π§πͺ
madeit
2026-09-23 18:00:30
(16 hours ago)
Web App Attack
Anonymous
2026-09-15 13:40:13
(1 week ago)
IP matched detection query many 3xx errors.
Brute-Force
π§πͺ
madeit
2026-09-14 13:56:18
(1 week ago)
Web App Attack
π§πͺ
madeit
2026-08-13 12:54:45
(1 month ago)
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-21 17:03:05
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 172.70.80.215 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.80.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 13:02:59.625192 2026] [security2:error] [pid 13894:tid 13894] [client 172.70.80.215:12698] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.bakerimaging.com|F|2"] [data "[email protected] "] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.bakerimaging.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "al-mQyY3pmWlJ2dUgOYGBAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-07 05:18:18
(2 months ago)
Web App Attack
Brute-Force
Web App Attack
π³π±
COMPLEX
2026-05-27 01:07:33
(3 months ago)
Unsolicited TCP traffic | Action: DROP | Port 443
Phishing
π³π±
wolfemium
2026-05-06 15:00:16
(4 months ago)
172.70.80.215 - - [06/May/2026:18:00:15 +0300] "GET /css.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 ...
show more
172.70.80.215 - - [06/May/2026:18:00:15 +0300] "GET /css.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [06/May/2026:18:00:15 +0300] "GET /222.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [06/May/2026:18:00:15 +0300] "GET /wp-content/index.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [06/May/2026:18:00:15 +0300] "GET /admin.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [06/May/2026:18:00:15 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [06/May/2026:18:00:16 +0300] "GET /classwithtostring.php HTTP/1.1" 502 150 "-" "-"
...
show less
DDoS Attack
Anonymous
2026-05-01 21:39:36
(4 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
π³π±
wolfemium
2026-04-28 19:03:39
(4 months ago)
172.70.80.215 - - [28/Apr/2026:22:03:38 +0300] "GET /te.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 ...
show more
172.70.80.215 - - [28/Apr/2026:22:03:38 +0300] "GET /te.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [28/Apr/2026:22:03:38 +0300] "GET /wp-good.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [28/Apr/2026:22:03:38 +0300] "GET /wp-2019.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [28/Apr/2026:22:03:38 +0300] "GET /X57.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [28/Apr/2026:22:03:38 +0300] "GET /ah25.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [28/Apr/2026:22:03:38 +0300] "GET /grsiuk.php HTTP/1.1" 502 150 "-" "-"
...
show less
DDoS Attack
π©πͺ
Blexyel
2026-04-15 14:11:46
(5 months ago)
172.70.80.215 - - [15/Apr/2026:16:11:44 +0200] "GET /wp-login.php HTTP/1.1" 404 153 "-" "-" "pingusm ...
show more
172.70.80.215 - - [15/Apr/2026:16:11:44 +0200] "GET /wp-login.php HTTP/1.1" 404 153 "-" "-" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
π³π±
wolfemium
2026-04-07 12:17:06
(5 months ago)
172.70.80.215 - - [07/Apr/2026:15:17:05 +0300] "GET /info.php HTTP/1.1" 502 150 "-" "-"
172.70.80.21 ...
show more
172.70.80.215 - - [07/Apr/2026:15:17:05 +0300] "GET /info.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [07/Apr/2026:15:17:05 +0300] "GET /class9.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [07/Apr/2026:15:17:05 +0300] "GET /la.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [07/Apr/2026:15:17:05 +0300] "GET /bless11.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [07/Apr/2026:15:17:05 +0300] "GET /ccou.php HTTP/1.1" 502 150 "-" "-"
172.70.80.215 - - [07/Apr/2026:15:17:06 +0300] "GET /ton.php HTTP/1.1" 502 150 "-" "-"
...
show less
DDoS Attack
πΊπΈ
TPI-Abuse
2026-04-06 18:27:20
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.80.215 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.80.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 14:27:05.129731 2026] [security2:error] [pid 369908:tid 369908] [client 172.70.80.215:12642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.edensgroup.com"] [uri "/.env.bak"] [unique_id "adP6-ZREjYDp07upYqd3UAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-06 17:31:15
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.80.215 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.80.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 13:31:03.226075 2026] [security2:error] [pid 221248:tid 221248] [client 172.70.80.215:12456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "colbygrenier.com.jimgrenier.com"] [uri "/admin/.env"] [unique_id "adPt1wGug84eWF01UbLUvwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-06 03:01:27
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.80.215 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.80.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 23:01:20.174506 2026] [security2:error] [pid 16022:tid 16022] [client 172.70.80.215:10168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.vn-hakunabtanaguan.biz"] [uri "/.env.old"] [unique_id "adMiABWkyFhefVg6ljLDXAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack