs [08-07-2022 23:08:01]19358: Performed RBL check for 23.111.136.34. [08-07-2022 23:08:02]21798: WAF :: fetched 4 new logs [08-07-2022 23:09:02]24439: WAF :: fetched 9 new logs [08-07-2022 23:10:02]27039: WAF :: fetched 6 new logs [08-07-2022 23:11:02]29812: WAF :: fetched 15 new logs [08-07-2022 23:12:01]32515: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657332721 [08-07-2022 23:12:01]32515: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-07-2022 23:12:03]32515: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-07-2022 23:12:05]32515: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220708/20220708-2312/20220708-231201-Ysjj8ev-fqLcKMHAQSqZkQAAAFk [08-07-2022 23:12:05]32515: WAF :: No suitable log file found. Using SQLite.. [08-07-2022 23:12:05]32515: WAF :: fetched 14 new logs [08-07-2022 23:13:02]2743: WAF :: fetched 9 new logs [08-07-2022 23:14:01]5395: WAF :: fetched 11 new logs [08-07-2022 23:15:02]7996: WAF :: fetched 11 new logs [08-07-2022 23:16:01]10740: WAF :: fetched 11 new logs [08-07-2022 23:17:01]13402: WAF :: fetched 7 new logs [08-07-2022 23:18:02]16044: WAF :: fetched 4 new logs [08-07-2022 23:19:01]18703: WAF :: fetched 7 new logs [08-07-2022 23:20:01]21404: WAF :: fetched 4 new logs [08-07-2022 23:21:02]24094: WAF :: fetched 2 new logs [08-07-2022 23:22:01]26806: WAF :: fetched 4 new logs [08-07-2022 23:23:02]29430: WAF :: fetched 8 new logs [08-07-2022 23:24:01]32040: WAF :: fetched 7 new logs [08-07-2022 23:25:02]2241: WAF :: fetched 5 new logs [08-07-2022 23:27:03]7570: WAF :: fetched 5 new logs [08-07-2022 23:28:01]10173: WAF :: fetched 8 new logs [08-07-2022 23:29:02]12762: WAF :: fetched 7 new logs [08-07-2022 23:30:01]15368: WAF :: fetched 8 new logs [08-07-2022 23:31:01]18120: WAF :: fetched 2 new logs [08-07-2022 23:32:01]20873: WAF :: fetched 10 new logs [08-07-2022 23:33:01]23493: WAF :: fetched 7 new logs [08-07-2022 23:34:02]26060: WAF :: fetched 11 new logs [08-07-2022 23:35:02]28698: WAF :: fetched 12 new logs [08-07-2022 23:36:01]31316: WAF :: fetched 6 new logs [08-07-2022 23:37:02]1680: WAF :: fetched 4 new logs [08-07-2022 23:38:01]4219: WAF :: fetched 4 new logs [08-07-2022 23:39:01]6922: WAF :: fetched 26 new logs [08-07-2022 23:40:01]9543: WAF :: fetched 4 new logs [08-07-2022 23:41:01]12206: WAF :: fetched 2 new logs [08-07-2022 23:41:01]12206: Checking for user cron vulnerabilities [08-07-2022 23:42:01]14889: WAF :: fetched 7 new logs [08-07-2022 23:43:01]17499: WAF :: fetched 9 new logs [08-07-2022 23:44:02]20208: Checking ditributed CMS bruteforce attacks [08-07-2022 23:44:02]20208: WAF :: fetched 6 new logs [08-07-2022 23:45:02]22770: WAF :: fetched 14 new logs [08-07-2022 23:46:01]25392: WAF :: fetched 6 new logs [08-07-2022 23:47:01]28057: WAF :: fetched 11 new logs [08-07-2022 23:48:02]30671: WAF :: fetched 5 new logs [08-07-2022 23:49:01]824: WAF :: fetched 3 new logs [08-07-2022 23:50:01]3505: WAF :: fetched 6 new logs [08-07-2022 23:51:02]6150: WAF :: fetched 12 new logs [08-07-2022 23:52:01]8843: WAF :: fetched 6 new logs [08-07-2022 23:53:02]11522: WAF :: fetched 4 new logs [08-07-2022 23:54:01]14214: WAF :: fetched 5 new logs [08-07-2022 23:55:01]17098: WAF :: fetched 2 new logs [08-07-2022 23:56:01]20239: WAF :: fetched 45 new logs [08-07-2022 23:56:01]20250: httpd.conf changed. Refreshing watchlist. [08-07-2022 23:57:01]23322: WAF :: fetched 23 new logs [08-07-2022 23:58:01]25935: WAF :: fetched 6 new logs [08-07-2022 23:59:02]28661: WAF :: fetched 6 new logs [09-07-2022 00:00:03]31037: WAF :: fetched 4 new logs [09-07-2022 00:01:01]1772: WAF :: fetched 5 new logs [09-07-2022 00:01:04]1772: Sending daily report for July 9, 2022 [09-07-2022 00:02:01]4539: WAF :: fetched 2 new logs [09-07-2022 00:03:01]7156: WAF :: fetched 8 new logs [09-07-2022 00:04:02]9762: WAF :: fetched 5 new logs [09-07-2022 00:05:01]12406: WAF :: fetched 2 new logs [09-07-2022 00:05:01]12406: Deleted 0 entries older than 6 MONTH from scanner_logs [09-07-2022 00:05:01]12406: Deleted 0 files from Quarantine [09-07-2022 00:06:02]15135: WAF :: fetched 3 new logs [09-07-2022 00:07:01]17909: WAF :: fetched 10 new logs [09-07-2022 00:08:02]20699: WAF :: fetched 3 new logs [09-07-2022 00:09:02]23298: WAF :: fetched 5 new logs [09-07-2022 00:10:01]25964: WAF :: fetched 12 new logs [09-07-2022 00:11:01]28676: WAF :: fetched 4 new logs [09-07-2022 00:12:02]31429: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657336322 [09-07-2022 00:12:02]31429: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 00:12:04]31429: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 00:12:05]31429: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-0012/20220709-001202-YsjyAhYww0EYRiVyO8cMswAAACE [09-07-2022 00:12:05]31429: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 00:12:06]31429: WAF :: fetched 7 new logs [09-07-2022 00:13:02]1696: WAF :: fetched 3 new logs [09-07-2022 00:14:02]4316: WAF :: fetched 4 new logs [09-07-2022 00:15:01]6930: WAF :: fetched 3 new logs [09-07-2022 00:16:01]9659: WAF :: fetched 5 new logs [09-07-2022 00:17:02]12386: WAF :: fetched 2 new logs [09-07-2022 00:18:02]15078: WAF :: fetched 2 new logs [09-07-2022 00:19:02]17809: WAF :: fetched 30 new logs [09-07-2022 00:20:01]20557: WAF :: fetched 4 new logs [09-07-2022 00:21:02]23258: WAF :: fetched 3 new logs [09-07-2022 00:22:02]26002: WAF :: fetched 4 new logs [09-07-2022 00:23:01]28610: WAF :: fetched 2 new logs [09-07-2022 00:24:01]31206: WAF :: fetched 6 new logs [09-07-2022 00:25:02]1466: WAF :: fetched 2 new logs [09-07-2022 00:26:01]4147: WAF :: fetched 3 new logs [09-07-2022 00:27:01]6909: WAF :: fetched 5 new logs [09-07-2022 00:28:02]9553: WAF :: fetched 3 new logs [09-07-2022 00:29:02]12227: WAF :: fetched 4 new logs [09-07-2022 00:30:02]14836: WAF :: fetched 4 new logs [09-07-2022 00:31:01]17478: WAF :: fetched 3 new logs [09-07-2022 00:32:01]20283: WAF :: fetched 4 new logs [09-07-2022 00:33:02]22984: WAF :: fetched 5 new logs [09-07-2022 00:34:01]25572: WAF :: fetched 3 new logs [09-07-2022 00:35:02]28219: WAF :: fetched 14 new logs [09-07-2022 00:36:01]30879: WAF :: fetched 2 new logs [09-07-2022 00:37:01]1259: WAF :: fetched 3 new logs [09-07-2022 00:38:02]3849: WAF :: fetched 3 new logs [09-07-2022 00:39:01]6444: WAF :: fetched 3 new logs [09-07-2022 00:40:01]9094: WAF :: fetched 2 new logs [09-07-2022 00:41:01]11754: WAF :: fetched 3 new logs [09-07-2022 00:41:01]11754: Checking for user cron vulnerabilities [09-07-2022 00:42:01]14428: WAF :: fetched 3 new logs [09-07-2022 00:43:02]17054: WAF :: fetched 2 new logs [09-07-2022 00:44:01]19713: Checking ditributed CMS bruteforce attacks [09-07-2022 00:44:01]19713: WAF :: fetched 1 new logs [09-07-2022 00:45:01]: Checking for software updates [09-07-2022 00:45:01]22349: WAF :: fetched 1 new logs [09-07-2022 00:46:03]25091: WAF :: fetched 5 new logs [09-07-2022 00:48:01]30384: WAF :: fetched 2 new logs [09-07-2022 00:49:01]572: WAF :: fetched 4 new logs [09-07-2022 00:50:02]3263: WAF :: fetched 3 new logs [09-07-2022 00:51:01]5912: WAF :: fetched 27 new logs [09-07-2022 00:52:02]8741: WAF :: fetched 11 new logs [09-07-2022 00:53:01]11329: WAF :: fetched 3 new logs [09-07-2022 00:54:03]13955: WAF :: fetched 2 new logs [09-07-2022 00:55:02]16544: WAF :: fetched 4 new logs [09-07-2022 00:56:01]19253: WAF :: fetched 6 new logs [09-07-2022 00:57:01]21937: WAF :: fetched 4 new logs [09-07-2022 00:58:01]24555: WAF :: fetched 3 new logs [09-07-2022 00:59:02]27160: WAF :: fetched 4 new logs [09-07-2022 01:00:02]29498: WAF :: fetched 3 new logs [09-07-2022 01:01:01]32453: WAF :: fetched 4 new logs [09-07-2022 01:02:01]3469: WAF :: fetched 1 new logs [09-07-2022 01:03:02]6128: WAF :: fetched 8 new logs [09-07-2022 01:04:01]8683: WAF :: fetched 4 new logs [09-07-2022 01:05:02]11306: WAF :: fetched 2 new logs [09-07-2022 01:06:01]13946: WAF :: fetched 3 new logs [09-07-2022 01:07:02]16622: WAF :: fetched 4 new logs [09-07-2022 01:08:02]19414: WAF :: fetched 2 new logs [09-07-2022 01:12:01]29762: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657339921 [09-07-2022 01:12:01]29762: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 01:12:03]29762: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 01:12:03]29762: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-0112/20220709-011201-YskAEQqnohkcpxSeYTAYvgAAAAI [09-07-2022 01:12:03]29762: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 01:12:04]29762: WAF :: fetched 3 new logs [09-07-2022 01:14:02]2800: WAF :: fetched 4 new logs [09-07-2022 01:15:01]5419: WAF :: fetched 5 new logs [09-07-2022 01:16:01]8076: WAF :: fetched 1 new logs [09-07-2022 01:17:01]10676: WAF :: fetched 18 new logs [09-07-2022 01:18:01]13360: WAF :: fetched 6 new logs [09-07-2022 01:19:02]16002: WAF :: fetched 1 new logs [09-07-2022 01:20:01]18674: WAF :: fetched 2 new logs [09-07-2022 01:21:01]21342: WAF :: fetched 3 new logs [09-07-2022 01:22:01]23953: WAF :: fetched 4 new logs [09-07-2022 01:23:02]26612: WAF :: fetched 5 new logs [09-07-2022 01:24:01]29232: WAF :: fetched 3 new logs [09-07-2022 01:25:02]31850: WAF :: fetched 3 new logs [09-07-2022 01:26:01]2035: WAF :: fetched 4 new logs [09-07-2022 01:27:01]4712: WAF :: fetched 4 new logs [09-07-2022 01:28:03]7500: WAF :: fetched 4 new logs [09-07-2022 01:29:01]10071: WAF :: fetched 7 new logs [09-07-2022 01:30:01]12701: WAF :: fetched 9 new logs [09-07-2022 01:31:01]15381: WAF :: fetched 6 new logs [09-07-2022 01:32:02]18135: WAF :: fetched 8 new logs [09-07-2022 01:33:01]20915: WAF :: fetched 13 new logs [09-07-2022 01:34:01]23527: WAF :: fetched 3 new logs [09-07-2022 01:35:02]26148: WAF :: fetched 4 new logs [09-07-2022 01:36:09]28770: WAF :: fetched 4 new logs [09-07-2022 01:37:02]31473: WAF :: fetched 4 new logs [09-07-2022 01:38:01]1766: WAF :: fetched 1 new logs [09-07-2022 01:39:02]4399: WAF :: fetched 3 new logs [09-07-2022 01:40:01]7085: WAF :: fetched 4 new logs [09-07-2022 01:41:01]9788: WAF :: fetched 3 new logs [09-07-2022 01:41:01]9788: Checking for user cron vulnerabilities [09-07-2022 01:42:01]12411: WAF :: fetched 2 new logs [09-07-2022 01:44:01]17731: Checking ditributed CMS bruteforce attacks [09-07-2022 01:44:01]17731: WAF :: fetched 2 new logs [09-07-2022 01:45:01]: Checking for definition updates [09-07-2022 01:45:02]20495: WAF :: fetched 2 new logs [09-07-2022 01:46:01]23107: WAF :: fetched 1 new logs [09-07-2022 01:48:02]28352: WAF :: fetched 4 new logs [09-07-2022 01:49:01]30766: WAF :: fetched 4 new logs [09-07-2022 01:50:02]1121: WAF :: fetched 4 new logs [09-07-2022 01:51:01]3816: WAF :: fetched 6 new logs [09-07-2022 01:52:02]6408: WAF :: fetched 10 new logs [09-07-2022 01:53:01]8872: WAF :: fetched 3 new logs [09-07-2022 01:54:01]11628: WAF :: fetched 3 new logs [09-07-2022 01:55:02]14302: WAF :: fetched 2 new logs [09-07-2022 01:56:01]16939: WAF :: fetched 2 new logs [09-07-2022 01:57:01]19739: WAF :: fetched 10 new logs [09-07-2022 01:58:01]22484: WAF :: fetched 7 new logs [09-07-2022 01:59:02]25038: WAF :: fetched 4 new logs [09-07-2022 02:00:01]27378: WAF :: fetched 5 new logs [09-07-2022 02:01:01]30596: WAF :: fetched 3 new logs [09-07-2022 02:02:01]806: WAF :: fetched 53 new logs [09-07-2022 02:04:02]6158: WAF :: fetched 4 new logs [09-07-2022 02:05:01]8621: WAF :: fetched 3 new logs [09-07-2022 02:06:02]11396: WAF :: fetched 3 new logs [09-07-2022 02:07:02]14057: WAF :: fetched 7 new logs [09-07-2022 02:09:01]19426: WAF :: fetched 9 new logs [09-07-2022 02:10:02]22068: WAF :: fetched 1 new logs [09-07-2022 02:12:02]27212: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657343522 [09-07-2022 02:12:02]27212: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 02:12:04]27212: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 02:12:06]27212: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-0212/20220709-021202-YskOItF_5SFWqc_FaE0RSAAAAAA [09-07-2022 02:12:06]27212: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 02:12:06]27212: WAF :: fetched 3 new logs [09-07-2022 02:13:01]29905: WAF :: fetched 8 new logs [09-07-2022 02:14:02]32486: WAF :: fetched 1 new logs [09-07-2022 02:15:01]2735: WAF :: fetched 5 new logs [09-07-2022 02:16:02]5361: WAF :: fetched 2 new logs [09-07-2022 02:17:02]8020: WAF :: fetched 1 new logs [09-07-2022 02:18:01]10663: WAF :: fetched 1 new logs [09-07-2022 02:19:02]13416: WAF :: fetched 1 new logs [09-07-2022 02:20:01]16003: WAF :: fetched 1 new logs [09-07-2022 02:21:02]18747: WAF :: fetched 1 new logs [09-07-2022 02:23:03]24024: WAF :: fetched 3 new logs [09-07-2022 02:24:01]26632: WAF :: fetched 3 new logs [09-07-2022 02:25:02]29259: WAF :: fetched 5 new logs [09-07-2022 02:26:02]31870: WAF :: fetched 3 new logs [09-07-2022 02:27:01]2090: WAF :: fetched 7 new logs [09-07-2022 02:28:02]4784: WAF :: fetched 54 new logs [09-07-2022 02:29:02]7358: WAF :: fetched 316 new logs [09-07-2022 02:30:02]9972: WAF :: fetched 628 new logs [09-07-2022 02:31:03]12661: WAF :: fetched 692 new logs [09-07-2022 02:32:01]15297: WAF :: fetched 413 new logs [09-07-2022 02:33:02]18073: WAF :: fetched 151 new logs [09-07-2022 02:34:01]20711: WAF :: fetched 3 new logs [09-07-2022 02:35:02]23332: WAF :: fetched 5 new logs [09-07-2022 02:37:02]28575: WAF :: fetched 101 new logs [09-07-2022 02:38:02]31265: WAF :: fetched 335 new logs [09-07-2022 02:39:01]1501: WAF :: fetched 511 new logs [09-07-2022 02:40:04]4164: WAF :: fetched 631 new logs [09-07-2022 02:41:01]6774: WAF :: fetched 320 new logs [09-07-2022 02:41:01]6774: Checking for user cron vulnerabilities [09-07-2022 02:42:01]9428: WAF :: fetched 232 new logs [09-07-2022 02:43:01]12152: WAF :: fetched 18 new logs [09-07-2022 02:44:01]14771: Checking ditributed CMS bruteforce attacks [09-07-2022 02:44:02]14771: WAF :: fetched 4 new logs [09-07-2022 02:45:01]17355: WAF :: fetched 1 new logs [09-07-2022 02:46:01]20128: WAF :: fetched 2 new logs [09-07-2022 02:47:02]22691: WAF :: fetched 1 new logs [09-07-2022 02:48:01]25362: WAF :: fetched 1 new logs [09-07-2022 02:49:01]27934: WAF :: fetched 2 new logs [09-07-2022 02:50:02]30520: WAF :: fetched 1 new logs [09-07-2022 02:51:01]592: WAF :: fetched 3 new logs [09-07-2022 02:52:02]3342: WAF :: fetched 7 new logs [09-07-2022 02:53:01]5995: WAF :: fetched 2 new logs [09-07-2022 02:53:02]5994: Updated license status via CDN [09-07-2022 02:54:01]8584: WAF :: fetched 7 new logs [09-07-2022 02:55:02]11166: WAF :: fetched 1 new logs [09-07-2022 02:56:01]13783: WAF :: fetched 2 new logs [09-07-2022 02:58:02]19124: WAF :: fetched 1 new logs [09-07-2022 02:59:01]21703: WAF :: fetched 2 new logs [09-07-2022 03:00:58]23991: Found and updated 32 CMS installations [09-07-2022 03:01:01]27102: WAF :: fetched 1 new logs [09-07-2022 03:02:01]29934: WAF :: fetched 4 new logs [09-07-2022 03:03:50]23991: Sending CMS version vulnerability report emails to cpanel users [09-07-2022 03:03:56]23991: Checking wordpress installations for suspicious directories [09-07-2022 03:04:29]32762: Sending CMS version vulnerability report emails to cpanel users [09-07-2022 03:04:32]32762: Checking wordpress installations for suspicious directories [09-07-2022 03:05:01]6330: WAF :: fetched 2 new logs [09-07-2022 03:06:02]8915: WAF :: fetched 1 new logs [09-07-2022 03:07:01]11521: WAF :: fetched 3 new logs [09-07-2022 03:09:02]16768: WAF :: fetched 1 new logs [09-07-2022 03:10:02]19498: WAF :: fetched 4 new logs [09-07-2022 03:12:01]24598: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657347121 [09-07-2022 03:12:01]24598: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 03:12:03]24598: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 03:12:05]24598: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-0312/20220709-031201-YskcMfgaYcciQ-2KJGTCpgAAAAE [09-07-2022 03:12:05]24598: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 03:12:05]24598: WAF :: fetched 5 new logs [09-07-2022 03:13:01]27367: WAF :: fetched 1 new logs [09-07-2022 03:14:01]29938: WAF :: fetched 1 new logs [09-07-2022 03:15:02]32534: WAF :: fetched 2 new logs [09-07-2022 03:16:02]2731: WAF :: fetched 1 new logs [09-07-2022 03:17:01]5143: WAF :: fetched 2 new logs [09-07-2022 03:18:03]7965: WAF :: fetched 29 new logs [09-07-2022 03:19:01]10594: WAF :: fetched 14 new logs [09-07-2022 03:20:01]13179: WAF :: fetched 3 new logs [09-07-2022 03:21:01]15865: WAF :: fetched 7 new logs [09-07-2022 03:22:02]18554: WAF :: fetched 5 new logs [09-07-2022 03:23:01]21215: WAF :: fetched 50 new logs [09-07-2022 03:24:01]23798: WAF :: fetched 2 new logs [09-07-2022 03:25:02]26436: WAF :: fetched 40 new logs [09-07-2022 03:26:01]29039: WAF :: fetched 82 new logs [09-07-2022 03:27:02]31618: WAF :: fetched 69 new logs [09-07-2022 03:28:02]1871: WAF :: fetched 76 new logs [09-07-2022 03:29:02]4460: WAF :: fetched 77 new logs [09-07-2022 03:30:01]7078: WAF :: fetched 73 new logs [09-07-2022 03:31:02]9735: WAF :: fetched 74 new logs [09-07-2022 03:32:02]12312: WAF :: fetched 64 new logs [09-07-2022 03:33:01]14999: WAF :: fetched 71 new logs [09-07-2022 03:34:01]17560: WAF :: fetched 76 new logs [09-07-2022 03:35:01]20258: WAF :: fetched 1 new logs [09-07-2022 03:36:02]22883: WAF :: fetched 1 new logs [09-07-2022 03:37:01]25452: WAF :: fetched 2 new logs [09-07-2022 03:38:01]28121: WAF :: fetched 64 new logs [09-07-2022 03:39:02]27914: WAF :: fetched 10 new logs [09-07-2022 03:40:02]15796: WAF :: fetched 4 new logs [09-07-2022 03:41:02]28064: WAF :: fetched 5 new logs [09-07-2022 03:41:02]28064: Checking for user cron vulnerabilities [09-07-2022 03:42:01]7713: WAF :: fetched 4 new logs [09-07-2022 03:43:01]10427: WAF :: fetched 1 new logs [09-07-2022 03:44:01]13054: Checking ditributed CMS bruteforce attacks [09-07-2022 03:44:04]13054: WAF :: fetched 2 new logs [09-07-2022 03:45:02]15645: WAF :: fetched 3 new logs [09-07-2022 03:46:02]18342: WAF :: fetched 49 new logs [09-07-2022 03:47:01]20944: WAF :: fetched 8 new logs [09-07-2022 03:48:01]23614: WAF :: fetched 3 new logs [09-07-2022 03:49:01]26217: WAF :: fetched 7 new logs [09-07-2022 03:50:01]28806: WAF :: fetched 4 new logs [09-07-2022 03:51:02]31410: WAF :: fetched 2 new logs [09-07-2022 03:52:01]1596: WAF :: fetched 3 new logs [09-07-2022 03:53:01]4262: WAF :: fetched 4 new logs [09-07-2022 03:54:01]6853: WAF :: fetched 3 new logs [09-07-2022 03:55:02]9445: WAF :: fetched 5 new logs [09-07-2022 03:56:01]12024: WAF :: fetched 4 new logs [09-07-2022 03:57:01]14606: WAF :: fetched 4 new logs [09-07-2022 03:58:02]17262: WAF :: fetched 3 new logs [09-07-2022 03:59:02]19940: WAF :: fetched 3 new logs [09-07-2022 04:00:01]22232: WAF :: fetched 5 new logs [09-07-2022 04:01:01]25349: WAF :: fetched 1 new logs [09-07-2022 04:02:02]27986: WAF :: fetched 6 new logs [09-07-2022 04:03:01]30611: WAF :: fetched 4 new logs [09-07-2022 04:04:01]784: WAF :: fetched 4 new logs [09-07-2022 04:05:02]3373: WAF :: fetched 3 new logs [09-07-2022 04:07:01]8553: WAF :: fetched 3 new logs [09-07-2022 04:08:02]11269: WAF :: fetched 2 new logs [09-07-2022 04:09:02]13825: WAF :: fetched 2 new logs [09-07-2022 04:10:01]16371: WAF :: fetched 4 new logs [09-07-2022 04:11:02]19309: WAF :: fetched 2 new logs [09-07-2022 04:12:01]21944: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657350721 [09-07-2022 04:12:01]21944: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 04:12:03]21944: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 04:12:05]21944: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-0412/20220709-041201-YskqQcS90PFRb94S5h_DpAAAAAE [09-07-2022 04:12:05]21944: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 04:12:05]21944: WAF :: fetched 1 new logs [09-07-2022 04:13:01]24702: WAF :: fetched 2 new logs [09-07-2022 04:14:01]27317: WAF :: fetched 2 new logs [09-07-2022 04:15:03]29950: WAF :: fetched 1 new logs [09-07-2022 04:16:01]32527: WAF :: fetched 3 new logs [09-07-2022 04:17:02]2741: WAF :: fetched 2 new logs [09-07-2022 04:18:03]5383: WAF :: fetched 1 new logs [09-07-2022 04:19:02]8013: WAF :: fetched 2 new logs [09-07-2022 04:20:02]10568: WAF :: fetched 1 new logs [09-07-2022 04:21:02]13180: WAF :: fetched 2 new logs [09-07-2022 04:22:01]15758: WAF :: fetched 2 new logs [09-07-2022 04:23:02]18495: WAF :: fetched 3 new logs [09-07-2022 04:24:02]21081: WAF :: fetched 1 new logs [09-07-2022 04:25:01]23543: WAF :: fetched 2 new logs [09-07-2022 04:26:01]26300: WAF :: fetched 5 new logs [09-07-2022 04:27:02]28892: WAF :: fetched 3 new logs [09-07-2022 04:28:01]31509: WAF :: fetched 7 new logs [09-07-2022 04:29:01]1679: WAF :: fetched 4 new logs [09-07-2022 04:30:02]4314: WAF :: fetched 4 new logs [09-07-2022 04:31:01]6927: WAF :: fetched 27 new logs [09-07-2022 04:33:02]12213: WAF :: fetched 2 new logs [09-07-2022 04:34:01]14776: WAF :: fetched 3 new logs [09-07-2022 04:35:01]17320: WAF :: fetched 2 new logs [09-07-2022 04:36:02]20078: WAF :: fetched 2 new logs [09-07-2022 04:37:01]22639: WAF :: fetched 4 new logs [09-07-2022 04:39:01]27901: WAF :: fetched 2 new logs [09-07-2022 04:40:01]30531: WAF :: fetched 2 new logs [09-07-2022 04:41:01]713: WAF :: fetched 5 new logs [09-07-2022 04:41:01]713: Checking for user cron vulnerabilities [09-07-2022 04:42:01]3326: WAF :: fetched 3 new logs [09-07-2022 04:44:01]8516: Checking ditributed CMS bruteforce attacks [09-07-2022 04:44:04]8516: WAF :: fetched 1 new logs [09-07-2022 04:45:02]11124: WAF :: fetched 15 new logs [09-07-2022 04:46:01]13717: WAF :: fetched 2 new logs [09-07-2022 04:47:01]16278: WAF :: fetched 3 new logs [09-07-2022 04:48:02]19030: WAF :: fetched 4 new logs [09-07-2022 04:49:01]21589: WAF :: fetched 5 new logs [09-07-2022 04:50:02]24179: WAF :: fetched 5 new logs [09-07-2022 04:51:01]26782: WAF :: fetched 3 new logs [09-07-2022 04:52:01]29359: WAF :: fetched 2 new logs [09-07-2022 04:54:02]2158: WAF :: fetched 2 new logs [09-07-2022 04:55:02]4731: WAF :: fetched 1 new logs [09-07-2022 04:56:01]7331: WAF :: fetched 2 new logs [09-07-2022 04:57:02]9927: WAF :: fetched 3 new logs [09-07-2022 04:58:01]12581: WAF :: fetched 2 new logs [09-07-2022 04:59:02]15223: WAF :: fetched 3 new logs [09-07-2022 05:00:02]17607: WAF :: fetched 4 new logs [09-07-2022 05:01:01]20746: WAF :: fetched 4 new logs [09-07-2022 05:01:42]20741: Starting daily scan on files updated in last 24 hrs [09-07-2022 05:02:01]23360: WAF :: fetched 4 new logs [09-07-2022 05:03:02]26034: WAF :: fetched 4 new logs [09-07-2022 05:04:01]28613: WAF :: fetched 5 new logs [09-07-2022 05:05:01]31159: WAF :: fetched 2 new logs [09-07-2022 05:06:02]1396: WAF :: fetched 2 new logs [09-07-2022 05:07:01]3972: WAF :: fetched 5 new logs [09-07-2022 05:09:01]9201: WAF :: fetched 1 new logs [09-07-2022 05:12:02]17012: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657354322 [09-07-2022 05:12:02]17012: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 05:12:04]17012: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 05:12:08]17012: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-0512/20220709-051202-Ysk4UsmsUUdHeDXnaRaqMwAAAAI [09-07-2022 05:12:08]17012: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 05:12:08]17012: WAF :: fetched 1 new logs [09-07-2022 05:18:01]32762: WAF :: fetched 7 new logs [09-07-2022 05:22:01]10518: WAF :: fetched 1 new logs [09-07-2022 05:23:01]13413: WAF :: fetched 2 new logs [09-07-2022 05:24:01]15972: WAF :: fetched 2 new logs [09-07-2022 05:28:01]26586: WAF :: fetched 5 new logs [09-07-2022 05:31:01]1985: WAF :: fetched 2 new logs [09-07-2022 05:33:01]7263: WAF :: fetched 1 new logs [09-07-2022 05:34:01]9840: WAF :: fetched 1 new logs [09-07-2022 05:35:02]12398: WAF :: fetched 2 new logs [09-07-2022 05:36:01]15074: WAF :: fetched 2 new logs [09-07-2022 05:37:02]17654: WAF :: fetched 16 new logs [09-07-2022 05:39:01]22978: WAF :: fetched 2 new logs [09-07-2022 05:40:02]25570: WAF :: fetched 1 new logs [09-07-2022 05:41:01]28198: Checking for user cron vulnerabilities [09-07-2022 05:44:02]3620: Checking ditributed CMS bruteforce attacks [09-07-2022 05:52:02]24536: WAF :: fetched 2 new logs [09-07-2022 05:56:01]2582: WAF :: fetched 1 new logs [09-07-2022 05:57:01]5206: WAF :: fetched 3 new logs [09-07-2022 05:59:02]10441: WAF :: fetched 1 new logs [09-07-2022 06:03:02]21130: WAF :: fetched 2 new logs [09-07-2022 06:04:02]23774: WAF :: fetched 2 new logs [09-07-2022 06:05:01]26366: WAF :: fetched 2 new logs [09-07-2022 06:07:01]31568: WAF :: fetched 1 new logs [09-07-2022 06:09:01]4496: WAF :: fetched 1 new logs [09-07-2022 06:10:02]7137: WAF :: fetched 1 new logs [09-07-2022 06:12:01]12370: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657357921 [09-07-2022 06:12:01]12370: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 06:12:03]12370: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 06:12:05]12370: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-0612/20220709-061201-YslGYSuFvEvuGQKF6TJNFAAAAAs [09-07-2022 06:12:05]12370: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 06:12:05]12370: WAF :: fetched 1 new logs [09-07-2022 06:31:01]29719: WAF :: fetched 2 new logs [09-07-2022 06:34:01]5348: WAF :: fetched 2 new logs [09-07-2022 06:41:02]23797: Checking for user cron vulnerabilities [09-07-2022 06:42:02]26352: WAF :: fetched 1 new logs [09-07-2022 06:44:01]31403: Checking ditributed CMS bruteforce attacks [09-07-2022 06:45:01]1702: WAF :: fetched 1 new logs [09-07-2022 06:48:01]9496: WAF :: fetched 1 new logs [09-07-2022 06:50:02]14793: WAF :: fetched 8 new logs [09-07-2022 06:51:01]17366: WAF :: fetched 3 new logs [09-07-2022 06:52:01]20095: WAF :: fetched 2 new logs [09-07-2022 06:54:01]25301: WAF :: fetched 2 new logs [09-07-2022 06:57:01]607: WAF :: fetched 2 new logs [09-07-2022 06:59:01]5891: WAF :: fetched 1 new logs [09-07-2022 07:00:02]8265: WAF :: fetched 1 new logs [09-07-2022 07:02:02]14029: WAF :: fetched 2 new logs [09-07-2022 07:03:02]16548: WAF :: fetched 3 new logs [09-07-2022 07:07:01]27075: WAF :: fetched 1 new logs [09-07-2022 07:11:02]5180: WAF :: fetched 2 new logs [09-07-2022 07:12:01]7728: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657361521 [09-07-2022 07:12:01]7728: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 07:12:03]7728: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 07:12:05]7728: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-0712/20220709-071201-YslUcdQcJ4KpYxFA96OETQAAAAA [09-07-2022 07:12:05]7728: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [09-07-2022 07:12:06]7728: WAF :: fetched 1 new logs [09-07-2022 07:13:01]10326: WAF :: fetched 1 new logs [09-07-2022 07:16:02]18299: WAF :: fetched 5 new logs [09-07-2022 07:18:02]23469: WAF :: fetched 1 new logs [09-07-2022 07:22:02]1637: WAF :: fetched 2 new logs [09-07-2022 07:25:02]9577: WAF :: fetched 1 new logs [09-07-2022 07:30:04]22829: WAF :: fetched 1 new logs [09-07-2022 07:31:01]25474: WAF :: fetched 5 new logs [09-07-2022 07:34:01]965: WAF :: fetched 3 new logs [09-07-2022 07:35:02]3593: WAF :: fetched 4 new logs [09-07-2022 07:36:01]6218: WAF :: fetched 2 new logs [09-07-2022 07:37:02]8837: WAF :: fetched 1 new logs [09-07-2022 07:39:03]14095: WAF :: fetched 1 new logs [09-07-2022 07:40:01]16499: WAF :: fetched 1 new logs [09-07-2022 07:41:01]19393: WAF :: fetched 1 new logs [09-07-2022 07:41:01]19393: Checking for user cron vulnerabilities [09-07-2022 07:44:01]27091: Checking ditributed CMS bruteforce attacks [09-07-2022 07:45:01]: Checking for definition updates [09-07-2022 07:45:04]29822: Updated virus defnition : signatures.ndb [09-07-2022 07:51:02]13163: WAF :: fetched 2 new logs [09-07-2022 07:57:01]28926: WAF :: fetched 1 new logs [09-07-2022 07:59:01]1764: WAF :: fetched 1 new logs [09-07-2022 08:05:02]17867: WAF :: fetched 1 new logs [09-07-2022 08:10:02]30638: WAF :: fetched 2 new logs [09-07-2022 08:12:02]3895: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657365122 [09-07-2022 08:12:02]3895: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 08:12:04]3895: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 08:12:04]3895: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-0812/20220709-081202-YsligunhpuNQop5gsKDvQgAAABc [09-07-2022 08:12:04]3895: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 08:12:05]3895: WAF :: fetched 33 new logs [09-07-2022 08:13:01]6474: WAF :: fetched 1 new logs [09-07-2022 08:18:02]19690: WAF :: fetched 2 new logs [09-07-2022 08:20:02]25016: WAF :: fetched 1 new logs [09-07-2022 08:21:01]27440: WAF :: fetched 2 new logs [09-07-2022 08:27:01]10991: WAF :: fetched 3 new logs [09-07-2022 08:28:02]13569: WAF :: fetched 3 new logs [09-07-2022 08:29:01]16237: WAF :: fetched 4 new logs [09-07-2022 08:31:01]21544: WAF :: fetched 29 new logs [09-07-2022 08:32:01]24161: WAF :: fetched 1 new logs [09-07-2022 08:37:01]4808: WAF :: fetched 2 new logs [09-07-2022 08:38:02]7423: WAF :: fetched 2 new logs [09-07-2022 08:39:01]10073: WAF :: fetched 2 new logs [09-07-2022 08:40:02]12711: WAF :: fetched 5 new logs [09-07-2022 08:41:01]15340: Checking for user cron vulnerabilities [09-07-2022 08:44:01]23313: Checking ditributed CMS bruteforce attacks [09-07-2022 08:47:02]31129: WAF :: fetched 1 new logs [09-07-2022 08:48:01]1324: WAF :: fetched 1 new logs [09-07-2022 08:52:01]11830: WAF :: fetched 1 new logs [09-07-2022 08:55:02]19809: WAF :: fetched 1 new logs [09-07-2022 08:57:01]25006: WAF :: fetched 1 new logs [09-07-2022 08:59:01]30296: WAF :: fetched 1 new logs [09-07-2022 09:01:01]3305: WAF :: fetched 1 new logs [09-07-2022 09:02:02]5963: WAF :: fetched 2 new logs [09-07-2022 09:03:02]8579: WAF :: fetched 2 new logs [09-07-2022 09:04:02]11254: WAF :: fetched 1 new logs [09-07-2022 09:05:01]13823: WAF :: fetched 3 new logs [09-07-2022 09:06:01]16513: WAF :: fetched 5 new logs [09-07-2022 09:07:01]19198: WAF :: fetched 1 new logs [09-07-2022 09:08:02]21817: WAF :: fetched 5 new logs [09-07-2022 09:09:01]24461: WAF :: fetched 5 new logs [09-07-2022 09:11:02]29708: WAF :: fetched 2 new logs [09-07-2022 09:12:02]32261: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657368722 [09-07-2022 09:12:02]32261: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 09:12:04]32261: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 09:12:06]32261: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-0912/20220709-091202-Yslwkkmpt-KfNQvEQ7JSswAAAB4 [09-07-2022 09:12:06]32261: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 09:12:06]32261: WAF :: fetched 2 new logs [09-07-2022 09:15:01]7713: WAF :: fetched 1 new logs [09-07-2022 09:17:01]12924: WAF :: fetched 1 new logs [09-07-2022 09:19:03]18286: WAF :: fetched 1 new logs [09-07-2022 09:23:01]28645: WAF :: fetched 1 new logs [09-07-2022 09:24:01]31441: WAF :: fetched 1 new logs [09-07-2022 09:25:02]1635: WAF :: fetched 1 new logs [09-07-2022 09:26:01]4291: WAF :: fetched 1 new logs [09-07-2022 09:30:02]14763: WAF :: fetched 1 new logs [09-07-2022 09:31:02]17402: WAF :: fetched 1 new logs [09-07-2022 09:33:02]22698: WAF :: fetched 1 new logs [09-07-2022 09:39:01]6127: WAF :: fetched 1 new logs [09-07-2022 09:40:02]8757: WAF :: fetched 4 new logs [09-07-2022 09:41:01]11384: Checking for user cron vulnerabilities [09-07-2022 09:43:04]16537: WAF :: fetched 1 new logs [09-07-2022 09:44:01]19304: Checking ditributed CMS bruteforce attacks [09-07-2022 09:45:02]21921: WAF :: fetched 1 new logs [09-07-2022 09:46:01]24549: WAF :: fetched 3 new logs [09-07-2022 09:52:01]7937: WAF :: fetched 1 new logs [09-07-2022 09:54:02]13223: WAF :: fetched 3 new logs [09-07-2022 09:55:01]15798: WAF :: fetched 3 new logs [09-07-2022 09:57:01]21155: WAF :: fetched 5 new logs [09-07-2022 09:58:01]23792: WAF :: fetched 8 new logs [09-07-2022 09:59:02]26534: WAF :: fetched 1 new logs [09-07-2022 10:03:02]4926: WAF :: fetched 1 new logs [09-07-2022 10:07:02]15427: WAF :: fetched 1 new logs [09-07-2022 10:09:02]20808: WAF :: fetched 1 new logs [09-07-2022 10:11:01]26009: WAF :: fetched 1 new logs [09-07-2022 10:12:02]28649: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657372322 [09-07-2022 10:12:02]28649: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 10:12:04]28649: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 10:12:06]28649: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-1012/20220709-101202-Ysl-otbPVWXbndABWYTB6AAAABc [09-07-2022 10:12:06]28649: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 10:12:06]28649: WAF :: fetched 3 new logs [09-07-2022 10:13:01]31209: WAF :: fetched 1 new logs [09-07-2022 10:14:02]1461: WAF :: fetched 2 new logs [09-07-2022 10:18:02]12004: WAF :: fetched 1 new logs [09-07-2022 10:20:02]17291: WAF :: fetched 1 new logs [09-07-2022 10:24:01]27945: WAF :: fetched 1 new logs [09-07-2022 10:25:02]30571: WAF :: fetched 1 new logs [09-07-2022 10:26:01]741: WAF :: fetched 1 new logs [09-07-2022 10:27:01]3364: WAF :: fetched 2 new logs [09-07-2022 10:32:02]16563: WAF :: fetched 1 new logs [09-07-2022 10:33:01]19225: WAF :: fetched 1 new logs [09-07-2022 10:37:01]29824: WAF :: fetched 1 new logs [09-07-2022 10:38:02]32473: WAF :: fetched 11 new logs [09-07-2022 10:39:02]2818: WAF :: fetched 16 new logs [09-07-2022 10:40:01]5298: WAF :: fetched 4 new logs [09-07-2022 10:41:01]8177: WAF :: fetched 5 new logs [09-07-2022 10:41:01]8177: Checking for user cron vulnerabilities [09-07-2022 10:42:01]10761: WAF :: fetched 5 new logs [09-07-2022 10:43:02]13378: WAF :: fetched 2 new logs [09-07-2022 10:44:01]15991: Checking ditributed CMS bruteforce attacks [09-07-2022 10:46:02]21382: WAF :: fetched 1 new logs [09-07-2022 10:50:02]31810: WAF :: fetched 3 new logs [09-07-2022 10:52:01]4697: WAF :: fetched 1 new logs [09-07-2022 11:01:01]28639: WAF :: fetched 1 new logs [09-07-2022 11:03:02]1514: WAF :: fetched 2 new logs [09-07-2022 11:04:02]4104: WAF :: fetched 24 new logs [09-07-2022 11:05:01]6771: WAF :: fetched 11 new logs [09-07-2022 11:07:55]12211: Performed RBL check for 23.111.136.34. [09-07-2022 11:09:01]17261: WAF :: fetched 1 new logs [09-07-2022 11:12:02]25301: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657375922 [09-07-2022 11:12:02]25301: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 11:12:04]25301: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 11:12:06]25301: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-1112/20220709-111202-YsmMsu-iDa4luIoSiieTVgAAABU [09-07-2022 11:12:06]25301: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 11:12:06]25301: WAF :: fetched 1 new logs [09-07-2022 11:16:01]3416: WAF :: fetched 4 new logs [09-07-2022 11:18:01]8788: WAF :: fetched 1 new logs [09-07-2022 11:21:02]16999: WAF :: fetched 40 new logs [09-07-2022 11:22:01]19691: WAF :: fetched 2 new logs [09-07-2022 11:23:01]22279: WAF :: fetched 2 new logs [09-07-2022 11:26:01]30248: WAF :: fetched 1 new logs [09-07-2022 11:27:02]340: WAF :: fetched 2 new logs [09-07-2022 11:28:02]3028: WAF :: fetched 3 new logs [09-07-2022 11:29:01]5614: WAF :: fetched 2 new logs [09-07-2022 11:30:01]8352: WAF :: fetched 6 new logs [09-07-2022 11:35:01]21586: WAF :: fetched 1 new logs [09-07-2022 11:36:02]24258: WAF :: fetched 1 new logs [09-07-2022 11:37:01]26815: WAF :: fetched 30 new logs [09-07-2022 11:39:01]32024: WAF :: fetched 2 new logs [09-07-2022 11:40:01]2318: WAF :: fetched 4 new logs [09-07-2022 11:41:01]4969: WAF :: fetched 1 new logs [09-07-2022 11:41:01]4969: Checking for user cron vulnerabilities [09-07-2022 11:42:01]7568: WAF :: fetched 1 new logs [09-07-2022 11:44:01]12737: Checking ditributed CMS bruteforce attacks [09-07-2022 11:47:01]20747: WAF :: fetched 1 new logs [09-07-2022 11:49:02]25948: WAF :: fetched 4 new logs [09-07-2022 12:00:02]22425: WAF :: fetched 6 new logs [09-07-2022 12:03:01]30758: WAF :: fetched 1 new logs [09-07-2022 12:04:01]932: WAF :: fetched 1 new logs [09-07-2022 12:05:02]3637: WAF :: fetched 9 new logs [09-07-2022 12:06:01]6297: WAF :: fetched 7 new logs [09-07-2022 12:12:02]22092: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657379522 [09-07-2022 12:12:02]22092: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 12:12:04]22092: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 12:12:05]22092: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-1212/20220709-121202-YsmawiMwXWKDs8m6bnj8kAAAAAA [09-07-2022 12:12:05]22092: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [09-07-2022 12:12:06]22092: WAF :: fetched 1 new logs [09-07-2022 12:13:01]24698: WAF :: fetched 2 new logs [09-07-2022 12:14:02]27299: WAF :: fetched 10 new logs [09-07-2022 12:16:01]32680: WAF :: fetched 2 new logs [09-07-2022 12:17:02]2904: WAF :: fetched 2 new logs [09-07-2022 12:20:02]10802: WAF :: fetched 7 new logs [09-07-2022 12:21:02]13625: WAF :: fetched 1 new logs [09-07-2022 12:23:02]19589: WAF :: fetched 2 new logs [09-07-2022 12:24:01]22157: WAF :: fetched 3 new logs [09-07-2022 12:26:01]27559: WAF :: fetched 1 new logs [09-07-2022 12:27:02]30213: WAF :: fetched 33 new logs [09-07-2022 12:30:01]5681: WAF :: fetched 2 new logs [09-07-2022 12:31:02]8434: WAF :: fetched 1 new logs [09-07-2022 12:34:01]16265: WAF :: fetched 3 new logs [09-07-2022 12:35:02]19081: WAF :: fetched 1 new logs [09-07-2022 12:39:02]29543: WAF :: fetched 2 new logs [09-07-2022 12:41:01]2519: WAF :: fetched 2 new logs [09-07-2022 12:41:01]2519: Checking for user cron vulnerabilities [09-07-2022 12:44:01]10329: Checking ditributed CMS bruteforce attacks [09-07-2022 12:44:04]10329: WAF :: fetched 37 new logs [09-07-2022 12:45:01]: Checking for software updates [09-07-2022 12:46:02]15695: WAF :: fetched 3 new logs [09-07-2022 12:47:03]18354: WAF :: fetched 3 new logs [09-07-2022 12:48:01]20981: WAF :: fetched 1 new logs [09-07-2022 12:50:02]26281: WAF :: fetched 1 new logs [09-07-2022 12:51:02]28939: WAF :: fetched 2 new logs [09-07-2022 12:53:02]1766: WAF :: fetched 2 new logs [09-07-2022 12:54:02]4401: WAF :: fetched 2 new logs [09-07-2022 12:55:02]7096: WAF :: fetched 2 new logs [09-07-2022 12:57:02]12440: WAF :: fetched 2 new logs [09-07-2022 12:58:01]15075: WAF :: fetched 2 new logs [09-07-2022 12:59:02]17685: WAF :: fetched 2 new logs [09-07-2022 13:00:01]20177: WAF :: fetched 2 new logs [09-07-2022 13:01:02]23257: WAF :: fetched 2 new logs [09-07-2022 13:02:01]25892: WAF :: fetched 2 new logs [09-07-2022 13:03:02]28572: WAF :: fetched 3 new logs [09-07-2022 13:04:02]31170: WAF :: fetched 2 new logs [09-07-2022 13:06:01]4123: WAF :: fetched 2 new logs [09-07-2022 13:07:02]6775: WAF :: fetched 3 new logs [09-07-2022 13:11:02]17382: WAF :: fetched 1 new logs [09-07-2022 13:12:01]20110: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657383121 [09-07-2022 13:12:01]20110: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 13:12:03]20110: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 13:12:03]20110: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-1312/20220709-131201-Ysmo0fKBEFsHQlutJnRBXQAAACw [09-07-2022 13:12:03]20110: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 13:12:06]20110: WAF :: fetched 110 new logs [09-07-2022 13:13:02]22743: WAF :: fetched 1 new logs [09-07-2022 13:14:01]25328: WAF :: fetched 1 new logs [09-07-2022 13:16:01]30654: WAF :: fetched 2 new logs [09-07-2022 13:17:02]853: WAF :: fetched 1 new logs [09-07-2022 13:22:02]14224: WAF :: fetched 1 new logs [09-07-2022 13:24:02]19583: WAF :: fetched 5 new logs [09-07-2022 13:26:01]24925: WAF :: fetched 2 new logs [09-07-2022 13:28:02]30171: WAF :: fetched 1 new logs [09-07-2022 13:29:01]32754: WAF :: fetched 2 new logs [09-07-2022 13:34:01]13563: WAF :: fetched 1 new logs [09-07-2022 13:35:02]16267: WAF :: fetched 1 new logs [09-07-2022 13:36:02]19021: WAF :: fetched 2 new logs [09-07-2022 13:38:02]24216: WAF :: fetched 3 new logs [09-07-2022 13:39:01]26767: WAF :: fetched 2 new logs [09-07-2022 13:40:02]29486: WAF :: fetched 1 new logs [09-07-2022 13:41:01]32136: WAF :: fetched 2 new logs [09-07-2022 13:41:01]32136: Checking for user cron vulnerabilities [09-07-2022 13:42:02]2398: WAF :: fetched 2 new logs [09-07-2022 13:43:01]4994: WAF :: fetched 2 new logs [09-07-2022 13:44:01]7638: Checking ditributed CMS bruteforce attacks [09-07-2022 13:45:01]: Checking for definition updates [09-07-2022 13:46:02]13088: WAF :: fetched 1 new logs [09-07-2022 13:50:02]23876: WAF :: fetched 1 new logs [09-07-2022 13:51:02]26535: WAF :: fetched 4 new logs [09-07-2022 13:52:01]29132: WAF :: fetched 1 new logs [09-07-2022 13:53:01]31792: WAF :: fetched 1 new logs [09-07-2022 13:54:02]2014: WAF :: fetched 3 new logs [09-07-2022 13:55:01]4690: WAF :: fetched 2 new logs [09-07-2022 13:56:02]7355: WAF :: fetched 5 new logs [09-07-2022 13:57:02]10013: WAF :: fetched 2 new logs [09-07-2022 13:58:01]12611: WAF :: fetched 2 new logs [09-07-2022 13:59:01]15191: WAF :: fetched 3 new logs [09-07-2022 14:00:02]17654: WAF :: fetched 1 new logs [09-07-2022 14:01:01]20839: WAF :: fetched 1 new logs [09-07-2022 14:03:01]26075: WAF :: fetched 2 new logs [09-07-2022 14:04:01]28676: WAF :: fetched 1 new logs [09-07-2022 14:05:02]31370: WAF :: fetched 8 new logs [09-07-2022 14:06:01]1690: WAF :: fetched 8 new logs [09-07-2022 14:07:02]4329: WAF :: fetched 6 new logs [09-07-2022 14:08:02]6907: WAF :: fetched 3 new logs [09-07-2022 14:09:01]9489: WAF :: fetched 1 new logs [09-07-2022 14:12:02]17448: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657386722 [09-07-2022 14:12:02]17448: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 14:12:04]17448: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 14:12:05]17448: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-1412/20220709-141202-Ysm24pv76ZcHG8dV28kSiwAAAAo [09-07-2022 14:12:05]17448: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 14:12:05]17448: WAF :: fetched 2 new logs [09-07-2022 14:13:01]20178: WAF :: fetched 3 new logs [09-07-2022 14:15:01]25430: WAF :: fetched 18 new logs [09-07-2022 14:16:02]28084: WAF :: fetched 6 new logs [09-07-2022 14:17:01]30502: WAF :: fetched 8 new logs [09-07-2022 14:18:01]894: WAF :: fetched 8 new logs [09-07-2022 14:19:03]3514: WAF :: fetched 3 new logs [09-07-2022 14:20:01]6177: WAF :: fetched 1 new logs [09-07-2022 14:22:02]11480: WAF :: fetched 3 new logs [09-07-2022 14:23:02]14075: WAF :: fetched 1 new logs [09-07-2022 14:24:01]16688: WAF :: fetched 1 new logs [09-07-2022 14:25:01]19471: WAF :: fetched 2 new logs [09-07-2022 14:26:02]22135: WAF :: fetched 2 new logs [09-07-2022 14:27:01]24732: WAF :: fetched 3 new logs [09-07-2022 14:29:01]29956: WAF :: fetched 2 new logs [09-07-2022 14:30:01]32755: WAF :: fetched 2 new logs [09-07-2022 14:31:01]3067: WAF :: fetched 5 new logs [09-07-2022 14:32:01]5696: WAF :: fetched 7 new logs [09-07-2022 14:33:02]8397: WAF :: fetched 2 new logs [09-07-2022 14:36:02]16499: WAF :: fetched 3 new logs [09-07-2022 14:37:01]19248: WAF :: fetched 1 new logs [09-07-2022 14:41:01]29896: Checking for user cron vulnerabilities [09-07-2022 14:42:01]32498: WAF :: fetched 2 new logs [09-07-2022 14:43:03]2743: WAF :: fetched 1 new logs [09-07-2022 14:44:01]5309: Checking ditributed CMS bruteforce attacks [09-07-2022 14:45:01]7998: WAF :: fetched 3 new logs [09-07-2022 14:46:02]10663: WAF :: fetched 1 new logs [09-07-2022 14:52:01]26458: WAF :: fetched 1 new logs [09-07-2022 14:53:02]29052: Updated license status via CDN [09-07-2022 14:55:02]1973: WAF :: fetched 2 new logs [09-07-2022 14:56:01]4604: WAF :: fetched 2 new logs [09-07-2022 14:57:01]7231: WAF :: fetched 2 new logs [09-07-2022 14:58:03]9792: WAF :: fetched 3 new logs [09-07-2022 14:59:01]12382: WAF :: fetched 2 new logs [09-07-2022 15:00:01]14796: WAF :: fetched 2 new logs [09-07-2022 15:01:01]17951: Reseting cPGuard inotify settings [09-07-2022 15:03:02]23238: WAF :: fetched 3 new logs [09-07-2022 15:06:02]31145: WAF :: fetched 1 new logs [09-07-2022 15:10:01]9256: WAF :: fetched 7 new logs [09-07-2022 15:12:01]14607: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657390321 [09-07-2022 15:12:01]14607: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 15:12:03]14607: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 15:12:05]14607: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-1512/20220709-151201-YsnE8eFomesDv_Haip2WXgAAAC0 [09-07-2022 15:12:05]14607: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 15:12:05]14607: WAF :: fetched 1 new logs [09-07-2022 15:13:02]17270: WAF :: fetched 3 new logs [09-07-2022 15:15:02]22523: WAF :: fetched 1 new logs [09-07-2022 15:18:02]30453: WAF :: fetched 2 new logs [09-07-2022 15:20:02]3417: WAF :: fetched 4 new logs [09-07-2022 15:22:02]8645: WAF :: fetched 2 new logs [09-07-2022 15:23:01]11202: WAF :: fetched 2 new logs [09-07-2022 15:24:01]13787: WAF :: fetched 4 new logs [09-07-2022 15:26:02]19270: WAF :: fetched 2 new logs [09-07-2022 15:27:01]21849: WAF :: fetched 1 new logs [09-07-2022 15:29:02]27079: WAF :: fetched 2 new logs [09-07-2022 15:30:01]29832: WAF :: fetched 1 new logs [09-07-2022 15:32:01]2731: WAF :: fetched 4 new logs [09-07-2022 15:35:01]10695: WAF :: fetched 1 new logs [09-07-2022 15:36:02]13412: WAF :: fetched 1 new logs [09-07-2022 15:37:02]15987: WAF :: fetched 3 new logs [09-07-2022 15:39:02]21285: WAF :: fetched 1 new logs [09-07-2022 15:40:01]23967: WAF :: fetched 1 new logs [09-07-2022 15:41:01]26610: WAF :: fetched 10 new logs [09-07-2022 15:41:01]26610: Checking for user cron vulnerabilities [09-07-2022 15:43:01]31838: WAF :: fetched 1 new logs [09-07-2022 15:44:02]2050: Checking ditributed CMS bruteforce attacks [09-07-2022 15:45:01]4656: WAF :: fetched 29 new logs [09-07-2022 15:46:02]7420: WAF :: fetched 2 new logs [09-07-2022 15:47:02]10008: WAF :: fetched 1 new logs [09-07-2022 15:49:01]15224: WAF :: fetched 3 new logs [09-07-2022 15:52:02]23369: WAF :: fetched 2 new logs [09-07-2022 15:53:02]25939: WAF :: fetched 2 new logs [09-07-2022 15:56:02]1491: WAF :: fetched 1 new logs [09-07-2022 15:58:01]6762: WAF :: fetched 9 new logs [09-07-2022 15:59:02]9450: WAF :: fetched 14 new logs [09-07-2022 16:00:01]11760: WAF :: fetched 7 new logs [09-07-2022 16:01:02]14973: WAF :: fetched 7 new logs [09-07-2022 16:02:02]17607: WAF :: fetched 7 new logs [09-07-2022 16:03:01]20177: WAF :: fetched 4 new logs [09-07-2022 16:04:02]22911: WAF :: fetched 8 new logs [09-07-2022 16:05:02]25533: WAF :: fetched 4 new logs [09-07-2022 16:06:01]28249: WAF :: fetched 2 new logs [09-07-2022 16:07:02]30874: WAF :: fetched 6 new logs [09-07-2022 16:08:01]1057: WAF :: fetched 4 new logs [09-07-2022 16:09:02]3690: WAF :: fetched 7 new logs [09-07-2022 16:10:02]6296: WAF :: fetched 3 new logs [09-07-2022 16:11:01]9054: WAF :: fetched 4 new logs [09-07-2022 16:12:02]11685: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657393922 [09-07-2022 16:12:02]11685: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 16:12:04]11685: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 16:12:05]11685: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-1612/20220709-161202-YsnTAmDlr0xpuCYm3QyPtQAAACQ [09-07-2022 16:12:05]11685: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 16:12:07]11685: WAF :: fetched 25 new logs [09-07-2022 16:13:01]14166: WAF :: fetched 21 new logs [09-07-2022 16:14:01]16908: WAF :: fetched 4 new logs [09-07-2022 16:15:02]19638: WAF :: fetched 2 new logs [09-07-2022 16:16:01]22340: WAF :: fetched 3 new logs [09-07-2022 16:17:02]25058: WAF :: fetched 4 new logs [09-07-2022 16:18:01]27720: WAF :: fetched 5 new logs [09-07-2022 16:19:01]30337: WAF :: fetched 5 new logs [09-07-2022 16:20:02]588: WAF :: fetched 8 new logs [09-07-2022 16:21:02]3410: WAF :: fetched 6 new logs [09-07-2022 16:22:02]6012: WAF :: fetched 5 new logs [09-07-2022 16:23:01]8678: WAF :: fetched 13 new logs [09-07-2022 16:24:01]11343: WAF :: fetched 35 new logs [09-07-2022 16:25:02]13981: WAF :: fetched 7 new logs [09-07-2022 16:26:01]16691: WAF :: fetched 11 new logs [09-07-2022 16:27:01]19492: WAF :: fetched 1 new logs [09-07-2022 16:28:01]22171: WAF :: fetched 3 new logs [09-07-2022 16:30:02]27592: WAF :: fetched 16 new logs [09-07-2022 16:31:01]30407: WAF :: fetched 1 new logs [09-07-2022 16:35:02]8962: WAF :: fetched 2 new logs [09-07-2022 16:36:01]11751: WAF :: fetched 3 new logs [09-07-2022 16:39:01]19968: WAF :: fetched 1 new logs [09-07-2022 16:40:02]22684: WAF :: fetched 1 new logs [09-07-2022 16:41:01]25468: Checking for user cron vulnerabilities [09-07-2022 16:44:01]973: Checking ditributed CMS bruteforce attacks [09-07-2022 16:49:02]14334: WAF :: fetched 3 new logs [09-07-2022 16:50:01]16964: WAF :: fetched 7 new logs [09-07-2022 16:52:01]22514: WAF :: fetched 2 new logs [09-07-2022 16:57:02]3462: WAF :: fetched 5 new logs [09-07-2022 16:58:01]6028: WAF :: fetched 1 new logs [09-07-2022 17:05:02]25052: WAF :: fetched 1 new logs [09-07-2022 17:09:02]3435: WAF :: fetched 1 new logs [09-07-2022 17:10:01]6085: WAF :: fetched 6 new logs [09-07-2022 17:12:02]11564: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657397522 [09-07-2022 17:12:02]11564: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 17:12:04]11564: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 17:12:05]11564: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-1712/20220709-171202-YsnhEii56zUaqJQ6X14EfQAAAAA [09-07-2022 17:12:05]11564: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 17:12:05]11564: WAF :: fetched 1 new logs [09-07-2022 17:14:01]16822: WAF :: fetched 2 new logs [09-07-2022 17:15:02]19531: WAF :: fetched 6 new logs [09-07-2022 17:16:01]22243: WAF :: fetched 7 new logs [09-07-2022 17:17:01]24906: WAF :: fetched 6 new logs [09-07-2022 17:18:01]27538: WAF :: fetched 8 new logs [09-07-2022 17:19:02]30197: WAF :: fetched 9 new logs [09-07-2022 17:20:01]353: WAF :: fetched 13 new logs [09-07-2022 17:21:02]3177: WAF :: fetched 2 new logs [09-07-2022 17:22:01]5775: WAF :: fetched 7 new logs [09-07-2022 17:23:02]8404: WAF :: fetched 10 new logs [09-07-2022 17:24:02]11009: WAF :: fetched 14 new logs [09-07-2022 17:25:01]13633: WAF :: fetched 7 new logs [09-07-2022 17:26:01]16360: WAF :: fetched 6 new logs [09-07-2022 17:27:02]19055: WAF :: fetched 9 new logs [09-07-2022 17:28:01]21675: WAF :: fetched 7 new logs [09-07-2022 17:29:02]24311: WAF :: fetched 3 new logs [09-07-2022 17:30:01]26940: WAF :: fetched 11 new logs [09-07-2022 17:31:01]29681: WAF :: fetched 6 new logs [09-07-2022 17:32:02]32331: WAF :: fetched 7 new logs [09-07-2022 17:33:01]2547: WAF :: fetched 7 new logs [09-07-2022 17:34:01]5212: WAF :: fetched 7 new logs [09-07-2022 17:35:02]7853: WAF :: fetched 8 new logs [09-07-2022 17:36:02]10566: WAF :: fetched 11 new logs [09-07-2022 17:37:01]12973: WAF :: fetched 3 new logs [09-07-2022 17:38:02]15780: WAF :: fetched 4 new logs [09-07-2022 17:39:01]18508: WAF :: fetched 4 new logs [09-07-2022 17:40:02]21174: WAF :: fetched 7 new logs [09-07-2022 17:41:02]23942: WAF :: fetched 9 new logs [09-07-2022 17:41:02]23942: Checking for user cron vulnerabilities [09-07-2022 17:42:01]26532: WAF :: fetched 4 new logs [09-07-2022 17:43:02]29149: WAF :: fetched 6 new logs [09-07-2022 17:44:01]31701: Checking ditributed CMS bruteforce attacks [09-07-2022 17:44:04]31701: WAF :: fetched 4 new logs [09-07-2022 17:45:02]1943: WAF :: fetched 11 new logs [09-07-2022 17:46:01]4728: WAF :: fetched 11 new logs [09-07-2022 17:47:02]7422: WAF :: fetched 8 new logs [09-07-2022 17:48:02]10039: WAF :: fetched 37 new logs [09-07-2022 17:49:01]12622: WAF :: fetched 12 new logs [09-07-2022 17:50:02]15316: WAF :: fetched 16 new logs [09-07-2022 17:51:02]18148: WAF :: fetched 8 new logs [09-07-2022 17:52:01]20783: WAF :: fetched 15 new logs [09-07-2022 17:53:01]23421: WAF :: fetched 14 new logs [09-07-2022 17:54:02]26036: WAF :: fetched 43 new logs [09-07-2022 17:55:01]28662: WAF :: fetched 92 new logs [09-07-2022 17:56:02]31397: WAF :: fetched 68 new logs [09-07-2022 17:57:01]1699: WAF :: fetched 44 new logs [09-07-2022 17:58:01]4319: WAF :: fetched 15 new logs [09-07-2022 17:59:02]6935: WAF :: fetched 12 new logs [09-07-2022 18:00:01]9257: WAF :: fetched 14 new logs [09-07-2022 18:01:01]12452: WAF :: fetched 9 new logs [09-07-2022 18:02:01]15128: WAF :: fetched 17 new logs [09-07-2022 18:03:01]17851: WAF :: fetched 16 new logs [09-07-2022 18:04:02]20622: WAF :: fetched 21 new logs [09-07-2022 18:05:01]23242: WAF :: fetched 22 new logs [09-07-2022 18:06:01]26042: WAF :: fetched 31 new logs [09-07-2022 18:07:03]28730: WAF :: fetched 23 new logs [09-07-2022 18:08:01]31353: WAF :: fetched 53 new logs [09-07-2022 18:09:02]1662: WAF :: fetched 16 new logs [09-07-2022 18:10:01]4285: WAF :: fetched 19 new logs [09-07-2022 18:11:01]7007: WAF :: fetched 18 new logs [09-07-2022 18:12:01]9604: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657401121 [09-07-2022 18:12:01]9604: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 18:12:03]9604: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 18:12:04]9604: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-1812/20220709-181201-YsnvIVPON0r4m2aPrZo-tQAAAAk [09-07-2022 18:12:04]9604: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 18:12:04]9604: WAF :: fetched 13 new logs [09-07-2022 18:13:01]12202: WAF :: fetched 10 new logs [09-07-2022 18:14:01]14821: WAF :: fetched 15 new logs [09-07-2022 18:15:02]17431: WAF :: fetched 21 new logs [09-07-2022 18:16:01]20284: WAF :: fetched 17 new logs [09-07-2022 18:17:02]22922: WAF :: fetched 69 new logs [09-07-2022 18:18:01]25512: WAF :: fetched 81 new logs [09-07-2022 18:19:01]28158: WAF :: fetched 13 new logs [09-07-2022 18:20:02]30829: WAF :: fetched 10 new logs [09-07-2022 18:21:01]1139: WAF :: fetched 20 new logs [09-07-2022 18:22:01]3818: WAF :: fetched 156 new logs [09-07-2022 18:23:02]6448: WAF :: fetched 93 new logs [09-07-2022 18:24:02]9018: WAF :: fetched 76 new logs [09-07-2022 18:25:02]11737: WAF :: fetched 65 new logs [09-07-2022 18:26:01]14503: WAF :: fetched 79 new logs [09-07-2022 18:27:02]17176: WAF :: fetched 82 new logs [09-07-2022 18:28:01]19884: WAF :: fetched 60 new logs [09-07-2022 18:29:02]22580: WAF :: fetched 33 new logs [09-07-2022 18:30:02]25182: WAF :: fetched 14 new logs [09-07-2022 18:32:02]30631: WAF :: fetched 21 new logs [09-07-2022 18:33:03]855: WAF :: fetched 50 new logs [09-07-2022 18:34:02]3528: WAF :: fetched 42 new logs [09-07-2022 18:35:01]6119: WAF :: fetched 46 new logs [09-07-2022 18:36:02]8934: WAF :: fetched 103 new logs [09-07-2022 18:37:01]11571: WAF :: fetched 135 new logs [09-07-2022 18:38:01]14186: WAF :: fetched 59 new logs [09-07-2022 18:39:02]16812: WAF :: fetched 66 new logs [09-07-2022 18:40:01]19504: WAF :: fetched 57 new logs [09-07-2022 18:41:01]22293: WAF :: fetched 58 new logs [09-07-2022 18:41:01]22293: Checking for user cron vulnerabilities [09-07-2022 18:42:01]24959: WAF :: fetched 73 new logs [09-07-2022 18:43:01]27526: WAF :: fetched 166 new logs [09-07-2022 18:44:01]30165: Checking ditributed CMS bruteforce attacks [09-07-2022 18:44:02]30165: WAF :: fetched 154 new logs [09-07-2022 18:45:01]316: WAF :: fetched 156 new logs [09-07-2022 18:46:02]3148: WAF :: fetched 211 new logs [09-07-2022 18:47:01]5766: WAF :: fetched 117 new logs [09-07-2022 18:48:01]8409: WAF :: fetched 54 new logs [09-07-2022 18:49:02]11074: WAF :: fetched 103 new logs [09-07-2022 18:50:03]13694: WAF :: fetched 88 new logs [09-07-2022 18:51:02]16449: WAF :: fetched 109 new logs [09-07-2022 18:52:01]19149: WAF :: fetched 33 new logs [09-07-2022 18:53:01]21786: WAF :: fetched 36 new logs [09-07-2022 18:54:01]24436: WAF :: fetched 51 new logs [09-07-2022 18:56:02]29763: WAF :: fetched 9 new logs [09-07-2022 18:57:01]32367: WAF :: fetched 19 new logs [09-07-2022 18:58:01]2616: WAF :: fetched 102 new logs [09-07-2022 18:59:01]5250: WAF :: fetched 38 new logs [09-07-2022 19:00:02]7623: WAF :: fetched 59 new logs [09-07-2022 19:01:02]10848: WAF :: fetched 46 new logs [09-07-2022 19:02:02]13505: WAF :: fetched 45 new logs [09-07-2022 19:03:01]16089: WAF :: fetched 48 new logs [09-07-2022 19:04:01]18836: WAF :: fetched 58 new logs [09-07-2022 19:05:01]21415: WAF :: fetched 163 new logs [09-07-2022 19:06:01]24155: WAF :: fetched 52 new logs [09-07-2022 19:07:01]26751: WAF :: fetched 192 new logs [09-07-2022 19:08:03]29326: WAF :: fetched 103 new logs [09-07-2022 19:09:02]31902: WAF :: fetched 8 new logs [09-07-2022 19:10:02]2119: WAF :: fetched 9 new logs [09-07-2022 19:11:01]4772: WAF :: fetched 4 new logs [09-07-2022 19:12:01]7476: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657404721 [09-07-2022 19:12:03]7476: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 19:12:05]7476: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 19:12:05]7476: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-1912/20220709-191203-Ysn9M2sZmUUqSw6nP9gSNgAAABg [09-07-2022 19:12:05]7476: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 19:12:06]7476: WAF :: fetched 5 new logs [09-07-2022 19:13:01]10094: WAF :: fetched 9 new logs [09-07-2022 19:14:02]12643: WAF :: fetched 12 new logs [09-07-2022 19:15:01]15251: WAF :: fetched 8 new logs [09-07-2022 19:16:02]18073: WAF :: fetched 7 new logs [09-07-2022 19:17:02]20681: WAF :: fetched 6 new logs [09-07-2022 19:18:01]23292: WAF :: fetched 4 new logs [09-07-2022 19:19:02]25902: WAF :: fetched 11 new logs [09-07-2022 19:20:01]28479: WAF :: fetched 5 new logs [09-07-2022 19:25:01]9172: WAF :: fetched 13 new logs [09-07-2022 19:26:02]11971: WAF :: fetched 7 new logs [09-07-2022 19:27:01]14566: WAF :: fetched 12 new logs [09-07-2022 19:28:01]17182: WAF :: fetched 10 new logs [09-07-2022 19:29:02]19882: WAF :: fetched 12 new logs [09-07-2022 19:30:02]22513: WAF :: fetched 12 new logs [09-07-2022 19:31:01]25227: WAF :: fetched 9 new logs [09-07-2022 19:32:01]27877: WAF :: fetched 10 new logs [09-07-2022 19:33:01]30457: WAF :: fetched 5 new logs [09-07-2022 19:34:01]619: WAF :: fetched 8 new logs [09-07-2022 19:35:02]3295: WAF :: fetched 8 new logs [09-07-2022 19:36:02]6022: WAF :: fetched 16 new logs [09-07-2022 19:37:01]8593: WAF :: fetched 5 new logs [09-07-2022 19:38:01]11228: WAF :: fetched 14 new logs [09-07-2022 19:39:01]13872: WAF :: fetched 12 new logs [09-07-2022 19:40:01]16523: WAF :: fetched 12 new logs [09-07-2022 19:41:02]19331: WAF :: fetched 8 new logs [09-07-2022 19:41:02]19331: Checking for user cron vulnerabilities [09-07-2022 19:42:02]22036: WAF :: fetched 9 new logs [09-07-2022 19:43:02]24582: WAF :: fetched 14 new logs [09-07-2022 19:44:01]27196: Checking ditributed CMS bruteforce attacks [09-07-2022 19:44:01]27196: WAF :: fetched 8 new logs [09-07-2022 19:45:01]: Checking for definition updates [09-07-2022 19:45:01]29804: WAF :: fetched 6 new logs [09-07-2022 19:46:01]32529: WAF :: fetched 5 new logs [09-07-2022 19:47:01]2708: WAF :: fetched 10 new logs [09-07-2022 19:48:02]5319: WAF :: fetched 8 new logs [09-07-2022 19:49:01]7914: WAF :: fetched 11 new logs [09-07-2022 19:50:02]10522: WAF :: fetched 16 new logs [09-07-2022 19:51:01]13246: WAF :: fetched 12 new logs [09-07-2022 19:52:02]15837: WAF :: fetched 16 new logs [09-07-2022 19:53:02]18579: WAF :: fetched 14 new logs [09-07-2022 19:54:01]21161: WAF :: fetched 3 new logs [09-07-2022 19:55:02]23802: WAF :: fetched 4 new logs [09-07-2022 19:56:01]26501: WAF :: fetched 11 new logs [09-07-2022 19:57:01]29110: WAF :: fetched 5 new logs [09-07-2022 19:58:02]31719: WAF :: fetched 15 new logs [09-07-2022 19:59:01]1887: WAF :: fetched 10 new logs [09-07-2022 20:00:02]4285: WAF :: fetched 11 new logs [09-07-2022 20:01:03]7517: WAF :: fetched 11 new logs [09-07-2022 20:02:01]10146: WAF :: fetched 10 new logs [09-07-2022 20:03:02]12780: WAF :: fetched 9 new logs [09-07-2022 20:04:01]15405: WAF :: fetched 9 new logs [09-07-2022 20:05:01]18077: WAF :: fetched 21 new logs [09-07-2022 20:06:01]20878: WAF :: fetched 21 new logs [09-07-2022 20:07:02]23484: WAF :: fetched 14 new logs [09-07-2022 20:08:02]26034: WAF :: fetched 16 new logs [09-07-2022 20:09:02]28632: WAF :: fetched 15 new logs [09-07-2022 20:10:02]31341: WAF :: fetched 14 new logs [09-07-2022 20:11:01]1657: WAF :: fetched 10 new logs [09-07-2022 20:12:01]4255: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657408321 [09-07-2022 20:12:01]4255: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 20:12:03]4255: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 20:12:03]4255: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-2012/20220709-201201-YsoLQQjYuHmY3Tuj1CII-AAAABg [09-07-2022 20:12:03]4255: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 20:12:03]4255: WAF :: fetched 4 new logs [09-07-2022 20:13:01]6863: WAF :: fetched 2 new logs [09-07-2022 20:14:01]9473: WAF :: fetched 2 new logs [09-07-2022 20:15:01]12073: WAF :: fetched 2 new logs [09-07-2022 20:18:01]20010: WAF :: fetched 5 new logs [09-07-2022 20:19:02]22759: WAF :: fetched 27 new logs [09-07-2022 20:20:01]25349: WAF :: fetched 1 new logs [09-07-2022 20:22:01]30693: WAF :: fetched 3 new logs [09-07-2022 20:23:01]874: WAF :: fetched 2 new logs [09-07-2022 20:26:01]8835: WAF :: fetched 89 new logs [09-07-2022 20:27:02]11465: WAF :: fetched 98 new logs [09-07-2022 20:28:02]14015: WAF :: fetched 1 new logs [09-07-2022 20:29:01]16622: WAF :: fetched 2 new logs [09-07-2022 20:30:02]19316: WAF :: fetched 6 new logs [09-07-2022 20:31:01]22002: WAF :: fetched 4 new logs [09-07-2022 20:32:01]24665: WAF :: fetched 1 new logs [09-07-2022 20:34:01]29886: WAF :: fetched 4 new logs [09-07-2022 20:35:02]32496: WAF :: fetched 4 new logs [09-07-2022 20:36:02]2796: WAF :: fetched 3 new logs [09-07-2022 20:37:01]5407: WAF :: fetched 3 new logs [09-07-2022 20:38:02]8064: WAF :: fetched 1 new logs [09-07-2022 20:41:02]16026: Checking for user cron vulnerabilities [09-07-2022 20:44:01]23947: Checking ditributed CMS bruteforce attacks [09-07-2022 20:44:01]23947: WAF :: fetched 1 new logs [09-07-2022 20:45:01]26529: WAF :: fetched 1 new logs [09-07-2022 20:46:02]29261: WAF :: fetched 3 new logs [09-07-2022 20:47:01]31843: WAF :: fetched 17 new logs [09-07-2022 20:51:01]9943: WAF :: fetched 6 new logs [09-07-2022 20:52:02]12622: WAF :: fetched 2 new logs [09-07-2022 20:56:02]23119: WAF :: fetched 1 new logs [09-07-2022 20:57:02]25833: WAF :: fetched 2 new logs [09-07-2022 20:58:01]28378: WAF :: fetched 1 new logs [09-07-2022 21:00:02]964: WAF :: fetched 1 new logs [09-07-2022 21:04:02]12066: WAF :: fetched 1 new logs [09-07-2022 21:05:02]14655: WAF :: fetched 1 new logs [09-07-2022 21:06:01]17308: WAF :: fetched 9 new logs [09-07-2022 21:07:01]20105: WAF :: fetched 8 new logs [09-07-2022 21:08:02]22734: WAF :: fetched 3 new logs [09-07-2022 21:09:02]25329: WAF :: fetched 3 new logs [09-07-2022 21:10:02]27908: WAF :: fetched 2 new logs [09-07-2022 21:12:02]859: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657411922 [09-07-2022 21:12:02]859: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 21:12:04]859: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 21:12:04]859: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-2112/20220709-211202-YsoZUl7dnGS-MCWDF8eSigAAACE [09-07-2022 21:12:04]859: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 21:12:04]859: WAF :: fetched 3 new logs [09-07-2022 21:13:01]3534: WAF :: fetched 2 new logs [09-07-2022 21:14:02]6134: WAF :: fetched 3 new logs [09-07-2022 21:15:01]8711: WAF :: fetched 3 new logs [09-07-2022 21:17:01]14064: WAF :: fetched 20 new logs [09-07-2022 21:18:02]16718: WAF :: fetched 6 new logs [09-07-2022 21:21:01]24654: WAF :: fetched 1 new logs [09-07-2022 21:24:02]32498: WAF :: fetched 3 new logs [09-07-2022 21:29:02]13255: WAF :: fetched 1 new logs [09-07-2022 21:34:01]26297: WAF :: fetched 1 new logs [09-07-2022 21:36:01]31725: WAF :: fetched 1 new logs [09-07-2022 21:39:02]7219: WAF :: fetched 1 new logs [09-07-2022 21:40:02]9854: WAF :: fetched 2 new logs [09-07-2022 21:41:01]12434: WAF :: fetched 2 new logs [09-07-2022 21:41:01]12434: Checking for user cron vulnerabilities [09-07-2022 21:42:01]15176: WAF :: fetched 2 new logs [09-07-2022 21:43:02]17845: WAF :: fetched 1 new logs [09-07-2022 21:44:01]20473: Checking ditributed CMS bruteforce attacks [09-07-2022 21:45:02]23091: WAF :: fetched 1 new logs [09-07-2022 21:46:01]25790: WAF :: fetched 3 new logs [09-07-2022 21:47:01]28468: WAF :: fetched 5 new logs [09-07-2022 21:48:02]31049: WAF :: fetched 1 new logs [09-07-2022 21:49:02]1269: WAF :: fetched 2 new logs [09-07-2022 21:50:02]3876: WAF :: fetched 1 new logs [09-07-2022 21:52:01]9200: WAF :: fetched 1 new logs [09-07-2022 21:54:01]14345: WAF :: fetched 1 new logs [09-07-2022 22:02:02]3272: WAF :: fetched 1 new logs [09-07-2022 22:05:02]11072: WAF :: fetched 1 new logs [09-07-2022 22:06:02]13741: WAF :: fetched 1 new logs [09-07-2022 22:07:08]16414: Performing Domain reputation checks [09-07-2022 22:08:01]19094: WAF :: fetched 1 new logs [09-07-2022 22:09:02]21720: WAF :: fetched 1 new logs [09-07-2022 22:12:02]29668: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657415522 [09-07-2022 22:12:02]29668: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 22:12:04]29668: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 22:12:04]29668: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-2212/20220709-221202-YsonYj_XHLemADwfiNMrzwAAAAk [09-07-2022 22:12:04]29668: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [09-07-2022 22:12:04]29668: WAF :: fetched 2 new logs [09-07-2022 22:13:01]32237: WAF :: fetched 1 new logs [09-07-2022 22:14:02]2474: WAF :: fetched 1 new logs [09-07-2022 22:15:02]5033: WAF :: fetched 1 new logs [09-07-2022 22:18:01]12895: WAF :: fetched 1 new logs [09-07-2022 22:20:02]18198: WAF :: fetched 18 new logs [09-07-2022 22:22:02]23558: WAF :: fetched 1 new logs [09-07-2022 22:23:02]26182: WAF :: fetched 19 new logs [09-07-2022 22:25:02]31397: WAF :: fetched 1 new logs [09-07-2022 22:29:02]9499: WAF :: fetched 4 new logs [09-07-2022 22:30:02]12061: WAF :: fetched 5 new logs [09-07-2022 22:31:01]14694: WAF :: fetched 2 new logs [09-07-2022 22:32:01]17378: WAF :: fetched 1 new logs [09-07-2022 22:33:02]20069: WAF :: fetched 3 new logs [09-07-2022 22:34:02]22683: WAF :: fetched 2 new logs [09-07-2022 22:35:02]25279: WAF :: fetched 2 new logs [09-07-2022 22:38:01]725: WAF :: fetched 3 new logs [09-07-2022 22:41:02]8590: WAF :: fetched 1 new logs [09-07-2022 22:41:02]8590: Checking for user cron vulnerabilities [09-07-2022 22:42:02]11238: WAF :: fetched 3 new logs [09-07-2022 22:43:01]13863: WAF :: fetched 2 new logs [09-07-2022 22:44:01]16449: Checking ditributed CMS bruteforce attacks [09-07-2022 22:44:01]16449: WAF :: fetched 4 new logs [09-07-2022 22:46:01]21764: WAF :: fetched 1 new logs [09-07-2022 22:47:02]24469: WAF :: fetched 1 new logs [09-07-2022 22:48:02]27073: WAF :: fetched 1 new logs [09-07-2022 22:49:02]29650: WAF :: fetched 1 new logs [09-07-2022 22:54:01]10408: WAF :: fetched 1 new logs [09-07-2022 22:55:01]13030: WAF :: fetched 2 new logs [09-07-2022 22:56:02]15644: WAF :: fetched 1 new logs [09-07-2022 22:59:01]23604: WAF :: fetched 1 new logs [09-07-2022 23:00:02]25948: WAF :: fetched 1 new logs [09-07-2022 23:01:01]28987: WAF :: fetched 7 new logs [09-07-2022 23:02:02]31721: WAF :: fetched 1 new logs [09-07-2022 23:03:01]1951: WAF :: fetched 3 new logs [09-07-2022 23:05:02]7105: WAF :: fetched 4 new logs [09-07-2022 23:06:01]9743: WAF :: fetched 2 new logs [09-07-2022 23:07:02]12446: WAF :: fetched 1 new logs [09-07-2022 23:07:55]12617: Performed RBL check for 23.111.136.34. [09-07-2022 23:09:01]17612: WAF :: fetched 1 new logs [09-07-2022 23:10:02]20353: WAF :: fetched 1 new logs [09-07-2022 23:12:02]25693: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657419122 [09-07-2022 23:12:02]25693: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-07-2022 23:12:04]25693: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-07-2022 23:12:04]25693: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220709/20220709-2312/20220709-231202-Yso1cvnMMnfdRf9o6lkXPgAAABo [09-07-2022 23:12:04]25693: WAF :: No suitable log file found. Using SQLite.. [09-07-2022 23:12:04]25693: WAF :: fetched 87 new logs [09-07-2022 23:13:01]28292: WAF :: fetched 1 new logs [09-07-2022 23:14:02]30873: WAF :: fetched 1 new logs [09-07-2022 23:17:01]6430: WAF :: fetched 1 new logs [09-07-2022 23:20:01]14244: WAF :: fetched 1 new logs [09-07-2022 23:21:01]16894: WAF :: fetched 4 new logs [09-07-2022 23:22:02]19646: WAF :: fetched 2 new logs [09-07-2022 23:23:01]22264: WAF :: fetched 1 new logs [09-07-2022 23:24:02]24887: WAF :: fetched 5 new logs [09-07-2022 23:25:01]27467: WAF :: fetched 2 new logs [09-07-2022 23:26:01]30107: WAF :: fetched 4 new logs [09-07-2022 23:32:01]13556: WAF :: fetched 2 new logs [09-07-2022 23:35:02]21468: WAF :: fetched 1 new logs [09-07-2022 23:36:01]24130: WAF :: fetched 1 new logs [09-07-2022 23:37:02]26841: WAF :: fetched 3 new logs [09-07-2022 23:38:01]29462: WAF :: fetched 1 new logs [09-07-2022 23:39:01]32047: WAF :: fetched 1 new logs [09-07-2022 23:40:02]2307: WAF :: fetched 3 new logs [09-07-2022 23:41:01]4912: WAF :: fetched 4 new logs [09-07-2022 23:41:01]4912: Checking for user cron vulnerabilities [09-07-2022 23:42:01]7602: WAF :: fetched 1 new logs [09-07-2022 23:44:01]12795: Checking ditributed CMS bruteforce attacks [09-07-2022 23:44:01]12795: WAF :: fetched 2 new logs [09-07-2022 23:45:02]15405: WAF :: fetched 4 new logs [09-07-2022 23:46:01]18068: WAF :: fetched 1 new logs [09-07-2022 23:47:02]20836: WAF :: fetched 2 new logs [09-07-2022 23:48:04]23405: WAF :: fetched 7 new logs [09-07-2022 23:53:02]4417: WAF :: fetched 1 new logs [09-07-2022 23:54:02]7072: httpd.conf changed. Refreshing watchlist. [09-07-2022 23:57:02]15630: httpd.conf changed. Refreshing watchlist. [10-07-2022 00:01:04]26642: Sending daily report for July 10, 2022 [10-07-2022 00:03:02]32497: WAF :: fetched 1 new logs [10-07-2022 00:05:01]5657: WAF :: fetched 1 new logs [10-07-2022 00:05:01]5657: Deleted 0 entries older than 6 MONTH from scanner_logs [10-07-2022 00:05:01]5657: Deleted 0 files from Quarantine [10-07-2022 00:07:01]11055: WAF :: fetched 1 new logs [10-07-2022 00:08:01]13683: WAF :: fetched 3 new logs [10-07-2022 00:11:01]21888: WAF :: fetched 2 new logs [10-07-2022 00:12:02]24696: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657422722 [10-07-2022 00:12:02]24696: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 00:12:04]24696: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 00:12:06]24696: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-0012/20220710-001202-YspDgp3SHpXq1xbA68ssFgAAAA4 [10-07-2022 00:12:06]24696: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 00:12:06]24696: WAF :: fetched 2 new logs [10-07-2022 00:13:01]27346: WAF :: fetched 3 new logs [10-07-2022 00:14:01]30131: WAF :: fetched 4 new logs [10-07-2022 00:19:01]11227: WAF :: fetched 2 new logs [10-07-2022 00:21:01]16640: WAF :: fetched 2 new logs [10-07-2022 00:22:02]19450: WAF :: fetched 4 new logs [10-07-2022 00:24:01]24762: WAF :: fetched 14 new logs [10-07-2022 00:25:02]27418: WAF :: fetched 1 new logs [10-07-2022 00:26:02]30123: WAF :: fetched 3 new logs [10-07-2022 00:30:01]8511: WAF :: fetched 1 new logs [10-07-2022 00:31:01]11317: WAF :: fetched 1 new logs [10-07-2022 00:32:02]14199: WAF :: fetched 3 new logs [10-07-2022 00:33:01]16924: WAF :: fetched 2 new logs [10-07-2022 00:35:02]22311: WAF :: fetched 2 new logs [10-07-2022 00:37:01]27618: WAF :: fetched 2 new logs [10-07-2022 00:40:01]3037: WAF :: fetched 2 new logs [10-07-2022 00:41:02]5724: WAF :: fetched 1 new logs [10-07-2022 00:41:02]5724: Checking for user cron vulnerabilities [10-07-2022 00:42:02]8543: WAF :: fetched 4 new logs [10-07-2022 00:43:02]11199: WAF :: fetched 2 new logs [10-07-2022 00:44:01]14077: Checking ditributed CMS bruteforce attacks [10-07-2022 00:44:01]14077: WAF :: fetched 1 new logs [10-07-2022 00:45:02]: Checking for software updates [10-07-2022 00:48:02]24953: WAF :: fetched 1 new logs [10-07-2022 00:49:01]27647: WAF :: fetched 1 new logs [10-07-2022 00:58:01]19857: WAF :: fetched 1 new logs [10-07-2022 00:59:02]22515: WAF :: fetched 1 new logs [10-07-2022 01:00:01]24823: WAF :: fetched 1 new logs [10-07-2022 01:01:01]28545: WAF :: fetched 2 new logs [10-07-2022 01:02:01]31386: WAF :: fetched 2 new logs [10-07-2022 01:03:01]1782: WAF :: fetched 4 new logs [10-07-2022 01:04:01]4409: WAF :: fetched 3 new logs [10-07-2022 01:05:02]7348: WAF :: fetched 2 new logs [10-07-2022 01:06:01]10285: WAF :: fetched 3 new logs [10-07-2022 01:07:02]13003: WAF :: fetched 1 new logs [10-07-2022 01:08:01]15835: WAF :: fetched 3 new logs [10-07-2022 01:09:02]18751: WAF :: fetched 3 new logs [10-07-2022 01:10:01]21514: WAF :: fetched 5 new logs [10-07-2022 01:11:01]24489: WAF :: fetched 3 new logs [10-07-2022 01:12:02]27199: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657426322 [10-07-2022 01:12:02]27199: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 01:12:04]27199: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 01:12:06]27199: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-0112/20220710-011202-YspRklmGhLWkdS25V_umcgAAABg [10-07-2022 01:12:06]27199: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 01:12:06]27199: WAF :: fetched 3 new logs [10-07-2022 01:13:01]29982: WAF :: fetched 3 new logs [10-07-2022 01:16:01]5571: WAF :: fetched 1 new logs [10-07-2022 01:17:02]8269: WAF :: fetched 1 new logs [10-07-2022 01:23:01]24556: WAF :: fetched 2 new logs [10-07-2022 01:26:02]32463: WAF :: fetched 1 new logs [10-07-2022 01:27:01]2747: WAF :: fetched 1 new logs [10-07-2022 01:31:01]13456: WAF :: fetched 1 new logs [10-07-2022 01:34:01]21836: WAF :: fetched 2 new logs [10-07-2022 01:36:01]27133: WAF :: fetched 1 new logs [10-07-2022 01:38:02]32562: WAF :: fetched 1 new logs [10-07-2022 01:40:02]5745: WAF :: fetched 1 new logs [10-07-2022 01:41:01]8671: Checking for user cron vulnerabilities [10-07-2022 01:43:02]14220: WAF :: fetched 2 new logs [10-07-2022 01:44:01]16959: Checking ditributed CMS bruteforce attacks [10-07-2022 01:45:01]: Checking for definition updates [10-07-2022 01:45:01]19650: WAF :: fetched 1 new logs [10-07-2022 01:47:01]24930: WAF :: fetched 2 new logs [10-07-2022 01:49:01]30177: WAF :: fetched 4 new logs [10-07-2022 01:51:02]3128: WAF :: fetched 1 new logs [10-07-2022 01:53:02]8590: WAF :: fetched 72 new logs [10-07-2022 01:54:02]11398: WAF :: fetched 92 new logs [10-07-2022 01:55:01]14051: WAF :: fetched 98 new logs [10-07-2022 01:56:04]17029: WAF :: fetched 86 new logs [10-07-2022 01:57:02]19832: WAF :: fetched 78 new logs [10-07-2022 01:58:01]22607: WAF :: fetched 84 new logs [10-07-2022 01:59:02]25308: WAF :: fetched 42 new logs [10-07-2022 02:01:01]30984: WAF :: fetched 1 new logs [10-07-2022 02:02:02]1270: WAF :: fetched 1 new logs [10-07-2022 02:03:01]4014: WAF :: fetched 11 new logs [10-07-2022 02:04:01]6854: WAF :: fetched 7 new logs [10-07-2022 02:06:01]12779: WAF :: fetched 1 new logs [10-07-2022 02:11:01]26172: WAF :: fetched 3 new logs [10-07-2022 02:12:01]28766: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657429921 [10-07-2022 02:12:01]28766: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 02:12:03]28766: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 02:12:05]28766: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-0212/20220710-021201-YspfoUbnmKZQEl5ylFe78QAAAAQ [10-07-2022 02:12:05]28766: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [10-07-2022 02:12:05]28766: WAF :: fetched 1 new logs [10-07-2022 02:18:02]12947: WAF :: fetched 3 new logs [10-07-2022 02:19:01]15592: WAF :: fetched 1 new logs [10-07-2022 02:21:02]21220: WAF :: fetched 19 new logs [10-07-2022 02:22:02]23777: WAF :: fetched 2 new logs [10-07-2022 02:23:01]26490: WAF :: fetched 1 new logs [10-07-2022 02:26:01]2315: WAF :: fetched 1 new logs [10-07-2022 02:28:01]7616: WAF :: fetched 3 new logs [10-07-2022 02:29:02]10280: WAF :: fetched 1 new logs [10-07-2022 02:30:02]12855: WAF :: fetched 1 new logs [10-07-2022 02:31:03]15526: WAF :: fetched 6 new logs [10-07-2022 02:34:02]24256: WAF :: fetched 2 new logs [10-07-2022 02:36:02]29615: WAF :: fetched 1 new logs [10-07-2022 02:37:02]32205: WAF :: fetched 4 new logs [10-07-2022 02:38:02]2479: WAF :: fetched 1 new logs [10-07-2022 02:39:01]5159: WAF :: fetched 1 new logs [10-07-2022 02:41:02]10514: Checking for user cron vulnerabilities [10-07-2022 02:44:01]19227: Checking ditributed CMS bruteforce attacks [10-07-2022 02:45:01]21952: WAF :: fetched 1 new logs [10-07-2022 02:50:02]3230: WAF :: fetched 18 new logs [10-07-2022 02:51:02]5913: WAF :: fetched 2 new logs [10-07-2022 02:52:01]8520: WAF :: fetched 2 new logs [10-07-2022 02:53:02]11228: Updated license status via CDN [10-07-2022 02:55:01]16539: WAF :: fetched 2 new logs [10-07-2022 03:00:01]29877: WAF :: fetched 1 new logs [10-07-2022 03:01:58]29877: Found and updated 32 CMS installations [10-07-2022 03:02:02]3519: WAF :: fetched 19 new logs [10-07-2022 03:02:37]29877: Wordpress installation #9 oabilheus.org.br has errors [10-07-2022 03:03:01]29877: Wordpress installation #10 oticassaopaulo.com has errors [10-07-2022 03:03:01]6430: WAF :: fetched 1 new logs [10-07-2022 03:03:25]6467: Wordpress installation #9 oabilheus.org.br has errors [10-07-2022 03:03:36]29877: Wordpress installation #16 kecolima.com.br has errors [10-07-2022 03:04:00]29877: Wordpress installation #17 ajuda.meusiteimobiliario.com.br has errors [10-07-2022 03:04:01]9285: WAF :: fetched 2 new logs [10-07-2022 03:04:02]6467: Wordpress installation #17 ajuda.meusiteimobiliario.com.br has errors [10-07-2022 03:04:29]29877: Wordpress installation #21 easy2speak.com.br has errors [10-07-2022 03:04:29]6467: Wordpress installation #21 easy2speak.com.br has errors [10-07-2022 03:04:45]6467: Wordpress installation #23 blueseasurf.com.br has errors [10-07-2022 03:04:45]29877: Wordpress installation #23 blueseasurf.com.br has errors [10-07-2022 03:05:02]12131: WAF :: fetched 1 new logs [10-07-2022 03:05:15]29877: Wordpress installation #25 ltcertificadora.com.br has errors [10-07-2022 03:05:15]6467: Wordpress installation #25 ltcertificadora.com.br has errors [10-07-2022 03:05:36]6467: Wordpress installation #26 bibokinha.idcartao.com has errors [10-07-2022 03:05:36]29877: Wordpress installation #26 bibokinha.idcartao.com has errors [10-07-2022 03:06:02]14907: WAF :: fetched 2 new logs [10-07-2022 03:06:23]6467: Wordpress installation #33 bibokinha.com.br has errors [10-07-2022 03:06:23]29877: Wordpress installation #33 bibokinha.com.br has errors [10-07-2022 03:06:44]6467: Wordpress installation #34 fazendayrere.com.br has errors [10-07-2022 03:06:44]29877: Wordpress installation #34 fazendayrere.com.br has errors [10-07-2022 03:07:23]29877: Sending CMS version vulnerability report emails to cpanel users [10-07-2022 03:07:24]6467: Sending CMS version vulnerability report emails to cpanel users [10-07-2022 03:07:26]29877: Checking wordpress installations for suspicious directories [10-07-2022 03:07:27]6467: Checking wordpress installations for suspicious directories [10-07-2022 03:09:02]23530: WAF :: fetched 1 new logs [10-07-2022 03:11:01]28872: WAF :: fetched 2 new logs [10-07-2022 03:12:02]31848: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657433522 [10-07-2022 03:12:02]31848: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 03:12:04]31848: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 03:12:04]31848: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-0312/20220710-031202-YsptsuftDMsLv0eiTEG7bgAAAAA [10-07-2022 03:12:04]31848: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 03:12:04]31848: WAF :: fetched 103 new logs [10-07-2022 03:13:01]2179: WAF :: fetched 1 new logs [10-07-2022 03:17:02]23354: WAF :: fetched 1 new logs [10-07-2022 03:18:02]7560: WAF :: fetched 2 new logs [10-07-2022 03:20:01]22462: WAF :: fetched 1 new logs [10-07-2022 03:21:02]25164: WAF :: fetched 1 new logs [10-07-2022 03:22:01]27747: WAF :: fetched 1 new logs [10-07-2022 03:23:01]30437: WAF :: fetched 2 new logs [10-07-2022 03:26:02]5984: WAF :: fetched 3 new logs [10-07-2022 03:28:01]11430: WAF :: fetched 1 new logs [10-07-2022 03:29:02]14188: WAF :: fetched 2 new logs [10-07-2022 03:35:02]998: WAF :: fetched 1 new logs [10-07-2022 03:37:02]7366: WAF :: fetched 3 new logs [10-07-2022 03:41:01]18609: Checking for user cron vulnerabilities [10-07-2022 03:44:02]27057: Checking ditributed CMS bruteforce attacks [10-07-2022 03:48:01]6661: WAF :: fetched 3 new logs [10-07-2022 03:51:01]15317: WAF :: fetched 2 new logs [10-07-2022 03:54:01]23360: WAF :: fetched 1 new logs [10-07-2022 03:56:02]28617: WAF :: fetched 1 new logs [10-07-2022 04:01:01]9558: WAF :: fetched 4 new logs [10-07-2022 04:05:02]20209: WAF :: fetched 1 new logs [10-07-2022 04:06:02]22850: WAF :: fetched 2 new logs [10-07-2022 04:10:02]994: WAF :: fetched 1 new logs [10-07-2022 04:11:01]3643: WAF :: fetched 3 new logs [10-07-2022 04:12:03]6289: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657437123 [10-07-2022 04:12:03]6289: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 04:12:05]6289: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 04:12:07]6289: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-0412/20220710-041203-Ysp7w2i-Y0IfBsK91Fp7OwAAAAg [10-07-2022 04:12:07]6289: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 04:12:07]6289: WAF :: fetched 2 new logs [10-07-2022 04:13:01]9023: WAF :: fetched 1 new logs [10-07-2022 04:15:01]14242: WAF :: fetched 1 new logs [10-07-2022 04:17:01]19537: WAF :: fetched 1 new logs [10-07-2022 04:20:03]27412: WAF :: fetched 1 new logs [10-07-2022 04:25:01]8092: WAF :: fetched 1 new logs [10-07-2022 04:32:02]26533: WAF :: fetched 1 new logs [10-07-2022 04:33:01]29190: WAF :: fetched 2 new logs [10-07-2022 04:34:01]31776: WAF :: fetched 1 new logs [10-07-2022 04:35:01]1979: WAF :: fetched 1 new logs [10-07-2022 04:40:02]15037: WAF :: fetched 1 new logs [10-07-2022 04:41:02]17766: Checking for user cron vulnerabilities [10-07-2022 04:44:01]25702: Checking ditributed CMS bruteforce attacks [10-07-2022 04:44:01]25702: WAF :: fetched 1 new logs [10-07-2022 04:45:02]28290: WAF :: fetched 5 new logs [10-07-2022 04:48:01]3749: WAF :: fetched 1 new logs [10-07-2022 04:49:02]6346: WAF :: fetched 4 new logs [10-07-2022 04:50:02]9373: WAF :: fetched 1 new logs [10-07-2022 04:51:01]12505: WAF :: fetched 3 new logs [10-07-2022 04:52:01]15395: WAF :: fetched 1 new logs [10-07-2022 04:56:01]25988: WAF :: fetched 1 new logs [10-07-2022 05:01:01]6677: WAF :: fetched 2 new logs [10-07-2022 05:01:41]6678: Starting weekly scan on files updated within a week [10-07-2022 05:02:02]9393: WAF :: fetched 1 new logs [10-07-2022 05:03:03]12046: WAF :: fetched 2 new logs [10-07-2022 05:05:01]17363: WAF :: fetched 3 new logs [10-07-2022 05:06:02]20123: WAF :: fetched 2 new logs [10-07-2022 05:08:01]25379: WAF :: fetched 3 new logs [10-07-2022 05:10:02]30584: WAF :: fetched 2 new logs [10-07-2022 05:11:01]739: WAF :: fetched 3 new logs [10-07-2022 05:12:02]3378: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657440722 [10-07-2022 05:12:02]3378: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 05:12:04]3378: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 05:12:06]3378: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-0512/20220710-051202-YsqJ0jtEmr9QUmdBI2zt9QAAABE [10-07-2022 05:12:06]3378: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [10-07-2022 05:12:06]3378: WAF :: fetched 1 new logs [10-07-2022 05:13:02]6018: WAF :: fetched 5 new logs [10-07-2022 05:14:02]8598: WAF :: fetched 2 new logs [10-07-2022 05:15:01]11170: WAF :: fetched 1 new logs [10-07-2022 05:16:02]13854: WAF :: fetched 4 new logs [10-07-2022 05:17:02]16451: WAF :: fetched 1 new logs [10-07-2022 05:20:02]24563: WAF :: fetched 2 new logs [10-07-2022 05:22:01]30058: WAF :: fetched 1 new logs [10-07-2022 05:23:02]32738: WAF :: fetched 3 new logs [10-07-2022 05:25:02]5594: WAF :: fetched 2 new logs [10-07-2022 05:26:01]8321: WAF :: fetched 1 new logs [10-07-2022 05:27:02]10925: WAF :: fetched 9 new logs [10-07-2022 05:30:01]19188: WAF :: fetched 1 new logs [10-07-2022 05:31:01]22195: WAF :: fetched 1 new logs [10-07-2022 05:32:01]25045: WAF :: fetched 3 new logs [10-07-2022 05:33:03]27899: WAF :: fetched 1 new logs [10-07-2022 05:37:01]6062: WAF :: fetched 1 new logs [10-07-2022 05:38:02]8779: WAF :: fetched 2 new logs [10-07-2022 05:41:01]16608: WAF :: fetched 1 new logs [10-07-2022 05:41:01]16608: Checking for user cron vulnerabilities [10-07-2022 05:42:02]19300: WAF :: fetched 8 new logs [10-07-2022 05:43:02]21972: WAF :: fetched 3 new logs [10-07-2022 05:44:02]24575: Checking ditributed CMS bruteforce attacks [10-07-2022 05:47:02]32732: WAF :: fetched 4 new logs [10-07-2022 05:48:01]3257: WAF :: fetched 1 new logs [10-07-2022 05:49:02]5928: WAF :: fetched 1 new logs [10-07-2022 05:50:02]8484: WAF :: fetched 2 new logs [10-07-2022 05:51:02]11141: WAF :: fetched 1 new logs [10-07-2022 05:52:02]13740: WAF :: fetched 3 new logs [10-07-2022 05:54:02]19119: WAF :: fetched 1 new logs [10-07-2022 05:55:02]21714: WAF :: fetched 1 new logs [10-07-2022 05:58:02]29609: WAF :: fetched 2 new logs [10-07-2022 05:59:02]32247: WAF :: fetched 12 new logs [10-07-2022 06:00:01]2481: WAF :: fetched 75 new logs [10-07-2022 06:01:02]5727: WAF :: fetched 77 new logs [10-07-2022 06:02:02]8587: WAF :: fetched 372 new logs [10-07-2022 06:03:02]11303: WAF :: fetched 604 new logs [10-07-2022 06:04:02]14008: WAF :: fetched 828 new logs [10-07-2022 06:05:02]16763: WAF :: fetched 667 new logs [10-07-2022 06:06:02]19635: WAF :: fetched 286 new logs [10-07-2022 06:07:02]22439: WAF :: fetched 152 new logs [10-07-2022 06:08:01]25229: WAF :: fetched 100 new logs [10-07-2022 06:09:02]28145: WAF :: fetched 60 new logs [10-07-2022 06:10:02]30808: WAF :: fetched 70 new logs [10-07-2022 06:11:02]1172: WAF :: fetched 3 new logs [10-07-2022 06:12:02]3914: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657444322 [10-07-2022 06:12:02]3914: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 06:12:04]3914: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 06:12:04]3914: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-0612/20220710-061202-YsqX4vWqV7bwV2lNwmwggQAAAAQ [10-07-2022 06:12:04]3914: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 06:12:06]3914: WAF :: fetched 2784 new logs [10-07-2022 06:13:01]6639: WAF :: fetched 5 new logs [10-07-2022 06:14:02]9332: WAF :: fetched 6 new logs [10-07-2022 06:15:02]11943: WAF :: fetched 4 new logs [10-07-2022 06:16:02]14655: WAF :: fetched 3 new logs [10-07-2022 06:17:01]17213: WAF :: fetched 123 new logs [10-07-2022 06:18:02]20046: WAF :: fetched 167 new logs [10-07-2022 06:19:01]22670: WAF :: fetched 240 new logs [10-07-2022 06:20:02]25292: WAF :: fetched 483 new logs [10-07-2022 06:21:02]27964: WAF :: fetched 430 new logs [10-07-2022 06:22:01]30663: WAF :: fetched 388 new logs [10-07-2022 06:23:02]1004: WAF :: fetched 126 new logs [10-07-2022 06:24:02]3677: WAF :: fetched 9 new logs [10-07-2022 06:25:01]6324: WAF :: fetched 7 new logs [10-07-2022 06:26:01]9005: WAF :: fetched 6 new logs [10-07-2022 06:27:02]11747: WAF :: fetched 4 new logs [10-07-2022 06:28:01]14355: WAF :: fetched 5 new logs [10-07-2022 06:29:02]17034: WAF :: fetched 4 new logs [10-07-2022 06:30:01]19772: WAF :: fetched 3 new logs [10-07-2022 06:33:02]27692: WAF :: fetched 5 new logs [10-07-2022 06:34:01]30370: WAF :: fetched 2 new logs [10-07-2022 06:36:01]3252: WAF :: fetched 1 new logs [10-07-2022 06:37:02]5886: WAF :: fetched 1 new logs [10-07-2022 06:38:04]8452: WAF :: fetched 1 new logs [10-07-2022 06:40:01]13815: WAF :: fetched 1 new logs [10-07-2022 06:41:02]16494: Checking for user cron vulnerabilities [10-07-2022 06:42:01]19189: WAF :: fetched 1 new logs [10-07-2022 06:44:01]24535: Checking ditributed CMS bruteforce attacks [10-07-2022 06:44:10]24535: WAF :: fetched 1 new logs [10-07-2022 06:46:01]29798: WAF :: fetched 3 new logs [10-07-2022 06:47:02]32435: WAF :: fetched 1 new logs [10-07-2022 06:48:01]2634: WAF :: fetched 1 new logs [10-07-2022 06:50:01]7956: WAF :: fetched 2 new logs [10-07-2022 06:55:01]21396: WAF :: fetched 2 new logs [10-07-2022 06:59:01]31933: WAF :: fetched 2 new logs [10-07-2022 07:00:02]1906: WAF :: fetched 1 new logs [10-07-2022 07:01:01]5032: WAF :: fetched 2 new logs [10-07-2022 07:05:02]15657: WAF :: fetched 4 new logs [10-07-2022 07:06:01]18377: WAF :: fetched 1 new logs [10-07-2022 07:07:02]21074: WAF :: fetched 1 new logs [10-07-2022 07:10:03]29100: WAF :: fetched 1 new logs [10-07-2022 07:11:02]31833: WAF :: fetched 1 new logs [10-07-2022 07:12:01]2130: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657447921 [10-07-2022 07:12:01]2130: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 07:12:03]2130: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 07:12:05]2130: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-0712/20220710-071201-Ysql8dL4CibNXRcchJqHNAAAAAQ [10-07-2022 07:12:05]2130: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 07:12:05]2130: WAF :: fetched 1 new logs [10-07-2022 07:15:01]10129: WAF :: fetched 2 new logs [10-07-2022 07:17:02]15426: WAF :: fetched 2 new logs [10-07-2022 07:32:01]23292: WAF :: fetched 1 new logs [10-07-2022 07:34:01]28663: WAF :: fetched 1 new logs [10-07-2022 07:41:01]14882: Checking for user cron vulnerabilities [10-07-2022 07:44:01]22890: Checking ditributed CMS bruteforce attacks [10-07-2022 07:45:01]: Checking for definition updates [10-07-2022 07:45:02]25522: WAF :: fetched 2 new logs [10-07-2022 07:48:02]998: WAF :: fetched 1 new logs [10-07-2022 07:56:02]22478: WAF :: fetched 6 new logs [10-07-2022 07:59:02]30436: WAF :: fetched 6 new logs [10-07-2022 08:00:01]363: WAF :: fetched 1 new logs [10-07-2022 08:01:02]3595: WAF :: fetched 2 new logs [10-07-2022 08:02:01]6234: WAF :: fetched 2 new logs [10-07-2022 08:05:01]14178: WAF :: fetched 2 new logs [10-07-2022 08:08:03]22379: WAF :: fetched 2 new logs [10-07-2022 08:09:01]25071: WAF :: fetched 3 new logs [10-07-2022 08:10:02]27713: WAF :: fetched 2 new logs [10-07-2022 08:11:01]30289: WAF :: fetched 26 new logs [10-07-2022 08:12:02]616: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657451522 [10-07-2022 08:12:02]616: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 08:12:04]616: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 08:12:06]616: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-0812/20220710-081202-Ysq0At8vTKA-KXelWmBbHQAAABA [10-07-2022 08:12:06]616: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [10-07-2022 08:12:06]616: WAF :: fetched 1 new logs [10-07-2022 08:13:02]3293: WAF :: fetched 1 new logs [10-07-2022 08:17:02]13972: WAF :: fetched 1 new logs [10-07-2022 08:18:01]16586: WAF :: fetched 3 new logs [10-07-2022 08:20:02]22158: WAF :: fetched 8 new logs [10-07-2022 08:21:02]24895: WAF :: fetched 6 new logs [10-07-2022 08:22:01]27612: WAF :: fetched 3 new logs [10-07-2022 08:25:02]3250: WAF :: fetched 3 new logs [10-07-2022 08:28:01]11386: WAF :: fetched 2 new logs [10-07-2022 08:32:02]22079: WAF :: fetched 1 new logs [10-07-2022 08:33:02]24712: WAF :: fetched 9 new logs [10-07-2022 08:37:01]2790: WAF :: fetched 2 new logs [10-07-2022 08:39:02]8085: WAF :: fetched 1 new logs [10-07-2022 08:40:02]10709: WAF :: fetched 1 new logs [10-07-2022 08:41:01]13358: WAF :: fetched 2 new logs [10-07-2022 08:41:01]13358: Checking for user cron vulnerabilities [10-07-2022 08:44:01]21247: Checking ditributed CMS bruteforce attacks [10-07-2022 08:44:02]21247: WAF :: fetched 3 new logs [10-07-2022 08:45:02]23864: WAF :: fetched 1 new logs [10-07-2022 08:47:02]29047: WAF :: fetched 1 new logs [10-07-2022 08:48:02]31606: WAF :: fetched 1 new logs [10-07-2022 08:51:01]7105: WAF :: fetched 2 new logs [10-07-2022 08:53:02]12308: WAF :: fetched 2 new logs [10-07-2022 08:55:02]17634: WAF :: fetched 2 new logs [10-07-2022 08:58:06]25484: WAF :: fetched 1 new logs [10-07-2022 09:00:01]30500: WAF :: fetched 2 new logs [10-07-2022 09:04:02]9007: WAF :: fetched 1 new logs [10-07-2022 09:05:02]11582: WAF :: fetched 1 new logs [10-07-2022 09:06:01]14231: WAF :: fetched 2 new logs [10-07-2022 09:07:02]16821: WAF :: fetched 3 new logs [10-07-2022 09:08:01]19474: WAF :: fetched 1 new logs [10-07-2022 09:10:02]24800: WAF :: fetched 6 new logs [10-07-2022 09:12:02]29978: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657455122 [10-07-2022 09:12:02]29978: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 09:12:04]29978: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 09:12:04]29978: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-0912/20220710-091202-YsrCErI_o-grBUMemld7GQAAABE [10-07-2022 09:12:04]29978: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [10-07-2022 09:12:05]29978: WAF :: fetched 1 new logs [10-07-2022 09:13:01]32556: WAF :: fetched 2 new logs [10-07-2022 09:14:02]2836: WAF :: fetched 4 new logs [10-07-2022 09:15:04]5395: WAF :: fetched 1 new logs [10-07-2022 09:16:01]8015: WAF :: fetched 3 new logs [10-07-2022 09:18:02]13216: WAF :: fetched 4 new logs [10-07-2022 09:19:01]15897: WAF :: fetched 1 new logs [10-07-2022 09:20:02]18589: WAF :: fetched 2 new logs [10-07-2022 09:21:01]21231: WAF :: fetched 1 new logs [10-07-2022 09:24:01]28950: WAF :: fetched 3 new logs [10-07-2022 09:25:02]31603: WAF :: fetched 2 new logs [10-07-2022 09:26:01]1830: WAF :: fetched 2 new logs [10-07-2022 09:27:01]4430: WAF :: fetched 1 new logs [10-07-2022 09:30:02]12306: WAF :: fetched 1 new logs [10-07-2022 09:32:01]17588: WAF :: fetched 1 new logs [10-07-2022 09:33:02]20302: WAF :: fetched 3 new logs [10-07-2022 09:35:02]25663: WAF :: fetched 1 new logs [10-07-2022 09:37:02]30934: WAF :: fetched 1 new logs [10-07-2022 09:39:01]3813: WAF :: fetched 2 new logs [10-07-2022 09:41:02]9175: Checking for user cron vulnerabilities [10-07-2022 09:42:02]11787: WAF :: fetched 3 new logs [10-07-2022 09:44:02]17115: Checking ditributed CMS bruteforce attacks [10-07-2022 09:45:02]19783: WAF :: fetched 1 new logs [10-07-2022 09:51:04]3259: WAF :: fetched 4 new logs [10-07-2022 09:52:02]5875: WAF :: fetched 40 new logs [10-07-2022 09:53:02]8531: WAF :: fetched 1 new logs [10-07-2022 09:55:02]13941: WAF :: fetched 2 new logs [10-07-2022 09:56:01]16592: WAF :: fetched 2 new logs [10-07-2022 09:57:02]19304: WAF :: fetched 1 new logs [10-07-2022 10:02:01]32658: WAF :: fetched 4 new logs [10-07-2022 10:03:03]2931: WAF :: fetched 4 new logs [10-07-2022 10:05:03]8183: WAF :: fetched 1 new logs [10-07-2022 10:08:01]16064: WAF :: fetched 1 new logs [10-07-2022 10:09:02]18911: WAF :: fetched 2 new logs [10-07-2022 10:12:01]26750: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657458721 [10-07-2022 10:12:01]26750: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 10:12:03]26750: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 10:12:04]26750: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-1012/20220710-101201-YsrQIXIYdinPUV9yjspdEwAAAAs [10-07-2022 10:12:04]26750: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 10:12:04]26750: WAF :: fetched 136 new logs [10-07-2022 10:16:01]5032: WAF :: fetched 4 new logs [10-07-2022 10:17:02]7743: WAF :: fetched 57 new logs [10-07-2022 10:18:01]10402: WAF :: fetched 8 new logs [10-07-2022 10:19:01]13183: WAF :: fetched 3 new logs [10-07-2022 10:20:01]15798: WAF :: fetched 30 new logs [10-07-2022 10:21:02]18522: WAF :: fetched 2 new logs [10-07-2022 10:23:02]23733: WAF :: fetched 1 new logs [10-07-2022 10:24:01]26348: WAF :: fetched 3 new logs [10-07-2022 10:27:01]1802: WAF :: fetched 1 new logs [10-07-2022 10:28:01]4402: WAF :: fetched 5 new logs [10-07-2022 10:29:02]7087: WAF :: fetched 1 new logs [10-07-2022 10:30:01]9686: WAF :: fetched 2 new logs [10-07-2022 10:31:01]12356: WAF :: fetched 1 new logs [10-07-2022 10:32:02]15023: WAF :: fetched 18 new logs [10-07-2022 10:33:02]17592: WAF :: fetched 10 new logs [10-07-2022 10:38:01]30828: WAF :: fetched 1 new logs [10-07-2022 10:41:02]6344: Checking for user cron vulnerabilities [10-07-2022 10:42:02]8929: WAF :: fetched 1 new logs [10-07-2022 10:43:01]11552: WAF :: fetched 1 new logs [10-07-2022 10:44:01]14293: Checking ditributed CMS bruteforce attacks [10-07-2022 10:45:02]16919: WAF :: fetched 1 new logs [10-07-2022 10:46:01]19692: WAF :: fetched 2 new logs [10-07-2022 10:47:02]22407: WAF :: fetched 2 new logs [10-07-2022 10:48:01]25110: WAF :: fetched 1 new logs [10-07-2022 10:49:01]27884: WAF :: fetched 1 new logs [10-07-2022 10:50:01]30558: WAF :: fetched 1 new logs [10-07-2022 10:54:01]8938: WAF :: fetched 4 new logs [10-07-2022 10:55:01]11597: WAF :: fetched 4 new logs [10-07-2022 10:57:01]16973: WAF :: fetched 4 new logs [10-07-2022 10:58:02]19643: WAF :: fetched 1 new logs [10-07-2022 10:59:02]22450: WAF :: fetched 9 new logs [10-07-2022 11:00:02]24840: WAF :: fetched 5 new logs [10-07-2022 11:01:02]27972: WAF :: fetched 4 new logs [10-07-2022 11:02:01]30658: WAF :: fetched 1 new logs [10-07-2022 11:03:01]884: WAF :: fetched 2 new logs [10-07-2022 11:04:01]3578: WAF :: fetched 2 new logs [10-07-2022 11:08:22]11900: Performed RBL check for 23.111.136.34. [10-07-2022 11:12:02]25326: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657462322 [10-07-2022 11:12:02]25326: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 11:12:04]25326: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 11:12:06]25326: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-1112/20220710-111202-YsreMiq4oUAncTaq3Zxq2QAAAAI [10-07-2022 11:12:06]25326: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 11:12:06]25326: WAF :: fetched 2 new logs [10-07-2022 11:13:01]27906: WAF :: fetched 2 new logs [10-07-2022 11:15:03]953: WAF :: fetched 2 new logs [10-07-2022 11:16:01]3638: WAF :: fetched 4 new logs [10-07-2022 11:17:01]6272: WAF :: fetched 1 new logs [10-07-2022 11:18:02]8959: WAF :: fetched 2 new logs [10-07-2022 11:19:02]11573: WAF :: fetched 1 new logs [10-07-2022 11:20:01]14395: WAF :: fetched 2 new logs [10-07-2022 11:21:02]17154: WAF :: fetched 136 new logs [10-07-2022 11:22:02]19889: WAF :: fetched 192 new logs [10-07-2022 11:23:01]22614: WAF :: fetched 147 new logs [10-07-2022 11:24:03]25353: WAF :: fetched 3 new logs [10-07-2022 11:25:02]28108: WAF :: fetched 3 new logs [10-07-2022 11:26:01]30864: WAF :: fetched 1 new logs [10-07-2022 11:27:02]1197: WAF :: fetched 1 new logs [10-07-2022 11:28:01]3890: WAF :: fetched 3 new logs [10-07-2022 11:29:01]6605: WAF :: fetched 1 new logs [10-07-2022 11:30:01]9383: WAF :: fetched 4 new logs [10-07-2022 11:31:01]12188: WAF :: fetched 4 new logs [10-07-2022 11:32:02]15003: WAF :: fetched 2 new logs [10-07-2022 11:33:02]17662: WAF :: fetched 1 new logs [10-07-2022 11:35:01]23209: WAF :: fetched 1 new logs [10-07-2022 11:36:02]25946: WAF :: fetched 1 new logs [10-07-2022 11:37:01]28622: WAF :: fetched 3 new logs [10-07-2022 11:41:02]7111: WAF :: fetched 1 new logs [10-07-2022 11:41:02]7111: Checking for user cron vulnerabilities [10-07-2022 11:42:01]9784: WAF :: fetched 2 new logs [10-07-2022 11:43:02]12489: WAF :: fetched 1 new logs [10-07-2022 11:44:01]15193: Checking ditributed CMS bruteforce attacks [10-07-2022 11:44:05]15193: WAF :: fetched 1 new logs [10-07-2022 11:45:02]18051: WAF :: fetched 2 new logs [10-07-2022 11:46:01]20838: WAF :: fetched 1 new logs [10-07-2022 11:47:02]23560: WAF :: fetched 2 new logs [10-07-2022 11:48:01]26242: WAF :: fetched 3 new logs [10-07-2022 11:49:03]28915: WAF :: fetched 2 new logs [10-07-2022 11:51:02]1919: WAF :: fetched 1 new logs [10-07-2022 11:52:01]4512: WAF :: fetched 1 new logs [10-07-2022 11:53:02]7118: WAF :: fetched 31 new logs [10-07-2022 11:54:01]9703: WAF :: fetched 36 new logs [10-07-2022 11:55:02]12459: WAF :: fetched 35 new logs [10-07-2022 11:56:01]15123: WAF :: fetched 35 new logs [10-07-2022 11:57:03]17723: WAF :: fetched 34 new logs [10-07-2022 11:58:01]20287: WAF :: fetched 31 new logs [10-07-2022 11:59:02]23017: WAF :: fetched 3 new logs [10-07-2022 12:03:02]1608: WAF :: fetched 1 new logs [10-07-2022 12:05:01]7421: WAF :: fetched 4 new logs [10-07-2022 12:06:02]10175: WAF :: fetched 2 new logs [10-07-2022 12:07:01]12778: WAF :: fetched 2 new logs [10-07-2022 12:08:02]15442: WAF :: fetched 24 new logs [10-07-2022 12:09:01]18093: WAF :: fetched 37 new logs [10-07-2022 12:10:02]20819: WAF :: fetched 28 new logs [10-07-2022 12:11:01]23487: WAF :: fetched 26 new logs [10-07-2022 12:12:02]26133: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657465922 [10-07-2022 12:12:02]26133: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 12:12:04]26133: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 12:12:05]26133: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-1212/20220710-121202-YsrsQmMS1ifnjbnfCIAegAAAACI [10-07-2022 12:12:05]26133: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 12:12:06]26133: WAF :: fetched 33 new logs [10-07-2022 12:13:01]28759: WAF :: fetched 29 new logs [10-07-2022 12:14:02]31389: WAF :: fetched 17 new logs [10-07-2022 12:15:01]1675: WAF :: fetched 3 new logs [10-07-2022 12:16:01]4374: WAF :: fetched 1 new logs [10-07-2022 12:17:01]7074: WAF :: fetched 1 new logs [10-07-2022 12:20:01]15105: WAF :: fetched 2 new logs [10-07-2022 12:22:01]20521: WAF :: fetched 1 new logs [10-07-2022 12:23:01]23231: WAF :: fetched 2 new logs [10-07-2022 12:24:02]25853: WAF :: fetched 3 new logs [10-07-2022 12:26:02]31340: WAF :: fetched 2 new logs [10-07-2022 12:28:02]4278: WAF :: fetched 4 new logs [10-07-2022 12:29:01]6891: WAF :: fetched 1 new logs [10-07-2022 12:31:01]12338: WAF :: fetched 5 new logs [10-07-2022 12:33:01]17519: WAF :: fetched 1 new logs [10-07-2022 12:34:02]20297: WAF :: fetched 1 new logs [10-07-2022 12:35:02]22988: WAF :: fetched 1 new logs [10-07-2022 12:40:02]3733: WAF :: fetched 11 new logs [10-07-2022 12:41:01]6377: WAF :: fetched 55 new logs [10-07-2022 12:41:01]6377: Checking for user cron vulnerabilities [10-07-2022 12:42:01]8974: WAF :: fetched 64 new logs [10-07-2022 12:43:02]11595: WAF :: fetched 52 new logs [10-07-2022 12:44:02]14489: Checking ditributed CMS bruteforce attacks [10-07-2022 12:44:05]14489: WAF :: fetched 1 new logs [10-07-2022 12:45:01]: Checking for software updates [10-07-2022 12:45:02]17573: WAF :: fetched 1 new logs [10-07-2022 12:47:02]23085: WAF :: fetched 3 new logs [10-07-2022 12:50:02]31024: WAF :: fetched 1 new logs [10-07-2022 12:53:03]6470: WAF :: fetched 2 new logs [10-07-2022 12:58:01]19718: WAF :: fetched 1 new logs [10-07-2022 13:00:02]24824: WAF :: fetched 2 new logs [10-07-2022 13:01:01]27936: WAF :: fetched 3 new logs [10-07-2022 13:02:01]30549: WAF :: fetched 2 new logs [10-07-2022 13:04:02]3317: WAF :: fetched 2 new logs [10-07-2022 13:05:01]6071: WAF :: fetched 2 new logs [10-07-2022 13:08:02]13894: WAF :: fetched 1 new logs [10-07-2022 13:09:01]16537: WAF :: fetched 1 new logs [10-07-2022 13:11:02]22145: WAF :: fetched 1 new logs [10-07-2022 13:12:01]24680: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657469521 [10-07-2022 13:12:01]24680: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 13:12:03]24680: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 13:12:05]24680: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-1312/20220710-131201-Ysr6UU83QMlrjk0uP2hE3wAAAAc [10-07-2022 13:12:05]24680: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 13:12:05]24680: WAF :: fetched 1 new logs [10-07-2022 13:14:02]29980: WAF :: fetched 1 new logs [10-07-2022 13:15:02]32679: WAF :: fetched 1 new logs [10-07-2022 13:16:01]2923: WAF :: fetched 3 new logs [10-07-2022 13:17:02]5579: WAF :: fetched 3 new logs [10-07-2022 13:18:02]8171: WAF :: fetched 3 new logs [10-07-2022 13:19:01]10768: WAF :: fetched 3 new logs [10-07-2022 13:20:02]13490: WAF :: fetched 1 new logs [10-07-2022 13:22:02]18902: WAF :: fetched 1 new logs [10-07-2022 13:23:01]21555: WAF :: fetched 1 new logs [10-07-2022 13:24:02]24182: WAF :: fetched 2 new logs [10-07-2022 13:25:01]26945: WAF :: fetched 2 new logs [10-07-2022 13:26:03]29631: WAF :: fetched 1 new logs [10-07-2022 13:27:01]32280: WAF :: fetched 1 new logs [10-07-2022 13:28:02]2496: WAF :: fetched 2 new logs [10-07-2022 13:31:01]10569: WAF :: fetched 1 new logs [10-07-2022 13:32:01]13222: WAF :: fetched 2 new logs [10-07-2022 13:41:02]4887: Checking for user cron vulnerabilities [10-07-2022 13:43:01]10100: WAF :: fetched 3 new logs [10-07-2022 13:44:01]12751: Checking ditributed CMS bruteforce attacks [10-07-2022 13:44:06]12751: WAF :: fetched 1 new logs [10-07-2022 13:45:01]: Checking for definition updates [10-07-2022 13:45:01]15478: WAF :: fetched 2 new logs [10-07-2022 13:46:01]18209: WAF :: fetched 1 new logs [10-07-2022 13:47:02]20921: WAF :: fetched 1 new logs [10-07-2022 13:48:02]23530: WAF :: fetched 2 new logs [10-07-2022 13:49:01]26165: WAF :: fetched 4 new logs [10-07-2022 13:50:01]28880: WAF :: fetched 2 new logs [10-07-2022 13:54:01]6976: WAF :: fetched 1 new logs [10-07-2022 13:55:01]9695: WAF :: fetched 13 new logs [10-07-2022 13:59:01]20283: WAF :: fetched 2 new logs [10-07-2022 14:01:02]25790: WAF :: fetched 1 new logs [10-07-2022 14:03:02]31059: WAF :: fetched 1 new logs [10-07-2022 14:04:01]1278: WAF :: fetched 1 new logs [10-07-2022 14:05:01]3991: WAF :: fetched 1 new logs [10-07-2022 14:07:02]9330: WAF :: fetched 1 new logs [10-07-2022 14:10:01]17317: WAF :: fetched 3 new logs [10-07-2022 14:11:02]20211: WAF :: fetched 1 new logs [10-07-2022 14:11:02]20225: httpd.conf changed. Refreshing watchlist. [10-07-2022 14:12:01]22842: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657473121 [10-07-2022 14:12:01]22842: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 14:12:03]22842: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 14:12:05]22842: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-1412/20220710-141201-YssIYc_SbHCt5w4SZI0rxAAAABg [10-07-2022 14:12:05]22842: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 14:14:01]28067: WAF :: fetched 1 new logs [10-07-2022 14:15:02]30818: WAF :: fetched 11 new logs [10-07-2022 14:16:02]1141: WAF :: fetched 126 new logs [10-07-2022 14:17:01]3787: WAF :: fetched 3 new logs [10-07-2022 14:17:02]3781: httpd.conf changed. Refreshing watchlist. [10-07-2022 14:22:01]17125: WAF :: fetched 1 new logs [10-07-2022 14:23:01]19918: WAF :: fetched 2 new logs [10-07-2022 14:25:01]25231: WAF :: fetched 3 new logs [10-07-2022 14:26:01]27879: WAF :: fetched 7 new logs [10-07-2022 14:27:02]30513: WAF :: fetched 3 new logs [10-07-2022 14:28:01]681: WAF :: fetched 7 new logs [10-07-2022 14:29:02]3337: WAF :: fetched 1 new logs [10-07-2022 14:30:02]6049: WAF :: fetched 4 new logs [10-07-2022 14:35:01]19452: WAF :: fetched 1 new logs [10-07-2022 14:37:02]24881: WAF :: fetched 1 new logs [10-07-2022 14:38:01]27521: WAF :: fetched 1 new logs [10-07-2022 14:39:01]30129: WAF :: fetched 2 new logs [10-07-2022 14:40:01]460: WAF :: fetched 4 new logs [10-07-2022 14:41:02]3188: WAF :: fetched 3 new logs [10-07-2022 14:41:02]3188: Checking for user cron vulnerabilities [10-07-2022 14:42:01]5874: WAF :: fetched 1 new logs [10-07-2022 14:44:02]11102: Checking ditributed CMS bruteforce attacks [10-07-2022 14:44:02]11102: WAF :: fetched 5 new logs [10-07-2022 14:45:01]13832: WAF :: fetched 3 new logs [10-07-2022 14:46:02]16537: WAF :: fetched 1 new logs [10-07-2022 14:48:01]21919: WAF :: fetched 2 new logs [10-07-2022 14:49:01]24513: WAF :: fetched 1 new logs [10-07-2022 14:50:01]27225: WAF :: fetched 2 new logs [10-07-2022 14:51:02]29960: WAF :: fetched 5 new logs [10-07-2022 14:52:01]32501: WAF :: fetched 9 new logs [10-07-2022 14:53:01]2724: WAF :: fetched 1 new logs [10-07-2022 14:53:02]2727: Updated license status via CDN [10-07-2022 14:54:01]5358: WAF :: fetched 1 new logs [10-07-2022 14:58:01]15905: WAF :: fetched 1 new logs [10-07-2022 14:59:02]18621: WAF :: fetched 1 new logs [10-07-2022 15:00:01]21084: WAF :: fetched 4 new logs [10-07-2022 15:01:02]24199: Reseting cPGuard inotify settings [10-07-2022 15:03:01]29426: WAF :: fetched 2 new logs [10-07-2022 15:04:01]32082: WAF :: fetched 1 new logs [10-07-2022 15:05:02]2407: WAF :: fetched 1 new logs [10-07-2022 15:07:02]7656: WAF :: fetched 1 new logs [10-07-2022 15:08:01]10248: WAF :: fetched 1 new logs [10-07-2022 15:09:01]12875: WAF :: fetched 3 new logs [10-07-2022 15:10:02]15597: WAF :: fetched 1 new logs [10-07-2022 15:11:01]17917: WAF :: fetched 7 new logs [10-07-2022 15:12:01]21002: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657476721 [10-07-2022 15:12:01]21002: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 15:12:03]21002: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 15:12:05]21002: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-1512/20220710-151201-YssWcUzMRbE8g6w37F588wAAACQ [10-07-2022 15:12:05]21002: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [10-07-2022 15:12:05]21002: WAF :: fetched 1 new logs [10-07-2022 15:16:01]31540: WAF :: fetched 1 new logs [10-07-2022 15:18:01]4443: WAF :: fetched 2 new logs [10-07-2022 15:20:02]9864: WAF :: fetched 1 new logs [10-07-2022 15:22:02]15153: WAF :: fetched 2 new logs [10-07-2022 15:23:01]17802: WAF :: fetched 2 new logs [10-07-2022 15:24:02]20508: WAF :: fetched 1 new logs [10-07-2022 15:27:01]28377: WAF :: fetched 1 new logs [10-07-2022 15:28:02]31017: WAF :: fetched 1 new logs [10-07-2022 15:32:02]9258: WAF :: fetched 1 new logs [10-07-2022 15:34:01]14499: WAF :: fetched 3 new logs [10-07-2022 15:35:01]17222: WAF :: fetched 1 new logs [10-07-2022 15:36:02]20051: WAF :: fetched 2 new logs [10-07-2022 15:37:01]22701: WAF :: fetched 1 new logs [10-07-2022 15:38:02]25361: WAF :: fetched 5 new logs [10-07-2022 15:40:02]30798: WAF :: fetched 7 new logs [10-07-2022 15:41:02]1104: WAF :: fetched 3 new logs [10-07-2022 15:41:02]1104: Checking for user cron vulnerabilities [10-07-2022 15:44:02]9177: Checking ditributed CMS bruteforce attacks [10-07-2022 15:44:06]9177: WAF :: fetched 1 new logs [10-07-2022 15:45:01]11934: WAF :: fetched 3 new logs [10-07-2022 15:47:02]17378: WAF :: fetched 4 new logs [10-07-2022 15:48:01]20191: WAF :: fetched 2 new logs [10-07-2022 15:49:02]22870: WAF :: fetched 2 new logs [10-07-2022 15:50:03]25620: WAF :: fetched 3 new logs [10-07-2022 15:51:02]28404: WAF :: fetched 4 new logs [10-07-2022 15:52:01]31053: WAF :: fetched 2 new logs [10-07-2022 15:54:01]3994: WAF :: fetched 4 new logs [10-07-2022 15:55:01]6717: WAF :: fetched 57 new logs [10-07-2022 15:56:01]9467: WAF :: fetched 2 new logs [10-07-2022 15:57:02]12117: WAF :: fetched 2 new logs [10-07-2022 15:59:02]17397: WAF :: fetched 2 new logs [10-07-2022 16:00:02]19978: WAF :: fetched 8 new logs [10-07-2022 16:01:02]23177: WAF :: fetched 4 new logs [10-07-2022 16:02:01]25872: WAF :: fetched 3 new logs [10-07-2022 16:03:01]28567: WAF :: fetched 4 new logs [10-07-2022 16:04:02]31311: WAF :: fetched 3 new logs [10-07-2022 16:05:01]1587: WAF :: fetched 39 new logs [10-07-2022 16:06:01]4395: WAF :: fetched 63 new logs [10-07-2022 16:07:01]7074: WAF :: fetched 64 new logs [10-07-2022 16:08:02]9744: WAF :: fetched 65 new logs [10-07-2022 16:09:03]12398: WAF :: fetched 61 new logs [10-07-2022 16:10:02]15095: WAF :: fetched 65 new logs [10-07-2022 16:11:02]17973: WAF :: fetched 70 new logs [10-07-2022 16:12:02]20742: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657480322 [10-07-2022 16:12:06]20742: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 16:12:08]20742: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 16:12:08]20742: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-1612/20220710-161206-YsskhvoT1r9bpvXRnGYUFAAAABs [10-07-2022 16:12:08]20742: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 16:12:09]20742: WAF :: fetched 569 new logs [10-07-2022 16:14:01]26163: WAF :: fetched 2 new logs [10-07-2022 16:15:01]28883: WAF :: fetched 4 new logs [10-07-2022 16:16:02]31653: WAF :: fetched 1 new logs [10-07-2022 16:18:02]4594: WAF :: fetched 5 new logs [10-07-2022 16:19:01]7195: WAF :: fetched 3 new logs [10-07-2022 16:20:02]9938: WAF :: fetched 2 new logs [10-07-2022 16:21:02]12777: WAF :: fetched 5 new logs [10-07-2022 16:22:01]15525: WAF :: fetched 8 new logs [10-07-2022 16:23:01]18262: WAF :: fetched 7 new logs [10-07-2022 16:27:01]29117: WAF :: fetched 1 new logs [10-07-2022 16:29:01]2054: WAF :: fetched 1 new logs [10-07-2022 16:31:02]7552: WAF :: fetched 2 new logs [10-07-2022 16:32:01]10153: WAF :: fetched 1 new logs [10-07-2022 16:33:02]12917: WAF :: fetched 2 new logs [10-07-2022 16:34:02]15555: WAF :: fetched 1 new logs [10-07-2022 16:36:01]21319: WAF :: fetched 1 new logs [10-07-2022 16:37:01]23978: WAF :: fetched 6 new logs [10-07-2022 16:38:02]26638: WAF :: fetched 1 new logs [10-07-2022 16:39:02]29281: WAF :: fetched 2 new logs [10-07-2022 16:40:01]31942: WAF :: fetched 1 new logs [10-07-2022 16:41:02]2378: Checking for user cron vulnerabilities [10-07-2022 16:43:02]7745: WAF :: fetched 1 new logs [10-07-2022 16:44:01]10400: Checking ditributed CMS bruteforce attacks [10-07-2022 16:44:05]10400: WAF :: fetched 1 new logs [10-07-2022 16:45:02]13062: WAF :: fetched 3 new logs [10-07-2022 16:50:02]26662: WAF :: fetched 1 new logs [10-07-2022 16:51:01]29468: WAF :: fetched 1 new logs [10-07-2022 16:55:02]7777: WAF :: fetched 1 new logs [10-07-2022 16:57:02]13185: WAF :: fetched 2 new logs [10-07-2022 16:59:02]18613: WAF :: fetched 1 new logs [10-07-2022 17:00:01]21004: WAF :: fetched 2 new logs [10-07-2022 17:01:01]24263: WAF :: fetched 3 new logs [10-07-2022 17:02:02]26935: WAF :: fetched 1 new logs [10-07-2022 17:03:01]29590: WAF :: fetched 2 new logs [10-07-2022 17:04:02]32250: WAF :: fetched 1 new logs [10-07-2022 17:06:01]5328: WAF :: fetched 2 new logs [10-07-2022 17:07:02]8013: WAF :: fetched 2 new logs [10-07-2022 17:09:02]13383: WAF :: fetched 3 new logs [10-07-2022 17:10:01]16143: WAF :: fetched 1 new logs [10-07-2022 17:11:02]19118: WAF :: fetched 30 new logs [10-07-2022 17:12:01]21822: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657483921 [10-07-2022 17:12:01]21822: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 17:12:03]21822: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 17:12:06]21822: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-1712/20220710-171201-YssykVUa9lLn8DiZQm433AAAAAY [10-07-2022 17:12:06]21822: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 17:12:06]21822: WAF :: fetched 6 new logs [10-07-2022 17:13:02]24668: WAF :: fetched 3 new logs [10-07-2022 17:14:01]27286: WAF :: fetched 2 new logs [10-07-2022 17:15:01]29970: WAF :: fetched 1 new logs [10-07-2022 17:18:01]5813: WAF :: fetched 2 new logs [10-07-2022 17:19:01]8482: WAF :: fetched 1 new logs [10-07-2022 17:20:02]11330: WAF :: fetched 1 new logs [10-07-2022 17:21:01]14223: WAF :: fetched 3 new logs [10-07-2022 17:22:01]16901: WAF :: fetched 2 new logs [10-07-2022 17:23:02]19647: WAF :: fetched 4 new logs [10-07-2022 17:24:01]22306: WAF :: fetched 2 new logs [10-07-2022 17:26:01]27985: WAF :: fetched 1 new logs [10-07-2022 17:27:01]30668: WAF :: fetched 6 new logs [10-07-2022 17:28:02]996: WAF :: fetched 1 new logs [10-07-2022 17:34:01]17269: WAF :: fetched 3 new logs [10-07-2022 17:37:02]25727: WAF :: fetched 3 new logs [10-07-2022 17:39:02]31034: WAF :: fetched 3 new logs [10-07-2022 17:41:01]4181: Checking for user cron vulnerabilities [10-07-2022 17:43:02]9466: WAF :: fetched 3 new logs [10-07-2022 17:44:01]12116: Checking ditributed CMS bruteforce attacks [10-07-2022 17:44:02]12116: WAF :: fetched 1 new logs [10-07-2022 17:45:01]14807: WAF :: fetched 2 new logs [10-07-2022 17:46:01]17601: WAF :: fetched 3 new logs [10-07-2022 17:49:01]25711: WAF :: fetched 1 new logs [10-07-2022 17:50:01]28381: WAF :: fetched 2 new logs [10-07-2022 17:51:02]31205: WAF :: fetched 1 new logs [10-07-2022 17:53:01]4081: WAF :: fetched 3 new logs [10-07-2022 17:54:02]6739: WAF :: fetched 1 new logs [10-07-2022 17:55:01]9367: WAF :: fetched 1 new logs [10-07-2022 17:56:02]12180: WAF :: fetched 1 new logs [10-07-2022 17:58:02]17489: WAF :: fetched 3 new logs [10-07-2022 18:00:01]22793: WAF :: fetched 1 new logs [10-07-2022 18:11:03]20665: WAF :: fetched 1 new logs [10-07-2022 18:12:01]23316: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657487521 [10-07-2022 18:12:01]23316: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 18:12:03]23316: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 18:12:06]23316: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-1812/20220710-181201-YstAodUcCIou2o1DVgaZWwAAAAo [10-07-2022 18:12:06]23316: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 18:12:06]23316: WAF :: fetched 4 new logs [10-07-2022 18:18:01]7222: WAF :: fetched 2 new logs [10-07-2022 18:19:02]9903: WAF :: fetched 1 new logs [10-07-2022 18:21:01]15402: WAF :: fetched 1 new logs [10-07-2022 18:24:02]23605: WAF :: fetched 1 new logs [10-07-2022 18:25:01]26246: WAF :: fetched 1 new logs [10-07-2022 18:27:01]31728: WAF :: fetched 19 new logs [10-07-2022 18:28:01]1958: WAF :: fetched 6 new logs [10-07-2022 18:29:03]4671: WAF :: fetched 1 new logs [10-07-2022 18:30:02]7372: WAF :: fetched 2 new logs [10-07-2022 18:31:02]10144: WAF :: fetched 1 new logs [10-07-2022 18:34:01]18246: WAF :: fetched 2 new logs [10-07-2022 18:35:02]21031: WAF :: fetched 1 new logs [10-07-2022 18:37:02]26506: WAF :: fetched 1 new logs [10-07-2022 18:40:01]2074: WAF :: fetched 1 new logs [10-07-2022 18:41:02]4889: WAF :: fetched 1 new logs [10-07-2022 18:41:02]4889: Checking for user cron vulnerabilities [10-07-2022 18:44:01]12842: Checking ditributed CMS bruteforce attacks [10-07-2022 18:44:05]12842: WAF :: fetched 3 new logs [10-07-2022 18:45:02]15472: WAF :: fetched 4 new logs [10-07-2022 18:46:01]18361: WAF :: fetched 2 new logs [10-07-2022 18:47:02]21149: WAF :: fetched 1 new logs [10-07-2022 18:49:02]26522: WAF :: fetched 1 new logs [10-07-2022 18:51:02]32021: WAF :: fetched 1 new logs [10-07-2022 18:52:01]2217: WAF :: fetched 5 new logs [10-07-2022 18:53:02]4943: WAF :: fetched 18 new logs [10-07-2022 18:54:01]7575: WAF :: fetched 44 new logs [10-07-2022 18:55:02]10261: WAF :: fetched 49 new logs [10-07-2022 18:56:02]13070: WAF :: fetched 50 new logs [10-07-2022 18:57:02]15759: WAF :: fetched 51 new logs [10-07-2022 18:58:01]18492: WAF :: fetched 75 new logs [10-07-2022 18:59:01]21199: WAF :: fetched 91 new logs [10-07-2022 19:00:02]23647: WAF :: fetched 82 new logs [10-07-2022 19:01:01]27010: WAF :: fetched 74 new logs [10-07-2022 19:02:02]29761: WAF :: fetched 54 new logs [10-07-2022 19:03:01]32526: WAF :: fetched 57 new logs [10-07-2022 19:04:01]2902: WAF :: fetched 52 new logs [10-07-2022 19:05:01]5597: WAF :: fetched 16 new logs [10-07-2022 19:07:02]11068: WAF :: fetched 6 new logs [10-07-2022 19:08:01]13704: WAF :: fetched 2 new logs [10-07-2022 19:09:01]16436: WAF :: fetched 32 new logs [10-07-2022 19:10:01]19281: WAF :: fetched 5 new logs [10-07-2022 19:11:01]22126: WAF :: fetched 6 new logs [10-07-2022 19:12:02]24792: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657491122 [10-07-2022 19:12:02]24792: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 19:12:04]24792: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 19:12:05]24792: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-1912/20220710-191202-YstOsumhZPMyoVNYb36XEwAAAB0 [10-07-2022 19:12:05]24792: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [10-07-2022 19:12:06]24792: WAF :: fetched 1 new logs [10-07-2022 19:13:01]27459: WAF :: fetched 5 new logs [10-07-2022 19:14:03]30229: WAF :: fetched 5 new logs [10-07-2022 19:15:01]476: WAF :: fetched 8 new logs [10-07-2022 19:16:02]3387: WAF :: fetched 4 new logs [10-07-2022 19:17:01]6148: WAF :: fetched 6 new logs [10-07-2022 19:18:02]9002: WAF :: fetched 7 new logs [10-07-2022 19:19:02]11730: WAF :: fetched 8 new logs [10-07-2022 19:20:02]14572: WAF :: fetched 13 new logs [10-07-2022 19:21:01]17508: WAF :: fetched 15 new logs [10-07-2022 19:22:02]20406: WAF :: fetched 11 new logs [10-07-2022 19:23:01]23072: WAF :: fetched 1 new logs [10-07-2022 19:24:02]25765: WAF :: fetched 1 new logs [10-07-2022 19:25:01]28419: WAF :: fetched 3 new logs [10-07-2022 19:26:02]31307: WAF :: fetched 3 new logs [10-07-2022 19:27:01]1590: WAF :: fetched 3 new logs [10-07-2022 19:29:01]7009: WAF :: fetched 6 new logs [10-07-2022 19:30:02]9695: WAF :: fetched 3 new logs [10-07-2022 19:31:01]12471: WAF :: fetched 2 new logs [10-07-2022 19:32:01]15194: WAF :: fetched 3 new logs [10-07-2022 19:33:03]17883: WAF :: fetched 4 new logs [10-07-2022 19:34:02]20725: WAF :: fetched 3 new logs [10-07-2022 19:35:01]23422: WAF :: fetched 3 new logs [10-07-2022 19:36:01]26230: WAF :: fetched 8 new logs [10-07-2022 19:37:02]28899: WAF :: fetched 7 new logs [10-07-2022 19:38:02]31605: WAF :: fetched 41 new logs [10-07-2022 19:39:01]1864: WAF :: fetched 7 new logs [10-07-2022 19:40:03]4567: WAF :: fetched 4 new logs [10-07-2022 19:41:01]7319: WAF :: fetched 7 new logs [10-07-2022 19:41:01]7319: Checking for user cron vulnerabilities [10-07-2022 19:42:02]10020: WAF :: fetched 9 new logs [10-07-2022 19:43:02]12746: WAF :: fetched 5 new logs [10-07-2022 19:44:01]15365: Checking ditributed CMS bruteforce attacks [10-07-2022 19:44:03]15365: WAF :: fetched 1 new logs [10-07-2022 19:45:01]: Checking for definition updates [10-07-2022 19:47:01]23621: WAF :: fetched 1 new logs [10-07-2022 19:49:02]29017: WAF :: fetched 6 new logs [10-07-2022 19:50:02]31678: WAF :: fetched 5 new logs [10-07-2022 19:51:01]2104: WAF :: fetched 5 new logs [10-07-2022 19:52:02]4779: WAF :: fetched 2 new logs [10-07-2022 19:55:01]12806: WAF :: fetched 39 new logs [10-07-2022 19:56:02]15594: WAF :: fetched 5 new logs [10-07-2022 19:57:02]18315: WAF :: fetched 6 new logs [10-07-2022 19:58:02]21039: WAF :: fetched 3 new logs [10-07-2022 20:00:02]26103: WAF :: fetched 1 new logs [10-07-2022 20:01:02]29368: WAF :: fetched 34 new logs [10-07-2022 20:03:01]2332: WAF :: fetched 1 new logs [10-07-2022 20:04:02]5034: WAF :: fetched 2 new logs [10-07-2022 20:05:02]7662: WAF :: fetched 2 new logs [10-07-2022 20:07:01]13096: WAF :: fetched 2 new logs [10-07-2022 20:08:02]15737: WAF :: fetched 5 new logs [10-07-2022 20:09:01]18472: WAF :: fetched 1 new logs [10-07-2022 20:11:01]23999: WAF :: fetched 1 new logs [10-07-2022 20:12:02]26620: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657494722 [10-07-2022 20:12:02]26620: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 20:12:04]26620: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 20:12:04]26620: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-2012/20220710-201202-YstcwiwTAOazC74e1LrLvQAAADc [10-07-2022 20:12:04]26620: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 20:12:05]26620: WAF :: fetched 242 new logs [10-07-2022 20:13:02]29289: WAF :: fetched 5 new logs [10-07-2022 20:14:01]31909: WAF :: fetched 2 new logs [10-07-2022 20:15:01]2173: WAF :: fetched 5 new logs [10-07-2022 20:16:02]5004: WAF :: fetched 3 new logs [10-07-2022 20:17:01]7626: WAF :: fetched 2 new logs [10-07-2022 20:18:01]10291: WAF :: fetched 5 new logs [10-07-2022 20:19:01]12935: WAF :: fetched 4 new logs [10-07-2022 20:20:02]15605: WAF :: fetched 4 new logs [10-07-2022 20:21:02]18526: WAF :: fetched 5 new logs [10-07-2022 20:22:01]21269: WAF :: fetched 1 new logs [10-07-2022 20:26:02]32094: WAF :: fetched 1 new logs [10-07-2022 20:27:02]2371: WAF :: fetched 1 new logs [10-07-2022 20:28:01]5046: WAF :: fetched 3 new logs [10-07-2022 20:31:02]13238: WAF :: fetched 3 new logs [10-07-2022 20:32:02]15902: WAF :: fetched 3 new logs [10-07-2022 20:33:01]18657: WAF :: fetched 2 new logs [10-07-2022 20:37:01]29628: WAF :: fetched 3 new logs [10-07-2022 20:38:02]32384: WAF :: fetched 9 new logs [10-07-2022 20:39:01]2642: WAF :: fetched 3 new logs [10-07-2022 20:40:01]5367: WAF :: fetched 4 new logs [10-07-2022 20:41:02]8235: WAF :: fetched 1 new logs [10-07-2022 20:41:02]8235: Checking for user cron vulnerabilities [10-07-2022 20:42:01]10899: WAF :: fetched 1 new logs [10-07-2022 20:43:01]13553: WAF :: fetched 2 new logs [10-07-2022 20:44:02]16223: Checking ditributed CMS bruteforce attacks [10-07-2022 20:49:01]30004: WAF :: fetched 3 new logs [10-07-2022 20:50:02]32742: WAF :: fetched 2 new logs [10-07-2022 20:54:01]11319: WAF :: fetched 15 new logs [10-07-2022 20:57:02]19563: WAF :: fetched 2 new logs [10-07-2022 20:58:01]22203: WAF :: fetched 1 new logs [10-07-2022 20:59:01]24840: WAF :: fetched 1 new logs [10-07-2022 21:06:01]11422: WAF :: fetched 2 new logs [10-07-2022 21:08:01]16784: WAF :: fetched 3 new logs [10-07-2022 21:10:01]22263: WAF :: fetched 3 new logs [10-07-2022 21:12:02]27662: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657498322 [10-07-2022 21:12:02]27662: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 21:12:04]27662: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 21:12:05]27662: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-2112/20220710-211202-Ystq0vQTe6EZlsqCWoxu1QAAAAA [10-07-2022 21:12:05]27662: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 21:12:06]27662: WAF :: fetched 2 new logs [10-07-2022 21:15:01]3213: WAF :: fetched 3 new logs [10-07-2022 21:19:02]14051: WAF :: fetched 1 new logs [10-07-2022 21:20:01]16736: WAF :: fetched 1 new logs [10-07-2022 21:21:01]19579: WAF :: fetched 1 new logs [10-07-2022 21:22:02]22356: WAF :: fetched 1 new logs [10-07-2022 21:24:01]27665: WAF :: fetched 1 new logs [10-07-2022 21:25:02]30350: WAF :: fetched 2 new logs [10-07-2022 21:28:02]6104: WAF :: fetched 2 new logs [10-07-2022 21:29:01]8745: WAF :: fetched 4 new logs [10-07-2022 21:30:02]11469: WAF :: fetched 1 new logs [10-07-2022 21:32:02]16797: WAF :: fetched 1 new logs [10-07-2022 21:36:01]27400: WAF :: fetched 1 new logs [10-07-2022 21:40:01]5534: WAF :: fetched 2 new logs [10-07-2022 21:41:01]8193: WAF :: fetched 1 new logs [10-07-2022 21:41:01]8193: Checking for user cron vulnerabilities [10-07-2022 21:43:01]13518: WAF :: fetched 1 new logs [10-07-2022 21:44:02]16159: Checking ditributed CMS bruteforce attacks [10-07-2022 21:44:05]16159: WAF :: fetched 1 new logs [10-07-2022 21:45:01]18846: WAF :: fetched 4 new logs [10-07-2022 21:46:01]21542: WAF :: fetched 2 new logs [10-07-2022 21:47:01]24223: WAF :: fetched 2 new logs [10-07-2022 21:48:02]26858: WAF :: fetched 1 new logs [10-07-2022 21:55:01]12850: WAF :: fetched 1 new logs [10-07-2022 21:57:01]18295: WAF :: fetched 1 new logs [10-07-2022 21:58:02]20976: WAF :: fetched 2 new logs [10-07-2022 21:59:01]23562: WAF :: fetched 4 new logs [10-07-2022 22:00:01]25874: WAF :: fetched 5 new logs [10-07-2022 22:01:01]29024: WAF :: fetched 1 new logs [10-07-2022 22:02:02]31758: WAF :: fetched 6 new logs [10-07-2022 22:03:01]1845: WAF :: fetched 2 new logs [10-07-2022 22:06:01]9849: WAF :: fetched 2 new logs [10-07-2022 22:07:09]12558: Performing Domain reputation checks [10-07-2022 22:08:02]15180: WAF :: fetched 2 new logs [10-07-2022 22:09:01]17757: WAF :: fetched 2 new logs [10-07-2022 22:12:02]25865: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657501922 [10-07-2022 22:12:02]25865: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 22:12:04]25865: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 22:12:06]25865: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-2212/20220710-221202-Yst44heJnKEFgLNMstQKpQAAAA0 [10-07-2022 22:12:06]25865: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 22:12:06]25865: WAF :: fetched 3 new logs [10-07-2022 22:13:02]28472: WAF :: fetched 2 new logs [10-07-2022 22:14:01]31065: WAF :: fetched 1 new logs [10-07-2022 22:15:01]1309: WAF :: fetched 1 new logs [10-07-2022 22:18:02]9281: WAF :: fetched 3 new logs [10-07-2022 22:23:02]22626: WAF :: fetched 2 new logs [10-07-2022 22:24:01]25186: WAF :: fetched 9 new logs [10-07-2022 22:25:01]27805: WAF :: fetched 47 new logs [10-07-2022 22:26:01]30452: WAF :: fetched 43 new logs [10-07-2022 22:27:02]701: WAF :: fetched 55 new logs [10-07-2022 22:28:01]3345: WAF :: fetched 54 new logs [10-07-2022 22:29:01]5982: WAF :: fetched 52 new logs [10-07-2022 22:30:02]8597: WAF :: fetched 61 new logs [10-07-2022 22:31:02]11255: WAF :: fetched 45 new logs [10-07-2022 22:32:02]13950: WAF :: fetched 49 new logs [10-07-2022 22:33:01]16537: WAF :: fetched 14 new logs [10-07-2022 22:35:02]21910: WAF :: fetched 12 new logs [10-07-2022 22:36:02]24561: WAF :: fetched 12 new logs [10-07-2022 22:41:01]5337: Checking for user cron vulnerabilities [10-07-2022 22:44:01]13288: Checking ditributed CMS bruteforce attacks [10-07-2022 22:50:02]29228: WAF :: fetched 1 new logs [10-07-2022 22:51:01]31885: WAF :: fetched 5 new logs [10-07-2022 22:52:01]2158: WAF :: fetched 11 new logs [10-07-2022 22:53:02]4805: WAF :: fetched 2 new logs [10-07-2022 22:54:02]7436: WAF :: fetched 2 new logs [10-07-2022 22:56:02]12678: WAF :: fetched 1 new logs [10-07-2022 22:57:01]15343: WAF :: fetched 29 new logs [10-07-2022 22:58:02]18045: WAF :: fetched 53 new logs [10-07-2022 22:59:01]20630: WAF :: fetched 56 new logs [10-07-2022 23:00:02]22996: WAF :: fetched 42 new logs [10-07-2022 23:01:01]26072: WAF :: fetched 34 new logs [10-07-2022 23:02:01]28866: WAF :: fetched 53 new logs [10-07-2022 23:03:01]31417: WAF :: fetched 54 new logs [10-07-2022 23:04:02]1634: WAF :: fetched 48 new logs [10-07-2022 23:05:01]4238: WAF :: fetched 23 new logs [10-07-2022 23:07:01]9583: WAF :: fetched 1 new logs [10-07-2022 23:07:58]9735: Performed RBL check for 23.111.136.34. [10-07-2022 23:08:03]12214: WAF :: fetched 1 new logs [10-07-2022 23:10:02]17482: WAF :: fetched 1 new logs [10-07-2022 23:11:01]20261: WAF :: fetched 2 new logs [10-07-2022 23:12:02]22979: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657505522 [10-07-2022 23:12:02]22979: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-07-2022 23:12:04]22979: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-07-2022 23:12:05]22979: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220710/20220710-2312/20220710-231202-YsuG8mAOee0jqE3C7v7BaQAAABk [10-07-2022 23:12:05]22979: WAF :: No suitable log file found. Using SQLite.. [10-07-2022 23:12:05]22979: WAF :: fetched 3 new logs [10-07-2022 23:13:02]25620: WAF :: fetched 1 new logs [10-07-2022 23:14:01]28209: WAF :: fetched 2 new logs [10-07-2022 23:15:02]30875: WAF :: fetched 2 new logs [10-07-2022 23:17:03]3944: WAF :: fetched 3 new logs [10-07-2022 23:18:01]6594: WAF :: fetched 1 new logs [10-07-2022 23:21:01]14717: WAF :: fetched 1 new logs [10-07-2022 23:22:01]17488: WAF :: fetched 1 new logs [10-07-2022 23:23:02]20299: WAF :: fetched 1 new logs [10-07-2022 23:24:02]22948: WAF :: fetched 1 new logs [10-07-2022 23:27:01]30930: WAF :: fetched 4 new logs [10-07-2022 23:28:01]1180: WAF :: fetched 5 new logs [10-07-2022 23:29:02]3828: WAF :: fetched 4 new logs [10-07-2022 23:30:01]6476: WAF :: fetched 2 new logs [10-07-2022 23:31:01]9189: WAF :: fetched 1 new logs [10-07-2022 23:32:01]11965: WAF :: fetched 1 new logs [10-07-2022 23:34:01]17175: WAF :: fetched 1 new logs [10-07-2022 23:38:02]27946: WAF :: fetched 3 new logs [10-07-2022 23:41:01]3364: Checking for user cron vulnerabilities [10-07-2022 23:42:01]6220: WAF :: fetched 1 new logs [10-07-2022 23:44:01]11439: Checking ditributed CMS bruteforce attacks [10-07-2022 23:45:02]14118: WAF :: fetched 1 new logs [10-07-2022 23:46:01]16797: WAF :: fetched 5 new logs [10-07-2022 23:50:01]27530: WAF :: fetched 3 new logs [10-07-2022 23:51:01]30230: WAF :: fetched 2 new logs [10-07-2022 23:52:02]501: WAF :: fetched 1 new logs [10-07-2022 23:53:02]3201: WAF :: fetched 2 new logs [10-07-2022 23:54:01]5878: WAF :: fetched 2 new logs [10-07-2022 23:55:01]8859: WAF :: fetched 35 new logs [10-07-2022 23:55:01]8860: httpd.conf changed. Refreshing watchlist. [10-07-2022 23:56:02]11582: WAF :: fetched 2 new logs [10-07-2022 23:57:01]14303: WAF :: fetched 1 new logs [10-07-2022 23:59:01]19685: WAF :: fetched 1 new logs [11-07-2022 00:01:01]25441: httpd.conf changed. Refreshing watchlist. [11-07-2022 00:01:04]25440: Sending daily report for July 11, 2022 [11-07-2022 00:02:02]28277: WAF :: fetched 1 new logs [11-07-2022 00:03:02]30959: WAF :: fetched 1 new logs [11-07-2022 00:05:02]3888: Deleted 0 entries older than 6 MONTH from scanner_logs [11-07-2022 00:05:02]3888: Deleted 0 files from Quarantine [11-07-2022 00:06:02]6571: WAF :: fetched 4 new logs [11-07-2022 00:07:01]9440: WAF :: fetched 15 new logs [11-07-2022 00:08:01]12068: WAF :: fetched 1 new logs [11-07-2022 00:09:01]14692: WAF :: fetched 1 new logs [11-07-2022 00:10:02]17366: WAF :: fetched 4 new logs [11-07-2022 00:12:02]22875: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657509122 [11-07-2022 00:12:02]22875: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 00:12:04]22875: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 00:12:06]22875: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-0012/20220711-001202-YsuVAhG1eZ28it_0hhvuVwAAACI [11-07-2022 00:12:06]22875: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 00:15:02]30767: WAF :: fetched 1 new logs [11-07-2022 00:18:01]6465: WAF :: fetched 23 new logs [11-07-2022 00:23:02]19926: WAF :: fetched 1 new logs [11-07-2022 00:26:02]27848: WAF :: fetched 2 new logs [11-07-2022 00:28:02]716: WAF :: fetched 1 new logs [11-07-2022 00:29:01]3396: WAF :: fetched 1 new logs [11-07-2022 00:30:01]6010: WAF :: fetched 2 new logs [11-07-2022 00:31:01]8721: WAF :: fetched 6 new logs [11-07-2022 00:32:01]11461: WAF :: fetched 79 new logs [11-07-2022 00:33:03]14110: WAF :: fetched 65 new logs [11-07-2022 00:34:01]16760: WAF :: fetched 25 new logs [11-07-2022 00:35:02]19481: WAF :: fetched 103 new logs [11-07-2022 00:36:01]22159: WAF :: fetched 33 new logs [11-07-2022 00:38:01]27496: WAF :: fetched 2 new logs [11-07-2022 00:41:02]3010: Checking for user cron vulnerabilities [11-07-2022 00:42:01]5754: WAF :: fetched 1 new logs [11-07-2022 00:43:01]8354: WAF :: fetched 2 new logs [11-07-2022 00:44:01]11039: Checking ditributed CMS bruteforce attacks [11-07-2022 00:44:02]11039: WAF :: fetched 4 new logs [11-07-2022 00:45:01]: Checking for software updates [11-07-2022 00:45:01]13677: WAF :: fetched 1 new logs [11-07-2022 00:46:02]16356: WAF :: fetched 1 new logs [11-07-2022 00:47:01]19150: WAF :: fetched 2 new logs [11-07-2022 00:51:02]29739: WAF :: fetched 1 new logs [11-07-2022 00:53:01]2696: WAF :: fetched 2 new logs [11-07-2022 00:54:02]5309: WAF :: fetched 1 new logs [11-07-2022 00:57:01]13398: WAF :: fetched 4 new logs [11-07-2022 00:58:01]16187: WAF :: fetched 5 new logs [11-07-2022 00:59:01]19029: WAF :: fetched 7 new logs [11-07-2022 01:05:02]4172: WAF :: fetched 2 new logs [11-07-2022 01:06:02]7164: WAF :: fetched 1 new logs [11-07-2022 01:11:01]20953: WAF :: fetched 1 new logs [11-07-2022 01:12:01]23822: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657512721 [11-07-2022 01:12:01]23822: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 01:12:03]23822: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 01:12:05]23822: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-0112/20220711-011201-YsujEZRpc1R7TgabPx9x4gAAAAU [11-07-2022 01:12:05]23822: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 01:12:05]23822: WAF :: fetched 3 new logs [11-07-2022 01:17:02]5226: WAF :: fetched 1 new logs [11-07-2022 01:19:02]10888: WAF :: fetched 1 new logs [11-07-2022 01:21:01]16338: WAF :: fetched 3 new logs [11-07-2022 01:30:03]8838: WAF :: fetched 1 new logs [11-07-2022 01:31:02]11539: WAF :: fetched 3 new logs [11-07-2022 01:32:01]14426: WAF :: fetched 1 new logs [11-07-2022 01:34:02]20113: WAF :: fetched 1 new logs [11-07-2022 01:35:01]22860: WAF :: fetched 1 new logs [11-07-2022 01:36:01]25598: WAF :: fetched 1 new logs [11-07-2022 01:37:02]28402: WAF :: fetched 1 new logs [11-07-2022 01:39:02]1851: WAF :: fetched 1 new logs [11-07-2022 01:40:01]4561: WAF :: fetched 1 new logs [11-07-2022 01:41:01]7321: Checking for user cron vulnerabilities [11-07-2022 01:44:01]15729: Checking ditributed CMS bruteforce attacks [11-07-2022 01:44:04]15729: WAF :: fetched 6 new logs [11-07-2022 01:45:01]: Checking for definition updates [11-07-2022 01:48:01]27291: WAF :: fetched 1 new logs [11-07-2022 01:50:01]32711: WAF :: fetched 5 new logs [11-07-2022 01:51:02]3465: WAF :: fetched 16 new logs [11-07-2022 01:53:02]8778: WAF :: fetched 1 new logs [11-07-2022 02:00:02]28387: WAF :: fetched 1 new logs [11-07-2022 02:02:01]2012: WAF :: fetched 1 new logs [11-07-2022 02:04:01]7864: WAF :: fetched 2 new logs [11-07-2022 02:06:02]13358: WAF :: fetched 1 new logs [11-07-2022 02:07:01]15968: WAF :: fetched 3 new logs [11-07-2022 02:08:02]19135: WAF :: fetched 3 new logs [11-07-2022 02:09:01]21755: WAF :: fetched 2 new logs [11-07-2022 02:12:02]29733: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657516322 [11-07-2022 02:12:02]29733: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 02:12:04]29733: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 02:12:07]29733: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-0212/20220711-021202-YsuxIj8wQe94iKA6yPrsxQAAABs [11-07-2022 02:12:07]29733: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-07-2022 02:12:07]29733: WAF :: fetched 1 new logs [11-07-2022 02:13:01]32442: WAF :: fetched 1 new logs [11-07-2022 02:15:02]5300: WAF :: fetched 1 new logs [11-07-2022 02:18:01]13539: WAF :: fetched 1 new logs [11-07-2022 02:19:02]16431: WAF :: fetched 1 new logs [11-07-2022 02:24:02]29928: WAF :: fetched 1 new logs [11-07-2022 02:25:02]32555: WAF :: fetched 1 new logs [11-07-2022 02:29:01]10775: WAF :: fetched 3 new logs [11-07-2022 02:30:02]13457: WAF :: fetched 1 new logs [11-07-2022 02:31:02]16108: WAF :: fetched 1 new logs [11-07-2022 02:34:02]24253: WAF :: fetched 3 new logs [11-07-2022 02:35:01]26873: WAF :: fetched 5 new logs [11-07-2022 02:39:01]5155: WAF :: fetched 2 new logs [11-07-2022 02:40:02]7800: WAF :: fetched 2 new logs [11-07-2022 02:41:01]10502: WAF :: fetched 2 new logs [11-07-2022 02:41:01]10502: Checking for user cron vulnerabilities [11-07-2022 02:42:02]13149: WAF :: fetched 3 new logs [11-07-2022 02:44:01]18524: Checking ditributed CMS bruteforce attacks [11-07-2022 02:44:03]18524: WAF :: fetched 3 new logs [11-07-2022 02:45:01]21260: WAF :: fetched 1 new logs [11-07-2022 02:49:02]32189: WAF :: fetched 1 new logs [11-07-2022 02:50:03]2352: WAF :: fetched 3 new logs [11-07-2022 02:51:01]5115: WAF :: fetched 1 new logs [11-07-2022 02:52:02]7763: WAF :: fetched 1 new logs [11-07-2022 02:53:02]10464: Updated license status via CDN [11-07-2022 02:57:01]21165: WAF :: fetched 1 new logs [11-07-2022 02:59:03]26680: WAF :: fetched 1 new logs [11-07-2022 03:01:01]966: WAF :: fetched 2 new logs [11-07-2022 03:01:17]29796: Found and updated 32 CMS installations [11-07-2022 03:01:40]29796: Wordpress installation #2 clinicasantanadehomeopatia.com.br has errors [11-07-2022 03:02:13]29796: Wordpress installation #9 oabilheus.org.br has errors [11-07-2022 03:02:56]29796: Wordpress installation #15 contratopronto.net has errors [11-07-2022 03:03:25]29796: Wordpress installation #17 ajuda.meusiteimobiliario.com.br has errors [11-07-2022 03:03:41]29796: Wordpress installation #18 tourvirtualfacil.com has errors [11-07-2022 03:04:08]6669: Wordpress installation #21 easy2speak.com.br has errors [11-07-2022 03:04:08]29796: Wordpress installation #21 easy2speak.com.br has errors [11-07-2022 03:04:32]6669: Wordpress installation #23 blueseasurf.com.br has errors [11-07-2022 03:04:32]29796: Wordpress installation #23 blueseasurf.com.br has errors [11-07-2022 03:05:01]6669: Wordpress installation #25 ltcertificadora.com.br has errors [11-07-2022 03:05:01]29796: Wordpress installation #25 ltcertificadora.com.br has errors [11-07-2022 03:05:15]6669: Wordpress installation #26 bibokinha.idcartao.com has errors [11-07-2022 03:05:15]29796: Wordpress installation #26 bibokinha.idcartao.com has errors [11-07-2022 03:05:34]6669: Wordpress installation #27 site.foxcard.com.br has errors [11-07-2022 03:05:34]29796: Wordpress installation #27 site.foxcard.com.br has errors [11-07-2022 03:06:06]29796: Wordpress installation #29 adsgestaomkt.com.br has errors [11-07-2022 03:06:06]6669: Wordpress installation #29 adsgestaomkt.com.br has errors [11-07-2022 03:06:35]6669: Wordpress installation #33 bibokinha.com.br has errors [11-07-2022 03:06:35]29796: Wordpress installation #33 bibokinha.com.br has errors [11-07-2022 03:06:59]6669: Wordpress installation #34 fazendayrere.com.br has errors [11-07-2022 03:06:59]29796: Wordpress installation #34 fazendayrere.com.br has errors [11-07-2022 03:07:02]17689: WAF :: fetched 3 new logs [11-07-2022 03:07:23]6669: Wordpress installation #35 luanbrasil.com.br has errors [11-07-2022 03:07:23]29796: Wordpress installation #35 luanbrasil.com.br has errors [11-07-2022 03:07:47]6669: Wordpress installation #36 suryaeventos.com.br has errors [11-07-2022 03:07:47]29796: Wordpress installation #36 suryaeventos.com.br has errors [11-07-2022 03:08:02]20514: WAF :: fetched 3 new logs [11-07-2022 03:08:14]6669: Wordpress installation #39 imoblux.com.br has errors [11-07-2022 03:08:14]29796: Wordpress installation #39 imoblux.com.br has errors [11-07-2022 03:08:38]6669: Wordpress installation #40 guardian-ba.com.br has errors [11-07-2022 03:08:38]29796: Wordpress installation #40 guardian-ba.com.br has errors [11-07-2022 03:09:02]6669: Wordpress installation #42 suryart.com.br has errors [11-07-2022 03:09:02]29796: Wordpress installation #42 suryart.com.br has errors [11-07-2022 03:09:12]6669: Sending CMS version vulnerability report emails to cpanel users [11-07-2022 03:09:12]29796: Sending CMS version vulnerability report emails to cpanel users [11-07-2022 03:09:15]29796: Checking wordpress installations for suspicious directories [11-07-2022 03:09:15]6669: Checking wordpress installations for suspicious directories [11-07-2022 03:10:01]26101: WAF :: fetched 1 new logs [11-07-2022 03:12:01]31721: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657519921 [11-07-2022 03:12:01]31721: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 03:12:03]31721: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 03:12:05]31721: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-0312/20220711-031201-Ysu_MRiovYGJR9Wp_xhvOwAAAAI [11-07-2022 03:12:05]31721: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 03:12:05]31721: WAF :: fetched 45 new logs [11-07-2022 03:16:01]10910: WAF :: fetched 24 new logs [11-07-2022 03:18:02]17232: WAF :: fetched 117 new logs [11-07-2022 03:19:02]19984: WAF :: fetched 533 new logs [11-07-2022 03:20:02]22927: WAF :: fetched 707 new logs [11-07-2022 03:21:01]25607: WAF :: fetched 847 new logs [11-07-2022 03:22:01]28440: WAF :: fetched 231 new logs [11-07-2022 03:23:02]31549: WAF :: fetched 241 new logs [11-07-2022 03:25:01]4382: WAF :: fetched 147 new logs [11-07-2022 03:26:03]7156: WAF :: fetched 8 new logs [11-07-2022 03:27:01]9889: WAF :: fetched 1 new logs [11-07-2022 03:29:02]15361: WAF :: fetched 1 new logs [11-07-2022 03:31:02]21308: WAF :: fetched 2 new logs [11-07-2022 03:32:01]24174: WAF :: fetched 1 new logs [11-07-2022 03:33:01]27113: WAF :: fetched 159 new logs [11-07-2022 03:34:02]29994: WAF :: fetched 625 new logs [11-07-2022 03:35:02]403: WAF :: fetched 817 new logs [11-07-2022 03:36:03]3520: WAF :: fetched 795 new logs [11-07-2022 03:37:01]6313: WAF :: fetched 148 new logs [11-07-2022 03:38:01]9117: WAF :: fetched 2 new logs [11-07-2022 03:41:02]17156: WAF :: fetched 1 new logs [11-07-2022 03:41:02]17156: Checking for user cron vulnerabilities [11-07-2022 03:42:01]19857: WAF :: fetched 8 new logs [11-07-2022 03:43:02]22651: WAF :: fetched 3 new logs [11-07-2022 03:44:01]23794: Checking ditributed CMS bruteforce attacks [11-07-2022 03:45:01]14943: WAF :: fetched 12 new logs [11-07-2022 03:46:02]23969: WAF :: fetched 3 new logs [11-07-2022 03:47:01]3209: WAF :: fetched 4 new logs [11-07-2022 03:48:01]6107: WAF :: fetched 2 new logs [11-07-2022 03:53:02]19488: WAF :: fetched 5 new logs [11-07-2022 03:54:02]22140: WAF :: fetched 1 new logs [11-07-2022 03:55:02]24747: WAF :: fetched 2 new logs [11-07-2022 04:02:02]11238: WAF :: fetched 2 new logs [11-07-2022 04:03:02]13952: WAF :: fetched 1 new logs [11-07-2022 04:06:01]21994: WAF :: fetched 2 new logs [11-07-2022 04:11:02]2847: WAF :: fetched 1 new logs [11-07-2022 04:12:02]5425: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657523522 [11-07-2022 04:12:02]5425: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 04:12:04]5425: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 04:12:05]5425: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-0412/20220711-041202-YsvNQrl0OECpUcNCr5S7wgAAAA8 [11-07-2022 04:12:05]5425: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 04:12:06]5425: WAF :: fetched 1 new logs [11-07-2022 04:15:01]13392: WAF :: fetched 1 new logs [11-07-2022 04:18:03]21522: WAF :: fetched 3 new logs [11-07-2022 04:20:01]26742: WAF :: fetched 5 new logs [11-07-2022 04:22:01]32033: WAF :: fetched 2 new logs [11-07-2022 04:23:02]2377: WAF :: fetched 7 new logs [11-07-2022 04:24:02]5077: WAF :: fetched 1 new logs [11-07-2022 04:25:01]7734: WAF :: fetched 3 new logs [11-07-2022 04:26:02]10464: WAF :: fetched 2 new logs [11-07-2022 04:27:01]13131: WAF :: fetched 1 new logs [11-07-2022 04:30:02]21479: WAF :: fetched 2 new logs [11-07-2022 04:31:01]24104: WAF :: fetched 3 new logs [11-07-2022 04:33:02]29501: WAF :: fetched 1 new logs [11-07-2022 04:34:01]32113: WAF :: fetched 1 new logs [11-07-2022 04:36:01]4970: WAF :: fetched 2 new logs [11-07-2022 04:37:01]7625: WAF :: fetched 1 new logs [11-07-2022 04:38:02]10354: WAF :: fetched 1 new logs [11-07-2022 04:41:01]18403: WAF :: fetched 3 new logs [11-07-2022 04:41:01]18403: Checking for user cron vulnerabilities [11-07-2022 04:42:02]21131: WAF :: fetched 1 new logs [11-07-2022 04:44:01]26730: Checking ditributed CMS bruteforce attacks [11-07-2022 04:46:01]32518: WAF :: fetched 1 new logs [11-07-2022 04:51:01]13789: WAF :: fetched 7 new logs [11-07-2022 04:52:02]16480: WAF :: fetched 9 new logs [11-07-2022 04:53:02]19289: WAF :: fetched 4 new logs [11-07-2022 04:57:01]29693: WAF :: fetched 1 new logs [11-07-2022 05:01:41]8297: Starting daily scan on files updated in last 24 hrs [11-07-2022 05:02:01]10764: WAF :: fetched 2 new logs [11-07-2022 05:05:01]18977: WAF :: fetched 4 new logs [11-07-2022 05:06:02]21706: WAF :: fetched 1 new logs [11-07-2022 05:08:01]26981: WAF :: fetched 1 new logs [11-07-2022 05:12:02]5190: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657527122 [11-07-2022 05:12:02]5190: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 05:12:04]5190: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 05:12:04]5190: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-0512/20220711-051202-YsvbUsQHlfJoEdFB9BL4ogAAAAA [11-07-2022 05:12:04]5190: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-07-2022 05:12:05]5190: WAF :: fetched 1 new logs [11-07-2022 05:13:02]7863: WAF :: fetched 1 new logs [11-07-2022 05:17:02]18500: WAF :: fetched 1 new logs [11-07-2022 05:19:02]23832: WAF :: fetched 2 new logs [11-07-2022 05:23:02]2079: WAF :: fetched 2 new logs [11-07-2022 05:24:02]4769: WAF :: fetched 1 new logs [11-07-2022 05:26:01]10200: WAF :: fetched 1 new logs [11-07-2022 05:29:01]18403: WAF :: fetched 2 new logs [11-07-2022 05:31:01]23781: WAF :: fetched 2 new logs [11-07-2022 05:33:02]29117: WAF :: fetched 5 new logs [11-07-2022 05:34:03]31747: WAF :: fetched 2 new logs [11-07-2022 05:36:02]4669: WAF :: fetched 1 new logs [11-07-2022 05:37:02]7276: WAF :: fetched 2 new logs [11-07-2022 05:38:02]9988: WAF :: fetched 8 new logs [11-07-2022 05:41:01]18003: WAF :: fetched 1 new logs [11-07-2022 05:41:01]18003: Checking for user cron vulnerabilities [11-07-2022 05:42:02]20696: WAF :: fetched 7 new logs [11-07-2022 05:43:02]23542: WAF :: fetched 4 new logs [11-07-2022 05:44:01]26343: Checking ditributed CMS bruteforce attacks [11-07-2022 05:50:02]10718: WAF :: fetched 2 new logs [11-07-2022 05:51:01]13400: WAF :: fetched 3 new logs [11-07-2022 05:52:02]16023: WAF :: fetched 1 new logs [11-07-2022 06:00:05]4730: WAF :: fetched 5 new logs [11-07-2022 06:04:01]15884: WAF :: fetched 1 new logs [11-07-2022 06:07:02]23945: WAF :: fetched 3 new logs [11-07-2022 06:09:01]29245: WAF :: fetched 1 new logs [11-07-2022 06:12:02]4863: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657530722 [11-07-2022 06:12:02]4863: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 06:12:04]4863: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 06:12:04]4863: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-0612/20220711-061202-YsvpYucfyqDIRGTOJDIIAgAAAAY [11-07-2022 06:12:04]4863: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 06:12:04]4863: WAF :: fetched 40 new logs [11-07-2022 06:14:02]10202: WAF :: fetched 1 new logs [11-07-2022 06:17:02]18238: WAF :: fetched 1 new logs [11-07-2022 06:23:01]1969: WAF :: fetched 1 new logs [11-07-2022 06:29:02]18588: WAF :: fetched 2 new logs [11-07-2022 06:34:01]31859: WAF :: fetched 1 new logs [11-07-2022 06:40:01]15302: WAF :: fetched 1 new logs [11-07-2022 06:41:01]18154: Checking for user cron vulnerabilities [11-07-2022 06:43:02]23607: WAF :: fetched 1 new logs [11-07-2022 06:44:01]26599: Checking ditributed CMS bruteforce attacks [11-07-2022 06:45:01]29469: WAF :: fetched 1 new logs [11-07-2022 06:49:01]8217: WAF :: fetched 1 new logs [11-07-2022 06:50:01]10874: WAF :: fetched 1 new logs [11-07-2022 06:51:01]13530: WAF :: fetched 1 new logs [11-07-2022 06:54:01]21633: WAF :: fetched 1 new logs [11-07-2022 07:00:03]4959: WAF :: fetched 3 new logs [11-07-2022 07:01:02]8191: WAF :: fetched 2 new logs [11-07-2022 07:04:01]16249: WAF :: fetched 13 new logs [11-07-2022 07:05:02]19019: WAF :: fetched 3 new logs [11-07-2022 07:07:01]24339: WAF :: fetched 2 new logs [11-07-2022 07:09:01]29683: WAF :: fetched 1 new logs [11-07-2022 07:12:02]5281: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657534322 [11-07-2022 07:12:02]5281: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 07:12:04]5281: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 07:12:05]5281: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-0712/20220711-071202-Ysv3chKSFXnF1CFDFg9hRwAAABI [11-07-2022 07:12:05]5281: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 07:12:06]5281: WAF :: fetched 2 new logs [11-07-2022 07:13:02]7952: WAF :: fetched 1 new logs [11-07-2022 07:14:01]10645: WAF :: fetched 1 new logs [11-07-2022 07:15:01]13265: WAF :: fetched 7 new logs [11-07-2022 07:18:01]21309: WAF :: fetched 11 new logs [11-07-2022 07:24:01]5012: WAF :: fetched 5 new logs [11-07-2022 07:25:01]7803: WAF :: fetched 5 new logs [11-07-2022 07:33:01]29498: WAF :: fetched 1 new logs [11-07-2022 07:36:01]5232: WAF :: fetched 3 new logs [11-07-2022 07:38:02]10497: WAF :: fetched 2 new logs [11-07-2022 07:40:01]15856: WAF :: fetched 1 new logs [11-07-2022 07:41:01]18632: WAF :: fetched 5 new logs [11-07-2022 07:41:01]18632: Checking for user cron vulnerabilities [11-07-2022 07:44:01]26945: Checking ditributed CMS bruteforce attacks [11-07-2022 07:44:02]26945: WAF :: fetched 5 new logs [11-07-2022 07:45:02]: Checking for definition updates [11-07-2022 07:45:02]29751: WAF :: fetched 3 new logs [11-07-2022 07:49:01]8683: WAF :: fetched 1 new logs [11-07-2022 07:50:01]11406: WAF :: fetched 6 new logs [11-07-2022 07:51:01]14091: WAF :: fetched 1 new logs [11-07-2022 07:52:01]16707: WAF :: fetched 1 new logs [11-07-2022 07:55:01]24836: WAF :: fetched 18 new logs [11-07-2022 07:56:01]27561: WAF :: fetched 17 new logs [11-07-2022 07:57:02]30219: WAF :: fetched 8 new logs [11-07-2022 07:58:02]503: WAF :: fetched 2 new logs [11-07-2022 07:59:01]3362: WAF :: fetched 11 new logs [11-07-2022 08:00:02]5809: WAF :: fetched 7 new logs [11-07-2022 08:01:01]9098: WAF :: fetched 15 new logs [11-07-2022 08:02:02]11866: WAF :: fetched 8 new logs [11-07-2022 08:03:01]14511: WAF :: fetched 2 new logs [11-07-2022 08:04:02]17277: WAF :: fetched 5 new logs [11-07-2022 08:05:01]20033: WAF :: fetched 10 new logs [11-07-2022 08:06:02]22738: WAF :: fetched 2 new logs [11-07-2022 08:08:02]28043: WAF :: fetched 5 new logs [11-07-2022 08:09:01]30790: WAF :: fetched 5 new logs [11-07-2022 08:10:02]1061: WAF :: fetched 1 new logs [11-07-2022 08:11:01]3746: WAF :: fetched 4 new logs [11-07-2022 08:12:01]6404: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657537921 [11-07-2022 08:12:01]6404: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 08:12:03]6404: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 08:12:05]6404: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-0812/20220711-081201-YswFgavhBdkWbO1FBZmLzgAAAAo [11-07-2022 08:12:05]6404: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 08:12:05]6404: WAF :: fetched 3 new logs [11-07-2022 08:13:02]9088: WAF :: fetched 2 new logs [11-07-2022 08:14:02]11979: WAF :: fetched 3 new logs [11-07-2022 08:15:01]14685: WAF :: fetched 3 new logs [11-07-2022 08:16:02]17476: WAF :: fetched 6 new logs [11-07-2022 08:17:01]20181: WAF :: fetched 1 new logs [11-07-2022 08:21:02]31082: WAF :: fetched 1 new logs [11-07-2022 08:24:02]6809: WAF :: fetched 6 new logs [11-07-2022 08:25:01]9499: WAF :: fetched 1 new logs [11-07-2022 08:27:02]15104: WAF :: fetched 1 new logs [11-07-2022 08:29:04]20732: WAF :: fetched 21 new logs [11-07-2022 08:31:02]26210: WAF :: fetched 1 new logs [11-07-2022 08:33:01]31507: WAF :: fetched 2 new logs [11-07-2022 08:35:02]4486: WAF :: fetched 1 new logs [11-07-2022 08:37:02]9872: WAF :: fetched 1 new logs [11-07-2022 08:41:02]20739: Checking for user cron vulnerabilities [11-07-2022 08:43:01]26033: WAF :: fetched 1 new logs [11-07-2022 08:44:01]28934: Checking ditributed CMS bruteforce attacks [11-07-2022 08:44:05]28934: WAF :: fetched 9 new logs [11-07-2022 08:46:01]2514: WAF :: fetched 1 new logs [11-07-2022 08:47:02]5312: WAF :: fetched 3 new logs [11-07-2022 08:48:01]8126: WAF :: fetched 1 new logs [11-07-2022 08:49:01]11044: WAF :: fetched 1 new logs [11-07-2022 08:50:01]13697: WAF :: fetched 3 new logs [11-07-2022 08:51:02]16445: WAF :: fetched 2 new logs [11-07-2022 08:54:02]24609: WAF :: fetched 13 new logs [11-07-2022 08:55:02]27224: WAF :: fetched 8 new logs [11-07-2022 08:56:02]30005: WAF :: fetched 1 new logs [11-07-2022 08:57:01]32696: WAF :: fetched 9 new logs [11-07-2022 08:59:01]5793: WAF :: fetched 1 new logs [11-07-2022 09:04:02]19690: WAF :: fetched 6 new logs [11-07-2022 09:07:01]27778: WAF :: fetched 4 new logs [11-07-2022 09:08:02]30448: WAF :: fetched 1 new logs [11-07-2022 09:10:01]3524: WAF :: fetched 32 new logs [11-07-2022 09:11:01]6249: WAF :: fetched 5 new logs [11-07-2022 09:12:04]8988: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657541524 [11-07-2022 09:12:04]8988: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 09:12:06]8988: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 09:12:07]8988: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-0912/20220711-091204-YswTlAws8CNOLNETNbsXrAAAAAA [11-07-2022 09:12:07]8988: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-07-2022 09:12:07]8988: WAF :: fetched 1 new logs [11-07-2022 09:13:01]11687: WAF :: fetched 1 new logs [11-07-2022 09:16:02]20056: WAF :: fetched 2 new logs [11-07-2022 09:17:02]22775: WAF :: fetched 1 new logs [11-07-2022 09:19:02]28260: WAF :: fetched 7 new logs [11-07-2022 09:20:02]30903: WAF :: fetched 3 new logs [11-07-2022 09:22:01]3948: WAF :: fetched 2 new logs [11-07-2022 09:23:02]6727: WAF :: fetched 5 new logs [11-07-2022 09:24:01]9496: WAF :: fetched 6 new logs [11-07-2022 09:26:03]15016: WAF :: fetched 3 new logs [11-07-2022 09:27:01]17748: WAF :: fetched 3 new logs [11-07-2022 09:30:01]26163: WAF :: fetched 8 new logs [11-07-2022 09:31:02]28995: WAF :: fetched 6 new logs [11-07-2022 09:32:02]31649: WAF :: fetched 22 new logs [11-07-2022 09:33:02]2000: WAF :: fetched 5 new logs [11-07-2022 09:36:01]10336: WAF :: fetched 2 new logs [11-07-2022 09:37:03]13035: WAF :: fetched 2 new logs [11-07-2022 09:38:02]15747: WAF :: fetched 19 new logs [11-07-2022 09:41:01]24086: Checking for user cron vulnerabilities [11-07-2022 09:43:02]29474: WAF :: fetched 5 new logs [11-07-2022 09:44:02]32417: Checking ditributed CMS bruteforce attacks [11-07-2022 09:44:05]32417: WAF :: fetched 16 new logs [11-07-2022 09:45:02]3007: WAF :: fetched 8 new logs [11-07-2022 09:46:02]6094: WAF :: fetched 2 new logs [11-07-2022 09:47:03]9092: WAF :: fetched 2 new logs [11-07-2022 09:48:02]11984: WAF :: fetched 2 new logs [11-07-2022 09:52:01]23261: WAF :: fetched 1 new logs [11-07-2022 09:54:02]28837: WAF :: fetched 2 new logs [11-07-2022 09:55:01]31512: WAF :: fetched 2 new logs [11-07-2022 09:57:02]4641: WAF :: fetched 1 new logs [11-07-2022 10:00:01]12678: WAF :: fetched 1 new logs [11-07-2022 10:01:02]15968: WAF :: fetched 8 new logs [11-07-2022 10:02:02]18783: WAF :: fetched 1 new logs [11-07-2022 10:04:01]24364: WAF :: fetched 2 new logs [11-07-2022 10:05:02]27088: WAF :: fetched 2 new logs [11-07-2022 10:06:01]29766: WAF :: fetched 2 new logs [11-07-2022 10:07:02]32594: WAF :: fetched 5 new logs [11-07-2022 10:08:02]2904: WAF :: fetched 3 new logs [11-07-2022 10:09:02]5709: WAF :: fetched 5 new logs [11-07-2022 10:10:02]8444: WAF :: fetched 3 new logs [11-07-2022 10:11:03]11213: WAF :: fetched 1 new logs [11-07-2022 10:12:02]13918: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657545122 [11-07-2022 10:12:02]13918: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 10:12:04]13918: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 10:12:04]13918: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-1012/20220711-101202-YswhopwSMnoLBm0xUNwlfQAAABg [11-07-2022 10:12:04]13918: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 10:12:05]13918: WAF :: fetched 127 new logs [11-07-2022 10:13:01]16618: httpd.conf changed. Refreshing watchlist. [11-07-2022 10:14:02]19642: WAF :: fetched 1 new logs [11-07-2022 10:16:02]25204: WAF :: fetched 3 new logs [11-07-2022 10:17:03]27879: WAF :: fetched 7 new logs [11-07-2022 10:18:02]30292: WAF :: fetched 30 new logs [11-07-2022 10:18:02]30279: httpd.conf changed. Refreshing watchlist. [11-07-2022 10:19:01]1068: WAF :: fetched 23 new logs [11-07-2022 10:23:01]12090: WAF :: fetched 2 new logs [11-07-2022 10:24:02]14945: WAF :: fetched 3 new logs [11-07-2022 10:26:02]20578: WAF :: fetched 22 new logs [11-07-2022 10:27:01]23383: WAF :: fetched 40 new logs [11-07-2022 10:28:02]26151: WAF :: fetched 41 new logs [11-07-2022 10:29:01]29043: WAF :: fetched 35 new logs [11-07-2022 10:30:02]31861: WAF :: fetched 37 new logs [11-07-2022 10:31:01]2232: WAF :: fetched 34 new logs [11-07-2022 10:32:01]5000: WAF :: fetched 4 new logs [11-07-2022 10:34:02]10545: WAF :: fetched 5 new logs [11-07-2022 10:36:02]15990: WAF :: fetched 1 new logs [11-07-2022 10:37:01]18772: WAF :: fetched 1 new logs [11-07-2022 10:40:01]27083: WAF :: fetched 3 new logs [11-07-2022 10:41:03]29944: WAF :: fetched 15 new logs [11-07-2022 10:41:03]29944: Checking for user cron vulnerabilities [11-07-2022 10:42:01]32723: WAF :: fetched 14 new logs [11-07-2022 10:43:02]3073: WAF :: fetched 1 new logs [11-07-2022 10:44:01]5826: Checking ditributed CMS bruteforce attacks [11-07-2022 10:44:04]5826: WAF :: fetched 1 new logs [11-07-2022 10:45:01]8777: WAF :: fetched 2 new logs [11-07-2022 10:48:02]17871: WAF :: fetched 2 new logs [11-07-2022 10:51:01]26317: WAF :: fetched 2 new logs [11-07-2022 10:52:01]29100: WAF :: fetched 2 new logs [11-07-2022 10:54:01]2317: WAF :: fetched 11 new logs [11-07-2022 10:55:02]5108: WAF :: fetched 2 new logs [11-07-2022 10:57:02]10702: WAF :: fetched 2 new logs [11-07-2022 10:58:02]13443: WAF :: fetched 2 new logs [11-07-2022 11:00:02]18916: httpd.conf changed. Refreshing watchlist. [11-07-2022 11:03:01]27612: WAF :: fetched 1 new logs [11-07-2022 11:04:02]30587: httpd.conf changed. Refreshing watchlist. [11-07-2022 11:05:01]931: WAF :: fetched 1 new logs [11-07-2022 11:06:02]3748: WAF :: fetched 1 new logs [11-07-2022 11:08:01]6696: Performed RBL check for 23.111.136.34. [11-07-2022 11:10:01]14888: WAF :: fetched 2 new logs [11-07-2022 11:11:01]17645: WAF :: fetched 3 new logs [11-07-2022 11:12:02]20539: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657548722 [11-07-2022 11:12:02]20539: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 11:12:04]20539: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 11:12:05]20539: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-1112/20220711-111202-YswvspZvfIAuCaVKDas4ggAAACM [11-07-2022 11:12:05]20539: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 11:12:06]20539: WAF :: fetched 3 new logs [11-07-2022 11:14:01]26002: WAF :: fetched 1 new logs [11-07-2022 11:15:01]28817: WAF :: fetched 1 new logs [11-07-2022 11:16:01]31599: WAF :: fetched 1 new logs [11-07-2022 11:17:02]1947: WAF :: fetched 2 new logs [11-07-2022 11:18:02]4745: httpd.conf changed. Refreshing watchlist. [11-07-2022 11:19:02]7545: WAF :: fetched 1 new logs [11-07-2022 11:20:01]10343: WAF :: fetched 1 new logs [11-07-2022 11:22:02]15954: WAF :: fetched 6 new logs [11-07-2022 11:23:01]18682: WAF :: fetched 6 new logs [11-07-2022 11:26:01]5171: httpd.conf changed. Refreshing watchlist. [11-07-2022 11:28:01]16061: WAF :: fetched 1 new logs [11-07-2022 11:29:01]22048: WAF :: fetched 2 new logs [11-07-2022 11:30:03]27744: WAF :: fetched 1 new logs [11-07-2022 11:31:01]693: WAF :: fetched 7 new logs [11-07-2022 11:32:02]6209: WAF :: fetched 4 new logs [11-07-2022 11:32:02]6192: httpd.conf changed. Refreshing watchlist. [11-07-2022 11:33:01]11575: WAF :: fetched 1 new logs [11-07-2022 11:33:02]11572: httpd.conf changed. Refreshing watchlist. [11-07-2022 11:37:02]29225: httpd.conf changed. Refreshing watchlist. [11-07-2022 11:41:02]10740: Checking for user cron vulnerabilities [11-07-2022 11:42:02]14194: httpd.conf changed. Refreshing watchlist. [11-07-2022 11:43:01]17532: WAF :: fetched 1 new logs [11-07-2022 11:44:02]21173: Checking ditributed CMS bruteforce attacks [11-07-2022 11:45:01]24952: WAF :: fetched 1 new logs [11-07-2022 11:48:01]4160: WAF :: fetched 1 new logs [11-07-2022 11:52:01]18338: WAF :: fetched 1 new logs [11-07-2022 11:57:02]3836: WAF :: fetched 1 new logs [11-07-2022 11:59:01]10642: WAF :: fetched 1 new logs [11-07-2022 12:00:02]13875: WAF :: fetched 8 new logs [11-07-2022 12:02:01]20828: WAF :: fetched 3 new logs [11-07-2022 12:03:02]24348: WAF :: fetched 4 new logs [11-07-2022 12:08:02]10137: WAF :: fetched 1 new logs [11-07-2022 12:09:01]13620: WAF :: fetched 1 new logs [11-07-2022 12:10:01]17106: WAF :: fetched 3 new logs [11-07-2022 12:12:02]24302: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657552322 [11-07-2022 12:12:02]24302: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 12:12:04]24302: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 12:12:04]24302: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-1212/20220711-121202-Ysw9wjGV425n9tiCFWNuJQAAAAo [11-07-2022 12:12:04]24302: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 12:12:04]24302: WAF :: fetched 2 new logs [11-07-2022 12:14:02]31039: WAF :: fetched 1 new logs [11-07-2022 12:16:02]5686: WAF :: fetched 3 new logs [11-07-2022 12:17:02]9359: WAF :: fetched 6 new logs [11-07-2022 12:22:01]27057: WAF :: fetched 1 new logs [11-07-2022 12:23:01]30374: WAF :: fetched 1 new logs [11-07-2022 12:24:02]1512: WAF :: fetched 1 new logs [11-07-2022 12:25:01]5083: WAF :: fetched 2 new logs [11-07-2022 12:27:01]12467: WAF :: fetched 2 new logs [11-07-2022 12:28:01]15971: WAF :: fetched 2 new logs [11-07-2022 12:30:01]23188: WAF :: fetched 1 new logs [11-07-2022 12:32:02]30103: WAF :: fetched 2 new logs [11-07-2022 12:33:01]1006: WAF :: fetched 1 new logs [11-07-2022 12:35:02]7793: WAF :: fetched 1 new logs [11-07-2022 12:41:02]28942: WAF :: fetched 6 new logs [11-07-2022 12:41:02]28942: Checking for user cron vulnerabilities [11-07-2022 12:43:02]4267: httpd.conf changed. Refreshing watchlist. [11-07-2022 12:44:01]9441: Checking ditributed CMS bruteforce attacks [11-07-2022 12:44:05]9441: WAF :: fetched 1 new logs [11-07-2022 12:45:01]: Checking for software updates [11-07-2022 12:50:02]5589: WAF :: fetched 13 new logs [11-07-2022 12:51:01]9577: WAF :: fetched 5 new logs [11-07-2022 12:52:01]12603: WAF :: fetched 3 new logs [11-07-2022 12:56:02]27066: WAF :: fetched 2 new logs [11-07-2022 12:57:01]30457: WAF :: fetched 1 new logs [11-07-2022 13:00:01]8251: WAF :: fetched 2 new logs [11-07-2022 13:01:02]12300: WAF :: fetched 4 new logs [11-07-2022 13:02:01]15713: WAF :: fetched 2 new logs [11-07-2022 13:04:01]22732: WAF :: fetched 1 new logs [11-07-2022 13:05:01]26098: WAF :: fetched 2 new logs [11-07-2022 13:06:03]29626: WAF :: fetched 1 new logs [11-07-2022 13:12:01]18210: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657555921 [11-07-2022 13:12:01]18210: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 13:12:03]18210: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 13:12:04]18210: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-1312/20220711-131201-YsxL0SVsN-bxkMBYHIVeiQAAAAE [11-07-2022 13:12:04]18210: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 13:12:04]18210: WAF :: fetched 2 new logs [11-07-2022 13:16:01]32038: WAF :: fetched 1 new logs [11-07-2022 13:23:02]24560: WAF :: fetched 1 new logs [11-07-2022 13:24:01]28042: WAF :: fetched 2 new logs [11-07-2022 13:25:02]31480: WAF :: fetched 18 new logs [11-07-2022 13:26:01]2464: WAF :: fetched 4 new logs [11-07-2022 13:27:01]5912: WAF :: fetched 3 new logs [11-07-2022 13:28:02]9239: WAF :: fetched 6 new logs [11-07-2022 13:29:02]13344: WAF :: fetched 6 new logs [11-07-2022 13:30:02]16893: WAF :: fetched 1 new logs [11-07-2022 13:31:02]20487: WAF :: fetched 3 new logs [11-07-2022 13:32:02]24045: WAF :: fetched 3 new logs [11-07-2022 13:33:01]27419: WAF :: fetched 1 new logs [11-07-2022 13:36:02]5339: WAF :: fetched 1 new logs [11-07-2022 13:37:01]8745: WAF :: fetched 1 new logs [11-07-2022 13:40:01]19442: WAF :: fetched 17 new logs [11-07-2022 13:41:04]23049: WAF :: fetched 17 new logs [11-07-2022 13:41:04]23049: Checking for user cron vulnerabilities [11-07-2022 13:42:01]26458: WAF :: fetched 1 new logs [11-07-2022 13:43:01]29880: WAF :: fetched 3 new logs [11-07-2022 13:44:01]862: Checking ditributed CMS bruteforce attacks [11-07-2022 13:44:05]862: WAF :: fetched 3 new logs [11-07-2022 13:45:02]: Checking for definition updates [11-07-2022 13:47:01]11546: WAF :: fetched 1 new logs [11-07-2022 13:50:02]23360: WAF :: fetched 1 new logs [11-07-2022 13:53:01]949: WAF :: fetched 1 new logs [11-07-2022 13:56:01]11064: WAF :: fetched 2 new logs [11-07-2022 13:57:02]14550: WAF :: fetched 3 new logs [11-07-2022 13:58:01]17907: WAF :: fetched 5 new logs [11-07-2022 13:59:02]21367: WAF :: fetched 8 new logs [11-07-2022 14:00:01]24967: WAF :: fetched 2 new logs [11-07-2022 14:03:01]3379: httpd.conf changed. Refreshing watchlist. [11-07-2022 14:08:02]20366: httpd.conf changed. Refreshing watchlist. [11-07-2022 14:12:01]2149: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657559521 [11-07-2022 14:12:01]2149: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 14:12:03]2149: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 14:12:04]2149: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-1412/20220711-141201-YsxZ4YUSdTXPZFDNLTZsYwAAACg [11-07-2022 14:12:04]2149: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 14:12:05]2149: WAF :: fetched 1 new logs [11-07-2022 14:13:02]5438: WAF :: fetched 4 new logs [11-07-2022 14:22:01]4469: WAF :: fetched 1 new logs [11-07-2022 14:24:02]11113: WAF :: fetched 1 new logs [11-07-2022 14:25:01]14658: WAF :: fetched 1 new logs [11-07-2022 14:26:01]18207: WAF :: fetched 2 new logs [11-07-2022 14:32:01]7125: WAF :: fetched 1 new logs [11-07-2022 14:33:01]10439: WAF :: fetched 2 new logs [11-07-2022 14:38:01]27575: WAF :: fetched 3 new logs [11-07-2022 14:39:02]31036: WAF :: fetched 1 new logs [11-07-2022 14:40:02]2166: WAF :: fetched 2 new logs [11-07-2022 14:41:01]6041: WAF :: fetched 1 new logs [11-07-2022 14:41:01]6041: Checking for user cron vulnerabilities [11-07-2022 14:44:02]15894: Checking ditributed CMS bruteforce attacks [11-07-2022 14:48:01]29813: WAF :: fetched 1 new logs [11-07-2022 14:53:02]15549: Updated license status via CDN [11-07-2022 14:54:02]18991: WAF :: fetched 1 new logs [11-07-2022 14:58:02]32715: WAF :: fetched 2 new logs [11-07-2022 15:00:01]6821: WAF :: fetched 4 new logs [11-07-2022 15:01:02]11324: WAF :: fetched 4 new logs [11-07-2022 15:01:02]11325: Reseting cPGuard inotify settings [11-07-2022 15:02:01]14634: WAF :: fetched 5 new logs [11-07-2022 15:08:01]2708: WAF :: fetched 1 new logs [11-07-2022 15:11:01]13424: WAF :: fetched 2 new logs [11-07-2022 15:12:01]16824: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657563121 [11-07-2022 15:12:01]16824: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 15:12:03]16824: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 15:12:03]16824: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-1512/20220711-151201-Ysxn8SbmHU7A8ra-J8BJFAAAABE [11-07-2022 15:12:03]16824: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-07-2022 15:12:04]16824: WAF :: fetched 1 new logs [11-07-2022 15:13:01]20334: WAF :: fetched 1 new logs [11-07-2022 15:20:01]11859: WAF :: fetched 1 new logs [11-07-2022 15:28:01]7364: WAF :: fetched 1 new logs [11-07-2022 15:31:01]17909: WAF :: fetched 2 new logs [11-07-2022 15:35:02]32557: WAF :: fetched 2 new logs [11-07-2022 15:40:04]17095: WAF :: fetched 1 new logs [11-07-2022 15:41:02]20765: WAF :: fetched 7 new logs [11-07-2022 15:41:02]20765: Checking for user cron vulnerabilities [11-07-2022 15:42:01]24722: WAF :: fetched 13 new logs [11-07-2022 15:44:01]31420: Checking ditributed CMS bruteforce attacks [11-07-2022 15:46:01]5774: WAF :: fetched 2 new logs [11-07-2022 15:47:01]8737: WAF :: fetched 14 new logs [11-07-2022 15:48:02]12140: WAF :: fetched 1 new logs [11-07-2022 15:51:02]23023: WAF :: fetched 1 new logs [11-07-2022 15:52:01]27226: WAF :: fetched 1 new logs [11-07-2022 15:54:02]1674: WAF :: fetched 6 new logs [11-07-2022 15:55:01]4993: WAF :: fetched 8 new logs [11-07-2022 16:00:02]21976: WAF :: fetched 1 new logs [11-07-2022 16:04:01]3843: WAF :: fetched 1 new logs [11-07-2022 16:06:02]10771: WAF :: fetched 1 new logs [11-07-2022 16:08:01]17371: WAF :: fetched 2 new logs [11-07-2022 16:12:01]31663: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657566721 [11-07-2022 16:12:01]31663: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 16:12:03]31663: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 16:12:04]31663: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-1612/20220711-161201-Ysx2Ad98PfU3kBTzOHQhqgAAAAQ [11-07-2022 16:12:04]31663: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 16:12:04]31663: WAF :: fetched 53 new logs [11-07-2022 16:17:01]16104: WAF :: fetched 1 new logs [11-07-2022 16:18:02]19625: WAF :: fetched 1 new logs [11-07-2022 16:22:01]1276: WAF :: fetched 1 new logs [11-07-2022 16:25:01]11357: WAF :: fetched 1 new logs [11-07-2022 16:28:01]21717: WAF :: fetched 1 new logs [11-07-2022 16:29:02]25048: WAF :: fetched 1 new logs [11-07-2022 16:30:02]28379: WAF :: fetched 1 new logs [11-07-2022 16:32:01]2775: WAF :: fetched 1 new logs [11-07-2022 16:37:01]20825: WAF :: fetched 3 new logs [11-07-2022 16:38:02]24387: WAF :: fetched 1 new logs [11-07-2022 16:39:01]27815: WAF :: fetched 3 new logs [11-07-2022 16:40:01]31110: WAF :: fetched 1 new logs [11-07-2022 16:41:02]2190: WAF :: fetched 2 new logs [11-07-2022 16:41:02]2190: Checking for user cron vulnerabilities [11-07-2022 16:42:01]5342: WAF :: fetched 5 new logs [11-07-2022 16:43:01]9240: WAF :: fetched 9 new logs [11-07-2022 16:44:02]13066: Checking ditributed CMS bruteforce attacks [11-07-2022 16:45:02]16280: WAF :: fetched 1 new logs [11-07-2022 16:46:01]19764: WAF :: fetched 3 new logs [11-07-2022 16:47:02]23401: httpd.conf changed. Refreshing watchlist. [11-07-2022 16:47:03]23399: WAF :: fetched 3 new logs [11-07-2022 16:48:02]26922: WAF :: fetched 2 new logs [11-07-2022 16:51:02]4892: httpd.conf changed. Refreshing watchlist. [11-07-2022 16:56:01]23994: httpd.conf changed. Refreshing watchlist. [11-07-2022 17:00:01]5618: httpd.conf changed. Refreshing watchlist. [11-07-2022 17:04:02]20315: WAF :: fetched 1 new logs [11-07-2022 17:07:02]30797: WAF :: fetched 1 new logs [11-07-2022 17:12:01]15538: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657570321 [11-07-2022 17:12:01]15538: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 17:12:03]15538: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 17:12:04]15538: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-1712/20220711-171201-YsyEESeo9hW2m18NhRRkOwAAABA [11-07-2022 17:12:04]15538: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 17:12:04]15538: WAF :: fetched 1 new logs [11-07-2022 17:13:01]18976: WAF :: fetched 1 new logs [11-07-2022 17:16:02]29652: WAF :: fetched 1 new logs [11-07-2022 17:23:01]20704: WAF :: fetched 1 new logs [11-07-2022 17:24:02]24639: WAF :: fetched 3 new logs [11-07-2022 17:25:01]27984: WAF :: fetched 2 new logs [11-07-2022 17:31:02]15965: WAF :: fetched 2 new logs [11-07-2022 17:35:01]30111: WAF :: fetched 4 new logs [11-07-2022 17:36:02]1171: WAF :: fetched 2 new logs [11-07-2022 17:41:03]18245: WAF :: fetched 1 new logs [11-07-2022 17:41:03]18245: Checking for user cron vulnerabilities [11-07-2022 17:42:02]21737: WAF :: fetched 1 new logs [11-07-2022 17:43:01]24806: WAF :: fetched 1 new logs [11-07-2022 17:44:02]28463: Checking ditributed CMS bruteforce attacks [11-07-2022 17:46:01]2816: WAF :: fetched 1 new logs [11-07-2022 17:47:02]6237: WAF :: fetched 2 new logs [11-07-2022 17:48:02]9500: WAF :: fetched 3 new logs [11-07-2022 17:49:01]12775: WAF :: fetched 3 new logs [11-07-2022 17:50:02]16049: WAF :: fetched 2 new logs [11-07-2022 17:56:02]4620: WAF :: fetched 1 new logs [11-07-2022 18:03:01]28258: WAF :: fetched 2 new logs [11-07-2022 18:06:01]6504: WAF :: fetched 1 new logs [11-07-2022 18:09:02]16446: WAF :: fetched 2 new logs [11-07-2022 18:12:02]26733: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657573922 [11-07-2022 18:12:02]26733: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 18:12:04]26733: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 18:12:04]26733: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-1812/20220711-181202-YsySIotlEMMAqA6zdYKBawAAABg [11-07-2022 18:12:04]26733: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 18:12:05]26733: WAF :: fetched 1 new logs [11-07-2022 18:22:01]28252: WAF :: fetched 2 new logs [11-07-2022 18:25:01]6209: WAF :: fetched 1 new logs [11-07-2022 18:27:02]12878: WAF :: fetched 6 new logs [11-07-2022 18:28:01]16115: WAF :: fetched 1 new logs [11-07-2022 18:33:03]326: WAF :: fetched 1 new logs [11-07-2022 18:36:02]10855: WAF :: fetched 1 new logs [11-07-2022 18:40:01]24218: WAF :: fetched 1 new logs [11-07-2022 18:41:02]27612: Checking for user cron vulnerabilities [11-07-2022 18:44:02]5153: Checking ditributed CMS bruteforce attacks [11-07-2022 18:45:01]8156: WAF :: fetched 1 new logs [11-07-2022 18:49:02]21973: WAF :: fetched 1 new logs [11-07-2022 18:52:01]32088: WAF :: fetched 1 new logs [11-07-2022 18:53:01]2939: WAF :: fetched 3 new logs [11-07-2022 18:55:02]9652: WAF :: fetched 1 new logs [11-07-2022 18:56:01]13407: WAF :: fetched 6 new logs [11-07-2022 18:58:02]20189: WAF :: fetched 1 new logs [11-07-2022 19:03:01]1294: httpd.conf changed. Refreshing watchlist. [11-07-2022 19:05:01]8014: WAF :: fetched 3 new logs [11-07-2022 19:12:02]31299: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657577522 [11-07-2022 19:12:02]31299: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 19:12:04]31299: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 19:12:05]31299: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-1912/20220711-191202-YsygMgoFsKfcOD7zh9jTsAAAAAk [11-07-2022 19:12:05]31299: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 19:12:05]31299: WAF :: fetched 2 new logs [11-07-2022 19:15:03]9411: WAF :: fetched 4 new logs [11-07-2022 19:22:02]32351: WAF :: fetched 3 new logs [11-07-2022 19:23:02]3352: WAF :: fetched 3 new logs [11-07-2022 19:24:01]7273: WAF :: fetched 2 new logs [11-07-2022 19:25:02]10493: WAF :: fetched 4 new logs [11-07-2022 19:26:01]13822: WAF :: fetched 3 new logs [11-07-2022 19:27:01]17251: WAF :: fetched 3 new logs [11-07-2022 19:31:02]30574: WAF :: fetched 2 new logs [11-07-2022 19:32:02]1622: WAF :: fetched 1 new logs [11-07-2022 19:34:02]8998: WAF :: fetched 2 new logs [11-07-2022 19:35:01]12288: WAF :: fetched 2 new logs [11-07-2022 19:36:02]15618: WAF :: fetched 3 new logs [11-07-2022 19:37:01]19191: WAF :: fetched 1 new logs [11-07-2022 19:38:01]22452: WAF :: fetched 1 new logs [11-07-2022 19:41:01]32227: Checking for user cron vulnerabilities [11-07-2022 19:44:02]10401: Checking ditributed CMS bruteforce attacks [11-07-2022 19:45:01]: Checking for definition updates [11-07-2022 19:59:02]28221: WAF :: fetched 1 new logs [11-07-2022 20:00:02]31134: WAF :: fetched 2 new logs [11-07-2022 20:01:01]2553: WAF :: fetched 1 new logs [11-07-2022 20:02:01]6005: WAF :: fetched 2 new logs [11-07-2022 20:03:02]9453: WAF :: fetched 5 new logs [11-07-2022 20:05:02]16395: WAF :: fetched 3 new logs [11-07-2022 20:06:01]19721: WAF :: fetched 1 new logs [11-07-2022 20:07:02]23134: WAF :: fetched 2 new logs [11-07-2022 20:09:01]29685: WAF :: fetched 1 new logs [11-07-2022 20:11:01]3940: WAF :: fetched 6 new logs [11-07-2022 20:12:02]7458: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657581122 [11-07-2022 20:12:02]7458: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 20:12:04]7458: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 20:12:05]7458: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-2012/20220711-201202-YsyuQnCkPmm3Smh3fgt3YgAAAAg [11-07-2022 20:12:05]7458: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-07-2022 20:12:06]7458: WAF :: fetched 9 new logs [11-07-2022 20:13:02]10785: WAF :: fetched 1 new logs [11-07-2022 20:15:02]17799: WAF :: fetched 1 new logs [11-07-2022 20:17:01]24032: WAF :: fetched 1 new logs [11-07-2022 20:19:02]30510: WAF :: fetched 1 new logs [11-07-2022 20:20:02]1427: WAF :: fetched 3 new logs [11-07-2022 20:21:01]4734: WAF :: fetched 4 new logs [11-07-2022 20:29:02]31710: WAF :: fetched 1 new logs [11-07-2022 20:37:02]26372: WAF :: fetched 2 new logs [11-07-2022 20:38:01]29610: WAF :: fetched 2 new logs [11-07-2022 20:39:02]388: WAF :: fetched 1 new logs [11-07-2022 20:40:02]3784: WAF :: fetched 3 new logs [11-07-2022 20:41:01]7246: WAF :: fetched 1 new logs [11-07-2022 20:41:01]7246: Checking for user cron vulnerabilities [11-07-2022 20:44:01]17034: Checking ditributed CMS bruteforce attacks [11-07-2022 20:47:02]27409: WAF :: fetched 2 new logs [11-07-2022 20:49:01]1433: WAF :: fetched 5 new logs [11-07-2022 20:50:02]4686: WAF :: fetched 1 new logs [11-07-2022 20:51:02]8139: WAF :: fetched 1 new logs [11-07-2022 20:56:02]24849: WAF :: fetched 3 new logs [11-07-2022 20:57:01]28202: WAF :: fetched 1 new logs [11-07-2022 21:00:01]5319: WAF :: fetched 3 new logs [11-07-2022 21:01:02]9172: WAF :: fetched 3 new logs [11-07-2022 21:03:02]15808: WAF :: fetched 1 new logs [11-07-2022 21:05:01]22359: WAF :: fetched 2 new logs [11-07-2022 21:08:03]32638: WAF :: fetched 2 new logs [11-07-2022 21:09:01]3493: WAF :: fetched 4 new logs [11-07-2022 21:10:02]6856: WAF :: fetched 5 new logs [11-07-2022 21:11:01]10143: WAF :: fetched 11 new logs [11-07-2022 21:12:02]13311: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657584722 [11-07-2022 21:12:02]13311: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 21:12:04]13311: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 21:12:04]13311: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-2112/20220711-211202-Ysy8UlbwhVTQ5V2fPW7OkQAAAAM [11-07-2022 21:12:04]13311: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 21:12:04]13311: WAF :: fetched 67 new logs [11-07-2022 21:17:01]29852: WAF :: fetched 1 new logs [11-07-2022 21:28:02]2243: WAF :: fetched 3 new logs [11-07-2022 21:29:01]5425: WAF :: fetched 3 new logs [11-07-2022 21:38:01]3483: WAF :: fetched 1 new logs [11-07-2022 21:41:01]13450: WAF :: fetched 3 new logs [11-07-2022 21:41:01]13450: Checking for user cron vulnerabilities [11-07-2022 21:42:02]16734: WAF :: fetched 1 new logs [11-07-2022 21:44:02]23373: Checking ditributed CMS bruteforce attacks [11-07-2022 21:45:01]26645: WAF :: fetched 1 new logs [11-07-2022 21:46:01]29977: httpd.conf changed. Refreshing watchlist. [11-07-2022 21:47:02]1402: WAF :: fetched 4 new logs [11-07-2022 21:47:02]1405: httpd.conf changed. Refreshing watchlist. [11-07-2022 21:49:01]8131: httpd.conf changed. Refreshing watchlist. [11-07-2022 21:53:02]21511: WAF :: fetched 2 new logs [11-07-2022 21:53:02]21508: httpd.conf changed. Refreshing watchlist. [11-07-2022 21:54:01]24774: WAF :: fetched 1 new logs [11-07-2022 21:54:01]24775: httpd.conf changed. Refreshing watchlist. [11-07-2022 21:55:02]28118: WAF :: fetched 2 new logs [11-07-2022 21:55:02]28131: httpd.conf changed. Refreshing watchlist. [11-07-2022 22:01:01]15971: WAF :: fetched 7 new logs [11-07-2022 22:01:01]15977: httpd.conf changed. Refreshing watchlist. [11-07-2022 22:02:02]18914: httpd.conf changed. Refreshing watchlist. [11-07-2022 22:02:02]18900: WAF :: fetched 3 new logs [11-07-2022 22:03:02]21681: WAF :: fetched 3 new logs [11-07-2022 22:04:01]24554: WAF :: fetched 2 new logs [11-07-2022 22:05:02]27532: WAF :: fetched 14 new logs [11-07-2022 22:06:02]30445: WAF :: fetched 8 new logs [11-07-2022 22:07:01]949: WAF :: fetched 9 new logs [11-07-2022 22:07:01]963: httpd.conf changed. Refreshing watchlist. [11-07-2022 22:07:09]963: Performing Domain reputation checks [11-07-2022 22:08:01]3733: WAF :: fetched 4 new logs [11-07-2022 22:09:02]6383: WAF :: fetched 4 new logs [11-07-2022 22:10:01]9002: WAF :: fetched 2 new logs [11-07-2022 22:12:02]14351: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657588322 [11-07-2022 22:12:02]14351: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 22:12:04]14351: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 22:12:05]14351: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-2212/20220711-221202-YszKYi8e2Blc17vc0YBc4wAAABs [11-07-2022 22:12:05]14351: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 22:12:05]14351: WAF :: fetched 2 new logs [11-07-2022 22:18:01]30524: WAF :: fetched 2 new logs [11-07-2022 22:20:01]3426: WAF :: fetched 10 new logs [11-07-2022 22:21:01]6289: WAF :: fetched 3 new logs [11-07-2022 22:21:01]6294: httpd.conf changed. Refreshing watchlist. [11-07-2022 22:22:03]8906: WAF :: fetched 3 new logs [11-07-2022 22:23:01]11647: WAF :: fetched 4 new logs [11-07-2022 22:24:02]14305: WAF :: fetched 7 new logs [11-07-2022 22:26:01]19673: WAF :: fetched 3 new logs [11-07-2022 22:28:01]24970: WAF :: fetched 6 new logs [11-07-2022 22:29:01]27569: WAF :: fetched 5 new logs [11-07-2022 22:32:02]3157: WAF :: fetched 1 new logs [11-07-2022 22:32:02]3163: httpd.conf changed. Refreshing watchlist. [11-07-2022 22:35:02]11157: WAF :: fetched 3 new logs [11-07-2022 22:37:02]16451: WAF :: fetched 2 new logs [11-07-2022 22:38:01]19206: WAF :: fetched 1 new logs [11-07-2022 22:40:02]24436: WAF :: fetched 1 new logs [11-07-2022 22:41:01]27097: WAF :: fetched 1 new logs [11-07-2022 22:41:01]27097: Checking for user cron vulnerabilities [11-07-2022 22:43:01]32454: WAF :: fetched 2 new logs [11-07-2022 22:44:01]2653: Checking ditributed CMS bruteforce attacks [11-07-2022 22:44:02]2653: WAF :: fetched 1 new logs [11-07-2022 22:45:04]5292: WAF :: fetched 1 new logs [11-07-2022 22:46:01]7898: WAF :: fetched 2 new logs [11-07-2022 22:47:02]10576: WAF :: fetched 1 new logs [11-07-2022 22:48:01]13326: WAF :: fetched 1 new logs [11-07-2022 22:49:01]16008: WAF :: fetched 5 new logs [11-07-2022 22:50:02]18836: WAF :: fetched 4 new logs [11-07-2022 22:53:01]26792: WAF :: fetched 20 new logs [11-07-2022 22:54:01]29358: WAF :: fetched 30 new logs [11-07-2022 22:55:02]31960: WAF :: fetched 23 new logs [11-07-2022 22:56:01]2210: WAF :: fetched 26 new logs [11-07-2022 22:56:01]2221: httpd.conf changed. Refreshing watchlist. [11-07-2022 22:57:02]4898: WAF :: fetched 30 new logs [11-07-2022 22:57:02]4904: httpd.conf changed. Refreshing watchlist. [11-07-2022 22:58:01]7615: WAF :: fetched 28 new logs [11-07-2022 22:59:01]10355: WAF :: fetched 27 new logs [11-07-2022 22:59:01]10352: httpd.conf changed. Refreshing watchlist. [11-07-2022 23:00:02]12719: WAF :: fetched 16 new logs [11-07-2022 23:01:02]15848: WAF :: fetched 2 new logs [11-07-2022 23:02:01]18661: WAF :: fetched 8 new logs [11-07-2022 23:03:02]21509: WAF :: fetched 3 new logs [11-07-2022 23:03:02]21511: httpd.conf changed. Refreshing watchlist. [11-07-2022 23:05:01]26725: WAF :: fetched 2 new logs [11-07-2022 23:06:02]29564: WAF :: fetched 1 new logs [11-07-2022 23:07:01]32444: WAF :: fetched 1 new logs [11-07-2022 23:07:44]32609: Performed RBL check for 23.111.136.34. [11-07-2022 23:08:01]3041: WAF :: fetched 5 new logs [11-07-2022 23:12:02]13773: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657591922 [11-07-2022 23:12:02]13773: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-07-2022 23:12:04]13773: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-07-2022 23:12:04]13773: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220711/20220711-2312/20220711-231202-YszYcigAXFIlkUd48bWs5AAAABQ [11-07-2022 23:12:04]13773: WAF :: No suitable log file found. Using SQLite.. [11-07-2022 23:12:04]13773: WAF :: fetched 2 new logs [11-07-2022 23:13:01]16464: WAF :: fetched 4 new logs [11-07-2022 23:16:01]24552: WAF :: fetched 1 new logs [11-07-2022 23:17:02]27139: WAF :: fetched 1 new logs [11-07-2022 23:18:04]29842: WAF :: fetched 1 new logs [11-07-2022 23:28:02]24180: WAF :: fetched 2 new logs [11-07-2022 23:29:01]26769: WAF :: fetched 5 new logs [11-07-2022 23:31:01]32002: WAF :: fetched 1 new logs [11-07-2022 23:32:01]2218: WAF :: fetched 1 new logs [11-07-2022 23:33:02]4920: WAF :: fetched 3 new logs [11-07-2022 23:34:01]7489: WAF :: fetched 3 new logs [11-07-2022 23:35:02]10146: WAF :: fetched 4 new logs [11-07-2022 23:36:01]12794: WAF :: fetched 5 new logs [11-07-2022 23:37:01]15398: WAF :: fetched 5 new logs [11-07-2022 23:38:02]18172: WAF :: fetched 4 new logs [11-07-2022 23:39:01]20776: WAF :: fetched 1 new logs [11-07-2022 23:40:01]23413: WAF :: fetched 2 new logs [11-07-2022 23:41:02]26028: WAF :: fetched 1 new logs [11-07-2022 23:41:02]26028: Checking for user cron vulnerabilities [11-07-2022 23:42:01]28653: WAF :: fetched 1 new logs [11-07-2022 23:43:02]31345: WAF :: fetched 4 new logs [11-07-2022 23:44:01]1550: Checking ditributed CMS bruteforce attacks [11-07-2022 23:44:01]1550: WAF :: fetched 2 new logs [11-07-2022 23:45:01]4191: WAF :: fetched 1 new logs [11-07-2022 23:46:02]6892: WAF :: fetched 3 new logs [11-07-2022 23:47:01]9631: WAF :: fetched 3 new logs [11-07-2022 23:47:01]9619: httpd.conf changed. Refreshing watchlist. [11-07-2022 23:48:02]12391: WAF :: fetched 11 new logs [11-07-2022 23:49:01]15019: WAF :: fetched 1 new logs [11-07-2022 23:54:01]28648: httpd.conf changed. Refreshing watchlist. [11-07-2022 23:55:01]32539: WAF :: fetched 36 new logs [11-07-2022 23:56:02]2771: WAF :: fetched 3 new logs [11-07-2022 23:58:02]7999: WAF :: fetched 1 new logs [11-07-2022 23:59:02]10600: WAF :: fetched 2 new logs [12-07-2022 00:01:04]16105: Sending daily report for July 12, 2022 [12-07-2022 00:02:02]18844: WAF :: fetched 1 new logs [12-07-2022 00:05:02]26791: Deleted 0 entries older than 6 MONTH from scanner_logs [12-07-2022 00:05:02]26791: Deleted 0 files from Quarantine [12-07-2022 00:06:01]29437: WAF :: fetched 1 new logs [12-07-2022 00:08:02]2366: WAF :: fetched 11 new logs [12-07-2022 00:08:02]2370: httpd.conf changed. Refreshing watchlist. [12-07-2022 00:09:01]5113: WAF :: fetched 2 new logs [12-07-2022 00:09:01]5116: httpd.conf changed. Refreshing watchlist. [12-07-2022 00:10:02]7895: WAF :: fetched 2 new logs [12-07-2022 00:10:02]7894: httpd.conf changed. Refreshing watchlist. [12-07-2022 00:11:01]10634: WAF :: fetched 2 new logs [12-07-2022 00:11:01]10632: httpd.conf changed. Refreshing watchlist. [12-07-2022 00:12:02]13289: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657595522 [12-07-2022 00:12:02]13289: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 00:12:04]13289: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 00:12:05]13289: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-0012/20220712-001202-Yszmgk4YMADe1RBdQGeNxwAAABM [12-07-2022 00:12:05]13289: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-07-2022 00:12:05]13289: WAF :: fetched 2 new logs [12-07-2022 00:13:01]16162: WAF :: fetched 2 new logs [12-07-2022 00:14:01]19140: WAF :: fetched 1 new logs [12-07-2022 00:16:01]24952: WAF :: fetched 1 new logs [12-07-2022 00:20:01]3274: WAF :: fetched 3 new logs [12-07-2022 00:21:02]5976: WAF :: fetched 3 new logs [12-07-2022 00:23:02]11332: WAF :: fetched 1 new logs [12-07-2022 00:25:01]16529: WAF :: fetched 3 new logs [12-07-2022 00:27:02]21939: WAF :: fetched 2 new logs [12-07-2022 00:28:02]24630: WAF :: fetched 8 new logs [12-07-2022 00:29:01]27254: WAF :: fetched 3 new logs [12-07-2022 00:31:02]32579: WAF :: fetched 1 new logs [12-07-2022 00:33:02]5704: WAF :: fetched 1 new logs [12-07-2022 00:34:02]8280: WAF :: fetched 1 new logs [12-07-2022 00:35:01]10915: WAF :: fetched 2 new logs [12-07-2022 00:37:01]16177: WAF :: fetched 2 new logs [12-07-2022 00:38:02]18978: WAF :: fetched 11 new logs [12-07-2022 00:39:02]21511: WAF :: fetched 24 new logs [12-07-2022 00:40:01]24108: WAF :: fetched 8 new logs [12-07-2022 00:41:02]26804: httpd.conf changed. Refreshing watchlist. [12-07-2022 00:41:02]26791: Checking for user cron vulnerabilities [12-07-2022 00:42:01]29414: WAF :: fetched 20 new logs [12-07-2022 00:43:01]32055: WAF :: fetched 2 new logs [12-07-2022 00:44:02]2314: Checking ditributed CMS bruteforce attacks [12-07-2022 00:44:02]2314: WAF :: fetched 1 new logs [12-07-2022 00:45:01]: Checking for software updates [12-07-2022 00:45:01]4972: httpd.conf changed. Refreshing watchlist. [12-07-2022 00:45:01]4969: WAF :: fetched 2 new logs [12-07-2022 00:46:01]7651: WAF :: fetched 2 new logs [12-07-2022 00:47:02]10350: WAF :: fetched 8 new logs [12-07-2022 00:48:03]13035: WAF :: fetched 6 new logs [12-07-2022 00:49:01]15722: httpd.conf changed. Refreshing watchlist. [12-07-2022 00:49:01]15726: WAF :: fetched 4 new logs [12-07-2022 00:50:02]18448: WAF :: fetched 2 new logs [12-07-2022 00:51:01]21103: WAF :: fetched 3 new logs [12-07-2022 00:53:02]26452: httpd.conf changed. Refreshing watchlist. [12-07-2022 00:53:02]26437: WAF :: fetched 3 new logs [12-07-2022 00:56:02]2247: WAF :: fetched 3 new logs [12-07-2022 00:57:01]4927: httpd.conf changed. Refreshing watchlist. [12-07-2022 00:57:01]4928: WAF :: fetched 1 new logs [12-07-2022 00:58:02]7685: WAF :: fetched 6 new logs [12-07-2022 00:59:01]10500: WAF :: fetched 1 new logs [12-07-2022 01:00:02]13033: WAF :: fetched 1 new logs [12-07-2022 01:01:02]16734: httpd.conf changed. Refreshing watchlist. [12-07-2022 01:01:02]16738: WAF :: fetched 2 new logs [12-07-2022 01:02:01]19741: WAF :: fetched 2 new logs [12-07-2022 01:03:02]22524: WAF :: fetched 14 new logs [12-07-2022 01:04:02]26974: WAF :: fetched 10 new logs [12-07-2022 01:05:03]30437: WAF :: fetched 2 new logs [12-07-2022 01:07:02]3726: WAF :: fetched 2 new logs [12-07-2022 01:08:01]6504: WAF :: fetched 6 new logs [12-07-2022 01:12:01]21130: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657599121 [12-07-2022 01:12:02]21130: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 01:12:04]21130: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 01:12:04]21130: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-0112/20220712-011202-Ysz0kjubUMSNVZZ7C5YA7QAAAAw [12-07-2022 01:12:04]21130: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 01:12:04]21130: WAF :: fetched 149 new logs [12-07-2022 01:17:01]2798: WAF :: fetched 7 new logs [12-07-2022 01:18:01]5984: WAF :: fetched 9 new logs [12-07-2022 01:19:02]9375: WAF :: fetched 8 new logs [12-07-2022 01:20:01]12559: WAF :: fetched 1 new logs [12-07-2022 01:21:01]15711: WAF :: fetched 2 new logs [12-07-2022 01:22:01]18730: WAF :: fetched 2 new logs [12-07-2022 01:23:01]21528: WAF :: fetched 1 new logs [12-07-2022 01:24:02]24490: WAF :: fetched 3 new logs [12-07-2022 01:25:01]27099: WAF :: fetched 3 new logs [12-07-2022 01:27:02]312: WAF :: fetched 7 new logs [12-07-2022 01:28:01]3215: WAF :: fetched 7 new logs [12-07-2022 01:29:02]6071: WAF :: fetched 2 new logs [12-07-2022 01:30:02]8686: WAF :: fetched 2 new logs [12-07-2022 01:32:01]14637: WAF :: fetched 1 new logs [12-07-2022 01:36:04]25932: WAF :: fetched 2 new logs [12-07-2022 01:38:02]31304: WAF :: fetched 6 new logs [12-07-2022 01:39:01]1832: WAF :: fetched 1 new logs [12-07-2022 01:40:02]4454: WAF :: fetched 1 new logs [12-07-2022 01:41:01]7232: WAF :: fetched 3 new logs [12-07-2022 01:41:01]7232: Checking for user cron vulnerabilities [12-07-2022 01:43:02]13073: WAF :: fetched 22 new logs [12-07-2022 01:44:01]15807: Checking ditributed CMS bruteforce attacks [12-07-2022 01:44:01]15807: WAF :: fetched 18 new logs [12-07-2022 01:45:02]: Checking for definition updates [12-07-2022 01:45:02]18601: WAF :: fetched 5 new logs [12-07-2022 01:46:01]21577: WAF :: fetched 1 new logs [12-07-2022 01:47:01]24493: WAF :: fetched 6 new logs [12-07-2022 01:48:02]27282: WAF :: fetched 1 new logs [12-07-2022 01:50:01]32758: WAF :: fetched 2 new logs [12-07-2022 01:52:01]5651: WAF :: fetched 2 new logs [12-07-2022 01:53:02]8505: WAF :: fetched 12 new logs [12-07-2022 01:54:01]11134: WAF :: fetched 7 new logs [12-07-2022 02:02:01]532: WAF :: fetched 2 new logs [12-07-2022 02:03:02]3183: WAF :: fetched 2 new logs [12-07-2022 02:04:01]6035: WAF :: fetched 1 new logs [12-07-2022 02:05:01]8859: WAF :: fetched 2 new logs [12-07-2022 02:07:01]14368: WAF :: fetched 6 new logs [12-07-2022 02:08:01]17036: WAF :: fetched 5 new logs [12-07-2022 02:10:01]22873: WAF :: fetched 2 new logs [12-07-2022 02:11:02]25536: WAF :: fetched 4 new logs [12-07-2022 02:12:02]28145: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657602722 [12-07-2022 02:12:02]28145: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 02:12:04]28145: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 02:12:05]28145: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-0212/20220712-021202-Ys0Colgv5BHNA3QF5Gw5oQAAAAI [12-07-2022 02:12:05]28145: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 02:12:05]28145: WAF :: fetched 2 new logs [12-07-2022 02:15:01]3713: WAF :: fetched 5 new logs [12-07-2022 02:16:02]6410: WAF :: fetched 2 new logs [12-07-2022 02:17:02]8966: WAF :: fetched 1 new logs [12-07-2022 02:18:01]11542: WAF :: fetched 2 new logs [12-07-2022 02:19:01]14257: WAF :: fetched 1 new logs [12-07-2022 02:22:01]22428: WAF :: fetched 1 new logs [12-07-2022 02:23:01]25103: WAF :: fetched 6 new logs [12-07-2022 02:24:02]28297: WAF :: fetched 5 new logs [12-07-2022 02:27:01]4698: WAF :: fetched 5 new logs [12-07-2022 02:28:02]7896: WAF :: fetched 3 new logs [12-07-2022 02:29:02]10664: WAF :: fetched 2 new logs [12-07-2022 02:30:02]13352: WAF :: fetched 1 new logs [12-07-2022 02:31:01]16073: WAF :: fetched 3 new logs [12-07-2022 02:33:01]21590: WAF :: fetched 1 new logs [12-07-2022 02:35:01]26867: WAF :: fetched 1 new logs [12-07-2022 02:36:02]29506: WAF :: fetched 2 new logs [12-07-2022 02:37:02]32067: WAF :: fetched 1 new logs [12-07-2022 02:38:01]2262: WAF :: fetched 1 new logs [12-07-2022 02:39:02]4966: WAF :: fetched 1 new logs [12-07-2022 02:40:02]7544: WAF :: fetched 1 new logs [12-07-2022 02:41:01]10181: WAF :: fetched 1 new logs [12-07-2022 02:41:01]10181: Checking for user cron vulnerabilities [12-07-2022 02:42:02]12789: WAF :: fetched 1 new logs [12-07-2022 02:43:02]15333: WAF :: fetched 2 new logs [12-07-2022 02:44:01]18088: Checking ditributed CMS bruteforce attacks [12-07-2022 02:44:05]18088: WAF :: fetched 1 new logs [12-07-2022 02:45:02]20690: WAF :: fetched 1 new logs [12-07-2022 02:47:01]25965: WAF :: fetched 6 new logs [12-07-2022 02:48:02]28587: WAF :: fetched 6 new logs [12-07-2022 02:49:02]31169: WAF :: fetched 1 new logs [12-07-2022 02:50:01]1363: WAF :: fetched 2 new logs [12-07-2022 02:51:01]4007: WAF :: fetched 3 new logs [12-07-2022 02:53:02]9153: Updated license status via CDN [12-07-2022 02:54:02]11835: WAF :: fetched 2 new logs [12-07-2022 02:55:01]14412: WAF :: fetched 1 new logs [12-07-2022 02:57:02]19701: WAF :: fetched 3 new logs [12-07-2022 02:58:01]22231: WAF :: fetched 2 new logs [12-07-2022 03:00:21]27915: Found and updated 32 CMS installations [12-07-2022 03:01:01]31681: httpd.conf changed. Refreshing watchlist. [12-07-2022 03:01:49]27915: Wordpress installation #21 easy2speak.com.br has errors [12-07-2022 03:03:01]5006: WAF :: fetched 4 new logs [12-07-2022 03:03:31]27915: Wordpress installation #40 guardian-ba.com.br has errors [12-07-2022 03:03:37]27915: Sending CMS version vulnerability report emails to cpanel users [12-07-2022 03:03:42]27915: Checking wordpress installations for suspicious directories [12-07-2022 03:04:01]8114: WAF :: fetched 2 new logs [12-07-2022 03:04:33]5024: Sending CMS version vulnerability report emails to cpanel users [12-07-2022 03:04:36]5024: Checking wordpress installations for suspicious directories [12-07-2022 03:06:02]13657: WAF :: fetched 3 new logs [12-07-2022 03:07:01]16221: WAF :: fetched 13 new logs [12-07-2022 03:08:01]18878: WAF :: fetched 1 new logs [12-07-2022 03:12:02]29728: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657606322 [12-07-2022 03:12:02]29728: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 03:12:04]29728: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 03:12:05]29728: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-0312/20220712-031202-Ys0QskeY4-ezLVUb91p6DwAAAAk [12-07-2022 03:12:05]29728: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 03:12:05]29728: WAF :: fetched 4 new logs [12-07-2022 03:13:01]32376: WAF :: fetched 2 new logs [12-07-2022 03:15:01]5607: WAF :: fetched 3 new logs [12-07-2022 03:22:02]25246: WAF :: fetched 1 new logs [12-07-2022 03:25:02]912: WAF :: fetched 2 new logs [12-07-2022 03:27:02]6156: WAF :: fetched 13 new logs [12-07-2022 03:28:01]5592: WAF :: fetched 9 new logs [12-07-2022 03:29:02]23712: WAF :: fetched 4 new logs [12-07-2022 03:30:01]7352: WAF :: fetched 1 new logs [12-07-2022 03:32:02]22954: WAF :: fetched 1 new logs [12-07-2022 03:33:02]25562: WAF :: fetched 1 new logs [12-07-2022 03:35:02]30747: WAF :: fetched 1 new logs [12-07-2022 03:38:02]6200: WAF :: fetched 1 new logs [12-07-2022 03:40:02]11493: WAF :: fetched 2 new logs [12-07-2022 03:41:01]14447: WAF :: fetched 1 new logs [12-07-2022 03:41:01]14447: Checking for user cron vulnerabilities [12-07-2022 03:44:01]22693: Checking ditributed CMS bruteforce attacks [12-07-2022 03:44:05]22693: WAF :: fetched 1 new logs [12-07-2022 03:45:02]25472: WAF :: fetched 3 new logs [12-07-2022 03:46:01]28262: WAF :: fetched 1 new logs [12-07-2022 03:47:01]31036: WAF :: fetched 7 new logs [12-07-2022 03:48:02]1495: WAF :: fetched 3 new logs [12-07-2022 03:50:02]7149: WAF :: fetched 2 new logs [12-07-2022 03:51:02]10014: WAF :: fetched 1 new logs [12-07-2022 03:54:01]17949: WAF :: fetched 2 new logs [12-07-2022 03:55:02]20643: WAF :: fetched 1 new logs [12-07-2022 03:56:01]23254: WAF :: fetched 1 new logs [12-07-2022 03:57:02]25833: WAF :: fetched 3 new logs [12-07-2022 04:00:01]1007: WAF :: fetched 1 new logs [12-07-2022 04:01:01]4066: WAF :: fetched 1 new logs [12-07-2022 04:02:02]6721: WAF :: fetched 2 new logs [12-07-2022 04:05:01]14539: WAF :: fetched 1 new logs [12-07-2022 04:06:02]17188: WAF :: fetched 6 new logs [12-07-2022 04:07:01]19848: WAF :: fetched 7 new logs [12-07-2022 04:08:02]22439: WAF :: fetched 3 new logs [12-07-2022 04:12:02]565: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657609922 [12-07-2022 04:12:02]565: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 04:12:04]565: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 04:12:05]565: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-0412/20220712-041202-Ys0ewgOPRv-uvoOjc2VZWwAAACI [12-07-2022 04:12:05]565: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-07-2022 04:12:06]565: WAF :: fetched 1 new logs [12-07-2022 04:13:01]3240: WAF :: fetched 5 new logs [12-07-2022 04:14:02]5928: WAF :: fetched 1 new logs [12-07-2022 04:16:01]11338: WAF :: fetched 1 new logs [12-07-2022 04:17:02]14012: WAF :: fetched 2 new logs [12-07-2022 04:18:01]16691: WAF :: fetched 2 new logs [12-07-2022 04:20:01]22096: WAF :: fetched 2 new logs [12-07-2022 04:23:01]29902: WAF :: fetched 13 new logs [12-07-2022 04:24:02]32637: WAF :: fetched 8 new logs [12-07-2022 04:25:01]2810: WAF :: fetched 2 new logs [12-07-2022 04:26:02]5453: WAF :: fetched 8 new logs [12-07-2022 04:27:02]8022: WAF :: fetched 6 new logs [12-07-2022 04:28:02]10610: WAF :: fetched 2 new logs [12-07-2022 04:29:01]13299: WAF :: fetched 3 new logs [12-07-2022 04:30:02]15965: WAF :: fetched 2 new logs [12-07-2022 04:31:02]18720: WAF :: fetched 2 new logs [12-07-2022 04:32:01]21313: WAF :: fetched 2 new logs [12-07-2022 04:34:01]26559: WAF :: fetched 2 new logs [12-07-2022 04:36:03]32306: WAF :: fetched 3 new logs [12-07-2022 04:37:01]2828: WAF :: fetched 1 new logs [12-07-2022 04:39:01]8430: WAF :: fetched 16 new logs [12-07-2022 04:40:02]11127: WAF :: fetched 3 new logs [12-07-2022 04:41:02]13783: Checking for user cron vulnerabilities [12-07-2022 04:44:01]21691: Checking ditributed CMS bruteforce attacks [12-07-2022 04:45:01]24260: WAF :: fetched 2 new logs [12-07-2022 04:46:02]26892: WAF :: fetched 5 new logs [12-07-2022 04:47:03]29480: WAF :: fetched 5 new logs [12-07-2022 04:48:01]32086: WAF :: fetched 4 new logs [12-07-2022 04:49:02]2365: WAF :: fetched 2 new logs [12-07-2022 04:50:02]4957: WAF :: fetched 1 new logs [12-07-2022 04:54:02]15480: WAF :: fetched 2 new logs [12-07-2022 04:55:01]18118: WAF :: fetched 3 new logs [12-07-2022 04:57:01]23375: WAF :: fetched 6 new logs [12-07-2022 04:58:02]25994: WAF :: fetched 52 new logs [12-07-2022 04:59:02]28643: WAF :: fetched 6 new logs [12-07-2022 05:01:42]1647: Starting daily scan on files updated in last 24 hrs [12-07-2022 05:03:02]6859: WAF :: fetched 1 new logs [12-07-2022 05:04:01]9540: WAF :: fetched 2 new logs [12-07-2022 05:06:01]14782: WAF :: fetched 8 new logs [12-07-2022 05:07:02]17396: WAF :: fetched 13 new logs [12-07-2022 05:08:02]20047: WAF :: fetched 12 new logs [12-07-2022 05:09:01]22731: WAF :: fetched 2 new logs [12-07-2022 05:11:01]27947: WAF :: fetched 1 new logs [12-07-2022 05:12:02]30588: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657613522 [12-07-2022 05:12:02]30588: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 05:12:04]30588: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 05:12:04]30588: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-0512/20220712-051202-Ys0s0mk46QZ620ibuB4_EAAAAAA [12-07-2022 05:12:04]30588: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-07-2022 05:12:05]30588: WAF :: fetched 1 new logs [12-07-2022 05:13:02]754: WAF :: fetched 1 new logs [12-07-2022 05:14:01]3466: WAF :: fetched 9 new logs [12-07-2022 05:18:02]13865: WAF :: fetched 3 new logs [12-07-2022 05:20:02]19273: WAF :: fetched 1 new logs [12-07-2022 05:22:02]24714: WAF :: fetched 5 new logs [12-07-2022 05:23:02]27373: WAF :: fetched 19 new logs [12-07-2022 05:24:01]30168: WAF :: fetched 1 new logs [12-07-2022 05:26:01]3066: WAF :: fetched 7 new logs [12-07-2022 05:27:01]5699: WAF :: fetched 11 new logs [12-07-2022 05:28:02]8295: WAF :: fetched 3 new logs [12-07-2022 05:29:03]10896: WAF :: fetched 1 new logs [12-07-2022 05:30:02]13530: WAF :: fetched 21 new logs [12-07-2022 05:31:02]16172: WAF :: fetched 1 new logs [12-07-2022 05:32:03]18851: WAF :: fetched 1 new logs [12-07-2022 05:33:02]21445: WAF :: fetched 1 new logs [12-07-2022 05:34:01]24148: WAF :: fetched 6 new logs [12-07-2022 05:35:02]26786: WAF :: fetched 3 new logs [12-07-2022 05:36:02]29399: WAF :: fetched 1 new logs [12-07-2022 05:37:02]32038: WAF :: fetched 21 new logs [12-07-2022 05:39:02]4902: WAF :: fetched 1 new logs [12-07-2022 05:40:03]7580: WAF :: fetched 2 new logs [12-07-2022 05:41:02]10441: Checking for user cron vulnerabilities [12-07-2022 05:42:02]13318: WAF :: fetched 3 new logs [12-07-2022 05:43:02]16235: WAF :: fetched 2 new logs [12-07-2022 05:44:01]19234: Checking ditributed CMS bruteforce attacks [12-07-2022 05:46:01]24563: WAF :: fetched 11 new logs [12-07-2022 05:47:02]27159: WAF :: fetched 7 new logs [12-07-2022 05:48:03]29726: WAF :: fetched 3 new logs [12-07-2022 05:49:02]32450: WAF :: fetched 2 new logs [12-07-2022 05:54:02]13134: WAF :: fetched 3 new logs [12-07-2022 05:57:02]21189: WAF :: fetched 2 new logs [12-07-2022 05:59:02]26411: WAF :: fetched 1 new logs [12-07-2022 06:01:01]31958: WAF :: fetched 8 new logs [12-07-2022 06:02:02]2207: WAF :: fetched 1 new logs [12-07-2022 06:03:01]4800: WAF :: fetched 1 new logs [12-07-2022 06:05:02]10115: WAF :: fetched 2 new logs [12-07-2022 06:06:01]12777: WAF :: fetched 6 new logs [12-07-2022 06:07:02]15402: WAF :: fetched 11 new logs [12-07-2022 06:08:01]18053: WAF :: fetched 1 new logs [12-07-2022 06:09:02]20689: WAF :: fetched 6 new logs [12-07-2022 06:10:02]23387: WAF :: fetched 2 new logs [12-07-2022 06:12:02]28669: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657617122 [12-07-2022 06:12:02]28669: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 06:12:04]28669: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 06:12:04]28669: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-0612/20220712-061202-Ys064ppPlP8f8Nl0DylrlQAAAAQ [12-07-2022 06:12:04]28669: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 06:12:05]28669: WAF :: fetched 332 new logs [12-07-2022 06:14:02]1582: WAF :: fetched 2 new logs [12-07-2022 06:16:02]7014: WAF :: fetched 1 new logs [12-07-2022 06:17:01]9608: WAF :: fetched 3 new logs [12-07-2022 06:18:01]12277: WAF :: fetched 1 new logs [12-07-2022 06:19:02]14892: WAF :: fetched 5 new logs [12-07-2022 06:20:01]17597: WAF :: fetched 3 new logs [12-07-2022 06:23:01]25552: WAF :: fetched 2 new logs [12-07-2022 06:24:02]28173: WAF :: fetched 2 new logs [12-07-2022 06:26:01]1195: WAF :: fetched 8 new logs [12-07-2022 06:27:02]4103: WAF :: fetched 2 new logs [12-07-2022 06:28:01]6813: WAF :: fetched 4 new logs [12-07-2022 06:29:04]9568: WAF :: fetched 6 new logs [12-07-2022 06:35:02]25523: WAF :: fetched 1 new logs [12-07-2022 06:37:01]30750: WAF :: fetched 2 new logs [12-07-2022 06:38:02]971: WAF :: fetched 2 new logs [12-07-2022 06:40:02]6298: WAF :: fetched 2 new logs [12-07-2022 06:41:02]8902: WAF :: fetched 1 new logs [12-07-2022 06:41:02]8902: Checking for user cron vulnerabilities [12-07-2022 06:42:02]11504: WAF :: fetched 4 new logs [12-07-2022 06:43:01]14203: WAF :: fetched 28 new logs [12-07-2022 06:44:02]16842: Checking ditributed CMS bruteforce attacks [12-07-2022 06:44:05]16842: WAF :: fetched 4 new logs [12-07-2022 06:45:01]19736: WAF :: fetched 4 new logs [12-07-2022 06:46:01]22501: WAF :: fetched 10 new logs [12-07-2022 06:47:02]25331: WAF :: fetched 1 new logs [12-07-2022 06:48:01]28265: WAF :: fetched 5 new logs [12-07-2022 06:49:02]31140: WAF :: fetched 1 new logs [12-07-2022 06:50:01]1490: WAF :: fetched 2 new logs [12-07-2022 06:52:02]6772: WAF :: fetched 1 new logs [12-07-2022 06:54:02]11977: WAF :: fetched 1 new logs [12-07-2022 06:55:01]14640: WAF :: fetched 4 new logs [12-07-2022 07:00:02]27558: WAF :: fetched 1 new logs [12-07-2022 07:01:02]30688: WAF :: fetched 3 new logs [12-07-2022 07:03:02]3584: WAF :: fetched 2 new logs [12-07-2022 07:04:01]6125: WAF :: fetched 1 new logs [12-07-2022 07:05:01]8803: WAF :: fetched 3 new logs [12-07-2022 07:06:02]11466: WAF :: fetched 7 new logs [12-07-2022 07:08:02]16619: WAF :: fetched 2 new logs [12-07-2022 07:11:01]24629: WAF :: fetched 1 new logs [12-07-2022 07:12:02]27226: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657620722 [12-07-2022 07:12:02]27226: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 07:12:04]27226: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 07:12:05]27226: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-0712/20220712-071202-Ys1I8lu9PwgoVLxB2iLVqQAAAAw [12-07-2022 07:12:05]27226: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 07:12:06]27226: WAF :: fetched 1 new logs [12-07-2022 07:20:02]15855: WAF :: fetched 1 new logs [12-07-2022 07:21:01]18522: WAF :: fetched 1 new logs [12-07-2022 07:24:01]26319: WAF :: fetched 3 new logs [12-07-2022 07:25:02]29011: WAF :: fetched 3 new logs [12-07-2022 07:26:01]31709: WAF :: fetched 7 new logs [12-07-2022 07:27:01]1925: WAF :: fetched 5 new logs [12-07-2022 07:30:02]9869: WAF :: fetched 1 new logs [12-07-2022 07:32:02]15279: WAF :: fetched 2 new logs [12-07-2022 07:33:01]18055: WAF :: fetched 4 new logs [12-07-2022 07:36:01]26151: WAF :: fetched 1 new logs [12-07-2022 07:37:02]28780: WAF :: fetched 2 new logs [12-07-2022 07:39:01]1534: WAF :: fetched 3 new logs [12-07-2022 07:40:02]4257: WAF :: fetched 1 new logs [12-07-2022 07:41:01]6806: WAF :: fetched 2 new logs [12-07-2022 07:41:01]6806: Checking for user cron vulnerabilities [12-07-2022 07:42:01]9484: WAF :: fetched 2 new logs [12-07-2022 07:43:02]12052: WAF :: fetched 5 new logs [12-07-2022 07:44:01]14629: Checking ditributed CMS bruteforce attacks [12-07-2022 07:45:01]: Checking for definition updates [12-07-2022 07:46:02]20076: WAF :: fetched 5 new logs [12-07-2022 07:47:01]22647: WAF :: fetched 7 new logs [12-07-2022 07:48:02]25291: WAF :: fetched 1 new logs [12-07-2022 07:50:01]30800: WAF :: fetched 2 new logs [12-07-2022 07:51:02]1363: WAF :: fetched 2 new logs [12-07-2022 07:53:03]7142: WAF :: fetched 1 new logs [12-07-2022 07:56:02]15339: WAF :: fetched 2 new logs [12-07-2022 07:58:02]20704: WAF :: fetched 2 new logs [12-07-2022 07:59:01]23257: WAF :: fetched 3 new logs [12-07-2022 08:00:01]25668: WAF :: fetched 3 new logs [12-07-2022 08:02:01]31420: WAF :: fetched 3 new logs [12-07-2022 08:06:02]9623: WAF :: fetched 9 new logs [12-07-2022 08:07:02]12265: WAF :: fetched 5 new logs [12-07-2022 08:08:01]14815: WAF :: fetched 3 new logs [12-07-2022 08:09:02]17425: WAF :: fetched 4 new logs [12-07-2022 08:11:01]22829: WAF :: fetched 1 new logs [12-07-2022 08:12:02]25442: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657624322 [12-07-2022 08:12:02]25442: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 08:12:04]25442: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 08:12:05]25442: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-0812/20220712-081202-Ys1XApbqEzEJcsmq1XbYDwAAABg [12-07-2022 08:12:05]25442: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 08:12:05]25442: WAF :: fetched 6 new logs [12-07-2022 08:13:01]28008: WAF :: fetched 1 new logs [12-07-2022 08:14:01]30649: WAF :: fetched 2 new logs [12-07-2022 08:15:01]936: WAF :: fetched 3 new logs [12-07-2022 08:16:02]3726: WAF :: fetched 1 new logs [12-07-2022 08:18:02]8929: WAF :: fetched 7 new logs [12-07-2022 08:19:01]11463: WAF :: fetched 2 new logs [12-07-2022 08:20:02]14194: WAF :: fetched 2 new logs [12-07-2022 08:21:01]16896: WAF :: fetched 2 new logs [12-07-2022 08:22:01]19584: WAF :: fetched 3 new logs [12-07-2022 08:24:02]24829: WAF :: fetched 2 new logs [12-07-2022 08:26:02]30329: WAF :: fetched 6 new logs [12-07-2022 08:27:01]549: WAF :: fetched 5 new logs [12-07-2022 08:28:01]3264: WAF :: fetched 5 new logs [12-07-2022 08:29:02]5930: WAF :: fetched 1 new logs [12-07-2022 08:30:01]8682: WAF :: fetched 2 new logs [12-07-2022 08:31:01]11424: WAF :: fetched 3 new logs [12-07-2022 08:32:02]14048: WAF :: fetched 4 new logs [12-07-2022 08:33:02]16635: WAF :: fetched 1 new logs [12-07-2022 08:34:01]19470: WAF :: fetched 2 new logs [12-07-2022 08:35:02]22276: WAF :: fetched 4 new logs [12-07-2022 08:36:02]25038: WAF :: fetched 4 new logs [12-07-2022 08:38:02]30498: WAF :: fetched 2 new logs [12-07-2022 08:39:02]689: WAF :: fetched 3 new logs [12-07-2022 08:41:01]6158: Checking for user cron vulnerabilities [12-07-2022 08:42:01]8739: WAF :: fetched 3 new logs [12-07-2022 08:43:02]11382: WAF :: fetched 1 new logs [12-07-2022 08:44:02]14000: Checking ditributed CMS bruteforce attacks [12-07-2022 08:44:05]14000: WAF :: fetched 1 new logs [12-07-2022 08:46:02]19479: WAF :: fetched 12 new logs [12-07-2022 08:49:01]27325: WAF :: fetched 2 new logs [12-07-2022 08:50:02]30024: WAF :: fetched 3 new logs [12-07-2022 08:51:02]32716: WAF :: fetched 1 new logs [12-07-2022 08:52:01]2962: WAF :: fetched 2 new logs [12-07-2022 08:55:01]11502: WAF :: fetched 2 new logs [12-07-2022 08:56:02]14620: WAF :: fetched 2 new logs [12-07-2022 08:57:01]17549: WAF :: fetched 3 new logs [12-07-2022 08:59:02]23114: WAF :: fetched 4 new logs [12-07-2022 09:00:02]25590: WAF :: fetched 4 new logs [12-07-2022 09:05:02]7153: WAF :: fetched 3 new logs [12-07-2022 09:06:01]9800: WAF :: fetched 20 new logs [12-07-2022 09:10:01]20691: WAF :: fetched 5 new logs [12-07-2022 09:11:01]23428: WAF :: fetched 1 new logs [12-07-2022 09:12:01]26104: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657627921 [12-07-2022 09:12:01]26104: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 09:12:03]26104: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 09:12:05]26104: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-0912/20220712-091201-Ys1lEQafvgWP5A-5XXOw1AAAADU [12-07-2022 09:12:05]26104: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 09:12:05]26104: WAF :: fetched 3 new logs [12-07-2022 09:13:01]28757: WAF :: fetched 2 new logs [12-07-2022 09:14:01]31380: WAF :: fetched 1 new logs [12-07-2022 09:15:02]1776: WAF :: fetched 3 new logs [12-07-2022 09:16:01]4632: WAF :: fetched 1 new logs [12-07-2022 09:17:02]7399: WAF :: fetched 3 new logs [12-07-2022 09:18:01]10041: WAF :: fetched 2 new logs [12-07-2022 09:19:02]12705: WAF :: fetched 2 new logs [12-07-2022 09:21:01]18268: WAF :: fetched 3 new logs [12-07-2022 09:23:02]23481: WAF :: fetched 4 new logs [12-07-2022 09:24:02]26198: WAF :: fetched 1 new logs [12-07-2022 09:25:01]28915: WAF :: fetched 4 new logs [12-07-2022 09:26:01]31664: WAF :: fetched 7 new logs [12-07-2022 09:27:01]1925: WAF :: fetched 1 new logs [12-07-2022 09:28:01]4567: WAF :: fetched 2 new logs [12-07-2022 09:30:02]9941: WAF :: fetched 1 new logs [12-07-2022 09:31:01]12725: WAF :: fetched 1 new logs [12-07-2022 09:32:02]15491: WAF :: fetched 1 new logs [12-07-2022 09:34:01]20900: WAF :: fetched 15 new logs [12-07-2022 09:35:01]23766: WAF :: fetched 1 new logs [12-07-2022 09:36:02]26525: WAF :: fetched 5 new logs [12-07-2022 09:37:01]29201: WAF :: fetched 2 new logs [12-07-2022 09:38:01]31859: WAF :: fetched 2 new logs [12-07-2022 09:39:02]2401: WAF :: fetched 1 new logs [12-07-2022 09:40:01]5295: WAF :: fetched 4 new logs [12-07-2022 09:41:02]8144: WAF :: fetched 7 new logs [12-07-2022 09:41:02]8144: Checking for user cron vulnerabilities [12-07-2022 09:42:01]10854: WAF :: fetched 4 new logs [12-07-2022 09:43:02]13596: WAF :: fetched 2 new logs [12-07-2022 09:44:01]16253: Checking ditributed CMS bruteforce attacks [12-07-2022 09:44:06]16253: WAF :: fetched 1 new logs [12-07-2022 09:45:01]19079: WAF :: fetched 8 new logs [12-07-2022 09:46:01]21800: WAF :: fetched 5 new logs [12-07-2022 09:49:02]29722: WAF :: fetched 1 new logs [12-07-2022 09:51:01]2862: WAF :: fetched 1 new logs [12-07-2022 09:52:01]5501: WAF :: fetched 1 new logs [12-07-2022 09:53:02]8239: WAF :: fetched 1 new logs [12-07-2022 09:54:01]10864: WAF :: fetched 3 new logs [12-07-2022 09:55:01]13622: WAF :: fetched 2 new logs [12-07-2022 10:00:02]27469: WAF :: fetched 4 new logs [12-07-2022 10:02:02]1373: WAF :: fetched 2 new logs [12-07-2022 10:03:01]4152: WAF :: fetched 6 new logs [12-07-2022 10:04:01]6925: WAF :: fetched 3 new logs [12-07-2022 10:05:01]9626: WAF :: fetched 1 new logs [12-07-2022 10:06:02]12370: WAF :: fetched 5 new logs [12-07-2022 10:07:01]15012: WAF :: fetched 2 new logs [12-07-2022 10:09:01]20380: WAF :: fetched 4 new logs [12-07-2022 10:11:03]25850: WAF :: fetched 2 new logs [12-07-2022 10:12:02]28508: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657631522 [12-07-2022 10:12:02]28508: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 10:12:04]28508: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 10:12:07]28508: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-1012/20220712-101202-Ys1zInvWzTPA4elL7edaGwAAACU [12-07-2022 10:12:07]28508: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 10:12:07]28508: WAF :: fetched 2 new logs [12-07-2022 10:13:01]31119: WAF :: fetched 1 new logs [12-07-2022 10:15:01]4224: WAF :: fetched 4 new logs [12-07-2022 10:16:02]7047: WAF :: fetched 1 new logs [12-07-2022 10:17:02]9698: WAF :: fetched 4 new logs [12-07-2022 10:18:01]12332: WAF :: fetched 3 new logs [12-07-2022 10:19:02]15054: WAF :: fetched 2 new logs [12-07-2022 10:20:01]17860: WAF :: fetched 3 new logs [12-07-2022 10:21:02]20615: WAF :: fetched 6 new logs [12-07-2022 10:22:01]23275: WAF :: fetched 1 new logs [12-07-2022 10:23:01]25947: WAF :: fetched 1 new logs [12-07-2022 10:24:01]28666: WAF :: fetched 2 new logs [12-07-2022 10:25:01]31432: WAF :: fetched 10 new logs [12-07-2022 10:26:01]1813: WAF :: fetched 3 new logs [12-07-2022 10:29:01]9747: WAF :: fetched 1 new logs [12-07-2022 10:32:01]17883: WAF :: fetched 1 new logs [12-07-2022 10:34:02]23342: WAF :: fetched 3 new logs [12-07-2022 10:36:01]29003: WAF :: fetched 3 new logs [12-07-2022 10:37:02]31675: WAF :: fetched 2 new logs [12-07-2022 10:38:01]1885: WAF :: fetched 1 new logs [12-07-2022 10:39:02]4557: WAF :: fetched 1 new logs [12-07-2022 10:41:01]10021: WAF :: fetched 4 new logs [12-07-2022 10:41:01]10021: Checking for user cron vulnerabilities [12-07-2022 10:42:02]12716: WAF :: fetched 2 new logs [12-07-2022 10:44:02]18142: Checking ditributed CMS bruteforce attacks [12-07-2022 10:44:05]18142: WAF :: fetched 3 new logs [12-07-2022 10:45:01]20805: WAF :: fetched 8 new logs [12-07-2022 10:48:02]29096: WAF :: fetched 5 new logs [12-07-2022 10:49:02]31840: WAF :: fetched 6 new logs [12-07-2022 10:50:01]2094: WAF :: fetched 3 new logs [12-07-2022 10:51:01]4954: WAF :: fetched 1 new logs [12-07-2022 10:52:02]7649: WAF :: fetched 1 new logs [12-07-2022 10:53:01]10310: WAF :: fetched 2 new logs [12-07-2022 10:55:02]15746: WAF :: fetched 4 new logs [12-07-2022 10:56:01]18630: WAF :: fetched 3 new logs [12-07-2022 10:57:01]21398: WAF :: fetched 1 new logs [12-07-2022 10:58:02]24049: WAF :: fetched 1 new logs [12-07-2022 10:59:01]26778: WAF :: fetched 6 new logs [12-07-2022 11:00:02]29222: WAF :: fetched 4 new logs [12-07-2022 11:01:02]32526: WAF :: fetched 4 new logs [12-07-2022 11:02:01]2865: WAF :: fetched 1 new logs [12-07-2022 11:08:08]16727: Performed RBL check for 23.111.136.34. [12-07-2022 11:10:01]24778: WAF :: fetched 1 new logs [12-07-2022 11:12:02]30377: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657635122 [12-07-2022 11:12:02]30377: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 11:12:04]30377: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 11:12:04]30377: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-1112/20220712-111202-Ys2BMt3gVXf4h02uBN0D4AAAAAs [12-07-2022 11:12:04]30377: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 11:12:04]30377: WAF :: fetched 3 new logs [12-07-2022 11:13:01]600: WAF :: fetched 4 new logs [12-07-2022 11:14:02]3466: WAF :: fetched 3 new logs [12-07-2022 11:15:01]6197: WAF :: fetched 1 new logs [12-07-2022 11:16:01]9104: WAF :: fetched 2 new logs [12-07-2022 11:17:02]11792: WAF :: fetched 3 new logs [12-07-2022 11:18:01]14497: WAF :: fetched 1 new logs [12-07-2022 11:19:02]17162: WAF :: fetched 1 new logs [12-07-2022 11:20:02]19950: WAF :: fetched 2 new logs [12-07-2022 11:21:01]22812: WAF :: fetched 2 new logs [12-07-2022 11:22:02]25535: WAF :: fetched 3 new logs [12-07-2022 11:23:01]28234: WAF :: fetched 3 new logs [12-07-2022 11:24:01]30890: WAF :: fetched 3 new logs [12-07-2022 11:25:02]1196: WAF :: fetched 6 new logs [12-07-2022 11:26:03]3993: WAF :: fetched 5 new logs [12-07-2022 11:27:01]6681: WAF :: fetched 3 new logs [12-07-2022 11:28:01]9345: WAF :: fetched 2 new logs [12-07-2022 11:29:01]12056: WAF :: fetched 3 new logs [12-07-2022 11:31:01]17561: WAF :: fetched 2 new logs [12-07-2022 11:32:02]20404: WAF :: fetched 1 new logs [12-07-2022 11:33:01]23066: WAF :: fetched 2 new logs [12-07-2022 11:35:02]28501: WAF :: fetched 1 new logs [12-07-2022 11:39:01]6993: WAF :: fetched 1 new logs [12-07-2022 11:40:01]9802: WAF :: fetched 3 new logs [12-07-2022 11:41:01]12702: WAF :: fetched 4 new logs [12-07-2022 11:41:01]12702: Checking for user cron vulnerabilities [12-07-2022 11:43:02]18105: WAF :: fetched 3 new logs [12-07-2022 11:44:02]20940: Checking ditributed CMS bruteforce attacks [12-07-2022 11:44:04]20940: WAF :: fetched 2 new logs [12-07-2022 11:45:02]23666: WAF :: fetched 9 new logs [12-07-2022 11:46:02]26580: WAF :: fetched 2 new logs [12-07-2022 11:48:01]32160: WAF :: fetched 2 new logs [12-07-2022 11:49:01]2482: WAF :: fetched 5 new logs [12-07-2022 11:50:02]5220: WAF :: fetched 6 new logs [12-07-2022 11:51:01]8088: WAF :: fetched 3 new logs [12-07-2022 11:52:03]10807: WAF :: fetched 3 new logs [12-07-2022 11:53:02]13529: WAF :: fetched 2 new logs [12-07-2022 11:54:01]16228: WAF :: fetched 2 new logs [12-07-2022 11:56:02]21922: WAF :: fetched 5 new logs [12-07-2022 11:58:02]27333: WAF :: fetched 1 new logs [12-07-2022 11:59:01]30075: WAF :: fetched 3 new logs [12-07-2022 12:01:01]3500: WAF :: fetched 6 new logs [12-07-2022 12:03:02]9612: WAF :: fetched 1 new logs [12-07-2022 12:04:01]12351: WAF :: fetched 1 new logs [12-07-2022 12:05:02]15081: WAF :: fetched 13 new logs [12-07-2022 12:06:01]17915: WAF :: fetched 1 new logs [12-07-2022 12:07:01]20699: WAF :: fetched 2 new logs [12-07-2022 12:08:01]23387: WAF :: fetched 3 new logs [12-07-2022 12:09:02]26023: WAF :: fetched 3 new logs [12-07-2022 12:10:01]28751: WAF :: fetched 2 new logs [12-07-2022 12:12:02]1975: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657638722 [12-07-2022 12:12:02]1975: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 12:12:04]1975: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 12:12:05]1975: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-1212/20220712-121202-Ys2PQnaXAatyZJVK_8DxKAAAABE [12-07-2022 12:12:05]1975: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 12:13:02]4652: WAF :: fetched 1 new logs [12-07-2022 12:14:02]7350: WAF :: fetched 1 new logs [12-07-2022 12:15:02]10058: WAF :: fetched 30 new logs [12-07-2022 12:17:02]15873: WAF :: fetched 2 new logs [12-07-2022 12:18:01]18727: WAF :: fetched 1 new logs [12-07-2022 12:22:02]30263: WAF :: fetched 52 new logs [12-07-2022 12:23:02]614: WAF :: fetched 105 new logs [12-07-2022 12:24:02]3617: WAF :: fetched 15 new logs [12-07-2022 12:25:01]6377: WAF :: fetched 326 new logs [12-07-2022 12:27:01]11580: WAF :: fetched 21 new logs [12-07-2022 12:29:01]17554: WAF :: fetched 1 new logs [12-07-2022 12:30:01]20367: WAF :: fetched 1 new logs [12-07-2022 12:31:02]23248: WAF :: fetched 5 new logs [12-07-2022 12:32:01]26034: WAF :: fetched 1 new logs [12-07-2022 12:33:01]28823: WAF :: fetched 4 new logs [12-07-2022 12:36:01]4965: WAF :: fetched 5 new logs [12-07-2022 12:38:01]10420: WAF :: fetched 1 new logs [12-07-2022 12:39:01]13157: WAF :: fetched 2 new logs [12-07-2022 12:41:01]18927: WAF :: fetched 1 new logs [12-07-2022 12:41:01]18927: Checking for user cron vulnerabilities [12-07-2022 12:42:01]21758: WAF :: fetched 2 new logs [12-07-2022 12:43:02]24495: WAF :: fetched 2 new logs [12-07-2022 12:44:02]27315: Checking ditributed CMS bruteforce attacks [12-07-2022 12:44:05]27315: WAF :: fetched 5 new logs [12-07-2022 12:45:01]: Checking for software updates [12-07-2022 12:45:01]30020: WAF :: fetched 9 new logs [12-07-2022 12:46:01]484: WAF :: fetched 2 new logs [12-07-2022 12:47:02]3257: WAF :: fetched 1 new logs [12-07-2022 12:54:01]22931: WAF :: fetched 7 new logs [12-07-2022 12:58:01]1802: WAF :: fetched 2 new logs [12-07-2022 12:59:01]4649: WAF :: fetched 2 new logs [12-07-2022 13:04:01]19207: WAF :: fetched 9 new logs [12-07-2022 13:05:01]22071: WAF :: fetched 28 new logs [12-07-2022 13:06:01]25123: WAF :: fetched 1 new logs [12-07-2022 13:07:02]27991: WAF :: fetched 1 new logs [12-07-2022 13:08:01]30719: WAF :: fetched 2 new logs [12-07-2022 13:09:01]1123: WAF :: fetched 4 new logs [12-07-2022 13:10:02]3947: WAF :: fetched 1 new logs [12-07-2022 13:12:02]9656: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657642322 [12-07-2022 13:12:02]9656: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 13:12:04]9656: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 13:12:05]9656: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-1312/20220712-131202-Ys2dUqe7DnI-ahiFtyiefAAAAC4 [12-07-2022 13:12:05]9656: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 13:12:05]9656: WAF :: fetched 1 new logs [12-07-2022 13:14:01]15289: WAF :: fetched 2 new logs [12-07-2022 13:15:01]18215: WAF :: fetched 5 new logs [12-07-2022 13:17:02]24011: WAF :: fetched 1 new logs [12-07-2022 13:18:02]26886: WAF :: fetched 5 new logs [12-07-2022 13:19:01]29682: WAF :: fetched 1 new logs [12-07-2022 13:20:02]32602: WAF :: fetched 4 new logs [12-07-2022 13:21:01]3240: WAF :: fetched 4 new logs [12-07-2022 13:23:02]8971: WAF :: fetched 3 new logs [12-07-2022 13:24:02]11758: WAF :: fetched 5 new logs [12-07-2022 13:25:01]14375: WAF :: fetched 6 new logs [12-07-2022 13:26:01]17378: WAF :: fetched 1 new logs [12-07-2022 13:29:01]25709: WAF :: fetched 7 new logs [12-07-2022 13:30:01]28439: WAF :: fetched 5 new logs [12-07-2022 13:31:02]31337: WAF :: fetched 2 new logs [12-07-2022 13:32:01]1659: WAF :: fetched 2 new logs [12-07-2022 13:33:02]4422: WAF :: fetched 3 new logs [12-07-2022 13:35:01]9733: WAF :: fetched 3 new logs [12-07-2022 13:36:01]12588: WAF :: fetched 7 new logs [12-07-2022 13:37:02]15285: WAF :: fetched 2 new logs [12-07-2022 13:39:02]20778: WAF :: fetched 1 new logs [12-07-2022 13:41:02]26243: Checking for user cron vulnerabilities [12-07-2022 13:42:02]28960: WAF :: fetched 1 new logs [12-07-2022 13:43:02]31689: WAF :: fetched 3 new logs [12-07-2022 13:44:01]1953: Checking ditributed CMS bruteforce attacks [12-07-2022 13:44:01]1953: WAF :: fetched 54 new logs [12-07-2022 13:45:01]: Checking for definition updates [12-07-2022 13:45:01]4686: WAF :: fetched 3 new logs [12-07-2022 13:47:02]10318: WAF :: fetched 4 new logs [12-07-2022 13:48:02]12978: WAF :: fetched 2 new logs [12-07-2022 13:49:02]15651: WAF :: fetched 2 new logs [12-07-2022 13:50:01]18486: WAF :: fetched 2 new logs [12-07-2022 13:51:01]21417: WAF :: fetched 2 new logs [12-07-2022 13:52:01]24059: WAF :: fetched 3 new logs [12-07-2022 13:53:02]26793: WAF :: fetched 1 new logs [12-07-2022 13:54:01]29437: WAF :: fetched 2 new logs [12-07-2022 13:56:01]2564: WAF :: fetched 1 new logs [12-07-2022 13:57:02]5333: WAF :: fetched 2 new logs [12-07-2022 13:58:02]7957: WAF :: fetched 2 new logs [12-07-2022 13:59:01]10543: WAF :: fetched 2 new logs [12-07-2022 14:00:02]13029: WAF :: fetched 2 new logs [12-07-2022 14:01:01]16376: WAF :: fetched 2 new logs [12-07-2022 14:02:02]19196: WAF :: fetched 1 new logs [12-07-2022 14:03:01]21838: WAF :: fetched 1 new logs [12-07-2022 14:04:01]24478: WAF :: fetched 5 new logs [12-07-2022 14:05:02]27282: WAF :: fetched 5 new logs [12-07-2022 14:06:01]30147: WAF :: fetched 2 new logs [12-07-2022 14:07:02]377: WAF :: fetched 2 new logs [12-07-2022 14:10:01]8583: WAF :: fetched 3 new logs [12-07-2022 14:12:01]14064: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657645921 [12-07-2022 14:12:01]14064: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 14:12:03]14064: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 14:12:03]14064: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-1412/20220712-141201-Ys2rYacf1bpkbLla7nndxAAAABQ [12-07-2022 14:12:03]14064: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 14:12:04]14064: WAF :: fetched 4 new logs [12-07-2022 14:13:01]16923: WAF :: fetched 3 new logs [12-07-2022 14:14:01]19889: WAF :: fetched 2 new logs [12-07-2022 14:14:01]19892: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:17:02]28295: WAF :: fetched 1 new logs [12-07-2022 14:18:01]31162: WAF :: fetched 1 new logs [12-07-2022 14:18:01]31156: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:19:01]1567: WAF :: fetched 3 new logs [12-07-2022 14:21:01]7183: WAF :: fetched 2 new logs [12-07-2022 14:24:01]15581: WAF :: fetched 6 new logs [12-07-2022 14:25:01]18502: WAF :: fetched 4 new logs [12-07-2022 14:28:02]27016: WAF :: fetched 8 new logs [12-07-2022 14:29:01]29761: WAF :: fetched 3 new logs [12-07-2022 14:30:01]32643: WAF :: fetched 4 new logs [12-07-2022 14:30:01]32669: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:32:02]6023: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:33:01]8853: WAF :: fetched 1 new logs [12-07-2022 14:34:01]11645: WAF :: fetched 3 new logs [12-07-2022 14:35:02]14526: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:36:02]17475: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:38:02]23161: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:39:01]25911: WAF :: fetched 1 new logs [12-07-2022 14:39:02]25934: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:40:02]28718: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:40:02]28714: WAF :: fetched 7 new logs [12-07-2022 14:41:01]31641: Checking for user cron vulnerabilities [12-07-2022 14:41:02]31639: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:42:01]2148: WAF :: fetched 6 new logs [12-07-2022 14:42:01]2149: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:43:02]4985: WAF :: fetched 4 new logs [12-07-2022 14:43:02]4986: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:44:01]7823: Checking ditributed CMS bruteforce attacks [12-07-2022 14:44:01]7815: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:44:04]7823: WAF :: fetched 20 new logs [12-07-2022 14:45:02]10637: WAF :: fetched 5 new logs [12-07-2022 14:45:02]10635: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:46:01]13533: WAF :: fetched 3 new logs [12-07-2022 14:46:01]13524: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:47:02]16289: WAF :: fetched 1 new logs [12-07-2022 14:48:02]19131: WAF :: fetched 2 new logs [12-07-2022 14:49:02]21971: WAF :: fetched 6 new logs [12-07-2022 14:49:02]21962: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:50:01]24639: WAF :: fetched 2 new logs [12-07-2022 14:50:01]24685: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:52:01]30337: WAF :: fetched 2 new logs [12-07-2022 14:53:02]737: WAF :: fetched 1 new logs [12-07-2022 14:53:02]731: Updated license status via CDN [12-07-2022 14:54:01]3510: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:57:01]11993: WAF :: fetched 1 new logs [12-07-2022 14:58:02]14790: httpd.conf changed. Refreshing watchlist. [12-07-2022 14:59:01]17523: WAF :: fetched 6 new logs [12-07-2022 15:01:01]23373: WAF :: fetched 1 new logs [12-07-2022 15:01:01]23374: Reseting cPGuard inotify settings [12-07-2022 15:02:01]26135: WAF :: fetched 1 new logs [12-07-2022 15:03:02]28932: WAF :: fetched 1 new logs [12-07-2022 15:04:01]31632: WAF :: fetched 7 new logs [12-07-2022 15:05:01]2025: WAF :: fetched 4 new logs [12-07-2022 15:07:02]7592: WAF :: fetched 1 new logs [12-07-2022 15:08:02]10323: WAF :: fetched 2 new logs [12-07-2022 15:09:01]13061: WAF :: fetched 1 new logs [12-07-2022 15:10:02]15800: WAF :: fetched 2 new logs [12-07-2022 15:11:01]18749: WAF :: fetched 2 new logs [12-07-2022 15:12:01]21429: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657649521 [12-07-2022 15:12:01]21429: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 15:12:03]21429: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 15:12:04]21429: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-1512/20220712-151201-Ys25caJgLnzTxyNJ-9LW6wAAADI [12-07-2022 15:12:04]21429: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 15:12:04]21429: WAF :: fetched 1 new logs [12-07-2022 15:14:03]26829: WAF :: fetched 1 new logs [12-07-2022 15:15:02]29562: WAF :: fetched 1 new logs [12-07-2022 15:16:01]32416: WAF :: fetched 3 new logs [12-07-2022 15:17:02]2860: WAF :: fetched 4 new logs [12-07-2022 15:20:02]11087: WAF :: fetched 2 new logs [12-07-2022 15:23:01]19664: WAF :: fetched 1 new logs [12-07-2022 15:24:01]22402: WAF :: fetched 5 new logs [12-07-2022 15:25:02]25272: WAF :: fetched 8 new logs [12-07-2022 15:26:01]28195: WAF :: fetched 1 new logs [12-07-2022 15:27:02]31054: WAF :: fetched 3 new logs [12-07-2022 15:28:01]1513: WAF :: fetched 1 new logs [12-07-2022 15:30:02]7086: WAF :: fetched 1 new logs [12-07-2022 15:31:02]10022: WAF :: fetched 4 new logs [12-07-2022 15:32:01]12905: WAF :: fetched 1 new logs [12-07-2022 15:33:02]15673: WAF :: fetched 1 new logs [12-07-2022 15:34:01]18429: WAF :: fetched 4 new logs [12-07-2022 15:36:02]24088: WAF :: fetched 4 new logs [12-07-2022 15:41:01]5404: Checking for user cron vulnerabilities [12-07-2022 15:42:02]8219: WAF :: fetched 4 new logs [12-07-2022 15:43:02]10947: WAF :: fetched 6 new logs [12-07-2022 15:44:01]13711: Checking ditributed CMS bruteforce attacks [12-07-2022 15:44:04]13711: WAF :: fetched 7 new logs [12-07-2022 15:45:01]16485: WAF :: fetched 5 new logs [12-07-2022 15:46:02]19403: WAF :: fetched 4 new logs [12-07-2022 15:47:03]22255: WAF :: fetched 5 new logs [12-07-2022 15:48:02]25027: WAF :: fetched 1 new logs [12-07-2022 15:49:01]27790: WAF :: fetched 4 new logs [12-07-2022 15:50:01]30661: WAF :: fetched 5 new logs [12-07-2022 15:51:01]1150: WAF :: fetched 4 new logs [12-07-2022 15:52:01]3986: WAF :: fetched 4 new logs [12-07-2022 15:53:02]6777: WAF :: fetched 1 new logs [12-07-2022 15:54:01]9550: WAF :: fetched 3 new logs [12-07-2022 15:55:01]12391: WAF :: fetched 8 new logs [12-07-2022 15:56:02]15272: WAF :: fetched 12 new logs [12-07-2022 15:57:01]18135: WAF :: fetched 10 new logs [12-07-2022 15:58:01]20894: WAF :: fetched 14 new logs [12-07-2022 15:59:02]23624: WAF :: fetched 1 new logs [12-07-2022 16:00:02]26010: WAF :: fetched 3 new logs [12-07-2022 16:01:01]29316: WAF :: fetched 1 new logs [12-07-2022 16:02:01]32155: WAF :: fetched 1 new logs [12-07-2022 16:03:01]2451: WAF :: fetched 1 new logs [12-07-2022 16:04:01]5196: WAF :: fetched 6 new logs [12-07-2022 16:05:02]7980: WAF :: fetched 8 new logs [12-07-2022 16:06:02]10957: WAF :: fetched 1 new logs [12-07-2022 16:12:02]27707: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657653122 [12-07-2022 16:12:02]27707: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 16:12:04]27707: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 16:12:05]27707: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-1612/20220712-161202-Ys3HgsqJL3Vaf3q4t_8IzQAAAAM [12-07-2022 16:12:05]27707: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 16:12:05]27707: WAF :: fetched 13 new logs [12-07-2022 16:13:01]30490: WAF :: fetched 11 new logs [12-07-2022 16:17:02]9326: WAF :: fetched 2 new logs [12-07-2022 16:18:01]12171: WAF :: fetched 6 new logs [12-07-2022 16:21:01]20629: WAF :: fetched 2 new logs [12-07-2022 16:23:01]26292: WAF :: fetched 1 new logs [12-07-2022 16:24:02]29055: WAF :: fetched 42 new logs [12-07-2022 16:25:01]31804: WAF :: fetched 23 new logs [12-07-2022 16:27:02]5113: WAF :: fetched 2 new logs [12-07-2022 16:28:01]7821: WAF :: fetched 1 new logs [12-07-2022 16:29:01]10801: WAF :: fetched 4 new logs [12-07-2022 16:30:02]13729: WAF :: fetched 5 new logs [12-07-2022 16:31:01]16633: WAF :: fetched 2 new logs [12-07-2022 16:35:02]28063: WAF :: fetched 1 new logs [12-07-2022 16:36:01]30881: WAF :: fetched 3 new logs [12-07-2022 16:37:02]1345: WAF :: fetched 3 new logs [12-07-2022 16:39:01]7042: WAF :: fetched 1 new logs [12-07-2022 16:41:01]12737: Checking for user cron vulnerabilities [12-07-2022 16:42:01]15656: WAF :: fetched 4 new logs [12-07-2022 16:43:02]18449: WAF :: fetched 2 new logs [12-07-2022 16:44:02]21194: Checking ditributed CMS bruteforce attacks [12-07-2022 16:44:06]21194: WAF :: fetched 9 new logs [12-07-2022 16:47:02]29325: WAF :: fetched 1 new logs [12-07-2022 16:48:03]32010: WAF :: fetched 2 new logs [12-07-2022 16:49:02]2302: WAF :: fetched 3 new logs [12-07-2022 16:50:01]5012: WAF :: fetched 2 new logs [12-07-2022 16:53:02]13340: WAF :: fetched 3 new logs [12-07-2022 16:55:01]18920: WAF :: fetched 1 new logs [12-07-2022 16:56:02]21650: WAF :: fetched 2 new