AbuseIPDB » 187.200.42.248

187.200.42.248 was found in our database!

This IP was reported 238 times. Confidence of Abuse is 100%: ?

100%

ISP	UNINET
Usage Type	Fixed Line ISP
ASN	AS8151
Hostname(s)	dsl-187-200-42-248-dyn.prod-infinitum.com.mx
Domain Name	telmex.com
Country	Mexico
City	Lerma de Villada, Mexico

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 187.200.42.248

Whois 187.200.42.248

IP Abuse Reports for 187.200.42.248:

This IP address has been reported a total of 238 times from 126 distinct sources. 187.200.42.248 was first reported on May 12th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-05-18 20:08:14 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
debaba	2025-05-18 05:03:34 (3 weeks ago)	May 16 11:04:20 ichbinda sshd[2419027]: Failed password for root from 187.2 ...	Brute-Force SSH
rtbh.com.tr	2025-05-17 20:08:12 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ThreatBook.io	2025-05-16 23:08:34 (4 weeks ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/187.200.42.248	SSH
rtbh.com.tr	2025-05-16 20:08:11 (4 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
adlp.org	2025-05-16 15:02:51 (4 weeks ago)	May 16 17:02:48 charon sshd[751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show moreMay 16 17:02:48 charon sshd[751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.200.42.248 May 16 17:02:48 charon sshd[751]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.200.42.248 user=hexing May 16 17:02:50 charon sshd[751]: Failed password for invalid user hexing from 187.200.42.248 port 44889 ssh2 ... show less	Brute-Force SSH
Dario MB	2025-05-16 14:54:28 (4 weeks ago)	May 16 15:49:31 vmi1756752 sshd[3696968]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show moreMay 16 15:49:31 vmi1756752 sshd[3696968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.200.42.248 May 16 15:49:33 vmi1756752 sshd[3696968]: Failed password for invalid user arun from 187.200.42.248 port 44780 ssh2 May 16 15:49:31 vmi1756752 sshd[3696968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.200.42.248 May 16 15:49:33 vmi1756752 sshd[3696968]: Failed password for invalid user arun from 187.200.42.248 port 44780 ssh2 May 16 15:54:28 vmi1756752 sshd[3698142]: Invalid user daniel from 187.200.42.248 port 33623 ... show less	Brute-Force SSH
Dmitry Bushman	2025-05-16 14:40:41 (4 weeks ago)	May 16 14:31:04 ubuntu sshd[1283362]: Invalid user tester from 187.200.42.248 port 38532 May 1 ... show moreMay 16 14:31:04 ubuntu sshd[1283362]: Invalid user tester from 187.200.42.248 port 38532 May 16 14:35:50 ubuntu sshd[1283422]: Invalid user zzh from 187.200.42.248 port 55608 May 16 14:40:40 ubuntu sshd[1283498]: Invalid user sepehr from 187.200.42.248 port 44451 ... show less	FTP Brute-Force Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH
Dario MB	2025-05-16 14:35:15 (4 weeks ago)	May 16 15:30:25 vmi1756752 sshd[3692316]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show moreMay 16 15:30:25 vmi1756752 sshd[3692316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.200.42.248 May 16 15:30:28 vmi1756752 sshd[3692316]: Failed password for invalid user tester from 187.200.42.248 port 32954 ssh2 May 16 15:35:13 vmi1756752 sshd[3693485]: Invalid user zzh from 187.200.42.248 port 50029 May 16 15:35:13 vmi1756752 sshd[3693485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.200.42.248 May 16 15:35:15 vmi1756752 sshd[3693485]: Failed password for invalid user zzh from 187.200.42.248 port 50029 ssh2 ... show less	Brute-Force SSH
adlp.org	2025-05-16 14:28:48 (4 weeks ago)	May 16 16:23:53 charon sshd[379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show moreMay 16 16:23:53 charon sshd[379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.200.42.248 user=root May 16 16:23:55 charon sshd[379]: Failed password for root from 187.200.42.248 port 49447 ssh2 May 16 16:28:48 charon sshd[422]: Invalid user tester from 187.200.42.248 port 38293 ... show less	Brute-Force SSH
webnestify	2025-05-16 11:45:04 (4 weeks ago)	2025-05-16T11:45:03.933612+00:00 wn-sg sshd[1172400]: Invalid user deploy from 187.200.42.248 port 5 ... show more2025-05-16T11:45:03.933612+00:00 wn-sg sshd[1172400]: Invalid user deploy from 187.200.42.248 port 55734 ... show less	Brute-Force SSH
NeverBehave	2025-05-16 10:57:31 (4 weeks ago)	Fail2ban Triggered	Brute-Force SSH
KIsmay	2025-05-16 10:56:27 (4 weeks ago)	May 16 03:42:09 ismay sshd[309420]: Failed password for invalid user node-root from 187.200.42.248 p ... show moreMay 16 03:42:09 ismay sshd[309420]: Failed password for invalid user node-root from 187.200.42.248 port 48195 ssh2 May 16 03:51:36 ismay sshd[309864]: Invalid user test02 from 187.200.42.248 port 44979 May 16 03:51:36 ismay sshd[309864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.200.42.248 May 16 03:51:38 ismay sshd[309864]: Failed password for invalid user test02 from 187.200.42.248 port 44979 ssh2 May 16 03:56:27 ismay sshd[310059]: Invalid user gsy from 187.200.42.248 port 33825 ... show less	Brute-Force SSH
ScanThe.Net	2025-05-16 10:48:46 (4 weeks ago)	ID: 2196346433 | PORT: 6030 | https://187-200-42-248.scanthe.net	Port Scan
webnestify	2025-05-16 10:43:35 (4 weeks ago)	2025-05-16T10:43:34.351756+00:00 wn-sg sshd[1172117]: Invalid user node-root from 187.200.42.248 por ... show more2025-05-16T10:43:34.351756+00:00 wn-sg sshd[1172117]: Invalid user node-root from 187.200.42.248 port 41932 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