JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

14.34.255.150

Activity Trending Down

Abuse Confidence Score

40% Elevated

65 reports

34 reporters · latest 1 week ago

ISP: Korea Telecom
Usage Type: Fixed Line ISP
ASN: AS4766
Domain Name: kt.com
Country: 🇰🇷 Korea (the Republic of)
City: Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

65 from 34 distinct reporters

First reported

July 5th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 18 🇹🇷 Turkey 7 🇦🇺 Australia 4

Most common categories Brute-Force 30 SSH 28 Web App Attack 12 Hacking 10 Port Scan 2

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Mangelot Hosting	2026-11-02 08:07:08 UTC · (1 week ago)	(dovecot_invalid_user) srv103 Dovecot login on non-existent account 14.34.255.150 (KR/South Korea/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Nov 2 09:07:05 dovecot[3157760]: imap-login: Login aborted: L ... show more (dovecot_invalid_user) srv103 Dovecot login on non-existent account 14.34.255.150 (KR/South Korea/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Nov 2 09:07:05 dovecot[3157760]: imap-login: Login aborted: Logged out (auth failed, 1 attempts in 2 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=14.34.255.150, lip=0.0.0.x, TLS, session=<Fi5soUZfNcAOIv+W> show less	Web App Attack
🇹🇷 neron	2026-10-21 16:34:58 UTC · (3 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇳🇱 Mangelot Hosting	2026-10-21 14:56:51 UTC · (3 weeks ago)	(dovecot_invalid_user) srv201 Dovecot login on non-existent account 14.34.255.150 (KR/South Korea/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Oct 21 16:56:46 dovecot[862]: imap-login: Login aborted: Conne ... show more (dovecot_invalid_user) srv201 Dovecot login on non-existent account 14.34.255.150 (KR/South Korea/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Oct 21 16:56:46 dovecot[862]: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=14.34.255.150, lip=0.0.0.x, TLS, session=<4xZp9Fpe7uIOIv+W> show less	Web App Attack
🇹🇷 neron	2026-10-20 08:00:21 UTC · (3 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇮🇩 sockominfo	2026-10-19 20:00:53 UTC · (3 weeks ago)	Email: Login failures from Bad Reputation IP: 14.34.255.150. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishi ... show more Email: Login failures from Bad Reputation IP: 14.34.255.150. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-10-19 19:00:09 UTC · (3 weeks ago)	Email: Login failures from Bad Reputation IP: 14.34.255.150. Threat Score: 5.4/10 (MEDIUM). Reported by TangerangKota-CSIRT	Hacking Web App Attack
🇦🇹 AustrianSimon	2026-10-16 15:42:53 UTC · (3 weeks ago)	16 Oct 2026 15:42:53UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 14.34.255.150	Brute-Force
🇩🇪 xavier-momain.eu	2026-10-02 15:18:00 UTC · (1 month ago)	CrowdSec ban — scenario: ssh:bruteforce \| report #3	Brute-Force SSH
🇺🇾 0xJ03l	2026-10-01 01:05:30 UTC · (1 month ago)	SSH honeypot. user="root" password="admin"	Brute-Force SSH
Anonymous	2026-09-30 16:17:52 UTC · (1 month ago)	14.34.255.150 (KR/South Korea/-), 5 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 1 02:16:39 syd2 sshd[557676]: Invalid user admin from 171.248.101.9 port 53440 Oct ... show more 14.34.255.150 (KR/South Korea/-), 5 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 1 02:16:39 syd2 sshd[557676]: Invalid user admin from 171.248.101.9 port 53440 Oct 1 02:16:42 syd2 sshd[557676]: Failed password for invalid user admin from 171.248.101.9 port 53440 ssh2 Oct 1 02:17:43 syd2 sshd[557841]: Invalid user admin from 41.250.51.81 port 38888 Oct 1 02:13:20 syd2 sshd[557066]: Invalid user admin from 14.34.255.150 port 45357 Oct 1 02:13:22 syd2 sshd[557066]: Failed password for invalid user admin from 14.34.255.150 port 45357 ssh2 IP Addresses Blocked: 171.248.101.9 (VN/Vietnam/dynamic-ip-adsl.viettel.vn) 41.250.51.81 (MA/Morocco/-) show less	Port Scan
Anonymous	2026-09-29 10:46:37 UTC · (1 month ago)	Invalid user support from 14.34.255.150 port 47399	Brute-Force SSH
Anonymous	2026-09-29 10:46:37 UTC · (1 month ago)	Invalid user support from 14.34.255.150 port 47399	Brute-Force SSH
🇹🇷 neron	2026-09-29 07:51:38 UTC · (1 month ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 xavier-momain.eu	2026-09-27 07:08:29 UTC · (1 month ago)	CrowdSec ban — scenario: ssh:bruteforce \| report #2	Brute-Force SSH
🇹🇷 neron	2026-09-26 14:12:45 UTC · (1 month ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇿 185.87.121.1

🇺🇸 162.216.149.148

🇰🇷 118.36.222.243

🇦🇪 80.227.98.94

🇸🇬 51.79.212.43

🇬🇧 35.203.211.184

🇬🇧 31.14.254.119

🇩🇴 200.88.221.13

🇺🇦 194.242.103.87

🇧🇷 186.237.19.124

🇵🇭 180.190.37.235

🇸🇪 171.25.193.78

🇺🇸 162.216.149.40

🇳🇬 152.32.141.40

🇻🇳 116.110.4.78

🇳🇱 81.22.132.64

🇧🇪 35.210.24.61

🇬🇧 35.203.210.189

🇺🇸 8.236.208.53

🇩🇪 5.253.235.89