This IP address has been reported a total of
116
times from
79 distinct
sources.
80.241.209.14 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 80.241.209.14 (DE/Germany/vmi3387948.contaboserver.net): 5 in the last ...
show more(sshd) Failed SSH login from 80.241.209.14 (DE/Germany/vmi3387948.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 22 08:30:16 15649 sshd[8939]: Invalid user admin from 80.241.209.14 port 53080
Jun 22 08:30:18 15649 sshd[8939]: Failed password for invalid user admin from 80.241.209.14 port 53080 ssh2
Jun 22 08:30:49 15649 sshd[9101]: Invalid user orangepi from 80.241.209.14 port 54916
Jun 22 08:30:50 15649 sshd[9101]: Failed password for invalid user orangepi from 80.241.209.14 port 54916 ssh2
Jun 22 08:31:22 15649 sshd[9496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.241.209.14 user=root
show less
Brute-Force
SSH
Anonymous
This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-41773
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SERVER /bin ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt). Ip 80.241.209.14 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-22 11:16:23.937287742 +0000 UTC
show less
Blocked by UFW (TCP on 80)
Source port: 52215
TTL: 55
Packet length: 40
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 80)
Source port: 52215
TTL: 55
Packet length: 40
TOS: 0x00
This report (for 80.241.209.14) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
(sshd) Failed SSH login from 80.241.209.14 (DE/Germany/vmi3387948.contaboserver.net): 5 in the last ...
show more(sshd) Failed SSH login from 80.241.209.14 (DE/Germany/vmi3387948.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 22 06:02:18 18019 sshd[21801]: Invalid user admin from 80.241.209.14 port 55262
Jun 22 06:02:21 18019 sshd[21801]: Failed password for invalid user admin from 80.241.209.14 port 55262 ssh2
Jun 22 06:02:52 18019 sshd[21966]: Invalid user orangepi from 80.241.209.14 port 35130
Jun 22 06:02:54 18019 sshd[21966]: Failed password for invalid user orangepi from 80.241.209.14 port 35130 ssh2
Jun 22 06:03:25 18019 sshd[22466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.241.209.14 user=root
show less
Telnet credential brute-force observed by honeypot.
Source IP: 80.241.209.14
Targeted device: NAS
Fi ...
show moreTelnet credential brute-force observed by honeypot.
Source IP: 80.241.209.14
Targeted device: NAS
First seen: 22 Jun 2026 10:58:43 UTC
Last seen: 22 Jun 2026 10:58:43 UTC
Attempts: 1
Sample credentials: admin:admin
show less
2026-06-22T12:14:18.729898+02:00 **** sshd-session[47407]: Invalid user **** from 80.241.209.14 port ...
show more2026-06-22T12:14:18.729898+02:00 **** sshd-session[47407]: Invalid user **** from 80.241.209.14 port 60716
2026-06-22T12:14:18.731048+02:00 **** sshd-session[47407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.241.209.14
2026-06-22T12:14:20.684039+02:00 **** sshd-session[47407]: Failed password for invalid user **** from 80.241.209.14 port 60716 ssh2
2026-06-22T12:14:51.888602+02:00 **** sshd-session[47931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.241.209.14 user=root
2026-06-22T12:14:54.662270+02:00 **** sshd-session[47931]: Failed password for root from 80.241.209.14 port 59558 ssh2
show less
Honeypot [fc-honeypot]: HTTP/1.1 request on 2375
GET /containers/json
User-Agent: libredtail-http
A ...
show moreHoneypot [fc-honeypot]: HTTP/1.1 request on 2375
GET /containers/json
User-Agent: libredtail-http
Accept: */*; 2375 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
unauthorized access to cgi-bin scripts (POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/. ...
show moreunauthorized access to cgi-bin scripts (POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh)
show less