AbuseIPDB » 157.22.126.155
157.22.126.155 was found in our database!
This IP was reported 6 times. Confidence of
Abuse
is 18%: ?
| ISP |
Global Transit Systems LLC
|
| Usage Type |
Data Center/Web Hosting/Transit
|
| ASN |
AS213954
|
| Domain Name |
globaltransitsystems.online
|
| Country |
🇫🇮
Finland
|
| City |
Helsinki, Uusimaa
|
IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
IP Abuse Reports for 157.22.126.155:
This IP address has been reported a total of
6
times from
5 distinct
sources.
157.22.126.155 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 157.22.126.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.126.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 23:44:40.683623 2026] [security2:error] [pid 7415:tid 7442] [client 157.22.126.155:11109] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pref-realestate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pref-realestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agvcqLJLbZhxfmqUy9h0MwAAARI"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
kjaerulff
|
|
Failed Wordpress login using wp-login.php
|
Web App Attack
|
|
|
🇬🇧
hugolovepole
|
|
Fail2Ban (nginx-badbots-444) on bethselamin
|
Port Scan
Brute-Force
SSH
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 157.22.126.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.126.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 12:50:51.218877 2026] [security2:error] [pid 2895:tid 2895] [client 157.22.126.155:25729] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ibcnu.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ibcnu.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afDla8d7p7gmqnWF2pjnwAAAAAo"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
ne1for23
|
|
157.22.126.155 - - [23/Apr/2026:23:04:02 +0000] "POST /xmlrpc.php HTTP/1.1" 403 153 "-" "Apache-Http ...
show more
157.22.126.155 - - [23/Apr/2026:23:04:02 +0000] "POST /xmlrpc.php HTTP/1.1" 403 153 "-" "Apache-HttpClient/4.5.13 (Java/11.0.30)"
show less
|
Hacking
Web App Attack
|
|
|
🇺🇸
octageeks.com
|
|
Wordpress malicious attack:[octaxmlrpc]
|
Web App Attack
|
|
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: