🇺🇸
TPI-Abuse
2026-10-27 02:36:45
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swi ...
show more
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 22:36:39.213400 2026] [security2:error] [pid 2972:tid 2972] [client 178.198.76.175:51278] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pa-ksa.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Umjkhvfhv.dat"] [unique_id "auAONwptDsNWghwwQiw-ywAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 01:25:28
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swi ...
show more
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 21:25:20.681308 2026] [security2:error] [pid 32505:tid 32505] [client 178.198.76.175:41948] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pa-ksa.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Dxmnp.dll"] [unique_id "asw3ADSqu4aZPXQPijnU5wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-27 05:11:59
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swi ...
show more
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 01:11:55.669515 2026] [security2:error] [pid 9822:tid 9822] [client 178.198.76.175:46694] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pa-ksa.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Zqxmwhflnje.dll"] [unique_id "arilm7dSxvVdHSf8uQBBTQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 00:47:20
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swi ...
show more
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 20:47:16.649506 2026] [security2:error] [pid 31460:tid 31460] [client 178.198.76.175:53928] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pa-ksa.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Vovaf.dat"] [unique_id "apy4FBRYwLXTa0IP6c5eXgAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 12:14:08
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swi ...
show more
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 08:14:02.537192 2026] [security2:error] [pid 13956:tid 13956] [client 178.198.76.175:52208] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pa-ksa.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Zqxmwhflnje.dll"] [unique_id "aoGpiiuZJ-9s3hjiQU0OKAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇷
Mateo Smud
2026-08-07 20:50:07
(2 months ago)
Honeypot [smud-honeypot]: Unauthorized traffic (147 bytes of payload); 55000 [7] TCP
Reported by: ht ...
show more
Honeypot [smud-honeypot]: Unauthorized traffic (147 bytes of payload); 55000 [7] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Port Scan
🇺🇸
TPI-Abuse
2026-07-12 16:52:31
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swi ...
show more
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 12:52:26.001155 2026] [security2:error] [pid 5458:tid 5458] [client 178.198.76.175:43390] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pa-ksa.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Umjkhvfhv.dat"] [unique_id "alPGSSu9EDYgcNZGAFjpwAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 02:58:57
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swi ...
show more
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 22:58:53.576134 2026] [security2:error] [pid 8280:tid 8280] [client 178.198.76.175:54830] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pa-ksa.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Inyxrm.dat"] [unique_id "ai4Y7VaQ3FdnEvIelA7lUwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
podril1ak2.ru
2026-05-26 00:54:44
(5 months ago)
Blocked by UFW [80/tcp] | SPT: 36396 | TTL: 52 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefin ...
show more
Blocked by UFW [80/tcp] | SPT: 36396 | TTL: 52 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇩🇪
podril1ak2.ru
2026-05-24 01:30:44
(5 months ago)
Blocked by UFW [80/tcp] | SPT: 44948 | TTL: 52 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefin ...
show more
Blocked by UFW [80/tcp] | SPT: 44948 | TTL: 52 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇩🇪
podril1ak2.ru
2026-05-22 19:22:43
(5 months ago)
Blocked by UFW [80/tcp] | SPT: 60908 | TTL: 52 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefin ...
show more
Blocked by UFW [80/tcp] | SPT: 60908 | TTL: 52 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇩🇪
podril1ak2.ru
2026-05-20 07:14:05
(5 months ago)
Blocked by UFW [80/tcp] | SPT: 53720 | TTL: 52 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefin ...
show more
Blocked by UFW [80/tcp] | SPT: 53720 | TTL: 52 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
TPI-Abuse
2026-05-17 11:58:46
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swi ...
show more
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 07:58:41.174018 2026] [security2:error] [pid 31383:tid 31383] [client 178.198.76.175:36972] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pa-ksa.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Inyxrm.dat"] [unique_id "agmtcWuom1y2AM9rzdPCpAAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇳
ThreatBook.io
2026-04-21 22:15:49
(6 months ago)
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/178.198.76.175
2 ...
show more
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/178.198.76.175
2026-04-21 20:32:20 /02.08.2022.exe
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-04-14 08:56:47
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swi ...
show more
(mod_security) mod_security (id:210730) triggered by 178.198.76.175 (175.76.198.178.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 04:56:40.213811 2026] [security2:error] [pid 3620661:tid 3620661] [client 178.198.76.175:44706] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pa-ksa.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Xfybnwg.dat"] [unique_id "ad4BSAHeebD-lvI1OOxEqwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
