181.2.158.72

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
42 reports
27 reporters · latest 1 month ago
ISP
Telecom Personal Bs As
Usage Type
Fixed Line ISP
ASN
AS7303
Domain Name
telecom.net.ar
Country
🇦🇷 Argentina
City
Pergamino, Buenos Aires
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

181.2.158.72 has been reported 42 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
42 from 27 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 181.2.158.72
Port Scan Brute-Force SSH
🇺🇸 NetVexor
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan Hacking Brute-Force
🇺🇸 xmission.com
Blocked by UFW (TCP on 22) Source port: 33590 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 181.2.158.72) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan SSH Brute-Force
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 181.2.158.72
Port Scan Brute-Force SSH
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:49998 dst:23
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized connection attempt detected on 23/TELNET
Hacking Port Scan
🇩🇪 genokrad
Unauthorized connection attempt on TCP/22 (SSH)
Port Scan
🇺🇸 RAP
2026-09-03 19:44:26 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 181.2.158.72
Port Scan Brute-Force SSH
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇳🇱 EGP Abuse Dept
Unauthorized connection to SSH port 22
Port Scan Hacking SSH
🇩🇪 ITSNF
Blocked by os-abuseipdb; 7 hits, proto=tcp, ports=22,23
Port Scan Hacking
🇺🇸 HamSammich
Automated sensor: 2 SSH connection/probe attempts over the last 24h (latest 2026-09-01T17:23Z).
Brute-Force SSH
🇺🇸 MPL
tcp/22 (12 or more attempts)
Port Scan
🇳🇱 vgfdvsdhfds
Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (8 attempts) and sandboxed.
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 220.116.117.213
🇺🇿 195.158.14.232
🇳🇱 193.25.217.249
🇩🇴 186.149.178.137
🇨🇳 121.40.84.227
🇨🇳 114.223.224.91
🇳🇱 109.160.32.107
🇫🇮 46.29.26.202
🇳🇱 193.47.62.69
🇷🇴 193.32.162.236
🇲🇽 189.147.192.70
🇧🇷 189.56.195.78
🇻🇳 103.1.210.25
🇸🇾 91.144.21.147
🇺🇦 85.114.195.242
🇩🇪 69.5.169.116
🇺🇸 68.225.149.102
🇨🇳 58.30.60.250
🇺🇸 202.8.43.254
🇺🇸 162.252.55.84
feedback