JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.190.72.132

80.190.72.132 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo
Usage Type	Data Center/Web Hosting/Transit
ASN	AS40021
Hostname(s)	vmi3438094.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 80.190.72.132

Whois 80.190.72.132

IP Abuse Reports for 80.190.72.132:

This IP address has been reported a total of 38 times from 30 distinct sources. 80.190.72.132 was first reported on July 17th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-26 22:00:59 (5 hours ago)	Auto-ban: >3000 req/min op 2026-07-26	Web App Attack SSH Hacking
Anonymous	2026-07-26 17:50:04 (10 hours ago)	Bot / scanning and/or hacking attempts: [1/1] done, GET /nl/property HTTP/2.0, GET / HTTP/2.0, [3/3] ... show more Bot / scanning and/or hacking attempts: [1/1] done, GET /nl/property HTTP/2.0, GET / HTTP/2.0, [3/3] done, GET /env HTTP/2.0, GET /metrics HTTP/2.0, GET /server-status HTTP/2.0, GET /.well-known/assetlinks.json HTTP/2.0, GET /property-details/ HTTP/2.0, GET /actuator/configprops HTTP/2.0, GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP, GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?v, [1/0] read: stream 0, , GET /wp-includes/js/jquery/ui/slider.min.js?ver=1.13.3.map HTTP, POST /api/graphql HTTP/2.0, POST /graphql HTTP/2.0, GET /.well-known/openid-configuration HTTP/2.0, GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.3.map HTTP/, [2/2] done, GET /actuator HTTP/2.0, GET /favoriete-woningen HTTP/2.0, GET /actuator/env HTTP/2.0, GET /favoriete-woningen/ HTTP/2.0, GET /property-results HTTP/2.0, GET /property-results/ HTTP/2.0 show less	Hacking Web App Attack
🇬🇧 consul.to	2026-07-22 23:42:40 (4 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 4server	2026-07-22 19:18:51 (4 days ago)	[WedJul2221:18:45.9942032026][security2:error][pid718649:tid718719][client80.190.72.132:0]ModSecurit ... show more [WedJul2221:18:45.9942032026][security2:error][pid718649:tid718719][client80.190.72.132:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"selenemodestipastrydetails.it\"][uri\"/.env.old\"][unique_id\"amEXld_WBu904cr5bRA8mwAAAIk\"] show less	Port Scan Brute-Force Web App Attack
🇸🇬 securejdprop	2026-07-22 11:34:41 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing.	Hacking Web App Attack
🇫🇷 Octopuce	2026-07-22 08:16:49 (4 days ago)	Aggressive web search of vulnerable pages: /config/database.yml /application.yml /.circleci/config.y ... show more Aggressive web search of vulnerable pages: /config/database.yml /application.yml /.circleci/config.yml /docker-compose.yml /backup.sql ... show less	Web App Attack
🇬🇧 WebNiraj	2026-07-22 04:03:43 (4 days ago)	(mod_security) mod_security (id:949110) triggered by 80.190.72.132 (FR/France/vmi3438094.contaboserv ... show more (mod_security) mod_security (id:949110) triggered by 80.190.72.132 (FR/France/vmi3438094.contaboserver.net): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇬🇧 consul.to	2026-07-21 18:34:50 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 thesimonmanuel	2026-07-21 13:46:44 (5 days ago)	80.190.72.132 - - [21/Jul/2026:19:16:44 +0530] "GET /.aws/credentials HTTP/2.0" 404 12801 "-" "Mozil ... show more 80.190.72.132 - - [21/Jul/2026:19:16:44 +0530] "GET /.aws/credentials HTTP/2.0" 404 12801 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" show less	Web App Attack
🇩🇪 thesimonmanuel	2026-07-21 13:16:22 (5 days ago)	80.190.72.132 - - [21/Jul/2026:18:46:21 +0530] "GET /.git/HEAD HTTP/2.0" 403 86 "-" "Mozilla/5.0 (Wi ... show more 80.190.72.132 - - [21/Jul/2026:18:46:21 +0530] "GET /.git/HEAD HTTP/2.0" 403 86 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" show less	Web App Attack
🇩🇪 thesimonmanuel	2026-07-21 12:46:21 (5 days ago)	80.190.72.132 - - [21/Jul/2026:18:16:19 +0530] "GET /actuator HTTP/2.0" 404 12800 "-" "Mozilla/5.0 ( ... show more 80.190.72.132 - - [21/Jul/2026:18:16:19 +0530] "GET /actuator HTTP/2.0" 404 12800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" show less	Web App Attack
Anonymous	2026-07-21 03:58:04 (5 days ago)	80.190.72.132 - - [21/Jul/2026:11:58:04 +0800] "GET /database.sqlite HTTP/1.1" 404 196 "-" "Mozilla/ ... show more 80.190.72.132 - - [21/Jul/2026:11:58:04 +0800] "GET /database.sqlite HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-21 02:58:05 (6 days ago)	80.190.72.132 - - [21/Jul/2026:10:58:03 +0800] "GET /.well-known/jwks.json HTTP/1.1" 404 196 "-" "Mo ... show more 80.190.72.132 - - [21/Jul/2026:10:58:03 +0800] "GET /.well-known/jwks.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 80.190.72.132 - - [21/Jul/2026:10:58:03 +0800] "GET /debug/vars HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 80.190.72.132 - - [21/Jul/2026:10:58:03 +0800] "GET /actuator/env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 80.190.72.132 - - [21/Jul/2026:10:58:03 +0800] "POST /api/graphql HTTP/1.1" 404 196 "-" "-" 80.190.72.132 - - [21/Jul/2026:10:58:04 +0800] "GET /.well-known/assetlinks.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 80.190.72.132 - - [21/Jul/2026:10:58:04 +0800] "GET /server-status HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 80.190.72.132 - - [21/Jul/2026:10:58:04 +0800] "GET /actuator/configprops HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win ... show less	Bad Web Bot Web App Attack
🇺🇸 Matthew Ping	2026-07-21 01:30:02 (6 days ago)	ModSecurity rule 949110 triggered on server. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
Anonymous	2026-07-21 00:20:02 (6 days ago)	suspicious request in access.log	Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.25

🇭🇰 199.45.155.85

🇳🇱 185.226.197.7

🇳🇱 185.107.80.93

🇺🇸 165.154.134.19

🇮🇳 139.59.37.187

🇰🇿 91.201.216.61

🇺🇦 91.196.231.195

🇺🇸 66.132.172.209

🇳🇱 45.148.10.204

🇻🇳 27.79.47.131

🇧🇷 201.77.124.248

🇵🇭 180.190.19.143

🇨🇳 180.138.194.82

🇺🇸 172.208.24.40

🇺🇸 147.185.132.126

🇺🇸 135.237.126.217

🇭🇰 118.193.33.130

🇺🇸 66.132.186.159

🇺🇸 64.62.156.24