JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.22.126.239

157.22.126.239 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 10%: ?

10%

ISP	Global Transit Systems LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213954
Domain Name	globaltransitsystems.online
Country	🇸🇪 Sweden
City	Sjuhalla, Blekinge

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.22.126.239

Whois 157.22.126.239

IP Abuse Reports for 157.22.126.239:

This IP address has been reported a total of 20 times from 9 distinct sources. 157.22.126.239 was first reported on December 10th 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-09-20 02:36:37 (13 hours ago)	[ti-01sc] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ... show more [ti-01sc] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 157.22.126.239 - - [20/Sep/2026:04:35:40 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 157.22.126.239 - - [20/Sep/2026:04:35:58 +0200] "POST /wp-login.php HTTP/2.0" 200 4486 "https://www.nieuwsvoordietisten.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 157.22.126.239 - - [20/Sep/2026:04:36:00 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 157.22.126.239 - - [20/Sep/2026:04:36:18 +0200] "POST /wp-login.php HTTP/2.0" 200 4486 "https://www.n ... show less	Brute-Force Web App Attack
🇩🇪 FD-IX	2026-09-15 07:02:54 (5 days ago)	Brute-force login attack detected by WordPress firewall.	Brute-Force
🇺🇸 TPI-Abuse	2026-03-21 23:21:58 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.126.239 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 157.22.126.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 19:21:51.977332 2026] [security2:error] [pid 8643:tid 8643] [client 157.22.126.239:23217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|thebumans.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thebumans.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab8oD5NOJ_AT4q2YOqo4xwAAAA4"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2025-12-23 06:51:31 (8 months ago)	Cloudflare WAF: Request Path: /multivol_blackryu Request Query: Host: elhacker.net userAgent: Mozil ... show more Cloudflare WAF: Request Path: /multivol_blackryu Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: GTS-AS Country: FI Method: GET Timestamp: 2025-12-23T06:51:31Z ruleId: 12b9aecf1f6245b29d7e842bf35a42a0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-12-23 06:44:34 (8 months ago)	Cloudflare WAF: Request Path: /multivol_blackryu Request Query: Host: elhacker.net userAgent: Mozil ... show more Cloudflare WAF: Request Path: /multivol_blackryu Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: GTS-AS Country: FI Method: GET Timestamp: 2025-12-23T06:44:34Z ruleId: 12b9aecf1f6245b29d7e842bf35a42a0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-12-23 05:59:34 (8 months ago)	Cloudflare WAF: Request Path: /multivol_blackryu Request Query: Host: elhacker.net userAgent: Mozil ... show more Cloudflare WAF: Request Path: /multivol_blackryu Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: GTS-AS Country: FI Method: GET Timestamp: 2025-12-23T05:59:34Z ruleId: 12b9aecf1f6245b29d7e842bf35a42a0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-12-23 05:44:34 (8 months ago)	Cloudflare WAF: Request Path: /multivol_blackryu Request Query: Host: elhacker.net userAgent: Mozil ... show more Cloudflare WAF: Request Path: /multivol_blackryu Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: GTS-AS Country: FI Method: GET Timestamp: 2025-12-23T05:44:34Z ruleId: 12b9aecf1f6245b29d7e842bf35a42a0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇨🇭 Zeprax	2025-12-18 13:43:00 (9 months ago)	Layer 7 Flood Detected	DDoS Attack
🇪🇸 el-brujo	2025-12-18 06:44:25 (9 months ago)	Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 ... show more Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: GTS-AS Country: FI Method: GET Timestamp: 2025-12-18T06:44:25Z ruleId: 12b9aecf1f6245b29d7e842bf35a42a0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-12-18 05:59:26 (9 months ago)	Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 ... show more Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: GTS-AS Country: FI Method: GET Timestamp: 2025-12-18T05:59:26Z ruleId: 12b9aecf1f6245b29d7e842bf35a42a0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-12-18 05:44:32 (9 months ago)	Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 ... show more Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: GTS-AS Country: FI Method: GET Timestamp: 2025-12-18T05:44:32Z ruleId: 12b9aecf1f6245b29d7e842bf35a42a0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-12-18 04:59:22 (9 months ago)	Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 ... show more Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: GTS-AS Country: FI Method: GET Timestamp: 2025-12-18T04:59:22Z ruleId: 12b9aecf1f6245b29d7e842bf35a42a0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇸🇬 Fn4ticHz	2025-12-18 04:57:00 (9 months ago)	repeated ddos targeted load.rapidreset.net -- ZeroGuard	DDoS Attack
🇪🇸 el-brujo	2025-12-18 04:44:24 (9 months ago)	Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 ... show more Cloudflare WAF: Request Path: /ptbt_apdos Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: GTS-AS Country: FI Method: GET Timestamp: 2025-12-18T04:44:24Z ruleId: 6e3ccc23900c428e8ec0fb8a3a679c52. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇨🇭 Zeprax	2025-12-17 19:31:15 (9 months ago)	DDoS Attack Layer 7	DDoS Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 169.58.124.238

🇹🇭 27.254.190.148

🇮🇩 202.51.214.99

🇺🇸 162.216.150.59

🇫🇷 85.217.140.51

🇩🇪 69.5.169.211

🇧🇷 45.172.197.139

🇬🇧 34.147.176.121

🇦🇷 190.113.165.144

🇩🇪 91.92.240.84

🇺🇸 85.239.151.70

🇺🇸 66.132.186.242

🇮🇳 65.1.134.198

🇨🇳 8.138.131.26

🇩🇪 2a02:c202:2358:9494::1

🇰🇷 220.80.223.144

🇺🇸 204.8.96.85

🇨🇦 162.219.178.250

🇩🇪 194.53.140.248

🇦🇷 190.183.193.24