JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 200.56.96.168

200.56.96.168 was found in our database!

This IP was reported 783 times. Confidence of Abuse is 0%: ?

ISP	Despachos Aduaneros y Fiscales de Tijuana S.C.
Usage Type	Fixed Line ISP
ASN	AS8151
Hostname(s)	200.56.96.168.ded.telnor.net
Domain Name	grupodaf.com
Country	🇲🇽 Mexico
City	Tijuana, Baja California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 200.56.96.168

Whois 200.56.96.168

IP Abuse Reports for 200.56.96.168:

This IP address has been reported a total of 783 times from 326 distinct sources. 200.56.96.168 was first reported on August 8th 2022, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 mythicalkitten	2023-11-11 02:49:57 (2 years ago)	Nov 11 02:49:46 mk-bgp sshd[3449504]: Invalid user admin from 200.56.96.168 port 55769 Nov 11 02:49: ... show more Nov 11 02:49:46 mk-bgp sshd[3449504]: Invalid user admin from 200.56.96.168 port 55769 Nov 11 02:49:48 mk-bgp sshd[3449519]: Invalid user ubnt from 200.56.96.168 port 65341 Nov 11 02:49:51 mk-bgp sshd[3449527]: Invalid user ubnt from 200.56.96.168 port 64777 Nov 11 02:49:55 mk-bgp sshd[3449535]: Invalid user user from 200.56.96.168 port 63512 Nov 11 02:49:56 mk-bgp sshd[3449546]: Invalid user admin from 200.56.96.168 port 51291 ... show less	Hacking Brute-Force
🇩🇪 akcurate.de	2023-11-09 19:00:47 (2 years ago)	2023-11-09T20:00:43.296484 mail2.akcurate.de sshd[546985]: Connection closed by 200.56.96.168 port 6 ... show more 2023-11-09T20:00:43.296484 mail2.akcurate.de sshd[546985]: Connection closed by 200.56.96.168 port 61276 2023-11-09T20:00:44.543453 mail2.akcurate.de sshd[546986]: Connection closed by authenticating user root 200.56.96.168 port 61492 [preauth] 2023-11-09T20:00:45.505322 mail2.akcurate.de sshd[546988]: Connection closed by authenticating user root 200.56.96.168 port 63424 [preauth] ... show less	Brute-Force SSH
🇳🇱 EGP Abuse Dept	2023-10-23 01:12:39 (2 years ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
Anonymous	2023-10-22 01:23:29 (2 years ago)	Oct 22 04:23:12 orcaccio sshd[8562]: Invalid user admin from 200.56.96.168 port 51586 Oct 22 04:23:1 ... show more Oct 22 04:23:12 orcaccio sshd[8562]: Invalid user admin from 200.56.96.168 port 51586 Oct 22 04:23:13 orcaccio sshd[8564]: Invalid user admin from 200.56.96.168 port 50538 ... show less	Brute-Force SSH
🇨🇿 lp	2023-10-22 00:52:28 (2 years ago)	anomaly: tcp_port_scan, 501 > threshold 500, repeats 71305 times since last log, pps 489 of prior se ... show more anomaly: tcp_port_scan, 501 > threshold 500, repeats 71305 times since last log, pps 489 of prior second show less	Port Scan
🇬🇧 ASPAN	2023-10-17 06:14:11 (2 years ago)	Unsolicited connection attempt(s), port:81.	Port Scan
🇩🇪 LoNET	2023-10-09 16:50:11 (2 years ago)	Report 762333 with IP 1394255 for SSH brute-force attack by source 1804558 via ssh-honeypot/0.2.0+ht ... show more Report 762333 with IP 1394255 for SSH brute-force attack by source 1804558 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
