JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.22.125.80

157.22.125.80 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 34%: ?

34%

ISP	Atlas Network Holdings LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213954
Domain Name	atlasnetworkholdings.online
Country	🇵🇱 Poland
City	Gdansk, Pomerania

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.22.125.80

Whois 157.22.125.80

IP Abuse Reports for 157.22.125.80:

This IP address has been reported a total of 33 times from 19 distinct sources. 157.22.125.80 was first reported on December 3rd 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-09-28 02:01:12 (2 days ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 nationaleventpros.com	2026-09-05 02:35:03 (3 weeks ago)	WordPress login attempt	Brute-Force
🇮🇹 VHosting	2026-09-03 18:55:03 (3 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 nationaleventpros.com	2026-09-03 06:03:48 (3 weeks ago)	WordPress login attempt	Brute-Force
🇮🇩 Burayot	2026-08-31 15:52:45 (4 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 157.22.125.80 (SC/Seychelles/-): 1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 157.22.125.80 (SC/Seychelles/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 kosada.com	2026-08-28 23:11:38 (1 month ago)	Web password guessing	Brute-Force
🇩🇪 LRob	2026-08-28 22:57:55 (1 month ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-json/wp/v2/users \| 2026-08-28 22:57 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 15:28:41 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 157.22.125.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 157.22.125.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 11:28:36.052553 2026] [security2:error] [pid 16967:tid 16967] [client 157.22.125.80:48117] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|21north.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "21north.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aosRpKbJveA2GqHJBvvs1wAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-18 03:14:27 (1 month ago)	Web password guessing	Brute-Force
Anonymous	2026-08-17 17:06:03 (1 month ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1, GET /wp-json/wp/v2/users HTTP/1.1	Hacking Web App Attack
🇩🇪 LRob	2026-08-17 04:47:49 (1 month ago)	WordPress probing \| req: /wp-login.php \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHT ... show more WordPress probing \| req: /wp-login.php \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-11 17:54:53 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 157.22.125.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 157.22.125.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 13:54:48.056210 2026] [security2:error] [pid 1155331:tid 1155402] [client 157.22.125.80:59527] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|draginich.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "draginich.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anth6PA6lwaxmj18TVzKMwAAAIw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-11 03:55:41 (1 month ago)	FPROCO WEBEXPLOIT 157.22.125.80 (157.22.125.80)	Web App Attack
🇺🇸 TPI-Abuse	2026-08-05 22:50:21 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 157.22.125.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 157.22.125.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 18:50:12.887270 2026] [security2:error] [pid 3781138:tid 3781138] [client 157.22.125.80:17661] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|assheton.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "assheton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anO-JDgyq7eMU6MxHF6uqgAAABA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-31 22:15:51 (1 month ago)	Web vulnerability probing: /wp-json/wp/v2/users	Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.85.128.231

🇧🇪 209.85.128.104

🇧🇪 209.85.128.102

🇺🇸 208.85.49.151

🇺🇸 199.200.105.153

🇬🇧 195.140.214.23

🇷🇺 109.63.137.46

🇩🇪 64.89.163.89

🇷🇺 45.195.221.26

🇸🇬 43.173.180.205

🇹🇼 221.120.57.172

🇯🇵 219.111.221.215

🇺🇸 208.117.52.254

🇬🇧 207.135.21.38

🇲🇴 182.93.50.90

🇮🇶 176.241.84.130

🇮🇹 151.67.165.75

🇺🇸 147.185.132.55

🇧🇫 102.180.232.111

🇰🇷 43.155.202.36