AbuseIPDB » 106.243.245.202

106.243.245.202 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 9%: ?

ISP	LG Dacom Corporation
Usage Type	Unknown
Domain Name	uplus.co.kr
Country	Korea (Republic of)
City	Seoul, Seoul-teukbyeolsi

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 106.243.245.202

Whois 106.243.245.202

IP Abuse Reports for 106.243.245.202:

This IP address has been reported a total of 56 times from 47 distinct sources. 106.243.245.202 was first reported on June 12th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-09-01 05:56:38 (2 weeks ago)	1: Unauthorized connection attempt detected	Hacking Brute-Force Bad Web Bot Web App Attack
webbie	2024-07-27 17:17:46 (1 month ago)	106.243.245.202 - - [27/Jul/2024:19:17:42 +0200] "GET /phpmyadmin_/index.php?lang=en HTTP/1.1" 404 3 ... show more106.243.245.202 - - [27/Jul/2024:19:17:42 +0200] "GET /phpmyadmin_/index.php?lang=en HTTP/1.1" 404 341 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 106.243.245.202 - - [27/Jul/2024:19:17:43 +0200] "GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1" 404 341 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 106.243.245.202 - - [27/Jul/2024:19:17:44 +0200] "GET /phpmyadmin2019/index.php?lang=en HTTP/1.1" 404 341 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 106.243.245.202 - - [27/Jul/2024:19:17:44 +0200] "GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1" 404 341 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 106.243.245.202 - - [27/Jul/2024:19:17:45 +0200] "GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1" 404 341 "Mozilla/5.0 (W ... show less	Brute-Force Web App Attack
kamsalisbury	2024-07-03 04:24:41 (2 months ago)	Portscan 3306	Port Scan
Anonymous	2024-06-26 03:00:16 (2 months ago)	Excessive HTTP/HTTPS connections.	Bad Web Bot
Anonymous	2024-06-22 10:13:58 (2 months ago)	126 unauthorised HTTP requests. Full list: https://rentry.co/intrusion-watch-report-297263<b ... show more126 unauthorised HTTP requests. Full list: https://rentry.co/intrusion-watch-report-297263 Sample record: HTTP Req: GET /phpMyAdmin-5.2.0-all-languages/index.php?lang=en HTTP/1.1 Time: Sat, 22 Jun 2024 12:13:58 +0200 Unauthorised web server access and/or looking for web app vulnerabilities. Port 80 User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 IP suspected 126 time(s) so far. show less	Hacking Hacking Bad Web Bot Bad Web Bot Web App Attack Web App Attack
Anonymous	2024-06-22 02:31:10 (2 months ago)	Automatic report - Vulnerability scan /sql/phpmyadmin4/index.php?lang=en	Web App Attack Web App Attack
Admins@Storch	2024-03-28 08:21:55 (5 months ago)	IPS:drop <attempted break-in> dstport=8080	Brute-Force Exploited Host
Anonymous	2024-03-21 11:13:26 (5 months ago)	Thu Mar 21 08:13:14 2024 [pid 179643] [trash] FAIL LOGIN: Client "::ffff:106.243.245.202" Thu ... show moreThu Mar 21 08:13:14 2024 [pid 179643] [trash] FAIL LOGIN: Client "::ffff:106.243.245.202" Thu Mar 21 08:13:18 2024 [pid 179645] [webserver] FAIL LOGIN: Client "::ffff:106.243.245.202" Thu Mar 21 08:13:26 2024 [pid 179651] [wordpress] FAIL LOGIN: Client "::ffff:106.243.245.202" ... show less	FTP Brute-Force
aamore	2024-03-21 10:20:51 (5 months ago)	Thu Mar 21 06:20:46 2024 [pid 1555662] [trash] FAIL LOGIN: Client "106.243.245.202" Thu Mar 21 ... show moreThu Mar 21 06:20:46 2024 [pid 1555662] [trash] FAIL LOGIN: Client "106.243.245.202" Thu Mar 21 06:20:50 2024 [pid 1555665] [apache] FAIL LOGIN: Client "106.243.245.202" ... show less	FTP Brute-Force Brute-Force
Anonymous	2024-03-03 13:35:29 (6 months ago)	port scan and connect, tcp 80 (http)	Port Scan
essinghigh	2024-02-28 11:14:35 (6 months ago)	1709118874 # Service_probe # SIGNATURE_SEND # source_ip:106.243.245.202 # dst_port:3306 ...	Port Scan
security.rdmc.fr	2024-01-02 18:53:44 (8 months ago)	Port Scan Attack proto:TCP src:44351 dst:3306	Port Scan
kaCza	2023-10-25 19:50:43 (10 months ago)	Brute-Force WEB App Attack. Failed to log in via user account "admin".	Hacking Brute-Force Web App Attack
ThreatBook.io	2023-07-15 00:50:41 (1 year ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/106.243.245.202<br ... show moreThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/106.243.245.202 2023-07-14 05:02:11 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=advisory 2023-07-14 10:01:26 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=boris 2023-07-14 08:06:52 ///webapi/auth.cgi?api=SYNO.API.Auth&version=3&method=login&account=admin&passwd=bass show less	Web App Attack
Steptoe	2023-07-14 15:32:08 (1 year ago)	Brute-Force: Auto-Blocked - SASL Authentication Failed	Brute-Force