JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.188.73.149

189.188.73.149 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 78%: ?

78%

ISP	Gestión de direccionamiento UniNet
Usage Type	Fixed Line ISP
ASN	AS8151
Hostname(s)	dsl-149-73-188-189-dynamic.prod-infinitum.com.mx
Domain Name	uninet.net.mx
Country	🇲🇽 Mexico
City	Mexico City, Mexico City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 189.188.73.149

Whois 189.188.73.149

IP Abuse Reports for 189.188.73.149:

This IP address has been reported a total of 15 times from 15 distinct sources. 189.188.73.149 was first reported on July 17th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Markus Ackerl	2026-07-21 04:44:56 (2 days ago)	Jul 21 04:44:53 mx postfix/submission/smtpd[338072]: NOQUEUE: reject: RCPT from unknown[189.188.73.1 ... show more Jul 21 04:44:53 mx postfix/submission/smtpd[338072]: NOQUEUE: reject: RCPT from unknown[189.188.73.149]: 554 5.7.1 <[email protected]>: Recipient address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<smtprc.smtprc> Jul 21 04:44:54 mx postfix/submission/smtpd[338072]: NOQUEUE: reject: RCPT from unknown[189.188.73.149]: 554 5.7.1 <[email protected]>: Recipient address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<smtprc.smtprc> Jul 21 04:44:56 mx postfix/submission/smtpd[338072]: NOQUEUE: reject: RCPT from unknown[189.188.73.149]: 554 5.7.1 <[email protected]>: Recipient address rejected: Access denied; from=<smtprc> to=<[email protected]> proto=SMTP helo=<smtprc.smtprc> ... show less	Brute-Force
🇫🇮 6kilowatti	2026-07-21 01:06:48 (3 days ago)	2026-07-21T04:06:48.353336+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ... show more 2026-07-21T04:06:48.353336+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=189.188.73.149 DST=192.168.0.102 LEN=60 TOS=0x18 PREC=0x20 TTL=55 ID=22917 DF PROTO=TCP SPT=50706 DPT=26 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇯🇵 Kinsei Engineering Inc.	2026-07-20 11:32:52 (3 days ago)	UFW:High-frequency access to unused ports	Port Scan
🇫🇮 sonot	2026-07-19 20:25:39 (4 days ago)	Blocked by UFW on mail [26/tcp] \| SPT: 38926 \| TTL: 45 \| LEN: 60 \| TOS: 0x00 • Reported by: github.c ... show more Blocked by UFW on mail [26/tcp] \| SPT: 38926 \| TTL: 45 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 abenage	2026-07-19 08:04:19 (4 days ago)	Jul 19 02:04:19 [redacted] postfix/submission/smtpd[3661104]: NOQUEUE: reject: RCPT from unknown[189 ... show more Jul 19 02:04:19 [redacted] postfix/submission/smtpd[3661104]: NOQUEUE: reject: RCPT from unknown[189.188.73.149]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<smtprc.smtprc> show less	Brute-Force Email Spam Exploited Host
🇧🇷 diego	2026-07-19 07:02:13 (4 days ago)	[rede-44-49] Port Scan detected from 189.188.73.149 (MX/Mexico/dsl-149-73-188-189-dynamic.prod-inf ... show more [rede-44-49] Port Scan detected from 189.188.73.149 (MX/Mexico/dsl-149-73-188-189-dynamic.prod-infinitum.com.mx). 11 hits in the last 95 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jul 19 04:01:44 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=189.188.73.149 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=705 DF PROTO=TCP SPT=59010 DPT=26 WINDOW=64240 RES=0x00 SYN URGP=0 Jul 19 04:01:49 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=189.188.73.149 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=709 DF PROTO=TCP SPT=59010 DPT=26 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 ValtonTahiri	2026-07-18 14:07:00 (5 days ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=189.188.73.149; proto=TCP; source_port=53616; target_port=465; flags=SYN show less	Port Scan
