AbuseIPDB » 157.22.19.194
157.22.19.194
This IP was reported 7 times. Confidence of
Abuse
is 22% : ?
ISP
Global Transit Systems LLC
Usage Type
Fixed Line ISP
ASN
AS213954
Domain Name
globaltransitsystems.online
Country
🇸🇪
Sweden
City
Gusum, Ostergotland
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 157.22.19.194 :
This IP address has been reported a total of
7
times from
5 distinct
sources.
157.22.19.194 was first reported on
February 23rd 2026 , and the most recent report was
7 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
zynex
2026-07-10 02:26:10
(7 hours ago)
URL Probing: /wp-login.php
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 00:51:50
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 157.22.19.194 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.19.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 20:51:46.048270 2026] [security2:error] [pid 25858:tid 25858] [client 157.22.19.194:47547] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||genesis-group.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "genesis-group.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajCeIovVx5jscQ2FWyUrVQAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-14 18:20:38
(3 weeks ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-06-12 06:46:11
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 157.22.19.194 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.19.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 02:46:04.581921 2026] [security2:error] [pid 10986:tid 10986] [client 157.22.19.194:9625] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gulftelecom.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gulftelecom.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiurLB91ttq5EMHGj-WxdwAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-11 17:07:48
(4 weeks ago)
PARMACOM WEBEXPLOIT 157.22.19.194 (157.22.19.194)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-28 10:49:19
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 157.22.19.194 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.19.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 06:49:14.040344 2026] [security2:error] [pid 6175:tid 6175] [client 157.22.19.194:36929] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||castagnino.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "castagnino.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahgdqnV2l65KdWRzc2DuAgAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
C C
2026-02-23 11:16:29
(4 months ago)
Distributed proxy crawl wave (89 requests, 89 unique IPs in 55 sec)
Bad Web Bot
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: