181.117.166.154

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
31% Elevated
75 reports
49 reporters · latest 1 week ago
ISP
AMX Argentina S.A.
Usage Type
Fixed Line ISP
ASN
AS11664
Hostname(s)
host154.181-117-166.telmex.net.ar
Domain Name
claro.com.ar
Country
🇦🇷 Argentina
City
Santa Catalina - Dique Lujan, Buenos Aires
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
75 from 49 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 3 🇫🇷 France 2 🇧🇷 Brazil 1
Most common categories Bad Web Bot 4 Port Scan 4 Hacking 2 Brute-Force 2 DDoS Attack 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Hacking Bad Web Bot
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇫🇷 Tilellit.PRO
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack Bad Web Bot
🇺🇸 SX Communications
Web spam bot from 181.117.166.154: automated HTTPS requests for fake pharmacy / prescription / drug SEO URLs (bbs and blog product-style paths). 4 hits; paths: /bbs/202509/Pharmacy-Online-2%22.
Web Spam Blog Spam Bad Web Bot
🇺🇸 MPL
tcp/22 (6 or more attempts)
Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to SSH port 22
Port Scan Hacking SSH
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 181.117.166.154
Port Scan Brute-Force SSH
🇩🇪 LRob
DDoS Attack Web App Attack
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:31206 dst:23
Port Scan
Anonymous
Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=22,23
Port Scan Hacking
🇬🇧 sonot
Blocked by UFW on tunneluk01 [23/tcp] | SPT: 17950 | TTL: 47 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan IoT Targeted
🇹🇷 SeczarSecureOps
Seczar SecureOps — SSH Brute Force (6 events) — quarantined 43200m on FortiGate
SSH Brute-Force
🇵🇱 pshost.pl
2026-09-12T14:00:01.676Z, an unauthorized SSH access attempt was detected from source IP address 181.117.166.154 by our NetFlow-based intrusion detection.
Port Scan Brute-Force SSH
🇺🇸 MPL
tcp ports: 22,23 (7 or more attempts)
Port Scan
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 162.159.106.102
🇻🇳 157.66.47.161
🇨🇳 39.100.85.255
🇧🇪 207.175.218.17
🇺🇸 147.185.132.150
🇺🇸 147.78.183.254
🇰🇷 112.161.26.125
🇫🇷 85.204.70.112
🇳🇱 45.74.28.169
🇺🇸 43.130.32.245
🇺🇸 173.255.247.156
🇲🇱 154.118.145.190
🇻🇳 117.4.254.98
🇨🇳 116.172.93.48
🇮🇹 82.63.55.134
🇺🇸 70.184.82.170
🇧🇷 38.210.228.155
🇷🇴 2.57.121.112
🇺🇸 216.25.89.133
🇳🇱 195.178.110.232
feedback