[SatSep1922:58:44.1834482026][security2:error][pid1232804:tid1232901][client89.19.35.121:0]ModSecuri ...
show more[SatSep1922:58:44.1834482026][security2:error][pid1232804:tid1232901][client89.19.35.121:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"prstartup.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq73hN1HHFEB2jYSyDbf8AAAAks\"]
show less
[SatSep1922:57:39.1541532026][security2:error][pid1232806:tid1232926][client62.60.130.117:0]ModSecur ...
show more[SatSep1922:57:39.1541532026][security2:error][pid1232806:tid1232926][client62.60.130.117:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"osteriabreno.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"aq73Q2Zr8KAiI6T6qnOJTgAAAAo\"]
show less
[SatSep1922:57:25.1365782026][security2:error][pid3619034:tid3619110][client185.102.113.114:0]ModSec ...
show more[SatSep1922:57:25.1365782026][security2:error][pid3619034:tid3619110][client185.102.113.114:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"leonitraslochi.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq73Nb5_uBDc2vVr364FAgAAAJA\"]
show less
[SatSep1922:56:51.7323972026][security2:error][pid3619036:tid3619136][client109.201.152.181:0]ModSec ...
show more[SatSep1922:56:51.7323972026][security2:error][pid3619036:tid3619136][client109.201.152.181:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"server-privato.ch\"][uri\"/\"][unique_id\"aq73EztMlUIvOKgbD70cRAAAAUU\"]
show less
[SatSep1922:56:47.5868792026][security2:error][pid1232802:tid1232867][client170.168.241.76:0]ModSecu ...
show more[SatSep1922:56:47.5868792026][security2:error][pid1232802:tid1232867][client170.168.241.76:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"prstartup.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq73Dwntf5YWqk4Sv6zvmAAAAgQ\"]
show less
[SatSep1922:54:56.1234282026][security2:error][pid3616217:tid3616306][client170.168.243.123:0]ModSec ...
show more[SatSep1922:54:56.1234282026][security2:error][pid3616217:tid3616306][client170.168.243.123:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"leonitraslochi.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq72oOv8l4IldIu-xT9V9gAAAMA\"]
show less
[SatSep1922:54:36.1854062026][security2:error][pid1229647:tid1229711][client94.250.67.61:0]ModSecuri ...
show more[SatSep1922:54:36.1854062026][security2:error][pid1229647:tid1229711][client94.250.67.61:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ipv6.gmint.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq72jM8XzXnafZ7H_qEc4AAAAgA\"]
show less
[SatSep1922:54:42.8670092026][security2:error][pid1229645:tid1229685][client193.202.81.59:0]ModSecur ...
show more[SatSep1922:54:42.8670092026][security2:error][pid1229645:tid1229685][client193.202.81.59:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"prstartup.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq72kiS7QNC6EFZt2RNZaQAAAcE\"]
show less
[SatSep1922:53:39.2490242026][security2:error][pid3616218:tid3616353][client78.108.121.20:0]ModSecur ...
show more[SatSep1922:53:39.2490242026][security2:error][pid3616218:tid3616353][client78.108.121.20:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\<\?/\?\?script\|\<\?\(\?:i\?frame\?src\|a\?href\)\?=\?\(\?:ogg\|tls\|ssl\|gopher\|zlib\|\(ht\|f\)tps\?\)\\\\\\\\:/\|document\\\\\\\\.write\?\\\\\\\\\(\|\(\?:\<\|\<\?/\)\?\(\?:\(\?:java\|vb\)script\|applet\|activex\|chrome\|qx\?ss\|embed\)\|\<\?/\?i\?frame\\\\\\\\b\|\<\?imgsrc\?=\|\<\?basehref\?=\)\"atARGS:messaggio.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1065\"][id\"340148\"][rev\"162\"][msg\"Atomicorp.comWAFRules:PotentialCrossSiteScriptingAttack\"][data\"\<ahref=https:/\"][severity\"CRITICAL\"][hostname\"www.giuristifriburgo.ch\"][uri\"/contatti-e-iscrizioni/\"][unique_id\"aq72UyF9f5t0qvHsJE2BlwAAAVc\"]\,referer:https://www.giuristifriburgo.ch/contatti-e-iscrizioni/
show less
[SatSep1922:52:09.3691052026][security2:error][pid3616217:tid3616309][client193.151.191.156:0]ModSec ...
show more[SatSep1922:52:09.3691052026][security2:error][pid3616217:tid3616309][client193.151.191.156:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"leonitraslochi.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq71-ev8l4IldIu-xT9VwgAAAMI\"]
show less
[SatSep1922:50:24.3699372026][security2:error][pid3616218:tid3616333][client175.107.221.238:0]ModSec ...
show more[SatSep1922:50:24.3699372026][security2:error][pid3616218:tid3616333][client175.107.221.238:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mdd-network.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq71kCF9f5t0qvHsJE2BIgAAAUw\"]
show less
[SatSep1922:49:04.2693042026][security2:error][pid1208411:tid1208586][client62.60.130.235:0]ModSecur ...
