JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.113.157.22

154.113.157.22 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 17%: ?

17%

ISP	Main one Cable Company Nigeria Limited
Usage Type	Fixed Line ISP
ASN	AS37282
Domain Name	mainone.net
Country	🇳🇬 Nigeria
City	Abeokuta, Ogun State

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.113.157.22

Whois 154.113.157.22

IP Abuse Reports for 154.113.157.22:

This IP address has been reported a total of 47 times from 31 distinct sources. 154.113.157.22 was first reported on December 24th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-25 15:27:48 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 154.113.157.22 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 154.113.157.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 11:27:44.594791 2026] [security2:error] [pid 14590:tid 14590] [client 154.113.157.22:48050] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|flatchestedmama.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "flatchestedmama.com"] [uri "/"] [unique_id "at4f8NxhJvxykuWJeozACAAAAAA"], referer: https://starheadboy.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-26 15:32:22 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 16:16:51 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-07 09:36:30 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A313&f%5B1%5D=digest_key_terms%3A323&f%5B2%5D=digest_key_terms%3A334&f%5B3%5D=digest_key_terms%3A347&f%5B4%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B495%5D=495 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-08-15 22:31:37 (2 months ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇺🇸 kosada.com	2026-07-31 15:46:23 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 stechusa	2026-07-05 14:17:07 (3 months ago)	[Askari] \| country=NG \| ASN=Main one Cable Company Nigeria Limited	Bad Web Bot DDoS Attack
🇺🇸 kosada.com	2026-06-29 09:30:33 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇬🇧 Nov	2026-06-03 02:03:52 (4 months ago)	Unauthorized HTTP access attempt (tcp/80)	Port Scan
Anonymous	2026-06-03 00:16:46 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 MPL	2026-05-10 17:40:31 (5 months ago)	tcp/23	Port Scan
🇺🇸 MPL	2026-05-10 16:29:18 (5 months ago)	tcp/23 (2 or more attempts)	Port Scan
🇨🇭 backslash	2026-05-06 13:33:00 (5 months ago)	block ruleset 333FBABBA6DC06D7D20EDF60700DF5D9612E6F09	Bad Web Bot
Anonymous	2026-03-01 11:00:11 (7 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-02-27 15:24:09 (7 months ago)	IM360 WAF: SQL Injection Attack: Common DB Names Detected	SQL Injection

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2603:3026:285:6100:300c:dcb6:6df9:2187

🇺🇸 162.216.150.238

🇺🇸 91.230.168.168

🇳🇱 77.67.26.235

🇩🇪 3.64.4.229

🇳🇱 162.159.113.8

🇺🇸 147.185.132.77

🇨🇳 119.99.248.56

🇨🇳 112.51.27.82

🇮🇳 103.248.120.6

🇷🇺 95.81.76.13

🇮🇹 79.51.207.249

🇺🇸 50.88.100.68

🇬🇧 45.82.76.128

🇧🇪 34.34.168.6

🇬🇧 217.146.80.102

🇺🇸 206.171.40.141

🇧🇷 138.117.204.130

🇺🇸 20.80.75.148

🇨🇳 14.159.140.225