JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

211.221.238.252

Neutral Activity

Abuse Confidence Score

0% Low Risk

545 reports

213 reporters · latest 3 years ago

ISP: Korea Telecom
Usage Type: Fixed Line ISP
ASN: AS4766
Domain Name: kt.com
Country: 🇰🇷 Korea (the Republic of)
City: Pyeongtaek, Gyeonggi-do

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

211.221.238.252 has been reported 545 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

545 from 213 distinct reporters

First reported

April 24th 2023

Most recent report

3 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2023-06-12 23:55:18 UTC · (3 years ago)	ThreatBook Intelligence: Zombie,iot_device more details on https://threatbook.io/ip/211.221.238.252 2023-06-12 05:06:49 ["sh","shell","enable","cat /bin/echo\|\|while read i; do echo $i; done < /proc/self/exe;"]	SSH
🇸🇬 tommygod.ddns.net	2023-06-12 02:35:13 UTC · (3 years ago)	Jun 12 02:34:20 mailtommygod sshd[812134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.221.238.252 user=admin Jun 12 02:34:22 mailtommygod sshd[812134]: Failed password for invalid user admin from 211. ... show more Jun 12 02:34:20 mailtommygod sshd[812134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.221.238.252 user=admin Jun 12 02:34:22 mailtommygod sshd[812134]: Failed password for invalid user admin from 211.221.238.252 port 52701 ssh2 Jun 12 02:34:45 mailtommygod sshd[812134]: Failed password for invalid user admin from 211.221.238.252 port 52701 ssh2 Jun 12 02:35:00 mailtommygod sshd[812134]: Failed password for invalid user admin from 211.221.238.252 port 52701 ssh2 Jun 12 02:35:13 mailtommygod sshd[812134]: Failed password for invalid user admin from 211.221.238.252 port 52701 ssh2 show less	Brute-Force SSH
🇧🇬 OHOST.BG	2023-06-12 01:30:57 UTC · (3 years ago)	Jun 12 04:30:41 athena sshd[1197575]: Failed password for root from 211.221.238.252 port 57573 ssh2 Jun 12 04:30:46 athena sshd[1197575]: Failed password for root from 211.221.238.252 port 57573 ssh2 Jun 12 04:30:51 athena sshd[1197575]: Failed passw ... show more Jun 12 04:30:41 athena sshd[1197575]: Failed password for root from 211.221.238.252 port 57573 ssh2 Jun 12 04:30:46 athena sshd[1197575]: Failed password for root from 211.221.238.252 port 57573 ssh2 Jun 12 04:30:51 athena sshd[1197575]: Failed password for root from 211.221.238.252 port 57573 ssh2 Jun 12 04:30:53 athena sshd[1197575]: Failed password for root from 211.221.238.252 port 57573 ssh2 Jun 12 04:30:56 athena sshd[1197575]: Failed password for root from 211.221.238.252 port 57573 ssh2 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-06-11 23:38:11 UTC · (3 years ago)	ThreatBook Intelligence: Zombie,iot_device more details on https://threatbook.io/ip/211.221.238.252 2023-06-11 17:23:38 ["sh","shell","enable","cat /bin/echo\|\|while read i; do echo $i; done < /proc/self/exe;"] 2023-06-11 03:15:29 ["sh","shell","enabl ... show more ThreatBook Intelligence: Zombie,iot_device more details on https://threatbook.io/ip/211.221.238.252 2023-06-11 17:23:38 ["sh","shell","enable","cat /bin/echo\|\|while read i; do echo $i; done < /proc/self/exe;"] 2023-06-11 03:15:29 ["sh","shell","enable","cat /bin/echo\|\|while read i; do echo $i; done < /proc/self/exe;"] 2023-06-11 06:12:25 ["sh","shell","enable","cat /bin/echo\|\|while read i; do echo $i; done < /proc/self/exe;"] show less	Brute-Force
🇩🇪 MatStef132	2023-06-11 11:47:36 UTC · (3 years ago)	Jun 11 11:47:23 instance-20220119-1536 sshd[172382]: Invalid user ubnt from 211.221.238.252 port 42838 Jun 11 11:47:24 instance-20220119-1536 sshd[172382]: Failed password for invalid user ubnt from 211.221.238.252 port 42838 ssh2 Jun 11 11:47:28 ins ... show more Jun 11 11:47:23 instance-20220119-1536 sshd[172382]: Invalid user ubnt from 211.221.238.252 port 42838 Jun 11 11:47:24 instance-20220119-1536 sshd[172382]: Failed password for invalid user ubnt from 211.221.238.252 port 42838 ssh2 Jun 11 11:47:28 instance-20220119-1536 sshd[172382]: Failed password for invalid user ubnt from 211.221.238.252 port 42838 ssh2 Jun 11 11:47:33 instance-20220119-1536 sshd[172382]: Failed password for invalid user ubnt from 211.221.238.252 port 42838 ssh2 Jun 11 11:47:36 instance-20220119-1536 sshd[172382]: Failed password for invalid user ubnt from 211.221.238.252 port 42838 ssh2 show less	Brute-Force SSH
