JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

80.187.83.219

Neutral Activity

Abuse confidence score ?

0% Low Risk

7 reports

5 reporters · latest 10 months ago

ISP	Telekom Deutschland GmbH
Usage Type	Mobile ISP
ASN	AS3320
Hostname(s)	tmo-083-219.customers.d1-online.com
Domain Name	telekom.de
Country	🇩🇪 Germany
City	Munich, Bavaria

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

80.187.83.219 has been reported 7 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 80.187.83.219

Export CSV

This IP address has been reported a total of 7 times from 5 distinct sources. 80.187.83.219 was first reported on July 2nd 2024, and the most recent report was 10 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2025-11-29 03:20:06 (10 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇪🇸 el-brujo	2025-11-29 02:40:22 (10 months ago)	[Sat Nov 29 03:40:16.453530 2025] [proxy_fcgi:error] [pid 3067371:tid 3068058] [remote 80.187.83.219 ... show more [Sat Nov 29 03:40:16.453530 2025] [proxy_fcgi:error] [pid 3067371:tid 3068058] [remote 80.187.83.219:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com [Sat Nov 29 03:40:21.555194 2025] [proxy_fcgi:error] [pid 3067371:tid 3068067] [remote 80.187.83.219:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com ... show less	Hacking Web App Attack
🇪🇸 el-brujo	2025-11-29 02:40:13 (10 months ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: elhacker.net userAgent: Apache-HttpC ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: elhacker.net userAgent: Apache-HttpClient/4.5.13 (Java/11.0.29) Action: managed_challenge Source: firewallManaged ASN Description: DTAG Internet service provider operations Country: DE Method: POST Timestamp: 2025-11-29T02:40:13Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-11-29 01:32:02 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 80.187.83.219 (tmo-083-219.customers.d1-online. ... show more (mod_security) mod_security (id:225170) triggered by 80.187.83.219 (tmo-083-219.customers.d1-online.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 20:31:58.955991 2025] [security2:error] [pid 23747:tid 23747] [client 80.187.83.219:5440] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|microdot.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "microdot.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aSpNDhVQKjXQ2ANGoL-k9QAAAAM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-28 22:58:17 (10 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-11-28 22:29:56 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 80.187.83.219 (tmo-083-219.customers.d1-online. ... show more (mod_security) mod_security (id:225170) triggered by 80.187.83.219 (tmo-083-219.customers.d1-online.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 17:29:50.189194 2025] [security2:error] [pid 28143:tid 28143] [client 80.187.83.219:27138] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|heron-ent.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "heron-ent.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSoiXi7dm_EsOSwsHqtRRQAAAB0"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Viper	2024-07-02 06:31:26 (2 years ago)	Tue Jul 2 06:30:35 2024 80.187.83.219:5699 TLS Error: TLS handshake failed Tue Jul 2 06:30:40 2024 ... show more Tue Jul 2 06:30:35 2024 80.187.83.219:5699 TLS Error: TLS handshake failed Tue Jul 2 06:30:40 2024 80.187.83.219:5893 TLS Error: TLS handshake failed Tue Jul 2 06:30:45 2024 80.187.83.219:6097 TLS Error: TLS handshake failed Tue Jul 2 06:30:50 2024 80.187.83.219:6278 TLS Error: TLS handshake failed Tue Jul 2 06:30:56 2024 80.187.83.219:6468 TLS Error: TLS handshake failed ... show less	Brute-Force

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.154.158.195

🇲🇽 189.174.121.79

🇲🇽 187.188.53.214

🇷🇺 176.212.105.118

🇺🇸 136.144.43.192

🇨🇳 121.15.140.235

🇨🇳 120.48.57.133

🇳🇱 45.148.10.151

🇩🇪 213.209.159.228

🇦🇺 158.178.141.16

🇮🇩 153.124.161.83

🇩🇪 104.248.132.98

🇸🇪 89.253.83.119

🇳🇱 89.21.67.138

🇩🇪 69.5.169.79

🇻🇪 38.171.17.27

🇧🇪 34.53.206.200

🇰🇷 211.216.58.204

🇻🇳 210.245.30.140

🇲🇽 189.241.211.23