AbuseIPDB » 157.22.18.60
157.22.18.60
This IP was reported 6 times. Confidence of
Abuse
is 5% : ?
ISP
Global Transit Systems LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS213954
Domain Name
globaltransitsystems.online
Country
🇫🇮
Finland
City
Vantaa, Uusimaa
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 157.22.18.60 :
This IP address has been reported a total of
6
times from
4 distinct
sources.
157.22.18.60 was first reported on
May 16th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-21 12:47:34
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 157.22.18.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.18.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 08:47:31.216448 2026] [security2:error] [pid 16359:tid 16359] [client 157.22.18.60:41125] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||greatchristianadventure.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "greatchristianadventure.com"] [uri "/tag/flying/"] [unique_id "ati0Y376_5OQA9SL2Oi5QgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 05:13:32
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 157.22.18.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.18.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 01:13:24.603332 2026] [security2:error] [pid 18060:tid 18060] [client 157.22.18.60:35227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.soundtrax.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.soundtrax.net"] [uri "/advocate/feedback-frm.asp"] [unique_id "athJ9GTmbWXiUIboaFsDHAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
island-freaks.com
2026-06-29 13:24:23
(3 months ago)
Attack Type: WordPress Exploit Bot attempt on /photo/113997/ | DNS 157.22.18.60 | Agent: Mozilla/5.0 ...
show more
Attack Type: WordPress Exploit Bot attempt on /photo/113997/ | DNS 157.22.18.60 | Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.4 Safari/605.1.15
show less
Port Scan
Hacking
Bad Web Bot
Exploited Host
Web App Attack
2026-06-17 14:34:28
(4 months ago)
SQL injection, multiple attempts.
SQL Injection
🇫🇷
Tilellit.PRO
2026-05-21 22:52:10
(5 months ago)
Fail2Ban banned 157.22.18.60 for security violations in jail wp-armour. Log: 2026/05/21 22:52:09 [er ...
show more
Fail2Ban banned 157.22.18.60 for security violations in jail wp-armour. Log: 2026/05/21 22:52:09 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.18.60 | Target: wplogin" , client: 157.22.18.60, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-05-16 19:06:58
(5 months ago)
(mod_security) mod_security (id:211190) triggered by 157.22.18.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:211190) triggered by 157.22.18.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 15:06:55.050780 2026] [security2:error] [pid 30622:tid 30622] [client 157.22.18.60:56467] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||caferutadelaseda.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /menu-detalle.php?__waf_test__=%27+OR+%271%27%3D%271%27+UNION+SELECT+NULL%2C%27%3Cscript%3Ealert%281%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+%2Fetc%2Fpasswd%27%29%23&menu=3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caferutadelaseda.com"] [uri "/menu-detalle.php"] [unique_id "agjATw0JkmNWHcaami619QAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: