JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.102.117.218

191.102.117.218 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 100%: ?

100%

ISP	TV AZTECA SUCURSAL COLOMBIA
Usage Type	Fixed Line ISP
ASN	AS262186
Hostname(s)	azteca-comunicaciones.com
Domain Name	aztecacomunicaciones.com
Country	🇨🇴 Colombia
City	Utica, Cundinamarca

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.102.117.218

Whois 191.102.117.218

IP Abuse Reports for 191.102.117.218:

This IP address has been reported a total of 65 times from 37 distinct sources. 191.102.117.218 was first reported on December 28th 2024, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 d$JZ	2026-09-23 09:16:02 (5 hours ago)	SSH scan	SSH
Anonymous	2026-09-22 21:24:24 (17 hours ago)	2026-09-22T23:24:23.728046+02:00 vps kernel: [6483058.938329] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-09-22T23:24:23.728046+02:00 vps kernel: [6483058.938329] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=191.102.117.218 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=230 ID=34550 DF PROTO=TCP SPT=40218 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇳🇱 Tsumugi Kotobuki	2026-09-22 18:23:40 (20 hours ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 238 \| Len: 60B \| Wi ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 238 \| Len: 60B \| Win: 65535(1) \| rDNS: azteca-comunicaciones.com \| F2B/ufw-honeypot@2026-09-22T18:23:40Z show less	Port Scan Hacking
🇫🇷 SimonB	2026-09-22 11:19:42 (1 day ago)	SSH bruteforce attempt	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-09-22 03:46:07 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 191.102.117.218 (azteca-comunicaciones.com): 1 ... show more (mod_security) mod_security (id:210350) triggered by 191.102.117.218 (azteca-comunicaciones.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 23:46:00.400278 2026] [security2:error] [pid 17719:tid 17719] [client 191.102.117.218:42660] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mplsmedia.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mplsmedia.com"] [uri "/"] [unique_id "arH5-FEzC4CDSkHHfQ33wAAAAAM"], referer: https://xesogniwes.blogspot.com/2023/06/ds.html show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-20 23:58:44 (2 days ago)	MikroTik Enterprise Honeypot	Port Scan
🇩🇪 XYCoderXY	2026-09-20 20:55:05 (2 days ago)	SSH/web brute-force & exploit scanning against lumerux.com (automated report).	Brute-Force SSH
🇹🇼 kk_it_man	2026-09-20 06:13:02 (3 days ago)	ET SCAN Potential SSH Scan	Port Scan
🇺🇸 gui-ying233	2026-09-19 13:07:29 (4 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇰🇷 winter	2026-09-17 01:33:49 (6 days ago)	Connection attemp from 191.102.117.218 to port 22	Brute-Force SSH
🇩🇪 Vegascosmetics	2026-09-17 00:35:32 (6 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 75>=65, Abuse 80, NonEU, first-seen, Change* path) show less	Hacking Exploited Host Web App Attack
🇧🇷 noconex	2026-09-15 04:43:03 (1 week ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 191.102.11 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 191.102.117.218 show less	Port Scan Brute-Force SSH
🇫🇷 lechat	2026-09-14 10:14:23 (1 week ago)	2026-09-14T10:14:23.167508+0000 inbound port scan detected by Suricata. src=191.102.117.218:37728 ds ... show more 2026-09-14T10:14:23.167508+0000 inbound port scan detected by Suricata. src=191.102.117.218:37728 dst=51.68.231.122:22 proto=TCP. signature="ET SCAN Potential SSH Scan" category="Attempted Information Leak" sid=2001219 reason=scan_signature. show less	Port Scan
🇳🇱 EGP Abuse Dept	2026-09-14 09:22:19 (1 week ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇵🇱 mkey	2026-09-14 02:40:01 (1 week ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=22 \| HITS=2 \| IPSET=ADD \| FIRST=2026-09-14 04:37:14 \| LAST=2026-09-14 04:37:15. Last seen 2026-09-14 04:37:15. show less	Port Scan

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 188.213.202.43

🇺🇸 188.213.202.2

🇺🇸 172.70.127.109

🇺🇸 172.70.126.85

🇬🇧 172.69.195.53

🇺🇸 162.159.119.39

🇳🇱 159.223.210.26

🇨🇳 117.50.70.169

🇺🇸 104.168.136.242

🇬🇧 74.118.126.70

🇺🇸 65.49.1.32

🇳🇱 195.178.110.218

🇺🇸 188.213.202.28

🇺🇸 174.68.47.148

🇺🇸 172.110.223.84

🇬🇧 172.71.241.22

🇬🇧 172.68.186.77

🇻🇳 171.244.185.149

🇳🇱 109.160.32.74

🇺🇸 104.22.62.132