🇩🇪
stinpriza
2026-07-20 11:09:45
(2 days ago)
Web App Attack
Web App Attack
🇩🇪
rh24
2026-07-06 15:33:14
(2 weeks ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 157.22.100.228 (SC/S ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 157.22.100.228 (SC/Seychelles/-)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-04 22:14:55
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 157.22.100.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.100.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 18:14:51.773945 2026] [security2:error] [pid 3900:tid 3907] [client 157.22.100.228:53725] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paidsearchconsulting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paidsearchconsulting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akmF24MvdSV6lZiB8BO_oAAAAEE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-29 10:55:37
(3 weeks ago)
Fail2Ban banned 157.22.100.228 for security violations in jail wp-armour. Log: 2026/06/29 10:55:37 [ ...
show more
Fail2Ban banned 157.22.100.228 for security violations in jail wp-armour. Log: 2026/06/29 10:55:37 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.100.228 | Target: wplogin" , client: 157.22.100.228, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-27 07:02:08
(3 weeks ago)
Fail2Ban banned 157.22.100.228 for security violations in jail wp-armour. Log: 2026/06/27 07:02:07 [ ...
show more
Fail2Ban banned 157.22.100.228 for security violations in jail wp-armour. Log: 2026/06/27 07:02:07 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.100.228 | Target: wplogin" , client: 157.22.100.228, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇨🇿
ptlab
2026-06-26 16:45:55
(3 weeks ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 23:14:57
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 157.22.100.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.100.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 19:14:49.595820 2026] [security2:error] [pid 17035:tid 17035] [client 157.22.100.228:30327] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||leveeboard.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "leveeboard.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajhwaY9ssbJ5NoaQnTjP6wAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 03:46:19
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 157.22.100.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.100.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 23:46:15.838025 2026] [security2:error] [pid 12780:tid 12780] [client 157.22.100.228:45453] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jmnr.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jmnr.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajdeh7i9dvM-UcQusQGH8AAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-05-26 14:23:22
(1 month ago)
http-bad-user-agent - IP: 157.22.100.228 - time="2026-05-26T16:23:22+02:00" level=info msg="(555f66 ...
show more
http-bad-user-agent - IP: 157.22.100.228 - time="2026-05-26T16:23:22+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 157.22.100.228 (RU/213954) : 4h ban on Ip 157.22.100.228" module=db
show less
Bad Web Bot
🇨🇭
4server
2026-05-18 22:28:18
(2 months ago)
[TueMay1900:28:13.2026062026][security2:error][pid1311398:tid1311404][client157.22.100.228:0]ModSecu ...
show more
[TueMay1900:28:13.2026062026][security2:error][pid1311398:tid1311404][client157.22.100.228:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"larademarco.ch\"][uri\"/robots.txt\"][unique_id\"aguSffspiMyd94zpLQjI8gAAAQQ\"]
show less
Hacking
Web App Attack
🇸🇪
SkyDancer
2026-05-18 09:05:10
(2 months ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH
🇬🇧
djboddington
2026-05-12 12:02:07
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-11 01:27:36
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.100.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.100.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 21:27:30.517503 2026] [security2:error] [pid 3858:tid 3858] [client 157.22.100.228:53331] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nekstlevel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nekstlevel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agEwgtsShuFtgxfwrko3iAAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 19:51:09
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.100.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.100.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 15:51:03.405200 2026] [security2:error] [pid 10151:tid 10151] [client 157.22.100.228:52359] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||scpublicity.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "scpublicity.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ac13J4b8JTcfsLt6ylvAjgAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 21:26:44
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.100.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.100.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 17:26:38.523125 2026] [security2:error] [pid 2088:tid 2088] [client 157.22.100.228:13129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||millmade.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "millmade.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acRTDlLVh7W9zNYSa5daawAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack