JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.139.180.157

189.139.180.157 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 66%: ?

66%

ISP	Gestión de direccionamiento UniNet
Usage Type	Fixed Line ISP
ASN	AS8151
Hostname(s)	dsl-157-180-139-189-dynamic.prod-infinitum.com.mx
Domain Name	uninet.net.mx
Country	🇲🇽 Mexico
City	Ecatepec de Morelos, Mexico

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 189.139.180.157

Whois 189.139.180.157

IP Abuse Reports for 189.139.180.157:

This IP address has been reported a total of 11 times from 10 distinct sources. 189.139.180.157 was first reported on July 18th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇷 Bruno	2026-07-19 06:13:56 (3 days ago)	Port Scanner: 189.139.180.157	Port Scan
🇫🇷 security.rdmc.fr	2026-07-19 05:44:25 (3 days ago)	Port Scan Attack proto:TCP src:50750 dst:23	Port Scan
🇺🇸 pcprincipal8752	2026-07-18 23:57:16 (3 days ago)	NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| ... show more NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| 6) ping ;sh \| 7) /bin/busybox \| 8) iptables -F \| 9) /bin/busybox echo > /tmp/.fxcat && sh /tmp/.fxcat && cd /tmp/ \| 10) /bin/busybox echo > /var/.fxcat && sh /var/.fxcat && cd /var/ \| 11) /bin/busybox echo > /var/run/.fxcat && sh /var/run/.fxcat && cd /var/run/ \| 12) /bin/busybox echo > /var/tmp/.fxcat && sh /var/tmp/.fxcat && cd /var/tmp/ \| 13) /bin/busybox echo > /dev/.fxcat && sh /dev/.fxcat && cd /dev/ \| 14) /bin/busybox echo > /dev/shm/.fxcat && sh /dev/shm/.fxcat && cd /dev/shm/ \| 15) /bin/busybox echo > /etc/.fxcat && sh /etc/.fxcat && cd /etc/ \| 16) /bin/busybox echo > /mnt/.fxcat && sh /mnt/.fxcat && cd /mnt/ \| 17) /bin/busybox echo > /usr/.fxcat && sh /usr/.fxcat && cd /usr/ \| 18) /bin/busybox echo > /boot/.fxcat && sh /boot/.fxcat && cd /boot/ \| 19) /bin/busybox echo > /home/.fxcat && sh /home/.fxcat && cd /home/ \| 20) for pid in /proc/[0-9]; do pid_num="${pid##/}"; if [ -r "$pid/maps" ]; then sus show less	Brute-Force
🇺🇸 cwytech	2026-07-18 23:29:28 (3 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.	Hacking
🇦🇹 urnilxfgbez	2026-07-18 22:45:00 (3 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Anonymous	2026-07-18 15:07:07 (3 days ago)	Unauthorized connection to Telnet port 23	Port Scan
🇺🇸 RAP	2026-07-18 11:37:29 (4 days ago)	2026-07-18 11:37:29 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇩🇪 Admins@FBN	2026-07-18 10:43:18 (4 days ago)	FW-PortScan: Traffic Blocked srcport=58611 dstport=23	Port Scan
🇺🇸 donarev419	2026-07-18 01:28:40 (4 days ago)	Port scan detected on port 23 (connection without data transfer)	Port Scan
Anonymous	2026-07-18 00:17:50 (4 days ago)	denied Telnet-like access attempt. destination port 2323.	Port Scan Brute-Force
🇺🇸 RAP	2026-07-18 00:17:34 (4 days ago)	2026-07-18 00:17:34 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇷 179.48.248.245

🇭🇰 139.198.113.29

🇭🇰 61.92.58.210

🇯🇵 43.165.174.48

🇺🇸 204.8.98.65

🇳🇱 195.178.110.30

🇺🇸 147.185.132.24

🇨🇳 111.162.138.252

🇵🇰 103.166.103.173

🇨🇳 101.204.251.229

🇭🇰 101.79.165.43

🇳🇱 91.92.47.128

🇻🇪 82.86.119.95

🇺🇸 45.58.52.25

🇨🇳 223.75.156.89

🇵🇱 188.122.80.233

🇪🇨 177.234.209.102

🇩🇪 158.94.208.119

🇨🇳 124.88.113.21

🇸🇬 101.47.15.26