🇺🇸
factor1
2026-07-26 19:26:11
(4 days ago)
Fail2ban at saturn Reports Abuse.
Bad Web Bot
2026-07-20 09:39:15
(1 week ago)
[Mon Jul 20 11:39:11.656974 2026] [php:error] [pid 3801044] [client 185.198.243.188:31477] script '/ ...
show more
[Mon Jul 20 11:39:11.656974 2026] [php:error] [pid 3801044] [client 185.198.243.188:31477] script '/var/www/boltimore.de/public_html/classwithtostring.php' not found or unable to stat, referer: http://boltimore.de/classwithtostring.php
[Mon Jul 20 11:39:12.055321 2026] [php:error] [pid 3801044] [client 185.198.243.188:31477] script '/var/www/boltimore.de/public_html/txets.php' not found or unable to stat, referer: http://boltimore.de/txets.php
[Mon Jul 20 11:39:14.147543 2026] [php:error] [pid 3801044] [client 185.198.243.188:31477] script '/var/www/boltimore.de/public_html/goods.php' not found or unable to stat, referer: http://boltimore.de/goods.php
[Mon Jul 20 11:39:14.694827 2026] [php:error] [pid 3801044] [client 185.198.243.188:31477] script '/var/www/boltimore.de/public_html/wp-editor.php' not found or unable to stat, referer: http://boltimore.de/wp-editor.php#lufix
[Mon Jul 20 11:39:15.062195 2026] [php:error] [pid 3801044] [client 185.198.243.188:31477] script '/var/www/boltim
...
show less
Bad Web Bot
🇩🇪
Bedios GmbH
2026-07-18 15:57:47
(1 week ago)
Wordpress hacking attempt
Web App Attack
🇮🇹
ciccio diddo
2026-07-18 08:53:32
(1 week ago)
High Burst multiple 40X port:Tcp/80,443
Brute-Force
Web App Attack
🇨🇭
ALPHANET
2026-07-18 03:24:36
(1 week ago)
web exploits
Hacking
Exploited Host
Web App Attack
🇳🇱
DrLex0
2026-07-11 19:42:13
(2 weeks ago)
Poking for WordPress and PHP junk, multiple probes from same 185.198.243.0/24 CLOUVIDER crap range
...
show more
Poking for WordPress and PHP junk, multiple probes from same 185.198.243.0/24 CLOUVIDER crap range
185.198.243.188 80 - [11/Jul/2026:19:42:13 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 404 2383 "-" "Go-http-client/1.1"
show less
DDoS Attack
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-04-24 04:24:41
(3 months ago)
Aggressive web search of vulnerable pages: /wp-includes/classwithtostring.php /wp-content/blue.php / ...
show more
Aggressive web search of vulnerable pages: /wp-includes/classwithtostring.php /wp-content/blue.php /content.php /wp-content/uploads/about.php / ...
show less
Web App Attack
🇺🇸
mnsf
2026-03-04 00:06:22
(4 months ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 12:39:15
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 185.198.243.188 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.198.243.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:39:09.817304 2026] [security2:error] [pid 30802:tid 30802] [client 185.198.243.188:31653] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "russiacoin.info"] [uri "/restore/sftp-config.json"] [unique_id "aZWy7aOPrTThx6p1AK5TbgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-23 10:35:45
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 185.198.243.188 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 185.198.243.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 23 05:35:40.166843 2026] [security2:error] [pid 7236:tid 7236] [client 185.198.243.188:22913] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bitcointradingsquare.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcointradingsquare.com"] [uri "/restore/www.sql"] [unique_id "aXNO_CR-2nD_0QIAYy7usgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-18 16:16:29
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 185.198.243.188 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.198.243.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 18 11:16:23.441649 2025] [security2:error] [pid 29862:tid 29883] [client 185.198.243.188:55575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "liquido.cocoonprojects.com"] [uri "/old/sftp-config.json"] [unique_id "aRyb10QgWRXcekjZaK0MogAAAMo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
island-freaks.com
2025-11-15 08:56:16
(8 months ago)
Attack Type: WordPress Exploit Bot attempt on /wallet.zip | DNS 185.198.243.188 | Agent: none
Port Scan
Hacking
Bad Web Bot
Exploited Host
Web App Attack
🇬🇧
Swiptly
2025-11-10 08:29:40
(8 months ago)
Excessive 403/404/405 PHP/CMS errors from scanning or broken bots
...
Web App Attack
🇮🇹
VHosting
2025-11-10 04:05:07
(8 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇵🇱
Gastro
2025-10-24 05:46:36
(9 months ago)
Mass fake bookings
Fraud Orders