[FriSep1819:47:12.7084912026][security2:error][pid3928467:tid3928578][client34.78.2.103:0]ModSecurit ...
show more[FriSep1819:47:12.7084912026][security2:error][pid3928467:tid3928578][client34.78.2.103:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"ggarchitetti.ch\"][uri\"/\"][unique_id\"aq15IFny1FJIcEHpC18iXQAAAMs\"]
show less
[FriSep1819:47:12.6381462026][security2:error][pid3928463:tid3928525][client34.38.254.144:0]ModSecur ...
show more[FriSep1819:47:12.6381462026][security2:error][pid3928463:tid3928525][client34.38.254.144:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"ggarchitetti.ch\"][uri\"/\"][unique_id\"aq15IOsWiVWhhAIzdiUdvQAAAFM\"]
show less
[FriSep1819:46:32.9455472026][security2:error][pid3928467:tid3928588][client34.166.190.195:0]ModSecu ...
show more[FriSep1819:46:32.9455472026][security2:error][pid3928467:tid3928588][client34.166.190.195:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcontacts.mjgold.ch\"][uri\"/.env.bak\"][unique_id\"aq14-Fny1FJIcEHpC18iTgAAANA\"]
show less
[FriSep1819:45:50.2605832026][security2:error][pid2003727:tid2003862][client34.65.170.142:0]ModSecur ...
show more[FriSep1819:45:50.2605832026][security2:error][pid2003727:tid2003862][client34.65.170.142:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"sarand.ch.81-17-25-250.cpanel.site\"][uri\"/.git/config\"][unique_id\"aq14zlmCjD6EE9Fo-foaHQAAARY\"]
show less
[FriSep1819:45:28.1483042026][security2:error][pid3928469:tid3928597][client36.73.33.102:0]ModSecuri ...
show more[FriSep1819:45:28.1483042026][security2:error][pid3928469:tid3928597][client36.73.33.102:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.mgevents.ch\"][uri\"/\"][unique_id\"aq14uMxuumjBX0CKsoKTkAAAAQo\"]
show less
[FriSep1819:45:18.7860712026][security2:error][pid3928464:tid3928535][client88.230.249.176:0]ModSecu ...
show more[FriSep1819:45:18.7860712026][security2:error][pid3928464:tid3928535][client88.230.249.176:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"mgevents.ch\"][uri\"/\"][unique_id\"aq14ruqZHpO0jdZ9IjQbBAAAAIE\"]
show less
[FriSep1819:45:14.6988202026][security2:error][pid3928469:tid3928592][client41.109.43.255:0]ModSecur ...
show more[FriSep1819:45:14.6988202026][security2:error][pid3928469:tid3928592][client41.109.43.255:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.mgevents.ch\"][uri\"/\"][unique_id\"aq14qsxuumjBX0CKsoKTjQAAAQc\"]
show less
[FriSep1819:44:26.0640232026][security2:error][pid3925291:tid3925403][client109.168.93.180:0]ModSecu ...
show more[FriSep1819:44:26.0640232026][security2:error][pid3925291:tid3925403][client109.168.93.180:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"enricoalbertini.com\"][uri\"/\"][unique_id\"aq14emxJx1ge-kFq0HXh_AAAAQc\"]
show less
[FriSep1819:43:44.3545252026][security2:error][pid3925291:tid3925418][client43.157.82.252:0]ModSecur ...
show more[FriSep1819:43:44.3545252026][security2:error][pid3925291:tid3925418][client43.157.82.252:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq14UGxJx1ge-kFq0HXh8wAAARA\"]
show less
[FriSep1819:42:21.2836512026][security2:error][pid3925284:tid3925337][client34.32.8.190:0]ModSecurit ...
show more[FriSep1819:42:21.2836512026][security2:error][pid3925284:tid3925337][client34.32.8.190:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"morandi-trasporti.ch\"][uri\"/\"][unique_id\"aq13_YZVUrJFoHrJlCrtWAAAAFA\"]
show less
[FriSep1819:41:50.0359112026][security2:error][pid3925284:tid3925338][client170.101.96.53:0]ModSecur ...
show more[FriSep1819:41:50.0359112026][security2:error][pid3925284:tid3925338][client170.101.96.53:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"thilyatecnologie.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"aq133oZVUrJFoHrJlCrtPQAAAFE\"]
show less
[FriSep1819:41:44.4491352026][security2:error][pid3925291:tid3925397][client34.154.189.11:0]ModSecur ...
show more[FriSep1819:41:44.4491352026][security2:error][pid3925291:tid3925397][client34.154.189.11:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"autoconfig.creazione-siti-web-ticino.ch\"][uri\"/\"][unique_id\"aq132GxJx1ge-kFq0HXhzwAAAQQ\"
show less
[FriSep1819:41:28.4588182026][security2:error][pid3925283:tid3925301][client47.195.67.75:0]ModSecuri ...
show more[FriSep1819:41:28.4588182026][security2:error][pid3925283:tid3925301][client47.195.67.75:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"serban.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq13yE8ILBnnrqId7Xij6gAAAAc\"]
show less
[FriSep1819:40:33.6095172026][security2:error][pid2000821:tid2000903][client13.218.132.250:0]ModSecu ...
show more[FriSep1819:40:33.6095172026][security2:error][pid2000821:tid2000903][client13.218.132.250:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.hostingedominio.com\"][uri\"/.git/config\"][unique_id\"aq13kZMvrXgyzjAiH1oRqAAAAMA\"]
show less
[FriSep1819:39:48.7127222026][security2:error][pid3920526:tid3920618][client209.50.162.123:0]ModSecu ...
show more[FriSep1819:39:48.7127222026][security2:error][pid3920526:tid3920618][client209.50.162.123:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"worldgoldfundltd.com\"][uri\"/xmlrpc.php\"][unique_id\"aq13ZG6p3q-vo4F-a_D85QAAAMU\"]
show less
[FriSep1819:38:22.0671382026][security2:error][pid1994806:tid1994940][client44.205.19.98:0]ModSecuri ...
show more[FriSep1819:38:22.0671382026][security2:error][pid1994806:tid1994940][client44.205.19.98:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"ftp.hostingedominio.com\"][uri\"/.git/config\"][unique_id\"aq13DoMshYYt5_hwcppn6AAAARU\"]
show less
[FriSep1819:35:42.1540712026][security2:error][pid1994806:tid1994932][client104.219.251.64:0]ModSecu ...
show more[FriSep1819:35:42.1540712026][security2:error][pid1994806:tid1994932][client104.219.251.64:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"allegrafamiglia.ch\"][uri\"/wp-login.php\"][unique_id\"aq12boMshYYt5_hwcppnyAAAAQ0\"]\,referer:https://allegrafamiglia.ch/wp-login.php
show less
[FriSep1819:33:20.9001072026][security2:error][pid1992001:tid1992072][client91.244.197.105:0]ModSecu ...
show more[FriSep1819:33:20.9001072026][security2:error][pid1992001:tid1992072][client91.244.197.105:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"whatsdecor.ch\"][uri\"/wp-login.php\"][unique_id\"aq114NgsUDnWAU01nJYlJwAAAEM\"]\,referer:https://whatsdecor.ch/wp-login.php
show less
[FriSep1819:32:56.1609782026][security2:error][pid1992005:tid1992145][client3.236.219.67:0]ModSecuri ...
show more[FriSep1819:32:56.1609782026][security2:error][pid1992005:tid1992145][client3.236.219.67:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"mail.hostingedominio.com\"][uri\"/.git/config\"][unique_id\"aq11yBXK3YXP5r7kEM7xrgAAAQg\"]
show less
[FriSep1819:31:51.4666972026][security2:error][pid1992004:tid1992138][client69.6.214.192:0]ModSecuri ...
show more[FriSep1819:31:51.4666972026][security2:error][pid1992004:tid1992138][client69.6.214.192:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"r102.ch\"][uri\"/wp-login.php\"][unique_id\"aq11h-MV11geXgPRbAd2hQAAAMY\"]\,referer:https://r102.ch/wp-login.php
show less
[FriSep1819:31:13.9037752026][security2:error][pid3917744:tid3917815][client23.229.22.188:0]ModSecur ...
show more[FriSep1819:31:13.9037752026][security2:error][pid3917744:tid3917815][client23.229.22.188:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"sisuconsulting.net\"][uri\"/xmlrpc.php\"][unique_id\"aq11YYXS3LPNC-7xHN8H-wAAAIo\"]\,referer:https://sisuconsulting.net/
show less
[FriSep1819:30:24.5708202026][security2:error][pid1992003:tid1992107][client66.29.148.124:0]ModSecur ...
show more[FriSep1819:30:24.5708202026][security2:error][pid1992003:tid1992107][client66.29.148.124:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"cadvending.ch\"][uri\"/wp-login.php\"][unique_id\"aq11MG2JAH_PvngYw3uBZAAAAIc\"]\,referer:https://cadvending.ch/wp-login.php
show less
[FriSep1819:30:19.1332382026][security2:error][pid1991999:tid1992045][client119.93.171.138:0]ModSecu ...
show more[FriSep1819:30:19.1332382026][security2:error][pid1991999:tid1992045][client119.93.171.138:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"janus-advisory.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq11K1I4-w5ZZ4awBIbVawAAAAo\"]
show less
[FriSep1819:26:15.9404682026][security2:error][pid1988718:tid1988759][client2602:80d:1007::2e:0]ModS ...
show more[FriSep1819:26:15.9404682026][security2:error][pid1988718:tid1988759][client2602:80d:1007::2e:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"hosting-dominio.ch.hosting-domini.ch\"][uri\"/\"][unique_id\"aq10NxAbyxFzcw67XUDBRwAAAIY\"]
show less
[FriSep1819:25:18.1215932026][security2:error][pid3914375:tid3914418][client2602:80d:1007::63:0]ModS ...
show more[FriSep1819:25:18.1215932026][security2:error][pid3914375:tid3914418][client2602:80d:1007::63:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.traslocarealugano.ch\"][uri\"/\"][unique_id\"aq1z_oiU3dDsZDMsX0qi6gAAAQc\"]
show less
Port ScanBrute-ForceWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.