AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User eacontent , the webmaster of eacontent.com, joined AbuseIPDB in December 2025 and has reported 1,139 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇳🇱 34.91.158.121	08 Sep 2026	[Tue Sep 08 09:05:48.274444 2026] [security2:error] [pid 21323:tid 21526] [client 34.91.158.121:2596 ... show more [Tue Sep 08 09:05:48.274444 2026] [security2:error] [pid 21323:tid 21526] [client 34.91.158.121:25962] [client 34.91.158.121] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.local"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "69.16.227.0"] [uri "/.env.local"] [unique_id "aqAILBFZ5two127bveh0WwAAAOY"] show less	Hacking
🇧🇷 177.183.214.29	08 Sep 2026	[Mon Sep 07 20:15:17.517395 2026] [security2:error] [pid 14513:tid 14522] [client 177.183.214.29:124 ... show more [Mon Sep 07 20:15:17.517395 2026] [security2:error] [pid 14513:tid 14522] [client 177.183.214.29:12430] [client 177.183.214.29] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /js/js_vars.php?banner_height=204&banner_width=0&bannerid=2290&orientation=&menu_height=0&menu_top_margin=-50&top_margin=0&top_margin_adj=0&story_display=&are_regular_stories=&menu_orientation=&page_align=center&site_width=1440&responsive=Yes&num_products=0&filename=../images/backgrounds/360/2755_background.jpg&v_menu_width=0&stripe_bgid=&padding_top=13&padding_bottom=20&border_size=0&border_top=0&border_bottom=0&stripe_border_top=0&stripe_border_bottom=0&site_..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platfor show less	Web App Attack
🇳🇱 34.6.254.254	08 Sep 2026	[Mon Sep 07 20:16:37.980810 2026] [security2:error] [pid 14513:tid 14531] [client 34.6.254.254:65264 ... show more [Mon Sep 07 20:16:37.980810 2026] [security2:error] [pid 14513:tid 14531] [client 34.6.254.254:65264] [client 34.6.254.254] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /@fs/root/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "eacontent.com"] [uri "/@fs/root/.env"] [unique_id "ap9T5eUqcBD6iwAWV0IlTwAAAk8"] show less	Web App Attack
🇧🇷 186.192.58.97	08 Sep 2026	[Mon Sep 07 20:17:56.736267 2026] [security2:error] [pid 14513:tid 14556] [client 186.192.58.97:3709 ... show more [Mon Sep 07 20:17:56.736267 2026] [security2:error] [pid 14513:tid 14556] [client 186.192.58.97:37095] [client 186.192.58.97] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /js/js_vars.php?banner_height=204&banner_width=0&bannerid=2290&orientation=&menu_height=0&menu_top_margin=-50&top_margin=0&top_margin_adj=0&story_display=&are_regular_stories=&menu_orientation=&page_align=center&site_width=1440&responsive=Yes&num_products=0&filename=../images/backgrounds/360/2755_background.jpg&v_menu_width=0&stripe_bgid=&padding_top=13&padding_bottom=20&border_size=0&border_top=0&border_bottom=0&stripe_border_top=0&stripe_border_bottom=0&site_..."] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform- show less	Hacking
🇧🇷 138.59.218.23	08 Sep 2026	[Mon Sep 07 20:20:55.998377 2026] [security2:error] [pid 16588:tid 16625] [client 138.59.218.23:5215 ... show more [Mon Sep 07 20:20:55.998377 2026] [security2:error] [pid 16588:tid 16625] [client 138.59.218.23:52151] [client 138.59.218.23] ModSecurity: Warning. detected XSS using libinjection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "37"] [id "941100"] [rev "2"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data: /pages/ONeill-State-Track-Qualifiers-a26961.html?view_archive=No found within ARGS:return: /pages/ONeill-State-Track-Qualifiers-a26961.html?view_archive=No"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS/WEB_ATTACK/XSS"] [tag "WASCTC/WASC-8"] [tag "WASCTC/WASC-22"] [tag "OWASP_TOP_10/A3"] [tag "OWASP_AppSensor/IE1"] [tag "CAPEC-242"] [hostname "holtindependent.com"] [uri "/subscribe/customer_login.php"] [unique_id "ap9U57VM9cHw9Ozh_LvalgAAABs"] show less	SQL Injection
