JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.22.100.223

157.22.100.223 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 24%: ?

24%

ISP	Atlas Network Holdings LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213954
Domain Name	atlasnetworkholdings.online
Country	🇷🇺 Russian Federation
City	Kaliningrad, Kaliningrad Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.22.100.223

Whois 157.22.100.223

IP Abuse Reports for 157.22.100.223:

This IP address has been reported a total of 6 times from 4 distinct sources. 157.22.100.223 was first reported on March 4th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nyt	2026-06-21 22:46:20 (13 hours ago)	XMLRPC Attack, WP User Enumeration, WP Author Enumeration	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-20 14:03:43 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 157.22.100.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 157.22.100.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 10:03:36.092140 2026] [security2:error] [pid 6500:tid 6755] [client 157.22.100.223:34215] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bakmail.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bakmail.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajaduJVwAvlAAGQIYHaRdwAAAEs"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-05-27 17:59:01 (3 weeks ago)	http-bad-user-agent - IP: 157.22.100.223 - time="2026-05-27T19:59:01+02:00" level=info msg="(555f66 ... show more http-bad-user-agent - IP: 157.22.100.223 - time="2026-05-27T19:59:01+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 157.22.100.223 (RU/213954) : 4h ban on Ip 157.22.100.223" module=db show less	Bad Web Bot
🇨🇭 Origon	2026-05-13 11:21:06 (1 month ago)	http-bad-user-agent - IP: 157.22.100.223 - time="2026-05-13T13:21:06+02:00" level=info msg="(555f66 ... show more http-bad-user-agent - IP: 157.22.100.223 - time="2026-05-13T13:21:06+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 157.22.100.223 (RU/213954) : 4h ban on Ip 157.22.100.223" module=db show less	Bad Web Bot
🇩🇪 kjaerulff	2026-05-10 13:42:22 (1 month ago)	Failed Wordpress login using xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-03-04 15:51:35 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 157.22.100.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 157.22.100.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 10:51:14.740070 2026] [security2:error] [pid 8723:tid 8723] [client 157.22.100.223:21139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.tmp" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.csm-dtc.com"] [uri "/wp-config.tmp"] [unique_id "aahU8spHdQ0pVhUyXq8IJwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c72::12b

🇺🇸 209.222.101.194

🇳🇱 204.76.203.219

🇨🇳 110.43.37.72

🇷🇸 109.207.35.145

🇮🇩 103.184.181.33

🇲🇾 49.124.152.225

🇲🇾 49.124.152.32

🇪🇸 212.227.235.203

🇷🇴 193.46.255.86

🇫🇷 85.217.140.22

🇳🇱 45.148.10.141

🇨🇳 14.103.115.213

🇫🇷 5.196.45.10

🇬🇧 2a06:4880:c000::e7

🇩🇪 212.132.119.238

🇨🇳 182.43.235.75

🇨🇭 107.189.2.75

🇫🇷 91.231.89.228

🇫🇷 85.217.140.50