JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.240.127.199

80.240.127.199 was found in our database!

This IP was reported 84 times. Confidence of Abuse is 100%: ?

100%

ISP	CLOUDI NEXTGEN SL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS49635
Hostname(s)	compassionate-wu.80-240-127-199.plesk.page
Domain Name	clouding.io
Country	🇪🇸 Spain
City	Barcelona, Catalonia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 80.240.127.199

Whois 80.240.127.199

IP Abuse Reports for 80.240.127.199:

This IP address has been reported a total of 84 times from 63 distinct sources. 80.240.127.199 was first reported on June 26th 2026, and the most recent report was 13 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-06-26 16:19:28 (13 minutes ago)	80.240.127.199 - - [26/Jun/2026:18:18:10 +0200] "POST /wp-login.php HTTP/1.1" 200 12887 "https://tax ... show more 80.240.127.199 - - [26/Jun/2026:18:18:10 +0200] "POST /wp-login.php HTTP/1.1" 200 12887 "https://taxifisch.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 80.240.127.199 - - [26/Jun/2026:18:18:39 +0200] "POST /wp-login.php HTTP/1.1" 200 7268 "https://www.staging.die-netzialisten.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 80.240.127.199 - - [26/Jun/2026:18:19:27 +0200] "POST /wp-login.php HTTP/1.1" 200 21484 "https://testaccount-fanderl.webseiten.ws/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 WeekendWeb	2026-06-26 16:06:05 (27 minutes ago)	Wordpress Vunerability attack	Web App Attack
🇩🇪 LRob.fr	2026-06-26 15:45:11 (48 minutes ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇫🇷 Yepngo	2026-06-26 15:28:34 (1 hour ago)	80.240.127.199 - - [26/Jun/2026:17:28:33 +0200] "POST /wp-login.php HTTP/2.0" 200 11371 "https://www ... show more 80.240.127.199 - - [26/Jun/2026:17:28:33 +0200] "POST /wp-login.php HTTP/2.0" 200 11371 "https://www.yepngo.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇩🇪 4server	2026-06-26 15:09:48 (1 hour ago)	[FriJun2617:09:44.9923572026][security2:error][pid2950636:tid2950739][client80.240.127.199:0]ModSecu ... show more [FriJun2617:09:44.9923572026][security2:error][pid2950636:tid2950739][client80.240.127.199:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mail.alessandrolucchini.ch\"][uri\"/wp-login.php\"][unique_id\"aj6WOOYiER6nDofXkF9EDgAAABc\"]\,referer:https://mail.alessandrolucchini.ch/wp-login.php show less	Port Scan Brute-Force Web App Attack
🇳🇱 tmiland	2026-06-26 14:41:45 (1 hour ago)	(wordpress_login) WordPress Login Attack 80.240.127.199 (ES/Spain/compassionate-wu.80-240-127-199.pl ... show more (wordpress_login) WordPress Login Attack 80.240.127.199 (ES/Spain/compassionate-wu.80-240-127-199.plesk.page): 3 in the last 3600 secs; IP: 80.240.127.199; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 80.240.127.199 - - [26/Jun/2026:16:41:40 +0200] "GET /wp-login.php HTTP/1.1" 200 1936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 80.240.127.199 - - [26/Jun/2026:16:41:41 +0200] "GET /wp-login.php HTTP/1.1" 200 1936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 80.240.127.199 - - [26/Jun/2026:16:41:41 +0200] "POST /wp-login.php HTTP/1.1" 200 2068 "https://.*/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Brute-Force
🇨🇿 plzenskypruvodce.cz	2026-06-26 13:36:26 (2 hours ago)	2026-06-26T15:36:25.644025+02:00 web wordpress(varhanykolin.cz)[1641708]: Immediately block connecti ... show more 2026-06-26T15:36:25.644025+02:00 web wordpress(varhanykolin.cz)[1641708]: Immediately block connections from 80.240.127.199 ... show less	Brute-Force
🇦🇺 AWW-Admin	2026-06-26 13:32:27 (3 hours ago)	(wordpress) Failed wordpress login from 80.240.127.199 (ES/Spain/compassionate-wu.80-240-127-199.ple ... show more (wordpress) Failed wordpress login from 80.240.127.199 (ES/Spain/compassionate-wu.80-240-127-199.plesk.page) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-26 13:29:42 (3 hours ago)	(mod_security) mod_security (id:225170) triggered by 80.240.127.199 (compassionate-wu.80-240-127-199 ... show more (mod_security) mod_security (id:225170) triggered by 80.240.127.199 (compassionate-wu.80-240-127-199.plesk.page): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 09:29:37.633294 2026] [security2:error] [pid 7962:tid 7962] [client 80.240.127.199:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|local639.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "local639.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aj5-wWdp3ZbXsvMXLPqYWwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-26 13:21:19 (3 hours ago)	80.240.127.199 - - [26/Jun/2026:15:21:14 +0200] "GET /wp-login.php HTTP/2.0" 200 3999 "-" "Mozilla/5 ... show more 80.240.127.199 - - [26/Jun/2026:15:21:14 +0200] "GET /wp-login.php HTTP/2.0" 200 3999 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" ... show less	Web App Attack
🇫🇷 masterguru	2026-06-26 13:21:14 (3 hours ago)	(wordpress) Apache: Failed WordPress login from 80.240.127.199 (ES/Spain/compassionate-wu.80-240-127 ... show more (wordpress) Apache: Failed WordPress login from 80.240.127.199 (ES/Spain/compassionate-wu.80-240-127-199.plesk.page): 10 in the last 3600 secs (0-193) show less	Hacking
🇺🇸 Ghost Rider	2026-06-26 13:15:00 (3 hours ago)	RdpGuard detected brute-force attempt on RDP	Brute-Force
🇩🇪 Viveronese	2026-06-26 13:03:33 (3 hours ago)	Wordpress vulnerability scanning	Web App Attack
🇩🇪 Ba-Yu	2026-06-26 12:49:23 (3 hours ago)	WordPress bruteforce	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 LRob.fr	2026-06-26 12:45:15 (3 hours ago)	Repeated 503 errors, blocked by Fail2Ban in custom-503 jail	Bad Web Bot Web App Attack

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.135

🇧🇪 198.235.24.209

🇩🇪 164.90.233.161

🇫🇷 92.204.71.143

🇺🇸 74.94.234.151

🇳🇱 45.148.10.151

🇺🇸 44.94.130.93

🇮🇷 5.232.89.102

🇺🇸 216.25.89.106

🇨🇦 159.89.113.99

🇭🇰 152.32.252.233

🇮🇪 130.195.213.210

🇺🇸 44.203.28.196

🇩🇪 213.61.116.1

🇧🇷 201.63.223.141

🇳🇱 160.119.69.16

🇺🇸 147.185.132.180

🇩🇪 130.185.120.224

🇮🇩 103.154.231.122

🇺🇸 100.28.153.226