JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 187.249.59.202

187.249.59.202 was found in our database!

This IP was reported 104 times. Confidence of Abuse is 66%: ?

66%

ISP	IP Matrix, S.A. de C.V.
Usage Type	Fixed Line ISP
ASN	AS32098
Hostname(s)	187-249-59-202.internetmax.maxcom.net.mx
Domain Name	flo.net
Country	🇲🇽 Mexico
City	Silao de la Victoria, Guanajuato

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 187.249.59.202

Whois 187.249.59.202

IP Abuse Reports for 187.249.59.202:

This IP address has been reported a total of 104 times from 56 distinct sources. 187.249.59.202 was first reported on December 27th 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-06-17 01:20:34 (9 hours ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 F63NNKJ4	2026-06-17 01:04:21 (9 hours ago)	Jun 17 03:04:14 v22019058497090703 sshd[20114]: pam_unix(sshd:auth): authentication failure; logname ... show more Jun 17 03:04:14 v22019058497090703 sshd[20114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.249.59.202 Jun 17 03:04:15 v22019058497090703 sshd[20114]: Failed password for invalid user ubuntu from 187.249.59.202 port 54628 ssh2 ... show less	Brute-Force SSH
🇩🇪 luftwurzel	2026-06-15 16:12:16 (1 day ago)	2026-06-15T18:12:15.293045+02:00 scharnhorst sshd[409373]: Invalid user ubnt from 187.249.59.202 por ... show more 2026-06-15T18:12:15.293045+02:00 scharnhorst sshd[409373]: Invalid user ubnt from 187.249.59.202 port 40451 ... show less	Brute-Force SSH
🇫🇮 inlink.ltd	2026-06-14 05:54:27 (3 days ago)	SSH failed login	Brute-Force SSH
🇱🇻 alliance	2026-06-13 00:44:30 (4 days ago)	Jun 13 03:44:29 *** sshd[1460770]: Invalid user ubnt from 187.249.59.202 port 60720	Brute-Force SSH
🇮🇹 emernetsrl	2026-06-09 20:12:26 (1 week ago)	2026-06-09T21:58:30.098197+02:00 pve sshd-session[3981168]: Connection closed by 187.249.59.202 port ... show more 2026-06-09T21:58:30.098197+02:00 pve sshd-session[3981168]: Connection closed by 187.249.59.202 port 48959 [preauth] 2026-06-09T22:12:24.761738+02:00 pve sshd-session[3998532]: Invalid user ubnt from 187.249.59.202 port 49313 ... show less	Brute-Force SSH
🇹🇷 Threat.live	2026-05-28 09:25:04 (2 weeks ago)	Suspicious Connection Attempts	Brute-Force
🇬🇧 djboddington	2026-05-26 22:09:08 (3 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf	SSH Brute-Force
Anonymous	2026-05-23 09:38:13 (3 weeks ago)	May 23 05:38:08 v sshd\[8627\]: Invalid user ubnt from 187.249.59.202 port 37690 May 23 05:38:08 v s ... show more May 23 05:38:08 v sshd\[8627\]: Invalid user ubnt from 187.249.59.202 port 37690 May 23 05:38:08 v sshd\[8627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.249.59.202 May 23 05:38:11 v sshd\[8627\]: Failed password for invalid user ubnt from 187.249.59.202 port 37690 ssh2 ... show less	Brute-Force SSH
🇩🇪 wnbhosting.dk	2026-05-20 13:08:17 (3 weeks ago)	Invalid user ubnt from 187.249.59.202 port 56594	Brute-Force SSH
🇩🇪 wnbhosting.dk	2026-05-20 13:08:17 (3 weeks ago)	Invalid user ubnt from 187.249.59.202 port 56594	Brute-Force SSH
🇩🇪 wnbhosting.dk	2026-05-20 13:08:17 (3 weeks ago)	Invalid user ubnt from 187.249.59.202 port 56594	Brute-Force SSH
🇩🇪 Mailguard-FRD	2026-05-17 12:44:55 (4 weeks ago)	May 17 14:44:52 [redacted] sshd[3893748]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more May 17 14:44:52 [redacted] sshd[3893748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.249.59.202 May 17 14:44:54 [redacted] sshd[3893748]: Failed password for invali ... show less	Brute-Force SSH
🇺🇸 zhandler007	2026-05-16 10:54:08 (1 month ago)	2026-05-16T18:52:09.316113+08:00 nice-lasers-1.localdomain sshd[124578]: Connection closed by 187.24 ... show more 2026-05-16T18:52:09.316113+08:00 nice-lasers-1.localdomain sshd[124578]: Connection closed by 187.249.59.202 port 56024 [preauth] 2026-05-16T18:54:07.397024+08:00 nice-lasers-1.localdomain sshd[124581]: Invalid user ubnt from 187.249.59.202 port 56097 2026-05-16T18:54:07.469400+08:00 nice-lasers-1.localdomain sshd[124581]: Disconnected from invalid user ubnt 187.249.59.202 port 56097 [preauth] ... show less	Brute-Force SSH
Anonymous	2026-05-13 06:09:52 (1 month ago)	May 13 08:08:47 srv sshd[23031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more May 13 08:08:47 srv sshd[23031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.249.59.202 May 13 08:08:49 srv sshd[23031]: Failed password for invalid user Administrator from 187.249.59.202 port 59670 ssh2 show less	Brute-Force SSH

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.150.107.244

🇳🇱 194.48.251.105

🇩🇪 167.94.146.68

🇳🇵 124.41.228.116

🇨🇳 114.227.55.135

🇯🇵 107.155.15.8

🇸🇬 101.47.18.200

🇷🇴 92.118.39.62

🇨🇦 85.217.149.60

🇷🇺 31.6.124.249

🇨🇳 14.22.82.116

🇦🇺 170.64.168.59

🇸🇬 129.226.221.96

🇯🇵 103.163.220.106

🇲🇦 102.54.246.130

🇷🇴 80.94.92.184

🇲🇾 49.124.153.36

🇺🇸 49.51.204.105

🇭🇰 47.239.23.179

🇸🇨 45.194.67.2