JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.152.156.228

80.152.156.228 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Deutsche Telekom AG
Usage Type	Fixed Line ISP
ASN	AS3320
Hostname(s)	gateway.sternberg24.de
Domain Name	telekom.de
Country	🇩🇪 Germany
City	Neuss, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 80.152.156.228

Whois 80.152.156.228

IP Abuse Reports for 80.152.156.228:

This IP address has been reported a total of 37 times from 34 distinct sources. 80.152.156.228 was first reported on June 5th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-06-06 02:05:32 (4 hours ago)	Login Too Frequent (6)	Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-06-06 02:00:09 (5 hours ago)	Repeated 503 errors, blocked by Fail2Ban in custom-503 jail	Bad Web Bot Web App Attack
🇩🇪 Ba-Yu	2026-06-06 01:55:26 (5 hours ago)	WordPress bruteforce	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TAY	2026-06-06 01:05:28 (5 hours ago)	80.152.156.228 - - [06/Jun/2026:08:57:50 +0800] "POST /wp-login.php HTTP/1.1" 200 2979 "https://mail ... show more 80.152.156.228 - - [06/Jun/2026:08:57:50 +0800] "POST /wp-login.php HTTP/1.1" 200 2979 "https://mail.autism-cvc.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 80.152.156.228 - - [06/Jun/2026:09:03:44 +0800] "POST /wp-login.php HTTP/1.1" 200 2980 "https://mail.autism-cvc.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 80.152.156.228 - - [06/Jun/2026:09:05:28 +0800] "POST /wp-login.php HTTP/1.1" 200 2980 "https://mail.autism-cvc.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force
🇬🇧 andypiper	2026-06-06 01:01:09 (6 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇵🇱 bmino.pl	2026-06-05 23:50:01 (7 hours ago)	Autoban IP(2): 80.152.156.228 - Hostname: Deutsche Telekom AG - City: Neuss - Region: North Rhine-We ... show more Autoban IP(2): 80.152.156.228 - Hostname: Deutsche Telekom AG - City: Neuss - Region: North Rhine-Westphalia - Country: Germany - Location: 51.2042,6.68795 - Organization: Deutsche Telekom AG - failed attempts. show less	Web App Attack
🇩🇪 AlexEventfahrtenIPDB	2026-06-05 23:47:37 (7 hours ago)	[Sat Jun 06 01:47:36.497711 2026] [authz_core:error] [pid 1607876:tid 1607876] [client 80.152.156.22 ... show more [Sat Jun 06 01:47:36.497711 2026] [authz_core:error] [pid 1607876:tid 1607876] [client 80.152.156.228:1494] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php [Sat Jun 06 01:47:36.878322 2026] [authz_core:error] [pid 1607874:tid 1607874] [client 80.152.156.228:62434] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://alex-eventfahrten.spdns.de/wp-login.php ... show less	Brute-Force Web App Attack
Anonymous	2026-06-05 23:46:40 (7 hours ago)	Attac	Brute-Force
🇩🇪 todix	2026-06-05 23:17:37 (7 hours ago)	Wordpress brute force or spam attempt from 80.152.156.228	Brute-Force
🇫🇷 solution.it	2026-06-05 23:12:31 (7 hours ago)	[Sat Jun 06 01:12:31.131292 2026] [php7:error] [pid 1434115:tid 1434115] [client 80.152.156.228:2724 ... show more [Sat Jun 06 01:12:31.131292 2026] [php7:error] [pid 1434115:tid 1434115] [client 80.152.156.228:27247] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇩🇪 4server	2026-06-05 22:36:37 (8 hours ago)	[SatJun0600:36:32.3569772026][security2:error][pid1380492:tid1380623][client80.152.156.228:0]ModSecu ... show more [SatJun0600:36:32.3569772026][security2:error][pid1380492:tid1380623][client80.152.156.228:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mgevents.ch\"][uri\"/wp-login.php\"][unique_id\"aiNPcJpfqu1RLDY5br-3hwAAAJY\"]\,referer:https://mgevents.ch/wp-login.php show less	Port Scan Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-06-05 22:30:50 (8 hours ago)		Brute-Force Web App Attack
🇩🇪 london2038.com	2026-06-05 22:05:00 (8 hours ago)	Probing for exploits 80.152.156.228 - - [06/Jun/2026:00:04:44 +0200] "GET /wp-login.php HTTP/2.0" 30 ... show more Probing for exploits 80.152.156.228 - - [06/Jun/2026:00:04:44 +0200] "GET /wp-login.php HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 80.152.156.228 - - [06/Jun/2026:00:04:56 +0200] "POST /wp-login.php HTTP/2.0" 301 0 "https://v97746.<REDACTED>/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇫🇷 tecnicorioja	2026-06-05 22:01:17 (9 hours ago)	wp-login attack [05/Jun/2026:23:29:50	Brute-Force Web App Attack
🇩🇪 netclix.gr	2026-06-05 21:50:12 (9 hours ago)	(wordpress) Failed wordpress login from 80.152.156.228 (DE/Germany/gateway.sternberg24.de): (CF_ENA ... show more (wordpress) Failed wordpress login from 80.152.156.228 (DE/Germany/gateway.sternberg24.de): (CF_ENABLE) show less	Brute-Force

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.144

🇩🇪 151.243.11.35

🇺🇸 107.172.182.217

🇬🇧 89.37.172.136

🇬🇧 5.226.140.45

🇬🇧 5.226.140.39

🇬🇧 193.176.29.19

🇺🇸 173.239.211.117

🇺🇸 162.216.150.65

🇩🇪 91.54.222.203

🇬🇧 81.19.219.253

🇬🇧 81.19.219.244

🇩🇪 69.5.169.237

🇩🇪 69.5.169.179

🇬🇧 31.14.254.115

🇬🇧 31.14.254.103

🇬🇧 5.226.140.86

🇨🇱 200.89.69.247

🇺🇸 165.154.36.71

🇨🇳 106.12.144.153