This IP address has been reported a total of
19
times from
14 distinct
sources.
157.100.105.80 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(modsec_5040) ModSec 5040: API Basic Auth blocked from 157.100.105.80 (EC/Ecuador/host-157-100-105-8 ...
show more(modsec_5040) ModSec 5040: API Basic Auth blocked from 157.100.105.80 (EC/Ecuador/host-157-100-105-80.ecua.net.ec): 1 in the last 3600 secs (0-195)
show less
Unauthorized VPN login attempts: 1 attempts were recorded from 157.100.105.80
2026-09-30T13:05:48+02 ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 157.100.105.80
2026-09-30T13:05:48+02:00 vpn Access-Reject 'xmara22' station: 157.100.105.80 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x in AS203136 (LLC Ordunet), Geo ...
show moreBotnet UDP flood (DDoS) against a hosted game server at 185.143.177.x in AS203136 (LLC Ordunet), Georgia. On 2026-09-05 from 20:01 local time (+04:00) this host received 1,231,350 packets/sec, of which 1,220,538 packets/sec were discarded at our border - the largest attack we have recorded. The flood hit udp 4444, 44444 and 80 simultaneously from 2412 distinct sources in 1091 networks and 125 countries; small uniform UDP datagrams of 29-48 bytes, a pure packet-rate attack. This source sustained more than 600 packets/sec toward the host, against about 200 packets/sec for a legitimate player. Detected on a MikroTik RouterOS router by per-source rate accounting in the raw/prerouting chain (dst-limit 600,200,src-address/10s); the timestamp is when this source crossed the threshold. Not a scan and not brute force - the host is almost certainly compromised. Evidence on request to [email protected].
show less
DDoS flood attack against 31.56.58.0 (2026-08-20 19:05:36 -> 2026-08-20 19:20:36 UTC) targeting AS21 ...
show moreDDoS flood attack against 31.56.58.0 (2026-08-20 19:05:36 -> 2026-08-20 19:20:36 UTC) targeting AS215599. This IP (AS27947) sent ~134 packets (0.01 MB) during the attack window. Likely a compromised device (botnet).
show less
UDP flood (DDoS) vs AS215599: 9536 pkts / 13.64 MB to UDP 80/8443 across 410 dst IP(s), 2026-08-19 2 ...
show moreUDP flood (DDoS) vs AS215599: 9536 pkts / 13.64 MB to UDP 80/8443 across 410 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
UDP flood (DDoS) vs AS215599: 9536 pkts / 13.64 MB to UDP 80/8443 across 410 dst IP(s), 2026-08-19 2 ...
show moreUDP flood (DDoS) vs AS215599: 9536 pkts / 13.64 MB to UDP 80/8443 across 410 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less