|
๐ต๐ฑ
sefinek.net
|
|
Triggered Cloudflare WAF (firewallCustom) from TH.
Action taken: BLOCK
Protocol: HTTP/1.1 (HEAD meth ...
show more
Triggered Cloudflare WAF (firewallCustom) from TH.
Action taken: BLOCK
Protocol: HTTP/1.1 (HEAD method)
Endpoint: /docs.zip
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
|
๐บ๐ธ
etu brutus
|
|
110.49.99.113 has been banned for [WebApp Attack]
...
|
Hacking
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 07:30:33.047459 2025] [security2:error] [pid 25119:tid 25119] [client 110.49.99.113:36810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.labcomputers.com"] [uri "/wp-config.php1"] [unique_id "aHowWQJnaTUow5sOuZc8OQAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐ฎ๐น
VHosting
|
|
Detected attack by Imunify360
|
Brute-Force
Web App Attack
|
|
|
๐ฎ๐น
VHosting
|
|
Detected attack by Imunify360
|
Brute-Force
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 19:04:27.593971 2025] [security2:error] [pid 23969:tid 23969] [client 110.49.99.113:36320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jazziientertainment.com"] [uri "/wp-config.php1"] [unique_id "aHLp-wmTmf15QQH_XqfDqwAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 16:34:57.039722 2025] [security2:error] [pid 12955:tid 12955] [client 110.49.99.113:55860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dogandponyband.com"] [uri "/wp-config.php.old"] [unique_id "aHF1cTpnETyT7_dSB2xQDAAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 16:22:37.735166 2025] [security2:error] [pid 23109:tid 23109] [client 110.49.99.113:52088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "harwoodmechanical.com"] [uri "/wp-config.php.old"] [unique_id "aG7PjXBTUDcavP839KFu7wAAABY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 07 20:13:46.854364 2025] [security2:error] [pid 25968:tid 26101] [client 110.49.99.113:42832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soyjuantrece.com"] [uri "/wp-config.php1"] [unique_id "aGxiuqLj1vJhqNIN67Su7AAAAVY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Malicious activity detected
|
Hacking
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 06 03:57:49.866530 2025] [security2:error] [pid 32196:tid 32196] [client 110.49.99.113:54926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kenirving.com"] [uri "/wp-config.php1"] [unique_id "aGosff5J9NpaSbVikz8oGQAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 05 12:37:38.668850 2025] [security2:error] [pid 15506:tid 15506] [client 110.49.99.113:39006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desertvacationvillas.com"] [uri "/wp-config.php.old"] [unique_id "aGlU0h_lzUjZB_jJMFUN5AAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 05 11:53:53.096625 2025] [security2:error] [pid 24574:tid 24574] [client 110.49.99.113:55218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "register-yacht-greece.com"] [uri "/wp-config.php.old"] [unique_id "aGlKkcuEbLN07Wo3evpMrQAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 05 11:16:10.780261 2025] [security2:error] [pid 25177:tid 25177] [client 110.49.99.113:46664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bestprostate.com"] [uri "/wp-config.php.old"] [unique_id "aGlBuizzTbjSAEto7ERrhwAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 110.49.99.113 (clnhost02.thaidata.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 05 02:06:51.450383 2025] [security2:error] [pid 16481:tid 16481] [client 110.49.99.113:56218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arizonachristmascards.com"] [uri "/wp-config.php.old"] [unique_id "aGjA-wCx-C-zQTN9e2cXTwAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|