JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.163.11.48

121.163.11.48 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 45%: ?

45%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Munsan, Gyeonggi-do

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.163.11.48

Whois 121.163.11.48

IP Abuse Reports for 121.163.11.48:

This IP address has been reported a total of 21 times from 16 distinct sources. 121.163.11.48 was first reported on July 22nd 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 900cm	2026-10-11 19:27:16 (1 week ago)	Oct 11 21:27:16 raspberrypi sshd[2381]: Failed password for root from 121.163.11.48 port 59516 ssh2 ... show more Oct 11 21:27:16 raspberrypi sshd[2381]: Failed password for root from 121.163.11.48 port 59516 ssh2 ... show less	Port Scan Brute-Force SSH
🇮🇳 Parth Maniar	2026-10-04 07:50:17 (2 weeks ago)	This IP address carried out 4 port scanning attempts on 03-10-2026. For more information or to repor ... show more This IP address carried out 4 port scanning attempts on 03-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇮🇳 Parth Maniar	2026-10-04 07:10:10 (2 weeks ago)	This IP address carried out 1 SSH credential attack (attempts) on 03-10-2026. For more information o ... show more This IP address carried out 1 SSH credential attack (attempts) on 03-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇺🇸 copyyy	2026-10-03 05:33:55 (2 weeks ago)	sshd[191984]: Connection attempt from 121.163.11.48 port 41484 ssh2; SSH honeypot on TCP/2222.	Brute-Force SSH
🇺🇸 SANYALnet Labs	2026-10-01 21:01:54 (3 weeks ago)	Oct 1 20:58:50 gigabyte-h410m sshd[864674]: User root from 121.163.11.48 not allowed because not li ... show more Oct 1 20:58:50 gigabyte-h410m sshd[864674]: User root from 121.163.11.48 not allowed because not listed in AllowUsers Oct 1 20:58:52 gigabyte-h410m sshd[864674]: Failed password for invalid user root from 121.163.11.48 port 50558 ssh2 Oct 1 20:58:53 gigabyte-h410m sshd[864674]: Connection closed by invalid user root 121.163.11.48 port 50558 [preauth] ... show less	Brute-Force
🇮🇹 ipald	2026-09-28 15:38:45 (3 weeks ago)	MIoT SecOps: Touched the SSH honeypot	Port Scan Brute-Force SSH
🇺🇸 IndigoRidge	2026-09-25 09:38:40 (3 weeks ago)	121.163.11.48 - - [25/Sep/2026:05:38:29 -0400] "POST /wp-login.php HTTP/1.1" 200 15148 "https://ete1 ... show more 121.163.11.48 - - [25/Sep/2026:05:38:29 -0400] "POST /wp-login.php HTTP/1.1" 200 15148 "https://ete1.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 121.163.11.48 - - [25/Sep/2026:05:38:32 -0400] "POST /wp-login.php HTTP/1.1" 200 15148 "https://ete1.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 121.163.11.48 - - [25/Sep/2026:05:38:34 -0400] "POST /wp-login.php HTTP/1.1" 200 15148 "https://ete1.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 121.163.11.48 - - [25/Sep/2026:05:38:37 -0400] "POST /wp-login.php HTTP/1.1" 200 15148 "https://ete1.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 121.163.11.48 - - [25/Sep/2026:05:38:39 -0400] "POST /wp-login.php HTTP/1.1" 200 15148 "https://ete1.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firef ... show less	Web App Attack
🇨🇦 polycoda	2026-09-22 23:25:37 (1 month ago)	AutoBlock: 📂 Directory Listings (Decay-Based) - 📊 Admin Panel Scanning (Decay-Based) - ❌ Excessive 4 ... show more AutoBlock: 📂 Directory Listings (Decay-Based) - 📊 Admin Panel Scanning (Decay-Based) - ❌ Excessive 40X Errors (Decay-Based) show less	Bad Web Bot Web App Attack
🇩🇪 xavier-momain.eu	2026-09-22 05:03:46 (1 month ago)	CrowdSec ban — scenario: crowdsecurity/ssh-bf \| report #2	Brute-Force SSH
🇩🇪 xavier-momain.eu	2026-09-22 04:01:33 (1 month ago)	CrowdSec ban — scenario: crowdsecurity/ssh-slow-bf	Brute-Force SSH
🇨🇦 DRI	2026-09-22 02:23:37 (1 month ago)	Web attack/Malicious activity detected	Web App Attack
🇺🇸 bigscoots.com	2026-09-21 07:43:35 (1 month ago)	121.163.11.48 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs ... show more 121.163.11.48 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 21 02:35:57 21154 sshd[17363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.221.136.53 user=root Sep 21 02:35:59 21154 sshd[17363]: Failed password for root from 77.221.136.53 port 41811 ssh2 Sep 21 02:43:06 21154 sshd[19947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.190.143.229 user=root Sep 21 02:11:47 21154 sshd[9485]: Failed password for root from 121.163.11.48 port 48996 ssh2 Sep 21 02:11:45 21154 sshd[9485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.163.11.48 user=root IP Addresses Blocked: 77.221.136.53 (SE/Sweden/exoticbite.ptr.network) 189.190.143.229 (MX/Mexico/dsl-229-143-190-189-dynamic.prod-infinitum.com.mx) show less	Brute-Force SSH
🇳🇱 stom	2026-09-20 18:44:52 (1 month ago)	2026-09-20T18:44:49.003496 socky.stom66.co.uk proftpd[2798031]: session[2798031] 0.0.0.0 (121.163.11 ... show more 2026-09-20T18:44:49.003496 socky.stom66.co.uk proftpd[2798031]: session[2798031] 0.0.0.0 (121.163.11.48[121.163.11.48]): USER admin: no such user found from 121.163.11.48 [121.163.11.48] to ::ffff:5.79.80.26:2222 ... show less	Brute-Force FTP Brute-Force
🇩🇪 Kitki30.com	2026-09-18 15:16:49 (1 month ago)	SSH Login Failed (server 2). Log: 2026-09-18T15:16:47.457155+00:00 nic0 sshd[378088]: Invalid user u ... show more SSH Login Failed (server 2). Log: 2026-09-18T15:16:47.457155+00:00 nic0 sshd[378088]: Invalid user user from 121.163.11.48 port 53788 show less	Brute-Force SSH Port Scan
🇫🇷 Clement Desouche	2026-09-18 14:28:56 (1 month ago)	SSH brute-force: 2 failed login(s) as admin (sshd)	Brute-Force SSH

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇴🇲 154.41.126.47

🇮🇹 151.33.39.15

🇭🇰 114.111.53.214

🇩🇪 109.160.32.170

🇺🇸 20.169.84.230

🇧🇷 177.8.134.180

🇺🇸 173.255.214.62

🇳🇱 77.239.124.49

🇮🇳 45.79.123.180

🇨🇴 38.191.211.75

🇺🇸 23.95.186.183

🇰🇷 218.149.157.240

🇳🇱 195.178.110.227

🇺🇸 185.118.133.8

🇯🇵 172.104.83.195

🇬🇧 165.154.128.199

🇿🇦 156.155.17.12

🇸🇬 152.42.220.29

🇨🇳 150.139.201.247

🇹🇭 118.194.251.144