AbuseIPDB » 190.28.107.214

190.28.107.214 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 22%: ?

22%

ISP	EPM Telecomunicaciones S.A. E.S.P.
Usage Type	Fixed Line ISP
Hostname(s)	adsl190-28-107-214.epm.net.co
Domain Name	epm.net.co
Country	Colombia
City	Medellin, Antioquia

Report 190.28.107.214

Whois 190.28.107.214

IP Abuse Reports for 190.28.107.214:

This IP address has been reported a total of 5 times from 5 distinct sources. 190.28.107.214 was first reported on November 11th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
urnilxfgbez	2024-11-11 23:45:00 (4 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
piticu iuli	2024-11-11 22:59:11 (4 weeks ago)	(sshd) Failed SSH login from 190.28.107.214 (CO/Colombia/adsl190-28-107-214.epm.net.co)	Brute-Force SSH
Maciej Kk	2024-11-11 22:31:27 (4 weeks ago)	Nov 11 22:31:22 Ubuntu-2204-jammy-amd64-base sshd[3810663]: Failed password for root from 190.28.107 ... show moreNov 11 22:31:22 Ubuntu-2204-jammy-amd64-base sshd[3810663]: Failed password for root from 190.28.107.214 port 47550 ssh2 Nov 11 22:31:25 Ubuntu-2204-jammy-amd64-base sshd[3810671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.28.107.214 user=root Nov 11 22:31:27 Ubuntu-2204-jammy-amd64-base sshd[3810671]: Failed password for root from 190.28.107.214 port 47562 ssh2 ... show less	Brute-Force SSH
lp	2024-11-11 20:51:36 (4 weeks ago)	SSH Brute force: 218 attempts were recorded from 190.28.107.214 2024-11-11T21:37:46+01:00 Conn ... show moreSSH Brute force: 218 attempts were recorded from 190.28.107.214 2024-11-11T21:37:46+01:00 Connection closed by authenticating user root 190.28.107.214 port 48572 [preauth] 2024-11-11T21:37:50+01:00 Connection closed by authenticating user root 190.28.107.214 port 48580 [preauth] 2024-11-11T21:37:58+01:00 Connection closed by authenticating user root 190.28.107.214 port 41596 [preauth] 2024-11-11T21:38:01+01:00 Connection closed by authenticating user root 190.28.107.214 port 53222 [preauth] 2024-11-11T21:38:03+01:00 Connection closed by authenticating user root 190.28.107.214 port 53238 [preauth] 2024-11-11T21:38:06+01:00 Connection closed by authenticating user root 190.28.107.214 port 53250 [preauth] 2024-11-11T21:38:10+01:00 Connection closed by authenticating user root 190.28.107.214 port 53254 [preauth] 2024-11-11T21:38:12+01:00 Connection closed by authenticating user root 190.28.1 show less	Brute-Force SSH
LoNET	2024-11-11 20:38:05 (4 weeks ago)	Report 1441976 with IP 2489526 for SSH brute-force attack by source 2484201 via ssh-honeypot/0.2.0+h ... show moreReport 1441976 with IP 2489526 for SSH brute-force attack by source 2484201 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH