Anonymous
2026-08-28 02:56:13
(15 minutes ago)
172.69.214.242 - - [28/Aug/2026:02:53:46 +0000] "GET /k.php?p= HTTP/2.0" 404 3575 "-" "-" "20.63.81. ...
show more
172.69.214.242 - - [28/Aug/2026:02:53:46 +0000] "GET /k.php?p= HTTP/2.0" 404 3575 "-" "-" "20.63.81.20"
172.69.214.242 - - [28/Aug/2026:02:56:11 +0000] "GET /133.php HTTP/2.0" 404 3580 "-" "-" "20.63.81.20"
172.69.214.242 - - [28/Aug/2026:02:56:11 +0000] "GET /sym.php?p= HTTP/2.0" 404 3580 "-" "-" "20.63.81.20"
172.69.214.242 - - [28/Aug/2026:02:56:11 +0000] "GET /8.php HTTP/2.0" 404 3578 "-" "-" "20.63.81.20"
172.69.214.242 - - [28/Aug/2026:02:56:11 +0000] "GET /goods.php?p= HTTP/2.0" 404 3581 "-" "-" "20.63.81.20"
172.69.214.242 - - [28/Aug/2026:02:56:11 +0000] "GET /ah.php HTTP/2.0" 404 3579 "-" "-" "20.63.81.20"
172.69.214.242 - - [28/Aug/2026:02:56:12 +0000] "GET /ws55.php?p= HTTP/2.0" 404 3577 "-" "-" "20.63.81.20"
172.69.214.242 - - [28/Aug/2026:02:56:12 +0000] "GET /drykl.php HTTP/2.0" 404 3578 "-" "-" "20.63.81.20"
172.69.214.242 - - [28/Aug/2026:02:56:12 +0000] "GET /backup.php HTTP/2.0" 404 3579 "-" "-" "20.63.81.20"
172.69.214.242 - - [28/Aug/2026:02:56:12 +0000] "GET /indo
...
show less
Port Scan
Brute-Force
๐ง๐ช
madeit
2026-08-25 22:59:07
(2 days ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-24 17:02:24
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.242 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 13:02:16.143446 2026] [security2:error] [pid 23074:tid 23074] [client 172.69.214.242:13102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.partybuswhistler.com"] [uri "/.git/HEAD"] [unique_id "aox5GBXrL-IVRMkVQcaOigAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mawan
2026-07-31 20:48:40
(3 weeks ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-21 17:13:30
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 172.69.214.242 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.214.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 13:13:24.687095 2026] [security2:error] [pid 5230:tid 5230] [client 172.69.214.242:14151] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.grasslakepizzatime.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.grasslakepizzatime.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "al-otP1IvkRK1PWTTZFhzAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mawan
2026-07-16 01:02:06
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
mawan
2026-07-13 18:59:10
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ฉ๐ช
anycast_ac
2026-07-04 01:52:23
(1 month ago)
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/8443 (generic).
Commands captur ...
show more
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/8443 (generic).
Commands captured:
$
show less
DDoS Attack
IoT Targeted
Brute-Force
Anonymous
2026-06-23 01:23:17
(2 months ago)
172.69.214.242 - - [23/Jun/2026:03:23:16 +0200] "GET /alfa.php HTTP/1.1" 404 124 "-" "-"
172.69.214. ...
show more
172.69.214.242 - - [23/Jun/2026:03:23:16 +0200] "GET /alfa.php HTTP/1.1" 404 124 "-" "-"
172.69.214.242 - - [23/Jun/2026:03:23:16 +0200] "GET /elp.php HTTP/1.1" 404 124 "-" "-"
172.69.214.242 - - [23/Jun/2026:03:23:16 +0200] "GET /666.php HTTP/1.1" 404 124 "-" "-"
172.69.214.242 - - [23/Jun/2026:03:23:16 +0200] "GET /ws54.php HTTP/1.1" 404 124 "-" "-"
172.69.214.242 - - [23/Jun/2026:03:23:16 +0200] "GET /function/function.php HTTP/1.1" 404 124 "-" "-"
172.69.214.242 - - [23/Jun/2026:03:23:16 +0200] "GET /xleet.php HTTP/1.1" 404 124 "-" "-"
172.69.214.242 - - [23/Jun/2026:03:23:16 +0200] "GET /155.php HTTP/1.1" 404 124 "-" "-"
172.69.214.242 - - [23/Jun/2026:03:23:16 +0200] "GET /as.php HTTP/1.1" 404 124 "-" "-"
172.69.214.242 - - [23/Jun/2026:03:23:17 +0200] "GET /.well-known/ HTTP/1.1" 404 124 "-" "-"
172.69.214.242 - - [23/Jun/2026:03:23:17 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 124 "-" "-"
172.69.214.242 - - [23/Jun/2026:03:23:17 +0200] "GET /wp-content/themes/pridmag/il.ph
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-06-09 18:30:28
(2 months ago)
172.69.214.242 - - [09/Jun/2026:20:30:18 +0200] "GET /55l453.php HTTP/1.1" 404 440 "-" "-"
172.69.21 ...
