Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 189.28.68.106:
This IP address has been reported a total of
14
times from
13 distinct
sources.
189.28.68.106 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
United States of America
with 3
reports;
France
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
5
times;
Port Scan
3
times;
Email Spam
2
times;
Bad Web Bot
2
times;
DDoS Attack
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
189.28.68.106 (BO/Bolivia/LPZ-189-28-68-00106.tigo.bo), N distributed smtpauth attacks on account in ...
show more189.28.68.106 (BO/Bolivia/LPZ-189-28-68-00106.tigo.bo), N distributed smtpauth attacks on account in the last X secs
show less
(postfix-unknown) Failed postfix unknown login with username [redacted] from 189.28.68.106 (BO/Boliv ...
show more(postfix-unknown) Failed postfix unknown login with username [redacted] from 189.28.68.106 (BO/Bolivia/LPZ-189-28-68-00106.tigo.bo)
show less
189.28.68.106 (BO/Bolivia/Santa Cruz Department/Santa Cruz de la Sierra/-/[AS27882 Telefonica Celula ...
show more189.28.68.106 (BO/Bolivia/Santa Cruz Department/Santa Cruz de la Sierra/-/[AS27882 Telefonica Celular de Bolivia S.A.]), 2 distributed smtpauth attacks on account [[email protected]] in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: 2026-09-02 21:48:38 dovecot_plain authenticator failed for H=(localhost) [189.28.68.106]:47834: 535 Incorrect authentication data ([email protected])
2026-09-02 23:19:15 dovecot_plain authenticator failed for H=(localhost) [103.181.24.130]:7330: 535 Incorrect authentication data ([email protected])
IP Addresses Blocked:
show less
(smtpauth) Failed SMTP AUTH login from 189.28.68.106 (BO/Bolivia/Santa Cruz Department/Santa Cruz de ...
show more(smtpauth) Failed SMTP AUTH login from 189.28.68.106 (BO/Bolivia/Santa Cruz Department/Santa Cruz de la Sierra/-/[AS27882 Telefonica Celular de Bolivia S.A.]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-02 21:48:38 dovecot_plain authenticator failed for H=(localhost) [189.28.68.106]:47834: 535 Incorrect authentication data ([email protected])
show less
Port Scan
Anonymous
2026-09-03T04:47:34.296895+10:00 [X].[X].[X] postfix/smtpd[193939]: warning: unknown[189.28.68.106]: ...
show more2026-09-03T04:47:34.296895+10:00 [X].[X].[X] postfix/smtpd[193939]: warning: unknown[189.28.68.106]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=roku@[X].[X]
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
show less
L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ...
show moreL7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /4-velos-electriques | query: order=product.sales.desc&productListView=list&q=Famille-Kemen+ADV-Sub+Tour
show less