🇹🇭 27.145.146.23	08 Sep 2026	[Mon Sep 07 20:22:00.050384 2026] [security2:error] [pid 22210:tid 22255] [client 27.145.146.23:4765 ... show more [Mon Sep 07 20:22:00.050384 2026] [security2:error] [pid 22210:tid 22255] [client 27.145.146.23:4765] [client 27.145.146.23] ModSecurity: Warning. detected XSS using libinjection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "37"] [id "941100"] [rev "2"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data: /pages/ONeill-Graduate-Holds-Patent-On-Systems-For-U.S.-Fighter-a27988.html?view_archive=No found within ARGS:return: /pages/ONeill-Graduate-Holds-Patent-On-Systems-For-U.S.-Fighter-a27988.html?view_archive=No"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS/WEB_ATTACK/XSS"] [tag "WASCTC/WASC-8"] [tag "WASCTC/WASC-22"] [tag "OWASP_TOP_10/A3"] [tag "OWASP_AppSensor/IE1"] [tag "CAPEC-242"] [hostname "holtindependent.com"] [uri "/subscribe/customer_login.php"] [unique_id "ap9VJ3JaqkRjNGTyV2RDpQAAAqs" show less	SQL Injection
🇩🇪 34.40.125.73	08 Sep 2026	[Mon Sep 07 20:49:52.316418 2026] [security2:error] [pid 16588:tid 16628] [client 34.40.125.73:57646 ... show more [Mon Sep 07 20:49:52.316418 2026] [security2:error] [pid 16588:tid 16628] [client 34.40.125.73:57646] [client 34.40.125.73] ModSecurity: Warning. Pattern match "(?i)[\\\\s\\\\S](?:x(?:link:href\|html\|mlns)\|!ENTITY.?SYSTEM\|data:text\\\\/html\|pattern(?=.?=)\|formaction\|\\\\@import\|base64)\\\\b" at ARGS:0. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "58"] [id "941130"] [rev "2"] [msg "XSS Filter - Category 3: Attribute Vector"] [data "Matched Data: base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x22then\\x22:\\x22$B1337\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var R=(process.mainModule&&process.mainModule.require)?process.mainModule.require.bind(process.mainModule):module.constructor._load.bind(module.constructor);var res=R('child_process').execSync('echo $((41271)) \| base64 -w 0',{maxBuffer:641024*1024}).toString show less	Web App Attack
🇦🇷 200.63.111.44	08 Sep 2026	[Mon Sep 07 21:01:39.157196 2026] [security2:error] [pid 22210:tid 22242] [client 200.63.111.44:4070 ... show more [Mon Sep 07 21:01:39.157196 2026] [security2:error] [pid 22210:tid 22242] [client 200.63.111.44:40700] [client 200.63.111.44] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:$mozilla^\|mozilla/[45]\\\\.[1-9])" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec2/20_asl_useragents.conf"] [line "302"] [id "330131"] [rev "2"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Fake Mozilla User Agent String Detected"] [severity "CRITICAL"] [hostname "eacontent.com"] [uri "/robots.txt"] [unique_id "ap9ec3JaqkRjNGTyV2RMRwAAAp4"] show less	SQL Injection
🇫🇷 90.125.125.111	08 Sep 2026	[Mon Sep 07 21:16:04.621272 2026] [security2:error] [pid 22210:tid 22221] [client 90.125.125.111:572 ... show more [Mon Sep 07 21:16:04.621272 2026] [security2:error] [pid 22210:tid 22221] [client 90.125.125.111:57246] [client 90.125.125.111] ModSecurity: Warning. detected SQLi using libinjection with fingerprint '1B1c' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: 1B1c found within ARGS:cs: 1 ORDER BY 1-- -"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "uktest1.com"] [uri "/subscribe/customer_login.php"] [unique_id "ap9h1HJaqkRjNGTyV2RQBwAAAok"] show less	SQL Injection
