Total reports
9 from
6 distinct
reporters
First reported
April 17th 2026
Most recent report
16 hours ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
2
🇬🇧
United Kingdom of Great Britain and Northern Ireland
1
Most common categories
Bad Web Bot
2
Web App Attack
2
Brute-Force
2
Hacking
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇬🇧
abivia
2026-11-13 17:07:36
UTC ·
(16 hours ago)
Abivia WAF trigger: Rule scriptKiddies: Probing for vulnerabilities uri: /oembed.php?url=https%3A%2F%2Fambitonline.com%2Fnextrelease%2F2014%2F10%2Fscam-day-searchregistry-org-domain-search-registration%2F&format=xml
Hacking
🇺🇸
TPI-Abuse
2026-10-29 01:38:16
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.46.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 21:38:10.404447 2026] [security2:error] [pid 4652:tid 4652] [client 157.22.46.159:36835] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.46.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 21:38:10.404447 2026] [security2:error] [pid 4652:tid 4652] [client 157.22.46.159:36835] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "alexgitlin.com"] [uri "/fox.html"] [unique_id "auKjgjczUSoZgUaiZIg89AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 20:45:09
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.46.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:45:04.360048 2026] [security2:error] [pid 15039:tid 15039] [client 157.22.46.159:14653] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.46.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:45:04.360048 2026] [security2:error] [pid 15039:tid 15039] [client 157.22.46.159:14653] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bigchus.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bigchus.com"] [uri "/caleidoscopia/index.php/"] [unique_id "auJe0HOEz9_YqAednmQwYAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-29 08:59:09
UTC ·
(2 months ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
🇪🇸
librebit
2026-08-27 08:43:37
UTC ·
(2 months ago)
Brute force
Brute-Force
2026-08-20 23:03:56
UTC ·
(2 months ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 15:10:32
UTC ·
(5 months ago)
(mod_security) mod_security (id:218580) triggered by 157.22.46.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 11:10:28.438849 2026] [security2:error] [pid 28692:tid 28692] [client 157.22.46.159:15361] M ...
show more
(mod_security) mod_security (id:218580) triggered by 157.22.46.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 11:10:28.438849 2026] [security2:error] [pid 28692:tid 28692] [client 157.22.46.159:15361] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\*[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:d. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.||www.caferutadelaseda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.caferutadelaseda.com"] [uri "/detalle.php"] [unique_id "ahBx5AUNFW87Ms3Mk3qskwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
inlink.ltd
2026-05-20 09:20:22
UTC ·
(5 months ago)
Known malicious PHP file or CMS probe
Web App Attack
🇺🇸
nationaleventpros.com
2026-04-17 10:52:31
UTC ·
(6 months ago)
WordPress login attempt
Brute-Force
