JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.28.219.202

80.28.219.202 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	TELEFONICA DE ESPANA S.A.U.
Usage Type	Fixed Line ISP
ASN	AS3352
Hostname(s)	202.red-80-28-219.staticip.rima-tde.net
Domain Name	movistar.es
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 80.28.219.202

Whois 80.28.219.202

IP Abuse Reports for 80.28.219.202:

This IP address has been reported a total of 14 times from 11 distinct sources. 80.28.219.202 was first reported on September 7th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-03-13 15:10:02 (6 months ago)	616 limiting connections by zone (11m59s)	DDoS Attack
🇺🇸 Vano Ganzzz	2026-01-14 06:14:15 (8 months ago)	Triggered Cloudflare WAF (l7ddos) from ES. Action taken: BLOCK ASN: 3352 (TELEFONICA_DE_ESPANA) Prot ... show more Triggered Cloudflare WAF (l7ddos) from ES. Action taken: BLOCK ASN: 3352 (TELEFONICA_DE_ESPANA) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-01-14T06:14:15Z Ray ID: 9bdafdfa5f41e55b UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:145.0) Gecko/20100101 Firefox/145.0 show less	DDoS Attack Bad Web Bot
🇮🇳 Bharat Datacenter	2026-01-11 15:00:25 (8 months ago)	1: date=2026-01-11 time=20:29:21 eventtime=1768143562192570031 tz="+0530" logid="0720018432" type="u ... show more 1: date=2026-01-11 time=20:29:21 eventtime=1768143562192570031 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=80.28.219.202 srccountry="Spain" dstip=157.10.99.34 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="HTTPS" count=116901 attack="tcp_syn_flood" srcport=52420 dstport=443 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 4025 > threshold 2000, repeats 116901 times since last log, pps 4065 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force
🇩🇪 PTnet	2026-01-09 11:18:54 (8 months ago)	DDoS Attack (jail:haproxy-badreq)	Exploited Host Web App Attack
🇺🇸 SuperEvilLuke	2025-12-14 13:36:42 (9 months ago)	Malicious activity detected from 3352 TELEFONICA_DE_ESPANA towards host panel.embotic.xyz (GET HTTP/ ... show more Malicious activity detected from 3352 TELEFONICA_DE_ESPANA towards host panel.embotic.xyz (GET HTTP/2) @ 2025-12-14T13:36:42Z (1 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 Tizian Maxime Weigt	2025-11-25 08:19:08 (9 months ago)	Incoming DDoS to port 443 (L7 HTTPS Flood) Detected	DDoS Attack
🇩🇪 Audir8 \| RRHosting	2025-10-16 22:36:57 (11 months ago)	Triggered Cloudflare WAF (ratelimit) from ES. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endp ... show more Triggered Cloudflare WAF (ratelimit) from ES. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Firefox/135.0 This report is using Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 1gz	2025-10-06 14:00:46 (11 months ago)	Triggered Cloudflare WAF (l7ddos) from ES. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from ES. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇺🇸 SuperEvilLuke	2025-10-01 21:37:21 (11 months ago)	Malicious activity detected from 3352 TELEFONICA_DE_ESPANA towards host panel.embotic.xyz (GET HTTP/ ... show more Malicious activity detected from 3352 TELEFONICA_DE_ESPANA towards host panel.embotic.xyz (GET HTTP/2) @ 2025-10-01T21:37:21Z (3 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 SuperEvilLuke	2025-09-29 20:34:55 (11 months ago)	Malicious activity detected from 3352 TELEFONICA_DE_ESPANA towards host panel.embotic.xyz (GET HTTP/ ... show more Malicious activity detected from 3352 TELEFONICA_DE_ESPANA towards host panel.embotic.xyz (GET HTTP/2) @ 2025-09-29T20:34:55Z (11 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 Silly Development	2025-09-28 13:29:50 (11 months ago)	Malicious activity detected from 3352 TELEFONICA_DE_ESPANA towards host paid.sillydev.co.uk (PATCH H ... show more Malicious activity detected from 3352 TELEFONICA_DE_ESPANA towards host paid.sillydev.co.uk (PATCH HTTP/2) @ 2025-09-28T13:29:50Z (12 occurrences) show less	DDoS Attack Exploited Host
🇰🇷 PROJECT ELIV	2025-09-09 16:28:37 (1 year ago)	ELIV CDN - DDoS attack detected for mirror.eliv.digital	DDoS Attack
🇰🇷 PROJECT ELIV	2025-09-09 16:28:37 (1 year ago)	ELIV CDN - DDoS attack detected for mirror.eliv.digital	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-09-07 01:10:13 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 194.50.235.145

🇺🇸 174.86.121.73

🇳🇱 213.124.221.2

🇬🇧 193.163.125.31

🇵🇦 186.72.65.206

🇸🇬 151.240.88.116

🇺🇸 147.185.132.252

🇹🇭 147.50.231.135

🇮🇳 103.177.78.20

🇻🇳 103.176.24.57

🇲🇾 103.175.16.86

🇱🇦 103.114.146.178

🇮🇷 85.198.19.241

🇺🇸 67.207.91.206

🇺🇸 66.132.224.238

🇺🇸 65.49.20.89

🇳🇱 213.206.207.146

🇧🇷 205.210.31.214

🇳🇱 193.176.31.200

🇺🇸 173.49.55.215