AbuseIPDB » 218.157.152.248

218.157.152.248 was found in our database!

This IP was reported 1,878 times. Confidence of Abuse is 0%: ?

0%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	Korea (the Republic of)
City	Andong, Gyeongsangbuk-do

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 218.157.152.248

Whois 218.157.152.248

IP Abuse Reports for 218.157.152.248:

This IP address has been reported a total of 1,878 times from 651 distinct sources. 218.157.152.248 was first reported on December 23rd 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
SOC [GOLINE SA]	2024-07-24 02:34:59 (8 months ago)	goFTP Server detected a brute-force attempt from IP 218.157.152.248	FTP Brute-Force
security.rdmc.fr	2024-07-24 00:50:05 (8 months ago)	IP in Malicious Database	Web App Attack
Futunk	2024-07-23 21:44:43 (8 months ago)	2024-07-23T23:44:34.766706+02:00 ezri sshd[65755]: User root from 218.157.152.248 not allowed becaus ... show more2024-07-23T23:44:34.766706+02:00 ezri sshd[65755]: User root from 218.157.152.248 not allowed because not listed in AllowUsers 2024-07-23T23:44:36.257305+02:00 ezri sshd[65755]: error: maximum authentication attempts exceeded for invalid user root from 218.157.152.248 port 59752 ssh2 [preauth] 2024-07-23T23:44:42.423175+02:00 ezri sshd[65766]: User root from 218.157.152.248 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
en0	2024-07-23 20:09:23 (8 months ago)	2024-07-23 20:09:22,006 fail2ban.actions [2053507]: NOTICE [sshd] Ban 218.157.152.248	Brute-Force SSH
CRSSkynet	2024-07-23 17:21:26 (8 months ago)	Jul 23 18:21:16 hosting sshd[37714]: Failed password for root from 218.157.152.248 port 41800 ssh2<b ... show moreJul 23 18:21:16 hosting sshd[37714]: Failed password for root from 218.157.152.248 port 41800 ssh2 Jul 23 18:21:18 hosting sshd[37714]: Failed password for root from 218.157.152.248 port 41800 ssh2 Jul 23 18:21:20 hosting sshd[37714]: Failed password for root from 218.157.152.248 port 41800 ssh2 Jul 23 18:21:23 hosting sshd[37714]: Failed password for root from 218.157.152.248 port 41800 ssh2 Jul 23 18:21:25 hosting sshd[37714]: Failed password for root from 218.157.152.248 port 41800 ssh2 ... show less	Brute-Force
Mr. Was geht Sie das an?	2024-07-23 16:47:04 (8 months ago)	Jul 23 18:46:47 SN-E2-77 sshd[3106302]: error: maximum authentication attempts exceeded for root fro ... show moreJul 23 18:46:47 SN-E2-77 sshd[3106302]: error: maximum authentication attempts exceeded for root from 218.157.152.248 port 51076 ssh2 [preauth] Jul 23 18:46:55 SN-E2-77 sshd[3106304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.157.152.248 user=root Jul 23 18:46:58 SN-E2-77 sshd[3106304]: Failed password for root from 218.157.152.248 port 54898 ssh2 Jul 23 18:47:01 SN-E2-77 sshd[3106304]: Failed password for root from 218.157.152.248 port 54898 ssh2 Jul 23 18:47:03 SN-E2-77 sshd[3106304]: Failed password for root from 218.157.152.248 port 54898 ssh2 ... show less	Brute-Force SSH
paradoxnetworks	2024-07-23 11:34:58 (8 months ago)	2024-07-23T11:34:41.245718+00:00 edge-fog-ams01.int.pdx.net.uk sshd[1840389]: error: maximum authent ... show more2024-07-23T11:34:41.245718+00:00 edge-fog-ams01.int.pdx.net.uk sshd[1840389]: error: maximum authentication attempts exceeded for root from 218.157.152.248 port 33476 ssh2 [preauth] 2024-07-23T11:34:48.621163+00:00 edge-fog-ams01.int.pdx.net.uk sshd[1840392]: error: maximum authentication attempts exceeded for root from 218.157.152.248 port 35590 ssh2 [preauth] 2024-07-23T11:34:58.157019+00:00 edge-fog-ams01.int.pdx.net.uk sshd[1840413]: error: maximum authentication attempts exceeded for root from 218.157.152.248 port 36998 ssh2 [preauth] ... show less	Brute-Force SSH
Scan	2024-07-23 08:55:55 (8 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
phoenix1jl96	2024-07-23 05:43:07 (8 months ago)	Jul 23 07:42:11 box sshd[1163275]: Failed password for root from 218.157.152.248 port 57166 ssh2<br ... show moreJul 23 07:42:11 box sshd[1163275]: Failed password for root from 218.157.152.248 port 57166 ssh2 Jul 23 07:42:29 box sshd[1163275]: error: maximum authentication attempts exceeded for root from 218.157.152.248 port 57166 ssh2 [preauth] Jul 23 07:42:36 box sshd[1163352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.157.152.248 user=root Jul 23 07:42:38 box sshd[1163352]: Failed password for root from 218.157.152.248 port 40366 ssh2 Jul 23 07:42:55 box sshd[1163352]: error: maximum authentication attempts exceeded for root from 218.157.152.248 port 40366 ssh2 [preauth] Jul 23 07:43:04 box sshd[1163480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.157.152.248 user=root Jul 23 07:43:06 box sshd[1163480]: Failed password for root from 218.157.152.248 port 45156 ssh2 ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH
ghostwarriors	2024-07-23 05:21:00 (8 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
urnilxfgbez	2024-07-22 22:45:00 (8 months ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
ThreatBook.io	2024-07-22 22:03:52 (8 months ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/218.157.152.248	Brute-Force
paradoxnetworks	2024-07-22 21:54:58 (8 months ago)	2024-07-22T21:54:40.318924+00:00 edge-fog-ams01.int.pdx.net.uk sshd[1800269]: error: maximum authent ... show more2024-07-22T21:54:40.318924+00:00 edge-fog-ams01.int.pdx.net.uk sshd[1800269]: error: maximum authentication attempts exceeded for root from 218.157.152.248 port 38474 ssh2 [preauth] 2024-07-22T21:54:50.272790+00:00 edge-fog-ams01.int.pdx.net.uk sshd[1800271]: error: maximum authentication attempts exceeded for root from 218.157.152.248 port 38852 ssh2 [preauth] 2024-07-22T21:54:58.096828+00:00 edge-fog-ams01.int.pdx.net.uk sshd[1800273]: error: maximum authentication attempts exceeded for root from 218.157.152.248 port 39448 ssh2 [preauth] ... show less	Brute-Force SSH
suble.org	2024-07-22 21:42:25 (8 months ago)	Jul 22 23:42:15 swsrv sshd[164114]: User root from 218.157.152.248 not allowed because not listed in ... show moreJul 22 23:42:15 swsrv sshd[164114]: User root from 218.157.152.248 not allowed because not listed in AllowUsers Jul 22 23:42:16 swsrv sshd[164114]: error: maximum authentication attempts exceeded for invalid user root from 218.157.152.248 port 46624 ssh2 [preauth] Jul 22 23:42:23 swsrv sshd[164118]: User root from 218.157.152.248 not allowed because not listed in AllowUsers Jul 22 23:42:24 swsrv sshd[164118]: error: maximum authentication attempts exceeded for invalid user root from 218.157.152.248 port 47548 ssh2 [preauth] ... show less	Brute-Force SSH
formality	2024-07-22 20:42:41 (8 months ago)	Invalid user admin from 218.157.152.248 port 54634	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