Back to the database

ip

187.154.152.172

Medium · 482 reports
MXMexico
Organization:
Uninet S.A. de C.V.

Instant verdict

SUSPICIOUS

48/100

Community risk score

187.154.152.172 is an IP address with 2 abuse reports from 2 distinct reporters, submitted between 11/06/2026 and 11/07/2026. The AbuseTrack community rates it as Medium risk, with a score of 48/100. The most frequently reported threat categories are Brute Force.

2

Reports

2

Reporters

11/06/2026

First seen

11/07/2026

Last seen

Threat type

Is this your address and is it listed wrongly? Request removal →

Intelligence

MX

Country

Mexico (MX)

WHOIS (RDAP)

Country
Mexico
Location
Centro, Tabasco

Reverse DNS

PTR
dsl-172-152-154-187-dynamic.prod-infinitum.com.mx

Report history (2)

Brute Force11/07/2026, 02:42 AM · NextServ Group

2026-11-07T03:39:28.901545+01:00 dns sshd-session[58210]: Failed password for invalid user admin from 187.154.152.172 port 49964 ssh2 2026-11-07T03:41:08.922977+01:00 dns sshd-session[58212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.154.152.172 user=root 2026-11-07T03:41:10.758309+01:00 dns sshd-session[58212]: Failed password for root from 187.154.152.172 port 33234 ssh2 2026-11-07T03:42:33.230681+01:00 dns sshd-session[58215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.154.152.172 user=root 2026-11-07T03:42:34.872941+01:00 dns sshd-session[58215]: Failed password for root from 187.154.152.172 port 48146 ssh2

Brute Force11/06/2026, 05:39 PM · Enjyn Gruppe

fail2ban: SSH (sshd) brute-force — 3 failed attempts (jail: sshd)