This IP address has been reported a total of
19
times from
14 distinct
sources.
186.80.229.173 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Russian Federation
with 5
reports;
Germany
with 4
reports;
Australia
with 1
report.
The most common categories in these recent reports were:
DDoS Attack
8
times;
Exploited Host
8
times;
Web App Attack
6
times;
Port Scan
4
times;
Brute-Force
3
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
nfdump top talker: 186.80.229.173 | first seen 2026-10-13 13:04:34.432 | duration 00:00:00.094 | flo ...
show morenfdump top talker: 186.80.229.173 | first seen 2026-10-13 13:04:34.432 | duration 00:00:00.094 | flows=1 | packets=33759 | bytes=24.6 M | pps=357 | bps=2.1 M | bpp=728 | proto=udp
show less
nfdump top talker: 186.80.229.173 | first seen 2026-10-13 13:04:34.432 | duration 00:00:00.267 | flo ...
show morenfdump top talker: 186.80.229.173 | first seen 2026-10-13 13:04:34.432 | duration 00:00:00.267 | flows=7 | packets=181071 | bytes=132.5 M | pps=677 | bps=4.0 M | bpp=731 | proto=udp
show less
nfdump top talker: 186.80.229.173 | first seen 2026-10-13 08:11:43.104 | duration 00:00:00.082 | flo ...
show morenfdump top talker: 186.80.229.173 | first seen 2026-10-13 08:11:43.104 | duration 00:00:00.082 | flows=3 | packets=101277 | bytes=72.3 M | pps=1224 | bps=7.0 M | bpp=713 | proto=any
show less
nfdump top talker: 186.80.229.173 | first seen 2026-10-12 12:26:19.136 | duration 00:00:00.097 | flo ...
show morenfdump top talker: 186.80.229.173 | first seen 2026-10-12 12:26:19.136 | duration 00:00:00.097 | flows=4 | packets=116622 | bytes=84.0 M | pps=1201 | bps=6.9 M | bpp=720 | proto=udp
show less
DDoS Attack
Exploited Host
Anonymous
🔥 Web application attack detected. Vulnerability scanning and exploitation attempts identified.
nfdump top talker: 186.80.229.173 | first seen 2026-10-08 13:33:28.832 | duration 00:00:00.090 | flo ...
show morenfdump top talker: 186.80.229.173 | first seen 2026-10-08 13:33:28.832 | duration 00:00:00.090 | flows=1 | packets=20460 | bytes=15.3 M | pps=225 | bps=1.3 M | bpp=745 | proto=any
show less
Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:4444/udp in AS203136 (LLC Ordu ...
show moreBotnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:4444/udp in AS203136 (LLC Ordunet), Georgia, on 2026-09-15 from 14:17 local time (+04:00). This source sustained more than 800 packets/sec toward a single UDP port, against about 200 packets/sec for a legitimate player of that server. It was one of 8847 sources in 2396 networks and 160 countries recorded inside a single 25-minute window - the server's entire real audience is about a hundred players. Detected on a MikroTik RouterOS router in the raw/prerouting chain (dst-limit 800,200,src-address/10s); the timestamp is when this source crossed the threshold. Not a scan and not brute force - a packet flood, so the host is most likely compromised. Evidence: [email protected].
show less
