JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 210.117.212.118

210.117.212.118 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 59%: ?

59%

ISP	Konkuk University
Usage Type	University/College/School
ASN	AS1237
Domain Name	konkuk.ac.kr
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 210.117.212.118

Whois 210.117.212.118

IP Abuse Reports for 210.117.212.118:

This IP address has been reported a total of 128 times from 73 distinct sources. 210.117.212.118 was first reported on July 18th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Tanados	2026-07-26 04:05:44 (1 day ago)	Blocked by UFW [5994/tcp] Source port: 61000 TTL: 239 Packet length: 44 TOS: 0x00 This report was g ... show more Blocked by UFW [5994/tcp] Source port: 61000 TTL: 239 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 polycoda	2026-07-26 04:01:07 (1 day ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
Anonymous	2026-07-25 13:10:14 (2 days ago)	PROTO=TCP DPT=5933	Port Scan Hacking
🇮🇹 matthew_eli	2026-07-23 18:45:06 (3 days ago)	Keenetic Firewall: Blocked Traffic (No Port Detected - likely UDP). Blocked 73 times in last 24h.	Port Scan
🇳🇱 astijf	2026-07-23 13:39:49 (4 days ago)	Port Scan detected from 210.117.212.118 (KR/South Korea/-). 5 hits in the last 541 seconds	Brute-Force Port Scan
🇺🇸 routerjockey	2026-07-23 03:39:59 (4 days ago)	[sensor1] Observed 38 TCP SYN probes in the past 6 hours [Top ports 5901/tcp 5907/tcp 5912/tcp 5917/ ... show more [sensor1] Observed 38 TCP SYN probes in the past 6 hours [Top ports 5901/tcp 5907/tcp 5912/tcp 5917/tcp 5919/tcp 5922/tcp 5924/tcp 5927/tcp 5928/tcp 5931/tcp 5934/tcp 5940/tcp 5941/tcp 5942/tcp 5943/tcp 5947/tcp 5948/tcp 5950/tcp 5954/tcp 5956/tcp] show less	Port Scan
🇷🇸 Scan	2026-07-23 02:56:40 (4 days ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 cloudmax	2026-07-23 02:55:28 (4 days ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
Anonymous	2026-07-23 02:51:30 (4 days ago)	Hit honeypot r.	Port Scan Hacking Exploited Host
🇩🇪 iNetWorker	2026-07-23 02:50:56 (4 days ago)	firewall-block, port(s): 5910/tcp	Port Scan
🇳🇱 Linuxmalwarehuntingnl	2024-07-03 07:07:41 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇺🇸 bigscoots.com	2023-07-20 01:20:23 (3 years ago)	210.117.212.118 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 210.117.212.118 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 19 20:20:14 11465 sshd[9121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.97.171.109 user=root Jul 19 20:17:40 11465 sshd[8842]: Failed password for root from 210.117.212.118 port 57034 ssh2 Jul 19 20:17:38 11465 sshd[8842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.117.212.118 user=root Jul 19 20:16:01 11465 sshd[8664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.121.104.185 user=root Jul 19 20:16:03 11465 sshd[8664]: Failed password for root from 188.121.104.185 port 42076 ssh2 IP Addresses Blocked: 161.97.171.109 (DE/Germany/vmi691171.contaboserver.net) show less	Brute-Force SSH
🇩🇪 beli3ver	2023-07-20 00:36:27 (3 years ago)	Jul 20 02:33:55 server sshd[1584873]: Invalid user kernel from 210.117.212.118 port 48354 Jul 20 02: ... show more Jul 20 02:33:55 server sshd[1584873]: Invalid user kernel from 210.117.212.118 port 48354 Jul 20 02:35:08 server sshd[1585947]: Connection from 210.117.212.118 port 53652 on 194.13.82.110 port 22 rdomain "" Jul 20 02:35:10 server sshd[1585947]: Invalid user deploy from 210.117.212.118 port 53652 Jul 20 02:36:25 server sshd[1586247]: Connection from 210.117.212.118 port 40558 on 194.13.82.110 port 22 rdomain "" Jul 20 02:36:26 server sshd[1586247]: Invalid user support from 210.117.212.118 port 40558 ... show less	Brute-Force SSH
🇦🇹 blackpanther	2023-07-20 00:27:33 (3 years ago)	2023-07-20T02:21:47.362390+02:00 backend..de sshd[2524335]: Disconnected from authenticating user ro ... show more 2023-07-20T02:21:47.362390+02:00 backend..de sshd[2524335]: Disconnected from authenticating user root 210.117.212.118 port 40048 [preauth] 2023-07-20T02:27:33.105418+02:00 backend..de sshd[2531894]: Invalid user debian from 210.117.212.118 port 51650 2023-07-20T02:27:33.390843+02:00 backend..de sshd[2531894]: Disconnected from invalid user debian 210.117.212.118 port 51650 [preauth] show less	Brute-Force SSH
🇨🇳 AzurCrystal	2023-07-19 22:23:46 (3 years ago)	Jul 20 06:23:46 localhost sshd[2464519]: Invalid user pato from 210.117.212.118 port 45132 ...	Brute-Force SSH

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 43.135.135.17

🇰🇪 197.248.233.55

🇺🇸 195.184.76.69

🇺🇸 185.180.141.10

🇮🇷 185.126.3.179

🇲🇾 108.165.177.48

🇺🇸 104.152.52.214

🇸🇬 103.250.11.156

🇷🇴 92.118.39.71

🇫🇷 91.231.89.144

🇩🇪 46.225.23.118

🇦🇺 45.134.20.79

🇩🇪 43.228.157.9

🇪🇬 41.130.140.33

🇵🇰 39.46.133.153

🇭🇰 31.77.144.118

🇻🇳 14.191.77.47

🇦🇷 190.4.122.228

🇩🇪 185.220.101.10

🇺🇸 184.105.247.247