187.199.36.52

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
56% Elevated
17 reports
13 reporters · latest 5 days ago
ISP
Uninet S.A. de C.V.
Usage Type
Fixed Line ISP
ASN
AS8151
Hostname(s)
dsl-52-36-199-187-dynamic.prod-infinitum.com.mx
Domain Name
telmex.com
Country
🇲🇽 Mexico
City
San Jose del Cabo, Baja California Sur
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 13 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇵🇱 Poland 3 🇺🇸 United States of America 3
Most common categories Brute-Force 7 Bad Web Bot 5 Hacking 3 DDoS Attack 3 Web App Attack 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 satelliteproxy
DPI (Deep Packet Inspection) identified this source as an abusive automated web bot.
Bad Web Bot
🇺🇸 RonnieGas
Automated scanning from rotating proxy pool: API path probing, swagger/OpenAPI document requests, gift card path enumeration and repeated requests to application endpoints with rotating user agents.
Web App Attack Bad Web Bot Brute-Force Hacking
Anonymous
187.199.36.52 (MX/Mexico/Baja California Sur/Los Cabos/dsl-52-36-199-187-dynamic.prod-infinitum.com.mx/[redacted]
Brute-Force
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (accept-charset-from-browser-ua)
DDoS Attack
🇺🇸 hablaxdev
Attack on a WordPress blog, Nov 2026: WordPress login brute force (xmlrpc.php / wp-login / Wordfence login endpoint), 6 requests.
Brute-Force Web App Attack
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
DDoS Attack
🇩🇪 LRob
Not following 301 redirects — wasted requests | method: GET | path: /wp-json/wp/v2/posts | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | 2026-11-04 19:27 UTC
Bad Web Bot
🇺🇸 oncord
Form spam
Web Spam
🇳🇴 cyruz
Email login Brute force
Hacking Brute-Force
🇿🇦 hostsec_za
IMAP/POP3 Auth Attack. 28 failed logins in 24 hours.
Brute-Force
🇩🇪 LRob
Not following 301 redirects — wasted requests | method: GET | path: /wp-json/wp/v2/posts | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | 2026-11-02 05:50 UTC
Bad Web Bot
Anonymous
| [Dangerous/Mexico] Aggressive IP 187.199.36.52 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack Hacking SQL Injection
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
DDoS Attack
🇳🇱 maxxsense
187.199.36.52 (MX/Mexico/dsl-52-36-199-187-dynamic.prod-infinitum.com.mx), 12 distributed imapd attacks on account [redacted]
Brute-Force
🇩🇪 LRob
Not following 301 redirects — wasted requests | method: GET | path: /wp-json/wp/v2/posts | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 172.68.159.2
🇺🇸 165.154.163.132
🇮🇳 160.187.68.218
🇨🇳 113.240.228.245
🇧🇬 79.124.40.162
🇺🇸 73.21.28.14
🇺🇸 66.132.172.238
🇹🇭 43.152.248.245
🇭🇰 43.128.39.195
🇩🇪 37.114.50.27
🇬🇧 35.203.210.126
🇪🇬 197.35.232.211
🇲🇽 189.146.204.32
🇺🇸 184.105.139.85
🇭🇰 165.154.94.211
🇩🇪 151.243.11.230
feedback