🇺🇸
71.167.147.211
26 Sep 2026
created two new accounts, placed items in cart and then tried to access 2 files not on our server an ...
show more
created two new accounts, placed items in cart and then tried to access 2 files not on our server and not linked to by any code in our system, so 2x: [Wed Sep 23 16:36:21.879566 2026] [proxy_fcgi:error] [pid 18498:tid 18579] [client 71.167.147.211:54568] AH01071: Got error 'Primary script unknown'
show less
Hacking
🇫🇷
37.65.162.167
23 Sep 2026
[Wed Sep 23 03:14:15.539142 2026] [security2:error] [pid 6652:tid 6688] [client 37.65.162.167:20774] ...
show more
[Wed Sep 23 03:14:15.539142 2026] [security2:error] [pid 6652:tid 6688] [client 37.65.162.167:20774] [client 37.65.162.167] ModSecurity: Warning. detected SQLi using libinjection with fingerprint '1UEsc' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: 1UEsc found within ARGS:story: 4778 UNION ALL SELECT 'gekigddvirilqehjozebwmoixeftqyja'-- n0h00s"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "washingtonstreetbooks.com"] [uri "/content/page.php"] [unique_id "arN8R_U9D3BU1ziz5eeIhQAAACI"]
show less
SQL Injection
🇫🇷
86.203.112.51
23 Sep 2026
[Wed Sep 23 03:14:22.415250 2026] [security2:error] [pid 22439:tid 22508] [client 86.203.112.51:5276 ...
show more
[Wed Sep 23 03:14:22.415250 2026] [security2:error] [pid 22439:tid 22508] [client 86.203.112.51:52762] [client 86.203.112.51] ModSecurity: Warning. detected SQLi using libinjection with fingerprint '1UEsc' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: 1UEsc found within ARGS:story: 4778 UNION ALL SELECT 'gekigddvirilqehjozebwmoixeftqyja'-- n0h00s"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "washingtonstreetbooks.com"] [uri "/content/page.php"] [unique_id "arN8TvoOpwzRtsTj3IGdTQAAAMM"]
show less
SQL Injection
🇫🇷
88.161.244.35
23 Sep 2026
[Wed Sep 23 03:14:28.903375 2026] [security2:error] [pid 6652:tid 6668] [client 88.161.244.35:1856] ...
show more
[Wed Sep 23 03:14:28.903375 2026] [security2:error] [pid 6652:tid 6668] [client 88.161.244.35:1856] [client 88.161.244.35] ModSecurity: Warning. detected SQLi using libinjection with fingerprint '1UEsc' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: 1UEsc found within ARGS:story: 4778 UNION ALL SELECT 'gekigddvirilqehjozebwmoixeftqyja'-- n0h00s"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "washingtonstreetbooks.com"] [uri "/content/page.php"] [unique_id "arN8VPU9D3BU1ziz5eeIiwAAAA4"]
show less
SQL Injection
🇫🇷
88.167.68.221
23 Sep 2026
[Wed Sep 23 03:14:48.533527 2026] [security2:error] [pid 6652:tid 6665] [client 88.167.68.221:5315] ...
show more
[Wed Sep 23 03:14:48.533527 2026] [security2:error] [pid 6652:tid 6665] [client 88.167.68.221:5315] [client 88.167.68.221] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's)&f(' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s)&f( found within ARGS:story: 4778%') AND EXTRACTVALUE(1253,CONCAT(0x7e,((SELECT (ELT(1253=1253,1)))),0x7e))-- -"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "washingtonstreetbooks.com"] [uri "/content/page.php"] [unique_id "arN8aPU9D3BU1ziz5eeIswAAAAs"]
show less
SQL Injection
🇫🇷
82.121.82.81
23 Sep 2026
[Wed Sep 23 03:15:08.651284 2026] [security2:error] [pid 6652:tid 6656] [client 82.121.82.81:41378] ...
