90.112.112.108

WEB attack

90.112.112.108 - - [26/Oct/2026:06:07:10 +0300] "GET /property_lir.php?id=be.securitastechnology&tab=legacy&lang=pl HTTP/1.1" 404 218 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/ ... show more 90.112.112.108 - - [26/Oct/2026:06:07:10 +0300] "GET /property_lir.php?id=be.securitastechnology&tab=legacy&lang=pl HTTP/1.1" 404 218 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" client_port=49118 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1792984030.637 show less

SQL Injection Attack Detected via libinjection. detected SQLi using libinjection with fingerprint 's&f(1' (942100-133)

| Multiple SQL injection attempts from same source ip.(multiple servers)

[Tue Sep 01 08:47:27.406171 2026] [security2:error] [pid 8628:tid 8635] [client 90.112.112.108:60874] [client 90.112.112.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter|create|drop)[[:space:]]*(?:column|database|pr ... show more [Tue Sep 01 08:47:27.406171 2026] [security2:error] [pid 8628:tid 8635] [client 90.112.112.108:60874] [client 90.112.112.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter|create|drop)[[:space:]]*(?:column|database|procedure|table) |delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.*[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|remark)tes ..." at ARGS:sourceid. [file "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"] [line "318"] [id "340144"] [rev "35"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Generic SQL injection protection 2"] [data "get /subscribe/show_product.php?sourceid=%29%2f**%2fand%2f**%2f%28116198647%3d116198647%2f**%2funion%2f**%2fall%2f**%2fselect%2f**%2f%27fpmchsupqtiufzetleznuugcohayctke%27%2cnull--%2f**%2fneu82d&db_type=product&itemid=62359 http/1.1"] [severity "CRITICAL"] [hostname "catalog.onesourceofnj.com"] [uri "/subscribe/show_product.php"] [unique_id "apbJXxy1TkPn_qM1r show less

[SQL UNION SELECT] f2b match %{+Q}r for ^.*haproxy\[[0-9]+\]: <HOST>:.* (GET |POST ).*\?.*(UNION%20|union%20|SELECT%20|select%20).* HTTP/1.1$

Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_12_0) AppleWebKit/534.1 (KHTML; like Gecko) Chrome/13.0.874.0 Safari/534.1). Mass-scanning WordPress plugin. Coordinated large-scale bot attack.