JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 143.198.1.80

143.198.1.80 was found in our database!

This IP was reported 87 times. Confidence of Abuse is 97%: ?

97%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 143.198.1.80

Whois 143.198.1.80

IP Abuse Reports for 143.198.1.80:

This IP address has been reported a total of 87 times from 65 distinct sources. 143.198.1.80 was first reported on November 12th 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 GabrielJST	2026-06-17 14:19:45 (7 hours ago)	Port Scan detected from 143.198.1.80 (US/United States/-).	Port Scan
🇩🇪 gadix	2026-06-17 13:01:32 (8 hours ago)	[17/Jun/2026:15:01:12.082145 +0200] ajKamI7vIBMj2yZLPZ1gcwAAABM 143.198.1.80 45576 127.0.0.1 7080 [1 ... show more [17/Jun/2026:15:01:12.082145 +0200] ajKamI7vIBMj2yZLPZ1gcwAAABM 143.198.1.80 45576 127.0.0.1 7080 [17/Jun/2026:15:01:13.634250 +0200] ajKamXBWlbZmWUki33656QAAANM 143.198.1.80 45574 127.0.0.1 7080 [17/Jun/2026:15:01:30.972401 +0200] ajKaqnBWlbZmWUki33656gAAAMc 143.198.1.80 38262 127.0.0.1 7080 ... show less	Web App Attack
🇺🇸 xmission.com	2026-06-17 12:45:50 (8 hours ago)	Blocked by UFW (TCP on 2078) Source port: 50448 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 2078) Source port: 50448 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 143.198.1.80) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇷 Threat.live	2026-06-17 11:15:04 (10 hours ago)	Suspicious Connection Attempts	Brute-Force
🇫🇷 Baking333	2026-06-17 10:32:50 (11 hours ago)	[redacted] 143.198.1.80 - - [17/Jun/2026:11:32:26 +0100] "GET /.git/index HTTP/1.1" 307 386 "-" "Moz ... show more [redacted] 143.198.1.80 - - [17/Jun/2026:11:32:26 +0100] "GET /.git/index HTTP/1.1" 307 386 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" [redacted] 143.198.1.80 - - [17/Jun/2026:11:32:49 +0100] "GET /.aws/credentials HTTP/1.1" 307 386 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 10:08:49 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 143.198.1.80 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 143.198.1.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 06:08:41.923337 2026] [security2:error] [pid 18619:tid 18619] [client 143.198.1.80:60024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.187"] [uri "/.env.local"] [unique_id "ajJyKa2m0GPrq7LJ333KXgAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇭 Sawasdee	2026-06-17 06:48:08 (14 hours ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇺🇸 Axel	2026-06-17 06:41:31 (15 hours ago)	Blocked by UFW on MVI [2078/tcp] \| SPT: 52944 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [2078/tcp] \| SPT: 52944 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 HostFission	2026-06-17 05:55:10 (15 hours ago)	PSAD port scan detected	Port Scan
🇸🇪 Lemmy	2026-06-17 05:29:55 (16 hours ago)		Web App Attack
🇫🇷 dynamix	2026-06-17 04:46:43 (16 hours ago)	Multiple WAF Violations	Web App Attack
🇧🇾 lns.bz	2026-06-17 02:19:49 (19 hours ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 MPL	2026-06-17 01:56:29 (19 hours ago)	tcp port scan (10 or more attempts)	Port Scan
🇷🇸 Scan	2026-06-17 01:18:35 (20 hours ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-06-17 01:03:55 (20 hours ago)	(caddyscan) Scanner path probe from 143.198.1.80 (US/United States/-): 5 in the last 3600 secs; Port ... show more (caddyscan) Scanner path probe from 143.198.1.80 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 216.128.134.2 200 2627 143.198.1.80 - - [17/Jun/2026:01:03:41 +0000] "GET /.git/HEAD HTTP/1.1" 216.128.134.2 200 2627 143.198.1.80 - - [17/Jun/2026:01:03:42 +0000] "GET /.git/config HTTP/1.1" 216.128.134.2 200 2627 143.198.1.80 - - [17/Jun/2026:01:03:47 +0000] "GET /.git/refs/heads/main HTTP/1.1" 216.128.134.2 200 2627 143.198.1.80 - - [17/Jun/2026:01:03:48 +0000] "GET /.git/index HTTP/1.1" 216.128.134.2 200 2627 143.198.1.80 - - [17/Jun/2026:01:03:52 +0000] "GET /.env.local HTTP/1.1" show less	Port Scan

Showing 1 to 15 of 87 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 179.8.47.54

🇺🇸 147.182.129.34

🇸🇬 103.187.146.131

🇨🇴 190.60.44.77

🇨🇿 109.71.212.190

🇸🇬 103.187.146.121

🇸🇬 103.187.146.107

🇵🇭 103.186.139.149

🇬🇧 94.8.44.54

🇸🇦 86.51.14.224

🇮🇶 65.20.146.167

🇨🇳 60.255.190.82

🇳🇴 178.232.220.186

🇺🇸 165.154.172.47

🇩🇿 154.253.149.24

🇹🇼 128.14.226.125

🇮🇩 103.186.1.150

🇮🇩 103.186.1.120

🇮🇩 103.186.1.59

🇮🇩 103.186.0.79