JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 49.247.44.49

49.247.44.49 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 46%: ?

46%

ISP	SMILESERV
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38700
Hostname(s)	smtp1.ethan-alice.com
Domain Name	smileserv.com
Country	🇰🇷 Korea (the Republic of)
City	Incheon, Incheon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 49.247.44.49

Whois 49.247.44.49

IP Abuse Reports for 49.247.44.49:

This IP address has been reported a total of 24 times from 14 distinct sources. 49.247.44.49 was first reported on October 3rd 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 excill	2026-06-04 03:18:54 (2 weeks ago)	Honeypot mesh observed 537 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
🇩🇪 LRob.fr	2026-06-02 15:30:07 (2 weeks ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇩🇪 LRob.fr	2026-06-01 21:30:06 (2 weeks ago)	FTP brute-force attack detected by Fail2Ban in plesk-proftpd jail	FTP Brute-Force
🇩🇪 linuxman1	2026-05-31 07:34:22 (2 weeks ago)	(PERMBLOCK) 49.247.44.49 (KR/South Korea/smtp1.ethan-alice.com) has had more than 4 temp blocks in t ... show more (PERMBLOCK) 49.247.44.49 (KR/South Korea/smtp1.ethan-alice.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
🇩🇪 linuxman1	2026-05-31 04:32:50 (2 weeks ago)	(ftpd) Failed FTP login from 49.247.44.49 (KR/South Korea/smtp1.ethan-alice.com): 5 in the last 3360 ... show more (ftpd) Failed FTP login from 49.247.44.49 (KR/South Korea/smtp1.ethan-alice.com): 5 in the last 33600 secs; Ports: 20,21; Direction: in; Trigger: LF_FTPD; Logs: May 31 02:11:06 hostingremote proftpd[3106804]: 0.0.0.0 (49.247.44.49[49.247.44.49]) - USER backup (Login failed): Incorrect password May 31 05:13:03 hostingremote proftpd[3352322]: 0.0.0.0 (49.247.44.49[49.247.44.49]) - USER hagatalex: no such user found from 49.247.44.49 [49.247.44.49] to 88.99.147.18:21 May 31 08:15:05 hostingremote proftpd[3437722]: 0.0.0.0 (49.247.44.49[49.247.44.49]) - USER hagatalex: no such user found from 49.247.44.49 [49.247.44.49] to 88.99.147.18:21 May 31 08:24:38 hostingremote proftpd[3440825]: 0.0.0.0 (49.247.44.49[49.247.44.49]) - USER elobourglass (Login failed): Incorrect password May 31 11:02:45 hostingremote proftpd[3514098]: 0.0.0.0 (49.247.44.49[49.247.44.49]) - USER hagatalex: no such user found from 49.247.44.49 [49.247.44.49] to 88.99.147.18:21 show less	Port Scan
Anonymous	2026-05-31 04:31:14 (2 weeks ago)	Failed login attempt detected by Fail2Ban in plesk-proftpd jail	Brute-Force
🇩🇪 linuxman1	2026-05-31 01:54:44 (2 weeks ago)	49.247.44.49 (KR/South Korea/smtp1.ethan-alice.com), 5 distributed ftpd attacks on account [elobourg ... show more 49.247.44.49 (KR/South Korea/smtp1.ethan-alice.com), 5 distributed ftpd attacks on account [elobourglass] in the last 33600 secs; Ports: 20,21; Direction: in; Trigger: LF_DISTATTACK; Logs: May 31 04:11:45 hostingremote proftpd[3175172]: 0.0.0.0 (157.245.50.190[157.245.50.190]) - USER elobourglass (Login failed): Incorrect password May 31 03:49:17 hostingremote proftpd[3156524]: 0.0.0.0 (146.190.126.213[146.190.126.213]) - USER elobourglass (Login failed): Incorrect password May 31 03:00:12 hostingremote proftpd[3130924]: 0.0.0.0 (146.190.126.213[146.190.126.213]) - USER elobourglass (Login failed): Incorrect password May 31 08:24:38 hostingremote proftpd[3440825]: 0.0.0.0 (49.247.44.49[49.247.44.49]) - USER elobourglass (Login failed): Incorrect password May 31 02:07:13 hostingremote proftpd[3104924]: 0.0.0.0 (146.190.126.213[146.190.126.213]) - USER elobourglass (Login failed): Incorrect password IP Addresses Blocked: 157.245.50.190 (SG/Singapore/-) 146.190.126.213 (US/United States/-) show less	Port Scan
