154.80.128.172
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- VPSVAULT.HOST - VPS & BAREMETAL
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS215925
- Domain Name
- larus.net
- Country
- 🇧🇷 Brazil
- City
- Sao Paulo, Sao Paulo
Abuse Reports
Total reports
341 from
171 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇷🇺 andrew.stream |
http 80 | "POST /LAPI/V1.0/PTZ/CustomProtocal/Configuration?TaskID=1 HTTP/1.1" |
|
Hacking | |
| 🇺🇸 conrad10781 |
nginx-direct-ip
|
Port Scan | |
| 🇺🇸 azminawwar |
[154.80.128.172] triggered by honeypot on port [80], Timestamp [2026-11-14T09:51:26Z]METHOD=POST PATH=/LAPI/V1.0/PTZ/CustomProtocal/Configuration?TaskID=1 HTTP=HTTP/1.1 UA="Mozilla/5.0 (Macintosh; Int
|
Port Scan Hacking | |
| 🇩🇪 ITSNF |
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=80
|
Port Scan Hacking | |
| Anonymous |
154.80.128.172 detected and blocked by apache-modsecurity after 1 try
|
Brute-Force | |
| 🇩🇪 Marco711 |
port/URL scanning
|
Port Scan Web App Attack | |
| 🇫🇮 Birdo |
|
Web App Attack Port Scan | |
| 🇳🇱 donarev419 |
Connection to port 80 with data transfer.
Data preview: POST /LAPI/V1.0/PTZ/CustomProtocal/Configuration?TaskID=1 HTTP/1.1
Host: 87.229.95.155
Accept: app
|
Port Scan Hacking | |
| Anonymous |
vulnerabilities scan
|
Port Scan Hacking Web App Attack | |
| 🇩🇪 Progetto1 |
Detected via HAProxyScanner at 2026-11-14 06:52:02 UTC on destination port WEB (80/443). Repeated scan / connection.
|
Port Scan Hacking Brute-Force | |
| Anonymous |
|
Web App Attack | |
| Anonymous |
Automated web vulnerability scanning and reconnaissance
|
Bad Web Bot Web App Attack | |
| 🇫🇷 id2i |
2026-11-14T06:19:06.330770+01:00 coraza-spoa[262622]: [client "154.80.128.172"] Coraza: Access denied (phase 2). Inbound Anomaly Score Exceeded (Total Score: 8)
|
Hacking Web App Attack | |
| 🇺🇸 anon333 |
Invalid probes to web server T0006
|
Hacking Exploited Host | |
| 🇩🇪 genokrad |
Direct ip access to website TCP 80/443, path "/LAPI/V1.0/PTZ/CustomProtocal/Configuration" [Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.].
|
Port Scan Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown