AbuseIPDB » 211.252.168.97

211.252.168.97 was found in our database!

This IP was reported 9,409 times. Confidence of Abuse is 100%: ?

100%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	Korea (the Republic of)
City	Incheon, Incheon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 211.252.168.97

Whois 211.252.168.97

IP Abuse Reports for 211.252.168.97:

This IP address has been reported a total of 9,409 times from 794 distinct sources. 211.252.168.97 was first reported on October 11th 2023, and the most recent report was 45 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
www.fransveldman.world	2025-04-21 11:35:45 (45 minutes ago)	Apr 21 11:35:44 mail postfix/submission/smtpd[2207866]: warning: unknown[211.252.168.97]: SASL LOGIN ... show moreApr 21 11:35:44 mail postfix/submission/smtpd[2207866]: warning: unknown[211.252.168.97]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 21 11:35:45 mail postfix/submission/smtpd[2207866]: lost connection after AUTH from unknown[211.252.168.97] ... show less	Email Spam Brute-Force
Anonymous	2025-04-21 11:10:53 (1 hour ago)	2025-04-21 06:10:52.433 [83062] dovecot_login authenticator failed for ([211.252.168.97]) [211.252.1 ... show more2025-04-21 06:10:52.433 [83062] dovecot_login authenticator failed for ([211.252.168.97]) [211.252.168.97]:56983 I=[192.168.1.220]:25 Ci=83062: 535 Incorrect authentication data ([email protected]) ... show less	Brute-Force Exploited Host
Infocom	2025-04-21 10:02:50 (2 hours ago)	MAIL_Brute-Force	Brute-Force
qtland Cloud Inc.	2025-04-21 09:32:09 (2 hours ago)	2025-04-21T09:32:05.123184+00:00 eu-west-fra2-35273 sshd[3141881]: pam_unix(sshd:auth): authenticati ... show more2025-04-21T09:32:05.123184+00:00 eu-west-fra2-35273 sshd[3141881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.252.168.97 2025-04-21T09:32:07.165299+00:00 eu-west-fra2-35273 sshd[3141881]: Failed password for invalid user test from 211.252.168.97 port 56075 ssh2 2025-04-21T09:32:08.261021+00:00 eu-west-fra2-35273 sshd[3141881]: Connection closed by invalid user test 211.252.168.97 port 56075 [preauth] ... show less	Brute-Force SSH
adlp.org	2025-04-21 07:15:55 (5 hours ago)	Apr 21 07:15:49 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;211.252.168.97;[UNAVAI ... show moreApr 21 07:15:49 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;211.252.168.97;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Apr 21 07:15:52 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;211.252.168.97;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Apr 21 07:15:55 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;211.252.168.97;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill ... show less	Brute-Force
paradoxnetworks	2025-04-21 05:24:31 (6 hours ago)	2025-04-21T05:24:24.092681+00:00 edge-vol-nyc01.int.pdx.net.uk sshd[1017420]: pam_unix(sshd:auth): a ... show more2025-04-21T05:24:24.092681+00:00 edge-vol-nyc01.int.pdx.net.uk sshd[1017420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.252.168.97 2025-04-21T05:24:25.976437+00:00 edge-vol-nyc01.int.pdx.net.uk sshd[1017420]: Failed password for invalid user guest from 211.252.168.97 port 1401 ssh2 2025-04-21T05:24:30.706480+00:00 edge-vol-nyc01.int.pdx.net.uk sshd[1017420]: error: PAM: Authentication failure for illegal user guest from 211.252.168.97 ... show less	Brute-Force SSH
vbios.com	2025-04-21 03:49:14 (8 hours ago)	MAIL_Brute-Force	Brute-Force
ThreatBook.io	2025-04-21 01:35:20 (10 hours ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/211.252.168.97	Brute-Force
Anonymous	2025-04-21 01:23:49 (10 hours ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
kreativstrecke	2025-04-21 00:59:48 (11 hours ago)	2025-04-21T02:59:46.156006+02:00 srv03 postfix/smtps/smtpd[819347]: warning: unknown[211.252.168.97] ... show more2025-04-21T02:59:46.156006+02:00 srv03 postfix/smtps/smtpd[819347]: warning: unknown[211.252.168.97]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2025-04-21T02:59:47.261784+02:00 srv03 postfix/smtps/smtpd[819347]: lost connection after AUTH from unknown[211.252.168.97] 2025-04-21T02:59:47.261914+02:00 srv03 postfix/smtps/smtpd[819347]: disconnect from unknown[211.252.168.97] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
Anonymous	2025-04-20 21:26:02 (14 hours ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
ukrpack.net	2025-04-20 21:17:19 (15 hours ago)	MAIL_Brute-Force	Brute-Force
rtbh.com.tr	2025-04-20 20:06:13 (16 hours ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
paradoxnetworks	2025-04-20 16:37:50 (19 hours ago)	2025-04-20T16:37:44.766161+00:00 edge-vol-nyc01.int.pdx.net.uk sshd[838431]: pam_unix(sshd:auth): au ... show more2025-04-20T16:37:44.766161+00:00 edge-vol-nyc01.int.pdx.net.uk sshd[838431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.252.168.97 2025-04-20T16:37:46.650764+00:00 edge-vol-nyc01.int.pdx.net.uk sshd[838431]: Failed password for invalid user test from 211.252.168.97 port 47728 ssh2 2025-04-20T16:37:49.998476+00:00 edge-vol-nyc01.int.pdx.net.uk sshd[838431]: error: PAM: Authentication failure for illegal user test from 211.252.168.97 ... show less	Brute-Force SSH
DSSYSTEMS	2025-04-20 16:00:59 (20 hours ago)	Automatic report from DSS firewall log.	Port Scan Hacking Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