This IP address has been reported a total of
8
times from
5 distinct
sources.
157.22.46.70 was first reported on
January 22nd 2026 , and the most recent report was
3 days ago United Kingdom of Great Britain and Northern Ireland
with 2
reports.
Over the same time period, 157.22.46.70 has changed
country of origin 2 times.
The most common categories in these recent reports were:
Web App Attack
2
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇬🇧
consul.to
2026-10-08 14:30:50
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
abivia
2026-09-30 21:24:12
(1 week ago)
Abivia WAF trigger: Rule scriptKiddies: wp2shell exploit uri: /?rest_route=/batch/v1
Hacking
Web App Attack
🇧🇪
Saec
2026-07-15 15:38:14
(2 months ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (2× on saec.me)
Port Scan
Web App Attack
2026-03-27 00:22:53
(6 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-01-23 01:47:59
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.46.70 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.46.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 20:47:53.051875 2026] [security2:error] [pid 3268812:tid 3268812] [client 157.22.46.70:39595] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lightupaustralia.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lightupaustralia.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXLTSeaVDUE3cHRk8PHxdQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 21:33:46
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.46.70 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.46.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 16:33:38.389802 2026] [security2:error] [pid 18407:tid 18407] [client 157.22.46.70:11065] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||seagrovesrealty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "seagrovesrealty.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aXKXskR0CfNdJnIXge3-IwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 19:30:41
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.46.70 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.46.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 14:30:33.980260 2026] [security2:error] [pid 3554793:tid 3554815] [client 157.22.46.70:32261] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||coloradomountain.homes|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coloradomountain.homes"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aXJ62X6LDQmdXnEXOB1ylwAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 13:46:02
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.46.70 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.46.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 08:45:56.046972 2026] [security2:error] [pid 5643:tid 5643] [client 157.22.46.70:23893] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iuriscorpabc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iuriscorpabc.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aXIqFP2gwkFnSTuvvTelbQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
