AbuseIPDB » 80.241.212.226

Check an IP Address, Domain Name, or Subnet

e.g. 44.200.30.73, microsoft.com, or 5.188.10.0/24

80.241.212.226 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	-
Domain Name	contabo.com
Country	Germany
City	Munich, Bayern

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 80.241.212.226

Whois 80.241.212.226

IP Abuse Reports for 80.241.212.226:

This IP address has been reported a total of 45 times from 30 distinct sources. 80.241.212.226 was first reported on June 29th 2022, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
4server	09 Aug 2022	[TueAug0921:01:25.1307282022][:error][pid15558:tid47467561322240][client80.241.212.226:59830][client ... show more[TueAug0921:01:25.1307282022][:error][pid15558:tid47467561322240][client80.241.212.226:59830][client80.241.212.226]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-config\\\\\\\\.php\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"3167\"][id\"381206\"][rev\"4\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:AccesstoWordPressconfigurationfileblocked\"][data\"wp-config.php\"][severity\"CRITICAL\"][hostname\"admin-services.ch\"][uri\"/wp-config.php.restore\"][unique_id\"YvKvBWNpjO5714W7MATi4AAAAM8\"][TueAug0921:01:34.6759652022][:error][pid15426:tid47467529803520][client80.241.212.226:59840][client80.241.212.226]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-config\\\\\\\\.php\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"3167\"][id\"381206\"][rev\"4\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:AccesstoWordPressconfigurationfileblocked\"][data\"wp-config.php\"][severity\"CRITICAL\"][hostname\"a show less	Port Scan Brute-Force Web App Attack
nextweb	09 Aug 2022	(mod_security) mod_security (id:210730) triggered by 80.241.212.226 (DE/Germany/Bavaria/Munich/-/[AS ... show more(mod_security) mod_security (id:210730) triggered by 80.241.212.226 (DE/Germany/Bavaria/Munich/-/[AS51167 Contabo GmbH]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
vfinder	06 Aug 2022	Backdrop CMS module - Request: /wp-slicemap.php	Bad Web Bot Web App Attack
Maykson	05 Aug 2022	80.241.212.226 - - [05/Aug/2022:08:04:50 -0300] "GET /ups.php HTTP/2.0" 404 5096 "-" "Mozilla/5.0 (W ... show more80.241.212.226 - - [05/Aug/2022:08:04:50 -0300] "GET /ups.php HTTP/2.0" 404 5096 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" ... show less	Exploited Host Web App Attack
Maykson	04 Aug 2022	80.241.212.226 - - [04/Aug/2022:13:46:55 -0300] "GET /ups.php HTTP/1.1" 403 3496 "-" "Mozilla/5.0 (W ... show more80.241.212.226 - - [04/Aug/2022:13:46:55 -0300] "GET /ups.php HTTP/1.1" 403 3496 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" ... show less	Exploited Host Web App Attack
Maykson	31 Jul 2022	80.241.212.226 - - [31/Jul/2022:22:35:58 -0300] "GET /ups.php HTTP/1.1" 403 4278 "-" "Mozilla/5.0 (W ... show more80.241.212.226 - - [31/Jul/2022:22:35:58 -0300] "GET /ups.php HTTP/1.1" 403 4278 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" ... show less	Exploited Host Web App Attack
Maykson	31 Jul 2022	80.241.212.226 - - [31/Jul/2022:22:16:51 -0300] "GET /ups.php HTTP/1.1" 403 4354 "-" "Mozilla/5.0 (W ... show more80.241.212.226 - - [31/Jul/2022:22:16:51 -0300] "GET /ups.php HTTP/1.1" 403 4354 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" ... show less	Exploited Host Web App Attack
iNetWorker	28 Jul 2022	trolling for resource vulnerabilities	Web App Attack
UKFast Security	27 Jul 2022	Suspicious URL access.	Web App Attack
4server	26 Jul 2022	[TueJul2616:24:53.2446462022][:error][pid26675:tid47921613592320][client80.241.212.226:54920][client ... show more[TueJul2616:24:53.2446462022][:error][pid26675:tid47921613592320][client80.241.212.226:54920][client80.241.212.226]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-config\\\\\\\\.php\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"3167\"][id\"381206\"][rev\"4\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:AccesstoWordPressconfigurationfileblocked\"][data\"wp-config.php\"][severity\"CRITICAL\"][hostname\"acquathermic.ch\"][uri\"/wp-config.php.zip\"][unique_id\"Yt_5NdT34aR4E3jcjPEd2wAAAMk\"][TueJul2616:24:54.4447152022][:error][pid26838:tid47921626199808][client80.241.212.226:54934][client80.241.212.226]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"wp-config\\\\\\\\.php\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"3167\"][id\"381206\"][rev\"4\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:AccesstoWordPressconfigurationfileblocked\"][data\"wp-config.php\"][severity\"CRITICAL\"][hostname\"acquath show less	Blog Spam
TTWebhosting	19 Jul 2022	(mod_security) mod_security (id:431000) triggered by 80.241.212.226 (DE/Germany/Bavaria/Munich/-): 1 ... show more(mod_security) mod_security (id:431000) triggered by 80.241.212.226 (DE/Germany/Bavaria/Munich/-): 1 in the last 3600 secs show less	Port Scan Hacking Brute-Force
Maykson	19 Jul 2022	80.241.212.226 - - [19/Jul/2022:18:08:02 -0300] "GET /wp-admin/wp-admin.php HTTP/1.1" 404 6250 "-" " ... show more80.241.212.226 - - [19/Jul/2022:18:08:02 -0300] "GET /wp-admin/wp-admin.php HTTP/1.1" 404 6250 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" ... show less	Exploited Host Web App Attack
Maykson	19 Jul 2022	80.241.212.226 - - [19/Jul/2022:17:20:03 -0300] "GET /wp-admin/wp-admin.php HTTP/2.0" 404 531 "-" "M ... show more80.241.212.226 - - [19/Jul/2022:17:20:03 -0300] "GET /wp-admin/wp-admin.php HTTP/2.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" ... show less	Exploited Host Web App Attack
syokadmin	19 Jul 2022	(mod_security) mod_security (id:77316861) triggered by 80.241.212.226 (DE/Germany/-): 1 in the last ... show more(mod_security) mod_security (id:77316861) triggered by 80.241.212.226 (DE/Germany/-): 1 in the last 3600 secs show less	Brute-Force
Maykson	19 Jul 2022	80.241.212.226 - - [19/Jul/2022:13:24:34 -0300] "GET /wp-admin/wp-admin.php HTTP/1.1" 404 19700 "-" ... show more80.241.212.226 - - [19/Jul/2022:13:24:34 -0300] "GET /wp-admin/wp-admin.php HTTP/1.1" 404 19700 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" ... show less	Exploited Host Web App Attack