80.47.10.100

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
48% Elevated
17 reports
10 reporters · latest 2 days ago
ISP
MEVSPACE sp. z o.o.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS201814
Domain Name
mevspace.com
Country
🇵🇱 Poland
City
Warsaw, Mazovia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 10 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 8 🇩🇪 Germany 6 🇨🇭 Switzerland 1
Most common categories Brute-Force 15 Port Scan 9 SSH 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 SWO@CLX
Port Scan and RDP Brute Force - 2026-11-11-15:27
Port Scan Brute-Force
🇫🇷 edoram
SSH brute-force from honeypot. 43390 attempts in 24h, 0 unique usernames tried.
Brute-Force SSH
🇫🇷 uthul
T-Pot honeypot: 490781 hits on ports [3389] (automated)
Port Scan Brute-Force
🇩🇪 BULLSEYE
Automated security detection: RDP brute-force activity blocked by IPBan. Source: IPBan/RDP. Events=2, observations=3405. Correlated sources: Firewall/WindowsFirewall, IPBan/RDP.
Port Scan Brute-Force
🇩🇪 dominikdomex
Windows logon brute-force (RDP) (IPBan)
Brute-Force
🇫🇷 uthul
T-Pot honeypot: 717588 hits on ports [3389] (automated)
Port Scan Brute-Force
🇫🇷 uthul
T-Pot honeypot: 689625 hits on ports [3389] (automated)
Port Scan Brute-Force
🇫🇷 uthul
T-Pot honeypot: 621937 hits on ports [3389] (automated)
Port Scan Brute-Force
🇫🇷 edoram
SSH brute-force from honeypot. 6616 attempts in 24h, 0 unique usernames tried.
Brute-Force SSH
🇫🇷 uthul
T-Pot honeypot: 261122 hits on ports [3389] (automated)
Port Scan Brute-Force
🇩🇪 BULLSEYE
Automated security detection: TCP/3389=166 blocked inbound attempts; possible RDP brute-force/scan activity. Source: Firewall/WindowsFirewall. Events=1, observations=166.
Port Scan
🇩🇪 dominikdomex
Windows logon brute-force (RDP) (IPBan)
Brute-Force
🇩🇪 comped
RDP brute-force / credential stuffing: 5 failed Windows logons (Event ID 4625) against 5 of our servers (NL), first seen 2026-11-06 19:48 UTC. Blocked automatically.
Brute-Force
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/3389 (RDP); 962 application-level events across 477 source port(s). Sensor(s): RDPHoneypot.
Port Scan
🇺🇦 Alex Simon
events2ban report from PANDA: {"ExpireDate":"2026-11-08T07:32:45.7957431+02:00","IP":"80.47.10.100","LogName":"Security","BanCount":1,"BanDurationSeconds":360000,"EventID":4625}
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇳 197.7.191.173
🇫🇷 173.249.24.31
🇻🇳 123.31.31.125
🇩🇪 17.248.145.203
🇨🇳 8.134.157.132
🇺🇾 186.48.71.38
🇨🇳 182.119.227.40
🇬🇧 134.209.25.199
🇮🇳 103.182.132.154
🇮🇶 91.106.36.199
🇩🇪 17.248.145.177
🇩🇪 17.248.145.18
🇷🇴 193.32.162.204
🇵🇱 104.28.225.185
🇺🇸 34.71.169.81
🇩🇪 17.248.145.171
🇹🇳 197.6.12.45
🇰🇷 182.210.76.170
🇺🇸 70.175.182.210
🇺🇸 66.132.186.241
feedback