🇫🇷
dynamix
2026-07-28 16:52:36
(8 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 10:21:10
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 157.22.47.88 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.47.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 06:21:05.789695 2026] [security2:error] [pid 9616:tid 9616] [client 157.22.47.88:24231] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rivendells.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rivendells.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amiCkccdxDRyBJpUtLt6gQAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 09:07:54
(1 week ago)
(mod_security) mod_security (id:218580) triggered by 157.22.47.88 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:218580) triggered by 157.22.47.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 05:07:49.701586 2026] [security2:error] [pid 136126:tid 136126] [client 157.22.47.88:46077] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\*[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:filter_distinct. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.||powerkiteforum.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "powerkiteforum.com"] [uri "/search.php"] [unique_id "al825WWYkobMzSGvo_VFSwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 07:29:29
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 157.22.47.88 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.47.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 03:29:25.372179 2026] [security2:error] [pid 19921:tid 19921] [client 157.22.47.88:60469] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||winders.name|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "winders.name"] [uri "/wp-json/wp/v2/users"] [unique_id "al8f1dMVAD9NLatdZiSyxgAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 06:56:19
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 157.22.47.88 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.47.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 02:56:16.193338 2026] [security2:error] [pid 4095018:tid 4095018] [client 157.22.47.88:58803] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jeffr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jeffr.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al8YEMFaQ9W94iIetDhetQAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-21 01:37:52
(1 week ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇦
DRI
2026-07-16 16:52:37
(1 week ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 15:32:40
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 157.22.47.88 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.47.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 11:32:33.838407 2026] [security2:error] [pid 5369:tid 5452] [client 157.22.47.88:35395] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||andeanbouquet.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "andeanbouquet.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajAbERKqOfCYaLnSeDPTeQAAAco"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-06-12 00:06:34
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇧🇷
ICS Labs
2026-06-03 12:37:31
(1 month ago)
ICS Labs identified 157.22.47.88 as a malicious indicator from threat intelligence.
DDoS Attack
Hacking
Exploited Host
2026-06-02 02:47:45
(1 month ago)
FPROCO WEBEXPLOIT 157.22.47.88 (157.22.47.88)
Web App Attack
🇩🇪
kjaerulff
2026-05-14 18:06:22
(2 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇩🇪
ghostwarriors
2026-05-12 09:52:12
(2 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-05-06 14:20:18
(2 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-05-01 00:23:54
(2 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack