2.180.175.52
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Telecommunication Company of Khorasan
- Usage Type
- Fixed Line ISP
- ASN
- AS58224
- Domain Name
- ito.gov.ir
- Country
- 🇮🇷 Iran (Islamic Republic of)
- City
- Tehran, Tehran
Abuse Reports
Total reports
25 from
18 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 guldkage |
Unauthorized connection attempt detected from IP address 2.180.175.52 to port 23 (ger-01) [TELNET]
|
Exploited Host | |
| 🇺🇸 ShadowWhisperer |
botnet node - mirai (Mirai-family shell-verification handshake) [handshake, mirai, worm]
|
Brute-Force IoT Targeted | |
| 🇩🇪 KPS |
PortscanT
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:59787 dst:23
|
Port Scan | |
| 🇫🇷 Altai |
Telnet honeypot hit on port 23.
Credentials/commands seen:
login: default
password: 1cDuLJ7c
enable
system
shell
sh
linuxshell
ping ;sh
/bin/busybox
|
Port Scan Brute-Force Exploited Host IoT Targeted | |
| 🇯🇵 Summer Joe |
Automated report: port-scan (cat14) / SSH brute-force (cat18,22) against VPS japan2, detected via UFW BLOCK + fail2ban + lastb.
|
Port Scan | |
| 🇺🇸 RAP |
2026-08-13 12:53:54 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇳🇱 DonAtari |
DShield firewall scan - TCP to port 23
|
Brute-Force SSH | |
| 🇺🇸 MPL |
tcp/23
|
Port Scan | |
| 🇺🇸 RAP |
2026-08-13 05:23:32 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 46573
TTL: 40
Packet length: 60
TOS: 0x08
This report (for 2.180.175.52) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 NetVexor |
Attack source identified and submitted via NetVexor BGP Blackhole Network
|
Port Scan Hacking Brute-Force | |
| 🇫🇮 iamxorum |
|
Port Scan IoT Targeted | |
| Anonymous |
23/tcp (1 or more attempts)
|
Port Scan | |
| 🇧🇾 stroytrest |
2026-08-12T20:17:54.473625+03:00 gate kernel: [110194.170675] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=2.180.175.52 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=46358 DF PROTO=TCP SPT=39533 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0
...
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown