181.209.111.252
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- VICENTE CLAUDIO ORLANDO
- Usage Type
- Fixed Line ISP
- ASN
- AS52361
- Domain Name
- airnett.com.ar
- Country
- 🇦🇷 Argentina
- City
- Santa Catalina - Dique Lujan, Buenos Aires
Abuse Reports
Total reports
93 from
49 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| Anonymous |
[Firewall] Blacklisted: manual | ISP: ARSAT - Empresa Argentina de Soluciones Satelitales S.A | Origin: Los Frentones, Argentina | Prior AbuseIPDB score: 63% (17 reports) | Blocked at: 2026-11-12 05:49:54
|
Brute-Force | |
| Anonymous |
PORT & IP Scan.
|
Port Scan Brute-Force | |
| 🇺🇸 justbible |
|
Bad Web Bot | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇩🇪 nyuuzyou |
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-06T06:20:02Z.
|
Bad Web Bot | |
| 🇰🇷 winter |
Connection attemp from 181.209.111.252 to port 22
|
Brute-Force SSH | |
| 🇩🇪 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Events: 1 | rDNS: 252.111.209.181.in-addr.arpa | F2B/ssh-honeypot-scan@2026-11-06T01:12:40Z
|
Port Scan Hacking | |
| Anonymous |
denied SSH access attempt. destination port 22.
|
Port Scan Brute-Force SSH | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:41498 dst:23
|
Port Scan | |
| 🇩🇪 nyuuzyou |
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-05T10:46:15Z.
|
Bad Web Bot | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.
|
Bad Web Bot Web App Attack | |
| 🇩🇪 LRob |
Shop search flood (L7 DDoS) | path: /2-accueil | query: q=Famille-Occam+SL-Pulsium/Ann%C3%A9e-2025 | src_port: 54604
|
DDoS Attack Web App Attack | |
| 🇺🇸 kosada.com |
|
DDoS Attack Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown