JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.22.73.212

157.22.73.212 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 16%: ?

16%

ISP	Global Transit Systems LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213954
Domain Name	globaltransitsystems.online
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.22.73.212

Whois 157.22.73.212

IP Abuse Reports for 157.22.73.212:

This IP address has been reported a total of 6 times from 6 distinct sources. 157.22.73.212 was first reported on January 21st 2026, and the most recent report was 57 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-09-02 22:09:19 (57 minutes ago)	[03/Sep/2026:01:09:19 +0300] -- 157.22.73.212 Ban reason: User-Agent curl/	Bad Web Bot Web App Attack
🇩🇪 4server	2026-09-02 09:08:22 (13 hours ago)	[WedSep0211:08:19.2254042026][security2:error][pid1234475:tid1234497][client157.22.73.212:0]ModSecur ... show more [WedSep0211:08:19.2254042026][security2:error][pid1234475:tid1234497][client157.22.73.212:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"aaaa6877.org\"][uri\"/wp-json/\"][unique_id\"apfng_Yj1XbUasUEm_nFyQAAAAs\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-12 21:21:00 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 157.22.73.212 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 157.22.73.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 17:20:33.044822 2026] [security2:error] [pid 8568:tid 8568] [client 157.22.73.212:32427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.evolute.io"] [uri "/wp-config.php.copy"] [unique_id "agOZocdhw_8fJ0xrW0LzRwAAAEw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-04-27 12:43:16 (4 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 157.22.73.212 (NL/The Netherlands/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 157.22.73.212 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TRoden	2026-04-07 05:44:16 (4 months ago)	Geo Block Plugin: Escalation flag(s): rce_attempt	Hacking
Anonymous	2026-01-21 10:06:06 (7 months ago)	Forum/form spam	Web Spam

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 35.187.0.86

🇺🇸 172.82.67.187

🇻🇳 103.159.51.70

🇺🇸 66.132.195.98

🇨🇳 60.221.228.168

🇧🇪 34.14.122.221

🇨🇳 27.41.251.16

🇧🇷 200.155.66.2

🇨🇳 125.45.58.134

🇨🇳 120.229.186.52

🇻🇳 116.109.213.222

🇮🇩 103.154.77.48

🇰🇿 95.182.104.164

🇩🇪 93.214.119.163

🇨🇳 42.81.126.27

🇺🇸 34.121.79.77

🇦🇪 20.74.177.114

🇨🇦 4.204.224.164

🇳🇱 213.177.179.171

🇳🇱 213.177.179.159