AbuseIPDB » 191.102.98.192

Check an IP Address, Domain Name, or Subnet

e.g. 3.232.96.22, microsoft.com, or 5.188.10.0/24

191.102.98.192 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 15%: ?

15%

ISP	Integra Multisolutions S.A.S.
Usage Type	Fixed Line ISP
Hostname(s)	azteca-comunicaciones.com
Domain Name	ims.net.co
Country	Colombia
City	Bogota, Distrito Capital de Bogota

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 191.102.98.192

Whois 191.102.98.192

IP Abuse Reports for 191.102.98.192:

This IP address has been reported a total of 15 times from 12 distinct sources. 191.102.98.192 was first reported on August 28th 2020, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
Anonymous	29 Nov 2020	2020-09-23T05:06:23.292718-07:00 suse-nuc sshd[24813]: Invalid user admin from 191.102.98.192 port 3 ... show more2020-09-23T05:06:23.292718-07:00 suse-nuc sshd[24813]: Invalid user admin from 191.102.98.192 port 34047 ... show less	Brute-Force SSH
computerdoc	28 Nov 2020	failed_logins	Brute-Force
MageHost.pro	27 Nov 2020	20 attempts against mh_ha-misbehave-ban on sonic	Brute-Force Bad Web Bot Web App Attack
smtp.com.es	06 Nov 2020	Brute force attempt	Brute-Force Exploited Host
mueller-nils.com	02 Nov 2020	Nov 3 04:45:53 [host] sshd[2753]: Invalid user ad Nov 3 04:45:53 [host] sshd[2753]: pam_unix ... show moreNov 3 04:45:53 [host] sshd[2753]: Invalid user ad Nov 3 04:45:53 [host] sshd[2753]: pam_unix(sshd:a Nov 3 04:45:55 [host] sshd[2753]: Failed password show less	Brute-Force SSH
nowyouknow	28 Oct 2020	(From [email protected]) w: LPC Strategic Committee LeakInboxLPC leaker <‪[email protected] ... show more(From [email protected]) w: LPC Strategic Committee LeakInboxLPC leaker <‪[email protected]‬>1:47 PM (7 hours ago)toHello, Original Message ‐‐‐‐‐‐‐ On Saturday, October 10, 2020 1:38 PM, REMOVED <REMOVED> wrote: Dear *******, I want to provide you some very important information. I'm a committee member within the Liberal Party of Canada. I sit within several committee groups but the information I am providing is originating from the Strategic Planning committee (which is steered by the PMO). I need to start off by saying that I'm not happy doing this but I have to. As a Canadian and more importantly as a parent who wants a better future not only for my children but for other children as well. The other reason I am doing this is because roughly 30% of the committee members are not pleased with the direction this will take Canada, but our opinions have been ignored and they plan on moving forward toward their goals. They have also made it very clear that nothing will stop the planned outc show less	Phishing Web Spam
smtp.com.es	24 Oct 2020	Brute force attempt	Brute-Force Exploited Host
www.blocklist.de	18 Oct 2020	Lines containing failures of 191.102.98.192 Oct 18 11:53:37 shared09 sshd[2046]: Invalid user ... show moreLines containing failures of 191.102.98.192 Oct 18 11:53:37 shared09 sshd[2046]: Invalid user admin from 191.102.98.192 port 60949 Oct 18 11:53:39 shared09 sshd[2046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.102.98.192 Oct 18 11:53:41 shared09 sshd[2046]: Failed password for invalid user admin from 191.102.98.192 port 60949 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=191.102.98.192 show less	FTP Brute-Force Hacking
Sander0542	18 Oct 2020	Oct 18 08:32:24 h2865660 sshd[29287]: Invalid user admin from 191.102.98.192 port 39063 Oct 18 ... show moreOct 18 08:32:24 h2865660 sshd[29287]: Invalid user admin from 191.102.98.192 port 39063 Oct 18 08:32:27 h2865660 sshd[29287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.102.98.192 Oct 18 08:32:24 h2865660 sshd[29287]: Invalid user admin from 191.102.98.192 port 39063 Oct 18 08:32:29 h2865660 sshd[29287]: Failed password for invalid user admin from 191.102.98.192 port 39063 ssh2 Oct 18 08:32:43 h2865660 sshd[29298]: Invalid user admin from 191.102.98.192 port 39199 ... show less	Brute-Force SSH
SvrAdmin	15 Oct 2020	(smtpauth) Failed SMTP AUTH login from 191.102.98.192 (CO/Colombia/azteca-comunicaciones.com): 5 in ... show more(smtpauth) Failed SMTP AUTH login from 191.102.98.192 (CO/Colombia/azteca-comunicaciones.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-10-15 11:22:48 dovecot_plain authenticator failed for (WIN-ENH0S3ICHK7) [191.102.98.192]:56269: 535 Incorrect authentication data ([email protected]) 2020-10-15 11:23:01 dovecot_login authenticator failed for (WIN-ENH0S3ICHK7) [191.102.98.192]:56269: 535 Incorrect authentication data ([email protected]) 2020-10-15 11:23:22 dovecot_plain authenticator failed for (WIN-ENH0S3ICHK7) [191.102.98.192]:34787: 535 Incorrect authentication data ([email protected]) 2020-10-15 11:23:37 dovecot_login authenticator failed for (WIN-ENH0S3ICHK7) [191.102.98.192]:34787: 535 Incorrect authentication data ([email protected]) 2020-10-15 11:24:41 dovecot_plain authenticator failed for (WIN-ENH0S3ICHK7) [191.102.98.192]:50290: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
Smel	13 Oct 2020	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
sdos.es	08 Oct 2020	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:<?xml version ... show more"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:<?xml version: <?xml version" show less	Web App Attack
SvrAdmin	28 Sep 2020	(smtpauth) Failed SMTP AUTH login from 191.102.98.192 (CO/Colombia/azteca-comunicaciones.com): 5 in ... show more(smtpauth) Failed SMTP AUTH login from 191.102.98.192 (CO/Colombia/azteca-comunicaciones.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-09-28 09:43:06 dovecot_plain authenticator failed for (VPSVPS-4EG83L14) [191.102.98.192]:45138: 535 Incorrect authentication data ([email protected]) 2020-09-28 09:43:15 dovecot_login authenticator failed for (VPSVPS-4EG83L14) [191.102.98.192]:45138: 535 Incorrect authentication data ([email protected]) 2020-09-28 09:43:23 dovecot_plain authenticator failed for (VPSVPS-4EG83L14) [191.102.98.192]:41867: 535 Incorrect authentication data ([email protected]) 2020-09-28 09:43:35 dovecot_login authenticator failed for (VPSVPS-4EG83L14) [191.102.98.192]:41867: 535 Incorrect authentication data ([email protected]) 2020-09-28 09:44:03 dovecot_plain authenticator failed for (VPSVPS-4EG83L14) [191.102.98.192]:54845: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
Anonymous	23 Sep 2020	2020-09-23T05:06:23.292718-07:00 suse-nuc sshd[24813]: Invalid user admin from 191.102.98.192 port 3 ... show more2020-09-23T05:06:23.292718-07:00 suse-nuc sshd[24813]: Invalid user admin from 191.102.98.192 port 34047 ... show less	Brute-Force SSH
LC-SOC	28 Aug 2020	Email rejected due to spam filtering	Email Spam