181.84.161.38
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Telecom Personal Bs As
- Usage Type
- Fixed Line ISP
- ASN
- AS7303
- Domain Name
- telecom.net.ar
- Country
- 🇦🇷 Argentina
- City
- San Miguel de Tucuman, Tucuman
Abuse Reports
Total reports
37 from
28 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 RAP |
2026-11-12 01:47:54 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇫🇷 SLBCLOUD |
DDoS: UDP flood to port 30205, peak 18.47 Mbps / 1.6 kpps (60s avg), 2026-11-12 00:43-00:45 UTC, observed by AS215114 SLBCLOUD (sampled flow data).
|
DDoS Attack | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇺🇸 dtorrer |
Brute-force general attack.
|
Brute-Force | |
| 🇧🇾 StatsMe |
Date: 2026-11-11T17:42:07.000+00:00 | Action: deny | Port: 23 | Log: Connection Failed
|
Brute-Force SSH Port Scan | |
| 🇹🇷 savasboluk |
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5min) at 2026-11-08 08:17
|
Hacking | |
| 🇧🇪 sid3windr |
SSH port scan (Tarpitted for 20s, wasted 15B)
|
Port Scan SSH | |
| 🇺🇸 MPL |
tcp/22 (3 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp ports: 22,23 (9 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp ports: 22,23 (11 or more attempts)
|
Port Scan | |
| 🇹🇭 Sawasdee |
SSH break in attempt
...
|
SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) de 181.84.161.38 [TCP]
|
Port Scan | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| Anonymous |
Web application attack detected.
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown