JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.241.219.205

80.241.219.205

Recent Activity

82 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Contabo GmbH

Usage Type

Data Center/Web Hosting/Transit

ASN

AS51167

Hostname(s)

vmi3246626.contaboserver.net

Domain Name

contabo.com

Country

🇫🇷 France

City

Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 80.241.219.205:

This IP address has been reported a total of 82 times from 70 distinct sources. 80.241.219.205 was first reported on September 9th 2026, and the most recent report was 5 minutes ago. In the last 60 days, the top reporter locations were: Germany with 28 reports; United States of America with 16 reports; France with 6 reports. The most common categories in these recent reports were: Web App Attack 43 times; Brute-Force 30 times; Bad Web Bot 19 times; Port Scan 19 times; Hacking 14 times; Other 18 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 j-tap	2026-09-09 14:54:49 (5 minutes ago)	2026-09-09T16:54:14.369901+02:00 mail.vr9.pro sshd[3279181]: pam_unix(sshd:auth): authentication fai ... show more 2026-09-09T16:54:14.369901+02:00 mail.vr9.pro sshd[3279181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.241.219.205 2026-09-09T16:54:16.170528+02:00 mail.vr9.pro sshd[3279181]: Failed password for invalid user admin from 80.241.219.205 port 33412 ssh2 2026-09-09T16:54:48.245539+02:00 mail.vr9.pro sshd[3280784]: Invalid user user from 80.241.219.205 port 42964 ... show less	Brute-Force SSH
Anonymous	2026-09-09 14:49:36 (10 minutes ago)	[Wed Sep 09 16:49:35.462023 2026] [access_compat:error] [pid 24635] [client 80.241.219.205:48470] AH ... show more [Wed Sep 09 16:49:35.462023 2026] [access_compat:error] [pid 24635] [client 80.241.219.205:48470] AH01797: client denied by server configuration: /var/www/html/hello.world [Wed Sep 09 16:49:35.535964 2026] [access_compat:error] [pid 24635] [client 80.241.219.205:48470] AH01797: client denied by server configuration: /var/www/html/ [Wed Sep 09 16:49:35.583525 2026] [access_compat:error] [pid 24635] [client 80.241.219.205:48470] AH01797: client denied by server configuration: /var/www/html/index.php ... show less	Web App Attack
🇩🇪 LRob	2026-09-09 14:23:33 (36 minutes ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET (+1 more ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET (+1 more) \| path: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php (+5 more) \| query: %25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input (+1 more) \| ua: libredtail-http \| 2026-09-09 14:23 UTC show less	Hacking Web App Attack
🇪🇸 mescribano	2026-09-09 14:10:01 (50 minutes ago)		Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-09 13:30:03 (1 hour ago)	(mod_security) mod_security (id:218420) triggered by 80.241.219.205 (vmi3246626.contaboserver.net): ... show more (mod_security) mod_security (id:218420) triggered by 80.241.219.205 (vmi3246626.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 09:29:54.518861 2026] [security2:error] [pid 17781:tid 17781] [client 80.241.219.205:55212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.197:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.197"] [uri "/hello.world"] [unique_id "aqFfUptqb9MHnmJot3-BHgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 dbmwebdesign	2026-09-09 13:25:18 (1 hour ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇩🇰 swrlly	2026-09-09 12:48:06 (2 hours ago)	1 unauthorized webserver connection	Web App Attack
🇬🇧 Will.B.	2026-09-09 12:34:30 (2 hours ago)	(sshd) Failed SSH login from 80.241.219.205 (DE/Germany/vmi3246626.contaboserver.net): 5 in the last ... show more (sshd) Failed SSH login from 80.241.219.205 (DE/Germany/vmi3246626.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 9 13:30:56 vps sshd[3949561]: Invalid user admin from 80.241.219.205 port 50908 Sep 9 13:31:26 vps sshd[3949566]: Invalid user user from 80.241.219.205 port 45406 Sep 9 13:32:27 vps sshd[3949583]: Invalid user user from 80.241.219.205 port 34060 Sep 9 13:33:59 vps sshd[3949621]: Invalid user orangepi from 80.241.219.205 port 41890 Sep 9 13:34:29 vps sshd[3949625]: Invalid user support from 80.241.219.205 port 55522 show less	Brute-Force SSH
🇹🇭 MWA SOC	2026-09-09 12:24:40 (2 hours ago)		Hacking
🇮🇩 Burayot	2026-09-09 12:07:56 (2 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 80.241.219.205 (FR/France/vmi324662 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 80.241.219.205 (FR/France/vmi3246626.contaboserver.net): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 HamSammich	2026-09-09 11:33:49 (3 hours ago)	Automated sensor: 1 HTTPS connection/probe attempts over the last 24h (latest 2026-09-09T11:33Z).	Brute-Force Web App Attack
Anonymous	2026-09-09 11:22:41 (3 hours ago)	unsolicited connect TCP dport 2375 (sport 55414)	Hacking
🇩🇪 dispaisyenterprises	2026-09-09 11:10:08 (3 hours ago)	Honeypot [fra-de-honeypot]: SSH handshake/banner (24 bytes of payload); 2222 [1] TCP Reported by Dis ... show more Honeypot [fra-de-honeypot]: SSH handshake/banner (24 bytes of payload); 2222 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH
🇩🇪 Skyrider	2026-09-09 11:04:56 (3 hours ago)	crowdsecurity/http-cve-2021-41773	Web App Attack
🇺🇸 TPI-Abuse	2026-09-09 10:52:33 (4 hours ago)	(mod_security) mod_security (id:218420) triggered by 80.241.219.205 (vmi3246626.contaboserver.net): ... show more (mod_security) mod_security (id:218420) triggered by 80.241.219.205 (vmi3246626.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 06:52:28.140478 2026] [security2:error] [pid 19882:tid 19897] [client 80.241.219.205:35638] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.126:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.126"] [uri "/hello.world"] [unique_id "aqE6bBYsGavNAubIEovcNAAAAQk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 82 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇨 190.110.206.234

🇮🇳 182.18.145.21

🇮🇩 117.102.87.140

🇵🇹 88.157.220.46

🇲🇽 78.12.247.193

🇮🇹 217.112.106.236

🇦🇷 200.41.233.229

🇺🇸 192.241.176.216

🇧🇴 190.129.74.148

🇵🇦 186.75.96.9

🇮🇳 182.76.74.110

🇩🇪 167.94.145.25

🇹🇳 164.160.1.220

🇺🇸 162.248.100.97

🇺🇸 162.241.43.213

🇱🇰 122.255.14.70

🇧🇬 109.160.32.19

🇳🇬 105.115.11.41

🇮🇩 103.31.132.189

🇷🇺 89.207.68.182