AbuseIPDB » 112.221.85.254

112.221.85.254 was found in our database!

This IP was reported 817 times. Confidence of Abuse is 100%: ?

100%

ISP	LG Dacom Corporation
Usage Type	Unknown
Domain Name	uplus.co.kr
Country	Korea (Republic of)
City	Seoul, Seoul-teukbyeolsi

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 112.221.85.254

Whois 112.221.85.254

IP Abuse Reports for 112.221.85.254:

This IP address has been reported a total of 817 times from 330 distinct sources. 112.221.85.254 was first reported on September 30th 2022, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
ghostwarriors	3 hours ago	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
ThreatBook.io	5 hours ago	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/112.221.85.254	SSH
Stuart Reid	6 hours ago	...	SSH
velenobbs.net	13 hours ago	Jan 19 00:35:33 vmi263387 sshd\[9365\]: Invalid user admin from 112.221.85.254 port 58350 Jan ... show moreJan 19 00:35:33 vmi263387 sshd\[9365\]: Invalid user admin from 112.221.85.254 port 58350 Jan 19 00:35:33 vmi263387 sshd\[9365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.221.85.254 Jan 19 00:35:35 vmi263387 sshd\[9365\]: Failed password for invalid user admin from 112.221.85.254 port 58350 ssh2 Jan 30 23:03:23 vmi263387 sshd\[9553\]: Invalid user admin from 112.221.85.254 port 53531 Jan 30 23:03:23 vmi263387 sshd\[9553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.221.85.254 Jan 30 23:03:26 vmi263387 sshd\[9553\]: Failed password for invalid user admin from 112.221.85.254 port 53531 ssh2 show less	Brute-Force SSH
cat	20 hours ago	Mar 21 17:04:53 racknerd-18cc1e sshd[7249]: pam_unix(sshd:auth): authentication failure; logname= ui ... show moreMar 21 17:04:53 racknerd-18cc1e sshd[7249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.221.85.254 Mar 21 17:04:54 racknerd-18cc1e sshd[7249]: Failed password for invalid user admin from 112.221.85.254 port 48181 ssh2 Mar 21 17:04:55 racknerd-18cc1e sshd[7249]: Failed password for invalid user admin from 112.221.85.254 port 48181 ssh2 show less	Brute-Force SSH
Shawn Goss	21 hours ago	Malicous connection port 443 Possible brute force	SSH
lewisgill.com	21 Mar 2023	2023-03-21T03:37:29.102961localhost.localdomain sshd[3220805]: Invalid user admin from 112.221.85.25 ... show more2023-03-21T03:37:29.102961localhost.localdomain sshd[3220805]: Invalid user admin from 112.221.85.254 port 56982 2023-03-21T03:37:29.107649localhost.localdomain sshd[3220805]: Failed password for invalid user admin from 112.221.85.254 port 56982 ssh2 2023-03-21T03:37:29.771820localhost.localdomain sshd[3220805]: Failed password for invalid user admin from 112.221.85.254 port 56982 ssh2 2023-03-21T03:37:30.451007localhost.localdomain sshd[3220805]: Failed password for invalid user admin from 112.221.85.254 port 56982 ssh2 2023-03-21T03:37:31.035878localhost.localdomain sshd[3220805]: Failed password for invalid user admin from 112.221.85.254 port 56982 ssh2 ... show less	Hacking Brute-Force SSH
LRNP	20 Mar 2023	Mar 20 20:41:25 helium sshd[1682505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show moreMar 20 20:41:25 helium sshd[1682505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.221.85.254 Mar 20 20:41:27 helium sshd[1682505]: Failed password for invalid user admin from 112.221.85.254 port 39542 ssh2 Mar 20 20:41:28 helium sshd[1682505]: Connection reset by invalid user admin 112.221.85.254 port 39542 [preauth] ... show less	Brute-Force SSH
ATV	20 Mar 2023	Unsolicited connection attempts to port 2222	Port Scan
ThreatBook.io	20 Mar 2023	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/112.221.85.254	SSH
urnilxfgbez	19 Mar 2023	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=135|DPT=5900|DPT=1433)	Port Scan
Dentax	19 Mar 2023	Mar 19 17:36:05 nbg-www1 sshd[720013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreMar 19 17:36:05 nbg-www1 sshd[720013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.221.85.254 Mar 19 17:36:07 nbg-www1 sshd[720013]: Failed password for invalid user admin from 112.221.85.254 port 53798 ssh2 Mar 19 17:36:08 nbg-www1 sshd[720013]: Failed password for invalid user admin from 112.221.85.254 port 53798 ssh2 ... show less	Brute-Force SSH
Honeypot-FRA4	19 Mar 2023	Mar 19 13:13:13 vs88540 sshd[265299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show moreMar 19 13:13:13 vs88540 sshd[265299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.221.85.254 Mar 19 13:13:15 vs88540 sshd[265299]: Failed password for ... show less	Brute-Force Exploited Host
szkiddaj	19 Mar 2023	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "admin" and password "admin" at 202 ... show moreCowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "admin" and password "admin" at 2023-03-19T04:55:41Z show less	Brute-Force SSH
ATV	19 Mar 2023	Unsolicited connection attempts to port 22022	Port Scan

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