This IP address has been reported a total of
2
times from
2 distinct
sources.
176.149.198.183 was first reported on
September 5th 2026 , and the most recent report was
1 month ago United States of America
with 2
reports.
The most common categories in these recent reports were:
SQL Injection
1
time;
Web App Attack
1
time;
Bad Web Bot
1
time;
Brute-Force
1
time.
Old Reports
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
eacontent
2026-09-09 09:14:00
(1 month ago)
[Wed Sep 09 02:08:34.997375 2026] [security2:error] [pid 4537:tid 4752] [client 176.149.198.183:3809 ...
show more
[Wed Sep 09 02:08:34.997375 2026] [security2:error] [pid 4537:tid 4752] [client 176.149.198.183:38096] [client 176.149.198.183] ModSecurity: Warning. detected SQLi using libinjection with fingerprint 's&1UE' [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "43"] [id "942100"] [rev "1"] [msg "SQL Injection Attack Detected via libinjection"] [data "Matched Data: s&1UE found within ARGS:db_type: 1' AND 1=1 UNION SELECT NULL-- -"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "1"] [accuracy "8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "catalog.onesourceofnj.com"] [uri "/subscribe/show_product.php"] [unique_id "aqD34qqPU8nOo51fgFw-7AAAAwY"]
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-09-05 04:56:35
(1 month ago)
(mod_security) mod_security (id:220150) triggered by 176.149.198.183 (176-149-198-183.abo.bbox.fr): ...
show more
(mod_security) mod_security (id:220150) triggered by 176.149.198.183 (176-149-198-183.abo.bbox.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 00:56:31.045852 2026] [security2:error] [pid 24967:tid 24967] [client 176.149.198.183:41530] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\*.*\\\\*\\\\/)?select)" at ARGS:order. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5671"] [id "220150"] [rev "4"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||kountz.org|F|2"] [data "')/**/and/**/('jtytvn'='jtytvn'/**/union/**/all/**/select/**/'logvhwxnrbwqczhjicybhizclfccaywu'--/**/rukgcs"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kountz.org"] [uri "/famsearch.php"] [unique_id "apug_z00RL9kMCmINS8WawAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
2
of 2 reports