logs [12-07-2022 16:59:01]29805: WAF :: fetched 2 new logs [12-07-2022 17:00:01]32252: WAF :: fetched 2 new logs [12-07-2022 17:01:01]3017: WAF :: fetched 1 new logs [12-07-2022 17:02:01]5833: WAF :: fetched 2 new logs [12-07-2022 17:04:01]11414: WAF :: fetched 10 new logs [12-07-2022 17:05:03]14136: WAF :: fetched 2 new logs [12-07-2022 17:06:02]16876: WAF :: fetched 2 new logs [12-07-2022 17:07:01]19781: WAF :: fetched 5 new logs [12-07-2022 17:08:01]22468: WAF :: fetched 2 new logs [12-07-2022 17:12:02]1192: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657656722 [12-07-2022 17:12:02]1192: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 17:12:04]1192: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 17:12:05]1192: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-1712/20220712-171202-Ys3VkkLPmdw3OCEKRaTFHQAAAE8 [12-07-2022 17:12:05]1192: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-07-2022 17:12:05]1192: WAF :: fetched 1 new logs [12-07-2022 17:13:02]3876: WAF :: fetched 1 new logs [12-07-2022 17:14:02]6778: WAF :: fetched 4 new logs [12-07-2022 17:16:02]12863: WAF :: fetched 2 new logs [12-07-2022 17:18:01]18684: WAF :: fetched 6 new logs [12-07-2022 17:19:01]21441: WAF :: fetched 3 new logs [12-07-2022 17:20:02]24156: WAF :: fetched 3 new logs [12-07-2022 17:23:02]32398: WAF :: fetched 2 new logs [12-07-2022 17:24:01]2553: WAF :: fetched 9 new logs [12-07-2022 17:26:01]8185: WAF :: fetched 1 new logs [12-07-2022 17:28:02]13693: WAF :: fetched 2 new logs [12-07-2022 17:29:01]16449: WAF :: fetched 3 new logs [12-07-2022 17:30:02]19216: WAF :: fetched 1 new logs [12-07-2022 17:32:01]24822: WAF :: fetched 2 new logs [12-07-2022 17:33:01]27613: WAF :: fetched 1 new logs [12-07-2022 17:34:02]30319: WAF :: fetched 2 new logs [12-07-2022 17:35:01]605: WAF :: fetched 1 new logs [12-07-2022 17:41:02]18439: Checking for user cron vulnerabilities [12-07-2022 17:43:02]23813: WAF :: fetched 4 new logs [12-07-2022 17:44:01]26455: Checking ditributed CMS bruteforce attacks [12-07-2022 17:44:05]26455: WAF :: fetched 5 new logs [12-07-2022 17:45:01]29087: WAF :: fetched 8 new logs [12-07-2022 17:46:02]31813: WAF :: fetched 3 new logs [12-07-2022 17:47:03]2159: WAF :: fetched 1 new logs [12-07-2022 17:48:01]4921: WAF :: fetched 2 new logs [12-07-2022 17:49:02]7627: WAF :: fetched 1 new logs [12-07-2022 17:50:02]10330: WAF :: fetched 3 new logs [12-07-2022 17:51:02]13178: WAF :: fetched 5 new logs [12-07-2022 17:52:01]16020: WAF :: fetched 3 new logs [12-07-2022 17:54:02]21574: WAF :: fetched 1 new logs [12-07-2022 17:55:02]24238: WAF :: fetched 4 new logs [12-07-2022 17:56:01]26945: WAF :: fetched 3 new logs [12-07-2022 17:57:02]29743: WAF :: fetched 3 new logs [12-07-2022 17:58:01]32408: WAF :: fetched 2 new logs [12-07-2022 17:59:02]2826: WAF :: fetched 4 new logs [12-07-2022 18:00:02]5253: WAF :: fetched 4 new logs [12-07-2022 18:01:01]8469: WAF :: fetched 4 new logs [12-07-2022 18:02:02]11287: WAF :: fetched 2 new logs [12-07-2022 18:03:03]13944: WAF :: fetched 6 new logs [12-07-2022 18:04:02]16590: WAF :: fetched 13 new logs [12-07-2022 18:06:02]23088: WAF :: fetched 1 new logs [12-07-2022 18:09:02]31199: WAF :: fetched 1 new logs [12-07-2022 18:10:01]1465: WAF :: fetched 3 new logs [12-07-2022 18:12:01]7020: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657660321 [12-07-2022 18:12:03]7020: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 18:12:05]7020: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 18:12:06]7020: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-1812/20220712-181203-Ys3jo-jmmzoHPuquyvDvMQAAAAU [12-07-2022 18:12:06]7020: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 18:12:08]7020: WAF :: fetched 109 new logs [12-07-2022 18:13:01]9714: WAF :: fetched 2 new logs [12-07-2022 18:14:02]12362: WAF :: fetched 2 new logs [12-07-2022 18:15:01]14956: WAF :: fetched 6 new logs [12-07-2022 18:16:01]17857: WAF :: fetched 4 new logs [12-07-2022 18:17:02]20672: WAF :: fetched 4 new logs [12-07-2022 18:18:01]23429: WAF :: fetched 25 new logs [12-07-2022 18:19:02]26098: WAF :: fetched 1 new logs [12-07-2022 18:20:01]28779: WAF :: fetched 2 new logs [12-07-2022 18:21:01]31514: WAF :: fetched 1 new logs [12-07-2022 18:23:01]4510: WAF :: fetched 6 new logs [12-07-2022 18:24:01]7230: WAF :: fetched 6 new logs [12-07-2022 18:25:01]9862: WAF :: fetched 2 new logs [12-07-2022 18:26:02]12637: WAF :: fetched 1 new logs [12-07-2022 18:29:02]20980: WAF :: fetched 7 new logs [12-07-2022 18:30:01]23691: WAF :: fetched 11 new logs [12-07-2022 18:31:01]26394: WAF :: fetched 86 new logs [12-07-2022 18:32:02]29233: WAF :: fetched 43 new logs [12-07-2022 18:33:02]31960: WAF :: fetched 96 new logs [12-07-2022 18:34:01]2352: WAF :: fetched 21 new logs [12-07-2022 18:35:01]5153: WAF :: fetched 41 new logs [12-07-2022 18:36:01]7943: WAF :: fetched 51 new logs [12-07-2022 18:37:03]10658: WAF :: fetched 70 new logs [12-07-2022 18:38:01]13332: WAF :: fetched 20 new logs [12-07-2022 18:39:01]16027: WAF :: fetched 52 new logs [12-07-2022 18:40:02]18993: WAF :: fetched 79 new logs [12-07-2022 18:41:01]21718: WAF :: fetched 40 new logs [12-07-2022 18:41:01]21718: Checking for user cron vulnerabilities [12-07-2022 18:42:01]24465: WAF :: fetched 30 new logs [12-07-2022 18:43:02]27247: WAF :: fetched 67 new logs [12-07-2022 18:44:01]29908: Checking ditributed CMS bruteforce attacks [12-07-2022 18:44:01]29908: WAF :: fetched 58 new logs [12-07-2022 18:45:02]32611: WAF :: fetched 129 new logs [12-07-2022 18:46:02]2907: WAF :: fetched 92 new logs [12-07-2022 18:47:01]5667: WAF :: fetched 64 new logs [12-07-2022 18:48:01]8315: WAF :: fetched 61 new logs [12-07-2022 18:49:02]10982: WAF :: fetched 80 new logs [12-07-2022 18:50:01]13627: WAF :: fetched 94 new logs [12-07-2022 18:51:02]16323: WAF :: fetched 102 new logs [12-07-2022 18:52:01]19071: WAF :: fetched 83 new logs [12-07-2022 18:53:02]21713: WAF :: fetched 78 new logs [12-07-2022 18:54:02]24434: WAF :: fetched 142 new logs [12-07-2022 18:55:02]27115: WAF :: fetched 68 new logs [12-07-2022 18:56:01]29747: WAF :: fetched 62 new logs [12-07-2022 18:57:01]32546: WAF :: fetched 29 new logs [12-07-2022 18:58:01]2753: WAF :: fetched 42 new logs [12-07-2022 18:59:02]5441: WAF :: fetched 33 new logs [12-07-2022 19:00:01]7782: WAF :: fetched 78 new logs [12-07-2022 19:01:03]10958: WAF :: fetched 67 new logs [12-07-2022 19:02:01]13795: WAF :: fetched 43 new logs [12-07-2022 19:03:02]16446: WAF :: fetched 68 new logs [12-07-2022 19:04:01]19138: WAF :: fetched 45 new logs [12-07-2022 19:05:02]21867: WAF :: fetched 53 new logs [12-07-2022 19:06:01]24440: WAF :: fetched 83 new logs [12-07-2022 19:07:02]27274: WAF :: fetched 45 new logs [12-07-2022 19:08:01]29893: WAF :: fetched 55 new logs [12-07-2022 19:09:02]32566: WAF :: fetched 63 new logs [12-07-2022 19:10:01]2825: WAF :: fetched 16 new logs [12-07-2022 19:11:01]5580: WAF :: fetched 2 new logs [12-07-2022 19:12:02]8326: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657663922 [12-07-2022 19:12:02]8326: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 19:12:04]8326: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 19:12:04]8326: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-1912/20220712-191202-Ys3xstAFfpykzYefIT8dWwAAACM [12-07-2022 19:12:04]8326: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 19:12:04]8326: WAF :: fetched 2 new logs [12-07-2022 19:14:02]13607: WAF :: fetched 3 new logs [12-07-2022 19:15:01]16208: WAF :: fetched 3 new logs [12-07-2022 19:16:02]19010: WAF :: fetched 2 new logs [12-07-2022 19:17:01]21685: WAF :: fetched 2 new logs [12-07-2022 19:18:01]24400: WAF :: fetched 4 new logs [12-07-2022 19:19:02]27087: WAF :: fetched 8 new logs [12-07-2022 19:20:01]29797: WAF :: fetched 2 new logs [12-07-2022 19:21:01]32538: WAF :: fetched 2 new logs [12-07-2022 19:23:01]5513: WAF :: fetched 5 new logs [12-07-2022 19:24:02]8239: WAF :: fetched 28 new logs [12-07-2022 19:25:03]10890: WAF :: fetched 26 new logs [12-07-2022 19:26:01]13612: WAF :: fetched 51 new logs [12-07-2022 19:27:02]16336: WAF :: fetched 28 new logs [12-07-2022 19:28:01]18995: WAF :: fetched 3 new logs [12-07-2022 19:29:01]21686: WAF :: fetched 1 new logs [12-07-2022 19:30:02]24387: WAF :: fetched 1 new logs [12-07-2022 19:32:01]29774: WAF :: fetched 4 new logs [12-07-2022 19:35:01]5371: WAF :: fetched 2 new logs [12-07-2022 19:36:01]8182: WAF :: fetched 1 new logs [12-07-2022 19:38:01]13782: WAF :: fetched 8 new logs [12-07-2022 19:39:02]16517: WAF :: fetched 4 new logs [12-07-2022 19:40:01]19256: WAF :: fetched 3 new logs [12-07-2022 19:41:01]21998: Checking for user cron vulnerabilities [12-07-2022 19:42:02]24726: WAF :: fetched 1 new logs [12-07-2022 19:43:01]27346: WAF :: fetched 79 new logs [12-07-2022 19:44:01]30009: Checking ditributed CMS bruteforce attacks [12-07-2022 19:44:04]30009: WAF :: fetched 59 new logs [12-07-2022 19:45:01]: Checking for definition updates [12-07-2022 19:45:02]32704: WAF :: fetched 22 new logs [12-07-2022 19:46:02]3021: WAF :: fetched 3 new logs [12-07-2022 19:49:01]10923: WAF :: fetched 1 new logs [12-07-2022 19:50:02]13549: WAF :: fetched 141 new logs [12-07-2022 19:51:02]16194: WAF :: fetched 2 new logs [12-07-2022 19:52:01]18986: WAF :: fetched 29 new logs [12-07-2022 19:55:02]27043: WAF :: fetched 1 new logs [12-07-2022 19:58:02]2771: WAF :: fetched 5 new logs [12-07-2022 20:03:02]16290: WAF :: fetched 7 new logs [12-07-2022 20:04:01]18913: WAF :: fetched 3 new logs [12-07-2022 20:05:03]21707: WAF :: fetched 1 new logs [12-07-2022 20:08:02]29703: WAF :: fetched 1 new logs [12-07-2022 20:09:01]32318: WAF :: fetched 2 new logs [12-07-2022 20:12:02]7995: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657667522 [12-07-2022 20:12:02]7995: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 20:12:04]7995: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 20:12:05]7995: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-2012/20220712-201202-Ys3_wvR2V-BkwsxyDSt9hgAAAAI [12-07-2022 20:12:05]7995: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 20:14:02]13272: WAF :: fetched 1 new logs [12-07-2022 20:15:01]15875: WAF :: fetched 2 new logs [12-07-2022 20:18:01]24028: WAF :: fetched 2 new logs [12-07-2022 20:21:01]31965: WAF :: fetched 3 new logs [12-07-2022 20:23:01]5037: WAF :: fetched 8 new logs [12-07-2022 20:24:02]7703: WAF :: fetched 2 new logs [12-07-2022 20:25:01]10294: WAF :: fetched 1 new logs [12-07-2022 20:26:01]12947: WAF :: fetched 1 new logs [12-07-2022 20:27:02]15656: WAF :: fetched 3 new logs [12-07-2022 20:28:01]18352: WAF :: fetched 1 new logs [12-07-2022 20:31:01]26391: WAF :: fetched 3 new logs [12-07-2022 20:32:02]29200: WAF :: fetched 2 new logs [12-07-2022 20:33:01]31829: WAF :: fetched 2 new logs [12-07-2022 20:35:02]4808: WAF :: fetched 2 new logs [12-07-2022 20:37:02]10265: WAF :: fetched 4 new logs [12-07-2022 20:38:02]12969: WAF :: fetched 3 new logs [12-07-2022 20:39:01]15856: WAF :: fetched 5 new logs [12-07-2022 20:40:02]18699: WAF :: fetched 1 new logs [12-07-2022 20:41:01]21453: WAF :: fetched 1 new logs [12-07-2022 20:41:01]21453: Checking for user cron vulnerabilities [12-07-2022 20:44:01]29555: Checking ditributed CMS bruteforce attacks [12-07-2022 20:45:02]32275: WAF :: fetched 1 new logs [12-07-2022 20:47:02]5335: WAF :: fetched 1 new logs [12-07-2022 20:48:04]8125: WAF :: fetched 2 new logs [12-07-2022 20:52:02]18969: WAF :: fetched 3 new logs [12-07-2022 20:53:01]21703: WAF :: fetched 1 new logs [12-07-2022 20:56:01]29689: WAF :: fetched 3 new logs [12-07-2022 20:58:01]2767: WAF :: fetched 3 new logs [12-07-2022 21:02:02]13679: WAF :: fetched 24 new logs [12-07-2022 21:04:01]19091: WAF :: fetched 4 new logs [12-07-2022 21:05:02]21770: WAF :: fetched 2 new logs [12-07-2022 21:06:02]24520: WAF :: fetched 1 new logs [12-07-2022 21:10:02]2848: WAF :: fetched 2 new logs [12-07-2022 21:12:02]8226: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657671122 [12-07-2022 21:12:02]8226: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 21:12:04]8226: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 21:12:05]8226: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-2112/20220712-211202-Ys4N0rZHTs3K5WM14TsQSwAAABU [12-07-2022 21:12:05]8226: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 21:12:05]8226: WAF :: fetched 3 new logs [12-07-2022 21:13:01]10935: WAF :: fetched 1 new logs [12-07-2022 21:15:01]16194: WAF :: fetched 2 new logs [12-07-2022 21:16:01]19051: WAF :: fetched 1 new logs [12-07-2022 21:17:02]21706: WAF :: fetched 1 new logs [12-07-2022 21:19:02]27097: WAF :: fetched 3 new logs [12-07-2022 21:20:01]29811: WAF :: fetched 4 new logs [12-07-2022 21:22:02]2733: WAF :: fetched 1 new logs [12-07-2022 21:23:01]5502: WAF :: fetched 1 new logs [12-07-2022 21:24:02]8276: WAF :: fetched 4 new logs [12-07-2022 21:26:01]13751: WAF :: fetched 1 new logs [12-07-2022 21:27:02]16432: WAF :: fetched 1 new logs [12-07-2022 21:29:02]21896: WAF :: fetched 1 new logs [12-07-2022 21:30:02]24495: WAF :: fetched 1 new logs [12-07-2022 21:31:01]27165: WAF :: fetched 1 new logs [12-07-2022 21:33:01]32604: WAF :: fetched 29 new logs [12-07-2022 21:34:02]2873: WAF :: fetched 1 new logs [12-07-2022 21:37:01]11114: WAF :: fetched 3 new logs [12-07-2022 21:39:02]16468: WAF :: fetched 3 new logs [12-07-2022 21:41:02]21928: WAF :: fetched 1 new logs [12-07-2022 21:41:02]21928: Checking for user cron vulnerabilities [12-07-2022 21:42:01]24570: WAF :: fetched 3 new logs [12-07-2022 21:43:01]27372: WAF :: fetched 2 new logs [12-07-2022 21:44:01]29966: Checking ditributed CMS bruteforce attacks [12-07-2022 21:44:04]29966: WAF :: fetched 3 new logs [12-07-2022 21:45:02]32592: WAF :: fetched 3 new logs [12-07-2022 21:46:01]2841: WAF :: fetched 1 new logs [12-07-2022 21:47:02]5569: WAF :: fetched 1 new logs [12-07-2022 21:48:01]8192: WAF :: fetched 2 new logs [12-07-2022 21:49:01]10841: WAF :: fetched 2 new logs [12-07-2022 21:50:02]13451: WAF :: fetched 1 new logs [12-07-2022 21:53:01]21677: WAF :: fetched 3 new logs [12-07-2022 21:54:01]24293: WAF :: fetched 11 new logs [12-07-2022 21:55:02]26905: WAF :: fetched 2 new logs [12-07-2022 21:57:01]32070: WAF :: fetched 2 new logs [12-07-2022 21:59:01]5089: WAF :: fetched 2 new logs [12-07-2022 22:00:02]7493: WAF :: fetched 1 new logs [12-07-2022 22:02:01]13435: WAF :: fetched 2 new logs [12-07-2022 22:04:01]18869: WAF :: fetched 1 new logs [12-07-2022 22:06:02]24191: WAF :: fetched 1 new logs [12-07-2022 22:07:10]26830: Performing Domain reputation checks [12-07-2022 22:08:02]29518: WAF :: fetched 1 new logs [12-07-2022 22:11:01]8876: WAF :: fetched 1 new logs [12-07-2022 22:12:01]11496: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657674721 [12-07-2022 22:12:01]11496: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 22:12:03]11496: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 22:12:04]11496: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-2212/20220712-221201-Ys4b4aW_oxHE0Oc6vd7dggAAAA0 [12-07-2022 22:12:04]11496: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 22:12:04]11496: WAF :: fetched 1 new logs [12-07-2022 22:15:01]23197: WAF :: fetched 1 new logs [12-07-2022 22:18:02]31384: WAF :: fetched 2 new logs [12-07-2022 22:19:01]1675: WAF :: fetched 2 new logs [12-07-2022 22:20:02]4404: WAF :: fetched 2 new logs [12-07-2022 22:23:01]12456: WAF :: fetched 1 new logs [12-07-2022 22:25:01]17900: WAF :: fetched 2 new logs [12-07-2022 22:26:02]20725: WAF :: fetched 1 new logs [12-07-2022 22:28:02]26160: WAF :: fetched 1 new logs [12-07-2022 22:29:01]28822: WAF :: fetched 4 new logs [12-07-2022 22:32:01]4485: WAF :: fetched 1 new logs [12-07-2022 22:33:02]7231: WAF :: fetched 2 new logs [12-07-2022 22:39:02]23239: WAF :: fetched 2 new logs [12-07-2022 22:41:01]28557: Checking for user cron vulnerabilities [12-07-2022 22:42:01]31184: WAF :: fetched 24 new logs [12-07-2022 22:43:02]1610: WAF :: fetched 6 new logs [12-07-2022 22:44:01]4443: Checking ditributed CMS bruteforce attacks [12-07-2022 22:47:02]12631: WAF :: fetched 1 new logs [12-07-2022 22:48:03]15370: WAF :: fetched 1 new logs [12-07-2022 22:50:01]20802: WAF :: fetched 3 new logs [12-07-2022 22:51:02]23504: WAF :: fetched 1 new logs [12-07-2022 22:53:02]28961: WAF :: fetched 1 new logs [12-07-2022 22:54:01]31503: WAF :: fetched 2 new logs [12-07-2022 22:55:01]1911: WAF :: fetched 4 new logs [12-07-2022 22:56:02]4714: WAF :: fetched 1 new logs [12-07-2022 22:57:01]7354: WAF :: fetched 1 new logs [12-07-2022 23:00:01]15013: WAF :: fetched 2 new logs [12-07-2022 23:01:01]18234: WAF :: fetched 26 new logs [12-07-2022 23:02:02]20974: WAF :: fetched 3 new logs [12-07-2022 23:04:01]26299: WAF :: fetched 2 new logs [12-07-2022 23:05:02]28977: WAF :: fetched 3 new logs [12-07-2022 23:06:01]31601: WAF :: fetched 1 new logs [12-07-2022 23:08:01]4573: WAF :: fetched 1 new logs [12-07-2022 23:08:08]1962: Performed RBL check for 23.111.136.34. [12-07-2022 23:09:01]7251: WAF :: fetched 4 new logs [12-07-2022 23:12:02]15199: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657678322 [12-07-2022 23:12:02]15199: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-07-2022 23:12:04]15199: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-07-2022 23:12:04]15199: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220712/20220712-2312/20220712-231202-Ys4p8j4YqqNDZmIF87uoMAAAAB8 [12-07-2022 23:12:04]15199: WAF :: No suitable log file found. Using SQLite.. [12-07-2022 23:12:04]15199: WAF :: fetched 1 new logs [12-07-2022 23:13:02]18084: WAF :: fetched 4 new logs [12-07-2022 23:15:01]23274: WAF :: fetched 3 new logs [12-07-2022 23:16:01]26025: WAF :: fetched 1 new logs [12-07-2022 23:17:02]28646: WAF :: fetched 21 new logs [12-07-2022 23:18:01]31395: WAF :: fetched 2 new logs [12-07-2022 23:19:01]1609: WAF :: fetched 7 new logs [12-07-2022 23:21:02]8086: WAF :: fetched 1 new logs [12-07-2022 23:22:01]10685: WAF :: fetched 2 new logs [12-07-2022 23:23:01]13378: WAF :: fetched 3 new logs [12-07-2022 23:24:01]15993: WAF :: fetched 2 new logs [12-07-2022 23:25:02]18793: WAF :: fetched 1 new logs [12-07-2022 23:26:01]21570: WAF :: fetched 1 new logs [12-07-2022 23:27:01]24179: WAF :: fetched 3 new logs [12-07-2022 23:28:01]26938: WAF :: fetched 3 new logs [12-07-2022 23:29:01]29504: WAF :: fetched 2 new logs [12-07-2022 23:39:02]24034: WAF :: fetched 3 new logs [12-07-2022 23:40:01]26728: WAF :: fetched 6 new logs [12-07-2022 23:41:01]29505: Checking for user cron vulnerabilities [12-07-2022 23:43:01]2502: WAF :: fetched 1 new logs [12-07-2022 23:44:02]5128: Checking ditributed CMS bruteforce attacks [12-07-2022 23:44:03]5128: WAF :: fetched 1 new logs [12-07-2022 23:48:02]15708: WAF :: fetched 1 new logs [12-07-2022 23:49:02]18389: WAF :: fetched 3 new logs [12-07-2022 23:50:01]21245: WAF :: fetched 2 new logs [12-07-2022 23:51:01]23981: WAF :: fetched 2 new logs [12-07-2022 23:52:02]26604: WAF :: fetched 3 new logs [12-07-2022 23:54:01]31997: WAF :: fetched 1 new logs [12-07-2022 23:55:02]3301: WAF :: fetched 20 new logs [12-07-2022 23:55:02]3304: httpd.conf changed. Refreshing watchlist. [12-07-2022 23:56:02]6225: WAF :: fetched 9 new logs [12-07-2022 23:57:01]8805: WAF :: fetched 1 new logs [13-07-2022 00:00:01]16453: WAF :: fetched 1 new logs [13-07-2022 00:01:05]19703: Sending daily report for July 13, 2022 [13-07-2022 00:03:01]24982: WAF :: fetched 2 new logs [13-07-2022 00:04:02]27659: WAF :: fetched 2 new logs [13-07-2022 00:05:02]30338: Deleted 0 entries older than 6 MONTH from scanner_logs [13-07-2022 00:05:02]30338: Deleted 0 files from Quarantine [13-07-2022 00:06:01]443: WAF :: fetched 1 new logs [13-07-2022 00:08:02]5842: WAF :: fetched 1 new logs [13-07-2022 00:09:01]8509: WAF :: fetched 3 new logs [13-07-2022 00:10:01]11129: WAF :: fetched 5 new logs [13-07-2022 00:12:03]16375: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657681923 [13-07-2022 00:12:03]16375: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 00:12:05]16375: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 00:12:06]16375: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-0012/20220713-001203-Ys44A9VMMTb8Ypm99vDFxwAAAAE [13-07-2022 00:12:06]16375: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [13-07-2022 00:12:06]16375: WAF :: fetched 1 new logs [13-07-2022 00:13:01]19139: WAF :: fetched 1 new logs [13-07-2022 00:16:01]27115: WAF :: fetched 1 new logs [13-07-2022 00:17:02]29724: WAF :: fetched 4 new logs [13-07-2022 00:19:02]2549: WAF :: fetched 1 new logs [13-07-2022 00:20:01]5311: WAF :: fetched 2 new logs [13-07-2022 00:22:02]10634: WAF :: fetched 1 new logs [13-07-2022 00:28:02]26505: WAF :: fetched 5 new logs [13-07-2022 00:29:01]29092: WAF :: fetched 4 new logs [13-07-2022 00:30:02]31799: WAF :: fetched 1 new logs [13-07-2022 00:32:02]4671: WAF :: fetched 1 new logs [13-07-2022 00:37:02]18243: WAF :: fetched 3 new logs [13-07-2022 00:38:02]21073: WAF :: fetched 2 new logs [13-07-2022 00:39:01]23693: WAF :: fetched 1 new logs [13-07-2022 00:40:02]26326: WAF :: fetched 1 new logs [13-07-2022 00:41:01]28967: Checking for user cron vulnerabilities [13-07-2022 00:42:03]31561: WAF :: fetched 2 new logs [13-07-2022 00:44:01]4627: Checking ditributed CMS bruteforce attacks [13-07-2022 00:44:01]4627: WAF :: fetched 2 new logs [13-07-2022 00:45:02]: Checking for software updates [13-07-2022 00:45:02]7311: WAF :: fetched 1 new logs [13-07-2022 00:46:01]9933: WAF :: fetched 1 new logs [13-07-2022 00:48:02]15263: WAF :: fetched 18 new logs [13-07-2022 00:49:02]17871: WAF :: fetched 4 new logs [13-07-2022 00:50:01]20550: WAF :: fetched 5 new logs [13-07-2022 00:51:01]23204: WAF :: fetched 3 new logs [13-07-2022 00:52:02]25768: WAF :: fetched 2 new logs [13-07-2022 00:53:01]28545: WAF :: fetched 2 new logs [13-07-2022 00:55:02]1665: WAF :: fetched 2 new logs [13-07-2022 00:56:02]4303: WAF :: fetched 3 new logs [13-07-2022 00:57:01]6931: WAF :: fetched 3 new logs [13-07-2022 00:58:02]9694: WAF :: fetched 2 new logs [13-07-2022 00:59:01]12254: WAF :: fetched 134 new logs [13-07-2022 01:00:02]14569: WAF :: fetched 2 new logs [13-07-2022 01:01:01]18295: WAF :: fetched 35 new logs [13-07-2022 01:02:03]21158: WAF :: fetched 68 new logs [13-07-2022 01:03:01]24059: WAF :: fetched 39 new logs [13-07-2022 01:04:01]27032: WAF :: fetched 3 new logs [13-07-2022 01:05:02]29843: WAF :: fetched 4 new logs [13-07-2022 01:06:02]515: WAF :: fetched 15 new logs [13-07-2022 01:07:01]3364: WAF :: fetched 53 new logs [13-07-2022 01:08:02]6294: WAF :: fetched 5 new logs [13-07-2022 01:09:02]8876: WAF :: fetched 37 new logs [13-07-2022 01:10:01]11468: WAF :: fetched 68 new logs [13-07-2022 01:11:02]14186: WAF :: fetched 66 new logs [13-07-2022 01:12:02]17093: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657685522 [13-07-2022 01:12:02]17093: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 01:12:04]17093: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 01:12:04]17093: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-0112/20220713-011202-Ys5GEt6CorHbyrlMdpv4kwAAAAg [13-07-2022 01:12:04]17093: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 01:12:04]17093: WAF :: fetched 495 new logs [13-07-2022 01:17:02]30768: WAF :: fetched 2 new logs [13-07-2022 01:18:03]1062: WAF :: fetched 4 new logs [13-07-2022 01:19:01]3359: WAF :: fetched 2 new logs [13-07-2022 01:21:01]9473: WAF :: fetched 1 new logs [13-07-2022 01:22:01]12295: WAF :: fetched 2 new logs [13-07-2022 01:23:02]15122: WAF :: fetched 4 new logs [13-07-2022 01:25:02]20379: WAF :: fetched 1 new logs [13-07-2022 01:28:02]28801: WAF :: fetched 2 new logs [13-07-2022 01:32:01]7707: WAF :: fetched 2 new logs [13-07-2022 01:33:02]10381: WAF :: fetched 1 new logs [13-07-2022 01:34:01]13320: WAF :: fetched 1 new logs [13-07-2022 01:35:35]16240: WAF :: fetched 6 new logs [13-07-2022 01:38:01]24321: WAF :: fetched 1 new logs [13-07-2022 01:39:01]27259: WAF :: fetched 2 new logs [13-07-2022 01:41:02]32647: Checking for user cron vulnerabilities [13-07-2022 01:44:01]8692: Checking ditributed CMS bruteforce attacks [13-07-2022 01:45:01]: Checking for definition updates [13-07-2022 01:45:02]11524: WAF :: fetched 1 new logs [13-07-2022 01:46:04]14714: WAF :: fetched 1 new logs [13-07-2022 01:47:01]17513: WAF :: fetched 2 new logs [13-07-2022 01:48:01]20473: WAF :: fetched 1 new logs [13-07-2022 01:49:02]23139: WAF :: fetched 1 new logs [13-07-2022 01:50:01]25749: WAF :: fetched 1 new logs [13-07-2022 01:53:01]1669: WAF :: fetched 4 new logs [13-07-2022 01:59:01]18189: WAF :: fetched 2 new logs [13-07-2022 02:02:01]26438: WAF :: fetched 2 new logs [13-07-2022 02:06:01]4877: WAF :: fetched 6 new logs [13-07-2022 02:07:02]7504: WAF :: fetched 6 new logs [13-07-2022 02:08:01]10148: WAF :: fetched 2 new logs [13-07-2022 02:12:01]20754: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657689121 [13-07-2022 02:12:01]20754: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 02:12:03]20754: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 02:12:05]20754: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-0212/20220713-021201-Ys5UIWsT6Xmn2q2zVit--AAAACM [13-07-2022 02:12:05]20754: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 02:12:05]20754: WAF :: fetched 3 new logs [13-07-2022 02:13:02]23285: WAF :: fetched 1 new logs [13-07-2022 02:15:01]28474: WAF :: fetched 1 new logs [13-07-2022 02:16:02]31127: WAF :: fetched 15 new logs [13-07-2022 02:17:01]1276: WAF :: fetched 4 new logs [13-07-2022 02:18:03]4063: WAF :: fetched 26 new logs [13-07-2022 02:19:01]6726: WAF :: fetched 30 new logs [13-07-2022 02:20:02]9375: WAF :: fetched 1 new logs [13-07-2022 02:21:02]12004: WAF :: fetched 1 new logs [13-07-2022 02:26:01]25292: WAF :: fetched 1 new logs [13-07-2022 02:27:02]27941: WAF :: fetched 3 new logs [13-07-2022 02:28:01]30501: WAF :: fetched 4 new logs [13-07-2022 02:29:01]798: WAF :: fetched 4 new logs [13-07-2022 02:30:02]3490: WAF :: fetched 4 new logs [13-07-2022 02:31:01]6120: WAF :: fetched 3 new logs [13-07-2022 02:33:02]11288: WAF :: fetched 1 new logs [13-07-2022 02:35:01]16560: WAF :: fetched 16 new logs [13-07-2022 02:41:01]32606: Checking for user cron vulnerabilities [13-07-2022 02:42:01]2826: WAF :: fetched 1 new logs [13-07-2022 02:44:01]8179: Checking ditributed CMS bruteforce attacks [13-07-2022 02:48:01]18834: WAF :: fetched 2 new logs [13-07-2022 02:50:02]24611: WAF :: fetched 2 new logs [13-07-2022 02:53:02]1360: Updated license status via CDN [13-07-2022 02:54:01]4577: WAF :: fetched 2 new logs [13-07-2022 02:55:02]7183: WAF :: fetched 5 new logs [13-07-2022 02:56:01]9835: WAF :: fetched 2 new logs [13-07-2022 02:57:02]12444: WAF :: fetched 8 new logs [13-07-2022 02:58:01]15041: WAF :: fetched 12 new logs [13-07-2022 02:59:03]18062: WAF :: fetched 1 new logs [13-07-2022 03:00:43]20738: Found and updated 32 CMS installations [13-07-2022 03:03:01]29704: WAF :: fetched 1 new logs [13-07-2022 03:04:02]453: WAF :: fetched 1 new logs [13-07-2022 03:04:28]20738: Sending CMS version vulnerability report emails to cpanel users [13-07-2022 03:04:28]29760: Sending CMS version vulnerability report emails to cpanel users [13-07-2022 03:04:31]29760: Checking wordpress installations for suspicious directories [13-07-2022 03:04:31]20738: Checking wordpress installations for suspicious directories [13-07-2022 03:05:01]4102: WAF :: fetched 1 new logs [13-07-2022 03:06:02]6944: WAF :: fetched 1 new logs [13-07-2022 03:09:01]15181: WAF :: fetched 23 new logs [13-07-2022 03:10:02]17889: WAF :: fetched 1 new logs [13-07-2022 03:12:02]23432: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657692722 [13-07-2022 03:12:02]23432: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 03:12:04]23432: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 03:12:06]23432: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-0312/20220713-031202-Ys5iMmfsXM8ekjBOp4K9pgAAAAk [13-07-2022 03:12:06]23432: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 03:12:06]23432: WAF :: fetched 1 new logs [13-07-2022 03:16:01]2115: WAF :: fetched 1 new logs [13-07-2022 03:17:01]4742: WAF :: fetched 2 new logs [13-07-2022 03:19:02]10092: WAF :: fetched 2 new logs [13-07-2022 03:23:04]20687: WAF :: fetched 2 new logs [13-07-2022 03:25:01]25980: WAF :: fetched 29 new logs [13-07-2022 03:26:01]28677: WAF :: fetched 48 new logs [13-07-2022 03:31:01]10284: WAF :: fetched 3 new logs [13-07-2022 03:32:02]13093: WAF :: fetched 21 new logs [13-07-2022 03:33:02]15858: WAF :: fetched 13 new logs [13-07-2022 03:34:01]18735: WAF :: fetched 13 new logs [13-07-2022 03:35:01]21546: WAF :: fetched 16 new logs [13-07-2022 03:36:01]24353: WAF :: fetched 19 new logs [13-07-2022 03:37:01]27144: WAF :: fetched 16 new logs [13-07-2022 03:38:02]29827: WAF :: fetched 18 new logs [13-07-2022 03:39:02]32511: WAF :: fetched 18 new logs [13-07-2022 03:40:02]2838: WAF :: fetched 13 new logs [13-07-2022 03:41:01]5490: WAF :: fetched 11 new logs [13-07-2022 03:41:01]5490: Checking for user cron vulnerabilities [13-07-2022 03:42:01]8303: WAF :: fetched 16 new logs [13-07-2022 03:43:01]10931: WAF :: fetched 10 new logs [13-07-2022 03:44:01]13650: Checking ditributed CMS bruteforce attacks [13-07-2022 03:44:04]13650: WAF :: fetched 4 new logs [13-07-2022 03:45:02]16287: WAF :: fetched 6 new logs [13-07-2022 03:46:01]18996: WAF :: fetched 2 new logs [13-07-2022 03:48:02]24135: WAF :: fetched 1 new logs [13-07-2022 03:49:01]23956: WAF :: fetched 3 new logs [13-07-2022 03:51:02]24124: WAF :: fetched 1 new logs [13-07-2022 03:57:02]16731: WAF :: fetched 18 new logs [13-07-2022 03:58:01]19349: WAF :: fetched 24 new logs [13-07-2022 03:59:01]22000: WAF :: fetched 13 new logs [13-07-2022 04:00:02]24302: WAF :: fetched 2 new logs [13-07-2022 04:02:01]30026: WAF :: fetched 1 new logs [13-07-2022 04:03:02]364: WAF :: fetched 2 new logs [13-07-2022 04:04:03]3180: WAF :: fetched 1 new logs [13-07-2022 04:06:02]8372: WAF :: fetched 1 new logs [13-07-2022 04:07:01]10940: WAF :: fetched 2 new logs [13-07-2022 04:08:01]13541: WAF :: fetched 1 new logs [13-07-2022 04:09:01]16163: WAF :: fetched 1 new logs [13-07-2022 04:10:02]18892: WAF :: fetched 2 new logs [13-07-2022 04:11:02]21544: WAF :: fetched 1 new logs [13-07-2022 04:12:01]24025: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657696321 [13-07-2022 04:12:01]24025: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 04:12:03]24025: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 04:12:06]24025: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-0412/20220713-041201-Ys5wQUKopEfATU2FmDMORgAAAAc [13-07-2022 04:12:06]24025: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 04:12:06]24025: WAF :: fetched 2 new logs [13-07-2022 04:15:01]31793: WAF :: fetched 2 new logs [13-07-2022 04:21:02]15224: WAF :: fetched 2 new logs [13-07-2022 04:22:01]17807: WAF :: fetched 1 new logs [13-07-2022 04:23:01]20458: WAF :: fetched 2 new logs [13-07-2022 04:26:01]28265: WAF :: fetched 26 new logs [13-07-2022 04:27:02]30820: WAF :: fetched 1 new logs [13-07-2022 04:29:02]3651: WAF :: fetched 1 new logs [13-07-2022 04:30:01]6242: WAF :: fetched 1 new logs [13-07-2022 04:31:01]8931: WAF :: fetched 1 new logs [13-07-2022 04:33:02]14165: WAF :: fetched 1 new logs [13-07-2022 04:39:01]29779: WAF :: fetched 1 new logs [13-07-2022 04:41:01]2682: Checking for user cron vulnerabilities [13-07-2022 04:43:02]7879: WAF :: fetched 4 new logs [13-07-2022 04:44:01]10477: Checking ditributed CMS bruteforce attacks [13-07-2022 04:45:02]13034: WAF :: fetched 1 new logs [13-07-2022 04:46:01]15627: WAF :: fetched 1 new logs [13-07-2022 04:48:02]21008: WAF :: fetched 1 new logs [13-07-2022 04:49:01]23639: WAF :: fetched 6 new logs [13-07-2022 04:50:01]26209: WAF :: fetched 1 new logs [13-07-2022 04:51:02]28977: WAF :: fetched 1 new logs [13-07-2022 04:56:01]9577: WAF :: fetched 1 new logs [13-07-2022 04:57:02]12140: WAF :: fetched 5 new logs [13-07-2022 04:58:02]14665: WAF :: fetched 1 new logs [13-07-2022 05:00:01]19677: WAF :: fetched 1 new logs [13-07-2022 05:01:42]22694: Starting daily scan on files updated in last 24 hrs [13-07-2022 05:02:01]25284: WAF :: fetched 4 new logs [13-07-2022 05:03:01]27830: WAF :: fetched 9 new logs [13-07-2022 05:06:02]3726: WAF :: fetched 1 new logs [13-07-2022 05:08:01]8802: WAF :: fetched 1 new logs [13-07-2022 05:12:01]19337: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657699921 [13-07-2022 05:12:02]19337: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 05:12:04]19337: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 05:12:05]19337: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-0512/20220713-051202-Ys5-UpKiZxnquG3nUmVmkgAAAAw [13-07-2022 05:12:05]19337: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 05:12:05]19337: WAF :: fetched 2 new logs [13-07-2022 05:20:02]7869: WAF :: fetched 3 new logs [13-07-2022 05:21:01]10528: WAF :: fetched 3 new logs [13-07-2022 05:22:01]13128: WAF :: fetched 3 new logs [13-07-2022 05:23:02]15730: WAF :: fetched 3 new logs [13-07-2022 05:24:01]18355: WAF :: fetched 3 new logs [13-07-2022 05:26:01]23655: WAF :: fetched 1 new logs [13-07-2022 05:29:02]31440: WAF :: fetched 3 new logs [13-07-2022 05:30:01]1608: WAF :: fetched 1 new logs [13-07-2022 05:31:02]4326: WAF :: fetched 27 new logs [13-07-2022 05:32:01]6895: WAF :: fetched 2 new logs [13-07-2022 05:33:01]9465: WAF :: fetched 1 new logs [13-07-2022 05:34:01]12090: WAF :: fetched 3 new logs [13-07-2022 05:35:02]14721: WAF :: fetched 1 new logs [13-07-2022 05:36:01]17295: WAF :: fetched 2 new logs [13-07-2022 05:39:01]25161: WAF :: fetched 3 new logs [13-07-2022 05:41:01]30334: Checking for user cron vulnerabilities [13-07-2022 05:42:02]493: WAF :: fetched 1 new logs [13-07-2022 05:44:01]5862: Checking ditributed CMS bruteforce attacks [13-07-2022 05:44:09]5862: WAF :: fetched 2 new logs [13-07-2022 05:45:01]8459: WAF :: fetched 1 new logs [13-07-2022 05:48:02]16154: WAF :: fetched 1 new logs [13-07-2022 05:51:02]24221: WAF :: fetched 1 new logs [13-07-2022 05:52:01]26839: WAF :: fetched 2 new logs [13-07-2022 05:53:02]29474: WAF :: fetched 3 new logs [13-07-2022 05:54:01]32079: WAF :: fetched 2 new logs [13-07-2022 05:55:02]2269: WAF :: fetched 3 new logs [13-07-2022 05:57:01]7459: WAF :: fetched 2 new logs [13-07-2022 06:00:02]14951: WAF :: fetched 3 new logs [13-07-2022 06:01:01]18048: WAF :: fetched 8 new logs [13-07-2022 06:02:01]20801: WAF :: fetched 10 new logs [13-07-2022 06:03:02]23353: WAF :: fetched 2 new logs [13-07-2022 06:04:01]25964: WAF :: fetched 4 new logs [13-07-2022 06:05:02]28655: WAF :: fetched 6 new logs [13-07-2022 06:06:01]31218: WAF :: fetched 9 new logs [13-07-2022 06:07:01]1561: WAF :: fetched 8 new logs [13-07-2022 06:08:02]4354: WAF :: fetched 3 new logs [13-07-2022 06:09:01]6915: WAF :: fetched 2 new logs [13-07-2022 06:10:02]9617: WAF :: fetched 1 new logs [13-07-2022 06:11:01]12250: WAF :: fetched 7 new logs [13-07-2022 06:12:01]14791: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657703521 [13-07-2022 06:12:01]14791: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 06:12:03]14791: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 06:12:05]14791: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-0612/20220713-061201-Ys6MYdErS8vP-MLRR4JfUQAAABA [13-07-2022 06:12:05]14791: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 06:12:05]14791: WAF :: fetched 3 new logs [13-07-2022 06:13:01]17407: WAF :: fetched 6 new logs [13-07-2022 06:14:02]20231: WAF :: fetched 7 new logs [13-07-2022 06:16:02]25675: WAF :: fetched 3 new logs [13-07-2022 06:17:02]28289: WAF :: fetched 4 new logs [13-07-2022 06:18:02]30844: WAF :: fetched 2 new logs [13-07-2022 06:19:01]1006: WAF :: fetched 2 new logs [13-07-2022 06:20:01]3717: WAF :: fetched 6 new logs [13-07-2022 06:22:02]8924: WAF :: fetched 4 new logs [13-07-2022 06:24:02]14102: WAF :: fetched 5 new logs [13-07-2022 06:25:01]16766: WAF :: fetched 3 new logs [13-07-2022 06:26:02]19527: WAF :: fetched 4 new logs [13-07-2022 06:29:01]27341: WAF :: fetched 2 new logs [13-07-2022 06:33:02]5500: WAF :: fetched 2 new logs [13-07-2022 06:34:01]8004: WAF :: fetched 2 new logs [13-07-2022 06:35:02]10727: WAF :: fetched 1 new logs [13-07-2022 06:38:02]18556: WAF :: fetched 1 new logs [13-07-2022 06:39:02]21149: WAF :: fetched 12 new logs [13-07-2022 06:40:01]23813: WAF :: fetched 28 new logs [13-07-2022 06:41:02]26441: WAF :: fetched 22 new logs [13-07-2022 06:41:02]26441: Checking for user cron vulnerabilities [13-07-2022 06:42:01]28985: WAF :: fetched 21 new logs [13-07-2022 06:43:02]31544: WAF :: fetched 26 new logs [13-07-2022 06:44:02]1755: Checking ditributed CMS bruteforce attacks [13-07-2022 06:44:05]1755: WAF :: fetched 38 new logs [13-07-2022 06:45:01]4503: WAF :: fetched 25 new logs [13-07-2022 06:46:01]7122: WAF :: fetched 1 new logs [13-07-2022 06:47:01]9697: WAF :: fetched 1 new logs [13-07-2022 06:48:01]12284: WAF :: fetched 1 new logs [13-07-2022 06:49:02]14855: WAF :: fetched 2 new logs [13-07-2022 06:50:01]17494: WAF :: fetched 1 new logs [13-07-2022 06:51:02]20314: WAF :: fetched 2 new logs [13-07-2022 06:52:02]22938: WAF :: fetched 4 new logs [13-07-2022 06:53:01]25501: WAF :: fetched 3 new logs [13-07-2022 06:54:02]28129: WAF :: fetched 4 new logs [13-07-2022 06:56:01]1007: WAF :: fetched 1 new logs [13-07-2022 06:57:02]3611: WAF :: fetched 1 new logs [13-07-2022 07:00:02]11175: WAF :: fetched 1 new logs [13-07-2022 07:01:01]14236: WAF :: fetched 2 new logs [13-07-2022 07:11:03]8465: WAF :: fetched 1 new logs [13-07-2022 07:12:02]11082: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657707122 [13-07-2022 07:12:02]11082: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 07:12:04]11082: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 07:12:05]11082: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-0712/20220713-071202-Ys6aclt9SGyJC9mlQOdU_AAAABc [13-07-2022 07:12:05]11082: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 07:13:01]13653: WAF :: fetched 22 new logs [13-07-2022 07:17:02]24427: WAF :: fetched 1 new logs [13-07-2022 07:18:01]26982: WAF :: fetched 46 new logs [13-07-2022 07:20:01]32225: WAF :: fetched 1 new logs [13-07-2022 07:21:02]2476: WAF :: fetched 19 new logs [13-07-2022 07:22:01]5075: WAF :: fetched 9 new logs [13-07-2022 07:23:02]7689: WAF :: fetched 1 new logs [13-07-2022 07:25:01]12859: WAF :: fetched 37 new logs [13-07-2022 07:29:01]23397: WAF :: fetched 2 new logs [13-07-2022 07:31:02]28711: WAF :: fetched 1 new logs [13-07-2022 07:32:01]31295: WAF :: fetched 5 new logs [13-07-2022 07:33:02]1549: WAF :: fetched 2 new logs [13-07-2022 07:34:02]4104: WAF :: fetched 4 new logs [13-07-2022 07:37:01]12113: WAF :: fetched 3 new logs [13-07-2022 07:38:02]14694: WAF :: fetched 1 new logs [13-07-2022 07:41:01]22691: Checking for user cron vulnerabilities [13-07-2022 07:44:01]30362: Checking ditributed CMS bruteforce attacks [13-07-2022 07:45:01]: Checking for definition updates [13-07-2022 07:47:02]5983: WAF :: fetched 1 new logs [13-07-2022 07:50:03]13786: WAF :: fetched 2 new logs [13-07-2022 07:51:01]16404: WAF :: fetched 1 new logs [13-07-2022 07:54:02]24360: WAF :: fetched 1 new logs [13-07-2022 07:55:01]27025: WAF :: fetched 2 new logs [13-07-2022 07:57:01]32345: WAF :: fetched 1 new logs [13-07-2022 08:02:01]13241: WAF :: fetched 1 new logs [13-07-2022 08:05:01]21120: WAF :: fetched 16 new logs [13-07-2022 08:06:02]23810: WAF :: fetched 1 new logs [13-07-2022 08:07:01]26381: WAF :: fetched 2 new logs [13-07-2022 08:12:01]7420: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657710721 [13-07-2022 08:12:01]7420: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 08:12:03]7420: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 08:12:05]7420: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-0812/20220713-081201-Ys6ogRFy_WVamJXEFU4dzQAAABg [13-07-2022 08:12:05]7420: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 08:13:03]10043: WAF :: fetched 32 new logs [13-07-2022 08:14:01]12232: WAF :: fetched 31 new logs [13-07-2022 08:15:02]15274: WAF :: fetched 3 new logs [13-07-2022 08:17:01]20563: WAF :: fetched 4 new logs [13-07-2022 08:18:01]23279: WAF :: fetched 2 new logs [13-07-2022 08:19:02]25887: WAF :: fetched 2 new logs [13-07-2022 08:20:01]28642: WAF :: fetched 63 new logs [13-07-2022 08:21:01]31315: WAF :: fetched 23 new logs [13-07-2022 08:22:01]1449: WAF :: fetched 26 new logs [13-07-2022 08:23:02]4077: WAF :: fetched 28 new logs [13-07-2022 08:24:01]6593: WAF :: fetched 25 new logs [13-07-2022 08:25:02]9432: WAF :: fetched 29 new logs [13-07-2022 08:25:02]9431: httpd.conf changed. Refreshing watchlist. [13-07-2022 08:26:01]12105: WAF :: fetched 1 new logs [13-07-2022 08:27:02]14758: WAF :: fetched 1 new logs [13-07-2022 08:28:03]17329: WAF :: fetched 1 new logs [13-07-2022 08:29:01]20064: WAF :: fetched 2 new logs [13-07-2022 08:30:01]22724: WAF :: fetched 14 new logs [13-07-2022 08:31:02]25450: httpd.conf changed. Refreshing watchlist. [13-07-2022 08:35:02]3570: WAF :: fetched 3 new logs [13-07-2022 08:38:01]11470: WAF :: fetched 4 new logs [13-07-2022 08:39:01]14112: WAF :: fetched 3 new logs [13-07-2022 08:41:02]19481: Checking for user cron vulnerabilities [13-07-2022 08:42:01]22076: WAF :: fetched 2 new logs [13-07-2022 08:43:02]24692: WAF :: fetched 2 new logs [13-07-2022 08:44:01]27308: Checking ditributed CMS bruteforce attacks [13-07-2022 08:44:05]27308: WAF :: fetched 2 new logs [13-07-2022 08:46:01]32574: WAF :: fetched 2 new logs [13-07-2022 08:47:02]2783: WAF :: fetched 5 new logs [13-07-2022 08:51:02]13516: WAF :: fetched 1 new logs [13-07-2022 08:52:01]16102: WAF :: fetched 2 new logs [13-07-2022 08:53:01]18836: WAF :: fetched 2 new logs [13-07-2022 08:54:01]21455: WAF :: fetched 2 new logs [13-07-2022 08:57:01]29625: WAF :: fetched 1 new logs [13-07-2022 08:58:01]32320: WAF :: fetched 1 new logs [13-07-2022 09:04:02]15938: WAF :: fetched 1 new logs [13-07-2022 09:06:01]21393: WAF :: fetched 2 new logs [13-07-2022 09:08:01]26714: WAF :: fetched 3 new logs [13-07-2022 09:11:01]2445: WAF :: fetched 1 new logs [13-07-2022 09:12:02]5161: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657714322 [13-07-2022 09:12:02]5161: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 09:12:04]5161: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 09:12:05]5161: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-0912/20220713-091202-Ys62kr2dRq5ic-N0BoSH-AAAAA4 [13-07-2022 09:12:05]5161: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 09:12:06]5161: WAF :: fetched 1 new logs [13-07-2022 09:13:01]7829: WAF :: fetched 33 new logs [13-07-2022 09:18:02]21434: WAF :: fetched 1 new logs [13-07-2022 09:21:02]29563: WAF :: fetched 1 new logs [13-07-2022 09:24:01]5194: WAF :: fetched 1 new logs [13-07-2022 09:25:02]7996: WAF :: fetched 5 new logs [13-07-2022 09:26:01]10663: WAF :: fetched 4 new logs [13-07-2022 09:27:01]13314: WAF :: fetched 1 new logs [13-07-2022 09:28:01]15950: WAF :: fetched 2 new logs [13-07-2022 09:29:03]18655: WAF :: fetched 27 new logs [13-07-2022 09:30:01]21383: WAF :: fetched 1 new logs [13-07-2022 09:31:01]24140: WAF :: fetched 1 new logs [13-07-2022 09:32:02]26900: WAF :: fetched 1 new logs [13-07-2022 09:36:01]5209: WAF :: fetched 3 new logs [13-07-2022 09:38:01]10538: WAF :: fetched 2 new logs [13-07-2022 09:39:01]13245: WAF :: fetched 1 new logs [13-07-2022 09:40:02]15996: WAF :: fetched 1 new logs [13-07-2022 09:41:01]18805: WAF :: fetched 10 new logs [13-07-2022 09:41:01]18805: Checking for user cron vulnerabilities [13-07-2022 09:42:01]21526: WAF :: fetched 40 new logs [13-07-2022 09:44:01]26847: Checking ditributed CMS bruteforce attacks [13-07-2022 09:45:01]29619: WAF :: fetched 1 new logs [13-07-2022 09:48:02]5250: WAF :: fetched 1 new logs [13-07-2022 09:54:01]21442: WAF :: fetched 1 new logs [13-07-2022 09:56:01]26894: WAF :: fetched 2 new logs [13-07-2022 09:59:01]2591: WAF :: fetched 25 new logs [13-07-2022 10:01:03]8236: WAF :: fetched 2 new logs [13-07-2022 10:02:02]10892: WAF :: fetched 1 new logs [13-07-2022 10:03:01]13591: WAF :: fetched 1 new logs [13-07-2022 10:04:01]16353: WAF :: fetched 21 new logs [13-07-2022 10:06:01]21848: WAF :: fetched 18 new logs [13-07-2022 10:07:01]24527: WAF :: fetched 25 new logs [13-07-2022 10:08:01]27216: WAF :: fetched 2 new logs [13-07-2022 10:09:02]29839: WAF :: fetched 2 new logs [13-07-2022 10:10:02]32605: WAF :: fetched 5 new logs [13-07-2022 10:11:01]2850: WAF :: fetched 25 new logs [13-07-2022 10:12:01]5718: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657717921 [13-07-2022 10:12:01]5718: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 10:12:03]5718: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 10:12:05]5718: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-1012/20220713-101201-Ys7EobPSOvgyNIkZfMkX3QAAABY [13-07-2022 10:12:05]5718: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 10:12:05]5718: WAF :: fetched 6 new logs [13-07-2022 10:13:02]8561: WAF :: fetched 75 new logs [13-07-2022 10:14:01]11268: WAF :: fetched 31 new logs [13-07-2022 10:15:01]14148: WAF :: fetched 11 new logs [13-07-2022 10:16:01]17089: WAF :: fetched 18 new logs [13-07-2022 10:17:02]20022: WAF :: fetched 2 new logs [13-07-2022 10:18:01]22821: WAF :: fetched 33 new logs [13-07-2022 10:19:01]25563: WAF :: fetched 29 new logs [13-07-2022 10:20:01]28688: WAF :: fetched 2 new logs [13-07-2022 10:21:01]31653: WAF :: fetched 2 new logs [13-07-2022 10:25:02]10600: WAF :: fetched 1 new logs [13-07-2022 10:27:01]16217: WAF :: fetched 2 new logs [13-07-2022 10:29:01]21945: WAF :: fetched 59 new logs [13-07-2022 10:30:02]24952: WAF :: fetched 2 new logs [13-07-2022 10:31:02]27828: WAF :: fetched 5 new logs [13-07-2022 10:32:01]30540: WAF :: fetched 2 new logs [13-07-2022 10:33:02]986: WAF :: fetched 1 new logs [13-07-2022 10:35:01]6708: WAF :: fetched 2 new logs [13-07-2022 10:36:02]9541: WAF :: fetched 30 new logs [13-07-2022 10:37:01]12307: WAF :: fetched 1 new logs [13-07-2022 10:38:01]15089: WAF :: fetched 3 new logs [13-07-2022 10:40:01]21035: WAF :: fetched 1 new logs [13-07-2022 10:41:01]23857: Checking for user cron vulnerabilities [13-07-2022 10:44:02]32004: Checking ditributed CMS bruteforce attacks [13-07-2022 10:44:03]32004: WAF :: fetched 1 new logs [13-07-2022 10:45:01]2308: WAF :: fetched 3 new logs [13-07-2022 10:49:01]13351: WAF :: fetched 2 new logs [13-07-2022 10:52:01]21832: WAF :: fetched 3 new logs [13-07-2022 10:53:02]24580: WAF :: fetched 2 new logs [13-07-2022 10:56:01]507: WAF :: fetched 1 new logs [13-07-2022 10:57:03]3460: WAF :: fetched 1 new logs [13-07-2022 10:58:02]6260: WAF :: fetched 1 new logs [13-07-2022 10:59:02]9101: WAF :: fetched 1 new logs [13-07-2022 11:01:02]15048: WAF :: fetched 1 new logs [13-07-2022 11:02:01]17890: WAF :: fetched 1 new logs [13-07-2022 11:03:01]20886: WAF :: fetched 4 new logs [13-07-2022 11:04:01]23628: WAF :: fetched 2 new logs [13-07-2022 11:05:02]26565: WAF :: fetched 2 new logs [13-07-2022 11:06:01]29590: WAF :: fetched 2 new logs [13-07-2022 11:07:02]32384: WAF :: fetched 1 new logs [13-07-2022 11:08:01]2732: WAF :: fetched 2 new logs [13-07-2022 11:08:31]32541: Performed RBL check for 23.111.136.34. [13-07-2022 11:09:02]5495: WAF :: fetched 3 new logs [13-07-2022 11:11:01]11409: WAF :: fetched 9 new logs [13-07-2022 11:12:02]14131: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657721522 [13-07-2022 11:12:02]14131: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 11:12:04]14131: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 11:12:05]14131: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-1112/20220713-111202-Ys7SspkQy8MHVM71HrmungAAACg [13-07-2022 11:12:05]14131: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 11:12:05]14131: WAF :: fetched 3 new logs [13-07-2022 11:13:02]16916: WAF :: fetched 3 new logs [13-07-2022 11:14:02]19815: WAF :: fetched 2 new logs [13-07-2022 11:15:01]22528: WAF :: fetched 15 new logs [13-07-2022 11:16:01]25458: WAF :: fetched 11 new logs [13-07-2022 11:17:02]28445: WAF :: fetched 11 new logs [13-07-2022 11:18:01]31373: WAF :: fetched 17 new logs [13-07-2022 11:19:02]1827: WAF :: fetched 27 new logs [13-07-2022 11:20:01]4990: WAF :: fetched 37 new logs [13-07-2022 11:21:01]8331: WAF :: fetched 33 new logs [13-07-2022 11:22:02]11866: WAF :: fetched 30 new logs [13-07-2022 11:23:01]14807: WAF :: fetched 36 new logs [13-07-2022 11:24:01]17701: WAF :: fetched 21 new logs [13-07-2022 11:25:02]20759: WAF :: fetched 32 new logs [13-07-2022 11:26:01]23551: WAF :: fetched 34 new logs [13-07-2022 11:27:02]26524: WAF :: fetched 116 new logs [13-07-2022 11:28:01]29277: WAF :: fetched 35 new logs [13-07-2022 11:29:02]32153: WAF :: fetched 32 new logs [13-07-2022 11:30:04]2540: WAF :: fetched 22 new logs [13-07-2022 11:31:01]5395: WAF :: fetched 19 new logs [13-07-2022 11:32:01]8789: WAF :: fetched 17 new logs [13-07-2022 11:33:02]11575: WAF :: fetched 17 new logs [13-07-2022 11:34:01]14504: WAF :: fetched 9 new logs [13-07-2022 11:35:02]17508: WAF :: fetched 19 new logs [13-07-2022 11:36:01]20639: WAF :: fetched 19 new logs [13-07-2022 11:37:01]23376: WAF :: fetched 7 new logs [13-07-2022 11:38:02]26479: WAF :: fetched 7 new logs [13-07-2022 11:39:01]29589: WAF :: fetched 11 new logs [13-07-2022 11:40:02]32552: WAF :: fetched 20 new logs [13-07-2022 11:41:01]3336: WAF :: fetched 10 new logs [13-07-2022 11:41:01]3336: Checking for user cron vulnerabilities [13-07-2022 11:42:02]6459: WAF :: fetched 12 new logs [13-07-2022 11:43:01]9381: WAF :: fetched 17 new logs [13-07-2022 11:44:02]12233: Checking ditributed CMS bruteforce attacks [13-07-2022 11:44:04]12233: WAF :: fetched 11 new logs [13-07-2022 11:45:01]14929: WAF :: fetched 11 new logs [13-07-2022 11:46:02]17804: WAF :: fetched 13 new logs [13-07-2022 11:47:01]20757: WAF :: fetched 13 new logs [13-07-2022 11:49:01]26255: WAF :: fetched 6 new logs [13-07-2022 11:50:01]29039: WAF :: fetched 15 new logs [13-07-2022 11:51:02]32080: WAF :: fetched 18 new logs [13-07-2022 11:52:01]2594: WAF :: fetched 13 new logs [13-07-2022 11:53:02]5419: WAF :: fetched 27 new logs [13-07-2022 11:54:02]8226: httpd.conf changed. Refreshing watchlist. [13-07-2022 11:54:03]8216: WAF :: fetched 7 new logs [13-07-2022 11:55:01]11071: WAF :: fetched 2 new logs [13-07-2022 11:56:02]14052: WAF :: fetched 2 new logs [13-07-2022 11:57:01]16777: WAF :: fetched 3 new logs [13-07-2022 11:58:02]19640: WAF :: fetched 5 new logs [13-07-2022 11:59:01]22501: WAF :: fetched 1 new logs [13-07-2022 12:00:01]25031: WAF :: fetched 3 new logs [13-07-2022 12:01:02]28460: WAF :: fetched 11 new logs [13-07-2022 12:02:03]31267: WAF :: fetched 2 new logs [13-07-2022 12:04:02]4290: WAF :: fetched 3 new logs [13-07-2022 12:06:02]9936: WAF :: fetched 5 new logs [13-07-2022 12:07:01]12651: WAF :: fetched 15 new logs [13-07-2022 12:08:01]15455: WAF :: fetched 2 new logs [13-07-2022 12:09:02]18271: WAF :: fetched 1 new logs [13-07-2022 12:11:02]24215: WAF :: fetched 1 new logs [13-07-2022 12:12:02]26906: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657725122 [13-07-2022 12:12:02]26906: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 12:12:04]26906: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 12:12:06]26906: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-1212/20220713-121202-Ys7gwiWKSJ9-SCElbctkGgAAABk [13-07-2022 12:12:06]26906: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 12:12:06]26906: WAF :: fetched 2 new logs [13-07-2022 12:14:01]32461: WAF :: fetched 4 new logs [13-07-2022 12:18:03]11335: WAF :: fetched 3 new logs [13-07-2022 12:19:01]14129: WAF :: fetched 4 new logs [13-07-2022 12:20:02]17017: WAF :: fetched 5 new logs [13-07-2022 12:22:01]22732: WAF :: fetched 4 new logs [13-07-2022 12:24:02]28459: WAF :: fetched 3 new logs [13-07-2022 12:25:02]31598: WAF :: fetched 2 new logs [13-07-2022 12:26:02]2386: WAF :: fetched 1 new logs [13-07-2022 12:27:01]5124: WAF :: fetched 1 new logs [13-07-2022 12:28:02]7947: WAF :: fetched 6 new logs [13-07-2022 12:31:02]16991: WAF :: fetched 4 new logs [13-07-2022 12:32:02]20712: WAF :: fetched 23 new logs [13-07-2022 12:33:01]23395: WAF :: fetched 1 new logs [13-07-2022 12:34:01]26317: WAF :: fetched 27 new logs [13-07-2022 12:35:01]28997: WAF :: fetched 3 new logs [13-07-2022 12:37:03]2452: WAF :: fetched 2 new logs [13-07-2022 12:38:01]5264: WAF :: fetched 1 new logs [13-07-2022 12:39:01]8371: WAF :: fetched 4 new logs [13-07-2022 12:40:02]11192: WAF :: fetched 5 new logs [13-07-2022 12:41:01]14287: Checking for user cron vulnerabilities [13-07-2022 12:42:02]17177: WAF :: fetched 4 new logs [13-07-2022 12:43:01]20182: WAF :: fetched 1 new logs [13-07-2022 12:44:01]22977: Checking ditributed CMS bruteforce attacks [13-07-2022 12:45:01]: Checking for software updates [13-07-2022 12:45:02]25665: WAF :: fetched 3 new logs [13-07-2022 12:46:01]28667: WAF :: fetched 3 new logs [13-07-2022 12:47:02]31465: WAF :: fetched 1 new logs [13-07-2022 12:51:01]10609: WAF :: fetched 2 new logs [13-07-2022 12:53:01]16527: WAF :: fetched 4 new logs [13-07-2022 12:54:02]19497: WAF :: fetched 7 new logs [13-07-2022 12:55:01]22396: WAF :: fetched 2 new logs [13-07-2022 12:56:01]25304: WAF :: fetched 4 new logs [13-07-2022 12:57:02]28200: WAF :: fetched 2 new logs [13-07-2022 12:58:01]31011: WAF :: fetched 2 new logs [13-07-2022 13:00:01]4016: WAF :: fetched 2 new logs [13-07-2022 13:03:02]13171: WAF :: fetched 1 new logs [13-07-2022 13:06:02]21647: WAF :: fetched 3 new logs [13-07-2022 13:09:02]29867: WAF :: fetched 1 new logs [13-07-2022 13:10:01]32589: WAF :: fetched 2 new logs [13-07-2022 13:12:01]5909: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657728721 [13-07-2022 13:12:01]5909: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 13:12:03]5909: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 13:12:05]5909: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-1312/20220713-131201-Ys7u0TeN8FzPvpoIbfDGWwAAAAw [13-07-2022 13:12:05]5909: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 13:12:05]5909: WAF :: fetched 1 new logs [13-07-2022 13:13:01]8800: WAF :: fetched 23 new logs [13-07-2022 13:14:02]11547: WAF :: fetched 1 new logs [13-07-2022 13:15:02]14309: WAF :: fetched 2 new logs [13-07-2022 13:16:01]17192: WAF :: fetched 2 new logs [13-07-2022 13:17:01]20070: WAF :: fetched 7 new logs [13-07-2022 13:18:01]22858: WAF :: fetched 5 new logs [13-07-2022 13:19:02]25719: WAF :: fetched 4 new logs [13-07-2022 13:21:01]31619: WAF :: fetched 1 new logs [13-07-2022 13:22:01]1937: WAF :: fetched 1 new logs [13-07-2022 13:23:02]4874: WAF :: fetched 2 new logs [13-07-2022 13:24:01]7716: WAF :: fetched 3 new logs [13-07-2022 13:27:01]16622: WAF :: fetched 3 new logs [13-07-2022 13:28:02]20044: WAF :: fetched 5 new logs [13-07-2022 13:33:02]2915: WAF :: fetched 1 new logs [13-07-2022 13:35:01]8347: WAF :: fetched 1 new logs [13-07-2022 13:37:02]14285: WAF :: fetched 4 new logs [13-07-2022 13:38:01]17090: WAF :: fetched 3 new logs [13-07-2022 13:39:01]19945: WAF :: fetched 2 new logs [13-07-2022 13:40:02]22909: WAF :: fetched 3 new logs [13-07-2022 13:41:01]25693: WAF :: fetched 4 new logs [13-07-2022 13:41:01]25693: Checking for user cron vulnerabilities [13-07-2022 13:42:02]28546: WAF :: fetched 3 new logs [13-07-2022 13:43:01]31365: WAF :: fetched 52 new logs [13-07-2022 13:44:02]1730: Checking ditributed CMS bruteforce attacks [13-07-2022 13:44:02]1730: WAF :: fetched 4 new logs [13-07-2022 13:45:01]: Checking for definition updates [13-07-2022 13:45:01]4686: WAF :: fetched 2 new logs [13-07-2022 13:45:05]4701: Updated virus defnition : malware.expert.ndb [13-07-2022 13:45:06]4701: Updated virus defnition : malware.expert.fp [13-07-2022 13:46:01]7585: WAF :: fetched 1 new logs [13-07-2022 13:48:01]13268: WAF :: fetched 1 new logs [13-07-2022 13:50:01]19048: WAF :: fetched 2 new logs [13-07-2022 13:51:01]22165: WAF :: fetched 1 new logs [13-07-2022 13:52:01]24932: WAF :: fetched 1 new logs [13-07-2022 13:53:02]27772: WAF :: fetched 1 new logs [13-07-2022 13:54:01]30679: WAF :: fetched 1 new logs [13-07-2022 13:56:02]4360: httpd.conf changed. Refreshing watchlist. [13-07-2022 13:56:03]4354: WAF :: fetched 7 new logs [13-07-2022 13:58:02]10041: WAF :: fetched 1 new logs [13-07-2022 13:59:01]12941: WAF :: fetched 2 new logs [13-07-2022 14:00:01]15490: WAF :: fetched 2 new logs [13-07-2022 14:01:02]19117: WAF :: fetched 1 new logs [13-07-2022 14:04:01]27681: WAF :: fetched 2 new logs [13-07-2022 14:07:01]4001: WAF :: fetched 84 new logs [13-07-2022 14:08:02]6899: WAF :: fetched 1 new logs [13-07-2022 14:09:01]9721: WAF :: fetched 1 new logs [13-07-2022 14:10:02]12627: WAF :: fetched 1 new logs [13-07-2022 14:11:01]15444: WAF :: fetched 1 new logs [13-07-2022 14:12:01]18238: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657732321 [13-07-2022 14:12:01]18238: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 14:12:03]18238: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 14:12:03]18238: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-1412/20220713-141201-Ys784YyrtWr3n4nHjpX2BgAAAAQ [13-07-2022 14:12:03]18238: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 14:12:03]18238: WAF :: fetched 1 new logs [13-07-2022 14:13:02]21131: WAF :: fetched 3 new logs [13-07-2022 14:14:02]23830: WAF :: fetched 1 new logs [13-07-2022 14:15:01]26715: WAF :: fetched 6 new logs [13-07-2022 14:16:01]29814: WAF :: fetched 4 new logs [13-07-2022 14:17:02]32605: WAF :: fetched 1 new logs [13-07-2022 14:18:01]3067: WAF :: fetched 2 new logs [13-07-2022 14:19:01]6104: WAF :: fetched 1 new logs [13-07-2022 14:27:01]30692: WAF :: fetched 1 new logs [13-07-2022 14:29:01]3779: WAF :: fetched 3 new logs [13-07-2022 14:30:01]6670: WAF :: fetched 1 new logs [13-07-2022 14:31:02]9550: WAF :: fetched 1 new logs [13-07-2022 14:32:01]12324: WAF :: fetched 1 new logs [13-07-2022 14:33:02]15117: WAF :: fetched 1 new logs [13-07-2022 14:37:01]26700: WAF :: fetched 1 new logs [13-07-2022 14:41:01]5720: Checking for user cron vulnerabilities [13-07-2022 14:44:01]14100: Checking ditributed CMS bruteforce attacks [13-07-2022 14:44:05]14100: WAF :: fetched 1 new logs [13-07-2022 14:45:01]16851: WAF :: fetched 2 new logs [13-07-2022 14:47:01]22683: WAF :: fetched 2 new logs [13-07-2022 14:48:01]25417: WAF :: fetched 1 new logs [13-07-2022 14:50:01]30927: WAF :: fetched 1 new logs [13-07-2022 14:51:02]1463: WAF :: fetched 2 new logs [13-07-2022 14:52:01]4272: WAF :: fetched 4 new logs [13-07-2022 14:53:01]7006: WAF :: fetched 3 new logs [13-07-2022 14:53:02]6993: Updated license status via CDN [13-07-2022 14:54:01]9883: WAF :: fetched 1 new logs [13-07-2022 14:56:01]15420: WAF :: fetched 1 new logs [13-07-2022 14:57:02]18320: WAF :: fetched 2 new logs [13-07-2022 14:59:01]23903: WAF :: fetched 1 new logs [13-07-2022 15:00:02]26349: WAF :: fetched 1 new logs [13-07-2022 15:01:02]29758: WAF :: fetched 1 new logs [13-07-2022 15:01:02]29759: Reseting cPGuard inotify settings [13-07-2022 15:02:01]32505: WAF :: fetched 1 new logs [13-07-2022 15:03:01]3018: WAF :: fetched 1 new logs [13-07-2022 15:08:01]17066: WAF :: fetched 92 new logs [13-07-2022 15:09:02]20153: WAF :: fetched 74 new logs [13-07-2022 15:11:01]26080: WAF :: fetched 1 new logs [13-07-2022 15:12:02]28809: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657735922 [13-07-2022 15:12:02]28809: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 15:12:04]28809: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 15:12:05]28809: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-1512/20220713-151202-Ys8K8kFX1GtIOdXkSUSEowAAADI [13-07-2022 15:12:05]28809: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 15:12:05]28809: WAF :: fetched 3 new logs [13-07-2022 15:13:01]31460: WAF :: fetched 2 new logs [13-07-2022 15:14:02]2124: WAF :: fetched 5 new logs [13-07-2022 15:15:02]4945: WAF :: fetched 1 new logs [13-07-2022 15:16:01]8047: WAF :: fetched 1 new logs [13-07-2022 15:17:02]10794: WAF :: fetched 5 new logs [13-07-2022 15:21:02]22631: WAF :: fetched 1 new logs [13-07-2022 15:22:01]25502: WAF :: fetched 1 new logs [13-07-2022 15:23:02]28348: WAF :: fetched 4 new logs [13-07-2022 15:24:01]31193: WAF :: fetched 1 new logs [13-07-2022 15:25:01]1791: WAF :: fetched 1 new logs [13-07-2022 15:27:01]7765: WAF :: fetched 1 new logs [13-07-2022 15:31:01]19341: WAF :: fetched 4 new logs [13-07-2022 15:37:02]5238: WAF :: fetched 1 new logs [13-07-2022 15:39:01]10640: WAF :: fetched 2 new logs [13-07-2022 15:40:02]13504: WAF :: fetched 1 new logs [13-07-2022 15:41:01]16403: Checking for user cron vulnerabilities [13-07-2022 15:43:01]22091: WAF :: fetched 25 new logs [13-07-2022 15:44:01]25006: Checking ditributed CMS bruteforce attacks [13-07-2022 15:44:01]25006: WAF :: fetched 13 new logs [13-07-2022 15:45:02]27873: WAF :: fetched 3 new logs [13-07-2022 15:49:01]7058: WAF :: fetched 1 new logs [13-07-2022 15:57:01]30753: WAF :: fetched 2 new logs [13-07-2022 15:58:02]1086: WAF :: fetched 1 new logs [13-07-2022 15:59:01]3735: WAF :: fetched 4 new logs [13-07-2022 16:00:02]6123: WAF :: fetched 7 new logs [13-07-2022 16:01:01]10530: WAF :: fetched 2 new logs [13-07-2022 16:02:01]13338: WAF :: fetched 1 new logs [13-07-2022 16:03:02]16032: WAF :: fetched 1 new logs [13-07-2022 16:06:02]24184: WAF :: fetched 3 new logs [13-07-2022 16:08:01]29581: WAF :: fetched 1 new logs [13-07-2022 16:09:02]32387: WAF :: fetched 2 new logs [13-07-2022 16:11:01]5358: WAF :: fetched 3 new logs [13-07-2022 16:12:02]8188: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657739522 [13-07-2022 16:12:02]8188: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 16:12:04]8188: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 16:12:05]8188: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-1612/20220713-161202-Ys8ZAtBAmszTKSXWmH_mxwAAAAc [13-07-2022 16:12:05]8188: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 16:13:02]10889: WAF :: fetched 1 new logs [13-07-2022 16:14:01]13551: WAF :: fetched 1 new logs [13-07-2022 16:15:01]16244: WAF :: fetched 1 new logs [13-07-2022 16:17:02]21745: WAF :: fetched 4 new logs [13-07-2022 16:19:02]27122: WAF :: fetched 3 new logs [13-07-2022 16:20:01]29875: WAF :: fetched 5 new logs [13-07-2022 16:21:01]32759: WAF :: fetched 1 new logs [13-07-2022 16:23:01]5812: WAF :: fetched 1 new logs [13-07-2022 16:26:01]14366: WAF :: fetched 7 new logs [13-07-2022 16:27:01]17360: WAF :: fetched 2 new logs [13-07-2022 16:29:01]22875: WAF :: fetched 2 new logs [13-07-2022 16:30:01]25599: WAF :: fetched 2 new logs [13-07-2022 16:31:01]28366: WAF :: fetched 2 new logs [13-07-2022 16:32:01]31113: WAF :: fetched 1 new logs [13-07-2022 16:34:01]4381: WAF :: fetched 1 new logs [13-07-2022 16:37:01]12713: WAF :: fetched 1 new logs [13-07-2022 16:38:01]15304: WAF :: fetched 2 new logs [13-07-2022 16:39:02]18049: WAF :: fetched 5 new logs [13-07-2022 16:41:01]23572: Checking for user cron vulnerabilities [13-07-2022 16:44:01]31730: Checking ditributed CMS bruteforce attacks [13-07-2022 16:44:05]31730: WAF :: fetched 2 new logs [13-07-2022 16:45:01]2030: WAF :: fetched 2 new logs [13-07-2022 16:46:02]4782: WAF :: fetched 1 new logs [13-07-2022 16:47:01]7484: WAF :: fetched 5 new logs [13-07-2022 16:48:02]10134: WAF :: fetched 5 new logs [13-07-2022 16:49:01]12751: WAF :: fetched 1 new logs [13-07-2022 16:50:01]15445: WAF :: fetched 1 new logs [13-07-2022 16:51:02]18263: WAF :: fetched 1 new logs [13-07-2022 16:53:02]23737: WAF :: fetched 1 new logs [13-07-2022 16:54:01]26359: WAF :: fetched 1 new logs [13-07-2022 16:55:01]29047: WAF :: fetched 1 new logs [13-07-2022 16:56:02]31773: WAF :: fetched 3 new logs [13-07-2022 16:57:02]2157: WAF :: fetched 3 new logs [13-07-2022 16:59:02]7394: WAF :: fetched 4 new logs [13-07-2022 17:00:01]9714: WAF :: fetched 2 new logs [13-07-2022 17:01:02]13977: WAF :: fetched 7 new logs [13-07-2022 17:03:02]19415: WAF :: fetched 1 new logs [13-07-2022 17:04:01]22024: WAF :: fetched 2 new logs [13-07-2022 17:07:01]30139: WAF :: fetched 5 new logs [13-07-2022 17:08:02]370: WAF :: fetched 1 new logs [13-07-2022 17:09:01]3095: WAF :: fetched 1 new logs [13-07-2022 17:11:02]8590: WAF :: fetched 3 new logs [13-07-2022 17:12:02]11290: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657743122 [13-07-2022 17:12:02]11290: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 17:12:04]11290: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 17:12:04]11290: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-1712/20220713-171202-Ys8nElBqC6jIy1vcBv-zIgAAACg [13-07-2022 17:12:04]11290: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 17:12:04]11290: WAF :: fetched 3 new logs [13-07-2022 17:13:02]13959: WAF :: fetched 2 new logs [13-07-2022 17:14:01]16560: WAF :: fetched 1 new logs [13-07-2022 17:15:02]19291: WAF :: fetched 1 new logs [13-07-2022 17:16:01]21959: WAF :: fetched 3 new logs [13-07-2022 17:21:02]3329: WAF :: fetched 1 new logs [13-07-2022 17:22:01]6048: WAF :: fetched 1 new logs [13-07-2022 17:24:01]11297: WAF :: fetched 2 new logs [13-07-2022 17:27:02]19498: WAF :: fetched 2 new logs [13-07-2022 17:28:01]22074: WAF :: fetched 3 new logs [13-07-2022 17:29:02]24771: WAF :: fetched 3 new logs [13-07-2022 17:30:01]27421: WAF :: fetched 2 new logs [13-07-2022 17:31:02]30173: WAF :: fetched 1 new logs [13-07-2022 17:32:01]380: WAF :: fetched 4 new logs [13-07-2022 17:34:01]5840: WAF :: fetched 2 new logs [13-07-2022 17:35:01]8568: WAF :: fetched 4 new logs [13-07-2022 17:36:01]11261: WAF :: fetched 1 new logs [13-07-2022 17:37:04]13946: WAF :: fetched 3 new logs [13-07-2022 17:39:02]19360: WAF :: fetched 2 new logs [13-07-2022 17:41:01]24805: WAF :: fetched 1 new logs [13-07-2022 17:41:01]24805: Checking for user cron vulnerabilities [13-07-2022 17:42:02]27555: WAF :: fetched 3 new logs [13-07-2022 17:43:01]30166: WAF :: fetched 1 new logs [13-07-2022 17:44:01]328: Checking ditributed CMS bruteforce attacks [13-07-2022 17:45:01]3012: WAF :: fetched 1 new logs [13-07-2022 17:47:01]8365: WAF :: fetched 1 new logs [13-07-2022 17:50:02]16328: WAF :: fetched 2 new logs [13-07-2022 17:58:01]5612: WAF :: fetched 2 new logs [13-07-2022 18:02:01]16510: WAF :: fetched 1 new logs [13-07-2022 18:05:01]24493: WAF :: fetched 1 new logs [13-07-2022 18:06:02]27188: WAF :: fetched 2 new logs [13-07-2022 18:09:01]2791: WAF :: fetched 1 new logs [13-07-2022 18:10:01]5474: WAF :: fetched 1 new logs [13-07-2022 18:11:02]8187: WAF :: fetched 1 new logs [13-07-2022 18:12:02]10856: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657746722 [13-07-2022 18:12:02]10856: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 18:12:04]10856: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 18:12:04]10856: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-1812/20220713-181202-Ys81IvpMB0obpBQRS7_LKgAAAA0 [13-07-2022 18:12:04]10856: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 18:12:04]10856: WAF :: fetched 2 new logs [13-07-2022 18:13:01]13518: WAF :: fetched 2 new logs [13-07-2022 18:14:02]16125: WAF :: fetched 15 new logs [13-07-2022 18:15:01]18864: WAF :: fetched 1 new logs [13-07-2022 18:16:02]21671: WAF :: fetched 1 new logs [13-07-2022 18:17:02]24396: WAF :: fetched 1 new logs [13-07-2022 18:19:02]29793: WAF :: fetched 1 new logs [13-07-2022 18:20:02]32415: WAF :: fetched 2 new logs [13-07-2022 18:21:01]2745: WAF :: fetched 1 new logs [13-07-2022 18:22:01]5431: WAF :: fetched 1 new logs [13-07-2022 18:23:02]8075: WAF :: fetched 2 new logs [13-07-2022 18:25:02]13404: WAF :: fetched 2 new logs [13-07-2022 18:26:01]16087: WAF :: fetched 1 new logs [13-07-2022 18:27:03]18938: WAF :: fetched 1 new logs [13-07-2022 18:28:01]21544: WAF :: fetched 1 new logs [13-07-2022 18:30:02]26832: WAF :: fetched 1 new logs [13-07-2022 18:31:01]29538: WAF :: fetched 1 new logs [13-07-2022 18:32:02]32356: WAF :: fetched 1 new logs [13-07-2022 18:33:02]2619: WAF :: fetched 1 new logs [13-07-2022 18:34:01]5237: WAF :: fetched 2 new logs [13-07-2022 18:35:02]7886: WAF :: fetched 1 new logs [13-07-2022 18:36:02]10594: WAF :: fetched 4 new logs [13-07-2022 18:37:01]13308: WAF :: fetched 1 new logs [13-07-2022 18:38:02]15957: WAF :: fetched 1 new logs [13-07-2022 18:39:01]18514: WAF :: fetched 3 new logs [13-07-2022 18:40:02]21359: WAF :: fetched 1 new logs [13-07-2022 18:41:01]24082: Checking for user cron vulnerabilities [13-07-2022 18:44:01]32007: Checking ditributed CMS bruteforce attacks [13-07-2022 18:46:01]5152: WAF :: fetched 1 new logs [13-07-2022 18:47:02]7981: WAF :: fetched 1 new logs [13-07-2022 18:53:02]24361: WAF :: fetched 4 new logs [13-07-2022 18:54:02]26975: WAF :: fetched 1 new logs [13-07-2022 18:59:01]8005: WAF :: fetched 1 new logs [13-07-2022 19:01:01]13742: WAF :: fetched 2 new logs [13-07-2022 19:05:02]24690: WAF :: fetched 2 new logs [13-07-2022 19:06:01]27398: WAF :: fetched 2 new logs [13-07-2022 19:07:01]30192: WAF :: fetched 2 new logs [13-07-2022 19:08:01]361: WAF :: fetched 1 new logs [13-07-2022 19:10:02]5801: WAF :: fetched 1 new logs [13-07-2022 19:11:01]8576: WAF :: fetched 1 new logs [13-07-2022 19:12:02]11371: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657750322 [13-07-2022 19:12:02]11371: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 19:12:04]11371: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 19:12:05]11371: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-1912/20220713-191202-Ys9DMtcRxqtjrOfUqCkhPAAAAD8 [13-07-2022 19:12:05]11371: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 19:12:05]11371: WAF :: fetched 29 new logs [13-07-2022 19:13:01]14040: WAF :: fetched 3 new logs [13-07-2022 19:14:03]16754: WAF :: fetched 2 new logs [13-07-2022 19:15:01]19680: WAF :: fetched 2 new logs [13-07-2022 19:16:02]22756: WAF :: fetched 1 new logs [13-07-2022 19:18:01]28551: WAF :: fetched 2 new logs [13-07-2022 19:20:02]1886: WAF :: fetched 5 new logs [13-07-2022 19:25:02]16355: WAF :: fetched 1 new logs [13-07-2022 19:30:02]30748: WAF :: fetched 1 new logs [13-07-2022 19:31:02]1263: WAF :: fetched 1 new logs [13-07-2022 19:34:02]10191: WAF :: fetched 1 new logs [13-07-2022 19:35:02]12994: WAF :: fetched 1 new logs [13-07-2022 19:38:04]21747: WAF :: fetched 2 new logs [13-07-2022 19:39:02]24517: WAF :: fetched 8 new logs [13-07-2022 19:40:01]27264: WAF :: fetched 3 new logs [13-07-2022 19:41:01]30112: WAF :: fetched 3 new logs [13-07-2022 19:41:01]30112: Checking for user cron vulnerabilities [13-07-2022 19:42:02]573: WAF :: fetched 3 new logs [13-07-2022 19:43:01]3380: WAF :: fetched 1 new logs [13-07-2022 19:44:01]6082: Checking ditributed CMS bruteforce attacks [13-07-2022 19:44:02]6082: WAF :: fetched 1 new logs [13-07-2022 19:45:01]: Checking for definition updates [13-07-2022 19:45:01]8744: WAF :: fetched 4 new logs [13-07-2022 19:50:01]22852: WAF :: fetched 1 new logs [13-07-2022 19:51:02]25732: WAF :: fetched 1 new logs [13-07-2022 19:52:01]28722: WAF :: fetched 1 new logs [13-07-2022 19:53:02]31458: WAF :: fetched 3 new logs [13-07-2022 19:54:01]1924: WAF :: fetched 1 new logs [13-07-2022 19:55:01]4644: WAF :: fetched 1 new logs [13-07-2022 19:56:02]7406: WAF :: fetched 2 new logs [13-07-2022 19:58:01]12980: WAF :: fetched 3 new logs [13-07-2022 19:59:01]15667: WAF :: fetched 1 new logs [13-07-2022 20:02:02]24424: WAF :: fetched 2 new logs [13-07-2022 20:03:01]27164: WAF :: fetched 3 new logs [13-07-2022 20:04:01]30086: WAF :: fetched 3 new logs [13-07-2022 20:06:01]3251: WAF :: fetched 6 new logs [13-07-2022 20:07:01]6116: WAF :: fetched 5 new logs [13-07-2022 20:08:02]8787: WAF :: fetched 2 new logs [13-07-2022 20:09:04]11698: WAF :: fetched 6 new logs [13-07-2022 20:10:02]14453: WAF :: fetched 4 new logs [13-07-2022 20:11:02]17154: WAF :: fetched 2 new logs [13-07-2022 20:12:01]20138: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657753921 [13-07-2022 20:12:01]20138: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 20:12:03]20138: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 20:12:04]20138: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-2012/20220713-201201-Ys9RQQT3yzd9Rkkt-tJbuAAAADs [13-07-2022 20:12:04]20138: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [13-07-2022 20:12:04]20138: WAF :: fetched 9 new logs [13-07-2022 20:13:02]22866: WAF :: fetched 12 new logs [13-07-2022 20:14:02]25594: WAF :: fetched 7 new logs [13-07-2022 20:15:01]28454: WAF :: fetched 12 new logs [13-07-2022 20:16:02]31319: WAF :: fetched 9 new logs [13-07-2022 20:17:02]1905: WAF :: fetched 10 new logs [13-07-2022 20:18:01]4820: WAF :: fetched 1 new logs [13-07-2022 20:19:02]7697: WAF :: fetched 6 new logs [13-07-2022 20:20:02]10362: WAF :: fetched 7 new logs [13-07-2022 20:21:01]13204: WAF :: fetched 5 new logs [13-07-2022 20:22:02]16065: WAF :: fetched 5 new logs [13-07-2022 20:23:01]18931: WAF :: fetched 6 new logs [13-07-2022 20:24:01]21535: WAF :: fetched 2 new logs [13-07-2022 20:25:02]24452: WAF :: fetched 2 new logs [13-07-2022 20:26:02]27224: WAF :: fetched 4 new logs [13-07-2022 20:27:01]31011: WAF :: fetched 5 new logs [13-07-2022 20:28:01]2107: WAF :: fetched 6 new logs [13-07-2022 20:29:02]4824: WAF :: fetched 4 new logs [13-07-2022 20:30:01]7705: WAF :: fetched 5 new logs [13-07-2022 20:31:01]10586: WAF :: fetched 3 new logs [13-07-2022 20:32:02]13485: WAF :: fetched 10 new logs [13-07-2022 20:33:01]16110: WAF :: fetched 9 new logs [13-07-2022 20:34:02]18891: WAF :: fetched 3 new logs [13-07-2022 20:35:01]21704: WAF :: fetched 2 new logs [13-07-2022 20:36:02]24446: WAF :: fetched 2 new logs [13-07-2022 20:37:01]27393: WAF :: fetched 7 new logs [13-07-2022 20:38:01]30095: WAF :: fetched 5 new logs [13-07-2022 20:39:02]864: WAF :: fetched 7 new logs [13-07-2022 20:40:02]3620: WAF :: fetched 4 new logs [13-07-2022 20:41:02]6425: WAF :: fetched 4 new logs [13-07-2022 20:41:02]6425: Checking for user cron vulnerabilities [13-07-2022 20:42:02]9154: WAF :: fetched 3 new logs [13-07-2022 20:43:01]11944: WAF :: fetched 4 new logs [13-07-2022 20:44:02]14619: Checking ditributed CMS bruteforce attacks [13-07-2022 20:44:02]14619: WAF :: fetched 2 new logs [13-07-2022 20:45:01]17338: WAF :: fetched 2 new logs [13-07-2022 20:46:01]20237: WAF :: fetched 2 new logs [13-07-2022 20:47:02]22950: WAF :: fetched 3 new logs [13-07-2022 20:48:01]25671: WAF :: fetched 5 new logs [13-07-2022 20:49:02]28447: WAF :: fetched 5 new logs [13-07-2022 20:50:01]31080: WAF :: fetched 2 new logs [13-07-2022 20:51:01]1421: WAF :: fetched 3 new logs [13-07-2022 20:52:02]4163: WAF :: fetched 3 new logs [13-07-2022 20:53:02]6820: WAF :: fetched 3 new logs [13-07-2022 20:54:01]9496: WAF :: fetched 3 new logs [13-07-2022 20:55:02]12182: WAF :: fetched 1 new logs [13-07-2022 20:56:02]14890: WAF :: fetched 4 new logs [13-07-2022 20:57:01]17886: WAF :: fetched 4 new logs [13-07-2022 20:58:02]20752: WAF :: fetched 3 new logs [13-07-2022 20:59:01]23489: WAF :: fetched 5 new logs [13-07-2022 21:01:02]29363: WAF :: fetched 8 new logs [13-07-2022 21:03:01]2566: WAF :: fetched 1 new logs [13-07-2022 21:07:01]13783: WAF :: fetched 1 new logs [13-07-2022 21:09:02]19557: WAF :: fetched 1 new logs [13-07-2022 21:10:02]22323: WAF :: fetched 1 new logs [13-07-2022 21:11:02]25163: WAF :: fetched 2 new logs [13-07-2022 21:12:02]28042: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657757522 [13-07-2022 21:12:02]28042: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 21:12:04]28042: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 21:12:04]28042: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-2112/20220713-211202-Ys9fUsjY_o1iIG5wD75jbQAAAAo [13-07-2022 21:12:04]28042: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 21:12:04]28042: WAF :: fetched 199 new logs [13-07-2022 21:13:01]30832: WAF :: fetched 1 new logs [13-07-2022 21:15:01]4100: WAF :: fetched 3 new logs [13-07-2022 21:17:02]9813: WAF :: fetched 1 new logs [13-07-2022 21:19:01]15474: WAF :: fetched 1 new logs [13-07-2022 21:20:01]18338: WAF :: fetched 4 new logs [13-07-2022 21:21:02]21339: WAF :: fetched 2 new logs [13-07-2022 21:22:01]24217: WAF :: fetched 4 new logs [13-07-2022 21:23:01]27093: WAF :: fetched 3 new logs [13-07-2022 21:24:01]30949: WAF :: fetched 3 new logs [13-07-2022 21:25:02]1376: WAF :: fetched 4 new logs [13-07-2022 21:26:01]4283: WAF :: fetched 7 new logs [13-07-2022 21:27:01]7111: WAF :: fetched 9 new logs [13-07-2022 21:28:02]10107: WAF :: fetched 9 new logs [13-07-2022 21:29:01]12843: WAF :: fetched 12 new logs [13-07-2022 21:30:02]15767: WAF :: fetched 17 new logs [13-07-2022 21:31:01]19012: WAF :: fetched 6 new logs [13-07-2022 21:32:01]21806: WAF :: fetched 4 new logs [13-07-2022 21:33:01]24630: WAF :: fetched 7 new logs [13-07-2022 21:34:01]27364: WAF :: fetched 6 new logs [13-07-2022 21:35:03]30133: WAF :: fetched 6 new logs [13-07-2022 21:36:02]641: WAF :: fetched 2 new logs [13-07-2022 21:37:01]3516: WAF :: fetched 6 new logs [13-07-2022 21:38:01]6431: WAF :: fetched 3 new logs [13-07-2022 21:39:02]9248: WAF :: fetched 5 new logs [13-07-2022 21:40:01]11989: WAF :: fetched 6 new logs [13-07-2022 21:41:02]14830: WAF :: fetched 5 new logs [13-07-2022 21:41:02]14830: Checking for user cron vulnerabilities [13-07-2022 21:42:01]18590: WAF :: fetched 6 new logs [13-07-2022 21:43:02]21400: WAF :: fetched 9 new logs [13-07-2022 21:44:01]24072: Checking ditributed CMS bruteforce attacks [13-07-2022 21:44:01]24072: WAF :: fetched 2 new logs [13-07-2022 21:46:02]29730: WAF :: fetched 2 new logs [13-07-2022 21:48:02]3335: WAF :: fetched 1 new logs [13-07-2022 21:49:01]5998: WAF :: fetched 1 new logs [13-07-2022 21:50:02]8782: WAF :: fetched 2 new logs [13-07-2022 21:54:01]20091: WAF :: fetched 2 new logs [13-07-2022 21:55:01]22868: WAF :: fetched 3 new logs [13-07-2022 21:56:02]25816: WAF :: fetched 7 new logs [13-07-2022 21:57:02]28537: WAF :: fetched 6 new logs [13-07-2022 21:58:01]31359: WAF :: fetched 7 new logs [13-07-2022 21:59:03]1663: WAF :: fetched 6 new logs [13-07-2022 22:00:02]4201: WAF :: fetched 7 new logs [13-07-2022 22:01:01]7421: WAF :: fetched 3 new logs [13-07-2022 22:02:01]10198: WAF :: fetched 4 new logs [13-07-2022 22:03:01]13036: WAF :: fetched 7 new logs [13-07-2022 22:04:02]15715: WAF :: fetched 5 new logs [13-07-2022 22:05:02]18467: WAF :: fetched 1 new logs [13-07-2022 22:06:01]21394: WAF :: fetched 1 new logs [13-07-2022 22:07:04]24133: WAF :: fetched 1 new logs [13-07-2022 22:07:10]24128: Performing Domain reputation checks [13-07-2022 22:10:01]32355: WAF :: fetched 3 new logs [13-07-2022 22:11:02]2933: WAF :: fetched 2 new logs [13-07-2022 22:12:01]5646: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657761121 [13-07-2022 22:12:01]5646: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 22:12:03]5646: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 22:12:05]5646: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-2212/20220713-221201-Ys9tYX6kpPP74Mt-xLXiBwAAABM [13-07-2022 22:12:05]5646: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 22:12:05]5646: WAF :: fetched 6 new logs [13-07-2022 22:13:02]8556: WAF :: fetched 1 new logs [13-07-2022 22:14:02]11167: WAF :: fetched 2 new logs [13-07-2022 22:15:02]13829: WAF :: fetched 2 new logs [13-07-2022 22:17:01]19358: WAF :: fetched 2 new logs [13-07-2022 22:18:01]22217: WAF :: fetched 1 new logs [13-07-2022 22:19:02]24906: WAF :: fetched 1 new logs [13-07-2022 22:22:01]1026: WAF :: fetched 1 new logs [13-07-2022 22:25:01]9510: WAF :: fetched 1 new logs [13-07-2022 22:26:01]12467: WAF :: fetched 2 new logs [13-07-2022 22:29:02]22059: WAF :: fetched 3 new logs [13-07-2022 22:30:01]24844: WAF :: fetched 1 new logs [13-07-2022 22:33:01]1037: WAF :: fetched 1 new logs [13-07-2022 22:35:01]6710: WAF :: fetched 5 new logs [13-07-2022 22:36:01]9795: WAF :: fetched 1 new logs [13-07-2022 22:37:02]12586: WAF :: fetched 1 new logs [13-07-2022 22:39:04]18209: WAF :: fetched 1 new logs [13-07-2022 22:40:02]21091: WAF :: fetched 3 new logs [13-07-2022 22:41:02]23936: WAF :: fetched 2 new logs [13-07-2022 22:41:02]23936: Checking for user cron vulnerabilities [13-07-2022 22:42:01]26681: WAF :: fetched 3 new logs [13-07-2022 22:43:01]29573: WAF :: fetched 2 new logs [13-07-2022 22:44:01]32298: Checking ditributed CMS bruteforce attacks [13-07-2022 22:48:04]11125: WAF :: fetched 2 new logs [13-07-2022 22:50:01]16592: WAF :: fetched 1 new logs [13-07-2022 22:51:02]19572: WAF :: fetched 1 new logs [13-07-2022 22:53:01]24995: WAF :: fetched 3 new logs [13-07-2022 22:55:02]30498: WAF :: fetched 1 new logs [13-07-2022 22:56:03]767: WAF :: fetched 4 new logs [13-07-2022 22:58:02]6462: WAF :: fetched 5 new logs [13-07-2022 22:59:01]9149: WAF :: fetched 2 new logs [13-07-2022 23:00:02]11652: WAF :: fetched 1 new logs [13-07-2022 23:07:41]31597: Performed RBL check for 23.111.136.34. [13-07-2022 23:08:02]1970: WAF :: fetched 3 new logs [13-07-2022 23:09:02]4816: WAF :: fetched 2 new logs [13-07-2022 23:10:01]7429: WAF :: fetched 1 new logs [13-07-2022 23:11:02]10340: WAF :: fetched 5 new logs [13-07-2022 23:12:02]13055: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657764722 [13-07-2022 23:12:03]13055: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [13-07-2022 23:12:05]13055: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [13-07-2022 23:12:05]13055: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220713/20220713-2312/20220713-231203-Ys97cjafDNDitgM5YYLjmgAAAAE [13-07-2022 23:12:05]13055: WAF :: No suitable log file found. Using SQLite.. [13-07-2022 23:12:05]13055: WAF :: fetched 2 new logs [13-07-2022 23:13:02]15962: WAF :: fetched 9 new logs [13-07-2022 23:14:01]18635: WAF :: fetched 3 new logs [13-07-2022 23:16:02]24423: WAF :: fetched 2 new logs [13-07-2022 23:17:01]27212: WAF :: fetched 1 new logs [13-07-2022 23:18:02]30189: WAF :: fetched 2 new logs [13-07-2022 23:19:02]712: WAF :: fetched 2 new logs [13-07-2022 23:20:01]3619: WAF :: fetched 1 new logs [13-07-2022 23:24:01]16060: WAF :: fetched 1 new logs [13-07-2022 23:25:01]18997: WAF :: fetched 1 new logs [13-07-2022 23:26:02]21809: WAF :: fetched 2 new logs [13-07-2022 23:27:01]24509: WAF :: fetched 2 new logs [13-07-2022 23:32:02]6295: WAF :: fetched 1 new logs [13-07-2022 23:33:01]9111: WAF :: fetched 1 new logs [13-07-2022 23:36:01]17502: WAF :: fetched 2 new logs [13-07-2022 23:37:02]20419: WAF :: fetched 1 new logs [13-07-2022 23:40:02]28945: WAF :: fetched 3 new logs [13-07-2022 23:41:02]31859: WAF :: fetched 5 new logs [13-07-2022 23:41:02]31859: Checking for user cron vulnerabilities [13-07-2022 23:43:01]5112: WAF :: fetched 1 new logs [13-07-2022 23:44:02]8024: Checking ditributed CMS bruteforce attacks [13-07-2022 23:44:02]8024: WAF :: fetched 3 new logs [13-07-2022 23:45:01]10744: WAF :: fetched 28 new logs [13-07-2022 23:46:01]13503: WAF :: fetched 3 new logs [13-07-2022 23:49:02]22077: WAF :: fetched 1 new logs [13-07-2022 23:50:01]24746: WAF :: fetched 6 new logs [13-07-2022 23:51:01]27508: WAF :: fetched 38 new logs [13-07-2022 23:52:04]30280: WAF :: fetched 9 new logs [13-07-2022 23:53:01]653: WAF :: fetched 8 new logs [13-07-2022 23:54:01]3406: WAF :: fetched 6 new logs [13-07-2022 23:55:02]6562: WAF :: fetched 38 new logs [13-07-2022 23:55:02]6571: httpd.conf changed. Refreshing watchlist. [13-07-2022 23:56:01]9334: WAF :: fetched 34 new logs [13-07-2022 23:57:01]12273: WAF :: fetched 6 new logs [13-07-2022 23:58:02]15153: WAF :: fetched 7 new logs [13-07-2022 23:59:01]17929: WAF :: fetched 6 new logs [14-07-2022 00:00:01]20451: WAF :: fetched 74 new logs [14-07-2022 00:01:02]23822: WAF :: fetched 3 new logs [14-07-2022 00:01:02]23821: httpd.conf changed. Refreshing watchlist. [14-07-2022 00:01:05]23822: Sending daily report for July 14, 2022 [14-07-2022 00:03:01]29418: WAF :: fetched 1 new logs [14-07-2022 00:04:02]32111: WAF :: fetched 2 new logs [14-07-2022 00:05:02]2452: Deleted 0 entries older than 6 MONTH from scanner_logs [14-07-2022 00:05:02]2452: Deleted 0 files from Quarantine [14-07-2022 00:06:01]5209: WAF :: fetched 1 new logs [14-07-2022 00:07:03]7858: WAF :: fetched 2 new logs [14-07-2022 00:08:01]10586: WAF :: fetched 6 new logs [14-07-2022 00:10:02]15923: WAF :: fetched 33 new logs [14-07-2022 00:11:01]18659: WAF :: fetched 17 new logs [14-07-2022 00:12:02]21298: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657768322 [14-07-2022 00:12:02]21298: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 00:12:04]21298: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 00:12:05]21298: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-0012/20220714-001202-Ys-JghB1smAZrVzGEa8oGQAAAAo [14-07-2022 00:12:05]21298: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 00:12:05]21298: WAF :: fetched 3 new logs [14-07-2022 00:13:02]24001: WAF :: fetched 27 new logs [14-07-2022 00:14:01]26592: WAF :: fetched 1 new logs [14-07-2022 00:15:02]29311: WAF :: fetched 3 new logs [14-07-2022 00:15:02]29310: httpd.conf changed. Refreshing watchlist. [14-07-2022 00:16:02]32207: httpd.conf changed. Refreshing watchlist. [14-07-2022 00:17:01]2470: WAF :: fetched 27 new logs [14-07-2022 00:18:02]5375: WAF :: fetched 1 new logs [14-07-2022 00:18:02]5371: httpd.conf changed. Refreshing watchlist. [14-07-2022 00:20:01]10743: WAF :: fetched 7 new logs [14-07-2022 00:21:02]13613: WAF :: fetched 1 new logs [14-07-2022 00:21:02]13617: httpd.conf changed. Refreshing watchlist. [14-07-2022 00:22:01]16274: WAF :: fetched 3 new logs [14-07-2022 00:24:02]21737: WAF :: fetched 1 new logs [14-07-2022 00:25:01]24422: WAF :: fetched 3 new logs [14-07-2022 00:27:02]29829: WAF :: fetched 1 new logs [14-07-2022 00:30:02]5517: WAF :: fetched 4 new logs [14-07-2022 00:31:01]8292: WAF :: fetched 3 new logs [14-07-2022 00:33:01]13758: WAF :: fetched 1 new logs [14-07-2022 00:37:01]25007: WAF :: fetched 4 new logs [14-07-2022 00:38:01]27774: WAF :: fetched 2 new logs [14-07-2022 00:39:01]30398: WAF :: fetched 27 new logs [14-07-2022 00:41:02]3419: Checking for user cron vulnerabilities [14-07-2022 00:44:01]11423: Checking ditributed CMS bruteforce attacks [14-07-2022 00:45:02]: Checking for software updates [14-07-2022 00:45:02]14105: WAF :: fetched 7 new logs [14-07-2022 00:47:04]19625: WAF :: fetched 2 new logs [14-07-2022 00:48:01]22288: WAF :: fetched 3 new logs [14-07-2022 00:51:02]30358: WAF :: fetched 1 new logs [14-07-2022 00:53:01]3331: WAF :: fetched 53 new logs [14-07-2022 00:54:02]5991: WAF :: fetched 3 new logs [14-07-2022 00:55:02]8633: WAF :: fetched 1 new logs [14-07-2022 00:56:01]11309: WAF :: fetched 2 new logs [14-07-2022 00:58:02]16720: WAF :: fetched 1 new logs [14-07-2022 00:59:01]19533: WAF :: fetched 1 new logs [14-07-2022 01:00:01]21856: WAF :: fetched 1 new logs [14-07-2022 01:03:02]528: WAF :: fetched 1 new logs [14-07-2022 01:06:02]9352: WAF :: fetched 1 new logs [14-07-2022 01:09:02]18197: WAF :: fetched 2 new logs [14-07-2022 01:10:02]20936: WAF :: fetched 1 new logs [14-07-2022 01:12:01]26795: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657771921 [14-07-2022 01:12:01]26795: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 01:12:03]26795: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 01:12:04]26795: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-0112/20220714-011201-Ys-XkRUpMLidYW6hyMMLnwAAAA0 [14-07-2022 01:12:04]26795: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 01:12:04]26795: WAF :: fetched 1 new logs [14-07-2022 01:13:01]29591: WAF :: fetched 1 new logs [14-07-2022 01:14:02]32255: WAF :: fetched 3 new logs [14-07-2022 01:17:01]8293: WAF :: fetched 3 new logs [14-07-2022 01:26:02]1701: WAF :: fetched 2 new logs [14-07-2022 01:39:01]6954: WAF :: fetched 3 new logs [14-07-2022 01:41:02]12569: WAF :: fetched 1 new logs [14-07-2022 01:41:02]12569: Checking for user cron vulnerabilities [14-07-2022 01:42:01]15676: WAF :: fetched 3 new logs [14-07-2022 01:44:02]21577: Checking ditributed CMS bruteforce attacks [14-07-2022 01:44:02]21577: WAF :: fetched 3 new logs [14-07-2022 01:45:01]: Checking for definition updates [14-07-2022 01:50:03]6801: WAF :: fetched 1 new logs [14-07-2022 01:51:02]9575: WAF :: fetched 1 new logs [14-07-2022 01:53:01]15111: WAF :: fetched 1 new logs [14-07-2022 01:58:03]29244: WAF :: fetched 1 new logs [14-07-2022 02:01:02]5657: WAF :: fetched 4 new logs [14-07-2022 02:02:01]8334: WAF :: fetched 4 new logs [14-07-2022 02:05:02]16324: WAF :: fetched 1 new logs [14-07-2022 02:06:01]19092: WAF :: fetched 2 new logs [14-07-2022 02:08:02]24758: WAF :: fetched 17 new logs [14-07-2022 02:12:02]3057: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657775522 [14-07-2022 02:12:02]3057: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 02:12:04]3057: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 02:12:05]3057: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-0212/20220714-021202-Ys-loi0U307FBCf-GzAoOQAAABI [14-07-2022 02:12:05]3057: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [14-07-2022 02:12:06]3057: WAF :: fetched 1 new logs [14-07-2022 02:13:01]5685: WAF :: fetched 1 new logs [14-07-2022 02:15:04]11012: WAF :: fetched 1 new logs [14-07-2022 02:17:02]16298: WAF :: fetched 1 new logs [14-07-2022 02:18:01]19026: WAF :: fetched 1 new logs [14-07-2022 02:19:01]21778: WAF :: fetched 33 new logs [14-07-2022 02:21:01]27105: WAF :: fetched 33 new logs [14-07-2022 02:22:02]29769: WAF :: fetched 2 new logs [14-07-2022 02:23:01]32407: WAF :: fetched 1 new logs [14-07-2022 02:26:02]8127: WAF :: fetched 34 new logs [14-07-2022 02:27:01]10773: WAF :: fetched 3 new logs [14-07-2022 02:28:02]13468: WAF :: fetched 3 new logs [14-07-2022 02:30:02]18864: WAF :: fetched 2 new logs [14-07-2022 02:31:02]21568: WAF :: fetched 2 new logs [14-07-2022 02:33:01]26900: WAF :: fetched 4 new logs [14-07-2022 02:34:01]29676: WAF :: fetched 1 new logs [14-07-2022 02:35:02]32402: WAF :: fetched 2 new logs [14-07-2022 02:36:02]2685: WAF :: fetched 3 new logs [14-07-2022 02:40:02]13304: WAF :: fetched 2 new logs [14-07-2022 02:41:01]15991: WAF :: fetched 7 new logs [14-07-2022 02:41:01]15991: Checking for user cron vulnerabilities [14-07-2022 02:44:02]24066: Checking ditributed CMS bruteforce attacks [14-07-2022 02:44:02]24066: WAF :: fetched 1 new logs [14-07-2022 02:45:01]26769: WAF :: fetched 1 new logs [14-07-2022 02:53:02]15829: Updated license status via CDN [14-07-2022 02:54:01]18650: WAF :: fetched 2 new logs [14-07-2022 02:55:02]21354: WAF :: fetched 1 new logs [14-07-2022 02:57:02]27151: WAF :: fetched 1 new logs [14-07-2022 02:58:02]30530: WAF :: fetched 2 new logs [14-07-2022 02:59:02]1132: WAF :: fetched 2 new logs [14-07-2022 03:00:02]3671: WAF :: fetched 1 new logs [14-07-2022 03:00:34]3671: Found and updated 32 CMS installations [14-07-2022 03:01:02]6903: WAF :: fetched 2 new logs [14-07-2022 03:01:16]3671: Wordpress installation #9 oabilheus.org.br has errors [14-07-2022 03:02:01]9765: WAF :: fetched 1 new logs [14-07-2022 03:03:02]12624: WAF :: fetched 5 new logs [14-07-2022 03:03:05]3671: Wordpress installation #27 site.foxcard.com.br has errors [14-07-2022 03:04:21]3671: Sending CMS version vulnerability report emails to cpanel users [14-07-2022 03:04:24]3671: Checking wordpress installations for suspicious directories [14-07-2022 03:04:32]12664: Sending CMS version vulnerability report emails to cpanel users [14-07-2022 03:04:35]12664: Checking wordpress installations for suspicious directories [14-07-2022 03:05:04]19004: WAF :: fetched 4 new logs [14-07-2022 03:06:01]21700: WAF :: fetched 8 new logs [14-07-2022 03:08:02]26984: WAF :: fetched 1 new logs [14-07-2022 03:12:02]22155: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657779122 [14-07-2022 03:12:02]22155: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 03:12:04]22155: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 03:12:04]22155: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-0312/20220714-031202-Ys-zsvN4w_nB0__DYyAeOgAAAAI [14-07-2022 03:12:04]22155: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [14-07-2022 03:12:04]22155: WAF :: fetched 1 new logs [14-07-2022 03:13:02]879: WAF :: fetched 1 new logs [14-07-2022 03:15:02]16063: WAF :: fetched 1 new logs [14-07-2022 03:17:02]22214: WAF :: fetched 4 new logs [14-07-2022 03:19:01]27686: WAF :: fetched 3 new logs [14-07-2022 03:21:01]829: WAF :: fetched 4 new logs [14-07-2022 03:25:01]11937: WAF :: fetched 2 new logs [14-07-2022 03:29:02]22835: WAF :: fetched 2 new logs [14-07-2022 03:30:01]25451: WAF :: fetched 1 new logs [14-07-2022 03:31:02]28135: WAF :: fetched 1 new logs [14-07-2022 03:32:01]30733: WAF :: fetched 2 new logs [14-07-2022 03:34:01]3782: WAF :: fetched 1 new logs [14-07-2022 03:35:03]6401: WAF :: fetched 1 new logs [14-07-2022 03:39:02]16914: WAF :: fetched 5 new logs [14-07-2022 03:41:02]22325: WAF :: fetched 33 new logs [14-07-2022 03:41:02]22325: Checking for user cron vulnerabilities [14-07-2022 03:43:01]27974: WAF :: fetched 133 new logs [14-07-2022 03:44:02]31004: Checking ditributed CMS bruteforce attacks [14-07-2022 03:45:02]1276: WAF :: fetched 2 new logs [14-07-2022 03:47:02]6838: WAF :: fetched 4 new logs [14-07-2022 03:48:01]9533: WAF :: fetched 1 new logs [14-07-2022 03:51:02]18173: WAF :: fetched 2 new logs [14-07-2022 03:56:02]31931: WAF :: fetched 1 new logs [14-07-2022 03:57:02]2145: WAF :: fetched 1 new logs [14-07-2022 03:58:01]4780: WAF :: fetched 5 new logs [14-07-2022 04:01:01]12900: WAF :: fetched 1 new logs [14-07-2022 04:02:03]15618: WAF :: fetched 1 new logs [14-07-2022 04:04:03]21076: WAF :: fetched 2 new logs [14-07-2022 04:05:01]23607: WAF :: fetched 11 new logs [14-07-2022 04:07:01]29082: WAF :: fetched 2 new logs [14-07-2022 04:08:02]31740: WAF :: fetched 2 new logs [14-07-2022 04:11:01]7370: WAF :: fetched 2 new logs [14-07-2022 04:12:03]9961: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657782723 [14-07-2022 04:12:03]9961: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 04:12:05]9961: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 04:12:05]9961: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-0412/20220714-041203-Ys_Bw_Uazl_l0LR7SyhHjgAAAAc [14-07-2022 04:12:05]9961: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [14-07-2022 04:12:06]9961: WAF :: fetched 1 new logs [14-07-2022 04:13:02]12542: WAF :: fetched 2 new logs [14-07-2022 04:16:01]20646: WAF :: fetched 2 new logs [14-07-2022 04:18:02]25992: WAF :: fetched 1 new logs [14-07-2022 04:19:01]28717: WAF :: fetched 1 new logs [14-07-2022 04:21:02]1623: WAF :: fetched 2 new logs [14-07-2022 04:22:02]4226: WAF :: fetched 4 new logs [14-07-2022 04:23:01]6814: WAF :: fetched 3 new logs [14-07-2022 04:24:02]9547: WAF :: fetched 7 new logs [14-07-2022 04:25:03]12183: WAF :: fetched 5 new logs [14-07-2022 04:26:02]14863: WAF :: fetched 11 new logs [14-07-2022 04:28:01]20178: WAF :: fetched 1 new logs [14-07-2022 04:31:02]28134: WAF :: fetched 2 new logs [14-07-2022 04:34:02]3781: WAF :: fetched 2 new logs [14-07-2022 04:35:02]6358: WAF :: fetched 8 new logs [14-07-2022 04:36:01]9000: WAF :: fetched 5 new logs [14-07-2022 04:37:02]11602: WAF :: fetched 4 new logs [14-07-2022 04:39:02]16955: WAF :: fetched 38 new logs [14-07-2022 04:40:03]19706: WAF :: fetched 33 new logs [14-07-2022 04:41:02]22329: Checking for user cron vulnerabilities [14-07-2022 04:43:02]27624: WAF :: fetched 1 new logs [14-07-2022 04:44:01]30315: Checking ditributed CMS bruteforce attacks [14-07-2022 04:46:01]3223: WAF :: fetched 5 new logs [14-07-2022 04:47:03]5798: WAF :: fetched 1 new logs [14-07-2022 04:48:02]8395: WAF :: fetched 3 new logs [14-07-2022 04:49:02]11080: WAF :: fetched 2 new logs [14-07-2022 04:50:01]13711: WAF :: fetched 1 new logs [14-07-2022 04:52:01]19216: WAF :: fetched 1 new logs [14-07-2022 04:53:02]21834: WAF :: fetched 1 new logs [14-07-2022 04:54:01]24440: WAF :: fetched 2 new logs [14-07-2022 04:56:01]29691: WAF :: fetched 37 new logs [14-07-2022 04:57:02]32327: WAF :: fetched 1 new logs [14-07-2022 04:58:02]2550: WAF :: fetched 4 new logs [14-07-2022 04:59:01]5231: WAF :: fetched 1 new logs [14-07-2022 05:00:02]7597: WAF :: fetched 1 new logs [14-07-2022 05:01:01]10721: WAF :: fetched 3 new logs [14-07-2022 05:01:41]10728: Starting daily scan on files updated in last 24 hrs [14-07-2022 05:02:02]13365: WAF :: fetched 34 new logs [14-07-2022 05:03:01]15978: WAF :: fetched 6 new logs [14-07-2022 05:05:01]21233: WAF :: fetched 1 new logs [14-07-2022 05:07:01]26675: WAF :: fetched 2 new logs [14-07-2022 05:08:02]29309: WAF :: fetched 2 new logs [14-07-2022 05:09:01]31962: WAF :: fetched 5 new logs [14-07-2022 05:10:03]2254: WAF :: fetched 2 new logs [14-07-2022 05:11:02]4873: WAF :: fetched 111 new logs [14-07-2022 05:12:01]7495: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657786321 [14-07-2022 05:12:01]7495: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 05:12:03]7495: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 05:12:04]7495: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-0512/20220714-051201-Ys_P0andUbP5QkwoH9ERiwAAAAY [14-07-2022 05:12:04]7495: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 05:12:04]7495: WAF :: fetched 274 new logs [14-07-2022 05:41:01]20168: Checking for user cron vulnerabilities [14-07-2022 05:44:02]28161: Checking ditributed CMS bruteforce attacks [14-07-2022 06:12:02]6088: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657789922 [14-07-2022 06:12:02]6088: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 06:12:04]6088: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 06:12:05]6088: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-0612/20220714-061202-Ys_d4t8pZ3885atWS-Q33wAAAAE [14-07-2022 06:12:05]6088: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [14-07-2022 06:12:06]6088: WAF :: fetched 1 new logs [14-07-2022 06:13:01]8726: WAF :: fetched 1 new logs [14-07-2022 06:16:01]17061: WAF :: fetched 2 new logs [14-07-2022 06:19:02]25293: WAF :: fetched 6 new logs [14-07-2022 06:21:01]30873: WAF :: fetched 18 new logs [14-07-2022 06:24:02]6668: WAF :: fetched 2 new logs [14-07-2022 06:34:01]1705: WAF :: fetched 1 new logs [14-07-2022 06:37:02]9776: WAF :: fetched 1 new logs [14-07-2022 06:40:02]17920: WAF :: fetched 2 new logs [14-07-2022 06:41:01]20669: WAF :: fetched 3 new logs [14-07-2022 06:41:01]20669: Checking for user cron vulnerabilities [14-07-2022 06:43:01]25928: WAF :: fetched 1 new logs [14-07-2022 06:44:01]28697: Checking ditributed CMS bruteforce attacks [14-07-2022 06:44:05]28697: WAF :: fetched 1 new logs [14-07-2022 06:46:01]1777: WAF :: fetched 2 new logs [14-07-2022 06:48:01]7068: WAF :: fetched 35 new logs [14-07-2022 06:52:02]18115: WAF :: fetched 1 new logs [14-07-2022 06:54:02]23545: WAF :: fetched 3 new logs [14-07-2022 06:56:01]28969: WAF :: fetched 2 new logs [14-07-2022 06:58:01]1946: WAF :: fetched 1 new logs [14-07-2022 07:02:02]12975: WAF :: fetched 1 new logs [14-07-2022 07:03:02]15606: WAF :: fetched 2 new logs [14-07-2022 07:08:02]29137: WAF :: fetched 1 new logs [14-07-2022 07:09:02]31823: WAF :: fetched 1 new logs [14-07-2022 07:11:02]4918: WAF :: fetched 11 new logs [14-07-2022 07:12:01]7536: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657793521 [14-07-2022 07:12:01]7536: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 07:12:03]7536: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 07:12:04]7536: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-0712/20220714-071201-Ys_r8ZYcjKLmNEgN7poSRgAAAAY [14-07-2022 07:12:04]7536: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 07:41:02]24166: Checking for user cron vulnerabilities [14-07-2022 07:44:01]32564: Checking ditributed CMS bruteforce attacks [14-07-2022 07:45:02]: Checking for definition updates [14-07-2022 07:54:01]29412: httpd.conf changed. Refreshing watchlist. [14-07-2022 08:12:03]16700: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657797123 [14-07-2022 08:12:03]16700: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 08:12:05]16700: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 08:12:07]16700: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-0812/20220714-081203-Ys_6A22AhR2gPEjlqZ9IdAAAAAs [14-07-2022 08:12:07]16700: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 08:38:02]27931: WAF :: fetched 29 new logs [14-07-2022 08:39:01]30670: WAF :: fetched 58 new logs [14-07-2022 08:40:02]1187: WAF :: fetched 64 new logs [14-07-2022 08:41:01]4057: WAF :: fetched 236 new logs [14-07-2022 08:41:01]4057: Checking for user cron vulnerabilities [14-07-2022 08:42:01]7021: WAF :: fetched 219 new logs [14-07-2022 08:43:04]9891: WAF :: fetched 40 new logs [14-07-2022 08:44:01]12683: Checking ditributed CMS bruteforce attacks [14-07-2022 08:44:05]12683: WAF :: fetched 18 new logs [14-07-2022 08:45:01]15508: WAF :: fetched 93 new logs [14-07-2022 08:46:02]18406: WAF :: fetched 171 new logs [14-07-2022 08:47:01]21323: WAF :: fetched 127 new logs [14-07-2022 08:48:02]24204: WAF :: fetched 141 new logs [14-07-2022 08:49:01]26911: WAF :: fetched 84 new logs [14-07-2022 08:50:02]29926: WAF :: fetched 130 new logs [14-07-2022 08:51:01]32676: WAF :: fetched 25 new logs [14-07-2022 08:52:02]3169: WAF :: fetched 207 new logs [14-07-2022 08:53:01]6026: WAF :: fetched 35 new logs [14-07-2022 08:54:02]8900: WAF :: fetched 92 new logs [14-07-2022 08:55:01]11786: WAF :: fetched 27 new logs [14-07-2022 08:56:02]14732: WAF :: fetched 48 new logs [14-07-2022 08:57:01]17739: WAF :: fetched 140 new logs [14-07-2022 08:58:01]20582: WAF :: fetched 191 new logs [14-07-2022 08:59:02]23384: WAF :: fetched 201 new logs [14-07-2022 09:00:01]26064: WAF :: fetched 136 new logs [14-07-2022 09:01:02]29332: WAF :: fetched 191 new logs [14-07-2022 09:02:01]32242: WAF :: fetched 94 new logs [14-07-2022 09:03:01]2575: WAF :: fetched 119 new logs [14-07-2022 09:04:01]5484: WAF :: fetched 55 new logs [14-07-2022 09:05:02]8501: WAF :: fetched 105 new logs [14-07-2022 09:06:01]11368: WAF :: fetched 71 new logs [14-07-2022 09:07:02]14226: WAF :: fetched 63 new logs [14-07-2022 09:08:01]17129: WAF :: fetched 98 new logs [14-07-2022 09:09:02]20092: WAF :: fetched 120 new logs [14-07-2022 09:10:02]23058: WAF :: fetched 89 new logs [14-07-2022 09:11:01]26012: WAF :: fetched 71 new logs [14-07-2022 09:12:01]28833: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657800721 [14-07-2022 09:12:01]28833: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 09:12:03]28833: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 09:12:05]28833: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-0912/20220714-091201-YtAIEcVjxh-uFxFmKDsAWgAAAAU [14-07-2022 09:12:05]28833: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 09:12:05]28833: WAF :: fetched 87 new logs [14-07-2022 09:13:02]31717: WAF :: fetched 107 new logs [14-07-2022 09:14:01]2056: WAF :: fetched 64 new logs [14-07-2022 09:15:02]4959: WAF :: fetched 86 new logs [14-07-2022 09:16:01]7866: WAF :: fetched 22 new logs [14-07-2022 09:17:02]10613: WAF :: fetched 19 new logs [14-07-2022 09:18:01]13462: WAF :: fetched 120 new logs [14-07-2022 09:19:02]16313: WAF :: fetched 85 new logs [14-07-2022 09:20:01]19318: WAF :: fetched 187 new logs [14-07-2022 09:21:02]22350: WAF :: fetched 74 new logs [14-07-2022 09:22:01]25208: WAF :: fetched 86 new logs [14-07-2022 09:23:02]28142: WAF :: fetched 87 new logs [14-07-2022 09:24:03]30933: WAF :: fetched 100 new logs [14-07-2022 09:25:02]1389: WAF :: fetched 10 new logs [14-07-2022 09:26:01]4796: WAF :: fetched 60 new logs [14-07-2022 09:27:01]7968: WAF :: fetched 115 new logs [14-07-2022 09:28:02]11678: WAF :: fetched 35 new logs [14-07-2022 09:29:01]14945: WAF :: fetched 71 new logs [14-07-2022 09:30:02]17858: WAF :: fetched 103 new logs [14-07-2022 09:31:01]21463: WAF :: fetched 227 new logs [14-07-2022 09:32:02]24585: WAF :: fetched 177 new logs [14-07-2022 09:33:02]27439: WAF :: fetched 97 new logs [14-07-2022 09:34:01]30292: WAF :: fetched 23 new logs [14-07-2022 09:35:02]913: WAF :: fetched 152 new logs [14-07-2022 09:36:01]3863: WAF :: fetched 152 new logs [14-07-2022 09:37:01]6698: WAF :: fetched 122 new logs [14-07-2022 09:38:01]9408: WAF :: fetched 118 new logs [14-07-2022 09:39:03]12176: WAF :: fetched 3 new logs [14-07-2022 09:40:02]15183: WAF :: fetched 85 new logs [14-07-2022 09:41:01]18044: WAF :: fetched 100 new logs [14-07-2022 09:41:01]18044: Checking for user cron vulnerabilities [14-07-2022 09:42:01]20976: WAF :: fetched 78 new logs [14-07-2022 09:43:02]23728: WAF :: fetched 52 new logs [14-07-2022 09:44:01]26541: Checking ditributed CMS bruteforce attacks [14-07-2022 09:44:05]26541: WAF :: fetched 2 new logs [14-07-2022 09:45:02]29497: WAF :: fetched 83 new logs [14-07-2022 09:46:02]32250: WAF :: fetched 92 new logs [14-07-2022 09:47:01]2678: WAF :: fetched 98 new logs [14-07-2022 09:48:01]5589: WAF :: fetched 83 new logs [14-07-2022 09:49:02]8596: WAF :: fetched 125 new logs [14-07-2022 09:50:02]11633: WAF :: fetched 34 new logs [14-07-2022 09:51:01]14597: WAF :: fetched 128 new logs [14-07-2022 09:52:01]17422: WAF :: fetched 119 new logs [14-07-2022 09:53:01]20514: WAF :: fetched 230 new logs [14-07-2022 09:54:01]23349: WAF :: fetched 195 new logs [14-07-2022 09:55:02]26305: WAF :: fetched 145 new logs [14-07-2022 09:56:04]29268: WAF :: fetched 77 new logs [14-07-2022 09:57:01]32057: WAF :: fetched 104 new logs [14-07-2022 09:58:01]2615: WAF :: fetched 58 new logs [14-07-2022 09:59:01]5463: WAF :: fetched 51 new logs [14-07-2022 10:00:02]8071: WAF :: fetched 5 new logs [14-07-2022 10:01:01]11537: WAF :: fetched 97 new logs [14-07-2022 10:02:02]14527: WAF :: fetched 101 new logs [14-07-2022 10:03:01]17483: WAF :: fetched 165 new logs [14-07-2022 10:05:01]23478: WAF :: fetched 47 new logs [14-07-2022 10:06:02]26453: WAF :: fetched 108 new logs [14-07-2022 10:07:01]29224: WAF :: fetched 107 new logs [14-07-2022 10:08:02]32168: WAF :: fetched 94 new logs [14-07-2022 10:09:02]2575: WAF :: fetched 16 new logs [14-07-2022 10:10:01]5447: WAF :: fetched 86 new logs [14-07-2022 10:11:02]8416: WAF :: fetched 160 new logs [14-07-2022 10:12:02]11080: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657804322 [14-07-2022 10:12:02]11080: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 10:12:04]11080: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 10:12:06]11080: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-1012/20220714-101202-YtAWIqESiPcnVF8QE6IE-QAAAAc [14-07-2022 10:12:06]11080: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 10:12:06]11080: WAF :: fetched 153 new logs [14-07-2022 10:13:01]13766: WAF :: fetched 107 new logs [14-07-2022 10:14:02]16488: WAF :: fetched 94 new logs [14-07-2022 10:15:01]19299: WAF :: fetched 109 new logs [14-07-2022 10:16:02]22343: WAF :: fetched 50 new logs [14-07-2022 10:17:01]25015: WAF :: fetched 178 new logs [14-07-2022 10:18:02]27841: WAF :: fetched 221 new logs [14-07-2022 10:19:01]30729: WAF :: fetched 166 new logs [14-07-2022 10:20:01]1217: WAF :: fetched 153 new logs [14-07-2022 10:21:01]4303: WAF :: fetched 51 new logs [14-07-2022 10:22:01]7199: WAF :: fetched 164 new logs [14-07-2022 10:23:01]10096: WAF :: fetched 64 new logs [14-07-2022 10:24:01]12838: WAF :: fetched 107 new logs [14-07-2022 10:25:01]15652: WAF :: fetched 81 new logs [14-07-2022 10:26:01]18664: WAF :: fetched 170 new logs [14-07-2022 10:27:01]21398: WAF :: fetched 218 new logs [14-07-2022 10:28:01]24193: WAF :: fetched 106 new logs [14-07-2022 10:29:02]27050: WAF :: fetched 97 new logs [14-07-2022 10:30:01]29874: WAF :: fetched 31 new logs [14-07-2022 10:31:02]412: WAF :: fetched 74 new logs [14-07-2022 10:32:01]3345: WAF :: fetched 74 new logs [14-07-2022 10:33:02]6201: WAF :: fetched 19 new logs [14-07-2022 10:34:01]9012: WAF :: fetched 1 new logs [14-07-2022 10:35:01]11804: WAF :: fetched 112 new logs [14-07-2022 10:36:02]14784: WAF :: fetched 185 new logs [14-07-2022 10:37:01]17605: WAF :: fetched 189 new logs [14-07-2022 10:38:02]20523: WAF :: fetched 91 new logs [14-07-2022 10:39:01]23248: WAF :: fetched 36 new logs [14-07-2022 10:40:01]26028: WAF :: fetched 52 new logs [14-07-2022 10:41:01]29011: WAF :: fetched 153 new logs [14-07-2022 10:41:01]29011: Checking for user cron vulnerabilities [14-07-2022 10:42:02]31855: WAF :: fetched 166 new logs [14-07-2022 10:43:01]2322: WAF :: fetched 108 new logs [14-07-2022 10:44:01]5173: Checking ditributed CMS bruteforce attacks [14-07-2022 10:44:03]5173: WAF :: fetched 102 new logs [14-07-2022 10:45:01]8024: WAF :: fetched 38 new logs [14-07-2022 10:46:02]11015: WAF :: fetched 11 new logs [14-07-2022 10:47:01]13905: WAF :: fetched 95 new logs [14-07-2022 10:48:03]16770: WAF :: fetched 89 new logs [14-07-2022 10:49:01]19679: WAF :: fetched 73 new logs [14-07-2022 10:50:02]22533: WAF :: fetched 46 new logs [14-07-2022 10:51:01]25388: WAF :: fetched 63 new logs [14-07-2022 10:52:02]28271: WAF :: fetched 55 new logs [14-07-2022 10:53:01]31124: WAF :: fetched 106 new logs [14-07-2022 10:54:02]1494: WAF :: fetched 43 new logs [14-07-2022 10:55:01]4213: WAF :: fetched 64 new logs [14-07-2022 10:56:03]7126: WAF :: fetched 14 new logs [14-07-2022 10:57:01]9900: WAF :: fetched 102 new logs [14-07-2022 10:58:01]12622: WAF :: fetched 71 new logs [14-07-2022 10:59:02]15399: WAF :: fetched 34 new logs [14-07-2022 11:00:02]17839: WAF :: fetched 86 new logs [14-07-2022 11:01:01]21274: WAF :: fetched 171 new logs [14-07-2022 11:02:02]24072: WAF :: fetched 273 new logs [14-07-2022 11:03:01]26869: WAF :: fetched 109 new logs [14-07-2022 11:04:01]29670: WAF :: fetched 2 new logs [14-07-2022 11:05:02]32486: WAF :: fetched 70 new logs [14-07-2022 11:06:01]2973: WAF :: fetched 234 new logs [14-07-2022 11:07:02]5709: WAF :: fetched 259 new logs [14-07-2022 11:08:01]8370: WAF :: fetched 75 new logs [14-07-2022 11:08:12]5876: Performed RBL check for 23.111.136.34. [14-07-2022 11:09:02]11147: WAF :: fetched 64 new logs [14-07-2022 11:10:01]13984: WAF :: fetched 59 new logs [14-07-2022 11:11:02]16966: WAF :: fetched 141 new logs [14-07-2022 11:12:01]19952: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657807921 [14-07-2022 11:12:01]19952: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 11:12:03]19952: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 11:12:05]19952: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-1112/20220714-111201-YtAkMVcn1mFghtxc-txs3AAAABU [14-07-2022 11:12:05]19952: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 11:12:06]19952: WAF :: fetched 92 new logs [14-07-2022 11:13:03]22729: WAF :: fetched 30 new logs [14-07-2022 11:14:02]25417: WAF :: fetched 22 new logs [14-07-2022 11:15:01]28197: WAF :: fetched 99 new logs [14-07-2022 11:16:02]31198: WAF :: fetched 61 new logs [14-07-2022 11:17:01]1573: WAF :: fetched 104 new logs [14-07-2022 11:18:01]4308: WAF :: fetched 105 new logs [14-07-2022 11:19:01]7114: WAF :: fetched 109 new logs [14-07-2022 11:20:02]9972: WAF :: fetched 75 new logs [14-07-2022 11:21:01]13002: WAF :: fetched 175 new logs [14-07-2022 11:22:01]15804: WAF :: fetched 21 new logs [14-07-2022 11:23:02]18477: WAF :: fetched 108 new logs [14-07-2022 11:24:01]21691: WAF :: fetched 18 new logs [14-07-2022 11:25:02]24553: WAF :: fetched 75 new logs [14-07-2022 11:26:02]27524: WAF :: fetched 171 new logs [14-07-2022 11:27:01]30310: WAF :: fetched 192 new logs [14-07-2022 11:28:01]610: WAF :: fetched 188 new logs [14-07-2022 11:29:02]3504: WAF :: fetched 94 new logs [14-07-2022 11:31:02]9352: WAF :: fetched 59 new logs [14-07-2022 11:32:01]12100: WAF :: fetched 180 new logs [14-07-2022 11:33:02]15012: WAF :: fetched 118 new logs [14-07-2022 11:34:02]17758: WAF :: fetched 121 new logs [14-07-2022 11:35:01]20575: WAF :: fetched 100 new logs [14-07-2022 11:36:01]23491: WAF :: fetched 109 new logs [14-07-2022 11:37:02]26309: WAF :: fetched 42 new logs [14-07-2022 11:38:01]29076: WAF :: fetched 83 new logs [14-07-2022 11:39:01]31845: WAF :: fetched 209 new logs [14-07-2022 11:40:01]2254: WAF :: fetched 64 new logs [14-07-2022 11:41:02]5195: WAF :: fetched 48 new logs [14-07-2022 11:41:02]5195: Checking for user cron vulnerabilities [14-07-2022 11:42:03]7901: WAF :: fetched 31 new logs [14-07-2022 11:43:01]10650: WAF :: fetched 174 new logs [14-07-2022 11:44:02]13442: Checking ditributed CMS bruteforce attacks [14-07-2022 11:44:04]13442: WAF :: fetched 115 new logs [14-07-2022 11:45:01]16147: WAF :: fetched 8 new logs [14-07-2022 11:46:02]19279: WAF :: fetched 4 new logs [14-07-2022 11:47:02]21969: WAF :: fetched 33 new logs [14-07-2022 11:48:02]24695: WAF :: fetched 27 new logs [14-07-2022 11:49:02]27412: WAF :: fetched 19 new logs [14-07-2022 11:50:01]30237: WAF :: fetched 7 new logs [14-07-2022 11:53:01]6449: WAF :: fetched 103 new logs [14-07-2022 11:54:01]9202: WAF :: fetched 204 new logs [14-07-2022 11:55:02]12015: WAF :: fetched 181 new logs [14-07-2022 11:56:01]14888: WAF :: fetched 49 new logs [14-07-2022 11:57:01]17591: WAF :: fetched 33 new logs [14-07-2022 11:58:02]20438: WAF :: fetched 60 new logs [14-07-2022 11:59:01]23172: WAF :: fetched 139 new logs [14-07-2022 12:00:02]25678: WAF :: fetched 49 new logs [14-07-2022 12:01:02]29008: WAF :: fetched 42 new logs [14-07-2022 12:02:01]31753: WAF :: fetched 43 new logs [14-07-2022 12:03:01]2122: WAF :: fetched 144 new logs [14-07-2022 12:04:02]4888: WAF :: fetched 116 new logs [14-07-2022 12:05:01]7628: WAF :: fetched 33 new logs [14-07-2022 12:06:01]10547: WAF :: fetched 40 new logs [14-07-2022 12:07:01]13295: WAF :: fetched 71 new logs [14-07-2022 12:08:02]16037: WAF :: fetched 112 new logs [14-07-2022 12:09:02]18907: WAF :: fetched 94 new logs [14-07-2022 12:10:01]21759: WAF :: fetched 56 new logs [14-07-2022 12:11:01]24715: WAF :: fetched 50 new logs [14-07-2022 12:12:02]27470: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657811522 [14-07-2022 12:12:02]27470: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 12:12:04]27470: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 12:12:06]27470: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-1212/20220714-121202-YtAyQo2gT8n9PXiiXQEUuQAAABQ [14-07-2022 12:12:06]27470: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 12:12:06]27470: WAF :: fetched 55 new logs [14-07-2022 12:13:01]30226: WAF :: fetched 84 new logs [14-07-2022 12:14:02]570: WAF :: fetched 159 new logs [14-07-2022 12:15:01]3413: WAF :: fetched 140 new logs [14-07-2022 12:16:02]6460: WAF :: fetched 3 new logs [14-07-2022 12:17:01]9208: WAF :: fetched 235 new logs [14-07-2022 12:18:04]12178: WAF :: fetched 187 new logs [14-07-2022 12:19:02]14934: WAF :: fetched 207 new logs [14-07-2022 12:20:01]17414: WAF :: fetched 15 new logs [14-07-2022 12:21:01]21038: WAF :: fetched 14 new logs [14-07-2022 12:22:02]23917: WAF :: fetched 4 new logs [14-07-2022 12:23:01]26912: WAF :: fetched 67 new logs [14-07-2022 12:24:01]30054: WAF :: fetched 15 new logs [14-07-2022 12:25:02]780: WAF :: fetched 48 new logs [14-07-2022 12:26:03]4101: WAF :: fetched 55 new logs [14-07-2022 12:29:01]12820: WAF :: fetched 100 new logs [14-07-2022 12:30:02]15717: WAF :: fetched 174 new logs [14-07-2022 12:31:01]18932: WAF :: fetched 185 new logs [14-07-2022 12:32:01]21884: WAF :: fetched 35 new logs [14-07-2022 12:33:02]24678: WAF :: fetched 3 new logs [14-07-2022 12:34:01]27473: WAF :: fetched 26 new logs [14-07-2022 12:35:02]30238: WAF :: fetched 87 new logs [14-07-2022 12:36:01]708: WAF :: fetched 29 new logs [14-07-2022 12:37:01]3553: WAF :: fetched 79 new logs [14-07-2022 12:38:01]6254: WAF :: fetched 32 new logs [14-07-2022 12:39:02]9009: WAF :: fetched 113 new logs [14-07-2022 12:40:01]11751: WAF :: fetched 107 new logs [14-07-2022 12:41:02]14650: WAF :: fetched 53 new logs [14-07-2022 12:41:02]14650: Checking for user cron vulnerabilities [14-07-2022 12:42:01]17397: WAF :: fetched 2 new logs [14-07-2022 12:43:01]20320: WAF :: fetched 36 new logs [14-07-2022 12:44:01]23102: Checking ditributed CMS bruteforce attacks [14-07-2022 12:44:07]23102: WAF :: fetched 21 new logs [14-07-2022 12:45:02]: Checking for software updates [14-07-2022 12:45:02]25798: WAF :: fetched 65 new logs [14-07-2022 12:46:01]28619: WAF :: fetched 24 new logs [14-07-2022 12:47:01]31357: WAF :: fetched 36 new logs [14-07-2022 12:48:02]1724: WAF :: fetched 19 new logs [14-07-2022 12:49:02]4429: WAF :: fetched 1 new logs [14-07-2022 12:50:01]7160: WAF :: fetched 16 new logs [14-07-2022 12:51:01]10071: WAF :: fetched 74 new logs [14-07-2022 12:52:01]12904: WAF :: fetched 121 new logs [14-07-2022 12:53:02]15686: WAF :: fetched 15 new logs [14-07-2022 12:54:01]18550: WAF :: fetched 2 new logs [14-07-2022 12:55:01]21317: WAF :: fetched 157 new logs [14-07-2022 12:56:02]24175: WAF :: fetched 208 new logs [14-07-2022 12:57:02]26882: WAF :: fetched 153 new logs [14-07-2022 12:58:02]29644: WAF :: fetched 60 new logs [14-07-2022 12:59:02]32318: WAF :: fetched 84 new logs [14-07-2022 13:00:02]2363: WAF :: fetched 150 new logs [14-07-2022 13:01:01]5674: WAF :: fetched 1 new logs [14-07-2022 13:02:01]8446: WAF :: fetched 63 new logs [14-07-2022 13:03:02]11101: WAF :: fetched 45 new logs [14-07-2022 13:04:01]13739: WAF :: fetched 68 new logs [14-07-2022 13:06:02]19432: WAF :: fetched 95 new logs [14-07-2022 13:07:01]22099: WAF :: fetched 27 new logs [14-07-2022 13:11:01]550: WAF :: fetched 81 new logs [14-07-2022 13:12:02]3279: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657815122 [14-07-2022 13:12:02]3279: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 13:12:04]3279: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 13:12:06]3279: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-1312/20220714-131202-YtBAUswYbdDnAvo_LVSeAgAAAAU [14-07-2022 13:12:06]3279: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 13:12:06]3279: WAF :: fetched 162 new logs [14-07-2022 13:14:02]8641: WAF :: fetched 1 new logs [14-07-2022 13:15:01]11311: WAF :: fetched 22 new logs [14-07-2022 13:16:02]14168: WAF :: fetched 42 new logs [14-07-2022 13:17:01]16798: WAF :: fetched 44 new logs [14-07-2022 13:18:02]19671: WAF :: fetched 64 new logs [14-07-2022 13:19:01]22315: WAF :: fetched 32 new logs [14-07-2022 13:20:01]25078: WAF :: fetched 51 new logs [14-07-2022 13:21:01]28003: WAF :: fetched 2 new logs [14-07-2022 13:22:02]30683: WAF :: fetched 121 new logs [14-07-2022 13:23:02]952: WAF :: fetched 83 new logs [14-07-2022 13:24:02]3691: WAF :: fetched 76 new logs [14-07-2022 13:25:01]6379: WAF :: fetched 48 new logs [14-07-2022 13:26:02]9200: WAF :: fetched 145 new logs [14-07-2022 13:27:01]11939: WAF :: fetched 47 new logs [14-07-2022 13:28:01]14642: WAF :: fetched 51 new logs [14-07-2022 13:29:01]17385: WAF :: fetched 21 new logs [14-07-2022 13:30:02]20256: WAF :: fetched 225 new logs [14-07-2022 13:31:02]23077: WAF :: fetched 114 new logs [14-07-2022 13:32:01]25769: WAF :: fetched 74 new logs [14-07-2022 13:33:02]28521: WAF :: fetched 134 new logs [14-07-2022 13:34:01]31153: WAF :: fetched 19 new logs [14-07-2022 13:35:02]1584: WAF :: fetched 33 new logs [14-07-2022 13:36:01]4433: WAF :: fetched 26 new logs [14-07-2022 13:37:02]7203: WAF :: fetched 124 new logs [14-07-2022 13:38:02]9885: WAF :: fetched 1 new logs [14-07-2022 13:39:02]12599: WAF :: fetched 1 new logs [14-07-2022 13:41:04]18193: WAF :: fetched 56 new logs [14-07-2022 13:41:04]18193: Checking for user cron vulnerabilities [14-07-2022 13:42:01]20869: WAF :: fetched 118 new logs [14-07-2022 13:43:02]23541: WAF :: fetched 2 new logs [14-07-2022 13:44:01]26232: Checking ditributed CMS bruteforce attacks [14-07-2022 13:44:05]26232: WAF :: fetched 13 new logs [14-07-2022 13:45:01]: Checking for definition updates [14-07-2022 13:46:02]31953: WAF :: fetched 44 new logs [14-07-2022 13:47:01]2245: WAF :: fetched 90 new logs [14-07-2022 13:48:01]4927: WAF :: fetched 46 new logs [14-07-2022 13:49:02]7642: WAF :: fetched 92 new logs [14-07-2022 13:50:01]10337: WAF :: fetched 1 new logs [14-07-2022 13:51:02]13211: WAF :: fetched 5 new logs [14-07-2022 13:53:02]18788: WAF :: fetched 19 new logs [14-07-2022 13:54:02]21583: WAF :: fetched 63 new logs [14-07-2022 13:55:01]24240: WAF :: fetched 1 new logs [14-07-2022 13:56:02]27090: WAF :: fetched 18 new logs [14-07-2022 13:57:01]29586: WAF :: fetched 20 new logs [14-07-2022 13:58:02]32483: WAF :: fetched 82 new logs [14-07-2022 13:59:01]2772: WAF :: fetched 63 new logs [14-07-2022 14:00:02]5241: WAF :: fetched 23 new logs [14-07-2022 14:01:02]8530: WAF :: fetched 2 new logs [14-07-2022 14:02:01]11266: WAF :: fetched 1 new logs [14-07-2022 14:03:02]14005: WAF :: fetched 84 new logs [14-07-2022 14:04:01]16723: WAF :: fetched 39 new logs [14-07-2022 14:05:02]19584: WAF :: fetched 4 new logs [14-07-2022 14:06:02]22427: WAF :: fetched 4 new logs [14-07-2022 14:08:01]27903: WAF :: fetched 23 new logs [14-07-2022 14:09:01]30615: WAF :: fetched 17 new logs [14-07-2022 14:10:02]982: WAF :: fetched 17 new logs [14-07-2022 14:11:02]3916: WAF :: fetched 26 new logs [14-07-2022 14:12:01]6625: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657818721 [14-07-2022 14:12:01]6625: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 14:12:03]6625: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 14:12:05]6625: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-1412/20220714-141201-YtBOYXIbNwGFh6yQ1AIOmgAAACk [14-07-2022 14:12:05]6625: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 14:12:05]6625: WAF :: fetched 40 new logs [14-07-2022 14:13:01]9398: WAF :: fetched 3 new logs [14-07-2022 14:14:02]12083: WAF :: fetched 2 new logs [14-07-2022 14:17:02]20399: WAF :: fetched 52 new logs [14-07-2022 14:18:01]23133: WAF :: fetched 78 new logs [14-07-2022 14:19:01]25843: WAF :: fetched 2 new logs [14-07-2022 14:20:01]28529: WAF :: fetched 12 new logs [14-07-2022 14:21:04]31493: WAF :: fetched 79 new logs [14-07-2022 14:22:01]1801: WAF :: fetched 75 new logs [14-07-2022 14:23:02]4541: WAF :: fetched 56 new logs [14-07-2022 14:24:01]7280: WAF :: fetched 87 new logs [14-07-2022 14:26:01]12922: WAF :: fetched 6 new logs [14-07-2022 14:28:01]18373: WAF :: fetched 18 new logs [14-07-2022 14:29:02]21098: WAF :: fetched 1 new logs [14-07-2022 14:31:02]26740: WAF :: fetched 1 new logs [14-07-2022 14:33:01]32150: WAF :: fetched 1 new logs [14-07-2022 14:34:02]2489: WAF :: fetched 2 new logs [14-07-2022 14:35:01]5153: WAF :: fetched 15 new logs [14-07-2022 14:36:04]8124: WAF :: fetched 1 new logs [14-07-2022 14:37:01]10758: WAF :: fetched 1 new logs [14-07-2022 14:38:02]13495: WAF :: fetched 2 new logs [14-07-2022 14:39:01]16153: WAF :: fetched 1 new logs [14-07-2022 14:41:01]21806: Checking for user cron vulnerabilities [14-07-2022 14:42:01]24517: WAF :: fetched 16 new logs [14-07-2022 14:44:01]29910: Checking ditributed CMS bruteforce attacks [14-07-2022 14:44:05]29910: WAF :: fetched 4 new logs [14-07-2022 14:45:01]32664: WAF :: fetched 3 new logs [14-07-2022 14:46:01]3122: WAF :: fetched 2 new logs [14-07-2022 14:47:02]5845: WAF :: fetched 1 new logs [14-07-2022 14:48:01]8497: WAF :: fetched 18 new logs [14-07-2022 14:49:02]11241: WAF :: fetched 6 new logs [14-07-2022 14:53:02]22516: Updated license status via CDN [14-07-2022 14:54:01]25412: WAF :: fetched 31 new logs [14-07-2022 14:55:02]28150: WAF :: fetched 18 new logs [14-07-2022 14:56:01]31033: WAF :: fetched 4 new logs [14-07-2022 14:57:01]1482: WAF :: fetched 128 new logs [14-07-2022 14:58:01]4445: WAF :: fetched 34 new logs [14-07-2022 14:59:02]7432: WAF :: fetched 24 new logs [14-07-2022 15:00:01]10024: WAF :: fetched 29 new logs [14-07-2022 15:01:02]13394: WAF :: fetched 1 new logs [14-07-2022 15:01:02]13400: Reseting cPGuard inotify settings [14-07-2022 15:03:02]19014: WAF :: fetched 3 new logs [14-07-2022 15:04:01]21719: WAF :: fetched 6 new logs [14-07-2022 15:05:01]24476: WAF :: fetched 20 new logs [14-07-2022 15:06:02]27310: WAF :: fetched 2 new logs [14-07-2022 15:09:02]3177: WAF :: fetched 2 new logs [14-07-2022 15:10:02]5931: WAF :: fetched 2 new logs [14-07-2022 15:11:01]8771: WAF :: fetched 1 new logs [14-07-2022 15:12:01]11613: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657822321 [14-07-2022 15:12:01]11613: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 15:12:03]11613: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 15:12:05]11613: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-1512/20220714-151201-YtBccUX5_heebzuSsj9itQAAACM [14-07-2022 15:12:05]11613: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 15:13:02]14394: WAF :: fetched 16 new logs [14-07-2022 15:15:03]20032: WAF :: fetched 13 new logs [14-07-2022 15:16:02]22920: WAF :: fetched 3 new logs [14-07-2022 15:17:01]25685: WAF :: fetched 3 new logs [14-07-2022 15:18:02]28434: WAF :: fetched 2 new logs [14-07-2022 15:19:01]31152: WAF :: fetched 27 new logs [14-07-2022 15:20:02]1531: WAF :: fetched 6 new logs [14-07-2022 15:22:01]7163: WAF :: fetched 14 new logs [14-07-2022 15:23:01]9969: WAF :: fetched 36 new logs [14-07-2022 15:24:01]12762: WAF :: fetched 1 new logs [14-07-2022 15:27:01]21272: WAF :: fetched 69 new logs [14-07-2022 15:28:02]24036: WAF :: fetched 36 new logs [14-07-2022 15:29:01]26725: WAF :: fetched 1 new logs [14-07-2022 15:32:01]2745: WAF :: fetched 3 new logs [14-07-2022 15:33:02]5541: WAF :: fetched 2 new logs [14-07-2022 15:34:01]8193: WAF :: fetched 1 new logs [14-07-2022 15:35:02]10919: WAF :: fetched 32 new logs [14-07-2022 15:36:01]13661: WAF :: fetched 35 new logs [14-07-2022 15:39:02]22043: WAF :: fetched 21 new logs [14-07-2022 15:41:02]27524: WAF :: fetched 1 new logs [14-07-2022 15:41:02]27524: Checking for user cron vulnerabilities [14-07-2022 15:43:01]574: WAF :: fetched 27 new logs [14-07-2022 15:44:02]3329: Checking ditributed CMS bruteforce attacks [14-07-2022 15:46:02]8789: WAF :: fetched 1 new logs [14-07-2022 15:47:02]11548: WAF :: fetched 20 new logs [14-07-2022 15:48:01]14239: WAF :: fetched 1 new logs [14-07-2022 15:49:02]16960: WAF :: fetched 3 new logs [14-07-2022 15:50:01]19765: WAF :: fetched 1 new logs [14-07-2022 15:51:02]22549: WAF :: fetched 15 new logs [14-07-2022 15:52:01]25273: WAF :: fetched 3 new logs [14-07-2022 15:53:02]28018: WAF :: fetched 1 new logs [14-07-2022 15:57:01]6756: WAF :: fetched 1 new logs [14-07-2022 15:58:02]9448: WAF :: fetched 90 new logs [14-07-2022 15:59:01]12144: WAF :: fetched 2 new logs [14-07-2022 16:00:02]14535: WAF :: fetched 1 new logs [14-07-2022 16:01:01]17781: WAF :: fetched 3 new logs [14-07-2022 16:02:02]20638: WAF :: fetched 13 new logs [14-07-2022 16:08:02]4662: WAF :: fetched 3 new logs [14-07-2022 16:12:02]15718: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657825922 [14-07-2022 16:12:02]15718: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 16:12:04]15718: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 16:12:05]15718: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-1612/20220714-161202-YtBqgtBV7IAItKNMU9f71gAAACs [14-07-2022 16:12:05]15718: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 16:12:05]15718: WAF :: fetched 3 new logs [14-07-2022 16:13:01]18485: WAF :: fetched 32 new logs [14-07-2022 16:14:02]21231: WAF :: fetched 1 new logs [14-07-2022 16:15:01]23972: WAF :: fetched 2 new logs [14-07-2022 16:17:01]29577: WAF :: fetched 1 new logs [14-07-2022 16:18:01]32351: WAF :: fetched 2 new logs [14-07-2022 16:21:01]8124: WAF :: fetched 28 new logs [14-07-2022 16:24:02]16287: WAF :: fetched 1 new logs [14-07-2022 16:25:02]19119: WAF :: fetched 1 new logs [14-07-2022 16:26:02]21922: WAF :: fetched 1 new logs [14-07-2022 16:28:02]27365: WAF :: fetched 2 new logs [14-07-2022 16:29:01]30029: WAF :: fetched 1 new logs [14-07-2022 16:30:02]309: WAF :: fetched 3 new logs [14-07-2022 16:31:01]3161: WAF :: fetched 1 new logs [14-07-2022 16:33:01]8738: WAF :: fetched 1 new logs [14-07-2022 16:36:02]17200: WAF :: fetched 1 new logs [14-07-2022 16:37:01]19734: WAF :: fetched 4 new logs [14-07-2022 16:38:02]22811: WAF :: fetched 1 new logs [14-07-2022 16:40:01]28214: WAF :: fetched 1 new logs [14-07-2022 16:41:01]31031: WAF :: fetched 2 new logs [14-07-2022 16:41:01]31031: Checking for user cron vulnerabilities [14-07-2022 16:43:01]4028: WAF :: fetched 3 new logs [14-07-2022 16:44:01]6722: Checking ditributed CMS bruteforce attacks [14-07-2022 16:47:01]14909: WAF :: fetched 2 new logs [14-07-2022 16:51:01]25830: WAF :: fetched 1 new logs [14-07-2022 16:52:02]28594: WAF :: fetched 10 new logs [14-07-2022 16:56:01]7145: WAF :: fetched 1 new logs [14-07-2022 16:59:01]15267: WAF :: fetched 1 new logs [14-07-2022 17:02:02]23826: WAF :: fetched 89 new logs [14-07-2022 17:03:01]26539: WAF :: fetched 35 new logs [14-07-2022 17:04:01]29286: WAF :: fetched 1 new logs [14-07-2022 17:11:01]15860: WAF :: fetched 3 new logs [14-07-2022 17:12:01]18719: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657829521 [14-07-2022 17:12:01]18719: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 17:12:03]18719: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 17:12:05]18719: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-1712/20220714-171201-YtB4kewQdSOFzV-b1jiW6gAAAC4 [14-07-2022 17:12:05]18719: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 17:12:05]18719: WAF :: fetched 2 new logs [14-07-2022 17:13:02]21404: WAF :: fetched 1 new logs [14-07-2022 17:14:01]24112: WAF :: fetched 1 new logs [14-07-2022 17:15:01]26751: WAF :: fetched 1 new logs [14-07-2022 17:16:01]29634: WAF :: fetched 1 new logs [14-07-2022 17:17:01]32382: WAF :: fetched 7 new logs [14-07-2022 17:18:01]2733: WAF :: fetched 3 new logs [14-07-2022 17:19:01]5469: WAF :: fetched 1 new logs [14-07-2022 17:22:01]13755: WAF :: fetched 1 new logs [14-07-2022 17:25:02]21900: WAF :: fetched 1 new logs [14-07-2022 17:28:01]30109: WAF :: fetched 2 new logs [14-07-2022 17:29:02]316: WAF :: fetched 2 new logs [14-07-2022 17:30:02]2983: WAF :: fetched 1 new logs [14-07-2022 17:31:02]5769: WAF :: fetched 1 new logs [14-07-2022 17:32:01]8540: WAF :: fetched 1 new logs [14-07-2022 17:34:02]13855: WAF :: fetched 1 new logs [14-07-2022 17:36:02]19528: WAF :: fetched 2 new logs [14-07-2022 17:38:02]24863: WAF :: fetched 4 new logs [14-07-2022 17:39:01]27577: WAF :: fetched 2 new logs [14-07-2022 17:41:01]509: Checking for user cron vulnerabilities [14-07-2022 17:44:01]8683: Checking ditributed CMS bruteforce attacks [14-07-2022 17:44:02]8683: WAF :: fetched 3 new logs [14-07-2022 17:45:01]11395: WAF :: fetched 3 new logs [14-07-2022 17:46:02]14185: WAF :: fetched 4 new logs [14-07-2022 17:51:02]27860: WAF :: fetched 1 new logs [14-07-2022 17:53:02]856: WAF :: fetched 1 new logs [14-07-2022 17:54:01]3505: WAF :: fetched 1 new logs [14-07-2022 17:55:02]6183: WAF :: fetched 49 new logs [14-07-2022 17:56:02]8888: WAF :: fetched 1 new logs [14-07-2022 17:57:01]11693: WAF :: fetched 1 new logs [14-07-2022 18:02:02]25446: WAF :: fetched 7 new logs [14-07-2022 18:03:01]28171: WAF :: fetched 1 new logs [14-07-2022 18:06:02]3785: WAF :: fetched 2 new logs [14-07-2022 18:11:01]17201: WAF :: fetched 1 new logs [14-07-2022 18:12:03]20090: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657833123 [14-07-2022 18:12:03]20090: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 18:12:05]20090: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 18:12:06]20090: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-1812/20220714-181203-YtCGo-6H4ZktW5cbye3owwAAAAE [14-07-2022 18:12:06]20090: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 18:12:06]20090: WAF :: fetched 3 new logs [14-07-2022 18:14:02]25423: WAF :: fetched 1 new logs [14-07-2022 18:15:01]28104: WAF :: fetched 1 new logs [14-07-2022 18:16:02]30968: WAF :: fetched 1 new logs [14-07-2022 18:17:01]1259: WAF :: fetched 2 new logs [14-07-2022 18:21:02]12118: WAF :: fetched 1 new logs [14-07-2022 18:22:02]14817: WAF :: fetched 7 new logs [14-07-2022 18:24:02]20215: WAF :: fetched 5 new logs [14-07-2022 18:25:01]22855: WAF :: fetched 2 new logs [14-07-2022 18:27:02]28359: WAF :: fetched 1 new logs [14-07-2022 18:28:03]30978: WAF :: fetched 4 new logs [14-07-2022 18:29:02]1280: WAF :: fetched 1 new logs [14-07-2022 18:33:02]11995: WAF :: fetched 2 new logs [14-07-2022 18:34:01]14611: WAF :: fetched 2 new logs [14-07-2022 18:35:02]17288: WAF :: fetched 1 new logs [14-07-2022 18:39:01]28212: WAF :: fetched 1 new logs [14-07-2022 18:41:01]1299: Checking for user cron vulnerabilities [14-07-2022 18:42:01]4167: WAF :: fetched 2 new logs [14-07-2022 18:43:01]6871: WAF :: fetched 1 new logs [14-07-2022 18:44:01]9609: Checking ditributed CMS bruteforce attacks [14-07-2022 18:46:02]15131: WAF :: fetched 1 new logs [14-07-2022 18:53:02]1719: WAF :: fetched 1 new logs [14-07-2022 18:54:01]4337: WAF :: fetched 4 new logs [14-07-2022 18:55:02]6991: WAF :: fetched 1 new logs [14-07-2022 18:56:02]9614: WAF :: fetched 2 new logs [14-07-2022 18:57:02]12362: WAF :: fetched 1 new logs [14-07-2022 18:58:01]15063: WAF :: fetched 1 new logs [14-07-2022 18:59:01]17836: WAF :: fetched 4 new logs [14-07-2022 19:00:03]20314: WAF :: fetched 3 new logs [14-07-2022 19:01:01]23451: WAF :: fetched 2 new logs [14-07-2022 19:02:02]26194: WAF :: fetched 1 new logs [14-07-2022 19:06:02]4373: WAF :: fetched 2 new logs [14-07-2022 19:07:02]7048: WAF :: fetched 1 new logs [14-07-2022 19:08:01]9648: WAF :: fetched 1 new logs [14-07-2022 19:09:01]12314: WAF :: fetched 2 new logs [14-07-2022 19:10:01]14934: WAF :: fetched 1 new logs [14-07-2022 19:11:02]17658: WAF :: fetched 1 new logs [14-07-2022 19:12:01]20451: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657836721 [14-07-2022 19:12:01]20451: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 19:12:03]20451: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 19:12:04]20451: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-1912/20220714-191201-YtCUse4EtavZXnOct_Cc8gAAABY [14-07-2022 19:12:04]20451: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 19:14:01]25855: WAF :: fetched 8 new logs [14-07-2022 19:15:02]28492: WAF :: fetched 105 new logs [14-07-2022 19:19:02]6836: WAF :: fetched 17 new logs [14-07-2022 19:20:02]9503: WAF :: fetched 54 new logs [14-07-2022 19:21:01]12270: WAF :: fetched 24 new logs [14-07-2022 19:22:01]15049: WAF :: fetched 5 new logs [14-07-2022 19:23:01]17664: WAF :: fetched 1 new logs [14-07-2022 19:24:02]20583: WAF :: fetched 1 new logs [14-07-2022 19:25:02]23246: WAF :: fetched 1 new logs [14-07-2022 19:26:01]25915: WAF :: fetched 2 new logs [14-07-2022 19:29:02]1695: WAF :: fetched 1 new logs [14-07-2022 19:30:01]4359: WAF :: fetched 1 new logs [14-07-2022 19:31:02]7097: WAF :: fetched 43 new logs [14-07-2022 19:32:02]9816: WAF :: fetched 3 new logs [14-07-2022 19:35:02]17764: WAF :: fetched 3 new logs [14-07-2022 19:36:01]20578: WAF :: fetched 10 new logs [14-07-2022 19:37:01]23275: WAF :: fetched 28 new logs [14-07-2022 19:40:01]31332: WAF :: fetched 3 new logs [14-07-2022 19:41:01]1644: WAF :: fetched 26 new logs [14-07-2022 19:41:01]1644: Checking for user cron vulnerabilities [14-07-2022 19:42:02]4375: WAF :: fetched 10 new logs [14-07-2022 19:43:02]7078: WAF :: fetched 2 new logs [14-07-2022 19:44:01]9638: Checking ditributed CMS bruteforce attacks [14-07-2022 19:44:02]9638: WAF :: fetched 40 new logs [14-07-2022 19:45:01]: Checking for definition updates [14-07-2022 19:45:01]12296: WAF :: fetched 2 new logs [14-07-2022 19:46:02]14993: WAF :: fetched 1 new logs [14-07-2022 19:47:02]17670: WAF :: fetched 16 new logs [14-07-2022 19:49:01]23064: WAF :: fetched 28 new logs [14-07-2022 19:50:02]25784: WAF :: fetched 38 new logs [14-07-2022 19:52:02]31284: WAF :: fetched 1 new logs [14-07-2022 19:54:02]4164: WAF :: fetched 27 new logs [14-07-2022 19:55:03]6769: WAF :: fetched 4 new logs [14-07-2022 19:56:02]9489: WAF :: fetched 4 new logs [14-07-2022 19:57:01]12142: WAF :: fetched 1 new logs [14-07-2022 19:59:02]17523: WAF :: fetched 33 new logs [14-07-2022 20:00:02]19967: WAF :: fetched 12 new logs [14-07-2022 20:01:01]23186: WAF :: fetched 43 new logs [14-07-2022 20:02:02]26007: WAF :: fetched 5 new logs [14-07-2022 20:03:01]28727: WAF :: fetched 1 new logs [14-07-2022 20:04:01]31384: WAF :: fetched 30 new logs [14-07-2022 20:05:01]1600: WAF :: fetched 20 new logs [14-07-2022 20:06:02]4316: WAF :: fetched 4 new logs [14-07-2022 20:07:01]6922: WAF :: fetched 3 new logs [14-07-2022 20:08:01]9628: WAF :: fetched 6 new logs [14-07-2022 20:09:01]12266: WAF :: fetched 1 new logs [14-07-2022 20:10:02]14950: WAF :: fetched 4 new logs [14-07-2022 20:11:03]17560: WAF :: fetched 4 new logs [14-07-2022 20:12:02]20349: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657840322 [14-07-2022 20:12:02]20349: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 20:12:04]20349: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 20:12:07]20349: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-2012/20220714-201202-YtCiwoI9Oc89s9j0XaivKgAAABE [14-07-2022 20:12:07]20349: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 20:12:07]20349: WAF :: fetched 2 new logs [14-07-2022 20:15:01]28118: WAF :: fetched 2 new logs [14-07-2022 20:16:02]30982: WAF :: fetched 1 new logs [14-07-2022 20:17:01]1212: WAF :: fetched 3 new logs [14-07-2022 20:19:01]6458: WAF :: fetched 1 new logs [14-07-2022 20:20:01]9185: WAF :: fetched 11 new logs [14-07-2022 20:24:02]19985: WAF :: fetched 1 new logs [14-07-2022 20:25:02]22614: WAF :: fetched 4 new logs [14-07-2022 20:29:02]875: WAF :: fetched 1 new logs [14-07-2022 20:32:01]8880: WAF :: fetched 1 new logs [14-07-2022 20:33:03]11581: WAF :: fetched 4 new logs [14-07-2022 20:35:01]16781: WAF :: fetched 3 new logs [14-07-2022 20:36:02]19589: WAF :: fetched 1 new logs [14-07-2022 20:39:01]27422: WAF :: fetched 2 new logs [14-07-2022 20:40:02]30103: WAF :: fetched 1 new logs [14-07-2022 20:41:03]341: WAF :: fetched 1 new logs [14-07-2022 20:41:03]341: Checking for user cron vulnerabilities [14-07-2022 20:43:01]5815: WAF :: fetched 1 new logs [14-07-2022 20:44:02]8440: Checking ditributed CMS bruteforce attacks [14-07-2022 20:45:02]11128: WAF :: fetched 1 new logs [14-07-2022 20:47:01]16501: WAF :: fetched 1 new logs [14-07-2022 20:48:01]19275: WAF :: fetched 27 new logs [14-07-2022 20:49:02]21889: WAF :: fetched 66 new logs [14-07-2022 20:51:01]27247: WAF :: fetched 1 new logs [14-07-2022 20:52:02]29877: WAF :: fetched 1 new logs [14-07-2022 20:55:02]5419: WAF :: fetched 3 new logs [14-07-2022 20:57:02]10714: WAF :: fetched 25 new logs [14-07-2022 20:58:02]13414: WAF :: fetched 30 new logs [14-07-2022 21:00:02]18451: WAF :: fetched 1 new logs [14-07-2022 21:01:01]21628: WAF :: fetched 1 new logs [14-07-2022 21:03:01]27162: WAF :: fetched 1 new logs [14-07-2022 21:04:01]29821: WAF :: fetched 1 new logs [14-07-2022 21:06:01]2797: WAF :: fetched 51 new logs [14-07-2022 21:07:02]5421: WAF :: fetched 25 new logs [14-07-2022 21:08:01]8122: WAF :: fetched 2 new logs [14-07-2022 21:11:02]16086: WAF :: fetched 1 new logs [14-07-2022 21:12:01]18807: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657843921 [14-07-2022 21:12:01]18807: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 21:12:03]18807: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 21:12:04]18807: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-2112/20220714-211201-YtCw0aAiHS0eqpuwF_JQMwAAABc [14-07-2022 21:12:04]18807: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 21:12:04]18807: WAF :: fetched 1 new logs [14-07-2022 21:13:02]21596: WAF :: fetched 4 new logs [14-07-2022 21:14:01]24208: WAF :: fetched 3 new logs [14-07-2022 21:15:02]26860: WAF :: fetched 19 new logs [14-07-2022 21:17:02]32207: WAF :: fetched 1 new logs [14-07-2022 21:18:01]2608: WAF :: fetched 2 new logs [14-07-2022 21:20:02]7970: WAF :: fetched 2 new logs [14-07-2022 21:21:01]10651: WAF :: fetched 1 new logs [14-07-2022 21:22:01]13290: WAF :: fetched 30 new logs [14-07-2022 21:24:01]18699: WAF :: fetched 3 new logs [14-07-2022 21:27:01]26676: WAF :: fetched 1 new logs [14-07-2022 21:29:01]32057: WAF :: fetched 1 new logs [14-07-2022 21:30:01]2337: WAF :: fetched 1 new logs [14-07-2022 21:31:01]5055: WAF :: fetched 2 new logs [14-07-2022 21:32:02]7788: WAF :: fetched 66 new logs [14-07-2022 21:33:01]10450: WAF :: fetched 19 new logs [14-07-2022 21:35:04]15654: WAF :: fetched 24 new logs [14-07-2022 21:36:01]18396: WAF :: fetched 101 new logs [14-07-2022 21:37:02]21077: WAF :: fetched 5 new logs [14-07-2022 21:38:02]23739: WAF :: fetched 1 new logs [14-07-2022 21:39:02]26343: WAF :: fetched 5 new logs [14-07-2022 21:40:01]28946: WAF :: fetched 2 new logs [14-07-2022 21:41:02]31628: Checking for user cron vulnerabilities [14-07-2022 21:42:01]1890: WAF :: fetched 3 new logs [14-07-2022 21:44:01]7373: Checking ditributed CMS bruteforce attacks [14-07-2022 21:45:01]10093: WAF :: fetched 1 new logs [14-07-2022 21:47:02]15374: WAF :: fetched 2 new logs [14-07-2022 21:50:02]23451: WAF :: fetched 3 new logs [14-07-2022 21:51:02]26123: WAF :: fetched 1 new logs [14-07-2022 21:52:02]28750: WAF :: fetched 3 new logs [14-07-2022 21:54:02]1696: WAF :: fetched 2 new logs [14-07-2022 21:55:01]4297: WAF :: fetched 1 new logs [14-07-2022 21:56:01]6966: WAF :: fetched 1 new logs [14-07-2022 21:57:02]9717: WAF :: fetched 1 new logs [14-07-2022 21:58:02]12445: WAF :: fetched 2 new logs [14-07-2022 21:59:01]15082: WAF :: fetched 1 new logs [14-07-2022 22:00:01]17555: WAF :: fetched 2 new logs [14-07-2022 22:01:01]20785: WAF :: fetched 1 new logs [14-07-2022 22:03:01]26312: WAF :: fetched 1 new logs [14-07-2022 22:04:02]29022: WAF :: fetched 31 new logs [14-07-2022 22:06:01]1892: WAF :: fetched 3 new logs [14-07-2022 22:07:12]4520: Performing Domain reputation checks [14-07-2022 22:08:02]7181: WAF :: fetched 1 new logs [14-07-2022 22:10:02]12444: WAF :: fetched 1 new logs [14-07-2022 22:11:01]15138: WAF :: fetched 2 new logs [14-07-2022 22:12:02]17834: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657847522 [14-07-2022 22:12:02]17834: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 22:12:04]17834: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 22:12:06]17834: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-2212/20220714-221202-YtC-4r4HAZ3b6w9tGXj_kgAAABw [14-07-2022 22:12:06]17834: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 22:12:06]17834: WAF :: fetched 2 new logs [14-07-2022 22:17:03]31147: WAF :: fetched 7 new logs [14-07-2022 22:19:01]4240: WAF :: fetched 1 new logs [14-07-2022 22:20:01]6837: WAF :: fetched 2 new logs [14-07-2022 22:22:01]12132: WAF :: fetched 2 new logs [14-07-2022 22:25:01]20112: WAF :: fetched 1 new logs [14-07-2022 22:27:01]25465: WAF :: fetched 2 new logs [14-07-2022 22:30:01]999: WAF :: fetched 1 new logs [14-07-2022 22:31:01]3685: WAF :: fetched 5 new logs [14-07-2022 22:32:02]6374: WAF :: fetched 1 new logs [14-07-2022 22:37:01]19696: WAF :: fetched 1 new logs [14-07-2022 22:39:01]24974: WAF :: fetched 3 new logs [14-07-2022 22:40:01]27602: WAF :: fetched 3 new logs [14-07-2022 22:41:02]30291: WAF :: fetched 19 new logs [14-07-2022 22:41:02]30291: Checking for user cron vulnerabilities [14-07-2022 22:42:01]473: WAF :: fetched 14 new logs [14-07-2022 22:44:01]5964: Checking ditributed CMS bruteforce attacks [14-07-2022 22:47:01]14104: WAF :: fetched 1 new logs [14-07-2022 22:50:01]22148: WAF :: fetched 1 new logs [14-07-2022 22:54:02]32738: WAF :: fetched 30 new logs [14-07-2022 22:55:01]2937: WAF :: fetched 1 new logs [14-07-2022 22:56:04]5589: WAF :: fetched 2 new logs [14-07-2022 23:01:02]19036: WAF :: fetched 5 new logs [14-07-2022 23:02:01]21642: WAF :: fetched 11 new logs [14-07-2022 23:03:02]24360: WAF :: fetched 28 new logs [14-07-2022 23:07:01]2699: WAF :: fetched 1 new logs [14-07-2022 23:08:01]5435: WAF :: fetched 2 new logs [14-07-2022 23:08:12]2881: Performed RBL check for 23.111.136.34. [14-07-2022 23:10:02]10785: WAF :: fetched 5 new logs [14-07-2022 23:11:01]13400: WAF :: fetched 4 new logs [14-07-2022 23:12:01]16029: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657851121 [14-07-2022 23:12:01]16029: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [14-07-2022 23:12:03]16029: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [14-07-2022 23:12:04]16029: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220714/20220714-2312/20220714-231201-YtDM8YUKJHFtyboMmoyofgAAAA8 [14-07-2022 23:12:04]16029: WAF :: No suitable log file found. Using SQLite.. [14-07-2022 23:12:04]16029: WAF :: fetched 1 new logs [14-07-2022 23:16:01]26783: WAF :: fetched 3 new logs [14-07-2022 23:17:01]29400: WAF :: fetched 2 new logs [14-07-2022 23:18:01]32198: WAF :: fetched 10 new logs [14-07-2022 23:20:02]5085: WAF :: fetched 2 new logs [14-07-2022 23:26:01]21056: WAF :: fetched 1 new logs [14-07-2022 23:34:02]9981: WAF :: fetched 1 new logs [14-07-2022 23:36:01]15252: WAF :: fetched 2 new logs [14-07-2022 23:37:02]17942: WAF :: fetched 1 new logs [14-07-2022 23:39:02]23294: WAF :: fetched 3 new logs [14-07-2022 23:41:01]28537: WAF :: fetched 2 new logs [14-07-2022 23:41:01]28537: Checking for user cron vulnerabilities [14-07-2022 23:43:01]1448: WAF :: fetched 2 new logs [14-07-2022 23:44:02]4056: Checking ditributed CMS bruteforce attacks [14-07-2022 23:44:02]4056: WAF :: fetched 1 new logs [14-07-2022 23:47:02]12089: WAF :: fetched 1 new logs [14-07-2022 23:48:02]14866: WAF :: fetched 1 new logs [14-07-2022 23:50:02]20351: WAF :: fetched 30 new logs [14-07-2022 23:52:01]25623: WAF :: fetched 2 new logs [14-07-2022 23:52:01]25625: httpd.conf changed. Refreshing watchlist. [14-07-2022 23:53:02]28434: httpd.conf changed. Refreshing watchlist. [14-07-2022 23:54:01]31138: WAF :: fetched 2 new logs [14-07-2022 23:55:01]1491: WAF :: fetched 3 new logs [14-07-2022 23:55:01]1508: httpd.conf changed. Refreshing watchlist. [14-07-2022 23:56:02]4514: WAF :: fetched 14 new logs [14-07-2022 23:57:01]7178: WAF :: fetched 22 new logs [14-07-2022 23:57:02]7185: httpd.conf changed. Refreshing watchlist. [14-07-2022 23:58:01]9878: WAF :: fetched 2 new logs [14-07-2022 23:59:02]12504: WAF :: fetched 3 new logs [15-07-2022 00:01:05]18111: Sending daily report for July 15, 2022 [15-07-2022 00:02:01]20820: WAF :: fetched 1 new logs [15-07-2022 00:04:01]26137: WAF :: fetched 4 new logs [15-07-2022 00:05:02]28791: Deleted 0 entries older than 6 MONTH from scanner_logs [15-07-2022 00:05:02]28791: Deleted 0 files from Quarantine [15-07-2022 00:06:01]31471: WAF :: fetched 1 new logs [15-07-2022 00:08:01]4584: WAF :: fetched 1 new logs [15-07-2022 00:09:01]7250: WAF :: fetched 1 new logs [15-07-2022 00:11:01]12549: WAF :: fetched 1 new logs [15-07-2022 00:12:02]15187: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657854722 [15-07-2022 00:12:02]15187: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 00:12:04]15187: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 00:12:05]15187: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-0012/20220715-001202-YtDbAiaxM6mFxh-6kvvflgAAACQ [15-07-2022 00:12:05]15187: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 00:12:06]15187: WAF :: fetched 7 new logs [15-07-2022 00:15:01]23188: WAF :: fetched 2 new logs [15-07-2022 00:18:02]31236: WAF :: fetched 1 new logs [15-07-2022 00:20:02]4005: WAF :: fetched 1 new logs [15-07-2022 00:23:01]11954: WAF :: fetched 1 new logs [15-07-2022 00:25:02]17163: WAF :: fetched 1 new logs [15-07-2022 00:28:02]25203: WAF :: fetched 4 new logs [15-07-2022 00:29:02]27798: WAF :: fetched 4 new logs [15-07-2022 00:30:01]30355: WAF :: fetched 2 new logs [15-07-2022 00:33:01]6046: WAF :: fetched 2 new logs [15-07-2022 00:35:01]11398: WAF :: fetched 2 new logs [15-07-2022 00:36:02]14054: WAF :: fetched 16 new logs [15-07-2022 00:38:02]19503: WAF :: fetched 2 new logs [15-07-2022 00:40:01]24732: WAF :: fetched 6 new logs [15-07-2022 00:41:02]27390: Checking for user cron vulnerabilities [15-07-2022 00:44:02]2807: Checking ditributed CMS bruteforce attacks [15-07-2022 00:44:02]2807: WAF :: fetched 1 new logs [15-07-2022 00:45:01]: Checking for software updates [15-07-2022 00:46:01]8067: WAF :: fetched 2 new logs [15-07-2022 00:47:02]10654: WAF :: fetched 1 new logs [15-07-2022 00:49:01]16079: WAF :: fetched 3 new logs [15-07-2022 00:50:02]18906: WAF :: fetched 10 new logs [15-07-2022 00:51:01]21536: WAF :: fetched 3 new logs [15-07-2022 00:53:02]26771: WAF :: fetched 1 new logs [15-07-2022 00:54:02]29412: WAF :: fetched 3 new logs [15-07-2022 00:55:01]31996: WAF :: fetched 2 new logs [15-07-2022 00:56:02]2271: WAF :: fetched 1 new logs [15-07-2022 00:57:01]4845: WAF :: fetched 8 new logs [15-07-2022 00:58:01]7503: WAF :: fetched 3 new logs [15-07-2022 01:01:02]16188: WAF :: fetched 5 new logs [15-07-2022 01:02:02]19099: WAF :: fetched 1 new logs [15-07-2022 01:05:02]27748: WAF :: fetched 1 new logs [15-07-2022 01:07:02]986: WAF :: fetched 4 new logs [15-07-2022 01:10:02]9484: WAF :: fetched 2 new logs [15-07-2022 01:11:01]12103: WAF :: fetched 2 new logs [15-07-2022 01:12:02]14829: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657858322 [15-07-2022 01:12:02]14829: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 01:12:04]14829: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 01:12:06]14829: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-0112/20220715-011202-YtDpEjl1OXPEL3rYlzRTBwAAAAU [15-07-2022 01:12:06]14829: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [15-07-2022 01:12:06]14829: WAF :: fetched 1 new logs [15-07-2022 01:13:02]17746: WAF :: fetched 4 new logs [15-07-2022 01:14:01]20481: WAF :: fetched 1 new logs [15-07-2022 01:17:01]28653: WAF :: fetched 3 new logs [15-07-2022 01:18:02]31533: WAF :: fetched 1 new logs [15-07-2022 01:22:01]10427: WAF :: fetched 1 new logs [15-07-2022 01:23:02]13385: WAF :: fetched 3 new logs [15-07-2022 01:24:02]16091: WAF :: fetched 18 new logs [15-07-2022 01:25:01]18766: WAF :: fetched 3 new logs [15-07-2022 01:26:02]21483: WAF :: fetched 44 new logs [15-07-2022 01:27:01]24383: WAF :: fetched 68 new logs [15-07-2022 01:28:02]27156: WAF :: fetched 7 new logs [15-07-2022 01:29:02]30032: WAF :: fetched 6 new logs [15-07-2022 01:30:01]32735: WAF :: fetched 2 new logs [15-07-2022 01:31:02]3461: WAF :: fetched 2 new logs [15-07-2022 01:32:01]6292: WAF :: fetched 1 new logs [15-07-2022 01:33:24]8974: WAF :: fetched 1 new logs [15-07-2022 01:34:01]11283: WAF :: fetched 1 new logs [15-07-2022 01:37:02]20378: WAF :: fetched 1 new logs [15-07-2022 01:38:02]22982: WAF :: fetched 3 new logs [15-07-2022 01:40:01]28537: WAF :: fetched 34 new logs [15-07-2022 01:41:02]31471: httpd.conf changed. Refreshing watchlist. [15-07-2022 01:41:02]31472: WAF :: fetched 17 new logs [15-07-2022 01:41:02]31472: Checking for user cron vulnerabilities [15-07-2022 01:42:02]2218: WAF :: fetched 33 new logs [15-07-2022 01:43:01]4852: WAF :: fetched 67 new logs [15-07-2022 01:44:01]7764: Checking ditributed CMS bruteforce attacks [15-07-2022 01:44:02]7764: WAF :: fetched 6 new logs [15-07-2022 01:45:02]: Checking for definition updates [15-07-2022 01:46:01]13596: WAF :: fetched 34 new logs [15-07-2022 01:47:01]16480: WAF :: fetched 1 new logs [15-07-2022 01:48:02]19162: WAF :: fetched 4 new logs [15-07-2022 01:49:02]22122: WAF :: fetched 16 new logs [15-07-2022 01:50:01]24919: httpd.conf changed. Refreshing watchlist. [15-07-2022 01:50:01]24946: WAF :: fetched 2 new logs [15-07-2022 01:55:01]6208: WAF :: fetched 2 new logs [15-07-2022 01:56:02]8848: WAF :: fetched 2 new logs [15-07-2022 01:57:02]11652: WAF :: fetched 4 new logs [15-07-2022 02:01:01]22540: WAF :: fetched 6 new logs [15-07-2022 02:03:02]27772: WAF :: fetched 4 new logs [15-07-2022 02:04:02]30513: WAF :: fetched 1 new logs [15-07-2022 02:05:02]674: WAF :: fetched 3 new logs [15-07-2022 02:06:01]3371: WAF :: fetched 5 new logs [15-07-2022 02:08:03]8761: WAF :: fetched 28 new logs [15-07-2022 02:09:01]11785: WAF :: fetched 5 new logs [15-07-2022 02:11:02]17238: WAF :: fetched 2 new logs [15-07-2022 02:12:01]19943: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657861921 [15-07-2022 02:12:01]19943: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 02:12:03]19943: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 02:12:04]19943: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-0212/20220715-021201-YtD3Ifxhp8Euu_n5Xt51tAAAAAQ [15-07-2022 02:12:04]19943: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 02:12:04]19943: WAF :: fetched 367 new logs [15-07-2022 02:15:02]27838: WAF :: fetched 3 new logs [15-07-2022 02:17:01]672: WAF :: fetched 1 new logs [15-07-2022 02:18:02]3401: WAF :: fetched 61 new logs [15-07-2022 02:24:01]19354: WAF :: fetched 1 new logs [15-07-2022 02:26:01]24627: WAF :: fetched 2 new logs [15-07-2022 02:28:01]29787: WAF :: fetched 3 new logs [15-07-2022 02:29:01]32441: WAF :: fetched 1 new logs [15-07-2022 02:30:02]2659: WAF :: fetched 1 new logs [15-07-2022 02:31:01]5295: WAF :: fetched 1 new logs [15-07-2022 02:32:01]7954: WAF :: fetched 1 new logs [15-07-2022 02:33:02]10584: WAF :: fetched 1 new logs [15-07-2022 02:34:01]13244: WAF :: fetched 9 new logs [15-07-2022 02:40:02]29079: WAF :: fetched 2 new logs [15-07-2022 02:41:02]31709: Checking for user cron vulnerabilities [15-07-2022 02:42:01]1905: WAF :: fetched 1 new logs [15-07-2022 02:44:02]7205: Checking ditributed CMS bruteforce attacks [15-07-2022 02:44:03]7205: WAF :: fetched 3 new logs [15-07-2022 02:45:01]9745: WAF :: fetched 1 new logs [15-07-2022 02:52:02]28383: WAF :: fetched 1 new logs [15-07-2022 02:53:01]30948: WAF :: fetched 1 new logs [15-07-2022 02:53:02]30945: Updated license status via CDN [15-07-2022 02:59:01]14297: WAF :: fetched 1 new logs [15-07-2022 03:00:02]16618: WAF :: fetched 6 new logs [15-07-2022 03:00:30]16618: Found and updated 32 CMS installations [15-07-2022 03:01:32]16618: Wordpress installation #15 contratopronto.net has errors [15-07-2022 03:02:02]22664: WAF :: fetched 1 new logs [15-07-2022 03:03:02]25369: WAF :: fetched 1 new logs [15-07-2022 03:03:36]16618: Wordpress installation #34 fazendayrere.com.br has errors [15-07-2022 03:04:16]16618: Wordpress installation #40 guardian-ba.com.br has errors [15-07-2022 03:04:24]16618: Sending CMS version vulnerability report emails to cpanel users [15-07-2022 03:04:27]16618: Checking wordpress installations for suspicious directories [15-07-2022 03:04:37]25412: Sending CMS version vulnerability report emails to cpanel users [15-07-2022 03:04:41]25412: Checking wordpress installations for suspicious directories [15-07-2022 03:05:01]31667: WAF :: fetched 1 new logs [15-07-2022 03:06:02]1883: WAF :: fetched 2 new logs [15-07-2022 03:10:01]13655: WAF :: fetched 2 new logs [15-07-2022 03:12:01]19200: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657865521 [15-07-2022 03:12:01]19200: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 03:12:03]19200: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 03:12:06]19200: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-0312/20220715-031201-YtEFMXHb0rGDzorpgaQy7wAAAAo [15-07-2022 03:12:06]19200: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [15-07-2022 03:12:06]19200: WAF :: fetched 1 new logs [15-07-2022 03:13:02]21851: WAF :: fetched 2 new logs [15-07-2022 03:15:02]27091: WAF :: fetched 1 new logs [15-07-2022 03:16:02]29765: WAF :: fetched 2 new logs [15-07-2022 03:18:02]2633: WAF :: fetched 1 new logs [15-07-2022 03:19:02]5269: WAF :: fetched 2 new logs [15-07-2022 03:20:02]7900: WAF :: fetched 1 new logs [15-07-2022 03:21:02]10559: WAF :: fetched 5 new logs [15-07-2022 03:22:01]13223: WAF :: fetched 1 new logs [15-07-2022 03:23:02]16101: WAF :: fetched 1 new logs [15-07-2022 03:24:02]18899: WAF :: fetched 3 new logs [15-07-2022 03:26:04]24393: WAF :: fetched 6 new logs [15-07-2022 03:28:02]30232: WAF :: fetched 1 new logs [15-07-2022 03:30:02]3385: WAF :: fetched 1 new logs [15-07-2022 03:31:01]6075: WAF :: fetched 1 new logs [15-07-2022 03:32:02]8873: WAF :: fetched 1 new logs [15-07-2022 03:33:02]11542: WAF :: fetched 1 new logs [15-07-2022 03:34:01]12137: WAF :: fetched 8 new logs [15-07-2022 03:35:01]27765: WAF :: fetched 3 new logs [15-07-2022 03:37:02]24239: WAF :: fetched 1 new logs [15-07-2022 03:39:02]29652: WAF :: fetched 1 new logs [15-07-2022 03:41:02]2520: WAF :: fetched 4 new logs [15-07-2022 03:41:02]2520: Checking for user cron vulnerabilities [15-07-2022 03:44:01]10405: Checking ditributed CMS bruteforce attacks [15-07-2022 03:44:02]10405: WAF :: fetched 1 new logs [15-07-2022 03:45:01]13031: WAF :: fetched 24 new logs [15-07-2022 03:46:02]15696: httpd.conf changed. Refreshing watchlist. [15-07-2022 03:46:02]15701: WAF :: fetched 1 new logs [15-07-2022 03:48:02]20976: WAF :: fetched 1 new logs [15-07-2022 03:49:01]23620: WAF :: fetched 4 new logs [15-07-2022 03:51:02]28916: WAF :: fetched 1 new logs [15-07-2022 03:52:02]31659: WAF :: fetched 3 new logs [15-07-2022 03:53:02]1899: WAF :: fetched 3 new logs [15-07-2022 03:54:01]4725: WAF :: fetched 4 new logs [15-07-2022 03:55:02]7345: WAF :: fetched 5 new logs [15-07-2022 03:56:02]9964: WAF :: fetched 4 new logs [15-07-2022 03:57:02]12556: WAF :: fetched 4 new logs [15-07-2022 03:58:01]15152: WAF :: fetched 3 new logs [15-07-2022 03:59:02]17888: WAF :: fetched 4 new logs [15-07-2022 04:00:01]20299: WAF :: fetched 4 new logs [15-07-2022 04:01:04]23412: WAF :: fetched 9 new logs [15-07-2022 04:02:02]26034: WAF :: fetched 3 new logs [15-07-2022 04:03:02]28792: WAF :: fetched 9 new logs [15-07-2022 04:04:02]31687: WAF :: fetched 28 new logs [15-07-2022 04:05:01]2095: WAF :: fetched 11 new logs [15-07-2022 04:06:03]4932: WAF :: fetched 4 new logs [15-07-2022 04:07:01]7585: WAF :: fetched 5 new logs [15-07-2022 04:08:02]10337: WAF :: fetched 5 new logs [15-07-2022 04:09:02]13206: WAF :: fetched 4 new logs [15-07-2022 04:10:01]16008: WAF :: fetched 2 new logs [15-07-2022 04:11:02]18881: WAF :: fetched 4 new logs [15-07-2022 04:12:01]21625: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657869121 [15-07-2022 04:12:01]21625: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 04:12:03]21625: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 04:12:04]21625: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-0412/20220715-041201-YtETQcvuVBQ_kjBpiygQ0AAAABc [15-07-2022 04:12:04]21625: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 04:12:04]21625: WAF :: fetched 161 new logs [15-07-2022 04:13:02]24528: WAF :: fetched 2 new logs [15-07-2022 04:14:02]27305: WAF :: fetched 2 new logs [15-07-2022 04:15:01]30098: WAF :: fetched 4 new logs [15-07-2022 04:18:02]5586: WAF :: fetched 13 new logs [15-07-2022 04:19:01]8251: WAF :: fetched 4 new logs [15-07-2022 04:20:02]10928: WAF :: fetched 2 new logs [15-07-2022 04:22:02]16251: WAF :: fetched 1 new logs [15-07-2022 04:26:01]26817: WAF :: fetched 1 new logs [15-07-2022 04:29:01]2106: WAF :: fetched 2 new logs [15-07-2022 04:30:02]4853: WAF :: fetched 1 new logs [15-07-2022 04:33:02]12705: WAF :: fetched 2 new logs [15-07-2022 04:34:01]15397: WAF :: fetched 1 new logs [15-07-2022 04:35:02]18068: WAF :: fetched 1 new logs [15-07-2022 04:36:04]20719: WAF :: fetched 1 new logs [15-07-2022 04:37:01]23320: WAF :: fetched 1 new logs [15-07-2022 04:40:02]31217: WAF :: fetched 7 new logs [15-07-2022 04:41:01]1437: Checking for user cron vulnerabilities [15-07-2022 04:44:01]9353: Checking ditributed CMS bruteforce attacks [15-07-2022 04:45:02]11925: WAF :: fetched 3 new logs [15-07-2022 04:46:01]14527: WAF :: fetched 13 new logs [15-07-2022 04:47:02]17144: WAF :: fetched 1 new logs [15-07-2022 04:49:01]22463: WAF :: fetched 1 new logs [15-07-2022 04:56:01]8419: WAF :: fetched 1 new logs [15-07-2022 05:01:41]21749: Starting daily scan on files updated in last 24 hrs [15-07-2022 05:06:01]2524: WAF :: fetched 4 new logs [15-07-2022 05:07:01]5094: WAF :: fetched 3 new logs [15-07-2022 05:09:02]10407: WAF :: fetched 1 new logs [15-07-2022 05:11:01]15744: WAF :: fetched 2 new logs [15-07-2022 05:12:01]18385: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657872721 [15-07-2022 05:12:01]18385: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 05:12:03]18385: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 05:12:05]18385: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-0512/20220715-051201-YtEhUcv4heKc8KEsJJQvPQAAAA8 [15-07-2022 05:12:05]18385: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 05:12:05]18385: WAF :: fetched 2 new logs [15-07-2022 05:13:02]21055: WAF :: fetched 2 new logs [15-07-2022 05:17:01]31409: WAF :: fetched 1 new logs [15-07-2022 05:18:02]1640: WAF :: fetched 2 new logs [15-07-2022 05:19:01]4341: WAF :: fetched 1 new logs [15-07-2022 05:22:01]12277: WAF :: fetched 3 new logs [15-07-2022 05:27:01]25281: WAF :: fetched 1 new logs [15-07-2022 05:29:01]30553: WAF :: fetched 1 new logs [15-07-2022 05:34:01]11292: WAF :: fetched 1 new logs [15-07-2022 05:36:02]16607: WAF :: fetched 1 new logs [15-07-2022 05:38:02]21878: WAF :: fetched 4 new logs [15-07-2022 05:41:02]29842: WAF :: fetched 2 new logs [15-07-2022 05:41:02]29842: Checking for user cron vulnerabilities [15-07-2022 05:42:01]32416: WAF :: fetched 3 new logs [15-07-2022 05:43:02]2615: WAF :: fetched 1 new logs [15-07-2022 05:44:02]5262: Checking ditributed CMS bruteforce attacks [15-07-2022 05:50:01]20984: WAF :: fetched 1 new logs [15-07-2022 05:51:01]23647: WAF :: fetched 1 new logs [15-07-2022 06:00:01]14605: WAF :: fetched 2 new logs [15-07-2022 06:04:01]25743: WAF :: fetched 20 new logs [15-07-2022 06:07:01]1263: WAF :: fetched 1 new logs [15-07-2022 06:08:02]3874: WAF :: fetched 2 new logs [15-07-2022 06:10:02]9261: WAF :: fetched 2 new logs [15-07-2022 06:11:01]11839: WAF :: fetched 1 new logs [15-07-2022 06:12:02]14475: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657876322 [15-07-2022 06:12:02]14475: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 06:12:04]14475: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 06:12:05]14475: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-0612/20220715-061202-YtEvYu5jADYIZE_cUZefFgAAAAM [15-07-2022 06:12:05]14475: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 06:12:06]14475: WAF :: fetched 17 new logs [15-07-2022 06:13:02]17090: WAF :: fetched 1 new logs [15-07-2022 06:17:01]27907: WAF :: fetched 1 new logs [15-07-2022 06:18:02]30495: WAF :: fetched 1 new logs [15-07-2022 06:21:02]6006: WAF :: fetched 1 new logs [15-07-2022 06:23:01]11160: WAF :: fetched 1 new logs [15-07-2022 06:28:01]24401: WAF :: fetched 1 new logs [15-07-2022 06:29:03]27015: WAF :: fetched 1 new logs [15-07-2022 06:30:02]29712: WAF :: fetched 1 new logs [15-07-2022 06:31:01]32341: WAF :: fetched 2 new logs [15-07-2022 06:37:01]15761: WAF :: fetched 2 new logs [15-07-2022 06:41:02]26400: Checking for user cron vulnerabilities [15-07-2022 06:42:01]28962: WAF :: fetched 1 new logs [15-07-2022 06:43:01]31528: WAF :: fetched 2 new logs [15-07-2022 06:44:01]1738: Checking ditributed CMS bruteforce attacks [15-07-2022 06:45:01]4383: WAF :: fetched 2 new logs [15-07-2022 06:47:02]9651: WAF :: fetched 2 new logs [15-07-2022 06:52:02]22853: WAF :: fetched 2 new logs [15-07-2022 06:53:02]25478: WAF :: fetched 2 new logs [15-07-2022 07:05:04]25029: WAF :: fetched 1 new logs [15-07-2022 07:08:02]364: WAF :: fetched 7 new logs [15-07-2022 07:09:01]3030: WAF :: fetched 1 new logs [15-07-2022 07:12:02]11113: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657879922 [15-07-2022 07:12:02]11113: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 07:12:04]11113: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 07:12:05]11113: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-0712/20220715-071202-YtE9cn00OOyGq9OQ_VzpSwAAAA0 [15-07-2022 07:12:05]11113: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 07:12:06]11113: WAF :: fetched 2 new logs [15-07-2022 07:15:01]19104: WAF :: fetched 2 new logs [15-07-2022 07:24:01]10491: WAF :: fetched 1 new logs [15-07-2022 07:26:01]15847: WAF :: fetched 5 new logs [15-07-2022 07:27:01]18520: WAF :: fetched 1 new logs [15-07-2022 07:28:02]21103: WAF :: fetched 6 new logs [15-07-2022 07:29:02]23752: WAF :: fetched 5 new logs [15-07-2022 07:30:02]26397: WAF :: fetched 3 new logs [15-07-2022 07:36:01]9899: WAF :: fetched 2 new logs [15-07-2022 07:37:01]12577: WAF :: fetched 33 new logs [15-07-2022 07:39:02]17889: WAF :: fetched 1 new logs [15-07-2022 07:40:01]20630: WAF :: fetched 2 new logs [15-07-2022 07:41:02]23299: Checking for user cron vulnerabilities [15-07-2022 07:42:01]25748: WAF :: fetched 3 new logs [15-07-2022 07:43:02]28479: WAF :: fetched 1 new logs [15-07-2022 07:44:01]31041: Checking ditributed CMS bruteforce attacks [15-07-2022 07:45:01]: Checking for definition updates [15-07-2022 07:45:01]1342: WAF :: fetched 3 new logs [15-07-2022 07:46:02]4042: WAF :: fetched 1 new logs [15-07-2022 07:48:02]9264: WAF :: fetched 2 new logs [15-07-2022 07:49:01]11829: WAF :: fetched 4 new logs [15-07-2022 07:50:02]14567: WAF :: fetched 6 new logs [15-07-2022 07:52:01]19930: WAF :: fetched 6 new logs [15-07-2022 07:53:02]22531: WAF :: fetched 2 new logs [15-07-2022 07:55:01]28011: WAF :: fetched 2 new logs [15-07-2022 07:56:02]30657: WAF :: fetched 4 new logs [15-07-2022 07:57:01]812: WAF :: fetched 1 new logs [15-07-2022 07:58:02]3476: WAF :: fetched 2 new logs [15-07-2022 08:03:02]17057: WAF :: fetched 5 new logs [15-07-2022 08:04:02]19752: WAF :: fetched 2 new logs [15-07-2022 08:08:02]30323: WAF :: fetched 1 new logs [15-07-2022 08:09:01]32760: WAF :: fetched 78 new logs [15-07-2022 08:10:02]3238: WAF :: fetched 83 new logs [15-07-2022 08:11:01]5881: WAF :: fetched 66 new logs [15-07-2022 08:12:02]8615: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657883522 [15-07-2022 08:12:02]8615: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 08:12:04]8615: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 08:12:06]8615: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-0812/20220715-081202-YtFLgnw8eywKbRY6YpwEsgAAACA [15-07-2022 08:12:06]8615: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 08:12:06]8615: WAF :: fetched 5 new logs [15-07-2022 08:13:01]11281: WAF :: fetched 4 new logs [15-07-2022 08:14:02]14023: WAF :: fetched 4 new logs [15-07-2022 08:15:02]16721: WAF :: fetched 6 new logs [15-07-2022 08:17:01]22210: WAF :: fetched 27 new logs [15-07-2022 08:19:02]27493: WAF :: fetched 1 new logs [15-07-2022 08:22:02]3109: WAF :: fetched 2 new logs [15-07-2022 08:25:04]11026: WAF :: fetched 1 new logs [15-07-2022 08:26:01]13681: WAF :: fetched 1 new logs [15-07-2022 08:27:02]16309: WAF :: fetched 6 new logs [15-07-2022 08:28:01]18963: WAF :: fetched 1 new logs [15-07-2022 08:29:02]21595: WAF :: fetched 2 new logs [15-07-2022 08:32:01]29567: WAF :: fetched 25 new logs [15-07-2022 08:35:01]5152: WAF :: fetched 2 new logs [15-07-2022 08:37:01]10512: WAF :: fetched 1 new logs [15-07-2022 08:41:02]21228: WAF :: fetched 1 new logs [15-07-2022 08:41:02]21228: Checking for user cron vulnerabilities [15-07-2022 08:43:02]26485: WAF :: fetched 2 new logs [15-07-2022 08:44:02]29118: Checking ditributed CMS bruteforce attacks [15-07-2022 08:44:03]29118: WAF :: fetched 3 new logs [15-07-2022 08:46:01]2104: WAF :: fetched 13 new logs [15-07-2022 08:47:02]4742: WAF :: fetched 4 new logs [15-07-2022 08:52:01]17991: WAF :: fetched 1 new logs [15-07-2022 08:53:01]20639: WAF :: fetched 81 new logs [15-07-2022 08:55:01]26161: WAF :: fetched 4 new logs [15-07-2022 08:56:04]28903: WAF :: fetched 3 new logs [15-07-2022 09:02:02]12665: WAF :: fetched 1 new logs [15-07-2022 09:03:01]15413: WAF :: fetched 1 new logs [15-07-2022 09:07:01]26184: WAF :: fetched 1 new logs [15-07-2022 09:08:02]28832: WAF :: fetched 1 new logs [15-07-2022 09:12:01]7081: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657887121 [15-07-2022 09:12:01]7081: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 09:12:03]7081: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 09:12:04]7081: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-0912/20220715-091201-YtFZkQw-XdtE7Pj_IuPqXwAAABQ [15-07-2022 09:12:04]7081: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 09:14:02]12450: WAF :: fetched 26 new logs [15-07-2022 09:15:01]15269: WAF :: fetched 1 new logs [15-07-2022 09:16:02]18132: WAF :: fetched 4 new logs [15-07-2022 09:17:01]20742: WAF :: fetched 2 new logs [15-07-2022 09:18:03]23441: WAF :: fetched 3 new logs [15-07-2022 09:21:02]31617: WAF :: fetched 1 new logs [15-07-2022 09:23:02]4524: WAF :: fetched 1 new logs [15-07-2022 09:24:01]7188: WAF :: fetched 2 new logs [15-07-2022 09:26:01]12623: WAF :: fetched 1 new logs [15-07-2022 09:27:02]15260: WAF :: fetched 2 new logs [15-07-2022 09:32:02]28758: WAF :: fetched 3 new logs [15-07-2022 09:35:01]4409: WAF :: fetched 1 new logs [15-07-2022 09:36:02]7096: WAF :: fetched 15 new logs [15-07-2022 09:38:02]12620: WAF :: fetched 1 new logs [15-07-2022 09:40:01]18236: WAF :: fetched 2 new logs [15-07-2022 09:41:02]21066: WAF :: fetched 1 new logs [15-07-2022 09:41:02]21066: Checking for user cron vulnerabilities [15-07-2022 09:43:01]26419: WAF :: fetched 2 new logs [15-07-2022 09:44:01]29118: Checking ditributed CMS bruteforce attacks [15-07-2022 09:44:03]29118: WAF :: fetched 4 new logs [15-07-2022 09:45:02]31964: WAF :: fetched 24 new logs [15-07-2022 09:47:01]5063: WAF :: fetched 2 new logs [15-07-2022 09:48:02]7777: WAF :: fetched 28 new logs [15-07-2022 09:49:01]10465: WAF :: fetched 44 new logs [15-07-2022 09:51:02]16028: WAF :: fetched 2 new logs [15-07-2022 09:52:01]18813: WAF :: fetched 3 new logs [15-07-2022 09:54:01]24235: WAF :: fetched 1 new logs [15-07-2022 09:55:01]27046: WAF :: fetched 4 new logs [15-07-2022 09:57:01]32600: WAF :: fetched 6 new logs [15-07-2022 09:59:03]5631: WAF :: fetched 2 new logs [15-07-2022 10:00:02]8168: WAF :: fetched 2 new logs [15-07-2022 10:01:02]11419: WAF :: fetched 5 new logs [15-07-2022 10:02:01]14203: WAF :: fetched 1 new logs [15-07-2022 10:05:02]22538: WAF :: fetched 8 new logs [15-07-2022 10:06:02]25234: WAF :: fetched 130 new logs [15-07-2022 10:07:01]27908: WAF :: fetched 17 new logs [15-07-2022 10:08:03]30612: WAF :: fetched 1 new logs [15-07-2022 10:12:02]9259: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657890722 [15-07-2022 10:12:02]9259: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 10:12:04]9259: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 10:12:06]9259: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-1012/20220715-101202-YtFnono9CjLn1dSPHgEXCwAAAAU [15-07-2022 10:12:06]9259: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 10:12:06]9259: WAF :: fetched 1 new logs [15-07-2022 10:15:01]17451: WAF :: fetched 2 new logs [15-07-2022 10:16:04]20299: WAF :: fetched 1 new logs [15-07-2022 10:17:02]23088: WAF :: fetched 2 new logs [15-07-2022 10:18:01]25855: WAF :: fetched 1 new logs [15-07-2022 10:19:01]28546: WAF :: fetched 1 new logs [15-07-2022 10:23:01]7477: WAF :: fetched 1 new logs [15-07-2022 10:28:02]21633: WAF :: fetched 4 new logs [15-07-2022 10:29:01]24315: WAF :: fetched 1 new logs [15-07-2022 10:34:01]6006: WAF :: fetched 2 new logs [15-07-2022 10:41:01]26651: Checking for user cron vulnerabilities [15-07-2022 10:42:02]29522: WAF :: fetched 2 new logs [15-07-2022 10:44:02]2974: Checking ditributed CMS bruteforce attacks [15-07-2022 10:44:05]2974: WAF :: fetched 2 new logs [15-07-2022 10:45:01]5827: WAF :: fetched 2 new logs [15-07-2022 10:46:01]8898: WAF :: fetched 1 new logs [15-07-2022 10:47:02]11829: WAF :: fetched 1 new logs [15-07-2022 10:50:02]20520: WAF :: fetched 4 new logs [15-07-2022 10:51:01]23677: WAF :: fetched 1 new logs [15-07-2022 10:52:02]26638: WAF :: fetched 1 new logs [15-07-2022 10:53:01]29534: WAF :: fetched 2 new logs [15-07-2022 10:55:02]2999: WAF :: fetched 6 new logs [15-07-2022 10:57:02]9118: WAF :: fetched 2 new logs [15-07-2022 10:58:02]12098: WAF :: fetched 1 new logs [15-07-2022 11:01:02]21031: WAF :: fetched 2 new logs [15-07-2022 11:04:02]29671: WAF :: fetched 1 new logs [15-07-2022 11:05:01]32386: WAF :: fetched 26 new logs [15-07-2022 11:06:01]3187: WAF :: fetched 2 new logs [15-07-2022 11:08:05]6196: Performed RBL check for 23.111.136.34. [15-07-2022 11:12:02]20742: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657894322 [15-07-2022 11:12:02]20742: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 11:12:04]20742: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 11:12:06]20742: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-1112/20220715-111202-YtF1svKPcRUrVsgzOaVudQAAAEs [15-07-2022 11:12:06]20742: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 11:12:06]20742: WAF :: fetched 2 new logs [15-07-2022 11:14:01]26301: WAF :: fetched 2 new logs [15-07-2022 11:16:01]31974: WAF :: fetched 1 new logs [15-07-2022 11:17:01]2487: WAF :: fetched 2 new logs [15-07-2022 11:18:02]5432: WAF :: fetched 1 new logs [15-07-2022 11:21:02]14081: WAF :: fetched 1 new logs [15-07-2022 11:24:02]22865: WAF :: fetched 1 new logs [15-07-2022 11:25:02]25683: WAF :: fetched 3 new logs [15-07-2022 11:26:01]29071: WAF :: fetched 5 new logs [15-07-2022 11:28:01]2583: WAF :: fetched 3 new logs [15-07-2022 11:29:02]5902: WAF :: fetched 1 new logs [15-07-2022 11:30:02]8829: WAF :: fetched 5 new logs [15-07-2022 11:31:01]11738: WAF :: fetched 1 new logs [15-07-2022 11:33:01]17152: WAF :: fetched 2 new logs [15-07-2022 11:34:01]20163: WAF :: fetched 5 new logs [15-07-2022 11:35:01]22937: WAF :: fetched 7 new logs [15-07-2022 11:36:01]25703: WAF :: fetched 1 new logs [15-07-2022 11:37:02]28535: WAF :: fetched 2 new logs [15-07-2022 11:38:01]31238: WAF :: fetched 2 new logs [15-07-2022 11:40:01]4625: WAF :: fetched 5 new logs [15-07-2022 11:41:01]7520: WAF :: fetched 2 new logs [15-07-2022 11:41:01]7520: Checking for user cron vulnerabilities [15-07-2022 11:42:02]10265: WAF :: fetched 2 new logs [15-07-2022 11:44:01]15969: Checking ditributed CMS bruteforce attacks [15-07-2022 11:44:03]15969: WAF :: fetched 1 new logs [15-07-2022 11:45:02]18897: WAF :: fetched 1 new logs [15-07-2022 11:46:01]21910: WAF :: fetched 1 new logs [15-07-2022 11:47:01]24659: WAF :: fetched 1 new logs [15-07-2022 11:49:03]30261: WAF :: fetched 2 new logs [15-07-2022 11:51:02]3760: WAF :: fetched 2 new logs [15-07-2022 11:57:01]21001: WAF :: fetched 3 new logs [15-07-2022 11:59:02]26531: WAF :: fetched 1 new logs [15-07-2022 12:00:01]29161: WAF :: fetched 1 new logs [15-07-2022 12:01:01]358: WAF :: fetched 2 new logs [15-07-2022 12:03:02]6929: WAF :: fetched 1 new logs [15-07-2022 12:05:01]12598: WAF :: fetched 1 new logs [15-07-2022 12:06:02]15654: WAF :: fetched 1 new logs [15-07-2022 12:08:02]21334: WAF :: fetched 2 new logs [15-07-2022 12:09:01]23955: WAF :: fetched 1 new logs [15-07-2022 12:10:01]26768: httpd.conf changed. Refreshing watchlist. [15-07-2022 12:10:01]26772: WAF :: fetched 2 new logs [15-07-2022 12:11:02]29808: WAF :: fetched 1 new logs [15-07-2022 12:12:01]32671: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657897921 [15-07-2022 12:12:01]32671: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 12:12:03]32671: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 12:12:04]32671: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-1212/20220715-121201-YtGDwaZ5FFNSOLBtxMYRlwAAAA0 [15-07-2022 12:12:04]32671: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 12:12:04]32671: WAF :: fetched 1 new logs [15-07-2022 12:15:01]8795: WAF :: fetched 8 new logs [15-07-2022 12:15:01]8815: httpd.conf changed. Refreshing watchlist. [15-07-2022 12:21:01]27100: WAF :: fetched 1 new logs [15-07-2022 12:25:02]5756: WAF :: fetched 4 new logs [15-07-2022 12:26:02]9462: WAF :: fetched 2 new logs [15-07-2022 12:27:02]12869: WAF :: fetched 3 new logs [15-07-2022 12:28:01]15615: WAF :: fetched 1 new logs [15-07-2022 12:29:01]18503: WAF :: fetched 1 new logs [15-07-2022 12:33:02]29958: WAF :: fetched 3 new logs [15-07-2022 12:34:01]367: WAF :: fetched 2 new logs [15-07-2022 12:35:02]3176: WAF :: fetched 1 new logs [15-07-2022 12:36:02]6029: WAF :: fetched 1 new logs [15-07-2022 12:37:02]8853: WAF :: fetched 3 new logs [15-07-2022 12:40:01]17232: WAF :: fetched 4 new logs [15-07-2022 12:41:02]20214: Checking for user cron vulnerabilities [15-07-2022 12:44:02]28468: Checking ditributed CMS bruteforce attacks [15-07-2022 12:44:04]28468: WAF :: fetched 4 new logs [15-07-2022 12:45:01]: Checking for software updates [15-07-2022 12:46:01]1660: WAF :: fetched 1 new logs [15-07-2022 12:47:02]4472: WAF :: fetched 1 new logs [15-07-2022 12:48:01]7204: WAF :: fetched 4 new logs [15-07-2022 12:49:01]9898: WAF :: fetched 2 new logs [15-07-2022 12:50:02]12583: WAF :: fetched 2 new logs [15-07-2022 12:51:01]15448: WAF :: fetched 4 new logs [15-07-2022 12:53:01]21072: WAF :: fetched 31 new logs [15-07-2022 12:54:01]23770: WAF :: fetched 45 new logs [15-07-2022 12:55:02]26630: WAF :: fetched 45 new logs [15-07-2022 12:56:01]29483: WAF :: fetched 43 new logs [15-07-2022 12:57:02]32243: WAF :: fetched 30 new logs [15-07-2022 12:58:01]2662: WAF :: fetched 50 new logs [15-07-2022 12:59:01]5506: WAF :: fetched 52 new logs [15-07-2022 13:00:02]7985: WAF :: fetched 45 new logs [15-07-2022 13:01:01]11539: WAF :: fetched 57 new logs [15-07-2022 13:02:02]14639: WAF :: fetched 51 new logs [15-07-2022 13:03:02]17323: WAF :: fetched 79 new logs [15-07-2022 13:04:01]20132: WAF :: fetched 33 new logs [15-07-2022 13:05:02]22991: WAF :: fetched 28 new logs [15-07-2022 13:06:01]25982: WAF :: fetched 34 new logs [15-07-2022 13:07:01]28814: WAF :: fetched 46 new logs [15-07-2022 13:08:01]31660: WAF :: fetched 2 new logs [15-07-2022 13:09:02]2114: WAF :: fetched 2 new logs [15-07-2022 13:10:02]4868: WAF :: fetched 1 new logs [15-07-2022 13:12:02]10613: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657901522 [15-07-2022 13:12:02]10613: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 13:12:04]10613: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 13:12:05]10613: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-1312/20220715-131202-YtGR0q-PuOxj7Ppp9wE7iAAAAB4 [15-07-2022 13:12:05]10613: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 13:12:05]10613: WAF :: fetched 1 new logs [15-07-2022 13:13:01]13309: WAF :: fetched 3 new logs [15-07-2022 13:14:02]16050: WAF :: fetched 2 new logs [15-07-2022 13:15:02]18919: WAF :: fetched 2 new logs [15-07-2022 13:16:01]21973: WAF :: fetched 1 new logs [15-07-2022 13:19:02]30664: WAF :: fetched 1 new logs [15-07-2022 13:23:02]9956: WAF :: fetched 2 new logs [15-07-2022 13:28:02]25157: WAF :: fetched 2 new logs [15-07-2022 13:29:01]27840: WAF :: fetched 2 new logs [15-07-2022 13:32:01]4028: WAF :: fetched 4 new logs [15-07-2022 13:33:01]6751: WAF :: fetched 2 new logs [15-07-2022 13:34:02]9575: WAF :: fetched 2 new logs [15-07-2022 13:36:02]15277: WAF :: fetched 5 new logs [15-07-2022 13:37:01]18114: WAF :: fetched 3 new logs [15-07-2022 13:39:02]23543: WAF :: fetched 1 new logs [15-07-2022 13:40:01]26382: WAF :: fetched 1 new logs [15-07-2022 13:41:01]29310: Checking for user cron vulnerabilities [15-07-2022 13:42:02]32001: WAF :: fetched 2 new logs [15-07-2022 13:44:02]5202: Checking ditributed CMS bruteforce attacks [15-07-2022 13:45:01]: Checking for definition updates [15-07-2022 13:45:01]7950: WAF :: fetched 1 new logs [15-07-2022 13:46:01]10903: WAF :: fetched 1 new logs [15-07-2022 13:47:02]13723: WAF :: fetched 3 new logs [15-07-2022 13:48:01]16472: WAF :: fetched 2 new logs [15-07-2022 13:49:02]19393: WAF :: fetched 2 new logs [15-07-2022 13:53:01]30526: WAF :: fetched 1 new logs [15-07-2022 13:54:01]615: WAF :: fetched 2 new logs [15-07-2022 13:56:01]6158: WAF :: fetched 2 new logs [15-07-2022 14:01:01]19754: WAF :: fetched 2 new logs [15-07-2022 14:02:01]22427: WAF :: fetched 8 new logs [15-07-2022 14:03:02]25201: WAF :: fetched 3 new logs [15-07-2022 14:04:01]27945: WAF :: fetched 2 new logs [15-07-2022 14:06:01]1144: WAF :: fetched 2 new logs [15-07-2022 14:10:02]12055: WAF :: fetched 2 new logs [15-07-2022 14:11:01]14863: WAF :: fetched 3 new logs [15-07-2022 14:12:02]17531: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657905122 [15-07-2022 14:12:02]17531: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 14:12:04]17531: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 14:12:05]17531: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-1412/20220715-141202-YtGf4kyqtzgGQwwqYvKJAQAAAAM [15-07-2022 14:12:05]17531: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 14:12:06]17531: WAF :: fetched 2 new logs [15-07-2022 14:13:01]20480: WAF :: fetched 1 new logs [15-07-2022 14:14:01]23189: WAF :: fetched 3 new logs [15-07-2022 14:15:02]26084: WAF :: fetched 1 new logs [15-07-2022 14:16:01]29021: WAF :: fetched 9 new logs [15-07-2022 14:18:01]2261: WAF :: fetched 2 new logs [15-07-2022 14:19:01]5282: WAF :: fetched 1 new logs [15-07-2022 14:21:01]11479: WAF :: fetched 1 new logs [15-07-2022 14:23:02]17126: WAF :: fetched 4 new logs [15-07-2022 14:24:02]20126: WAF :: fetched 5 new logs [15-07-2022 14:25:01]22902: WAF :: fetched 2 new logs [15-07-2022 14:27:02]29647: WAF :: fetched 9 new logs [15-07-2022 14:30:01]5576: WAF :: fetched 1 new logs [15-07-2022 14:32:02]11312: WAF :: fetched 15 new logs [15-07-2022 14:33:01]14093: WAF :: fetched 4 new logs [15-07-2022 14:37:01]25832: WAF :: fetched 3 new logs [15-07-2022 14:41:02]4823: WAF :: fetched 2 new logs [15-07-2022 14:41:02]4823: Checking for user cron vulnerabilities [15-07-2022 14:44:01]13545: Checking ditributed CMS bruteforce attacks [15-07-2022 14:44:02]13545: WAF :: fetched 2 new logs [15-07-2022 14:47:02]22440: WAF :: fetched 1 new logs [15-07-2022 14:48:01]25342: WAF :: fetched 3 new logs [15-07-2022 14:53:01]7149: WAF :: fetched 2 new logs [15-07-2022 14:53:02]7150: Updated license status via CDN [15-07-2022 14:54:01]10014: WAF :: fetched 1 new logs [15-07-2022 14:55:02]12953: WAF :: fetched 1 new logs [15-07-2022 14:56:02]15993: WAF :: fetched 5 new logs [15-07-2022 14:57:01]18969: WAF :: fetched 3 new logs [15-07-2022 14:58:01]21780: WAF :: fetched 2 new logs [15-07-2022 14:59:02]24591: WAF :: fetched 4 new logs [15-07-2022 15:01:01]30735: Reseting cPGuard inotify settings [15-07-2022 15:12:02]30445: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657908722 [15-07-2022 15:12:02]30445: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 15:12:04]30445: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 15:12:05]30445: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-1512/20220715-151202-YtGt8vAbTnzoJXnOwtFHqQAAABw [15-07-2022 15:12:05]30445: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 15:12:05]30445: WAF :: fetched 4 new logs [15-07-2022 15:13:02]852: WAF :: fetched 1 new logs [15-07-2022 15:14:01]3771: httpd.conf changed. Refreshing watchlist. [15-07-2022 15:15:01]6854: WAF :: fetched 1 new logs [15-07-2022 15:16:01]9985: WAF :: fetched 1 new logs [15-07-2022 15:19:02]18662: WAF :: fetched 8 new logs [15-07-2022 15:19:02]18657: httpd.conf changed. Refreshing watchlist. [15-07-2022 15:23:02]30606: WAF :: fetched 1 new logs [15-07-2022 15:26:01]8024: WAF :: fetched 3 new logs [15-07-2022 15:29:02]16842: WAF :: fetched 1 new logs [15-07-2022 15:31:01]22742: WAF :: fetched 2 new logs [15-07-2022 15:35:02]2912: WAF :: fetched 1 new logs [15-07-2022 15:37:01]8619: WAF :: fetched 2 new logs [15-07-2022 15:38:02]11349: WAF :: fetched 6 new logs [15-07-2022 15:39:01]14202: httpd.conf changed. Refreshing watchlist. [15-07-2022 15:40:02]17270: httpd.conf changed. Refreshing watchlist. [15-07-2022 15:41:01]20284: WAF :: fetched 1 new logs [15-07-2022 15:41:01]20284: Checking for user cron vulnerabilities [15-07-2022 15:43:02]26117: WAF :: fetched 2 new logs [15-07-2022 15:43:02]26113: httpd.conf changed. Refreshing watchlist. [15-07-2022 15:44:01]29059: Checking ditributed CMS bruteforce attacks [15-07-2022 15:44:04]29059: WAF :: fetched 10 new logs [15-07-2022 15:45:01]32038: WAF :: fetched 1 new logs [15-07-2022 15:45:01]32040: httpd.conf changed. Refreshing watchlist. [15-07-2022 15:46:02]2716: httpd.conf changed. Refreshing watchlist. [15-07-2022 15:50:02]14360: WAF :: fetched 4 new logs [15-07-2022 15:51:01]17375: WAF :: fetched 1 new logs [15-07-2022 15:53:02]23141: WAF :: fetched 1 new logs [15-07-2022 15:58:01]4897: WAF :: fetched 3 new logs [15-07-2022 16:00:01]10341: WAF :: fetched 1 new logs [15-07-2022 16:05:02]25191: WAF :: fetched 1 new logs [15-07-2022 16:06:01]28240: WAF :: fetched 2 new logs [15-07-2022 16:12:01]13222: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657912321 [15-07-2022 16:12:02]13222: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 16:12:04]13222: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 16:12:05]13222: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-1612/20220715-161202-YtG8AqHZljEcWU0ZiAt_bwAAABs [15-07-2022 16:12:05]13222: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 16:14:02]19032: WAF :: fetched 1 new logs [15-07-2022 16:18:03]30713: WAF :: fetched 1 new logs [15-07-2022 16:19:01]1189: WAF :: fetched 14 new logs [15-07-2022 16:20:02]4099: WAF :: fetched 1 new logs [15-07-2022 16:21:02]6982: WAF :: fetched 3 new logs [15-07-2022 16:24:02]15992: WAF :: fetched 1 new logs [15-07-2022 16:37:01]22342: WAF :: fetched 7 new logs [15-07-2022 16:39:01]27848: WAF :: fetched 5 new logs [15-07-2022 16:40:02]30792: WAF :: fetched 1 new logs [15-07-2022 16:41:02]1181: Checking for user cron vulnerabilities [15-07-2022 16:44:01]9776: Checking ditributed CMS bruteforce attacks [15-07-2022 16:47:01]18402: WAF :: fetched 2 new logs [15-07-2022 16:48:05]21369: WAF :: fetched 8 new logs [15-07-2022 16:49:02]24167: WAF :: fetched 3 new logs [15-07-2022 16:50:01]27119: WAF :: fetched 5 new logs [15-07-2022 16:51:02]29901: WAF :: fetched 2 new logs [15-07-2022 16:52:01]32717: WAF :: fetched 4 new logs [15-07-2022 16:53:01]3136: WAF :: fetched 4 new logs [15-07-2022 16:54:02]5932: WAF :: fetched 1 new logs [15-07-2022 16:58:01]17239: WAF :: fetched 3 new logs [15-07-2022 17:01:02]26150: WAF :: fetched 4 new logs [15-07-2022 17:03:03]31926: WAF :: fetched 8 new logs [15-07-2022 17:09:01]16845: WAF :: fetched 1 new logs [15-07-2022 17:10:01]19706: WAF :: fetched 1 new logs [15-07-2022 17:12:01]25426: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657915921 [15-07-2022 17:12:01]25426: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 17:12:04]25426: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 17:12:07]25426: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-1712/20220715-171201-YtHKEYaY_ungP5CVMoXgkwAAAA0 [15-07-2022 17:12:07]25426: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 17:12:07]25426: WAF :: fetched 3 new logs [15-07-2022 17:13:02]28306: WAF :: fetched 1 new logs [15-07-2022 17:20:01]15916: WAF :: fetched 7 new logs [15-07-2022 17:21:02]19225: WAF :: fetched 1 new logs [15-07-2022 17:23:01]25508: WAF :: fetched 2 new logs [15-07-2022 17:24:02]29737: WAF :: fetched 2 new logs [15-07-2022 17:26:01]2915: WAF :: fetched 1 new logs [15-07-2022 17:27:02]5813: WAF :: fetched 1 new logs [15-07-2022 17:28:01]8584: WAF :: fetched 1 new logs [15-07-2022 17:29:01]11353: WAF :: fetched 2 new logs [15-07-2022 17:30:01]14199: WAF :: fetched 1 new logs [15-07-2022 17:37:02]1794: WAF :: fetched 1 new logs [15-07-2022 17:38:01]4655: WAF :: fetched 1 new logs [15-07-2022 17:41:01]13317: Checking for user cron vulnerabilities [15-07-2022 17:42:01]16214: WAF :: fetched 2 new logs [15-07-2022 17:43:02]19110: WAF :: fetched 2 new logs [15-07-2022 17:44:01]21773: Checking ditributed CMS bruteforce attacks [15-07-2022 17:46:02]27435: WAF :: fetched 3 new logs [15-07-2022 17:53:02]14588: WAF :: fetched 2 new logs [15-07-2022 17:59:02]31448: WAF :: fetched 1 new logs [15-07-2022 18:00:02]1648: WAF :: fetched 3 new logs [15-07-2022 18:02:02]7847: WAF :: fetched 2 new logs [15-07-2022 18:04:01]13428: WAF :: fetched 2 new logs [15-07-2022 18:06:02]19288: WAF :: fetched 1 new logs [15-07-2022 18:07:01]22202: WAF :: fetched 1 new logs [15-07-2022 18:08:02]24903: WAF :: fetched 2 new logs [15-07-2022 18:09:01]27641: WAF :: fetched 2 new logs [15-07-2022 18:10:01]30419: WAF :: fetched 1 new logs [15-07-2022 18:12:01]3752: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657919521 [15-07-2022 18:12:01]3752: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 18:12:03]3752: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 18:12:04]3752: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-1812/20220715-181201-YtHYIUbUeJ6PVDA9PR3r5gAAACE [15-07-2022 18:12:04]3752: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 18:12:04]3752: WAF :: fetched 1 new logs [15-07-2022 18:13:02]6607: WAF :: fetched 2 new logs [15-07-2022 18:15:01]12166: WAF :: fetched 1 new logs [15-07-2022 18:18:02]20979: WAF :: fetched 2 new logs [15-07-2022 18:19:01]23935: WAF :: fetched 1 new logs [15-07-2022 18:20:02]26705: WAF :: fetched 4 new logs [15-07-2022 18:21:01]29513: WAF :: fetched 1 new logs [15-07-2022 18:22:02]32468: WAF :: fetched 2 new logs [15-07-2022 18:23:01]2896: WAF :: fetched 2 new logs [15-07-2022 18:29:01]20824: WAF :: fetched 4 new logs [15-07-2022 18:31:02]27459: WAF :: fetched 7 new logs [15-07-2022 18:34:01]3477: WAF :: fetched 3 new logs [15-07-2022 18:36:02]8853: WAF :: fetched 2 new logs [15-07-2022 18:41:02]22999: Checking for user cron vulnerabilities [15-07-2022 18:44:02]31257: Checking ditributed CMS bruteforce attacks [15-07-2022 18:45:02]1496: WAF :: fetched 1 new logs [15-07-2022 18:47:01]7237: WAF :: fetched 1 new logs [15-07-2022 18:49:01]12774: WAF :: fetched 1 new logs [15-07-2022 18:51:01]18384: WAF :: fetched 2 new logs [15-07-2022 18:55:01]29415: WAF :: fetched 2 new logs [15-07-2022 18:56:01]32188: WAF :: fetched 1 new logs [15-07-2022 18:57:02]2628: WAF :: fetched 3 new logs [15-07-2022 19:07:01]30356: WAF :: fetched 6 new logs [15-07-2022 19:08:02]774: WAF :: fetched 1 new logs [15-07-2022 19:09:01]3594: WAF :: fetched 2 new logs [15-07-2022 19:11:02]9106: WAF :: fetched 3 new logs [15-07-2022 19:12:02]11994: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657923122 [15-07-2022 19:12:02]11994: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 19:12:04]11994: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 19:12:05]11994: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-1912/20220715-191202-YtHmMucAVvsods7H9o9BqwAAAAY [15-07-2022 19:12:05]11994: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 19:12:05]11994: WAF :: fetched 2 new logs [15-07-2022 19:14:02]17639: WAF :: fetched 1 new logs [15-07-2022 19:16:02]23378: WAF :: fetched 1 new logs [15-07-2022 19:18:02]28860: WAF :: fetched 1 new logs [15-07-2022 19:22:02]7762: WAF :: fetched 2 new logs [15-07-2022 19:25:01]16013: WAF :: fetched 1 new logs [15-07-2022 19:26:01]18915: WAF :: fetched 3 new logs [15-07-2022 19:27:02]22444: WAF :: fetched 3 new logs [15-07-2022 19:28:01]25290: WAF :: fetched 2 new logs [15-07-2022 19:29:02]28336: WAF :: fetched 3 new logs [15-07-2022 19:30:02]31312: WAF :: fetched 1 new logs [15-07-2022 19:31:01]1814: WAF :: fetched 1 new logs [15-07-2022 19:36:01]16370: WAF :: fetched 5 new logs [15-07-2022 19:37:02]19220: WAF :: fetched 1 new logs [15-07-2022 19:38:02]21843: WAF :: fetched 2 new logs [15-07-2022 19:40:02]27179: WAF :: fetched 3 new logs [15-07-2022 19:41:02]29819: Checking for user cron vulnerabilities [15-07-2022 19:43:01]2939: WAF :: fetched 5 new logs [15-07-2022 19:44:01]5660: Checking ditributed CMS bruteforce attacks [15-07-2022 19:45:01]: Checking for definition updates [15-07-2022 19:47:02]13970: WAF :: fetched 1 new logs [15-07-2022 19:52:04]27922: WAF :: fetched 1 new logs [15-07-2022 19:57:01]9321: WAF :: fetched 1 new logs [15-07-2022 19:58:02]12092: WAF :: fetched 2 new logs [15-07-2022 20:01:01]20543: WAF :: fetched 1 new logs [15-07-2022 20:02:02]23322: WAF :: fetched 27 new logs [15-07-2022 20:03:01]26068: WAF :: fetched 10 new logs [15-07-2022 20:04:02]28790: WAF :: fetched 8 new logs [15-07-2022 20:05:01]31575: WAF :: fetched 5 new logs [15-07-2022 20:06:01]1940: WAF :: fetched 8 new logs [15-07-2022 20:07:02]4798: WAF :: fetched 7 new logs [15-07-2022 20:08:01]7475: WAF :: fetched 6 new logs [15-07-2022 20:09:02]10241: WAF :: fetched 23 new logs [15-07-2022 20:10:01]13269: WAF :: fetched 4 new logs [15-07-2022 20:11:01]16035: WAF :: fetched 4 new logs [15-07-2022 20:12:02]18962: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657926722 [15-07-2022 20:12:02]18962: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 20:12:04]18962: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 20:12:04]18962: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-2012/20220715-201202-YtH0QnV9EbMgSBm6ozY_RAAAAAA [15-07-2022 20:12:04]18962: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 20:12:05]18962: WAF :: fetched 7 new logs [15-07-2022 20:13:01]21571: WAF :: fetched 2 new logs [15-07-2022 20:17:04]771: WAF :: fetched 1 new logs [15-07-2022 20:18:02]3716: WAF :: fetched 3 new logs [15-07-2022 20:22:01]15291: WAF :: fetched 1 new logs [15-07-2022 20:25:02]24971: WAF :: fetched 1 new logs [15-07-2022 20:26:01]27824: WAF :: fetched 2 new logs [15-07-2022 20:28:01]1145: WAF :: fetched 8 new logs [15-07-2022 20:29:02]3994: WAF :: fetched 4 new logs [15-07-2022 20:30:01]6879: WAF :: fetched 2 new logs [15-07-2022 20:31:01]9592: WAF :: fetched 4 new logs [15-07-2022 20:32:02]12532: WAF :: fetched 4 new logs [15-07-2022 20:33:01]15379: WAF :: fetched 4 new logs [15-07-2022 20:34:01]18175: WAF :: fetched 4 new logs [15-07-2022 20:35:01]20907: WAF :: fetched 5 new logs [15-07-2022 20:36:02]23613: WAF :: fetched 3 new logs [15-07-2022 20:37:01]26359: WAF :: fetched 25 new logs [15-07-2022 20:38:01]29265: WAF :: fetched 8 new logs [15-07-2022 20:39:02]31982: WAF :: fetched 4 new logs [15-07-2022 20:40:01]2374: WAF :: fetched 7 new logs [15-07-2022 20:41:02]5153: WAF :: fetched 2 new logs [15-07-2022 20:41:02]5153: Checking for user cron vulnerabilities [15-07-2022 20:42:01]7803: WAF :: fetched 6 new logs [15-07-2022 20:43:01]10509: WAF :: fetched 1 new logs [15-07-2022 20:44:01]13228: Checking ditributed CMS bruteforce attacks [15-07-2022 20:44:05]13228: WAF :: fetched 3 new logs [15-07-2022 20:45:01]15866: WAF :: fetched 2 new logs [15-07-2022 20:46:02]18610: WAF :: fetched 3 new logs [15-07-2022 20:50:01]29124: WAF :: fetched 3 new logs [15-07-2022 20:52:02]2049: WAF :: fetched 1 new logs [15-07-2022 20:53:01]4687: WAF :: fetched 4 new logs [15-07-2022 21:08:01]12170: WAF :: fetched 1 new logs [15-07-2022 21:11:01]20107: WAF :: fetched 2 new logs [15-07-2022 21:12:02]22755: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657930322 [15-07-2022 21:12:02]22755: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 21:12:04]22755: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 21:12:05]22755: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-2112/20220715-211202-YtICUt48hC4f278jL70EagAAAB8 [15-07-2022 21:12:05]22755: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [15-07-2022 21:12:05]22755: WAF :: fetched 1 new logs [15-07-2022 21:13:01]25488: WAF :: fetched 1 new logs [15-07-2022 21:15:02]30665: WAF :: fetched 2 new logs [15-07-2022 21:16:01]965: WAF :: fetched 1 new logs [15-07-2022 21:18:02]6438: WAF :: fetched 3 new logs [15-07-2022 21:20:02]11931: WAF :: fetched 2 new logs [15-07-2022 21:30:02]6559: WAF :: fetched 14 new logs [15-07-2022 21:31:01]9299: WAF :: fetched 2 new logs [15-07-2022 21:32:02]11964: WAF :: fetched 3 new logs [15-07-2022 21:33:02]14602: WAF :: fetched 4 new logs [15-07-2022 21:34:01]17216: WAF :: fetched 2 new logs [15-07-2022 21:38:01]28047: WAF :: fetched 1 new logs [15-07-2022 21:39:02]30701: WAF :: fetched 1 new logs [15-07-2022 21:41:01]3785: Checking for user cron vulnerabilities [15-07-2022 21:42:02]6418: WAF :: fetched 1 new logs [15-07-2022 21:44:02]11802: Checking ditributed CMS bruteforce attacks [15-07-2022 21:44:05]11802: WAF :: fetched 7 new logs [15-07-2022 21:45:02]14371: WAF :: fetched 4 new logs [15-07-2022 21:46:01]17057: WAF :: fetched 3 new logs [15-07-2022 21:47:02]19783: WAF :: fetched 1 new logs [15-07-2022 21:48:01]22442: WAF :: fetched 5 new logs [15-07-2022 21:52:02]570: WAF :: fetched 4 new logs [15-07-2022 21:53:01]3355: WAF :: fetched 4 new logs [15-07-2022 21:54:02]6005: WAF :: fetched 2 new logs [15-07-2022 21:56:01]11238: WAF :: fetched 2 new logs [15-07-2022 22:01:02]24641: WAF :: fetched 1 new logs [15-07-2022 22:02:02]27270: WAF :: fetched 4 new logs [15-07-2022 22:03:01]29928: WAF :: fetched 1 new logs [15-07-2022 22:04:02]32550: WAF :: fetched 1 new logs [15-07-2022 22:05:02]2738: WAF :: fetched 33 new logs [15-07-2022 22:06:02]5386: WAF :: fetched 2 new logs [15-07-2022 22:07:09]7959: Performing Domain reputation checks [15-07-2022 22:10:02]15866: WAF :: fetched 1 new logs [15-07-2022 22:11:01]18580: WAF :: fetched 1 new logs [15-07-2022 22:12:02]21198: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657933922 [15-07-2022 22:12:02]21198: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 22:12:04]21198: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 22:12:04]21198: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-2212/20220715-221202-YtIQYgoaDmK4Jq_mnbxOhQAAACE [15-07-2022 22:12:04]21198: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 22:12:04]21198: WAF :: fetched 89 new logs [15-07-2022 22:14:01]26577: WAF :: fetched 1 new logs [15-07-2022 22:15:02]29181: WAF :: fetched 9 new logs [15-07-2022 22:18:01]4776: WAF :: fetched 2 new logs [15-07-2022 22:20:01]10198: WAF :: fetched 1 new logs [15-07-2022 22:22:02]15455: WAF :: fetched 2 new logs [15-07-2022 22:23:01]18179: WAF :: fetched 2 new logs [15-07-2022 22:29:02]1514: WAF :: fetched 4 new logs [15-07-2022 22:30:02]4074: WAF :: fetched 7 new logs [15-07-2022 22:33:01]12118: WAF :: fetched 1 new logs [15-07-2022 22:41:02]963: Checking for user cron vulnerabilities [15-07-2022 22:44:01]8829: Checking ditributed CMS bruteforce attacks [15-07-2022 22:46:02]14068: WAF :: fetched 1 new logs [15-07-2022 22:47:02]16641: WAF :: fetched 15 new logs [15-07-2022 22:50:01]24581: WAF :: fetched 2 new logs [15-07-2022 22:53:01]32522: WAF :: fetched 3 new logs [15-07-2022 22:54:02]2720: WAF :: fetched 1 new logs [15-07-2022 22:55:02]5363: WAF :: fetched 1 new logs [15-07-2022 22:57:01]10353: WAF :: fetched 2 new logs [15-07-2022 23:01:02]21284: WAF :: fetched 2 new logs [15-07-2022 23:03:02]26755: WAF :: fetched 16 new logs [15-07-2022 23:05:02]31936: WAF :: fetched 1 new logs [15-07-2022 23:08:16]4883: Performed RBL check for 23.111.136.34. [15-07-2022 23:10:02]12562: WAF :: fetched 5 new logs [15-07-2022 23:11:02]15246: WAF :: fetched 2 new logs [15-07-2022 23:12:02]17900: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657937522 [15-07-2022 23:12:02]17900: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [15-07-2022 23:12:04]17900: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [15-07-2022 23:12:06]17900: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220715/20220715-2312/20220715-231202-YtIecunasqlT_ODlLOUD1wAAABw [15-07-2022 23:12:06]17900: WAF :: No suitable log file found. Using SQLite.. [15-07-2022 23:12:06]17900: WAF :: fetched 2 new logs [15-07-2022 23:17:01]31271: WAF :: fetched 1 new logs [15-07-2022 23:18:02]1559: WAF :: fetched 1 new logs [15-07-2022 23:20:02]6740: WAF :: fetched 1 new logs [15-07-2022 23:21:01]9392: WAF :: fetched 1 new logs [15-07-2022 23:23:01]14808: WAF :: fetched 1 new logs [15-07-2022 23:25:02]20132: WAF :: fetched 2 new logs [15-07-2022 23:26:02]22737: WAF :: fetched 1 new logs [15-07-2022 23:28:01]27959: WAF :: fetched 2 new logs [15-07-2022 23:29:01]30571: WAF :: fetched 1 new logs [15-07-2022 23:30:01]810: WAF :: fetched 1 new logs [15-07-2022 23:35:02]14057: WAF :: fetched 1 new logs [15-07-2022 23:41:02]30004: Checking for user cron vulnerabilities [15-07-2022 23:42:01]32545: WAF :: fetched 1 new logs [15-07-2022 23:43:01]2936: WAF :: fetched 1 new logs [15-07-2022 23:44:01]5530: Checking ditributed CMS bruteforce attacks [15-07-2022 23:44:01]5530: WAF :: fetched 1 new logs [15-07-2022 23:45:01]8162: WAF :: fetched 1 new logs [15-07-2022 23:46:01]10798: WAF :: fetched 2 new logs [15-07-2022 23:47:02]13449: WAF :: fetched 3 new logs [15-07-2022 23:48:02]16115: WAF :: fetched 34 new logs [15-07-2022 23:50:02]21385: WAF :: fetched 22 new logs [15-07-2022 23:51:02]24062: WAF :: fetched 25 new logs [15-07-2022 23:52:01]26621: WAF :: fetched 3 new logs [15-07-2022 23:53:01]29376: WAF :: fetched 6 new logs [15-07-2022 23:54:02]32012: WAF :: fetched 2 new logs [15-07-2022 23:55:04]2456: WAF :: fetched 49 new logs [15-07-2022 23:56:01]5822: WAF :: fetched 35 new logs [15-07-2022 23:56:01]5829: httpd.conf changed. Refreshing watchlist. [15-07-2022 23:58:01]11194: WAF :: fetched 1 new logs [15-07-2022 23:59:01]13787: WAF :: fetched 2 new logs [16-07-2022 00:01:01]19440: httpd.conf changed. Refreshing watchlist. [16-07-2022 00:01:04]19458: Sending daily report for July 16, 2022 [16-07-2022 00:02:01]22136: WAF :: fetched 1 new logs [16-07-2022 00:03:01]24838: WAF :: fetched 3 new logs [16-07-2022 00:05:02]30047: Deleted 0 entries older than 6 MONTH from scanner_logs [16-07-2022 00:05:02]30047: Deleted 0 files from Quarantine [16-07-2022 00:11:02]13447: WAF :: fetched 2 new logs [16-07-2022 00:12:02]16001: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657941122 [16-07-2022 00:12:02]16001: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 00:12:04]16001: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 00:12:06]16001: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-0012/20220716-001202-YtIsghV-QP5FLgVnJRGN3QAAAAo [16-07-2022 00:12:06]16001: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [16-07-2022 00:12:06]16001: WAF :: fetched 1 new logs [16-07-2022 00:13:01]18798: WAF :: fetched 2 new logs [16-07-2022 00:14:02]21393: WAF :: fetched 1 new logs [16-07-2022 00:15:02]23985: WAF :: fetched 2 new logs [16-07-2022 00:16:01]26749: WAF :: fetched 15 new logs [16-07-2022 00:23:01]12989: WAF :: fetched 3 new logs [16-07-2022 00:24:02]15743: WAF :: fetched 2 new logs [16-07-2022 00:26:02]21140: WAF :: fetched 2 new logs [16-07-2022 00:29:02]28960: WAF :: fetched 2 new logs [16-07-2022 00:30:01]31551: WAF :: fetched 6 new logs [16-07-2022 00:31:02]1805: WAF :: fetched 2 new logs [16-07-2022 00:38:01]20384: WAF :: fetched 18 new logs [16-07-2022 00:41:02]28252: Checking for user cron vulnerabilities [16-07-2022 00:43:01]1122: WAF :: fetched 2 new logs [16-07-2022 00:44:02]3779: Checking ditributed CMS bruteforce attacks [16-07-2022 00:45:01]: Checking for software updates [16-07-2022 00:45:02]6367: WAF :: fetched 1 new logs [16-07-2022 00:50:02]19591: WAF :: fetched 1 new logs [16-07-2022 00:52:02]24848: WAF :: fetched 5 new logs [16-07-2022 00:53:01]27537: WAF :: fetched 1 new logs [16-07-2022 00:54:02]30168: WAF :: fetched 1 new logs [16-07-2022 00:59:02]11325: WAF :: fetched 42 new logs [16-07-2022 01:00:01]13714: WAF :: fetched 2 new logs [16-07-2022 01:01:01]17684: WAF :: fetched 2 new logs [16-07-2022 01:06:02]32081: WAF :: fetched 4 new logs [16-07-2022 01:07:01]2572: WAF :: fetched 5 new logs [16-07-2022 01:10:03]10757: WAF :: fetched 3 new logs [16-07-2022 01:11:02]13373: WAF :: fetched 3 new logs [16-07-2022 01:12:01]16040: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657944721 [16-07-2022 01:12:01]16040: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 01:12:03]16040: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 01:12:04]16040: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-0112/20220716-011201-YtI6keTJVAPPnJ2WXz0lvAAAAAI [16-07-2022 01:12:04]16040: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 01:12:04]16040: WAF :: fetched 96 new logs [16-07-2022 01:13:01]18971: WAF :: fetched 6 new logs [16-07-2022 01:14:02]21667: WAF :: fetched 3 new logs [16-07-2022 01:15:01]24250: WAF :: fetched 1 new logs [16-07-2022 01:16:01]27097: WAF :: fetched 1 new logs [16-07-2022 01:17:02]29832: WAF :: fetched 3 new logs [16-07-2022 01:20:02]5703: WAF :: fetched 1 new logs [16-07-2022 01:25:02]19917: WAF :: fetched 1 new logs [16-07-2022 01:26:02]22575: WAF :: fetched 1 new logs [16-07-2022 01:28:01]28061: WAF :: fetched 3 new logs [16-07-2022 01:36:01]17998: WAF :: fetched 30 new logs [16-07-2022 01:37:02]21000: WAF :: fetched 1 new logs [16-07-2022 01:38:01]23909: WAF :: fetched 1 new logs [16-07-2022 01:39:01]26783: WAF :: fetched 2 new logs [16-07-2022 01:41:01]32161: Checking for user cron vulnerabilities [16-07-2022 01:44:01]8162: Checking ditributed CMS bruteforce attacks [16-07-2022 01:45:02]: Checking for definition updates [16-07-2022 01:45:02]11012: WAF :: fetched 2 new logs [16-07-2022 01:52:02]30441: WAF :: fetched 1 new logs [16-07-2022 01:55:02]6081: WAF :: fetched 3 new logs [16-07-2022 01:58:01]14341: WAF :: fetched 2 new logs [16-07-2022 02:01:01]22784: WAF :: fetched 1 new logs [16-07-2022 02:04:02]30675: WAF :: fetched 2 new logs [16-07-2022 02:05:01]848: WAF :: fetched 3 new logs [16-07-2022 02:08:01]8616: WAF :: fetched 2 new logs [16-07-2022 02:09:02]11325: WAF :: fetched 1 new logs [16-07-2022 02:12:02]19627: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657948322 [16-07-2022 02:12:02]19627: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 02:12:04]19627: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 02:12:06]19627: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-0212/20220716-021202-YtJIovO36LGaQULSzJx0YwAAABU [16-07-2022 02:12:06]19627: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 02:12:06]19627: WAF :: fetched 1 new logs [16-07-2022 02:13:01]22181: WAF :: fetched 1 new logs [16-07-2022 02:16:02]30131: WAF :: fetched 2 new logs [16-07-2022 02:19:02]5567: WAF :: fetched 5 new logs [16-07-2022 02:20:01]8140: WAF :: fetched 12 new logs [16-07-2022 02:21:02]10789: WAF :: fetched 8 new logs [16-07-2022 02:24:01]18690: WAF :: fetched 2 new logs [16-07-2022 02:25:01]21255: WAF :: fetched 1 new logs [16-07-2022 02:28:01]29039: WAF :: fetched 2 new logs [16-07-2022 02:30:01]1820: WAF :: fetched 2 new logs [16-07-2022 02:31:02]4532: WAF :: fetched 3 new logs [16-07-2022 02:32:01]7120: WAF :: fetched 4 new logs [16-07-2022 02:39:02]25547: WAF :: fetched 1 new logs [16-07-2022 02:40:02]28178: WAF :: fetched 1 new logs [16-07-2022 02:41:01]30785: Checking for user cron vulnerabilities [16-07-2022 02:43:02]3544: WAF :: fetched 1 new logs [16-07-2022 02:44:01]6167: Checking ditributed CMS bruteforce attacks [16-07-2022 02:45:01]8746: WAF :: fetched 2 new logs [16-07-2022 02:48:02]16537: WAF :: fetched 2 new logs [16-07-2022 02:49:01]19281: WAF :: fetched 1 new logs [16-07-2022 02:50:02]21888: WAF :: fetched 1 new logs [16-07-2022 02:53:02]29638: Updated license status via CDN [16-07-2022 02:58:02]10241: WAF :: fetched 3 new logs [16-07-2022 03:00:24]15177: Found and updated 32 CMS installations [16-07-2022 03:01:02]15177: Wordpress installation #9 oabilheus.org.br has errors [16-07-2022 03:01:04]18398: WAF :: fetched 2 new logs [16-07-2022 03:03:14]15177: Wordpress installation #33 bibokinha.com.br has errors [16-07-2022 03:03:50]15177: Wordpress installation #39 imoblux.com.br has errors [16-07-2022 03:04:06]15177: Sending CMS version vulnerability report emails to cpanel users [16-07-2022 03:04:10]15177: Checking wordpress installations for suspicious directories [16-07-2022 03:04:30]23960: Sending CMS version vulnerability report emails to cpanel users [16-07-2022 03:04:34]23960: Checking wordpress installations for suspicious directories [16-07-2022 03:07:02]3938: WAF :: fetched 2 new logs [16-07-2022 03:11:01]14790: WAF :: fetched 3 new logs [16-07-2022 03:12:02]17374: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657951922 [16-07-2022 03:12:02]17374: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 03:12:04]17374: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 03:12:06]17374: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-0312/20220716-031202-YtJWsjatUefuqvIklorRNwAAAAA [16-07-2022 03:12:06]17374: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 03:12:06]17374: WAF :: fetched 11 new logs [16-07-2022 03:13:01]20040: WAF :: fetched 2 new logs [16-07-2022 03:20:01]7833: WAF :: fetched 2 new logs [16-07-2022 03:25:01]21269: WAF :: fetched 1 new logs [16-07-2022 03:30:01]2242: WAF :: fetched 1 new logs [16-07-2022 03:35:02]16209: WAF :: fetched 1 new logs [16-07-2022 03:38:01]24285: WAF :: fetched 2 new logs [16-07-2022 03:41:02]32165: WAF :: fetched 1 new logs [16-07-2022 03:41:02]32165: Checking for user cron vulnerabilities [16-07-2022 03:44:01]7553: Checking ditributed CMS bruteforce attacks [16-07-2022 03:44:02]7553: WAF :: fetched 1 new logs [16-07-2022 03:48:01]18507: WAF :: fetched 1 new logs [16-07-2022 03:49:02]21226: WAF :: fetched 2 new logs [16-07-2022 03:52:02]28967: WAF :: fetched 1 new logs [16-07-2022 03:53:01]31546: WAF :: fetched 1 new logs [16-07-2022 03:54:02]1850: WAF :: fetched 2 new logs [16-07-2022 03:56:01]7267: WAF :: fetched 2 new logs [16-07-2022 03:58:02]12617: WAF :: fetched 30 new logs [16-07-2022 03:59:01]15228: WAF :: fetched 55 new logs [16-07-2022 04:00:02]17545: WAF :: fetched 35 new logs [16-07-2022 04:01:02]20795: WAF :: fetched 11 new logs [16-07-2022 04:02:01]23416: WAF :: fetched 2 new logs [16-07-2022 04:03:01]26011: WAF :: fetched 1 new logs [16-07-2022 04:07:01]3966: WAF :: fetched 1 new logs [16-07-2022 04:08:01]6535: WAF :: fetched 2 new logs [16-07-2022 04:09:02]9250: WAF :: fetched 9 new logs [16-07-2022 04:10:03]11839: WAF :: fetched 9 new logs [16-07-2022 04:11:02]14461: WAF :: fetched 2 new logs [16-07-2022 04:12:02]17059: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657955522 [16-07-2022 04:12:02]17059: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 04:12:04]17059: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 04:12:05]17059: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-0412/20220716-041202-YtJkwtJYBDW-qplgSp0v2gAAAAM [16-07-2022 04:12:05]17059: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 04:12:06]17059: WAF :: fetched 1 new logs [16-07-2022 04:14:02]22903: WAF :: fetched 2 new logs [16-07-2022 04:15:01]25850: WAF :: fetched 2 new logs [16-07-2022 04:16:02]28812: WAF :: fetched 3 new logs [16-07-2022 04:17:02]31834: WAF :: fetched 1 new logs [16-07-2022 04:19:02]5136: WAF :: fetched 1 new logs [16-07-2022 04:21:01]10576: WAF :: fetched 1 new logs [16-07-2022 04:26:03]24420: WAF :: fetched 1 new logs [16-07-2022 04:30:02]2378: WAF :: fetched 2 new logs [16-07-2022 04:31:01]5027: WAF :: fetched 4 new logs [16-07-2022 04:32:02]7640: WAF :: fetched 5 new logs [16-07-2022 04:33:03]10314: WAF :: fetched 2 new logs [16-07-2022 04:34:01]12980: WAF :: fetched 1 new logs [16-07-2022 04:41:01]31248: WAF :: fetched 3 new logs [16-07-2022 04:41:01]31248: Checking for user cron vulnerabilities [16-07-2022 04:44:01]6604: Checking ditributed CMS bruteforce attacks [16-07-2022 04:48:01]16937: WAF :: fetched 1 new logs [16-07-2022 04:49:01]19694: WAF :: fetched 1 new logs [16-07-2022 04:52:02]27455: WAF :: fetched 1 new logs [16-07-2022 04:53:01]30041: WAF :: fetched 1 new logs [16-07-2022 04:56:01]5597: WAF :: fetched 2 new logs [16-07-2022 04:57:01]8203: WAF :: fetched 1 new logs [16-07-2022 05:01:41]19012: Starting daily scan on files updated in last 24 hrs [16-07-2022 05:03:01]24388: WAF :: fetched 1 new logs [16-07-2022 05:07:02]2736: WAF :: fetched 1 new logs [16-07-2022 05:10:02]10565: WAF :: fetched 2 new logs [16-07-2022 05:11:01]13138: WAF :: fetched 1 new logs [16-07-2022 05:12:02]15710: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657959122 [16-07-2022 05:12:02]15710: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 05:12:04]15710: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 05:12:06]15710: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-0512/20220716-051202-YtJy0oJJLhnChkiY28redQAAAAQ [16-07-2022 05:12:06]15710: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [16-07-2022 05:12:06]15710: WAF :: fetched 1 new logs [16-07-2022 05:13:02]18327: WAF :: fetched 1 new logs [16-07-2022 05:16:01]26163: WAF :: fetched 12 new logs [16-07-2022 05:17:02]28752: WAF :: fetched 4 new logs [16-07-2022 05:19:01]1637: WAF :: fetched 1 new logs [16-07-2022 05:22:01]9624: WAF :: fetched 1 new logs [16-07-2022 05:23:02]12370: WAF :: fetched 3 new logs [16-07-2022 05:24:01]15271: WAF :: fetched 1 new logs [16-07-2022 05:28:01]26067: WAF :: fetched 1 new logs [16-07-2022 05:29:03]28814: WAF :: fetched 19 new logs [16-07-2022 05:30:01]31430: WAF :: fetched 20 new logs [16-07-2022 05:34:02]9596: WAF :: fetched 2 new logs [16-07-2022 05:38:01]20161: WAF :: fetched 11 new logs [16-07-2022 05:39:03]22923: WAF :: fetched 1 new logs [16-07-2022 05:40:02]25621: WAF :: fetched 3 new logs [16-07-2022 05:41:01]28324: Checking for user cron vulnerabilities [16-07-2022 05:42:02]30943: WAF :: fetched 2 new logs [16-07-2022 05:44:02]3736: Checking ditributed CMS bruteforce attacks [16-07-2022 05:49:02]16811: WAF :: fetched 5 new logs [16-07-2022 05:51:03]22233: WAF :: fetched 2 new logs [16-07-2022 05:56:02]2851: WAF :: fetched 2 new logs [16-07-2022 06:04:02]23859: WAF :: fetched 1 new logs [16-07-2022 06:05:02]26495: WAF :: fetched 2 new logs [16-07-2022 06:07:02]31748: WAF :: fetched 1 new logs [16-07-2022 06:08:02]1959: WAF :: fetched 1 new logs [16-07-2022 06:09:02]4644: WAF :: fetched 3 new logs [16-07-2022 06:10:02]7318: WAF :: fetched 1 new logs [16-07-2022 06:12:02]12819: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657962722 [16-07-2022 06:12:02]12819: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 06:12:04]12819: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 06:12:04]12819: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-0612/20220716-061202-YtKA4mvCYzTrY0XhBo8VzwAAAAU [16-07-2022 06:12:04]12819: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [16-07-2022 06:12:05]12819: WAF :: fetched 1 new logs [16-07-2022 06:13:02]15358: WAF :: fetched 1 new logs [16-07-2022 06:14:02]18040: WAF :: fetched 2 new logs [16-07-2022 06:15:02]20676: WAF :: fetched 2 new logs [16-07-2022 06:16:04]23365: WAF :: fetched 3 new logs [16-07-2022 06:17:01]25553: WAF :: fetched 1 new logs [16-07-2022 06:20:02]1425: WAF :: fetched 1 new logs [16-07-2022 06:29:01]25301: WAF :: fetched 1 new logs [16-07-2022 06:30:02]28231: WAF :: fetched 1 new logs [16-07-2022 06:36:02]11942: WAF :: fetched 1 new logs [16-07-2022 06:37:02]14495: WAF :: fetched 2 new logs [16-07-2022 06:39:02]19772: WAF :: fetched 3 new logs [16-07-2022 06:40:01]22388: WAF :: fetched 3 new logs [16-07-2022 06:41:02]25084: Checking for user cron vulnerabilities [16-07-2022 06:42:02]27615: WAF :: fetched 1 new logs [16-07-2022 06:44:01]32765: Checking ditributed CMS bruteforce attacks [16-07-2022 06:44:04]32765: WAF :: fetched 10 new logs [16-07-2022 06:45:02]3092: WAF :: fetched 1 new logs [16-07-2022 06:51:04]18908: WAF :: fetched 1 new logs [16-07-2022 06:54:02]26612: WAF :: fetched 1 new logs [16-07-2022 06:56:01]31869: WAF :: fetched 1 new logs [16-07-2022 06:57:02]2060: WAF :: fetched 1 new logs [16-07-2022 07:01:03]12654: WAF :: fetched 1 new logs [16-07-2022 07:02:02]15309: WAF :: fetched 2 new logs [16-07-2022 07:04:01]20561: WAF :: fetched 3 new logs [16-07-2022 07:06:04]25869: WAF :: fetched 1 new logs [16-07-2022 07:07:02]28459: WAF :: fetched 1 new logs [16-07-2022 07:08:01]30989: WAF :: fetched 1 new logs [16-07-2022 07:12:02]9026: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657966322 [16-07-2022 07:12:02]9026: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 07:12:04]9026: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 07:12:04]9026: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-0712/20220716-071202-YtKO8rEB_x1D-AVQ-8e_lgAAAAs [16-07-2022 07:12:04]9026: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 07:12:05]9026: WAF :: fetched 108 new logs [16-07-2022 07:19:02]27934: WAF :: fetched 2 new logs [16-07-2022 07:23:02]6163: WAF :: fetched 2 new logs [16-07-2022 07:24:01]8738: WAF :: fetched 2 new logs [16-07-2022 07:28:04]19252: WAF :: fetched 1 new logs [16-07-2022 07:37:01]11296: WAF :: fetched 2 new logs [16-07-2022 07:38:02]14184: WAF :: fetched 2 new logs [16-07-2022 07:41:02]22321: Checking for user cron vulnerabilities [16-07-2022 07:44:01]30180: Checking ditributed CMS bruteforce attacks [16-07-2022 07:44:03]30180: WAF :: fetched 4 new logs [16-07-2022 07:45:01]: Checking for definition updates [16-07-2022 07:52:02]19254: WAF :: fetched 1 new logs [16-07-2022 07:55:02]27181: WAF :: fetched 2 new logs [16-07-2022 07:57:01]32439: WAF :: fetched 1 new logs [16-07-2022 08:00:02]7685: WAF :: fetched 1 new logs [16-07-2022 08:01:02]10793: WAF :: fetched 8 new logs [16-07-2022 08:02:01]13422: WAF :: fetched 1 new logs [16-07-2022 08:05:01]21464: WAF :: fetched 5 new logs [16-07-2022 08:07:01]26750: WAF :: fetched 1 new logs [16-07-2022 08:12:06]7541: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657969926 [16-07-2022 08:12:06]7541: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 08:12:08]7541: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 08:12:10]7541: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-0812/20220716-081206-YtKdBhGKIdMwWRGbjVZS7wAAABs [16-07-2022 08:12:10]7541: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 08:12:10]7541: WAF :: fetched 2 new logs [16-07-2022 08:13:01]10140: WAF :: fetched 1 new logs [16-07-2022 08:15:01]15479: WAF :: fetched 1 new logs [16-07-2022 08:23:02]4555: WAF :: fetched 7 new logs [16-07-2022 08:29:01]20700: WAF :: fetched 1 new logs [16-07-2022 08:41:02]20462: Checking for user cron vulnerabilities [16-07-2022 08:44:01]29096: Checking ditributed CMS bruteforce attacks [16-07-2022 08:45:02]32002: WAF :: fetched 2 new logs [16-07-2022 08:48:02]7596: WAF :: fetched 4 new logs [16-07-2022 08:53:01]20908: WAF :: fetched 1 new logs [16-07-2022 08:54:01]23532: WAF :: fetched 3 new logs [16-07-2022 08:55:02]26286: WAF :: fetched 1 new logs [16-07-2022 08:58:01]1867: WAF :: fetched 1 new logs [16-07-2022 09:01:01]10157: WAF :: fetched 2 new logs [16-07-2022 09:03:01]15526: WAF :: fetched 1 new logs [16-07-2022 09:05:02]21061: WAF :: fetched 9 new logs [16-07-2022 09:06:01]23773: WAF :: fetched 1 new logs [16-07-2022 09:08:01]29118: WAF :: fetched 1 new logs [16-07-2022 09:09:01]31718: WAF :: fetched 3 new logs [16-07-2022 09:10:02]2091: WAF :: fetched 3 new logs [16-07-2022 09:11:01]4755: WAF :: fetched 1 new logs [16-07-2022 09:12:02]7451: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657973522 [16-07-2022 09:12:02]7451: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 09:12:04]7451: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 09:12:06]7451: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-0912/20220716-091202-YtKrEjNV1P5gZ0GVr9NH5gAAACA [16-07-2022 09:12:06]7451: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 09:12:06]7451: WAF :: fetched 5 new logs [16-07-2022 09:13:01]10087: WAF :: fetched 7 new logs [16-07-2022 09:15:02]15521: WAF :: fetched 1 new logs [16-07-2022 09:16:01]18275: WAF :: fetched 2 new logs [16-07-2022 09:19:02]26225: WAF :: fetched 1 new logs [16-07-2022 09:20:02]28995: WAF :: fetched 2 new logs [16-07-2022 09:23:02]4584: WAF :: fetched 4 new logs [16-07-2022 09:24:01]7255: WAF :: fetched 2 new logs [16-07-2022 09:26:02]12703: WAF :: fetched 1 new logs [16-07-2022 09:27:03]15328: WAF :: fetched 2 new logs [16-07-2022 09:29:02]20829: WAF :: fetched 1 new logs [16-07-2022 09:32:01]29223: WAF :: fetched 5 new logs [16-07-2022 09:35:01]4807: WAF :: fetched 1 new logs [16-07-2022 09:41:02]21212: WAF :: fetched 1 new logs [16-07-2022 09:41:02]21212: Checking for user cron vulnerabilities [16-07-2022 09:42:04]23835: WAF :: fetched 1 new logs [16-07-2022 09:43:01]26515: WAF :: fetched 7 new logs [16-07-2022 09:44:01]29162: Checking ditributed CMS bruteforce attacks [16-07-2022 09:45:02]31863: WAF :: fetched 1 new logs [16-07-2022 09:46:01]2165: WAF :: fetched 2 new logs [16-07-2022 09:47:01]4860: WAF :: fetched 2 new logs [16-07-2022 09:49:04]10529: WAF :: fetched 1 new logs [16-07-2022 09:50:01]13487: WAF :: fetched 2 new logs [16-07-2022 09:54:02]24611: WAF :: fetched 1 new logs [16-07-2022 09:58:01]2888: WAF :: fetched 7 new logs [16-07-2022 09:59:01]5577: WAF :: fetched 1 new logs [16-07-2022 10:02:02]13930: WAF :: fetched 3 new logs [16-07-2022 10:05:01]22163: WAF :: fetched 1 new logs [16-07-2022 10:06:02]24919: WAF :: fetched 2 new logs [16-07-2022 10:08:01]30169: WAF :: fetched 1 new logs [16-07-2022 10:09:01]370: WAF :: fetched 1 new logs [16-07-2022 10:12:01]8485: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657977121 [16-07-2022 10:12:01]8485: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 10:12:03]8485: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 10:12:05]8485: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-1012/20220716-101201-YtK5IT3P_YKSyEJJdec_0QAAAAQ [16-07-2022 10:12:05]8485: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 10:13:02]11122: WAF :: fetched 1 new logs [16-07-2022 10:14:02]13734: WAF :: fetched 1 new logs [16-07-2022 10:15:01]16433: WAF :: fetched 2 new logs [16-07-2022 10:16:02]19268: WAF :: fetched 6 new logs [16-07-2022 10:22:01]2866: WAF :: fetched 1 new logs [16-07-2022 10:24:01]8140: WAF :: fetched 2 new logs [16-07-2022 10:25:02]10921: WAF :: fetched 2 new logs [16-07-2022 10:26:01]13662: WAF :: fetched 4 new logs [16-07-2022 10:27:02]16316: WAF :: fetched 1 new logs [16-07-2022 10:29:02]21869: WAF :: fetched 2 new logs [16-07-2022 10:31:01]27492: WAF :: fetched 4 new logs [16-07-2022 10:35:02]5966: WAF :: fetched 5 new logs [16-07-2022 10:36:01]8688: WAF :: fetched 4 new logs [16-07-2022 10:37:01]11498: WAF :: fetched 9 new logs [16-07-2022 10:41:02]22482: Checking for user cron vulnerabilities [16-07-2022 10:42:01]25210: WAF :: fetched 1 new logs [16-07-2022 10:44:01]30456: Checking ditributed CMS bruteforce attacks [16-07-2022 10:47:02]6103: WAF :: fetched 1 new logs [16-07-2022 10:48:01]8831: WAF :: fetched 3 new logs [16-07-2022 10:49:02]11465: WAF :: fetched 2 new logs [16-07-2022 10:51:01]16878: WAF :: fetched 2 new logs [16-07-2022 10:53:01]22210: WAF :: fetched 2 new logs [16-07-2022 10:54:02]25008: WAF :: fetched 3 new logs [16-07-2022 10:55:02]27883: WAF :: fetched 2 new logs [16-07-2022 10:56:01]30797: WAF :: fetched 1 new logs [16-07-2022 11:00:02]9114: WAF :: fetched 1 new logs [16-07-2022 11:04:01]20341: WAF :: fetched 2 new logs [16-07-2022 11:05:02]22985: WAF :: fetched 3 new logs [16-07-2022 11:06:01]25783: WAF :: fetched 8 new logs [16-07-2022 11:07:02]28423: WAF :: fetched 4 new logs [16-07-2022 11:08:24]28588: Performed RBL check for 23.111.136.34. [16-07-2022 11:09:02]1266: WAF :: fetched 3 new logs [16-07-2022 11:10:02]4014: WAF :: fetched 11 new logs [16-07-2022 11:12:02]9503: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657980722 [16-07-2022 11:12:02]9503: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 11:12:04]9503: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 11:12:06]9503: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-1112/20220716-111202-YtLHMqBS9nBNx5aIM7zXNwAAAC0 [16-07-2022 11:12:06]9503: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 11:12:06]9503: WAF :: fetched 3 new logs [16-07-2022 11:15:01]17411: WAF :: fetched 1 new logs [16-07-2022 11:16:02]20280: WAF :: fetched 1 new logs [16-07-2022 11:18:01]25574: WAF :: fetched 3 new logs [16-07-2022 11:21:01]1224: WAF :: fetched 2 new logs [16-07-2022 11:22:02]3975: WAF :: fetched 2 new logs [16-07-2022 11:24:02]9312: WAF :: fetched 2 new logs [16-07-2022 11:26:02]14673: WAF :: fetched 2 new logs [16-07-2022 11:28:02]20015: WAF :: fetched 1 new logs [16-07-2022 11:34:02]3668: WAF :: fetched 1 new logs [16-07-2022 11:37:02]11764: WAF :: fetched 13 new logs [16-07-2022 11:38:01]14354: WAF :: fetched 1 new logs [16-07-2022 11:41:01]22682: Checking for user cron vulnerabilities [16-07-2022 11:44:01]30891: Checking ditributed CMS bruteforce attacks [16-07-2022 11:44:03]30891: WAF :: fetched 6 new logs [16-07-2022 11:47:01]6627: WAF :: fetched 4 new logs [16-07-2022 11:50:01]14580: WAF :: fetched 1 new logs [16-07-2022 11:51:02]17367: WAF :: fetched 1 new logs [16-07-2022 11:52:01]20103: WAF :: fetched 2 new logs [16-07-2022 11:53:01]22745: WAF :: fetched 1 new logs [16-07-2022 11:54:02]25437: WAF :: fetched 1 new logs [16-07-2022 11:58:01]3857: WAF :: fetched 9 new logs [16-07-2022 12:04:02]21885: WAF :: fetched 2 new logs [16-07-2022 12:06:01]27377: WAF :: fetched 3 new logs [16-07-2022 12:07:02]30023: WAF :: fetched 1 new logs [16-07-2022 12:11:01]8303: WAF :: fetched 2 new logs [16-07-2022 12:12:02]11009: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657984322 [16-07-2022 12:12:02]11009: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 12:12:04]11009: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 12:12:04]11009: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-1212/20220716-121202-YtLVQnccJnLQWu4_pGptbwAAAAs [16-07-2022 12:12:04]11009: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [16-07-2022 12:12:04]11009: WAF :: fetched 1 new logs [16-07-2022 12:13:01]13666: WAF :: fetched 1 new logs [16-07-2022 12:17:02]24728: WAF :: fetched 1 new logs [16-07-2022 12:19:01]30085: WAF :: fetched 2 new logs [16-07-2022 12:20:02]32761: WAF :: fetched 1 new logs [16-07-2022 12:21:01]3131: WAF :: fetched 2 new logs [16-07-2022 12:22:02]5816: WAF :: fetched 1 new logs [16-07-2022 12:23:03]8446: WAF :: fetched 2 new logs [16-07-2022 12:27:01]19208: WAF :: fetched 1 new logs [16-07-2022 12:28:02]21927: WAF :: fetched 7 new logs [16-07-2022 12:29:02]24575: WAF :: fetched 2 new logs [16-07-2022 12:30:02]27237: WAF :: fetched 1 new logs [16-07-2022 12:31:01]30026: WAF :: fetched 1 new logs [16-07-2022 12:35:02]8405: WAF :: fetched 2 new logs [16-07-2022 12:37:02]13862: WAF :: fetched 3 new logs [16-07-2022 12:38:01]16513: WAF :: fetched 1 new logs [16-07-2022 12:40:01]21901: WAF :: fetched 1 new logs [16-07-2022 12:41:02]24714: Checking for user cron vulnerabilities [16-07-2022 12:42:01]27308: WAF :: fetched 1 new logs [16-07-2022 12:43:02]29974: WAF :: fetched 5 new logs [16-07-2022 12:44:01]32575: Checking ditributed CMS bruteforce attacks [16-07-2022 12:44:03]32575: WAF :: fetched 1 new logs [16-07-2022 12:45:02]: Checking for software updates [16-07-2022 12:45:02]2872: WAF :: fetched 2 new logs [16-07-2022 12:47:01]8336: WAF :: fetched 1 new logs [16-07-2022 12:50:02]16644: WAF :: fetched 2 new logs [16-07-2022 12:51:02]19647: WAF :: fetched 2 new logs [16-07-2022 12:55:01]30251: WAF :: fetched 5 new logs [16-07-2022 13:03:01]19677: WAF :: fetched 1 new logs [16-07-2022 13:06:01]27720: WAF :: fetched 2 new logs [16-07-2022 13:07:02]30543: WAF :: fetched 7 new logs [16-07-2022 13:08:01]1018: WAF :: fetched 2 new logs [16-07-2022 13:12:02]12480: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657987922 [16-07-2022 13:12:03]12480: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 13:12:05]12480: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 13:12:05]12480: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-1312/20220716-131203-YtLjU9aHYwAydglYngGExwAAABA [16-07-2022 13:12:05]12480: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [16-07-2022 13:12:05]12480: WAF :: fetched 6 new logs [16-07-2022 13:13:01]15139: WAF :: fetched 2 new logs [16-07-2022 13:17:02]26093: WAF :: fetched 2 new logs [16-07-2022 13:20:02]1644: WAF :: fetched 5 new logs [16-07-2022 13:22:01]7096: WAF :: fetched 1 new logs [16-07-2022 13:24:02]12486: WAF :: fetched 2 new logs [16-07-2022 13:27:01]20766: WAF :: fetched 2 new logs [16-07-2022 13:30:01]28875: WAF :: fetched 2 new logs [16-07-2022 13:31:02]31691: WAF :: fetched 3 new logs [16-07-2022 13:32:01]1958: WAF :: fetched 2 new logs [16-07-2022 13:35:01]9928: WAF :: fetched 1 new logs [16-07-2022 13:37:02]15402: WAF :: fetched 2 new logs [16-07-2022 13:38:02]18146: WAF :: fetched 1 new logs [16-07-2022 13:41:01]26319: Checking for user cron vulnerabilities [16-07-2022 13:42:02]28955: WAF :: fetched 1 new logs [16-07-2022 13:44:02]1817: Checking ditributed CMS bruteforce attacks [16-07-2022 13:44:02]1817: WAF :: fetched 1 new logs [16-07-2022 13:45:01]: Checking for definition updates [16-07-2022 13:45:02]4432: WAF :: fetched 1 new logs [16-07-2022 13:48:01]13197: WAF :: fetched 1 new logs [16-07-2022 13:49:02]15874: WAF :: fetched 4 new logs [16-07-2022 13:51:02]21437: WAF :: fetched 1 new logs [16-07-2022 13:54:02]29532: WAF :: fetched 1 new logs [16-07-2022 13:55:02]32305: WAF :: fetched 2 new logs [16-07-2022 13:56:01]2822: WAF :: fetched 5 new logs [16-07-2022 13:57:02]5540: WAF :: fetched 1 new logs [16-07-2022 13:58:02]8210: WAF :: fetched 3 new logs [16-07-2022 14:03:02]21886: WAF :: fetched 3 new logs [16-07-2022 14:05:02]27201: WAF :: fetched 2 new logs [16-07-2022 14:07:01]32588: WAF :: fetched 1 new logs [16-07-2022 14:10:02]8152: WAF :: fetched 2 new logs [16-07-2022 14:11:02]10951: WAF :: fetched 4 new logs [16-07-2022 14:12:01]13575: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657991521 [16-07-2022 14:12:01]13575: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 14:12:03]13575: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 14:12:04]13575: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-1412/20220716-141201-YtLxYTRWNPwxzFpdjL0B9QAAAA0 [16-07-2022 14:12:04]13575: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 14:12:04]13575: WAF :: fetched 88 new logs [16-07-2022 14:22:01]9129: WAF :: fetched 76 new logs [16-07-2022 14:23:02]11783: WAF :: fetched 217 new logs [16-07-2022 14:24:01]14396: WAF :: fetched 295 new logs [16-07-2022 14:25:02]17042: WAF :: fetched 308 new logs [16-07-2022 14:26:02]19888: WAF :: fetched 370 new logs [16-07-2022 14:27:01]22505: WAF :: fetched 382 new logs [16-07-2022 14:28:02]25222: WAF :: fetched 250 new logs [16-07-2022 14:29:02]27862: WAF :: fetched 337 new logs [16-07-2022 14:30:01]30587: WAF :: fetched 410 new logs [16-07-2022 14:31:02]1022: WAF :: fetched 239 new logs [16-07-2022 14:32:01]3674: WAF :: fetched 57 new logs [16-07-2022 14:35:03]11648: WAF :: fetched 1 new logs [16-07-2022 14:36:02]14416: WAF :: fetched 1 new logs [16-07-2022 14:38:02]19890: WAF :: fetched 1 new logs [16-07-2022 14:40:01]25162: WAF :: fetched 5 new logs [16-07-2022 14:41:02]27978: Checking for user cron vulnerabilities [16-07-2022 14:43:02]719: WAF :: fetched 1 new logs [16-07-2022 14:44:01]3436: Checking ditributed CMS bruteforce attacks [16-07-2022 14:45:02]6091: WAF :: fetched 1 new logs [16-07-2022 14:51:01]22357: WAF :: fetched 1 new logs [16-07-2022 14:52:02]25075: WAF :: fetched 1 new logs [16-07-2022 14:53:02]27748: WAF :: fetched 2 new logs [16-07-2022 14:53:02]27754: Updated license status via CDN [16-07-2022 14:56:01]3572: WAF :: fetched 1 new logs [16-07-2022 14:57:02]6251: WAF :: fetched 3 new logs [16-07-2022 14:58:01]8914: WAF :: fetched 1 new logs [16-07-2022 14:59:02]11617: WAF :: fetched 3 new logs [16-07-2022 15:00:02]13973: WAF :: fetched 1 new logs [16-07-2022 15:01:01]17315: Reseting cPGuard inotify settings [16-07-2022 15:01:01]17318: WAF :: fetched 1 new logs [16-07-2022 15:03:01]22960: WAF :: fetched 1 new logs [16-07-2022 15:04:01]25689: WAF :: fetched 2 new logs [16-07-2022 15:06:01]31137: WAF :: fetched 3 new logs [16-07-2022 15:10:01]9331: WAF :: fetched 2 new logs [16-07-2022 15:12:02]14818: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657995122 [16-07-2022 15:12:02]14818: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 15:12:04]14818: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 15:12:05]14818: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-1512/20220716-151202-YtL_cuTkNTBBpPxVjUnQ7gAAAAk [16-07-2022 15:12:05]14818: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 15:16:01]25657: WAF :: fetched 1 new logs [16-07-2022 15:18:01]30921: WAF :: fetched 3 new logs [16-07-2022 15:19:02]1194: WAF :: fetched 4 new logs [16-07-2022 15:24:02]15702: WAF :: fetched 9 new logs [16-07-2022 15:25:01]18439: WAF :: fetched 4 new logs [16-07-2022 15:26:01]21160: WAF :: fetched 1 new logs [16-07-2022 15:27:02]23831: WAF :: fetched 2 new logs [16-07-2022 15:29:02]29133: WAF :: fetched 3 new logs [16-07-2022 15:30:02]31771: WAF :: fetched 2 new logs [16-07-2022 15:31:02]2148: WAF :: fetched 2 new logs [16-07-2022 15:36:02]15596: WAF :: fetched 2 new logs [16-07-2022 15:38:02]21135: WAF :: fetched 1 new logs [16-07-2022 15:39:01]23744: WAF :: fetched 2 new logs [16-07-2022 15:40:01]26406: WAF :: fetched 2 new logs [16-07-2022 15:41:02]29216: Checking for user cron vulnerabilities [16-07-2022 15:42:01]31849: WAF :: fetched 1 new logs [16-07-2022 15:43:01]2087: WAF :: fetched 4 new logs [16-07-2022 15:44:01]4744: Checking ditributed CMS bruteforce attacks [16-07-2022 15:44:04]4744: WAF :: fetched 3 new logs [16-07-2022 15:46:02]10097: WAF :: fetched 4 new logs [16-07-2022 15:47:01]12823: WAF :: fetched 3 new logs [16-07-2022 15:51:02]23580: WAF :: fetched 1 new logs [16-07-2022 15:57:02]7215: WAF :: fetched 4 new logs [16-07-2022 15:58:01]9836: WAF :: fetched 2 new logs [16-07-2022 16:01:02]17948: WAF :: fetched 4 new logs [16-07-2022 16:03:01]23350: WAF :: fetched 2 new logs [16-07-2022 16:05:01]28655: WAF :: fetched 1 new logs [16-07-2022 16:08:02]4400: WAF :: fetched 1 new logs [16-07-2022 16:09:01]7180: WAF :: fetched 1 new logs [16-07-2022 16:10:02]9963: WAF :: fetched 1 new logs [16-07-2022 16:12:01]15378: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1657998721 [16-07-2022 16:12:01]15378: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 16:12:03]15378: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 16:12:05]15378: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-1612/20220716-161201-YtMNgTKmL3ar17YxAJ31DwAAABM [16-07-2022 16:12:05]15378: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 16:12:05]15378: WAF :: fetched 2 new logs [16-07-2022 16:14:01]20684: WAF :: fetched 1 new logs [16-07-2022 16:17:01]28721: WAF :: fetched 1 new logs [16-07-2022 16:18:02]31383: WAF :: fetched 1 new logs [16-07-2022 16:19:01]1606: WAF :: fetched 1 new logs [16-07-2022 16:26:02]20292: WAF :: fetched 1 new logs [16-07-2022 16:29:01]28783: WAF :: fetched 2 new logs [16-07-2022 16:30:01]31639: WAF :: fetched 2 new logs [16-07-2022 16:34:01]10337: WAF :: fetched 1 new logs [16-07-2022 16:38:01]21045: WAF :: fetched 2 new logs [16-07-2022 16:40:02]26276: WAF :: fetched 4 new logs [16-07-2022 16:41:01]28956: Checking for user cron vulnerabilities [16-07-2022 16:43:02]1910: WAF :: fetched 3 new logs [16-07-2022 16:44:01]4612: Checking ditributed CMS bruteforce attacks [16-07-2022 16:45:02]7316: WAF :: fetched 2 new logs [16-07-2022 16:46:01]10003: WAF :: fetched 1 new logs [16-07-2022 16:47:02]12723: WAF :: fetched 1 new logs [16-07-2022 16:48:02]15350: WAF :: fetched 2 new logs [16-07-2022 16:50:02]20760: WAF :: fetched 16 new logs [16-07-2022 16:51:01]23419: WAF :: fetched 5 new logs [16-07-2022 16:52:01]26148: WAF :: fetched 6 new logs [16-07-2022 16:57:02]7139: WAF :: fetched 4 new logs [16-07-2022 17:00:02]14718: WAF :: fetched 2 new logs [16-07-2022 17:01:01]17849: WAF :: fetched 1 new logs [16-07-2022 17:03:01]23311: WAF :: fetched 2 new logs [16-07-2022 17:05:02]28648: WAF :: fetched 2 new logs [16-07-2022 17:07:01]1646: WAF :: fetched 27 new logs [16-07-2022 17:08:02]4315: WAF :: fetched 35 new logs [16-07-2022 17:09:01]6948: WAF :: fetched 39 new logs [16-07-2022 17:10:02]9612: WAF :: fetched 51 new logs [16-07-2022 17:11:01]12312: WAF :: fetched 53 new logs [16-07-2022 17:12:01]15018: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658002321 [16-07-2022 17:12:01]15018: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 17:12:03]15018: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 17:12:03]15018: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-1712/20220716-171201-YtMbkXoXBCVTdfIPi9p57QAAAA4 [16-07-2022 17:12:03]15018: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 17:12:04]15018: WAF :: fetched 47 new logs [16-07-2022 17:13:03]17662: WAF :: fetched 37 new logs [16-07-2022 17:14:01]20391: WAF :: fetched 44 new logs [16-07-2022 17:15:02]23146: WAF :: fetched 4 new logs [16-07-2022 17:17:01]28762: WAF :: fetched 3 new logs [16-07-2022 17:20:01]4443: WAF :: fetched 4 new logs [16-07-2022 17:21:04]7171: WAF :: fetched 2 new logs [16-07-2022 17:22:01]9479: WAF :: fetched 1 new logs [16-07-2022 17:24:01]15173: WAF :: fetched 2 new logs [16-07-2022 17:26:01]20557: WAF :: fetched 2 new logs [16-07-2022 17:27:01]23267: WAF :: fetched 1 new logs [16-07-2022 17:33:02]6873: WAF :: fetched 2 new logs [16-07-2022 