JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 211.199.34.144

211.199.34.144 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 57%: ?

57%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Daegu, Daegu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 211.199.34.144

Whois 211.199.34.144

IP Abuse Reports for 211.199.34.144:

This IP address has been reported a total of 19 times from 17 distinct sources. 211.199.34.144 was first reported on April 29th 2026, and the most recent report was 11 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-09-30 17:00:53 (11 minutes ago)	Active Response: IP 211.199.34.144 Blocked via Firewall Drop. Threat Score: 3.8/10 (LOW). Confidence ... show more Active Response: IP 211.199.34.144 Blocked via Firewall Drop. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-30 16:00:09 (1 hour ago)	Active Response: IP 211.199.34.144 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Re ... show more Active Response: IP 211.199.34.144 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇨🇦 DRI	2026-09-28 07:26:58 (2 days ago)	Web attack/Malicious activity detected	Web App Attack
Anonymous	2026-09-28 07:11:36 (2 days ago)	Invalid user admin from 211.199.34.144 port 59808	Brute-Force SSH
Anonymous	2026-09-28 07:11:36 (2 days ago)	Invalid user admin from 211.199.34.144 port 59808	Brute-Force SSH
🇹🇷 Threat.live	2026-09-19 17:50:03 (1 week ago)	Threat.live: Brute Force	Brute-Force
🇦🇺 bret.dk	2026-09-18 12:42:23 (1 week ago)	Sep 18 12:42:20 au-mirror sshd[2459045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Sep 18 12:42:20 au-mirror sshd[2459045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.199.34.144 Sep 18 12:42:22 au-mirror sshd[2459045]: Failed password for invalid user admin from 211.199.34.144 port 41494 ssh2 ... show less	Brute-Force SSH
🇩🇪 formality	2026-09-18 08:44:37 (1 week ago)	Invalid user user from 211.199.34.144 port 57904	Brute-Force SSH
🇺🇸 PhilGoode	2026-09-18 06:00:00 (1 week ago)	Telnet (TCP 23) credential brute-force against a honeypot on 2026-09-18. Upon gaining access, attack ... show more Telnet (TCP 23) credential brute-force against a honeypot on 2026-09-18. Upon gaining access, attacker issued router shell escape sequence (enable/system/shell/linuxshell) and probed for BusyBox-based IoT/router devices (/bin/busybox UNSTABLE). IoT botnet scanning campaign. show less	Brute-Force IoT Targeted
🇬🇧 Heathrxw	2026-09-18 05:11:48 (1 week ago)	Sep 18 06:11:45 s1-jellyfish sshd[2659281]: pam_unix(sshd:auth): authentication failure; logname= ui ... show more Sep 18 06:11:45 s1-jellyfish sshd[2659281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.199.34.144 Sep 18 06:11:47 s1-jellyfish sshd[2659281]: Failed password for invalid user Admin from 211.199.34.144 port 44984 ssh2 ... show less	Brute-Force SSH
🇩🇪 vanlueckn	2026-09-18 00:30:43 (1 week ago)	2026-09-18T02:30:40.157666+02:00 dokploy-1 sshd-session[2396156]: pam_unix(sshd:auth): authenticatio ... show more 2026-09-18T02:30:40.157666+02:00 dokploy-1 sshd-session[2396156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.199.34.144 2026-09-18T02:30:42.182278+02:00 dokploy-1 sshd-session[2396156]: Failed password for invalid user ubnt from 211.199.34.144 port 51300 ssh2 2026-09-18T02:30:42.712252+02:00 dokploy-1 sshd-session[2396156]: Connection closed by invalid user ubnt 211.199.34.144 port 51300 [preauth] ... show less	Brute-Force SSH
Anonymous	2026-09-10 05:24:08 (2 weeks ago)	2026-09-10T08:54:00.557254+03:30 digitalogic sshd-session[3000957]: pam_unix(sshd:auth): authenticat ... show more 2026-09-10T08:54:00.557254+03:30 digitalogic sshd-session[3000957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.199.34.144 2026-09-10T08:54:02.088379+03:30 digitalogic sshd-session[3000957]: Failed password for invalid user admin from 211.199.34.144 port 59272 ssh2 2026-09-10T08:54:02.780566+03:30 digitalogic sshd-session[3000957]: Connection closed by invalid user admin 211.199.34.144 port 59272 [preauth] ... show less	Brute-Force SSH
🇺🇸 anon333	2026-09-09 13:34:22 (3 weeks ago)	Hacker syslog review 1788960861	Hacking
🇫🇷 900cm	2026-09-09 05:04:04 (3 weeks ago)	Sep 9 07:04:03 raspberrypi sshd[2381]: Invalid user Admin from 211.199.34.144 port 46130 ...	Port Scan Brute-Force SSH
🇨🇭 backslash	2026-07-25 18:42:00 (2 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69

🇺🇦 176.103.5.104

🇷🇴 92.118.39.71

🇧🇬 82.147.142.205

🇳🇱 45.148.10.152

🇺🇸 34.230.65.219

🇦🇪 2.49.85.88

🇳🇱 213.177.179.35

🇳🇱 185.242.226.9

🇻🇳 160.250.132.238

🇹🇭 147.50.231.135

🇵🇱 109.205.211.23

🇺🇸 64.62.156.159

🇹🇿 41.59.197.52

🇺🇸 23.29.118.81

🇨🇳 36.103.222.120

🇹🇼 35.229.251.53

🇳🇱 20.160.86.7

🇺🇦 185.187.81.74

🇺🇸 184.105.139.82