JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.253.251.6

80.253.251.6 was found in our database!

This IP was reported 66 times. Confidence of Abuse is 100%: ?

100%

ISP	GLOBAL CONNECTIVITY SOLUTIONS LLP
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215540
Domain Name	globconnex.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 80.253.251.6

Whois 80.253.251.6

IP Abuse Reports for 80.253.251.6:

This IP address has been reported a total of 66 times from 57 distinct sources. 80.253.251.6 was first reported on November 27th 2025, and the most recent report was 5 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 webadmin	2026-07-13 00:32:31 (5 minutes ago)		Brute-Force SSH
🇰🇷 Woodie	2026-07-13 00:23:48 (14 minutes ago)	2026-07-12T20:23:09.840351-04:00 debian sshd[3510795]: Invalid user orangepi from 80.253.251.6 port ... show more 2026-07-12T20:23:09.840351-04:00 debian sshd[3510795]: Invalid user orangepi from 80.253.251.6 port 37178 2026-07-12T20:23:09.844093-04:00 debian sshd[3510795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.253.251.6 2026-07-12T20:23:11.752065-04:00 debian sshd[3510795]: Failed password for invalid user orangepi from 80.253.251.6 port 37178 ssh2 2026-07-12T20:23:45.001622-04:00 debian sshd[3511072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.253.251.6 user=root 2026-07-12T20:23:47.382884-04:00 debian sshd[3511072]: Failed password for root from 80.253.251.6 port 45774 ssh2 ... show less	Brute-Force SSH
🇳🇱 COMPLEX	2026-07-13 00:21:47 (16 minutes ago)	Unsolicited TCP traffic \| Action: DROP \| Port 2222	Brute-Force
🇫🇷 as211431.net	2026-07-13 00:18:28 (19 minutes ago)	2026-07-13T00:14:25.834277+00:00 storage.andrewa.co.uk sshd-session[272375]: Invalid user admin from ... show more 2026-07-13T00:14:25.834277+00:00 storage.andrewa.co.uk sshd-session[272375]: Invalid user admin from 80.253.251.6 port 55910 2026-07-13T00:14:55.970241+00:00 storage.andrewa.co.uk sshd-session[273017]: Invalid user orangepi from 80.253.251.6 port 52860 2026-07-13T00:18:27.038593+00:00 storage.andrewa.co.uk sshd-session[277659]: Invalid user test from 80.253.251.6 port 54102 ... show less	Brute-Force SSH
🇳🇱 Alboweb B.V.	2026-07-13 00:11:40 (26 minutes ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇩🇪 pcpiefke	2026-07-13 00:10:20 (27 minutes ago)	(sshd) Failed SSH login from 80.253.251.6 (DE/Germany/-)	Brute-Force SSH
🇫🇷 tall1oN	2026-07-13 00:08:25 (29 minutes ago)	2026-07-13T02:07:50.658313+02:00 soon sshd-session[2818022]: pam_unix(sshd:auth): authentication fai ... show more 2026-07-13T02:07:50.658313+02:00 soon sshd-session[2818022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.253.251.6 2026-07-13T02:07:53.078357+02:00 soon sshd-session[2818022]: Failed password for invalid user admin from 80.253.251.6 port 56992 ssh2 2026-07-13T02:08:24.751480+02:00 soon sshd-session[2818384]: Invalid user orangepi from 80.253.251.6 port 39480 ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-07-13 00:03:23 (34 minutes ago)	Jul 12 18:03:21 phobos sshd[341093]: Invalid user orangepi from 80.253.251.6 port 40174 Jul 12 18:03 ... show more Jul 12 18:03:21 phobos sshd[341093]: Invalid user orangepi from 80.253.251.6 port 40174 Jul 12 18:03:21 phobos sshd[341093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.253.251.6 Jul 12 18:03:23 phobos sshd[341093]: Failed password for invalid user orangepi from 80.253.251.6 port 40174 ssh2 ... show less	Brute-Force SSH
🇺🇸 kosada.com	2026-07-13 00:01:47 (36 minutes ago)	SSH password guessing: Invalid user admin from 80.253.251.6 port 37264	Brute-Force SSH
Anonymous	2026-07-12 23:59:34 (38 minutes ago)	Fail2ban (sshd jail): 2 failed SSH attempts from 80.253.251.6.	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-12 23:59:28 (38 minutes ago)	(mod_security) mod_security (id:218420) triggered by 80.253.251.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:218420) triggered by 80.253.251.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 19:59:21.247388 2026] [security2:error] [pid 5110:tid 5110] [client 80.253.251.6:44360] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.175:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.175"] [uri "/hello.world"] [unique_id "alQqWRUKo2f5LAV43FzjzwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-12 23:50:19 (47 minutes ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
Anonymous	2026-07-12 23:50:03 (47 minutes ago)	\| A web attack returned code 200 (success).	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-07-12 23:37:11 (1 hour ago)	(mod_security) mod_security (id:218420) triggered by 80.253.251.6 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:218420) triggered by 80.253.251.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 19:37:05.251026 2026] [security2:error] [pid 13014:tid 13014] [client 80.253.251.6:46498] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "38"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.200:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.200"] [uri "/hello.world"] [unique_id "alQlIb3w9xUPXk8m98n0cQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 StopAbuse	2026-07-12 23:33:10 (1 hour ago)	tcp/443	Port Scan

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.186.115.35

🇧🇷 205.210.31.215

🇮🇳 203.190.153.90

🇩🇪 193.43.104.15

🇮🇳 159.65.148.158

🇸🇬 156.146.56.138

🇺🇸 107.150.103.210

🇺🇸 66.132.186.166

🇸🇬 47.236.121.178

🇳🇱 45.156.128.171

🇹🇭 203.154.158.195

🇧🇪 198.235.24.226

🇧🇷 191.178.194.85

🇳🇱 185.180.109.243

🇺🇸 173.255.223.89

🇺🇸 157.230.58.20

🇺🇸 147.185.132.144

🇨🇳 115.220.2.156

🇩🇪 69.5.169.225

🇻🇳 27.71.230.31