154.80.128.191

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
93 reports
60 reporters · latest 3 hours ago
ISP
VPSVAULT.HOST - VPS & BAREMETAL
Usage Type
Data Center/Web Hosting/Transit
ASN
AS215925
Domain Name
larus.net
Country
🇧🇷 Brazil
City
Sao Paulo, Sao Paulo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
93 from 60 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 26 🇩🇪 Germany 15 🇳🇱 Netherlands 7
Most common categories Port Scan 81 Hacking 22 Web App Attack 15 Brute-Force 11 Exploited Host 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
🇩🇪 Da_tschek
Port scanning
Port Scan Hacking
🇺🇸 BSG Webmaster
Port scanning (Port 443)
Port Scan Hacking
🇧🇬 MazenHost
1794206032 - 11/09/2026 08:33:52 Host: 154.80.128.191/154.80.128.191 Port: 161 UDP Blocked ...
Port Scan
🇧🇷 diego
[rede-164-29] 11/09/2026-03:04:48.011391, 154.80.128.191, Protocol: 17, GPL SNMP public access udp
Port Scan
🇳🇮 elfita
Blocked by nftables on AmneziaWG gateway (Ports: 1900)
Port Scan Brute-Force Exploited Host
🇫🇮 dnsbd.tech
nftables: Port scan (UDP:161) [srv2]
Port Scan Hacking
🇩🇪 reznekcs
Blocked by UFW firewall
Brute-Force
🇩🇪 Hans Wurst
1794203261 - 11/09/2026 06:47:41 Host: 154.80.128.191/154.80.128.191 Port: 161 UDP Blocked
Port Scan
🇧🇬 MazenHost
1794203002 - 11/09/2026 07:43:22 Host: 154.80.128.191/154.80.128.191 Port: 161 UDP Blocked ...
Port Scan
🇧🇷 diego
[rede-44-49] 11/09/2026-02:27:13.345918, 154.80.128.191, Protocol: 17, GPL SNMP public access udp
Port Scan
🇧🇬 MazenHost
1794201262 - 11/09/2026 07:14:22 Host: 154.80.128.191/154.80.128.191 Port: 161 UDP Blocked ...
Port Scan
🇧🇷 diego
[rede-168-134] 11/09/2026-01:57:00.292813, 154.80.128.191, Protocol: 17, GPL SNMP public access udp
Port Scan
🇧🇬 MazenHost
1794199513 - 11/09/2026 05:45:13 Host: 154.80.128.191/154.80.128.191 Port: 161 UDP Blocked ...
Port Scan
🇦🇹 Pingger Shikkoken
2026-11-09T04:39:38+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=154.80.128.191 DST=152.53.50.28 LEN=66 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=UDP SPT=38668 DPT=161 LEN=46
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇯🇵 118.193.61.14
🇰🇪 102.206.115.185
🇨🇦 85.217.149.16
🇺🇸 72.63.75.198
🇧🇩 59.152.97.86
🇸🇬 47.82.55.209
🇺🇸 44.197.76.210
🇧🇪 35.206.177.26
🇺🇦 31.31.120.227
🇺🇸 20.25.87.141
🇮🇳 3.110.22.41
🇭🇺 195.228.79.114
🇳🇱 193.47.62.69
🇺🇸 162.216.149.184
🇺🇸 152.208.19.233
🇩🇪 94.183.174.99
🇵🇹 85.240.193.104
🇳🇱 77.239.124.158
🇳🇱 77.239.124.72
🇺🇸 72.63.39.215
feedback