JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.160.252.147

49.160.252.147 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 0%: ?

ISP	LG POWERCOMM
Usage Type	Commercial
ASN	AS17858
Domain Name	lguplus.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.160.252.147

Whois 49.160.252.147

IP Abuse Reports for 49.160.252.147:

This IP address has been reported a total of 21 times from 20 distinct sources. 49.160.252.147 was first reported on December 6th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 Parth Maniar	2024-12-12 15:28:08 (1 year ago)	This IP address carried out 4 port scanning attempts on 11-12-2024. For more information or to repor ... show more This IP address carried out 4 port scanning attempts on 11-12-2024. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇳🇱 SchorelWeb	2024-12-11 10:40:18 (1 year ago)	Cluster member (Omitted) (NL/The Netherlands/-) said, DENY 49.160.252.147, Reason:[(sshd) Failed SSH ... show more Cluster member (Omitted) (NL/The Netherlands/-) said, DENY 49.160.252.147, Reason:[(sshd) Failed SSH login from 49.160.252.147 (KR/South Korea/-): 4 in the last (Omitted)] show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2024-12-10 23:45:00 (1 year ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇧🇷 diego	2024-12-10 09:08:44 (1 year ago)	[rede-166-249] (sshd) Failed SSH login from 49.160.252.147 (KR/South Korea/-): 5 in the last 3600 se ... show more [rede-166-249] (sshd) Failed SSH login from 49.160.252.147 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Dec 10 06:08:29 sshd[18490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.160.252.147 user=[USERNAME] Dec 10 06:08:31 sshd[18490]: Failed password for [USERNAME] from 49.160.252.147 port 36724 ssh2 Dec 10 06:08:34 sshd[18490]: Failed password for [USERNAME] from 49.160.252.147 port 36724 ssh2 Dec 10 06:08:36 sshd[18490]: Failed password for [USERNAME] from 49.160.252.147 port 36724 ssh2 Dec 10 06:08:39 sshd[18490]: Failed password for [USERNAME] fro show less	Port Scan
🇷🇸 Scan	2024-12-10 01:27:21 (1 year ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇮🇹 Samsteve169	2024-12-09 00:16:59 (1 year ago)	Attempt from 49.160.252.147	Brute-Force SSH
🇺🇸 RAP	2024-12-08 18:45:34 (1 year ago)	2024-12-08 18:45:34 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 PulseServers	2024-12-08 16:07:30 (1 year ago)	SSH Brute-Force Attack on a server hosted by PulseServers.com - US10 Honeypot ...	Brute-Force SSH
🇫🇮 diego021	2024-12-08 15:26:46 (1 year ago)	2024-12-08T10:26:38.896318-05:00 debian-hel1 sshd[135598]: Failed password for root from 49.160.252. ... show more 2024-12-08T10:26:38.896318-05:00 debian-hel1 sshd[135598]: Failed password for root from 49.160.252.147 port 49129 ssh2 2024-12-08T10:26:42.499628-05:00 debian-hel1 sshd[135598]: Failed password for root from 49.160.252.147 port 49129 ssh2 2024-12-08T10:26:45.784991-05:00 debian-hel1 sshd[135598]: Failed password for root from 49.160.252.147 port 49129 ssh2 ... show less	Brute-Force SSH
🇺🇸 wlt-blocker	2024-12-08 09:50:47 (1 year ago)	Attempts to access SSH server with wrong credentials	SSH
🇩🇪 Hazzard	2024-12-08 07:07:21 (1 year ago)	(sshd) Failed SSH login from 49.160.252.147 (KR/South Korea/-/-/-/[redacted])	Brute-Force SSH
🇫🇷 Rousse Nicolas	2024-12-08 05:07:38 (1 year ago)	Dec 8 05:07:23 srv-web sshd[3964866]: Failed password for root from 49.160.252.147 port 44007 ssh2 ... show more Dec 8 05:07:23 srv-web sshd[3964866]: Failed password for root from 49.160.252.147 port 44007 ssh2 Dec 8 05:07:25 srv-web sshd[3964866]: Failed password for root from 49.160.252.147 port 44007 ssh2 Dec 8 05:07:25 srv-web sshd[3964866]: error: maximum authentication attempts exceeded for root from 49.160.252.147 port 44007 ssh2 [preauth] Dec 8 05:07:35 srv-web sshd[3964917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.160.252.147 user=root Dec 8 05:07:37 srv-web sshd[3964917]: Failed password for root from 49.160.252.147 port 55237 ssh2 ... show less	Brute-Force SSH
🇩🇪 nzxl	2024-12-08 01:30:11 (1 year ago)	2024-12-08T01:30:09.246922+00:00 nzxldotspace sshd[931977]: error: maximum authentication attempts e ... show more 2024-12-08T01:30:09.246922+00:00 nzxldotspace sshd[931977]: error: maximum authentication attempts exceeded for root from 49.160.252.147 port 56484 ssh2 [preauth] ... show less	Brute-Force SSH
🇺🇸 RAP	2024-12-07 09:16:42 (1 year ago)	2024-12-07 09:16:42 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇩🇪 Admins@FBN	2024-12-07 05:00:29 (1 year ago)	FW-PortScan: Traffic Blocked srcport=57615 dstport=22	Port Scan Hacking SSH

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 116.110.152.36

🇨🇿 81.2.217.97

🇨🇳 220.181.172.244

🇺🇸 209.50.166.198

🇺🇸 205.210.31.82

🇮🇳 203.193.147.37

🇬🇧 188.240.59.18

🇨🇳 180.76.98.88

🇫🇮 173.194.98.19

🇩🇪 167.94.146.48

🇻🇳 116.110.151.56

🇻🇳 116.110.151.17

🇻🇳 116.110.151.7

🇮🇩 103.175.225.238

🇲🇾 103.175.16.158

🇬🇧 46.32.228.2

🇩🇪 45.80.165.99

🇧🇪 35.195.106.79

🇺🇸 20.59.121.110

🇰🇷 3.37.225.248