🇩🇪 chris_yooo	2026-05-30 23:38:20 (2 weeks ago)	May 31 00:42:40 isp pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [ailac] May ... show more May 31 00:42:40 isp pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [ailac] May 31 01:25:05 isp pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [ailac] May 31 01:38:19 isp pure-ftpd: ([email protected]) [WARNING] Authentication failed for user [ailac] ... show less	Brute-Force FTP Brute-Force
🇩🇪 linuxman1	2026-05-30 19:42:36 (2 weeks ago)	49.247.44.49 (KR/South Korea/smtp1.ethan-alice.com), 5 distributed ftpd attacks on account [backup] ... show more 49.247.44.49 (KR/South Korea/smtp1.ethan-alice.com), 5 distributed ftpd attacks on account [backup] in the last 33600 secs; Ports: 20,21; Direction: in; Trigger: LF_DISTATTACK; Logs: May 31 02:05:52 hostingremote proftpd[3104496]: 0.0.0.0 (45.10.151.248[45.10.151.248]) - USER backup (Login failed): Incorrect password May 31 02:11:06 hostingremote proftpd[3106804]: 0.0.0.0 (49.247.44.49[49.247.44.49]) - USER backup (Login failed): Incorrect password May 31 02:08:16 hostingremote proftpd[3105184]: 0.0.0.0 (27.115.107.234[27.115.107.234]) - USER backup (Login failed): Incorrect password May 31 02:12:31 hostingremote proftpd[3107141]: 0.0.0.0 (217.160.78.84[217.160.78.84]) - USER backup (Login failed): Incorrect password May 31 02:09:04 hostingremote proftpd[3105348]: 0.0.0.0 (103.173.204.239[103.173.204.239]) - USER backup (Login failed): Incorrect password IP Addresses Blocked: 45.10.151.248 (TR/Turkey/plesk.proces.com.tr) show less	Port Scan
🇩🇪 rh24	2026-05-30 19:31:10 (2 weeks ago)	49.247.44.49 (KR/South Korea/smtp1.ethan-alice.com), 10 distributed ftpd attacks on account [redacte ... show more 49.247.44.49 (KR/South Korea/smtp1.ethan-alice.com), 10 distributed ftpd attacks on account [redacted] show less	FTP Brute-Force Brute-Force
🇩🇪 LRob.fr	2026-05-26 00:00:51 (3 weeks ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇩🇪 R.G.	2026-05-25 07:49:39 (3 weeks ago)	49.247.44.49 (KR/South Korea/smtp1.ethan-alice.com), 7 distributed ftpd attacks on account [cloacked ... show more 49.247.44.49 (KR/South Korea/smtp1.ethan-alice.com), 7 distributed ftpd attacks on account [cloacked] in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: May 25 09:45:42 pure-ftpd[2390213]: (?@2a02:4780:28:b6eb::1) [WARNING] Authentication failed for user [cloacked] show less	Brute-Force
🇩🇪 LRob.fr	2026-05-25 01:00:15 (3 weeks ago)	FTP brute-force attack detected by Fail2Ban in plesk-proftpd jail	FTP Brute-Force
Anonymous	2026-05-24 22:37:10 (3 weeks ago)	49.247.44.49 (KR/South Korea/smtp1.ethan-alice.com), 10 distributed ftpd attacks on account [redacte ... show more 49.247.44.49 (KR/South Korea/smtp1.ethan-alice.com), 10 distributed ftpd attacks on account [redacted] show less	FTP Brute-Force Brute-Force
🇩🇪 ghostwarriors	2026-05-24 21:51:17 (3 weeks ago)	Unauthorized connection to FTP port 21	FTP Brute-Force Brute-Force

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.153.236.237

🇭🇰 165.154.62.128

🇿🇦 102.129.59.80

🇺🇸 20.169.107.26

🇺🇸 20.119.86.71

🇰🇷 221.162.3.119

🇬🇧 193.163.125.119

🇨🇳 180.119.209.61

🇫🇮 178.20.210.137

🇫🇮 147.185.133.232

🇷🇴 141.98.83.240

🇨🇳 139.170.73.228

🇭🇰 118.193.44.212

🇫🇷 91.196.152.182

🇵🇹 89.153.136.156

🇳🇱 45.74.59.3

🇨🇳 221.228.10.71

🇬🇧 193.163.125.73

🇮🇳 103.141.116.211

🇫🇷 91.196.152.193