JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

80.241.221.236

Neutral Activity

Abuse confidence score ?

0% Low Risk

68 reports

33 reporters · latest 5 months ago

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3427543.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

80.241.221.236 has been reported 68 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 80.241.221.236

Export CSV

This IP address has been reported a total of 68 times from 33 distinct sources. 80.241.221.236 was first reported on May 3rd 2026, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-05-19 11:51:44 (5 months ago)	Attacking WordPress 80.241.221.236 - - [19/May/2026:13:51:31 +0200] "GET /wp-content/.env HTTP/1.1" ... show more Attacking WordPress 80.241.221.236 - - [19/May/2026:13:51:31 +0200] "GET /wp-content/.env HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" show less	Brute-Force Web App Attack
🇹🇷 ogulcanarslan	2026-05-19 08:29:00 (5 months ago)	80.241.221.236 - - [19/May/2026:08:29:04 +0000] "GET /adm/_profiler/phpinfo HTTP/1.1" 404 146 "-" "M ... show more 80.241.221.236 - - [19/May/2026:08:29:04 +0000] "GET /adm/_profiler/phpinfo HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "-" show less	Web Spam Port Scan
🇫🇷 Hostynet	2026-05-19 01:16:05 (5 months ago)	TCP SYN flood detected by MikroTik RouterOS filter (sustained half-open connection rate from single ... show more TCP SYN flood detected by MikroTik RouterOS filter (sustained half-open connection rate from single source). Source automatically blacklisted. show less	DDoS Attack
🇭🇺 szasa	2026-05-18 08:50:55 (5 months ago)	2026/05/18 10:50:53 [error] 2143328#2143328: 2203665 access forbidden by rule, client: 80.241.221.2 ... show more 2026/05/18 10:50:53 [error] 2143328#2143328: 2203665 access forbidden by rule, client: 80.241.221.236, server: datamentor.hu, request: "GET /.env HTTP/1.1", host: "datamentor.hu" 2026/05/18 10:50:54 [error] 2143330#2143330: 2203725 access forbidden by rule, client: 80.241.221.236, server: datamentor.hu, request: "GET /api/.env HTTP/1.1", host: "datamentor.hu" 2026/05/18 10:50:54 [error] 2143330#2143330: 2203726 access forbidden by rule, client: 80.241.221.236, server: datamentor.hu, request: "GET /api/v1/.env HTTP/1.1", host: "datamentor.hu" 2026/05/18 10:50:54 [error] 2143330#2143330: *2203728 access forbidden by rule, client: 80.241.221.236, server: datamentor.hu, request: "GET /api/core/.env HTTP/1.1", host: "datamentor.hu" ... show less	Web App Attack
🇧🇪 cmbplf	2026-05-18 05:27:54 (5 months ago)	167 requests with url.path *.env	Brute-Force Bad Web Bot
🇧🇷 dominioz	2026-05-18 03:04:02 (5 months ago)	2026-05-18 03:03:43 GET /.env.local - - 80.241.221.236 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64; ... show more 2026-05-18 03:03:43 GET /.env.local - - 80.241.221.236 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64) - 404 1440 2026-05-18 03:03:43 GET /.env.development - - 80.241.221.236 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64) - 404 1440 2026-05-18 03:03:43 GET /.env.dev - - 80.241.221.236 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64) - 404 1440 2026-05-18 03:03:43 GET /.env - - 80.241.221.236 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64) - 404 1440 ... show less	Web App Attack
🇮🇳 Genhost	2026-05-18 00:30:38 (5 months ago)	SCANNING OF PHP SHELL FILES	Brute-Force SSH
🇬🇧 thetomtaylor.co.uk	2026-05-17 18:06:02 (5 months ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-05-17 07:54:46 (5 months ago)	Web vulnerability probing: /crm/.env	Web App Attack
🇫🇷 Hostynet	2026-05-16 14:37:42 (5 months ago)	TCP SYN flood detected by MikroTik RouterOS filter (sustained half-open connection rate from single ... show more TCP SYN flood detected by MikroTik RouterOS filter (sustained half-open connection rate from single source). Source automatically blacklisted. show less	DDoS Attack
🇩🇪 NxtGenIT	2026-05-16 14:17:30 (5 months ago)	Tanner Honeypot hit, Event Type: , HTTP Method: GET, User Agent: , URI: /debug/default/view?panel=pr ... show more Tanner Honeypot hit, Event Type: , HTTP Method: GET, User Agent: , URI: /debug/default/view?panel=profiler show less	SSH
🇧🇪 boxed-it	2026-05-16 10:56:47 (5 months ago)	GET /.env (Tarpitted for 2m12s, wasted 7.85kB)	Web App Attack
🇧🇪 boxed-it	2026-05-16 07:15:50 (5 months ago)	GET /config/.env (Tarpitted for 1d15h8m40s, wasted 8.06MB)	Web App Attack
🇩🇪 jasperedv.de	2026-05-16 05:24:21 (5 months ago)	Apache Login - Brutforcing	Web App Attack Brute-Force
🇧🇪 boxed-it	2026-05-16 02:53:29 (5 months ago)	GET /.env (Tarpitted for 1d15h8m32s, wasted 8.06MB)	Web App Attack

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 170.106.101.180

🇺🇸 98.174.32.149

🇩🇪 51.195.40.26

🇨🇳 49.232.160.65

🇬🇧 45.135.142.108

🇸🇬 34.87.144.69

🇮🇳 20.193.141.133

🇨🇳 218.78.135.132

🇰🇷 211.105.71.4

🇧🇪 198.235.24.147

🇨🇳 121.229.211.42

🇨🇳 116.207.115.233

🇧🇬 79.124.58.142

🇺🇸 66.132.159.46

🇵🇭 49.145.128.112

🇨🇳 47.93.192.43

🇳🇱 45.148.10.151

🇨🇳 39.144.129.83

🇺🇸 152.232.185.176

🇨🇳 118.196.142.135