🇫🇷 195.135.104.6	08 Sep 2026	195.135.104.6 - - [07/Sep/2026:21:16:14 -0400] "GET /subscribe/customer_login.php?cs=1%20AND%20EXTRA ... show more 195.135.104.6 - - [07/Sep/2026:21:16:14 -0400] "GET /subscribe/customer_login.php?cs=1%20AND%20EXTRACTVALUE%281144%2CCONCAT%280x7e%2C%28%28SELECT%20%28ELT%281144%3D1144%2C1%29%29%29%29%2C0x7e%29%29--%20- HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" show less	SQL Injection
🇫🇷 109.209.11.138	08 Sep 2026	109.209.11.138 - - [07/Sep/2026:21:16:20 -0400] "GET /subscribe/customer_login.php?cs=1%20ORDER%20BY ... show more 109.209.11.138 - - [07/Sep/2026:21:16:20 -0400] "GET /subscribe/customer_login.php?cs=1%20ORDER%20BY%201--%20- HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" show less	SQL Injection
🇫🇷 86.207.94.6	08 Sep 2026	86.207.94.6 - - [07/Sep/2026:21:16:27 -0400] "GET /subscribe/customer_login.php?cs=1%20UNION%20ALL%2 ... show more 86.207.94.6 - - [07/Sep/2026:21:16:27 -0400] "GET /subscribe/customer_login.php?cs=1%20UNION%20ALL%20SELECT%20%27uqwnzngnhzoqokjwwcgbhlaqqnormzmp%27--%20qhyiyg HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	SQL Injection
🇫🇷 90.1.229.26	08 Sep 2026	[Mon Sep 07 21:17:14.910267 2026] [security2:error] [pid 7830:tid 7861] [client 90.1.229.26:52238] [ ... show more [Mon Sep 07 21:17:14.910267 2026] [security2:error] [pid 7830:tid 7861] [client 90.1.229.26:52238] [client 90.1.229.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter\|create\|drop)[[:space:]](?:column\|database\|procedure\|table) \|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=\|union all select \|\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.[a-z0-9]+ from \|select (?:load_file\|char ?\\\\()\|(?:insert\|remark)tes ..." at ARGS:cs. [file "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"] [line "318"] [id "340144"] [rev "35"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Generic SQL injection protection 2"] [data "get /subscribe/customer_login.php?cs=%29%2f%2fand%2f%2f%281520268158%3d1520268158%2f%2funion%2f%2fall%2f%2fselect%2f%2f%27uqwnzngnhzoqokjwwcgbhlaqqnormzmp%27--%2f**%2fqhyiyg http/1.1"] [severity "CRITICAL"] [hostname "uktest1.com"] [uri "/subscribe/customer_login.php"] [unique_id "ap9iGgNYl8qun45KYQKShQAAAh0"] show less	SQL Injection
🇫🇷 86.221.2.205	08 Sep 2026	[Mon Sep 07 21:17:40.180055 2026] [security2:error] [pid 14513:tid 14568] [client 86.221.2.205:60360 ... show more [Mon Sep 07 21:17:40.180055 2026] [security2:error] [pid 14513:tid 14568] [client 86.221.2.205:60360] [client 86.221.2.205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:alter\|create\|drop)[[:space:]](?:column\|database\|procedure\|table) \|delete[[:space:]] .{1,100}+ update [a-z0-9]+ set .{1,100}+=\|union all select \|\\\\bunion\\\\b.{1,100}?\\\\bselect\\\\b.[a-z0-9]+ from \|select (?:load_file\|char ?\\\\()\|(?:insert\|remark)tes ..." at ARGS:cs. [file "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"] [line "318"] [id "340144"] [rev "35"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Generic SQL injection protection 2"] [data "get /subscribe/customer_login.php?cs=%29%2f%2fand%2f%2f%281241092037%3d1241092037%2f%2funion%2f%2fall%2f%2fselect%2f%2f%27uqwnzngnhzoqokjwwcgbhlaqqnormzmp%27%2cnull--%2f**%2f41101d http/1.1"] [severity "CRITICAL"] [hostname "uktest1.com"] [uri "/subscribe/customer_login.php"] [unique_id "ap9iNOUqcBD6iwAWV0Iq7AAAAnA"] show less	SQL Injection
