AbuseIPDB » 199.101.192.93

199.101.192.93 was found in our database!

This IP was reported 69 times. Confidence of Abuse is 44%: ?

44%

ISP	AFNCA Inc.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	afnca.com
Country	United States of America
City	Los Angeles, California

Report 199.101.192.93

Whois 199.101.192.93

IP Abuse Reports for 199.101.192.93:

This IP address has been reported a total of 69 times from 43 distinct sources. 199.101.192.93 was first reported on September 21st 2021, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-11-13 17:20:44 (3 weeks ago)	BruteForce IMAP/POP3	Brute-Force
KingHost	2024-11-13 17:10:05 (3 weeks ago)		Brute-Force
Anonymous	2024-11-13 16:10:53 (3 weeks ago)	Cluster member 10.170.91.37 (-) said, TEMPDENY 199.101.192.93, Reason:[(zimbra-mta) Failed login fro ... show moreCluster member 10.170.91.37 (-) said, TEMPDENY 199.101.192.93, Reason:[(zimbra-mta) Failed login from 199.101.192.93 (US/United States/-): 30 in the last 3600 secs]; IP: 199.101.192.93; Ports: *; Direction: 0; Trigger: LF_CLUSTER; Logs: show less	Email Spam Brute-Force
lavnet.net	2024-11-13 10:48:52 (3 weeks ago)	Nov 13 10:48:48 angela postfix/submission/smtpd[3346849]: lost connection after EHLO from unknown[19 ... show moreNov 13 10:48:48 angela postfix/submission/smtpd[3346849]: lost connection after EHLO from unknown[199.101.192.93] Nov 13 10:48:48 angela postfix/submission/smtpd[3346849]: disconnect from unknown[199.101.192.93] ehlo=1 auth=0/1 commands=1/2 Nov 13 10:48:51 angela postfix/submission/smtpd[3346849]: lost connection after EHLO from unknown[199.101.192.93] ... show less	Brute-Force Web App Attack
samba.org	2024-11-13 10:22:40 (3 weeks ago)	spam (f2b h2)	Brute-Force
Julio Covolato	2024-11-13 09:55:01 (3 weeks ago)	Imap or Submission login brute-force attacks.	Brute-Force
bigscoots.com	2024-11-13 07:38:39 (3 weeks ago)	(smtpauth) Failed SMTP AUTH login from 199.101.192.93 (US/United States/-): 5 in the last 3600 secs; ... show more(smtpauth) Failed SMTP AUTH login from 199.101.192.93 (US/United States/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2024-11-13 02:37:50 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:41256: 535 Incorrect authentication data (set_id=blair) 2024-11-13 02:37:56 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:54524: 535 Incorrect authentication data (set_id=blair) 2024-11-13 02:38:06 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:49707: 535 Incorrect authentication data (set_id=blair) 2024-11-13 02:38:23 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:27395: 535 Incorrect authentication data 2024-11-13 02:38:34 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:39858: 535 Incorrect authentication data show less	Brute-Force SSH
Smel	2024-11-13 04:34:05 (3 weeks ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
bigscoots.com	2024-11-10 04:29:07 (3 weeks ago)	(smtpauth) Failed SMTP AUTH login from 199.101.192.93 (US/United States/-): 5 in the last 3600 secs; ... show more(smtpauth) Failed SMTP AUTH login from 199.101.192.93 (US/United States/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2024-11-09 23:27:32 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:28563: 535 Incorrect authentication data (set_id=andrew) 2024-11-09 23:27:58 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:24231: 535 Incorrect authentication data (set_id=andrew) 2024-11-09 23:28:14 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:12959: 535 Incorrect authentication data (set_id=andrew) 2024-11-09 23:28:45 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:65461: 535 Incorrect authentication data (set_id=andrew) 2024-11-09 23:29:02 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:20539: 535 Incorrect authentication data (set_id=andrew) show less	Brute-Force SSH
samba.org	2024-11-09 20:56:01 (3 weeks ago)	spam (f2b h2)	Brute-Force
bigscoots.com	2024-11-09 20:45:01 (3 weeks ago)	(smtpauth) Failed SMTP AUTH login from 199.101.192.93 (US/United States/-): 5 in the last 3600 secs; ... show more(smtpauth) Failed SMTP AUTH login from 199.101.192.93 (US/United States/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2024-11-09 15:44:18 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:4472: 535 Incorrect authentication data (set_id=susie) 2024-11-09 15:44:18 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:29930: 535 Incorrect authentication data (set_id=anna) 2024-11-09 15:44:29 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:24257: 535 Incorrect authentication data (set_id=anna) 2024-11-09 15:44:42 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:60125: 535 Incorrect authentication data (set_id=susie) 2024-11-09 15:44:57 dovecot_login authenticator failed for (ylmf-pc) [199.101.192.93]:23139: 535 Incorrect authentication data show less	Brute-Force SSH
nowyouknow	2024-11-05 19:05:45 (4 weeks ago)	(From [email protected]) Searching for a cost-effective way to get your ad seen by millions? For ... show more(From [email protected]) Searching for a cost-effective way to get your ad seen by millions? For Details: http://9cdyha.formblastmarketing.top show less	Phishing Web Spam
nyuuzyou	2024-11-05 05:41:44 (4 weeks ago)	Intensive scraping: /web?s=%E2%80%9Clocal%20culinary%20schools%E2%80%9D%20St.%20Francis&country=fj-f ... show moreIntensive scraping: /web?s=%E2%80%9Clocal%20culinary%20schools%E2%80%9D%20St.%20Francis&country=fj-fj&scraper=wiby. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68. show less	Bad Web Bot
ereznet.co.il	2024-10-24 16:30:18 (1 month ago)	SPAM	Brute-Force
TPI-Abuse	2024-10-24 15:33:11 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 199.101.192.93 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:225170) triggered by 199.101.192.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 24 11:33:03.969480 2024] [security2:error] [pid 845:tid 845] [client 199.101.192.93:14933] [client 199.101.192.93] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|villadushimambo.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "villadushimambo.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zxpor9lk3d0jwTtBppxJDwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack