JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 128.199.6.80

128.199.6.80 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 128.199.6.80

Whois 128.199.6.80

IP Abuse Reports for 128.199.6.80:

This IP address has been reported a total of 21 times from 13 distinct sources. 128.199.6.80 was first reported on January 6th 2025, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RAP	2025-06-09 08:07:41 (11 months ago)	2025-06-09 08:07:41 UTC Unauthorized activity to TCP port 8088. Web App	Port Scan Web App Attack
🇩🇪 jomu	2025-02-03 09:29:40 (1 year ago)	2025-02-03T09:29:38.351155+00:00 jomu postfix/submission/smtpd[2896742]: warning: unknown[128.199.6. ... show more 2025-02-03T09:29:38.351155+00:00 jomu postfix/submission/smtpd[2896742]: warning: unknown[128.199.6.80]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2025-02-03T09:29:40.317874+00:00 jomu postfix/submission/smtpd[2896742]: lost connection after AUTH from unknown[128.199.6.80] ... show less	Brute-Force
🇨🇦 Mediashaker	2025-02-03 06:08:31 (1 year ago)	(smtpauth) Failed SMTP AUTH login from 128.199.6.80 (US/United States/-)	Brute-Force
Anonymous	2025-01-31 15:36:04 (1 year ago)	(CT) IP 128.199.6.80 (US/United States/-) found to have 1123 connections; Ports: 27960; SRV: 1; Acti ... show more (CT) IP 128.199.6.80 (US/United States/-) found to have 1123 connections; Ports: 27960; SRV: 1; Action: 1; Trigger: CT_LIMIT show less	DDoS Attack Hacking
🇺🇸 TPI-Abuse	2025-01-27 21:22:51 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 128.199.6.80 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:217280) triggered by 128.199.6.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 16:22:46.775700 2025] [security2:error] [pid 29137:tid 29137] [client 128.199.6.80:43184] [client 128.199.6.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|www.namisushionline.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.namisushionline.com"] [uri "/action.php"] [unique_id "Z5f5JqCwV2kCuvAYqqYevQAAABA"], referer: https://www.namisushionline.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-26 19:21:25 (1 year ago)	postfix-sasl	Brute-Force Web App Attack
🇮🇹 Progetto1	2025-01-10 11:39:01 (1 year ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇺🇸 nowyouknow	2025-01-10 11:00:36 (1 year ago)	(From [email protected])	Phishing Web Spam
Anonymous	2025-01-10 05:01:06 (1 year ago)	(CT) IP 128.199.6.80 (US/United States/unreachable) found to have 132 connections; Ports: 27960; SRV ... show more (CT) IP 128.199.6.80 (US/United States/unreachable) found to have 132 connections; Ports: 27960; SRV: DH; Action: 0; Trigger: CT_LIMIT show less	DDoS Attack Hacking
🇦🇺 oncord	2025-01-10 04:43:46 (1 year ago)	Form spam	Web Spam
Anonymous	2025-01-09 19:44:41 (1 year ago)	(CT) IP 128.199.6.80 (US/United States/unreachable) found to have 103 connections; Ports: 27960; SRV ... show more (CT) IP 128.199.6.80 (US/United States/unreachable) found to have 103 connections; Ports: 27960; SRV: DH; Action: 0; Trigger: CT_LIMIT show less	DDoS Attack Hacking
Anonymous	2025-01-09 18:18:58 (1 year ago)	(CT) IP 128.199.6.80 (US/United States/-) found to have 153 connections; Ports: 27960; SRV: 2; Actio ... show more (CT) IP 128.199.6.80 (US/United States/-) found to have 153 connections; Ports: 27960; SRV: 2; Action: 0; Trigger: CT_LIMIT show less	DDoS Attack Hacking
Anonymous	2025-01-09 17:58:54 (1 year ago)	(CT) IP 128.199.6.80 (US/United States/unreachable) found to have 171 connections; Ports: 27960; SRV ... show more (CT) IP 128.199.6.80 (US/United States/unreachable) found to have 171 connections; Ports: 27960; SRV: DH; Action: 0; Trigger: CT_LIMIT show less	DDoS Attack Hacking
Anonymous	2025-01-09 17:11:15 (1 year ago)	(CT) IP 128.199.6.80 (US/United States/-) found to have 110 connections; Ports: 27960; SRV: 2; Actio ... show more (CT) IP 128.199.6.80 (US/United States/-) found to have 110 connections; Ports: 27960; SRV: 2; Action: 0; Trigger: CT_LIMIT show less	DDoS Attack Hacking
🇺🇸 TPI-Abuse	2025-01-09 07:57:54 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 128.199.6.80 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 128.199.6.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 09 02:57:48.327800 2025] [security2:error] [pid 20700:tid 20700] [client 128.199.6.80:65114] [client 128.199.6.80] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|rcrgalicia.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rcrgalicia.com"] [uri "/mailto:[email protected]"] [unique_id "Z3-BfOqzUVzBXevEQZS8jAAAAAI"], referer: http://rcrgalicia.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇻 185.113.139.84

🇩🇪 176.65.132.93

🇩🇪 167.94.146.34

🇨🇳 122.194.13.147

🇧🇩 103.4.145.50

🇮🇷 86.57.3.146

🇪🇸 79.117.115.43

🇺🇸 18.218.146.4

🇬🇧 5.181.124.131

🇺🇸 2607:f8b0:4004:c17::12c

🇺🇸 85.208.96.208

🇺🇿 84.54.94.30

🇳🇱 45.156.87.13

🇨🇳 39.171.202.170

🇺🇸 2a02:4780:b:737:0:225d:dee:1

🇨🇳 223.95.25.251

🇧🇼 168.167.228.123

🇸🇬 165.232.169.124

🇨🇳 111.26.69.160

🇻🇳 103.90.227.203