AbuseIPDB » 124.58.159.42

124.58.159.42 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 50%: ?

50%

ISP	LG POWERCOMM
Usage Type	Commercial
ASN	AS17858
Domain Name	lguplus.com
Country	Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 124.58.159.42

Whois 124.58.159.42

IP Abuse Reports for 124.58.159.42:

This IP address has been reported a total of 35 times from 22 distinct sources. 124.58.159.42 was first reported on December 3rd 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
urnilxfgbez	2024-12-15 23:45:00 (4 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Hirte	2024-12-15 23:14:41 (4 weeks ago)	LT: TCP-Scanner. Port: 22	Port Scan
urnilxfgbez	2024-12-14 23:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
rtbh.com.tr	2024-12-14 16:52:45 (1 month ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
ThreatBook.io	2024-12-13 22:34:36 (1 month ago)	2024-12-13 15:22:46 ["/ip cloud print","ifconfig","uname -a","cat /proc/cpuinfo","ps \| grep '[M ... show more2024-12-13 15:22:46 ["/ip cloud print","ifconfig","uname -a","cat /proc/cpuinfo","ps \| grep '[Mm]iner'","ps -ef \| grep '[Mm]iner'","ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","echo Hi \| cat -n"] show less	SSH
Anonymous	2024-12-13 17:16:48 (1 month ago)	2024-12-13T17:16:43.076480 ARES sshd[19506]: Failed password for root from 124.58.159.42 port 53636 ... show more2024-12-13T17:16:43.076480 ARES sshd[19506]: Failed password for root from 124.58.159.42 port 53636 ssh2 2024-12-13T17:16:45.739453 ARES sshd[19506]: Failed password for root from 124.58.159.42 port 53636 ssh2 2024-12-13T17:16:47.680876 ARES sshd[19506]: Failed password for root from 124.58.159.42 port 53636 ssh2 ... show less	Brute-Force SSH
el-brujo	2024-12-13 15:34:49 (1 month ago)	12/13/2024-16:34:48.861083 124.58.159.42 Protocol: 6 ET SCAN NMAP -sS window 1024	Port Scan
Anonymous	2024-12-13 05:13:40 (1 month ago)	sshd	Brute-Force SSH
mouafiq	2024-12-13 02:32:53 (1 month ago)	Dec 13 03:32:45 vps789833 sshd[16638]: Failed password for root from 124.58.159.42 port 34547 ssh2<b ... show moreDec 13 03:32:45 vps789833 sshd[16638]: Failed password for root from 124.58.159.42 port 34547 ssh2 Dec 13 03:32:47 vps789833 sshd[16638]: Failed password for root from 124.58.159.42 port 34547 ssh2 Dec 13 03:32:50 vps789833 sshd[16638]: Failed password for root from 124.58.159.42 port 34547 ssh2 Dec 13 03:32:52 vps789833 sshd[16638]: Failed password for root from 124.58.159.42 port 34547 ssh2 show less	Brute-Force SSH
urnilxfgbez	2024-12-12 23:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
rtbh.com.tr	2024-12-12 12:52:40 (1 month ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
EGP Abuse Dept	2024-12-12 04:19:55 (1 month ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
urnilxfgbez	2024-12-11 23:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
bulkvm.com	2024-12-11 22:05:21 (1 month ago)	[bulkvm.com/honeypot] SSH-Multi login Attempt	Brute-Force SSH
rtbh.com.tr	2024-12-11 12:52:50 (1 month ago)	list.rtbh.com.tr report: tcp/22	Brute-Force