JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.104.215.80

212.104.215.80 was found in our database!

This IP was reported 118 times. Confidence of Abuse is 33%: ?

33%

ISP	PV-SL-HOSTED-Vancouver-Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	protonvpn.com
Country	🇨🇦 Canada
City	Vancouver, British Columbia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.104.215.80

Whois 212.104.215.80

IP Abuse Reports for 212.104.215.80:

This IP address has been reported a total of 118 times from 15 distinct sources. 212.104.215.80 was first reported on July 17th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 matthieul.dev	2026-07-11 03:05:23 (3 days ago)	Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=42241	Port Scan Brute-Force
🇺🇸 xmission.com	2026-06-15 20:31:19 (4 weeks ago)	Blocked by UFW (TCP on 1) Source port: 59050 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 2 ... show more Blocked by UFW (TCP on 1) Source port: 59050 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 212.104.215.80) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-15 08:22:39 (4 weeks ago)	Blocked by UFW (TCP on 1) Source port: 31145 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 2 ... show more Blocked by UFW (TCP on 1) Source port: 31145 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 212.104.215.80) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-14 18:53:39 (4 weeks ago)	Blocked by UFW (TCP on 1) Source port: 46703 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 2 ... show more Blocked by UFW (TCP on 1) Source port: 46703 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 212.104.215.80) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-14 06:34:59 (1 month ago)	Blocked by UFW (TCP on 1) Source port: 40377 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 2 ... show more Blocked by UFW (TCP on 1) Source port: 40377 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 212.104.215.80) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-13 18:21:39 (1 month ago)	Blocked by UFW (TCP on 1) Source port: 52847 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 2 ... show more Blocked by UFW (TCP on 1) Source port: 52847 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 212.104.215.80) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-13 06:09:59 (1 month ago)	Blocked by UFW (TCP on 1) Source port: 32196 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 2 ... show more Blocked by UFW (TCP on 1) Source port: 32196 TTL: 54 Packet length: 60 TOS: 0x08 This report (for 212.104.215.80) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 matthieul.dev	2026-06-12 06:30:11 (1 month ago)	Blocked by os-abuseipdb; 7 hits, proto=tcp, ports=45663	Port Scan Brute-Force
🇺🇸 TPI-Abuse	2026-06-10 18:39:10 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 212.104.215.80 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 212.104.215.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 14:39:05.663961 2026] [security2:error] [pid 23358:tid 23358] [client 212.104.215.80:35304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tausiet.com"] [uri "/.env"] [unique_id "aimvSThoxIXDgoOmmXtyMAAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-06-10 17:33:16 (1 month ago)	9.680 requests with url.path .git/	Brute-Force Bad Web Bot
Anonymous	2026-06-10 16:05:31 (1 month ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=6	Hacking
🇫🇮 inlink.ltd	2026-06-10 15:55:48 (1 month ago)	dot file probe	Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-10 15:49:46 (1 month ago)	Blocked by CSF 13 firewall - Rule: config-dotfile NL/Netherlands/-	Web App Attack
🇺🇸 mnsf	2026-06-10 14:05:45 (1 month ago)	Abuse Detected (3)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 14:04:51 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 212.104.215.80 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 212.104.215.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 10:04:48.157012 2026] [security2:error] [pid 31369:tid 31382] [client 212.104.215.80:19414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.econpage.com"] [uri "/.env"] [unique_id "ailvAKlmUpzdLENQ_ciKkwAAAQs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 118 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.203

🇷🇺 194.190.153.226

🇷🇺 193.169.28.244

🇺🇸 192.210.150.198

🇰🇷 121.1.120.182

🇨🇳 111.9.42.36

🇭🇰 103.243.24.124

🇪🇬 82.129.158.42

🇮🇱 82.80.249.157

🇩🇪 69.5.169.11

🇬🇷 62.74.2.161

🇷🇺 45.195.221.26

🇬🇧 35.176.231.115

🇺🇸 20.118.29.24

🇺🇸 3.19.237.121

🇰🇷 183.104.220.84

🇺🇸 141.11.88.239

🇷🇴 92.118.39.62

🇺🇸 44.163.185.6

🇪🇸 2a00:1450:4025:1005::126