JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.22.19.75

157.22.19.75 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 19%: ?

19%

ISP	Global Transit Systems LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213954
Domain Name	globaltransitsystems.online
Country	🇸🇪 Sweden
City	Gusum, Ostergotland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.22.19.75

Whois 157.22.19.75

IP Abuse Reports for 157.22.19.75:

This IP address has been reported a total of 16 times from 8 distinct sources. 157.22.19.75 was first reported on December 27th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 DRI	2026-07-29 20:30:53 (1 day ago)	Web attack/Malicious activity detected	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 09:11:57 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 157.22.19.75 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 157.22.19.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 05:11:50.623182 2026] [security2:error] [pid 3576829:tid 3576829] [client 157.22.19.75:42739] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rendermatrix.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rendermatrix.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amcg1lvaV-TeJrAL61AQagAAABA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 yitzhaq	2026-07-26 17:01:56 (4 days ago)	157.22.19.75 - - [26/Jul/2026:19:01:53 +0200] "POST /xmlrpc.php HTTP/1.1" 404 4353 "-" "Apache-HttpC ... show more 157.22.19.75 - - [26/Jul/2026:19:01:53 +0200] "POST /xmlrpc.php HTTP/1.1" 404 4353 "-" "Apache-HttpClient/4.5.13 (Java/11.0.31)" 157.22.19.75 - - [26/Jul/2026:19:01:54 +0200] "GET /wp-login.php HTTP/1.1" 404 4381 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 157.22.19.75 - - [26/Jul/2026:19:01:55 +0200] "GET /wp-login.php HTTP/1.1" 404 4380 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Web App Attack Hacking
🇨🇭 backslash	2026-05-24 00:06:01 (2 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-06 19:26:16 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.19.75 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 157.22.19.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 15:26:09.207670 2026] [security2:error] [pid 25840:tid 25840] [client 157.22.19.75:32725] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sahinozalit.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sahinozalit.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afuV0cLESEPkMJTZAoh6kgAAACA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-05 05:27:18 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.19.75 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 157.22.19.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 01:27:12.640496 2026] [security2:error] [pid 14748:tid 14748] [client 157.22.19.75:18863] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ncparanormalresearch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ncparanormalresearch.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afl_sAu4NWg2msxEO15GpQAAAAQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kjaerulff	2026-05-03 23:32:16 (2 months ago)	Failed Wordpress login using wp-login.php	Web App Attack
🇩🇪 london2038.com	2026-03-22 21:05:32 (4 months ago)	Malformed or malicious web request 157.22.19.75 - - [22/Mar/2026:22:05:31 +0100] "POST /xmlrpc.php H ... show more Malformed or malicious web request 157.22.19.75 - - [22/Mar/2026:22:05:31 +0100] "POST /xmlrpc.php HTTP/1.1" 404 4187 "-" "Wget/1.21.4" show less	Hacking Web App Attack
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (5 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇫🇷 masterguru	2026-01-27 03:49:42 (6 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.19.75 (SE/Sweden/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.19.75 (SE/Sweden/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-01-24 10:37:18 (6 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.19.75 (SE/Sweden/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.19.75 (SE/Sweden/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-01-21 23:45:26 (6 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.19.75 (SE/Sweden/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.19.75 (SE/Sweden/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-01-18 09:01:14 (6 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.19.75 (SE/Sweden/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.19.75 (SE/Sweden/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-01-14 09:53:23 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 157.22.19.75 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 157.22.19.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 04:53:16.342247 2026] [security2:error] [pid 6669:tid 6669] [client 157.22.19.75:27921] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|babylontravelone.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "babylontravelone.com"] [uri "/"] [unique_id "aWdnjERbp3m3Yw0dsbgyrAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-01-07 14:15:56 (6 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.19.75 (SE/Sweden/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.19.75 (SE/Sweden/-): 1 in the last 3600 secs (0-195) show less	Hacking

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.185.124.105

🇺🇸 162.216.150.56

🇺🇸 152.32.206.35

🇺🇸 147.185.132.218

🇺🇸 147.185.132.146

🇺🇸 104.143.77.9

🇺🇦 91.239.95.19

🇫🇷 91.231.89.48

🇺🇦 37.221.132.134

🇬🇧 209.97.135.113

🇺🇸 178.16.55.21

🇧🇷 168.90.171.13

🇨🇦 146.190.253.217

🇻🇳 125.212.217.143

🇨🇳 114.55.248.231

🇫🇷 91.196.152.216

🇮🇳 66.116.242.235

🇳🇱 45.198.224.15

🇬🇧 35.203.210.82

🇬🇧 35.203.210.8