[SatSep1905:17:09.4445302026][security2:error][pid263077:tid263110][client18.209.111.74:0]ModSecurit ...
show more[SatSep1905:17:09.4445302026][security2:error][pid263077:tid263110][client18.209.111.74:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.newbeauty-pully.ch\"][uri\"/\"][unique_id\"aq3-tbpXEO5lLKWDHu3EsQAAABY\"]\,referer:http://www.silobreaker.com/
show less
[SatSep1905:13:17.4809802026][security2:error][pid259931:tid260045][client2409:40d4:160:7277:1931:42 ...
show more[SatSep1905:13:17.4809802026][security2:error][pid259931:tid260045][client2409:40d4:160:7277:1931:42f0:b97f:9680:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"sanierung-pilzen-schimmel-schweiz.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq39ze39-6zCRASkySDkJwAAANA\"]
show less
[SatSep1905:11:39.0714642026][security2:error][pid2624512:tid2624608][client216.126.237.47:0]ModSecu ...
show more[SatSep1905:11:39.0714642026][security2:error][pid2624512:tid2624608][client216.126.237.47:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"4-server.com\"][uri\"/.git/config\"][unique_id\"aq39azTMT4oNR0GiG01tDgAAAQY\"]
show less
[SatSep1905:10:38.6166932026][security2:error][pid259925:tid259946][client151.240.205.72:0]ModSecuri ...
show more[SatSep1905:10:38.6166932026][security2:error][pid259925:tid259946][client151.240.205.72:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq39LumOczjscHY3M366-wAAAAo\"]
show less
[SatSep1905:10:13.1904072026][security2:error][pid259927:tid259969][client122.177.240.235:0]ModSecur ...
show more[SatSep1905:10:13.1904072026][security2:error][pid259927:tid259969][client122.177.240.235:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"vg13.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq39FbEyKkjmruSc7HfZ-AAAAEU\"]
show less
[SatSep1905:10:05.1744572026][security2:error][pid259925:tid259941][client35.240.239.39:0]ModSecurit ...
show more[SatSep1905:10:05.1744572026][security2:error][pid259925:tid259941][client35.240.239.39:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"www.respiratrentino.it\"][uri\"/\"][unique_id\"aq39DemOczjscHY3M3669wAAAAU\"]
show less
[SatSep1905:09:54.1366082026][security2:error][pid2620492:tid2620590][client34.97.71.186:0]ModSecuri ...
show more[SatSep1905:09:54.1366082026][security2:error][pid2620492:tid2620590][client34.97.71.186:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.aid-web.ch.81-17-25-250.cpanel.site\"][uri\"/.git/config\"][unique_id\"aq39AgPVTQgwwu8OdnfJJQAAAQc\"]
show less
[SatSep1905:07:52.6867292026][security2:error][pid256827:tid256900][client2804:14c:4c6:42bd:e8cc:994 ...
show more[SatSep1905:07:52.6867292026][security2:error][pid256827:tid256900][client2804:14c:4c6:42bd:e8cc:9940:deba:6e9:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"rs-gaming.net\"][uri\"/xmlrpc.php\"][unique_id\"aq38iOu-I5wArpzbgj6CkQAAAIw\"]
show less
[SatSep1905:06:30.8532152026][security2:error][pid256827:tid256906][client2001:ee0:46f2:4250:bd1e:6c ...
show more[SatSep1905:06:30.8532152026][security2:error][pid256827:tid256906][client2001:ee0:46f2:4250:bd1e:6cf2:3908:b159:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"rvengineering.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq38Nuu-I5wArpzbgj6ChwAAAJI\"]
show less
[SatSep1905:06:06.0506792026][security2:error][pid256824:tid256878][client34.19.162.152:0]ModSecurit ...
show more[SatSep1905:06:06.0506792026][security2:error][pid256824:tid256878][client34.19.162.152:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"laketec.ch\"][uri\"/en/\"][unique_id\"aq38HhUBXzhc43ghlg23RAAAAFE\"]
show less
[SatSep1905:05:07.5924612026][security2:error][pid256824:tid256864][client65.21.113.248:0]ModSecurit ...
show more[SatSep1905:05:07.5924612026][security2:error][pid256824:tid256864][client65.21.113.248:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"admin-services.ch\"][uri\"/robots.txt\"][unique_id\"aq374xUBXzhc43ghlg23OQAAAEM\"]
show less
[SatSep1905:03:31.1226452026][security2:error][pid253670:tid253712][client94.21.153.161:0]ModSecurit ...
show more[SatSep1905:03:31.1226452026][security2:error][pid253670:tid253712][client94.21.153.161:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.artisteer-italia.org\"][uri\"/403.shtml\"][unique_id\"aq37g2LGzUOmJcqema13qgAAAEU\"]
show less
[SatSep1905:03:25.7881412026][security2:error][pid253674:tid253761][client2a01:367:d3d1:8563:296:17f ...
show more[SatSep1905:03:25.7881412026][security2:error][pid253674:tid253761][client2a01:367:d3d1:8563:296:17ff:fed1:98b:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"autoconfig.akastudio.ch\"][uri\"/api/.env\"][unique_id\"aq37fW5VAPll_Idx1sN7cwAAAMA\"]
show less
[SatSep1905:03:20.9823402026][security2:error][pid253670:tid253729][client2a01:36d:120:20f2::1004:0] ...
show more[SatSep1905:03:20.9823402026][security2:error][pid253670:tid253729][client2a01:36d:120:20f2::1004:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"artisteer-italia.org\"][uri\"/\"][unique_id\"aq37eGLGzUOmJcqema13jgAAAFY\"]
show less
[SatSep1905:03:07.7701492026][security2:error][pid253672:tid253748][client2a00:f29:111a:376e:c25:1ef ...
show more[SatSep1905:03:07.7701492026][security2:error][pid253672:tid253748][client2a00:f29:111a:376e:c25:1efb:50ac:4fe4:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"safeoncloud.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq37a0QDWJ9GJri4BXnPTgAAAI4\"]
show less
[SatSep1905:01:07.0058382026][security2:error][pid2617177:tid2617193][client143.44.164.51:0]ModSecur ...
show more[SatSep1905:01:07.0058382026][security2:error][pid2617177:tid2617193][client143.44.164.51:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"safertechnics.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq3683iXeuHjyfslxAjzuQAAAAc\"]
show less
[SatSep1904:56:22.1883862026][security2:error][pid2610792:tid2610869][client170.101.96.53:0]ModSecur ...
show more[SatSep1904:56:22.1883862026][security2:error][pid2610792:tid2610869][client170.101.96.53:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"ticino-host.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"aq351u31xgYqV-9pYTTywAAAAE4\"]
show less
[SatSep1904:55:42.0478602026][security2:error][pid248587:tid248672][client34.166.147.12:0]ModSecurit ...
show more[SatSep1904:55:42.0478602026][security2:error][pid248587:tid248672][client34.166.147.12:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcalendars.tpgs.ch\"][uri\"/.env.bak\"][unique_id\"aq35rmxA-KwRel7TdA1YwwAAAIE\"]
show less
[SatSep1904:53:47.3125422026][security2:error][pid245381:tid245420][client149.102.230.138:0]ModSecur ...
show more[SatSep1904:53:47.3125422026][security2:error][pid245381:tid245420][client149.102.230.138:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"casaplusticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq35O8cjRDDfIW9ygya9CAAAABg\"]
show less
[SatSep1904:51:23.7224952026][security2:error][pid2608071:tid2608166][client122.54.210.44:0]ModSecur ...
show more[SatSep1904:51:23.7224952026][security2:error][pid2608071:tid2608166][client122.54.210.44:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"rssolution.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq34q1m3OcpfuW_-mW34GAAAAEA\"]
show less
[SatSep1904:50:33.2431932026][security2:error][pid245383:tid245423][client85.214.50.153:0]ModSecurit ...
show more[SatSep1904:50:33.2431932026][security2:error][pid245383:tid245423][client85.214.50.153:0]ModSecurity:Accessdeniedwithcode429\(phase2\).OperatorGTmatched22atIP:login_counter.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"329\"][id\"990140\"][msg\"Toomanyloginattempts\"][hostname\"maxay.ch\"][uri\"/wp-login.php\"][unique_id\"aq34eeGlN98GynaBYVl_rgAAAEA\"]\,referer:https://maxay.ch/wp-login.php
show less
[SatSep1904:50:11.3468982026][security2:error][pid245381:tid245400][client109.118.85.164:0]ModSecuri ...
show more[SatSep1904:50:11.3468982026][security2:error][pid245381:tid245400][client109.118.85.164:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"gagspettacolo.ch\"][uri\"/403.shtml\"][unique_id\"aq34Y8cjRDDfIW9ygya8_QAAAAQ\"]
show less
[SatSep1904:50:09.3814032026][security2:error][pid245381:tid245398][client188.163.52.136:0]ModSecuri ...
show more[SatSep1904:50:09.3814032026][security2:error][pid245381:tid245398][client188.163.52.136:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"gagspettacolo.ch\"][uri\"/\"][unique_id\"aq34YccjRDDfIW9ygya8-wAAAAI\"]
show less
[SatSep1904:50:08.0135202026][security2:error][pid245386:tid245450][client200.31.12.182:0]ModSecurit ...
show more[SatSep1904:50:08.0135202026][security2:error][pid245386:tid245450][client200.31.12.182:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"gagspettacolo.ch\"][uri\"/\"][unique_id\"aq34YNsOiQsJYlXyNmldxAAAAIA\"]
show less
[SatSep1904:46:17.7420552026][security2:error][pid224697:tid224898][client2804:d41:e0b9:6400:5466:3d ...
show more[SatSep1904:46:17.7420552026][security2:error][pid224697:tid224898][client2804:d41:e0b9:6400:5466:3d78:68f4:61f9:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"robertselitrenny.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq33eTTMgGyC8xb6hrubowAAAEc\"]
show less
Port ScanBrute-ForceWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.