JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.164.252.17

112.164.252.17 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 31%: ?

31%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Jeju City, Jeju-do

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.164.252.17

Whois 112.164.252.17

IP Abuse Reports for 112.164.252.17:

This IP address has been reported a total of 8 times from 8 distinct sources. 112.164.252.17 was first reported on March 9th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-07-24 17:57:00 (5 hours ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-23 05:52:34 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 112.164.252.17 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 112.164.252.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 01:52:27.205972 2026] [security2:error] [pid 2146706:tid 2146706] [client 112.164.252.17:48963] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.reyadecostarica.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.reyadecostarica.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amGsG3hfGZwCt-ztI7hpewAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-19 22:37:23 (5 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇩🇪 MusicLibrary	2026-07-06 12:57:53 (2 weeks ago)	Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)	Bad Web Bot Web App Attack
🇨🇿 lp	2026-06-05 04:48:45 (1 month ago)	SSH Brute force: 1 attempts were recorded from 112.164.252.17 2026-06-05T05:17:16+02:00 Connection c ... show more SSH Brute force: 1 attempts were recorded from 112.164.252.17 2026-06-05T05:17:16+02:00 Connection closed by authenticating user root 112.164.252.17 port 47225 [preauth] show less	Brute-Force SSH
🇮🇹 VHosting	2026-04-14 01:18:05 (3 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇨🇭 Origon	2026-03-19 04:49:50 (4 months ago)	NOQUEUE - IP: 112.164.252.17 - Mar 19 05:49:50 plesk postfix/smtpd[3050743]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 112.164.252.17 - Mar 19 05:49:50 plesk postfix/smtpd[3050743]: NOQUEUE: reject: RCPT from unknown[112.164.252.17]: 554 5.7.1 Service unavailable; Client host [112.164.252.17] blocked using dnsbl-2.uceprotect.net; Net 112.160.0.0/13 is UCEPROTECT-Level2 listed because 842 impacts are seen from KIXS-AS-KR Korea Telecom, KR/AS4766 there. See: http://www.uceprotect.net/rblcheck.php?ipr=112.164.252.17 / Net 112.160.0.0/12 is UCEPROTECT-Level2 listed because 981 impacts are seen from KIXS-AS-KR Korea Telecom, KR/AS4766 there. See: http://www.uceprotect.net/rblcheck.php?ipr=112.164.252.17; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<mail-qv1-f207.google.com> show less	Email Spam
Anonymous	2026-03-09 23:11:35 (4 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.224.128.16

🇺🇸 135.237.126.230

🇺🇸 45.74.252.159

🇯🇵 38.207.136.155

🇧🇷 200.196.50.91

🇨🇳 180.100.217.164

🇩🇪 162.158.86.61

🇱🇧 80.83.29.53

🇺🇸 40.124.175.184

🇧🇷 2800:1e0:1025:404:9999::181

🇫🇷 217.128.80.129

🇬🇧 198.244.226.207

🇺🇸 185.226.196.20

🇵🇱 176.53.159.197

🇺🇸 172.253.251.58

🇮🇩 163.7.9.55

🇺🇸 162.243.147.237

🇺🇸 103.219.170.37

🇺🇸 100.29.192.40

🇺🇿 95.214.211.154