This IP address has been reported a total of
198
times from
111 distinct
sources.
80.94.92.136 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Sustained automated full-port sweep of public infrastructure — same source IP persisted for 2+ hours ...
show moreSustained automated full-port sweep of public infrastructure — same source IP persisted for 2+ hours using two persistent source ports (56706 and 56722) probing 50+ sequential destination ports including 25002 10080 631 5236 6002 6881 556 8110 9754 139 1180 888 3780 5902 5904 5906 9002 9800 10001 and many others. Systematic scan pattern not random — automated scanner sweeping all ports. Blocked at network perimeter ACL. Adjacent host 80.94.92.17 previously blocked as a host entry.
show less
ban-reviewer auto report; ip=80.94.92.136; scenario=http:scan; verdict=valid_ban; confidence=0.85; c ...
show moreban-reviewer auto report; ip=80.94.92.136; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'http:scan' scenario; Port Scan (category 14) detected in abuseipdb_context; No evidence of legitimate activity within the time window
show less
{"level":"info","ts":1770523450.597521,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more{"level":"info","ts":1770523450.597521,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"80.94.92.136","remote_port":"58816","client_ip":"80.94.92.136","proto":"HTTP/1.1","method":"POST","host":"status.0x52.dev","uri":"/","headers":{"Accept":["*/*"],"Connection":["keep-alive"],"Next-Action":["x"],"User-Agent":["python-requests/2.32.5"],"Content-Type":["multipart/form-data; boundary=1e0c43ebcc87e938c6043affc5faa530"],"Content-Length":["131828"],"Accept-Encoding":["gzip, deflate"]}},"bytes_read":0,"user_id":"","duration":0.000038665,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://status.0x52.dev/"],"Content-Type":[]}}
{"level":"info","ts":1770523451.1472826,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"80.94.92.136","remote_port":"58826","client_ip":"80.94.92.136","proto":"HTTP/1.1","method":"POST","host":"status.0x52.dev","uri":"/","headers":{"Content-Type":["multipart/fo
...
show less
DDoS Attack
Web App Attack
Showing 1 to
15
of 198 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