JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 175.211.138.27

175.211.138.27 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 58%: ?

58%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Hwado, Gyeonggi-do

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 175.211.138.27

Whois 175.211.138.27

IP Abuse Reports for 175.211.138.27:

This IP address has been reported a total of 16 times from 15 distinct sources. 175.211.138.27 was first reported on May 16th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-10 09:52:19 (9 hours ago)	Reported from Nginx log analysis 11. Log: 175.211.138.27 - - [10/Jul/2026:xx:xx:xx 0200] "GET / HTT ... show more Reported from Nginx log analysis 11. Log: 175.211.138.27 - - [10/Jul/2026:xx:xx:xx 0200] "GET / HTTP/1.0" xxx xxx "-" "-" "-" "KR South Korea Namyangju" "AS4766" "Korea Telecom" show less	Port Scan Brute-Force SSH
🇩🇪 iNetWorker	2026-07-09 07:36:03 (1 day ago)	trying to access non-authorized port	Port Scan
🇧🇷 diego	2026-07-09 05:03:48 (1 day ago)	[probe-44-49] 2026-07-09 04:41:55, Client: 175.211.138.27, Protocol: 6, Unauthorized activity to HTT ... show more [probe-44-49] 2026-07-09 04:41:55, Client: 175.211.138.27, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇩🇪 dispaisyenterprises	2026-07-08 14:15:49 (2 days ago)	Honeypot [fra-de-honeypot]: HTTP/1.0 request on 8090 GET / Accept: text/plain,text/html; 8090 [1] T ... show more Honeypot [fra-de-honeypot]: HTTP/1.0 request on 8090 GET / Accept: text/plain,text/html; 8090 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 kkwemi	2026-07-01 20:18:18 (1 week ago)	Blocked by block-empty-user-agent on /	Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-07-01 20:16:34 (1 week ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/, Method:GET, UA:N/A	Port Scan Web App Attack Bad Web Bot
🇫🇮 sonot	2026-06-22 01:44:39 (2 weeks ago)	Blocked by UFW on mail [82/tcp] \| SPT: 42431 \| TTL: 239 \| LEN: 44 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on mail [82/tcp] \| SPT: 42431 \| TTL: 239 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-19 16:36:29 (3 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇯🇵 jay hung	2026-06-17 09:25:53 (3 weeks ago)	2026-06-17T09:25:52.556332+00:00 quarktech kernel: [333004.981155] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-06-17T09:25:52.556332+00:00 quarktech kernel: [333004.981155] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=175.211.138.27 DST=172.237.20.248 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=8844 PROTO=TCP SPT=45697 DPT=8090 WINDOW=1300 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 evilrave	2026-06-17 04:41:36 (3 weeks ago)	175.211.138.27 - - [17/Jun/2026:04:41:36 +0000] "GET / HTTP/1.0" 444 0 Host="[REDACTED_IP]" SNI="-" ... show more 175.211.138.27 - - [17/Jun/2026:04:41:36 +0000] "GET / HTTP/1.0" 444 0 Host="[REDACTED_IP]" SNI="-" ... show less	Bad Web Bot
🇩🇪 acadeova	2026-06-15 15:20:06 (3 weeks ago)	Blocked by UFW on vps2 [8282/tcp] Source port: 46741 TTL: 244 Packet length: 44 TOS: 0x00 This repo ... show more Blocked by UFW on vps2 [8282/tcp] Source port: 46741 TTL: 244 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-08 22:09:47 (1 month ago)	Try to connect to Port_Scan_8081_stealth	Port Scan
🇫🇮 6kilowatti	2026-05-22 11:31:10 (1 month ago)	2026-05-22T14:31:09.691366+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-05-22T14:31:09.691366+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=175.211.138.27 DST=83.148.240.21 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=8844 PROTO=TCP SPT=54334 DPT=8090 WINDOW=1300 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 BIV	2026-05-21 16:57:14 (1 month ago)	Honeypot multi-source hit. Sources: tpot:P0f,tpot:Suricata. Ports: 8082. Automated tiered (T-Pot+DSh ... show more Honeypot multi-source hit. Sources: tpot:P0f,tpot:Suricata. Ports: 8082. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking Bad Web Bot
🇫🇮 6kilowatti	2026-05-19 16:12:11 (1 month ago)	2026-05-19T19:12:10.521966+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-05-19T19:12:10.521966+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=175.211.138.27 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=15683 PROTO=TCP SPT=51037 DPT=85 WINDOW=1300 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.163.252.244

🇳🇱 195.178.110.217

🇦🇴 193.163.125.103

🇲🇽 187.141.71.166

🇫🇮 147.185.133.143

🇫🇮 147.185.133.113

🇺🇸 134.122.125.153

🇰🇪 102.210.28.66

🇭🇰 94.74.99.49

🇯🇵 72.63.108.28

🇱🇹 62.60.130.219

🇺🇸 43.153.55.243

🇮🇶 37.237.166.242

🇺🇸 216.25.89.105

🇺🇸 205.210.31.53

🇹🇭 202.29.220.6

🇨🇦 195.63.16.201

🇧🇷 177.11.196.79

🇩🇪 167.94.146.33

🇭🇰 150.40.249.189