AbuseIPDB » 1.213.164.27

1.213.164.27 was found in our database!

This IP was reported 2,375 times. Confidence of Abuse is 100%: ?

100%

ISP	LG DACOM Corporation
Usage Type	Commercial
ASN	AS3786
Domain Name	dacom.co.kr
Country	Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 1.213.164.27

Whois 1.213.164.27

IP Abuse Reports for 1.213.164.27:

This IP address has been reported a total of 2,375 times from 283 distinct sources. 1.213.164.27 was first reported on April 23rd 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
lintelcorpo	2025-01-24 10:03:25 (1 hour ago)	Yesterday, this IP was the source of 7 failed authentications targeting 7 unique usernames on our Ma ... show moreYesterday, this IP was the source of 7 failed authentications targeting 7 unique usernames on our Mail Server. show less	Brute-Force
Paul Smith	2025-01-24 07:09:38 (3 hours ago)	Email Auth Brute force attack 2/2 in last day	Brute-Force
solution.it	2025-01-24 06:45:11 (4 hours ago)		Brute-Force
didevi	2025-01-24 02:33:54 (8 hours ago)	2025-01-24T03:33:53.962510+01:00 mail01 postfix/smtps/smtpd[2988913]: warning: unknown[1.213.164.27] ... show more2025-01-24T03:33:53.962510+01:00 mail01 postfix/smtps/smtpd[2988913]: warning: unknown[1.213.164.27]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
Anonymous	2025-01-23 22:13:13 (12 hours ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
bmino.pl	2025-01-23 20:53:07 (14 hours ago)	Autoban 1.213.164.27 BLOCK ACCESS	Brute-Force
rtbh.com.tr	2025-01-23 20:50:32 (14 hours ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
dsmidge	2025-01-23 18:24:01 (16 hours ago)	Jan 23 19:23:46 server postfix/smtpd[3255841]: connect from unknown[1.213.164.27] Jan 23 19:24 ... show moreJan 23 19:23:46 server postfix/smtpd[3255841]: connect from unknown[1.213.164.27] Jan 23 19:24:00 server postfix/smtpd[3255841]: lost connection after AUTH from unknown[1.213.164.27] ... show less	Email Spam
dblanque	2025-01-23 17:42:00 (17 hours ago)	Fail2ban - Postfix Ban Event Triggered. (IP: 1.213.164.27)	Email Spam Brute-Force
dwmp	2025-01-23 17:25:00 (17 hours ago)	Jan 23 12:06:48 webcore postfix/smtpd[653028]: warning: unknown[1.213.164.27]: SASL LOGIN authentica ... show moreJan 23 12:06:48 webcore postfix/smtpd[653028]: warning: unknown[1.213.164.27]: SASL LOGIN authentication failed: authentication failure Jan 23 13:41:45 webcore postfix/smtpd[678097]: warning: unknown[1.213.164.27]: SASL LOGIN authentication failed: authentication failure Jan 23 18:25:00 webcore postfix/smtpd[758448]: warning: unknown[1.213.164.27]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
gomasy	2025-01-23 15:29:23 (19 hours ago)	2025-01-24T00:29:22.748535+09:00 ssv01 auth[3719361]: pam_unix(dovecot:auth): authentication failure ... show more2025-01-24T00:29:22.748535+09:00 ssv01 auth[3719361]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=********** rhost=1.213.164.27 ... show less	Brute-Force
eskilbrun	2025-01-23 14:37:52 (20 hours ago)	2025-01-23T15:37:52.104498linode1.eskil.net postfix/smtpd[343942]: NOQUEUE: reject: RCPT from unknow ... show more2025-01-23T15:37:52.104498linode1.eskil.net postfix/smtpd[343942]: NOQUEUE: reject: RCPT from unknown[1.213.164.27]: 554 5.7.1 Service unavailable; Client host [1.213.164.27] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/1.213.164.27 / Listed by XBL, see https://check.spamhaus.org/query/ip/1.213.164.27 / Listed by PBL, see https://check.spamhaus.org/query/ip/1.213.164.27; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[51.15.184.101]> 2025-01-23T15:37:52.104868linode1.eskil.net postfix/smtpd[343942]: NOQUEUE: reject: RCPT from unknown[1.213.164.27]: 554 5.7.1 Service unavailable; Client host [1.213.164.27] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/1.213.164.27 / Listed by XBL, see https://check.spamhaus.org/query/ip/1.213.164.27 / Listed by PBL, see https://check.spamhaus.org/query/ip/1.213.164.27; from=<[email protected]> to=<[email protected]> proto= ... show less	Brute-Force
Swiptly	2025-01-23 13:13:02 (21 hours ago)	Exim Login attempts ...	Email Spam Brute-Force
quarba	2025-01-23 11:03:44 (1 day ago)	Brute force SMTP login attempted	Brute-Force
Anonymous	2025-01-23 10:06:48 (1 day ago)	11 Login Attempts	Port Scan Brute-Force