189.161.73.80

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
76% Critical
17 reports
16 reporters · latest 2 days ago
ISP
Gestión de direccionamiento UniNet
Usage Type
Fixed Line ISP
ASN
AS8151
Hostname(s)
dsl-80-73-161-189-dynamic.prod-infinitum.com.mx
Domain Name
uninet.net.mx
Country
🇲🇽 Mexico
City
Ecatepec de Morelos, Mexico
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇨🇿 Czechia 2 🇫🇷 France 2
Most common categories Brute-Force 8 Port Scan 7 Web App Attack 4 Hacking 4 SSH 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇬 Ilcheff
SSH tarpit hit: connection from dsl-80-73-161-189-dynamic.prod-infinitum.com.mx [MX/Mexico, AS8151] to SSH accepted.
Port Scan Brute-Force SSH
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇦🇷 Bruno
Port Scanner: 189.161.73.80
Port Scan
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-04 UTC.
Brute-Force
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl
Try to access /xmlrpc.php
Web App Attack
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇫🇷 nandadytm
[2026-11-04 07:30:37] Banned 189.161.73.80 after 3 attempts: Portscan probe on TCP port 22,23
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 2 application-level events across 2 target ports and 2 source port(s). Ports: 22/SSH, 23/Telnet. Sensors: Cowrie.
Port Scan
🇹🇷 savasboluk
Auto-blocked by Seczar SecureOps — SSH Brute Force (6 events in 5min) at 2026-11-04 01:35
SSH Brute-Force
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 189.161.73.80 2026-11-03T23:23:04+0100 vpn Access-Reject station: 189.161.73.80
Brute-Force Web App Attack
🇮🇩 hermawan
Email Spam Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇰 223.123.9.178
🇲🇱 217.64.103.89
🇲🇽 201.166.154.219
🇮🇳 103.123.53.88
🇹🇷 88.228.66.168
🇧🇪 34.38.252.135
🇺🇸 23.254.194.136
🇨🇳 218.78.135.132
🇺🇸 216.25.90.43
🇮🇳 203.193.160.21
🇮🇩 203.83.45.51
🇨🇮 196.201.0.119
🇳🇱 185.226.197.42
🇵🇹 144.64.164.134
🇮🇹 130.25.93.254
🇫🇷 91.231.89.128
🇫🇮 65.108.103.152
🇫🇷 51.15.213.118
🇦🇷 45.225.216.201
🇺🇸 23.29.114.52
feedback