AbuseIPDB » 189.248.158.49
189.248.158.49 was found in our database!
This IP was reported 40 times. Confidence of Abuse is 100%: ?
| ISP | Uninet S.A. de C.V. |
|---|---|
| Usage Type | Fixed Line ISP |
| ASN | AS8151 |
| Hostname(s) |
acceso-189.248.158.49.prod-infinitum.com.mx |
| Domain Name | uninet.net.mx |
| Country | 🇲🇽 Mexico |
| City | Heroica Guaymas, Sonora |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 189.248.158.49:
This IP address has been reported a total of 40 times from 34 distinct sources. 189.248.158.49 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇩🇪 IVski.com |
IVski WAF | Suspicious activity detected - generic bot or scanner pattern
|
Hacking Brute-Force Web App Attack | ||
| 🇳🇱 donarev419 |
Connection to port 1433 with data transfer.
Data preview:
|
Port Scan Hacking | ||
| 🇺🇸 azminawwar |
|
Port Scan Hacking | ||
| 🇺🇸 HamSammich |
Automated sensor: 1 MSSQL connection/probe attempts over the last 24h (latest 2026-10-22T09:49Z).
|
Hacking Brute-Force | ||
| 🇫🇷 GoodOldTOS |
Un-authorized connection to MSSQL
|
Hacking | ||
| 🇧🇷 SOC-BR |
|
Port Scan Hacking | ||
| 🇺🇸 sumnone |
Port probing on unauthorized port 445
|
Port Scan Hacking Exploited Host | ||
| 🇺🇸 drewf.ink |
[19:47] Probed the MSSQL honeypot (PRELOGIN handshake only, no login attempt)
|
Brute-Force Hacking | ||
| 🇺🇸 drewf.ink |
[19:46] Probed the MSSQL honeypot (PRELOGIN handshake only, no login attempt)
|
Brute-Force Hacking | ||
| 🇳🇱 knock |
Knock-Knock honeypot brute-force: SMB (3 total hits)
|
Brute-Force | ||
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | ||
| 🇧🇷 chronos |
|
Port Scan | ||
| 🇩🇪 iNetWorker |
firewall-block, port(s): 445/tcp
|
Port Scan | ||
| 🇩🇪 D3RP4UL |
SMB traffic on port 445
|
Hacking | ||
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_tcp_issues,ndpi_probing_attempt
|
Hacking |
Showing 1 to 15 of 40 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