JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 222.103.234.132

222.103.234.132 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 38%: ?

38%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Andong, Gyeongsangbuk-do

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 222.103.234.132

Whois 222.103.234.132

IP Abuse Reports for 222.103.234.132:

This IP address has been reported a total of 12 times from 12 distinct sources. 222.103.234.132 was first reported on May 3rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Like Ma	2026-09-16 20:14:28 (1 day ago)	Sep 16 16:14:23 newage sshd[16175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more Sep 16 16:14:23 newage sshd[16175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.103.234.132 Sep 16 16:14:26 newage sshd[16175]: Failed password for invalid user user from 222.103.234.132 port 38846 ssh2 ... show less	Brute-Force SSH
🇩🇪 NetWatch	2026-09-15 20:22:37 (2 days ago)	The IP 222.103.234.132 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇺🇸 bigscoots.com	2026-09-10 22:59:48 (6 days ago)	222.103.234.132 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 222.103.234.132 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 10 17:45:20 21154 sshd[15162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.103.234.132 user=root Sep 10 17:45:22 21154 sshd[15162]: Failed password for root from 222.103.234.132 port 56374 ssh2 Sep 10 17:59:27 21154 sshd[19635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.72.56.174 user=root Sep 10 17:54:30 21154 sshd[17985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.199.115 user=root Sep 10 17:54:31 21154 sshd[17985]: Failed password for root from 152.32.199.115 port 50894 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 LRob	2026-08-25 22:27:24 (3 weeks ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-json/wp/v2/users/ \| 2026-08-25 22:27 UTC show less	Hacking Web App Attack
🇨🇦 DRI	2026-08-22 14:25:00 (3 weeks ago)	Web attack/Malicious activity detected	Web App Attack
🇩🇪 neogenius	2026-08-10 05:35:16 (1 month ago)	Web App Attack	Web App Attack Brute-Force
🇨🇭 backslash	2026-08-08 19:42:00 (1 month ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-07 13:34:01 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 222.103.234.132 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 222.103.234.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 09:33:53.421193 2026] [security2:error] [pid 1306383:tid 1306418] [client 222.103.234.132:41456] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|abusaimeh.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abusaimeh.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "anXewYRbeHgVZhsx4RhZbAAAAEI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 GabrielJST	2026-07-29 17:54:54 (1 month ago)	(wordpress) Failed wordpress login from 222.103.234.132 (KR/South Korea/-)	Brute-Force
🇺🇸 monn45888	2026-07-12 00:22:18 (2 months ago)	$f2bV_matches	Web App Attack
Anonymous	2026-06-11 08:51:06 (3 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇩🇪 rh24	2026-05-03 03:53:38 (4 months ago)	222.103.234.132 (KR/South Korea/-), 25 distributed imapd attacks on account [redacted]	Brute-Force

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.86.148.242

🇧🇷 205.210.31.175

🇺🇸 109.105.209.8

🇧🇩 103.135.253.114

🇷🇺 45.91.64.7

🇷🇴 2.57.121.112

🇧🇷 209.14.85.115

🇭🇳 186.96.252.171

🇦🇪 152.32.180.86

🇫🇷 91.196.152.223

🇷🇺 77.106.121.250

🇫🇮 65.21.35.180

🇹🇼 198.235.24.104

🇳🇱 176.65.139.214

🇨🇳 106.75.153.103

🇺🇸 20.150.194.180

🇸🇪 178.174.219.178

🇳🇱 92.114.107.56

🇷🇺 89.109.233.181

🇺🇸 52.190.185.169