AbuseIPDB » 221.159.150.85

221.159.150.85 was found in our database!

This IP was reported 25,468 times. Confidence of Abuse is 100%: ?

100%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	Korea (the Republic of)
City	Daejeon, Daejeon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 221.159.150.85

Whois 221.159.150.85

IP Abuse Reports for 221.159.150.85:

This IP address has been reported a total of 25,468 times from 1,663 distinct sources. 221.159.150.85 was first reported on February 23rd 2023, and the most recent report was 18 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ps-center	2023-04-21 15:28:10 (2 years ago)	HHV: Brutforce ssh Login	Brute-Force
dwmp	2023-04-21 14:36:40 (2 years ago)	Apr 21 16:33:59 webcore sshd[806879]: Failed password for root from 221.159.150.85 port 45572 ssh2<b ... show moreApr 21 16:33:59 webcore sshd[806879]: Failed password for root from 221.159.150.85 port 45572 ssh2 Apr 21 16:35:18 webcore sshd[807093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.159.150.85 user=root Apr 21 16:35:20 webcore sshd[807093]: Failed password for root from 221.159.150.85 port 40072 ssh2 Apr 21 16:36:38 webcore sshd[807422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.159.150.85 user=root Apr 21 16:36:40 webcore sshd[807422]: Failed password for root from 221.159.150.85 port 39474 ssh2 ... show less	Brute-Force SSH
Parth Maniar	2023-04-21 09:11:41 (2 years ago)	This IP address carried out 8 SSH credential attack (attempts) on 20-04-2023. For more information o ... show moreThis IP address carried out 8 SSH credential attack (attempts) on 20-04-2023. For more information or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
Bernhard Fürst	2023-04-21 08:25:35 (2 years ago)	Cluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 221.159.150.85, Reason:[ ... show moreCluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 221.159.150.85, Reason:[(sshd) Failed SSH login from 221.159.150.85 (KR/South Korea/-): 5 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
formality	2023-04-21 07:49:32 (2 years ago)	Invalid user webdb from 221.159.150.85 port 49084	Brute-Force SSH
Parth Maniar	2023-04-21 05:57:42 (2 years ago)	This IP address carried out 51 port scanning attempts on 20-04-2023. For more information or to repo ... show moreThis IP address carried out 51 port scanning attempts on 20-04-2023. For more information or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
mc4bbs	2023-04-21 03:45:10 (2 years ago)	Apr 20 23:43:38 NPSTNNYC01T sshd[9229]: Failed password for root from 221.159.150.85 port 36534 ssh2 ... show moreApr 20 23:43:38 NPSTNNYC01T sshd[9229]: Failed password for root from 221.159.150.85 port 36534 ssh2 ... show less	Brute-Force SSH
HyperSpeed	2023-04-21 03:44:18 (2 years ago)	Apr 21 03:44:16 SE1 sshd[4161190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show moreApr 21 03:44:16 SE1 sshd[4161190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.159.150.85 user=root Apr 21 03:44:18 SE1 sshd[4161190]: Failed password for root from 221.159.150.85 port 51238 ssh2 ... show less	Brute-Force SSH
whitehat AbuseIPDB Official	2023-04-20 21:01:56 (2 years ago)	2023-04-20T20:59:16.730992shield sshd\[16163\]: pam_unix\(sshd:auth\): authentication failure\; logn ... show more2023-04-20T20:59:16.730992shield sshd\[16163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.159.150.85 user=root 2023-04-20T20:59:18.208793shield sshd\[16163\]: Failed password for root from 221.159.150.85 port 37668 ssh2 2023-04-20T21:00:35.383134shield sshd\[16409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.159.150.85 user=root 2023-04-20T21:00:37.372925shield sshd\[16409\]: Failed password for root from 221.159.150.85 port 53962 ssh2 2023-04-20T21:01:55.613928shield sshd\[16716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.159.150.85 user=root show less	Brute-Force SSH
tg_de	2023-04-20 20:46:30 (2 years ago)	6 attempts since 20.04.2023 22:18:35 CEST - last one: Apr 20 22:46:30 beta sshd[2645818]: Disconnect ... show more6 attempts since 20.04.2023 22:18:35 CEST - last one: Apr 20 22:46:30 beta sshd[2645818]: Disconnected from authenticating user root 221.159.150.85 port 48920 [preauth] show less	Brute-Force SSH
Tamsweb	2023-04-20 20:20:24 (2 years ago)	Apr 20 22:17:43 mail sshd[1580596]: Failed password for root from 221.159.150.85 port 49922 ssh2<br ... show moreApr 20 22:17:43 mail sshd[1580596]: Failed password for root from 221.159.150.85 port 49922 ssh2 Apr 20 22:19:01 mail sshd[1580701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.159.150.85 user=root Apr 20 22:19:03 mail sshd[1580701]: Failed password for root from 221.159.150.85 port 41590 ssh2 Apr 20 22:20:22 mail sshd[1580788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.159.150.85 user=root Apr 20 22:20:23 mail sshd[1580788]: Failed password for root from 221.159.150.85 port 43526 ssh2 ... show less	Brute-Force SSH
PP-TS	2023-04-20 20:19:46 (2 years ago)	Apr 20 23:18:23 localhost sshd[82731]: User root from 221.159.150.85 not allowed because listed in D ... show moreApr 20 23:18:23 localhost sshd[82731]: User root from 221.159.150.85 not allowed because listed in DenyUsers Apr 20 23:18:23 localhost sshd[82731]: Disconnected from invalid user root 221.159.150.85 port 41406 [preauth] Apr 20 23:19:46 localhost sshd[82737]: User root from 221.159.150.85 not allowed because listed in DenyUsers ... show less	Brute-Force SSH
vmsimple.com	2023-04-20 18:36:06 (2 years ago)	Apr 20 14:34:49 corp sshd[8589]: Failed password for root from 221.159.150.85 port 55052 ssh2 ... show moreApr 20 14:34:49 corp sshd[8589]: Failed password for root from 221.159.150.85 port 55052 ssh2 Apr 20 14:36:04 corp sshd[9187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.159.150.85 user=root Apr 20 14:36:06 corp sshd[9187]: Failed password for root from 221.159.150.85 port 53896 ssh2 ... show less	Brute-Force SSH
amit177	2023-04-20 18:35:13 (2 years ago)		Brute-Force SSH
ps-center	2023-04-20 12:37:51 (2 years ago)	C2: Brutforce ssh Login	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