JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 151.80.139.128

151.80.139.128 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 0%: ?

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	vps-4dfcbc44.vps.ovh.net
Domain Name	ovhcloud.com
Country	🇫🇷 France
City	Strasbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 151.80.139.128

Whois 151.80.139.128

IP Abuse Reports for 151.80.139.128:

This IP address has been reported a total of 129 times from 45 distinct sources. 151.80.139.128 was first reported on May 6th 2023, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-30 18:47:41 (4 months ago)	2026-04-30T18:47:39.885499+00:00 fra01-02-mail sshd[277618]: Invalid user admin from 151.80.139.128 ... show more 2026-04-30T18:47:39.885499+00:00 fra01-02-mail sshd[277618]: Invalid user admin from 151.80.139.128 port 44042 2026-04-30T18:47:39.890427+00:00 fra01-02-mail sshd[277619]: Invalid user admin from 151.80.139.128 port 44058 2026-04-30T18:47:39.895740+00:00 fra01-02-mail sshd[277620]: Invalid user admin from 151.80.139.128 port 44062 ... show less	Brute-Force
🇺🇸 Javier Kamanel	2025-01-16 03:48:59 (1 year ago)	Placeholder comment for this IP	Brute-Force SSH
🇺🇸 Javier Kamanel	2025-01-16 03:48:59 (1 year ago)	Placeholder comment for this IP	Brute-Force SSH
🇬🇧 Kieran Courtney	2025-01-14 13:52:19 (1 year ago)	OVH SAS	DNS Compromise
🇩🇪 Vegascosmetics	2025-01-10 22:51:06 (1 year ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇹🇷 rtbh.com.tr	2025-01-10 20:51:03 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇲🇾 Rizzy	2025-01-10 09:31:24 (1 year ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-01-10 03:15:41 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 151.80.139.128 (vps-542d5e26.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 151.80.139.128 (vps-542d5e26.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 09 22:15:34.335292 2025] [security2:error] [pid 2458:tid 2458] [client 151.80.139.128:65204] [client 151.80.139.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "haroparke.com"] [uri "/.env"] [unique_id "Z4CQ1tZabp66faWoA87JCgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2025-01-10 00:50:57 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2025-01-10 00:24:06 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 151.80.139.128 (vps-542d5e26.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 151.80.139.128 (vps-542d5e26.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 09 19:23:59.986488 2025] [security2:error] [pid 19970:tid 19970] [client 151.80.139.128:60055] [client 151.80.139.128] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|shhcenter.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "shhcenter.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z4Bon4CslOJWJNnsGUVt8wAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2025-01-09 22:51:05 (1 year ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-01-09 22:02:58 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 151.80.139.128 (vps-542d5e26.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 151.80.139.128 (vps-542d5e26.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 09 17:02:55.278842 2025] [security2:error] [pid 2920630:tid 2920630] [client 151.80.139.128:50607] [client 151.80.139.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miranda-race-walks.com"] [uri "/.env"] [unique_id "Z4BHj1zb23r51aqO20EMugAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 COMAITE	2025-01-09 21:05:13 (1 year ago)	Multiple web server 400 error codes from same source ip 151.80.139.128.	Web App Attack
🇹🇷 rtbh.com.tr	2025-01-09 20:50:58 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2025-01-09 13:54:20 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 151.80.139.128 (vps-542d5e26.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 151.80.139.128 (vps-542d5e26.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 09 08:54:16.368235 2025] [security2:error] [pid 1787902:tid 1787902] [client 151.80.139.128:50733] [client 151.80.139.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathiehazlett.com"] [uri "/.env"] [unique_id "Z3_VCBjffmSlJ86xhnefzwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

172.17.111.64

🇩🇿 154.241.5.108

🇨🇳 116.179.32.232

🇨🇳 113.104.186.37

🇧🇩 103.193.11.39

🇳🇱 45.148.10.152

🇹🇭 27.130.7.164

192.168.12.10

🇲🇾 183.171.237.250

🇨🇴 181.204.196.180

172.27.134.114

172.23.37.42

172.16.209.220

🇨🇳 171.37.182.83

🇨🇳 116.179.32.102

🇱🇾 102.38.0.118

100.102.203.64

🇷🇴 80.94.92.55

🇩🇪 64.34.85.209

🇨🇳 27.115.113.138