80.212.48.93

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
72% Elevated
17 reports
16 reporters · latest 11 hours ago
ISP
Telenor Norge AS
Usage Type
Fixed Line ISP
ASN
AS2119
Hostname(s)
50d4305d.bb.online.no
Domain Name
telenor.no
Country
🇳🇴 Norway
City
Trondheim, Trondelag
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 6 🇺🇸 United States of America 3 🇫🇷 France 2
Most common categories Web App Attack 11 Port Scan 5 Bad Web Bot 5 Hacking 4 Brute-Force 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇯🇵 demonsword
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: httpbin.org:443
Open Proxy Port Scan
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
Anonymous
Multiple web server 400 error codes from same source ip
Web App Attack
🇩🇪 sternwart
Automatisch erkannt: Zugriff auf /.env.swp (3d.alpasana.ch)
Web App Attack Bad Web Bot
🇵🇱 sledzik1984
Web App Attack
🇫🇷 dynamix
Multiple WAF Violations
Web App Attack
🇫🇷 security.rdmc.fr
Web scan: request for a sensitive file (.env, .git, wp-config...)
Web App Attack Bad Web Bot
🇩🇪 konseptit
(mod_security) mod_security triggered on hostname [redacted] 80.212.48.93 (NO/Norway/50d4305d.bb.online.no)
SQL Injection
🇩🇪 Mr-Money
scenario: crowdsecurity/http-probing - events: 11
Web App Attack Hacking
Anonymous
denied traffic to a honeypot network. destination port 80.
Port Scan Hacking
🇩🇪 EGP Abuse Dept
Scanning for web/db/file exploits on tpc-024.mach3builders.nl
SQL Injection Bad Web Bot Web App Attack
🇩🇰 floyd_dk
Web App Attack
Anonymous
IP matched detection query bad paths many.
Brute-Force Web App Attack
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 53 | Len: 60B | Win: 64240(1) | rDNS: 50d4305d.bb.online.no | F2B/ufw-honeypot@2026-10-13T05:41:29Z
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 195.230.103.244
🇺🇸 185.77.222.232
🇺🇸 162.216.149.246
🇧🇷 137.131.152.94
🇷🇺 109.195.193.207
🇲🇦 105.77.201.47
🇳🇱 77.239.124.115
🇩🇪 69.5.169.112
🇬🇧 35.203.210.94
🇷🇴 193.32.162.84
🇦🇷 181.12.172.91
🇸🇬 168.144.38.198
🇵🇱 87.251.64.128
🇺🇸 54.210.235.21
🇨🇳 49.232.72.195
🇳🇱 45.148.10.157
🇬🇧 35.203.210.253
🇺🇸 20.118.242.81
🇺🇸 18.206.81.85
🇺🇸 216.25.89.116
feedback