JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.60.192.12

124.60.192.12 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 95%: ?

95%

ISP	LG POWERCOMM
Usage Type	Fixed Line ISP
ASN	AS17858
Domain Name	lguplus.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.60.192.12

Whois 124.60.192.12

IP Abuse Reports for 124.60.192.12:

This IP address has been reported a total of 18 times from 17 distinct sources. 124.60.192.12 was first reported on September 1st 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 WeCloudit-Anti-Abuse	2026-09-01 10:21:32 (4 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇺🇸 interbiznw.com	2026-09-01 10:15:34 (4 hours ago)	fail2ban-ban	Hacking Brute-Force Exploited Host Web App Attack
🇫🇷 ELYAZ	2026-09-01 10:08:07 (4 hours ago)	(y3) Failed access -byebye- from 124.60.192.12 (KR/South Korea/-): (CF_ENABLE)	Hacking
🇩🇪 joharikop	2026-09-01 09:50:54 (4 hours ago)	Nginx: WordPress/CMS probe (wp-admin, wp-login, xmlrpc). Automated ban via fail2ban nginx-cms-probes ... show more Nginx: WordPress/CMS probe (wp-admin, wp-login, xmlrpc). Automated ban via fail2ban nginx-cms-probes jail. show less	Web App Attack
🇺🇸 kosada.com	2026-09-01 09:36:50 (5 hours ago)	Repeated requests for suspicious nonexistent URLs, for example: /admin.php (HTTP port 443)	Web App Attack
Anonymous	2026-09-01 09:34:11 (5 hours ago)	124.60.192.12 - - [01/Sep/2026:17:34:11 +0800] "GET /phpmyadmin/ HTTP/1.1" 404 39532 "-" "Mozilla/5. ... show more 124.60.192.12 - - [01/Sep/2026:17:34:11 +0800] "GET /phpmyadmin/ HTTP/1.1" 404 39532 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 4server	2026-09-01 07:48:12 (6 hours ago)	[TueSep0109:48:06.2074052026][security2:error][pid3864114:tid3864215][client124.60.192.12:0]ModSecur ... show more [TueSep0109:48:06.2074052026][security2:error][pid3864114:tid3864215][client124.60.192.12:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"worldgoldfundltd.com\"][uri\"/\"][unique_id\"apaDNu6CXrbyg9ak9GoQWgAAAM8\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 masterguru	2026-09-01 07:29:20 (7 hours ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 124.60.192.12 (KR/South Korea/-): 1 in the las ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 124.60.192.12 (KR/South Korea/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇮🇩 Burayot	2026-09-01 03:31:27 (11 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 124.60.192.12 (KR/South Korea/-): 2 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 124.60.192.12 (KR/South Korea/-): 2 in the last 3600 secs show less	Web App Attack
🇳🇴 jad-abuse	2026-09-01 02:59:55 (11 hours ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: tls_probe ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: tls_probe. Observed by 1 sensor(s); 1 hits. show less	Port Scan Bad Web Bot
🇺🇸 NXTwoThou	2026-09-01 02:45:30 (12 hours ago)	Verb	Web App Attack
🇺🇸 legionMCCXV	2026-09-01 02:32:36 (12 hours ago)	Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.	Port Scan Hacking
🇫🇷 Dampen59	2026-09-01 01:31:20 (13 hours ago)	(smtpauth) Failed SMTP AUTH login from 124.60.192.12 (KR/South Korea/-): 5 in the last 3600 secs; Po ... show more (smtpauth) Failed SMTP AUTH login from 124.60.192.12 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-01 01:30:27 dovecot_plain authenticator failed for H=(scan.local) [124.60.192.12]:53734: 535 Incorrect authentication data ([email protected]) 2026-09-01 01:30:43 dovecot_plain authenticator failed for H=(scan.local) [124.60.192.12]:52610: 535 Incorrect authentication data ([email protected]) 2026-09-01 01:30:58 dovecot_plain authenticator failed for H=(scan.local) [124.60.192.12]:47976: 535 Incorrect authentication data ([email protected]) 2026-09-01 01:31:15 dovecot_plain authenticator failed for H=(scan.local) [124.60.192.12]:36062: 535 Incorrect authentication data ([email protected]) 2026-09-01 01:31:17 dovecot_plain authenticator failed for H=(scan.local) [124.60.192.12]:38032: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇺🇸 bouvier.me	2026-09-01 00:51:28 (13 hours ago)	2026-08-31T20:51:09.216531sitens3 postfix/submission/smtpd[2172380]: lost connection after EHLO from ... show more 2026-08-31T20:51:09.216531sitens3 postfix/submission/smtpd[2172380]: lost connection after EHLO from unknown[124.60.192.12] 2026-08-31T20:51:17.674149sitens3 postfix/submission/smtpd[2172380]: lost connection after EHLO from unknown[124.60.192.12] 2026-08-31T20:51:27.256711sitens3 postfix/submission/smtpd[2172380]: lost connection after EHLO from unknown[124.60.192.12] ... show less	Web Spam Brute-Force Exploited Host
🇫🇷 Dampen59	2026-09-01 00:51:18 (13 hours ago)	(smtpauth) Failed SMTP AUTH login from 124.60.192.12 (KR/South Korea/-): 5 in the last 3600 secs; Po ... show more (smtpauth) Failed SMTP AUTH login from 124.60.192.12 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-01 02:50:22 dovecot_plain authenticator failed for H=(scan.local) [124.60.192.12]:55894: 535 Incorrect authentication data ([email protected]) 2026-09-01 02:50:38 dovecot_plain authenticator failed for H=(scan.local) [124.60.192.12]:49642: 535 Incorrect authentication data ([email protected]) 2026-09-01 02:50:54 dovecot_plain authenticator failed for H=(scan.local) [124.60.192.12]:43290: 535 Incorrect authentication data ([email protected]) 2026-09-01 02:51:11 dovecot_plain authenticator failed for H=(scan.local) [124.60.192.12]:55846: 535 Incorrect authentication data ([email protected]) 2026-09-01 02:51:14 dovecot_plain authenticator failed for H=(scan.local) [124.60.192.12]:49806: 535 Incorrect authentication data ([email protected]) show less	Port Scan

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 186.242.162.94

🇨🇳 114.218.113.75

🇺🇸 63.131.196.71

🇨🇳 2408:864f:b000:100::4

🇩🇪 157.90.210.202

🇭🇰 141.11.146.65

🇹🇼 124.9.95.37

🇺🇸 34.19.116.58

🇩🇪 4.184.246.230

🇮🇷 217.11.23.245

🇺🇸 198.2.185.90

🇺🇸 162.216.150.27

🇮🇳 103.101.58.128

🇫🇷 91.231.89.191

🇨🇭 77.109.187.111

🇧🇷 45.169.200.254

🇺🇸 45.79.145.34

🇺🇸 40.76.123.99

🇺🇦 217.196.165.67

🇸🇬 172.217.44.208