🇫🇷 dsl	2023-10-09 16:42:02 (2 years ago)	Oct 9 16:41:54 dagasistemas sshd[27878]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more Oct 9 16:41:54 dagasistemas sshd[27878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.56.96.168 user=root Oct 9 16:41:56 dagasistemas sshd[27878]: Failed password for root from 200.56.96.168 port 60111 ssh2 Oct 9 16:41:59 dagasistemas sshd[27916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.56.96.168 user=root Oct 9 16:42:01 dagasistemas sshd[27916]: Failed password for root from 200.56.96.168 port 53828 ssh2 ... show less	Brute-Force SSH
🇹🇭 Sawasdee	2023-10-04 17:42:08 (2 years ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇮🇪 RoboSOC	2023-09-28 15:49:11 (2 years ago)	Port 22 Scan, PTR: None	Port Scan
🇳🇱 mythicalkitten	2023-09-28 13:06:13 (2 years ago)	Sep 28 13:06:08 mk-bgp sshd[1627476]: Invalid user sonar from 200.56.96.168 port 60368 Sep 28 13:06: ... show more Sep 28 13:06:08 mk-bgp sshd[1627476]: Invalid user sonar from 200.56.96.168 port 60368 Sep 28 13:06:09 mk-bgp sshd[1627489]: Invalid user sonar from 200.56.96.168 port 53130 Sep 28 13:06:10 mk-bgp sshd[1627492]: Invalid user esuser from 200.56.96.168 port 61221 Sep 28 13:06:12 mk-bgp sshd[1627502]: Invalid user esuser from 200.56.96.168 port 52508 Sep 28 13:06:12 mk-bgp sshd[1627506]: Invalid user spark from 200.56.96.168 port 62504 ... show less	Hacking Brute-Force
🇺🇸 gu-alvareza	2023-09-28 07:05:29 (2 years ago)	Multiple.Routers.GPON.formLogin.Remote.Command.Injection	SQL Injection Web App Attack
🇺🇸 MPL	2023-09-27 23:43:14 (2 years ago)	tcp/80 (2 or more attempts)	Port Scan
🇺🇸 gu-alvareza	2023-09-27 15:38:41 (2 years ago)	Multiple.Routers.GPON.formLogin.Remote.Command.Injection	SQL Injection Web App Attack
🇨🇿 lp	2023-09-27 00:45:02 (2 years ago)	SSH Brute force: 11 attempts were recorded from 200.56.96.168 2023-09-27T02:44:41+02:00 Connection f ... show more SSH Brute force: 11 attempts were recorded from 200.56.96.168 2023-09-27T02:44:41+02:00 Connection from 200.56.96.168 port 63017 on <redacted> port 22 rdomain "" 2023-09-27T02:44:41+02:00 Invalid user sonar from 200.56.96.168 port 63017 2023-09-27T02:44:44+02:00 Failed password for invalid user sonar from 200.56.96.168 port 63017 ssh2 2023-09-27T02:44:45+02:00 Connection closed by invalid user sonar 200.56.96.168 port 63017 [preauth] 2023-09-27T02:44:46+02:00 Connection from 200.56.96.168 port 62102 on <redacted> port 22 rdomain "" 2023-09-27T02:44:46+02:00 Invalid user sonar from 200.56.96.168 port 62102 2023-09-27T02:44:49+02:00 Failed password for invalid user sonar from 200.56.96.168 port 62102 ssh2 2023-09-27T02:44:50+02:00 Connection closed by invalid user sonar 200.56.96.168 port 62102 [preauth] 2023-09-27T02:44:50+02:00 Connection from 200.56.96.168 port 54578 on <redacted> port show less	Brute-Force SSH

Showing 1 to 15 of 783 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.78.60.105

🇨🇳 218.62.15.102

🇹🇼 198.235.24.82

🇺🇸 98.88.169.101

🇳🇱 91.92.47.147

🇫🇷 82.230.42.141

🇨🇳 218.201.250.120

🇨🇳 218.56.160.82

🇨🇳 218.4.91.163

🇮🇳 216.10.242.215

🇺🇸 195.184.76.126

🇬🇧 195.140.214.20

🇧🇷 187.99.119.28

🇨🇳 180.165.54.95

🇺🇸 172.253.9.209

🇺🇸 166.62.41.190

🇨🇦 143.198.38.88

🇭🇰 103.210.21.178

🇨🇳 101.126.137.113

🇮🇩 69.5.20.205