181.80.25.102

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
106 reports
60 reporters · latest 6 hours ago
ISP
Internet Services S.A.
Usage Type
Fixed Line ISP
ASN
AS7303
Hostname(s)
host102.181-80-25.telecom.net.ar
Domain Name
is.com.ar
Country
🇦🇷 Argentina
City
Aguilares, Tucuman
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
106 from 60 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 21 🇩🇪 Germany 5 🇫🇷 France 5
Most common categories Port Scan 35 Hacking 13 Brute-Force 11 IoT Targeted 7 Exploited Host 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇫🇮 mikkopal88
TCP SYN port scan to Telnet 23-2323
Port Scan IoT Targeted
🇺🇸 sumnone
Port probing on unauthorized port 23
Port Scan Hacking Exploited Host
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇨🇦 dpinse
Honeypot [honeypot-ca-sensor1]: Unauthorized connection attempt detected on 23/TELNET
Hacking Port Scan
🇺🇸 FoxSec
Honeypot: Telnet login brute force (IoT botnet pattern), 3 attempts
Brute-Force IoT Targeted
🇺🇸 RAP
2026-11-08 08:46:39 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 Cherryh4ck
Blocked by UFW [23/tcp] | SPT: 56513 | TTL: 50 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan IoT Targeted
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇺🇸 RAP
2026-11-08 02:13:26 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇧🇷 aosafeshield
AOSafe Shield: connected to a honeypot port (TCP 23) that no legitimate service uses.
Port Scan Hacking
🇺🇸 MarkJGreen
Telnet brute force: 1 login attempts, 300 shell commands after login, malware download/upload. Last seen 2026-11-07 12:00 UTC (honeypot).
Brute-Force IoT Targeted Hacking
🇺🇸 OceanTreasure
tcp/23; Legacy Telnet remote access probe @ 2026-11-07T02:01:58Z
IoT Targeted Port Scan
Anonymous
unsolicited connect TCP dport 23 (sport 44268)
Hacking
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:48106 dst:23
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇮 193.187.110.160
🇻🇪 190.97.245.55
🇵🇹 188.81.126.120
🇫🇮 185.94.33.233
🇧🇩 163.223.35.19
🇵🇰 153.117.4.127
🇹🇼 111.70.3.106
🇹🇳 102.156.101.230
🇲🇺 102.117.180.119
🇬🇧 92.207.4.157
🇩🇪 69.5.169.249
🇳🇱 64.205.72.166
🇳🇱 52.125.141.16
🇮🇩 43.133.147.177
🇬🇧 35.203.210.196
🇨🇳 14.152.91.243
🇳🇱 195.178.110.232
🇺🇸 193.202.80.158
🇺🇸 167.172.20.165
🇹🇼 114.45.51.66
feedback