JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.192.249.195

119.192.249.195 was found in our database!

This IP was reported 152 times. Confidence of Abuse is 100%: ?

100%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.192.249.195

Whois 119.192.249.195

IP Abuse Reports for 119.192.249.195:

This IP address has been reported a total of 152 times from 98 distinct sources. 119.192.249.195 was first reported on June 15th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 DocNetzwerk	2026-06-23 09:58:35 (1 hour ago)	(smtpauth) Failed SMTP AUTH login from 119.192.249.195 (KR/South Korea/-)	Brute-Force
🇸🇪 triplecode	2026-06-23 09:20:49 (2 hours ago)	Reported from hMailServer	Hacking
🇮🇩 xveil	2026-06-23 08:38:21 (2 hours ago)	2026-06-23T15:37:12.592109 mail-honeypot postfix/submission/smtpd[17967]: warning: unknown[119.192.2 ... show more 2026-06-23T15:37:12.592109 mail-honeypot postfix/submission/smtpd[17967]: warning: unknown[119.192.249.195]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇬🇷 setupgr	2026-06-23 06:44:53 (4 hours ago)	119.192.249.195 (KR/South Korea/Seoul/Seodaemun-gu/-/[AS4766 KIXS-AS-KR Korea Telecom]), 2 distribut ... show more 119.192.249.195 (KR/South Korea/Seoul/Seodaemun-gu/-/[AS4766 KIXS-AS-KR Korea Telecom]), 2 distributed smtpauth attacks on account [e.reservations] in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: 2026-06-23 09:44:51 dovecot_login authenticator failed for H=(cm-178.232.125.63.get.no) [119.192.249.195]:54136: 535 Incorrect authentication data (set_id=e.reservations) 2026-06-23 08:44:09 dovecot_login authenticator failed for H=([196.188.187.85]) [2.55.125.200]:51390: 535 Incorrect authentication data (set_id=e.reservations) IP Addresses Blocked: show less	Port Scan
🇮🇩 xveil	2026-06-23 06:31:07 (4 hours ago)	2026-06-23T13:31:05.194652 mail-honeypot postfix/submission/smtpd[5489]: warning: unknown[119.192.24 ... show more 2026-06-23T13:31:05.194652 mail-honeypot postfix/submission/smtpd[5489]: warning: unknown[119.192.249.195]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇬🇧 Aetherweb Ark	2026-06-23 06:11:10 (5 hours ago)	119.192.249.195 (KR/South Korea/-), N distributed smtpauth attacks on account in the last X secs	Brute-Force
🇭🇺 dd3589	2026-06-23 06:01:02 (5 hours ago)	2026-06-23T08:00:41+02:00 <masked> exim[770889]: fixed_login authenticator failed for (111-70-29-132 ... show more 2026-06-23T08:00:41+02:00 <masked> exim[770889]: fixed_login authenticator failed for (111-70-29-132.emome-ip.hinet.net) [119.192.249.195]: 535 Incorrect authentication data ([email protected]) show less	Brute-Force
🇩🇪 kreativstrecke	2026-06-23 04:08:36 (7 hours ago)	2026-06-23T06:08:35.427094+02:00 srv03 postfix/smtps/smtpd[4177345]: warning: unknown[119.192.249.19 ... show more 2026-06-23T06:08:35.427094+02:00 srv03 postfix/smtps/smtpd[4177345]: warning: unknown[119.192.249.195]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
Anonymous	2026-06-23 03:20:46 (8 hours ago)	This IP was detected by CrowdSec triggering local/postfix-sasl-persistent-brute	Email Spam Brute-Force
🇩🇪 FeG Deutschland	2026-06-23 02:38:03 (8 hours ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇬🇷 setupgr	2026-06-23 02:35:43 (8 hours ago)	(smtpauth) Failed SMTP AUTH login from 119.192.249.195 (KR/South Korea/Seoul/Seodaemun-gu/-/[AS4766 ... show more (smtpauth) Failed SMTP AUTH login from 119.192.249.195 (KR/South Korea/Seoul/Seodaemun-gu/-/[AS4766 KIXS-AS-KR Korea Telecom]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-06-23 05:35:42 dovecot_login authenticator failed for H=(vm-creative-db01.madavor.cl.zerolag.com) [119.192.249.195]:45982: 535 Incorrect authentication data (set_id=reservations) show less	Port Scan
