IP address 80.253.25.22 has been flagged in 2 abuse reports across 2 independent threat intelligence sources, resulting in a threat score of 20.3/100 (low risk). The primary activity associated with this IP is aggregated threat, along with rdp bruteforce.
This IP is geolocated in Russia and belongs to the network Joint-stock Company teleport Telecom (AS39153). Reports span from 2026-05-28 to 2026-06-30.
Assessment: Only 2 reports exist for 80.253.25.22, which may represent a false positive, a temporary compromise, or a one-time scanning event. No immediate action is typically required, but this IP should be monitored if it appears in your server logs.