JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.161.27.117

112.161.27.117 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 100%: ?

100%

ISP	Korea Telecom
Usage Type	Mobile ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.161.27.117

Whois 112.161.27.117

IP Abuse Reports for 112.161.27.117:

This IP address has been reported a total of 139 times from 96 distinct sources. 112.161.27.117 was first reported on September 6th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 chris_yooo	2026-09-19 14:54:14 (2 hours ago)	Sep 19 16:54:12 isp postfix/smtps/smtpd[2883633]: warning: unknown[112.161.27.117]: SASL LOGIN authe ... show more Sep 19 16:54:12 isp postfix/smtps/smtpd[2883633]: warning: unknown[112.161.27.117]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=matsuguchinobuokobe Sep 19 16:54:13 isp postfix/smtps/smtpd[2883633]: lost connection after AUTH from unknown[112.161.27.117] Sep 19 16:54:13 isp postfix/smtps/smtpd[2883633]: disconnect from unknown[112.161.27.117] ehlo=1 auth=0/1 commands=1/2 ... show less	Spoofing Brute-Force
🇩🇪 jasperedv.de	2026-09-19 13:45:43 (3 hours ago)	Failed SMTP Login - Brutforcing	Email Spam Brute-Force
🇩🇪 wlt-blocker	2026-09-19 11:59:52 (5 hours ago)	Attempts to login to mail server with wrong username and/or password	Brute-Force
Anonymous	2026-09-19 11:26:58 (5 hours ago)	Sep 18 17:21:00 mx1 postfix/smtps/smtpd[894]: warning: unknown[112.161.27.117]: SASL LOGIN authentic ... show more Sep 18 17:21:00 mx1 postfix/smtps/smtpd[894]: warning: unknown[112.161.27.117]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 09:06:55 mx1 postfix/smtps/smtpd[31663]: warning: unknown[112.161.27.117]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 13:26:58 mx1 postfix/smtps/smtpd[3010]: warning: unknown[112.161.27.117]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force
🇫🇷 dwmp	2026-09-19 10:47:43 (6 hours ago)	Sep 19 10:10:31 webcore postfix/smtpd[1140016]: warning: unknown[112.161.27.117]: SASL LOGIN authent ... show more Sep 19 10:10:31 webcore postfix/smtpd[1140016]: warning: unknown[112.161.27.117]: SASL LOGIN authentication failed: authentication failure Sep 19 10:30:55 webcore postfix/smtpd[1142026]: warning: unknown[112.161.27.117]: SASL LOGIN authentication failed: authentication failure Sep 19 12:47:43 webcore postfix/smtpd[1168108]: warning: unknown[112.161.27.117]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇩🇪 kreativstrecke	2026-09-19 10:43:09 (6 hours ago)	2026-09-19T12:43:07.191280+02:00 srv02 postfix/smtps/smtpd[1668547]: warning: unknown[112.161.27.117 ... show more 2026-09-19T12:43:07.191280+02:00 srv02 postfix/smtps/smtpd[1668547]: warning: unknown[112.161.27.117]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-09-19T12:43:08.413917+02:00 srv02 postfix/smtps/smtpd[1668547]: lost connection after AUTH from unknown[112.161.27.117] 2026-09-19T12:43:08.414028+02:00 srv02 postfix/smtps/smtpd[1668547]: disconnect from unknown[112.161.27.117] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
Anonymous	2026-09-19 10:18:09 (6 hours ago)	2026-09-19T13:18:09.136252+03:00 shell.l3.fi postfix/smtps/smtpd[541162]: warning: unknown[112.161.2 ... show more 2026-09-19T13:18:09.136252+03:00 shell.l3.fi postfix/smtps/smtpd[541162]: warning: unknown[112.161.27.117]: SASL LOGIN authentication failed: UGFzc3dvcmQ6, sasl_username=roviomana22 2026-09-19T13:18:09.136615+03:00 shell.l3.fi postfix/smtps/smtpd[541162]: disconnect from unknown[112.161.27.117] ehlo=1 auth=0/1 commands=1/2 ... show less	Email Spam Brute-Force
🇩🇪 R.G.	2026-09-19 09:51:08 (7 hours ago)	112.161.27.117 (KR/South Korea/-), 7 distributed smtpauth attacks on account [cloacked] in the last ... show more 112.161.27.117 (KR/South Korea/-), 7 distributed smtpauth attacks on account [cloacked] in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: show less	Brute-Force
Anonymous	2026-09-19 09:28:21 (7 hours ago)	Authentication failure	Brute-Force
Anonymous	2026-09-19 07:28:03 (9 hours ago)	This IP was detected by CrowdSec triggering local/postfix-sasl-no-ptr-ban	Email Spam Brute-Force
Anonymous	2026-09-19 06:09:12 (10 hours ago)	2026-09-19T07:09:11.364181+01:00 [masked] postfix/smtps/smtpd[1569900]: warning: unknown[112.161.27. ... show more 2026-09-19T07:09:11.364181+01:00 [masked] postfix/smtps/smtpd[1569900]: warning: unknown[112.161.27.117]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=pamela@[masked] ... show less	Brute-Force
🇫🇷 tecnicorioja	2026-09-19 06:02:48 (11 hours ago)	SASL LOGIN authentication failed Sep 19 04:10:06	Brute-Force
🇳🇿 andkiwi	2026-09-19 05:52:04 (11 hours ago)	Unauthorised attempted login to SUBMISSION server	Brute-Force
🇩🇪 www.fransveldman.world	2026-09-19 05:24:59 (11 hours ago)	Sep 19 05:24:57 mail postfix/submission/smtpd[2490762]: warning: unknown[112.161.27.117]: SASL LOGIN ... show more Sep 19 05:24:57 mail postfix/submission/smtpd[2490762]: warning: unknown[112.161.27.117]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 05:24:58 mail postfix/submission/smtpd[2490762]: lost connection after AUTH from unknown[112.161.27.117] ... show less	Brute-Force Email Spam
🇫🇷 adlp.org	2026-09-19 04:52:34 (12 hours ago)	Sep 19 04:52:25 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;112.161.27.117;[UNAVA ... show more Sep 19 04:52:25 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;112.161.27.117;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Sep 19 04:52:28 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;112.161.27.117;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Sep 19 04:52:31 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;112.161.27.117;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill ... show less	Brute-Force

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇨 190.10.189.68

🇱🇹 62.60.130.253

🇮🇳 160.30.39.50

🇦🇺 134.199.159.238

🇺🇸 97.74.236.4

🇩🇪 63.176.8.218

🇮🇩 43.157.200.91

🇬🇧 35.203.210.184

🇰🇷 14.34.130.204

🇩🇪 213.209.159.241

🇧🇷 179.190.100.143

🇺🇸 156.232.10.218

🇺🇸 107.115.39.177

🇫🇷 104.165.180.151

🇳🇱 91.148.244.131

🇳🇱 81.171.72.93

🇰🇿 212.154.234.9

🇨🇳 211.155.100.9

🇭🇰 206.238.40.37

🇧🇷 205.210.31.130