200.55.85.202

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
33 reports
25 reporters · latest 6 hours ago
ISP
Telecom Argentina S.A.
Usage Type
Fixed Line ISP
ASN
AS7303
Hostname(s)
200-55-85-202.dsl.prima.net.ar
Domain Name
personal.com.ar
Country
🇦🇷 Argentina
City
Adrogue, Buenos Aires
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
33 from 25 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇦🇹 Austria 4 🇨🇿 Czechia 4
Most common categories Port Scan 16 Brute-Force 16 Web App Attack 10 Hacking 8 SSH 8
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 EGP Abuse Dept
Unauthorized connection to SSH port 22
Port Scan Hacking SSH
🇫🇷 nandadytm
[2026-11-09 10:04:04] Banned 200.55.85.202 after 3 attempts: Portscan probe on TCP port 23
Port Scan
🇪🇸 Mugen
Unauthorized VPN login attempts
Brute-Force
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇹🇷 savasboluk
Auto-blocked by Seczar SecureOps — SSH Brute Force (6 events in 5min) at 2026-11-08 02:40
SSH Brute-Force
🇮🇹 RaffOne
SSH - Attempt to login using invalid or illegal credential
Brute-Force SSH
🇵🇱 pshost.pl
2026-11-07T14:54:01.322Z, an unauthorized SSH access attempt was detected from source IP address 200.55.85.202 by our NetFlow-based intrusion detection.
Port Scan Brute-Force SSH
🇵🇱 sefinek.net
Honeypot hit: Unauthorized connection attempt detected on 22/SSH Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
SSH Port Scan
🇩🇪 LRob
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/155.0.8059.37 Mobile/15E
Web App Attack Hacking
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇩🇪 london2038.com
Attacking WordPress 200.55.85.202 - - [05/Nov/2026:21:33:05 +0100] "POST /xmlrpc.php HTTP/2.0" 503 18945 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36"
Brute-Force Web App Attack
🇮🇹 RaffOne
SSH - Attempt to login using invalid or illegal credential
Brute-Force SSH
Anonymous
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/2.0, [1/1] done
Hacking Web App Attack
🇺🇸 ras07
Brute force SSH login attempts.
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 157.245.204.205
🇭🇰 154.221.20.92
🇮🇳 103.57.176.19
🇳🇱 64.225.71.17
🇻🇳 221.121.4.187
🇺🇸 172.110.223.9
🇫🇮 147.185.133.119
🇵🇪 143.208.135.145
🇨🇳 112.80.175.251
🇳🇱 109.160.32.163
🇵🇱 91.231.121.67
🇨🇦 67.71.128.216
🇳🇱 64.205.72.156
🇸🇬 47.82.49.84
🇧🇪 34.77.153.177
🇺🇸 20.84.59.27
🇸🇳 213.154.77.61
🇨🇭 179.43.153.18
🇺🇸 107.172.180.205
🇿🇦 102.254.136.31
feedback