This IP address has been reported a total of
11
times from
9 distinct
sources.
54.198.40.55 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
BAD BOT - Detected and Blocked.. Matched phrase "dotbot" at REQUEST_HEADERS:User-agent. (1100000-122 ...
show moreBAD BOT - Detected and Blocked.. Matched phrase "dotbot" at REQUEST_HEADERS:User-agent. (1100000-122)
show less
[SatJul1804:11:19.1345542026][security2:error][pid2893385:tid2893407][client54.198.40.55:0]ModSecuri ...
show more[SatJul1804:11:19.1345542026][security2:error][pid2893385:tid2893407][client54.198.40.55:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"bno.ch\"][uri\"/robots.txt\"][unique_id\"alrgxxhgG1KcX0COsh6aXQAAABM\"]
show less
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.198.40.55 (US/Uni ...
show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.198.40.55 (US/United States/ec2-54-198-40-55.compute-1.amazonaws.com)
show less
[FriJul1708:43:18.7374082026][security2:error][pid1625158:tid1625185][client54.198.40.55:0]ModSecuri ...
show more[FriJul1708:43:18.7374082026][security2:error][pid1625158:tid1625185][client54.198.40.55:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"sanierung-pilzen-schimmel.ch\"][uri\"/robots.txt\"][unique_id\"alnPBscWaxBLYmWNKPHgYAAAANg\"]
show less
[FriJul1707:03:14.0131762026][security2:error][pid2945271:tid2945283][client54.198.40.55:0]ModSecuri ...
show more[FriJul1707:03:14.0131762026][security2:error][pid2945271:tid2945283][client54.198.40.55:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"distributori-automatici-ticino.ch\"][uri\"/robots.txt\"][unique_id\"alm3kf5vrQnDShbAANHZbgAAAEI\"]
show less
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 54.198.40.55 (US/United States/ec2-5 ...
show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 54.198.40.55 (US/United States/ec2-54-198-40-55.compute-1.amazonaws.com): 1 in the last 3600 secs
show less
Web App Attack
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