bcsaba
2025-06-14 22:42:18
(10 hours ago)
Joomla spam
103.69.87.161 - - [15/Jun/2025:00:42:16 +0200] "GET /index.php?option=com_easyblog ... show more Joomla spam
103.69.87.161 - - [15/Jun/2025:00:42:16 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://*REDACTED*" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71" show less
Web App Attack
sefinek.net
2025-06-12 10:30:04
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
Proto ... show more Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less
Bad Web Bot
backslash
2025-06-10 09:30:41
(5 days ago)
Web Spam
sefinek.net
2025-04-29 07:00:35
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
Proto ... show more Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less
Bad Web Bot
sefinek.net
2025-04-28 13:01:07
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
Proto ... show more Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.4 Safari/605.1.15
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less
Bad Web Bot
Xuan Can
2025-04-26 08:36:06
(1 month ago)
(mod_security) mod_security (id:6) triggered by 103.69.87.161 (-): 1 in the last 3600 secs; Ports: 8 ... show more (mod_security) mod_security (id:6) triggered by 103.69.87.161 (-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 26 15:36:00.211873 2025] [security2:error] [pid 17199:tid 17237] [client 103.69.87.161:48045] [client 103.69.87.161] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "aAya8IcwVy-aKttvl_CaFgAAAEs"], referer: https://kb.pavietnam.vn/huong-dan-cai-dat-phpbb.html show less
Brute-Force
SSH
sefinek.net
2025-04-23 16:01:04
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
Proto ... show more Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less
Bad Web Bot
sefinek.net
2025-04-22 19:01:01
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
Proto ... show more Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less
Bad Web Bot
Xuan Can
2025-04-22 18:39:19
(1 month ago)
(mod_security) mod_security (id:6) triggered by 103.69.87.161 (-): 1 in the last 3600 secs; Ports: 8 ... show more (mod_security) mod_security (id:6) triggered by 103.69.87.161 (-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 23 01:39:11.887308 2025] [security2:error] [pid 40551:tid 40584] [client 103.69.87.161:47489] [client 103.69.87.161] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "aAfiTw62QgS7t0vT5023wwAAAMU"], referer: https://kb.pavietnam.vn/pingback-va-trackback-trong-wordpress-la-gi.html show less
Brute-Force
SSH
sefinek.net
2025-04-15 09:00:18
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
ASN: ... show more Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
ASN: 135918 (DVS-AS-VN VIET DIGITAL TECHNOLOGY LIABILITY COMPANY)
Protocol: HTTP/1.1 (GET method)
Timestamp: 2025-04-15T08:20:44Z
UA: Mozilla/5.0 (X11; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less
Bad Web Bot
Xuan Can
2025-04-14 05:50:53
(2 months ago)
(mod_security) mod_security (id:6) triggered by 103.69.87.161 (-): 1 in the last 3600 secs; Ports: 8 ... show more (mod_security) mod_security (id:6) triggered by 103.69.87.161 (-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 14 12:50:47.724175 2025] [security2:error] [pid 25962:tid 26014] [client 103.69.87.161:50500] [client 103.69.87.161] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "Z_yiN7jWOEi-JchZ6r2okQAAARg"], referer: https://kb.pavietnam.vn/wp-login.php?action=register show less
Brute-Force
SSH
Xuan Can
2025-04-06 18:06:53
(2 months ago)
(mod_security) mod_security (id:6) triggered by 103.69.87.161 (-): 1 in the last 3600 secs; Ports: 8 ... show more (mod_security) mod_security (id:6) triggered by 103.69.87.161 (-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 01:06:50.014729 2025] [security2:error] [pid 29598:tid 29641] [client 103.69.87.161:39779] [client 103.69.87.161] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "Z_LCuiCQGGZEqnb9wLTCdAAAAc8"], referer: https://kb.pavietnam.vn/pingback-va-trackback-trong-wordpress-la-gi.html show less
Brute-Force
SSH
Xuan Can
2025-04-04 18:42:43
(2 months ago)
(mod_security) mod_security (id:6) triggered by 103.69.87.161 (-): 1 in the last 3600 secs; Ports: 8 ... show more (mod_security) mod_security (id:6) triggered by 103.69.87.161 (-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 05 01:42:39.192956 2025] [security2:error] [pid 2260:tid 2372] [client 103.69.87.161:54607] [client 103.69.87.161] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "Z_AoH-8RjATaeIQkSrL54wAAAZg"], referer: https://kb.pavietnam.vn/pingback-va-trackback-trong-wordpress-la-gi.html show less
Brute-Force
SSH
sefinek.net
2025-04-04 12:00:41
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
ASN: ... show more Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
ASN: 135918 (DVS-AS-VN VIET DIGITAL TECHNOLOGY LIABILITY COMPANY)
Protocol: HTTP/1.1 (GET method)
Timestamp: 2025-04-04T10:10:24Z
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less
Bad Web Bot
sefinek.net
2025-04-04 00:01:07
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
ASN: ... show more Triggered Cloudflare WAF (firewallCustom) from VN.
Action taken: MANAGED_CHALLENGE
ASN: 135918 (DVS-AS-VN VIET DIGITAL TECHNOLOGY LIABILITY COMPANY)
Protocol: HTTP/1.1 (GET method)
Timestamp: 2025-04-03T19:33:49Z
UA: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less
Bad Web Bot