17:34:01]9533: WAF :: fetched 1 new logs [16-07-2022 17:35:02]12384: WAF :: fetched 45 new logs [16-07-2022 17:36:01]15421: WAF :: fetched 42 new logs [16-07-2022 17:37:02]18463: WAF :: fetched 48 new logs [16-07-2022 17:38:03]21202: WAF :: fetched 100 new logs [16-07-2022 17:39:01]23894: WAF :: fetched 97 new logs [16-07-2022 17:40:02]26563: WAF :: fetched 22 new logs [16-07-2022 17:41:02]29199: Checking for user cron vulnerabilities [16-07-2022 17:42:01]31943: WAF :: fetched 3 new logs [16-07-2022 17:44:01]4793: Checking ditributed CMS bruteforce attacks [16-07-2022 17:46:02]10125: WAF :: fetched 1 new logs [16-07-2022 17:47:01]12826: WAF :: fetched 1 new logs [16-07-2022 17:48:02]15449: WAF :: fetched 1 new logs [16-07-2022 17:50:01]20913: WAF :: fetched 5 new logs [16-07-2022 17:52:01]26397: WAF :: fetched 2 new logs [16-07-2022 17:56:02]4585: WAF :: fetched 5 new logs [16-07-2022 18:00:01]14914: WAF :: fetched 2 new logs [16-07-2022 18:02:01]20845: WAF :: fetched 1 new logs [16-07-2022 18:03:02]23579: WAF :: fetched 3 new logs [16-07-2022 18:06:01]31443: WAF :: fetched 2 new logs [16-07-2022 18:08:02]4420: WAF :: fetched 1 new logs [16-07-2022 18:10:02]9700: WAF :: fetched 1 new logs [16-07-2022 18:11:01]12359: WAF :: fetched 5 new logs [16-07-2022 18:12:01]15043: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658005921 [16-07-2022 18:12:01]15043: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 18:12:03]15043: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 18:12:05]15043: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-1812/20220716-181201-YtMpoQm0zuGzHR4OTI6m7wAAABs [16-07-2022 18:12:05]15043: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 18:12:05]15043: WAF :: fetched 1 new logs [16-07-2022 18:17:04]28507: WAF :: fetched 3 new logs [16-07-2022 18:22:01]9568: WAF :: fetched 3 new logs [16-07-2022 18:23:02]12377: WAF :: fetched 85 new logs [16-07-2022 18:24:01]15073: WAF :: fetched 79 new logs [16-07-2022 18:25:04]17861: WAF :: fetched 67 new logs [16-07-2022 18:26:02]20573: WAF :: fetched 103 new logs [16-07-2022 18:27:01]23268: WAF :: fetched 75 new logs [16-07-2022 18:28:02]25875: WAF :: fetched 46 new logs [16-07-2022 18:29:02]28443: WAF :: fetched 52 new logs [16-07-2022 18:30:01]31066: WAF :: fetched 56 new logs [16-07-2022 18:33:01]6758: WAF :: fetched 1 new logs [16-07-2022 18:35:01]12047: WAF :: fetched 3 new logs [16-07-2022 18:36:01]14775: WAF :: fetched 2 new logs [16-07-2022 18:37:02]17463: WAF :: fetched 2 new logs [16-07-2022 18:38:01]20167: WAF :: fetched 4 new logs [16-07-2022 18:39:02]22824: WAF :: fetched 1 new logs [16-07-2022 18:40:02]25470: WAF :: fetched 2 new logs [16-07-2022 18:41:01]28159: WAF :: fetched 5 new logs [16-07-2022 18:41:01]28159: Checking for user cron vulnerabilities [16-07-2022 18:42:02]30950: WAF :: fetched 4 new logs [16-07-2022 18:43:01]1483: WAF :: fetched 4 new logs [16-07-2022 18:44:01]4494: Checking ditributed CMS bruteforce attacks [16-07-2022 18:44:01]4494: WAF :: fetched 4 new logs [16-07-2022 18:45:02]7343: WAF :: fetched 3 new logs [16-07-2022 18:46:01]10103: WAF :: fetched 1 new logs [16-07-2022 18:47:02]12803: WAF :: fetched 2 new logs [16-07-2022 18:48:02]15468: WAF :: fetched 1 new logs [16-07-2022 18:50:02]20762: WAF :: fetched 1 new logs [16-07-2022 18:53:01]28832: WAF :: fetched 2 new logs [16-07-2022 18:54:02]31487: WAF :: fetched 3 new logs [16-07-2022 18:55:03]1694: WAF :: fetched 1 new logs [16-07-2022 18:58:01]9727: WAF :: fetched 1 new logs [16-07-2022 19:01:02]18056: WAF :: fetched 2 new logs [16-07-2022 19:03:02]23444: WAF :: fetched 2 new logs [16-07-2022 19:04:01]26034: WAF :: fetched 5 new logs [16-07-2022 19:07:01]1702: WAF :: fetched 4 new logs [16-07-2022 19:08:02]4346: WAF :: fetched 3 new logs [16-07-2022 19:09:01]6974: WAF :: fetched 3 new logs [16-07-2022 19:10:02]9647: WAF :: fetched 1 new logs [16-07-2022 19:11:02]12313: WAF :: fetched 5 new logs [16-07-2022 19:12:01]15042: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658009521 [16-07-2022 19:12:01]15042: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 19:12:03]15042: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 19:12:04]15042: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-1912/20220716-191201-YtM3sTKg9qHfWcljiG1xKAAAAAI [16-07-2022 19:12:04]15042: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 19:12:04]15042: WAF :: fetched 5 new logs [16-07-2022 19:13:02]17706: WAF :: fetched 3 new logs [16-07-2022 19:15:01]22975: WAF :: fetched 2 new logs [16-07-2022 19:17:01]28328: WAF :: fetched 1 new logs [16-07-2022 19:18:02]30973: WAF :: fetched 3 new logs [16-07-2022 19:19:01]1190: WAF :: fetched 1 new logs [16-07-2022 19:23:01]11949: WAF :: fetched 3 new logs [16-07-2022 19:27:02]22817: WAF :: fetched 2 new logs [16-07-2022 19:32:02]4280: WAF :: fetched 1 new logs [16-07-2022 19:33:01]6932: WAF :: fetched 4 new logs [16-07-2022 19:34:02]9608: WAF :: fetched 3 new logs [16-07-2022 19:35:02]12220: WAF :: fetched 9 new logs [16-07-2022 19:36:01]14933: WAF :: fetched 11 new logs [16-07-2022 19:37:02]17695: WAF :: fetched 4 new logs [16-07-2022 19:40:01]25632: WAF :: fetched 1 new logs [16-07-2022 19:41:01]28308: WAF :: fetched 1 new logs [16-07-2022 19:41:01]28308: Checking for user cron vulnerabilities [16-07-2022 19:44:01]3804: Checking ditributed CMS bruteforce attacks [16-07-2022 19:45:01]: Checking for definition updates [16-07-2022 19:48:03]14501: WAF :: fetched 5 new logs [16-07-2022 19:49:02]17191: WAF :: fetched 1 new logs [16-07-2022 19:55:02]1628: WAF :: fetched 1 new logs [16-07-2022 19:56:01]4351: WAF :: fetched 1 new logs [16-07-2022 19:59:01]12337: WAF :: fetched 3 new logs [16-07-2022 20:00:01]14665: WAF :: fetched 1 new logs [16-07-2022 20:01:02]17874: WAF :: fetched 2 new logs [16-07-2022 20:03:01]23308: WAF :: fetched 4 new logs [16-07-2022 20:04:02]25944: WAF :: fetched 1 new logs [16-07-2022 20:05:01]28554: WAF :: fetched 1 new logs [16-07-2022 20:07:01]1605: WAF :: fetched 1 new logs [16-07-2022 20:08:01]4303: WAF :: fetched 2 new logs [16-07-2022 20:12:02]14917: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658013122 [16-07-2022 20:12:02]14917: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 20:12:04]14917: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 20:12:04]14917: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-2012/20220716-201202-YtNFwojKwHHsEHGFpWzM0wAAAAo [16-07-2022 20:12:04]14917: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [16-07-2022 20:12:05]14917: WAF :: fetched 1 new logs [16-07-2022 20:13:01]17569: WAF :: fetched 1 new logs [16-07-2022 20:14:02]20288: WAF :: fetched 1 new logs [16-07-2022 20:15:01]22878: WAF :: fetched 1 new logs [16-07-2022 20:22:02]9322: WAF :: fetched 1 new logs [16-07-2022 20:23:01]11940: WAF :: fetched 2 new logs [16-07-2022 20:24:02]14574: WAF :: fetched 2 new logs [16-07-2022 20:25:01]17223: WAF :: fetched 1 new logs [16-07-2022 20:26:02]19998: WAF :: fetched 5 new logs [16-07-2022 20:28:01]25362: WAF :: fetched 117 new logs [16-07-2022 20:29:02]28007: WAF :: fetched 1 new logs [16-07-2022 20:32:02]3715: WAF :: fetched 6 new logs [16-07-2022 20:33:02]6370: WAF :: fetched 1 new logs [16-07-2022 20:35:02]11699: WAF :: fetched 1 new logs [16-07-2022 20:36:02]14401: WAF :: fetched 2 new logs [16-07-2022 20:37:02]17148: WAF :: fetched 3 new logs [16-07-2022 20:41:02]28097: Checking for user cron vulnerabilities [16-07-2022 20:43:02]997: WAF :: fetched 2 new logs [16-07-2022 20:44:01]3633: Checking ditributed CMS bruteforce attacks [16-07-2022 20:45:01]6202: WAF :: fetched 1 new logs [16-07-2022 20:47:03]11589: WAF :: fetched 1 new logs [16-07-2022 20:50:01]19753: WAF :: fetched 5 new logs [16-07-2022 20:53:01]27772: WAF :: fetched 1 new logs [16-07-2022 20:55:02]577: WAF :: fetched 1 new logs [16-07-2022 20:57:02]6127: WAF :: fetched 5 new logs [16-07-2022 20:58:01]9148: WAF :: fetched 7 new logs [16-07-2022 20:59:02]12180: WAF :: fetched 11 new logs [16-07-2022 21:00:02]14671: WAF :: fetched 10 new logs [16-07-2022 21:01:01]17864: WAF :: fetched 8 new logs [16-07-2022 21:03:02]23269: WAF :: fetched 1 new logs [16-07-2022 21:04:01]25912: WAF :: fetched 1 new logs [16-07-2022 21:12:02]14682: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658016722 [16-07-2022 21:12:02]14682: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 21:12:04]14682: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 21:12:04]14682: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-2112/20220716-211202-YtNT0kd-3PKptuhzJq3_CQAAAB0 [16-07-2022 21:12:04]14682: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 21:12:05]14682: WAF :: fetched 147 new logs [16-07-2022 21:15:02]22827: WAF :: fetched 2 new logs [16-07-2022 21:16:02]25464: WAF :: fetched 51 new logs [16-07-2022 21:17:02]28104: WAF :: fetched 47 new logs [16-07-2022 21:21:02]6298: WAF :: fetched 2 new logs [16-07-2022 21:22:01]8916: WAF :: fetched 3 new logs [16-07-2022 21:23:01]11588: WAF :: fetched 2 new logs [16-07-2022 21:24:01]14189: WAF :: fetched 3 new logs [16-07-2022 21:33:02]5744: WAF :: fetched 3 new logs [16-07-2022 21:35:01]11007: WAF :: fetched 1 new logs [16-07-2022 21:38:02]19144: WAF :: fetched 3 new logs [16-07-2022 21:40:01]24417: WAF :: fetched 5 new logs [16-07-2022 21:41:02]27089: WAF :: fetched 2 new logs [16-07-2022 21:41:02]27089: Checking for user cron vulnerabilities [16-07-2022 21:42:01]29744: WAF :: fetched 2 new logs [16-07-2022 21:43:01]32450: WAF :: fetched 1 new logs [16-07-2022 21:44:01]2672: Checking ditributed CMS bruteforce attacks [16-07-2022 21:44:02]2672: WAF :: fetched 3 new logs [16-07-2022 21:45:02]5489: WAF :: fetched 9 new logs [16-07-2022 21:46:01]8283: WAF :: fetched 2 new logs [16-07-2022 21:47:02]11012: WAF :: fetched 2 new logs [16-07-2022 21:48:01]13674: WAF :: fetched 2 new logs [16-07-2022 21:49:01]16290: WAF :: fetched 5 new logs [16-07-2022 21:50:02]19078: WAF :: fetched 11 new logs [16-07-2022 21:51:01]21813: WAF :: fetched 7 new logs [16-07-2022 21:52:02]24490: WAF :: fetched 1 new logs [16-07-2022 21:53:02]27200: WAF :: fetched 6 new logs [16-07-2022 21:54:01]29843: WAF :: fetched 6 new logs [16-07-2022 21:55:03]32569: WAF :: fetched 15 new logs [16-07-2022 21:56:01]2880: WAF :: fetched 4 new logs [16-07-2022 21:57:01]5599: WAF :: fetched 27 new logs [16-07-2022 21:58:02]8354: WAF :: fetched 8 new logs [16-07-2022 22:00:02]13341: WAF :: fetched 24 new logs [16-07-2022 22:01:01]16488: WAF :: fetched 6 new logs [16-07-2022 22:02:01]19266: WAF :: fetched 1 new logs [16-07-2022 22:03:02]22012: WAF :: fetched 3 new logs [16-07-2022 22:07:01]1204: WAF :: fetched 2 new logs [16-07-2022 22:07:10]1213: Performing Domain reputation checks [16-07-2022 22:09:01]6757: WAF :: fetched 1 new logs [16-07-2022 22:10:02]9459: WAF :: fetched 1 new logs [16-07-2022 22:12:02]14758: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658020322 [16-07-2022 22:12:02]14758: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 22:12:04]14758: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 22:12:05]14758: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-2212/20220716-221202-YtNh4nIH-CIELLItLDzTsgAAAAg [16-07-2022 22:12:05]14758: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 22:12:06]14758: WAF :: fetched 1 new logs [16-07-2022 22:13:01]17497: WAF :: fetched 1 new logs [16-07-2022 22:15:02]22854: WAF :: fetched 2 new logs [16-07-2022 22:19:02]1196: WAF :: fetched 1 new logs [16-07-2022 22:41:01]28426: Checking for user cron vulnerabilities [16-07-2022 22:44:02]4089: Checking ditributed CMS bruteforce attacks [16-07-2022 22:45:01]6741: WAF :: fetched 7 new logs [16-07-2022 22:48:02]14897: WAF :: fetched 1 new logs [16-07-2022 22:49:02]17540: WAF :: fetched 1 new logs [16-07-2022 22:55:02]1587: WAF :: fetched 1 new logs [16-07-2022 22:59:02]12293: WAF :: fetched 1 new logs [16-07-2022 23:00:02]14634: WAF :: fetched 1 new logs [16-07-2022 23:03:02]23260: WAF :: fetched 4 new logs [16-07-2022 23:04:01]25912: WAF :: fetched 6 new logs [16-07-2022 23:05:02]28575: WAF :: fetched 3 new logs [16-07-2022 23:06:01]31254: WAF :: fetched 27 new logs [16-07-2022 23:07:02]1546: WAF :: fetched 2 new logs [16-07-2022 23:07:57]1720: Performed RBL check for 23.111.136.34. [16-07-2022 23:09:01]6952: WAF :: fetched 1 new logs [16-07-2022 23:12:02]15218: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658023922 [16-07-2022 23:12:02]15218: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [16-07-2022 23:12:04]15218: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [16-07-2022 23:12:04]15218: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220716/20220716-2312/20220716-231202-YtNv8n-AxVaW-5WJqZuCdgAAAAU [16-07-2022 23:12:04]15218: WAF :: No suitable log file found. Using SQLite.. [16-07-2022 23:12:04]15218: WAF :: fetched 4 new logs [16-07-2022 23:13:02]18344: WAF :: fetched 6 new logs [16-07-2022 23:14:01]21371: WAF :: fetched 2 new logs [16-07-2022 23:18:01]32379: WAF :: fetched 3 new logs [16-07-2022 23:19:02]2668: WAF :: fetched 1 new logs [16-07-2022 23:20:01]5365: WAF :: fetched 2 new logs [16-07-2022 23:21:01]8143: WAF :: fetched 2 new logs [16-07-2022 23:22:02]10861: WAF :: fetched 1 new logs [16-07-2022 23:24:01]16246: WAF :: fetched 1 new logs [16-07-2022 23:26:01]21700: WAF :: fetched 1 new logs [16-07-2022 23:27:01]24344: WAF :: fetched 1 new logs [16-07-2022 23:29:01]29800: WAF :: fetched 1 new logs [16-07-2022 23:31:01]2764: WAF :: fetched 2 new logs [16-07-2022 23:32:01]5411: WAF :: fetched 1 new logs [16-07-2022 23:33:02]8179: WAF :: fetched 1 new logs [16-07-2022 23:37:02]18867: WAF :: fetched 3 new logs [16-07-2022 23:41:02]29546: WAF :: fetched 1 new logs [16-07-2022 23:41:02]29546: Checking for user cron vulnerabilities [16-07-2022 23:43:01]2506: WAF :: fetched 1 new logs [16-07-2022 23:44:01]5218: Checking ditributed CMS bruteforce attacks [16-07-2022 23:46:01]10534: WAF :: fetched 1 new logs [16-07-2022 23:49:03]18601: WAF :: fetched 2 new logs [16-07-2022 23:50:01]21344: WAF :: fetched 1 new logs [16-07-2022 23:52:01]26773: WAF :: fetched 3 new logs [16-07-2022 23:53:02]29551: WAF :: fetched 3 new logs [16-07-2022 23:55:01]2542: WAF :: fetched 1 new logs [16-07-2022 23:55:01]2552: httpd.conf changed. Refreshing watchlist. [16-07-2022 23:56:02]5826: WAF :: fetched 47 new logs [16-07-2022 23:57:02]8612: WAF :: fetched 43 new logs [16-07-2022 23:57:02]8615: httpd.conf changed. Refreshing watchlist. [16-07-2022 23:58:01]11351: WAF :: fetched 10 new logs [17-07-2022 00:00:01]16480: WAF :: fetched 3 new logs [17-07-2022 00:01:02]20043: httpd.conf changed. Refreshing watchlist. [17-07-2022 00:01:05]20036: Sending daily report for July 17, 2022 [17-07-2022 00:03:01]25735: WAF :: fetched 1 new logs [17-07-2022 00:05:01]31198: WAF :: fetched 4 new logs [17-07-2022 00:05:01]31198: Deleted 0 entries older than 6 MONTH from scanner_logs [17-07-2022 00:05:01]31198: Deleted 0 files from Quarantine [17-07-2022 00:08:01]7110: WAF :: fetched 1 new logs [17-07-2022 00:12:02]17861: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658027522 [17-07-2022 00:12:02]17861: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 00:12:04]17861: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 00:12:06]17861: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-0012/20220717-001202-YtN-Av43dHzDJNNuTVzVTQAAAAk [17-07-2022 00:12:06]17861: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 00:12:06]17861: WAF :: fetched 1 new logs [17-07-2022 00:13:03]20649: WAF :: fetched 5 new logs [17-07-2022 00:14:01]22886: WAF :: fetched 3 new logs [17-07-2022 00:16:01]28661: WAF :: fetched 1 new logs [17-07-2022 00:19:01]4316: WAF :: fetched 1 new logs [17-07-2022 00:28:02]28538: WAF :: fetched 2 new logs [17-07-2022 00:37:02]21381: WAF :: fetched 16 new logs [17-07-2022 00:40:01]29433: WAF :: fetched 1 new logs [17-07-2022 00:41:02]32312: Checking for user cron vulnerabilities [17-07-2022 00:43:02]5542: WAF :: fetched 10 new logs [17-07-2022 00:44:01]8580: Checking ditributed CMS bruteforce attacks [17-07-2022 00:44:01]8580: WAF :: fetched 11 new logs [17-07-2022 00:45:01]: Checking for software updates [17-07-2022 00:47:01]17077: WAF :: fetched 1 new logs [17-07-2022 00:48:01]19892: WAF :: fetched 1 new logs [17-07-2022 00:52:02]30551: WAF :: fetched 9 new logs [17-07-2022 00:56:01]9209: WAF :: fetched 13 new logs [17-07-2022 00:57:03]11877: WAF :: fetched 7 new logs [17-07-2022 00:59:01]17320: WAF :: fetched 3 new logs [17-07-2022 01:00:02]19857: WAF :: fetched 1 new logs [17-07-2022 01:02:01]26341: WAF :: fetched 1 new logs [17-07-2022 01:03:01]29268: WAF :: fetched 2 new logs [17-07-2022 01:04:01]32119: WAF :: fetched 3 new logs [17-07-2022 01:12:01]22731: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658031121 [17-07-2022 01:12:01]22731: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 01:12:03]22731: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 01:12:05]22731: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-0112/20220717-011201-YtOMEf0zVwC4GayF99kJ0AAAABU [17-07-2022 01:12:05]22731: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [17-07-2022 01:12:06]22731: WAF :: fetched 1 new logs [17-07-2022 01:13:01]25467: WAF :: fetched 1 new logs [17-07-2022 01:15:01]30741: WAF :: fetched 2 new logs [17-07-2022 01:19:02]9557: WAF :: fetched 2 new logs [17-07-2022 01:20:02]12180: WAF :: fetched 1 new logs [17-07-2022 01:21:03]14925: WAF :: fetched 5 new logs [17-07-2022 01:22:03]17532: WAF :: fetched 1 new logs [17-07-2022 01:24:02]23011: WAF :: fetched 1 new logs [17-07-2022 01:28:02]1579: WAF :: fetched 1 new logs [17-07-2022 01:30:02]6884: WAF :: fetched 2 new logs [17-07-2022 01:37:02]26832: WAF :: fetched 2 new logs [17-07-2022 01:38:01]29436: WAF :: fetched 2 new logs [17-07-2022 01:40:02]2347: WAF :: fetched 2 new logs [17-07-2022 01:41:03]5033: WAF :: fetched 5 new logs [17-07-2022 01:41:03]5033: Checking for user cron vulnerabilities [17-07-2022 01:44:01]13080: Checking ditributed CMS bruteforce attacks [17-07-2022 01:45:01]: Checking for definition updates [17-07-2022 01:45:02]15786: WAF :: fetched 2 new logs [17-07-2022 01:51:01]565: WAF :: fetched 3 new logs [17-07-2022 01:57:02]17668: WAF :: fetched 3 new logs [17-07-2022 02:02:02]31868: WAF :: fetched 1 new logs [17-07-2022 02:03:01]2131: WAF :: fetched 1 new logs [17-07-2022 02:04:02]4907: WAF :: fetched 1 new logs [17-07-2022 02:05:02]7729: WAF :: fetched 23 new logs [17-07-2022 02:06:01]10497: WAF :: fetched 2 new logs [17-07-2022 02:08:03]15889: WAF :: fetched 16 new logs [17-07-2022 02:09:01]18675: WAF :: fetched 4 new logs [17-07-2022 02:12:02]27174: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658034722 [17-07-2022 02:12:02]27174: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 02:12:04]27174: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 02:12:04]27174: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-0212/20220717-021202-YtOaIlGhtx0QGek7IM8ZjQAAAAM [17-07-2022 02:12:04]27174: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 02:12:06]27174: WAF :: fetched 66 new logs [17-07-2022 02:15:02]2627: WAF :: fetched 18 new logs [17-07-2022 02:18:02]10701: WAF :: fetched 1 new logs [17-07-2022 02:22:02]22204: WAF :: fetched 1 new logs [17-07-2022 02:24:02]27643: WAF :: fetched 3 new logs [17-07-2022 02:25:01]30259: WAF :: fetched 5 new logs [17-07-2022 02:26:02]537: WAF :: fetched 1 new logs [17-07-2022 02:31:01]13985: WAF :: fetched 4 new logs [17-07-2022 02:41:01]8561: Checking for user cron vulnerabilities [17-07-2022 02:44:01]16854: Checking ditributed CMS bruteforce attacks [17-07-2022 02:52:02]5911: WAF :: fetched 1 new logs [17-07-2022 02:53:02]8543: Updated license status via CDN [17-07-2022 02:56:01]16486: WAF :: fetched 1 new logs [17-07-2022 03:02:18]27797: Found and updated 32 CMS installations [17-07-2022 03:02:30]27797: Wordpress installation #1 brgestor.com.br has errors [17-07-2022 03:03:16]27797: Wordpress installation #9 oabilheus.org.br has errors [17-07-2022 03:03:27]3878: Wordpress installation #9 oabilheus.org.br has errors [17-07-2022 03:04:13]3878: Wordpress installation #17 ajuda.meusiteimobiliario.com.br has errors [17-07-2022 03:04:13]27797: Wordpress installation #17 ajuda.meusiteimobiliario.com.br has errors [17-07-2022 03:04:44]27797: Wordpress installation #21 easy2speak.com.br has errors [17-07-2022 03:04:45]3878: Wordpress installation #21 easy2speak.com.br has errors [17-07-2022 03:05:02]9536: WAF :: fetched 1 new logs [17-07-2022 03:05:04]3878: Wordpress installation #23 blueseasurf.com.br has errors [17-07-2022 03:05:04]27797: Wordpress installation #23 blueseasurf.com.br has errors [17-07-2022 03:05:42]3878: Wordpress installation #26 bibokinha.idcartao.com has errors [17-07-2022 03:05:42]27797: Wordpress installation #26 bibokinha.idcartao.com has errors [17-07-2022 03:06:19]3878: Wordpress installation #30 franquiadoceconvivio.com.br has errors [17-07-2022 03:06:19]27797: Wordpress installation #30 franquiadoceconvivio.com.br has errors [17-07-2022 03:06:39]3878: Wordpress installation #33 bibokinha.com.br has errors [17-07-2022 03:06:39]27797: Wordpress installation #33 bibokinha.com.br has errors [17-07-2022 03:07:00]27797: Wordpress installation #34 fazendayrere.com.br has errors [17-07-2022 03:07:00]3878: Wordpress installation #34 fazendayrere.com.br has errors [17-07-2022 03:07:03]15015: WAF :: fetched 2 new logs [17-07-2022 03:07:18]27797: Wordpress installation #35 luanbrasil.com.br has errors [17-07-2022 03:07:18]3878: Wordpress installation #35 luanbrasil.com.br has errors [17-07-2022 03:07:33]3878: Wordpress installation #36 suryaeventos.com.br has errors [17-07-2022 03:07:33]27797: Wordpress installation #36 suryaeventos.com.br has errors [17-07-2022 03:07:53]27797: Wordpress installation #39 imoblux.com.br has errors [17-07-2022 03:07:53]3878: Wordpress installation #39 imoblux.com.br has errors [17-07-2022 03:08:17]27797: Wordpress installation #40 guardian-ba.com.br has errors [17-07-2022 03:08:17]3878: Wordpress installation #40 guardian-ba.com.br has errors [17-07-2022 03:08:25]27797: Sending CMS version vulnerability report emails to cpanel users [17-07-2022 03:08:26]3878: Sending CMS version vulnerability report emails to cpanel users [17-07-2022 03:08:28]27797: Checking wordpress installations for suspicious directories [17-07-2022 03:08:29]3878: Checking wordpress installations for suspicious directories [17-07-2022 03:09:01]21099: WAF :: fetched 5 new logs [17-07-2022 03:11:02]26596: WAF :: fetched 2 new logs [17-07-2022 03:12:02]29214: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658038322 [17-07-2022 03:12:02]29214: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 03:12:04]29214: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 03:12:06]29214: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-0312/20220717-031202-YtOoMsk3TmknqRe3QiQ-PgAAABU [17-07-2022 03:12:06]29214: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 03:12:06]29214: WAF :: fetched 1 new logs [17-07-2022 03:13:01]31818: WAF :: fetched 2 new logs [17-07-2022 03:17:01]10054: WAF :: fetched 3 new logs [17-07-2022 03:20:02]18081: WAF :: fetched 1 new logs [17-07-2022 03:21:02]20801: WAF :: fetched 1 new logs [17-07-2022 03:26:02]6274: WAF :: fetched 1 new logs [17-07-2022 03:30:02]13898: WAF :: fetched 1 new logs [17-07-2022 03:32:02]19250: WAF :: fetched 2 new logs [17-07-2022 03:33:01]21957: WAF :: fetched 3 new logs [17-07-2022 03:39:01]5722: WAF :: fetched 2 new logs [17-07-2022 03:40:02]8405: WAF :: fetched 5 new logs [17-07-2022 03:41:02]11056: Checking for user cron vulnerabilities [17-07-2022 03:42:01]13659: WAF :: fetched 4 new logs [17-07-2022 03:43:02]16245: WAF :: fetched 1 new logs [17-07-2022 03:44:01]19089: Checking ditributed CMS bruteforce attacks [17-07-2022 03:44:06]19089: WAF :: fetched 5 new logs [17-07-2022 03:45:02]21844: WAF :: fetched 7 new logs [17-07-2022 03:46:01]24625: WAF :: fetched 4 new logs [17-07-2022 03:48:01]29894: WAF :: fetched 6 new logs [17-07-2022 03:50:02]3290: WAF :: fetched 9 new logs [17-07-2022 03:51:01]6343: WAF :: fetched 7 new logs [17-07-2022 03:52:01]9101: WAF :: fetched 3 new logs [17-07-2022 03:54:01]14380: WAF :: fetched 3 new logs [17-07-2022 03:55:02]16982: WAF :: fetched 35 new logs [17-07-2022 03:56:02]19713: WAF :: fetched 53 new logs [17-07-2022 03:57:01]22354: WAF :: fetched 3 new logs [17-07-2022 03:58:02]24964: WAF :: fetched 2 new logs [17-07-2022 03:59:01]27668: WAF :: fetched 7 new logs [17-07-2022 04:00:02]30003: WAF :: fetched 1 new logs [17-07-2022 04:02:02]3393: WAF :: fetched 1 new logs [17-07-2022 04:05:02]12027: WAF :: fetched 3 new logs [17-07-2022 04:07:01]17949: WAF :: fetched 3 new logs [17-07-2022 04:08:02]20649: WAF :: fetched 2 new logs [17-07-2022 04:10:01]25928: WAF :: fetched 27 new logs [17-07-2022 04:12:02]31233: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658041922 [17-07-2022 04:12:03]31233: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 04:12:05]31233: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 04:12:07]31233: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-0412/20220717-041203-YtO2Q3yKWXAJec8YP0g-gQAAAA4 [17-07-2022 04:12:07]31233: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 04:12:08]31233: WAF :: fetched 9 new logs [17-07-2022 04:15:01]6695: WAF :: fetched 1 new logs [17-07-2022 04:17:02]11982: WAF :: fetched 1 new logs [17-07-2022 04:18:01]14561: WAF :: fetched 1 new logs [17-07-2022 04:19:02]17276: WAF :: fetched 5 new logs [17-07-2022 04:20:01]20029: WAF :: fetched 1 new logs [17-07-2022 04:22:02]25352: WAF :: fetched 1 new logs [17-07-2022 04:23:01]27937: WAF :: fetched 3 new logs [17-07-2022 04:25:02]779: WAF :: fetched 3 new logs [17-07-2022 04:27:03]6052: WAF :: fetched 1 new logs [17-07-2022 04:31:02]18159: WAF :: fetched 1 new logs [17-07-2022 04:37:01]1604: WAF :: fetched 5 new logs [17-07-2022 04:40:01]9591: WAF :: fetched 1 new logs [17-07-2022 04:41:02]12244: WAF :: fetched 1 new logs [17-07-2022 04:41:02]12244: Checking for user cron vulnerabilities [17-07-2022 04:44:01]20555: Checking ditributed CMS bruteforce attacks [17-07-2022 04:48:02]31267: WAF :: fetched 1 new logs [17-07-2022 04:49:01]1764: WAF :: fetched 2 new logs [17-07-2022 04:58:01]27197: WAF :: fetched 9 new logs [17-07-2022 05:00:02]32441: WAF :: fetched 2 new logs [17-07-2022 05:01:42]3209: Starting weekly scan on files updated within a week [17-07-2022 05:06:01]17256: WAF :: fetched 1 new logs [17-07-2022 05:11:01]30726: WAF :: fetched 26 new logs [17-07-2022 05:12:02]1223: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658045522 [17-07-2022 05:12:02]1223: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 05:12:04]1223: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 05:12:06]1223: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-0512/20220717-051202-YtPEUjONZd6hfO72Pv4x5wAAAAY [17-07-2022 05:12:06]1223: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 05:12:06]1223: WAF :: fetched 2 new logs [17-07-2022 05:14:02]7048: WAF :: fetched 37 new logs [17-07-2022 05:16:02]12350: WAF :: fetched 1 new logs [17-07-2022 05:17:01]14935: WAF :: fetched 20 new logs [17-07-2022 05:18:02]17957: WAF :: fetched 1 new logs [17-07-2022 05:19:01]20824: WAF :: fetched 1 new logs [17-07-2022 05:21:02]26470: WAF :: fetched 5 new logs [17-07-2022 05:22:01]29242: WAF :: fetched 1 new logs [17-07-2022 05:24:02]2555: WAF :: fetched 31 new logs [17-07-2022 05:25:01]5367: WAF :: fetched 37 new logs [17-07-2022 05:26:02]8368: WAF :: fetched 26 new logs [17-07-2022 05:27:01]11022: WAF :: fetched 1 new logs [17-07-2022 05:28:02]13891: WAF :: fetched 6 new logs [17-07-2022 05:29:01]16582: WAF :: fetched 17 new logs [17-07-2022 05:30:01]19276: WAF :: fetched 7 new logs [17-07-2022 05:31:01]21991: WAF :: fetched 46 new logs [17-07-2022 05:32:01]24563: WAF :: fetched 28 new logs [17-07-2022 05:33:02]27210: WAF :: fetched 30 new logs [17-07-2022 05:35:02]32492: WAF :: fetched 17 new logs [17-07-2022 05:36:01]2700: WAF :: fetched 7 new logs [17-07-2022 05:37:01]5302: WAF :: fetched 1 new logs [17-07-2022 05:41:01]15922: Checking for user cron vulnerabilities [17-07-2022 05:42:01]18596: WAF :: fetched 3 new logs [17-07-2022 05:44:01]23881: Checking ditributed CMS bruteforce attacks [17-07-2022 05:44:06]23881: WAF :: fetched 1 new logs [17-07-2022 05:45:02]26495: WAF :: fetched 1 new logs [17-07-2022 05:48:01]1926: WAF :: fetched 1 new logs [17-07-2022 05:54:02]17973: WAF :: fetched 1 new logs [17-07-2022 05:55:02]20673: WAF :: fetched 1 new logs [17-07-2022 05:58:02]28586: WAF :: fetched 1 new logs [17-07-2022 06:01:02]4661: WAF :: fetched 24 new logs [17-07-2022 06:05:02]15389: WAF :: fetched 5 new logs [17-07-2022 06:06:02]18108: WAF :: fetched 27 new logs [17-07-2022 06:07:01]20702: WAF :: fetched 30 new logs [17-07-2022 06:08:02]23307: WAF :: fetched 24 new logs [17-07-2022 06:09:01]25989: WAF :: fetched 25 new logs [17-07-2022 06:10:01]28602: WAF :: fetched 57 new logs [17-07-2022 06:12:02]1449: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658049122 [17-07-2022 06:12:02]1449: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 06:12:04]1449: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 06:12:06]1449: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-0612/20220717-061202-YtPSYnjVJTtWtyqxuqVhGQAAAAs [17-07-2022 06:12:06]1449: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 06:12:06]1449: WAF :: fetched 44 new logs [17-07-2022 06:13:01]4093: WAF :: fetched 60 new logs [17-07-2022 06:14:02]6891: WAF :: fetched 23 new logs [17-07-2022 06:15:01]9559: WAF :: fetched 6 new logs [17-07-2022 06:17:01]14873: WAF :: fetched 32 new logs [17-07-2022 06:23:02]32283: WAF :: fetched 2 new logs [17-07-2022 06:24:01]2548: WAF :: fetched 1 new logs [17-07-2022 06:26:02]7833: WAF :: fetched 2 new logs [17-07-2022 06:29:02]15845: WAF :: fetched 40 new logs [17-07-2022 06:30:01]18598: WAF :: fetched 9 new logs [17-07-2022 06:31:01]21307: WAF :: fetched 1 new logs [17-07-2022 06:32:02]23966: WAF :: fetched 27 new logs [17-07-2022 06:33:01]26572: WAF :: fetched 1 new logs [17-07-2022 06:35:01]31897: WAF :: fetched 2 new logs [17-07-2022 06:36:02]2232: WAF :: fetched 11 new logs [17-07-2022 06:37:01]4832: WAF :: fetched 8 new logs [17-07-2022 06:41:01]15444: Checking for user cron vulnerabilities [17-07-2022 06:43:02]20739: WAF :: fetched 2 new logs [17-07-2022 06:44:01]23340: Checking ditributed CMS bruteforce attacks [17-07-2022 06:47:01]31262: WAF :: fetched 4 new logs [17-07-2022 06:49:01]4085: WAF :: fetched 4 new logs [17-07-2022 06:51:01]9484: WAF :: fetched 2 new logs [17-07-2022 06:52:01]12075: WAF :: fetched 4 new logs [17-07-2022 06:53:02]14705: WAF :: fetched 1 new logs [17-07-2022 06:55:01]20133: WAF :: fetched 1 new logs [17-07-2022 06:57:02]25376: WAF :: fetched 1 new logs [17-07-2022 06:58:01]27950: WAF :: fetched 1 new logs [17-07-2022 06:59:02]30658: WAF :: fetched 19 new logs [17-07-2022 07:00:01]633: WAF :: fetched 9 new logs [17-07-2022 07:01:01]3837: WAF :: fetched 2 new logs [17-07-2022 07:03:01]8711: WAF :: fetched 1 new logs [17-07-2022 07:09:02]25323: WAF :: fetched 2 new logs [17-07-2022 07:12:02]947: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658052722 [17-07-2022 07:12:02]947: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 07:12:04]947: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 07:12:06]947: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-0712/20220717-071202-YtPgclQHKagtlnooSHjkmgAAAAo [17-07-2022 07:12:06]947: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 07:12:06]947: WAF :: fetched 35 new logs [17-07-2022 07:13:01]3601: WAF :: fetched 9 new logs [17-07-2022 07:15:01]8956: WAF :: fetched 2 new logs [17-07-2022 07:16:02]11623: WAF :: fetched 1 new logs [17-07-2022 07:22:01]27652: WAF :: fetched 1 new logs [17-07-2022 07:24:01]374: WAF :: fetched 1 new logs [17-07-2022 07:32:02]23056: WAF :: fetched 1 new logs [17-07-2022 07:33:01]25664: WAF :: fetched 5 new logs [17-07-2022 07:34:01]28262: WAF :: fetched 1 new logs [17-07-2022 07:37:01]3822: WAF :: fetched 2 new logs [17-07-2022 07:38:02]6451: WAF :: fetched 1 new logs [17-07-2022 07:41:01]14489: WAF :: fetched 1 new logs [17-07-2022 07:41:01]14489: Checking for user cron vulnerabilities [17-07-2022 07:42:02]17135: WAF :: fetched 2 new logs [17-07-2022 07:44:02]22462: Checking ditributed CMS bruteforce attacks [17-07-2022 07:45:01]: Checking for definition updates [17-07-2022 07:46:01]27856: WAF :: fetched 1 new logs [17-07-2022 07:49:02]3276: WAF :: fetched 1 new logs [17-07-2022 07:51:01]8664: WAF :: fetched 29 new logs [17-07-2022 07:53:02]13984: WAF :: fetched 1 new logs [17-07-2022 07:57:03]24707: WAF :: fetched 1 new logs [17-07-2022 08:01:01]3112: WAF :: fetched 1 new logs [17-07-2022 08:02:02]5816: WAF :: fetched 1 new logs [17-07-2022 08:04:01]11071: WAF :: fetched 1 new logs [17-07-2022 08:07:02]19162: WAF :: fetched 24 new logs [17-07-2022 08:08:02]21877: WAF :: fetched 1 new logs [17-07-2022 08:12:01]32439: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658056321 [17-07-2022 08:12:01]32439: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 08:12:03]32439: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 08:12:06]32439: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-0812/20220717-081201-YtPugZ9DxUz_tFpg9tAA3QAAAAc [17-07-2022 08:12:06]32439: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 08:13:02]2668: WAF :: fetched 1 new logs [17-07-2022 08:14:01]5298: WAF :: fetched 1 new logs [17-07-2022 08:16:03]10929: WAF :: fetched 6 new logs [17-07-2022 08:17:02]13685: WAF :: fetched 1 new logs [17-07-2022 08:19:02]19074: WAF :: fetched 1 new logs [17-07-2022 08:21:01]24389: WAF :: fetched 1 new logs [17-07-2022 08:22:02]27007: WAF :: fetched 3 new logs [17-07-2022 08:25:02]2552: WAF :: fetched 1 new logs [17-07-2022 08:26:01]5166: WAF :: fetched 1 new logs [17-07-2022 08:27:02]7891: WAF :: fetched 1 new logs [17-07-2022 08:28:01]10514: WAF :: fetched 2 new logs [17-07-2022 08:31:02]18697: WAF :: fetched 33 new logs [17-07-2022 08:32:01]21334: WAF :: fetched 26 new logs [17-07-2022 08:33:01]23952: WAF :: fetched 1 new logs [17-07-2022 08:35:01]29336: WAF :: fetched 1 new logs [17-07-2022 08:37:01]3054: WAF :: fetched 1 new logs [17-07-2022 08:38:03]5989: WAF :: fetched 1 new logs [17-07-2022 08:40:01]11442: WAF :: fetched 1 new logs [17-07-2022 08:41:02]14130: WAF :: fetched 2 new logs [17-07-2022 08:41:02]14130: Checking for user cron vulnerabilities [17-07-2022 08:42:01]16723: WAF :: fetched 1 new logs [17-07-2022 08:43:02]19471: WAF :: fetched 2 new logs [17-07-2022 08:44:01]22133: Checking ditributed CMS bruteforce attacks [17-07-2022 08:44:13]22133: WAF :: fetched 3 new logs [17-07-2022 08:45:03]24932: WAF :: fetched 1 new logs [17-07-2022 08:46:02]27643: WAF :: fetched 31 new logs [17-07-2022 08:47:01]30292: WAF :: fetched 1 new logs [17-07-2022 08:48:02]503: WAF :: fetched 3 new logs [17-07-2022 08:50:02]5865: WAF :: fetched 1 new logs [17-07-2022 08:52:01]11211: WAF :: fetched 1 new logs [17-07-2022 08:54:01]16487: WAF :: fetched 1 new logs [17-07-2022 08:55:01]19264: WAF :: fetched 1 new logs [17-07-2022 08:56:01]21955: WAF :: fetched 1 new logs [17-07-2022 08:58:02]27159: WAF :: fetched 2 new logs [17-07-2022 08:59:02]29769: WAF :: fetched 1 new logs [17-07-2022 09:00:02]32214: WAF :: fetched 5 new logs [17-07-2022 09:01:01]2905: WAF :: fetched 1 new logs [17-07-2022 09:03:01]8198: WAF :: fetched 1 new logs [17-07-2022 09:04:02]10822: WAF :: fetched 1 new logs [17-07-2022 09:06:01]16135: WAF :: fetched 1 new logs [17-07-2022 09:07:01]18841: WAF :: fetched 1 new logs [17-07-2022 09:09:02]24080: WAF :: fetched 2 new logs [17-07-2022 09:10:01]26817: WAF :: fetched 1 new logs [17-07-2022 09:11:04]29494: WAF :: fetched 2 new logs [17-07-2022 09:12:01]32078: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658059921 [17-07-2022 09:12:02]32078: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 09:12:04]32078: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 09:12:06]32078: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-0912/20220717-091202-YtP8khPyu1_Wzys0C5vgDAAAABw [17-07-2022 09:12:06]32078: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 09:12:06]32078: WAF :: fetched 26 new logs [17-07-2022 09:13:02]2333: WAF :: fetched 1 new logs [17-07-2022 09:14:02]5020: WAF :: fetched 1 new logs [17-07-2022 09:16:02]10646: WAF :: fetched 6 new logs [17-07-2022 09:17:01]13276: WAF :: fetched 3 new logs [17-07-2022 09:18:02]15943: WAF :: fetched 4 new logs [17-07-2022 09:19:01]18620: WAF :: fetched 2 new logs [17-07-2022 09:20:02]21407: WAF :: fetched 31 new logs [17-07-2022 09:22:01]26667: WAF :: fetched 29 new logs [17-07-2022 09:25:01]2639: WAF :: fetched 1 new logs [17-07-2022 09:27:01]8181: WAF :: fetched 1 new logs [17-07-2022 09:28:02]10856: WAF :: fetched 1 new logs [17-07-2022 09:29:01]13539: WAF :: fetched 2 new logs [17-07-2022 09:31:02]19100: WAF :: fetched 2 new logs [17-07-2022 09:33:02]24405: WAF :: fetched 3 new logs [17-07-2022 09:34:01]27035: WAF :: fetched 1 new logs [17-07-2022 09:35:01]29739: WAF :: fetched 2 new logs [17-07-2022 09:36:02]32448: WAF :: fetched 2 new logs [17-07-2022 09:37:01]2640: WAF :: fetched 23 new logs [17-07-2022 09:41:02]13411: WAF :: fetched 1 new logs [17-07-2022 09:41:02]13411: Checking for user cron vulnerabilities [17-07-2022 09:44:01]21516: Checking ditributed CMS bruteforce attacks [17-07-2022 09:44:07]21516: WAF :: fetched 5 new logs [17-07-2022 09:48:02]1131: WAF :: fetched 1 new logs [17-07-2022 09:49:01]3801: WAF :: fetched 27 new logs [17-07-2022 09:50:02]6541: WAF :: fetched 15 new logs [17-07-2022 09:53:01]14507: WAF :: fetched 3 new logs [17-07-2022 09:54:01]17113: WAF :: fetched 1 new logs [17-07-2022 09:58:01]27804: WAF :: fetched 2 new logs [17-07-2022 10:09:02]25170: WAF :: fetched 1 new logs [17-07-2022 10:10:03]27870: WAF :: fetched 2 new logs [17-07-2022 10:11:02]30585: WAF :: fetched 1 new logs [17-07-2022 10:12:02]705: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658063522 [17-07-2022 10:12:02]705: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 10:12:04]705: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 10:12:06]705: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-1012/20220717-101202-YtQKoif6xLgtjD2bSR21eQAAAAw [17-07-2022 10:12:06]705: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 10:12:06]705: WAF :: fetched 1 new logs [17-07-2022 10:19:01]19304: WAF :: fetched 1 new logs [17-07-2022 10:22:01]27297: WAF :: fetched 8 new logs [17-07-2022 10:23:02]30008: WAF :: fetched 12 new logs [17-07-2022 10:24:01]32618: WAF :: fetched 1 new logs [17-07-2022 10:25:01]2926: WAF :: fetched 1 new logs [17-07-2022 10:26:02]5542: WAF :: fetched 18 new logs [17-07-2022 10:27:01]8157: WAF :: fetched 16 new logs [17-07-2022 10:28:02]10793: WAF :: fetched 25 new logs [17-07-2022 10:29:01]13455: WAF :: fetched 10 new logs [17-07-2022 10:30:01]16170: WAF :: fetched 2 new logs [17-07-2022 10:38:01]5428: WAF :: fetched 1 new logs [17-07-2022 10:40:02]10776: WAF :: fetched 2 new logs [17-07-2022 10:41:01]13427: WAF :: fetched 4 new logs [17-07-2022 10:41:01]13427: Checking for user cron vulnerabilities [17-07-2022 10:43:01]18673: WAF :: fetched 3 new logs [17-07-2022 10:44:01]21282: Checking ditributed CMS bruteforce attacks [17-07-2022 10:45:02]23977: WAF :: fetched 1 new logs [17-07-2022 10:46:01]26722: WAF :: fetched 3 new logs [17-07-2022 10:47:02]29366: WAF :: fetched 24 new logs [17-07-2022 10:48:01]31962: WAF :: fetched 18 new logs [17-07-2022 10:49:01]2165: WAF :: fetched 10 new logs [17-07-2022 10:52:02]10240: WAF :: fetched 1 new logs [17-07-2022 10:55:02]19672: WAF :: fetched 3 new logs [17-07-2022 10:56:02]22361: WAF :: fetched 1 new logs [17-07-2022 11:00:01]32677: WAF :: fetched 1 new logs [17-07-2022 11:04:01]11496: WAF :: fetched 7 new logs [17-07-2022 11:06:02]16830: WAF :: fetched 5 new logs [17-07-2022 11:07:01]19504: WAF :: fetched 45 new logs [17-07-2022 11:07:49]19681: Performed RBL check for 23.111.136.34. [17-07-2022 11:08:02]22120: WAF :: fetched 8 new logs [17-07-2022 11:09:03]24713: WAF :: fetched 2 new logs [17-07-2022 11:11:01]30182: WAF :: fetched 1 new logs [17-07-2022 11:12:01]316: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658067121 [17-07-2022 11:12:01]316: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 11:12:03]316: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 11:12:05]316: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-1112/20220717-111201-YtQYsZyjJYNNYZIfNvVJWwAAABE [17-07-2022 11:12:05]316: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [17-07-2022 11:12:07]316: WAF :: fetched 6 new logs [17-07-2022 11:15:02]8425: WAF :: fetched 2 new logs [17-07-2022 11:33:01]24216: WAF :: fetched 3 new logs [17-07-2022 11:35:02]29718: WAF :: fetched 13 new logs [17-07-2022 11:36:02]32427: WAF :: fetched 5 new logs [17-07-2022 11:37:01]2640: WAF :: fetched 2 new logs [17-07-2022 11:38:02]5270: WAF :: fetched 1 new logs [17-07-2022 11:41:02]13296: Checking for user cron vulnerabilities [17-07-2022 11:42:01]16164: WAF :: fetched 2 new logs [17-07-2022 11:43:02]19013: WAF :: fetched 1 new logs [17-07-2022 11:44:01]21642: Checking ditributed CMS bruteforce attacks [17-07-2022 11:44:05]21642: WAF :: fetched 2 new logs [17-07-2022 11:47:01]29642: WAF :: fetched 1 new logs [17-07-2022 11:49:02]2444: WAF :: fetched 4 new logs [17-07-2022 11:50:01]5073: WAF :: fetched 2 new logs [17-07-2022 11:51:02]7871: WAF :: fetched 74 new logs [17-07-2022 11:52:03]10470: WAF :: fetched 82 new logs [17-07-2022 11:53:01]13075: WAF :: fetched 6 new logs [17-07-2022 11:54:02]15680: WAF :: fetched 18 new logs [17-07-2022 11:55:02]18385: WAF :: fetched 15 new logs [17-07-2022 11:56:01]21123: WAF :: fetched 37 new logs [17-07-2022 11:58:02]26409: WAF :: fetched 4 new logs [17-07-2022 11:59:02]29071: WAF :: fetched 26 new logs [17-07-2022 12:00:01]31406: WAF :: fetched 34 new logs [17-07-2022 12:01:02]2278: WAF :: fetched 5 new logs [17-07-2022 12:02:02]5239: WAF :: fetched 2 new logs [17-07-2022 12:03:03]8421: WAF :: fetched 2 new logs [17-07-2022 12:06:02]17306: WAF :: fetched 1 new logs [17-07-2022 12:09:02]25431: WAF :: fetched 1 new logs [17-07-2022 12:10:01]28070: WAF :: fetched 4 new logs [17-07-2022 12:11:02]30827: WAF :: fetched 2 new logs [17-07-2022 12:12:02]1047: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658070722 [17-07-2022 12:12:02]1047: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 12:12:04]1047: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 12:12:04]1047: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-1212/20220717-121202-YtQmwtdSaOivL0Z-hnMVcQAAAAY [17-07-2022 12:12:04]1047: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [17-07-2022 12:12:04]1047: WAF :: fetched 1 new logs [17-07-2022 12:13:01]3709: WAF :: fetched 1 new logs [17-07-2022 12:14:02]6319: WAF :: fetched 2 new logs [17-07-2022 12:16:02]11742: WAF :: fetched 30 new logs [17-07-2022 12:17:02]14353: WAF :: fetched 30 new logs [17-07-2022 12:18:02]16976: WAF :: fetched 28 new logs [17-07-2022 12:21:02]25201: WAF :: fetched 4 new logs [17-07-2022 12:22:01]27784: WAF :: fetched 3 new logs [17-07-2022 12:23:02]30404: WAF :: fetched 1 new logs [17-07-2022 12:24:01]548: WAF :: fetched 1 new logs [17-07-2022 12:26:02]5924: WAF :: fetched 1 new logs [17-07-2022 12:29:02]13848: WAF :: fetched 3 new logs [17-07-2022 12:30:01]16496: WAF :: fetched 15 new logs [17-07-2022 12:31:02]19362: WAF :: fetched 7 new logs [17-07-2022 12:32:02]21999: WAF :: fetched 5 new logs [17-07-2022 12:33:02]24621: WAF :: fetched 6 new logs [17-07-2022 12:34:02]27226: WAF :: fetched 21 new logs [17-07-2022 12:35:01]29871: WAF :: fetched 20 new logs [17-07-2022 12:36:02]32617: WAF :: fetched 31 new logs [17-07-2022 12:37:01]2835: WAF :: fetched 33 new logs [17-07-2022 12:38:01]5470: WAF :: fetched 16 new logs [17-07-2022 12:39:02]8206: WAF :: fetched 68 new logs [17-07-2022 12:40:01]10910: WAF :: fetched 31 new logs [17-07-2022 12:41:02]13675: WAF :: fetched 31 new logs [17-07-2022 12:41:02]13675: Checking for user cron vulnerabilities [17-07-2022 12:42:02]16301: WAF :: fetched 14 new logs [17-07-2022 12:43:01]19018: WAF :: fetched 6 new logs [17-07-2022 12:44:01]21722: Checking ditributed CMS bruteforce attacks [17-07-2022 12:44:02]21722: WAF :: fetched 12 new logs [17-07-2022 12:45:01]: Checking for software updates [17-07-2022 12:45:01]24337: WAF :: fetched 12 new logs [17-07-2022 12:46:02]27105: WAF :: fetched 6 new logs [17-07-2022 12:48:01]32284: WAF :: fetched 3 new logs [17-07-2022 12:49:02]2566: WAF :: fetched 3 new logs [17-07-2022 12:51:01]8210: WAF :: fetched 4 new logs [17-07-2022 12:53:01]13602: WAF :: fetched 2 new logs [17-07-2022 12:54:02]16219: WAF :: fetched 6 new logs [17-07-2022 12:56:01]21639: WAF :: fetched 1 new logs [17-07-2022 12:59:02]29696: WAF :: fetched 1 new logs [17-07-2022 13:03:01]8739: WAF :: fetched 2 new logs [17-07-2022 13:04:02]11369: WAF :: fetched 3 new logs [17-07-2022 13:05:03]13981: WAF :: fetched 3 new logs [17-07-2022 13:06:02]16752: WAF :: fetched 1 new logs [17-07-2022 13:08:03]22105: WAF :: fetched 3 new logs [17-07-2022 13:12:02]1033: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658074322 [17-07-2022 13:12:02]1033: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 13:12:04]1033: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 13:12:04]1033: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-1312/20220717-131202-YtQ00tkWUXkygRTLxRLYqAAAAC4 [17-07-2022 13:12:04]1033: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 13:12:07]1033: WAF :: fetched 622 new logs [17-07-2022 13:13:01]3840: WAF :: fetched 1 new logs [17-07-2022 13:15:03]9144: WAF :: fetched 2 new logs [17-07-2022 13:16:02]11881: WAF :: fetched 11 new logs [17-07-2022 13:17:01]14484: WAF :: fetched 11 new logs [17-07-2022 13:18:02]17154: WAF :: fetched 18 new logs [17-07-2022 13:19:02]19851: WAF :: fetched 4 new logs [17-07-2022 13:20:01]22527: WAF :: fetched 8 new logs [17-07-2022 13:21:02]25294: WAF :: fetched 18 new logs [17-07-2022 13:22:01]27889: WAF :: fetched 12 new logs [17-07-2022 13:23:01]30525: WAF :: fetched 21 new logs [17-07-2022 13:24:02]777: WAF :: fetched 20 new logs [17-07-2022 13:25:01]3492: WAF :: fetched 14 new logs [17-07-2022 13:26:02]6297: WAF :: fetched 26 new logs [17-07-2022 13:27:01]9005: WAF :: fetched 11 new logs [17-07-2022 13:28:02]11765: WAF :: fetched 17 new logs [17-07-2022 13:29:02]14456: WAF :: fetched 45 new logs [17-07-2022 13:30:01]17149: WAF :: fetched 33 new logs [17-07-2022 13:31:02]20072: WAF :: fetched 33 new logs [17-07-2022 13:32:01]22726: WAF :: fetched 35 new logs [17-07-2022 13:33:04]25335: WAF :: fetched 33 new logs [17-07-2022 13:34:02]27983: WAF :: fetched 22 new logs [17-07-2022 13:35:01]30588: WAF :: fetched 35 new logs [17-07-2022 13:36:01]949: WAF :: fetched 3 new logs [17-07-2022 13:37:01]3552: WAF :: fetched 18 new logs [17-07-2022 13:38:01]6191: WAF :: fetched 20 new logs [17-07-2022 13:39:02]8899: WAF :: fetched 44 new logs [17-07-2022 13:40:01]11564: WAF :: fetched 31 new logs [17-07-2022 13:41:02]14405: WAF :: fetched 66 new logs [17-07-2022 13:41:02]14405: Checking for user cron vulnerabilities [17-07-2022 13:42:02]17006: WAF :: fetched 31 new logs [17-07-2022 13:43:01]19776: WAF :: fetched 16 new logs [17-07-2022 13:44:02]22443: Checking ditributed CMS bruteforce attacks [17-07-2022 13:44:03]22443: WAF :: fetched 27 new logs [17-07-2022 13:45:01]: Checking for definition updates [17-07-2022 13:45:01]25122: WAF :: fetched 32 new logs [17-07-2022 13:46:01]27934: WAF :: fetched 23 new logs [17-07-2022 13:47:02]30576: WAF :: fetched 13 new logs [17-07-2022 13:48:01]801: WAF :: fetched 24 new logs [17-07-2022 13:49:02]3482: WAF :: fetched 9 new logs [17-07-2022 13:50:01]6073: WAF :: fetched 41 new logs [17-07-2022 13:51:01]8905: WAF :: fetched 10 new logs [17-07-2022 13:52:02]11592: WAF :: fetched 10 new logs [17-07-2022 13:53:01]14159: WAF :: fetched 1 new logs [17-07-2022 13:54:02]16799: WAF :: fetched 10 new logs [17-07-2022 13:55:02]19516: WAF :: fetched 10 new logs [17-07-2022 14:00:01]32730: WAF :: fetched 10 new logs [17-07-2022 14:01:02]3610: WAF :: fetched 14 new logs [17-07-2022 14:02:01]6272: WAF :: fetched 14 new logs [17-07-2022 14:03:02]8919: WAF :: fetched 2 new logs [17-07-2022 14:04:01]11509: WAF :: fetched 25 new logs [17-07-2022 14:05:04]14138: WAF :: fetched 4 new logs [17-07-2022 14:07:02]19614: WAF :: fetched 8 new logs [17-07-2022 14:08:01]22243: WAF :: fetched 61 new logs [17-07-2022 14:09:01]24894: WAF :: fetched 28 new logs [17-07-2022 14:10:02]27570: WAF :: fetched 5 new logs [17-07-2022 14:11:01]29965: WAF :: fetched 14 new logs [17-07-2022 14:12:01]491: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658077921 [17-07-2022 14:12:01]491: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 14:12:03]491: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 14:12:05]491: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-1412/20220717-141201-YtRC4cMQbC3J0d4blTPhngAAAAE [17-07-2022 14:12:05]491: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 14:12:05]491: WAF :: fetched 11 new logs [17-07-2022 14:13:02]3185: WAF :: fetched 4 new logs [17-07-2022 14:14:03]5760: WAF :: fetched 10 new logs [17-07-2022 14:15:02]8466: WAF :: fetched 10 new logs [17-07-2022 14:16:01]11297: WAF :: fetched 2 new logs [17-07-2022 14:17:02]14005: WAF :: fetched 5 new logs [17-07-2022 14:18:01]16829: WAF :: fetched 10 new logs [17-07-2022 14:19:01]19581: WAF :: fetched 6 new logs [17-07-2022 14:20:01]22246: WAF :: fetched 9 new logs [17-07-2022 14:21:02]25017: WAF :: fetched 3 new logs [17-07-2022 14:22:04]27659: WAF :: fetched 14 new logs [17-07-2022 14:23:01]30274: WAF :: fetched 2 new logs [17-07-2022 14:24:01]415: WAF :: fetched 2 new logs [17-07-2022 14:25:02]3224: WAF :: fetched 27 new logs [17-07-2022 14:26:01]5959: WAF :: fetched 3 new logs [17-07-2022 14:27:02]8657: WAF :: fetched 3 new logs [17-07-2022 14:28:02]11252: WAF :: fetched 1 new logs [17-07-2022 14:29:01]13885: WAF :: fetched 1 new logs [17-07-2022 14:32:01]22178: WAF :: fetched 7 new logs [17-07-2022 14:33:02]24863: WAF :: fetched 1 new logs [17-07-2022 14:34:01]27476: WAF :: fetched 4 new logs [17-07-2022 14:37:02]3160: WAF :: fetched 6 new logs [17-07-2022 14:38:01]5784: WAF :: fetched 3 new logs [17-07-2022 14:39:01]8494: WAF :: fetched 2 new logs [17-07-2022 14:41:02]13932: Checking for user cron vulnerabilities [17-07-2022 14:43:02]19316: WAF :: fetched 1 new logs [17-07-2022 14:44:01]21975: Checking ditributed CMS bruteforce attacks [17-07-2022 14:44:03]21975: WAF :: fetched 8 new logs [17-07-2022 14:45:01]24631: WAF :: fetched 1 new logs [17-07-2022 14:46:02]27416: WAF :: fetched 6 new logs [17-07-2022 14:48:02]32698: WAF :: fetched 3 new logs [17-07-2022 14:49:01]2932: WAF :: fetched 2 new logs [17-07-2022 14:51:02]8395: WAF :: fetched 11 new logs [17-07-2022 14:52:01]10987: WAF :: fetched 1 new logs [17-07-2022 14:53:02]13589: Updated license status via CDN [17-07-2022 14:54:02]16202: WAF :: fetched 3 new logs [17-07-2022 14:55:03]18917: WAF :: fetched 8 new logs [17-07-2022 14:56:01]21656: WAF :: fetched 7 new logs [17-07-2022 14:57:02]24311: WAF :: fetched 8 new logs [17-07-2022 14:59:01]29570: WAF :: fetched 3 new logs [17-07-2022 15:00:02]31920: WAF :: fetched 3 new logs [17-07-2022 15:01:03]2745: Reseting cPGuard inotify settings [17-07-2022 15:01:03]2768: WAF :: fetched 1 new logs [17-07-2022 15:02:02]5456: WAF :: fetched 1 new logs [17-07-2022 15:03:01]8085: WAF :: fetched 2 new logs [17-07-2022 15:04:02]10705: WAF :: fetched 2 new logs [17-07-2022 15:05:01]13288: WAF :: fetched 3 new logs [17-07-2022 15:06:01]16080: WAF :: fetched 2 new logs [17-07-2022 15:07:02]18812: WAF :: fetched 3 new logs [17-07-2022 15:10:02]26785: WAF :: fetched 1 new logs [17-07-2022 15:12:02]32281: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658081522 [17-07-2022 15:12:02]32281: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 15:12:04]32281: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 15:12:06]32281: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-1512/20220717-151202-YtRQ8jLCU7SyzELES6AtfgAAAAM [17-07-2022 15:12:06]32281: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [17-07-2022 15:12:06]32281: WAF :: fetched 1 new logs [17-07-2022 15:13:02]2547: WAF :: fetched 1 new logs [17-07-2022 15:14:02]5225: WAF :: fetched 1 new logs [17-07-2022 15:18:02]15911: WAF :: fetched 97 new logs [17-07-2022 15:19:02]18674: WAF :: fetched 2 new logs [17-07-2022 15:22:02]26756: WAF :: fetched 34 new logs [17-07-2022 15:23:02]29325: WAF :: fetched 121 new logs [17-07-2022 15:24:02]31946: WAF :: fetched 33 new logs [17-07-2022 15:25:02]2165: WAF :: fetched 1 new logs [17-07-2022 15:26:01]4941: WAF :: fetched 2 new logs [17-07-2022 15:27:02]7639: WAF :: fetched 1 new logs [17-07-2022 15:28:02]10320: WAF :: fetched 4 new logs [17-07-2022 15:29:02]12957: WAF :: fetched 1 new logs [17-07-2022 15:33:02]23863: WAF :: fetched 4 new logs [17-07-2022 15:35:02]29238: WAF :: fetched 7 new logs [17-07-2022 15:36:02]32015: WAF :: fetched 3 new logs [17-07-2022 15:37:02]2261: WAF :: fetched 2 new logs [17-07-2022 15:38:03]4868: WAF :: fetched 3 new logs [17-07-2022 15:39:02]7568: WAF :: fetched 4 new logs [17-07-2022 15:40:02]10223: WAF :: fetched 3 new logs [17-07-2022 15:41:02]13020: Checking for user cron vulnerabilities [17-07-2022 15:43:01]18319: WAF :: fetched 3 new logs [17-07-2022 15:44:01]21042: Checking ditributed CMS bruteforce attacks [17-07-2022 15:44:06]21042: WAF :: fetched 2 new logs [17-07-2022 15:45:03]23650: WAF :: fetched 3 new logs [17-07-2022 15:47:02]29162: WAF :: fetched 5 new logs [17-07-2022 15:49:01]2146: WAF :: fetched 1 new logs [17-07-2022 15:50:02]4944: WAF :: fetched 1 new logs [17-07-2022 15:52:03]10304: WAF :: fetched 7 new logs [17-07-2022 15:53:01]13005: WAF :: fetched 2 new logs [17-07-2022 15:54:02]15686: WAF :: fetched 5 new logs [17-07-2022 15:55:01]18548: WAF :: fetched 4 new logs [17-07-2022 15:56:02]21363: WAF :: fetched 2 new logs [17-07-2022 15:57:02]24025: WAF :: fetched 7 new logs [17-07-2022 15:58:01]26722: WAF :: fetched 1 new logs [17-07-2022 15:59:02]29340: WAF :: fetched 4 new logs [17-07-2022 16:00:02]31735: WAF :: fetched 6 new logs [17-07-2022 16:01:01]2661: WAF :: fetched 2 new logs [17-07-2022 16:02:02]5396: WAF :: fetched 7 new logs [17-07-2022 16:03:02]8112: WAF :: fetched 13 new logs [17-07-2022 16:04:01]10835: WAF :: fetched 20 new logs [17-07-2022 16:05:02]13573: WAF :: fetched 3 new logs [17-07-2022 16:06:02]16300: WAF :: fetched 3 new logs [17-07-2022 16:08:02]21713: WAF :: fetched 4 new logs [17-07-2022 16:09:01]24362: WAF :: fetched 4 new logs [17-07-2022 16:11:02]29727: WAF :: fetched 1 new logs [17-07-2022 16:12:02]32354: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658085122 [17-07-2022 16:12:02]32354: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 16:12:04]32354: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 16:12:04]32354: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-1612/20220717-161202-YtRfAj8xK9dgQ3666fEnkAAAACE [17-07-2022 16:12:04]32354: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [17-07-2022 16:12:04]32354: WAF :: fetched 1 new logs [17-07-2022 16:13:01]2549: WAF :: fetched 1 new logs [17-07-2022 16:16:02]10477: WAF :: fetched 1 new logs [17-07-2022 16:17:01]13074: WAF :: fetched 33 new logs [17-07-2022 16:18:02]15708: WAF :: fetched 5 new logs [17-07-2022 16:19:01]18433: WAF :: fetched 1 new logs [17-07-2022 16:20:02]21137: WAF :: fetched 4 new logs [17-07-2022 16:22:02]26517: WAF :: fetched 2 new logs [17-07-2022 16:23:02]29152: WAF :: fetched 1 new logs [17-07-2022 16:33:02]23399: WAF :: fetched 1 new logs [17-07-2022 16:34:01]26098: WAF :: fetched 6 new logs [17-07-2022 16:35:01]28775: WAF :: fetched 2 new logs [17-07-2022 16:40:01]9889: WAF :: fetched 1 new logs [17-07-2022 16:41:02]12704: WAF :: fetched 2 new logs [17-07-2022 16:41:02]12704: Checking for user cron vulnerabilities [17-07-2022 16:42:02]15399: WAF :: fetched 2 new logs [17-07-2022 16:43:01]18150: WAF :: fetched 2 new logs [17-07-2022 16:44:02]20821: Checking ditributed CMS bruteforce attacks [17-07-2022 16:44:04]20821: WAF :: fetched 1 new logs [17-07-2022 16:50:01]4386: WAF :: fetched 16 new logs [17-07-2022 16:51:02]7112: WAF :: fetched 22 new logs [17-07-2022 16:52:02]9849: WAF :: fetched 4 new logs [17-07-2022 16:55:01]17862: WAF :: fetched 33 new logs [17-07-2022 16:56:02]20620: WAF :: fetched 34 new logs [17-07-2022 16:59:02]28611: WAF :: fetched 33 new logs [17-07-2022 17:00:01]31036: WAF :: fetched 34 new logs [17-07-2022 17:01:04]1783: WAF :: fetched 33 new logs [17-07-2022 17:02:02]4533: WAF :: fetched 5 new logs [17-07-2022 17:03:01]7191: WAF :: fetched 2 new logs [17-07-2022 17:05:02]12468: WAF :: fetched 1 new logs [17-07-2022 17:09:01]23110: WAF :: fetched 2 new logs [17-07-2022 17:10:01]25803: WAF :: fetched 1 new logs [17-07-2022 17:11:04]28443: WAF :: fetched 1 new logs [17-07-2022 17:12:02]30724: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658088722 [17-07-2022 17:12:02]30724: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 17:12:04]30724: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 17:12:04]30724: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-1712/20220717-171202-YtRtEpAB77E--Ds26YV_lgAAABw [17-07-2022 17:12:04]30724: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 17:12:05]30724: WAF :: fetched 570 new logs [17-07-2022 17:15:01]6627: WAF :: fetched 30 new logs [17-07-2022 17:22:02]25307: WAF :: fetched 12 new logs [17-07-2022 17:23:01]27943: WAF :: fetched 4 new logs [17-07-2022 17:27:02]6242: WAF :: fetched 13 new logs [17-07-2022 17:28:01]8844: WAF :: fetched 2 new logs [17-07-2022 17:29:01]11557: WAF :: fetched 2 new logs [17-07-2022 17:32:02]19782: WAF :: fetched 29 new logs [17-07-2022 17:34:01]25023: WAF :: fetched 1 new logs [17-07-2022 17:36:01]30266: WAF :: fetched 4 new logs [17-07-2022 17:37:02]481: WAF :: fetched 6 new logs [17-07-2022 17:38:02]3230: WAF :: fetched 4 new logs [17-07-2022 17:39:01]5855: WAF :: fetched 6 new logs [17-07-2022 17:41:02]11328: Checking for user cron vulnerabilities [17-07-2022 17:44:01]19438: Checking ditributed CMS bruteforce attacks [17-07-2022 17:44:03]19438: WAF :: fetched 1 new logs [17-07-2022 17:45:01]22125: WAF :: fetched 5 new logs [17-07-2022 17:46:02]24835: WAF :: fetched 2 new logs [17-07-2022 17:47:01]27517: WAF :: fetched 3 new logs [17-07-2022 17:54:01]13821: WAF :: fetched 3 new logs [17-07-2022 17:55:02]16505: WAF :: fetched 2 new logs [17-07-2022 17:56:02]19289: WAF :: fetched 20 new logs [17-07-2022 17:58:01]24760: WAF :: fetched 34 new logs [17-07-2022 18:00:01]29819: WAF :: fetched 4 new logs [17-07-2022 18:01:01]601: WAF :: fetched 1 new logs [17-07-2022 18:02:01]3408: WAF :: fetched 3 new logs [17-07-2022 18:03:02]6013: WAF :: fetched 2 new logs [17-07-2022 18:05:02]11410: WAF :: fetched 1 new logs [17-07-2022 18:07:02]17165: WAF :: fetched 4 new logs [17-07-2022 18:08:01]19871: WAF :: fetched 14 new logs [17-07-2022 18:09:02]22587: WAF :: fetched 5 new logs [17-07-2022 18:10:02]25237: WAF :: fetched 1 new logs [17-07-2022 18:11:01]28053: WAF :: fetched 1 new logs [17-07-2022 18:12:01]30798: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658092321 [17-07-2022 18:12:01]30798: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 18:12:03]30798: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 18:12:05]30798: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-1812/20220717-181201-YtR7ISCxiCsUb1P0mr0xRQAAAAU [17-07-2022 18:12:05]30798: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 18:12:05]30798: WAF :: fetched 38 new logs [17-07-2022 18:13:02]1086: WAF :: fetched 2 new logs [17-07-2022 18:14:02]3669: WAF :: fetched 4 new logs [17-07-2022 18:15:01]6365: WAF :: fetched 2 new logs [17-07-2022 18:17:01]11781: WAF :: fetched 1 new logs [17-07-2022 18:19:01]17049: WAF :: fetched 2 new logs [17-07-2022 18:20:01]19736: WAF :: fetched 1 new logs [17-07-2022 18:22:02]25172: WAF :: fetched 4 new logs [17-07-2022 18:27:02]6377: WAF :: fetched 14 new logs [17-07-2022 18:28:01]9001: WAF :: fetched 3 new logs [17-07-2022 18:29:02]11678: WAF :: fetched 2 new logs [17-07-2022 18:35:01]27788: WAF :: fetched 1 new logs [17-07-2022 18:37:01]771: WAF :: fetched 4 new logs [17-07-2022 18:41:01]11373: Checking for user cron vulnerabilities [17-07-2022 18:44:01]19416: Checking ditributed CMS bruteforce attacks [17-07-2022 18:45:02]22084: WAF :: fetched 2 new logs [17-07-2022 18:47:01]27610: WAF :: fetched 1 new logs [17-07-2022 18:47:01]27611: httpd.conf changed. Refreshing watchlist. [17-07-2022 18:48:01]30329: WAF :: fetched 2 new logs [17-07-2022 18:50:02]3329: WAF :: fetched 3 new logs [17-07-2022 18:52:02]8822: WAF :: fetched 71 new logs [17-07-2022 18:53:01]11510: WAF :: fetched 96 new logs [17-07-2022 18:53:01]11533: httpd.conf changed. Refreshing watchlist. [17-07-2022 18:54:01]14193: WAF :: fetched 5 new logs [17-07-2022 18:55:02]16860: WAF :: fetched 3 new logs [17-07-2022 18:58:02]25081: WAF :: fetched 1 new logs [17-07-2022 19:01:02]979: WAF :: fetched 2 new logs [17-07-2022 19:02:02]3762: WAF :: fetched 1 new logs [17-07-2022 19:03:01]6615: WAF :: fetched 2 new logs [17-07-2022 19:05:01]12056: WAF :: fetched 1 new logs [17-07-2022 19:06:01]14717: WAF :: fetched 47 new logs [17-07-2022 19:07:02]17481: WAF :: fetched 1 new logs [17-07-2022 19:12:02]31083: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658095922 [17-07-2022 19:12:02]31083: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 19:12:04]31083: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 19:12:06]31083: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-1912/20220717-191202-YtSJMjMP0UNNqkKJiC3LGQAAACc [17-07-2022 19:12:06]31083: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 19:12:06]31083: WAF :: fetched 5 new logs [17-07-2022 19:16:01]9346: WAF :: fetched 25 new logs [17-07-2022 19:19:02]17341: WAF :: fetched 1 new logs [17-07-2022 19:24:02]30775: WAF :: fetched 2 new logs [17-07-2022 19:33:01]22468: WAF :: fetched 1 new logs [17-07-2022 19:34:02]25146: WAF :: fetched 1 new logs [17-07-2022 19:40:02]8928: WAF :: fetched 2 new logs [17-07-2022 19:41:01]11661: WAF :: fetched 2 new logs [17-07-2022 19:41:01]11661: Checking for user cron vulnerabilities [17-07-2022 19:42:01]14352: WAF :: fetched 1 new logs [17-07-2022 19:44:01]19716: Checking ditributed CMS bruteforce attacks [17-07-2022 19:45:01]: Checking for definition updates [17-07-2022 19:45:01]22384: WAF :: fetched 4 new logs [17-07-2022 19:46:01]25045: WAF :: fetched 4 new logs [17-07-2022 19:47:02]27776: WAF :: fetched 1 new logs [17-07-2022 19:52:01]8564: WAF :: fetched 6 new logs [17-07-2022 19:53:01]11219: WAF :: fetched 27 new logs [17-07-2022 20:00:02]29741: WAF :: fetched 1 new logs [17-07-2022 20:04:02]8404: WAF :: fetched 1 new logs [17-07-2022 20:05:02]11048: WAF :: fetched 3 new logs [17-07-2022 20:06:01]13709: WAF :: fetched 23 new logs [17-07-2022 20:08:02]19177: WAF :: fetched 3 new logs [17-07-2022 20:12:03]29877: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658099523 [17-07-2022 20:12:03]29877: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 20:12:05]29877: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 20:12:07]29877: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-2012/20220717-201203-YtSXQ8hMPmRacyFIwALxmgAAAAM [17-07-2022 20:12:07]29877: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [17-07-2022 20:12:07]29877: WAF :: fetched 1 new logs [17-07-2022 20:13:01]32459: WAF :: fetched 1 new logs [17-07-2022 20:15:02]5350: WAF :: fetched 1 new logs [17-07-2022 20:16:01]8023: WAF :: fetched 1 new logs [17-07-2022 20:17:02]10681: WAF :: fetched 2 new logs [17-07-2022 20:18:01]13306: WAF :: fetched 1 new logs [17-07-2022 20:19:02]15930: WAF :: fetched 1 new logs [17-07-2022 20:20:02]18617: WAF :: fetched 3 new logs [17-07-2022 20:21:01]21371: WAF :: fetched 7 new logs [17-07-2022 20:22:02]24072: WAF :: fetched 4 new logs [17-07-2022 20:23:01]26655: WAF :: fetched 34 new logs [17-07-2022 20:24:02]29337: WAF :: fetched 69 new logs [17-07-2022 20:25:01]31931: WAF :: fetched 1 new logs [17-07-2022 20:27:02]4992: WAF :: fetched 34 new logs [17-07-2022 20:28:01]7629: WAF :: fetched 35 new logs [17-07-2022 20:29:02]10277: WAF :: fetched 34 new logs [17-07-2022 20:31:02]15590: WAF :: fetched 38 new logs [17-07-2022 20:32:02]18401: WAF :: fetched 102 new logs [17-07-2022 20:33:02]21038: WAF :: fetched 99 new logs [17-07-2022 20:35:02]26269: WAF :: fetched 2 new logs [17-07-2022 20:36:01]28873: WAF :: fetched 5 new logs [17-07-2022 20:37:02]31561: WAF :: fetched 2 new logs [17-07-2022 20:38:02]1764: WAF :: fetched 3 new logs [17-07-2022 20:41:02]9695: WAF :: fetched 1 new logs [17-07-2022 20:41:02]9695: Checking for user cron vulnerabilities [17-07-2022 20:42:02]12383: WAF :: fetched 7 new logs [17-07-2022 20:44:02]17552: Checking ditributed CMS bruteforce attacks [17-07-2022 20:44:08]17552: WAF :: fetched 1 new logs [17-07-2022 20:47:02]25680: WAF :: fetched 1 new logs [17-07-2022 20:50:02]1320: WAF :: fetched 4 new logs [17-07-2022 20:51:01]4114: WAF :: fetched 1 new logs [17-07-2022 20:52:02]6881: httpd.conf changed. Refreshing watchlist. [17-07-2022 20:52:04]6884: WAF :: fetched 3 new logs [17-07-2022 20:54:01]12013: WAF :: fetched 3 new logs [17-07-2022 20:56:02]17259: WAF :: fetched 2 new logs [17-07-2022 21:01:02]30947: WAF :: fetched 1 new logs [17-07-2022 21:04:02]6653: WAF :: fetched 3 new logs [17-07-2022 21:06:02]11983: WAF :: fetched 9 new logs [17-07-2022 21:07:02]14667: WAF :: fetched 2 new logs [17-07-2022 21:09:01]19980: WAF :: fetched 2 new logs [17-07-2022 21:10:02]22647: WAF :: fetched 9 new logs [17-07-2022 21:12:01]28085: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658103121 [17-07-2022 21:12:01]28085: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 21:12:03]28085: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 21:12:04]28085: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-2112/20220717-211201-YtSlUUhOY_yPXWjQWukDWQAAAAM [17-07-2022 21:12:04]28085: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 21:12:04]28085: WAF :: fetched 411 new logs [17-07-2022 21:13:02]30833: WAF :: fetched 1 new logs [17-07-2022 21:14:01]1034: WAF :: fetched 2 new logs [17-07-2022 21:15:01]3452: WAF :: fetched 2 new logs [17-07-2022 21:16:02]6673: WAF :: fetched 1 new logs [17-07-2022 21:17:01]9453: WAF :: fetched 2 new logs [17-07-2022 21:20:01]17626: WAF :: fetched 2 new logs [17-07-2022 21:21:02]20507: WAF :: fetched 5 new logs [17-07-2022 21:22:01]23247: WAF :: fetched 3 new logs [17-07-2022 21:26:01]1755: WAF :: fetched 1 new logs [17-07-2022 21:28:01]7114: WAF :: fetched 2 new logs [17-07-2022 21:30:02]12280: WAF :: fetched 1 new logs [17-07-2022 21:32:02]17659: WAF :: fetched 4 new logs [17-07-2022 21:33:01]20503: WAF :: fetched 2 new logs [17-07-2022 21:35:01]25766: WAF :: fetched 3 new logs [17-07-2022 21:40:02]7014: WAF :: fetched 2 new logs [17-07-2022 21:41:01]9621: Checking for user cron vulnerabilities [17-07-2022 21:44:01]17495: Checking ditributed CMS bruteforce attacks [17-07-2022 21:45:01]20292: WAF :: fetched 2 new logs [17-07-2022 21:46:02]23056: WAF :: fetched 5 new logs [17-07-2022 21:49:01]30926: WAF :: fetched 2 new logs [17-07-2022 21:51:02]3965: WAF :: fetched 1 new logs [17-07-2022 21:52:01]6759: WAF :: fetched 1 new logs [17-07-2022 21:54:02]12380: WAF :: fetched 1 new logs [17-07-2022 21:56:02]17598: WAF :: fetched 3 new logs [17-07-2022 22:00:01]27862: WAF :: fetched 4 new logs [17-07-2022 22:05:01]9264: WAF :: fetched 3 new logs [17-07-2022 22:07:11]14550: Performing Domain reputation checks [17-07-2022 22:09:03]20072: WAF :: fetched 1 new logs [17-07-2022 22:12:02]27995: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658106722 [17-07-2022 22:12:02]27995: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 22:12:04]27995: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 22:12:06]27995: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-2212/20220717-221202-YtSzYlIqwHXCkVAFEv49KAAAABg [17-07-2022 22:12:06]27995: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 22:12:06]27995: WAF :: fetched 1 new logs [17-07-2022 22:14:02]918: WAF :: fetched 3 new logs [17-07-2022 22:15:01]3558: WAF :: fetched 1 new logs [17-07-2022 22:20:02]16765: WAF :: fetched 2 new logs [17-07-2022 22:21:02]19566: WAF :: fetched 18 new logs [17-07-2022 22:22:01]22223: WAF :: fetched 1 new logs [17-07-2022 22:24:01]27683: WAF :: fetched 3 new logs [17-07-2022 22:25:01]30371: WAF :: fetched 1 new logs [17-07-2022 22:26:02]613: WAF :: fetched 5 new logs [17-07-2022 22:27:02]3322: WAF :: fetched 3 new logs [17-07-2022 22:28:01]6004: WAF :: fetched 1 new logs [17-07-2022 22:29:02]8666: WAF :: fetched 2 new logs [17-07-2022 22:30:01]11273: WAF :: fetched 1 new logs [17-07-2022 22:31:02]13963: WAF :: fetched 1 new logs [17-07-2022 22:33:02]19329: WAF :: fetched 3 new logs [17-07-2022 22:35:01]24493: WAF :: fetched 1 new logs [17-07-2022 22:37:03]29693: WAF :: fetched 1 new logs [17-07-2022 22:38:01]32409: WAF :: fetched 5 new logs [17-07-2022 22:39:02]2632: WAF :: fetched 1 new logs [17-07-2022 22:41:01]7894: WAF :: fetched 1 new logs [17-07-2022 22:41:01]7894: Checking for user cron vulnerabilities [17-07-2022 22:43:02]13139: WAF :: fetched 1 new logs [17-07-2022 22:44:01]15828: Checking ditributed CMS bruteforce attacks [17-07-2022 22:44:01]15830: httpd.conf changed. Refreshing watchlist. [17-07-2022 22:44:02]15828: WAF :: fetched 1 new logs [17-07-2022 22:45:02]18602: httpd.conf changed. Refreshing watchlist. [17-07-2022 22:46:02]21267: WAF :: fetched 1 new logs [17-07-2022 22:48:01]26536: WAF :: fetched 1 new logs [17-07-2022 22:49:01]29214: WAF :: fetched 19 new logs [17-07-2022 22:50:02]31872: WAF :: fetched 31 new logs [17-07-2022 22:50:02]31868: httpd.conf changed. Refreshing watchlist. [17-07-2022 22:51:01]2136: WAF :: fetched 1 new logs [17-07-2022 22:52:01]4816: WAF :: fetched 5 new logs [17-07-2022 22:53:02]7460: WAF :: fetched 3 new logs [17-07-2022 22:54:01]10030: WAF :: fetched 1 new logs [17-07-2022 22:55:02]12659: WAF :: fetched 1 new logs [17-07-2022 22:56:02]15315: WAF :: fetched 1 new logs [17-07-2022 22:58:02]20707: WAF :: fetched 1 new logs [17-07-2022 22:59:01]23376: WAF :: fetched 1 new logs [17-07-2022 23:07:01]12175: WAF :: fetched 1 new logs [17-07-2022 23:07:43]12330: Performed RBL check for 23.111.136.34. [17-07-2022 23:09:01]17447: WAF :: fetched 1 new logs [17-07-2022 23:10:01]20208: WAF :: fetched 24 new logs [17-07-2022 23:11:02]22918: WAF :: fetched 2 new logs [17-07-2022 23:12:02]25546: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658110322 [17-07-2022 23:12:02]25546: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [17-07-2022 23:12:04]25546: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [17-07-2022 23:12:05]25546: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220717/20220717-2312/20220717-231202-YtTBcsB0QlwM6jd9TfE9ZgAAAAU [17-07-2022 23:12:05]25546: WAF :: No suitable log file found. Using SQLite.. [17-07-2022 23:12:05]25546: WAF :: fetched 1 new logs [17-07-2022 23:13:01]28244: WAF :: fetched 2 new logs [17-07-2022 23:15:01]1099: WAF :: fetched 2 new logs [17-07-2022 23:16:02]3806: WAF :: fetched 1 new logs [17-07-2022 23:17:01]6349: WAF :: fetched 1 new logs [17-07-2022 23:19:02]11636: WAF :: fetched 2 new logs [17-07-2022 23:20:01]14251: WAF :: fetched 3 new logs [17-07-2022 23:21:02]16926: WAF :: fetched 4 new logs [17-07-2022 23:23:01]22358: WAF :: fetched 1 new logs [17-07-2022 23:25:01]27567: WAF :: fetched 4 new logs [17-07-2022 23:26:02]30201: WAF :: fetched 4 new logs [17-07-2022 23:27:01]304: WAF :: fetched 1 new logs [17-07-2022 23:28:01]3076: WAF :: fetched 1 new logs [17-07-2022 23:30:01]8391: WAF :: fetched 6 new logs [17-07-2022 23:31:04]11113: WAF :: fetched 18 new logs [17-07-2022 23:32:02]13755: WAF :: fetched 3 new logs [17-07-2022 23:34:02]19203: WAF :: fetched 2 new logs [17-07-2022 23:36:02]24465: WAF :: fetched 1 new logs [17-07-2022 23:37:01]27059: WAF :: fetched 2 new logs [17-07-2022 23:38:01]29747: WAF :: fetched 4 new logs [17-07-2022 23:39:02]32407: WAF :: fetched 1 new logs [17-07-2022 23:40:01]2574: WAF :: fetched 5 new logs [17-07-2022 23:41:02]5205: WAF :: fetched 4 new logs [17-07-2022 23:41:02]5205: Checking for user cron vulnerabilities [17-07-2022 23:42:01]7755: WAF :: fetched 3 new logs [17-07-2022 23:43:02]10465: WAF :: fetched 3 new logs [17-07-2022 23:44:01]13057: Checking ditributed CMS bruteforce attacks [17-07-2022 23:44:08]13057: WAF :: fetched 5 new logs [17-07-2022 23:45:01]15674: WAF :: fetched 1 new logs [17-07-2022 23:46:02]18437: WAF :: fetched 18 new logs [17-07-2022 23:47:01]21039: WAF :: fetched 1 new logs [17-07-2022 23:49:02]26302: WAF :: fetched 27 new logs [17-07-2022 23:50:01]28980: WAF :: fetched 1 new logs [17-07-2022 23:51:02]31629: WAF :: fetched 4 new logs [17-07-2022 23:52:02]1801: WAF :: fetched 2 new logs [17-07-2022 23:53:03]4573: WAF :: fetched 1 new logs [17-07-2022 23:54:01]7215: httpd.conf changed. Refreshing watchlist. [17-07-2022 23:55:02]10472: WAF :: fetched 45 new logs [17-07-2022 23:56:01]13838: WAF :: fetched 33 new logs [17-07-2022 23:56:01]13839: httpd.conf changed. Refreshing watchlist. [17-07-2022 23:57:02]16540: WAF :: fetched 1 new logs [17-07-2022 23:58:01]19308: WAF :: fetched 20 new logs [17-07-2022 23:59:01]21911: WAF :: fetched 5 new logs [18-07-2022 00:01:02]27405: httpd.conf changed. Refreshing watchlist. [18-07-2022 00:01:04]27377: WAF :: fetched 2 new logs [18-07-2022 00:01:07]27377: Sending daily report for July 18, 2022 [18-07-2022 00:02:01]30179: WAF :: fetched 3 new logs [18-07-2022 00:02:01]30181: httpd.conf changed. Refreshing watchlist. [18-07-2022 00:03:02]501: WAF :: fetched 4 new logs [18-07-2022 00:03:02]503: httpd.conf changed. Refreshing watchlist. [18-07-2022 00:04:01]3327: httpd.conf changed. Refreshing watchlist. [18-07-2022 00:05:01]5991: Deleted 0 entries older than 6 MONTH from scanner_logs [18-07-2022 00:05:01]5991: Deleted 0 files from Quarantine [18-07-2022 00:06:02]8700: WAF :: fetched 17 new logs [18-07-2022 00:08:02]14024: WAF :: fetched 1 new logs [18-07-2022 00:09:03]16663: WAF :: fetched 2 new logs [18-07-2022 00:12:01]24589: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658113921 [18-07-2022 00:12:01]24589: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 00:12:03]24589: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 00:12:05]24589: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-0012/20220718-001201-YtTPgVLGZonHa_C3p36uQAAAAAM [18-07-2022 00:12:05]24589: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 00:13:02]27290: WAF :: fetched 5 new logs [18-07-2022 00:14:01]29870: WAF :: fetched 2 new logs [18-07-2022 00:16:02]2788: WAF :: fetched 1 new logs [18-07-2022 00:17:01]5459: WAF :: fetched 4 new logs [18-07-2022 00:18:01]8199: WAF :: fetched 2 new logs [18-07-2022 00:28:01]2860: WAF :: fetched 1 new logs [18-07-2022 00:31:01]11269: WAF :: fetched 7 new logs [18-07-2022 00:33:01]16756: WAF :: fetched 1 new logs [18-07-2022 00:34:01]19430: WAF :: fetched 4 new logs [18-07-2022 00:36:01]24917: WAF :: fetched 1 new logs [18-07-2022 00:39:02]570: WAF :: fetched 3 new logs [18-07-2022 00:40:01]3267: WAF :: fetched 2 new logs [18-07-2022 00:41:01]6049: WAF :: fetched 6 new logs [18-07-2022 00:41:01]6049: Checking for user cron vulnerabilities [18-07-2022 00:42:02]8753: WAF :: fetched 7 new logs [18-07-2022 00:43:02]11496: WAF :: fetched 15 new logs [18-07-2022 00:44:01]14121: Checking ditributed CMS bruteforce attacks [18-07-2022 00:44:01]14121: WAF :: fetched 13 new logs [18-07-2022 00:45:02]: Checking for software updates [18-07-2022 00:45:02]16728: WAF :: fetched 3 new logs [18-07-2022 00:46:01]19421: WAF :: fetched 28 new logs [18-07-2022 00:47:02]22078: WAF :: fetched 1 new logs [18-07-2022 00:48:01]24329: WAF :: fetched 2 new logs [18-07-2022 00:49:02]27442: WAF :: fetched 6 new logs [18-07-2022 00:49:02]27432: httpd.conf changed. Refreshing watchlist. [18-07-2022 00:50:01]30055: WAF :: fetched 3 new logs [18-07-2022 00:51:02]372: WAF :: fetched 3 new logs [18-07-2022 00:52:01]3110: WAF :: fetched 1 new logs [18-07-2022 00:53:02]5914: WAF :: fetched 4 new logs [18-07-2022 00:54:01]8554: WAF :: fetched 5 new logs [18-07-2022 00:55:01]11172: WAF :: fetched 8 new logs [18-07-2022 00:56:02]13916: WAF :: fetched 1 new logs [18-07-2022 00:57:01]16620: WAF :: fetched 11 new logs [18-07-2022 00:58:02]19604: WAF :: fetched 7 new logs [18-07-2022 00:59:01]22218: WAF :: fetched 14 new logs [18-07-2022 01:00:02]24540: WAF :: fetched 69 new logs [18-07-2022 01:01:02]28431: WAF :: fetched 100 new logs [18-07-2022 01:02:01]31274: WAF :: fetched 3 new logs [18-07-2022 01:07:01]13004: WAF :: fetched 1 new logs [18-07-2022 01:11:02]24290: WAF :: fetched 1 new logs [18-07-2022 01:12:01]26909: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658117521 [18-07-2022 01:12:01]26909: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 01:12:03]26909: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 01:12:06]26909: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-0112/20220718-011201-YtTdkW9qz1KxtXRcS-388QAAAAg [18-07-2022 01:12:06]26909: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 01:12:06]26909: WAF :: fetched 1 new logs [18-07-2022 01:13:02]29670: WAF :: fetched 2 new logs [18-07-2022 01:18:02]10845: WAF :: fetched 3 new logs [18-07-2022 01:21:01]19031: WAF :: fetched 1 new logs [18-07-2022 01:26:01]501: WAF :: fetched 1 new logs [18-07-2022 01:29:01]9222: WAF :: fetched 3 new logs [18-07-2022 01:30:02]11930: WAF :: fetched 1 new logs [18-07-2022 01:36:02]28161: WAF :: fetched 1 new logs [18-07-2022 01:37:01]30988: WAF :: fetched 1 new logs [18-07-2022 01:40:01]6951: WAF :: fetched 1 new logs [18-07-2022 01:41:02]9700: WAF :: fetched 15 new logs [18-07-2022 01:41:02]9700: Checking for user cron vulnerabilities [18-07-2022 01:43:02]15314: WAF :: fetched 13 new logs [18-07-2022 01:44:01]18269: Checking ditributed CMS bruteforce attacks [18-07-2022 01:45:01]: Checking for definition updates [18-07-2022 01:46:02]23944: WAF :: fetched 3 new logs [18-07-2022 01:47:01]26552: WAF :: fetched 27 new logs [18-07-2022 01:48:02]29355: WAF :: fetched 27 new logs [18-07-2022 01:49:01]32101: WAF :: fetched 49 new logs [18-07-2022 01:50:03]2661: WAF :: fetched 2 new logs [18-07-2022 01:51:02]5483: WAF :: fetched 23 new logs [18-07-2022 01:52:01]8179: WAF :: fetched 23 new logs [18-07-2022 01:58:02]24961: WAF :: fetched 2 new logs [18-07-2022 01:59:03]27844: WAF :: fetched 1 new logs [18-07-2022 02:00:02]30389: WAF :: fetched 2 new logs [18-07-2022 02:00:02]30374: httpd.conf changed. Refreshing watchlist. [18-07-2022 02:01:01]1238: httpd.conf changed. Refreshing watchlist. [18-07-2022 02:03:01]6651: WAF :: fetched 2 new logs [18-07-2022 02:05:01]12219: httpd.conf changed. Refreshing watchlist. [18-07-2022 02:06:01]15271: WAF :: fetched 26 new logs [18-07-2022 02:11:02]29481: WAF :: fetched 1 new logs [18-07-2022 02:12:02]32069: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658121122 [18-07-2022 02:12:02]32069: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 02:12:04]32069: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 02:12:06]32069: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-0212/20220718-021202-YtTrojMb2k2JMlGUSBfpJwAAAAQ [18-07-2022 02:12:06]32069: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 02:12:06]32069: WAF :: fetched 1 new logs [18-07-2022 02:16:01]10324: WAF :: fetched 2 new logs [18-07-2022 02:17:01]13013: WAF :: fetched 3 new logs [18-07-2022 02:18:01]15810: WAF :: fetched 12 new logs [18-07-2022 02:19:02]18806: WAF :: fetched 1 new logs [18-07-2022 02:20:01]21683: WAF :: fetched 5 new logs [18-07-2022 02:24:01]32419: WAF :: fetched 1 new logs [18-07-2022 02:27:02]8159: WAF :: fetched 1 new logs [18-07-2022 02:34:02]27008: WAF :: fetched 3 new logs [18-07-2022 02:35:01]29747: WAF :: fetched 2 new logs [18-07-2022 02:36:02]32653: WAF :: fetched 1 new logs [18-07-2022 02:38:01]5682: WAF :: fetched 23 new logs [18-07-2022 02:39:02]8349: WAF :: fetched 1 new logs [18-07-2022 02:40:01]10969: WAF :: fetched 1 new logs [18-07-2022 02:41:02]13693: WAF :: fetched 1 new logs [18-07-2022 02:41:02]13693: Checking for user cron vulnerabilities [18-07-2022 02:44:01]21701: Checking ditributed CMS bruteforce attacks [18-07-2022 02:44:04]21701: WAF :: fetched 1 new logs [18-07-2022 02:45:01]24321: WAF :: fetched 2 new logs [18-07-2022 02:46:02]26962: WAF :: fetched 2 new logs [18-07-2022 02:48:02]32198: WAF :: fetched 1 new logs [18-07-2022 02:49:01]2524: WAF :: fetched 23 new logs [18-07-2022 02:52:02]10413: WAF :: fetched 2 new logs [18-07-2022 02:53:01]12945: WAF :: fetched 3 new logs [18-07-2022 02:53:02]12950: Updated license status via CDN [18-07-2022 02:54:02]15667: WAF :: fetched 1 new logs [18-07-2022 02:55:01]18360: WAF :: fetched 2 new logs [18-07-2022 02:56:01]21143: WAF :: fetched 1 new logs [18-07-2022 02:57:02]23788: WAF :: fetched 2 new logs [18-07-2022 02:58:01]26418: WAF :: fetched 30 new logs [18-07-2022 02:59:02]29133: WAF :: fetched 3 new logs [18-07-2022 03:00:01]31527: WAF :: fetched 1 new logs [18-07-2022 03:01:52]31527: Found and updated 32 CMS installations [18-07-2022 03:02:04]31527: Wordpress installation #1 brgestor.com.br has errors [18-07-2022 03:02:31]31527: Wordpress installation #4 labvida.net has errors [18-07-2022 03:03:00]31527: Wordpress installation #9 oabilheus.org.br has errors [18-07-2022 03:03:26]7804: Wordpress installation #9 oabilheus.org.br has errors [18-07-2022 03:03:43]31527: Wordpress installation #15 contratopronto.net has errors [18-07-2022 03:03:47]7804: Wordpress installation #15 contratopronto.net has errors [18-07-2022 03:04:02]10713: WAF :: fetched 1 new logs [18-07-2022 03:04:07]31527: Wordpress installation #16 kecolima.com.br has errors [18-07-2022 03:04:19]7804: Wordpress installation #17 ajuda.meusiteimobiliario.com.br has errors [18-07-2022 03:04:31]31527: Wordpress installation #18 tourvirtualfacil.com has errors [18-07-2022 03:04:33]7804: Wordpress installation #18 tourvirtualfacil.com has errors [18-07-2022 03:04:58]7804: Wordpress installation #21 easy2speak.com.br has errors [18-07-2022 03:04:59]31527: Wordpress installation #21 easy2speak.com.br has errors [18-07-2022 03:05:01]13559: WAF :: fetched 1 new logs [18-07-2022 03:05:14]7804: Wordpress installation #23 blueseasurf.com.br has errors [18-07-2022 03:05:14]31527: Wordpress installation #23 blueseasurf.com.br has errors [18-07-2022 03:05:38]7804: Wordpress installation #24 janehildabadaroart.com.br has errors [18-07-2022 03:05:38]31527: Wordpress installation #24 janehildabadaroart.com.br has errors [18-07-2022 03:05:53]31527: Wordpress installation #25 ltcertificadora.com.br has errors [18-07-2022 03:05:53]7804: Wordpress installation #25 ltcertificadora.com.br has errors [18-07-2022 03:06:02]16375: WAF :: fetched 1 new logs [18-07-2022 03:06:34]7804: Wordpress installation #32 site.meucartaovirtual.com.br has errors [18-07-2022 03:06:34]31527: Wordpress installation #32 site.meucartaovirtual.com.br has errors [18-07-2022 03:06:58]7804: Wordpress installation #33 bibokinha.com.br has errors [18-07-2022 03:06:59]31527: Wordpress installation #33 bibokinha.com.br has errors [18-07-2022 03:07:03]19262: WAF :: fetched 1 new logs [18-07-2022 03:07:23]7804: Wordpress installation #34 fazendayrere.com.br has errors [18-07-2022 03:07:23]31527: Wordpress installation #34 fazendayrere.com.br has errors [18-07-2022 03:07:42]7804: Wordpress installation #35 luanbrasil.com.br has errors [18-07-2022 03:07:42]31527: Wordpress installation #35 luanbrasil.com.br has errors [18-07-2022 03:08:02]19339: WAF :: fetched 1 new logs [18-07-2022 03:08:05]7804: Wordpress installation #37 site.zipcard.app has errors [18-07-2022 03:08:05]31527: Wordpress installation #37 site.zipcard.app has errors [18-07-2022 03:08:25]31527: Wordpress installation #40 guardian-ba.com.br has errors [18-07-2022 03:08:26]7804: Wordpress installation #40 guardian-ba.com.br has errors [18-07-2022 03:08:49]31527: Wordpress installation #42 suryart.com.br has errors [18-07-2022 03:08:50]7804: Wordpress installation #42 suryart.com.br has errors [18-07-2022 03:08:54]31527: Sending CMS version vulnerability report emails to cpanel users [18-07-2022 03:08:54]7804: Sending CMS version vulnerability report emails to cpanel users [18-07-2022 03:08:57]7804: Checking wordpress installations for suspicious directories [18-07-2022 03:08:57]31527: Checking wordpress installations for suspicious directories [18-07-2022 03:09:02]6214: WAF :: fetched 4 new logs [18-07-2022 03:12:02]2446: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658124722 [18-07-2022 03:12:02]2446: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 03:12:04]2446: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 03:12:06]2446: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-0312/20220718-031202-YtT5su_ZMUqwVnrH1xFXEwAAAAY [18-07-2022 03:12:06]2446: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [18-07-2022 03:12:06]2446: WAF :: fetched 1 new logs [18-07-2022 03:13:01]5056: WAF :: fetched 2 new logs [18-07-2022 03:16:02]13090: WAF :: fetched 1 new logs [18-07-2022 03:17:02]15685: WAF :: fetched 15 new logs [18-07-2022 03:19:02]21139: WAF :: fetched 34 new logs [18-07-2022 03:21:03]26488: WAF :: fetched 1 new logs [18-07-2022 03:24:02]2144: WAF :: fetched 3 new logs [18-07-2022 03:27:02]10194: WAF :: fetched 1 new logs [18-07-2022 03:30:01]18245: WAF :: fetched 2 new logs [18-07-2022 03:31:02]20955: WAF :: fetched 1 new logs [18-07-2022 03:40:02]14360: WAF :: fetched 2 new logs [18-07-2022 03:41:03]17039: WAF :: fetched 3 new logs [18-07-2022 03:41:03]17039: Checking for user cron vulnerabilities [18-07-2022 03:42:01]19433: WAF :: fetched 4 new logs [18-07-2022 03:44:01]25125: Checking ditributed CMS bruteforce attacks [18-07-2022 03:46:01]30335: WAF :: fetched 3 new logs [18-07-2022 03:47:02]576: WAF :: fetched 2 new logs [18-07-2022 03:49:05]6039: WAF :: fetched 12 new logs [18-07-2022 03:50:01]8708: WAF :: fetched 8 new logs [18-07-2022 03:52:02]14438: WAF :: fetched 2 new logs [18-07-2022 03:56:02]25537: WAF :: fetched 1 new logs [18-07-2022 03:57:02]28271: WAF :: fetched 1 new logs [18-07-2022 03:58:01]31265: WAF :: fetched 1 new logs [18-07-2022 04:02:02]10033: WAF :: fetched 1 new logs [18-07-2022 04:03:02]12852: WAF :: fetched 2 new logs [18-07-2022 04:04:01]15567: httpd.conf changed. Refreshing watchlist. [18-07-2022 04:07:02]23656: WAF :: fetched 2 new logs [18-07-2022 04:08:02]26278: httpd.conf changed. Refreshing watchlist. [18-07-2022 04:09:02]29343: WAF :: fetched 1 new logs [18-07-2022 04:11:02]2497: WAF :: fetched 1 new logs [18-07-2022 04:12:01]5185: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658128321 [18-07-2022 04:12:01]5185: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 04:12:03]5185: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 04:12:04]5185: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-0412/20220718-041201-YtUHwbOGxPV0bCYdAwFgRgAAAAI [18-07-2022 04:12:04]5185: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [18-07-2022 04:12:04]5185: WAF :: fetched 1 new logs [18-07-2022 04:16:03]15817: WAF :: fetched 2 new logs [18-07-2022 04:19:02]24058: WAF :: fetched 2 new logs [18-07-2022 04:21:01]29830: WAF :: fetched 5 new logs [18-07-2022 04:24:02]5830: WAF :: fetched 2 new logs [18-07-2022 04:28:01]17148: WAF :: fetched 1 new logs [18-07-2022 04:32:02]27987: WAF :: fetched 1 new logs [18-07-2022 04:35:02]3484: WAF :: fetched 5 new logs [18-07-2022 04:37:02]8679: WAF :: fetched 1 new logs [18-07-2022 04:38:01]11256: WAF :: fetched 1 new logs [18-07-2022 04:39:02]13979: WAF :: fetched 1 new logs [18-07-2022 04:40:02]16578: WAF :: fetched 2 new logs [18-07-2022 04:41:01]19317: Checking for user cron vulnerabilities [18-07-2022 04:43:01]24530: WAF :: fetched 1 new logs [18-07-2022 04:44:02]27230: Checking ditributed CMS bruteforce attacks [18-07-2022 04:44:04]27230: WAF :: fetched 1 new logs [18-07-2022 04:45:02]29819: WAF :: fetched 3 new logs [18-07-2022 04:46:01]32557: WAF :: fetched 1 new logs [18-07-2022 04:47:02]2811: WAF :: fetched 2 new logs [18-07-2022 04:48:02]5413: WAF :: fetched 37 new logs [18-07-2022 04:49:01]8087: WAF :: fetched 67 new logs [18-07-2022 04:52:02]16033: WAF :: fetched 1 new logs [18-07-2022 04:53:01]18749: WAF :: fetched 2 new logs [18-07-2022 04:54:02]21492: WAF :: fetched 1 new logs [18-07-2022 04:55:02]24048: WAF :: fetched 2 new logs [18-07-2022 04:56:02]26707: WAF :: fetched 33 new logs [18-07-2022 04:57:02]29284: WAF :: fetched 2 new logs [18-07-2022 04:58:01]31886: WAF :: fetched 1 new logs [18-07-2022 04:59:03]2161: WAF :: fetched 3 new logs [18-07-2022 05:00:02]4545: WAF :: fetched 41 new logs [18-07-2022 05:01:02]7692: WAF :: fetched 11 new logs [18-07-2022 05:01:42]7698: Starting daily scan on files updated in last 24 hrs [18-07-2022 05:04:01]15565: WAF :: fetched 1 new logs [18-07-2022 05:05:02]18250: WAF :: fetched 1 new logs [18-07-2022 05:07:01]23549: WAF :: fetched 1 new logs [18-07-2022 05:08:02]26195: WAF :: fetched 2 new logs [18-07-2022 05:09:01]28860: WAF :: fetched 1 new logs [18-07-2022 05:10:02]31598: WAF :: fetched 1 new logs [18-07-2022 05:11:01]1846: WAF :: fetched 3 new logs [18-07-2022 05:12:02]4481: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658131922 [18-07-2022 05:12:02]4481: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 05:12:04]4481: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 05:12:04]4481: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-0512/20220718-051202-YtUV0p3SyMAkR72YJZJ79wAAAAg [18-07-2022 05:12:04]4481: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [18-07-2022 05:12:05]4481: WAF :: fetched 1 new logs [18-07-2022 05:13:02]7113: WAF :: fetched 2 new logs [18-07-2022 05:16:01]15049: WAF :: fetched 2 new logs [18-07-2022 05:17:03]17642: WAF :: fetched 34 new logs [18-07-2022 05:19:01]22977: WAF :: fetched 1 new logs [18-07-2022 05:20:03]25580: WAF :: fetched 33 new logs [18-07-2022 05:21:02]28185: WAF :: fetched 1 new logs [18-07-2022 05:22:01]30835: WAF :: fetched 1 new logs [18-07-2022 05:24:02]3691: WAF :: fetched 1 new logs [18-07-2022 05:25:02]6375: WAF :: fetched 1 new logs [18-07-2022 05:27:01]11606: WAF :: fetched 3 new logs [18-07-2022 05:28:02]14263: WAF :: fetched 33 new logs [18-07-2022 05:29:01]16872: WAF :: fetched 3 new logs [18-07-2022 05:31:02]22325: WAF :: fetched 50 new logs [18-07-2022 05:32:02]24988: WAF :: fetched 18 new logs [18-07-2022 05:38:03]8630: WAF :: fetched 6 new logs [18-07-2022 05:40:03]13962: WAF :: fetched 1 new logs [18-07-2022 05:41:02]16578: Checking for user cron vulnerabilities [18-07-2022 05:44:01]24558: Checking ditributed CMS bruteforce attacks [18-07-2022 05:44:10]24558: WAF :: fetched 7 new logs [18-07-2022 05:45:01]27153: WAF :: fetched 11 new logs [18-07-2022 05:46:02]29806: WAF :: fetched 7 new logs [18-07-2022 05:47:02]32381: WAF :: fetched 7 new logs [18-07-2022 05:48:01]2632: WAF :: fetched 1 new logs [18-07-2022 05:49:02]5326: WAF :: fetched 25 new logs [18-07-2022 05:50:02]7969: WAF :: fetched 18 new logs [18-07-2022 05:52:02]13323: WAF :: fetched 33 new logs [18-07-2022 05:53:01]16024: WAF :: fetched 1 new logs [18-07-2022 05:56:02]24034: WAF :: fetched 1 new logs [18-07-2022 05:58:02]29220: WAF :: fetched 6 new logs [18-07-2022 06:00:02]1930: WAF :: fetched 2 new logs [18-07-2022 06:01:02]4967: WAF :: fetched 1 new logs [18-07-2022 06:02:03]7608: WAF :: fetched 20 new logs [18-07-2022 06:04:02]12905: WAF :: fetched 2 new logs [18-07-2022 06:06:01]18257: WAF :: fetched 5 new logs [18-07-2022 06:10:02]28829: WAF :: fetched 13 new logs [18-07-2022 06:11:01]31448: WAF :: fetched 8 new logs [18-07-2022 06:12:03]1667: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658135523 [18-07-2022 06:12:03]1667: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 06:12:05]1667: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 06:12:05]1667: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-0612/20220718-061203-YtUj47avHkROh5NhZgh2SAAAAAk [18-07-2022 06:12:05]1667: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 06:12:06]1667: WAF :: fetched 543 new logs [18-07-2022 06:16:01]12271: WAF :: fetched 1 new logs [18-07-2022 06:18:03]17464: WAF :: fetched 1 new logs [18-07-2022 06:19:02]20215: WAF :: fetched 2 new logs [18-07-2022 06:20:02]22850: WAF :: fetched 4 new logs [18-07-2022 06:21:02]25473: WAF :: fetched 3 new logs [18-07-2022 06:22:01]28100: WAF :: fetched 1 new logs [18-07-2022 06:23:02]30697: WAF :: fetched 30 new logs [18-07-2022 06:29:01]14416: WAF :: fetched 33 new logs [18-07-2022 06:36:03]767: WAF :: fetched 1 new logs [18-07-2022 06:37:01]3371: WAF :: fetched 2 new logs [18-07-2022 06:41:02]14083: Checking for user cron vulnerabilities [18-07-2022 06:42:01]16735: WAF :: fetched 1 new logs [18-07-2022 06:44:01]22016: Checking ditributed CMS bruteforce attacks [18-07-2022 06:45:02]24645: WAF :: fetched 6 new logs [18-07-2022 06:46:02]27349: WAF :: fetched 24 new logs [18-07-2022 06:47:01]29917: WAF :: fetched 10 new logs [18-07-2022 06:50:02]5458: WAF :: fetched 2 new logs [18-07-2022 06:53:02]13371: WAF :: fetched 7 new logs [18-07-2022 06:54:01]15984: WAF :: fetched 29 new logs [18-07-2022 06:55:02]18722: WAF :: fetched 1 new logs [18-07-2022 06:58:02]26618: WAF :: fetched 1 new logs [18-07-2022 06:59:01]29372: WAF :: fetched 1 new logs [18-07-2022 07:05:02]13126: WAF :: fetched 19 new logs [18-07-2022 07:08:02]21085: WAF :: fetched 1 new logs [18-07-2022 07:09:01]23720: WAF :: fetched 2 new logs [18-07-2022 07:10:02]26383: WAF :: fetched 21 new logs [18-07-2022 07:11:01]29045: WAF :: fetched 32 new logs [18-07-2022 07:12:01]31739: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658139121 [18-07-2022 07:12:01]31739: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 07:12:03]31739: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 07:12:05]31739: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-0712/20220718-071201-YtUx8R-nDwc2KgKKi-1vJQAAAAI [18-07-2022 07:12:05]31739: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [18-07-2022 07:12:05]31739: WAF :: fetched 2 new logs [18-07-2022 07:13:02]2024: WAF :: fetched 3 new logs [18-07-2022 07:14:03]4657: WAF :: fetched 1 new logs [18-07-2022 07:20:02]20457: WAF :: fetched 1 new logs [18-07-2022 07:22:02]25726: WAF :: fetched 1 new logs [18-07-2022 07:25:02]1116: WAF :: fetched 1 new logs [18-07-2022 07:26:01]3789: WAF :: fetched 3 new logs [18-07-2022 07:28:02]8917: WAF :: fetched 2 new logs [18-07-2022 07:30:02]14257: WAF :: fetched 1 new logs [18-07-2022 07:34:02]24774: WAF :: fetched 15 new logs [18-07-2022 07:35:01]27495: WAF :: fetched 23 new logs [18-07-2022 07:40:02]8137: WAF :: fetched 1 new logs [18-07-2022 07:41:02]10843: WAF :: fetched 38 new logs [18-07-2022 07:41:02]10843: Checking for user cron vulnerabilities [18-07-2022 07:44:02]18790: Checking ditributed CMS bruteforce attacks [18-07-2022 07:45:01]: Checking for definition updates [18-07-2022 07:45:02]21590: WAF :: fetched 6 new logs [18-07-2022 07:53:02]10294: WAF :: fetched 1 new logs [18-07-2022 07:57:02]20727: WAF :: fetched 1 new logs [18-07-2022 07:58:01]23206: WAF :: fetched 3 new logs [18-07-2022 07:59:02]25754: WAF :: fetched 2 new logs [18-07-2022 08:00:02]28126: WAF :: fetched 2 new logs [18-07-2022 08:02:02]1406: WAF :: fetched 2 new logs [18-07-2022 08:03:02]4055: WAF :: fetched 1 new logs [18-07-2022 08:04:02]6706: WAF :: fetched 1 new logs [18-07-2022 08:07:02]14393: WAF :: fetched 2 new logs [18-07-2022 08:10:01]22142: WAF :: fetched 1 new logs [18-07-2022 08:12:01]27300: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658142721 [18-07-2022 08:12:01]27300: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 08:12:03]27300: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 08:12:04]27300: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-0812/20220718-081201-YtVAAWajPOuyBMhcHYMe9wAAABg [18-07-2022 08:12:04]27300: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 08:12:04]27300: WAF :: fetched 94 new logs [18-07-2022 08:14:01]32386: WAF :: fetched 2 new logs [18-07-2022 08:15:01]2660: WAF :: fetched 2 new logs [18-07-2022 08:16:02]5368: WAF :: fetched 2 new logs [18-07-2022 08:17:01]8024: WAF :: fetched 2 new logs [18-07-2022 08:18:02]10597: WAF :: fetched 4 new logs [18-07-2022 08:19:01]13160: WAF :: fetched 1 new logs [18-07-2022 08:20:02]15905: WAF :: fetched 1 new logs [18-07-2022 08:21:03]18587: WAF :: fetched 1 new logs [18-07-2022 08:22:01]21096: WAF :: fetched 25 new logs [18-07-2022 08:23:01]23803: WAF :: fetched 3 new logs [18-07-2022 08:25:01]29162: WAF :: fetched 1 new logs [18-07-2022 08:27:01]1877: WAF :: fetched 6 new logs [18-07-2022 08:30:02]9641: WAF :: fetched 1 new logs [18-07-2022 08:32:01]14974: WAF :: fetched 28 new logs [18-07-2022 08:33:01]17534: WAF :: fetched 1 new logs [18-07-2022 08:35:02]22771: WAF :: fetched 23 new logs [18-07-2022 08:40:01]3504: WAF :: fetched 2 new logs [18-07-2022 08:41:01]6148: WAF :: fetched 1 new logs [18-07-2022 08:41:01]6148: Checking for user cron vulnerabilities [18-07-2022 08:42:02]8773: WAF :: fetched 2 new logs [18-07-2022 08:44:01]14174: Checking ditributed CMS bruteforce attacks [18-07-2022 08:44:06]14174: WAF :: fetched 1 new logs [18-07-2022 08:48:02]25080: WAF :: fetched 1 new logs [18-07-2022 08:49:01]27866: WAF :: fetched 28 new logs [18-07-2022 08:51:02]1036: WAF :: fetched 3 new logs [18-07-2022 08:54:01]8946: WAF :: fetched 1 new logs [18-07-2022 08:55:01]11655: WAF :: fetched 2 new logs [18-07-2022 08:56:02]14437: WAF :: fetched 2 new logs [18-07-2022 08:57:01]17045: WAF :: fetched 2 new logs [18-07-2022 08:58:02]19728: WAF :: fetched 2 new logs [18-07-2022 08:59:01]22443: WAF :: fetched 3 new logs [18-07-2022 09:00:01]24880: WAF :: fetched 1 new logs [18-07-2022 09:01:02]28012: WAF :: fetched 1 new logs [18-07-2022 09:03:01]926: WAF :: fetched 2 new logs [18-07-2022 09:04:02]3620: WAF :: fetched 5 new logs [18-07-2022 09:05:01]6418: WAF :: fetched 3 new logs [18-07-2022 09:07:02]11692: WAF :: fetched 4 new logs [18-07-2022 09:09:02]17250: WAF :: fetched 2 new logs [18-07-2022 09:10:01]20126: WAF :: fetched 3 new logs [18-07-2022 09:12:02]25676: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658146322 [18-07-2022 09:12:02]25676: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 09:12:04]25676: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 09:12:06]25676: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-0912/20220718-091202-YtVOEusZ_MbswpmFO8w2mgAAAC0 [18-07-2022 09:12:06]25676: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 09:12:06]25676: WAF :: fetched 28 new logs [18-07-2022 09:14:01]30970: WAF :: fetched 3 new logs [18-07-2022 09:15:02]1384: WAF :: fetched 2 new logs [18-07-2022 09:17:01]6790: WAF :: fetched 4 new logs [18-07-2022 09:18:02]9504: WAF :: fetched 6 new logs [18-07-2022 09:19:01]12156: WAF :: fetched 1 new logs [18-07-2022 09:20:02]15018: WAF :: fetched 6 new logs [18-07-2022 09:21:02]17753: WAF :: fetched 4 new logs [18-07-2022 09:22:01]20573: WAF :: fetched 2 new logs [18-07-2022 09:23:02]23227: WAF :: fetched 4 new logs [18-07-2022 09:24:02]25888: WAF :: fetched 3 new logs [18-07-2022 09:25:01]28652: WAF :: fetched 3 new logs [18-07-2022 09:26:01]31311: WAF :: fetched 3 new logs [18-07-2022 09:27:02]1653: WAF :: fetched 5 new logs [18-07-2022 09:28:02]4237: WAF :: fetched 3 new logs [18-07-2022 09:29:01]7172: WAF :: fetched 1 new logs [18-07-2022 09:31:01]12554: WAF :: fetched 2 new logs [18-07-2022 09:32:02]15238: WAF :: fetched 2 new logs [18-07-2022 09:33:02]17963: WAF :: fetched 7 new logs [18-07-2022 09:35:02]23464: WAF :: fetched 3 new logs [18-07-2022 09:37:01]28869: WAF :: fetched 1 new logs [18-07-2022 09:40:01]4594: WAF :: fetched 1 new logs [18-07-2022 09:41:02]7406: Checking for user cron vulnerabilities [18-07-2022 09:42:02]10082: WAF :: fetched 4 new logs [18-07-2022 09:43:01]12704: WAF :: fetched 2 new logs [18-07-2022 09:44:02]15451: Checking ditributed CMS bruteforce attacks [18-07-2022 09:44:04]15451: WAF :: fetched 1 new logs [18-07-2022 09:45:01]18366: WAF :: fetched 3 new logs [18-07-2022 09:46:02]21102: WAF :: fetched 1 new logs [18-07-2022 09:47:01]23777: WAF :: fetched 1 new logs [18-07-2022 09:49:01]29192: WAF :: fetched 17 new logs [18-07-2022 09:50:02]31946: WAF :: fetched 13 new logs [18-07-2022 09:51:02]2290: WAF :: fetched 1 new logs [18-07-2022 09:52:01]4989: WAF :: fetched 3 new logs [18-07-2022 10:04:02]4978: WAF :: fetched 1 new logs [18-07-2022 10:07:01]13061: WAF :: fetched 1 new logs [18-07-2022 10:09:01]18471: WAF :: fetched 1 new logs [18-07-2022 10:10:01]21314: WAF :: fetched 1 new logs [18-07-2022 10:12:01]26881: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658149921 [18-07-2022 10:12:01]26881: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 10:12:03]26881: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 10:12:04]26881: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-1012/20220718-101201-YtVcIbUm0KOYrqng9y1gNAAAACw [18-07-2022 10:12:04]26881: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 10:12:04]26881: WAF :: fetched 1 new logs [18-07-2022 10:15:02]2705: WAF :: fetched 1 new logs [18-07-2022 10:17:01]8035: WAF :: fetched 1 new logs [18-07-2022 10:18:04]10759: WAF :: fetched 1 new logs [18-07-2022 10:19:01]13517: WAF :: fetched 1 new logs [18-07-2022 10:21:02]19299: WAF :: fetched 1 new logs [18-07-2022 10:23:02]24638: WAF :: fetched 1 new logs [18-07-2022 10:24:01]27289: WAF :: fetched 5 new logs [18-07-2022 10:25:02]30122: WAF :: fetched 1 new logs [18-07-2022 10:28:01]6125: WAF :: fetched 11 new logs [18-07-2022 10:29:02]8875: WAF :: fetched 6 new logs [18-07-2022 10:30:01]11704: WAF :: fetched 1 new logs [18-07-2022 10:31:02]14621: WAF :: fetched 1 new logs [18-07-2022 10:33:01]20254: WAF :: fetched 2 new logs [18-07-2022 10:34:02]23050: WAF :: fetched 1 new logs [18-07-2022 10:38:01]1756: WAF :: fetched 3 new logs [18-07-2022 10:39:02]4484: WAF :: fetched 2 new logs [18-07-2022 10:40:01]7228: WAF :: fetched 1 new logs [18-07-2022 10:41:01]9916: WAF :: fetched 3 new logs [18-07-2022 10:41:01]9916: Checking for user cron vulnerabilities [18-07-2022 10:42:02]12620: WAF :: fetched 4 new logs [18-07-2022 10:43:01]15218: WAF :: fetched 5 new logs [18-07-2022 10:44:02]17994: Checking ditributed CMS bruteforce attacks [18-07-2022 10:45:01]20742: WAF :: fetched 1 new logs [18-07-2022 10:46:02]23540: WAF :: fetched 3 new logs [18-07-2022 10:50:01]1995: WAF :: fetched 1 new logs [18-07-2022 10:53:01]10058: WAF :: fetched 32 new logs [18-07-2022 10:54:02]12703: WAF :: fetched 2 new logs [18-07-2022 10:56:02]18373: WAF :: fetched 1 new logs [18-07-2022 10:57:02]21153: WAF :: fetched 1 new logs [18-07-2022 10:58:01]23968: WAF :: fetched 4 new logs [18-07-2022 10:59:02]26658: WAF :: fetched 5 new logs [18-07-2022 11:00:02]29214: httpd.conf changed. Refreshing watchlist. [18-07-2022 11:00:02]29223: WAF :: fetched 5 new logs [18-07-2022 11:01:01]32358: WAF :: fetched 2 new logs [18-07-2022 11:02:02]2770: WAF :: fetched 2 new logs [18-07-2022 11:03:02]5471: WAF :: fetched 3 new logs [18-07-2022 11:04:02]8105: WAF :: fetched 6 new logs [18-07-2022 11:05:01]10912: WAF :: fetched 4 new logs [18-07-2022 11:06:02]13718: WAF :: fetched 4 new logs [18-07-2022 11:07:01]16324: WAF :: fetched 1 new logs [18-07-2022 11:08:01]16494: Performed RBL check for 23.111.136.34. [18-07-2022 11:08:02]19079: WAF :: fetched 4 new logs [18-07-2022 11:09:01]21754: WAF :: fetched 1 new logs [18-07-2022 11:10:02]24538: WAF :: fetched 1 new logs [18-07-2022 11:11:01]27198: WAF :: fetched 1 new logs [18-07-2022 11:12:01]29872: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658153521 [18-07-2022 11:12:01]29872: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 11:12:03]29872: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 11:12:05]29872: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-1112/20220718-111201-YtVqMcjnIKpxNeROEXirewAAAAU [18-07-2022 11:12:05]29872: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 11:12:06]29872: WAF :: fetched 4 new logs [18-07-2022 11:13:02]32541: WAF :: fetched 1 new logs [18-07-2022 11:17:02]11114: WAF :: fetched 6 new logs [18-07-2022 11:18:02]13823: WAF :: fetched 2 new logs [18-07-2022 11:21:01]22407: WAF :: fetched 2 new logs [18-07-2022 11:24:02]30440: WAF :: fetched 1 new logs [18-07-2022 11:28:01]9184: WAF :: fetched 4 new logs [18-07-2022 11:29:02]11871: WAF :: fetched 3 new logs [18-07-2022 11:30:01]14637: WAF :: fetched 1 new logs [18-07-2022 11:32:03]20147: WAF :: fetched 3 new logs [18-07-2022 11:38:02]4081: WAF :: fetched 20 new logs [18-07-2022 11:39:02]6809: WAF :: fetched 1 new logs [18-07-2022 11:41:02]12473: Checking for user cron vulnerabilities [18-07-2022 11:43:02]17866: WAF :: fetched 3 new logs [18-07-2022 11:44:01]20574: Checking ditributed CMS bruteforce attacks [18-07-2022 11:44:02]20574: WAF :: fetched 4 new logs [18-07-2022 11:45:02]23398: WAF :: fetched 3 new logs [18-07-2022 11:47:01]28856: WAF :: fetched 28 new logs [18-07-2022 11:48:02]31565: WAF :: fetched 1 new logs [18-07-2022 11:49:01]1871: WAF :: fetched 9 new logs [18-07-2022 11:50:01]4659: WAF :: fetched 2 new logs [18-07-2022 11:51:02]7471: WAF :: fetched 3 new logs [18-07-2022 11:53:02]12845: WAF :: fetched 5 new logs [18-07-2022 11:54:04]15436: WAF :: fetched 4 new logs [18-07-2022 11:58:02]26394: WAF :: fetched 5 new logs [18-07-2022 11:59:01]29036: WAF :: fetched 1 new logs [18-07-2022 12:00:01]31443: WAF :: fetched 2 new logs [18-07-2022 12:01:02]2360: WAF :: fetched 1 new logs [18-07-2022 12:02:02]5067: WAF :: fetched 2 new logs [18-07-2022 12:05:01]13170: WAF :: fetched 3 new logs [18-07-2022 12:09:02]24150: WAF :: fetched 1 new logs [18-07-2022 12:10:01]27137: WAF :: fetched 3 new logs [18-07-2022 12:11:01]30286: WAF :: fetched 2 new logs [18-07-2022 12:12:02]612: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658157122 [18-07-2022 12:12:02]612: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 12:12:04]612: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 12:12:05]612: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-1212/20220718-121202-YtV4QiOIt4s4p92aLlrgSwAAAEk [18-07-2022 12:12:05]612: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 12:12:06]612: WAF :: fetched 3 new logs [18-07-2022 12:13:01]3284: WAF :: fetched 1 new logs [18-07-2022 12:14:02]5926: WAF :: fetched 1 new logs [18-07-2022 12:15:02]8537: WAF :: fetched 3 new logs [18-07-2022 12:16:01]11504: WAF :: fetched 1 new logs [18-07-2022 12:17:02]14146: WAF :: fetched 4 new logs [18-07-2022 12:18:01]16738: WAF :: fetched 7 new logs [18-07-2022 12:19:01]19460: WAF :: fetched 2 new logs [18-07-2022 12:20:02]22237: WAF :: fetched 1 new logs [18-07-2022 12:21:02]25037: WAF :: fetched 2 new logs [18-07-2022 12:22:01]27711: WAF :: fetched 4 new logs [18-07-2022 12:23:01]30506: WAF :: fetched 1 new logs [18-07-2022 12:24:02]818: WAF :: fetched 1 new logs [18-07-2022 12:25:01]3597: WAF :: fetched 17 new logs [18-07-2022 12:26:02]6436: WAF :: fetched 3 new logs [18-07-2022 12:27:02]9145: WAF :: fetched 1 new logs [18-07-2022 12:28:02]11822: WAF :: fetched 1 new logs [18-07-2022 12:29:02]14552: WAF :: fetched 23 new logs [18-07-2022 12:30:01]17324: WAF :: fetched 1 new logs [18-07-2022 12:31:02]20429: WAF :: fetched 3 new logs [18-07-2022 12:32:03]23127: WAF :: fetched 26 new logs [18-07-2022 12:33:02]25919: WAF :: fetched 3 new logs [18-07-2022 12:34:01]28524: WAF :: fetched 3 new logs [18-07-2022 12:35:02]31245: WAF :: fetched 3 new logs [18-07-2022 12:37:01]4335: WAF :: fetched 4 new logs [18-07-2022 12:38:02]6999: WAF :: fetched 1 new logs [18-07-2022 12:40:01]12539: WAF :: fetched 6 new logs [18-07-2022 12:41:02]15418: Checking for user cron vulnerabilities [18-07-2022 12:44:01]23626: Checking ditributed CMS bruteforce attacks [18-07-2022 12:45:02]: Checking for software updates [18-07-2022 12:48:01]2066: WAF :: fetched 4 new logs [18-07-2022 12:49:01]4786: WAF :: fetched 15 new logs [18-07-2022 12:50:02]7507: WAF :: fetched 28 new logs [18-07-2022 12:51:01]10374: WAF :: fetched 3 new logs [18-07-2022 12:54:02]18381: WAF :: fetched 3 new logs [18-07-2022 12:56:01]23895: WAF :: fetched 1 new logs [18-07-2022 12:57:02]26593: WAF :: fetched 3 new logs [18-07-2022 12:58:02]29241: WAF :: fetched 2 new logs [18-07-2022 12:59:01]31916: WAF :: fetched 1 new logs [18-07-2022 13:01:02]5232: WAF :: fetched 1 new logs [18-07-2022 13:07:01]21396: WAF :: fetched 1 new logs [18-07-2022 13:09:02]26751: WAF :: fetched 2 new logs [18-07-2022 13:10:01]29458: WAF :: fetched 3 new logs [18-07-2022 13:11:02]32340: WAF :: fetched 3 new logs [18-07-2022 13:12:02]2626: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658160722 [18-07-2022 13:12:02]2626: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 13:12:04]2626: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 13:12:05]2626: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-1312/20220718-131202-YtWGUgx7Gk9wEFMRVt8yfgAAACE [18-07-2022 13:12:05]2626: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 13:12:05]2626: WAF :: fetched 114 new logs [18-07-2022 13:13:01]5370: WAF :: fetched 5 new logs [18-07-2022 13:14:02]8050: WAF :: fetched 1 new logs [18-07-2022 13:15:01]10727: WAF :: fetched 1 new logs [18-07-2022 13:16:01]13559: WAF :: fetched 1 new logs [18-07-2022 13:17:01]16235: WAF :: fetched 2 new logs [18-07-2022 13:18:02]19009: WAF :: fetched 2 new logs [18-07-2022 13:19:01]21630: WAF :: fetched 1 new logs [18-07-2022 13:22:02]29906: WAF :: fetched 5 new logs [18-07-2022 13:23:01]32541: WAF :: fetched 1 new logs [18-07-2022 13:24:04]2768: WAF :: fetched 1 new logs [18-07-2022 13:25:01]5450: WAF :: fetched 5 new logs [18-07-2022 13:28:02]13586: WAF :: fetched 2 new logs [18-07-2022 13:30:02]19253: WAF :: fetched 2 new logs [18-07-2022 13:31:01]22030: WAF :: fetched 1 new logs [18-07-2022 13:32:04]24739: WAF :: fetched 1 new logs [18-07-2022 13:34:02]30016: WAF :: fetched 22 new logs [18-07-2022 13:36:01]3071: WAF :: fetched 3 new logs [18-07-2022 13:37:01]5730: WAF :: fetched 2 new logs [18-07-2022 13:38:02]8431: WAF :: fetched 9 new logs [18-07-2022 13:39:01]11027: WAF :: fetched 2 new logs [18-07-2022 13:40:02]13704: WAF :: fetched 3 new logs [18-07-2022 13:41:01]16467: WAF :: fetched 2 new logs [18-07-2022 13:41:01]16467: Checking for user cron vulnerabilities [18-07-2022 13:42:02]19255: WAF :: fetched 2 new logs [18-07-2022 13:43:01]21891: WAF :: fetched 2 new logs [18-07-2022 13:44:01]24548: Checking ditributed CMS bruteforce attacks [18-07-2022 13:44:01]24548: WAF :: fetched 4 new logs [18-07-2022 13:45:01]: Checking for definition updates [18-07-2022 13:45:01]27267: WAF :: fetched 2 new logs [18-07-2022 13:46:02]30143: WAF :: fetched 1 new logs [18-07-2022 13:47:01]370: WAF :: fetched 2 new logs [18-07-2022 13:48:03]3099: WAF :: fetched 2 new logs [18-07-2022 13:49:02]5738: WAF :: fetched 5 new logs [18-07-2022 13:50:01]8343: WAF :: fetched 2 new logs [18-07-2022 13:51:02]11302: WAF :: fetched 5 new logs [18-07-2022 13:53:02]17042: WAF :: fetched 35 new logs [18-07-2022 13:54:01]20072: WAF :: fetched 16 new logs [18-07-2022 13:55:02]22726: WAF :: fetched 6 new logs [18-07-2022 13:56:02]25573: WAF :: fetched 10 new logs [18-07-2022 13:57:01]28218: WAF :: fetched 7 new logs [18-07-2022 13:58:02]30967: WAF :: fetched 10 new logs [18-07-2022 13:59:02]1402: WAF :: fetched 20 new logs [18-07-2022 14:00:01]3910: WAF :: fetched 10 new logs [18-07-2022 14:01:02]7218: WAF :: fetched 20 new logs [18-07-2022 14:02:01]9912: WAF :: fetched 1 new logs [18-07-2022 14:03:01]12578: WAF :: fetched 2 new logs [18-07-2022 14:04:02]15254: WAF :: fetched 2 new logs [18-07-2022 14:07:01]23483: WAF :: fetched 22 new logs [18-07-2022 14:11:01]1829: WAF :: fetched 1 new logs [18-07-2022 14:12:01]4564: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658164321 [18-07-2022 14:12:01]4564: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 14:12:03]4564: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 14:12:06]4564: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-1412/20220718-141201-YtWUYX38VLhc3qCnhKrlwQAAADI [18-07-2022 14:12:06]4564: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 14:12:06]4564: WAF :: fetched 1 new logs [18-07-2022 14:21:01]29312: WAF :: fetched 1 new logs [18-07-2022 14:24:01]4956: WAF :: fetched 2 new logs [18-07-2022 14:27:01]13212: WAF :: fetched 2 new logs [18-07-2022 14:29:02]18734: WAF :: fetched 3 new logs [18-07-2022 14:31:02]24197: WAF :: fetched 1 new logs [18-07-2022 14:32:01]26896: WAF :: fetched 2 new logs [18-07-2022 14:33:01]29615: WAF :: fetched 1 new logs [18-07-2022 14:36:01]5864: WAF :: fetched 5 new logs [18-07-2022 14:38:02]11300: WAF :: fetched 1 new logs [18-07-2022 14:41:02]19700: WAF :: fetched 27 new logs [18-07-2022 14:41:02]19700: Checking for user cron vulnerabilities [18-07-2022 14:42:02]22286: WAF :: fetched 1 new logs [18-07-2022 14:44:01]27615: Checking ditributed CMS bruteforce attacks [18-07-2022 14:44:03]27615: WAF :: fetched 2 new logs [18-07-2022 14:46:01]668: WAF :: fetched 1 new logs [18-07-2022 14:48:01]5993: WAF :: fetched 2 new logs [18-07-2022 14:49:02]8674: WAF :: fetched 2 new logs [18-07-2022 14:50:01]11302: WAF :: fetched 3 new logs [18-07-2022 14:53:04]19658: Updated license status via CDN [18-07-2022 14:54:02]22300: WAF :: fetched 32 new logs [18-07-2022 14:57:01]30586: WAF :: fetched 1 new logs [18-07-2022 15:00:01]5990: WAF :: fetched 2 new logs [18-07-2022 15:01:02]9284: Reseting cPGuard inotify settings [18-07-2022 15:01:02]9289: WAF :: fetched 2 new logs [18-07-2022 15:02:01]12010: WAF :: fetched 1 new logs [18-07-2022 15:03:02]14706: WAF :: fetched 2 new logs [18-07-2022 15:12:02]7396: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658167922 [18-07-2022 15:12:02]7396: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 15:12:04]7396: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 15:12:05]7396: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-1512/20220718-151202-YtWicst19F6husVeAaozKQAAACo [18-07-2022 15:12:05]7396: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 15:12:05]7396: WAF :: fetched 2 new logs [18-07-2022 15:15:01]15536: WAF :: fetched 2 new logs [18-07-2022 15:16:01]18409: WAF :: fetched 3 new logs [18-07-2022 15:17:02]21095: WAF :: fetched 2 new logs [18-07-2022 15:18:01]23745: WAF :: fetched 5 new logs [18-07-2022 15:19:02]26413: WAF :: fetched 1 new logs [18-07-2022 15:21:02]31915: WAF :: fetched 1 new logs [18-07-2022 15:22:01]2202: WAF :: fetched 1 new logs [18-07-2022 15:23:02]4913: WAF :: fetched 1 new logs [18-07-2022 15:24:01]7540: WAF :: fetched 1 new logs [18-07-2022 15:27:01]15666: WAF :: fetched 2 new logs [18-07-2022 15:30:01]23755: WAF :: fetched 1 new logs [18-07-2022 15:32:04]29334: WAF :: fetched 1 new logs [18-07-2022 15:35:01]4931: WAF :: fetched 2 new logs [18-07-2022 15:36:01]7712: WAF :: fetched 1 new logs [18-07-2022 15:37:02]10400: WAF :: fetched 1 new logs [18-07-2022 15:38:01]13021: WAF :: fetched 2 new logs [18-07-2022 15:40:02]18473: WAF :: fetched 1 new logs [18-07-2022 15:41:01]21483: Checking for user cron vulnerabilities [18-07-2022 15:42:02]24265: WAF :: fetched 2 new logs [18-07-2022 15:43:01]26931: WAF :: fetched 1 new logs [18-07-2022 15:44:02]29601: Checking ditributed CMS bruteforce attacks [18-07-2022 15:45:01]32243: WAF :: fetched 3 new logs [18-07-2022 15:48:02]7962: WAF :: fetched 2 new logs [18-07-2022 15:49:02]10636: WAF :: fetched 2 new logs [18-07-2022 15:50:02]13395: WAF :: fetched 29 new logs [18-07-2022 15:51:02]16184: WAF :: fetched 1 new logs [18-07-2022 15:52:01]19063: WAF :: fetched 2 new logs [18-07-2022 15:56:02]29933: WAF :: fetched 1 new logs [18-07-2022 15:59:01]5604: WAF :: fetched 6 new logs [18-07-2022 16:00:02]8131: WAF :: fetched 3 new logs [18-07-2022 16:04:02]19832: WAF :: fetched 3 new logs [18-07-2022 16:06:01]25298: WAF :: fetched 1 new logs [18-07-2022 16:07:02]27962: WAF :: fetched 1 new logs [18-07-2022 16:08:01]30604: WAF :: fetched 1 new logs [18-07-2022 16:09:02]897: WAF :: fetched 6 new logs [18-07-2022 16:12:02]9075: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658171522 [18-07-2022 16:12:02]9075: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 16:12:04]9075: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 16:12:05]9075: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-1612/20220718-161202-YtWwgkys-236MPDYd1MAlAAAABY [18-07-2022 16:12:05]9075: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 16:12:06]9075: WAF :: fetched 5 new logs [18-07-2022 16:13:03]11734: WAF :: fetched 1 new logs [18-07-2022 16:16:01]20120: WAF :: fetched 1 new logs [18-07-2022 16:17:01]22787: WAF :: fetched 2 new logs [18-07-2022 16:19:02]28131: WAF :: fetched 1 new logs [18-07-2022 16:20:02]30811: WAF :: fetched 2 new logs [18-07-2022 16:22:02]3957: WAF :: fetched 2 new logs [18-07-2022 16:27:01]17626: WAF :: fetched 1 new logs [18-07-2022 16:29:02]23268: WAF :: fetched 6 new logs [18-07-2022 16:35:01]7382: WAF :: fetched 1 new logs [18-07-2022 16:36:02]10356: WAF :: fetched 1 new logs [18-07-2022 16:37:01]13040: WAF :: fetched 23 new logs [18-07-2022 16:38:02]15835: WAF :: fetched 7 new logs [18-07-2022 16:40:02]21261: WAF :: fetched 1 new logs [18-07-2022 16:41:02]24043: WAF :: fetched 11 new logs [18-07-2022 16:41:02]24043: Checking for user cron vulnerabilities [18-07-2022 16:42:01]26758: WAF :: fetched 1 new logs [18-07-2022 16:44:01]32261: Checking ditributed CMS bruteforce attacks [18-07-2022 16:45:03]2642: WAF :: fetched 1 new logs [18-07-2022 16:48:02]11270: WAF :: fetched 79 new logs [18-07-2022 16:49:01]13891: WAF :: fetched 82 new logs [18-07-2022 16:50:02]16692: WAF :: fetched 83 new logs [18-07-2022 16:51:02]19549: WAF :: fetched 54 new logs [18-07-2022 16:52:02]22191: WAF :: fetched 51 new logs [18-07-2022 16:53:01]24804: WAF :: fetched 19 new logs [18-07-2022 16:54:02]27543: WAF :: fetched 9 new logs [18-07-2022 16:55:01]30387: WAF :: fetched 49 new logs [18-07-2022 16:55:01]30388: httpd.conf changed. Refreshing watchlist. [18-07-2022 16:56:01]840: WAF :: fetched 2 new logs [18-07-2022 16:58:02]6307: WAF :: fetched 28 new logs [18-07-2022 16:59:01]8922: WAF :: fetched 4 new logs [18-07-2022 17:00:01]11289: WAF :: fetched 1 new logs [18-07-2022 17:01:01]14528: WAF :: fetched 33 new logs [18-07-2022 17:02:02]17314: WAF :: fetched 1 new logs [18-07-2022 17:06:01]28303: WAF :: fetched 1 new logs [18-07-2022 17:11:02]9607: WAF :: fetched 2 new logs [18-07-2022 17:12:01]12335: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658175121 [18-07-2022 17:12:01]12335: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 17:12:03]12335: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 17:12:05]12335: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-1712/20220718-171201-YtW-kS0Mjz96TMg5zzIaPQAAABM [18-07-2022 17:12:05]12335: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 17:12:05]12335: WAF :: fetched 1 new logs [18-07-2022 17:22:02]7018: WAF :: fetched 1 new logs [18-07-2022 17:23:03]9688: WAF :: fetched 1 new logs [18-07-2022 17:25:02]15084: WAF :: fetched 1 new logs [18-07-2022 17:26:02]17876: WAF :: fetched 6 new logs [18-07-2022 17:27:01]20752: WAF :: fetched 2 new logs [18-07-2022 17:28:02]23488: WAF :: fetched 1 new logs [18-07-2022 17:29:01]26079: WAF :: fetched 2 new logs [18-07-2022 17:31:02]31502: WAF :: fetched 2 new logs [18-07-2022 17:32:01]1886: WAF :: fetched 3 new logs [18-07-2022 17:33:02]4618: WAF :: fetched 6 new logs [18-07-2022 17:34:01]7226: WAF :: fetched 2 new logs [18-07-2022 17:35:02]9990: WAF :: fetched 3 new logs [18-07-2022 17:36:02]12748: WAF :: fetched 2 new logs [18-07-2022 17:40:02]23482: WAF :: fetched 4 new logs [18-07-2022 17:41:02]26197: WAF :: fetched 1 new logs [18-07-2022 17:41:02]26197: Checking for user cron vulnerabilities [18-07-2022 17:44:01]1897: Checking ditributed CMS bruteforce attacks [18-07-2022 17:46:01]7496: WAF :: fetched 1 new logs [18-07-2022 17:47:01]10347: WAF :: fetched 5 new logs [18-07-2022 17:49:02]15688: WAF :: fetched 29 new logs [18-07-2022 17:50:01]18524: WAF :: fetched 4 new logs [18-07-2022 17:51:01]21522: WAF :: fetched 1 new logs [18-07-2022 17:52:02]24516: WAF :: fetched 17 new logs [18-07-2022 17:55:01]32551: WAF :: fetched 47 new logs [18-07-2022 17:56:01]2872: WAF :: fetched 10 new logs [18-07-2022 17:58:01]8213: WAF :: fetched 2 new logs [18-07-2022 18:00:01]13302: WAF :: fetched 2 new logs [18-07-2022 18:01:02]16562: WAF :: fetched 1 new logs [18-07-2022 18:03:02]22221: WAF :: fetched 1 new logs [18-07-2022 18:06:02]30493: WAF :: fetched 1 new logs [18-07-2022 18:07:01]822: WAF :: fetched 1 new logs [18-07-2022 18:11:02]12040: WAF :: fetched 1 new logs [18-07-2022 18:12:02]14857: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658178722 [18-07-2022 18:12:02]14857: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 18:12:04]14857: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 18:12:05]14857: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-1812/20220718-181202-YtXMohuTooUAz_7bNydbkAAAACA [18-07-2022 18:12:05]14857: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 18:12:05]14857: WAF :: fetched 1 new logs [18-07-2022 18:13:01]17555: WAF :: fetched 1 new logs [18-07-2022 18:15:01]23046: WAF :: fetched 3 new logs [18-07-2022 18:17:02]28665: WAF :: fetched 1 new logs [18-07-2022 18:19:02]1649: WAF :: fetched 1 new logs [18-07-2022 18:22:02]9898: WAF :: fetched 1 new logs [18-07-2022 18:23:01]12508: WAF :: fetched 1 new logs [18-07-2022 18:25:02]17836: WAF :: fetched 29 new logs [18-07-2022 18:27:01]23242: WAF :: fetched 1 new logs [18-07-2022 18:29:01]28477: WAF :: fetched 1 new logs [18-07-2022 18:31:02]1512: WAF :: fetched 1 new logs [18-07-2022 18:33:01]6781: WAF :: fetched 28 new logs [18-07-2022 18:35:01]12011: WAF :: fetched 1 new logs [18-07-2022 18:39:02]22947: WAF :: fetched 1 new logs [18-07-2022 18:41:02]28249: WAF :: fetched 32 new logs [18-07-2022 18:41:02]28249: Checking for user cron vulnerabilities [18-07-2022 18:44:01]3916: Checking ditributed CMS bruteforce attacks [18-07-2022 18:46:01]9247: WAF :: fetched 2 new logs [18-07-2022 18:48:02]14545: WAF :: fetched 5 new logs [18-07-2022 18:53:01]28073: WAF :: fetched 2 new logs [18-07-2022 18:54:01]30715: WAF :: fetched 3 new logs [18-07-2022 18:55:02]1015: WAF :: fetched 24 new logs [18-07-2022 18:56:02]3762: WAF :: fetched 1 new logs [18-07-2022 18:57:02]6631: WAF :: fetched 1 new logs [18-07-2022 18:58:02]9245: WAF :: fetched 2 new logs [18-07-2022 18:59:01]11836: WAF :: fetched 3 new logs [18-07-2022 19:00:01]14255: WAF :: fetched 1 new logs [18-07-2022 19:03:02]22951: WAF :: fetched 2 new logs [18-07-2022 19:05:01]28248: WAF :: fetched 2 new logs [18-07-2022 19:12:01]14549: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658182321 [18-07-2022 19:12:01]14549: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 19:12:03]14549: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 19:12:05]14549: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-1912/20220718-191201-YtXasZNPl4XirENjpoNRwgAAAAo [18-07-2022 19:12:05]14549: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 19:12:05]14549: WAF :: fetched 3 new logs [18-07-2022 19:13:01]17207: WAF :: fetched 8 new logs [18-07-2022 19:14:02]20005: WAF :: fetched 4 new logs [18-07-2022 19:16:01]25501: WAF :: fetched 2 new logs [18-07-2022 19:17:02]28263: WAF :: fetched 3 new logs [18-07-2022 19:19:01]1030: WAF :: fetched 12 new logs [18-07-2022 19:21:01]6342: WAF :: fetched 24 new logs [18-07-2022 19:23:02]11565: WAF :: fetched 25 new logs [18-07-2022 19:24:01]14148: WAF :: fetched 15 new logs [18-07-2022 19:26:01]19533: WAF :: fetched 2 new logs [18-07-2022 19:27:02]22258: WAF :: fetched 2 new logs [18-07-2022 19:30:02]30200: WAF :: fetched 7 new logs [18-07-2022 19:31:01]388: WAF :: fetched 2 new logs [18-07-2022 19:32:02]3211: WAF :: fetched 2 new logs [18-07-2022 19:33:03]5903: WAF :: fetched 1 new logs [18-07-2022 19:34:01]8664: WAF :: fetched 2 new logs [18-07-2022 19:35:02]11348: WAF :: fetched 5 new logs [18-07-2022 19:36:01]14167: WAF :: fetched 2 new logs [18-07-2022 19:41:02]27594: WAF :: fetched 1 new logs [18-07-2022 19:41:02]27594: Checking for user cron vulnerabilities [18-07-2022 19:44:01]3303: Checking ditributed CMS bruteforce attacks [18-07-2022 19:44:02]3303: WAF :: fetched 1 new logs [18-07-2022 19:45:01]: Checking for definition updates [18-07-2022 19:45:01]5928: WAF :: fetched 1 new logs [18-07-2022 19:48:01]13942: WAF :: fetched 1 new logs [18-07-2022 19:50:01]19397: WAF :: fetched 5 new logs [18-07-2022 19:51:02]22150: WAF :: fetched 3 new logs [18-07-2022 19:52:01]24841: WAF :: fetched 1 new logs [18-07-2022 19:53:01]27476: WAF :: fetched 3 new logs [18-07-2022 19:54:02]30116: WAF :: fetched 3 new logs [18-07-2022 19:57:01]5819: WAF :: fetched 1 new logs [18-07-2022 20:03:01]22409: WAF :: fetched 1 new logs [18-07-2022 20:04:02]25055: WAF :: fetched 2 new logs [18-07-2022 20:06:01]30320: WAF :: fetched 2 new logs [18-07-2022 20:08:01]3190: WAF :: fetched 1 new logs [18-07-2022 20:10:01]8678: WAF :: fetched 3 new logs [18-07-2022 20:11:01]11384: WAF :: fetched 3 new logs [18-07-2022 20:12:02]14138: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658185922 [18-07-2022 20:12:02]14138: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 20:12:04]14138: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 20:12:04]14138: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-2012/20220718-201202-YtXowsDmkuipD6AG24xV9gAAABM [18-07-2022 20:12:04]14138: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 20:12:04]14138: WAF :: fetched 7 new logs [18-07-2022 20:13:03]16780: WAF :: fetched 2 new logs [18-07-2022 20:14:01]19574: WAF :: fetched 3 new logs [18-07-2022 20:15:02]22204: WAF :: fetched 2 new logs [18-07-2022 20:16:01]24908: WAF :: fetched 3 new logs [18-07-2022 20:17:02]27653: WAF :: fetched 1 new logs [18-07-2022 20:21:01]6222: WAF :: fetched 103 new logs [18-07-2022 20:22:01]8909: WAF :: fetched 81 new logs [18-07-2022 20:23:01]11585: WAF :: fetched 2 new logs [18-07-2022 20:27:03]22307: WAF :: fetched 108 new logs [18-07-2022 20:28:02]24939: WAF :: fetched 252 new logs [18-07-2022 20:29:01]27539: WAF :: fetched 3 new logs [18-07-2022 20:30:01]30155: WAF :: fetched 2 new logs [18-07-2022 20:31:02]357: WAF :: fetched 2 new logs [18-07-2022 20:32:01]3077: WAF :: fetched 2 new logs [18-07-2022 20:35:01]10884: WAF :: fetched 31 new logs [18-07-2022 20:36:02]13538: WAF :: fetched 2 new logs [18-07-2022 20:37:01]16415: WAF :: fetched 1 new logs [18-07-2022 20:38:01]19180: WAF :: fetched 7 new logs [18-07-2022 20:39:02]21848: WAF :: fetched 2 new logs [18-07-2022 20:40:01]24491: WAF :: fetched 3 new logs [18-07-2022 20:41:01]27246: WAF :: fetched 1 new logs [18-07-2022 20:41:01]27246: Checking for user cron vulnerabilities [18-07-2022 20:44:01]2776: Checking ditributed CMS bruteforce attacks [18-07-2022 20:48:01]13443: WAF :: fetched 1 new logs [18-07-2022 20:53:01]26944: WAF :: fetched 1 new logs [18-07-2022 20:54:02]29587: WAF :: fetched 2 new logs [18-07-2022 20:56:01]2435: WAF :: fetched 2 new logs [18-07-2022 20:57:02]5138: WAF :: fetched 25 new logs [18-07-2022 20:58:01]7760: WAF :: fetched 4 new logs [18-07-2022 20:59:02]10406: WAF :: fetched 1 new logs [18-07-2022 21:02:02]18696: WAF :: fetched 4 new logs [18-07-2022 21:03:01]21304: WAF :: fetched 4 new logs [18-07-2022 21:04:02]24011: WAF :: fetched 3 new logs [18-07-2022 21:09:02]5154: WAF :: fetched 2 new logs [18-07-2022 21:11:01]10485: WAF :: fetched 1 new logs [18-07-2022 21:12:02]13193: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658189522 [18-07-2022 21:12:02]13193: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 21:12:04]13193: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 21:12:06]13193: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-2112/20220718-211202-YtX20qz9GiPFUc0NlagDRQAAAAw [18-07-2022 21:12:06]13193: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 21:12:06]13193: WAF :: fetched 13 new logs [18-07-2022 21:13:02]15847: WAF :: fetched 7 new logs [18-07-2022 21:14:01]18546: WAF :: fetched 24 new logs [18-07-2022 21:15:02]21243: WAF :: fetched 16 new logs [18-07-2022 21:16:01]23876: WAF :: fetched 2 new logs [18-07-2022 21:20:02]2126: WAF :: fetched 17 new logs [18-07-2022 21:23:01]10104: WAF :: fetched 1 new logs [18-07-2022 21:29:01]26015: WAF :: fetched 1 new logs [18-07-2022 21:30:01]28609: WAF :: fetched 1 new logs [18-07-2022 21:35:03]9587: WAF :: fetched 1 new logs [18-07-2022 21:36:01]12218: WAF :: fetched 4 new logs [18-07-2022 21:37:02]14925: WAF :: fetched 2 new logs [18-07-2022 21:40:02]22798: WAF :: fetched 1 new logs [18-07-2022 21:41:01]25409: Checking for user cron vulnerabilities [18-07-2022 21:43:04]30815: WAF :: fetched 1 new logs [18-07-2022 21:44:02]969: Checking ditributed CMS bruteforce attacks [18-07-2022 21:46:02]6314: WAF :: fetched 2 new logs [18-07-2022 21:47:02]8978: WAF :: fetched 4 new logs [18-07-2022 21:59:01]8564: WAF :: fetched 1 new logs [18-07-2022 22:00:02]10930: WAF :: fetched 2 new logs [18-07-2022 22:01:01]14060: WAF :: fetched 1 new logs [18-07-2022 22:05:02]24649: WAF :: fetched 31 new logs [18-07-2022 22:07:02]29953: WAF :: fetched 1 new logs [18-07-2022 22:07:09]29962: Performing Domain reputation checks [18-07-2022 22:08:01]32646: WAF :: fetched 1 new logs [18-07-2022 22:09:01]2981: WAF :: fetched 1 new logs [18-07-2022 22:10:02]5697: WAF :: fetched 1 new logs [18-07-2022 22:11:01]8372: WAF :: fetched 3 new logs [18-07-2022 22:12:02]11083: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658193122 [18-07-2022 22:12:02]11083: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 22:12:04]11083: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 22:12:05]11083: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-2212/20220718-221202-YtYE4tDlqfMi879ABQwaIAAAAAw [18-07-2022 22:12:05]11083: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 22:12:05]11083: WAF :: fetched 5 new logs [18-07-2022 22:13:02]13730: WAF :: fetched 1 new logs [18-07-2022 22:14:01]16327: WAF :: fetched 2 new logs [18-07-2022 22:19:01]29673: WAF :: fetched 5 new logs [18-07-2022 22:24:02]10466: WAF :: fetched 1 new logs [18-07-2022 22:26:02]15715: WAF :: fetched 2 new logs [18-07-2022 22:27:04]18405: WAF :: fetched 3 new logs [18-07-2022 22:28:01]21139: WAF :: fetched 9 new logs [18-07-2022 22:29:02]23756: WAF :: fetched 1 new logs [18-07-2022 22:30:01]26391: WAF :: fetched 1 new logs [18-07-2022 22:32:01]31789: WAF :: fetched 2 new logs [18-07-2022 22:33:05]2087: WAF :: fetched 1 new logs [18-07-2022 22:34:01]4648: WAF :: fetched 2 new logs [18-07-2022 22:36:02]9952: WAF :: fetched 2 new logs [18-07-2022 22:37:01]12546: WAF :: fetched 3 new logs [18-07-2022 22:38:02]15207: WAF :: fetched 3 new logs [18-07-2022 22:40:02]20592: WAF :: fetched 2 new logs [18-07-2022 22:41:01]23298: WAF :: fetched 4 new logs [18-07-2022 22:41:01]23298: Checking for user cron vulnerabilities [18-07-2022 22:42:02]25894: WAF :: fetched 2 new logs [18-07-2022 22:44:02]31227: Checking ditributed CMS bruteforce attacks [18-07-2022 22:44:02]31227: WAF :: fetched 1 new logs [18-07-2022 22:45:02]1531: WAF :: fetched 3 new logs [18-07-2022 22:49:01]12211: WAF :: fetched 1 new logs [18-07-2022 22:50:02]14873: WAF :: fetched 1 new logs [18-07-2022 22:58:01]4928: WAF :: fetched 4 new logs [18-07-2022 23:02:01]15597: WAF :: fetched 1 new logs [18-07-2022 23:04:01]21106: WAF :: fetched 2 new logs [18-07-2022 23:05:01]23749: WAF :: fetched 1 new logs [18-07-2022 23:07:54]29117: Performed RBL check for 23.111.136.34. [18-07-2022 23:11:01]7163: WAF :: fetched 8 new logs [18-07-2022 23:12:02]9888: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658196722 [18-07-2022 23:12:02]9888: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [18-07-2022 23:12:04]9888: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [18-07-2022 23:12:04]9888: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220718/20220718-2312/20220718-231202-YtYS8hKDJC2I_yQGsSV4wAAAAAw [18-07-2022 23:12:04]9888: WAF :: No suitable log file found. Using SQLite.. [18-07-2022 23:12:04]9888: WAF :: fetched 1 new logs [18-07-2022 23:13:01]12638: WAF :: fetched 14 new logs [18-07-2022 23:14:01]15383: WAF :: fetched 12 new logs [18-07-2022 23:15:02]18124: WAF :: fetched 5 new logs [18-07-2022 23:16:01]20879: WAF :: fetched 2 new logs [18-07-2022 23:17:02]23477: WAF :: fetched 1 new logs [18-07-2022 23:19:01]28758: WAF :: fetched 4 new logs [18-07-2022 23:20:02]31402: WAF :: fetched 42 new logs [18-07-2022 23:21:02]1627: WAF :: fetched 46 new logs [18-07-2022 23:22:01]4258: WAF :: fetched 96 new logs [18-07-2022 23:23:02]7048: WAF :: fetched 45 new logs [18-07-2022 23:24:01]9663: WAF :: fetched 48 new logs [18-07-2022 23:25:02]12531: WAF :: fetched 69 new logs [18-07-2022 23:26:02]15251: WAF :: fetched 55 new logs [18-07-2022 23:27:02]17923: WAF :: fetched 36 new logs [18-07-2022 23:28:01]20642: WAF :: fetched 8 new logs [18-07-2022 23:29:01]23240: WAF :: fetched 48 new logs [18-07-2022 23:30:02]25960: WAF :: fetched 55 new logs [18-07-2022 23:31:01]28670: WAF :: fetched 40 new logs [18-07-2022 23:32:02]31345: WAF :: fetched 44 new logs [18-07-2022 23:33:01]1616: WAF :: fetched 21 new logs [18-07-2022 23:34:01]4220: WAF :: fetched 18 new logs [18-07-2022 23:35:02]6908: WAF :: fetched 54 new logs [18-07-2022 23:36:03]9533: WAF :: fetched 35 new logs [18-07-2022 23:37:02]12158: WAF :: fetched 22 new logs [18-07-2022 23:38:02]14857: WAF :: fetched 47 new logs [18-07-2022 23:39:01]17522: WAF :: fetched 63 new logs [18-07-2022 23:40:02]20246: WAF :: fetched 116 new logs [18-07-2022 23:41:01]22851: WAF :: fetched 26 new logs [18-07-2022 23:41:01]22851: Checking for user cron vulnerabilities [18-07-2022 23:42:01]25441: WAF :: fetched 30 new logs [18-07-2022 23:43:02]28111: WAF :: fetched 68 new logs [18-07-2022 23:44:01]30708: Checking ditributed CMS bruteforce attacks [18-07-2022 23:44:01]30708: WAF :: fetched 65 new logs [18-07-2022 23:45:02]898: WAF :: fetched 20 new logs [18-07-2022 23:46:01]3563: WAF :: fetched 21 new logs [18-07-2022 23:47:01]6188: WAF :: fetched 29 new logs [18-07-2022 23:48:02]8946: WAF :: fetched 39 new logs [18-07-2022 23:49:01]11570: WAF :: fetched 30 new logs [18-07-2022 23:50:02]14262: WAF :: fetched 25 new logs [18-07-2022 23:51:03]16917: WAF :: fetched 16 new logs [18-07-2022 23:52:01]19837: WAF :: fetched 11 new logs [18-07-2022 23:53:02]22598: WAF :: fetched 61 new logs [18-07-2022 23:54:02]25449: WAF :: fetched 54 new logs [18-07-2022 23:54:02]25445: httpd.conf changed. Refreshing watchlist. [18-07-2022 23:55:02]28881: WAF :: fetched 28 new logs [18-07-2022 23:55:02]28883: httpd.conf changed. Refreshing watchlist. [18-07-2022 23:56:01]32623: WAF :: fetched 1 new logs [18-07-2022 23:58:02]5644: WAF :: fetched 3 new logs [19-07-2022 00:01:01]13915: httpd.conf changed. Refreshing watchlist. [19-07-2022 00:01:04]13916: Sending daily report for July 19, 2022 [19-07-2022 00:04:01]23343: WAF :: fetched 1 new logs [19-07-2022 00:05:04]25945: WAF :: fetched 93 new logs [19-07-2022 00:05:04]25945: Deleted 0 entries older than 6 MONTH from scanner_logs [19-07-2022 00:05:04]25945: Deleted 0 files from Quarantine [19-07-2022 00:06:02]28701: WAF :: fetched 103 new logs [19-07-2022 00:07:01]31518: WAF :: fetched 109 new logs [19-07-2022 00:08:02]1849: WAF :: fetched 113 new logs [19-07-2022 00:09:01]5603: WAF :: fetched 54 new logs [19-07-2022 00:10:01]8325: WAF :: fetched 54 new logs [19-07-2022 00:11:02]11051: WAF :: fetched 45 new logs [19-07-2022 00:12:02]14577: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658200322 [19-07-2022 00:12:02]14577: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 00:12:04]14577: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 00:12:06]14577: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-0012/20220719-001202-YtYhAiPzxtenTkPSEvb-MwAAAA4 [19-07-2022 00:12:06]14577: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 00:12:06]14577: WAF :: fetched 46 new logs [19-07-2022 00:13:02]17679: WAF :: fetched 105 new logs [19-07-2022 00:14:01]20391: WAF :: fetched 80 new logs [19-07-2022 00:15:01]23068: WAF :: fetched 41 new logs [19-07-2022 00:16:02]26656: WAF :: fetched 87 new logs [19-07-2022 00:17:02]29606: WAF :: fetched 78 new logs [19-07-2022 00:18:01]32696: WAF :: fetched 24 new logs [19-07-2022 00:19:01]2966: WAF :: fetched 60 new logs [19-07-2022 00:20:04]5669: WAF :: fetched 118 new logs [19-07-2022 00:21:02]8522: WAF :: fetched 76 new logs [19-07-2022 00:22:01]11183: WAF :: fetched 73 new logs [19-07-2022 00:23:02]13892: WAF :: fetched 32 new logs [19-07-2022 00:24:01]17687: WAF :: fetched 23 new logs [19-07-2022 00:25:01]20529: WAF :: fetched 45 new logs [19-07-2022 00:26:02]23337: WAF :: fetched 71 new logs [19-07-2022 00:27:01]26085: WAF :: fetched 78 new logs [19-07-2022 00:27:01]26084: httpd.conf changed. Refreshing watchlist. [19-07-2022 00:28:02]29760: WAF :: fetched 38 new logs [19-07-2022 00:29:02]32644: WAF :: fetched 28 new logs [19-07-2022 00:30:01]2905: WAF :: fetched 15 new logs [19-07-2022 00:31:02]5619: WAF :: fetched 42 new logs [19-07-2022 00:32:01]8348: WAF :: fetched 75 new logs [19-07-2022 00:33:01]11125: WAF :: fetched 71 new logs [19-07-2022 00:34:02]13825: WAF :: fetched 90 new logs [19-07-2022 00:35:01]16452: WAF :: fetched 71 new logs [19-07-2022 00:36:02]19217: WAF :: fetched 75 new logs [19-07-2022 00:37:01]21812: WAF :: fetched 62 new logs [19-07-2022 00:38:01]24526: WAF :: fetched 108 new logs [19-07-2022 00:39:02]27171: WAF :: fetched 143 new logs [19-07-2022 00:40:02]29700: WAF :: fetched 80 new logs [19-07-2022 00:41:01]32335: WAF :: fetched 76 new logs [19-07-2022 00:41:01]32335: Checking for user cron vulnerabilities [19-07-2022 00:42:02]2559: WAF :: fetched 77 new logs [19-07-2022 00:43:01]5197: WAF :: fetched 196 new logs [19-07-2022 00:44:02]7824: Checking ditributed CMS bruteforce attacks [19-07-2022 00:44:02]7824: WAF :: fetched 140 new logs [19-07-2022 00:45:01]: Checking for software updates [19-07-2022 00:45:02]10391: WAF :: fetched 152 new logs [19-07-2022 00:46:01]12995: WAF :: fetched 153 new logs [19-07-2022 00:47:02]15603: WAF :: fetched 84 new logs [19-07-2022 00:48:01]18358: WAF :: fetched 117 new logs [19-07-2022 00:49:01]20923: WAF :: fetched 48 new logs [19-07-2022 00:50:02]23530: WAF :: fetched 96 new logs [19-07-2022 00:51:01]26133: WAF :: fetched 78 new logs [19-07-2022 00:52:02]28811: WAF :: fetched 100 new logs [19-07-2022 00:53:02]31452: WAF :: fetched 40 new logs [19-07-2022 00:54:01]1607: WAF :: fetched 60 new logs [19-07-2022 00:55:02]4213: WAF :: fetched 70 new logs [19-07-2022 00:56:02]6815: WAF :: fetched 77 new logs [19-07-2022 00:57:01]9375: WAF :: fetched 62 new logs [19-07-2022 00:58:02]12037: WAF :: fetched 36 new logs [19-07-2022 00:59:01]14584: WAF :: fetched 47 new logs [19-07-2022 01:00:01]16869: WAF :: fetched 46 new logs [19-07-2022 01:01:01]20721: WAF :: fetched 131 new logs [19-07-2022 01:02:02]23641: WAF :: fetched 93 new logs [19-07-2022 01:03:01]26789: WAF :: fetched 102 new logs [19-07-2022 01:04:03]29575: WAF :: fetched 77 new logs [19-07-2022 01:05:02]32457: WAF :: fetched 66 new logs [19-07-2022 01:06:01]2907: WAF :: fetched 70 new logs [19-07-2022 01:07:01]5616: WAF :: fetched 127 new logs [19-07-2022 01:08:02]8301: WAF :: fetched 48 new logs [19-07-2022 01:09:01]11015: WAF :: fetched 109 new logs [19-07-2022 01:10:02]13811: WAF :: fetched 129 new logs [19-07-2022 01:11:02]16442: WAF :: fetched 145 new logs [19-07-2022 01:12:01]19211: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658203921 [19-07-2022 01:12:01]19211: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 01:12:03]19211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 01:12:04]19211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-0112/20220719-011201-YtYvEcrJ3sC0SIvLkSgbyAAAAA0 [19-07-2022 01:12:04]19211: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 01:12:04]19211: WAF :: fetched 41 new logs [19-07-2022 01:13:02]22135: WAF :: fetched 97 new logs [19-07-2022 01:14:01]24793: WAF :: fetched 36 new logs [19-07-2022 01:15:02]27499: WAF :: fetched 65 new logs [19-07-2022 01:16:02]30435: WAF :: fetched 118 new logs [19-07-2022 01:17:01]970: WAF :: fetched 46 new logs [19-07-2022 01:18:02]3923: WAF :: fetched 114 new logs [19-07-2022 01:19:01]6646: WAF :: fetched 28 new logs [19-07-2022 01:20:02]9280: WAF :: fetched 71 new logs [19-07-2022 01:21:02]12120: WAF :: fetched 39 new logs [19-07-2022 01:22:01]14912: WAF :: fetched 56 new logs [19-07-2022 01:23:02]17841: WAF :: fetched 20 new logs [19-07-2022 01:24:01]20715: WAF :: fetched 113 new logs [19-07-2022 01:25:02]23448: WAF :: fetched 81 new logs [19-07-2022 01:26:01]26551: WAF :: fetched 19 new logs [19-07-2022 01:27:01]29332: WAF :: fetched 14 new logs [19-07-2022 01:28:03]32160: WAF :: fetched 23 new logs [19-07-2022 01:29:02]2825: WAF :: fetched 49 new logs [19-07-2022 01:30:01]5588: WAF :: fetched 56 new logs [19-07-2022 01:31:02]8217: WAF :: fetched 62 new logs [19-07-2022 01:32:20]10647: WAF :: fetched 50 new logs [19-07-2022 01:33:01]13810: WAF :: fetched 95 new logs [19-07-2022 01:34:01]16829: WAF :: fetched 40 new logs [19-07-2022 01:35:01]19854: WAF :: fetched 87 new logs [19-07-2022 01:36:02]22597: WAF :: fetched 49 new logs [19-07-2022 01:37:02]25606: WAF :: fetched 86 new logs [19-07-2022 01:38:01]28648: WAF :: fetched 73 new logs [19-07-2022 01:39:01]31509: WAF :: fetched 34 new logs [19-07-2022 01:40:01]1718: WAF :: fetched 31 new logs [19-07-2022 01:41:03]4431: WAF :: fetched 13 new logs [19-07-2022 01:41:03]4431: Checking for user cron vulnerabilities [19-07-2022 01:42:01]7245: WAF :: fetched 64 new logs [19-07-2022 01:43:02]10211: WAF :: fetched 41 new logs [19-07-2022 01:44:01]12848: Checking ditributed CMS bruteforce attacks [19-07-2022 01:44:02]12848: WAF :: fetched 46 new logs [19-07-2022 01:45:01]: Checking for definition updates [19-07-2022 01:45:01]15549: WAF :: fetched 18 new logs [19-07-2022 01:46:02]18449: WAF :: fetched 54 new logs [19-07-2022 01:47:02]21037: WAF :: fetched 16 new logs [19-07-2022 01:48:01]23706: WAF :: fetched 36 new logs [19-07-2022 01:49:01]26313: WAF :: fetched 3 new logs [19-07-2022 01:50:01]28928: WAF :: fetched 22 new logs [19-07-2022 01:51:02]31773: WAF :: fetched 76 new logs [19-07-2022 01:52:01]2179: WAF :: fetched 31 new logs [19-07-2022 01:53:02]4845: WAF :: fetched 34 new logs [19-07-2022 01:54:01]7394: WAF :: fetched 45 new logs [19-07-2022 01:55:01]9930: WAF :: fetched 116 new logs [19-07-2022 01:56:02]12633: WAF :: fetched 44 new logs [19-07-2022 01:57:02]15202: WAF :: fetched 35 new logs [19-07-2022 01:58:02]17952: WAF :: fetched 89 new logs [19-07-2022 01:59:01]20551: WAF :: fetched 37 new logs [19-07-2022 02:00:02]22832: WAF :: fetched 129 new logs [19-07-2022 02:01:01]25890: WAF :: fetched 114 new logs [19-07-2022 02:02:01]28523: WAF :: fetched 130 new logs [19-07-2022 02:03:02]31185: WAF :: fetched 69 new logs [19-07-2022 02:04:02]1320: WAF :: fetched 23 new logs [19-07-2022 02:05:02]3983: WAF :: fetched 58 new logs [19-07-2022 02:06:01]6578: WAF :: fetched 89 new logs [19-07-2022 02:07:01]9153: WAF :: fetched 90 new logs [19-07-2022 02:08:02]11853: WAF :: fetched 121 new logs [19-07-2022 02:09:01]14406: WAF :: fetched 36 new logs [19-07-2022 02:10:02]17040: WAF :: fetched 35 new logs [19-07-2022 02:11:01]19707: WAF :: fetched 46 new logs [19-07-2022 02:12:01]22275: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658207521 [19-07-2022 02:12:01]22275: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 02:12:03]22275: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 02:12:05]22275: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-0212/20220719-021201-YtY9IUSTmWaTsZyRYJcSggAAABw [19-07-2022 02:12:05]22275: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 02:12:05]22275: WAF :: fetched 57 new logs [19-07-2022 02:13:02]24961: WAF :: fetched 109 new logs [19-07-2022 02:14:01]27532: WAF :: fetched 60 new logs [19-07-2022 02:15:02]30149: WAF :: fetched 33 new logs [19-07-2022 02:16:02]324: WAF :: fetched 32 new logs [19-07-2022 02:17:02]2962: WAF :: fetched 44 new logs [19-07-2022 02:18:01]5627: WAF :: fetched 53 new logs [19-07-2022 02:19:02]8187: WAF :: fetched 75 new logs [19-07-2022 02:20:01]10771: WAF :: fetched 76 new logs [19-07-2022 02:25:01]23998: WAF :: fetched 20 new logs [19-07-2022 02:26:02]26673: WAF :: fetched 29 new logs [19-07-2022 02:27:01]29244: WAF :: fetched 43 new logs [19-07-2022 02:28:02]31892: WAF :: fetched 28 new logs [19-07-2022 02:29:01]2052: WAF :: fetched 32 new logs [19-07-2022 02:30:01]4687: WAF :: fetched 43 new logs [19-07-2022 02:31:02]7357: WAF :: fetched 117 new logs [19-07-2022 02:32:01]10218: WAF :: fetched 107 new logs [19-07-2022 02:33:02]13600: WAF :: fetched 57 new logs [19-07-2022 02:34:01]16454: WAF :: fetched 68 new logs [19-07-2022 02:35:01]19247: WAF :: fetched 148 new logs [19-07-2022 02:36:02]21878: WAF :: fetched 40 new logs [19-07-2022 02:37:01]24421: WAF :: fetched 9 new logs [19-07-2022 02:38:02]27101: WAF :: fetched 24 new logs [19-07-2022 02:39:02]29798: WAF :: fetched 56 new logs [19-07-2022 02:40:01]32431: WAF :: fetched 195 new logs [19-07-2022 02:41:02]2787: WAF :: fetched 59 new logs [19-07-2022 02:41:02]2787: Checking for user cron vulnerabilities [19-07-2022 02:42:02]5663: WAF :: fetched 19 new logs [19-07-2022 02:43:02]8483: WAF :: fetched 7 new logs [19-07-2022 02:44:01]11237: Checking ditributed CMS bruteforce attacks [19-07-2022 02:44:04]11237: WAF :: fetched 152 new logs [19-07-2022 02:45:02]14280: WAF :: fetched 171 new logs [19-07-2022 02:46:02]17153: WAF :: fetched 106 new logs [19-07-2022 02:47:01]19959: WAF :: fetched 17 new logs [19-07-2022 02:48:02]22619: WAF :: fetched 17 new logs [19-07-2022 02:49:01]25371: WAF :: fetched 34 new logs [19-07-2022 02:50:01]28043: WAF :: fetched 66 new logs [19-07-2022 02:51:02]30719: WAF :: fetched 36 new logs [19-07-2022 02:52:01]944: WAF :: fetched 21 new logs [19-07-2022 02:53:01]3938: WAF :: fetched 86 new logs [19-07-2022 02:53:02]3937: Updated license status via CDN [19-07-2022 02:54:02]6708: WAF :: fetched 83 new logs [19-07-2022 02:55:01]9273: WAF :: fetched 50 new logs [19-07-2022 02:55:03]9273: API call failed for url https://api.recaptcha.cloud/add Status : 500 [19-07-2022 02:56:02]11891: WAF :: fetched 1 new logs [19-07-2022 02:57:01]14463: WAF :: fetched 42 new logs [19-07-2022 02:58:02]17047: WAF :: fetched 75 new logs [19-07-2022 02:59:02]19869: WAF :: fetched 78 new logs [19-07-2022 03:00:02]22543: WAF :: fetched 53 new logs [19-07-2022 03:00:46]22543: Found and updated 32 CMS installations [19-07-2022 03:01:01]25662: WAF :: fetched 172 new logs [19-07-2022 03:02:02]28686: WAF :: fetched 202 new logs [19-07-2022 03:03:01]31486: WAF :: fetched 97 new logs [19-07-2022 03:03:50]22543: Sending CMS version vulnerability report emails to cpanel users [19-07-2022 03:03:54]22543: Checking wordpress installations for suspicious directories [19-07-2022 03:04:01]2489: WAF :: fetched 114 new logs [19-07-2022 03:04:26]31529: Sending CMS version vulnerability report emails to cpanel users [19-07-2022 03:04:30]31529: Checking wordpress installations for suspicious directories [19-07-2022 03:05:02]5595: WAF :: fetched 135 new logs [19-07-2022 03:06:01]8345: WAF :: fetched 104 new logs [19-07-2022 03:07:01]11074: WAF :: fetched 80 new logs [19-07-2022 03:08:02]13875: WAF :: fetched 76 new logs [19-07-2022 03:09:02]16633: WAF :: fetched 97 new logs [19-07-2022 03:10:02]19526: WAF :: fetched 123 new logs [19-07-2022 03:11:01]22151: WAF :: fetched 21 new logs [19-07-2022 03:12:02]24765: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658211122 [19-07-2022 03:12:02]24765: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 03:12:04]24765: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 03:12:06]24765: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-0312/20220719-031202-YtZLMlr4ioiLIh7WRl7iSQAAAA0 [19-07-2022 03:12:06]24765: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 03:12:06]24765: WAF :: fetched 35 new logs [19-07-2022 03:13:01]27315: WAF :: fetched 52 new logs [19-07-2022 03:14:02]29990: WAF :: fetched 39 new logs [19-07-2022 03:15:02]32546: WAF :: fetched 134 new logs [19-07-2022 03:16:03]2805: WAF :: fetched 105 new logs [19-07-2022 03:17:01]5380: WAF :: fetched 181 new logs [19-07-2022 03:18:02]7991: WAF :: fetched 226 new logs [19-07-2022 03:19:02]10599: WAF :: fetched 102 new logs [19-07-2022 03:20:01]13201: WAF :: fetched 52 new logs [19-07-2022 03:21:02]15827: WAF :: fetched 63 new logs [19-07-2022 03:22:02]18461: WAF :: fetched 131 new logs [19-07-2022 03:23:01]21037: WAF :: fetched 160 new logs [19-07-2022 03:24:02]23727: WAF :: fetched 108 new logs [19-07-2022 03:25:01]26297: WAF :: fetched 36 new logs [19-07-2022 03:26:02]28940: WAF :: fetched 19 new logs [19-07-2022 03:27:01]31458: WAF :: fetched 69 new logs [19-07-2022 03:28:01]1626: WAF :: fetched 27 new logs [19-07-2022 03:29:03]4356: WAF :: fetched 142 new logs [19-07-2022 03:30:02]6951: WAF :: fetched 107 new logs [19-07-2022 03:31:02]9565: WAF :: fetched 65 new logs [19-07-2022 03:32:01]12161: WAF :: fetched 94 new logs [19-07-2022 03:33:02]14725: WAF :: fetched 72 new logs [19-07-2022 03:34:01]17344: WAF :: fetched 49 new logs [19-07-2022 03:35:01]20077: WAF :: fetched 27 new logs [19-07-2022 03:36:03]22692: WAF :: fetched 109 new logs [19-07-2022 03:37:01]25274: WAF :: fetched 85 new logs [19-07-2022 03:38:01]27846: WAF :: fetched 89 new logs [19-07-2022 03:39:01]30541: WAF :: fetched 35 new logs [19-07-2022 03:40:01]30124: WAF :: fetched 51 new logs [19-07-2022 03:41:02]17028: WAF :: fetched 103 new logs [19-07-2022 03:41:02]17028: Checking for user cron vulnerabilities [19-07-2022 03:42:01]30664: WAF :: fetched 42 new logs [19-07-2022 03:43:02]11102: WAF :: fetched 61 new logs [19-07-2022 03:44:01]13825: Checking ditributed CMS bruteforce attacks [19-07-2022 03:44:05]13825: WAF :: fetched 80 new logs [19-07-2022 03:45:01]16452: WAF :: fetched 170 new logs [19-07-2022 03:46:02]19155: WAF :: fetched 61 new logs [19-07-2022 03:47:01]21743: WAF :: fetched 53 new logs [19-07-2022 03:48:02]24343: WAF :: fetched 136 new logs [19-07-2022 03:49:01]27044: WAF :: fetched 88 new logs [19-07-2022 03:50:01]29617: WAF :: fetched 116 new logs [19-07-2022 03:51:02]32183: WAF :: fetched 96 new logs [19-07-2022 03:52:01]2336: WAF :: fetched 122 new logs [19-07-2022 03:53:02]4926: WAF :: fetched 163 new logs [19-07-2022 03:54:01]7579: WAF :: fetched 74 new logs [19-07-2022 03:55:01]10122: WAF :: fetched 71 new logs [19-07-2022 03:56:02]12771: WAF :: fetched 76 new logs [19-07-2022 03:57:01]15314: WAF :: fetched 187 new logs [19-07-2022 03:58:01]17960: WAF :: fetched 106 new logs [19-07-2022 03:59:04]20680: WAF :: fetched 81 new logs [19-07-2022 04:00:01]22932: WAF :: fetched 127 new logs [19-07-2022 04:01:01]25993: WAF :: fetched 162 new logs [19-07-2022 04:02:02]28630: WAF :: fetched 126 new logs [19-07-2022 04:03:01]31204: WAF :: fetched 61 new logs [19-07-2022 04:04:02]1463: WAF :: fetched 30 new logs [19-07-2022 04:05:01]4029: WAF :: fetched 130 new logs [19-07-2022 04:06:03]6653: WAF :: fetched 135 new logs [19-07-2022 04:07:01]9259: WAF :: fetched 226 new logs [19-07-2022 04:08:02]11853: WAF :: fetched 59 new logs [19-07-2022 04:09:02]14463: WAF :: fetched 77 new logs [19-07-2022 04:10:01]17030: WAF :: fetched 133 new logs [19-07-2022 04:11:02]19748: WAF :: fetched 171 new logs [19-07-2022 04:12:01]22281: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658214721 [19-07-2022 04:12:01]22281: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 04:12:03]22281: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 04:12:05]22281: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-0412/20220719-041201-YtZZQVZLssqfRKWDuVxLPgAAABE [19-07-2022 04:12:05]22281: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 04:12:06]22281: WAF :: fetched 161 new logs [19-07-2022 04:13:01]24852: WAF :: fetched 69 new logs [19-07-2022 04:14:01]27518: WAF :: fetched 74 new logs [19-07-2022 04:15:02]30119: WAF :: fetched 118 new logs [19-07-2022 04:16:01]32676: WAF :: fetched 112 new logs [19-07-2022 04:17:01]2844: WAF :: fetched 74 new logs [19-07-2022 04:18:02]5395: WAF :: fetched 44 new logs [19-07-2022 04:19:01]8013: WAF :: fetched 153 new logs [19-07-2022 04:20:02]10601: WAF :: fetched 154 new logs [19-07-2022 04:21:04]13219: WAF :: fetched 174 new logs [19-07-2022 04:22:01]15750: WAF :: fetched 51 new logs [19-07-2022 04:23:01]18392: WAF :: fetched 58 new logs [19-07-2022 04:24:01]21024: WAF :: fetched 15 new logs [19-07-2022 04:25:02]23666: WAF :: fetched 97 new logs [19-07-2022 04:26:01]26254: WAF :: fetched 147 new logs [19-07-2022 04:27:01]28832: WAF :: fetched 39 new logs [19-07-2022 04:28:01]31429: WAF :: fetched 28 new logs [19-07-2022 04:29:02]1694: WAF :: fetched 9 new logs [19-07-2022 04:30:02]4270: WAF :: fetched 147 new logs [19-07-2022 04:31:01]6894: WAF :: fetched 109 new logs [19-07-2022 04:32:02]9507: WAF :: fetched 89 new logs [19-07-2022 04:33:01]12002: WAF :: fetched 16 new logs [19-07-2022 04:34:02]14718: WAF :: fetched 119 new logs [19-07-2022 04:35:03]17324: WAF :: fetched 114 new logs [19-07-2022 04:36:01]20021: WAF :: fetched 192 new logs [19-07-2022 04:37:02]22589: WAF :: fetched 98 new logs [19-07-2022 04:38:01]25140: WAF :: fetched 102 new logs [19-07-2022 04:39:01]27834: WAF :: fetched 39 new logs [19-07-2022 04:40:02]30448: WAF :: fetched 77 new logs [19-07-2022 04:41:01]602: WAF :: fetched 140 new logs [19-07-2022 04:41:01]602: Checking for user cron vulnerabilities [19-07-2022 04:42:02]3238: WAF :: fetched 123 new logs [19-07-2022 04:43:02]5798: WAF :: fetched 88 new logs [19-07-2022 04:44:01]8405: Checking ditributed CMS bruteforce attacks [19-07-2022 04:44:03]8405: WAF :: fetched 110 new logs [19-07-2022 04:45:02]11033: WAF :: fetched 124 new logs [19-07-2022 04:46:01]13615: WAF :: fetched 143 new logs [19-07-2022 04:47:02]16231: WAF :: fetched 124 new logs [19-07-2022 04:48:02]18928: WAF :: fetched 8 new logs [19-07-2022 04:49:01]21601: WAF :: fetched 86 new logs [19-07-2022 04:50:02]24237: WAF :: fetched 62 new logs [19-07-2022 04:51:01]26898: WAF :: fetched 160 new logs [19-07-2022 04:52:01]29502: WAF :: fetched 162 new logs [19-07-2022 04:53:02]32107: WAF :: fetched 97 new logs [19-07-2022 04:54:01]2327: WAF :: fetched 29 new logs [19-07-2022 04:56:01]7455: WAF :: fetched 58 new logs [19-07-2022 04:57:01]10014: WAF :: fetched 140 new logs [19-07-2022 04:58:03]12579: WAF :: fetched 108 new logs [19-07-2022 04:59:01]15277: WAF :: fetched 46 new logs [19-07-2022 05:00:02]17541: WAF :: fetched 22 new logs [19-07-2022 05:01:01]20678: WAF :: fetched 106 new logs [19-07-2022 05:01:42]20679: Starting daily scan on files updated in last 24 hrs [19-07-2022 05:02:01]23270: WAF :: fetched 75 new logs [19-07-2022 05:03:01]25875: WAF :: fetched 71 new logs [19-07-2022 05:04:01]28506: WAF :: fetched 61 new logs [19-07-2022 05:05:01]31072: WAF :: fetched 22 new logs [19-07-2022 05:06:02]1319: WAF :: fetched 96 new logs [19-07-2022 05:07:02]3907: WAF :: fetched 139 new logs [19-07-2022 05:08:02]6561: WAF :: fetched 168 new logs [19-07-2022 05:09:01]9310: WAF :: fetched 55 new logs [19-07-2022 05:10:01]12004: WAF :: fetched 67 new logs [19-07-2022 05:11:02]14737: WAF :: fetched 30 new logs [19-07-2022 05:12:01]17271: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658218321 [19-07-2022 05:12:01]17271: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 05:12:03]17271: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 05:12:06]17271: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-0512/20220719-051201-YtZnUQdlDURVFrvYcRa6cgAAABE [19-07-2022 05:12:06]17271: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 05:12:06]17271: WAF :: fetched 240 new logs [19-07-2022 05:13:02]19931: WAF :: fetched 130 new logs [19-07-2022 05:14:02]22547: WAF :: fetched 209 new logs [19-07-2022 05:15:01]25121: WAF :: fetched 94 new logs [19-07-2022 05:16:02]27746: WAF :: fetched 34 new logs [19-07-2022 05:17:01]30265: WAF :: fetched 19 new logs [19-07-2022 05:18:01]380: WAF :: fetched 102 new logs [19-07-2022 05:19:02]3153: WAF :: fetched 196 new logs [19-07-2022 05:20:02]5692: WAF :: fetched 56 new logs [19-07-2022 05:21:02]8356: WAF :: fetched 16 new logs [19-07-2022 05:22:01]10962: WAF :: fetched 24 new logs [19-07-2022 05:23:01]13537: WAF :: fetched 116 new logs [19-07-2022 05:24:02]16194: WAF :: fetched 93 new logs [19-07-2022 05:25:01]18839: WAF :: fetched 80 new logs [19-07-2022 05:26:01]21458: WAF :: fetched 85 new logs [19-07-2022 05:27:02]24131: WAF :: fetched 107 new logs [19-07-2022 05:28:02]26716: WAF :: fetched 56 new logs [19-07-2022 05:29:01]29427: WAF :: fetched 151 new logs [19-07-2022 05:30:02]32085: WAF :: fetched 82 new logs [19-07-2022 05:31:01]2296: WAF :: fetched 55 new logs [19-07-2022 05:32:04]4941: WAF :: fetched 80 new logs [19-07-2022 05:33:02]7518: WAF :: fetched 137 new logs [19-07-2022 05:34:01]10161: WAF :: fetched 115 new logs [19-07-2022 05:35:02]12732: WAF :: fetched 90 new logs [19-07-2022 05:36:01]15349: WAF :: fetched 54 new logs [19-07-2022 05:37:02]17959: WAF :: fetched 49 new logs [19-07-2022 05:38:01]20647: WAF :: fetched 117 new logs [19-07-2022 05:39:01]23342: WAF :: fetched 54 new logs [19-07-2022 05:40:02]25951: WAF :: fetched 67 new logs [19-07-2022 05:41:01]28548: WAF :: fetched 78 new logs [19-07-2022 05:41:01]28548: Checking for user cron vulnerabilities [19-07-2022 05:42:03]31145: WAF :: fetched 160 new logs [19-07-2022 05:43:02]1384: WAF :: fetched 54 new logs [19-07-2022 05:44:01]4196: Checking ditributed CMS bruteforce attacks [19-07-2022 05:44:05]4196: WAF :: fetched 44 new logs [19-07-2022 05:45:02]6979: WAF :: fetched 78 new logs [19-07-2022 05:46:01]9572: WAF :: fetched 187 new logs [19-07-2022 05:47:02]12173: WAF :: fetched 72 new logs [19-07-2022 05:48:01]14697: WAF :: fetched 51 new logs [19-07-2022 05:49:01]17382: WAF :: fetched 93 new logs [19-07-2022 05:50:04]20062: WAF :: fetched 110 new logs [19-07-2022 05:51:01]22718: WAF :: fetched 65 new logs [19-07-2022 05:52:01]25382: WAF :: fetched 74 new logs [19-07-2022 05:53:02]27969: WAF :: fetched 139 new logs [19-07-2022 05:54:02]30631: WAF :: fetched 30 new logs [19-07-2022 05:55:01]745: WAF :: fetched 53 new logs [19-07-2022 05:56:02]3376: WAF :: fetched 28 new logs [19-07-2022 05:57:03]5955: WAF :: fetched 103 new logs [19-07-2022 05:58:01]8569: WAF :: fetched 146 new logs [19-07-2022 05:59:02]11232: WAF :: fetched 22 new logs [19-07-2022 06:00:01]13547: WAF :: fetched 31 new logs [19-07-2022 06:01:02]16591: WAF :: fetched 79 new logs [19-07-2022 06:02:01]19284: WAF :: fetched 29 new logs [19-07-2022 06:03:01]21865: WAF :: fetched 10 new logs [19-07-2022 06:04:02]24523: WAF :: fetched 6 new logs [19-07-2022 06:05:01]27128: WAF :: fetched 102 new logs [19-07-2022 06:06:02]29793: WAF :: fetched 150 new logs [19-07-2022 06:07:01]32334: WAF :: fetched 84 new logs [19-07-2022 06:08:02]2518: WAF :: fetched 61 new logs [19-07-2022 06:09:01]5142: WAF :: fetched 47 new logs [19-07-2022 06:10:01]7774: WAF :: fetched 81 new logs [19-07-2022 06:11:02]10426: WAF :: fetched 76 new logs [19-07-2022 06:12:02]12944: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658221922 [19-07-2022 06:12:02]12944: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 06:12:04]12944: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 06:12:06]12944: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-0612/20220719-061202-YtZ1YoDh0O390S1nyaqW8gAAAAE [19-07-2022 06:12:06]12944: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 06:12:06]12944: WAF :: fetched 82 new logs [19-07-2022 06:14:02]18275: WAF :: fetched 16 new logs [19-07-2022 06:15:01]20888: WAF :: fetched 49 new logs [19-07-2022 06:16:02]23553: WAF :: fetched 78 new logs [19-07-2022 06:17:01]26178: WAF :: fetched 66 new logs [19-07-2022 06:18:02]28771: WAF :: fetched 25 new logs [19-07-2022 06:19:02]31402: WAF :: fetched 140 new logs [19-07-2022 06:20:01]1601: WAF :: fetched 95 new logs [19-07-2022 06:21:02]4246: WAF :: fetched 44 new logs [19-07-2022 06:22:01]6831: WAF :: fetched 13 new logs [19-07-2022 06:23:02]9449: WAF :: fetched 77 new logs [19-07-2022 06:24:01]12060: WAF :: fetched 35 new logs [19-07-2022 06:25:02]14720: WAF :: fetched 12 new logs [19-07-2022 06:26:03]17350: WAF :: fetched 32 new logs [19-07-2022 06:27:01]20139: WAF :: fetched 61 new logs [19-07-2022 06:28:02]22682: WAF :: fetched 14 new logs [19-07-2022 06:29:01]25365: WAF :: fetched 37 new logs [19-07-2022 06:30:02]27989: WAF :: fetched 1 new logs [19-07-2022 06:31:01]30559: WAF :: fetched 1 new logs [19-07-2022 06:32:01]666: WAF :: fetched 45 new logs [19-07-2022 06:33:02]3323: WAF :: fetched 13 new logs [19-07-2022 06:34:01]5933: WAF :: fetched 64 new logs [19-07-2022 06:35:02]8501: WAF :: fetched 55 new logs [19-07-2022 06:36:02]11155: WAF :: fetched 102 new logs [19-07-2022 06:37:01]13730: WAF :: fetched 39 new logs [19-07-2022 06:38:02]16315: WAF :: fetched 13 new logs [19-07-2022 06:40:01]21601: WAF :: fetched 12 new logs [19-07-2022 06:41:02]24248: WAF :: fetched 36 new logs [19-07-2022 06:41:02]24248: Checking for user cron vulnerabilities [19-07-2022 06:42:01]26814: WAF :: fetched 10 new logs [19-07-2022 06:43:02]29422: WAF :: fetched 42 new logs [19-07-2022 06:44:01]32059: Checking ditributed CMS bruteforce attacks [19-07-2022 06:44:04]32059: WAF :: fetched 70 new logs [19-07-2022 06:45:01]2259: WAF :: fetched 43 new logs [19-07-2022 06:46:02]4888: WAF :: fetched 32 new logs [19-07-2022 06:47:01]7431: WAF :: fetched 30 new logs [19-07-2022 06:48:02]10080: WAF :: fetched 22 new logs [19-07-2022 06:49:01]12717: WAF :: fetched 20 new logs [19-07-2022 06:50:02]15314: WAF :: fetched 13 new logs [19-07-2022 06:51:01]17961: WAF :: fetched 16 new logs [19-07-2022 06:52:01]20597: WAF :: fetched 19 new logs [19-07-2022 06:53:01]23192: WAF :: fetched 50 new logs [19-07-2022 06:59:02]6561: WAF :: fetched 25 new logs [19-07-2022 07:00:02]8876: WAF :: fetched 61 new logs [19-07-2022 07:01:01]11989: WAF :: fetched 78 new logs [19-07-2022 07:02:02]14635: WAF :: fetched 64 new logs [19-07-2022 07:03:01]17182: WAF :: fetched 23 new logs [19-07-2022 07:05:01]22471: WAF :: fetched 21 new logs [19-07-2022 07:06:02]25208: WAF :: fetched 67 new logs [19-07-2022 07:07:02]27806: WAF :: fetched 14 new logs [19-07-2022 07:08:01]30372: WAF :: fetched 2 new logs [19-07-2022 07:12:02]8413: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658225522 [19-07-2022 07:12:02]8413: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 07:12:04]8413: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 07:12:04]8413: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-0712/20220719-071202-YtaDcnOMGpN9L8Yi8UPQ9gAAAAQ [19-07-2022 07:12:05]8413: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 07:12:05]8413: WAF :: fetched 2 new logs [19-07-2022 07:13:01]10954: WAF :: fetched 2 new logs [19-07-2022 07:15:01]16229: WAF :: fetched 17 new logs [19-07-2022 07:19:01]26792: WAF :: fetched 1 new logs [19-07-2022 07:21:01]32031: WAF :: fetched 18 new logs [19-07-2022 07:22:02]2235: WAF :: fetched 30 new logs [19-07-2022 07:23:02]4817: WAF :: fetched 18 new logs [19-07-2022 07:24:01]7460: WAF :: fetched 48 new logs [19-07-2022 07:25:02]10095: WAF :: fetched 32 new logs [19-07-2022 07:26:01]12667: WAF :: fetched 30 new logs [19-07-2022 07:27:02]15289: WAF :: fetched 27 new logs [19-07-2022 07:28:02]17887: WAF :: fetched 29 new logs [19-07-2022 07:29:02]20577: WAF :: fetched 8 new logs [19-07-2022 07:32:01]28420: WAF :: fetched 2 new logs [19-07-2022 07:33:01]31002: WAF :: fetched 12 new logs [19-07-2022 07:36:01]6401: WAF :: fetched 2 new logs [19-07-2022 07:38:01]11580: WAF :: fetched 1 new logs [19-07-2022 07:39:02]14199: WAF :: fetched 3 new logs [19-07-2022 07:41:02]19582: WAF :: fetched 6 new logs [19-07-2022 07:41:02]19582: Checking for user cron vulnerabilities [19-07-2022 07:42:02]22166: WAF :: fetched 17 new logs [19-07-2022 07:43:01]24746: WAF :: fetched 21 new logs [19-07-2022 07:44:02]27327: Checking ditributed CMS bruteforce attacks [19-07-2022 07:44:05]27327: WAF :: fetched 2 new logs [19-07-2022 07:45:01]: Checking for definition updates [19-07-2022 07:45:01]30009: WAF :: fetched 1 new logs [19-07-2022 07:45:04]29993: Updated virus defnition : signatures.ndb [19-07-2022 07:46:01]32653: WAF :: fetched 1 new logs [19-07-2022 07:48:01]5465: WAF :: fetched 1 new logs [19-07-2022 07:49:02]8061: WAF :: fetched 2 new logs [19-07-2022 07:53:01]18727: WAF :: fetched 1 new logs [19-07-2022 07:54:02]21324: WAF :: fetched 1 new logs [19-07-2022 08:02:02]10261: WAF :: fetched 1 new logs [19-07-2022 08:05:01]18173: WAF :: fetched 1 new logs [19-07-2022 08:07:01]23441: WAF :: fetched 3 new logs [19-07-2022 08:08:01]26045: WAF :: fetched 2 new logs [19-07-2022 08:11:02]1633: WAF :: fetched 25 new logs [19-07-2022 08:12:02]4277: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658229122 [19-07-2022 08:12:02]4277: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 08:12:04]4277: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 08:12:06]4277: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-0812/20220719-081202-YtaRguPsix_O-tBsjdCbhwAAABU [19-07-2022 08:12:06]4277: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 08:12:06]4277: WAF :: fetched 6 new logs [19-07-2022 08:21:01]28102: WAF :: fetched 6 new logs [19-07-2022 08:27:01]11476: WAF :: fetched 10 new logs [19-07-2022 08:28:02]14090: WAF :: fetched 13 new logs [19-07-2022 08:29:01]16771: WAF :: fetched 1 new logs [19-07-2022 08:35:01]346: WAF :: fetched 1 new logs [19-07-2022 08:36:03]3074: WAF :: fetched 4 new logs [19-07-2022 08:39:01]10922: WAF :: fetched 2 new logs [19-07-2022 08:41:01]16199: Checking for user cron vulnerabilities [19-07-2022 08:44:01]24196: Checking ditributed CMS bruteforce attacks [19-07-2022 08:46:02]29570: WAF :: fetched 1 new logs [19-07-2022 08:50:02]7729: WAF :: fetched 1 new logs [19-07-2022 08:52:01]12925: WAF :: fetched 5 new logs [19-07-2022 08:54:01]18189: WAF :: fetched 5 new logs [19-07-2022 08:55:02]20951: WAF :: fetched 1 new logs [19-07-2022 08:55:03]20951: API call failed for url https://api.recaptcha.cloud/add Status : 500 [19-07-2022 08:56:02]23635: WAF :: fetched 3 new logs [19-07-2022 08:58:01]28898: WAF :: fetched 1 new logs [19-07-2022 08:59:01]31488: WAF :: fetched 2 new logs [19-07-2022 09:00:01]1511: WAF :: fetched 4 new logs [19-07-2022 09:01:01]4613: WAF :: fetched 10 new logs [19-07-2022 09:03:01]9956: WAF :: fetched 4 new logs [19-07-2022 09:04:01]12651: WAF :: fetched 1 new logs [19-07-2022 09:07:02]20892: WAF :: fetched 3 new logs [19-07-2022 09:11:01]31665: WAF :: fetched 1 new logs [19-07-2022 09:12:01]1879: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658232721 [19-07-2022 09:12:01]1879: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 09:12:03]1879: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 09:12:06]1879: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-0912/20220719-091201-YtafkRRTw3IdJaM5Lg8UtgAAABs [19-07-2022 09:12:06]1879: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [19-07-2022 09:12:06]1879: WAF :: fetched 1 new logs [19-07-2022 09:13:01]4592: WAF :: fetched 1 new logs [19-07-2022 09:15:01]9995: httpd.conf changed. Refreshing watchlist. [19-07-2022 09:18:02]18173: WAF :: fetched 1 new logs [19-07-2022 09:20:02]23706: httpd.conf changed. Refreshing watchlist. [19-07-2022 09:20:02]23692: WAF :: fetched 45 new logs [19-07-2022 09:21:02]26492: WAF :: fetched 38 new logs [19-07-2022 09:23:01]31787: WAF :: fetched 2 new logs [19-07-2022 09:24:01]2058: WAF :: fetched 1 new logs [19-07-2022 09:25:02]4863: WAF :: fetched 3 new logs [19-07-2022 09:26:02]7480: WAF :: fetched 3 new logs [19-07-2022 09:27:02]10199: httpd.conf changed. Refreshing watchlist. [19-07-2022 09:28:02]12790: WAF :: fetched 1 new logs [19-07-2022 09:32:02]23697: WAF :: fetched 2 new logs [19-07-2022 09:33:02]26438: httpd.conf changed. Refreshing watchlist. [19-07-2022 09:33:02]26439: WAF :: fetched 10 new logs [19-07-2022 09:35:01]31938: httpd.conf changed. Refreshing watchlist. [19-07-2022 09:35:01]31919: WAF :: fetched 2 new logs [19-07-2022 09:36:02]2249: WAF :: fetched 11 new logs [19-07-2022 09:37:01]4890: httpd.conf changed. Refreshing watchlist. [19-07-2022 09:39:02]10261: httpd.conf changed. Refreshing watchlist. [19-07-2022 09:41:02]15713: Checking for user cron vulnerabilities [19-07-2022 09:44:02]24000: Checking ditributed CMS bruteforce attacks [19-07-2022 09:44:02]24009: httpd.conf changed. Refreshing watchlist. [19-07-2022 09:46:02]29633: WAF :: fetched 8 new logs [19-07-2022 09:47:02]32385: httpd.conf changed. Refreshing watchlist. [19-07-2022 09:47:02]32383: WAF :: fetched 3 new logs [19-07-2022 09:48:02]2782: WAF :: fetched 1 new logs [19-07-2022 09:51:02]11325: WAF :: fetched 3 new logs [19-07-2022 09:53:01]16796: httpd.conf changed. Refreshing watchlist. [19-07-2022 09:54:02]19640: WAF :: fetched 1 new logs [19-07-2022 09:55:02]22511: WAF :: fetched 2 new logs [19-07-2022 09:56:02]25345: WAF :: fetched 1 new logs [19-07-2022 10:00:02]3630: httpd.conf changed. Refreshing watchlist. [19-07-2022 10:01:02]6946: WAF :: fetched 2 new logs [19-07-2022 10:02:02]9697: WAF :: fetched 1 new logs [19-07-2022 10:03:02]12410: httpd.conf changed. Refreshing watchlist. [19-07-2022 10:03:02]12413: WAF :: fetched 1 new logs [19-07-2022 10:04:01]15179: WAF :: fetched 1 new logs [19-07-2022 10:07:02]23625: WAF :: fetched 2 new logs [19-07-2022 10:09:01]29075: httpd.conf changed. Refreshing watchlist. [19-07-2022 10:09:01]29072: WAF :: fetched 1 new logs [19-07-2022 10:10:04]32054: WAF :: fetched 1 new logs [19-07-2022 10:12:01]5086: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658236321 [19-07-2022 10:12:01]5086: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 10:12:03]5086: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 10:12:04]5086: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-1012/20220719-101201-YtatoR-6VUA5OfRW7Lz4pgAAAAA [19-07-2022 10:12:04]5086: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 10:12:04]5086: WAF :: fetched 122 new logs [19-07-2022 10:13:01]7721: httpd.conf changed. Refreshing watchlist. [19-07-2022 10:16:01]16007: WAF :: fetched 3 new logs [19-07-2022 10:16:01]16008: httpd.conf changed. Refreshing watchlist. [19-07-2022 10:17:02]18783: WAF :: fetched 1 new logs [19-07-2022 10:18:03]21579: WAF :: fetched 2 new logs [19-07-2022 10:19:02]24238: WAF :: fetched 1 new logs [19-07-2022 10:20:01]26958: WAF :: fetched 4 new logs [19-07-2022 10:22:02]32575: WAF :: fetched 1 new logs [19-07-2022 10:22:02]32571: httpd.conf changed. Refreshing watchlist. [19-07-2022 10:23:02]2791: WAF :: fetched 1 new logs [19-07-2022 10:28:01]16355: WAF :: fetched 1 new logs [19-07-2022 10:29:02]19214: WAF :: fetched 1 new logs [19-07-2022 10:32:01]27605: WAF :: fetched 2 new logs [19-07-2022 10:33:02]30287: WAF :: fetched 2 new logs [19-07-2022 10:34:01]768: httpd.conf changed. Refreshing watchlist. [19-07-2022 10:39:02]14379: WAF :: fetched 2 new logs [19-07-2022 10:40:01]17215: WAF :: fetched 3 new logs [19-07-2022 10:41:02]20161: WAF :: fetched 2 new logs [19-07-2022 10:41:02]20161: Checking for user cron vulnerabilities [19-07-2022 10:42:01]22854: WAF :: fetched 1 new logs [19-07-2022 10:44:01]28216: Checking ditributed CMS bruteforce attacks [19-07-2022 10:45:01]30965: WAF :: fetched 2 new logs [19-07-2022 10:46:01]1376: WAF :: fetched 2 new logs [19-07-2022 10:46:01]1379: httpd.conf changed. Refreshing watchlist. [19-07-2022 10:48:01]6907: WAF :: fetched 1 new logs [19-07-2022 10:49:02]9582: WAF :: fetched 3 new logs [19-07-2022 10:50:02]12354: WAF :: fetched 11 new logs [19-07-2022 10:50:02]12365: httpd.conf changed. Refreshing watchlist. [19-07-2022 10:51:02]15121: WAF :: fetched 5 new logs [19-07-2022 10:52:02]17822: WAF :: fetched 13 new logs [19-07-2022 10:53:02]20651: WAF :: fetched 1 new logs [19-07-2022 10:53:02]20654: httpd.conf changed. Refreshing watchlist. [19-07-2022 10:54:01]23225: WAF :: fetched 1 new logs [19-07-2022 10:56:02]28954: WAF :: fetched 1 new logs [19-07-2022 10:56:02]28953: httpd.conf changed. Refreshing watchlist. [19-07-2022 10:57:01]31797: WAF :: fetched 1 new logs [19-07-2022 10:58:01]2039: WAF :: fetched 3 new logs [19-07-2022 10:58:01]2043: httpd.conf changed. Refreshing watchlist. [19-07-2022 10:59:02]4891: WAF :: fetched 3 new logs [19-07-2022 11:00:01]7400: WAF :: fetched 11 new logs [19-07-2022 11:00:02]7402: httpd.conf changed. Refreshing watchlist. [19-07-2022 11:01:01]10832: WAF :: fetched 1 new logs [19-07-2022 11:01:01]10833: httpd.conf changed. Refreshing watchlist. [19-07-2022 11:02:02]13543: WAF :: fetched 3 new logs [19-07-2022 11:03:01]16226: WAF :: fetched 2 new logs [19-07-2022 11:04:02]19052: WAF :: fetched 3 new logs [19-07-2022 11:05:03]21862: WAF :: fetched 1 new logs [19-07-2022 11:07:02]27487: WAF :: fetched 1 new logs [19-07-2022 11:08:29]27647: Performed RBL check for 23.111.136.34. [19-07-2022 11:10:01]3423: WAF :: fetched 7 new logs [19-07-2022 11:11:01]6219: WAF :: fetched 2 new logs [19-07-2022 11:12:02]9065: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658239922 [19-07-2022 11:12:02]9065: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 11:12:04]9065: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 11:12:06]9065: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-1112/20220719-111202-Yta7sgoH_-w_ehremnia_AAAABs [19-07-2022 11:12:06]9065: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 11:17:02]23081: WAF :: fetched 1 new logs [19-07-2022 11:19:02]28454: WAF :: fetched 1 new logs [19-07-2022 11:23:01]7208: WAF :: fetched 1 new logs [19-07-2022 11:30:01]26767: httpd.conf changed. Refreshing watchlist. [19-07-2022 11:31:02]29608: WAF :: fetched 4 new logs [19-07-2022 11:31:02]29614: httpd.conf changed. Refreshing watchlist. [19-07-2022 11:32:01]32424: WAF :: fetched 3 new logs [19-07-2022 11:33:02]2701: WAF :: fetched 1 new logs [19-07-2022 11:34:02]5465: WAF :: fetched 10 new logs [19-07-2022 11:35:01]8428: WAF :: fetched 5 new logs [19-07-2022 11:35:01]8439: httpd.conf changed. Refreshing watchlist. [19-07-2022 11:36:02]11281: WAF :: fetched 1 new logs [19-07-2022 11:38:02]16635: WAF :: fetched 1 new logs [19-07-2022 11:39:01]19391: WAF :: fetched 1 new logs [19-07-2022 11:41:02]24899: Checking for user cron vulnerabilities [19-07-2022 11:44:01]330: Checking ditributed CMS bruteforce attacks [19-07-2022 11:47:01]8396: WAF :: fetched 1 new logs [19-07-2022 11:48:02]11105: WAF :: fetched 1 new logs [19-07-2022 11:52:01]21955: WAF :: fetched 6 new logs [19-07-2022 11:53:01]24665: WAF :: fetched 25 new logs [19-07-2022 11:54:02]27411: WAF :: fetched 2 new logs [19-07-2022 11:56:02]507: WAF :: fetched 1 new logs [19-07-2022 11:57:02]3208: WAF :: fetched 1 new logs [19-07-2022 11:58:02]5892: WAF :: fetched 1 new logs [19-07-2022 11:59:01]8498: WAF :: fetched 28 new logs [19-07-2022 12:00:01]10903: WAF :: fetched 1 new logs [19-07-2022 12:02:02]16887: WAF :: fetched 2 new logs [19-07-2022 12:05:02]25049: WAF :: fetched 26 new logs [19-07-2022 12:07:02]30592: WAF :: fetched 16 new logs [19-07-2022 12:09:02]3556: WAF :: fetched 1 new logs [19-07-2022 12:12:02]11661: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658243522 [19-07-2022 12:12:02]11661: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 12:12:04]11661: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 12:12:06]11661: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-1212/20220719-121202-YtbJwm1hku3HPDH4MLq8cAAAAAk [19-07-2022 12:12:06]11661: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 12:12:06]11661: WAF :: fetched 1 new logs [19-07-2022 12:15:02]19769: WAF :: fetched 1 new logs [19-07-2022 12:19:02]30495: WAF :: fetched 1 new logs [19-07-2022 12:25:02]15201: WAF :: fetched 5 new logs [19-07-2022 12:29:01]26069: WAF :: fetched 2 new logs [19-07-2022 12:33:02]4575: WAF :: fetched 2 new logs [19-07-2022 12:34:02]7255: WAF :: fetched 1 new logs [19-07-2022 12:35:01]9942: WAF :: fetched 6 new logs [19-07-2022 12:36:01]12760: WAF :: fetched 2 new logs [19-07-2022 12:38:02]18121: WAF :: fetched 3 new logs [19-07-2022 12:39:01]20747: WAF :: fetched 1 new logs [19-07-2022 12:41:01]26154: WAF :: fetched 1 new logs [19-07-2022 12:41:01]26154: Checking for user cron vulnerabilities [19-07-2022 12:42:02]28864: WAF :: fetched 2 new logs [19-07-2022 12:44:01]1609: Checking ditributed CMS bruteforce attacks [19-07-2022 12:44:01]1609: WAF :: fetched 1 new logs [19-07-2022 12:45:01]: Checking for software updates [19-07-2022 12:48:01]12304: WAF :: fetched 1 new logs [19-07-2022 12:50:02]17610: httpd.conf changed. Refreshing watchlist. [19-07-2022 12:51:01]20467: WAF :: fetched 1 new logs [19-07-2022 12:52:02]23168: WAF :: fetched 1 new logs [19-07-2022 12:52:02]23166: httpd.conf changed. Refreshing watchlist. [19-07-2022 12:53:02]25793: WAF :: fetched 1 new logs [19-07-2022 12:55:02]31090: WAF :: fetched 1 new logs [19-07-2022 13:02:01]17747: WAF :: fetched 1 new logs [19-07-2022 13:03:02]20451: WAF :: fetched 1 new logs [19-07-2022 13:04:01]23028: WAF :: fetched 1 new logs [19-07-2022 13:06:02]28479: WAF :: fetched 1 new logs [19-07-2022 13:07:02]31260: WAF :: fetched 1 new logs [19-07-2022 13:08:01]1460: WAF :: fetched 6 new logs [19-07-2022 13:10:02]6807: WAF :: fetched 3 new logs [19-07-2022 13:11:02]9557: WAF :: fetched 3 new logs [19-07-2022 13:12:02]12206: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658247122 [19-07-2022 13:12:02]12206: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 13:12:04]12206: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 13:12:05]12206: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-1312/20220719-131202-YtbX0iHZAo5CZrQrPWqK7gAAAEE [19-07-2022 13:12:05]12206: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 13:12:06]12206: WAF :: fetched 2 new logs [19-07-2022 13:13:01]14850: WAF :: fetched 1 new logs [19-07-2022 13:14:02]17500: WAF :: fetched 4 new logs [19-07-2022 13:15:01]20183: WAF :: fetched 2 new logs [19-07-2022 13:16:02]22987: WAF :: fetched 3 new logs [19-07-2022 13:17:02]25582: WAF :: fetched 5 new logs [19-07-2022 13:18:01]28240: WAF :: fetched 2 new logs [19-07-2022 13:19:02]30885: WAF :: fetched 3 new logs [19-07-2022 13:20:02]1178: WAF :: fetched 1 new logs [19-07-2022 13:21:01]4113: WAF :: fetched 4 new logs [19-07-2022 13:23:03]9364: WAF :: fetched 1 new logs [19-07-2022 13:25:01]14646: WAF :: fetched 1 new logs [19-07-2022 13:27:01]20292: WAF :: fetched 2 new logs [19-07-2022 13:30:01]28397: WAF :: fetched 1 new logs [19-07-2022 13:32:02]1566: WAF :: fetched 3 new logs [19-07-2022 13:33:02]4209: WAF :: fetched 2 new logs [19-07-2022 13:34:02]6901: WAF :: fetched 8 new logs [19-07-2022 13:35:01]9530: WAF :: fetched 12 new logs [19-07-2022 13:36:01]12371: WAF :: fetched 1 new logs [19-07-2022 13:38:01]17713: WAF :: fetched 4 new logs [19-07-2022 13:39:02]20472: WAF :: fetched 1 new logs [19-07-2022 13:40:02]23203: WAF :: fetched 4 new logs [19-07-2022 13:41:02]26084: WAF :: fetched 3 new logs [19-07-2022 13:41:02]26084: Checking for user cron vulnerabilities [19-07-2022 13:42:02]28791: WAF :: fetched 2 new logs [19-07-2022 13:43:01]31530: WAF :: fetched 15 new logs [19-07-2022 13:44:02]1814: Checking ditributed CMS bruteforce attacks [19-07-2022 13:44:02]1814: WAF :: fetched 3 new logs [19-07-2022 13:45:01]: Checking for definition updates [19-07-2022 13:45:01]4499: WAF :: fetched 24 new logs [19-07-2022 13:47:02]10100: WAF :: fetched 1 new logs [19-07-2022 13:51:01]20972: WAF :: fetched 2 new logs [19-07-2022 13:52:02]23746: WAF :: fetched 14 new logs [19-07-2022 13:53:02]26350: WAF :: fetched 1 new logs [19-07-2022 13:54:01]29034: WAF :: fetched 1 new logs [19-07-2022 13:55:01]31770: WAF :: fetched 12 new logs [19-07-2022 13:56:03]2231: WAF :: fetched 10 new logs [19-07-2022 13:58:01]7520: WAF :: fetched 2 new logs [19-07-2022 13:59:02]10200: WAF :: fetched 4 new logs [19-07-2022 14:00:01]12548: WAF :: fetched 2 new logs [19-07-2022 14:02:02]18739: WAF :: fetched 10 new logs [19-07-2022 14:03:02]21406: WAF :: fetched 9 new logs [19-07-2022 14:04:01]24100: WAF :: fetched 2 new logs [19-07-2022 14:08:02]2368: WAF :: fetched 2 new logs [19-07-2022 14:09:01]5147: httpd.conf changed. Refreshing watchlist. [19-07-2022 14:10:02]7953: WAF :: fetched 1 new logs [19-07-2022 14:11:01]10793: WAF :: fetched 1 new logs [19-07-2022 14:12:01]13535: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658250721 [19-07-2022 14:12:01]13535: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 14:12:03]13535: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 14:12:05]13535: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-1412/20220719-141201-Ytbl4RFGBkGjke6Yw-5xNAAAADU [19-07-2022 14:12:05]13535: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 14:12:05]13535: WAF :: fetched 2 new logs [19-07-2022 14:14:03]19136: WAF :: fetched 4 new logs [19-07-2022 14:15:01]21995: WAF :: fetched 5 new logs [19-07-2022 14:16:02]24865: WAF :: fetched 11 new logs [19-07-2022 14:17:01]27551: WAF :: fetched 1 new logs [19-07-2022 14:18:01]30249: httpd.conf changed. Refreshing watchlist. [19-07-2022 14:20:02]3274: WAF :: fetched 1 new logs [19-07-2022 14:22:01]8897: WAF :: fetched 1 new logs [19-07-2022 14:24:01]14253: WAF :: fetched 1 new logs [19-07-2022 14:26:02]19968: WAF :: fetched 1 new logs [19-07-2022 14:27:01]22694: WAF :: fetched 1 new logs [19-07-2022 14:31:02]1365: WAF :: fetched 2 new logs [19-07-2022 14:32:01]4201: WAF :: fetched 8 new logs [19-07-2022 14:33:02]7028: WAF :: fetched 1 new logs [19-07-2022 14:34:01]9707: WAF :: fetched 6 new logs [19-07-2022 14:35:01]12418: WAF :: fetched 3 new logs [19-07-2022 14:36:02]15312: WAF :: fetched 2 new logs [19-07-2022 14:37:02]18221: httpd.conf changed. Refreshing watchlist. [19-07-2022 14:38:01]20926: WAF :: fetched 2 new logs [19-07-2022 14:39:01]23762: WAF :: fetched 7 new logs [19-07-2022 14:40:02]26477: WAF :: fetched 13 new logs [19-07-2022 14:41:01]29289: WAF :: fetched 8 new logs [19-07-2022 14:41:01]29289: Checking for user cron vulnerabilities [19-07-2022 14:42:01]32015: WAF :: fetched 21 new logs [19-07-2022 14:42:01]32012: httpd.conf changed. Refreshing watchlist. [19-07-2022 14:43:02]2454: WAF :: fetched 5 new logs [19-07-2022 14:43:02]2456: httpd.conf changed. Refreshing watchlist. [19-07-2022 14:44:01]5220: Checking ditributed CMS bruteforce attacks [19-07-2022 14:44:02]5220: WAF :: fetched 14 new logs [19-07-2022 14:45:04]7991: WAF :: fetched 32 new logs [19-07-2022 14:46:02]10850: WAF :: fetched 73 new logs [19-07-2022 14:47:02]13597: WAF :: fetched 142 new logs [19-07-2022 14:48:01]16352: WAF :: fetched 143 new logs [19-07-2022 14:49:02]19340: WAF :: fetched 156 new logs [19-07-2022 14:50:01]22284: WAF :: fetched 63 new logs [19-07-2022 14:51:01]25293: httpd.conf changed. Refreshing watchlist. [19-07-2022 14:53:02]30851: WAF :: fetched 4 new logs [19-07-2022 14:53:04]30848: Updated license status via CDN [19-07-2022 14:54:01]1145: WAF :: fetched 4 new logs [19-07-2022 14:55:01]4046: WAF :: fetched 5 new logs [19-07-2022 14:55:03]4046: API call failed for url https://api.recaptcha.cloud/add Status : 500 [19-07-2022 14:56:02]7132: WAF :: fetched 5 new logs [19-07-2022 14:57:01]9953: WAF :: fetched 2 new logs [19-07-2022 14:58:02]12755: WAF :: fetched 1 new logs [19-07-2022 14:59:01]15364: WAF :: fetched 2 new logs [19-07-2022 15:00:02]17873: WAF :: fetched 1 new logs [19-07-2022 15:01:02]21259: Reseting cPGuard inotify settings [19-07-2022 15:01:03]21245: WAF :: fetched 4 new logs [19-07-2022 15:02:01]24070: WAF :: fetched 1 new logs [19-07-2022 15:03:02]26873: WAF :: fetched 2 new logs [19-07-2022 15:05:02]32285: WAF :: fetched 1 new logs [19-07-2022 15:06:02]2890: WAF :: fetched 1 new logs [19-07-2022 15:07:01]5696: WAF :: fetched 1 new logs [19-07-2022 15:08:02]8604: WAF :: fetched 1 new logs [19-07-2022 15:09:02]11381: WAF :: fetched 9 new logs [19-07-2022 15:10:02]14326: WAF :: fetched 7 new logs [19-07-2022 15:11:02]17161: WAF :: fetched 1 new logs [19-07-2022 15:12:01]19882: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658254321 [19-07-2022 15:12:01]19882: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 15:12:03]19882: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 15:12:05]19882: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-1512/20220719-151201-Ytbz8RWh7tG60j3f6BFelAAAAD4 [19-07-2022 15:12:05]19882: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 15:12:05]19882: WAF :: fetched 2 new logs [19-07-2022 15:13:01]22582: WAF :: fetched 2 new logs [19-07-2022 15:14:02]25251: WAF :: fetched 6 new logs [19-07-2022 15:18:01]3888: WAF :: fetched 2 new logs [19-07-2022 15:20:01]9305: WAF :: fetched 3 new logs [19-07-2022 15:21:01]12146: WAF :: fetched 4 new logs [19-07-2022 15:22:02]14836: WAF :: fetched 11 new logs [19-07-2022 15:23:01]17519: WAF :: fetched 1 new logs [19-07-2022 15:24:01]20323: WAF :: fetched 5 new logs [19-07-2022 15:25:03]23065: WAF :: fetched 1 new logs [19-07-2022 15:26:01]25826: WAF :: fetched 1 new logs [19-07-2022 15:27:01]28583: WAF :: fetched 1 new logs [19-07-2022 15:28:02]31284: WAF :: fetched 1 new logs [19-07-2022 15:30:01]4390: WAF :: fetched 1 new logs [19-07-2022 15:31:01]7300: WAF :: fetched 1 new logs [19-07-2022 15:32:02]10030: WAF :: fetched 5 new logs [19-07-2022 15:33:01]12666: WAF :: fetched 2 new logs [19-07-2022 15:34:01]15299: WAF :: fetched 1 new logs [19-07-2022 15:37:01]23797: WAF :: fetched 3 new logs [19-07-2022 15:38:01]26409: WAF :: fetched 4 new logs [19-07-2022 15:39:02]29053: WAF :: fetched 4 new logs [19-07-2022 15:40:03]31672: WAF :: fetched 2 new logs [19-07-2022 15:41:02]2127: Checking for user cron vulnerabilities [19-07-2022 15:42:01]4730: WAF :: fetched 1 new logs [19-07-2022 15:43:02]7373: WAF :: fetched 1 new logs [19-07-2022 15:44:01]9993: Checking ditributed CMS bruteforce attacks [19-07-2022 15:46:02]15679: WAF :: fetched 1 new logs [19-07-2022 15:48:02]21253: WAF :: fetched 14 new logs [19-07-2022 15:49:01]23956: WAF :: fetched 1 new logs [19-07-2022 15:50:01]26754: WAF :: fetched 1 new logs [19-07-2022 15:51:02]29659: WAF :: fetched 1 new logs [19-07-2022 15:52:01]32336: WAF :: fetched 3 new logs [19-07-2022 15:54:01]5400: WAF :: fetched 2 new logs [19-07-2022 15:55:02]8150: WAF :: fetched 3 new logs [19-07-2022 15:56:02]11009: WAF :: fetched 3 new logs [19-07-2022 15:57:01]13652: WAF :: fetched 7 new logs [19-07-2022 15:58:02]16446: WAF :: fetched 1 new logs [19-07-2022 15:59:01]19193: WAF :: fetched 1 new logs [19-07-2022 16:02:01]27784: httpd.conf changed. Refreshing watchlist. [19-07-2022 16:05:03]3452: WAF :: fetched 1 new logs [19-07-2022 16:06:01]5945: WAF :: fetched 5 new logs [19-07-2022 16:06:01]5940: httpd.conf changed. Refreshing watchlist. [19-07-2022 16:07:02]8995: WAF :: fetched 7 new logs [19-07-2022 16:09:01]14406: WAF :: fetched 1 new logs [19-07-2022 16:10:02]17102: WAF :: fetched 14 new logs [19-07-2022 16:12:01]22566: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658257921 [19-07-2022 16:12:01]22566: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 16:12:03]22566: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 16:12:06]22566: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-1612/20220719-161201-YtcCAd8G-GFIOHejPxikUAAAAAU [19-07-2022 16:12:06]22566: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 16:12:06]22566: WAF :: fetched 3 new logs [19-07-2022 16:13:02]25187: WAF :: fetched 1 new logs [19-07-2022 16:14:01]27790: WAF :: fetched 2 new logs [19-07-2022 16:15:02]30416: WAF :: fetched 3 new logs [19-07-2022 16:16:02]814: WAF :: fetched 14 new logs [19-07-2022 16:17:01]3485: WAF :: fetched 4 new logs [19-07-2022 16:18:02]6240: WAF :: fetched 13 new logs [19-07-2022 16:19:01]8861: WAF :: fetched 1 new logs [19-07-2022 16:21:01]14483: WAF :: fetched 2 new logs [19-07-2022 16:23:01]20135: WAF :: fetched 2 new logs [19-07-2022 16:24:02]22851: WAF :: fetched 42 new logs [19-07-2022 16:25:02]25513: WAF :: fetched 1 new logs [19-07-2022 16:27:01]31080: WAF :: fetched 3 new logs [19-07-2022 16:28:02]1456: WAF :: fetched 8 new logs [19-07-2022 16:30:01]6932: WAF :: fetched 3 new logs [19-07-2022 16:31:02]9893: WAF :: fetched 3 new logs [19-07-2022 16:32:01]12605: WAF :: fetched 1 new logs [19-07-2022 16:33:02]15409: WAF :: fetched 7 new logs [19-07-2022 16:34:02]18229: WAF :: fetched 25 new logs [19-07-2022 16:35:02]21115: WAF :: fetched 2 new logs [19-07-2022 16:37:02]26725: WAF :: fetched 4 new logs [19-07-2022 16:38:01]29573: WAF :: fetched 4 new logs [19-07-2022 16:39:02]32324: WAF :: fetched 14 new logs [19-07-2022 16:40:01]2758: WAF :: fetched 22 new logs [19-07-2022 16:41:02]5702: WAF :: fetched 2 new logs [19-07-2022 16:41:02]5702: Checking for user cron vulnerabilities [19-07-2022 16:44:01]13865: Checking ditributed CMS bruteforce attacks [19-07-2022 16:47:02]22222: WAF :: fetched 5 new logs [19-07-2022 16:48:01]24979: WAF :: fetched 1 new logs [19-07-2022 16:49:02]27713: WAF :: fetched 8 new logs [19-07-2022 16:50:01]30389: WAF :: fetched 1 new logs [19-07-2022 16:51:02]831: WAF :: fetched 1 new logs [19-07-2022 16:52:02]3645: WAF :: fetched 1 new logs [19-07-2022 16:53:01]6397: WAF :: fetched 1 new logs [19-07-2022 16:54:02]9115: WAF :: fetched 7 new logs [19-07-2022 16:55:01]11783: WAF :: fetched 11 new logs [19-07-2022 16:56:02]14562: WAF :: fetched 1 new logs [19-07-2022 16:57:01]17392: WAF :: fetched 1 new logs [19-07-2022 16:59:02]23061: WAF :: fetched 2 new logs [19-07-2022 17:00:01]25488: WAF :: fetched 28 new logs [19-07-2022 17:01:02]28706: WAF :: fetched 1 new logs [19-07-2022 17:02:02]31512: WAF :: fetched 1 new logs [19-07-2022 17:03:01]1804: WAF :: fetched 1 new logs [19-07-2022 17:05:01]7167: WAF :: fetched 1 new logs [19-07-2022 17:06:01]10014: WAF :: fetched 19 new logs [19-07-2022 17:07:01]12828: WAF :: fetched 9 new logs [19-07-2022 17:08:02]15556: WAF :: fetched 4 new logs [19-07-2022 17:11:01]23833: WAF :: fetched 2 new logs [19-07-2022 17:12:01]26544: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658261521 [19-07-2022 17:12:01]26544: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 17:12:03]26544: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 17:12:05]26544: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-1712/20220719-171201-YtcQEXXyQGRYgmPHvrVFdwAAACc [19-07-2022 17:12:05]26544: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 17:12:05]26544: WAF :: fetched 11 new logs [19-07-2022 17:13:02]29211: WAF :: fetched 3 new logs [19-07-2022 17:14:01]31960: WAF :: fetched 8 new logs [19-07-2022 17:15:02]2293: WAF :: fetched 7 new logs [19-07-2022 17:16:02]5030: WAF :: fetched 1 new logs [19-07-2022 17:18:02]10416: WAF :: fetched 1 new logs [19-07-2022 17:19:02]12999: WAF :: fetched 2 new logs [19-07-2022 17:20:01]15729: WAF :: fetched 3 new logs [19-07-2022 17:21:02]18622: WAF :: fetched 2 new logs [19-07-2022 17:22:02]21378: WAF :: fetched 5 new logs [19-07-2022 17:23:01]24017: WAF :: fetched 1 new logs [19-07-2022 17:24:01]26779: WAF :: fetched 2 new logs [19-07-2022 17:25:02]29486: WAF :: fetched 2 new logs [19-07-2022 17:26:02]32263: WAF :: fetched 2 new logs [19-07-2022 17:27:01]2662: WAF :: fetched 13 new logs [19-07-2022 17:28:02]5348: WAF :: fetched 1 new logs [19-07-2022 17:29:02]7979: WAF :: fetched 17 new logs [19-07-2022 17:30:01]10638: WAF :: fetched 2 new logs [19-07-2022 17:31:02]13396: WAF :: fetched 6 new logs [19-07-2022 17:32:01]16139: WAF :: fetched 1 new logs [19-07-2022 17:34:02]21662: WAF :: fetched 1 new logs [19-07-2022 17:35:02]24385: WAF :: fetched 3 new logs [19-07-2022 17:40:02]5470: WAF :: fetched 2 new logs [19-07-2022 17:41:01]8194: Checking for user cron vulnerabilities [19-07-2022 17:43:01]13671: WAF :: fetched 1 new logs [19-07-2022 17:44:01]16315: Checking ditributed CMS bruteforce attacks [19-07-2022 17:44:08]16315: WAF :: fetched 3 new logs [19-07-2022 17:46:01]21943: WAF :: fetched 8 new logs [19-07-2022 17:48:01]27285: WAF :: fetched 3 new logs [19-07-2022 17:49:01]29978: WAF :: fetched 1 new logs [19-07-2022 17:50:02]32649: WAF :: fetched 1 new logs [19-07-2022 17:51:01]2961: WAF :: fetched 1 new logs [19-07-2022 17:52:02]5755: WAF :: fetched 1 new logs [19-07-2022 17:53:01]8385: WAF :: fetched 4 new logs [19-07-2022 17:55:01]13644: WAF :: fetched 14 new logs [19-07-2022 17:56:02]16418: WAF :: fetched 28 new logs [19-07-2022 18:00:02]27010: WAF :: fetched 2 new logs [19-07-2022 18:02:01]704: WAF :: fetched 1 new logs [19-07-2022 18:04:01]6085: WAF :: fetched 6 new logs [19-07-2022 18:05:01]8669: WAF :: fetched 3 new logs [19-07-2022 18:06:02]11457: WAF :: fetched 11 new logs [19-07-2022 18:09:01]19581: WAF :: fetched 18 new logs [19-07-2022 18:10:02]22352: WAF :: fetched 3 new logs [19-07-2022 18:12:02]27785: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658265122 [19-07-2022 18:12:02]27785: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 18:12:04]27785: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 18:12:06]27785: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-1812/20220719-181202-YtceIo4KGJPibl4OGk9AKwAAAC4 [19-07-2022 18:12:06]27785: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 18:12:06]27785: WAF :: fetched 1 new logs [19-07-2022 18:13:01]30436: WAF :: fetched 4 new logs [19-07-2022 18:14:01]643: WAF :: fetched 8 new logs [19-07-2022 18:15:02]3412: WAF :: fetched 12 new logs [19-07-2022 18:16:01]6086: WAF :: fetched 1 new logs [19-07-2022 18:18:01]11545: WAF :: fetched 1 new logs [19-07-2022 18:21:02]19718: WAF :: fetched 14 new logs [19-07-2022 18:22:02]22428: WAF :: fetched 6 new logs [19-07-2022 18:25:01]30532: WAF :: fetched 4 new logs [19-07-2022 18:26:02]853: WAF :: fetched 1 new logs [19-07-2022 18:27:02]3594: WAF :: fetched 2 new logs [19-07-2022 18:28:01]6240: WAF :: fetched 4 new logs [19-07-2022 18:29:02]9021: WAF :: fetched 14 new logs [19-07-2022 18:30:01]11626: WAF :: fetched 1 new logs [19-07-2022 18:31:02]14342: WAF :: fetched 2 new logs [19-07-2022 18:32:01]17154: WAF :: fetched 1 new logs [19-07-2022 18:33:01]19887: WAF :: fetched 2 new logs [19-07-2022 18:34:02]22573: WAF :: fetched 14 new logs [19-07-2022 18:35:01]25220: WAF :: fetched 4 new logs [19-07-2022 18:36:02]27937: WAF :: fetched 4 new logs [19-07-2022 18:39:01]3559: WAF :: fetched 3 new logs [19-07-2022 18:41:02]8885: Checking for user cron vulnerabilities [19-07-2022 18:42:02]11674: WAF :: fetched 1 new logs [19-07-2022 18:43:02]14314: WAF :: fetched 2 new logs [19-07-2022 18:44:01]16910: Checking ditributed CMS bruteforce attacks [19-07-2022 18:44:01]16910: WAF :: fetched 1 new logs [19-07-2022 18:45:02]19660: WAF :: fetched 2 new logs [19-07-2022 18:47:01]25211: WAF :: fetched 7 new logs [19-07-2022 18:48:02]28017: WAF :: fetched 15 new logs [19-07-2022 18:52:01]6631: WAF :: fetched 3 new logs [19-07-2022 18:53:01]9259: WAF :: fetched 2 new logs [19-07-2022 18:55:01]14533: WAF :: fetched 1 new logs [19-07-2022 18:55:02]14533: API call failed for url https://api.recaptcha.cloud/add Status : 500 [19-07-2022 18:56:02]17244: WAF :: fetched 8 new logs [19-07-2022 18:57:01]20081: WAF :: fetched 2 new logs [19-07-2022 18:58:01]22729: WAF :: fetched 2 new logs [19-07-2022 18:59:01]25348: WAF :: fetched 5 new logs [19-07-2022 19:00:02]27724: WAF :: fetched 1 new logs [19-07-2022 19:01:02]30838: WAF :: fetched 16 new logs [19-07-2022 19:02:01]1155: WAF :: fetched 15 new logs [19-07-2022 19:03:02]3815: WAF :: fetched 4 new logs [19-07-2022 19:06:02]11885: WAF :: fetched 3 new logs [19-07-2022 19:08:02]17406: WAF :: fetched 1 new logs [19-07-2022 19:09:02]20110: WAF :: fetched 1 new logs [19-07-2022 19:10:02]22840: WAF :: fetched 2 new logs [19-07-2022 19:11:01]25476: WAF :: fetched 5 new logs [19-07-2022 19:12:01]28186: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658268721 [19-07-2022 19:12:01]28186: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 19:12:03]28186: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 19:12:05]28186: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-1912/20220719-191201-YtcsMc0LhTG5llYOMvrfeQAAABI [19-07-2022 19:12:05]28186: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 19:12:05]28186: WAF :: fetched 2 new logs [19-07-2022 19:13:02]30886: WAF :: fetched 1 new logs [19-07-2022 19:14:01]1126: WAF :: fetched 1 new logs [19-07-2022 19:16:01]6617: WAF :: fetched 6 new logs [19-07-2022 19:18:02]12114: WAF :: fetched 2 new logs [19-07-2022 19:19:01]14897: WAF :: fetched 1 new logs [19-07-2022 19:20:02]17671: WAF :: fetched 1 new logs [19-07-2022 19:21:01]20491: WAF :: fetched 2 new logs [19-07-2022 19:22:02]23266: WAF :: fetched 7 new logs [19-07-2022 19:23:02]25894: WAF :: fetched 12 new logs [19-07-2022 19:24:01]28563: WAF :: fetched 2 new logs [19-07-2022 19:25:01]31209: WAF :: fetched 9 new logs [19-07-2022 19:26:02]1526: WAF :: fetched 10 new logs [19-07-2022 19:30:02]12238: WAF :: fetched 2 new logs [19-07-2022 19:36:01]28385: WAF :: fetched 1 new logs [19-07-2022 19:37:02]31148: WAF :: fetched 1 new logs [19-07-2022 19:38:01]1356: WAF :: fetched 1 new logs [19-07-2022 19:39:01]4034: WAF :: fetched 11 new logs [19-07-2022 19:40:04]6691: WAF :: fetched 9 new logs [19-07-2022 19:41:01]9347: WAF :: fetched 19 new logs [19-07-2022 19:41:01]9347: Checking for user cron vulnerabilities [19-07-2022 19:42:02]12085: WAF :: fetched 9 new logs [19-07-2022 19:43:01]14698: WAF :: fetched 2 new logs [19-07-2022 19:44:01]17291: Checking ditributed CMS bruteforce attacks [19-07-2022 19:45:01]: Checking for definition updates [19-07-2022 19:47:02]25419: WAF :: fetched 2 new logs [19-07-2022 19:48:01]27976: WAF :: fetched 1 new logs [19-07-2022 19:49:01]30594: WAF :: fetched 6 new logs [19-07-2022 19:52:02]6228: WAF :: fetched 1 new logs [19-07-2022 19:53:02]8822: WAF :: fetched 2 new logs [19-07-2022 19:54:01]11493: WAF :: fetched 1 new logs [19-07-2022 19:55:02]14209: WAF :: fetched 2 new logs [19-07-2022 19:56:02]17013: WAF :: fetched 2 new logs [19-07-2022 19:57:01]19855: WAF :: fetched 1 new logs [19-07-2022 19:58:01]22478: WAF :: fetched 1 new logs [19-07-2022 19:59:02]25073: WAF :: fetched 30 new logs [19-07-2022 20:00:02]27409: WAF :: fetched 2 new logs [19-07-2022 20:02:02]850: WAF :: fetched 1 new logs [19-07-2022 20:03:02]3484: WAF :: fetched 1 new logs [19-07-2022 20:04:01]6063: WAF :: fetched 1 new logs [19-07-2022 20:06:02]11401: WAF :: fetched 2 new logs [19-07-2022 20:07:01]14170: WAF :: fetched 1 new logs [19-07-2022 20:11:02]24770: WAF :: fetched 2 new logs [19-07-2022 20:12:02]27492: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658272322 [19-07-2022 20:12:02]27492: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 20:12:04]27492: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 20:12:05]27492: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-2012/20220719-201202-Ytc6Qms_7QRGLhs74yTumgAAAAQ [19-07-2022 20:12:05]27492: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 20:12:05]27492: WAF :: fetched 4 new logs [19-07-2022 20:13:02]30201: WAF :: fetched 1 new logs [19-07-2022 20:16:01]5735: WAF :: fetched 4 new logs [19-07-2022 20:17:01]8457: WAF :: fetched 5 new logs [19-07-2022 20:19:01]13690: WAF :: fetched 1 new logs [19-07-2022 20:20:02]16333: WAF :: fetched 1 new logs [19-07-2022 20:21:01]19058: WAF :: fetched 5 new logs [19-07-2022 20:23:01]24332: WAF :: fetched 2 new logs [19-07-2022 20:25:02]29753: WAF :: fetched 16 new logs [19-07-2022 20:29:01]7999: WAF :: fetched 4 new logs [19-07-2022 20:30:02]10643: WAF :: fetched 15 new logs [19-07-2022 20:32:01]15972: WAF :: fetched 1 new logs [19-07-2022 20:39:01]2292: WAF :: fetched 8 new logs [19-07-2022 20:41:02]7776: WAF :: fetched 1 new logs [19-07-2022 20:41:02]7776: Checking for user cron vulnerabilities [19-07-2022 20:42:01]10527: WAF :: fetched 2 new logs [19-07-2022 20:43:01]13144: WAF :: fetched 1 new logs [19-07-2022 20:44:02]15812: Checking ditributed CMS bruteforce attacks [19-07-2022 20:44:02]15812: WAF :: fetched 1 new logs [19-07-2022 20:48:01]26578: WAF :: fetched 13 new logs [19-07-2022 20:49:02]29213: WAF :: fetched 1 new logs [19-07-2022 20:54:02]10024: WAF :: fetched 1 new logs [19-07-2022 20:58:01]20963: WAF :: fetched 1 new logs [19-07-2022 21:01:01]29268: WAF :: fetched 1 new logs [19-07-2022 21:02:02]32016: WAF :: fetched 1 new logs [19-07-2022 21:04:01]4881: WAF :: fetched 2 new logs [19-07-2022 21:06:01]10109: WAF :: fetched 2 new logs [19-07-2022 21:07:01]12797: WAF :: fetched 1 new logs [19-07-2022 21:08:01]15378: WAF :: fetched 6 new logs [19-07-2022 21:11:02]23357: WAF :: fetched 15 new logs [19-07-2022 21:12:01]26032: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658275921 [19-07-2022 21:12:01]26032: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 21:12:03]26032: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 21:12:05]26032: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-2112/20220719-211201-YtdIUcfpEzT-PZEAjw8t_wAAAA4 [19-07-2022 21:12:05]26032: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 21:12:05]26032: WAF :: fetched 1 new logs [19-07-2022 21:13:02]28687: WAF :: fetched 3 new logs [19-07-2022 21:14:01]31230: WAF :: fetched 1 new logs [19-07-2022 21:15:01]1450: WAF :: fetched 3 new logs [19-07-2022 21:16:02]4116: WAF :: fetched 4 new logs [19-07-2022 21:18:02]9434: WAF :: fetched 7 new logs [19-07-2022 21:21:01]17462: WAF :: fetched 1 new logs [19-07-2022 21:22:02]20310: WAF :: fetched 1 new logs [19-07-2022 21:26:01]30872: WAF :: fetched 1 new logs [19-07-2022 21:27:03]1202: WAF :: fetched 8 new logs [19-07-2022 21:28:02]3870: WAF :: fetched 12 new logs [19-07-2022 21:29:01]6481: WAF :: fetched 2 new logs [19-07-2022 21:30:02]9171: WAF :: fetched 5 new logs [19-07-2022 21:33:01]17262: WAF :: fetched 3 new logs [19-07-2022 21:34:02]19989: WAF :: fetched 2 new logs [19-07-2022 21:35:02]22600: WAF :: fetched 2 new logs [19-07-2022 21:36:01]25302: WAF :: fetched 3 new logs [19-07-2022 21:38:01]30645: WAF :: fetched 1 new logs [19-07-2022 21:39:02]967: WAF :: fetched 2 new logs [19-07-2022 21:41:01]6301: WAF :: fetched 4 new logs [19-07-2022 21:41:01]6301: Checking for user cron vulnerabilities [19-07-2022 21:43:01]11659: WAF :: fetched 1 new logs [19-07-2022 21:44:01]14249: Checking ditributed CMS bruteforce attacks [19-07-2022 21:46:01]19774: WAF :: fetched 3 new logs [19-07-2022 21:47:02]22462: WAF :: fetched 1 new logs [19-07-2022 21:48:01]25230: WAF :: fetched 1 new logs [19-07-2022 21:51:02]861: WAF :: fetched 1 new logs [19-07-2022 21:52:01]3506: WAF :: fetched 2 new logs [19-07-2022 21:53:02]6225: WAF :: fetched 1 new logs [19-07-2022 21:54:01]8825: WAF :: fetched 1 new logs [19-07-2022 21:55:02]11466: WAF :: fetched 1 new logs [19-07-2022 21:57:02]16790: WAF :: fetched 15 new logs [19-07-2022 22:00:01]24551: WAF :: fetched 9 new logs [19-07-2022 22:01:02]27651: WAF :: fetched 4 new logs [19-07-2022 22:04:02]3187: WAF :: fetched 2 new logs [19-07-2022 22:05:01]5873: WAF :: fetched 3 new logs [19-07-2022 22:07:11]11303: Performing Domain reputation checks [19-07-2022 22:09:02]16552: WAF :: fetched 2 new logs [19-07-2022 22:10:01]19257: WAF :: fetched 1 new logs [19-07-2022 22:11:01]21967: WAF :: fetched 1 new logs [19-07-2022 22:12:02]24577: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658279522 [19-07-2022 22:12:02]24577: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 22:12:04]24577: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 22:12:04]24577: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-2212/20220719-221202-YtdWYrSkIGTvnDAiDhTDZgAAAAQ [19-07-2022 22:12:04]24577: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 22:12:05]24577: WAF :: fetched 3 new logs [19-07-2022 22:16:01]2801: WAF :: fetched 19 new logs [19-07-2022 22:17:02]5452: WAF :: fetched 1 new logs [19-07-2022 22:19:02]10705: WAF :: fetched 8 new logs [19-07-2022 22:20:02]13294: WAF :: fetched 2 new logs [19-07-2022 22:22:02]18731: WAF :: fetched 1 new logs [19-07-2022 22:23:01]21401: WAF :: fetched 8 new logs [19-07-2022 22:24:02]24079: WAF :: fetched 6 new logs [19-07-2022 22:25:01]26790: WAF :: fetched 1 new logs [19-07-2022 22:27:01]32115: WAF :: fetched 1 new logs [19-07-2022 22:28:03]2444: WAF :: fetched 1 new logs [19-07-2022 22:29:02]5118: WAF :: fetched 1 new logs [19-07-2022 22:30:01]7796: WAF :: fetched 3 new logs [19-07-2022 22:31:02]10505: WAF :: fetched 1 new logs [19-07-2022 22:32:01]13147: WAF :: fetched 2 new logs [19-07-2022 22:33:01]15909: WAF :: fetched 5 new logs [19-07-2022 22:34:02]18665: WAF :: fetched 1 new logs [19-07-2022 22:35:01]21323: WAF :: fetched 17 new logs [19-07-2022 22:36:01]24040: WAF :: fetched 11 new logs [19-07-2022 22:39:01]32079: WAF :: fetched 3 new logs [19-07-2022 22:40:02]2361: WAF :: fetched 11 new logs [19-07-2022 22:41:01]5052: WAF :: fetched 3 new logs [19-07-2022 22:41:01]5052: Checking for user cron vulnerabilities [19-07-2022 22:42:02]7695: WAF :: fetched 4 new logs [19-07-2022 22:44:01]13075: Checking ditributed CMS bruteforce attacks [19-07-2022 22:44:02]13075: WAF :: fetched 2 new logs [19-07-2022 22:45:02]15715: WAF :: fetched 8 new logs [19-07-2022 22:47:02]21132: WAF :: fetched 1 new logs [19-07-2022 22:48:01]23884: WAF :: fetched 1 new logs [19-07-2022 22:49:02]26517: WAF :: fetched 2 new logs [19-07-2022 22:50:02]29136: WAF :: fetched 1 new logs [19-07-2022 22:51:01]31872: WAF :: fetched 6 new logs [19-07-2022 22:56:01]12821: WAF :: fetched 3 new logs [19-07-2022 22:58:01]18190: WAF :: fetched 2 new logs [19-07-2022 23:00:02]23146: WAF :: fetched 2 new logs [19-07-2022 23:01:01]26245: WAF :: fetched 1 new logs [19-07-2022 23:02:02]28936: WAF :: fetched 1 new logs [19-07-2022 23:04:01]1835: WAF :: fetched 1 new logs [19-07-2022 23:05:02]4552: WAF :: fetched 3 new logs [19-07-2022 23:06:01]7341: WAF :: fetched 9 new logs [19-07-2022 23:07:02]10017: WAF :: fetched 6 new logs [19-07-2022 23:07:52]10179: Performed RBL check for 23.111.136.34. [19-07-2022 23:08:01]12697: WAF :: fetched 2 new logs [19-07-2022 23:10:02]18163: WAF :: fetched 1 new logs [19-07-2022 23:11:01]20968: WAF :: fetched 2 new logs [19-07-2022 23:12:02]23639: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658283122 [19-07-2022 23:12:02]23639: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [19-07-2022 23:12:04]23639: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [19-07-2022 23:12:05]23639: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220719/20220719-2312/20220719-231202-Ytdkcml-s74JdEjsP75w0wAAAAM [19-07-2022 23:12:05]23639: WAF :: No suitable log file found. Using SQLite.. [19-07-2022 23:12:05]23639: WAF :: fetched 1 new logs [19-07-2022 23:13:02]26310: WAF :: fetched 5 new logs [19-07-2022 23:15:01]31602: WAF :: fetched 1 new logs [19-07-2022 23:17:01]4554: WAF :: fetched 2 new logs [19-07-2022 23:20:01]12503: WAF :: fetched 1 new logs [19-07-2022 23:21:02]15264: WAF :: fetched 3 new logs [19-07-2022 23:22:01]17898: WAF :: fetched 3 new logs [19-07-2022 23:23:02]20668: WAF :: fetched 17 new logs [19-07-2022 23:24:01]23270: WAF :: fetched 1 new logs [19-07-2022 23:25:02]25920: WAF :: fetched 7 new logs [19-07-2022 23:26:01]28583: WAF :: fetched 15 new logs [19-07-2022 23:27:03]31209: WAF :: fetched 3 new logs [19-07-2022 23:32:01]12316: WAF :: fetched 3 new logs [19-07-2022 23:33:02]15005: WAF :: fetched 1 new logs [19-07-2022 23:34:02]17559: WAF :: fetched 3 new logs [19-07-2022 23:35:01]20243: WAF :: fetched 1 new logs [19-07-2022 23:36:01]22933: WAF :: fetched 4 new logs [19-07-2022 23:37:02]25557: WAF :: fetched 2 new logs [19-07-2022 23:38:01]28214: WAF :: fetched 2 new logs [19-07-2022 23:40:01]1018: WAF :: fetched 2 new logs [19-07-2022 23:41:01]3852: WAF :: fetched 20 new logs [19-07-2022 23:41:01]3852: Checking for user cron vulnerabilities [19-07-2022 23:42:02]6632: WAF :: fetched 4 new logs [19-07-2022 23:43:01]9431: WAF :: fetched 7 new logs [19-07-2022 23:44:02]12043: Checking ditributed CMS bruteforce attacks [19-07-2022 23:45:02]14650: WAF :: fetched 1 new logs [19-07-2022 23:50:04]28011: WAF :: fetched 2 new logs [19-07-2022 23:51:02]30804: WAF :: fetched 1 new logs [19-07-2022 23:52:01]1000: WAF :: fetched 4 new logs [19-07-2022 23:55:02]9331: WAF :: fetched 14 new logs [19-07-2022 23:55:02]9326: httpd.conf changed. Refreshing watchlist. [19-07-2022 23:55:03]9331: API call failed for url https://api.recaptcha.cloud/add Status : 500 [19-07-2022 23:56:02]12248: WAF :: fetched 57 new logs [19-07-2022 23:57:01]14971: WAF :: fetched 1 new logs [19-07-2022 23:57:01]14965: httpd.conf changed. Refreshing watchlist. [19-07-2022 23:58:02]17705: WAF :: fetched 12 new logs [19-07-2022 23:59:01]20428: WAF :: fetched 13 new logs [19-07-2022 23:59:01]20424: httpd.conf changed. Refreshing watchlist. [20-07-2022 00:00:01]22782: WAF :: fetched 4 new logs [20-07-2022 00:01:02]26111: WAF :: fetched 2 new logs [20-07-2022 00:01:02]26116: httpd.conf changed. Refreshing watchlist. [20-07-2022 00:01:05]26111: Sending daily report for July 20, 2022 [20-07-2022 00:02:01]28790: WAF :: fetched 1 new logs [20-07-2022 00:04:02]1694: WAF :: fetched 1 new logs [20-07-2022 00:05:01]4348: WAF :: fetched 1 new logs [20-07-2022 00:05:01]4348: Deleted 3 entries older than 6 MONTH from scanner_logs [20-07-2022 00:05:01]4348: Deleted 0 files from Quarantine [20-07-2022 00:06:02]6978: WAF :: fetched 2 new logs [20-07-2022 00:07:01]9589: WAF :: fetched 3 new logs [20-07-2022 00:08:01]12269: WAF :: fetched 1 new logs [20-07-2022 00:10:01]17542: WAF :: fetched 2 new logs [20-07-2022 00:11:02]20439: WAF :: fetched 16 new logs [20-07-2022 00:12:02]23017: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658286722 [20-07-2022 00:12:02]23017: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 00:12:04]23017: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 00:12:05]23017: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-0012/20220720-001202-YtdygjPx_BsHBgNa_8YorwAAACQ [20-07-2022 00:12:05]23017: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 00:19:02]9695: WAF :: fetched 1 new logs [20-07-2022 00:20:02]12292: WAF :: fetched 6 new logs [20-07-2022 00:21:01]14952: WAF :: fetched 6 new logs [20-07-2022 00:22:02]17618: WAF :: fetched 9 new logs [20-07-2022 00:23:01]20391: WAF :: fetched 8 new logs [20-07-2022 00:25:01]25647: WAF :: fetched 11 new logs [20-07-2022 00:27:01]30885: WAF :: fetched 1 new logs [20-07-2022 00:31:01]9157: WAF :: fetched 1 new logs [20-07-2022 00:33:02]14486: WAF :: fetched 1 new logs [20-07-2022 00:34:01]17073: WAF :: fetched 1 new logs [20-07-2022 00:40:02]745: WAF :: fetched 9 new logs [20-07-2022 00:41:02]3442: WAF :: fetched 10 new logs [20-07-2022 00:41:02]3442: Checking for user cron vulnerabilities [20-07-2022 00:43:01]8730: WAF :: fetched 2 new logs [20-07-2022 00:44:01]11346: Checking ditributed CMS bruteforce attacks [20-07-2022 00:45:01]: Checking for software updates [20-07-2022 00:47:01]19242: WAF :: fetched 100 new logs [20-07-2022 00:48:02]21948: WAF :: fetched 80 new logs [20-07-2022 00:52:03]32462: WAF :: fetched 3 new logs [20-07-2022 00:53:02]2752: WAF :: fetched 4 new logs [20-07-2022 00:54:01]5341: WAF :: fetched 1 new logs [20-07-2022 00:55:01]7974: WAF :: fetched 1 new logs [20-07-2022 00:55:02]7974: API call failed for url https://api.recaptcha.cloud/add Status : 500 [20-07-2022 00:56:01]11236: WAF :: fetched 4 new logs [20-07-2022 00:57:02]13829: WAF :: fetched 1 new logs [20-07-2022 00:58:01]16472: WAF :: fetched 1 new logs [20-07-2022 00:59:02]19168: WAF :: fetched 1 new logs [20-07-2022 01:03:01]31299: WAF :: fetched 3 new logs [20-07-2022 01:04:01]1807: WAF :: fetched 8 new logs [20-07-2022 01:10:02]18328: WAF :: fetched 3 new logs [20-07-2022 01:11:01]21162: WAF :: fetched 13 new logs [20-07-2022 01:12:02]23869: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658290322 [20-07-2022 01:12:02]23869: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 01:12:04]23869: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 01:12:06]23869: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-0112/20220720-011202-YteAkgZ9-xol243jzppqoQAAAAE [20-07-2022 01:12:06]23869: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 01:12:06]23869: WAF :: fetched 6 new logs [20-07-2022 01:13:01]26928: WAF :: fetched 1 new logs [20-07-2022 01:14:01]29623: WAF :: fetched 64 new logs [20-07-2022 01:15:03]32331: WAF :: fetched 1 new logs [20-07-2022 01:17:01]5362: WAF :: fetched 3 new logs [20-07-2022 01:18:02]8081: WAF :: fetched 5 new logs [20-07-2022 01:19:01]10932: WAF :: fetched 31 new logs [20-07-2022 01:20:02]13976: WAF :: fetched 1 new logs [20-07-2022 01:23:03]22516: WAF :: fetched 7 new logs [20-07-2022 01:25:01]27869: WAF :: fetched 3 new logs [20-07-2022 01:26:01]30803: WAF :: fetched 3 new logs [20-07-2022 01:27:01]1117: WAF :: fetched 1 new logs [20-07-2022 01:28:02]3996: WAF :: fetched 2 new logs [20-07-2022 01:29:01]6749: WAF :: fetched 12 new logs [20-07-2022 01:30:02]9912: WAF :: fetched 9 new logs [20-07-2022 01:31:02]12716: WAF :: fetched 10 new logs [20-07-2022 01:32:01]15391: WAF :: fetched 1 new logs [20-07-2022 01:33:02]18584: WAF :: fetched 18 new logs [20-07-2022 01:37:02]29535: WAF :: fetched 6 new logs [20-07-2022 01:38:01]32248: WAF :: fetched 13 new logs [20-07-2022 01:41:01]8203: Checking for user cron vulnerabilities [20-07-2022 01:42:02]11143: WAF :: fetched 1 new logs [20-07-2022 01:44:01]16674: Checking ditributed CMS bruteforce attacks [20-07-2022 01:45:01]: Checking for definition updates [20-07-2022 01:45:01]19795: WAF :: fetched 1 new logs [20-07-2022 01:46:02]22714: WAF :: fetched 26 new logs [20-07-2022 01:47:01]25399: WAF :: fetched 1 new logs [20-07-2022 01:50:02]948: WAF :: fetched 1 new logs [20-07-2022 01:52:01]6460: WAF :: fetched 1 new logs [20-07-2022 01:58:02]22886: WAF :: fetched 2 new logs [20-07-2022 02:00:02]27845: WAF :: fetched 9 new logs [20-07-2022 02:02:01]1476: WAF :: fetched 1 new logs [20-07-2022 02:04:01]7018: WAF :: fetched 3 new logs [20-07-2022 02:05:01]9763: WAF :: fetched 24 new logs [20-07-2022 02:07:04]15218: WAF :: fetched 1 new logs [20-07-2022 02:09:01]20553: WAF :: fetched 1 new logs [20-07-2022 02:11:01]25832: WAF :: fetched 16 new logs [20-07-2022 02:12:02]28497: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658293922 [20-07-2022 02:12:02]28497: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 02:12:04]28497: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 02:12:06]28497: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-0212/20220720-021202-YteOokHd7HsYnXCL53MOqwAAAB0 [20-07-2022 02:12:06]28497: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 02:12:07]28497: WAF :: fetched 4 new logs [20-07-2022 02:13:01]31246: WAF :: fetched 4 new logs [20-07-2022 02:17:01]9377: WAF :: fetched 2 new logs [20-07-2022 02:18:02]12155: WAF :: fetched 1 new logs [20-07-2022 02:21:02]20052: WAF :: fetched 2 new logs [20-07-2022 02:22:02]22677: WAF :: fetched 2 new logs [20-07-2022 02:24:01]27997: WAF :: fetched 5 new logs [20-07-2022 02:25:02]30787: WAF :: fetched 10 new logs [20-07-2022 02:27:02]3877: WAF :: fetched 6 new logs [20-07-2022 02:28:01]6573: WAF :: fetched 1 new logs [20-07-2022 02:29:01]9271: WAF :: fetched 9 new logs [20-07-2022 02:30:03]11959: WAF :: fetched 13 new logs [20-07-2022 02:32:01]17260: WAF :: fetched 2 new logs [20-07-2022 02:34:01]22727: WAF :: fetched 3 new logs [20-07-2022 02:35:02]25371: WAF :: fetched 10 new logs [20-07-2022 02:36:02]28057: WAF :: fetched 12 new logs [20-07-2022 02:39:01]3764: WAF :: fetched 3 new logs [20-07-2022 02:40:02]6540: WAF :: fetched 2 new logs [20-07-2022 02:41:02]9381: WAF :: fetched 4 new logs [20-07-2022 02:41:02]9381: Checking for user cron vulnerabilities [20-07-2022 02:42:01]12129: WAF :: fetched 2 new logs [20-07-2022 02:43:01]14892: WAF :: fetched 6 new logs [20-07-2022 02:44:01]17675: Checking ditributed CMS bruteforce attacks [20-07-2022 02:44:02]17675: WAF :: fetched 6 new logs [20-07-2022 02:46:01]23137: WAF :: fetched 3 new logs [20-07-2022 02:53:03]10927: Updated license status via CDN [20-07-2022 02:56:02]19046: WAF :: fetched 1 new logs [20-07-2022 02:58:02]24517: WAF :: fetched 1 new logs [20-07-2022 02:59:02]27424: WAF :: fetched 1 new logs [20-07-2022 03:00:02]29765: WAF :: fetched 3 new logs [20-07-2022 03:00:38]29765: Found and updated 32 CMS installations [20-07-2022 03:01:01]617: WAF :: fetched 7 new logs [20-07-2022 03:02:06]29765: Wordpress installation #21 easy2speak.com.br has errors [20-07-2022 03:02:56]29765: Wordpress installation #29 adsgestaomkt.com.br has errors [20-07-2022 03:03:55]29765: Wordpress installation #39 imoblux.com.br has errors [20-07-2022 03:04:02]10042: WAF :: fetched 1 new logs [20-07-2022 03:04:10]29765: Wordpress installation #40 guardian-ba.com.br has errors [20-07-2022 03:04:24]29765: Wordpress installation #42 suryart.com.br has errors [20-07-2022 03:04:32]29765: Sending CMS version vulnerability report emails to cpanel users [20-07-2022 03:04:34]6826: Sending CMS version vulnerability report emails to cpanel users [20-07-2022 03:04:36]29765: Checking wordpress installations for suspicious directories [20-07-2022 03:04:36]6826: Checking wordpress installations for suspicious directories [20-07-2022 03:05:02]13228: WAF :: fetched 1 new logs [20-07-2022 03:06:01]15905: WAF :: fetched 2 new logs [20-07-2022 03:07:02]18757: WAF :: fetched 1 new logs [20-07-2022 03:08:01]21466: WAF :: fetched 10 new logs [20-07-2022 03:09:03]22086: WAF :: fetched 3 new logs [20-07-2022 03:10:02]5359: WAF :: fetched 1 new logs [20-07-2022 03:12:02]2313: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658297522 [20-07-2022 03:12:02]2313: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 03:12:04]2313: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 03:12:06]2313: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-0312/20220720-031202-Ytecss5aUIpHrEPEgMORCgAAAAQ [20-07-2022 03:12:06]2313: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 03:12:06]2313: WAF :: fetched 1 new logs [20-07-2022 03:16:02]13026: WAF :: fetched 15 new logs [20-07-2022 03:17:01]15622: WAF :: fetched 1 new logs [20-07-2022 03:18:02]18348: WAF :: fetched 11 new logs [20-07-2022 03:19:01]21041: WAF :: fetched 3 new logs [20-07-2022 03:24:01]2049: WAF :: fetched 16 new logs [20-07-2022 03:25:02]4749: WAF :: fetched 17 new logs [20-07-2022 03:26:01]7590: WAF :: fetched 1 new logs [20-07-2022 03:29:01]16108: WAF :: fetched 28 new logs [20-07-2022 03:30:02]18917: WAF :: fetched 1 new logs [20-07-2022 03:31:02]21744: WAF :: fetched 1 new logs [20-07-2022 03:33:01]27561: WAF :: fetched 27 new logs [20-07-2022 03:34:01]30682: WAF :: fetched 9 new logs [20-07-2022 03:36:01]3882: WAF :: fetched 1 new logs [20-07-2022 03:39:02]11910: WAF :: fetched 7 new logs [20-07-2022 03:41:01]17204: Checking for user cron vulnerabilities [20-07-2022 03:43:02]22521: WAF :: fetched 1 new logs [20-07-2022 03:44:02]25192: Checking ditributed CMS bruteforce attacks [20-07-2022 03:44:04]25192: WAF :: fetched 1 new logs [20-07-2022 03:45:01]27792: WAF :: fetched 1 new logs [20-07-2022 03:50:02]8610: WAF :: fetched 2 new logs [20-07-2022 03:51:01]11256: WAF :: fetched 1 new logs [20-07-2022 03:52:02]13873: WAF :: fetched 1 new logs [20-07-2022 03:53:01]16575: WAF :: fetched 2 new logs [20-07-2022 03:54:03]19495: WAF :: fetched 11 new logs [20-07-2022 03:55:02]22124: WAF :: fetched 1 new logs [20-07-2022 03:55:03]22124: API call failed for url https://api.recaptcha.cloud/add Status : 500 [20-07-2022 03:57:01]27352: WAF :: fetched 1 new logs [20-07-2022 03:58:02]30008: WAF :: fetched 1 new logs [20-07-2022 03:59:01]32680: WAF :: fetched 1 new logs [20-07-2022 04:01:02]5793: WAF :: fetched 1 new logs [20-07-2022 04:02:01]8404: WAF :: fetched 2 new logs [20-07-2022 04:05:02]16339: WAF :: fetched 2 new logs [20-07-2022 04:11:01]32329: WAF :: fetched 2 new logs [20-07-2022 04:12:02]2600: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658301122 [20-07-2022 04:12:02]2600: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 04:12:04]2600: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 04:12:06]2600: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-0412/20220720-041202-YteqwqRcoRBBwCiP9W2HagAAAAM [20-07-2022 04:12:06]2600: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 04:12:06]2600: WAF :: fetched 2 new logs [20-07-2022 04:14:01]7980: WAF :: fetched 1 new logs [20-07-2022 04:16:01]13251: WAF :: fetched 2 new logs [20-07-2022 04:17:03]15877: WAF :: fetched 4 new logs [20-07-2022 04:18:02]18576: WAF :: fetched 3 new logs [20-07-2022 04:19:01]21341: WAF :: fetched 1 new logs [20-07-2022 04:20:02]23999: WAF :: fetched 1 new logs [20-07-2022 04:21:02]26287: WAF :: fetched 1 new logs [20-07-2022 04:23:02]31915: WAF :: fetched 1 new logs [20-07-2022 04:27:01]10088: WAF :: fetched 2 new logs [20-07-2022 04:28:02]12730: WAF :: fetched 1 new logs [20-07-2022 04:29:01]15564: WAF :: fetched 3 new logs [20-07-2022 04:30:02]18311: WAF :: fetched 1 new logs [20-07-2022 04:32:01]23588: WAF :: fetched 8 new logs [20-07-2022 04:33:02]26216: WAF :: fetched 8 new logs [20-07-2022 04:34:01]28890: WAF :: fetched 1 new logs [20-07-2022 04:39:01]9920: WAF :: fetched 1 new logs [20-07-2022 04:41:04]15240: WAF :: fetched 1 new logs [20-07-2022 04:41:04]15240: Checking for user cron vulnerabilities [20-07-2022 04:42:01]17888: WAF :: fetched 1 new logs [20-07-2022 04:44:01]23245: Checking ditributed CMS bruteforce attacks [20-07-2022 04:44:03]23245: WAF :: fetched 2 new logs [20-07-2022 04:47:01]31107: WAF :: fetched 1 new logs [20-07-2022 04:49:01]4052: WAF :: fetched 14 new logs [20-07-2022 04:52:01]11959: WAF :: fetched 2 new logs [20-07-2022 04:55:02]20018: API call failed for url https://api.recaptcha.cloud/add Status : 500 [20-07-2022 04:56:02]22706: WAF :: fetched 13 new logs [20-07-2022 04:57:02]25389: WAF :: fetched 1 new logs [20-07-2022 05:01:01]3986: WAF :: fetched 1 new logs [20-07-2022 05:01:41]3981: Starting daily scan on files updated in last 24 hrs [20-07-2022 05:04:02]12115: WAF :: fetched 1 new logs [20-07-2022 05:06:01]17478: WAF :: fetched 1 new logs [20-07-2022 05:08:01]22833: WAF :: fetched 3 new logs [20-07-2022 05:10:02]28244: WAF :: fetched 1 new logs [20-07-2022 05:11:01]30902: WAF :: fetched 1 new logs [20-07-2022 05:12:03]1196: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658304723 [20-07-2022 05:12:03]1196: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 05:12:05]1196: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 05:12:07]1196: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-0512/20220720-051203-Yte405fcpOyrIhi__gD94wAAAAk [20-07-2022 05:12:07]1196: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 05:13:02]3842: WAF :: fetched 10 new logs [20-07-2022 05:15:02]9264: WAF :: fetched 1 new logs [20-07-2022 05:16:01]11967: WAF :: fetched 3 new logs [20-07-2022 05:17:02]14665: WAF :: fetched 5 new logs [20-07-2022 05:18:01]17325: WAF :: fetched 1 new logs [20-07-2022 05:20:02]22970: WAF :: fetched 3 new logs [20-07-2022 05:21:01]25712: WAF :: fetched 1 new logs [20-07-2022 05:25:02]4308: WAF :: fetched 2 new logs [20-07-2022 05:26:02]7131: WAF :: fetched 3 new logs [20-07-2022 05:30:02]17938: WAF :: fetched 19 new logs [20-07-2022 05:31:02]20669: WAF :: fetched 1 new logs [20-07-2022 05:33:02]26053: WAF :: fetched 3 new logs [20-07-2022 05:34:01]28776: WAF :: fetched 4 new logs [20-07-2022 05:37:02]4564: WAF :: fetched 1 new logs [20-07-2022 05:41:01]15469: Checking for user cron vulnerabilities [20-07-2022 05:43:02]20967: WAF :: fetched 2 new logs [20-07-2022 05:44:01]23695: Checking ditributed CMS bruteforce attacks [20-07-2022 05:44:01]23695: WAF :: fetched 6 new logs [20-07-2022 05:45:02]26583: WAF :: fetched 1 new logs [20-07-2022 05:46:01]29351: WAF :: fetched 2 new logs [20-07-2022 05:49:02]5061: WAF :: fetched 3 new logs [20-07-2022 05:51:01]10462: WAF :: fetched 2 new logs [20-07-2022 05:52:02]13149: WAF :: fetched 1 new logs [20-07-2022 05:53:01]15792: WAF :: fetched 1 new logs [20-07-2022 05:57:02]26761: WAF :: fetched 15 new logs [20-07-2022 05:59:02]32209: WAF :: fetched 1 new logs [20-07-2022 06:00:02]2195: WAF :: fetched 2 new logs [20-07-2022 06:01:01]5364: WAF :: fetched 2 new logs [20-07-2022 06:03:01]10692: WAF :: fetched 2 new logs [20-07-2022 06:04:01]13459: WAF :: fetched 1 new logs [20-07-2022 06:11:01]32332: WAF :: fetched 3 new logs [20-07-2022 06:12:03]2617: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658308323 [20-07-2022 06:12:03]2617: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 06:12:05]2617: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 06:12:07]2617: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-0612/20220720-061203-YtfG48lYMSwPItIgEX6RmAAAAAM [20-07-2022 06:12:07]2617: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [20-07-2022 06:12:07]2617: WAF :: fetched 1 new logs [20-07-2022 06:13:01]5313: WAF :: fetched 2 new logs [20-07-2022 06:14:02]8032: WAF :: fetched 1 new logs [20-07-2022 06:15:02]10639: WAF :: fetched 1 new logs [20-07-2022 06:17:02]16074: WAF :: fetched 3 new logs [20-07-2022 06:18:03]18833: WAF :: fetched 6 new logs [20-07-2022 06:19:02]21609: WAF :: fetched 3 new logs [20-07-2022 06:20:02]24277: WAF :: fetched 6 new logs [20-07-2022 06:21:03]27116: WAF :: fetched 11 new logs [20-07-2022 06:22:02]29753: WAF :: fetched 4 new logs [20-07-2022 06:23:02]32465: WAF :: fetched 4 new logs [20-07-2022 06:24:02]2815: WAF :: fetched 2 new logs [20-07-2022 06:25:01]5510: WAF :: fetched 4 new logs [20-07-2022 06:26:02]8245: WAF :: fetched 10 new logs [20-07-2022 06:27:02]11082: WAF :: fetched 8 new logs [20-07-2022 06:28:01]13383: WAF :: fetched 52 new logs [20-07-2022 06:29:02]16610: WAF :: fetched 11 new logs [20-07-2022 06:30:02]19385: WAF :: fetched 17 new logs [20-07-2022 06:31:01]22081: WAF :: fetched 6 new logs [20-07-2022 06:34:02]30281: WAF :: fetched 3 new logs [20-07-2022 06:36:01]3297: WAF :: fetched 2 new logs [20-07-2022 06:37:02]6003: WAF :: fetched 1 new logs [20-07-2022 06:41:05]16859: WAF :: fetched 4 new logs [20-07-2022 06:41:05]16859: Checking for user cron vulnerabilities [20-07-2022 06:42:02]19202: WAF :: fetched 1 new logs [20-07-2022 06:43:02]22283: WAF :: fetched 2 new logs [20-07-2022 06:44:01]25001: Checking ditributed CMS bruteforce attacks [20-07-2022 06:45:01]27671: WAF :: fetched 1 new logs [20-07-2022 06:46:02]30365: WAF :: fetched 3 new logs [20-07-2022 06:47:02]658: WAF :: fetched 44 new logs [20-07-2022 06:48:02]3356: WAF :: fetched 7 new logs [20-07-2022 06:49:01]6102: WAF :: fetched 1 new logs [20-07-2022 06:51:02]11618: WAF :: fetched 1 new logs [20-07-2022 06:53:02]17020: WAF :: fetched 10 new logs [20-07-2022 06:55:02]22527: WAF :: fetched 1 new logs [20-07-2022 06:55:03]22527: API call failed for url https://api.recaptcha.cloud/add Status : 500 [20-07-2022 06:57:03]27922: WAF :: fetched 1 new logs [20-07-2022 06:58:02]30601: WAF :: fetched 1 new logs [20-07-2022 06:59:02]959: WAF :: fetched 9 new logs [20-07-2022 07:01:01]6575: WAF :: fetched 3 new logs [20-07-2022 07:06:02]20210: WAF :: fetched 43 new logs [20-07-2022 07:07:02]22824: WAF :: fetched 15 new logs [20-07-2022 07:08:02]25579: WAF :: fetched 5 new logs [20-07-2022 07:09:02]28328: WAF :: fetched 9 new logs [20-07-2022 07:10:02]31082: WAF :: fetched 13 new logs [20-07-2022 07:11:02]1385: WAF :: fetched 5 new logs [20-07-2022 07:12:01]4051: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658311921 [20-07-2022 07:12:01]4051: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 07:12:03]4051: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 07:12:04]4051: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-0712/20220720-071201-YtfU8ZXWiXneb_aNFT5e0wAAABI [20-07-2022 07:12:04]4051: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [20-07-2022 07:12:04]4051: WAF :: fetched 1 new logs [20-07-2022 07:14:02]9393: WAF :: fetched 33 new logs [20-07-2022 07:16:02]14695: WAF :: fetched 1 new logs [20-07-2022 07:22:02]30828: WAF :: fetched 4 new logs [20-07-2022 07:23:02]1039: WAF :: fetched 1 new logs [20-07-2022 07:25:03]6574: WAF :: fetched 2 new logs [20-07-2022 07:26:02]9265: WAF :: fetched 4 new logs [20-07-2022 07:27:02]11900: WAF :: fetched 1 new logs [20-07-2022 07:29:02]17283: WAF :: fetched 1 new logs [20-07-2022 07:30:02]20059: WAF :: fetched 6 new logs [20-07-2022 07:31:05]22768: WAF :: fetched 1 new logs [20-07-2022 07:33:01]28122: WAF :: fetched 1 new logs [20-07-2022 07:38:02]9156: WAF :: fetched 4 new logs [20-07-2022 07:39:01]11805: WAF :: fetched 2 new logs [20-07-2022 07:41:02]17360: Checking for user cron vulnerabilities [20-07-2022 07:44:01]25452: Checking ditributed CMS bruteforce attacks [20-07-2022 07:44:03]25452: WAF :: fetched 7 new logs [20-07-2022 07:45:01]: Checking for definition updates [20-07-2022 07:45:02]28248: WAF :: fetched 1 new logs [20-07-2022 07:46:01]30975: WAF :: fetched 19 new logs [20-07-2022 07:49:04]6528: WAF :: fetched 1 new logs [20-07-2022 07:51:03]11959: WAF :: fetched 2 new logs [20-07-2022 07:52:02]14672: WAF :: fetched 10 new logs [20-07-2022 07:55:02]22884: WAF :: fetched 3 new logs [20-07-2022 07:56:01]25564: WAF :: fetched 1 new logs [20-07-2022 07:57:02]28296: WAF :: fetched 1 new logs [20-07-2022 08:00:02]3759: WAF :: fetched 1 new logs [20-07-2022 08:01:02]6925: WAF :: fetched 1 new logs [20-07-2022 08:05:02]17726: WAF :: fetched 1 new logs [20-07-2022 08:06:04]20506: WAF :: fetched 1 new logs [20-07-2022 08:07:01]23155: WAF :: fetched 4 new logs [20-07-2022 08:08:02]25889: WAF :: fetched 7 new logs [20-07-2022 08:09:02]28557: WAF :: fetched 11 new logs [20-07-2022 08:10:01]31422: WAF :: fetched 23 new logs [20-07-2022 08:11:04]1852: WAF :: fetched 15 new logs [20-07-2022 08:12:02]4708: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658315522 [20-07-2022 08:12:02]4708: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 08:12:04]4708: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 08:12:04]4708: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-0812/20220720-081202-YtfjAtfOCjsBocmdEZsmJwAAAAk [20-07-2022 08:12:04]4708: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 08:12:05]4708: WAF :: fetched 397 new logs [20-07-2022 08:15:01]12977: WAF :: fetched 2 new logs [20-07-2022 08:19:02]23829: WAF :: fetched 1 new logs [20-07-2022 08:23:02]2318: WAF :: fetched 3 new logs [20-07-2022 08:24:01]4996: WAF :: fetched 4 new logs [20-07-2022 08:25:01]7790: WAF :: fetched 1 new logs [20-07-2022 08:26:02]10543: WAF :: fetched 4 new logs [20-07-2022 08:28:02]15937: WAF :: fetched 1 new logs [20-07-2022 08:29:01]18746: WAF :: fetched 2 new logs [20-07-2022 08:41:03]19623: WAF :: fetched 48 new logs [20-07-2022 08:41:03]19623: Checking for user cron vulnerabilities [20-07-2022 08:42:01]22339: WAF :: fetched 4 new logs [20-07-2022 08:44:01]27811: Checking ditributed CMS bruteforce attacks [20-07-2022 08:44:03]27811: WAF :: fetched 1 new logs [20-07-2022 08:45:02]30669: WAF :: fetched 1 new logs [20-07-2022 08:46:01]1048: WAF :: fetched 1 new logs [20-07-2022 08:47:02]3795: WAF :: fetched 2 new logs [20-07-2022 08:48:01]6482: WAF :: fetched 1 new logs [20-07-2022 08:49:01]9177: WAF :: fetched 2 new logs [20-07-2022 08:50:02]12006: WAF :: fetched 26 new logs [20-07-2022 08:51:01]14815: WAF :: fetched 2 new logs [20-07-2022 08:53:02]20357: WAF :: fetched 2 new logs [20-07-2022 08:55:01]26024: WAF :: fetched 1 new logs [20-07-2022 08:57:04]31515: WAF :: fetched 3 new logs [20-07-2022 08:58:02]1456: WAF :: fetched 5 new logs [20-07-2022 08:59:01]4566: WAF :: fetched 2 new logs [20-07-2022 09:01:01]10373: WAF :: fetched 3 new logs [20-07-2022 09:02:01]13128: WAF :: fetched 44 new logs [20-07-2022 09:03:01]15857: WAF :: fetched 16 new logs [20-07-2022 09:06:02]24265: WAF :: fetched 1 new logs [20-07-2022 09:07:01]26970: WAF :: fetched 1 new logs [20-07-2022 09:08:02]29685: WAF :: fetched 1 new logs [20-07-2022 09:10:02]2879: WAF :: fetched 1 new logs [20-07-2022 09:12:04]8426: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658319124 [20-07-2022 09:12:04]8426: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 09:12:06]8426: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 09:12:08]8426: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-0912/20220720-091204-YtfxFEH-VLwqgYfpM-ZwrwAAAB0 [20-07-2022 09:12:08]8426: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 09:12:08]8426: WAF :: fetched 3 new logs [20-07-2022 09:15:01]16734: WAF :: fetched 1 new logs [20-07-2022 09:16:02]19661: WAF :: fetched 1 new logs [20-07-2022 09:18:02]25157: WAF :: fetched 2 new logs [20-07-2022 09:20:02]30720: WAF :: fetched 2 new logs [20-07-2022 09:22:04]3788: WAF :: fetched 2 new logs [20-07-2022 09:25:01]12070: WAF :: fetched 2 new logs [20-07-2022 09:26:02]14809: WAF :: fetched 2 new logs [20-07-2022 09:27:01]17507: WAF :: fetched 2 new logs [20-07-2022 09:28:01]20325: WAF :: fetched 2 new logs [20-07-2022 09:30:01]25831: WAF :: fetched 7 new logs [20-07-2022 09:31:01]28636: WAF :: fetched 3 new logs [20-07-2022 09:33:01]1823: WAF :: fetched 1 new logs [20-07-2022 09:34:02]4608: WAF :: fetched 1 new logs [20-07-2022 09:36:01]10203: WAF :: fetched 1 new logs [20-07-2022 09:39:01]18635: WAF :: fetched 1 new logs [20-07-2022 09:41:02]24390: WAF :: fetched 6 new logs [20-07-2022 09:41:02]24390: Checking for user cron vulnerabilities [20-07-2022 09:42:01]27099: WAF :: fetched 3 new logs [20-07-2022 09:44:01]32558: Checking ditributed CMS bruteforce attacks [20-07-2022 09:44:03]32558: WAF :: fetched 1 new logs [20-07-2022 09:45:01]2975: WAF :: fetched 1 new logs [20-07-2022 09:47:01]8579: WAF :: fetched 1 new logs [20-07-2022 09:51:01]19852: WAF :: fetched 1 new logs [20-07-2022 09:52:02]22655: WAF :: fetched 2 new logs [20-07-2022 09:54:01]28016: WAF :: fetched 18 new logs [20-07-2022 09:55:02]30815: WAF :: fetched 3 new logs [20-07-2022 09:56:01]1233: WAF :: fetched 3 new logs [20-07-2022 09:57:01]4014: WAF :: fetched 2 new logs [20-07-2022 10:01:02]15283: WAF :: fetched 2 new logs [20-07-2022 10:02:02]18117: WAF :: fetched 1 new logs [20-07-2022 10:03:01]20952: WAF :: fetched 4 new logs [20-07-2022 10:04:02]23774: WAF :: fetched 1 new logs [20-07-2022 10:06:01]29509: WAF :: fetched 1 new logs [20-07-2022 10:07:02]32267: WAF :: fetched 9 new logs [20-07-2022 10:08:01]2657: WAF :: fetched 8 new logs [20-07-2022 10:10:03]8235: WAF :: fetched 1 new logs [20-07-2022 10:11:02]11054: WAF :: fetched 2 new logs [20-07-2022 10:12:01]13832: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658322721 [20-07-2022 10:12:03]13832: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 10:12:05]13832: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 10:12:07]13832: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-1012/20220720-101203-Ytf_Ix-vrtZIFB3nluYPTQAAACM [20-07-2022 10:12:07]13832: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 10:17:03]28014: WAF :: fetched 1 new logs [20-07-2022 10:19:01]1096: WAF :: fetched 3 new logs [20-07-2022 10:20:01]3927: WAF :: fetched 2 new logs [20-07-2022 10:21:01]6730: WAF :: fetched 5 new logs [20-07-2022 10:23:01]12331: WAF :: fetched 18 new logs [20-07-2022 10:24:02]15154: WAF :: fetched 42 new logs [20-07-2022 10:25:01]18049: WAF :: fetched 18 new logs [20-07-2022 10:26:02]20847: WAF :: fetched 17 new logs [20-07-2022 10:29:02]29129: WAF :: fetched 1 new logs [20-07-2022 10:30:02]31976: WAF :: fetched 1 new logs [20-07-2022 10:31:01]2395: WAF :: fetched 1 new logs [20-07-2022 10:32:02]5234: WAF :: fetched 1 new logs [20-07-2022 10:33:01]7977: WAF :: fetched 2 new logs [20-07-2022 10:34:02]10768: WAF :: fetched 3 new logs [20-07-2022 10:36:01]16395: WAF :: fetched 3 new logs [20-07-2022 10:37:02]19242: WAF :: fetched 3 new logs [20-07-2022 10:38:01]21991: WAF :: fetched 3 new logs [20-07-2022 10:39:01]24780: WAF :: fetched 2 new logs [20-07-2022 10:40:01]27772: WAF :: fetched 2 new logs [20-07-2022 10:41:01]30577: WAF :: fetched 13 new logs [20-07-2022 10:41:01]30577: Checking for user cron vulnerabilities [20-07-2022 10:42:02]908: WAF :: fetched 13 new logs [20-07-2022 10:43:01]3645: WAF :: fetched 12 new logs [20-07-2022 10:44:01]6510: Checking ditributed CMS bruteforce attacks [20-07-2022 10:45:01]9261: WAF :: fetched 18 new logs [20-07-2022 10:46:02]12128: WAF :: fetched 8 new logs [20-07-2022 10:47:02]14860: WAF :: fetched 3 new logs [20-07-2022 10:48:02]17743: WAF :: fetched 1 new logs [20-07-2022 10:50:01]23037: WAF :: fetched 5 new logs [20-07-2022 10:51:02]26333: WAF :: fetched 1 new logs [20-07-2022 10:52:01]29083: WAF :: fetched 4 new logs [20-07-2022 10:53:01]31875: WAF :: fetched 8 new logs [20-07-2022 10:55:03]5035: WAF :: fetched 1 new logs [20-07-2022 10:56:01]7866: WAF :: fetched 1 new logs [20-07-2022 10:57:01]10726: WAF :: fetched 3 new logs [20-07-2022 10:58:02]13575: WAF :: fetched 5 new logs [20-07-2022 10:59:01]16310: WAF :: fetched 2 new logs [20-07-2022 11:00:01]19061: WAF :: fetched 2 new logs [20-07-2022 11:01:02]22413: WAF :: fetched 1 new logs [20-07-2022 11:02:01]25230: WAF :: fetched 2 new logs [20-07-2022 11:04:01]30810: WAF :: fetched 4 new logs [20-07-2022 11:05:01]1320: WAF :: fetched 49 new logs [20-07-2022 11:06:02]4260: WAF :: fetched 1 new logs [20-07-2022 11:07:01]7017: WAF :: fetched 5 new logs [20-07-2022 11:07:57]7183: Performed RBL check for 23.111.136.34. [20-07-2022 11:08:02]9964: WAF :: fetched 3 new logs [20-07-2022 11:10:01]15500: WAF :: fetched 2 new logs [20-07-2022 11:11:01]18411: WAF :: fetched 1 new logs [20-07-2022 11:12:03]21241: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658326323 [20-07-2022 11:12:03]21241: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 11:12:05]21241: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 11:12:07]21241: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-1112/20220720-111203-YtgNM7TlnChXmpIzDkf1ywAAABM [20-07-2022 11:12:07]21241: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 11:12:07]21241: WAF :: fetched 3 new logs [20-07-2022 11:14:01]26626: WAF :: fetched 1 new logs [20-07-2022 11:15:01]29418: WAF :: fetched 1 new logs [20-07-2022 11:16:02]32236: WAF :: fetched 12 new logs [20-07-2022 11:17:01]2630: WAF :: fetched 14 new logs [20-07-2022 11:18:02]5418: WAF :: fetched 14 new logs [20-07-2022 11:19:01]8100: WAF :: fetched 2 new logs [20-07-2022 11:21:01]13811: WAF :: fetched 2 new logs [20-07-2022 11:22:02]16542: WAF :: fetched 1 new logs [20-07-2022 11:24:01]22063: WAF :: fetched 3 new logs [20-07-2022 11:25:02]25113: WAF :: fetched 5 new logs [20-07-2022 11:26:02]27867: WAF :: fetched 2 new logs [20-07-2022 11:28:02]988: WAF :: fetched 1 new logs [20-07-2022 11:29:01]3679: WAF :: fetched 1 new logs [20-07-2022 11:30:02]6522: WAF :: fetched 1 new logs [20-07-2022 11:31:01]9309: WAF :: fetched 4 new logs [20-07-2022 11:32:02]12080: WAF :: fetched 1 new logs [20-07-2022 11:33:01]14763: WAF :: fetched 2 new logs [20-07-2022 11:34:01]17565: WAF :: fetched 4 new logs [20-07-2022 11:35:02]20474: WAF :: fetched 7 new logs [20-07-2022 11:36:01]23242: WAF :: fetched 5 new logs [20-07-2022 11:37:02]26004: WAF :: fetched 2 new logs [20-07-2022 11:38:03]28737: WAF :: fetched 14 new logs [20-07-2022 11:39:02]31504: WAF :: fetched 3 new logs [20-07-2022 11:40:01]1937: WAF :: fetched 3 new logs [20-07-2022 11:41:02]4798: WAF :: fetched 3 new logs [20-07-2022 11:41:02]4798: Checking for user cron vulnerabilities [20-07-2022 11:42:02]7489: WAF :: fetched 2 new logs [20-07-2022 11:43:01]10159: WAF :: fetched 12 new logs [20-07-2022 11:44:02]12957: Checking ditributed CMS bruteforce attacks [20-07-2022 11:44:04]12957: WAF :: fetched 1 new logs [20-07-2022 11:46:02]18719: WAF :: fetched 1 new logs [20-07-2022 11:47:02]21455: WAF :: fetched 1 new logs [20-07-2022 11:51:01]32585: WAF :: fetched 7 new logs [20-07-2022 11:52:02]3004: WAF :: fetched 2 new logs [20-07-2022 11:53:04]5762: WAF :: fetched 1 new logs [20-07-2022 11:54:02]8625: WAF :: fetched 1 new logs [20-07-2022 11:56:02]14154: WAF :: fetched 3 new logs [20-07-2022 11:57:01]16893: WAF :: fetched 1 new logs [20-07-2022 11:58:02]19720: WAF :: fetched 3 new logs [20-07-2022 11:59:02]22400: WAF :: fetched 2 new logs [20-07-2022 12:00:01]24939: WAF :: fetched 3 new logs [20-07-2022 12:01:01]28207: WAF :: fetched 4 new logs [20-07-2022 12:02:02]31051: WAF :: fetched 5 new logs [20-07-2022 12:03:02]1305: WAF :: fetched 1 new logs [20-07-2022 12:04:01]4012: WAF :: fetched 4 new logs [20-07-2022 12:05:02]6827: WAF :: fetched 1 new logs [20-07-2022 12:06:01]9552: WAF :: fetched 2 new logs [20-07-2022 12:08:01]14899: WAF :: fetched 3 new logs [20-07-2022 12:09:02]17617: WAF :: fetched 2 new logs [20-07-2022 12:12:02]26046: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658329922 [20-07-2022 12:12:02]26046: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 12:12:04]26046: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 12:12:06]26046: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-1212/20220720-121202-YtgbQrliLLRXrgRT78G6zgAAAAM [20-07-2022 12:12:06]26046: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 12:12:06]26046: WAF :: fetched 3 new logs [20-07-2022 12:14:02]31660: WAF :: fetched 1 new logs [20-07-2022 12:16:02]4950: WAF :: fetched 1 new logs [20-07-2022 12:17:01]7629: WAF :: fetched 2 new logs [20-07-2022 12:18:02]10384: WAF :: fetched 6 new logs [20-07-2022 12:19:01]13125: WAF :: fetched 6 new logs [20-07-2022 12:20:01]15968: WAF :: fetched 14 new logs [20-07-2022 12:22:03]21644: WAF :: fetched 6 new logs [20-07-2022 12:23:01]23971: WAF :: fetched 7 new logs [20-07-2022 12:24:02]27090: WAF :: fetched 1 new logs [20-07-2022 12:25:02]29921: WAF :: fetched 1 new logs [20-07-2022 12:26:01]32732: WAF :: fetched 1 new logs [20-07-2022 12:30:02]11706: WAF :: fetched 1 new logs [20-07-2022 12:34:01]23368: WAF :: fetched 1 new logs [20-07-2022 12:37:01]31663: WAF :: fetched 1 new logs [20-07-2022 12:38:03]2089: WAF :: fetched 1 new logs [20-07-2022 12:39:01]4822: WAF :: fetched 2 new logs [20-07-2022 12:40:01]7678: WAF :: fetched 1 new logs [20-07-2022 12:41:02]10640: WAF :: fetched 1 new logs [20-07-2022 12:41:02]10640: Checking for user cron vulnerabilities [20-07-2022 12:43:02]16147: WAF :: fetched 1 new logs [20-07-2022 12:44:01]18982: Checking ditributed CMS bruteforce attacks [20-07-2022 12:44:02]18982: WAF :: fetched 2 new logs [20-07-2022 12:45:01]: Checking for software updates [20-07-2022 12:47:02]27533: WAF :: fetched 33 new logs [20-07-2022 12:50:01]3940: WAF :: fetched 1 new logs [20-07-2022 12:51:02]7014: httpd.conf changed. Refreshing watchlist. [20-07-2022 12:52:01]9919: WAF :: fetched 15 new logs [20-07-2022 12:54:02]15205: WAF :: fetched 1 new logs [20-07-2022 12:55:01]18519: WAF :: fetched 1 new logs [20-07-2022 12:55:02]18519: API call failed for url https://api.recaptcha.cloud/add Status : 500 [20-07-2022 12:57:02]24432: WAF :: fetched 1 new logs [20-07-2022 12:58:01]27291: WAF :: fetched 1 new logs [20-07-2022 13:00:02]32750: WAF :: fetched 2 new logs [20-07-2022 13:01:02]3740: WAF :: fetched 4 new logs [20-07-2022 13:02:01]6557: WAF :: fetched 2 new logs [20-07-2022 13:03:02]9395: WAF :: fetched 1 new logs [20-07-2022 13:09:01]9929: Attempting to start cPGuard scanner engine [20-07-2022 13:09:02]9930: WAF :: fetched 1 new logs [20-07-2022 13:09:09]9929: Process initiation succeded. [20-07-2022 13:12:01]20242: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658333521 [20-07-2022 13:12:01]20242: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 13:12:03]20242: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 13:12:06]20242: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-1312/20220720-131201-YtgpUQYFXWOPfzXhL5F8jAAAABA [20-07-2022 13:12:06]20242: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 13:12:06]20242: WAF :: fetched 1 new logs [20-07-2022 13:15:01]29080: httpd.conf changed. Refreshing watchlist. [20-07-2022 13:16:01]32584: httpd.conf changed. Refreshing watchlist. [20-07-2022 13:24:02]25137: httpd.conf changed. Refreshing watchlist. [20-07-2022 13:27:01]1275: WAF :: fetched 3 new logs [20-07-2022 13:28:01]4879: httpd.conf changed. Refreshing watchlist. [20-07-2022 13:30:02]11041: WAF :: fetched 1 new logs [20-07-2022 13:31:02]14123: WAF :: fetched 1 new logs [20-07-2022 13:32:01]16713: WAF :: fetched 4 new logs [20-07-2022 13:36:02]29411: WAF :: fetched 1 new logs [20-07-2022 13:37:02]32391: WAF :: fetched 1 new logs [20-07-2022 13:38:01]2734: WAF :: fetched 3 new logs [20-07-2022 13:38:01]2746: httpd.conf changed. Refreshing watchlist. [20-07-2022 13:39:01]7434: WAF :: fetched 3 new logs [20-07-2022 13:41:02]14182: Checking for user cron vulnerabilities [20-07-2022 13:41:02]14174: httpd.conf changed. Refreshing watchlist. [20-07-2022 13:43:01]20701: httpd.conf changed. Refreshing watchlist. [20-07-2022 13:44:01]24352: Checking ditributed CMS bruteforce attacks [20-07-2022 13:44:01]24353: httpd.conf changed. Refreshing watchlist. [20-07-2022 13:45:01]: Checking for definition updates [20-07-2022 13:46:01]30967: WAF :: fetched 1 new logs [20-07-2022 13:46:01]30963: httpd.conf changed. Refreshing watchlist. [20-07-2022 13:47:02]1896: WAF :: fetched 1 new logs [20-07-2022 13:49:01]8391: httpd.conf changed. Refreshing watchlist. [20-07-2022 13:54:02]25166: WAF :: fetched 2 new logs [20-07-2022 14:00:01]12380: WAF :: fetched 1 new logs [20-07-2022 14:01:01]16213: WAF :: fetched 1 new logs [20-07-2022 14:02:01]19595: WAF :: fetched 2 new logs [20-07-2022 14:03:01]22863: WAF :: fetched 2 new logs [20-07-2022 14:04:02]26550: WAF :: fetched 2 new logs [20-07-2022 14:05:02]29893: WAF :: fetched 2 new logs [20-07-2022 14:10:02]14476: WAF :: fetched 2 new logs [20-07-2022 14:11:01]17238: WAF :: fetched 1 new logs [20-07-2022 14:12:01]20943: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658337121 [20-07-2022 14:12:01]20943: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 14:12:03]20943: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 14:12:04]20943: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-1412/20220720-141201-Ytg3Yd1xpT1wjpB3AZ-BugAAACQ [20-07-2022 14:12:04]20943: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 14:12:04]20943: WAF :: fetched 1 new logs [20-07-2022 14:16:01]2359: WAF :: fetched 2 new logs [20-07-2022 14:22:01]22407: WAF :: fetched 8 new logs [20-07-2022 14:32:02]23679: WAF :: fetched 3 new logs [20-07-2022 14:33:01]26952: WAF :: fetched 4 new logs [20-07-2022 14:34:02]30731: WAF :: fetched 5 new logs [20-07-2022 14:35:01]1541: WAF :: fetched 1 new logs [20-07-2022 14:37:01]8234: WAF :: fetched 4 new logs [20-07-2022 14:40:02]18119: WAF :: fetched 1 new logs [20-07-2022 14:41:01]21239: WAF :: fetched 2 new logs [20-07-2022 14:41:01]21239: Checking for user cron vulnerabilities [20-07-2022 14:42:02]24732: WAF :: fetched 1 new logs [20-07-2022 14:43:01]27721: WAF :: fetched 1 new logs [20-07-2022 14:44:01]31536: Checking ditributed CMS bruteforce attacks [20-07-2022 14:44:02]31536: WAF :: fetched 4 new logs [20-07-2022 14:45:01]2534: WAF :: fetched 2 new logs [20-07-2022 14:49:01]15661: WAF :: fetched 3 new logs [20-07-2022 14:50:02]18808: WAF :: fetched 1 new logs [20-07-2022 14:51:01]22184: WAF :: fetched 1 new logs [20-07-2022 14:52:02]25685: WAF :: fetched 2 new logs [20-07-2022 14:53:01]28837: WAF :: fetched 1 new logs [20-07-2022 14:53:02]28840: Updated license status via CDN [20-07-2022 14:54:02]32598: WAF :: fetched 1 new logs [20-07-2022 15:00:01]20506: WAF :: fetched 1 new logs [20-07-2022 15:01:02]24379: Reseting cPGuard inotify settings [20-07-2022 15:01:02]24367: WAF :: fetched 1 new logs [20-07-2022 15:03:02]30903: WAF :: fetched 1 new logs [20-07-2022 15:05:02]5853: WAF :: fetched 1 new logs [20-07-2022 15:06:01]9148: WAF :: fetched 2 new logs [20-07-2022 15:08:01]15693: WAF :: fetched 2 new logs [20-07-2022 15:12:02]29283: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658340722 [20-07-2022 15:12:02]29283: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 15:12:04]29283: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 15:12:04]29283: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-1512/20220720-151202-YthFchMuIQVaA-IxSjvEQwAAABM [20-07-2022 15:12:04]29283: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 15:12:05]29283: WAF :: fetched 2 new logs [20-07-2022 15:16:01]11105: WAF :: fetched 1 new logs [20-07-2022 15:17:02]14360: WAF :: fetched 3 new logs [20-07-2022 15:18:01]17581: WAF :: fetched 1 new logs [20-07-2022 15:19:01]20633: WAF :: fetched 3 new logs [20-07-2022 15:20:01]23976: WAF :: fetched 2 new logs [20-07-2022 15:21:02]27295: WAF :: fetched 1 new logs [20-07-2022 15:22:01]30452: WAF :: fetched 1 new logs [20-07-2022 15:23:02]1276: WAF :: fetched 2 new logs [20-07-2022 15:24:01]4683: WAF :: fetched 1 new logs [20-07-2022 15:25:02]8676: WAF :: fetched 1 new logs [20-07-2022 15:26:01]12143: WAF :: fetched 2 new logs [20-07-2022 15:28:02]18888: WAF :: fetched 2 new logs [20-07-2022 15:28:02]18883: httpd.conf changed. Refreshing watchlist. [20-07-2022 15:29:01]22080: WAF :: fetched 2 new logs [20-07-2022 15:30:02]25368: WAF :: fetched 5 new logs [20-07-2022 15:33:01]3057: httpd.conf changed. Refreshing watchlist. [20-07-2022 15:34:01]6487: WAF :: fetched 4 new logs [20-07-2022 15:35:01]10213: WAF :: fetched 1 new logs [20-07-2022 15:38:02]20289: httpd.conf changed. Refreshing watchlist. [20-07-2022 15:40:02]26824: WAF :: fetched 1 new logs [20-07-2022 15:41:01]30092: Checking for user cron vulnerabilities [20-07-2022 15:42:02]907: WAF :: fetched 4 new logs [20-07-2022 15:44:02]7701: Checking ditributed CMS bruteforce attacks [20-07-2022 15:45:01]11386: WAF :: fetched 1 new logs [20-07-2022 15:46:02]14804: WAF :: fetched 2 new logs [20-07-2022 15:47:01]18122: WAF :: fetched 2 new logs [20-07-2022 15:50:02]27273: WAF :: fetched 1 new logs [20-07-2022 15:51:01]30770: WAF :: fetched 1 new logs [20-07-2022 15:52:02]1549: WAF :: fetched 1 new logs [20-07-2022 15:54:02]8313: WAF :: fetched 1 new logs [20-07-2022 16:00:01]28157: WAF :: fetched 1 new logs [20-07-2022 16:01:02]31996: WAF :: fetched 2 new logs [20-07-2022 16:02:01]3049: WAF :: fetched 1 new logs [20-07-2022 16:09:02]26833: WAF :: fetched 2 new logs [20-07-2022 16:10:01]30049: WAF :: fetched 1 new logs [20-07-2022 16:12:01]4249: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658344321 [20-07-2022 16:12:01]4249: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 16:12:03]4249: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 16:12:04]4249: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-1612/20220720-161201-YthTgflMK-KReFoRoUg-rQAAABs [20-07-2022 16:12:04]4249: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 16:12:04]4249: WAF :: fetched 3 new logs [20-07-2022 16:18:01]24596: WAF :: fetched 4 new logs [20-07-2022 16:24:01]12263: WAF :: fetched 1 new logs [20-07-2022 16:25:02]15640: WAF :: fetched 1 new logs [20-07-2022 16:36:02]20666: WAF :: fetched 1 new logs [20-07-2022 16:41:01]4924: Checking for user cron vulnerabilities [20-07-2022 16:44:01]14832: Checking ditributed CMS bruteforce attacks [20-07-2022 16:50:01]2545: WAF :: fetched 1 new logs [20-07-2022 16:51:01]6018: WAF :: fetched 1 new logs [20-07-2022 16:55:01]19121: WAF :: fetched 1 new logs [20-07-2022 16:56:02]23152: WAF :: fetched 2 new logs [20-07-2022 16:57:01]26385: WAF :: fetched 2 new logs [20-07-2022 16:58:02]29558: WAF :: fetched 1 new logs [20-07-2022 16:59:01]303: WAF :: fetched 2 new logs [20-07-2022 17:00:02]3528: WAF :: fetched 4 new logs [20-07-2022 17:04:02]17127: WAF :: fetched 2 new logs [20-07-2022 17:05:01]20263: WAF :: fetched 3 new logs [20-07-2022 17:06:01]24283: WAF :: fetched 4 new logs [20-07-2022 17:07:01]27501: WAF :: fetched 1 new logs [20-07-2022 17:10:01]5269: WAF :: fetched 1 new logs [20-07-2022 17:12:01]11941: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658347921 [20-07-2022 17:12:01]11941: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 17:12:03]11941: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 17:12:04]11941: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-1712/20220720-171201-YthhkcC4SEYk3kwRVXNvqQAAACQ [20-07-2022 17:12:04]11941: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [20-07-2022 17:12:04]11941: WAF :: fetched 1 new logs [20-07-2022 17:14:01]18519: WAF :: fetched 1 new logs [20-07-2022 17:17:02]28813: WAF :: fetched 1 new logs [20-07-2022 17:18:01]32122: WAF :: fetched 1 new logs [20-07-2022 17:23:02]16565: WAF :: fetched 2 new logs [20-07-2022 17:29:02]4557: WAF :: fetched 2 new logs [20-07-2022 17:31:02]11333: WAF :: fetched 5 new logs [20-07-2022 17:32:01]14673: WAF :: fetched 2 new logs [20-07-2022 17:39:01]5833: WAF :: fetched 1 new logs [20-07-2022 17:40:02]9177: WAF :: fetched 1 new logs [20-07-2022 17:41:01]12519: WAF :: fetched 1 new logs [20-07-2022 17:41:01]12519: Checking for user cron vulnerabilities [20-07-2022 17:44:01]22327: Checking ditributed CMS bruteforce attacks [20-07-2022 17:47:01]32696: WAF :: fetched 4 new logs [20-07-2022 17:57:02]1076: WAF :: fetched 2 new logs [20-07-2022 18:02:01]17978: WAF :: fetched 1 new logs [20-07-2022 18:07:02]2238: WAF :: fetched 1 new logs [20-07-2022 18:12:02]19078: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658351522 [20-07-2022 18:12:02]19078: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 18:12:04]19078: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 18:12:04]19078: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-1812/20220720-181202-YthvotITXQlNfMtiRWpRPAAAAAs [20-07-2022 18:12:04]19078: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [20-07-2022 18:12:04]19078: WAF :: fetched 1 new logs [20-07-2022 18:13:01]22194: WAF :: fetched 1 new logs [20-07-2022 18:18:01]7242: WAF :: fetched 1 new logs [20-07-2022 18:33:02]24265: WAF :: fetched 1 new logs [20-07-2022 18:41:01]18366: Checking for user cron vulnerabilities [20-07-2022 18:44:01]28238: Checking ditributed CMS bruteforce attacks [20-07-2022 18:45:01]31392: WAF :: fetched 2 new logs [20-07-2022 18:50:01]15348: WAF :: fetched 1 new logs [20-07-2022 18:52:01]21804: WAF :: fetched 2 new logs [20-07-2022 18:55:01]31489: WAF :: fetched 1 new logs [20-07-2022 18:59:02]12683: WAF :: fetched 2 new logs [20-07-2022 19:01:02]19340: WAF :: fetched 2 new logs [20-07-2022 19:04:01]28901: WAF :: fetched 1 new logs [20-07-2022 19:05:02]32141: WAF :: fetched 1 new logs [20-07-2022 19:07:02]6378: WAF :: fetched 2 new logs [20-07-2022 19:08:01]9970: WAF :: fetched 2 new logs [20-07-2022 19:09:02]13239: WAF :: fetched 1 new logs [20-07-2022 19:12:01]23052: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658355121 [20-07-2022 19:12:01]23052: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 19:12:03]23052: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 19:12:03]23052: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-1912/20220720-191201-Yth9sWdmZ2kSL_O4905A2gAAAAo [20-07-2022 19:12:03]23052: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 19:12:04]23052: WAF :: fetched 41 new logs [20-07-2022 19:24:01]30028: WAF :: fetched 1 new logs [20-07-2022 19:25:02]777: WAF :: fetched 1 new logs [20-07-2022 19:27:01]7434: WAF :: fetched 1 new logs [20-07-2022 19:31:01]20568: WAF :: fetched 1 new logs [20-07-2022 19:34:02]30229: WAF :: fetched 1 new logs [20-07-2022 19:36:02]4363: WAF :: fetched 1 new logs [20-07-2022 19:41:02]20961: WAF :: fetched 2 new logs [20-07-2022 19:41:02]20961: Checking for user cron vulnerabilities [20-07-2022 19:42:01]24223: WAF :: fetched 2 new logs [20-07-2022 19:44:01]30607: Checking ditributed CMS bruteforce attacks [20-07-2022 19:45:02]: Checking for definition updates [20-07-2022 19:47:02]8096: WAF :: fetched 2 new logs [20-07-2022 19:49:02]14930: WAF :: fetched 2 new logs [20-07-2022 19:51:02]21318: WAF :: fetched 4 new logs [20-07-2022 20:00:01]17788: WAF :: fetched 2 new logs [20-07-2022 20:01:02]21386: WAF :: fetched 4 new logs [20-07-2022 20:02:01]24646: WAF :: fetched 7 new logs [20-07-2022 20:03:02]27796: WAF :: fetched 2 new logs [20-07-2022 20:04:01]30982: WAF :: fetched 6 new logs [20-07-2022 20:05:02]1731: WAF :: fetched 3 new logs [20-07-2022 20:06:01]4983: WAF :: fetched 1 new logs [20-07-2022 20:07:01]8313: WAF :: fetched 1 new logs [20-07-2022 20:08:02]11479: WAF :: fetched 2 new logs [20-07-2022 20:09:01]15286: WAF :: fetched 1 new logs [20-07-2022 20:11:01]21773: WAF :: fetched 2 new logs [20-07-2022 20:12:02]25043: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658358722 [20-07-2022 20:12:02]25043: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 20:12:04]25043: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 20:12:04]25043: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-2012/20220720-201202-YtiLwhbaCfZfAsJKwS-igQAAAAE [20-07-2022 20:12:04]25043: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 20:12:04]25043: WAF :: fetched 2 new logs [20-07-2022 20:17:02]8564: WAF :: fetched 1 new logs [20-07-2022 20:18:01]11709: WAF :: fetched 1 new logs [20-07-2022 20:20:01]18660: WAF :: fetched 1 new logs [20-07-2022 20:22:01]25091: WAF :: fetched 1 new logs [20-07-2022 20:28:01]11881: WAF :: fetched 4 new logs [20-07-2022 20:30:01]18703: WAF :: fetched 1 new logs [20-07-2022 20:31:02]21924: WAF :: fetched 1 new logs [20-07-2022 20:36:01]5339: WAF :: fetched 1 new logs [20-07-2022 20:38:01]11755: WAF :: fetched 3 new logs [20-07-2022 20:39:01]15464: WAF :: fetched 2 new logs [20-07-2022 20:41:01]21992: Checking for user cron vulnerabilities [20-07-2022 20:42:02]25329: WAF :: fetched 1 new logs [20-07-2022 20:43:01]28485: WAF :: fetched 2 new logs [20-07-2022 20:44:01]31649: Checking ditributed CMS bruteforce attacks [20-07-2022 20:49:01]15457: WAF :: fetched 1 new logs [20-07-2022 20:50:01]19184: WAF :: fetched 1 new logs [20-07-2022 20:52:01]25562: WAF :: fetched 2 new logs [20-07-2022 20:54:01]31758: WAF :: fetched 1 new logs [20-07-2022 20:55:02]2643: WAF :: fetched 3 new logs [20-07-2022 20:56:01]5456: WAF :: fetched 1 new logs [20-07-2022 20:56:01]5462: httpd.conf changed. Refreshing watchlist. [20-07-2022 20:57:02]8950: WAF :: fetched 3 new logs [20-07-2022 20:57:02]8961: httpd.conf changed. Refreshing watchlist. [20-07-2022 20:58:01]12117: WAF :: fetched 1 new logs [20-07-2022 20:59:02]15346: WAF :: fetched 4 new logs [20-07-2022 21:00:01]18648: WAF :: fetched 1 new logs [20-07-2022 21:01:02]22316: WAF :: fetched 2 new logs [20-07-2022 21:01:02]22305: httpd.conf changed. Refreshing watchlist. [20-07-2022 21:03:02]28794: httpd.conf changed. Refreshing watchlist. [20-07-2022 21:08:01]12513: httpd.conf changed. Refreshing watchlist. [20-07-2022 21:12:01]25815: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658362321 [20-07-2022 21:12:01]25815: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 21:12:03]25815: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 21:12:04]25815: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-2112/20220720-211201-YtiZ0TEUsqSlHpSmvTSZsgAAAAE [20-07-2022 21:12:04]25815: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 21:12:04]25815: WAF :: fetched 1 new logs [20-07-2022 21:13:02]28949: WAF :: fetched 3 new logs [20-07-2022 21:21:02]22917: WAF :: fetched 1 new logs [20-07-2022 21:24:01]32319: WAF :: fetched 1 new logs [20-07-2022 21:25:01]3223: WAF :: fetched 1 new logs [20-07-2022 21:26:01]6560: WAF :: fetched 2 new logs [20-07-2022 21:27:01]9791: WAF :: fetched 2 new logs [20-07-2022 21:29:01]16233: WAF :: fetched 2 new logs [20-07-2022 21:31:01]23059: WAF :: fetched 2 new logs [20-07-2022 21:35:01]3551: WAF :: fetched 1 new logs [20-07-2022 21:37:01]10176: WAF :: fetched 3 new logs [20-07-2022 21:39:01]16563: WAF :: fetched 2 new logs [20-07-2022 21:41:01]23397: Checking for user cron vulnerabilities [20-07-2022 21:44:01]588: Checking ditributed CMS bruteforce attacks [20-07-2022 21:53:02]30162: WAF :: fetched 3 new logs [20-07-2022 21:57:02]10211: WAF :: fetched 1 new logs [20-07-2022 21:58:01]13373: WAF :: fetched 2 new logs [20-07-2022 22:07:08]10716: Performing Domain reputation checks [20-07-2022 22:08:02]13961: WAF :: fetched 1 new logs [20-07-2022 22:09:01]17160: WAF :: fetched 2 new logs [20-07-2022 22:12:02]27313: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658365922 [20-07-2022 22:12:02]27313: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 22:12:04]27313: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 22:12:04]27313: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-2212/20220720-221202-Ytin4oRxiBhn5zjBYQnHMwAAAAw [20-07-2022 22:12:04]27313: WAF :: No suitable log file found. Using SQLite.. [20-07-2022 22:12:04]27313: WAF :: fetched 1 new logs [20-07-2022 22:16:01]8111: WAF :: fetched 4 new logs [20-07-2022 22:18:02]14551: WAF :: fetched 1 new logs [20-07-2022 22:19:01]17708: WAF :: fetched 1 new logs [20-07-2022 22:21:02]24688: WAF :: fetched 4 new logs [20-07-2022 22:22:01]27715: WAF :: fetched 2 new logs [20-07-2022 22:25:02]5172: WAF :: fetched 1 new logs [20-07-2022 22:26:01]8435: WAF :: fetched 3 new logs [20-07-2022 22:27:02]11697: WAF :: fetched 3 new logs [20-07-2022 22:28:01]14932: WAF :: fetched 2 new logs [20-07-2022 22:29:02]18106: WAF :: fetched 1 new logs [20-07-2022 22:30:01]21235: WAF :: fetched 2 new logs [20-07-2022 22:41:02]25747: WAF :: fetched 1 new logs [20-07-2022 22:41:02]25747: Checking for user cron vulnerabilities [20-07-2022 22:44:01]3131: Checking ditributed CMS bruteforce attacks [20-07-2022 22:44:01]3131: WAF :: fetched 3 new logs [20-07-2022 22:45:02]6394: WAF :: fetched 1 new logs [20-07-2022 22:50:01]22836: WAF :: fetched 1 new logs [20-07-2022 22:57:01]13422: WAF :: fetched 1 new logs [20-07-2022 23:01:01]26390: WAF :: fetched 1 new logs [20-07-2022 23:04:01]4187: WAF :: fetched 1 new logs [20-07-2022 23:07:02]14042: httpd.conf changed. Refreshing watchlist. [20-07-2022 23:08:06]14193: Performed RBL check for 23.111.136.34. [20-07-2022 23:09:01]20499: WAF :: fetched 1 new logs [20-07-2022 23:12:02]30600: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658369522 [20-07-2022 23:12:02]30600: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [20-07-2022 23:12:04]30600: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [20-07-2022 23:12:04]30600: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220720/20220720-2312/20220720-231202-Yti18jLZTNVVqojl3Oa0_gAAAAY [20-07-2022 23:12:04]30600: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [20-07-2022 23:12:04]30600: WAF :: fetched 1 new logs [20-07-2022 23:13:01]1467: WAF :: fetched 1 new logs [20-07-2022 23:17:02]14469: WAF :: fetched 1 new logs [20-07-2022 23:18:01]17756: WAF :: fetched 3 new logs [20-07-2022 23:24:01]5109: WAF :: fetched 1 new logs [20-07-2022 23:26:01]11610: WAF :: fetched 1 new logs [20-07-2022 23:34:01]5292: WAF :: fetched 1 new logs [20-07-2022 23:40:01]24791: WAF :: fetched 1 new logs [20-07-2022 23:41:02]28020: Checking for user cron vulnerabilities [20-07-2022 23:43:02]2567: WAF :: fetched 2 new logs [20-07-2022 23:44:01]5839: Checking ditributed CMS bruteforce attacks [20-07-2022 23:45:01]9091: WAF :: fetched 5 new logs [20-07-2022 23:46:02]12456: WAF :: fetched 3 new logs [20-07-2022 23:47:01]15626: WAF :: fetched 3 new logs [20-07-2022 23:48:02]18995: WAF :: fetched 2 new logs [20-07-2022 23:52:02]32081: WAF :: fetched 2 new logs [20-07-2022 23:55:01]9880: httpd.conf changed. Refreshing watchlist. [20-07-2022 23:58:02]19518: WAF :: fetched 1 new logs [21-07-2022 00:01:05]29226: Sending daily report for July 21, 2022 [21-07-2022 00:05:01]10507: Deleted 3 entries older than 6 MONTH from scanner_logs [21-07-2022 00:05:01]10507: Deleted 0 files from Quarantine [21-07-2022 00:12:02]566: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658373122 [21-07-2022 00:12:02]566: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 00:12:04]566: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 00:12:04]566: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-0012/20220721-001202-YtjEAhJSM2GF46YlxM1RkAAAAB4 [21-07-2022 00:12:04]566: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [21-07-2022 00:12:04]566: WAF :: fetched 1 new logs [21-07-2022 00:13:01]4418: WAF :: fetched 1 new logs [21-07-2022 00:15:01]10926: WAF :: fetched 1 new logs [21-07-2022 00:16:02]14162: WAF :: fetched 2 new logs [21-07-2022 00:21:01]30287: WAF :: fetched 2 new logs [21-07-2022 00:27:01]17860: WAF :: fetched 2 new logs [21-07-2022 00:34:02]8803: WAF :: fetched 1 new logs [21-07-2022 00:35:01]12092: httpd.conf changed. Refreshing watchlist. [21-07-2022 00:36:02]15459: WAF :: fetched 1 new logs [21-07-2022 00:38:02]21863: WAF :: fetched 1 new logs [21-07-2022 00:41:02]31651: WAF :: fetched 2 new logs [21-07-2022 00:41:02]31651: Checking for user cron vulnerabilities [21-07-2022 00:44:01]9616: Checking ditributed CMS bruteforce attacks [21-07-2022 00:44:02]9616: WAF :: fetched 1 new logs [21-07-2022 00:45:01]: Checking for software updates [21-07-2022 00:47:02]19298: WAF :: fetched 3 new logs [21-07-2022 00:50:02]28903: WAF :: fetched 1 new logs [21-07-2022 00:55:02]12965: WAF :: fetched 2 new logs [21-07-2022 00:56:01]16313: WAF :: fetched 1 new logs [21-07-2022 01:03:02]7811: WAF :: fetched 3 new logs [21-07-2022 01:05:02]15638: WAF :: fetched 2 new logs [21-07-2022 01:08:01]26094: WAF :: fetched 1 new logs [21-07-2022 01:09:02]29559: WAF :: fetched 1 new logs [21-07-2022 01:10:01]32722: WAF :: fetched 3 new logs [21-07-2022 01:11:02]4481: WAF :: fetched 2 new logs [21-07-2022 01:12:01]7862: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658376721 [21-07-2022 01:12:01]7862: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 01:12:03]7862: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 01:12:04]7862: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-0112/20220721-011201-YtjSEUgrqCkgYOZE9SmxewAAAAQ [21-07-2022 01:12:04]7862: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 01:12:04]7862: WAF :: fetched 49 new logs [21-07-2022 01:32:02]14380: WAF :: fetched 3 new logs [21-07-2022 01:33:01]17724: WAF :: fetched 1 new logs [21-07-2022 01:41:01]13942: Checking for user cron vulnerabilities [21-07-2022 01:44:01]24252: Checking ditributed CMS bruteforce attacks [21-07-2022 01:45:01]: Checking for definition updates [21-07-2022 01:45:01]27895: WAF :: fetched 1 new logs [21-07-2022 01:48:01]5669: WAF :: fetched 1 new logs [21-07-2022 01:49:02]9210: WAF :: fetched 1 new logs [21-07-2022 01:51:01]16171: WAF :: fetched 1 new logs [21-07-2022 01:53:01]22327: WAF :: fetched 1 new logs [21-07-2022 01:58:02]6969: WAF :: fetched 1 new logs [21-07-2022 02:12:01]21434: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658380321 [21-07-2022 02:12:01]21434: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 02:12:03]21434: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 02:12:04]21434: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-0212/20220721-021201-YtjgIQApYCr4YjmqKGAXYwAAAAI [21-07-2022 02:12:04]21434: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 02:12:04]21434: WAF :: fetched 4 new logs [21-07-2022 02:13:02]24634: WAF :: fetched 1 new logs [21-07-2022 02:16:01]2657: WAF :: fetched 1 new logs [21-07-2022 02:24:02]28876: WAF :: fetched 2 new logs [21-07-2022 02:38:02]13934: WAF :: fetched 1 new logs [21-07-2022 02:41:01]24110: Checking for user cron vulnerabilities [21-07-2022 02:44:02]2020: Checking ditributed CMS bruteforce attacks [21-07-2022 02:49:01]18455: WAF :: fetched 1 new logs [21-07-2022 02:53:02]31153: Updated license status via CDN [21-07-2022 02:54:02]2141: WAF :: fetched 2 new logs [21-07-2022 03:00:02]23512: Found and updated 32 CMS installations [21-07-2022 03:02:26]23512: Sending CMS version vulnerability report emails to cpanel users [21-07-2022 03:02:29]23512: Checking wordpress installations for suspicious directories [21-07-2022 03:04:33]2688: Sending CMS version vulnerability report emails to cpanel users [21-07-2022 03:04:36]2688: Checking wordpress installations for suspicious directories [21-07-2022 03:08:02]21315: WAF :: fetched 2 new logs [21-07-2022 03:12:02]3059: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658383922 [21-07-2022 03:12:02]3059: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 03:12:04]3059: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 03:12:04]3059: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-0312/20220721-031202-YtjuMgiACh5eoYQKM_iOVgAAAAI [21-07-2022 03:12:04]3059: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [21-07-2022 03:12:05]3059: WAF :: fetched 1 new logs [21-07-2022 03:13:01]6768: WAF :: fetched 2 new logs [21-07-2022 03:16:01]17862: WAF :: fetched 1 new logs [21-07-2022 03:18:02]24883: WAF :: fetched 3 new logs [21-07-2022 03:40:02]5363: WAF :: fetched 2 new logs [21-07-2022 03:41:01]8758: WAF :: fetched 1 new logs [21-07-2022 03:41:01]8758: Checking for user cron vulnerabilities [21-07-2022 03:44:01]18434: Checking ditributed CMS bruteforce attacks [21-07-2022 03:47:01]28711: WAF :: fetched 4 new logs [21-07-2022 03:49:01]3046: WAF :: fetched 1 new logs [21-07-2022 04:03:01]18087: WAF :: fetched 3 new logs [21-07-2022 04:05:02]24661: WAF :: fetched 1 new logs [21-07-2022 04:12:02]16146: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658387522 [21-07-2022 04:12:02]16146: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 04:12:04]16146: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 04:12:04]16146: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-0412/20220721-041202-Ytj8QvY0jBPdJHg5Eh5j6gAAAAU [21-07-2022 04:12:04]16146: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 04:12:04]16146: WAF :: fetched 14 new logs [21-07-2022 04:13:01]19500: WAF :: fetched 3 new logs [21-07-2022 04:17:01]1013: WAF :: fetched 2 new logs [21-07-2022 04:29:01]9438: WAF :: fetched 1 new logs [21-07-2022 04:35:01]29172: WAF :: fetched 1 new logs [21-07-2022 04:41:02]17033: WAF :: fetched 1 new logs [21-07-2022 04:41:02]17033: Checking for user cron vulnerabilities [21-07-2022 04:44:01]26925: Checking ditributed CMS bruteforce attacks [21-07-2022 04:45:02]30427: WAF :: fetched 1 new logs [21-07-2022 04:57:01]6335: WAF :: fetched 1 new logs [21-07-2022 05:01:41]20296: Starting daily scan on files updated in last 24 hrs [21-07-2022 05:07:01]7852: WAF :: fetched 1 new logs [21-07-2022 05:09:01]14874: WAF :: fetched 1 new logs [21-07-2022 05:11:01]21676: WAF :: fetched 2 new logs [21-07-2022 05:12:01]24935: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658391121 [21-07-2022 05:12:01]24935: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 05:12:03]24935: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 05:12:03]24935: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-0512/20220721-051201-YtkKUXjSBhWOsmYb1cxXQAAAABc [21-07-2022 05:12:03]24935: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [21-07-2022 05:12:04]24935: WAF :: fetched 1 new logs [21-07-2022 05:18:02]12795: WAF :: fetched 2 new logs [21-07-2022 05:41:01]24744: Checking for user cron vulnerabilities [21-07-2022 05:44:01]2172: Checking ditributed CMS bruteforce attacks [21-07-2022 05:45:01]5587: WAF :: fetched 1 new logs [21-07-2022 05:47:01]12260: WAF :: fetched 1 new logs [21-07-2022 05:48:02]15469: WAF :: fetched 1 new logs [21-07-2022 05:56:02]10139: WAF :: fetched 1 new logs [21-07-2022 05:58:02]16568: WAF :: fetched 1 new logs [21-07-2022 06:01:01]27198: WAF :: fetched 1 new logs [21-07-2022 06:08:02]17886: WAF :: fetched 2 new logs [21-07-2022 06:12:01]31489: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658394721 [21-07-2022 06:12:01]31489: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 06:12:03]31489: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 06:12:04]31489: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-0612/20220721-061201-YtkYYQpG9qykTpUM4pHikgAAAAA [21-07-2022 06:12:04]31489: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 06:12:04]31489: WAF :: fetched 7 new logs [21-07-2022 06:14:01]5788: WAF :: fetched 1 new logs [21-07-2022 06:41:01]32336: Checking for user cron vulnerabilities [21-07-2022 06:44:02]10073: Checking ditributed CMS bruteforce attacks [21-07-2022 07:04:02]10720: WAF :: fetched 1 new logs [21-07-2022 07:12:01]5321: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658398321 [21-07-2022 07:12:01]5321: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 07:12:03]5321: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 07:12:04]5321: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-0712/20220721-071201-YtkmcZUrgUWCxUPSugaHJAAAAB8 [21-07-2022 07:12:04]5321: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 07:12:04]5321: WAF :: fetched 2 new logs [21-07-2022 07:28:01]26493: WAF :: fetched 2 new logs [21-07-2022 07:39:01]30678: WAF :: fetched 1 new logs [21-07-2022 07:41:01]5513: Checking for user cron vulnerabilities [21-07-2022 07:44:01]15483: Checking ditributed CMS bruteforce attacks [21-07-2022 07:45:01]: Checking for definition updates [21-07-2022 07:48:01]28607: WAF :: fetched 1 new logs [21-07-2022 08:04:01]18201: WAF :: fetched 1 new logs [21-07-2022 08:09:02]2640: WAF :: fetched 3 new logs [21-07-2022 08:10:01]6130: WAF :: fetched 1 new logs [21-07-2022 08:11:02]10177: WAF :: fetched 2 new logs [21-07-2022 08:12:01]13364: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658401921 [21-07-2022 08:12:01]13364: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 08:12:03]13364: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 08:12:03]13364: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-0812/20220721-081201-Ytk0gR2FSG4bAPLnI27axQAAACg [21-07-2022 08:12:03]13364: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [21-07-2022 08:12:04]13364: WAF :: fetched 2 new logs [21-07-2022 08:13:02]17023: WAF :: fetched 3 new logs [21-07-2022 08:14:01]20378: WAF :: fetched 2 new logs [21-07-2022 08:17:02]30662: WAF :: fetched 1 new logs [21-07-2022 08:20:01]8713: WAF :: fetched 1 new logs [21-07-2022 08:29:02]7441: WAF :: fetched 1 new logs [21-07-2022 08:33:02]20984: WAF :: fetched 1 new logs [21-07-2022 08:34:01]24374: WAF :: fetched 1 new logs [21-07-2022 08:41:01]16391: Checking for user cron vulnerabilities [21-07-2022 08:44:01]26520: Checking ditributed CMS bruteforce attacks [21-07-2022 08:44:02]26520: WAF :: fetched 2 new logs [21-07-2022 08:51:01]18081: WAF :: fetched 1 new logs [21-07-2022 08:54:02]28100: WAF :: fetched 2 new logs [21-07-2022 08:55:01]31402: WAF :: fetched 1 new logs [21-07-2022 08:59:01]12731: WAF :: fetched 1 new logs [21-07-2022 09:02:02]23436: WAF :: fetched 2 new logs [21-07-2022 09:08:02]11280: WAF :: fetched 2 new logs [21-07-2022 09:12:02]25434: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658405522 [21-07-2022 09:12:02]25434: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 09:12:04]25434: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 09:12:04]25434: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-0912/20220721-091202-YtlCksjPAB8vCq-rjPFPygAAAAA [21-07-2022 09:12:04]25434: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 09:12:05]25434: WAF :: fetched 17 new logs [21-07-2022 09:17:01]10277: WAF :: fetched 1 new logs [21-07-2022 09:18:02]13693: WAF :: fetched 5 new logs [21-07-2022 09:20:02]20478: WAF :: fetched 2 new logs [21-07-2022 09:22:02]27702: WAF :: fetched 1 new logs [21-07-2022 09:25:01]5368: WAF :: fetched 2 new logs [21-07-2022 09:27:01]12309: WAF :: fetched 1 new logs [21-07-2022 09:30:01]22429: WAF :: fetched 1 new logs [21-07-2022 09:36:01]10893: WAF :: fetched 1 new logs [21-07-2022 09:37:01]14284: WAF :: fetched 2 new logs [21-07-2022 09:38:01]17771: WAF :: fetched 1 new logs [21-07-2022 09:40:01]24505: WAF :: fetched 1 new logs [21-07-2022 09:41:01]27921: Checking for user cron vulnerabilities [21-07-2022 09:44:01]6487: Checking ditributed CMS bruteforce attacks [21-07-2022 09:46:01]13230: WAF :: fetched 1 new logs [21-07-2022 09:54:02]8907: WAF :: fetched 4 new logs [21-07-2022 09:56:02]15649: WAF :: fetched 1 new logs [21-07-2022 09:59:01]25681: WAF :: fetched 3 new logs [21-07-2022 10:00:01]28815: WAF :: fetched 3 new logs [21-07-2022 10:05:02]14501: WAF :: fetched 2 new logs [21-07-2022 10:07:02]21284: WAF :: fetched 1 new logs [21-07-2022 10:10:01]31220: WAF :: fetched 1 new logs [21-07-2022 10:11:02]2391: WAF :: fetched 1 new logs [21-07-2022 10:12:01]6421: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658409121 [21-07-2022 10:12:01]6421: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 10:12:03]6421: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 10:12:04]6421: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-1012/20220721-101201-YtlQoTJ6ibjTrSbDGXGyCwAAAAs [21-07-2022 10:12:04]6421: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 10:12:04]6421: WAF :: fetched 1 new logs [21-07-2022 10:14:01]13480: WAF :: fetched 2 new logs [21-07-2022 10:18:01]26891: WAF :: fetched 1 new logs [21-07-2022 10:20:01]1394: WAF :: fetched 1 new logs [21-07-2022 10:27:01]25632: WAF :: fetched 2 new logs [21-07-2022 10:32:02]10382: WAF :: fetched 1 new logs [21-07-2022 10:34:01]17676: WAF :: fetched 2 new logs [21-07-2022 10:35:01]21140: WAF :: fetched 1 new logs [21-07-2022 10:37:01]27988: WAF :: fetched 3 new logs [21-07-2022 10:38:01]31446: WAF :: fetched 1 new logs [21-07-2022 10:41:02]9212: Checking for user cron vulnerabilities [21-07-2022 10:44:01]19927: Checking ditributed CMS bruteforce attacks [21-07-2022 10:44:01]19927: WAF :: fetched 1 new logs [21-07-2022 10:45:02]23366: WAF :: fetched 1 new logs [21-07-2022 10:46:01]26661: WAF :: fetched 4 new logs [21-07-2022 10:47:02]30130: WAF :: fetched 3 new logs [21-07-2022 10:48:01]1177: WAF :: fetched 2 new logs [21-07-2022 10:49:02]4684: WAF :: fetched 1 new logs [21-07-2022 10:50:01]8127: WAF :: fetched 1 new logs [21-07-2022 10:51:02]11458: WAF :: fetched 2 new logs [21-07-2022 10:52:01]14877: WAF :: fetched 2 new logs [21-07-2022 10:53:02]18646: WAF :: fetched 5 new logs [21-07-2022 10:55:02]25208: WAF :: fetched 1 new logs [21-07-2022 10:58:01]2925: WAF :: fetched 1 new logs [21-07-2022 10:59:01]6271: WAF :: fetched 2 new logs [21-07-2022 11:00:01]9229: WAF :: fetched 1 new logs [21-07-2022 11:05:01]26791: WAF :: fetched 1 new logs [21-07-2022 11:07:01]1109: WAF :: fetched 1 new logs [21-07-2022 11:07:55]1278: Performed RBL check for 23.111.136.34. [21-07-2022 11:08:01]4538: WAF :: fetched 1 new logs [21-07-2022 11:09:01]7932: WAF :: fetched 1 new logs [21-07-2022 11:10:01]11288: WAF :: fetched 3 new logs [21-07-2022 11:11:01]14661: WAF :: fetched 1 new logs [21-07-2022 11:12:02]18211: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658412722 [21-07-2022 11:12:02]18211: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 11:12:04]18211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 11:12:04]18211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-1112/20220721-111202-YtlesnLqxCOMMt9GdEadOAAAABY [21-07-2022 11:12:04]18211: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 11:12:04]18211: WAF :: fetched 2 new logs [21-07-2022 11:13:01]21936: WAF :: fetched 1 new logs [21-07-2022 11:23:02]23740: WAF :: fetched 1 new logs [21-07-2022 11:25:02]30801: WAF :: fetched 2 new logs [21-07-2022 11:26:01]1910: WAF :: fetched 1 new logs [21-07-2022 11:30:01]15535: WAF :: fetched 1 new logs [21-07-2022 11:40:01]17265: WAF :: fetched 1 new logs [21-07-2022 11:41:02]20621: WAF :: fetched 1 new logs [21-07-2022 11:41:02]20621: Checking for user cron vulnerabilities [21-07-2022 11:42:01]23791: WAF :: fetched 2 new logs [21-07-2022 11:44:01]31077: Checking ditributed CMS bruteforce attacks [21-07-2022 11:46:01]5527: WAF :: fetched 6 new logs [21-07-2022 11:49:02]15766: WAF :: fetched 2 new logs [21-07-2022 12:00:01]20849: WAF :: fetched 1 new logs [21-07-2022 12:01:01]24662: WAF :: fetched 2 new logs [21-07-2022 12:05:01]7095: WAF :: fetched 1 new logs [21-07-2022 12:12:01]30804: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658416321 [21-07-2022 12:12:01]30804: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 12:12:03]30804: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 12:12:04]30804: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-1212/20220721-121201-YtlswV9k6XT1FBht4O2FZQAAAAk [21-07-2022 12:12:04]30804: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [21-07-2022 12:12:04]30804: WAF :: fetched 1 new logs [21-07-2022 12:14:01]5579: WAF :: fetched 1 new logs [21-07-2022 12:20:02]25629: WAF :: fetched 1 new logs [21-07-2022 12:27:02]17311: WAF :: fetched 1 new logs [21-07-2022 12:29:01]23867: WAF :: fetched 2 new logs [21-07-2022 12:31:01]30504: WAF :: fetched 1 new logs [21-07-2022 12:35:02]12248: WAF :: fetched 2 new logs [21-07-2022 12:37:02]19118: WAF :: fetched 2 new logs [21-07-2022 12:38:01]22453: WAF :: fetched 3 new logs [21-07-2022 12:41:02]32054: WAF :: fetched 1 new logs [21-07-2022 12:41:02]32054: Checking for user cron vulnerabilities [21-07-2022 12:42:01]3051: WAF :: fetched 2 new logs [21-07-2022 12:44:01]9749: Checking ditributed CMS bruteforce attacks [21-07-2022 12:45:02]: Checking for software updates [21-07-2022 12:45:02]13574: WAF :: fetched 8 new logs [21-07-2022 12:46:01]16927: WAF :: fetched 2 new logs [21-07-2022 12:48:01]23680: WAF :: fetched 2 new logs [21-07-2022 12:49:02]27005: WAF :: fetched 2 new logs [21-07-2022 12:50:01]30365: WAF :: fetched 2 new logs [21-07-2022 12:57:02]22399: WAF :: fetched 1 new logs [21-07-2022 12:58:01]25644: WAF :: fetched 6 new logs [21-07-2022 12:59:02]28914: WAF :: fetched 4 new logs [21-07-2022 13:01:02]3464: WAF :: fetched 3 new logs [21-07-2022 13:02:01]7017: WAF :: fetched 1 new logs [21-07-2022 13:03:02]10289: WAF :: fetched 4 new logs [21-07-2022 13:04:01]13558: WAF :: fetched 4 new logs [21-07-2022 13:05:02]17499: WAF :: fetched 1 new logs [21-07-2022 13:06:01]20803: WAF :: fetched 2 new logs [21-07-2022 13:12:01]8857: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658419921 [21-07-2022 13:12:01]8857: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 13:12:03]8857: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 13:12:04]8857: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-1312/20220721-131201-Ytl60TU8eb4CgOvnI4gl7wAAAAk [21-07-2022 13:12:04]8857: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 13:12:04]8857: WAF :: fetched 40 new logs [21-07-2022 13:13:02]12317: WAF :: fetched 2 new logs [21-07-2022 13:15:02]19444: WAF :: fetched 1 new logs [21-07-2022 13:16:01]22687: WAF :: fetched 1 new logs [21-07-2022 13:19:02]32767: WAF :: fetched 1 new logs [21-07-2022 13:29:01]1695: WAF :: fetched 1 new logs [21-07-2022 13:30:01]5084: WAF :: fetched 1 new logs [21-07-2022 13:38:01]31866: WAF :: fetched 1 new logs [21-07-2022 13:41:02]9751: WAF :: fetched 3 new logs [21-07-2022 13:41:02]9751: Checking for user cron vulnerabilities [21-07-2022 13:44:01]19808: Checking ditributed CMS bruteforce attacks [21-07-2022 13:45:01]: Checking for definition updates [21-07-2022 13:48:02]1056: WAF :: fetched 1 new logs [21-07-2022 13:49:01]4362: WAF :: fetched 2 new logs [21-07-2022 13:51:01]11096: WAF :: fetched 2 new logs [21-07-2022 13:54:02]20946: WAF :: fetched 2 new logs [21-07-2022 14:00:02]9065: WAF :: fetched 1 new logs [21-07-2022 14:01:01]12873: WAF :: fetched 1 new logs [21-07-2022 14:02:01]16209: WAF :: fetched 2 new logs [21-07-2022 14:03:01]19622: WAF :: fetched 1 new logs [21-07-2022 14:08:01]4501: WAF :: fetched 1 new logs [21-07-2022 14:12:01]18344: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658423521 [21-07-2022 14:12:01]18344: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 14:12:03]18344: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 14:12:03]18344: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-1412/20220721-141201-YtmI4V0GgeC4ehl7mbQI5gAAACc [21-07-2022 14:12:03]18344: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 14:12:04]18344: WAF :: fetched 1 new logs [21-07-2022 14:13:01]21759: WAF :: fetched 47 new logs [21-07-2022 14:14:01]25235: WAF :: fetched 74 new logs [21-07-2022 14:15:01]28566: WAF :: fetched 1 new logs [21-07-2022 14:16:01]32312: WAF :: fetched 47 new logs [21-07-2022 14:17:01]3412: WAF :: fetched 51 new logs [21-07-2022 14:18:01]6862: WAF :: fetched 57 new logs [21-07-2022 14:19:01]10252: WAF :: fetched 43 new logs [21-07-2022 14:24:02]27021: WAF :: fetched 1 new logs [21-07-2022 14:25:02]30332: WAF :: fetched 1 new logs [21-07-2022 14:27:02]5169: WAF :: fetched 2 new logs [21-07-2022 14:29:02]11975: WAF :: fetched 1 new logs [21-07-2022 14:30:01]15351: WAF :: fetched 6 new logs [21-07-2022 14:31:02]18801: WAF :: fetched 1 new logs [21-07-2022 14:32:01]22041: WAF :: fetched 2 new logs [21-07-2022 14:33:01]25090: WAF :: fetched 1 new logs [21-07-2022 14:39:01]13519: WAF :: fetched 1 new logs [21-07-2022 14:41:02]20396: WAF :: fetched 2 new logs [21-07-2022 14:41:02]20396: Checking for user cron vulnerabilities [21-07-2022 14:42:01]23756: WAF :: fetched 2 new logs [21-07-2022 14:43:02]27132: WAF :: fetched 1 new logs [21-07-2022 14:44:01]30449: Checking ditributed CMS bruteforce attacks [21-07-2022 14:44:01]30449: WAF :: fetched 1 new logs [21-07-2022 14:48:01]12137: WAF :: fetched 1 new logs [21-07-2022 14:53:02]28773: WAF :: fetched 2 new logs [21-07-2022 14:53:02]28772: Updated license status via CDN [21-07-2022 14:58:02]13620: WAF :: fetched 1 new logs [21-07-2022 14:59:01]16825: WAF :: fetched 1 new logs [21-07-2022 15:01:01]23720: Reseting cPGuard inotify settings [21-07-2022 15:07:01]12250: WAF :: fetched 1 new logs [21-07-2022 15:12:01]28829: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658427121 [21-07-2022 15:12:01]28829: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 15:12:03]28829: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 15:12:03]28829: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-1512/20220721-151201-YtmW8aNopqvWljmjgZtc6gAAAAU [21-07-2022 15:12:03]28829: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 15:12:04]28829: WAF :: fetched 1 new logs [21-07-2022 15:20:02]23894: WAF :: fetched 1 new logs [21-07-2022 15:22:01]30622: WAF :: fetched 1 new logs [21-07-2022 15:23:02]1630: WAF :: fetched 1 new logs [21-07-2022 15:24:01]4977: WAF :: fetched 2 new logs [21-07-2022 15:26:01]11763: WAF :: fetched 3 new logs [21-07-2022 15:27:02]15628: WAF :: fetched 1 new logs [21-07-2022 15:28:01]19042: WAF :: fetched 3 new logs [21-07-2022 15:30:02]25591: WAF :: fetched 2 new logs [21-07-2022 15:32:02]32174: WAF :: fetched 1 new logs [21-07-2022 15:37:01]16775: WAF :: fetched 1 new logs [21-07-2022 15:38:02]20074: WAF :: fetched 3 new logs [21-07-2022 15:41:01]29929: Checking for user cron vulnerabilities [21-07-2022 15:42:02]751: WAF :: fetched 1 new logs [21-07-2022 15:44:02]7561: Checking ditributed CMS bruteforce attacks [21-07-2022 15:44:02]7561: WAF :: fetched 1 new logs [21-07-2022 15:48:01]21356: WAF :: fetched 1 new logs [21-07-2022 15:49:01]24581: WAF :: fetched 1 new logs [21-07-2022 15:51:01]31129: WAF :: fetched 2 new logs [21-07-2022 15:54:01]8940: WAF :: fetched 2 new logs [21-07-2022 15:55:01]12248: WAF :: fetched 1 new logs [21-07-2022 15:59:01]26048: WAF :: fetched 1 new logs [21-07-2022 16:00:02]29081: WAF :: fetched 2 new logs [21-07-2022 16:01:01]356: WAF :: fetched 1 new logs [21-07-2022 16:03:01]7340: WAF :: fetched 2 new logs [21-07-2022 16:08:02]24903: WAF :: fetched 1 new logs [21-07-2022 16:12:02]5981: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658430722 [21-07-2022 16:12:02]5981: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 16:12:04]5981: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 16:12:04]5981: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-1612/20220721-161202-YtmlAhehWkll7EUoMBCz7QAAAA8 [21-07-2022 16:12:04]5981: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 16:12:04]5981: WAF :: fetched 1 new logs [21-07-2022 16:13:01]9493: WAF :: fetched 1 new logs [21-07-2022 16:16:01]19442: WAF :: fetched 2 new logs [21-07-2022 16:17:01]22683: WAF :: fetched 3 new logs [21-07-2022 16:18:01]26526: WAF :: fetched 3 new logs [21-07-2022 16:19:01]29787: WAF :: fetched 7 new logs [21-07-2022 16:20:01]582: WAF :: fetched 3 new logs [21-07-2022 16:21:01]4126: WAF :: fetched 1 new logs [21-07-2022 16:22:02]7667: WAF :: fetched 1 new logs [21-07-2022 16:25:01]18026: WAF :: fetched 2 new logs [21-07-2022 16:26:02]21351: WAF :: fetched 1 new logs [21-07-2022 16:27:01]24480: WAF :: fetched 4 new logs [21-07-2022 16:34:02]15349: WAF :: fetched 1 new logs [21-07-2022 16:37:01]25412: WAF :: fetched 1 new logs [21-07-2022 16:41:01]7073: WAF :: fetched 1 new logs [21-07-2022 16:41:01]7073: Checking for user cron vulnerabilities [21-07-2022 16:42:02]10469: WAF :: fetched 1 new logs [21-07-2022 16:43:01]13731: WAF :: fetched 1 new logs [21-07-2022 16:44:01]17019: Checking ditributed CMS bruteforce attacks [21-07-2022 16:44:02]17019: WAF :: fetched 4 new logs [21-07-2022 16:45:01]20333: WAF :: fetched 2 new logs [21-07-2022 16:48:01]30734: WAF :: fetched 1 new logs [21-07-2022 16:50:02]5029: WAF :: fetched 2 new logs [21-07-2022 16:51:01]8490: WAF :: fetched 3 new logs [21-07-2022 16:52:02]11732: WAF :: fetched 3 new logs [21-07-2022 16:57:02]28212: WAF :: fetched 1 new logs [21-07-2022 17:02:01]13164: WAF :: fetched 1 new logs [21-07-2022 17:10:01]7845: WAF :: fetched 1 new logs [21-07-2022 17:12:02]14419: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658434322 [21-07-2022 17:12:02]14419: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 17:12:04]14419: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 17:12:04]14419: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-1712/20220721-171202-YtmzEtiqD5rh9Ft_f_7kPwAAABg [21-07-2022 17:12:04]14419: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [21-07-2022 17:12:04]14419: WAF :: fetched 1 new logs [21-07-2022 17:13:01]17790: WAF :: fetched 1 new logs [21-07-2022 17:16:02]27715: WAF :: fetched 1 new logs [21-07-2022 17:17:02]30938: WAF :: fetched 1 new logs [21-07-2022 17:21:02]12520: WAF :: fetched 3 new logs [21-07-2022 17:23:02]19213: WAF :: fetched 1 new logs [21-07-2022 17:24:02]22491: WAF :: fetched 1 new logs [21-07-2022 17:28:02]3300: WAF :: fetched 1 new logs [21-07-2022 17:29:01]7182: WAF :: fetched 2 new logs [21-07-2022 17:32:02]16954: WAF :: fetched 4 new logs [21-07-2022 17:33:01]20251: WAF :: fetched 3 new logs [21-07-2022 17:34:02]23610: WAF :: fetched 5 new logs [21-07-2022 17:35:01]26372: WAF :: fetched 2 new logs [21-07-2022 17:37:01]400: WAF :: fetched 1 new logs [21-07-2022 17:38:02]3890: WAF :: fetched 2 new logs [21-07-2022 17:41:01]14278: WAF :: fetched 1 new logs [21-07-2022 17:41:01]14278: Checking for user cron vulnerabilities [21-07-2022 17:42:02]17645: WAF :: fetched 5 new logs [21-07-2022 17:43:02]20885: WAF :: fetched 11 new logs [21-07-2022 17:44:02]24093: Checking ditributed CMS bruteforce attacks [21-07-2022 17:44:02]24093: WAF :: fetched 1 new logs [21-07-2022 17:45:02]27305: WAF :: fetched 1 new logs [21-07-2022 17:46:02]30613: WAF :: fetched 1 new logs [21-07-2022 17:50:02]11900: WAF :: fetched 1 new logs [21-07-2022 17:52:02]18514: WAF :: fetched 5 new logs [21-07-2022 18:00:02]12578: WAF :: fetched 1 new logs [21-07-2022 18:10:02]13746: WAF :: fetched 1 new logs [21-07-2022 18:12:01]20190: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658437921 [21-07-2022 18:12:01]20190: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 18:12:03]20190: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 18:12:04]20190: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-1812/20220721-181201-YtnBIZzUBh8mC0H1a0TZGgAAAAE [21-07-2022 18:12:04]20190: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 18:12:04]20190: WAF :: fetched 41 new logs [21-07-2022 18:15:02]30060: WAF :: fetched 2 new logs [21-07-2022 18:18:01]7526: WAF :: fetched 1 new logs [21-07-2022 18:22:02]21037: WAF :: fetched 1 new logs [21-07-2022 18:24:02]27503: WAF :: fetched 2 new logs [21-07-2022 18:26:02]1546: WAF :: fetched 2 new logs [21-07-2022 18:35:01]30826: WAF :: fetched 1 new logs [21-07-2022 18:37:01]4957: WAF :: fetched 1 new logs [21-07-2022 18:39:01]11445: WAF :: fetched 1 new logs [21-07-2022 18:41:01]18501: Checking for user cron vulnerabilities [21-07-2022 18:42:02]21650: WAF :: fetched 2 new logs [21-07-2022 18:43:01]24830: WAF :: fetched 1 new logs [21-07-2022 18:44:01]28062: Checking ditributed CMS bruteforce attacks [21-07-2022 18:50:02]15674: WAF :: fetched 1 new logs [21-07-2022 18:51:01]18951: WAF :: fetched 2 new logs [21-07-2022 18:52:02]22143: WAF :: fetched 1 new logs [21-07-2022 18:54:02]28541: WAF :: fetched 1 new logs [21-07-2022 18:55:01]31720: WAF :: fetched 1 new logs [21-07-2022 18:56:01]2604: WAF :: fetched 1 new logs [21-07-2022 18:57:01]5897: WAF :: fetched 2 new logs [21-07-2022 19:05:01]32452: WAF :: fetched 3 new logs [21-07-2022 19:12:01]23381: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658441521 [21-07-2022 19:12:01]23381: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 19:12:03]23381: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 19:12:04]23381: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-1912/20220721-191201-YtnPMckyRQagO-PtCtE3lAAAAAA [21-07-2022 19:12:04]23381: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [21-07-2022 19:12:04]23381: WAF :: fetched 1 new logs [21-07-2022 19:13:01]26675: WAF :: fetched 1 new logs [21-07-2022 19:21:01]20962: WAF :: fetched 3 new logs [21-07-2022 19:23:01]27380: WAF :: fetched 1 new logs [21-07-2022 19:28:01]10959: WAF :: fetched 1 new logs [21-07-2022 19:33:02]27643: WAF :: fetched 1 new logs [21-07-2022 19:40:02]18158: WAF :: fetched 1 new logs [21-07-2022 19:41:01]21899: Checking for user cron vulnerabilities [21-07-2022 19:44:02]31530: Checking ditributed CMS bruteforce attacks [21-07-2022 19:45:01]: Checking for definition updates [21-07-2022 19:51:01]22292: WAF :: fetched 1 new logs [21-07-2022 19:53:02]28614: WAF :: fetched 1 new logs [21-07-2022 19:54:01]31893: WAF :: fetched 1 new logs [21-07-2022 20:01:02]22989: WAF :: fetched 1 new logs [21-07-2022 20:03:02]29362: WAF :: fetched 1 new logs [21-07-2022 20:04:01]32604: WAF :: fetched 1 new logs [21-07-2022 20:05:02]3471: WAF :: fetched 2 new logs [21-07-2022 20:08:01]13243: WAF :: fetched 1 new logs [21-07-2022 20:09:02]16640: WAF :: fetched 1 new logs [21-07-2022 20:10:01]19810: WAF :: fetched 2 new logs [21-07-2022 20:11:02]23523: WAF :: fetched 4 new logs [21-07-2022 20:12:01]26657: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658445121 [21-07-2022 20:12:01]26657: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 20:12:03]26657: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 20:12:04]26657: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-2012/20220721-201201-YtndQSVAysdB7EokgLwxAwAAAAE [21-07-2022 20:12:04]26657: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 20:12:04]26657: WAF :: fetched 21 new logs [21-07-2022 20:13:02]29891: WAF :: fetched 1 new logs [21-07-2022 20:14:01]657: WAF :: fetched 1 new logs [21-07-2022 20:15:02]3934: WAF :: fetched 3 new logs [21-07-2022 20:17:02]10437: WAF :: fetched 4 new logs [21-07-2022 20:28:01]13338: WAF :: fetched 2 new logs [21-07-2022 20:30:01]19763: WAF :: fetched 4 new logs [21-07-2022 20:31:02]23051: WAF :: fetched 4 new logs [21-07-2022 20:34:01]621: WAF :: fetched 3 new logs [21-07-2022 20:35:02]3959: WAF :: fetched 6 new logs [21-07-2022 20:36:01]7298: WAF :: fetched 4 new logs [21-07-2022 20:39:02]16908: WAF :: fetched 1 new logs [21-07-2022 20:40:01]20076: WAF :: fetched 2 new logs [21-07-2022 20:41:02]23335: Checking for user cron vulnerabilities [21-07-2022 20:42:01]27022: WAF :: fetched 1 new logs [21-07-2022 20:44:01]1018: Checking ditributed CMS bruteforce attacks [21-07-2022 20:44:01]1018: WAF :: fetched 1 new logs [21-07-2022 20:45:02]4328: WAF :: fetched 3 new logs [21-07-2022 20:46:01]7651: WAF :: fetched 1 new logs [21-07-2022 20:48:01]13980: WAF :: fetched 2 new logs [21-07-2022 20:49:01]17312: WAF :: fetched 2 new logs [21-07-2022 20:50:01]20574: WAF :: fetched 2 new logs [21-07-2022 20:51:01]23846: WAF :: fetched 1 new logs [21-07-2022 21:01:01]24236: WAF :: fetched 2 new logs [21-07-2022 21:02:02]27936: WAF :: fetched 1 new logs [21-07-2022 21:03:01]31076: WAF :: fetched 1 new logs [21-07-2022 21:04:01]2009: WAF :: fetched 1 new logs [21-07-2022 21:12:01]28566: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658448721 [21-07-2022 21:12:01]28566: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 21:12:03]28566: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 21:12:04]28566: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-2112/20220721-211201-YtnrUQCQTRCxReVN7fUn-wAAABI [21-07-2022 21:12:04]28566: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [21-07-2022 21:12:04]28566: WAF :: fetched 1 new logs [21-07-2022 21:14:01]2748: WAF :: fetched 2 new logs [21-07-2022 21:17:02]12468: WAF :: fetched 2 new logs [21-07-2022 21:18:01]15587: WAF :: fetched 3 new logs [21-07-2022 21:19:02]18874: WAF :: fetched 3 new logs [21-07-2022 21:20:02]22068: WAF :: fetched 2 new logs [21-07-2022 21:24:01]2650: WAF :: fetched 2 new logs [21-07-2022 21:25:02]5960: WAF :: fetched 2 new logs [21-07-2022 21:26:01]9307: WAF :: fetched 2 new logs [21-07-2022 21:30:01]22133: WAF :: fetched 2 new logs [21-07-2022 21:32:01]28488: WAF :: fetched 2 new logs [21-07-2022 21:40:02]22309: WAF :: fetched 1 new logs [21-07-2022 21:41:01]25523: Checking for user cron vulnerabilities [21-07-2022 21:44:01]3517: Checking ditributed CMS bruteforce attacks [21-07-2022 21:44:02]3517: WAF :: fetched 1 new logs [21-07-2022 21:53:01]32720: WAF :: fetched 1 new logs [21-07-2022 22:07:10]14526: Performing Domain reputation checks [21-07-2022 22:12:01]30816: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658452321 [21-07-2022 22:12:01]30816: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 22:12:03]30816: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 22:12:04]30816: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-2212/20220721-221201-Ytn5YR7sSJ0X4xZVmybfkgAAAAU [21-07-2022 22:12:04]30816: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 22:12:04]30816: WAF :: fetched 23 new logs [21-07-2022 22:13:02]2322: WAF :: fetched 1 new logs [21-07-2022 22:18:01]18852: WAF :: fetched 4 new logs [21-07-2022 22:19:02]22119: WAF :: fetched 5 new logs [21-07-2022 22:20:01]25351: WAF :: fetched 4 new logs [21-07-2022 22:25:02]9708: WAF :: fetched 6 new logs [21-07-2022 22:35:02]10694: WAF :: fetched 1 new logs [21-07-2022 22:41:01]30262: WAF :: fetched 1 new logs [21-07-2022 22:41:01]30262: Checking for user cron vulnerabilities [21-07-2022 22:42:02]1136: WAF :: fetched 1 new logs [21-07-2022 22:43:01]4414: WAF :: fetched 3 new logs [21-07-2022 22:44:02]8349: Checking ditributed CMS bruteforce attacks [21-07-2022 22:54:02]9102: WAF :: fetched 3 new logs [21-07-2022 22:55:01]12428: WAF :: fetched 2 new logs [21-07-2022 22:59:01]25421: WAF :: fetched 1 new logs [21-07-2022 23:08:02]20145: Performed RBL check for 23.111.136.34. [21-07-2022 23:12:02]4021: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658455922 [21-07-2022 23:12:02]4021: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [21-07-2022 23:12:04]4021: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [21-07-2022 23:12:04]4021: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220721/20220721-2312/20220721-231202-YtoHcuQAuM-t5NWxigM4NwAAACQ [21-07-2022 23:12:04]4021: WAF :: No suitable log file found. Using SQLite.. [21-07-2022 23:12:04]4021: WAF :: fetched 1 new logs [21-07-2022 23:15:01]14496: WAF :: fetched 1 new logs [21-07-2022 23:16:02]17817: WAF :: fetched 2 new logs [21-07-2022 23:26:01]18569: WAF :: fetched 1 new logs [21-07-2022 23:32:01]5932: WAF :: fetched 1 new logs [21-07-2022 23:41:02]3494: Checking for user cron vulnerabilities [21-07-2022 23:44:01]13276: Checking ditributed CMS bruteforce attacks [21-07-2022 23:44:01]13276: WAF :: fetched 2 new logs [21-07-2022 23:45:02]17175: WAF :: fetched 2 new logs [21-07-2022 23:46:01]20422: WAF :: fetched 2 new logs [21-07-2022 23:48:01]26960: WAF :: fetched 1 new logs [21-07-2022 23:49:02]30313: WAF :: fetched 2 new logs [21-07-2022 23:51:02]4827: WAF :: fetched 1 new logs [21-07-2022 23:55:01]18516: WAF :: fetched 2 new logs [21-07-2022 23:55:01]18509: httpd.conf changed. Refreshing watchlist. [21-07-2022 23:56:01]21804: WAF :: fetched 3 new logs [21-07-2022 23:57:01]25047: WAF :: fetched 2 new logs [21-07-2022 23:59:02]31433: WAF :: fetched 2 new logs [22-07-2022 00:01:02]6270: WAF :: fetched 1 new logs [22-07-2022 00:01:02]6268: httpd.conf changed. Refreshing watchlist. [22-07-2022 00:01:05]6270: Sending daily report for July 22, 2022 [22-07-2022 00:05:02]19827: Deleted 0 entries older than 6 MONTH from scanner_logs [22-07-2022 00:05:02]19827: Deleted 0 files from Quarantine [22-07-2022 00:06:01]22980: WAF :: fetched 1 new logs [22-07-2022 00:07:01]26225: WAF :: fetched 2 new logs [22-07-2022 00:11:01]7080: WAF :: fetched 1 new logs [22-07-2022 00:12:02]10379: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658459522 [22-07-2022 00:12:02]10379: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 00:12:04]10379: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 00:12:04]10379: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-0012/20220722-001202-YtoVgjFapFBZSDxARaYtPQAAAAw [22-07-2022 00:12:04]10379: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-07-2022 00:12:05]10379: WAF :: fetched 1 new logs [22-07-2022 00:13:01]13681: WAF :: fetched 1 new logs [22-07-2022 00:17:01]27125: WAF :: fetched 1 new logs [22-07-2022 00:28:02]30934: WAF :: fetched 2 new logs [22-07-2022 00:31:01]8965: WAF :: fetched 2 new logs [22-07-2022 00:41:02]10095: Checking for user cron vulnerabilities [22-07-2022 00:44:01]19899: Checking ditributed CMS bruteforce attacks [22-07-2022 00:44:01]19899: WAF :: fetched 1 new logs [22-07-2022 00:45:01]: Checking for software updates [22-07-2022 00:55:01]24157: WAF :: fetched 1 new logs [22-07-2022 00:59:01]5516: WAF :: fetched 3 new logs [22-07-2022 01:00:02]8699: WAF :: fetched 2 new logs [22-07-2022 01:07:02]2574: WAF :: fetched 1 new logs [22-07-2022 01:10:01]12882: WAF :: fetched 1 new logs [22-07-2022 01:12:01]19722: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658463121 [22-07-2022 01:12:01]19722: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 01:12:03]19722: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 01:12:04]19722: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-0112/20220722-011201-YtojkQPAUlmo7CrSAAFt6wAAAAs [22-07-2022 01:12:04]19722: WAF :: No suitable log file found. Using SQLite.. [22-07-2022 01:12:04]19722: WAF :: fetched 15 new logs [22-07-2022 01:28:01]12152: WAF :: fetched 1 new logs [22-07-2022 01:37:01]12088: WAF :: fetched 1 new logs [22-07-2022 01:41:01]25785: Checking for user cron vulnerabilities [22-07-2022 01:44:01]3512: Checking ditributed CMS bruteforce attacks [22-07-2022 01:45:01]: Checking for definition updates [22-07-2022 01:50:01]23905: WAF :: fetched 1 new logs [22-07-2022 01:58:01]18578: WAF :: fetched 3 new logs [22-07-2022 02:12:01]32648: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658466721 [22-07-2022 02:12:01]32648: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 02:12:03]32648: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 02:12:04]32648: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-0212/20220722-021201-YtoxoTWD3lOtvrKyyzy6nQAAAA4 [22-07-2022 02:12:04]32648: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-07-2022 02:12:04]32648: WAF :: fetched 1 new logs [22-07-2022 02:14:01]7507: WAF :: fetched 3 new logs [22-07-2022 02:41:02]825: Checking for user cron vulnerabilities [22-07-2022 02:44:01]10987: Checking ditributed CMS bruteforce attacks [22-07-2022 02:44:01]10987: WAF :: fetched 1 new logs [22-07-2022 02:53:02]9880: Updated license status via CDN [22-07-2022 02:56:01]20327: WAF :: fetched 1 new logs [22-07-2022 02:59:02]30578: WAF :: fetched 1 new logs [22-07-2022 03:00:02]1171: WAF :: fetched 1 new logs [22-07-2022 03:00:03]1171: Found and updated 32 CMS installations [22-07-2022 03:02:09]1171: Sending CMS version vulnerability report emails to cpanel users [22-07-2022 03:02:12]1171: Checking wordpress installations for suspicious directories [22-07-2022 03:04:32]12477: Sending CMS version vulnerability report emails to cpanel users [22-07-2022 03:04:35]12477: Checking wordpress installations for suspicious directories [22-07-2022 03:12:01]13200: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658470321 [22-07-2022 03:12:01]13200: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 03:12:03]13200: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 03:12:03]13200: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-0312/20220722-031201-Yto_sfvh0-lWNRWiaIeilgAAAAM [22-07-2022 03:12:03]13200: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-07-2022 03:12:04]13200: WAF :: fetched 1 new logs [22-07-2022 03:41:01]13877: Checking for user cron vulnerabilities [22-07-2022 03:44:01]23599: Checking ditributed CMS bruteforce attacks [22-07-2022 03:53:02]21254: WAF :: fetched 1 new logs [22-07-2022 04:12:02]19663: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658473922 [22-07-2022 04:12:02]19663: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 04:12:04]19663: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 04:12:04]19663: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-0412/20220722-041202-YtpNwtidw2RzSGXlp71UGAAAAAk [22-07-2022 04:12:04]19663: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-07-2022 04:12:04]19663: WAF :: fetched 1 new logs [22-07-2022 04:13:01]22787: WAF :: fetched 1 new logs [22-07-2022 04:41:01]19526: Checking for user cron vulnerabilities [22-07-2022 04:44:01]29378: Checking ditributed CMS bruteforce attacks [22-07-2022 04:46:02]3658: WAF :: fetched 1 new logs [22-07-2022 05:01:41]21351: Starting daily scan on files updated in last 24 hrs [22-07-2022 05:12:02]25784: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658477522 [22-07-2022 05:12:02]25784: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 05:12:04]25784: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 05:12:04]25784: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-0512/20220722-051202-Ytpb0v5xQ-D4lWzw68FevwAAAAg [22-07-2022 05:12:04]25784: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-07-2022 05:12:04]25784: WAF :: fetched 1 new logs [22-07-2022 05:13:01]28955: WAF :: fetched 1 new logs [22-07-2022 05:41:02]25850: Checking for user cron vulnerabilities [22-07-2022 05:44:01]3481: Checking ditributed CMS bruteforce attacks [22-07-2022 05:50:02]23813: WAF :: fetched 1 new logs [22-07-2022 06:12:02]478: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658481122 [22-07-2022 06:12:02]478: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 06:12:04]478: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 06:12:04]478: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-0612/20220722-061202-Ytpp4m16ZLepgFAr3ZVsugAAAAI [22-07-2022 06:12:04]478: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-07-2022 06:12:05]478: WAF :: fetched 1 new logs [22-07-2022 06:13:02]3977: WAF :: fetched 1 new logs [22-07-2022 06:20:02]27618: WAF :: fetched 1 new logs [22-07-2022 06:41:01]1109: Checking for user cron vulnerabilities [22-07-2022 06:42:02]4493: WAF :: fetched 1 new logs [22-07-2022 06:44:01]11176: Checking ditributed CMS bruteforce attacks [22-07-2022 06:49:01]27123: WAF :: fetched 1 new logs [22-07-2022 06:51:01]1814: WAF :: fetched 2 new logs [22-07-2022 06:52:02]5199: WAF :: fetched 2 new logs [22-07-2022 06:53:01]8425: WAF :: fetched 6 new logs [22-07-2022 06:54:02]11811: WAF :: fetched 4 new logs [22-07-2022 06:55:01]14930: WAF :: fetched 4 new logs [22-07-2022 06:56:02]18420: WAF :: fetched 1 new logs [22-07-2022 06:57:01]21528: WAF :: fetched 2 new logs [22-07-2022 06:58:02]24918: WAF :: fetched 1 new logs [22-07-2022 06:59:01]28221: WAF :: fetched 3 new logs [22-07-2022 07:00:02]31099: WAF :: fetched 1 new logs [22-07-2022 07:02:01]6682: WAF :: fetched 1 new logs [22-07-2022 07:03:02]10070: WAF :: fetched 3 new logs [22-07-2022 07:04:01]13230: WAF :: fetched 2 new logs [22-07-2022 07:05:02]16486: WAF :: fetched 3 new logs [22-07-2022 07:06:01]19774: WAF :: fetched 2 new logs [22-07-2022 07:07:02]23028: WAF :: fetched 1 new logs [22-07-2022 07:08:01]26346: WAF :: fetched 2 new logs [22-07-2022 07:12:01]7879: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658484721 [22-07-2022 07:12:01]7879: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 07:12:03]7879: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 07:12:03]7879: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-0712/20220722-071201-Ytp38VVKMXcAyR-yOvAKPAAAAAA [22-07-2022 07:12:03]7879: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-07-2022 07:12:04]7879: WAF :: fetched 1 new logs [22-07-2022 07:13:01]11144: WAF :: fetched 1 new logs [22-07-2022 07:41:01]7615: Checking for user cron vulnerabilities [22-07-2022 07:44:02]18034: Checking ditributed CMS bruteforce attacks [22-07-2022 07:45:01]: Checking for definition updates [22-07-2022 07:59:01]2580: WAF :: fetched 1 new logs [22-07-2022 08:02:02]13079: WAF :: fetched 1 new logs [22-07-2022 08:05:02]22850: WAF :: fetched 1 new logs [22-07-2022 08:12:01]13720: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658488321 [22-07-2022 08:12:01]13720: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 08:12:03]13720: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 08:12:04]13720: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-0812/20220722-081201-YtqGAQUCKil2PQz-8o0TZwAAAA4 [22-07-2022 08:12:04]13720: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-07-2022 08:12:04]13720: WAF :: fetched 2 new logs [22-07-2022 08:14:02]20807: WAF :: fetched 1 new logs [22-07-2022 08:15:02]24089: WAF :: fetched 2 new logs [22-07-2022 08:22:02]14932: WAF :: fetched 1 new logs [22-07-2022 08:24:02]22111: WAF :: fetched 2 new logs [22-07-2022 08:25:02]25417: WAF :: fetched 4 new logs [22-07-2022 08:27:01]31909: WAF :: fetched 2 new logs [22-07-2022 08:28:01]2994: WAF :: fetched 3 new logs [22-07-2022 08:29:02]6258: WAF :: fetched 1 new logs [22-07-2022 08:30:02]9504: WAF :: fetched 1 new logs [22-07-2022 08:31:02]12879: WAF :: fetched 1 new logs [22-07-2022 08:35:02]26495: WAF :: fetched 1 new logs [22-07-2022 08:40:01]10750: WAF :: fetched 1 new logs [22-07-2022 08:41:02]14097: Checking for user cron vulnerabilities [22-07-2022 08:42:01]17358: WAF :: fetched 1 new logs [22-07-2022 08:43:01]20789: httpd.conf changed. Refreshing watchlist. [22-07-2022 08:43:02]20787: WAF :: fetched 1 new logs [22-07-2022 08:44:01]24848: Checking ditributed CMS bruteforce attacks [22-07-2022 08:44:01]24860: httpd.conf changed. Refreshing watchlist. [22-07-2022 08:45:02]28809: WAF :: fetched 2 new logs [22-07-2022 08:55:01]4961: WAF :: fetched 1 new logs [22-07-2022 08:59:02]21182: WAF :: fetched 2 new logs [22-07-2022 09:00:01]24992: WAF :: fetched 2 new logs [22-07-2022 09:01:02]29468: WAF :: fetched 1 new logs [22-07-2022 09:08:01]25904: WAF :: fetched 1 new logs [22-07-2022 09:12:01]10013: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658491921 [22-07-2022 09:12:01]10013: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 09:12:03]10013: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 09:12:04]10013: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-0912/20220722-091201-YtqUEYZzK912f3rQZPKTvwAAAAI [22-07-2022 09:12:04]10013: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-07-2022 09:12:04]10013: WAF :: fetched 1 new logs [22-07-2022 09:13:02]14633: WAF :: fetched 2 new logs [22-07-2022 09:14:01]18813: WAF :: fetched 3 new logs [22-07-2022 09:15:02]22928: httpd.conf changed. Refreshing watchlist. [22-07-2022 09:16:01]27005: httpd.conf changed. Refreshing watchlist. [22-07-2022 09:16:01]27011: WAF :: fetched 2 new logs [22-07-2022 09:17:02]31071: WAF :: fetched 3 new logs [22-07-2022 09:19:02]7251: WAF :: fetched 1 new logs [22-07-2022 09:21:01]15809: httpd.conf changed. Refreshing watchlist. [22-07-2022 09:23:01]24064: WAF :: fetched 3 new logs [22-07-2022 09:24:02]28689: WAF :: fetched 1 new logs [22-07-2022 09:27:01]8782: WAF :: fetched 2 new logs [22-07-2022 09:28:02]13116: WAF :: fetched 1 new logs [22-07-2022 09:30:02]21198: WAF :: fetched 1 new logs [22-07-2022 09:31:01]25255: WAF :: fetched 1 new logs [22-07-2022 09:38:02]22101: WAF :: fetched 1 new logs [22-07-2022 09:39:02]26225: WAF :: fetched 1 new logs [22-07-2022 09:41:01]1995: Checking for user cron vulnerabilities [22-07-2022 09:44:02]14270: Checking ditributed CMS bruteforce attacks [22-07-2022 09:46:02]22297: WAF :: fetched 2 new logs [22-07-2022 09:50:02]6828: WAF :: fetched 1 new logs [22-07-2022 09:51:01]10873: WAF :: fetched 4 new logs [22-07-2022 09:56:02]31993: WAF :: fetched 1 new logs [22-07-2022 09:57:01]3675: WAF :: fetched 1 new logs [22-07-2022 09:58:02]7895: WAF :: fetched 3 new logs [22-07-2022 10:05:01]4955: WAF :: fetched 1 new logs [22-07-2022 10:07:01]13089: WAF :: fetched 1 new logs [22-07-2022 10:09:01]21422: WAF :: fetched 1 new logs [22-07-2022 10:10:02]25596: WAF :: fetched 4 new logs [22-07-2022 10:11:01]29759: WAF :: fetched 1 new logs [22-07-2022 10:12:02]1595: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658495522 [22-07-2022 10:12:02]1595: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 10:12:04]1595: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 10:12:04]1595: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-1012/20220722-101202-YtqiIqoytP_NCfGih-G21gAAAAo [22-07-2022 10:12:04]1595: WAF :: No suitable log file found. Using SQLite.. [22-07-2022 10:12:04]1595: WAF :: fetched 96 new logs [22-07-2022 10:13:01]5819: WAF :: fetched 1 new logs [22-07-2022 10:14:01]10665: WAF :: fetched 1 new logs [22-07-2022 10:16:01]18854: WAF :: fetched 2 new logs [22-07-2022 10:18:02]26812: WAF :: fetched 1 new logs [22-07-2022 10:21:01]7038: WAF :: fetched 3 new logs [22-07-2022 10:28:01]4067: WAF :: fetched 2 new logs [22-07-2022 10:30:01]12532: WAF :: fetched 1 new logs [22-07-2022 10:35:01]1283: WAF :: fetched 2 new logs [22-07-2022 10:36:02]5682: httpd.conf changed. Refreshing watchlist. [22-07-2022 10:41:01]27069: Checking for user cron vulnerabilities [22-07-2022 10:44:01]7235: Checking ditributed CMS bruteforce attacks [22-07-2022 10:51:01]4718: WAF :: fetched 2 new logs [22-07-2022 10:53:01]13031: WAF :: fetched 1 new logs [22-07-2022 11:06:02]3693: WAF :: fetched 1 new logs [22-07-2022 11:08:21]7970: Performed RBL check for 23.111.136.34. [22-07-2022 11:12:02]28270: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658499122 [22-07-2022 11:12:02]28270: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 11:12:04]28270: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 11:12:04]28270: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-1112/20220722-111202-YtqwMr75zfJuU-t525D7GAAAABA [22-07-2022 11:12:04]28270: WAF :: No suitable log file found. Using SQLite.. [22-07-2022 11:12:04]28270: WAF :: fetched 1 new logs [22-07-2022 11:20:01]29234: WAF :: fetched 1 new logs [22-07-2022 11:34:01]24743: WAF :: fetched 1 new logs [22-07-2022 11:41:01]21275: Checking for user cron vulnerabilities [22-07-2022 11:44:01]1210: Checking ditributed CMS bruteforce attacks [22-07-2022 11:51:02]30484: WAF :: fetched 2 new logs [22-07-2022 12:12:02]20893: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658502722 [22-07-2022 12:12:02]20893: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 12:12:04]20893: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 12:12:04]20893: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-1212/20220722-121202-Ytq-QmTUWkDxh0g2rHKjUgAAAA0 [22-07-2022 12:12:04]20893: WAF :: No suitable log file found. Using SQLite.. [22-07-2022 12:12:04]20893: WAF :: fetched 1 new logs [22-07-2022 12:20:01]21463: WAF :: fetched 4 new logs [22-07-2022 12:21:01]25547: WAF :: fetched 2 new logs [22-07-2022 12:28:01]21665: WAF :: fetched 2 new logs [22-07-2022 12:33:02]9418: WAF :: fetched 1 new logs [22-07-2022 12:37:01]25773: WAF :: fetched 1 new logs [22-07-2022 12:41:01]9558: Checking for user cron vulnerabilities [22-07-2022 12:44:01]21172: Checking ditributed CMS bruteforce attacks [22-07-2022 12:45:01]: Checking for software updates [22-07-2022 12:55:01]1026: WAF :: fetched 1 new logs [22-07-2022 12:56:02]5251: WAF :: fetched 1 new logs [22-07-2022 12:58:02]13991: WAF :: fetched 1 new logs [22-07-2022 13:00:02]21562: WAF :: fetched 1 new logs [22-07-2022 13:01:01]25988: WAF :: fetched 1 new logs [22-07-2022 13:09:01]26377: WAF :: fetched 1 new logs [22-07-2022 13:11:01]2146: WAF :: fetched 2 new logs [22-07-2022 13:12:01]6209: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658506321 [22-07-2022 13:12:01]6209: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 13:12:03]6209: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 13:12:03]6209: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-1312/20220722-131201-YtrMUTFLJOBncU_0zawSvgAAAA8 [22-07-2022 13:12:03]6209: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-07-2022 13:12:04]6209: WAF :: fetched 1 new logs [22-07-2022 13:16:01]22455: WAF :: fetched 2 new logs [22-07-2022 13:18:01]30821: WAF :: fetched 1 new logs [22-07-2022 13:19:02]2555: WAF :: fetched 1 new logs [22-07-2022 13:26:01]30815: WAF :: fetched 3 new logs [22-07-2022 13:27:02]3160: WAF :: fetched 2 new logs [22-07-2022 13:28:02]7125: WAF :: fetched 1 new logs [22-07-2022 13:36:02]7102: WAF :: fetched 1 new logs [22-07-2022 13:41:01]27283: Checking for user cron vulnerabilities [22-07-2022 13:44:02]6957: Checking ditributed CMS bruteforce attacks [22-07-2022 13:45:01]: Checking for definition updates [22-07-2022 13:45:02]10948: WAF :: fetched 1 new logs [22-07-2022 13:45:05]10951: Updated virus defnition : signatures.ndb [22-07-2022 13:45:07]10951: Updated virus defnition : malware.expert.ndb [22-07-2022 13:50:02]31280: WAF :: fetched 1 new logs [22-07-2022 13:53:02]11119: WAF :: fetched 1 new logs [22-07-2022 14:05:02]28501: WAF :: fetched 3 new logs [22-07-2022 14:12:01]24579: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658509921 [22-07-2022 14:12:01]24579: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 14:12:03]24579: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 14:12:04]24579: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-1412/20220722-141201-YtraYV_-T5eaQnXct4Q2PwAAAAQ [22-07-2022 14:12:04]24579: WAF :: No suitable log file found. Using SQLite.. [22-07-2022 14:12:04]24579: WAF :: fetched 15 new logs [22-07-2022 14:16:01]8731: WAF :: fetched 3 new logs [22-07-2022 14:17:02]12827: WAF :: fetched 1 new logs [22-07-2022 14:18:01]17091: WAF :: fetched 3 new logs [22-07-2022 14:19:01]21437: WAF :: fetched 1 new logs [22-07-2022 14:20:02]25324: WAF :: fetched 3 new logs [22-07-2022 14:21:01]29264: WAF :: fetched 1 new logs [22-07-2022 14:37:02]28252: WAF :: fetched 1 new logs [22-07-2022 14:41:02]12571: Checking for user cron vulnerabilities [22-07-2022 14:44:01]24348: Checking ditributed CMS bruteforce attacks [22-07-2022 14:44:01]24348: WAF :: fetched 1 new logs [22-07-2022 14:47:02]3926: WAF :: fetched 1 new logs [22-07-2022 14:53:02]28510: Updated license status via CDN [22-07-2022 15:01:02]29223: Reseting cPGuard inotify settings [22-07-2022 15:08:01]24600: WAF :: fetched 1 new logs [22-07-2022 15:09:02]29074: WAF :: fetched 5 new logs [22-07-2022 15:12:01]8859: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658513521 [22-07-2022 15:12:01]8859: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 15:12:03]8859: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 15:12:04]8859: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-1512/20220722-151201-YtrocUTeEvRMnsfB5gTdhQAAAAU [22-07-2022 15:12:04]8859: WAF :: No suitable log file found. Using SQLite.. [22-07-2022 15:12:04]8859: WAF :: fetched 1 new logs [22-07-2022 15:14:01]16997: WAF :: fetched 1 new logs [22-07-2022 15:26:01]840: WAF :: fetched 1 new logs [22-07-2022 15:41:01]28474: WAF :: fetched 1 new logs [22-07-2022 15:41:01]28474: Checking for user cron vulnerabilities [22-07-2022 15:44:01]7953: Checking ditributed CMS bruteforce attacks [22-07-2022 15:49:01]28193: WAF :: fetched 1 new logs [22-07-2022 15:58:02]31574: WAF :: fetched 2 new logs [22-07-2022 15:59:02]3633: WAF :: fetched 4 new logs [22-07-2022 16:02:01]16001: WAF :: fetched 7 new logs [22-07-2022 16:03:02]19912: WAF :: fetched 2 new logs [22-07-2022 16:05:01]27889: WAF :: fetched 1 new logs [22-07-2022 16:06:02]31955: WAF :: fetched 2 new logs [22-07-2022 16:08:02]7915: WAF :: fetched 1 new logs [22-07-2022 16:12:01]24389: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658517121 [22-07-2022 16:12:01]24389: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 16:12:03]24389: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 16:12:04]24389: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-1612/20220722-161201-Ytr2gWTrK7M1igKBvODAhAAAAAg [22-07-2022 16:12:04]24389: WAF :: No suitable log file found. Using SQLite.. [22-07-2022 16:12:04]24389: WAF :: fetched 1 new logs [22-07-2022 16:20:02]24453: WAF :: fetched 1 new logs [22-07-2022 16:22:02]32390: WAF :: fetched 1 new logs [22-07-2022 16:23:01]3943: WAF :: fetched 1 new logs [22-07-2022 16:26:02]15939: httpd.conf changed. Refreshing watchlist. [22-07-2022 16:27:01]19846: WAF :: fetched 1 new logs [22-07-2022 16:31:02]3797: WAF :: fetched 1 new logs [22-07-2022 16:39:01]2954: WAF :: fetched 1 new logs [22-07-2022 16:40:02]7613: WAF :: fetched 1 new logs [22-07-2022 16:41:01]11686: Checking for user cron vulnerabilities [22-07-2022 16:43:01]19714: httpd.conf changed. Refreshing watchlist. [22-07-2022 16:44:02]23829: Checking ditributed CMS bruteforce attacks [22-07-2022 16:44:02]23815: httpd.conf changed. Refreshing watchlist. [22-07-2022 16:48:01]8114: httpd.conf changed. Refreshing watchlist. [22-07-2022 16:49:01]12115: WAF :: fetched 2 new logs [22-07-2022 16:55:01]4244: WAF :: fetched 1 new logs [22-07-2022 17:02:01]335: WAF :: fetched 2 new logs [22-07-2022 17:03:02]4536: WAF :: fetched 1 new logs [22-07-2022 17:05:02]12615: WAF :: fetched 1 new logs [22-07-2022 17:10:01]32730: WAF :: fetched 1 new logs [22-07-2022 17:12:01]8460: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658520721 [22-07-2022 17:12:01]8460: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 17:12:03]8460: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 17:12:04]8460: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-1712/20220722-171201-YtsEkRu9qDbWP4-wPyQWKgAAAAY [22-07-2022 17:12:04]8460: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-07-2022 17:12:04]8460: WAF :: fetched 1 new logs [22-07-2022 17:13:02]12450: WAF :: fetched 4 new logs [22-07-2022 17:14:01]16341: WAF :: fetched 8 new logs [22-07-2022 17:23:02]20227: WAF :: fetched 1 new logs [22-07-2022 17:27:02]3538: WAF :: fetched 2 new logs [22-07-2022 17:28:01]7426: WAF :: fetched 1 new logs [22-07-2022 17:29:02]11315: WAF :: fetched 3 new logs [22-07-2022 17:30:01]15155: WAF :: fetched 3 new logs [22-07-2022 17:32:01]23177: WAF :: fetched 3 new logs [22-07-2022 17:34:01]30868: WAF :: fetched 3 new logs [22-07-2022 17:35:02]2505: WAF :: fetched 5 new logs [22-07-2022 17:36:01]6781: WAF :: fetched 4 new logs [22-07-2022 17:40:01]22223: WAF :: fetched 3 new logs [22-07-2022 17:41:02]26747: WAF :: fetched 3 new logs [22-07-2022 17:41:02]26747: Checking for user cron vulnerabilities [22-07-2022 17:42:01]30591: WAF :: fetched 3 new logs [22-07-2022 17:43:02]2149: WAF :: fetched 2 new logs [22-07-2022 17:44:01]6255: Checking ditributed CMS bruteforce attacks [22-07-2022 17:46:01]14246: WAF :: fetched 3 new logs [22-07-2022 17:49:01]25839: WAF :: fetched 1 new logs [22-07-2022 17:52:02]6022: WAF :: fetched 9 new logs [22-07-2022 17:53:01]9939: WAF :: fetched 1 new logs [22-07-2022 17:54:02]13854: WAF :: fetched 3 new logs [22-07-2022 17:55:01]17694: WAF :: fetched 3 new logs [22-07-2022 17:56:02]21760: WAF :: fetched 2 new logs [22-07-2022 17:57:01]25612: WAF :: fetched 6 new logs [22-07-2022 18:08:01]4511: WAF :: fetched 3 new logs [22-07-2022 18:12:02]20916: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658524322 [22-07-2022 18:12:02]20916: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 18:12:04]20916: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 18:12:04]20916: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-1812/20220722-181202-YtsSongmB2NOaXYFa3TeegAAAAo [22-07-2022 18:12:04]20916: WAF :: No suitable log file found. Using SQLite.. [22-07-2022 18:12:04]20916: WAF :: fetched 67 new logs [22-07-2022 18:39:01]30140: WAF :: fetched 2 new logs [22-07-2022 18:41:01]5867: Checking for user cron vulnerabilities [22-07-2022 18:44:01]18131: Checking ditributed CMS bruteforce attacks [22-07-2022 18:46:02]25936: WAF :: fetched 1 new logs [22-07-2022 18:47:01]29763: WAF :: fetched 1 new logs [22-07-2022 18:48:02]1223: WAF :: fetched 1 new logs [22-07-2022 18:59:01]12850: WAF :: fetched 2 new logs [22-07-2022 19:09:02]20934: WAF :: fetched 1 new logs [22-07-2022 19:12:01]840: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658527921 [22-07-2022 19:12:01]840: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 19:12:03]840: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 19:12:03]840: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-1912/20220722-191201-YtsgsZ-33KS1v48uRHd7ZgAAAAc [22-07-2022 19:12:03]840: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-07-2022 19:12:04]840: WAF :: fetched 1 new logs [22-07-2022 19:13:01]4891: WAF :: fetched 1 new logs [22-07-2022 19:15:02]12975: WAF :: fetched 3 new logs [22-07-2022 19:19:02]28512: WAF :: fetched 2 new logs [22-07-2022 19:20:01]32412: WAF :: fetched 3 new logs [22-07-2022 19:21:02]4066: WAF :: fetched 3 new logs [22-07-2022 19:22:01]8680: WAF :: fetched 1 new logs [22-07-2022 19:23:02]12705: WAF :: fetched 3 new logs [22-07-2022 19:24:02]16556: WAF :: fetched 2 new logs [22-07-2022 19:25:02]20453: WAF :: fetched 2 new logs [22-07-2022 19:27:02]28197: WAF :: fetched 2 new logs [22-07-2022 19:30:01]7733: WAF :: fetched 1 new logs [22-07-2022 19:31:02]11547: WAF :: fetched 1 new logs [22-07-2022 19:39:02]10740: WAF :: fetched 1 new logs [22-07-2022 19:41:02]18158: httpd.conf changed. Refreshing watchlist. [22-07-2022 19:41:02]18167: WAF :: fetched 1 new logs [22-07-2022 19:41:02]18167: Checking for user cron vulnerabilities [22-07-2022 19:42:01]22125: httpd.conf changed. Refreshing watchlist. [22-07-2022 19:43:02]26460: httpd.conf changed. Refreshing watchlist. [22-07-2022 19:43:02]26457: WAF :: fetched 2 new logs [22-07-2022 19:44:01]30194: Checking ditributed CMS bruteforce attacks [22-07-2022 19:45:01]: Checking for definition updates [22-07-2022 19:45:02]1846: httpd.conf changed. Refreshing watchlist. [22-07-2022 19:49:02]17585: httpd.conf changed. Refreshing watchlist. [22-07-2022 19:58:01]20722: WAF :: fetched 2 new logs [22-07-2022 20:03:02]8521: WAF :: fetched 1 new logs [22-07-2022 20:07:01]23751: WAF :: fetched 1 new logs [22-07-2022 20:08:02]27598: WAF :: fetched 2 new logs [22-07-2022 20:09:01]31556: WAF :: fetched 2 new logs [22-07-2022 20:11:01]7073: WAF :: fetched 3 new logs [22-07-2022 20:12:01]11003: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658531521 [22-07-2022 20:12:01]11003: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 20:12:03]11003: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 20:12:04]11003: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-2012/20220722-201201-YtsuwTVD7ZZaOHyEuRHRCQAAAAE [22-07-2022 20:12:04]11003: WAF :: No suitable log file found. Using SQLite.. [22-07-2022 20:12:04]11003: WAF :: fetched 31 new logs [22-07-2022 20:13:01]15327: WAF :: fetched 1 new logs [22-07-2022 20:14:01]19178: WAF :: fetched 2 new logs [22-07-2022 20:17:02]30797: WAF :: fetched 1 new logs [22-07-2022 20:26:01]1333: WAF :: fetched 1 new logs [22-07-2022 20:37:02]11842: WAF :: fetched 1 new logs [22-07-2022 20:41:02]27142: Checking for user cron vulnerabilities [22-07-2022 20:43:02]2546: WAF :: fetched 1 new logs [22-07-2022 20:44:01]6922: Checking ditributed CMS bruteforce attacks [22-07-2022 20:44:01]6922: WAF :: fetched 2 new logs [22-07-2022 20:53:01]9449: WAF :: fetched 1 new logs [22-07-2022 20:54:02]13837: WAF :: fetched 1 new logs [22-07-2022 20:55:01]17656: WAF :: fetched 2 new logs [22-07-2022 20:56:02]21504: WAF :: fetched 1 new logs [22-07-2022 20:59:01]598: WAF :: fetched 1 new logs [22-07-2022 21:08:01]4142: WAF :: fetched 1 new logs [22-07-2022 21:12:01]19811: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658535121 [22-07-2022 21:12:01]19811: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 21:12:03]19811: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 21:12:04]19811: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-2112/20220722-211201-Yts80Secck4TqzWkerM9bQAAAAI [22-07-2022 21:12:04]19811: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [22-07-2022 21:12:04]19811: WAF :: fetched 1 new logs [22-07-2022 21:27:02]14684: WAF :: fetched 1 new logs [22-07-2022 21:34:01]10187: WAF :: fetched 1 new logs [22-07-2022 21:41:02]5828: Checking for user cron vulnerabilities [22-07-2022 21:44:01]18325: Checking ditributed CMS bruteforce attacks [22-07-2022 21:45:02]22366: WAF :: fetched 1 new logs [22-07-2022 21:49:02]6273: httpd.conf changed. Refreshing watchlist. [22-07-2022 21:52:02]18463: WAF :: fetched 1 new logs [22-07-2022 21:54:02]26433: WAF :: fetched 1 new logs [22-07-2022 22:00:02]18348: WAF :: fetched 1 new logs [22-07-2022 22:07:11]15218: Performing Domain reputation checks [22-07-2022 22:11:02]31379: WAF :: fetched 1 new logs [22-07-2022 22:12:01]3053: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658538721 [22-07-2022 22:12:01]3053: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 22:12:03]3053: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 22:12:04]3053: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-2212/20220722-221201-YttK4enNahcejjXppOBt-AAAAAk [22-07-2022 22:12:04]3053: WAF :: No suitable log file found. Using SQLite.. [22-07-2022 22:12:04]3053: WAF :: fetched 9 new logs [22-07-2022 22:13:02]7340: WAF :: fetched 1 new logs [22-07-2022 22:14:01]11217: WAF :: fetched 3 new logs [22-07-2022 22:15:02]15954: WAF :: fetched 5 new logs [22-07-2022 22:16:01]19885: WAF :: fetched 1 new logs [22-07-2022 22:24:01]20030: WAF :: fetched 1 new logs [22-07-2022 22:28:01]4219: WAF :: fetched 1 new logs [22-07-2022 22:33:02]24270: WAF :: fetched 2 new logs [22-07-2022 22:41:02]24573: WAF :: fetched 1 new logs [22-07-2022 22:41:02]24573: Checking for user cron vulnerabilities [22-07-2022 22:44:01]4301: Checking ditributed CMS bruteforce attacks [22-07-2022 22:50:01]29114: WAF :: fetched 2 new logs [22-07-2022 22:51:02]659: WAF :: fetched 1 new logs [22-07-2022 22:52:01]4751: WAF :: fetched 3 new logs [22-07-2022 23:07:50]32312: Performed RBL check for 23.111.136.34. [22-07-2022 23:12:01]19472: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658542321 [22-07-2022 23:12:01]19472: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [22-07-2022 23:12:03]19472: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [22-07-2022 23:12:03]19472: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220722/20220722-2312/20220722-231201-YttY8YKttotLFBe6CfgDFwAAABQ [22-07-2022 23:12:03]19472: WAF :: No suitable log file found. Using SQLite.. [22-07-2022 23:12:04]19472: WAF :: fetched 1 new logs [22-07-2022 23:41:02]4417: Checking for user cron vulnerabilities [22-07-2022 23:43:02]12410: WAF :: fetched 1 new logs [22-07-2022 23:44:01]16298: Checking ditributed CMS bruteforce attacks [22-07-2022 23:55:02]27297: httpd.conf changed. Refreshing watchlist. [22-07-2022 23:57:02]3410: WAF :: fetched 1 new logs [22-07-2022 23:57:02]3405: httpd.conf changed. Refreshing watchlist. [22-07-2022 23:58:01]7440: WAF :: fetched 2 new logs [22-07-2022 23:59:02]11270: WAF :: fetched 1 new logs [23-07-2022 00:00:01]14810: WAF :: fetched 2 new logs [23-07-2022 00:01:02]19413: httpd.conf changed. Refreshing watchlist. [23-07-2022 00:01:05]19410: Sending daily report for July 23, 2022 [23-07-2022 00:02:01]23169: WAF :: fetched 1 new logs [23-07-2022 00:03:02]27140: WAF :: fetched 2 new logs [23-07-2022 00:05:01]2555: Deleted 0 entries older than 6 MONTH from scanner_logs [23-07-2022 00:05:01]2555: Deleted 0 files from Quarantine [23-07-2022 00:06:01]6576: WAF :: fetched 1 new logs [23-07-2022 00:12:02]30436: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658545922 [23-07-2022 00:12:02]30436: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 00:12:04]30436: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 00:12:04]30436: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-0012/20220723-001202-YttnAi_-l4f-i66wOgAWuwAAAAU [23-07-2022 00:12:04]30436: WAF :: No suitable log file found. Using SQLite.. [23-07-2022 00:17:01]18277: WAF :: fetched 1 new logs [23-07-2022 00:18:01]22231: WAF :: fetched 2 new logs [23-07-2022 00:41:02]15634: Checking for user cron vulnerabilities [23-07-2022 00:44:01]27218: Checking ditributed CMS bruteforce attacks [23-07-2022 00:45:01]: Checking for software updates [23-07-2022 00:45:01]31105: WAF :: fetched 1 new logs [23-07-2022 00:55:02]6448: httpd.conf changed. Refreshing watchlist. [23-07-2022 00:56:01]10409: httpd.conf changed. Refreshing watchlist. [23-07-2022 01:12:01]13262: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658549521 [23-07-2022 01:12:01]13262: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 01:12:03]13262: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 01:12:04]13262: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-0112/20220723-011201-Ytt1EeSWbbvP8vN57rWX_AAAABg [23-07-2022 01:12:04]13262: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [23-07-2022 01:12:04]13262: WAF :: fetched 1 new logs [23-07-2022 01:25:01]4004: WAF :: fetched 2 new logs [23-07-2022 01:32:02]998: WAF :: fetched 2 new logs [23-07-2022 01:41:01]6545: WAF :: fetched 1 new logs [23-07-2022 01:41:01]6545: Checking for user cron vulnerabilities [23-07-2022 01:44:01]18681: Checking ditributed CMS bruteforce attacks [23-07-2022 01:45:01]: Checking for definition updates [23-07-2022 02:02:02]27222: WAF :: fetched 2 new logs [23-07-2022 02:12:01]2744: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658553121 [23-07-2022 02:12:01]2744: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 02:12:03]2744: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 02:12:04]2744: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-0212/20220723-021201-YtuDIU8zongqAQ3Lpbo0rQAAAAs [23-07-2022 02:12:04]2744: WAF :: No suitable log file found. Using SQLite.. [23-07-2022 02:12:04]2744: WAF :: fetched 4 new logs [23-07-2022 02:41:01]24511: Checking for user cron vulnerabilities [23-07-2022 02:44:01]4202: Checking ditributed CMS bruteforce attacks [23-07-2022 02:53:02]9734: Updated license status via CDN [23-07-2022 03:00:01]5089: Found and updated 32 CMS installations [23-07-2022 03:01:01]9743: WAF :: fetched 2 new logs [23-07-2022 03:02:21]5089: Sending CMS version vulnerability report emails to cpanel users [23-07-2022 03:02:24]5089: Checking wordpress installations for suspicious directories [23-07-2022 03:04:28]18232: Sending CMS version vulnerability report emails to cpanel users [23-07-2022 03:04:32]18232: Checking wordpress installations for suspicious directories [23-07-2022 03:10:01]15474: WAF :: fetched 1 new logs [23-07-2022 03:12:01]23506: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658556721 [23-07-2022 03:12:01]23506: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 03:12:03]23506: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 03:12:03]23506: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-0312/20220723-031201-YtuRMSfKlbGSUMlTue5Y4QAAAAk [23-07-2022 03:12:03]23506: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [23-07-2022 03:12:04]23506: WAF :: fetched 1 new logs [23-07-2022 03:17:01]15377: WAF :: fetched 2 new logs [23-07-2022 03:28:02]27411: WAF :: fetched 1 new logs [23-07-2022 03:41:01]14796: Checking for user cron vulnerabilities [23-07-2022 03:44:01]26622: Checking ditributed CMS bruteforce attacks [23-07-2022 03:52:01]26348: WAF :: fetched 1 new logs [23-07-2022 03:53:02]30168: WAF :: fetched 1 new logs [23-07-2022 03:55:02]5876: WAF :: fetched 1 new logs [23-07-2022 04:07:02]21719: WAF :: fetched 1 new logs [23-07-2022 04:10:01]1802: WAF :: fetched 70 new logs [23-07-2022 04:11:02]5922: WAF :: fetched 46 new logs [23-07-2022 04:12:02]9838: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658560322 [23-07-2022 04:12:02]9838: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 04:12:04]9838: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 04:12:04]9838: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-0412/20220723-041202-YtufQiQGoi7Nb1DcUUjo6AAAAAs [23-07-2022 04:12:04]9838: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [23-07-2022 04:12:05]9838: WAF :: fetched 1 new logs [23-07-2022 04:13:02]13847: WAF :: fetched 1 new logs [23-07-2022 04:29:02]13049: WAF :: fetched 1 new logs [23-07-2022 04:41:02]29554: Checking for user cron vulnerabilities [23-07-2022 04:44:01]8725: Checking ditributed CMS bruteforce attacks [23-07-2022 04:47:02]20697: WAF :: fetched 2 new logs [23-07-2022 04:49:02]28466: WAF :: fetched 1 new logs [23-07-2022 05:01:42]12884: Starting daily scan on files updated in last 24 hrs [23-07-2022 05:03:02]20933: WAF :: fetched 1 new logs [23-07-2022 05:12:01]24822: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658563921 [23-07-2022 05:12:01]24822: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 05:12:03]24822: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 05:12:03]24822: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-0512/20220723-051201-YtutUX4ILPQYJTcLmstQcQAAAAU [23-07-2022 05:12:03]24822: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [23-07-2022 05:12:04]24822: WAF :: fetched 1 new logs [23-07-2022 05:26:01]16066: WAF :: fetched 1 new logs [23-07-2022 05:37:02]27693: WAF :: fetched 1 new logs [23-07-2022 05:41:01]10862: Checking for user cron vulnerabilities [23-07-2022 05:44:01]23097: Checking ditributed CMS bruteforce attacks [23-07-2022 05:52:02]22932: WAF :: fetched 1 new logs [23-07-2022 06:02:02]30454: WAF :: fetched 1 new logs [23-07-2022 06:07:01]17952: WAF :: fetched 2 new logs [23-07-2022 06:09:01]25759: WAF :: fetched 1 new logs [23-07-2022 06:12:01]6189: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658567521 [23-07-2022 06:12:01]6189: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 06:12:03]6189: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 06:12:04]6189: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-0612/20220723-061201-Ytu7YbjXVykQ4UpQmNxIBwAAAAw [23-07-2022 06:12:04]6189: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [23-07-2022 06:12:04]6189: WAF :: fetched 1 new logs [23-07-2022 06:13:01]9781: WAF :: fetched 2 new logs [23-07-2022 06:32:01]20506: WAF :: fetched 1 new logs [23-07-2022 06:33:02]24329: WAF :: fetched 1 new logs [23-07-2022 06:34:02]28266: WAF :: fetched 1 new logs [23-07-2022 06:35:02]32195: WAF :: fetched 4 new logs [23-07-2022 06:36:02]3964: WAF :: fetched 1 new logs [23-07-2022 06:37:01]7942: WAF :: fetched 1 new logs [23-07-2022 06:38:02]11938: WAF :: fetched 3 new logs [23-07-2022 06:39:01]15840: WAF :: fetched 2 new logs [23-07-2022 06:41:02]23198: WAF :: fetched 3 new logs [23-07-2022 06:41:02]23198: Checking for user cron vulnerabilities [23-07-2022 06:44:02]3114: Checking ditributed CMS bruteforce attacks [23-07-2022 06:48:01]19165: WAF :: fetched 1 new logs [23-07-2022 06:49:02]23061: WAF :: fetched 1 new logs [23-07-2022 06:50:01]27049: WAF :: fetched 2 new logs [23-07-2022 06:51:02]30968: WAF :: fetched 2 new logs [23-07-2022 06:55:02]15123: WAF :: fetched 2 new logs [23-07-2022 06:59:02]30749: WAF :: fetched 9 new logs [23-07-2022 07:01:02]6710: WAF :: fetched 9 new logs [23-07-2022 07:02:01]10623: WAF :: fetched 3 new logs [23-07-2022 07:03:01]15024: WAF :: fetched 2 new logs [23-07-2022 07:04:02]18913: WAF :: fetched 3 new logs [23-07-2022 07:05:01]22821: WAF :: fetched 1 new logs [23-07-2022 07:06:02]26753: WAF :: fetched 1 new logs [23-07-2022 07:07:01]30595: WAF :: fetched 2 new logs [23-07-2022 07:09:01]6196: WAF :: fetched 3 new logs [23-07-2022 07:12:02]18035: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658571122 [23-07-2022 07:12:02]18035: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 07:12:04]18035: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 07:12:04]18035: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-0712/20220723-071202-YtvJcsUIjD8fnjPL0TKNMQAAABQ [23-07-2022 07:12:04]18035: WAF :: No suitable log file found. Using SQLite.. [23-07-2022 07:12:05]18035: WAF :: fetched 155 new logs [23-07-2022 07:14:01]26414: WAF :: fetched 5 new logs [23-07-2022 07:15:01]30219: WAF :: fetched 3 new logs [23-07-2022 07:16:01]2078: WAF :: fetched 8 new logs [23-07-2022 07:18:01]10034: WAF :: fetched 5 new logs [23-07-2022 07:19:01]13889: WAF :: fetched 5 new logs [23-07-2022 07:20:02]17835: WAF :: fetched 5 new logs [23-07-2022 07:21:01]21783: WAF :: fetched 3 new logs [23-07-2022 07:22:02]25757: WAF :: fetched 13 new logs [23-07-2022 07:23:01]30097: WAF :: fetched 7 new logs [23-07-2022 07:24:02]1731: WAF :: fetched 3 new logs [23-07-2022 07:25:02]5765: WAF :: fetched 8 new logs [23-07-2022 07:26:01]9788: WAF :: fetched 6 new logs [23-07-2022 07:27:02]13663: WAF :: fetched 3 new logs [23-07-2022 07:28:01]17566: WAF :: fetched 4 new logs [23-07-2022 07:30:01]25282: WAF :: fetched 3 new logs [23-07-2022 07:31:01]29350: WAF :: fetched 3 new logs [23-07-2022 07:33:01]5350: WAF :: fetched 8 new logs [23-07-2022 07:34:02]9341: WAF :: fetched 5 new logs [23-07-2022 07:36:02]17244: WAF :: fetched 6 new logs [23-07-2022 07:37:01]20796: WAF :: fetched 3 new logs [23-07-2022 07:38:02]24551: WAF :: fetched 2 new logs [23-07-2022 07:39:01]28472: WAF :: fetched 7 new logs [23-07-2022 07:40:02]32353: WAF :: fetched 10 new logs [23-07-2022 07:41:01]4166: WAF :: fetched 7 new logs [23-07-2022 07:41:01]4166: Checking for user cron vulnerabilities [23-07-2022 07:42:01]8117: WAF :: fetched 11 new logs [23-07-2022 07:44:01]16405: Checking ditributed CMS bruteforce attacks [23-07-2022 07:44:01]16405: WAF :: fetched 2 new logs [23-07-2022 07:45:01]: Checking for definition updates [23-07-2022 07:47:01]28289: WAF :: fetched 5 new logs [23-07-2022 07:48:01]32262: WAF :: fetched 7 new logs [23-07-2022 07:49:01]3953: WAF :: fetched 6 new logs [23-07-2022 07:50:01]8120: WAF :: fetched 2 new logs [23-07-2022 07:51:01]12115: WAF :: fetched 1 new logs [23-07-2022 07:52:01]16148: WAF :: fetched 4 new logs [23-07-2022 07:54:01]24398: WAF :: fetched 7 new logs [23-07-2022 07:55:01]28209: WAF :: fetched 6 new logs [23-07-2022 07:56:01]32271: WAF :: fetched 1 new logs [23-07-2022 07:57:01]3876: WAF :: fetched 6 new logs [23-07-2022 07:58:01]7985: WAF :: fetched 4 new logs [23-07-2022 08:09:02]19920: WAF :: fetched 2 new logs [23-07-2022 08:12:01]31693: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658574721 [23-07-2022 08:12:01]31693: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 08:12:03]31693: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 08:12:04]31693: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-0812/20220723-081201-YtvXgYXZEmQ1FaSE44-0jgAAAAs [23-07-2022 08:12:04]31693: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [23-07-2022 08:12:04]31693: WAF :: fetched 1 new logs [23-07-2022 08:23:02]11543: WAF :: fetched 1 new logs [23-07-2022 08:26:01]23926: WAF :: fetched 1 new logs [23-07-2022 08:29:02]3382: WAF :: fetched 1 new logs [23-07-2022 08:30:01]7377: WAF :: fetched 1 new logs [23-07-2022 08:39:01]11318: httpd.conf changed. Refreshing watchlist. [23-07-2022 08:41:01]19229: Checking for user cron vulnerabilities [23-07-2022 08:43:01]27130: WAF :: fetched 1 new logs [23-07-2022 08:44:02]31625: Checking ditributed CMS bruteforce attacks [23-07-2022 08:45:02]3351: httpd.conf changed. Refreshing watchlist. [23-07-2022 08:55:02]11390: WAF :: fetched 1 new logs [23-07-2022 08:57:02]19290: WAF :: fetched 1 new logs [23-07-2022 08:58:02]23050: WAF :: fetched 3 new logs [23-07-2022 08:59:01]26989: WAF :: fetched 2 new logs [23-07-2022 09:04:02]14767: WAF :: fetched 1 new logs [23-07-2022 09:12:02]14540: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658578322 [23-07-2022 09:12:02]14540: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 09:12:04]14540: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 09:12:04]14540: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-0912/20220723-091202-Ytvlkm7OI5nSA6URLK10KgAAABc [23-07-2022 09:12:04]14540: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [23-07-2022 09:12:05]14540: WAF :: fetched 1 new logs [23-07-2022 09:13:01]18435: WAF :: fetched 1 new logs [23-07-2022 09:17:02]2672: WAF :: fetched 1 new logs [23-07-2022 09:29:02]18228: WAF :: fetched 1 new logs [23-07-2022 09:35:01]10517: WAF :: fetched 1 new logs [23-07-2022 09:36:02]14617: WAF :: fetched 1 new logs [23-07-2022 09:41:02]1873: Checking for user cron vulnerabilities [23-07-2022 09:44:01]13162: Checking ditributed CMS bruteforce attacks [23-07-2022 09:46:01]21897: WAF :: fetched 1 new logs [23-07-2022 09:49:02]1318: WAF :: fetched 1 new logs [23-07-2022 09:50:01]5380: WAF :: fetched 2 new logs [23-07-2022 10:01:02]17738: WAF :: fetched 1 new logs [23-07-2022 10:05:02]1652: WAF :: fetched 1 new logs [23-07-2022 10:12:02]29735: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658581922 [23-07-2022 10:12:02]29735: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 10:12:04]29735: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 10:12:04]29735: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-1012/20220723-101202-YtvzoqE22kzVM5PBXYJSLQAAAAQ [23-07-2022 10:12:04]29735: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [23-07-2022 10:12:05]29735: WAF :: fetched 1 new logs [23-07-2022 10:13:01]1246: WAF :: fetched 4 new logs [23-07-2022 10:15:02]9420: WAF :: fetched 1 new logs [23-07-2022 10:16:01]14132: WAF :: fetched 1 new logs [23-07-2022 10:23:02]9728: WAF :: fetched 1 new logs [23-07-2022 10:26:01]22115: WAF :: fetched 3 new logs [23-07-2022 10:27:02]26047: WAF :: fetched 2 new logs [23-07-2022 10:30:02]5556: WAF :: fetched 1 new logs [23-07-2022 10:41:02]17374: Checking for user cron vulnerabilities [23-07-2022 10:44:02]29328: Checking ditributed CMS bruteforce attacks [23-07-2022 10:45:02]890: WAF :: fetched 15 new logs [23-07-2022 10:46:02]5729: WAF :: fetched 78 new logs [23-07-2022 10:47:02]9867: WAF :: fetched 32 new logs [23-07-2022 10:48:01]13731: WAF :: fetched 57 new logs [23-07-2022 10:49:02]17704: WAF :: fetched 78 new logs [23-07-2022 10:50:02]21584: WAF :: fetched 63 new logs [23-07-2022 10:51:02]25555: WAF :: fetched 76 new logs [23-07-2022 10:52:02]29539: WAF :: fetched 76 new logs [23-07-2022 10:53:01]1108: WAF :: fetched 63 new logs [23-07-2022 10:54:02]5197: WAF :: fetched 47 new logs [23-07-2022 10:55:01]9273: WAF :: fetched 58 new logs [23-07-2022 10:56:02]13678: WAF :: fetched 43 new logs [23-07-2022 11:00:02]29096: WAF :: fetched 2 new logs [23-07-2022 11:03:01]9488: WAF :: fetched 5 new logs [23-07-2022 11:04:01]13486: WAF :: fetched 1 new logs [23-07-2022 11:05:02]17447: WAF :: fetched 1 new logs [23-07-2022 11:06:01]21824: WAF :: fetched 3 new logs [23-07-2022 11:08:20]26087: Performed RBL check for 23.111.136.34. [23-07-2022 11:12:01]13817: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658585521 [23-07-2022 11:12:01]13817: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 11:12:03]13817: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 11:12:04]13817: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-1112/20220723-111201-YtwBsZ0FFP7fVeBC4QY8LAAAAAM [23-07-2022 11:12:04]13817: WAF :: No suitable log file found. Using SQLite.. [23-07-2022 11:12:04]13817: WAF :: fetched 528 new logs [23-07-2022 11:14:01]21573: WAF :: fetched 2 new logs [23-07-2022 11:16:01]30025: WAF :: fetched 1 new logs [23-07-2022 11:17:02]1842: WAF :: fetched 1 new logs [23-07-2022 11:18:01]5869: WAF :: fetched 1 new logs [23-07-2022 11:19:01]10012: WAF :: fetched 1 new logs [23-07-2022 11:25:02]1912: WAF :: fetched 2 new logs [23-07-2022 11:41:02]2293: Checking for user cron vulnerabilities [23-07-2022 11:43:02]10010: WAF :: fetched 4 new logs [23-07-2022 11:44:01]13828: Checking ditributed CMS bruteforce attacks [23-07-2022 12:07:01]10839: WAF :: fetched 1 new logs [23-07-2022 12:08:01]14854: WAF :: fetched 1 new logs [23-07-2022 12:09:01]18736: WAF :: fetched 1 new logs [23-07-2022 12:12:02]30687: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658589122 [23-07-2022 12:12:02]30687: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 12:12:04]30687: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 12:12:04]30687: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-1212/20220723-121202-YtwPwqvTawqvRqUEQO6-qQAAAAw [23-07-2022 12:12:04]30687: WAF :: No suitable log file found. Using SQLite.. [23-07-2022 12:12:04]30687: WAF :: fetched 2 new logs [23-07-2022 12:16:01]14241: WAF :: fetched 1 new logs [23-07-2022 12:24:01]14390: WAF :: fetched 1 new logs [23-07-2022 12:32:01]14453: WAF :: fetched 1 new logs [23-07-2022 12:36:01]30317: WAF :: fetched 1 new logs [23-07-2022 12:41:01]18368: Checking for user cron vulnerabilities [23-07-2022 12:44:01]30240: Checking ditributed CMS bruteforce attacks [23-07-2022 12:45:02]: Checking for software updates [23-07-2022 12:47:02]9640: WAF :: fetched 1 new logs [23-07-2022 12:48:01]14106: WAF :: fetched 4 new logs [23-07-2022 12:53:02]1437: WAF :: fetched 1 new logs [23-07-2022 12:54:02]5533: WAF :: fetched 1 new logs [23-07-2022 13:04:01]13353: WAF :: fetched 1 new logs [23-07-2022 13:12:02]13097: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658592722 [23-07-2022 13:12:02]13097: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 13:12:04]13097: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 13:12:04]13097: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-1312/20220723-131202-Ytwd0nWROqJqWVW8S-epwQAAABc [23-07-2022 13:12:04]13097: WAF :: No suitable log file found. Using SQLite.. [23-07-2022 13:12:04]13097: WAF :: fetched 1 new logs [23-07-2022 13:13:01]17137: WAF :: fetched 1 new logs [23-07-2022 13:25:01]32670: WAF :: fetched 3 new logs [23-07-2022 13:26:02]4356: WAF :: fetched 3 new logs [23-07-2022 13:27:01]8336: WAF :: fetched 3 new logs [23-07-2022 13:30:02]20482: WAF :: fetched 1 new logs [23-07-2022 13:31:01]24279: WAF :: fetched 1 new logs [23-07-2022 13:32:02]28252: WAF :: fetched 1 new logs [23-07-2022 13:41:01]31926: WAF :: fetched 1 new logs [23-07-2022 13:41:01]31926: Checking for user cron vulnerabilities [23-07-2022 13:44:01]11769: Checking ditributed CMS bruteforce attacks [23-07-2022 13:44:01]11769: WAF :: fetched 1 new logs [23-07-2022 13:45:01]: Checking for definition updates [23-07-2022 13:55:01]24051: WAF :: fetched 1 new logs [23-07-2022 14:00:01]11979: WAF :: fetched 1 new logs [23-07-2022 14:01:02]16327: WAF :: fetched 1 new logs [23-07-2022 14:05:02]32035: WAF :: fetched 1 new logs [23-07-2022 14:06:01]3632: WAF :: fetched 3 new logs [23-07-2022 14:12:01]27598: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658596321 [23-07-2022 14:12:01]27598: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 14:12:03]27598: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 14:12:04]27598: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-1412/20220723-141201-Ytwr4UkOu65-NBYvbPMobwAAABk [23-07-2022 14:12:04]27598: WAF :: No suitable log file found. Using SQLite.. [23-07-2022 14:12:04]27598: WAF :: fetched 1 new logs [23-07-2022 14:14:01]3182: WAF :: fetched 3 new logs [23-07-2022 14:41:02]14553: Checking for user cron vulnerabilities [23-07-2022 14:42:01]18376: WAF :: fetched 1 new logs [23-07-2022 14:44:02]26350: Checking ditributed CMS bruteforce attacks [23-07-2022 14:48:02]9709: WAF :: fetched 1 new logs [23-07-2022 14:49:01]13714: WAF :: fetched 1 new logs [23-07-2022 14:53:02]29846: Updated license status via CDN [23-07-2022 14:59:02]21357: WAF :: fetched 1 new logs [23-07-2022 15:01:02]29686: Reseting cPGuard inotify settings [23-07-2022 15:10:01]1149: WAF :: fetched 2 new logs [23-07-2022 15:12:01]9145: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658599921 [23-07-2022 15:12:01]9145: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 15:12:03]9145: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 15:12:04]9145: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-1512/20220723-151201-Ytw58eQAP08hslemUCPesAAAACg [23-07-2022 15:12:04]9145: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [23-07-2022 15:12:04]9145: WAF :: fetched 1 new logs [23-07-2022 15:22:01]16575: WAF :: fetched 1 new logs [23-07-2022 15:27:02]4121: WAF :: fetched 32 new logs [23-07-2022 15:28:01]8126: WAF :: fetched 102 new logs [23-07-2022 15:29:02]12119: WAF :: fetched 101 new logs [23-07-2022 15:30:02]16513: WAF :: fetched 101 new logs [23-07-2022 15:31:02]20546: WAF :: fetched 101 new logs [23-07-2022 15:32:02]24454: WAF :: fetched 100 new logs [23-07-2022 15:33:02]28391: WAF :: fetched 100 new logs [23-07-2022 15:34:02]32376: WAF :: fetched 100 new logs [23-07-2022 15:35:02]4000: WAF :: fetched 102 new logs [23-07-2022 15:36:02]7983: WAF :: fetched 139 new logs [23-07-2022 15:37:01]11974: WAF :: fetched 3 new logs [23-07-2022 15:41:01]27900: WAF :: fetched 1 new logs [23-07-2022 15:41:01]27900: Checking for user cron vulnerabilities [23-07-2022 15:44:01]7522: Checking ditributed CMS bruteforce attacks [23-07-2022 15:44:02]7522: WAF :: fetched 1 new logs [23-07-2022 15:55:01]18710: WAF :: fetched 4 new logs [23-07-2022 15:56:01]22663: WAF :: fetched 3 new logs [23-07-2022 15:58:01]30329: WAF :: fetched 1 new logs [23-07-2022 16:03:02]18545: WAF :: fetched 49 new logs [23-07-2022 16:04:02]22632: WAF :: fetched 77 new logs [23-07-2022 16:05:02]26471: WAF :: fetched 76 new logs [23-07-2022 16:06:02]30312: WAF :: fetched 80 new logs [23-07-2022 16:07:01]1952: WAF :: fetched 77 new logs [23-07-2022 16:08:02]5869: WAF :: fetched 77 new logs [23-07-2022 16:09:01]9909: WAF :: fetched 33 new logs [23-07-2022 16:10:02]13872: WAF :: fetched 1 new logs [23-07-2022 16:12:01]22209: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658603521 [23-07-2022 16:12:01]22209: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 16:12:03]22209: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 16:12:04]22209: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-1612/20220723-161201-YtxIAVfYBBK6BorTOtb49AAAACE [23-07-2022 16:12:04]22209: WAF :: No suitable log file found. Using SQLite.. [23-07-2022 16:12:04]22209: WAF :: fetched 888 new logs [23-07-2022 16:22:01]30260: WAF :: fetched 2 new logs [23-07-2022 16:24:02]5966: WAF :: fetched 1 new logs [23-07-2022 16:29:01]25498: WAF :: fetched 2 new logs [23-07-2022 16:33:01]9205: WAF :: fetched 2 new logs [23-07-2022 16:41:01]8823: WAF :: fetched 18 new logs [23-07-2022 16:41:01]8823: Checking for user cron vulnerabilities [23-07-2022 16:42:01]12630: WAF :: fetched 73 new logs [23-07-2022 16:43:01]16432: WAF :: fetched 79 new logs [23-07-2022 16:44:01]20451: Checking ditributed CMS bruteforce attacks [23-07-2022 16:44:01]20451: WAF :: fetched 60 new logs [23-07-2022 16:48:02]3677: WAF :: fetched 67 new logs [23-07-2022 16:49:01]7734: WAF :: fetched 144 new logs [23-07-2022 17:08:02]17714: WAF :: fetched 2 new logs [23-07-2022 17:12:02]1431: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658607122 [23-07-2022 17:12:02]1431: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 17:12:04]1431: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 17:12:05]1431: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-1712/20220723-171202-YtxWEtap3d4RztBs2tA2wQAAAAA [23-07-2022 17:12:05]1431: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [23-07-2022 17:12:05]1431: WAF :: fetched 1 new logs [23-07-2022 17:13:01]5369: WAF :: fetched 1 new logs [23-07-2022 17:20:02]32735: WAF :: fetched 1 new logs [23-07-2022 17:24:02]16590: WAF :: fetched 2 new logs [23-07-2022 17:29:01]3516: WAF :: fetched 2 new logs [23-07-2022 17:30:02]7551: WAF :: fetched 1 new logs [23-07-2022 17:41:02]18544: Checking for user cron vulnerabilities [23-07-2022 17:44:01]30656: Checking ditributed CMS bruteforce attacks [23-07-2022 17:45:01]2104: WAF :: fetched 2 new logs [23-07-2022 17:50:01]21662: WAF :: fetched 1 new logs [23-07-2022 17:51:02]25582: WAF :: fetched 6 new logs [23-07-2022 17:52:01]29901: WAF :: fetched 1 new logs [23-07-2022 18:00:02]28062: WAF :: fetched 2 new logs [23-07-2022 18:02:02]4476: WAF :: fetched 2 new logs [23-07-2022 18:08:02]27900: WAF :: fetched 1 new logs [23-07-2022 18:12:02]11418: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658610722 [23-07-2022 18:12:02]11418: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 18:12:04]11418: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 18:12:04]11418: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-1812/20220723-181202-YtxkInEEb6hOnP-AsqLbuwAAAAI [23-07-2022 18:12:04]11418: WAF :: No suitable log file found. Using SQLite.. [23-07-2022 18:12:04]11418: WAF :: fetched 18 new logs [23-07-2022 18:15:01]23622: WAF :: fetched 1 new logs [23-07-2022 18:20:01]11102: WAF :: fetched 3 new logs [23-07-2022 18:32:01]25793: WAF :: fetched 2 new logs [23-07-2022 18:40:01]24938: WAF :: fetched 2 new logs [23-07-2022 18:41:01]28742: WAF :: fetched 2 new logs [23-07-2022 18:41:01]28742: Checking for user cron vulnerabilities [23-07-2022 18:43:01]4555: WAF :: fetched 1 new logs [23-07-2022 18:44:01]8556: Checking ditributed CMS bruteforce attacks [23-07-2022 18:44:01]8556: WAF :: fetched 1 new logs [23-07-2022 19:08:01]5481: WAF :: fetched 1 new logs [23-07-2022 19:09:02]9607: WAF :: fetched 2 new logs [23-07-2022 19:11:02]17337: WAF :: fetched 1 new logs [23-07-2022 19:12:01]21153: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658614321 [23-07-2022 19:12:01]21153: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 19:12:03]21153: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 19:12:04]21153: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-1912/20220723-191201-YtxyMcGMduEHh3ASmLxiWAAAAAM [23-07-2022 19:12:04]21153: WAF :: No suitable log file found. Using SQLite.. [23-07-2022 19:12:04]21153: WAF :: fetched 1 new logs [23-07-2022 19:30:01]27277: WAF :: fetched 1 new logs [23-07-2022 19:39:01]30212: WAF :: fetched 1 new logs [23-07-2022 19:41:01]5817: Checking for user cron vulnerabilities [23-07-2022 19:44:01]17911: Checking ditributed CMS bruteforce attacks [23-07-2022 19:45:01]: Checking for definition updates [23-07-2022 19:45:02]21954: Updated virus defnition : signatures.ndb [23-07-2022 19:55:02]28927: WAF :: fetched 2 new logs [23-07-2022 19:56:01]32728: WAF :: fetched 8 new logs [23-07-2022 19:57:02]4345: WAF :: fetched 3 new logs [23-07-2022 19:58:01]8361: WAF :: fetched 6 new logs [23-07-2022 19:59:02]12203: WAF :: fetched 5 new logs [23-07-2022 20:00:01]15828: WAF :: fetched 9 new logs [23-07-2022 20:01:01]20183: WAF :: fetched 3 new logs [23-07-2022 20:02:02]23758: WAF :: fetched 1 new logs [23-07-2022 20:04:02]31937: WAF :: fetched 1 new logs [23-07-2022 20:12:02]31050: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658617922 [23-07-2022 20:12:02]31050: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 20:12:04]31050: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 20:12:04]31050: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-2012/20220723-201202-YtyAQmHbI1TqYitTp2BdIAAAAAE [23-07-2022 20:12:04]31050: WAF :: No suitable log file found. Using SQLite.. [23-07-2022 20:12:04]31050: WAF :: fetched 2 new logs [23-07-2022 20:13:01]2514: WAF :: fetched 1 new logs [23-07-2022 20:14:02]6941: WAF :: fetched 3 new logs [23-07-2022 20:15:01]10766: WAF :: fetched 3 new logs [23-07-2022 20:25:02]17708: WAF :: fetched 4 new logs [23-07-2022 20:26:01]21554: WAF :: fetched 2 new logs [23-07-2022 20:27:01]25364: WAF :: fetched 2 new logs [23-07-2022 20:29:02]612: WAF :: fetched 1 new logs [23-07-2022 20:30:01]4640: WAF :: fetched 2 new logs [23-07-2022 20:31:01]8638: WAF :: fetched 1 new logs [23-07-2022 20:32:02]12475: WAF :: fetched 4 new logs [23-07-2022 20:33:01]16363: WAF :: fetched 2 new logs [23-07-2022 20:34:02]20299: WAF :: fetched 3 new logs [23-07-2022 20:35:01]24652: WAF :: fetched 2 new logs [23-07-2022 20:36:02]28525: WAF :: fetched 1 new logs [23-07-2022 20:37:01]32341: WAF :: fetched 4 new logs [23-07-2022 20:39:02]7889: WAF :: fetched 2 new logs [23-07-2022 20:40:01]11795: WAF :: fetched 1 new logs [23-07-2022 20:41:01]15674: WAF :: fetched 2 new logs [23-07-2022 20:41:01]15674: Checking for user cron vulnerabilities [23-07-2022 20:42:02]19658: WAF :: fetched 1 new logs [23-07-2022 20:43:01]23393: WAF :: fetched 2 new logs [23-07-2022 20:44:01]27223: Checking ditributed CMS bruteforce attacks [23-07-2022 20:44:01]27223: WAF :: fetched 1 new logs [23-07-2022 20:45:02]31599: WAF :: fetched 2 new logs [23-07-2022 20:46:01]3231: WAF :: fetched 2 new logs [23-07-2022 20:48:01]10907: WAF :: fetched 1 new logs [23-07-2022 20:49:02]14744: WAF :: fetched 3 new logs [23-07-2022 20:50:01]18672: WAF :: fetched 1 new logs [23-07-2022 20:51:02]22572: WAF :: fetched 2 new logs [23-07-2022 20:52:01]26333: WAF :: fetched 2 new logs [23-07-2022 20:54:01]1634: WAF :: fetched 1 new logs [23-07-2022 20:55:01]6188: WAF :: fetched 1 new logs [23-07-2022 21:03:02]5305: WAF :: fetched 1 new logs [23-07-2022 21:05:02]13744: WAF :: fetched 1 new logs [23-07-2022 21:06:01]17484: WAF :: fetched 2 new logs [23-07-2022 21:08:01]25419: WAF :: fetched 1 new logs [23-07-2022 21:12:01]8422: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658621521 [23-07-2022 21:12:01]8422: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 21:12:03]8422: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 21:12:04]8422: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-2112/20220723-211201-YtyOUcV8qMyqCvz0c-b6MAAAAAY [23-07-2022 21:12:04]8422: WAF :: No suitable log file found. Using SQLite.. [23-07-2022 21:12:04]8422: WAF :: fetched 2 new logs [23-07-2022 21:14:01]16219: WAF :: fetched 1 new logs [23-07-2022 21:15:02]20594: WAF :: fetched 1 new logs [23-07-2022 21:16:01]24513: WAF :: fetched 3 new logs [23-07-2022 21:21:01]11638: WAF :: fetched 1 new logs [23-07-2022 21:24:01]23215: WAF :: fetched 1 new logs [23-07-2022 21:25:01]27580: WAF :: fetched 1 new logs [23-07-2022 21:28:01]7028: WAF :: fetched 1 new logs [23-07-2022 21:29:01]10820: WAF :: fetched 2 new logs [23-07-2022 21:30:02]14707: WAF :: fetched 1 new logs [23-07-2022 21:31:01]18707: WAF :: fetched 3 new logs [23-07-2022 21:33:01]26435: WAF :: fetched 1 new logs [23-07-2022 21:34:01]30360: WAF :: fetched 3 new logs [23-07-2022 21:36:01]6483: WAF :: fetched 11 new logs [23-07-2022 21:37:01]10327: WAF :: fetched 12 new logs [23-07-2022 21:38:02]14154: WAF :: fetched 8 new logs [23-07-2022 21:39:01]17971: WAF :: fetched 3 new logs [23-07-2022 21:40:02]21881: WAF :: fetched 4 new logs [23-07-2022 21:41:01]25829: WAF :: fetched 4 new logs [23-07-2022 21:41:01]25829: Checking for user cron vulnerabilities [23-07-2022 21:42:02]29601: WAF :: fetched 8 new logs [23-07-2022 21:44:02]5083: Checking ditributed CMS bruteforce attacks [23-07-2022 21:45:01]8987: WAF :: fetched 17 new logs [23-07-2022 21:46:02]13467: WAF :: fetched 20 new logs [23-07-2022 21:47:01]17237: WAF :: fetched 25 new logs [23-07-2022 21:48:02]21124: WAF :: fetched 28 new logs [23-07-2022 21:49:01]24933: WAF :: fetched 25 new logs [23-07-2022 21:50:01]28715: WAF :: fetched 24 new logs [23-07-2022 21:51:01]32640: WAF :: fetched 35 new logs [23-07-2022 21:52:01]4210: WAF :: fetched 29 new logs [23-07-2022 21:53:01]8157: WAF :: fetched 13 new logs [23-07-2022 22:01:02]7747: WAF :: fetched 1 new logs [23-07-2022 22:07:10]31324: Performing Domain reputation checks [23-07-2022 22:08:01]2820: WAF :: fetched 1 new logs [23-07-2022 22:12:01]18473: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658625121 [23-07-2022 22:12:01]18473: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 22:12:03]18473: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 22:12:04]18473: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-2212/20220723-221201-YtycYQfhV0VDo84kA93gtAAAABE [23-07-2022 22:12:04]18473: WAF :: No suitable log file found. Using SQLite.. [23-07-2022 22:12:04]18473: WAF :: fetched 1 new logs [23-07-2022 22:17:02]6210: WAF :: fetched 1 new logs [23-07-2022 22:41:02]3210: Checking for user cron vulnerabilities [23-07-2022 22:44:01]14850: Checking ditributed CMS bruteforce attacks [23-07-2022 22:50:02]6379: WAF :: fetched 1 new logs [23-07-2022 22:51:01]10298: WAF :: fetched 3 new logs [23-07-2022 22:52:02]14165: WAF :: fetched 2 new logs [23-07-2022 22:53:01]17963: WAF :: fetched 1 new logs [23-07-2022 22:55:01]25556: WAF :: fetched 1 new logs [23-07-2022 22:57:02]1469: WAF :: fetched 2 new logs [23-07-2022 23:07:50]8967: Performed RBL check for 23.111.136.34. [23-07-2022 23:12:01]28293: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658628721 [23-07-2022 23:12:01]28293: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [23-07-2022 23:12:03]28293: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [23-07-2022 23:12:04]28293: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220723/20220723-2312/20220723-231201-YtyqcRkbYpixLQU0nTvoJwAAAAA [23-07-2022 23:12:04]28293: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [23-07-2022 23:12:04]28293: WAF :: fetched 1 new logs [23-07-2022 23:13:02]31811: WAF :: fetched 3 new logs [23-07-2022 23:20:01]27167: WAF :: fetched 2 new logs [23-07-2022 23:21:02]31144: WAF :: fetched 4 new logs [23-07-2022 23:22:01]2649: WAF :: fetched 6 new logs [23-07-2022 23:23:02]6656: WAF :: fetched 2 new logs [23-07-2022 23:24:01]10469: WAF :: fetched 6 new logs [23-07-2022 23:25:02]14311: WAF :: fetched 3 new logs [23-07-2022 23:26:01]18162: WAF :: fetched 1 new logs [23-07-2022 23:27:02]22715: WAF :: fetched 2 new logs [23-07-2022 23:28:01]26550: WAF :: fetched 2 new logs [23-07-2022 23:31:02]6109: WAF :: fetched 2 new logs [23-07-2022 23:32:01]10112: WAF :: fetched 10 new logs [23-07-2022 23:33:02]13994: WAF :: fetched 2 new logs [23-07-2022 23:34:01]17848: WAF :: fetched 2 new logs [23-07-2022 23:35:02]21772: WAF :: fetched 2 new logs [23-07-2022 23:36:01]25622: WAF :: fetched 2 new logs [23-07-2022 23:37:02]30045: WAF :: fetched 1 new logs [23-07-2022 23:40:01]9435: WAF :: fetched 2 new logs [23-07-2022 23:41:02]13403: WAF :: fetched 2 new logs [23-07-2022 23:41:02]13403: Checking for user cron vulnerabilities [23-07-2022 23:43:02]21272: WAF :: fetched 1 new logs [23-07-2022 23:44:01]25158: Checking ditributed CMS bruteforce attacks [23-07-2022 23:44:01]25158: WAF :: fetched 1 new logs [23-07-2022 23:45:02]29030: WAF :: fetched 1 new logs [23-07-2022 23:46:01]580: WAF :: fetched 5 new logs [23-07-2022 23:48:01]9168: WAF :: fetched 2 new logs [23-07-2022 23:49:02]13054: WAF :: fetched 3 new logs [23-07-2022 23:50:01]16887: WAF :: fetched 1 new logs [23-07-2022 23:51:02]20835: WAF :: fetched 2 new logs [23-07-2022 23:52:01]24725: WAF :: fetched 3 new logs [23-07-2022 23:53:02]28619: WAF :: fetched 2 new logs [23-07-2022 23:55:02]4184: httpd.conf changed. Refreshing watchlist. [23-07-2022 23:55:02]4194: WAF :: fetched 3 new logs [23-07-2022 23:56:01]8179: WAF :: fetched 1 new logs [23-07-2022 23:57:02]12166: WAF :: fetched 4 new logs [23-07-2022 23:58:02]16460: WAF :: fetched 2 new logs [24-07-2022 00:01:01]28280: WAF :: fetched 2 new logs [24-07-2022 00:01:04]28280: Sending daily report for July 24, 2022 [24-07-2022 00:03:01]4413: WAF :: fetched 1 new logs [24-07-2022 00:04:02]8745: WAF :: fetched 4 new logs [24-07-2022 00:05:01]12595: Deleted 0 entries older than 6 MONTH from scanner_logs [24-07-2022 00:05:01]12595: Deleted 0 files from Quarantine [24-07-2022 00:06:01]16591: WAF :: fetched 3 new logs [24-07-2022 00:07:02]20521: WAF :: fetched 9 new logs [24-07-2022 00:09:02]28838: WAF :: fetched 2 new logs [24-07-2022 00:10:01]32685: WAF :: fetched 6 new logs [24-07-2022 00:11:02]4399: WAF :: fetched 6 new logs [24-07-2022 00:12:01]8565: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658632321 [24-07-2022 00:12:01]8565: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 00:12:03]8565: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 00:12:04]8565: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-0012/20220724-001201-Yty4gU8rKHH6NwTvR6qTIAAAAAM [24-07-2022 00:12:04]8565: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 00:12:04]8565: WAF :: fetched 108 new logs [24-07-2022 00:13:02]12416: WAF :: fetched 2 new logs [24-07-2022 00:23:01]19647: WAF :: fetched 2 new logs [24-07-2022 00:24:02]23595: WAF :: fetched 1 new logs [24-07-2022 00:29:01]11234: WAF :: fetched 1 new logs [24-07-2022 00:33:01]26929: WAF :: fetched 2 new logs [24-07-2022 00:34:01]30743: WAF :: fetched 1 new logs [24-07-2022 00:39:01]18498: WAF :: fetched 1 new logs [24-07-2022 00:41:01]26386: Checking for user cron vulnerabilities [24-07-2022 00:44:01]5906: Checking ditributed CMS bruteforce attacks [24-07-2022 00:45:01]: Checking for software updates [24-07-2022 00:45:02]9879: WAF :: fetched 1 new logs [24-07-2022 00:52:02]5669: WAF :: fetched 1 new logs [24-07-2022 00:53:01]9566: WAF :: fetched 1 new logs [24-07-2022 01:03:01]18234: WAF :: fetched 2 new logs [24-07-2022 01:08:02]6905: WAF :: fetched 2 new logs [24-07-2022 01:12:02]23790: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658635922 [24-07-2022 01:12:02]23790: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 01:12:04]23790: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 01:12:04]23790: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-0112/20220724-011202-YtzGkhZHvzpxbCywFzgdywAAABc [24-07-2022 01:12:04]23790: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 01:12:04]23790: WAF :: fetched 1 new logs [24-07-2022 01:19:02]19711: WAF :: fetched 1 new logs [24-07-2022 01:22:01]31815: WAF :: fetched 2 new logs [24-07-2022 01:24:01]7635: WAF :: fetched 1 new logs [24-07-2022 01:25:02]11534: WAF :: fetched 2 new logs [24-07-2022 01:26:01]15454: WAF :: fetched 1 new logs [24-07-2022 01:27:02]19744: WAF :: fetched 8 new logs [24-07-2022 01:35:01]20729: WAF :: fetched 1 new logs [24-07-2022 01:41:02]13541: Checking for user cron vulnerabilities [24-07-2022 01:44:01]26144: Checking ditributed CMS bruteforce attacks [24-07-2022 01:45:02]: Checking for definition updates [24-07-2022 02:05:01]16067: WAF :: fetched 1 new logs [24-07-2022 02:07:01]23966: WAF :: fetched 1 new logs [24-07-2022 02:09:01]32256: WAF :: fetched 1 new logs [24-07-2022 02:10:02]4705: WAF :: fetched 1 new logs [24-07-2022 02:12:02]12584: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658639522 [24-07-2022 02:12:02]12584: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 02:12:04]12584: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 02:12:04]12584: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-0212/20220724-021202-YtzUovrDKapHDyBTHtK-rAAAAAI [24-07-2022 02:12:04]12584: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 02:12:04]12584: WAF :: fetched 2 new logs [24-07-2022 02:18:01]4642: WAF :: fetched 1 new logs [24-07-2022 02:23:01]25484: WAF :: fetched 1 new logs [24-07-2022 02:35:02]9633: WAF :: fetched 1 new logs [24-07-2022 02:36:01]13564: WAF :: fetched 4 new logs [24-07-2022 02:38:01]21411: WAF :: fetched 1 new logs [24-07-2022 02:41:02]1370: Checking for user cron vulnerabilities [24-07-2022 02:44:02]13407: Checking ditributed CMS bruteforce attacks [24-07-2022 02:47:01]25100: WAF :: fetched 1 new logs [24-07-2022 02:48:01]28948: WAF :: fetched 1 new logs [24-07-2022 02:51:01]9075: WAF :: fetched 1 new logs [24-07-2022 02:53:02]16805: Updated license status via CDN [24-07-2022 02:59:01]8176: WAF :: fetched 1 new logs [24-07-2022 03:00:05]12361: Found and updated 32 CMS installations [24-07-2022 03:00:33]12361: Wordpress installation #2 clinicasantanadehomeopatia.com.br has errors [24-07-2022 03:01:02]12361: Wordpress installation #9 oabilheus.org.br has errors [24-07-2022 03:01:38]12361: Wordpress installation #15 contratopronto.net has errors [24-07-2022 03:02:47]12361: Wordpress installation #23 blueseasurf.com.br has errors [24-07-2022 03:03:15]12361: Wordpress installation #26 bibokinha.idcartao.com has errors [24-07-2022 03:03:36]12361: Wordpress installation #28 pricilamartins.com has errors [24-07-2022 03:03:53]12361: Wordpress installation #29 adsgestaomkt.com.br has errors [24-07-2022 03:04:24]12361: Wordpress installation #33 bibokinha.com.br has errors [24-07-2022 03:04:39]12361: Wordpress installation #34 fazendayrere.com.br has errors [24-07-2022 03:04:40]25068: Wordpress installation #34 fazendayrere.com.br has errors [24-07-2022 03:05:11]25068: Wordpress installation #42 suryart.com.br has errors [24-07-2022 03:05:12]12361: Wordpress installation #42 suryart.com.br has errors [24-07-2022 03:05:15]25068: Sending CMS version vulnerability report emails to cpanel users [24-07-2022 03:05:15]12361: Sending CMS version vulnerability report emails to cpanel users [24-07-2022 03:05:19]25068: Checking wordpress installations for suspicious directories [24-07-2022 03:05:19]12361: Checking wordpress installations for suspicious directories [24-07-2022 03:06:02]5593: WAF :: fetched 1 new logs [24-07-2022 03:07:01]9530: WAF :: fetched 1 new logs [24-07-2022 03:12:01]29845: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658643121 [24-07-2022 03:12:01]29845: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 03:12:03]29845: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 03:12:04]29845: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-0312/20220724-031201-YtzisRZHvzpxbCywFzgfwQAAABc [24-07-2022 03:12:04]29845: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [24-07-2022 03:12:04]29845: WAF :: fetched 1 new logs [24-07-2022 03:21:02]4371: WAF :: fetched 1 new logs [24-07-2022 03:24:02]15920: WAF :: fetched 1 new logs [24-07-2022 03:37:02]4861: WAF :: fetched 1 new logs [24-07-2022 03:38:01]9025: WAF :: fetched 1 new logs [24-07-2022 03:41:02]21603: Checking for user cron vulnerabilities [24-07-2022 03:42:01]25661: WAF :: fetched 1 new logs [24-07-2022 03:44:01]1205: Checking ditributed CMS bruteforce attacks [24-07-2022 03:53:01]6079: WAF :: fetched 1 new logs [24-07-2022 03:58:02]26160: WAF :: fetched 1 new logs [24-07-2022 04:05:02]22972: WAF :: fetched 1 new logs [24-07-2022 04:08:01]2662: WAF :: fetched 1 new logs [24-07-2022 04:12:01]19150: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658646721 [24-07-2022 04:12:01]19150: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 04:12:03]19150: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 04:12:04]19150: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-0412/20220724-041201-YtzwwQoozlryZAGZzSwPbQAAAAA [24-07-2022 04:12:04]19150: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 04:12:04]19150: WAF :: fetched 10 new logs [24-07-2022 04:18:01]12154: WAF :: fetched 1 new logs [24-07-2022 04:21:01]24498: WAF :: fetched 1 new logs [24-07-2022 04:35:02]16680: WAF :: fetched 1 new logs [24-07-2022 04:39:01]32681: WAF :: fetched 1 new logs [24-07-2022 04:41:01]8518: Checking for user cron vulnerabilities [24-07-2022 04:43:01]17029: WAF :: fetched 1 new logs [24-07-2022 04:44:01]21071: Checking ditributed CMS bruteforce attacks [24-07-2022 04:51:01]16610: WAF :: fetched 1 new logs [24-07-2022 05:01:41]23985: Starting weekly scan on files updated within a week [24-07-2022 05:10:01]27645: WAF :: fetched 1 new logs [24-07-2022 05:12:01]3602: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658650321 [24-07-2022 05:12:01]3602: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 05:12:03]3602: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 05:12:04]3602: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-0512/20220724-051201-Ytz-0UtVi32dLwEATlhbwwAAAAo [24-07-2022 05:12:04]3602: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [24-07-2022 05:12:04]3602: WAF :: fetched 1 new logs [24-07-2022 05:41:01]21429: Checking for user cron vulnerabilities [24-07-2022 05:42:02]25325: WAF :: fetched 1 new logs [24-07-2022 05:44:01]1101: Checking ditributed CMS bruteforce attacks [24-07-2022 06:04:02]16130: WAF :: fetched 1 new logs [24-07-2022 06:12:02]15218: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658653922 [24-07-2022 06:12:02]15218: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 06:12:04]15218: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 06:12:04]15218: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-0612/20220724-061202-Yt0M4sjAT7n0QBbvtL8dsAAAAAI [24-07-2022 06:12:04]15218: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [24-07-2022 06:12:04]15218: WAF :: fetched 1 new logs [24-07-2022 06:13:01]19721: WAF :: fetched 2 new logs [24-07-2022 06:22:01]22492: WAF :: fetched 1 new logs [24-07-2022 06:33:01]2073: WAF :: fetched 2 new logs [24-07-2022 06:35:01]10860: WAF :: fetched 2 new logs [24-07-2022 06:41:01]2046: Checking for user cron vulnerabilities [24-07-2022 06:44:01]14304: Checking ditributed CMS bruteforce attacks [24-07-2022 06:52:01]13293: WAF :: fetched 1 new logs [24-07-2022 07:12:01]28575: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658657521 [24-07-2022 07:12:01]28575: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 07:12:03]28575: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 07:12:04]28575: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-0712/20220724-071201-Yt0a8d3sm9ks23Jh0_rmnwAAAAQ [24-07-2022 07:12:04]28575: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 07:12:04]28575: WAF :: fetched 9 new logs [24-07-2022 07:36:01]28952: WAF :: fetched 2 new logs [24-07-2022 07:38:01]4838: WAF :: fetched 1 new logs [24-07-2022 07:39:02]8942: WAF :: fetched 1 new logs [24-07-2022 07:41:02]16832: Checking for user cron vulnerabilities [24-07-2022 07:44:01]28418: Checking ditributed CMS bruteforce attacks [24-07-2022 07:45:01]: Checking for definition updates [24-07-2022 07:45:04]492: Updated virus defnition : signatures.ndb [24-07-2022 07:54:02]3928: WAF :: fetched 1 new logs [24-07-2022 08:12:02]11622: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658661122 [24-07-2022 08:12:02]11622: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 08:12:04]11622: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 08:12:06]11622: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-0812/20220724-081202-Yt0pAqSN2CrGSmPq8yEPigAAABc [24-07-2022 08:12:06]11622: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 08:12:06]11622: WAF :: fetched 1 new logs [24-07-2022 08:14:02]19193: WAF :: fetched 4 new logs [24-07-2022 08:15:01]23112: WAF :: fetched 7 new logs [24-07-2022 08:26:01]3031: WAF :: fetched 1 new logs [24-07-2022 08:32:01]26915: WAF :: fetched 3 new logs [24-07-2022 08:41:02]31148: Checking for user cron vulnerabilities [24-07-2022 08:44:01]10637: Checking ditributed CMS bruteforce attacks [24-07-2022 08:52:01]10641: WAF :: fetched 1 new logs [24-07-2022 08:56:01]26879: WAF :: fetched 5 new logs [24-07-2022 09:12:02]26524: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658664722 [24-07-2022 09:12:02]26524: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 09:12:04]26524: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 09:12:05]26524: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-0912/20220724-091202-Yt03EpwtqhtWG8GDlgWYPgAAAAI [24-07-2022 09:12:05]26524: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 09:12:05]26524: WAF :: fetched 2 new logs [24-07-2022 09:33:02]13008: WAF :: fetched 1 new logs [24-07-2022 09:41:01]12932: WAF :: fetched 2 new logs [24-07-2022 09:41:01]12932: Checking for user cron vulnerabilities [24-07-2022 09:44:02]24745: Checking ditributed CMS bruteforce attacks [24-07-2022 10:12:02]9066: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658668322 [24-07-2022 10:12:02]9066: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 10:12:04]9066: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 10:12:04]9066: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-1012/20220724-101202-Yt1FIsB4VZsuvil_W_C-8gAAAAk [24-07-2022 10:12:04]9066: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 10:21:02]12935: WAF :: fetched 1 new logs [24-07-2022 10:22:01]16794: WAF :: fetched 2 new logs [24-07-2022 10:32:01]24458: WAF :: fetched 1 new logs [24-07-2022 10:33:02]28445: WAF :: fetched 1 new logs [24-07-2022 10:34:01]32348: WAF :: fetched 3 new logs [24-07-2022 10:35:02]4113: WAF :: fetched 1 new logs [24-07-2022 10:36:01]8206: WAF :: fetched 2 new logs [24-07-2022 10:37:02]12326: WAF :: fetched 2 new logs [24-07-2022 10:38:01]16701: WAF :: fetched 5 new logs [24-07-2022 10:40:01]24583: WAF :: fetched 1 new logs [24-07-2022 10:41:02]28629: Checking for user cron vulnerabilities [24-07-2022 10:44:01]8406: Checking ditributed CMS bruteforce attacks [24-07-2022 10:44:01]8406: WAF :: fetched 2 new logs [24-07-2022 10:50:01]32726: WAF :: fetched 2 new logs [24-07-2022 10:51:01]4533: WAF :: fetched 2 new logs [24-07-2022 10:58:02]32626: WAF :: fetched 1 new logs [24-07-2022 11:07:01]3683: WAF :: fetched 1 new logs [24-07-2022 11:09:02]3852: Performed RBL check for 23.111.136.34. [24-07-2022 11:12:02]24108: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658671922 [24-07-2022 11:12:02]24108: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 11:12:04]24108: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 11:12:04]24108: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-1112/20220724-111202-Yt1TMimijogxLFRHz9WwnAAAAAA [24-07-2022 11:12:04]24108: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [24-07-2022 11:12:05]24108: WAF :: fetched 1 new logs [24-07-2022 11:13:01]27667: WAF :: fetched 1 new logs [24-07-2022 11:14:02]31602: WAF :: fetched 1 new logs [24-07-2022 11:15:01]3233: WAF :: fetched 2 new logs [24-07-2022 11:18:02]15211: WAF :: fetched 1 new logs [24-07-2022 11:22:02]31959: WAF :: fetched 2 new logs [24-07-2022 11:25:02]11657: WAF :: fetched 1 new logs [24-07-2022 11:26:02]15479: WAF :: fetched 3 new logs [24-07-2022 11:28:02]23302: WAF :: fetched 1 new logs [24-07-2022 11:31:02]3347: WAF :: fetched 4 new logs [24-07-2022 11:33:02]11414: WAF :: fetched 2 new logs [24-07-2022 11:34:02]15251: WAF :: fetched 6 new logs [24-07-2022 11:38:02]31211: WAF :: fetched 2 new logs [24-07-2022 11:41:01]11582: Checking for user cron vulnerabilities [24-07-2022 11:42:02]15539: WAF :: fetched 1 new logs [24-07-2022 11:44:01]23512: Checking ditributed CMS bruteforce attacks [24-07-2022 11:44:02]23512: WAF :: fetched 2 new logs [24-07-2022 11:48:02]7334: WAF :: fetched 1 new logs [24-07-2022 11:50:02]15601: WAF :: fetched 1 new logs [24-07-2022 11:58:01]14872: WAF :: fetched 2 new logs [24-07-2022 12:01:02]27321: WAF :: fetched 1 new logs [24-07-2022 12:03:02]3304: WAF :: fetched 4 new logs [24-07-2022 12:04:01]7553: WAF :: fetched 4 new logs [24-07-2022 12:05:02]11489: WAF :: fetched 1 new logs [24-07-2022 12:12:01]6855: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658675521 [24-07-2022 12:12:01]6855: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 12:12:03]6855: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 12:12:03]6855: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-1212/20220724-121201-Yt1hQRpIYyH5z0Rkiqd7OgAAAAE [24-07-2022 12:12:03]6855: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [24-07-2022 12:12:04]6855: WAF :: fetched 1 new logs [24-07-2022 12:17:02]26564: WAF :: fetched 2 new logs [24-07-2022 12:25:01]26505: WAF :: fetched 1 new logs [24-07-2022 12:33:01]26663: WAF :: fetched 2 new logs [24-07-2022 12:35:01]2331: WAF :: fetched 3 new logs [24-07-2022 12:36:02]6563: WAF :: fetched 1 new logs [24-07-2022 12:41:01]26867: Checking for user cron vulnerabilities [24-07-2022 12:43:01]2577: WAF :: fetched 3 new logs [24-07-2022 12:44:01]6697: Checking ditributed CMS bruteforce attacks [24-07-2022 12:44:01]6697: WAF :: fetched 3 new logs [24-07-2022 12:45:01]: Checking for software updates [24-07-2022 12:59:02]3056: WAF :: fetched 1 new logs [24-07-2022 13:02:01]15672: WAF :: fetched 3 new logs [24-07-2022 13:09:02]11309: WAF :: fetched 4 new logs [24-07-2022 13:10:01]15796: WAF :: fetched 5 new logs [24-07-2022 13:11:02]19701: WAF :: fetched 9 new logs [24-07-2022 13:12:01]23480: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658679121 [24-07-2022 13:12:01]23480: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 13:12:03]23480: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 13:12:04]23480: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-1312/20220724-131201-Yt1vUeXGRkKLqitlU6K5TQAAAAE [24-07-2022 13:12:04]23480: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 13:12:04]23480: WAF :: fetched 68 new logs [24-07-2022 13:14:01]31207: WAF :: fetched 1 new logs [24-07-2022 13:22:01]31371: WAF :: fetched 2 new logs [24-07-2022 13:24:01]7168: WAF :: fetched 1 new logs [24-07-2022 13:25:01]11117: WAF :: fetched 2 new logs [24-07-2022 13:26:01]15192: WAF :: fetched 1 new logs [24-07-2022 13:31:01]3461: WAF :: fetched 1 new logs [24-07-2022 13:38:02]31413: WAF :: fetched 2 new logs [24-07-2022 13:41:01]11514: WAF :: fetched 1 new logs [24-07-2022 13:41:01]11514: Checking for user cron vulnerabilities [24-07-2022 13:43:01]19415: WAF :: fetched 2 new logs [24-07-2022 13:44:01]23420: Checking ditributed CMS bruteforce attacks [24-07-2022 13:44:01]23420: WAF :: fetched 1 new logs [24-07-2022 13:45:01]: Checking for definition updates [24-07-2022 13:45:01]27251: WAF :: fetched 2 new logs [24-07-2022 13:47:01]2973: WAF :: fetched 2 new logs [24-07-2022 13:48:01]7102: WAF :: fetched 1 new logs [24-07-2022 13:49:01]11124: WAF :: fetched 2 new logs [24-07-2022 13:53:02]27452: WAF :: fetched 1 new logs [24-07-2022 13:55:02]3046: WAF :: fetched 3 new logs [24-07-2022 13:57:02]10926: WAF :: fetched 1 new logs [24-07-2022 14:00:01]22495: WAF :: fetched 1 new logs [24-07-2022 14:12:01]6642: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658682721 [24-07-2022 14:12:01]6642: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 14:12:03]6642: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 14:12:04]6642: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-1412/20220724-141201-Yt19YXpf8VSyApTlcReW1AAAABA [24-07-2022 14:12:04]6642: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [24-07-2022 14:12:04]6642: WAF :: fetched 1 new logs [24-07-2022 14:16:01]22411: WAF :: fetched 1 new logs [24-07-2022 14:17:02]26434: WAF :: fetched 1 new logs [24-07-2022 14:23:02]18665: WAF :: fetched 1 new logs [24-07-2022 14:41:01]25656: Checking for user cron vulnerabilities [24-07-2022 14:44:01]5961: Checking ditributed CMS bruteforce attacks [24-07-2022 14:53:02]9711: Updated license status via CDN [24-07-2022 14:54:01]13743: WAF :: fetched 1 new logs [24-07-2022 15:01:01]9162: Reseting cPGuard inotify settings [24-07-2022 15:05:01]25346: WAF :: fetched 2 new logs [24-07-2022 15:06:02]29385: WAF :: fetched 6 new logs [24-07-2022 15:10:02]12950: WAF :: fetched 1 new logs [24-07-2022 15:12:02]21216: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658686322 [24-07-2022 15:12:02]21216: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 15:12:04]21216: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 15:12:04]21216: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-1512/20220724-151202-Yt2LchXftSLF2fsBQXQqYAAAAAE [24-07-2022 15:12:04]21216: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 15:12:04]21216: WAF :: fetched 8 new logs [24-07-2022 15:16:02]4298: WAF :: fetched 1 new logs [24-07-2022 15:19:01]16257: WAF :: fetched 1 new logs [24-07-2022 15:20:02]20168: WAF :: fetched 2 new logs [24-07-2022 15:22:02]28303: WAF :: fetched 1 new logs [24-07-2022 15:35:01]15585: WAF :: fetched 1 new logs [24-07-2022 15:37:01]23299: WAF :: fetched 5 new logs [24-07-2022 15:38:02]27312: WAF :: fetched 3 new logs [24-07-2022 15:41:01]6951: WAF :: fetched 1 new logs [24-07-2022 15:41:01]6951: Checking for user cron vulnerabilities [24-07-2022 15:44:02]19180: Checking ditributed CMS bruteforce attacks [24-07-2022 15:44:02]19180: WAF :: fetched 2 new logs [24-07-2022 15:54:02]26674: WAF :: fetched 1 new logs [24-07-2022 16:02:01]26210: WAF :: fetched 2 new logs [24-07-2022 16:03:02]30572: WAF :: fetched 1 new logs [24-07-2022 16:07:01]14287: WAF :: fetched 1 new logs [24-07-2022 16:08:01]18083: WAF :: fetched 1 new logs [24-07-2022 16:12:02]1597: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658689922 [24-07-2022 16:12:02]1597: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 16:12:04]1597: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 16:12:04]1597: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-1612/20220724-161202-Yt2ZgpgkO7ODiAysTJTleQAAAAk [24-07-2022 16:12:04]1597: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 16:12:04]1597: WAF :: fetched 1 new logs [24-07-2022 16:13:02]6214: WAF :: fetched 3 new logs [24-07-2022 16:14:01]10093: WAF :: fetched 1 new logs [24-07-2022 16:15:02]14022: WAF :: fetched 1 new logs [24-07-2022 16:16:01]17666: WAF :: fetched 4 new logs [24-07-2022 16:24:01]17579: WAF :: fetched 1 new logs [24-07-2022 16:26:01]25363: WAF :: fetched 2 new logs [24-07-2022 16:29:02]4941: WAF :: fetched 1 new logs [24-07-2022 16:31:02]12911: WAF :: fetched 1 new logs [24-07-2022 16:32:01]16818: WAF :: fetched 3 new logs [24-07-2022 16:33:02]20643: WAF :: fetched 1 new logs [24-07-2022 16:41:02]20315: Checking for user cron vulnerabilities [24-07-2022 16:44:01]32663: Checking ditributed CMS bruteforce attacks [24-07-2022 16:45:02]4299: WAF :: fetched 6 new logs [24-07-2022 16:51:01]27992: WAF :: fetched 1 new logs [24-07-2022 16:52:01]31619: WAF :: fetched 1 new logs [24-07-2022 16:54:01]8114: WAF :: fetched 1 new logs [24-07-2022 16:56:01]15879: WAF :: fetched 1 new logs [24-07-2022 17:00:01]31237: WAF :: fetched 1 new logs [24-07-2022 17:03:02]11075: WAF :: fetched 8 new logs [24-07-2022 17:04:01]15516: WAF :: fetched 62 new logs [24-07-2022 17:05:02]19383: WAF :: fetched 61 new logs [24-07-2022 17:06:01]23284: WAF :: fetched 53 new logs [24-07-2022 17:12:02]14491: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658693522 [24-07-2022 17:12:02]14491: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 17:12:04]14491: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 17:12:04]14491: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-1712/20220724-171202-Yt2nkjqHK6TsoSfXCNCWJwAAAAA [24-07-2022 17:12:04]14491: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [24-07-2022 17:12:05]14491: WAF :: fetched 1 new logs [24-07-2022 17:13:01]18919: WAF :: fetched 1 new logs [24-07-2022 17:14:02]23556: WAF :: fetched 1 new logs [24-07-2022 17:16:02]30964: WAF :: fetched 3 new logs [24-07-2022 17:17:01]2497: WAF :: fetched 1 new logs [24-07-2022 17:22:02]22335: WAF :: fetched 8 new logs [24-07-2022 17:23:02]26216: WAF :: fetched 1 new logs [24-07-2022 17:24:02]30229: WAF :: fetched 1 new logs [24-07-2022 17:25:02]2361: WAF :: fetched 2 new logs [24-07-2022 17:26:02]6436: WAF :: fetched 4 new logs [24-07-2022 17:27:01]10312: WAF :: fetched 4 new logs [24-07-2022 17:32:02]29902: WAF :: fetched 2 new logs [24-07-2022 17:41:01]611: Checking for user cron vulnerabilities [24-07-2022 17:44:01]12654: Checking ditributed CMS bruteforce attacks [24-07-2022 17:48:02]28702: WAF :: fetched 67 new logs [24-07-2022 17:49:01]32681: WAF :: fetched 109 new logs [24-07-2022 17:50:02]4291: WAF :: fetched 118 new logs [24-07-2022 17:51:01]8403: WAF :: fetched 114 new logs [24-07-2022 17:52:02]12267: WAF :: fetched 118 new logs [24-07-2022 17:53:01]16129: WAF :: fetched 115 new logs [24-07-2022 17:54:02]20121: WAF :: fetched 57 new logs [24-07-2022 17:55:02]23931: WAF :: fetched 1 new logs [24-07-2022 17:59:02]7853: WAF :: fetched 3 new logs [24-07-2022 18:02:01]19548: WAF :: fetched 1 new logs [24-07-2022 18:03:02]23467: WAF :: fetched 2 new logs [24-07-2022 18:12:02]26628: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658697122 [24-07-2022 18:12:02]26628: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 18:12:04]26628: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 18:12:04]26628: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-1812/20220724-181202-Yt21olcAhRPMvdX5U5mkJQAAAAY [24-07-2022 18:12:04]26628: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [24-07-2022 18:12:04]26628: WAF :: fetched 1 new logs [24-07-2022 18:13:01]30497: WAF :: fetched 1 new logs [24-07-2022 18:17:01]14176: WAF :: fetched 1 new logs [24-07-2022 18:19:01]21979: WAF :: fetched 3 new logs [24-07-2022 18:22:02]1352: WAF :: fetched 2 new logs [24-07-2022 18:23:02]5346: WAF :: fetched 1 new logs [24-07-2022 18:29:02]29202: WAF :: fetched 6 new logs [24-07-2022 18:30:01]695: WAF :: fetched 1 new logs [24-07-2022 18:31:02]4653: WAF :: fetched 2 new logs [24-07-2022 18:32:02]8599: WAF :: fetched 3 new logs [24-07-2022 18:33:02]12470: WAF :: fetched 1 new logs [24-07-2022 18:34:02]16216: WAF :: fetched 3 new logs [24-07-2022 18:35:02]20117: WAF :: fetched 5 new logs [24-07-2022 18:36:02]23938: WAF :: fetched 2 new logs [24-07-2022 18:37:01]27824: WAF :: fetched 4 new logs [24-07-2022 18:39:01]3744: WAF :: fetched 1 new logs [24-07-2022 18:41:01]11583: Checking for user cron vulnerabilities [24-07-2022 18:44:01]22999: Checking ditributed CMS bruteforce attacks [24-07-2022 18:44:02]22999: WAF :: fetched 1 new logs [24-07-2022 19:01:01]25381: WAF :: fetched 2 new logs [24-07-2022 19:03:01]612: WAF :: fetched 1 new logs [24-07-2022 19:04:02]4677: WAF :: fetched 3 new logs [24-07-2022 19:05:01]8689: WAF :: fetched 3 new logs [24-07-2022 19:06:02]12492: WAF :: fetched 2 new logs [24-07-2022 19:12:01]3707: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658700721 [24-07-2022 19:12:01]3707: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 19:12:03]3707: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 19:12:04]3707: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-1912/20220724-191201-Yt3DsTBwFccjQbqYPgRsHgAAAAA [24-07-2022 19:12:04]3707: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [24-07-2022 19:12:04]3707: WAF :: fetched 1 new logs [24-07-2022 19:33:01]21113: WAF :: fetched 1 new logs [24-07-2022 19:34:02]24952: WAF :: fetched 1 new logs [24-07-2022 19:41:02]20397: Checking for user cron vulnerabilities [24-07-2022 19:42:02]24146: WAF :: fetched 2 new logs [24-07-2022 19:43:02]28038: WAF :: fetched 1 new logs [24-07-2022 19:44:01]31860: Checking ditributed CMS bruteforce attacks [24-07-2022 19:45:01]: Checking for definition updates [24-07-2022 19:51:02]27777: httpd.conf changed. Refreshing watchlist. [24-07-2022 19:54:01]7386: WAF :: fetched 1 new logs [24-07-2022 19:56:01]15260: WAF :: fetched 3 new logs [24-07-2022 19:57:02]19166: WAF :: fetched 4 new logs [24-07-2022 19:58:01]22959: WAF :: fetched 2 new logs [24-07-2022 20:01:02]3180: WAF :: fetched 2 new logs [24-07-2022 20:02:01]7257: WAF :: fetched 2 new logs [24-07-2022 20:04:01]15247: WAF :: fetched 1 new logs [24-07-2022 20:12:01]14972: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658704321 [24-07-2022 20:12:01]14972: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 20:12:03]14972: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 20:12:04]14972: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-2012/20220724-201201-Yt3RwavUiuRsi25oDhsoxwAAAAE [24-07-2022 20:12:04]14972: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 20:12:05]14972: WAF :: fetched 652 new logs [24-07-2022 20:21:01]17766: WAF :: fetched 1 new logs [24-07-2022 20:24:01]29309: WAF :: fetched 2 new logs [24-07-2022 20:33:01]32150: WAF :: fetched 2 new logs [24-07-2022 20:36:01]11496: WAF :: fetched 1 new logs [24-07-2022 20:40:02]26877: WAF :: fetched 1 new logs [24-07-2022 20:41:01]30745: Checking for user cron vulnerabilities [24-07-2022 20:44:01]10739: Checking ditributed CMS bruteforce attacks [24-07-2022 20:45:01]14594: WAF :: fetched 1 new logs [24-07-2022 20:47:01]22618: WAF :: fetched 3 new logs [24-07-2022 21:01:01]13382: WAF :: fetched 2 new logs [24-07-2022 21:02:02]17758: WAF :: fetched 5 new logs [24-07-2022 21:03:01]21545: WAF :: fetched 1 new logs [24-07-2022 21:09:01]12733: WAF :: fetched 2 new logs [24-07-2022 21:11:01]20528: WAF :: fetched 1 new logs [24-07-2022 21:12:02]24322: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658707922 [24-07-2022 21:12:02]24322: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 21:12:04]24322: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 21:12:06]24322: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-2112/20220724-211202-Yt3f0q5eisK6WCAPuNblnwAAAA0 [24-07-2022 21:12:06]24322: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 21:12:06]24322: WAF :: fetched 4 new logs [24-07-2022 21:14:02]32283: WAF :: fetched 2 new logs [24-07-2022 21:16:01]7844: WAF :: fetched 1 new logs [24-07-2022 21:17:01]11661: WAF :: fetched 2 new logs [24-07-2022 21:18:01]15486: WAF :: fetched 1 new logs [24-07-2022 21:19:01]19289: WAF :: fetched 1 new logs [24-07-2022 21:20:01]23129: WAF :: fetched 1 new logs [24-07-2022 21:21:01]27052: WAF :: fetched 3 new logs [24-07-2022 21:24:02]6971: WAF :: fetched 4 new logs [24-07-2022 21:25:01]10721: WAF :: fetched 113 new logs [24-07-2022 21:33:01]9866: WAF :: fetched 1 new logs [24-07-2022 21:38:02]29019: WAF :: fetched 1 new logs [24-07-2022 21:41:01]8442: Checking for user cron vulnerabilities [24-07-2022 21:44:01]20347: Checking ditributed CMS bruteforce attacks [24-07-2022 21:49:02]7607: WAF :: fetched 1 new logs [24-07-2022 21:51:02]15400: WAF :: fetched 1 new logs [24-07-2022 21:54:01]27355: WAF :: fetched 1 new logs [24-07-2022 22:05:01]6003: WAF :: fetched 1 new logs [24-07-2022 22:07:09]13868: Performing Domain reputation checks [24-07-2022 22:12:01]32618: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658711521 [24-07-2022 22:12:01]32618: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 22:12:03]32618: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 22:12:04]32618: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-2212/20220724-221201-Yt3t4WLqoMI6LRbeJ6NoRgAAAAU [24-07-2022 22:12:04]32618: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 22:12:04]32618: WAF :: fetched 5 new logs [24-07-2022 22:13:01]4301: WAF :: fetched 1 new logs [24-07-2022 22:14:01]8577: WAF :: fetched 1 new logs [24-07-2022 22:22:01]7448: WAF :: fetched 2 new logs [24-07-2022 22:26:01]23482: WAF :: fetched 1 new logs [24-07-2022 22:28:01]31111: WAF :: fetched 4 new logs [24-07-2022 22:29:01]2803: WAF :: fetched 1 new logs [24-07-2022 22:38:01]6649: WAF :: fetched 1 new logs [24-07-2022 22:41:02]18607: WAF :: fetched 3 new logs [24-07-2022 22:41:02]18607: Checking for user cron vulnerabilities [24-07-2022 22:44:02]30750: Checking ditributed CMS bruteforce attacks [24-07-2022 22:56:01]13987: WAF :: fetched 1 new logs [24-07-2022 22:57:01]17961: WAF :: fetched 2 new logs [24-07-2022 23:07:58]24568: Performed RBL check for 23.111.136.34. [24-07-2022 23:12:02]11608: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658715122 [24-07-2022 23:12:02]11608: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [24-07-2022 23:12:04]11608: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [24-07-2022 23:12:04]11608: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220724/20220724-2312/20220724-231202-Yt378k7l4K3bXZr4ntfL2wAAABE [24-07-2022 23:12:04]11608: WAF :: No suitable log file found. Using SQLite.. [24-07-2022 23:12:04]11608: WAF :: fetched 2 new logs [24-07-2022 23:33:02]29488: WAF :: fetched 1 new logs [24-07-2022 23:34:01]889: WAF :: fetched 1 new logs [24-07-2022 23:37:02]13238: WAF :: fetched 1 new logs [24-07-2022 23:38:01]17091: WAF :: fetched 4 new logs [24-07-2022 23:41:02]28846: WAF :: fetched 1 new logs [24-07-2022 23:41:02]28846: Checking for user cron vulnerabilities [24-07-2022 23:42:01]32751: WAF :: fetched 2 new logs [24-07-2022 23:44:01]8332: Checking ditributed CMS bruteforce attacks [24-07-2022 23:44:01]8332: WAF :: fetched 1 new logs [24-07-2022 23:50:01]32008: WAF :: fetched 2 new logs [24-07-2022 23:51:01]3760: WAF :: fetched 1 new logs [24-07-2022 23:54:01]15664: httpd.conf changed. Refreshing watchlist. [24-07-2022 23:55:01]20292: WAF :: fetched 2 new logs [24-07-2022 23:55:02]20277: httpd.conf changed. Refreshing watchlist. [25-07-2022 00:00:02]7782: WAF :: fetched 1 new logs [25-07-2022 00:01:01]12435: httpd.conf changed. Refreshing watchlist. [25-07-2022 00:01:05]12446: Sending daily report for July 25, 2022 [25-07-2022 00:02:01]16091: WAF :: fetched 1 new logs [25-07-2022 00:02:01]16112: httpd.conf changed. Refreshing watchlist. [25-07-2022 00:03:01]20164: httpd.conf changed. Refreshing watchlist. [25-07-2022 00:05:01]28430: Deleted 0 entries older than 6 MONTH from scanner_logs [25-07-2022 00:05:01]28430: Deleted 0 files from Quarantine [25-07-2022 00:08:01]7873: WAF :: fetched 1 new logs [25-07-2022 00:12:02]23519: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658718722 [25-07-2022 00:12:02]23519: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 00:12:04]23519: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 00:12:04]23519: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-0012/20220725-001202-Yt4KAlV2YOUUIEBIiDwAxgAAAAc [25-07-2022 00:12:04]23519: WAF :: No suitable log file found. Using SQLite.. [25-07-2022 00:12:04]23519: WAF :: fetched 2 new logs [25-07-2022 00:15:01]3166: WAF :: fetched 3 new logs [25-07-2022 00:21:01]26884: WAF :: fetched 1 new logs [25-07-2022 00:22:02]30891: WAF :: fetched 1 new logs [25-07-2022 00:24:02]6405: WAF :: fetched 2 new logs [25-07-2022 00:37:01]25821: WAF :: fetched 1 new logs [25-07-2022 00:41:01]8983: Checking for user cron vulnerabilities [25-07-2022 00:44:01]20619: Checking ditributed CMS bruteforce attacks [25-07-2022 00:45:01]: Checking for software updates [25-07-2022 00:50:02]12230: WAF :: fetched 1 new logs [25-07-2022 00:51:01]16056: WAF :: fetched 3 new logs [25-07-2022 01:00:01]19287: WAF :: fetched 2 new logs [25-07-2022 01:01:01]23927: WAF :: fetched 1 new logs [25-07-2022 01:02:01]28843: WAF :: fetched 2 new logs [25-07-2022 01:12:02]5589: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658722322 [25-07-2022 01:12:02]5589: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 01:12:04]5589: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 01:12:04]5589: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-0112/20220725-011202-Yt4YEv0Ts2gkAVkZ1EiRFwAAAAU [25-07-2022 01:12:04]5589: WAF :: No suitable log file found. Using SQLite.. [25-07-2022 01:12:04]5589: WAF :: fetched 1 new logs [25-07-2022 01:14:02]14318: WAF :: fetched 1 new logs [25-07-2022 01:16:02]23454: WAF :: fetched 1 new logs [25-07-2022 01:23:01]20793: WAF :: fetched 2 new logs [25-07-2022 01:24:01]24922: WAF :: fetched 2 new logs [25-07-2022 01:30:01]18587: WAF :: fetched 1 new logs [25-07-2022 01:32:01]26807: WAF :: fetched 1 new logs [25-07-2022 01:38:01]19496: WAF :: fetched 1 new logs [25-07-2022 01:41:02]31658: Checking for user cron vulnerabilities [25-07-2022 01:44:01]11114: Checking ditributed CMS bruteforce attacks [25-07-2022 01:45:02]: Checking for definition updates [25-07-2022 01:56:02]26587: WAF :: fetched 1 new logs [25-07-2022 02:01:01]14789: WAF :: fetched 1 new logs [25-07-2022 02:12:02]28293: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658725922 [25-07-2022 02:12:02]28293: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 02:12:04]28293: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 02:12:04]28293: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-0212/20220725-021202-Yt4mIsyVjX_jtbONyWPs-AAAAA8 [25-07-2022 02:12:04]28293: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-07-2022 02:12:05]28293: WAF :: fetched 1 new logs [25-07-2022 02:13:01]32531: WAF :: fetched 1 new logs [25-07-2022 02:17:01]17486: WAF :: fetched 1 new logs [25-07-2022 02:21:01]1660: WAF :: fetched 127 new logs [25-07-2022 02:22:02]5658: WAF :: fetched 115 new logs [25-07-2022 02:23:01]9632: WAF :: fetched 1 new logs [25-07-2022 02:25:01]17444: WAF :: fetched 1 new logs [25-07-2022 02:41:01]19418: Checking for user cron vulnerabilities [25-07-2022 02:44:01]31211: Checking ditributed CMS bruteforce attacks [25-07-2022 02:52:02]30469: WAF :: fetched 1 new logs [25-07-2022 02:53:02]2114: Updated license status via CDN [25-07-2022 03:00:04]29377: Found and updated 32 CMS installations [25-07-2022 03:03:00]29377: Sending CMS version vulnerability report emails to cpanel users [25-07-2022 03:03:04]29377: Checking wordpress installations for suspicious directories [25-07-2022 03:04:28]10186: Sending CMS version vulnerability report emails to cpanel users [25-07-2022 03:04:32]10186: Checking wordpress installations for suspicious directories [25-07-2022 03:10:02]6463: WAF :: fetched 1 new logs [25-07-2022 03:11:01]10417: WAF :: fetched 1 new logs [25-07-2022 03:12:02]14310: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658729522 [25-07-2022 03:12:02]14310: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 03:12:04]14310: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 03:12:04]14310: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-0312/20220725-031202-Yt40Mru-ZYHazHnsvEE7jQAAAA0 [25-07-2022 03:12:04]14310: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-07-2022 03:12:05]14310: WAF :: fetched 1 new logs [25-07-2022 03:13:01]18308: WAF :: fetched 1 new logs [25-07-2022 03:24:02]30321: WAF :: fetched 1 new logs [25-07-2022 03:34:02]5899: WAF :: fetched 1 new logs [25-07-2022 03:41:01]13772: WAF :: fetched 5 new logs [25-07-2022 03:41:01]13772: Checking for user cron vulnerabilities [25-07-2022 03:42:02]30924: WAF :: fetched 1 new logs [25-07-2022 03:44:01]17023: Checking ditributed CMS bruteforce attacks [25-07-2022 03:54:02]24439: WAF :: fetched 1 new logs [25-07-2022 03:57:01]3997: WAF :: fetched 3 new logs [25-07-2022 04:12:01]31939: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658733121 [25-07-2022 04:12:01]31939: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 04:12:03]31939: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 04:12:03]31939: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-0412/20220725-041201-Yt5CQZ5U-ZNSOS3y_lpv9AAAABM [25-07-2022 04:12:03]31939: WAF :: No suitable log file found. Using SQLite.. [25-07-2022 04:12:04]31939: WAF :: fetched 212 new logs [25-07-2022 04:30:02]7582: WAF :: fetched 2 new logs [25-07-2022 04:36:02]31114: WAF :: fetched 1 new logs [25-07-2022 04:41:01]19209: Checking for user cron vulnerabilities [25-07-2022 04:44:01]31123: Checking ditributed CMS bruteforce attacks [25-07-2022 04:55:02]10794: WAF :: fetched 1 new logs [25-07-2022 05:01:41]2791: Starting daily scan on files updated in last 24 hrs [25-07-2022 05:02:01]6929: WAF :: fetched 1 new logs [25-07-2022 05:10:02]6467: WAF :: fetched 1 new logs [25-07-2022 05:12:02]14362: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658736722 [25-07-2022 05:12:02]14362: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 05:12:04]14362: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 05:12:04]14362: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-0512/20220725-051202-Yt5QUsxGtnTAZuGa3xz21gAAAAs [25-07-2022 05:12:04]14362: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-07-2022 05:12:04]14362: WAF :: fetched 1 new logs [25-07-2022 05:13:01]18280: WAF :: fetched 1 new logs [25-07-2022 05:19:01]9645: WAF :: fetched 1 new logs [25-07-2022 05:25:01]1581: WAF :: fetched 1 new logs [25-07-2022 05:27:02]9523: WAF :: fetched 1 new logs [25-07-2022 05:36:01]13356: WAF :: fetched 1 new logs [25-07-2022 05:37:02]17249: WAF :: fetched 2 new logs [25-07-2022 05:41:02]1183: Checking for user cron vulnerabilities [25-07-2022 05:44:01]13127: Checking ditributed CMS bruteforce attacks [25-07-2022 05:53:02]17022: WAF :: fetched 1 new logs [25-07-2022 06:12:01]28878: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658740321 [25-07-2022 06:12:01]28878: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 06:12:03]28878: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 06:12:03]28878: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-0612/20220725-061201-Yt5eYU3tva-0fFdwlC32ugAAAAI [25-07-2022 06:12:03]28878: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-07-2022 06:12:04]28878: WAF :: fetched 1 new logs [25-07-2022 06:24:02]12714: WAF :: fetched 1 new logs [25-07-2022 06:30:02]4336: WAF :: fetched 1 new logs [25-07-2022 06:41:02]16435: Checking for user cron vulnerabilities [25-07-2022 06:44:02]28117: Checking ditributed CMS bruteforce attacks [25-07-2022 06:57:01]15771: WAF :: fetched 1 new logs [25-07-2022 07:00:02]27250: WAF :: fetched 1 new logs [25-07-2022 07:05:01]16069: WAF :: fetched 3 new logs [25-07-2022 07:06:02]20062: WAF :: fetched 2 new logs [25-07-2022 07:11:01]7822: WAF :: fetched 1 new logs [25-07-2022 07:12:02]11717: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658743922 [25-07-2022 07:12:02]11717: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 07:12:04]11717: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 07:12:04]11717: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-0712/20220725-071202-Yt5sciimqKp7ecqM0RUSWQAAAAk [25-07-2022 07:12:04]11717: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-07-2022 07:12:05]11717: WAF :: fetched 1 new logs [25-07-2022 07:13:01]15585: WAF :: fetched 2 new logs [25-07-2022 07:20:02]11228: WAF :: fetched 1 new logs [25-07-2022 07:22:02]19638: WAF :: fetched 1 new logs [25-07-2022 07:31:01]22871: WAF :: fetched 1 new logs [25-07-2022 07:41:01]30788: Checking for user cron vulnerabilities [25-07-2022 07:43:02]7102: WAF :: fetched 1 new logs [25-07-2022 07:44:02]11112: Checking ditributed CMS bruteforce attacks [25-07-2022 07:45:01]: Checking for definition updates [25-07-2022 07:52:01]11233: WAF :: fetched 1 new logs [25-07-2022 07:53:02]15311: WAF :: fetched 2 new logs [25-07-2022 07:54:02]19458: WAF :: fetched 1 new logs [25-07-2022 08:02:02]20814: WAF :: fetched 1 new logs [25-07-2022 08:03:02]24796: WAF :: fetched 3 new logs [25-07-2022 08:04:01]28794: WAF :: fetched 1 new logs [25-07-2022 08:05:02]32737: WAF :: fetched 1 new logs [25-07-2022 08:06:01]4379: WAF :: fetched 6 new logs [25-07-2022 08:12:01]28449: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658747521 [25-07-2022 08:12:01]28449: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 08:12:03]28449: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 08:12:03]28449: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-0812/20220725-081201-Yt56gZBGTQjCe4qxPhaSxAAAAAA [25-07-2022 08:12:03]28449: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-07-2022 08:12:04]28449: WAF :: fetched 1 new logs [25-07-2022 08:13:02]32374: WAF :: fetched 2 new logs [25-07-2022 08:15:02]8043: WAF :: fetched 6 new logs [25-07-2022 08:16:01]12023: WAF :: fetched 8 new logs [25-07-2022 08:23:02]8113: WAF :: fetched 1 new logs [25-07-2022 08:25:02]15961: WAF :: fetched 1 new logs [25-07-2022 08:36:01]27645: WAF :: fetched 1 new logs [25-07-2022 08:41:01]14926: Checking for user cron vulnerabilities [25-07-2022 08:44:01]27203: Checking ditributed CMS bruteforce attacks [25-07-2022 08:46:02]2875: WAF :: fetched 1 new logs [25-07-2022 08:47:01]6999: WAF :: fetched 2 new logs [25-07-2022 08:52:02]26996: WAF :: fetched 1 new logs [25-07-2022 08:57:01]15359: WAF :: fetched 1 new logs [25-07-2022 09:05:02]16358: WAF :: fetched 5 new logs [25-07-2022 09:06:01]20290: WAF :: fetched 7 new logs [25-07-2022 09:07:02]24015: WAF :: fetched 8 new logs [25-07-2022 09:09:02]31956: WAF :: fetched 1 new logs [25-07-2022 09:10:01]3825: WAF :: fetched 1 new logs [25-07-2022 09:12:02]12163: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658751122 [25-07-2022 09:12:02]12163: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 09:12:04]12163: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 09:12:04]12163: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-0912/20220725-091202-Yt6Iki6aykd9rRCtkZ5I4AAAAAw [25-07-2022 09:12:04]12163: WAF :: No suitable log file found. Using SQLite.. [25-07-2022 09:12:05]12163: WAF :: fetched 70 new logs [25-07-2022 09:15:01]25164: WAF :: fetched 1 new logs [25-07-2022 09:24:01]30120: WAF :: fetched 1 new logs [25-07-2022 09:26:01]6080: WAF :: fetched 2 new logs [25-07-2022 09:26:01]6041: httpd.conf changed. Refreshing watchlist. [25-07-2022 09:27:01]10342: WAF :: fetched 1 new logs [25-07-2022 09:29:01]18377: WAF :: fetched 1 new logs [25-07-2022 09:32:01]30629: httpd.conf changed. Refreshing watchlist. [25-07-2022 09:39:01]27057: WAF :: fetched 1 new logs [25-07-2022 09:41:01]2819: WAF :: fetched 1 new logs [25-07-2022 09:41:01]2819: Checking for user cron vulnerabilities [25-07-2022 09:42:02]7069: WAF :: fetched 2 new logs [25-07-2022 09:44:02]15446: Checking ditributed CMS bruteforce attacks [25-07-2022 09:45:01]19484: WAF :: fetched 1 new logs [25-07-2022 09:47:01]27609: WAF :: fetched 4 new logs [25-07-2022 09:48:02]31710: WAF :: fetched 1 new logs [25-07-2022 09:51:01]11773: WAF :: fetched 1 new logs [25-07-2022 09:53:01]19954: WAF :: fetched 2 new logs [25-07-2022 09:55:02]28415: WAF :: fetched 1 new logs [25-07-2022 09:56:01]32458: WAF :: fetched 1 new logs [25-07-2022 09:59:02]12537: WAF :: fetched 2 new logs [25-07-2022 10:00:01]16326: WAF :: fetched 3 new logs [25-07-2022 10:07:02]13574: WAF :: fetched 2 new logs [25-07-2022 10:12:01]1638: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658754721 [25-07-2022 10:12:01]1638: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 10:12:03]1638: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 10:12:04]1638: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-1012/20220725-101201-Yt6WobPDRxULpG0bV2lbAQAAAAg [25-07-2022 10:12:04]1638: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-07-2022 10:12:04]1638: WAF :: fetched 1 new logs [25-07-2022 10:31:02]16282: WAF :: fetched 3 new logs [25-07-2022 10:32:01]20201: WAF :: fetched 1 new logs [25-07-2022 10:33:02]24387: WAF :: fetched 1 new logs [25-07-2022 10:34:01]29005: WAF :: fetched 3 new logs [25-07-2022 10:35:02]602: WAF :: fetched 1 new logs [25-07-2022 10:36:02]4950: WAF :: fetched 3 new logs [25-07-2022 10:37:01]9193: WAF :: fetched 3 new logs [25-07-2022 10:38:02]13309: WAF :: fetched 1 new logs [25-07-2022 10:39:01]17336: WAF :: fetched 1 new logs [25-07-2022 10:41:01]25574: Checking for user cron vulnerabilities [25-07-2022 10:44:01]5724: Checking ditributed CMS bruteforce attacks [25-07-2022 10:44:01]5724: WAF :: fetched 2 new logs [25-07-2022 10:45:02]10330: WAF :: fetched 1 new logs [25-07-2022 10:46:01]14365: WAF :: fetched 6 new logs [25-07-2022 10:48:01]22359: WAF :: fetched 1 new logs [25-07-2022 10:49:02]26537: WAF :: fetched 1 new logs [25-07-2022 10:50:01]30565: WAF :: fetched 1 new logs [25-07-2022 10:54:01]14835: WAF :: fetched 1 new logs [25-07-2022 10:55:01]19282: WAF :: fetched 1 new logs [25-07-2022 10:56:02]23543: WAF :: fetched 2 new logs [25-07-2022 10:59:01]3623: WAF :: fetched 1 new logs [25-07-2022 11:00:02]7473: WAF :: fetched 4 new logs [25-07-2022 11:05:01]29025: WAF :: fetched 3 new logs [25-07-2022 11:06:02]823: WAF :: fetched 4 new logs [25-07-2022 11:08:02]9372: WAF :: fetched 5 new logs [25-07-2022 11:08:05]5271: Performed RBL check for 23.111.136.34. [25-07-2022 11:09:01]13431: WAF :: fetched 1 new logs [25-07-2022 11:12:01]25447: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658758321 [25-07-2022 11:12:03]25447: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 11:12:05]25447: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 11:12:05]25447: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-1112/20220725-111203-Yt6ks80nVpAyXgjFMDt-UwAAABg [25-07-2022 11:12:05]25447: WAF :: No suitable log file found. Using SQLite.. [25-07-2022 11:12:06]25447: WAF :: fetched 37 new logs [25-07-2022 11:16:02]10419: WAF :: fetched 1 new logs [25-07-2022 11:21:01]31385: WAF :: fetched 1 new logs [25-07-2022 11:30:01]4837: httpd.conf changed. Refreshing watchlist. [25-07-2022 11:31:02]9049: WAF :: fetched 2 new logs [25-07-2022 11:32:01]13015: WAF :: fetched 1 new logs [25-07-2022 11:35:02]25761: WAF :: fetched 1 new logs [25-07-2022 11:37:02]1487: WAF :: fetched 3 new logs [25-07-2022 11:38:01]5924: httpd.conf changed. Refreshing watchlist. [25-07-2022 11:39:01]10160: WAF :: fetched 3 new logs [25-07-2022 11:41:02]18489: WAF :: fetched 1 new logs [25-07-2022 11:41:02]18489: Checking for user cron vulnerabilities [25-07-2022 11:43:02]26708: WAF :: fetched 1 new logs [25-07-2022 11:44:01]30850: Checking ditributed CMS bruteforce attacks [25-07-2022 11:45:02]3137: WAF :: fetched 1 new logs [25-07-2022 11:46:01]7434: httpd.conf changed. Refreshing watchlist. [25-07-2022 11:48:01]15467: WAF :: fetched 1 new logs [25-07-2022 11:50:01]23455: WAF :: fetched 1 new logs [25-07-2022 11:51:02]27493: WAF :: fetched 2 new logs [25-07-2022 11:52:01]31423: httpd.conf changed. Refreshing watchlist. [25-07-2022 11:53:02]3437: httpd.conf changed. Refreshing watchlist. [25-07-2022 11:54:01]7574: WAF :: fetched 1 new logs [25-07-2022 11:58:01]24194: httpd.conf changed. Refreshing watchlist. [25-07-2022 12:02:01]8364: WAF :: fetched 1 new logs [25-07-2022 12:03:02]12719: WAF :: fetched 1 new logs [25-07-2022 12:04:01]16713: WAF :: fetched 6 new logs [25-07-2022 12:05:02]20675: WAF :: fetched 2 new logs [25-07-2022 12:12:01]17199: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658761921 [25-07-2022 12:12:01]17199: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 12:12:03]17199: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 12:12:03]17199: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-1212/20220725-121201-Yt6ywafmM3Wr4_MS6njfpQAAAA8 [25-07-2022 12:12:03]17199: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-07-2022 12:12:04]17199: WAF :: fetched 1 new logs [25-07-2022 12:13:02]21416: WAF :: fetched 1 new logs [25-07-2022 12:17:02]5981: WAF :: fetched 1 new logs [25-07-2022 12:25:02]6218: WAF :: fetched 1 new logs [25-07-2022 12:27:02]14730: WAF :: fetched 1 new logs [25-07-2022 12:28:01]18761: WAF :: fetched 5 new logs [25-07-2022 12:30:01]26849: WAF :: fetched 2 new logs [25-07-2022 12:35:02]14914: WAF :: fetched 3 new logs [25-07-2022 12:36:01]19415: WAF :: fetched 5 new logs [25-07-2022 12:37:02]23375: WAF :: fetched 2 new logs [25-07-2022 12:40:01]2959: WAF :: fetched 1 new logs [25-07-2022 12:41:02]6992: Checking for user cron vulnerabilities [25-07-2022 12:43:02]15564: WAF :: fetched 2 new logs [25-07-2022 12:44:02]19848: Checking ditributed CMS bruteforce attacks [25-07-2022 12:45:01]: Checking for software updates [25-07-2022 12:47:02]395: WAF :: fetched 4 new logs [25-07-2022 12:48:01]4680: WAF :: fetched 3 new logs [25-07-2022 12:49:02]8772: WAF :: fetched 4 new logs [25-07-2022 12:51:02]16774: WAF :: fetched 2 new logs [25-07-2022 12:54:01]28711: WAF :: fetched 5 new logs [25-07-2022 12:55:02]32684: WAF :: fetched 6 new logs [25-07-2022 12:56:01]4485: WAF :: fetched 2 new logs [25-07-2022 13:06:01]12792: WAF :: fetched 1 new logs [25-07-2022 13:08:01]21632: httpd.conf changed. Refreshing watchlist. [25-07-2022 13:11:02]1285: WAF :: fetched 1 new logs [25-07-2022 13:12:01]5366: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658765521 [25-07-2022 13:12:01]5366: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 13:12:03]5366: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 13:12:04]5366: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-1312/20220725-131201-Yt7A0RifN-eFfG28knxYxAAAAAg [25-07-2022 13:12:04]5366: WAF :: No suitable log file found. Using SQLite.. [25-07-2022 13:12:04]5366: WAF :: fetched 48 new logs [25-07-2022 13:13:02]9613: httpd.conf changed. Refreshing watchlist. [25-07-2022 13:14:01]13582: WAF :: fetched 1 new logs [25-07-2022 13:19:02]1754: WAF :: fetched 2 new logs [25-07-2022 13:26:01]29908: httpd.conf changed. Refreshing watchlist. [25-07-2022 13:27:02]1835: WAF :: fetched 1 new logs [25-07-2022 13:31:01]18469: WAF :: fetched 1 new logs [25-07-2022 13:36:02]6421: WAF :: fetched 2 new logs [25-07-2022 13:41:02]26833: WAF :: fetched 1 new logs [25-07-2022 13:41:02]26833: Checking for user cron vulnerabilities [25-07-2022 13:44:01]6687: Checking ditributed CMS bruteforce attacks [25-07-2022 13:45:01]: Checking for definition updates [25-07-2022 13:47:02]19406: WAF :: fetched 2 new logs [25-07-2022 13:50:01]31313: WAF :: fetched 2 new logs [25-07-2022 13:51:02]3133: WAF :: fetched 1 new logs [25-07-2022 13:54:02]15152: WAF :: fetched 1 new logs [25-07-2022 14:00:02]7044: httpd.conf changed. Refreshing watchlist. [25-07-2022 14:07:02]3773: httpd.conf changed. Refreshing watchlist. [25-07-2022 14:08:01]8576: httpd.conf changed. Refreshing watchlist. [25-07-2022 14:12:01]24676: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658769121 [25-07-2022 14:12:01]24676: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 14:12:03]24676: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 14:12:04]24676: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-1412/20220725-141201-Yt7O4XdXgLtJ7V5Dmw4zKAAAAAM [25-07-2022 14:12:04]24676: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-07-2022 14:12:04]24676: WAF :: fetched 1 new logs [25-07-2022 14:13:02]28854: httpd.conf changed. Refreshing watchlist. [25-07-2022 14:16:01]8974: WAF :: fetched 7 new logs [25-07-2022 14:18:01]17582: WAF :: fetched 2 new logs [25-07-2022 14:21:02]29941: WAF :: fetched 1 new logs [25-07-2022 14:23:02]5513: WAF :: fetched 4 new logs [25-07-2022 14:24:01]9612: WAF :: fetched 1 new logs [25-07-2022 14:25:02]13667: WAF :: fetched 1 new logs [25-07-2022 14:30:01]2041: WAF :: fetched 4 new logs [25-07-2022 14:31:02]6362: WAF :: fetched 1 new logs [25-07-2022 14:33:01]14362: WAF :: fetched 1 new logs [25-07-2022 14:40:02]10890: WAF :: fetched 1 new logs [25-07-2022 14:41:02]14902: WAF :: fetched 1 new logs [25-07-2022 14:41:02]14902: Checking for user cron vulnerabilities [25-07-2022 14:44:02]27166: Checking ditributed CMS bruteforce attacks [25-07-2022 14:47:02]6813: WAF :: fetched 1 new logs [25-07-2022 14:48:02]11256: WAF :: fetched 1 new logs [25-07-2022 14:49:02]15125: WAF :: fetched 1 new logs [25-07-2022 14:50:02]19078: WAF :: fetched 3 new logs [25-07-2022 14:51:02]23051: WAF :: fetched 1 new logs [25-07-2022 14:53:02]30851: Updated license status via CDN [25-07-2022 15:00:02]26299: WAF :: fetched 2 new logs [25-07-2022 15:01:01]30765: Reseting cPGuard inotify settings [25-07-2022 15:01:02]30758: WAF :: fetched 1 new logs [25-07-2022 15:02:01]2478: WAF :: fetched 1 new logs [25-07-2022 15:03:02]6616: WAF :: fetched 1 new logs [25-07-2022 15:04:01]10597: WAF :: fetched 1 new logs [25-07-2022 15:09:02]31085: WAF :: fetched 2 new logs [25-07-2022 15:10:01]2674: WAF :: fetched 1 new logs [25-07-2022 15:11:02]6864: WAF :: fetched 6 new logs [25-07-2022 15:12:01]10754: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658772721 [25-07-2022 15:12:01]10754: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 15:12:03]10754: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 15:12:03]10754: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-1512/20220725-151201-Yt7c8aLpziVoyHGxwTePXwAAAAU [25-07-2022 15:12:03]10754: WAF :: No suitable log file found. Using SQLite.. [25-07-2022 15:12:04]10754: WAF :: fetched 39 new logs [25-07-2022 15:15:01]22976: WAF :: fetched 1 new logs [25-07-2022 15:16:02]27185: httpd.conf changed. Refreshing watchlist. [25-07-2022 15:16:02]27170: WAF :: fetched 2 new logs [25-07-2022 15:17:02]31098: WAF :: fetched 1 new logs [25-07-2022 15:19:02]7425: WAF :: fetched 2 new logs [25-07-2022 15:27:01]7425: WAF :: fetched 1 new logs [25-07-2022 15:28:01]11431: WAF :: fetched 7 new logs [25-07-2022 15:29:02]16014: WAF :: fetched 3 new logs [25-07-2022 15:30:01]19952: WAF :: fetched 3 new logs [25-07-2022 15:31:02]23912: WAF :: fetched 4 new logs [25-07-2022 15:38:01]19457: WAF :: fetched 46 new logs [25-07-2022 15:41:01]31910: Checking for user cron vulnerabilities [25-07-2022 15:43:01]7697: WAF :: fetched 1 new logs [25-07-2022 15:44:01]11735: Checking ditributed CMS bruteforce attacks [25-07-2022 15:44:02]11735: WAF :: fetched 4 new logs [25-07-2022 15:45:01]15554: WAF :: fetched 1 new logs [25-07-2022 15:46:02]19589: WAF :: fetched 2 new logs [25-07-2022 15:47:01]23541: WAF :: fetched 1 new logs [25-07-2022 15:50:02]3856: WAF :: fetched 1 new logs [25-07-2022 15:53:01]15787: WAF :: fetched 1 new logs [25-07-2022 15:54:02]19994: WAF :: fetched 2 new logs [25-07-2022 15:56:02]27772: WAF :: fetched 2 new logs [25-07-2022 15:57:01]31745: WAF :: fetched 1 new logs [25-07-2022 15:59:01]7653: WAF :: fetched 1 new logs [25-07-2022 16:01:01]15607: WAF :: fetched 6 new logs [25-07-2022 16:02:02]19722: WAF :: fetched 2 new logs [25-07-2022 16:04:02]27818: WAF :: fetched 2 new logs [25-07-2022 16:05:01]31811: WAF :: fetched 1 new logs [25-07-2022 16:06:02]3608: WAF :: fetched 2 new logs [25-07-2022 16:09:02]16257: WAF :: fetched 2 new logs [25-07-2022 16:10:01]20178: WAF :: fetched 3 new logs [25-07-2022 16:11:02]24261: WAF :: fetched 6 new logs [25-07-2022 16:12:02]28345: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658776322 [25-07-2022 16:12:02]28345: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 16:12:04]28345: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 16:12:04]28345: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-1612/20220725-161202-Yt7rAuFXV4NRj2XkS6G2sQAAAAI [25-07-2022 16:12:04]28345: WAF :: No suitable log file found. Using SQLite.. [25-07-2022 16:12:04]28345: WAF :: fetched 1 new logs [25-07-2022 16:13:01]32217: WAF :: fetched 103 new logs [25-07-2022 16:14:02]4109: WAF :: fetched 1 new logs [25-07-2022 16:15:01]8124: WAF :: fetched 1 new logs [25-07-2022 16:16:01]12141: WAF :: fetched 6 new logs [25-07-2022 16:17:01]16028: WAF :: fetched 3 new logs [25-07-2022 16:21:01]32737: WAF :: fetched 1 new logs [25-07-2022 16:31:02]9043: WAF :: fetched 1 new logs [25-07-2022 16:34:01]21443: WAF :: fetched 1 new logs [25-07-2022 16:38:02]5144: WAF :: fetched 1 new logs [25-07-2022 16:41:01]17690: Checking for user cron vulnerabilities [25-07-2022 16:44:01]29748: Checking ditributed CMS bruteforce attacks [25-07-2022 16:53:02]2059: WAF :: fetched 1 new logs [25-07-2022 16:56:01]14440: WAF :: fetched 1 new logs [25-07-2022 17:02:01]6442: WAF :: fetched 2 new logs [25-07-2022 17:06:01]22522: WAF :: fetched 1 new logs [25-07-2022 17:07:02]26524: WAF :: fetched 1 new logs [25-07-2022 17:09:01]2053: WAF :: fetched 2 new logs [25-07-2022 17:12:01]14690: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658779921 [25-07-2022 17:12:01]14690: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 17:12:03]14690: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 17:12:03]14690: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-1712/20220725-171201-Yt75EeRqnNrv711x0Li0FAAAAAI [25-07-2022 17:12:03]14690: WAF :: No suitable log file found. Using SQLite.. [25-07-2022 17:12:04]14690: WAF :: fetched 2 new logs [25-07-2022 17:19:02]10251: WAF :: fetched 101 new logs [25-07-2022 17:21:02]18798: httpd.conf changed. Refreshing watchlist. [25-07-2022 17:24:01]30458: WAF :: fetched 1 new logs [25-07-2022 17:25:02]2155: WAF :: fetched 4 new logs [25-07-2022 17:31:01]26526: WAF :: fetched 1 new logs [25-07-2022 17:35:02]10279: WAF :: fetched 1 new logs [25-07-2022 17:41:01]2064: Checking for user cron vulnerabilities [25-07-2022 17:44:01]13862: Checking ditributed CMS bruteforce attacks [25-07-2022 17:45:01]17789: WAF :: fetched 1 new logs [25-07-2022 17:48:02]29786: WAF :: fetched 1 new logs [25-07-2022 17:49:01]1424: httpd.conf changed. Refreshing watchlist. [25-07-2022 17:50:02]5607: WAF :: fetched 3 new logs [25-07-2022 17:51:01]10156: WAF :: fetched 1 new logs [25-07-2022 17:54:02]22007: httpd.conf changed. Refreshing watchlist. [25-07-2022 17:56:02]29921: WAF :: fetched 28 new logs [25-07-2022 17:57:01]1471: WAF :: fetched 65 new logs [25-07-2022 17:58:01]5484: WAF :: fetched 80 new logs [25-07-2022 17:59:02]9460: WAF :: fetched 63 new logs [25-07-2022 18:00:01]13135: WAF :: fetched 70 new logs [25-07-2022 18:01:02]18089: WAF :: fetched 27 new logs [25-07-2022 18:02:01]22033: WAF :: fetched 2 new logs [25-07-2022 18:06:01]4993: WAF :: fetched 1 new logs [25-07-2022 18:07:02]8998: WAF :: fetched 176 new logs [25-07-2022 18:12:01]29034: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658783521 [25-07-2022 18:12:01]29034: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 18:12:03]29034: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 18:12:03]29034: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-1812/20220725-181201-Yt8HIWDXhuFN9xT17KnYDwAAAAQ [25-07-2022 18:12:03]29034: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-07-2022 18:12:04]29034: WAF :: fetched 1 new logs [25-07-2022 18:16:02]12657: WAF :: fetched 4 new logs [25-07-2022 18:17:02]16475: WAF :: fetched 1 new logs [25-07-2022 18:18:01]20409: WAF :: fetched 3 new logs [25-07-2022 18:19:02]24491: WAF :: fetched 1 new logs [25-07-2022 18:20:01]28452: WAF :: fetched 1 new logs [25-07-2022 18:22:01]4709: WAF :: fetched 2 new logs [25-07-2022 18:23:02]8781: WAF :: fetched 1 new logs [25-07-2022 18:32:02]12216: WAF :: fetched 3 new logs [25-07-2022 18:40:01]10896: WAF :: fetched 1 new logs [25-07-2022 18:41:02]14848: Checking for user cron vulnerabilities [25-07-2022 18:44:01]27015: Checking ditributed CMS bruteforce attacks [25-07-2022 18:46:01]2746: WAF :: fetched 1 new logs [25-07-2022 18:51:02]22445: WAF :: fetched 1 new logs [25-07-2022 18:52:01]26688: WAF :: fetched 2 new logs [25-07-2022 18:53:02]30648: WAF :: fetched 4 new logs [25-07-2022 18:54:01]2138: WAF :: fetched 3 new logs [25-07-2022 18:56:01]10184: WAF :: fetched 1 new logs [25-07-2022 18:57:02]14200: WAF :: fetched 3 new logs [25-07-2022 18:58:01]17970: WAF :: fetched 5 new logs [25-07-2022 18:59:02]21926: WAF :: fetched 1 new logs [25-07-2022 19:01:01]29970: WAF :: fetched 1 new logs [25-07-2022 19:02:02]2085: WAF :: fetched 3 new logs [25-07-2022 19:03:01]6126: WAF :: fetched 3 new logs [25-07-2022 19:08:02]25279: WAF :: fetched 1 new logs [25-07-2022 19:09:01]29156: httpd.conf changed. Refreshing watchlist. [25-07-2022 19:12:02]9466: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658787122 [25-07-2022 19:12:02]9466: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 19:12:04]9466: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 19:12:04]9466: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-1912/20220725-191202-Yt8VMjrfdxi1c9E8sFtBcwAAAAk [25-07-2022 19:12:04]9466: WAF :: No suitable log file found. Using SQLite.. [25-07-2022 19:12:04]9466: WAF :: fetched 45 new logs [25-07-2022 19:13:01]13399: WAF :: fetched 1 new logs [25-07-2022 19:14:02]17303: WAF :: fetched 2 new logs [25-07-2022 19:15:01]21282: httpd.conf changed. Refreshing watchlist. [25-07-2022 19:18:01]32727: WAF :: fetched 1 new logs [25-07-2022 19:19:02]4356: WAF :: fetched 3 new logs [25-07-2022 19:21:01]12263: WAF :: fetched 1 new logs [25-07-2022 19:27:01]3953: WAF :: fetched 2 new logs [25-07-2022 19:36:02]7571: WAF :: fetched 3 new logs [25-07-2022 19:37:01]11411: WAF :: fetched 2 new logs [25-07-2022 19:38:02]15277: WAF :: fetched 1 new logs [25-07-2022 19:39:01]19194: WAF :: fetched 2 new logs [25-07-2022 19:40:02]23226: WAF :: fetched 1 new logs [25-07-2022 19:41:01]27127: WAF :: fetched 1 new logs [25-07-2022 19:41:01]27127: Checking for user cron vulnerabilities [25-07-2022 19:44:01]7134: Checking ditributed CMS bruteforce attacks [25-07-2022 19:44:01]7134: WAF :: fetched 1 new logs [25-07-2022 19:45:01]: Checking for definition updates [25-07-2022 19:45:01]10969: WAF :: fetched 1 new logs [25-07-2022 19:47:01]18687: WAF :: fetched 1 new logs [25-07-2022 19:48:01]22466: WAF :: fetched 2 new logs [25-07-2022 19:49:01]26250: WAF :: fetched 2 new logs [25-07-2022 19:52:01]5665: WAF :: fetched 1 new logs [25-07-2022 20:01:02]9358: WAF :: fetched 1 new logs [25-07-2022 20:03:02]17566: WAF :: fetched 3 new logs [25-07-2022 20:05:02]25176: WAF :: fetched 1 new logs [25-07-2022 20:07:02]527: WAF :: fetched 1 new logs [25-07-2022 20:09:02]8455: WAF :: fetched 1 new logs [25-07-2022 20:12:01]19673: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658790721 [25-07-2022 20:12:01]19673: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 20:12:03]19673: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 20:12:03]19673: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-2012/20220725-201201-Yt8jQYC0b9loJxKqChtonwAAABM [25-07-2022 20:12:03]19673: WAF :: No suitable log file found. Using SQLite.. [25-07-2022 20:12:04]19673: WAF :: fetched 1 new logs [25-07-2022 20:13:01]24207: WAF :: fetched 1 new logs [25-07-2022 20:14:01]27919: WAF :: fetched 2 new logs [25-07-2022 20:17:01]7361: WAF :: fetched 2 new logs [25-07-2022 20:24:01]2507: WAF :: fetched 1 new logs [25-07-2022 20:25:01]6520: WAF :: fetched 2 new logs [25-07-2022 20:30:01]25869: WAF :: fetched 1 new logs [25-07-2022 20:31:02]29853: WAF :: fetched 2 new logs [25-07-2022 20:36:01]17492: WAF :: fetched 2 new logs [25-07-2022 20:38:01]25165: WAF :: fetched 3 new logs [25-07-2022 20:39:02]29072: WAF :: fetched 1 new logs [25-07-2022 20:41:02]4561: Checking for user cron vulnerabilities [25-07-2022 20:44:01]16804: Checking ditributed CMS bruteforce attacks [25-07-2022 20:46:01]24646: WAF :: fetched 1 new logs [25-07-2022 20:47:02]28524: WAF :: fetched 1 new logs [25-07-2022 20:49:02]3949: WAF :: fetched 1 new logs [25-07-2022 20:51:02]11795: WAF :: fetched 1 new logs [25-07-2022 20:53:02]19476: WAF :: fetched 1 new logs [25-07-2022 20:57:02]3236: WAF :: fetched 1 new logs [25-07-2022 20:58:01]7180: WAF :: fetched 1 new logs [25-07-2022 20:59:02]11030: WAF :: fetched 1 new logs [25-07-2022 21:12:02]29977: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658794322 [25-07-2022 21:12:02]29977: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 21:12:04]29977: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 21:12:04]29977: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-2112/20220725-211202-Yt8xUjJb50PKcHQ598TpeAAAAAg [25-07-2022 21:12:04]29977: WAF :: No suitable log file found. Using SQLite.. [25-07-2022 21:12:04]29977: WAF :: fetched 1 new logs [25-07-2022 21:13:01]1517: httpd.conf changed. Refreshing watchlist. [25-07-2022 21:15:02]9647: WAF :: fetched 2 new logs [25-07-2022 21:16:01]13601: WAF :: fetched 1 new logs [25-07-2022 21:17:02]17377: WAF :: fetched 1 new logs [25-07-2022 21:23:01]8429: WAF :: fetched 1 new logs [25-07-2022 21:25:01]16600: WAF :: fetched 1 new logs [25-07-2022 21:26:02]20633: WAF :: fetched 2 new logs [25-07-2022 21:28:02]28267: WAF :: fetched 1 new logs [25-07-2022 21:31:01]7823: WAF :: fetched 2 new logs [25-07-2022 21:32:02]11719: WAF :: fetched 3 new logs [25-07-2022 21:33:01]15528: WAF :: fetched 1 new logs [25-07-2022 21:35:01]23697: WAF :: fetched 1 new logs [25-07-2022 21:36:02]27678: WAF :: fetched 3 new logs [25-07-2022 21:39:01]7063: WAF :: fetched 1 new logs [25-07-2022 21:41:01]14819: WAF :: fetched 1 new logs [25-07-2022 21:41:01]14819: Checking for user cron vulnerabilities [25-07-2022 21:44:01]26927: Checking ditributed CMS bruteforce attacks [25-07-2022 21:44:02]26927: WAF :: fetched 1 new logs [25-07-2022 21:47:01]6456: WAF :: fetched 1 new logs [25-07-2022 21:58:01]17228: WAF :: fetched 1 new logs [25-07-2022 22:00:02]24675: WAF :: fetched 1 new logs [25-07-2022 22:07:08]20600: Performing Domain reputation checks [25-07-2022 22:08:01]24344: WAF :: fetched 1 new logs [25-07-2022 22:12:02]7735: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658797922 [25-07-2022 22:12:02]7735: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 22:12:04]7735: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 22:12:04]7735: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-2212/20220725-221202-Yt8_Yv4DJKl3kaYzvC6L2gAAAAc [25-07-2022 22:12:04]7735: WAF :: No suitable log file found. Using SQLite.. [25-07-2022 22:21:01]10826: WAF :: fetched 1 new logs [25-07-2022 22:22:01]14546: WAF :: fetched 1 new logs [25-07-2022 22:23:01]18441: WAF :: fetched 1 new logs [25-07-2022 22:28:02]6235: WAF :: fetched 1 new logs [25-07-2022 22:33:01]25645: WAF :: fetched 1 new logs [25-07-2022 22:34:01]29463: WAF :: fetched 1 new logs [25-07-2022 22:36:01]5543: WAF :: fetched 1 new logs [25-07-2022 22:41:01]25255: Checking for user cron vulnerabilities [25-07-2022 22:44:01]4571: Checking ditributed CMS bruteforce attacks [25-07-2022 22:44:02]4571: WAF :: fetched 1 new logs [25-07-2022 22:45:01]8997: WAF :: fetched 2 new logs [25-07-2022 22:50:01]28504: WAF :: fetched 1 new logs [25-07-2022 22:54:02]12277: WAF :: fetched 2 new logs [25-07-2022 22:59:02]32577: WAF :: fetched 2 new logs [25-07-2022 23:07:55]32690: Performed RBL check for 23.111.136.34. [25-07-2022 23:12:02]19911: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658801522 [25-07-2022 23:12:02]19911: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [25-07-2022 23:12:04]19911: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [25-07-2022 23:12:04]19911: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220725/20220725-2312/20220725-231202-Yt9NcsK1bT8cuqQG6CUFMAAAAAA [25-07-2022 23:12:04]19911: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [25-07-2022 23:12:04]19911: WAF :: fetched 1 new logs [25-07-2022 23:13:01]23443: WAF :: fetched 1 new logs [25-07-2022 23:16:02]3427: WAF :: fetched 1 new logs [25-07-2022 23:17:01]7493: WAF :: fetched 1 new logs [25-07-2022 23:20:02]19065: WAF :: fetched 1 new logs [25-07-2022 23:23:01]30877: WAF :: fetched 1 new logs [25-07-2022 23:26:02]11027: WAF :: fetched 1 new logs [25-07-2022 23:32:02]2055: WAF :: fetched 1 new logs [25-07-2022 23:33:01]6164: WAF :: fetched 2 new logs [25-07-2022 23:41:02]5847: WAF :: fetched 2 new logs [25-07-2022 23:41:02]5847: Checking for user cron vulnerabilities [25-07-2022 23:44:01]17641: Checking ditributed CMS bruteforce attacks [25-07-2022 23:49:02]5547: WAF :: fetched 1 new logs [25-07-2022 23:52:02]17486: WAF :: fetched 1 new logs [25-07-2022 23:54:02]25450: httpd.conf changed. Refreshing watchlist. [25-07-2022 23:58:01]9538: httpd.conf changed. Refreshing watchlist. [26-07-2022 00:00:01]16975: WAF :: fetched 2 new logs [26-07-2022 00:01:02]21419: WAF :: fetched 1 new logs [26-07-2022 00:01:05]21419: Sending daily report for July 26, 2022 [26-07-2022 00:02:01]25293: WAF :: fetched 8 new logs [26-07-2022 00:03:02]29139: WAF :: fetched 6 new logs [26-07-2022 00:04:01]712: WAF :: fetched 6 new logs [26-07-2022 00:05:02]4695: Deleted 0 entries older than 6 MONTH from scanner_logs [26-07-2022 00:05:02]4695: Deleted 0 files from Quarantine [26-07-2022 00:07:02]13224: WAF :: fetched 1 new logs [26-07-2022 00:08:01]17048: WAF :: fetched 2 new logs [26-07-2022 00:10:01]24902: WAF :: fetched 1 new logs [26-07-2022 00:11:02]28896: WAF :: fetched 2 new logs [26-07-2022 00:12:01]455: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658805121 [26-07-2022 00:12:01]455: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 00:12:03]455: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 00:12:03]455: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-0012/20220726-001201-Yt9bgepCuG7UmramwWEFNAAAAAU [26-07-2022 00:12:03]455: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [26-07-2022 00:12:04]455: WAF :: fetched 1 new logs [26-07-2022 00:13:02]4521: WAF :: fetched 2 new logs [26-07-2022 00:16:02]15790: WAF :: fetched 2 new logs [26-07-2022 00:17:02]20334: WAF :: fetched 3 new logs [26-07-2022 00:18:02]24161: WAF :: fetched 3 new logs [26-07-2022 00:19:01]27957: WAF :: fetched 3 new logs [26-07-2022 00:21:01]3471: WAF :: fetched 1 new logs [26-07-2022 00:22:02]7791: WAF :: fetched 2 new logs [26-07-2022 00:23:01]11523: WAF :: fetched 3 new logs [26-07-2022 00:24:02]15468: WAF :: fetched 3 new logs [26-07-2022 00:25:01]19279: WAF :: fetched 1 new logs [26-07-2022 00:26:02]23109: WAF :: fetched 2 new logs [26-07-2022 00:31:02]11277: WAF :: fetched 1 new logs [26-07-2022 00:41:02]18998: Checking for user cron vulnerabilities [26-07-2022 00:44:01]30654: Checking ditributed CMS bruteforce attacks [26-07-2022 00:45:01]: Checking for software updates [26-07-2022 00:47:02]10861: WAF :: fetched 1 new logs [26-07-2022 01:12:02]16979: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658808722 [26-07-2022 01:12:02]16979: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 01:12:04]16979: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 01:12:04]16979: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-0112/20220726-011202-Yt9pkk8jv0E0aYx5tk1CmAAAAA4 [26-07-2022 01:12:04]16979: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [26-07-2022 01:12:04]16979: WAF :: fetched 1 new logs [26-07-2022 01:13:01]21009: WAF :: fetched 1 new logs [26-07-2022 01:18:02]10468: WAF :: fetched 1 new logs [26-07-2022 01:20:02]18537: WAF :: fetched 1 new logs [26-07-2022 01:32:02]4702: WAF :: fetched 2 new logs [26-07-2022 01:39:02]2133: WAF :: fetched 1 new logs [26-07-2022 01:41:02]10499: Checking for user cron vulnerabilities [26-07-2022 01:44:01]22611: Checking ditributed CMS bruteforce attacks [26-07-2022 01:45:01]: Checking for definition updates [26-07-2022 01:45:04]26553: Updated virus defnition : malware.expert.ndb [26-07-2022 01:45:06]26553: Updated virus defnition : malware.expert.fp [26-07-2022 01:48:01]7344: WAF :: fetched 1 new logs [26-07-2022 01:53:02]27259: WAF :: fetched 4 new logs [26-07-2022 01:54:01]31152: WAF :: fetched 3 new logs [26-07-2022 01:55:02]2881: WAF :: fetched 2 new logs [26-07-2022 01:59:01]19271: WAF :: fetched 1 new logs [26-07-2022 02:00:02]22912: WAF :: fetched 2 new logs [26-07-2022 02:06:02]14885: WAF :: fetched 1 new logs [26-07-2022 02:11:02]2681: WAF :: fetched 1 new logs [26-07-2022 02:12:02]6751: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658812322 [26-07-2022 02:12:02]6751: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 02:12:04]6751: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 02:12:04]6751: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-0212/20220726-021202-Yt93om7quPHx5Am86Bhb-QAAABg [26-07-2022 02:12:04]6751: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [26-07-2022 02:12:05]6751: WAF :: fetched 1 new logs [26-07-2022 02:13:01]10745: WAF :: fetched 1 new logs [26-07-2022 02:23:02]20088: WAF :: fetched 1 new logs [26-07-2022 02:24:01]24194: WAF :: fetched 2 new logs [26-07-2022 02:40:02]26846: WAF :: fetched 1 new logs [26-07-2022 02:41:01]30857: Checking for user cron vulnerabilities [26-07-2022 02:44:02]11360: Checking ditributed CMS bruteforce attacks [26-07-2022 02:47:01]23727: WAF :: fetched 1 new logs [26-07-2022 02:51:01]8378: WAF :: fetched 1 new logs [26-07-2022 02:53:02]16296: Updated license status via CDN [26-07-2022 03:00:02]11905: Found and updated 32 CMS installations [26-07-2022 03:02:40]11905: Sending CMS version vulnerability report emails to cpanel users [26-07-2022 03:02:43]11905: Checking wordpress installations for suspicious directories [26-07-2022 03:04:30]25152: Sending CMS version vulnerability report emails to cpanel users [26-07-2022 03:04:33]25152: Checking wordpress installations for suspicious directories [26-07-2022 03:12:01]29739: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658815921 [26-07-2022 03:12:01]29739: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 03:12:03]29739: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 03:12:03]29739: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-0312/20220726-031201-Yt-FseRnGjdMT-74tRxdmQAAABQ [26-07-2022 03:12:03]29739: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 03:12:04]29739: WAF :: fetched 73 new logs [26-07-2022 03:19:01]25388: WAF :: fetched 1 new logs [26-07-2022 03:20:02]29327: WAF :: fetched 1 new logs [26-07-2022 03:22:02]5159: WAF :: fetched 1 new logs [26-07-2022 03:34:02]23927: WAF :: fetched 1 new logs [26-07-2022 03:41:01]19703: Checking for user cron vulnerabilities [26-07-2022 03:44:01]31435: Checking ditributed CMS bruteforce attacks [26-07-2022 03:47:01]11061: WAF :: fetched 1 new logs [26-07-2022 03:54:01]7472: WAF :: fetched 1 new logs [26-07-2022 03:58:02]23367: WAF :: fetched 2 new logs [26-07-2022 04:11:01]11732: WAF :: fetched 1 new logs [26-07-2022 04:12:02]15634: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658819522 [26-07-2022 04:12:02]15634: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 04:12:04]15634: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 04:12:04]15634: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-0412/20220726-041202-Yt-Twj-rzx4lNRJWURbIXQAAAAY [26-07-2022 04:12:04]15634: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [26-07-2022 04:12:05]15634: WAF :: fetched 1 new logs [26-07-2022 04:13:01]19416: WAF :: fetched 1 new logs [26-07-2022 04:14:02]23525: WAF :: fetched 1 new logs [26-07-2022 04:27:02]10736: WAF :: fetched 1 new logs [26-07-2022 04:41:01]2662: WAF :: fetched 1 new logs [26-07-2022 04:41:01]2662: Checking for user cron vulnerabilities [26-07-2022 04:44:01]14888: Checking ditributed CMS bruteforce attacks [26-07-2022 04:54:01]23334: WAF :: fetched 2 new logs [26-07-2022 04:57:02]3003: WAF :: fetched 1 new logs [26-07-2022 04:59:02]11081: WAF :: fetched 1 new logs [26-07-2022 05:01:42]19669: Starting daily scan on files updated in last 24 hrs [26-07-2022 05:12:02]31502: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658823122 [26-07-2022 05:12:02]31502: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 05:12:04]31502: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 05:12:04]31502: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-0512/20220726-051202-Yt-h0kZ-SaV89VZlZW7DAwAAAAg [26-07-2022 05:12:04]31502: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 05:12:04]31502: WAF :: fetched 9 new logs [26-07-2022 05:23:01]11677: WAF :: fetched 1 new logs [26-07-2022 05:31:01]11939: WAF :: fetched 1 new logs [26-07-2022 05:35:01]27671: WAF :: fetched 1 new logs [26-07-2022 05:36:02]31853: WAF :: fetched 1 new logs [26-07-2022 05:37:01]3458: WAF :: fetched 2 new logs [26-07-2022 05:41:01]20204: Checking for user cron vulnerabilities [26-07-2022 05:44:01]32109: Checking ditributed CMS bruteforce attacks [26-07-2022 05:50:02]23725: WAF :: fetched 1 new logs [26-07-2022 05:52:01]32110: WAF :: fetched 1 new logs [26-07-2022 05:54:01]8054: WAF :: fetched 1 new logs [26-07-2022 05:59:01]27831: WAF :: fetched 2 new logs [26-07-2022 06:12:02]16577: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658826722 [26-07-2022 06:12:02]16577: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 06:12:04]16577: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 06:12:04]16577: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-0612/20220726-061202-Yt-v4gpEuP7nqXDcolGWmgAAAAA [26-07-2022 06:12:04]16577: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 06:12:05]16577: WAF :: fetched 1 new logs [26-07-2022 06:15:01]28189: WAF :: fetched 1 new logs [26-07-2022 06:21:01]19929: WAF :: fetched 1 new logs [26-07-2022 06:36:02]17504: WAF :: fetched 1 new logs [26-07-2022 06:41:01]5101: Checking for user cron vulnerabilities [26-07-2022 06:44:02]17438: Checking ditributed CMS bruteforce attacks [26-07-2022 06:51:01]13637: WAF :: fetched 1 new logs [26-07-2022 07:09:02]22090: WAF :: fetched 1 new logs [26-07-2022 07:10:01]26108: WAF :: fetched 1 new logs [26-07-2022 07:12:01]1629: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658830321 [26-07-2022 07:12:01]1629: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 07:12:03]1629: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 07:12:04]1629: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-0712/20220726-071201-Yt-98aFcuJaCaPZAd8_-XQAAAAQ [26-07-2022 07:12:04]1629: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 07:12:04]1629: WAF :: fetched 1 new logs [26-07-2022 07:14:01]10233: WAF :: fetched 2 new logs [26-07-2022 07:19:01]29666: httpd.conf changed. Refreshing watchlist. [26-07-2022 07:20:02]1537: httpd.conf changed. Refreshing watchlist. [26-07-2022 07:29:01]6491: httpd.conf changed. Refreshing watchlist. [26-07-2022 07:41:01]22560: Checking for user cron vulnerabilities [26-07-2022 07:44:01]2566: Checking ditributed CMS bruteforce attacks [26-07-2022 07:45:01]: Checking for definition updates [26-07-2022 08:12:01]19362: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658833921 [26-07-2022 08:12:01]19362: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 08:12:03]19362: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 08:12:04]19362: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-0812/20220726-081201-Yt_MAfQtsidWHg-DDoLvQQAAAAA [26-07-2022 08:12:04]19362: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 08:41:01]7699: Checking for user cron vulnerabilities [26-07-2022 08:44:02]20098: Checking ditributed CMS bruteforce attacks [26-07-2022 09:08:02]21014: httpd.conf changed. Refreshing watchlist. [26-07-2022 09:12:02]4824: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658837522 [26-07-2022 09:12:02]4824: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 09:12:04]4824: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 09:12:04]4824: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-0912/20220726-091202-Yt_aErOekGq0VMYye5IBAAAAAAY [26-07-2022 09:12:04]4824: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [26-07-2022 09:12:05]4824: WAF :: fetched 1 new logs [26-07-2022 09:13:01]9060: WAF :: fetched 1 new logs [26-07-2022 09:15:01]17394: WAF :: fetched 1 new logs [26-07-2022 09:16:02]21430: WAF :: fetched 2 new logs [26-07-2022 09:21:01]10059: httpd.conf changed. Refreshing watchlist. [26-07-2022 09:28:02]6814: WAF :: fetched 5 new logs [26-07-2022 09:29:01]10957: WAF :: fetched 2 new logs [26-07-2022 09:32:02]23189: WAF :: fetched 2 new logs [26-07-2022 09:34:02]31239: WAF :: fetched 1 new logs [26-07-2022 09:35:02]3576: WAF :: fetched 3 new logs [26-07-2022 09:36:02]8030: WAF :: fetched 4 new logs [26-07-2022 09:39:01]20277: WAF :: fetched 2 new logs [26-07-2022 09:41:01]28447: Checking for user cron vulnerabilities [26-07-2022 09:44:02]8634: Checking ditributed CMS bruteforce attacks [26-07-2022 09:46:02]17290: WAF :: fetched 2 new logs [26-07-2022 09:49:02]29470: WAF :: fetched 2 new logs [26-07-2022 10:00:02]10404: WAF :: fetched 1 new logs [26-07-2022 10:02:02]19177: WAF :: fetched 1 new logs [26-07-2022 10:05:01]31833: WAF :: fetched 1 new logs [26-07-2022 10:10:02]19777: WAF :: fetched 1 new logs [26-07-2022 10:11:01]23902: WAF :: fetched 1 new logs [26-07-2022 10:12:02]27893: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658841122 [26-07-2022 10:12:02]27893: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 10:12:04]27893: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 10:12:04]27893: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-1012/20220726-101202-Yt_oIv3pOW3EESds8AM54wAAAAw [26-07-2022 10:12:04]27893: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 10:41:02]20795: Checking for user cron vulnerabilities [26-07-2022 10:44:01]707: Checking ditributed CMS bruteforce attacks [26-07-2022 11:08:03]2222: Performed RBL check for 23.111.136.34. [26-07-2022 11:12:01]22428: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658844721 [26-07-2022 11:12:01]22428: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 11:12:03]22428: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 11:12:03]22428: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-1112/20220726-111201-Yt_2MdC8n-RDduaXBChW0QAAABQ [26-07-2022 11:12:03]22428: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 11:41:01]17531: Checking for user cron vulnerabilities [26-07-2022 11:44:01]30095: Checking ditributed CMS bruteforce attacks [26-07-2022 11:45:01]1888: httpd.conf changed. Refreshing watchlist. [26-07-2022 11:50:02]23675: httpd.conf changed. Refreshing watchlist. [26-07-2022 11:59:01]29394: WAF :: fetched 2 new logs [26-07-2022 12:00:02]793: WAF :: fetched 3 new logs [26-07-2022 12:01:01]5859: WAF :: fetched 4 new logs [26-07-2022 12:03:01]14098: WAF :: fetched 1 new logs [26-07-2022 12:04:02]18130: WAF :: fetched 1 new logs [26-07-2022 12:05:01]22243: WAF :: fetched 1 new logs [26-07-2022 12:08:02]2756: WAF :: fetched 1 new logs [26-07-2022 12:11:01]15111: WAF :: fetched 1 new logs [26-07-2022 12:12:02]19296: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658848322 [26-07-2022 12:12:02]19296: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 12:12:04]19296: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 12:12:04]19296: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-1212/20220726-121202-YuAEQlv39qHZn9P5J09zZgAAAAU [26-07-2022 12:12:04]19296: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 12:12:04]19296: WAF :: fetched 1 new logs [26-07-2022 12:23:01]417: WAF :: fetched 1 new logs [26-07-2022 12:24:02]4789: WAF :: fetched 4 new logs [26-07-2022 12:25:01]9101: WAF :: fetched 1 new logs [26-07-2022 12:27:02]18159: WAF :: fetched 1 new logs [26-07-2022 12:36:02]22419: WAF :: fetched 4 new logs [26-07-2022 12:37:01]26973: WAF :: fetched 1 new logs [26-07-2022 12:40:02]6906: WAF :: fetched 3 new logs [26-07-2022 12:41:01]10870: Checking for user cron vulnerabilities [26-07-2022 12:44:01]23052: Checking ditributed CMS bruteforce attacks [26-07-2022 12:45:01]: Checking for software updates [26-07-2022 12:48:01]7571: WAF :: fetched 1 new logs [26-07-2022 12:49:02]11657: WAF :: fetched 2 new logs [26-07-2022 12:52:01]23879: WAF :: fetched 3 new logs [26-07-2022 12:53:01]28000: WAF :: fetched 5 new logs [26-07-2022 12:54:01]32047: WAF :: fetched 9 new logs [26-07-2022 12:55:01]3987: WAF :: fetched 5 new logs [26-07-2022 12:56:01]8201: WAF :: fetched 16 new logs [26-07-2022 12:57:01]12300: WAF :: fetched 12 new logs [26-07-2022 12:58:01]16549: WAF :: fetched 5 new logs [26-07-2022 12:59:01]20433: WAF :: fetched 12 new logs [26-07-2022 13:00:01]24078: WAF :: fetched 3 new logs [26-07-2022 13:01:01]28537: WAF :: fetched 16 new logs [26-07-2022 13:02:01]32683: WAF :: fetched 42 new logs [26-07-2022 13:03:01]4412: WAF :: fetched 34 new logs [26-07-2022 13:04:01]8480: WAF :: fetched 50 new logs [26-07-2022 13:05:02]12567: WAF :: fetched 61 new logs [26-07-2022 13:06:01]16715: WAF :: fetched 38 new logs [26-07-2022 13:07:01]20865: WAF :: fetched 53 new logs [26-07-2022 13:08:01]25480: WAF :: fetched 38 new logs [26-07-2022 13:09:02]29623: WAF :: fetched 40 new logs [26-07-2022 13:10:01]1454: WAF :: fetched 36 new logs [26-07-2022 13:11:02]5820: WAF :: fetched 29 new logs [26-07-2022 13:12:01]9957: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658851921 [26-07-2022 13:12:01]9957: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 13:12:03]9957: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 13:12:04]9957: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-1312/20220726-131201-YuASUUMD_S-Vzcd_iaDIZgAAAAw [26-07-2022 13:12:04]9957: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 13:12:04]9957: WAF :: fetched 4 new logs [26-07-2022 13:13:02]14019: WAF :: fetched 4 new logs [26-07-2022 13:14:01]18114: WAF :: fetched 6 new logs [26-07-2022 13:15:02]22101: WAF :: fetched 1 new logs [26-07-2022 13:16:01]26133: WAF :: fetched 8 new logs [26-07-2022 13:17:01]30175: WAF :: fetched 10 new logs [26-07-2022 13:18:02]2288: WAF :: fetched 10 new logs [26-07-2022 13:19:01]6639: WAF :: fetched 17 new logs [26-07-2022 13:20:02]10750: WAF :: fetched 4 new logs [26-07-2022 13:21:01]14874: WAF :: fetched 7 new logs [26-07-2022 13:22:02]19069: WAF :: fetched 5 new logs [26-07-2022 13:23:01]23115: WAF :: fetched 4 new logs [26-07-2022 13:24:02]27103: WAF :: fetched 6 new logs [26-07-2022 13:25:02]31097: WAF :: fetched 9 new logs [26-07-2022 13:26:01]2767: WAF :: fetched 12 new logs [26-07-2022 13:27:01]7020: WAF :: fetched 9 new logs [26-07-2022 13:28:01]11747: WAF :: fetched 7 new logs [26-07-2022 13:29:02]15716: WAF :: fetched 10 new logs [26-07-2022 13:30:01]19767: WAF :: fetched 2 new logs [26-07-2022 13:31:01]24082: WAF :: fetched 55 new logs [26-07-2022 13:32:01]28109: WAF :: fetched 104 new logs [26-07-2022 13:33:02]32142: WAF :: fetched 120 new logs [26-07-2022 13:34:02]4022: WAF :: fetched 103 new logs [26-07-2022 13:35:01]8079: WAF :: fetched 99 new logs [26-07-2022 13:36:01]12185: WAF :: fetched 95 new logs [26-07-2022 13:37:01]16391: WAF :: fetched 112 new logs [26-07-2022 13:38:01]20983: WAF :: fetched 151 new logs [26-07-2022 13:39:01]25052: WAF :: fetched 139 new logs [26-07-2022 13:40:01]29057: WAF :: fetched 152 new logs [26-07-2022 13:41:01]618: WAF :: fetched 97 new logs [26-07-2022 13:41:01]618: Checking for user cron vulnerabilities [26-07-2022 13:42:01]4966: WAF :: fetched 100 new logs [26-07-2022 13:43:02]9146: WAF :: fetched 97 new logs [26-07-2022 13:44:01]13236: Checking ditributed CMS bruteforce attacks [26-07-2022 13:44:02]13236: WAF :: fetched 62 new logs [26-07-2022 13:45:01]: Checking for definition updates [26-07-2022 13:45:02]17280: WAF :: fetched 55 new logs [26-07-2022 13:45:04]17247: Updated virus defnition : signatures.ndb [26-07-2022 13:46:02]21604: WAF :: fetched 54 new logs [26-07-2022 13:47:02]25789: WAF :: fetched 54 new logs [26-07-2022 13:48:01]30251: WAF :: fetched 49 new logs [26-07-2022 13:49:02]2044: WAF :: fetched 41 new logs [26-07-2022 13:50:01]6183: WAF :: fetched 45 new logs [26-07-2022 13:51:02]10271: WAF :: fetched 52 new logs [26-07-2022 13:52:01]14258: WAF :: fetched 40 new logs [26-07-2022 13:53:02]18190: WAF :: fetched 52 new logs [26-07-2022 13:54:02]22112: WAF :: fetched 47 new logs [26-07-2022 13:55:01]26063: WAF :: fetched 68 new logs [26-07-2022 13:56:01]30095: WAF :: fetched 75 new logs [26-07-2022 13:57:01]1749: WAF :: fetched 62 new logs [26-07-2022 13:58:01]5765: WAF :: fetched 57 new logs [26-07-2022 13:59:01]10296: WAF :: fetched 51 new logs [26-07-2022 14:00:02]14028: WAF :: fetched 62 new logs [26-07-2022 14:01:01]18504: WAF :: fetched 46 new logs [26-07-2022 14:02:02]22557: WAF :: fetched 43 new logs [26-07-2022 14:03:02]26556: WAF :: fetched 64 new logs [26-07-2022 14:04:01]30520: WAF :: fetched 63 new logs [26-07-2022 14:05:01]2252: WAF :: fetched 62 new logs [26-07-2022 14:06:02]6552: WAF :: fetched 69 new logs [26-07-2022 14:07:02]10781: WAF :: fetched 55 new logs [26-07-2022 14:08:01]15066: WAF :: fetched 62 new logs [26-07-2022 14:09:01]19474: WAF :: fetched 59 new logs [26-07-2022 14:10:02]23697: WAF :: fetched 32 new logs [26-07-2022 14:11:01]27972: WAF :: fetched 33 new logs [26-07-2022 14:12:01]32263: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658855521 [26-07-2022 14:12:01]32263: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 14:12:03]32263: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 14:12:04]32263: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-1412/20220726-141201-YuAgYVbwYYnMRh92iu41MQAAAAU [26-07-2022 14:12:04]32263: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 14:12:04]32263: WAF :: fetched 8 new logs [26-07-2022 14:13:02]4233: WAF :: fetched 1 new logs [26-07-2022 14:26:01]25254: WAF :: fetched 1 new logs [26-07-2022 14:28:01]840: WAF :: fetched 2 new logs [26-07-2022 14:29:01]5515: WAF :: fetched 4 new logs [26-07-2022 14:30:01]9713: WAF :: fetched 2 new logs [26-07-2022 14:31:01]13555: WAF :: fetched 2 new logs [26-07-2022 14:32:02]17831: WAF :: fetched 92 new logs [26-07-2022 14:33:01]21932: WAF :: fetched 182 new logs [26-07-2022 14:34:02]25941: WAF :: fetched 194 new logs [26-07-2022 14:35:01]29955: WAF :: fetched 203 new logs [26-07-2022 14:36:02]1659: WAF :: fetched 204 new logs [26-07-2022 14:37:01]5736: WAF :: fetched 217 new logs [26-07-2022 14:38:02]10017: WAF :: fetched 195 new logs [26-07-2022 14:39:01]14273: WAF :: fetched 217 new logs [26-07-2022 14:40:02]18396: WAF :: fetched 244 new logs [26-07-2022 14:41:01]22115: WAF :: fetched 230 new logs [26-07-2022 14:41:01]22115: Checking for user cron vulnerabilities [26-07-2022 14:42:02]26165: WAF :: fetched 177 new logs [26-07-2022 14:43:01]29943: WAF :: fetched 188 new logs [26-07-2022 14:44:01]1444: Checking ditributed CMS bruteforce attacks [26-07-2022 14:44:02]1444: WAF :: fetched 223 new logs [26-07-2022 14:45:01]5443: WAF :: fetched 230 new logs [26-07-2022 14:46:02]9580: WAF :: fetched 274 new logs [26-07-2022 14:47:02]13623: WAF :: fetched 288 new logs [26-07-2022 14:48:01]17533: WAF :: fetched 338 new logs [26-07-2022 14:49:02]22030: WAF :: fetched 292 new logs [26-07-2022 14:50:01]25940: WAF :: fetched 312 new logs [26-07-2022 14:51:02]29960: WAF :: fetched 267 new logs [26-07-2022 14:52:01]1230: WAF :: fetched 291 new logs [26-07-2022 14:53:02]5380: WAF :: fetched 306 new logs [26-07-2022 14:53:02]5395: Updated license status via CDN [26-07-2022 14:54:01]9180: WAF :: fetched 260 new logs [26-07-2022 14:55:02]12829: WAF :: fetched 333 new logs [26-07-2022 14:56:01]16917: WAF :: fetched 326 new logs [26-07-2022 14:57:02]20684: WAF :: fetched 301 new logs [26-07-2022 14:58:01]24318: WAF :: fetched 238 new logs [26-07-2022 14:59:02]28411: WAF :: fetched 242 new logs [26-07-2022 15:00:01]31902: WAF :: fetched 267 new logs [26-07-2022 15:01:01]4293: Reseting cPGuard inotify settings [26-07-2022 15:01:01]4288: WAF :: fetched 250 new logs [26-07-2022 15:02:02]8465: WAF :: fetched 231 new logs [26-07-2022 15:03:01]12429: WAF :: fetched 245 new logs [26-07-2022 15:04:02]16291: WAF :: fetched 70 new logs [26-07-2022 15:05:01]20351: WAF :: fetched 62 new logs [26-07-2022 15:06:02]24399: WAF :: fetched 59 new logs [26-07-2022 15:07:01]28337: WAF :: fetched 49 new logs [26-07-2022 15:08:01]32382: WAF :: fetched 55 new logs [26-07-2022 15:09:01]4076: WAF :: fetched 55 new logs [26-07-2022 15:10:02]8747: WAF :: fetched 12 new logs [26-07-2022 15:12:02]16674: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658859122 [26-07-2022 15:12:02]16674: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 15:12:04]16674: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 15:12:04]16674: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-1512/20220726-151202-YuAucqd4fnbvXmaQC9pe6AAAAAg [26-07-2022 15:12:04]16674: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 15:12:04]16674: WAF :: fetched 1 new logs [26-07-2022 15:15:01]28471: WAF :: fetched 1 new logs [26-07-2022 15:19:01]12457: WAF :: fetched 1 new logs [26-07-2022 15:22:01]24765: WAF :: fetched 2 new logs [26-07-2022 15:24:01]318: WAF :: fetched 1 new logs [26-07-2022 15:25:02]4541: WAF :: fetched 1 new logs [26-07-2022 15:29:02]20548: WAF :: fetched 2 new logs [26-07-2022 15:33:01]4543: WAF :: fetched 1 new logs [26-07-2022 15:37:02]20478: WAF :: fetched 1 new logs [26-07-2022 15:41:02]4763: Checking for user cron vulnerabilities [26-07-2022 15:44:01]16638: Checking ditributed CMS bruteforce attacks [26-07-2022 15:47:02]28736: WAF :: fetched 3 new logs [26-07-2022 15:49:02]4498: WAF :: fetched 1 new logs [26-07-2022 15:51:01]13151: httpd.conf changed. Refreshing watchlist. [26-07-2022 15:53:01]21200: WAF :: fetched 8 new logs [26-07-2022 15:54:02]25213: WAF :: fetched 32 new logs [26-07-2022 15:55:01]29078: WAF :: fetched 38 new logs [26-07-2022 15:56:02]630: WAF :: fetched 40 new logs [26-07-2022 15:57:01]4798: WAF :: fetched 36 new logs [26-07-2022 15:58:02]8959: WAF :: fetched 32 new logs [26-07-2022 15:59:01]12975: WAF :: fetched 13 new logs [26-07-2022 16:02:01]25690: WAF :: fetched 2 new logs [26-07-2022 16:06:02]9600: WAF :: fetched 57 new logs [26-07-2022 16:07:01]14375: WAF :: fetched 65 new logs [26-07-2022 16:08:02]19309: WAF :: fetched 51 new logs [26-07-2022 16:09:01]24145: WAF :: fetched 47 new logs [26-07-2022 16:10:02]28953: WAF :: fetched 46 new logs [26-07-2022 16:11:01]1973: WAF :: fetched 48 new logs [26-07-2022 16:12:02]7025: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658862722 [26-07-2022 16:12:02]7025: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 16:12:04]7025: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 16:12:04]7025: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-1612/20220726-161202-YuA8giNOv42zvf8lR5YiLQAAAAk [26-07-2022 16:12:04]7025: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 16:12:04]7025: WAF :: fetched 10 new logs [26-07-2022 16:13:01]11476: WAF :: fetched 1 new logs [26-07-2022 16:19:01]8262: WAF :: fetched 19 new logs [26-07-2022 16:20:02]13014: WAF :: fetched 60 new logs [26-07-2022 16:21:01]18377: WAF :: fetched 63 new logs [26-07-2022 16:22:02]23328: WAF :: fetched 34 new logs [26-07-2022 16:23:01]28242: WAF :: fetched 24 new logs [26-07-2022 16:27:01]15402: WAF :: fetched 3 new logs [26-07-2022 16:28:02]20372: WAF :: fetched 31 new logs [26-07-2022 16:29:01]25224: WAF :: fetched 21 new logs [26-07-2022 16:32:01]8226: WAF :: fetched 2 new logs [26-07-2022 16:33:01]13142: WAF :: fetched 1 new logs [26-07-2022 16:35:02]22848: WAF :: fetched 4 new logs [26-07-2022 16:36:01]27709: WAF :: fetched 3 new logs [26-07-2022 16:37:02]32624: WAF :: fetched 2 new logs [26-07-2022 16:40:01]15191: WAF :: fetched 1 new logs [26-07-2022 16:41:02]20718: Checking for user cron vulnerabilities [26-07-2022 16:42:01]25406: WAF :: fetched 20 new logs [26-07-2022 16:43:02]30504: WAF :: fetched 37 new logs [26-07-2022 16:44:01]2987: Checking ditributed CMS bruteforce attacks [26-07-2022 16:44:01]2987: WAF :: fetched 37 new logs [26-07-2022 16:45:02]7939: WAF :: fetched 34 new logs [26-07-2022 16:46:01]12820: WAF :: fetched 41 new logs [26-07-2022 16:47:02]17654: WAF :: fetched 35 new logs [26-07-2022 16:48:01]22554: WAF :: fetched 27 new logs [26-07-2022 16:49:02]27399: WAF :: fetched 29 new logs [26-07-2022 16:50:01]32109: WAF :: fetched 24 new logs [26-07-2022 16:51:02]5275: WAF :: fetched 24 new logs [26-07-2022 16:52:01]10214: WAF :: fetched 24 new logs [26-07-2022 16:53:01]15126: WAF :: fetched 24 new logs [26-07-2022 16:54:02]20036: WAF :: fetched 32 new logs [26-07-2022 16:55:02]24833: WAF :: fetched 13 new logs [26-07-2022 16:56:01]29663: WAF :: fetched 3 new logs [26-07-2022 16:59:02]12095: WAF :: fetched 1 new logs [26-07-2022 17:00:01]16593: WAF :: fetched 35 new logs [26-07-2022 17:01:01]22349: WAF :: fetched 38 new logs [26-07-2022 17:02:02]27192: WAF :: fetched 37 new logs [26-07-2022 17:03:01]32058: WAF :: fetched 39 new logs [26-07-2022 17:04:02]4686: WAF :: fetched 37 new logs [26-07-2022 17:05:01]9578: WAF :: fetched 33 new logs [26-07-2022 17:06:02]14485: WAF :: fetched 32 new logs [26-07-2022 17:07:01]19144: WAF :: fetched 34 new logs [26-07-2022 17:08:02]24019: WAF :: fetched 37 new logs [26-07-2022 17:09:01]28821: WAF :: fetched 27 new logs [26-07-2022 17:10:02]1314: WAF :: fetched 33 new logs [26-07-2022 17:11:02]6957: WAF :: fetched 35 new logs [26-07-2022 17:12:01]11737: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658866321 [26-07-2022 17:12:01]11737: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 17:12:03]11737: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 17:12:04]11737: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-1712/20220726-171201-YuBKkY5pHWZWYQ5bpupchAAAAA4 [26-07-2022 17:12:04]11737: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 17:12:04]11737: WAF :: fetched 9 new logs [26-07-2022 17:13:02]16738: WAF :: fetched 2 new logs [26-07-2022 17:16:01]31015: WAF :: fetched 1 new logs [26-07-2022 17:17:02]3608: WAF :: fetched 1 new logs [26-07-2022 17:18:01]8476: WAF :: fetched 37 new logs [26-07-2022 17:19:02]13331: WAF :: fetched 34 new logs [26-07-2022 17:20:01]18182: WAF :: fetched 28 new logs [26-07-2022 17:21:02]23067: WAF :: fetched 29 new logs [26-07-2022 17:22:01]27852: WAF :: fetched 29 new logs [26-07-2022 17:23:02]493: WAF :: fetched 31 new logs [26-07-2022 17:24:01]5347: WAF :: fetched 26 new logs [26-07-2022 17:25:02]10330: WAF :: fetched 30 new logs [26-07-2022 17:26:01]15114: WAF :: fetched 31 new logs [26-07-2022 17:27:02]19915: WAF :: fetched 24 new logs [26-07-2022 17:28:01]24820: WAF :: fetched 32 new logs [26-07-2022 17:29:02]29605: WAF :: fetched 27 new logs [26-07-2022 17:30:01]2136: WAF :: fetched 17 new logs [26-07-2022 17:31:02]7274: WAF :: fetched 1 new logs [26-07-2022 17:32:01]12995: WAF :: fetched 1 new logs [26-07-2022 17:37:01]5367: WAF :: fetched 25 new logs [26-07-2022 17:38:02]10507: WAF :: fetched 59 new logs [26-07-2022 17:39:02]15263: WAF :: fetched 58 new logs [26-07-2022 17:40:01]20118: WAF :: fetched 26 new logs [26-07-2022 17:41:02]24945: WAF :: fetched 3 new logs [26-07-2022 17:41:02]24945: Checking for user cron vulnerabilities [26-07-2022 17:42:01]30149: WAF :: fetched 7 new logs [26-07-2022 17:43:01]2603: WAF :: fetched 47 new logs [26-07-2022 17:44:01]7643: Checking ditributed CMS bruteforce attacks [26-07-2022 17:44:01]7643: WAF :: fetched 84 new logs [26-07-2022 17:45:01]12384: WAF :: fetched 104 new logs [26-07-2022 17:46:02]17244: WAF :: fetched 123 new logs [26-07-2022 17:47:01]21958: WAF :: fetched 101 new logs [26-07-2022 17:48:02]26907: WAF :: fetched 62 new logs [26-07-2022 17:49:01]31569: WAF :: fetched 31 new logs [26-07-2022 17:51:01]9060: WAF :: fetched 2 new logs [26-07-2022 17:55:01]28807: WAF :: fetched 1 new logs [26-07-2022 17:59:01]16190: WAF :: fetched 1 new logs [26-07-2022 18:03:01]4053: WAF :: fetched 1 new logs [26-07-2022 18:05:02]13913: WAF :: fetched 1 new logs [26-07-2022 18:12:01]15384: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658869921 [26-07-2022 18:12:01]15384: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 18:12:03]15384: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 18:12:04]15384: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-1812/20220726-181201-YuBYoVi2hgwM2U7u8uDA1QAAAAA [26-07-2022 18:12:04]15384: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 18:12:04]15384: WAF :: fetched 1 new logs [26-07-2022 18:15:02]29759: WAF :: fetched 1 new logs [26-07-2022 18:19:01]16731: WAF :: fetched 1 new logs [26-07-2022 18:21:01]26417: WAF :: fetched 2 new logs [26-07-2022 18:22:02]31680: WAF :: fetched 4 new logs [26-07-2022 18:29:01]316: WAF :: fetched 3 new logs [26-07-2022 18:30:01]5333: WAF :: fetched 1 new logs [26-07-2022 18:33:02]20338: WAF :: fetched 1 new logs [26-07-2022 18:39:02]16310: WAF :: fetched 1 new logs [26-07-2022 18:41:02]25849: Checking for user cron vulnerabilities [26-07-2022 18:43:02]3627: WAF :: fetched 1 new logs [26-07-2022 18:44:01]8561: Checking ditributed CMS bruteforce attacks [26-07-2022 18:48:01]27766: WAF :: fetched 1 new logs [26-07-2022 18:49:01]32459: WAF :: fetched 1 new logs [26-07-2022 18:54:02]24550: WAF :: fetched 1 new logs [26-07-2022 18:55:01]29169: WAF :: fetched 2 new logs [26-07-2022 19:12:01]14550: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658873521 [26-07-2022 19:12:01]14550: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 19:12:03]14550: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 19:12:04]14550: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-1912/20220726-191201-YuBmscz00UAoxAVHHTQQvgAAAAA [26-07-2022 19:12:04]14550: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 19:12:04]14550: WAF :: fetched 2 new logs [26-07-2022 19:18:01]11817: WAF :: fetched 1 new logs [26-07-2022 19:19:01]16642: WAF :: fetched 1 new logs [26-07-2022 19:21:01]26405: WAF :: fetched 1 new logs [26-07-2022 19:22:02]31172: WAF :: fetched 2 new logs [26-07-2022 19:25:01]14030: WAF :: fetched 1 new logs [26-07-2022 19:28:02]28481: WAF :: fetched 1 new logs [26-07-2022 19:31:01]10777: WAF :: fetched 1 new logs [26-07-2022 19:32:02]15554: WAF :: fetched 1 new logs [26-07-2022 19:34:02]25291: WAF :: fetched 1 new logs [26-07-2022 19:35:01]30053: WAF :: fetched 3 new logs [26-07-2022 