🇩🇪 kreativstrecke	2026-06-23 01:40:31 (9 hours ago)	2026-06-23T03:40:29.351582+02:00 srv03 postfix/submission/smtpd[4134019]: warning: unknown[119.192.2 ... show more 2026-06-23T03:40:29.351582+02:00 srv03 postfix/submission/smtpd[4134019]: warning: unknown[119.192.249.195]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-06-23T03:40:30.632168+02:00 srv03 postfix/submission/smtpd[4134019]: lost connection after AUTH from unknown[119.192.249.195] ... show less	Brute-Force
🇮🇩 aaKenshin	2026-06-23 01:24:22 (9 hours ago)	Suspicious activity detected from IP 119.192.249.195 based on mailserver logs. Sample logs: 2026-06- ... show more Suspicious activity detected from IP 119.192.249.195 based on mailserver logs. Sample logs: 2026-06-23 09:17:50,594 INFO [qtp2102534528-93970] [name=*@.id;ip=172.16.0.182;oip=119.192.249.195;oport=35896;oproto=smtp;port=48808;soapId=1e116fcc;] SoapEngine - handler exception: authentication failed for [], LDAP error: - unable to ldap authenticate: invalid credentials 2026-06-23 09:17:50,594 INFO [qtp2102534528-93970] [name=@.id;ip=172.16.0.182;oip=119.192.249.195;oport=35896;oproto=smtp;port=48808;soapId=1e116fcc;] soap - AuthRequest elapsed=1 2026-06-23 09:24:21,797 INFO [qtp2102534528-93916] [ip=172.16.0.182;oip=119.192.249.195;oport=59326;oproto=smtp;port=34900;soapId=1e116fe6;] account - Error occurred during authentication: authentication failed for [*]. Reason: account not found. 2026-06-23 09:24:21,797 INFO [qtp2102534528-93916] [ip=172.16.0.182;oip=119.192.249.195;oport=59326;oproto=smtp;port=34900;soapId=1e116fe6;] SoapEngine - handler exception: authentication fai show less	Brute-Force
🇦🇺 brocococonut	2026-06-22 22:35:46 (12 hours ago)	2026-06-22 21:58:34 dovecot_login authenticator failed for ([5.26.37.10]) [119.192.249.195]: 535 Inc ... show more 2026-06-22 21:58:34 dovecot_login authenticator failed for ([5.26.37.10]) [119.192.249.195]: 535 Incorrect authentication data ([email protected]) 2026-06-22 20:43:11 dovecot_login authenticator failed for ([103.50.5.94]) [119.192.249.195]: 535 Incorrect authentication data ([email protected]) 2026-06-22 21:58:34 dovecot_login authenticator failed for ([5.26.37.10]) [119.192.249.195]: 535 Incorrect authentication data ([email protected]) 2026-06-23 08:35:45 dovecot_login authenticator failed for ([179.183.114.175]) [119.192.249.195]: 535 Incorrect authentication data (set_id=abuse) 2026-06-23 08:35:45 dovecot_login authenticator failed for ([179.183.114.175]) [119.192.249.195]: 535 Incorrect authentication data (set_id=abuse) ... show less	Brute-Force
🇫🇮 danskefilm.dk	2026-06-22 21:46:01 (13 hours ago)	SMTP login brute-force attempt.	Brute-Force

Showing 1 to 15 of 152 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.241.247.227

🇰🇷 221.163.5.228

🇺🇸 208.109.52.213

🇳🇱 43.239.90.243

🇺🇸 23.251.44.119

🇨🇳 222.91.124.34

🇨🇳 222.88.163.204

🇦🇲 217.113.21.113

🇨🇱 170.82.129.8

🇮🇳 159.65.148.158

🇺🇸 107.155.88.70

🇮🇳 42.106.136.243

🇮🇩 36.94.56.242

🇺🇸 24.105.160.100

🇨🇳 222.247.32.186

🇨🇳 222.222.168.9

🇨🇳 222.73.56.10

🇩🇪 172.253.1.217

🇧🇷 170.238.160.191

🇸🇬 165.22.60.26