JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.249.132.132

80.249.132.132 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 52%: ?

52%

ISP	Site BV
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60781
Hostname(s)	da032.site.eu
Domain Name	site.eu
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 80.249.132.132

Whois 80.249.132.132

IP Abuse Reports for 80.249.132.132:

This IP address has been reported a total of 17 times from 11 distinct sources. 80.249.132.132 was first reported on June 9th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-07-10 22:53:27 (1 day ago)	Detected by WP fail2ban 2026-07-11T00:53:27.035560+02:00 wordpress: Authentication attempt from 80.2 ... show more Detected by WP fail2ban 2026-07-11T00:53:27.035560+02:00 wordpress: Authentication attempt from 80.249.132.132 show less	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-07-08 05:29:16 (4 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
Anonymous	2026-07-07 01:38:50 (5 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇬🇧 spamverify.com	2026-07-06 04:51:42 (6 days ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 05:15:36 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 80.249.132.132 (da032.site.eu): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 80.249.132.132 (da032.site.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 01:15:29.573817 2026] [security2:error] [pid 6438:tid 6438] [client 80.249.132.132:58228] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mail.skintormint.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.skintormint.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "akiW8TzavNzVJPHxJJrdUAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 12:36:03 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 80.249.132.132 (da032.site.eu): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 80.249.132.132 (da032.site.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 08:35:56.169722 2026] [security2:error] [pid 19322:tid 19322] [client 80.249.132.132:37632] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|caddydad.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "caddydad.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akesrMOHXxgFjOhkCM6uugAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Mundo Bueno	2026-07-03 04:30:18 (1 week ago)	[ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/6 \| Pays: NL \| UA: Mozilla/5.0 (Win ... show more [ISILIA Protection v2.1] Tentative d'accès: /wp-json/wp/v2/users/6 \| Pays: NL \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Sa show less	Hacking Web App Attack
🇲🇹 Malta	2026-07-01 22:52:17 (1 week ago)	80.249.132.132 - - [02/Jul/2026:00:52:17 +0200] "GET /wp-json/wp/v2/users/me HTTP/1.1" "Mozilla/5.0 ... show more 80.249.132.132 - - [02/Jul/2026:00:52:17 +0200] "GET /wp-json/wp/v2/users/me HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" show less	Hacking Web App Attack VPN IP
🇩🇪 Hazzard	2026-06-30 23:23:12 (1 week ago)	(wordpress) Failed wordpress login from 80.249.132.132 (NL/The Netherlands/-/-/da032.site.eu/[redact ... show more (wordpress) Failed wordpress login from 80.249.132.132 (NL/The Netherlands/-/-/da032.site.eu/[redacted]): (CF_ENABLE) show less	Brute-Force
🇩🇪 FeG Deutschland	2026-06-30 07:07:23 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇩🇪 Hazzard	2026-06-27 14:57:21 (2 weeks ago)	(wordpress) Failed wordpress login from 80.249.132.132 (NL/The Netherlands/-/-/da032.site.eu/[redact ... show more (wordpress) Failed wordpress login from 80.249.132.132 (NL/The Netherlands/-/-/da032.site.eu/[redacted]): (CF_ENABLE) show less	Brute-Force
🇺🇸 mnsf	2026-06-23 10:05:59 (2 weeks ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 08:50:06 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 80.249.132.132 (da032.site.eu): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 80.249.132.132 (da032.site.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 04:49:59.115267 2026] [security2:error] [pid 23076:tid 23076] [client 80.249.132.132:43730] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.thepotteriesmesilla.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.thepotteriesmesilla.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajpIt9i5VJPUWv8bOy9LcwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 20:39:01 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 80.249.132.132 (da032.site.eu): 1 in the last 3 ... show more (mod_security) mod_security (id:225170) triggered by 80.249.132.132 (da032.site.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 16:38:53.228181 2026] [security2:error] [pid 31282:tid 31282] [client 80.249.132.132:48358] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kitchen.pizzadata.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kitchen.pizzadata.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajWo3QUIIULSMCIF3kT-wgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 SpamStopper	2026-06-18 19:16:58 (3 weeks ago)	Automated mitigation by Fail2Ban firewall due to persistent security policy violations.	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.11

🇨🇭 209.99.189.124

🇫🇷 203.55.81.2

🇵🇰 175.107.201.149

🇺🇸 162.243.138.30

🇨🇦 85.217.149.64

🇸🇬 47.84.133.68

🇳🇱 176.65.131.188

🇫🇷 85.217.140.13

🇸🇬 47.79.206.116

🇳🇱 45.148.10.141

🇮🇩 36.72.206.33

🇺🇸 20.83.167.27

🇺🇸 20.81.46.129

🇧🇷 201.222.20.20

🇰🇪 197.232.104.194

🇳🇱 195.178.110.227

🇧🇴 190.181.25.210

🇨🇳 183.48.125.56

🇵🇹 176.223.18.112