187.189.168.197 has a threat confidence score of 35%. This IP address from Mexico (AS17072, TOTAL PLAY TELECOMUNICACIONES SA DE CV) has been observed in 58 honeypot sessions targeting SMB protocols. First observed on February 18, 2026, most recently active March 9, 2026.