JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.22.47.200

157.22.47.200 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 14%: ?

14%

ISP	Global Transit Systems LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213954
Domain Name	globaltransitsystems.online
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.22.47.200

Whois 157.22.47.200

IP Abuse Reports for 157.22.47.200:

This IP address has been reported a total of 12 times from 8 distinct sources. 157.22.47.200 was first reported on December 20th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-08-23 10:53:40 (1 day ago)	Brute force	Brute-Force
Anonymous	2026-08-23 09:01:36 (1 day ago)	Multiple failed login attemps RDS-Web-Access-Server	Brute-Force Web App Attack
🇺🇸 nationaleventpros.com	2026-06-14 23:01:39 (2 months ago)	WordPress login attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-06-07 22:34:37 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.47.200 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 157.22.47.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 18:34:33.518795 2026] [security2:error] [pid 4420:tid 4420] [client 157.22.47.200:46855] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|fisseq.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fisseq.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiXx-VX51kDWCdLT0XajBwAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-06-06 15:12:58 (2 months ago)	Known malicious PHP file or CMS probe	Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 10:38:46 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.47.200 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 157.22.47.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 06:38:42.031604 2026] [security2:error] [pid 7038:tid 7038] [client 157.22.47.200:49021] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|chubat.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chubat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahgbMmhJO77HE8bnhcVH-QAAABM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-05-25 14:30:08 (2 months ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 157.22.47.200 (SC/Seychelles/-): 3 in the last ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 157.22.47.200 (SC/Seychelles/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 157.22.47.200 - - [25/May/2026:16:29:59 +0200] "GET /wp-login.php HTTP/1.1" 200 11767 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "-" host=s2servizi.com 157.22.47.200 - - [25/May/2026:16:30:00 +0200] "GET /wp-json/wp/v2/users HTTP/1.1" 200 11840 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "-" host=s2servizi.com 157.22.47.200 - - [25/May/2026:16:30:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 11815 "-" "Apache-HttpClient/4.5.13 (Java/11.0.30)" "-" host=s2servizi.com show less	Port Scan
🇫🇷 masterguru	2026-02-06 23:09:43 (6 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.47.200 (DE/Germany/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.47.200 (DE/Germany/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-02-06 22:40:52 (6 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.47.200 (DE/Germany/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.47.200 (DE/Germany/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇪🇸 10dencehispahard SL	2026-01-28 06:54:34 (6 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇫🇷 masterguru	2025-12-24 14:08:42 (8 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.47.200 (DE/Germany/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.47.200 (DE/Germany/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2025-12-20 12:16:14 (8 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.47.200 (DE/Germany/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.47.200 (DE/Germany/-): 1 in the last 3600 secs (0-193) show less	Hacking

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.89

🇳🇱 195.178.110.218

🇧🇷 186.236.14.198

🇫🇷 172.68.151.13

🇧🇩 165.101.222.19

🇻🇳 160.191.242.106

🇬🇧 138.68.172.35

🇨🇳 111.207.12.99

🇻🇳 103.82.38.228

🇺🇸 97.157.54.103

🇷🇺 93.120.154.132

🇮🇳 223.185.35.133

🇮🇳 180.188.253.150

🇫🇷 172.68.151.12

🇺🇸 165.154.36.71

🇨🇳 125.122.39.115

🇨🇳 124.220.149.35

🇩🇪 51.38.127.11

🇰🇷 43.155.238.153

🇫🇷 37.59.38.148