JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.180.212.234

121.180.212.234 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 94%: ?

94%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Yeongdeok, Gyeongsangbuk-do

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.180.212.234

Whois 121.180.212.234

IP Abuse Reports for 121.180.212.234:

This IP address has been reported a total of 51 times from 33 distinct sources. 121.180.212.234 was first reported on March 9th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-10 23:16:03 (4 hours ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇦🇹 AustrianSimon	2026-07-10 07:44:47 (20 hours ago)	10 Jul 2026 07:44:47UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 10 Jul 2026 07:44:47UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 121.180.212.234 show less	Brute-Force
🇺🇸 Vasili Sviridov	2026-07-10 00:17:39 (1 day ago)	: Connection closed (auth failed, 1 attempts in 4 secs)	Brute-Force
🇷🇴 clauss	2026-07-09 15:40:53 (1 day ago)	IP reached maximum auth failures for a one day block	Brute-Force
🇺🇸 NXTwoThou	2026-07-08 05:34:16 (2 days ago)	POP3	Port Scan
🇷🇴 clauss	2026-07-07 14:57:47 (3 days ago)	IP reached maximum auth failures for a one day block	Brute-Force
🇨🇦 Mediashaker	2026-07-07 12:07:09 (3 days ago)	(pop3d) Failed POP3 login from 121.180.212.234 (KR/South Korea/-)	Brute-Force
🇬🇧 Hobby Bob	2026-07-06 02:21:58 (5 days ago)	Jul 6 03:21:58 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in ... show more Jul 6 03:21:58 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=121.180.212.234, lip=X.X.X.X session= show less	Port Scan Hacking
🇮🇩 sockominfo	2026-07-05 17:00:53 (5 days ago)	Zimbra: Login failures from malicious IP: 121.180.212.234. Threat Score: 6.4/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 121.180.212.234. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-05 16:00:11 (5 days ago)	Zimbra: Login failures from malicious IP: 121.180.212.234. Threat Score: 6/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 121.180.212.234. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
Anonymous	2026-07-02 18:16:06 (1 week ago)	Authentication failure	Brute-Force
🇮🇩 sockominfo	2026-07-01 14:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 121.180.212.234. Threat Score: 6.1/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 121.180.212.234. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-01 13:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 121.180.212.234. Threat Score: 6.3/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 121.180.212.234. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-01 12:00:09 (1 week ago)	Zimbra: Login failures from malicious IP: 121.180.212.234. Threat Score: 4.8/10 (MEDIUM). Reported b ... show more Zimbra: Login failures from malicious IP: 121.180.212.234. Threat Score: 4.8/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇫🇷 Kraften	2026-06-28 16:57:27 (1 week ago)	Dovecot imap-login ...	DDoS Attack Brute-Force

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.242.234.37

🇹🇼 198.235.24.65

🇬🇧 193.163.125.77

🇧🇴 189.28.75.19

🇧🇷 186.193.211.7

🇵🇾 181.124.112.132

🇧🇷 179.48.125.79

🇷🇺 178.178.194.135

🇺🇸 162.217.100.196

🇺🇸 147.185.132.252

🇨🇳 120.48.67.104

🇰🇷 115.91.48.142

🇫🇷 91.231.89.156

🇺🇸 65.49.1.166

🇵🇰 59.103.106.106

🇲🇾 49.124.149.53

🇺🇸 45.156.129.108

🇺🇸 45.156.129.107

🇬🇧 35.203.210.168

🇺🇸 35.130.111.98