JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.22.16.108

157.22.16.108 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 37%: ?

37%

ISP	Apex Data Solutions LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213954
Domain Name	apexdatasolutions.online
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.22.16.108

Whois 157.22.16.108

IP Abuse Reports for 157.22.16.108:

This IP address has been reported a total of 17 times from 11 distinct sources. 157.22.16.108 was first reported on January 22nd 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-09-03 01:21:05 (7 hours ago)	block ruleset 51D5331ECDCF70C2C6410C0D0EEB5F69B17B5F56	Bad Web Bot
🇩🇪 4server	2026-09-02 16:14:46 (16 hours ago)	[WedSep0218:14:45.3437712026][security2:error][pid1673186:tid1673269][client157.22.16.108:0]ModSecur ... show more [WedSep0218:14:45.3437712026][security2:error][pid1673186:tid1673269][client157.22.16.108:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.volcano.ch\"][uri\"/wp-json/\"][unique_id\"aphLdZi1iDPcs8LkVKT_SQAAAJU\"] show less	Port Scan Brute-Force Web App Attack
🇮🇹 alessio loto	2026-09-01 18:19:02 (1 day ago)	WAF Detection: Security_Scanner_Blocked (Abusive IP). AI Confirmed Attack Payload.	Bad Web Bot
🇺🇸 www.winos.me	2026-08-28 03:20:37 (6 days ago)	Scanning for sensitive files/paths: /wp-login.php	Hacking Web App Attack
🇺🇸 masterguru	2026-08-22 20:17:17 (1 week ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-169)	Hacking
🇺🇸 oralunal	2026-08-09 12:24:06 (3 weeks ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-05-18 00:53:14 (3 months ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇺🇸 TPI-Abuse	2026-05-11 00:31:16 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.16.108 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 157.22.16.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 20:31:10.767363 2026] [security2:error] [pid 28327:tid 28327] [client 157.22.16.108:58095] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hudswell.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hudswell.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agEjTuy8uAUKjXB6ex79vgAAAAQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-05-10 07:10:03 (3 months ago)	[SunMay1009:09:55.9530752026][security2:error][pid2379339:tid2379499][client157.22.16.108:0]ModSecur ... show more [SunMay1009:09:55.9530752026][security2:error][pid2379339:tid2379499][client157.22.16.108:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"xmlrpc\\\\\\\\.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/03_asl_dos.conf\"][line\"65\"][id\"392331\"][rev\"3\"][msg\"Atomicorp.comWAFRules:xmlrpcDOSattack\"][severity\"CRITICAL\"][hostname\"comarcosa.com\"][uri\"/xmlrpc.php\"][unique_id\"agAvQ6GHsDgbUiIX95pGeAAAAEE\"] show less	Hacking Web App Attack
🇨🇭 4server	2026-05-05 08:25:40 (3 months ago)	[TueMay0510:25:36.5132862026][security2:error][pid1612926:tid1613271][client157.22.16.108:0]ModSecur ... show more [TueMay0510:25:36.5132862026][security2:error][pid1612926:tid1613271][client157.22.16.108:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"xmlrpc\\\\\\\\.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/03_asl_dos.conf\"][line\"65\"][id\"392331\"][rev\"3\"][msg\"Atomicorp.comWAFRules:xmlrpcDOSattack\"][severity\"CRITICAL\"][hostname\"motogiro.com\"][uri\"/xmlrpc.php\"][unique_id\"afmpgOgzwn75QBKUg6XgbQAAAM0\"] show less	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-05-04 15:08:48 (3 months ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 LRob	2026-05-03 23:45:07 (3 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-04-24 14:33:16 (4 months ago)	Try to access /xmlrpc.php	Web App Attack
🇧🇪 voormedia	2026-03-20 22:15:34 (5 months ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇺🇸 TPI-Abuse	2026-03-16 12:06:17 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.16.108 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 157.22.16.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 08:06:10.325182 2026] [security2:error] [pid 1308:tid 1308] [client 157.22.16.108:65311] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|zodiacwin.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zodiacwin.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abfyMqUdSImdjZ-zWC76fgAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.145.0.18

🇦🇺 194.193.60.113

🇫🇮 147.185.133.205

🇮🇳 135.235.138.43

🇻🇳 115.73.211.209

🇷🇴 80.94.92.234

🇲🇻 69.94.37.25

🇧🇷 45.171.177.193

🇺🇸 20.15.224.245

🇹🇭 1.20.219.57

🇺🇸 212.102.40.218

🇦🇷 186.19.123.63

🇮🇱 147.235.195.155

🇬🇧 95.146.98.255

🇫🇷 85.217.140.41

🇸🇦 79.72.3.119

🇱🇻 62.60.130.242

🇦🇲 5.77.137.103

🇺🇦 178.150.97.200

🇺🇸 172.253.194.153