JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

132.248.7.249

Neutral Activity

Abuse Confidence Score

0% Low Risk

99 reports

68 reporters · latest 2 months ago

ISP: Universidad Nacional Autonoma de Mexico
Usage Type: University/College/School
ASN: AS278
Domain Name: unam.mx
Country: 🇲🇽 Mexico
City: Mexico City, Mexico City

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

132.248.7.249 has been reported 99 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

99 from 68 distinct reporters

First reported

July 9th 2025

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-03 22:20:00 UTC · (2 months ago)	Repeated automated web requests: 6 HTTP 403 responses within 10 minutes.	Bad Web Bot
🇬🇧 AdrianT	2026-01-06 12:38:39 UTC · (10 months ago)	SSH brute force	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-12-26 20:10:40 UTC · (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-12-26 00:37:07 UTC · (10 months ago)	ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/132.248.7.249	SSH
🇹🇷 rtbh.com.tr	2025-12-25 20:10:39 UTC · (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-12-25 00:26:14 UTC · (10 months ago)	ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/132.248.7.249	SSH
🇫🇷 SpaceHost-Server	2025-12-24 23:29:56 UTC · (10 months ago)		Brute-Force Web App Attack
🇸🇬 apnic.network	2025-12-24 22:21:00 UTC · (10 months ago)	Invalid user myuser from 132.248.7.249 port 59498	Brute-Force SSH
🇸🇬 apnic.network	2025-12-24 22:21:00 UTC · (10 months ago)	Invalid user myuser from 132.248.7.249 port 59498	Brute-Force SSH
🇮🇹 mauri64	2025-12-24 22:00:06 UTC · (10 months ago)	lfd - (sshd) Failed SSH login from 132.248.7.249 (-): 5 in the last 3600 secs	SSH
🇷🇺 OK	2025-12-24 21:59:03 UTC · (10 months ago)	SSH	Port Scan Hacking Brute-Force SSH
🇩🇪 ihor yalosovetsky	2025-12-24 21:49:19 UTC · (10 months ago)	2025-12-24T21:38:40.387392+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[1301611]: Invalid user user from 132.248.7.249 port 35508 2025-12-24T21:44:48.609878+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[1301746]: Invalid user test from 132.248.7.249 port 44226 2025 ... show more 2025-12-24T21:38:40.387392+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[1301611]: Invalid user user from 132.248.7.249 port 35508 2025-12-24T21:44:48.609878+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[1301746]: Invalid user test from 132.248.7.249 port 44226 2025-12-24T21:45:21.047513+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[1301758]: Invalid user dev from 132.248.7.249 port 58014 2025-12-24T21:48:09.234539+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[1301800]: Invalid user mysql from 132.248.7.249 port 54604 2025-12-24T21:49:19.202345+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[1301823]: Invalid user test03 from 132.248.7.249 port 59858 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-24 21:34:26 UTC · (10 months ago)	132.248.7.249 (MX/Mexico/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 24 15:31:18 14704 sshd[9425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more 132.248.7.249 (MX/Mexico/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 24 15:31:18 14704 sshd[9425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.47.163.250 user=root Dec 24 15:31:20 14704 sshd[9425]: Failed password for root from 101.47.163.250 port 41482 ssh2 Dec 24 15:32:45 14704 sshd[9573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.248.7.249 user=root Dec 24 15:32:47 14704 sshd[9573]: Failed password for root from 132.248.7.249 port 58748 ssh2 Dec 24 15:34:04 14704 sshd[9844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.11.221 user=root IP Addresses Blocked: 101.47.163.250 (SG/Singapore/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-24 21:12:21 UTC · (10 months ago)	(sshd) Failed SSH login from 132.248.7.249 (MX/Mexico/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 24 15:05:54 14238 sshd[27603]: Invalid user frontend from 132.248.7.249 port 39586 Dec 24 15:05:57 14238 sshd[27603 ... show more (sshd) Failed SSH login from 132.248.7.249 (MX/Mexico/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 24 15:05:54 14238 sshd[27603]: Invalid user frontend from 132.248.7.249 port 39586 Dec 24 15:05:57 14238 sshd[27603]: Failed password for invalid user frontend from 132.248.7.249 port 39586 ssh2 Dec 24 15:11:29 14238 sshd[28387]: Invalid user username from 132.248.7.249 port 59282 Dec 24 15:11:32 14238 sshd[28387]: Failed password for invalid user username from 132.248.7.249 port 59282 ssh2 Dec 24 15:12:04 14238 sshd[28518]: Invalid user asad from 132.248.7.249 port 44214 show less	Brute-Force SSH
Anonymous	2025-12-24 20:44:52 UTC · (10 months ago)	$f2bV_matches	Brute-Force SSH

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 2400:cb00:1055:1000:47cb:e4bb:a6e3:2091

🇯🇵 216.226.78.10

🇹🇷 212.68.62.253

🇧🇷 205.210.31.219

🇺🇸 172.234.25.61

🇧🇴 166.114.136.130

🇵🇱 162.158.103.140

🇨🇳 139.214.251.75

🇰🇷 118.37.214.187

🇺🇸 98.91.237.153

🇺🇸 44.192.83.64

🇵🇱 2400:cb00:1055:1000:f917:a261:1bc5:62b5

🇺🇸 2400:cb00:650:1000:4074:1801:5dea:c496

🇺🇸 205.210.31.40

🇬🇧 195.140.214.24

🇸🇬 172.70.93.32

🇵🇱 162.158.103.32

🇺🇸 45.79.145.233

🇺🇸 3.237.24.223

🇺🇸 2400:cb00:650:1000:12dd:6fe5:17e2:eda6