JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

157.22.73.146

Recent Activity

Abuse Confidence Score

42% Elevated

23 reports

10 reporters · latest 5 hours ago

ISP: Global Transit Systems LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS213954
Domain Name: globaltransitsystems.online
Country: 🇺🇸 United States of America
City: New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

23 from 10 distinct reporters

First reported

June 10th 2026

Most recent report

5 hours ago

Last 60 days

Top reporter locations 🇨🇭 Switzerland 6 🇨🇿 Czechia 5 🇪🇸 Spain 4

Most common categories Web App Attack 13 Brute-Force 13 Bad Web Bot 7 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-07 07:54:30 UTC · (5 hours ago)	Automated scanner probing RD Web Access login pages	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-05 12:36:42 UTC · (2 days ago)	(mod_security) mod_security (id:210350) triggered by 157.22.73.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 07:36:35.007039 2026] [security2:error] [pid 5076:tid 5076] [client 157.22.73.146:11629] Mod ... show more (mod_security) mod_security (id:210350) triggered by 157.22.73.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 07:36:35.007039 2026] [security2:error] [pid 5076:tid 5076] [client 157.22.73.146:11629] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|onward.ws\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "onward.ws"] [uri "/Ariels-Guide/Ariels-Guide.html"] [unique_id "aux4U99Gw96iTmUNqX9-3AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 09:23:05 UTC · (4 days ago)	(mod_security) mod_security (id:210350) triggered by 157.22.73.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:23:01.740760 2026] [security2:error] [pid 11402:tid 11402] [client 157.22.73.146:28385] M ... show more (mod_security) mod_security (id:210350) triggered by 157.22.73.146 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:23:01.740760 2026] [security2:error] [pid 11402:tid 11402] [client 157.22.73.146:28385] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.n3fjp.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.n3fjp.com"] [uri "/fieldday.html"] [unique_id "aumn9ZWyqsZTD4UdbmagPQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-11-01 01:47:28 UTC · (6 days ago)	Web App Attack	Web App Attack
Anonymous	2026-10-30 06:44:03 UTC · (1 week ago)	Automated scanner probing RD Web Access login pages	Bad Web Bot Web App Attack
🇪🇸 librebit	2026-10-30 04:54:05 UTC · (1 week ago)	Brute force	Brute-Force
🇨🇿 lp	2026-10-23 08:03:00 UTC · (2 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.73.146 2026-10-23T09:47:49+0200 vpn Access-Reject station: 157.22.73.146	Brute-Force Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-10-23 06:50:37 UTC · (2 weeks ago)	[RoutePulse \| 2026-10-23T06:50:37Z \| RTBH-INJECTED] ATTACK CLASS: vpn_bruteforce SOURCE: 157.22.73.146 · AS213954 Global Transit Systems LLC · The Netherlands EVIDENCE: Shunned on the Cisco FTD VPN gateway — Cisco VPN RA Brute force on Cisco FTDv — s ... show more [RoutePulse \| 2026-10-23T06:50:37Z \| RTBH-INJECTED] ATTACK CLASS: vpn_bruteforce SOURCE: 157.22.73.146 · AS213954 Global Transit Systems LLC · The Netherlands EVIDENCE: Shunned on the Cisco FTD VPN gateway — Cisco VPN RA Brute force on Cisco FTDv — slow spray: 3 failed logins over 17 h (one every ~496 min, under every 15-min threshold and the FTD hold-down) — rung 1-bis (doc 247 §10.2) DETECTION: Conviction Engine SPRT + 14-detector ML stack (6-model weighted ensemble) + 5-pillar threat scoring ACTION: BGP null route injected at RoutePulse network edge show less	Brute-Force Hacking
Anonymous	2026-10-23 06:14:28 UTC · (2 weeks ago)	Automated scanner probing RD Web Access login pages	Bad Web Bot Web App Attack
🇩🇪 NxtGenIT	2026-10-23 02:28:06 UTC · (2 weeks ago)	CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html HTTP/1.1" 302 -,	Brute-Force
🇨🇿 lp	2026-10-22 23:47:54 UTC · (2 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.73.146 2026-10-23T01:34:02+0200 vpn Access-Reject station: 157.22.73.146	Brute-Force Web App Attack
🇨🇿 lp	2026-10-22 15:33:02 UTC · (2 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.73.146 2026-10-22T17:23:18+0200 vpn Access-Reject station: 157.22.73.146	Brute-Force Web App Attack
🇪🇸 librebit	2026-10-21 21:28:51 UTC · (2 weeks ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-10-20 20:13:51 UTC · (2 weeks ago)	Brute force	Brute-Force
Anonymous	2026-10-16 06:06:42 UTC · (3 weeks ago)	Automated scanner probing RD Web Access login pages	Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 193.31.79.223

🇧🇷 187.108.1.142

🇧🇷 177.71.43.22

🇺🇸 162.216.149.181

🇳🇱 91.92.47.162

🇵🇱 45.138.12.44

🇦🇷 181.47.126.55

🇫🇷 157.173.105.167

🇺🇸 107.175.181.37

🇺🇸 104.248.236.92

🇺🇸 74.119.52.36

🇺🇸 68.237.76.114

🇬🇧 45.159.88.213

🇺🇸 185.61.219.57

🇻🇳 183.91.11.36

🇧🇷 138.186.196.44

🇰🇷 118.37.214.187

🇰🇷 110.46.206.71

🇳🇱 109.160.32.171

🇸🇬 47.128.21.144