81.243.48.23

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
53 reports
36 reporters · latest 43 minutes ago
ISP
Proximus NV
Usage Type
Fixed Line ISP
ASN
AS5432
Domain Name
proximus.com
Country
🇧🇪 Belgium
City
Gent, Flanders
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
53 from 36 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 16 🇩🇪 Germany 7 🇦🇹 Austria 6
Most common categories Port Scan 39 SSH 15 Brute-Force 13 Hacking 13 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
Hacking
🇳🇱 i-turnradio.nl
2026-11-09 07:19:06 +01:00 - Unsolicited TCP connection to a honeypot port; probing port 22.
Port Scan
🇬🇧 andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
🇪🇸 Linux Fertxo
Unauthorized connection attempts: 8 hits @ port(s) 22,23, protocol(s) tcp
Port Scan Hacking
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 4 application-level events across 2 target ports and 4 source port(s). Ports: 22/SSH, 23/Telnet. Sensors: Cowrie.
Port Scan
🇺🇸 RAP
2026-11-08 14:27:48 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇺🇸 MPL
tcp ports: 22,23 (12 or more attempts)
Port Scan
🇺🇸 MPL
tcp ports: 22,23 (10 or more attempts)
Port Scan
Anonymous
SSH tarpit (endlessh) connection from 81.243.48.23
Brute-Force SSH
🇩🇪 bescared
F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -c23856ef-
Port Scan
🇺🇸 RAP
2026-11-07 05:22:42 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇧🇷 aosafeshield
AOSafe Shield: connected to a honeypot port (TCP 23) that no legitimate service uses.
Port Scan Hacking
🇺🇸 sumnone
Port probing on unauthorized port 23
Port Scan Hacking Exploited Host
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 88.223.44.73
🇬🇧 81.136.161.64
🇺🇸 76.36.226.28
🇳🇱 51.158.205.49
🇺🇸 50.6.22.250
🇮🇩 43.157.230.104
🇨🇳 39.129.119.45
🇧🇪 35.210.166.45
feedback