JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.22.101.198

157.22.101.198 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 21%: ?

21%

ISP	Atlas Network Holdings LLC
Usage Type	Fixed Line ISP
ASN	AS213954
Domain Name	atlasnetworkholdings.online
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.22.101.198

Whois 157.22.101.198

IP Abuse Reports for 157.22.101.198:

This IP address has been reported a total of 18 times from 9 distinct sources. 157.22.101.198 was first reported on December 27th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-10 19:27:57 (3 hours ago)	(mod_security) mod_security (id:225170) triggered by 157.22.101.198 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 157.22.101.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 15:27:54.472117 2026] [security2:error] [pid 10343:tid 10343] [client 157.22.101.198:29091] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ieas.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ieas.org"] [uri "/wp-json/wp/v2/users"] [unique_id "alFHuuN8pF2_pE5vWnPMPwAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 electronico	2026-06-30 10:01:44 (1 week ago)	157.22.101.198 - - [30/Jun/2026:21:01:43 +1100] "POST /xmlrpc.php HTTP/1.1" 404 5672 "-" "Apache-Htt ... show more 157.22.101.198 - - [30/Jun/2026:21:01:43 +1100] "POST /xmlrpc.php HTTP/1.1" 404 5672 "-" "Apache-HttpClient/4.5.13 (Java/11.0.31)" ... show less	Brute-Force Web App Attack
🇫🇷 Tilellit.PRO	2026-06-28 06:53:21 (1 week ago)	Fail2Ban banned 157.22.101.198 for security violations in jail wp-armour. Log: 2026/06/28 06:53:21 [ ... show more Fail2Ban banned 157.22.101.198 for security violations in jail wp-armour. Log: 2026/06/28 06:53:21 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.101.198 \| Target: wplogin" , client: 157.22.101.198, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 Tilellit.PRO	2026-06-25 18:41:47 (2 weeks ago)	Fail2Ban banned 157.22.101.198 for security violations in jail wp-armour. Log: 2026/06/25 18:41:47 [ ... show more Fail2Ban banned 157.22.101.198 for security violations in jail wp-armour. Log: 2026/06/25 18:41:47 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.101.198 \| Target: wplogin" , client: 157.22.101.198, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 Tilellit.PRO	2026-05-21 15:11:54 (1 month ago)	Fail2Ban banned 157.22.101.198 for security violations in jail wp-armour. Log: 2026/05/21 15:11:53 [ ... show more Fail2Ban banned 157.22.101.198 for security violations in jail wp-armour. Log: 2026/05/21 15:11:53 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.101.198 \| Target: wplogin" , client: 157.22.101.198, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 kosada.com	2026-05-03 12:45:29 (2 months ago)	Web password guessing	Brute-Force
Anonymous	2026-05-02 21:20:15 (2 months ago)	PARMACOM WEBEXPLOIT 157.22.101.198 (157.22.101.198)	Web App Attack
🇺🇸 ambor	2026-03-31 08:02:46 (3 months ago)	Honeypot access: WordPress admin access attempt. Path: /wp-login.php	Brute-Force Web App Attack
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (5 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇫🇷 masterguru	2026-01-27 03:52:18 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.101.198 (FI/Finland/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.101.198 (FI/Finland/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-01-24 15:39:09 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.101.198 (FI/Finland/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.101.198 (FI/Finland/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-01-23 02:09:46 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.101.198 (FI/Finland/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.101.198 (FI/Finland/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-01-20 20:47:24 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.101.198 (FI/Finland/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.101.198 (FI/Finland/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-01-18 10:10:38 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.101.198 (FI/Finland/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.101.198 (FI/Finland/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-01-13 19:53:57 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.101.198 (FI/Finland/-): 1 in the last 3 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.101.198 (FI/Finland/-): 1 in the last 3600 secs (0-195) show less	Hacking

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇾 167.58.77.0

🇧🇷 201.182.60.103

🇺🇦 188.163.5.19

🇭🇰 165.154.245.138

🇮🇩 163.7.14.157

🇿🇦 154.16.95.92

🇭🇰 150.5.132.231

🇰🇿 145.255.178.225

🇺🇸 142.251.153.119

🇸🇬 139.162.31.82

🇨🇳 123.178.210.6

🇩🇪 49.51.142.198

🇰🇷 222.109.32.121

🇬🇧 165.227.229.113

🇭🇰 150.5.133.169

🇯🇵 124.156.214.177

🇬🇧 123.58.207.140

🇭🇰 118.193.45.134

🇰🇷 115.89.243.42

🇨🇳 113.116.106.198