AbuseIPDB » 112.213.116.20

112.213.116.20 was found in our database!

This IP was reported 3 times. Confidence of Abuse is 19%: ?

19%

ISP	MEGA-II IDC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	worldmailhk.com
Country	Hong Kong
City	Hong Kong

Report 112.213.116.20

Whois 112.213.116.20

IP Abuse Reports for 112.213.116.20:

This IP address has been reported a total of 3 times from 3 distinct sources. 112.213.116.20 was first reported on November 25th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2024-11-30 08:19:38 (1 week ago)	(mod_security) mod_security (id:220150) triggered by 112.213.116.20 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:220150) triggered by 112.213.116.20 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 30 03:19:30.442714 2024] [security2:error] [pid 30356:tid 30356] [client 112.213.116.20:41004] [client 112.213.116.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\.{0,399}\\\\\\\\/)?select)" at ARGS:s. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)\|\|www.gustoyolfato.com\|F\|2"] [data "/home/pay/index/orderid/1')union//all//select/*/md5(2333)--"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.gustoyolfato.com"] [uri "/index.php"] [unique_id "Z0rKktK9dpj5TUm9-sC6MgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-28 23:50:02 (1 week ago)	\| SQL injection attempt.	Hacking SQL Injection Web App Attack
Anonymous	2024-11-25 19:55:19 (2 weeks ago)	SuspiciousC2 Activity detected by FMBAD System 2024-11-25 22:55:19	Hacking Bad Web Bot Web App Attack