IP address 181.103.0.149 has been flagged in 255 abuse reports across 11 independent threat intelligence sources, resulting in a threat score of 100.0/100 (critical risk). The primary activity associated with this IP is aggregated threat, along with attacks, botnet c2, brute force, high threat, malicious, malware c2, moderate threat, rdp bruteforce, severe abuse, ssh brute force, suspicious activity.
This IP is geolocated in Paraguay and belongs to the network Nucleo S.A. (AS27895). Reports span from 2025-10-05 to 2026-03-26.
Assessment: With 255 abuse reports, 181.103.0.149 shows persistent malicious activity that has been flagged by multiple threat intelligence feeds. This IP has been identified as a command-and-control server for botnet infrastructure, meaning it coordinates malicious activity across networks of compromised machines.