154.80.128.180

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
34 reports
26 reporters ยท latest 8 hours ago
ISP
VPSVAULT.HOST - VPS & BAREMETAL
Usage Type
Data Center/Web Hosting/Transit
ASN
AS215925
Domain Name
larus.net
Country
๐Ÿ‡จ๐Ÿ‡ฆ Canada
City
Toronto, Ontario
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
34 from 26 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 7 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 4 ๐Ÿ‡ต๐Ÿ‡ฑ Poland 3
Most common categories Port Scan 27 Hacking 14 Brute-Force 3 Exploited Host 3 Email Spam 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ซ๐Ÿ‡ฎ dnsbd.tech
nftables: Port scan (UDP:11211) [srv2]
Port Scan Hacking
๐Ÿ‡ง๐Ÿ‡ท radardatelecom
Blocked by Radar da Telecom firewall โ€” abuseipdb
Bad Web Bot Web App Attack
๐Ÿ‡จ๐Ÿ‡ฆ Arpan Sen
Network port/address scan: probed 1 distinct port(s) across 15 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช iNetWorker
firewall-block, port(s): 11211/udp
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท zulzeen
[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Database/Cache Attack)
Hacking Brute-Force
๐Ÿ‡ฎ๐Ÿ‡ณ Mr.Singh
NFT blocked 154.80.128.180 on 07-Nov-2026..
Port Scan Brute-Force
๐Ÿ‡ซ๐Ÿ‡ท JohnAtlas
Honeypot: connection attempt to unused port(s) 11211/udp on a server where these services do not exist. Automated firewall trap.
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ anon333
Hacker syslog review 1794061997
Hacking
Anonymous
Hit honeypot r.
Port Scan Hacking Exploited Host
๐Ÿ‡ฆ๐Ÿ‡น Pingger Shikkoken
2026-11-07T13:32:19+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=154.80.128.180 DST=152.53.50.28 LEN=45 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=UDP SPT=35277 DPT=11211 LEN=25
Hacking
๐Ÿ‡ฉ๐Ÿ‡ช Coinetic AI Security
Connection to a trap port: 1 attempts on port 11211, 2026-11-07 13:14 - 13:14 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).
Port Scan Hacking
๐Ÿ‡ฉ๐Ÿ‡ช DasDuo
Attempt on port 11211 - potential unauthorized database access attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
Port Scan
๐Ÿ‡ฏ๐Ÿ‡ต jsys
Automated report (nfacl NetFlow analysis, 300s window): host sweep (54 distinct dst hosts)
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ ByeByte API
byebyte.space auth: UDP packet to port 11211 (memcached) at 2026-11-07T12:30:31Z. Source port 58193. Packet: 45B, TTL 236, IP id 54321. Single packet, dropped at firewall.
Port Scan
๐Ÿ‡จ๐Ÿ‡ฟ kronos
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:41 | alerts5m:41
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ฆ๐Ÿ‡ด 102.214.36.69
๐Ÿ‡ต๐Ÿ‡น 94.62.188.203
๐Ÿ‡บ๐Ÿ‡ธ 20.171.10.202
๐Ÿ‡จ๐Ÿ‡ณ 14.29.214.161
๐Ÿ‡ธ๐Ÿ‡ช 207.127.94.142
๐Ÿ‡ฎ๐Ÿ‡ท 193.141.127.102
๐Ÿ‡ณ๐Ÿ‡ฑ 185.136.15.30
๐Ÿ‡ฆ๐Ÿ‡ท 181.111.132.57
๐Ÿ‡จ๐Ÿ‡ณ 106.13.95.77
๐Ÿ‡ฎ๐Ÿ‡ณ 103.88.76.27
๐Ÿ‡ฉ๐Ÿ‡ช 83.143.106.93
๐Ÿ‡น๐Ÿ‡ญ 43.152.248.170
๐Ÿ‡บ๐Ÿ‡ธ 18.212.218.245
๐Ÿ‡ณ๐Ÿ‡ฑ 195.178.110.22
๐Ÿ‡ง๐Ÿ‡ท 189.69.57.196
๐Ÿ‡บ๐Ÿ‡ธ 185.191.171.16
๐Ÿ‡ง๐Ÿ‡ท 179.216.16.184
๐Ÿ‡บ๐Ÿ‡ธ 150.107.38.251
๐Ÿ‡ฐ๐Ÿ‡ท 121.188.236.128
feedback