JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.147.238.48

189.147.238.48 was found in our database!

This IP was reported 1,128 times. Confidence of Abuse is 7%: ?

ISP	Gestión de direccionamiento UniNet
Usage Type	Fixed Line ISP
ASN	AS8151
Hostname(s)	dsl-48-238-147-189-dynamic.prod-infinitum.com.mx
Domain Name	uninet.net.mx
Country	🇲🇽 Mexico
City	Mexico City, Mexico City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 189.147.238.48

Whois 189.147.238.48

IP Abuse Reports for 189.147.238.48:

This IP address has been reported a total of 1,128 times from 431 distinct sources. 189.147.238.48 was first reported on November 27th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-05-05 19:08:22 (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx02,mx03]	Brute-Force SSH
🇷🇺 victoryur	2026-04-14 00:03:56 (1 month ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇷🇺 victoryur	2026-03-15 00:09:46 (2 months ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇷🇺 victoryur	2026-02-13 00:02:56 (3 months ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇷🇺 victoryur	2026-01-14 00:04:24 (4 months ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇬🇧 AdrianT	2026-01-06 12:43:24 (5 months ago)	SSH brute force	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-12-25 20:10:39 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2025-12-24 23:36:27 (5 months ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2025-12-24 23:32:13 (5 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/189.147.238.48	SSH
🇦🇹 webnestify	2025-12-24 01:40:28 (5 months ago)	2025-12-24T01:40:25.444157+00:00 wn-at sshd[908443]: pam_unix(sshd:auth): authentication failure; lo ... show more 2025-12-24T01:40:25.444157+00:00 wn-at sshd[908443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.147.238.48 user=root 2025-12-24T01:40:25.444157+00:00 wn-at sshd[908443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.147.238.48 user=root 2025-12-24T01:40:28.215175+00:00 wn-at sshd[908443]: Failed password for root from 189.147.238.48 port 40960 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-24 01:18:31 (5 months ago)	189.147.238.48 (MX/Mexico/dsl-48-238-147-189-dynamic.prod-infinitum.com.mx), 5 distributed sshd atta ... show more 189.147.238.48 (MX/Mexico/dsl-48-238-147-189-dynamic.prod-infinitum.com.mx), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 23 19:18:18 14587 sshd[28422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.47.141.119 user=root Dec 23 19:17:05 14587 sshd[28264]: Failed password for root from 202.111.173.175 port 43508 ssh2 Dec 23 19:17:03 14587 sshd[28264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.111.173.175 user=root Dec 23 19:16:04 14587 sshd[28240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.147.238.48 user=root Dec 23 19:16:06 14587 sshd[28240]: Failed password for root from 189.147.238.48 port 32882 ssh2 IP Addresses Blocked: 101.47.141.119 (SG/Singapore/-) 202.111.173.175 (CN/China/-) show less	Brute-Force SSH
🇬🇧 Birdo	2025-12-24 00:17:06 (5 months ago)	[Birdo SSH Honeypot] SSH login attempt	Port Scan Hacking Brute-Force Exploited Host SSH
🇫🇷 pr0vieh	2025-12-23 23:56:12 (5 months ago)	2025-12-24T00:54:35.171717+01:00 Linux04 sshd[14963]: Failed password for invalid user admin from 18 ... show more 2025-12-24T00:54:35.171717+01:00 Linux04 sshd[14963]: Failed password for invalid user admin from 189.147.238.48 port 49536 ssh2 2025-12-24T00:55:06.996436+01:00 Linux04 sshd[17193]: Invalid user master from 189.147.238.48 port 45690 2025-12-24T00:55:07.000365+01:00 Linux04 sshd[17193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.147.238.48 2025-12-24T00:55:09.605767+01:00 Linux04 sshd[17193]: Failed password for invalid user master from 189.147.238.48 port 45690 ssh2 2025-12-24T00:55:39.699126+01:00 Linux04 sshd[24058]: Invalid user ts3 from 189.147.238.48 port 53084 2025-12-24T00:55:39.701369+01:00 Linux04 sshd[24058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.147.238.48 2025-12-24T00:55:41.505893+01:00 Linux04 sshd[24058]: Failed password for invalid user ts3 from 189.147.238.48 port 53084 ssh2 2025-12-24T00:56:10.357024+01:00 Linux04 sshd[31435]: Invalid user serveradmin from 189.147 ... show less	Brute-Force SSH
🇫🇷 SpaceHost-Server	2025-12-23 23:35:29 (5 months ago)		Brute-Force Web App Attack
🇿🇦 oh.mg	2025-12-23 23:15:22 (5 months ago)	2025-12-24T01:14:11.600251+02:00 chat.me.ke sshd[3561952]: pam_unix(sshd:auth): authentication failu ... show more 2025-12-24T01:14:11.600251+02:00 chat.me.ke sshd[3561952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.147.238.48 user=root 2025-12-24T01:14:13.845738+02:00 chat.me.ke sshd[3561952]: Failed password for root from 189.147.238.48 port 56144 ssh2 2025-12-24T01:15:19.408113+02:00 chat.me.ke sshd[3567493]: Invalid user mc from 189.147.238.48 port 42392 2025-12-24T01:15:19.411790+02:00 chat.me.ke sshd[3567493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.147.238.48 2025-12-24T01:15:21.993740+02:00 chat.me.ke sshd[3567493]: Failed password for invalid user mc from 189.147.238.48 port 42392 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 1128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 37.156.65.210

🇺🇸 20.168.6.85

🇨🇳 180.76.240.235

🇨🇦 142.113.66.10

🇭🇰 101.36.112.101

🇫🇷 91.231.89.141

🇺🇸 65.49.1.138

🇩🇪 64.89.163.235

🇫🇷 51.254.73.78

🇧🇷 35.247.219.146

🇨🇳 27.17.182.100

🇻🇳 14.224.213.222

🇺🇸 205.210.31.40

🇧🇪 198.235.24.248

🇻🇪 190.120.250.33

🇷🇴 80.94.92.167

🇺🇸 64.181.194.141

🇺🇸 45.77.201.222

🇺🇸 45.50.15.214

🇺🇸 43.165.127.225