Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[TueNov1011:33:16.0214162026][security2:error][pid5445:tid5592][client47.243.225.10:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024 ...
show more[TueNov1011:33:16.0214162026][security2:error][pid5445:tid5592][client47.243.225.10:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"avvnicolaurbani.ch\"][uri\"/xmlrpc.php\"][unique_id\"avLy7GUAEOKTLH-uOEvJbwAAAE8\"]
show less
Web app attack: 2 requests for known vulnerable paths (.env, xmlrpc.php, web shells, config backups) within one hour. Reported automatically by BotZoom.
[MonNov0908:28:39.0223192026][security2:error][pid1000816:tid1000891][client47.243.225.10:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\" ...
show more[MonNov0908:28:39.0223192026][security2:error][pid1000816:tid1000891][client47.243.225.10:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"special-home.ch\"][uri\"/xmlrpc.php\"][unique_id\"avF2J9f2u2TiKh2R2-9gVwAAAIk\"]
show less