Total reports
6 from
2 distinct
reporters
First reported
November 2nd 2026
Most recent report
2 days ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
5
🇪🇸
Spain
1
Most common categories
Brute-Force
6
Web App Attack
5
Bad Web Bot
5
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-11-13 10:43:35
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.125.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:43:29.330469 2026] [security2:error] [pid 1149:tid 1149] [client 157.22.125.217:30745] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.125.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:43:29.330469 2026] [security2:error] [pid 1149:tid 1149] [client 157.22.125.217:30745] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.verdeprofundo.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.verdeprofundo.net"] [uri "/con-mi-pensamiento-sigo-el-movimiento-de-los-peces-bajo-el-agua/"] [unique_id "avbp0RHQbaPYBXKGYqwW_wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 12:21:12
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.125.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:21:06.881102 2026] [security2:error] [pid 6688:tid 6688] [client 157.22.125.217:13135] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.125.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:21:06.881102 2026] [security2:error] [pid 6688:tid 6688] [client 157.22.125.217:13135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bikinipageone.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bikinipageone.com"] [uri "/reality/ghg/16/22.htm"] [unique_id "avRdsj-u3-G0U95laoCORwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 07:29:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.125.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 02:29:40.742204 2026] [security2:error] [pid 415059:tid 415151] [client 157.22.125.217:5570 ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.125.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 02:29:40.742204 2026] [security2:error] [pid 415059:tid 415151] [client 157.22.125.217:55701] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||baronlongford.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "baronlongford.com"] [uri "/News.html"] [unique_id "au2B5CNtEZunDADVMa-W3wAAAko"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 04:02:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.125.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:02:15.073721 2026] [security2:error] [pid 435:tid 435] [client 157.22.125.217:49803] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.125.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:02:15.073721 2026] [security2:error] [pid 435:tid 435] [client 157.22.125.217:49803] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/category/commentary/afd-local/page/3/"] [unique_id "au1RRxyi_j5-G401SIj8LAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-03 06:49:46
UTC ·
(1 week ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-11-02 14:27:27
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.125.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:27:21.898199 2026] [security2:error] [pid 25659:tid 25659] [client 157.22.125.217:60331] ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.125.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:27:21.898199 2026] [security2:error] [pid 25659:tid 25659] [client 157.22.125.217:60331] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.muslera.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.muslera.com"] [uri "/primera/somao.htm"] [unique_id "auidyYjJ5pZEuCd0KtJt4AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
