This IP address has been reported a total of
6
times from
6 distinct
sources.
192.198.107.126 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Switzerland
with 2
reports;
Czechia
with 1
report;
Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
4
times;
Hacking
2
times;
Bad Web Bot
2
times;
Brute-Force
2
times;
SQL Injection
1
time;
Other
2
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Malicious automated scanner / bot attempted an SQL Injection / DoS probe targeting WordPress REST AP ...
show moreMalicious automated scanner / bot attempted an SQL Injection / DoS probe targeting WordPress REST API endpoints. Blocked by Web Application Firewall (Securitycheck WAF).
Target URL: /
Payload excerpt: /wp/v2/widgets?author_exclude=1111111100000000...
Parameter: POST:requests
Action: Blocked
show less
Bad Web Bot
Exploited Host
Web App Attack
SQL Injection
Hacking
Anonymous
IP matched detection query 20 more in short time bad rqs.
[SatSep1222:59:18.5061382026][security2:error][pid3694602:tid3694705][client192.198.107.126:0]ModSec ...
show more[SatSep1222:59:18.5061382026][security2:error][pid3694602:tid3694705][client192.198.107.126:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:alter\|drop\)\\\\\\\\b[a-z0-9] \\\\\\\\b\(\?:column\|database\|procedure\|table\)\\\\\\\\b\|delete[[:space:]].{1\,100} update[a-z0-9] set.{1\,100} =\|unionallselect\|\\\\\\\\bunion\\\\\\\\b.{1\,100}\?\\\\\\\\bselect\\\\\\\\b.{0\,200}[a-z0-9] from\|select\(\?:load_file\|char\?\\\\\\\\\(\)\|\(\?:insert\|r...\"atARGS:requests[1][body][requests][1][path].[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"315\"][id\"340144\"][rev\"38\"][msg\"Atomicorp.comWAFRules:GenericSQLinjectionprotection2\"][data\"137319\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"www.sanierung-pilzen-schimmel.ch\"][uri\"/\"][unique_id\"aqW9JrBwsfewZzUe20DzpQAAAIo\"]
show less
http-cve-probing - IP: 192.198.107.126 - time="2026-09-12T11:38:15+02:00" level=info msg="(555f66b4 ...
show morehttp-cve-probing - IP: 192.198.107.126 - time="2026-09-12T11:38:15+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-cve-probing by ip 192.198.107.126 (US/55286) : 4h ban on Ip 192.198.107.126" module=db
show less
