AbuseIPDB » 1.214.42.172

1.214.42.172 was found in our database!

This IP was reported 1,169 times. Confidence of Abuse is 100%: ?

100%

ISP	LG Dacom Corporation
Usage Type	Unknown
Domain Name	uplus.co.kr
Country	Korea (the Republic of)
City	Seoul, Seoul-teukbyeolsi

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 1.214.42.172

Whois 1.214.42.172

IP Abuse Reports for 1.214.42.172:

This IP address has been reported a total of 1,169 times from 103 distinct sources. 1.214.42.172 was first reported on December 3rd 2023, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Kinsei Engineering Inc.	2024-09-14 20:27:20 (16 hours ago)	UFW:High-frequency access to unused ports	Port Scan
HighSports	2024-09-14 14:29:55 (22 hours ago)	Email Auth Brute force attack 8/6 in last day	Brute-Force
TZNOC	2024-09-14 12:37:23 (1 day ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
rtbh.com.tr	2024-09-13 20:54:41 (1 day ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
HighSports	2024-09-13 14:27:38 (1 day ago)	Email Auth Brute force attack 8/6 in last day	Brute-Force
Burayot	2024-09-13 07:17:23 (2 days ago)	LF_POP3D: (pop3d) Failed POP3 login from 1.214.42.172 (KR/South Korea/-): 2 in the last 3600 secs	Brute-Force
rtbh.com.tr	2024-09-12 20:54:43 (2 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
HighSports	2024-09-12 14:25:26 (2 days ago)	Email Auth Brute force attack 8/6 in last day	Brute-Force
Anonymous	2024-09-12 13:13:33 (2 days ago)	Sep 12 04:28:47 mail fail2ban.actions [612]: NOTICE [dovecot] Ban 1.214.42.172 Sep 12 ... show moreSep 12 04:28:47 mail fail2ban.actions [612]: NOTICE [dovecot] Ban 1.214.42.172 Sep 12 12:58:38 mail fail2ban.actions [612]: NOTICE [dovecot] Ban 1.214.42.172 Sep 12 21:13:29 mail fail2ban.actions [612]: NOTICE [dovecot] Ban 1.214.42.172 show less	Brute-Force SSH
Anonymous	2024-09-12 04:58:39 (3 days ago)	Sep 12 12:16:23 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<ar ... show moreSep 12 12:16:23 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=1.214.42.172, lip=192.168.0.14, session=<eYKdXuQh5tQB1iqs> Sep 12 12:16:23 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=1.214.42.172, lip=192.168.0.14, session=<nOGeXuQh8tQB1iqs> Sep 12 12:58:38 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=1.214.42.172, lip=192.168.0.14, session=<Phqq9eQhlpkB1iqs> Sep 12 12:58:38 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=1.214.42.172, lip=192.168.0.14, session=<+IKr9eQhopkB1iqs> show less	Email Spam Spoofing
ki3	2024-09-12 02:44:55 (3 days ago)	Fail2Ban: Dovecot Attack	Brute-Force SSH
Mendip_Defender	2024-09-12 02:13:06 (3 days ago)	Sep 12 02:05:14 jackstringer dovecot: pop3-login: Disconnected: Connection closed: read(size=973) fa ... show moreSep 12 02:05:14 jackstringer dovecot: pop3-login: Disconnected: Connection closed: read(size=973) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=1.214.42.172, lip=188.246.206.60, session=<bNvfsuEhGqgB1iqs> Sep 12 03:13:12 jackstringer dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=1.214.42.172, lip=188.246.206.60, session=<SOnrpeIhUI4B1iqs> ... show less	Brute-Force
ghostwarriors	2024-09-12 00:20:40 (3 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
mueller-nils.com	2024-09-11 23:01:37 (3 days ago)	Sep 12 01:01:22 : pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ... show moreSep 12 01:01:22 : pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.42.172 user=root Sep 12 01:01:24 : Failed password for root from 1.214.42.172 port 53424 ssh2 Sep 12 01:01:26 : pam_unix(sshd:auth): authe show less	Brute-Force SSH
Yepngo	2024-09-11 21:37:00 (3 days ago)	Sep 11 23:36:54 ns3006402 sshd[2374704]: Failed password for root from 1.214.42.172 port 47996 ssh2< ... show moreSep 11 23:36:54 ns3006402 sshd[2374704]: Failed password for root from 1.214.42.172 port 47996 ssh2 Sep 11 23:36:57 ns3006402 sshd[2374710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.42.172 user=root Sep 11 23:36:59 ns3006402 sshd[2374710]: Failed password for root from 1.214.42.172 port 55082 ssh2 ... show less	Brute-Force SSH