19:36:02]2595: WAF :: fetched 1 new logs [26-07-2022 19:40:02]21720: WAF :: fetched 3 new logs [26-07-2022 19:41:01]26520: Checking for user cron vulnerabilities [26-07-2022 19:42:02]31266: WAF :: fetched 1 new logs [26-07-2022 19:44:02]9214: Checking ditributed CMS bruteforce attacks [26-07-2022 19:45:01]: Checking for definition updates [26-07-2022 19:45:06]13910: Updated virus defnition : malware.expert.ndb [26-07-2022 19:45:07]13910: Updated virus defnition : malware.expert.hdb [26-07-2022 19:49:02]352: WAF :: fetched 2 new logs [26-07-2022 19:50:01]5215: WAF :: fetched 2 new logs [26-07-2022 19:55:02]29837: WAF :: fetched 1 new logs [26-07-2022 19:57:02]7264: WAF :: fetched 1 new logs [26-07-2022 19:58:01]11937: WAF :: fetched 3 new logs [26-07-2022 20:00:01]21292: WAF :: fetched 1 new logs [26-07-2022 20:03:02]3732: WAF :: fetched 1 new logs [26-07-2022 20:05:02]13960: WAF :: fetched 1 new logs [26-07-2022 20:06:01]18813: WAF :: fetched 1 new logs [26-07-2022 20:08:01]28267: WAF :: fetched 1 new logs [26-07-2022 20:10:01]5527: WAF :: fetched 1 new logs [26-07-2022 20:12:02]15331: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658877122 [26-07-2022 20:12:02]15331: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 20:12:04]15331: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 20:12:04]15331: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-2012/20220726-201202-YuB0wuRyzouXkJu9ndc25wAAAAI [26-07-2022 20:12:04]15331: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 20:12:05]15331: WAF :: fetched 2 new logs [26-07-2022 20:16:01]2914: WAF :: fetched 2 new logs [26-07-2022 20:29:02]1286: WAF :: fetched 3 new logs [26-07-2022 20:32:02]15337: WAF :: fetched 2 new logs [26-07-2022 20:39:01]16985: WAF :: fetched 1 new logs [26-07-2022 20:41:01]26578: Checking for user cron vulnerabilities [26-07-2022 20:43:01]3763: WAF :: fetched 1 new logs [26-07-2022 20:44:01]8675: Checking ditributed CMS bruteforce attacks [26-07-2022 20:49:01]32717: WAF :: fetched 1 new logs [26-07-2022 20:55:02]29490: WAF :: fetched 3 new logs [26-07-2022 21:00:02]20760: WAF :: fetched 1 new logs [26-07-2022 21:01:01]26010: WAF :: fetched 1 new logs [26-07-2022 21:02:01]30735: WAF :: fetched 1 new logs [26-07-2022 21:06:01]17945: WAF :: fetched 2 new logs [26-07-2022 21:07:02]22556: WAF :: fetched 3 new logs [26-07-2022 21:09:02]31977: WAF :: fetched 1 new logs [26-07-2022 21:12:01]13893: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658880721 [26-07-2022 21:12:01]13893: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 21:12:03]13893: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 21:12:04]13893: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-2112/20220726-211201-YuCC0VGxMH7wFfxDuZ4KuAAAAAE [26-07-2022 21:12:04]13893: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 21:12:04]13893: WAF :: fetched 1 new logs [26-07-2022 21:13:02]18561: WAF :: fetched 4 new logs [26-07-2022 21:19:02]15296: WAF :: fetched 1 new logs [26-07-2022 21:32:02]12671: WAF :: fetched 2 new logs [26-07-2022 21:41:01]23742: Checking for user cron vulnerabilities [26-07-2022 21:44:02]5599: Checking ditributed CMS bruteforce attacks [26-07-2022 21:53:02]16627: WAF :: fetched 1 new logs [26-07-2022 21:54:01]21396: WAF :: fetched 3 new logs [26-07-2022 21:57:02]3722: WAF :: fetched 12 new logs [26-07-2022 21:58:01]8571: WAF :: fetched 2 new logs [26-07-2022 21:59:02]13373: WAF :: fetched 2 new logs [26-07-2022 22:01:02]23026: WAF :: fetched 2 new logs [26-07-2022 22:06:01]15096: WAF :: fetched 1 new logs [26-07-2022 22:07:01]19678: WAF :: fetched 2 new logs [26-07-2022 22:07:09]19666: Performing Domain reputation checks [26-07-2022 22:08:02]24484: WAF :: fetched 2 new logs [26-07-2022 22:10:02]1552: WAF :: fetched 24 new logs [26-07-2022 22:11:01]6546: WAF :: fetched 119 new logs [26-07-2022 22:12:02]11232: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658884322 [26-07-2022 22:12:02]11232: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 22:12:04]11232: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 22:12:04]11232: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-2212/20220726-221202-YuCQ4vlS8cjyJoeTDWp8JgAAAAY [26-07-2022 22:12:04]11232: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 22:12:04]11232: WAF :: fetched 102 new logs [26-07-2022 22:13:01]15943: WAF :: fetched 85 new logs [26-07-2022 22:14:02]20768: WAF :: fetched 216 new logs [26-07-2022 22:15:01]25417: WAF :: fetched 264 new logs [26-07-2022 22:16:02]30706: WAF :: fetched 301 new logs [26-07-2022 22:17:01]3039: WAF :: fetched 222 new logs [26-07-2022 22:18:01]8027: WAF :: fetched 145 new logs [26-07-2022 22:19:01]12782: WAF :: fetched 179 new logs [26-07-2022 22:20:02]17586: WAF :: fetched 155 new logs [26-07-2022 22:21:01]22532: WAF :: fetched 128 new logs [26-07-2022 22:22:01]27250: WAF :: fetched 38 new logs [26-07-2022 22:23:01]31940: WAF :: fetched 27 new logs [26-07-2022 22:31:02]6217: WAF :: fetched 33 new logs [26-07-2022 22:32:01]10855: WAF :: fetched 66 new logs [26-07-2022 22:33:02]15648: WAF :: fetched 59 new logs [26-07-2022 22:34:01]20442: WAF :: fetched 52 new logs [26-07-2022 22:35:02]25199: WAF :: fetched 120 new logs [26-07-2022 22:36:02]30475: WAF :: fetched 112 new logs [26-07-2022 22:37:01]2876: WAF :: fetched 118 new logs [26-07-2022 22:38:02]7788: WAF :: fetched 78 new logs [26-07-2022 22:40:02]17438: WAF :: fetched 55 new logs [26-07-2022 22:41:01]21878: WAF :: fetched 121 new logs [26-07-2022 22:41:01]21878: Checking for user cron vulnerabilities [26-07-2022 22:44:02]4084: Checking ditributed CMS bruteforce attacks [26-07-2022 22:45:01]8949: WAF :: fetched 2 new logs [26-07-2022 22:46:01]14218: WAF :: fetched 1 new logs [26-07-2022 22:47:01]18960: WAF :: fetched 1 new logs [26-07-2022 22:51:01]5995: WAF :: fetched 3 new logs [26-07-2022 22:52:02]10834: WAF :: fetched 2 new logs [26-07-2022 22:57:01]2723: WAF :: fetched 1 new logs [26-07-2022 22:58:01]7632: WAF :: fetched 4 new logs [26-07-2022 22:59:02]12438: WAF :: fetched 3 new logs [26-07-2022 23:00:01]16902: WAF :: fetched 1 new logs [26-07-2022 23:08:07]19502: Performed RBL check for 23.111.136.34. [26-07-2022 23:11:01]6535: WAF :: fetched 1 new logs [26-07-2022 23:12:02]11270: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658887922 [26-07-2022 23:12:02]11270: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [26-07-2022 23:12:04]11270: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [26-07-2022 23:12:04]11270: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220726/20220726-2312/20220726-231202-YuCe8k-97aogVh3xosA9agAAAAM [26-07-2022 23:12:04]11270: WAF :: No suitable log file found. Using SQLite.. [26-07-2022 23:12:05]11270: WAF :: fetched 2 new logs [26-07-2022 23:19:01]13106: WAF :: fetched 1 new logs [26-07-2022 23:28:01]24280: WAF :: fetched 1 new logs [26-07-2022 23:29:02]29008: WAF :: fetched 2 new logs [26-07-2022 23:32:01]11029: WAF :: fetched 2 new logs [26-07-2022 23:34:01]20620: WAF :: fetched 2 new logs [26-07-2022 23:41:01]21964: Checking for user cron vulnerabilities [26-07-2022 23:44:01]3859: Checking ditributed CMS bruteforce attacks [26-07-2022 23:46:02]13770: WAF :: fetched 1 new logs [26-07-2022 23:47:01]18917: WAF :: fetched 1 new logs [26-07-2022 23:48:02]23750: WAF :: fetched 5 new logs [26-07-2022 23:49:01]28629: WAF :: fetched 1 new logs [26-07-2022 23:50:02]1178: WAF :: fetched 2 new logs [26-07-2022 23:53:01]15880: WAF :: fetched 1 new logs [26-07-2022 23:55:01]25544: WAF :: fetched 1 new logs [26-07-2022 23:56:01]30447: WAF :: fetched 1 new logs [26-07-2022 23:56:01]30437: httpd.conf changed. Refreshing watchlist. [27-07-2022 00:01:01]22866: httpd.conf changed. Refreshing watchlist. [27-07-2022 00:01:05]22892: Sending daily report for July 27, 2022 [27-07-2022 00:05:01]9783: Deleted 0 entries older than 6 MONTH from scanner_logs [27-07-2022 00:05:01]9783: Deleted 0 files from Quarantine [27-07-2022 00:12:01]11109: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658891521 [27-07-2022 00:12:01]11109: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 00:12:03]11109: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 00:12:04]11109: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-0012/20220727-001201-YuCtAYW2_GFItMSob7ErBAAAAAY [27-07-2022 00:12:04]11109: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [27-07-2022 00:12:04]11109: WAF :: fetched 1 new logs [27-07-2022 00:13:02]15950: WAF :: fetched 497 new logs [27-07-2022 00:14:02]20597: WAF :: fetched 653 new logs [27-07-2022 00:15:02]25392: WAF :: fetched 730 new logs [27-07-2022 00:16:02]30237: WAF :: fetched 502 new logs [27-07-2022 00:17:02]2736: WAF :: fetched 82 new logs [27-07-2022 00:18:02]8040: WAF :: fetched 82 new logs [27-07-2022 00:19:02]12733: WAF :: fetched 12 new logs [27-07-2022 00:21:02]22355: WAF :: fetched 1 new logs [27-07-2022 00:32:01]11111: WAF :: fetched 1 new logs [27-07-2022 00:33:02]15883: WAF :: fetched 2 new logs [27-07-2022 00:41:02]21960: Checking for user cron vulnerabilities [27-07-2022 00:43:02]31384: WAF :: fetched 3 new logs [27-07-2022 00:44:01]3839: Checking ditributed CMS bruteforce attacks [27-07-2022 00:45:01]: Checking for software updates [27-07-2022 01:01:01]22594: WAF :: fetched 2 new logs [27-07-2022 01:04:01]5411: WAF :: fetched 2 new logs [27-07-2022 01:05:02]10656: WAF :: fetched 1 new logs [27-07-2022 01:06:01]15780: WAF :: fetched 2 new logs [27-07-2022 01:12:01]13388: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658895121 [27-07-2022 01:12:01]13388: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 01:12:03]13388: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 01:12:04]13388: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-0112/20220727-011201-YuC7EepAdiw4E9QYh8xfdgAAAAc [27-07-2022 01:12:04]13388: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 01:12:05]13388: WAF :: fetched 1862 new logs [27-07-2022 01:17:02]6200: WAF :: fetched 4 new logs [27-07-2022 01:27:01]25181: WAF :: fetched 1 new logs [27-07-2022 01:28:02]30084: WAF :: fetched 1 new logs [27-07-2022 01:37:01]11846: WAF :: fetched 1 new logs [27-07-2022 01:41:01]31780: Checking for user cron vulnerabilities [27-07-2022 01:44:01]14344: Checking ditributed CMS bruteforce attacks [27-07-2022 01:45:01]: Checking for definition updates [27-07-2022 01:48:01]1395: WAF :: fetched 1 new logs [27-07-2022 02:05:01]20654: WAF :: fetched 1 new logs [27-07-2022 02:12:01]22860: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658898721 [27-07-2022 02:12:01]22860: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 02:12:03]22860: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 02:12:04]22860: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-0212/20220727-021201-YuDJIdVcQTQdngrczOuzdQAAAA0 [27-07-2022 02:12:04]22860: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [27-07-2022 02:12:05]22860: WAF :: fetched 1 new logs [27-07-2022 02:13:01]27599: WAF :: fetched 2 new logs [27-07-2022 02:14:02]32525: WAF :: fetched 36 new logs [27-07-2022 02:15:01]4994: WAF :: fetched 41 new logs [27-07-2022 02:16:02]10088: WAF :: fetched 42 new logs [27-07-2022 02:17:01]14830: WAF :: fetched 43 new logs [27-07-2022 02:18:02]19667: WAF :: fetched 43 new logs [27-07-2022 02:19:01]24844: WAF :: fetched 33 new logs [27-07-2022 02:22:02]7325: WAF :: fetched 1 new logs [27-07-2022 02:23:01]12065: WAF :: fetched 2 new logs [27-07-2022 02:25:01]21690: WAF :: fetched 14 new logs [27-07-2022 02:26:02]26631: WAF :: fetched 75 new logs [27-07-2022 02:27:01]31365: WAF :: fetched 75 new logs [27-07-2022 02:28:02]4099: WAF :: fetched 72 new logs [27-07-2022 02:36:01]12490: WAF :: fetched 2 new logs [27-07-2022 02:37:02]17480: WAF :: fetched 1 new logs [27-07-2022 02:40:02]391: WAF :: fetched 1 new logs [27-07-2022 02:41:01]5948: Checking for user cron vulnerabilities [27-07-2022 02:42:02]11222: WAF :: fetched 1 new logs [27-07-2022 02:44:02]20820: Checking ditributed CMS bruteforce attacks [27-07-2022 02:52:02]28654: WAF :: fetched 3 new logs [27-07-2022 02:53:02]1063: Updated license status via CDN [27-07-2022 03:00:04]4048: Found and updated 32 CMS installations [27-07-2022 03:00:40]4048: Wordpress installation #4 labvida.net has errors [27-07-2022 03:03:23]4048: Sending CMS version vulnerability report emails to cpanel users [27-07-2022 03:03:26]4048: Checking wordpress installations for suspicious directories [27-07-2022 03:04:29]20290: Sending CMS version vulnerability report emails to cpanel users [27-07-2022 03:04:32]20290: Checking wordpress installations for suspicious directories [27-07-2022 03:12:01]625: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658902321 [27-07-2022 03:12:01]625: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 03:12:03]625: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 03:12:04]625: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-0312/20220727-031201-YuDXMUqs5c2eROll3bExxwAAAAw [27-07-2022 03:12:04]625: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 03:12:04]625: WAF :: fetched 382 new logs [27-07-2022 03:17:02]25002: WAF :: fetched 1 new logs [27-07-2022 03:23:01]6379: WAF :: fetched 2 new logs [27-07-2022 03:31:01]32501: WAF :: fetched 37 new logs [27-07-2022 03:32:02]5020: WAF :: fetched 41 new logs [27-07-2022 03:33:01]9804: WAF :: fetched 45 new logs [27-07-2022 03:34:02]14531: WAF :: fetched 44 new logs [27-07-2022 03:35:01]19289: WAF :: fetched 45 new logs [27-07-2022 03:36:02]24332: WAF :: fetched 42 new logs [27-07-2022 03:37:01]29016: WAF :: fetched 46 new logs [27-07-2022 03:38:02]1452: WAF :: fetched 34 new logs [27-07-2022 03:41:01]16430: Checking for user cron vulnerabilities [27-07-2022 03:43:01]26044: WAF :: fetched 1 new logs [27-07-2022 03:44:01]30526: Checking ditributed CMS bruteforce attacks [27-07-2022 03:50:01]26938: WAF :: fetched 1 new logs [27-07-2022 04:07:02]13268: WAF :: fetched 14 new logs [27-07-2022 04:08:01]17952: WAF :: fetched 56 new logs [27-07-2022 04:09:01]22747: WAF :: fetched 53 new logs [27-07-2022 04:10:02]27472: WAF :: fetched 56 new logs [27-07-2022 04:11:01]351: WAF :: fetched 48 new logs [27-07-2022 04:12:02]5423: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658905922 [27-07-2022 04:12:02]5423: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 04:12:04]5423: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 04:12:04]5423: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-0412/20220727-041202-YuDlQnzjt0Dk1HPREF7j-wAAAAA [27-07-2022 04:12:04]5423: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 04:12:05]5423: WAF :: fetched 60 new logs [27-07-2022 04:13:01]10264: WAF :: fetched 41 new logs [27-07-2022 04:14:02]14989: WAF :: fetched 1 new logs [27-07-2022 04:34:02]15980: WAF :: fetched 3 new logs [27-07-2022 04:35:01]20662: WAF :: fetched 4 new logs [27-07-2022 04:36:02]25516: WAF :: fetched 3 new logs [27-07-2022 04:40:02]12703: WAF :: fetched 2 new logs [27-07-2022 04:41:01]17918: WAF :: fetched 4 new logs [27-07-2022 04:41:01]17918: Checking for user cron vulnerabilities [27-07-2022 04:43:01]27834: WAF :: fetched 1 new logs [27-07-2022 04:44:01]32762: Checking ditributed CMS bruteforce attacks [27-07-2022 04:45:01]5242: WAF :: fetched 1 new logs [27-07-2022 04:52:01]7306: WAF :: fetched 2 new logs [27-07-2022 04:59:02]8793: WAF :: fetched 1 new logs [27-07-2022 05:01:42]18543: Starting daily scan on files updated in last 24 hrs [27-07-2022 05:05:02]5905: WAF :: fetched 1 new logs [27-07-2022 05:08:01]20363: WAF :: fetched 2 new logs [27-07-2022 05:12:01]8234: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658909521 [27-07-2022 05:12:01]8234: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 05:12:03]8234: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 05:12:04]8234: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-0512/20220727-051201-YuDzUdVcQTQdngrczOu2sgAAAA0 [27-07-2022 05:12:04]8234: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [27-07-2022 05:12:04]8234: WAF :: fetched 1 new logs [27-07-2022 05:14:01]17718: WAF :: fetched 1 new logs [27-07-2022 05:33:02]13856: WAF :: fetched 1 new logs [27-07-2022 05:34:01]18608: WAF :: fetched 1 new logs [27-07-2022 05:39:02]10719: WAF :: fetched 1 new logs [27-07-2022 05:41:02]20162: Checking for user cron vulnerabilities [27-07-2022 05:44:01]2678: Checking ditributed CMS bruteforce attacks [27-07-2022 05:46:01]12504: WAF :: fetched 2 new logs [27-07-2022 05:55:02]23754: WAF :: fetched 1 new logs [27-07-2022 06:05:01]8564: WAF :: fetched 1 new logs [27-07-2022 06:06:02]13365: WAF :: fetched 1 new logs [27-07-2022 06:12:01]10006: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658913121 [27-07-2022 06:12:01]10006: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 06:12:03]10006: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 06:12:03]10006: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-0612/20220727-061201-YuEBYfgswdITe5RDbnQ4hAAAAAM [27-07-2022 06:12:03]10006: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [27-07-2022 06:12:04]10006: WAF :: fetched 1 new logs [27-07-2022 06:13:02]15481: WAF :: fetched 1 new logs [27-07-2022 06:15:02]24946: WAF :: fetched 1 new logs [27-07-2022 06:16:01]29916: WAF :: fetched 1 new logs [27-07-2022 06:26:01]14886: WAF :: fetched 1 new logs [27-07-2022 06:27:02]19839: WAF :: fetched 1 new logs [27-07-2022 06:33:02]17112: WAF :: fetched 2 new logs [27-07-2022 06:35:02]26673: WAF :: fetched 1 new logs [27-07-2022 06:38:02]9054: WAF :: fetched 160 new logs [27-07-2022 06:39:02]13889: WAF :: fetched 75 new logs [27-07-2022 06:41:01]23438: Checking for user cron vulnerabilities [27-07-2022 06:44:01]6226: Checking ditributed CMS bruteforce attacks [27-07-2022 06:45:02]10981: WAF :: fetched 1 new logs [27-07-2022 07:00:02]18666: WAF :: fetched 2 new logs [27-07-2022 07:05:02]11682: WAF :: fetched 1 new logs [27-07-2022 07:12:02]12858: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658916722 [27-07-2022 07:12:02]12858: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 07:12:04]12858: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 07:12:04]12858: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-0712/20220727-071202-YuEPcrnfZ2PjGkHL7su7FAAAAAg [27-07-2022 07:12:04]12858: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 07:12:04]12858: WAF :: fetched 210 new logs [27-07-2022 07:16:01]32541: WAF :: fetched 1 new logs [27-07-2022 07:25:02]12009: WAF :: fetched 4 new logs [27-07-2022 07:30:02]3853: WAF :: fetched 3 new logs [27-07-2022 07:31:01]8870: WAF :: fetched 1 new logs [27-07-2022 07:41:02]25299: WAF :: fetched 1 new logs [27-07-2022 07:41:02]25299: Checking for user cron vulnerabilities [27-07-2022 07:42:01]30047: WAF :: fetched 2 new logs [27-07-2022 07:44:01]8165: Checking ditributed CMS bruteforce attacks [27-07-2022 07:44:01]8165: WAF :: fetched 1 new logs [27-07-2022 07:45:01]: Checking for definition updates [27-07-2022 07:54:01]23994: WAF :: fetched 1 new logs [27-07-2022 07:55:02]28869: WAF :: fetched 2 new logs [27-07-2022 08:02:01]30456: WAF :: fetched 1 new logs [27-07-2022 08:06:01]18037: WAF :: fetched 1 new logs [27-07-2022 08:08:02]27589: WAF :: fetched 1 new logs [27-07-2022 08:12:02]14769: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658920322 [27-07-2022 08:12:02]14769: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 08:12:04]14769: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 08:12:04]14769: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-0812/20220727-081202-YuEdgmtqZaRANB_x3d8lzgAAABA [27-07-2022 08:12:04]14769: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [27-07-2022 08:12:05]14769: WAF :: fetched 1 new logs [27-07-2022 08:13:01]19525: WAF :: fetched 1 new logs [27-07-2022 08:31:02]11021: WAF :: fetched 3 new logs [27-07-2022 08:35:02]30689: WAF :: fetched 1 new logs [27-07-2022 08:36:02]3315: WAF :: fetched 1 new logs [27-07-2022 08:40:02]22694: WAF :: fetched 1 new logs [27-07-2022 08:41:02]27551: Checking for user cron vulnerabilities [27-07-2022 08:42:01]32330: WAF :: fetched 1 new logs [27-07-2022 08:44:01]9795: Checking ditributed CMS bruteforce attacks [27-07-2022 08:57:02]8669: WAF :: fetched 1 new logs [27-07-2022 08:59:02]18343: WAF :: fetched 1 new logs [27-07-2022 09:06:01]21047: WAF :: fetched 1 new logs [27-07-2022 09:08:01]30663: WAF :: fetched 1 new logs [27-07-2022 09:12:01]18060: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658923921 [27-07-2022 09:12:01]18060: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 09:12:03]18060: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 09:12:04]18060: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-0912/20220727-091201-YuErkUX4IN3vtVfyErcsGwAAABE [27-07-2022 09:12:04]18060: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 09:12:04]18060: WAF :: fetched 9 new logs [27-07-2022 09:29:01]5335: WAF :: fetched 8 new logs [27-07-2022 09:30:02]10438: WAF :: fetched 130 new logs [27-07-2022 09:31:01]15236: WAF :: fetched 181 new logs [27-07-2022 09:32:02]20130: WAF :: fetched 125 new logs [27-07-2022 09:34:02]30047: WAF :: fetched 1 new logs [27-07-2022 09:35:01]2573: WAF :: fetched 5 new logs [27-07-2022 09:39:01]22651: WAF :: fetched 1 new logs [27-07-2022 09:41:01]32454: Checking for user cron vulnerabilities [27-07-2022 09:44:01]15333: Checking ditributed CMS bruteforce attacks [27-07-2022 09:48:02]2811: WAF :: fetched 3 new logs [27-07-2022 09:49:01]7920: WAF :: fetched 1 new logs [27-07-2022 09:51:01]17613: WAF :: fetched 7 new logs [27-07-2022 10:00:01]29991: WAF :: fetched 1 new logs [27-07-2022 10:03:02]13194: WAF :: fetched 2 new logs [27-07-2022 10:04:01]18241: WAF :: fetched 3 new logs [27-07-2022 10:05:02]23262: WAF :: fetched 4 new logs [27-07-2022 10:06:01]28677: WAF :: fetched 1 new logs [27-07-2022 10:08:01]6289: WAF :: fetched 1 new logs [27-07-2022 10:09:02]11450: WAF :: fetched 1 new logs [27-07-2022 10:11:02]21219: WAF :: fetched 1 new logs [27-07-2022 10:12:01]26207: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658927521 [27-07-2022 10:12:01]26207: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 10:12:03]26207: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 10:12:04]26207: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-1012/20220727-101201-YuE5oSM7G_Lp2F2PyCv7kQAAAA0 [27-07-2022 10:12:04]26207: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 10:17:02]19432: WAF :: fetched 86 new logs [27-07-2022 10:19:02]29367: WAF :: fetched 2 new logs [27-07-2022 10:21:02]7234: WAF :: fetched 2 new logs [27-07-2022 10:22:01]12057: WAF :: fetched 2 new logs [27-07-2022 10:25:02]27412: WAF :: fetched 2 new logs [27-07-2022 10:26:01]360: WAF :: fetched 1 new logs [27-07-2022 10:27:02]5594: WAF :: fetched 1 new logs [27-07-2022 10:29:02]15861: WAF :: fetched 2 new logs [27-07-2022 10:30:01]20939: WAF :: fetched 2 new logs [27-07-2022 10:33:01]4099: WAF :: fetched 3 new logs [27-07-2022 10:41:01]13800: WAF :: fetched 1 new logs [27-07-2022 10:41:01]13800: Checking for user cron vulnerabilities [27-07-2022 10:43:01]24116: WAF :: fetched 1 new logs [27-07-2022 10:44:01]29143: Checking ditributed CMS bruteforce attacks [27-07-2022 10:48:01]18140: WAF :: fetched 3 new logs [27-07-2022 10:49:01]23190: WAF :: fetched 6 new logs [27-07-2022 10:51:01]848: WAF :: fetched 1 new logs [27-07-2022 10:52:02]6300: WAF :: fetched 1 new logs [27-07-2022 10:55:02]21008: WAF :: fetched 1 new logs [27-07-2022 10:58:01]4174: WAF :: fetched 6 new logs [27-07-2022 11:01:02]19726: WAF :: fetched 1 new logs [27-07-2022 11:02:01]24867: WAF :: fetched 1 new logs [27-07-2022 11:06:01]13327: WAF :: fetched 5 new logs [27-07-2022 11:07:56]18859: Performed RBL check for 23.111.136.34. [27-07-2022 11:12:01]11648: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658931121 [27-07-2022 11:12:02]11648: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 11:12:04]11648: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 11:12:04]11648: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-1112/20220727-111202-YuFHsUhHoVVc019joGFM_QAAAAo [27-07-2022 11:12:04]11648: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 11:18:01]9616: WAF :: fetched 2 new logs [27-07-2022 11:27:02]24139: WAF :: fetched 1 new logs [27-07-2022 11:29:02]1874: WAF :: fetched 1 new logs [27-07-2022 11:31:02]12081: WAF :: fetched 1 new logs [27-07-2022 11:32:01]16982: WAF :: fetched 1 new logs [27-07-2022 11:33:01]21860: WAF :: fetched 1 new logs [27-07-2022 11:37:02]10537: WAF :: fetched 2 new logs [27-07-2022 11:41:02]30584: WAF :: fetched 1 new logs [27-07-2022 11:41:02]30584: Checking for user cron vulnerabilities [27-07-2022 11:44:01]13307: Checking ditributed CMS bruteforce attacks [27-07-2022 11:45:02]18424: WAF :: fetched 1 new logs [27-07-2022 11:48:01]1460: WAF :: fetched 1 new logs [27-07-2022 11:50:01]11639: WAF :: fetched 1 new logs [27-07-2022 11:51:01]16312: WAF :: fetched 1 new logs [27-07-2022 11:53:01]26162: WAF :: fetched 1 new logs [27-07-2022 11:56:01]9169: WAF :: fetched 1 new logs [27-07-2022 11:58:01]19430: WAF :: fetched 1 new logs [27-07-2022 12:01:01]1965: WAF :: fetched 2 new logs [27-07-2022 12:02:01]7075: WAF :: fetched 1 new logs [27-07-2022 12:03:02]11704: WAF :: fetched 2 new logs [27-07-2022 12:12:01]24088: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658934721 [27-07-2022 12:12:01]24088: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 12:12:03]24088: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 12:12:04]24088: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-1212/20220727-121201-YuFVwdLOvBzJRnUtHen6dAAAABI [27-07-2022 12:12:04]24088: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 12:12:04]24088: WAF :: fetched 1 new logs [27-07-2022 12:15:01]6477: WAF :: fetched 1 new logs [27-07-2022 12:20:01]31784: WAF :: fetched 1 new logs [27-07-2022 12:25:01]24015: WAF :: fetched 1 new logs [27-07-2022 12:34:02]4489: WAF :: fetched 1 new logs [27-07-2022 12:36:01]14518: WAF :: fetched 2 new logs [27-07-2022 12:41:01]6972: WAF :: fetched 1 new logs [27-07-2022 12:41:01]6972: Checking for user cron vulnerabilities [27-07-2022 12:44:02]21349: Checking ditributed CMS bruteforce attacks [27-07-2022 12:45:01]: Checking for software updates [27-07-2022 12:46:02]31104: WAF :: fetched 1 new logs [27-07-2022 12:48:02]8436: WAF :: fetched 1 new logs [27-07-2022 12:51:01]23316: WAF :: fetched 3 new logs [27-07-2022 12:52:01]28010: WAF :: fetched 3 new logs [27-07-2022 12:53:01]356: WAF :: fetched 2 new logs [27-07-2022 12:54:02]5382: WAF :: fetched 7 new logs [27-07-2022 12:55:01]10342: WAF :: fetched 7 new logs [27-07-2022 13:00:02]2267: WAF :: fetched 3 new logs [27-07-2022 13:03:01]17402: WAF :: fetched 6 new logs [27-07-2022 13:06:02]31928: WAF :: fetched 3 new logs [27-07-2022 13:11:01]24519: WAF :: fetched 2 new logs [27-07-2022 13:12:02]29398: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658938322 [27-07-2022 13:12:02]29398: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 13:12:04]29398: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 13:12:04]29398: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-1312/20220727-131202-YuFj0kJFR47zglg-uIphHAAAABY [27-07-2022 13:12:04]29398: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 13:12:04]29398: WAF :: fetched 1 new logs [27-07-2022 13:15:01]11779: WAF :: fetched 2 new logs [27-07-2022 13:18:01]26152: WAF :: fetched 4 new logs [27-07-2022 13:21:01]9308: WAF :: fetched 1 new logs [27-07-2022 13:24:01]23726: WAF :: fetched 1 new logs [27-07-2022 13:34:01]8404: WAF :: fetched 1 new logs [27-07-2022 13:38:01]27610: WAF :: fetched 2 new logs [27-07-2022 13:41:01]10418: Checking for user cron vulnerabilities [27-07-2022 13:42:01]15172: WAF :: fetched 1 new logs [27-07-2022 13:44:01]24943: Checking ditributed CMS bruteforce attacks [27-07-2022 13:45:01]: Checking for definition updates [27-07-2022 13:45:04]29652: Updated virus defnition : signatures.ndb [27-07-2022 13:48:01]12334: WAF :: fetched 2 new logs [27-07-2022 13:49:02]17724: WAF :: fetched 2 new logs [27-07-2022 13:49:02]17726: httpd.conf changed. Refreshing watchlist. [27-07-2022 13:54:02]10024: WAF :: fetched 2 new logs [27-07-2022 13:55:01]14853: WAF :: fetched 1 new logs [27-07-2022 14:09:02]19402: WAF :: fetched 1 new logs [27-07-2022 14:12:02]1711: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658941922 [27-07-2022 14:12:02]1711: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 14:12:04]1711: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 14:12:04]1711: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-1412/20220727-141202-YuFx4v4JvNAzB0mJWOs-6QAAAAg [27-07-2022 14:12:04]1711: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 14:12:04]1711: WAF :: fetched 2 new logs [27-07-2022 14:13:01]6741: WAF :: fetched 1 new logs [27-07-2022 14:16:02]21505: WAF :: fetched 1 new logs [27-07-2022 14:19:01]3402: WAF :: fetched 1 new logs [27-07-2022 14:20:02]8928: WAF :: fetched 2 new logs [27-07-2022 14:23:01]23272: WAF :: fetched 2 new logs [27-07-2022 14:24:01]28088: WAF :: fetched 2 new logs [27-07-2022 14:25:01]623: WAF :: fetched 1 new logs [27-07-2022 14:30:02]25490: WAF :: fetched 2 new logs [27-07-2022 14:36:02]22361: WAF :: fetched 1 new logs [27-07-2022 14:37:01]27023: WAF :: fetched 3 new logs [27-07-2022 14:40:01]9906: WAF :: fetched 1 new logs [27-07-2022 14:41:02]14829: Checking for user cron vulnerabilities [27-07-2022 14:42:01]19616: WAF :: fetched 1 new logs [27-07-2022 14:44:01]29007: Checking ditributed CMS bruteforce attacks [27-07-2022 14:45:01]1578: WAF :: fetched 1 new logs [27-07-2022 14:48:01]16406: WAF :: fetched 5 new logs [27-07-2022 14:51:02]31493: WAF :: fetched 1 new logs [27-07-2022 14:53:02]8888: WAF :: fetched 1 new logs [27-07-2022 14:53:02]8896: Updated license status via CDN [27-07-2022 14:55:02]18480: WAF :: fetched 1 new logs [27-07-2022 14:58:01]32445: WAF :: fetched 1 new logs [27-07-2022 15:01:01]15397: Reseting cPGuard inotify settings [27-07-2022 15:04:01]29903: WAF :: fetched 2 new logs [27-07-2022 15:05:02]2517: WAF :: fetched 1 new logs [27-07-2022 15:12:01]4812: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658945521 [27-07-2022 15:12:01]4812: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 15:12:03]4812: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 15:12:04]4812: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-1512/20220727-151201-YuF_8VTUsk-rKOUHj-3mMAAAAAg [27-07-2022 15:12:04]4812: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 15:17:02]28980: WAF :: fetched 1 new logs [27-07-2022 15:18:01]1427: WAF :: fetched 1 new logs [27-07-2022 15:19:02]6443: WAF :: fetched 4 new logs [27-07-2022 15:29:01]22979: WAF :: fetched 2 new logs [27-07-2022 15:30:02]27801: WAF :: fetched 2 new logs [27-07-2022 15:31:01]857: httpd.conf changed. Refreshing watchlist. [27-07-2022 15:33:02]10613: WAF :: fetched 2 new logs [27-07-2022 15:34:01]15638: WAF :: fetched 2 new logs [27-07-2022 15:34:01]15637: httpd.conf changed. Refreshing watchlist. [27-07-2022 15:35:02]20487: WAF :: fetched 3 new logs [27-07-2022 15:36:01]25391: WAF :: fetched 2 new logs [27-07-2022 15:38:01]2711: WAF :: fetched 3 new logs [27-07-2022 15:39:02]7718: WAF :: fetched 3 new logs [27-07-2022 15:40:01]12612: httpd.conf changed. Refreshing watchlist. [27-07-2022 15:41:01]18027: WAF :: fetched 1 new logs [27-07-2022 15:41:01]18027: Checking for user cron vulnerabilities [27-07-2022 15:44:01]32407: Checking ditributed CMS bruteforce attacks [27-07-2022 15:44:01]32407: WAF :: fetched 1 new logs [27-07-2022 15:47:02]14759: httpd.conf changed. Refreshing watchlist. [27-07-2022 15:48:01]19422: WAF :: fetched 2 new logs [27-07-2022 15:50:01]28563: WAF :: fetched 1 new logs [27-07-2022 15:51:02]1763: WAF :: fetched 1 new logs [27-07-2022 15:52:01]6931: WAF :: fetched 1 new logs [27-07-2022 15:52:01]6929: httpd.conf changed. Refreshing watchlist. [27-07-2022 15:57:02]31091: WAF :: fetched 1 new logs [27-07-2022 15:58:01]3437: WAF :: fetched 1 new logs [27-07-2022 15:59:02]8404: WAF :: fetched 1 new logs [27-07-2022 16:04:01]739: WAF :: fetched 1 new logs [27-07-2022 16:05:01]5835: WAF :: fetched 4 new logs [27-07-2022 16:06:02]10907: WAF :: fetched 2 new logs [27-07-2022 16:07:01]15480: WAF :: fetched 3 new logs [27-07-2022 16:09:01]24987: WAF :: fetched 2 new logs [27-07-2022 16:12:02]7858: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658949122 [27-07-2022 16:12:02]7858: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 16:12:04]7858: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 16:12:04]7858: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-1612/20220727-161202-YuGOAnp1bKdqPS4nN81NpgAAAAU [27-07-2022 16:12:04]7858: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 16:12:04]7858: WAF :: fetched 4 new logs [27-07-2022 16:20:02]14493: WAF :: fetched 1 new logs [27-07-2022 16:21:01]19418: WAF :: fetched 3 new logs [27-07-2022 16:26:02]12108: WAF :: fetched 2 new logs [27-07-2022 16:34:01]18710: WAF :: fetched 1 new logs [27-07-2022 16:37:01]753: WAF :: fetched 1 new logs [27-07-2022 16:39:01]10704: WAF :: fetched 1 new logs [27-07-2022 16:41:01]20560: Checking for user cron vulnerabilities [27-07-2022 16:44:01]3159: Checking ditributed CMS bruteforce attacks [27-07-2022 16:50:02]32236: WAF :: fetched 2 new logs [27-07-2022 16:51:01]4783: WAF :: fetched 1 new logs [27-07-2022 16:59:01]11389: WAF :: fetched 1 new logs [27-07-2022 17:00:02]15859: WAF :: fetched 1 new logs [27-07-2022 17:04:01]3693: WAF :: fetched 1 new logs [27-07-2022 17:05:01]8536: WAF :: fetched 2 new logs [27-07-2022 17:07:01]18168: WAF :: fetched 2 new logs [27-07-2022 17:10:02]32449: WAF :: fetched 1 new logs [27-07-2022 17:11:01]5098: WAF :: fetched 1 new logs [27-07-2022 17:12:02]10502: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658952722 [27-07-2022 17:12:02]10502: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 17:12:04]10502: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 17:12:04]10502: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-1712/20220727-171202-YuGcEqm5MjiFg-32I6L-AAAAAAc [27-07-2022 17:12:04]10502: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 17:12:04]10502: WAF :: fetched 2 new logs [27-07-2022 17:14:02]20157: WAF :: fetched 1 new logs [27-07-2022 17:15:01]24820: WAF :: fetched 2 new logs [27-07-2022 17:20:01]17178: WAF :: fetched 2 new logs [27-07-2022 17:21:02]22313: WAF :: fetched 1 new logs [27-07-2022 17:22:01]27812: WAF :: fetched 2 new logs [27-07-2022 17:25:01]10270: WAF :: fetched 2 new logs [27-07-2022 17:26:01]15164: WAF :: fetched 4 new logs [27-07-2022 17:35:01]26918: WAF :: fetched 1 new logs [27-07-2022 17:37:02]4308: WAF :: fetched 1 new logs [27-07-2022 17:41:02]23724: Checking for user cron vulnerabilities [27-07-2022 17:44:01]6486: Checking ditributed CMS bruteforce attacks [27-07-2022 17:47:02]20948: WAF :: fetched 1 new logs [27-07-2022 17:53:02]18221: WAF :: fetched 3 new logs [27-07-2022 17:55:02]27733: WAF :: fetched 1 new logs [27-07-2022 17:59:02]14417: WAF :: fetched 1 new logs [27-07-2022 18:03:02]1945: WAF :: fetched 2 new logs [27-07-2022 18:07:02]21107: WAF :: fetched 1 new logs [27-07-2022 18:09:02]30736: WAF :: fetched 1 new logs [27-07-2022 18:12:02]13156: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658956322 [27-07-2022 18:12:02]13156: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 18:12:04]13156: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 18:12:04]13156: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-1812/20220727-181202-YuGqImSBV3v-mJuhHM_QAQAAAAM [27-07-2022 18:12:04]13156: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 18:13:01]18461: WAF :: fetched 1 new logs [27-07-2022 18:18:02]10435: WAF :: fetched 3 new logs [27-07-2022 18:19:01]15118: WAF :: fetched 2 new logs [27-07-2022 18:27:02]21502: WAF :: fetched 2 new logs [27-07-2022 18:31:02]8488: WAF :: fetched 1 new logs [27-07-2022 18:38:01]10178: WAF :: fetched 1 new logs [27-07-2022 18:41:02]24238: WAF :: fetched 1 new logs [27-07-2022 18:41:02]24238: Checking for user cron vulnerabilities [27-07-2022 18:44:01]6806: Checking ditributed CMS bruteforce attacks [27-07-2022 18:47:02]21038: WAF :: fetched 2 new logs [27-07-2022 18:48:01]25726: WAF :: fetched 2 new logs [27-07-2022 18:49:02]30481: WAF :: fetched 3 new logs [27-07-2022 18:50:01]3005: WAF :: fetched 1 new logs [27-07-2022 18:51:02]7910: WAF :: fetched 1 new logs [27-07-2022 18:55:02]27238: WAF :: fetched 1 new logs [27-07-2022 19:01:01]23398: WAF :: fetched 2 new logs [27-07-2022 19:03:01]599: WAF :: fetched 2 new logs [27-07-2022 19:12:02]12213: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658959922 [27-07-2022 19:12:02]12213: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 19:12:04]12213: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 19:12:04]12213: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-1912/20220727-191202-YuG4Mo2tZGQ1uMFDyg6jCgAAAAg [27-07-2022 19:12:04]12213: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 19:12:04]12213: WAF :: fetched 1 new logs [27-07-2022 19:19:01]13588: WAF :: fetched 2 new logs [27-07-2022 19:21:02]23230: WAF :: fetched 4 new logs [27-07-2022 19:23:02]409: WAF :: fetched 3 new logs [27-07-2022 19:24:01]5981: WAF :: fetched 3 new logs [27-07-2022 19:25:02]10959: WAF :: fetched 1 new logs [27-07-2022 19:26:01]15687: WAF :: fetched 6 new logs [27-07-2022 19:27:01]20495: WAF :: fetched 2 new logs [27-07-2022 19:29:01]29914: WAF :: fetched 1 new logs [27-07-2022 19:34:01]21910: WAF :: fetched 1 new logs [27-07-2022 19:35:02]26680: WAF :: fetched 4 new logs [27-07-2022 19:37:01]3890: WAF :: fetched 4 new logs [27-07-2022 19:38:02]8826: WAF :: fetched 3 new logs [27-07-2022 19:39:01]13602: WAF :: fetched 4 new logs [27-07-2022 19:41:01]23044: Checking for user cron vulnerabilities [27-07-2022 19:44:01]5175: Checking ditributed CMS bruteforce attacks [27-07-2022 19:45:01]: Checking for definition updates [27-07-2022 19:46:02]15070: WAF :: fetched 4 new logs [27-07-2022 20:05:02]9581: WAF :: fetched 1 new logs [27-07-2022 20:12:02]10493: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658963522 [27-07-2022 20:12:02]10493: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 20:12:04]10493: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 20:12:04]10493: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-2012/20220727-201202-YuHGQnrQrjfBGiXrElk7nAAAAAw [27-07-2022 20:12:04]10493: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 20:12:04]10493: WAF :: fetched 1 new logs [27-07-2022 20:19:01]11704: WAF :: fetched 2 new logs [27-07-2022 20:25:01]8503: WAF :: fetched 5 new logs [27-07-2022 20:27:01]18015: WAF :: fetched 1 new logs [27-07-2022 20:28:01]22653: WAF :: fetched 3 new logs [27-07-2022 20:35:02]24176: httpd.conf changed. Refreshing watchlist. [27-07-2022 20:38:02]6378: httpd.conf changed. Refreshing watchlist. [27-07-2022 20:41:01]20682: Checking for user cron vulnerabilities [27-07-2022 20:44:02]2509: Checking ditributed CMS bruteforce attacks [27-07-2022 20:51:01]3948: WAF :: fetched 1 new logs [27-07-2022 20:52:01]8749: WAF :: fetched 1 new logs [27-07-2022 21:12:01]7274: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658967121 [27-07-2022 21:12:01]7274: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 21:12:03]7274: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 21:12:04]7274: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-2112/20220727-211201-YuHUUV3OeMEddxzv2RjuOgAAABo [27-07-2022 21:12:04]7274: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [27-07-2022 21:12:04]7274: WAF :: fetched 1 new logs [27-07-2022 21:38:01]2202: WAF :: fetched 1 new logs [27-07-2022 21:41:01]16636: Checking for user cron vulnerabilities [27-07-2022 21:43:01]26039: WAF :: fetched 1 new logs [27-07-2022 21:44:01]30812: Checking ditributed CMS bruteforce attacks [27-07-2022 22:02:01]20237: WAF :: fetched 2 new logs [27-07-2022 22:03:02]25059: WAF :: fetched 2 new logs [27-07-2022 22:04:01]29790: WAF :: fetched 3 new logs [27-07-2022 22:07:08]12270: Performing Domain reputation checks [27-07-2022 22:12:01]3825: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658970721 [27-07-2022 22:12:01]3825: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 22:12:03]3825: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 22:12:04]3825: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-2212/20220727-221201-YuHiYaRQdY8I3qsocxTNUgAAAAs [27-07-2022 22:12:04]3825: WAF :: No suitable log file found. Using SQLite.. [27-07-2022 22:12:04]3825: WAF :: fetched 188 new logs [27-07-2022 22:13:02]8779: WAF :: fetched 1372 new logs [27-07-2022 22:14:02]13510: WAF :: fetched 1483 new logs [27-07-2022 22:15:03]18355: WAF :: fetched 1284 new logs [27-07-2022 22:16:01]22994: WAF :: fetched 460 new logs [27-07-2022 22:17:02]28275: WAF :: fetched 134 new logs [27-07-2022 22:18:01]533: WAF :: fetched 118 new logs [27-07-2022 22:19:02]5521: WAF :: fetched 11 new logs [27-07-2022 22:20:01]10303: WAF :: fetched 1 new logs [27-07-2022 22:27:02]12078: WAF :: fetched 1 new logs [27-07-2022 22:32:01]3652: WAF :: fetched 1 new logs [27-07-2022 22:35:02]18015: WAF :: fetched 1 new logs [27-07-2022 22:37:02]28004: WAF :: fetched 1 new logs [27-07-2022 22:40:01]10130: WAF :: fetched 2 new logs [27-07-2022 22:41:01]14958: Checking for user cron vulnerabilities [27-07-2022 22:44:01]29220: Checking ditributed CMS bruteforce attacks [27-07-2022 22:45:01]1578: WAF :: fetched 1 new logs [27-07-2022 22:48:01]16796: WAF :: fetched 1 new logs [27-07-2022 22:52:01]3802: WAF :: fetched 1 new logs [27-07-2022 23:00:01]9814: WAF :: fetched 2 new logs [27-07-2022 23:01:01]14870: WAF :: fetched 1 new logs [27-07-2022 23:04:01]29151: WAF :: fetched 2 new logs [27-07-2022 23:08:09]11917: Performed RBL check for 23.111.136.34. [27-07-2022 23:12:01]3151: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658974321 [27-07-2022 23:12:01]3151: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [27-07-2022 23:12:03]3151: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [27-07-2022 23:12:04]3151: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220727/20220727-2312/20220727-231201-YuHwcYTuwOTiAmNU2KxuUQAAAAE [27-07-2022 23:12:04]3151: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [27-07-2022 23:12:04]3151: WAF :: fetched 1 new logs [27-07-2022 23:35:02]17743: WAF :: fetched 1 new logs [27-07-2022 23:41:02]14833: Checking for user cron vulnerabilities [27-07-2022 23:42:01]19556: WAF :: fetched 1 new logs [27-07-2022 23:44:01]29114: Checking ditributed CMS bruteforce attacks [27-07-2022 23:55:02]17677: httpd.conf changed. Refreshing watchlist. [28-07-2022 00:01:05]14798: Sending daily report for July 28, 2022 [28-07-2022 00:04:01]29056: WAF :: fetched 1 new logs [28-07-2022 00:05:02]1422: Deleted 0 entries older than 6 MONTH from scanner_logs [28-07-2022 00:05:02]1422: Deleted 0 files from Quarantine [28-07-2022 00:12:01]3038: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658977921 [28-07-2022 00:12:01]3038: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 00:12:03]3038: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 00:12:04]3038: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-0012/20220728-001201-YuH-gZQi3eYQ_e-Ls1zvugAAAAw [28-07-2022 00:12:04]3038: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [28-07-2022 00:12:04]3038: WAF :: fetched 1 new logs [28-07-2022 00:36:02]22330: WAF :: fetched 1 new logs [28-07-2022 00:41:01]14618: Checking for user cron vulnerabilities [28-07-2022 00:42:02]19271: WAF :: fetched 1 new logs [28-07-2022 00:44:02]29026: Checking ditributed CMS bruteforce attacks [28-07-2022 00:45:01]: Checking for software updates [28-07-2022 00:49:02]21060: WAF :: fetched 2 new logs [28-07-2022 00:53:02]7786: WAF :: fetched 2 new logs [28-07-2022 01:02:01]20371: WAF :: fetched 1 new logs [28-07-2022 01:05:02]3487: WAF :: fetched 5 new logs [28-07-2022 01:12:01]6140: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658981521 [28-07-2022 01:12:01]6140: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 01:12:03]6140: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 01:12:03]6140: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-0112/20220728-011201-YuIMkcD2F8mSwR5d3OtM0QAAABg [28-07-2022 01:12:03]6140: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [28-07-2022 01:12:04]6140: WAF :: fetched 1 new logs [28-07-2022 01:16:01]25817: WAF :: fetched 1 new logs [28-07-2022 01:21:02]19514: WAF :: fetched 1 new logs [28-07-2022 01:28:01]22737: WAF :: fetched 1 new logs [28-07-2022 01:40:01]19337: WAF :: fetched 1 new logs [28-07-2022 01:41:02]24238: WAF :: fetched 4 new logs [28-07-2022 01:41:02]24238: Checking for user cron vulnerabilities [28-07-2022 01:42:01]28817: WAF :: fetched 1 new logs [28-07-2022 01:44:01]6555: Checking ditributed CMS bruteforce attacks [28-07-2022 01:45:01]: Checking for definition updates [28-07-2022 01:45:02]11285: WAF :: fetched 3 new logs [28-07-2022 01:53:01]18275: WAF :: fetched 1 new logs [28-07-2022 02:01:01]25613: WAF :: fetched 1 new logs [28-07-2022 02:12:02]14489: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658985122 [28-07-2022 02:12:02]14489: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 02:12:04]14489: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 02:12:04]14489: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-0212/20220728-021202-YuIaop3JoNQD2WRKrSDnLQAAABM [28-07-2022 02:12:04]14489: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [28-07-2022 02:12:04]14489: WAF :: fetched 1 new logs [28-07-2022 02:13:01]19248: WAF :: fetched 1 new logs [28-07-2022 02:20:02]21443: WAF :: fetched 1 new logs [28-07-2022 02:21:01]26331: WAF :: fetched 1 new logs [28-07-2022 02:37:01]7729: WAF :: fetched 1 new logs [28-07-2022 02:41:01]28181: Checking for user cron vulnerabilities [28-07-2022 02:44:01]10940: Checking ditributed CMS bruteforce attacks [28-07-2022 02:45:01]15692: WAF :: fetched 1 new logs [28-07-2022 02:46:02]20722: WAF :: fetched 2 new logs [28-07-2022 02:53:02]27443: Updated license status via CDN [28-07-2022 03:00:03]5890: Found and updated 33 CMS installations [28-07-2022 03:01:01]13509: WAF :: fetched 4 new logs [28-07-2022 03:02:02]20115: WAF :: fetched 3 new logs [28-07-2022 03:02:51]5890: Sending CMS version vulnerability report emails to cpanel users [28-07-2022 03:02:54]5890: Checking wordpress installations for suspicious directories [28-07-2022 03:03:01]27432: WAF :: fetched 1 new logs [28-07-2022 03:04:29]27465: Sending CMS version vulnerability report emails to cpanel users [28-07-2022 03:04:32]27465: Checking wordpress installations for suspicious directories [28-07-2022 03:07:01]22119: httpd.conf changed. Refreshing watchlist. [28-07-2022 03:08:02]28364: WAF :: fetched 4 new logs [28-07-2022 03:09:02]2526: WAF :: fetched 1 new logs [28-07-2022 03:10:01]9425: httpd.conf changed. Refreshing watchlist. [28-07-2022 03:11:01]16552: httpd.conf changed. Refreshing watchlist. [28-07-2022 03:12:02]22795: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658988722 [28-07-2022 03:12:02]22795: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 03:12:04]22795: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 03:12:04]22795: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-0312/20220728-031202-YuIosmcazSmM6VROxa0XEQAAAAU [28-07-2022 03:12:04]22795: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 03:12:04]22795: WAF :: fetched 39 new logs [28-07-2022 03:16:01]16730: httpd.conf changed. Refreshing watchlist. [28-07-2022 03:32:01]27360: WAF :: fetched 3 new logs [28-07-2022 03:34:02]7695: WAF :: fetched 2 new logs [28-07-2022 03:41:01]20551: Checking for user cron vulnerabilities [28-07-2022 03:44:01]7187: Checking ditributed CMS bruteforce attacks [28-07-2022 03:48:02]32296: WAF :: fetched 2 new logs [28-07-2022 03:50:01]12445: WAF :: fetched 2 new logs [28-07-2022 04:12:01]22110: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658992321 [28-07-2022 04:12:01]22110: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 04:12:03]22110: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 04:12:04]22110: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-0412/20220728-041201-YuI2wWq_sz2t2MKJ9ZL2eAAAAAo [28-07-2022 04:12:04]22110: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [28-07-2022 04:12:04]22110: WAF :: fetched 1 new logs [28-07-2022 04:17:01]21829: WAF :: fetched 2 new logs [28-07-2022 04:27:02]20530: WAF :: fetched 2 new logs [28-07-2022 04:29:02]705: WAF :: fetched 1 new logs [28-07-2022 04:33:02]26731: WAF :: fetched 2 new logs [28-07-2022 04:35:02]7090: WAF :: fetched 1 new logs [28-07-2022 04:37:02]19669: WAF :: fetched 1 new logs [28-07-2022 04:41:01]12586: Checking for user cron vulnerabilities [28-07-2022 04:43:02]25517: WAF :: fetched 1 new logs [28-07-2022 04:44:02]31815: Checking ditributed CMS bruteforce attacks [28-07-2022 04:48:02]24806: WAF :: fetched 1 new logs [28-07-2022 04:49:01]31436: WAF :: fetched 1 new logs [28-07-2022 04:50:02]5460: WAF :: fetched 1 new logs [28-07-2022 04:51:01]11931: WAF :: fetched 1 new logs [28-07-2022 05:01:01]11171: WAF :: fetched 2 new logs [28-07-2022 05:01:42]11169: Starting daily scan on files updated in last 24 hrs [28-07-2022 05:03:02]23851: WAF :: fetched 1 new logs [28-07-2022 05:12:02]11939: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658995922 [28-07-2022 05:12:02]11939: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 05:12:04]11939: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 05:12:04]11939: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-0512/20220728-051202-YuJE0sjx-1MRWNb-jBcaZgAAAAw [28-07-2022 05:12:04]11939: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [28-07-2022 05:12:04]11939: WAF :: fetched 1 new logs [28-07-2022 05:13:01]18439: WAF :: fetched 1 new logs [28-07-2022 05:19:01]23164: WAF :: fetched 2 new logs [28-07-2022 05:41:01]2004: Checking for user cron vulnerabilities [28-07-2022 05:44:01]21401: Checking ditributed CMS bruteforce attacks [28-07-2022 06:12:01]6001: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1658999521 [28-07-2022 06:12:01]6001: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 06:12:03]6001: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 06:12:03]6001: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-0612/20220728-061201-YuJS4c0HDqtKwmLYnWmN8QAAAAA [28-07-2022 06:12:03]6001: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 06:12:04]6001: WAF :: fetched 11 new logs [28-07-2022 06:16:01]31897: WAF :: fetched 1 new logs [28-07-2022 06:27:02]5281: WAF :: fetched 2 new logs [28-07-2022 06:41:01]29787: Checking for user cron vulnerabilities [28-07-2022 06:43:01]10225: WAF :: fetched 3 new logs [28-07-2022 06:44:02]17128: Checking ditributed CMS bruteforce attacks [28-07-2022 06:49:01]16533: WAF :: fetched 1 new logs [28-07-2022 06:51:01]29087: WAF :: fetched 1 new logs [28-07-2022 07:12:01]704: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659003121 [28-07-2022 07:12:01]704: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 07:12:03]704: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 07:12:04]704: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-0712/20220728-071201-YuJg8TSRtwcinq3BLWUspwAAAAU [28-07-2022 07:12:04]704: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [28-07-2022 07:12:04]704: WAF :: fetched 1 new logs [28-07-2022 07:23:01]6033: WAF :: fetched 1 new logs [28-07-2022 07:26:02]25688: WAF :: fetched 4 new logs [28-07-2022 07:28:02]6120: WAF :: fetched 1 new logs [28-07-2022 07:29:01]12374: WAF :: fetched 2 new logs [28-07-2022 07:30:02]18735: WAF :: fetched 2 new logs [28-07-2022 07:31:01]25038: WAF :: fetched 4 new logs [28-07-2022 07:34:01]11595: WAF :: fetched 1 new logs [28-07-2022 07:35:02]18804: WAF :: fetched 4 new logs [28-07-2022 07:36:01]25114: WAF :: fetched 2 new logs [28-07-2022 07:37:02]31518: WAF :: fetched 3 new logs [28-07-2022 07:41:02]24385: WAF :: fetched 1 new logs [28-07-2022 07:41:02]24385: Checking for user cron vulnerabilities [28-07-2022 07:42:02]30657: WAF :: fetched 1 new logs [28-07-2022 07:44:01]10943: Checking ditributed CMS bruteforce attacks [28-07-2022 07:44:01]10943: WAF :: fetched 1 new logs [28-07-2022 07:45:02]: Checking for definition updates [28-07-2022 07:46:02]24020: WAF :: fetched 1 new logs [28-07-2022 07:49:02]10665: WAF :: fetched 1 new logs [28-07-2022 07:53:01]3420: WAF :: fetched 1 new logs [28-07-2022 08:00:01]15987: WAF :: fetched 2 new logs [28-07-2022 08:06:01]22960: WAF :: fetched 1 new logs [28-07-2022 08:12:01]29004: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659006721 [28-07-2022 08:12:01]29004: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 08:12:03]29004: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 08:12:03]29004: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-0812/20220728-081201-YuJvAdzARuq8ybwxQzRVnQAAAAA [28-07-2022 08:12:03]29004: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 08:12:04]29004: WAF :: fetched 33 new logs [28-07-2022 08:16:01]22799: WAF :: fetched 1 new logs [28-07-2022 08:27:02]28741: WAF :: fetched 1 new logs [28-07-2022 08:28:01]2893: WAF :: fetched 1 new logs [28-07-2022 08:33:02]2880: WAF :: fetched 2 new logs [28-07-2022 08:40:01]15504: WAF :: fetched 1 new logs [28-07-2022 08:41:02]21902: WAF :: fetched 1 new logs [28-07-2022 08:41:02]21902: Checking for user cron vulnerabilities [28-07-2022 08:42:01]28202: WAF :: fetched 4 new logs [28-07-2022 08:43:02]2302: WAF :: fetched 2 new logs [28-07-2022 08:44:01]8822: Checking ditributed CMS bruteforce attacks [28-07-2022 08:45:02]15215: WAF :: fetched 3 new logs [28-07-2022 08:46:01]22123: WAF :: fetched 1 new logs [28-07-2022 08:52:01]27794: WAF :: fetched 2 new logs [28-07-2022 08:53:02]1810: WAF :: fetched 2 new logs [28-07-2022 08:54:01]8304: WAF :: fetched 1 new logs [28-07-2022 08:55:02]14634: WAF :: fetched 1 new logs [28-07-2022 08:56:01]21483: WAF :: fetched 1 new logs [28-07-2022 09:12:02]27224: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659010322 [28-07-2022 09:12:02]27224: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 09:12:04]27224: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 09:12:04]27224: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-0912/20220728-091202-YuJ9EsCs_u8K5CljpS8tqwAAAAA [28-07-2022 09:12:04]27224: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 09:13:01]1234: WAF :: fetched 1 new logs [28-07-2022 09:14:02]7971: WAF :: fetched 1 new logs [28-07-2022 09:37:02]27531: WAF :: fetched 2 new logs [28-07-2022 09:38:01]1854: WAF :: fetched 2 new logs [28-07-2022 09:39:02]8368: WAF :: fetched 1 new logs [28-07-2022 09:41:02]21484: Checking for user cron vulnerabilities [28-07-2022 09:44:01]8454: Checking ditributed CMS bruteforce attacks [28-07-2022 09:56:01]21425: WAF :: fetched 2 new logs [28-07-2022 10:05:02]15992: WAF :: fetched 1 new logs [28-07-2022 10:09:01]10041: WAF :: fetched 4 new logs [28-07-2022 10:12:01]29036: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659013921 [28-07-2022 10:12:01]29036: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 10:12:03]29036: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 10:12:04]29036: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-1012/20220728-101201-YuKLIUl-9iSZE3DP3UPuSQAAACA [28-07-2022 10:12:04]29036: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [28-07-2022 10:12:04]29036: WAF :: fetched 2 new logs [28-07-2022 10:13:01]3649: WAF :: fetched 1 new logs [28-07-2022 10:14:02]9862: WAF :: fetched 3 new logs [28-07-2022 10:15:01]16576: WAF :: fetched 1 new logs [28-07-2022 10:18:02]3079: WAF :: fetched 1 new logs [28-07-2022 10:25:02]16467: WAF :: fetched 1 new logs [28-07-2022 10:26:02]22993: WAF :: fetched 3 new logs [28-07-2022 10:28:02]3849: WAF :: fetched 1 new logs [28-07-2022 10:32:02]29833: WAF :: fetched 2 new logs [28-07-2022 10:41:01]25439: Checking for user cron vulnerabilities [28-07-2022 10:44:01]12558: Checking ditributed CMS bruteforce attacks [28-07-2022 10:44:02]12558: WAF :: fetched 1 new logs [28-07-2022 10:47:01]29429: WAF :: fetched 2 new logs [28-07-2022 10:48:02]2938: WAF :: fetched 2 new logs [28-07-2022 10:49:01]8421: WAF :: fetched 1 new logs [28-07-2022 10:50:02]14043: WAF :: fetched 1 new logs [28-07-2022 10:51:01]19720: WAF :: fetched 1 new logs [28-07-2022 10:52:02]25492: WAF :: fetched 2 new logs [28-07-2022 10:54:02]4717: WAF :: fetched 1 new logs [28-07-2022 10:57:02]21642: WAF :: fetched 2 new logs [28-07-2022 10:58:01]27226: WAF :: fetched 1 new logs [28-07-2022 11:01:02]12098: WAF :: fetched 1 new logs [28-07-2022 11:02:01]17714: WAF :: fetched 1 new logs [28-07-2022 11:03:02]23381: WAF :: fetched 3 new logs [28-07-2022 11:04:01]29366: WAF :: fetched 15 new logs [28-07-2022 11:05:02]2397: WAF :: fetched 4 new logs [28-07-2022 11:06:01]8523: WAF :: fetched 1 new logs [28-07-2022 11:07:02]13835: WAF :: fetched 1 new logs [28-07-2022 11:07:42]14022: Performed RBL check for 23.111.136.34. [28-07-2022 11:08:01]19903: WAF :: fetched 3 new logs [28-07-2022 11:09:01]25352: WAF :: fetched 1 new logs [28-07-2022 11:10:02]31464: WAF :: fetched 1 new logs [28-07-2022 11:11:02]4973: WAF :: fetched 8 new logs [28-07-2022 11:12:01]10648: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659017521 [28-07-2022 11:12:01]10648: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 11:12:03]10648: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 11:12:04]10648: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-1112/20220728-111201-YuKZMfCsA__VQxJU6FohpAAAABg [28-07-2022 11:12:04]10648: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 11:12:04]10648: WAF :: fetched 50 new logs [28-07-2022 11:13:02]16460: WAF :: fetched 1 new logs [28-07-2022 11:16:01]927: WAF :: fetched 1 new logs [28-07-2022 11:18:01]12120: WAF :: fetched 1 new logs [28-07-2022 11:19:02]17823: WAF :: fetched 2 new logs [28-07-2022 11:22:02]2495: WAF :: fetched 2 new logs [28-07-2022 11:23:01]8076: WAF :: fetched 1 new logs [28-07-2022 11:24:01]13794: WAF :: fetched 2 new logs [28-07-2022 11:26:01]25009: WAF :: fetched 4 new logs [28-07-2022 11:28:01]4371: WAF :: fetched 1 new logs [28-07-2022 11:30:01]15824: WAF :: fetched 1 new logs [28-07-2022 11:31:02]21485: WAF :: fetched 1 new logs [28-07-2022 11:33:02]379: WAF :: fetched 14 new logs [28-07-2022 11:36:01]17813: WAF :: fetched 1 new logs [28-07-2022 11:38:01]29017: WAF :: fetched 1 new logs [28-07-2022 11:41:02]13791: Checking for user cron vulnerabilities [28-07-2022 11:42:01]19380: WAF :: fetched 6 new logs [28-07-2022 11:44:01]30718: Checking ditributed CMS bruteforce attacks [28-07-2022 11:44:01]30718: WAF :: fetched 1 new logs [28-07-2022 11:52:01]11361: WAF :: fetched 7 new logs [28-07-2022 11:53:01]16927: WAF :: fetched 2 new logs [28-07-2022 11:57:01]7356: WAF :: fetched 2 new logs [28-07-2022 11:58:02]13006: WAF :: fetched 2 new logs [28-07-2022 11:59:01]18697: WAF :: fetched 1 new logs [28-07-2022 12:02:01]3728: WAF :: fetched 2 new logs [28-07-2022 12:04:01]15161: WAF :: fetched 3 new logs [28-07-2022 12:05:02]20928: WAF :: fetched 61 new logs [28-07-2022 12:06:01]26702: WAF :: fetched 62 new logs [28-07-2022 12:07:02]32417: WAF :: fetched 47 new logs [28-07-2022 12:08:01]5874: WAF :: fetched 1 new logs [28-07-2022 12:09:02]11688: WAF :: fetched 1 new logs [28-07-2022 12:12:01]28665: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659021121 [28-07-2022 12:12:02]28665: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 12:12:04]28665: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 12:12:04]28665: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-1212/20220728-121202-YuKnQtwOV1wl0WBAfkxOgAAAABI [28-07-2022 12:12:04]28665: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 12:12:04]28665: WAF :: fetched 4 new logs [28-07-2022 12:14:01]8100: WAF :: fetched 2 new logs [28-07-2022 12:15:01]14208: WAF :: fetched 1 new logs [28-07-2022 12:19:01]5931: WAF :: fetched 2 new logs [28-07-2022 12:21:01]17567: WAF :: fetched 2 new logs [28-07-2022 12:22:02]23050: WAF :: fetched 1 new logs [28-07-2022 12:25:01]8353: WAF :: fetched 3 new logs [28-07-2022 12:26:02]14099: WAF :: fetched 1 new logs [28-07-2022 12:27:01]19675: WAF :: fetched 1 new logs [28-07-2022 12:31:01]10004: WAF :: fetched 1 new logs [28-07-2022 12:34:02]27027: WAF :: fetched 3 new logs [28-07-2022 12:35:02]32717: WAF :: fetched 2 new logs [28-07-2022 12:36:01]6085: WAF :: fetched 1 new logs [28-07-2022 12:38:01]17364: WAF :: fetched 3 new logs [28-07-2022 12:39:02]23104: WAF :: fetched 2 new logs [28-07-2022 12:40:01]28696: WAF :: fetched 1 new logs [28-07-2022 12:41:02]2215: WAF :: fetched 1 new logs [28-07-2022 12:41:02]2215: Checking for user cron vulnerabilities [28-07-2022 12:42:01]7805: WAF :: fetched 2 new logs [28-07-2022 12:43:02]13608: WAF :: fetched 2 new logs [28-07-2022 12:44:01]19223: Checking ditributed CMS bruteforce attacks [28-07-2022 12:44:02]19223: WAF :: fetched 3 new logs [28-07-2022 12:45:01]: Checking for software updates [28-07-2022 12:45:02]24845: WAF :: fetched 1 new logs [28-07-2022 12:46:01]30461: WAF :: fetched 1 new logs [28-07-2022 12:47:01]3835: WAF :: fetched 2 new logs [28-07-2022 12:48:01]9462: WAF :: fetched 3 new logs [28-07-2022 12:49:01]14864: WAF :: fetched 2 new logs [28-07-2022 12:50:01]20823: WAF :: fetched 5 new logs [28-07-2022 12:51:02]26599: WAF :: fetched 2 new logs [28-07-2022 12:52:01]32092: WAF :: fetched 7 new logs [28-07-2022 12:53:02]5206: WAF :: fetched 3 new logs [28-07-2022 12:55:02]16620: WAF :: fetched 4 new logs [28-07-2022 12:56:01]22647: WAF :: fetched 1 new logs [28-07-2022 12:57:02]28007: WAF :: fetched 2 new logs [28-07-2022 12:58:01]1619: WAF :: fetched 1 new logs [28-07-2022 12:59:02]7461: WAF :: fetched 1 new logs [28-07-2022 13:00:01]12725: WAF :: fetched 1 new logs [28-07-2022 13:01:02]18858: WAF :: fetched 4 new logs [28-07-2022 13:02:01]24470: WAF :: fetched 1 new logs [28-07-2022 13:03:01]30088: WAF :: fetched 3 new logs [28-07-2022 13:04:01]3253: WAF :: fetched 2 new logs [28-07-2022 13:05:01]9169: WAF :: fetched 11 new logs [28-07-2022 13:06:01]14663: WAF :: fetched 26 new logs [28-07-2022 13:07:01]20653: WAF :: fetched 2 new logs [28-07-2022 13:08:01]26044: WAF :: fetched 3 new logs [28-07-2022 13:09:01]32117: WAF :: fetched 1 new logs [28-07-2022 13:10:01]5476: WAF :: fetched 4 new logs [28-07-2022 13:11:02]11292: WAF :: fetched 4 new logs [28-07-2022 13:12:01]16808: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659024721 [28-07-2022 13:12:01]16808: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 13:12:03]16808: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 13:12:04]16808: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-1312/20220728-131201-YuK1Uae50hXaAXt6CAlx-QAAAEQ [28-07-2022 13:12:04]16808: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 13:12:04]16808: WAF :: fetched 5 new logs [28-07-2022 13:13:02]22468: WAF :: fetched 3 new logs [28-07-2022 13:14:01]28097: WAF :: fetched 3 new logs [28-07-2022 13:15:01]1363: WAF :: fetched 1 new logs [28-07-2022 13:16:01]6829: WAF :: fetched 1 new logs [28-07-2022 13:17:01]12757: WAF :: fetched 2 new logs [28-07-2022 13:18:01]18105: WAF :: fetched 3 new logs [28-07-2022 13:19:01]24177: WAF :: fetched 3 new logs [28-07-2022 13:20:02]29618: WAF :: fetched 2 new logs [28-07-2022 13:21:01]3373: WAF :: fetched 4 new logs [28-07-2022 13:22:02]9040: WAF :: fetched 3 new logs [28-07-2022 13:23:01]14597: WAF :: fetched 5 new logs [28-07-2022 13:24:02]20339: WAF :: fetched 5 new logs [28-07-2022 13:25:01]25891: WAF :: fetched 7 new logs [28-07-2022 13:26:02]31633: WAF :: fetched 3 new logs [28-07-2022 13:29:01]16244: WAF :: fetched 3 new logs [28-07-2022 13:30:02]21842: WAF :: fetched 3 new logs [28-07-2022 13:34:02]12170: WAF :: fetched 2 new logs [28-07-2022 13:38:02]2506: WAF :: fetched 2 new logs [28-07-2022 13:39:01]8122: WAF :: fetched 1 new logs [28-07-2022 13:41:01]19384: WAF :: fetched 10 new logs [28-07-2022 13:41:01]19384: Checking for user cron vulnerabilities [28-07-2022 13:42:01]25052: WAF :: fetched 26 new logs [28-07-2022 13:43:01]30611: WAF :: fetched 31 new logs [28-07-2022 13:44:01]3799: Checking ditributed CMS bruteforce attacks [28-07-2022 13:44:01]3799: WAF :: fetched 1 new logs [28-07-2022 13:45:01]: Checking for definition updates [28-07-2022 13:45:02]9871: WAF :: fetched 1 new logs [28-07-2022 13:47:02]21226: WAF :: fetched 1 new logs [28-07-2022 13:51:02]11706: WAF :: fetched 4 new logs [28-07-2022 13:53:02]23097: WAF :: fetched 1 new logs [28-07-2022 13:54:02]28943: WAF :: fetched 1 new logs [28-07-2022 14:02:01]10534: WAF :: fetched 1 new logs [28-07-2022 14:02:01]10549: httpd.conf changed. Refreshing watchlist. [28-07-2022 14:03:02]16336: WAF :: fetched 3 new logs [28-07-2022 14:04:01]22170: WAF :: fetched 2 new logs [28-07-2022 14:08:01]13052: WAF :: fetched 2 new logs [28-07-2022 14:09:02]18932: WAF :: fetched 1 new logs [28-07-2022 14:10:01]24683: WAF :: fetched 2 new logs [28-07-2022 14:11:02]30640: WAF :: fetched 2 new logs [28-07-2022 14:12:01]4102: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659028321 [28-07-2022 14:12:01]4102: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 14:12:03]4102: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 14:12:04]4102: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-1412/20220728-141201-YuLDYUKYYfJvipJq5rCABwAAAAo [28-07-2022 14:12:04]4102: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 14:12:04]4102: WAF :: fetched 1 new logs [28-07-2022 14:13:02]9898: WAF :: fetched 1 new logs [28-07-2022 14:14:01]15737: WAF :: fetched 19 new logs [28-07-2022 14:15:02]21476: WAF :: fetched 8 new logs [28-07-2022 14:16:01]27200: WAF :: fetched 2 new logs [28-07-2022 14:17:02]638: WAF :: fetched 9 new logs [28-07-2022 14:18:01]6498: WAF :: fetched 31 new logs [28-07-2022 14:19:01]12418: WAF :: fetched 37 new logs [28-07-2022 14:20:02]18249: WAF :: fetched 11 new logs [28-07-2022 14:21:01]24205: WAF :: fetched 7 new logs [28-07-2022 14:22:02]30044: WAF :: fetched 5 new logs [28-07-2022 14:23:01]3460: WAF :: fetched 4 new logs [28-07-2022 14:24:02]9423: WAF :: fetched 5 new logs [28-07-2022 14:25:01]15156: WAF :: fetched 100 new logs [28-07-2022 14:26:01]21062: WAF :: fetched 5 new logs [28-07-2022 14:27:02]26943: WAF :: fetched 8 new logs [28-07-2022 14:30:01]12188: WAF :: fetched 3 new logs [28-07-2022 14:31:01]17890: WAF :: fetched 2 new logs [28-07-2022 14:33:02]29646: WAF :: fetched 2 new logs [28-07-2022 14:34:01]3576: WAF :: fetched 2 new logs [28-07-2022 14:35:02]8997: WAF :: fetched 1 new logs [28-07-2022 14:36:01]15159: WAF :: fetched 2 new logs [28-07-2022 14:38:01]26598: WAF :: fetched 1 new logs [28-07-2022 14:39:02]32178: WAF :: fetched 2 new logs [28-07-2022 14:40:01]6088: WAF :: fetched 5 new logs [28-07-2022 14:41:01]11928: WAF :: fetched 1 new logs [28-07-2022 14:41:01]11928: Checking for user cron vulnerabilities [28-07-2022 14:44:02]29275: Checking ditributed CMS bruteforce attacks [28-07-2022 14:46:02]8613: WAF :: fetched 1 new logs [28-07-2022 14:49:02]25949: WAF :: fetched 3 new logs [28-07-2022 14:50:01]31700: WAF :: fetched 3 new logs [28-07-2022 14:51:01]5213: WAF :: fetched 1 new logs [28-07-2022 14:53:01]16709: Updated license status via CDN [28-07-2022 14:54:02]22252: WAF :: fetched 2 new logs [28-07-2022 14:57:02]7886: WAF :: fetched 2 new logs [28-07-2022 14:58:01]13599: WAF :: fetched 1 new logs [28-07-2022 15:00:02]24731: WAF :: fetched 1 new logs [28-07-2022 15:01:01]30861: Reseting cPGuard inotify settings [28-07-2022 15:01:01]30884: WAF :: fetched 1 new logs [28-07-2022 15:06:01]27604: WAF :: fetched 1 new logs [28-07-2022 15:07:02]1144: WAF :: fetched 14 new logs [28-07-2022 15:09:01]12803: WAF :: fetched 13 new logs [28-07-2022 15:10:02]18517: WAF :: fetched 15 new logs [28-07-2022 15:11:01]24247: WAF :: fetched 1 new logs [28-07-2022 15:12:02]29965: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659031922 [28-07-2022 15:12:02]29965: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 15:12:04]29965: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 15:12:04]29965: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-1512/20220728-151202-YuLRcnlBjuRXezMsVagB5wAAABw [28-07-2022 15:12:04]29965: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 15:12:05]29965: WAF :: fetched 2 new logs [28-07-2022 15:13:02]3432: WAF :: fetched 2 new logs [28-07-2022 15:14:01]9135: WAF :: fetched 17 new logs [28-07-2022 15:16:01]20677: WAF :: fetched 1 new logs [28-07-2022 15:17:01]26365: WAF :: fetched 1 new logs [28-07-2022 15:18:02]32075: WAF :: fetched 1 new logs [28-07-2022 15:19:01]5625: WAF :: fetched 2 new logs [28-07-2022 15:21:01]17328: WAF :: fetched 1 new logs [28-07-2022 15:23:01]28795: WAF :: fetched 1 new logs [28-07-2022 15:30:02]4789: WAF :: fetched 3 new logs [28-07-2022 15:32:02]16560: WAF :: fetched 1 new logs [28-07-2022 15:38:01]18487: WAF :: fetched 1 new logs [28-07-2022 15:41:01]3318: WAF :: fetched 1 new logs [28-07-2022 15:41:01]3318: Checking for user cron vulnerabilities [28-07-2022 15:44:01]20853: Checking ditributed CMS bruteforce attacks [28-07-2022 15:44:01]20853: WAF :: fetched 4 new logs [28-07-2022 15:45:01]26411: WAF :: fetched 15 new logs [28-07-2022 15:48:01]11994: WAF :: fetched 1 new logs [28-07-2022 15:49:01]17664: WAF :: fetched 2 new logs [28-07-2022 15:52:01]3226: WAF :: fetched 1 new logs [28-07-2022 15:55:01]20546: WAF :: fetched 3 new logs [28-07-2022 15:56:01]26709: WAF :: fetched 2 new logs [28-07-2022 15:57:01]32399: WAF :: fetched 3 new logs [28-07-2022 15:59:01]11734: WAF :: fetched 1 new logs [28-07-2022 16:02:01]29768: WAF :: fetched 3 new logs [28-07-2022 16:06:01]20859: WAF :: fetched 3 new logs [28-07-2022 16:07:01]26641: WAF :: fetched 3 new logs [28-07-2022 16:10:02]11801: WAF :: fetched 1 new logs [28-07-2022 16:12:02]23402: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659035522 [28-07-2022 16:12:02]23402: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 16:12:04]23402: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 16:12:04]23402: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-1612/20220728-161202-YuLfggQbpQOZYhgzO3QcmQAAABI [28-07-2022 16:12:04]23402: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [28-07-2022 16:12:05]23402: WAF :: fetched 1 new logs [28-07-2022 16:13:02]29150: WAF :: fetched 1 new logs [28-07-2022 16:14:02]2716: WAF :: fetched 1 new logs [28-07-2022 16:15:02]8596: WAF :: fetched 4 new logs [28-07-2022 16:16:02]14458: WAF :: fetched 7 new logs [28-07-2022 16:17:01]20136: WAF :: fetched 1 new logs [28-07-2022 16:18:02]25970: WAF :: fetched 5 new logs [28-07-2022 16:19:01]31656: WAF :: fetched 1 new logs [28-07-2022 16:20:02]5375: WAF :: fetched 4 new logs [28-07-2022 16:21:01]11231: WAF :: fetched 1 new logs [28-07-2022 16:22:01]17040: WAF :: fetched 1 new logs [28-07-2022 16:23:02]22814: WAF :: fetched 3 new logs [28-07-2022 16:25:02]2231: WAF :: fetched 1 new logs [28-07-2022 16:28:02]19651: WAF :: fetched 2 new logs [28-07-2022 16:31:01]4749: WAF :: fetched 2 new logs [28-07-2022 16:34:02]22055: WAF :: fetched 2 new logs [28-07-2022 16:35:02]27891: WAF :: fetched 1 new logs [28-07-2022 16:36:01]1334: WAF :: fetched 1 new logs [28-07-2022 16:37:02]7240: WAF :: fetched 1 new logs [28-07-2022 16:40:01]24352: WAF :: fetched 4 new logs [28-07-2022 16:41:01]30150: Checking for user cron vulnerabilities [28-07-2022 16:44:02]15222: Checking ditributed CMS bruteforce attacks [28-07-2022 16:44:02]15222: WAF :: fetched 2 new logs [28-07-2022 16:45:02]20978: WAF :: fetched 2 new logs [28-07-2022 16:47:02]32470: WAF :: fetched 4 new logs [28-07-2022 16:48:01]5903: WAF :: fetched 3 new logs [28-07-2022 16:49:01]11313: WAF :: fetched 17 new logs [28-07-2022 16:50:02]17290: WAF :: fetched 5 new logs [28-07-2022 16:51:02]23453: WAF :: fetched 2 new logs [28-07-2022 16:52:01]29226: WAF :: fetched 3 new logs [28-07-2022 16:53:02]2292: WAF :: fetched 2 new logs [28-07-2022 16:55:02]14051: WAF :: fetched 5 new logs [28-07-2022 16:58:01]31816: WAF :: fetched 1 new logs [28-07-2022 17:00:01]10965: WAF :: fetched 1 new logs [28-07-2022 17:02:02]23071: WAF :: fetched 1 new logs [28-07-2022 17:03:02]28794: WAF :: fetched 4 new logs [28-07-2022 17:04:01]2141: WAF :: fetched 4 new logs [28-07-2022 17:05:02]7663: WAF :: fetched 6 new logs [28-07-2022 17:06:01]13796: WAF :: fetched 5 new logs [28-07-2022 17:10:01]4819: WAF :: fetched 3 new logs [28-07-2022 17:11:02]10717: WAF :: fetched 3 new logs [28-07-2022 17:12:01]16415: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659039121 [28-07-2022 17:12:01]16415: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 17:12:03]16415: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 17:12:03]16415: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-1712/20220728-171201-YuLtkeDpMRqnmOCE9zXhXAAAABw [28-07-2022 17:12:03]16415: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 17:12:04]16415: WAF :: fetched 83 new logs [28-07-2022 17:13:02]21980: WAF :: fetched 1 new logs [28-07-2022 17:13:02]21968: httpd.conf changed. Refreshing watchlist. [28-07-2022 17:14:01]28179: httpd.conf changed. Refreshing watchlist. [28-07-2022 17:16:02]7661: WAF :: fetched 2 new logs [28-07-2022 17:17:01]13324: WAF :: fetched 4 new logs [28-07-2022 17:19:01]24859: WAF :: fetched 2 new logs [28-07-2022 17:22:02]10201: WAF :: fetched 2 new logs [28-07-2022 17:27:02]6954: WAF :: fetched 3 new logs [28-07-2022 17:28:01]12647: WAF :: fetched 1 new logs [28-07-2022 17:30:01]24182: WAF :: fetched 351 new logs [28-07-2022 17:31:01]29826: WAF :: fetched 2 new logs [28-07-2022 17:32:01]3716: WAF :: fetched 1 new logs [28-07-2022 17:34:01]15221: WAF :: fetched 1 new logs [28-07-2022 17:35:02]20791: WAF :: fetched 3 new logs [28-07-2022 17:38:01]6022: WAF :: fetched 1 new logs [28-07-2022 17:40:01]17733: WAF :: fetched 1 new logs [28-07-2022 17:41:01]23861: Checking for user cron vulnerabilities [28-07-2022 17:42:01]29447: WAF :: fetched 1 new logs [28-07-2022 17:43:01]3394: WAF :: fetched 2 new logs [28-07-2022 17:44:01]9166: Checking ditributed CMS bruteforce attacks [28-07-2022 17:44:01]9166: WAF :: fetched 2 new logs [28-07-2022 17:46:01]20844: WAF :: fetched 1 new logs [28-07-2022 17:48:01]32300: WAF :: fetched 4 new logs [28-07-2022 17:49:02]5809: WAF :: fetched 1 new logs [28-07-2022 17:50:01]11756: WAF :: fetched 12 new logs [28-07-2022 17:51:01]17612: WAF :: fetched 20 new logs [28-07-2022 17:52:01]23330: WAF :: fetched 5 new logs [28-07-2022 17:53:01]28794: WAF :: fetched 4 new logs [28-07-2022 17:54:01]2629: WAF :: fetched 5 new logs [28-07-2022 17:55:02]8209: WAF :: fetched 8 new logs [28-07-2022 17:56:01]14359: WAF :: fetched 3 new logs [28-07-2022 17:57:02]20090: WAF :: fetched 7 new logs [28-07-2022 17:58:01]25920: WAF :: fetched 7 new logs [28-07-2022 17:58:01]25916: httpd.conf changed. Refreshing watchlist. [28-07-2022 17:59:02]31688: WAF :: fetched 8 new logs [28-07-2022 18:00:01]4936: WAF :: fetched 12 new logs [28-07-2022 18:01:02]11242: WAF :: fetched 5 new logs [28-07-2022 18:02:01]16963: WAF :: fetched 11 new logs [28-07-2022 18:03:02]22870: WAF :: fetched 8 new logs [28-07-2022 18:04:01]28943: WAF :: fetched 24 new logs [28-07-2022 18:05:02]3020: WAF :: fetched 31 new logs [28-07-2022 18:06:01]9219: WAF :: fetched 8 new logs [28-07-2022 18:07:02]15068: WAF :: fetched 6 new logs [28-07-2022 18:08:02]20763: WAF :: fetched 13 new logs [28-07-2022 18:09:01]26485: WAF :: fetched 8 new logs [28-07-2022 18:10:02]32455: WAF :: fetched 15 new logs [28-07-2022 18:11:01]6091: WAF :: fetched 8 new logs [28-07-2022 18:12:01]11772: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659042721 [28-07-2022 18:12:01]11772: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 18:12:03]11772: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 18:12:03]11772: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-1812/20220728-181201-YuL7oUnvXPWmb1FW_2NdeAAAAB4 [28-07-2022 18:12:03]11772: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 18:12:04]11772: WAF :: fetched 9 new logs [28-07-2022 18:13:01]17313: WAF :: fetched 2 new logs [28-07-2022 18:14:01]23436: WAF :: fetched 8 new logs [28-07-2022 18:15:01]28962: WAF :: fetched 2 new logs [28-07-2022 18:16:01]2929: WAF :: fetched 4 new logs [28-07-2022 18:17:02]8719: WAF :: fetched 4 new logs [28-07-2022 18:18:01]14401: WAF :: fetched 3 new logs [28-07-2022 18:19:02]20195: WAF :: fetched 5 new logs [28-07-2022 18:20:01]26044: WAF :: fetched 9 new logs [28-07-2022 18:21:02]31882: WAF :: fetched 5 new logs [28-07-2022 18:22:01]5280: WAF :: fetched 2 new logs [28-07-2022 18:23:02]11003: WAF :: fetched 1 new logs [28-07-2022 18:24:01]16739: WAF :: fetched 6 new logs [28-07-2022 18:25:01]22644: WAF :: fetched 4 new logs [28-07-2022 18:26:02]28436: WAF :: fetched 7 new logs [28-07-2022 18:27:02]1955: WAF :: fetched 1 new logs [28-07-2022 18:31:02]25279: WAF :: fetched 2 new logs [28-07-2022 18:32:01]30988: WAF :: fetched 7 new logs [28-07-2022 18:33:02]4399: WAF :: fetched 5 new logs [28-07-2022 18:34:01]10025: WAF :: fetched 6 new logs [28-07-2022 18:35:02]15884: WAF :: fetched 5 new logs [28-07-2022 18:36:01]21543: WAF :: fetched 3 new logs [28-07-2022 18:37:02]27253: WAF :: fetched 5 new logs [28-07-2022 18:38:01]373: WAF :: fetched 4 new logs [28-07-2022 18:39:02]6206: WAF :: fetched 6 new logs [28-07-2022 18:40:01]11921: WAF :: fetched 6 new logs [28-07-2022 18:41:02]17671: WAF :: fetched 4 new logs [28-07-2022 18:41:02]17671: Checking for user cron vulnerabilities [28-07-2022 18:42:01]23260: WAF :: fetched 6 new logs [28-07-2022 18:43:02]28958: WAF :: fetched 4 new logs [28-07-2022 18:44:01]2249: Checking ditributed CMS bruteforce attacks [28-07-2022 18:44:01]2249: WAF :: fetched 6 new logs [28-07-2022 18:45:02]8043: WAF :: fetched 19 new logs [28-07-2022 18:46:01]13753: WAF :: fetched 9 new logs [28-07-2022 18:47:02]19430: WAF :: fetched 12 new logs [28-07-2022 18:48:01]25103: WAF :: fetched 9 new logs [28-07-2022 18:49:02]30821: WAF :: fetched 10 new logs [28-07-2022 18:50:01]4298: WAF :: fetched 11 new logs [28-07-2022 18:51:01]9982: WAF :: fetched 3 new logs [28-07-2022 18:52:01]15367: WAF :: fetched 8 new logs [28-07-2022 18:53:01]21414: WAF :: fetched 8 new logs [28-07-2022 18:54:02]26867: WAF :: fetched 5 new logs [28-07-2022 18:55:01]615: WAF :: fetched 5 new logs [28-07-2022 18:56:02]6647: WAF :: fetched 9 new logs [28-07-2022 18:57:01]12246: WAF :: fetched 7 new logs [28-07-2022 18:58:01]17680: WAF :: fetched 9 new logs [28-07-2022 18:59:01]23655: WAF :: fetched 11 new logs [28-07-2022 19:00:01]29262: WAF :: fetched 20 new logs [28-07-2022 19:01:01]3143: WAF :: fetched 6 new logs [28-07-2022 19:02:02]8826: WAF :: fetched 5 new logs [28-07-2022 19:03:01]14483: WAF :: fetched 7 new logs [28-07-2022 19:04:02]20199: WAF :: fetched 2 new logs [28-07-2022 19:05:01]25874: WAF :: fetched 3 new logs [28-07-2022 19:06:02]31690: WAF :: fetched 5 new logs [28-07-2022 19:07:02]5110: WAF :: fetched 4 new logs [28-07-2022 19:08:01]10730: WAF :: fetched 5 new logs [28-07-2022 19:09:01]16437: WAF :: fetched 1 new logs [28-07-2022 19:10:01]21854: WAF :: fetched 4 new logs [28-07-2022 19:11:01]27992: WAF :: fetched 4 new logs [28-07-2022 19:12:01]1026: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659046321 [28-07-2022 19:12:02]1026: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 19:12:04]1026: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 19:12:04]1026: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-1912/20220728-191202-YuMJskOhvPGf7WRRgBDxzgAAABg [28-07-2022 19:12:04]1026: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 19:12:04]1026: WAF :: fetched 2 new logs [28-07-2022 19:13:02]7253: WAF :: fetched 6 new logs [28-07-2022 19:14:01]12889: WAF :: fetched 4 new logs [28-07-2022 19:15:02]18721: WAF :: fetched 5 new logs [28-07-2022 19:16:01]24562: WAF :: fetched 4 new logs [28-07-2022 19:17:02]30231: WAF :: fetched 8 new logs [28-07-2022 19:18:01]3544: WAF :: fetched 4 new logs [28-07-2022 19:19:02]9296: WAF :: fetched 4 new logs [28-07-2022 19:20:01]14970: WAF :: fetched 2 new logs [28-07-2022 19:21:02]20779: WAF :: fetched 2 new logs [28-07-2022 19:22:01]26381: WAF :: fetched 1 new logs [28-07-2022 19:23:02]32073: WAF :: fetched 2 new logs [28-07-2022 19:24:01]5392: WAF :: fetched 4 new logs [28-07-2022 19:25:02]11112: WAF :: fetched 5 new logs [28-07-2022 19:26:01]16768: WAF :: fetched 6 new logs [28-07-2022 19:27:02]22443: WAF :: fetched 2 new logs [28-07-2022 19:28:01]27997: WAF :: fetched 5 new logs [28-07-2022 19:29:02]1280: WAF :: fetched 3 new logs [28-07-2022 19:30:01]6984: WAF :: fetched 3 new logs [28-07-2022 19:31:02]12713: WAF :: fetched 5 new logs [28-07-2022 19:32:01]18259: WAF :: fetched 4 new logs [28-07-2022 19:33:02]23907: WAF :: fetched 2 new logs [28-07-2022 19:34:01]29474: WAF :: fetched 1 new logs [28-07-2022 19:35:02]2988: WAF :: fetched 1 new logs [28-07-2022 19:36:01]8675: WAF :: fetched 2 new logs [28-07-2022 19:37:02]14404: WAF :: fetched 4 new logs [28-07-2022 19:38:01]19960: WAF :: fetched 3 new logs [28-07-2022 19:39:01]25517: WAF :: fetched 2 new logs [28-07-2022 19:41:01]4636: WAF :: fetched 2 new logs [28-07-2022 19:41:01]4636: Checking for user cron vulnerabilities [28-07-2022 19:43:01]15762: WAF :: fetched 3 new logs [28-07-2022 19:44:01]21357: Checking ditributed CMS bruteforce attacks [28-07-2022 19:44:02]21357: WAF :: fetched 1 new logs [28-07-2022 19:45:01]: Checking for definition updates [28-07-2022 19:45:02]26906: Updated virus defnition : malware.expert.ndb [28-07-2022 19:45:04]26906: Updated virus defnition : malware.expert.hdb [28-07-2022 19:47:01]5884: WAF :: fetched 1 new logs [28-07-2022 19:48:01]11501: WAF :: fetched 2 new logs [28-07-2022 19:49:01]17041: WAF :: fetched 1 new logs [28-07-2022 19:51:01]28437: WAF :: fetched 4 new logs [28-07-2022 19:53:01]7415: WAF :: fetched 2 new logs [28-07-2022 19:54:01]12728: WAF :: fetched 2 new logs [28-07-2022 19:55:01]18648: WAF :: fetched 1 new logs [28-07-2022 19:56:02]24165: WAF :: fetched 3 new logs [28-07-2022 19:57:01]30125: WAF :: fetched 2 new logs [28-07-2022 20:01:01]22093: WAF :: fetched 1 new logs [28-07-2022 20:02:02]28027: WAF :: fetched 1 new logs [28-07-2022 20:06:01]19710: WAF :: fetched 1 new logs [28-07-2022 20:08:01]31439: WAF :: fetched 1 new logs [28-07-2022 20:10:02]11089: WAF :: fetched 3 new logs [28-07-2022 20:11:01]16763: WAF :: fetched 4 new logs [28-07-2022 20:12:01]22222: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659049921 [28-07-2022 20:12:01]22222: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 20:12:03]22222: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 20:12:04]22222: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-2012/20220728-201201-YuMXwaO-p2kN3NJRs7eUCgAAACQ [28-07-2022 20:12:04]22222: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 20:12:04]22222: WAF :: fetched 6 new logs [28-07-2022 20:13:01]28637: WAF :: fetched 6 new logs [28-07-2022 20:14:02]2377: WAF :: fetched 27 new logs [28-07-2022 20:15:01]8431: WAF :: fetched 9 new logs [28-07-2022 20:16:02]14070: WAF :: fetched 18 new logs [28-07-2022 20:17:01]20092: WAF :: fetched 4 new logs [28-07-2022 20:18:01]25713: WAF :: fetched 4 new logs [28-07-2022 20:19:01]31082: WAF :: fetched 3 new logs [28-07-2022 20:20:01]4764: WAF :: fetched 5 new logs [28-07-2022 20:21:01]10567: WAF :: fetched 1 new logs [28-07-2022 20:24:01]27439: WAF :: fetched 4 new logs [28-07-2022 20:26:01]6505: WAF :: fetched 1 new logs [28-07-2022 20:27:02]11837: WAF :: fetched 3 new logs [28-07-2022 20:28:01]17776: WAF :: fetched 1 new logs [28-07-2022 20:31:02]2472: WAF :: fetched 1 new logs [28-07-2022 20:33:02]13654: WAF :: fetched 2 new logs [28-07-2022 20:34:01]19098: WAF :: fetched 1 new logs [28-07-2022 20:37:02]3752: WAF :: fetched 1 new logs [28-07-2022 20:38:01]9311: WAF :: fetched 2 new logs [28-07-2022 20:40:01]20519: WAF :: fetched 2 new logs [28-07-2022 20:41:02]26364: WAF :: fetched 1 new logs [28-07-2022 20:41:02]26364: Checking for user cron vulnerabilities [28-07-2022 20:44:01]10891: Checking ditributed CMS bruteforce attacks [28-07-2022 20:48:01]1227: WAF :: fetched 1 new logs [28-07-2022 20:49:02]6899: WAF :: fetched 1 new logs [28-07-2022 20:52:01]23742: WAF :: fetched 3 new logs [28-07-2022 20:56:01]14151: WAF :: fetched 1 new logs [28-07-2022 20:58:01]25529: WAF :: fetched 1 new logs [28-07-2022 21:01:01]10612: WAF :: fetched 3 new logs [28-07-2022 21:02:01]16342: WAF :: fetched 1 new logs [28-07-2022 21:03:02]21690: WAF :: fetched 4 new logs [28-07-2022 21:05:02]428: WAF :: fetched 15 new logs [28-07-2022 21:07:02]12300: WAF :: fetched 2 new logs [28-07-2022 21:10:01]29077: WAF :: fetched 1 new logs [28-07-2022 21:11:02]2537: WAF :: fetched 1 new logs [28-07-2022 21:12:01]8093: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659053521 [28-07-2022 21:12:01]8093: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 21:12:03]8093: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 21:12:03]8093: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-2112/20220728-211201-YuMl0SH8omrmE3AqbJ0YywAAAA8 [28-07-2022 21:12:03]8093: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 21:12:04]8093: WAF :: fetched 1 new logs [28-07-2022 21:14:01]19322: WAF :: fetched 1 new logs [28-07-2022 21:18:01]9330: WAF :: fetched 9 new logs [28-07-2022 21:19:01]15344: WAF :: fetched 1 new logs [28-07-2022 21:22:01]32194: WAF :: fetched 1 new logs [28-07-2022 21:23:01]5497: WAF :: fetched 1 new logs [28-07-2022 21:24:01]11045: WAF :: fetched 4 new logs [28-07-2022 21:25:01]16728: WAF :: fetched 3 new logs [28-07-2022 21:26:01]22462: WAF :: fetched 2 new logs [28-07-2022 21:27:02]28067: WAF :: fetched 4 new logs [28-07-2022 21:28:01]1333: WAF :: fetched 5 new logs [28-07-2022 21:29:01]7071: WAF :: fetched 3 new logs [28-07-2022 21:30:02]12700: WAF :: fetched 3 new logs [28-07-2022 21:31:02]18433: WAF :: fetched 2 new logs [28-07-2022 21:32:01]23981: WAF :: fetched 1 new logs [28-07-2022 21:33:02]29589: WAF :: fetched 2 new logs [28-07-2022 21:35:02]8476: WAF :: fetched 3 new logs [28-07-2022 21:36:01]14199: WAF :: fetched 1 new logs [28-07-2022 21:37:02]19910: WAF :: fetched 1 new logs [28-07-2022 21:38:01]25457: WAF :: fetched 1 new logs [28-07-2022 21:39:02]31017: WAF :: fetched 1 new logs [28-07-2022 21:40:01]4269: WAF :: fetched 3 new logs [28-07-2022 21:41:01]10052: WAF :: fetched 9 new logs [28-07-2022 21:41:01]10052: Checking for user cron vulnerabilities [28-07-2022 21:42:01]15329: WAF :: fetched 9 new logs [28-07-2022 21:43:02]21332: WAF :: fetched 8 new logs [28-07-2022 21:44:01]26869: Checking ditributed CMS bruteforce attacks [28-07-2022 21:44:01]26869: WAF :: fetched 6 new logs [28-07-2022 21:45:02]32622: WAF :: fetched 11 new logs [28-07-2022 21:46:01]6051: WAF :: fetched 10 new logs [28-07-2022 21:47:02]11712: WAF :: fetched 10 new logs [28-07-2022 21:48:01]17257: WAF :: fetched 7 new logs [28-07-2022 21:49:02]22908: WAF :: fetched 9 new logs [28-07-2022 21:50:01]28465: WAF :: fetched 6 new logs [28-07-2022 21:51:01]1809: WAF :: fetched 3 new logs [28-07-2022 21:52:01]7236: WAF :: fetched 5 new logs [28-07-2022 21:53:01]13185: WAF :: fetched 7 new logs [28-07-2022 21:54:01]18752: WAF :: fetched 6 new logs [28-07-2022 21:55:02]24423: WAF :: fetched 6 new logs [28-07-2022 21:56:01]30109: WAF :: fetched 1 new logs [28-07-2022 21:57:02]3431: WAF :: fetched 1 new logs [28-07-2022 21:58:01]8982: WAF :: fetched 2 new logs [28-07-2022 21:59:02]14604: WAF :: fetched 3 new logs [28-07-2022 22:00:01]19822: WAF :: fetched 1 new logs [28-07-2022 22:01:02]26059: WAF :: fetched 2 new logs [28-07-2022 22:03:02]4934: WAF :: fetched 2 new logs [28-07-2022 22:04:01]10531: WAF :: fetched 1 new logs [28-07-2022 22:05:02]16189: WAF :: fetched 1 new logs [28-07-2022 22:06:01]22154: WAF :: fetched 3 new logs [28-07-2022 22:07:01]27921: WAF :: fetched 7 new logs [28-07-2022 22:07:09]27917: Performing Domain reputation checks [28-07-2022 22:08:01]1005: WAF :: fetched 12 new logs [28-07-2022 22:09:01]7571: WAF :: fetched 87 new logs [28-07-2022 22:10:02]13103: WAF :: fetched 46 new logs [28-07-2022 22:11:01]19247: WAF :: fetched 11 new logs [28-07-2022 22:12:02]24645: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659057122 [28-07-2022 22:12:02]24645: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 22:12:04]24645: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 22:12:04]24645: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-2212/20220728-221202-YuMz4iwMgREc7uMbUxWaIwAAAEE [28-07-2022 22:12:04]24645: WAF :: No suitable log file found. Using SQLite.. [28-07-2022 22:12:04]24645: WAF :: fetched 7 new logs [28-07-2022 22:13:01]30734: WAF :: fetched 2 new logs [28-07-2022 22:16:02]15407: WAF :: fetched 1 new logs [28-07-2022 22:17:01]20903: WAF :: fetched 1 new logs [28-07-2022 22:19:01]32045: WAF :: fetched 5 new logs [28-07-2022 22:20:02]5403: WAF :: fetched 3 new logs [28-07-2022 22:22:01]16708: WAF :: fetched 2 new logs [28-07-2022 22:22:01]16731: httpd.conf changed. Refreshing watchlist. [28-07-2022 22:23:01]22078: WAF :: fetched 1 new logs [28-07-2022 22:23:01]22079: httpd.conf changed. Refreshing watchlist. [28-07-2022 22:24:02]28193: WAF :: fetched 2 new logs [28-07-2022 22:25:01]1751: WAF :: fetched 1 new logs [28-07-2022 22:26:02]7708: WAF :: fetched 1 new logs [28-07-2022 22:27:01]13165: WAF :: fetched 3 new logs [28-07-2022 22:28:02]18824: WAF :: fetched 6 new logs [28-07-2022 22:29:01]24518: WAF :: fetched 3 new logs [28-07-2022 22:29:01]24528: httpd.conf changed. Refreshing watchlist. [28-07-2022 22:31:01]3624: WAF :: fetched 14 new logs [28-07-2022 22:32:02]9266: WAF :: fetched 1 new logs [28-07-2022 22:34:02]20117: WAF :: fetched 2 new logs [28-07-2022 22:36:02]31890: WAF :: fetched 1 new logs [28-07-2022 22:41:01]27820: Checking for user cron vulnerabilities [28-07-2022 22:44:01]12386: Checking ditributed CMS bruteforce attacks [28-07-2022 22:46:02]23678: WAF :: fetched 1 new logs [28-07-2022 22:48:02]2509: WAF :: fetched 1 new logs [28-07-2022 22:49:01]8071: WAF :: fetched 1 new logs [28-07-2022 22:51:01]19410: WAF :: fetched 1 new logs [28-07-2022 22:54:02]4006: WAF :: fetched 1 new logs [28-07-2022 22:55:01]9677: WAF :: fetched 1 new logs [28-07-2022 22:56:02]15631: WAF :: fetched 2 new logs [28-07-2022 22:57:01]21178: WAF :: fetched 2 new logs [28-07-2022 22:58:02]26864: WAF :: fetched 2 new logs [28-07-2022 22:59:01]32348: WAF :: fetched 1 new logs [28-07-2022 23:00:02]5401: WAF :: fetched 1 new logs [28-07-2022 23:06:02]7399: WAF :: fetched 1 new logs [28-07-2022 23:07:01]12902: WAF :: fetched 4 new logs [28-07-2022 23:07:53]13072: Performed RBL check for 23.111.136.34. [28-07-2022 23:09:01]24024: WAF :: fetched 1 new logs [28-07-2022 23:11:01]3012: WAF :: fetched 1 new logs [28-07-2022 23:12:02]8641: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659060722 [28-07-2022 23:12:02]8641: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [28-07-2022 23:12:04]8641: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [28-07-2022 23:12:04]8641: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220728/20220728-2312/20220728-231202-YuNB8oyZdkmfvTmTTspJVAAAAAo [28-07-2022 23:12:04]8641: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [28-07-2022 23:12:05]8641: WAF :: fetched 1 new logs [28-07-2022 23:13:01]14209: WAF :: fetched 2 new logs [28-07-2022 23:14:02]19840: WAF :: fetched 3 new logs [28-07-2022 23:16:02]31201: WAF :: fetched 2 new logs [28-07-2022 23:18:02]10027: WAF :: fetched 4 new logs [28-07-2022 23:20:02]21184: WAF :: fetched 1 new logs [28-07-2022 23:21:02]26852: WAF :: fetched 1 new logs [28-07-2022 23:22:02]32418: WAF :: fetched 5 new logs [28-07-2022 23:23:01]5646: WAF :: fetched 4 new logs [28-07-2022 23:24:02]11186: WAF :: fetched 8 new logs [28-07-2022 23:25:01]16734: WAF :: fetched 5 new logs [28-07-2022 23:26:02]22431: WAF :: fetched 6 new logs [28-07-2022 23:27:02]27923: WAF :: fetched 6 new logs [28-07-2022 23:28:02]1103: WAF :: fetched 6 new logs [28-07-2022 23:29:02]6725: WAF :: fetched 7 new logs [28-07-2022 23:30:02]12313: WAF :: fetched 10 new logs [28-07-2022 23:31:02]18039: WAF :: fetched 6 new logs [28-07-2022 23:32:01]23630: WAF :: fetched 7 new logs [28-07-2022 23:33:02]28956: WAF :: fetched 6 new logs [28-07-2022 23:34:01]2611: WAF :: fetched 7 new logs [28-07-2022 23:35:02]8063: WAF :: fetched 5 new logs [28-07-2022 23:36:01]14230: WAF :: fetched 7 new logs [28-07-2022 23:37:02]19582: WAF :: fetched 7 new logs [28-07-2022 23:38:01]25552: WAF :: fetched 5 new logs [28-07-2022 23:39:02]30881: WAF :: fetched 5 new logs [28-07-2022 23:40:01]4555: WAF :: fetched 5 new logs [28-07-2022 23:41:02]9968: WAF :: fetched 43 new logs [28-07-2022 23:41:02]9968: Checking for user cron vulnerabilities [28-07-2022 23:42:01]15958: WAF :: fetched 5 new logs [28-07-2022 23:43:02]21262: WAF :: fetched 6 new logs [28-07-2022 23:44:01]27196: Checking ditributed CMS bruteforce attacks [28-07-2022 23:44:01]27196: WAF :: fetched 6 new logs [28-07-2022 23:45:02]32434: WAF :: fetched 5 new logs [28-07-2022 23:46:01]6317: WAF :: fetched 8 new logs [28-07-2022 23:47:02]11682: WAF :: fetched 5 new logs [28-07-2022 23:48:01]17690: WAF :: fetched 5 new logs [28-07-2022 23:49:02]23003: WAF :: fetched 4 new logs [28-07-2022 23:50:01]29102: WAF :: fetched 7 new logs [28-07-2022 23:51:02]2182: WAF :: fetched 4 new logs [28-07-2022 23:52:01]8208: WAF :: fetched 7 new logs [28-07-2022 23:53:02]13672: WAF :: fetched 9 new logs [28-07-2022 23:54:01]19786: WAF :: fetched 5 new logs [28-07-2022 23:55:02]25988: httpd.conf changed. Refreshing watchlist. [28-07-2022 23:55:02]25976: WAF :: fetched 41 new logs [28-07-2022 23:56:01]32345: WAF :: fetched 72 new logs [28-07-2022 23:57:02]5813: httpd.conf changed. Refreshing watchlist. [28-07-2022 23:57:02]5819: WAF :: fetched 5 new logs [28-07-2022 23:58:01]11440: WAF :: fetched 4 new logs [28-07-2022 23:59:02]17134: httpd.conf changed. Refreshing watchlist. [28-07-2022 23:59:02]17154: WAF :: fetched 6 new logs [29-07-2022 00:00:02]22404: WAF :: fetched 6 new logs [29-07-2022 00:01:02]28996: httpd.conf changed. Refreshing watchlist. [29-07-2022 00:01:02]28985: WAF :: fetched 5 new logs [29-07-2022 00:01:05]28985: Sending daily report for July 29, 2022 [29-07-2022 00:02:01]2435: WAF :: fetched 5 new logs [29-07-2022 00:03:02]8133: WAF :: fetched 6 new logs [29-07-2022 00:04:01]13661: WAF :: fetched 6 new logs [29-07-2022 00:05:02]19347: WAF :: fetched 6 new logs [29-07-2022 00:05:02]19347: Deleted 0 entries older than 6 MONTH from scanner_logs [29-07-2022 00:05:02]19347: Deleted 0 files from Quarantine [29-07-2022 00:06:01]24970: WAF :: fetched 8 new logs [29-07-2022 00:07:02]30748: WAF :: fetched 5 new logs [29-07-2022 00:08:01]4041: WAF :: fetched 6 new logs [29-07-2022 00:09:02]9682: WAF :: fetched 5 new logs [29-07-2022 00:10:01]15223: WAF :: fetched 6 new logs [29-07-2022 00:11:02]20914: WAF :: fetched 8 new logs [29-07-2022 00:12:01]26552: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659064321 [29-07-2022 00:12:01]26552: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 00:12:03]26552: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 00:12:04]26552: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-0012/20220729-001201-YuNQAVnOh8UF8SpxDhb1_wAAABA [29-07-2022 00:12:04]26552: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 00:12:04]26552: WAF :: fetched 346 new logs [29-07-2022 00:13:02]32230: WAF :: fetched 6 new logs [29-07-2022 00:14:01]5490: WAF :: fetched 4 new logs [29-07-2022 00:15:02]11088: WAF :: fetched 4 new logs [29-07-2022 00:16:01]16857: WAF :: fetched 5 new logs [29-07-2022 00:17:01]22504: WAF :: fetched 4 new logs [29-07-2022 00:18:02]28134: WAF :: fetched 5 new logs [29-07-2022 00:19:01]1400: WAF :: fetched 6 new logs [29-07-2022 00:20:02]7180: WAF :: fetched 5 new logs [29-07-2022 00:21:01]12832: WAF :: fetched 4 new logs [29-07-2022 00:22:02]18614: WAF :: fetched 2 new logs [29-07-2022 00:23:01]24055: WAF :: fetched 4 new logs [29-07-2022 00:24:02]29656: WAF :: fetched 6 new logs [29-07-2022 00:25:01]2934: WAF :: fetched 5 new logs [29-07-2022 00:26:02]8619: WAF :: fetched 6 new logs [29-07-2022 00:27:01]14295: WAF :: fetched 36 new logs [29-07-2022 00:28:02]19962: WAF :: fetched 20 new logs [29-07-2022 00:28:02]19954: httpd.conf changed. Refreshing watchlist. [29-07-2022 00:29:01]25469: WAF :: fetched 18 new logs [29-07-2022 00:30:02]31090: WAF :: fetched 12 new logs [29-07-2022 00:31:01]4428: WAF :: fetched 6 new logs [29-07-2022 00:32:01]9838: WAF :: fetched 2 new logs [29-07-2022 00:33:01]15755: WAF :: fetched 8 new logs [29-07-2022 00:34:02]21144: WAF :: fetched 3 new logs [29-07-2022 00:35:01]27042: WAF :: fetched 1 new logs [29-07-2022 00:36:02]32750: WAF :: fetched 6 new logs [29-07-2022 00:37:01]6090: WAF :: fetched 4 new logs [29-07-2022 00:38:02]11683: WAF :: fetched 4 new logs [29-07-2022 00:39:01]17181: WAF :: fetched 3 new logs [29-07-2022 00:40:02]22772: WAF :: fetched 5 new logs [29-07-2022 00:41:01]28378: WAF :: fetched 7 new logs [29-07-2022 00:41:01]28378: Checking for user cron vulnerabilities [29-07-2022 00:42:02]1815: WAF :: fetched 4 new logs [29-07-2022 00:43:01]7380: WAF :: fetched 3 new logs [29-07-2022 00:44:01]13007: Checking ditributed CMS bruteforce attacks [29-07-2022 00:44:02]13007: WAF :: fetched 7 new logs [29-07-2022 00:45:01]: Checking for software updates [29-07-2022 00:45:01]18513: WAF :: fetched 3 new logs [29-07-2022 00:46:02]24211: WAF :: fetched 3 new logs [29-07-2022 00:47:02]29817: WAF :: fetched 3 new logs [29-07-2022 00:48:01]3162: WAF :: fetched 5 new logs [29-07-2022 00:50:01]14232: WAF :: fetched 3 new logs [29-07-2022 00:51:01]19833: WAF :: fetched 4 new logs [29-07-2022 00:52:01]25160: WAF :: fetched 3 new logs [29-07-2022 00:53:01]31082: WAF :: fetched 3 new logs [29-07-2022 00:54:01]4072: WAF :: fetched 5 new logs [29-07-2022 00:55:01]9974: WAF :: fetched 3 new logs [29-07-2022 00:56:01]15227: WAF :: fetched 4 new logs [29-07-2022 00:57:01]21225: WAF :: fetched 5 new logs [29-07-2022 00:58:01]26514: WAF :: fetched 5 new logs [29-07-2022 00:59:01]32409: WAF :: fetched 8 new logs [29-07-2022 01:00:02]5431: WAF :: fetched 8 new logs [29-07-2022 01:01:01]11694: WAF :: fetched 6 new logs [29-07-2022 01:02:02]17707: WAF :: fetched 6 new logs [29-07-2022 01:03:01]24238: WAF :: fetched 4 new logs [29-07-2022 01:04:01]30245: WAF :: fetched 6 new logs [29-07-2022 01:05:02]3896: WAF :: fetched 7 new logs [29-07-2022 01:06:01]9745: WAF :: fetched 8 new logs [29-07-2022 01:07:02]15834: WAF :: fetched 23 new logs [29-07-2022 01:08:01]21562: WAF :: fetched 9 new logs [29-07-2022 01:09:02]27172: WAF :: fetched 9 new logs [29-07-2022 01:10:01]305: WAF :: fetched 8 new logs [29-07-2022 01:11:01]6419: WAF :: fetched 4 new logs [29-07-2022 01:12:02]11905: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659067922 [29-07-2022 01:12:02]11905: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 01:12:04]11905: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 01:12:04]11905: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-0112/20220729-011202-YuNeElsRH8cuGC8L0HWv2AAAAAU [29-07-2022 01:12:04]11905: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 01:12:04]11905: WAF :: fetched 4 new logs [29-07-2022 01:13:01]17966: WAF :: fetched 2 new logs [29-07-2022 01:14:02]23518: WAF :: fetched 3 new logs [29-07-2022 01:15:01]29478: WAF :: fetched 8 new logs [29-07-2022 01:16:02]2943: WAF :: fetched 2 new logs [29-07-2022 01:17:02]8960: WAF :: fetched 1 new logs [29-07-2022 01:18:01]14798: WAF :: fetched 5 new logs [29-07-2022 01:19:02]20728: WAF :: fetched 5 new logs [29-07-2022 01:20:01]26555: WAF :: fetched 2 new logs [29-07-2022 01:21:02]32444: WAF :: fetched 5 new logs [29-07-2022 01:22:01]6057: WAF :: fetched 5 new logs [29-07-2022 01:23:02]11746: WAF :: fetched 2 new logs [29-07-2022 01:24:01]17596: WAF :: fetched 2 new logs [29-07-2022 01:25:02]23445: WAF :: fetched 2 new logs [29-07-2022 01:26:01]29218: WAF :: fetched 3 new logs [29-07-2022 01:27:02]3007: WAF :: fetched 9 new logs [29-07-2022 01:28:01]8688: WAF :: fetched 5 new logs [29-07-2022 01:29:02]14358: WAF :: fetched 4 new logs [29-07-2022 01:30:01]20168: WAF :: fetched 3 new logs [29-07-2022 01:31:02]25993: WAF :: fetched 5 new logs [29-07-2022 01:32:01]31677: WAF :: fetched 5 new logs [29-07-2022 01:33:02]4998: WAF :: fetched 7 new logs [29-07-2022 01:34:01]10917: WAF :: fetched 13 new logs [29-07-2022 01:35:02]16771: WAF :: fetched 8 new logs [29-07-2022 01:36:01]22548: WAF :: fetched 4 new logs [29-07-2022 01:37:02]28643: WAF :: fetched 4 new logs [29-07-2022 01:38:01]2181: WAF :: fetched 12 new logs [29-07-2022 01:39:02]8116: WAF :: fetched 2 new logs [29-07-2022 01:40:01]13904: WAF :: fetched 2 new logs [29-07-2022 01:41:02]19544: WAF :: fetched 5 new logs [29-07-2022 01:41:02]19544: Checking for user cron vulnerabilities [29-07-2022 01:42:01]25231: WAF :: fetched 1 new logs [29-07-2022 01:43:01]31026: WAF :: fetched 4 new logs [29-07-2022 01:44:01]4381: Checking ditributed CMS bruteforce attacks [29-07-2022 01:44:01]4381: WAF :: fetched 4 new logs [29-07-2022 01:45:01]: Checking for definition updates [29-07-2022 01:45:01]10506: WAF :: fetched 7 new logs [29-07-2022 01:45:02]10484: Updated virus defnition : malware.expert.ndb [29-07-2022 01:45:03]10484: Updated virus defnition : malware.expert.hdb [29-07-2022 01:46:01]16177: WAF :: fetched 4 new logs [29-07-2022 01:47:01]21783: WAF :: fetched 4 new logs [29-07-2022 01:48:01]27488: WAF :: fetched 5 new logs [29-07-2022 01:49:01]1245: WAF :: fetched 3 new logs [29-07-2022 01:50:01]6641: WAF :: fetched 4 new logs [29-07-2022 01:51:02]12711: WAF :: fetched 3 new logs [29-07-2022 01:52:01]18377: WAF :: fetched 3 new logs [29-07-2022 01:53:02]24012: WAF :: fetched 5 new logs [29-07-2022 01:54:01]29689: WAF :: fetched 5 new logs [29-07-2022 01:55:02]3186: WAF :: fetched 6 new logs [29-07-2022 01:56:01]9289: WAF :: fetched 7 new logs [29-07-2022 01:57:02]15010: WAF :: fetched 6 new logs [29-07-2022 01:58:01]20605: WAF :: fetched 6 new logs [29-07-2022 01:59:02]26187: WAF :: fetched 9 new logs [29-07-2022 02:00:02]31508: WAF :: fetched 5 new logs [29-07-2022 02:01:01]5243: WAF :: fetched 3 new logs [29-07-2022 02:02:02]11019: WAF :: fetched 2 new logs [29-07-2022 02:03:01]16595: WAF :: fetched 3 new logs [29-07-2022 02:04:02]22249: WAF :: fetched 6 new logs [29-07-2022 02:05:01]27774: WAF :: fetched 4 new logs [29-07-2022 02:06:02]1164: WAF :: fetched 4 new logs [29-07-2022 02:07:01]6857: WAF :: fetched 1 new logs [29-07-2022 02:08:02]12570: WAF :: fetched 3 new logs [29-07-2022 02:09:01]18184: WAF :: fetched 3 new logs [29-07-2022 02:10:01]23797: WAF :: fetched 6 new logs [29-07-2022 02:11:02]29271: WAF :: fetched 5 new logs [29-07-2022 02:12:01]3049: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659071521 [29-07-2022 02:12:01]3049: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 02:12:03]3049: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 02:12:04]3049: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-0212/20220729-021201-YuNsIZNGUc9wSq_MSJlJFQAAAA8 [29-07-2022 02:12:04]3049: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 02:12:04]3049: WAF :: fetched 4 new logs [29-07-2022 02:13:02]8487: WAF :: fetched 4 new logs [29-07-2022 02:14:01]14590: WAF :: fetched 5 new logs [29-07-2022 02:15:02]19980: WAF :: fetched 1 new logs [29-07-2022 02:16:01]26006: WAF :: fetched 3 new logs [29-07-2022 02:17:01]31755: WAF :: fetched 3 new logs [29-07-2022 02:19:02]10460: WAF :: fetched 3 new logs [29-07-2022 02:20:01]16467: WAF :: fetched 6 new logs [29-07-2022 02:21:02]22143: WAF :: fetched 4 new logs [29-07-2022 02:22:01]27792: WAF :: fetched 3 new logs [29-07-2022 02:23:02]1111: WAF :: fetched 5 new logs [29-07-2022 02:24:01]6859: WAF :: fetched 4 new logs [29-07-2022 02:25:01]12518: WAF :: fetched 1 new logs [29-07-2022 02:26:01]17947: WAF :: fetched 3 new logs [29-07-2022 02:27:01]24028: WAF :: fetched 11 new logs [29-07-2022 02:28:02]29408: WAF :: fetched 7 new logs [29-07-2022 02:29:01]3087: WAF :: fetched 3 new logs [29-07-2022 02:30:01]8465: WAF :: fetched 15 new logs [29-07-2022 02:31:02]14575: WAF :: fetched 6 new logs [29-07-2022 02:32:01]20303: WAF :: fetched 7 new logs [29-07-2022 02:33:02]25727: WAF :: fetched 7 new logs [29-07-2022 02:34:01]31785: WAF :: fetched 16 new logs [29-07-2022 02:35:02]5131: WAF :: fetched 5 new logs [29-07-2022 02:36:01]10716: WAF :: fetched 5 new logs [29-07-2022 02:37:02]16579: WAF :: fetched 8 new logs [29-07-2022 02:38:01]22257: WAF :: fetched 10 new logs [29-07-2022 02:39:02]27971: WAF :: fetched 8 new logs [29-07-2022 02:40:01]1478: WAF :: fetched 5 new logs [29-07-2022 02:41:02]8195: WAF :: fetched 6 new logs [29-07-2022 02:41:02]8195: Checking for user cron vulnerabilities [29-07-2022 02:42:01]14151: WAF :: fetched 4 new logs [29-07-2022 02:43:02]19933: WAF :: fetched 6 new logs [29-07-2022 02:44:01]25562: Checking ditributed CMS bruteforce attacks [29-07-2022 02:44:01]25562: WAF :: fetched 3 new logs [29-07-2022 02:45:02]31201: WAF :: fetched 3 new logs [29-07-2022 02:46:01]4602: WAF :: fetched 1 new logs [29-07-2022 02:47:02]10311: WAF :: fetched 3 new logs [29-07-2022 02:48:01]15877: WAF :: fetched 2 new logs [29-07-2022 02:49:01]21685: WAF :: fetched 5 new logs [29-07-2022 02:50:01]27055: WAF :: fetched 4 new logs [29-07-2022 02:51:01]975: WAF :: fetched 3 new logs [29-07-2022 02:52:02]6905: WAF :: fetched 3 new logs [29-07-2022 02:53:01]13324: WAF :: fetched 8 new logs [29-07-2022 02:53:01]13335: Updated license status via CDN [29-07-2022 02:54:02]18834: WAF :: fetched 7 new logs [29-07-2022 02:55:01]25088: WAF :: fetched 14 new logs [29-07-2022 02:56:02]30479: WAF :: fetched 13 new logs [29-07-2022 02:57:01]4314: WAF :: fetched 13 new logs [29-07-2022 02:58:02]9594: WAF :: fetched 10 new logs [29-07-2022 02:59:01]15865: WAF :: fetched 13 new logs [29-07-2022 03:00:02]21605: WAF :: fetched 11 new logs [29-07-2022 03:00:05]21605: Found and updated 31 CMS installations [29-07-2022 03:00:17]21605: Wordpress installation #1 brgestor.com.br has errors [29-07-2022 03:01:01]27881: WAF :: fetched 11 new logs [29-07-2022 03:02:02]1525: WAF :: fetched 15 new logs [29-07-2022 03:02:27]21605: Sending CMS version vulnerability report emails to cpanel users [29-07-2022 03:02:30]21605: Checking wordpress installations for suspicious directories [29-07-2022 03:03:01]7517: WAF :: fetched 14 new logs [29-07-2022 03:04:02]13500: WAF :: fetched 12 new logs [29-07-2022 03:04:28]7562: Sending CMS version vulnerability report emails to cpanel users [29-07-2022 03:04:31]7562: Checking wordpress installations for suspicious directories [29-07-2022 03:05:01]19391: WAF :: fetched 9 new logs [29-07-2022 03:06:02]25082: WAF :: fetched 7 new logs [29-07-2022 03:07:01]30735: WAF :: fetched 7 new logs [29-07-2022 03:08:02]4079: WAF :: fetched 17 new logs [29-07-2022 03:09:02]9746: WAF :: fetched 11 new logs [29-07-2022 03:10:01]15340: WAF :: fetched 9 new logs [29-07-2022 03:11:02]21027: WAF :: fetched 4 new logs [29-07-2022 03:12:01]26740: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659075121 [29-07-2022 03:12:01]26740: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 03:12:03]26740: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 03:12:04]26740: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-0312/20220729-031201-YuN6MXDTBBUorohTyUup6AAAABU [29-07-2022 03:12:04]26740: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 03:12:04]26740: WAF :: fetched 11 new logs [29-07-2022 03:13:02]32431: WAF :: fetched 8 new logs [29-07-2022 03:14:01]5705: WAF :: fetched 11 new logs [29-07-2022 03:15:02]11364: WAF :: fetched 13 new logs [29-07-2022 03:16:01]17009: WAF :: fetched 12 new logs [29-07-2022 03:17:02]22801: WAF :: fetched 6 new logs [29-07-2022 03:18:01]28456: WAF :: fetched 12 new logs [29-07-2022 03:19:02]3607: WAF :: fetched 13 new logs [29-07-2022 03:20:01]2761: WAF :: fetched 9 new logs [29-07-2022 03:21:02]11420: WAF :: fetched 11 new logs [29-07-2022 03:22:01]22854: WAF :: fetched 10 new logs [29-07-2022 03:23:02]28697: WAF :: fetched 13 new logs [29-07-2022 03:24:01]2048: WAF :: fetched 11 new logs [29-07-2022 03:25:02]7917: WAF :: fetched 9 new logs [29-07-2022 03:26:01]13689: WAF :: fetched 18 new logs [29-07-2022 03:27:01]19668: WAF :: fetched 9 new logs [29-07-2022 03:28:01]25265: WAF :: fetched 15 new logs [29-07-2022 03:29:01]31654: httpd.conf changed. Refreshing watchlist. [29-07-2022 03:29:01]31645: WAF :: fetched 9 new logs [29-07-2022 03:30:02]5079: WAF :: fetched 9 new logs [29-07-2022 03:30:02]5075: httpd.conf changed. Refreshing watchlist. [29-07-2022 03:31:01]10709: WAF :: fetched 7 new logs [29-07-2022 03:32:02]16421: WAF :: fetched 13 new logs [29-07-2022 03:33:01]21990: WAF :: fetched 3 new logs [29-07-2022 03:37:01]12304: WAF :: fetched 6 new logs [29-07-2022 03:38:02]18120: httpd.conf changed. Refreshing watchlist. [29-07-2022 03:38:02]18109: WAF :: fetched 20 new logs [29-07-2022 03:39:01]23724: WAF :: fetched 20 new logs [29-07-2022 03:40:01]29299: WAF :: fetched 20 new logs [29-07-2022 03:41:02]2743: WAF :: fetched 21 new logs [29-07-2022 03:41:02]2743: Checking for user cron vulnerabilities [29-07-2022 03:42:01]8390: WAF :: fetched 20 new logs [29-07-2022 03:43:02]14197: httpd.conf changed. Refreshing watchlist. [29-07-2022 03:43:02]14204: WAF :: fetched 45 new logs [29-07-2022 03:44:01]19744: Checking ditributed CMS bruteforce attacks [29-07-2022 03:44:01]19744: WAF :: fetched 16 new logs [29-07-2022 03:45:02]25363: WAF :: fetched 9 new logs [29-07-2022 03:46:01]30988: WAF :: fetched 16 new logs [29-07-2022 03:47:02]4399: WAF :: fetched 10 new logs [29-07-2022 03:48:01]9946: WAF :: fetched 9 new logs [29-07-2022 03:49:02]15595: WAF :: fetched 9 new logs [29-07-2022 03:50:01]21168: WAF :: fetched 16 new logs [29-07-2022 03:51:02]26900: WAF :: fetched 17 new logs [29-07-2022 03:52:01]32566: WAF :: fetched 17 new logs [29-07-2022 03:53:02]5931: WAF :: fetched 15 new logs [29-07-2022 03:54:01]11452: WAF :: fetched 17 new logs [29-07-2022 03:55:02]17145: WAF :: fetched 21 new logs [29-07-2022 03:56:01]22749: WAF :: fetched 10 new logs [29-07-2022 03:57:02]28420: WAF :: fetched 18 new logs [29-07-2022 03:58:01]1707: WAF :: fetched 12 new logs [29-07-2022 03:59:02]7445: WAF :: fetched 19 new logs [29-07-2022 04:00:01]12786: WAF :: fetched 35 new logs [29-07-2022 04:01:02]18908: WAF :: fetched 21 new logs [29-07-2022 04:02:01]24541: WAF :: fetched 13 new logs [29-07-2022 04:03:02]30285: WAF :: fetched 18 new logs [29-07-2022 04:04:01]3614: WAF :: fetched 14 new logs [29-07-2022 04:05:02]9238: WAF :: fetched 41 new logs [29-07-2022 04:06:01]14918: WAF :: fetched 16 new logs [29-07-2022 04:07:01]20466: WAF :: fetched 15 new logs [29-07-2022 04:08:01]25881: WAF :: fetched 11 new logs [29-07-2022 04:09:01]31877: WAF :: fetched 15 new logs [29-07-2022 04:10:01]4899: WAF :: fetched 18 new logs [29-07-2022 04:11:02]10673: WAF :: fetched 10 new logs [29-07-2022 04:12:01]16592: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659078721 [29-07-2022 04:12:01]16592: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 04:12:03]16592: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 04:12:03]16592: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-0412/20220729-041201-YuOIQa1UaUUySxE7MhV5jwAAAAc [29-07-2022 04:12:03]16592: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 04:12:04]16592: WAF :: fetched 19 new logs [29-07-2022 04:13:01]22020: WAF :: fetched 12 new logs [29-07-2022 04:14:01]27996: WAF :: fetched 17 new logs [29-07-2022 04:15:02]958: WAF :: fetched 15 new logs [29-07-2022 04:16:01]7079: WAF :: fetched 22 new logs [29-07-2022 04:17:01]12356: WAF :: fetched 16 new logs [29-07-2022 04:18:01]18441: WAF :: fetched 14 new logs [29-07-2022 04:19:01]23753: WAF :: fetched 13 new logs [29-07-2022 04:20:01]29714: WAF :: fetched 12 new logs [29-07-2022 04:21:01]3165: WAF :: fetched 19 new logs [29-07-2022 04:22:01]8671: WAF :: fetched 18 new logs [29-07-2022 04:23:01]14416: WAF :: fetched 9 new logs [29-07-2022 04:24:01]19978: WAF :: fetched 8 new logs [29-07-2022 04:25:01]25383: WAF :: fetched 12 new logs [29-07-2022 04:26:01]31398: WAF :: fetched 26 new logs [29-07-2022 04:27:02]4482: WAF :: fetched 11 new logs [29-07-2022 04:28:02]10547: WAF :: fetched 10 new logs [29-07-2022 04:29:01]16133: WAF :: fetched 13 new logs [29-07-2022 04:30:02]21780: WAF :: fetched 6 new logs [29-07-2022 04:31:01]27426: WAF :: fetched 13 new logs [29-07-2022 04:32:02]670: WAF :: fetched 10 new logs [29-07-2022 04:33:01]6398: WAF :: fetched 13 new logs [29-07-2022 04:34:02]12061: WAF :: fetched 7 new logs [29-07-2022 04:35:01]17587: WAF :: fetched 13 new logs [29-07-2022 04:36:02]23256: WAF :: fetched 8 new logs [29-07-2022 04:37:01]28793: WAF :: fetched 10 new logs [29-07-2022 04:38:02]2220: WAF :: fetched 12 new logs [29-07-2022 04:39:01]7784: WAF :: fetched 7 new logs [29-07-2022 04:40:02]13457: WAF :: fetched 10 new logs [29-07-2022 04:41:01]19055: WAF :: fetched 11 new logs [29-07-2022 04:41:01]19055: Checking for user cron vulnerabilities [29-07-2022 04:42:02]24725: WAF :: fetched 5 new logs [29-07-2022 04:43:01]30328: WAF :: fetched 8 new logs [29-07-2022 04:44:01]3670: Checking ditributed CMS bruteforce attacks [29-07-2022 04:44:02]3670: WAF :: fetched 10 new logs [29-07-2022 04:45:01]9220: WAF :: fetched 13 new logs [29-07-2022 04:46:02]14969: WAF :: fetched 12 new logs [29-07-2022 04:47:01]20542: WAF :: fetched 4 new logs [29-07-2022 04:48:01]26234: WAF :: fetched 14 new logs [29-07-2022 04:49:02]31844: WAF :: fetched 9 new logs [29-07-2022 04:50:01]5096: WAF :: fetched 4 new logs [29-07-2022 04:51:02]10751: WAF :: fetched 10 new logs [29-07-2022 04:52:01]16280: WAF :: fetched 10 new logs [29-07-2022 04:53:02]21956: WAF :: fetched 8 new logs [29-07-2022 04:54:01]27443: WAF :: fetched 7 new logs [29-07-2022 04:55:02]640: WAF :: fetched 5 new logs [29-07-2022 04:56:01]6442: WAF :: fetched 13 new logs [29-07-2022 04:57:02]12165: WAF :: fetched 11 new logs [29-07-2022 04:58:01]17812: WAF :: fetched 7 new logs [29-07-2022 04:59:02]23462: WAF :: fetched 11 new logs [29-07-2022 05:00:01]28762: WAF :: fetched 7 new logs [29-07-2022 05:01:02]2576: WAF :: fetched 4 new logs [29-07-2022 05:01:42]2593: Starting daily scan on files updated in last 24 hrs [29-07-2022 05:02:01]8206: WAF :: fetched 6 new logs [29-07-2022 05:03:02]13939: WAF :: fetched 5 new logs [29-07-2022 05:04:01]19424: WAF :: fetched 3 new logs [29-07-2022 05:05:02]25107: WAF :: fetched 6 new logs [29-07-2022 05:06:01]30855: WAF :: fetched 5 new logs [29-07-2022 05:07:02]4239: WAF :: fetched 12 new logs [29-07-2022 05:08:01]9945: WAF :: fetched 5 new logs [29-07-2022 05:09:02]15632: WAF :: fetched 9 new logs [29-07-2022 05:10:01]21167: WAF :: fetched 13 new logs [29-07-2022 05:11:02]26909: WAF :: fetched 8 new logs [29-07-2022 05:12:01]32550: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659082321 [29-07-2022 05:12:01]32550: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 05:12:03]32550: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 05:12:04]32550: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-0512/20220729-051201-YuOWUcEoYRuFfUF1qJQGywAAAAU [29-07-2022 05:12:04]32550: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 05:12:04]32550: WAF :: fetched 11 new logs [29-07-2022 05:13:02]6010: WAF :: fetched 9 new logs [29-07-2022 05:14:01]11561: WAF :: fetched 8 new logs [29-07-2022 05:15:02]17164: WAF :: fetched 5 new logs [29-07-2022 05:16:01]22732: WAF :: fetched 9 new logs [29-07-2022 05:17:02]28459: WAF :: fetched 6 new logs [29-07-2022 05:18:01]1752: WAF :: fetched 7 new logs [29-07-2022 05:19:02]7461: WAF :: fetched 6 new logs [29-07-2022 05:20:01]13026: WAF :: fetched 9 new logs [29-07-2022 05:21:02]18787: WAF :: fetched 8 new logs [29-07-2022 05:22:01]24360: WAF :: fetched 7 new logs [29-07-2022 05:23:02]30051: WAF :: fetched 9 new logs [29-07-2022 05:24:01]3345: WAF :: fetched 7 new logs [29-07-2022 05:25:02]8987: WAF :: fetched 6 new logs [29-07-2022 05:26:01]14632: WAF :: fetched 8 new logs [29-07-2022 05:27:02]20279: WAF :: fetched 8 new logs [29-07-2022 05:28:01]25892: WAF :: fetched 8 new logs [29-07-2022 05:29:02]31532: WAF :: fetched 10 new logs [29-07-2022 05:30:01]4887: WAF :: fetched 6 new logs [29-07-2022 05:31:02]10735: WAF :: fetched 7 new logs [29-07-2022 05:32:01]16295: WAF :: fetched 6 new logs [29-07-2022 05:33:02]22115: WAF :: fetched 4 new logs [29-07-2022 05:34:01]27755: WAF :: fetched 11 new logs [29-07-2022 05:35:02]1028: WAF :: fetched 5 new logs [29-07-2022 05:36:01]6769: WAF :: fetched 10 new logs [29-07-2022 05:37:02]12404: WAF :: fetched 9 new logs [29-07-2022 05:38:01]18060: WAF :: fetched 4 new logs [29-07-2022 05:39:01]23653: WAF :: fetched 5 new logs [29-07-2022 05:40:01]29213: WAF :: fetched 4 new logs [29-07-2022 05:41:02]2356: WAF :: fetched 5 new logs [29-07-2022 05:41:02]2356: Checking for user cron vulnerabilities [29-07-2022 05:42:01]8351: WAF :: fetched 16 new logs [29-07-2022 05:43:02]13757: WAF :: fetched 5 new logs [29-07-2022 05:44:01]19795: Checking ditributed CMS bruteforce attacks [29-07-2022 05:44:01]19795: WAF :: fetched 11 new logs [29-07-2022 05:45:02]25207: WAF :: fetched 8 new logs [29-07-2022 05:45:02]25186: httpd.conf changed. Refreshing watchlist. [29-07-2022 05:46:01]31218: WAF :: fetched 14 new logs [29-07-2022 05:47:02]4600: WAF :: fetched 4 new logs [29-07-2022 05:48:01]10199: WAF :: fetched 13 new logs [29-07-2022 05:49:02]15883: WAF :: fetched 37 new logs [29-07-2022 05:50:01]21425: WAF :: fetched 10 new logs [29-07-2022 05:51:02]27219: WAF :: fetched 5 new logs [29-07-2022 05:52:01]350: WAF :: fetched 13 new logs [29-07-2022 05:53:02]5956: WAF :: fetched 7 new logs [29-07-2022 05:54:01]11954: WAF :: fetched 7 new logs [29-07-2022 05:55:02]17266: WAF :: fetched 8 new logs [29-07-2022 05:56:01]23296: WAF :: fetched 3 new logs [29-07-2022 05:57:02]28616: WAF :: fetched 12 new logs [29-07-2022 05:58:01]2332: WAF :: fetched 4 new logs [29-07-2022 05:59:02]8013: WAF :: fetched 7 new logs [29-07-2022 06:00:01]13260: WAF :: fetched 7 new logs [29-07-2022 06:01:02]19467: WAF :: fetched 10 new logs [29-07-2022 06:02:01]25058: WAF :: fetched 7 new logs [29-07-2022 06:03:02]30778: WAF :: fetched 5 new logs [29-07-2022 06:04:01]4091: WAF :: fetched 11 new logs [29-07-2022 06:05:02]9684: WAF :: fetched 8 new logs [29-07-2022 06:06:01]15296: WAF :: fetched 6 new logs [29-07-2022 06:07:02]20913: WAF :: fetched 8 new logs [29-07-2022 06:08:01]26541: WAF :: fetched 7 new logs [29-07-2022 06:09:02]32210: WAF :: fetched 7 new logs [29-07-2022 06:10:01]5505: WAF :: fetched 5 new logs [29-07-2022 06:11:02]11257: WAF :: fetched 9 new logs [29-07-2022 06:12:01]16819: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659085921 [29-07-2022 06:12:01]16819: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 06:12:03]16819: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 06:12:04]16819: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-0612/20220729-061201-YuOkYRPvq62CLDhvjWA3UAAAABk [29-07-2022 06:12:04]16819: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 06:12:04]16819: WAF :: fetched 13 new logs [29-07-2022 06:13:02]22611: WAF :: fetched 13 new logs [29-07-2022 06:14:01]28177: WAF :: fetched 6 new logs [29-07-2022 06:15:02]1473: WAF :: fetched 18 new logs [29-07-2022 06:16:02]7265: WAF :: fetched 24 new logs [29-07-2022 06:17:01]12862: WAF :: fetched 29 new logs [29-07-2022 06:18:02]18587: WAF :: fetched 6 new logs [29-07-2022 06:19:01]24155: WAF :: fetched 7 new logs [29-07-2022 06:20:02]29800: WAF :: fetched 5 new logs [29-07-2022 06:21:01]3145: WAF :: fetched 8 new logs [29-07-2022 06:22:02]8771: WAF :: fetched 14 new logs [29-07-2022 06:23:01]14438: WAF :: fetched 5 new logs [29-07-2022 06:24:02]20117: WAF :: fetched 10 new logs [29-07-2022 06:25:01]25731: WAF :: fetched 14 new logs [29-07-2022 06:26:02]31551: WAF :: fetched 8 new logs [29-07-2022 06:27:01]4998: WAF :: fetched 8 new logs [29-07-2022 06:28:02]10795: WAF :: fetched 14 new logs [29-07-2022 06:29:01]16438: WAF :: fetched 3 new logs [29-07-2022 06:30:02]22213: WAF :: fetched 9 new logs [29-07-2022 06:31:01]27911: WAF :: fetched 12 new logs [29-07-2022 06:32:02]1306: WAF :: fetched 10 new logs [29-07-2022 06:33:01]7169: WAF :: fetched 3 new logs [29-07-2022 06:34:02]13008: WAF :: fetched 16 new logs [29-07-2022 06:35:01]18668: WAF :: fetched 17 new logs [29-07-2022 06:36:02]24447: WAF :: fetched 5 new logs [29-07-2022 06:37:01]30095: WAF :: fetched 2 new logs [29-07-2022 06:38:02]3661: WAF :: fetched 5 new logs [29-07-2022 06:39:01]9349: WAF :: fetched 2 new logs [29-07-2022 06:40:02]15045: WAF :: fetched 3 new logs [29-07-2022 06:41:02]20779: WAF :: fetched 1 new logs [29-07-2022 06:41:02]20779: Checking for user cron vulnerabilities [29-07-2022 06:42:01]26413: WAF :: fetched 1 new logs [29-07-2022 06:44:01]5614: Checking ditributed CMS bruteforce attacks [29-07-2022 06:44:01]5614: WAF :: fetched 2 new logs [29-07-2022 06:47:02]22724: WAF :: fetched 1 new logs [29-07-2022 06:50:01]7544: WAF :: fetched 1 new logs [29-07-2022 06:56:01]9654: WAF :: fetched 2 new logs [29-07-2022 06:57:02]15431: WAF :: fetched 1 new logs [29-07-2022 07:02:01]11955: WAF :: fetched 1 new logs [29-07-2022 07:03:01]17748: WAF :: fetched 1 new logs [29-07-2022 07:04:01]23411: WAF :: fetched 2 new logs [29-07-2022 07:05:02]28890: WAF :: fetched 5 new logs [29-07-2022 07:06:01]2641: WAF :: fetched 5 new logs [29-07-2022 07:08:01]14199: WAF :: fetched 1 new logs [29-07-2022 07:10:01]25805: WAF :: fetched 3 new logs [29-07-2022 07:11:02]31686: WAF :: fetched 3 new logs [29-07-2022 07:12:01]5157: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659089521 [29-07-2022 07:12:01]5157: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 07:12:03]5157: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 07:12:04]5157: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-0712/20220729-071201-YuOycTVp6PYJostdTRZliAAAAAc [29-07-2022 07:12:04]5157: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 07:12:04]5157: WAF :: fetched 5 new logs [29-07-2022 07:13:02]10993: WAF :: fetched 4 new logs [29-07-2022 07:14:01]16749: WAF :: fetched 2 new logs [29-07-2022 07:15:01]22560: WAF :: fetched 2 new logs [29-07-2022 07:16:02]28427: WAF :: fetched 4 new logs [29-07-2022 07:17:01]1809: WAF :: fetched 3 new logs [29-07-2022 07:18:02]7834: WAF :: fetched 5 new logs [29-07-2022 07:19:01]13579: WAF :: fetched 3 new logs [29-07-2022 07:20:02]19342: WAF :: fetched 5 new logs [29-07-2022 07:21:01]25158: WAF :: fetched 4 new logs [29-07-2022 07:22:02]30956: WAF :: fetched 4 new logs [29-07-2022 07:23:01]4430: WAF :: fetched 1 new logs [29-07-2022 07:24:02]10295: WAF :: fetched 7 new logs [29-07-2022 07:25:01]16054: WAF :: fetched 3 new logs [29-07-2022 07:26:02]21943: WAF :: fetched 3 new logs [29-07-2022 07:27:01]27695: WAF :: fetched 3 new logs [29-07-2022 07:28:01]1161: WAF :: fetched 1 new logs [29-07-2022 07:29:01]6750: WAF :: fetched 9 new logs [29-07-2022 07:30:02]13005: WAF :: fetched 4 new logs [29-07-2022 07:31:01]18959: WAF :: fetched 6 new logs [29-07-2022 07:32:01]24689: WAF :: fetched 5 new logs [29-07-2022 07:33:02]30256: WAF :: fetched 3 new logs [29-07-2022 07:34:01]4120: WAF :: fetched 3 new logs [29-07-2022 07:35:02]9597: WAF :: fetched 3 new logs [29-07-2022 07:36:01]15865: WAF :: fetched 6 new logs [29-07-2022 07:37:01]21353: WAF :: fetched 4 new logs [29-07-2022 07:38:01]27528: WAF :: fetched 3 new logs [29-07-2022 07:39:01]705: WAF :: fetched 3 new logs [29-07-2022 07:40:01]7040: WAF :: fetched 5 new logs [29-07-2022 07:41:01]12888: WAF :: fetched 4 new logs [29-07-2022 07:41:01]12888: Checking for user cron vulnerabilities [29-07-2022 07:42:02]18719: WAF :: fetched 4 new logs [29-07-2022 07:43:01]25171: WAF :: fetched 9 new logs [29-07-2022 07:44:01]30996: Checking ditributed CMS bruteforce attacks [29-07-2022 07:44:02]30996: WAF :: fetched 134 new logs [29-07-2022 07:45:01]: Checking for definition updates [29-07-2022 07:45:01]4496: WAF :: fetched 163 new logs [29-07-2022 07:46:02]10322: WAF :: fetched 70 new logs [29-07-2022 07:47:01]15997: WAF :: fetched 4 new logs [29-07-2022 07:48:02]21856: WAF :: fetched 5 new logs [29-07-2022 07:49:01]27558: WAF :: fetched 3 new logs [29-07-2022 07:50:02]865: WAF :: fetched 2 new logs [29-07-2022 07:52:01]12482: WAF :: fetched 6 new logs [29-07-2022 07:53:01]18233: WAF :: fetched 2 new logs [29-07-2022 07:54:02]23760: WAF :: fetched 6 new logs [29-07-2022 07:55:01]29888: WAF :: fetched 3 new logs [29-07-2022 07:56:02]3165: WAF :: fetched 3 new logs [29-07-2022 07:57:01]9346: WAF :: fetched 22 new logs [29-07-2022 07:58:02]15145: WAF :: fetched 5 new logs [29-07-2022 07:59:01]20915: WAF :: fetched 12 new logs [29-07-2022 08:00:02]26433: WAF :: fetched 11 new logs [29-07-2022 08:01:01]32731: WAF :: fetched 9 new logs [29-07-2022 08:02:02]6367: WAF :: fetched 3 new logs [29-07-2022 08:03:02]12184: WAF :: fetched 12 new logs [29-07-2022 08:04:01]17913: WAF :: fetched 10 new logs [29-07-2022 08:05:02]23696: WAF :: fetched 11 new logs [29-07-2022 08:06:01]29510: WAF :: fetched 5 new logs [29-07-2022 08:11:02]26439: WAF :: fetched 4 new logs [29-07-2022 08:12:01]32089: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659093121 [29-07-2022 08:12:01]32089: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 08:12:03]32089: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 08:12:04]32089: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-0812/20220729-081201-YuPAgfAqQx7CXrGlbu5EqgAAAAA [29-07-2022 08:12:04]32089: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 08:12:04]32089: WAF :: fetched 6 new logs [29-07-2022 08:13:02]5732: WAF :: fetched 5 new logs [29-07-2022 08:14:01]11483: WAF :: fetched 4 new logs [29-07-2022 08:15:02]16983: WAF :: fetched 3 new logs [29-07-2022 08:16:01]23143: WAF :: fetched 4 new logs [29-07-2022 08:17:02]28909: WAF :: fetched 8 new logs [29-07-2022 08:18:01]2331: WAF :: fetched 3 new logs [29-07-2022 08:19:01]8247: WAF :: fetched 5 new logs [29-07-2022 08:20:02]14006: WAF :: fetched 5 new logs [29-07-2022 08:21:01]19797: WAF :: fetched 5 new logs [29-07-2022 08:22:01]25516: WAF :: fetched 4 new logs [29-07-2022 08:23:01]31010: WAF :: fetched 2 new logs [29-07-2022 08:24:01]4873: WAF :: fetched 2 new logs [29-07-2022 08:25:01]10373: WAF :: fetched 2 new logs [29-07-2022 08:26:02]16572: WAF :: fetched 4 new logs [29-07-2022 08:27:01]22263: WAF :: fetched 2 new logs [29-07-2022 08:28:02]28100: WAF :: fetched 21 new logs [29-07-2022 08:29:01]1546: WAF :: fetched 2 new logs [29-07-2022 08:30:02]7409: WAF :: fetched 4 new logs [29-07-2022 08:31:01]13180: WAF :: fetched 3 new logs [29-07-2022 08:32:02]18984: WAF :: fetched 4 new logs [29-07-2022 08:33:01]24728: WAF :: fetched 3 new logs [29-07-2022 08:34:02]30606: WAF :: fetched 5 new logs [29-07-2022 08:35:01]4034: WAF :: fetched 2 new logs [29-07-2022 08:36:02]9979: WAF :: fetched 3 new logs [29-07-2022 08:37:01]15590: WAF :: fetched 2 new logs [29-07-2022 08:38:02]21439: WAF :: fetched 3 new logs [29-07-2022 08:39:01]27211: WAF :: fetched 3 new logs [29-07-2022 08:40:02]718: WAF :: fetched 7 new logs [29-07-2022 08:41:01]6699: WAF :: fetched 3 new logs [29-07-2022 08:41:01]6699: Checking for user cron vulnerabilities [29-07-2022 08:42:02]12541: WAF :: fetched 3 new logs [29-07-2022 08:43:01]18268: WAF :: fetched 3 new logs [29-07-2022 08:44:01]24160: Checking ditributed CMS bruteforce attacks [29-07-2022 08:44:02]24160: WAF :: fetched 4 new logs [29-07-2022 08:45:01]29945: WAF :: fetched 8 new logs [29-07-2022 08:46:02]3549: WAF :: fetched 2 new logs [29-07-2022 08:47:01]9276: WAF :: fetched 1 new logs [29-07-2022 08:48:02]15176: WAF :: fetched 5 new logs [29-07-2022 08:49:01]21002: WAF :: fetched 6 new logs [29-07-2022 08:50:02]26781: WAF :: fetched 2 new logs [29-07-2022 08:51:01]32573: WAF :: fetched 3 new logs [29-07-2022 08:52:02]6114: WAF :: fetched 2 new logs [29-07-2022 08:53:01]11831: WAF :: fetched 7 new logs [29-07-2022 08:54:02]17676: WAF :: fetched 3 new logs [29-07-2022 08:55:01]23420: WAF :: fetched 3 new logs [29-07-2022 08:56:01]29211: WAF :: fetched 3 new logs [29-07-2022 08:57:01]2361: WAF :: fetched 5 new logs [29-07-2022 08:58:01]8559: WAF :: fetched 3 new logs [29-07-2022 08:59:01]14122: WAF :: fetched 3 new logs [29-07-2022 09:00:02]20077: WAF :: fetched 1 new logs [29-07-2022 09:01:01]26365: WAF :: fetched 3 new logs [29-07-2022 09:02:01]32263: WAF :: fetched 2 new logs [29-07-2022 09:03:01]5467: WAF :: fetched 4 new logs [29-07-2022 09:04:01]11658: WAF :: fetched 2 new logs [29-07-2022 09:05:02]17095: WAF :: fetched 7 new logs [29-07-2022 09:06:01]23253: WAF :: fetched 2 new logs [29-07-2022 09:07:02]28683: WAF :: fetched 3 new logs [29-07-2022 09:08:01]2413: WAF :: fetched 4 new logs [29-07-2022 09:09:02]8367: WAF :: fetched 5 new logs [29-07-2022 09:10:01]14180: WAF :: fetched 3 new logs [29-07-2022 09:10:01]14176: httpd.conf changed. Refreshing watchlist. [29-07-2022 09:11:02]19991: WAF :: fetched 5 new logs [29-07-2022 09:12:01]25704: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659096721 [29-07-2022 09:12:01]25704: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 09:12:03]25704: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 09:12:04]25704: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-0912/20220729-091201-YuPOkdVmeUrTqpAqBa6ogQAAABg [29-07-2022 09:12:04]25704: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 09:12:04]25704: WAF :: fetched 7 new logs [29-07-2022 09:13:02]31506: WAF :: fetched 5 new logs [29-07-2022 09:14:01]5084: WAF :: fetched 4 new logs [29-07-2022 09:15:01]10826: WAF :: fetched 4 new logs [29-07-2022 09:16:02]16659: WAF :: fetched 3 new logs [29-07-2022 09:17:01]22360: WAF :: fetched 3 new logs [29-07-2022 09:18:02]28098: WAF :: fetched 3 new logs [29-07-2022 09:19:01]1554: WAF :: fetched 2 new logs [29-07-2022 09:20:02]7394: WAF :: fetched 2 new logs [29-07-2022 09:21:01]13162: WAF :: fetched 6 new logs [29-07-2022 09:22:02]19023: WAF :: fetched 2 new logs [29-07-2022 09:23:01]24675: WAF :: fetched 3 new logs [29-07-2022 09:24:02]30570: WAF :: fetched 2 new logs [29-07-2022 09:25:01]3976: WAF :: fetched 6 new logs [29-07-2022 09:26:02]9979: WAF :: fetched 4 new logs [29-07-2022 09:27:02]15759: WAF :: fetched 5 new logs [29-07-2022 09:29:01]27293: WAF :: fetched 3 new logs [29-07-2022 09:30:01]572: WAF :: fetched 3 new logs [29-07-2022 09:31:01]6311: WAF :: fetched 6 new logs [29-07-2022 09:32:02]12492: WAF :: fetched 5 new logs [29-07-2022 09:33:01]18167: WAF :: fetched 6 new logs [29-07-2022 09:34:02]24064: WAF :: fetched 4 new logs [29-07-2022 09:35:01]29784: WAF :: fetched 4 new logs [29-07-2022 09:36:02]3372: WAF :: fetched 7 new logs [29-07-2022 09:37:01]9069: WAF :: fetched 3 new logs [29-07-2022 09:38:02]14910: WAF :: fetched 4 new logs [29-07-2022 09:39:01]20712: WAF :: fetched 3 new logs [29-07-2022 09:40:02]26514: WAF :: fetched 27 new logs [29-07-2022 09:41:01]32279: WAF :: fetched 12 new logs [29-07-2022 09:41:01]32279: Checking for user cron vulnerabilities [29-07-2022 09:42:02]5919: WAF :: fetched 3 new logs [29-07-2022 09:43:01]11710: WAF :: fetched 2 new logs [29-07-2022 09:44:02]17621: Checking ditributed CMS bruteforce attacks [29-07-2022 09:44:02]17621: WAF :: fetched 3 new logs [29-07-2022 09:45:01]23368: WAF :: fetched 5 new logs [29-07-2022 09:46:01]29391: WAF :: fetched 4 new logs [29-07-2022 09:47:01]2545: WAF :: fetched 3 new logs [29-07-2022 09:48:02]8639: WAF :: fetched 3 new logs [29-07-2022 09:49:02]15061: WAF :: fetched 6 new logs [29-07-2022 09:50:01]20849: WAF :: fetched 3 new logs [29-07-2022 09:51:02]26731: WAF :: fetched 3 new logs [29-07-2022 09:52:01]32411: WAF :: fetched 4 new logs [29-07-2022 09:53:02]6132: WAF :: fetched 3 new logs [29-07-2022 09:54:01]12080: WAF :: fetched 4 new logs [29-07-2022 09:55:02]17900: WAF :: fetched 3 new logs [29-07-2022 09:56:02]23858: WAF :: fetched 1 new logs [29-07-2022 09:57:01]29638: WAF :: fetched 2 new logs [29-07-2022 09:58:02]2848: WAF :: fetched 4 new logs [29-07-2022 09:59:01]9109: WAF :: fetched 3 new logs [29-07-2022 10:00:02]14554: WAF :: fetched 2 new logs [29-07-2022 10:01:01]20928: WAF :: fetched 3 new logs [29-07-2022 10:02:02]26763: WAF :: fetched 3 new logs [29-07-2022 10:03:01]32590: WAF :: fetched 1 new logs [29-07-2022 10:04:01]6260: WAF :: fetched 3 new logs [29-07-2022 10:05:02]11722: WAF :: fetched 2 new logs [29-07-2022 10:06:01]17975: WAF :: fetched 4 new logs [29-07-2022 10:07:02]23791: WAF :: fetched 3 new logs [29-07-2022 10:08:01]29542: WAF :: fetched 3 new logs [29-07-2022 10:09:01]3262: WAF :: fetched 4 new logs [29-07-2022 10:10:01]8843: WAF :: fetched 2 new logs [29-07-2022 10:11:01]15086: WAF :: fetched 2 new logs [29-07-2022 10:12:02]20993: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659100322 [29-07-2022 10:12:02]20993: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 10:12:04]20993: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 10:12:04]20993: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-1012/20220729-101202-YuPconQUuOeFLiK0cL8tsgAAAAo [29-07-2022 10:12:04]20993: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 10:12:05]20993: WAF :: fetched 5 new logs [29-07-2022 10:13:01]26798: WAF :: fetched 4 new logs [29-07-2022 10:14:02]32734: WAF :: fetched 6 new logs [29-07-2022 10:15:01]6280: WAF :: fetched 2 new logs [29-07-2022 10:16:02]12300: WAF :: fetched 6 new logs [29-07-2022 10:17:01]18072: WAF :: fetched 6 new logs [29-07-2022 10:18:02]23907: WAF :: fetched 6 new logs [29-07-2022 10:19:01]29785: WAF :: fetched 4 new logs [29-07-2022 10:20:02]3317: WAF :: fetched 3 new logs [29-07-2022 10:21:01]9210: WAF :: fetched 3 new logs [29-07-2022 10:22:02]15089: WAF :: fetched 2 new logs [29-07-2022 10:23:01]20773: WAF :: fetched 4 new logs [29-07-2022 10:24:02]26648: WAF :: fetched 4 new logs [29-07-2022 10:25:01]32467: WAF :: fetched 2 new logs [29-07-2022 10:26:02]6102: WAF :: fetched 3 new logs [29-07-2022 10:27:01]11858: WAF :: fetched 3 new logs [29-07-2022 10:28:02]17726: WAF :: fetched 3 new logs [29-07-2022 10:29:02]23694: WAF :: fetched 3 new logs [29-07-2022 10:30:01]29457: WAF :: fetched 3 new logs [29-07-2022 10:31:01]2998: WAF :: fetched 3 new logs [29-07-2022 10:32:01]8584: WAF :: fetched 3 new logs [29-07-2022 10:33:01]14873: WAF :: fetched 13 new logs [29-07-2022 10:34:01]20547: WAF :: fetched 5 new logs [29-07-2022 10:35:01]26756: WAF :: fetched 3 new logs [29-07-2022 10:36:01]32339: WAF :: fetched 6 new logs [29-07-2022 10:37:01]6322: WAF :: fetched 3 new logs [29-07-2022 10:38:01]11838: WAF :: fetched 5 new logs [29-07-2022 10:39:01]18171: WAF :: fetched 4 new logs [29-07-2022 10:40:01]23782: WAF :: fetched 4 new logs [29-07-2022 10:41:01]30009: WAF :: fetched 2 new logs [29-07-2022 10:41:01]30009: Checking for user cron vulnerabilities [29-07-2022 10:42:01]3308: WAF :: fetched 3 new logs [29-07-2022 10:43:01]9505: WAF :: fetched 4 new logs [29-07-2022 10:44:01]15057: Checking ditributed CMS bruteforce attacks [29-07-2022 10:44:01]15057: WAF :: fetched 3 new logs [29-07-2022 10:45:01]21233: WAF :: fetched 5 new logs [29-07-2022 10:46:01]26759: WAF :: fetched 4 new logs [29-07-2022 10:47:01]411: WAF :: fetched 2 new logs [29-07-2022 10:48:01]6114: WAF :: fetched 3 new logs [29-07-2022 10:49:01]12306: WAF :: fetched 4 new logs [29-07-2022 10:50:02]17971: WAF :: fetched 9 new logs [29-07-2022 10:51:01]24436: WAF :: fetched 2 new logs [29-07-2022 10:52:02]30496: WAF :: fetched 18 new logs [29-07-2022 10:53:01]4074: WAF :: fetched 3 new logs [29-07-2022 10:54:02]10035: WAF :: fetched 5 new logs [29-07-2022 10:55:01]16029: WAF :: fetched 4 new logs [29-07-2022 10:55:01]16040: httpd.conf changed. Refreshing watchlist. [29-07-2022 10:56:02]22081: WAF :: fetched 4 new logs [29-07-2022 10:57:01]28012: WAF :: fetched 5 new logs [29-07-2022 10:58:02]1510: WAF :: fetched 5 new logs [29-07-2022 10:59:01]7560: WAF :: fetched 4 new logs [29-07-2022 11:00:02]13037: WAF :: fetched 2 new logs [29-07-2022 11:01:01]19250: WAF :: fetched 3 new logs [29-07-2022 11:02:02]25085: WAF :: fetched 5 new logs [29-07-2022 11:03:01]30864: WAF :: fetched 5 new logs [29-07-2022 11:04:02]4550: WAF :: fetched 4 new logs [29-07-2022 11:05:01]10294: WAF :: fetched 3 new logs [29-07-2022 11:06:01]16178: WAF :: fetched 6 new logs [29-07-2022 11:07:01]21673: WAF :: fetched 4 new logs [29-07-2022 11:07:55]21840: Performed RBL check for 23.111.136.34. [29-07-2022 11:08:01]27846: WAF :: fetched 4 new logs [29-07-2022 11:09:01]1047: WAF :: fetched 1 new logs [29-07-2022 11:10:01]7355: WAF :: fetched 5 new logs [29-07-2022 11:11:02]12942: WAF :: fetched 3 new logs [29-07-2022 11:12:01]19112: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659103921 [29-07-2022 11:12:01]19112: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 11:12:03]19112: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 11:12:04]19112: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-1112/20220729-111201-YuPqsRH4YhCX3iv148tePQAAABY [29-07-2022 11:12:04]19112: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 11:12:04]19112: WAF :: fetched 3 new logs [29-07-2022 11:13:02]24708: WAF :: fetched 3 new logs [29-07-2022 11:14:01]30982: WAF :: fetched 4 new logs [29-07-2022 11:15:01]4437: WAF :: fetched 4 new logs [29-07-2022 11:16:02]10036: WAF :: fetched 4 new logs [29-07-2022 11:17:01]16163: WAF :: fetched 3 new logs [29-07-2022 11:18:02]21909: WAF :: fetched 4 new logs [29-07-2022 11:19:01]27635: WAF :: fetched 5 new logs [29-07-2022 11:20:02]981: WAF :: fetched 6 new logs [29-07-2022 11:21:01]6884: WAF :: fetched 1 new logs [29-07-2022 11:22:01]12636: WAF :: fetched 6 new logs [29-07-2022 11:23:02]18038: WAF :: fetched 1 new logs [29-07-2022 11:24:01]24214: WAF :: fetched 2 new logs [29-07-2022 11:25:02]30001: WAF :: fetched 2 new logs [29-07-2022 11:26:01]3531: WAF :: fetched 3 new logs [29-07-2022 11:27:02]9458: WAF :: fetched 4 new logs [29-07-2022 11:28:01]15257: WAF :: fetched 3 new logs [29-07-2022 11:29:02]21057: WAF :: fetched 4 new logs [29-07-2022 11:30:01]26932: WAF :: fetched 4 new logs [29-07-2022 11:31:01]32721: WAF :: fetched 1 new logs [29-07-2022 11:32:02]6255: WAF :: fetched 3 new logs [29-07-2022 11:33:01]12009: WAF :: fetched 5 new logs [29-07-2022 11:34:02]18015: WAF :: fetched 7 new logs [29-07-2022 11:35:01]23734: WAF :: fetched 7 new logs [29-07-2022 11:36:02]29496: WAF :: fetched 4 new logs [29-07-2022 11:37:01]3317: WAF :: fetched 3 new logs [29-07-2022 11:38:01]8871: WAF :: fetched 2 new logs [29-07-2022 11:39:02]15151: WAF :: fetched 3 new logs [29-07-2022 11:40:01]20915: WAF :: fetched 2 new logs [29-07-2022 11:41:02]26444: WAF :: fetched 1 new logs [29-07-2022 11:41:02]26444: Checking for user cron vulnerabilities [29-07-2022 11:42:01]32597: WAF :: fetched 5 new logs [29-07-2022 11:43:01]5715: WAF :: fetched 3 new logs [29-07-2022 11:44:01]11967: Checking ditributed CMS bruteforce attacks [29-07-2022 11:44:01]11967: WAF :: fetched 3 new logs [29-07-2022 11:45:01]17477: WAF :: fetched 4 new logs [29-07-2022 11:46:01]23681: WAF :: fetched 2 new logs [29-07-2022 11:47:02]29084: WAF :: fetched 5 new logs [29-07-2022 11:48:01]3019: WAF :: fetched 4 new logs [29-07-2022 11:49:02]8950: WAF :: fetched 5 new logs [29-07-2022 11:50:01]14706: WAF :: fetched 3 new logs [29-07-2022 11:51:02]20673: WAF :: fetched 3 new logs [29-07-2022 11:52:01]26324: WAF :: fetched 8 new logs [29-07-2022 11:53:02]32102: WAF :: fetched 4 new logs [29-07-2022 11:54:01]5608: WAF :: fetched 2 new logs [29-07-2022 11:55:02]11021: WAF :: fetched 5 new logs [29-07-2022 11:56:01]17206: WAF :: fetched 2 new logs [29-07-2022 11:57:01]22696: WAF :: fetched 4 new logs [29-07-2022 11:58:01]28785: WAF :: fetched 12 new logs [29-07-2022 11:59:02]1972: WAF :: fetched 8 new logs [29-07-2022 12:00:01]7869: WAF :: fetched 7 new logs [29-07-2022 12:01:02]14160: WAF :: fetched 5 new logs [29-07-2022 12:02:01]19900: WAF :: fetched 5 new logs [29-07-2022 12:03:02]25668: WAF :: fetched 2 new logs [29-07-2022 12:04:01]31651: WAF :: fetched 5 new logs [29-07-2022 12:05:02]5169: WAF :: fetched 3 new logs [29-07-2022 12:06:01]11059: WAF :: fetched 5 new logs [29-07-2022 12:07:01]16830: WAF :: fetched 7 new logs [29-07-2022 12:08:01]22548: WAF :: fetched 11 new logs [29-07-2022 12:09:02]28192: WAF :: fetched 14 new logs [29-07-2022 12:10:01]1882: WAF :: fetched 11 new logs [29-07-2022 12:11:02]7503: WAF :: fetched 9 new logs [29-07-2022 12:12:01]13571: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659107521 [29-07-2022 12:12:01]13571: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 12:12:03]13571: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 12:12:03]13571: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-1212/20220729-121201-YuP4wXDkl7IKkI6S6Ki1WwAAACc [29-07-2022 12:12:03]13571: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 12:12:04]13571: WAF :: fetched 13 new logs [29-07-2022 12:13:02]19094: WAF :: fetched 11 new logs [29-07-2022 12:14:01]25246: WAF :: fetched 8 new logs [29-07-2022 12:15:02]31154: WAF :: fetched 18 new logs [29-07-2022 12:16:02]4639: WAF :: fetched 16 new logs [29-07-2022 12:17:01]10389: WAF :: fetched 4 new logs [29-07-2022 12:18:02]16623: WAF :: fetched 2 new logs [29-07-2022 12:19:01]22807: WAF :: fetched 4 new logs [29-07-2022 12:20:02]28602: WAF :: fetched 5 new logs [29-07-2022 12:21:01]2010: WAF :: fetched 4 new logs [29-07-2022 12:22:02]7839: WAF :: fetched 4 new logs [29-07-2022 12:23:01]13474: WAF :: fetched 5 new logs [29-07-2022 12:24:02]19282: WAF :: fetched 4 new logs [29-07-2022 12:25:01]25005: WAF :: fetched 4 new logs [29-07-2022 12:26:02]30840: WAF :: fetched 1 new logs [29-07-2022 12:27:01]4220: WAF :: fetched 2 new logs [29-07-2022 12:28:02]10046: WAF :: fetched 6 new logs [29-07-2022 12:29:01]15699: WAF :: fetched 2 new logs [29-07-2022 12:30:02]21250: WAF :: fetched 5 new logs [29-07-2022 12:31:01]27474: WAF :: fetched 4 new logs [29-07-2022 12:32:02]988: httpd.conf changed. Refreshing watchlist. [29-07-2022 12:32:02]983: WAF :: fetched 5 new logs [29-07-2022 12:33:01]6796: WAF :: fetched 4 new logs [29-07-2022 12:34:02]12531: WAF :: fetched 4 new logs [29-07-2022 12:35:01]18303: WAF :: fetched 2 new logs [29-07-2022 12:36:01]24237: WAF :: fetched 3 new logs [29-07-2022 12:37:01]30300: httpd.conf changed. Refreshing watchlist. [29-07-2022 12:37:01]30311: WAF :: fetched 45 new logs [29-07-2022 12:38:01]3725: WAF :: fetched 4 new logs [29-07-2022 12:39:01]9570: WAF :: fetched 4 new logs [29-07-2022 12:41:01]20879: Checking for user cron vulnerabilities [29-07-2022 12:43:02]455: WAF :: fetched 1 new logs [29-07-2022 12:44:01]6396: Checking ditributed CMS bruteforce attacks [29-07-2022 12:44:01]6396: WAF :: fetched 3 new logs [29-07-2022 12:44:01]6378: httpd.conf changed. Refreshing watchlist. [29-07-2022 12:45:01]: Checking for software updates [29-07-2022 12:45:01]12065: WAF :: fetched 4 new logs [29-07-2022 12:46:02]18328: WAF :: fetched 7 new logs [29-07-2022 12:47:01]23986: WAF :: fetched 4 new logs [29-07-2022 12:48:02]29803: WAF :: fetched 3 new logs [29-07-2022 12:49:01]3362: WAF :: fetched 13 new logs [29-07-2022 12:49:01]3346: httpd.conf changed. Refreshing watchlist. [29-07-2022 12:50:01]9291: WAF :: fetched 3 new logs [29-07-2022 12:51:02]15136: WAF :: fetched 4 new logs [29-07-2022 12:52:01]20823: WAF :: fetched 3 new logs [29-07-2022 12:53:02]26627: WAF :: fetched 3 new logs [29-07-2022 12:53:02]26625: httpd.conf changed. Refreshing watchlist. [29-07-2022 12:54:01]32330: WAF :: fetched 4 new logs [29-07-2022 12:55:02]5892: WAF :: fetched 1 new logs [29-07-2022 12:56:01]11712: WAF :: fetched 4 new logs [29-07-2022 12:57:02]17478: httpd.conf changed. Refreshing watchlist. [29-07-2022 12:57:02]17486: WAF :: fetched 11 new logs [29-07-2022 12:58:01]23163: WAF :: fetched 6 new logs [29-07-2022 12:59:02]28921: WAF :: fetched 2 new logs [29-07-2022 13:00:01]2081: WAF :: fetched 5 new logs [29-07-2022 13:01:02]8602: WAF :: fetched 3 new logs [29-07-2022 13:02:01]14413: WAF :: fetched 2 new logs [29-07-2022 13:03:02]20209: WAF :: fetched 4 new logs [29-07-2022 13:04:01]25896: WAF :: fetched 3 new logs [29-07-2022 13:05:02]31793: WAF :: fetched 4 new logs [29-07-2022 13:06:01]5298: WAF :: fetched 6 new logs [29-07-2022 13:07:02]11074: WAF :: fetched 86 new logs [29-07-2022 13:08:01]16772: WAF :: fetched 92 new logs [29-07-2022 13:09:02]22333: WAF :: fetched 4 new logs [29-07-2022 13:10:01]28579: WAF :: fetched 2 new logs [29-07-2022 13:11:02]2026: WAF :: fetched 3 new logs [29-07-2022 13:12:01]7698: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659111121 [29-07-2022 13:12:01]7698: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 13:12:03]7698: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 13:12:04]7698: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-1312/20220729-131201-YuQG0YQRVJCLZUzyyhpJEgAAADU [29-07-2022 13:12:04]7698: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 13:12:04]7698: WAF :: fetched 7 new logs [29-07-2022 13:13:01]13373: WAF :: fetched 4 new logs [29-07-2022 13:14:01]18846: WAF :: fetched 5 new logs [29-07-2022 13:15:01]25199: WAF :: fetched 3 new logs [29-07-2022 13:16:02]31215: WAF :: fetched 4 new logs [29-07-2022 13:17:01]4619: WAF :: fetched 6 new logs [29-07-2022 13:18:01]10359: WAF :: fetched 5 new logs [29-07-2022 13:19:02]16172: WAF :: fetched 4 new logs [29-07-2022 13:20:02]22017: WAF :: fetched 2 new logs [29-07-2022 13:21:01]27843: WAF :: fetched 3 new logs [29-07-2022 13:22:01]1122: WAF :: fetched 2 new logs [29-07-2022 13:23:01]6670: WAF :: fetched 5 new logs [29-07-2022 13:24:01]12710: WAF :: fetched 4 new logs [29-07-2022 13:25:01]18281: WAF :: fetched 4 new logs [29-07-2022 13:26:01]24442: WAF :: fetched 10 new logs [29-07-2022 13:27:02]29937: WAF :: fetched 5 new logs [29-07-2022 13:28:01]3818: WAF :: fetched 3 new logs [29-07-2022 13:29:01]9363: WAF :: fetched 1 new logs [29-07-2022 13:30:01]15717: WAF :: fetched 1 new logs [29-07-2022 13:31:01]21162: WAF :: fetched 4 new logs [29-07-2022 13:32:01]27285: WAF :: fetched 5 new logs [29-07-2022 13:33:02]32708: WAF :: fetched 9 new logs [29-07-2022 13:34:01]6553: WAF :: fetched 4 new logs [29-07-2022 13:35:02]12050: WAF :: fetched 4 new logs [29-07-2022 13:36:01]18166: WAF :: fetched 6 new logs [29-07-2022 13:37:02]23891: WAF :: fetched 4 new logs [29-07-2022 13:38:01]29515: WAF :: fetched 4 new logs [29-07-2022 13:39:02]2615: WAF :: fetched 3 new logs [29-07-2022 13:40:01]8899: WAF :: fetched 51 new logs [29-07-2022 13:41:02]14699: WAF :: fetched 101 new logs [29-07-2022 13:41:02]14699: Checking for user cron vulnerabilities [29-07-2022 13:42:01]20360: WAF :: fetched 100 new logs [29-07-2022 13:43:02]26153: WAF :: fetched 96 new logs [29-07-2022 13:44:01]31779: Checking ditributed CMS bruteforce attacks [29-07-2022 13:44:01]31779: WAF :: fetched 99 new logs [29-07-2022 13:45:01]: Checking for definition updates [29-07-2022 13:45:02]5307: WAF :: fetched 116 new logs [29-07-2022 13:46:01]11014: WAF :: fetched 100 new logs [29-07-2022 13:47:02]16852: WAF :: fetched 96 new logs [29-07-2022 13:48:01]22423: WAF :: fetched 97 new logs [29-07-2022 13:49:02]28289: WAF :: fetched 105 new logs [29-07-2022 13:50:01]1628: WAF :: fetched 101 new logs [29-07-2022 13:51:02]7534: WAF :: fetched 100 new logs [29-07-2022 13:52:01]13202: WAF :: fetched 95 new logs [29-07-2022 13:53:02]18983: WAF :: fetched 99 new logs [29-07-2022 13:54:01]24635: WAF :: fetched 102 new logs [29-07-2022 13:55:02]30481: WAF :: fetched 105 new logs [29-07-2022 13:56:01]3906: WAF :: fetched 93 new logs [29-07-2022 13:57:02]9825: WAF :: fetched 100 new logs [29-07-2022 13:58:01]15578: WAF :: fetched 100 new logs [29-07-2022 13:59:01]21301: WAF :: fetched 97 new logs [29-07-2022 14:00:02]26802: WAF :: fetched 92 new logs [29-07-2022 14:01:02]976: WAF :: fetched 98 new logs [29-07-2022 14:02:01]6729: WAF :: fetched 94 new logs [29-07-2022 14:03:02]12467: WAF :: fetched 97 new logs [29-07-2022 14:04:01]18079: WAF :: fetched 35 new logs [29-07-2022 14:05:02]23929: WAF :: fetched 5 new logs [29-07-2022 14:06:01]29679: WAF :: fetched 3 new logs [29-07-2022 14:07:01]2992: WAF :: fetched 2 new logs [29-07-2022 14:08:01]8417: WAF :: fetched 5 new logs [29-07-2022 14:09:01]14492: WAF :: fetched 4 new logs [29-07-2022 14:10:01]20011: WAF :: fetched 3 new logs [29-07-2022 14:11:01]26211: WAF :: fetched 3 new logs [29-07-2022 14:12:01]31505: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659114721 [29-07-2022 14:12:01]31505: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 14:12:03]31505: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 14:12:03]31505: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-1412/20220729-141201-YuQU4fs83lZ2f-9JQoS4MwAAADY [29-07-2022 14:12:03]31505: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 14:12:04]31505: WAF :: fetched 6 new logs [29-07-2022 14:13:01]5109: WAF :: fetched 3 new logs [29-07-2022 14:14:01]11221: WAF :: fetched 2 new logs [29-07-2022 14:15:02]16829: WAF :: fetched 4 new logs [29-07-2022 14:16:01]22995: WAF :: fetched 19 new logs [29-07-2022 14:17:02]28561: WAF :: fetched 4 new logs [29-07-2022 14:18:01]2381: WAF :: fetched 4 new logs [29-07-2022 14:18:01]2398: httpd.conf changed. Refreshing watchlist. [29-07-2022 14:19:01]7995: WAF :: fetched 15 new logs [29-07-2022 14:20:02]14090: WAF :: fetched 6 new logs [29-07-2022 14:21:01]19716: WAF :: fetched 3 new logs [29-07-2022 14:22:02]25383: WAF :: fetched 5 new logs [29-07-2022 14:23:01]31089: WAF :: fetched 3 new logs [29-07-2022 14:24:02]4640: WAF :: fetched 3 new logs [29-07-2022 14:25:01]10343: WAF :: fetched 2 new logs [29-07-2022 14:34:01]29875: WAF :: fetched 3 new logs [29-07-2022 14:36:01]9341: WAF :: fetched 1 new logs [29-07-2022 14:41:01]6110: Checking for user cron vulnerabilities [29-07-2022 14:44:01]23841: Checking ditributed CMS bruteforce attacks [29-07-2022 14:46:02]3096: WAF :: fetched 97 new logs [29-07-2022 14:51:01]32560: WAF :: fetched 1 new logs [29-07-2022 14:53:02]12022: Updated license status via CDN [29-07-2022 14:54:02]17505: WAF :: fetched 2 new logs [29-07-2022 14:56:02]29577: WAF :: fetched 1 new logs [29-07-2022 15:00:02]21077: WAF :: fetched 2 new logs [29-07-2022 15:01:01]27361: Reseting cPGuard inotify settings [29-07-2022 15:01:01]27343: WAF :: fetched 1 new logs [29-07-2022 15:02:02]910: WAF :: fetched 1 new logs [29-07-2022 15:03:01]6758: WAF :: fetched 1 new logs [29-07-2022 15:05:01]18405: WAF :: fetched 113 new logs [29-07-2022 15:09:01]9455: WAF :: fetched 3 new logs [29-07-2022 15:10:02]15440: WAF :: fetched 1 new logs [29-07-2022 15:11:01]21486: WAF :: fetched 1 new logs [29-07-2022 15:12:02]27281: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659118322 [29-07-2022 15:12:02]27281: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 15:12:04]27281: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 15:12:04]27281: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-1512/20220729-151202-YuQi8p6NqZ4p5BefCQpmLwAAAAU [29-07-2022 15:12:04]27281: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 15:12:04]27281: WAF :: fetched 22 new logs [29-07-2022 15:13:01]699: WAF :: fetched 65 new logs [29-07-2022 15:14:02]6698: WAF :: fetched 89 new logs [29-07-2022 15:15:01]12574: WAF :: fetched 36 new logs [29-07-2022 15:16:02]18553: WAF :: fetched 77 new logs [29-07-2022 15:17:01]24357: WAF :: fetched 20 new logs [29-07-2022 15:24:02]812: WAF :: fetched 1 new logs [29-07-2022 15:25:01]6870: WAF :: fetched 1 new logs [29-07-2022 15:27:01]18567: WAF :: fetched 1 new logs [29-07-2022 15:28:02]24407: WAF :: fetched 2 new logs [29-07-2022 15:33:01]21593: WAF :: fetched 1 new logs [29-07-2022 15:34:02]27589: WAF :: fetched 2 new logs [29-07-2022 15:35:01]1091: WAF :: fetched 2 new logs [29-07-2022 15:37:01]13000: WAF :: fetched 2 new logs [29-07-2022 15:38:02]18972: WAF :: fetched 2 new logs [29-07-2022 15:41:01]4246: WAF :: fetched 3 new logs [29-07-2022 15:41:01]4246: Checking for user cron vulnerabilities [29-07-2022 15:42:02]9948: WAF :: fetched 7 new logs [29-07-2022 15:43:02]15584: WAF :: fetched 286 new logs [29-07-2022 15:44:02]21299: Checking ditributed CMS bruteforce attacks [29-07-2022 15:44:02]21299: WAF :: fetched 496 new logs [29-07-2022 15:45:02]27028: WAF :: fetched 433 new logs [29-07-2022 15:46:02]457: WAF :: fetched 226 new logs [29-07-2022 15:47:01]6383: WAF :: fetched 2 new logs [29-07-2022 15:49:01]18030: WAF :: fetched 1 new logs [29-07-2022 15:50:01]23899: WAF :: fetched 3 new logs [29-07-2022 15:51:01]29563: WAF :: fetched 1 new logs [29-07-2022 15:54:01]15250: WAF :: fetched 15 new logs [29-07-2022 15:56:01]27184: WAF :: fetched 1 new logs [29-07-2022 16:05:02]15498: WAF :: fetched 1 new logs [29-07-2022 16:06:01]21826: WAF :: fetched 1 new logs [29-07-2022 16:07:02]27453: WAF :: fetched 13 new logs [29-07-2022 16:08:01]1349: WAF :: fetched 2 new logs [29-07-2022 16:12:01]25298: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659121921 [29-07-2022 16:12:01]25298: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 16:12:03]25298: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 16:12:03]25298: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-1612/20220729-161201-YuQxAbdGm49FFPhxFUtVFwAAADg [29-07-2022 16:12:03]25298: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 16:12:04]25298: WAF :: fetched 2 new logs [29-07-2022 16:14:01]4957: WAF :: fetched 2 new logs [29-07-2022 16:16:01]17133: WAF :: fetched 1 new logs [29-07-2022 16:18:01]28898: WAF :: fetched 1 new logs [29-07-2022 16:19:02]2544: WAF :: fetched 1 new logs [29-07-2022 16:20:01]8517: WAF :: fetched 3 new logs [29-07-2022 16:21:02]14524: WAF :: fetched 1 new logs [29-07-2022 16:23:02]26339: WAF :: fetched 3 new logs [29-07-2022 16:26:01]11821: WAF :: fetched 3 new logs [29-07-2022 16:30:01]2996: WAF :: fetched 1 new logs [29-07-2022 16:32:01]14692: WAF :: fetched 14 new logs [29-07-2022 16:41:02]2687: WAF :: fetched 1 new logs [29-07-2022 16:41:02]2687: Checking for user cron vulnerabilities [29-07-2022 16:42:01]8450: WAF :: fetched 1 new logs [29-07-2022 16:43:02]14373: WAF :: fetched 2 new logs [29-07-2022 16:44:01]20004: Checking ditributed CMS bruteforce attacks [29-07-2022 16:47:02]5097: WAF :: fetched 1 new logs [29-07-2022 16:49:02]16583: WAF :: fetched 1 new logs [29-07-2022 16:51:01]28173: WAF :: fetched 3 new logs [29-07-2022 16:56:02]24776: WAF :: fetched 1 new logs [29-07-2022 16:57:01]30524: WAF :: fetched 8 new logs [29-07-2022 17:01:01]21484: WAF :: fetched 1 new logs [29-07-2022 17:02:02]27319: WAF :: fetched 1 new logs [29-07-2022 17:05:02]12421: WAF :: fetched 1 new logs [29-07-2022 17:11:02]14857: WAF :: fetched 1 new logs [29-07-2022 17:12:01]20599: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659125521 [29-07-2022 17:12:01]20599: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 17:12:03]20599: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 17:12:04]20599: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-1712/20220729-171201-YuQ_EfUACqJqZSJde5d7DgAAABQ [29-07-2022 17:12:04]20599: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 17:17:01]17550: WAF :: fetched 5 new logs [29-07-2022 17:18:02]23468: WAF :: fetched 1 new logs [29-07-2022 17:18:02]23457: httpd.conf changed. Refreshing watchlist. [29-07-2022 17:21:01]8757: WAF :: fetched 1 new logs [29-07-2022 17:22:02]14607: WAF :: fetched 1 new logs [29-07-2022 17:23:01]20401: WAF :: fetched 3 new logs [29-07-2022 17:24:02]26254: WAF :: fetched 1 new logs [29-07-2022 17:26:02]5697: WAF :: fetched 1 new logs [29-07-2022 17:28:02]17321: WAF :: fetched 2 new logs [29-07-2022 17:31:01]2780: WAF :: fetched 3 new logs [29-07-2022 17:32:01]8420: WAF :: fetched 2 new logs [29-07-2022 17:33:01]14640: WAF :: fetched 1 new logs [29-07-2022 17:34:01]20192: WAF :: fetched 4 new logs [29-07-2022 17:35:01]26421: WAF :: fetched 2 new logs [29-07-2022 17:36:02]32082: WAF :: fetched 1 new logs [29-07-2022 17:37:01]5912: WAF :: fetched 1 new logs [29-07-2022 17:38:02]11411: WAF :: fetched 1 new logs [29-07-2022 17:41:01]29259: Checking for user cron vulnerabilities [29-07-2022 17:43:01]8699: WAF :: fetched 1 new logs [29-07-2022 17:44:01]14442: Checking ditributed CMS bruteforce attacks [29-07-2022 17:44:02]14442: WAF :: fetched 4 new logs [29-07-2022 17:45:01]20214: WAF :: fetched 2 new logs [29-07-2022 17:46:01]26126: WAF :: fetched 2 new logs [29-07-2022 17:49:02]11074: WAF :: fetched 15 new logs [29-07-2022 17:50:01]16761: WAF :: fetched 1 new logs [29-07-2022 17:51:02]22712: WAF :: fetched 3 new logs [29-07-2022 17:55:02]13265: WAF :: fetched 2 new logs [29-07-2022 17:57:02]24814: WAF :: fetched 2 new logs [29-07-2022 17:59:01]3860: WAF :: fetched 1 new logs [29-07-2022 18:00:01]9280: WAF :: fetched 4 new logs [29-07-2022 18:03:02]26954: WAF :: fetched 2 new logs [29-07-2022 18:05:02]6482: WAF :: fetched 1 new logs [29-07-2022 18:11:02]8710: WAF :: fetched 2 new logs [29-07-2022 18:12:01]14880: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659129121 [29-07-2022 18:12:01]14880: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 18:12:03]14880: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 18:12:04]14880: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-1812/20220729-181201-YuRNIakzU3ECkzp0PG6zdgAAAAw [29-07-2022 18:12:04]14880: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 18:12:04]14880: WAF :: fetched 1 new logs [29-07-2022 18:14:01]26506: WAF :: fetched 1 new logs [29-07-2022 18:15:02]32396: WAF :: fetched 1 new logs [29-07-2022 18:16:02]6028: WAF :: fetched 2 new logs [29-07-2022 18:17:01]11671: WAF :: fetched 2 new logs [29-07-2022 18:19:01]23253: WAF :: fetched 1 new logs [29-07-2022 18:21:01]2312: WAF :: fetched 1 new logs [29-07-2022 18:22:01]8464: WAF :: fetched 2 new logs [29-07-2022 18:23:01]13859: WAF :: fetched 1 new logs [29-07-2022 18:27:01]4865: WAF :: fetched 1 new logs [29-07-2022 18:30:01]22626: WAF :: fetched 3 new logs [29-07-2022 18:31:02]28310: WAF :: fetched 2 new logs [29-07-2022 18:32:01]2088: WAF :: fetched 1 new logs [29-07-2022 18:39:01]10221: WAF :: fetched 4 new logs [29-07-2022 18:41:01]21882: WAF :: fetched 2 new logs [29-07-2022 18:41:01]21882: Checking for user cron vulnerabilities [29-07-2022 18:44:01]6909: Checking ditributed CMS bruteforce attacks [29-07-2022 18:44:01]6909: WAF :: fetched 1 new logs [29-07-2022 18:46:01]18400: WAF :: fetched 1 new logs [29-07-2022 18:48:01]29972: WAF :: fetched 1 new logs [29-07-2022 18:49:02]3493: WAF :: fetched 1 new logs [29-07-2022 18:51:02]15101: WAF :: fetched 2 new logs [29-07-2022 18:54:01]32273: WAF :: fetched 1 new logs [29-07-2022 18:56:01]11571: WAF :: fetched 1 new logs [29-07-2022 18:57:02]17383: WAF :: fetched 1 new logs [29-07-2022 19:01:01]8325: WAF :: fetched 1 new logs [29-07-2022 19:04:02]25619: WAF :: fetched 1 new logs [29-07-2022 19:07:01]10771: WAF :: fetched 1 new logs [29-07-2022 19:08:02]16688: WAF :: fetched 1 new logs [29-07-2022 19:10:02]28166: WAF :: fetched 3 new logs [29-07-2022 19:11:01]1631: WAF :: fetched 1 new logs [29-07-2022 19:12:02]7111: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659132722 [29-07-2022 19:12:02]7111: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 19:12:04]7111: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 19:12:04]7111: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-1912/20220729-191202-YuRbMsL3Vb4PSYumfTx6CAAAACE [29-07-2022 19:12:04]7111: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 19:12:04]7111: WAF :: fetched 2 new logs [29-07-2022 19:16:02]30651: WAF :: fetched 1 new logs [29-07-2022 19:21:01]27244: WAF :: fetched 3 new logs [29-07-2022 19:22:02]530: WAF :: fetched 17 new logs [29-07-2022 19:25:01]17849: WAF :: fetched 2 new logs [29-07-2022 19:26:02]23743: WAF :: fetched 3 new logs [29-07-2022 19:29:02]8740: WAF :: fetched 2 new logs [29-07-2022 19:30:01]14425: WAF :: fetched 5 new logs [29-07-2022 19:31:02]20497: WAF :: fetched 2 new logs [29-07-2022 19:32:02]26208: WAF :: fetched 2 new logs [29-07-2022 19:33:01]31845: WAF :: fetched 1 new logs [29-07-2022 19:34:02]5309: WAF :: fetched 1 new logs [29-07-2022 19:36:02]16820: WAF :: fetched 2 new logs [29-07-2022 19:37:01]22543: WAF :: fetched 1 new logs [29-07-2022 19:40:02]7459: WAF :: fetched 1 new logs [29-07-2022 19:41:01]13285: Checking for user cron vulnerabilities [29-07-2022 19:44:02]30458: Checking ditributed CMS bruteforce attacks [29-07-2022 19:45:01]: Checking for definition updates [29-07-2022 19:45:02]3838: Updated virus defnition : malware.expert.fp [29-07-2022 19:47:01]15362: WAF :: fetched 2 new logs [29-07-2022 19:48:02]21169: WAF :: fetched 3 new logs [29-07-2022 19:50:01]32681: WAF :: fetched 1 new logs [29-07-2022 19:52:01]11931: WAF :: fetched 1 new logs [29-07-2022 19:54:01]23508: WAF :: fetched 1 new logs [29-07-2022 19:57:01]8345: WAF :: fetched 1 new logs [29-07-2022 19:57:01]8369: httpd.conf changed. Refreshing watchlist. [29-07-2022 19:58:01]14695: httpd.conf changed. Refreshing watchlist. [29-07-2022 20:00:01]26073: WAF :: fetched 1 new logs [29-07-2022 20:09:02]13984: WAF :: fetched 1 new logs [29-07-2022 20:12:02]30998: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659136322 [29-07-2022 20:12:02]30998: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 20:12:04]30998: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 20:12:04]30998: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-2012/20220729-201202-YuRpQsxzr8jln0LmmajXmgAAAAw [29-07-2022 20:12:04]30998: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 20:12:04]30998: WAF :: fetched 1 new logs [29-07-2022 20:14:02]10508: WAF :: fetched 1 new logs [29-07-2022 20:23:01]29656: WAF :: fetched 1 new logs [29-07-2022 20:26:02]14540: WAF :: fetched 2 new logs [29-07-2022 20:28:01]25843: WAF :: fetched 4 new logs [29-07-2022 20:30:01]4884: WAF :: fetched 5 new logs [29-07-2022 20:33:02]22156: WAF :: fetched 1 new logs [29-07-2022 20:34:01]27811: WAF :: fetched 1 new logs [29-07-2022 20:35:02]1104: WAF :: fetched 1 new logs [29-07-2022 20:36:01]7031: WAF :: fetched 2 new logs [29-07-2022 20:41:02]3222: WAF :: fetched 3 new logs [29-07-2022 20:41:02]3222: Checking for user cron vulnerabilities [29-07-2022 20:43:02]14553: WAF :: fetched 1 new logs [29-07-2022 20:44:01]20204: Checking ditributed CMS bruteforce attacks [29-07-2022 20:44:01]20204: WAF :: fetched 1 new logs [29-07-2022 20:45:02]25968: WAF :: fetched 3 new logs [29-07-2022 20:47:02]5088: WAF :: fetched 1 new logs [29-07-2022 20:48:01]10760: WAF :: fetched 4 new logs [29-07-2022 20:52:01]1298: WAF :: fetched 4 new logs [29-07-2022 20:54:01]12817: WAF :: fetched 1 new logs [29-07-2022 20:56:01]24363: WAF :: fetched 1 new logs [29-07-2022 21:01:01]20964: WAF :: fetched 1 new logs [29-07-2022 21:06:02]17393: WAF :: fetched 2 new logs [29-07-2022 21:09:01]2673: WAF :: fetched 1 new logs [29-07-2022 21:12:02]20000: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659139922 [29-07-2022 21:12:02]20000: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 21:12:04]20000: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 21:12:04]20000: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-2112/20220729-211202-YuR3UlF6_IRCY6YR-AilgAAAABE [29-07-2022 21:12:04]20000: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [29-07-2022 21:12:05]20000: WAF :: fetched 1 new logs [29-07-2022 21:13:01]25705: WAF :: fetched 7 new logs [29-07-2022 21:14:02]31501: WAF :: fetched 1 new logs [29-07-2022 21:16:02]10906: WAF :: fetched 1 new logs [29-07-2022 21:20:02]1456: WAF :: fetched 1 new logs [29-07-2022 21:25:01]30535: WAF :: fetched 1 new logs [29-07-2022 21:27:01]9917: WAF :: fetched 1 new logs [29-07-2022 21:29:01]21459: WAF :: fetched 1 new logs [29-07-2022 21:36:02]29437: WAF :: fetched 20 new logs [29-07-2022 21:37:01]3315: WAF :: fetched 1 new logs [29-07-2022 21:38:02]8705: WAF :: fetched 7 new logs [29-07-2022 21:39:02]14824: WAF :: fetched 6 new logs [29-07-2022 21:41:02]26356: Checking for user cron vulnerabilities [29-07-2022 21:44:01]11146: Checking ditributed CMS bruteforce attacks [29-07-2022 21:45:02]16843: WAF :: fetched 39 new logs [29-07-2022 21:46:02]22497: WAF :: fetched 2 new logs [29-07-2022 21:48:02]1637: WAF :: fetched 1 new logs [29-07-2022 21:49:02]7510: WAF :: fetched 3 new logs [29-07-2022 21:50:02]13152: WAF :: fetched 1 new logs [29-07-2022 21:51:02]18950: WAF :: fetched 3 new logs [29-07-2022 21:55:02]9543: WAF :: fetched 5 new logs [29-07-2022 22:02:01]17785: WAF :: fetched 2 new logs [29-07-2022 22:03:02]23216: WAF :: fetched 4 new logs [29-07-2022 22:06:02]8574: WAF :: fetched 1 new logs [29-07-2022 22:07:11]14290: Performing Domain reputation checks [29-07-2022 22:09:01]25639: WAF :: fetched 4 new logs [29-07-2022 22:10:02]31363: WAF :: fetched 1 new logs [29-07-2022 22:11:01]4754: WAF :: fetched 1 new logs [29-07-2022 22:12:02]10516: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659143522 [29-07-2022 22:12:02]10516: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 22:12:04]10516: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 22:12:04]10516: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-2212/20220729-221202-YuSFYhG0CszLuAiLo5vWEAAAAA8 [29-07-2022 22:12:04]10516: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 22:12:04]10516: WAF :: fetched 85 new logs [29-07-2022 22:13:01]16177: WAF :: fetched 2 new logs [29-07-2022 22:19:01]18174: WAF :: fetched 3 new logs [29-07-2022 22:20:01]23550: WAF :: fetched 1 new logs [29-07-2022 22:22:02]2823: WAF :: fetched 1 new logs [29-07-2022 22:25:01]20285: WAF :: fetched 4 new logs [29-07-2022 22:26:01]25703: WAF :: fetched 2 new logs [29-07-2022 22:27:02]31827: WAF :: fetched 2 new logs [29-07-2022 22:31:02]22322: WAF :: fetched 2 new logs [29-07-2022 22:32:01]27970: WAF :: fetched 2 new logs [29-07-2022 22:33:02]1265: WAF :: fetched 3 new logs [29-07-2022 22:34:01]6969: WAF :: fetched 3 new logs [29-07-2022 22:35:02]12682: WAF :: fetched 1 new logs [29-07-2022 22:36:01]18377: WAF :: fetched 1 new logs [29-07-2022 22:37:02]24153: WAF :: fetched 1 new logs [29-07-2022 22:38:01]29748: WAF :: fetched 1 new logs [29-07-2022 22:41:02]14462: WAF :: fetched 3 new logs [29-07-2022 22:41:02]14462: Checking for user cron vulnerabilities [29-07-2022 22:42:01]20173: WAF :: fetched 2 new logs [29-07-2022 22:44:01]31469: Checking ditributed CMS bruteforce attacks [29-07-2022 22:44:01]31469: WAF :: fetched 3 new logs [29-07-2022 22:45:02]4895: WAF :: fetched 3 new logs [29-07-2022 22:46:01]10609: WAF :: fetched 2 new logs [29-07-2022 22:56:01]2694: WAF :: fetched 2 new logs [29-07-2022 22:58:01]14117: WAF :: fetched 1 new logs [29-07-2022 23:00:02]25321: WAF :: fetched 2 new logs [29-07-2022 23:01:01]31437: WAF :: fetched 1 new logs [29-07-2022 23:06:01]27644: WAF :: fetched 3 new logs [29-07-2022 23:07:56]1201: Performed RBL check for 23.111.136.34. [29-07-2022 23:08:01]6804: WAF :: fetched 1 new logs [29-07-2022 23:09:02]12477: WAF :: fetched 2 new logs [29-07-2022 23:11:01]23966: WAF :: fetched 3 new logs [29-07-2022 23:12:02]29755: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659147122 [29-07-2022 23:12:02]29755: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [29-07-2022 23:12:04]29755: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [29-07-2022 23:12:04]29755: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220729/20220729-2312/20220729-231202-YuSTcnmUuJ3E-H_GYMY1cAAAABg [29-07-2022 23:12:04]29755: WAF :: No suitable log file found. Using SQLite.. [29-07-2022 23:14:01]8788: WAF :: fetched 4 new logs [29-07-2022 23:16:01]20463: WAF :: fetched 1 new logs [29-07-2022 23:17:01]26081: WAF :: fetched 4 new logs [29-07-2022 23:18:02]32226: WAF :: fetched 3 new logs [29-07-2022 23:19:01]5609: WAF :: fetched 1 new logs [29-07-2022 23:22:02]22913: WAF :: fetched 2 new logs [29-07-2022 23:25:01]7643: WAF :: fetched 1 new logs [29-07-2022 23:27:01]18865: WAF :: fetched 25 new logs [29-07-2022 23:28:01]24925: WAF :: fetched 69 new logs [29-07-2022 23:29:01]30327: WAF :: fetched 93 new logs [29-07-2022 23:30:02]4163: WAF :: fetched 197 new logs [29-07-2022 23:31:01]9848: WAF :: fetched 142 new logs [29-07-2022 23:32:02]15687: WAF :: fetched 159 new logs [29-07-2022 23:33:01]21315: WAF :: fetched 145 new logs [29-07-2022 23:34:02]27045: WAF :: fetched 89 new logs [29-07-2022 23:35:01]32689: WAF :: fetched 133 new logs [29-07-2022 23:36:02]6265: WAF :: fetched 84 new logs [29-07-2022 23:37:01]12040: WAF :: fetched 56 new logs [29-07-2022 23:38:02]17764: WAF :: fetched 5 new logs [29-07-2022 23:41:01]2513: Checking for user cron vulnerabilities [29-07-2022 23:43:01]14090: WAF :: fetched 2 new logs [29-07-2022 23:44:01]19825: Checking ditributed CMS bruteforce attacks [29-07-2022 23:44:02]19825: WAF :: fetched 1 new logs [29-07-2022 23:45:01]25489: WAF :: fetched 1 new logs [29-07-2022 23:47:01]4630: WAF :: fetched 1 new logs [29-07-2022 23:48:01]10054: WAF :: fetched 1 new logs [29-07-2022 23:51:01]27762: WAF :: fetched 1 new logs [29-07-2022 23:53:01]7005: WAF :: fetched 1 new logs [29-07-2022 23:54:01]12665: WAF :: fetched 2 new logs [29-07-2022 23:55:03]18451: WAF :: fetched 45 new logs [29-07-2022 23:55:04]18442: httpd.conf changed. Refreshing watchlist. [29-07-2022 23:56:01]24536: WAF :: fetched 42 new logs [29-07-2022 23:58:01]3548: WAF :: fetched 1 new logs [30-07-2022 00:01:05]20910: Sending daily report for July 30, 2022 [30-07-2022 00:02:01]26648: WAF :: fetched 1 new logs [30-07-2022 00:05:02]11267: Deleted 0 entries older than 6 MONTH from scanner_logs [30-07-2022 00:05:02]11267: Deleted 0 files from Quarantine [30-07-2022 00:09:01]1712: WAF :: fetched 1 new logs [30-07-2022 00:11:01]13079: WAF :: fetched 1 new logs [30-07-2022 00:12:01]18796: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659150721 [30-07-2022 00:12:01]18796: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 00:12:03]18796: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 00:12:04]18796: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-0012/20220730-001201-YuShgfTwBkYL_ZZlcu7JMQAAAAg [30-07-2022 00:12:04]18796: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [30-07-2022 00:12:04]18796: WAF :: fetched 1 new logs [30-07-2022 00:13:02]24192: WAF :: fetched 1 new logs [30-07-2022 00:15:02]3373: WAF :: fetched 1 new logs [30-07-2022 00:17:01]14934: WAF :: fetched 1 new logs [30-07-2022 00:19:01]26677: WAF :: fetched 1 new logs [30-07-2022 00:20:02]32400: WAF :: fetched 21 new logs [30-07-2022 00:21:01]5853: WAF :: fetched 5 new logs [30-07-2022 00:22:02]11601: WAF :: fetched 2 new logs [30-07-2022 00:24:02]22995: WAF :: fetched 1 new logs [30-07-2022 00:25:01]28665: WAF :: fetched 1 new logs [30-07-2022 00:29:01]19253: WAF :: fetched 7 new logs [30-07-2022 00:30:02]24894: WAF :: fetched 6 new logs [30-07-2022 00:31:01]30650: WAF :: fetched 2 new logs [30-07-2022 00:32:02]4131: WAF :: fetched 2 new logs [30-07-2022 00:34:02]15168: WAF :: fetched 5 new logs [30-07-2022 00:35:01]21205: WAF :: fetched 4 new logs [30-07-2022 00:37:01]32714: WAF :: fetched 1 new logs [30-07-2022 00:41:01]23085: Checking for user cron vulnerabilities [30-07-2022 00:44:01]8130: Checking ditributed CMS bruteforce attacks [30-07-2022 00:45:01]: Checking for software updates [30-07-2022 00:45:01]13832: WAF :: fetched 1 new logs [30-07-2022 00:46:02]19604: WAF :: fetched 2 new logs [30-07-2022 00:48:01]30985: WAF :: fetched 4 new logs [30-07-2022 00:50:01]10015: WAF :: fetched 1 new logs [30-07-2022 00:51:02]15789: WAF :: fetched 2 new logs [30-07-2022 00:56:01]11894: WAF :: fetched 2 new logs [30-07-2022 00:57:02]17717: WAF :: fetched 4 new logs [30-07-2022 00:58:01]23300: WAF :: fetched 1 new logs [30-07-2022 00:59:02]29003: WAF :: fetched 1 new logs [30-07-2022 01:06:01]7056: WAF :: fetched 1 new logs [30-07-2022 01:07:02]12919: WAF :: fetched 1 new logs [30-07-2022 01:08:02]19351: WAF :: fetched 19 new logs [30-07-2022 01:09:02]25087: WAF :: fetched 19 new logs [30-07-2022 01:10:02]30724: WAF :: fetched 1 new logs [30-07-2022 01:12:01]10093: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659154321 [30-07-2022 01:12:01]10093: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 01:12:03]10093: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 01:12:04]10093: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-0112/20220730-011201-YuSvkanZPa9Pfh8nvGZEIgAAAAc [30-07-2022 01:12:04]10093: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [30-07-2022 01:12:04]10093: WAF :: fetched 1 new logs [30-07-2022 01:13:01]16198: WAF :: fetched 1 new logs [30-07-2022 01:14:02]21601: WAF :: fetched 14 new logs [30-07-2022 01:16:02]1598: WAF :: fetched 1 new logs [30-07-2022 01:17:01]7622: WAF :: fetched 3 new logs [30-07-2022 01:19:01]19264: WAF :: fetched 4 new logs [30-07-2022 01:25:02]22762: WAF :: fetched 1 new logs [30-07-2022 01:27:02]2769: WAF :: fetched 1 new logs [30-07-2022 01:30:02]20989: WAF :: fetched 2 new logs [30-07-2022 01:33:02]6110: Imported 3 logs from cpguard.log into database [30-07-2022 01:33:42]6110: Sending email for 3 detections [30-07-2022 01:34:02]12433: WAF :: fetched 3 new logs [30-07-2022 01:35:01]18056: WAF :: fetched 4 new logs [30-07-2022 01:36:02]23870: WAF :: fetched 3 new logs [30-07-2022 01:38:02]3675: WAF :: fetched 4 new logs [30-07-2022 01:39:01]9335: WAF :: fetched 3 new logs [30-07-2022 01:40:02]15043: WAF :: fetched 1 new logs [30-07-2022 01:41:01]21606: Checking for user cron vulnerabilities [30-07-2022 01:42:02]27272: WAF :: fetched 2 new logs [30-07-2022 01:44:01]6973: Checking ditributed CMS bruteforce attacks [30-07-2022 01:45:01]: Checking for definition updates [30-07-2022 01:45:01]12595: WAF :: fetched 1 new logs [30-07-2022 01:46:02]18414: WAF :: fetched 1 new logs [30-07-2022 01:47:01]24381: WAF :: fetched 1 new logs [30-07-2022 01:49:01]3899: WAF :: fetched 1 new logs [30-07-2022 01:51:01]15469: WAF :: fetched 1 new logs [30-07-2022 01:53:02]27220: WAF :: fetched 1 new logs [30-07-2022 01:54:01]368: WAF :: fetched 1 new logs [30-07-2022 01:55:02]6228: WAF :: fetched 1 new logs [30-07-2022 01:59:02]29086: WAF :: fetched 1 new logs [30-07-2022 02:00:02]2181: WAF :: fetched 4 new logs [30-07-2022 02:02:02]14722: WAF :: fetched 3 new logs [30-07-2022 02:03:02]20652: WAF :: fetched 3 new logs [30-07-2022 02:04:02]26290: WAF :: fetched 1 new logs [30-07-2022 02:05:01]31904: WAF :: fetched 1 new logs [30-07-2022 02:06:02]5089: WAF :: fetched 2 new logs [30-07-2022 02:12:02]7106: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659157922 [30-07-2022 02:12:02]7106: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 02:12:04]7106: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 02:12:04]7106: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-0212/20220730-021202-YuS9oly9Td0dhRYCSGzYEwAAAA4 [30-07-2022 02:12:04]7106: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 02:12:04]7106: WAF :: fetched 146 new logs [30-07-2022 02:13:01]13167: WAF :: fetched 3 new logs [30-07-2022 02:18:02]9442: WAF :: fetched 1 new logs [30-07-2022 02:27:01]27814: WAF :: fetched 2 new logs [30-07-2022 02:28:02]1188: WAF :: fetched 1 new logs [30-07-2022 02:33:01]29533: WAF :: fetched 1 new logs [30-07-2022 02:36:02]14216: WAF :: fetched 1 new logs [30-07-2022 02:41:01]10268: Checking for user cron vulnerabilities [30-07-2022 02:44:01]27298: Checking ditributed CMS bruteforce attacks [30-07-2022 02:45:01]32652: WAF :: fetched 1 new logs [30-07-2022 02:53:02]14080: Updated license status via CDN [30-07-2022 03:00:03]22545: Found and updated 31 CMS installations [30-07-2022 03:01:01]29070: WAF :: fetched 1 new logs [30-07-2022 03:02:02]2731: WAF :: fetched 1 new logs [30-07-2022 03:02:14]22545: Sending CMS version vulnerability report emails to cpanel users [30-07-2022 03:02:17]22545: Checking wordpress installations for suspicious directories [30-07-2022 03:04:02]15153: WAF :: fetched 2 new logs [30-07-2022 03:04:27]9175: Sending CMS version vulnerability report emails to cpanel users [30-07-2022 03:04:30]9175: Checking wordpress installations for suspicious directories [30-07-2022 03:12:01]28680: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659161521 [30-07-2022 03:12:01]28680: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 03:12:03]28680: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 03:12:04]28680: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-0312/20220730-031201-YuTLsQAYOB7m9Ywcb0Kr2AAAABE [30-07-2022 03:12:04]28680: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [30-07-2022 03:12:04]28680: WAF :: fetched 1 new logs [30-07-2022 03:13:01]2560: WAF :: fetched 84 new logs [30-07-2022 03:14:02]8276: WAF :: fetched 39 new logs [30-07-2022 03:15:01]14335: WAF :: fetched 2 new logs [30-07-2022 03:16:02]20151: WAF :: fetched 48 new logs [30-07-2022 03:17:01]25847: WAF :: fetched 74 new logs [30-07-2022 03:22:02]23207: WAF :: fetched 1 new logs [30-07-2022 03:26:02]14138: WAF :: fetched 2 new logs [30-07-2022 03:28:02]25837: WAF :: fetched 1 new logs [30-07-2022 03:29:01]31429: WAF :: fetched 108 new logs [30-07-2022 03:30:02]4912: WAF :: fetched 8 new logs [30-07-2022 03:31:01]10664: WAF :: fetched 1 new logs [30-07-2022 03:33:02]22372: WAF :: fetched 10 new logs [30-07-2022 03:35:01]1885: WAF :: fetched 2 new logs [30-07-2022 03:36:02]7449: WAF :: fetched 84 new logs [30-07-2022 03:37:01]13535: WAF :: fetched 36 new logs [30-07-2022 03:38:02]19020: WAF :: fetched 3 new logs [30-07-2022 03:39:01]25105: WAF :: fetched 2 new logs [30-07-2022 03:40:02]30880: WAF :: fetched 117 new logs [30-07-2022 03:41:01]4336: WAF :: fetched 1 new logs [30-07-2022 03:41:01]4336: Checking for user cron vulnerabilities [30-07-2022 03:42:02]10113: WAF :: fetched 2 new logs [30-07-2022 03:43:01]15829: WAF :: fetched 113 new logs [30-07-2022 03:44:01]21533: Checking ditributed CMS bruteforce attacks [30-07-2022 03:44:02]21533: WAF :: fetched 5 new logs [30-07-2022 03:45:01]27131: WAF :: fetched 1 new logs [30-07-2022 03:49:02]18994: WAF :: fetched 30 new logs [30-07-2022 03:50:02]17301: WAF :: fetched 92 new logs [30-07-2022 03:51:02]25519: WAF :: fetched 5 new logs [30-07-2022 03:53:02]11630: WAF :: fetched 1 new logs [30-07-2022 03:55:02]22942: WAF :: fetched 118 new logs [30-07-2022 03:57:02]2009: WAF :: fetched 1 new logs [30-07-2022 03:58:02]7857: WAF :: fetched 3 new logs [30-07-2022 03:59:02]13442: WAF :: fetched 1 new logs [30-07-2022 04:00:02]18866: WAF :: fetched 2 new logs [30-07-2022 04:02:02]30745: WAF :: fetched 91 new logs [30-07-2022 04:03:01]4141: WAF :: fetched 28 new logs [30-07-2022 04:04:02]9899: WAF :: fetched 84 new logs [30-07-2022 04:05:02]15587: WAF :: fetched 37 new logs [30-07-2022 04:07:02]27391: WAF :: fetched 158 new logs [30-07-2022 04:08:02]1133: WAF :: fetched 75 new logs [30-07-2022 04:09:02]6826: WAF :: fetched 3 new logs [30-07-2022 04:10:01]12554: WAF :: fetched 1 new logs [30-07-2022 04:12:01]24194: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659165121 [30-07-2022 04:12:01]24194: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 04:12:03]24194: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 04:12:04]24194: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-0412/20220730-041201-YuTZwYAj_8sLNW4PQMk2kQAAAAo [30-07-2022 04:12:04]24194: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 04:12:05]24194: WAF :: fetched 1223 new logs [30-07-2022 04:14:01]3507: WAF :: fetched 1 new logs [30-07-2022 04:15:02]9227: WAF :: fetched 1 new logs [30-07-2022 04:18:01]26782: WAF :: fetched 1 new logs [30-07-2022 04:20:01]6223: WAF :: fetched 106 new logs [30-07-2022 04:24:01]29111: WAF :: fetched 19 new logs [30-07-2022 04:25:01]2923: WAF :: fetched 69 new logs [30-07-2022 04:30:02]31193: WAF :: fetched 30 new logs [30-07-2022 04:31:01]5020: WAF :: fetched 65 new logs [30-07-2022 04:32:02]10682: WAF :: fetched 5 new logs [30-07-2022 04:33:01]16361: WAF :: fetched 2 new logs [30-07-2022 04:35:01]27647: WAF :: fetched 74 new logs [30-07-2022 04:36:02]1013: WAF :: fetched 82 new logs [30-07-2022 04:41:01]29503: WAF :: fetched 4 new logs [30-07-2022 04:41:01]29503: Checking for user cron vulnerabilities [30-07-2022 04:42:02]2875: WAF :: fetched 2 new logs [30-07-2022 04:44:01]14276: Checking ditributed CMS bruteforce attacks [30-07-2022 04:44:02]14276: WAF :: fetched 3 new logs [30-07-2022 04:45:02]19923: WAF :: fetched 4 new logs [30-07-2022 04:46:01]25598: WAF :: fetched 2 new logs [30-07-2022 04:49:01]10429: WAF :: fetched 4 new logs [30-07-2022 04:50:02]16157: WAF :: fetched 4 new logs [30-07-2022 04:51:02]21951: WAF :: fetched 3 new logs [30-07-2022 04:52:01]27662: WAF :: fetched 6 new logs [30-07-2022 04:53:02]1154: WAF :: fetched 3 new logs [30-07-2022 04:54:01]6910: WAF :: fetched 6 new logs [30-07-2022 04:55:02]12706: WAF :: fetched 2 new logs [30-07-2022 04:56:01]18468: WAF :: fetched 5 new logs [30-07-2022 04:57:02]24194: WAF :: fetched 8 new logs [30-07-2022 04:58:01]29956: WAF :: fetched 9 new logs [30-07-2022 04:59:01]3404: WAF :: fetched 8 new logs [30-07-2022 05:00:02]8912: WAF :: fetched 5 new logs [30-07-2022 05:01:01]15180: WAF :: fetched 14 new logs [30-07-2022 05:01:41]15192: Starting daily scan on files updated in last 24 hrs [30-07-2022 05:02:01]20780: WAF :: fetched 20 new logs [30-07-2022 05:03:01]27459: WAF :: fetched 9 new logs [30-07-2022 05:05:03]6817: Imported 2 logs from cpguard.log into database [30-07-2022 05:05:42]6817: Imported 3 logs from cpguard.log into database [30-07-2022 05:05:42]6817: Sending email for 3 detections [30-07-2022 05:06:01]12576: WAF :: fetched 4 new logs [30-07-2022 05:07:02]18283: WAF :: fetched 1 new logs [30-07-2022 05:09:02]29767: WAF :: fetched 1 new logs [30-07-2022 05:10:01]3101: WAF :: fetched 3 new logs [30-07-2022 05:11:02]8868: WAF :: fetched 1 new logs [30-07-2022 05:12:01]14500: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659168721 [30-07-2022 05:12:01]14500: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 05:12:03]14500: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 05:12:04]14500: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-0512/20220730-051201-YuTn0QOkEiMBJWouP376MQAAACg [30-07-2022 05:12:04]14500: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [30-07-2022 05:12:04]14500: WAF :: fetched 1 new logs [30-07-2022 05:13:02]20307: WAF :: fetched 2 new logs [30-07-2022 05:16:01]5114: WAF :: fetched 1 new logs [30-07-2022 05:19:02]22331: WAF :: fetched 1 new logs [30-07-2022 05:20:02]28127: WAF :: fetched 1 new logs [30-07-2022 05:21:02]1476: WAF :: fetched 2 new logs [30-07-2022 05:34:02]11534: WAF :: fetched 5 new logs [30-07-2022 05:36:01]22822: WAF :: fetched 3 new logs [30-07-2022 05:37:02]28202: WAF :: fetched 1 new logs [30-07-2022 05:41:01]19171: WAF :: fetched 1 new logs [30-07-2022 05:41:01]19171: Checking for user cron vulnerabilities [30-07-2022 05:42:02]24886: WAF :: fetched 1 new logs [30-07-2022 05:44:01]4018: Checking ditributed CMS bruteforce attacks [30-07-2022 05:46:02]15373: WAF :: fetched 3 new logs [30-07-2022 05:48:02]26825: WAF :: fetched 5 new logs [30-07-2022 05:51:02]11561: WAF :: fetched 3 new logs [30-07-2022 05:52:02]17269: WAF :: fetched 1 new logs [30-07-2022 05:57:02]13417: WAF :: fetched 2 new logs [30-07-2022 06:01:02]4104: WAF :: fetched 1 new logs [30-07-2022 06:02:01]9727: WAF :: fetched 1 new logs [30-07-2022 06:04:01]21267: WAF :: fetched 1 new logs [30-07-2022 06:08:01]11534: WAF :: fetched 4 new logs [30-07-2022 06:12:01]2133: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659172321 [30-07-2022 06:12:01]2133: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 06:12:03]2133: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 06:12:03]2133: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-0612/20220730-061201-YuT14Qznp2W8TFLt5-UzhQAAAAo [30-07-2022 06:12:03]2133: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 06:12:04]2133: WAF :: fetched 28 new logs [30-07-2022 06:13:01]7621: WAF :: fetched 2 new logs [30-07-2022 06:17:01]30877: WAF :: fetched 2 new logs [30-07-2022 06:20:01]15620: WAF :: fetched 1 new logs [30-07-2022 06:21:02]21412: WAF :: fetched 15 new logs [30-07-2022 06:22:02]27071: WAF :: fetched 1 new logs [30-07-2022 06:26:02]17129: WAF :: fetched 2 new logs [30-07-2022 06:31:01]14204: WAF :: fetched 2 new logs [30-07-2022 06:34:01]31149: WAF :: fetched 5 new logs [30-07-2022 06:38:01]22028: WAF :: fetched 1 new logs [30-07-2022 06:39:02]27819: WAF :: fetched 2 new logs [30-07-2022 06:41:02]6963: Checking for user cron vulnerabilities [30-07-2022 06:42:01]12630: WAF :: fetched 11 new logs [30-07-2022 06:43:02]18395: WAF :: fetched 13 new logs [30-07-2022 06:44:01]24070: Checking ditributed CMS bruteforce attacks [30-07-2022 06:46:01]3408: WAF :: fetched 13 new logs [30-07-2022 06:47:01]9086: WAF :: fetched 6 new logs [30-07-2022 06:49:01]20628: WAF :: fetched 1 new logs [30-07-2022 06:50:01]26019: WAF :: fetched 1 new logs [30-07-2022 06:56:02]28514: WAF :: fetched 1 new logs [30-07-2022 06:59:01]13233: WAF :: fetched 1 new logs [30-07-2022 07:00:02]18657: WAF :: fetched 2 new logs [30-07-2022 07:02:01]30577: WAF :: fetched 1 new logs [30-07-2022 07:04:01]9931: WAF :: fetched 3 new logs [30-07-2022 07:05:01]15744: WAF :: fetched 38 new logs [30-07-2022 07:06:01]21573: WAF :: fetched 386 new logs [30-07-2022 07:07:02]27045: WAF :: fetched 662 new logs [30-07-2022 07:08:01]774: WAF :: fetched 721 new logs [30-07-2022 07:09:02]6533: WAF :: fetched 1104 new logs [30-07-2022 07:10:02]12678: WAF :: fetched 1157 new logs [30-07-2022 07:11:02]18273: WAF :: fetched 1130 new logs [30-07-2022 07:12:01]24277: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659175921 [30-07-2022 07:12:01]24277: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 07:12:03]24277: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 07:12:04]24277: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-0712/20220730-071201-YuUD8WVvFl91Obm94jykvwAAAAo [30-07-2022 07:12:04]24277: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 07:12:04]24277: WAF :: fetched 1033 new logs [30-07-2022 07:13:02]29721: WAF :: fetched 660 new logs [30-07-2022 07:14:02]3638: WAF :: fetched 487 new logs [30-07-2022 07:15:01]9266: WAF :: fetched 275 new logs [30-07-2022 07:16:01]14823: WAF :: fetched 54 new logs [30-07-2022 07:18:01]26325: WAF :: fetched 1 new logs [30-07-2022 07:20:02]5547: WAF :: fetched 1 new logs [30-07-2022 07:21:01]11662: WAF :: fetched 1 new logs [30-07-2022 07:23:01]23135: WAF :: fetched 3 new logs [30-07-2022 07:24:02]28569: WAF :: fetched 2 new logs [30-07-2022 07:28:01]19224: WAF :: fetched 1 new logs [30-07-2022 07:29:02]25017: WAF :: fetched 2 new logs [30-07-2022 07:30:01]30648: WAF :: fetched 1 new logs [30-07-2022 07:31:02]4156: WAF :: fetched 2 new logs [30-07-2022 07:32:01]9850: WAF :: fetched 2 new logs [30-07-2022 07:33:02]15546: WAF :: fetched 4 new logs [30-07-2022 07:34:01]21342: WAF :: fetched 5 new logs [30-07-2022 07:35:02]27011: WAF :: fetched 1 new logs [30-07-2022 07:36:01]32702: WAF :: fetched 5 new logs [30-07-2022 07:37:02]6149: WAF :: fetched 1 new logs [30-07-2022 07:39:01]17524: WAF :: fetched 3 new logs [30-07-2022 07:40:02]23151: WAF :: fetched 1 new logs [30-07-2022 07:41:01]28778: WAF :: fetched 2 new logs [30-07-2022 07:41:01]28778: Checking for user cron vulnerabilities [30-07-2022 07:43:01]7615: WAF :: fetched 1 new logs [30-07-2022 07:44:01]13366: Checking ditributed CMS bruteforce attacks [30-07-2022 07:44:02]13366: WAF :: fetched 3 new logs [30-07-2022 07:45:01]: Checking for definition updates [30-07-2022 07:45:01]18946: WAF :: fetched 13 new logs [30-07-2022 07:46:01]24686: WAF :: fetched 16 new logs [30-07-2022 07:49:01]9255: WAF :: fetched 2 new logs [30-07-2022 07:51:01]20793: WAF :: fetched 1 new logs [30-07-2022 07:55:02]11141: WAF :: fetched 1 new logs [30-07-2022 07:57:02]22425: WAF :: fetched 1 new logs [30-07-2022 07:58:01]28004: WAF :: fetched 1 new logs [30-07-2022 07:59:02]1409: WAF :: fetched 1 new logs [30-07-2022 08:01:02]12932: WAF :: fetched 4 new logs [30-07-2022 08:04:01]29815: WAF :: fetched 1 new logs [30-07-2022 08:09:01]25946: WAF :: fetched 2 new logs [30-07-2022 08:12:02]10708: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659179522 [30-07-2022 08:12:02]10708: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 08:12:04]10708: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 08:12:04]10708: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-0812/20220730-081202-YuUSAkFrMTSpA-2CLISgHgAAACI [30-07-2022 08:12:04]10708: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 08:12:04]10708: WAF :: fetched 1 new logs [30-07-2022 08:14:01]21706: WAF :: fetched 1 new logs [30-07-2022 08:15:02]27795: WAF :: fetched 1 new logs [30-07-2022 08:17:01]6492: WAF :: fetched 1 new logs [30-07-2022 08:18:01]12509: WAF :: fetched 16 new logs [30-07-2022 08:19:02]18031: WAF :: fetched 1 new logs [30-07-2022 08:20:01]24035: WAF :: fetched 1 new logs [30-07-2022 08:22:01]3060: WAF :: fetched 1 new logs [30-07-2022 08:23:02]8396: WAF :: fetched 1 new logs [30-07-2022 08:25:01]20016: WAF :: fetched 2 new logs [30-07-2022 08:26:02]26154: WAF :: fetched 3 new logs [30-07-2022 08:27:01]31711: WAF :: fetched 2 new logs [30-07-2022 08:31:01]22058: WAF :: fetched 1 new logs [30-07-2022 08:32:02]27761: WAF :: fetched 1 new logs [30-07-2022 08:35:01]12396: WAF :: fetched 1 new logs [30-07-2022 08:36:02]18195: WAF :: fetched 1 new logs [30-07-2022 08:38:02]29546: WAF :: fetched 1 new logs [30-07-2022 08:41:01]14226: Checking for user cron vulnerabilities [30-07-2022 08:43:02]25504: WAF :: fetched 1 new logs [30-07-2022 08:44:01]31146: Checking ditributed CMS bruteforce attacks [30-07-2022 08:45:02]4526: WAF :: fetched 5 new logs [30-07-2022 08:51:01]6378: WAF :: fetched 1 new logs [30-07-2022 08:54:01]23317: WAF :: fetched 1 new logs [30-07-2022 08:55:02]28647: WAF :: fetched 1 new logs [30-07-2022 08:57:02]8174: WAF :: fetched 1 new logs [30-07-2022 09:05:01]21310: WAF :: fetched 5 new logs [30-07-2022 09:06:02]27088: WAF :: fetched 1 new logs [30-07-2022 09:10:02]17631: WAF :: fetched 2 new logs [30-07-2022 09:11:01]23365: WAF :: fetched 1 new logs [30-07-2022 09:12:02]29039: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659183122 [30-07-2022 09:12:02]29039: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 09:12:04]29039: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 09:12:04]29039: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-0912/20220730-091202-YuUgEsMlJ5H3I85bf1LmhwAAABw [30-07-2022 09:12:04]29039: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 09:12:04]29039: WAF :: fetched 4 new logs [30-07-2022 09:13:01]2354: WAF :: fetched 1 new logs [30-07-2022 09:18:01]30917: WAF :: fetched 1 new logs [30-07-2022 09:19:02]4385: WAF :: fetched 1 new logs [30-07-2022 09:20:02]10017: WAF :: fetched 2 new logs [30-07-2022 09:23:01]27017: WAF :: fetched 1 new logs [30-07-2022 09:24:02]339: WAF :: fetched 2 new logs [30-07-2022 09:25:01]6137: WAF :: fetched 1 new logs [30-07-2022 09:33:01]19386: WAF :: fetched 1 new logs [30-07-2022 09:34:02]25167: WAF :: fetched 1 new logs [30-07-2022 09:41:01]538: Checking for user cron vulnerabilities [30-07-2022 09:43:01]12105: WAF :: fetched 2 new logs [30-07-2022 09:44:02]18033: Checking ditributed CMS bruteforce attacks [30-07-2022 09:45:01]23709: WAF :: fetched 1 new logs [30-07-2022 09:46:02]29603: WAF :: fetched 2 new logs [30-07-2022 09:47:01]2974: WAF :: fetched 1 new logs [30-07-2022 09:48:02]8725: WAF :: fetched 1 new logs [30-07-2022 09:53:02]4913: WAF :: fetched 1 new logs [30-07-2022 09:54:01]11014: WAF :: fetched 2 new logs [30-07-2022 09:56:01]22440: WAF :: fetched 1 new logs [30-07-2022 09:57:02]28157: WAF :: fetched 2 new logs [30-07-2022 09:58:01]1410: WAF :: fetched 1 new logs [30-07-2022 09:59:02]7354: WAF :: fetched 1 new logs [30-07-2022 10:01:02]18978: WAF :: fetched 1 new logs [30-07-2022 10:02:01]24686: WAF :: fetched 1 new logs [30-07-2022 10:03:02]30403: WAF :: fetched 1 new logs [30-07-2022 10:10:01]5934: WAF :: fetched 3 new logs [30-07-2022 10:12:01]17335: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659186721 [30-07-2022 10:12:01]17335: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 10:12:03]17335: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 10:12:04]17335: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-1012/20220730-101201-YuUuIXVFDzTrXYNdx8GPSQAAACE [30-07-2022 10:12:04]17335: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [30-07-2022 10:12:04]17335: WAF :: fetched 2 new logs [30-07-2022 10:21:01]4315: WAF :: fetched 1 new logs [30-07-2022 10:28:02]12329: WAF :: fetched 2 new logs [30-07-2022 10:33:01]8834: WAF :: fetched 1 new logs [30-07-2022 10:36:02]26230: WAF :: fetched 2 new logs [30-07-2022 10:40:02]16586: WAF :: fetched 2 new logs [30-07-2022 10:41:01]22758: WAF :: fetched 1 new logs [30-07-2022 10:41:01]22758: Checking for user cron vulnerabilities [30-07-2022 10:42:02]28438: WAF :: fetched 5 new logs [30-07-2022 10:44:01]7580: Checking ditributed CMS bruteforce attacks [30-07-2022 10:49:02]3982: WAF :: fetched 1 new logs [30-07-2022 10:50:02]9678: WAF :: fetched 1 new logs [30-07-2022 10:55:02]6313: WAF :: fetched 2 new logs [30-07-2022 10:59:02]29100: WAF :: fetched 1 new logs [30-07-2022 11:00:01]2154: WAF :: fetched 1 new logs [30-07-2022 11:03:02]19843: WAF :: fetched 1 new logs [30-07-2022 11:07:02]10363: WAF :: fetched 2 new logs [30-07-2022 11:07:47]10550: Performed RBL check for 23.111.136.34. [30-07-2022 11:08:02]16009: WAF :: fetched 1 new logs [30-07-2022 11:09:02]21761: WAF :: fetched 1 new logs [30-07-2022 11:12:01]6438: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659190321 [30-07-2022 11:12:01]6438: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 11:12:03]6438: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 11:12:04]6438: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-1112/20220730-111201-YuU8MapAK1EyrF67rFTCDgAAAAU [30-07-2022 11:12:04]6438: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [30-07-2022 11:12:04]6438: WAF :: fetched 1 new logs [30-07-2022 11:13:01]12483: WAF :: fetched 1 new logs [30-07-2022 11:14:02]17940: WAF :: fetched 2 new logs [30-07-2022 11:16:02]29634: WAF :: fetched 23 new logs [30-07-2022 11:19:01]14803: WAF :: fetched 1 new logs [30-07-2022 11:20:02]20280: WAF :: fetched 1 new logs [30-07-2022 11:22:02]32035: WAF :: fetched 1 new logs [30-07-2022 11:23:01]5376: WAF :: fetched 3 new logs [30-07-2022 11:26:02]22648: WAF :: fetched 3 new logs [30-07-2022 11:33:02]30325: WAF :: fetched 3 new logs [30-07-2022 11:34:01]3583: WAF :: fetched 4 new logs [30-07-2022 11:38:02]26405: WAF :: fetched 3 new logs [30-07-2022 11:40:02]5428: WAF :: fetched 1 new logs [30-07-2022 11:41:01]11148: Checking for user cron vulnerabilities [30-07-2022 11:44:01]27765: Checking ditributed CMS bruteforce attacks [30-07-2022 11:44:02]27765: WAF :: fetched 1 new logs [30-07-2022 11:49:02]24521: WAF :: fetched 1 new logs [30-07-2022 11:50:02]30228: WAF :: fetched 1 new logs [30-07-2022 11:53:01]15138: WAF :: fetched 2 new logs [30-07-2022 11:55:01]26556: WAF :: fetched 1 new logs [30-07-2022 11:58:02]11402: WAF :: fetched 1 new logs [30-07-2022 12:00:02]22601: WAF :: fetched 1 new logs [30-07-2022 12:02:01]3109: WAF :: fetched 6 new logs [30-07-2022 12:03:02]8726: WAF :: fetched 1 new logs [30-07-2022 12:05:01]20103: WAF :: fetched 1 new logs [30-07-2022 12:06:02]25568: WAF :: fetched 1 new logs [30-07-2022 12:07:01]31612: WAF :: fetched 2 new logs [30-07-2022 12:11:01]22119: WAF :: fetched 1 new logs [30-07-2022 12:12:01]27531: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659193921 [30-07-2022 12:12:01]27531: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 12:12:03]27531: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 12:12:04]27531: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-1212/20220730-121201-YuVKQeQL8GT4PwPveFIBqgAAAAo [30-07-2022 12:12:04]27531: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 12:12:04]27531: WAF :: fetched 78 new logs [30-07-2022 12:15:02]12573: WAF :: fetched 3 new logs [30-07-2022 12:16:01]18179: WAF :: fetched 2 new logs [30-07-2022 12:18:01]29369: WAF :: fetched 1 new logs [30-07-2022 12:19:02]2655: WAF :: fetched 4 new logs [30-07-2022 12:20:01]8389: WAF :: fetched 1 new logs [30-07-2022 12:23:02]25156: WAF :: fetched 1 new logs [30-07-2022 12:24:01]30649: WAF :: fetched 2 new logs [30-07-2022 12:27:02]15471: WAF :: fetched 1 new logs [30-07-2022 12:28:01]20999: WAF :: fetched 2 new logs [30-07-2022 12:31:01]5612: WAF :: fetched 3 new logs [30-07-2022 12:32:01]10943: WAF :: fetched 1 new logs [30-07-2022 12:35:01]28248: WAF :: fetched 1 new logs [30-07-2022 12:39:01]18480: WAF :: fetched 1 new logs [30-07-2022 12:41:01]29862: Checking for user cron vulnerabilities [30-07-2022 12:43:01]8772: WAF :: fetched 26 new logs [30-07-2022 12:44:01]14045: Checking ditributed CMS bruteforce attacks [30-07-2022 12:45:01]: Checking for software updates [30-07-2022 12:46:01]25809: WAF :: fetched 1 new logs [30-07-2022 12:52:01]27917: WAF :: fetched 1 new logs [30-07-2022 12:53:02]1328: WAF :: fetched 1 new logs [30-07-2022 12:58:02]30074: WAF :: fetched 1 new logs [30-07-2022 12:59:01]3469: WAF :: fetched 7 new logs [30-07-2022 13:00:02]8978: WAF :: fetched 1 new logs [30-07-2022 13:01:01]15221: WAF :: fetched 1 new logs [30-07-2022 13:04:02]32657: WAF :: fetched 2 new logs [30-07-2022 13:08:01]23467: WAF :: fetched 1 new logs [30-07-2022 13:10:01]2830: WAF :: fetched 1 new logs [30-07-2022 13:12:01]14388: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659197521 [30-07-2022 13:12:01]14388: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 13:12:03]14388: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 13:12:04]14388: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-1312/20220730-131201-YuVYUVBq9TTTE5cnSktf1gAAABw [30-07-2022 13:12:04]14388: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 13:12:04]14388: WAF :: fetched 4 new logs [30-07-2022 13:13:01]20161: WAF :: fetched 6 new logs [30-07-2022 13:14:01]25560: WAF :: fetched 14 new logs [30-07-2022 13:15:02]31796: WAF :: fetched 17 new logs [30-07-2022 13:16:01]5304: WAF :: fetched 17 new logs [30-07-2022 13:17:02]11064: WAF :: fetched 17 new logs [30-07-2022 13:21:02]1651: WAF :: fetched 3 new logs [30-07-2022 13:26:01]31268: WAF :: fetched 1 new logs [30-07-2022 13:29:02]16207: WAF :: fetched 1 new logs [30-07-2022 13:31:02]27867: WAF :: fetched 3 new logs [30-07-2022 13:34:01]12715: WAF :: fetched 1 new logs [30-07-2022 13:36:01]24281: WAF :: fetched 5 new logs [30-07-2022 13:38:01]3380: WAF :: fetched 4 new logs [30-07-2022 13:39:02]8896: WAF :: fetched 4 new logs [30-07-2022 13:40:01]15122: WAF :: fetched 1 new logs [30-07-2022 13:41:02]21099: WAF :: fetched 1 new logs [30-07-2022 13:41:02]21099: Checking for user cron vulnerabilities [30-07-2022 13:42:01]26869: WAF :: fetched 7 new logs [30-07-2022 13:43:02]32682: WAF :: fetched 2 new logs [30-07-2022 13:44:01]6113: Checking ditributed CMS bruteforce attacks [30-07-2022 13:44:01]6113: WAF :: fetched 2 new logs [30-07-2022 13:45:01]: Checking for definition updates [30-07-2022 13:45:02]11963: WAF :: fetched 5 new logs [30-07-2022 13:46:01]17716: WAF :: fetched 3 new logs [30-07-2022 13:47:02]23470: WAF :: fetched 6 new logs [30-07-2022 13:48:01]29181: WAF :: fetched 5 new logs [30-07-2022 13:49:02]2629: WAF :: fetched 3 new logs [30-07-2022 13:50:01]8517: WAF :: fetched 2 new logs [30-07-2022 13:52:02]20142: WAF :: fetched 1 new logs [30-07-2022 13:56:02]10978: WAF :: fetched 3 new logs [30-07-2022 13:58:02]22505: WAF :: fetched 1 new logs [30-07-2022 14:01:02]7613: WAF :: fetched 1 new logs [30-07-2022 14:08:01]15621: WAF :: fetched 1 new logs [30-07-2022 14:12:01]6477: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659201121 [30-07-2022 14:12:01]6477: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 14:12:03]6477: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 14:12:03]6477: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-1412/20220730-141201-YuVmYW5LOpr3VPuN9oNPpQAAAA8 [30-07-2022 14:12:03]6477: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 14:12:04]6477: WAF :: fetched 3 new logs [30-07-2022 14:13:01]11927: WAF :: fetched 1 new logs [30-07-2022 14:16:01]29603: WAF :: fetched 2 new logs [30-07-2022 14:17:02]3057: WAF :: fetched 4 new logs [30-07-2022 14:18:02]8843: WAF :: fetched 46 new logs [30-07-2022 14:19:02]14552: WAF :: fetched 5 new logs [30-07-2022 14:20:01]20236: WAF :: fetched 1 new logs [30-07-2022 14:22:02]31851: WAF :: fetched 2 new logs [30-07-2022 14:23:01]5267: WAF :: fetched 2 new logs [30-07-2022 14:24:02]10982: WAF :: fetched 1 new logs [30-07-2022 14:25:01]16594: WAF :: fetched 3 new logs [30-07-2022 14:29:01]7172: WAF :: fetched 3 new logs [30-07-2022 14:30:02]12839: WAF :: fetched 1 new logs [30-07-2022 14:31:01]18703: httpd.conf changed. Refreshing watchlist. [30-07-2022 14:33:01]30046: WAF :: fetched 1 new logs [30-07-2022 14:34:02]3486: WAF :: fetched 5 new logs [30-07-2022 14:36:02]15104: WAF :: fetched 48 new logs [30-07-2022 14:37:01]20839: httpd.conf changed. Refreshing watchlist. [30-07-2022 14:37:01]20842: WAF :: fetched 62 new logs [30-07-2022 14:38:02]26570: WAF :: fetched 1 new logs [30-07-2022 14:41:02]11473: Checking for user cron vulnerabilities [30-07-2022 14:42:01]16985: WAF :: fetched 1 new logs [30-07-2022 14:44:01]28210: Checking ditributed CMS bruteforce attacks [30-07-2022 14:45:02]1539: WAF :: fetched 1 new logs [30-07-2022 14:47:02]13036: WAF :: fetched 1 new logs [30-07-2022 14:49:02]24337: WAF :: fetched 1 new logs [30-07-2022 14:50:01]29966: WAF :: fetched 1 new logs [30-07-2022 14:52:01]9173: WAF :: fetched 2 new logs [30-07-2022 14:53:02]14889: Updated license status via CDN [30-07-2022 14:54:01]20508: WAF :: fetched 1 new logs [30-07-2022 14:58:01]11356: WAF :: fetched 2 new logs [30-07-2022 15:00:01]22492: WAF :: fetched 4 new logs [30-07-2022 15:01:02]28792: Reseting cPGuard inotify settings [30-07-2022 15:02:01]2102: WAF :: fetched 1 new logs [30-07-2022 15:06:01]24919: WAF :: fetched 2 new logs [30-07-2022 15:07:02]30596: WAF :: fetched 1 new logs [30-07-2022 15:08:01]3885: WAF :: fetched 4 new logs [30-07-2022 15:11:02]21188: WAF :: fetched 2 new logs [30-07-2022 15:12:01]26838: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659204721 [30-07-2022 15:12:01]26838: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 15:12:03]26838: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 15:12:04]26838: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-1512/20220730-151201-YuV0cTDrlYtYLMtUGtB-SgAAAAU [30-07-2022 15:12:04]26838: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 15:12:04]26838: WAF :: fetched 3 new logs [30-07-2022 15:13:02]32623: WAF :: fetched 3 new logs [30-07-2022 15:14:01]6019: WAF :: fetched 6 new logs [30-07-2022 15:15:01]11746: WAF :: fetched 4 new logs [30-07-2022 15:16:02]17624: WAF :: fetched 1 new logs [30-07-2022 15:20:02]8155: WAF :: fetched 2 new logs [30-07-2022 15:22:02]19393: WAF :: fetched 1 new logs [30-07-2022 15:23:01]25540: WAF :: fetched 1 new logs [30-07-2022 15:24:02]31247: WAF :: fetched 3 new logs [30-07-2022 15:25:01]4586: WAF :: fetched 1 new logs [30-07-2022 15:29:01]27344: WAF :: fetched 2 new logs [30-07-2022 15:30:02]658: WAF :: fetched 4 new logs [30-07-2022 15:31:01]6577: WAF :: fetched 2 new logs [30-07-2022 15:32:02]12310: WAF :: fetched 2 new logs [30-07-2022 15:34:02]23627: WAF :: fetched 2 new logs [30-07-2022 15:36:02]2823: WAF :: fetched 1 new logs [30-07-2022 15:37:01]8512: WAF :: fetched 1 new logs [30-07-2022 15:39:01]19935: WAF :: fetched 1 new logs [30-07-2022 15:40:02]25639: WAF :: fetched 1 new logs [30-07-2022 15:41:01]31442: Checking for user cron vulnerabilities [30-07-2022 15:44:01]16352: Checking ditributed CMS bruteforce attacks [30-07-2022 15:45:01]22018: WAF :: fetched 4 new logs [30-07-2022 15:46:02]27871: WAF :: fetched 1 new logs [30-07-2022 15:47:01]1121: WAF :: fetched 2 new logs [30-07-2022 15:52:02]30095: WAF :: fetched 1 new logs [30-07-2022 15:54:01]9170: WAF :: fetched 5 new logs [30-07-2022 15:56:01]20669: WAF :: fetched 1 new logs [30-07-2022 16:02:02]22972: WAF :: fetched 1 new logs [30-07-2022 16:07:01]19416: WAF :: fetched 4 new logs [30-07-2022 16:08:02]25130: WAF :: fetched 4 new logs [30-07-2022 16:09:01]30787: WAF :: fetched 4 new logs [30-07-2022 16:12:02]15929: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659208322 [30-07-2022 16:12:02]15929: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 16:12:04]15929: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 16:12:04]15929: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-1612/20220730-161202-YuWCgqpGqKsG-mjL6OfIgAAAAB4 [30-07-2022 16:12:04]15929: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 16:12:05]15929: WAF :: fetched 3 new logs [30-07-2022 16:13:01]21634: WAF :: fetched 3 new logs [30-07-2022 16:14:01]27316: WAF :: fetched 1 new logs [30-07-2022 16:17:01]12379: WAF :: fetched 2 new logs [30-07-2022 16:18:02]18607: WAF :: fetched 3 new logs [30-07-2022 16:19:01]24333: WAF :: fetched 3 new logs [30-07-2022 16:23:02]15294: WAF :: fetched 1 new logs [30-07-2022 16:27:02]6114: WAF :: fetched 3 new logs [30-07-2022 16:28:01]11738: WAF :: fetched 1 new logs [30-07-2022 16:32:01]2432: WAF :: fetched 1 new logs [30-07-2022 16:33:02]8148: WAF :: fetched 2 new logs [30-07-2022 16:35:02]19551: WAF :: fetched 1 new logs [30-07-2022 16:37:02]31132: WAF :: fetched 1 new logs [30-07-2022 16:41:01]21762: WAF :: fetched 1 new logs [30-07-2022 16:41:01]21762: Checking for user cron vulnerabilities [30-07-2022 16:42:02]27573: WAF :: fetched 6 new logs [30-07-2022 16:43:01]876: WAF :: fetched 6 new logs [30-07-2022 16:44:02]6781: Checking ditributed CMS bruteforce attacks [30-07-2022 16:44:02]6781: WAF :: fetched 2 new logs [30-07-2022 16:45:01]12402: WAF :: fetched 1 new logs [30-07-2022 16:46:02]18403: WAF :: fetched 1 new logs [30-07-2022 16:49:02]3290: WAF :: fetched 1 new logs [30-07-2022 16:50:01]8990: WAF :: fetched 4 new logs [30-07-2022 16:52:01]20596: WAF :: fetched 1 new logs [30-07-2022 16:53:02]26348: WAF :: fetched 2 new logs [30-07-2022 16:57:02]17041: WAF :: fetched 3 new logs [30-07-2022 17:00:01]1666: WAF :: fetched 2 new logs [30-07-2022 17:03:02]19719: WAF :: fetched 1 new logs [30-07-2022 17:08:01]15886: WAF :: fetched 2 new logs [30-07-2022 17:10:01]27511: WAF :: fetched 1 new logs [30-07-2022 17:12:01]6939: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659211921 [30-07-2022 17:12:02]6939: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 17:12:04]6939: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 17:12:04]6939: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-1712/20220730-171202-YuWQkgJ-9alm8GJf9bmYDAAAABo [30-07-2022 17:12:04]6939: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 17:12:05]6939: WAF :: fetched 5 new logs [30-07-2022 17:14:01]18487: WAF :: fetched 1 new logs [30-07-2022 17:16:02]30219: WAF :: fetched 3 new logs [30-07-2022 17:17:01]4040: WAF :: fetched 1 new logs [30-07-2022 17:19:01]15612: WAF :: fetched 2 new logs [30-07-2022 17:21:01]27452: WAF :: fetched 4 new logs [30-07-2022 17:24:02]12033: WAF :: fetched 3 new logs [30-07-2022 17:25:01]18134: WAF :: fetched 1 new logs [30-07-2022 17:31:02]20315: WAF :: fetched 2 new logs [30-07-2022 17:33:02]31781: WAF :: fetched 2 new logs [30-07-2022 17:34:01]5105: WAF :: fetched 1 new logs [30-07-2022 17:35:02]10805: WAF :: fetched 1 new logs [30-07-2022 17:41:02]13092: WAF :: fetched 1 new logs [30-07-2022 17:41:02]13092: Checking for user cron vulnerabilities [30-07-2022 17:42:01]18712: WAF :: fetched 4 new logs [30-07-2022 17:43:02]24434: WAF :: fetched 1 new logs [30-07-2022 17:44:01]30069: Checking ditributed CMS bruteforce attacks [30-07-2022 17:44:01]30069: WAF :: fetched 1 new logs [30-07-2022 17:45:01]3343: WAF :: fetched 1 new logs [30-07-2022 17:46:01]9170: WAF :: fetched 2 new logs [30-07-2022 17:47:01]14529: WAF :: fetched 2 new logs [30-07-2022 17:48:01]20536: WAF :: fetched 2 new logs [30-07-2022 17:49:02]25938: WAF :: fetched 2 new logs [30-07-2022 17:50:01]32008: WAF :: fetched 1 new logs [30-07-2022 17:51:01]5546: WAF :: fetched 1 new logs [30-07-2022 17:54:01]22683: WAF :: fetched 1 new logs [30-07-2022 17:55:02]28051: WAF :: fetched 1 new logs [30-07-2022 17:56:01]1838: WAF :: fetched 1 new logs [30-07-2022 17:57:02]7629: WAF :: fetched 3 new logs [30-07-2022 17:59:01]18869: WAF :: fetched 1 new logs [30-07-2022 18:01:01]30429: WAF :: fetched 1 new logs [30-07-2022 18:03:01]9542: WAF :: fetched 2 new logs [30-07-2022 18:07:01]32459: WAF :: fetched 1 new logs [30-07-2022 18:08:02]5851: WAF :: fetched 1 new logs [30-07-2022 18:09:01]11501: WAF :: fetched 1 new logs [30-07-2022 18:10:02]17159: WAF :: fetched 2 new logs [30-07-2022 18:12:01]28609: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659215521 [30-07-2022 18:12:01]28609: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 18:12:03]28609: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 18:12:03]28609: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-1812/20220730-181201-YuWeofLoh6PHb2JEZ4sCiQAAAAA [30-07-2022 18:12:03]28609: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 18:12:04]28609: WAF :: fetched 1 new logs [30-07-2022 18:17:02]25057: WAF :: fetched 1 new logs [30-07-2022 18:20:01]10064: WAF :: fetched 2 new logs [30-07-2022 18:22:01]21556: WAF :: fetched 2 new logs [30-07-2022 18:23:02]26982: WAF :: fetched 2 new logs [30-07-2022 18:26:01]12309: WAF :: fetched 5 new logs [30-07-2022 18:29:02]29470: WAF :: fetched 27 new logs [30-07-2022 18:32:02]14323: WAF :: fetched 1 new logs [30-07-2022 18:37:01]10176: WAF :: fetched 1 new logs [30-07-2022 18:38:02]16220: WAF :: fetched 1 new logs [30-07-2022 18:41:01]822: Checking for user cron vulnerabilities [30-07-2022 18:42:02]6740: WAF :: fetched 2 new logs [30-07-2022 18:44:01]18075: Checking ditributed CMS bruteforce attacks [30-07-2022 18:44:02]18075: WAF :: fetched 2 new logs [30-07-2022 18:49:01]14122: WAF :: fetched 3 new logs [30-07-2022 18:51:01]25555: WAF :: fetched 5 new logs [30-07-2022 18:52:02]31368: WAF :: fetched 1 new logs [30-07-2022 18:57:01]27621: WAF :: fetched 4 new logs [30-07-2022 18:58:01]525: WAF :: fetched 6 new logs [30-07-2022 19:06:02]14449: WAF :: fetched 3 new logs [30-07-2022 19:07:01]20158: WAF :: fetched 2 new logs [30-07-2022 19:09:01]31542: WAF :: fetched 1 new logs [30-07-2022 19:10:02]4690: WAF :: fetched 1 new logs [30-07-2022 19:12:02]16173: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659219122 [30-07-2022 19:12:02]16173: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 19:12:04]16173: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 19:12:04]16173: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-1912/20220730-191202-YuWsshJorcnXT6JV-G_rdAAAABA [30-07-2022 19:12:04]16173: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 19:13:01]22249: WAF :: fetched 2 new logs [30-07-2022 19:14:02]27654: WAF :: fetched 1 new logs [30-07-2022 19:20:02]29762: WAF :: fetched 1 new logs [30-07-2022 19:23:02]14443: WAF :: fetched 1 new logs [30-07-2022 19:30:02]21916: WAF :: fetched 1 new logs [30-07-2022 19:31:01]27579: WAF :: fetched 2 new logs [30-07-2022 19:32:01]930: WAF :: fetched 1 new logs [30-07-2022 19:33:01]6408: WAF :: fetched 1 new logs [30-07-2022 19:39:02]8750: WAF :: fetched 1 new logs [30-07-2022 19:41:02]20123: WAF :: fetched 1 new logs [30-07-2022 19:41:02]20123: Checking for user cron vulnerabilities [30-07-2022 19:42:02]25804: WAF :: fetched 1 new logs [30-07-2022 19:44:01]4507: Checking ditributed CMS bruteforce attacks [30-07-2022 19:45:01]: Checking for definition updates [30-07-2022 19:49:01]988: WAF :: fetched 4 new logs [30-07-2022 19:55:01]2926: WAF :: fetched 1 new logs [30-07-2022 19:57:01]14375: WAF :: fetched 1 new logs [30-07-2022 20:00:02]31066: WAF :: fetched 1 new logs [30-07-2022 20:02:02]10775: WAF :: fetched 1 new logs [30-07-2022 20:05:01]27735: WAF :: fetched 1 new logs [30-07-2022 20:06:02]1091: WAF :: fetched 3 new logs [30-07-2022 20:08:02]12533: WAF :: fetched 1 new logs [30-07-2022 20:09:01]18161: WAF :: fetched 1 new logs [30-07-2022 20:10:01]23864: WAF :: fetched 1 new logs [30-07-2022 20:11:02]29640: WAF :: fetched 1 new logs [30-07-2022 20:12:01]3063: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659222721 [30-07-2022 20:12:01]3063: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 20:12:03]3063: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 20:12:04]3063: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-2012/20220730-201201-YuW6wfUf8lPFzLqM3v-8kgAAACM [30-07-2022 20:12:04]3063: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [30-07-2022 20:12:04]3063: WAF :: fetched 2 new logs [30-07-2022 20:17:02]31567: WAF :: fetched 8 new logs [30-07-2022 20:18:01]4851: WAF :: fetched 2 new logs [30-07-2022 20:20:01]16090: WAF :: fetched 2 new logs [30-07-2022 20:22:02]27672: WAF :: fetched 28 new logs [30-07-2022 20:23:02]863: WAF :: fetched 64 new logs [30-07-2022 20:24:01]6597: WAF :: fetched 19 new logs [30-07-2022 20:25:01]12244: WAF :: fetched 4 new logs [30-07-2022 20:28:01]29053: WAF :: fetched 3 new logs [30-07-2022 20:29:01]2885: WAF :: fetched 2 new logs [30-07-2022 20:30:02]8579: WAF :: fetched 1 new logs [30-07-2022 20:33:02]25683: WAF :: fetched 3 new logs [30-07-2022 20:34:01]31310: WAF :: fetched 2 new logs [30-07-2022 20:41:02]6419: Checking for user cron vulnerabilities [30-07-2022 20:42:02]12095: WAF :: fetched 4 new logs [30-07-2022 20:44:01]23339: Checking ditributed CMS bruteforce attacks [30-07-2022 20:44:01]23339: WAF :: fetched 1 new logs [30-07-2022 20:45:02]29043: WAF :: fetched 1 new logs [30-07-2022 20:46:01]2398: WAF :: fetched 1 new logs [30-07-2022 20:47:02]8207: WAF :: fetched 15 new logs [30-07-2022 20:48:01]13821: WAF :: fetched 2 new logs [30-07-2022 20:49:02]19534: WAF :: fetched 4 new logs [30-07-2022 20:50:01]25115: WAF :: fetched 1 new logs [30-07-2022 20:51:02]30850: WAF :: fetched 1 new logs [30-07-2022 20:53:02]9953: WAF :: fetched 1 new logs [30-07-2022 20:54:02]15560: WAF :: fetched 13 new logs [30-07-2022 20:55:01]21201: WAF :: fetched 2 new logs [30-07-2022 20:56:02]26714: WAF :: fetched 2 new logs [30-07-2022 20:59:01]11825: WAF :: fetched 1 new logs [30-07-2022 21:01:01]23513: WAF :: fetched 2 new logs [30-07-2022 21:02:01]28975: WAF :: fetched 2 new logs [30-07-2022 21:03:02]2380: WAF :: fetched 3 new logs [30-07-2022 21:07:02]25665: WAF :: fetched 1 new logs [30-07-2022 21:08:02]31296: WAF :: fetched 2 new logs [30-07-2022 21:10:02]10326: WAF :: fetched 2 new logs [30-07-2022 21:12:01]21759: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659226321 [30-07-2022 21:12:01]21759: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 21:12:03]21759: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 21:12:04]21759: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-2112/20220730-211201-YuXI0Zz8y--uXTxzD3xbjQAAAB8 [30-07-2022 21:12:04]21759: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 21:12:04]21759: WAF :: fetched 145 new logs [30-07-2022 21:13:02]27513: WAF :: fetched 3 new logs [30-07-2022 21:15:01]6495: WAF :: fetched 1 new logs [30-07-2022 21:19:01]29294: WAF :: fetched 1 new logs [30-07-2022 21:20:02]2635: WAF :: fetched 3 new logs [30-07-2022 21:21:01]8306: WAF :: fetched 2 new logs [30-07-2022 21:24:02]25368: WAF :: fetched 13 new logs [30-07-2022 21:25:01]30961: WAF :: fetched 2 new logs [30-07-2022 21:27:01]10064: WAF :: fetched 1 new logs [30-07-2022 21:29:02]21506: WAF :: fetched 1 new logs [30-07-2022 21:33:02]12179: WAF :: fetched 2 new logs [30-07-2022 21:37:01]2503: WAF :: fetched 1 new logs [30-07-2022 21:38:01]7916: WAF :: fetched 2 new logs [30-07-2022 21:39:02]13996: WAF :: fetched 1 new logs [30-07-2022 21:41:02]25391: WAF :: fetched 2 new logs [30-07-2022 21:41:02]25391: Checking for user cron vulnerabilities [30-07-2022 21:43:02]4533: WAF :: fetched 1 new logs [30-07-2022 21:44:01]10066: Checking ditributed CMS bruteforce attacks [30-07-2022 21:44:01]10066: WAF :: fetched 1 new logs [30-07-2022 21:46:01]21421: WAF :: fetched 1 new logs [30-07-2022 21:50:01]11816: WAF :: fetched 2 new logs [30-07-2022 21:52:01]23373: WAF :: fetched 1 new logs [30-07-2022 21:55:02]7865: WAF :: fetched 7 new logs [30-07-2022 21:57:02]19697: WAF :: fetched 2 new logs [30-07-2022 21:58:01]25302: WAF :: fetched 2 new logs [30-07-2022 21:59:02]30999: WAF :: fetched 1 new logs [30-07-2022 22:01:02]10360: WAF :: fetched 1 new logs [30-07-2022 22:02:01]16112: WAF :: fetched 14 new logs [30-07-2022 22:03:02]21864: WAF :: fetched 1 new logs [30-07-2022 22:04:01]27510: WAF :: fetched 1 new logs [30-07-2022 22:05:02]783: WAF :: fetched 1 new logs [30-07-2022 22:07:02]12392: WAF :: fetched 1 new logs [30-07-2022 22:07:10]12383: Performing Domain reputation checks [30-07-2022 22:09:02]23719: WAF :: fetched 1 new logs [30-07-2022 22:12:01]8556: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659229921 [30-07-2022 22:12:01]8556: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 22:12:03]8556: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 22:12:04]8556: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-2212/20220730-221201-YuXW4d3c3etJOhzc6XbKcAAAABY [30-07-2022 22:12:04]8556: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [30-07-2022 22:12:04]8556: WAF :: fetched 6 new logs [30-07-2022 22:15:02]25668: WAF :: fetched 1 new logs [30-07-2022 22:16:01]31329: WAF :: fetched 2 new logs [30-07-2022 22:17:02]4825: WAF :: fetched 1 new logs [30-07-2022 22:18:01]10522: WAF :: fetched 3 new logs [30-07-2022 22:19:02]16223: WAF :: fetched 2 new logs [30-07-2022 22:20:01]21894: WAF :: fetched 2 new logs [30-07-2022 22:21:02]27737: WAF :: fetched 1 new logs [30-07-2022 22:23:02]6848: WAF :: fetched 4 new logs [30-07-2022 22:25:02]17841: WAF :: fetched 1 new logs [30-07-2022 22:26:01]23920: WAF :: fetched 1 new logs [30-07-2022 22:27:02]29406: WAF :: fetched 2 new logs [30-07-2022 22:30:01]14430: WAF :: fetched 1 new logs [30-07-2022 22:31:02]20216: WAF :: fetched 2 new logs [30-07-2022 22:35:01]10618: WAF :: fetched 1 new logs [30-07-2022 22:38:02]27668: WAF :: fetched 2 new logs [30-07-2022 22:39:01]897: WAF :: fetched 1 new logs [30-07-2022 22:40:02]6688: WAF :: fetched 2 new logs [30-07-2022 22:41:01]12289: WAF :: fetched 1 new logs [30-07-2022 22:41:01]12289: Checking for user cron vulnerabilities [30-07-2022 22:42:02]17749: WAF :: fetched 1 new logs [30-07-2022 22:43:02]23775: WAF :: fetched 1 new logs [30-07-2022 22:44:01]29363: Checking ditributed CMS bruteforce attacks [30-07-2022 22:44:02]29363: WAF :: fetched 1 new logs [30-07-2022 22:46:01]8012: WAF :: fetched 2 new logs [30-07-2022 22:47:02]14146: WAF :: fetched 1 new logs [30-07-2022 22:50:01]31026: WAF :: fetched 1 new logs [30-07-2022 22:51:02]4119: WAF :: fetched 1 new logs [30-07-2022 22:52:01]10163: WAF :: fetched 3 new logs [30-07-2022 22:53:02]15534: WAF :: fetched 2 new logs [30-07-2022 22:55:02]27180: WAF :: fetched 1 new logs [30-07-2022 22:56:01]354: WAF :: fetched 1 new logs [30-07-2022 22:57:02]6209: WAF :: fetched 1 new logs [30-07-2022 22:58:01]11806: WAF :: fetched 2 new logs [30-07-2022 23:00:01]22772: WAF :: fetched 2 new logs [30-07-2022 23:01:02]28918: WAF :: fetched 4 new logs [30-07-2022 23:02:01]2228: WAF :: fetched 3 new logs [30-07-2022 23:03:02]7977: WAF :: fetched 1 new logs [30-07-2022 23:06:01]25046: WAF :: fetched 4 new logs [30-07-2022 23:07:51]30858: Performed RBL check for 23.111.136.34. [30-07-2022 23:09:02]9645: WAF :: fetched 2 new logs [30-07-2022 23:11:02]20955: WAF :: fetched 1 new logs [30-07-2022 23:12:01]26552: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659233521 [30-07-2022 23:12:01]26552: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [30-07-2022 23:12:03]26552: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [30-07-2022 23:12:03]26552: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220730/20220730-2312/20220730-231201-YuXk8Ymj1Bc_0zmqimJ1-QAAAAg [30-07-2022 23:12:03]26552: WAF :: No suitable log file found. Using SQLite.. [30-07-2022 23:12:04]26552: WAF :: fetched 47 new logs [30-07-2022 23:16:01]16697: WAF :: fetched 2 new logs [30-07-2022 23:17:01]22652: WAF :: fetched 1 new logs [30-07-2022 23:21:02]13224: WAF :: fetched 1 new logs [30-07-2022 23:26:01]8966: WAF :: fetched 3 new logs [30-07-2022 23:37:02]6097: WAF :: fetched 1 new logs [30-07-2022 23:38:01]11676: WAF :: fetched 1 new logs [30-07-2022 23:39:01]17349: WAF :: fetched 1 new logs [30-07-2022 23:40:01]22930: WAF :: fetched 3 new logs [30-07-2022 23:41:02]28677: Checking for user cron vulnerabilities [30-07-2022 23:43:02]7644: WAF :: fetched 3 new logs [30-07-2022 23:44:01]13142: Checking ditributed CMS bruteforce attacks [30-07-2022 23:51:02]20261: WAF :: fetched 1 new logs [30-07-2022 23:52:01]25798: WAF :: fetched 1 new logs [30-07-2022 23:53:02]31646: WAF :: fetched 1 new logs [30-07-2022 23:54:01]4903: WAF :: fetched 3 new logs [30-07-2022 23:55:02]10833: WAF :: fetched 3 new logs [30-07-2022 23:55:02]10841: httpd.conf changed. Refreshing watchlist. [30-07-2022 23:56:01]16282: WAF :: fetched 1 new logs [30-07-2022 23:58:01]27468: WAF :: fetched 4 new logs [30-07-2022 23:59:02]695: WAF :: fetched 1 new logs [31-07-2022 00:00:02]6137: WAF :: fetched 1 new logs [31-07-2022 00:01:01]12239: WAF :: fetched 1 new logs [31-07-2022 00:01:05]12239: Sending daily report for July 31, 2022 [31-07-2022 00:02:02]18277: WAF :: fetched 1 new logs [31-07-2022 00:03:01]24501: WAF :: fetched 1 new logs [31-07-2022 00:05:01]3770: WAF :: fetched 1 new logs [31-07-2022 00:05:01]3770: Deleted 0 entries older than 6 MONTH from scanner_logs [31-07-2022 00:05:01]3770: Deleted 0 files from Quarantine [31-07-2022 00:08:01]20863: WAF :: fetched 2 new logs [31-07-2022 00:11:02]5662: WAF :: fetched 1 new logs [31-07-2022 00:12:01]11515: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659237121 [31-07-2022 00:12:01]11515: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 00:12:03]11515: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 00:12:04]11515: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-0012/20220731-001201-YuXzATSLfnmZG7r26O3N5wAAACY [31-07-2022 00:12:04]11515: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 00:12:04]11515: WAF :: fetched 4 new logs [31-07-2022 00:19:01]20477: WAF :: fetched 3 new logs [31-07-2022 00:21:01]32066: WAF :: fetched 2 new logs [31-07-2022 00:24:01]17347: WAF :: fetched 17 new logs [31-07-2022 00:29:01]14686: WAF :: fetched 1 new logs [31-07-2022 00:30:02]20115: WAF :: fetched 1 new logs [31-07-2022 00:32:02]31728: WAF :: fetched 2 new logs [31-07-2022 00:33:01]5667: WAF :: fetched 4 new logs [31-07-2022 00:36:02]22809: WAF :: fetched 2 new logs [31-07-2022 00:37:01]28381: WAF :: fetched 2 new logs [31-07-2022 00:38:02]1829: WAF :: fetched 1 new logs [31-07-2022 00:40:01]13350: WAF :: fetched 1 new logs [31-07-2022 00:41:01]18865: Checking for user cron vulnerabilities [31-07-2022 00:43:02]30713: WAF :: fetched 3 new logs [31-07-2022 00:44:01]4492: Checking ditributed CMS bruteforce attacks [31-07-2022 00:45:01]: Checking for software updates [31-07-2022 00:45:02]9967: WAF :: fetched 3 new logs [31-07-2022 00:46:01]16033: WAF :: fetched 10 new logs [31-07-2022 00:47:02]21440: WAF :: fetched 1 new logs [31-07-2022 00:48:01]27597: WAF :: fetched 5 new logs [31-07-2022 00:52:02]17927: WAF :: fetched 2 new logs [31-07-2022 00:53:01]23652: WAF :: fetched 3 new logs [31-07-2022 00:54:02]29267: WAF :: fetched 3 new logs [31-07-2022 00:55:01]2507: WAF :: fetched 4 new logs [31-07-2022 00:56:02]8232: WAF :: fetched 5 new logs [31-07-2022 00:57:01]13852: WAF :: fetched 4 new logs [31-07-2022 00:58:01]19596: WAF :: fetched 3 new logs [31-07-2022 00:59:01]24958: WAF :: fetched 5 new logs [31-07-2022 01:00:02]30731: WAF :: fetched 2 new logs [31-07-2022 01:01:02]4675: WAF :: fetched 2 new logs [31-07-2022 01:02:01]10467: WAF :: fetched 4 new logs [31-07-2022 01:03:01]16608: WAF :: fetched 2 new logs [31-07-2022 01:08:02]14675: WAF :: fetched 1 new logs [31-07-2022 01:11:01]32266: WAF :: fetched 2 new logs [31-07-2022 01:12:01]5612: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659240721 [31-07-2022 01:12:01]5612: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 01:12:03]5612: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 01:12:05]5612: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-0112/20220731-011201-YuYBETSEPbzQ83h5Tz3hWwAAAAU [31-07-2022 01:12:05]5612: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [31-07-2022 01:12:06]5612: WAF :: fetched 1 new logs [31-07-2022 01:16:02]29001: WAF :: fetched 1 new logs [31-07-2022 01:17:02]2366: WAF :: fetched 1 new logs [31-07-2022 01:20:02]19504: WAF :: fetched 1 new logs [31-07-2022 01:23:01]4992: WAF :: fetched 1 new logs [31-07-2022 01:24:02]10447: WAF :: fetched 1 new logs [31-07-2022 01:25:01]16570: WAF :: fetched 3 new logs [31-07-2022 01:26:02]22105: WAF :: fetched 2 new logs [31-07-2022 01:27:01]28395: WAF :: fetched 9 new logs [31-07-2022 01:28:02]2135: WAF :: fetched 1 new logs [31-07-2022 01:29:01]8170: WAF :: fetched 1 new logs [31-07-2022 01:30:02]13875: WAF :: fetched 1 new logs [31-07-2022 01:31:02]19699: WAF :: fetched 2 new logs [31-07-2022 01:34:01]5168: WAF :: fetched 1 new logs [31-07-2022 01:35:02]10737: WAF :: fetched 1 new logs [31-07-2022 01:36:01]16932: WAF :: fetched 1 new logs [31-07-2022 01:38:01]28657: WAF :: fetched 1 new logs [31-07-2022 01:39:02]1991: WAF :: fetched 2 new logs [31-07-2022 01:41:02]13815: WAF :: fetched 1 new logs [31-07-2022 01:41:02]13815: Checking for user cron vulnerabilities [31-07-2022 01:42:01]19816: WAF :: fetched 1 new logs [31-07-2022 01:43:02]25437: WAF :: fetched 2 new logs [31-07-2022 01:44:01]31791: Checking ditributed CMS bruteforce attacks [31-07-2022 01:44:01]31791: WAF :: fetched 4 new logs [31-07-2022 01:45:01]: Checking for definition updates [31-07-2022 01:45:02]5350: WAF :: fetched 2 new logs [31-07-2022 01:46:01]11563: WAF :: fetched 3 new logs [31-07-2022 01:47:02]17305: WAF :: fetched 2 new logs [31-07-2022 01:49:02]28780: WAF :: fetched 2 new logs [31-07-2022 01:50:02]2353: WAF :: fetched 2 new logs [31-07-2022 01:54:01]25471: WAF :: fetched 1 new logs [31-07-2022 01:56:01]5100: WAF :: fetched 7 new logs [31-07-2022 02:01:02]1524: WAF :: fetched 8 new logs [31-07-2022 02:03:02]13042: WAF :: fetched 1 new logs [31-07-2022 02:04:01]19399: WAF :: fetched 1 new logs [31-07-2022 02:07:02]4397: WAF :: fetched 1 new logs [31-07-2022 02:08:02]10746: WAF :: fetched 2 new logs [31-07-2022 02:09:02]16462: WAF :: fetched 1 new logs [31-07-2022 02:10:01]22077: WAF :: fetched 2 new logs [31-07-2022 02:11:02]27540: WAF :: fetched 7 new logs [31-07-2022 02:12:01]1225: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659244321 [31-07-2022 02:12:01]1225: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 02:12:03]1225: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 02:12:03]1225: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-0212/20220731-021201-YuYPIeIKwrBswmSMkQRYegAAABI [31-07-2022 02:12:03]1225: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 02:12:04]1225: WAF :: fetched 65 new logs [31-07-2022 02:13:01]6837: WAF :: fetched 1 new logs [31-07-2022 02:14:02]12956: WAF :: fetched 1 new logs [31-07-2022 02:15:01]18698: WAF :: fetched 3 new logs [31-07-2022 02:17:01]30374: WAF :: fetched 2 new logs [31-07-2022 02:18:02]3843: WAF :: fetched 3 new logs [31-07-2022 02:19:01]9994: WAF :: fetched 14 new logs [31-07-2022 02:20:01]15643: WAF :: fetched 1 new logs [31-07-2022 02:21:01]21365: WAF :: fetched 2 new logs [31-07-2022 02:22:01]26763: WAF :: fetched 2 new logs [31-07-2022 02:27:01]23887: WAF :: fetched 1 new logs [31-07-2022 02:34:01]32167: WAF :: fetched 4 new logs [31-07-2022 02:35:02]5204: WAF :: fetched 1 new logs [31-07-2022 02:36:01]11343: WAF :: fetched 1 new logs [31-07-2022 02:37:02]16718: WAF :: fetched 2 new logs [31-07-2022 02:38:01]22826: WAF :: fetched 2 new logs [31-07-2022 02:39:02]28521: WAF :: fetched 1 new logs [31-07-2022 02:40:01]2474: WAF :: fetched 3 new logs [31-07-2022 02:41:02]8281: WAF :: fetched 1 new logs [31-07-2022 02:41:02]8281: Checking for user cron vulnerabilities [31-07-2022 02:43:02]19604: WAF :: fetched 2 new logs [31-07-2022 02:44:01]25279: Checking ditributed CMS bruteforce attacks [31-07-2022 02:44:01]25279: WAF :: fetched 1 new logs [31-07-2022 02:46:01]4405: WAF :: fetched 1 new logs [31-07-2022 02:48:01]15750: WAF :: fetched 1 new logs [31-07-2022 02:49:02]21379: WAF :: fetched 2 new logs [31-07-2022 02:53:02]12131: Updated license status via CDN [31-07-2022 02:55:02]23884: WAF :: fetched 1 new logs [31-07-2022 02:57:02]3162: WAF :: fetched 1 new logs [31-07-2022 03:01:02]25848: WAF :: fetched 1 new logs [31-07-2022 03:01:28]19950: Found and updated 31 CMS installations [31-07-2022 03:02:09]19950: Wordpress installation #9 oabilheus.org.br has errors [31-07-2022 03:02:51]19950: Wordpress installation #16 kecolima.com.br has errors [31-07-2022 03:03:05]19950: Wordpress installation #17 ajuda.meusiteimobiliario.com.br has errors [31-07-2022 03:03:48]19950: Wordpress installation #23 blueseasurf.com.br has errors [31-07-2022 03:04:01]11906: WAF :: fetched 2 new logs [31-07-2022 03:04:11]19950: Wordpress installation #27 site.foxcard.com.br has errors [31-07-2022 03:04:11]5401: Wordpress installation #27 site.foxcard.com.br has errors [31-07-2022 03:04:31]19950: Wordpress installation #29 adsgestaomkt.com.br has errors [31-07-2022 03:04:31]5401: Wordpress installation #29 adsgestaomkt.com.br has errors [31-07-2022 03:05:02]17577: WAF :: fetched 9 new logs [31-07-2022 03:05:07]19950: Wordpress installation #34 fazendayrere.com.br has errors [31-07-2022 03:05:07]5401: Wordpress installation #34 fazendayrere.com.br has errors [31-07-2022 03:05:24]5401: Wordpress installation #35 luanbrasil.com.br has errors [31-07-2022 03:05:24]19950: Wordpress installation #35 luanbrasil.com.br has errors [31-07-2022 03:06:00]5401: Sending CMS version vulnerability report emails to cpanel users [31-07-2022 03:06:00]19950: Sending CMS version vulnerability report emails to cpanel users [31-07-2022 03:06:03]5401: Checking wordpress installations for suspicious directories [31-07-2022 03:06:03]19950: Checking wordpress installations for suspicious directories [31-07-2022 03:07:02]30051: WAF :: fetched 1 new logs [31-07-2022 03:08:01]3488: WAF :: fetched 1 new logs [31-07-2022 03:12:01]26120: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659247921 [31-07-2022 03:12:01]26120: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 03:12:03]26120: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 03:12:04]26120: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-0312/20220731-031201-YuYdMUGLv21x5Z61G5P8OQAAABQ [31-07-2022 03:12:04]26120: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 03:12:04]26120: WAF :: fetched 3 new logs [31-07-2022 03:13:02]31686: WAF :: fetched 4 new logs [31-07-2022 03:21:02]14039: WAF :: fetched 2 new logs [31-07-2022 03:23:02]25821: WAF :: fetched 1 new logs [31-07-2022 03:24:01]31427: WAF :: fetched 3 new logs [31-07-2022 03:26:01]10531: WAF :: fetched 1 new logs [31-07-2022 03:27:02]16203: WAF :: fetched 3 new logs [31-07-2022 03:28:01]21985: WAF :: fetched 3 new logs [31-07-2022 03:29:02]27693: WAF :: fetched 1 new logs [31-07-2022 03:30:01]848: WAF :: fetched 2 new logs [31-07-2022 03:31:02]6827: WAF :: fetched 16 new logs [31-07-2022 03:33:01]17975: WAF :: fetched 1 new logs [31-07-2022 03:34:01]23621: WAF :: fetched 1 new logs [31-07-2022 03:36:01]2931: WAF :: fetched 1 new logs [31-07-2022 03:39:01]19779: WAF :: fetched 1 new logs [31-07-2022 03:41:01]31578: Checking for user cron vulnerabilities [31-07-2022 03:44:01]15949: Checking ditributed CMS bruteforce attacks [31-07-2022 03:44:01]15949: WAF :: fetched 1 new logs [31-07-2022 03:45:02]21023: WAF :: fetched 1 new logs [31-07-2022 03:47:02]27426: WAF :: fetched 2 new logs [31-07-2022 03:48:01]10022: WAF :: fetched 1 new logs [31-07-2022 03:49:02]15814: WAF :: fetched 1 new logs [31-07-2022 03:51:02]27294: WAF :: fetched 3 new logs [31-07-2022 03:52:01]416: WAF :: fetched 12 new logs [31-07-2022 03:53:01]6314: WAF :: fetched 75 new logs [31-07-2022 03:55:01]17739: WAF :: fetched 1 new logs [31-07-2022 04:00:02]15160: WAF :: fetched 2 new logs [31-07-2022 04:01:01]21355: WAF :: fetched 1 new logs [31-07-2022 04:02:02]27071: WAF :: fetched 1 new logs [31-07-2022 04:03:01]32523: WAF :: fetched 1 new logs [31-07-2022 04:05:01]11643: WAF :: fetched 1 new logs [31-07-2022 04:06:02]17478: WAF :: fetched 2 new logs [31-07-2022 04:07:01]23129: WAF :: fetched 3 new logs [31-07-2022 04:08:02]28838: WAF :: fetched 3 new logs [31-07-2022 04:10:01]7886: WAF :: fetched 3 new logs [31-07-2022 04:12:01]19663: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659251521 [31-07-2022 04:12:01]19663: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 04:12:03]19663: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 04:12:05]19663: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-0412/20220731-041201-YuYrQYr2gQk561okGv-22wAAAAc [31-07-2022 04:12:05]19663: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 04:12:05]19663: WAF :: fetched 1 new logs [31-07-2022 04:14:01]31822: WAF :: fetched 1 new logs [31-07-2022 04:17:02]17705: WAF :: fetched 1 new logs [31-07-2022 04:18:01]23187: WAF :: fetched 6 new logs [31-07-2022 04:21:02]9178: WAF :: fetched 1 new logs [31-07-2022 04:25:02]992: WAF :: fetched 3 new logs [31-07-2022 04:26:01]7245: WAF :: fetched 1 new logs [31-07-2022 04:28:01]18600: WAF :: fetched 1 new logs [31-07-2022 04:30:01]30462: WAF :: fetched 13 new logs [31-07-2022 04:33:01]15988: WAF :: fetched 1 new logs [31-07-2022 04:34:02]21663: WAF :: fetched 1 new logs [31-07-2022 04:35:01]27748: WAF :: fetched 3 new logs [31-07-2022 04:36:01]815: WAF :: fetched 3 new logs [31-07-2022 04:38:01]12705: WAF :: fetched 1 new logs [31-07-2022 04:39:02]18467: WAF :: fetched 2 new logs [31-07-2022 04:41:01]29915: Checking for user cron vulnerabilities [31-07-2022 04:42:01]3277: WAF :: fetched 1 new logs [31-07-2022 04:43:01]8800: WAF :: fetched 14 new logs [31-07-2022 04:44:01]15320: Checking ditributed CMS bruteforce attacks [31-07-2022 04:44:01]15320: WAF :: fetched 3 new logs [31-07-2022 04:45:02]20976: WAF :: fetched 1 new logs [31-07-2022 04:46:01]27386: WAF :: fetched 2 new logs [31-07-2022 04:49:01]12868: WAF :: fetched 2 new logs [31-07-2022 04:52:02]30699: WAF :: fetched 1 new logs [31-07-2022 04:53:01]4584: WAF :: fetched 1 new logs [31-07-2022 04:54:01]10339: WAF :: fetched 17 new logs [31-07-2022 04:56:01]22257: WAF :: fetched 4 new logs [31-07-2022 04:57:01]27909: WAF :: fetched 2 new logs [31-07-2022 04:58:01]1209: WAF :: fetched 4 new logs [31-07-2022 04:59:02]7108: WAF :: fetched 2 new logs [31-07-2022 05:01:02]19032: WAF :: fetched 1 new logs [31-07-2022 05:01:42]19040: Starting weekly scan on files updated within a week [31-07-2022 05:02:01]24799: WAF :: fetched 2 new logs [31-07-2022 05:04:01]3763: WAF :: fetched 2 new logs [31-07-2022 05:08:01]26417: WAF :: fetched 1 new logs [31-07-2022 05:11:02]11147: WAF :: fetched 1 new logs [31-07-2022 05:12:01]17211: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659255121 [31-07-2022 05:12:01]17211: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 05:12:03]17211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 05:12:04]17211: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-0512/20220731-051201-YuY5US8DKbkju6LCBEQ1YgAAABI [31-07-2022 05:12:04]17211: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 05:12:04]17211: WAF :: fetched 1 new logs [31-07-2022 05:13:02]22632: WAF :: fetched 1 new logs [31-07-2022 05:14:01]28688: WAF :: fetched 1 new logs [31-07-2022 05:15:01]1714: WAF :: fetched 1 new logs [31-07-2022 05:16:02]7916: WAF :: fetched 1 new logs [31-07-2022 05:21:01]4181: WAF :: fetched 1 new