JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.190.72.130

80.190.72.130 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo
Usage Type	Data Center/Web Hosting/Transit
ASN	AS40021
Hostname(s)	vmi3438092.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 80.190.72.130

Whois 80.190.72.130

IP Abuse Reports for 80.190.72.130:

This IP address has been reported a total of 20 times from 20 distinct sources. 80.190.72.130 was first reported on July 17th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-07-20 04:53:05 (2 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇦 Dunham Support	2026-07-20 00:34:39 (6 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 80.190.72.130 (DE/Germany/vmi3438092.co ... show more (mod_security) mod_security triggered on hostname [redacted] 80.190.72.130 (DE/Germany/vmi3438092.contaboserver.net) show less	SQL Injection
🇩🇪 LRob	2026-07-19 21:24:19 (9 hours ago)	CrowdSec: crowdsecurity/http-probing \| req: /app/etc/local.xml \| 11 distinct paths \| UA: Mozilla/5.0 ... show more CrowdSec: crowdsecurity/http-probing \| req: /app/etc/local.xml \| 11 distinct paths \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 18:46:21 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 80.190.72.130 (vmi3438092.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 80.190.72.130 (vmi3438092.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 14:46:15.363655 2026] [security2:error] [pid 31138:tid 31170] [client 80.190.72.130:57206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vavryn.net"] [uri "/.env"] [unique_id "al0bd2tTBJw1v0QjG7CYAQAAANY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 findlab	2026-07-19 17:00:03 (14 hours ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
Anonymous	2026-07-19 14:47:40 (16 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 80.190.72.130 (DE/Germany/vmi3438092.co ... show more (mod_security) mod_security triggered on hostname [redacted] 80.190.72.130 (DE/Germany/vmi3438092.contaboserver.net) show less	SQL Injection
🇫🇷 Octopuce	2026-07-19 14:19:04 (17 hours ago)	Aggressive web search of vulnerable pages: /config/database.yml /application.yml /.circleci/config.y ... show more Aggressive web search of vulnerable pages: /config/database.yml /application.yml /.circleci/config.yml /docker-compose.yml /backup.sql ... show less	Web App Attack
🇫🇷 mail.avx.gr	2026-07-19 13:59:54 (17 hours ago)	Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: default-10-0-0-4:443 80.190.72.130 - - [19/Jul/202 ... show more Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: default-10-0-0-4:443 80.190.72.130 - - [19/Jul/2026:16:59:53 +0300] "GET /debug HTTP/1.1" 404 2418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Web App Attack
Anonymous	2026-07-19 11:02:48 (20 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇹🇭 MWA SOC	2026-07-18 08:41:45 (1 day ago)		Hacking
🇺🇸 Starburst SysOp Team	2026-07-18 08:15:21 (1 day ago)	Malware host detected by rbl.malware.expert. RBL lookup of 130.72.190.80.rbl.malware.expert succeede ... show more Malware host detected by rbl.malware.expert. RBL lookup of 130.72.190.80.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-mnz6-1) show less	Hacking
🇬🇧 blik2108	2026-07-18 02:56:50 (2 days ago)	www.nomadsailing.co.uk:443 80.190.72.130 - - [18/Jul/2026:03:56:49 +0100] "POST /alfacgiapi/bash.alf ... show more www.nomadsailing.co.uk:443 80.190.72.130 - - [18/Jul/2026:03:56:49 +0100] "POST /alfacgiapi/bash.alfa HTTP/1.1" 404 3648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" www.nomadsailing.co.uk:443 80.190.72.130 - - [18/Jul/2026:03:56:49 +0100] "GET /alfacgiapi/bash.alfa HTTP/1.1" 404 3648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" www.nomadsailing.co.uk:443 80.190.72.130 - - [18/Jul/2026:03:56:49 +0100] "POST /alfacgiapi/perl.alfa HTTP/1.1" 404 3648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" www.nomadsailing.co.uk:443 80.190.72.130 - - [18/Jul/2026:03:56:49 +0100] "GET /alfacgiapi/perl.alfa HTTP/1.1" 404 3648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" www.nomadsailing.co.uk:443 80.190.72.130 - - [18/Jul/2026:03:56:49 +0100] "POST /alfacgiapi/py.alfa HTTP/1.1" 404 3648 "-" "Mo ... show less	Web App Attack
🇩🇪 EGP Abuse Dept	2026-07-18 01:29:53 (2 days ago)	Scanning for web/db/file exploits on www.vanderleun.nl	SQL Injection Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-07-18 01:02:15 (2 days ago)	Site scraper	Web App Attack
🇺🇸 nationaleventpros.com	2026-07-17 23:57:52 (2 days ago)	vulnerability scan	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 91.196.55.175

🇳🇱 91.92.40.5

🇬🇧 45.82.76.111

🇪🇹 196.189.56.189

🇩🇪 194.88.98.100

🇺🇸 185.226.196.17

🇺🇦 185.92.138.13

🇮🇳 110.224.171.97

🇮🇳 103.187.158.103

🇧🇩 103.86.198.162

🇳🇬 102.88.137.80

🇺🇸 91.230.168.130

🇨🇦 85.217.149.36

🇯🇵 74.176.205.111

🇺🇸 64.62.197.165

🇺🇸 45.156.129.67

🇲🇽 38.35.157.132

🇺🇿 213.230.82.175

🇧🇷 200.6.90.200

🇫🇷 185.177.72.70