JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 148.101.179.196

148.101.179.196 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 60%: ?

60%

ISP	INSTITUTO TECNOLOGICO DE LAS AMERICAS
Usage Type	Fixed Line ISP
ASN	AS6400
Hostname(s)	196.179.101.148.l.static.claro.net.do
Domain Name	itla.edu.do
Country	🇩🇴 Dominican Republic
City	Boca Chica, Santo Domingo Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 148.101.179.196

Whois 148.101.179.196

IP Abuse Reports for 148.101.179.196:

This IP address has been reported a total of 19 times from 12 distinct sources. 148.101.179.196 was first reported on June 23rd 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-07-23 12:14:42 (12 hours ago)	tcp/445 (4 or more attempts)	Port Scan
🇩🇪 Admins@FBN	2026-07-21 10:10:38 (2 days ago)	FW-PortScan: Traffic Blocked srcport=65137 dstport=445	Port Scan
🇩🇪 Admins@FBN	2026-07-21 05:40:09 (2 days ago)	FW-PortScan: Traffic Blocked srcport=64890 dstport=445	Port Scan
🇺🇸 xmission.com	2026-07-20 13:33:58 (3 days ago)	Blocked by UFW (TCP on 9101) Source port: 51655 TTL: 116 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 51655 TTL: 116 Packet length: 52 TOS: 0x08 This report (for 148.101.179.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 design2web.ca	2026-07-19 08:30:35 (4 days ago)	[UniFi FW] SMB exploitation attempt on port 445 (SMB) \| Policy: Region Blocking \| Proto: TCP \| Src: ... show more [UniFi FW] SMB exploitation attempt on port 445 (SMB) \| Policy: Region Blocking \| Proto: TCP \| Src: 148.101.179.196:65007 \| SrcRegion: DO \| Svc: MICROSOFT_DS \| Detected: 2026-07-19 08:17:23 UTC \| ISP: Compañía Dominicana de Teléfonos S. A \| D2W UniFi AbuseIPDB Reporter v2 show less	Port Scan
🇨🇭 cybsecaoccol	2026-07-18 21:58:26 (5 days ago)	unauthorized connection or malicious port scan attempted on tcp port 445 - sch	Port Scan Hacking
🇩🇪 Admins@FBN	2026-07-18 15:14:45 (5 days ago)	FW-PortScan: Traffic Blocked srcport=65129 dstport=445	Port Scan
🇺🇸 xmission.com	2026-07-16 06:04:37 (1 week ago)	Blocked by UFW (TCP on 9101) Source port: 49826 TTL: 115 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 49826 TTL: 115 Packet length: 52 TOS: 0x08 This report (for 148.101.179.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 hostmach	2026-07-15 19:50:58 (1 week ago)	(sshd) Failed SSH login from 148.101.179.196 (DO/Dominican Republic/196.179.101.148.l.static.claro.n ... show more (sshd) Failed SSH login from 148.101.179.196 (DO/Dominican Republic/196.179.101.148.l.static.claro.net.do): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 15 16:50:49 luna sshd-session[970562]: Invalid user admin from 148.101.179.196 port 63390 Jul 15 16:50:52 luna sshd-session[970601]: Invalid user admin from 148.101.179.196 port 63406 Jul 15 16:50:53 luna sshd-session[970629]: Invalid user user from 148.101.179.196 port 63415 Jul 15 16:50:54 luna sshd-session[970658]: Invalid user user2 from 148.101.179.196 port 63421 Jul 15 16:50:56 luna sshd-session[970733]: Invalid user admin from 148.101.179.196 port 63439 show less	Brute-Force SSH
🇧🇷 hostmach	2026-07-15 19:16:53 (1 week ago)	(sshd) Failed SSH login from 148.101.179.196 (DO/Dominican Republic/196.179.101.148.l.static.claro.n ... show more (sshd) Failed SSH login from 148.101.179.196 (DO/Dominican Republic/196.179.101.148.l.static.claro.net.do): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 15 16:16:43 aurora sshd-session[1208214]: Invalid user admin from 148.101.179.196 port 53288 Jul 15 16:16:46 aurora sshd-session[1208314]: Invalid user admin from 148.101.179.196 port 53298 Jul 15 16:16:47 aurora sshd-session[1208341]: Invalid user user from 148.101.179.196 port 53303 Jul 15 16:16:48 aurora sshd-session[1208366]: Invalid user user2 from 148.101.179.196 port 53307 Jul 15 16:16:51 aurora sshd-session[1208412]: Invalid user admin from 148.101.179.196 port 53315 show less	Brute-Force SSH
🇺🇸 xmission.com	2026-07-08 11:44:59 (2 weeks ago)	Blocked by UFW (TCP on 9101) Source port: 55061 TTL: 115 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 55061 TTL: 115 Packet length: 52 TOS: 0x08 This report (for 148.101.179.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 gbzret4d	2026-07-01 12:29:30 (3 weeks ago)	Blocked by CrowdSec. Scenario: crowdsecurity/ssh-bf	Brute-Force SSH
🇩🇪 pnpde.social	2026-07-01 12:21:54 (3 weeks ago)	2026-07-01T14:21:51.075592+02:00 weberin sshd[2604076]: pam_unix(sshd:auth): authentication failure; ... show more 2026-07-01T14:21:51.075592+02:00 weberin sshd[2604076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.101.179.196 user=root 2026-07-01T14:21:52.303905+02:00 weberin sshd[2604076]: Failed password for root from 148.101.179.196 port 56402 ssh2 2026-07-01T14:21:52.519898+02:00 weberin sshd[2604078]: Invalid user admin from 148.101.179.196 port 56539 2026-07-01T14:21:52.524378+02:00 weberin sshd[2604078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.101.179.196 2026-07-01T14:21:53.888254+02:00 weberin sshd[2604078]: Failed password for invalid user admin from 148.101.179.196 port 56539 ssh2 ... show less	Brute-Force SSH
🇬🇧 PeravixGroup	2026-06-30 00:01:40 (3 weeks ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇭🇰 mutebot.net	2026-06-25 15:36:23 (4 weeks ago)	SRC=148.101.179.196, PROTO=TCP, SPT=65276, DPT=445	Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a00:19e0:3005:2ff:9c0b:543f:d75:574f

🇭🇰 199.45.155.109

🇷🇺 154.83.196.237

🇺🇸 92.119.36.68

🇧🇬 81.177.213.138

🇩🇪 69.5.169.182

🇳🇱 5.253.59.68

🇩🇪 2a00:19e0:3005:2ff:85de:c54e:1ade:c0e5

🇩🇪 2a00:19e0:3005:2ff:6298:6ed9:cdf6:7c4d

🇩🇪 2a00:19e0:3005:2ff:939:fdc7:7f56:e45

🇺🇸 2620:171:e1:f0::3

🇺🇸 205.210.31.48

🇳🇱 195.178.110.100

🇳🇱 193.176.31.147

🇭🇳 181.115.7.203

🇷🇺 178.141.33.14

🇺🇸 172.202.118.47

🇺🇸 172.202.113.251

🇺🇸 172.202.113.68

🇩🇪 172.104.146.166