Total reports
7 from
4 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
🇩🇪
Tamsy
|
|
HTTPD - 4xx scan
|
Web App Attack
|
|
🇩🇪
FeG Deutschland
|
|
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
|
Exploited Host
Web App Attack
|
|
🇨🇿
SystemAdmin
|
|
Doing bad things...
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 178.105.131.220 (static.220.131.105.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 00:32:58.382518 2026] [security2:error] [pid 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 178.105.131.220 (static.220.131.105.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 00:32:58.382518 2026] [security2:error] [pid 16669:tid 16669] [client 178.105.131.220:41182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fusionrep.com"] [uri "/wp-config.php.bak"] [unique_id "aqob-hkodW60BPMA9zaHkAAAABU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 178.105.131.220 (static.220.131.105.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 07:01:32.016379 2026] [security2:error] [pid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 178.105.131.220 (static.220.131.105.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 07:01:32.016379 2026] [security2:error] [pid 27420:tid 27420] [client 178.105.131.220:56386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drgtek.com"] [uri "/wp-config.php.bak"] [unique_id "aqkljPXb4jNT3i4lWpss0wAAABE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 178.105.131.220 (static.220.131.105.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 17:54:44.360987 2026] [security2:error] [pid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 178.105.131.220 (static.220.131.105.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 17:54:44.360987 2026] [security2:error] [pid 29420:tid 29420] [client 178.105.131.220:41696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ismaelcavazos.com"] [uri "/wp-config.php.bak"] [unique_id "aqR4pNHeJyQ_hyeaq49cbgAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 178.105.131.220 (static.220.131.105.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 16:19:35.820021 2026] [security2:error] [pid 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 178.105.131.220 (static.220.131.105.178.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 16:19:35.820021 2026] [security2:error] [pid 18100:tid 18100] [client 178.105.131.220:45706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ohanameetup.party"] [uri "/wp-config.php.bak"] [unique_id "aqRiV9fYyxuaiJJuecr2FQAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
