AbuseIPDB » 152.53.22.166

152.53.22.166 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 50%: ?

50%

ISP	powered by ANX
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	v2202408229113282093.ultrasrv.de
Domain Name	powered.services
Country	Germany
City	Nurnberg, Bavaria

Report 152.53.22.166

Whois 152.53.22.166

IP Abuse Reports for 152.53.22.166:

This IP address has been reported a total of 20 times from 16 distinct sources. 152.53.22.166 was first reported on November 7th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ds6.net	2024-11-21 03:46:03 (1 week ago)	Blocked by CSF Firewall. Reason: lfd: (mod_security) mod_security (id:5000130) triggered by 152.53.2 ... show moreBlocked by CSF Firewall. Reason: lfd: (mod_security) mod_security (id:5000130) triggered by 152.53.22.166 (DE/Germany/v2202408229113282093.ultrasrv.de): 5 in the last 3600 secs - Fri Nov 8 09:03:59 2024 show less	Hacking
rtbh.com.tr	2024-11-10 20:53:25 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2024-11-09 20:53:27 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2024-11-08 20:53:28 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2024-11-08 15:13:22 (3 weeks ago)	apache-wordpress-login	Brute-Force Web App Attack
SpaceHost-Server	2024-11-08 14:59:22 (3 weeks ago)	152.53.22.166 - - [08/Nov/2024:15:59:20 +0100] "POST /wp-login.php HTTP/1.1" 200 9560 "-" "Mozilla/5 ... show more152.53.22.166 - - [08/Nov/2024:15:59:20 +0100] "POST /wp-login.php HTTP/1.1" 200 9560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 152.53.22.166 - - [08/Nov/2024:15:59:20 +0100] "POST /wp-login.php HTTP/1.1" 200 9557 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 152.53.22.166 - - [08/Nov/2024:15:59:22 +0100] "POST /wp-login.php HTTP/1.1" 200 9560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" show less	Hacking Web App Attack
Anonymous	2024-11-08 13:55:20 (3 weeks ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
plzenskypruvodce.cz	2024-11-08 12:45:36 (3 weeks ago)	2024-11-08T13:45:29.784772+01:00 web wordpress(mmpneu.cz)[3236139]: Authentication attempt for unkno ... show more2024-11-08T13:45:29.784772+01:00 web wordpress(mmpneu.cz)[3236139]: Authentication attempt for unknown user fcxxuzmc from 152.53.22.166 2024-11-08T13:45:30.692624+01:00 web wordpress(mmpneu.cz)[3196545]: Authentication attempt for unknown user admim from 152.53.22.166 2024-11-08T13:45:35.426601+01:00 web wordpress(mmpneu.cz)[3236159]: Authentication attempt for unknown user fxswixxy from 152.53.22.166 ... show less	Brute-Force
Anonymous	2024-11-08 12:03:35 (3 weeks ago)	Bot / scanning and/or hacking attempts: POST /function.php HTTP/1.1, POST /wp-login.php HTTP/1.1, GE ... show moreBot / scanning and/or hacking attempts: POST /function.php HTTP/1.1, POST /wp-login.php HTTP/1.1, GET /etvvkd HTTP/1.1, GET /wp-content/themes/twentytwentyfour/patterns/hidden-404.php, POST / HTTP/1.1, GET /wp-content/plugins/litespeed-cache/litespeed-cache.php HTT, GET /author/admim/ HTTP/1.1, GET /author/w-padmine/ HTTP/1.1, GET /?taki=enter HTTP/1.1, GET /wp-json HTTP/1.1, GET /author/sucuri/ HTTP/1.1, GET /author/wamdaines/ HTTP/1.1, GET / HTTP/1.1, GET /wp-content/themes/bridge/404.php HTTP/1.1, GET /author/wordfence/ HTTP/1.1, GET /wp-content/themes/twentytwentythree/patterns/hidden-404.ph show less	Hacking Web App Attack
clapper	2024-11-08 10:06:50 (3 weeks ago)	(mod_security) mod_security (id:5000135) triggered by 152.53.22.166 (DE/Germany/v2202408229113282093 ... show more(mod_security) mod_security (id:5000135) triggered by 152.53.22.166 (DE/Germany/v2202408229113282093.ultrasrv.de): 5 in the last 3600 secs; ID: rub show less	Brute-Force Bad Web Bot
bsoft.de	2024-11-08 09:55:31 (3 weeks ago)	152.53.22.166 - - [08/Nov/2024:10:55:24 +0100] "GET /wp-login.php HTTP/1.1" 200 9421 "https://hansju ... show more152.53.22.166 - - [08/Nov/2024:10:55:24 +0100] "GET /wp-login.php HTTP/1.1" 200 9421 "https://hansjuergenjaworski.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 OPR/102.0.0.0" 152.53.22.166 - - [08/Nov/2024:10:55:26 +0100] "GET /wp-login.php HTTP/1.1" 200 9421 "https://hansjuergenjaworski.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/117.0" 152.53.22.166 - - [08/Nov/2024:10:55:28 +0100] "GET /wp-login.php HTTP/1.1" 200 9421 "https://hansjuergenjaworski.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" show less	Web App Attack
Petros Stefanakis	2024-11-08 05:06:28 (3 weeks ago)	(wordpress) Failed wordpress login from 152.53.22.166 (DE/Germany/v2202408229113282093.ultrasrv.de)	Brute-Force
cmbplf	2024-11-08 04:25:32 (3 weeks ago)	737 POST requests to */wp-login.php	Brute-Force Bad Web Bot
TZNOC	2024-11-07 15:50:13 (3 weeks ago)	Brute Force Attack on a Web Application #1	DDoS Attack Web Spam Brute-Force Web App Attack
taivas.nl	2024-11-07 15:32:12 (3 weeks ago)	Wordpress_login_attempts	Bad Web Bot