JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 1.249.45.56

1.249.45.56 was found in our database!

This IP was reported 245 times. Confidence of Abuse is 0%: ?

ISP	SK Broadband Co Ltd
Usage Type	Fixed Line ISP
ASN	AS9318
Domain Name	skbroadband.com
Country	🇰🇷 Korea (the Republic of)
City	Gwangju, Gwangju

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 1.249.45.56

Whois 1.249.45.56

IP Abuse Reports for 1.249.45.56:

This IP address has been reported a total of 245 times from 105 distinct sources. 1.249.45.56 was first reported on January 25th 2023, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 octageeks.com	2023-02-04 05:08:07 (3 years ago)	Wordpress malicious attack:[sshd]	Web App Attack
🇺🇸 octageeks.com	2023-02-03 05:07:59 (3 years ago)	Wordpress malicious attack:[sshd]	Web App Attack
🇳🇱 23p02732	2023-02-02 00:30:44 (3 years ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇺🇸 octageeks.com	2023-02-01 05:07:52 (3 years ago)	Wordpress malicious attack:[sshd]	Web App Attack
🇺🇸 bigscoots.com	2023-01-31 07:01:31 (3 years ago)	1.249.45.56 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 1.249.45.56 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 31 00:58:53 14213 sshd[1076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.48.104 user=root Jan 31 00:58:56 14213 sshd[1076]: Failed password for root from 163.172.48.104 port 46978 ssh2 Jan 31 00:56:19 14213 sshd[964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.249.45.56 user=root Jan 31 00:56:21 14213 sshd[964]: Failed password for root from 1.249.45.56 port 36658 ssh2 Jan 31 01:01:10 14213 sshd[1316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.249.45.56 user=root IP Addresses Blocked: 163.172.48.104 (FR/France/box.eagletimesdaily.com) show less	Brute-Force SSH
Anonymous	2023-01-31 06:10:37 (3 years ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 StylenHost	2023-01-31 06:06:47 (3 years ago)	Jan 31 07:05:01 vpn sshd[1689801]: Failed password for root from 1.249.45.56 port 58610 ssh2 Jan 31 ... show more Jan 31 07:05:01 vpn sshd[1689801]: Failed password for root from 1.249.45.56 port 58610 ssh2 Jan 31 07:06:44 vpn sshd[1689868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.249.45.56 user=root Jan 31 07:06:46 vpn sshd[1689868]: Failed password for root from 1.249.45.56 port 41960 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-01-31 06:03:51 (3 years ago)	1.249.45.56 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 1.249.45.56 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 31 00:00:18 14431 sshd[1650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.104.70.88 user=root Jan 31 00:00:20 14431 sshd[1650]: Failed password for root from 172.104.70.88 port 54264 ssh2 Jan 31 00:01:10 14431 sshd[1740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.249.45.56 user=root Jan 31 00:01:12 14431 sshd[1740]: Failed password for root from 1.249.45.56 port 44890 ssh2 Jan 31 00:03:35 14431 sshd[1898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.224.30 user=root IP Addresses Blocked: 172.104.70.88 (JP/Japan/172-104-70-88.ip.linodeusercontent.com) show less	Brute-Force SSH
🇺🇸 octageeks.com	2023-01-31 05:07:32 (3 years ago)	Wordpress malicious attack:[sshd]	Web App Attack
🇿🇦 IrisFlower	2023-01-31 04:51:32 (3 years ago)	Unauthorized connection attempt detected from IP address 1.249.45.56 to port 2323 [J]	Port Scan Hacking
🇺🇸 bigscoots.com	2023-01-31 03:41:50 (3 years ago)	1.249.45.56 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 1.249.45.56 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 31 03:41:04 24015 sshd[13563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.162.212.243 user=root Jan 31 03:41:42 24015 sshd[13573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.54.51 user=root Jan 31 03:41:06 24015 sshd[13563]: Failed password for root from 125.162.212.243 port 45473 ssh2 Jan 31 03:38:55 24015 sshd[13309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.249.45.56 user=root Jan 31 03:38:57 24015 sshd[13309]: Failed password for root from 1.249.45.56 port 37676 ssh2 IP Addresses Blocked: 125.162.212.243 (ID/Indonesia/-) 167.71.54.51 (DE/Germany/-) show less	Brute-Force SSH
Anonymous	2023-01-31 02:35:54 (3 years ago)	Jan 31 02:30:05 conf sshd[2507121]: Disconnected from authenticating user root 1.249.45.56 port 5408 ... show more Jan 31 02:30:05 conf sshd[2507121]: Disconnected from authenticating user root 1.249.45.56 port 54088 [preauth] Jan 31 02:34:12 conf sshd[2508349]: Disconnected from authenticating user root 1.249.45.56 port 58550 [preauth] Jan 31 02:35:53 conf sshd[2508853]: Disconnected from authenticating user root 1.249.45.56 port 53782 [preauth] ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-01-31 02:34:35 (3 years ago)	1.249.45.56 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 1.249.45.56 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 30 20:34:25 15346 sshd[16557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.249.45.56 user=root Jan 30 20:30:47 15346 sshd[16183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.249.45.56 user=root Jan 30 20:30:49 15346 sshd[16183]: Failed password for root from 1.249.45.56 port 55676 ssh2 Jan 30 20:29:58 15346 sshd[16074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.229.153.145 user=root Jan 30 20:30:00 15346 sshd[16074]: Failed password for root from 45.229.153.145 port 50047 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2023-01-31 01:19:37 (3 years ago)	1.249.45.56 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 1.249.45.56 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 30 19:19:18 17103 sshd[14874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.56.101.245 user=root Jan 30 19:17:57 17103 sshd[14783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.249.45.56 user=root Jan 30 19:17:59 17103 sshd[14783]: Failed password for root from 1.249.45.56 port 52574 ssh2 Jan 30 19:15:58 17103 sshd[14683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.69.178.249 user=root Jan 30 19:16:00 17103 sshd[14683]: Failed password for root from 128.69.178.249 port 54128 ssh2 IP Addresses Blocked: 146.56.101.245 (KR/South Korea/-) show less	Brute-Force SSH
🇳🇱 23p02732	2023-01-31 00:30:45 (3 years ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 245 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 106.202.70.100

🇺🇸 2604:a880:400:d1:0:4:9e94:6001

🇩🇪 217.91.38.191

🇨🇭 209.99.189.138

🇧🇷 187.181.164.48

🇮🇳 74.224.96.228

🇮🇳 59.179.31.237

🇺🇸 52.186.182.35

🇫🇷 51.178.31.138

🇨🇳 36.189.207.209

🇪🇪 31.134.7.191

🇺🇸 20.169.106.209

🇷🇺 5.3.146.57

🇺🇸 4.155.56.84

🇦🇺 211.27.6.90

🇰🇿 109.201.58.124

🇧🇬 79.124.56.146

🇺🇸 74.249.192.21

🇺🇦 37.221.153.204

🇬🇧 35.203.210.134