show more[SatSep1922:49:04.2693042026][security2:error][pid1208411:tid1208586][client62.60.130.235:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.agilityrossoblu.ch\"][uri\"/wp-login.php\"][unique_id\"aq71QN3VQNPReAF4Y19CrgAAAhE\"]
show less
[SatSep1922:44:06.0674212026][security2:error][pid1202389:tid1202497][client109.75.50.98:0]ModSecuri ...
show more[SatSep1922:44:06.0674212026][security2:error][pid1202389:tid1202497][client109.75.50.98:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"maxay.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq70Fos0IqIedXcSz3KRWgAAAkQ\"]
show less
[SatSep1922:42:56.6759682026][security2:error][pid1202389:tid1202531][client27.79.171.130:0]ModSecur ...
show more[SatSep1922:42:56.6759682026][security2:error][pid1202389:tid1202531][client27.79.171.130:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"maurokorangraf.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq7z0Is0IqIedXcSz3KRSgAAAlc\"]
show less
[SatSep1922:39:22.7993002026][security2:error][pid1197577:tid1197640][client216.26.224.2:0]ModSecuri ...
show more[SatSep1922:39:22.7993002026][security2:error][pid1197577:tid1197640][client216.26.224.2:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"noleggi.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq7y-p1Ghtj6Nk4j_lZ8UgAAAgI\"]
show less
[SatSep1922:39:12.3579842026][security2:error][pid1197581:tid1197709][client2602:80d:1007::3d:0]ModS ...
show more[SatSep1922:39:12.3579842026][security2:error][pid1197581:tid1197709][client2602:80d:1007::3d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"gualandi.mood4apps.com\"][uri\"/\"][unique_id\"aq7y8F1sKFYsHk1bt0GggQAAABE\"]
show less
[SatSep1922:38:54.1002182026][security2:error][pid1197573:tid1197607][client2400:adcc:1b6:ae00:4cc1: ...
show more[SatSep1922:38:54.1002182026][security2:error][pid1197573:tid1197607][client2400:adcc:1b6:ae00:4cc1:e18d:be0b:9013:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"titraslochi.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq7y3vP0v0rD9spRWSmLSQAAAVc\"]
show less
[SatSep1922:38:09.1592482026][security2:error][pid1197581:tid1197704][client103.189.195.18:0]ModSecu ...
show more[SatSep1922:38:09.1592482026][security2:error][pid1197581:tid1197704][client103.189.195.18:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"massimilianoparquet.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq7ysV1sKFYsHk1bt0GgfQAAAAw\"]
show less
[SatSep1922:37:27.4503732026][security2:error][pid1197581:tid1197709][client35.190.216.152:0]ModSecu ...
show more[SatSep1922:37:27.4503732026][security2:error][pid1197581:tid1197709][client35.190.216.152:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"www.biling.maurokorangraf.ch\"][uri\"/\"][unique_id\"aq7yh11sKFYsHk1bt0GgagAAABE\"]
show less
[SatSep1922:37:15.9958352026][security2:error][pid3588483:tid3588600][client13.200.6.88:0]ModSecurit ...
show more[SatSep1922:37:15.9958352026][security2:error][pid3588483:tid3588600][client13.200.6.88:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"walter-worndli.ch.xn--walter-wrndli-pmb.ch\"][uri\"/.git/config\"][unique_id\"aq7yew4LjwqqbVBwkfz8mgAAAJI\"]
show less
[SatSep1922:37:02.7424382026][security2:error][pid3588482:tid3588531][client70.31.215.141:0]ModSecur ...
show more[SatSep1922:37:02.7424382026][security2:error][pid3588482:tid3588531][client70.31.215.141:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"marcionetti.es\"][uri\"/xmlrpc.php\"][unique_id\"aq7ybut33wix3UGY9Wb8WAAAAE4\"]
show less
[SatSep1922:36:46.1580272026][security2:error][pid1197575:tid1197617][client2a00:23c7:728d:5301:f157 ...
show more[SatSep1922:36:46.1580272026][security2:error][pid1197575:tid1197617][client2a00:23c7:728d:5301:f157:9543:1af3:aaa6:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"martinairsagl.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq7yXgep74ED4xxvG4OL3AAAAcY\"]
show less
[SatSep1922:35:36.5879852026][security2:error][pid3588485:tid3588574][client66.132.195.121:0]ModSecu ...
show more[SatSep1922:35:36.5879852026][security2:error][pid3588485:tid3588574][client66.132.195.121:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"hosting-dominio.com\"][uri\"/\"][unique_id\"aq7yGOmtbGAO4HysJeSkXQAAAQg\"]
show less
[SatSep1922:34:58.8526502026][security2:error][pid1194646:tid1194755][client123.253.93.32:0]ModSecur ...
show more[SatSep1922:34:58.8526502026][security2:error][pid1194646:tid1194755][client123.253.93.32:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"manuclean.ch\"][uri\"/xmlrpc.php\"][unique_id\"aq7x8lVKnIUaU9hWTaddWgAAAAU\"]
show less
[SatSep1922:34:15.0314922026][security2:error][pid3585717:tid3585839][client66.132.195.106:0]ModSecu ...
show more[SatSep1922:34:15.0314922026][security2:error][pid3585717:tid3585839][client66.132.195.106:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.hosting-dominio.com\"][uri\"/\"][unique_id\"aq7xx6H9wOHVeBRKUt4PYAAAARE\"]
show less
HackingWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.