This IP address has been reported a total of
9
times from
6 distinct
sources.
221.152.49.205 was first reported on
September 9th 2026 , and the most recent report was
1 day ago United States of America
with 4
reports;
Korea (the Republic of)
with 2
reports;
Finland
with 1
report.
The most common categories in these recent reports were:
Brute-Force
7
times;
SSH
6
times;
Hacking
2
times;
IoT Targeted
2
times;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇹🇷
Threat.live
2026-09-21 09:35:03
(1 day ago)
Threat.live: Brute Force
Brute-Force
🇰🇷
2048
2026-09-20 13:11:48
(2 days ago)
SSH credential brute-force observed by honeypot. | Source IP: 221.152.49.205 | Targeted device: Open ...
show more
SSH credential brute-force observed by honeypot. | Source IP: 221.152.49.205 | Targeted device: OpenWrt router | First seen: 20 Sep 2026 13:11:48 UTC | Last seen: 20 Sep 2026 13:11:48 UTC | Attempts: 1 | Client: SSH-2.0-Go | Sample credentials: admin:1234
show less
Brute-Force
SSH
IoT Targeted
🇺🇸
anon333
2026-09-20 07:33:57
(2 days ago)
Hacker syslog review 1789889637
Hacking
🇺🇸
anon333
2026-09-18 13:33:41
(4 days ago)
Hacker syslog review 1789738421
Hacking
2026-09-18 03:26:26
(4 days ago)
SSH
Port Scan
Brute-Force
2026-09-18 01:36:49
(4 days ago)
SSH brute force attempt. User: ubnt, Pass: [REDACTED]
Brute-Force
SSH
🇺🇸
bigscoots.com
2026-09-16 19:35:46
(6 days ago)
221.152.49.205 (KR/South Korea/-), 6 distributed sshd attacks on account [root] in the last 3600 sec ...
show more
221.152.49.205 (KR/South Korea/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 16 14:35:33 14474 sshd[31484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.152.49.205 user=root
Sep 16 14:31:04 14474 sshd[30828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.66.11.4 user=root
Sep 16 14:31:06 14474 sshd[30828]: Failed password for root from 178.66.11.4 port 33238 ssh2
Sep 16 14:31:04 14474 sshd[30828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.66.11.4 user=root
Sep 16 14:31:06 14474 sshd[30828]: Failed password for root from 178.66.11.4 port 33238 ssh2
Sep 16 14:31:04 14474 sshd[30828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.66.11.4 user=root
IP Addresses Blocked:
show less
Brute-Force
SSH
🇺🇸
bigscoots.com
2026-09-12 06:26:48
(1 week ago)
221.152.49.205 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 sec ...
show more
221.152.49.205 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 12 00:40:30 15299 sshd[22992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.132.98 user=root
Sep 12 00:40:32 15299 sshd[22992]: Failed password for root from 104.248.132.98 port 51036 ssh2
Sep 12 01:26:24 15299 sshd[23854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.152.49.205 user=root
Sep 12 01:26:26 15299 sshd[23854]: Failed password for root from 221.152.49.205 port 38578 ssh2
Sep 12 00:42:39 15299 sshd[24488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.180.242.27 user=root
IP Addresses Blocked:
104.248.132.98 (DE/Germany/-)
show less
Brute-Force
SSH
🇰🇷
2048
2026-09-09 03:20:20
(1 week ago)
SSH credential brute-force observed by honeypot.
Source IP: 221.152.49.205
Targeted device: DVR
Firs ...
show more
SSH credential brute-force observed by honeypot.
Source IP: 221.152.49.205
Targeted device: DVR
First seen: 09 Sep 2026 03:20:20 UTC
Last seen: 09 Sep 2026 03:20:20 UTC
Attempts: 1
Client: SSH-2.0-Go
Sample credentials: user:password
show less
Brute-Force
SSH
IoT Targeted
Showing 1 to
9
of 9 reports