🇫🇷 86.192.152.97	08 Sep 2026	[Mon Sep 07 21:18:00.668423 2026] [security2:error] [pid 22210:tid 22257] [client 86.192.152.97:3731 ... show more [Mon Sep 07 21:18:00.668423 2026] [security2:error] [pid 22210:tid 22257] [client 86.192.152.97:37314] [client 86.192.152.97] ModSecurity: Warning. Pattern match "(?i:(?:\\\\s?(?:exec\|execute).?(?:\\\\W)xp_cmdshell)\|(?:[\\"'`]\\\\s?!\\\\s?[\\"'`\\\\w])\|(?:from\\\\W+information_schema\\\\W)\|(?:(?:(?:current_)?user\|database\|schema\|connection_id)\\\\s?\\\$[^\\\$]?)\|(?:[\\"'`];?\\\\s?(?:select\|union\|having)\\\\b\\\\s?[^\\\\s])\|(?:\\\\wiif ..." at ARGS:cs. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "61"] [id "942190"] [rev "2"] [msg "Detects MSSQL code execution and information gathering attempts"] [data "Matched Data: UNION ALL SELECT found within ARGS:cs: 1 UNION ALL SELECT NULL,'uqwnzngnhzoqokjwwcgbhlaqqnormzmp'-- 74vwtr"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag show less	SQL Injection
🇺🇸 35.245.99.162	07 Sep 2026	[Mon Sep 07 09:19:53.357515 2026] [security2:error] [pid 2930:tid 3119] [client 35.245.99.162:50281] ... show more [Mon Sep 07 09:19:53.357515 2026] [security2:error] [pid 2930:tid 3119] [client 35.245.99.162:50281] [client 35.245.99.162] ModSecurity: Access denied with code 403 (phase 2). Match of "rx (Qualidator\\\\.com\|ExaleadCloudView\|^Mozilla/4\\\\.0 \\\$compatible;\\\$$\|UTVDriveBot\|Add Catalog\|^Appcelerator)" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/apache2/conf.d/modsec2/20_asl_useragents.conf"] [line "292"] [id "309925"] [rev "6"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Suspicious User-Agent, parenthesis closed with a semicolon Mozilla/5.0 (compatible; Orbbot/1.1;)"] [severity "CRITICAL"] [hostname "washingtonstreetbooksandmusic.com"] [uri "/"] [unique_id "ap65-Yr1PqCNjUuZjo6BXwAAAQE"] show less	Spoofing
🇻🇳 171.250.160.185	07 Sep 2026	[Mon Sep 07 07:40:53.987802 2026] [security2:error] [pid 2931:tid 3135] [client 171.250.160.185:2166 ... show more [Mon Sep 07 07:40:53.987802 2026] [security2:error] [pid 2931:tid 3135] [client 171.250.160.185:2166] [client 171.250.160.185] ModSecurity: Warning. detected XSS using libinjection. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf"] [line "37"] [id "941100"] [rev "2"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data: /pages/ONeill-Public-Schools-Proceedings-(12-22-2022)-a27576.html?view_archive=Yes found within ARGS:return: /pages/ONeill-Public-Schools-Proceedings-(12-22-2022)-a27576.html?view_archive=Yes"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-xss"] [tag "OWASP_CRS/WEB_ATTACK/XSS"] [tag "WASCTC/WASC-8"] [tag "WASCTC/WASC-22"] [tag "OWASP_TOP_10/A3"] [tag "OWASP_AppSensor/IE1"] [tag "CAPEC-242"] [hostname "holtindependent.com"] [uri "/subscribe/customer_login.php"] [unique_id "ap6ixRe06rkpo9Gpf0XpmQAAAcM"] show less	SQL Injection
🇯🇵 34.84.233.84	07 Sep 2026	[Mon Sep 07 07:47:47.991079 2026] [security2:error] [pid 2930:tid 3180] [client 34.84.233.84:26432] ... show more [Mon Sep 07 07:47:47.991079 2026] [security2:error] [pid 2930:tid 3180] [client 34.84.233.84:26432] [client 34.84.233.84] ModSecurity: Warning. Matched phrase "../" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "34"] [id "930110"] [rev "1"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: ../ found within REQUEST_URI: /@fs/../../../../../root/.env?raw??"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "mail.bonesfab.com"] [uri "/@fs/..%2f..%2f..%2f..%2f..%2froot/.env"] [unique_id "ap6kY4r1PqCNjUuZjo58GgAAARc"] show less	Web App Attack
