JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.80.172.211

80.80.172.211 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 32%: ?

32%

ISP	IPKO Telecommunications LLC
Usage Type	Fixed Line ISP
ASN	AS21246
Domain Name	ipko.com
Country	🇽🇰 Kosovo
City	Pristina, Pristina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 80.80.172.211

Whois 80.80.172.211

IP Abuse Reports for 80.80.172.211:

This IP address has been reported a total of 10 times from 6 distinct sources. 80.80.172.211 was first reported on February 16th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-20 01:23:14 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 80.80.172.211 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 80.80.172.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 21:23:06.874628 2026] [security2:error] [pid 18371:tid 18371] [client 80.80.172.211:57532] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 80.80.172.211 (+1 hits since last alert)\|tomkatkaraoke.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tomkatkaraoke.com"] [uri "/xmlrpc.php"] [unique_id "aoZW-s3Iw9HKn32tkjIlOQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 00:51:31 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 80.80.172.211 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 80.80.172.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 20:51:26.624033 2026] [security2:error] [pid 31963:tid 31963] [client 80.80.172.211:52448] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 80.80.172.211 (+1 hits since last alert)\|lemoulinavent.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lemoulinavent.org"] [uri "/xmlrpc.php"] [unique_id "aoZPjsePgPqL2o_OIRIeHAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 23:47:48 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 80.80.172.211 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 80.80.172.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 19:47:40.244081 2026] [security2:error] [pid 26332:tid 26332] [client 80.80.172.211:59088] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 80.80.172.211 (+1 hits since last alert)\|hiidied.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hiidied.com"] [uri "/xmlrpc.php"] [unique_id "aoZAnB7igChUTjrdVN4lRQAAAHE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 22:16:53 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 80.80.172.211 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 80.80.172.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 18:16:50.130064 2026] [security2:error] [pid 21453:tid 21478] [client 80.80.172.211:63830] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 80.80.172.211 (+1 hits since last alert)\|fastesttrademark.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fastesttrademark.com"] [uri "/xmlrpc.php"] [unique_id "aoYrUpl9SPCUysmlCWamWAAAAVY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-08-19 21:44:30 (1 week ago)	(wordpress) Failed wordpress login from 80.80.172.211 (XK/Kosovo/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-08-19 21:38:11 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 80.80.172.211 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 80.80.172.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 17:38:04.534253 2026] [security2:error] [pid 11817:tid 11817] [client 80.80.172.211:61777] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|apexhumanoidrobots.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "apexhumanoidrobots.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoYiPIHy4hxO3iLPHSFdYgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-08-19 21:02:21 (1 week ago)	(wordpress) Failed wordpress login from 80.80.172.211 (XK/Kosovo/-): (CF_ENABLE)	Brute-Force
🇺🇸 integrantservices.com	2026-08-19 16:34:37 (1 week ago)	(wordpress) Failed wordpress login from 80.80.172.211 (XK/Kosovo/-)	Brute-Force
🇨🇦 polycoda	2026-08-19 16:25:05 (1 week ago)	AutoBlock: 🔐 WordPress Login Brute Force (20X or 30X) (Decay-Based)	Brute-Force Web App Attack
🇪🇸 10dencehispahard SL	2022-02-16 03:12:04 (4 years ago)	Multiple failed login attempts on various servers [wordpress-xmlrpc]	Brute-Force Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 98.70.48.241

🇫🇷 51.75.253.68

🇮🇷 217.60.255.130

🇬🇧 193.163.125.90

🇺🇸 172.190.100.10

🇺🇸 162.216.149.83

🇯🇵 160.251.202.50

🇰🇷 158.180.79.132

🇸🇬 145.223.134.150

🇺🇸 138.197.195.44

🇯🇵 20.243.208.191

🇦🇷 201.176.240.55

🇺🇸 107.180.88.176

🇵🇰 103.120.116.162

🇺🇸 100.54.89.67

🇷🇺 46.236.186.158

🇳🇱 31.14.32.8

🇬🇧 188.240.59.35

🇲🇩 80.94.250.25

🇦🇺 54.252.179.198