🇧🇷 maviei	2026-07-18 09:42:29 (5 days ago)	2026-07-18T06:42:26.162786-03:00 srv1251771 kernel: [596507.481970] [UFW BLOCK] IN=eth0 OUT= MAC=40: ... show more 2026-07-18T06:42:26.162786-03:00 srv1251771 kernel: [596507.481970] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=189.188.73.149 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=37388 DF PROTO=TCP SPT=47236 DPT=26 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-18T06:42:27.187364-03:00 srv1251771 kernel: [596508.506461] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=189.188.73.149 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=37389 DF PROTO=TCP SPT=47236 DPT=26 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-18T06:42:28.218759-03:00 srv1251771 kernel: [596509.536131] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=189.188.73.149 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=37390 DF PROTO=TCP SPT=47236 DPT=26 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 pearbright	2026-07-18 09:40:22 (5 days ago)	2026-07-18T09:40:09.015355+00:00 srv1093252 kernel: [5113577.305706] [UFW BLOCK] IN=eth0 OUT= MAC=28 ... show more 2026-07-18T09:40:09.015355+00:00 srv1093252 kernel: [5113577.305706] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=189.188.73.149 DST=72.61.19.109 LEN=60 TOS=0x08 PREC=0x20 TTL=46 ID=875 DF PROTO=TCP SPT=56246 DPT=26 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-18T09:40:10.024270+00:00 srv1093252 kernel: [5113578.314476] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=189.188.73.149 DST=72.61.19.109 LEN=60 TOS=0x08 PREC=0x20 TTL=46 ID=876 DF PROTO=TCP SPT=56246 DPT=26 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-18T09:40:11.048605+00:00 srv1093252 kernel: [5113579.338863] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=189.188.73.149 DST=72.61.19.109 LEN=60 TOS=0x08 PREC=0x20 TTL=46 ID=877 DF PROTO=TCP SPT=56246 DPT=26 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-18T09:40:12.074797+00:00 srv1093252 kernel: [5113580.365662] [UFW BLOCK] IN=eth0 OUT= MAC=28:e8:d4:b5:be:84:44:38:39:ff:ff:41:08:00 SRC=189.188.73.149 D ... show less	Port Scan
🇧🇷 ludarkstar99	2026-07-18 02:35:03 (6 days ago)	Blocked by os-abuseipdb; 28 hits, proto=tcp, ports=2525,26,465,587	Port Scan Hacking
🇺🇸 knock	2026-07-18 01:01:35 (6 days ago)	Knock-Knock honeypot brute-force: SMTP (8 total hits)	Brute-Force
🇨🇦 celestialcity	2026-07-18 00:26:59 (6 days ago)	Blocked by UFW on celestialcityna [465/tcp] \| SPT: 39302 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported ... show more Blocked by UFW on celestialcityna [465/tcp] \| SPT: 39302 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Email Spam
🇫🇷 wiredalter	2026-07-17 21:11:00 (6 days ago)	Blocked by fail2ban on o2VPS [26/tcp] Source Port: 57472 TTL: 42 Packet Length: 60 TOS: 0x00 Analyz ... show more Blocked by fail2ban on o2VPS [26/tcp] Source Port: 57472 TTL: 42 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Brute-Force SSH
🇩🇪 mattk	2026-07-17 07:33:44 (6 days ago)	Jul 17 07:33:43 postfix/submission/smtpd[1854077]: disconnect from unknown[189.188.73.149] helo=1 ma ... show more Jul 17 07:33:43 postfix/submission/smtpd[1854077]: disconnect from unknown[189.188.73.149] helo=1 mail=0/1 rset=0/1 commands=1/3 show less	Email Spam Brute-Force
🇹🇷 Threat.live	2026-07-17 03:05:02 (1 week ago)	Suspicious Connection Attempts	Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.217.34.84

🇺🇸 172.253.2.23

🇸🇬 47.128.115.89

🇬🇧 35.203.210.226

🇨🇱 200.86.178.31

🇸🇬 152.32.218.30

🇩🇴 149.2.83.139

🇺🇸 143.198.233.61

🇻🇳 123.20.139.128

🇸🇬 68.183.236.1

🇧🇪 34.76.152.205

🇺🇸 13.89.125.23

🇧🇷 205.210.31.204

🇩🇪 194.187.176.195

🇬🇧 154.16.44.243

🇺🇸 107.77.195.212

🇮🇳 59.178.250.158

🇳🇱 45.148.10.147

🇨🇳 27.8.44.168

🇭🇰 199.45.155.88