show more
[Wed Sep 23 03:15:08.651284 2026] [security2:error] [pid 6652:tid 6656] [client 82.121.82.81:41378] [client 82.121.82.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter|create|drop)[[:space:]]*(?:column|database|procedure|table) |delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.*[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|remark)tes ..." at ARGS:story. [file "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"] [line "318"] [id "340144"] [rev "35"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Generic SQL injection protection 2"] [data "get /content/page.php?story=%29%2f**%2fand%2f**%2f%28499898973%3d499898973%2f**%2funion%2f**%2fall%2f**%2fselect%2f**%2f%252527gekigddvirilqehjozebwmoixeftqyja%252527--%2f**%2fn0h00s http/1.1"] [severity "CRITICAL"] [hostname "washingtonstreetbooks.com"] [uri "/content/page.php"] [unique_id "arN8fPU9D3BU1ziz5eeIzQAAAAI"]
show less
SQL Injection
🇫🇷
86.71.46.232
23 Sep 2026
[Wed Sep 23 03:15:32.901956 2026] [security2:error] [pid 6652:tid 6698] [client 86.71.46.232:55802] ...
show more
[Wed Sep 23 03:15:32.901956 2026] [security2:error] [pid 6652:tid 6698] [client 86.71.46.232:55802] [client 86.71.46.232] ModSecurity: Warning. Pattern match "(?i:(?:\\\\s*?(?:exec|execute).*?(?:\\\\W)xp_cmdshell)|(?:[\\"'`]\\\\s*?!\\\\s*?[\\"'`\\\\w])|(?:from\\\\W+information_schema\\\\W)|(?:(?:(?:current_)?user|database|schema|connection_id)\\\\s*?\\\\([^\\\\)]*?)|(?:[\\"'`];?\\\\s*?(?:select|union|having)\\\\b\\\\s*?[^\\\\s])|(?:\\\\wiif ..." at ARGS:story. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "61"] [id "942190"] [rev "2"] [msg "Detects MSSQL code execution and information gathering attempts"] [data "Matched Data: UNION ALL SELECT found within ARGS:story: ) AND (1886295056=1886295056 UNION ALL SELECT NULL,'gekigddvirilqehjozebwmoixeftqyja'-- qbtrsm"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WE
show less
SQL Injection
🇵🇰
116.71.10.217
23 Sep 2026
[Wed Sep 23 04:34:56.491984 2026] [security2:error] [pid 22440:tid 22559] [client 116.71.10.217:3470 ...
show more
[Wed Sep 23 04:34:56.491984 2026] [security2:error] [pid 22440:tid 22559] [client 116.71.10.217:3470] [client 116.71.10.217] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "washingtonstreetbooksandmusic.com"] [uri "/"] [unique_id "arOPMKoKHO2nIKKEhLwLngAAAQI"], referer: https://washingtonstreetbooks.com/new
show less
Hacking
🇧🇩
103.49.170.207
23 Sep 2026
[Wed Sep 23 04:40:46.553267 2026] [security2:error] [pid 26914:tid 26945] [client 103.49.170.207:513 ...
show more
[Wed Sep 23 04:40:46.553267 2026] [security2:error] [pid 26914:tid 26945] [client 103.49.170.207:51358] [client 103.49.170.207] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "washingtonstreetbooks.com"] [uri "/"] [unique_id "arOQjop85i7oyABxxxYHBAAAAF0"], referer: https://washingtonstreetbooks.com/new
show less
Hacking
🇹🇳
102.157.48.161
23 Sep 2026
[Wed Sep 23 04:41:21.482807 2026] [security2:error] [pid 6652:tid 6699] [client 102.157.48.161:45914 ...
show more
[Wed Sep 23 04:41:21.482807 2026] [security2:error] [pid 6652:tid 6699] [client 102.157.48.161:45914] [client 102.157.48.161] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "washingtonstreetbooksandmusic.com"] [uri "/new"] [unique_id "arOQsfU9D3BU1ziz5eejwgAAAC0"], referer: https://washingtonstreetbooksandmusic.com/
show less
Hacking
🇵🇰
119.160.215.228
23 Sep 2026
[Wed Sep 23 04:35:29.390421 2026] [security2:error] [pid 22440:tid 22578] [client 119.160.215.228:56 ...
show more
[Wed Sep 23 04:35:29.390421 2026] [security2:error] [pid 22440:tid 22578] [client 119.160.215.228:56788] [client 119.160.215.228] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "parmaracing.com"] [uri "/pages/mid-america-threaded-front-axle-w-aluminum-lock-nuts-retro-formula-1-w138632.html"] [unique_id "arOPUaoKHO2nIKKEhLwLrgAAARU"], referer: https://parmaracing.com/
show less
Hacking
🇺🇸
184.193.26.142
23 Sep 2026
40x eg GET /onedrive.zip HTTP/1.1
Hacking
🇫🇷
176.139.134.66
23 Sep 2026
[Wed Sep 23 03:13:48.358819 2026] [security2:error] [pid 22439:tid 22543] [client 176.139.134.66:518 ...
