IP Address

181.21.133.252

IPv4 Public
AR AR
AS22927
Telefonica de Argentina
63 Reports
This IP is on the Blacklist High confidence threat - blocking recommended
10/10 Threat
74% Confidence
63 Reports

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Top 10% High Threat
AR
AR Location
Telefonica de Argentina ASN 22927
63 Reports
Honeypot Data Source

Severe Risk

Threat level 10/10 for IP 181.21.133.252. Analysis of 63 reports confirms persistent malicious behavior.

High-confidence (74%) threat assessment indicates advanced persistent threat characteristics.

More threatening than 93% of monitored IPs

Threat Categories

Exploited Host 30

Technical Details

This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.

Recommended Mitigations

Block the IP and consider notifying the hosting provider or system owner about the compromise.

Reputable Network

This IP is hosted on a network (ASN 22927) with generally good reputation. The ISP Telefonica de Argentina maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Block immediately. This IP demonstrates capability for significant infrastructure damage.

Continue monitoring for emerging patterns.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 10/10 Critical
Critical
Activity Frequency 0/10 Inactive
Confidence Score 59% High Confidence

Confidence History

22. Nov 2025 - 23. Nov 2025
74% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (30)

Date Categories Source Confidence
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%

Technical Details

Basic Information

IP Address
181.21.133.252
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class B

Geolocation

Country
AR AR
ASN
AS22927
ISP
Telefonica de Argentina

DNS Information

Reverse DNS
181-21-133-252.mrse.com.ar
PTR Record
Yes
Connection Type
Dynamic

Statistics

Total Reports
63
First Reported
22 Nov 2025
Last Reported
23 Nov 2025, 04:52

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

AS22927
Telefonica de Argentina
AR AR

Network Threat Assessment

1/10
This network appears to be relatively clean with very low threat indicators.

Network Statistics

59
Total IPs Monitored
739
Total Reports
12.5
Reports per IP

Network Context

This IP address belongs to Telefonica de Argentina (AS22927), which manages 59 IP addresses in our monitoring system. Out of these, 739 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.

Network status: This network appears to be well-maintained with low threat indicators.

Comparative Analysis

How this IP compares to others in our threat intelligence database

93 %

Global Threat Ranking

This IP is more threatening than 93% of all IPs in our database.

Top 10% Most Dangerous

Global Comparison

Compared against 199,774 reported IPs worldwide

Threat Level 10/10 avg: 5.3 ++
Total Reports 63 avg: 23 ++

Network Comparison

Compared against 140 IPs in ASN 22927

Threat Level 10/10 network avg: 4.5 ++
Total Reports 63 network avg: 6 ++
Network Telefonica de Argentina has overall threat level 1/10

Geographic Comparison

Compared against 776 IPs in AR

Threat Level 10/10 country avg: 4.9 ++
Total Reports 63 country avg: 14 ++
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

187,378 threat incidents tracked globally • Last 24h: 18,990 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US
    38,468 20.5%
  2. 02
    IN
    India IN
    29,138 15.6%
  3. 03
    CN
    China CN
    26,029 13.9%
  4. 04
    BR
    Brazil BR
    10,256 5.5%
  5. 05
    DE
    Germany DE
    7,144 3.8%
  6. 06
    SG
    Singapore SG
    6,476 3.5%
  7. 07
    ID
    Indonesia ID
    5,551 3%
  8. 08
    RU
    Russia RU
    4,703 2.5%
  9. 09
    PK
    Pakistan PK
    4,677 2.5%
  10. 10
    NL
    Netherlands NL
    4,358 2.3%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same Autonomous System (AS) network provider.

20 Related IPs
7.3/10 Avg Threat
69% Avg Confidence
16 High Threat
High-risk network: Majority of related IPs are flagged

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "181.21.133.252",
    "threat_level": 10,
    "confidence_score": 74,
    "total_reports": 63,
    "country_code": "AR",
    "isp_name": "Telefonica de Argentina",
    "asn": "22927",
    "first_reported": "2025-11-22 05:29:45",
    "last_reported": "2025-11-23 04:52:25",
    "exported_at": "2026-06-09T11:18:03+02:00",
    "source": "https://reportedip.de/ip/181.21.133.252/"
}

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.