JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.22.18.252

157.22.18.252

Neutral Activity

3 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Global Transit Systems LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS213954

Domain Name

globaltransitsystems.online

Country

🇫🇷 France

City

Bethune, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

157.22.18.252 has been reported 3 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 157.22.18.252:

This IP address has been reported a total of 3 times from 2 distinct sources. 157.22.18.252 was first reported on March 17th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TRoden	2026-06-23 14:00:55 (2 months ago)	Geo Block Plugin: Escalation flag(s): rce_attempt	Hacking
🇺🇸 TPI-Abuse	2026-05-18 08:22:24 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.18.252 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 157.22.18.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 04:22:19.106395 2026] [security2:error] [pid 6419:tid 6419] [client 157.22.18.252:28269] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ssion.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ssion.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agrMOxzZj-1WMPotGfdYGAAAAAg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-17 12:10:42 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.18.252 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 157.22.18.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 08:10:35.615588 2026] [security2:error] [pid 31057:tid 31057] [client 157.22.18.252:17749] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mikeberro.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mikeberro.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ablEuywMCBhYQLjb-vqXDQAAAA4"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 3 of 3 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.153.86.250

🇸🇪 193.234.254.94

🇧🇬 109.160.32.119

🇧🇬 109.160.32.18

🇨🇴 108.174.156.122

🇳🇱 94.154.43.69

🇰🇿 37.208.46.131

🇷🇺 31.173.67.146

🇨🇳 180.76.143.203

🇺🇸 85.208.96.205

🇨🇳 58.17.6.119

🇳🇱 45.148.10.141

🇺🇸 34.74.51.226

🇹🇷 31.145.131.202

🇺🇸 24.105.160.100

🇰🇷 14.49.197.174

🇸🇪 5.133.201.243

🇦🇪 217.165.128.101

🇷🇺 217.73.116.87

🇧🇷 200.106.183.4