JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.203.150.248

189.203.150.248 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 29%: ?

29%

ISP	TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V.
Usage Type	Fixed Line ISP
ASN	AS17072
Hostname(s)	fixed-189-203-150-248.totalplay.net
Domain Name	totalplay.com.mx
Country	🇲🇽 Mexico
City	Mexico City, Mexico City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 189.203.150.248

Whois 189.203.150.248

IP Abuse Reports for 189.203.150.248:

This IP address has been reported a total of 14 times from 14 distinct sources. 189.203.150.248 was first reported on July 28th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 mypatricks	2026-10-14 02:05:54 (3 days ago)	189.203.150.248 \| Port: 9648 \| DNS: fixed-189-203-150-248.totalplay.net 2026-10-14T10:05:53+08:00 Am ... show more 189.203.150.248 \| Port: 9648 \| DNS: fixed-189-203-150-248.totalplay.net 2026-10-14T10:05:53+08:00 America/Mexico_City \| IPs Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /?1791680092&22d0ca92beab20c2=1427 \| Ref: - \| Country: MX/Mexico/−06:00 IP City: Mexico City Windows a4a30580dd99c592-IAD/Ashburn, VA, United States 1 hits/0 secs Browser 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
Anonymous	2026-10-09 07:14:16 (1 week ago)	Unauthorized bot with fake user agent	Hacking
🇪🇸 robotstxt	2026-10-03 03:17:43 (2 weeks ago)	189.203.150.248 - - [03/Oct/2026:03:16:48 +0000] "GET /xmlrpc.php?rsd= HTTP/1.1" 403 16186 "https:// ... show more 189.203.150.248 - - [03/Oct/2026:03:16:48 +0000] "GET /xmlrpc.php?rsd= HTTP/1.1" 403 16186 "https://www.wpsysadmin.com/blog/2021/05/18/php-intl/internacionalizacion/" "Mozilla/5.0 (Android 11; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0" "-" edge="189.203.150.248" 189.203.150.248 - - [03/Oct/2026:03:16:53 +0000] "GET /xmlrpc.php?rsd= HTTP/1.1" 403 16186 "https://www.wpsysadmin.com/blog/2021/05/18/php-intl/internacionalizacion/" "Mozilla/5.0 (Android 11; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0" "-" edge="189.203.150.248" 189.203.150.248 - - [03/Oct/2026:03:16:59 +0000] "GET /xmlrpc.php?rsd= HTTP/1.1" 403 16186 "https://www.wpsysadmin.com/blog/2021/05/18/php-intl/internacionalizacion/" "Mozilla/5.0 (Android 11; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0" "-" edge="189.203.150.248" 189.203.150.248 - - [03/Oct/2026:03:17:31 +0000] "GET /xmlrpc.php?rsd= HTTP/1.1" 403 16186 "https://www.wpsysadmin.com/blog/2021/05/18/php-intl/internacionalizacion/" "Mozilla/5.0 (Android 11; Mobile; rv:1 ... show less	Web App Attack
Anonymous	2026-09-22 22:45:50 (3 weeks ago)	Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /brands/shopby/manufacturer-lifesize-beyerdynamic-smart-supermicro-haivision-brother-powercom.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇪🇸 el-brujo	2026-08-29 00:13:07 (1 month ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇩🇪 LRob	2026-08-20 02:17:40 (1 month ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /4-velos-electriques \| query: order=product.position.asc&productListView=list&q=Taille-L%2FFamille-HYBE&resultsPerPage=24 show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-08-03 09:43:11 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 189.203.150.248 (fixed-189-203-150-248.totalpla ... show more (mod_security) mod_security (id:210492) triggered by 189.203.150.248 (fixed-189-203-150-248.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 05:43:01.363426 2026] [security2:error] [pid 3402662:tid 3402662] [client 189.203.150.248:7265] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.theholographicseed.com"] [uri "/.env.orig"] [unique_id "anBipWthVHL2FrzaDqN98gAAAAQ"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-14 13:59:28 (3 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇫🇷 Tilellit.PRO	2026-07-06 10:27:05 (3 months ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇫🇷 Sklurk	2026-07-02 10:09:34 (3 months ago)	Web App Attack	Web App Attack
🇮🇹 A000Z	2026-06-25 09:40:15 (3 months ago)	Fail2Ban: 189.203.150.248 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 189.203.150.248 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36 show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-15 04:02:53 (4 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇳🇱 exxos	2025-08-28 12:03:01 (1 year ago)	Attacks with Bad user agents	Hacking
🇪🇸 Global Cyber Police	2025-07-28 07:43:26 (1 year ago)	Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.	DDoS Attack Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 2409:8c34:2220:25:0:1:0:4

🇨🇦 170.203.205.187

🇺🇸 100.28.153.226

🇷🇴 92.118.39.212

🇬🇧 77.67.26.184

🇬🇧 77.67.26.173

🇸🇬 47.128.110.238

🇷🇺 46.44.36.143

🇸🇬 43.172.196.242

🇳🇱 195.178.110.30

🇨🇭 179.43.139.58

🇨🇳 121.15.140.235

🇳🇱 104.23.166.134

🇳🇱 104.22.109.38

🇩🇪 69.5.169.185

🇵🇱 45.138.12.25

🇬🇧 35.203.210.177

🇺🇸 20.118.251.35

🇰🇷 221.162.34.208

🇯🇵 124.155.125.131