JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

180.225.197.66

Recent Activity

Abuse confidence score ?

24% Elevated

97 reports

57 reporters · latest 4 days ago

ISP	LG POWERCOMM
Usage Type	Fixed Line ISP
ASN	AS17858
Domain Name	lguplus.com
Country	🇰🇷 Korea (the Republic of)
City	Incheon, Incheon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 180.225.197.66

This IP address has been reported a total of 97 times from 57 distinct sources. 180.225.197.66 was first reported on May 15th 2026, and the most recent report was 4 days ago. In the last 60 days, the top reporter locations were: Canada with 1 report; Switzerland with 1 report; India with 1 report. The most common categories in these recent reports were: Web App Attack 2 times; Brute-Force 2 times; Bad Web Bot 2 times; SSH 1 time; Hacking 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 DRI	2026-09-21 04:42:16 (4 days ago)	Web attack/Malicious activity detected	Web App Attack
🇨🇭 backslash	2026-09-18 07:48:01 (1 week ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-10 18:51:40 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 180.225.197.66 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 180.225.197.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 14:51:32.559597 2026] [security2:error] [pid 24387:tid 24387] [client 180.225.197.66:33229] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jazziientertainment.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jazziientertainment.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqL8NLoVDYosPR7Lqrm6bwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-08-15 07:06:21 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=98, sources=1)	Hacking Brute-Force SSH
🇭🇺 wap.dynu.net	2026-06-14 16:51:57 (3 months ago)	Mail Rejected for No PTR on port 25, EHLO: R32t4s7r98	Email Spam
🇩🇪 Viveronese	2026-06-14 08:51:11 (3 months ago)	SASL LOGIN authentication failed	Brute-Force
🇩🇪 _ArminS_	2026-06-14 02:03:34 (3 months ago)	Spam detected 2026.06.14 04:03:34 blocked until 2026.06.28 04:03:34	Email Spam
Anonymous	2026-06-13 21:50:09 (3 months ago)	2026-06-13T23:50:08.649760+02:00 soli-gate postfix/smtpd[47417]: NOQUEUE: reject: RCPT from unknown[ ... show more 2026-06-13T23:50:08.649760+02:00 soli-gate postfix/smtpd[47417]: NOQUEUE: reject: RCPT from unknown[180.225.197.66]: 554 5.7.25 Client host rejected: cannot find your hostname, [180.225.197.66]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<W7hu2L> ... show less	Brute-Force
🇦🇹 Pingger Shikkoken	2026-06-13 15:57:04 (3 months ago)	2026-06-13T15:57:04+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-06-13T15:57:04+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=180.225.197.66 DST=10.1.1.14 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=57437 DF PROTO=TCP SPT=55959 DPT=25 WINDOW=14600 RES=0x00 SYN URGP=0 2026-06-13T15:57:05+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=180.225.197.66 DST=10.1.1.14 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=57438 DF PROTO=TCP SPT=55959 DPT=25 WINDOW=14600 RES=0x00 SYN URGP=0 2026-06-13T15:57:07+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=180.225.197.66 DST=10.1.1.14 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=57439 DF PROTO=TCP SPT=55959 DPT=25 WINDOW=14600 RES=0x00 SYN URGP=0 ... show less	Email Spam Hacking
Anonymous	2026-06-13 04:34:58 (3 months ago)	SMTP scanner - relay access denied	Brute-Force Exploited Host
🇬🇧 Steve	2026-06-12 19:13:14 (3 months ago)	Attempts against SMTP/SSMTP	Brute-Force
🇺🇸 ras07	2026-06-12 11:58:05 (3 months ago)	Spam and phishing attempts.	Phishing Web Spam Exploited Host
Anonymous	2026-06-12 08:23:48 (3 months ago)		Brute-Force Email Spam
🇬🇧 gaztronics	2026-06-11 22:21:23 (3 months ago)	2026-06-11T22:21:21.412095 liberator sendmail[1567491]: 65BMKauV1567491: [180.225.197.66] did not is ... show more 2026-06-11T22:21:21.412095 liberator sendmail[1567491]: 65BMKauV1567491: [180.225.197.66] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA ... show less	Brute-Force
🇩🇪 lightaffaire	2026-06-11 22:08:17 (3 months ago)	Jun 12 00:08:15 prod1 postfix/tlsproxy[3326123]: DISCONNECT [180.225.197.66]:57665 ...	Port Scan

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.89.125.32

🇧🇷 179.48.101.209

🇦🇿 94.20.62.126

🇬🇧 193.176.29.23

🇩🇪 185.186.25.110

🇺🇸 147.185.132.243

🇨🇦 85.217.149.72

🇨🇦 85.217.149.53

🇺🇸 66.132.195.61

🇨🇳 60.26.2.17

🇳🇱 45.148.10.152

🇰🇷 20.214.191.94

🇺🇸 216.25.89.138

🇧🇪 198.235.24.192

🇰🇪 197.248.207.139

🇺🇸 148.59.129.64

🇫🇮 147.185.133.80

🇺🇸 147.185.132.33

🇺🇸 100.29.192.107

🇫🇷 85.217.140.48