112.152.159.70
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- LG POWERCOMM
- Usage Type
- Fixed Line ISP
- ASN
- AS17858
- Domain Name
- lguplus.com
- Country
- 🇰🇷 Korea (the Republic of)
- City
- Gunpo, Gyeonggi-do
Abuse Reports
Total reports
34 from
30 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇮 6kilowatti |
|
Port Scan | |
| 🇩🇪 xserverx.ru |
[UFW SCAN!!!!] SRC=112.152.159.70 LEN=40 TOS=0x00 PREC=0x00 TTL=232 PROTO=TCP SPT=41440 DPT=82 WINDOW=1300 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇩🇪 entspannt |
Detected empty referer, indicating web scraping / abusive scanning with UA: "-" and uri: "/index.php"
|
IoT Targeted | |
| Anonymous |
Blocked by firewall on hugin [1024/tcp] | Rule: UFW | SPT: 50962 | TTL: 242 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 DasDuo |
Attempt on port 8080 (used as HTTP) - potential web application attack attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
|
Port Scan Web App Attack | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇨🇭 copestack |
Honeypot hit on ov-4e5936 (fail2ban jail: nginx-compat)
|
Web App Attack | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (8082/tcp) [non-standard port]
|
Web App Attack | |
| 🇯🇵 S.O.B.A. Dev. |
Persistent port scanning or vulnerability scanning
|
Port Scan | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.0 request on 9000
GET /
Accept: text/plain,text/html; 9000 [1] TCP
|
Hacking Bad Web Bot | |
| 🇷🇴 abuse_IP_reporter |
Sep 12 04:56:12 server UFW BLOCK SRC=112.152.159.70 PROTO=TCP SPT=44752 DPT=443
|
Port Scan | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=2; port 8082 proto 6 detection dark_ip; port 8082 proto 6 detection dark_ip
|
Port Scan | |
| 🇩🇪 dispaisyenterprises |
Honeypot [fra-de-honeypot]: HTTP/1.0 request on 8081
GET /
Accept: text/plain,text/html; 8081 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Hacking Bad Web Bot | |
| 🇨🇦 celestialcity |
Blocked by UFW on celestialcityna [35300/tcp] | SPT: 43131 | TTL: 232 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇳🇱 donarev419 |
Connection to port 5000 with data transfer.
Data preview: GET / HTTP/1.0
Host: 109.110.170.76
Accept: text/plain,text/html
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown