JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 200.80.180.187

200.80.180.187 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 67%: ?

67%

ISP	Techtel LMDS Comunicaciones Interactivas S.A.
Usage Type	Fixed Line ISP
ASN	AS11664
Hostname(s)	187.180.80.200.dynamic.telmex.net.ar
Domain Name	techtel.com.ar
Country	🇦🇷 Argentina
City	Rosario, Santa Fe

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 200.80.180.187

Whois 200.80.180.187

IP Abuse Reports for 200.80.180.187:

This IP address has been reported a total of 24 times from 15 distinct sources. 200.80.180.187 was first reported on November 17th 2025, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 Sawasdee	2026-09-30 05:36:10 (14 hours ago)	SSH break in attempt ...	SSH
🇺🇸 TPI-Abuse	2026-09-28 20:31:49 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 200.80.180.187 (187.180.80.200.dynamic.telmex.n ... show more (mod_security) mod_security (id:210350) triggered by 200.80.180.187 (187.180.80.200.dynamic.telmex.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:31:45.117758 2026] [security2:error] [pid 32019:tid 32019] [client 200.80.180.187:4226] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|carolinafootprints.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "carolinafootprints.com"] [uri "/"] [unique_id "arrOsRkoSKCRmNfJ51q-vwAAAAQ"], referer: https://peregrinesbirdblog.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-09-28 02:09:29 (2 days ago)	Blocked by UFW (TCP on 22) Source port: 23945 TTL: 53 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 23945 TTL: 53 Packet length: 60 TOS: 0x08 This report (for 200.80.180.187) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇺🇸 TPI-Abuse	2026-09-26 02:07:55 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 200.80.180.187 (187.180.80.200.dynamic.telmex.n ... show more (mod_security) mod_security (id:210350) triggered by 200.80.180.187 (187.180.80.200.dynamic.telmex.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 22:07:50.190051 2026] [security2:error] [pid 16222:tid 16222] [client 200.80.180.187:14827] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|windisfun.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windisfun.com"] [uri "/"] [unique_id "arco9qoe81lotWGiKwTM2wAAAAM"], referer: https://blogcheckeronline.space/dir/backlink-building-services-232721 show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 gianluca.demartino75	2026-09-25 20:28:06 (4 days ago)	2026-09-25T22:28:05.063890+02:00 vps-49934a4d endlessh[2228113]: 2026-09-25T20:28:05.063Z ACCEPT hos ... show more 2026-09-25T22:28:05.063890+02:00 vps-49934a4d endlessh[2228113]: 2026-09-25T20:28:05.063Z ACCEPT host=::ffff:200.80.180.187 port=9548 fd=4 n=1/4096 ... show less	Brute-Force SSH
🇺🇸 RAP	2026-09-25 20:14:12 (4 days ago)	2026-09-25 20:14:12 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇳🇱 EGP Abuse Dept	2026-09-23 05:00:30 (1 week ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇧🇷 noconex	2026-09-21 02:17:34 (1 week ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 200.80.180 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 200.80.180.187 show less	Port Scan Brute-Force SSH
Anonymous	2026-09-20 23:32:54 (1 week ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
Anonymous	2026-09-19 05:21:21 (1 week ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
Anonymous	2026-09-13 03:58:17 (2 weeks ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking
🇩🇪 LRob	2026-09-12 10:44:54 (2 weeks ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /blog/degat-des-eaux-comment-eviter-de-faire-face-a-cette-situation/ \| 2026-09-12 10:44 UTC show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-11 20:03:52 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 ghostwarriors	2026-09-08 04:20:29 (3 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
Anonymous	2026-09-01 03:31:41 (4 weeks ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 45.180.59.50

🇧🇷 16.5.0.162

🇹🇷 201.4.69.49

🇧🇴 190.129.181.253

🇨🇳 183.23.104.60

🇫🇮 178.20.210.198

🇩🇪 167.94.146.36

🇺🇸 162.216.149.136

🇳🇱 109.160.32.141

🇳🇱 109.160.32.107

🇺🇸 107.150.104.16

🇦🇺 103.136.147.62

🇫🇷 91.196.152.39

🇩🇪 91.92.33.29

🇷🇴 80.94.92.30

🇮🇩 69.5.20.133

🇹🇭 43.133.99.204

🇰🇷 14.47.200.242

🇺🇸 2a03:2880:f818:64::

🇨🇳 218.13.214.18