AbuseIPDB » 210.97.42.238

210.97.42.238 was found in our database!

This IP was reported 15,889 times. Confidence of Abuse is 100%: ?

100%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
Domain Name	kt.com
Country	Korea (the Republic of)
City	Seongnam-si, Gyeonggi-do

Report 210.97.42.238

Whois 210.97.42.238

IP Abuse Reports for 210.97.42.238:

This IP address has been reported a total of 15,889 times from 976 distinct sources. 210.97.42.238 was first reported on May 5th 2022, and the most recent report was 27 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
pusathosting.com	2024-12-12 00:34:28 (54 minutes ago)	imap2 failed login	Brute-Force
☠\|ʂɧąɖơῳ\|☠	2024-12-11 22:40:34 (2 hours ago)	[2024 Dec 11 23:40:33] Suspiciously High Count (53 x) of RST Packets / 24 Hours detected from 210.97 ... show more[2024 Dec 11 23:40:33] Suspiciously High Count (53 x) of RST Packets / 24 Hours detected from 210.97.42.238 () 03:00:08 \| SPT=57924 > DPT=2222 03:00:09 \| SPT=57924 > DPT=2222 03:00:11 \| SPT=57924 > DPT=2222 03:00:15 \| SPT=57924 > DPT=2222 03:00:23 \| SPT=57924 > DPT=2222 03:00:39 \| SPT=57924 > DPT=2222 03:41:25 \| SPT=44267 > DPT=222 03:41:26 \| SPT=44267 > DPT=222 03:41:28 \| SPT=44267 > DPT=222 03:41:32 \| SPT=44267 > DPT=222 03:41:40 \| SPT=44267 > DPT=222 03:41:56 \| SPT=44267 > DPT=222 05:45:01 \| SPT=41087 > DPT=222 05:45:02 \| SPT=41087 > DPT=222 05:45:04 \| SPT=41087 > DPT=222 05:45:08 \| SPT=41087 > DPT=222 05:45:16 \| SPT=41087 > DPT=222 05:45:32 \| SPT=41087 > DPT=222 07:20:55 \| SPT=36701 > DPT=2222 07:20:56 \| SPT=36701 > DPT=2222 07:20:58 \| SPT=36701 > DPT=2222 07:21:02 \| SPT=36701 > DPT=2222 07:21:10 \| SPT=36701 > DPT=2222 07:21:26 \| SPT=36701 > DPT=2222 16:38:24 \| SPT=58238 > DPT=2222 show less	Hacking
Anonymous	2024-12-11 22:23:58 (3 hours ago)	RdpGuard detected brute-force attempt on IMAP	Brute-Force
Birdo	2024-12-11 22:11:30 (3 hours ago)	[Birdo Server] SSH-Multi login Attempt	Port Scan Brute-Force SSH
Anonymous	2024-12-11 21:48:31 (3 hours ago)	$f2bV_matches	Email Spam Brute-Force
SentraGuard	2024-12-11 18:24:10 (7 hours ago)	Log-Zeit: 2024-11-15 07:02:38 Nachricht: 210.97.42.238 matched rule id 3 (warning: unknown[210 ... show moreLog-Zeit: 2024-11-15 07:02:38 Nachricht: 210.97.42.238 matched rule id 3 (warning: unknown[210.97.42.238]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=support) show less	Brute-Force SSH
Anonymous	2024-12-11 18:05:35 (7 hours ago)		Email Spam Brute-Force
rtbh.com.tr	2024-12-11 16:52:50 (8 hours ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
rtbh.com.tr	2024-12-11 12:52:50 (12 hours ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
dwmp	2024-12-11 10:52:30 (14 hours ago)	Dec 11 09:36:45 plesk postfix/smtpd[2466575]: warning: unknown[210.97.42.238]: SASL LOGIN authentica ... show moreDec 11 09:36:45 plesk postfix/smtpd[2466575]: warning: unknown[210.97.42.238]: SASL LOGIN authentication failed: authentication failure Dec 11 09:36:47 plesk postfix/smtpd[2466575]: disconnect from unknown[210.97.42.238] ehlo=1 auth=0/1 commands=1/2 Dec 11 11:52:29 plesk postfix/smtpd[2485478]: warning: unknown[210.97.42.238]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force SSH
rjdefrancisco	2024-12-11 08:35:03 (16 hours ago)	Unwanted traffic detected by honeypot on December 10, 2024: port scans (1 port 22 scan).	Port Scan Brute-Force SSH
SpookReportUBro	2024-12-11 07:49:44 (17 hours ago)	2024-12-11T02:49:42.056083-05:00 linux.430bc6.com sshd[325003]: pam_unix(sshd:auth): authentication ... show more2024-12-11T02:49:42.056083-05:00 linux.430bc6.com sshd[325003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.97.42.238 2024-12-11T02:49:43.911147-05:00 linux.430bc6.com sshd[325003]: Failed password for invalid user Supervisor from 210.97.42.238 port 60682 ssh2 ... show less	Brute-Force SSH
SpookReportUBro	2024-12-11 06:02:41 (19 hours ago)	2024-12-11T01:02:38.602884-05:00 linux.430bc6.com sshd[323435]: pam_unix(sshd:auth): authentication ... show more2024-12-11T01:02:38.602884-05:00 linux.430bc6.com sshd[323435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.97.42.238 2024-12-11T01:02:40.889973-05:00 linux.430bc6.com sshd[323435]: Failed password for invalid user Ubnt from 210.97.42.238 port 44365 ssh2 ... show less	Brute-Force SSH
Anonymous	2024-12-11 03:25:08 (22 hours ago)	Dec 10 05:45:49 mx1 dovecot: auth-worker(16927): sql([email protected],210.97.42.238): unknown user<br / ... show moreDec 10 05:45:49 mx1 dovecot: auth-worker(16927): sql([email protected],210.97.42.238): unknown user Dec 10 12:57:12 mx1 dovecot: auth-worker(18811): sql(support,210.97.42.238): unknown user Dec 11 04:25:07 mx1 dovecot: auth-worker(3463): sql([email protected],210.97.42.238): unknown user ... show less	Brute-Force
marioselgreco	2024-12-11 02:00:12 (23 hours ago)	Automated report from mail server logs	Email Spam Hacking Spoofing