201.254.233.10

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
25% Elevated
48 reports
40 reporters · latest 3 days ago
ISP
Fedacom Servcios de Internet
Usage Type
Fixed Line ISP
ASN
AS22927
Hostname(s)
201-254-233-10.mrse.com.ar
Domain Name
tmoviles.com.ar
Country
🇦🇷 Argentina
City
Tupungato, Mendoza
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
48 from 40 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 4 🇧🇷 Brazil 1 🇮🇱 Israel 1
Most common categories SSH 5 Brute-Force 4 Port Scan 3 Bad Web Bot 1 Hacking 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Hacking Bad Web Bot
🇺🇸 ras07
Brute force SSH login attempts.
Brute-Force SSH
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 201.254.233.10
Port Scan Brute-Force SSH
🇺🇸 RAP
2026-09-16 11:25:24 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇮🇱 Ilop
[v5-99] Firewall dropped 12 unsolicited packet(s) proto=tcp to port(s) 23,22 from 201.254.233.10 — WAN scan (automated sensor)
Port Scan
Anonymous
SSH tarpit (endlessh) connection from 201.254.233.10
Brute-Force SSH
🇺🇸 xmission.com
Blocked by UFW (TCP on 22) Source port: 50936 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 201.254.233.10) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan SSH Brute-Force
🇹🇷 pashait
Seczar SecureOps — SSH Brute Force (6 events) — quarantined 43200m on FWLKS
SSH Brute-Force
🇺🇸 jbettigole
MikroTik RouterOS: repeated connection attempts against non-public admin/service ports (SSH/Telnet/FTP/Winbox/API/WWW) triggering escalating 5m/15m/1h/1d blacklist
Brute-Force Hacking
🇵🇱 mkey
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT | PORTS=22,23 | HITS=2 | IPSET=ADD | FIRST=2026-09-13 05:26:07 | LAST=2026-09-13 05:26:07. Last seen 2026-09-13 05:26:07.
Port Scan
🇷🇺 genokrad
Unauthorized connection try on TCP/23 (Telnet)
Port Scan
🇫🇷 Entalpi.net
Tried to hit sensible closed port commonly used in attacks
Port Scan Hacking
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 201.254.233.10
Port Scan Brute-Force SSH
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇺🇸 MPL
tcp ports: 23,22 (6 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 222.210.35.197
🇧🇩 203.188.241.91
🇹🇼 198.235.24.114
🇹🇼 198.235.24.109
🇳🇱 138.226.239.5
🇵🇱 87.251.64.128
🇳🇱 77.67.26.7
🇹🇼 198.235.24.106
🇺🇸 184.186.104.101
🇮🇳 103.93.37.178
🇺🇸 100.33.23.13
🇩🇪 69.5.169.45
🇳🇱 45.148.10.157
🇺🇸 34.162.126.43
🇮🇶 212.23.217.3
🇧🇩 203.188.241.88
🇳🇱 176.65.149.224
🇺🇸 172.69.22.52
🇺🇸 147.185.132.94
🇺🇸 147.185.132.85
feedback