JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 128.199.12.80

128.199.12.80 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 22%: ?

22%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	sub.mtsz
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 128.199.12.80

Whois 128.199.12.80

IP Abuse Reports for 128.199.12.80:

This IP address has been reported a total of 9 times from 8 distinct sources. 128.199.12.80 was first reported on October 28th 2022, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 bret.dk	2026-07-23 16:18:10 (19 hours ago)	Jul 23 16:18:08 sg-mirror sshd[3031031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Jul 23 16:18:08 sg-mirror sshd[3031031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.12.80 user=root Jul 23 16:18:10 sg-mirror sshd[3031031]: Failed password for root from 128.199.12.80 port 38256 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-07-22 23:38:00 (1 day ago)	2026-07-23T01:37:32.702881+02:00 outpost sshd[2161474]: pam_unix(sshd:auth): authentication failure; ... show more 2026-07-23T01:37:32.702881+02:00 outpost sshd[2161474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.12.80 user=root 2026-07-23T01:37:34.355389+02:00 outpost sshd[2161474]: Failed password for root from 128.199.12.80 port 35242 ssh2 2026-07-23T01:37:58.494386+02:00 outpost sshd[2161866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.12.80 user=root 2026-07-23T01:38:00.383745+02:00 outpost sshd[2161866]: Failed password for root from 128.199.12.80 port 54604 ssh2 ... show less	Brute-Force SSH
🇷🇺 Cheese	2026-07-15 12:09:01 (1 week ago)	Jul 15 12:08:33 msk-1-vm-2sd9 sshd[74043]: Failed password for root from 128.199.12.80 port 50812 ss ... show more Jul 15 12:08:33 msk-1-vm-2sd9 sshd[74043]: Failed password for root from 128.199.12.80 port 50812 ssh2 Jul 15 12:08:44 msk-1-vm-2sd9 sshd[74045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.12.80 user=root Jul 15 12:08:45 msk-1-vm-2sd9 sshd[74045]: Failed password for root from 128.199.12.80 port 52488 ssh2 Jul 15 12:08:57 msk-1-vm-2sd9 sshd[74047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.12.80 user=root Jul 15 12:09:00 msk-1-vm-2sd9 sshd[74047]: Failed password for root from 128.199.12.80 port 51964 ssh2 ... show less	Brute-Force SSH
🇩🇪 BlackCrowy	2026-07-01 04:34:54 (3 weeks ago)	Connection closed. Duration: 1 сек..	Port Scan
🇨🇳 ThreatBook.io	2025-06-11 23:33:45 (1 year ago)	ThreatBook Intelligence: Spam,cdn more details on https://threatbook.io/ip/128.199.12.80 2025-06-11 ... show more ThreatBook Intelligence: Spam,cdn more details on https://threatbook.io/ip/128.199.12.80 2025-06-11 02:55:29 / 2025-06-11 02:55:29 /favicon.ico show less	Web App Attack
🇨🇳 ThreatBook.io	2025-02-25 00:22:31 (1 year ago)	ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/128.199.12.80 2025-02-24 01:02: ... show more ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/128.199.12.80 2025-02-24 01:02:05 / 2025-02-24 01:02:05 /favicon.ico show less	Web App Attack
Anonymous	2025-02-23 17:35:54 (1 year ago)	128.199.12.80 - - [23/Feb/2025:18:35:53 +0100] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible)" ... show more 128.199.12.80 - - [23/Feb/2025:18:35:53 +0100] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible)" US ... show less	Port Scan
Anonymous	2022-10-31 09:33:43 (3 years ago)	General scanning observed in manual log review.	Web App Attack
Anonymous	2022-10-28 00:04:22 (3 years ago)	General application exploitation and scanning observed in manual log review.	Hacking Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇬 196.170.93.86

🇺🇸 159.223.173.157

🇮🇪 108.131.125.129

🇪🇬 41.43.166.91

🇬🇧 35.203.211.253

🇺🇸 3.224.205.25

🇭🇰 2a09:bac5:398b:16c8::245:98

🇧🇷 2804:8d4:21b:6440:e90b:e382:db63:8d92

🇿🇼 2605:59c1:37f8:f910:d854:a9f0:1539:1270

🇦🇴 193.163.125.138

🇵🇱 176.53.159.198

🇺🇸 162.216.149.250

🇮🇹 158.47.199.158

🇪🇬 154.179.223.41

🇫🇷 141.11.1.134

🇻🇳 123.18.169.62

🇮🇳 110.235.218.49

🇮🇳 110.227.51.230

🇳🇱 45.148.10.147

🇺🇸 45.56.108.48