show more
172.69.214.242 - - [09/Jun/2026:20:30:18 +0200] "GET /55l453.php HTTP/1.1" 404 440 "-" "-"
172.69.214.242 - - [09/Jun/2026:20:30:18 +0200] "GET /55l453.php HTTP/1.1" 404 247 "-" "-"
172.69.214.242 - - [09/Jun/2026:20:30:19 +0200] "GET /xwx1.php HTTP/1.1" 404 440 "-" "-"
172.69.214.242 - - [09/Jun/2026:20:30:19 +0200] "GET /xwx1.php HTTP/1.1" 404 247 "-" "-"
172.69.214.242 - - [09/Jun/2026:20:30:19 +0200] "GET /ww.php HTTP/1.1" 404 440 "-" "-"
172.69.214.242 - - [09/Jun/2026:20:30:19 +0200] "GET /ww.php HTTP/1.1" 404 247 "-" "-"
172.69.214.242 - - [09/Jun/2026:20:30:19 +0200] "GET /uploads/index.php HTTP/1.1" 404 440 "-" "-"
172.69.214.242 - - [09/Jun/2026:20:30:19 +0200] "GET /uploads/index.php HTTP/1.1" 404 247 "-" "-"
172.69.214.242 - - [09/Jun/2026:20:30:20 +0200] "GET /bx.php HTTP/1.1" 404 440 "-" "-"
172.69.214.242 - - [09/Jun/2026:20:30:20 +0200] "GET /bx.php HTTP/1.1" 404 247 "-" "-"
172.69.214.242 - - [09/Jun/2026:20:30:20 +0200] "GET /dx.php HTTP/1.1" 404 247 "-" "-"
172.69.21
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-06-04 18:05:04
(2 months ago)
Abuse Detected (1)
Brute-Force
Web App Attack
Anonymous
2026-05-24 16:03:08
(3 months ago)
172.69.214.242 - - [24/May/2026:18:03:07 +0200] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 404 ...
show more
172.69.214.242 - - [24/May/2026:18:03:07 +0200] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 404 124 "-" "-"
172.69.214.242 - - [24/May/2026:18:03:07 +0200] "GET /wp-includes/Text/index.php HTTP/1.1" 404 124 "-" "-"
172.69.214.242 - - [24/May/2026:18:03:07 +0200] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 124 "-" "-"
172.69.214.242 - - [24/May/2026:18:03:07 +0200] "GET /wp-includes/Text/about.php HTTP/1.1" 404 124 "-" "-"
172.69.214.242 - - [24/May/2026:18:03:07 +0200] "GET /wp-includes/admiin.php HTTP/1.1" 404 124 "-" "-"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
mawan
2026-05-01 21:35:49
(3 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ท๐บ
avaio-media
2026-04-21 21:48:00
(4 months ago)
Brute-Force
Anonymous
2026-04-14 03:37:49
(4 months ago)
[Tue Apr 14 05:37:48.476891 2026] [authz_core:error] [pid 24670] [client 172.69.214.242:11198] AH016 ...
show more
[Tue Apr 14 05:37:48.476891 2026] [authz_core:error] [pid 24670] [client 172.69.214.242:11198] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Apr 14 05:37:48.604399 2026] [authz_core:error] [pid 24670] [client 172.69.214.242:11198] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Apr 14 05:37:48.789660 2026] [authz_core:error] [pid 24670] [client 172.69.214.242:11198] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack