JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.102.248.15

191.102.248.15 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 82%: ?

82%

ISP	IP·RED
Usage Type	Fixed Line ISP
ASN	AS262934
Hostname(s)	host15-248-102-191.ipred.com.ar
Domain Name	ipred.com.ar
Country	🇦🇷 Argentina
City	Rosario, Santa Fe

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.102.248.15

Whois 191.102.248.15

IP Abuse Reports for 191.102.248.15:

This IP address has been reported a total of 40 times from 27 distinct sources. 191.102.248.15 was first reported on August 20th 2025, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 trakyabirlik	2026-09-02 05:16:49 (20 hours ago)	Seczar SecureOps — SSH Brute Force (6 events) — quarantined 43200m on Trakya_Genel_Mudurluk	SSH Brute-Force
🇧🇷 noconex	2026-08-29 00:26:02 (5 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 191.102.24 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 191.102.248.15 show less	Port Scan Brute-Force SSH
🇺🇸 gui-ying233	2026-08-28 16:08:52 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 ipblock.com	2026-08-27 18:37:00 (6 days ago)	IPBlock protected site ID [4055-d][s=02]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
Anonymous	2026-08-27 15:33:16 (6 days ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
Anonymous	2026-08-27 14:19:48 (6 days ago)	2026-08-27T16:19:47.114886+02:00 vps kernel: [4211208.461717] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-08-27T16:19:47.114886+02:00 vps kernel: [4211208.461717] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=191.102.248.15 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=35030 DF PROTO=TCP SPT=47346 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇵🇱 bart@	2026-08-26 06:08:40 (1 week ago)	Automated scan detection against redacted protected targets. Hits=1; port 22 proto 6 detection dark_ ... show more Automated scan detection against redacted protected targets. Hits=1; port 22 proto 6 detection dark_ip show less	Port Scan
🇹🇭 Sawasdee	2026-08-26 01:27:16 (1 week ago)	SSH break in attempt ...	SSH
🇺🇸 gui-ying233	2026-08-25 13:24:32 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 01:03:10 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-25 00:19:44 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 london2038.com	2026-08-23 02:19:29 (1 week ago)	Connection atttempts against closed TCP ports Aug 23 04:19:27 BLOCK SRC=191.102.248.15 LEN=60 TOS=0x ... show more Connection atttempts against closed TCP ports Aug 23 04:19:27 BLOCK SRC=191.102.248.15 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=59916 DF PROTO=TCP SPT=31890 DPT=23 WINDOW=65535 RES=0x00 SYN Aug 23 04:19:27 BLOCK SRC=191.102.248.15 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=57092 DF PROTO=TCP SPT=31891 DPT=22 WINDOW=65535 RES=0x00 SYN Aug 23 04:19:27 BLOCK SRC=191.102.248.15 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=59917 DF PROTO=TCP SPT=31890 DPT=23 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇫🇷 security.rdmc.fr	2026-08-21 04:12:46 (1 week ago)	Port Scan Attack proto:TCP src:24899 dst:23	Port Scan
🇫🇷 Zkillu	2026-08-19 21:55:13 (2 weeks ago)	UDP flood (DDoS) vs AS215599: 272 pkts / 0.39 MB to UDP 8443 across 95 dst IP(s), 2026-08-19 21:46 t ... show more UDP flood (DDoS) vs AS215599: 272 pkts / 0.39 MB to UDP 8443 across 95 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:55:13 (2 weeks ago)	UDP flood (DDoS) vs AS215599: 272 pkts / 0.39 MB to UDP 8443 across 95 dst IP(s), 2026-08-19 21:46 t ... show more UDP flood (DDoS) vs AS215599: 272 pkts / 0.39 MB to UDP 8443 across 95 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 212.73.46.196

🇧🇷 205.210.31.162

🇺🇸 193.202.12.18

🇨🇴 170.239.207.36

🇭🇰 152.32.239.206

🇭🇰 152.32.239.122

🇹🇼 152.32.232.185

🇭🇰 152.32.226.88

🇱🇹 141.98.10.216

🇮🇩 118.99.110.141

🇨🇳 117.80.186.239

🇨🇳 117.80.146.195

🇺🇸 109.105.210.62

🇨🇳 101.70.109.52

🇩🇪 69.5.169.179

🇺🇸 65.111.4.206

🇩🇪 57.129.120.143

🇩🇪 45.3.42.2

🇬🇧 35.203.210.159

🇬🇧 35.203.210.78