JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.22.74.91

157.22.74.91 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 41%: ?

41%

ISP	Global Transit Systems LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213954
Domain Name	globaltransitsystems.online
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.22.74.91

Whois 157.22.74.91

IP Abuse Reports for 157.22.74.91:

This IP address has been reported a total of 14 times from 12 distinct sources. 157.22.74.91 was first reported on January 22nd 2026, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 DRI	2026-07-19 15:06:02 (23 hours ago)	Web attack/Malicious activity detected	Web App Attack
Anonymous	2026-07-19 15:05:12 (23 hours ago)	2026-07-19T17:05:12.039764+02:00 polaris wp(sahpa.co.za)[73903]: Blocked authentication attempt for ... show more 2026-07-19T17:05:12.039764+02:00 polaris wp(sahpa.co.za)[73903]: Blocked authentication attempt for admin from 157.22.74.91 ... show less	Brute-Force Web App Attack
🇨🇿 ptlab	2026-07-19 06:45:35 (1 day ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇬🇧 gigatech	2026-07-15 09:05:04 (5 days ago)	Webserver Probing	Web App Attack
🇳🇱 GabrielJST	2026-07-10 04:36:49 (1 week ago)	(wordpress) Failed wordpress login from 157.22.74.91 (SC/Seychelles/-)	Brute-Force
🇱🇻 garmtech.com	2026-06-25 06:30:44 (3 weeks ago)	IM360 WAF: Possible SQL injection attack MV:DESC' UNION ALL SELECT CHR(113)	SQL Injection
🇱🇻 garmtech.com	2026-06-24 21:22:45 (3 weeks ago)	IM360 WAF: SQL Injection via WordPress Link functionality MV:25AND//(SELECT//8800//FROM(SELECT ... show more IM360 WAF: SQL Injection via WordPress Link functionality MV:25AND//(SELECT//8800//FROM(SELECT/*/COUNT(),CONCAT('~',(SELECT/*/(ELT(8800=8800,1))),'~',FLOOR(RAND(0)2))x//FROM//INFORMATION_SCHEMA.PLUGINS//GROUP//BY/**/x)a)-- - show less	SQL Injection
🇺🇸 oralunal	2026-06-18 21:31:26 (1 month ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
Anonymous	2026-05-27 05:22:16 (1 month ago)	SQL injection, multiple attempts.	SQL Injection
🇱🇻 garmtech.com	2026-05-07 23:42:22 (2 months ago)	IM360 WAF: Possible SQL injection attack MV:ASCAND%024119%0CIN%08(SELECT%0A(%27~%27+(SELECT%07(CASE% ... show more IM360 WAF: Possible SQL injection attack MV:ASCAND%024119%0CIN%08(SELECT%0A(%27~%27+(SELECT%07(CASE%0CWHEN%0A(4119=4119)%0BTHEN%02%271%27%01ELSE%04%270%27%07END))+%27~%27))-- - show less	SQL Injection
🇩🇪 FeG Deutschland	2026-03-22 11:59:53 (3 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1257	Exploited Host Web App Attack
🇺🇦 URAN Publishing Service	2026-03-20 20:40:04 (3 months ago)	157.22.74.91 - - [20/Mar/2026:22:40:03 +0200] "POST /xmlrpc.php HTTP/1.1" 404 209 "-" "curl/8.6.0" 1 ... show more 157.22.74.91 - - [20/Mar/2026:22:40:03 +0200] "POST /xmlrpc.php HTTP/1.1" 404 209 "-" "curl/8.6.0" 157.22.74.91 - - [20/Mar/2026:22:40:03 +0200] "POST /xmlrpc.php HTTP/1.1" 404 209 "-" "curl/7.88.1" ... show less	Web App Attack
🇺🇸 mind5t0rm	2026-03-14 12:45:48 (4 months ago)	(WPLOGIN) WP Login Attack 157.22.74.91 (SC/Seychelles/-): 3 in the last 3600 secs; Ports: ; Directi ... show more (WPLOGIN) WP Login Attack 157.22.74.91 (SC/Seychelles/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 157.22.74.91 - - [14/Mar/2026:19:45:38 +0700] "GET /wp-login.php HTTP/2.0" 200 2349 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 157.22.74.91 - - [14/Mar/2026:19:45:40 +0700] "POST /wp-login.php HTTP/2.0" 200 2498 "https://convercon.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 157.22.74.91 - - [14/Mar/2026:19:45:44 +0700] "GET /wp-login.php?redirect_to=https%3A%2F%2Fconvercon.com%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 2349 "https://convercon.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Port Scan
🇺🇸 TPI-Abuse	2026-01-22 14:53:42 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 157.22.74.91 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 157.22.74.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 09:53:39.179295 2026] [security2:error] [pid 6166:tid 6166] [client 157.22.74.91:40629] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gamerah.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gamerah.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aXI58-4KmOHBR37q6YiUyQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.238.171.10

🇺🇸 104.207.40.123

🇨🇦 85.217.149.65

🇧🇬 79.124.49.226

🇺🇸 35.245.166.159

🇺🇸 34.0.133.250

🇬🇧 178.128.168.0

🇳🇱 45.148.10.157

🇺🇸 20.163.33.218

🇬🇧 2a06:4883:b000::d5

🇧🇷 190.89.137.180

🇯🇵 172.253.80.213

🇰🇷 146.56.180.42

🇺🇸 91.230.168.152

🇺🇸 91.230.168.55

🇫🇮 83.97.78.224

🇱🇹 81.30.98.47

🇳🇱 45.148.10.147

🇸🇬 15.235.192.186

🇵🇰 203.215.174.123