show more
[Wed Sep 23 03:13:48.358819 2026] [security2:error] [pid 22439:tid 22543] [client 176.139.134.66:51856] [client 176.139.134.66] ModSecurity: Warning. detected SQLi using libinjection with fingerprint '1B1c' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: 1B1c found within ARGS:story: 4778 ORDER BY 1-- -"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "washingtonstreetbooks.com"] [uri "/content/page.php"] [unique_id "arN8LPoOpwzRtsTj3IGdPQAAAOY"]
show less
SQL Injection
🇺🇸
34.148.169.205
13 Sep 2026
[Sat Sep 12 20:49:20.544763 2026] [security2:error] [pid 13923:tid 14206] [client 34.148.169.205:602 ...
show more
[Sat Sep 12 20:49:20.544763 2026] [security2:error] [pid 13923:tid 14206] [client 34.148.169.205:60200] [client 34.148.169.205] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "washingtonstreetbooksentertainmentmuseum.com"] [uri "/.git/config"] [unique_id "aqXzEMUrffFhpdZP6_mEjAAABQA"]
show less
Web App Attack
🇺🇸
136.69.152.246
13 Sep 2026
[Sat Sep 12 20:50:16.647944 2026] [security2:error] [pid 13921:tid 14161] [client 136.69.152.246:458 ...
show more
[Sat Sep 12 20:50:16.647944 2026] [security2:error] [pid 13921:tid 14161] [client 136.69.152.246:45848] [client 136.69.152.246] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "washingtonstreetbooksentertainmentmuseum.com"] [uri "/.git/config"] [unique_id "aqXzSKayrsDdlt-DYOuktgAABJk"]
show less
Web App Attack
🇺🇸
34.42.164.137
13 Sep 2026
[Sat Sep 12 20:50:39.534308 2026] [security2:error] [pid 13924:tid 14318] [client 34.42.164.137:3664 ...
show more
[Sat Sep 12 20:50:39.534308 2026] [security2:error] [pid 13924:tid 14318] [client 34.42.164.137:36646] [client 34.42.164.137] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "task.a10s4ukraine.com"] [uri "/.git/config"] [unique_id "aqXzX9eeuPGuIiutueLECQAABWA"]
show less
Web App Attack
🇮🇪
63.32.168.117
13 Sep 2026
[Sat Sep 12 20:52:10.478633 2026] [proxy_http:error] [pid 13922:tid 14205] [client 63.32.168.117:426 ...
show more
[Sat Sep 12 20:52:10.478633 2026] [proxy_http:error] [pid 13922:tid 14205] [client 63.32.168.117:42650] AH01114: HTTP: failed to make connection to backend: 127.0.0.1
show less
Hacking
🇫🇷
194.59.31.13
13 Sep 2026
[Sat Sep 12 21:02:30.122433 2026] [security2:error] [pid 13921:tid 14165] [client 194.59.31.13:49162 ...
show more
[Sat Sep 12 21:02:30.122433 2026] [security2:error] [pid 13921:tid 14165] [client 194.59.31.13:49162] [client 194.59.31.13] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "fastenerkit.com"] [uri "/.env"] [unique_id "aqX2JqayrsDdlt-DYOumMwAABJ0"]
show less
Hacking
🇫🇷
128.78.195.251
12 Sep 2026
[Sat Sep 12 07:25:34.830039 2026] [security2:error] [pid 26413:tid 26760] [client 128.78.195.251:568 ...
show more
[Sat Sep 12 07:25:34.830039 2026] [security2:error] [pid 26413:tid 26760] [client 128.78.195.251:56854] [client 128.78.195.251] ModSecurity: Warning. detected SQLi using libinjection with fingerprint '1UEsc' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: 1UEsc found within ARGS:pageid: 13930 UNION ALL SELECT 'wdjhacrgcruprlzyqjxodmpxtnwrobae'-- m2bmvl"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "holtindependent.com"] [uri "/content/page.php"] [unique_id "aqU2rtpPHfhY469iTTnaCAAAAWs"]
show less
SQL Injection
🇫🇷
37.66.164.94
12 Sep 2026
[Sat Sep 12 07:25:39.539040 2026] [security2:error] [pid 26790:tid 26832] [client 37.66.164.94:20566 ...