logs [31-07-2022 05:22:02]9904: WAF :: fetched 1 new logs [31-07-2022 05:23:01]15546: WAF :: fetched 1 new logs [31-07-2022 05:24:02]21319: WAF :: fetched 2 new logs [31-07-2022 05:25:01]26985: WAF :: fetched 1 new logs [31-07-2022 05:26:01]32434: WAF :: fetched 1 new logs [31-07-2022 05:31:02]28967: WAF :: fetched 1 new logs [31-07-2022 05:34:02]13737: WAF :: fetched 1 new logs [31-07-2022 05:41:01]21209: Checking for user cron vulnerabilities [31-07-2022 05:43:01]32564: WAF :: fetched 2 new logs [31-07-2022 05:44:01]6066: Checking ditributed CMS bruteforce attacks [31-07-2022 05:47:01]23060: WAF :: fetched 5 new logs [31-07-2022 05:48:02]28772: WAF :: fetched 1 new logs [31-07-2022 05:49:01]2185: WAF :: fetched 5 new logs [31-07-2022 05:50:02]7979: WAF :: fetched 1 new logs [31-07-2022 05:51:01]13725: WAF :: fetched 1 new logs [31-07-2022 05:52:02]19086: WAF :: fetched 2 new logs [31-07-2022 05:53:01]25056: WAF :: fetched 2 new logs [31-07-2022 05:55:02]4217: WAF :: fetched 1 new logs [31-07-2022 05:56:01]9907: WAF :: fetched 17 new logs [31-07-2022 05:57:02]15542: WAF :: fetched 1 new logs [31-07-2022 05:58:01]21121: WAF :: fetched 3 new logs [31-07-2022 05:59:02]26835: WAF :: fetched 1 new logs [31-07-2022 06:00:01]32109: WAF :: fetched 2 new logs [31-07-2022 06:03:01]17389: WAF :: fetched 2 new logs [31-07-2022 06:06:01]2095: WAF :: fetched 1 new logs [31-07-2022 06:08:01]13409: WAF :: fetched 1 new logs [31-07-2022 06:09:01]18847: WAF :: fetched 3 new logs [31-07-2022 06:11:02]30178: WAF :: fetched 1 new logs [31-07-2022 06:12:01]3919: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659258721 [31-07-2022 06:12:01]3919: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 06:12:03]3919: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 06:12:04]3919: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-0612/20220731-061201-YuZHYfx6xaUoAaOGJvU7XwAAAB0 [31-07-2022 06:12:04]3919: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [31-07-2022 06:12:04]3919: WAF :: fetched 1 new logs [31-07-2022 06:13:02]9241: WAF :: fetched 3 new logs [31-07-2022 06:14:01]15356: WAF :: fetched 2 new logs [31-07-2022 06:16:01]26840: WAF :: fetched 2 new logs [31-07-2022 06:18:01]5818: WAF :: fetched 1 new logs [31-07-2022 06:20:01]17180: WAF :: fetched 3 new logs [31-07-2022 06:23:02]1784: WAF :: fetched 2 new logs [31-07-2022 06:24:01]7545: WAF :: fetched 4 new logs [31-07-2022 06:25:02]13186: WAF :: fetched 1 new logs [31-07-2022 06:26:01]18789: WAF :: fetched 2 new logs [31-07-2022 06:27:02]24586: WAF :: fetched 1 new logs [31-07-2022 06:28:01]30186: WAF :: fetched 2 new logs [31-07-2022 06:29:02]3481: WAF :: fetched 32 new logs [31-07-2022 06:30:02]9603: WAF :: fetched 1 new logs [31-07-2022 06:31:02]15294: WAF :: fetched 18 new logs [31-07-2022 06:32:01]20951: WAF :: fetched 2 new logs [31-07-2022 06:33:02]26272: WAF :: fetched 2 new logs [31-07-2022 06:34:01]32382: WAF :: fetched 1 new logs [31-07-2022 06:38:02]22934: WAF :: fetched 1 new logs [31-07-2022 06:39:02]28598: WAF :: fetched 9 new logs [31-07-2022 06:41:01]7645: WAF :: fetched 1 new logs [31-07-2022 06:41:01]7645: Checking for user cron vulnerabilities [31-07-2022 06:44:01]24209: Checking ditributed CMS bruteforce attacks [31-07-2022 06:44:02]24209: WAF :: fetched 1 new logs [31-07-2022 06:45:02]30152: WAF :: fetched 2 new logs [31-07-2022 06:46:01]3531: WAF :: fetched 1 new logs [31-07-2022 06:47:02]9193: WAF :: fetched 8 new logs [31-07-2022 06:47:02]9179: Imported 2 logs from cpguard.log into database [31-07-2022 06:47:42]9179: Sending email for 2 detections [31-07-2022 06:51:01]31813: WAF :: fetched 2 new logs [31-07-2022 06:52:02]5194: WAF :: fetched 1 new logs [31-07-2022 06:53:01]10803: WAF :: fetched 1 new logs [31-07-2022 06:54:02]16549: WAF :: fetched 2 new logs [31-07-2022 06:57:02]1082: WAF :: fetched 4 new logs [31-07-2022 06:58:02]6908: Imported 1 logs from cpguard.log into database [31-07-2022 06:58:42]6908: Sending email for 1 detections [31-07-2022 06:59:02]12783: WAF :: fetched 3 new logs [31-07-2022 07:00:02]18189: WAF :: fetched 3 new logs [31-07-2022 07:02:02]29954: WAF :: fetched 1 new logs [31-07-2022 07:04:02]9309: WAF :: fetched 19 new logs [31-07-2022 07:06:02]21035: WAF :: fetched 3 new logs [31-07-2022 07:07:01]27110: WAF :: fetched 5 new logs [31-07-2022 07:08:02]428: WAF :: fetched 2 new logs [31-07-2022 07:10:02]12265: WAF :: fetched 5 new logs [31-07-2022 07:12:02]24017: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659262322 [31-07-2022 07:12:02]24017: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 07:12:04]24017: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 07:12:04]24017: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-0712/20220731-071202-YuZVcsbHA0bMil4Oh45rlAAAAAg [31-07-2022 07:12:04]24017: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 07:12:04]24017: WAF :: fetched 128 new logs [31-07-2022 07:13:01]29770: WAF :: fetched 17 new logs [31-07-2022 07:17:01]20644: WAF :: fetched 1 new logs [31-07-2022 07:18:02]26424: WAF :: fetched 1 new logs [31-07-2022 07:19:01]32165: WAF :: fetched 1 new logs [31-07-2022 07:20:02]5841: WAF :: fetched 1 new logs [31-07-2022 07:21:01]11735: WAF :: fetched 2 new logs [31-07-2022 07:23:01]23472: WAF :: fetched 2 new logs [31-07-2022 07:24:02]29029: WAF :: fetched 1 new logs [31-07-2022 07:25:01]3040: WAF :: fetched 1 new logs [31-07-2022 07:26:02]8690: WAF :: fetched 1 new logs [31-07-2022 07:28:02]20759: WAF :: fetched 1 new logs [31-07-2022 07:29:01]26508: WAF :: fetched 3 new logs [31-07-2022 07:30:02]32296: WAF :: fetched 2 new logs [31-07-2022 07:31:01]5970: WAF :: fetched 1 new logs [31-07-2022 07:32:02]11849: WAF :: fetched 1 new logs [31-07-2022 07:34:01]23400: WAF :: fetched 2 new logs [31-07-2022 07:35:01]28836: WAF :: fetched 2 new logs [31-07-2022 07:36:01]2744: WAF :: fetched 39 new logs [31-07-2022 07:37:01]8210: WAF :: fetched 29 new logs [31-07-2022 07:38:01]14327: WAF :: fetched 16 new logs [31-07-2022 07:39:01]19993: WAF :: fetched 13 new logs [31-07-2022 07:40:02]25887: WAF :: fetched 36 new logs [31-07-2022 07:41:01]32127: WAF :: fetched 1 new logs [31-07-2022 07:41:01]32127: Checking for user cron vulnerabilities [31-07-2022 07:43:01]11482: WAF :: fetched 1 new logs [31-07-2022 07:44:01]17327: Checking ditributed CMS bruteforce attacks [31-07-2022 07:44:02]17327: WAF :: fetched 3 new logs [31-07-2022 07:45:02]: Checking for definition updates [31-07-2022 07:45:02]23169: WAF :: fetched 2 new logs [31-07-2022 07:46:01]28905: WAF :: fetched 1 new logs [31-07-2022 07:47:01]2239: WAF :: fetched 2 new logs [31-07-2022 07:48:01]7708: WAF :: fetched 1 new logs [31-07-2022 07:49:02]13981: WAF :: fetched 2 new logs [31-07-2022 07:50:01]19684: WAF :: fetched 1 new logs [31-07-2022 07:53:02]4523: WAF :: fetched 1 new logs [31-07-2022 07:54:01]10207: WAF :: fetched 2 new logs [31-07-2022 07:55:02]15979: WAF :: fetched 1 new logs [31-07-2022 07:58:01]556: WAF :: fetched 4 new logs [31-07-2022 07:59:02]6230: WAF :: fetched 1 new logs [31-07-2022 08:00:01]12100: WAF :: fetched 3 new logs [31-07-2022 08:01:02]17995: WAF :: fetched 2 new logs [31-07-2022 08:05:02]8659: WAF :: fetched 1 new logs [31-07-2022 08:06:01]14793: WAF :: fetched 2 new logs [31-07-2022 08:10:01]5872: WAF :: fetched 1 new logs [31-07-2022 08:12:01]17483: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659265921 [31-07-2022 08:12:01]17483: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 08:12:03]17483: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 08:12:04]17483: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-0812/20220731-081201-YuZjgYqdR-7eyRgErju2DQAAABQ [31-07-2022 08:12:04]17483: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 08:12:04]17483: WAF :: fetched 6 new logs [31-07-2022 08:14:02]29089: WAF :: fetched 1 new logs [31-07-2022 08:15:01]2570: WAF :: fetched 2 new logs [31-07-2022 08:16:02]8430: WAF :: fetched 2 new logs [31-07-2022 08:19:01]25639: WAF :: fetched 7 new logs [31-07-2022 08:20:02]31252: WAF :: fetched 10 new logs [31-07-2022 08:22:02]10660: WAF :: fetched 1 new logs [31-07-2022 08:23:01]16788: WAF :: fetched 1 new logs [31-07-2022 08:26:02]1829: WAF :: fetched 1 new logs [31-07-2022 08:27:02]7672: WAF :: fetched 1 new logs [31-07-2022 08:34:01]15871: WAF :: fetched 1 new logs [31-07-2022 08:39:02]12135: WAF :: fetched 2 new logs [31-07-2022 08:41:02]24185: WAF :: fetched 5 new logs [31-07-2022 08:41:02]24185: Checking for user cron vulnerabilities [31-07-2022 08:42:02]29863: WAF :: fetched 1 new logs [31-07-2022 08:43:01]3278: WAF :: fetched 1 new logs [31-07-2022 08:44:02]9063: Checking ditributed CMS bruteforce attacks [31-07-2022 08:46:01]20846: WAF :: fetched 2 new logs [31-07-2022 08:48:01]31999: WAF :: fetched 1 new logs [31-07-2022 08:49:01]5796: WAF :: fetched 1 new logs [31-07-2022 08:50:02]11379: WAF :: fetched 3 new logs [31-07-2022 08:51:01]17567: WAF :: fetched 1 new logs [31-07-2022 08:52:02]23326: WAF :: fetched 1 new logs [31-07-2022 08:55:01]8307: WAF :: fetched 1 new logs [31-07-2022 08:57:01]19750: WAF :: fetched 1 new logs [31-07-2022 09:00:02]4820: WAF :: fetched 1 new logs [31-07-2022 09:02:01]16858: WAF :: fetched 2 new logs [31-07-2022 09:04:01]28337: WAF :: fetched 2 new logs [31-07-2022 09:05:02]1521: WAF :: fetched 4 new logs [31-07-2022 09:06:01]7775: WAF :: fetched 6 new logs [31-07-2022 09:07:01]13224: WAF :: fetched 4 new logs [31-07-2022 09:08:01]19245: WAF :: fetched 1 new logs [31-07-2022 09:10:01]30925: WAF :: fetched 2 new logs [31-07-2022 09:11:01]4125: WAF :: fetched 2 new logs [31-07-2022 09:12:01]10235: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659269521 [31-07-2022 09:12:01]10235: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 09:12:03]10235: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 09:12:04]10235: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-0912/20220731-091201-YuZxkeprKOeOJ9oi1uRVZwAAAAc [31-07-2022 09:12:04]10235: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [31-07-2022 09:12:04]10235: WAF :: fetched 8 new logs [31-07-2022 09:13:02]15667: WAF :: fetched 3 new logs [31-07-2022 09:14:02]21922: WAF :: fetched 1 new logs [31-07-2022 09:15:02]27669: WAF :: fetched 2 new logs [31-07-2022 09:16:02]1128: WAF :: fetched 1 new logs [31-07-2022 09:17:01]6971: WAF :: fetched 2 new logs [31-07-2022 09:18:01]12343: WAF :: fetched 2 new logs [31-07-2022 09:19:02]18537: WAF :: fetched 1 new logs [31-07-2022 09:20:02]24419: WAF :: fetched 2 new logs [31-07-2022 09:21:02]30306: WAF :: fetched 6 new logs [31-07-2022 09:24:01]15327: WAF :: fetched 1 new logs [31-07-2022 09:25:02]20993: WAF :: fetched 2 new logs [31-07-2022 09:26:01]27179: WAF :: fetched 1 new logs [31-07-2022 09:27:02]32554: WAF :: fetched 5 new logs [31-07-2022 09:28:01]6363: WAF :: fetched 2 new logs [31-07-2022 09:29:02]11848: WAF :: fetched 1 new logs [31-07-2022 09:30:01]18086: WAF :: fetched 9 new logs [31-07-2022 09:31:02]23636: WAF :: fetched 1 new logs [31-07-2022 09:32:01]29738: WAF :: fetched 1 new logs [31-07-2022 09:33:02]2889: WAF :: fetched 7 new logs [31-07-2022 09:35:02]14622: WAF :: fetched 2 new logs [31-07-2022 09:36:01]20808: WAF :: fetched 4 new logs [31-07-2022 09:37:02]26600: WAF :: fetched 1 new logs [31-07-2022 09:38:02]32360: WAF :: fetched 1 new logs [31-07-2022 09:39:01]5855: WAF :: fetched 1 new logs [31-07-2022 09:41:02]17508: WAF :: fetched 1 new logs [31-07-2022 09:41:02]17508: Checking for user cron vulnerabilities [31-07-2022 09:42:02]23181: WAF :: fetched 18 new logs [31-07-2022 09:43:01]28839: WAF :: fetched 1 new logs [31-07-2022 09:44:01]1925: Checking ditributed CMS bruteforce attacks [31-07-2022 09:44:02]1925: WAF :: fetched 1 new logs [31-07-2022 09:45:01]8213: WAF :: fetched 14 new logs [31-07-2022 09:46:02]13666: WAF :: fetched 1 new logs [31-07-2022 09:47:01]19740: WAF :: fetched 3 new logs [31-07-2022 09:50:02]4977: WAF :: fetched 3 new logs [31-07-2022 09:51:01]10688: WAF :: fetched 1 new logs [31-07-2022 09:52:02]16332: WAF :: fetched 1 new logs [31-07-2022 09:54:02]27486: WAF :: fetched 1 new logs [31-07-2022 09:55:01]1319: WAF :: fetched 2 new logs [31-07-2022 09:59:02]24741: WAF :: fetched 1 new logs [31-07-2022 10:00:02]30310: WAF :: fetched 1 new logs [31-07-2022 10:01:02]4320: WAF :: fetched 2 new logs [31-07-2022 10:02:01]10176: WAF :: fetched 1 new logs [31-07-2022 10:04:01]21684: WAF :: fetched 5 new logs [31-07-2022 10:05:02]27162: WAF :: fetched 1 new logs [31-07-2022 10:06:01]864: WAF :: fetched 2 new logs [31-07-2022 10:07:02]6513: WAF :: fetched 4 new logs [31-07-2022 10:08:01]12592: WAF :: fetched 78 new logs [31-07-2022 10:09:02]18075: WAF :: fetched 107 new logs [31-07-2022 10:10:01]24218: WAF :: fetched 107 new logs [31-07-2022 10:11:02]29756: WAF :: fetched 113 new logs [31-07-2022 10:12:01]3513: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659273121 [31-07-2022 10:12:01]3513: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 10:12:03]3513: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 10:12:03]3513: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-1012/20220731-101201-YuZ_oVi0pFDHmef5eczi6gAAAA0 [31-07-2022 10:12:03]3513: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 10:12:04]3513: WAF :: fetched 314 new logs [31-07-2022 10:16:01]26614: WAF :: fetched 2 new logs [31-07-2022 10:17:02]32068: WAF :: fetched 3 new logs [31-07-2022 10:21:02]23328: WAF :: fetched 1 new logs [31-07-2022 10:22:01]29503: WAF :: fetched 1 new logs [31-07-2022 10:24:01]8797: WAF :: fetched 2 new logs [31-07-2022 10:25:02]14734: WAF :: fetched 2 new logs [31-07-2022 10:26:01]20471: WAF :: fetched 2 new logs [31-07-2022 10:27:02]26180: WAF :: fetched 1 new logs [31-07-2022 10:29:02]5474: WAF :: fetched 1 new logs [31-07-2022 10:32:01]22758: WAF :: fetched 2 new logs [31-07-2022 10:33:01]28198: WAF :: fetched 2 new logs [31-07-2022 10:34:02]1917: WAF :: fetched 2 new logs [31-07-2022 10:35:01]7852: WAF :: fetched 1 new logs [31-07-2022 10:39:01]30647: WAF :: fetched 1 new logs [31-07-2022 10:40:01]4529: WAF :: fetched 1 new logs [31-07-2022 10:41:02]10114: Checking for user cron vulnerabilities [31-07-2022 10:43:01]21888: WAF :: fetched 2 new logs [31-07-2022 10:44:01]27548: Checking ditributed CMS bruteforce attacks [31-07-2022 10:45:02]657: WAF :: fetched 1 new logs [31-07-2022 10:46:01]7003: WAF :: fetched 4 new logs [31-07-2022 10:47:02]12775: WAF :: fetched 1 new logs [31-07-2022 10:51:02]3385: WAF :: fetched 2 new logs [31-07-2022 10:53:02]15006: WAF :: fetched 3 new logs [31-07-2022 10:54:01]21069: WAF :: fetched 1 new logs [31-07-2022 10:55:02]26603: WAF :: fetched 1 new logs [31-07-2022 10:56:01]32704: WAF :: fetched 1 new logs [31-07-2022 10:57:02]6212: WAF :: fetched 5 new logs [31-07-2022 10:59:02]17339: WAF :: fetched 1 new logs [31-07-2022 11:00:01]23206: WAF :: fetched 15 new logs [31-07-2022 11:01:02]29586: WAF :: fetched 1 new logs [31-07-2022 11:03:02]8732: WAF :: fetched 1 new logs [31-07-2022 11:04:01]14448: WAF :: fetched 3 new logs [31-07-2022 11:05:02]20306: WAF :: fetched 4 new logs [31-07-2022 11:06:01]26023: WAF :: fetched 13 new logs [31-07-2022 11:07:02]31434: WAF :: fetched 1 new logs [31-07-2022 11:07:54]31612: Performed RBL check for 23.111.136.34. [31-07-2022 11:09:02]10604: WAF :: fetched 3 new logs [31-07-2022 11:10:01]16716: WAF :: fetched 3 new logs [31-07-2022 11:12:02]28274: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659276722 [31-07-2022 11:12:02]28274: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 11:12:04]28274: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 11:12:04]28274: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-1112/20220731-111202-YuaNsh0WEfxyTJfiZEpD9gAAAB0 [31-07-2022 11:12:04]28274: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 11:12:05]28274: WAF :: fetched 4 new logs [31-07-2022 11:13:01]1632: WAF :: fetched 1 new logs [31-07-2022 11:16:02]19174: WAF :: fetched 1 new logs [31-07-2022 11:18:02]30338: WAF :: fetched 1 new logs [31-07-2022 11:19:01]4202: WAF :: fetched 1 new logs [31-07-2022 11:20:02]9861: WAF :: fetched 1 new logs [31-07-2022 11:21:01]16149: WAF :: fetched 3 new logs [31-07-2022 11:23:01]27681: WAF :: fetched 1 new logs [31-07-2022 11:26:02]12868: WAF :: fetched 2 new logs [31-07-2022 11:27:01]18459: WAF :: fetched 3 new logs [31-07-2022 11:28:01]24255: WAF :: fetched 3 new logs [31-07-2022 11:29:02]29921: WAF :: fetched 2 new logs [31-07-2022 11:30:01]3413: WAF :: fetched 1 new logs [31-07-2022 11:31:02]9256: WAF :: fetched 2 new logs [31-07-2022 11:32:01]15033: WAF :: fetched 2 new logs [31-07-2022 11:34:01]26460: WAF :: fetched 4 new logs [31-07-2022 11:37:01]11386: WAF :: fetched 2 new logs [31-07-2022 11:38:02]16808: WAF :: fetched 2 new logs [31-07-2022 11:40:02]28244: WAF :: fetched 1 new logs [31-07-2022 11:41:01]2037: WAF :: fetched 24 new logs [31-07-2022 11:41:01]2037: Checking for user cron vulnerabilities [31-07-2022 11:42:02]7786: WAF :: fetched 252 new logs [31-07-2022 11:43:01]13364: WAF :: fetched 264 new logs [31-07-2022 11:44:01]19038: Checking ditributed CMS bruteforce attacks [31-07-2022 11:44:02]19038: WAF :: fetched 349 new logs [31-07-2022 11:45:01]24849: WAF :: fetched 268 new logs [31-07-2022 11:46:02]30696: WAF :: fetched 268 new logs [31-07-2022 11:47:01]4116: WAF :: fetched 113 new logs [31-07-2022 11:48:02]9781: WAF :: fetched 1 new logs [31-07-2022 11:49:01]15333: WAF :: fetched 2 new logs [31-07-2022 11:51:01]26803: WAF :: fetched 1 new logs [31-07-2022 11:52:02]32488: WAF :: fetched 1 new logs [31-07-2022 11:53:01]5897: WAF :: fetched 5 new logs [31-07-2022 11:54:02]11710: WAF :: fetched 1 new logs [31-07-2022 11:55:01]17463: WAF :: fetched 5 new logs [31-07-2022 11:56:02]23300: WAF :: fetched 1 new logs [31-07-2022 11:57:01]28988: WAF :: fetched 3 new logs [31-07-2022 11:58:02]2509: WAF :: fetched 2 new logs [31-07-2022 12:00:02]13861: WAF :: fetched 2 new logs [31-07-2022 12:01:01]20030: WAF :: fetched 3 new logs [31-07-2022 12:03:01]31704: WAF :: fetched 2 new logs [31-07-2022 12:05:01]11339: WAF :: fetched 4 new logs [31-07-2022 12:06:02]17156: WAF :: fetched 5 new logs [31-07-2022 12:07:01]22834: WAF :: fetched 6 new logs [31-07-2022 12:08:02]28586: WAF :: fetched 11 new logs [31-07-2022 12:09:01]1957: WAF :: fetched 4 new logs [31-07-2022 12:10:02]7963: WAF :: fetched 1 new logs [31-07-2022 12:11:01]13605: WAF :: fetched 3 new logs [31-07-2022 12:12:02]19294: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659280322 [31-07-2022 12:12:02]19294: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 12:12:04]19294: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 12:12:04]19294: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-1212/20220731-121202-YuabwtvGXcZhjxfoXMiO3wAAAC4 [31-07-2022 12:12:04]19294: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 12:12:05]19294: WAF :: fetched 3 new logs [31-07-2022 12:13:01]25048: WAF :: fetched 95 new logs [31-07-2022 12:14:02]30750: WAF :: fetched 91 new logs [31-07-2022 12:15:01]4261: WAF :: fetched 84 new logs [31-07-2022 12:16:02]10080: WAF :: fetched 92 new logs [31-07-2022 12:17:01]15829: WAF :: fetched 75 new logs [31-07-2022 12:18:02]21586: WAF :: fetched 109 new logs [31-07-2022 12:19:01]27183: WAF :: fetched 99 new logs [31-07-2022 12:20:02]32706: WAF :: fetched 96 new logs [31-07-2022 12:21:01]6701: WAF :: fetched 4 new logs [31-07-2022 12:22:02]12156: WAF :: fetched 2 new logs [31-07-2022 12:24:02]23663: WAF :: fetched 4 new logs [31-07-2022 12:27:01]9074: WAF :: fetched 3 new logs [31-07-2022 12:28:02]14530: WAF :: fetched 3 new logs [31-07-2022 12:29:02]20719: WAF :: fetched 2 new logs [31-07-2022 12:30:01]26403: WAF :: fetched 2 new logs [31-07-2022 12:31:01]32219: WAF :: fetched 3 new logs [31-07-2022 12:32:01]5508: WAF :: fetched 4 new logs [31-07-2022 12:33:01]11635: WAF :: fetched 14 new logs [31-07-2022 12:34:01]17150: WAF :: fetched 5 new logs [31-07-2022 12:35:01]23412: WAF :: fetched 2 new logs [31-07-2022 12:36:01]29014: WAF :: fetched 1 new logs [31-07-2022 12:37:02]2542: WAF :: fetched 2 new logs [31-07-2022 12:38:01]8675: WAF :: fetched 1 new logs [31-07-2022 12:39:02]14167: WAF :: fetched 4 new logs [31-07-2022 12:41:02]26236: WAF :: fetched 2 new logs [31-07-2022 12:41:02]26236: Checking for user cron vulnerabilities [31-07-2022 12:43:02]5392: WAF :: fetched 1 new logs [31-07-2022 12:44:01]11074: Checking ditributed CMS bruteforce attacks [31-07-2022 12:44:01]11074: WAF :: fetched 1 new logs [31-07-2022 12:45:02]: Checking for software updates [31-07-2022 12:46:01]22709: WAF :: fetched 1 new logs [31-07-2022 12:51:02]19961: WAF :: fetched 1 new logs [31-07-2022 12:52:01]25713: WAF :: fetched 2 new logs [31-07-2022 12:54:02]5225: WAF :: fetched 1 new logs [31-07-2022 12:55:01]10979: WAF :: fetched 1 new logs [31-07-2022 12:56:02]16958: WAF :: fetched 3 new logs [31-07-2022 12:57:01]22680: WAF :: fetched 2 new logs [31-07-2022 12:58:02]28495: WAF :: fetched 3 new logs [31-07-2022 12:59:01]1900: WAF :: fetched 2 new logs [31-07-2022 13:00:02]7458: WAF :: fetched 2 new logs [31-07-2022 13:01:01]13917: WAF :: fetched 1 new logs [31-07-2022 13:02:02]19565: WAF :: fetched 2 new logs [31-07-2022 13:03:01]25768: WAF :: fetched 2 new logs [31-07-2022 13:04:02]31274: WAF :: fetched 2 new logs [31-07-2022 13:05:01]5045: WAF :: fetched 3 new logs [31-07-2022 13:06:02]11052: WAF :: fetched 2 new logs [31-07-2022 13:07:02]16780: WAF :: fetched 1 new logs [31-07-2022 13:10:01]1417: WAF :: fetched 1 new logs [31-07-2022 13:11:02]7591: WAF :: fetched 3 new logs [31-07-2022 13:12:01]13253: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659283921 [31-07-2022 13:12:01]13253: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 13:12:03]13253: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 13:12:04]13253: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-1312/20220731-131201-Yuap0dlV5P2T_gnPGBQxeQAAABM [31-07-2022 13:12:04]13253: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 13:14:01]24671: WAF :: fetched 1 new logs [31-07-2022 13:19:02]21428: WAF :: fetched 1 new logs [31-07-2022 13:20:02]27224: WAF :: fetched 2 new logs [31-07-2022 13:23:01]12416: WAF :: fetched 15 new logs [31-07-2022 13:24:02]18299: WAF :: fetched 17 new logs [31-07-2022 13:25:01]24096: WAF :: fetched 11 new logs [31-07-2022 13:26:02]30070: WAF :: fetched 20 new logs [31-07-2022 13:27:01]3537: WAF :: fetched 16 new logs [31-07-2022 13:28:02]9422: WAF :: fetched 17 new logs [31-07-2022 13:29:01]15162: WAF :: fetched 21 new logs [31-07-2022 13:30:02]20954: WAF :: fetched 9 new logs [31-07-2022 13:31:01]26835: WAF :: fetched 1 new logs [31-07-2022 13:35:01]17817: WAF :: fetched 1 new logs [31-07-2022 13:37:01]29481: WAF :: fetched 1 new logs [31-07-2022 13:40:01]14477: WAF :: fetched 7 new logs [31-07-2022 13:41:01]20065: WAF :: fetched 1 new logs [31-07-2022 13:41:01]20065: Checking for user cron vulnerabilities [31-07-2022 13:42:01]26162: WAF :: fetched 1 new logs [31-07-2022 13:44:01]5444: Checking ditributed CMS bruteforce attacks [31-07-2022 13:44:02]5444: WAF :: fetched 3 new logs [31-07-2022 13:45:01]: Checking for definition updates [31-07-2022 13:45:01]11173: WAF :: fetched 1 new logs [31-07-2022 13:46:01]17090: WAF :: fetched 2 new logs [31-07-2022 13:48:01]28672: WAF :: fetched 1 new logs [31-07-2022 13:50:01]8112: WAF :: fetched 1 new logs [31-07-2022 13:51:02]13783: WAF :: fetched 4 new logs [31-07-2022 13:52:01]19930: WAF :: fetched 2 new logs [31-07-2022 13:53:02]25384: WAF :: fetched 1 new logs [31-07-2022 13:54:01]31507: WAF :: fetched 1 new logs [31-07-2022 13:55:02]4794: WAF :: fetched 4 new logs [31-07-2022 13:57:01]16574: WAF :: fetched 1 new logs [31-07-2022 13:59:02]28097: WAF :: fetched 11 new logs [31-07-2022 14:00:01]1549: WAF :: fetched 4 new logs [31-07-2022 14:04:01]25526: WAF :: fetched 2 new logs [31-07-2022 14:12:02]7710: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659287522 [31-07-2022 14:12:02]7710: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 14:12:04]7710: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 14:12:05]7710: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-1412/20220731-141202-Yua34r9EHGl9rqpafPwDKgAAABA [31-07-2022 14:12:05]7710: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 14:12:05]7710: WAF :: fetched 3 new logs [31-07-2022 14:14:01]19151: WAF :: fetched 1 new logs [31-07-2022 14:15:02]24893: WAF :: fetched 1 new logs [31-07-2022 14:16:01]30731: WAF :: fetched 1 new logs [31-07-2022 14:17:02]4248: WAF :: fetched 4 new logs [31-07-2022 14:19:01]15845: WAF :: fetched 7 new logs [31-07-2022 14:20:02]21420: WAF :: fetched 1 new logs [31-07-2022 14:21:01]27750: WAF :: fetched 1 new logs [31-07-2022 14:22:02]844: WAF :: fetched 1 new logs [31-07-2022 14:23:01]7214: WAF :: fetched 1 new logs [31-07-2022 14:24:02]13050: WAF :: fetched 3 new logs [31-07-2022 14:25:01]18801: WAF :: fetched 1 new logs [31-07-2022 14:26:02]24486: WAF :: fetched 4 new logs [31-07-2022 14:27:01]30631: WAF :: fetched 1 new logs [31-07-2022 14:28:01]3850: WAF :: fetched 2 new logs [31-07-2022 14:29:01]9777: WAF :: fetched 1 new logs [31-07-2022 14:30:02]15945: WAF :: fetched 1 new logs [31-07-2022 14:31:01]21805: WAF :: fetched 2 new logs [31-07-2022 14:33:01]1136: WAF :: fetched 4 new logs [31-07-2022 14:34:02]6753: WAF :: fetched 1 new logs [31-07-2022 14:35:01]12892: WAF :: fetched 4 new logs [31-07-2022 14:36:01]18882: WAF :: fetched 4 new logs [31-07-2022 14:38:01]30393: WAF :: fetched 2 new logs [31-07-2022 14:40:01]9692: WAF :: fetched 1 new logs [31-07-2022 14:41:02]15531: WAF :: fetched 1 new logs [31-07-2022 14:41:02]15531: Checking for user cron vulnerabilities [31-07-2022 14:42:01]21186: WAF :: fetched 1 new logs [31-07-2022 14:44:01]32610: Checking ditributed CMS bruteforce attacks [31-07-2022 14:48:01]23440: WAF :: fetched 5 new logs [31-07-2022 14:49:02]29140: WAF :: fetched 1 new logs [31-07-2022 14:50:02]2586: WAF :: fetched 1 new logs [31-07-2022 14:51:01]8459: WAF :: fetched 1 new logs [31-07-2022 14:52:02]13932: WAF :: fetched 1 new logs [31-07-2022 14:53:01]20012: WAF :: fetched 1 new logs [31-07-2022 14:53:02]19992: Updated license status via CDN [31-07-2022 14:54:01]25677: WAF :: fetched 1 new logs [31-07-2022 14:56:02]4996: WAF :: fetched 1 new logs [31-07-2022 14:57:01]10714: WAF :: fetched 3 new logs [31-07-2022 14:58:01]16372: WAF :: fetched 4 new logs [31-07-2022 15:01:01]928: Reseting cPGuard inotify settings [31-07-2022 15:01:02]915: WAF :: fetched 1 new logs [31-07-2022 15:02:01]7122: WAF :: fetched 3 new logs [31-07-2022 15:04:02]18510: WAF :: fetched 6 new logs [31-07-2022 15:05:01]24182: WAF :: fetched 2 new logs [31-07-2022 15:07:01]3531: WAF :: fetched 1 new logs [31-07-2022 15:08:01]9235: WAF :: fetched 2 new logs [31-07-2022 15:09:01]14622: WAF :: fetched 2 new logs [31-07-2022 15:10:01]20776: WAF :: fetched 2 new logs [31-07-2022 15:11:01]26341: WAF :: fetched 6 new logs [31-07-2022 15:12:01]32395: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659291121 [31-07-2022 15:12:01]32395: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 15:12:03]32395: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 15:12:04]32395: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-1512/20220731-151201-YubF8aN8--mOnd614MCrKAAAAAg [31-07-2022 15:12:04]32395: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 15:12:04]32395: WAF :: fetched 2 new logs [31-07-2022 15:13:02]5576: WAF :: fetched 1 new logs [31-07-2022 15:14:01]11631: WAF :: fetched 2 new logs [31-07-2022 15:15:01]17098: WAF :: fetched 2 new logs [31-07-2022 15:16:02]23347: WAF :: fetched 3 new logs [31-07-2022 15:17:01]28992: WAF :: fetched 1 new logs [31-07-2022 15:18:02]2426: WAF :: fetched 1 new logs [31-07-2022 15:19:01]8137: WAF :: fetched 2 new logs [31-07-2022 15:20:02]13892: WAF :: fetched 3 new logs [31-07-2022 15:21:01]19728: WAF :: fetched 1 new logs [31-07-2022 15:22:02]25467: WAF :: fetched 2 new logs [31-07-2022 15:23:01]31127: WAF :: fetched 2 new logs [31-07-2022 15:24:02]4556: WAF :: fetched 1 new logs [31-07-2022 15:25:01]10246: WAF :: fetched 20 new logs [31-07-2022 15:27:01]21727: WAF :: fetched 1 new logs [31-07-2022 15:28:02]27437: WAF :: fetched 2 new logs [31-07-2022 15:29:01]598: WAF :: fetched 3 new logs [31-07-2022 15:30:02]6500: WAF :: fetched 1 new logs [31-07-2022 15:34:01]29351: WAF :: fetched 2 new logs [31-07-2022 15:36:01]8837: WAF :: fetched 2 new logs [31-07-2022 15:37:02]14437: WAF :: fetched 2 new logs [31-07-2022 15:38:01]20772: WAF :: fetched 1 new logs [31-07-2022 15:40:01]32519: WAF :: fetched 2 new logs [31-07-2022 15:41:02]6335: WAF :: fetched 6 new logs [31-07-2022 15:41:02]6335: Checking for user cron vulnerabilities [31-07-2022 15:42:01]12079: WAF :: fetched 16 new logs [31-07-2022 15:43:02]17513: WAF :: fetched 4 new logs [31-07-2022 15:44:01]23792: Checking ditributed CMS bruteforce attacks [31-07-2022 15:45:02]29632: WAF :: fetched 6 new logs [31-07-2022 15:46:01]3403: WAF :: fetched 28 new logs [31-07-2022 15:47:02]9171: WAF :: fetched 14 new logs [31-07-2022 15:48:01]15068: WAF :: fetched 2 new logs [31-07-2022 15:49:02]20946: WAF :: fetched 1 new logs [31-07-2022 15:50:01]26816: WAF :: fetched 2 new logs [31-07-2022 15:51:02]543: WAF :: fetched 16 new logs [31-07-2022 15:53:02]12362: WAF :: fetched 1 new logs [31-07-2022 15:54:01]18114: WAF :: fetched 1 new logs [31-07-2022 15:56:01]29905: WAF :: fetched 1 new logs [31-07-2022 15:58:01]9198: WAF :: fetched 4 new logs [31-07-2022 15:59:02]15163: WAF :: fetched 3 new logs [31-07-2022 16:00:01]20598: WAF :: fetched 1 new logs [31-07-2022 16:02:01]32673: WAF :: fetched 2 new logs [31-07-2022 16:04:01]11689: WAF :: fetched 1 new logs [31-07-2022 16:06:01]23313: WAF :: fetched 3 new logs [31-07-2022 16:09:01]7993: WAF :: fetched 2 new logs [31-07-2022 16:10:02]13752: WAF :: fetched 1 new logs [31-07-2022 16:11:01]19535: WAF :: fetched 1 new logs [31-07-2022 16:12:02]25283: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659294722 [31-07-2022 16:12:02]25283: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 16:12:04]25283: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 16:12:04]25283: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-1612/20220731-161202-YubUAvoxjjLFvaqgc3cGJwAAABQ [31-07-2022 16:12:04]25283: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 16:12:05]25283: WAF :: fetched 6 new logs [31-07-2022 16:13:01]31060: WAF :: fetched 3 new logs [31-07-2022 16:15:01]10272: WAF :: fetched 2 new logs [31-07-2022 16:16:02]16170: WAF :: fetched 1 new logs [31-07-2022 16:17:01]21814: WAF :: fetched 3 new logs [31-07-2022 16:20:01]6457: WAF :: fetched 1 new logs [31-07-2022 16:23:01]23695: WAF :: fetched 2 new logs [31-07-2022 16:24:02]29151: WAF :: fetched 1 new logs [31-07-2022 16:25:02]2933: WAF :: fetched 5 new logs [31-07-2022 16:26:01]8666: WAF :: fetched 1 new logs [31-07-2022 16:27:01]14297: WAF :: fetched 1 new logs [31-07-2022 16:28:01]19675: WAF :: fetched 1 new logs [31-07-2022 16:29:01]25735: WAF :: fetched 5 new logs [31-07-2022 16:31:01]5005: WAF :: fetched 2 new logs [31-07-2022 16:33:01]16007: WAF :: fetched 5 new logs [31-07-2022 16:34:01]22027: WAF :: fetched 26 new logs [31-07-2022 16:39:01]18432: WAF :: fetched 1 new logs [31-07-2022 16:40:02]24585: WAF :: fetched 3 new logs [31-07-2022 16:41:01]30505: WAF :: fetched 1 new logs [31-07-2022 16:41:01]30505: Checking for user cron vulnerabilities [31-07-2022 16:42:02]3993: WAF :: fetched 5 new logs [31-07-2022 16:43:01]9698: WAF :: fetched 2 new logs [31-07-2022 16:44:01]15403: Checking ditributed CMS bruteforce attacks [31-07-2022 16:44:02]15403: WAF :: fetched 3 new logs [31-07-2022 16:48:02]6234: WAF :: fetched 1 new logs [31-07-2022 16:50:02]17584: WAF :: fetched 24 new logs [31-07-2022 16:51:01]23301: WAF :: fetched 3 new logs [31-07-2022 16:52:02]29172: WAF :: fetched 2 new logs [31-07-2022 16:55:01]13868: WAF :: fetched 1 new logs [31-07-2022 17:04:02]1349: WAF :: fetched 1 new logs [31-07-2022 17:06:02]13111: WAF :: fetched 14 new logs [31-07-2022 17:07:01]18810: WAF :: fetched 5 new logs [31-07-2022 17:08:02]24551: WAF :: fetched 1 new logs [31-07-2022 17:09:01]30285: WAF :: fetched 2 new logs [31-07-2022 17:10:02]3793: WAF :: fetched 3 new logs [31-07-2022 17:12:02]15342: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659298322 [31-07-2022 17:12:02]15342: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 17:12:04]15342: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 17:12:04]15342: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-1712/20220731-171202-YubiEhN_u3qVvcNbrw5MHwAAAAU [31-07-2022 17:12:04]15342: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 17:12:04]15342: WAF :: fetched 2 new logs [31-07-2022 17:13:01]21045: WAF :: fetched 4 new logs [31-07-2022 17:14:02]26843: WAF :: fetched 1 new logs [31-07-2022 17:16:01]5966: WAF :: fetched 4 new logs [31-07-2022 17:18:01]17478: WAF :: fetched 5 new logs [31-07-2022 17:19:02]23105: WAF :: fetched 1 new logs [31-07-2022 17:22:01]8073: WAF :: fetched 3 new logs [31-07-2022 17:24:01]19358: WAF :: fetched 1 new logs [31-07-2022 17:25:01]24903: WAF :: fetched 1 new logs [31-07-2022 17:26:02]31302: WAF :: fetched 2 new logs [31-07-2022 17:27:01]4809: WAF :: fetched 1 new logs [31-07-2022 17:28:02]10576: WAF :: fetched 1 new logs [31-07-2022 17:29:01]16203: WAF :: fetched 16 new logs [31-07-2022 17:30:02]21561: WAF :: fetched 1 new logs [31-07-2022 17:32:02]1001: WAF :: fetched 4 new logs [31-07-2022 17:33:01]6821: WAF :: fetched 3 new logs [31-07-2022 17:34:02]12458: WAF :: fetched 1 new logs [31-07-2022 17:37:01]29953: WAF :: fetched 7 new logs [31-07-2022 17:38:02]3553: WAF :: fetched 3 new logs [31-07-2022 17:39:01]9211: WAF :: fetched 1 new logs [31-07-2022 17:40:02]14995: WAF :: fetched 1 new logs [31-07-2022 17:41:01]20809: WAF :: fetched 2 new logs [31-07-2022 17:41:01]20809: Checking for user cron vulnerabilities [31-07-2022 17:42:02]26768: WAF :: fetched 1 new logs [31-07-2022 17:44:02]6039: Checking ditributed CMS bruteforce attacks [31-07-2022 17:44:02]6039: WAF :: fetched 5 new logs [31-07-2022 17:45:01]11674: WAF :: fetched 3 new logs [31-07-2022 17:46:02]17604: WAF :: fetched 3 new logs [31-07-2022 17:47:01]23296: WAF :: fetched 7 new logs [31-07-2022 17:48:02]29008: WAF :: fetched 10 new logs [31-07-2022 17:49:01]2304: WAF :: fetched 1 new logs [31-07-2022 17:50:02]8025: WAF :: fetched 2 new logs [31-07-2022 17:53:02]24978: WAF :: fetched 12 new logs [31-07-2022 17:55:02]4105: WAF :: fetched 7 new logs [31-07-2022 17:56:01]9906: WAF :: fetched 1 new logs [31-07-2022 17:57:02]15525: WAF :: fetched 1 new logs [31-07-2022 17:58:01]21536: WAF :: fetched 3 new logs [31-07-2022 18:00:01]326: WAF :: fetched 2 new logs [31-07-2022 18:01:02]6702: WAF :: fetched 3 new logs [31-07-2022 18:02:01]12545: WAF :: fetched 12 new logs [31-07-2022 18:03:02]18458: WAF :: fetched 6 new logs [31-07-2022 18:04:02]24065: WAF :: fetched 1 new logs [31-07-2022 18:05:01]29726: WAF :: fetched 1 new logs [31-07-2022 18:07:01]9060: WAF :: fetched 2 new logs [31-07-2022 18:09:02]20416: WAF :: fetched 5 new logs [31-07-2022 18:12:01]5484: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659301921 [31-07-2022 18:12:01]5484: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 18:12:03]5484: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 18:12:04]5484: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-1812/20220731-181201-YubwIc6qvp41PKeMwIzg3gAAACM [31-07-2022 18:12:04]5484: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [31-07-2022 18:12:04]5484: WAF :: fetched 1 new logs [31-07-2022 18:13:02]10950: WAF :: fetched 1 new logs [31-07-2022 18:14:01]16915: WAF :: fetched 1 new logs [31-07-2022 18:16:01]28444: WAF :: fetched 1 new logs [31-07-2022 18:18:01]7733: WAF :: fetched 2 new logs [31-07-2022 18:21:02]25223: WAF :: fetched 1 new logs [31-07-2022 18:22:01]31045: WAF :: fetched 1 new logs [31-07-2022 18:24:01]10204: WAF :: fetched 4 new logs [31-07-2022 18:25:02]15953: WAF :: fetched 2 new logs [31-07-2022 18:27:02]27605: WAF :: fetched 2 new logs [31-07-2022 18:28:01]893: WAF :: fetched 1 new logs [31-07-2022 18:29:02]6696: WAF :: fetched 1 new logs [31-07-2022 18:31:02]17887: WAF :: fetched 6 new logs [31-07-2022 18:32:01]23621: WAF :: fetched 8 new logs [31-07-2022 18:33:02]29291: WAF :: fetched 19 new logs [31-07-2022 18:34:02]2603: WAF :: fetched 2 new logs [31-07-2022 18:35:01]8221: WAF :: fetched 1 new logs [31-07-2022 18:36:02]13611: WAF :: fetched 4 new logs [31-07-2022 18:37:01]19595: WAF :: fetched 1 new logs [31-07-2022 18:38:02]24914: WAF :: fetched 1 new logs [31-07-2022 18:39:01]30877: WAF :: fetched 1 new logs [31-07-2022 18:41:01]9993: WAF :: fetched 1 new logs [31-07-2022 18:41:01]9993: Checking for user cron vulnerabilities [31-07-2022 18:42:02]15495: WAF :: fetched 2 new logs [31-07-2022 18:43:01]21475: WAF :: fetched 6 new logs [31-07-2022 18:44:01]26838: Checking ditributed CMS bruteforce attacks [31-07-2022 18:44:02]26838: WAF :: fetched 15 new logs [31-07-2022 18:45:01]353: WAF :: fetched 3 new logs [31-07-2022 18:46:02]6052: WAF :: fetched 7 new logs [31-07-2022 18:47:01]12090: WAF :: fetched 1 new logs [31-07-2022 18:48:02]17461: WAF :: fetched 3 new logs [31-07-2022 18:49:01]23491: WAF :: fetched 1 new logs [31-07-2022 18:50:02]28831: WAF :: fetched 1 new logs [31-07-2022 18:51:01]2588: WAF :: fetched 2 new logs [31-07-2022 18:52:02]8032: WAF :: fetched 1 new logs [31-07-2022 18:53:01]13974: WAF :: fetched 1 new logs [31-07-2022 18:56:02]30625: WAF :: fetched 1 new logs [31-07-2022 18:59:02]15760: WAF :: fetched 1 new logs [31-07-2022 19:00:01]21078: WAF :: fetched 1 new logs [31-07-2022 19:01:02]27496: WAF :: fetched 15 new logs [31-07-2022 19:02:01]801: WAF :: fetched 3 new logs [31-07-2022 19:04:01]12301: WAF :: fetched 4 new logs [31-07-2022 19:05:02]17854: WAF :: fetched 4 new logs [31-07-2022 19:06:01]23434: WAF :: fetched 3 new logs [31-07-2022 19:08:01]2337: WAF :: fetched 3 new logs [31-07-2022 19:09:02]8077: WAF :: fetched 4 new logs [31-07-2022 19:12:01]25170: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659305521 [31-07-2022 19:12:01]25170: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 19:12:03]25170: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 19:12:04]25170: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-1912/20220731-191201-Yub-MTY0w_cO7FMs2u4obwAAAAA [31-07-2022 19:12:04]25170: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 19:12:04]25170: WAF :: fetched 99 new logs [31-07-2022 19:13:02]30818: WAF :: fetched 1 new logs [31-07-2022 19:14:01]4193: WAF :: fetched 1 new logs [31-07-2022 19:15:02]9853: WAF :: fetched 3 new logs [31-07-2022 19:21:02]11670: WAF :: fetched 4 new logs [31-07-2022 19:22:01]17341: WAF :: fetched 17 new logs [31-07-2022 19:23:02]22726: WAF :: fetched 3 new logs [31-07-2022 19:24:01]28813: WAF :: fetched 2 new logs [31-07-2022 19:25:02]1905: WAF :: fetched 1 new logs [31-07-2022 19:27:02]13648: WAF :: fetched 1 new logs [31-07-2022 19:28:01]19631: WAF :: fetched 2 new logs [31-07-2022 19:30:02]30545: WAF :: fetched 1 new logs [31-07-2022 19:31:01]4345: WAF :: fetched 3 new logs [31-07-2022 19:32:02]9856: WAF :: fetched 1 new logs [31-07-2022 19:33:01]15950: WAF :: fetched 6 new logs [31-07-2022 19:37:01]6302: WAF :: fetched 1 new logs [31-07-2022 19:38:02]11941: WAF :: fetched 1 new logs [31-07-2022 19:39:01]17506: WAF :: fetched 6 new logs [31-07-2022 19:40:02]23129: WAF :: fetched 1 new logs [31-07-2022 19:41:01]28775: WAF :: fetched 5 new logs [31-07-2022 19:41:01]28775: Checking for user cron vulnerabilities [31-07-2022 19:43:02]7898: WAF :: fetched 4 new logs [31-07-2022 19:44:01]13557: Checking ditributed CMS bruteforce attacks [31-07-2022 19:44:01]13538: httpd.conf changed. Refreshing watchlist. [31-07-2022 19:45:01]: Checking for definition updates [31-07-2022 19:45:02]19309: WAF :: fetched 2 new logs [31-07-2022 19:47:02]30772: WAF :: fetched 3 new logs [31-07-2022 19:48:01]4093: WAF :: fetched 1 new logs [31-07-2022 19:49:01]9653: httpd.conf changed. Refreshing watchlist. [31-07-2022 19:51:01]21202: httpd.conf changed. Refreshing watchlist. [31-07-2022 19:51:01]21210: WAF :: fetched 4 new logs [31-07-2022 19:52:01]27226: WAF :: fetched 6 new logs [31-07-2022 19:53:01]32654: WAF :: fetched 13 new logs [31-07-2022 19:56:01]18079: httpd.conf changed. Refreshing watchlist. [31-07-2022 19:56:01]18074: WAF :: fetched 8 new logs [31-07-2022 19:57:02]23831: WAF :: fetched 19 new logs [31-07-2022 19:58:01]29413: WAF :: fetched 98 new logs [31-07-2022 19:59:02]2786: WAF :: fetched 97 new logs [31-07-2022 20:00:01]8103: WAF :: fetched 98 new logs [31-07-2022 20:01:02]14284: WAF :: fetched 102 new logs [31-07-2022 20:02:01]20008: WAF :: fetched 55 new logs [31-07-2022 20:03:02]25724: WAF :: fetched 1 new logs [31-07-2022 20:05:02]4829: WAF :: fetched 1 new logs [31-07-2022 20:08:01]22220: WAF :: fetched 1 new logs [31-07-2022 20:10:01]1055: WAF :: fetched 2 new logs [31-07-2022 20:12:01]12863: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659309121 [31-07-2022 20:12:01]12863: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 20:12:03]12863: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 20:12:04]12863: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-2012/20220731-201201-YucMQdDEJ_vRSzoWel_6FAAAAEc [31-07-2022 20:12:04]12863: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 20:12:04]12863: WAF :: fetched 1 new logs [31-07-2022 20:13:02]18648: WAF :: fetched 2 new logs [31-07-2022 20:14:01]24164: WAF :: fetched 1 new logs [31-07-2022 20:15:02]29791: WAF :: fetched 1 new logs [31-07-2022 20:16:01]3200: WAF :: fetched 2 new logs [31-07-2022 20:17:02]8975: WAF :: fetched 22 new logs [31-07-2022 20:18:01]14580: WAF :: fetched 3 new logs [31-07-2022 20:21:02]31545: WAF :: fetched 1 new logs [31-07-2022 20:22:01]4893: WAF :: fetched 4 new logs [31-07-2022 20:23:02]10485: WAF :: fetched 3 new logs [31-07-2022 20:25:02]21465: WAF :: fetched 14 new logs [31-07-2022 20:26:01]27605: WAF :: fetched 2 new logs [31-07-2022 20:27:02]966: WAF :: fetched 1 new logs [31-07-2022 20:28:01]6646: WAF :: fetched 5 new logs [31-07-2022 20:29:02]12294: WAF :: fetched 1 new logs [31-07-2022 20:30:01]17926: WAF :: fetched 3 new logs [31-07-2022 20:32:01]29409: WAF :: fetched 1 new logs [31-07-2022 20:33:02]2808: WAF :: fetched 3 new logs [31-07-2022 20:34:01]8378: WAF :: fetched 15 new logs [31-07-2022 20:35:02]14064: WAF :: fetched 2 new logs [31-07-2022 20:36:01]19744: WAF :: fetched 14 new logs [31-07-2022 20:37:02]25421: WAF :: fetched 6 new logs [31-07-2022 20:38:01]30990: WAF :: fetched 5 new logs [31-07-2022 20:41:02]15653: Checking for user cron vulnerabilities [31-07-2022 20:42:01]21403: WAF :: fetched 1 new logs [31-07-2022 20:43:02]27209: WAF :: fetched 1 new logs [31-07-2022 20:44:01]393: Checking ditributed CMS bruteforce attacks [31-07-2022 20:44:01]393: WAF :: fetched 4 new logs [31-07-2022 20:46:01]12175: WAF :: fetched 2 new logs [31-07-2022 20:47:02]18169: WAF :: fetched 4 new logs [31-07-2022 20:48:01]23910: WAF :: fetched 1 new logs [31-07-2022 20:49:02]29658: WAF :: fetched 1 new logs [31-07-2022 20:50:01]3095: WAF :: fetched 1 new logs [31-07-2022 20:51:01]8900: WAF :: fetched 3 new logs [31-07-2022 20:52:02]14830: WAF :: fetched 3 new logs [31-07-2022 20:53:01]20435: WAF :: fetched 4 new logs [31-07-2022 20:54:02]26200: WAF :: fetched 3 new logs [31-07-2022 20:55:01]31817: WAF :: fetched 7 new logs [31-07-2022 20:56:02]5463: WAF :: fetched 2 new logs [31-07-2022 20:57:01]11090: WAF :: fetched 7 new logs [31-07-2022 20:58:02]16755: WAF :: fetched 3 new logs [31-07-2022 20:59:01]22330: WAF :: fetched 1 new logs [31-07-2022 21:00:02]27778: WAF :: fetched 1 new logs [31-07-2022 21:01:01]1677: WAF :: fetched 1 new logs [31-07-2022 21:02:02]7626: WAF :: fetched 1 new logs [31-07-2022 21:04:01]18767: WAF :: fetched 1 new logs [31-07-2022 21:05:02]24141: WAF :: fetched 2 new logs [31-07-2022 21:06:01]30224: WAF :: fetched 1 new logs [31-07-2022 21:09:01]14719: WAF :: fetched 1 new logs [31-07-2022 21:10:02]20772: WAF :: fetched 1 new logs [31-07-2022 21:12:01]32093: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659312721 [31-07-2022 21:12:01]32093: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 21:12:03]32093: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 21:12:05]32093: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-2112/20220731-211201-YucaUdCT0wbTJp5G9rFhagAAACA [31-07-2022 21:12:05]32093: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [31-07-2022 21:12:06]32093: WAF :: fetched 2 new logs [31-07-2022 21:13:02]5169: WAF :: fetched 1 new logs [31-07-2022 21:14:02]11238: WAF :: fetched 2 new logs [31-07-2022 21:15:02]16808: WAF :: fetched 5 new logs [31-07-2022 21:17:02]27830: WAF :: fetched 1 new logs [31-07-2022 21:18:01]1508: WAF :: fetched 5 new logs [31-07-2022 21:19:02]6887: WAF :: fetched 2 new logs [31-07-2022 21:20:01]12945: WAF :: fetched 4 new logs [31-07-2022 21:21:02]18347: WAF :: fetched 5 new logs [31-07-2022 21:22:01]24374: WAF :: fetched 1 new logs [31-07-2022 21:23:02]29768: WAF :: fetched 1 new logs [31-07-2022 21:24:02]3438: WAF :: fetched 5 new logs [31-07-2022 21:25:02]9154: WAF :: fetched 4 new logs [31-07-2022 21:26:02]15031: WAF :: fetched 3 new logs [31-07-2022 21:28:02]26029: WAF :: fetched 1 new logs [31-07-2022 21:29:01]31996: WAF :: fetched 4 new logs [31-07-2022 21:30:02]5051: WAF :: fetched 3 new logs [31-07-2022 21:32:02]16402: WAF :: fetched 2 new logs [31-07-2022 21:33:01]22447: WAF :: fetched 1 new logs [31-07-2022 21:36:02]7139: WAF :: fetched 1 new logs [31-07-2022 21:37:01]12637: WAF :: fetched 1 new logs [31-07-2022 21:38:02]18274: WAF :: fetched 3 new logs [31-07-2022 21:39:02]23878: WAF :: fetched 2 new logs [31-07-2022 21:40:02]29617: WAF :: fetched 5 new logs [31-07-2022 21:41:02]3017: WAF :: fetched 2 new logs [31-07-2022 21:41:02]3017: Checking for user cron vulnerabilities [31-07-2022 21:42:02]8638: WAF :: fetched 1 new logs [31-07-2022 21:43:01]14299: WAF :: fetched 3 new logs [31-07-2022 21:44:02]19947: Checking ditributed CMS bruteforce attacks [31-07-2022 21:47:02]4565: WAF :: fetched 26 new logs [31-07-2022 21:48:02]10329: WAF :: fetched 3 new logs [31-07-2022 21:50:01]21561: WAF :: fetched 1 new logs [31-07-2022 21:51:02]26945: WAF :: fetched 3 new logs [31-07-2022 21:53:02]6122: WAF :: fetched 1 new logs [31-07-2022 21:55:02]17474: WAF :: fetched 2 new logs [31-07-2022 21:56:01]23470: WAF :: fetched 14 new logs [31-07-2022 21:57:01]28779: httpd.conf changed. Refreshing watchlist. [31-07-2022 21:57:02]28801: WAF :: fetched 3 new logs [31-07-2022 21:59:02]7929: WAF :: fetched 3 new logs [31-07-2022 22:00:01]13673: WAF :: fetched 6 new logs [31-07-2022 22:01:02]19529: WAF :: fetched 7 new logs [31-07-2022 22:02:01]25499: WAF :: fetched 5 new logs [31-07-2022 22:03:01]30916: WAF :: fetched 3 new logs [31-07-2022 22:04:02]4791: WAF :: fetched 1 new logs [31-07-2022 22:05:01]10464: WAF :: fetched 9 new logs [31-07-2022 22:07:01]21624: WAF :: fetched 3 new logs [31-07-2022 22:07:10]21637: Performing Domain reputation checks [31-07-2022 22:08:02]27048: WAF :: fetched 4 new logs [31-07-2022 22:09:01]539: WAF :: fetched 3 new logs [31-07-2022 22:10:02]6410: WAF :: fetched 6 new logs [31-07-2022 22:11:01]11970: WAF :: fetched 3 new logs [31-07-2022 22:12:02]17591: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659316322 [31-07-2022 22:12:02]17591: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 22:12:04]17591: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 22:12:04]17591: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-2212/20220731-221202-YucoYhrssk10lWjxIq4QhwAAABY [31-07-2022 22:12:04]17591: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 22:12:05]17591: WAF :: fetched 140 new logs [31-07-2022 22:13:01]23248: WAF :: fetched 1 new logs [31-07-2022 22:16:02]7928: WAF :: fetched 5 new logs [31-07-2022 22:20:02]30409: WAF :: fetched 2 new logs [31-07-2022 22:23:01]15518: WAF :: fetched 3 new logs [31-07-2022 22:24:02]20876: WAF :: fetched 1 new logs [31-07-2022 22:25:01]26911: WAF :: fetched 5 new logs [31-07-2022 22:26:02]32752: WAF :: fetched 9 new logs [31-07-2022 22:27:01]6114: WAF :: fetched 3 new logs [31-07-2022 22:29:01]17631: WAF :: fetched 1 new logs [31-07-2022 22:30:01]22957: WAF :: fetched 3 new logs [31-07-2022 22:32:01]2423: WAF :: fetched 2 new logs [31-07-2022 22:33:02]8159: WAF :: fetched 3 new logs [31-07-2022 22:34:01]13719: WAF :: fetched 6 new logs [31-07-2022 22:35:02]19238: WAF :: fetched 2 new logs [31-07-2022 22:36:01]25306: WAF :: fetched 6 new logs [31-07-2022 22:37:02]30765: WAF :: fetched 2 new logs [31-07-2022 22:38:02]4780: WAF :: fetched 3 new logs [31-07-2022 22:39:01]10485: WAF :: fetched 2 new logs [31-07-2022 22:41:01]21889: WAF :: fetched 4 new logs [31-07-2022 22:41:01]21889: Checking for user cron vulnerabilities [31-07-2022 22:42:02]27713: WAF :: fetched 3 new logs [31-07-2022 22:44:01]7000: Checking ditributed CMS bruteforce attacks [31-07-2022 22:44:02]7000: WAF :: fetched 4 new logs [31-07-2022 22:45:01]13082: WAF :: fetched 3 new logs [31-07-2022 22:46:02]18605: WAF :: fetched 4 new logs [31-07-2022 22:47:01]24765: WAF :: fetched 2 new logs [31-07-2022 22:49:01]4059: WAF :: fetched 2 new logs [31-07-2022 22:50:02]9437: WAF :: fetched 3 new logs [31-07-2022 22:51:02]15608: WAF :: fetched 1 new logs [31-07-2022 22:52:01]21262: WAF :: fetched 8 new logs [31-07-2022 22:55:01]6030: WAF :: fetched 4 new logs [31-07-2022 22:58:01]23077: WAF :: fetched 1 new logs [31-07-2022 22:59:01]29263: WAF :: fetched 4 new logs [31-07-2022 23:00:02]2331: WAF :: fetched 12 new logs [31-07-2022 23:03:01]20006: WAF :: fetched 1 new logs [31-07-2022 23:04:02]25600: WAF :: fetched 1 new logs [31-07-2022 23:05:01]31274: WAF :: fetched 1 new logs [31-07-2022 23:08:11]10637: Performed RBL check for 23.111.136.34. [31-07-2022 23:12:01]6785: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659319921 [31-07-2022 23:12:01]6785: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [31-07-2022 23:12:03]6785: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [31-07-2022 23:12:04]6785: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220731/20220731-2312/20220731-231201-Yuc2cQ-GU4HTKn4IcSqokgAAACQ [31-07-2022 23:12:04]6785: WAF :: No suitable log file found. Using SQLite.. [31-07-2022 23:12:04]6785: WAF :: fetched 1 new logs [31-07-2022 23:13:02]12607: WAF :: fetched 1 new logs [31-07-2022 23:14:01]18220: WAF :: fetched 1 new logs [31-07-2022 23:16:01]29724: WAF :: fetched 7 new logs [31-07-2022 23:17:02]3189: WAF :: fetched 3 new logs [31-07-2022 23:18:01]8947: WAF :: fetched 1 new logs [31-07-2022 23:19:02]14693: WAF :: fetched 3 new logs [31-07-2022 23:20:01]20369: WAF :: fetched 8 new logs [31-07-2022 23:21:01]26100: WAF :: fetched 5 new logs [31-07-2022 23:22:02]31546: WAF :: fetched 1 new logs [31-07-2022 23:23:01]5522: WAF :: fetched 2 new logs [31-07-2022 23:24:02]11042: WAF :: fetched 100 new logs [31-07-2022 23:25:01]17073: WAF :: fetched 53 new logs [31-07-2022 23:26:02]22870: WAF :: fetched 2 new logs [31-07-2022 23:28:02]1886: WAF :: fetched 2 new logs [31-07-2022 23:29:01]8089: WAF :: fetched 3 new logs [31-07-2022 23:31:01]19912: WAF :: fetched 1 new logs [31-07-2022 23:32:02]25719: WAF :: fetched 1 new logs [31-07-2022 23:33:01]31584: WAF :: fetched 1 new logs [31-07-2022 23:34:02]5329: WAF :: fetched 6 new logs [31-07-2022 23:35:01]11058: WAF :: fetched 2 new logs [31-07-2022 23:36:02]16799: WAF :: fetched 7 new logs [31-07-2022 23:38:02]28272: WAF :: fetched 2 new logs [31-07-2022 23:39:01]1542: WAF :: fetched 1 new logs [31-07-2022 23:41:01]13114: WAF :: fetched 3 new logs [31-07-2022 23:41:01]13114: Checking for user cron vulnerabilities [31-07-2022 23:44:01]30095: Checking ditributed CMS bruteforce attacks [31-07-2022 23:46:01]9293: WAF :: fetched 2 new logs [31-07-2022 23:47:01]14871: WAF :: fetched 97 new logs [31-07-2022 23:48:01]20169: WAF :: fetched 88 new logs [31-07-2022 23:53:02]16702: WAF :: fetched 1 new logs [31-07-2022 23:54:01]22368: httpd.conf changed. Refreshing watchlist. [31-07-2022 23:54:01]22362: WAF :: fetched 2 new logs [31-07-2022 23:55:02]28698: WAF :: fetched 23 new logs [31-07-2022 23:56:01]2042: httpd.conf changed. Refreshing watchlist. [31-07-2022 23:56:01]2048: WAF :: fetched 1 new logs [31-07-2022 23:57:02]7717: WAF :: fetched 1 new logs [31-07-2022 23:58:01]13320: httpd.conf changed. Refreshing watchlist. [31-07-2022 23:59:02]18924: WAF :: fetched 2 new logs [01-08-2022 00:01:02]30603: WAF :: fetched 2 new logs [01-08-2022 00:01:02]30613: httpd.conf changed. Refreshing watchlist. [01-08-2022 00:01:05]30603: Sending daily report for August 1, 2022 [01-08-2022 00:02:01]4014: WAF :: fetched 1 new logs [01-08-2022 00:04:01]15174: WAF :: fetched 3 new logs [01-08-2022 00:05:02]20809: Deleted 0 entries older than 6 MONTH from scanner_logs [01-08-2022 00:05:02]20809: Deleted 0 files from Quarantine [01-08-2022 00:07:01]31970: WAF :: fetched 5 new logs [01-08-2022 00:08:02]5340: WAF :: fetched 13 new logs [01-08-2022 00:09:01]10847: WAF :: fetched 1 new logs [01-08-2022 00:10:01]16354: WAF :: fetched 1 new logs [01-08-2022 00:12:01]27580: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659323521 [01-08-2022 00:12:01]27580: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 00:12:03]27580: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 00:12:04]27580: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-0012/20220801-001201-YudEgaVuHmx57A8uKW21GAAAABo [01-08-2022 00:12:04]27580: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 00:12:04]27580: WAF :: fetched 3 new logs [01-08-2022 00:20:01]8264: WAF :: fetched 1 new logs [01-08-2022 00:21:02]13863: WAF :: fetched 1 new logs [01-08-2022 00:23:02]25009: WAF :: fetched 1 new logs [01-08-2022 00:26:01]9420: WAF :: fetched 4 new logs [01-08-2022 00:28:01]20610: WAF :: fetched 1 new logs [01-08-2022 00:29:01]26135: WAF :: fetched 2 new logs [01-08-2022 00:30:02]31766: WAF :: fetched 1 new logs [01-08-2022 00:31:01]5155: WAF :: fetched 14 new logs [01-08-2022 00:32:02]10718: WAF :: fetched 3 new logs [01-08-2022 00:33:01]16386: WAF :: fetched 2 new logs [01-08-2022 00:35:02]27579: WAF :: fetched 2 new logs [01-08-2022 00:36:01]778: WAF :: fetched 1 new logs [01-08-2022 00:38:01]12211: WAF :: fetched 5 new logs [01-08-2022 00:40:01]23296: WAF :: fetched 2 new logs [01-08-2022 00:41:02]28958: Checking for user cron vulnerabilities [01-08-2022 00:42:01]2117: WAF :: fetched 6 new logs [01-08-2022 00:43:02]7858: WAF :: fetched 1 new logs [01-08-2022 00:44:01]13446: Checking ditributed CMS bruteforce attacks [01-08-2022 00:44:01]13446: WAF :: fetched 3 new logs [01-08-2022 00:45:01]: Checking for software updates [01-08-2022 00:45:01]18984: WAF :: fetched 3 new logs [01-08-2022 00:46:02]24391: WAF :: fetched 2 new logs [01-08-2022 00:47:01]30361: WAF :: fetched 5 new logs [01-08-2022 00:50:02]14923: WAF :: fetched 1 new logs [01-08-2022 00:52:02]26186: WAF :: fetched 1 new logs [01-08-2022 00:53:01]31789: WAF :: fetched 1 new logs [01-08-2022 00:54:02]5166: WAF :: fetched 5 new logs [01-08-2022 00:57:01]21862: WAF :: fetched 1 new logs [01-08-2022 01:02:01]18840: WAF :: fetched 5 new logs [01-08-2022 01:05:01]4432: WAF :: fetched 1 new logs [01-08-2022 01:06:01]10798: WAF :: fetched 2 new logs [01-08-2022 01:07:01]16272: WAF :: fetched 1 new logs [01-08-2022 01:10:02]1280: WAF :: fetched 1 new logs [01-08-2022 01:11:01]7553: WAF :: fetched 6 new logs [01-08-2022 01:12:02]13124: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659327122 [01-08-2022 01:12:02]13124: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 01:12:04]13124: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 01:12:04]13124: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-0112/20220801-011202-YudSkp_Oe9rEdBkmiASbNwAAAAo [01-08-2022 01:12:04]13124: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 01:12:04]13124: WAF :: fetched 1 new logs [01-08-2022 01:13:01]19254: WAF :: fetched 7 new logs [01-08-2022 01:14:02]24648: WAF :: fetched 3 new logs [01-08-2022 01:15:01]31013: WAF :: fetched 1 new logs [01-08-2022 01:16:02]4728: WAF :: fetched 2 new logs [01-08-2022 01:18:02]16818: WAF :: fetched 2 new logs [01-08-2022 01:19:01]22590: WAF :: fetched 1 new logs [01-08-2022 01:20:02]28537: WAF :: fetched 3 new logs [01-08-2022 01:21:01]2286: WAF :: fetched 16 new logs [01-08-2022 01:22:02]8382: WAF :: fetched 2 new logs [01-08-2022 01:25:01]26062: WAF :: fetched 1 new logs [01-08-2022 01:26:02]31874: WAF :: fetched 1 new logs [01-08-2022 01:27:01]5343: WAF :: fetched 1 new logs [01-08-2022 01:29:01]16917: WAF :: fetched 6 new logs [01-08-2022 01:31:01]28704: WAF :: fetched 2 new logs [01-08-2022 01:32:01]2915: WAF :: fetched 2 new logs [01-08-2022 01:33:02]8782: WAF :: fetched 1 new logs [01-08-2022 01:34:01]15041: WAF :: fetched 2 new logs [01-08-2022 01:38:01]6061: WAF :: fetched 1 new logs [01-08-2022 01:40:02]17614: WAF :: fetched 1 new logs [01-08-2022 01:41:01]23195: WAF :: fetched 1 new logs [01-08-2022 01:41:01]23195: Checking for user cron vulnerabilities [01-08-2022 01:42:02]28800: WAF :: fetched 2 new logs [01-08-2022 01:44:02]8013: Checking ditributed CMS bruteforce attacks [01-08-2022 01:44:02]8013: WAF :: fetched 1 new logs [01-08-2022 01:45:01]: Checking for definition updates [01-08-2022 01:47:01]25236: WAF :: fetched 2 new logs [01-08-2022 01:50:02]9806: WAF :: fetched 1 new logs [01-08-2022 01:51:01]15514: WAF :: fetched 1 new logs [01-08-2022 01:53:01]26755: WAF :: fetched 1 new logs [01-08-2022 01:56:02]11566: WAF :: fetched 1 new logs [01-08-2022 01:57:01]17226: WAF :: fetched 6 new logs [01-08-2022 02:01:01]7888: WAF :: fetched 6 new logs [01-08-2022 02:02:02]13571: WAF :: fetched 4 new logs [01-08-2022 02:03:01]19161: WAF :: fetched 1 new logs [01-08-2022 02:05:02]30553: WAF :: fetched 2 new logs [01-08-2022 02:06:01]4039: WAF :: fetched 5 new logs [01-08-2022 02:07:02]9722: WAF :: fetched 2 new logs [01-08-2022 02:10:01]26715: WAF :: fetched 1 new logs [01-08-2022 02:11:02]32749: WAF :: fetched 1 new logs [01-08-2022 02:12:01]6816: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659330721 [01-08-2022 02:12:01]6816: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 02:12:03]6816: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 02:12:04]6816: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-0212/20220801-021201-YudgoeBqH4N_it9jg3-ObAAAABM [01-08-2022 02:12:04]6816: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 02:12:04]6816: WAF :: fetched 2 new logs [01-08-2022 02:14:01]18583: WAF :: fetched 1 new logs [01-08-2022 02:15:02]24144: WAF :: fetched 1 new logs [01-08-2022 02:16:01]29743: WAF :: fetched 5 new logs [01-08-2022 02:19:01]14473: WAF :: fetched 9 new logs [01-08-2022 02:20:01]19987: WAF :: fetched 6 new logs [01-08-2022 02:21:01]26225: WAF :: fetched 1 new logs [01-08-2022 02:23:01]5683: WAF :: fetched 3 new logs [01-08-2022 02:24:02]11922: WAF :: fetched 21 new logs [01-08-2022 02:25:01]17548: WAF :: fetched 29 new logs [01-08-2022 02:26:01]23379: WAF :: fetched 50 new logs [01-08-2022 02:27:01]28687: WAF :: fetched 45 new logs [01-08-2022 02:29:01]8685: WAF :: fetched 6 new logs [01-08-2022 02:30:02]14310: WAF :: fetched 2 new logs [01-08-2022 02:31:01]19921: WAF :: fetched 4 new logs [01-08-2022 02:32:02]25580: WAF :: fetched 6 new logs [01-08-2022 02:33:01]31069: WAF :: fetched 1 new logs [01-08-2022 02:34:02]4496: WAF :: fetched 3 new logs [01-08-2022 02:36:02]16373: WAF :: fetched 2 new logs [01-08-2022 02:37:01]22189: WAF :: fetched 1 new logs [01-08-2022 02:38:02]28218: WAF :: fetched 3 new logs [01-08-2022 02:39:01]1706: WAF :: fetched 13 new logs [01-08-2022 02:40:02]7804: WAF :: fetched 1 new logs [01-08-2022 02:41:02]13825: WAF :: fetched 7 new logs [01-08-2022 02:41:02]13825: Checking for user cron vulnerabilities [01-08-2022 02:42:01]19314: WAF :: fetched 4 new logs [01-08-2022 02:43:02]24948: WAF :: fetched 18 new logs [01-08-2022 02:44:01]30533: Checking ditributed CMS bruteforce attacks [01-08-2022 02:44:01]30533: WAF :: fetched 2 new logs [01-08-2022 02:45:02]3834: WAF :: fetched 3 new logs [01-08-2022 02:46:01]9409: WAF :: fetched 2 new logs [01-08-2022 02:47:02]14983: WAF :: fetched 9 new logs [01-08-2022 02:48:01]20438: WAF :: fetched 4 new logs [01-08-2022 02:49:02]26149: WAF :: fetched 4 new logs [01-08-2022 02:50:01]31628: WAF :: fetched 6 new logs [01-08-2022 02:51:01]4978: WAF :: fetched 2 new logs [01-08-2022 02:52:02]10548: WAF :: fetched 8 new logs [01-08-2022 02:53:01]16050: WAF :: fetched 9 new logs [01-08-2022 02:53:02]16057: Updated license status via CDN [01-08-2022 02:54:02]21672: WAF :: fetched 1 new logs [01-08-2022 02:56:02]32730: WAF :: fetched 1 new logs [01-08-2022 02:57:01]5899: WAF :: fetched 1 new logs [01-08-2022 02:58:02]11179: WAF :: fetched 2 new logs [01-08-2022 02:59:01]17086: WAF :: fetched 2 new logs [01-08-2022 03:00:02]22370: WAF :: fetched 3 new logs [01-08-2022 03:00:03]22370: Found and updated 31 CMS installations [01-08-2022 03:01:01]28517: WAF :: fetched 2 new logs [01-08-2022 03:02:01]2054: WAF :: fetched 1 new logs [01-08-2022 03:02:44]22370: Sending CMS version vulnerability report emails to cpanel users [01-08-2022 03:02:47]22370: Checking wordpress installations for suspicious directories [01-08-2022 03:04:01]13982: WAF :: fetched 1 new logs [01-08-2022 03:04:28]8111: Sending CMS version vulnerability report emails to cpanel users [01-08-2022 03:04:31]8111: Checking wordpress installations for suspicious directories [01-08-2022 03:05:02]19877: WAF :: fetched 1 new logs [01-08-2022 03:06:01]25441: WAF :: fetched 3 new logs [01-08-2022 03:07:02]30974: WAF :: fetched 1 new logs [01-08-2022 03:09:02]9824: WAF :: fetched 1 new logs [01-08-2022 03:12:01]26448: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659334321 [01-08-2022 03:12:01]26448: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 03:12:03]26448: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 03:12:04]26448: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-0312/20220801-031201-YudusduN-j7daHArHiw3rwAAAAw [01-08-2022 03:12:04]26448: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 03:12:04]26448: WAF :: fetched 4 new logs [01-08-2022 03:13:02]32086: WAF :: fetched 4 new logs [01-08-2022 03:14:01]5357: WAF :: fetched 4 new logs [01-08-2022 03:15:02]10970: WAF :: fetched 4 new logs [01-08-2022 03:16:01]16513: WAF :: fetched 1 new logs [01-08-2022 03:18:01]27555: WAF :: fetched 7 new logs [01-08-2022 03:19:02]814: WAF :: fetched 5 new logs [01-08-2022 03:20:01]6384: WAF :: fetched 1 new logs [01-08-2022 03:21:02]12046: WAF :: fetched 5 new logs [01-08-2022 03:22:01]17547: WAF :: fetched 4 new logs [01-08-2022 03:23:02]23084: WAF :: fetched 2 new logs [01-08-2022 03:24:01]28732: WAF :: fetched 8 new logs [01-08-2022 03:25:02]2048: WAF :: fetched 7 new logs [01-08-2022 03:26:01]7673: WAF :: fetched 2 new logs [01-08-2022 03:28:01]18743: WAF :: fetched 1 new logs [01-08-2022 03:29:01]24087: WAF :: fetched 4 new logs [01-08-2022 03:35:01]25530: WAF :: fetched 4 new logs [01-08-2022 03:36:02]31258: WAF :: fetched 7 new logs [01-08-2022 03:38:02]1843: WAF :: fetched 1 new logs [01-08-2022 03:39:01]11429: WAF :: fetched 14 new logs [01-08-2022 03:40:01]24068: WAF :: fetched 1 new logs [01-08-2022 03:41:02]29785: WAF :: fetched 5 new logs [01-08-2022 03:41:02]29785: Checking for user cron vulnerabilities [01-08-2022 03:43:02]8595: WAF :: fetched 1 new logs [01-08-2022 03:44:01]14284: Checking ditributed CMS bruteforce attacks [01-08-2022 03:45:02]19875: WAF :: fetched 4 new logs [01-08-2022 03:46:01]25428: WAF :: fetched 4 new logs [01-08-2022 03:47:02]30738: WAF :: fetched 2 new logs [01-08-2022 03:48:01]4414: WAF :: fetched 5 new logs [01-08-2022 03:49:02]10191: WAF :: fetched 2 new logs [01-08-2022 03:50:01]15695: WAF :: fetched 1 new logs [01-08-2022 03:52:01]26914: WAF :: fetched 4 new logs [01-08-2022 03:53:02]32498: WAF :: fetched 2 new logs [01-08-2022 03:54:01]5802: WAF :: fetched 2 new logs [01-08-2022 03:55:01]11390: WAF :: fetched 4 new logs [01-08-2022 03:56:02]17109: WAF :: fetched 1 new logs [01-08-2022 03:59:01]1509: WAF :: fetched 1 new logs [01-08-2022 04:00:02]6949: WAF :: fetched 1 new logs [01-08-2022 04:01:01]13074: WAF :: fetched 12 new logs [01-08-2022 04:02:02]18718: WAF :: fetched 4 new logs [01-08-2022 04:04:01]29915: WAF :: fetched 6 new logs [01-08-2022 04:06:02]8845: WAF :: fetched 2 new logs [01-08-2022 04:07:01]14369: WAF :: fetched 1 new logs [01-08-2022 04:12:02]10030: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659337922 [01-08-2022 04:12:02]10030: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 04:12:04]10030: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 04:12:04]10030: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-0412/20220801-041202-Yud8wsWLeI-kpUGEbygPpwAAABI [01-08-2022 04:12:04]10030: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [01-08-2022 04:12:05]10030: WAF :: fetched 1 new logs [01-08-2022 04:13:02]15508: WAF :: fetched 1 new logs [01-08-2022 04:14:02]21157: WAF :: fetched 1 new logs [01-08-2022 04:16:02]32297: WAF :: fetched 1 new logs [01-08-2022 04:17:02]5464: WAF :: fetched 3 new logs [01-08-2022 04:21:01]27681: WAF :: fetched 1 new logs [01-08-2022 04:22:02]518: WAF :: fetched 42 new logs [01-08-2022 04:23:01]6588: WAF :: fetched 1 new logs [01-08-2022 04:24:02]12316: WAF :: fetched 9 new logs [01-08-2022 04:25:02]17880: WAF :: fetched 35 new logs [01-08-2022 04:26:02]23383: WAF :: fetched 1 new logs [01-08-2022 04:27:02]28967: WAF :: fetched 27 new logs [01-08-2022 04:28:02]2130: WAF :: fetched 19 new logs [01-08-2022 04:29:02]7909: WAF :: fetched 3 new logs [01-08-2022 04:30:02]13369: WAF :: fetched 40 new logs [01-08-2022 04:31:01]18937: WAF :: fetched 6 new logs [01-08-2022 04:32:02]24203: WAF :: fetched 2 new logs [01-08-2022 04:33:01]30119: WAF :: fetched 2 new logs [01-08-2022 04:34:02]3189: WAF :: fetched 5 new logs [01-08-2022 04:38:01]25860: WAF :: fetched 8 new logs [01-08-2022 04:39:02]31525: WAF :: fetched 1 new logs [01-08-2022 04:40:01]4798: WAF :: fetched 1 new logs [01-08-2022 04:41:02]10303: WAF :: fetched 1 new logs [01-08-2022 04:41:02]10303: Checking for user cron vulnerabilities [01-08-2022 04:43:02]21401: WAF :: fetched 5 new logs [01-08-2022 04:44:01]27018: Checking ditributed CMS bruteforce attacks [01-08-2022 04:47:02]11551: WAF :: fetched 15 new logs [01-08-2022 04:48:02]17072: WAF :: fetched 7 new logs [01-08-2022 04:49:02]22731: WAF :: fetched 3 new logs [01-08-2022 04:50:02]28276: WAF :: fetched 5 new logs [01-08-2022 04:52:02]7129: WAF :: fetched 2 new logs [01-08-2022 04:53:02]12662: WAF :: fetched 4 new logs [01-08-2022 04:54:01]18229: WAF :: fetched 1 new logs [01-08-2022 04:55:02]23735: WAF :: fetched 2 new logs [01-08-2022 04:57:02]2505: WAF :: fetched 1 new logs [01-08-2022 04:58:02]8015: WAF :: fetched 1 new logs [01-08-2022 04:59:02]13667: WAF :: fetched 1 new logs [01-08-2022 05:01:02]24964: WAF :: fetched 5 new logs [01-08-2022 05:01:42]24965: Starting daily scan on files updated in last 24 hrs [01-08-2022 05:02:02]30459: WAF :: fetched 3 new logs [01-08-2022 05:03:02]3787: WAF :: fetched 2 new logs [01-08-2022 05:04:01]9354: WAF :: fetched 1 new logs [01-08-2022 05:05:02]14606: WAF :: fetched 2 new logs [01-08-2022 05:06:01]20643: WAF :: fetched 5 new logs [01-08-2022 05:07:02]26267: WAF :: fetched 2 new logs [01-08-2022 05:08:01]31782: WAF :: fetched 2 new logs [01-08-2022 05:09:02]5153: WAF :: fetched 13 new logs [01-08-2022 05:10:01]10634: WAF :: fetched 3 new logs [01-08-2022 05:12:01]21734: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659341521 [01-08-2022 05:12:01]21734: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 05:12:03]21734: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 05:12:04]21734: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-0512/20220801-051201-YueK0ZhabzQ_18s1y8w9ewAAAAw [01-08-2022 05:12:04]21734: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 05:12:04]21734: WAF :: fetched 176 new logs [01-08-2022 05:15:01]6114: WAF :: fetched 2 new logs [01-08-2022 05:16:02]11803: WAF :: fetched 1 new logs [01-08-2022 05:17:01]17228: WAF :: fetched 1 new logs [01-08-2022 05:18:02]22826: WAF :: fetched 4 new logs [01-08-2022 05:20:02]1729: WAF :: fetched 3 new logs [01-08-2022 05:22:02]12979: WAF :: fetched 5 new logs [01-08-2022 05:23:01]18577: WAF :: fetched 2 new logs [01-08-2022 05:24:02]24252: WAF :: fetched 1 new logs [01-08-2022 05:25:01]29781: WAF :: fetched 4 new logs [01-08-2022 05:26:02]3160: WAF :: fetched 2 new logs [01-08-2022 05:27:01]8772: WAF :: fetched 1 new logs [01-08-2022 05:28:02]14548: WAF :: fetched 27 new logs [01-08-2022 05:29:01]20333: WAF :: fetched 6 new logs [01-08-2022 05:30:02]26097: WAF :: fetched 14 new logs [01-08-2022 05:31:01]32119: WAF :: fetched 4 new logs [01-08-2022 05:32:02]5610: WAF :: fetched 2 new logs [01-08-2022 05:34:02]17056: WAF :: fetched 4 new logs [01-08-2022 05:35:01]22667: WAF :: fetched 3 new logs [01-08-2022 05:38:02]7323: WAF :: fetched 1 new logs [01-08-2022 05:41:01]24280: Checking for user cron vulnerabilities [01-08-2022 05:43:01]2990: WAF :: fetched 3 new logs [01-08-2022 05:44:01]9117: Checking ditributed CMS bruteforce attacks [01-08-2022 05:45:02]14510: WAF :: fetched 1 new logs [01-08-2022 05:46:01]20602: WAF :: fetched 1 new logs [01-08-2022 05:48:02]32108: WAF :: fetched 1 new logs [01-08-2022 05:51:01]17035: WAF :: fetched 1 new logs [01-08-2022 05:52:01]22738: WAF :: fetched 3 new logs [01-08-2022 05:53:02]28444: WAF :: fetched 5 new logs [01-08-2022 05:54:01]1752: WAF :: fetched 2 new logs [01-08-2022 05:55:02]7487: WAF :: fetched 1 new logs [01-08-2022 05:56:01]13137: WAF :: fetched 7 new logs [01-08-2022 05:57:02]18767: WAF :: fetched 2 new logs [01-08-2022 05:59:02]30078: WAF :: fetched 1 new logs [01-08-2022 06:01:02]9227: WAF :: fetched 2 new logs [01-08-2022 06:02:01]14850: WAF :: fetched 4 new logs [01-08-2022 06:06:01]5361: WAF :: fetched 1 new logs [01-08-2022 06:07:02]11104: WAF :: fetched 7 new logs [01-08-2022 06:08:01]16688: WAF :: fetched 13 new logs [01-08-2022 06:09:02]22325: WAF :: fetched 2 new logs [01-08-2022 06:11:02]1369: WAF :: fetched 1 new logs [01-08-2022 06:12:01]6993: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659345121 [01-08-2022 06:12:01]6993: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 06:12:03]6993: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 06:12:04]6993: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-0612/20220801-061201-YueY4T033xIQxPVI-MnbHgAAAB8 [01-08-2022 06:12:04]6993: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [01-08-2022 06:12:04]6993: WAF :: fetched 1 new logs [01-08-2022 06:13:02]12730: WAF :: fetched 1 new logs [01-08-2022 06:14:01]18305: WAF :: fetched 5 new logs [01-08-2022 06:15:02]24064: WAF :: fetched 4 new logs [01-08-2022 06:16:01]29819: WAF :: fetched 3 new logs [01-08-2022 06:17:02]3292: WAF :: fetched 5 new logs [01-08-2022 06:18:01]8871: WAF :: fetched 1 new logs [01-08-2022 06:19:02]14564: WAF :: fetched 1 new logs [01-08-2022 06:21:02]25938: WAF :: fetched 1 new logs [01-08-2022 06:23:02]4557: WAF :: fetched 2 new logs [01-08-2022 06:25:02]16308: WAF :: fetched 9 new logs [01-08-2022 06:26:01]22047: WAF :: fetched 2 new logs [01-08-2022 06:28:01]1093: WAF :: fetched 6 new logs [01-08-2022 06:29:02]6493: WAF :: fetched 1 new logs [01-08-2022 06:30:01]12560: WAF :: fetched 3 new logs [01-08-2022 06:33:02]29258: WAF :: fetched 6 new logs [01-08-2022 06:35:02]8645: WAF :: fetched 4 new logs [01-08-2022 06:36:01]14313: WAF :: fetched 1 new logs [01-08-2022 06:37:02]19979: WAF :: fetched 5 new logs [01-08-2022 06:39:01]31069: WAF :: fetched 1 new logs [01-08-2022 06:40:02]4545: WAF :: fetched 2 new logs [01-08-2022 06:41:01]10205: Checking for user cron vulnerabilities [01-08-2022 06:42:02]15800: WAF :: fetched 1 new logs [01-08-2022 06:43:01]21326: WAF :: fetched 4 new logs [01-08-2022 06:44:01]26674: Checking ditributed CMS bruteforce attacks [01-08-2022 06:45:02]366: WAF :: fetched 1 new logs [01-08-2022 06:46:02]6150: WAF :: fetched 5 new logs [01-08-2022 06:47:01]11793: WAF :: fetched 1 new logs [01-08-2022 06:48:02]17142: WAF :: fetched 2 new logs [01-08-2022 06:51:02]2289: WAF :: fetched 17 new logs [01-08-2022 06:52:02]7875: WAF :: fetched 3 new logs [01-08-2022 06:55:02]24498: WAF :: fetched 4 new logs [01-08-2022 06:56:01]30511: WAF :: fetched 1 new logs [01-08-2022 06:59:02]15216: WAF :: fetched 1 new logs [01-08-2022 07:00:01]20564: WAF :: fetched 1 new logs [01-08-2022 07:01:02]26783: WAF :: fetched 1 new logs [01-08-2022 07:03:02]5824: WAF :: fetched 1 new logs [01-08-2022 07:04:01]11408: WAF :: fetched 2 new logs [01-08-2022 07:05:02]17152: WAF :: fetched 2 new logs [01-08-2022 07:09:02]7326: WAF :: fetched 3 new logs [01-08-2022 07:10:01]12996: WAF :: fetched 2 new logs [01-08-2022 07:11:02]18761: WAF :: fetched 11 new logs [01-08-2022 07:12:01]24315: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659348721 [01-08-2022 07:12:01]24315: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 07:12:03]24315: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 07:12:04]24315: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-0712/20220801-071201-Yuem8Wqub764I4pfe87WswAAABk [01-08-2022 07:12:04]24315: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 07:12:04]24315: WAF :: fetched 95 new logs [01-08-2022 07:13:02]29935: WAF :: fetched 2 new logs [01-08-2022 07:14:01]3240: WAF :: fetched 1 new logs [01-08-2022 07:15:02]8975: WAF :: fetched 5 new logs [01-08-2022 07:16:01]14600: WAF :: fetched 2 new logs [01-08-2022 07:17:01]19887: WAF :: fetched 1 new logs [01-08-2022 07:23:02]22006: WAF :: fetched 2 new logs [01-08-2022 07:24:01]27579: WAF :: fetched 1 new logs [01-08-2022 07:25:01]932: WAF :: fetched 4 new logs [01-08-2022 07:26:02]6784: WAF :: fetched 4 new logs [01-08-2022 07:31:01]2734: WAF :: fetched 2 new logs [01-08-2022 07:33:02]14215: WAF :: fetched 2 new logs [01-08-2022 07:34:01]19737: WAF :: fetched 1 new logs [01-08-2022 07:35:02]25497: WAF :: fetched 1 new logs [01-08-2022 07:36:01]31143: WAF :: fetched 3 new logs [01-08-2022 07:38:01]10106: WAF :: fetched 1 new logs [01-08-2022 07:39:02]15815: WAF :: fetched 3 new logs [01-08-2022 07:40:01]21468: WAF :: fetched 3 new logs [01-08-2022 07:41:02]27229: Checking for user cron vulnerabilities [01-08-2022 07:43:02]6279: WAF :: fetched 3 new logs [01-08-2022 07:44:01]11935: Checking ditributed CMS bruteforce attacks [01-08-2022 07:44:01]11935: WAF :: fetched 4 new logs [01-08-2022 07:45:01]: Checking for definition updates [01-08-2022 07:46:01]23369: WAF :: fetched 5 new logs [01-08-2022 07:49:02]8186: WAF :: fetched 1 new logs [01-08-2022 07:50:01]13889: WAF :: fetched 3 new logs [01-08-2022 07:52:02]25199: WAF :: fetched 1 new logs [01-08-2022 07:53:01]30828: WAF :: fetched 1 new logs [01-08-2022 07:57:01]21255: WAF :: fetched 1 new logs [01-08-2022 07:59:01]32554: WAF :: fetched 2 new logs [01-08-2022 08:00:02]5838: WAF :: fetched 1 new logs [01-08-2022 08:01:01]11962: WAF :: fetched 3 new logs [01-08-2022 08:02:02]17649: WAF :: fetched 1 new logs [01-08-2022 08:04:01]28881: WAF :: fetched 1 new logs [01-08-2022 08:05:02]2355: WAF :: fetched 1 new logs [01-08-2022 08:07:02]13682: WAF :: fetched 2 new logs [01-08-2022 08:08:01]19275: WAF :: fetched 1 new logs [01-08-2022 08:09:02]24616: WAF :: fetched 3 new logs [01-08-2022 08:12:01]9649: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659352321 [01-08-2022 08:12:01]9649: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 08:12:03]9649: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 08:12:04]9649: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-0812/20220801-081201-Yue1AbKWLfrZ30szxP2PhQAAAA0 [01-08-2022 08:12:04]9649: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 08:12:04]9649: WAF :: fetched 2 new logs [01-08-2022 08:15:02]26198: WAF :: fetched 3 new logs [01-08-2022 08:17:01]5623: WAF :: fetched 4 new logs [01-08-2022 08:18:01]11284: WAF :: fetched 5 new logs [01-08-2022 08:19:01]16678: WAF :: fetched 12 new logs [01-08-2022 08:20:01]22788: WAF :: fetched 3 new logs [01-08-2022 08:24:02]13257: WAF :: fetched 1 new logs [01-08-2022 08:25:01]18981: WAF :: fetched 1 new logs [01-08-2022 08:27:02]30444: WAF :: fetched 3 new logs [01-08-2022 08:29:01]9360: WAF :: fetched 1 new logs [01-08-2022 08:30:02]14832: WAF :: fetched 3 new logs [01-08-2022 08:31:01]20878: WAF :: fetched 1 new logs [01-08-2022 08:32:02]26562: WAF :: fetched 1 new logs [01-08-2022 08:33:02]32190: WAF :: fetched 3 new logs [01-08-2022 08:34:01]5467: WAF :: fetched 3 new logs [01-08-2022 08:35:02]10869: WAF :: fetched 2 new logs [01-08-2022 08:37:02]22500: WAF :: fetched 1 new logs [01-08-2022 08:39:01]1276: WAF :: fetched 7 new logs [01-08-2022 08:40:02]7140: WAF :: fetched 1 new logs [01-08-2022 08:41:01]12752: Checking for user cron vulnerabilities [01-08-2022 08:42:02]18369: WAF :: fetched 1 new logs [01-08-2022 08:44:01]29794: Checking ditributed CMS bruteforce attacks [01-08-2022 08:44:02]29794: WAF :: fetched 6 new logs [01-08-2022 08:47:01]14788: WAF :: fetched 4 new logs [01-08-2022 08:50:02]31850: WAF :: fetched 3 new logs [01-08-2022 08:51:01]5257: WAF :: fetched 2 new logs [01-08-2022 08:52:02]10927: WAF :: fetched 3 new logs [01-08-2022 08:53:01]16549: WAF :: fetched 1 new logs [01-08-2022 08:54:02]22242: WAF :: fetched 2 new logs [01-08-2022 08:55:01]27905: WAF :: fetched 2 new logs [01-08-2022 09:01:01]29943: WAF :: fetched 1 new logs [01-08-2022 09:02:01]3361: WAF :: fetched 6 new logs [01-08-2022 09:03:01]8688: WAF :: fetched 14 new logs [01-08-2022 09:04:01]14681: WAF :: fetched 2 new logs [01-08-2022 09:06:01]26207: WAF :: fetched 1 new logs [01-08-2022 09:10:01]16687: WAF :: fetched 3 new logs [01-08-2022 09:11:01]22128: WAF :: fetched 1 new logs [01-08-2022 09:12:01]28216: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659355921 [01-08-2022 09:12:01]28216: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 09:12:03]28216: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 09:12:03]28216: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-0912/20220801-091201-YufDEV8z_JL3V5UYN_nJgwAAAA8 [01-08-2022 09:12:03]28216: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 09:12:04]28216: WAF :: fetched 3 new logs [01-08-2022 09:17:01]24603: WAF :: fetched 2 new logs [01-08-2022 09:18:02]30341: WAF :: fetched 1 new logs [01-08-2022 09:19:01]3677: WAF :: fetched 1 new logs [01-08-2022 09:20:02]9512: WAF :: fetched 2 new logs [01-08-2022 09:22:02]20844: WAF :: fetched 1 new logs [01-08-2022 09:23:01]26508: WAF :: fetched 2 new logs [01-08-2022 09:24:02]32176: WAF :: fetched 1 new logs [01-08-2022 09:25:01]5640: WAF :: fetched 2 new logs [01-08-2022 09:26:02]11354: WAF :: fetched 11 new logs [01-08-2022 09:27:01]16929: WAF :: fetched 1 new logs [01-08-2022 09:28:02]22645: WAF :: fetched 1 new logs [01-08-2022 09:30:02]1558: WAF :: fetched 2 new logs [01-08-2022 09:31:01]7274: WAF :: fetched 2 new logs [01-08-2022 09:32:01]12899: WAF :: fetched 1 new logs [01-08-2022 09:33:01]18287: WAF :: fetched 1 new logs [01-08-2022 09:34:02]24347: WAF :: fetched 2 new logs [01-08-2022 09:35:01]30074: WAF :: fetched 3 new logs [01-08-2022 09:36:01]3603: WAF :: fetched 3 new logs [01-08-2022 09:38:01]15025: WAF :: fetched 1 new logs [01-08-2022 09:39:01]20384: WAF :: fetched 2 new logs [01-08-2022 09:40:01]26501: WAF :: fetched 3 new logs [01-08-2022 09:41:02]32255: WAF :: fetched 1 new logs [01-08-2022 09:41:02]32255: Checking for user cron vulnerabilities [01-08-2022 09:43:02]11276: WAF :: fetched 1 new logs [01-08-2022 09:44:01]16920: Checking ditributed CMS bruteforce attacks [01-08-2022 09:46:01]28390: WAF :: fetched 1 new logs [01-08-2022 09:47:02]1771: WAF :: fetched 1 new logs [01-08-2022 09:48:01]7624: WAF :: fetched 4 new logs [01-08-2022 09:49:02]13406: WAF :: fetched 3 new logs [01-08-2022 09:50:01]19152: WAF :: fetched 19 new logs [01-08-2022 09:51:02]24984: WAF :: fetched 3 new logs [01-08-2022 09:52:01]30673: WAF :: fetched 21 new logs [01-08-2022 09:53:02]4171: WAF :: fetched 1 new logs [01-08-2022 09:54:01]9796: WAF :: fetched 1 new logs [01-08-2022 09:55:02]15624: WAF :: fetched 2 new logs [01-08-2022 09:56:01]21456: httpd.conf changed. Refreshing watchlist. [01-08-2022 09:56:01]21440: WAF :: fetched 5 new logs [01-08-2022 09:57:02]27341: WAF :: fetched 1 new logs [01-08-2022 09:59:01]6407: WAF :: fetched 1 new logs [01-08-2022 10:00:02]11947: WAF :: fetched 1 new logs [01-08-2022 10:01:01]18189: WAF :: fetched 2 new logs [01-08-2022 10:03:01]29804: WAF :: fetched 7 new logs [01-08-2022 10:04:02]3277: WAF :: fetched 4 new logs [01-08-2022 10:06:02]14882: WAF :: fetched 4 new logs [01-08-2022 10:07:01]20708: WAF :: fetched 6 new logs [01-08-2022 10:10:02]5321: WAF :: fetched 1 new logs [01-08-2022 10:12:02]16828: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659359522 [01-08-2022 10:12:02]16828: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 10:12:04]16828: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 10:12:04]16828: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-1012/20220801-101202-YufRIg255yi0Gkr8LfbnxgAAABQ [01-08-2022 10:12:04]16828: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 10:12:05]16828: WAF :: fetched 1 new logs [01-08-2022 10:15:02]1526: WAF :: fetched 1 new logs [01-08-2022 10:16:01]7285: WAF :: fetched 3 new logs [01-08-2022 10:18:01]18633: WAF :: fetched 2 new logs [01-08-2022 10:19:02]24282: WAF :: fetched 3 new logs [01-08-2022 10:20:01]29875: WAF :: fetched 3 new logs [01-08-2022 10:21:01]3459: WAF :: fetched 7 new logs [01-08-2022 10:22:01]8775: WAF :: fetched 2 new logs [01-08-2022 10:23:01]14769: WAF :: fetched 6 new logs [01-08-2022 10:24:01]20120: WAF :: fetched 3 new logs [01-08-2022 10:25:01]26119: WAF :: fetched 1 new logs [01-08-2022 10:26:02]31626: WAF :: fetched 3 new logs [01-08-2022 10:27:01]5375: WAF :: fetched 2 new logs [01-08-2022 10:28:02]10873: WAF :: fetched 4 new logs [01-08-2022 10:29:01]16978: httpd.conf changed. Refreshing watchlist. [01-08-2022 10:29:01]16991: WAF :: fetched 5 new logs [01-08-2022 10:30:02]22694: httpd.conf changed. Refreshing watchlist. [01-08-2022 10:30:02]22672: WAF :: fetched 4 new logs [01-08-2022 10:31:01]28995: WAF :: fetched 1 new logs [01-08-2022 10:32:02]2254: WAF :: fetched 1 new logs [01-08-2022 10:35:01]19190: WAF :: fetched 1 new logs [01-08-2022 10:36:02]25097: WAF :: fetched 2 new logs [01-08-2022 10:37:01]30762: WAF :: fetched 4 new logs [01-08-2022 10:40:02]15614: WAF :: fetched 3 new logs [01-08-2022 10:41:01]21446: WAF :: fetched 1 new logs [01-08-2022 10:41:01]21446: Checking for user cron vulnerabilities [01-08-2022 10:42:01]27189: WAF :: fetched 1 new logs [01-08-2022 10:43:01]32646: WAF :: fetched 1 new logs [01-08-2022 10:44:02]6490: Checking ditributed CMS bruteforce attacks [01-08-2022 10:44:02]6490: WAF :: fetched 1 new logs [01-08-2022 10:45:01]12152: WAF :: fetched 1 new logs [01-08-2022 10:46:01]17953: WAF :: fetched 3 new logs [01-08-2022 10:48:01]29345: WAF :: fetched 1 new logs [01-08-2022 10:49:02]2427: WAF :: fetched 1 new logs [01-08-2022 10:51:02]14210: WAF :: fetched 1 new logs [01-08-2022 10:52:02]20322: WAF :: fetched 9 new logs [01-08-2022 10:53:01]25915: WAF :: fetched 7 new logs [01-08-2022 10:54:02]31655: WAF :: fetched 1 new logs [01-08-2022 10:55:01]4957: WAF :: fetched 2 new logs [01-08-2022 10:56:02]10771: WAF :: fetched 4 new logs [01-08-2022 10:57:01]16325: WAF :: fetched 3 new logs [01-08-2022 10:58:02]22079: WAF :: fetched 2 new logs [01-08-2022 10:59:01]27731: WAF :: fetched 2 new logs [01-08-2022 11:03:01]18076: WAF :: fetched 2 new logs [01-08-2022 11:05:01]29497: WAF :: fetched 1 new logs [01-08-2022 11:07:01]8940: WAF :: fetched 7 new logs [01-08-2022 11:07:43]9124: Performed RBL check for 23.111.136.34. [01-08-2022 11:08:01]14982: WAF :: fetched 1 new logs [01-08-2022 11:10:01]26588: WAF :: fetched 2 new logs [01-08-2022 11:11:01]32278: WAF :: fetched 6 new logs [01-08-2022 11:12:01]6086: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659363121 [01-08-2022 11:12:01]6086: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 11:12:03]6086: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 11:12:04]6086: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-1112/20220801-111201-YuffMXxNeTXpg3WGMCmYBQAAAAs [01-08-2022 11:12:04]6086: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 11:12:04]6086: WAF :: fetched 1 new logs [01-08-2022 11:13:02]11800: WAF :: fetched 2 new logs [01-08-2022 11:14:01]17531: WAF :: fetched 2 new logs [01-08-2022 11:15:02]23268: WAF :: fetched 1 new logs [01-08-2022 11:16:01]29152: WAF :: fetched 5 new logs [01-08-2022 11:17:02]2562: WAF :: fetched 3 new logs [01-08-2022 11:19:02]14100: WAF :: fetched 2 new logs [01-08-2022 11:21:02]25914: WAF :: fetched 7 new logs [01-08-2022 11:22:01]31644: WAF :: fetched 2 new logs [01-08-2022 11:23:02]5101: WAF :: fetched 1 new logs [01-08-2022 11:26:01]22572: WAF :: fetched 2 new logs [01-08-2022 11:27:01]28336: WAF :: fetched 2 new logs [01-08-2022 11:28:01]1537: WAF :: fetched 2 new logs [01-08-2022 11:29:01]7856: WAF :: fetched 8 new logs [01-08-2022 11:30:02]13358: WAF :: fetched 5 new logs [01-08-2022 11:31:01]19675: WAF :: fetched 4 new logs [01-08-2022 11:32:02]25277: WAF :: fetched 1 new logs [01-08-2022 11:33:01]31536: WAF :: fetched 1 new logs [01-08-2022 11:35:01]10878: WAF :: fetched 3 new logs [01-08-2022 11:36:01]16997: WAF :: fetched 8 new logs [01-08-2022 11:37:02]22836: httpd.conf changed. Refreshing watchlist. [01-08-2022 11:37:02]22837: WAF :: fetched 7 new logs [01-08-2022 11:38:01]28672: WAF :: fetched 4 new logs [01-08-2022 11:39:02]2342: WAF :: fetched 11 new logs [01-08-2022 11:40:01]8270: WAF :: fetched 1 new logs [01-08-2022 11:41:01]14272: WAF :: fetched 2 new logs [01-08-2022 11:41:01]14272: Checking for user cron vulnerabilities [01-08-2022 11:42:01]19839: WAF :: fetched 7 new logs [01-08-2022 11:43:02]26028: WAF :: fetched 7 new logs [01-08-2022 11:44:01]31754: Checking ditributed CMS bruteforce attacks [01-08-2022 11:44:01]31754: WAF :: fetched 1 new logs [01-08-2022 11:45:01]5322: WAF :: fetched 4 new logs [01-08-2022 11:47:02]17160: WAF :: fetched 1 new logs [01-08-2022 11:49:01]28572: WAF :: fetched 2 new logs [01-08-2022 11:50:01]1613: WAF :: fetched 5 new logs [01-08-2022 11:51:02]8025: WAF :: fetched 6 new logs [01-08-2022 11:52:01]13774: WAF :: fetched 4 new logs [01-08-2022 11:53:02]19618: WAF :: fetched 15 new logs [01-08-2022 11:54:01]25321: WAF :: fetched 2 new logs [01-08-2022 11:55:02]31261: WAF :: fetched 2 new logs [01-08-2022 11:56:02]4929: WAF :: fetched 1 new logs [01-08-2022 11:57:02]10811: WAF :: fetched 1 new logs [01-08-2022 11:58:01]16822: WAF :: fetched 4 new logs [01-08-2022 12:00:01]28471: WAF :: fetched 1 new logs [01-08-2022 12:02:01]8556: WAF :: fetched 1 new logs [01-08-2022 12:03:02]14454: WAF :: fetched 16 new logs [01-08-2022 12:04:01]20482: WAF :: fetched 3 new logs [01-08-2022 12:05:02]27214: WAF :: fetched 1 new logs [01-08-2022 12:06:01]706: WAF :: fetched 1 new logs [01-08-2022 12:07:01]6768: WAF :: fetched 3 new logs [01-08-2022 12:08:02]12587: WAF :: fetched 4 new logs [01-08-2022 12:09:01]18390: WAF :: fetched 5 new logs [01-08-2022 12:10:02]24369: WAF :: fetched 6 new logs [01-08-2022 12:11:02]30403: WAF :: fetched 2 new logs [01-08-2022 12:12:01]3885: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659366721 [01-08-2022 12:12:01]3885: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 12:12:03]3885: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 12:12:03]3885: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-1212/20220801-121201-YuftQYarMKWEzzHZv8nXrwAAAB8 [01-08-2022 12:12:03]3885: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 12:12:04]3885: WAF :: fetched 4 new logs [01-08-2022 12:13:02]9592: WAF :: fetched 2 new logs [01-08-2022 12:14:01]16043: WAF :: fetched 1 new logs [01-08-2022 12:15:02]21581: WAF :: fetched 1 new logs [01-08-2022 12:16:01]27984: WAF :: fetched 2 new logs [01-08-2022 12:17:02]1217: WAF :: fetched 3 new logs [01-08-2022 12:18:01]7576: WAF :: fetched 2 new logs [01-08-2022 12:21:01]25031: WAF :: fetched 3 new logs [01-08-2022 12:22:02]30911: WAF :: fetched 2 new logs [01-08-2022 12:24:02]9818: WAF :: fetched 1 new logs [01-08-2022 12:25:01]16089: WAF :: fetched 1 new logs [01-08-2022 12:26:02]22051: WAF :: fetched 1 new logs [01-08-2022 12:28:02]1282: WAF :: fetched 1 new logs [01-08-2022 12:31:01]18931: WAF :: fetched 9 new logs [01-08-2022 12:34:02]4067: WAF :: fetched 5 new logs [01-08-2022 12:35:01]9865: WAF :: fetched 1 new logs [01-08-2022 12:36:02]15897: WAF :: fetched 1 new logs [01-08-2022 12:37:01]21611: WAF :: fetched 1 new logs [01-08-2022 12:38:02]27443: WAF :: fetched 1 new logs [01-08-2022 12:41:01]12721: Checking for user cron vulnerabilities [01-08-2022 12:42:01]18448: WAF :: fetched 1 new logs [01-08-2022 12:43:01]23872: WAF :: fetched 3 new logs [01-08-2022 12:44:01]30020: Checking ditributed CMS bruteforce attacks [01-08-2022 12:45:01]: Checking for software updates [01-08-2022 12:45:01]3351: WAF :: fetched 1 new logs [01-08-2022 12:47:01]15234: WAF :: fetched 1 new logs [01-08-2022 12:49:02]26843: WAF :: fetched 1 new logs [01-08-2022 12:50:01]565: WAF :: fetched 5 new logs [01-08-2022 12:52:01]12411: WAF :: fetched 2 new logs [01-08-2022 12:53:02]17877: WAF :: fetched 1 new logs [01-08-2022 12:54:01]24012: WAF :: fetched 4 new logs [01-08-2022 12:55:02]29823: WAF :: fetched 1 new logs [01-08-2022 12:56:01]3454: WAF :: fetched 2 new logs [01-08-2022 12:58:01]14860: WAF :: fetched 5 new logs [01-08-2022 13:01:02]32333: WAF :: fetched 1 new logs [01-08-2022 13:03:02]11265: WAF :: fetched 2 new logs [01-08-2022 13:06:01]28902: WAF :: fetched 2 new logs [01-08-2022 13:07:01]1903: WAF :: fetched 2 new logs [01-08-2022 13:10:02]19341: WAF :: fetched 1 new logs [01-08-2022 13:11:01]25161: WAF :: fetched 2 new logs [01-08-2022 13:12:02]30947: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659370322 [01-08-2022 13:12:02]30947: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 13:12:04]30947: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 13:12:04]30947: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-1312/20220801-131202-Yuf7Uk7MNrOc6BawlyZ7AQAAAA4 [01-08-2022 13:12:04]30947: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 13:12:05]30947: WAF :: fetched 3 new logs [01-08-2022 13:14:02]10069: WAF :: fetched 2 new logs [01-08-2022 13:15:01]15724: WAF :: fetched 1 new logs [01-08-2022 13:16:02]21647: WAF :: fetched 1 new logs [01-08-2022 13:17:01]27312: WAF :: fetched 1 new logs [01-08-2022 13:18:02]771: WAF :: fetched 2 new logs [01-08-2022 13:19:01]6568: WAF :: fetched 2 new logs [01-08-2022 13:20:02]12412: WAF :: fetched 4 new logs [01-08-2022 13:21:01]18280: WAF :: fetched 1 new logs [01-08-2022 13:22:02]24045: WAF :: fetched 1 new logs [01-08-2022 13:23:01]29748: WAF :: fetched 1 new logs [01-08-2022 13:26:01]14899: WAF :: fetched 1 new logs [01-08-2022 13:33:02]22899: WAF :: fetched 5 new logs [01-08-2022 13:34:01]28560: WAF :: fetched 2 new logs [01-08-2022 13:35:02]1977: WAF :: fetched 14 new logs [01-08-2022 13:36:02]7930: WAF :: fetched 2 new logs [01-08-2022 13:37:01]13585: WAF :: fetched 3 new logs [01-08-2022 13:38:01]19347: WAF :: fetched 1 new logs [01-08-2022 13:39:01]25077: WAF :: fetched 5 new logs [01-08-2022 13:40:02]30858: WAF :: fetched 1 new logs [01-08-2022 13:41:01]4360: WAF :: fetched 1 new logs [01-08-2022 13:41:01]4360: Checking for user cron vulnerabilities [01-08-2022 13:44:01]21953: Checking ditributed CMS bruteforce attacks [01-08-2022 13:44:01]21953: WAF :: fetched 5 new logs [01-08-2022 13:45:01]: Checking for definition updates [01-08-2022 13:45:01]27765: WAF :: fetched 2 new logs [01-08-2022 13:46:01]1343: WAF :: fetched 1 new logs [01-08-2022 13:47:02]7247: WAF :: fetched 1 new logs [01-08-2022 13:48:02]13001: WAF :: fetched 7 new logs [01-08-2022 13:49:01]18819: WAF :: fetched 2 new logs [01-08-2022 13:50:01]24547: WAF :: fetched 1 new logs [01-08-2022 13:51:01]30464: WAF :: fetched 1 new logs [01-08-2022 13:53:01]9746: WAF :: fetched 8 new logs [01-08-2022 13:54:01]15480: WAF :: fetched 40 new logs [01-08-2022 13:55:01]21122: WAF :: fetched 53 new logs [01-08-2022 13:56:01]26939: WAF :: fetched 51 new logs [01-08-2022 13:57:01]32694: WAF :: fetched 51 new logs [01-08-2022 13:58:01]6215: WAF :: fetched 19 new logs [01-08-2022 13:59:01]11958: WAF :: fetched 2 new logs [01-08-2022 14:01:02]23835: WAF :: fetched 2 new logs [01-08-2022 14:03:01]3323: WAF :: fetched 1 new logs [01-08-2022 14:04:02]9285: WAF :: fetched 1 new logs [01-08-2022 14:05:01]15125: WAF :: fetched 6 new logs [01-08-2022 14:10:01]11979: WAF :: fetched 1 new logs [01-08-2022 14:11:01]17987: WAF :: fetched 2 new logs [01-08-2022 14:12:02]23836: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659373922 [01-08-2022 14:12:02]23836: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 14:12:04]23836: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 14:12:04]23836: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-1412/20220801-141202-YugJYm8s6MTHbAhEWEMD8wAAAA0 [01-08-2022 14:12:04]23836: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 14:12:04]23836: WAF :: fetched 1 new logs [01-08-2022 14:14:01]3322: WAF :: fetched 4 new logs [01-08-2022 14:15:01]8762: WAF :: fetched 1 new logs [01-08-2022 14:16:01]15153: WAF :: fetched 5 new logs [01-08-2022 14:17:01]20861: WAF :: fetched 1 new logs [01-08-2022 14:18:01]26563: WAF :: fetched 6 new logs [01-08-2022 14:19:01]32326: WAF :: fetched 4 new logs [01-08-2022 14:20:01]5840: WAF :: fetched 4 new logs [01-08-2022 14:21:01]11859: WAF :: fetched 1 new logs [01-08-2022 14:22:01]17582: WAF :: fetched 5 new logs [01-08-2022 14:24:01]29071: WAF :: fetched 1 new logs [01-08-2022 14:27:02]14303: WAF :: fetched 1 new logs [01-08-2022 14:28:01]20042: WAF :: fetched 5 new logs [01-08-2022 14:29:01]25532: WAF :: fetched 2 new logs [01-08-2022 14:32:02]11135: WAF :: fetched 1 new logs [01-08-2022 14:33:02]16866: WAF :: fetched 2 new logs [01-08-2022 14:35:02]28231: WAF :: fetched 2 new logs [01-08-2022 14:36:02]1696: WAF :: fetched 2 new logs [01-08-2022 14:39:02]18872: WAF :: fetched 1 new logs [01-08-2022 14:40:02]24538: WAF :: fetched 1 new logs [01-08-2022 14:41:02]30465: WAF :: fetched 1 new logs [01-08-2022 14:41:02]30465: Checking for user cron vulnerabilities [01-08-2022 14:43:02]9556: WAF :: fetched 1 new logs [01-08-2022 14:44:02]15263: Checking ditributed CMS bruteforce attacks [01-08-2022 14:44:02]15263: WAF :: fetched 3 new logs [01-08-2022 14:45:02]21002: WAF :: fetched 1 new logs [01-08-2022 14:47:02]32723: WAF :: fetched 2 new logs [01-08-2022 14:48:02]6176: WAF :: fetched 40 new logs [01-08-2022 14:49:02]11932: WAF :: fetched 70 new logs [01-08-2022 14:50:02]17765: WAF :: fetched 70 new logs [01-08-2022 14:52:02]29494: WAF :: fetched 2 new logs [01-08-2022 14:53:03]3054: Updated license status via CDN [01-08-2022 14:54:02]8809: WAF :: fetched 1 new logs [01-08-2022 14:55:02]14684: WAF :: fetched 5 new logs [01-08-2022 14:57:01]25994: WAF :: fetched 1 new logs [01-08-2022 15:00:02]11552: WAF :: fetched 2 new logs [01-08-2022 15:01:01]17892: Reseting cPGuard inotify settings [01-08-2022 15:01:01]17904: WAF :: fetched 1 new logs [01-08-2022 15:02:01]23861: WAF :: fetched 5 new logs [01-08-2022 15:03:01]29573: WAF :: fetched 9 new logs [01-08-2022 15:05:02]9135: WAF :: fetched 1 new logs [01-08-2022 15:06:01]15447: WAF :: fetched 1 new logs [01-08-2022 15:07:02]21111: WAF :: fetched 5 new logs [01-08-2022 15:08:01]27187: WAF :: fetched 1 new logs [01-08-2022 15:09:02]32637: WAF :: fetched 1 new logs [01-08-2022 15:10:01]6556: WAF :: fetched 2 new logs [01-08-2022 15:12:01]18530: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659377521 [01-08-2022 15:12:01]18530: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 15:12:03]18530: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 15:12:04]18530: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-1512/20220801-151201-YugXcUwH5WKNm4AA8DuUfQAAAAA [01-08-2022 15:12:04]18530: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 15:12:04]18530: WAF :: fetched 1 new logs [01-08-2022 15:13:02]24420: WAF :: fetched 1 new logs [01-08-2022 15:14:02]30229: WAF :: fetched 1 new logs [01-08-2022 15:15:02]3808: httpd.conf changed. Refreshing watchlist. [01-08-2022 15:16:01]9818: WAF :: fetched 2 new logs [01-08-2022 15:17:01]15823: WAF :: fetched 6 new logs [01-08-2022 15:18:01]21794: WAF :: fetched 4 new logs [01-08-2022 15:19:02]27465: httpd.conf changed. Refreshing watchlist. [01-08-2022 15:19:02]27451: WAF :: fetched 2 new logs [01-08-2022 15:20:01]1288: WAF :: fetched 2 new logs [01-08-2022 15:21:01]7278: WAF :: fetched 12 new logs [01-08-2022 15:22:01]13101: WAF :: fetched 4 new logs [01-08-2022 15:23:02]18682: httpd.conf changed. Refreshing watchlist. [01-08-2022 15:23:02]18664: WAF :: fetched 1 new logs [01-08-2022 15:24:01]24870: WAF :: fetched 1 new logs [01-08-2022 15:25:02]30410: WAF :: fetched 2 new logs [01-08-2022 15:26:01]4363: WAF :: fetched 6 new logs [01-08-2022 15:27:02]10240: WAF :: fetched 3 new logs [01-08-2022 15:28:01]15953: WAF :: fetched 2 new logs [01-08-2022 15:29:02]21702: WAF :: fetched 1 new logs [01-08-2022 15:31:02]927: WAF :: fetched 17 new logs [01-08-2022 15:32:01]6835: WAF :: fetched 4 new logs [01-08-2022 15:35:01]24227: WAF :: fetched 6 new logs [01-08-2022 15:36:02]29916: WAF :: fetched 1 new logs [01-08-2022 15:38:02]9658: WAF :: fetched 5 new logs [01-08-2022 15:40:01]21151: WAF :: fetched 1 new logs [01-08-2022 15:41:01]26753: WAF :: fetched 2 new logs [01-08-2022 15:41:01]26753: Checking for user cron vulnerabilities [01-08-2022 15:43:02]6148: WAF :: fetched 1 new logs [01-08-2022 15:44:01]12288: Checking ditributed CMS bruteforce attacks [01-08-2022 15:46:01]24022: WAF :: fetched 1 new logs [01-08-2022 15:49:02]9186: WAF :: fetched 4 new logs [01-08-2022 15:50:02]14924: WAF :: fetched 2 new logs [01-08-2022 15:51:01]20802: WAF :: fetched 5 new logs [01-08-2022 15:52:02]26647: WAF :: fetched 5 new logs [01-08-2022 15:53:02]32436: WAF :: fetched 13 new logs [01-08-2022 15:54:01]5828: WAF :: fetched 2 new logs [01-08-2022 15:55:02]11766: WAF :: fetched 1 new logs [01-08-2022 15:56:01]17512: WAF :: fetched 6 new logs [01-08-2022 15:57:02]23338: WAF :: fetched 5 new logs [01-08-2022 15:59:01]2626: WAF :: fetched 2 new logs [01-08-2022 16:00:02]8150: WAF :: fetched 3 new logs [01-08-2022 16:03:01]25911: WAF :: fetched 3 new logs [01-08-2022 16:04:02]31664: WAF :: fetched 1 new logs [01-08-2022 16:05:01]5053: WAF :: fetched 2 new logs [01-08-2022 16:06:01]10876: WAF :: fetched 1 new logs [01-08-2022 16:07:02]16383: WAF :: fetched 2 new logs [01-08-2022 16:08:01]22411: WAF :: fetched 4 new logs [01-08-2022 16:09:02]27859: WAF :: fetched 1 new logs [01-08-2022 16:10:01]1662: WAF :: fetched 3 new logs [01-08-2022 16:11:02]7605: WAF :: fetched 2 new logs [01-08-2022 16:12:01]13422: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659381121 [01-08-2022 16:12:01]13422: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 16:12:03]13422: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 16:12:04]13422: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-1612/20220801-161201-YuglgQ-HeZE6YDjLTSVgVgAAAGA [01-08-2022 16:12:04]13422: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 16:12:04]13422: WAF :: fetched 4 new logs [01-08-2022 16:13:02]19206: WAF :: fetched 1 new logs [01-08-2022 16:14:01]24959: WAF :: fetched 2 new logs [01-08-2022 16:15:02]30829: WAF :: fetched 2 new logs [01-08-2022 16:16:01]4319: WAF :: fetched 1 new logs [01-08-2022 16:17:02]9878: WAF :: fetched 1 new logs [01-08-2022 16:18:01]16057: WAF :: fetched 2 new logs [01-08-2022 16:19:02]21981: WAF :: fetched 1 new logs [01-08-2022 16:20:02]27817: WAF :: fetched 1 new logs [01-08-2022 16:21:01]1385: WAF :: fetched 3 new logs [01-08-2022 16:22:01]7674: WAF :: fetched 8 new logs [01-08-2022 16:23:02]13701: WAF :: fetched 1 new logs [01-08-2022 16:25:02]25342: WAF :: fetched 2 new logs [01-08-2022 16:26:02]31118: WAF :: fetched 4 new logs [01-08-2022 16:27:01]4681: WAF :: fetched 2 new logs [01-08-2022 16:28:02]10110: WAF :: fetched 1 new logs [01-08-2022 16:30:02]22017: WAF :: fetched 1 new logs [01-08-2022 16:31:01]27925: WAF :: fetched 5 new logs [01-08-2022 16:32:02]1513: WAF :: fetched 1 new logs [01-08-2022 16:33:01]7280: WAF :: fetched 2 new logs [01-08-2022 16:34:02]12967: WAF :: fetched 1 new logs [01-08-2022 16:36:02]24567: WAF :: fetched 11 new logs [01-08-2022 16:37:01]30408: WAF :: fetched 1 new logs [01-08-2022 16:38:02]3716: WAF :: fetched 7 new logs [01-08-2022 16:39:01]9796: WAF :: fetched 3 new logs [01-08-2022 16:40:02]15250: WAF :: fetched 5 new logs [01-08-2022 16:41:01]21402: WAF :: fetched 7 new logs [01-08-2022 16:41:01]21402: Checking for user cron vulnerabilities [01-08-2022 16:42:02]26935: WAF :: fetched 5 new logs [01-08-2022 16:44:01]6161: Checking ditributed CMS bruteforce attacks [01-08-2022 16:44:02]6161: WAF :: fetched 4 new logs [01-08-2022 16:45:01]12353: WAF :: fetched 3 new logs [01-08-2022 16:46:02]18171: WAF :: fetched 2 new logs [01-08-2022 16:47:01]24006: WAF :: fetched 1 new logs [01-08-2022 16:48:02]29479: WAF :: fetched 2 new logs [01-08-2022 16:49:01]3285: WAF :: fetched 1 new logs [01-08-2022 16:51:01]14858: WAF :: fetched 4 new logs [01-08-2022 16:53:01]26293: WAF :: fetched 4 new logs [01-08-2022 16:54:02]31709: WAF :: fetched 13 new logs [01-08-2022 16:55:01]5516: WAF :: fetched 8 new logs [01-08-2022 16:56:02]10954: WAF :: fetched 14 new logs [01-08-2022 16:57:01]17158: WAF :: fetched 5 new logs [01-08-2022 16:58:02]22549: WAF :: fetched 1 new logs [01-08-2022 16:59:01]28574: WAF :: fetched 14 new logs [01-08-2022 17:02:02]13639: WAF :: fetched 86 new logs [01-08-2022 17:03:01]19297: WAF :: fetched 82 new logs [01-08-2022 17:04:02]25085: WAF :: fetched 45 new logs [01-08-2022 17:06:02]4388: WAF :: fetched 1 new logs [01-08-2022 17:07:01]10323: WAF :: fetched 1 new logs [01-08-2022 17:08:01]16315: WAF :: fetched 1 new logs [01-08-2022 17:11:01]2866: WAF :: fetched 2 new logs [01-08-2022 17:12:02]9139: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659384722 [01-08-2022 17:12:02]9139: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 17:12:04]9139: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 17:12:04]9139: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-1712/20220801-171202-YugzkoFgEWywnPE9eZyDcAAAABk [01-08-2022 17:12:04]9139: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 17:12:04]9139: WAF :: fetched 5 new logs [01-08-2022 17:13:01]15054: WAF :: fetched 1 new logs [01-08-2022 17:14:02]20949: WAF :: fetched 5 new logs [01-08-2022 17:15:01]27581: WAF :: fetched 6 new logs [01-08-2022 17:16:02]1394: WAF :: fetched 23 new logs [01-08-2022 17:17:01]7951: WAF :: fetched 55 new logs [01-08-2022 17:18:02]13698: WAF :: fetched 52 new logs [01-08-2022 17:19:01]19467: WAF :: fetched 44 new logs [01-08-2022 17:20:02]25367: WAF :: fetched 26 new logs [01-08-2022 17:21:01]31188: WAF :: fetched 2 new logs [01-08-2022 17:22:02]4822: WAF :: fetched 2 new logs [01-08-2022 17:23:01]10665: WAF :: fetched 7 new logs [01-08-2022 17:24:02]16376: WAF :: fetched 5 new logs [01-08-2022 17:25:01]22101: WAF :: fetched 3 new logs [01-08-2022 17:26:02]27981: WAF :: fetched 4 new logs [01-08-2022 17:27:01]1450: WAF :: fetched 2 new logs [01-08-2022 17:28:01]7371: WAF :: fetched 3 new logs [01-08-2022 17:29:02]13139: WAF :: fetched 1 new logs [01-08-2022 17:30:01]18892: WAF :: fetched 11 new logs [01-08-2022 17:31:02]24872: WAF :: fetched 10 new logs [01-08-2022 17:32:01]30600: WAF :: fetched 7 new logs [01-08-2022 17:33:02]4160: WAF :: fetched 7 new logs [01-08-2022 17:34:01]9840: WAF :: fetched 2 new logs [01-08-2022 17:38:01]481: WAF :: fetched 7 new logs [01-08-2022 17:39:02]6355: WAF :: fetched 2 new logs [01-08-2022 17:40:02]12068: WAF :: fetched 7 new logs [01-08-2022 17:41:01]17790: Checking for user cron vulnerabilities [01-08-2022 17:42:02]23243: WAF :: fetched 2 new logs [01-08-2022 17:44:01]2765: Checking ditributed CMS bruteforce attacks [01-08-2022 17:44:01]2765: WAF :: fetched 6 new logs [01-08-2022 17:45:02]8420: WAF :: fetched 1 new logs [01-08-2022 17:48:01]25598: WAF :: fetched 4 new logs [01-08-2022 17:49:02]31366: WAF :: fetched 3 new logs [01-08-2022 17:50:01]4656: WAF :: fetched 1 new logs [01-08-2022 17:52:01]16098: WAF :: fetched 2 new logs [01-08-2022 17:55:02]604: WAF :: fetched 5 new logs [01-08-2022 17:57:01]12845: WAF :: fetched 3 new logs [01-08-2022 17:59:01]24219: WAF :: fetched 1 new logs [01-08-2022 18:00:02]29730: WAF :: fetched 4 new logs [01-08-2022 18:06:02]32362: WAF :: fetched 9 new logs [01-08-2022 18:07:01]5817: WAF :: fetched 13 new logs [01-08-2022 18:08:02]11561: WAF :: fetched 1 new logs [01-08-2022 18:09:01]17298: WAF :: fetched 2 new logs [01-08-2022 18:10:02]23165: WAF :: fetched 1 new logs [01-08-2022 18:11:01]28885: WAF :: fetched 1 new logs [01-08-2022 18:12:01]2328: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659388321 [01-08-2022 18:12:01]2328: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 18:12:03]2328: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 18:12:03]2328: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-1812/20220801-181201-YuhBobL0Eu3MH_qpE2lKxgAAACs [01-08-2022 18:12:03]2328: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 18:12:04]2328: WAF :: fetched 1 new logs [01-08-2022 18:13:01]7924: WAF :: fetched 6 new logs [01-08-2022 18:14:01]14084: WAF :: fetched 2 new logs [01-08-2022 18:18:02]5312: WAF :: fetched 17 new logs [01-08-2022 18:19:01]11377: WAF :: fetched 2 new logs [01-08-2022 18:20:02]17150: WAF :: fetched 2 new logs [01-08-2022 18:21:01]22821: WAF :: fetched 1 new logs [01-08-2022 18:23:01]2110: WAF :: fetched 2 new logs [01-08-2022 18:25:01]13735: WAF :: fetched 6 new logs [01-08-2022 18:27:01]25289: WAF :: fetched 3 new logs [01-08-2022 18:29:01]4300: WAF :: fetched 1 new logs [01-08-2022 18:31:01]15825: WAF :: fetched 2 new logs [01-08-2022 18:32:02]21389: WAF :: fetched 4 new logs [01-08-2022 18:34:02]831: WAF :: fetched 5 new logs [01-08-2022 18:35:01]6637: WAF :: fetched 189 new logs [01-08-2022 18:36:02]12410: WAF :: fetched 1 new logs [01-08-2022 18:37:01]18097: WAF :: fetched 2 new logs [01-08-2022 18:38:02]23472: WAF :: fetched 2 new logs [01-08-2022 18:39:01]29493: WAF :: fetched 1 new logs [01-08-2022 18:41:01]8605: WAF :: fetched 3 new logs [01-08-2022 18:41:01]8605: Checking for user cron vulnerabilities [01-08-2022 18:42:02]14496: WAF :: fetched 1 new logs [01-08-2022 18:43:01]20150: WAF :: fetched 1 new logs [01-08-2022 18:44:01]25839: Checking ditributed CMS bruteforce attacks [01-08-2022 18:45:01]31544: WAF :: fetched 3 new logs [01-08-2022 18:47:01]11010: WAF :: fetched 2 new logs [01-08-2022 18:49:01]22621: WAF :: fetched 2 new logs [01-08-2022 18:50:02]28337: WAF :: fetched 1 new logs [01-08-2022 18:51:01]1678: WAF :: fetched 1 new logs [01-08-2022 18:53:01]13287: WAF :: fetched 3 new logs [01-08-2022 18:55:01]24752: WAF :: fetched 3 new logs [01-08-2022 18:57:01]3931: WAF :: fetched 1 new logs [01-08-2022 18:59:01]15510: WAF :: fetched 5 new logs [01-08-2022 19:00:01]20851: WAF :: fetched 14 new logs [01-08-2022 19:01:02]27018: WAF :: fetched 68 new logs [01-08-2022 19:02:01]309: WAF :: fetched 76 new logs [01-08-2022 19:03:02]6275: WAF :: fetched 27 new logs [01-08-2022 19:08:01]2135: WAF :: fetched 6 new logs [01-08-2022 19:09:02]7846: WAF :: fetched 1 new logs [01-08-2022 19:12:01]24839: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659391921 [01-08-2022 19:12:01]24839: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 19:12:03]24839: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 19:12:04]24839: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-1912/20220801-191201-YuhPsSyJRDtrSfzE6srHaQAAAD0 [01-08-2022 19:12:04]24839: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 19:12:04]24839: WAF :: fetched 5 new logs [01-08-2022 19:13:02]30255: WAF :: fetched 1 new logs [01-08-2022 19:14:01]4019: WAF :: fetched 7 new logs [01-08-2022 19:15:02]9688: WAF :: fetched 1 new logs [01-08-2022 19:16:01]15310: WAF :: fetched 1 new logs [01-08-2022 19:18:01]26581: WAF :: fetched 8 new logs [01-08-2022 19:19:02]32240: WAF :: fetched 4 new logs [01-08-2022 19:21:02]11235: WAF :: fetched 3 new logs [01-08-2022 19:22:01]16887: WAF :: fetched 4 new logs [01-08-2022 19:23:02]22617: WAF :: fetched 1 new logs [01-08-2022 19:24:01]28138: WAF :: fetched 1 new logs [01-08-2022 19:26:01]7119: WAF :: fetched 2 new logs [01-08-2022 19:27:02]12739: WAF :: fetched 3 new logs [01-08-2022 19:28:01]18372: WAF :: fetched 5 new logs [01-08-2022 19:29:02]23940: WAF :: fetched 1 new logs [01-08-2022 19:30:01]29528: WAF :: fetched 6 new logs [01-08-2022 19:31:01]2949: WAF :: fetched 1 new logs [01-08-2022 19:32:01]8427: WAF :: fetched 13 new logs [01-08-2022 19:33:01]14563: WAF :: fetched 4 new logs [01-08-2022 19:34:02]19937: WAF :: fetched 12 new logs [01-08-2022 19:35:01]26043: WAF :: fetched 6 new logs [01-08-2022 19:36:01]31873: WAF :: fetched 56 new logs [01-08-2022 19:37:02]5051: WAF :: fetched 78 new logs [01-08-2022 19:38:02]11241: WAF :: fetched 58 new logs [01-08-2022 19:39:01]16862: WAF :: fetched 4 new logs [01-08-2022 19:40:02]22600: WAF :: fetched 5 new logs [01-08-2022 19:41:01]28200: WAF :: fetched 3 new logs [01-08-2022 19:41:01]28200: Checking for user cron vulnerabilities [01-08-2022 19:42:02]1474: WAF :: fetched 1 new logs [01-08-2022 19:43:01]7203: WAF :: fetched 8 new logs [01-08-2022 19:44:01]12873: Checking ditributed CMS bruteforce attacks [01-08-2022 19:44:01]12873: WAF :: fetched 1 new logs [01-08-2022 19:45:01]: Checking for definition updates [01-08-2022 19:46:02]24208: WAF :: fetched 1 new logs [01-08-2022 19:47:01]29734: WAF :: fetched 1 new logs [01-08-2022 19:48:02]3393: WAF :: fetched 2 new logs [01-08-2022 19:49:01]8979: WAF :: fetched 1 new logs [01-08-2022 19:50:02]14697: WAF :: fetched 1 new logs [01-08-2022 19:53:01]31663: WAF :: fetched 5 new logs [01-08-2022 19:54:01]4762: WAF :: fetched 1 new logs [01-08-2022 19:55:01]10846: WAF :: fetched 2 new logs [01-08-2022 19:59:01]1705: WAF :: fetched 1 new logs [01-08-2022 20:00:02]7204: WAF :: fetched 4 new logs [01-08-2022 20:01:01]13363: WAF :: fetched 2 new logs [01-08-2022 20:02:02]18792: WAF :: fetched 3 new logs [01-08-2022 20:07:01]15408: WAF :: fetched 6 new logs [01-08-2022 20:09:01]26799: WAF :: fetched 1 new logs [01-08-2022 20:11:01]5812: WAF :: fetched 1 new logs [01-08-2022 20:12:01]11402: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659395521 [01-08-2022 20:12:01]11402: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 20:12:03]11402: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 20:12:04]11402: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-2012/20220801-201201-YuhdwTwj7pcvpGH1GvcJPgAAABM [01-08-2022 20:12:04]11402: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 20:12:04]11402: WAF :: fetched 6 new logs [01-08-2022 20:13:02]17203: WAF :: fetched 2 new logs [01-08-2022 20:15:02]28507: WAF :: fetched 6 new logs [01-08-2022 20:17:02]7562: WAF :: fetched 1 new logs [01-08-2022 20:18:01]13244: WAF :: fetched 4 new logs [01-08-2022 20:19:02]18911: WAF :: fetched 1 new logs [01-08-2022 20:20:01]24526: WAF :: fetched 13 new logs [01-08-2022 20:21:02]29971: WAF :: fetched 6 new logs [01-08-2022 20:22:01]3646: WAF :: fetched 5 new logs [01-08-2022 20:23:01]9079: WAF :: fetched 7 new logs [01-08-2022 20:24:01]15084: WAF :: fetched 10 new logs [01-08-2022 20:25:01]20428: WAF :: fetched 6 new logs [01-08-2022 20:26:02]26488: WAF :: fetched 3 new logs [01-08-2022 20:27:01]32108: WAF :: fetched 6 new logs [01-08-2022 20:28:01]5541: WAF :: fetched 11 new logs [01-08-2022 20:29:01]10889: WAF :: fetched 2 new logs [01-08-2022 20:30:02]16918: WAF :: fetched 9 new logs [01-08-2022 20:31:01]22577: WAF :: fetched 2 new logs [01-08-2022 20:32:01]28291: WAF :: fetched 1 new logs [01-08-2022 20:33:01]1627: WAF :: fetched 2 new logs [01-08-2022 20:35:01]13068: WAF :: fetched 13 new logs [01-08-2022 20:36:02]18668: WAF :: fetched 2 new logs [01-08-2022 20:37:01]24691: WAF :: fetched 1 new logs [01-08-2022 20:38:02]30140: WAF :: fetched 1 new logs [01-08-2022 20:40:02]9638: WAF :: fetched 1 new logs [01-08-2022 20:41:01]15279: WAF :: fetched 2 new logs [01-08-2022 20:41:01]15279: Checking for user cron vulnerabilities [01-08-2022 20:43:01]26583: WAF :: fetched 1 new logs [01-08-2022 20:44:01]32285: Checking ditributed CMS bruteforce attacks [01-08-2022 20:45:01]5675: WAF :: fetched 6 new logs [01-08-2022 20:46:02]11442: WAF :: fetched 5 new logs [01-08-2022 20:48:02]22806: WAF :: fetched 2 new logs [01-08-2022 20:49:02]28455: WAF :: fetched 3 new logs [01-08-2022 20:50:01]1701: WAF :: fetched 6 new logs [01-08-2022 20:52:02]13141: WAF :: fetched 2 new logs [01-08-2022 20:53:02]18796: WAF :: fetched 5 new logs [01-08-2022 20:54:01]24335: WAF :: fetched 1 new logs [01-08-2022 20:55:02]30000: WAF :: fetched 3 new logs [01-08-2022 20:56:01]3423: WAF :: fetched 2 new logs [01-08-2022 20:58:01]14683: WAF :: fetched 1 new logs [01-08-2022 20:59:02]20313: WAF :: fetched 4 new logs [01-08-2022 21:00:01]25550: WAF :: fetched 2 new logs [01-08-2022 21:01:02]31803: WAF :: fetched 1 new logs [01-08-2022 21:02:01]5135: WAF :: fetched 4 new logs [01-08-2022 21:03:02]10913: WAF :: fetched 6 new logs [01-08-2022 21:04:01]16497: WAF :: fetched 2 new logs [01-08-2022 21:05:02]22176: WAF :: fetched 4 new logs [01-08-2022 21:06:01]27889: WAF :: fetched 1 new logs [01-08-2022 21:08:01]6875: WAF :: fetched 1 new logs [01-08-2022 21:11:01]24017: WAF :: fetched 1 new logs [01-08-2022 21:12:01]29474: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659399121 [01-08-2022 21:12:01]29474: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 21:12:03]29474: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 21:12:04]29474: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-2112/20220801-211201-Yuhr0XvvRn7CJwW5dtVlSwAAABg [01-08-2022 21:12:04]29474: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 21:12:04]29474: WAF :: fetched 1 new logs [01-08-2022 21:13:02]3415: WAF :: fetched 1 new logs [01-08-2022 21:15:02]14566: WAF :: fetched 1 new logs [01-08-2022 21:19:02]4926: WAF :: fetched 2 new logs [01-08-2022 21:24:02]1881: WAF :: fetched 6 new logs [01-08-2022 21:27:02]19194: WAF :: fetched 1 new logs [01-08-2022 21:32:02]15866: WAF :: fetched 1 new logs [01-08-2022 21:35:02]607: WAF :: fetched 6 new logs [01-08-2022 21:36:02]6631: WAF :: fetched 2 new logs [01-08-2022 21:37:01]12222: WAF :: fetched 8 new logs [01-08-2022 21:40:01]29346: WAF :: fetched 2 new logs [01-08-2022 21:41:02]3359: WAF :: fetched 3 new logs [01-08-2022 21:41:02]3359: Checking for user cron vulnerabilities [01-08-2022 21:42:02]8995: WAF :: fetched 13 new logs [01-08-2022 21:43:01]14675: WAF :: fetched 5 new logs [01-08-2022 21:44:01]20197: Checking ditributed CMS bruteforce attacks [01-08-2022 21:44:01]20197: WAF :: fetched 2 new logs [01-08-2022 21:45:01]26125: WAF :: fetched 2 new logs [01-08-2022 21:47:01]6126: WAF :: fetched 1 new logs [01-08-2022 21:48:02]12086: WAF :: fetched 1 new logs [01-08-2022 21:49:01]17738: WAF :: fetched 2 new logs [01-08-2022 21:50:02]23573: WAF :: fetched 3 new logs [01-08-2022 21:51:01]29418: WAF :: fetched 8 new logs [01-08-2022 21:52:02]3042: WAF :: fetched 1 new logs [01-08-2022 21:54:02]14832: WAF :: fetched 15 new logs [01-08-2022 21:55:01]20504: WAF :: fetched 2 new logs [01-08-2022 21:56:02]26313: WAF :: fetched 1 new logs [01-08-2022 21:58:01]5228: WAF :: fetched 2 new logs [01-08-2022 21:59:01]10857: WAF :: fetched 14 new logs [01-08-2022 22:00:02]16162: WAF :: fetched 2 new logs [01-08-2022 22:02:02]27962: WAF :: fetched 2 new logs [01-08-2022 22:03:01]1228: WAF :: fetched 2 new logs [01-08-2022 22:05:01]12494: WAF :: fetched 1 new logs [01-08-2022 22:06:02]18254: WAF :: fetched 2 new logs [01-08-2022 22:07:09]23838: Performing Domain reputation checks [01-08-2022 22:09:01]2799: WAF :: fetched 5 new logs [01-08-2022 22:12:02]20047: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659402722 [01-08-2022 22:12:02]20047: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 22:12:04]20047: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 22:12:04]20047: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-2212/20220801-221202-Yuh54h3LfXL3-70gskUErwAAABo [01-08-2022 22:12:04]20047: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 22:12:04]20047: WAF :: fetched 2 new logs [01-08-2022 22:14:01]31678: WAF :: fetched 2 new logs [01-08-2022 22:17:01]16331: WAF :: fetched 2 new logs [01-08-2022 22:19:01]27755: WAF :: fetched 2 new logs [01-08-2022 22:21:01]6658: WAF :: fetched 1 new logs [01-08-2022 22:22:01]11961: WAF :: fetched 1 new logs [01-08-2022 22:24:01]23326: WAF :: fetched 7 new logs [01-08-2022 22:25:02]29348: WAF :: fetched 2 new logs [01-08-2022 22:27:01]8252: WAF :: fetched 2 new logs [01-08-2022 22:29:02]19692: WAF :: fetched 1 new logs [01-08-2022 22:31:02]30951: WAF :: fetched 3 new logs [01-08-2022 22:32:01]4255: WAF :: fetched 1 new logs [01-08-2022 22:33:02]10161: WAF :: fetched 1 new logs [01-08-2022 22:41:02]23025: Checking for user cron vulnerabilities [01-08-2022 22:43:02]2043: WAF :: fetched 2 new logs [01-08-2022 22:44:01]7708: Checking ditributed CMS bruteforce attacks [01-08-2022 22:44:01]7708: WAF :: fetched 3 new logs [01-08-2022 22:45:02]13429: WAF :: fetched 5 new logs [01-08-2022 22:46:01]19120: WAF :: fetched 6 new logs [01-08-2022 22:47:01]24784: WAF :: fetched 2 new logs [01-08-2022 22:48:02]30497: WAF :: fetched 3 new logs [01-08-2022 22:49:01]3799: WAF :: fetched 3 new logs [01-08-2022 22:50:01]9367: WAF :: fetched 1 new logs [01-08-2022 22:51:01]14739: WAF :: fetched 1 new logs [01-08-2022 22:53:01]26593: WAF :: fetched 15 new logs [01-08-2022 22:55:01]5590: WAF :: fetched 1 new logs [01-08-2022 22:56:02]11435: WAF :: fetched 10 new logs [01-08-2022 22:57:01]17076: WAF :: fetched 1 new logs [01-08-2022 22:58:02]22852: WAF :: fetched 4 new logs [01-08-2022 22:59:01]28451: WAF :: fetched 2 new logs [01-08-2022 23:00:02]1489: WAF :: fetched 2 new logs [01-08-2022 23:02:02]13378: WAF :: fetched 3 new logs [01-08-2022 23:03:01]19033: WAF :: fetched 1 new logs [01-08-2022 23:04:02]24660: WAF :: fetched 1 new logs [01-08-2022 23:05:01]30270: WAF :: fetched 8 new logs [01-08-2022 23:07:34]9515: Performed RBL check for 23.111.136.34. [01-08-2022 23:08:02]14741: WAF :: fetched 3 new logs [01-08-2022 23:09:01]20736: WAF :: fetched 3 new logs [01-08-2022 23:10:02]26471: WAF :: fetched 5 new logs [01-08-2022 23:11:01]32059: WAF :: fetched 4 new logs [01-08-2022 23:12:02]5417: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659406322 [01-08-2022 23:12:02]5417: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [01-08-2022 23:12:04]5417: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [01-08-2022 23:12:04]5417: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220801/20220801-2312/20220801-231202-YuiH8ncMaByHBTm8EGSiNwAAABY [01-08-2022 23:12:04]5417: WAF :: No suitable log file found. Using SQLite.. [01-08-2022 23:12:05]5417: WAF :: fetched 3 new logs [01-08-2022 23:13:01]11004: WAF :: fetched 2 new logs [01-08-2022 23:14:02]16680: WAF :: fetched 2 new logs [01-08-2022 23:15:01]22226: WAF :: fetched 1 new logs [01-08-2022 23:18:02]6553: WAF :: fetched 1 new logs [01-08-2022 23:19:01]12536: WAF :: fetched 2 new logs [01-08-2022 23:20:01]17886: WAF :: fetched 5 new logs [01-08-2022 23:24:01]8402: WAF :: fetched 1 new logs [01-08-2022 23:26:01]19656: WAF :: fetched 1 new logs [01-08-2022 23:28:01]30838: WAF :: fetched 6 new logs [01-08-2022 23:30:01]9784: WAF :: fetched 1 new logs [01-08-2022 23:31:02]15169: WAF :: fetched 7 new logs [01-08-2022 23:34:01]32458: WAF :: fetched 1 new logs [01-08-2022 23:36:01]11562: WAF :: fetched 2 new logs [01-08-2022 23:37:02]16847: WAF :: fetched 2 new logs [01-08-2022 23:38:01]22774: WAF :: fetched 1 new logs [01-08-2022 23:39:02]28175: WAF :: fetched 1 new logs [01-08-2022 23:41:02]7605: WAF :: fetched 3 new logs [01-08-2022 23:41:02]7605: Checking for user cron vulnerabilities [01-08-2022 23:42:01]13155: WAF :: fetched 1 new logs [01-08-2022 23:44:01]24430: Checking ditributed CMS bruteforce attacks [01-08-2022 23:44:01]24430: WAF :: fetched 1 new logs [01-08-2022 23:45:02]30104: WAF :: fetched 2 new logs [01-08-2022 23:47:02]9030: WAF :: fetched 3 new logs [01-08-2022 23:48:01]14530: WAF :: fetched 1 new logs [01-08-2022 23:51:01]31609: WAF :: fetched 3 new logs [01-08-2022 23:52:02]4922: WAF :: fetched 1 new logs [01-08-2022 23:53:01]10555: WAF :: fetched 1 new logs [01-08-2022 23:56:02]27719: WAF :: fetched 1 new logs [01-08-2022 23:58:02]6681: WAF :: fetched 3 new logs [01-08-2022 23:58:02]6698: httpd.conf changed. Refreshing watchlist. [01-08-2022 23:59:01]12268: WAF :: fetched 2 new logs [02-08-2022 00:01:01]23946: httpd.conf changed. Refreshing watchlist. [02-08-2022 00:01:02]23941: WAF :: fetched 2 new logs [02-08-2022 00:01:05]23941: Sending daily report for August 2, 2022 [02-08-2022 00:04:01]8654: WAF :: fetched 1 new logs [02-08-2022 00:05:02]13934: WAF :: fetched 12 new logs [02-08-2022 00:05:02]13934: Deleted 0 entries older than 6 MONTH from scanner_logs [02-08-2022 00:05:02]13934: Deleted 0 files from Quarantine [02-08-2022 00:06:01]20025: WAF :: fetched 1 new logs [02-08-2022 00:07:02]25322: WAF :: fetched 1 new logs [02-08-2022 00:12:01]21448: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659409921 [02-08-2022 00:12:01]21448: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 00:12:03]21448: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 00:12:04]21448: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-0012/20220802-001201-YuiWAeKt_3Ene5G2wEC0hwAAAAM [02-08-2022 00:12:04]21448: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 00:12:04]21448: WAF :: fetched 1 new logs [02-08-2022 00:13:02]27087: WAF :: fetched 1 new logs [02-08-2022 00:14:01]317: WAF :: fetched 7 new logs [02-08-2022 00:15:02]6108: WAF :: fetched 4 new logs [02-08-2022 00:16:01]11801: WAF :: fetched 1 new logs [02-08-2022 00:17:02]17417: WAF :: fetched 1 new logs [02-08-2022 00:18:01]23025: WAF :: fetched 6 new logs [02-08-2022 00:19:02]28836: WAF :: fetched 1 new logs [02-08-2022 00:21:02]7881: WAF :: fetched 2 new logs [02-08-2022 00:23:02]19101: WAF :: fetched 7 new logs [02-08-2022 00:24:01]24713: WAF :: fetched 1 new logs [02-08-2022 00:25:02]30411: WAF :: fetched 3 new logs [02-08-2022 00:26:01]3747: WAF :: fetched 1 new logs [02-08-2022 00:27:02]9358: WAF :: fetched 1 new logs [02-08-2022 00:29:01]20552: WAF :: fetched 7 new logs [02-08-2022 00:32:01]5046: WAF :: fetched 2 new logs [02-08-2022 00:36:01]27806: WAF :: fetched 2 new logs [02-08-2022 00:38:02]6782: WAF :: fetched 1 new logs [02-08-2022 00:39:02]12408: WAF :: fetched 1 new logs [02-08-2022 00:41:02]23604: WAF :: fetched 3 new logs [02-08-2022 00:41:02]23604: Checking for user cron vulnerabilities [02-08-2022 00:43:02]2396: WAF :: fetched 2 new logs [02-08-2022 00:44:01]8106: Checking ditributed CMS bruteforce attacks [02-08-2022 00:44:01]8106: WAF :: fetched 5 new logs [02-08-2022 00:45:01]: Checking for software updates [02-08-2022 00:45:02]13787: WAF :: fetched 1 new logs [02-08-2022 00:47:02]25139: WAF :: fetched 4 new logs [02-08-2022 00:48:01]30710: WAF :: fetched 2 new logs [02-08-2022 00:49:02]4201: WAF :: fetched 5 new logs [02-08-2022 00:50:01]9732: WAF :: fetched 1 new logs [02-08-2022 00:51:02]15459: WAF :: fetched 1 new logs [02-08-2022 00:53:02]26632: WAF :: fetched 1 new logs [02-08-2022 00:54:01]32412: WAF :: fetched 13 new logs [02-08-2022 00:57:02]17241: WAF :: fetched 1 new logs [02-08-2022 00:58:01]22771: WAF :: fetched 1 new logs [02-08-2022 00:59:02]28434: WAF :: fetched 4 new logs [02-08-2022 01:02:01]14453: WAF :: fetched 1 new logs [02-08-2022 01:06:01]6577: WAF :: fetched 2 new logs [02-08-2022 01:09:02]24062: WAF :: fetched 6 new logs [02-08-2022 01:10:01]30016: WAF :: fetched 4 new logs [02-08-2022 01:11:02]3560: WAF :: fetched 15 new logs [02-08-2022 01:12:02]9337: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659413522 [02-08-2022 01:12:02]9337: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 01:12:04]9337: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 01:12:04]9337: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-0112/20220802-011202-YuikEmvxWWALmAvnXxhdGwAAABM [02-08-2022 01:12:04]9337: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 01:12:04]9337: WAF :: fetched 11 new logs [02-08-2022 01:14:02]21241: WAF :: fetched 2 new logs [02-08-2022 01:16:01]913: WAF :: fetched 16 new logs [02-08-2022 01:17:02]7193: WAF :: fetched 4 new logs [02-08-2022 01:18:01]13078: WAF :: fetched 1 new logs [02-08-2022 01:20:01]25052: WAF :: fetched 1 new logs [02-08-2022 01:21:02]31026: WAF :: fetched 2 new logs [02-08-2022 01:22:01]4441: WAF :: fetched 6 new logs [02-08-2022 01:23:01]10674: WAF :: fetched 2 new logs [02-08-2022 01:24:01]16270: WAF :: fetched 2 new logs [02-08-2022 01:26:01]28091: WAF :: fetched 2 new logs [02-08-2022 01:27:01]2020: WAF :: fetched 1 new logs [02-08-2022 01:28:01]7441: WAF :: fetched 2 new logs [02-08-2022 01:29:01]13540: WAF :: fetched 1 new logs [02-08-2022 01:32:02]30447: WAF :: fetched 2 new logs [02-08-2022 01:33:02]4322: WAF :: fetched 5 new logs [02-08-2022 01:34:01]10023: WAF :: fetched 3 new logs [02-08-2022 01:36:01]21458: WAF :: fetched 1 new logs [02-08-2022 01:37:02]27239: WAF :: fetched 2 new logs [02-08-2022 01:38:01]405: WAF :: fetched 1 new logs [02-08-2022 01:39:02]6398: WAF :: fetched 1 new logs [02-08-2022 01:41:01]17941: WAF :: fetched 1 new logs [02-08-2022 01:41:01]17941: Checking for user cron vulnerabilities [02-08-2022 01:42:01]23797: WAF :: fetched 5 new logs [02-08-2022 01:44:01]3115: Checking ditributed CMS bruteforce attacks [02-08-2022 01:44:01]3115: WAF :: fetched 1 new logs [02-08-2022 01:45:01]: Checking for definition updates [02-08-2022 01:45:02]8984: WAF :: fetched 1 new logs [02-08-2022 01:46:01]15254: WAF :: fetched 1 new logs [02-08-2022 01:47:01]20796: WAF :: fetched 5 new logs [02-08-2022 01:48:02]27368: WAF :: fetched 1 new logs [02-08-2022 01:49:01]1009: WAF :: fetched 1 new logs [02-08-2022 01:52:01]18287: WAF :: fetched 1 new logs [02-08-2022 01:54:01]30429: WAF :: fetched 2 new logs [02-08-2022 01:55:02]3610: WAF :: fetched 2 new logs [02-08-2022 01:56:01]9948: WAF :: fetched 1 new logs [02-08-2022 01:57:01]15402: WAF :: fetched 1 new logs [02-08-2022 01:59:01]27212: WAF :: fetched 2 new logs [02-08-2022 02:01:01]6502: WAF :: fetched 6 new logs [02-08-2022 02:04:02]23916: WAF :: fetched 1 new logs [02-08-2022 02:05:01]29959: WAF :: fetched 3 new logs [02-08-2022 02:07:01]9115: WAF :: fetched 1 new logs [02-08-2022 02:08:02]14423: WAF :: fetched 8 new logs [02-08-2022 02:10:02]25916: WAF :: fetched 5 new logs [02-08-2022 02:11:01]31972: WAF :: fetched 2 new logs [02-08-2022 02:12:02]5348: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659417122 [02-08-2022 02:12:02]5348: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 02:12:04]5348: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 02:12:04]5348: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-0212/20220802-021202-YuiyIiXSXXaTccjt4YkY1gAAACM [02-08-2022 02:12:04]5348: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 02:12:04]5348: WAF :: fetched 4 new logs [02-08-2022 02:14:02]16369: WAF :: fetched 1 new logs [02-08-2022 02:15:01]22375: WAF :: fetched 3 new logs [02-08-2022 02:18:02]7110: WAF :: fetched 2 new logs [02-08-2022 02:19:01]12805: WAF :: fetched 1 new logs [02-08-2022 02:20:02]18206: WAF :: fetched 4 new logs [02-08-2022 02:21:01]24309: WAF :: fetched 1 new logs [02-08-2022 02:23:01]3357: WAF :: fetched 3 new logs [02-08-2022 02:26:02]20649: WAF :: fetched 1 new logs [02-08-2022 02:27:01]26246: WAF :: fetched 16 new logs [02-08-2022 02:28:02]31894: WAF :: fetched 2 new logs [02-08-2022 02:29:01]5256: WAF :: fetched 2 new logs [02-08-2022 02:30:02]10906: WAF :: fetched 3 new logs [02-08-2022 02:33:01]27596: WAF :: fetched 1 new logs [02-08-2022 02:34:02]1393: WAF :: fetched 1 new logs [02-08-2022 02:35:01]7148: WAF :: fetched 1 new logs [02-08-2022 02:36:01]12919: WAF :: fetched 1 new logs [02-08-2022 02:37:02]18622: WAF :: fetched 1 new logs [02-08-2022 02:39:02]30043: WAF :: fetched 1 new logs [02-08-2022 02:40:01]3443: WAF :: fetched 8 new logs [02-08-2022 02:41:02]9184: WAF :: fetched 1 new logs [02-08-2022 02:41:02]9184: Checking for user cron vulnerabilities [02-08-2022 02:42:01]14807: WAF :: fetched 2 new logs [02-08-2022 02:43:02]20770: WAF :: fetched 2 new logs [02-08-2022 02:44:01]27218: Checking ditributed CMS bruteforce attacks [02-08-2022 02:44:01]27218: WAF :: fetched 1 new logs [02-08-2022 02:45:02]972: WAF :: fetched 4 new logs [02-08-2022 02:47:02]12494: WAF :: fetched 2 new logs [02-08-2022 02:48:01]18058: WAF :: fetched 1 new logs [02-08-2022 02:49:02]23791: WAF :: fetched 1 new logs [02-08-2022 02:50:01]29351: WAF :: fetched 5 new logs [02-08-2022 02:51:02]2810: WAF :: fetched 6 new logs [02-08-2022 02:52:01]8542: WAF :: fetched 1 new logs [02-08-2022 02:53:02]14142: WAF :: fetched 1 new logs [02-08-2022 02:53:02]14151: Updated license status via CDN [02-08-2022 02:55:02]25917: WAF :: fetched 5 new logs [02-08-2022 02:57:02]5989: WAF :: fetched 1 new logs [02-08-2022 02:58:01]12097: WAF :: fetched 2 new logs [02-08-2022 02:59:02]17575: WAF :: fetched 1 new logs [02-08-2022 03:00:01]23531: WAF :: fetched 3 new logs [02-08-2022 03:00:03]23531: Found and updated 31 CMS installations [02-08-2022 03:01:02]29894: WAF :: fetched 2 new logs [02-08-2022 03:01:36]23531: Wordpress installation #21 easy2speak.com.br has errors [02-08-2022 03:01:55]23531: Wordpress installation #23 blueseasurf.com.br has errors [02-08-2022 03:02:27]23531: Wordpress installation #27 site.foxcard.com.br has errors [02-08-2022 03:03:02]9171: WAF :: fetched 3 new logs [02-08-2022 03:03:29]23531: Sending CMS version vulnerability report emails to cpanel users [02-08-2022 03:03:32]23531: Checking wordpress installations for suspicious directories [02-08-2022 03:04:01]15401: WAF :: fetched 2 new logs [02-08-2022 03:04:28]9232: Sending CMS version vulnerability report emails to cpanel users [02-08-2022 03:04:31]9232: Checking wordpress installations for suspicious directories [02-08-2022 03:05:01]21135: WAF :: fetched 1 new logs [02-08-2022 03:06:01]27489: WAF :: fetched 5 new logs [02-08-2022 03:07:01]625: WAF :: fetched 1 new logs [02-08-2022 03:12:01]29495: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659420721 [02-08-2022 03:12:01]29495: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 03:12:03]29495: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 03:12:04]29495: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-0312/20220802-031201-YujAMUT2aU2j9CDKM7cVfQAAAAs [02-08-2022 03:12:04]29495: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [02-08-2022 03:12:04]29495: WAF :: fetched 1 new logs [02-08-2022 03:15:02]14585: WAF :: fetched 2 new logs [02-08-2022 03:17:02]25810: WAF :: fetched 1 new logs [02-08-2022 03:19:02]5308: WAF :: fetched 2 new logs [02-08-2022 03:20:02]11030: WAF :: fetched 6 new logs [02-08-2022 03:21:02]16975: WAF :: fetched 3 new logs [02-08-2022 03:24:02]1965: WAF :: fetched 1 new logs [02-08-2022 03:26:02]13746: WAF :: fetched 1 new logs [02-08-2022 03:27:02]19667: WAF :: fetched 7 new logs [02-08-2022 03:28:02]25492: WAF :: fetched 1 new logs [02-08-2022 03:31:02]9833: WAF :: fetched 4 new logs [02-08-2022 03:32:01]15788: WAF :: fetched 1 new logs [02-08-2022 03:33:02]21133: WAF :: fetched 1 new logs [02-08-2022 03:34:02]27219: WAF :: fetched 3 new logs [02-08-2022 03:36:02]5940: WAF :: fetched 1 new logs [02-08-2022 03:37:01]11885: WAF :: fetched 3 new logs [02-08-2022 03:38:02]17210: WAF :: fetched 16 new logs [02-08-2022 03:39:01]23201: WAF :: fetched 3 new logs [02-08-2022 03:40:02]28616: WAF :: fetched 4 new logs [02-08-2022 03:41:01]2297: WAF :: fetched 1 new logs [02-08-2022 03:41:01]2297: Checking for user cron vulnerabilities [02-08-2022 03:42:02]7683: WAF :: fetched 2 new logs [02-08-2022 03:43:02]13749: WAF :: fetched 5 new logs [02-08-2022 03:44:01]19246: Checking ditributed CMS bruteforce attacks [02-08-2022 03:44:01]19246: WAF :: fetched 1 new logs [02-08-2022 03:45:02]25003: WAF :: fetched 1 new logs [02-08-2022 03:46:01]30552: WAF :: fetched 1 new logs [02-08-2022 03:48:01]10794: WAF :: fetched 7 new logs [02-08-2022 03:50:02]16466: WAF :: fetched 1 new logs [02-08-2022 03:55:01]19500: WAF :: fetched 1 new logs [02-08-2022 03:56:02]25186: WAF :: fetched 2 new logs [02-08-2022 03:57:01]30699: WAF :: fetched 4 new logs [02-08-2022 03:58:02]3719: WAF :: fetched 1 new logs [02-08-2022 03:59:01]9648: WAF :: fetched 3 new logs [02-08-2022 04:01:01]20995: WAF :: fetched 1 new logs [02-08-2022 04:03:01]32054: WAF :: fetched 1 new logs [02-08-2022 04:05:01]10956: WAF :: fetched 1 new logs [02-08-2022 04:07:01]22167: WAF :: fetched 3 new logs [02-08-2022 04:09:01]1059: WAF :: fetched 1 new logs [02-08-2022 04:10:02]6503: WAF :: fetched 5 new logs [02-08-2022 04:12:02]18125: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659424322 [02-08-2022 04:12:02]18125: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 04:12:04]18125: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 04:12:04]18125: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-0412/20220802-041202-YujOQpqPezqIsmWWO2M_JQAAAAA [02-08-2022 04:12:04]18125: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 04:12:04]18125: WAF :: fetched 78 new logs [02-08-2022 04:15:02]2747: WAF :: fetched 1 new logs [02-08-2022 04:17:02]14031: WAF :: fetched 2 new logs [02-08-2022 04:18:01]19531: WAF :: fetched 2 new logs [02-08-2022 04:19:02]25166: WAF :: fetched 5 new logs [02-08-2022 04:20:01]30700: WAF :: fetched 9 new logs [02-08-2022 04:21:02]4107: WAF :: fetched 86 new logs [02-08-2022 04:22:01]9576: WAF :: fetched 8 new logs [02-08-2022 04:24:01]20630: WAF :: fetched 4 new logs [02-08-2022 04:25:02]26317: WAF :: fetched 1 new logs [02-08-2022 04:30:02]21824: WAF :: fetched 1 new logs [02-08-2022 04:32:02]32719: WAF :: fetched 1 new logs [02-08-2022 04:33:01]6346: WAF :: fetched 4 new logs [02-08-2022 04:37:01]28648: WAF :: fetched 1 new logs [02-08-2022 04:41:01]18780: Checking for user cron vulnerabilities [02-08-2022 04:42:02]24424: WAF :: fetched 2 new logs [02-08-2022 04:44:01]3255: Checking ditributed CMS bruteforce attacks [02-08-2022 04:44:02]3255: WAF :: fetched 1 new logs [02-08-2022 04:46:01]14493: WAF :: fetched 5 new logs [02-08-2022 04:47:02]20176: WAF :: fetched 3 new logs [02-08-2022 04:48:01]25706: WAF :: fetched 1 new logs [02-08-2022 04:49:02]31309: WAF :: fetched 2 new logs [02-08-2022 04:50:01]4663: WAF :: fetched 16 new logs [02-08-2022 04:51:01]10249: WAF :: fetched 4 new logs [02-08-2022 04:54:01]26741: WAF :: fetched 1 new logs [02-08-2022 04:58:02]16969: WAF :: fetched 1 new logs [02-08-2022 04:59:01]22890: WAF :: fetched 89 new logs [02-08-2022 05:00:02]28294: WAF :: fetched 8 new logs [02-08-2022 05:01:01]1957: WAF :: fetched 86 new logs [02-08-2022 05:01:41]1956: Starting daily scan on files updated in last 24 hrs [02-08-2022 05:02:02]7681: WAF :: fetched 103 new logs [02-08-2022 05:03:01]13170: WAF :: fetched 65 new logs [02-08-2022 05:05:01]24374: WAF :: fetched 1 new logs [02-08-2022 05:06:02]30014: WAF :: fetched 1 new logs [02-08-2022 05:08:02]8930: WAF :: fetched 2 new logs [02-08-2022 05:09:01]14444: WAF :: fetched 1 new logs [02-08-2022 05:11:01]25762: WAF :: fetched 1 new logs [02-08-2022 05:12:02]31431: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659427922 [02-08-2022 05:12:02]31431: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 05:12:04]31431: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 05:12:04]31431: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-0512/20220802-051202-YujcUhQSrrrz4ZZ7TkKiEQAAAB8 [02-08-2022 05:12:04]31431: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 05:12:05]31431: WAF :: fetched 2 new logs [02-08-2022 05:13:01]4739: WAF :: fetched 3 new logs [02-08-2022 05:16:02]21643: WAF :: fetched 1 new logs [02-08-2022 05:18:02]347: WAF :: fetched 3 new logs [02-08-2022 05:19:01]6100: WAF :: fetched 5 new logs [02-08-2022 05:21:01]17321: WAF :: fetched 2 new logs [02-08-2022 05:22:02]22628: WAF :: fetched 2 new logs [02-08-2022 05:23:01]28652: WAF :: fetched 18 new logs [02-08-2022 05:24:01]1592: WAF :: fetched 1 new logs [02-08-2022 05:25:02]7798: WAF :: fetched 4 new logs [02-08-2022 05:26:01]13289: WAF :: fetched 5 new logs [02-08-2022 05:27:02]18869: WAF :: fetched 2 new logs [02-08-2022 05:28:01]24379: WAF :: fetched 3 new logs [02-08-2022 05:29:02]29974: WAF :: fetched 5 new logs [02-08-2022 05:31:02]8954: WAF :: fetched 1 new logs [02-08-2022 05:34:01]25610: WAF :: fetched 1 new logs [02-08-2022 05:38:02]15661: WAF :: fetched 7 new logs [02-08-2022 05:39:01]21636: WAF :: fetched 2 new logs [02-08-2022 05:41:01]597: WAF :: fetched 2 new logs [02-08-2022 05:41:01]597: Checking for user cron vulnerabilities [02-08-2022 05:42:02]6032: WAF :: fetched 1 new logs [02-08-2022 05:43:01]11932: WAF :: fetched 5 new logs [02-08-2022 05:44:01]17234: Checking ditributed CMS bruteforce attacks [02-08-2022 05:44:02]17234: WAF :: fetched 8 new logs [02-08-2022 05:45:01]23317: WAF :: fetched 1 new logs [02-08-2022 05:47:01]2162: WAF :: fetched 1 new logs [02-08-2022 05:48:01]7788: WAF :: fetched 1 new logs [02-08-2022 05:50:01]18916: WAF :: fetched 1 new logs [02-08-2022 05:51:02]24533: WAF :: fetched 1 new logs [02-08-2022 05:55:01]14525: WAF :: fetched 9 new logs [02-08-2022 05:56:01]19874: WAF :: fetched 5 new logs [02-08-2022 05:57:01]25789: WAF :: fetched 9 new logs [02-08-2022 05:58:01]31069: WAF :: fetched 8 new logs [02-08-2022 05:59:02]4904: WAF :: fetched 2 new logs [02-08-2022 06:00:02]10231: WAF :: fetched 7 new logs [02-08-2022 06:01:01]16336: WAF :: fetched 9 new logs [02-08-2022 06:02:01]21949: WAF :: fetched 22 new logs [02-08-2022 06:03:02]27274: WAF :: fetched 10 new logs [02-08-2022 06:05:02]6404: WAF :: fetched 1 new logs [02-08-2022 06:06:01]12401: WAF :: fetched 3 new logs [02-08-2022 06:07:02]17674: WAF :: fetched 4 new logs [02-08-2022 06:09:02]28992: WAF :: fetched 2 new logs [02-08-2022 06:10:02]2783: WAF :: fetched 1 new logs [02-08-2022 06:11:01]8377: WAF :: fetched 3 new logs [02-08-2022 06:12:02]13910: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659431522 [02-08-2022 06:12:02]13910: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 06:12:04]13910: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 06:12:04]13910: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-0612/20220802-061202-YujqYlPfUgi5VRRTV9xuvwAAAA0 [02-08-2022 06:12:04]13910: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [02-08-2022 06:12:05]13910: WAF :: fetched 1 new logs [02-08-2022 06:13:01]19479: WAF :: fetched 1 new logs [02-08-2022 06:16:02]4062: WAF :: fetched 3 new logs [02-08-2022 06:17:02]9518: WAF :: fetched 1 new logs [02-08-2022 06:18:02]15138: WAF :: fetched 1 new logs [02-08-2022 06:19:02]20729: WAF :: fetched 5 new logs [02-08-2022 06:20:01]26438: WAF :: fetched 4 new logs [02-08-2022 06:22:01]5437: WAF :: fetched 2 new logs [02-08-2022 06:23:02]10736: WAF :: fetched 3 new logs [02-08-2022 06:24:01]16640: WAF :: fetched 7 new logs [02-08-2022 06:26:01]27979: WAF :: fetched 1 new logs [02-08-2022 06:29:02]12188: WAF :: fetched 2 new logs [02-08-2022 06:32:02]29349: WAF :: fetched 1 new logs [02-08-2022 06:34:02]8144: WAF :: fetched 3 new logs [02-08-2022 06:35:02]13731: WAF :: fetched 4 new logs [02-08-2022 06:37:01]24964: WAF :: fetched 4 new logs [02-08-2022 06:39:01]3839: WAF :: fetched 4 new logs [02-08-2022 06:40:02]9509: WAF :: fetched 1 new logs [02-08-2022 06:41:01]15055: Checking for user cron vulnerabilities [02-08-2022 06:43:01]26163: WAF :: fetched 1 new logs [02-08-2022 06:44:02]31726: Checking ditributed CMS bruteforce attacks [02-08-2022 06:44:02]31726: WAF :: fetched 1 new logs [02-08-2022 06:45:02]5085: WAF :: fetched 1 new logs [02-08-2022 06:47:02]16314: WAF :: fetched 8 new logs [02-08-2022 06:48:02]21798: WAF :: fetched 1 new logs [02-08-2022 06:49:02]27387: WAF :: fetched 2 new logs [02-08-2022 06:51:01]6305: WAF :: fetched 8 new logs [02-08-2022 06:52:02]11579: WAF :: fetched 1 new logs [02-08-2022 06:54:02]22799: WAF :: fetched 1 new logs [02-08-2022 06:55:01]28803: WAF :: fetched 6 new logs [02-08-2022 06:55:02]28803: API call failed for url https://api.recaptcha.cloud/add Status : 500 [02-08-2022 06:56:02]1841: WAF :: fetched 7 new logs [02-08-2022 06:57:01]7860: WAF :: fetched 1 new logs [02-08-2022 07:00:01]24365: WAF :: fetched 1 new logs [02-08-2022 07:01:02]30588: WAF :: fetched 3 new logs [02-08-2022 07:02:01]3853: WAF :: fetched 48 new logs [02-08-2022 07:03:02]9445: WAF :: fetched 42 new logs [02-08-2022 07:04:01]14914: WAF :: fetched 13 new logs [02-08-2022 07:05:02]20614: WAF :: fetched 2 new logs [02-08-2022 07:06:01]26185: WAF :: fetched 5 new logs [02-08-2022 07:07:02]31770: WAF :: fetched 1 new logs [02-08-2022 07:08:01]5022: WAF :: fetched 6 new logs [02-08-2022 07:09:02]10610: WAF :: fetched 5 new logs [02-08-2022 07:10:02]16229: WAF :: fetched 1 new logs [02-08-2022 07:11:02]21881: WAF :: fetched 1 new logs [02-08-2022 07:12:01]27428: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659435121 [02-08-2022 07:12:01]27428: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 07:12:03]27428: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 07:12:04]27428: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-0712/20220802-071201-Yuj4cV5E-lNJOqEu6K4ehQAAABU [02-08-2022 07:12:04]27428: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 07:12:04]27428: WAF :: fetched 166 new logs [02-08-2022 07:13:02]590: WAF :: fetched 10 new logs [02-08-2022 07:14:01]6296: WAF :: fetched 1 new logs [02-08-2022 07:15:02]12028: WAF :: fetched 2 new logs [02-08-2022 07:16:01]17573: WAF :: fetched 2 new logs [02-08-2022 07:19:02]2027: WAF :: fetched 2 new logs [02-08-2022 07:20:01]7731: WAF :: fetched 5 new logs [02-08-2022 07:21:02]13428: WAF :: fetched 1 new logs [02-08-2022 07:22:01]18998: WAF :: fetched 4 new logs [02-08-2022 07:23:01]24542: WAF :: fetched 2 new logs [02-08-2022 07:24:02]30146: WAF :: fetched 142 new logs [02-08-2022 07:25:01]3607: WAF :: fetched 143 new logs [02-08-2022 07:26:02]9266: WAF :: fetched 253 new logs [02-08-2022 07:27:01]14837: WAF :: fetched 230 new logs [02-08-2022 07:28:02]20151: WAF :: fetched 362 new logs [02-08-2022 07:29:01]26135: WAF :: fetched 200 new logs [02-08-2022 07:30:02]31860: WAF :: fetched 1 new logs [02-08-2022 07:31:01]5095: WAF :: fetched 3 new logs [02-08-2022 07:34:02]21916: WAF :: fetched 2 new logs [02-08-2022 07:35:01]27535: WAF :: fetched 2 new logs [02-08-2022 07:37:01]6432: WAF :: fetched 1 new logs [02-08-2022 07:38:02]12019: WAF :: fetched 2 new logs [02-08-2022 07:41:01]28990: Checking for user cron vulnerabilities [02-08-2022 07:44:01]13519: Checking ditributed CMS bruteforce attacks [02-08-2022 07:45:02]: Checking for definition updates [02-08-2022 07:45:05]19235: Updated virus defnition : signatures.ndb [02-08-2022 07:46:01]24828: WAF :: fetched 2 new logs [02-08-2022 07:48:01]3463: WAF :: fetched 1 new logs [02-08-2022 07:50:02]14873: WAF :: fetched 4 new logs [02-08-2022 07:51:01]20864: WAF :: fetched 1 new logs [02-08-2022 07:52:02]26155: WAF :: fetched 1 new logs [02-08-2022 07:55:01]11115: WAF :: fetched 3 new logs [02-08-2022 07:59:02]1293: WAF :: fetched 1 new logs [02-08-2022 08:01:02]12911: WAF :: fetched 3 new logs [02-08-2022 08:02:01]18469: WAF :: fetched 3 new logs [02-08-2022 08:03:01]24089: WAF :: fetched 1 new logs [02-08-2022 08:06:01]8580: WAF :: fetched 12 new logs [02-08-2022 08:09:01]25789: WAF :: fetched 2 new logs [02-08-2022 08:10:02]31206: WAF :: fetched 3 new logs [02-08-2022 08:12:02]10328: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659438722 [02-08-2022 08:12:02]10328: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 08:12:04]10328: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 08:12:04]10328: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-0812/20220802-081202-YukGgkByfgAYCuBVRcbukQAAACY [02-08-2022 08:12:04]10328: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 08:12:04]10328: WAF :: fetched 1 new logs [02-08-2022 08:15:01]27645: WAF :: fetched 5 new logs [02-08-2022 08:17:01]6900: WAF :: fetched 4 new logs [02-08-2022 08:19:01]18192: WAF :: fetched 2 new logs [02-08-2022 08:20:02]23831: WAF :: fetched 5 new logs [02-08-2022 08:22:02]2934: WAF :: fetched 1 new logs [02-08-2022 08:23:01]8478: WAF :: fetched 1 new logs [02-08-2022 08:24:02]14063: WAF :: fetched 17 new logs [02-08-2022 08:25:01]19702: WAF :: fetched 1 new logs [02-08-2022 08:26:02]25465: WAF :: fetched 1 new logs [02-08-2022 08:27:02]31080: WAF :: fetched 1 new logs [02-08-2022 08:34:02]5637: WAF :: fetched 4 new logs [02-08-2022 08:38:02]28226: WAF :: fetched 2 new logs [02-08-2022 08:39:01]1801: WAF :: fetched 3 new logs [02-08-2022 08:40:02]7188: WAF :: fetched 4 new logs [02-08-2022 08:41:01]13326: WAF :: fetched 10 new logs [02-08-2022 08:41:01]13326: Checking for user cron vulnerabilities [02-08-2022 08:42:02]18666: WAF :: fetched 7 new logs [02-08-2022 08:43:01]24620: WAF :: fetched 2 new logs [02-08-2022 08:44:01]30006: Checking ditributed CMS bruteforce attacks [02-08-2022 08:44:02]30006: WAF :: fetched 3 new logs [02-08-2022 08:45:01]3667: WAF :: fetched 1 new logs [02-08-2022 08:46:02]9139: WAF :: fetched 1 new logs [02-08-2022 08:48:02]20478: WAF :: fetched 1 new logs [02-08-2022 08:51:01]5588: WAF :: fetched 1 new logs [02-08-2022 08:52:02]11298: WAF :: fetched 2 new logs [02-08-2022 08:54:01]22574: WAF :: fetched 3 new logs [02-08-2022 08:55:02]28229: WAF :: fetched 1 new logs [02-08-2022 08:55:03]28229: API call failed for url https://api.recaptcha.cloud/add Status : 500 [02-08-2022 08:57:02]7369: WAF :: fetched 1 new logs [02-08-2022 08:59:02]18557: WAF :: fetched 1 new logs [02-08-2022 09:01:01]30168: WAF :: fetched 2 new logs [02-08-2022 09:02:01]3465: WAF :: fetched 10 new logs [02-08-2022 09:04:01]14738: WAF :: fetched 3 new logs [02-08-2022 09:06:01]26203: WAF :: fetched 3 new logs [02-08-2022 09:07:02]31939: WAF :: fetched 2 new logs [02-08-2022 09:08:01]5365: WAF :: fetched 2 new logs [02-08-2022 09:11:01]22544: WAF :: fetched 1 new logs [02-08-2022 09:12:02]28242: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659442322 [02-08-2022 09:12:02]28242: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 09:12:04]28242: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 09:12:04]28242: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-0912/20220802-091202-YukUkvvmTyQSA0c32Oc3vgAAADk [02-08-2022 09:12:04]28242: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 09:12:04]28242: WAF :: fetched 3 new logs [02-08-2022 09:17:01]24363: WAF :: fetched 4 new logs [02-08-2022 09:19:01]3328: WAF :: fetched 1 new logs [02-08-2022 09:20:02]9030: WAF :: fetched 1 new logs [02-08-2022 09:21:01]14953: WAF :: fetched 1 new logs [02-08-2022 09:22:02]21055: WAF :: fetched 1 new logs [02-08-2022 09:24:02]32387: WAF :: fetched 5 new logs [02-08-2022 09:26:02]11218: WAF :: fetched 1 new logs [02-08-2022 09:28:02]22599: WAF :: fetched 9 new logs [02-08-2022 09:30:02]1562: WAF :: fetched 4 new logs [02-08-2022 09:31:01]7793: WAF :: fetched 2 new logs [02-08-2022 09:33:01]19185: WAF :: fetched 3 new logs [02-08-2022 09:34:02]24597: WAF :: fetched 5 new logs [02-08-2022 09:35:01]30574: WAF :: fetched 14 new logs [02-08-2022 09:37:02]10027: WAF :: fetched 1 new logs [02-08-2022 09:38:01]15697: WAF :: fetched 5 new logs [02-08-2022 09:39:02]21514: WAF :: fetched 5 new logs [02-08-2022 09:41:02]697: WAF :: fetched 1 new logs [02-08-2022 09:41:02]697: Checking for user cron vulnerabilities [02-08-2022 09:42:01]6464: WAF :: fetched 1 new logs [02-08-2022 09:43:01]12137: WAF :: fetched 1 new logs [02-08-2022 09:44:01]17538: Checking ditributed CMS bruteforce attacks [02-08-2022 09:44:01]17538: WAF :: fetched 5 new logs [02-08-2022 09:46:01]29233: WAF :: fetched 1 new logs [02-08-2022 09:47:01]3100: WAF :: fetched 22 new logs [02-08-2022 09:48:02]8625: WAF :: fetched 4 new logs [02-08-2022 09:49:01]14732: WAF :: fetched 9 new logs [02-08-2022 09:50:02]20129: WAF :: fetched 2 new logs [02-08-2022 09:53:01]5313: WAF :: fetched 3 new logs [02-08-2022 09:55:01]16573: WAF :: fetched 4 new logs [02-08-2022 09:56:02]22160: WAF :: fetched 1 new logs [02-08-2022 09:57:01]28253: WAF :: fetched 4 new logs [02-08-2022 09:58:02]1313: WAF :: fetched 3 new logs [02-08-2022 09:59:01]7391: WAF :: fetched 2 new logs [02-08-2022 10:00:02]12851: WAF :: fetched 5 new logs [02-08-2022 10:01:01]19089: WAF :: fetched 1 new logs [02-08-2022 10:04:02]3757: WAF :: fetched 4 new logs [02-08-2022 10:08:02]27075: WAF :: fetched 1 new logs [02-08-2022 10:09:01]326: WAF :: fetched 1 new logs [02-08-2022 10:10:02]6217: WAF :: fetched 1 new logs [02-08-2022 10:11:01]12035: WAF :: fetched 1 new logs [02-08-2022 10:12:02]17702: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659445922 [02-08-2022 10:12:02]17702: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 10:12:04]17702: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 10:12:04]17702: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-1012/20220802-101202-Yukiophvhk7CQxUdKMZLWQAAAEI [02-08-2022 10:12:04]17702: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 10:12:04]17702: WAF :: fetched 5 new logs [02-08-2022 10:13:01]23329: WAF :: fetched 1 new logs [02-08-2022 10:17:01]13863: WAF :: fetched 1 new logs [02-08-2022 10:20:02]30966: WAF :: fetched 2 new logs [02-08-2022 10:21:01]4913: WAF :: fetched 2 new logs [02-08-2022 10:22:01]10572: WAF :: fetched 1 new logs [02-08-2022 10:23:01]16074: httpd.conf changed. Refreshing watchlist. [02-08-2022 10:23:01]16066: WAF :: fetched 1 new logs [02-08-2022 10:24:02]22275: WAF :: fetched 5 new logs [02-08-2022 10:26:01]1459: WAF :: fetched 4 new logs [02-08-2022 10:27:01]7258: WAF :: fetched 5 new logs [02-08-2022 10:28:01]13058: WAF :: fetched 5 new logs [02-08-2022 10:29:02]18657: WAF :: fetched 3 new logs [02-08-2022 10:31:02]30655: WAF :: fetched 1 new logs [02-08-2022 10:33:02]9845: WAF :: fetched 1 new logs [02-08-2022 10:34:01]15649: WAF :: fetched 5 new logs [02-08-2022 10:35:02]21371: WAF :: fetched 1 new logs [02-08-2022 10:36:01]27325: WAF :: fetched 2 new logs [02-08-2022 10:37:02]667: WAF :: fetched 1 new logs [02-08-2022 10:39:01]12286: WAF :: fetched 10 new logs [02-08-2022 10:41:01]23944: Checking for user cron vulnerabilities [02-08-2022 10:42:02]29667: WAF :: fetched 2 new logs [02-08-2022 10:43:02]3284: WAF :: fetched 6 new logs [02-08-2022 10:44:01]8995: Checking ditributed CMS bruteforce attacks [02-08-2022 10:44:02]8995: WAF :: fetched 4 new logs [02-08-2022 10:45:02]14811: WAF :: fetched 3 new logs [02-08-2022 10:46:02]20797: WAF :: fetched 12 new logs [02-08-2022 10:47:01]26523: WAF :: fetched 2 new logs [02-08-2022 10:49:02]6051: WAF :: fetched 3 new logs [02-08-2022 10:50:02]11904: WAF :: fetched 1 new logs [02-08-2022 10:51:02]17843: WAF :: fetched 1 new logs [02-08-2022 10:52:01]23611: WAF :: fetched 5 new logs [02-08-2022 10:53:01]29125: WAF :: fetched 3 new logs [02-08-2022 10:54:01]2897: WAF :: fetched 2 new logs [02-08-2022 10:55:02]8349: WAF :: fetched 2 new logs [02-08-2022 10:56:01]14580: WAF :: fetched 1 new logs [02-08-2022 10:57:02]20147: WAF :: fetched 3 new logs [02-08-2022 10:58:01]26204: WAF :: fetched 2 new logs [02-08-2022 11:01:02]11642: WAF :: fetched 1 new logs [02-08-2022 11:02:02]17599: WAF :: fetched 1 new logs [02-08-2022 11:03:02]23384: WAF :: fetched 3 new logs [02-08-2022 11:04:01]29129: WAF :: fetched 6 new logs [02-08-2022 11:05:02]2236: WAF :: fetched 2 new logs [02-08-2022 11:06:01]8545: WAF :: fetched 4 new logs [02-08-2022 11:08:01]20233: WAF :: fetched 3 new logs [02-08-2022 11:08:16]14207: Performed RBL check for 23.111.136.34. [02-08-2022 11:09:02]25738: WAF :: fetched 1 new logs [02-08-2022 11:10:01]31843: WAF :: fetched 2 new logs [02-08-2022 11:11:02]5260: WAF :: fetched 2 new logs [02-08-2022 11:12:01]11434: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659449521 [02-08-2022 11:12:01]11434: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 11:12:03]11434: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 11:12:04]11434: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-1112/20220802-111201-YukwsT0gvpaSz3Foz5-W7QAAACc [02-08-2022 11:12:04]11434: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 11:12:04]11434: WAF :: fetched 5 new logs [02-08-2022 11:13:02]17011: WAF :: fetched 1 new logs [02-08-2022 11:14:01]23158: WAF :: fetched 1 new logs [02-08-2022 11:15:02]29033: WAF :: fetched 3 new logs [02-08-2022 11:16:01]2583: WAF :: fetched 16 new logs [02-08-2022 11:17:02]8381: WAF :: fetched 2 new logs [02-08-2022 11:18:01]14241: WAF :: fetched 5 new logs [02-08-2022 11:21:02]31889: WAF :: fetched 1 new logs [02-08-2022 11:22:01]5380: WAF :: fetched 3 new logs [02-08-2022 11:23:01]11228: WAF :: fetched 3 new logs [02-08-2022 11:24:01]16870: WAF :: fetched 4 new logs [02-08-2022 11:25:02]22504: WAF :: fetched 3 new logs [02-08-2022 11:26:01]28942: WAF :: fetched 6 new logs [02-08-2022 11:27:01]2260: WAF :: fetched 2 new logs [02-08-2022 11:28:01]8420: WAF :: fetched 1 new logs [02-08-2022 11:29:01]13905: WAF :: fetched 1 new logs [02-08-2022 11:30:01]20123: WAF :: fetched 1 new logs [02-08-2022 11:31:02]25920: WAF :: fetched 1 new logs [02-08-2022 11:32:01]32069: WAF :: fetched 3 new logs [02-08-2022 11:33:02]5660: WAF :: fetched 2 new logs [02-08-2022 11:34:01]11326: WAF :: fetched 2 new logs [02-08-2022 11:37:01]29053: WAF :: fetched 1 new logs [02-08-2022 11:38:02]2542: WAF :: fetched 2 new logs [02-08-2022 11:39:01]8279: WAF :: fetched 2 new logs [02-08-2022 11:40:02]14042: WAF :: fetched 6 new logs [02-08-2022 11:41:01]19960: WAF :: fetched 404 new logs [02-08-2022 11:41:01]19960: Checking for user cron vulnerabilities [02-08-2022 11:42:02]25662: WAF :: fetched 379 new logs [02-08-2022 11:43:01]31379: WAF :: fetched 146 new logs [02-08-2022 11:44:01]4885: Checking ditributed CMS bruteforce attacks [02-08-2022 11:44:02]4885: WAF :: fetched 266 new logs [02-08-2022 11:45:01]10594: WAF :: fetched 148 new logs [02-08-2022 11:46:02]16523: WAF :: fetched 1 new logs [02-08-2022 11:47:01]22144: WAF :: fetched 1 new logs [02-08-2022 11:49:01]1112: WAF :: fetched 1 new logs [02-08-2022 11:51:01]12837: WAF :: fetched 7 new logs [02-08-2022 11:53:01]24160: WAF :: fetched 1 new logs [02-08-2022 11:54:02]30092: httpd.conf changed. Refreshing watchlist. [02-08-2022 11:54:02]30066: WAF :: fetched 3 new logs [02-08-2022 11:55:01]3578: WAF :: fetched 9 new logs [02-08-2022 11:56:02]9432: WAF :: fetched 2 new logs [02-08-2022 11:57:01]15062: WAF :: fetched 3 new logs [02-08-2022 11:58:01]20728: WAF :: fetched 14 new logs [02-08-2022 11:59:02]26409: httpd.conf changed. Refreshing watchlist. [02-08-2022 11:59:02]26395: WAF :: fetched 4 new logs [02-08-2022 12:00:01]32197: WAF :: fetched 20 new logs [02-08-2022 12:01:01]6311: WAF :: fetched 3 new logs [02-08-2022 12:02:02]11857: WAF :: fetched 4 new logs [02-08-2022 12:03:01]17451: WAF :: fetched 1 new logs [02-08-2022 12:04:02]23263: WAF :: fetched 2 new logs [02-08-2022 12:05:01]29492: WAF :: fetched 3 new logs [02-08-2022 12:06:02]2952: WAF :: fetched 19 new logs [02-08-2022 12:07:01]8932: WAF :: fetched 5 new logs [02-08-2022 12:08:02]14633: WAF :: fetched 3 new logs [02-08-2022 12:09:01]20228: WAF :: fetched 1 new logs [02-08-2022 12:10:02]26001: WAF :: fetched 1 new logs [02-08-2022 12:11:01]31746: WAF :: fetched 2 new logs [02-08-2022 12:12:02]4852: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659453122 [02-08-2022 12:12:02]4852: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 12:12:04]4852: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 12:12:04]4852: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-1212/20220802-121202-Yuk-wuQDSUISZnKPx_u-mgAAAAU [02-08-2022 12:12:04]4852: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 12:12:04]4852: WAF :: fetched 3 new logs [02-08-2022 12:13:01]10936: WAF :: fetched 2 new logs [02-08-2022 12:18:02]7034: WAF :: fetched 5 new logs [02-08-2022 12:19:01]13120: WAF :: fetched 5 new logs [02-08-2022 12:20:02]18586: WAF :: fetched 4 new logs [02-08-2022 12:21:01]24895: WAF :: fetched 1 new logs [02-08-2022 12:22:02]30643: WAF :: fetched 8 new logs [02-08-2022 12:23:01]4060: WAF :: fetched 5 new logs [02-08-2022 12:24:02]9832: WAF :: fetched 6 new logs [02-08-2022 12:25:01]15618: httpd.conf changed. Refreshing watchlist. [02-08-2022 12:25:01]15634: WAF :: fetched 9 new logs [02-08-2022 12:26:02]21520: WAF :: fetched 9 new logs [02-08-2022 12:27:01]27184: WAF :: fetched 7 new logs [02-08-2022 12:28:02]478: WAF :: fetched 17 new logs [02-08-2022 12:29:01]6367: WAF :: fetched 7 new logs [02-08-2022 12:30:02]11891: WAF :: fetched 8 new logs [02-08-2022 12:31:01]18143: WAF :: fetched 2 new logs [02-08-2022 12:32:02]23936: WAF :: fetched 4 new logs [02-08-2022 12:33:01]29677: WAF :: fetched 2 new logs [02-08-2022 12:34:02]3295: WAF :: fetched 10 new logs [02-08-2022 12:35:01]9073: WAF :: fetched 2 new logs [02-08-2022 12:36:02]14926: WAF :: fetched 3 new logs [02-08-2022 12:37:01]20612: WAF :: fetched 5 new logs [02-08-2022 12:39:01]31938: WAF :: fetched 1 new logs [02-08-2022 12:41:01]11214: WAF :: fetched 1 new logs [02-08-2022 12:41:01]11214: Checking for user cron vulnerabilities [02-08-2022 12:42:02]16887: WAF :: fetched 1 new logs [02-08-2022 12:43:01]22456: WAF :: fetched 3 new logs [02-08-2022 12:44:01]28068: Checking ditributed CMS bruteforce attacks [02-08-2022 12:44:01]28068: WAF :: fetched 5 new logs [02-08-2022 12:45:01]: Checking for software updates [02-08-2022 12:45:01]1162: WAF :: fetched 2 new logs [02-08-2022 12:46:01]7379: WAF :: fetched 1 new logs [02-08-2022 12:48:01]18914: WAF :: fetched 3 new logs [02-08-2022 12:49:02]24255: WAF :: fetched 8 new logs [02-08-2022 12:50:01]30241: WAF :: fetched 1 new logs [02-08-2022 12:51:02]3465: WAF :: fetched 6 new logs [02-08-2022 12:53:02]15055: WAF :: fetched 2 new logs [02-08-2022 12:54:01]21167: WAF :: fetched 1 new logs [02-08-2022 12:55:01]26573: WAF :: fetched 3 new logs [02-08-2022 12:57:01]6117: WAF :: fetched 2 new logs [02-08-2022 13:01:01]28922: WAF :: fetched 2 new logs [02-08-2022 13:02:02]2280: WAF :: fetched 23 new logs [02-08-2022 13:03:01]8430: WAF :: fetched 12 new logs [02-08-2022 13:05:01]19746: WAF :: fetched 8 new logs [02-08-2022 13:06:02]25641: WAF :: fetched 2 new logs [02-08-2022 13:07:01]31279: WAF :: fetched 4 new logs [02-08-2022 13:09:02]10332: WAF :: fetched 14 new logs [02-08-2022 13:10:02]15948: WAF :: fetched 4 new logs [02-08-2022 13:12:01]27203: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659456721 [02-08-2022 13:12:01]27203: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 13:12:03]27203: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 13:12:04]27203: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-1312/20220802-131201-YulM0XN6TGgTTGZBqU4AfQAAAD4 [02-08-2022 13:12:04]27203: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 13:12:04]27203: WAF :: fetched 1 new logs [02-08-2022 13:13:01]825: WAF :: fetched 1 new logs [02-08-2022 13:14:01]6353: WAF :: fetched 1 new logs [02-08-2022 13:15:01]12389: WAF :: fetched 3 new logs [02-08-2022 13:16:02]17932: WAF :: fetched 3 new logs [02-08-2022 13:17:01]24053: WAF :: fetched 2 new logs [02-08-2022 13:18:02]29446: WAF :: fetched 2 new logs [02-08-2022 13:21:01]14752: WAF :: fetched 1 new logs [02-08-2022 13:22:02]20468: WAF :: fetched 1 new logs [02-08-2022 13:24:02]31818: WAF :: fetched 6 new logs [02-08-2022 13:25:01]5095: WAF :: fetched 4 new logs [02-08-2022 13:27:02]16544: WAF :: fetched 3 new logs [02-08-2022 13:28:01]22146: WAF :: fetched 2 new logs [02-08-2022 13:29:02]27854: WAF :: fetched 1 new logs [02-08-2022 13:30:01]1073: WAF :: fetched 2 new logs [02-08-2022 13:32:01]12629: WAF :: fetched 3 new logs [02-08-2022 13:34:01]23816: WAF :: fetched 1 new logs [02-08-2022 13:35:02]29602: WAF :: fetched 4 new logs [02-08-2022 13:36:01]3033: WAF :: fetched 2 new logs [02-08-2022 13:37:02]8823: WAF :: fetched 2 new logs [02-08-2022 13:38:02]14556: WAF :: fetched 3 new logs [02-08-2022 13:39:01]20147: WAF :: fetched 3 new logs [02-08-2022 13:41:01]31601: WAF :: fetched 1 new logs [02-08-2022 13:41:01]31601: Checking for user cron vulnerabilities [02-08-2022 13:42:02]5162: WAF :: fetched 3 new logs [02-08-2022 13:43:01]10731: WAF :: fetched 1 new logs [02-08-2022 13:44:02]16511: Checking ditributed CMS bruteforce attacks [02-08-2022 13:44:02]16511: WAF :: fetched 3 new logs [02-08-2022 13:45:01]: Checking for definition updates [02-08-2022 13:45:01]22099: WAF :: fetched 6 new logs [02-08-2022 13:46:02]27886: WAF :: fetched 4 new logs [02-08-2022 13:47:01]1165: WAF :: fetched 2 new logs [02-08-2022 13:49:02]12900: WAF :: fetched 5 new logs [02-08-2022 13:53:02]3438: WAF :: fetched 1 new logs [02-08-2022 13:54:01]9058: WAF :: fetched 2 new logs [02-08-2022 13:55:02]14861: WAF :: fetched 1 new logs [02-08-2022 13:57:02]26311: WAF :: fetched 1 new logs [02-08-2022 13:58:01]31855: WAF :: fetched 3 new logs [02-08-2022 13:59:02]5280: WAF :: fetched 3 new logs [02-08-2022 14:00:01]10631: WAF :: fetched 1 new logs [02-08-2022 14:01:02]16960: WAF :: fetched 4 new logs [02-08-2022 14:03:02]28510: WAF :: fetched 5 new logs [02-08-2022 14:04:01]1762: WAF :: fetched 3 new logs [02-08-2022 14:06:01]13243: WAF :: fetched 2 new logs [02-08-2022 14:09:02]30478: WAF :: fetched 1 new logs [02-08-2022 14:10:02]3953: WAF :: fetched 1 new logs [02-08-2022 14:11:01]9779: WAF :: fetched 2 new logs [02-08-2022 14:12:01]15284: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659460321 [02-08-2022 14:12:02]15284: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 14:12:04]15284: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 14:12:04]15284: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-1412/20220802-141202-Yula4YconISewnw-QyPYCwAAADg [02-08-2022 14:12:04]15284: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 14:12:04]15284: WAF :: fetched 3 new logs [02-08-2022 14:14:01]26851: WAF :: fetched 2 new logs [02-08-2022 14:15:01]460: WAF :: fetched 4 new logs [02-08-2022 14:18:02]17962: WAF :: fetched 2 new logs [02-08-2022 14:19:01]23991: WAF :: fetched 2 new logs [02-08-2022 14:20:02]29347: WAF :: fetched 2 new logs [02-08-2022 14:21:01]3162: WAF :: fetched 16 new logs [02-08-2022 14:23:01]14749: WAF :: fetched 1 new logs [02-08-2022 14:24:02]20129: WAF :: fetched 4 new logs [02-08-2022 14:26:02]31997: WAF :: fetched 2 new logs [02-08-2022 14:29:01]16802: WAF :: fetched 4 new logs [02-08-2022 14:30:02]22525: WAF :: fetched 3 new logs [02-08-2022 14:31:01]28295: WAF :: fetched 3 new logs [02-08-2022 14:32:02]1849: WAF :: fetched 5 new logs [02-08-2022 14:33:01]7550: WAF :: fetched 2 new logs [02-08-2022 14:34:02]13310: WAF :: fetched 4 new logs [02-08-2022 14:35:01]19001: WAF :: fetched 1 new logs [02-08-2022 14:36:02]24882: WAF :: fetched 2 new logs [02-08-2022 14:37:01]30616: WAF :: fetched 4 new logs [02-08-2022 14:38:02]4072: WAF :: fetched 1 new logs [02-08-2022 14:39:01]9891: WAF :: fetched 8 new logs [02-08-2022 14:41:01]21522: WAF :: fetched 2 new logs [02-08-2022 14:41:01]21522: Checking for user cron vulnerabilities [02-08-2022 14:42:02]27291: WAF :: fetched 1 new logs [02-08-2022 14:43:01]500: WAF :: fetched 7 new logs [02-08-2022 14:44:01]6254: Checking ditributed CMS bruteforce attacks [02-08-2022 14:45:01]11670: WAF :: fetched 1 new logs [02-08-2022 14:46:01]17805: WAF :: fetched 3 new logs [02-08-2022 14:48:01]29573: WAF :: fetched 10 new logs [02-08-2022 14:49:01]2712: WAF :: fetched 1 new logs [02-08-2022 14:50:02]8890: WAF :: fetched 3 new logs [02-08-2022 14:53:01]26268: WAF :: fetched 5 new logs [02-08-2022 14:53:02]26253: Updated license status via CDN [02-08-2022 14:54:02]32051: WAF :: fetched 6 new logs [02-08-2022 14:55:01]5514: WAF :: fetched 2 new logs [02-08-2022 14:56:01]11088: WAF :: fetched 2 new logs [02-08-2022 14:58:01]23004: WAF :: fetched 2 new logs [02-08-2022 15:00:01]1655: WAF :: fetched 3 new logs [02-08-2022 15:01:02]8092: Reseting cPGuard inotify settings [02-08-2022 15:03:01]19695: WAF :: fetched 2 new logs [02-08-2022 15:04:01]25223: WAF :: fetched 1 new logs [02-08-2022 15:05:01]31389: WAF :: fetched 2 new logs [02-08-2022 15:06:01]4916: WAF :: fetched 2 new logs [02-08-2022 15:07:01]10448: WAF :: fetched 1 new logs [02-08-2022 15:08:02]16608: WAF :: fetched 4 new logs [02-08-2022 15:09:01]22247: WAF :: fetched 9 new logs [02-08-2022 15:10:02]28040: WAF :: fetched 4 new logs [02-08-2022 15:11:01]1470: WAF :: fetched 7 new logs [02-08-2022 15:12:02]7397: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659463922 [02-08-2022 15:12:02]7397: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 15:12:04]7397: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 15:12:04]7397: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-1512/20220802-151202-Yulo8lTuDZxLE6WU6ceYzQAAAB8 [02-08-2022 15:12:04]7397: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 15:12:04]7397: WAF :: fetched 2 new logs [02-08-2022 15:13:01]13204: WAF :: fetched 23 new logs [02-08-2022 15:14:02]18938: WAF :: fetched 10 new logs [02-08-2022 15:15:01]24716: WAF :: fetched 1 new logs [02-08-2022 15:16:02]30519: WAF :: fetched 1 new logs [02-08-2022 15:17:01]3968: WAF :: fetched 3 new logs [02-08-2022 15:18:01]9749: WAF :: fetched 5 new logs [02-08-2022 15:22:01]675: WAF :: fetched 15 new logs [02-08-2022 15:23:01]6523: WAF :: fetched 2 new logs [02-08-2022 15:25:01]18094: WAF :: fetched 6 new logs [02-08-2022 15:26:01]23716: WAF :: fetched 2 new logs [02-08-2022 15:27:02]30000: WAF :: fetched 1 new logs [02-08-2022 15:28:01]3464: WAF :: fetched 3 new logs [02-08-2022 15:29:02]9171: WAF :: fetched 3 new logs [02-08-2022 15:30:01]14811: WAF :: fetched 4 new logs [02-08-2022 15:32:02]26604: WAF :: fetched 15 new logs [02-08-2022 15:33:01]32210: WAF :: fetched 2 new logs [02-08-2022 15:35:01]11477: WAF :: fetched 1 new logs [02-08-2022 15:36:02]16963: WAF :: fetched 4 new logs [02-08-2022 15:38:02]28777: WAF :: fetched 1 new logs [02-08-2022 15:39:01]2052: WAF :: fetched 1 new logs [02-08-2022 15:40:02]7908: WAF :: fetched 3 new logs [02-08-2022 15:41:02]13716: WAF :: fetched 4 new logs [02-08-2022 15:41:02]13716: Checking for user cron vulnerabilities [02-08-2022 15:44:01]30810: Checking ditributed CMS bruteforce attacks [02-08-2022 15:44:01]30810: WAF :: fetched 2 new logs [02-08-2022 15:45:02]4312: WAF :: fetched 1 new logs [02-08-2022 15:46:01]10045: WAF :: fetched 1 new logs [02-08-2022 15:48:01]21734: WAF :: fetched 2 new logs [02-08-2022 15:49:02]27584: WAF :: fetched 3 new logs [02-08-2022 15:50:01]903: WAF :: fetched 4 new logs [02-08-2022 15:51:02]6986: WAF :: fetched 1 new logs [02-08-2022 15:52:01]12810: WAF :: fetched 6 new logs [02-08-2022 15:53:02]18713: WAF :: fetched 2 new logs [02-08-2022 15:54:01]24396: WAF :: fetched 1 new logs [02-08-2022 15:56:01]4009: WAF :: fetched 2 new logs [02-08-2022 15:57:02]9676: WAF :: fetched 4 new logs [02-08-2022 15:58:01]15846: WAF :: fetched 1 new logs [02-08-2022 15:59:02]21327: WAF :: fetched 6 new logs [02-08-2022 16:00:01]27137: WAF :: fetched 1 new logs [02-08-2022 16:01:02]1036: WAF :: fetched 7 new logs [02-08-2022 16:02:01]6889: WAF :: fetched 5 new logs [02-08-2022 16:03:02]12660: WAF :: fetched 2 new logs [02-08-2022 16:04:01]18331: WAF :: fetched 5 new logs [02-08-2022 16:05:02]24157: WAF :: fetched 1 new logs [02-08-2022 16:06:01]29959: WAF :: fetched 1 new logs [02-08-2022 16:07:02]3600: WAF :: fetched 5 new logs [02-08-2022 16:08:02]9351: WAF :: fetched 2 new logs [02-08-2022 16:09:01]15187: WAF :: fetched 3 new logs [02-08-2022 16:11:01]26977: WAF :: fetched 1 new logs [02-08-2022 16:12:02]32572: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659467522 [02-08-2022 16:12:02]32572: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 16:12:04]32572: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 16:12:04]32572: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-1612/20220802-161202-Yul3Am_08Avc-gCBpWHoEwAAAAs [02-08-2022 16:12:04]32572: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 16:12:04]32572: WAF :: fetched 4 new logs [02-08-2022 16:13:01]6582: WAF :: fetched 1 new logs [02-08-2022 16:15:01]17942: WAF :: fetched 1 new logs [02-08-2022 16:17:01]29510: WAF :: fetched 2 new logs [02-08-2022 16:18:02]3090: WAF :: fetched 3 new logs [02-08-2022 16:19:01]8847: WAF :: fetched 1 new logs [02-08-2022 16:20:02]14555: WAF :: fetched 1 new logs [02-08-2022 16:21:01]20306: WAF :: fetched 17 new logs [02-08-2022 16:22:01]26054: WAF :: fetched 10 new logs [02-08-2022 16:23:02]31646: httpd.conf changed. Refreshing watchlist. [02-08-2022 16:23:02]31642: WAF :: fetched 7 new logs [02-08-2022 16:24:01]5277: WAF :: fetched 3 new logs [02-08-2022 16:25:02]10822: WAF :: fetched 7 new logs [02-08-2022 16:26:01]16590: WAF :: fetched 1 new logs [02-08-2022 16:27:02]22379: WAF :: fetched 1 new logs [02-08-2022 16:28:01]28056: httpd.conf changed. Refreshing watchlist. [02-08-2022 16:28:01]28042: WAF :: fetched 2 new logs [02-08-2022 16:29:02]1251: WAF :: fetched 6 new logs [02-08-2022 16:30:02]7032: WAF :: fetched 8 new logs [02-08-2022 16:31:01]12684: WAF :: fetched 2 new logs [02-08-2022 16:32:02]18599: WAF :: fetched 1 new logs [02-08-2022 16:33:01]24297: WAF :: fetched 10 new logs [02-08-2022 16:36:01]9390: WAF :: fetched 5 new logs [02-08-2022 16:38:01]20962: WAF :: fetched 7 new logs [02-08-2022 16:39:02]26782: WAF :: fetched 17 new logs [02-08-2022 16:40:01]32400: WAF :: fetched 6 new logs [02-08-2022 16:41:02]5968: WAF :: fetched 17 new logs [02-08-2022 16:41:02]5968: Checking for user cron vulnerabilities [02-08-2022 16:42:01]11682: WAF :: fetched 3 new logs [02-08-2022 16:43:02]17426: WAF :: fetched 19 new logs [02-08-2022 16:44:01]23016: Checking ditributed CMS bruteforce attacks [02-08-2022 16:44:01]23016: WAF :: fetched 1 new logs [02-08-2022 16:46:02]2246: WAF :: fetched 7 new logs [02-08-2022 16:51:01]30988: WAF :: fetched 2 new logs [02-08-2022 16:52:02]4575: WAF :: fetched 3 new logs [02-08-2022 16:54:02]15956: WAF :: fetched 2 new logs [02-08-2022 16:55:01]21589: WAF :: fetched 3 new logs [02-08-2022 16:55:02]21589: API call failed for url https://api.recaptcha.cloud/add Status : 500 [02-08-2022 16:56:02]27395: WAF :: fetched 8 new logs [02-08-2022 16:58:02]6536: WAF :: fetched 2 new logs [02-08-2022 16:59:01]12075: WAF :: fetched 7 new logs [02-08-2022 17:01:01]23612: WAF :: fetched 16 new logs [02-08-2022 17:02:02]29394: WAF :: fetched 3 new logs [02-08-2022 17:03:01]2660: WAF :: fetched 3 new logs [02-08-2022 17:05:01]14055: WAF :: fetched 1 new logs [02-08-2022 17:06:02]19872: WAF :: fetched 2 new logs [02-08-2022 17:07:01]25639: WAF :: fetched 2 new logs [02-08-2022 17:09:02]4627: WAF :: fetched 1 new logs [02-08-2022 17:10:01]10296: WAF :: fetched 1 new logs [02-08-2022 17:11:02]16180: WAF :: fetched 2 new logs [02-08-2022 17:12:01]22094: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659471121 [02-08-2022 17:12:01]22094: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 17:12:03]22094: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 17:12:03]22094: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-1712/20220802-171201-YumFEauxkQir0YeW2oMmMgAAAC8 [02-08-2022 17:12:03]22094: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 17:12:04]22094: WAF :: fetched 3 new logs [02-08-2022 17:13:02]27892: WAF :: fetched 1 new logs [02-08-2022 17:16:01]13088: WAF :: fetched 5 new logs [02-08-2022 17:18:01]24529: WAF :: fetched 2 new logs [02-08-2022 17:19:02]30311: WAF :: fetched 1 new logs [02-08-2022 17:20:01]3714: WAF :: fetched 5 new logs [02-08-2022 17:21:02]9529: WAF :: fetched 1 new logs [02-08-2022 17:22:01]15278: WAF :: fetched 1 new logs [02-08-2022 17:23:02]20999: WAF :: fetched 1 new logs [02-08-2022 17:24:01]26621: WAF :: fetched 3 new logs [02-08-2022 17:25:02]32099: WAF :: fetched 6 new logs [02-08-2022 17:26:01]6014: WAF :: fetched 1 new logs [02-08-2022 17:27:02]11867: WAF :: fetched 2 new logs [02-08-2022 17:28:02]17600: WAF :: fetched 2 new logs [02-08-2022 17:29:01]23217: WAF :: fetched 4 new logs [02-08-2022 17:30:02]28922: WAF :: fetched 3 new logs [02-08-2022 17:31:01]2261: WAF :: fetched 11 new logs [02-08-2022 17:32:02]8105: WAF :: fetched 6 new logs [02-08-2022 17:33:01]13716: WAF :: fetched 5 new logs [02-08-2022 17:34:02]19421: WAF :: fetched 2 new logs [02-08-2022 17:35:01]25190: WAF :: fetched 5 new logs [02-08-2022 17:36:02]30982: WAF :: fetched 5 new logs [02-08-2022 17:37:01]4339: WAF :: fetched 1 new logs [02-08-2022 17:39:01]15802: WAF :: fetched 1 new logs [02-08-2022 17:41:02]27073: Checking for user cron vulnerabilities [02-08-2022 17:43:02]6651: WAF :: fetched 6 new logs [02-08-2022 17:44:01]12367: Checking ditributed CMS bruteforce attacks [02-08-2022 17:44:01]12367: WAF :: fetched 2 new logs [02-08-2022 17:46:02]23992: WAF :: fetched 2 new logs [02-08-2022 17:47:01]29674: WAF :: fetched 4 new logs [02-08-2022 17:48:02]3290: WAF :: fetched 1 new logs [02-08-2022 17:50:02]15036: WAF :: fetched 2 new logs [02-08-2022 17:52:02]26583: WAF :: fetched 1 new logs [02-08-2022 17:53:01]32497: WAF :: fetched 1 new logs [02-08-2022 17:54:02]6005: WAF :: fetched 9 new logs [02-08-2022 17:55:01]11626: WAF :: fetched 1 new logs [02-08-2022 17:55:02]11626: API call failed for url https://api.recaptcha.cloud/add Status : 500 [02-08-2022 17:57:01]23351: WAF :: fetched 2 new logs [02-08-2022 17:58:02]29178: WAF :: fetched 5 new logs [02-08-2022 17:59:01]2439: WAF :: fetched 1 new logs [02-08-2022 18:01:01]14163: WAF :: fetched 1 new logs [02-08-2022 18:05:01]4851: WAF :: fetched 1 new logs [02-08-2022 18:09:01]27480: WAF :: fetched 5 new logs [02-08-2022 18:10:01]637: WAF :: fetched 3 new logs [02-08-2022 18:11:02]6186: WAF :: fetched 2 new logs [02-08-2022 18:12:01]12270: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659474721 [02-08-2022 18:12:01]12270: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 18:12:03]12270: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 18:12:03]12270: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-1812/20220802-181201-YumTIeJ1giPAbj-xIRNQ3QAAACI [02-08-2022 18:12:03]12270: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 18:12:04]12270: WAF :: fetched 4 new logs [02-08-2022 18:13:02]17976: WAF :: fetched 2 new logs [02-08-2022 18:14:01]24121: WAF :: fetched 4 new logs [02-08-2022 18:15:02]30005: WAF :: fetched 2 new logs [02-08-2022 18:16:01]3442: WAF :: fetched 4 new logs [02-08-2022 18:19:01]20373: WAF :: fetched 3 new logs [02-08-2022 18:20:02]25771: WAF :: fetched 3 new logs [02-08-2022 18:21:01]31810: WAF :: fetched 1 new logs [02-08-2022 18:23:01]10974: WAF :: fetched 2 new logs [02-08-2022 18:24:02]16318: WAF :: fetched 3 new logs [02-08-2022 18:25:01]22337: WAF :: fetched 7 new logs [02-08-2022 18:27:01]1306: WAF :: fetched 14 new logs [02-08-2022 18:28:02]6813: WAF :: fetched 5 new logs [02-08-2022 18:29:01]12779: WAF :: fetched 1 new logs [02-08-2022 18:30:02]18107: WAF :: fetched 3 new logs [02-08-2022 18:31:01]24184: WAF :: fetched 26 new logs [02-08-2022 18:32:02]29778: WAF :: fetched 4 new logs [02-08-2022 18:33:01]3145: WAF :: fetched 5 new logs [02-08-2022 18:34:02]8765: WAF :: fetched 3 new logs [02-08-2022 18:35:01]14402: WAF :: fetched 5 new logs [02-08-2022 18:36:02]19853: WAF :: fetched 2 new logs [02-08-2022 18:39:01]4957: WAF :: fetched 7 new logs [02-08-2022 18:41:01]16443: WAF :: fetched 1 new logs [02-08-2022 18:41:01]16443: Checking for user cron vulnerabilities [02-08-2022 18:42:02]21793: WAF :: fetched 1 new logs [02-08-2022 18:43:01]27766: WAF :: fetched 1 new logs [02-08-2022 18:44:01]1037: Checking ditributed CMS bruteforce attacks [02-08-2022 18:44:02]1037: WAF :: fetched 7 new logs [02-08-2022 18:45:01]6739: WAF :: fetched 2 new logs [02-08-2022 18:47:01]18120: WAF :: fetched 11 new logs [02-08-2022 18:49:01]29632: WAF :: fetched 1 new logs [02-08-2022 18:50:02]3066: WAF :: fetched 5 new logs [02-08-2022 18:51:01]8797: WAF :: fetched 6 new logs [02-08-2022 18:52:02]14515: WAF :: fetched 12 new logs [02-08-2022 18:53:01]20149: WAF :: fetched 3 new logs [02-08-2022 18:54:02]25801: WAF :: fetched 2 new logs [02-08-2022 18:55:01]31357: WAF :: fetched 2 new logs [02-08-2022 18:56:02]4849: WAF :: fetched 2 new logs [02-08-2022 18:57:01]10375: WAF :: fetched 2 new logs [02-08-2022 18:58:02]15860: WAF :: fetched 3 new logs [02-08-2022 18:59:01]21898: WAF :: fetched 15 new logs [02-08-2022 19:00:02]27228: WAF :: fetched 5 new logs [02-08-2022 19:01:01]980: WAF :: fetched 1 new logs [02-08-2022 19:02:02]6981: httpd.conf changed. Refreshing watchlist. [02-08-2022 19:04:02]18414: WAF :: fetched 5 new logs [02-08-2022 19:05:02]24110: WAF :: fetched 18 new logs [02-08-2022 19:06:01]29760: WAF :: fetched 6 new logs [02-08-2022 19:07:01]3155: httpd.conf changed. Refreshing watchlist. [02-08-2022 19:07:01]3167: WAF :: fetched 8 new logs [02-08-2022 19:08:01]8627: WAF :: fetched 1 new logs [02-08-2022 19:09:01]14648: WAF :: fetched 7 new logs [02-08-2022 19:10:02]19996: WAF :: fetched 8 new logs [02-08-2022 19:12:01]31736: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659478321 [02-08-2022 19:12:01]31736: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 19:12:03]31736: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 19:12:04]31736: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-1912/20220802-191201-YumhMXVOhfqf7Hwll2x7YwAAACQ [02-08-2022 19:12:04]31736: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 19:12:04]31736: WAF :: fetched 4 new logs [02-08-2022 19:13:02]5218: WAF :: fetched 1 new logs [02-08-2022 19:14:01]10785: WAF :: fetched 2 new logs [02-08-2022 19:17:02]27961: WAF :: fetched 2 new logs [02-08-2022 19:18:01]1374: WAF :: fetched 2 new logs [02-08-2022 19:19:02]7143: WAF :: fetched 2 new logs [02-08-2022 19:20:01]12783: WAF :: fetched 1 new logs [02-08-2022 19:21:02]18652: WAF :: fetched 10 new logs [02-08-2022 19:22:01]24253: WAF :: fetched 5 new logs [02-08-2022 19:23:02]30021: WAF :: fetched 6 new logs [02-08-2022 19:24:01]3351: WAF :: fetched 3 new logs [02-08-2022 19:25:02]9047: WAF :: fetched 3 new logs [02-08-2022 19:26:01]14794: WAF :: fetched 8 new logs [02-08-2022 19:29:02]32109: WAF :: fetched 1 new logs [02-08-2022 19:30:01]5479: WAF :: fetched 2 new logs [02-08-2022 19:33:02]22601: WAF :: fetched 2 new logs [02-08-2022 19:34:01]28207: WAF :: fetched 1 new logs [02-08-2022 19:35:02]1512: WAF :: fetched 1 new logs [02-08-2022 19:39:02]24343: WAF :: fetched 1 new logs [02-08-2022 19:40:01]29906: WAF :: fetched 2 new logs [02-08-2022 19:41:02]3350: WAF :: fetched 4 new logs [02-08-2022 19:41:02]3350: Checking for user cron vulnerabilities [02-08-2022 19:42:01]9026: WAF :: fetched 3 new logs [02-08-2022 19:44:01]20293: Checking ditributed CMS bruteforce attacks [02-08-2022 19:44:01]20293: WAF :: fetched 2 new logs [02-08-2022 19:45:01]: Checking for definition updates [02-08-2022 19:45:02]25715: WAF :: fetched 1 new logs [02-08-2022 19:45:02]25724: Updated virus defnition : malware.expert.fp [02-08-2022 19:46:01]31758: WAF :: fetched 1 new logs [02-08-2022 19:47:01]5159: WAF :: fetched 3 new logs [02-08-2022 19:48:01]10779: WAF :: fetched 2 new logs [02-08-2022 19:50:01]22268: WAF :: fetched 2 new logs [02-08-2022 19:52:01]1400: WAF :: fetched 1 new logs [02-08-2022 19:53:02]6941: WAF :: fetched 6 new logs [02-08-2022 19:54:01]12974: WAF :: fetched 4 new logs [02-08-2022 19:55:02]18341: WAF :: fetched 3 new logs [02-08-2022 19:55:02]18341: API call failed for url https://api.recaptcha.cloud/add Status : 500 [02-08-2022 19:56:01]24420: WAF :: fetched 5 new logs [02-08-2022 19:57:02]29771: WAF :: fetched 5 new logs [02-08-2022 19:58:01]3671: WAF :: fetched 5 new logs [02-08-2022 19:59:02]9083: WAF :: fetched 1 new logs [02-08-2022 20:00:01]14900: WAF :: fetched 5 new logs [02-08-2022 20:01:02]21188: WAF :: fetched 1 new logs [02-08-2022 20:02:01]26852: WAF :: fetched 5 new logs [02-08-2022 20:03:02]32584: WAF :: fetched 3 new logs [02-08-2022 20:05:01]11539: WAF :: fetched 1 new logs [02-08-2022 20:06:01]16990: WAF :: fetched 2 new logs [02-08-2022 20:07:01]22980: WAF :: fetched 2 new logs [02-08-2022 20:08:02]28483: WAF :: fetched 1 new logs [02-08-2022 20:09:01]2166: WAF :: fetched 3 new logs [02-08-2022 20:11:01]13773: WAF :: fetched 5 new logs [02-08-2022 20:12:02]19442: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659481922 [02-08-2022 20:12:02]19442: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 20:12:04]19442: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 20:12:04]19442: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-2012/20220802-201202-YumvQuZr97uNUR0H2pNZegAAAD4 [02-08-2022 20:12:04]19442: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 20:12:04]19442: WAF :: fetched 2 new logs [02-08-2022 20:15:02]4130: WAF :: fetched 2 new logs [02-08-2022 20:16:01]9899: WAF :: fetched 13 new logs [02-08-2022 20:17:01]15515: WAF :: fetched 4 new logs [02-08-2022 20:18:01]20954: WAF :: fetched 1 new logs [02-08-2022 20:22:02]11680: WAF :: fetched 3 new logs [02-08-2022 20:23:01]17786: WAF :: fetched 1 new logs [02-08-2022 20:24:02]23194: WAF :: fetched 7 new logs [02-08-2022 20:25:01]29208: WAF :: fetched 6 new logs [02-08-2022 20:26:02]2336: WAF :: fetched 5 new logs [02-08-2022 20:27:01]8470: WAF :: fetched 2 new logs [02-08-2022 20:29:01]20018: WAF :: fetched 2 new logs [02-08-2022 20:30:02]25732: WAF :: fetched 4 new logs [02-08-2022 20:31:01]31341: WAF :: fetched 1 new logs [02-08-2022 20:32:02]4751: WAF :: fetched 4 new logs [02-08-2022 20:33:01]10429: WAF :: fetched 8 new logs [02-08-2022 20:34:02]16072: WAF :: fetched 4 new logs [02-08-2022 20:36:02]27476: WAF :: fetched 1 new logs [02-08-2022 20:37:01]626: WAF :: fetched 1 new logs [02-08-2022 20:38:02]6596: WAF :: fetched 1 new logs [02-08-2022 20:39:01]12183: WAF :: fetched 4 new logs [02-08-2022 20:40:02]17961: WAF :: fetched 1 new logs [02-08-2022 20:41:01]23620: WAF :: fetched 6 new logs [02-08-2022 20:41:01]23620: Checking for user cron vulnerabilities [02-08-2022 20:42:02]29233: WAF :: fetched 2 new logs [02-08-2022 20:43:01]2588: WAF :: fetched 2 new logs [02-08-2022 20:44:01]8286: Checking ditributed CMS bruteforce attacks [02-08-2022 20:44:02]8286: WAF :: fetched 1 new logs [02-08-2022 20:45:01]13939: WAF :: fetched 1 new logs [02-08-2022 20:46:02]19729: WAF :: fetched 3 new logs [02-08-2022 20:47:01]25306: WAF :: fetched 3 new logs [02-08-2022 20:48:02]30980: WAF :: fetched 2 new logs [02-08-2022 20:49:01]4314: WAF :: fetched 3 new logs [02-08-2022 20:50:02]9991: WAF :: fetched 1 new logs [02-08-2022 20:51:01]15689: WAF :: fetched 3 new logs [02-08-2022 20:52:01]21352: WAF :: fetched 2 new logs [02-08-2022 20:53:02]27040: WAF :: fetched 1 new logs [02-08-2022 20:55:02]6040: WAF :: fetched 3 new logs [02-08-2022 20:55:02]6040: API call failed for url https://api.recaptcha.cloud/add Status : 500 [02-08-2022 20:56:02]11734: WAF :: fetched 3 new logs [02-08-2022 20:57:01]17287: WAF :: fetched 5 new logs [02-08-2022 21:00:02]1561: WAF :: fetched 2 new logs [02-08-2022 21:01:01]7839: WAF :: fetched 5 new logs [02-08-2022 21:02:02]13551: WAF :: fetched 7 new logs [02-08-2022 21:03:01]19210: WAF :: fetched 6 new logs [02-08-2022 21:04:02]24927: WAF :: fetched 4 new logs [02-08-2022 21:05:01]30539: WAF :: fetched 1 new logs [02-08-2022 21:06:02]4103: WAF :: fetched 1 new logs [02-08-2022 21:06:02]4123: httpd.conf changed. Refreshing watchlist. [02-08-2022 21:07:01]9704: WAF :: fetched 4 new logs [02-08-2022 21:08:02]15507: WAF :: fetched 9 new logs [02-08-2022 21:09:01]21123: WAF :: fetched 7 new logs [02-08-2022 21:10:02]26827: WAF :: fetched 5 new logs [02-08-2022 21:11:01]32469: WAF :: fetched 2 new logs [02-08-2022 21:12:02]5855: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659485522 [02-08-2022 21:12:02]5855: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 21:12:04]5855: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 21:12:04]5855: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-2112/20220802-211202-Yum9UpjhCgCSGVo79e5RWgAAAAM [02-08-2022 21:12:04]5855: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 21:12:04]5855: WAF :: fetched 5 new logs [02-08-2022 21:13:01]11534: WAF :: fetched 1 new logs [02-08-2022 21:15:01]22796: WAF :: fetched 1 new logs [02-08-2022 21:16:02]28561: WAF :: fetched 5 new logs [02-08-2022 21:17:01]1792: WAF :: fetched 3 new logs [02-08-2022 21:18:02]7639: WAF :: fetched 3 new logs [02-08-2022 21:20:02]18911: WAF :: fetched 1 new logs [02-08-2022 21:26:01]20787: WAF :: fetched 10 new logs [02-08-2022 21:27:02]26537: WAF :: fetched 17 new logs [02-08-2022 21:28:01]32237: WAF :: fetched 6 new logs [02-08-2022 21:29:02]5571: WAF :: fetched 3 new logs [02-08-2022 21:30:02]11244: WAF :: fetched 3 new logs [02-08-2022 21:31:02]16895: WAF :: fetched 2 new logs [02-08-2022 21:33:02]27973: WAF :: fetched 1 new logs [02-08-2022 21:34:01]1674: WAF :: fetched 3 new logs [02-08-2022 21:35:01]7407: WAF :: fetched 4 new logs [02-08-2022 21:36:02]13116: WAF :: fetched 26 new logs [02-08-2022 21:37:01]18686: WAF :: fetched 3 new logs [02-08-2022 21:38:01]24410: WAF :: fetched 6 new logs [02-08-2022 21:39:01]29977: WAF :: fetched 1 new logs [02-08-2022 21:40:02]3081: WAF :: fetched 1 new logs [02-08-2022 21:41:01]9175: WAF :: fetched 1 new logs [02-08-2022 21:41:01]9175: Checking for user cron vulnerabilities [02-08-2022 21:43:01]20208: WAF :: fetched 4 new logs [02-08-2022 21:44:01]26096: Checking ditributed CMS bruteforce attacks [02-08-2022 21:45:02]32178: WAF :: fetched 3 new logs [02-08-2022 21:47:02]11236: WAF :: fetched 7 new logs [02-08-2022 21:48:01]17009: WAF :: fetched 1 new logs [02-08-2022 21:49:02]22677: WAF :: fetched 1 new logs [02-08-2022 21:51:02]1762: WAF :: fetched 1 new logs [02-08-2022 21:52:01]7449: WAF :: fetched 1 new logs [02-08-2022 21:53:02]13177: WAF :: fetched 2 new logs [02-08-2022 21:57:01]3336: WAF :: fetched 2 new logs [02-08-2022 21:59:01]14730: WAF :: fetched 1 new logs [02-08-2022 22:00:02]20141: WAF :: fetched 3 new logs [02-08-2022 22:03:01]5438: WAF :: fetched 2 new logs [02-08-2022 22:04:02]10801: WAF :: fetched 2 new logs [02-08-2022 22:05:01]16817: WAF :: fetched 1 new logs [02-08-2022 22:07:12]28146: Performing Domain reputation checks [02-08-2022 22:09:02]7286: WAF :: fetched 1 new logs [02-08-2022 22:10:02]12908: WAF :: fetched 4 new logs [02-08-2022 22:11:01]18602: WAF :: fetched 4 new logs [02-08-2022 22:12:02]24243: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659489122 [02-08-2022 22:12:02]24243: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 22:12:04]24243: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 22:12:04]24243: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-2212/20220802-221202-YunLYhTQBFJRQUPQ9QvPjgAAABo [02-08-2022 22:12:04]24243: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 22:12:04]24243: WAF :: fetched 8 new logs [02-08-2022 22:13:01]29889: WAF :: fetched 11 new logs [02-08-2022 22:14:02]3330: WAF :: fetched 12 new logs [02-08-2022 22:15:01]8882: WAF :: fetched 8 new logs [02-08-2022 22:16:02]14609: WAF :: fetched 3 new logs [02-08-2022 22:17:01]20264: WAF :: fetched 11 new logs [02-08-2022 22:18:02]26052: WAF :: fetched 11 new logs [02-08-2022 22:19:01]31661: WAF :: fetched 9 new logs [02-08-2022 22:20:02]5099: WAF :: fetched 4 new logs [02-08-2022 22:21:01]10775: WAF :: fetched 5 new logs [02-08-2022 22:22:02]16446: WAF :: fetched 1 new logs [02-08-2022 22:24:02]27757: WAF :: fetched 1 new logs [02-08-2022 22:25:01]989: WAF :: fetched 1 new logs [02-08-2022 22:26:02]6754: WAF :: fetched 3 new logs [02-08-2022 22:27:01]12390: httpd.conf changed. Refreshing watchlist. [02-08-2022 22:28:01]18155: WAF :: fetched 2 new logs [02-08-2022 22:30:01]29697: WAF :: fetched 3 new logs [02-08-2022 22:31:01]3146: WAF :: fetched 2 new logs [02-08-2022 22:32:01]8619: WAF :: fetched 9 new logs [02-08-2022 22:33:01]14743: httpd.conf changed. Refreshing watchlist. [02-08-2022 22:34:01]20200: WAF :: fetched 3 new logs [02-08-2022 22:35:01]26231: WAF :: fetched 1 new logs [02-08-2022 22:36:01]31690: WAF :: fetched 2 new logs [02-08-2022 22:37:01]5458: WAF :: fetched 1 new logs [02-08-2022 22:38:01]10859: WAF :: fetched 15 new logs [02-08-2022 22:39:01]16915: WAF :: fetched 2 new logs [02-08-2022 22:40:02]22348: WAF :: fetched 6 new logs [02-08-2022 22:41:01]28447: WAF :: fetched 1 new logs [02-08-2022 22:41:01]28447: Checking for user cron vulnerabilities [02-08-2022 22:42:02]1408: WAF :: fetched 3 new logs [02-08-2022 22:44:01]12916: Checking ditributed CMS bruteforce attacks [02-08-2022 22:47:01]30351: WAF :: fetched 1 new logs [02-08-2022 22:48:02]3757: WAF :: fetched 1 new logs [02-08-2022 22:49:01]9441: WAF :: fetched 4 new logs [02-08-2022 22:50:02]14834: WAF :: fetched 2 new logs [02-08-2022 22:52:02]26563: WAF :: fetched 2 new logs [02-08-2022 22:54:02]5561: WAF :: fetched 1 new logs [02-08-2022 22:56:02]16838: WAF :: fetched 3 new logs [02-08-2022 22:57:01]22423: WAF :: fetched 4 new logs [02-08-2022 22:58:02]28061: WAF :: fetched 4 new logs [02-08-2022 22:59:01]1314: WAF :: fetched 4 new logs [02-08-2022 23:00:02]6764: WAF :: fetched 2 new logs [02-08-2022 23:01:01]12855: WAF :: fetched 1 new logs [02-08-2022 23:02:02]18561: WAF :: fetched 1 new logs [02-08-2022 23:03:01]24181: WAF :: fetched 5 new logs [02-08-2022 23:04:02]29965: WAF :: fetched 3 new logs [02-08-2022 23:05:01]3247: WAF :: fetched 6 new logs [02-08-2022 23:06:02]9041: WAF :: fetched 5 new logs [02-08-2022 23:07:43]14814: Performed RBL check for 23.111.136.34. [02-08-2022 23:10:02]31718: WAF :: fetched 1 new logs [02-08-2022 23:11:01]5109: WAF :: fetched 3 new logs [02-08-2022 23:12:02]10751: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659492722 [02-08-2022 23:12:02]10751: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [02-08-2022 23:12:04]10751: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [02-08-2022 23:12:04]10751: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220802/20220802-2312/20220802-231202-YunZctezGLmZOVWSG3tY7gAAADM [02-08-2022 23:12:04]10751: WAF :: No suitable log file found. Using SQLite.. [02-08-2022 23:12:04]10751: WAF :: fetched 5 new logs [02-08-2022 23:13:01]16386: WAF :: fetched 5 new logs [02-08-2022 23:14:02]22118: WAF :: fetched 3 new logs [02-08-2022 23:15:01]27695: WAF :: fetched 2 new logs [02-08-2022 23:18:02]12405: WAF :: fetched 2 new logs [02-08-2022 23:19:01]18050: WAF :: fetched 1 new logs [02-08-2022 23:20:02]23771: WAF :: fetched 3 new logs [02-08-2022 23:21:01]29411: WAF :: fetched 1 new logs [02-08-2022 23:22:02]2814: WAF :: fetched 3 new logs [02-08-2022 23:25:01]19795: WAF :: fetched 1 new logs [02-08-2022 23:26:01]25195: WAF :: fetched 1 new logs [02-08-2022 23:27:01]31106: WAF :: fetched 4 new logs [02-08-2022 23:28:02]4170: WAF :: fetched 3 new logs [02-08-2022 23:29:01]10255: WAF :: fetched 3 new logs [02-08-2022 23:30:02]15690: WAF :: fetched 4 new logs [02-08-2022 23:31:01]21730: WAF :: fetched 8 new logs [02-08-2022 23:32:02]27347: WAF :: fetched 4 new logs [02-08-2022 23:33:02]524: WAF :: fetched 7 new logs [02-08-2022 23:35:02]12077: WAF :: fetched 35 new logs [02-08-2022 23:36:01]17752: WAF :: fetched 7 new logs [02-08-2022 23:37:02]23407: WAF :: fetched 3 new logs [02-08-2022 23:38:01]28960: WAF :: fetched 2 new logs [02-08-2022 23:40:01]8030: WAF :: fetched 4 new logs [02-08-2022 23:41:02]13828: WAF :: fetched 4 new logs [02-08-2022 23:41:02]13828: Checking for user cron vulnerabilities [02-08-2022 23:42:01]19430: WAF :: fetched 6 new logs [02-08-2022 23:43:02]25085: WAF :: fetched 2 new logs [02-08-2022 23:44:01]30717: Checking ditributed CMS bruteforce attacks [02-08-2022 23:44:01]30717: WAF :: fetched 3 new logs [02-08-2022 23:45:01]4073: WAF :: fetched 2 new logs [02-08-2022 23:46:01]9550: WAF :: fetched 2 new logs [02-08-2022 23:47:01]15514: WAF :: fetched 3 new logs [02-08-2022 23:48:02]20911: WAF :: fetched 8 new logs [02-08-2022 23:49:01]27044: WAF :: fetched 9 new logs [02-08-2022 23:50:02]321: WAF :: fetched 1 new logs [02-08-2022 23:51:01]6144: WAF :: fetched 2 new logs [02-08-2022 23:52:01]11766: WAF :: fetched 3 new logs [02-08-2022 23:53:02]17536: WAF :: fetched 6 new logs [02-08-2022 23:54:01]23256: WAF :: fetched 1 new logs [02-08-2022 23:55:01]28940: httpd.conf changed. Refreshing watchlist. [02-08-2022 23:55:01]28970: WAF :: fetched 1 new logs [02-08-2022 23:56:02]2515: WAF :: fetched 29 new logs [02-08-2022 23:57:01]8157: WAF :: fetched 2 new logs [02-08-2022 23:58:02]13822: WAF :: fetched 8 new logs [03-08-2022 00:01:01]31087: WAF :: fetched 1 new logs [03-08-2022 00:01:01]31072: httpd.conf changed. Refreshing watchlist. [03-08-2022 00:01:05]31087: Sending daily report for August 3, 2022 [03-08-2022 00:02:02]4686: WAF :: fetched 2 new logs [03-08-2022 00:04:01]15978: WAF :: fetched 6 new logs [03-08-2022 00:05:02]21311: WAF :: fetched 1 new logs [03-08-2022 00:05:02]21311: Deleted 0 entries older than 6 MONTH from scanner_logs [03-08-2022 00:05:02]21311: Deleted 0 files from Quarantine [03-08-2022 00:06:01]27356: WAF :: fetched 4 new logs [03-08-2022 00:07:02]562: WAF :: fetched 3 new logs [03-08-2022 00:08:01]6265: WAF :: fetched 2 new logs [03-08-2022 00:10:01]17581: WAF :: fetched 2 new logs [03-08-2022 00:11:02]23341: WAF :: fetched 1 new logs [03-08-2022 00:12:01]28926: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659496321 [03-08-2022 00:12:01]28926: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 00:12:03]28926: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 00:12:04]28926: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-0012/20220803-001201-YunngSGxHa3hR1q3zWolZwAAABk [03-08-2022 00:12:04]28926: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 00:12:04]28926: WAF :: fetched 4 new logs [03-08-2022 00:13:02]2274: WAF :: fetched 2 new logs [03-08-2022 00:14:01]7991: WAF :: fetched 14 new logs [03-08-2022 00:15:02]13687: WAF :: fetched 4 new logs [03-08-2022 00:16:01]19404: WAF :: fetched 6 new logs [03-08-2022 00:17:02]25057: WAF :: fetched 7 new logs [03-08-2022 00:19:02]4124: WAF :: fetched 1 new logs [03-08-2022 00:22:01]21155: WAF :: fetched 6 new logs [03-08-2022 00:23:02]26541: WAF :: fetched 2 new logs [03-08-2022 00:24:01]32610: WAF :: fetched 7 new logs [03-08-2022 00:25:01]5689: WAF :: fetched 3 new logs [03-08-2022 00:26:01]11891: WAF :: fetched 9 new logs [03-08-2022 00:27:02]17905: WAF :: fetched 23 new logs [03-08-2022 00:28:01]23454: WAF :: fetched 1 new logs [03-08-2022 00:29:02]29258: WAF :: fetched 2 new logs [03-08-2022 00:30:01]2597: WAF :: fetched 12 new logs [03-08-2022 00:31:01]8329: WAF :: fetched 1 new logs [03-08-2022 00:32:01]13865: WAF :: fetched 1 new logs [03-08-2022 00:33:01]19219: WAF :: fetched 3 new logs [03-08-2022 00:34:01]25312: WAF :: fetched 2 new logs [03-08-2022 00:35:02]30637: WAF :: fetched 2 new logs [03-08-2022 00:36:01]4517: WAF :: fetched 1 new logs [03-08-2022 00:37:02]10210: WAF :: fetched 2 new logs [03-08-2022 00:38:01]15884: WAF :: fetched 2 new logs [03-08-2022 00:39:02]21430: WAF :: fetched 4 new logs [03-08-2022 00:40:01]27633: WAF :: fetched 2 new logs [03-08-2022 00:41:01]812: Checking for user cron vulnerabilities [03-08-2022 00:42:01]6963: WAF :: fetched 2 new logs [03-08-2022 00:44:01]18485: Checking ditributed CMS bruteforce attacks [03-08-2022 00:44:01]18485: WAF :: fetched 4 new logs [03-08-2022 00:45:01]: Checking for software updates [03-08-2022 00:45:01]23862: WAF :: fetched 1 new logs [03-08-2022 00:46:01]29928: WAF :: fetched 2 new logs [03-08-2022 00:48:01]9078: WAF :: fetched 1 new logs [03-08-2022 00:49:02]14853: WAF :: fetched 1 new logs [03-08-2022 00:51:02]26056: WAF :: fetched 1 new logs [03-08-2022 00:52:01]31648: WAF :: fetched 6 new logs [03-08-2022 00:54:02]10733: WAF :: fetched 4 new logs [03-08-2022 00:55:01]16310: WAF :: fetched 3 new logs [03-08-2022 00:58:02]792: WAF :: fetched 2 new logs [03-08-2022 00:59:01]6583: WAF :: fetched 17 new logs [03-08-2022 01:00:02]11934: WAF :: fetched 1 new logs [03-08-2022 01:01:01]18314: WAF :: fetched 2 new logs [03-08-2022 01:02:02]24823: WAF :: fetched 4 new logs [03-08-2022 01:03:01]30754: WAF :: fetched 4 new logs [03-08-2022 01:04:01]4670: WAF :: fetched 1 new logs [03-08-2022 01:05:01]10480: WAF :: fetched 2 new logs [03-08-2022 01:08:01]28442: WAF :: fetched 23 new logs [03-08-2022 01:09:02]1847: WAF :: fetched 2 new logs [03-08-2022 01:10:01]7541: WAF :: fetched 1 new logs [03-08-2022 01:12:01]19319: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659499921 [03-08-2022 01:12:01]19319: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 01:12:03]19319: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 01:12:04]19319: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-0112/20220803-011201-Yun1kQJwcpYvnoG-jYJUaAAAABw [03-08-2022 01:12:04]19319: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 01:12:04]19319: WAF :: fetched 8 new logs [03-08-2022 01:15:01]4136: WAF :: fetched 1 new logs [03-08-2022 01:17:01]15505: WAF :: fetched 6 new logs [03-08-2022 01:18:02]21638: WAF :: fetched 1 new logs [03-08-2022 01:19:01]27558: WAF :: fetched 2 new logs [03-08-2022 01:21:01]7199: WAF :: fetched 4 new logs [03-08-2022 01:22:02]12930: WAF :: fetched 7 new logs [03-08-2022 01:23:01]19146: WAF :: fetched 2 new logs [03-08-2022 01:24:02]24886: WAF :: fetched 2 new logs [03-08-2022 01:25:01]31073: WAF :: fetched 4 new logs [03-08-2022 01:27:02]10793: WAF :: fetched 1 new logs [03-08-2022 01:29:01]22577: WAF :: fetched 1 new logs [03-08-2022 01:30:02]28464: WAF :: fetched 2 new logs [03-08-2022 01:32:02]8180: WAF :: fetched 1 new logs [03-08-2022 01:33:01]14226: WAF :: fetched 2 new logs [03-08-2022 01:35:01]26011: WAF :: fetched 1 new logs [03-08-2022 01:37:02]6026: WAF :: fetched 2 new logs [03-08-2022 01:38:01]11709: WAF :: fetched 2 new logs [03-08-2022 01:39:02]17756: WAF :: fetched 1 new logs [03-08-2022 01:40:01]23927: WAF :: fetched 6 new logs [03-08-2022 01:41:02]30090: WAF :: fetched 2 new logs [03-08-2022 01:41:02]30090: Checking for user cron vulnerabilities [03-08-2022 01:42:01]3664: WAF :: fetched 1 new logs [03-08-2022 01:43:02]9504: WAF :: fetched 5 new logs [03-08-2022 01:44:01]15242: Checking ditributed CMS bruteforce attacks [03-08-2022 01:44:01]15242: WAF :: fetched 6 new logs [03-08-2022 01:45:02]: Checking for definition updates [03-08-2022 01:45:02]21139: WAF :: fetched 7 new logs [03-08-2022 01:46:01]27009: WAF :: fetched 3 new logs [03-08-2022 01:48:01]6465: WAF :: fetched 2 new logs [03-08-2022 01:49:01]12683: WAF :: fetched 5 new logs [03-08-2022 01:50:02]18775: WAF :: fetched 2 new logs [03-08-2022 01:51:01]24514: WAF :: fetched 1 new logs [03-08-2022 01:52:02]30272: WAF :: fetched 3 new logs [03-08-2022 01:53:01]3523: WAF :: fetched 4 new logs [03-08-2022 01:58:02]32361: WAF :: fetched 1 new logs [03-08-2022 01:59:01]6201: WAF :: fetched 1 new logs [03-08-2022 02:00:02]11583: WAF :: fetched 1 new logs [03-08-2022 02:01:01]17754: WAF :: fetched 2 new logs [03-08-2022 02:02:01]23382: WAF :: fetched 2 new logs [03-08-2022 02:03:02]28985: WAF :: fetched 3 new logs [03-08-2022 02:05:02]7927: WAF :: fetched 1 new logs [03-08-2022 02:06:01]13655: WAF :: fetched 3 new logs [03-08-2022 02:07:02]19343: WAF :: fetched 2 new logs [03-08-2022 02:08:01]24946: WAF :: fetched 1 new logs [03-08-2022 02:09:02]30676: WAF :: fetched 2 new logs [03-08-2022 02:10:01]3979: WAF :: fetched 16 new logs [03-08-2022 02:11:02]9670: WAF :: fetched 3 new logs [03-08-2022 02:12:01]15269: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659503521 [03-08-2022 02:12:01]15269: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 02:12:03]15269: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 02:12:04]15269: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-0212/20220803-021201-YuoDoVNKV-_thT45kaOUmAAAABw [03-08-2022 02:12:04]15269: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 02:13:01]20888: WAF :: fetched 2 new logs [03-08-2022 02:18:01]16834: WAF :: fetched 6 new logs [03-08-2022 02:21:01]2140: WAF :: fetched 4 new logs [03-08-2022 02:22:02]7862: WAF :: fetched 1 new logs [03-08-2022 02:23:01]13457: WAF :: fetched 1 new logs [03-08-2022 02:24:02]19227: WAF :: fetched 1 new logs [03-08-2022 02:25:01]24867: WAF :: fetched 1 new logs [03-08-2022 02:26:01]30688: WAF :: fetched 6 new logs [03-08-2022 02:27:02]4133: WAF :: fetched 1 new logs [03-08-2022 02:28:01]9764: WAF :: fetched 5 new logs [03-08-2022 02:30:01]21295: WAF :: fetched 8 new logs [03-08-2022 02:31:02]27111: WAF :: fetched 2 new logs [03-08-2022 02:32:01]32742: WAF :: fetched 2 new logs [03-08-2022 02:33:02]6177: WAF :: fetched 1 new logs [03-08-2022 02:34:01]11917: WAF :: fetched 3 new logs [03-08-2022 02:35:02]17739: WAF :: fetched 9 new logs [03-08-2022 02:36:01]23495: WAF :: fetched 5 new logs [03-08-2022 02:37:02]29194: WAF :: fetched 4 new logs [03-08-2022 02:40:01]15117: WAF :: fetched 2 new logs [03-08-2022 02:41:02]21103: WAF :: fetched 6 new logs [03-08-2022 02:41:02]21103: Checking for user cron vulnerabilities [03-08-2022 02:43:02]32484: WAF :: fetched 1 new logs [03-08-2022 02:44:01]6304: Checking ditributed CMS bruteforce attacks [03-08-2022 02:44:01]6304: WAF :: fetched 2 new logs [03-08-2022 02:45:02]11826: WAF :: fetched 3 new logs [03-08-2022 02:46:01]18008: WAF :: fetched 2 new logs [03-08-2022 02:47:02]23550: WAF :: fetched 5 new logs [03-08-2022 02:51:02]15594: WAF :: fetched 1 new logs [03-08-2022 02:53:02]27363: WAF :: fetched 1 new logs [03-08-2022 02:53:02]27350: Updated license status via CDN [03-08-2022 02:54:02]860: WAF :: fetched 1 new logs [03-08-2022 02:55:01]6628: WAF :: fetched 3 new logs [03-08-2022 02:55:02]6628: API call failed for url https://api.recaptcha.cloud/add Status : 500 [03-08-2022 02:56:02]12383: WAF :: fetched 7 new logs [03-08-2022 02:57:01]18261: WAF :: fetched 8 new logs [03-08-2022 02:58:02]24323: WAF :: fetched 8 new logs [03-08-2022 03:00:02]3300: WAF :: fetched 1 new logs [03-08-2022 03:00:03]3300: Found and updated 31 CMS installations [03-08-2022 03:01:01]9522: WAF :: fetched 2 new logs [03-08-2022 03:02:02]15575: WAF :: fetched 1 new logs [03-08-2022 03:02:33]3300: Sending CMS version vulnerability report emails to cpanel users [03-08-2022 03:02:36]3300: Checking wordpress installations for suspicious directories [03-08-2022 03:03:02]21464: WAF :: fetched 6 new logs [03-08-2022 03:04:01]27388: WAF :: fetched 1 new logs [03-08-2022 03:04:30]21516: Sending CMS version vulnerability report emails to cpanel users [03-08-2022 03:04:33]21516: Checking wordpress installations for suspicious directories [03-08-2022 03:05:02]805: WAF :: fetched 1 new logs [03-08-2022 03:06:01]7035: WAF :: fetched 34 new logs [03-08-2022 03:07:02]12676: WAF :: fetched 48 new logs [03-08-2022 03:08:01]18290: WAF :: fetched 51 new logs [03-08-2022 03:09:02]23956: WAF :: fetched 41 new logs [03-08-2022 03:10:01]29713: WAF :: fetched 53 new logs [03-08-2022 03:11:02]3534: WAF :: fetched 62 new logs [03-08-2022 03:12:01]9299: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659507121 [03-08-2022 03:12:01]9299: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 03:12:03]9299: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 03:12:04]9299: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-0312/20220803-031201-YuoRsb0C8rOXOmeTkxNitgAAABU [03-08-2022 03:12:04]9299: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 03:12:04]9299: WAF :: fetched 60 new logs [03-08-2022 03:13:02]15224: WAF :: fetched 25 new logs [03-08-2022 03:14:01]20898: WAF :: fetched 2 new logs [03-08-2022 03:15:02]26505: WAF :: fetched 3 new logs [03-08-2022 03:16:01]32738: WAF :: fetched 10 new logs [03-08-2022 03:17:01]5999: WAF :: fetched 1 new logs [03-08-2022 03:18:01]12195: WAF :: fetched 8 new logs [03-08-2022 03:19:01]17884: WAF :: fetched 2 new logs [03-08-2022 03:20:01]24065: WAF :: fetched 3 new logs [03-08-2022 03:21:01]29677: WAF :: fetched 14 new logs [03-08-2022 03:23:01]8988: WAF :: fetched 1 new logs [03-08-2022 03:24:02]14608: WAF :: fetched 3 new logs [03-08-2022 03:29:01]10359: WAF :: fetched 4 new logs [03-08-2022 03:30:02]16074: WAF :: fetched 1 new logs [03-08-2022 03:31:01]21681: WAF :: fetched 2 new logs [03-08-2022 03:32:02]27309: WAF :: fetched 2 new logs [03-08-2022 03:37:01]23107: WAF :: fetched 1 new logs [03-08-2022 03:38:02]28700: WAF :: fetched 3 new logs [03-08-2022 03:39:01]1908: WAF :: fetched 2 new logs [03-08-2022 03:40:02]8761: WAF :: fetched 1 new logs [03-08-2022 03:41:01]4793: WAF :: fetched 2 new logs [03-08-2022 03:41:01]4793: Checking for user cron vulnerabilities [03-08-2022 03:42:01]14197: WAF :: fetched 2 new logs [03-08-2022 03:43:01]27312: WAF :: fetched 4 new logs [03-08-2022 03:44:01]901: Checking ditributed CMS bruteforce attacks [03-08-2022 03:44:02]901: WAF :: fetched 1 new logs [03-08-2022 03:45:01]6772: WAF :: fetched 11 new logs [03-08-2022 03:46:01]12113: WAF :: fetched 4 new logs [03-08-2022 03:48:02]23424: WAF :: fetched 4 new logs [03-08-2022 03:49:01]29384: WAF :: fetched 7 new logs [03-08-2022 03:50:02]2477: WAF :: fetched 1 new logs [03-08-2022 03:51:01]8533: WAF :: fetched 2 new logs [03-08-2022 03:52:02]13835: WAF :: fetched 1 new logs [03-08-2022 03:55:01]31131: WAF :: fetched 4 new logs [03-08-2022 03:56:02]4509: WAF :: fetched 2 new logs [03-08-2022 03:58:01]15356: WAF :: fetched 3 new logs [03-08-2022 03:59:01]21289: WAF :: fetched 6 new logs [03-08-2022 04:02:02]6195: WAF :: fetched 1 new logs [03-08-2022 04:04:02]17384: WAF :: fetched 4 new logs [03-08-2022 04:05:01]22951: WAF :: fetched 33 new logs [03-08-2022 04:06:02]28650: WAF :: fetched 58 new logs [03-08-2022 04:07:01]1781: WAF :: fetched 44 new logs [03-08-2022 04:08:02]7553: WAF :: fetched 51 new logs [03-08-2022 04:09:01]13080: WAF :: fetched 50 new logs [03-08-2022 04:10:02]18778: WAF :: fetched 60 new logs [03-08-2022 04:11:01]24411: WAF :: fetched 55 new logs [03-08-2022 04:12:01]29975: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659510721 [03-08-2022 04:12:01]29975: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 04:12:03]29975: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 04:12:04]29975: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-0412/20220803-041201-YuofwScXsSCAVPHwQvQAWQAAACY [03-08-2022 04:12:04]29975: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 04:12:04]29975: WAF :: fetched 35 new logs [03-08-2022 04:16:01]20089: WAF :: fetched 1 new logs [03-08-2022 04:17:02]25705: WAF :: fetched 2 new logs [03-08-2022 04:18:01]31251: WAF :: fetched 6 new logs [03-08-2022 04:19:02]4600: WAF :: fetched 42 new logs [03-08-2022 04:20:02]10227: WAF :: fetched 60 new logs [03-08-2022 04:21:02]15876: WAF :: fetched 62 new logs [03-08-2022 04:22:01]21390: WAF :: fetched 29 new logs [03-08-2022 04:23:02]26995: WAF :: fetched 3 new logs [03-08-2022 04:26:01]11472: WAF :: fetched 1 new logs [03-08-2022 04:27:02]17083: WAF :: fetched 2 new logs [03-08-2022 04:29:02]28280: WAF :: fetched 1 new logs [03-08-2022 04:30:01]1573: WAF :: fetched 9 new logs [03-08-2022 04:31:02]7375: WAF :: fetched 5 new logs [03-08-2022 04:33:02]18583: WAF :: fetched 2 new logs [03-08-2022 04:35:01]29741: WAF :: fetched 2 new logs [03-08-2022 04:36:02]3166: WAF :: fetched 3 new logs [03-08-2022 04:37:01]8723: WAF :: fetched 3 new logs [03-08-2022 04:38:02]14311: WAF :: fetched 1 new logs [03-08-2022 04:39:01]19863: WAF :: fetched 1 new logs [03-08-2022 04:41:01]31130: WAF :: fetched 1 new logs [03-08-2022 04:41:01]31130: Checking for user cron vulnerabilities [03-08-2022 04:42:02]4475: WAF :: fetched 4 new logs [03-08-2022 04:43:01]10008: WAF :: fetched 1 new logs [03-08-2022 04:44:01]15608: Checking ditributed CMS bruteforce attacks [03-08-2022 04:44:02]15608: WAF :: fetched 2 new logs [03-08-2022 04:47:01]32556: WAF :: fetched 1 new logs [03-08-2022 04:49:01]11456: WAF :: fetched 4 new logs [03-08-2022 04:50:02]17215: WAF :: fetched 6 new logs [03-08-2022 04:53:02]1620: WAF :: fetched 1 new logs [03-08-2022 04:55:01]12800: WAF :: fetched 1 new logs [03-08-2022 04:56:02]18147: WAF :: fetched 1 new logs [03-08-2022 04:57:01]24042: WAF :: fetched 2 new logs [03-08-2022 04:58:01]29635: WAF :: fetched 4 new logs [03-08-2022 05:01:02]14374: WAF :: fetched 1 new logs [03-08-2022 05:01:42]14365: Starting daily scan on files updated in last 24 hrs [03-08-2022 05:02:01]19983: WAF :: fetched 8 new logs [03-08-2022 05:03:02]25657: WAF :: fetched 10 new logs [03-08-2022 05:04:01]31199: WAF :: fetched 1 new logs [03-08-2022 05:07:02]15938: WAF :: fetched 5 new logs [03-08-2022 05:10:02]32362: WAF :: fetched 4 new logs [03-08-2022 05:11:01]6113: WAF :: fetched 4 new logs [03-08-2022 05:12:02]11712: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659514322 [03-08-2022 05:12:02]11712: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 05:12:04]11712: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 05:12:04]11712: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-0512/20220803-051202-Yuot0qdYRVHF8Z3lN_kYDgAAAAs [03-08-2022 05:12:04]11712: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 05:12:04]11712: WAF :: fetched 3 new logs [03-08-2022 05:13:01]17314: WAF :: fetched 2 new logs [03-08-2022 05:14:01]22569: WAF :: fetched 1 new logs [03-08-2022 05:16:01]1893: WAF :: fetched 2 new logs [03-08-2022 05:18:01]13216: WAF :: fetched 7 new logs [03-08-2022 05:19:02]18926: WAF :: fetched 2 new logs [03-08-2022 05:21:02]30325: WAF :: fetched 1 new logs [03-08-2022 05:23:02]9173: WAF :: fetched 3 new logs [03-08-2022 05:24:01]14804: WAF :: fetched 1 new logs [03-08-2022 05:25:01]20510: WAF :: fetched 4 new logs [03-08-2022 05:26:02]26180: WAF :: fetched 1 new logs [03-08-2022 05:28:02]5095: WAF :: fetched 2 new logs [03-08-2022 05:29:02]10706: WAF :: fetched 1 new logs [03-08-2022 05:30:01]16369: WAF :: fetched 1 new logs [03-08-2022 05:31:02]22059: WAF :: fetched 2 new logs [03-08-2022 05:32:01]27617: WAF :: fetched 3 new logs [03-08-2022 05:34:01]6245: WAF :: fetched 1 new logs [03-08-2022 05:35:02]12299: WAF :: fetched 7 new logs [03-08-2022 05:36:02]18090: WAF :: fetched 6 new logs [03-08-2022 05:37:01]23638: WAF :: fetched 1 new logs [03-08-2022 05:38:02]29285: WAF :: fetched 3 new logs [03-08-2022 05:39:01]2548: WAF :: fetched 5 new logs [03-08-2022 05:40:01]8283: WAF :: fetched 8 new logs [03-08-2022 05:41:01]13653: WAF :: fetched 9 new logs [03-08-2022 05:41:01]13653: Checking for user cron vulnerabilities [03-08-2022 05:42:02]19714: WAF :: fetched 7 new logs [03-08-2022 05:43:01]25296: WAF :: fetched 9 new logs [03-08-2022 05:44:01]30979: Checking ditributed CMS bruteforce attacks [03-08-2022 05:44:02]30979: WAF :: fetched 4 new logs [03-08-2022 05:45:01]4345: WAF :: fetched 7 new logs [03-08-2022 05:46:02]10084: WAF :: fetched 1 new logs [03-08-2022 05:48:02]21272: WAF :: fetched 1 new logs [03-08-2022 05:50:02]32568: WAF :: fetched 1 new logs [03-08-2022 05:51:01]5933: WAF :: fetched 1 new logs [03-08-2022 05:52:01]11247: WAF :: fetched 4 new logs [03-08-2022 05:53:01]17219: WAF :: fetched 6 new logs [03-08-2022 05:54:01]22565: WAF :: fetched 6 new logs [03-08-2022 05:55:02]28688: WAF :: fetched 10 new logs [03-08-2022 05:55:03]28688: API call failed for url https://api.recaptcha.cloud/add Status : 500 [03-08-2022 05:56:01]1931: WAF :: fetched 9 new logs [03-08-2022 05:57:02]7635: WAF :: fetched 9 new logs [03-08-2022 05:58:01]13157: WAF :: fetched 10 new logs [03-08-2022 05:59:01]18748: WAF :: fetched 10 new logs [03-08-2022 06:00:02]24178: WAF :: fetched 8 new logs [03-08-2022 06:01:01]30258: WAF :: fetched 15 new logs [03-08-2022 06:04:02]14487: WAF :: fetched 2 new logs [03-08-2022 06:05:01]20525: WAF :: fetched 2 new logs [03-08-2022 06:06:02]26323: WAF :: fetched 1 new logs [03-08-2022 06:07:01]31860: WAF :: fetched 1 new logs [03-08-2022 06:08:02]5234: WAF :: fetched 7 new logs [03-08-2022 06:09:01]10819: WAF :: fetched 11 new logs [03-08-2022 06:10:02]16600: WAF :: fetched 10 new logs [03-08-2022 06:11:01]22199: WAF :: fetched 14 new logs [03-08-2022 06:12:02]27816: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659517922 [03-08-2022 06:12:02]27816: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 06:12:04]27816: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 06:12:04]27816: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-0612/20220803-061202-Yuo74ptIyjyDv8zFE8l36QAAABM [03-08-2022 06:12:04]27816: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 06:12:04]27816: WAF :: fetched 24 new logs [03-08-2022 06:13:01]1010: WAF :: fetched 16 new logs [03-08-2022 06:16:01]18060: WAF :: fetched 2 new logs [03-08-2022 06:17:02]23691: WAF :: fetched 1 new logs [03-08-2022 06:19:01]2662: WAF :: fetched 1 new logs [03-08-2022 06:20:01]8337: WAF :: fetched 1 new logs [03-08-2022 06:22:01]19641: WAF :: fetched 5 new logs [03-08-2022 06:23:02]24965: WAF :: fetched 1 new logs [03-08-2022 06:24:01]30951: WAF :: fetched 1 new logs [03-08-2022 06:25:02]4097: WAF :: fetched 2 new logs [03-08-2022 06:26:01]10116: WAF :: fetched 1 new logs [03-08-2022 06:30:02]368: WAF :: fetched 1 new logs [03-08-2022 06:31:01]6175: WAF :: fetched 5 new logs [03-08-2022 06:32:02]11860: WAF :: fetched 2 new logs [03-08-2022 06:34:01]22939: WAF :: fetched 2 new logs [03-08-2022 06:35:01]28579: WAF :: fetched 2 new logs [03-08-2022 06:36:01]1592: WAF :: fetched 4 new logs [03-08-2022 06:37:01]7594: WAF :: fetched 9 new logs [03-08-2022 06:38:02]12849: WAF :: fetched 1 new logs [03-08-2022 06:39:01]18841: WAF :: fetched 3 new logs [03-08-2022 06:41:01]30163: Checking for user cron vulnerabilities [03-08-2022 06:43:01]9065: WAF :: fetched 4 new logs [03-08-2022 06:44:01]14357: Checking ditributed CMS bruteforce attacks [03-08-2022 06:44:02]14357: WAF :: fetched 1 new logs [03-08-2022 06:45:01]20634: WAF :: fetched 10 new logs [03-08-2022 06:47:02]31871: WAF :: fetched 1 new logs [03-08-2022 06:48:02]5130: WAF :: fetched 3 new logs [03-08-2022 06:49:01]10614: WAF :: fetched 3 new logs [03-08-2022 06:50:02]16328: WAF :: fetched 1 new logs [03-08-2022 06:52:02]27589: WAF :: fetched 3 new logs [03-08-2022 06:54:02]6381: WAF :: fetched 7 new logs [03-08-2022 06:55:01]12060: WAF :: fetched 5 new logs [03-08-2022 06:56:02]17707: WAF :: fetched 2 new logs [03-08-2022 06:57:01]23271: WAF :: fetched 6 new logs [03-08-2022 06:59:01]2100: WAF :: fetched 1 new logs [03-08-2022 07:00:02]7528: WAF :: fetched 3 new logs [03-08-2022 07:02:02]19302: WAF :: fetched 2 new logs [03-08-2022 07:04:02]30382: WAF :: fetched 2 new logs [03-08-2022 07:05:01]3745: WAF :: fetched 1 new logs [03-08-2022 07:06:02]9419: WAF :: fetched 1 new logs [03-08-2022 07:07:01]14956: WAF :: fetched 16 new logs [03-08-2022 07:08:02]20571: WAF :: fetched 2 new logs [03-08-2022 07:09:01]26121: WAF :: fetched 2 new logs [03-08-2022 07:11:01]5210: WAF :: fetched 7 new logs [03-08-2022 07:12:02]10777: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659521522 [03-08-2022 07:12:02]10777: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 07:12:04]10777: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 07:12:04]10777: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-0712/20220803-071202-YupJ8vEpn_mTn2vA0HObiwAAAAw [03-08-2022 07:12:04]10777: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-08-2022 07:12:05]10777: WAF :: fetched 2 new logs [03-08-2022 07:13:01]16313: WAF :: fetched 3 new logs [03-08-2022 07:15:02]27558: WAF :: fetched 1 new logs [03-08-2022 07:16:01]798: WAF :: fetched 3 new logs [03-08-2022 07:18:01]11986: WAF :: fetched 24 new logs [03-08-2022 07:19:02]17278: WAF :: fetched 37 new logs [03-08-2022 07:20:01]23266: WAF :: fetched 35 new logs [03-08-2022 07:21:02]28662: WAF :: fetched 31 new logs [03-08-2022 07:22:01]2278: WAF :: fetched 36 new logs [03-08-2022 07:23:02]7584: WAF :: fetched 43 new logs [03-08-2022 07:24:01]13538: WAF :: fetched 31 new logs [03-08-2022 07:25:02]18939: WAF :: fetched 1 new logs [03-08-2022 07:26:01]24937: WAF :: fetched 1 new logs [03-08-2022 07:27:02]30236: WAF :: fetched 2 new logs [03-08-2022 07:28:01]3906: WAF :: fetched 1 new logs [03-08-2022 07:29:02]9212: WAF :: fetched 3 new logs [03-08-2022 07:31:02]20593: WAF :: fetched 2 new logs [03-08-2022 07:32:02]26642: WAF :: fetched 2 new logs [03-08-2022 07:33:01]32150: WAF :: fetched 1 new logs [03-08-2022 07:35:01]11082: WAF :: fetched 5 new logs [03-08-2022 07:36:02]16835: WAF :: fetched 2 new logs [03-08-2022 07:37:01]22408: WAF :: fetched 6 new logs [03-08-2022 07:38:02]28043: WAF :: fetched 3 new logs [03-08-2022 07:39:01]1212: WAF :: fetched 3 new logs [03-08-2022 07:40:02]6970: WAF :: fetched 1 new logs [03-08-2022 07:41:02]12670: WAF :: fetched 6 new logs [03-08-2022 07:41:02]12670: Checking for user cron vulnerabilities [03-08-2022 07:42:02]18272: WAF :: fetched 9 new logs [03-08-2022 07:44:01]29079: Checking ditributed CMS bruteforce attacks [03-08-2022 07:44:02]29079: WAF :: fetched 2 new logs [03-08-2022 07:45:01]: Checking for definition updates [03-08-2022 07:45:01]2851: WAF :: fetched 5 new logs [03-08-2022 07:45:02]2836: Updated virus defnition : malware.expert.ndb [03-08-2022 07:45:03]2836: Updated virus defnition : malware.expert.fp [03-08-2022 07:46:02]8577: WAF :: fetched 1 new logs [03-08-2022 07:47:01]14111: WAF :: fetched 3 new logs [03-08-2022 07:48:02]19741: WAF :: fetched 8 new logs [03-08-2022 07:49:01]25331: WAF :: fetched 6 new logs [03-08-2022 07:50:02]30947: WAF :: fetched 6 new logs [03-08-2022 07:52:02]9896: WAF :: fetched 1 new logs [03-08-2022 07:53:01]15408: WAF :: fetched 1 new logs [03-08-2022 07:55:01]26604: WAF :: fetched 5 new logs [03-08-2022 07:55:02]26604: API call failed for url https://api.recaptcha.cloud/add Status : 500 [03-08-2022 07:56:02]32344: WAF :: fetched 3 new logs [03-08-2022 07:57:02]5571: WAF :: fetched 1 new logs [03-08-2022 07:58:02]11058: WAF :: fetched 3 new logs [03-08-2022 07:59:02]16706: WAF :: fetched 2 new logs [03-08-2022 08:00:02]21909: WAF :: fetched 4 new logs [03-08-2022 08:01:01]28117: WAF :: fetched 2 new logs [03-08-2022 08:02:02]1061: WAF :: fetched 7 new logs [03-08-2022 08:03:01]7096: WAF :: fetched 3 new logs [03-08-2022 08:04:01]12385: WAF :: fetched 2 new logs [03-08-2022 08:07:02]29742: WAF :: fetched 2 new logs [03-08-2022 08:08:01]2992: WAF :: fetched 2 new logs [03-08-2022 08:11:02]19922: WAF :: fetched 2 new logs [03-08-2022 08:12:01]25455: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659525121 [03-08-2022 08:12:01]25455: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 08:12:03]25455: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 08:12:04]25455: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-0812/20220803-081201-YupYAbUdK1XkaDMGHe45hAAAAAU [03-08-2022 08:12:04]25455: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [03-08-2022 08:12:04]25455: WAF :: fetched 3 new logs [03-08-2022 08:13:02]31175: WAF :: fetched 5 new logs [03-08-2022 08:16:02]15868: WAF :: fetched 5 new logs [03-08-2022 08:17:02]21547: WAF :: fetched 2 new logs [03-08-2022 08:18:02]27171: WAF :: fetched 2 new logs [03-08-2022 08:19:02]338: WAF :: fetched 6 new logs [03-08-2022 08:21:02]11555: WAF :: fetched 2 new logs [03-08-2022 08:22:01]17486: WAF :: fetched 1 new logs [03-08-2022 08:23:02]22824: WAF :: fetched 4 new logs [03-08-2022 08:24:02]28821: WAF :: fetched 4 new logs [03-08-2022 08:25:01]1953: WAF :: fetched 1 new logs [03-08-2022 08:28:02]19015: WAF :: fetched 8 new logs [03-08-2022 08:29:01]24618: WAF :: fetched 1 new logs [03-08-2022 08:30:02]29993: WAF :: fetched 2 new logs [03-08-2022 08:32:02]9499: WAF :: fetched 6 new logs [03-08-2022 08:33:01]15136: WAF :: fetched 3 new logs [03-08-2022 08:34:02]20727: WAF :: fetched 1 new logs [03-08-2022 08:35:01]26297: WAF :: fetched 1 new logs [03-08-2022 08:36:02]31767: WAF :: fetched 1 new logs [03-08-2022 08:37:01]5447: WAF :: fetched 9 new logs [03-08-2022 08:38:02]10734: WAF :: fetched 3 new logs [03-08-2022 08:41:01]28086: WAF :: fetched 2 new logs [03-08-2022 08:41:01]28086: Checking for user cron vulnerabilities [03-08-2022 08:43:01]7019: WAF :: fetched 1 new logs [03-08-2022 08:44:01]12655: Checking ditributed CMS bruteforce attacks [03-08-2022 08:44:02]12655: WAF :: fetched 1 new logs [03-08-2022 08:45:01]18211: WAF :: fetched 1 new logs [03-08-2022 08:46:02]24055: WAF :: fetched 13 new logs [03-08-2022 08:48:02]2600: WAF :: fetched 14 new logs [03-08-2022 08:49:01]8640: WAF :: fetched 15 new logs [03-08-2022 08:50:02]14329: WAF :: fetched 2 new logs [03-08-2022 08:51:01]20074: WAF :: fetched 2 new logs [03-08-2022 08:52:02]25743: WAF :: fetched 2 new logs [03-08-2022 08:53:01]31265: WAF :: fetched 1 new logs [03-08-2022 08:54:02]4632: WAF :: fetched 2 new logs [03-08-2022 08:55:01]10203: WAF :: fetched 11 new logs [03-08-2022 08:56:02]15646: WAF :: fetched 9 new logs [03-08-2022 08:57:02]21674: WAF :: fetched 8 new logs [03-08-2022 08:58:02]27196: WAF :: fetched 12 new logs [03-08-2022 08:59:01]32753: WAF :: fetched 8 new logs [03-08-2022 09:02:02]17496: WAF :: fetched 2 new logs [03-08-2022 09:03:01]23531: WAF :: fetched 6 new logs [03-08-2022 09:04:02]28887: WAF :: fetched 3 new logs [03-08-2022 09:05:01]2628: WAF :: fetched 13 new logs [03-08-2022 09:06:02]8152: WAF :: fetched 2 new logs [03-08-2022 09:07:01]14098: WAF :: fetched 4 new logs [03-08-2022 09:08:02]19887: WAF :: fetched 10 new logs [03-08-2022 09:09:01]25443: WAF :: fetched 6 new logs [03-08-2022 09:11:01]4640: WAF :: fetched 1 new logs [03-08-2022 09:12:02]10344: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659528722 [03-08-2022 09:12:02]10344: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 09:12:04]10344: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 09:12:04]10344: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-0912/20220803-091202-YupmElrNTvwNu89DG9zZQAAAAB0 [03-08-2022 09:12:04]10344: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 09:12:05]10344: WAF :: fetched 442 new logs [03-08-2022 09:13:01]15925: WAF :: fetched 1 new logs [03-08-2022 09:14:01]21603: WAF :: fetched 5 new logs [03-08-2022 09:16:01]506: WAF :: fetched 1 new logs [03-08-2022 09:17:02]6338: WAF :: fetched 3 new logs [03-08-2022 09:18:01]11878: WAF :: fetched 4 new logs [03-08-2022 09:20:01]23122: WAF :: fetched 3 new logs [03-08-2022 09:21:02]28968: WAF :: fetched 4 new logs [03-08-2022 09:22:01]2259: WAF :: fetched 7 new logs [03-08-2022 09:23:02]8062: WAF :: fetched 1 new logs [03-08-2022 09:25:02]19326: WAF :: fetched 1 new logs [03-08-2022 09:26:01]25107: WAF :: fetched 3 new logs [03-08-2022 09:27:01]30644: WAF :: fetched 1 new logs [03-08-2022 09:29:01]9746: WAF :: fetched 2 new logs [03-08-2022 09:30:02]15090: WAF :: fetched 1 new logs [03-08-2022 09:31:01]21456: httpd.conf changed. Refreshing watchlist. [03-08-2022 09:32:02]27043: WAF :: fetched 5 new logs [03-08-2022 09:33:01]545: WAF :: fetched 1 new logs [03-08-2022 09:34:02]6377: WAF :: fetched 5 new logs [03-08-2022 09:35:01]11993: httpd.conf changed. Refreshing watchlist. [03-08-2022 09:35:01]12014: WAF :: fetched 5 new logs [03-08-2022 09:36:02]17670: httpd.conf changed. Refreshing watchlist. [03-08-2022 09:36:02]17674: WAF :: fetched 2 new logs [03-08-2022 09:37:01]23674: WAF :: fetched 4 new logs [03-08-2022 09:38:02]29491: WAF :: fetched 2 new logs [03-08-2022 09:39:01]2823: WAF :: fetched 1 new logs [03-08-2022 09:41:01]14386: httpd.conf changed. Refreshing watchlist. [03-08-2022 09:41:01]14380: WAF :: fetched 28 new logs [03-08-2022 09:41:01]14380: Checking for user cron vulnerabilities [03-08-2022 09:42:01]20016: httpd.conf changed. Refreshing watchlist. [03-08-2022 09:43:02]25832: WAF :: fetched 1 new logs [03-08-2022 09:44:01]31331: Checking ditributed CMS bruteforce attacks [03-08-2022 09:44:01]31331: WAF :: fetched 2 new logs [03-08-2022 09:45:02]4800: WAF :: fetched 2 new logs [03-08-2022 09:46:01]10486: WAF :: fetched 1 new logs [03-08-2022 09:47:01]16239: httpd.conf changed. Refreshing watchlist. [03-08-2022 09:48:01]21970: httpd.conf changed. Refreshing watchlist. [03-08-2022 09:48:01]21975: WAF :: fetched 5 new logs [03-08-2022 09:49:01]27375: WAF :: fetched 1 new logs [03-08-2022 09:50:01]1198: WAF :: fetched 13 new logs [03-08-2022 09:53:01]18903: httpd.conf changed. Refreshing watchlist. [03-08-2022 09:53:01]18921: WAF :: fetched 1 new logs [03-08-2022 09:54:02]24356: WAF :: fetched 1 new logs [03-08-2022 09:55:02]30582: WAF :: fetched 6 new logs [03-08-2022 09:56:01]4152: WAF :: fetched 3 new logs [03-08-2022 09:58:01]15519: WAF :: fetched 1 new logs [03-08-2022 10:01:02]386: WAF :: fetched 5 new logs [03-08-2022 10:03:02]12049: WAF :: fetched 2 new logs [03-08-2022 10:04:01]17749: WAF :: fetched 4 new logs [03-08-2022 10:05:01]23456: WAF :: fetched 2 new logs [03-08-2022 10:06:01]29298: WAF :: fetched 7 new logs [03-08-2022 10:08:01]8478: WAF :: fetched 12 new logs [03-08-2022 10:09:02]14237: WAF :: fetched 4 new logs [03-08-2022 10:10:01]19875: WAF :: fetched 4 new logs [03-08-2022 10:11:02]25698: WAF :: fetched 2 new logs [03-08-2022 10:12:01]31280: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659532321 [03-08-2022 10:12:01]31280: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 10:12:03]31280: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 10:12:04]31280: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-1012/20220803-101201-Yup0IXRCk96WOuFSO6xtYwAAAA4 [03-08-2022 10:12:04]31280: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 10:12:04]31280: WAF :: fetched 7 new logs [03-08-2022 10:13:02]4677: WAF :: fetched 4 new logs [03-08-2022 10:14:01]10284: WAF :: fetched 12 new logs [03-08-2022 10:15:02]16014: WAF :: fetched 13 new logs [03-08-2022 10:16:01]21769: WAF :: fetched 10 new logs [03-08-2022 10:17:02]27509: WAF :: fetched 7 new logs [03-08-2022 10:18:01]692: WAF :: fetched 3 new logs [03-08-2022 10:19:01]6601: WAF :: fetched 5 new logs [03-08-2022 10:20:02]12177: WAF :: fetched 3 new logs [03-08-2022 10:21:01]18510: WAF :: fetched 1 new logs [03-08-2022 10:22:02]24115: WAF :: fetched 7 new logs [03-08-2022 10:23:01]30174: WAF :: fetched 2 new logs [03-08-2022 10:24:02]3640: WAF :: fetched 3 new logs [03-08-2022 10:25:01]9257: WAF :: fetched 1 new logs [03-08-2022 10:26:02]15094: WAF :: fetched 3 new logs [03-08-2022 10:27:01]20741: WAF :: fetched 9 new logs [03-08-2022 10:28:02]26483: WAF :: fetched 8 new logs [03-08-2022 10:29:01]32156: WAF :: fetched 3 new logs [03-08-2022 10:31:02]11420: WAF :: fetched 1 new logs [03-08-2022 10:32:01]17154: WAF :: fetched 5 new logs [03-08-2022 10:33:01]22562: WAF :: fetched 1 new logs [03-08-2022 10:34:02]28692: WAF :: fetched 5 new logs [03-08-2022 10:35:01]1969: WAF :: fetched 1 new logs [03-08-2022 10:36:02]8010: WAF :: fetched 1 new logs [03-08-2022 10:38:02]19345: WAF :: fetched 1 new logs [03-08-2022 10:39:01]24962: WAF :: fetched 3 new logs [03-08-2022 10:40:02]30325: WAF :: fetched 1 new logs [03-08-2022 10:41:01]4328: WAF :: fetched 3 new logs [03-08-2022 10:41:01]4328: Checking for user cron vulnerabilities [03-08-2022 10:42:01]10047: WAF :: fetched 3 new logs [03-08-2022 10:43:01]15673: WAF :: fetched 3 new logs [03-08-2022 10:44:01]21132: Checking ditributed CMS bruteforce attacks [03-08-2022 10:44:01]21132: WAF :: fetched 3 new logs [03-08-2022 10:45:01]27219: WAF :: fetched 8 new logs [03-08-2022 10:46:02]378: WAF :: fetched 7 new logs [03-08-2022 10:47:01]6649: WAF :: fetched 1 new logs [03-08-2022 10:49:01]18190: WAF :: fetched 2 new logs [03-08-2022 10:50:02]23649: WAF :: fetched 6 new logs [03-08-2022 10:51:01]29886: WAF :: fetched 60 new logs [03-08-2022 10:52:02]3055: WAF :: fetched 53 new logs [03-08-2022 10:54:02]14717: WAF :: fetched 2 new logs [03-08-2022 10:55:01]20846: WAF :: fetched 3 new logs [03-08-2022 10:56:01]26507: WAF :: fetched 2 new logs [03-08-2022 10:58:01]6022: WAF :: fetched 3 new logs [03-08-2022 11:04:01]8310: WAF :: fetched 2 new logs [03-08-2022 11:05:02]14467: WAF :: fetched 1 new logs [03-08-2022 11:06:01]20289: WAF :: fetched 2 new logs [03-08-2022 11:07:02]26023: WAF :: fetched 1 new logs [03-08-2022 11:07:54]26206: Performed RBL check for 23.111.136.34. [03-08-2022 11:08:01]31778: WAF :: fetched 3 new logs [03-08-2022 11:09:02]5211: WAF :: fetched 3 new logs [03-08-2022 11:10:01]10889: WAF :: fetched 2 new logs [03-08-2022 11:11:02]16437: WAF :: fetched 3 new logs [03-08-2022 11:12:01]22531: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659535921 [03-08-2022 11:12:01]22531: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 11:12:03]22531: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 11:12:04]22531: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-1112/20220803-111201-YuqCMQBl3Ga96h68kRv29QAAAAs [03-08-2022 11:12:04]22531: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 11:12:04]22531: WAF :: fetched 3 new logs [03-08-2022 11:13:02]27961: WAF :: fetched 2 new logs [03-08-2022 11:15:02]7293: WAF :: fetched 5 new logs [03-08-2022 11:16:02]13657: WAF :: fetched 4 new logs [03-08-2022 11:18:02]25038: WAF :: fetched 1 new logs [03-08-2022 11:19:02]30767: WAF :: fetched 1 new logs [03-08-2022 11:20:01]4125: WAF :: fetched 2 new logs [03-08-2022 11:21:02]10106: WAF :: fetched 2 new logs [03-08-2022 11:22:01]15743: WAF :: fetched 1 new logs [03-08-2022 11:24:01]27288: WAF :: fetched 1 new logs [03-08-2022 11:25:02]613: WAF :: fetched 2 new logs [03-08-2022 11:26:01]6576: WAF :: fetched 1 new logs [03-08-2022 11:27:02]12318: WAF :: fetched 1 new logs [03-08-2022 11:28:01]17915: WAF :: fetched 1 new logs [03-08-2022 11:29:01]23682: WAF :: fetched 3 new logs [03-08-2022 11:30:02]29373: WAF :: fetched 1 new logs [03-08-2022 11:31:01]2906: WAF :: fetched 1 new logs [03-08-2022 11:33:01]14274: WAF :: fetched 1 new logs [03-08-2022 11:35:02]25268: WAF :: fetched 1 new logs [03-08-2022 11:36:01]31477: WAF :: fetched 5 new logs [03-08-2022 11:37:01]4656: WAF :: fetched 4 new logs [03-08-2022 11:39:01]16074: WAF :: fetched 3 new logs [03-08-2022 11:41:02]27887: WAF :: fetched 3 new logs [03-08-2022 11:41:02]27887: Checking for user cron vulnerabilities [03-08-2022 11:43:01]7276: WAF :: fetched 4 new logs [03-08-2022 11:44:02]12944: Checking ditributed CMS bruteforce attacks [03-08-2022 11:44:02]12944: WAF :: fetched 5 new logs [03-08-2022 11:45:01]18615: WAF :: fetched 16 new logs [03-08-2022 11:46:02]24561: WAF :: fetched 7 new logs [03-08-2022 11:47:01]30226: WAF :: fetched 9 new logs [03-08-2022 11:48:02]3430: WAF :: fetched 8 new logs [03-08-2022 11:49:01]9468: WAF :: fetched 2 new logs [03-08-2022 11:50:02]15133: WAF :: fetched 2 new logs [03-08-2022 11:51:01]20912: WAF :: fetched 7 new logs [03-08-2022 11:54:02]5579: WAF :: fetched 2 new logs [03-08-2022 11:57:01]22744: WAF :: fetched 1 new logs [03-08-2022 11:59:01]1724: WAF :: fetched 3 new logs [03-08-2022 12:02:02]19231: WAF :: fetched 1 new logs [03-08-2022 12:04:02]30422: WAF :: fetched 1 new logs [03-08-2022 12:05:01]4234: WAF :: fetched 7 new logs [03-08-2022 12:06:02]10540: WAF :: fetched 2 new logs [03-08-2022 12:07:01]16266: WAF :: fetched 3 new logs [03-08-2022 12:08:02]21882: WAF :: fetched 13 new logs [03-08-2022 12:09:01]28007: WAF :: fetched 7 new logs [03-08-2022 12:10:02]1338: WAF :: fetched 3 new logs [03-08-2022 12:11:01]7080: WAF :: fetched 3 new logs [03-08-2022 12:12:02]12857: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659539522 [03-08-2022 12:12:02]12857: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 12:12:04]12857: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 12:12:04]12857: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-1212/20220803-121202-YuqQQp1x62UOkgYzgjUTcAAAABg [03-08-2022 12:12:04]12857: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 12:12:04]12857: WAF :: fetched 6 new logs [03-08-2022 12:13:01]18409: WAF :: fetched 3 new logs [03-08-2022 12:14:02]24100: WAF :: fetched 1 new logs [03-08-2022 12:15:01]29769: WAF :: fetched 5 new logs [03-08-2022 12:16:02]3273: WAF :: fetched 1 new logs [03-08-2022 12:18:02]14562: WAF :: fetched 2 new logs [03-08-2022 12:20:02]25853: WAF :: fetched 2 new logs [03-08-2022 12:22:02]4904: WAF :: fetched 5 new logs [03-08-2022 12:23:01]10464: WAF :: fetched 2 new logs [03-08-2022 12:24:02]16124: WAF :: fetched 1 new logs [03-08-2022 12:26:01]27536: WAF :: fetched 2 new logs [03-08-2022 12:29:01]12132: WAF :: fetched 3 new logs [03-08-2022 12:30:02]17516: WAF :: fetched 14 new logs [03-08-2022 12:31:01]23657: WAF :: fetched 2 new logs [03-08-2022 12:32:02]29107: WAF :: fetched 1 new logs [03-08-2022 12:33:01]2754: WAF :: fetched 1 new logs [03-08-2022 12:34:02]8368: WAF :: fetched 1 new logs [03-08-2022 12:35:01]13986: WAF :: fetched 3 new logs [03-08-2022 12:37:01]25444: WAF :: fetched 2 new logs [03-08-2022 12:38:02]31120: WAF :: fetched 3 new logs [03-08-2022 12:39:01]4432: WAF :: fetched 2 new logs [03-08-2022 12:40:02]10221: WAF :: fetched 2 new logs [03-08-2022 12:41:01]15904: Checking for user cron vulnerabilities [03-08-2022 12:42:01]21633: WAF :: fetched 1 new logs [03-08-2022 12:43:02]27314: WAF :: fetched 2 new logs [03-08-2022 12:44:01]485: Checking ditributed CMS bruteforce attacks [03-08-2022 12:44:01]485: WAF :: fetched 1 new logs [03-08-2022 12:45:01]: Checking for software updates [03-08-2022 12:45:02]6075: WAF :: fetched 3 new logs [03-08-2022 12:46:01]12159: WAF :: fetched 3 new logs [03-08-2022 12:48:01]23616: WAF :: fetched 1 new logs [03-08-2022 12:49:02]29348: WAF :: fetched 1 new logs [03-08-2022 12:50:01]2617: WAF :: fetched 2 new logs [03-08-2022 12:51:01]8361: WAF :: fetched 1 new logs [03-08-2022 12:53:02]20012: WAF :: fetched 1 new logs [03-08-2022 12:55:02]31472: WAF :: fetched 5 new logs [03-08-2022 12:55:03]31472: API call failed for url https://api.recaptcha.cloud/add Status : 500 [03-08-2022 12:56:01]4904: WAF :: fetched 1 new logs [03-08-2022 12:57:02]10698: WAF :: fetched 6 new logs [03-08-2022 12:58:01]16641: WAF :: fetched 30 new logs [03-08-2022 12:59:01]22330: WAF :: fetched 5 new logs [03-08-2022 13:00:02]27667: WAF :: fetched 1 new logs [03-08-2022 13:01:01]1446: WAF :: fetched 2 new logs [03-08-2022 13:02:02]7009: WAF :: fetched 3 new logs [03-08-2022 13:04:02]18491: WAF :: fetched 7 new logs [03-08-2022 13:05:02]24530: WAF :: fetched 4 new logs [03-08-2022 13:06:01]30255: WAF :: fetched 3 new logs [03-08-2022 13:07:02]3714: WAF :: fetched 1 new logs [03-08-2022 13:08:02]9388: WAF :: fetched 1 new logs [03-08-2022 13:10:01]20810: WAF :: fetched 6 new logs [03-08-2022 13:11:02]26232: WAF :: fetched 2 new logs [03-08-2022 13:12:01]32284: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659543121 [03-08-2022 13:12:01]32284: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 13:12:03]32284: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 13:12:03]32284: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-1312/20220803-131201-YuqeUVNKZU8_1oZLSEweawAAAAc [03-08-2022 13:12:03]32284: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 13:12:04]32284: WAF :: fetched 9 new logs [03-08-2022 13:13:02]5679: WAF :: fetched 2 new logs [03-08-2022 13:14:01]11267: WAF :: fetched 5 new logs [03-08-2022 13:16:01]22617: WAF :: fetched 3 new logs [03-08-2022 13:17:02]28401: WAF :: fetched 2 new logs [03-08-2022 13:20:01]12934: WAF :: fetched 13 new logs [03-08-2022 13:21:02]18798: WAF :: fetched 2 new logs [03-08-2022 13:22:01]24458: WAF :: fetched 15 new logs [03-08-2022 13:23:01]30074: WAF :: fetched 2 new logs [03-08-2022 13:25:02]8831: