JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

157.22.102.68

Neutral Activity

Abuse Confidence Score

0% Low Risk

8 reports

3 reporters · latest 4 weeks ago

ISP: Atlas Network Holdings LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS213954
Domain Name: atlasnetworkholdings.online
Country: 🇫🇮 Finland
City: Vantaa, Uusimaa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

8 from 3 distinct reporters

First reported

January 2nd 2026

Most recent report

4 weeks ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 1

Most common categories SSH 1 Brute-Force 1

Old reports The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-09 04:09:32 UTC · (4 weeks ago)	SSH tarpit (endlessh) connection from 157.22.102.68	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-04-25 11:29:07 UTC · (6 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.102.68 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 07:29:02.391009 2026] [security2:error] [pid 10165:tid 10165] [client 157.22.102.68:33727] M ... show more (mod_security) mod_security (id:225170) triggered by 157.22.102.68 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 07:29:02.391009 2026] [security2:error] [pid 10165:tid 10165] [client 157.22.102.68:33727] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|theboates.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theboates.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeylfrBZx6zN2UWFUQOD-QAAAAs"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-24 20:54:34 UTC · (6 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.102.68 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 16:54:28.816873 2026] [security2:error] [pid 24840:tid 24840] [client 157.22.102.68:51217] M ... show more (mod_security) mod_security (id:225170) triggered by 157.22.102.68 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 16:54:28.816873 2026] [security2:error] [pid 24840:tid 24840] [client 157.22.102.68:51217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|flutepraise.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "flutepraise.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aevYhJHIJ1k1_9C0Bvs2vQAAABQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-13 12:17:56 UTC · (6 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.102.68 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 08:17:49.811198 2026] [security2:error] [pid 997750:tid 997750] [client 157.22.102.68:23855] ... show more (mod_security) mod_security (id:225170) triggered by 157.22.102.68 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 08:17:49.811198 2026] [security2:error] [pid 997750:tid 997750] [client 157.22.102.68:23855] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|Cosentient.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cosentient.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adze7ZEGqaU7aFYidqviSAAAABU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-03 15:43:14 UTC · (7 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.102.68 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 11:43:06.594543 2026] [security2:error] [pid 14894:tid 14894] [client 157.22.102.68:35629] M ... show more (mod_security) mod_security (id:225170) triggered by 157.22.102.68 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 11:43:06.594543 2026] [security2:error] [pid 14894:tid 14894] [client 157.22.102.68:35629] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|saratogaequity.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "saratogaequity.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ac_gCtlnBfQkv6cNcdNZqwAAABI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 18:27:57 UTC · (7 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.102.68 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 14:27:50.767520 2026] [security2:error] [pid 11270:tid 11270] [client 157.22.102.68:53751] M ... show more (mod_security) mod_security (id:225170) triggered by 157.22.102.68 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 14:27:50.767520 2026] [security2:error] [pid 11270:tid 11270] [client 157.22.102.68:53751] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mwrn.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mwrn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ac1jpsDjNhskMQYv51PGGAAAAAE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-30 12:04:05 UTC · (7 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.102.68 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 08:03:58.425142 2026] [security2:error] [pid 10420:tid 10420] [client 157.22.102.68:20287] M ... show more (mod_security) mod_security (id:225170) triggered by 157.22.102.68 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 08:03:58.425142 2026] [security2:error] [pid 10420:tid 10420] [client 157.22.102.68:20287] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jacksonsparts.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jacksonsparts.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acpmrtedKX8nkK4BBixaSQAAABE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RCS	2026-01-02 22:13:00 UTC · (10 months ago)	fail2ban apache-noscript ...	Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:5:5fcc:4001

🇨🇳 220.196.192.25

🇳🇱 195.178.110.30

🇵🇱 162.158.103.104

🇺🇸 159.223.97.218

🇧🇩 116.206.255.40

🇺🇸 31.134.13.32

🇳🇱 213.177.179.109

🇪🇨 210.211.62.55

🇧🇷 191.34.56.184

🇮🇷 151.235.140.189

🇺🇸 142.173.160.62

🇺🇸 109.105.209.72

🇺🇦 91.215.146.70

🇺🇸 72.56.168.21

🇺🇸 45.33.64.173

🇦🇿 37.61.78.82

🇩🇪 109.160.32.47

🇩🇪 109.160.32.30

🇺🇸 34.86.4.52