Anonymous	2023-06-11 03:38:38 UTC · (3 years ago)	Jun 11 05:35:42 srv sshd[14103]: Failed password for root from 211.221.238.252 port 45620 ssh2 Jun 11 05:36:27 srv sshd[14103]: error: maximum authentication attempts exceeded for root from 211.221.238.252 port 45620 ssh2 [preauth]	Brute-Force SSH
🇩🇪 LUKE_Networker	2023-06-11 03:14:32 UTC · (3 years ago)	VPS-M-DE	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-06-10 23:50:44 UTC · (3 years ago)	ThreatBook Intelligence: Zombie,iot_device more details on https://threatbook.io/ip/211.221.238.252 2023-06-10 06:17:15 ["sh","shell","enable","cat /bin/echo\|\|while read i; do echo $i; done < /proc/self/exe;"]	SSH
🇩🇪 KeksGauner	2023-06-10 21:52:00 UTC · (3 years ago)	Jun 10 21:51:58 hyrole sshd[1543538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.221.238.252 user=root Jun 10 21:51:59 hyrole sshd[1543538]: Failed password for root from 211.221.238.252 port 44005 ss ... show more Jun 10 21:51:58 hyrole sshd[1543538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.221.238.252 user=root Jun 10 21:51:59 hyrole sshd[1543538]: Failed password for root from 211.221.238.252 port 44005 ssh2 ... show less	Brute-Force SSH
🇬🇧 Gianluca	2023-06-10 21:29:17 UTC · (3 years ago)	Jun 10 23:29:16 vps781128 sshd[15158]: error: maximum authentication attempts exceeded for invalid user admin from 211.221.238.252 port 38134 ssh2 [preauth]	Brute-Force SSH
Anonymous	2023-06-10 18:31:33 UTC · (3 years ago)		Brute-Force SSH
Anonymous	2023-06-10 18:00:16 UTC · (3 years ago)	(sshd) Failed SSH login from 211.221.238.252 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Jun 10 14:00:00 server2 sshd[5086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=s ... show more (sshd) Failed SSH login from 211.221.238.252 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Jun 10 14:00:00 server2 sshd[5086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.221.238.252 user=root Jun 10 14:00:01 server2 sshd[5086]: Failed password for root from 211.221.238.252 port 47713 ssh2 Jun 10 14:00:05 server2 sshd[5086]: Failed password for root from 211.221.238.252 port 47713 ssh2 Jun 10 14:00:09 server2 sshd[5086]: Failed password for root from 211.221.238.252 port 47713 ssh2 Jun 10 14:00:10 server2 sshd[5086]: Failed password for root from 211.221.238.252 port 47713 ssh2 show less	Brute-Force
🇩🇪 debaba	2023-06-10 17:19:00 UTC · (3 years ago)	Jun 10 19:18:58 Debian-1101-bullseye-amd64-base sshd[1484843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.221.238.252 Jun 10 19:18:59 Debian-1101-bullseye-amd64-base sshd[1484843]: Failed password for ... show more Jun 10 19:18:58 Debian-1101-bullseye-amd64-base sshd[1484843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.221.238.252 Jun 10 19:18:59 Debian-1101-bullseye-amd64-base sshd[1484843]: Failed password for invalid user admin from 211.221.238.252 port 39158 ssh2 ... show less	Brute-Force SSH
🇺🇸 RAP	2023-06-10 16:57:53 UTC · (3 years ago)	2023-06-10 16:57:53 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇨🇼 ATV	2023-06-10 14:42:18 UTC · (3 years ago)	Unsolicited connection attempts to port 22	Hacking SSH

Showing 1 to 15 of 545 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 192.129.243.19

🇧🇬 91.191.209.98

🇨🇦 192.214.228.181

🇵🇰 187.78.149.104

🇺🇸 70.183.230.61

🇺🇸 64.62.197.28

🇵🇭 61.9.3.50

🇧🇭 46.184.220.110

🇵🇱 45.138.12.6

🇬🇧 2.57.17.253

🇬🇧 2.57.17.228

🇵🇭 223.25.62.182

🇮🇳 209.38.122.78

🇵🇹 203.109.52.43

🇺🇸 201.14.250.212

🇵🇱 172.68.159.196

🇵🇱 172.64.200.177

🇵🇱 172.64.200.112

🇵🇱 162.158.103.214

🇺🇸 147.185.132.188