Report for IP: 189.224.101.173

Threat LevelMEDIUM45/1001 rule type
1 incident on record · last seen 3d ago
PTR acceso-189.224.101.173.prod-infinitum.com.mx
Org / ASN Uninet S.A. de C.V.
Country 🇲🇽 Mexico
City Apodaca, Nuevo León
Timezone America/Monterrey

Attack Analysis

IDS: Database Port Scan
Suricata detected this IP scanning database ports (MySQL, PostgreSQL, Redis, MongoDB). This is reconnaissance to find exposed database services for direct exploitation or credential brute-force. Database ports should never be reachable from the internet.

Reports (1)

Date Severity Description
26 Sep 2026 - 14:38 high IDS: Database port scan — ET SCAN Suspicious inbound to MSSQL port 1433