🇺🇸 45.61.185.202	07 Sep 2026	[Mon Sep 07 05:04:43.501443 2026] [proxy:error] [pid 24480:tid 24634] [client 45.61.185.202:56264] A ... show more [Mon Sep 07 05:04:43.501443 2026] [proxy:error] [pid 24480:tid 24634] [client 45.61.185.202:56264] AH00898: Error reading from remote server returned by /___proxy_subdomain_webmail/cisco/ show less	Hacking
🇺🇸 34.20.131.10	07 Sep 2026	[Mon Sep 07 05:11:43.391513 2026] [security2:error] [pid 24485:tid 24568] [client 34.20.131.10:59096 ... show more [Mon Sep 07 05:11:43.391513 2026] [security2:error] [pid 24485:tid 24568] [client 34.20.131.10:59096] [client 34.20.131.10] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "69.16.2 show less	Hacking
🇸🇬 136.85.113.25	07 Sep 2026	[Mon Sep 07 05:11:56.857266 2026] [security2:error] [pid 24484:tid 24605] [client 136.85.113.25:3410 ... show more [Mon Sep 07 05:11:56.857266 2026] [security2:error] [pid 24484:tid 24605] [client 136.85.113.25:34102] [client 136.85.113.25] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "452"] [id "920440"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "69.16 show less	Hacking
🇿🇦 34.35.37.49	07 Sep 2026	[Mon Sep 07 03:21:46.075187 2026] [security2:error] [pid 16785:tid 16874] [client 34.35.37.49:54770] ... show more [Mon Sep 07 03:21:46.075187 2026] [security2:error] [pid 16785:tid 16874] [client 34.35.37.49:54770] [client 34.35.37.49] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.sample"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "offshorenuclear.org"] [uri "/.env.sample"] [unique_id "ap5mClqLkDisp8eVKKwtfAAAAts"] show less	Hacking
🇺🇸 35.245.99.162	07 Sep 2026	[Mon Sep 07 03:51:47.355169 2026] [security2:error] [pid 24485:tid 24819] [client 35.245.99.162:4849 ... show more [Mon Sep 07 03:51:47.355169 2026] [security2:error] [pid 24485:tid 24819] [client 35.245.99.162:48499] [client 35.245.99.162] ModSecurity: Access denied with code 403 (phase 2). Match of "rx (Qualidator\\\\.com\|ExaleadCloudView\|^Mozilla/4\\\\.0 \\\$compatible;\\\$$\|UTVDriveBot\|Add Catalog\|^Appcelerator)" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/apache2/conf.d/modsec2/20_asl_useragents.conf"] [line "292"] [id "309925"] [rev "6"] [msg "Atomicorp.com UNSUPPORTED DELAYED Rules: Suspicious User-Agent, parenthesis closed with a semicolon Mozilla/5.0 (compatible; Orbbot/1.1;)"] [severity "CRITICAL"] [hostname "paulsmotorsinc.com"] [uri "/"] [unique_id "ap5tE2kZlhMUV0Ou9VQ6-QAAA2c"] show less	Hacking
🇳🇱 34.141.227.241	07 Sep 2026	[Mon Sep 07 04:30:03.493387 2026] [security2:error] [pid 24486:tid 24570] [client 34.141.227.241:606 ... show more [Mon Sep 07 04:30:03.493387 2026] [security2:error] [pid 24486:tid 24570] [client 34.141.227.241:60656] [client 34.141.227.241] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "49"] [id "930130"] [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "7"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "OWASP_CRS/WEB_ATTACK/FILE_INJECTION"] [tag "WASCTC/WASC-33"] [tag "OWASP_TOP_10/A4"] [tag "PCI/6.5.4"] [hostname "www.orders.onesourceofnj.com"] [uri "/.git/config"] [unique_id "ap52C6smuMZE6gzZBTBj6QAAA4k"] show less	Hacking
🇫🇷 81.53.37.107	05 Sep 2026	[Sat Sep 05 05:15:16.238168 2026] [security2:error] [pid 29350:tid 29359] [client 81.53.37.107:32852 ... show more [Sat Sep 05 05:15:16.238168 2026] [security2:error] [pid 29350:tid 29359] [client 81.53.37.107:32852] [client 81.53.37.107] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's&1UE' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s&1UE found within ARGS:buy_now: 1' AND 1=1 UNION SELECT NULL"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "www.slotcarstore.net"] [uri "/subscribe/show_product_update.php"] [unique_id "apvdpAPmd7N6va-ABtfycAAAAMc"] show less	SQL Injection