WAF :: fetched 2 new logs [03-08-2022 13:26:01]15033: WAF :: fetched 3 new logs [03-08-2022 13:27:02]20479: WAF :: fetched 1 new logs [03-08-2022 13:28:01]26563: WAF :: fetched 3 new logs [03-08-2022 13:29:02]32283: WAF :: fetched 4 new logs [03-08-2022 13:30:01]5587: WAF :: fetched 3 new logs [03-08-2022 13:31:02]11406: WAF :: fetched 5 new logs [03-08-2022 13:32:01]17198: WAF :: fetched 2 new logs [03-08-2022 13:33:02]22861: WAF :: fetched 2 new logs [03-08-2022 13:34:01]28432: WAF :: fetched 2 new logs [03-08-2022 13:35:02]1674: WAF :: fetched 2 new logs [03-08-2022 13:36:01]7471: WAF :: fetched 2 new logs [03-08-2022 13:38:01]18821: WAF :: fetched 1 new logs [03-08-2022 13:39:02]24494: WAF :: fetched 4 new logs [03-08-2022 13:40:01]30076: WAF :: fetched 4 new logs [03-08-2022 13:41:02]3646: WAF :: fetched 6 new logs [03-08-2022 13:41:02]3646: Checking for user cron vulnerabilities [03-08-2022 13:42:02]9339: WAF :: fetched 2 new logs [03-08-2022 13:43:02]14987: WAF :: fetched 2 new logs [03-08-2022 13:44:01]20612: Checking ditributed CMS bruteforce attacks [03-08-2022 13:44:01]20612: WAF :: fetched 3 new logs [03-08-2022 13:45:01]: Checking for definition updates [03-08-2022 13:47:01]5714: WAF :: fetched 1 new logs [03-08-2022 13:48:02]11404: WAF :: fetched 1 new logs [03-08-2022 13:49:01]17039: WAF :: fetched 4 new logs [03-08-2022 13:50:02]22722: WAF :: fetched 4 new logs [03-08-2022 13:51:02]28399: WAF :: fetched 1 new logs [03-08-2022 13:52:01]1680: WAF :: fetched 1 new logs [03-08-2022 13:53:02]7481: WAF :: fetched 8 new logs [03-08-2022 13:54:01]13139: WAF :: fetched 2 new logs [03-08-2022 13:55:02]18787: WAF :: fetched 3 new logs [03-08-2022 13:57:02]30171: WAF :: fetched 2 new logs [03-08-2022 13:58:01]3474: WAF :: fetched 2 new logs [03-08-2022 13:59:02]9171: WAF :: fetched 2 new logs [03-08-2022 14:00:01]14592: WAF :: fetched 3 new logs [03-08-2022 14:01:02]20848: WAF :: fetched 1 new logs [03-08-2022 14:02:01]26616: WAF :: fetched 1 new logs [03-08-2022 14:04:01]5670: WAF :: fetched 3 new logs [03-08-2022 14:07:02]22603: WAF :: fetched 5 new logs [03-08-2022 14:08:01]28628: WAF :: fetched 2 new logs [03-08-2022 14:09:02]1995: WAF :: fetched 3 new logs [03-08-2022 14:10:01]7683: WAF :: fetched 2 new logs [03-08-2022 14:12:02]18973: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659546722 [03-08-2022 14:12:02]18973: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 14:12:04]18973: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 14:12:04]18973: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-1412/20220803-141202-YuqsYgz0GcjuLPLJD4eg8QAAABY [03-08-2022 14:12:04]18973: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 14:12:04]18973: WAF :: fetched 3 new logs [03-08-2022 14:13:01]25000: WAF :: fetched 1 new logs [03-08-2022 14:14:02]30474: WAF :: fetched 22 new logs [03-08-2022 14:15:01]4163: WAF :: fetched 20 new logs [03-08-2022 14:16:02]9947: WAF :: fetched 1 new logs [03-08-2022 14:17:01]15705: WAF :: fetched 1 new logs [03-08-2022 14:18:02]21362: WAF :: fetched 6 new logs [03-08-2022 14:19:01]26916: WAF :: fetched 1 new logs [03-08-2022 14:20:02]32663: WAF :: fetched 1 new logs [03-08-2022 14:21:01]6027: WAF :: fetched 1 new logs [03-08-2022 14:22:02]11840: WAF :: fetched 2 new logs [03-08-2022 14:23:01]17519: WAF :: fetched 10 new logs [03-08-2022 14:24:02]23177: WAF :: fetched 1 new logs [03-08-2022 14:27:01]7933: WAF :: fetched 1 new logs [03-08-2022 14:29:01]19290: WAF :: fetched 2 new logs [03-08-2022 14:30:02]25037: WAF :: fetched 14 new logs [03-08-2022 14:31:02]30763: WAF :: fetched 3 new logs [03-08-2022 14:32:01]4203: WAF :: fetched 2 new logs [03-08-2022 14:33:02]9954: WAF :: fetched 1 new logs [03-08-2022 14:35:01]21386: WAF :: fetched 1 new logs [03-08-2022 14:36:02]27160: WAF :: fetched 4 new logs [03-08-2022 14:37:01]368: WAF :: fetched 2 new logs [03-08-2022 14:38:02]6225: WAF :: fetched 2 new logs [03-08-2022 14:39:01]11791: WAF :: fetched 4 new logs [03-08-2022 14:40:02]17528: WAF :: fetched 5 new logs [03-08-2022 14:41:01]23219: WAF :: fetched 3 new logs [03-08-2022 14:41:01]23219: Checking for user cron vulnerabilities [03-08-2022 14:42:02]29029: WAF :: fetched 2 new logs [03-08-2022 14:44:01]7648: Checking ditributed CMS bruteforce attacks [03-08-2022 14:44:01]7648: WAF :: fetched 1 new logs [03-08-2022 14:45:02]13788: WAF :: fetched 4 new logs [03-08-2022 14:47:02]25427: WAF :: fetched 1 new logs [03-08-2022 14:48:01]31067: WAF :: fetched 3 new logs [03-08-2022 14:49:02]4490: WAF :: fetched 7 new logs [03-08-2022 14:50:01]10067: WAF :: fetched 5 new logs [03-08-2022 14:51:02]16016: WAF :: fetched 8 new logs [03-08-2022 14:52:02]21825: WAF :: fetched 1 new logs [03-08-2022 14:53:01]27529: WAF :: fetched 5 new logs [03-08-2022 14:53:02]27523: Updated license status via CDN [03-08-2022 14:54:01]395: WAF :: fetched 2 new logs [03-08-2022 14:55:02]6649: WAF :: fetched 1 new logs [03-08-2022 14:56:01]12335: WAF :: fetched 1 new logs [03-08-2022 14:57:02]18175: WAF :: fetched 2 new logs [03-08-2022 14:58:02]23812: WAF :: fetched 1 new logs [03-08-2022 14:59:01]29461: WAF :: fetched 3 new logs [03-08-2022 15:00:02]2625: WAF :: fetched 1 new logs [03-08-2022 15:01:01]8835: Reseting cPGuard inotify settings [03-08-2022 15:01:01]8838: WAF :: fetched 18 new logs [03-08-2022 15:02:02]14698: WAF :: fetched 3 new logs [03-08-2022 15:03:01]20435: WAF :: fetched 3 new logs [03-08-2022 15:04:01]25772: WAF :: fetched 3 new logs [03-08-2022 15:07:02]11087: WAF :: fetched 1 new logs [03-08-2022 15:09:02]22425: WAF :: fetched 3 new logs [03-08-2022 15:10:01]28019: WAF :: fetched 2 new logs [03-08-2022 15:11:02]1445: WAF :: fetched 2 new logs [03-08-2022 15:12:01]7216: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659550321 [03-08-2022 15:12:01]7216: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 15:12:03]7216: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 15:12:04]7216: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-1512/20220803-151201-Yuq6cUiE47a2cnPK-k5yrgAAADU [03-08-2022 15:12:04]7216: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 15:12:04]7216: WAF :: fetched 3 new logs [03-08-2022 15:14:01]18467: WAF :: fetched 1 new logs [03-08-2022 15:15:02]24198: WAF :: fetched 2 new logs [03-08-2022 15:16:01]29854: WAF :: fetched 2 new logs [03-08-2022 15:17:02]3325: WAF :: fetched 1 new logs [03-08-2022 15:18:01]8903: WAF :: fetched 4 new logs [03-08-2022 15:19:02]14637: WAF :: fetched 2 new logs [03-08-2022 15:20:01]20318: WAF :: fetched 2 new logs [03-08-2022 15:22:01]31351: WAF :: fetched 1 new logs [03-08-2022 15:23:01]5044: WAF :: fetched 1 new logs [03-08-2022 15:24:01]10345: WAF :: fetched 1 new logs [03-08-2022 15:26:01]22030: WAF :: fetched 4 new logs [03-08-2022 15:27:02]27769: WAF :: fetched 2 new logs [03-08-2022 15:28:01]1024: WAF :: fetched 7 new logs [03-08-2022 15:29:01]6724: WAF :: fetched 1 new logs [03-08-2022 15:30:02]12082: WAF :: fetched 3 new logs [03-08-2022 15:31:01]18170: WAF :: fetched 3 new logs [03-08-2022 15:32:02]23667: WAF :: fetched 2 new logs [03-08-2022 15:36:02]14391: WAF :: fetched 6 new logs [03-08-2022 15:37:01]20415: WAF :: fetched 2 new logs [03-08-2022 15:39:01]31902: WAF :: fetched 3 new logs [03-08-2022 15:40:01]5342: WAF :: fetched 2 new logs [03-08-2022 15:41:02]10777: WAF :: fetched 1 new logs [03-08-2022 15:41:02]10777: Checking for user cron vulnerabilities [03-08-2022 15:42:02]16857: WAF :: fetched 1 new logs [03-08-2022 15:43:01]22450: WAF :: fetched 4 new logs [03-08-2022 15:44:01]28085: Checking ditributed CMS bruteforce attacks [03-08-2022 15:44:02]28085: WAF :: fetched 4 new logs [03-08-2022 15:45:01]1444: WAF :: fetched 2 new logs [03-08-2022 15:47:01]12974: WAF :: fetched 5 new logs [03-08-2022 15:48:02]18355: WAF :: fetched 2 new logs [03-08-2022 15:51:01]3657: WAF :: fetched 3 new logs [03-08-2022 15:52:01]9144: WAF :: fetched 5 new logs [03-08-2022 15:53:02]15267: WAF :: fetched 2 new logs [03-08-2022 15:54:01]20824: WAF :: fetched 3 new logs [03-08-2022 15:55:02]26464: WAF :: fetched 1 new logs [03-08-2022 15:56:01]32114: WAF :: fetched 6 new logs [03-08-2022 15:57:02]5586: WAF :: fetched 2 new logs [03-08-2022 15:58:01]11155: WAF :: fetched 3 new logs [03-08-2022 15:59:02]16942: WAF :: fetched 2 new logs [03-08-2022 16:00:01]22362: WAF :: fetched 3 new logs [03-08-2022 16:01:01]28460: WAF :: fetched 2 new logs [03-08-2022 16:02:02]1688: WAF :: fetched 19 new logs [03-08-2022 16:03:01]7810: WAF :: fetched 4 new logs [03-08-2022 16:05:01]19227: WAF :: fetched 5 new logs [03-08-2022 16:07:01]30658: WAF :: fetched 1 new logs [03-08-2022 16:08:02]4053: WAF :: fetched 6 new logs [03-08-2022 16:09:01]9688: WAF :: fetched 5 new logs [03-08-2022 16:10:02]15097: WAF :: fetched 3 new logs [03-08-2022 16:11:01]21234: WAF :: fetched 7 new logs [03-08-2022 16:12:02]26662: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659553922 [03-08-2022 16:12:02]26662: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 16:12:04]26662: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 16:12:04]26662: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-1612/20220803-161202-YurIgpAqJ92cmkXJ3Qi1JAAAABY [03-08-2022 16:12:04]26662: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 16:12:04]26662: WAF :: fetched 1 new logs [03-08-2022 16:13:01]32544: WAF :: fetched 3 new logs [03-08-2022 16:14:02]5933: WAF :: fetched 3 new logs [03-08-2022 16:16:02]17237: WAF :: fetched 1 new logs [03-08-2022 16:17:01]22903: WAF :: fetched 1 new logs [03-08-2022 16:18:02]28587: WAF :: fetched 2 new logs [03-08-2022 16:19:01]1827: WAF :: fetched 3 new logs [03-08-2022 16:20:01]7538: WAF :: fetched 1 new logs [03-08-2022 16:21:01]13297: WAF :: fetched 1 new logs [03-08-2022 16:22:02]18812: WAF :: fetched 6 new logs [03-08-2022 16:23:01]24824: WAF :: fetched 2 new logs [03-08-2022 16:24:02]30516: WAF :: fetched 7 new logs [03-08-2022 16:25:01]3851: WAF :: fetched 6 new logs [03-08-2022 16:26:02]9621: WAF :: fetched 6 new logs [03-08-2022 16:27:01]15412: WAF :: fetched 6 new logs [03-08-2022 16:28:02]21018: WAF :: fetched 3 new logs [03-08-2022 16:31:01]5710: WAF :: fetched 5 new logs [03-08-2022 16:32:02]11469: WAF :: fetched 1 new logs [03-08-2022 16:33:01]17040: WAF :: fetched 7 new logs [03-08-2022 16:34:02]22719: WAF :: fetched 3 new logs [03-08-2022 16:35:01]28287: WAF :: fetched 3 new logs [03-08-2022 16:36:02]1619: WAF :: fetched 1 new logs [03-08-2022 16:37:01]7378: WAF :: fetched 2 new logs [03-08-2022 16:38:02]13038: WAF :: fetched 2 new logs [03-08-2022 16:39:01]18665: WAF :: fetched 1 new logs [03-08-2022 16:40:02]24300: WAF :: fetched 1 new logs [03-08-2022 16:41:01]29940: WAF :: fetched 2 new logs [03-08-2022 16:41:01]29940: Checking for user cron vulnerabilities [03-08-2022 16:42:02]3415: WAF :: fetched 6 new logs [03-08-2022 16:44:02]14651: Checking ditributed CMS bruteforce attacks [03-08-2022 16:45:01]20239: WAF :: fetched 2 new logs [03-08-2022 16:46:02]25973: WAF :: fetched 4 new logs [03-08-2022 16:47:02]31607: WAF :: fetched 3 new logs [03-08-2022 16:48:01]4931: WAF :: fetched 2 new logs [03-08-2022 16:49:01]10585: WAF :: fetched 6 new logs [03-08-2022 16:50:01]15995: WAF :: fetched 3 new logs [03-08-2022 16:51:01]22147: WAF :: fetched 7 new logs [03-08-2022 16:52:02]27767: WAF :: fetched 1 new logs [03-08-2022 16:54:02]6782: WAF :: fetched 1 new logs [03-08-2022 16:55:01]12353: WAF :: fetched 9 new logs [03-08-2022 16:55:02]12353: API call failed for url https://api.recaptcha.cloud/add Status : 500 [03-08-2022 16:56:02]18204: WAF :: fetched 18 new logs [03-08-2022 16:58:01]29586: WAF :: fetched 3 new logs [03-08-2022 16:59:02]2939: WAF :: fetched 2 new logs [03-08-2022 17:00:01]8270: WAF :: fetched 18 new logs [03-08-2022 17:02:01]20149: WAF :: fetched 3 new logs [03-08-2022 17:04:01]31499: WAF :: fetched 3 new logs [03-08-2022 17:05:02]4894: WAF :: fetched 3 new logs [03-08-2022 17:06:01]10530: WAF :: fetched 5 new logs [03-08-2022 17:07:02]16286: WAF :: fetched 2 new logs [03-08-2022 17:08:01]21873: WAF :: fetched 4 new logs [03-08-2022 17:09:02]27579: WAF :: fetched 2 new logs [03-08-2022 17:10:01]824: WAF :: fetched 4 new logs [03-08-2022 17:12:01]12291: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659557521 [03-08-2022 17:12:01]12291: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 17:12:03]12291: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 17:12:04]12291: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-1712/20220803-171201-YurWkX-bSaMz4w-C6GTTtQAAAAU [03-08-2022 17:12:04]12291: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 17:12:04]12291: WAF :: fetched 3 new logs [03-08-2022 17:14:01]23606: WAF :: fetched 5 new logs [03-08-2022 17:15:01]29241: WAF :: fetched 3 new logs [03-08-2022 17:16:02]2609: WAF :: fetched 1 new logs [03-08-2022 17:17:01]8195: WAF :: fetched 5 new logs [03-08-2022 17:18:02]13981: WAF :: fetched 3 new logs [03-08-2022 17:19:01]19640: WAF :: fetched 8 new logs [03-08-2022 17:20:02]25325: WAF :: fetched 9 new logs [03-08-2022 17:21:01]30933: WAF :: fetched 3 new logs [03-08-2022 17:23:01]9919: WAF :: fetched 3 new logs [03-08-2022 17:24:02]15611: WAF :: fetched 5 new logs [03-08-2022 17:25:01]21153: WAF :: fetched 1 new logs [03-08-2022 17:26:01]26883: WAF :: fetched 7 new logs [03-08-2022 17:27:02]32184: WAF :: fetched 2 new logs [03-08-2022 17:28:02]6076: WAF :: fetched 9 new logs [03-08-2022 17:29:01]11624: WAF :: fetched 9 new logs [03-08-2022 17:30:02]17273: WAF :: fetched 10 new logs [03-08-2022 17:31:01]22953: WAF :: fetched 8 new logs [03-08-2022 17:32:02]28427: WAF :: fetched 6 new logs [03-08-2022 17:33:01]2208: WAF :: fetched 9 new logs [03-08-2022 17:34:02]7622: WAF :: fetched 8 new logs [03-08-2022 17:35:01]13680: WAF :: fetched 4 new logs [03-08-2022 17:37:02]25205: WAF :: fetched 2 new logs [03-08-2022 17:38:01]30858: WAF :: fetched 2 new logs [03-08-2022 17:39:02]4258: WAF :: fetched 5 new logs [03-08-2022 17:41:02]15667: WAF :: fetched 3 new logs [03-08-2022 17:41:02]15667: Checking for user cron vulnerabilities [03-08-2022 17:42:01]21260: WAF :: fetched 5 new logs [03-08-2022 17:44:01]32480: Checking ditributed CMS bruteforce attacks [03-08-2022 17:44:01]32480: WAF :: fetched 3 new logs [03-08-2022 17:45:02]5914: WAF :: fetched 52 new logs [03-08-2022 17:46:01]11478: WAF :: fetched 112 new logs [03-08-2022 17:47:02]17129: WAF :: fetched 120 new logs [03-08-2022 17:48:01]22729: WAF :: fetched 39 new logs [03-08-2022 17:49:02]28077: WAF :: fetched 41 new logs [03-08-2022 17:50:01]1698: WAF :: fetched 25 new logs [03-08-2022 17:53:02]18973: WAF :: fetched 2 new logs [03-08-2022 17:54:01]24471: WAF :: fetched 43 new logs [03-08-2022 17:55:02]30051: WAF :: fetched 4 new logs [03-08-2022 17:59:02]20222: WAF :: fetched 1 new logs [03-08-2022 18:01:01]31526: WAF :: fetched 2 new logs [03-08-2022 18:02:01]4811: WAF :: fetched 2 new logs [03-08-2022 18:04:02]16303: WAF :: fetched 1 new logs [03-08-2022 18:05:01]21832: WAF :: fetched 10 new logs [03-08-2022 18:06:02]27572: WAF :: fetched 46 new logs [03-08-2022 18:07:01]620: WAF :: fetched 105 new logs [03-08-2022 18:08:01]6485: WAF :: fetched 99 new logs [03-08-2022 18:09:02]12073: WAF :: fetched 75 new logs [03-08-2022 18:10:01]17686: WAF :: fetched 22 new logs [03-08-2022 18:11:02]23020: WAF :: fetched 1 new logs [03-08-2022 18:12:01]29035: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659561121 [03-08-2022 18:12:01]29035: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 18:12:03]29035: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 18:12:03]29035: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-1812/20220803-181201-Yurkoe_wTH0rGHrMpUYsdAAAACA [03-08-2022 18:12:03]29035: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 18:13:02]2081: WAF :: fetched 4 new logs [03-08-2022 18:14:01]8073: WAF :: fetched 3 new logs [03-08-2022 18:15:02]13403: WAF :: fetched 6 new logs [03-08-2022 18:16:01]19455: WAF :: fetched 4 new logs [03-08-2022 18:17:02]25094: WAF :: fetched 2 new logs [03-08-2022 18:18:01]30806: WAF :: fetched 4 new logs [03-08-2022 18:19:02]4152: WAF :: fetched 5 new logs [03-08-2022 18:22:02]21073: WAF :: fetched 1 new logs [03-08-2022 18:23:01]26668: WAF :: fetched 9 new logs [03-08-2022 18:24:01]32210: WAF :: fetched 7 new logs [03-08-2022 18:25:01]5231: WAF :: fetched 6 new logs [03-08-2022 18:26:01]11307: WAF :: fetched 1 new logs [03-08-2022 18:27:02]16689: WAF :: fetched 3 new logs [03-08-2022 18:28:01]22701: WAF :: fetched 13 new logs [03-08-2022 18:29:02]28303: WAF :: fetched 2 new logs [03-08-2022 18:30:01]1484: WAF :: fetched 1 new logs [03-08-2022 18:32:01]12760: WAF :: fetched 1 new logs [03-08-2022 18:34:01]24002: WAF :: fetched 1 new logs [03-08-2022 18:35:02]29596: WAF :: fetched 1 new logs [03-08-2022 18:36:01]2872: WAF :: fetched 2 new logs [03-08-2022 18:37:02]8508: WAF :: fetched 4 new logs [03-08-2022 18:41:02]30913: WAF :: fetched 2 new logs [03-08-2022 18:41:02]30913: Checking for user cron vulnerabilities [03-08-2022 18:42:01]4148: WAF :: fetched 5 new logs [03-08-2022 18:43:02]9808: WAF :: fetched 1 new logs [03-08-2022 18:44:01]15336: Checking ditributed CMS bruteforce attacks [03-08-2022 18:44:01]15336: WAF :: fetched 1 new logs [03-08-2022 18:45:02]20985: WAF :: fetched 6 new logs [03-08-2022 18:46:01]26498: WAF :: fetched 1 new logs [03-08-2022 18:47:01]31772: WAF :: fetched 4 new logs [03-08-2022 18:48:02]5561: WAF :: fetched 2 new logs [03-08-2022 18:49:01]11151: WAF :: fetched 4 new logs [03-08-2022 18:51:01]22408: WAF :: fetched 2 new logs [03-08-2022 18:52:01]27926: WAF :: fetched 1 new logs [03-08-2022 18:54:02]6957: WAF :: fetched 1 new logs [03-08-2022 18:55:01]12474: WAF :: fetched 8 new logs [03-08-2022 18:56:02]18179: WAF :: fetched 1 new logs [03-08-2022 18:57:01]23776: WAF :: fetched 4 new logs [03-08-2022 18:58:01]29394: WAF :: fetched 2 new logs [03-08-2022 19:00:02]8105: WAF :: fetched 4 new logs [03-08-2022 19:01:01]14164: WAF :: fetched 9 new logs [03-08-2022 19:03:01]25378: WAF :: fetched 2 new logs [03-08-2022 19:04:01]30658: WAF :: fetched 1 new logs [03-08-2022 19:06:02]9690: WAF :: fetched 6 new logs [03-08-2022 19:10:01]32684: WAF :: fetched 3 new logs [03-08-2022 19:12:01]11651: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659564721 [03-08-2022 19:12:01]11651: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 19:12:03]11651: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 19:12:04]11651: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-1912/20220803-191201-YurysQSepllM3rwiabGkagAAAAA [03-08-2022 19:12:04]11651: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 19:12:04]11651: WAF :: fetched 2 new logs [03-08-2022 19:13:02]17424: WAF :: fetched 4 new logs [03-08-2022 19:14:01]22899: WAF :: fetched 2 new logs [03-08-2022 19:15:02]28229: WAF :: fetched 9 new logs [03-08-2022 19:16:01]1858: WAF :: fetched 1 new logs [03-08-2022 19:18:01]13251: WAF :: fetched 9 new logs [03-08-2022 19:19:02]18888: WAF :: fetched 10 new logs [03-08-2022 19:20:01]24440: WAF :: fetched 5 new logs [03-08-2022 19:21:01]30212: WAF :: fetched 5 new logs [03-08-2022 19:22:02]3503: WAF :: fetched 5 new logs [03-08-2022 19:23:01]9152: WAF :: fetched 1 new logs [03-08-2022 19:24:02]14520: WAF :: fetched 4 new logs [03-08-2022 19:25:01]20473: WAF :: fetched 7 new logs [03-08-2022 19:26:02]26144: WAF :: fetched 2 new logs [03-08-2022 19:27:01]31660: WAF :: fetched 2 new logs [03-08-2022 19:28:02]5095: WAF :: fetched 5 new logs [03-08-2022 19:29:01]10583: WAF :: fetched 4 new logs [03-08-2022 19:35:01]12133: WAF :: fetched 3 new logs [03-08-2022 19:36:02]17932: WAF :: fetched 2 new logs [03-08-2022 19:38:02]29311: WAF :: fetched 1 new logs [03-08-2022 19:39:01]2555: WAF :: fetched 4 new logs [03-08-2022 19:41:01]13949: WAF :: fetched 3 new logs [03-08-2022 19:41:01]13949: Checking for user cron vulnerabilities [03-08-2022 19:43:01]25418: WAF :: fetched 5 new logs [03-08-2022 19:44:02]31135: Checking ditributed CMS bruteforce attacks [03-08-2022 19:44:02]31135: WAF :: fetched 2 new logs [03-08-2022 19:45:01]: Checking for definition updates [03-08-2022 19:45:03]4419: Updated virus defnition : malware.expert.ndb [03-08-2022 19:47:01]15495: WAF :: fetched 2 new logs [03-08-2022 19:48:01]21606: WAF :: fetched 5 new logs [03-08-2022 19:50:02]318: WAF :: fetched 2 new logs [03-08-2022 19:51:01]6583: WAF :: fetched 4 new logs [03-08-2022 19:53:01]17845: WAF :: fetched 1 new logs [03-08-2022 19:55:01]28888: WAF :: fetched 3 new logs [03-08-2022 19:55:02]28888: API call failed for url https://api.recaptcha.cloud/add Status : 500 [03-08-2022 19:57:01]7844: WAF :: fetched 1 new logs [03-08-2022 19:58:02]13599: WAF :: fetched 3 new logs [03-08-2022 19:59:01]19159: WAF :: fetched 4 new logs [03-08-2022 20:00:02]24538: WAF :: fetched 9 new logs [03-08-2022 20:01:02]30711: WAF :: fetched 13 new logs [03-08-2022 20:02:01]4082: WAF :: fetched 9 new logs [03-08-2022 20:03:02]9502: WAF :: fetched 5 new logs [03-08-2022 20:04:01]15555: WAF :: fetched 15 new logs [03-08-2022 20:05:02]20897: WAF :: fetched 1 new logs [03-08-2022 20:11:02]22790: WAF :: fetched 3 new logs [03-08-2022 20:12:01]28382: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659568321 [03-08-2022 20:12:01]28382: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 20:12:03]28382: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 20:12:04]28382: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-2012/20220803-201201-YusAwZVOQOQj5XV6FNFhzAAAACU [03-08-2022 20:12:04]28382: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 20:12:04]28382: WAF :: fetched 1 new logs [03-08-2022 20:15:02]13031: WAF :: fetched 1 new logs [03-08-2022 20:16:01]18622: WAF :: fetched 7 new logs [03-08-2022 20:17:01]24212: WAF :: fetched 6 new logs [03-08-2022 20:18:01]29820: WAF :: fetched 1 new logs [03-08-2022 20:19:01]2834: WAF :: fetched 3 new logs [03-08-2022 20:20:01]8758: WAF :: fetched 4 new logs [03-08-2022 20:21:02]14511: WAF :: fetched 7 new logs [03-08-2022 20:22:01]20037: WAF :: fetched 5 new logs [03-08-2022 20:23:02]25780: WAF :: fetched 3 new logs [03-08-2022 20:24:01]31347: WAF :: fetched 5 new logs [03-08-2022 20:25:02]4731: WAF :: fetched 7 new logs [03-08-2022 20:27:01]16030: WAF :: fetched 2 new logs [03-08-2022 20:28:01]21704: WAF :: fetched 4 new logs [03-08-2022 20:29:01]27049: WAF :: fetched 2 new logs [03-08-2022 20:30:02]651: WAF :: fetched 1 new logs [03-08-2022 20:31:01]6395: WAF :: fetched 1 new logs [03-08-2022 20:32:01]11976: WAF :: fetched 6 new logs [03-08-2022 20:33:01]17387: WAF :: fetched 8 new logs [03-08-2022 20:34:02]23392: WAF :: fetched 1 new logs [03-08-2022 20:37:01]7871: WAF :: fetched 2 new logs [03-08-2022 20:38:02]13594: WAF :: fetched 3 new logs [03-08-2022 20:39:01]19110: WAF :: fetched 2 new logs [03-08-2022 20:40:01]24597: WAF :: fetched 2 new logs [03-08-2022 20:41:02]29915: WAF :: fetched 2 new logs [03-08-2022 20:41:02]29915: Checking for user cron vulnerabilities [03-08-2022 20:42:01]3586: WAF :: fetched 6 new logs [03-08-2022 20:43:02]8962: WAF :: fetched 1 new logs [03-08-2022 20:44:01]14919: Checking ditributed CMS bruteforce attacks [03-08-2022 20:45:02]20333: WAF :: fetched 1 new logs [03-08-2022 20:46:01]26287: WAF :: fetched 2 new logs [03-08-2022 20:47:02]31622: WAF :: fetched 9 new logs [03-08-2022 20:48:01]5380: WAF :: fetched 2 new logs [03-08-2022 20:49:02]10833: WAF :: fetched 1 new logs [03-08-2022 20:51:02]22645: WAF :: fetched 10 new logs [03-08-2022 20:52:01]28127: WAF :: fetched 1 new logs [03-08-2022 20:53:02]1476: WAF :: fetched 1 new logs [03-08-2022 20:55:01]12767: WAF :: fetched 2 new logs [03-08-2022 20:56:01]18415: WAF :: fetched 6 new logs [03-08-2022 20:59:01]2744: WAF :: fetched 9 new logs [03-08-2022 21:00:01]8400: WAF :: fetched 8 new logs [03-08-2022 21:01:02]14383: WAF :: fetched 6 new logs [03-08-2022 21:02:01]20386: WAF :: fetched 5 new logs [03-08-2022 21:03:02]26117: WAF :: fetched 7 new logs [03-08-2022 21:04:01]31701: WAF :: fetched 9 new logs [03-08-2022 21:05:02]5054: WAF :: fetched 8 new logs [03-08-2022 21:06:01]10666: WAF :: fetched 4 new logs [03-08-2022 21:07:02]15990: WAF :: fetched 7 new logs [03-08-2022 21:08:01]21982: WAF :: fetched 8 new logs [03-08-2022 21:09:01]27669: WAF :: fetched 10 new logs [03-08-2022 21:10:02]842: WAF :: fetched 4 new logs [03-08-2022 21:11:01]6575: WAF :: fetched 4 new logs [03-08-2022 21:12:02]12332: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659571922 [03-08-2022 21:12:02]12332: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 21:12:04]12332: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 21:12:04]12332: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-2112/20220803-211202-YusO0unrCfxhdQzzGi62zAAAAD4 [03-08-2022 21:12:04]12332: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 21:12:05]12332: WAF :: fetched 7 new logs [03-08-2022 21:13:01]17836: WAF :: fetched 3 new logs [03-08-2022 21:14:02]23473: WAF :: fetched 2 new logs [03-08-2022 21:15:01]28982: WAF :: fetched 2 new logs [03-08-2022 21:16:02]2350: WAF :: fetched 3 new logs [03-08-2022 21:17:01]7893: WAF :: fetched 5 new logs [03-08-2022 21:18:02]13507: WAF :: fetched 1 new logs [03-08-2022 21:20:02]24756: WAF :: fetched 3 new logs [03-08-2022 21:21:01]30291: WAF :: fetched 1 new logs [03-08-2022 21:22:02]3334: WAF :: fetched 3 new logs [03-08-2022 21:23:01]9271: WAF :: fetched 4 new logs [03-08-2022 21:24:01]14645: WAF :: fetched 2 new logs [03-08-2022 21:25:02]20623: WAF :: fetched 1 new logs [03-08-2022 21:26:01]26235: WAF :: fetched 3 new logs [03-08-2022 21:27:02]31795: WAF :: fetched 189 new logs [03-08-2022 21:28:01]4959: WAF :: fetched 244 new logs [03-08-2022 21:29:02]10625: WAF :: fetched 270 new logs [03-08-2022 21:30:02]16206: WAF :: fetched 203 new logs [03-08-2022 21:31:02]21870: WAF :: fetched 20 new logs [03-08-2022 21:32:01]27376: WAF :: fetched 2 new logs [03-08-2022 21:33:02]526: WAF :: fetched 1 new logs [03-08-2022 21:34:01]6269: WAF :: fetched 1 new logs [03-08-2022 21:35:02]11911: WAF :: fetched 1 new logs [03-08-2022 21:36:01]17556: WAF :: fetched 6 new logs [03-08-2022 21:37:01]23093: WAF :: fetched 1 new logs [03-08-2022 21:38:01]28373: WAF :: fetched 2 new logs [03-08-2022 21:39:01]2135: WAF :: fetched 2 new logs [03-08-2022 21:40:02]7453: WAF :: fetched 2 new logs [03-08-2022 21:41:01]13518: WAF :: fetched 3 new logs [03-08-2022 21:41:01]13518: Checking for user cron vulnerabilities [03-08-2022 21:42:02]18834: WAF :: fetched 1 new logs [03-08-2022 21:44:01]30461: Checking ditributed CMS bruteforce attacks [03-08-2022 21:47:02]15086: WAF :: fetched 29 new logs [03-08-2022 21:48:01]20619: WAF :: fetched 4 new logs [03-08-2022 21:49:02]26292: WAF :: fetched 3 new logs [03-08-2022 21:50:01]31796: WAF :: fetched 3 new logs [03-08-2022 21:51:02]5286: WAF :: fetched 1 new logs [03-08-2022 21:52:01]10857: WAF :: fetched 1 new logs [03-08-2022 21:53:02]16527: WAF :: fetched 2 new logs [03-08-2022 21:55:02]27798: WAF :: fetched 1 new logs [03-08-2022 21:56:01]957: WAF :: fetched 5 new logs [03-08-2022 21:57:02]6617: WAF :: fetched 1 new logs [03-08-2022 21:58:01]12126: WAF :: fetched 2 new logs [03-08-2022 21:59:01]17814: WAF :: fetched 8 new logs [03-08-2022 22:00:02]23196: WAF :: fetched 1 new logs [03-08-2022 22:01:01]29241: WAF :: fetched 3 new logs [03-08-2022 22:02:01]2491: WAF :: fetched 2 new logs [03-08-2022 22:03:02]7843: WAF :: fetched 4 new logs [03-08-2022 22:04:01]13892: WAF :: fetched 4 new logs [03-08-2022 22:05:02]19180: WAF :: fetched 6 new logs [03-08-2022 22:06:01]25188: WAF :: fetched 1 new logs [03-08-2022 22:07:02]30827: WAF :: fetched 10 new logs [03-08-2022 22:07:09]30813: Performing Domain reputation checks [03-08-2022 22:08:01]4089: WAF :: fetched 2 new logs [03-08-2022 22:10:01]15448: WAF :: fetched 2 new logs [03-08-2022 22:11:02]21119: WAF :: fetched 1 new logs [03-08-2022 22:12:01]26652: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659575521 [03-08-2022 22:12:01]26652: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 22:12:03]26652: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 22:12:04]26652: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-2212/20220803-221201-Yusc4R-PS5A_DCgySTZLbAAAAAs [03-08-2022 22:12:04]26652: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 22:13:02]32204: WAF :: fetched 1 new logs [03-08-2022 22:14:01]5571: WAF :: fetched 3 new logs [03-08-2022 22:15:01]11167: WAF :: fetched 1 new logs [03-08-2022 22:16:02]16797: WAF :: fetched 6 new logs [03-08-2022 22:18:02]27931: WAF :: fetched 4 new logs [03-08-2022 22:19:01]1134: WAF :: fetched 6 new logs [03-08-2022 22:21:01]12388: WAF :: fetched 2 new logs [03-08-2022 22:22:01]17964: WAF :: fetched 3 new logs [03-08-2022 22:23:02]23242: WAF :: fetched 2 new logs [03-08-2022 22:25:02]2566: WAF :: fetched 1 new logs [03-08-2022 22:26:01]8159: WAF :: fetched 2 new logs [03-08-2022 22:27:02]13768: WAF :: fetched 3 new logs [03-08-2022 22:28:01]19323: WAF :: fetched 3 new logs [03-08-2022 22:29:02]25010: WAF :: fetched 5 new logs [03-08-2022 22:30:01]30578: WAF :: fetched 10 new logs [03-08-2022 22:31:02]3995: WAF :: fetched 19 new logs [03-08-2022 22:32:01]9567: WAF :: fetched 55 new logs [03-08-2022 22:33:02]15181: WAF :: fetched 312 new logs [03-08-2022 22:34:01]20737: WAF :: fetched 233 new logs [03-08-2022 22:35:02]26355: WAF :: fetched 245 new logs [03-08-2022 22:36:02]31962: WAF :: fetched 120 new logs [03-08-2022 22:37:02]5255: WAF :: fetched 5 new logs [03-08-2022 22:38:01]10797: WAF :: fetched 13 new logs [03-08-2022 22:39:02]16582: WAF :: fetched 4 new logs [03-08-2022 22:40:02]22140: WAF :: fetched 4 new logs [03-08-2022 22:41:01]27761: WAF :: fetched 1 new logs [03-08-2022 22:41:01]27761: Checking for user cron vulnerabilities [03-08-2022 22:42:02]650: WAF :: fetched 5 new logs [03-08-2022 22:44:01]12165: Checking ditributed CMS bruteforce attacks [03-08-2022 22:44:02]12165: WAF :: fetched 2 new logs [03-08-2022 22:45:01]18152: WAF :: fetched 13 new logs [03-08-2022 22:46:02]23845: WAF :: fetched 6 new logs [03-08-2022 22:47:01]29320: WAF :: fetched 28 new logs [03-08-2022 22:48:02]2667: WAF :: fetched 94 new logs [03-08-2022 22:49:01]8297: WAF :: fetched 269 new logs [03-08-2022 22:50:02]14001: WAF :: fetched 239 new logs [03-08-2022 22:51:01]19584: WAF :: fetched 244 new logs [03-08-2022 22:52:02]25177: WAF :: fetched 292 new logs [03-08-2022 22:53:01]30711: WAF :: fetched 242 new logs [03-08-2022 22:54:02]3811: WAF :: fetched 255 new logs [03-08-2022 22:55:01]9737: WAF :: fetched 263 new logs [03-08-2022 22:56:02]15377: WAF :: fetched 261 new logs [03-08-2022 22:57:01]20898: WAF :: fetched 257 new logs [03-08-2022 22:58:02]26460: WAF :: fetched 242 new logs [03-08-2022 22:59:01]32105: WAF :: fetched 233 new logs [03-08-2022 23:00:02]5137: WAF :: fetched 264 new logs [03-08-2022 23:01:01]11154: WAF :: fetched 269 new logs [03-08-2022 23:02:02]16545: WAF :: fetched 293 new logs [03-08-2022 23:03:01]22484: WAF :: fetched 292 new logs [03-08-2022 23:04:02]27849: WAF :: fetched 266 new logs [03-08-2022 23:05:01]1394: WAF :: fetched 275 new logs [03-08-2022 23:06:02]6854: WAF :: fetched 271 new logs [03-08-2022 23:07:01]12787: WAF :: fetched 1 new logs [03-08-2022 23:07:44]12975: Performed RBL check for 23.111.136.34. [03-08-2022 23:08:02]18416: WAF :: fetched 1 new logs [03-08-2022 23:09:02]24053: WAF :: fetched 72 new logs [03-08-2022 23:10:02]29634: WAF :: fetched 269 new logs [03-08-2022 23:11:02]2955: WAF :: fetched 243 new logs [03-08-2022 23:12:01]8477: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659579121 [03-08-2022 23:12:01]8477: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [03-08-2022 23:12:03]8477: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [03-08-2022 23:12:04]8477: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220803/20220803-2312/20220803-231201-Yusq8bO9I3-njLo8lv7o7gAAAAg [03-08-2022 23:12:04]8477: WAF :: No suitable log file found. Using SQLite.. [03-08-2022 23:12:04]8477: WAF :: fetched 233 new logs [03-08-2022 23:13:02]14127: WAF :: fetched 220 new logs [03-08-2022 23:14:01]19742: WAF :: fetched 12 new logs [03-08-2022 23:15:01]25246: WAF :: fetched 6 new logs [03-08-2022 23:16:02]30633: WAF :: fetched 1 new logs [03-08-2022 23:18:02]9887: WAF :: fetched 2 new logs [03-08-2022 23:19:01]15489: WAF :: fetched 2 new logs [03-08-2022 23:21:01]26687: WAF :: fetched 2 new logs [03-08-2022 23:22:02]32294: WAF :: fetched 2 new logs [03-08-2022 23:25:01]16780: WAF :: fetched 4 new logs [03-08-2022 23:26:02]22419: WAF :: fetched 1 new logs [03-08-2022 23:27:01]27938: WAF :: fetched 2 new logs [03-08-2022 23:28:01]1194: WAF :: fetched 6 new logs [03-08-2022 23:29:02]6958: WAF :: fetched 9 new logs [03-08-2022 23:30:01]12514: WAF :: fetched 4 new logs [03-08-2022 23:31:02]18181: WAF :: fetched 2 new logs [03-08-2022 23:32:01]23721: WAF :: fetched 2 new logs [03-08-2022 23:33:02]29278: WAF :: fetched 2 new logs [03-08-2022 23:34:01]2518: WAF :: fetched 1 new logs [03-08-2022 23:36:01]13758: WAF :: fetched 2 new logs [03-08-2022 23:37:02]19386: WAF :: fetched 1 new logs [03-08-2022 23:38:01]24852: WAF :: fetched 3 new logs [03-08-2022 23:39:02]30207: WAF :: fetched 4 new logs [03-08-2022 23:41:02]9620: WAF :: fetched 128 new logs [03-08-2022 23:41:02]9620: Checking for user cron vulnerabilities [03-08-2022 23:42:02]15144: WAF :: fetched 193 new logs [03-08-2022 23:43:01]20693: WAF :: fetched 186 new logs [03-08-2022 23:44:01]26025: Checking ditributed CMS bruteforce attacks [03-08-2022 23:44:02]26025: WAF :: fetched 270 new logs [03-08-2022 23:45:01]31988: WAF :: fetched 112 new logs [03-08-2022 23:46:02]5045: WAF :: fetched 2 new logs [03-08-2022 23:47:02]11017: WAF :: fetched 1 new logs [03-08-2022 23:48:01]16528: WAF :: fetched 2 new logs [03-08-2022 23:49:02]22290: httpd.conf changed. Refreshing watchlist. [03-08-2022 23:49:02]22289: WAF :: fetched 2 new logs [03-08-2022 23:51:02]1250: WAF :: fetched 2 new logs [03-08-2022 23:52:01]7012: WAF :: fetched 1 new logs [03-08-2022 23:53:01]12596: WAF :: fetched 1 new logs [03-08-2022 23:54:02]18486: WAF :: fetched 8 new logs [03-08-2022 23:55:01]24331: httpd.conf changed. Refreshing watchlist. [03-08-2022 23:55:01]24339: WAF :: fetched 13 new logs [03-08-2022 23:56:01]30085: httpd.conf changed. Refreshing watchlist. [03-08-2022 23:56:01]30089: WAF :: fetched 92 new logs [03-08-2022 23:57:01]3424: WAF :: fetched 164 new logs [03-08-2022 23:58:02]8754: WAF :: fetched 147 new logs [03-08-2022 23:59:01]14792: WAF :: fetched 201 new logs [04-08-2022 00:00:02]20187: WAF :: fetched 189 new logs [04-08-2022 00:01:01]26370: WAF :: fetched 17 new logs [04-08-2022 00:01:05]26370: Sending daily report for August 4, 2022 [04-08-2022 00:02:02]32066: WAF :: fetched 3 new logs [04-08-2022 00:03:02]5441: httpd.conf changed. Refreshing watchlist. [04-08-2022 00:03:02]5444: WAF :: fetched 2 new logs [04-08-2022 00:05:02]16615: WAF :: fetched 1 new logs [04-08-2022 00:05:02]16615: Deleted 0 entries older than 6 MONTH from scanner_logs [04-08-2022 00:05:02]16615: Deleted 0 files from Quarantine [04-08-2022 00:06:01]22261: WAF :: fetched 1 new logs [04-08-2022 00:09:01]6728: WAF :: fetched 3 new logs [04-08-2022 00:10:02]12307: WAF :: fetched 1 new logs [04-08-2022 00:11:01]17951: WAF :: fetched 1 new logs [04-08-2022 00:12:01]23485: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659582721 [04-08-2022 00:12:01]23485: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 00:12:03]23485: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 00:12:03]23485: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-0012/20220804-001201-Yus5AVTTwaiYUMkvZ_iKyQAAACo [04-08-2022 00:12:03]23485: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 00:12:04]23485: WAF :: fetched 1 new logs [04-08-2022 00:13:01]28798: WAF :: fetched 5 new logs [04-08-2022 00:14:01]2602: WAF :: fetched 5 new logs [04-08-2022 00:15:02]8163: WAF :: fetched 7 new logs [04-08-2022 00:17:02]19491: WAF :: fetched 198 new logs [04-08-2022 00:18:01]25075: WAF :: fetched 259 new logs [04-08-2022 00:19:02]30481: WAF :: fetched 250 new logs [04-08-2022 00:20:01]4155: WAF :: fetched 254 new logs [04-08-2022 00:21:01]9835: WAF :: fetched 80 new logs [04-08-2022 00:22:02]15434: WAF :: fetched 2 new logs [04-08-2022 00:23:01]20969: WAF :: fetched 2 new logs [04-08-2022 00:24:02]26610: WAF :: fetched 9 new logs [04-08-2022 00:25:01]32066: WAF :: fetched 204 new logs [04-08-2022 00:26:02]5428: WAF :: fetched 225 new logs [04-08-2022 00:27:02]11068: WAF :: fetched 299 new logs [04-08-2022 00:28:01]16590: WAF :: fetched 207 new logs [04-08-2022 00:29:02]22239: WAF :: fetched 251 new logs [04-08-2022 00:30:02]27765: WAF :: fetched 433 new logs [04-08-2022 00:31:01]997: WAF :: fetched 562 new logs [04-08-2022 00:32:02]6697: WAF :: fetched 552 new logs [04-08-2022 00:33:02]12241: WAF :: fetched 518 new logs [04-08-2022 00:34:02]17930: WAF :: fetched 229 new logs [04-08-2022 00:35:01]23383: WAF :: fetched 109 new logs [04-08-2022 00:36:02]29080: WAF :: fetched 164 new logs [04-08-2022 00:37:01]2237: WAF :: fetched 289 new logs [04-08-2022 00:38:02]7841: WAF :: fetched 137 new logs [04-08-2022 00:41:01]24828: Checking for user cron vulnerabilities [04-08-2022 00:42:02]30399: WAF :: fetched 43 new logs [04-08-2022 00:43:01]3567: WAF :: fetched 228 new logs [04-08-2022 00:44:01]9251: Checking ditributed CMS bruteforce attacks [04-08-2022 00:44:02]9251: WAF :: fetched 176 new logs [04-08-2022 00:45:01]: Checking for software updates [04-08-2022 00:45:01]14808: WAF :: fetched 78 new logs [04-08-2022 00:46:02]20466: WAF :: fetched 65 new logs [04-08-2022 00:47:01]25935: WAF :: fetched 47 new logs [04-08-2022 00:52:02]21586: WAF :: fetched 4 new logs [04-08-2022 00:55:01]5936: WAF :: fetched 11 new logs [04-08-2022 00:56:02]11562: WAF :: fetched 8 new logs [04-08-2022 00:57:01]17044: WAF :: fetched 2 new logs [04-08-2022 00:58:02]22634: WAF :: fetched 2 new logs [04-08-2022 00:59:01]28221: WAF :: fetched 2 new logs [04-08-2022 01:01:02]7470: WAF :: fetched 2 new logs [04-08-2022 01:04:02]25744: WAF :: fetched 1 new logs [04-08-2022 01:05:01]31537: WAF :: fetched 2 new logs [04-08-2022 01:06:02]5188: WAF :: fetched 3 new logs [04-08-2022 01:07:01]11021: WAF :: fetched 2 new logs [04-08-2022 01:09:01]22647: WAF :: fetched 3 new logs [04-08-2022 01:12:02]7456: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659586322 [04-08-2022 01:12:02]7456: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 01:12:04]7456: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 01:12:04]7456: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-0112/20220804-011202-YutHEpPwlOyxbBbfAkFAqwAAABk [04-08-2022 01:12:04]7456: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 01:12:04]7456: WAF :: fetched 2 new logs [04-08-2022 01:13:01]13065: WAF :: fetched 9 new logs [04-08-2022 01:14:02]18803: WAF :: fetched 5 new logs [04-08-2022 01:15:01]24464: WAF :: fetched 4 new logs [04-08-2022 01:16:02]30431: WAF :: fetched 8 new logs [04-08-2022 01:17:02]3853: WAF :: fetched 5 new logs [04-08-2022 01:18:01]9467: WAF :: fetched 3 new logs [04-08-2022 01:19:02]15048: WAF :: fetched 2 new logs [04-08-2022 01:20:01]21357: WAF :: fetched 2 new logs [04-08-2022 01:21:02]27349: WAF :: fetched 4 new logs [04-08-2022 01:22:01]1008: WAF :: fetched 1 new logs [04-08-2022 01:24:02]12925: WAF :: fetched 4 new logs [04-08-2022 01:25:02]18722: WAF :: fetched 1 new logs [04-08-2022 01:28:02]4103: WAF :: fetched 4 new logs [04-08-2022 01:29:01]9868: WAF :: fetched 2 new logs [04-08-2022 01:30:02]15932: WAF :: fetched 2 new logs [04-08-2022 01:34:01]6971: WAF :: fetched 1 new logs [04-08-2022 01:36:01]18356: WAF :: fetched 1 new logs [04-08-2022 01:37:01]24339: WAF :: fetched 2 new logs [04-08-2022 01:38:02]30021: WAF :: fetched 6 new logs [04-08-2022 01:39:02]3887: WAF :: fetched 2 new logs [04-08-2022 01:40:01]9724: WAF :: fetched 3 new logs [04-08-2022 01:41:01]16045: WAF :: fetched 2 new logs [04-08-2022 01:41:01]16045: Checking for user cron vulnerabilities [04-08-2022 01:44:01]1184: Checking ditributed CMS bruteforce attacks [04-08-2022 01:44:01]1184: WAF :: fetched 4 new logs [04-08-2022 01:45:01]: Checking for definition updates [04-08-2022 01:45:02]6947: WAF :: fetched 1 new logs [04-08-2022 01:46:01]12604: WAF :: fetched 1 new logs [04-08-2022 01:47:02]18565: WAF :: fetched 2 new logs [04-08-2022 01:48:01]24439: WAF :: fetched 4 new logs [04-08-2022 01:49:01]30237: WAF :: fetched 2 new logs [04-08-2022 01:51:02]9327: WAF :: fetched 1 new logs [04-08-2022 01:52:01]15209: WAF :: fetched 1 new logs [04-08-2022 01:54:02]26739: WAF :: fetched 4 new logs [04-08-2022 01:58:02]17156: WAF :: fetched 1 new logs [04-08-2022 02:00:02]28624: httpd.conf changed. Refreshing watchlist. [04-08-2022 02:00:02]28655: WAF :: fetched 14 new logs [04-08-2022 02:01:01]2386: WAF :: fetched 2 new logs [04-08-2022 02:02:02]8125: WAF :: fetched 1 new logs [04-08-2022 02:06:02]30711: WAF :: fetched 3 new logs [04-08-2022 02:07:01]4010: WAF :: fetched 3 new logs [04-08-2022 02:08:02]9365: WAF :: fetched 1 new logs [04-08-2022 02:09:01]15296: WAF :: fetched 5 new logs [04-08-2022 02:10:01]20729: WAF :: fetched 1 new logs [04-08-2022 02:11:02]26783: WAF :: fetched 4 new logs [04-08-2022 02:12:01]32313: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659589921 [04-08-2022 02:12:01]32313: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 02:12:03]32313: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 02:12:04]32313: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-0212/20220804-021201-YutVITU_-NRGEMEXK1GEawAAABM [04-08-2022 02:12:04]32313: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 02:13:02]5726: WAF :: fetched 5 new logs [04-08-2022 02:14:01]11315: WAF :: fetched 5 new logs [04-08-2022 02:15:02]17058: WAF :: fetched 3 new logs [04-08-2022 02:16:01]22684: WAF :: fetched 1 new logs [04-08-2022 02:18:01]1394: WAF :: fetched 2 new logs [04-08-2022 02:21:02]18535: WAF :: fetched 3 new logs [04-08-2022 02:26:01]14245: WAF :: fetched 2 new logs [04-08-2022 02:27:02]19842: WAF :: fetched 1 new logs [04-08-2022 02:29:02]31079: WAF :: fetched 1 new logs [04-08-2022 02:30:01]4454: WAF :: fetched 1 new logs [04-08-2022 02:31:02]10188: WAF :: fetched 4 new logs [04-08-2022 02:32:02]15734: WAF :: fetched 5 new logs [04-08-2022 02:34:02]26656: WAF :: fetched 3 new logs [04-08-2022 02:35:01]32746: WAF :: fetched 5 new logs [04-08-2022 02:36:02]5939: WAF :: fetched 7 new logs [04-08-2022 02:37:01]11909: WAF :: fetched 1 new logs [04-08-2022 02:38:02]17306: WAF :: fetched 1 new logs [04-08-2022 02:39:01]23268: WAF :: fetched 1 new logs [04-08-2022 02:41:01]2320: WAF :: fetched 4 new logs [04-08-2022 02:41:01]2320: Checking for user cron vulnerabilities [04-08-2022 02:42:02]8060: WAF :: fetched 1 new logs [04-08-2022 02:43:01]13654: WAF :: fetched 2 new logs [04-08-2022 02:44:01]19030: Checking ditributed CMS bruteforce attacks [04-08-2022 02:44:02]19030: WAF :: fetched 3 new logs [04-08-2022 02:45:01]25141: WAF :: fetched 4 new logs [04-08-2022 02:46:02]30873: WAF :: fetched 1 new logs [04-08-2022 02:47:01]4181: WAF :: fetched 3 new logs [04-08-2022 02:48:02]9928: WAF :: fetched 4 new logs [04-08-2022 02:49:01]16823: WAF :: fetched 1 new logs [04-08-2022 02:50:02]22843: WAF :: fetched 2 new logs [04-08-2022 02:53:01]7388: WAF :: fetched 1 new logs [04-08-2022 02:53:02]7378: Updated license status via CDN [04-08-2022 02:54:02]13088: WAF :: fetched 2 new logs [04-08-2022 02:55:02]18792: WAF :: fetched 1 new logs [04-08-2022 02:56:01]24487: WAF :: fetched 2 new logs [04-08-2022 02:57:02]30313: WAF :: fetched 3 new logs [04-08-2022 02:59:02]9705: WAF :: fetched 2 new logs [04-08-2022 03:00:01]15245: WAF :: fetched 5 new logs [04-08-2022 03:00:04]15245: Found and updated 31 CMS installations [04-08-2022 03:01:02]21804: WAF :: fetched 8 new logs [04-08-2022 03:02:01]28005: WAF :: fetched 18 new logs [04-08-2022 03:02:25]15245: Sending CMS version vulnerability report emails to cpanel users [04-08-2022 03:02:28]15245: Checking wordpress installations for suspicious directories [04-08-2022 03:03:02]1711: WAF :: fetched 4 new logs [04-08-2022 03:04:01]7760: WAF :: fetched 5 new logs [04-08-2022 03:04:24]1757: Sending CMS version vulnerability report emails to cpanel users [04-08-2022 03:04:27]1757: Checking wordpress installations for suspicious directories [04-08-2022 03:05:02]13891: WAF :: fetched 4 new logs [04-08-2022 03:06:01]19578: WAF :: fetched 1 new logs [04-08-2022 03:07:02]25208: WAF :: fetched 2 new logs [04-08-2022 03:08:01]30950: WAF :: fetched 3 new logs [04-08-2022 03:09:01]4343: WAF :: fetched 2 new logs [04-08-2022 03:10:02]9750: WAF :: fetched 17 new logs [04-08-2022 03:11:01]15848: WAF :: fetched 5 new logs [04-08-2022 03:12:02]21206: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659593522 [04-08-2022 03:12:02]21206: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 03:12:04]21206: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 03:12:04]21206: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-0312/20220804-031202-YutjMn5cBZ0sa_eFJdd1LAAAAAM [04-08-2022 03:12:04]21206: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 03:12:05]21206: WAF :: fetched 4 new logs [04-08-2022 03:13:01]27498: WAF :: fetched 7 new logs [04-08-2022 03:14:02]710: WAF :: fetched 2 new logs [04-08-2022 03:16:02]12375: WAF :: fetched 1 new logs [04-08-2022 03:17:01]18396: WAF :: fetched 2 new logs [04-08-2022 03:18:02]23799: WAF :: fetched 2 new logs [04-08-2022 03:19:01]29769: WAF :: fetched 1 new logs [04-08-2022 03:20:02]2945: WAF :: fetched 4 new logs [04-08-2022 03:21:02]9096: WAF :: fetched 3 new logs [04-08-2022 03:22:01]14718: WAF :: fetched 2 new logs [04-08-2022 03:26:01]5038: WAF :: fetched 2 new logs [04-08-2022 03:28:01]16288: WAF :: fetched 2 new logs [04-08-2022 03:29:02]21982: WAF :: fetched 2 new logs [04-08-2022 03:30:01]27708: WAF :: fetched 4 new logs [04-08-2022 03:31:02]761: WAF :: fetched 13 new logs [04-08-2022 03:32:01]7185: WAF :: fetched 6 new logs [04-08-2022 03:33:02]12779: WAF :: fetched 7 new logs [04-08-2022 03:34:01]19012: WAF :: fetched 7 new logs [04-08-2022 03:35:02]24498: WAF :: fetched 3 new logs [04-08-2022 03:36:01]30638: WAF :: fetched 4 new logs [04-08-2022 03:37:02]4202: WAF :: fetched 2 new logs [04-08-2022 03:38:01]9816: WAF :: fetched 1 new logs [04-08-2022 03:39:01]16722: WAF :: fetched 2 new logs [04-08-2022 03:40:02]15718: WAF :: fetched 16 new logs [04-08-2022 03:41:01]23134: WAF :: fetched 2 new logs [04-08-2022 03:41:01]23134: Checking for user cron vulnerabilities [04-08-2022 03:44:02]15476: Checking ditributed CMS bruteforce attacks [04-08-2022 03:44:02]15476: WAF :: fetched 3 new logs [04-08-2022 03:46:02]26899: WAF :: fetched 1 new logs [04-08-2022 03:47:01]32392: WAF :: fetched 9 new logs [04-08-2022 03:48:02]5718: WAF :: fetched 4 new logs [04-08-2022 03:50:02]16902: WAF :: fetched 3 new logs [04-08-2022 03:54:01]6859: WAF :: fetched 1 new logs [04-08-2022 03:55:02]12611: WAF :: fetched 1 new logs [04-08-2022 03:56:01]18168: WAF :: fetched 11 new logs [04-08-2022 03:57:02]23747: WAF :: fetched 5 new logs [04-08-2022 03:58:01]29297: WAF :: fetched 1 new logs [04-08-2022 03:59:02]2601: WAF :: fetched 2 new logs [04-08-2022 04:00:01]7986: WAF :: fetched 2 new logs [04-08-2022 04:02:01]19780: WAF :: fetched 4 new logs [04-08-2022 04:05:01]4292: WAF :: fetched 17 new logs [04-08-2022 04:06:02]9939: WAF :: fetched 2 new logs [04-08-2022 04:07:01]15498: WAF :: fetched 1 new logs [04-08-2022 04:09:01]26656: WAF :: fetched 3 new logs [04-08-2022 04:11:01]5699: WAF :: fetched 6 new logs [04-08-2022 04:12:02]11319: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659597122 [04-08-2022 04:12:02]11319: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 04:12:04]11319: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 04:12:04]11319: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-0412/20220804-041202-YutxQrFuEtBpXx3JDfOH9AAAAAc [04-08-2022 04:12:04]11319: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 04:12:05]11319: WAF :: fetched 3 new logs [04-08-2022 04:13:01]16859: WAF :: fetched 4 new logs [04-08-2022 04:14:02]22457: WAF :: fetched 1 new logs [04-08-2022 04:15:01]28089: WAF :: fetched 1 new logs [04-08-2022 04:17:01]6931: WAF :: fetched 1 new logs [04-08-2022 04:19:01]18101: WAF :: fetched 1 new logs [04-08-2022 04:22:02]2746: WAF :: fetched 2 new logs [04-08-2022 04:23:01]8297: WAF :: fetched 4 new logs [04-08-2022 04:25:01]19478: WAF :: fetched 1 new logs [04-08-2022 04:26:02]25158: WAF :: fetched 1 new logs [04-08-2022 04:33:01]31985: WAF :: fetched 3 new logs [04-08-2022 04:34:02]5304: WAF :: fetched 2 new logs [04-08-2022 04:35:01]10958: WAF :: fetched 2 new logs [04-08-2022 04:36:02]16675: WAF :: fetched 2 new logs [04-08-2022 04:37:01]22208: WAF :: fetched 2 new logs [04-08-2022 04:38:02]27812: WAF :: fetched 1 new logs [04-08-2022 04:39:01]916: WAF :: fetched 2 new logs [04-08-2022 04:40:02]6808: WAF :: fetched 1 new logs [04-08-2022 04:41:01]12408: Checking for user cron vulnerabilities [04-08-2022 04:42:02]18128: WAF :: fetched 1 new logs [04-08-2022 04:44:01]29345: Checking ditributed CMS bruteforce attacks [04-08-2022 04:47:02]13907: WAF :: fetched 1 new logs [04-08-2022 04:48:01]19439: WAF :: fetched 4 new logs [04-08-2022 04:49:02]24803: WAF :: fetched 3 new logs [04-08-2022 04:50:01]30858: WAF :: fetched 2 new logs [04-08-2022 04:51:02]4283: WAF :: fetched 2 new logs [04-08-2022 04:52:01]9830: WAF :: fetched 3 new logs [04-08-2022 04:53:02]15189: WAF :: fetched 2 new logs [04-08-2022 04:55:02]26596: WAF :: fetched 2 new logs [04-08-2022 04:57:02]5645: WAF :: fetched 1 new logs [04-08-2022 04:58:01]11610: WAF :: fetched 1 new logs [04-08-2022 04:59:02]16860: WAF :: fetched 1 new logs [04-08-2022 05:01:42]28700: Starting daily scan on files updated in last 24 hrs [04-08-2022 05:02:02]2005: WAF :: fetched 100 new logs [04-08-2022 05:03:01]7643: WAF :: fetched 124 new logs [04-08-2022 05:04:02]13291: WAF :: fetched 143 new logs [04-08-2022 05:05:01]18937: WAF :: fetched 82 new logs [04-08-2022 05:06:02]24681: WAF :: fetched 116 new logs [04-08-2022 05:07:01]30195: WAF :: fetched 159 new logs [04-08-2022 05:08:02]3583: WAF :: fetched 165 new logs [04-08-2022 05:09:01]9208: WAF :: fetched 178 new logs [04-08-2022 05:10:02]15003: WAF :: fetched 142 new logs [04-08-2022 05:11:01]20637: WAF :: fetched 63 new logs [04-08-2022 05:12:02]26352: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659600722 [04-08-2022 05:12:02]26352: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 05:12:04]26352: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 05:12:04]26352: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-0512/20220804-051202-Yut_UrKOJ1jv_USVXkrkxQAAABk [04-08-2022 05:12:04]26352: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 05:16:02]16562: WAF :: fetched 2 new logs [04-08-2022 05:17:02]22146: WAF :: fetched 4 new logs [04-08-2022 05:18:01]27688: WAF :: fetched 5 new logs [04-08-2022 05:19:01]857: WAF :: fetched 2 new logs [04-08-2022 05:20:02]6426: WAF :: fetched 2 new logs [04-08-2022 05:21:01]12465: WAF :: fetched 3 new logs [04-08-2022 05:22:02]17807: WAF :: fetched 23 new logs [04-08-2022 05:23:01]23729: WAF :: fetched 5 new logs [04-08-2022 05:24:01]29088: WAF :: fetched 92 new logs [04-08-2022 05:25:01]2821: WAF :: fetched 100 new logs [04-08-2022 05:26:02]8200: WAF :: fetched 90 new logs [04-08-2022 05:27:01]14185: WAF :: fetched 52 new logs [04-08-2022 05:29:01]25434: WAF :: fetched 1 new logs [04-08-2022 05:30:02]30882: WAF :: fetched 1 new logs [04-08-2022 05:31:01]4598: WAF :: fetched 3 new logs [04-08-2022 05:32:02]9953: WAF :: fetched 1 new logs [04-08-2022 05:33:01]15897: WAF :: fetched 2 new logs [04-08-2022 05:34:02]21204: WAF :: fetched 2 new logs [04-08-2022 05:35:01]27276: WAF :: fetched 5 new logs [04-08-2022 05:38:02]11953: WAF :: fetched 1 new logs [04-08-2022 05:39:01]17523: WAF :: fetched 4 new logs [04-08-2022 05:40:02]23324: WAF :: fetched 4 new logs [04-08-2022 05:41:02]28966: WAF :: fetched 4 new logs [04-08-2022 05:41:02]28966: Checking for user cron vulnerabilities [04-08-2022 05:42:01]2232: WAF :: fetched 2 new logs [04-08-2022 05:44:01]13712: Checking ditributed CMS bruteforce attacks [04-08-2022 05:48:01]4241: WAF :: fetched 1 new logs [04-08-2022 05:49:02]9586: WAF :: fetched 4 new logs [04-08-2022 05:50:01]15671: WAF :: fetched 2 new logs [04-08-2022 05:51:01]21376: WAF :: fetched 3 new logs [04-08-2022 05:52:02]27025: WAF :: fetched 6 new logs [04-08-2022 05:54:02]5995: WAF :: fetched 1 new logs [04-08-2022 05:57:01]22958: WAF :: fetched 5 new logs [04-08-2022 05:58:02]28345: WAF :: fetched 3 new logs [04-08-2022 06:00:02]7545: WAF :: fetched 32 new logs [04-08-2022 06:01:01]13742: WAF :: fetched 1 new logs [04-08-2022 06:02:02]19471: WAF :: fetched 2 new logs [04-08-2022 06:03:01]25026: WAF :: fetched 24 new logs [04-08-2022 06:04:02]30697: WAF :: fetched 6 new logs [04-08-2022 06:05:01]4076: WAF :: fetched 3 new logs [04-08-2022 06:06:02]9777: WAF :: fetched 1 new logs [04-08-2022 06:08:02]21012: WAF :: fetched 1 new logs [04-08-2022 06:10:02]32487: WAF :: fetched 1 new logs [04-08-2022 06:11:01]5794: WAF :: fetched 2 new logs [04-08-2022 06:12:02]11456: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659604322 [04-08-2022 06:12:02]11456: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 06:12:04]11456: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 06:12:04]11456: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-0612/20220804-061202-YuuNYvf04FaOWWkD3lhGegAAAAw [04-08-2022 06:12:04]11456: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 06:12:04]11456: WAF :: fetched 4 new logs [04-08-2022 06:13:01]17053: WAF :: fetched 3 new logs [04-08-2022 06:14:01]22420: WAF :: fetched 4 new logs [04-08-2022 06:15:02]28612: WAF :: fetched 1 new logs [04-08-2022 06:16:02]2017: WAF :: fetched 2 new logs [04-08-2022 06:17:01]7686: WAF :: fetched 2 new logs [04-08-2022 06:18:02]13313: WAF :: fetched 1 new logs [04-08-2022 06:24:02]14701: WAF :: fetched 1 new logs [04-08-2022 06:28:02]5583: WAF :: fetched 2 new logs [04-08-2022 06:29:01]11168: WAF :: fetched 3 new logs [04-08-2022 06:32:02]28305: WAF :: fetched 4 new logs [04-08-2022 06:33:01]1548: WAF :: fetched 3 new logs [04-08-2022 06:34:02]7323: WAF :: fetched 1 new logs [04-08-2022 06:35:01]12876: WAF :: fetched 2 new logs [04-08-2022 06:38:02]29927: WAF :: fetched 1 new logs [04-08-2022 06:39:01]3231: WAF :: fetched 1 new logs [04-08-2022 06:40:02]8884: WAF :: fetched 2 new logs [04-08-2022 06:41:01]14609: WAF :: fetched 1 new logs [04-08-2022 06:41:01]14609: Checking for user cron vulnerabilities [04-08-2022 06:42:02]20280: WAF :: fetched 4 new logs [04-08-2022 06:44:01]31598: Checking ditributed CMS bruteforce attacks [04-08-2022 06:44:02]31598: WAF :: fetched 1 new logs [04-08-2022 06:45:01]4944: WAF :: fetched 1 new logs [04-08-2022 06:46:01]10712: WAF :: fetched 4 new logs [04-08-2022 06:48:01]21978: WAF :: fetched 1 new logs [04-08-2022 06:50:01]820: WAF :: fetched 1 new logs [04-08-2022 06:51:02]6785: WAF :: fetched 3 new logs [04-08-2022 06:54:01]23571: WAF :: fetched 1 new logs [04-08-2022 06:55:02]29257: WAF :: fetched 4 new logs [04-08-2022 06:56:01]2644: WAF :: fetched 3 new logs [04-08-2022 06:57:02]8334: WAF :: fetched 1 new logs [04-08-2022 06:59:02]19214: WAF :: fetched 2 new logs [04-08-2022 07:00:01]25012: WAF :: fetched 2 new logs [04-08-2022 07:01:02]31259: WAF :: fetched 6 new logs [04-08-2022 07:02:01]4603: WAF :: fetched 1 new logs [04-08-2022 07:04:01]15935: WAF :: fetched 3 new logs [04-08-2022 07:05:01]21595: WAF :: fetched 3 new logs [04-08-2022 07:06:02]27383: WAF :: fetched 1 new logs [04-08-2022 07:08:02]6395: WAF :: fetched 2 new logs [04-08-2022 07:10:02]17342: WAF :: fetched 3 new logs [04-08-2022 07:12:02]29187: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659607922 [04-08-2022 07:12:02]29187: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 07:12:04]29187: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 07:12:04]29187: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-0712/20220804-071202-YuubcqsiO1lV2MDotEjSJQAAAAA [04-08-2022 07:12:04]29187: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 07:12:04]29187: WAF :: fetched 1 new logs [04-08-2022 07:14:02]7992: WAF :: fetched 2 new logs [04-08-2022 07:15:01]13606: WAF :: fetched 3 new logs [04-08-2022 07:16:01]20704: WAF :: fetched 9 new logs [04-08-2022 07:17:01]31362: WAF :: fetched 1 new logs [04-08-2022 07:18:01]4464: httpd.conf changed. Refreshing watchlist. [04-08-2022 07:24:01]26247: WAF :: fetched 1 new logs [04-08-2022 07:38:01]9514: WAF :: fetched 2 new logs [04-08-2022 07:40:01]16595: WAF :: fetched 3 new logs [04-08-2022 07:41:02]19965: Checking for user cron vulnerabilities [04-08-2022 07:44:01]29787: Checking ditributed CMS bruteforce attacks [04-08-2022 07:45:02]: Checking for definition updates [04-08-2022 07:45:02]688: WAF :: fetched 6 new logs [04-08-2022 07:49:02]14628: WAF :: fetched 2 new logs [04-08-2022 07:53:02]28059: WAF :: fetched 1 new logs [04-08-2022 07:54:01]31206: WAF :: fetched 1 new logs [04-08-2022 07:56:01]5522: WAF :: fetched 1 new logs [04-08-2022 08:07:02]10346: WAF :: fetched 1 new logs [04-08-2022 08:12:01]27552: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659611521 [04-08-2022 08:12:01]27552: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 08:12:03]27552: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 08:12:04]27552: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-0812/20220804-081201-YuupgUM3K5odiolRkz5f7wAAAAY [04-08-2022 08:12:04]27552: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 08:12:04]27552: WAF :: fetched 1 new logs [04-08-2022 08:30:02]24289: httpd.conf changed. Refreshing watchlist. [04-08-2022 08:33:01]1995: WAF :: fetched 1 new logs [04-08-2022 08:34:01]5328: WAF :: fetched 1 new logs [04-08-2022 08:34:01]5316: httpd.conf changed. Refreshing watchlist. [04-08-2022 08:36:01]11793: WAF :: fetched 1 new logs [04-08-2022 08:40:01]25658: WAF :: fetched 1 new logs [04-08-2022 08:41:01]29213: Checking for user cron vulnerabilities [04-08-2022 08:43:01]3582: WAF :: fetched 2 new logs [04-08-2022 08:44:01]6797: Checking ditributed CMS bruteforce attacks [04-08-2022 08:47:01]16762: WAF :: fetched 1 new logs [04-08-2022 08:56:02]15114: WAF :: fetched 1 new logs [04-08-2022 08:58:02]21633: WAF :: fetched 2 new logs [04-08-2022 09:00:01]28528: WAF :: fetched 2 new logs [04-08-2022 09:04:01]9673: WAF :: fetched 2 new logs [04-08-2022 09:05:02]13052: WAF :: fetched 1 new logs [04-08-2022 09:06:01]16353: WAF :: fetched 1 new logs [04-08-2022 09:12:01]4981: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659615121 [04-08-2022 09:12:01]4981: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 09:12:03]4981: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 09:12:04]4981: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-0912/20220804-091201-Yuu3kZXQ3-wHtr_ycVpmxAAAABw [04-08-2022 09:12:04]4981: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 09:12:04]4981: WAF :: fetched 1 new logs [04-08-2022 09:13:01]8394: WAF :: fetched 6 new logs [04-08-2022 09:17:01]21804: WAF :: fetched 1 new logs [04-08-2022 09:35:01]19520: WAF :: fetched 2 new logs [04-08-2022 09:40:01]4364: WAF :: fetched 4 new logs [04-08-2022 09:41:01]8354: WAF :: fetched 2 new logs [04-08-2022 09:41:01]8354: Checking for user cron vulnerabilities [04-08-2022 09:42:01]11785: WAF :: fetched 2 new logs [04-08-2022 09:44:01]18365: Checking ditributed CMS bruteforce attacks [04-08-2022 09:53:01]16907: WAF :: fetched 1 new logs [04-08-2022 09:56:01]26914: WAF :: fetched 1 new logs [04-08-2022 09:57:01]30465: WAF :: fetched 1 new logs [04-08-2022 10:07:01]603: WAF :: fetched 1 new logs [04-08-2022 10:09:01]7479: WAF :: fetched 1 new logs [04-08-2022 10:12:01]18238: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659618721 [04-08-2022 10:12:01]18238: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 10:12:03]18238: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 10:12:04]18238: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-1012/20220804-101201-YuvFoQrdg1Y6mZYnfw0HCQAAACI [04-08-2022 10:12:04]18238: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-08-2022 10:12:05]18238: WAF :: fetched 1 new logs [04-08-2022 10:13:01]21478: WAF :: fetched 1 new logs [04-08-2022 10:14:02]25013: WAF :: fetched 1 new logs [04-08-2022 10:20:02]13320: WAF :: fetched 1 new logs [04-08-2022 10:26:02]2129: WAF :: fetched 1 new logs [04-08-2022 10:32:02]23095: WAF :: fetched 2 new logs [04-08-2022 10:35:01]953: WAF :: fetched 1 new logs [04-08-2022 10:41:02]21722: Checking for user cron vulnerabilities [04-08-2022 10:44:01]32684: Checking ditributed CMS bruteforce attacks [04-08-2022 10:45:02]3922: WAF :: fetched 4 new logs [04-08-2022 10:58:02]15846: WAF :: fetched 1 new logs [04-08-2022 11:01:02]26065: WAF :: fetched 3 new logs [04-08-2022 11:05:02]8000: WAF :: fetched 1 new logs [04-08-2022 11:08:02]14956: Performed RBL check for 23.111.136.34. [04-08-2022 11:09:02]21361: WAF :: fetched 3 new logs [04-08-2022 11:11:02]28404: WAF :: fetched 1 new logs [04-08-2022 11:12:02]31824: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659622322 [04-08-2022 11:12:02]31824: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 11:12:04]31824: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 11:12:04]31824: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-1112/20220804-111202-YuvTslqkPxtU8cMOiocthAAAAAs [04-08-2022 11:12:04]31824: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 11:12:04]31824: WAF :: fetched 14 new logs [04-08-2022 11:15:01]10123: WAF :: fetched 1 new logs [04-08-2022 11:16:01]13558: WAF :: fetched 1 new logs [04-08-2022 11:17:01]17068: WAF :: fetched 1 new logs [04-08-2022 11:23:01]6414: WAF :: fetched 1 new logs [04-08-2022 11:30:01]30141: WAF :: fetched 1 new logs [04-08-2022 11:37:01]22069: WAF :: fetched 2 new logs [04-08-2022 11:39:01]29139: WAF :: fetched 1 new logs [04-08-2022 11:41:01]3576: Checking for user cron vulnerabilities [04-08-2022 11:43:01]10815: WAF :: fetched 1 new logs [04-08-2022 11:44:01]14154: Checking ditributed CMS bruteforce attacks [04-08-2022 11:44:01]14154: WAF :: fetched 1 new logs [04-08-2022 11:45:01]17378: WAF :: fetched 1 new logs [04-08-2022 11:46:01]20786: WAF :: fetched 1 new logs [04-08-2022 11:50:01]1580: WAF :: fetched 2 new logs [04-08-2022 11:51:02]5082: WAF :: fetched 1 new logs [04-08-2022 11:52:01]8459: WAF :: fetched 1 new logs [04-08-2022 11:55:02]18982: WAF :: fetched 1 new logs [04-08-2022 11:56:01]22258: WAF :: fetched 2 new logs [04-08-2022 11:57:02]25887: WAF :: fetched 1 new logs [04-08-2022 12:05:02]21249: WAF :: fetched 2 new logs [04-08-2022 12:07:01]28818: WAF :: fetched 4 new logs [04-08-2022 12:09:01]3116: WAF :: fetched 1 new logs [04-08-2022 12:12:01]13172: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659625921 [04-08-2022 12:12:01]13172: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 12:12:03]13172: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 12:12:03]13172: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-1212/20220804-121201-YuvhwZeN9XTNiQLtCohDqQAAAAo [04-08-2022 12:12:03]13172: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-08-2022 12:12:04]13172: WAF :: fetched 1 new logs [04-08-2022 12:16:01]27043: WAF :: fetched 1 new logs [04-08-2022 12:19:02]4995: WAF :: fetched 1 new logs [04-08-2022 12:23:02]18452: WAF :: fetched 1 new logs [04-08-2022 12:28:02]3654: WAF :: fetched 1 new logs [04-08-2022 12:30:02]10190: WAF :: fetched 1 new logs [04-08-2022 12:32:01]16857: WAF :: fetched 3 new logs [04-08-2022 12:33:01]20184: WAF :: fetched 3 new logs [04-08-2022 12:34:02]24142: WAF :: fetched 1 new logs [04-08-2022 12:35:01]27455: WAF :: fetched 8 new logs [04-08-2022 12:36:02]30876: WAF :: fetched 1 new logs [04-08-2022 12:37:01]1815: WAF :: fetched 2 new logs [04-08-2022 12:38:02]5338: WAF :: fetched 2 new logs [04-08-2022 12:41:01]15276: Checking for user cron vulnerabilities [04-08-2022 12:44:01]25630: Checking ditributed CMS bruteforce attacks [04-08-2022 12:45:02]: Checking for software updates [04-08-2022 12:47:02]3457: WAF :: fetched 1 new logs [04-08-2022 12:48:01]6765: WAF :: fetched 1 new logs [04-08-2022 12:53:01]23238: WAF :: fetched 1 new logs [04-08-2022 12:55:01]30566: WAF :: fetched 3 new logs [04-08-2022 12:57:01]5061: WAF :: fetched 1 new logs [04-08-2022 12:58:02]8412: WAF :: fetched 2 new logs [04-08-2022 13:00:02]14744: WAF :: fetched 2 new logs [04-08-2022 13:01:01]18567: WAF :: fetched 1 new logs [04-08-2022 13:07:01]7425: WAF :: fetched 2 new logs [04-08-2022 13:10:02]17559: WAF :: fetched 1 new logs [04-08-2022 13:11:02]21049: WAF :: fetched 2 new logs [04-08-2022 13:12:01]24664: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659629521 [04-08-2022 13:12:01]24664: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 13:12:04]24664: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-1312/20220804-131201-Yuvv0WR0XErL0-J-VIxkkAAAABM [04-08-2022 13:12:04]24664: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 13:12:04]24664: WAF :: fetched 34 new logs [04-08-2022 13:16:01]6636: WAF :: fetched 2 new logs [04-08-2022 13:17:01]10010: WAF :: fetched 1 new logs [04-08-2022 13:19:01]16663: WAF :: fetched 1 new logs [04-08-2022 13:22:01]26986: WAF :: fetched 3 new logs [04-08-2022 13:24:01]1277: WAF :: fetched 1 new logs [04-08-2022 13:28:01]15345: WAF :: fetched 5 new logs [04-08-2022 13:30:01]21885: WAF :: fetched 1 new logs [04-08-2022 13:32:01]28730: WAF :: fetched 1 new logs [04-08-2022 13:34:01]3297: WAF :: fetched 2 new logs [04-08-2022 13:34:01]3323: httpd.conf changed. Refreshing watchlist. [04-08-2022 13:35:01]7255: WAF :: fetched 5 new logs [04-08-2022 13:36:01]10671: WAF :: fetched 1 new logs [04-08-2022 13:37:01]14158: WAF :: fetched 1 new logs [04-08-2022 13:39:01]20934: httpd.conf changed. Refreshing watchlist. [04-08-2022 13:41:01]27870: Checking for user cron vulnerabilities [04-08-2022 13:42:01]31208: WAF :: fetched 2 new logs [04-08-2022 13:43:01]1825: WAF :: fetched 1 new logs [04-08-2022 13:44:01]5120: Checking ditributed CMS bruteforce attacks [04-08-2022 13:44:01]5120: WAF :: fetched 6 new logs [04-08-2022 13:45:02]: Checking for definition updates [04-08-2022 13:49:02]22181: WAF :: fetched 2 new logs [04-08-2022 13:55:02]10137: WAF :: fetched 1 new logs [04-08-2022 13:56:01]13423: WAF :: fetched 1 new logs [04-08-2022 13:57:02]16713: WAF :: fetched 1 new logs [04-08-2022 14:11:01]32097: WAF :: fetched 2 new logs [04-08-2022 14:12:01]3032: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659633121 [04-08-2022 14:12:01]3032: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 14:12:03]3032: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 14:12:04]3032: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-1412/20220804-141201-Yuv94c22VEGWWIGo7K15YAAAABE [04-08-2022 14:12:04]3032: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-08-2022 14:12:04]3032: WAF :: fetched 1 new logs [04-08-2022 14:14:01]9631: WAF :: fetched 1 new logs [04-08-2022 14:15:02]12942: WAF :: fetched 8 new logs [04-08-2022 14:16:01]16789: WAF :: fetched 7 new logs [04-08-2022 14:17:02]20229: WAF :: fetched 5 new logs [04-08-2022 14:18:02]23760: WAF :: fetched 3 new logs [04-08-2022 14:20:01]30476: WAF :: fetched 2 new logs [04-08-2022 14:21:02]1482: WAF :: fetched 1 new logs [04-08-2022 14:22:01]4819: WAF :: fetched 1 new logs [04-08-2022 14:29:01]28909: WAF :: fetched 6 new logs [04-08-2022 14:30:02]32199: WAF :: fetched 1 new logs [04-08-2022 14:31:01]3229: WAF :: fetched 3 new logs [04-08-2022 14:32:02]6526: WAF :: fetched 3 new logs [04-08-2022 14:33:01]9819: WAF :: fetched 2 new logs [04-08-2022 14:35:01]15850: WAF :: fetched 2 new logs [04-08-2022 14:36:02]19757: WAF :: fetched 3 new logs [04-08-2022 14:37:01]23039: WAF :: fetched 3 new logs [04-08-2022 14:38:02]26550: WAF :: fetched 2 new logs [04-08-2022 14:40:02]778: WAF :: fetched 5 new logs [04-08-2022 14:41:01]4199: WAF :: fetched 3 new logs [04-08-2022 14:41:01]4199: Checking for user cron vulnerabilities [04-08-2022 14:42:02]7488: WAF :: fetched 4 new logs [04-08-2022 14:43:01]10817: WAF :: fetched 6 new logs [04-08-2022 14:44:01]14078: Checking ditributed CMS bruteforce attacks [04-08-2022 14:44:02]14078: WAF :: fetched 2 new logs [04-08-2022 14:45:02]17282: WAF :: fetched 1 new logs [04-08-2022 14:46:02]21083: WAF :: fetched 4 new logs [04-08-2022 14:47:02]24654: WAF :: fetched 5 new logs [04-08-2022 14:49:02]31338: WAF :: fetched 1 new logs [04-08-2022 14:50:02]2197: WAF :: fetched 1 new logs [04-08-2022 14:51:02]5578: WAF :: fetched 2 new logs [04-08-2022 14:53:02]12202: WAF :: fetched 1 new logs [04-08-2022 14:53:03]12213: Updated license status via CDN [04-08-2022 14:55:02]18733: WAF :: fetched 2 new logs [04-08-2022 14:57:02]25996: WAF :: fetched 2 new logs [04-08-2022 14:58:01]29389: WAF :: fetched 3 new logs [04-08-2022 14:59:02]32707: WAF :: fetched 2 new logs [04-08-2022 15:00:01]3333: WAF :: fetched 6 new logs [04-08-2022 15:01:02]7065: Reseting cPGuard inotify settings [04-08-2022 15:01:02]7060: WAF :: fetched 3 new logs [04-08-2022 15:02:01]10336: WAF :: fetched 7 new logs [04-08-2022 15:03:02]13612: WAF :: fetched 2 new logs [04-08-2022 15:05:02]20298: WAF :: fetched 1 new logs [04-08-2022 15:06:01]23731: WAF :: fetched 1 new logs [04-08-2022 15:07:02]27650: WAF :: fetched 8 new logs [04-08-2022 15:08:01]31047: WAF :: fetched 6 new logs [04-08-2022 15:09:02]1989: WAF :: fetched 1 new logs [04-08-2022 15:10:01]5270: WAF :: fetched 2 new logs [04-08-2022 15:11:02]8588: WAF :: fetched 2 new logs [04-08-2022 15:12:01]11836: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659636721 [04-08-2022 15:12:01]11836: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 15:12:03]11836: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 15:12:04]11836: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-1512/20220804-151201-YuwL8YQjxz5-k9oNrv8HTQAAAAw [04-08-2022 15:12:04]11836: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-08-2022 15:12:04]11836: WAF :: fetched 1 new logs [04-08-2022 15:14:01]18494: WAF :: fetched 1 new logs [04-08-2022 15:16:01]25313: WAF :: fetched 2 new logs [04-08-2022 15:17:02]29266: WAF :: fetched 1 new logs [04-08-2022 15:18:01]32559: WAF :: fetched 1 new logs [04-08-2022 15:24:02]19945: WAF :: fetched 2 new logs [04-08-2022 15:28:02]1622: WAF :: fetched 3 new logs [04-08-2022 15:30:02]7806: WAF :: fetched 2 new logs [04-08-2022 15:34:02]21007: WAF :: fetched 1 new logs [04-08-2022 15:35:01]24408: WAF :: fetched 3 new logs [04-08-2022 15:36:02]27786: WAF :: fetched 3 new logs [04-08-2022 15:37:01]31628: WAF :: fetched 2 new logs [04-08-2022 15:38:02]2676: WAF :: fetched 4 new logs [04-08-2022 15:39:01]5958: WAF :: fetched 1 new logs [04-08-2022 15:40:02]9168: WAF :: fetched 5 new logs [04-08-2022 15:41:02]12436: WAF :: fetched 4 new logs [04-08-2022 15:41:02]12436: Checking for user cron vulnerabilities [04-08-2022 15:42:01]15695: WAF :: fetched 2 new logs [04-08-2022 15:43:02]19031: WAF :: fetched 7 new logs [04-08-2022 15:44:01]22311: Checking ditributed CMS bruteforce attacks [04-08-2022 15:44:01]22311: WAF :: fetched 1 new logs [04-08-2022 15:45:02]25789: WAF :: fetched 2 new logs [04-08-2022 15:48:02]4034: WAF :: fetched 2 new logs [04-08-2022 15:49:01]7238: WAF :: fetched 3 new logs [04-08-2022 15:50:02]10529: WAF :: fetched 2 new logs [04-08-2022 15:51:02]13869: WAF :: fetched 6 new logs [04-08-2022 15:54:02]23824: WAF :: fetched 4 new logs [04-08-2022 15:55:01]27175: WAF :: fetched 2 new logs [04-08-2022 15:56:02]30607: WAF :: fetched 1 new logs [04-08-2022 15:57:01]1988: WAF :: fetched 5 new logs [04-08-2022 15:59:02]8803: WAF :: fetched 3 new logs [04-08-2022 16:01:02]15629: WAF :: fetched 1 new logs [04-08-2022 16:09:02]10789: WAF :: fetched 1 new logs [04-08-2022 16:11:02]17360: WAF :: fetched 2 new logs [04-08-2022 16:12:01]20704: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659640321 [04-08-2022 16:12:01]20704: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 16:12:03]20704: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 16:12:03]20704: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-1612/20220804-161201-YuwaASFhNyhT3VyEtWp5AgAAAAk [04-08-2022 16:12:03]20704: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 16:12:04]20704: WAF :: fetched 160 new logs [04-08-2022 16:14:01]27625: WAF :: fetched 1 new logs [04-08-2022 16:16:02]2168: WAF :: fetched 1 new logs [04-08-2022 16:19:01]12716: WAF :: fetched 1 new logs [04-08-2022 16:20:02]15978: WAF :: fetched 1 new logs [04-08-2022 16:23:01]26085: WAF :: fetched 3 new logs [04-08-2022 16:24:01]29534: WAF :: fetched 1 new logs [04-08-2022 16:28:02]10688: WAF :: fetched 1 new logs [04-08-2022 16:29:01]14013: WAF :: fetched 1 new logs [04-08-2022 16:30:01]17302: WAF :: fetched 2 new logs [04-08-2022 16:34:01]31017: WAF :: fetched 3 new logs [04-08-2022 16:35:02]1959: WAF :: fetched 1 new logs [04-08-2022 16:37:01]8493: WAF :: fetched 1 new logs [04-08-2022 16:38:01]12223: WAF :: fetched 1 new logs [04-08-2022 16:39:01]15564: WAF :: fetched 2 new logs [04-08-2022 16:41:01]22242: Checking for user cron vulnerabilities [04-08-2022 16:44:01]32201: Checking ditributed CMS bruteforce attacks [04-08-2022 16:50:01]20112: WAF :: fetched 1 new logs [04-08-2022 16:53:01]30156: WAF :: fetched 1 new logs [04-08-2022 16:57:01]10989: WAF :: fetched 2 new logs [04-08-2022 16:58:02]14938: WAF :: fetched 1 new logs [04-08-2022 16:59:01]18352: WAF :: fetched 1 new logs [04-08-2022 17:00:02]21400: WAF :: fetched 3 new logs [04-08-2022 17:09:01]19866: WAF :: fetched 4 new logs [04-08-2022 17:10:01]23102: WAF :: fetched 1 new logs [04-08-2022 17:11:01]26612: WAF :: fetched 3 new logs [04-08-2022 17:12:02]30019: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659643922 [04-08-2022 17:12:02]30019: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 17:12:04]30019: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 17:12:04]30019: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-1712/20220804-171202-YuwoEjoMhXOyOMnmHW2HXwAAAA4 [04-08-2022 17:12:04]30019: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 17:12:04]30019: WAF :: fetched 1 new logs [04-08-2022 17:13:01]893: WAF :: fetched 1 new logs [04-08-2022 17:20:02]24815: WAF :: fetched 1 new logs [04-08-2022 17:26:01]11601: WAF :: fetched 1 new logs [04-08-2022 17:30:01]25389: WAF :: fetched 1 new logs [04-08-2022 17:34:01]6303: WAF :: fetched 2 new logs [04-08-2022 17:35:02]9563: WAF :: fetched 1 new logs [04-08-2022 17:36:01]12868: WAF :: fetched 1 new logs [04-08-2022 17:39:01]23236: WAF :: fetched 2 new logs [04-08-2022 17:41:02]30192: WAF :: fetched 3 new logs [04-08-2022 17:41:02]30192: Checking for user cron vulnerabilities [04-08-2022 17:42:01]1073: WAF :: fetched 1 new logs [04-08-2022 17:43:01]4415: WAF :: fetched 1 new logs [04-08-2022 17:44:02]7827: Checking ditributed CMS bruteforce attacks [04-08-2022 17:46:02]14488: WAF :: fetched 1 new logs [04-08-2022 17:47:01]17798: WAF :: fetched 2 new logs [04-08-2022 17:48:02]21093: WAF :: fetched 2 new logs [04-08-2022 17:53:02]5777: WAF :: fetched 2 new logs [04-08-2022 17:54:01]8980: WAF :: fetched 3 new logs [04-08-2022 17:55:02]12177: WAF :: fetched 3 new logs [04-08-2022 17:56:01]15495: WAF :: fetched 4 new logs [04-08-2022 17:57:01]18710: WAF :: fetched 3 new logs [04-08-2022 18:01:01]32665: WAF :: fetched 1 new logs [04-08-2022 18:03:01]6801: WAF :: fetched 1 new logs [04-08-2022 18:06:01]16494: WAF :: fetched 2 new logs [04-08-2022 18:08:01]22908: WAF :: fetched 1 new logs [04-08-2022 18:09:02]26385: WAF :: fetched 1 new logs [04-08-2022 18:10:01]30148: WAF :: fetched 2 new logs [04-08-2022 18:11:02]1029: WAF :: fetched 2 new logs [04-08-2022 18:12:01]4311: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659647521 [04-08-2022 18:12:01]4311: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 18:12:03]4311: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 18:12:04]4311: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-1812/20220804-181201-Yuw2IcKTmgvAsRSjIEcTqQAAABQ [04-08-2022 18:12:04]4311: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 18:12:04]4311: WAF :: fetched 2 new logs [04-08-2022 18:13:02]7626: WAF :: fetched 1 new logs [04-08-2022 18:14:02]10856: WAF :: fetched 2 new logs [04-08-2022 18:15:01]14146: WAF :: fetched 1 new logs [04-08-2022 18:17:01]20798: WAF :: fetched 2 new logs [04-08-2022 18:20:02]31338: WAF :: fetched 1 new logs [04-08-2022 18:21:01]2053: WAF :: fetched 1 new logs [04-08-2022 18:24:01]11488: WAF :: fetched 3 new logs [04-08-2022 18:36:01]18827: WAF :: fetched 1 new logs [04-08-2022 18:37:01]22065: WAF :: fetched 3 new logs [04-08-2022 18:38:01]25359: WAF :: fetched 1 new logs [04-08-2022 18:41:01]3487: Checking for user cron vulnerabilities [04-08-2022 18:43:02]9829: WAF :: fetched 1 new logs [04-08-2022 18:44:01]13092: Checking ditributed CMS bruteforce attacks [04-08-2022 18:48:01]26308: WAF :: fetched 1 new logs [04-08-2022 18:56:01]20487: WAF :: fetched 1 new logs [04-08-2022 18:59:01]30324: WAF :: fetched 1 new logs [04-08-2022 19:00:02]1277: WAF :: fetched 2 new logs [04-08-2022 19:10:01]1776: WAF :: fetched 1 new logs [04-08-2022 19:12:01]8799: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659651121 [04-08-2022 19:12:01]8799: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 19:12:03]8799: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 19:12:04]8799: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-1912/20220804-191201-YuxEMdCLh9Uz8i5VzlTdsQAAAAc [04-08-2022 19:12:04]8799: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 19:12:04]8799: WAF :: fetched 2 new logs [04-08-2022 19:19:01]31349: WAF :: fetched 1 new logs [04-08-2022 19:21:01]6013: WAF :: fetched 1 new logs [04-08-2022 19:22:02]9297: WAF :: fetched 1 new logs [04-08-2022 19:23:01]12457: WAF :: fetched 1 new logs [04-08-2022 19:27:01]25482: WAF :: fetched 1 new logs [04-08-2022 19:30:02]2843: WAF :: fetched 1 new logs [04-08-2022 19:31:01]6665: WAF :: fetched 1 new logs [04-08-2022 19:36:01]22686: WAF :: fetched 1 new logs [04-08-2022 19:38:01]29169: WAF :: fetched 1 new logs [04-08-2022 19:41:02]6894: Checking for user cron vulnerabilities [04-08-2022 19:44:01]16363: Checking ditributed CMS bruteforce attacks [04-08-2022 19:45:01]: Checking for definition updates [04-08-2022 19:45:01]19553: WAF :: fetched 1 new logs [04-08-2022 19:48:01]29358: WAF :: fetched 2 new logs [04-08-2022 19:49:01]32533: WAF :: fetched 2 new logs [04-08-2022 19:50:01]3382: WAF :: fetched 1 new logs [04-08-2022 19:52:01]10213: WAF :: fetched 3 new logs [04-08-2022 19:54:01]16525: WAF :: fetched 1 new logs [04-08-2022 20:00:01]3416: WAF :: fetched 2 new logs [04-08-2022 20:01:01]7445: WAF :: fetched 1 new logs [04-08-2022 20:03:01]13883: WAF :: fetched 1 new logs [04-08-2022 20:04:01]17055: WAF :: fetched 3 new logs [04-08-2022 20:05:01]20275: WAF :: fetched 5 new logs [04-08-2022 20:06:02]23475: WAF :: fetched 7 new logs [04-08-2022 20:07:01]26819: WAF :: fetched 2 new logs [04-08-2022 20:08:02]30055: WAF :: fetched 3 new logs [04-08-2022 20:09:02]777: WAF :: fetched 4 new logs [04-08-2022 20:12:02]11079: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659654722 [04-08-2022 20:12:02]11079: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 20:12:04]11079: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 20:12:04]11079: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-2012/20220804-201202-YuxSQkqMSZPp-5g4Cyr1TQAAABM [04-08-2022 20:12:04]11079: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 20:12:04]11079: WAF :: fetched 1 new logs [04-08-2022 20:14:02]16929: WAF :: fetched 1 new logs [04-08-2022 20:18:01]29982: WAF :: fetched 1 new logs [04-08-2022 20:21:01]7285: WAF :: fetched 3 new logs [04-08-2022 20:29:01]1230: WAF :: fetched 3 new logs [04-08-2022 20:30:02]4576: WAF :: fetched 2 new logs [04-08-2022 20:33:01]14668: WAF :: fetched 1 new logs [04-08-2022 20:34:01]17815: WAF :: fetched 2 new logs [04-08-2022 20:41:01]8215: Checking for user cron vulnerabilities [04-08-2022 20:42:02]11926: WAF :: fetched 2 new logs [04-08-2022 20:44:02]18149: Checking ditributed CMS bruteforce attacks [04-08-2022 20:45:01]21382: WAF :: fetched 2 new logs [04-08-2022 20:48:01]31087: WAF :: fetched 1 new logs [04-08-2022 20:49:01]1792: WAF :: fetched 2 new logs [04-08-2022 20:53:02]15546: WAF :: fetched 1 new logs [04-08-2022 21:12:01]12293: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659658321 [04-08-2022 21:12:01]12293: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 21:12:03]12293: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 21:12:04]12293: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-2112/20220804-211201-YuxgUQbaCVR8T1o8GE432QAAABA [04-08-2022 21:12:04]12293: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [04-08-2022 21:12:04]12293: WAF :: fetched 1 new logs [04-08-2022 21:13:01]16005: WAF :: fetched 1 new logs [04-08-2022 21:16:01]25761: WAF :: fetched 2 new logs [04-08-2022 21:18:01]32259: WAF :: fetched 1 new logs [04-08-2022 21:33:02]16802: WAF :: fetched 1 new logs [04-08-2022 21:35:02]23070: WAF :: fetched 1 new logs [04-08-2022 21:41:01]10056: Checking for user cron vulnerabilities [04-08-2022 21:42:02]13210: WAF :: fetched 1 new logs [04-08-2022 21:44:01]20066: Checking ditributed CMS bruteforce attacks [04-08-2022 21:44:02]20066: WAF :: fetched 3 new logs [04-08-2022 21:45:01]23229: WAF :: fetched 2 new logs [04-08-2022 21:51:01]10441: WAF :: fetched 1 new logs [04-08-2022 21:58:01]1330: WAF :: fetched 3 new logs [04-08-2022 21:59:02]4638: WAF :: fetched 1 new logs [04-08-2022 22:00:01]7622: WAF :: fetched 1 new logs [04-08-2022 22:01:02]11286: WAF :: fetched 2 new logs [04-08-2022 22:05:02]24782: WAF :: fetched 4 new logs [04-08-2022 22:06:01]28028: WAF :: fetched 1 new logs [04-08-2022 22:07:10]31242: Performing Domain reputation checks [04-08-2022 22:08:01]1565: WAF :: fetched 3 new logs [04-08-2022 22:09:02]4854: WAF :: fetched 3 new logs [04-08-2022 22:12:01]14579: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659661921 [04-08-2022 22:12:01]14579: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 22:12:03]14579: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 22:12:04]14579: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-2212/20220804-221201-YuxuYRYKyjsNS3bZuYyF4AAAAAQ [04-08-2022 22:12:04]14579: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 22:12:04]14579: WAF :: fetched 27 new logs [04-08-2022 22:15:01]24833: WAF :: fetched 1 new logs [04-08-2022 22:16:01]28181: WAF :: fetched 1 new logs [04-08-2022 22:22:02]15349: WAF :: fetched 1 new logs [04-08-2022 22:25:01]25640: WAF :: fetched 1 new logs [04-08-2022 22:26:02]28963: WAF :: fetched 2 new logs [04-08-2022 22:28:02]3057: WAF :: fetched 1 new logs [04-08-2022 22:29:01]6172: WAF :: fetched 2 new logs [04-08-2022 22:30:02]9416: WAF :: fetched 2 new logs [04-08-2022 22:38:01]3541: WAF :: fetched 3 new logs [04-08-2022 22:41:02]13340: WAF :: fetched 3 new logs [04-08-2022 22:41:02]13340: Checking for user cron vulnerabilities [04-08-2022 22:44:01]22984: Checking ditributed CMS bruteforce attacks [04-08-2022 22:57:02]2005: WAF :: fetched 1 new logs [04-08-2022 22:58:01]4941: WAF :: fetched 2 new logs [04-08-2022 23:06:02]31584: WAF :: fetched 1 new logs [04-08-2022 23:07:50]2596: Performed RBL check for 23.111.136.34. [04-08-2022 23:08:02]5710: WAF :: fetched 1 new logs [04-08-2022 23:12:02]18450: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659665522 [04-08-2022 23:12:02]18450: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [04-08-2022 23:12:04]18450: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [04-08-2022 23:12:04]18450: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220804/20220804-2312/20220804-231202-Yux8csnhtJFE5PoCAElDhwAAAAQ [04-08-2022 23:12:04]18450: WAF :: No suitable log file found. Using SQLite.. [04-08-2022 23:12:04]18450: WAF :: fetched 1 new logs [04-08-2022 23:15:01]28090: WAF :: fetched 1 new logs [04-08-2022 23:16:01]31955: WAF :: fetched 2 new logs [04-08-2022 23:21:01]15771: WAF :: fetched 2 new logs [04-08-2022 23:22:01]19029: WAF :: fetched 2 new logs [04-08-2022 23:29:01]9708: WAF :: fetched 1 new logs [04-08-2022 23:32:01]19409: WAF :: fetched 1 new logs [04-08-2022 23:39:02]10292: WAF :: fetched 1 new logs [04-08-2022 23:41:02]16879: WAF :: fetched 2 new logs [04-08-2022 23:41:02]16879: Checking for user cron vulnerabilities [04-08-2022 23:42:01]20084: WAF :: fetched 2 new logs [04-08-2022 23:43:01]23221: WAF :: fetched 6 new logs [04-08-2022 23:44:02]26624: Checking ditributed CMS bruteforce attacks [04-08-2022 23:52:02]20635: WAF :: fetched 4 new logs [04-08-2022 23:54:01]27284: httpd.conf changed. Refreshing watchlist. [04-08-2022 23:56:01]1983: httpd.conf changed. Refreshing watchlist. [05-08-2022 00:01:07]18253: Sending daily report for August 5, 2022 [05-08-2022 00:05:01]30895: WAF :: fetched 1 new logs [05-08-2022 00:05:01]30895: Deleted 0 entries older than 6 MONTH from scanner_logs [05-08-2022 00:05:01]30895: Deleted 0 files from Quarantine [05-08-2022 00:12:02]21595: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659669122 [05-08-2022 00:12:02]21595: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 00:12:04]21595: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 00:12:04]21595: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-0012/20220805-001202-YuyKgiLyFteGjWkTB4P74QAAABw [05-08-2022 00:12:04]21595: WAF :: No suitable log file found. Using SQLite.. [05-08-2022 00:12:04]21595: WAF :: fetched 1 new logs [05-08-2022 00:14:02]28131: WAF :: fetched 2 new logs [05-08-2022 00:16:02]2388: WAF :: fetched 1 new logs [05-08-2022 00:17:01]6200: WAF :: fetched 2 new logs [05-08-2022 00:24:02]28783: WAF :: fetched 3 new logs [05-08-2022 00:25:01]32055: WAF :: fetched 1 new logs [05-08-2022 00:30:01]16321: WAF :: fetched 1 new logs [05-08-2022 00:35:01]32418: WAF :: fetched 1 new logs [05-08-2022 00:38:01]10409: WAF :: fetched 1 new logs [05-08-2022 00:41:02]20086: Checking for user cron vulnerabilities [05-08-2022 00:44:01]29789: Checking ditributed CMS bruteforce attacks [05-08-2022 00:45:01]: Checking for software updates [05-08-2022 00:49:02]14206: WAF :: fetched 1 new logs [05-08-2022 00:52:01]23962: WAF :: fetched 4 new logs [05-08-2022 00:53:02]27231: WAF :: fetched 3 new logs [05-08-2022 00:58:01]10935: WAF :: fetched 1 new logs [05-08-2022 01:04:01]3310: WAF :: fetched 1 new logs [05-08-2022 01:07:02]14399: WAF :: fetched 2 new logs [05-08-2022 01:08:01]17762: WAF :: fetched 1 new logs [05-08-2022 01:09:02]20947: WAF :: fetched 1 new logs [05-08-2022 01:10:01]24214: WAF :: fetched 3 new logs [05-08-2022 01:11:01]27985: WAF :: fetched 1 new logs [05-08-2022 01:12:02]31240: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659672722 [05-08-2022 01:12:02]31240: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 01:12:04]31240: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 01:12:04]31240: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-0112/20220805-011202-YuyYkivq3oTez_1ZXhDlGgAAABQ [05-08-2022 01:12:04]31240: WAF :: No suitable log file found. Using SQLite.. [05-08-2022 01:13:01]2244: WAF :: fetched 2 new logs [05-08-2022 01:14:02]5668: WAF :: fetched 1 new logs [05-08-2022 01:19:02]23038: WAF :: fetched 1 new logs [05-08-2022 01:34:01]11033: WAF :: fetched 1 new logs [05-08-2022 01:41:01]3464: Checking for user cron vulnerabilities [05-08-2022 01:44:01]13354: Checking ditributed CMS bruteforce attacks [05-08-2022 01:45:01]: Checking for definition updates [05-08-2022 02:12:01]9147: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659676321 [05-08-2022 02:12:01]9147: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 02:12:03]9147: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 02:12:04]9147: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-0212/20220805-021201-Yuymoaj_Y0yguRDCvI3SnwAAAAE [05-08-2022 02:12:04]9147: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-08-2022 02:12:04]9147: WAF :: fetched 1 new logs [05-08-2022 02:40:02]4343: WAF :: fetched 1 new logs [05-08-2022 02:41:02]7522: Checking for user cron vulnerabilities [05-08-2022 02:44:01]17225: Checking ditributed CMS bruteforce attacks [05-08-2022 02:53:02]14059: Updated license status via CDN [05-08-2022 02:55:01]20375: WAF :: fetched 1 new logs [05-08-2022 03:00:06]4636: Found and updated 31 CMS installations [05-08-2022 03:00:58]4636: Wordpress installation #9 oabilheus.org.br has errors [05-08-2022 03:02:53]4636: Sending CMS version vulnerability report emails to cpanel users [05-08-2022 03:02:56]4636: Checking wordpress installations for suspicious directories [05-08-2022 03:04:28]15505: Sending CMS version vulnerability report emails to cpanel users [05-08-2022 03:04:32]15505: Checking wordpress installations for suspicious directories [05-08-2022 03:05:01]22389: WAF :: fetched 2 new logs [05-08-2022 03:08:02]32331: WAF :: fetched 1 new logs [05-08-2022 03:12:01]13409: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659679921 [05-08-2022 03:12:01]13409: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 03:12:03]13409: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 03:12:04]13409: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-0312/20220805-031201-Yuy0sfIKWZaFFJznNQoIeQAAAAg [05-08-2022 03:12:04]13409: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-08-2022 03:12:04]13409: WAF :: fetched 1 new logs [05-08-2022 03:18:01]1926: WAF :: fetched 2 new logs [05-08-2022 03:19:02]5325: WAF :: fetched 2 new logs [05-08-2022 03:21:02]12257: WAF :: fetched 4 new logs [05-08-2022 03:22:01]15516: WAF :: fetched 2 new logs [05-08-2022 03:34:01]24305: WAF :: fetched 2 new logs [05-08-2022 03:35:02]27954: WAF :: fetched 1 new logs [05-08-2022 03:41:02]19574: WAF :: fetched 1 new logs [05-08-2022 03:41:02]19574: Checking for user cron vulnerabilities [05-08-2022 03:44:02]29424: Checking ditributed CMS bruteforce attacks [05-08-2022 04:10:01]20796: WAF :: fetched 1 new logs [05-08-2022 04:12:01]27513: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659683521 [05-08-2022 04:12:01]27513: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 04:12:03]27513: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 04:12:04]27513: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-0412/20220805-041201-YuzCwd5RmAp0br8dDVW_DwAAAAQ [05-08-2022 04:12:04]27513: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-08-2022 04:12:04]27513: WAF :: fetched 1 new logs [05-08-2022 04:37:01]12803: WAF :: fetched 1 new logs [05-08-2022 04:39:01]19080: WAF :: fetched 1 new logs [05-08-2022 04:41:01]26041: Checking for user cron vulnerabilities [05-08-2022 04:44:01]3547: Checking ditributed CMS bruteforce attacks [05-08-2022 04:44:01]3547: WAF :: fetched 1 new logs [05-08-2022 05:01:41]27462: Starting daily scan on files updated in last 24 hrs [05-08-2022 05:12:02]31837: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659687122 [05-08-2022 05:12:02]31837: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 05:12:04]31837: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 05:12:04]31837: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-0512/20220805-051202-YuzQ0qax9btXpOhlpozJ3QAAAAw [05-08-2022 05:12:04]31837: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-08-2022 05:12:05]31837: WAF :: fetched 1 new logs [05-08-2022 05:13:01]2705: WAF :: fetched 1 new logs [05-08-2022 05:20:02]25533: WAF :: fetched 1 new logs [05-08-2022 05:24:02]6787: WAF :: fetched 1 new logs [05-08-2022 05:29:01]22871: WAF :: fetched 4 new logs [05-08-2022 05:41:02]30211: Checking for user cron vulnerabilities [05-08-2022 05:44:01]8229: Checking ditributed CMS bruteforce attacks [05-08-2022 05:49:02]24645: WAF :: fetched 2 new logs [05-08-2022 05:50:01]27968: WAF :: fetched 6 new logs [05-08-2022 05:51:02]31290: WAF :: fetched 8 new logs [05-08-2022 05:52:01]2807: WAF :: fetched 10 new logs [05-08-2022 05:53:02]6041: WAF :: fetched 10 new logs [05-08-2022 05:54:01]9186: WAF :: fetched 3 new logs [05-08-2022 05:55:02]12352: WAF :: fetched 6 new logs [05-08-2022 05:56:01]15622: WAF :: fetched 4 new logs [05-08-2022 05:57:02]18838: WAF :: fetched 2 new logs [05-08-2022 06:07:02]19803: WAF :: fetched 1 new logs [05-08-2022 06:12:02]4437: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659690722 [05-08-2022 06:12:02]4437: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 06:12:04]4437: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 06:12:04]4437: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-0612/20220805-061202-Yuze4p1G4dT9rE_msr1HawAAAAc [05-08-2022 06:12:04]4437: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-08-2022 06:12:05]4437: WAF :: fetched 1 new logs [05-08-2022 06:13:02]7663: WAF :: fetched 1 new logs [05-08-2022 06:18:02]23817: WAF :: fetched 1 new logs [05-08-2022 06:41:02]2633: Checking for user cron vulnerabilities [05-08-2022 06:44:01]12812: Checking ditributed CMS bruteforce attacks [05-08-2022 06:55:02]16823: WAF :: fetched 1 new logs [05-08-2022 07:12:02]7500: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659694322 [05-08-2022 07:12:02]7500: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 07:12:04]7500: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 07:12:04]7500: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-0712/20220805-071202-Yuzs8rLmndKbHhoSZ4byLgAAAAo [05-08-2022 07:12:04]7500: WAF :: No suitable log file found. Using SQLite.. [05-08-2022 07:12:04]7500: WAF :: fetched 67 new logs [05-08-2022 07:16:01]20989: WAF :: fetched 1 new logs [05-08-2022 07:37:02]25347: WAF :: fetched 2 new logs [05-08-2022 07:41:01]5979: Checking for user cron vulnerabilities [05-08-2022 07:44:01]16270: Checking ditributed CMS bruteforce attacks [05-08-2022 07:45:01]: Checking for definition updates [05-08-2022 07:45:01]19407: WAF :: fetched 2 new logs [05-08-2022 07:57:01]26819: WAF :: fetched 1 new logs [05-08-2022 08:06:01]24425: WAF :: fetched 1 new logs [05-08-2022 08:12:01]11578: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659697921 [05-08-2022 08:12:01]11578: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 08:12:03]11578: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 08:12:04]11578: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-0812/20220805-081201-Yuz7Ac0zLSt8c1RAZ8QPKQAAAAE [05-08-2022 08:12:04]11578: WAF :: No suitable log file found. Using SQLite.. [05-08-2022 08:12:04]11578: WAF :: fetched 3 new logs [05-08-2022 08:15:02]21861: WAF :: fetched 1 new logs [05-08-2022 08:21:01]8886: WAF :: fetched 1 new logs [05-08-2022 08:22:02]12169: WAF :: fetched 3 new logs [05-08-2022 08:23:01]15353: WAF :: fetched 2 new logs [05-08-2022 08:38:01]783: WAF :: fetched 1 new logs [05-08-2022 08:40:01]7364: WAF :: fetched 1 new logs [05-08-2022 08:41:01]10562: Checking for user cron vulnerabilities [05-08-2022 08:44:01]20279: Checking ditributed CMS bruteforce attacks [05-08-2022 08:46:01]27599: WAF :: fetched 1 new logs [05-08-2022 08:54:01]21072: WAF :: fetched 2 new logs [05-08-2022 09:00:02]8689: WAF :: fetched 1 new logs [05-08-2022 09:01:01]12473: WAF :: fetched 2 new logs [05-08-2022 09:03:01]18916: WAF :: fetched 1 new logs [05-08-2022 09:04:01]22186: WAF :: fetched 4 new logs [05-08-2022 09:05:02]26126: WAF :: fetched 2 new logs [05-08-2022 09:06:01]29493: WAF :: fetched 1 new logs [05-08-2022 09:09:01]7016: WAF :: fetched 1 new logs [05-08-2022 09:12:01]16424: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659701521 [05-08-2022 09:12:01]16424: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 09:12:03]16424: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 09:12:04]16424: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-0912/20220805-091201-Yu0JEV4dej3qVShHezHA-AAAACM [05-08-2022 09:12:04]16424: WAF :: No suitable log file found. Using SQLite.. [05-08-2022 09:12:04]16424: WAF :: fetched 1 new logs [05-08-2022 09:22:01]17608: WAF :: fetched 1 new logs [05-08-2022 09:36:01]32325: WAF :: fetched 1 new logs [05-08-2022 09:37:01]3188: WAF :: fetched 1 new logs [05-08-2022 09:38:01]6455: WAF :: fetched 1 new logs [05-08-2022 09:39:01]9718: WAF :: fetched 1 new logs [05-08-2022 09:41:02]16377: WAF :: fetched 1 new logs [05-08-2022 09:41:02]16377: Checking for user cron vulnerabilities [05-08-2022 09:42:01]19550: WAF :: fetched 2 new logs [05-08-2022 09:44:01]26207: Checking ditributed CMS bruteforce attacks [05-08-2022 09:45:01]29626: WAF :: fetched 1 new logs [05-08-2022 09:46:01]1180: WAF :: fetched 2 new logs [05-08-2022 09:47:01]4528: WAF :: fetched 4 new logs [05-08-2022 09:48:01]7747: WAF :: fetched 2 new logs [05-08-2022 09:49:01]11157: WAF :: fetched 3 new logs [05-08-2022 09:50:01]14401: WAF :: fetched 3 new logs [05-08-2022 09:51:02]17734: WAF :: fetched 4 new logs [05-08-2022 09:52:01]21037: WAF :: fetched 2 new logs [05-08-2022 09:54:01]27887: WAF :: fetched 3 new logs [05-08-2022 09:55:02]31112: WAF :: fetched 2 new logs [05-08-2022 09:56:01]2548: WAF :: fetched 2 new logs [05-08-2022 10:01:01]19286: WAF :: fetched 1 new logs [05-08-2022 10:07:01]7012: WAF :: fetched 3 new logs [05-08-2022 10:12:02]23655: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659705122 [05-08-2022 10:12:02]23655: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 10:12:04]23655: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 10:12:04]23655: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-1012/20220805-101202-Yu0XIpiHZrsg08ciXrKQmAAAABA [05-08-2022 10:12:04]23655: WAF :: No suitable log file found. Using SQLite.. [05-08-2022 10:12:04]23655: WAF :: fetched 1 new logs [05-08-2022 10:18:01]11943: WAF :: fetched 1 new logs [05-08-2022 10:20:02]18689: WAF :: fetched 1 new logs [05-08-2022 10:25:01]3317: WAF :: fetched 1 new logs [05-08-2022 10:26:02]6700: WAF :: fetched 1 new logs [05-08-2022 10:28:02]13914: WAF :: fetched 1 new logs [05-08-2022 10:29:01]17276: WAF :: fetched 1 new logs [05-08-2022 10:31:01]24075: WAF :: fetched 1 new logs [05-08-2022 10:32:02]27591: WAF :: fetched 3 new logs [05-08-2022 10:34:02]2079: WAF :: fetched 1 new logs [05-08-2022 10:41:01]26395: Checking for user cron vulnerabilities [05-08-2022 10:44:01]4339: Checking ditributed CMS bruteforce attacks [05-08-2022 10:46:02]10968: WAF :: fetched 4 new logs [05-08-2022 10:49:01]21729: WAF :: fetched 1 new logs [05-08-2022 11:01:01]30058: WAF :: fetched 1 new logs [05-08-2022 11:05:01]11009: WAF :: fetched 1 new logs [05-08-2022 11:06:01]14282: WAF :: fetched 2 new logs [05-08-2022 11:07:01]18073: WAF :: fetched 1 new logs [05-08-2022 11:08:02]18212: Performed RBL check for 23.111.136.34. [05-08-2022 11:11:01]31329: WAF :: fetched 1 new logs [05-08-2022 11:12:02]2296: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659708722 [05-08-2022 11:12:02]2296: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 11:12:04]2296: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 11:12:04]2296: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-1112/20220805-111202-Yu0lMhfL6Iv1WIv2qiz1rQAAAAU [05-08-2022 11:12:04]2296: WAF :: No suitable log file found. Using SQLite.. [05-08-2022 11:12:04]2296: WAF :: fetched 1 new logs [05-08-2022 11:13:01]5580: WAF :: fetched 5 new logs [05-08-2022 11:14:02]8839: WAF :: fetched 2 new logs [05-08-2022 11:15:01]12261: WAF :: fetched 2 new logs [05-08-2022 11:16:01]15673: WAF :: fetched 1 new logs [05-08-2022 11:17:01]19557: WAF :: fetched 2 new logs [05-08-2022 11:18:01]22825: WAF :: fetched 1 new logs [05-08-2022 11:19:01]26230: WAF :: fetched 2 new logs [05-08-2022 11:24:01]12129: WAF :: fetched 3 new logs [05-08-2022 11:25:01]15409: WAF :: fetched 1 new logs [05-08-2022 11:31:01]3792: WAF :: fetched 2 new logs [05-08-2022 11:33:01]10423: WAF :: fetched 1 new logs [05-08-2022 11:34:02]13661: WAF :: fetched 1 new logs [05-08-2022 11:37:01]23582: WAF :: fetched 1 new logs [05-08-2022 11:41:01]5202: Checking for user cron vulnerabilities [05-08-2022 11:44:02]15013: Checking ditributed CMS bruteforce attacks [05-08-2022 11:57:01]26400: WAF :: fetched 1 new logs [05-08-2022 12:00:01]3872: WAF :: fetched 1 new logs [05-08-2022 12:11:02]9489: WAF :: fetched 2 new logs [05-08-2022 12:12:01]12787: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659712321 [05-08-2022 12:12:01]12787: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 12:12:03]12787: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 12:12:04]12787: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-1212/20220805-121201-Yu0zQbMDmxOoD9e1My7j6wAAAAQ [05-08-2022 12:12:04]12787: WAF :: No suitable log file found. Using SQLite.. [05-08-2022 12:12:04]12787: WAF :: fetched 1 new logs [05-08-2022 12:26:02]27588: WAF :: fetched 1 new logs [05-08-2022 12:27:01]30911: WAF :: fetched 1 new logs [05-08-2022 12:35:01]25345: WAF :: fetched 1 new logs [05-08-2022 12:38:02]2921: WAF :: fetched 1 new logs [05-08-2022 12:39:01]6611: WAF :: fetched 1 new logs [05-08-2022 12:40:02]10041: WAF :: fetched 2 new logs [05-08-2022 12:41:01]13041: WAF :: fetched 2 new logs [05-08-2022 12:41:01]13041: Checking for user cron vulnerabilities [05-08-2022 12:42:01]16629: WAF :: fetched 1 new logs [05-08-2022 12:43:01]19845: WAF :: fetched 1 new logs [05-08-2022 12:44:01]23206: Checking ditributed CMS bruteforce attacks [05-08-2022 12:45:02]: Checking for software updates [05-08-2022 12:48:01]4092: WAF :: fetched 1 new logs [05-08-2022 12:50:01]11264: WAF :: fetched 2 new logs [05-08-2022 12:52:01]17824: WAF :: fetched 3 new logs [05-08-2022 12:53:01]21009: WAF :: fetched 1 new logs [05-08-2022 12:55:02]27915: WAF :: fetched 2 new logs [05-08-2022 12:56:01]31152: WAF :: fetched 1 new logs [05-08-2022 12:59:01]8651: WAF :: fetched 1 new logs [05-08-2022 13:00:01]11644: WAF :: fetched 1 new logs [05-08-2022 13:01:01]15352: WAF :: fetched 1 new logs [05-08-2022 13:02:01]18683: WAF :: fetched 1 new logs [05-08-2022 13:09:02]10009: WAF :: fetched 1 new logs [05-08-2022 13:12:01]19936: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659715921 [05-08-2022 13:12:01]19936: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 13:12:03]19936: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 13:12:04]19936: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-1312/20220805-131201-Yu1BUUaw7xhv7nzsFpkVVQAAAAE [05-08-2022 13:12:04]19936: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-08-2022 13:12:04]19936: WAF :: fetched 1 new logs [05-08-2022 13:18:01]7486: WAF :: fetched 2 new logs [05-08-2022 13:19:02]11217: WAF :: fetched 1 new logs [05-08-2022 13:20:02]14598: WAF :: fetched 1 new logs [05-08-2022 13:21:01]17858: WAF :: fetched 2 new logs [05-08-2022 13:24:02]27970: WAF :: fetched 2 new logs [05-08-2022 13:25:01]31210: WAF :: fetched 1 new logs [05-08-2022 13:28:01]8910: WAF :: fetched 2 new logs [05-08-2022 13:30:01]16221: WAF :: fetched 1 new logs [05-08-2022 13:32:01]22851: WAF :: fetched 1 new logs [05-08-2022 13:33:01]26246: WAF :: fetched 1 new logs [05-08-2022 13:34:02]29635: WAF :: fetched 1 new logs [05-08-2022 13:35:01]459: WAF :: fetched 3 new logs [05-08-2022 13:37:01]7162: WAF :: fetched 1 new logs [05-08-2022 13:38:02]10427: WAF :: fetched 1 new logs [05-08-2022 13:39:01]13668: WAF :: fetched 2 new logs [05-08-2022 13:40:02]17525: WAF :: fetched 1 new logs [05-08-2022 13:41:01]20851: Checking for user cron vulnerabilities [05-08-2022 13:44:01]30862: Checking ditributed CMS bruteforce attacks [05-08-2022 13:44:02]30862: WAF :: fetched 3 new logs [05-08-2022 13:45:02]: Checking for definition updates [05-08-2022 13:45:02]1727: WAF :: fetched 4 new logs [05-08-2022 13:46:02]5092: WAF :: fetched 1 new logs [05-08-2022 13:50:02]19213: WAF :: fetched 2 new logs [05-08-2022 13:51:01]22625: WAF :: fetched 3 new logs [05-08-2022 13:52:02]26274: WAF :: fetched 2 new logs [05-08-2022 13:53:02]29666: WAF :: fetched 1 new logs [05-08-2022 13:54:02]536: WAF :: fetched 4 new logs [05-08-2022 13:55:02]4105: WAF :: fetched 7 new logs [05-08-2022 13:56:02]7593: WAF :: fetched 1 new logs [05-08-2022 13:58:01]14227: WAF :: fetched 2 new logs [05-08-2022 14:00:02]21406: WAF :: fetched 2 new logs [05-08-2022 14:01:01]25029: WAF :: fetched 6 new logs [05-08-2022 14:02:02]28506: WAF :: fetched 2 new logs [05-08-2022 14:03:02]31753: WAF :: fetched 1 new logs [05-08-2022 14:04:02]2770: WAF :: fetched 2 new logs [05-08-2022 14:06:02]9675: WAF :: fetched 3 new logs [05-08-2022 14:12:01]30326: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659719521 [05-08-2022 14:12:01]30326: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 14:12:03]30326: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 14:12:04]30326: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-1412/20220805-141201-Yu1PYchEqAh9FmhupFtnNgAAAAg [05-08-2022 14:12:04]30326: WAF :: No suitable log file found. Using SQLite.. [05-08-2022 14:12:04]30326: WAF :: fetched 61 new logs [05-08-2022 14:14:01]4718: WAF :: fetched 2 new logs [05-08-2022 14:15:02]8159: WAF :: fetched 1 new logs [05-08-2022 14:16:01]11577: WAF :: fetched 2 new logs [05-08-2022 14:19:01]21667: WAF :: fetched 1 new logs [05-08-2022 14:23:01]3670: WAF :: fetched 1 new logs [05-08-2022 14:28:01]20499: WAF :: fetched 2 new logs [05-08-2022 14:34:01]8981: WAF :: fetched 1 new logs [05-08-2022 14:36:01]15898: WAF :: fetched 1 new logs [05-08-2022 14:39:02]26187: WAF :: fetched 1 new logs [05-08-2022 14:40:01]29653: WAF :: fetched 1 new logs [05-08-2022 14:41:02]1290: Checking for user cron vulnerabilities [05-08-2022 14:42:01]4680: WAF :: fetched 2 new logs [05-08-2022 14:43:02]8031: WAF :: fetched 1 new logs [05-08-2022 14:44:01]11184: Checking ditributed CMS bruteforce attacks [05-08-2022 14:45:02]14631: WAF :: fetched 1 new logs [05-08-2022 14:46:01]17908: WAF :: fetched 1 new logs [05-08-2022 14:49:01]27873: WAF :: fetched 1 new logs [05-08-2022 14:53:01]9348: WAF :: fetched 3 new logs [05-08-2022 14:53:02]9354: Updated license status via CDN [05-08-2022 14:54:02]12541: WAF :: fetched 1 new logs [05-08-2022 14:55:01]15741: WAF :: fetched 1 new logs [05-08-2022 14:56:02]19074: WAF :: fetched 2 new logs [05-08-2022 14:57:01]22337: WAF :: fetched 2 new logs [05-08-2022 15:01:01]3673: Reseting cPGuard inotify settings [05-08-2022 15:05:01]16801: WAF :: fetched 1 new logs [05-08-2022 15:07:01]23273: WAF :: fetched 2 new logs [05-08-2022 15:10:02]1050: WAF :: fetched 1 new logs [05-08-2022 15:11:01]5148: WAF :: fetched 2 new logs [05-08-2022 15:12:01]8409: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659723121 [05-08-2022 15:12:01]8409: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 15:12:03]8409: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 15:12:03]8409: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-1512/20220805-151201-Yu1dcUcuKpn3EaS6NccExwAAAAs [05-08-2022 15:12:03]8409: WAF :: No suitable log file found. Using SQLite.. [05-08-2022 15:12:03]8409: WAF :: fetched 3 new logs [05-08-2022 15:13:01]11715: WAF :: fetched 1 new logs [05-08-2022 15:14:01]15008: WAF :: fetched 1 new logs [05-08-2022 15:17:02]25134: WAF :: fetched 3 new logs [05-08-2022 15:19:02]31502: WAF :: fetched 1 new logs [05-08-2022 15:23:02]12997: WAF :: fetched 1 new logs [05-08-2022 15:24:01]16155: WAF :: fetched 1 new logs [05-08-2022 15:26:01]22764: WAF :: fetched 3 new logs [05-08-2022 15:27:01]26141: WAF :: fetched 1 new logs [05-08-2022 15:28:01]29423: WAF :: fetched 1 new logs [05-08-2022 15:30:01]3641: WAF :: fetched 1 new logs [05-08-2022 15:31:01]7076: WAF :: fetched 1 new logs [05-08-2022 15:32:01]10842: WAF :: fetched 1 new logs [05-08-2022 15:37:02]27616: httpd.conf changed. Refreshing watchlist. [05-08-2022 15:38:02]31027: httpd.conf changed. Refreshing watchlist. [05-08-2022 15:39:01]1972: WAF :: fetched 2 new logs [05-08-2022 15:41:01]8839: Checking for user cron vulnerabilities [05-08-2022 15:42:02]12658: WAF :: fetched 1 new logs [05-08-2022 15:43:01]15957: WAF :: fetched 1 new logs [05-08-2022 15:43:01]15955: httpd.conf changed. Refreshing watchlist. [05-08-2022 15:44:01]19327: Checking ditributed CMS bruteforce attacks [05-08-2022 15:44:01]19327: WAF :: fetched 2 new logs [05-08-2022 15:59:01]4633: WAF :: fetched 1 new logs [05-08-2022 16:00:02]7601: WAF :: fetched 4 new logs [05-08-2022 16:02:02]15330: WAF :: fetched 2 new logs [05-08-2022 16:09:01]5718: WAF :: fetched 3 new logs [05-08-2022 16:11:01]12461: WAF :: fetched 1 new logs [05-08-2022 16:12:02]16287: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659726722 [05-08-2022 16:12:02]16287: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 16:12:04]16287: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 16:12:04]16287: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-1612/20220805-161202-Yu1rgoQlLPvMNz28V5t1WgAAAAM [05-08-2022 16:12:04]16287: WAF :: No suitable log file found. Using SQLite.. [05-08-2022 16:12:04]16287: WAF :: fetched 5 new logs [05-08-2022 16:14:01]22718: WAF :: fetched 3 new logs [05-08-2022 16:15:02]26235: WAF :: fetched 4 new logs [05-08-2022 16:21:01]13940: WAF :: fetched 2 new logs [05-08-2022 16:22:01]17671: WAF :: fetched 2 new logs [05-08-2022 16:23:01]20877: WAF :: fetched 1 new logs [05-08-2022 16:24:01]24182: WAF :: fetched 3 new logs [05-08-2022 16:25:01]27438: WAF :: fetched 7 new logs [05-08-2022 16:26:01]30879: WAF :: fetched 4 new logs [05-08-2022 16:27:01]1852: WAF :: fetched 2 new logs [05-08-2022 16:30:01]11532: WAF :: fetched 1 new logs [05-08-2022 16:31:01]14939: WAF :: fetched 1 new logs [05-08-2022 16:32:01]18155: WAF :: fetched 2 new logs [05-08-2022 16:33:01]21874: WAF :: fetched 2 new logs [05-08-2022 16:35:01]28434: WAF :: fetched 1 new logs [05-08-2022 16:36:01]31802: WAF :: fetched 1 new logs [05-08-2022 16:37:01]2731: WAF :: fetched 1 new logs [05-08-2022 16:38:01]5940: WAF :: fetched 4 new logs [05-08-2022 16:39:01]9165: WAF :: fetched 2 new logs [05-08-2022 16:40:01]12434: WAF :: fetched 2 new logs [05-08-2022 16:41:01]16012: WAF :: fetched 3 new logs [05-08-2022 16:41:01]16012: Checking for user cron vulnerabilities [05-08-2022 16:42:01]19372: WAF :: fetched 1 new logs [05-08-2022 16:43:01]23179: WAF :: fetched 1 new logs [05-08-2022 16:44:01]26699: Checking ditributed CMS bruteforce attacks [05-08-2022 16:45:01]29994: WAF :: fetched 1 new logs [05-08-2022 17:10:01]15353: WAF :: fetched 1 new logs [05-08-2022 17:12:01]21955: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659730321 [05-08-2022 17:12:01]21955: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 17:12:03]21955: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 17:12:04]21955: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-1712/20220805-171201-Yu15kWKvefsKQSPku_-7UgAAAAA [05-08-2022 17:12:04]21955: WAF :: No suitable log file found. Using SQLite.. [05-08-2022 17:13:02]25839: WAF :: fetched 1 new logs [05-08-2022 17:15:01]32369: WAF :: fetched 1 new logs [05-08-2022 17:21:01]19773: WAF :: fetched 1 new logs [05-08-2022 17:22:01]22973: WAF :: fetched 1 new logs [05-08-2022 17:26:01]4389: WAF :: fetched 1 new logs [05-08-2022 17:27:01]7627: WAF :: fetched 2 new logs [05-08-2022 17:29:01]13951: WAF :: fetched 2 new logs [05-08-2022 17:30:01]17208: WAF :: fetched 2 new logs [05-08-2022 17:31:01]20516: WAF :: fetched 4 new logs [05-08-2022 17:32:01]23849: WAF :: fetched 2 new logs [05-08-2022 17:33:01]27000: WAF :: fetched 2 new logs [05-08-2022 17:35:02]1687: WAF :: fetched 1 new logs [05-08-2022 17:41:01]21027: Checking for user cron vulnerabilities [05-08-2022 17:43:01]27624: WAF :: fetched 1 new logs [05-08-2022 17:44:01]31385: Checking ditributed CMS bruteforce attacks [05-08-2022 17:59:01]15260: WAF :: fetched 2 new logs [05-08-2022 18:00:01]18126: WAF :: fetched 3 new logs [05-08-2022 18:05:02]3083: WAF :: fetched 1 new logs [05-08-2022 18:12:02]25578: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659733922 [05-08-2022 18:12:02]25578: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 18:12:04]25578: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 18:12:04]25578: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-1812/20220805-181202-Yu2HogqMjxJ81NapP6QKDwAAAAw [05-08-2022 18:12:04]25578: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-08-2022 18:12:05]25578: WAF :: fetched 1 new logs [05-08-2022 18:13:01]28785: WAF :: fetched 2 new logs [05-08-2022 18:15:02]3263: WAF :: fetched 2 new logs [05-08-2022 18:16:02]6641: WAF :: fetched 1 new logs [05-08-2022 18:22:01]26025: WAF :: fetched 2 new logs [05-08-2022 18:23:02]29287: WAF :: fetched 2 new logs [05-08-2022 18:24:02]306: WAF :: fetched 3 new logs [05-08-2022 18:29:02]16575: WAF :: fetched 1 new logs [05-08-2022 18:30:01]19702: WAF :: fetched 1 new logs [05-08-2022 18:34:01]32666: WAF :: fetched 1 new logs [05-08-2022 18:35:02]4163: httpd.conf changed. Refreshing watchlist. [05-08-2022 18:35:02]4159: WAF :: fetched 1 new logs [05-08-2022 18:36:01]7346: WAF :: fetched 5 new logs [05-08-2022 18:37:02]10575: WAF :: fetched 11 new logs [05-08-2022 18:38:02]13739: WAF :: fetched 12 new logs [05-08-2022 18:39:01]16994: httpd.conf changed. Refreshing watchlist. [05-08-2022 18:39:02]16980: WAF :: fetched 13 new logs [05-08-2022 18:40:01]20137: WAF :: fetched 10 new logs [05-08-2022 18:41:02]23391: WAF :: fetched 12 new logs [05-08-2022 18:41:02]23391: Checking for user cron vulnerabilities [05-08-2022 18:42:02]26754: WAF :: fetched 11 new logs [05-08-2022 18:43:01]29973: WAF :: fetched 2 new logs [05-08-2022 18:44:01]679: Checking ditributed CMS bruteforce attacks [05-08-2022 18:44:02]679: WAF :: fetched 1 new logs [05-08-2022 18:48:02]14157: WAF :: fetched 1 new logs [05-08-2022 18:49:01]17300: WAF :: fetched 7 new logs [05-08-2022 18:50:02]20442: WAF :: fetched 2 new logs [05-08-2022 18:51:01]23760: WAF :: fetched 1 new logs [05-08-2022 18:52:02]27094: WAF :: fetched 6 new logs [05-08-2022 18:53:01]30288: WAF :: fetched 8 new logs [05-08-2022 18:55:01]4907: WAF :: fetched 4 new logs [05-08-2022 18:56:02]8219: WAF :: fetched 10 new logs [05-08-2022 18:57:01]11023: WAF :: fetched 8 new logs [05-08-2022 19:02:02]27357: WAF :: fetched 2 new logs [05-08-2022 19:04:02]1328: WAF :: fetched 2 new logs [05-08-2022 19:05:01]5064: WAF :: fetched 5 new logs [05-08-2022 19:10:02]20972: WAF :: fetched 2 new logs [05-08-2022 19:11:01]24309: WAF :: fetched 4 new logs [05-08-2022 19:12:01]27649: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659737521 [05-08-2022 19:12:02]27649: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 19:12:04]27649: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 19:12:04]27649: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-1912/20220805-191202-Yu2VslnEQlekHUOkBDoGuAAAAAs [05-08-2022 19:12:04]27649: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-08-2022 19:12:04]27649: WAF :: fetched 3 new logs [05-08-2022 19:13:01]30892: WAF :: fetched 210 new logs [05-08-2022 19:14:02]1685: WAF :: fetched 221 new logs [05-08-2022 19:15:01]5422: WAF :: fetched 37 new logs [05-08-2022 19:17:01]11978: WAF :: fetched 1 new logs [05-08-2022 19:19:01]18263: WAF :: fetched 2 new logs [05-08-2022 19:30:01]21878: WAF :: fetched 3 new logs [05-08-2022 19:31:02]25249: WAF :: fetched 4 new logs [05-08-2022 19:32:01]28646: WAF :: fetched 6 new logs [05-08-2022 19:33:02]31778: WAF :: fetched 5 new logs [05-08-2022 19:34:01]2530: WAF :: fetched 7 new logs [05-08-2022 19:35:02]5803: WAF :: fetched 2 new logs [05-08-2022 19:36:01]9553: WAF :: fetched 1 new logs [05-08-2022 19:38:01]16035: WAF :: fetched 1 new logs [05-08-2022 19:41:02]25793: Checking for user cron vulnerabilities [05-08-2022 19:44:01]3176: Checking ditributed CMS bruteforce attacks [05-08-2022 19:45:01]: Checking for definition updates [05-08-2022 19:45:05]6340: Updated virus defnition : malware.expert.ndb [05-08-2022 19:55:02]6722: WAF :: fetched 1 new logs [05-08-2022 20:00:02]23019: WAF :: fetched 3 new logs [05-08-2022 20:02:02]30198: WAF :: fetched 2 new logs [05-08-2022 20:03:01]919: WAF :: fetched 2 new logs [05-08-2022 20:04:02]4192: WAF :: fetched 2 new logs [05-08-2022 20:10:01]23900: WAF :: fetched 2 new logs [05-08-2022 20:12:01]30520: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659741121 [05-08-2022 20:12:01]30520: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 20:12:03]30520: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 20:12:03]30520: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-2012/20220805-201201-Yu2jwdQPDMYRfyh_FxKOMAAAAAE [05-08-2022 20:12:03]30520: WAF :: No suitable log file found. Using SQLite.. [05-08-2022 20:12:04]30520: WAF :: fetched 573 new logs [05-08-2022 20:16:01]11460: WAF :: fetched 1 new logs [05-08-2022 20:24:01]5541: WAF :: fetched 3 new logs [05-08-2022 20:26:02]12573: WAF :: fetched 1 new logs [05-08-2022 20:27:01]16098: WAF :: fetched 3 new logs [05-08-2022 20:35:01]9708: WAF :: fetched 1 new logs [05-08-2022 20:38:01]19943: WAF :: fetched 2 new logs [05-08-2022 20:41:01]29726: Checking for user cron vulnerabilities [05-08-2022 20:44:01]7305: Checking ditributed CMS bruteforce attacks [05-08-2022 20:44:02]7305: WAF :: fetched 1 new logs [05-08-2022 20:46:01]13825: WAF :: fetched 3 new logs [05-08-2022 20:47:01]17474: WAF :: fetched 2 new logs [05-08-2022 20:48:01]20681: WAF :: fetched 4 new logs [05-08-2022 20:49:02]23951: WAF :: fetched 1 new logs [05-08-2022 20:51:02]30198: WAF :: fetched 1 new logs [05-08-2022 20:52:01]993: WAF :: fetched 1 new logs [05-08-2022 21:00:01]27507: WAF :: fetched 1 new logs [05-08-2022 21:02:02]2227: WAF :: fetched 4 new logs [05-08-2022 21:08:01]22358: WAF :: fetched 1 new logs [05-08-2022 21:11:01]32177: WAF :: fetched 1 new logs [05-08-2022 21:12:01]3175: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659744721 [05-08-2022 21:12:02]3175: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 21:12:04]3175: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 21:12:04]3175: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-2112/20220805-211202-Yu2x0YcMl7MCuEuiScZpagAAAB8 [05-08-2022 21:12:04]3175: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-08-2022 21:12:04]3175: WAF :: fetched 3 new logs [05-08-2022 21:13:01]6259: WAF :: fetched 3 new logs [05-08-2022 21:18:02]22760: WAF :: fetched 1 new logs [05-08-2022 21:25:01]12841: WAF :: fetched 1 new logs [05-08-2022 21:34:01]10193: WAF :: fetched 1 new logs [05-08-2022 21:41:02]910: Checking for user cron vulnerabilities [05-08-2022 21:44:01]10463: Checking ditributed CMS bruteforce attacks [05-08-2022 21:46:01]16611: WAF :: fetched 2 new logs [05-08-2022 21:53:02]6971: WAF :: fetched 1 new logs [05-08-2022 21:58:02]23748: WAF :: fetched 4 new logs [05-08-2022 21:59:01]26900: WAF :: fetched 1 new logs [05-08-2022 22:04:02]10788: WAF :: fetched 2 new logs [05-08-2022 22:05:01]13936: WAF :: fetched 1 new logs [05-08-2022 22:06:02]17174: WAF :: fetched 1 new logs [05-08-2022 22:07:08]20419: Performing Domain reputation checks [05-08-2022 22:08:02]24231: WAF :: fetched 1 new logs [05-08-2022 22:12:02]4731: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659748322 [05-08-2022 22:12:02]4731: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 22:12:04]4731: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 22:12:04]4731: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-2212/20220805-221202-Yu2_4pbs1Bjo1O_KxHuPIQAAAAY [05-08-2022 22:12:04]4731: WAF :: No suitable log file found. Using SQLite.. [05-08-2022 22:12:04]4731: WAF :: fetched 17 new logs [05-08-2022 22:17:02]20649: WAF :: fetched 2 new logs [05-08-2022 22:18:01]24561: WAF :: fetched 1 new logs [05-08-2022 22:20:01]30883: WAF :: fetched 1 new logs [05-08-2022 22:26:01]17730: WAF :: fetched 2 new logs [05-08-2022 22:27:01]20969: WAF :: fetched 2 new logs [05-08-2022 22:38:01]24585: WAF :: fetched 1 new logs [05-08-2022 22:39:01]28547: WAF :: fetched 1 new logs [05-08-2022 22:40:01]31210: WAF :: fetched 2 new logs [05-08-2022 22:41:01]2117: WAF :: fetched 5 new logs [05-08-2022 22:41:01]2117: Checking for user cron vulnerabilities [05-08-2022 22:42:02]5360: WAF :: fetched 2 new logs [05-08-2022 22:43:01]8540: WAF :: fetched 2 new logs [05-08-2022 22:44:02]11662: Checking ditributed CMS bruteforce attacks [05-08-2022 22:44:02]11662: WAF :: fetched 2 new logs [05-08-2022 22:45:01]14860: WAF :: fetched 4 new logs [05-08-2022 22:46:02]18077: WAF :: fetched 2 new logs [05-08-2022 22:48:01]24587: WAF :: fetched 4 new logs [05-08-2022 22:53:01]9030: WAF :: fetched 6 new logs [05-08-2022 23:02:02]6081: WAF :: fetched 1 new logs [05-08-2022 23:07:54]22205: Performed RBL check for 23.111.136.34. [05-08-2022 23:12:01]6275: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659751921 [05-08-2022 23:12:01]6275: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [05-08-2022 23:12:03]6275: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [05-08-2022 23:12:04]6275: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220805/20220805-2312/20220805-231201-Yu3N8X0x1Vp3vuB1_SCeVgAAAAY [05-08-2022 23:12:04]6275: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [05-08-2022 23:12:04]6275: WAF :: fetched 1 new logs [05-08-2022 23:16:01]19071: WAF :: fetched 1 new logs [05-08-2022 23:17:02]22288: WAF :: fetched 2 new logs [05-08-2022 23:18:01]25805: WAF :: fetched 3 new logs [05-08-2022 23:21:02]3640: WAF :: fetched 1 new logs [05-08-2022 23:26:02]19440: WAF :: fetched 2 new logs [05-08-2022 23:32:02]6844: WAF :: fetched 3 new logs [05-08-2022 23:33:01]10061: WAF :: fetched 1 new logs [05-08-2022 23:34:02]13193: WAF :: fetched 2 new logs [05-08-2022 23:35:01]16368: WAF :: fetched 2 new logs [05-08-2022 23:37:01]22634: WAF :: fetched 2 new logs [05-08-2022 23:39:02]28978: WAF :: fetched 1 new logs [05-08-2022 23:41:02]3362: WAF :: fetched 3 new logs [05-08-2022 23:41:02]3362: Checking for user cron vulnerabilities [05-08-2022 23:42:02]6516: WAF :: fetched 3 new logs [05-08-2022 23:44:01]12834: Checking ditributed CMS bruteforce attacks [05-08-2022 23:56:01]19827: httpd.conf changed. Refreshing watchlist. [05-08-2022 23:58:01]26428: httpd.conf changed. Refreshing watchlist. [06-08-2022 00:01:02]4622: httpd.conf changed. Refreshing watchlist. [06-08-2022 00:01:06]4601: Sending daily report for August 6, 2022 [06-08-2022 00:05:02]17424: Deleted 0 entries older than 6 MONTH from scanner_logs [06-08-2022 00:05:02]17424: Deleted 0 files from Quarantine [06-08-2022 00:06:01]20563: WAF :: fetched 2 new logs [06-08-2022 00:12:01]8153: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659755521 [06-08-2022 00:12:01]8153: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 00:12:03]8153: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 00:12:04]8153: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-0012/20220806-001201-Yu3cAehVh50tuwgj8yhVjAAAAAw [06-08-2022 00:12:04]8153: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-08-2022 00:12:04]8153: WAF :: fetched 1 new logs [06-08-2022 00:17:01]24181: WAF :: fetched 1 new logs [06-08-2022 00:18:01]27549: WAF :: fetched 2 new logs [06-08-2022 00:34:02]14967: WAF :: fetched 1 new logs [06-08-2022 00:41:01]5730: Checking for user cron vulnerabilities [06-08-2022 00:44:02]15297: Checking ditributed CMS bruteforce attacks [06-08-2022 00:45:01]: Checking for software updates [06-08-2022 00:50:02]2330: WAF :: fetched 1 new logs [06-08-2022 00:56:02]21928: WAF :: fetched 3 new logs [06-08-2022 00:57:02]25354: WAF :: fetched 1 new logs [06-08-2022 01:12:01]14046: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659759121 [06-08-2022 01:12:01]14046: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 01:12:03]14046: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 01:12:04]14046: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-0112/20220806-011201-Yu3qEXBLHHBJqtvH6lNQyQAAAAA [06-08-2022 01:12:04]14046: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-08-2022 01:12:04]14046: WAF :: fetched 1 new logs [06-08-2022 01:40:02]14209: WAF :: fetched 1 new logs [06-08-2022 01:41:01]17386: WAF :: fetched 1 new logs [06-08-2022 01:41:01]17386: Checking for user cron vulnerabilities [06-08-2022 01:42:02]21454: WAF :: fetched 1 new logs [06-08-2022 01:44:02]28300: Checking ditributed CMS bruteforce attacks [06-08-2022 01:45:01]: Checking for definition updates [06-08-2022 01:45:01]31387: WAF :: fetched 2 new logs [06-08-2022 01:46:02]2541: WAF :: fetched 2 new logs [06-08-2022 01:50:02]15287: WAF :: fetched 1 new logs [06-08-2022 01:52:02]22206: WAF :: fetched 2 new logs [06-08-2022 01:57:01]6552: WAF :: fetched 1 new logs [06-08-2022 02:03:02]26653: WAF :: fetched 1 new logs [06-08-2022 02:04:01]29942: WAF :: fetched 1 new logs [06-08-2022 02:12:01]23701: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659762721 [06-08-2022 02:12:01]23701: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 02:12:03]23701: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 02:12:04]23701: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-0212/20220806-021201-Yu34IQSXfDTr-ic8PPmXGAAAAAw [06-08-2022 02:12:04]23701: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-08-2022 02:12:04]23701: WAF :: fetched 1 new logs [06-08-2022 02:18:01]10709: WAF :: fetched 2 new logs [06-08-2022 02:20:01]17022: WAF :: fetched 2 new logs [06-08-2022 02:22:01]23801: WAF :: fetched 3 new logs [06-08-2022 02:23:02]27072: WAF :: fetched 2 new logs [06-08-2022 02:24:01]30270: WAF :: fetched 1 new logs [06-08-2022 02:39:02]14209: WAF :: fetched 1 new logs [06-08-2022 02:41:02]20583: Checking for user cron vulnerabilities [06-08-2022 02:44:01]32222: Checking ditributed CMS bruteforce attacks [06-08-2022 02:50:01]19358: WAF :: fetched 1 new logs [06-08-2022 02:53:02]30111: Updated license status via CDN [06-08-2022 03:00:02]21003: Found and updated 31 CMS installations [06-08-2022 03:02:15]21003: Sending CMS version vulnerability report emails to cpanel users [06-08-2022 03:02:18]21003: Checking wordpress installations for suspicious directories [06-08-2022 03:04:27]381: Sending CMS version vulnerability report emails to cpanel users [06-08-2022 03:04:30]381: Checking wordpress installations for suspicious directories [06-08-2022 03:12:01]19002: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659766321 [06-08-2022 03:12:01]19002: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 03:12:03]19002: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 03:12:03]19002: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-0312/20220806-031201-Yu4GMSMbyu5Fh9H2S0skRAAAAAA [06-08-2022 03:12:03]19002: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-08-2022 03:12:04]19002: WAF :: fetched 1 new logs [06-08-2022 03:14:02]8242: WAF :: fetched 1 new logs [06-08-2022 03:31:02]31086: WAF :: fetched 1 new logs [06-08-2022 03:40:02]29252: WAF :: fetched 10 new logs [06-08-2022 03:41:01]32667: WAF :: fetched 6 new logs [06-08-2022 03:41:01]32667: Checking for user cron vulnerabilities [06-08-2022 03:42:02]3716: WAF :: fetched 8 new logs [06-08-2022 03:43:01]6911: WAF :: fetched 6 new logs [06-08-2022 03:44:01]10760: Checking ditributed CMS bruteforce attacks [06-08-2022 03:47:02]20823: WAF :: fetched 1 new logs [06-08-2022 03:49:02]27461: WAF :: fetched 1 new logs [06-08-2022 03:54:02]11778: WAF :: fetched 2 new logs [06-08-2022 03:59:01]27883: WAF :: fetched 1 new logs [06-08-2022 04:12:02]5938: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659769922 [06-08-2022 04:12:02]5938: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 04:12:04]5938: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 04:12:04]5938: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-0412/20220806-041202-Yu4UQm07aMz74yVBy760dAAAAAg [06-08-2022 04:12:04]5938: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-08-2022 04:12:05]5938: WAF :: fetched 1 new logs [06-08-2022 04:13:02]9158: WAF :: fetched 1 new logs [06-08-2022 04:30:02]32714: WAF :: fetched 1 new logs [06-08-2022 04:32:02]6903: WAF :: fetched 1 new logs [06-08-2022 04:37:01]23342: WAF :: fetched 1 new logs [06-08-2022 04:38:02]26746: WAF :: fetched 9 new logs [06-08-2022 04:39:01]29953: WAF :: fetched 5 new logs [06-08-2022 04:40:02]791: WAF :: fetched 6 new logs [06-08-2022 04:41:01]4100: WAF :: fetched 4 new logs [06-08-2022 04:41:01]4100: Checking for user cron vulnerabilities [06-08-2022 04:43:02]10557: WAF :: fetched 1 new logs [06-08-2022 04:44:01]13657: Checking ditributed CMS bruteforce attacks [06-08-2022 04:45:02]17492: WAF :: fetched 2 new logs [06-08-2022 04:46:02]20663: WAF :: fetched 6 new logs [06-08-2022 04:47:02]24083: WAF :: fetched 8 new logs [06-08-2022 04:48:02]27290: WAF :: fetched 6 new logs [06-08-2022 04:49:02]30543: WAF :: fetched 5 new logs [06-08-2022 04:51:02]4797: WAF :: fetched 1 new logs [06-08-2022 04:52:01]7999: WAF :: fetched 1 new logs [06-08-2022 05:01:42]5458: Starting daily scan on files updated in last 24 hrs [06-08-2022 05:12:02]9028: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659773522 [06-08-2022 05:12:02]9028: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 05:12:04]9028: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 05:12:04]9028: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-0512/20220806-051202-Yu4iUt62XQBolJOW9y4WSQAAAAA [06-08-2022 05:12:04]9028: WAF :: No suitable log file found. Using SQLite.. [06-08-2022 05:12:05]9028: WAF :: fetched 124 new logs [06-08-2022 05:15:02]19133: WAF :: fetched 1 new logs [06-08-2022 05:39:01]1337: WAF :: fetched 2 new logs [06-08-2022 05:41:01]7962: Checking for user cron vulnerabilities [06-08-2022 05:44:02]17497: Checking ditributed CMS bruteforce attacks [06-08-2022 05:44:02]17497: WAF :: fetched 2 new logs [06-08-2022 05:46:01]24654: WAF :: fetched 1 new logs [06-08-2022 05:56:01]25219: WAF :: fetched 1 new logs [06-08-2022 06:12:02]12571: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659777122 [06-08-2022 06:12:02]12571: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 06:12:04]12571: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 06:12:04]12571: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-0612/20220806-061202-Yu4wYnLdUP4ksZe3Wih5cAAAAAM [06-08-2022 06:12:04]12571: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-08-2022 06:12:04]12571: WAF :: fetched 1 new logs [06-08-2022 06:13:01]15743: WAF :: fetched 1 new logs [06-08-2022 06:24:01]19332: WAF :: fetched 2 new logs [06-08-2022 06:34:01]20085: WAF :: fetched 1 new logs [06-08-2022 06:35:01]23340: WAF :: fetched 1 new logs [06-08-2022 06:41:02]11060: Checking for user cron vulnerabilities [06-08-2022 06:42:01]14237: WAF :: fetched 2 new logs [06-08-2022 06:44:01]20503: Checking ditributed CMS bruteforce attacks [06-08-2022 06:48:01]1764: WAF :: fetched 2 new logs [06-08-2022 06:49:02]5040: WAF :: fetched 4 new logs [06-08-2022 07:00:02]7678: WAF :: fetched 1 new logs [06-08-2022 07:02:02]14698: WAF :: fetched 3 new logs [06-08-2022 07:05:02]24416: WAF :: fetched 1 new logs [06-08-2022 07:06:02]27729: WAF :: fetched 1 new logs [06-08-2022 07:09:01]5644: WAF :: fetched 3 new logs [06-08-2022 07:12:02]15307: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659780722 [06-08-2022 07:12:02]15307: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 07:12:04]15307: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 07:12:04]15307: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-0712/20220806-071202-Yu4-chi_3OuPNJ8L94O6sQAAAAc [06-08-2022 07:12:04]15307: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-08-2022 07:12:04]15307: WAF :: fetched 1 new logs [06-08-2022 07:13:01]18352: WAF :: fetched 1 new logs [06-08-2022 07:14:02]21535: WAF :: fetched 1 new logs [06-08-2022 07:15:01]24870: WAF :: fetched 1 new logs [06-08-2022 07:16:02]28188: WAF :: fetched 1 new logs [06-08-2022 07:17:01]31894: WAF :: fetched 2 new logs [06-08-2022 07:22:02]15833: WAF :: fetched 1 new logs [06-08-2022 07:23:01]18901: WAF :: fetched 2 new logs [06-08-2022 07:25:01]25408: WAF :: fetched 1 new logs [06-08-2022 07:27:01]32498: WAF :: fetched 1 new logs [06-08-2022 07:29:01]6578: WAF :: fetched 131 new logs [06-08-2022 07:31:02]12979: WAF :: fetched 1 new logs [06-08-2022 07:34:01]22471: WAF :: fetched 1 new logs [06-08-2022 07:37:02]32522: WAF :: fetched 3 new logs [06-08-2022 07:38:01]3873: WAF :: fetched 2 new logs [06-08-2022 07:41:02]13474: Checking for user cron vulnerabilities [06-08-2022 07:44:01]22866: Checking ditributed CMS bruteforce attacks [06-08-2022 07:44:01]22866: WAF :: fetched 2 new logs [06-08-2022 07:45:01]: Checking for definition updates [06-08-2022 07:47:02]330: WAF :: fetched 1 new logs [06-08-2022 07:50:01]10535: WAF :: fetched 1 new logs [06-08-2022 07:51:02]13929: WAF :: fetched 3 new logs [06-08-2022 07:52:01]17082: WAF :: fetched 1 new logs [06-08-2022 07:54:01]23001: WAF :: fetched 1 new logs [06-08-2022 07:55:02]26398: WAF :: fetched 1 new logs [06-08-2022 08:03:02]20513: WAF :: fetched 1 new logs [06-08-2022 08:12:01]17645: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659784321 [06-08-2022 08:12:01]17645: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 08:12:03]17645: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 08:12:04]17645: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-0812/20220806-081201-Yu5MgeIMBeBNdlJ0FeP5SAAAABE [06-08-2022 08:12:04]17645: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-08-2022 08:12:04]17645: WAF :: fetched 1 new logs [06-08-2022 08:14:01]24048: WAF :: fetched 3 new logs [06-08-2022 08:16:01]30650: WAF :: fetched 2 new logs [06-08-2022 08:28:01]6239: WAF :: fetched 1 new logs [06-08-2022 08:29:02]9475: WAF :: fetched 3 new logs [06-08-2022 08:30:02]12572: WAF :: fetched 2 new logs [06-08-2022 08:32:02]19032: WAF :: fetched 1 new logs [06-08-2022 08:33:01]22132: WAF :: fetched 1 new logs [06-08-2022 08:41:01]16415: Checking for user cron vulnerabilities [06-08-2022 08:44:01]26061: Checking ditributed CMS bruteforce attacks [06-08-2022 08:48:02]6749: WAF :: fetched 1 new logs [06-08-2022 08:49:02]10375: WAF :: fetched 1 new logs [06-08-2022 08:53:02]22963: WAF :: fetched 1 new logs [06-08-2022 09:02:02]20343: WAF :: fetched 1 new logs [06-08-2022 09:05:01]29980: WAF :: fetched 3 new logs [06-08-2022 09:12:01]20700: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659787921 [06-08-2022 09:12:01]20700: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 09:12:03]20700: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 09:12:04]20700: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-0912/20220806-091201-Yu5akRsvs93-Ac9Swzpg-gAAAAA [06-08-2022 09:12:04]20700: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-08-2022 09:12:04]20700: WAF :: fetched 1 new logs [06-08-2022 09:14:02]27157: WAF :: fetched 2 new logs [06-08-2022 09:20:02]14981: WAF :: fetched 2 new logs [06-08-2022 09:24:02]28310: WAF :: fetched 1 new logs [06-08-2022 09:28:02]9042: WAF :: fetched 6 new logs [06-08-2022 09:29:01]12699: WAF :: fetched 10 new logs [06-08-2022 09:30:02]16068: WAF :: fetched 117 new logs [06-08-2022 09:31:01]19374: WAF :: fetched 13 new logs [06-08-2022 09:33:01]25949: WAF :: fetched 1 new logs [06-08-2022 09:34:02]29175: WAF :: fetched 1 new logs [06-08-2022 09:41:02]19923: WAF :: fetched 2 new logs [06-08-2022 09:41:02]19923: Checking for user cron vulnerabilities [06-08-2022 09:43:02]26662: WAF :: fetched 1 new logs [06-08-2022 09:44:01]29841: Checking ditributed CMS bruteforce attacks [06-08-2022 09:53:02]27205: WAF :: fetched 1 new logs [06-08-2022 09:54:02]30424: WAF :: fetched 1 new logs [06-08-2022 09:56:02]4082: WAF :: fetched 2 new logs [06-08-2022 09:58:02]10604: WAF :: fetched 1 new logs [06-08-2022 10:02:01]24383: WAF :: fetched 2 new logs [06-08-2022 10:09:02]14533: WAF :: fetched 3 new logs [06-08-2022 10:12:01]24993: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659791521 [06-08-2022 10:12:01]24993: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 10:12:03]24993: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 10:12:03]24993: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-1012/20220806-101201-Yu5oob79aIpNlzaukPJ74gAAABg [06-08-2022 10:12:03]24993: WAF :: No suitable log file found. Using SQLite.. [06-08-2022 10:12:04]24993: WAF :: fetched 292 new logs [06-08-2022 10:14:01]31353: WAF :: fetched 1 new logs [06-08-2022 10:15:01]2060: WAF :: fetched 2 new logs [06-08-2022 10:16:01]5124: WAF :: fetched 2 new logs [06-08-2022 10:17:01]8199: WAF :: fetched 2 new logs [06-08-2022 10:18:01]11364: WAF :: fetched 3 new logs [06-08-2022 10:19:01]14502: WAF :: fetched 1 new logs [06-08-2022 10:20:01]18103: WAF :: fetched 4 new logs [06-08-2022 10:22:01]24787: WAF :: fetched 4 new logs [06-08-2022 10:23:02]28057: WAF :: fetched 2 new logs [06-08-2022 10:24:01]31244: WAF :: fetched 4 new logs [06-08-2022 10:25:02]2055: WAF :: fetched 8 new logs [06-08-2022 10:26:01]5347: WAF :: fetched 4 new logs [06-08-2022 10:27:02]8821: WAF :: fetched 3 new logs [06-08-2022 10:28:01]11910: WAF :: fetched 5 new logs [06-08-2022 10:29:02]15001: WAF :: fetched 2 new logs [06-08-2022 10:30:01]18678: WAF :: fetched 3 new logs [06-08-2022 10:31:02]22063: WAF :: fetched 2 new logs [06-08-2022 10:32:01]25537: WAF :: fetched 1 new logs [06-08-2022 10:34:01]31875: WAF :: fetched 1 new logs [06-08-2022 10:35:02]2740: WAF :: fetched 1 new logs [06-08-2022 10:37:02]9190: WAF :: fetched 2 new logs [06-08-2022 10:38:01]12331: WAF :: fetched 1 new logs [06-08-2022 10:39:01]15515: WAF :: fetched 1 new logs [06-08-2022 10:40:01]18612: WAF :: fetched 1 new logs [06-08-2022 10:41:01]22432: WAF :: fetched 1 new logs [06-08-2022 10:41:01]22432: Checking for user cron vulnerabilities [06-08-2022 10:42:01]25877: WAF :: fetched 2 new logs [06-08-2022 10:43:02]29088: WAF :: fetched 1 new logs [06-08-2022 10:44:01]32172: Checking ditributed CMS bruteforce attacks [06-08-2022 10:46:01]6235: WAF :: fetched 1 new logs [06-08-2022 10:47:02]9508: WAF :: fetched 2 new logs [06-08-2022 10:50:01]18716: WAF :: fetched 1 new logs [06-08-2022 10:51:01]22677: WAF :: fetched 2 new logs [06-08-2022 10:52:01]26117: WAF :: fetched 2 new logs [06-08-2022 10:53:01]29443: WAF :: fetched 3 new logs [06-08-2022 10:58:02]12384: WAF :: fetched 3 new logs [06-08-2022 11:03:01]29417: WAF :: fetched 1 new logs [06-08-2022 11:04:01]32581: WAF :: fetched 2 new logs [06-08-2022 11:06:01]6551: WAF :: fetched 3 new logs [06-08-2022 11:07:01]9720: WAF :: fetched 3 new logs [06-08-2022 11:07:41]9875: Performed RBL check for 23.111.136.34. [06-08-2022 11:08:01]12884: WAF :: fetched 1 new logs [06-08-2022 11:09:02]16010: WAF :: fetched 3 new logs [06-08-2022 11:12:02]26732: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659795122 [06-08-2022 11:12:02]26732: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 11:12:04]26732: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 11:12:04]26732: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-1112/20220806-111202-Yu52sn0XXg5fkB5m4HuGvQAAABg [06-08-2022 11:12:04]26732: WAF :: No suitable log file found. Using SQLite.. [06-08-2022 11:12:04]26732: WAF :: fetched 1 new logs [06-08-2022 11:19:01]16889: WAF :: fetched 2 new logs [06-08-2022 11:20:01]20020: WAF :: fetched 54 new logs [06-08-2022 11:21:01]24576: WAF :: fetched 130 new logs [06-08-2022 11:22:01]27902: WAF :: fetched 139 new logs [06-08-2022 11:23:01]31024: WAF :: fetched 87 new logs [06-08-2022 11:24:01]1742: WAF :: fetched 2 new logs [06-08-2022 11:31:01]24603: WAF :: fetched 3 new logs [06-08-2022 11:32:01]28159: WAF :: fetched 5 new logs [06-08-2022 11:33:01]31412: WAF :: fetched 1 new logs [06-08-2022 11:39:02]18021: WAF :: fetched 3 new logs [06-08-2022 11:41:01]24817: Checking for user cron vulnerabilities [06-08-2022 11:44:01]2783: Checking ditributed CMS bruteforce attacks [06-08-2022 11:44:01]2783: WAF :: fetched 23 new logs [06-08-2022 11:48:01]15566: WAF :: fetched 3 new logs [06-08-2022 12:05:01]7373: WAF :: fetched 1 new logs [06-08-2022 12:06:01]10576: WAF :: fetched 2 new logs [06-08-2022 12:07:01]13757: WAF :: fetched 4 new logs [06-08-2022 12:10:01]23093: WAF :: fetched 1 new logs [06-08-2022 12:12:02]30423: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659798722 [06-08-2022 12:12:02]30423: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 12:12:04]30423: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 12:12:04]30423: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-1212/20220806-121202-Yu6EwoaqVRJN_iLOSOjMjwAAAAc [06-08-2022 12:12:04]30423: WAF :: No suitable log file found. Using SQLite.. [06-08-2022 12:22:01]31068: WAF :: fetched 1 new logs [06-08-2022 12:30:01]24012: WAF :: fetched 1 new logs [06-08-2022 12:33:02]1826: WAF :: fetched 1 new logs [06-08-2022 12:34:01]5066: WAF :: fetched 1 new logs [06-08-2022 12:35:02]8166: WAF :: fetched 1 new logs [06-08-2022 12:36:01]11351: WAF :: fetched 1 new logs [06-08-2022 12:37:01]14623: WAF :: fetched 5 new logs [06-08-2022 12:38:01]17734: WAF :: fetched 1 new logs [06-08-2022 12:40:01]24249: WAF :: fetched 1 new logs [06-08-2022 12:41:01]27594: WAF :: fetched 3 new logs [06-08-2022 12:41:01]27594: Checking for user cron vulnerabilities [06-08-2022 12:42:02]30890: WAF :: fetched 1 new logs [06-08-2022 12:44:02]5514: Checking ditributed CMS bruteforce attacks [06-08-2022 12:44:02]5514: WAF :: fetched 2 new logs [06-08-2022 12:45:01]: Checking for software updates [06-08-2022 12:46:02]11867: WAF :: fetched 1 new logs [06-08-2022 13:00:01]23786: WAF :: fetched 1 new logs [06-08-2022 13:02:01]30840: WAF :: fetched 1 new logs [06-08-2022 13:09:02]21049: WAF :: fetched 1 new logs [06-08-2022 13:10:01]24314: WAF :: fetched 1 new logs [06-08-2022 13:12:01]30702: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659802321 [06-08-2022 13:12:01]30702: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 13:12:03]30702: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 13:12:04]30702: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-1312/20220806-131201-Yu6S0ZkTdieJ-GZIrlbyEQAAAAs [06-08-2022 13:12:04]30702: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-08-2022 13:12:04]30702: WAF :: fetched 1 new logs [06-08-2022 13:13:02]2220: WAF :: fetched 3 new logs [06-08-2022 13:19:02]21154: WAF :: fetched 2 new logs [06-08-2022 13:23:01]2257: WAF :: fetched 1 new logs [06-08-2022 13:25:02]8514: WAF :: fetched 1 new logs [06-08-2022 13:29:02]21100: WAF :: fetched 90 new logs [06-08-2022 13:30:02]24296: WAF :: fetched 184 new logs [06-08-2022 13:31:02]27561: WAF :: fetched 170 new logs [06-08-2022 13:32:01]30793: WAF :: fetched 1 new logs [06-08-2022 13:34:01]5400: WAF :: fetched 2 new logs [06-08-2022 13:37:02]14822: WAF :: fetched 1 new logs [06-08-2022 13:41:01]27469: Checking for user cron vulnerabilities [06-08-2022 13:44:01]4736: Checking ditributed CMS bruteforce attacks [06-08-2022 13:45:01]: Checking for definition updates [06-08-2022 13:54:02]4389: WAF :: fetched 1 new logs [06-08-2022 13:57:01]13799: WAF :: fetched 2 new logs [06-08-2022 14:03:01]680: WAF :: fetched 1 new logs [06-08-2022 14:12:01]29996: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659805921 [06-08-2022 14:12:01]29996: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 14:12:03]29996: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 14:12:04]29996: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-1412/20220806-141201-Yu6g4U-S8ayT4BHoQv-LoQAAAA0 [06-08-2022 14:12:04]29996: WAF :: No suitable log file found. Using SQLite.. [06-08-2022 14:12:04]29996: WAF :: fetched 400 new logs [06-08-2022 14:20:01]23686: WAF :: fetched 1 new logs [06-08-2022 14:21:01]26971: WAF :: fetched 2 new logs [06-08-2022 14:24:01]4960: WAF :: fetched 1 new logs [06-08-2022 14:27:02]14457: WAF :: fetched 1 new logs [06-08-2022 14:28:01]17567: WAF :: fetched 6 new logs [06-08-2022 14:32:01]30423: WAF :: fetched 2 new logs [06-08-2022 14:35:01]7963: WAF :: fetched 1 new logs [06-08-2022 14:40:01]23893: WAF :: fetched 1 new logs [06-08-2022 14:41:01]27116: WAF :: fetched 1 new logs [06-08-2022 14:41:01]27116: Checking for user cron vulnerabilities [06-08-2022 14:43:01]1188: WAF :: fetched 2 new logs [06-08-2022 14:44:01]4034: Checking ditributed CMS bruteforce attacks [06-08-2022 14:51:01]26530: WAF :: fetched 1 new logs [06-08-2022 14:53:02]497: Updated license status via CDN [06-08-2022 14:59:02]19834: WAF :: fetched 1 new logs [06-08-2022 15:01:02]26613: Reseting cPGuard inotify settings [06-08-2022 15:04:01]3721: WAF :: fetched 1 new logs [06-08-2022 15:05:02]7445: WAF :: fetched 1 new logs [06-08-2022 15:07:02]13729: WAF :: fetched 1 new logs [06-08-2022 15:09:02]20000: WAF :: fetched 2 new logs [06-08-2022 15:12:01]29566: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659809521 [06-08-2022 15:12:01]29566: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 15:12:03]29566: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 15:12:04]29566: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-1512/20220806-151201-Yu6u8c59VSbTc9Lyja3zfwAAAAE [06-08-2022 15:12:04]29566: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [06-08-2022 15:12:04]29566: WAF :: fetched 1 new logs [06-08-2022 15:13:01]32714: WAF :: fetched 2 new logs [06-08-2022 15:15:01]7227: WAF :: fetched 5 new logs [06-08-2022 15:16:02]10371: WAF :: fetched 5 new logs [06-08-2022 15:17:01]13474: WAF :: fetched 8 new logs [06-08-2022 15:18:01]16697: WAF :: fetched 8 new logs [06-08-2022 15:19:02]19804: WAF :: fetched 6 new logs [06-08-2022 15:20:01]22916: WAF :: fetched 2 new logs [06-08-2022 15:21:02]26346: WAF :: fetched 3 new logs [06-08-2022 15:23:02]32762: WAF :: fetched 4 new logs [06-08-2022 15:24:01]3496: WAF :: fetched 1 new logs [06-08-2022 15:27:02]13708: WAF :: fetched 1 new logs [06-08-2022 15:30:01]23009: WAF :: fetched 1 new logs [06-08-2022 15:31:02]26536: WAF :: fetched 3 new logs [06-08-2022 15:34:01]3659: WAF :: fetched 1 new logs [06-08-2022 15:35:02]6813: WAF :: fetched 3 new logs [06-08-2022 15:36:01]10447: WAF :: fetched 6 new logs [06-08-2022 15:37:02]13610: WAF :: fetched 2 new logs [06-08-2022 15:38:02]16721: WAF :: fetched 3 new logs [06-08-2022 15:39:01]19849: WAF :: fetched 5 new logs [06-08-2022 15:40:02]22964: WAF :: fetched 2 new logs [06-08-2022 15:41:01]26398: WAF :: fetched 2 new logs [06-08-2022 15:41:01]26398: Checking for user cron vulnerabilities [06-08-2022 15:42:02]29586: WAF :: fetched 5 new logs [06-08-2022 15:43:01]32422: WAF :: fetched 2 new logs [06-08-2022 15:44:02]3105: Checking ditributed CMS bruteforce attacks [06-08-2022 15:45:01]5940: WAF :: fetched 1 new logs [06-08-2022 15:48:02]16061: WAF :: fetched 1 new logs [06-08-2022 15:49:01]19264: WAF :: fetched 3 new logs [06-08-2022 15:55:01]5820: WAF :: fetched 1 new logs [06-08-2022 15:57:01]12613: WAF :: fetched 1 new logs [06-08-2022 15:58:02]15724: WAF :: fetched 4 new logs [06-08-2022 15:59:01]18858: WAF :: fetched 4 new logs [06-08-2022 16:00:02]21679: WAF :: fetched 1 new logs [06-08-2022 16:03:01]31812: WAF :: fetched 1 new logs [06-08-2022 16:04:02]2753: WAF :: fetched 1 new logs [06-08-2022 16:12:01]28544: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659813121 [06-08-2022 16:12:02]28544: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 16:12:04]28544: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 16:12:04]28544: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-1612/20220806-161202-Yu69AdpnQmpxNicOZ6N_WAAAAAg [06-08-2022 16:12:04]28544: WAF :: No suitable log file found. Using SQLite.. [06-08-2022 16:12:04]28544: WAF :: fetched 78 new logs [06-08-2022 16:36:01]8994: WAF :: fetched 1 new logs [06-08-2022 16:41:01]25729: Checking for user cron vulnerabilities [06-08-2022 16:42:01]28913: WAF :: fetched 2 new logs [06-08-2022 16:44:01]2825: Checking ditributed CMS bruteforce attacks [06-08-2022 16:45:02]5951: WAF :: fetched 1 new logs [06-08-2022 16:48:01]15632: WAF :: fetched 1 new logs [06-08-2022 16:51:02]25396: WAF :: fetched 1 new logs [06-08-2022 16:52:01]28538: WAF :: fetched 1 new logs [06-08-2022 16:53:02]31660: WAF :: fetched 1 new logs [06-08-2022 16:56:01]8672: WAF :: fetched 1 new logs [06-08-2022 16:57:02]12366: WAF :: fetched 1 new logs [06-08-2022 17:07:01]12310: WAF :: fetched 3 new logs [06-08-2022 17:08:01]15350: WAF :: fetched 3 new logs [06-08-2022 17:09:01]18541: WAF :: fetched 2 new logs [06-08-2022 17:12:01]28158: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659816721 [06-08-2022 17:12:01]28158: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 17:12:03]28158: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 17:12:03]28158: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-1712/20220806-171201-Yu7LEfp1w4autp15GyhElgAAAAI [06-08-2022 17:12:03]28158: WAF :: No suitable log file found. Using SQLite.. [06-08-2022 17:12:03]28158: WAF :: fetched 2 new logs [06-08-2022 17:15:01]5236: WAF :: fetched 1 new logs [06-08-2022 17:25:01]5284: WAF :: fetched 2 new logs [06-08-2022 17:29:01]18301: WAF :: fetched 1 new logs [06-08-2022 17:30:02]21426: WAF :: fetched 1 new logs [06-08-2022 17:36:01]8173: WAF :: fetched 1 new logs [06-08-2022 17:41:02]24623: Checking for user cron vulnerabilities [06-08-2022 17:44:01]1639: Checking ditributed CMS bruteforce attacks [06-08-2022 17:53:02]30116: WAF :: fetched 1 new logs [06-08-2022 17:55:02]4081: WAF :: fetched 1 new logs [06-08-2022 17:58:01]14137: WAF :: fetched 1 new logs [06-08-2022 18:03:01]30327: WAF :: fetched 1 new logs [06-08-2022 18:05:01]4169: WAF :: fetched 2 new logs [06-08-2022 18:09:01]17131: WAF :: fetched 1 new logs [06-08-2022 18:10:01]20302: WAF :: fetched 1 new logs [06-08-2022 18:12:02]26769: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659820322 [06-08-2022 18:12:02]26769: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 18:12:04]26769: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 18:12:04]26769: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-1812/20220806-181202-Yu7ZImky8DW0abdI7tjJkQAAAAU [06-08-2022 18:12:04]26769: WAF :: No suitable log file found. Using SQLite.. [06-08-2022 18:12:04]26769: WAF :: fetched 1 new logs [06-08-2022 18:14:01]748: WAF :: fetched 1 new logs [06-08-2022 18:24:01]830: WAF :: fetched 29 new logs [06-08-2022 18:25:02]4107: WAF :: fetched 87 new logs [06-08-2022 18:26:01]7212: WAF :: fetched 39 new logs [06-08-2022 18:28:01]13917: WAF :: fetched 81 new logs [06-08-2022 18:35:01]3879: WAF :: fetched 1 new logs [06-08-2022 18:36:01]7001: WAF :: fetched 3 new logs [06-08-2022 18:38:02]13249: WAF :: fetched 100 new logs [06-08-2022 18:41:01]23066: WAF :: fetched 2 new logs [06-08-2022 18:41:01]23066: Checking for user cron vulnerabilities [06-08-2022 18:44:01]32515: Checking ditributed CMS bruteforce attacks [06-08-2022 18:48:01]12382: WAF :: fetched 1 new logs [06-08-2022 18:56:01]5827: WAF :: fetched 1 new logs [06-08-2022 19:07:02]9036: WAF :: fetched 4 new logs [06-08-2022 19:12:01]25492: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659823921 [06-08-2022 19:12:01]25492: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 19:12:03]25492: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 19:12:04]25492: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-1912/20220806-191201-Yu7nMSsSJ8Z8oL9VFuDh4QAAAAA [06-08-2022 19:12:04]25492: WAF :: No suitable log file found. Using SQLite.. [06-08-2022 19:12:04]25492: WAF :: fetched 4 new logs [06-08-2022 19:13:02]28662: WAF :: fetched 1 new logs [06-08-2022 19:21:02]22073: WAF :: fetched 1 new logs [06-08-2022 19:23:02]28548: WAF :: fetched 6 new logs [06-08-2022 19:24:01]31585: WAF :: fetched 29 new logs [06-08-2022 19:25:02]2437: WAF :: fetched 158 new logs [06-08-2022 19:26:01]5679: WAF :: fetched 1 new logs [06-08-2022 19:28:01]11883: WAF :: fetched 2 new logs [06-08-2022 19:29:02]15462: WAF :: fetched 2 new logs [06-08-2022 19:34:02]31419: WAF :: fetched 1 new logs [06-08-2022 19:35:01]2242: WAF :: fetched 7 new logs [06-08-2022 19:36:02]5391: WAF :: fetched 7 new logs [06-08-2022 19:37:01]8584: WAF :: fetched 6 new logs [06-08-2022 19:38:01]11622: WAF :: fetched 7 new logs [06-08-2022 19:39:01]14836: WAF :: fetched 1 new logs [06-08-2022 19:40:01]18521: WAF :: fetched 1 new logs [06-08-2022 19:41:02]21719: WAF :: fetched 1 new logs [06-08-2022 19:41:02]21719: Checking for user cron vulnerabilities [06-08-2022 19:42:01]25024: WAF :: fetched 3 new logs [06-08-2022 19:44:01]31152: Checking ditributed CMS bruteforce attacks [06-08-2022 19:45:01]: Checking for definition updates [06-08-2022 19:45:02]1983: WAF :: fetched 1 new logs [06-08-2022 19:51:02]20808: WAF :: fetched 1 new logs [06-08-2022 19:55:02]1103: WAF :: fetched 2 new logs [06-08-2022 19:56:01]4255: WAF :: fetched 1 new logs [06-08-2022 19:57:02]7366: WAF :: fetched 1 new logs [06-08-2022 20:02:01]23674: WAF :: fetched 2 new logs [06-08-2022 20:04:02]29991: WAF :: fetched 2 new logs [06-08-2022 20:06:02]3998: WAF :: fetched 1 new logs [06-08-2022 20:09:01]13127: WAF :: fetched 1 new logs [06-08-2022 20:11:01]19984: WAF :: fetched 2 new logs [06-08-2022 20:12:02]23123: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659827522 [06-08-2022 20:12:02]23123: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 20:12:04]23123: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 20:12:04]23123: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-2012/20220806-201202-Yu71QpyKuTcg9bpROkaAngAAAAA [06-08-2022 20:12:04]23123: WAF :: No suitable log file found. Using SQLite.. [06-08-2022 20:12:04]23123: WAF :: fetched 1 new logs [06-08-2022 20:17:01]6590: WAF :: fetched 1 new logs [06-08-2022 20:19:01]12795: WAF :: fetched 1 new logs [06-08-2022 20:20:02]16567: WAF :: fetched 1 new logs [06-08-2022 20:25:01]32177: WAF :: fetched 2 new logs [06-08-2022 20:26:02]3013: WAF :: fetched 2 new logs [06-08-2022 20:27:01]6273: WAF :: fetched 1 new logs [06-08-2022 20:28:02]9352: WAF :: fetched 4 new logs [06-08-2022 20:29:01]12383: WAF :: fetched 2 new logs [06-08-2022 20:31:02]19206: WAF :: fetched 1 new logs [06-08-2022 20:32:01]22311: WAF :: fetched 1 new logs [06-08-2022 20:33:02]25650: WAF :: fetched 3 new logs [06-08-2022 20:34:01]28733: WAF :: fetched 1 new logs [06-08-2022 20:40:01]15057: WAF :: fetched 2 new logs [06-08-2022 20:41:02]18748: WAF :: fetched 4 new logs [06-08-2022 20:41:02]18748: Checking for user cron vulnerabilities [06-08-2022 20:42:01]21851: WAF :: fetched 4 new logs [06-08-2022 20:43:02]25154: WAF :: fetched 4 new logs [06-08-2022 20:44:01]28241: Checking ditributed CMS bruteforce attacks [06-08-2022 20:46:01]1412: WAF :: fetched 2 new logs [06-08-2022 20:47:01]4767: WAF :: fetched 2 new logs [06-08-2022 20:49:01]10817: WAF :: fetched 2 new logs [06-08-2022 20:50:01]13936: WAF :: fetched 3 new logs [06-08-2022 20:51:01]17648: WAF :: fetched 102 new logs [06-08-2022 20:52:01]20690: WAF :: fetched 70 new logs [06-08-2022 20:53:01]23932: WAF :: fetched 2 new logs [06-08-2022 20:58:01]7001: WAF :: fetched 2 new logs [06-08-2022 20:59:01]10063: WAF :: fetched 1 new logs [06-08-2022 21:00:01]12937: WAF :: fetched 2 new logs [06-08-2022 21:01:01]17010: WAF :: fetched 2 new logs [06-08-2022 21:02:01]20145: WAF :: fetched 1 new logs [06-08-2022 21:03:01]23215: WAF :: fetched 1 new logs [06-08-2022 21:04:01]26449: WAF :: fetched 2 new logs [06-08-2022 21:05:01]29644: WAF :: fetched 1 new logs [06-08-2022 21:06:01]32714: WAF :: fetched 3 new logs [06-08-2022 21:07:01]3549: WAF :: fetched 2 new logs [06-08-2022 21:09:01]9593: WAF :: fetched 5 new logs [06-08-2022 21:10:01]12740: WAF :: fetched 1 new logs [06-08-2022 21:11:01]16397: WAF :: fetched 1 new logs [06-08-2022 21:12:01]19411: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659831121 [06-08-2022 21:12:01]19411: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 21:12:03]19411: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 21:12:04]19411: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-2112/20220806-211201-Yu8DUUaUjkC_eIAO4LaD5QAAAAc [06-08-2022 21:12:04]19411: WAF :: No suitable log file found. Using SQLite.. [06-08-2022 21:12:04]19411: WAF :: fetched 1 new logs [06-08-2022 21:13:01]22502: WAF :: fetched 1 new logs [06-08-2022 21:14:01]25777: WAF :: fetched 1 new logs [06-08-2022 21:15:01]29089: WAF :: fetched 3 new logs [06-08-2022 21:16:01]32184: WAF :: fetched 3 new logs [06-08-2022 21:17:02]2993: WAF :: fetched 2 new logs [06-08-2022 21:18:01]6090: WAF :: fetched 1 new logs [06-08-2022 21:19:01]9185: WAF :: fetched 2 new logs [06-08-2022 21:20:01]12285: WAF :: fetched 1 new logs [06-08-2022 21:21:02]16075: WAF :: fetched 2 new logs [06-08-2022 21:23:02]22215: WAF :: fetched 1 new logs [06-08-2022 21:24:01]25442: WAF :: fetched 3 new logs [06-08-2022 21:25:02]28650: WAF :: fetched 2 new logs [06-08-2022 21:27:02]2603: WAF :: fetched 3 new logs [06-08-2022 21:28:01]5606: WAF :: fetched 1 new logs [06-08-2022 21:32:02]18499: WAF :: fetched 2 new logs [06-08-2022 21:33:01]21614: WAF :: fetched 1 new logs [06-08-2022 21:41:01]14002: Checking for user cron vulnerabilities [06-08-2022 21:44:01]23860: Checking ditributed CMS bruteforce attacks [06-08-2022 21:51:01]13156: WAF :: fetched 1 new logs [06-08-2022 21:53:01]19938: WAF :: fetched 1 new logs [06-08-2022 21:59:01]6299: WAF :: fetched 1 new logs [06-08-2022 22:03:01]19516: WAF :: fetched 3 new logs [06-08-2022 22:07:01]32151: WAF :: fetched 1 new logs [06-08-2022 22:07:08]32161: Performing Domain reputation checks [06-08-2022 22:08:01]3039: WAF :: fetched 5 new logs [06-08-2022 22:09:01]6064: WAF :: fetched 5 new logs [06-08-2022 22:11:01]12299: WAF :: fetched 1 new logs [06-08-2022 22:12:02]15929: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659834722 [06-08-2022 22:12:02]15929: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 22:12:04]15929: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 22:12:04]15929: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-2212/20220806-221202-Yu8RYhNfDDkziITpcsd21wAAAAc [06-08-2022 22:12:04]15929: WAF :: No suitable log file found. Using SQLite.. [06-08-2022 22:12:04]15929: WAF :: fetched 3 new logs [06-08-2022 22:13:01]19010: WAF :: fetched 2 new logs [06-08-2022 22:14:01]22098: WAF :: fetched 1 new logs [06-08-2022 22:17:01]31635: WAF :: fetched 2 new logs [06-08-2022 22:18:01]2391: WAF :: fetched 3 new logs [06-08-2022 22:21:02]11844: WAF :: fetched 1 new logs [06-08-2022 22:23:02]18495: WAF :: fetched 2 new logs [06-08-2022 22:27:02]31151: WAF :: fetched 1 new logs [06-08-2022 22:32:01]14509: WAF :: fetched 1 new logs [06-08-2022 22:41:01]10095: WAF :: fetched 1 new logs [06-08-2022 22:41:01]10095: Checking for user cron vulnerabilities [06-08-2022 22:43:01]16761: WAF :: fetched 1 new logs [06-08-2022 22:44:01]19856: Checking ditributed CMS bruteforce attacks [06-08-2022 22:44:01]19856: WAF :: fetched 4 new logs [06-08-2022 22:47:02]29541: WAF :: fetched 1 new logs [06-08-2022 22:55:01]22367: WAF :: fetched 1 new logs [06-08-2022 22:57:01]28807: WAF :: fetched 1 new logs [06-08-2022 23:00:01]5532: WAF :: fetched 1 new logs [06-08-2022 23:04:02]18928: WAF :: fetched 2 new logs [06-08-2022 23:07:01]28563: WAF :: fetched 1 new logs [06-08-2022 23:07:52]28713: Performed RBL check for 23.111.136.34. [06-08-2022 23:09:01]2362: WAF :: fetched 2 new logs [06-08-2022 23:10:01]5490: WAF :: fetched 2 new logs [06-08-2022 23:12:01]11752: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659838321 [06-08-2022 23:12:01]11752: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [06-08-2022 23:12:03]11752: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [06-08-2022 23:12:04]11752: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220806/20220806-2312/20220806-231201-Yu8fcb3U9pZiZPG9OoxUhQAAABA [06-08-2022 23:12:04]11752: WAF :: No suitable log file found. Using SQLite.. [06-08-2022 23:12:04]11752: WAF :: fetched 3 new logs [06-08-2022 23:15:02]21577: WAF :: fetched 2 new logs [06-08-2022 23:16:01]25009: WAF :: fetched 1 new logs [06-08-2022 23:19:02]2076: WAF :: fetched 2 new logs [06-08-2022 23:23:02]15170: WAF :: fetched 4 new logs [06-08-2022 23:24:01]18274: WAF :: fetched 3 new logs [06-08-2022 23:25:02]21345: WAF :: fetched 2 new logs [06-08-2022 23:32:02]11074: WAF :: fetched 4 new logs [06-08-2022 23:33:01]14192: WAF :: fetched 8 new logs [06-08-2022 23:34:02]17800: WAF :: fetched 6 new logs [06-08-2022 23:35:01]20824: WAF :: fetched 6 new logs [06-08-2022 23:36:02]24191: WAF :: fetched 1 new logs [06-08-2022 23:37:01]27335: WAF :: fetched 1 new logs [06-08-2022 23:41:01]7132: WAF :: fetched 1 new logs [06-08-2022 23:41:01]7132: Checking for user cron vulnerabilities [06-08-2022 23:44:01]16730: Checking ditributed CMS bruteforce attacks [06-08-2022 23:52:01]9681: WAF :: fetched 2 new logs [06-08-2022 23:54:01]16532: httpd.conf changed. Refreshing watchlist. [06-08-2022 23:56:02]24108: httpd.conf changed. Refreshing watchlist. [07-08-2022 00:01:04]7516: Sending daily report for August 7, 2022 [07-08-2022 00:05:02]21472: Deleted 0 entries older than 6 MONTH from scanner_logs [07-08-2022 00:05:02]21472: Deleted 0 files from Quarantine [07-08-2022 00:12:01]11703: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659841921 [07-08-2022 00:12:01]11703: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 00:12:03]11703: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 00:12:04]11703: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-0012/20220807-001201-Yu8tgYoPGRPCpBWzCZ545QAAAAo [07-08-2022 00:12:04]11703: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 00:12:04]11703: WAF :: fetched 1 new logs [07-08-2022 00:17:01]28265: WAF :: fetched 3 new logs [07-08-2022 00:18:01]31404: WAF :: fetched 7 new logs [07-08-2022 00:19:02]2127: WAF :: fetched 3 new logs [07-08-2022 00:20:01]5543: WAF :: fetched 7 new logs [07-08-2022 00:21:02]8876: WAF :: fetched 3 new logs [07-08-2022 00:22:01]11958: WAF :: fetched 4 new logs [07-08-2022 00:23:02]15042: WAF :: fetched 1 new logs [07-08-2022 00:24:01]18652: WAF :: fetched 1 new logs [07-08-2022 00:25:02]21847: WAF :: fetched 4 new logs [07-08-2022 00:26:01]25253: WAF :: fetched 4 new logs [07-08-2022 00:27:02]28521: WAF :: fetched 3 new logs [07-08-2022 00:28:01]31561: WAF :: fetched 2 new logs [07-08-2022 00:29:02]2297: WAF :: fetched 2 new logs [07-08-2022 00:30:01]5432: WAF :: fetched 2 new logs [07-08-2022 00:31:01]8642: WAF :: fetched 3 new logs [07-08-2022 00:32:01]11793: WAF :: fetched 3 new logs [07-08-2022 00:33:01]14907: WAF :: fetched 1 new logs [07-08-2022 00:34:01]17972: WAF :: fetched 2 new logs [07-08-2022 00:35:01]21579: WAF :: fetched 1 new logs [07-08-2022 00:36:01]25038: WAF :: fetched 3 new logs [07-08-2022 00:37:01]28173: WAF :: fetched 3 new logs [07-08-2022 00:38:01]31241: WAF :: fetched 1 new logs [07-08-2022 00:39:01]2157: WAF :: fetched 1 new logs [07-08-2022 00:40:01]5069: WAF :: fetched 3 new logs [07-08-2022 00:41:02]8183: WAF :: fetched 3 new logs [07-08-2022 00:41:02]8183: Checking for user cron vulnerabilities [07-08-2022 00:43:02]14267: WAF :: fetched 2 new logs [07-08-2022 00:44:01]17326: Checking ditributed CMS bruteforce attacks [07-08-2022 00:44:01]17326: WAF :: fetched 1 new logs [07-08-2022 00:45:01]: Checking for software updates [07-08-2022 00:45:01]20895: WAF :: fetched 3 new logs [07-08-2022 00:47:01]27496: WAF :: fetched 5 new logs [07-08-2022 00:48:01]30636: WAF :: fetched 4 new logs [07-08-2022 00:49:01]1446: WAF :: fetched 2 new logs [07-08-2022 00:50:01]4580: WAF :: fetched 2 new logs [07-08-2022 00:52:02]10900: WAF :: fetched 1 new logs [07-08-2022 00:53:01]13981: WAF :: fetched 2 new logs [07-08-2022 00:56:02]24004: WAF :: fetched 1 new logs [07-08-2022 00:57:01]27240: WAF :: fetched 1 new logs [07-08-2022 00:58:02]30397: WAF :: fetched 1 new logs [07-08-2022 01:07:01]30828: WAF :: fetched 1 new logs [07-08-2022 01:08:02]1786: WAF :: fetched 2 new logs [07-08-2022 01:12:02]14797: httpd.conf changed. Refreshing watchlist. [07-08-2022 01:12:02]14793: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659845522 [07-08-2022 01:12:02]14793: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 01:12:04]14793: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 01:12:04]14793: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-0112/20220807-011202-Yu87kqLVMxh0ouTQgK88CgAAAAY [07-08-2022 01:12:04]14793: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-08-2022 01:12:05]14793: WAF :: fetched 2 new logs [07-08-2022 01:13:01]17837: WAF :: fetched 1 new logs [07-08-2022 01:14:02]21177: WAF :: fetched 1 new logs [07-08-2022 01:15:01]24912: WAF :: fetched 3 new logs [07-08-2022 01:17:01]31384: httpd.conf changed. Refreshing watchlist. [07-08-2022 01:22:02]15112: WAF :: fetched 2 new logs [07-08-2022 01:28:02]3137: WAF :: fetched 5 new logs [07-08-2022 01:34:01]22437: WAF :: fetched 4 new logs [07-08-2022 01:35:02]25838: WAF :: fetched 4 new logs [07-08-2022 01:36:01]29587: WAF :: fetched 3 new logs [07-08-2022 01:37:02]352: WAF :: fetched 1 new logs [07-08-2022 01:41:02]13370: Checking for user cron vulnerabilities [07-08-2022 01:44:02]22382: Checking ditributed CMS bruteforce attacks [07-08-2022 01:45:01]: Checking for definition updates [07-08-2022 01:51:01]13058: WAF :: fetched 4 new logs [07-08-2022 01:56:02]30634: WAF :: fetched 1 new logs [07-08-2022 01:57:02]1296: WAF :: fetched 1 new logs [07-08-2022 01:58:02]4464: WAF :: fetched 2 new logs [07-08-2022 01:59:01]7494: WAF :: fetched 2 new logs [07-08-2022 02:00:02]10280: WAF :: fetched 3 new logs [07-08-2022 02:01:01]13956: WAF :: fetched 1 new logs [07-08-2022 02:06:02]30677: WAF :: fetched 1 new logs [07-08-2022 02:07:01]1373: WAF :: fetched 1 new logs [07-08-2022 02:12:02]17389: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659849122 [07-08-2022 02:12:02]17389: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 02:12:04]17389: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 02:12:04]17389: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-0212/20220807-021202-Yu9JorieKRh1SyHtAa5YUwAAAAo [07-08-2022 02:12:04]17389: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-08-2022 02:12:04]17389: WAF :: fetched 1 new logs [07-08-2022 02:13:01]20434: WAF :: fetched 1 new logs [07-08-2022 02:23:02]20600: WAF :: fetched 1 new logs [07-08-2022 02:27:02]1556: WAF :: fetched 2 new logs [07-08-2022 02:28:01]4758: WAF :: fetched 8 new logs [07-08-2022 02:29:02]7758: WAF :: fetched 8 new logs [07-08-2022 02:30:01]10811: WAF :: fetched 7 new logs [07-08-2022 02:31:02]14195: WAF :: fetched 5 new logs [07-08-2022 02:32:01]17381: WAF :: fetched 5 new logs [07-08-2022 02:33:02]20378: WAF :: fetched 10 new logs [07-08-2022 02:34:01]23484: WAF :: fetched 1 new logs [07-08-2022 02:35:02]26785: WAF :: fetched 1 new logs [07-08-2022 02:36:01]29811: WAF :: fetched 3 new logs [07-08-2022 02:37:02]878: WAF :: fetched 2 new logs [07-08-2022 02:38:01]4183: WAF :: fetched 2 new logs [07-08-2022 02:39:02]7275: WAF :: fetched 2 new logs [07-08-2022 02:40:01]10285: WAF :: fetched 3 new logs [07-08-2022 02:41:02]13395: WAF :: fetched 3 new logs [07-08-2022 02:41:02]13395: Checking for user cron vulnerabilities [07-08-2022 02:42:01]16524: WAF :: fetched 2 new logs [07-08-2022 02:43:02]19652: WAF :: fetched 4 new logs [07-08-2022 02:44:01]22704: Checking ditributed CMS bruteforce attacks [07-08-2022 02:44:03]22704: WAF :: fetched 2 new logs [07-08-2022 02:45:02]26072: WAF :: fetched 2 new logs [07-08-2022 02:46:01]29163: WAF :: fetched 3 new logs [07-08-2022 02:47:02]389: WAF :: fetched 3 new logs [07-08-2022 02:48:01]3680: WAF :: fetched 2 new logs [07-08-2022 02:49:02]6758: WAF :: fetched 3 new logs [07-08-2022 02:50:01]9921: WAF :: fetched 2 new logs [07-08-2022 02:51:02]13119: WAF :: fetched 2 new logs [07-08-2022 02:52:01]16378: WAF :: fetched 3 new logs [07-08-2022 02:53:02]19447: WAF :: fetched 10 new logs [07-08-2022 02:53:02]19444: Updated license status via CDN [07-08-2022 02:54:01]22503: WAF :: fetched 7 new logs [07-08-2022 02:55:02]25765: WAF :: fetched 2 new logs [07-08-2022 02:56:01]28847: WAF :: fetched 3 new logs [07-08-2022 02:57:01]32507: WAF :: fetched 1 new logs [07-08-2022 02:58:02]3445: WAF :: fetched 3 new logs [07-08-2022 02:59:01]6596: WAF :: fetched 2 new logs [07-08-2022 03:00:02]9547: WAF :: fetched 3 new logs [07-08-2022 03:00:48]9547: Found and updated 31 CMS installations [07-08-2022 03:01:16]9547: Wordpress installation #4 labvida.net has errors [07-08-2022 03:01:34]9547: Wordpress installation #5 meusiteimobiliario.com.br has errors [07-08-2022 03:01:50]9547: Wordpress installation #9 oabilheus.org.br has errors [07-08-2022 03:02:24]9547: Wordpress installation #14 apoionordeste.com.br has errors [07-08-2022 03:02:45]9547: Wordpress installation #15 contratopronto.net has errors [07-08-2022 03:03:09]9547: Wordpress installation #16 kecolima.com.br has errors [07-08-2022 03:03:23]9547: Wordpress installation #17 ajuda.meusiteimobiliario.com.br has errors [07-08-2022 03:03:37]9547: Wordpress installation #18 tourvirtualfacil.com has errors [07-08-2022 03:04:04]9547: Wordpress installation #21 easy2speak.com.br has errors [07-08-2022 03:04:09]19360: Wordpress installation #21 easy2speak.com.br has errors [07-08-2022 03:04:34]9547: Wordpress installation #25 ltcertificadora.com.br has errors [07-08-2022 03:04:39]19360: Wordpress installation #25 ltcertificadora.com.br has errors [07-08-2022 03:05:01]25963: WAF :: fetched 1 new logs [07-08-2022 03:05:31]19360: Wordpress installation #34 fazendayrere.com.br has errors [07-08-2022 03:05:31]9547: Wordpress installation #34 fazendayrere.com.br has errors [07-08-2022 03:06:01]9547: Wordpress installation #37 site.zipcard.app has errors [07-08-2022 03:06:01]19360: Wordpress installation #37 site.zipcard.app has errors [07-08-2022 03:06:22]19360: Wordpress installation #40 guardian-ba.com.br has errors [07-08-2022 03:06:23]9547: Wordpress installation #40 guardian-ba.com.br has errors [07-08-2022 03:06:46]19360: Wordpress installation #42 suryart.com.br has errors [07-08-2022 03:06:47]9547: Wordpress installation #42 suryart.com.br has errors [07-08-2022 03:06:50]19360: Sending CMS version vulnerability report emails to cpanel users [07-08-2022 03:06:51]9547: Sending CMS version vulnerability report emails to cpanel users [07-08-2022 03:06:53]19360: Checking wordpress installations for suspicious directories [07-08-2022 03:06:53]9547: Checking wordpress installations for suspicious directories [07-08-2022 03:08:02]4307: WAF :: fetched 1 new logs [07-08-2022 03:11:01]13397: WAF :: fetched 1 new logs [07-08-2022 03:12:02]16618: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659852722 [07-08-2022 03:12:02]16618: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 03:12:04]16618: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 03:12:04]16618: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-0312/20220807-031202-Yu9XsinDc_AdKNquftreWQAAAAA [07-08-2022 03:12:04]16618: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-08-2022 03:12:04]16618: WAF :: fetched 1 new logs [07-08-2022 03:13:01]19760: WAF :: fetched 1 new logs [07-08-2022 03:16:01]29371: httpd.conf changed. Refreshing watchlist. [07-08-2022 03:24:01]21933: WAF :: fetched 1 new logs [07-08-2022 03:38:02]2785: WAF :: fetched 2 new logs [07-08-2022 03:41:02]12174: Checking for user cron vulnerabilities [07-08-2022 03:44:01]21815: Checking ditributed CMS bruteforce attacks [07-08-2022 04:02:01]20655: WAF :: fetched 1 new logs [07-08-2022 04:12:02]21599: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659856322 [07-08-2022 04:12:02]21599: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 04:12:04]21599: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 04:12:04]21599: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-0412/20220807-041202-Yu9lwjcQYveKRAmFGL6lBQAAAA4 [07-08-2022 04:12:04]21599: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-08-2022 04:12:05]21599: WAF :: fetched 1 new logs [07-08-2022 04:13:01]24975: WAF :: fetched 1 new logs [07-08-2022 04:17:01]5628: WAF :: fetched 1 new logs [07-08-2022 04:35:02]1063: WAF :: fetched 1 new logs [07-08-2022 04:41:01]20752: Checking for user cron vulnerabilities [07-08-2022 04:44:01]30636: Checking ditributed CMS bruteforce attacks [07-08-2022 04:47:02]7999: WAF :: fetched 1 new logs [07-08-2022 05:01:42]21591: Starting weekly scan on files updated within a week [07-08-2022 05:05:02]2155: WAF :: fetched 1 new logs [07-08-2022 05:12:02]25058: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659859922 [07-08-2022 05:12:02]25058: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 05:12:04]25058: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 05:12:04]25058: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-0512/20220807-051202-Yu9z0sVVolvl-ENbnbUlKwAAABE [07-08-2022 05:12:04]25058: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-08-2022 05:12:05]25058: WAF :: fetched 1 new logs [07-08-2022 05:13:01]28293: WAF :: fetched 1 new logs [07-08-2022 05:14:02]31448: WAF :: fetched 5 new logs [07-08-2022 05:15:01]2179: WAF :: fetched 1 new logs [07-08-2022 05:26:02]5141: WAF :: fetched 1 new logs [07-08-2022 05:33:01]28253: WAF :: fetched 2 new logs [07-08-2022 05:35:01]2148: WAF :: fetched 5 new logs [07-08-2022 05:41:02]21916: Checking for user cron vulnerabilities [07-08-2022 05:44:01]31646: Checking ditributed CMS bruteforce attacks [07-08-2022 05:46:01]5705: WAF :: fetched 2 new logs [07-08-2022 05:49:02]15261: WAF :: fetched 2 new logs [07-08-2022 05:50:01]18380: WAF :: fetched 1 new logs [07-08-2022 06:03:01]29559: WAF :: fetched 6 new logs [07-08-2022 06:04:02]32731: WAF :: fetched 17 new logs [07-08-2022 06:05:01]3525: WAF :: fetched 4 new logs [07-08-2022 06:06:02]6712: WAF :: fetched 1 new logs [07-08-2022 06:07:01]9801: WAF :: fetched 1 new logs [07-08-2022 06:08:02]13085: WAF :: fetched 1 new logs [07-08-2022 06:12:01]26451: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659863521 [07-08-2022 06:12:01]26451: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 06:12:03]26451: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 06:12:04]26451: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-0612/20220807-061201-Yu-B4fyi7HGO_uGyriUHewAAAAM [07-08-2022 06:12:04]26451: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 06:12:06]26451: WAF :: fetched 171 new logs [07-08-2022 06:21:02]23250: WAF :: fetched 1 new logs [07-08-2022 06:22:01]26612: WAF :: fetched 1 new logs [07-08-2022 06:23:02]29944: WAF :: fetched 1 new logs [07-08-2022 06:24:01]644: WAF :: fetched 3 new logs [07-08-2022 06:25:02]3903: WAF :: fetched 1 new logs [07-08-2022 06:26:01]6981: WAF :: fetched 1 new logs [07-08-2022 06:27:02]10357: WAF :: fetched 3 new logs [07-08-2022 06:41:01]23789: Checking for user cron vulnerabilities [07-08-2022 06:44:01]1639: Checking ditributed CMS bruteforce attacks [07-08-2022 07:01:02]24435: WAF :: fetched 1 new logs [07-08-2022 07:02:01]28338: WAF :: fetched 2 new logs [07-08-2022 07:03:02]31535: WAF :: fetched 2 new logs [07-08-2022 07:05:02]5570: WAF :: fetched 2 new logs [07-08-2022 07:08:01]15042: WAF :: fetched 3 new logs [07-08-2022 07:09:01]18090: WAF :: fetched 7 new logs [07-08-2022 07:10:01]20966: WAF :: fetched 3 new logs [07-08-2022 07:12:01]28213: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659867121 [07-08-2022 07:12:01]28213: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 07:12:03]28213: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 07:12:03]28213: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-0712/20220807-071201-Yu-P8dRCcrT4Pra87lTZGAAAABg [07-08-2022 07:12:03]28213: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-08-2022 07:12:04]28213: WAF :: fetched 1 new logs [07-08-2022 07:13:02]31285: WAF :: fetched 3 new logs [07-08-2022 07:14:01]2047: WAF :: fetched 6 new logs [07-08-2022 07:15:02]5250: WAF :: fetched 3 new logs [07-08-2022 07:17:02]11573: WAF :: fetched 1 new logs [07-08-2022 07:23:01]31729: WAF :: fetched 3 new logs [07-08-2022 07:24:02]2631: WAF :: fetched 3 new logs [07-08-2022 07:26:02]8888: WAF :: fetched 1 new logs [07-08-2022 07:30:02]21701: WAF :: fetched 6 new logs [07-08-2022 07:32:02]28386: WAF :: fetched 9 new logs [07-08-2022 07:33:01]32133: WAF :: fetched 3 new logs [07-08-2022 07:34:02]3136: WAF :: fetched 3 new logs [07-08-2022 07:35:02]6283: WAF :: fetched 1 new logs [07-08-2022 07:40:01]22422: WAF :: fetched 5 new logs [07-08-2022 07:41:02]25810: WAF :: fetched 3 new logs [07-08-2022 07:41:02]25810: Checking for user cron vulnerabilities [07-08-2022 07:44:01]3590: Checking ditributed CMS bruteforce attacks [07-08-2022 07:44:01]3590: WAF :: fetched 9 new logs [07-08-2022 07:45:01]: Checking for definition updates [07-08-2022 07:45:03]6743: Updated virus defnition : signatures.ndb [07-08-2022 07:48:01]16177: WAF :: fetched 2 new logs [07-08-2022 07:53:02]32730: WAF :: fetched 3 new logs [07-08-2022 07:57:02]13167: WAF :: fetched 3 new logs [07-08-2022 08:01:01]26598: WAF :: fetched 4 new logs [07-08-2022 08:02:02]29942: WAF :: fetched 1 new logs [07-08-2022 08:03:01]814: WAF :: fetched 2 new logs [07-08-2022 08:09:02]20166: WAF :: fetched 3 new logs [07-08-2022 08:11:02]26647: WAF :: fetched 3 new logs [07-08-2022 08:12:02]29950: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659870722 [07-08-2022 08:12:02]29950: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 08:12:04]29950: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 08:12:04]29950: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-0812/20220807-081202-Yu-eApfK14e84ktjR-psDAAAABU [07-08-2022 08:12:04]29950: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 08:12:05]29950: WAF :: fetched 61 new logs [07-08-2022 08:25:02]8143: WAF :: fetched 2 new logs [07-08-2022 08:31:01]27634: WAF :: fetched 3 new logs [07-08-2022 08:35:01]8762: WAF :: fetched 5 new logs [07-08-2022 08:36:02]11985: WAF :: fetched 11 new logs [07-08-2022 08:37:01]15137: WAF :: fetched 2 new logs [07-08-2022 08:41:01]28239: Checking for user cron vulnerabilities [07-08-2022 08:44:01]6080: Checking ditributed CMS bruteforce attacks [07-08-2022 08:47:01]15466: WAF :: fetched 1 new logs [07-08-2022 08:48:01]18676: WAF :: fetched 3 new logs [07-08-2022 08:49:01]21926: WAF :: fetched 1 new logs [07-08-2022 08:50:01]25300: WAF :: fetched 5 new logs [07-08-2022 08:51:01]28643: WAF :: fetched 4 new logs [07-08-2022 08:52:02]31897: WAF :: fetched 6 new logs [07-08-2022 08:53:01]2673: WAF :: fetched 1 new logs [07-08-2022 09:12:01]32345: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659874321 [07-08-2022 09:12:01]32345: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 09:12:03]32345: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 09:12:04]32345: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-0912/20220807-091201-Yu-sEe5fzKMVx8ww_RPMzgAAAAE [07-08-2022 09:12:04]32345: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-08-2022 09:12:04]32345: WAF :: fetched 1 new logs [07-08-2022 09:14:01]6880: WAF :: fetched 2 new logs [07-08-2022 09:23:01]3553: WAF :: fetched 1 new logs [07-08-2022 09:30:02]26543: WAF :: fetched 2 new logs [07-08-2022 09:39:01]23702: WAF :: fetched 2 new logs [07-08-2022 09:41:02]30344: Checking for user cron vulnerabilities [07-08-2022 09:44:02]7376: Checking ditributed CMS bruteforce attacks [07-08-2022 09:51:01]30554: WAF :: fetched 2 new logs [07-08-2022 09:56:02]14618: WAF :: fetched 1 new logs [07-08-2022 10:06:02]15484: WAF :: fetched 1 new logs [07-08-2022 10:07:02]18645: WAF :: fetched 2 new logs [07-08-2022 10:12:01]2389: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659877921 [07-08-2022 10:12:02]2389: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 10:12:04]2389: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 10:12:04]2389: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-1012/20220807-101202-Yu-6IWh0CNKgQYFyUcSSGwAAAAA [07-08-2022 10:12:04]2389: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 10:12:04]2389: WAF :: fetched 10 new logs [07-08-2022 10:13:01]5608: WAF :: fetched 2 new logs [07-08-2022 10:14:01]8732: WAF :: fetched 1 new logs [07-08-2022 10:15:01]12562: WAF :: fetched 2 new logs [07-08-2022 10:31:01]32722: WAF :: fetched 2 new logs [07-08-2022 10:33:01]6773: WAF :: fetched 1 new logs [07-08-2022 10:41:01]827: Checking for user cron vulnerabilities [07-08-2022 10:44:02]10425: Checking ditributed CMS bruteforce attacks [07-08-2022 11:07:53]21141: Performed RBL check for 23.111.136.34. [07-08-2022 11:12:01]4809: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659881521 [07-08-2022 11:12:01]4809: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 11:12:03]4809: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 11:12:04]4809: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-1112/20220807-111201-Yu_IMSr5YNrKxEvi7bOpMwAAAAg [07-08-2022 11:12:04]4809: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 11:41:01]3405: Checking for user cron vulnerabilities [07-08-2022 11:44:01]13098: Checking ditributed CMS bruteforce attacks [07-08-2022 12:12:01]8081: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659885121 [07-08-2022 12:12:01]8081: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 12:12:03]8081: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 12:12:04]8081: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-1212/20220807-121201-Yu_WQSRlMbQQfEdnRYOuUAAAAAA [07-08-2022 12:12:04]8081: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 12:41:02]6334: Checking for user cron vulnerabilities [07-08-2022 12:44:01]15697: Checking ditributed CMS bruteforce attacks [07-08-2022 12:45:01]: Checking for software updates [07-08-2022 13:12:01]9789: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659888721 [07-08-2022 13:12:01]9789: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 13:12:03]9789: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 13:12:04]9789: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-1312/20220807-131201-Yu_kUfZp5gDwbuHnL14hGgAAAAQ [07-08-2022 13:12:04]9789: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 13:41:02]7292: Checking for user cron vulnerabilities [07-08-2022 13:44:01]16640: Checking ditributed CMS bruteforce attacks [07-08-2022 13:45:01]: Checking for definition updates [07-08-2022 14:12:02]10976: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659892322 [07-08-2022 14:12:02]10976: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 14:12:04]10976: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 14:12:04]10976: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-1412/20220807-141202-Yu_yYgaomoRO7sD_f0M5xQAAAAg [07-08-2022 14:12:04]10976: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 14:41:01]8579: Checking for user cron vulnerabilities [07-08-2022 14:44:02]18038: Checking ditributed CMS bruteforce attacks [07-08-2022 14:53:02]14606: Updated license status via CDN [07-08-2022 15:01:02]8721: Reseting cPGuard inotify settings [07-08-2022 15:12:02]12170: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659895922 [07-08-2022 15:12:02]12170: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 15:12:04]12170: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 15:12:05]12170: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-1512/20220807-151202-YvAActf-6hfuKDRsfDu2OAAAAAI [07-08-2022 15:12:05]12170: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-08-2022 15:12:05]12170: WAF :: fetched 1 new logs [07-08-2022 15:13:01]15268: WAF :: fetched 1 new logs [07-08-2022 15:20:02]5423: WAF :: fetched 3 new logs [07-08-2022 15:21:01]9207: WAF :: fetched 3 new logs [07-08-2022 15:22:02]12327: WAF :: fetched 2 new logs [07-08-2022 15:23:01]15497: WAF :: fetched 1 new logs [07-08-2022 15:28:02]31527: WAF :: fetched 2 new logs [07-08-2022 15:29:01]2282: WAF :: fetched 5 new logs [07-08-2022 15:30:02]5577: WAF :: fetched 5 new logs [07-08-2022 15:31:01]9314: WAF :: fetched 3 new logs [07-08-2022 15:32:02]12526: WAF :: fetched 1 new logs [07-08-2022 15:33:01]15668: WAF :: fetched 2 new logs [07-08-2022 15:34:02]18805: WAF :: fetched 7 new logs [07-08-2022 15:35:02]21903: WAF :: fetched 11 new logs [07-08-2022 15:36:02]25328: WAF :: fetched 17 new logs [07-08-2022 15:37:01]28606: WAF :: fetched 8 new logs [07-08-2022 15:38:02]31680: WAF :: fetched 5 new logs [07-08-2022 15:41:01]9562: Checking for user cron vulnerabilities [07-08-2022 15:44:01]18906: Checking ditributed CMS bruteforce attacks [07-08-2022 15:54:01]18687: WAF :: fetched 2 new logs [07-08-2022 16:10:01]5987: WAF :: fetched 2 new logs [07-08-2022 16:11:02]9263: WAF :: fetched 3 new logs [07-08-2022 16:12:01]12987: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659899521 [07-08-2022 16:12:01]12987: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 16:12:03]12987: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 16:12:04]12987: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-1612/20220807-161201-YvAOgcYwSInTrPheLDLKvAAAAAk [07-08-2022 16:12:04]12987: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 16:12:04]12987: WAF :: fetched 71 new logs [07-08-2022 16:16:01]25922: WAF :: fetched 3 new logs [07-08-2022 16:17:02]29214: WAF :: fetched 2 new logs [07-08-2022 16:18:01]32394: WAF :: fetched 1 new logs [07-08-2022 16:23:02]16418: WAF :: fetched 1 new logs [07-08-2022 16:25:02]22522: WAF :: fetched 3 new logs [07-08-2022 16:26:01]25933: WAF :: fetched 3 new logs [07-08-2022 16:27:02]29203: WAF :: fetched 4 new logs [07-08-2022 16:28:01]32326: WAF :: fetched 3 new logs [07-08-2022 16:30:01]6371: WAF :: fetched 2 new logs [07-08-2022 16:31:02]9663: WAF :: fetched 3 new logs [07-08-2022 16:32:01]13384: WAF :: fetched 3 new logs [07-08-2022 16:33:02]16563: WAF :: fetched 2 new logs [07-08-2022 16:35:02]22884: WAF :: fetched 2 new logs [07-08-2022 16:36:01]26249: WAF :: fetched 2 new logs [07-08-2022 16:37:01]29483: WAF :: fetched 1 new logs [07-08-2022 16:41:01]9919: Checking for user cron vulnerabilities [07-08-2022 16:43:01]16806: WAF :: fetched 1 new logs [07-08-2022 16:44:01]19896: Checking ditributed CMS bruteforce attacks [07-08-2022 16:45:01]22995: WAF :: fetched 1 new logs [07-08-2022 16:46:01]26354: WAF :: fetched 2 new logs [07-08-2022 16:51:01]9842: WAF :: fetched 1 new logs [07-08-2022 16:56:02]25901: WAF :: fetched 1 new logs [07-08-2022 16:58:02]32282: WAF :: fetched 1 new logs [07-08-2022 17:01:01]9611: WAF :: fetched 1 new logs [07-08-2022 17:06:01]25926: WAF :: fetched 1 new logs [07-08-2022 17:12:01]12659: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659903121 [07-08-2022 17:12:01]12659: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 17:12:03]12659: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 17:12:04]12659: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-1712/20220807-171201-YvAckUYLFUp_fL-Tars08gAAAAA [07-08-2022 17:12:04]12659: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [07-08-2022 17:12:04]12659: WAF :: fetched 1 new logs [07-08-2022 17:16:01]25863: WAF :: fetched 1 new logs [07-08-2022 17:17:02]29150: WAF :: fetched 2 new logs [07-08-2022 17:21:01]9520: WAF :: fetched 1 new logs [07-08-2022 17:23:01]16453: WAF :: fetched 2 new logs [07-08-2022 17:26:02]25987: WAF :: fetched 5 new logs [07-08-2022 17:27:02]29267: WAF :: fetched 1 new logs [07-08-2022 17:28:01]32326: WAF :: fetched 3 new logs [07-08-2022 17:29:02]3217: WAF :: fetched 6 new logs [07-08-2022 17:31:02]9497: WAF :: fetched 2 new logs [07-08-2022 17:32:02]12736: WAF :: fetched 9 new logs [07-08-2022 17:33:01]16325: WAF :: fetched 4 new logs [07-08-2022 17:34:01]19419: WAF :: fetched 6 new logs [07-08-2022 17:35:02]22528: WAF :: fetched 1 new logs [07-08-2022 17:36:01]25859: WAF :: fetched 3 new logs [07-08-2022 17:37:02]29174: WAF :: fetched 7 new logs [07-08-2022 17:39:02]3068: WAF :: fetched 5 new logs [07-08-2022 17:41:02]9374: WAF :: fetched 2 new logs [07-08-2022 17:41:02]9374: Checking for user cron vulnerabilities [07-08-2022 17:42:01]12547: WAF :: fetched 1 new logs [07-08-2022 17:43:02]16265: WAF :: fetched 1 new logs [07-08-2022 17:44:01]19357: Checking ditributed CMS bruteforce attacks [07-08-2022 17:44:01]19357: WAF :: fetched 3 new logs [07-08-2022 17:46:02]25800: WAF :: fetched 1 new logs [07-08-2022 17:47:01]29044: WAF :: fetched 6 new logs [07-08-2022 17:48:02]32120: WAF :: fetched 1 new logs [07-08-2022 17:49:01]2915: WAF :: fetched 7 new logs [07-08-2022 17:50:02]6131: WAF :: fetched 1 new logs [07-08-2022 17:52:02]12482: WAF :: fetched 5 new logs [07-08-2022 17:53:02]16024: WAF :: fetched 6 new logs [07-08-2022 17:59:02]2187: WAF :: fetched 2 new logs [07-08-2022 18:00:02]5066: WAF :: fetched 3 new logs [07-08-2022 18:01:01]8641: WAF :: fetched 4 new logs [07-08-2022 18:02:02]11956: WAF :: fetched 8 new logs [07-08-2022 18:03:01]15516: WAF :: fetched 9 new logs [07-08-2022 18:04:02]18621: WAF :: fetched 3 new logs [07-08-2022 18:05:01]21717: WAF :: fetched 3 new logs [07-08-2022 18:06:02]25021: WAF :: fetched 2 new logs [07-08-2022 18:07:01]28310: WAF :: fetched 3 new logs [07-08-2022 18:08:02]31397: WAF :: fetched 2 new logs [07-08-2022 18:09:01]2117: WAF :: fetched 3 new logs [07-08-2022 18:10:02]5364: WAF :: fetched 1 new logs [07-08-2022 18:11:01]8500: WAF :: fetched 3 new logs [07-08-2022 18:12:02]11905: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659906722 [07-08-2022 18:12:02]11905: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 18:12:04]11905: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 18:12:04]11905: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-1812/20220807-181202-YvAqotON1v71Yn78kBrnOAAAAA8 [07-08-2022 18:12:04]11905: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 18:12:04]11905: WAF :: fetched 120 new logs [07-08-2022 18:13:01]14994: WAF :: fetched 2 new logs [07-08-2022 18:14:01]18562: WAF :: fetched 1 new logs [07-08-2022 18:15:01]21666: WAF :: fetched 2 new logs [07-08-2022 18:16:02]25102: WAF :: fetched 3 new logs [07-08-2022 18:18:02]31404: WAF :: fetched 3 new logs [07-08-2022 18:19:01]2263: WAF :: fetched 1 new logs [07-08-2022 18:20:02]5483: WAF :: fetched 3 new logs [07-08-2022 18:21:01]8599: WAF :: fetched 2 new logs [07-08-2022 18:22:02]11787: WAF :: fetched 1 new logs [07-08-2022 18:23:01]14876: WAF :: fetched 4 new logs [07-08-2022 18:24:02]18480: WAF :: fetched 2 new logs [07-08-2022 18:25:01]21542: WAF :: fetched 1 new logs [07-08-2022 18:26:02]24913: WAF :: fetched 2 new logs [07-08-2022 18:27:01]28168: WAF :: fetched 2 new logs [07-08-2022 18:28:02]31352: WAF :: fetched 1 new logs [07-08-2022 18:29:01]2110: WAF :: fetched 3 new logs [07-08-2022 18:30:01]5312: WAF :: fetched 4 new logs [07-08-2022 18:31:01]8531: WAF :: fetched 1 new logs [07-08-2022 18:32:02]11810: WAF :: fetched 2 new logs [07-08-2022 18:34:02]18491: WAF :: fetched 2 new logs [07-08-2022 18:35:01]21582: WAF :: fetched 1 new logs [07-08-2022 18:36:02]24987: WAF :: fetched 1 new logs [07-08-2022 18:37:01]28362: WAF :: fetched 3 new logs [07-08-2022 18:38:02]31459: WAF :: fetched 4 new logs [07-08-2022 18:39:01]2193: WAF :: fetched 4 new logs [07-08-2022 18:40:02]5398: WAF :: fetched 4 new logs [07-08-2022 18:41:01]8528: WAF :: fetched 3 new logs [07-08-2022 18:41:01]8528: Checking for user cron vulnerabilities [07-08-2022 18:42:02]11736: WAF :: fetched 6 new logs [07-08-2022 18:43:01]14743: WAF :: fetched 4 new logs [07-08-2022 18:44:02]18322: Checking ditributed CMS bruteforce attacks [07-08-2022 18:44:02]18322: WAF :: fetched 3 new logs [07-08-2022 18:45:01]21465: WAF :: fetched 1 new logs [07-08-2022 18:46:02]24814: WAF :: fetched 2 new logs [07-08-2022 18:47:01]28001: WAF :: fetched 4 new logs [07-08-2022 18:48:02]31128: WAF :: fetched 4 new logs [07-08-2022 18:49:01]1845: WAF :: fetched 3 new logs [07-08-2022 18:50:02]5059: WAF :: fetched 3 new logs [07-08-2022 18:51:01]8194: WAF :: fetched 4 new logs [07-08-2022 18:52:02]11405: WAF :: fetched 4 new logs [07-08-2022 18:53:01]14187: WAF :: fetched 3 new logs [07-08-2022 18:54:02]17145: WAF :: fetched 2 new logs [07-08-2022 18:55:01]20862: WAF :: fetched 1 new logs [07-08-2022 18:56:02]24152: WAF :: fetched 2 new logs [07-08-2022 18:57:01]27408: WAF :: fetched 3 new logs [07-08-2022 18:58:02]30645: WAF :: fetched 2 new logs [07-08-2022 19:00:02]4384: WAF :: fetched 1 new logs [07-08-2022 19:01:01]8035: WAF :: fetched 2 new logs [07-08-2022 19:02:01]11296: WAF :: fetched 3 new logs [07-08-2022 19:04:01]17555: WAF :: fetched 2 new logs [07-08-2022 19:05:01]21166: WAF :: fetched 2 new logs [07-08-2022 19:06:01]24521: WAF :: fetched 1 new logs [07-08-2022 19:08:01]30900: WAF :: fetched 1 new logs [07-08-2022 19:11:01]7976: WAF :: fetched 1 new logs [07-08-2022 19:12:02]11240: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659910322 [07-08-2022 19:12:02]11240: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 19:12:04]11240: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 19:12:04]11240: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-1912/20220807-191202-YvA4su5kqA2uTkd3XTc3bQAAAAA [07-08-2022 19:12:04]11240: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 19:12:04]11240: WAF :: fetched 1 new logs [07-08-2022 19:13:02]14317: WAF :: fetched 2 new logs [07-08-2022 19:14:01]17381: WAF :: fetched 1 new logs [07-08-2022 19:15:02]20452: WAF :: fetched 1 new logs [07-08-2022 19:16:01]24209: WAF :: fetched 2 new logs [07-08-2022 19:17:01]27465: WAF :: fetched 7 new logs [07-08-2022 19:18:01]30642: WAF :: fetched 8 new logs [07-08-2022 19:19:01]1497: WAF :: fetched 7 new logs [07-08-2022 19:20:01]4741: WAF :: fetched 3 new logs [07-08-2022 19:24:02]17222: WAF :: fetched 2 new logs [07-08-2022 19:26:01]24055: WAF :: fetched 2 new logs [07-08-2022 19:28:01]30477: WAF :: fetched 3 new logs [07-08-2022 19:30:01]4387: WAF :: fetched 4 new logs [07-08-2022 19:31:01]7515: WAF :: fetched 2 new logs [07-08-2022 19:32:01]10769: WAF :: fetched 3 new logs [07-08-2022 19:34:01]16924: WAF :: fetched 1 new logs [07-08-2022 19:41:01]7441: Checking for user cron vulnerabilities [07-08-2022 19:44:01]16955: Checking ditributed CMS bruteforce attacks [07-08-2022 19:45:02]: Checking for definition updates [07-08-2022 19:46:01]23019: WAF :: fetched 1 new logs [07-08-2022 19:59:01]351: WAF :: fetched 1 new logs [07-08-2022 20:04:01]16257: WAF :: fetched 2 new logs [07-08-2022 20:05:01]19310: WAF :: fetched 1 new logs [07-08-2022 20:08:02]29509: WAF :: fetched 1 new logs [07-08-2022 20:12:01]9806: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659913921 [07-08-2022 20:12:01]9806: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 20:12:03]9806: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 20:12:04]9806: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-2012/20220807-201201-YvBGwWEcY4AoRxwuRomq5wAAAAk [07-08-2022 20:12:04]9806: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 20:12:04]9806: WAF :: fetched 3 new logs [07-08-2022 20:13:01]12929: WAF :: fetched 3 new logs [07-08-2022 20:17:01]25507: WAF :: fetched 1 new logs [07-08-2022 20:19:01]32454: WAF :: fetched 1 new logs [07-08-2022 20:20:01]3342: WAF :: fetched 1 new logs [07-08-2022 20:22:01]9770: WAF :: fetched 2 new logs [07-08-2022 20:23:01]12952: WAF :: fetched 1 new logs [07-08-2022 20:28:01]29216: WAF :: fetched 5 new logs [07-08-2022 20:30:01]3171: WAF :: fetched 1 new logs [07-08-2022 20:38:01]28517: WAF :: fetched 1 new logs [07-08-2022 20:41:02]6135: Checking for user cron vulnerabilities [07-08-2022 20:42:01]9292: WAF :: fetched 1 new logs [07-08-2022 20:44:01]15635: Checking ditributed CMS bruteforce attacks [07-08-2022 20:44:01]15635: WAF :: fetched 1 new logs [07-08-2022 20:45:02]18774: WAF :: fetched 2 new logs [07-08-2022 20:46:01]21422: WAF :: fetched 1 new logs [07-08-2022 20:53:02]11985: WAF :: fetched 1 new logs [07-08-2022 21:00:01]1942: WAF :: fetched 1 new logs [07-08-2022 21:06:01]21598: WAF :: fetched 1 new logs [07-08-2022 21:08:01]28226: WAF :: fetched 2 new logs [07-08-2022 21:09:01]31272: WAF :: fetched 2 new logs [07-08-2022 21:10:01]2743: WAF :: fetched 2 new logs [07-08-2022 21:11:01]5948: WAF :: fetched 1 new logs [07-08-2022 21:12:01]9108: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659917521 [07-08-2022 21:12:01]9108: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 21:12:04]9108: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 21:12:04]9108: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-2112/20220807-211201-YvBU0aJ9rwQ2CskhpncvcgAAAAM [07-08-2022 21:12:04]9108: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 21:12:04]9108: WAF :: fetched 6 new logs [07-08-2022 21:13:01]12391: WAF :: fetched 1 new logs [07-08-2022 21:14:02]15503: WAF :: fetched 5 new logs [07-08-2022 21:16:01]21674: WAF :: fetched 1 new logs [07-08-2022 21:17:01]24984: WAF :: fetched 1 new logs [07-08-2022 21:18:01]28438: WAF :: fetched 6 new logs [07-08-2022 21:19:01]31779: WAF :: fetched 3 new logs [07-08-2022 21:20:01]3257: WAF :: fetched 1 new logs [07-08-2022 21:25:01]19019: WAF :: fetched 2 new logs [07-08-2022 21:26:02]22214: WAF :: fetched 4 new logs [07-08-2022 21:35:01]18798: WAF :: fetched 2 new logs [07-08-2022 21:39:01]31553: WAF :: fetched 1 new logs [07-08-2022 21:41:01]6072: Checking for user cron vulnerabilities [07-08-2022 21:42:01]9187: WAF :: fetched 2 new logs [07-08-2022 21:44:01]15409: Checking ditributed CMS bruteforce attacks [07-08-2022 21:47:01]24656: WAF :: fetched 1 new logs [07-08-2022 21:52:02]8922: WAF :: fetched 3 new logs [07-08-2022 21:53:01]12089: WAF :: fetched 2 new logs [07-08-2022 21:57:01]24593: WAF :: fetched 1 new logs [07-08-2022 22:01:01]5766: WAF :: fetched 3 new logs [07-08-2022 22:02:01]8897: WAF :: fetched 3 new logs [07-08-2022 22:03:01]12129: WAF :: fetched 7 new logs [07-08-2022 22:04:01]15228: WAF :: fetched 7 new logs [07-08-2022 22:05:01]18337: WAF :: fetched 4 new logs [07-08-2022 22:07:08]24881: Performing Domain reputation checks [07-08-2022 22:08:01]28100: WAF :: fetched 1 new logs [07-08-2022 22:12:02]8894: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659921122 [07-08-2022 22:12:02]8894: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 22:12:04]8894: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 22:12:04]8894: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-2212/20220807-221202-YvBi4oIwwR0fsvKGkDL71gAAADQ [07-08-2022 22:12:04]8894: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 22:12:04]8894: WAF :: fetched 1 new logs [07-08-2022 22:14:01]15309: WAF :: fetched 3 new logs [07-08-2022 22:18:01]28263: WAF :: fetched 1 new logs [07-08-2022 22:24:01]15373: WAF :: fetched 1 new logs [07-08-2022 22:25:01]18445: WAF :: fetched 3 new logs [07-08-2022 22:27:02]24964: WAF :: fetched 2 new logs [07-08-2022 22:28:01]28240: WAF :: fetched 1 new logs [07-08-2022 22:30:01]2074: WAF :: fetched 4 new logs [07-08-2022 22:31:01]5904: WAF :: fetched 4 new logs [07-08-2022 22:34:01]15356: WAF :: fetched 2 new logs [07-08-2022 22:35:01]18433: WAF :: fetched 1 new logs [07-08-2022 22:40:02]2177: WAF :: fetched 5 new logs [07-08-2022 22:41:01]5993: WAF :: fetched 1 new logs [07-08-2022 22:41:01]5993: Checking for user cron vulnerabilities [07-08-2022 22:42:02]8754: WAF :: fetched 3 new logs [07-08-2022 22:43:01]11894: WAF :: fetched 2 new logs [07-08-2022 22:44:02]15046: Checking ditributed CMS bruteforce attacks [07-08-2022 22:47:02]24634: WAF :: fetched 2 new logs [07-08-2022 22:50:01]1649: WAF :: fetched 5 new logs [07-08-2022 22:51:02]5626: WAF :: fetched 2 new logs [07-08-2022 22:52:01]8759: WAF :: fetched 4 new logs [07-08-2022 22:53:01]12060: WAF :: fetched 1 new logs [07-08-2022 22:54:01]15293: WAF :: fetched 8 new logs [07-08-2022 22:55:01]18313: WAF :: fetched 3 new logs [07-08-2022 22:56:01]21405: WAF :: fetched 4 new logs [07-08-2022 22:57:01]24623: WAF :: fetched 2 new logs [07-08-2022 22:58:01]27837: WAF :: fetched 3 new logs [07-08-2022 22:59:01]30989: WAF :: fetched 4 new logs [07-08-2022 23:00:01]1391: WAF :: fetched 7 new logs [07-08-2022 23:01:02]5161: WAF :: fetched 12 new logs [07-08-2022 23:02:01]8857: WAF :: fetched 13 new logs [07-08-2022 23:03:02]12078: WAF :: fetched 4 new logs [07-08-2022 23:04:01]15167: WAF :: fetched 2 new logs [07-08-2022 23:05:02]18284: WAF :: fetched 4 new logs [07-08-2022 23:06:01]21376: WAF :: fetched 1 new logs [07-08-2022 23:07:02]24741: WAF :: fetched 4 new logs [07-08-2022 23:07:57]24886: Performed RBL check for 23.111.136.34. [07-08-2022 23:08:01]27774: WAF :: fetched 2 new logs [07-08-2022 23:10:01]1787: WAF :: fetched 1 new logs [07-08-2022 23:11:01]5103: WAF :: fetched 2 new logs [07-08-2022 23:12:01]8742: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659924721 [07-08-2022 23:12:01]8742: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [07-08-2022 23:12:03]8742: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [07-08-2022 23:12:04]8742: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220807/20220807-2312/20220807-231201-YvBw8diEkbR6LhN0Sfvq5gAAAAU [07-08-2022 23:12:04]8742: WAF :: No suitable log file found. Using SQLite.. [07-08-2022 23:12:04]8742: WAF :: fetched 3 new logs [07-08-2022 23:13:01]11910: WAF :: fetched 3 new logs [07-08-2022 23:14:01]15144: WAF :: fetched 3 new logs [07-08-2022 23:15:01]18304: WAF :: fetched 1 new logs [07-08-2022 23:16:01]21425: WAF :: fetched 2 new logs [07-08-2022 23:17:01]24771: WAF :: fetched 2 new logs [07-08-2022 23:20:01]1795: WAF :: fetched 1 new logs [07-08-2022 23:23:02]11965: WAF :: fetched 19 new logs [07-08-2022 23:30:02]1768: WAF :: fetched 6 new logs [07-08-2022 23:36:01]21371: WAF :: fetched 1 new logs [07-08-2022 23:41:01]4730: Checking for user cron vulnerabilities [07-08-2022 23:43:01]11574: WAF :: fetched 1 new logs [07-08-2022 23:44:02]14817: Checking ditributed CMS bruteforce attacks [07-08-2022 23:49:01]30903: WAF :: fetched 4 new logs [07-08-2022 23:53:01]11729: WAF :: fetched 1 new logs [07-08-2022 23:56:01]21693: httpd.conf changed. Refreshing watchlist. [07-08-2022 23:58:01]28239: WAF :: fetched 1 new logs [08-08-2022 00:01:01]5777: httpd.conf changed. Refreshing watchlist. [08-08-2022 00:01:05]5783: Sending daily report for August 8, 2022 [08-08-2022 00:02:02]9125: httpd.conf changed. Refreshing watchlist. [08-08-2022 00:03:01]12820: httpd.conf changed. Refreshing watchlist. [08-08-2022 00:05:01]19172: Deleted 0 entries older than 6 MONTH from scanner_logs [08-08-2022 00:05:01]19172: Deleted 0 files from Quarantine [08-08-2022 00:12:01]9417: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659928321 [08-08-2022 00:12:02]9417: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 00:12:04]9417: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 00:12:04]9417: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-0012/20220808-001202-YvB_ATx5pdsB1c2wU5NlFgAAAB8 [08-08-2022 00:12:04]9417: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 00:26:02]22673: WAF :: fetched 2 new logs [08-08-2022 00:27:01]25965: WAF :: fetched 4 new logs [08-08-2022 00:29:01]32315: WAF :: fetched 1 new logs [08-08-2022 00:34:02]16332: WAF :: fetched 1 new logs [08-08-2022 00:36:02]22250: WAF :: fetched 1 new logs [08-08-2022 00:41:01]5916: Checking for user cron vulnerabilities [08-08-2022 00:44:01]15831: Checking ditributed CMS bruteforce attacks [08-08-2022 00:45:01]: Checking for software updates [08-08-2022 01:06:01]25289: WAF :: fetched 4 new logs [08-08-2022 01:12:01]12711: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659931921 [08-08-2022 01:12:01]12711: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 01:12:03]12711: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 01:12:03]12711: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-0112/20220808-011201-YvCNERLgVQxy5V5xra9p0wAAAAg [08-08-2022 01:12:03]12711: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 01:12:03]12711: WAF :: fetched 1 new logs [08-08-2022 01:16:02]27218: WAF :: fetched 1 new logs [08-08-2022 01:17:01]30692: WAF :: fetched 2 new logs [08-08-2022 01:18:02]1659: WAF :: fetched 2 new logs [08-08-2022 01:19:01]5128: WAF :: fetched 2 new logs [08-08-2022 01:20:02]8838: WAF :: fetched 1 new logs [08-08-2022 01:21:01]12114: WAF :: fetched 2 new logs [08-08-2022 01:23:01]19014: WAF :: fetched 2 new logs [08-08-2022 01:24:02]22763: WAF :: fetched 3 new logs [08-08-2022 01:25:01]26353: WAF :: fetched 2 new logs [08-08-2022 01:26:02]29653: WAF :: fetched 3 new logs [08-08-2022 01:27:01]886: WAF :: fetched 4 new logs [08-08-2022 01:28:02]4318: WAF :: fetched 4 new logs [08-08-2022 01:29:01]7638: WAF :: fetched 2 new logs [08-08-2022 01:30:02]11475: WAF :: fetched 1 new logs [08-08-2022 01:32:01]17901: WAF :: fetched 2 new logs [08-08-2022 01:33:01]21084: WAF :: fetched 2 new logs [08-08-2022 01:35:01]28636: WAF :: fetched 2 new logs [08-08-2022 01:36:02]31906: WAF :: fetched 1 new logs [08-08-2022 01:37:01]2739: WAF :: fetched 2 new logs [08-08-2022 01:38:02]6146: WAF :: fetched 2 new logs [08-08-2022 01:40:02]12555: WAF :: fetched 3 new logs [08-08-2022 01:41:01]15810: WAF :: fetched 3 new logs [08-08-2022 01:41:01]15810: Checking for user cron vulnerabilities [08-08-2022 01:42:01]18935: WAF :: fetched 2 new logs [08-08-2022 01:44:01]26410: Checking ditributed CMS bruteforce attacks [08-08-2022 01:45:01]: Checking for definition updates [08-08-2022 01:53:01]22632: WAF :: fetched 3 new logs [08-08-2022 01:56:01]563: WAF :: fetched 1 new logs [08-08-2022 02:01:01]16546: WAF :: fetched 3 new logs [08-08-2022 02:02:01]19696: WAF :: fetched 1 new logs [08-08-2022 02:03:01]22871: WAF :: fetched 1 new logs [08-08-2022 02:05:01]29927: WAF :: fetched 4 new logs [08-08-2022 02:06:01]532: WAF :: fetched 4 new logs [08-08-2022 02:07:01]4182: WAF :: fetched 3 new logs [08-08-2022 02:08:01]7879: WAF :: fetched 1 new logs [08-08-2022 02:09:01]11419: WAF :: fetched 3 new logs [08-08-2022 02:10:01]14801: WAF :: fetched 2 new logs [08-08-2022 02:11:01]17998: WAF :: fetched 3 new logs [08-08-2022 02:12:01]21143: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659935521 [08-08-2022 02:12:01]21143: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 02:12:03]21143: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 02:12:04]21143: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-0212/20220808-021201-YvCbIdRxMK7tR4L5oFYQNwAAAAM [08-08-2022 02:12:04]21143: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 02:12:04]21143: WAF :: fetched 4 new logs [08-08-2022 02:13:01]24449: WAF :: fetched 1 new logs [08-08-2022 02:14:01]27660: WAF :: fetched 3 new logs [08-08-2022 02:15:01]31803: WAF :: fetched 3 new logs [08-08-2022 02:16:01]2942: WAF :: fetched 4 new logs [08-08-2022 02:17:02]6703: WAF :: fetched 3 new logs [08-08-2022 02:18:01]10125: WAF :: fetched 5 new logs [08-08-2022 02:19:01]13559: WAF :: fetched 3 new logs [08-08-2022 02:20:02]16833: WAF :: fetched 5 new logs [08-08-2022 02:21:01]19963: WAF :: fetched 2 new logs [08-08-2022 02:22:02]23790: WAF :: fetched 4 new logs [08-08-2022 02:23:01]26902: WAF :: fetched 4 new logs [08-08-2022 02:24:02]30137: WAF :: fetched 4 new logs [08-08-2022 02:25:01]1442: WAF :: fetched 3 new logs [08-08-2022 02:26:02]5127: WAF :: fetched 2 new logs [08-08-2022 02:27:01]8183: WAF :: fetched 6 new logs [08-08-2022 02:28:02]11906: WAF :: fetched 4 new logs [08-08-2022 02:29:01]15084: WAF :: fetched 2 new logs [08-08-2022 02:30:01]18798: WAF :: fetched 2 new logs [08-08-2022 02:31:02]22260: WAF :: fetched 3 new logs [08-08-2022 02:32:01]25595: WAF :: fetched 6 new logs [08-08-2022 02:33:02]28804: WAF :: fetched 5 new logs [08-08-2022 02:34:01]31963: WAF :: fetched 4 new logs [08-08-2022 02:35:01]3500: WAF :: fetched 2 new logs [08-08-2022 02:36:01]6703: WAF :: fetched 5 new logs [08-08-2022 02:37:01]9802: WAF :: fetched 5 new logs [08-08-2022 02:38:01]12916: WAF :: fetched 8 new logs [08-08-2022 02:39:01]16083: WAF :: fetched 1 new logs [08-08-2022 02:40:01]19284: WAF :: fetched 2 new logs [08-08-2022 02:41:01]22643: WAF :: fetched 2 new logs [08-08-2022 02:41:01]22643: Checking for user cron vulnerabilities [08-08-2022 02:42:01]25949: WAF :: fetched 4 new logs [08-08-2022 02:43:01]29132: WAF :: fetched 2 new logs [08-08-2022 02:44:01]32180: Checking ditributed CMS bruteforce attacks [08-08-2022 02:44:01]32180: WAF :: fetched 4 new logs [08-08-2022 02:45:01]3681: WAF :: fetched 3 new logs [08-08-2022 02:46:02]6940: WAF :: fetched 2 new logs [08-08-2022 02:47:01]10014: WAF :: fetched 3 new logs [08-08-2022 02:48:02]13208: WAF :: fetched 2 new logs [08-08-2022 02:49:01]16357: WAF :: fetched 4 new logs [08-08-2022 02:50:02]19570: WAF :: fetched 4 new logs [08-08-2022 02:51:01]22754: WAF :: fetched 3 new logs [08-08-2022 02:52:02]26090: WAF :: fetched 2 new logs [08-08-2022 02:53:01]29225: WAF :: fetched 2 new logs [08-08-2022 02:53:02]29221: Updated license status via CDN [08-08-2022 02:54:02]32360: WAF :: fetched 1 new logs [08-08-2022 02:55:02]3853: WAF :: fetched 2 new logs [08-08-2022 02:56:01]7035: WAF :: fetched 1 new logs [08-08-2022 02:57:01]10216: WAF :: fetched 3 new logs [08-08-2022 02:58:01]13429: WAF :: fetched 4 new logs [08-08-2022 02:59:01]16560: WAF :: fetched 3 new logs [08-08-2022 03:00:01]19490: WAF :: fetched 2 new logs [08-08-2022 03:00:04]19490: Found and updated 31 CMS installations [08-08-2022 03:01:01]23217: WAF :: fetched 3 new logs [08-08-2022 03:02:01]26797: WAF :: fetched 3 new logs [08-08-2022 03:02:58]19490: Sending CMS version vulnerability report emails to cpanel users [08-08-2022 03:03:01]19490: Checking wordpress installations for suspicious directories [08-08-2022 03:04:28]30351: Sending CMS version vulnerability report emails to cpanel users [08-08-2022 03:04:31]30351: Checking wordpress installations for suspicious directories [08-08-2022 03:05:01]4979: WAF :: fetched 1 new logs [08-08-2022 03:06:01]8674: WAF :: fetched 1 new logs [08-08-2022 03:07:01]11825: WAF :: fetched 1 new logs [08-08-2022 03:08:01]14938: WAF :: fetched 2 new logs [08-08-2022 03:12:02]27771: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659939122 [08-08-2022 03:12:02]27771: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 03:12:04]27771: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 03:12:04]27771: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-0312/20220808-031202-YvCpMhPCXSD-zHIKeCSEmQAAAAk [08-08-2022 03:12:04]27771: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [08-08-2022 03:12:04]27771: WAF :: fetched 1 new logs [08-08-2022 03:13:01]30946: WAF :: fetched 1 new logs [08-08-2022 03:15:01]5012: WAF :: fetched 1 new logs [08-08-2022 03:17:01]11921: WAF :: fetched 2 new logs [08-08-2022 03:18:02]15067: WAF :: fetched 3 new logs [08-08-2022 03:21:01]24954: WAF :: fetched 3 new logs [08-08-2022 03:28:02]15054: WAF :: fetched 1 new logs [08-08-2022 03:29:01]18127: WAF :: fetched 2 new logs [08-08-2022 03:32:02]27931: WAF :: fetched 2 new logs [08-08-2022 03:33:01]31052: WAF :: fetched 3 new logs [08-08-2022 03:40:01]24675: WAF :: fetched 1 new logs [08-08-2022 03:41:02]27978: Checking for user cron vulnerabilities [08-08-2022 03:44:01]5095: Checking ditributed CMS bruteforce attacks [08-08-2022 03:47:02]15266: WAF :: fetched 1 new logs [08-08-2022 04:02:01]32103: WAF :: fetched 1 new logs [08-08-2022 04:06:01]12652: WAF :: fetched 1 new logs [08-08-2022 04:12:01]32316: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659942721 [08-08-2022 04:12:01]32316: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 04:12:03]32316: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 04:12:04]32316: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-0412/20220808-041201-YvC3QaA6nagysBwP20BMkQAAAAU [08-08-2022 04:12:04]32316: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [08-08-2022 04:12:04]32316: WAF :: fetched 1 new logs [08-08-2022 04:18:02]19352: WAF :: fetched 1 new logs [08-08-2022 04:20:02]25934: WAF :: fetched 2 new logs [08-08-2022 04:25:01]9329: WAF :: fetched 1 new logs [08-08-2022 04:28:02]19396: WAF :: fetched 1 new logs [08-08-2022 04:29:01]22620: WAF :: fetched 1 new logs [08-08-2022 04:30:02]26016: WAF :: fetched 1 new logs [08-08-2022 04:41:02]29553: Checking for user cron vulnerabilities [08-08-2022 04:44:01]6666: Checking ditributed CMS bruteforce attacks [08-08-2022 05:01:42]30658: Starting daily scan on files updated in last 24 hrs [08-08-2022 05:11:02]30879: WAF :: fetched 4 new logs [08-08-2022 05:12:02]1484: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659946322 [08-08-2022 05:12:02]1484: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 05:12:04]1484: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 05:12:04]1484: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-0512/20220808-051202-YvDFUhPCXSD-zHIKeCSHkgAAAAk [08-08-2022 05:12:04]1484: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 05:12:04]1484: WAF :: fetched 25 new logs [08-08-2022 05:14:02]7905: WAF :: fetched 1 new logs [08-08-2022 05:27:01]18226: WAF :: fetched 1 new logs [08-08-2022 05:38:01]22683: WAF :: fetched 2 new logs [08-08-2022 05:41:01]32651: Checking for user cron vulnerabilities [08-08-2022 05:44:01]9833: Checking ditributed CMS bruteforce attacks [08-08-2022 05:44:01]9833: WAF :: fetched 1 new logs [08-08-2022 06:02:01]4697: WAF :: fetched 1 new logs [08-08-2022 06:07:01]20272: WAF :: fetched 2 new logs [08-08-2022 06:08:02]23536: WAF :: fetched 3 new logs [08-08-2022 06:09:01]27297: WAF :: fetched 5 new logs [08-08-2022 06:10:02]30547: WAF :: fetched 7 new logs [08-08-2022 06:11:01]1496: WAF :: fetched 6 new logs [08-08-2022 06:12:02]4778: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659949922 [08-08-2022 06:12:02]4778: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 06:12:04]4778: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 06:12:04]4778: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-0612/20220808-061202-YvDTYilLM3kvShEeqtJP7wAAAAE [08-08-2022 06:12:04]4778: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 06:12:04]4778: WAF :: fetched 2 new logs [08-08-2022 06:13:01]7907: WAF :: fetched 3 new logs [08-08-2022 06:14:02]11093: WAF :: fetched 5 new logs [08-08-2022 06:26:01]17952: WAF :: fetched 6 new logs [08-08-2022 06:29:02]28325: WAF :: fetched 1 new logs [08-08-2022 06:41:02]3208: Checking for user cron vulnerabilities [08-08-2022 06:44:01]12576: Checking ditributed CMS bruteforce attacks [08-08-2022 06:47:01]22281: WAF :: fetched 3 new logs [08-08-2022 06:49:01]29332: WAF :: fetched 1 new logs [08-08-2022 07:01:01]3499: WAF :: fetched 1 new logs [08-08-2022 07:03:01]9817: WAF :: fetched 2 new logs [08-08-2022 07:05:01]16128: WAF :: fetched 1 new logs [08-08-2022 07:12:01]7026: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659953521 [08-08-2022 07:12:01]7026: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 07:12:03]7026: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 07:12:04]7026: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-0712/20220808-071201-YvDhcV3eVlJ5k7XeiXJjBwAAAAs [08-08-2022 07:12:04]7026: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [08-08-2022 07:12:04]7026: WAF :: fetched 1 new logs [08-08-2022 07:13:01]10287: WAF :: fetched 1 new logs [08-08-2022 07:16:02]19824: WAF :: fetched 1 new logs [08-08-2022 07:19:02]29862: WAF :: fetched 1 new logs [08-08-2022 07:26:01]20335: WAF :: fetched 1 new logs [08-08-2022 07:28:01]26771: WAF :: fetched 1 new logs [08-08-2022 07:31:01]4800: WAF :: fetched 1 new logs [08-08-2022 07:40:02]1679: WAF :: fetched 1 new logs [08-08-2022 07:41:02]5078: Checking for user cron vulnerabilities [08-08-2022 07:42:02]8202: WAF :: fetched 10 new logs [08-08-2022 07:44:01]14515: Checking ditributed CMS bruteforce attacks [08-08-2022 07:45:01]: Checking for definition updates [08-08-2022 07:45:04]17654: Updated virus defnition : signatures.ndb [08-08-2022 08:11:01]6022: WAF :: fetched 3 new logs [08-08-2022 08:12:02]9278: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659957122 [08-08-2022 08:12:02]9278: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 08:12:04]9278: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 08:12:04]9278: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-0812/20220808-081202-YvDvgvnl7a1eb0dOoQzVwgAAAA4 [08-08-2022 08:12:04]9278: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [08-08-2022 08:12:05]9278: WAF :: fetched 1 new logs [08-08-2022 08:13:01]12424: WAF :: fetched 1 new logs [08-08-2022 08:21:01]6581: WAF :: fetched 1 new logs [08-08-2022 08:22:01]9781: WAF :: fetched 9 new logs [08-08-2022 08:23:02]12959: WAF :: fetched 2 new logs [08-08-2022 08:24:01]16112: WAF :: fetched 3 new logs [08-08-2022 08:25:02]19249: WAF :: fetched 6 new logs [08-08-2022 08:26:02]22524: WAF :: fetched 2 new logs [08-08-2022 08:27:02]25950: WAF :: fetched 2 new logs [08-08-2022 08:28:01]29126: WAF :: fetched 1 new logs [08-08-2022 08:30:02]3093: WAF :: fetched 1 new logs [08-08-2022 08:33:02]13406: WAF :: fetched 3 new logs [08-08-2022 08:41:01]7727: Checking for user cron vulnerabilities [08-08-2022 08:44:01]17347: Checking ditributed CMS bruteforce attacks [08-08-2022 08:50:02]4610: WAF :: fetched 1 new logs [08-08-2022 09:11:02]9047: WAF :: fetched 47 new logs [08-08-2022 09:12:02]12858: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659960722 [08-08-2022 09:12:02]12858: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 09:12:04]12858: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 09:12:04]12858: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-0912/20220808-091202-YvD9kjT0a1K_Y7Ln2jK6DwAAABA [08-08-2022 09:12:04]12858: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 09:12:04]12858: WAF :: fetched 189 new logs [08-08-2022 09:13:02]15998: WAF :: fetched 92 new logs [08-08-2022 09:15:01]22495: WAF :: fetched 4 new logs [08-08-2022 09:18:01]32420: WAF :: fetched 1 new logs [08-08-2022 09:23:01]17043: WAF :: fetched 1 new logs [08-08-2022 09:24:01]20261: WAF :: fetched 7 new logs [08-08-2022 09:25:01]23689: WAF :: fetched 1 new logs [08-08-2022 09:35:01]24675: WAF :: fetched 1 new logs [08-08-2022 09:36:01]28068: WAF :: fetched 1 new logs [08-08-2022 09:39:01]5744: WAF :: fetched 2 new logs [08-08-2022 09:41:01]12239: Checking for user cron vulnerabilities [08-08-2022 09:44:01]22641: Checking ditributed CMS bruteforce attacks [08-08-2022 09:52:01]17076: WAF :: fetched 2 new logs [08-08-2022 09:56:01]30370: WAF :: fetched 3 new logs [08-08-2022 10:00:01]10840: WAF :: fetched 1 new logs [08-08-2022 10:02:01]18500: WAF :: fetched 5 new logs [08-08-2022 10:03:02]22039: WAF :: fetched 3 new logs [08-08-2022 10:05:02]28845: WAF :: fetched 1 new logs [08-08-2022 10:08:01]6358: WAF :: fetched 1 new logs [08-08-2022 10:09:01]9624: WAF :: fetched 1 new logs [08-08-2022 10:12:02]19637: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659964322 [08-08-2022 10:12:02]19637: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 10:12:04]19637: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 10:12:04]19637: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-1012/20220808-101202-YvELogcZSDu1cW90DXqyqAAAAAk [08-08-2022 10:12:04]19637: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [08-08-2022 10:12:04]19637: WAF :: fetched 1 new logs [08-08-2022 10:13:01]23592: WAF :: fetched 1 new logs [08-08-2022 10:14:02]27002: WAF :: fetched 4 new logs [08-08-2022 10:15:01]30405: WAF :: fetched 3 new logs [08-08-2022 10:19:01]11403: WAF :: fetched 57 new logs [08-08-2022 10:20:02]14604: WAF :: fetched 146 new logs [08-08-2022 10:21:01]17908: WAF :: fetched 136 new logs [08-08-2022 10:22:02]21437: WAF :: fetched 131 new logs [08-08-2022 10:23:02]25388: WAF :: fetched 142 new logs [08-08-2022 10:24:02]28869: WAF :: fetched 15 new logs [08-08-2022 10:26:02]3169: WAF :: fetched 1 new logs [08-08-2022 10:27:02]6459: WAF :: fetched 1 new logs [08-08-2022 10:31:02]19438: WAF :: fetched 1 new logs [08-08-2022 10:32:02]22908: WAF :: fetched 3 new logs [08-08-2022 10:33:01]26905: WAF :: fetched 4 new logs [08-08-2022 10:35:02]985: WAF :: fetched 1 new logs [08-08-2022 10:37:02]7719: WAF :: fetched 2 new logs [08-08-2022 10:38:01]10921: WAF :: fetched 8 new logs [08-08-2022 10:39:02]14157: WAF :: fetched 2 new logs [08-08-2022 10:41:02]20873: Checking for user cron vulnerabilities [08-08-2022 10:43:02]28398: WAF :: fetched 1 new logs [08-08-2022 10:44:01]31500: Checking ditributed CMS bruteforce attacks [08-08-2022 10:45:01]2305: WAF :: fetched 1 new logs [08-08-2022 10:47:02]9045: WAF :: fetched 118 new logs [08-08-2022 10:48:02]12302: WAF :: fetched 139 new logs [08-08-2022 10:49:01]15546: WAF :: fetched 55 new logs [08-08-2022 10:51:01]22225: WAF :: fetched 1 new logs [08-08-2022 10:54:02]32291: WAF :: fetched 1 new logs [08-08-2022 11:00:02]19024: WAF :: fetched 2 new logs [08-08-2022 11:01:01]22897: WAF :: fetched 1 new logs [08-08-2022 11:06:02]7934: WAF :: fetched 4 new logs [08-08-2022 11:07:01]11296: WAF :: fetched 7 new logs [08-08-2022 11:07:58]11473: Performed RBL check for 23.111.136.34. [08-08-2022 11:09:02]17823: WAF :: fetched 1 new logs [08-08-2022 11:10:01]21155: WAF :: fetched 3 new logs [08-08-2022 11:12:01]28034: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659967921 [08-08-2022 11:12:01]28034: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 11:12:03]28034: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 11:12:04]28034: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-1112/20220808-111201-YvEZsTMf-3oE1oWrw7WgmQAAAAA [08-08-2022 11:12:04]28034: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [08-08-2022 11:12:04]28034: WAF :: fetched 1 new logs [08-08-2022 11:16:02]9158: WAF :: fetched 1 new logs [08-08-2022 11:17:02]12503: WAF :: fetched 2 new logs [08-08-2022 11:18:01]15813: WAF :: fetched 3 new logs [08-08-2022 11:21:02]26512: WAF :: fetched 2 new logs [08-08-2022 11:22:01]30447: WAF :: fetched 2 new logs [08-08-2022 11:23:02]1315: WAF :: fetched 2 new logs [08-08-2022 11:24:02]5064: WAF :: fetched 1 new logs [08-08-2022 11:25:01]8264: WAF :: fetched 4 new logs [08-08-2022 11:26:02]11645: WAF :: fetched 2 new logs [08-08-2022 11:27:01]14894: WAF :: fetched 1 new logs [08-08-2022 11:28:02]18193: WAF :: fetched 4 new logs [08-08-2022 11:29:01]21531: WAF :: fetched 1 new logs [08-08-2022 11:30:01]24986: WAF :: fetched 1 new logs [08-08-2022 11:31:02]28440: WAF :: fetched 6 new logs [08-08-2022 11:35:02]9853: WAF :: fetched 3 new logs [08-08-2022 11:36:02]13231: WAF :: fetched 1 new logs [08-08-2022 11:37:02]16590: WAF :: fetched 1 new logs [08-08-2022 11:39:02]23160: WAF :: fetched 1 new logs [08-08-2022 11:40:01]26608: WAF :: fetched 2 new logs [08-08-2022 11:41:02]30002: WAF :: fetched 1 new logs [08-08-2022 11:41:02]30002: Checking for user cron vulnerabilities [08-08-2022 11:42:01]889: WAF :: fetched 2 new logs [08-08-2022 11:43:02]4276: WAF :: fetched 1 new logs [08-08-2022 11:44:01]7644: Checking ditributed CMS bruteforce attacks [08-08-2022 11:44:01]7650: httpd.conf changed. Refreshing watchlist. [08-08-2022 11:44:01]7644: WAF :: fetched 1 new logs [08-08-2022 11:46:01]14262: WAF :: fetched 2 new logs [08-08-2022 11:47:02]17636: WAF :: fetched 1 new logs [08-08-2022 11:48:01]20868: WAF :: fetched 4 new logs [08-08-2022 11:49:02]24291: WAF :: fetched 4 new logs [08-08-2022 11:50:02]28465: httpd.conf changed. Refreshing watchlist. [08-08-2022 11:50:02]28480: WAF :: fetched 1 new logs [08-08-2022 11:53:02]6133: WAF :: fetched 1 new logs [08-08-2022 11:54:02]9912: WAF :: fetched 1 new logs [08-08-2022 11:55:02]13080: WAF :: fetched 3 new logs [08-08-2022 11:56:02]16427: WAF :: fetched 2 new logs [08-08-2022 11:58:02]23034: WAF :: fetched 2 new logs [08-08-2022 12:03:02]8282: WAF :: fetched 1 new logs [08-08-2022 12:04:01]11495: WAF :: fetched 2 new logs [08-08-2022 12:05:02]15345: WAF :: fetched 2 new logs [08-08-2022 12:06:01]18626: WAF :: fetched 1 new logs [08-08-2022 12:07:02]21857: WAF :: fetched 5 new logs [08-08-2022 12:08:01]25316: WAF :: fetched 2 new logs [08-08-2022 12:09:02]28611: WAF :: fetched 4 new logs [08-08-2022 12:10:01]31884: WAF :: fetched 1 new logs [08-08-2022 12:12:01]6054: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659971521 [08-08-2022 12:12:01]6054: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 12:12:03]6054: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 12:12:04]6054: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-1212/20220808-121201-YvEnwXl0vsa-OKNnQpN2LAAAAAA [08-08-2022 12:12:04]6054: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 12:12:04]6054: WAF :: fetched 839 new logs [08-08-2022 12:13:02]9371: WAF :: fetched 104 new logs [08-08-2022 12:14:01]12498: WAF :: fetched 100 new logs [08-08-2022 12:15:02]16204: WAF :: fetched 105 new logs [08-08-2022 12:16:01]19495: WAF :: fetched 112 new logs [08-08-2022 12:17:02]22750: WAF :: fetched 2 new logs [08-08-2022 12:19:02]29714: WAF :: fetched 2 new logs [08-08-2022 12:21:02]3949: WAF :: fetched 1 new logs [08-08-2022 12:22:01]7180: WAF :: fetched 2 new logs [08-08-2022 12:23:02]10478: WAF :: fetched 1 new logs [08-08-2022 12:24:01]13660: WAF :: fetched 4 new logs [08-08-2022 12:25:02]17426: WAF :: fetched 2 new logs [08-08-2022 12:27:01]24163: WAF :: fetched 2 new logs [08-08-2022 12:29:01]30826: WAF :: fetched 1 new logs [08-08-2022 12:30:02]1726: WAF :: fetched 1 new logs [08-08-2022 12:31:01]5051: WAF :: fetched 1 new logs [08-08-2022 12:33:01]11580: WAF :: fetched 2 new logs [08-08-2022 12:34:02]14794: WAF :: fetched 3 new logs [08-08-2022 12:38:01]28627: WAF :: fetched 2 new logs [08-08-2022 12:41:01]6081: WAF :: fetched 1 new logs [08-08-2022 12:41:01]6081: Checking for user cron vulnerabilities [08-08-2022 12:43:01]12605: WAF :: fetched 1 new logs [08-08-2022 12:44:02]15839: Checking ditributed CMS bruteforce attacks [08-08-2022 12:45:01]: Checking for software updates [08-08-2022 12:46:01]22814: WAF :: fetched 1 new logs [08-08-2022 12:50:02]3896: WAF :: fetched 3 new logs [08-08-2022 12:51:01]7208: WAF :: fetched 1 new logs [08-08-2022 12:52:02]10588: WAF :: fetched 2 new logs [08-08-2022 12:55:01]20225: WAF :: fetched 1 new logs [08-08-2022 13:04:01]18343: WAF :: fetched 3 new logs [08-08-2022 13:07:01]28875: WAF :: fetched 2 new logs [08-08-2022 13:08:02]32211: WAF :: fetched 1 new logs [08-08-2022 13:12:01]13011: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659975121 [08-08-2022 13:12:01]13011: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 13:12:03]13011: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 13:12:04]13011: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-1312/20220808-131201-YvE10a-6jRwbhifFe2lLqQAAAAM [08-08-2022 13:12:04]13011: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 13:12:04]13011: WAF :: fetched 1 new logs [08-08-2022 13:14:01]19639: WAF :: fetched 2 new logs [08-08-2022 13:17:02]30268: WAF :: fetched 1 new logs [08-08-2022 13:18:01]1224: WAF :: fetched 2 new logs [08-08-2022 13:19:02]4693: WAF :: fetched 5 new logs [08-08-2022 13:20:01]7950: WAF :: fetched 2 new logs [08-08-2022 13:23:01]17842: WAF :: fetched 1 new logs [08-08-2022 13:26:01]28372: WAF :: fetched 2 new logs [08-08-2022 13:27:01]31689: WAF :: fetched 1 new logs [08-08-2022 13:28:02]2719: WAF :: fetched 1 new logs [08-08-2022 13:30:02]9097: WAF :: fetched 5 new logs [08-08-2022 13:39:01]7007: WAF :: fetched 1 new logs [08-08-2022 13:41:01]13424: Checking for user cron vulnerabilities [08-08-2022 13:44:01]23260: Checking ditributed CMS bruteforce attacks [08-08-2022 13:45:01]: Checking for definition updates [08-08-2022 13:48:02]4469: WAF :: fetched 2 new logs [08-08-2022 13:50:02]11101: WAF :: fetched 2 new logs [08-08-2022 14:05:01]29052: WAF :: fetched 1 new logs [08-08-2022 14:10:01]13549: WAF :: fetched 1 new logs [08-08-2022 14:12:01]20087: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659978721 [08-08-2022 14:12:01]20087: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 14:12:03]20087: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 14:12:04]20087: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-1412/20220808-141201-YvFD4Z35T0E5d44iGGchEwAAAAw [08-08-2022 14:12:04]20087: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 14:12:04]20087: WAF :: fetched 1 new logs [08-08-2022 14:13:02]23419: WAF :: fetched 2 new logs [08-08-2022 14:19:01]11330: WAF :: fetched 2 new logs [08-08-2022 14:22:02]21135: WAF :: fetched 2 new logs [08-08-2022 14:23:01]24527: WAF :: fetched 1 new logs [08-08-2022 14:28:01]9110: WAF :: fetched 3 new logs [08-08-2022 14:29:01]12310: WAF :: fetched 1 new logs [08-08-2022 14:30:02]15534: WAF :: fetched 1 new logs [08-08-2022 14:31:01]18825: WAF :: fetched 1 new logs [08-08-2022 14:32:02]22183: WAF :: fetched 2 new logs [08-08-2022 14:33:01]25651: WAF :: fetched 2 new logs [08-08-2022 14:34:02]29029: WAF :: fetched 3 new logs [08-08-2022 14:35:01]32271: WAF :: fetched 1 new logs [08-08-2022 14:36:01]3254: WAF :: fetched 1 new logs [08-08-2022 14:37:01]7042: WAF :: fetched 4 new logs [08-08-2022 14:38:02]10365: WAF :: fetched 4 new logs [08-08-2022 14:39:01]13517: WAF :: fetched 5 new logs [08-08-2022 14:41:01]20139: WAF :: fetched 2 new logs [08-08-2022 14:41:01]20139: Checking for user cron vulnerabilities [08-08-2022 14:42:01]23418: WAF :: fetched 3 new logs [08-08-2022 14:43:01]26906: WAF :: fetched 1 new logs [08-08-2022 14:44:01]30171: Checking ditributed CMS bruteforce attacks [08-08-2022 14:44:01]30171: WAF :: fetched 3 new logs [08-08-2022 14:46:02]4341: WAF :: fetched 2 new logs [08-08-2022 14:47:01]7973: WAF :: fetched 1 new logs [08-08-2022 14:48:02]11269: WAF :: fetched 1 new logs [08-08-2022 14:49:01]14435: WAF :: fetched 3 new logs [08-08-2022 14:50:01]17631: WAF :: fetched 3 new logs [08-08-2022 14:51:01]20920: WAF :: fetched 1 new logs [08-08-2022 14:52:01]24258: WAF :: fetched 3 new logs [08-08-2022 14:53:01]27723: WAF :: fetched 2 new logs [08-08-2022 14:53:02]27732: Updated license status via CDN [08-08-2022 14:54:01]30994: WAF :: fetched 2 new logs [08-08-2022 14:58:01]11829: WAF :: fetched 2 new logs [08-08-2022 14:59:01]15135: WAF :: fetched 1 new logs [08-08-2022 15:00:01]18001: WAF :: fetched 2 new logs [08-08-2022 15:01:01]21717: WAF :: fetched 4 new logs [08-08-2022 15:01:01]21705: Reseting cPGuard inotify settings [08-08-2022 15:02:01]25162: WAF :: fetched 2 new logs [08-08-2022 15:03:01]28506: WAF :: fetched 3 new logs [08-08-2022 15:04:01]31759: WAF :: fetched 2 new logs [08-08-2022 15:06:01]5977: WAF :: fetched 1 new logs [08-08-2022 15:07:01]9204: WAF :: fetched 4 new logs [08-08-2022 15:12:01]26235: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659982321 [08-08-2022 15:12:01]26235: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 15:12:03]26235: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 15:12:03]26235: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-1512/20220808-151201-YvFR8WXXP9qsvGpVQ6neWQAAAAI [08-08-2022 15:12:03]26235: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 15:12:04]26235: WAF :: fetched 1 new logs [08-08-2022 15:15:01]3827: WAF :: fetched 1 new logs [08-08-2022 15:16:02]7284: WAF :: fetched 1 new logs [08-08-2022 15:17:01]10413: WAF :: fetched 1 new logs [08-08-2022 15:20:02]21012: WAF :: fetched 1 new logs [08-08-2022 15:23:01]31096: WAF :: fetched 1 new logs [08-08-2022 15:25:01]5184: WAF :: fetched 5 new logs [08-08-2022 15:32:01]28600: WAF :: fetched 2 new logs [08-08-2022 15:35:01]5954: WAF :: fetched 1 new logs [08-08-2022 15:37:02]12401: WAF :: fetched 2 new logs [08-08-2022 15:41:01]26090: WAF :: fetched 1 new logs [08-08-2022 15:41:01]26090: Checking for user cron vulnerabilities [08-08-2022 15:43:02]32688: WAF :: fetched 2 new logs [08-08-2022 15:44:01]3593: Checking ditributed CMS bruteforce attacks [08-08-2022 15:44:01]3593: WAF :: fetched 1 new logs [08-08-2022 15:48:01]17245: WAF :: fetched 2 new logs [08-08-2022 15:50:01]23487: WAF :: fetched 1 new logs [08-08-2022 15:55:01]7677: WAF :: fetched 1 new logs [08-08-2022 15:57:01]14196: WAF :: fetched 2 new logs [08-08-2022 15:58:02]18081: WAF :: fetched 3 new logs [08-08-2022 16:00:01]24466: WAF :: fetched 5 new logs [08-08-2022 16:01:01]28279: WAF :: fetched 1 new logs [08-08-2022 16:04:01]5642: WAF :: fetched 1 new logs [08-08-2022 16:06:02]12098: WAF :: fetched 4 new logs [08-08-2022 16:07:01]15288: WAF :: fetched 2 new logs [08-08-2022 16:11:01]29059: WAF :: fetched 2 new logs [08-08-2022 16:12:01]32227: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659985921 [08-08-2022 16:12:01]32227: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 16:12:03]32227: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 16:12:03]32227: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-1612/20220808-161201-YvFgAarC-m195lalJsg3MQAAAAc [08-08-2022 16:12:03]32227: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 16:12:04]32227: WAF :: fetched 1 new logs [08-08-2022 16:14:01]6482: WAF :: fetched 1 new logs [08-08-2022 16:19:01]23605: WAF :: fetched 3 new logs [08-08-2022 16:24:01]8007: WAF :: fetched 1 new logs [08-08-2022 16:29:02]25024: WAF :: fetched 1 new logs [08-08-2022 16:31:01]31592: WAF :: fetched 1 new logs [08-08-2022 16:39:01]25952: WAF :: fetched 1 new logs [08-08-2022 16:41:01]32643: Checking for user cron vulnerabilities [08-08-2022 16:42:01]3604: WAF :: fetched 2 new logs [08-08-2022 16:43:01]6844: WAF :: fetched 4 new logs [08-08-2022 16:44:01]10083: Checking ditributed CMS bruteforce attacks [08-08-2022 16:44:01]10083: WAF :: fetched 1 new logs [08-08-2022 16:45:01]13279: WAF :: fetched 1 new logs [08-08-2022 16:51:01]1207: WAF :: fetched 1 new logs [08-08-2022 16:52:02]4144: WAF :: fetched 2 new logs [08-08-2022 16:53:01]7322: WAF :: fetched 2 new logs [08-08-2022 16:54:02]10601: WAF :: fetched 2 new logs [08-08-2022 16:56:01]17022: WAF :: fetched 1 new logs [08-08-2022 17:06:01]17514: WAF :: fetched 31 new logs [08-08-2022 17:07:02]20750: WAF :: fetched 43 new logs [08-08-2022 17:08:01]23971: WAF :: fetched 45 new logs [08-08-2022 17:09:02]27263: WAF :: fetched 48 new logs [08-08-2022 17:10:01]31123: WAF :: fetched 15 new logs [08-08-2022 17:11:02]2016: WAF :: fetched 54 new logs [08-08-2022 17:12:01]5129: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659989521 [08-08-2022 17:12:01]5129: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 17:12:03]5129: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 17:12:04]5129: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-1712/20220808-171201-YvFuER-3RPUTylYvWuBkJwAAAAI [08-08-2022 17:12:04]5129: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 17:12:04]5129: WAF :: fetched 29 new logs [08-08-2022 17:13:02]8303: WAF :: fetched 50 new logs [08-08-2022 17:14:01]11600: WAF :: fetched 51 new logs [08-08-2022 17:15:02]14870: WAF :: fetched 62 new logs [08-08-2022 17:16:01]18023: WAF :: fetched 59 new logs [08-08-2022 17:17:02]21353: WAF :: fetched 20 new logs [08-08-2022 17:19:02]28186: WAF :: fetched 1 new logs [08-08-2022 17:21:02]2833: WAF :: fetched 1 new logs [08-08-2022 17:22:01]5975: WAF :: fetched 1 new logs [08-08-2022 17:23:01]9073: WAF :: fetched 1 new logs [08-08-2022 17:25:01]15639: WAF :: fetched 1 new logs [08-08-2022 17:26:01]18858: WAF :: fetched 7 new logs [08-08-2022 17:29:01]28826: WAF :: fetched 2 new logs [08-08-2022 17:31:01]3559: WAF :: fetched 3 new logs [08-08-2022 17:32:01]6807: WAF :: fetched 7 new logs [08-08-2022 17:33:01]9973: WAF :: fetched 4 new logs [08-08-2022 17:34:01]13281: WAF :: fetched 1 new logs [08-08-2022 17:35:02]16490: WAF :: fetched 5 new logs [08-08-2022 17:36:01]19665: WAF :: fetched 4 new logs [08-08-2022 17:41:01]4232: Checking for user cron vulnerabilities [08-08-2022 17:43:01]10546: WAF :: fetched 1 new logs [08-08-2022 17:44:01]13778: Checking ditributed CMS bruteforce attacks [08-08-2022 17:48:01]26688: WAF :: fetched 5 new logs [08-08-2022 17:49:02]30108: WAF :: fetched 2 new logs [08-08-2022 17:50:01]1453: WAF :: fetched 2 new logs [08-08-2022 17:51:02]4869: WAF :: fetched 3 new logs [08-08-2022 17:54:01]14452: WAF :: fetched 2 new logs [08-08-2022 17:55:02]17742: WAF :: fetched 34 new logs [08-08-2022 17:56:01]20983: WAF :: fetched 74 new logs [08-08-2022 17:57:02]24406: WAF :: fetched 79 new logs [08-08-2022 17:58:01]27647: WAF :: fetched 65 new logs [08-08-2022 17:59:02]31045: WAF :: fetched 65 new logs [08-08-2022 18:00:01]2007: WAF :: fetched 79 new logs [08-08-2022 18:01:01]5853: WAF :: fetched 73 new logs [08-08-2022 18:02:01]9048: WAF :: fetched 63 new logs [08-08-2022 18:03:01]12212: WAF :: fetched 67 new logs [08-08-2022 18:04:01]15414: WAF :: fetched 97 new logs [08-08-2022 18:05:01]18603: WAF :: fetched 88 new logs [08-08-2022 18:06:01]21832: WAF :: fetched 94 new logs [08-08-2022 18:07:01]25114: WAF :: fetched 95 new logs [08-08-2022 18:08:01]28330: WAF :: fetched 83 new logs [08-08-2022 18:09:01]31545: WAF :: fetched 80 new logs [08-08-2022 18:10:01]2515: WAF :: fetched 81 new logs [08-08-2022 18:11:01]6351: WAF :: fetched 81 new logs [08-08-2022 18:12:02]9520: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659993122 [08-08-2022 18:12:02]9520: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 18:12:04]9520: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 18:12:04]9520: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-1812/20220808-181202-YvF8IjOzVtOsFO0lR4RvuQAAAA8 [08-08-2022 18:12:04]9520: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 18:12:04]9520: WAF :: fetched 88 new logs [08-08-2022 18:13:01]12596: WAF :: fetched 84 new logs [08-08-2022 18:14:01]15820: WAF :: fetched 100 new logs [08-08-2022 18:15:02]18947: WAF :: fetched 95 new logs [08-08-2022 18:16:02]22165: WAF :: fetched 80 new logs [08-08-2022 18:17:01]25562: WAF :: fetched 93 new logs [08-08-2022 18:18:02]28907: WAF :: fetched 98 new logs [08-08-2022 18:19:01]31829: WAF :: fetched 86 new logs [08-08-2022 18:20:01]2959: WAF :: fetched 77 new logs [08-08-2022 18:21:01]6413: WAF :: fetched 84 new logs [08-08-2022 18:22:01]9540: WAF :: fetched 87 new logs [08-08-2022 18:23:02]12786: WAF :: fetched 11 new logs [08-08-2022 18:35:01]19552: WAF :: fetched 4 new logs [08-08-2022 18:40:02]3633: WAF :: fetched 1 new logs [08-08-2022 18:41:01]7419: Checking for user cron vulnerabilities [08-08-2022 18:44:01]16890: Checking ditributed CMS bruteforce attacks [08-08-2022 18:51:01]7689: WAF :: fetched 1 new logs [08-08-2022 18:52:01]10852: WAF :: fetched 2 new logs [08-08-2022 18:53:01]14023: WAF :: fetched 2 new logs [08-08-2022 18:54:01]17189: WAF :: fetched 1 new logs [08-08-2022 19:06:02]24626: WAF :: fetched 2 new logs [08-08-2022 19:11:02]8346: WAF :: fetched 1 new logs [08-08-2022 19:12:01]12084: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1659996721 [08-08-2022 19:12:01]12084: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 19:12:03]12084: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 19:12:04]12084: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-1912/20220808-191201-YvGKMRYZ6HV6XKVopg-_sgAAAAA [08-08-2022 19:12:04]12084: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 19:12:04]12084: WAF :: fetched 1 new logs [08-08-2022 19:13:01]15204: WAF :: fetched 2 new logs [08-08-2022 19:14:01]18386: WAF :: fetched 7 new logs [08-08-2022 19:15:01]21695: WAF :: fetched 1 new logs [08-08-2022 19:18:01]31449: WAF :: fetched 1 new logs [08-08-2022 19:22:01]12201: WAF :: fetched 1 new logs [08-08-2022 19:30:01]5684: WAF :: fetched 1 new logs [08-08-2022 19:35:01]22426: WAF :: fetched 1 new logs [08-08-2022 19:41:02]9635: Checking for user cron vulnerabilities [08-08-2022 19:44:01]19735: Checking ditributed CMS bruteforce attacks [08-08-2022 19:45:01]: Checking for definition updates [08-08-2022 19:46:01]26309: WAF :: fetched 1 new logs [08-08-2022 19:51:01]10043: WAF :: fetched 1 new logs [08-08-2022 19:52:01]13713: WAF :: fetched 1 new logs [08-08-2022 19:56:01]26689: WAF :: fetched 1 new logs [08-08-2022 19:59:01]3965: WAF :: fetched 3 new logs [08-08-2022 20:00:01]6914: WAF :: fetched 3 new logs [08-08-2022 20:01:01]10530: WAF :: fetched 2 new logs [08-08-2022 20:05:02]23896: WAF :: fetched 3 new logs [08-08-2022 20:06:01]27199: WAF :: fetched 1 new logs [08-08-2022 20:11:02]11098: WAF :: fetched 1 new logs [08-08-2022 20:12:01]14238: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660000321 [08-08-2022 20:12:01]14238: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 20:12:03]14238: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 20:12:04]14238: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-2012/20220808-201201-YvGYQRDsanoQ3nZp8PylcAAAABE [08-08-2022 20:12:04]14238: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 20:12:04]14238: WAF :: fetched 1 new logs [08-08-2022 20:16:01]27720: WAF :: fetched 2 new logs [08-08-2022 20:17:02]30650: WAF :: fetched 7 new logs [08-08-2022 20:22:01]14513: WAF :: fetched 1 new logs [08-08-2022 20:23:02]18137: WAF :: fetched 5 new logs [08-08-2022 20:27:02]31151: WAF :: fetched 1 new logs [08-08-2022 20:28:01]1921: WAF :: fetched 1 new logs [08-08-2022 20:30:01]8333: WAF :: fetched 1 new logs [08-08-2022 20:38:02]2229: WAF :: fetched 1 new logs [08-08-2022 20:39:01]5319: WAF :: fetched 6 new logs [08-08-2022 20:40:01]8548: WAF :: fetched 1 new logs [08-08-2022 20:41:01]11793: Checking for user cron vulnerabilities [08-08-2022 20:43:01]18561: WAF :: fetched 3 new logs [08-08-2022 20:44:01]21704: Checking ditributed CMS bruteforce attacks [08-08-2022 20:44:01]21704: WAF :: fetched 3 new logs [08-08-2022 20:45:01]25108: WAF :: fetched 2 new logs [08-08-2022 20:46:01]28354: WAF :: fetched 2 new logs [08-08-2022 20:47:01]31481: WAF :: fetched 1 new logs [08-08-2022 20:49:01]5346: WAF :: fetched 6 new logs [08-08-2022 20:55:01]25128: WAF :: fetched 2 new logs [08-08-2022 20:56:01]28452: WAF :: fetched 1 new logs [08-08-2022 20:58:01]2460: WAF :: fetched 1 new logs [08-08-2022 21:12:02]15364: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660003922 [08-08-2022 21:12:02]15364: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 21:12:04]15364: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 21:12:04]15364: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-2112/20220808-211202-YvGmUpWPMl1vTuSgXFywQAAAAA4 [08-08-2022 21:12:04]15364: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 21:12:04]15364: WAF :: fetched 2 new logs [08-08-2022 21:14:01]22209: WAF :: fetched 2 new logs [08-08-2022 21:16:01]28824: WAF :: fetched 1 new logs [08-08-2022 21:21:01]12382: WAF :: fetched 2 new logs [08-08-2022 21:41:01]13087: Checking for user cron vulnerabilities [08-08-2022 21:44:01]23093: Checking ditributed CMS bruteforce attacks [08-08-2022 21:55:01]26625: WAF :: fetched 1 new logs [08-08-2022 21:57:01]661: WAF :: fetched 4 new logs [08-08-2022 21:59:01]7044: WAF :: fetched 1 new logs [08-08-2022 22:06:02]30392: WAF :: fetched 5 new logs [08-08-2022 22:07:01]1075: WAF :: fetched 3 new logs [08-08-2022 22:07:08]1081: Performing Domain reputation checks [08-08-2022 22:08:02]4353: WAF :: fetched 2 new logs [08-08-2022 22:12:02]17082: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660007522 [08-08-2022 22:12:02]17082: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 22:12:04]17082: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 22:12:04]17082: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-2212/20220808-221202-YvG0YtCNCpwdzozkEPaeZAAAAAA [08-08-2022 22:12:04]17082: WAF :: No suitable log file found. Using SQLite.. [08-08-2022 22:12:04]17082: WAF :: fetched 2 new logs [08-08-2022 22:13:01]20264: WAF :: fetched 4 new logs [08-08-2022 22:14:02]23466: WAF :: fetched 1 new logs [08-08-2022 22:18:02]4786: WAF :: fetched 2 new logs [08-08-2022 22:19:01]8002: WAF :: fetched 1 new logs [08-08-2022 22:26:01]31855: WAF :: fetched 17 new logs [08-08-2022 22:27:01]2021: WAF :: fetched 24 new logs [08-08-2022 22:29:02]7218: WAF :: fetched 3 new logs [08-08-2022 22:31:01]12644: WAF :: fetched 2 new logs [08-08-2022 22:33:01]17878: WAF :: fetched 6 new logs [08-08-2022 22:34:01]20495: WAF :: fetched 3 new logs [08-08-2022 22:35:01]23148: WAF :: fetched 5 new logs [08-08-2022 22:36:01]25814: WAF :: fetched 2 new logs [08-08-2022 22:38:01]30915: WAF :: fetched 4 new logs [08-08-2022 22:39:02]1076: WAF :: fetched 1 new logs [08-08-2022 22:40:01]3830: WAF :: fetched 4 new logs [08-08-2022 22:41:02]6409: WAF :: fetched 1 new logs [08-08-2022 22:41:02]6409: Checking for user cron vulnerabilities [08-08-2022 22:44:01]14162: Checking ditributed CMS bruteforce attacks [08-08-2022 22:44:01]14162: WAF :: fetched 1 new logs [08-08-2022 22:45:02]16852: WAF :: fetched 2 new logs [08-08-2022 22:47:02]22087: WAF :: fetched 1 new logs [08-08-2022 22:48:01]24615: WAF :: fetched 4 new logs [08-08-2022 22:49:02]27181: WAF :: fetched 3 new logs [08-08-2022 22:50:01]29751: WAF :: fetched 5 new logs [08-08-2022 22:51:01]32500: WAF :: fetched 1 new logs [08-08-2022 22:52:01]2737: WAF :: fetched 2 new logs [08-08-2022 22:54:01]7857: WAF :: fetched 1 new logs [08-08-2022 22:55:01]10608: WAF :: fetched 6 new logs [08-08-2022 22:56:01]13192: WAF :: fetched 3 new logs [08-08-2022 23:05:01]4477: WAF :: fetched 1 new logs [08-08-2022 23:07:01]9630: WAF :: fetched 2 new logs [08-08-2022 23:07:52]9788: Performed RBL check for 23.111.136.34. [08-08-2022 23:08:01]12191: WAF :: fetched 3 new logs [08-08-2022 23:09:01]14758: WAF :: fetched 3 new logs [08-08-2022 23:12:02]22634: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660011122 [08-08-2022 23:12:02]22634: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [08-08-2022 23:12:04]22634: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [08-08-2022 23:12:04]22634: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220808/20220808-2312/20220808-231202-YvHCct8DVrRBoUwtxLy3NQAAAAU [08-08-2022 23:12:04]22634: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [08-08-2022 23:12:05]22634: WAF :: fetched 1 new logs [08-08-2022 23:13:01]25150: WAF :: fetched 4 new logs [08-08-2022 23:14:02]27693: WAF :: fetched 3 new logs [08-08-2022 23:15:01]30371: WAF :: fetched 5 new logs [08-08-2022 23:17:01]3263: WAF :: fetched 3 new logs [08-08-2022 23:19:01]8366: WAF :: fetched 8 new logs [08-08-2022 23:22:02]16186: WAF :: fetched 1 new logs [08-08-2022 23:23:01]18697: WAF :: fetched 2 new logs [08-08-2022 23:24:02]21363: WAF :: fetched 4 new logs [08-08-2022 23:25:02]23996: WAF :: fetched 2 new logs [08-08-2022 23:27:01]29127: WAF :: fetched 4 new logs [08-08-2022 23:28:02]31707: WAF :: fetched 1 new logs [08-08-2022 23:33:01]12296: WAF :: fetched 7 new logs [08-08-2022 23:36:01]20117: WAF :: fetched 2 new logs [08-08-2022 23:40:01]30348: WAF :: fetched 2 new logs [08-08-2022 23:41:02]701: Checking for user cron vulnerabilities [08-08-2022 23:43:01]5807: WAF :: fetched 1 new logs [08-08-2022 23:44:01]8557: Checking ditributed CMS bruteforce attacks [08-08-2022 23:44:01]8557: WAF :: fetched 1 new logs [08-08-2022 23:45:02]11170: WAF :: fetched 2 new logs [08-08-2022 23:46:02]13746: WAF :: fetched 6 new logs [08-08-2022 23:47:01]16228: WAF :: fetched 4 new logs [08-08-2022 23:48:01]18848: WAF :: fetched 2 new logs [08-08-2022 23:49:02]21445: WAF :: fetched 2 new logs [08-08-2022 23:50:01]24126: WAF :: fetched 3 new logs [08-08-2022 23:51:02]26743: WAF :: fetched 5 new logs [08-08-2022 23:54:02]2193: WAF :: fetched 7 new logs [08-08-2022 23:55:02]4917: WAF :: fetched 9 new logs [08-08-2022 23:56:01]7553: httpd.conf changed. Refreshing watchlist. [08-08-2022 23:56:01]7548: WAF :: fetched 1 new logs [08-08-2022 23:57:02]10146: WAF :: fetched 5 new logs [08-08-2022 23:58:02]12740: WAF :: fetched 4 new logs [09-08-2022 00:01:01]20995: httpd.conf changed. Refreshing watchlist. [09-08-2022 00:01:05]21004: Sending daily report for August 9, 2022 [09-08-2022 00:02:02]23740: WAF :: fetched 1 new logs [09-08-2022 00:04:01]28727: WAF :: fetched 8 new logs [09-08-2022 00:05:02]31485: WAF :: fetched 1 new logs [09-08-2022 00:05:02]31485: Deleted 0 entries older than 6 MONTH from scanner_logs [09-08-2022 00:05:02]31485: Deleted 0 files from Quarantine [09-08-2022 00:06:02]1722: WAF :: fetched 1 new logs [09-08-2022 00:08:02]6943: WAF :: fetched 18 new logs [09-08-2022 00:10:01]12070: WAF :: fetched 2 new logs [09-08-2022 00:11:02]14790: WAF :: fetched 10 new logs [09-08-2022 00:12:01]17350: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660014721 [09-08-2022 00:12:01]17350: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 00:12:03]17350: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 00:12:03]17350: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-0012/20220809-001201-YvHQgVvf5g1WO9g5zIG0fgAAACI [09-08-2022 00:12:03]17350: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 00:12:04]17350: WAF :: fetched 108 new logs [09-08-2022 00:13:01]19924: WAF :: fetched 1 new logs [09-08-2022 00:14:02]22507: WAF :: fetched 1 new logs [09-08-2022 00:15:01]25008: WAF :: fetched 2 new logs [09-08-2022 00:16:01]27748: WAF :: fetched 30 new logs [09-08-2022 00:19:01]3068: WAF :: fetched 3 new logs [09-08-2022 00:20:01]5686: WAF :: fetched 2 new logs [09-08-2022 00:21:01]8404: WAF :: fetched 4 new logs [09-08-2022 00:23:02]13554: WAF :: fetched 1 new logs [09-08-2022 00:25:01]18683: WAF :: fetched 3 new logs [09-08-2022 00:28:02]26538: WAF :: fetched 3 new logs [09-08-2022 00:30:01]31661: WAF :: fetched 2 new logs [09-08-2022 00:31:02]2055: WAF :: fetched 3 new logs [09-08-2022 00:32:01]4466: WAF :: fetched 1 new logs [09-08-2022 00:33:01]7248: WAF :: fetched 1 new logs [09-08-2022 00:37:01]17910: WAF :: fetched 1 new logs [09-08-2022 00:37:01]17919: httpd.conf changed. Refreshing watchlist. [09-08-2022 00:38:02]20547: WAF :: fetched 1 new logs [09-08-2022 00:38:02]20534: httpd.conf changed. Refreshing watchlist. [09-08-2022 00:39:01]23114: WAF :: fetched 3 new logs [09-08-2022 00:41:01]28411: WAF :: fetched 1 new logs [09-08-2022 00:41:01]28411: Checking for user cron vulnerabilities [09-08-2022 00:42:01]30950: WAF :: fetched 1 new logs [09-08-2022 00:44:01]3829: Checking ditributed CMS bruteforce attacks [09-08-2022 00:44:01]3829: WAF :: fetched 1 new logs [09-08-2022 00:45:01]: Checking for software updates [09-08-2022 00:47:01]11919: WAF :: fetched 4 new logs [09-08-2022 00:49:02]17133: WAF :: fetched 2 new logs [09-08-2022 00:51:01]22478: WAF :: fetched 2 new logs [09-08-2022 00:52:01]25080: WAF :: fetched 3 new logs [09-08-2022 00:54:01]30219: WAF :: fetched 1 new logs [09-08-2022 00:55:01]310: WAF :: fetched 1 new logs [09-08-2022 00:59:02]10850: WAF :: fetched 6 new logs [09-08-2022 01:02:01]19717: WAF :: fetched 1 new logs [09-08-2022 01:03:02]22662: WAF :: fetched 1 new logs [09-08-2022 01:04:01]25507: WAF :: fetched 3 new logs [09-08-2022 01:05:01]28521: WAF :: fetched 3 new logs [09-08-2022 01:06:02]31542: WAF :: fetched 1 new logs [09-08-2022 01:12:02]15820: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660018322 [09-08-2022 01:12:02]15820: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 01:12:04]15820: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 01:12:04]15820: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-0112/20220809-011202-YvHeklP7j5vegSJh4k-RIAAAAA0 [09-08-2022 01:12:04]15820: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 01:12:04]15820: WAF :: fetched 4 new logs [09-08-2022 01:14:01]21456: WAF :: fetched 3 new logs [09-08-2022 01:15:01]24081: WAF :: fetched 1 new logs [09-08-2022 01:16:02]27088: WAF :: fetched 2 new logs [09-08-2022 01:18:01]395: WAF :: fetched 1 new logs [09-08-2022 01:19:01]3415: WAF :: fetched 1 new logs [09-08-2022 01:21:02]9190: WAF :: fetched 1 new logs [09-08-2022 01:24:01]17531: WAF :: fetched 2 new logs [09-08-2022 01:27:01]26370: WAF :: fetched 2 new logs [09-08-2022 01:28:01]29219: WAF :: fetched 4 new logs [09-08-2022 01:29:02]31839: WAF :: fetched 4 new logs [09-08-2022 01:30:01]2566: WAF :: fetched 4 new logs [09-08-2022 01:31:01]5544: WAF :: fetched 3 new logs [09-08-2022 01:33:01]11309: WAF :: fetched 2 new logs [09-08-2022 01:41:01]1406: Checking for user cron vulnerabilities [09-08-2022 01:42:02]4421: WAF :: fetched 6 new logs [09-08-2022 01:43:01]6982: WAF :: fetched 1 new logs [09-08-2022 01:44:02]9519: Checking ditributed CMS bruteforce attacks [09-08-2022 01:45:01]: Checking for definition updates [09-08-2022 01:45:01]11980: WAF :: fetched 2 new logs [09-08-2022 01:46:01]14916: WAF :: fetched 3 new logs [09-08-2022 01:47:02]17742: WAF :: fetched 3 new logs [09-08-2022 01:49:01]23141: WAF :: fetched 1 new logs [09-08-2022 01:50:01]25770: WAF :: fetched 8 new logs [09-08-2022 01:51:01]28515: WAF :: fetched 3 new logs [09-08-2022 01:53:01]1255: WAF :: fetched 2 new logs [09-08-2022 01:54:02]3923: WAF :: fetched 8 new logs [09-08-2022 01:55:01]6599: WAF :: fetched 24 new logs [09-08-2022 01:56:02]9317: WAF :: fetched 1 new logs [09-08-2022 01:57:01]11879: WAF :: fetched 2 new logs [09-08-2022 01:58:01]14516: WAF :: fetched 2 new logs [09-08-2022 01:59:01]17045: WAF :: fetched 3 new logs [09-08-2022 02:00:02]19376: WAF :: fetched 6 new logs [09-08-2022 02:01:01]22548: WAF :: fetched 2 new logs [09-08-2022 02:02:01]25177: WAF :: fetched 2 new logs [09-08-2022 02:03:01]27770: WAF :: fetched 7 new logs [09-08-2022 02:04:01]30364: WAF :: fetched 4 new logs [09-08-2022 02:05:02]477: WAF :: fetched 4 new logs [09-08-2022 02:06:01]3338: WAF :: fetched 2 new logs [09-08-2022 02:07:02]5905: WAF :: fetched 2 new logs [09-08-2022 02:08:01]8450: WAF :: fetched 1 new logs [09-08-2022 02:09:02]11058: WAF :: fetched 2 new logs [09-08-2022 02:10:01]13651: WAF :: fetched 4 new logs [09-08-2022 02:11:01]16371: WAF :: fetched 6 new logs [09-08-2022 02:12:02]18939: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660021922 [09-08-2022 02:12:02]18939: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 02:12:04]18939: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 02:12:04]18939: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-0212/20220809-021202-YvHsot2wFGkLcI26hTPFEAAAAAc [09-08-2022 02:12:04]18939: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 02:12:04]18939: WAF :: fetched 3 new logs [09-08-2022 02:13:01]21498: WAF :: fetched 4 new logs [09-08-2022 02:14:02]24107: WAF :: fetched 2 new logs [09-08-2022 02:15:01]26689: WAF :: fetched 1 new logs [09-08-2022 02:16:01]29404: WAF :: fetched 8 new logs [09-08-2022 02:17:01]31988: WAF :: fetched 1 new logs [09-08-2022 02:18:01]2297: WAF :: fetched 1 new logs [09-08-2022 02:19:01]5615: WAF :: fetched 1 new logs [09-08-2022 02:20:01]8715: WAF :: fetched 2 new logs [09-08-2022 02:23:01]16776: WAF :: fetched 1 new logs [09-08-2022 02:30:01]3672: WAF :: fetched 1 new logs [09-08-2022 02:32:01]9542: WAF :: fetched 1 new logs [09-08-2022 02:33:01]12156: WAF :: fetched 2 new logs [09-08-2022 02:34:01]14922: WAF :: fetched 1 new logs [09-08-2022 02:36:01]20319: WAF :: fetched 1 new logs [09-08-2022 02:40:02]31108: WAF :: fetched 4 new logs [09-08-2022 02:41:01]1426: WAF :: fetched 1 new logs [09-08-2022 02:41:01]1426: Checking for user cron vulnerabilities [09-08-2022 02:42:01]4424: WAF :: fetched 1 new logs [09-08-2022 02:43:01]7362: WAF :: fetched 3 new logs [09-08-2022 02:44:01]10129: Checking ditributed CMS bruteforce attacks [09-08-2022 02:44:01]10129: WAF :: fetched 13 new logs [09-08-2022 02:45:01]12998: WAF :: fetched 3 new logs [09-08-2022 02:46:01]16065: WAF :: fetched 2 new logs [09-08-2022 02:47:01]18923: WAF :: fetched 4 new logs [09-08-2022 02:48:01]21723: WAF :: fetched 4 new logs [09-08-2022 02:53:02]2665: Updated license status via CDN [09-08-2022 02:55:01]7806: WAF :: fetched 3 new logs [09-08-2022 02:56:02]10519: WAF :: fetched 1 new logs [09-08-2022 02:58:02]15737: WAF :: fetched 1 new logs [09-08-2022 02:59:01]18332: WAF :: fetched 1 new logs [09-08-2022 03:00:02]20640: Found and updated 31 CMS installations [09-08-2022 03:02:01]26820: WAF :: fetched 4 new logs [09-08-2022 03:02:15]20640: Sending CMS version vulnerability report emails to cpanel users [09-08-2022 03:02:19]20640: Checking wordpress installations for suspicious directories [09-08-2022 03:04:01]32466: WAF :: fetched 2 new logs [09-08-2022 03:04:30]29672: Sending CMS version vulnerability report emails to cpanel users [09-08-2022 03:04:33]29672: Checking wordpress installations for suspicious directories [09-08-2022 03:05:01]3098: WAF :: fetched 4 new logs [09-08-2022 03:07:01]8357: WAF :: fetched 2 new logs [09-08-2022 03:08:01]10933: WAF :: fetched 3 new logs [09-08-2022 03:09:01]13497: WAF :: fetched 5 new logs [09-08-2022 03:10:01]16134: WAF :: fetched 3 new logs [09-08-2022 03:11:01]18816: WAF :: fetched 1 new logs [09-08-2022 03:12:01]21436: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660025521 [09-08-2022 03:12:01]21436: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 03:12:03]21436: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 03:12:04]21436: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-0312/20220809-031201-YvH6sYIi07Wpc2XHCBL7cAAAAAA [09-08-2022 03:12:04]21436: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 03:12:04]21436: WAF :: fetched 2 new logs [09-08-2022 03:13:01]21066: WAF :: fetched 3 new logs [09-08-2022 03:14:01]9495: WAF :: fetched 1 new logs [09-08-2022 03:15:02]23533: WAF :: fetched 3 new logs [09-08-2022 03:16:01]1144: WAF :: fetched 1 new logs [09-08-2022 03:17:02]3854: WAF :: fetched 1 new logs [09-08-2022 03:19:02]9061: WAF :: fetched 1 new logs [09-08-2022 03:21:02]14381: WAF :: fetched 2 new logs [09-08-2022 03:24:01]22113: WAF :: fetched 4 new logs [09-08-2022 03:30:01]5309: WAF :: fetched 3 new logs [09-08-2022 03:36:02]21183: WAF :: fetched 3 new logs [09-08-2022 03:37:01]23752: WAF :: fetched 2 new logs [09-08-2022 03:40:01]31525: WAF :: fetched 1 new logs [09-08-2022 03:41:01]1868: WAF :: fetched 3 new logs [09-08-2022 03:41:01]1868: Checking for user cron vulnerabilities [09-08-2022 03:43:01]7066: WAF :: fetched 3 new logs [09-08-2022 03:44:01]9627: Checking ditributed CMS bruteforce attacks [09-08-2022 03:47:02]17423: WAF :: fetched 2 new logs [09-08-2022 03:48:01]19991: WAF :: fetched 2 new logs [09-08-2022 03:49:02]22576: WAF :: fetched 2 new logs [09-08-2022 03:50:01]24932: WAF :: fetched 2 new logs [09-08-2022 03:51:01]27906: WAF :: fetched 5 new logs [09-08-2022 03:52:01]30446: WAF :: fetched 6 new logs [09-08-2022 03:53:01]585: WAF :: fetched 2 new logs [09-08-2022 03:54:01]3325: WAF :: fetched 3 new logs [09-08-2022 03:56:01]8541: WAF :: fetched 2 new logs [09-08-2022 03:57:01]11253: WAF :: fetched 8 new logs [09-08-2022 03:58:01]13781: WAF :: fetched 8 new logs [09-08-2022 03:59:01]16371: WAF :: fetched 4 new logs [09-08-2022 04:00:01]18632: WAF :: fetched 2 new logs [09-08-2022 04:01:02]21815: WAF :: fetched 6 new logs [09-08-2022 04:02:01]24442: WAF :: fetched 1 new logs [09-08-2022 04:03:02]26994: WAF :: fetched 3 new logs [09-08-2022 04:04:01]29474: WAF :: fetched 3 new logs [09-08-2022 04:05:01]32123: WAF :: fetched 4 new logs [09-08-2022 04:06:01]2468: WAF :: fetched 1 new logs [09-08-2022 04:07:01]5125: WAF :: fetched 1 new logs [09-08-2022 04:08:01]7700: WAF :: fetched 8 new logs [09-08-2022 04:09:02]10251: WAF :: fetched 6 new logs [09-08-2022 04:10:01]12813: WAF :: fetched 1 new logs [09-08-2022 04:11:01]15499: WAF :: fetched 4 new logs [09-08-2022 04:12:02]18117: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660029122 [09-08-2022 04:12:02]18117: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 04:12:04]18117: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 04:12:04]18117: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-0412/20220809-041202-YvIIwvaU0NkSIukZ0quiUwAAAAk [09-08-2022 04:12:04]18117: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 04:12:04]18117: WAF :: fetched 10 new logs [09-08-2022 04:13:01]20714: WAF :: fetched 4 new logs [09-08-2022 04:14:01]23291: WAF :: fetched 6 new logs [09-08-2022 04:15:01]25862: WAF :: fetched 1 new logs [09-08-2022 04:16:01]28642: WAF :: fetched 5 new logs [09-08-2022 04:17:01]31209: WAF :: fetched 1 new logs [09-08-2022 04:18:01]1384: WAF :: fetched 2 new logs [09-08-2022 04:20:01]6676: WAF :: fetched 1 new logs [09-08-2022 04:21:02]9426: WAF :: fetched 4 new logs [09-08-2022 04:22:01]11876: WAF :: fetched 1 new logs [09-08-2022 04:26:01]22570: WAF :: fetched 2 new logs [09-08-2022 04:27:01]25179: WAF :: fetched 1 new logs [09-08-2022 04:28:01]27802: WAF :: fetched 16 new logs [09-08-2022 04:29:01]30414: WAF :: fetched 2 new logs [09-08-2022 04:32:01]6083: WAF :: fetched 1 new logs [09-08-2022 04:34:01]11290: WAF :: fetched 2 new logs [09-08-2022 04:35:01]13856: WAF :: fetched 1 new logs [09-08-2022 04:36:01]16587: WAF :: fetched 1 new logs [09-08-2022 04:40:02]26884: WAF :: fetched 3 new logs [09-08-2022 04:41:01]29499: Checking for user cron vulnerabilities [09-08-2022 04:43:01]2351: WAF :: fetched 1 new logs [09-08-2022 04:44:01]4998: Checking ditributed CMS bruteforce attacks [09-08-2022 04:44:01]4998: WAF :: fetched 3 new logs [09-08-2022 04:49:01]17959: WAF :: fetched 2 new logs [09-08-2022 04:51:01]23232: WAF :: fetched 1 new logs [09-08-2022 04:52:01]25905: WAF :: fetched 1 new logs [09-08-2022 04:54:01]31069: WAF :: fetched 2 new logs [09-08-2022 04:59:01]11623: WAF :: fetched 4 new logs [09-08-2022 05:01:41]17122: Starting daily scan on files updated in last 24 hrs [09-08-2022 05:02:01]19874: WAF :: fetched 1 new logs [09-08-2022 05:03:01]22466: WAF :: fetched 3 new logs [09-08-2022 05:04:01]25060: WAF :: fetched 3 new logs [09-08-2022 05:05:01]27664: WAF :: fetched 1 new logs [09-08-2022 05:08:01]3237: WAF :: fetched 2 new logs [09-08-2022 05:09:02]5831: WAF :: fetched 1 new logs [09-08-2022 05:12:01]13719: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660032721 [09-08-2022 05:12:01]13719: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 05:12:03]13719: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 05:12:04]13719: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-0512/20220809-051201-YvIW0cb9VwMvMMwkaAkfZQAAAAU [09-08-2022 05:12:04]13719: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 05:12:04]13719: WAF :: fetched 3 new logs [09-08-2022 05:15:01]21454: WAF :: fetched 2 new logs [09-08-2022 05:18:02]29326: WAF :: fetched 4 new logs [09-08-2022 05:20:02]2087: WAF :: fetched 2 new logs [09-08-2022 05:23:01]9982: WAF :: fetched 1 new logs [09-08-2022 05:24:02]12581: WAF :: fetched 2 new logs [09-08-2022 05:25:01]15136: WAF :: fetched 19 new logs [09-08-2022 05:27:01]20417: WAF :: fetched 1 new logs [09-08-2022 05:28:01]22993: WAF :: fetched 3 new logs [09-08-2022 05:30:02]28148: WAF :: fetched 1 new logs [09-08-2022 05:31:01]30778: WAF :: fetched 2 new logs [09-08-2022 05:35:02]8930: WAF :: fetched 1 new logs [09-08-2022 05:37:02]14185: WAF :: fetched 2 new logs [09-08-2022 05:38:01]16752: WAF :: fetched 2 new logs [09-08-2022 05:39:02]19333: WAF :: fetched 2 new logs [09-08-2022 05:40:01]21915: WAF :: fetched 1 new logs [09-08-2022 05:41:02]24563: Checking for user cron vulnerabilities [09-08-2022 05:42:01]27204: WAF :: fetched 1 new logs [09-08-2022 05:44:01]32408: Checking ditributed CMS bruteforce attacks [09-08-2022 05:44:01]32408: WAF :: fetched 1 new logs [09-08-2022 05:46:01]5314: WAF :: fetched 4 new logs [09-08-2022 05:48:01]10526: WAF :: fetched 4 new logs [09-08-2022 05:49:02]13139: WAF :: fetched 1 new logs [09-08-2022 05:51:02]18409: WAF :: fetched 3 new logs [09-08-2022 05:53:01]23689: WAF :: fetched 5 new logs [09-08-2022 05:54:01]26231: WAF :: fetched 18 new logs [09-08-2022 05:55:01]28834: WAF :: fetched 28 new logs [09-08-2022 05:56:01]31443: WAF :: fetched 29 new logs [09-08-2022 05:57:01]1725: WAF :: fetched 32 new logs [09-08-2022 05:58:02]4344: WAF :: fetched 23 new logs [09-08-2022 05:59:01]6881: WAF :: fetched 3 new logs [09-08-2022 06:00:01]9137: WAF :: fetched 1 new logs [09-08-2022 06:03:01]17577: WAF :: fetched 2 new logs [09-08-2022 06:06:01]25431: WAF :: fetched 7 new logs [09-08-2022 06:07:01]28074: WAF :: fetched 19 new logs [09-08-2022 06:08:01]30676: WAF :: fetched 21 new logs [09-08-2022 06:09:01]808: WAF :: fetched 25 new logs [09-08-2022 06:10:01]3544: WAF :: fetched 32 new logs [09-08-2022 06:11:01]6138: WAF :: fetched 15 new logs [09-08-2022 06:12:02]8840: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660036322 [09-08-2022 06:12:02]8840: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 06:12:04]8840: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 06:12:04]8840: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-0612/20220809-061202-YvIk4hcZF9Q5q1na7zXvMQAAAAU [09-08-2022 06:12:04]8840: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 06:12:04]8840: WAF :: fetched 19 new logs [09-08-2022 06:16:01]19146: WAF :: fetched 2 new logs [09-08-2022 06:17:01]21845: WAF :: fetched 9 new logs [09-08-2022 06:21:01]32235: WAF :: fetched 1 new logs [09-08-2022 06:22:01]2528: WAF :: fetched 1 new logs [09-08-2022 06:24:02]7695: WAF :: fetched 6 new logs [09-08-2022 06:26:02]12940: WAF :: fetched 1 new logs [09-08-2022 06:27:01]15725: WAF :: fetched 1 new logs [09-08-2022 06:28:02]18316: WAF :: fetched 1 new logs [09-08-2022 06:31:01]26123: WAF :: fetched 1 new logs [09-08-2022 06:33:01]31346: WAF :: fetched 1 new logs [09-08-2022 06:34:01]1568: WAF :: fetched 2 new logs [09-08-2022 06:36:01]6864: WAF :: fetched 1 new logs [09-08-2022 06:37:01]9474: WAF :: fetched 4 new logs [09-08-2022 06:38:02]12096: WAF :: fetched 6 new logs [09-08-2022 06:39:01]14651: WAF :: fetched 1 new logs [09-08-2022 06:41:01]19920: WAF :: fetched 2 new logs [09-08-2022 06:41:01]19920: Checking for user cron vulnerabilities [09-08-2022 06:42:02]22626: WAF :: fetched 1 new logs [09-08-2022 06:44:01]27768: Checking ditributed CMS bruteforce attacks [09-08-2022 06:44:01]27768: WAF :: fetched 1 new logs [09-08-2022 06:45:01]30338: WAF :: fetched 1 new logs [09-08-2022 06:46:01]574: WAF :: fetched 1 new logs [09-08-2022 06:48:01]5953: WAF :: fetched 2 new logs [09-08-2022 06:49:01]8734: WAF :: fetched 1 new logs [09-08-2022 06:55:01]24746: WAF :: fetched 2 new logs [09-08-2022 06:56:01]27356: WAF :: fetched 2 new logs [09-08-2022 06:57:01]30023: WAF :: fetched 2 new logs [09-08-2022 07:00:01]5292: WAF :: fetched 2 new logs [09-08-2022 07:03:01]13870: WAF :: fetched 1 new logs [09-08-2022 07:05:01]19116: WAF :: fetched 1 new logs [09-08-2022 07:06:01]21724: WAF :: fetched 2 new logs [09-08-2022 07:07:01]24401: WAF :: fetched 1 new logs [09-08-2022 07:08:01]27034: WAF :: fetched 3 new logs [09-08-2022 07:09:01]29563: WAF :: fetched 1 new logs [09-08-2022 07:10:01]32123: WAF :: fetched 1 new logs [09-08-2022 07:11:01]2438: WAF :: fetched 2 new logs [09-08-2022 07:12:02]5169: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660039922 [09-08-2022 07:12:02]5169: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 07:12:04]5169: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 07:12:04]5169: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-0712/20220809-071202-YvIy8hfXtc6026h7au9wmAAAAAU [09-08-2022 07:12:04]5169: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 07:12:04]5169: WAF :: fetched 2 new logs [09-08-2022 07:14:01]10334: WAF :: fetched 1 new logs [09-08-2022 07:15:01]12895: WAF :: fetched 5 new logs [09-08-2022 07:16:01]15535: WAF :: fetched 2 new logs [09-08-2022 07:17:01]18164: WAF :: fetched 2 new logs [09-08-2022 07:18:01]20768: WAF :: fetched 3 new logs [09-08-2022 07:20:01]25927: WAF :: fetched 1 new logs [09-08-2022 07:21:01]28596: WAF :: fetched 2 new logs [09-08-2022 07:22:02]31277: WAF :: fetched 2 new logs [09-08-2022 07:24:01]4087: WAF :: fetched 1 new logs [09-08-2022 07:25:01]6638: WAF :: fetched 2 new logs [09-08-2022 07:27:01]11917: WAF :: fetched 2 new logs [09-08-2022 07:28:01]14467: WAF :: fetched 1 new logs [09-08-2022 07:29:02]17075: WAF :: fetched 5 new logs [09-08-2022 07:33:02]27551: WAF :: fetched 1 new logs [09-08-2022 07:35:02]32686: WAF :: fetched 1 new logs [09-08-2022 07:39:02]10869: WAF :: fetched 1 new logs [09-08-2022 07:40:01]13466: WAF :: fetched 1 new logs [09-08-2022 07:41:02]16136: Checking for user cron vulnerabilities [09-08-2022 07:42:01]18784: WAF :: fetched 2 new logs [09-08-2022 07:43:02]21352: WAF :: fetched 2 new logs [09-08-2022 07:44:01]23917: Checking ditributed CMS bruteforce attacks [09-08-2022 07:44:01]23917: WAF :: fetched 5 new logs [09-08-2022 07:45:01]: Checking for definition updates [09-08-2022 07:45:02]26531: WAF :: fetched 1 new logs [09-08-2022 07:47:02]31833: WAF :: fetched 1 new logs [09-08-2022 07:48:01]2039: WAF :: fetched 2 new logs [09-08-2022 07:50:01]7039: WAF :: fetched 1 new logs [09-08-2022 07:53:01]15184: WAF :: fetched 5 new logs [09-08-2022 07:56:01]23080: WAF :: fetched 1 new logs [09-08-2022 07:57:01]25777: WAF :: fetched 2 new logs [09-08-2022 07:58:01]28328: WAF :: fetched 1 new logs [09-08-2022 08:01:01]4098: WAF :: fetched 6 new logs [09-08-2022 08:02:01]6782: WAF :: fetched 2 new logs [09-08-2022 08:03:01]9397: WAF :: fetched 2 new logs [09-08-2022 08:11:01]30333: WAF :: fetched 1 new logs [09-08-2022 08:12:01]615: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660043521 [09-08-2022 08:12:01]615: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 08:12:03]615: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 08:12:04]615: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-0812/20220809-081201-YvJBAUq4gMb-5nlv2CEk-AAAAAE [09-08-2022 08:12:04]615: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 08:12:04]615: WAF :: fetched 1 new logs [09-08-2022 08:16:01]11295: WAF :: fetched 1 new logs [09-08-2022 08:17:01]14162: WAF :: fetched 2 new logs [09-08-2022 08:21:01]24719: WAF :: fetched 3 new logs [09-08-2022 08:23:01]30025: WAF :: fetched 2 new logs [09-08-2022 08:25:01]2951: WAF :: fetched 1 new logs [09-08-2022 08:26:01]5637: WAF :: fetched 2 new logs [09-08-2022 08:27:01]8327: WAF :: fetched 3 new logs [09-08-2022 08:29:01]13654: WAF :: fetched 2 new logs [09-08-2022 08:30:01]16345: WAF :: fetched 2 new logs [09-08-2022 08:31:01]19063: WAF :: fetched 3 new logs [09-08-2022 08:32:01]21812: WAF :: fetched 3 new logs [09-08-2022 08:34:01]27043: WAF :: fetched 1 new logs [09-08-2022 08:36:01]32369: WAF :: fetched 1 new logs [09-08-2022 08:37:01]2792: WAF :: fetched 1 new logs [09-08-2022 08:38:01]5486: WAF :: fetched 1 new logs [09-08-2022 08:39:01]8098: WAF :: fetched 3 new logs [09-08-2022 08:41:01]13399: WAF :: fetched 3 new logs [09-08-2022 08:41:01]13399: Checking for user cron vulnerabilities [09-08-2022 08:43:01]18653: WAF :: fetched 1 new logs [09-08-2022 08:44:01]21285: Checking ditributed CMS bruteforce attacks [09-08-2022 08:44:01]21285: WAF :: fetched 7 new logs [09-08-2022 08:45:01]23880: WAF :: fetched 1 new logs [09-08-2022 08:46:01]26626: WAF :: fetched 1 new logs [09-08-2022 08:48:01]31885: WAF :: fetched 8 new logs [09-08-2022 08:49:01]2073: WAF :: fetched 6 new logs [09-08-2022 08:50:01]4735: WAF :: fetched 5 new logs [09-08-2022 08:51:02]7447: WAF :: fetched 29 new logs [09-08-2022 08:52:01]10087: WAF :: fetched 5 new logs [09-08-2022 08:55:01]17839: WAF :: fetched 2 new logs [09-08-2022 08:56:02]20390: WAF :: fetched 2 new logs [09-08-2022 08:57:01]23147: WAF :: fetched 3 new logs [09-08-2022 08:58:02]25761: WAF :: fetched 2 new logs [09-08-2022 09:02:02]4115: WAF :: fetched 2 new logs [09-08-2022 09:04:02]9327: WAF :: fetched 2 new logs [09-08-2022 09:05:01]11890: WAF :: fetched 3 new logs [09-08-2022 09:08:01]19790: WAF :: fetched 1 new logs [09-08-2022 09:10:01]25038: WAF :: fetched 1 new logs [09-08-2022 09:11:01]27624: WAF :: fetched 2 new logs [09-08-2022 09:12:01]30270: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660047121 [09-08-2022 09:12:01]30270: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 09:12:03]30270: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 09:12:04]30270: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-0912/20220809-091201-YvJPEUf-1tqWT2QqK7Ra3AAAABk [09-08-2022 09:12:04]30270: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 09:12:04]30270: WAF :: fetched 3 new logs [09-08-2022 09:14:01]3365: WAF :: fetched 4 new logs [09-08-2022 09:17:01]11396: WAF :: fetched 3 new logs [09-08-2022 09:18:01]14107: WAF :: fetched 3 new logs [09-08-2022 09:23:01]27304: WAF :: fetched 1 new logs [09-08-2022 09:25:01]32451: WAF :: fetched 3 new logs [09-08-2022 09:27:01]5530: WAF :: fetched 2 new logs [09-08-2022 09:29:01]10804: WAF :: fetched 1 new logs [09-08-2022 09:32:01]18955: WAF :: fetched 4 new logs [09-08-2022 09:33:01]21637: WAF :: fetched 1 new logs [09-08-2022 09:35:01]26886: WAF :: fetched 3 new logs [09-08-2022 09:38:01]2765: WAF :: fetched 3 new logs [09-08-2022 09:39:01]5417: WAF :: fetched 4 new logs [09-08-2022 09:40:01]8106: WAF :: fetched 2 new logs [09-08-2022 09:41:01]10908: WAF :: fetched 4 new logs [09-08-2022 09:41:01]10908: Checking for user cron vulnerabilities [09-08-2022 09:42:01]13563: WAF :: fetched 2 new logs [09-08-2022 09:44:02]19080: Checking ditributed CMS bruteforce attacks [09-08-2022 09:44:02]19080: WAF :: fetched 2 new logs [09-08-2022 09:48:02]30192: WAF :: fetched 1 new logs [09-08-2022 09:52:01]8856: WAF :: fetched 1 new logs [09-08-2022 09:54:01]14365: WAF :: fetched 1 new logs [09-08-2022 09:55:01]17013: WAF :: fetched 2 new logs [09-08-2022 09:56:01]19659: WAF :: fetched 2 new logs [09-08-2022 09:57:01]22268: WAF :: fetched 2 new logs [09-08-2022 09:58:02]24992: WAF :: fetched 2 new logs [09-08-2022 09:59:01]27771: WAF :: fetched 1 new logs [09-08-2022 10:02:01]3869: WAF :: fetched 2 new logs [09-08-2022 10:03:01]6669: WAF :: fetched 1 new logs [09-08-2022 10:04:02]9398: WAF :: fetched 1 new logs [09-08-2022 10:05:02]12081: WAF :: fetched 3 new logs [09-08-2022 10:06:01]14934: WAF :: fetched 18 new logs [09-08-2022 10:07:02]17554: WAF :: fetched 6 new logs [09-08-2022 10:08:01]20281: WAF :: fetched 4 new logs [09-08-2022 10:09:02]22934: WAF :: fetched 5 new logs [09-08-2022 10:10:01]25588: WAF :: fetched 10 new logs [09-08-2022 10:11:02]28312: WAF :: fetched 5 new logs [09-08-2022 10:12:01]31004: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660050721 [09-08-2022 10:12:01]31004: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 10:12:03]31004: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 10:12:04]31004: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-1012/20220809-101201-YvJdIRYQwdRDJYnAWYogywAAAAk [09-08-2022 10:12:04]31004: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 10:12:04]31004: WAF :: fetched 8 new logs [09-08-2022 10:13:02]1490: WAF :: fetched 11 new logs [09-08-2022 10:14:01]4204: WAF :: fetched 6 new logs [09-08-2022 10:15:02]6913: WAF :: fetched 4 new logs [09-08-2022 10:16:01]9618: WAF :: fetched 6 new logs [09-08-2022 10:17:02]12333: WAF :: fetched 6 new logs [09-08-2022 10:18:01]15148: WAF :: fetched 7 new logs [09-08-2022 10:19:02]17859: WAF :: fetched 2 new logs [09-08-2022 10:20:01]20611: WAF :: fetched 7 new logs [09-08-2022 10:21:02]23411: WAF :: fetched 3 new logs [09-08-2022 10:22:02]26008: WAF :: fetched 6 new logs [09-08-2022 10:23:01]28696: WAF :: fetched 3 new logs [09-08-2022 10:24:02]31297: WAF :: fetched 8 new logs [09-08-2022 10:25:01]1563: WAF :: fetched 10 new logs [09-08-2022 10:26:01]4495: WAF :: fetched 6 new logs [09-08-2022 10:27:01]7256: WAF :: fetched 3 new logs [09-08-2022 10:28:01]10086: WAF :: fetched 9 new logs [09-08-2022 10:29:01]12675: WAF :: fetched 4 new logs [09-08-2022 10:30:01]15411: WAF :: fetched 7 new logs [09-08-2022 10:31:01]18111: WAF :: fetched 3 new logs [09-08-2022 10:33:01]23698: WAF :: fetched 3 new logs [09-08-2022 10:34:01]26453: WAF :: fetched 3 new logs [09-08-2022 10:35:01]29087: WAF :: fetched 3 new logs [09-08-2022 10:37:01]2313: WAF :: fetched 2 new logs [09-08-2022 10:38:01]5188: WAF :: fetched 3 new logs [09-08-2022 10:39:01]7859: WAF :: fetched 2 new logs [09-08-2022 10:41:01]13469: WAF :: fetched 1 new logs [09-08-2022 10:41:01]13469: Checking for user cron vulnerabilities [09-08-2022 10:42:02]16130: WAF :: fetched 1 new logs [09-08-2022 10:43:01]18905: WAF :: fetched 3 new logs [09-08-2022 10:44:01]21604: Checking ditributed CMS bruteforce attacks [09-08-2022 10:45:01]24288: WAF :: fetched 4 new logs [09-08-2022 10:46:01]27197: WAF :: fetched 2 new logs [09-08-2022 10:47:01]29965: WAF :: fetched 5 new logs [09-08-2022 10:48:01]448: WAF :: fetched 3 new logs [09-08-2022 10:49:01]3473: WAF :: fetched 1 new logs [09-08-2022 10:52:01]11815: WAF :: fetched 1 new logs [09-08-2022 10:53:01]14617: WAF :: fetched 5 new logs [09-08-2022 10:54:01]17280: WAF :: fetched 6 new logs [09-08-2022 10:55:01]20041: WAF :: fetched 10 new logs [09-08-2022 10:57:01]25424: WAF :: fetched 1 new logs [09-08-2022 10:58:01]28156: WAF :: fetched 1 new logs [09-08-2022 10:59:01]30870: WAF :: fetched 2 new logs [09-08-2022 11:01:01]4276: WAF :: fetched 8 new logs [09-08-2022 11:03:01]9776: WAF :: fetched 1 new logs [09-08-2022 11:04:02]12515: WAF :: fetched 1 new logs [09-08-2022 11:05:01]15245: WAF :: fetched 1 new logs [09-08-2022 11:06:01]18009: WAF :: fetched 1 new logs [09-08-2022 11:07:02]20613: WAF :: fetched 3 new logs [09-08-2022 11:07:57]20773: Performed RBL check for 23.111.136.34. [09-08-2022 11:08:01]23439: WAF :: fetched 5 new logs [09-08-2022 11:09:02]26297: WAF :: fetched 3 new logs [09-08-2022 11:10:01]29089: WAF :: fetched 2 new logs [09-08-2022 11:12:01]2259: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660054321 [09-08-2022 11:12:01]2259: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 11:12:03]2259: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 11:12:04]2259: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-1112/20220809-111201-YvJrMT2YOMiFQ7X26VBi9wAAAEI [09-08-2022 11:12:04]2259: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 11:12:04]2259: WAF :: fetched 3 new logs [09-08-2022 11:13:02]5175: WAF :: fetched 1 new logs [09-08-2022 11:15:02]10641: WAF :: fetched 2 new logs [09-08-2022 11:16:01]13541: WAF :: fetched 7 new logs [09-08-2022 11:17:01]16248: WAF :: fetched 2 new logs [09-08-2022 11:18:02]18939: WAF :: fetched 5 new logs [09-08-2022 11:19:01]21588: WAF :: fetched 3 new logs [09-08-2022 11:20:02]24332: WAF :: fetched 2 new logs [09-08-2022 11:22:01]29802: WAF :: fetched 1 new logs [09-08-2022 11:23:01]32557: WAF :: fetched 2 new logs [09-08-2022 11:24:01]2941: WAF :: fetched 3 new logs [09-08-2022 11:26:01]8273: WAF :: fetched 11 new logs [09-08-2022 11:27:01]10952: WAF :: fetched 7 new logs [09-08-2022 11:28:01]13764: WAF :: fetched 6 new logs [09-08-2022 11:29:02]16462: WAF :: fetched 4 new logs [09-08-2022 11:30:01]19073: WAF :: fetched 9 new logs [09-08-2022 11:31:02]21816: WAF :: fetched 7 new logs [09-08-2022 11:32:01]24525: WAF :: fetched 2 new logs [09-08-2022 11:33:01]27279: WAF :: fetched 2 new logs [09-08-2022 11:34:02]29919: WAF :: fetched 2 new logs [09-08-2022 11:35:01]32603: WAF :: fetched 7 new logs [09-08-2022 11:36:02]3033: WAF :: fetched 3 new logs [09-08-2022 11:37:01]5639: WAF :: fetched 3 new logs [09-08-2022 11:38:02]8355: WAF :: fetched 12 new logs [09-08-2022 11:39:01]10814: WAF :: fetched 16 new logs [09-08-2022 11:40:01]13639: WAF :: fetched 25 new logs [09-08-2022 11:41:01]16318: WAF :: fetched 2 new logs [09-08-2022 11:41:01]16318: Checking for user cron vulnerabilities [09-08-2022 11:42:02]18954: WAF :: fetched 6 new logs [09-08-2022 11:43:01]21671: WAF :: fetched 1 new logs [09-08-2022 11:44:01]24367: Checking ditributed CMS bruteforce attacks [09-08-2022 11:44:01]24367: WAF :: fetched 2 new logs [09-08-2022 11:45:01]27141: WAF :: fetched 3 new logs [09-08-2022 11:46:01]29938: WAF :: fetched 4 new logs [09-08-2022 11:48:02]2999: WAF :: fetched 2 new logs [09-08-2022 11:49:01]5576: WAF :: fetched 7 new logs [09-08-2022 11:50:02]8349: WAF :: fetched 2 new logs [09-08-2022 11:51:01]11037: WAF :: fetched 2 new logs [09-08-2022 11:52:01]13621: WAF :: fetched 1 new logs [09-08-2022 11:53:01]16296: WAF :: fetched 10 new logs [09-08-2022 11:54:01]18880: WAF :: fetched 2 new logs [09-08-2022 11:55:01]21598: WAF :: fetched 20 new logs [09-08-2022 11:56:02]24279: WAF :: fetched 1 new logs [09-08-2022 11:57:01]26880: WAF :: fetched 6 new logs [09-08-2022 11:59:01]32122: WAF :: fetched 1 new logs [09-08-2022 12:00:02]2133: WAF :: fetched 6 new logs [09-08-2022 12:02:01]8683: WAF :: fetched 2 new logs [09-08-2022 12:04:02]13995: WAF :: fetched 2 new logs [09-08-2022 12:05:02]16582: WAF :: fetched 2 new logs [09-08-2022 12:06:01]19338: WAF :: fetched 6 new logs [09-08-2022 12:07:02]21910: WAF :: fetched 1 new logs [09-08-2022 12:10:01]29853: WAF :: fetched 4 new logs [09-08-2022 12:12:02]2955: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660057922 [09-08-2022 12:12:02]2955: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 12:12:04]2955: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 12:12:04]2955: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-1212/20220809-121202-YvJ5Qv743C459vYoI0iPFQAAAAk [09-08-2022 12:12:04]2955: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 12:12:04]2955: WAF :: fetched 1 new logs [09-08-2022 12:15:01]10814: WAF :: fetched 1 new logs [09-08-2022 12:18:02]18805: WAF :: fetched 2 new logs [09-08-2022 12:20:01]24028: WAF :: fetched 2 new logs [09-08-2022 12:21:02]26730: WAF :: fetched 4 new logs [09-08-2022 12:23:02]31948: WAF :: fetched 1 new logs [09-08-2022 12:24:01]2207: WAF :: fetched 3 new logs [09-08-2022 12:25:01]4912: WAF :: fetched 3 new logs [09-08-2022 12:27:02]10268: WAF :: fetched 5 new logs [09-08-2022 12:28:01]12914: WAF :: fetched 4 new logs [09-08-2022 12:29:01]15588: WAF :: fetched 6 new logs [09-08-2022 12:30:01]18190: WAF :: fetched 6 new logs [09-08-2022 12:31:01]20896: WAF :: fetched 4 new logs [09-08-2022 12:32:02]23542: WAF :: fetched 1 new logs [09-08-2022 12:34:02]28835: WAF :: fetched 5 new logs [09-08-2022 12:37:01]4501: WAF :: fetched 1 new logs [09-08-2022 12:41:01]15142: Checking for user cron vulnerabilities [09-08-2022 12:44:01]22997: Checking ditributed CMS bruteforce attacks [09-08-2022 12:45:01]: Checking for software updates [09-08-2022 12:45:01]25610: WAF :: fetched 5 new logs [09-08-2022 12:48:02]1123: WAF :: fetched 3 new logs [09-08-2022 12:49:01]3761: WAF :: fetched 1 new logs [09-08-2022 12:51:01]9059: WAF :: fetched 4 new logs [09-08-2022 12:52:01]11641: WAF :: fetched 5 new logs [09-08-2022 12:53:01]14343: WAF :: fetched 10 new logs [09-08-2022 12:54:01]16968: WAF :: fetched 2 new logs [09-08-2022 12:56:01]22180: WAF :: fetched 4 new logs [09-08-2022 12:57:02]24762: WAF :: fetched 1 new logs [09-08-2022 12:58:01]27443: WAF :: fetched 3 new logs [09-08-2022 12:59:02]30067: WAF :: fetched 2 new logs [09-08-2022 13:01:01]3247: WAF :: fetched 7 new logs [09-08-2022 13:02:01]5901: WAF :: fetched 1 new logs [09-08-2022 13:05:01]13804: WAF :: fetched 3 new logs [09-08-2022 13:06:01]16477: WAF :: fetched 2 new logs [09-08-2022 13:07:01]19100: WAF :: fetched 1 new logs [09-08-2022 13:08:01]21801: WAF :: fetched 1 new logs [09-08-2022 13:09:01]24391: WAF :: fetched 1 new logs [09-08-2022 13:12:01]32316: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660061521 [09-08-2022 13:12:01]32316: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 13:12:03]32316: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 13:12:03]32316: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-1312/20220809-131201-YvKHUU4DjIxiURCNVu5nLQAAACE [09-08-2022 13:12:03]32316: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 13:12:04]32316: WAF :: fetched 2 new logs [09-08-2022 13:13:01]2786: WAF :: fetched 2 new logs [09-08-2022 13:14:01]5369: WAF :: fetched 5 new logs [09-08-2022 13:15:01]7995: WAF :: fetched 1 new logs [09-08-2022 13:19:01]18478: WAF :: fetched 3 new logs [09-08-2022 13:21:01]23736: WAF :: fetched 5 new logs [09-08-2022 13:22:01]26335: WAF :: fetched 1 new logs [09-08-2022 13:23:01]28998: WAF :: fetched 3 new logs [09-08-2022 13:25:01]1824: WAF :: fetched 1 new logs [09-08-2022 13:26:01]4566: WAF :: fetched 3 new logs [09-08-2022 13:27:01]7179: WAF :: fetched 1 new logs [09-08-2022 13:28:01]9832: WAF :: fetched 2 new logs [09-08-2022 13:29:01]12547: WAF :: fetched 2 new logs [09-08-2022 13:31:01]17919: WAF :: fetched 1 new logs [09-08-2022 13:32:01]20530: WAF :: fetched 7 new logs [09-08-2022 13:33:01]23228: WAF :: fetched 21 new logs [09-08-2022 13:34:01]25799: WAF :: fetched 17 new logs [09-08-2022 13:35:01]28388: WAF :: fetched 21 new logs [09-08-2022 13:36:01]30994: WAF :: fetched 14 new logs [09-08-2022 13:37:01]1247: WAF :: fetched 20 new logs [09-08-2022 13:38:01]3941: WAF :: fetched 17 new logs [09-08-2022 13:39:01]6580: WAF :: fetched 21 new logs [09-08-2022 13:40:01]9140: WAF :: fetched 19 new logs [09-08-2022 13:41:01]11784: WAF :: fetched 20 new logs [09-08-2022 13:41:01]11784: Checking for user cron vulnerabilities [09-08-2022 13:42:01]14391: WAF :: fetched 3 new logs [09-08-2022 13:43:01]17144: WAF :: fetched 5 new logs [09-08-2022 13:44:01]19651: Checking ditributed CMS bruteforce attacks [09-08-2022 13:44:01]19651: WAF :: fetched 1 new logs [09-08-2022 13:45:01]: Checking for definition updates [09-08-2022 13:48:01]30114: WAF :: fetched 2 new logs [09-08-2022 13:51:02]5685: WAF :: fetched 3 new logs [09-08-2022 13:52:01]8224: WAF :: fetched 3 new logs [09-08-2022 13:53:02]10890: WAF :: fetched 7 new logs [09-08-2022 13:55:02]16107: WAF :: fetched 2 new logs [09-08-2022 13:56:01]18770: WAF :: fetched 1 new logs [09-08-2022 13:57:01]21387: WAF :: fetched 5 new logs [09-08-2022 13:58:02]24001: WAF :: fetched 2 new logs [09-08-2022 14:00:02]28921: WAF :: fetched 2 new logs [09-08-2022 14:01:01]32044: WAF :: fetched 4 new logs [09-08-2022 14:02:02]2321: WAF :: fetched 2 new logs [09-08-2022 14:03:01]4975: WAF :: fetched 1 new logs [09-08-2022 14:04:01]7699: WAF :: fetched 4 new logs [09-08-2022 14:05:02]10316: WAF :: fetched 5 new logs [09-08-2022 14:06:01]12989: WAF :: fetched 3 new logs [09-08-2022 14:07:01]15590: WAF :: fetched 1 new logs [09-08-2022 14:12:02]28995: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660065122 [09-08-2022 14:12:02]28995: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 14:12:04]28995: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 14:12:04]28995: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-1412/20220809-141202-YvKVYjnhQE6dJhGnIddGtwAAAAg [09-08-2022 14:12:04]28995: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 14:12:04]28995: WAF :: fetched 25 new logs [09-08-2022 14:13:01]31577: WAF :: fetched 2 new logs [09-08-2022 14:15:01]4590: WAF :: fetched 1 new logs [09-08-2022 14:16:01]7291: WAF :: fetched 2 new logs [09-08-2022 14:19:01]15364: WAF :: fetched 3 new logs [09-08-2022 14:20:01]17928: WAF :: fetched 1 new logs [09-08-2022 14:22:01]23172: WAF :: fetched 4 new logs [09-08-2022 14:23:01]25827: WAF :: fetched 2 new logs [09-08-2022 14:24:01]28517: WAF :: fetched 1 new logs [09-08-2022 14:25:01]31103: WAF :: fetched 2 new logs [09-08-2022 14:26:02]1390: WAF :: fetched 3 new logs [09-08-2022 14:27:01]4013: WAF :: fetched 3 new logs [09-08-2022 14:28:02]6642: WAF :: fetched 7 new logs [09-08-2022 14:29:01]9327: WAF :: fetched 9 new logs [09-08-2022 14:30:01]11989: WAF :: fetched 3 new logs [09-08-2022 14:32:01]17402: WAF :: fetched 2 new logs [09-08-2022 14:33:02]20069: WAF :: fetched 1 new logs [09-08-2022 14:34:01]22726: WAF :: fetched 2 new logs [09-08-2022 14:35:02]25394: WAF :: fetched 1 new logs [09-08-2022 14:37:02]30657: WAF :: fetched 4 new logs [09-08-2022 14:38:01]792: WAF :: fetched 2 new logs [09-08-2022 14:39:02]3628: WAF :: fetched 1 new logs [09-08-2022 14:41:01]8871: WAF :: fetched 4 new logs [09-08-2022 14:41:01]8871: Checking for user cron vulnerabilities [09-08-2022 14:42:02]11514: WAF :: fetched 1 new logs [09-08-2022 14:43:01]14122: WAF :: fetched 1 new logs [09-08-2022 14:44:02]16890: Checking ditributed CMS bruteforce attacks [09-08-2022 14:44:02]16890: WAF :: fetched 1 new logs [09-08-2022 14:45:01]19534: WAF :: fetched 1 new logs [09-08-2022 14:46:02]22396: WAF :: fetched 3 new logs [09-08-2022 14:47:01]25100: WAF :: fetched 1 new logs [09-08-2022 14:48:01]27736: WAF :: fetched 4 new logs [09-08-2022 14:49:01]30557: WAF :: fetched 1 new logs [09-08-2022 14:49:01]30561: httpd.conf changed. Refreshing watchlist. [09-08-2022 14:50:01]852: WAF :: fetched 1 new logs [09-08-2022 14:50:02]874: httpd.conf changed. Refreshing watchlist. [09-08-2022 14:51:02]3727: WAF :: fetched 1 new logs [09-08-2022 14:52:01]6399: WAF :: fetched 1 new logs [09-08-2022 14:53:02]9045: Updated license status via CDN [09-08-2022 14:55:01]14367: WAF :: fetched 2 new logs [09-08-2022 14:58:01]22190: WAF :: fetched 1 new logs [09-08-2022 14:59:01]24903: WAF :: fetched 2 new logs [09-08-2022 15:01:02]30312: Reseting cPGuard inotify settings [09-08-2022 15:02:01]452: WAF :: fetched 1 new logs [09-08-2022 15:03:01]3238: WAF :: fetched 4 new logs [09-08-2022 15:04:02]5927: WAF :: fetched 9 new logs [09-08-2022 15:05:01]8510: WAF :: fetched 6 new logs [09-08-2022 15:06:02]11223: WAF :: fetched 1 new logs [09-08-2022 15:07:01]13853: WAF :: fetched 4 new logs [09-08-2022 15:08:02]16456: WAF :: fetched 5 new logs [09-08-2022 15:09:01]19094: WAF :: fetched 5 new logs [09-08-2022 15:10:02]21726: WAF :: fetched 3 new logs [09-08-2022 15:11:01]24338: WAF :: fetched 4 new logs [09-08-2022 15:12:02]26936: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660068722 [09-08-2022 15:12:02]26936: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 15:12:04]26936: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 15:12:04]26936: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-1512/20220809-151202-YvKjchdaaFq-aNpdymVLJwAAACU [09-08-2022 15:12:04]26936: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 15:12:04]26936: WAF :: fetched 5 new logs [09-08-2022 15:13:01]29505: WAF :: fetched 5 new logs [09-08-2022 15:14:01]32198: WAF :: fetched 5 new logs [09-08-2022 15:15:01]2487: WAF :: fetched 2 new logs [09-08-2022 15:16:01]5204: WAF :: fetched 4 new logs [09-08-2022 15:17:02]7812: WAF :: fetched 15 new logs [09-08-2022 15:18:01]10416: WAF :: fetched 1 new logs [09-08-2022 15:19:02]13182: WAF :: fetched 1 new logs [09-08-2022 15:20:01]15886: WAF :: fetched 2 new logs [09-08-2022 15:21:02]18553: WAF :: fetched 2 new logs [09-08-2022 15:22:01]21115: WAF :: fetched 3 new logs [09-08-2022 15:23:02]23713: WAF :: fetched 4 new logs [09-08-2022 15:24:01]26420: WAF :: fetched 4 new logs [09-08-2022 15:25:02]29007: WAF :: fetched 2 new logs [09-08-2022 15:26:01]31693: WAF :: fetched 2 new logs [09-08-2022 15:27:02]1932: WAF :: fetched 3 new logs [09-08-2022 15:28:01]4530: WAF :: fetched 1 new logs [09-08-2022 15:29:02]7240: WAF :: fetched 4 new logs [09-08-2022 15:29:02]7235: httpd.conf changed. Refreshing watchlist. [09-08-2022 15:30:01]9897: WAF :: fetched 2 new logs [09-08-2022 15:30:01]9904: httpd.conf changed. Refreshing watchlist. [09-08-2022 15:31:02]12650: WAF :: fetched 2 new logs [09-08-2022 15:32:01]15269: WAF :: fetched 6 new logs [09-08-2022 15:33:02]17910: WAF :: fetched 4 new logs [09-08-2022 15:34:01]20608: WAF :: fetched 2 new logs [09-08-2022 15:35:02]23313: WAF :: fetched 6 new logs [09-08-2022 15:35:02]23319: httpd.conf changed. Refreshing watchlist. [09-08-2022 15:36:01]26010: WAF :: fetched 3 new logs [09-08-2022 15:38:01]31176: WAF :: fetched 1 new logs [09-08-2022 15:39:02]1530: WAF :: fetched 4 new logs [09-08-2022 15:41:02]6934: WAF :: fetched 1 new logs [09-08-2022 15:41:02]6934: Checking for user cron vulnerabilities [09-08-2022 15:44:01]15035: Checking ditributed CMS bruteforce attacks [09-08-2022 15:44:01]15035: WAF :: fetched 2 new logs [09-08-2022 15:45:02]17693: WAF :: fetched 1 new logs [09-08-2022 15:47:02]23124: WAF :: fetched 1 new logs [09-08-2022 15:48:01]25743: WAF :: fetched 6 new logs [09-08-2022 15:49:02]28416: WAF :: fetched 2 new logs [09-08-2022 15:50:02]30965: WAF :: fetched 26 new logs [09-08-2022 15:51:01]1276: WAF :: fetched 25 new logs [09-08-2022 15:52:02]3973: WAF :: fetched 33 new logs [09-08-2022 15:53:01]6560: WAF :: fetched 27 new logs [09-08-2022 15:54:02]9198: WAF :: fetched 34 new logs [09-08-2022 15:55:01]11802: WAF :: fetched 17 new logs [09-08-2022 15:56:02]14468: WAF :: fetched 29 new logs [09-08-2022 15:57:01]17033: WAF :: fetched 2 new logs [09-08-2022 16:01:01]27771: WAF :: fetched 4 new logs [09-08-2022 16:02:02]30429: WAF :: fetched 3 new logs [09-08-2022 16:03:01]536: WAF :: fetched 1 new logs [09-08-2022 16:04:01]3384: WAF :: fetched 4 new logs [09-08-2022 16:07:02]11481: WAF :: fetched 3 new logs [09-08-2022 16:08:01]14108: WAF :: fetched 3 new logs [09-08-2022 16:09:02]16894: WAF :: fetched 6 new logs [09-08-2022 16:11:02]22356: WAF :: fetched 1 new logs [09-08-2022 16:12:01]25011: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660072321 [09-08-2022 16:12:01]25011: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 16:12:03]25011: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 16:12:04]25011: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-1612/20220809-161201-YvKxgbg6wBOaPrdoJJ4SIgAAAAA [09-08-2022 16:12:04]25011: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 16:12:04]25011: WAF :: fetched 2 new logs [09-08-2022 16:13:01]27696: WAF :: fetched 1 new logs [09-08-2022 16:14:02]30368: WAF :: fetched 1 new logs [09-08-2022 16:15:01]472: WAF :: fetched 6 new logs [09-08-2022 16:16:02]3402: WAF :: fetched 2 new logs [09-08-2022 16:18:02]9116: WAF :: fetched 8 new logs [09-08-2022 16:19:01]11767: WAF :: fetched 9 new logs [09-08-2022 16:20:02]14396: WAF :: fetched 6 new logs [09-08-2022 16:21:01]17129: WAF :: fetched 2 new logs [09-08-2022 16:23:01]22427: WAF :: fetched 5 new logs [09-08-2022 16:24:02]25125: WAF :: fetched 27 new logs [09-08-2022 16:25:01]27733: WAF :: fetched 31 new logs [09-08-2022 16:26:02]30418: WAF :: fetched 32 new logs [09-08-2022 16:27:01]621: WAF :: fetched 25 new logs [09-08-2022 16:28:02]3493: WAF :: fetched 17 new logs [09-08-2022 16:29:01]6171: WAF :: fetched 23 new logs [09-08-2022 16:30:02]8814: WAF :: fetched 23 new logs [09-08-2022 16:31:02]11579: WAF :: fetched 22 new logs [09-08-2022 16:32:01]14245: WAF :: fetched 13 new logs [09-08-2022 16:34:01]19699: httpd.conf changed. Refreshing watchlist. [09-08-2022 16:37:02]27830: WAF :: fetched 1 new logs [09-08-2022 16:38:01]30461: WAF :: fetched 1 new logs [09-08-2022 16:41:02]6161: Checking for user cron vulnerabilities [09-08-2022 16:44:01]14044: Checking ditributed CMS bruteforce attacks [09-08-2022 16:44:01]14044: WAF :: fetched 1 new logs [09-08-2022 16:45:02]16721: WAF :: fetched 2 new logs [09-08-2022 16:48:01]24615: WAF :: fetched 2 new logs [09-08-2022 16:50:01]29963: WAF :: fetched 1 new logs [09-08-2022 16:52:01]3069: WAF :: fetched 3 new logs [09-08-2022 16:53:02]5778: WAF :: fetched 1 new logs [09-08-2022 16:55:01]11038: WAF :: fetched 4 new logs [09-08-2022 16:56:01]13717: WAF :: fetched 2 new logs [09-08-2022 16:57:01]16327: WAF :: fetched 2 new logs [09-08-2022 16:58:01]18901: WAF :: fetched 1 new logs [09-08-2022 16:59:02]21614: WAF :: fetched 2 new logs [09-08-2022 17:00:02]23938: WAF :: fetched 1 new logs [09-08-2022 17:03:01]32579: WAF :: fetched 1 new logs [09-08-2022 17:04:02]3021: WAF :: fetched 3 new logs [09-08-2022 17:05:01]5599: WAF :: fetched 1 new logs [09-08-2022 17:09:01]16460: WAF :: fetched 2 new logs [09-08-2022 17:12:01]24379: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660075921 [09-08-2022 17:12:01]24379: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 17:12:03]24379: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 17:12:04]24379: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-1712/20220809-171201-YvK_kf3ZhF5Se17K7yVSoAAAABY [09-08-2022 17:12:04]24379: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 17:18:01]8053: WAF :: fetched 1 new logs [09-08-2022 17:19:01]10755: WAF :: fetched 2 new logs [09-08-2022 17:24:01]23923: WAF :: fetched 1 new logs [09-08-2022 17:25:02]26598: WAF :: fetched 1 new logs [09-08-2022 17:28:01]2198: WAF :: fetched 6 new logs [09-08-2022 17:29:02]4962: WAF :: fetched 1 new logs [09-08-2022 17:30:01]7627: WAF :: fetched 2 new logs [09-08-2022 17:31:02]10347: WAF :: fetched 1 new logs [09-08-2022 17:35:02]20871: WAF :: fetched 2 new logs [09-08-2022 17:37:02]26109: WAF :: fetched 1 new logs [09-08-2022 17:38:01]28671: WAF :: fetched 2 new logs [09-08-2022 17:39:02]31387: WAF :: fetched 2 new logs [09-08-2022 17:40:01]1330: WAF :: fetched 6 new logs [09-08-2022 17:41:01]4323: Checking for user cron vulnerabilities [09-08-2022 17:44:01]12109: Checking ditributed CMS bruteforce attacks [09-08-2022 17:46:02]17428: WAF :: fetched 3 new logs [09-08-2022 17:47:01]20030: WAF :: fetched 1 new logs [09-08-2022 17:50:01]27864: WAF :: fetched 1 new logs [09-08-2022 17:51:01]30663: WAF :: fetched 2 new logs [09-08-2022 17:52:02]852: WAF :: fetched 1 new logs [09-08-2022 17:53:01]3524: WAF :: fetched 4 new logs [09-08-2022 17:54:02]6240: WAF :: fetched 15 new logs [09-08-2022 17:57:01]14048: WAF :: fetched 4 new logs [09-08-2022 17:58:02]16643: WAF :: fetched 3 new logs [09-08-2022 17:59:01]19243: WAF :: fetched 3 new logs [09-08-2022 18:00:02]21539: WAF :: fetched 2 new logs [09-08-2022 18:01:01]24670: WAF :: fetched 1 new logs [09-08-2022 18:03:01]30078: WAF :: fetched 2 new logs [09-08-2022 18:04:02]32694: WAF :: fetched 5 new logs [09-08-2022 18:05:01]2980: WAF :: fetched 5 new logs [09-08-2022 18:11:01]18608: WAF :: fetched 1 new logs [09-08-2022 18:12:02]21195: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660079522 [09-08-2022 18:12:02]21195: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 18:12:04]21195: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 18:12:04]21195: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-1812/20220809-181202-YvLNovGppRd0s7p4yb08mQAAABM [09-08-2022 18:12:04]21195: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 18:12:05]21195: WAF :: fetched 2 new logs [09-08-2022 18:14:02]26406: WAF :: fetched 3 new logs [09-08-2022 18:16:02]31677: WAF :: fetched 1 new logs [09-08-2022 18:18:02]4557: WAF :: fetched 3 new logs [09-08-2022 18:20:02]9766: WAF :: fetched 8 new logs [09-08-2022 18:22:01]15095: WAF :: fetched 1 new logs [09-08-2022 18:25:01]22870: WAF :: fetched 1 new logs [09-08-2022 18:26:01]25536: WAF :: fetched 2 new logs [09-08-2022 18:27:01]28133: WAF :: fetched 4 new logs [09-08-2022 18:30:01]3594: WAF :: fetched 1 new logs [09-08-2022 18:33:01]11358: WAF :: fetched 3 new logs [09-08-2022 18:34:01]13892: WAF :: fetched 4 new logs [09-08-2022 18:35:01]16575: WAF :: fetched 4 new logs [09-08-2022 18:39:01]26919: WAF :: fetched 3 new logs [09-08-2022 18:40:01]29614: WAF :: fetched 5 new logs [09-08-2022 18:41:01]32346: WAF :: fetched 11 new logs [09-08-2022 18:41:01]32346: Checking for user cron vulnerabilities [09-08-2022 18:42:01]2600: WAF :: fetched 1 new logs [09-08-2022 18:43:01]5200: WAF :: fetched 4 new logs [09-08-2022 18:44:01]7736: Checking ditributed CMS bruteforce attacks [09-08-2022 18:44:01]7736: WAF :: fetched 2 new logs [09-08-2022 18:45:02]10400: WAF :: fetched 7 new logs [09-08-2022 18:46:01]13003: WAF :: fetched 5 new logs [09-08-2022 18:47:01]15607: WAF :: fetched 1 new logs [09-08-2022 18:48:02]18226: WAF :: fetched 3 new logs [09-08-2022 18:49:01]20784: WAF :: fetched 3 new logs [09-08-2022 18:50:02]23547: WAF :: fetched 7 new logs [09-08-2022 18:51:01]26215: WAF :: fetched 1 new logs [09-08-2022 18:52:02]28801: WAF :: fetched 4 new logs [09-08-2022 18:53:01]31347: WAF :: fetched 1 new logs [09-08-2022 18:54:02]1593: WAF :: fetched 7 new logs [09-08-2022 18:55:01]4291: WAF :: fetched 8 new logs [09-08-2022 18:56:02]6887: WAF :: fetched 5 new logs [09-08-2022 18:57:01]9416: WAF :: fetched 6 new logs [09-08-2022 18:58:02]12079: WAF :: fetched 3 new logs [09-08-2022 18:59:01]14630: WAF :: fetched 1 new logs [09-08-2022 19:00:02]17026: WAF :: fetched 2 new logs [09-08-2022 19:01:01]20081: WAF :: fetched 3 new logs [09-08-2022 19:02:01]22747: WAF :: fetched 3 new logs [09-08-2022 19:03:02]25307: WAF :: fetched 2 new logs [09-08-2022 19:04:01]27865: WAF :: fetched 13 new logs [09-08-2022 19:05:02]30528: WAF :: fetched 12 new logs [09-08-2022 19:06:01]691: WAF :: fetched 2 new logs [09-08-2022 19:07:02]3406: WAF :: fetched 3 new logs [09-08-2022 19:08:01]5925: WAF :: fetched 2 new logs [09-08-2022 19:09:02]8548: WAF :: fetched 4 new logs [09-08-2022 19:10:02]11223: WAF :: fetched 2 new logs [09-08-2022 19:11:01]13849: WAF :: fetched 4 new logs [09-08-2022 19:12:02]16427: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660083122 [09-08-2022 19:12:02]16427: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 19:12:04]16427: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 19:12:04]16427: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-1912/20220809-191202-YvLbssn87lHws9wVgCLpPQAAABo [09-08-2022 19:12:04]16427: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 19:12:04]16427: WAF :: fetched 3 new logs [09-08-2022 19:13:01]18977: WAF :: fetched 1 new logs [09-08-2022 19:16:01]26865: WAF :: fetched 1 new logs [09-08-2022 19:17:01]29436: WAF :: fetched 1 new logs [09-08-2022 19:23:01]13107: WAF :: fetched 71 new logs [09-08-2022 19:24:02]15721: WAF :: fetched 97 new logs [09-08-2022 19:25:01]18392: WAF :: fetched 100 new logs [09-08-2022 19:26:02]21045: WAF :: fetched 93 new logs [09-08-2022 19:27:01]23669: WAF :: fetched 108 new logs [09-08-2022 19:28:02]26276: WAF :: fetched 43 new logs [09-08-2022 19:31:01]1806: WAF :: fetched 4 new logs [09-08-2022 19:32:02]4496: WAF :: fetched 2 new logs [09-08-2022 19:33:01]6978: WAF :: fetched 1 new logs [09-08-2022 19:35:01]12353: WAF :: fetched 4 new logs [09-08-2022 19:37:01]17490: WAF :: fetched 1 new logs [09-08-2022 19:38:01]20097: WAF :: fetched 3 new logs [09-08-2022 19:39:01]22591: WAF :: fetched 1 new logs [09-08-2022 19:40:01]25279: WAF :: fetched 2 new logs [09-08-2022 19:41:01]27883: WAF :: fetched 3 new logs [09-08-2022 19:41:01]27883: Checking for user cron vulnerabilities [09-08-2022 19:42:01]30454: WAF :: fetched 4 new logs [09-08-2022 19:43:02]571: WAF :: fetched 3 new logs [09-08-2022 19:44:01]3247: Checking ditributed CMS bruteforce attacks [09-08-2022 19:44:01]3247: WAF :: fetched 3 new logs [09-08-2022 19:45:01]: Checking for definition updates [09-08-2022 19:45:02]5956: WAF :: fetched 4 new logs [09-08-2022 19:46:01]8560: WAF :: fetched 11 new logs [09-08-2022 19:47:01]11136: WAF :: fetched 6 new logs [09-08-2022 19:48:01]13658: WAF :: fetched 2 new logs [09-08-2022 19:49:02]16231: WAF :: fetched 3 new logs [09-08-2022 19:50:01]18861: WAF :: fetched 3 new logs [09-08-2022 19:51:01]21519: WAF :: fetched 4 new logs [09-08-2022 19:52:02]24067: WAF :: fetched 3 new logs [09-08-2022 19:53:01]26620: WAF :: fetched 3 new logs [09-08-2022 19:54:02]29179: WAF :: fetched 3 new logs [09-08-2022 19:55:01]31806: WAF :: fetched 3 new logs [09-08-2022 19:56:02]2076: WAF :: fetched 4 new logs [09-08-2022 19:57:01]4681: WAF :: fetched 1 new logs [09-08-2022 19:58:02]7251: WAF :: fetched 1 new logs [09-08-2022 19:59:01]9810: WAF :: fetched 4 new logs [09-08-2022 20:00:02]12147: WAF :: fetched 1 new logs [09-08-2022 20:01:01]15238: WAF :: fetched 2 new logs [09-08-2022 20:02:02]17835: WAF :: fetched 3 new logs [09-08-2022 20:03:01]20433: WAF :: fetched 7 new logs [09-08-2022 20:04:02]23006: WAF :: fetched 6 new logs [09-08-2022 20:06:02]28281: WAF :: fetched 3 new logs [09-08-2022 20:07:01]30796: WAF :: fetched 2 new logs [09-08-2022 20:08:02]1008: WAF :: fetched 5 new logs [09-08-2022 20:09:01]3659: WAF :: fetched 4 new logs [09-08-2022 20:09:01]3668: httpd.conf changed. Refreshing watchlist. [09-08-2022 20:10:01]6410: WAF :: fetched 1 new logs [09-08-2022 20:10:01]6433: httpd.conf changed. Refreshing watchlist. [09-08-2022 20:11:01]9071: WAF :: fetched 1 new logs [09-08-2022 20:12:01]12304: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660086721 [09-08-2022 20:12:01]12304: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 20:12:03]12304: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 20:12:04]12304: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-2012/20220809-201201-YvLpwVy87r6lvOubwRA1FAAAAF8 [09-08-2022 20:12:04]12304: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 20:12:04]12304: WAF :: fetched 1199 new logs [09-08-2022 20:13:02]15118: WAF :: fetched 749 new logs [09-08-2022 20:14:01]17630: WAF :: fetched 3 new logs [09-08-2022 20:15:02]20474: WAF :: fetched 1 new logs [09-08-2022 20:15:02]20468: httpd.conf changed. Refreshing watchlist. [09-08-2022 20:16:01]23116: WAF :: fetched 4 new logs [09-08-2022 20:18:01]28274: WAF :: fetched 3 new logs [09-08-2022 20:19:01]30985: WAF :: fetched 1 new logs [09-08-2022 20:20:02]1263: WAF :: fetched 1 new logs [09-08-2022 20:23:01]9023: WAF :: fetched 1 new logs [09-08-2022 20:25:01]14252: WAF :: fetched 1 new logs [09-08-2022 20:28:02]21979: WAF :: fetched 1 new logs [09-08-2022 20:30:02]27145: WAF :: fetched 5 new logs [09-08-2022 20:32:01]32290: WAF :: fetched 3 new logs [09-08-2022 20:33:02]2557: WAF :: fetched 7 new logs [09-08-2022 20:35:02]7712: WAF :: fetched 2 new logs [09-08-2022 20:36:01]10302: WAF :: fetched 2 new logs [09-08-2022 20:37:02]12927: WAF :: fetched 2 new logs [09-08-2022 20:39:02]18083: WAF :: fetched 4 new logs [09-08-2022 20:41:02]23421: WAF :: fetched 60 new logs [09-08-2022 20:41:02]23421: Checking for user cron vulnerabilities [09-08-2022 20:42:01]25930: WAF :: fetched 112 new logs [09-08-2022 20:43:02]28493: WAF :: fetched 97 new logs [09-08-2022 20:44:01]31028: Checking ditributed CMS bruteforce attacks [09-08-2022 20:44:01]31028: WAF :: fetched 23 new logs [09-08-2022 20:45:02]1235: WAF :: fetched 2 new logs [09-08-2022 20:47:02]6452: WAF :: fetched 9 new logs [09-08-2022 20:48:01]8974: WAF :: fetched 3 new logs [09-08-2022 20:50:01]14134: WAF :: fetched 1 new logs [09-08-2022 20:54:01]24328: WAF :: fetched 1 new logs [09-08-2022 20:57:01]32459: WAF :: fetched 2 new logs [09-08-2022 21:02:01]13252: WAF :: fetched 5 new logs [09-08-2022 21:03:01]15883: WAF :: fetched 1 new logs [09-08-2022 21:04:01]18408: WAF :: fetched 2 new logs [09-08-2022 21:05:02]21075: WAF :: fetched 3 new logs [09-08-2022 21:06:01]23672: WAF :: fetched 1 new logs [09-08-2022 21:08:01]28728: WAF :: fetched 1 new logs [09-08-2022 21:10:01]1599: WAF :: fetched 2 new logs [09-08-2022 21:11:02]4258: WAF :: fetched 1 new logs [09-08-2022 21:12:01]6787: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660090321 [09-08-2022 21:12:01]6787: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 21:12:03]6787: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 21:12:04]6787: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-2112/20220809-211201-YvL30VwzadJaBjXhZmXLiQAAAAY [09-08-2022 21:12:04]6787: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 21:12:04]6787: WAF :: fetched 5 new logs [09-08-2022 21:13:02]9338: WAF :: fetched 2 new logs [09-08-2022 21:14:01]11900: WAF :: fetched 1 new logs [09-08-2022 21:16:01]17152: WAF :: fetched 6 new logs [09-08-2022 21:17:02]19716: WAF :: fetched 1 new logs [09-08-2022 21:18:01]22236: WAF :: fetched 1 new logs [09-08-2022 21:20:01]27483: WAF :: fetched 5 new logs [09-08-2022 21:21:01]30128: WAF :: fetched 2 new logs [09-08-2022 21:24:02]5466: WAF :: fetched 3 new logs [09-08-2022 21:29:02]18331: WAF :: fetched 3 new logs [09-08-2022 21:30:01]20964: WAF :: fetched 1 new logs [09-08-2022 21:31:02]23606: WAF :: fetched 1 new logs [09-08-2022 21:35:02]1724: WAF :: fetched 1 new logs [09-08-2022 21:38:01]9466: WAF :: fetched 2 new logs [09-08-2022 21:40:01]14685: WAF :: fetched 3 new logs [09-08-2022 21:41:01]17302: WAF :: fetched 1 new logs [09-08-2022 21:41:01]17302: Checking for user cron vulnerabilities [09-08-2022 21:44:02]24913: Checking ditributed CMS bruteforce attacks [09-08-2022 21:51:01]10665: WAF :: fetched 1 new logs [09-08-2022 21:54:02]18326: WAF :: fetched 3 new logs [09-08-2022 21:55:01]20969: WAF :: fetched 4 new logs [09-08-2022 21:56:02]23594: WAF :: fetched 3 new logs [09-08-2022 22:03:01]9450: WAF :: fetched 1 new logs [09-08-2022 22:04:01]12003: WAF :: fetched 1 new logs [09-08-2022 22:05:01]14637: WAF :: fetched 9 new logs [09-08-2022 22:06:02]17245: WAF :: fetched 1 new logs [09-08-2022 22:07:01]19811: WAF :: fetched 1 new logs [09-08-2022 22:07:09]19812: Performing Domain reputation checks [09-08-2022 22:10:01]27491: WAF :: fetched 1 new logs [09-08-2022 22:12:01]32663: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660093921 [09-08-2022 22:12:01]32663: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 22:12:03]32663: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 22:12:04]32663: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-2212/20220809-221201-YvMF4balFYRbsokTfdjFAAAAAEA [09-08-2022 22:12:04]32663: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 22:12:04]32663: WAF :: fetched 1 new logs [09-08-2022 22:14:01]5422: WAF :: fetched 1 new logs [09-08-2022 22:15:02]8072: WAF :: fetched 1 new logs [09-08-2022 22:17:02]13244: WAF :: fetched 1 new logs [09-08-2022 22:18:01]15760: WAF :: fetched 4 new logs [09-08-2022 22:19:02]18302: WAF :: fetched 1 new logs [09-08-2022 22:20:01]20885: WAF :: fetched 2 new logs [09-08-2022 22:21:02]23501: WAF :: fetched 5 new logs [09-08-2022 22:22:01]26006: WAF :: fetched 1 new logs [09-08-2022 22:23:02]28562: WAF :: fetched 3 new logs [09-08-2022 22:24:01]31065: WAF :: fetched 4 new logs [09-08-2022 22:25:02]1374: WAF :: fetched 3 new logs [09-08-2022 22:27:02]6609: WAF :: fetched 3 new logs [09-08-2022 22:28:01]9147: WAF :: fetched 1 new logs [09-08-2022 22:29:02]11693: WAF :: fetched 1 new logs [09-08-2022 22:30:01]14330: WAF :: fetched 1 new logs [09-08-2022 22:34:01]24521: WAF :: fetched 1 new logs [09-08-2022 22:37:01]32226: WAF :: fetched 3 new logs [09-08-2022 22:38:01]2489: WAF :: fetched 1 new logs [09-08-2022 22:40:01]7668: WAF :: fetched 2 new logs [09-08-2022 22:41:01]10253: Checking for user cron vulnerabilities [09-08-2022 22:42:01]12832: WAF :: fetched 1 new logs [09-08-2022 22:44:01]17860: Checking ditributed CMS bruteforce attacks [09-08-2022 22:45:01]20441: WAF :: fetched 1 new logs [09-08-2022 22:46:01]23098: WAF :: fetched 1 new logs [09-08-2022 22:48:01]28152: WAF :: fetched 5 new logs [09-08-2022 22:51:01]3686: WAF :: fetched 2 new logs [09-08-2022 22:52:01]6201: WAF :: fetched 3 new logs [09-08-2022 22:54:01]11249: WAF :: fetched 6 new logs [09-08-2022 22:55:01]13847: WAF :: fetched 2 new logs [09-08-2022 22:56:01]16493: WAF :: fetched 7 new logs [09-08-2022 22:57:01]19026: WAF :: fetched 5 new logs [09-08-2022 22:58:01]21508: WAF :: fetched 3 new logs [09-08-2022 22:59:01]24056: WAF :: fetched 8 new logs [09-08-2022 23:00:01]26307: WAF :: fetched 3 new logs [09-08-2022 23:01:01]29511: WAF :: fetched 1 new logs [09-08-2022 23:02:01]32044: WAF :: fetched 4 new logs [09-08-2022 23:03:01]2259: WAF :: fetched 1 new logs [09-08-2022 23:04:01]4818: WAF :: fetched 1 new logs [09-08-2022 23:05:01]7370: WAF :: fetched 1 new logs [09-08-2022 23:07:58]12742: Performed RBL check for 23.111.136.34. [09-08-2022 23:08:01]15158: WAF :: fetched 4 new logs [09-08-2022 23:12:01]25467: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660097521 [09-08-2022 23:12:01]25467: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [09-08-2022 23:12:03]25467: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [09-08-2022 23:12:03]25467: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220809/20220809-2312/20220809-231201-YvMT8feQZE4bhylEEs5VxgAAABw [09-08-2022 23:12:03]25467: WAF :: No suitable log file found. Using SQLite.. [09-08-2022 23:12:03]25467: WAF :: fetched 1 new logs [09-08-2022 23:13:01]27982: WAF :: fetched 6 new logs [09-08-2022 23:19:01]10920: WAF :: fetched 10 new logs [09-08-2022 23:20:02]13495: WAF :: fetched 88 new logs [09-08-2022 23:21:01]16165: WAF :: fetched 61 new logs [09-08-2022 23:22:02]18720: WAF :: fetched 23 new logs [09-08-2022 23:23:01]21258: WAF :: fetched 7 new logs [09-08-2022 23:25:01]26271: WAF :: fetched 2 new logs [09-08-2022 23:26:02]28898: WAF :: fetched 2 new logs [09-08-2022 23:27:01]31437: WAF :: fetched 1 new logs [09-08-2022 23:28:02]1691: WAF :: fetched 2 new logs [09-08-2022 23:29:01]4274: WAF :: fetched 6 new logs [09-08-2022 23:30:01]6776: WAF :: fetched 1 new logs [09-08-2022 23:32:01]12085: WAF :: fetched 15 new logs [09-08-2022 23:35:02]19689: WAF :: fetched 1 new logs [09-08-2022 23:37:02]24927: WAF :: fetched 2 new logs [09-08-2022 23:38:01]27458: WAF :: fetched 2 new logs [09-08-2022 23:39:02]30032: WAF :: fetched 4 new logs [09-08-2022 23:40:01]32536: WAF :: fetched 3 new logs [09-08-2022 23:41:01]2987: Checking for user cron vulnerabilities [09-08-2022 23:42:01]5482: WAF :: fetched 4 new logs [09-08-2022 23:43:01]8023: WAF :: fetched 1 new logs [09-08-2022 23:44:01]10567: Checking ditributed CMS bruteforce attacks [09-08-2022 23:44:01]10567: WAF :: fetched 8 new logs [09-08-2022 23:45:01]13133: WAF :: fetched 2 new logs [09-08-2022 23:46:01]15833: WAF :: fetched 1 new logs [09-08-2022 23:47:02]18392: WAF :: fetched 6 new logs [09-08-2022 23:48:01]20899: WAF :: fetched 5 new logs [09-08-2022 23:49:02]23424: WAF :: fetched 2 new logs [09-08-2022 23:54:01]4182: WAF :: fetched 3 new logs [09-08-2022 23:54:01]4199: httpd.conf changed. Refreshing watchlist. [09-08-2022 23:55:01]7484: WAF :: fetched 33 new logs [09-08-2022 23:56:01]10223: WAF :: fetched 15 new logs [09-08-2022 23:56:01]10233: httpd.conf changed. Refreshing watchlist. [09-08-2022 23:57:01]12769: WAF :: fetched 4 new logs [09-08-2022 23:59:01]17797: WAF :: fetched 1 new logs [10-08-2022 00:00:01]20081: WAF :: fetched 1 new logs [10-08-2022 00:01:05]23316: Sending daily report for August 10, 2022 [10-08-2022 00:02:01]25890: WAF :: fetched 1 new logs [10-08-2022 00:04:01]31281: WAF :: fetched 2 new logs [10-08-2022 00:05:02]1497: Deleted 0 entries older than 6 MONTH from scanner_logs [10-08-2022 00:05:02]1497: Deleted 0 files from Quarantine [10-08-2022 00:07:01]6842: WAF :: fetched 1 new logs [10-08-2022 00:10:01]14429: WAF :: fetched 1 new logs [10-08-2022 00:11:02]17059: WAF :: fetched 2 new logs [10-08-2022 00:12:01]19577: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660101121 [10-08-2022 00:12:01]19577: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 00:12:03]19577: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 00:12:03]19577: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-0012/20220810-001201-YvMiAXh1GRIwFb-1nmJOGgAAAA8 [10-08-2022 00:12:03]19577: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [10-08-2022 00:12:04]19577: WAF :: fetched 5 new logs [10-08-2022 00:15:02]27230: WAF :: fetched 1 new logs [10-08-2022 00:16:01]29953: WAF :: fetched 9 new logs [10-08-2022 00:17:02]32616: WAF :: fetched 3 new logs [10-08-2022 00:22:01]13148: WAF :: fetched 1 new logs [10-08-2022 00:27:01]25802: WAF :: fetched 6 new logs [10-08-2022 00:28:02]28367: WAF :: fetched 11 new logs [10-08-2022 00:29:01]30928: WAF :: fetched 10 new logs [10-08-2022 00:30:02]1109: WAF :: fetched 5 new logs [10-08-2022 00:31:01]3876: WAF :: fetched 12 new logs [10-08-2022 00:32:02]6501: WAF :: fetched 12 new logs [10-08-2022 00:33:01]9047: WAF :: fetched 6 new logs [10-08-2022 00:34:02]11617: WAF :: fetched 10 new logs [10-08-2022 00:35:02]14170: WAF :: fetched 17 new logs [10-08-2022 00:36:02]16954: WAF :: fetched 20 new logs [10-08-2022 00:37:02]19563: WAF :: fetched 21 new logs [10-08-2022 00:38:02]22152: WAF :: fetched 1 new logs [10-08-2022 00:41:01]29938: WAF :: fetched 1 new logs [10-08-2022 00:41:01]29938: Checking for user cron vulnerabilities [10-08-2022 00:42:02]32451: WAF :: fetched 2 new logs [10-08-2022 00:44:01]5218: Checking ditributed CMS bruteforce attacks [10-08-2022 00:45:01]: Checking for software updates [10-08-2022 00:45:01]7521: WAF :: fetched 1 new logs [10-08-2022 00:46:02]10481: WAF :: fetched 1 new logs [10-08-2022 00:48:02]15486: WAF :: fetched 1 new logs [10-08-2022 00:51:01]23149: WAF :: fetched 1 new logs [10-08-2022 00:52:02]25678: WAF :: fetched 1 new logs [10-08-2022 00:53:01]28150: WAF :: fetched 1 new logs [10-08-2022 00:54:02]30691: WAF :: fetched 4 new logs [10-08-2022 00:55:02]835: WAF :: fetched 3 new logs [10-08-2022 00:56:02]3602: WAF :: fetched 1 new logs [10-08-2022 01:00:02]13472: WAF :: fetched 3 new logs [10-08-2022 01:01:01]16711: WAF :: fetched 1 new logs [10-08-2022 01:02:02]19571: WAF :: fetched 1 new logs [10-08-2022 01:03:01]22774: WAF :: fetched 1 new logs [10-08-2022 01:04:02]25682: WAF :: fetched 3 new logs [10-08-2022 01:05:01]28601: WAF :: fetched 4 new logs [10-08-2022 01:06:02]31547: WAF :: fetched 5 new logs [10-08-2022 01:07:02]2038: WAF :: fetched 3 new logs [10-08-2022 01:08:01]4841: WAF :: fetched 1 new logs [10-08-2022 01:09:02]7431: WAF :: fetched 1 new logs [10-08-2022 01:10:01]10124: WAF :: fetched 1 new logs [10-08-2022 01:12:01]15709: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660104721 [10-08-2022 01:12:01]15709: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 01:12:03]15709: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 01:12:03]15709: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-0112/20220810-011201-YvMwEY6r0uvYlHQudxadYwAAAAY [10-08-2022 01:12:03]15709: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 01:12:04]15709: WAF :: fetched 144 new logs [10-08-2022 01:15:01]23315: WAF :: fetched 1 new logs [10-08-2022 01:19:01]1705: WAF :: fetched 1 new logs [10-08-2022 01:25:01]18689: WAF :: fetched 4 new logs [10-08-2022 01:27:01]24341: WAF :: fetched 1 new logs [10-08-2022 01:29:01]29755: WAF :: fetched 1 new logs [10-08-2022 01:30:01]32723: WAF :: fetched 2 new logs [10-08-2022 01:32:01]5897: WAF :: fetched 1 new logs [10-08-2022 01:33:01]8642: WAF :: fetched 1 new logs [10-08-2022 01:34:01]11264: WAF :: fetched 1 new logs [10-08-2022 01:38:01]22269: WAF :: fetched 1 new logs [10-08-2022 01:40:01]28097: WAF :: fetched 1 new logs [10-08-2022 01:41:01]31000: WAF :: fetched 1 new logs [10-08-2022 01:41:01]31000: Checking for user cron vulnerabilities [10-08-2022 01:43:01]3970: WAF :: fetched 2 new logs [10-08-2022 01:44:01]6557: Checking ditributed CMS bruteforce attacks [10-08-2022 01:44:01]6557: WAF :: fetched 1 new logs [10-08-2022 01:45:02]: Checking for definition updates [10-08-2022 01:45:02]9366: WAF :: fetched 2 new logs [10-08-2022 01:46:01]12100: WAF :: fetched 4 new logs [10-08-2022 01:47:01]14862: WAF :: fetched 2 new logs [10-08-2022 01:52:01]27811: WAF :: fetched 2 new logs [10-08-2022 01:54:01]481: WAF :: fetched 3 new logs [10-08-2022 02:05:01]29228: WAF :: fetched 1 new logs [10-08-2022 02:06:01]31863: WAF :: fetched 1 new logs [10-08-2022 02:12:01]14769: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660108321 [10-08-2022 02:12:01]14769: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 02:12:03]14769: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 02:12:04]14769: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-0212/20220810-021201-YvM-IZs5KBuRv3qYFl2wvgAAAAs [10-08-2022 02:12:04]14769: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [10-08-2022 02:12:04]14769: WAF :: fetched 1 new logs [10-08-2022 02:17:02]27578: WAF :: fetched 2 new logs [10-08-2022 02:18:02]30189: WAF :: fetched 1 new logs [10-08-2022 02:19:02]32670: WAF :: fetched 1 new logs [10-08-2022 02:20:02]2907: WAF :: fetched 2 new logs [10-08-2022 02:21:02]5533: WAF :: fetched 3 new logs [10-08-2022 02:24:02]13106: WAF :: fetched 2 new logs [10-08-2022 02:29:01]25766: WAF :: fetched 2 new logs [10-08-2022 02:31:01]30961: WAF :: fetched 1 new logs [10-08-2022 02:39:02]21509: WAF :: fetched 3 new logs [10-08-2022 02:41:02]27553: Checking for user cron vulnerabilities [10-08-2022 02:42:02]30384: WAF :: fetched 1 new logs [10-08-2022 02:43:02]508: WAF :: fetched 3 new logs [10-08-2022 02:44:02]3345: Checking ditributed CMS bruteforce attacks [10-08-2022 02:44:02]3345: WAF :: fetched 5 new logs [10-08-2022 02:52:02]24385: WAF :: fetched 5 new logs [10-08-2022 02:53:01]26865: WAF :: fetched 1 new logs [10-08-2022 02:53:02]26870: Updated license status via CDN [10-08-2022 02:55:01]32233: WAF :: fetched 2 new logs [10-08-2022 02:58:02]8149: WAF :: fetched 1 new logs [10-08-2022 03:00:02]13342: WAF :: fetched 1 new logs [10-08-2022 03:00:02]13342: Found and updated 29 CMS installations [10-08-2022 03:01:01]16743: WAF :: fetched 4 new logs [10-08-2022 03:02:19]13342: Sending CMS version vulnerability report emails to cpanel users [10-08-2022 03:02:22]13342: Checking wordpress installations for suspicious directories [10-08-2022 03:03:01]22683: WAF :: fetched 26 new logs [10-08-2022 03:04:02]25600: WAF :: fetched 1 new logs [10-08-2022 03:04:28]22714: Sending CMS version vulnerability report emails to cpanel users [10-08-2022 03:04:31]22714: Checking wordpress installations for suspicious directories [10-08-2022 03:07:01]1126: WAF :: fetched 5 new logs [10-08-2022 03:08:02]3733: WAF :: fetched 3 new logs [10-08-2022 03:09:01]6226: WAF :: fetched 2 new logs [10-08-2022 03:10:02]8769: WAF :: fetched 7 new logs [10-08-2022 03:12:01]13918: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660111921 [10-08-2022 03:12:01]13918: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 03:12:03]13918: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 03:12:04]13918: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-0312/20220810-031201-YvNMMe5aMw-Slji7EmoSLAAAAAM [10-08-2022 03:12:04]13918: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 03:12:04]13918: WAF :: fetched 74 new logs [10-08-2022 03:13:02]16479: WAF :: fetched 1 new logs [10-08-2022 03:16:01]24059: WAF :: fetched 2 new logs [10-08-2022 03:22:01]7318: WAF :: fetched 4 new logs [10-08-2022 03:24:01]12334: WAF :: fetched 1 new logs [10-08-2022 03:25:02]14853: WAF :: fetched 1 new logs [10-08-2022 03:27:02]20010: WAF :: fetched 3 new logs [10-08-2022 03:31:02]30119: WAF :: fetched 2 new logs [10-08-2022 03:35:02]8046: WAF :: fetched 4 new logs [10-08-2022 03:37:02]13449: WAF :: fetched 1 new logs [10-08-2022 03:39:01]18560: WAF :: fetched 2 new logs [10-08-2022 03:40:01]21108: WAF :: fetched 26 new logs [10-08-2022 03:41:01]23693: WAF :: fetched 3 new logs [10-08-2022 03:41:01]23693: Checking for user cron vulnerabilities [10-08-2022 03:43:02]28808: WAF :: fetched 1 new logs [10-08-2022 03:44:01]31476: Checking ditributed CMS bruteforce attacks [10-08-2022 03:47:02]6909: WAF :: fetched 2 new logs [10-08-2022 03:48:01]9577: WAF :: fetched 1 new logs [10-08-2022 03:55:01]29201: WAF :: fetched 1 new logs [10-08-2022 03:57:02]2007: WAF :: fetched 1 new logs [10-08-2022 03:58:01]4594: WAF :: fetched 3 new logs [10-08-2022 03:59:02]7129: WAF :: fetched 7 new logs [10-08-2022 04:00:01]9369: WAF :: fetched 4 new logs [10-08-2022 04:03:02]17551: WAF :: fetched 1 new logs [10-08-2022 04:06:01]25137: WAF :: fetched 2 new logs [10-08-2022 04:09:01]320: WAF :: fetched 1 new logs [10-08-2022 04:10:02]3057: WAF :: fetched 1 new logs [10-08-2022 04:12:02]8184: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660115522 [10-08-2022 04:12:02]8184: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 04:12:04]8184: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 04:12:04]8184: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-0412/20220810-041202-YvNaQqLzeFAU1Vpi0eU2FQAAAAI [10-08-2022 04:12:04]8184: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 04:12:04]8184: WAF :: fetched 4 new logs [10-08-2022 04:13:01]10723: WAF :: fetched 2 new logs [10-08-2022 04:14:02]13253: WAF :: fetched 5 new logs [10-08-2022 04:15:01]15759: WAF :: fetched 1 new logs [10-08-2022 04:17:01]20866: WAF :: fetched 1 new logs [10-08-2022 04:22:02]1390: WAF :: fetched 1 new logs [10-08-2022 04:23:01]3944: WAF :: fetched 2 new logs [10-08-2022 04:24:02]6475: WAF :: fetched 1 new logs [10-08-2022 04:25:01]8990: WAF :: fetched 1 new logs [10-08-2022 04:30:02]21715: WAF :: fetched 2 new logs [10-08-2022 04:31:01]24254: WAF :: fetched 2 new logs [10-08-2022 04:33:01]29335: WAF :: fetched 4 new logs [10-08-2022 04:36:02]4805: WAF :: fetched 2 new logs [10-08-2022 04:37:01]7427: WAF :: fetched 1 new logs [10-08-2022 04:38:02]10005: WAF :: fetched 11 new logs [10-08-2022 04:39:01]12581: WAF :: fetched 3 new logs [10-08-2022 04:40:02]15258: WAF :: fetched 2 new logs [10-08-2022 04:41:01]17803: WAF :: fetched 6 new logs [10-08-2022 04:41:01]17803: Checking for user cron vulnerabilities [10-08-2022 04:42:02]20440: WAF :: fetched 6 new logs [10-08-2022 04:43:01]22956: WAF :: fetched 2 new logs [10-08-2022 04:44:01]25482: Checking ditributed CMS bruteforce attacks [10-08-2022 04:44:02]25482: WAF :: fetched 3 new logs [10-08-2022 04:45:01]27949: WAF :: fetched 1 new logs [10-08-2022 04:46:01]30678: WAF :: fetched 3 new logs [10-08-2022 04:47:02]919: WAF :: fetched 4 new logs [10-08-2022 04:48:01]3541: WAF :: fetched 4 new logs [10-08-2022 04:49:02]6088: WAF :: fetched 10 new logs [10-08-2022 04:50:01]8576: WAF :: fetched 1 new logs [10-08-2022 04:51:02]11216: WAF :: fetched 1 new logs [10-08-2022 04:52:01]13797: WAF :: fetched 3 new logs [10-08-2022 04:53:02]16345: WAF :: fetched 3 new logs [10-08-2022 04:54:01]18818: WAF :: fetched 3 new logs [10-08-2022 04:56:01]23918: WAF :: fetched 3 new logs [10-08-2022 04:57:02]26544: WAF :: fetched 1 new logs [10-08-2022 04:59:01]31553: WAF :: fetched 1 new logs [10-08-2022 05:00:01]1431: WAF :: fetched 1 new logs [10-08-2022 05:01:42]4520: Starting daily scan on files updated in last 24 hrs [10-08-2022 05:02:01]7142: WAF :: fetched 1 new logs [10-08-2022 05:04:01]12151: WAF :: fetched 1 new logs [10-08-2022 05:05:01]14713: WAF :: fetched 1 new logs [10-08-2022 05:10:02]27411: WAF :: fetched 1 new logs [10-08-2022 05:11:01]29990: WAF :: fetched 1 new logs [10-08-2022 05:12:02]32574: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660119122 [10-08-2022 05:12:02]32574: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 05:12:04]32574: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 05:12:04]32574: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-0512/20220810-051202-YvNoUhSu0WKK10Tmns9GDgAAAAs [10-08-2022 05:12:04]32574: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 05:12:04]32574: WAF :: fetched 9 new logs [10-08-2022 05:14:02]5284: WAF :: fetched 3 new logs [10-08-2022 05:17:01]12949: WAF :: fetched 1 new logs [10-08-2022 05:19:01]18110: WAF :: fetched 10 new logs [10-08-2022 05:20:02]20661: WAF :: fetched 1 new logs [10-08-2022 05:23:01]28431: WAF :: fetched 1 new logs [10-08-2022 05:27:01]6330: WAF :: fetched 1 new logs [10-08-2022 05:29:01]11341: WAF :: fetched 2 new logs [10-08-2022 05:30:02]13868: WAF :: fetched 1 new logs [10-08-2022 05:34:02]24121: WAF :: fetched 2 new logs [10-08-2022 05:36:01]29226: WAF :: fetched 2 new logs [10-08-2022 05:41:01]9856: WAF :: fetched 2 new logs [10-08-2022 05:41:01]9856: Checking for user cron vulnerabilities [10-08-2022 05:42:01]12588: WAF :: fetched 1 new logs [10-08-2022 05:44:01]17768: Checking ditributed CMS bruteforce attacks [10-08-2022 05:46:01]22849: WAF :: fetched 5 new logs [10-08-2022 05:47:01]25416: WAF :: fetched 1 new logs [10-08-2022 05:49:01]30520: WAF :: fetched 1 new logs [10-08-2022 05:50:01]682: WAF :: fetched 1 new logs [10-08-2022 05:52:02]6029: WAF :: fetched 1 new logs [10-08-2022 05:54:02]11138: WAF :: fetched 2 new logs [10-08-2022 05:55:01]13659: WAF :: fetched 7 new logs [10-08-2022 05:56:02]16258: WAF :: fetched 2 new logs [10-08-2022 05:57:01]18825: WAF :: fetched 1 new logs [10-08-2022 06:01:01]29136: WAF :: fetched 2 new logs [10-08-2022 06:02:02]31784: WAF :: fetched 1 new logs [10-08-2022 06:08:02]14829: WAF :: fetched 10 new logs [10-08-2022 06:12:02]25049: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660122722 [10-08-2022 06:12:02]25049: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 06:12:04]25049: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 06:12:04]25049: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-0612/20220810-061202-YvN2YohHsvXuK86A1ybiHQAAAAA [10-08-2022 06:12:04]25049: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [10-08-2022 06:12:05]25049: WAF :: fetched 1 new logs [10-08-2022 06:13:01]27540: WAF :: fetched 1 new logs [10-08-2022 06:15:02]32616: WAF :: fetched 2 new logs [10-08-2022 06:18:01]8033: WAF :: fetched 3 new logs [10-08-2022 06:19:02]10614: WAF :: fetched 1 new logs [10-08-2022 06:23:02]21012: WAF :: fetched 4 new logs [10-08-2022 06:24:01]23517: WAF :: fetched 5 new logs [10-08-2022 06:27:01]31437: WAF :: fetched 3 new logs [10-08-2022 06:29:01]4218: WAF :: fetched 1 new logs [10-08-2022 06:30:02]6739: WAF :: fetched 2 new logs [10-08-2022 06:31:01]9311: WAF :: fetched 4 new logs [10-08-2022 06:32:02]11978: WAF :: fetched 1 new logs [10-08-2022 06:33:01]14503: WAF :: fetched 1 new logs [10-08-2022 06:38:02]27317: WAF :: fetched 1 new logs [10-08-2022 06:41:01]2807: Checking for user cron vulnerabilities [10-08-2022 06:42:02]5471: WAF :: fetched 2 new logs [10-08-2022 06:44:01]10651: Checking ditributed CMS bruteforce attacks [10-08-2022 06:44:02]10651: WAF :: fetched 3 new logs [10-08-2022 06:47:01]18535: WAF :: fetched 1 new logs [10-08-2022 06:50:02]26214: WAF :: fetched 1 new logs [10-08-2022 06:52:02]31440: WAF :: fetched 1 new logs [10-08-2022 06:53:02]1642: WAF :: fetched 5 new logs [10-08-2022 06:54:02]4314: WAF :: fetched 4 new logs [10-08-2022 06:55:02]6882: WAF :: fetched 6 new logs [10-08-2022 06:59:02]17111: WAF :: fetched 2 new logs [10-08-2022 07:01:02]22385: WAF :: fetched 2 new logs [10-08-2022 07:02:01]24982: WAF :: fetched 1 new logs [10-08-2022 07:03:02]27514: WAF :: fetched 1 new logs [10-08-2022 07:06:01]2845: WAF :: fetched 2 new logs [10-08-2022 07:08:01]8037: WAF :: fetched 1 new logs [10-08-2022 07:10:01]13217: WAF :: fetched 4 new logs [10-08-2022 07:11:02]15803: WAF :: fetched 5 new logs [10-08-2022 07:12:01]18382: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660126321 [10-08-2022 07:12:01]18382: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 07:12:03]18382: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 07:12:04]18382: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-0712/20220810-071201-YvOEcVXslYVj0svR8aEgAQAAABQ [10-08-2022 07:12:04]18382: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 07:12:04]18382: WAF :: fetched 51 new logs [10-08-2022 07:14:01]23485: WAF :: fetched 1 new logs [10-08-2022 07:16:01]28584: WAF :: fetched 1 new logs [10-08-2022 07:21:02]9166: WAF :: fetched 1 new logs [10-08-2022 07:22:01]11691: WAF :: fetched 2 new logs [10-08-2022 07:23:02]14335: WAF :: fetched 1 new logs [10-08-2022 07:24:01]16859: WAF :: fetched 1 new logs [10-08-2022 07:25:02]19507: WAF :: fetched 1 new logs [10-08-2022 07:27:02]24802: WAF :: fetched 1 new logs [10-08-2022 07:28:01]27409: WAF :: fetched 1 new logs [10-08-2022 07:31:02]2879: WAF :: fetched 1 new logs [10-08-2022 07:32:01]5429: WAF :: fetched 1 new logs [10-08-2022 07:34:01]10587: WAF :: fetched 2 new logs [10-08-2022 07:38:01]20901: WAF :: fetched 3 new logs [10-08-2022 07:39:02]23489: WAF :: fetched 1 new logs [10-08-2022 07:40:01]26077: WAF :: fetched 2 new logs [10-08-2022 07:41:02]28742: Checking for user cron vulnerabilities [10-08-2022 07:42:01]31336: WAF :: fetched 2 new logs [10-08-2022 07:43:01]1646: WAF :: fetched 1 new logs [10-08-2022 07:44:01]4326: Checking ditributed CMS bruteforce attacks [10-08-2022 07:45:01]: Checking for definition updates [10-08-2022 07:46:01]9642: WAF :: fetched 1 new logs [10-08-2022 07:48:01]14911: WAF :: fetched 1 new logs [10-08-2022 07:49:01]17483: WAF :: fetched 5 new logs [10-08-2022 07:50:01]20208: WAF :: fetched 1 new logs [10-08-2022 07:54:01]30803: WAF :: fetched 1 new logs [10-08-2022 07:55:01]937: WAF :: fetched 6 new logs [10-08-2022 07:57:01]6261: WAF :: fetched 3 new logs [10-08-2022 07:58:01]9020: WAF :: fetched 2 new logs [10-08-2022 07:59:01]11595: WAF :: fetched 4 new logs [10-08-2022 08:01:01]17026: WAF :: fetched 1 new logs [10-08-2022 08:04:01]24885: WAF :: fetched 3 new logs [10-08-2022 08:05:01]27493: WAF :: fetched 2 new logs [10-08-2022 08:06:01]30125: WAF :: fetched 1 new logs [10-08-2022 08:12:01]13496: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660129921 [10-08-2022 08:12:01]13496: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 08:12:03]13496: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 08:12:04]13496: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-0812/20220810-081201-YvOSgWW4WAesTEwWrzgwHwAAACw [10-08-2022 08:12:04]13496: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 08:12:04]13496: WAF :: fetched 1 new logs [10-08-2022 08:14:01]18846: WAF :: fetched 3 new logs [10-08-2022 08:15:02]21415: WAF :: fetched 3 new logs [10-08-2022 08:20:01]2073: WAF :: fetched 1 new logs [10-08-2022 08:22:02]7516: WAF :: fetched 1 new logs [10-08-2022 08:24:01]12718: WAF :: fetched 4 new logs [10-08-2022 08:25:02]15359: WAF :: fetched 1 new logs [10-08-2022 08:29:02]25675: WAF :: fetched 2 new logs [10-08-2022 08:30:02]28280: WAF :: fetched 2 new logs [10-08-2022 08:31:01]31008: WAF :: fetched 1 new logs [10-08-2022 08:33:01]4054: WAF :: fetched 1 new logs [10-08-2022 08:36:01]11970: WAF :: fetched 3 new logs [10-08-2022 08:37:02]14535: WAF :: fetched 2 new logs [10-08-2022 08:38:01]17084: WAF :: fetched 2 new logs [10-08-2022 08:40:01]22327: WAF :: fetched 1 new logs [10-08-2022 08:41:02]24982: WAF :: fetched 5 new logs [10-08-2022 08:41:02]24982: Checking for user cron vulnerabilities [10-08-2022 08:44:01]32727: Checking ditributed CMS bruteforce attacks [10-08-2022 08:44:01]32727: WAF :: fetched 1 new logs [10-08-2022 08:45:02]2993: WAF :: fetched 1 new logs [10-08-2022 08:48:01]10782: WAF :: fetched 2 new logs [10-08-2022 08:49:01]13340: WAF :: fetched 2 new logs [10-08-2022 08:50:01]16100: WAF :: fetched 2 new logs [10-08-2022 08:52:01]21413: WAF :: fetched 5 new logs [10-08-2022 08:53:01]24119: WAF :: fetched 1 new logs [10-08-2022 08:55:02]29461: WAF :: fetched 2 new logs [10-08-2022 08:56:01]32083: WAF :: fetched 1 new logs [10-08-2022 08:57:01]2305: WAF :: fetched 3 new logs [10-08-2022 08:58:01]5065: WAF :: fetched 1 new logs [10-08-2022 09:05:01]23849: WAF :: fetched 2 new logs [10-08-2022 09:12:01]9828: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660133521 [10-08-2022 09:12:01]9828: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 09:12:03]9828: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 09:12:04]9828: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-0912/20220810-091201-YvOgkUqSL5VdA892ayKn5gAAABg [10-08-2022 09:12:04]9828: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 09:12:04]9828: WAF :: fetched 1 new logs [10-08-2022 09:17:02]23116: WAF :: fetched 1 new logs [10-08-2022 09:25:01]12056: WAF :: fetched 1 new logs [10-08-2022 09:32:02]30703: WAF :: fetched 1 new logs [10-08-2022 09:32:02]30712: httpd.conf changed. Refreshing watchlist. [10-08-2022 09:36:02]9162: WAF :: fetched 1 new logs [10-08-2022 09:37:01]11897: WAF :: fetched 36 new logs [10-08-2022 09:37:01]11916: httpd.conf changed. Refreshing watchlist. [10-08-2022 09:38:02]14746: WAF :: fetched 1 new logs [10-08-2022 09:40:02]20132: WAF :: fetched 2 new logs [10-08-2022 09:41:01]22804: Checking for user cron vulnerabilities [10-08-2022 09:42:02]25428: WAF :: fetched 1 new logs [10-08-2022 09:44:01]30688: Checking ditributed CMS bruteforce attacks [10-08-2022 09:44:02]30688: WAF :: fetched 1 new logs [10-08-2022 09:47:01]6213: WAF :: fetched 1 new logs [10-08-2022 09:48:02]8924: WAF :: fetched 1 new logs [10-08-2022 09:50:01]14201: WAF :: fetched 3 new logs [10-08-2022 09:54:01]25003: WAF :: fetched 5 new logs [10-08-2022 09:55:05]27777: API call failed for url https://api.recaptcha.cloud/add Status : 500 [10-08-2022 09:58:01]3570: WAF :: fetched 1 new logs [10-08-2022 09:59:01]6178: WAF :: fetched 3 new logs [10-08-2022 10:00:01]8655: WAF :: fetched 5 new logs [10-08-2022 10:04:01]19825: WAF :: fetched 3 new logs [10-08-2022 10:05:01]22616: WAF :: fetched 1 new logs [10-08-2022 10:06:01]25367: WAF :: fetched 1 new logs [10-08-2022 10:10:01]3650: WAF :: fetched 8 new logs [10-08-2022 10:11:02]6396: WAF :: fetched 11 new logs [10-08-2022 10:12:01]9038: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660137121 [10-08-2022 10:12:01]9038: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 10:12:03]9038: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 10:12:04]9038: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-1012/20220810-101201-YvOuochIRiC117zOFRo_1QAAADI [10-08-2022 10:12:04]9038: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 10:12:04]9038: WAF :: fetched 20 new logs [10-08-2022 10:13:02]11899: WAF :: fetched 44 new logs [10-08-2022 10:14:01]14586: WAF :: fetched 52 new logs [10-08-2022 10:15:01]17281: WAF :: fetched 61 new logs [10-08-2022 10:16:02]20081: WAF :: fetched 54 new logs [10-08-2022 10:17:02]22741: WAF :: fetched 49 new logs [10-08-2022 10:18:01]25395: WAF :: fetched 38 new logs [10-08-2022 10:19:02]28087: WAF :: fetched 9 new logs [10-08-2022 10:20:01]30715: WAF :: fetched 10 new logs [10-08-2022 10:21:02]1107: WAF :: fetched 15 new logs [10-08-2022 10:22:01]3847: WAF :: fetched 12 new logs [10-08-2022 10:23:02]6644: WAF :: fetched 5 new logs [10-08-2022 10:24:02]9270: WAF :: fetched 8 new logs [10-08-2022 10:25:01]11960: WAF :: fetched 8 new logs [10-08-2022 10:26:01]14656: WAF :: fetched 12 new logs [10-08-2022 10:27:01]17326: WAF :: fetched 16 new logs [10-08-2022 10:28:01]20097: WAF :: fetched 41 new logs [10-08-2022 10:29:01]22746: WAF :: fetched 49 new logs [10-08-2022 10:30:02]25419: WAF :: fetched 44 new logs [10-08-2022 10:31:01]28217: WAF :: fetched 42 new logs [10-08-2022 10:32:02]31108: WAF :: fetched 28 new logs [10-08-2022 10:33:01]1401: WAF :: fetched 2 new logs [10-08-2022 10:34:01]4098: WAF :: fetched 1 new logs [10-08-2022 10:35:01]6756: WAF :: fetched 1 new logs [10-08-2022 10:37:01]12198: WAF :: fetched 2 new logs [10-08-2022 10:39:01]17520: WAF :: fetched 1 new logs [10-08-2022 10:40:01]20197: WAF :: fetched 3 new logs [10-08-2022 10:41:01]22959: WAF :: fetched 2 new logs [10-08-2022 10:41:01]22959: Checking for user cron vulnerabilities [10-08-2022 10:42:01]25563: WAF :: fetched 2 new logs [10-08-2022 10:43:02]28279: WAF :: fetched 7 new logs [10-08-2022 10:44:01]30799: Checking ditributed CMS bruteforce attacks [10-08-2022 10:45:01]1219: WAF :: fetched 3 new logs [10-08-2022 10:46:01]4012: WAF :: fetched 3 new logs [10-08-2022 10:47:01]6589: WAF :: fetched 3 new logs [10-08-2022 10:48:01]9311: WAF :: fetched 1 new logs [10-08-2022 10:51:02]17529: WAF :: fetched 2 new logs [10-08-2022 10:56:02]30851: WAF :: fetched 1 new logs [10-08-2022 10:59:02]6663: WAF :: fetched 3 new logs [10-08-2022 11:00:02]9167: WAF :: fetched 4 new logs [10-08-2022 11:02:02]15013: WAF :: fetched 1 new logs [10-08-2022 11:05:01]23209: WAF :: fetched 1 new logs [10-08-2022 11:07:02]28681: WAF :: fetched 1 new logs [10-08-2022 11:08:03]28836: Performed RBL check for 23.111.136.34. [10-08-2022 11:09:01]1801: WAF :: fetched 5 new logs [10-08-2022 11:11:01]7535: WAF :: fetched 3 new logs [10-08-2022 11:12:01]10228: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660140721 [10-08-2022 11:12:02]10228: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 11:12:04]10228: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 11:12:05]10228: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-1112/20220810-111202-YvO8srtwgczbu3BCsgCogAAAACs [10-08-2022 11:12:05]10228: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 11:12:05]10228: WAF :: fetched 10 new logs [10-08-2022 11:13:01]12980: WAF :: fetched 2 new logs [10-08-2022 11:16:01]20915: WAF :: fetched 1 new logs [10-08-2022 11:17:01]23525: WAF :: fetched 7 new logs [10-08-2022 11:18:01]26275: WAF :: fetched 1 new logs [10-08-2022 11:20:02]31780: WAF :: fetched 1 new logs [10-08-2022 11:21:01]2109: WAF :: fetched 5 new logs [10-08-2022 11:22:01]4818: WAF :: fetched 1 new logs [10-08-2022 11:27:01]18231: WAF :: fetched 1 new logs [10-08-2022 11:29:02]23672: WAF :: fetched 2 new logs [10-08-2022 11:30:01]26244: WAF :: fetched 3 new logs [10-08-2022 11:31:01]28968: WAF :: fetched 1 new logs [10-08-2022 11:32:01]31562: WAF :: fetched 3 new logs [10-08-2022 11:34:02]4670: WAF :: fetched 1 new logs [10-08-2022 11:36:02]9999: WAF :: fetched 2 new logs [10-08-2022 11:37:02]12707: WAF :: fetched 1 new logs [10-08-2022 11:39:02]18017: WAF :: fetched 1 new logs [10-08-2022 11:40:01]20658: WAF :: fetched 1 new logs [10-08-2022 11:41:02]23366: Checking for user cron vulnerabilities [10-08-2022 11:42:01]25942: WAF :: fetched 2 new logs [10-08-2022 11:43:02]28645: WAF :: fetched 1 new logs [10-08-2022 11:44:01]31301: Checking ditributed CMS bruteforce attacks [10-08-2022 11:45:01]1589: WAF :: fetched 3 new logs [10-08-2022 11:46:01]4570: WAF :: fetched 1 new logs [10-08-2022 11:48:01]9906: WAF :: fetched 1 new logs [10-08-2022 11:51:01]17914: WAF :: fetched 18 new logs [10-08-2022 11:52:01]20623: WAF :: fetched 103 new logs [10-08-2022 11:53:01]23270: WAF :: fetched 52 new logs [10-08-2022 11:56:01]31254: WAF :: fetched 2 new logs [10-08-2022 11:57:02]1544: WAF :: fetched 4 new logs [10-08-2022 12:00:02]9529: WAF :: fetched 5 new logs [10-08-2022 12:01:01]12664: WAF :: fetched 1 new logs [10-08-2022 12:02:02]15342: WAF :: fetched 2 new logs [10-08-2022 12:03:01]18060: WAF :: fetched 3 new logs [10-08-2022 12:04:01]20859: WAF :: fetched 2 new logs [10-08-2022 12:05:01]23575: WAF :: fetched 1 new logs [10-08-2022 12:08:01]31624: WAF :: fetched 1 new logs [10-08-2022 12:09:01]2014: WAF :: fetched 2 new logs [10-08-2022 12:10:01]4788: WAF :: fetched 2 new logs [10-08-2022 12:11:01]7498: WAF :: fetched 2 new logs [10-08-2022 12:12:01]10081: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660144321 [10-08-2022 12:12:01]10081: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 12:12:03]10081: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 12:12:03]10081: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-1212/20220810-121201-YvPKwTbEK-cJVPkoEBF-6wAAAAQ [10-08-2022 12:12:03]10081: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 12:12:04]10081: WAF :: fetched 1 new logs [10-08-2022 12:13:01]12752: WAF :: fetched 1 new logs [10-08-2022 12:14:01]15440: WAF :: fetched 1 new logs [10-08-2022 12:15:01]18050: WAF :: fetched 1 new logs [10-08-2022 12:16:01]20780: WAF :: fetched 3 new logs [10-08-2022 12:17:01]23617: WAF :: fetched 1 new logs [10-08-2022 12:19:01]29856: WAF :: fetched 1 new logs [10-08-2022 12:20:02]32574: WAF :: fetched 1 new logs [10-08-2022 12:25:01]13670: WAF :: fetched 4 new logs [10-08-2022 12:26:01]16400: WAF :: fetched 1 new logs [10-08-2022 12:28:01]21684: WAF :: fetched 2 new logs [10-08-2022 12:29:02]24489: WAF :: fetched 4 new logs [10-08-2022 12:31:02]29798: WAF :: fetched 2 new logs [10-08-2022 12:33:01]2805: WAF :: fetched 1 new logs [10-08-2022 12:34:02]5504: WAF :: fetched 3 new logs [10-08-2022 12:35:01]8140: WAF :: fetched 1 new logs [10-08-2022 12:36:01]10799: WAF :: fetched 1 new logs [10-08-2022 12:38:01]16020: WAF :: fetched 1 new logs [10-08-2022 12:39:01]18692: WAF :: fetched 3 new logs [10-08-2022 12:41:01]24066: Checking for user cron vulnerabilities [10-08-2022 12:43:01]29289: WAF :: fetched 1 new logs [10-08-2022 12:44:01]32049: Checking ditributed CMS bruteforce attacks [10-08-2022 12:44:01]32049: WAF :: fetched 4 new logs [10-08-2022 12:45:01]: Checking for software updates [10-08-2022 12:45:01]2313: WAF :: fetched 1 new logs [10-08-2022 12:46:01]5099: WAF :: fetched 3 new logs [10-08-2022 12:47:01]7948: WAF :: fetched 1 new logs [10-08-2022 12:50:02]16147: WAF :: fetched 1 new logs [10-08-2022 12:51:01]18905: WAF :: fetched 1 new logs [10-08-2022 12:52:02]21567: WAF :: fetched 1 new logs [10-08-2022 12:56:01]32212: WAF :: fetched 3 new logs [10-08-2022 13:02:01]16082: WAF :: fetched 1 new logs [10-08-2022 13:03:01]18690: WAF :: fetched 2 new logs [10-08-2022 13:06:01]26637: WAF :: fetched 4 new logs [10-08-2022 13:09:02]2534: WAF :: fetched 1 new logs [10-08-2022 13:11:01]7882: WAF :: fetched 1 new logs [10-08-2022 13:12:01]10495: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660147921 [10-08-2022 13:12:01]10495: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 13:12:03]10495: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 13:12:03]10495: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-1312/20220810-131201-YvPY0etLb_sIR_Z2PctpNAAAAAU [10-08-2022 13:12:03]10495: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 13:12:04]10495: WAF :: fetched 3 new logs [10-08-2022 13:13:01]13124: WAF :: fetched 7 new logs [10-08-2022 13:14:01]15856: WAF :: fetched 1 new logs [10-08-2022 13:15:01]18530: WAF :: fetched 6 new logs [10-08-2022 13:16:01]21182: WAF :: fetched 6 new logs [10-08-2022 13:17:01]23834: WAF :: fetched 1 new logs [10-08-2022 13:18:01]26458: WAF :: fetched 6 new logs [10-08-2022 13:19:01]29166: WAF :: fetched 6 new logs [10-08-2022 13:21:01]2384: WAF :: fetched 1 new logs [10-08-2022 13:23:01]7825: WAF :: fetched 1 new logs [10-08-2022 13:24:01]10517: WAF :: fetched 3 new logs [10-08-2022 13:28:01]21174: WAF :: fetched 1 new logs [10-08-2022 13:31:01]29317: WAF :: fetched 1 new logs [10-08-2022 13:36:01]10314: WAF :: fetched 2 new logs [10-08-2022 13:37:01]12955: WAF :: fetched 2 new logs [10-08-2022 13:38:01]15568: WAF :: fetched 3 new logs [10-08-2022 13:39:01]18253: WAF :: fetched 2 new logs [10-08-2022 13:41:01]23577: Checking for user cron vulnerabilities [10-08-2022 13:42:02]26200: WAF :: fetched 1 new logs [10-08-2022 13:44:01]31500: Checking ditributed CMS bruteforce attacks [10-08-2022 13:44:02]31500: WAF :: fetched 1 new logs [10-08-2022 13:45:01]: Checking for definition updates [10-08-2022 13:45:01]1710: WAF :: fetched 3 new logs [10-08-2022 13:45:02]1720: Updated virus defnition : signatures.ndb [10-08-2022 13:47:01]7069: WAF :: fetched 2 new logs [10-08-2022 13:50:01]15104: WAF :: fetched 2 new logs [10-08-2022 13:51:02]17849: WAF :: fetched 2 new logs [10-08-2022 13:52:01]20501: WAF :: fetched 4 new logs [10-08-2022 13:53:02]23211: WAF :: fetched 2 new logs [10-08-2022 13:54:02]26133: WAF :: fetched 3 new logs [10-08-2022 13:56:02]31570: WAF :: fetched 1 new logs [10-08-2022 13:59:01]7266: WAF :: fetched 2 new logs [10-08-2022 14:00:01]9754: WAF :: fetched 5 new logs [10-08-2022 14:02:01]15558: WAF :: fetched 2 new logs [10-08-2022 14:03:02]18249: WAF :: fetched 2 new logs [10-08-2022 14:05:02]23596: WAF :: fetched 1 new logs [10-08-2022 14:07:02]29184: WAF :: fetched 1 new logs [10-08-2022 14:09:01]2217: WAF :: fetched 2 new logs [10-08-2022 14:10:02]4945: WAF :: fetched 3 new logs [10-08-2022 14:12:01]10386: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660151521 [10-08-2022 14:12:01]10386: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 14:12:03]10386: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 14:12:04]10386: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-1412/20220810-141201-YvPm4V6yJ8_We714f6UoTQAAABI [10-08-2022 14:12:04]10386: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 14:12:04]10386: WAF :: fetched 4 new logs [10-08-2022 14:13:02]13108: WAF :: fetched 1 new logs [10-08-2022 14:17:02]23790: WAF :: fetched 2 new logs [10-08-2022 14:18:01]26399: WAF :: fetched 2 new logs [10-08-2022 14:21:01]2263: WAF :: fetched 1 new logs [10-08-2022 14:23:01]7526: WAF :: fetched 2 new logs [10-08-2022 14:24:01]10306: WAF :: fetched 2 new logs [10-08-2022 14:25:01]12906: WAF :: fetched 1 new logs [10-08-2022 14:28:01]21157: WAF :: fetched 1 new logs [10-08-2022 14:29:02]24037: WAF :: fetched 1 new logs [10-08-2022 14:32:01]31992: WAF :: fetched 7 new logs [10-08-2022 14:34:01]4978: WAF :: fetched 1 new logs [10-08-2022 14:39:02]18609: WAF :: fetched 3 new logs [10-08-2022 14:40:01]21241: WAF :: fetched 3 new logs [10-08-2022 14:41:01]23994: WAF :: fetched 2 new logs [10-08-2022 14:41:01]23994: Checking for user cron vulnerabilities [10-08-2022 14:42:01]26625: WAF :: fetched 2 new logs [10-08-2022 14:44:01]32050: Checking ditributed CMS bruteforce attacks [10-08-2022 14:44:01]32050: WAF :: fetched 5 new logs [10-08-2022 14:47:02]7823: WAF :: fetched 2 new logs [10-08-2022 14:49:01]13195: WAF :: fetched 1 new logs [10-08-2022 14:50:01]15825: WAF :: fetched 1 new logs [10-08-2022 14:52:01]21214: WAF :: fetched 1 new logs [10-08-2022 14:53:01]23814: WAF :: fetched 1 new logs [10-08-2022 14:53:02]23840: Updated license status via CDN [10-08-2022 14:54:01]26625: WAF :: fetched 7 new logs [10-08-2022 14:55:01]29293: WAF :: fetched 21 new logs [10-08-2022 15:00:02]10426: WAF :: fetched 1 new logs [10-08-2022 15:01:01]13589: Reseting cPGuard inotify settings [10-08-2022 15:03:01]18964: WAF :: fetched 1 new logs [10-08-2022 15:04:02]21726: WAF :: fetched 5 new logs [10-08-2022 15:06:02]27138: WAF :: fetched 1 new logs [10-08-2022 15:09:01]2960: WAF :: fetched 1 new logs [10-08-2022 15:12:01]11028: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660155121 [10-08-2022 15:12:01]11028: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 15:12:03]11028: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 15:12:03]11028: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-1512/20220810-151201-YvP08fAbQtQ6QKxDfLtydgAAAB4 [10-08-2022 15:12:03]11028: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 15:12:04]11028: WAF :: fetched 2 new logs [10-08-2022 15:14:01]16567: WAF :: fetched 3 new logs [10-08-2022 15:15:02]19179: WAF :: fetched 2 new logs [10-08-2022 15:16:01]21882: WAF :: fetched 5 new logs [10-08-2022 15:17:01]24641: WAF :: fetched 4 new logs [10-08-2022 15:18:01]27353: WAF :: fetched 1 new logs [10-08-2022 15:19:01]30128: WAF :: fetched 2 new logs [10-08-2022 15:25:01]14244: WAF :: fetched 1 new logs [10-08-2022 15:27:01]19850: WAF :: fetched 9 new logs [10-08-2022 15:28:02]22533: WAF :: fetched 2 new logs [10-08-2022 15:29:01]25342: WAF :: fetched 1 new logs [10-08-2022 15:30:02]28236: WAF :: fetched 1 new logs [10-08-2022 15:32:02]1255: WAF :: fetched 1 new logs [10-08-2022 15:35:01]9697: WAF :: fetched 1 new logs [10-08-2022 15:36:02]12395: WAF :: fetched 2 new logs [10-08-2022 15:38:01]17709: WAF :: fetched 1 new logs [10-08-2022 15:39:02]20541: WAF :: fetched 1 new logs [10-08-2022 15:40:02]23228: WAF :: fetched 1 new logs [10-08-2022 15:41:02]25885: WAF :: fetched 1 new logs [10-08-2022 15:41:02]25885: Checking for user cron vulnerabilities [10-08-2022 15:43:01]31098: WAF :: fetched 2 new logs [10-08-2022 15:44:01]1457: Checking ditributed CMS bruteforce attacks [10-08-2022 15:45:02]4149: WAF :: fetched 1 new logs [10-08-2022 15:46:01]6864: WAF :: fetched 1 new logs [10-08-2022 15:49:02]14915: WAF :: fetched 6 new logs [10-08-2022 15:50:01]17568: WAF :: fetched 6 new logs [10-08-2022 15:51:02]20375: WAF :: fetched 3 new logs [10-08-2022 15:53:01]25629: WAF :: fetched 2 new logs [10-08-2022 15:55:01]30906: WAF :: fetched 3 new logs [10-08-2022 16:00:01]11892: WAF :: fetched 1 new logs [10-08-2022 16:01:01]15128: WAF :: fetched 3 new logs [10-08-2022 16:03:01]20651: WAF :: fetched 3 new logs [10-08-2022 16:07:02]31649: WAF :: fetched 1 new logs [10-08-2022 16:11:02]10268: WAF :: fetched 3 new logs [10-08-2022 16:12:01]13005: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660158721 [10-08-2022 16:12:01]13005: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 16:12:03]13005: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 16:12:04]13005: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-1612/20220810-161201-YvQDAaK-7ndEt-p18HfF_wAAADA [10-08-2022 16:12:04]13005: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 16:15:01]21323: WAF :: fetched 5 new logs [10-08-2022 16:17:01]26712: WAF :: fetched 2 new logs [10-08-2022 16:19:01]32070: WAF :: fetched 2 new logs [10-08-2022 16:23:01]10749: WAF :: fetched 12 new logs [10-08-2022 16:25:01]16152: WAF :: fetched 1 new logs [10-08-2022 16:28:01]24268: WAF :: fetched 12 new logs [10-08-2022 16:29:02]27065: WAF :: fetched 16 new logs [10-08-2022 16:30:01]29904: WAF :: fetched 11 new logs [10-08-2022 16:31:02]32652: WAF :: fetched 31 new logs [10-08-2022 16:32:01]3063: WAF :: fetched 34 new logs [10-08-2022 16:33:02]5755: WAF :: fetched 18 new logs [10-08-2022 16:34:01]8507: WAF :: fetched 19 new logs [10-08-2022 16:35:01]11341: WAF :: fetched 10 new logs [10-08-2022 16:36:01]14111: WAF :: fetched 4 new logs [10-08-2022 16:37:02]16910: WAF :: fetched 2 new logs [10-08-2022 16:38:01]19541: WAF :: fetched 4 new logs [10-08-2022 16:41:02]27795: WAF :: fetched 5 new logs [10-08-2022 16:41:02]27795: Checking for user cron vulnerabilities [10-08-2022 16:41:02]27806: httpd.conf changed. Refreshing watchlist. [10-08-2022 16:42:01]30502: WAF :: fetched 1 new logs [10-08-2022 16:42:01]30479: httpd.conf changed. Refreshing watchlist. [10-08-2022 16:44:01]3485: Checking ditributed CMS bruteforce attacks [10-08-2022 16:44:01]3485: WAF :: fetched 1 new logs [10-08-2022 16:45:02]6175: WAF :: fetched 1 new logs [10-08-2022 16:47:02]11598: WAF :: fetched 7 new logs [10-08-2022 16:47:02]11602: httpd.conf changed. Refreshing watchlist. [10-08-2022 16:51:02]22467: WAF :: fetched 2 new logs [10-08-2022 16:52:02]25154: WAF :: fetched 1 new logs [10-08-2022 16:54:02]30539: WAF :: fetched 2 new logs [10-08-2022 16:56:01]3661: WAF :: fetched 1 new logs [10-08-2022 16:57:01]6263: WAF :: fetched 3 new logs [10-08-2022 16:58:01]8834: WAF :: fetched 29 new logs [10-08-2022 16:59:01]11494: WAF :: fetched 3 new logs [10-08-2022 17:00:01]13969: WAF :: fetched 2 new logs [10-08-2022 17:04:01]25161: WAF :: fetched 1 new logs [10-08-2022 17:06:01]30807: WAF :: fetched 22 new logs [10-08-2022 17:08:01]3767: WAF :: fetched 3 new logs [10-08-2022 17:09:01]6438: WAF :: fetched 1 new logs [10-08-2022 17:11:01]11903: WAF :: fetched 3 new logs [10-08-2022 17:12:01]14585: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660162321 [10-08-2022 17:12:01]14585: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 17:12:03]14585: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 17:12:03]14585: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-1712/20220810-171201-YvQRETs_JtClpEZ1gbAbtQAAAAE [10-08-2022 17:12:03]14585: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 17:14:01]19822: WAF :: fetched 4 new logs [10-08-2022 17:18:01]30436: WAF :: fetched 34 new logs [10-08-2022 17:20:01]3578: WAF :: fetched 1 new logs [10-08-2022 17:21:01]6244: WAF :: fetched 1 new logs [10-08-2022 17:22:01]8861: WAF :: fetched 1 new logs [10-08-2022 17:25:01]16960: WAF :: fetched 3 new logs [10-08-2022 17:26:01]19749: WAF :: fetched 30 new logs [10-08-2022 17:27:01]22469: WAF :: fetched 2 new logs [10-08-2022 17:28:01]25306: WAF :: fetched 13 new logs [10-08-2022 17:32:01]3784: WAF :: fetched 3 new logs [10-08-2022 17:33:02]6361: WAF :: fetched 5 new logs [10-08-2022 17:36:01]14744: WAF :: fetched 1 new logs [10-08-2022 17:37:02]17431: WAF :: fetched 2 new logs [10-08-2022 17:38:01]20105: WAF :: fetched 3 new logs [10-08-2022 17:39:02]22790: WAF :: fetched 5 new logs [10-08-2022 17:41:02]28070: WAF :: fetched 2 new logs [10-08-2022 17:41:02]28070: Checking for user cron vulnerabilities [10-08-2022 17:42:01]30639: WAF :: fetched 4 new logs [10-08-2022 17:43:02]823: WAF :: fetched 4 new logs [10-08-2022 17:44:01]3705: Checking ditributed CMS bruteforce attacks [10-08-2022 17:44:01]3705: WAF :: fetched 5 new logs [10-08-2022 17:45:02]6379: WAF :: fetched 7 new logs [10-08-2022 17:46:01]9016: WAF :: fetched 5 new logs [10-08-2022 17:47:01]11634: WAF :: fetched 3 new logs [10-08-2022 17:48:01]14320: WAF :: fetched 4 new logs [10-08-2022 17:49:02]16958: WAF :: fetched 3 new logs [10-08-2022 17:50:01]19628: WAF :: fetched 6 new logs [10-08-2022 17:51:02]22409: WAF :: fetched 7 new logs [10-08-2022 17:52:01]25031: WAF :: fetched 3 new logs [10-08-2022 17:53:02]27727: WAF :: fetched 3 new logs [10-08-2022 17:54:02]30343: WAF :: fetched 10 new logs [10-08-2022 17:55:01]671: WAF :: fetched 4 new logs [10-08-2022 17:56:02]3489: WAF :: fetched 13 new logs [10-08-2022 17:57:01]6030: WAF :: fetched 6 new logs [10-08-2022 17:58:01]8761: WAF :: fetched 1 new logs [10-08-2022 17:59:01]11371: WAF :: fetched 3 new logs [10-08-2022 18:00:02]13823: WAF :: fetched 6 new logs [10-08-2022 18:01:01]16953: WAF :: fetched 3 new logs [10-08-2022 18:02:02]19625: WAF :: fetched 3 new logs [10-08-2022 18:03:02]22191: WAF :: fetched 3 new logs [10-08-2022 18:04:01]24814: WAF :: fetched 2 new logs [10-08-2022 18:05:02]27486: WAF :: fetched 4 new logs [10-08-2022 18:06:01]30170: WAF :: fetched 3 new logs [10-08-2022 18:08:01]3132: WAF :: fetched 2 new logs [10-08-2022 18:09:01]5717: WAF :: fetched 26 new logs [10-08-2022 18:10:01]8472: WAF :: fetched 5 new logs [10-08-2022 18:12:02]13768: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660165922 [10-08-2022 18:12:02]13768: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 18:12:04]13768: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 18:12:04]13768: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-1812/20220810-181202-YvQfIndw8yjHpjMbGykcdgAAAB4 [10-08-2022 18:12:04]13768: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 18:12:04]13768: WAF :: fetched 4 new logs [10-08-2022 18:13:01]16323: WAF :: fetched 3 new logs [10-08-2022 18:14:01]18902: WAF :: fetched 1 new logs [10-08-2022 18:15:01]21548: WAF :: fetched 5 new logs [10-08-2022 18:16:01]24243: WAF :: fetched 1 new logs [10-08-2022 18:17:01]26791: WAF :: fetched 7 new logs [10-08-2022 18:18:01]29390: WAF :: fetched 2 new logs [10-08-2022 18:19:01]31988: WAF :: fetched 2 new logs [10-08-2022 18:20:01]2358: WAF :: fetched 2 new logs [10-08-2022 18:21:01]5039: WAF :: fetched 2 new logs [10-08-2022 18:22:01]7650: WAF :: fetched 3 new logs [10-08-2022 18:23:01]10232: WAF :: fetched 4 new logs [10-08-2022 18:24:01]12926: WAF :: fetched 1 new logs [10-08-2022 18:26:01]18188: WAF :: fetched 2 new logs [10-08-2022 18:27:01]20770: WAF :: fetched 3 new logs [10-08-2022 18:28:01]23442: WAF :: fetched 5 new logs [10-08-2022 18:29:01]25992: WAF :: fetched 1 new logs [10-08-2022 18:31:01]31365: WAF :: fetched 1 new logs [10-08-2022 18:32:02]1656: WAF :: fetched 1 new logs [10-08-2022 18:33:01]4287: WAF :: fetched 1 new logs [10-08-2022 18:34:01]6880: WAF :: fetched 1 new logs [10-08-2022 18:35:01]9512: WAF :: fetched 1 new logs [10-08-2022 18:36:02]12175: WAF :: fetched 1 new logs [10-08-2022 18:38:02]17367: WAF :: fetched 1 new logs [10-08-2022 18:40:02]22727: WAF :: fetched 2 new logs [10-08-2022 18:41:01]25398: WAF :: fetched 30 new logs [10-08-2022 18:41:01]25398: Checking for user cron vulnerabilities [10-08-2022 18:43:01]30614: WAF :: fetched 1 new logs [10-08-2022 18:44:02]790: Checking ditributed CMS bruteforce attacks [10-08-2022 18:45:02]3553: WAF :: fetched 1 new logs [10-08-2022 18:46:01]6174: WAF :: fetched 18 new logs [10-08-2022 18:47:01]8766: WAF :: fetched 109 new logs [10-08-2022 18:48:01]11385: WAF :: fetched 109 new logs [10-08-2022 18:49:01]14045: WAF :: fetched 100 new logs [10-08-2022 18:50:02]16708: WAF :: fetched 99 new logs [10-08-2022 18:51:01]19355: WAF :: fetched 26 new logs [10-08-2022 18:52:01]21959: WAF :: fetched 2 new logs [10-08-2022 18:53:01]24610: WAF :: fetched 4 new logs [10-08-2022 18:54:01]27199: WAF :: fetched 2 new logs [10-08-2022 18:57:01]2740: WAF :: fetched 1 new logs [10-08-2022 18:58:02]5342: WAF :: fetched 5 new logs [10-08-2022 18:59:01]7882: WAF :: fetched 5 new logs [10-08-2022 19:00:02]10274: WAF :: fetched 2 new logs [10-08-2022 19:01:01]13378: WAF :: fetched 3 new logs [10-08-2022 19:02:02]16011: WAF :: fetched 2 new logs [10-08-2022 19:03:01]18541: WAF :: fetched 2 new logs [10-08-2022 19:08:01]31614: WAF :: fetched 2 new logs [10-08-2022 19:09:01]1833: WAF :: fetched 3 new logs [10-08-2022 19:11:01]7169: WAF :: fetched 1 new logs [10-08-2022 19:12:02]9799: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660169522 [10-08-2022 19:12:02]9799: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 19:12:04]9799: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 19:12:04]9799: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-1912/20220810-191202-YvQtMvinf7vSy3REoGxBdQAAAAA [10-08-2022 19:12:04]9799: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 19:12:04]9799: WAF :: fetched 1 new logs [10-08-2022 19:13:01]12409: WAF :: fetched 2 new logs [10-08-2022 19:14:02]15015: WAF :: fetched 21 new logs [10-08-2022 19:15:01]17654: WAF :: fetched 100 new logs [10-08-2022 19:16:01]20292: WAF :: fetched 96 new logs [10-08-2022 19:17:01]22902: WAF :: fetched 95 new logs [10-08-2022 19:18:02]25451: WAF :: fetched 87 new logs [10-08-2022 19:19:01]28009: WAF :: fetched 27 new logs [10-08-2022 19:20:02]30705: WAF :: fetched 1 new logs [10-08-2022 19:21:01]929: WAF :: fetched 1 new logs [10-08-2022 19:22:02]3677: WAF :: fetched 3 new logs [10-08-2022 19:23:02]6200: WAF :: fetched 4 new logs [10-08-2022 19:24:02]8836: WAF :: fetched 1 new logs [10-08-2022 19:27:01]16668: WAF :: fetched 6 new logs [10-08-2022 19:29:01]21962: WAF :: fetched 44 new logs [10-08-2022 19:30:01]25037: WAF :: fetched 50 new logs [10-08-2022 19:31:01]27846: WAF :: fetched 43 new logs [10-08-2022 19:32:01]30546: WAF :: fetched 98 new logs [10-08-2022 19:33:01]712: WAF :: fetched 95 new logs [10-08-2022 19:34:01]3430: WAF :: fetched 27 new logs [10-08-2022 19:38:01]13957: WAF :: fetched 3 new logs [10-08-2022 19:39:01]16606: WAF :: fetched 1 new logs [10-08-2022 19:41:01]21950: Checking for user cron vulnerabilities [10-08-2022 19:43:01]27206: WAF :: fetched 2 new logs [10-08-2022 19:44:01]29850: Checking ditributed CMS bruteforce attacks [10-08-2022 19:45:01]: Checking for definition updates [10-08-2022 19:46:02]2906: WAF :: fetched 2 new logs [10-08-2022 19:47:01]5550: WAF :: fetched 1 new logs [10-08-2022 19:48:02]8184: WAF :: fetched 4 new logs [10-08-2022 19:50:02]13457: WAF :: fetched 1 new logs [10-08-2022 19:53:01]21376: WAF :: fetched 2 new logs [10-08-2022 19:54:01]24114: WAF :: fetched 1 new logs [10-08-2022 19:57:01]32035: WAF :: fetched 2 new logs [10-08-2022 20:00:01]7281: WAF :: fetched 1 new logs [10-08-2022 20:01:01]10351: WAF :: fetched 1 new logs [10-08-2022 20:02:01]12993: WAF :: fetched 1 new logs [10-08-2022 20:03:01]15568: WAF :: fetched 2 new logs [10-08-2022 20:05:01]20826: WAF :: fetched 1 new logs [10-08-2022 20:06:01]23400: WAF :: fetched 1 new logs [10-08-2022 20:07:01]26036: WAF :: fetched 2 new logs [10-08-2022 20:08:01]28582: WAF :: fetched 9 new logs [10-08-2022 20:11:01]4085: WAF :: fetched 2 new logs [10-08-2022 20:12:01]6653: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660173121 [10-08-2022 20:12:01]6653: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 20:12:03]6653: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 20:12:03]6653: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-2012/20220810-201201-YvQ7QXSAU69Rk-_ulDfvqgAAACM [10-08-2022 20:12:03]6653: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 20:13:01]9280: WAF :: fetched 1 new logs [10-08-2022 20:14:02]11858: WAF :: fetched 3 new logs [10-08-2022 20:15:01]14486: WAF :: fetched 1 new logs [10-08-2022 20:16:02]17124: WAF :: fetched 1 new logs [10-08-2022 20:17:01]19715: WAF :: fetched 1 new logs [10-08-2022 20:18:02]22334: WAF :: fetched 1 new logs [10-08-2022 20:23:02]3142: WAF :: fetched 2 new logs [10-08-2022 20:25:02]8388: WAF :: fetched 4 new logs [10-08-2022 20:26:01]11001: WAF :: fetched 1 new logs [10-08-2022 20:35:02]2345: WAF :: fetched 3 new logs [10-08-2022 20:36:01]5071: WAF :: fetched 1 new logs [10-08-2022 20:37:02]7618: WAF :: fetched 2 new logs [10-08-2022 20:41:02]18141: WAF :: fetched 56 new logs [10-08-2022 20:41:02]18141: Checking for user cron vulnerabilities [10-08-2022 20:42:01]20695: WAF :: fetched 102 new logs [10-08-2022 20:43:02]23375: WAF :: fetched 72 new logs [10-08-2022 20:44:01]25922: Checking ditributed CMS bruteforce attacks [10-08-2022 20:45:01]28617: WAF :: fetched 3 new logs [10-08-2022 20:46:01]31177: WAF :: fetched 1 new logs [10-08-2022 20:47:01]1549: WAF :: fetched 2 new logs [10-08-2022 20:48:01]4209: WAF :: fetched 1 new logs [10-08-2022 20:49:02]6831: WAF :: fetched 1 new logs [10-08-2022 20:50:01]9447: WAF :: fetched 2 new logs [10-08-2022 20:51:02]12227: WAF :: fetched 2 new logs [10-08-2022 20:52:01]14794: WAF :: fetched 4 new logs [10-08-2022 20:53:02]17346: WAF :: fetched 1 new logs [10-08-2022 20:54:01]19927: WAF :: fetched 7 new logs [10-08-2022 20:55:02]22611: WAF :: fetched 6 new logs [10-08-2022 20:56:01]25302: WAF :: fetched 1 new logs [10-08-2022 20:57:02]27890: WAF :: fetched 1 new logs [10-08-2022 20:58:01]30436: WAF :: fetched 8 new logs [10-08-2022 21:01:02]6387: WAF :: fetched 2 new logs [10-08-2022 21:02:01]8953: WAF :: fetched 2 new logs [10-08-2022 21:05:02]16772: WAF :: fetched 2 new logs [10-08-2022 21:07:02]21933: WAF :: fetched 1 new logs [10-08-2022 21:09:02]27086: WAF :: fetched 2 new logs [10-08-2022 21:10:01]29741: WAF :: fetched 5 new logs [10-08-2022 21:11:02]32363: WAF :: fetched 2 new logs [10-08-2022 21:12:01]2605: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660176721 [10-08-2022 21:12:01]2605: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 21:12:03]2605: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 21:12:04]2605: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-2112/20220810-211201-YvRJUcuqZMpCI7gWk-DpNgAAABQ [10-08-2022 21:12:04]2605: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 21:12:04]2605: WAF :: fetched 4 new logs [10-08-2022 21:13:01]5202: WAF :: fetched 5 new logs [10-08-2022 21:16:02]12997: WAF :: fetched 1 new logs [10-08-2022 21:20:02]23423: WAF :: fetched 1 new logs [10-08-2022 21:22:02]28622: WAF :: fetched 7 new logs [10-08-2022 21:23:01]31138: WAF :: fetched 1 new logs [10-08-2022 21:24:02]1341: WAF :: fetched 2 new logs [10-08-2022 21:25:01]4060: WAF :: fetched 2 new logs [10-08-2022 21:26:02]6811: WAF :: fetched 7 new logs [10-08-2022 21:27:01]9315: WAF :: fetched 2 new logs [10-08-2022 21:28:02]11890: WAF :: fetched 6 new logs [10-08-2022 21:29:01]14457: WAF :: fetched 7 new logs [10-08-2022 21:30:02]17054: WAF :: fetched 6 new logs [10-08-2022 21:31:01]19799: WAF :: fetched 4 new logs [10-08-2022 21:32:02]22429: WAF :: fetched 2 new logs [10-08-2022 21:33:01]24995: WAF :: fetched 3 new logs [10-08-2022 21:34:02]27613: WAF :: fetched 2 new logs [10-08-2022 21:40:01]11130: WAF :: fetched 1 new logs [10-08-2022 21:41:01]13856: Checking for user cron vulnerabilities [10-08-2022 21:43:01]19001: WAF :: fetched 2 new logs [10-08-2022 21:44:01]21564: Checking ditributed CMS bruteforce attacks [10-08-2022 21:45:02]24176: WAF :: fetched 1 new logs [10-08-2022 21:46:01]27029: httpd.conf changed. Refreshing watchlist. [10-08-2022 21:47:02]29631: WAF :: fetched 3 new logs [10-08-2022 21:48:01]32241: WAF :: fetched 1 new logs [10-08-2022 21:50:01]4804: WAF :: fetched 1 new logs [10-08-2022 21:52:01]10527: WAF :: fetched 1 new logs [10-08-2022 21:52:01]10540: httpd.conf changed. Refreshing watchlist. [10-08-2022 21:53:01]13144: WAF :: fetched 1 new logs [10-08-2022 21:56:02]21006: WAF :: fetched 1 new logs [10-08-2022 21:57:01]23544: WAF :: fetched 1 new logs [10-08-2022 21:58:01]26156: WAF :: fetched 3 new logs [10-08-2022 21:59:01]28670: WAF :: fetched 3 new logs [10-08-2022 22:00:02]30994: WAF :: fetched 6 new logs [10-08-2022 22:01:01]1805: WAF :: fetched 1 new logs [10-08-2022 22:02:01]4544: WAF :: fetched 3 new logs [10-08-2022 22:04:01]9740: WAF :: fetched 2 new logs [10-08-2022 22:05:02]12343: WAF :: fetched 2 new logs [10-08-2022 22:06:01]14999: WAF :: fetched 2 new logs [10-08-2022 22:07:01]17558: WAF :: fetched 1 new logs [10-08-2022 22:07:08]17557: Performing Domain reputation checks [10-08-2022 22:11:02]27944: WAF :: fetched 1 new logs [10-08-2022 22:12:01]30472: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660180321 [10-08-2022 22:12:01]30472: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 22:12:03]30472: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 22:12:04]30472: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-2212/20220810-221201-YvRXYXrd7A8Q0d-yUogSagAAACg [10-08-2022 22:12:04]30472: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 22:12:04]30472: WAF :: fetched 1 new logs [10-08-2022 22:17:01]11091: WAF :: fetched 1 new logs [10-08-2022 22:18:01]13655: WAF :: fetched 6 new logs [10-08-2022 22:19:01]16247: WAF :: fetched 1 new logs [10-08-2022 22:20:01]18752: WAF :: fetched 1 new logs [10-08-2022 22:24:01]29158: WAF :: fetched 2 new logs [10-08-2022 22:26:01]2141: WAF :: fetched 2 new logs [10-08-2022 22:27:01]4840: WAF :: fetched 3 new logs [10-08-2022 22:28:01]7329: WAF :: fetched 5 new logs [10-08-2022 22:29:01]9942: WAF :: fetched 4 new logs [10-08-2022 22:30:01]12475: WAF :: fetched 49 new logs [10-08-2022 22:31:01]15678: WAF :: fetched 62 new logs [10-08-2022 22:32:01]18243: WAF :: fetched 31 new logs [10-08-2022 22:33:01]20810: WAF :: fetched 2 new logs [10-08-2022 22:35:01]25912: WAF :: fetched 1 new logs [10-08-2022 22:36:01]28583: WAF :: fetched 4 new logs [10-08-2022 22:38:01]1330: WAF :: fetched 2 new logs [10-08-2022 22:41:01]9210: Checking for user cron vulnerabilities [10-08-2022 22:43:01]14306: WAF :: fetched 1 new logs [10-08-2022 22:44:01]16972: Checking ditributed CMS bruteforce attacks [10-08-2022 22:44:01]16972: WAF :: fetched 5 new logs [10-08-2022 22:45:01]19540: WAF :: fetched 10 new logs [10-08-2022 22:46:01]22254: WAF :: fetched 18 new logs [10-08-2022 22:47:02]24851: WAF :: fetched 2 new logs [10-08-2022 22:48:01]27410: WAF :: fetched 13 new logs [10-08-2022 22:49:02]29987: WAF :: fetched 3 new logs [10-08-2022 22:51:01]3002: WAF :: fetched 2 new logs [10-08-2022 22:52:01]5591: WAF :: fetched 2 new logs [10-08-2022 22:53:01]8113: WAF :: fetched 3 new logs [10-08-2022 22:54:01]10742: WAF :: fetched 5 new logs [10-08-2022 22:55:01]13288: WAF :: fetched 18 new logs [10-08-2022 22:56:01]16087: WAF :: fetched 1 new logs [10-08-2022 22:58:01]21191: WAF :: fetched 1 new logs [10-08-2022 23:00:01]26214: WAF :: fetched 1 new logs [10-08-2022 23:02:01]31887: WAF :: fetched 2 new logs [10-08-2022 23:04:01]4672: WAF :: fetched 2 new logs [10-08-2022 23:07:44]12634: Performed RBL check for 23.111.136.34. [10-08-2022 23:08:01]14998: WAF :: fetched 1 new logs [10-08-2022 23:09:01]17556: WAF :: fetched 2 new logs [10-08-2022 23:10:01]20152: WAF :: fetched 7 new logs [10-08-2022 23:11:01]22874: WAF :: fetched 8 new logs [10-08-2022 23:12:01]25410: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660183921 [10-08-2022 23:12:01]25410: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [10-08-2022 23:12:03]25410: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [10-08-2022 23:12:03]25410: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220810/20220810-2312/20220810-231201-YvRlcfVJvQIdEOGeRUmMWwAAACU [10-08-2022 23:12:03]25410: WAF :: No suitable log file found. Using SQLite.. [10-08-2022 23:12:04]25410: WAF :: fetched 8 new logs [10-08-2022 23:13:01]28005: WAF :: fetched 12 new logs [10-08-2022 23:14:01]30486: WAF :: fetched 4 new logs [10-08-2022 23:15:01]570: WAF :: fetched 2 new logs [10-08-2022 23:16:01]3410: WAF :: fetched 5 new logs [10-08-2022 23:17:01]5923: WAF :: fetched 12 new logs [10-08-2022 23:18:02]8446: WAF :: fetched 3 new logs [10-08-2022 23:19:01]11059: WAF :: fetched 81 new logs [10-08-2022 23:20:02]13622: WAF :: fetched 52 new logs [10-08-2022 23:22:02]18830: WAF :: fetched 2 new logs [10-08-2022 23:23:01]21362: WAF :: fetched 2 new logs [10-08-2022 23:25:01]26514: WAF :: fetched 1 new logs [10-08-2022 23:26:01]29204: WAF :: fetched 2 new logs [10-08-2022 23:28:01]1960: WAF :: fetched 2 new logs [10-08-2022 23:29:02]4705: WAF :: fetched 4 new logs [10-08-2022 23:30:01]7223: WAF :: fetched 2 new logs [10-08-2022 23:31:02]10004: WAF :: fetched 5 new logs [10-08-2022 23:32:01]12526: WAF :: fetched 2 new logs [10-08-2022 23:33:02]15107: WAF :: fetched 1 new logs [10-08-2022 23:34:01]17600: WAF :: fetched 1 new logs [10-08-2022 23:35:02]20174: WAF :: fetched 1 new logs [10-08-2022 23:40:02]657: WAF :: fetched 2 new logs [10-08-2022 23:41:01]3447: Checking for user cron vulnerabilities [10-08-2022 23:42:01]6054: WAF :: fetched 1 new logs [10-08-2022 23:43:01]8663: WAF :: fetched 3 new logs [10-08-2022 23:44:01]11217: Checking ditributed CMS bruteforce attacks [10-08-2022 23:44:01]11217: WAF :: fetched 2 new logs [10-08-2022 23:46:01]16499: WAF :: fetched 3 new logs [10-08-2022 23:47:02]19044: WAF :: fetched 1 new logs [10-08-2022 23:50:01]26960: httpd.conf changed. Refreshing watchlist. [10-08-2022 23:51:02]29686: WAF :: fetched 16 new logs [10-08-2022 23:55:02]7885: WAF :: fetched 2 new logs [10-08-2022 23:55:02]7865: httpd.conf changed. Refreshing watchlist. [10-08-2022 23:56:01]10869: WAF :: fetched 48 new logs [10-08-2022 23:57:01]13392: WAF :: fetched 1 new logs [10-08-2022 23:59:01]18476: WAF :: fetched 5 new logs [11-08-2022 00:00:01]20793: WAF :: fetched 3 new logs [11-08-2022 00:01:01]24141: httpd.conf changed. Refreshing watchlist. [11-08-2022 00:01:05]24134: Sending daily report for August 11, 2022 [11-08-2022 00:03:01]29334: WAF :: fetched 2 new logs [11-08-2022 00:05:01]2299: WAF :: fetched 2 new logs [11-08-2022 00:05:01]2299: Deleted 0 entries older than 6 MONTH from scanner_logs [11-08-2022 00:05:01]2299: Deleted 0 files from Quarantine [11-08-2022 00:06:01]5072: WAF :: fetched 1 new logs [11-08-2022 00:09:01]12680: WAF :: fetched 8 new logs [11-08-2022 00:10:01]15230: WAF :: fetched 54 new logs [11-08-2022 00:11:02]17911: WAF :: fetched 64 new logs [11-08-2022 00:12:01]20426: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660187521 [11-08-2022 00:12:01]20426: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 00:12:03]20426: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 00:12:04]20426: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-0012/20220811-001201-YvRzgfQkZzNID8mB-N_ZTAAAABg [11-08-2022 00:12:04]20426: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-08-2022 00:12:04]20426: WAF :: fetched 67 new logs [11-08-2022 00:13:02]22977: WAF :: fetched 66 new logs [11-08-2022 00:14:02]25511: WAF :: fetched 67 new logs [11-08-2022 00:15:02]28094: WAF :: fetched 13 new logs [11-08-2022 00:16:02]30869: WAF :: fetched 1 new logs [11-08-2022 00:19:01]6202: WAF :: fetched 1 new logs [11-08-2022 00:22:02]14001: WAF :: fetched 2 new logs [11-08-2022 00:23:01]16586: WAF :: fetched 2 new logs [11-08-2022 00:24:02]19146: WAF :: fetched 3 new logs [11-08-2022 00:25:01]21706: WAF :: fetched 1 new logs [11-08-2022 00:28:02]29600: WAF :: fetched 2 new logs [11-08-2022 00:29:02]32211: WAF :: fetched 2 new logs [11-08-2022 00:30:01]2431: WAF :: fetched 1 new logs [11-08-2022 00:33:02]10392: WAF :: fetched 4 new logs [11-08-2022 00:34:01]13004: WAF :: fetched 10 new logs [11-08-2022 00:35:02]15597: WAF :: fetched 7 new logs [11-08-2022 00:36:01]18259: WAF :: fetched 3 new logs [11-08-2022 00:38:01]23301: WAF :: fetched 1 new logs [11-08-2022 00:39:02]25904: WAF :: fetched 2 new logs [11-08-2022 00:40:01]28450: WAF :: fetched 1 new logs [11-08-2022 00:41:02]31190: Checking for user cron vulnerabilities [11-08-2022 00:42:01]1318: WAF :: fetched 3 new logs [11-08-2022 00:43:02]3966: WAF :: fetched 1 new logs [11-08-2022 00:44:01]6646: Checking ditributed CMS bruteforce attacks [11-08-2022 00:45:01]: Checking for software updates [11-08-2022 00:45:02]9214: WAF :: fetched 1 new logs [11-08-2022 00:46:01]11967: WAF :: fetched 1 new logs [11-08-2022 00:49:02]19718: WAF :: fetched 1 new logs [11-08-2022 00:51:02]25085: WAF :: fetched 2 new logs [11-08-2022 00:54:01]470: WAF :: fetched 1 new logs [11-08-2022 00:56:01]6076: WAF :: fetched 2 new logs [11-08-2022 00:58:02]11303: WAF :: fetched 1 new logs [11-08-2022 00:59:01]13850: WAF :: fetched 3 new logs [11-08-2022 01:02:02]22746: WAF :: fetched 5 new logs [11-08-2022 01:04:02]28322: WAF :: fetched 1 new logs [11-08-2022 01:06:02]1838: WAF :: fetched 4 new logs [11-08-2022 01:07:01]4669: WAF :: fetched 3 new logs [11-08-2022 01:09:01]10030: WAF :: fetched 2 new logs [11-08-2022 01:11:01]15605: WAF :: fetched 1 new logs [11-08-2022 01:12:02]18120: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660191122 [11-08-2022 01:12:02]18120: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 01:12:04]18120: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 01:12:04]18120: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-0112/20220811-011202-YvSBkrgnKeOQF01jyl561gAAABE [11-08-2022 01:12:04]18120: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 01:12:04]18120: WAF :: fetched 220 new logs [11-08-2022 01:13:01]20731: WAF :: fetched 2 new logs [11-08-2022 01:20:01]7807: WAF :: fetched 5 new logs [11-08-2022 01:22:01]13598: WAF :: fetched 1 new logs [11-08-2022 01:24:02]19008: WAF :: fetched 1 new logs [11-08-2022 01:25:01]21971: WAF :: fetched 16 new logs [11-08-2022 01:31:01]6598: WAF :: fetched 1 new logs [11-08-2022 01:35:01]17488: WAF :: fetched 2 new logs [11-08-2022 01:36:01]20328: WAF :: fetched 2 new logs [11-08-2022 01:41:02]1909: Checking for user cron vulnerabilities [11-08-2022 01:44:01]10323: Checking ditributed CMS bruteforce attacks [11-08-2022 01:44:01]10323: WAF :: fetched 1 new logs [11-08-2022 01:45:01]: Checking for definition updates [11-08-2022 01:46:01]15667: WAF :: fetched 1 new logs [11-08-2022 01:47:02]18386: WAF :: fetched 1 new logs [11-08-2022 01:50:01]26129: WAF :: fetched 3 new logs [11-08-2022 01:53:01]1776: WAF :: fetched 1 new logs [11-08-2022 02:02:01]26306: WAF :: fetched 1 new logs [11-08-2022 02:04:01]31430: WAF :: fetched 1 new logs [11-08-2022 02:09:01]12391: WAF :: fetched 1 new logs [11-08-2022 02:10:02]15039: WAF :: fetched 1 new logs [11-08-2022 02:12:02]20297: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660194722 [11-08-2022 02:12:02]20297: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 02:12:04]20297: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 02:12:04]20297: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-0212/20220811-021202-YvSPoityXFFHcwSGsV7WcwAAABQ [11-08-2022 02:12:04]20297: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 02:12:04]20297: WAF :: fetched 3 new logs [11-08-2022 02:14:02]25492: WAF :: fetched 2 new logs [11-08-2022 02:15:01]28011: WAF :: fetched 46 new logs [11-08-2022 02:16:02]30644: WAF :: fetched 32 new logs [11-08-2022 02:19:02]6027: WAF :: fetched 1 new logs [11-08-2022 02:28:01]29305: WAF :: fetched 1 new logs [11-08-2022 02:29:02]31898: WAF :: fetched 1 new logs [11-08-2022 02:30:01]2089: WAF :: fetched 1 new logs [11-08-2022 02:32:01]7451: WAF :: fetched 1 new logs [11-08-2022 02:33:02]10029: WAF :: fetched 6 new logs [11-08-2022 02:37:02]20696: WAF :: fetched 1 new logs [11-08-2022 02:38:01]23842: WAF :: fetched 2 new logs [11-08-2022 02:41:01]31987: WAF :: fetched 1 new logs [11-08-2022 02:41:01]31987: Checking for user cron vulnerabilities [11-08-2022 02:44:01]8105: Checking ditributed CMS bruteforce attacks [11-08-2022 02:44:01]8105: WAF :: fetched 2 new logs [11-08-2022 02:46:01]13907: WAF :: fetched 1 new logs [11-08-2022 02:49:02]21947: WAF :: fetched 2 new logs [11-08-2022 02:50:01]24635: WAF :: fetched 4 new logs [11-08-2022 02:51:02]27269: WAF :: fetched 4 new logs [11-08-2022 02:53:03]609: Updated license status via CDN [11-08-2022 02:56:01]8478: WAF :: fetched 4 new logs [11-08-2022 02:58:01]13636: WAF :: fetched 1 new logs [11-08-2022 02:59:01]16238: WAF :: fetched 1 new logs [11-08-2022 03:00:02]18471: Found and updated 29 CMS installations [11-08-2022 03:01:02]21661: WAF :: fetched 5 new logs [11-08-2022 03:02:19]18471: Wordpress installation #40 guardian-ba.com.br has errors [11-08-2022 03:02:26]18471: Sending CMS version vulnerability report emails to cpanel users [11-08-2022 03:02:29]18471: Checking wordpress installations for suspicious directories [11-08-2022 03:03:02]27442: WAF :: fetched 3 new logs [11-08-2022 03:04:29]27467: Sending CMS version vulnerability report emails to cpanel users [11-08-2022 03:04:32]27467: Checking wordpress installations for suspicious directories [11-08-2022 03:05:02]1059: WAF :: fetched 1 new logs [11-08-2022 03:06:01]3909: WAF :: fetched 3 new logs [11-08-2022 03:09:02]12057: WAF :: fetched 3 new logs [11-08-2022 03:10:01]14782: WAF :: fetched 1 new logs [11-08-2022 03:12:01]20379: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660198321 [11-08-2022 03:12:01]20379: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 03:12:03]20379: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 03:12:04]20379: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-0312/20220811-031201-YvSdsQNYKQmXS5Vx7IPVhQAAAAw [11-08-2022 03:12:04]20379: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 03:12:04]20379: WAF :: fetched 2 new logs [11-08-2022 03:13:02]23262: WAF :: fetched 1 new logs [11-08-2022 03:15:01]28658: WAF :: fetched 3 new logs [11-08-2022 03:18:02]4338: WAF :: fetched 8 new logs [11-08-2022 03:19:01]6880: WAF :: fetched 56 new logs [11-08-2022 03:20:02]9551: WAF :: fetched 95 new logs [11-08-2022 03:20:02]9546: httpd.conf changed. Refreshing watchlist. [11-08-2022 03:21:02]12255: WAF :: fetched 65 new logs [11-08-2022 03:21:02]12262: httpd.conf changed. Refreshing watchlist. [11-08-2022 03:22:01]14897: WAF :: fetched 81 new logs [11-08-2022 03:23:01]17419: WAF :: fetched 97 new logs [11-08-2022 03:24:01]19971: WAF :: fetched 72 new logs [11-08-2022 03:25:01]22543: WAF :: fetched 18 new logs [11-08-2022 03:26:01]25208: WAF :: fetched 6 new logs [11-08-2022 03:26:01]25185: httpd.conf changed. Refreshing watchlist. [11-08-2022 03:27:02]27913: WAF :: fetched 4 new logs [11-08-2022 03:29:02]527: WAF :: fetched 1 new logs [11-08-2022 03:31:01]5984: WAF :: fetched 1 new logs [11-08-2022 03:35:01]16330: WAF :: fetched 2 new logs [11-08-2022 03:39:02]26718: WAF :: fetched 2 new logs [11-08-2022 03:40:01]29040: WAF :: fetched 1 new logs [11-08-2022 03:41:01]31865: WAF :: fetched 1 new logs [11-08-2022 03:41:01]31865: Checking for user cron vulnerabilities [11-08-2022 03:44:01]7285: Checking ditributed CMS bruteforce attacks [11-08-2022 03:44:01]7285: WAF :: fetched 1 new logs [11-08-2022 03:45:01]9828: WAF :: fetched 1 new logs [11-08-2022 03:48:02]17684: WAF :: fetched 1 new logs [11-08-2022 03:51:01]19874: WAF :: fetched 1 new logs [11-08-2022 03:55:01]4947: WAF :: fetched 3 new logs [11-08-2022 03:56:02]7503: WAF :: fetched 2 new logs [11-08-2022 03:57:02]10115: WAF :: fetched 4 new logs [11-08-2022 03:58:02]12633: WAF :: fetched 3 new logs [11-08-2022 03:59:01]15080: WAF :: fetched 1 new logs [11-08-2022 04:00:01]17570: WAF :: fetched 2 new logs [11-08-2022 04:01:01]20609: WAF :: fetched 2 new logs [11-08-2022 04:02:01]23274: WAF :: fetched 4 new logs [11-08-2022 04:03:01]25850: WAF :: fetched 2 new logs [11-08-2022 04:04:02]28411: WAF :: fetched 9 new logs [11-08-2022 04:05:01]30768: WAF :: fetched 2 new logs [11-08-2022 04:06:01]1253: WAF :: fetched 2 new logs [11-08-2022 04:07:02]3952: WAF :: fetched 3 new logs [11-08-2022 04:08:01]6251: WAF :: fetched 2 new logs [11-08-2022 04:09:01]9017: WAF :: fetched 2 new logs [11-08-2022 04:10:01]11595: WAF :: fetched 3 new logs [11-08-2022 04:11:01]14202: WAF :: fetched 2 new logs [11-08-2022 04:12:01]16791: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660201921 [11-08-2022 04:12:01]16791: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 04:12:03]16791: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 04:12:03]16791: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-0412/20220811-041201-YvSrwVXbTy7lTsm2f7jzcgAAAA4 [11-08-2022 04:12:03]16791: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 04:12:03]16791: WAF :: fetched 3 new logs [11-08-2022 04:13:01]19366: WAF :: fetched 2 new logs [11-08-2022 04:14:01]21983: WAF :: fetched 2 new logs [11-08-2022 04:15:01]24539: WAF :: fetched 6 new logs [11-08-2022 04:16:02]27104: WAF :: fetched 1 new logs [11-08-2022 04:17:02]29735: WAF :: fetched 1 new logs [11-08-2022 04:18:01]32207: WAF :: fetched 1 new logs [11-08-2022 04:19:01]2522: WAF :: fetched 2 new logs [11-08-2022 04:20:01]5122: WAF :: fetched 2 new logs [11-08-2022 04:21:01]7730: WAF :: fetched 3 new logs [11-08-2022 04:22:01]10399: WAF :: fetched 3 new logs [11-08-2022 04:23:02]12937: WAF :: fetched 1 new logs [11-08-2022 04:25:01]18024: WAF :: fetched 1 new logs [11-08-2022 04:26:01]20620: WAF :: fetched 1 new logs [11-08-2022 04:32:01]3859: WAF :: fetched 2 new logs [11-08-2022 04:33:01]6413: WAF :: fetched 2 new logs [11-08-2022 04:35:02]11518: WAF :: fetched 1 new logs [11-08-2022 04:37:01]16850: WAF :: fetched 1 new logs [11-08-2022 04:38:01]19440: WAF :: fetched 1 new logs [11-08-2022 04:40:01]24509: WAF :: fetched 1 new logs [11-08-2022 04:41:02]27104: WAF :: fetched 4 new logs [11-08-2022 04:41:02]27104: Checking for user cron vulnerabilities [11-08-2022 04:43:01]32009: WAF :: fetched 1 new logs [11-08-2022 04:44:01]2483: Checking ditributed CMS bruteforce attacks [11-08-2022 04:47:01]9966: WAF :: fetched 1 new logs [11-08-2022 04:51:01]20572: WAF :: fetched 1 new logs [11-08-2022 04:52:01]23202: WAF :: fetched 1 new logs [11-08-2022 04:58:01]6181: WAF :: fetched 1 new logs [11-08-2022 05:01:01]13990: WAF :: fetched 1 new logs [11-08-2022 05:01:41]13986: Starting daily scan on files updated in last 24 hrs [11-08-2022 05:03:01]19231: WAF :: fetched 1 new logs [11-08-2022 05:05:01]24267: WAF :: fetched 1 new logs [11-08-2022 05:12:02]10228: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660205522 [11-08-2022 05:12:02]10228: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 05:12:04]10228: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 05:12:04]10228: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-0512/20220811-051202-YvS50j7IE0_DK5qsoXSI1QAAAAk [11-08-2022 05:12:04]10228: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-08-2022 05:12:05]10228: WAF :: fetched 1 new logs [11-08-2022 05:13:01]12762: WAF :: fetched 1 new logs [11-08-2022 05:15:02]17947: WAF :: fetched 3 new logs [11-08-2022 05:17:02]23190: WAF :: fetched 1 new logs [11-08-2022 05:18:01]25769: WAF :: fetched 1 new logs [11-08-2022 05:20:01]30976: WAF :: fetched 3 new logs [11-08-2022 05:21:02]1200: WAF :: fetched 1 new logs [11-08-2022 05:24:01]9171: WAF :: fetched 8 new logs [11-08-2022 05:25:02]11851: httpd.conf changed. Refreshing watchlist. [11-08-2022 05:25:02]11842: WAF :: fetched 2 new logs [11-08-2022 05:26:01]14497: WAF :: fetched 3 new logs [11-08-2022 05:27:02]17177: WAF :: fetched 3 new logs [11-08-2022 05:30:01]24823: WAF :: fetched 1 new logs [11-08-2022 05:32:01]30053: WAF :: fetched 1 new logs [11-08-2022 05:34:01]2814: WAF :: fetched 3 new logs [11-08-2022 05:35:02]5361: WAF :: fetched 3 new logs [11-08-2022 05:39:02]15612: WAF :: fetched 1 new logs [11-08-2022 05:41:01]20811: Checking for user cron vulnerabilities [11-08-2022 05:44:01]28460: Checking ditributed CMS bruteforce attacks [11-08-2022 05:45:02]30986: WAF :: fetched 1 new logs [11-08-2022 05:48:01]6432: WAF :: fetched 2 new logs [11-08-2022 05:52:01]16760: WAF :: fetched 5 new logs [11-08-2022 05:54:01]21825: WAF :: fetched 1 new logs [11-08-2022 05:56:02]26953: WAF :: fetched 2 new logs [11-08-2022 05:57:02]29565: WAF :: fetched 1 new logs [11-08-2022 05:58:02]32067: WAF :: fetched 2 new logs [11-08-2022 05:59:02]2233: WAF :: fetched 20 new logs [11-08-2022 06:00:02]4562: WAF :: fetched 15 new logs [11-08-2022 06:01:03]8401: WAF :: fetched 1717 new logs [11-08-2022 06:02:02]11210: WAF :: fetched 3 new logs [11-08-2022 06:03:02]13762: WAF :: fetched 24 new logs [11-08-2022 06:05:02]18849: WAF :: fetched 2 new logs [11-08-2022 06:06:02]21436: WAF :: fetched 1 new logs [11-08-2022 06:07:02]24059: WAF :: fetched 1 new logs [11-08-2022 06:12:02]4602: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660209122 [11-08-2022 06:12:02]4602: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 06:12:04]4602: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 06:12:04]4602: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-0612/20220811-061202-YvTH4lfO43TR3jTy8_CEagAAAAc [11-08-2022 06:12:04]4602: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 06:12:05]4602: WAF :: fetched 1496 new logs [11-08-2022 06:13:01]7180: WAF :: fetched 1 new logs [11-08-2022 06:15:01]12349: WAF :: fetched 1 new logs [11-08-2022 06:16:01]15012: WAF :: fetched 1 new logs [11-08-2022 06:18:01]20159: WAF :: fetched 5 new logs [11-08-2022 06:20:01]25251: WAF :: fetched 1 new logs [11-08-2022 06:22:01]30455: WAF :: fetched 4 new logs [11-08-2022 06:27:01]11268: WAF :: fetched 1 new logs [11-08-2022 06:30:02]18999: WAF :: fetched 1 new logs [11-08-2022 06:31:01]21583: WAF :: fetched 2 new logs [11-08-2022 06:32:01]24224: WAF :: fetched 1 new logs [11-08-2022 06:34:01]29296: WAF :: fetched 1 new logs [11-08-2022 06:36:01]2043: WAF :: fetched 2 new logs [11-08-2022 06:37:02]4666: WAF :: fetched 1 new logs [11-08-2022 06:38:01]7198: WAF :: fetched 1 new logs [11-08-2022 06:40:01]12305: WAF :: fetched 3 new logs [11-08-2022 06:41:02]14927: Checking for user cron vulnerabilities [11-08-2022 06:43:02]20057: WAF :: fetched 3 new logs [11-08-2022 06:44:01]22655: Checking ditributed CMS bruteforce attacks [11-08-2022 06:44:01]22655: WAF :: fetched 5 new logs [11-08-2022 06:46:01]27773: WAF :: fetched 2 new logs [11-08-2022 06:49:01]3150: WAF :: fetched 2 new logs [11-08-2022 06:51:01]8303: WAF :: fetched 1 new logs [11-08-2022 06:54:02]15965: WAF :: fetched 1 new logs [11-08-2022 07:00:02]31072: WAF :: fetched 1 new logs [11-08-2022 07:03:01]7030: WAF :: fetched 1 new logs [11-08-2022 07:04:01]9562: WAF :: fetched 1 new logs [11-08-2022 07:05:01]12130: WAF :: fetched 3 new logs [11-08-2022 07:06:01]14749: WAF :: fetched 3 new logs [11-08-2022 07:07:02]17301: WAF :: fetched 1 new logs [11-08-2022 07:08:01]19877: WAF :: fetched 1 new logs [11-08-2022 07:10:01]24955: WAF :: fetched 2 new logs [11-08-2022 07:11:02]27546: WAF :: fetched 3 new logs [11-08-2022 07:12:01]30100: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660212721 [11-08-2022 07:12:01]30100: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 07:12:03]30100: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 07:12:04]30100: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-0712/20220811-071201-YvTV8b3khj4u6hUFZturGQAAABw [11-08-2022 07:12:04]30100: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-08-2022 07:12:04]30100: WAF :: fetched 1 new logs [11-08-2022 07:13:01]32697: WAF :: fetched 3 new logs [11-08-2022 07:14:02]2936: WAF :: fetched 1 new logs [11-08-2022 07:15:02]5459: WAF :: fetched 3 new logs [11-08-2022 07:16:02]8066: WAF :: fetched 1 new logs [11-08-2022 07:18:02]13272: WAF :: fetched 3 new logs [11-08-2022 07:21:01]21093: WAF :: fetched 3 new logs [11-08-2022 07:23:02]26241: WAF :: fetched 6 new logs [11-08-2022 07:26:01]1385: WAF :: fetched 3 new logs [11-08-2022 07:28:01]6749: WAF :: fetched 1 new logs [11-08-2022 07:29:02]9429: WAF :: fetched 1 new logs [11-08-2022 07:31:02]14566: WAF :: fetched 3 new logs [11-08-2022 07:32:01]17135: WAF :: fetched 2 new logs [11-08-2022 07:33:02]19879: WAF :: fetched 1 new logs [11-08-2022 07:34:01]22399: WAF :: fetched 5 new logs [11-08-2022 07:36:02]27599: WAF :: fetched 1 new logs [11-08-2022 07:38:02]32761: WAF :: fetched 1 new logs [11-08-2022 07:39:02]2969: WAF :: fetched 3 new logs [11-08-2022 07:41:01]8044: WAF :: fetched 5 new logs [11-08-2022 07:41:01]8044: Checking for user cron vulnerabilities [11-08-2022 07:42:02]10602: WAF :: fetched 3 new logs [11-08-2022 07:43:01]13190: WAF :: fetched 3 new logs [11-08-2022 07:44:01]15730: Checking ditributed CMS bruteforce attacks [11-08-2022 07:44:02]15730: WAF :: fetched 2 new logs [11-08-2022 07:45:01]: Checking for definition updates [11-08-2022 07:45:01]18255: WAF :: fetched 1 new logs [11-08-2022 07:49:01]28500: WAF :: fetched 1 new logs [11-08-2022 07:52:02]4263: WAF :: fetched 1 new logs [11-08-2022 07:53:02]6964: WAF :: fetched 4 new logs [11-08-2022 07:54:01]9271: WAF :: fetched 3 new logs [11-08-2022 07:55:02]12043: WAF :: fetched 2 new logs [11-08-2022 07:56:01]14602: WAF :: fetched 3 new logs [11-08-2022 07:57:02]17165: WAF :: fetched 1 new logs [11-08-2022 07:58:01]19796: WAF :: fetched 2 new logs [11-08-2022 07:59:02]22349: WAF :: fetched 3 new logs [11-08-2022 08:01:02]27653: WAF :: fetched 2 new logs [11-08-2022 08:02:02]30185: WAF :: fetched 1 new logs [11-08-2022 08:04:01]3076: WAF :: fetched 1 new logs [11-08-2022 08:05:01]5615: WAF :: fetched 1 new logs [11-08-2022 08:08:02]13467: WAF :: fetched 2 new logs [11-08-2022 08:09:01]16012: WAF :: fetched 1 new logs [11-08-2022 08:11:01]21209: WAF :: fetched 7 new logs [11-08-2022 08:12:02]23765: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660216322 [11-08-2022 08:12:02]23765: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 08:12:04]23765: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 08:12:04]23765: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-0812/20220811-081202-YvTkAsedtT-X2K8V4OSarwAAAAg [11-08-2022 08:12:04]23765: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-08-2022 08:12:05]23765: WAF :: fetched 1 new logs [11-08-2022 08:13:02]26375: WAF :: fetched 2 new logs [11-08-2022 08:14:01]28908: WAF :: fetched 4 new logs [11-08-2022 08:15:02]31475: WAF :: fetched 2 new logs [11-08-2022 08:18:01]6938: WAF :: fetched 2 new logs [11-08-2022 08:24:02]22428: WAF :: fetched 3 new logs [11-08-2022 08:25:01]25009: WAF :: fetched 2 new logs [11-08-2022 08:26:02]27619: WAF :: fetched 1 new logs [11-08-2022 08:27:01]30162: WAF :: fetched 3 new logs [11-08-2022 08:29:01]3098: WAF :: fetched 1 new logs [11-08-2022 08:32:02]10855: WAF :: fetched 1 new logs [11-08-2022 08:35:02]18588: WAF :: fetched 1 new logs [11-08-2022 08:36:01]21225: WAF :: fetched 5 new logs [11-08-2022 08:40:01]31457: WAF :: fetched 1 new logs [11-08-2022 08:41:02]1870: WAF :: fetched 1 new logs [11-08-2022 08:41:02]1870: Checking for user cron vulnerabilities [11-08-2022 08:42:01]4508: WAF :: fetched 1 new logs [11-08-2022 08:44:01]9769: Checking ditributed CMS bruteforce attacks [11-08-2022 08:44:02]9769: WAF :: fetched 1 new logs [11-08-2022 08:46:02]14970: WAF :: fetched 4 new logs [11-08-2022 08:49:01]22764: WAF :: fetched 1 new logs [11-08-2022 08:50:02]25356: WAF :: fetched 1 new logs [11-08-2022 08:54:02]3383: WAF :: fetched 6 new logs [11-08-2022 08:57:01]11050: WAF :: fetched 1 new logs [11-08-2022 09:02:02]24160: WAF :: fetched 1 new logs [11-08-2022 09:04:02]29527: WAF :: fetched 6 new logs [11-08-2022 09:05:01]32195: WAF :: fetched 3 new logs [11-08-2022 09:08:02]7805: WAF :: fetched 2 new logs [11-08-2022 09:10:02]12903: WAF :: fetched 1 new logs [11-08-2022 09:12:01]18054: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660219921 [11-08-2022 09:12:01]18054: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 09:12:03]18054: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 09:12:04]18054: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-0912/20220811-091201-YvTyEQKGkOSoRDNNHnHW1wAAAAU [11-08-2022 09:12:04]18054: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 09:12:04]18054: WAF :: fetched 114 new logs [11-08-2022 09:13:02]20772: WAF :: fetched 3 new logs [11-08-2022 09:15:02]25986: WAF :: fetched 3 new logs [11-08-2022 09:16:01]28615: WAF :: fetched 1 new logs [11-08-2022 09:17:02]31207: WAF :: fetched 2 new logs [11-08-2022 09:18:01]1518: WAF :: fetched 2 new logs [11-08-2022 09:19:01]4254: WAF :: fetched 4 new logs [11-08-2022 09:21:01]9481: WAF :: fetched 1 new logs [11-08-2022 09:24:01]17392: WAF :: fetched 1 new logs [11-08-2022 09:25:01]20035: WAF :: fetched 5 new logs [11-08-2022 09:26:01]22679: WAF :: fetched 1 new logs [11-08-2022 09:28:01]27910: WAF :: fetched 1 new logs [11-08-2022 09:29:01]30479: WAF :: fetched 2 new logs [11-08-2022 09:30:01]682: WAF :: fetched 1 new logs [11-08-2022 09:31:01]3508: WAF :: fetched 1 new logs [11-08-2022 09:32:01]6113: WAF :: fetched 1 new logs [11-08-2022 09:34:01]11458: WAF :: fetched 1 new logs [11-08-2022 09:35:01]14071: WAF :: fetched 1 new logs [11-08-2022 09:36:01]16798: WAF :: fetched 1 new logs [11-08-2022 09:39:01]24781: WAF :: fetched 2 new logs [11-08-2022 09:40:01]27494: WAF :: fetched 1 new logs [11-08-2022 09:41:01]30096: Checking for user cron vulnerabilities [11-08-2022 09:42:01]32689: WAF :: fetched 2 new logs [11-08-2022 09:44:01]5560: Checking ditributed CMS bruteforce attacks [11-08-2022 09:45:02]8178: WAF :: fetched 2 new logs [11-08-2022 09:47:02]13486: WAF :: fetched 3 new logs [11-08-2022 09:48:01]16268: WAF :: fetched 1 new logs [11-08-2022 09:49:02]18985: WAF :: fetched 2 new logs [11-08-2022 09:50:01]21633: WAF :: fetched 1 new logs [11-08-2022 09:51:02]24419: WAF :: fetched 2 new logs [11-08-2022 09:53:01]29778: WAF :: fetched 1 new logs [11-08-2022 09:55:01]2869: WAF :: fetched 1 new logs [11-08-2022 09:58:02]10943: WAF :: fetched 1 new logs [11-08-2022 10:00:02]15886: WAF :: fetched 1 new logs [11-08-2022 10:02:02]21861: WAF :: fetched 1 new logs [11-08-2022 10:04:02]27179: WAF :: fetched 5 new logs [11-08-2022 10:05:01]29742: WAF :: fetched 1 new logs [11-08-2022 10:06:02]32481: WAF :: fetched 2 new logs [11-08-2022 10:07:01]2767: WAF :: fetched 1 new logs [11-08-2022 10:08:02]5435: WAF :: fetched 1 new logs [11-08-2022 10:12:01]16129: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660223521 [11-08-2022 10:12:01]16129: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 10:12:03]16129: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 10:12:04]16129: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-1012/20220811-101201-YvUAIXLjfHxSCiC9BpyMxwAAACw [11-08-2022 10:12:04]16129: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 10:12:04]16129: WAF :: fetched 1 new logs [11-08-2022 10:17:01]29541: WAF :: fetched 3 new logs [11-08-2022 10:18:02]32212: WAF :: fetched 1 new logs [11-08-2022 10:19:01]2437: WAF :: fetched 2 new logs [11-08-2022 10:22:01]10413: WAF :: fetched 1 new logs [11-08-2022 10:23:02]13144: WAF :: fetched 2 new logs [11-08-2022 10:24:01]15754: WAF :: fetched 7 new logs [11-08-2022 10:27:02]23670: WAF :: fetched 3 new logs [11-08-2022 10:28:01]26368: WAF :: fetched 2 new logs [11-08-2022 10:29:02]28955: WAF :: fetched 2 new logs [11-08-2022 10:32:01]4564: WAF :: fetched 3 new logs [11-08-2022 10:33:01]7310: WAF :: fetched 3 new logs [11-08-2022 10:34:01]9935: WAF :: fetched 2 new logs [11-08-2022 10:35:02]12586: WAF :: fetched 9 new logs [11-08-2022 10:36:01]15266: WAF :: fetched 2 new logs [11-08-2022 10:38:01]20643: WAF :: fetched 3 new logs [11-08-2022 10:39:02]23318: WAF :: fetched 1 new logs [11-08-2022 10:40:01]25965: WAF :: fetched 1 new logs [11-08-2022 10:41:02]28657: WAF :: fetched 2 new logs [11-08-2022 10:41:02]28657: Checking for user cron vulnerabilities [11-08-2022 10:43:01]1595: WAF :: fetched 1 new logs [11-08-2022 10:44:01]4299: Checking ditributed CMS bruteforce attacks [11-08-2022 10:44:02]4299: WAF :: fetched 4 new logs [11-08-2022 10:45:01]6801: WAF :: fetched 2 new logs [11-08-2022 10:47:02]12348: WAF :: fetched 1 new logs [11-08-2022 10:48:02]15110: WAF :: fetched 2 new logs [11-08-2022 10:49:01]17774: WAF :: fetched 2 new logs [11-08-2022 10:50:02]20449: WAF :: fetched 1 new logs [11-08-2022 10:54:02]31069: WAF :: fetched 2 new logs [11-08-2022 11:01:01]18065: WAF :: fetched 3 new logs [11-08-2022 11:03:01]23567: WAF :: fetched 2 new logs [11-08-2022 11:04:01]26160: WAF :: fetched 1 new logs [11-08-2022 11:05:01]28922: WAF :: fetched 2 new logs [11-08-2022 11:07:01]1901: WAF :: fetched 2 new logs [11-08-2022 11:08:00]2132: Performed RBL check for 23.111.136.34. [11-08-2022 11:08:01]4900: WAF :: fetched 3 new logs [11-08-2022 11:10:01]10379: WAF :: fetched 2 new logs [11-08-2022 11:11:01]13168: WAF :: fetched 2 new logs [11-08-2022 11:12:01]15966: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660227121 [11-08-2022 11:12:01]15966: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 11:12:03]15966: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 11:12:04]15966: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-1112/20220811-111201-YvUOMUQ35YquqpDVj2KGnQAAAAI [11-08-2022 11:12:04]15966: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 11:12:04]15966: WAF :: fetched 2 new logs [11-08-2022 11:14:01]21441: WAF :: fetched 5 new logs [11-08-2022 11:15:02]24204: WAF :: fetched 1 new logs [11-08-2022 11:16:01]27038: WAF :: fetched 1 new logs [11-08-2022 11:18:01]32485: WAF :: fetched 1 new logs [11-08-2022 11:20:01]5547: WAF :: fetched 3 new logs [11-08-2022 11:22:01]11087: WAF :: fetched 4 new logs [11-08-2022 11:23:02]13803: WAF :: fetched 1 new logs [11-08-2022 11:24:01]16524: WAF :: fetched 1 new logs [11-08-2022 11:27:02]24614: WAF :: fetched 1 new logs [11-08-2022 11:28:01]27263: WAF :: fetched 5 new logs [11-08-2022 11:29:02]29942: WAF :: fetched 1 new logs [11-08-2022 11:34:01]11206: WAF :: fetched 1 new logs [11-08-2022 11:35:02]13943: WAF :: fetched 2 new logs [11-08-2022 11:36:01]16733: WAF :: fetched 4 new logs [11-08-2022 11:37:02]19409: WAF :: fetched 6 new logs [11-08-2022 11:40:01]27424: WAF :: fetched 1 new logs [11-08-2022 11:41:02]30213: WAF :: fetched 2 new logs [11-08-2022 11:41:02]30213: Checking for user cron vulnerabilities [11-08-2022 11:43:01]3477: WAF :: fetched 4 new logs [11-08-2022 11:44:01]6361: Checking ditributed CMS bruteforce attacks [11-08-2022 11:44:01]6361: WAF :: fetched 4 new logs [11-08-2022 11:45:01]9073: WAF :: fetched 2 new logs [11-08-2022 11:46:01]11896: WAF :: fetched 6 new logs [11-08-2022 11:47:01]14658: WAF :: fetched 1 new logs [11-08-2022 11:48:02]17336: WAF :: fetched 7 new logs [11-08-2022 11:49:01]20144: WAF :: fetched 1 new logs [11-08-2022 11:50:01]22873: WAF :: fetched 1 new logs [11-08-2022 11:52:01]28341: WAF :: fetched 5 new logs [11-08-2022 11:53:01]30940: WAF :: fetched 4 new logs [11-08-2022 11:55:01]4105: WAF :: fetched 6 new logs [11-08-2022 11:56:02]6880: WAF :: fetched 1 new logs [11-08-2022 11:58:02]12358: WAF :: fetched 1 new logs [11-08-2022 11:59:02]15221: WAF :: fetched 1 new logs [11-08-2022 12:00:01]17868: WAF :: fetched 2 new logs [11-08-2022 12:01:02]21376: WAF :: fetched 5 new logs [11-08-2022 12:03:01]26962: WAF :: fetched 1 new logs [11-08-2022 12:04:01]29653: WAF :: fetched 3 new logs [11-08-2022 12:05:01]32352: WAF :: fetched 5 new logs [11-08-2022 12:06:01]2797: WAF :: fetched 2 new logs [11-08-2022 12:07:01]5462: WAF :: fetched 1 new logs [11-08-2022 12:08:01]8227: WAF :: fetched 15 new logs [11-08-2022 12:10:01]13765: WAF :: fetched 2 new logs [11-08-2022 12:11:02]16728: WAF :: fetched 1 new logs [11-08-2022 12:12:01]19576: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660230721 [11-08-2022 12:12:01]19576: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 12:12:03]19576: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 12:12:04]19576: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-1212/20220811-121201-YvUcQTHnH2N8q4XSkq68gAAAADI [11-08-2022 12:12:04]19576: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 12:12:04]19576: WAF :: fetched 2 new logs [11-08-2022 12:14:01]25332: WAF :: fetched 1 new logs [11-08-2022 12:15:02]28209: WAF :: fetched 1 new logs [11-08-2022 12:17:02]1767: WAF :: fetched 5 new logs [11-08-2022 12:18:01]5056: WAF :: fetched 2 new logs [11-08-2022 12:19:02]7910: WAF :: fetched 1 new logs [11-08-2022 12:20:01]10533: WAF :: fetched 1 new logs [11-08-2022 12:21:01]13468: WAF :: fetched 1 new logs [11-08-2022 12:22:01]16223: WAF :: fetched 1 new logs [11-08-2022 12:23:01]18969: WAF :: fetched 3 new logs [11-08-2022 12:24:01]21822: WAF :: fetched 2 new logs [11-08-2022 12:26:01]27309: WAF :: fetched 30 new logs [11-08-2022 12:27:01]30052: WAF :: fetched 11 new logs [11-08-2022 12:28:02]32708: WAF :: fetched 4 new logs [11-08-2022 12:29:02]3089: WAF :: fetched 2 new logs [11-08-2022 12:30:01]5676: WAF :: fetched 1 new logs [11-08-2022 12:32:01]11013: WAF :: fetched 2 new logs [11-08-2022 12:33:01]13614: WAF :: fetched 1 new logs [11-08-2022 12:34:01]16352: WAF :: fetched 2 new logs [11-08-2022 12:35:01]18971: WAF :: fetched 2 new logs [11-08-2022 12:36:02]21734: WAF :: fetched 2 new logs [11-08-2022 12:38:02]27098: WAF :: fetched 2 new logs [11-08-2022 12:39:01]29938: WAF :: fetched 1 new logs [11-08-2022 12:40:02]32668: WAF :: fetched 1 new logs [11-08-2022 12:41:01]2750: WAF :: fetched 3 new logs [11-08-2022 12:41:01]2750: Checking for user cron vulnerabilities [11-08-2022 12:42:01]5896: WAF :: fetched 3 new logs [11-08-2022 12:43:02]8588: WAF :: fetched 1 new logs [11-08-2022 12:44:01]11357: Checking ditributed CMS bruteforce attacks [11-08-2022 12:45:02]: Checking for software updates [11-08-2022 12:45:02]14116: WAF :: fetched 2 new logs [11-08-2022 12:46:01]16892: WAF :: fetched 3 new logs [11-08-2022 12:51:02]30418: WAF :: fetched 2 new logs [11-08-2022 12:53:01]3341: WAF :: fetched 3 new logs [11-08-2022 12:54:01]6084: WAF :: fetched 1 new logs [11-08-2022 12:55:01]8644: WAF :: fetched 1 new logs [11-08-2022 12:57:01]13967: WAF :: fetched 1 new logs [11-08-2022 12:59:01]19293: WAF :: fetched 1 new logs [11-08-2022 13:00:01]21607: WAF :: fetched 1 new logs [11-08-2022 13:01:01]24778: WAF :: fetched 7 new logs [11-08-2022 13:02:01]27402: WAF :: fetched 1 new logs [11-08-2022 13:03:01]30030: WAF :: fetched 1 new logs [11-08-2022 13:04:01]32701: WAF :: fetched 1 new logs [11-08-2022 13:05:01]3005: WAF :: fetched 1 new logs [11-08-2022 13:06:01]5794: WAF :: fetched 2 new logs [11-08-2022 13:08:01]11145: WAF :: fetched 2 new logs [11-08-2022 13:09:01]13813: WAF :: fetched 1 new logs [11-08-2022 13:10:02]16397: WAF :: fetched 4 new logs [11-08-2022 13:12:01]21741: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660234321 [11-08-2022 13:12:01]21741: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 13:12:03]21741: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 13:12:04]21741: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-1312/20220811-131201-YvUqUVE2q1tsCY-Lfc0ZigAAAAI [11-08-2022 13:12:04]21741: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 13:12:04]21741: WAF :: fetched 3 new logs [11-08-2022 13:13:02]24380: WAF :: fetched 1 new logs [11-08-2022 13:14:01]27000: WAF :: fetched 1 new logs [11-08-2022 13:15:02]29567: WAF :: fetched 1 new logs [11-08-2022 13:16:01]32247: WAF :: fetched 4 new logs [11-08-2022 13:22:02]15832: WAF :: fetched 1 new logs [11-08-2022 13:23:01]18412: WAF :: fetched 1 new logs [11-08-2022 13:24:02]21136: WAF :: fetched 1 new logs [11-08-2022 13:25:01]23686: WAF :: fetched 6 new logs [11-08-2022 13:27:01]28936: WAF :: fetched 2 new logs [11-08-2022 13:29:01]1848: WAF :: fetched 2 new logs [11-08-2022 13:30:02]4520: WAF :: fetched 2 new logs [11-08-2022 13:31:01]7257: WAF :: fetched 1 new logs [11-08-2022 13:33:01]12535: WAF :: fetched 4 new logs [11-08-2022 13:34:02]15208: WAF :: fetched 3 new logs [11-08-2022 13:35:01]17785: WAF :: fetched 6 new logs [11-08-2022 13:36:02]20476: WAF :: fetched 1 new logs [11-08-2022 13:37:01]23127: WAF :: fetched 1 new logs [11-08-2022 13:41:02]1295: WAF :: fetched 4 new logs [11-08-2022 13:41:02]1295: Checking for user cron vulnerabilities [11-08-2022 13:43:01]6532: WAF :: fetched 3 new logs [11-08-2022 13:44:02]9223: Checking ditributed CMS bruteforce attacks [11-08-2022 13:44:02]9223: WAF :: fetched 3 new logs [11-08-2022 13:45:01]: Checking for definition updates [11-08-2022 13:45:01]11792: WAF :: fetched 1 new logs [11-08-2022 13:46:02]14542: WAF :: fetched 1 new logs [11-08-2022 13:48:02]19693: WAF :: fetched 1 new logs [11-08-2022 13:50:01]24978: WAF :: fetched 3 new logs [11-08-2022 13:51:01]27717: WAF :: fetched 1 new logs [11-08-2022 13:55:02]6024: WAF :: fetched 1 new logs [11-08-2022 13:56:01]8756: WAF :: fetched 1 new logs [11-08-2022 13:57:01]11476: WAF :: fetched 1 new logs [11-08-2022 13:58:01]14047: WAF :: fetched 1 new logs [11-08-2022 13:59:02]16796: WAF :: fetched 2 new logs [11-08-2022 14:00:01]19077: WAF :: fetched 5 new logs [11-08-2022 14:01:01]22296: WAF :: fetched 1 new logs [11-08-2022 14:02:02]25022: WAF :: fetched 9 new logs [11-08-2022 14:03:02]27625: WAF :: fetched 13 new logs [11-08-2022 14:04:01]30422: WAF :: fetched 9 new logs [11-08-2022 14:05:02]700: WAF :: fetched 3 new logs [11-08-2022 14:06:02]3618: WAF :: fetched 4 new logs [11-08-2022 14:07:01]6280: WAF :: fetched 2 new logs [11-08-2022 14:08:02]9008: WAF :: fetched 7 new logs [11-08-2022 14:11:02]17175: WAF :: fetched 3 new logs [11-08-2022 14:12:01]19834: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660237921 [11-08-2022 14:12:01]19834: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 14:12:03]19834: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 14:12:04]19834: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-1412/20220811-141201-YvU4Ybw5lO5T0S5kzTnf-gAAAAM [11-08-2022 14:12:04]19834: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 14:12:04]19834: WAF :: fetched 2 new logs [11-08-2022 14:13:02]22497: WAF :: fetched 1 new logs [11-08-2022 14:14:01]25181: WAF :: fetched 3 new logs [11-08-2022 14:18:01]3477: WAF :: fetched 3 new logs [11-08-2022 14:19:01]6241: WAF :: fetched 1 new logs [11-08-2022 14:22:02]14251: WAF :: fetched 1 new logs [11-08-2022 14:23:02]16920: WAF :: fetched 3 new logs [11-08-2022 14:26:01]24896: WAF :: fetched 4 new logs [11-08-2022 14:28:01]30220: WAF :: fetched 1 new logs [11-08-2022 14:29:02]556: WAF :: fetched 1 new logs [11-08-2022 14:30:01]3469: WAF :: fetched 1 new logs [11-08-2022 14:31:02]6147: WAF :: fetched 1 new logs [11-08-2022 14:33:01]11470: WAF :: fetched 1 new logs [11-08-2022 14:34:02]14224: WAF :: fetched 1 new logs [11-08-2022 14:35:01]16891: WAF :: fetched 2 new logs [11-08-2022 14:37:01]22245: WAF :: fetched 1 new logs [11-08-2022 14:38:01]24904: WAF :: fetched 7 new logs [11-08-2022 14:40:01]30285: WAF :: fetched 2 new logs [11-08-2022 14:41:01]535: Checking for user cron vulnerabilities [11-08-2022 14:44:01]8639: Checking ditributed CMS bruteforce attacks [11-08-2022 14:46:01]14071: WAF :: fetched 1 new logs [11-08-2022 14:46:02]14081: httpd.conf changed. Refreshing watchlist. [11-08-2022 14:49:01]22405: WAF :: fetched 1 new logs [11-08-2022 14:50:01]25090: WAF :: fetched 1 new logs [11-08-2022 14:51:01]27924: WAF :: fetched 14 new logs [11-08-2022 14:51:01]27942: httpd.conf changed. Refreshing watchlist. [11-08-2022 14:52:01]30619: WAF :: fetched 1 new logs [11-08-2022 14:53:02]997: WAF :: fetched 1 new logs [11-08-2022 14:53:02]1002: Updated license status via CDN [11-08-2022 14:54:01]3887: WAF :: fetched 1 new logs [11-08-2022 14:55:02]6752: WAF :: fetched 1 new logs [11-08-2022 14:56:01]9630: WAF :: fetched 5 new logs [11-08-2022 14:57:01]12444: WAF :: fetched 3 new logs [11-08-2022 15:01:02]23710: WAF :: fetched 1 new logs [11-08-2022 15:01:02]23699: Reseting cPGuard inotify settings [11-08-2022 15:02:01]26516: WAF :: fetched 1 new logs [11-08-2022 15:03:02]29398: WAF :: fetched 1 new logs [11-08-2022 15:04:01]32199: WAF :: fetched 4 new logs [11-08-2022 15:05:01]2646: WAF :: fetched 2 new logs [11-08-2022 15:06:01]5454: WAF :: fetched 2 new logs [11-08-2022 15:07:01]8167: WAF :: fetched 7 new logs [11-08-2022 15:08:01]10766: WAF :: fetched 2 new logs [11-08-2022 15:09:01]13538: WAF :: fetched 3 new logs [11-08-2022 15:10:01]16181: WAF :: fetched 8 new logs [11-08-2022 15:11:01]18957: WAF :: fetched 3 new logs [11-08-2022 15:12:01]21574: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660241521 [11-08-2022 15:12:01]21574: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 15:12:03]21574: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 15:12:04]21574: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-1512/20220811-151201-YvVGcRVTYxpdbUnXDhhzLAAAAAY [11-08-2022 15:12:04]21574: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 15:12:04]21574: WAF :: fetched 5 new logs [11-08-2022 15:13:01]24236: WAF :: fetched 4 new logs [11-08-2022 15:14:01]26899: WAF :: fetched 1 new logs [11-08-2022 15:15:01]29651: WAF :: fetched 4 new logs [11-08-2022 15:16:01]32355: WAF :: fetched 3 new logs [11-08-2022 15:17:01]2711: WAF :: fetched 1 new logs [11-08-2022 15:19:01]8140: WAF :: fetched 1 new logs [11-08-2022 15:21:02]13570: WAF :: fetched 2 new logs [11-08-2022 15:22:01]16234: WAF :: fetched 1 new logs [11-08-2022 15:24:01]21751: WAF :: fetched 6 new logs [11-08-2022 15:25:02]24507: WAF :: fetched 2 new logs [11-08-2022 15:29:02]3090: WAF :: fetched 1 new logs [11-08-2022 15:30:02]5710: WAF :: fetched 1 new logs [11-08-2022 15:31:01]8494: WAF :: fetched 1 new logs [11-08-2022 15:32:02]11203: WAF :: fetched 4 new logs [11-08-2022 15:33:01]13858: WAF :: fetched 2 new logs [11-08-2022 15:37:01]24756: WAF :: fetched 8 new logs [11-08-2022 15:40:02]398: WAF :: fetched 2 new logs [11-08-2022 15:41:01]3268: WAF :: fetched 2 new logs [11-08-2022 15:41:01]3268: Checking for user cron vulnerabilities [11-08-2022 15:42:02]5904: WAF :: fetched 4 new logs [11-08-2022 15:43:01]8589: WAF :: fetched 1 new logs [11-08-2022 15:44:02]11472: Checking ditributed CMS bruteforce attacks [11-08-2022 15:44:02]11472: WAF :: fetched 2 new logs [11-08-2022 15:45:02]14100: WAF :: fetched 1 new logs [11-08-2022 15:46:01]16854: WAF :: fetched 3 new logs [11-08-2022 15:47:02]19561: WAF :: fetched 1 new logs [11-08-2022 15:49:01]24900: WAF :: fetched 2 new logs [11-08-2022 15:50:01]27484: WAF :: fetched 1 new logs [11-08-2022 15:51:01]30293: WAF :: fetched 2 new logs [11-08-2022 15:52:01]464: WAF :: fetched 1 new logs [11-08-2022 15:53:01]3269: WAF :: fetched 5 new logs [11-08-2022 15:54:01]6040: WAF :: fetched 1 new logs [11-08-2022 15:56:02]11515: WAF :: fetched 1 new logs [11-08-2022 16:01:02]25072: WAF :: fetched 2 new logs [11-08-2022 16:02:01]27789: WAF :: fetched 1 new logs [11-08-2022 16:04:01]813: WAF :: fetched 3 new logs [11-08-2022 16:05:01]3622: WAF :: fetched 1 new logs [11-08-2022 16:08:01]11718: WAF :: fetched 1 new logs [11-08-2022 16:09:01]14461: WAF :: fetched 8 new logs [11-08-2022 16:10:01]17105: WAF :: fetched 2 new logs [11-08-2022 16:11:01]19860: WAF :: fetched 3 new logs [11-08-2022 16:12:01]22490: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660245121 [11-08-2022 16:12:01]22490: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 16:12:03]22490: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 16:12:03]22490: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-1612/20220811-161201-YvVUgQfT1hjLJ5gnSyPYJQAAAAA [11-08-2022 16:12:03]22490: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 16:12:04]22490: WAF :: fetched 6 new logs [11-08-2022 16:13:01]25195: WAF :: fetched 1 new logs [11-08-2022 16:14:01]27917: WAF :: fetched 1 new logs [11-08-2022 16:15:01]30671: WAF :: fetched 4 new logs [11-08-2022 16:16:01]971: WAF :: fetched 2 new logs [11-08-2022 16:17:01]3737: WAF :: fetched 3 new logs [11-08-2022 16:18:01]6373: WAF :: fetched 5 new logs [11-08-2022 16:19:01]9105: WAF :: fetched 3 new logs [11-08-2022 16:20:01]11841: WAF :: fetched 4 new logs [11-08-2022 16:21:01]14572: WAF :: fetched 3 new logs [11-08-2022 16:22:01]17219: WAF :: fetched 4 new logs [11-08-2022 16:23:01]19850: WAF :: fetched 6 new logs [11-08-2022 16:24:02]22565: WAF :: fetched 2 new logs [11-08-2022 16:25:01]25258: WAF :: fetched 2 new logs [11-08-2022 16:26:02]27997: WAF :: fetched 6 new logs [11-08-2022 16:27:01]30669: WAF :: fetched 6 new logs [11-08-2022 16:28:02]998: WAF :: fetched 3 new logs [11-08-2022 16:29:01]3765: WAF :: fetched 3 new logs [11-08-2022 16:31:01]9259: WAF :: fetched 1 new logs [11-08-2022 16:34:01]17341: WAF :: fetched 1 new logs [11-08-2022 16:35:01]20159: WAF :: fetched 1 new logs [11-08-2022 16:36:01]23076: WAF :: fetched 1 new logs [11-08-2022 16:37:01]25764: WAF :: fetched 7 new logs [11-08-2022 16:39:01]31186: WAF :: fetched 2 new logs [11-08-2022 16:40:02]1582: WAF :: fetched 16 new logs [11-08-2022 16:41:01]4453: WAF :: fetched 3 new logs [11-08-2022 16:41:01]4453: Checking for user cron vulnerabilities [11-08-2022 16:43:02]9672: WAF :: fetched 4 new logs [11-08-2022 16:44:01]12323: Checking ditributed CMS bruteforce attacks [11-08-2022 16:44:01]12323: WAF :: fetched 2 new logs [11-08-2022 16:46:02]17733: WAF :: fetched 1 new logs [11-08-2022 16:47:01]20311: WAF :: fetched 4 new logs [11-08-2022 16:48:02]22972: WAF :: fetched 3 new logs [11-08-2022 16:49:01]25589: WAF :: fetched 2 new logs [11-08-2022 16:50:02]28480: WAF :: fetched 3 new logs [11-08-2022 16:51:01]31260: WAF :: fetched 2 new logs [11-08-2022 16:52:02]1573: WAF :: fetched 1 new logs [11-08-2022 16:54:02]7004: WAF :: fetched 6 new logs [11-08-2022 16:55:01]9726: WAF :: fetched 1 new logs [11-08-2022 16:56:01]12393: WAF :: fetched 3 new logs [11-08-2022 16:58:01]17646: WAF :: fetched 3 new logs [11-08-2022 16:59:01]20239: WAF :: fetched 4 new logs [11-08-2022 17:00:02]22662: WAF :: fetched 3 new logs [11-08-2022 17:01:01]25827: WAF :: fetched 4 new logs [11-08-2022 17:02:01]28584: WAF :: fetched 11 new logs [11-08-2022 17:03:01]31398: WAF :: fetched 5 new logs [11-08-2022 17:04:02]1792: WAF :: fetched 14 new logs [11-08-2022 17:05:01]4597: WAF :: fetched 7 new logs [11-08-2022 17:06:01]7263: WAF :: fetched 6 new logs [11-08-2022 17:07:01]9999: WAF :: fetched 1 new logs [11-08-2022 17:08:02]12667: WAF :: fetched 5 new logs [11-08-2022 17:09:01]15283: WAF :: fetched 4 new logs [11-08-2022 17:10:02]18046: WAF :: fetched 8 new logs [11-08-2022 17:11:01]20775: WAF :: fetched 6 new logs [11-08-2022 17:12:02]23407: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660248722 [11-08-2022 17:12:02]23407: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 17:12:04]23407: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 17:12:04]23407: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-1712/20220811-171202-YvVikm-F1JIaZ8oA5-RXPQAAABA [11-08-2022 17:12:04]23407: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 17:12:04]23407: WAF :: fetched 1 new logs [11-08-2022 17:13:01]26083: WAF :: fetched 1 new logs [11-08-2022 17:14:02]28748: WAF :: fetched 1 new logs [11-08-2022 17:15:01]31458: WAF :: fetched 2 new logs [11-08-2022 17:16:01]1832: WAF :: fetched 1 new logs [11-08-2022 17:18:01]7213: WAF :: fetched 2 new logs [11-08-2022 17:19:02]9900: WAF :: fetched 12 new logs [11-08-2022 17:21:02]15439: WAF :: fetched 2 new logs [11-08-2022 17:22:01]18223: WAF :: fetched 3 new logs [11-08-2022 17:23:02]20965: WAF :: fetched 4 new logs [11-08-2022 17:24:01]23748: WAF :: fetched 3 new logs [11-08-2022 17:25:02]26638: WAF :: fetched 4 new logs [11-08-2022 17:26:01]29343: WAF :: fetched 2 new logs [11-08-2022 17:27:01]32050: WAF :: fetched 1 new logs [11-08-2022 17:28:02]2436: WAF :: fetched 3 new logs [11-08-2022 17:29:01]5165: WAF :: fetched 2 new logs [11-08-2022 17:30:02]7933: WAF :: fetched 4 new logs [11-08-2022 17:32:02]13495: WAF :: fetched 1 new logs [11-08-2022 17:33:01]16234: WAF :: fetched 4 new logs [11-08-2022 17:35:02]21820: WAF :: fetched 1 new logs [11-08-2022 17:36:01]24564: WAF :: fetched 2 new logs [11-08-2022 17:37:02]27297: WAF :: fetched 5 new logs [11-08-2022 17:40:01]3094: WAF :: fetched 5 new logs [11-08-2022 17:41:02]5875: WAF :: fetched 1 new logs [11-08-2022 17:41:02]5875: Checking for user cron vulnerabilities [11-08-2022 17:43:02]11135: WAF :: fetched 8 new logs [11-08-2022 17:44:01]13788: Checking ditributed CMS bruteforce attacks [11-08-2022 17:44:01]13788: WAF :: fetched 3 new logs [11-08-2022 17:45:02]16618: WAF :: fetched 5 new logs [11-08-2022 17:46:01]19358: WAF :: fetched 1 new logs [11-08-2022 17:47:02]22055: WAF :: fetched 4 new logs [11-08-2022 17:49:01]27320: WAF :: fetched 1 new logs [11-08-2022 17:50:02]30036: WAF :: fetched 1 new logs [11-08-2022 17:51:02]334: WAF :: fetched 1 new logs [11-08-2022 17:52:01]3111: WAF :: fetched 2 new logs [11-08-2022 17:54:01]8331: WAF :: fetched 2 new logs [11-08-2022 17:57:01]16323: WAF :: fetched 5 new logs [11-08-2022 18:01:02]27134: WAF :: fetched 4 new logs [11-08-2022 18:02:01]29687: WAF :: fetched 2 new logs [11-08-2022 18:06:01]7949: WAF :: fetched 1 new logs [11-08-2022 18:08:01]13300: WAF :: fetched 6 new logs [11-08-2022 18:09:02]15989: WAF :: fetched 1 new logs [11-08-2022 18:10:01]18644: WAF :: fetched 1 new logs [11-08-2022 18:12:01]23935: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660252321 [11-08-2022 18:12:01]23935: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 18:12:03]23935: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 18:12:04]23935: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-1812/20220811-181201-YvVwoZnUrPLKJbE80qUCBwAAACE [11-08-2022 18:12:04]23935: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-08-2022 18:12:04]23935: WAF :: fetched 1 new logs [11-08-2022 18:13:02]26598: WAF :: fetched 2 new logs [11-08-2022 18:14:01]29192: WAF :: fetched 2 new logs [11-08-2022 18:16:01]2123: WAF :: fetched 235 new logs [11-08-2022 18:17:01]4995: WAF :: fetched 2 new logs [11-08-2022 18:22:02]18190: WAF :: fetched 1 new logs [11-08-2022 18:23:02]20804: WAF :: fetched 2 new logs [11-08-2022 18:25:02]26098: WAF :: fetched 1 new logs [11-08-2022 18:26:01]28789: WAF :: fetched 2 new logs [11-08-2022 18:28:01]1575: WAF :: fetched 3 new logs [11-08-2022 18:29:02]4290: WAF :: fetched 2 new logs [11-08-2022 18:31:02]9687: WAF :: fetched 2 new logs [11-08-2022 18:32:02]12267: WAF :: fetched 3 new logs [11-08-2022 18:33:02]14850: WAF :: fetched 1 new logs [11-08-2022 18:34:02]17384: WAF :: fetched 2 new logs [11-08-2022 18:35:01]20032: WAF :: fetched 4 new logs [11-08-2022 18:36:02]22755: WAF :: fetched 1 new logs [11-08-2022 18:38:02]27992: WAF :: fetched 4 new logs [11-08-2022 18:41:01]3610: WAF :: fetched 1 new logs [11-08-2022 18:41:01]3610: Checking for user cron vulnerabilities [11-08-2022 18:44:01]11280: Checking ditributed CMS bruteforce attacks [11-08-2022 18:44:02]11280: WAF :: fetched 1 new logs [11-08-2022 18:45:01]13948: WAF :: fetched 1 new logs [11-08-2022 18:48:01]21672: WAF :: fetched 7 new logs [11-08-2022 18:49:02]24244: WAF :: fetched 3 new logs [11-08-2022 18:51:02]29591: WAF :: fetched 1 new logs [11-08-2022 18:52:02]32157: WAF :: fetched 1 new logs [11-08-2022 18:56:01]10290: WAF :: fetched 2 new logs [11-08-2022 18:57:02]12941: WAF :: fetched 2 new logs [11-08-2022 18:58:01]15477: WAF :: fetched 1 new logs [11-08-2022 19:01:02]23576: WAF :: fetched 1 new logs [11-08-2022 19:02:01]26012: WAF :: fetched 1 new logs [11-08-2022 19:05:02]1555: WAF :: fetched 3 new logs [11-08-2022 19:06:01]4294: httpd.conf changed. Refreshing watchlist. [11-08-2022 19:06:01]4285: WAF :: fetched 2 new logs [11-08-2022 19:07:01]6896: WAF :: fetched 3 new logs [11-08-2022 19:09:01]12026: WAF :: fetched 4 new logs [11-08-2022 19:10:02]14740: WAF :: fetched 3 new logs [11-08-2022 19:12:02]19927: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660255922 [11-08-2022 19:12:02]19927: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 19:12:04]19927: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 19:12:04]19927: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-1912/20220811-191202-YvV-sg7gzcIh-HxIAvv_9AAAAAU [11-08-2022 19:12:04]19927: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 19:12:04]19927: WAF :: fetched 239 new logs [11-08-2022 19:20:02]8675: WAF :: fetched 2 new logs [11-08-2022 19:21:01]11358: WAF :: fetched 3 new logs [11-08-2022 19:22:02]14018: WAF :: fetched 2 new logs [11-08-2022 19:23:01]16558: WAF :: fetched 5 new logs [11-08-2022 19:24:02]19175: WAF :: fetched 1 new logs [11-08-2022 19:25:01]21859: WAF :: fetched 1 new logs [11-08-2022 19:27:01]27072: WAF :: fetched 3 new logs [11-08-2022 19:28:01]29860: WAF :: fetched 8 new logs [11-08-2022 19:30:01]3012: WAF :: fetched 1 new logs [11-08-2022 19:32:01]8414: WAF :: fetched 1 new logs [11-08-2022 19:33:01]11079: WAF :: fetched 3 new logs [11-08-2022 19:34:01]13690: WAF :: fetched 10 new logs [11-08-2022 19:35:01]16365: WAF :: fetched 2 new logs [11-08-2022 19:38:01]24204: WAF :: fetched 10 new logs [11-08-2022 19:39:01]26822: WAF :: fetched 5 new logs [11-08-2022 19:41:01]32267: Checking for user cron vulnerabilities [11-08-2022 19:43:01]5170: WAF :: fetched 2 new logs [11-08-2022 19:44:01]7784: Checking ditributed CMS bruteforce attacks [11-08-2022 19:44:01]7784: WAF :: fetched 1 new logs [11-08-2022 19:45:01]: Checking for definition updates [11-08-2022 19:45:01]10368: WAF :: fetched 2 new logs [11-08-2022 19:45:01]10379: Updated virus defnition : malware.expert.fp [11-08-2022 19:46:01]12985: WAF :: fetched 6 new logs [11-08-2022 19:49:02]20766: WAF :: fetched 1 new logs [11-08-2022 19:50:02]23424: WAF :: fetched 1 new logs [11-08-2022 19:52:02]28731: WAF :: fetched 2 new logs [11-08-2022 19:53:01]31277: WAF :: fetched 1 new logs [11-08-2022 19:55:01]4265: WAF :: fetched 1 new logs [11-08-2022 19:56:02]6895: WAF :: fetched 1 new logs [11-08-2022 19:58:02]12098: WAF :: fetched 1 new logs [11-08-2022 19:59:01]14683: WAF :: fetched 1 new logs [11-08-2022 20:00:02]17089: WAF :: fetched 1 new logs [11-08-2022 20:02:02]22764: WAF :: fetched 1 new logs [11-08-2022 20:04:02]27916: WAF :: fetched 1 new logs [11-08-2022 20:06:01]779: WAF :: fetched 1 new logs [11-08-2022 20:07:01]3459: WAF :: fetched 2 new logs [11-08-2022 20:08:02]6003: WAF :: fetched 1 new logs [11-08-2022 20:11:01]13863: WAF :: fetched 15 new logs [11-08-2022 20:12:02]16522: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660259522 [11-08-2022 20:12:02]16522: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 20:12:04]16522: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 20:12:04]16522: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-2012/20220811-201202-YvWMwrhKTZaXcfxTeBNu-AAAAAo [11-08-2022 20:12:04]16522: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 20:12:04]16522: WAF :: fetched 20 new logs [11-08-2022 20:13:01]19055: WAF :: fetched 1 new logs [11-08-2022 20:14:01]21611: WAF :: fetched 2 new logs [11-08-2022 20:15:02]24271: WAF :: fetched 3 new logs [11-08-2022 20:18:01]31997: WAF :: fetched 1 new logs [11-08-2022 20:20:02]4969: WAF :: fetched 17 new logs [11-08-2022 20:25:01]18235: WAF :: fetched 2 new logs [11-08-2022 20:26:02]20915: WAF :: fetched 2 new logs [11-08-2022 20:27:01]23477: WAF :: fetched 1 new logs [11-08-2022 20:28:02]26067: WAF :: fetched 2 new logs [11-08-2022 20:32:01]4330: WAF :: fetched 5 new logs [11-08-2022 20:33:01]7005: WAF :: fetched 3 new logs [11-08-2022 20:34:01]9576: WAF :: fetched 1 new logs [11-08-2022 20:37:02]17342: WAF :: fetched 2 new logs [11-08-2022 20:38:01]19843: WAF :: fetched 4 new logs [11-08-2022 20:39:02]22510: WAF :: fetched 3 new logs [11-08-2022 20:40:01]25127: WAF :: fetched 6 new logs [11-08-2022 20:41:02]27734: WAF :: fetched 1 new logs [11-08-2022 20:41:02]27734: Checking for user cron vulnerabilities [11-08-2022 20:42:01]30194: WAF :: fetched 2 new logs [11-08-2022 20:43:01]395: WAF :: fetched 2 new logs [11-08-2022 20:44:01]3143: Checking ditributed CMS bruteforce attacks [11-08-2022 20:44:01]3143: WAF :: fetched 4 new logs [11-08-2022 20:46:01]8371: WAF :: fetched 1 new logs [11-08-2022 20:47:01]10920: WAF :: fetched 1 new logs [11-08-2022 20:48:02]13544: WAF :: fetched 16 new logs [11-08-2022 20:49:01]15905: WAF :: fetched 20 new logs [11-08-2022 20:52:01]24016: WAF :: fetched 2 new logs [11-08-2022 20:53:02]26603: WAF :: fetched 1 new logs [11-08-2022 20:54:01]29135: WAF :: fetched 4 new logs [11-08-2022 20:58:01]7210: WAF :: fetched 5 new logs [11-08-2022 20:59:01]9809: WAF :: fetched 1 new logs [11-08-2022 21:00:01]12037: WAF :: fetched 2 new logs [11-08-2022 21:01:01]15212: WAF :: fetched 3 new logs [11-08-2022 21:02:01]17785: WAF :: fetched 2 new logs [11-08-2022 21:05:01]25448: WAF :: fetched 1 new logs [11-08-2022 21:07:01]30647: WAF :: fetched 1 new logs [11-08-2022 21:08:02]825: WAF :: fetched 8 new logs [11-08-2022 21:09:01]3490: WAF :: fetched 8 new logs [11-08-2022 21:10:02]6073: WAF :: fetched 1 new logs [11-08-2022 21:11:01]8731: WAF :: fetched 6 new logs [11-08-2022 21:12:01]11263: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660263121 [11-08-2022 21:12:01]11263: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 21:12:03]11263: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 21:12:03]11263: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-2112/20220811-211201-YvWa0bEUCERh9hPVIMAntAAAAA4 [11-08-2022 21:12:03]11263: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 21:12:04]11263: WAF :: fetched 6 new logs [11-08-2022 21:13:01]13809: WAF :: fetched 6 new logs [11-08-2022 21:14:02]16386: WAF :: fetched 3 new logs [11-08-2022 21:15:01]18906: WAF :: fetched 1 new logs [11-08-2022 21:16:02]21683: WAF :: fetched 6 new logs [11-08-2022 21:17:01]24214: WAF :: fetched 7 new logs [11-08-2022 21:18:02]26754: WAF :: fetched 3 new logs [11-08-2022 21:19:01]29284: WAF :: fetched 5 new logs [11-08-2022 21:20:02]31862: WAF :: fetched 2 new logs [11-08-2022 21:21:01]2229: WAF :: fetched 5 new logs [11-08-2022 21:22:02]4882: WAF :: fetched 3 new logs [11-08-2022 21:23:01]7396: WAF :: fetched 6 new logs [11-08-2022 21:24:01]9943: WAF :: fetched 4 new logs [11-08-2022 21:25:01]12488: WAF :: fetched 4 new logs [11-08-2022 21:26:02]15273: WAF :: fetched 3 new logs [11-08-2022 21:27:01]17812: WAF :: fetched 2 new logs [11-08-2022 21:28:01]20466: WAF :: fetched 4 new logs [11-08-2022 21:29:02]23052: WAF :: fetched 2 new logs [11-08-2022 21:30:01]25675: WAF :: fetched 8 new logs [11-08-2022 21:31:02]28403: WAF :: fetched 3 new logs [11-08-2022 21:32:01]30941: WAF :: fetched 3 new logs [11-08-2022 21:33:02]1086: WAF :: fetched 4 new logs [11-08-2022 21:34:01]3753: WAF :: fetched 3 new logs [11-08-2022 21:35:02]6314: WAF :: fetched 76 new logs [11-08-2022 21:36:01]8994: WAF :: fetched 92 new logs [11-08-2022 21:37:02]11694: WAF :: fetched 62 new logs [11-08-2022 21:38:01]14352: WAF :: fetched 9 new logs [11-08-2022 21:39:02]17036: WAF :: fetched 68 new logs [11-08-2022 21:40:01]19654: WAF :: fetched 147 new logs [11-08-2022 21:41:02]22464: WAF :: fetched 163 new logs [11-08-2022 21:41:02]22464: Checking for user cron vulnerabilities [11-08-2022 21:42:01]25129: WAF :: fetched 136 new logs [11-08-2022 21:43:01]27779: WAF :: fetched 123 new logs [11-08-2022 21:44:01]30469: Checking ditributed CMS bruteforce attacks [11-08-2022 21:44:01]30469: WAF :: fetched 132 new logs [11-08-2022 21:45:01]612: WAF :: fetched 61 new logs [11-08-2022 21:46:01]3524: WAF :: fetched 79 new logs [11-08-2022 21:47:02]6250: WAF :: fetched 50 new logs [11-08-2022 21:48:01]8778: WAF :: fetched 2 new logs [11-08-2022 21:49:01]11369: WAF :: fetched 1 new logs [11-08-2022 21:50:01]13954: WAF :: fetched 3 new logs [11-08-2022 21:52:01]19160: WAF :: fetched 2 new logs [11-08-2022 21:55:01]26970: WAF :: fetched 1 new logs [11-08-2022 21:57:01]32172: WAF :: fetched 3 new logs [11-08-2022 21:59:01]5023: WAF :: fetched 2 new logs [11-08-2022 22:01:01]10457: WAF :: fetched 1 new logs [11-08-2022 22:02:02]13061: WAF :: fetched 5 new logs [11-08-2022 22:03:01]15610: WAF :: fetched 3 new logs [11-08-2022 22:05:02]20701: WAF :: fetched 2 new logs [11-08-2022 22:06:01]23414: WAF :: fetched 5 new logs [11-08-2022 22:07:01]25984: WAF :: fetched 1 new logs [11-08-2022 22:07:08]25975: Performing Domain reputation checks [11-08-2022 22:08:02]28544: WAF :: fetched 1 new logs [11-08-2022 22:09:01]31055: WAF :: fetched 1 new logs [11-08-2022 22:10:02]1214: WAF :: fetched 2 new logs [11-08-2022 22:11:01]4005: WAF :: fetched 10 new logs [11-08-2022 22:12:01]6547: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660266721 [11-08-2022 22:12:02]6547: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 22:12:04]6547: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 22:12:04]6547: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-2212/20220811-221202-YvWo4bGNldIWWJNzlz1M0gAAAAY [11-08-2022 22:12:04]6547: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [11-08-2022 22:12:04]6547: WAF :: fetched 5 new logs [11-08-2022 22:13:01]9056: WAF :: fetched 7 new logs [11-08-2022 22:14:02]11578: WAF :: fetched 8 new logs [11-08-2022 22:15:01]14126: WAF :: fetched 4 new logs [11-08-2022 22:16:02]16818: WAF :: fetched 3 new logs [11-08-2022 22:17:02]19333: WAF :: fetched 11 new logs [11-08-2022 22:18:02]21838: WAF :: fetched 4 new logs [11-08-2022 22:19:01]24392: WAF :: fetched 7 new logs [11-08-2022 22:20:02]27000: WAF :: fetched 9 new logs [11-08-2022 22:21:02]29723: WAF :: fetched 8 new logs [11-08-2022 22:22:02]32348: WAF :: fetched 7 new logs [11-08-2022 22:23:01]2564: WAF :: fetched 4 new logs [11-08-2022 22:24:02]5180: WAF :: fetched 10 new logs [11-08-2022 22:25:01]7813: WAF :: fetched 13 new logs [11-08-2022 22:26:02]10568: WAF :: fetched 19 new logs [11-08-2022 22:27:01]13291: WAF :: fetched 19 new logs [11-08-2022 22:28:02]15974: WAF :: fetched 21 new logs [11-08-2022 22:29:01]18580: WAF :: fetched 12 new logs [11-08-2022 22:30:02]21201: WAF :: fetched 5 new logs [11-08-2022 22:31:01]23955: WAF :: fetched 5 new logs [11-08-2022 22:32:02]26559: WAF :: fetched 3 new logs [11-08-2022 22:33:01]29255: WAF :: fetched 8 new logs [11-08-2022 22:34:02]31837: WAF :: fetched 8 new logs [11-08-2022 22:35:01]2105: WAF :: fetched 9 new logs [11-08-2022 22:36:02]4949: WAF :: fetched 39 new logs [11-08-2022 22:37:01]7580: WAF :: fetched 3 new logs [11-08-2022 22:38:02]10227: WAF :: fetched 2 new logs [11-08-2022 22:39:01]12782: WAF :: fetched 12 new logs [11-08-2022 22:40:02]15444: WAF :: fetched 9 new logs [11-08-2022 22:41:01]18217: WAF :: fetched 6 new logs [11-08-2022 22:41:01]18217: Checking for user cron vulnerabilities [11-08-2022 22:42:02]20817: WAF :: fetched 4 new logs [11-08-2022 22:43:01]23365: WAF :: fetched 8 new logs [11-08-2022 22:44:01]25960: Checking ditributed CMS bruteforce attacks [11-08-2022 22:44:02]25960: WAF :: fetched 3 new logs [11-08-2022 22:45:01]28560: WAF :: fetched 8 new logs [11-08-2022 22:46:02]31227: WAF :: fetched 7 new logs [11-08-2022 22:47:01]1361: WAF :: fetched 4 new logs [11-08-2022 22:48:02]4201: WAF :: fetched 5 new logs [11-08-2022 22:49:01]6801: WAF :: fetched 9 new logs [11-08-2022 22:50:02]9390: WAF :: fetched 7 new logs [11-08-2022 22:51:01]12088: WAF :: fetched 9 new logs [11-08-2022 22:52:02]14749: WAF :: fetched 3 new logs [11-08-2022 22:53:02]17348: WAF :: fetched 3 new logs [11-08-2022 22:54:01]19872: WAF :: fetched 3 new logs [11-08-2022 22:55:02]22428: WAF :: fetched 3 new logs [11-08-2022 22:56:01]25059: WAF :: fetched 3 new logs [11-08-2022 22:57:02]27572: WAF :: fetched 2 new logs [11-08-2022 22:58:01]30183: WAF :: fetched 20 new logs [11-08-2022 22:59:01]32752: WAF :: fetched 4 new logs [11-08-2022 23:00:02]2698: WAF :: fetched 9 new logs [11-08-2022 23:01:01]5810: WAF :: fetched 3 new logs [11-08-2022 23:02:02]8436: WAF :: fetched 2 new logs [11-08-2022 23:03:01]10936: WAF :: fetched 3 new logs [11-08-2022 23:04:02]13472: WAF :: fetched 1 new logs [11-08-2022 23:05:01]16019: WAF :: fetched 3 new logs [11-08-2022 23:06:02]18706: WAF :: fetched 5 new logs [11-08-2022 23:07:50]21422: Performed RBL check for 23.111.136.34. [11-08-2022 23:08:02]23823: WAF :: fetched 4 new logs [11-08-2022 23:09:01]26284: WAF :: fetched 1 new logs [11-08-2022 23:11:01]31491: WAF :: fetched 9 new logs [11-08-2022 23:12:02]1675: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660270322 [11-08-2022 23:12:02]1675: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [11-08-2022 23:12:04]1675: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [11-08-2022 23:12:04]1675: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220811/20220811-2312/20220811-231202-YvW28rRF6cOIJqHJvgg_ewAAABE [11-08-2022 23:12:04]1675: WAF :: No suitable log file found. Using SQLite.. [11-08-2022 23:12:04]1675: WAF :: fetched 320 new logs [11-08-2022 23:13:01]4301: WAF :: fetched 3 new logs [11-08-2022 23:15:01]9410: WAF :: fetched 2 new logs [11-08-2022 23:16:01]12085: WAF :: fetched 2 new logs [11-08-2022 23:18:01]17219: WAF :: fetched 2 new logs [11-08-2022 23:19:01]19759: WAF :: fetched 3 new logs [11-08-2022 23:20:01]22291: WAF :: fetched 2 new logs [11-08-2022 23:22:01]27485: WAF :: fetched 2 new logs [11-08-2022 23:23:01]30016: WAF :: fetched 2 new logs [11-08-2022 23:24:01]32556: WAF :: fetched 4 new logs [11-08-2022 23:25:02]2816: WAF :: fetched 3 new logs [11-08-2022 23:27:01]8044: WAF :: fetched 3 new logs [11-08-2022 23:28:02]10598: WAF :: fetched 2 new logs [11-08-2022 23:30:02]15702: WAF :: fetched 1 new logs [11-08-2022 23:31:01]18336: WAF :: fetched 2 new logs [11-08-2022 23:32:02]20964: WAF :: fetched 5 new logs [11-08-2022 23:33:01]23492: WAF :: fetched 1 new logs [11-08-2022 23:35:01]28577: WAF :: fetched 1 new logs [11-08-2022 23:36:02]31305: WAF :: fetched 3 new logs [11-08-2022 23:37:01]1445: WAF :: fetched 2 new logs [11-08-2022 23:38:02]4133: WAF :: fetched 7 new logs [11-08-2022 23:40:02]9223: WAF :: fetched 2 new logs [11-08-2022 23:41:01]11893: WAF :: fetched 1 new logs [11-08-2022 23:41:01]11893: Checking for user cron vulnerabilities [11-08-2022 23:42:02]14434: WAF :: fetched 2 new logs [11-08-2022 23:44:01]19518: Checking ditributed CMS bruteforce attacks [11-08-2022 23:45:01]22127: WAF :: fetched 19 new logs [11-08-2022 23:46:02]24800: WAF :: fetched 1 new logs [11-08-2022 23:51:01]5386: WAF :: fetched 1 new logs [11-08-2022 23:53:01]10505: WAF :: fetched 3 new logs [11-08-2022 23:54:01]13165: httpd.conf changed. Refreshing watchlist. [11-08-2022 23:55:01]16624: WAF :: fetched 41 new logs [11-08-2022 23:55:02]16617: httpd.conf changed. Refreshing watchlist. [11-08-2022 23:56:01]19655: WAF :: fetched 22 new logs [11-08-2022 23:59:01]27444: WAF :: fetched 1 new logs [12-08-2022 00:00:01]29672: WAF :: fetched 1 new logs [12-08-2022 00:01:02]530: httpd.conf changed. Refreshing watchlist. [12-08-2022 00:01:05]515: Sending daily report for August 12, 2022 [12-08-2022 00:02:01]3231: WAF :: fetched 2 new logs [12-08-2022 00:04:01]8314: WAF :: fetched 1 new logs [12-08-2022 00:05:01]10910: WAF :: fetched 4 new logs [12-08-2022 00:05:02]10910: Deleted 0 entries older than 6 MONTH from scanner_logs [12-08-2022 00:05:02]10910: Deleted 0 files from Quarantine [12-08-2022 00:07:01]16193: WAF :: fetched 1 new logs [12-08-2022 00:08:01]18743: WAF :: fetched 1 new logs [12-08-2022 00:12:02]28986: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660273922 [12-08-2022 00:12:02]28986: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-08-2022 00:12:04]28986: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-08-2022 00:12:04]28986: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220812/20220812-0012/20220812-001202-YvXFAu_Zd_GD2o-yf8lw3gAAABk [12-08-2022 00:12:04]28986: WAF :: No suitable log file found. Using SQLite.. [12-08-2022 00:12:04]28986: WAF :: fetched 1 new logs [12-08-2022 00:14:02]1715: WAF :: fetched 1 new logs [12-08-2022 00:18:02]12101: WAF :: fetched 2 new logs [12-08-2022 00:19:01]14664: WAF :: fetched 31 new logs [12-08-2022 00:20:02]17226: WAF :: fetched 35 new logs [12-08-2022 00:21:01]19934: WAF :: fetched 33 new logs [12-08-2022 00:22:02]22503: WAF :: fetched 34 new logs [12-08-2022 00:23:01]25024: WAF :: fetched 36 new logs [12-08-2022 00:24:02]27590: WAF :: fetched 26 new logs [12-08-2022 00:25:01]30111: WAF :: fetched 20 new logs [12-08-2022 00:26:02]376: WAF :: fetched 12 new logs [12-08-2022 00:27:01]3103: WAF :: fetched 17 new logs [12-08-2022 00:28:02]5719: WAF :: fetched 45 new logs [12-08-2022 00:29:01]8271: WAF :: fetched 32 new logs [12-08-2022 00:30:02]10906: WAF :: fetched 12 new logs [12-08-2022 00:31:01]13649: WAF :: fetched 25 new logs [12-08-2022 00:33:01]18842: WAF :: fetched 2 new logs [12-08-2022 00:36:02]26778: WAF :: fetched 1 new logs [12-08-2022 00:37:01]29311: WAF :: fetched 1 new logs [12-08-2022 00:39:01]2237: WAF :: fetched 1 new logs [12-08-2022 00:40:02]4944: WAF :: fetched 1 new logs [12-08-2022 00:41:01]7648: Checking for user cron vulnerabilities [12-08-2022 00:42:02]10325: WAF :: fetched 1 new logs [12-08-2022 00:44:02]15575: Checking ditributed CMS bruteforce attacks [12-08-2022 00:44:02]15575: WAF :: fetched 2 new logs [12-08-2022 00:45:01]: Checking for software updates [12-08-2022 00:46:02]20830: WAF :: fetched 1 new logs [12-08-2022 00:47:01]23359: WAF :: fetched 2 new logs [12-08-2022 00:48:02]25946: WAF :: fetched 1 new logs [12-08-2022 00:50:02]31222: WAF :: fetched 1 new logs [12-08-2022 00:53:01]6847: WAF :: fetched 2 new logs [12-08-2022 00:54:01]9435: WAF :: fetched 5 new logs [12-08-2022 00:59:01]22514: WAF :: fetched 2 new logs [12-08-2022 01:00:01]24764: WAF :: fetched 1 new logs [12-08-2022 01:02:01]31576: WAF :: fetched 1 new logs [12-08-2022 01:06:01]10797: WAF :: fetched 3 new logs [12-08-2022 01:08:01]16344: WAF :: fetched 2 new logs [12-08-2022 01:10:01]21551: WAF :: fetched 1 new logs [12-08-2022 01:12:01]27103: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660277521 [12-08-2022 01:12:01]27103: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-08-2022 01:12:03]27103: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-08-2022 01:12:04]27103: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220812/20220812-0112/20220812-011201-YvXTETmu5rLRfBTBFbFvJgAAAAw [12-08-2022 01:12:04]27103: WAF :: No suitable log file found. Using SQLite.. [12-08-2022 01:12:04]27103: WAF :: fetched 2 new logs [12-08-2022 01:16:01]5542: WAF :: fetched 5 new logs [12-08-2022 01:18:01]11253: WAF :: fetched 1 new logs [12-08-2022 01:21:01]19694: WAF :: fetched 1 new logs [12-08-2022 01:22:01]22467: WAF :: fetched 1 new logs [12-08-2022 01:23:01]25177: WAF :: fetched 35 new logs [12-08-2022 01:24:01]27989: WAF :: fetched 2 new logs [12-08-2022 01:30:01]12290: WAF :: fetched 1 new logs [12-08-2022 01:31:02]14949: WAF :: fetched 1 new logs [12-08-2022 01:34:01]23436: WAF :: fetched 5 new logs [12-08-2022 01:36:01]28783: WAF :: fetched 6 new logs [12-08-2022 01:37:01]31873: WAF :: fetched 1 new logs [12-08-2022 01:38:01]2363: WAF :: fetched 1 new logs [12-08-2022 01:39:01]5157: WAF :: fetched 2 new logs [12-08-2022 01:40:01]7683: WAF :: fetched 2 new logs [12-08-2022 01:41:01]10254: WAF :: fetched 1 new logs [12-08-2022 01:41:01]10254: Checking for user cron vulnerabilities [12-08-2022 01:42:01]13051: WAF :: fetched 1 new logs [12-08-2022 01:44:01]18623: Checking ditributed CMS bruteforce attacks [12-08-2022 01:45:01]: Checking for definition updates [12-08-2022 01:45:01]21161: WAF :: fetched 6 new logs [12-08-2022 01:47:01]26680: WAF :: fetched 1 new logs [12-08-2022 01:48:01]29186: WAF :: fetched 1 new logs [12-08-2022 01:49:01]31716: WAF :: fetched 3 new logs [12-08-2022 01:50:01]1930: WAF :: fetched 13 new logs [12-08-2022 01:51:01]4678: WAF :: fetched 1 new logs [12-08-2022 01:53:01]9970: WAF :: fetched 2 new logs [12-08-2022 01:56:01]18163: WAF :: fetched 3 new logs [12-08-2022 02:02:01]1418: WAF :: fetched 1 new logs [12-08-2022 02:03:02]4062: WAF :: fetched 1 new logs [12-08-2022 02:04:01]6541: WAF :: fetched 1 new logs [12-08-2022 02:06:01]11818: WAF :: fetched 2 new logs [12-08-2022 02:10:02]22056: WAF :: fetched 1 new logs [12-08-2022 02:12:02]27250: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660281122 [12-08-2022 02:12:02]27250: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-08-2022 02:12:04]27250: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-08-2022 02:12:04]27250: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220812/20220812-0212/20220812-021202-YvXhIj90uE02Xm0XsJpqXAAAAA4 [12-08-2022 02:12:04]27250: WAF :: No suitable log file found. Using SQLite.. [12-08-2022 02:12:04]27250: WAF :: fetched 4 new logs [12-08-2022 02:14:02]32387: WAF :: fetched 1 new logs [12-08-2022 02:17:01]7891: WAF :: fetched 1 new logs [12-08-2022 02:18:01]10416: WAF :: fetched 1 new logs [12-08-2022 02:19:01]13016: WAF :: fetched 1 new logs [12-08-2022 02:21:01]18220: WAF :: fetched 1 new logs [12-08-2022 02:22:01]20783: WAF :: fetched 2 new logs [12-08-2022 02:23:01]23289: WAF :: fetched 6 new logs [12-08-2022 02:24:01]25775: WAF :: fetched 7 new logs [12-08-2022 02:25:01]28275: WAF :: fetched 7 new logs [12-08-2022 02:26:01]30833: WAF :: fetched 6 new logs [12-08-2022 02:27:01]1045: WAF :: fetched 5 new logs [12-08-2022 02:28:01]3638: WAF :: fetched 6 new logs [12-08-2022 02:29:01]6144: WAF :: fetched 3 new logs [12-08-2022 02:32:01]13827: WAF :: fetched 1 new logs [12-08-2022 02:36:01]23951: WAF :: fetched 1 new logs [12-08-2022 02:37:01]26574: WAF :: fetched 3 new logs [12-08-2022 02:38:01]29485: WAF :: fetched 5 new logs [12-08-2022 02:39:01]32757: WAF :: fetched 7 new logs [12-08-2022 02:40:02]3259: WAF :: fetched 6 new logs [12-08-2022 02:41:01]5977: WAF :: fetched 5 new logs [12-08-2022 02:41:01]5977: Checking for user cron vulnerabilities [12-08-2022 02:42:02]8598: WAF :: fetched 9 new logs [12-08-2022 02:44:01]13961: Checking ditributed CMS bruteforce attacks [12-08-2022 02:44:02]13961: WAF :: fetched 3 new logs [12-08-2022 02:47:01]22506: WAF :: fetched 5 new logs [12-08-2022 02:49:01]27894: WAF :: fetched 4 new logs [12-08-2022 02:51:01]780: WAF :: fetched 4 new logs [12-08-2022 02:52:02]3510: WAF :: fetched 8 new logs [12-08-2022 02:53:01]6001: WAF :: fetched 7 new logs [12-08-2022 02:53:02]6013: Updated license status via CDN [12-08-2022 02:54:02]8933: WAF :: fetched 3 new logs [12-08-2022 02:55:01]11642: WAF :: fetched 7 new logs [12-08-2022 02:56:01]14173: WAF :: fetched 6 new logs [12-08-2022 02:57:01]16873: WAF :: fetched 1 new logs [12-08-2022 02:58:01]19368: WAF :: fetched 3 new logs [12-08-2022 03:00:01]24191: Found and updated 29 CMS installations [12-08-2022 03:02:01]30280: WAF :: fetched 1 new logs [12-08-2022 03:02:07]24191: Sending CMS version vulnerability report emails to cpanel users [12-08-2022 03:02:10]24191: Checking wordpress installations for suspicious directories [12-08-2022 03:03:01]539: WAF :: fetched 1 new logs [12-08-2022 03:04:32]576: Sending CMS version vulnerability report emails to cpanel users [12-08-2022 03:04:35]576: Checking wordpress installations for suspicious directories [12-08-2022 03:05:01]6260: WAF :: fetched 5 new logs [12-08-2022 03:09:01]16604: WAF :: fetched 4 new logs [12-08-2022 03:10:01]19185: WAF :: fetched 1 new logs [12-08-2022 03:11:01]21738: WAF :: fetched 2 new logs [12-08-2022 03:12:01]24347: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660284721 [12-08-2022 03:12:01]24347: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-08-2022 03:12:03]24347: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-08-2022 03:12:04]24347: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220812/20220812-0312/20220812-031201-YvXvMX4mkcOGoYlnojgPZQAAAAc [12-08-2022 03:12:04]24347: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-08-2022 03:12:04]24347: WAF :: fetched 1 new logs [12-08-2022 03:13:01]26898: WAF :: fetched 3 new logs [12-08-2022 03:14:02]29751: WAF :: fetched 2 new logs [12-08-2022 03:16:02]2846: WAF :: fetched 6 new logs [12-08-2022 03:18:02]8094: WAF :: fetched 1 new logs [12-08-2022 03:19:01]10750: WAF :: fetched 4 new logs [12-08-2022 03:21:01]16034: WAF :: fetched 1 new logs [12-08-2022 03:22:02]18810: WAF :: fetched 4 new logs [12-08-2022 03:23:01]21526: WAF :: fetched 1 new logs [12-08-2022 03:24:02]24280: WAF :: fetched 2 new logs [12-08-2022 03:26:02]29666: WAF :: fetched 1 new logs [12-08-2022 03:28:02]2493: WAF :: fetched 2 new logs [12-08-2022 03:29:01]5043: WAF :: fetched 2 new logs [12-08-2022 03:31:01]10144: WAF :: fetched 4 new logs [12-08-2022 03:32:02]12797: WAF :: fetched 1 new logs [12-08-2022 03:34:02]17854: WAF :: fetched 3 new logs [12-08-2022 03:35:01]20397: WAF :: fetched 1 new logs [12-08-2022 03:36:02]22981: WAF :: fetched 1 new logs [12-08-2022 03:37:01]25561: WAF :: fetched 5 new logs [12-08-2022 03:38:02]28097: WAF :: fetched 3 new logs [12-08-2022 03:39:01]30590: WAF :: fetched 4 new logs [12-08-2022 03:41:01]3420: WAF :: fetched 1 new logs [12-08-2022 03:41:01]3420: Checking for user cron vulnerabilities [12-08-2022 03:42:02]6116: WAF :: fetched 4 new logs [12-08-2022 03:43:01]8629: WAF :: fetched 1 new logs [12-08-2022 03:44:01]11173: Checking ditributed CMS bruteforce attacks [12-08-2022 03:44:02]11173: WAF :: fetched 10 new logs [12-08-2022 03:46:02]16399: WAF :: fetched 3 new logs [12-08-2022 03:47:01]16826: WAF :: fetched 1 new logs [12-08-2022 03:49:01]19211: WAF :: fetched 1 new logs [12-08-2022 03:51:02]30634: WAF :: fetched 1 new logs [12-08-2022 03:52:01]808: WAF :: fetched 1 new logs [12-08-2022 03:54:01]5996: WAF :: fetched 1 new logs [12-08-2022 03:55:02]8569: WAF :: fetched 3 new logs [12-08-2022 03:58:01]16240: WAF :: fetched 2 new logs [12-08-2022 03:59:02]18821: WAF :: fetched 3 new logs [12-08-2022 04:00:02]21063: WAF :: fetched 7 new logs [12-08-2022 04:03:02]29334: WAF :: fetched 6 new logs [12-08-2022 04:05:02]2042: WAF :: fetched 2 new logs [12-08-2022 04:07:02]7287: WAF :: fetched 1 new logs [12-08-2022 04:09:02]12349: WAF :: fetched 4 new logs [12-08-2022 04:10:01]14877: WAF :: fetched 2 new logs [12-08-2022 04:12:02]20095: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660288322 [12-08-2022 04:12:02]20095: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-08-2022 04:12:04]20095: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-08-2022 04:12:04]20095: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220812/20220812-0412/20220812-041202-YvX9QqARU9lTVbC2kl_n1wAAABE [12-08-2022 04:12:04]20095: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-08-2022 04:12:05]20095: WAF :: fetched 1 new logs [12-08-2022 04:13:02]22692: WAF :: fetched 3 new logs [12-08-2022 04:16:02]30379: WAF :: fetched 2 new logs [12-08-2022 04:18:02]3164: WAF :: fetched 1 new logs [12-08-2022 04:19:02]5680: WAF :: fetched 12 new logs [12-08-2022 04:21:02]10774: WAF :: fetched 2 new logs [12-08-2022 04:22:02]13436: WAF :: fetched 1 new logs [12-08-2022 04:24:02]18502: WAF :: fetched 1 new logs [12-08-2022 04:25:01]21051: WAF :: fetched 20 new logs [12-08-2022 04:26:02]23603: WAF :: fetched 17 new logs [12-08-2022 04:27:02]26189: WAF :: fetched 20 new logs [12-08-2022 04:28:02]28733: WAF :: fetched 21 new logs [12-08-2022 04:29:01]31212: WAF :: fetched 15 new logs [12-08-2022 04:31:02]4009: WAF :: fetched 3 new logs [12-08-2022 04:34:02]11689: WAF :: fetched 1 new logs [12-08-2022 04:35:02]14200: WAF :: fetched 1 new logs [12-08-2022 04:36:02]16804: WAF :: fetched 1 new logs [12-08-2022 04:37:02]19415: WAF :: fetched 5 new logs [12-08-2022 04:38:02]21943: WAF :: fetched 3 new logs [12-08-2022 04:40:02]26969: WAF :: fetched 1 new logs [12-08-2022 04:41:02]29544: WAF :: fetched 1 new logs [12-08-2022 04:41:02]29544: Checking for user cron vulnerabilities [12-08-2022 04:42:02]32226: WAF :: fetched 4 new logs [12-08-2022 04:44:02]4977: Checking ditributed CMS bruteforce attacks [12-08-2022 04:47:02]12697: WAF :: fetched 5 new logs [12-08-2022 04:48:02]15253: WAF :: fetched 2 new logs [12-08-2022 04:49:01]17765: WAF :: fetched 4 new logs [12-08-2022 04:50:02]20336: WAF :: fetched 2 new logs [12-08-2022 04:52:02]25490: WAF :: fetched 4 new logs [12-08-2022 04:53:01]28013: WAF :: fetched 1 new logs [12-08-2022 04:54:02]30583: WAF :: fetched 3 new logs [12-08-2022 04:55:01]701: WAF :: fetched 3 new logs [12-08-2022 04:56:02]3427: WAF :: fetched 3 new logs [12-08-2022 04:57:01]6036: WAF :: fetched 1 new logs [12-08-2022 04:58:02]8543: WAF :: fetched 2 new logs [12-08-2022 05:01:41]16367: Starting daily scan on files updated in last 24 hrs [12-08-2022 05:03:01]21591: WAF :: fetched 3 new logs [12-08-2022 05:04:02]24112: WAF :: fetched 3 new logs [12-08-2022 05:08:02]1971: WAF :: fetched 2 new logs [12-08-2022 05:09:02]4578: WAF :: fetched 3 new logs [12-08-2022 05:12:01]12237: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660291921 [12-08-2022 05:12:01]12237: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-08-2022 05:12:03]12237: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-08-2022 05:12:04]12237: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220812/20220812-0512/20220812-051201-YvYLUTHYmwSP2YaQxc3QWQAAAAI [12-08-2022 05:12:04]12237: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-08-2022 05:12:04]12237: WAF :: fetched 4 new logs [12-08-2022 05:16:01]22415: WAF :: fetched 3 new logs [12-08-2022 05:17:02]25039: WAF :: fetched 1 new logs [12-08-2022 05:18:01]27733: WAF :: fetched 2 new logs [12-08-2022 05:20:01]32764: WAF :: fetched 1 new logs [12-08-2022 05:22:01]5645: WAF :: fetched 1 new logs [12-08-2022 05:24:01]10647: WAF :: fetched 3 new logs [12-08-2022 05:26:01]15816: WAF :: fetched 1 new logs [12-08-2022 05:27:02]18500: WAF :: fetched 1 new logs [12-08-2022 05:28:01]21013: WAF :: fetched 2 new logs [12-08-2022 05:29:02]23525: WAF :: fetched 1 new logs [12-08-2022 05:31:01]28603: WAF :: fetched 1 new logs [12-08-2022 05:32:02]31210: WAF :: fetched 1 new logs [12-08-2022 05:34:02]3978: WAF :: fetched 1 new logs [12-08-2022 05:35:01]6535: WAF :: fetched 2 new logs [12-08-2022 05:37:01]11685: WAF :: fetched 1 new logs [12-08-2022 05:38:02]14270: WAF :: fetched 3 new logs [12-08-2022 05:41:01]21949: WAF :: fetched 8 new logs [12-08-2022 05:41:01]21949: Checking for user cron vulnerabilities [12-08-2022 05:42:02]24547: WAF :: fetched 3 new logs [12-08-2022 05:43:01]27112: WAF :: fetched 4 new logs [12-08-2022 05:44:01]29689: Checking ditributed CMS bruteforce attacks [12-08-2022 05:44:02]29689: WAF :: fetched 1 new logs [12-08-2022 05:48:02]7733: WAF :: fetched 2 new logs [12-08-2022 05:49:01]10294: WAF :: fetched 3 new logs [12-08-2022 05:50:02]12877: WAF :: fetched 5 new logs [12-08-2022 05:51:01]15558: WAF :: fetched 18 new logs [12-08-2022 05:52:02]18219: WAF :: fetched 12 new logs [12-08-2022 05:53:02]20906: WAF :: fetched 17 new logs [12-08-2022 05:54:01]23447: WAF :: fetched 31 new logs [12-08-2022 05:55:02]26038: WAF :: fetched 72 new logs [12-08-2022 05:56:01]28661: WAF :: fetched 37 new logs [12-08-2022 05:57:02]31267: WAF :: fetched 47 new logs [12-08-2022 05:58:01]1528: WAF :: fetched 43 new logs [12-08-2022 05:59:02]4232: WAF :: fetched 48 new logs [12-08-2022 06:00:02]6476: WAF :: fetched 47 new logs [12-08-2022 06:01:02]9509: WAF :: fetched 52 new logs [12-08-2022 06:02:01]12203: WAF :: fetched 58 new logs [12-08-2022 06:03:02]14956: WAF :: fetched 38 new logs [12-08-2022 06:04:02]17563: WAF :: fetched 45 new logs [12-08-2022 06:05:02]20119: WAF :: fetched 8 new logs [12-08-2022 06:08:02]27875: WAF :: fetched 7 new logs [12-08-2022 06:10:02]513: WAF :: fetched 1 new logs [12-08-2022 06:11:02]3213: WAF :: fetched 2 new logs [12-08-2022 06:12:02]5808: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660295522 [12-08-2022 06:12:02]5808: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-08-2022 06:12:04]5808: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-08-2022 06:12:04]5808: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220812/20220812-0612/20220812-061202-YvYZYi3VyGOzENrx0cMwOQAAAA0 [12-08-2022 06:12:04]5808: WAF :: No suitable log file found. Using SQLite.. [12-08-2022 06:12:05]5808: WAF :: fetched 789 new logs [12-08-2022 06:13:01]8384: WAF :: fetched 1 new logs [12-08-2022 06:14:02]10914: WAF :: fetched 1 new logs [12-08-2022 06:16:02]16064: WAF :: fetched 2 new logs [12-08-2022 06:17:01]18597: WAF :: fetched 5 new logs [12-08-2022 06:18:02]21214: WAF :: fetched 5 new logs [12-08-2022 06:20:01]26279: WAF :: fetched 1 new logs [12-08-2022 06:21:02]28917: WAF :: fetched 110 new logs [12-08-2022 06:22:01]31526: WAF :: fetched 1 new logs [12-08-2022 06:25:01]6849: WAF :: fetched 15 new logs [12-08-2022 06:26:01]9434: WAF :: fetched 6 new logs [12-08-2022 06:30:01]19781: WAF :: fetched 2 new logs [12-08-2022 06:31:02]22410: WAF :: fetched 1 new logs [12-08-2022 06:35:01]32574: WAF :: fetched 2 new logs [12-08-2022 06:37:01]5356: WAF :: fetched 4 new logs [12-08-2022 06:39:01]10491: WAF :: fetched 2 new logs [12-08-2022 06:40:02]13030: WAF :: fetched 3 new logs [12-08-2022 06:41:01]15375: Checking for user cron vulnerabilities [12-08-2022 06:43:01]20731: WAF :: fetched 1 new logs [12-08-2022 06:44:01]23253: Checking ditributed CMS bruteforce attacks [12-08-2022 06:46:01]28352: WAF :: fetched 2 new logs [12-08-2022 06:47:01]30851: WAF :: fetched 1 new logs [12-08-2022 06:51:01]9242: WAF :: fetched 22 new logs [12-08-2022 06:52:02]11834: WAF :: fetched 15 new logs [12-08-2022 06:53:01]14427: WAF :: fetched 2 new logs [12-08-2022 06:56:02]22154: WAF :: fetched 1 new logs [12-08-2022 06:58:01]27294: WAF :: fetched 1 new logs [12-08-2022 06:59:01]29809: WAF :: fetched 1 new logs [12-08-2022 07:05:01]13109: WAF :: fetched 5 new logs [12-08-2022 07:06:01]15730: WAF :: fetched 2 new logs [12-08-2022 07:07:01]18282: WAF :: fetched 1 new logs [12-08-2022 07:08:01]20869: WAF :: fetched 2 new logs [12-08-2022 07:09:01]23379: WAF :: fetched 1 new logs [12-08-2022 07:10:02]25967: WAF :: fetched 3 new logs [12-08-2022 07:11:01]28587: WAF :: fetched 1 new logs [12-08-2022 07:12:02]31136: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660299122 [12-08-2022 07:12:02]31136: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-08-2022 07:12:04]31136: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-08-2022 07:12:04]31136: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220812/20220812-0712/20220812-071202-YvYncnxHpvJHoNMLa-jcygAAAAc [12-08-2022 07:12:04]31136: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-08-2022 07:12:05]31136: WAF :: fetched 1 new logs [12-08-2022 07:13:01]1398: WAF :: fetched 23 new logs [12-08-2022 07:14:02]4043: WAF :: fetched 2 new logs [12-08-2022 07:17:01]11766: WAF :: fetched 2 new logs [12-08-2022 07:18:02]14395: WAF :: fetched 1 new logs [12-08-2022 07:19:01]16899: WAF :: fetched 2 new logs [12-08-2022 07:20:02]19471: WAF :: fetched 3 new logs [12-08-2022 07:21:02]22022: WAF :: fetched 5 new logs [12-08-2022 07:22:02]24567: WAF :: fetched 3 new logs [12-08-2022 07:23:02]27177: WAF :: fetched 6 new logs [12-08-2022 07:24:02]29749: WAF :: fetched 3 new logs [12-08-2022 07:25:02]32404: WAF :: fetched 4 new logs [12-08-2022 07:26:02]2731: WAF :: fetched 2 new logs [12-08-2022 07:27:02]5290: WAF :: fetched 6 new logs [12-08-2022 07:29:02]10472: WAF :: fetched 3 new logs [12-08-2022 07:32:02]18172: WAF :: fetched 1 new logs [12-08-2022 07:34:02]23276: WAF :: fetched 3 new logs [12-08-2022 07:35:01]25713: WAF :: fetched 2 new logs [12-08-2022 07:38:02]1213: WAF :: fetched 3 new logs [12-08-2022 07:39:02]3941: WAF :: fetched 5 new logs [12-08-2022 07:40:02]6510: WAF :: fetched 7 new logs [12-08-2022 07:41:01]9106: WAF :: fetched 2 new logs [12-08-2022 07:41:01]9106: Checking for user cron vulnerabilities [12-08-2022 07:42:02]11653: WAF :: fetched 2 new logs [12-08-2022 07:44:01]16843: Checking ditributed CMS bruteforce attacks [12-08-2022 07:45:01]: Checking for definition updates [12-08-2022 07:45:01]19354: WAF :: fetched 6 new logs [12-08-2022 07:47:02]24571: WAF :: fetched 39 new logs [12-08-2022 07:49:02]29750: WAF :: fetched 5 new logs [12-08-2022 07:50:01]32267: WAF :: fetched 5 new logs [12-08-2022 07:51:02]2702: WAF :: fetched 4 new logs [12-08-2022 07:54:02]10495: WAF :: fetched 3 new logs [12-08-2022 07:57:01]18267: WAF :: fetched 1 new logs [12-08-2022 07:58:02]20959: WAF :: fetched 3 new logs [12-08-2022 07:59:02]23570: WAF :: fetched 5 new logs [12-08-2022 08:01:01]28910: WAF :: fetched 4 new logs [12-08-2022 08:02:02]31482: WAF :: fetched 4 new logs [12-08-2022 08:03:01]1751: WAF :: fetched 6 new logs [12-08-2022 08:04:02]4459: WAF :: fetched 3 new logs [12-08-2022 08:05:02]7081: WAF :: fetched 4 new logs [12-08-2022 08:06:01]9477: WAF :: fetched 5 new logs [12-08-2022 08:07:02]12290: WAF :: fetched 3 new logs [12-08-2022 08:08:01]14934: WAF :: fetched 7 new logs [12-08-2022 08:09:02]17559: WAF :: fetched 5 new logs [12-08-2022 08:10:01]20297: WAF :: fetched 2 new logs [12-08-2022 08:11:02]22970: WAF :: fetched 7 new logs [12-08-2022 08:12:01]25552: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660302721 [12-08-2022 08:12:01]25552: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-08-2022 08:12:03]25552: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-08-2022 08:12:04]25552: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220812/20220812-0812/20220812-081201-YvY1gSQnhFh2OQazN88VqwAAAAI [12-08-2022 08:12:04]25552: WAF :: No suitable log file found. Using SQLite.. [12-08-2022 08:12:04]25552: WAF :: fetched 175 new logs [12-08-2022 08:13:02]28264: WAF :: fetched 36 new logs [12-08-2022 08:14:01]30890: WAF :: fetched 6 new logs [12-08-2022 08:15:02]1142: WAF :: fetched 4 new logs [12-08-2022 08:16:02]3869: WAF :: fetched 5 new logs [12-08-2022 08:17:01]6494: WAF :: fetched 10 new logs [12-08-2022 08:18:01]9185: WAF :: fetched 6 new logs [12-08-2022 08:19:02]11823: WAF :: fetched 4 new logs [12-08-2022 08:20:01]14540: WAF :: fetched 6 new logs [12-08-2022 08:21:02]17238: WAF :: fetched 6 new logs [12-08-2022 08:22:01]19851: WAF :: fetched 9 new logs [12-08-2022 08:23:01]22553: WAF :: fetched 7 new logs [12-08-2022 08:24:01]25116: WAF :: fetched 4 new logs [12-08-2022 08:25:01]27701: WAF :: fetched 11 new logs [12-08-2022 08:26:01]30300: WAF :: fetched 6 new logs [12-08-2022 08:27:01]506: WAF :: fetched 3 new logs [12-08-2022 08:28:01]3325: WAF :: fetched 4 new logs [12-08-2022 08:29:01]6084: WAF :: fetched 6 new logs [12-08-2022 08:30:02]8671: WAF :: fetched 3 new logs [12-08-2022 08:31:01]11335: WAF :: fetched 2 new logs [12-08-2022 08:32:01]13912: WAF :: fetched 5 new logs [12-08-2022 08:33:01]16636: WAF :: fetched 13 new logs [12-08-2022 08:34:01]19190: WAF :: fetched 3 new logs [12-08-2022 08:35:01]21740: WAF :: fetched 1 new logs [12-08-2022 08:36:01]24359: WAF :: fetched 1 new logs [12-08-2022 08:37:01]26931: WAF :: fetched 4 new logs [12-08-2022 08:38:01]29536: WAF :: fetched 1 new logs [12-08-2022 08:39:01]32159: WAF :: fetched 1 new logs [12-08-2022 08:40:02]2424: WAF :: fetched 2 new logs [12-08-2022 08:41:01]5112: WAF :: fetched 4 new logs [12-08-2022 08:41:01]5112: Checking for user cron vulnerabilities [12-08-2022 08:42:02]7699: WAF :: fetched 2 new logs [12-08-2022 08:43:02]10335: WAF :: fetched 3 new logs [12-08-2022 08:44:01]12898: Checking ditributed CMS bruteforce attacks [12-08-2022 08:44:01]12898: WAF :: fetched 1 new logs [12-08-2022 08:45:02]15497: WAF :: fetched 2 new logs [12-08-2022 08:46:01]18172: WAF :: fetched 3 new logs [12-08-2022 08:48:01]23396: WAF :: fetched 2 new logs [12-08-2022 08:51:01]31252: WAF :: fetched 3 new logs [12-08-2022 08:52:01]1502: WAF :: fetched 2 new logs [12-08-2022 08:58:02]17495: WAF :: fetched 1 new logs [12-08-2022 08:59:01]20182: WAF :: fetched 18 new logs [12-08-2022 09:02:01]28218: WAF :: fetched 2 new logs [12-08-2022 09:03:01]30959: WAF :: fetched 4 new logs [12-08-2022 09:04:01]1132: WAF :: fetched 18 new logs [12-08-2022 09:05:01]3893: WAF :: fetched 45 new logs [12-08-2022 09:06:01]6565: WAF :: fetched 12 new logs [12-08-2022 09:07:01]9198: WAF :: fetched 2 new logs [12-08-2022 09:08:01]11896: WAF :: fetched 30 new logs [12-08-2022 09:09:01]14588: WAF :: fetched 2 new logs [12-08-2022 09:10:02]17176: WAF :: fetched 6 new logs [12-08-2022 09:12:02]22509: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660306322 [12-08-2022 09:12:02]22509: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-08-2022 09:12:04]22509: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-08-2022 09:12:04]22509: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220812/20220812-0912/20220812-091202-YvZDki-6D2_xdm1K4wg89gAAAB0 [12-08-2022 09:12:04]22509: WAF :: No suitable log file found. Using SQLite.. [12-08-2022 09:13:01]25170: WAF :: fetched 1 new logs [12-08-2022 09:14:01]27774: WAF :: fetched 1 new logs [12-08-2022 09:19:02]8696: WAF :: fetched 1 new logs [12-08-2022 09:20:01]11292: WAF :: fetched 1 new logs [12-08-2022 09:21:02]13978: WAF :: fetched 5 new logs [12-08-2022 09:22:02]16546: WAF :: fetched 1 new logs [12-08-2022 09:23:01]19281: WAF :: fetched 1 new logs [12-08-2022 09:27:01]29818: WAF :: fetched 3 new logs [12-08-2022 09:28:01]32486: WAF :: fetched 3 new logs [12-08-2022 09:32:02]10737: WAF :: fetched 1 new logs [12-08-2022 09:38:02]26731: WAF :: fetched 3 new logs [12-08-2022 09:40:02]32029: WAF :: fetched 3 new logs [12-08-2022 09:41:01]2382: Checking for user cron vulnerabilities [12-08-2022 09:43:02]7836: WAF :: fetched 1 new logs [12-08-2022 09:44:01]10446: Checking ditributed CMS bruteforce attacks [12-08-2022 09:47:01]18465: WAF :: fetched 73 new logs [12-08-2022 09:49:01]23970: WAF :: fetched 2 new logs [12-08-2022 09:50:02]26700: WAF :: fetched 4 new logs [12-08-2022 09:51:01]29531: WAF :: fetched 7 new logs [12-08-2022 09:52:01]32299: WAF :: fetched 1 new logs [12-08-2022 09:53:02]2827: WAF :: fetched 1 new logs [12-08-2022 09:54:01]5520: WAF :: fetched 2 new logs [12-08-2022 09:55:02]8303: WAF :: fetched 1 new logs [12-08-2022 09:56:01]10934: WAF :: fetched 4 new logs [12-08-2022 09:57:02]13634: WAF :: fetched 1 new logs [12-08-2022 09:58:01]16322: WAF :: fetched 3 new logs [12-08-2022 09:59:02]18950: WAF :: fetched 1 new logs [12-08-2022 10:05:02]3085: WAF :: fetched 1 new logs [12-08-2022 10:06:01]5893: WAF :: fetched 1 new logs [12-08-2022 10:10:01]16900: WAF :: fetched 5 new logs [12-08-2022 10:11:02]19850: WAF :: fetched 1 new logs [12-08-2022 10:12:01]22654: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660309921 [12-08-2022 10:12:01]22654: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-08-2022 10:12:03]22654: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-08-2022 10:12:04]22654: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220812/20220812-1012/20220812-101201-YvZRock4GsL0L7GtlTqxQgAAACY [12-08-2022 10:12:04]22654: WAF :: No suitable log file found. Using SQLite.. [12-08-2022 10:12:04]22654: WAF :: fetched 3 new logs [12-08-2022 10:13:02]25522: WAF :: fetched 1 new logs [12-08-2022 10:14:01]28229: WAF :: fetched 1 new logs [12-08-2022 10:15:02]30912: WAF :: fetched 2 new logs [12-08-2022 10:16:01]1348: WAF :: fetched 1 new logs [12-08-2022 10:17:01]4261: WAF :: fetched 4 new logs [12-08-2022 10:18:02]6982: WAF :: fetched 2 new logs [12-08-2022 10:19:01]9631: WAF :: fetched 5 new logs [12-08-2022 10:21:01]15146: WAF :: fetched 5 new logs [12-08-2022 10:22:01]17890: WAF :: fetched 2 new logs [12-08-2022 10:23:02]20623: WAF :: fetched 5 new logs [12-08-2022 10:25:02]26162: WAF :: fetched 2 new logs [12-08-2022 10:26:01]28956: WAF :: fetched 2 new logs [12-08-2022 10:28:01]2039: WAF :: fetched 2 new logs [12-08-2022 10:30:01]7538: WAF :: fetched 3 new logs [12-08-2022 10:32:01]12922: WAF :: fetched 6 new logs [12-08-2022 10:34:01]18177: WAF :: fetched 3 new logs [12-08-2022 10:37:02]26206: WAF :: fetched 1 new logs [12-08-2022 10:38:01]28811: WAF :: fetched 1 new logs [12-08-2022 10:41:02]4815: WAF :: fetched 5 new logs [12-08-2022 10:41:02]4815: Checking for user cron vulnerabilities [12-08-2022 10:44:01]12967: Checking ditributed CMS bruteforce attacks [12-08-2022 10:44:01]12967: WAF :: fetched 1 new logs [12-08-2022 10:45:01]15745: WAF :: fetched 1 new logs [12-08-2022 10:46:01]18484: WAF :: fetched 1 new logs [12-08-2022 10:47:01]21249: WAF :: fetched 2 new logs [12-08-2022 10:49:01]26742: WAF :: fetched 1 new logs [12-08-2022 10:50:01]29434: WAF :: fetched 1 new logs [12-08-2022 10:51:01]32304: WAF :: fetched 7 new logs [12-08-2022 10:52:01]2801: WAF :: fetched 6 new logs [12-08-2022 10:53:01]5598: WAF :: fetched 4 new logs [12-08-2022 10:54:01]8442: WAF :: fetched 7 new logs [12-08-2022 10:55:01]11202: WAF :: fetched 1 new logs [12-08-2022 10:56:01]14062: WAF :: fetched 2 new logs [12-08-2022 11:00:01]24870: WAF :: fetched 1 new logs [12-08-2022 11:01:02]28109: WAF :: fetched 1 new logs [12-08-2022 11:07:02]12565: WAF :: fetched 1 new logs [12-08-2022 11:07:48]12722: Performed RBL check for 23.111.136.34. [12-08-2022 11:08:01]15346: WAF :: fetched 1 new logs [12-08-2022 11:09:02]18300: WAF :: fetched 1 new logs [12-08-2022 11:10:01]21098: WAF :: fetched 3 new logs [12-08-2022 11:12:01]26610: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660313521 [12-08-2022 11:12:01]26610: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-08-2022 11:12:03]26610: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-08-2022 11:12:04]26610: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220812/20220812-1112/20220812-111201-YvZfsV2JB8QGL7CNvq0wYQAAADM [12-08-2022 11:12:04]26610: WAF :: Latest test rule located in log file /etc/apache2/logs/modsec_audit/ [12-08-2022 11:12:04]26610: WAF :: fetched 1 new logs [12-08-2022 11:13:02]29370: WAF :: fetched 1 new logs [12-08-2022 11:14:01]32112: WAF :: fetched 2 new logs [12-08-2022 11:15:02]2478: WAF :: fetched 1 new logs [12-08-2022 11:19:02]13224: WAF :: fetched 1 new logs [12-08-2022 11:20:02]15978: WAF :: fetched 1 new logs [12-08-2022 11:21:02]18761: WAF :: fetched 2 new logs [12-08-2022 11:23:01]24172: WAF :: fetched 1 new logs [12-08-2022 11:24:01]26979: WAF :: fetched 5 new logs [12-08-2022 11:25:02]29633: WAF :: fetched 2 new logs [12-08-2022 11:28:01]5486: WAF :: fetched 1 new logs [12-08-2022 11:30:02]10937: WAF :: fetched 2 new logs [12-08-2022 11:32:02]16359: WAF :: fetched 1 new logs [12-08-2022 11:33:02]19015: WAF :: fetched 1 new logs [12-08-2022 11:34:01]21795: WAF :: fetched 6 new logs [12-08-2022 11:35:02]24584: WAF :: fetched 4 new logs [12-08-2022 11:36:01]27327: WAF :: fetched 4 new logs [12-08-2022 11:38:01]305: WAF :: fetched 1 new logs [12-08-2022 11:39:02]3326: WAF :: fetched 10 new logs [12-08-2022 11:40:02]6133: WAF :: fetched 2 new logs [12-08-2022 11:41:02]8959: Checking for user cron vulnerabilities [12-08-2022 11:42:02]11680: WAF :: fetched 1 new logs [12-08-2022 11:43:02]14493: WAF :: fetched 4 new logs [12-08-2022 11:44:01]17281: Checking ditributed CMS bruteforce attacks [12-08-2022 11:44:02]17281: WAF :: fetched 6 new logs [12-08-2022 11:45:02]20033: WAF :: fetched 87 new logs [12-08-2022 11:46:02]22777: WAF :: fetched 103 new logs [12-08-2022 11:47:02]25512: WAF :: fetched 52 new logs [12-08-2022 11:48:02]28229: WAF :: fetched 1 new logs [12-08-2022 11:49:02]31001: WAF :: fetched 2 new logs [12-08-2022 11:50:02]1596: WAF :: fetched 3 new logs [12-08-2022 11:51:02]4460: WAF :: fetched 2 new logs [12-08-2022 11:53:02]9716: WAF :: fetched 1 new logs [12-08-2022 11:54:01]12443: WAF :: fetched 5 new logs [12-08-2022 11:57:02]20503: WAF :: fetched 1 new logs [12-08-2022 11:58:02]23114: WAF :: fetched 2 new logs [12-08-2022 11:59:02]25812: WAF :: fetched 1 new logs [12-08-2022 12:00:02]28153: WAF :: fetched 1 new logs [12-08-2022 12:01:02]31284: WAF :: fetched 2 new logs [12-08-2022 12:04:01]6948: WAF :: fetched 2 new logs [12-08-2022 12:06:01]12320: WAF :: fetched 3 new logs [12-08-2022 12:07:02]14996: WAF :: fetched 5 new logs [12-08-2022 12:10:01]22897: WAF :: fetched 2 new logs [12-08-2022 12:11:02]25701: WAF :: fetched 3 new logs [12-08-2022 12:12:01]28311: WAF :: Sending test attack to http://23.111.136.34/?malware_expert_test_rule&t=1660317121 [12-08-2022 12:12:01]28311: WAF :: Test attack to http://23.111.136.34/?malware_expert_test_rule was blocked with HTTP #406 [12-08-2022 12:12:03]28311: WAF :: Test entry found in /etc/apache2/logs/modsec_audit.log [12-08-2022 12:12:04]28311: WAF :: Test entry found in /etc/apache2/logs/modsec_audit/nobody/20220812/20220812-1212/20220812-121201-YvZtwdjMWOgfUJJUF2zr9QAAACU [12-08-2022 12:12:04]28311: WAF :: No suitable log file found. Using SQLite.. [12-08-2022 12:12:04]28311: WAF :: fetched 301 new logs [12-08-2022 12:13:02]31081: WAF :: fetched 61 new logs [12-08-2022 12:14:01]1356: WAF :: fetched 80 new logs [12-08-2022 12:15:02]4137: WAF :: fetched 84 new logs [12-08-2022 12:19:02]15941: WAF :: fetched 2 new logs [12-08-2022 12:20:01]18616: WAF :: fetched 1 new logs [12-08-2022 12:21:02]21375: WAF :: fetched 36 new logs [12-08-2022 12:22:01]23993: WAF :: fetched 55 new logs [12-08-2022 12:23:02]26614: WAF :: fetched 38 new logs [12-08-2022 12:26:01]2489: WAF :: fetched 1 new logs [12-08-2022 12:27:01]5231: WAF :: fetched 3 new logs [12-08-2022 12:29:01]10626: WAF :: fetched 3 new logs [12-08-2022 12:31:01]16153: WAF :: fetched 2 new logs [12-08-2022 12:32:01]18854: WAF :: fetched 2 new logs [12-08-2022 12:33:01]21550: WAF :: fetched 1 new logs [12-08-2022 12:35:01]26945: WAF :: fetched 4 new logs [12-08-2022 12:36:01]29649: WAF :: fetched 1 new logs [12-08-2022 12:38:01]2624: WAF :: fetched 3 new logs [12-08-2022 12:39:01]5397: WAF :: fetched 2 new logs [12-08-2022 12:41:01]10808: WAF :: fetched 1 new logs [12-08-2022 12:41:01]10808: Checking for user cron vulnerabilities [12-08-2022 12:42:02]13529: WAF :: fetched 2 new logs [12-08-2022 12:44:01]19003: Checking ditributed CMS bruteforce attacks [12-08-2022 12:45:02]: Checking for software updates