189.131.228.126

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
100% Critical
32 reports
28 reporters · latest 3 hours ago
ISP Gestión de direccionamiento UniNet
Usage Type Fixed Line ISP
ASN AS8151
Hostname(s) dsl-126-228-131-189-dynamic.prod-infinitum.com.mx
Domain Name uninet.net.mx
Country 🇲🇽 Mexico
City Mexico City, Mexico City

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 189.131.228.126

This IP address has been reported a total of 32 times from 28 distinct sources. 189.131.228.126 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 7 reports; Germany with 6 reports; France with 5 reports. The most common categories in these recent reports were: Port Scan 26 times; Hacking 10 times; Brute-Force 4 times; SQL Injection 3 times; IoT Targeted 1 time; Other 4 times.

Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
🇫🇷 vincent_EUDIER
ET SCAN NMAP -sS window 1024
Port Scan
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
Port Scan
🇺🇸 IndigoRidge
Knock-Knock SMB honeypot activity; time=2026-10-14 06:12:50; smb_action=AUTH; smb_version=SMB1
Hacking Brute-Force
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=47195 dstport=1433
Port Scan Hacking SQL Injection
🇨🇦 Tanados
Port Scan
Anonymous
Unauthorized access (445/tcp/microsoft-ds)
Port Scan
🇬🇧 essinghigh
IPS Detection: 189.131.228.126 -> DPT: 1433
Port Scan
🇫🇷 sthoyer.de
Port Scan
🇦🇷 Bruno
Port Scanner: 189.131.228.126
Port Scan
🇺🇸 Phil Schuyler
Connection attempts to exposed SMB service on TCP/445. Captured by a honeypot.
Port Scan
🇫🇷 sthoyer.de
Port Scan
🇷🇸 Smel
SQL/MH Probe, Scan, Hack -
Port Scan Hacking SQL Injection
🇺🇸 xmission.com
Port Scan
🇫🇮 6kilowatti
Port Scan

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.6.157.91
🇧🇷 192.141.110.117
🇦🇫 149.54.51.74
🇮🇹 109.53.82.17
🇮🇩 103.159.199.43
🇨🇦 85.217.149.59
🇺🇸 45.79.207.181
🇨🇳 14.103.28.111
🇹🇭 203.150.107.67
🇧🇬 193.24.211.219
🇳🇮 186.77.196.194
🇨🇳 180.100.217.164
🇵🇱 176.53.159.198
🇺🇸 172.208.64.173
🇺🇸 165.245.171.28
🇳🇱 109.160.32.124
🇺🇸 104.17.71.10
🇺🇦 37.57.77.74
🇺🇸 24.97.253.246
🇺🇸 20.84.99.255