2026-09-02 12:03:58
(5 days ago)
Web attack
Bad Web Bot
Web App Attack
2025-08-03 05:32:45
(1 year ago)
[06:32:45] 0: Scanning for exploits - /archive.zip (Repeat abuser, 2 other attacks previously record ...
show more
[06:32:45] 0: Scanning for exploits - /archive.zip (Repeat abuser, 2 other attacks previously recorded.)
show less
Bad Web Bot
Web App Attack
🇨🇳
ThreatBook.io
2025-07-19 23:27:22
(1 year ago)
ThreatBook Intelligence: Zombie,DNS more details on https://threatbook.io/ip/198.57.247.199
2025-07- ...
show more
ThreatBook Intelligence: Zombie,DNS more details on https://threatbook.io/ip/198.57.247.199
2025-07-19 13:04:22 /wp-config.php~
2025-07-19 13:04:19 /wp-config.php_old
2025-07-19 13:04:21 /wp-config.php-old
2025-07-19 13:04:22 /wp-config.php.backup
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-07-19 08:41:17
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 198.57.247.199 (gator3235.hostgator.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 198.57.247.199 (gator3235.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 04:41:10.697903 2025] [security2:error] [pid 9548:tid 9548] [client 198.57.247.199:18218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isjustabitch.com"] [uri "/wp-config.php_old"] [unique_id "aHtaJshIEH6-D43jXsqGFwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 07:27:31
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 198.57.247.199 (gator3235.hostgator.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 198.57.247.199 (gator3235.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 03:27:24.391161 2025] [security2:error] [pid 14642:tid 14642] [client 198.57.247.199:12198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goodfor247.com"] [uri "/wp-config.php.old"] [unique_id "aHn3XAf4HEq8i58r3mqtvAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
dwmosaics
2025-07-16 22:01:31
(1 year ago)
"GET /wp-config.phpold HTTP/1.1" 301 539 "-" "-"
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-16 21:31:26
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 198.57.247.199 (gator3235.hostgator.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 198.57.247.199 (gator3235.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 17:31:22.446782 2025] [security2:error] [pid 21722:tid 21722] [client 198.57.247.199:23008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/wp-config.php.old"] [unique_id "aHgaKm-iaR8AwR4GN0q5KwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-07-16 16:30:50
(1 year ago)
Failed login attempt detected by Fail2Ban in recidive jail
Brute-Force
🇺🇸
TPI-Abuse
2025-07-14 21:29:09
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 198.57.247.199 (gator3235.hostgator.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 198.57.247.199 (gator3235.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 17:29:05.349539 2025] [security2:error] [pid 22879:tid 22879] [client 198.57.247.199:16840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "the-board-shop.com"] [uri "/wp-config.php.old"] [unique_id "aHV2oW0kPhj1ZmmoPPCmsgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
juutis
2025-07-14 00:55:04
(1 year ago)
Multiple WAF abuses - IP blocked
Hacking
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-07-13 22:00:08
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-07-13 20:25:51
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-07-12 06:30:08
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇸🇬
anotherwatcher
2025-07-11 15:36:02
(1 year ago)
bad bot
Bad Web Bot
🇺🇸
TPI-Abuse
2025-07-11 11:08:28
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 198.57.247.199 (gator3235.hostgator.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 198.57.247.199 (gator3235.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 07:08:20.755103 2025] [security2:error] [pid 21568:tid 21568] [client 198.57.247.199:44808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paul4taxes.com"] [uri "/wp-config.php.old"] [unique_id "aHDwpA-9tyABkvugFaaZ6QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
