JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.227.72.157

212.227.72.157 was found in our database!

This IP was reported 61 times. Confidence of Abuse is 100%: ?

100%

ISP	IONOS SE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Domain Name	ionos.com
Country	🇩🇪 Germany
City	Wiesbaden, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.227.72.157

Whois 212.227.72.157

IP Abuse Reports for 212.227.72.157:

This IP address has been reported a total of 61 times from 27 distinct sources. 212.227.72.157 was first reported on July 11th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 agenciahypelab.com.br	2026-07-19 04:04:30 (6 hours ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-07-19 03:16:37 (7 hours ago)	212.227.72.157 - - [19/Jul/2026:05:16:36 +0200] "POST /wp-login.php HTTP/1.1" 200 14671 "https://www ... show more 212.227.72.157 - - [19/Jul/2026:05:16:36 +0200] "POST /wp-login.php HTTP/1.1" 200 14671 "https://www.mittlere-reife-nachholen.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 212.227.72.157 - - [19/Jul/2026:05:16:36 +0200] "POST /wp-login.php HTTP/1.1" 200 14671 "https://www.mittlere-reife-nachholen.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 212.227.72.157 - - [19/Jul/2026:05:16:37 +0200] "POST /wp-login.php HTTP/1.1" 200 14639 "https://www.mittlere-reife-nachholen.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-19 03:01:33 (7 hours ago)	212.227.72.157 - - [19/Jul/2026:05:01:32 +0200] "POST /wp-login.php HTTP/1.1" 200 14671 "https://www ... show more 212.227.72.157 - - [19/Jul/2026:05:01:32 +0200] "POST /wp-login.php HTTP/1.1" 200 14671 "https://www.mittlere-reife-nachholen.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 212.227.72.157 - - [19/Jul/2026:05:01:32 +0200] "POST /wp-login.php HTTP/1.1" 200 14639 "https://www.mittlere-reife-nachholen.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 212.227.72.157 - - [19/Jul/2026:05:01:33 +0200] "POST /wp-login.php HTTP/1.1" 200 14671 "https://www.mittlere-reife-nachholen.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-19 02:46:30 (8 hours ago)	212.227.72.157 - - [19/Jul/2026:04:46:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6423 "-" "Mozilla/5. ... show more 212.227.72.157 - - [19/Jul/2026:04:46:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 212.227.72.157 - - [19/Jul/2026:04:46:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 212.227.72.157 - - [19/Jul/2026:04:46:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" show less	Hacking Web App Attack
🇧🇷 dominioz	2026-07-19 02:43:49 (8 hours ago)	2026-07-19 02:43:43 GET /wp-includes/wlwmanifest.xml - - 212.227.72.157 HTTP/1.1 Mozilla/5.0+(Window ... show more 2026-07-19 02:43:43 GET /wp-includes/wlwmanifest.xml - - 212.227.72.157 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/88.0.4240.193+Safari/537.36 - 404 104995 ... show less	Web App Attack
🇧🇷 dominioz	2026-07-18 02:42:46 (1 day ago)	2026-07-18 02:42:22 GET /wp-includes/wlwmanifest.xml - - 212.227.72.157 HTTP/1.1 Mozilla/5.0+(Window ... show more 2026-07-18 02:42:22 GET /wp-includes/wlwmanifest.xml - - 212.227.72.157 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/88.0.4240.193+Safari/537.36 - 404 104995 2026-07-18 02:42:24 GET / author=2 - 212.227.72.157 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/88.0.4240.193+Safari/537.36 - 404 104995 2026-07-18 02:42:24 GET / author=3 - 212.227.72.157 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/88.0.4240.193+Safari/537.36 - 404 104995 2026-07-18 02:42:25 POST /xmlrpc.php - - 212.227.72.157 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/88.0.4240.193+Safari/537.36 - 301 595 ... show less	Web App Attack
🇧🇷 Halux	2026-07-18 02:14:59 (1 day ago)	212.227.72.157 Web Application Firewall multiple violations	Hacking Web App Attack
🇺🇸 agenciahypelab.com.br	2026-07-18 02:07:34 (1 day ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇨🇭 backslash	2026-07-17 13:21:00 (1 day ago)	block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0	SQL Injection
🇫🇷 GabrielJST	2026-07-17 07:50:42 (2 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 212.227.72.157 (DE/G ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 212.227.72.157 (DE/Germany/-) show less	Bad Web Bot
🇧🇷 dominioz	2026-07-17 01:39:44 (2 days ago)	2026-07-17 01:39:05 GET /wp-includes/wlwmanifest.xml - - 212.227.72.157 HTTP/1.1 Mozilla/5.0+(Window ... show more 2026-07-17 01:39:05 GET /wp-includes/wlwmanifest.xml - - 212.227.72.157 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/88.0.4240.193+Safari/537.36 - 404 104995 2026-07-17 01:39:07 GET / author=2 - 212.227.72.157 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/88.0.4240.193+Safari/537.36 - 404 104995 2026-07-17 01:39:07 GET / author=3 - 212.227.72.157 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/88.0.4240.193+Safari/537.36 - 404 104995 2026-07-17 01:39:08 POST /xmlrpc.php - - 212.227.72.157 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/88.0.4240.193+Safari/537.36 - 301 595 ... show less	Web App Attack
🇫🇷 SpaceHost-Server	2026-07-16 22:29:02 (2 days ago)		Brute-Force Web App Attack
🇩🇪 dbmwebdesign	2026-07-16 19:00:26 (2 days ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇩🇪 dbmwebdesign	2026-07-16 18:20:26 (2 days ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇮🇹 CoreTech srl	2026-07-16 17:57:04 (2 days ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact	Hacking

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 194.163.145.41

🇺🇸 147.185.132.62

🇨🇳 120.86.117.250

🇫🇷 94.23.188.223

🇳🇱 91.92.42.64

🇨🇦 85.217.149.32

🇺🇸 71.235.225.181

🇺🇸 66.132.195.73

🇺🇸 47.251.185.187

🇲🇾 47.250.38.64

🇷🇺 46.161.50.108

🇬🇧 35.203.211.185

🇬🇧 35.203.210.88

🇺🇸 20.80.104.232

🇮🇳 2401:4900:1c0b:6355:e5cc:8c19:a154:6ab0

🇨🇴 206.62.161.166

🇮🇳 182.60.128.241

🇺🇸 162.243.147.237

🇮🇳 152.59.187.113

🇨🇳 144.7.108.131