show more
[Sat Sep 12 07:25:39.539040 2026] [security2:error] [pid 26790:tid 26832] [client 37.66.164.94:20566] [client 37.66.164.94] ModSecurity: Warning. detected SQLi using libinjection with fingerprint '1UEsc' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: 1UEsc found within ARGS:pageid: 13930 UNION ALL SELECT 'wdjhacrgcruprlzyqjxodmpxtnwrobae'-- m2bmvl"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "holtindependent.com"] [uri "/content/page.php"] [unique_id "aqU2s8JDr5uMmn9DoHJ06gAAAig"]
show less
SQL Injection
🇫🇷
77.201.24.171
12 Sep 2026
[Sat Sep 12 07:25:45.401868 2026] [security2:error] [pid 26414:tid 26763] [client 77.201.24.171:4731 ...
show more
[Sat Sep 12 07:25:45.401868 2026] [security2:error] [pid 26414:tid 26763] [client 77.201.24.171:47316] [client 77.201.24.171] ModSecurity: Warning. detected SQLi using libinjection with fingerprint '1UEsc' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: 1UEsc found within ARGS:pageid: 13930 UNION ALL SELECT 'wdjhacrgcruprlzyqjxodmpxtnwrobae'-- m2bmvl"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "holtindependent.com"] [uri "/content/page.php"] [unique_id "aqU2udErNu4Ph-b4aTfmtwAAAeg"]
show less
SQL Injection
🇫🇷
5.104.195.185
12 Sep 2026
[Sat Sep 12 07:25:56.944466 2026] [security2:error] [pid 26412:tid 26629] [client 5.104.195.185:5018 ...
show more
[Sat Sep 12 07:25:56.944466 2026] [security2:error] [pid 26412:tid 26629] [client 5.104.195.185:50188] [client 5.104.195.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter|create|drop)[[:space:]]*(?:column|database|procedure|table) |delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.*[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|remark)tes ..." at ARGS:pageid. [file "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"] [line "318"] [id "340144"] [rev "35"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Generic SQL injection protection 2"] [data "get /content/page.php?pageid=%29%2f**%2fand%2f**%2f%28572706176%3d572706176%2f**%2funion%2f**%2fall%2f**%2fselect%2f**%2f%c3%80%c2%a7%c3%80%c2%a2%252527wdjhacrgcruprlzyqjxodmpxtnwrobae%c3%80%c2%a7%c3%80%c2%a2%252527--%2f**%2fm2bmvl http/1.1"] [severity "CRITICAL"] [hostname "holtindependent.com"] [uri "/content/page.php"] [unique_id "aqU2xMXu_UAJP4v1OPUuTQAAAQc
show less
SQL Injection
🇫🇷
5.49.238.188
12 Sep 2026
[Sat Sep 12 07:26:42.397076 2026] [security2:error] [pid 26790:tid 26807] [client 5.49.238.188:61091 ...
show more
[Sat Sep 12 07:26:42.397076 2026] [security2:error] [pid 26790:tid 26807] [client 5.49.238.188:61091] [client 5.49.238.188] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's)&f(' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s)&f( found within ARGS:pageid: 13930%') AND EXTRACTVALUE(8175,CONCAT(0x7e,((SELECT (ELT(8175=8175,1)))),0x7e))-- -"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "holtindependent.com"] [uri "/content/page.php"] [unique_id "aqU28sJDr5uMmn9DoHJ1HQAAAg8"]
show less
SQL Injection
🇺🇸
137.184.2.202
12 Sep 2026
[Sat Sep 12 07:30:50.258997 2026] [proxy_http:error] [pid 26414:tid 26775] [client 137.184.2.202:553 ...
show more
[Sat Sep 12 07:30:50.258997 2026] [proxy_http:error] [pid 26414:tid 26775] [client 137.184.2.202:55354] AH01114: HTTP: failed to make connection to backend: 127.0.0.1
show less
Hacking
🇺🇸
64.23.208.98
12 Sep 2026
[Sat Sep 12 07:35:29.845873 2026] [proxy_http:error] [pid 26790:tid 26837] [client 64.23.208.98:3340 ...
show more
[Sat Sep 12 07:35:29.845873 2026] [proxy_http:error] [pid 26790:tid 26837] [client 64.23.208.98:33404] AH01114: HTTP: failed to make connection to backend: 127.0.0.1
show less
Hacking