JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.22.102.13

157.22.102.13 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 23%: ?

23%

ISP	Atlas Network Holdings LLC
Usage Type	Fixed Line ISP
ASN	AS213954
Domain Name	atlasnetworkholdings.online
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.22.102.13

Whois 157.22.102.13

IP Abuse Reports for 157.22.102.13:

This IP address has been reported a total of 14 times from 8 distinct sources. 157.22.102.13 was first reported on December 29th 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-07-07 03:22:59 (12 hours ago)	http-bad-user-agent - IP: 157.22.102.13 - time="2026-07-07T05:22:59+02:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 157.22.102.13 - time="2026-07-07T05:22:59+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 157.22.102.13 (RU/213954) : 4h ban on Ip 157.22.102.13" module=db show less	Bad Web Bot
🇩🇪 rh24	2026-07-07 03:06:58 (12 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 157.22.102.13 (SC/Se ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 157.22.102.13 (SC/Seychelles/-) show less	Bad Web Bot
🇩🇪 4server	2026-07-02 22:01:30 (4 days ago)	[FriJul0300:01:28.1347202026][security2:error][pid3521336:tid3521361][client157.22.102.13:0]ModSecur ... show more [FriJul0300:01:28.1347202026][security2:error][pid3521336:tid3521361][client157.22.102.13:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"thilyatecnologie.ch\"][uri\"/\"][unique_id\"akbfuA416Ac4vHYGPyMLxAAAAAc\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-05-18 23:12:17 (1 month ago)	[TueMay1901:12:14.8096912026][security2:error][pid1937556:tid1937607][client157.22.102.13:0]ModSecur ... show more [TueMay1901:12:14.8096912026][security2:error][pid1937556:tid1937607][client157.22.102.13:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ponzellini.ch\"][uri\"/robots.txt\"][unique_id\"aguczkBIFbtkXKQN9yNvrgAAAE8\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-05-11 05:04:56 (1 month ago)	[MonMay1107:04:52.9479032026][security2:error][pid3175452:tid3175472][client157.22.102.13:0]ModSecur ... show more [MonMay1107:04:52.9479032026][security2:error][pid3175452:tid3175472][client157.22.102.13:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"shakary.com\"][uri\"/robots.txt\"][unique_id\"agFjdL2BY_5fb7teEO3eDwAAAFI\"] show less	Hacking Web App Attack
🇩🇪 rh24	2026-05-07 02:00:06 (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 157.22.102.13 (SC/Se ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 157.22.102.13 (SC/Seychelles/-) show less	Bad Web Bot
Anonymous	2026-03-27 04:40:10 (3 months ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇩🇪 LRob	2026-03-21 14:00:19 (3 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-03-19 00:53:08 (3 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇩🇪 big-cloud.nl	2026-03-18 18:01:22 (3 months ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 LRob	2026-03-18 08:15:14 (3 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-03-17 12:37:01 (3 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇩🇪 LRob	2026-03-17 08:00:37 (3 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:00:48 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.74

🇩🇪 193.124.20.238

🇺🇦 188.191.236.60

🇺🇸 143.244.185.214

🇮🇳 143.244.134.196

🇺🇸 143.198.64.127

🇳🇴 87.120.104.75

🇹🇷 24.133.137.81

🇺🇸 2607:f8b0:4002:c03::123

🇺🇸 216.25.89.95

🇰🇷 211.228.114.53

🇺🇸 143.198.231.96

🇨🇦 143.198.46.198

🇧🇬 79.100.86.38

🇺🇸 66.132.186.252

🇺🇸 65.111.5.25

🇺🇸 64.62.156.104

🇰🇷 52.231.76.18

🇺🇸 51.81.22.88

🇮🇳 49.156.103.49