JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

161.35.111.80

Activity Trending Down

Abuse Confidence Score

10% Caution

115 reports

40 reporters · latest 3 weeks ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

115 from 40 distinct reporters

First reported

October 4th 2025

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇫🇷 France 1 🇳🇱 Netherlands 1

Most common categories Port Scan 2

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Kejult	2026-10-22 17:08:53 UTC · (3 weeks ago)	Honeypot Finding: repeated TCP service probing on TCP/8888 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.	Port Scan
🇳🇱 VMHeaven.io	2026-10-20 14:06:48 UTC · (3 weeks ago)	Blocked by UFW [81/tcp] Source port: 61000 TTL: 242 Packet length: 44	Port Scan
🇺🇸 wteiken	2026-08-24 02:05:15 UTC · (2 months ago)	2026-08-23T22:05:08.691265-04:00 nostromo.teiken.net kernel: [ 1728.166860] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=161.35.111.80 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=37304 DF PROTO=TCP SPT=47618 D ... show more 2026-08-23T22:05:08.691265-04:00 nostromo.teiken.net kernel: [ 1728.166860] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=161.35.111.80 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=37304 DF PROTO=TCP SPT=47618 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-23T22:05:09.694725-04:00 nostromo.teiken.net kernel: [ 1729.174185] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=161.35.111.80 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=37305 DF PROTO=TCP SPT=47618 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-23T22:05:10.721257-04:00 nostromo.teiken.net kernel: [ 1730.197840] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=161.35.111.80 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=37306 DF PROTO=TCP SPT=47618 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-23T22:05:11.692627-04:00 nostromo.teiken.net kernel: [ 1731.172064] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a ... show less	Port Scan
🇫🇷 masterguru	2026-04-09 14:43:30 UTC · (7 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 161.35.111.80 (US/United States/-): 2 in the last 3600 secs (0-196)	Hacking
🇸🇪 KIDOS	2026-01-08 12:37:39 UTC · (10 months ago)	KASM auto: exploit_/.git/config	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-12-15 17:59:12 UTC · (10 months ago)	(mod_security) mod_security (id:210492) triggered by 161.35.111.80 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 12:59:07.329108 2025] [security2:error] [pid 27447:tid 27447] [client 161.35.111.80:65186] M ... show more (mod_security) mod_security (id:210492) triggered by 161.35.111.80 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 12:59:07.329108 2025] [security2:error] [pid 27447:tid 27447] [client 161.35.111.80:65186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.27"] [uri "/.git/config"] [unique_id "aUBMa6qu6MLjfxWptOnoUAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 KIDOS	2025-12-15 17:59:10 UTC · (10 months ago)	KASM auto: exploit_/.git/config	Brute-Force SSH
🇺🇸 Cyber Crusader	2025-12-15 12:41:34 UTC · (10 months ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇨🇳 ThreatBook.io	2025-12-13 22:28:19 UTC · (10 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/161.35.111.80 2025-12-13 06:19:53 / 2025-12-13 07:21:44 /	Web App Attack
🇳🇱 ATV	2025-10-07 03:07:28 UTC · (1 year ago)	Unsolicited connection attempts to port 8082	Port Scan
🇹🇷 rtbh.com.tr	2025-10-06 20:09:12 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/8082	Brute-Force
🇺🇸 xmission.com	2025-10-06 19:16:25 UTC · (1 year ago)	Blocked by UFW (TCP on 8082) Source port: 57916 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 161.35.111.80) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 thororen	2025-10-06 18:09:08 UTC · (1 year ago)	Blocked by UFW [8082/tcp] Source port: 46167 TTL: 51 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 MPL	2025-10-06 18:07:03 UTC · (1 year ago)	tcp/8082 (2 or more attempts)	Port Scan
🇺🇸 MPL	2025-10-06 16:45:52 UTC · (1 year ago)	tcp/8082	Port Scan

Showing 1 to 15 of 115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 150.221.127.250

🇷🇴 193.32.162.84

🇧🇷 177.72.87.7

🇨🇳 124.74.97.18

🇮🇹 93.71.65.65

🇳🇱 195.178.110.228

🇮🇳 117.216.33.31

🇨🇮 102.67.220.167

🇺🇸 45.156.129.206

🇳🇱 185.218.86.2

🇺🇸 134.122.125.153

🇳🇱 109.160.32.121

🇳🇱 86.38.187.239

🇵🇹 82.155.113.151

🇳🇱 80.82.77.33

🇱🇹 77.90.185.226

🇺🇸 72.180.39.216

🇮🇳 61.246.239.15

🇸🇬 45.74.17.185

🇫🇮 193.187.110.160