154.80.128.137
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- VPSVAULT.HOST - VPS & BAREMETAL
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS215925
- Domain Name
- larus.net
- Country
- 🇧🇷 Brazil
- City
- Sao Paulo, Sao Paulo
Abuse Reports
Total reports
19 from
14 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-11-05 UTC.
|
Exploited Host | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: port scan / service probe. 3 events observed. Reported automatically from a honeypot sensor.
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 32400)
Source port: 61001
TTL: 239
Packet length: 40
TOS: 0x00
This report (for 154.80.128.137) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 7 hits on ports [20128] (automated)
|
Port Scan | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [20128/tcp]
Source port: 56058
TTL: 235
Packet length: 40
|
Port Scan | |
| Anonymous |
Blocked by firewall on hugin [20128/tcp] | Rule: UFW | SPT: 56058 | TTL: 240 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 20128
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 k3rn3l109 |
Sentinel honeypot: nodered-flow hit on node-red.edgecdnhub.com
|
Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 20128)
Source port: 56058
TTL: 243
Packet length: 40
TOS: 0x00
This report (for 154.80.128.137) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 MPL |
tcp/20128 (3 or more attempts)
|
Port Scan | |
| 🇺🇸 Aurealize |
firewall port scanning detected. 2 or more observation(s) from 2026-11-04T12:56:25.000Z through 2026-11-04T12:56:25.000Z.
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 20128)
Source port: 61000
TTL: 243
Packet length: 40
TOS: 0x00
This report (for 154.80.128.137) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇦 DRI |
Unsolicited TCP traffic on Honeypot, srcport=61000 dstport=20128
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/20128 (5 or more attempts)
|
Port Scan | |
| 🇳🇱 StopAbuse |
tcp/20128
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown