72.219.214.80

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
22% Elevated
9 reports
9 reporters · latest 5 days ago
ISP
Cox Communications Inc.
Usage Type
Fixed Line ISP
ASN
AS22773
Hostname(s)
wsip-72-219-214-80.ga.at.cox.net
Domain Name
cox.com
Country
🇺🇸 United States of America
City
Gainesville, Florida
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
9 from 9 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇦🇺 Australia 1 🇨🇴 Colombia 1 🇩🇪 Germany 1
Most common categories Brute-Force 3 Hacking 2 SSH 2 Exploited Host 1 Email Spam 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇷🇸 Smel
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
Email Spam Hacking Brute-Force
🇨🇴 conexcol
72.219.214.80 (US/United States/wsip-72-219-214-80.ga.at.cox.net), 15 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs
Brute-Force
🇹🇷 neron
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
Hacking Web App Attack
🇦🇺 LiftUp Hosting
Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: operator:operator • Number of login attempts: 1 • Client: SSH-2.0-Go
SSH
🇩🇪 rd1742
2026-09-22 02:48:29,973 quad proftpd[593407] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (wsip-72-219-214-80.ga.at.cox.net[72.219.214.80]): USER admin: no such user found from wsip-72-219-214-80.ga.at.cox.net [72.219.214.80] to 2.56.97.107:22
Brute-Force Exploited Host SSH
🇩🇪 formality
Invalid user admin from 72.219.214.80 port 35636
Brute-Force SSH
🇺🇸 Starburst SysOp Team
Malware host detected by rbl.malware.expert. RBL lookup of 80.214.219.72.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-mnz6-1)
Hacking
🇹🇷 Domainhizmetleri.com
Trying to detecting and hacking a CRM Admin Panel via 443/tcp. Invalid path: /admin/
Hacking Web App Attack
🇮🇩 Burayot
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 72.219.214.80 (US/United States/wsip-72-219-214-80.ga.at.cox.net): 2 in the last 3600 secs
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇬 197.49.166.20
🇺🇸 104.248.59.156
🇺🇸 76.38.84.143
🇺🇸 66.132.195.101
🇨🇭 200.234.122.143
🇺🇸 195.184.76.226
🇧🇷 186.209.52.216
🇨🇳 182.127.197.95
🇨🇳 124.88.113.165
🇮🇪 109.77.182.195
🇮🇩 103.94.164.111
🇧🇩 103.41.244.145
🇺🇸 91.230.168.147
🇺🇸 20.65.178.121
🇧🇷 200.223.232.26
🇨🇳 183.222.174.168
🇺🇸 181.41.206.112
🇺🇸 165.227.204.236
🇲🇲 151.158.136.5
🇹🇭 110.49.3.70
feedback