211.228.102.165

Classification: Malicious

211.228.102.165 is a malicious IP address. Reported by 2 threat sources, last seen 2026-09-12. Network: AS4766 Korea Telecom.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mail Spammer Blocklist.de 2026-06-12 12:01:56 2026-09-12 12:01:29 attacker malicious-activity
IMAP Attacker Blocklist.de 2026-06-11 11:01:48 2026-09-12 11:01:13 attacker malicious-activity
Bruteforce AbuseIPDB 2026-05-29 00:07:41 2026-08-06 14:24:35 attacker malicious-activity
HTTP Attacker AbuseIPDB 2026-06-24 02:52:00 2026-08-06 00:00:09 attacker malicious-activity
Hacking AbuseIPDB 2026-06-09 00:34:46 2026-08-06 00:00:09 attacker malicious-activity
Mail Spammer AbuseIPDB 2026-05-30 14:04:12 2026-08-05 16:58:51 attacker malicious-activity
Malicious Host AbuseIPDB 2026-07-27 21:36:44 2026-08-02 14:54:17 attacker compromised malicious-activity
Port Scanner AbuseIPDB 2026-06-11 05:01:05 2026-08-01 10:13:18 anomalous-activity attacker malicious-activity reconnaissance
IMAP Attacker AbuseIPDB 2026-07-27 21:36:44 2026-07-27 21:36:44 attacker malicious-activity
HTTP Scrapper AbuseIPDB 2026-07-19 05:02:06 2026-07-19 05:02:06 anomalous-activity attacker malicious-activity
SSH Attacker AbuseIPDB 2026-06-08 17:27:05 2026-06-08 17:27:05 attacker malicious-activity
Suspicious Host AbuseIPDB 2025-07-16 21:19:01 2026-03-29 18:45:03 anomalous-activity

Tags

attacker imap pop3 sasl bot mail spam

Whois information

AS name
AS4766 Korea Telecom
Registrant
Korea Telecom
City
Seongnam-si
Postal code
13608
Country
KR — Korea, Republic of 🇰🇷
First indexed
2025-07-17 06:03:38
Last updated
2026-09-12 12:01:29