JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.220.85.26

112.220.85.26 was found in our database!

This IP was reported 2,059 times. Confidence of Abuse is 0%: ?

ISP	LG Uplus
Usage Type	Fixed Line ISP
ASN	AS3786
Domain Name	lguplus.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.220.85.26

Whois 112.220.85.26

IP Abuse Reports for 112.220.85.26:

This IP address has been reported a total of 2,059 times from 364 distinct sources. 112.220.85.26 was first reported on November 29th 2020, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-06-04 17:27:19 (1 month ago)	ICS Labs identified 112.220.85.26 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
🇩🇪 ghostwarriors	2026-04-24 00:22:33 (2 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇫🇮 MindSolve	2026-04-24 00:07:08 (2 months ago)	Jan 31 04:00:01 sip sshd[13023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jan 31 04:00:01 sip sshd[13023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.220.85.26 Jan 31 04:00:03 sip sshd[13023]: Failed password for invalid user zulfikar from 112.220.85.26 port 36096 ssh2 Jan 31 04:01:16 sip sshd[13350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.220.85.26 show less	Brute-Force SSH
🇺🇸 Xarcotic	2025-07-06 02:08:59 (1 year ago)	[Birdo Server] SSH-Multi login Attempt	Brute-Force SSH
Anonymous	2025-07-03 15:04:06 (1 year ago)	High Number of Destinations	Port Scan
Anonymous	2023-08-07 02:37:22 (2 years ago)	(sshd) Failed SSH login from 112.220.85.26 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; Di ... show more (sshd) Failed SSH login from 112.220.85.26 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Aug 6 22:36:49 server2 sshd[7752]: Did not receive identification string from 112.220.85.26 port 58204 Aug 6 22:37:02 server2 sshd[7785]: Invalid user NL5xUDpV2xRa from 112.220.85.26 port 49274 Aug 6 22:37:09 server2 sshd[7814]: Invalid user 0RJ2VKaEuppv from 112.220.85.26 port 37382 Aug 6 22:37:15 server2 sshd[7845]: Invalid user 6OrRrdPg5DCd from 112.220.85.26 port 44472 Aug 6 22:37:18 server2 sshd[7855]: Invalid user t5wxkplHFXQT from 112.220.85.26 port 57096 show less	Brute-Force
Anonymous	2023-08-07 01:17:30 (2 years ago)	Honeypot hit.	Port Scan Hacking Exploited Host
🇫🇷 oonux.net	2023-08-07 00:26:05 (2 years ago)	RouterOS: Scanning detected TCP 112.220.85.26:35240 > x.x.x.x:22	Port Scan
🇨🇿 lp	2023-08-05 19:47:28 (2 years ago)	SSH Brute force: 1 attempts were recorded from 112.220.85.26 2023-08-05T20:31:15+02:00 Invalid user ... show more SSH Brute force: 1 attempts were recorded from 112.220.85.26 2023-08-05T20:31:15+02:00 Invalid user NL5xUDpV2xRa from 112.220.85.26 port 48564 show less	Brute-Force SSH
🇩🇪 www.blocklist.de	2023-08-05 10:43:00 (2 years ago)	Aug 4 12:26:17 www sshd[17359]: AD user NL5xUDpV2xRa from 112.220.85.26 Aug 4 12:26:21 www sshd[17 ... show more Aug 4 12:26:17 www sshd[17359]: AD user NL5xUDpV2xRa from 112.220.85.26 Aug 4 12:26:21 www sshd[17361]: AD user 0RJ2VKaEuppv from 112.220.85.26 Aug 4 12:26:26 www sshd[17363]: AD user 6OrRrdPg5DCd from 112.220.85.26 Aug 4 12:26:29 www sshd[17365]: AD user t5wxkplHFXQT from 112.220.85.26 Aug 4 12:26:34 www sshd[17367]: AD user YWgd2fsuxnOB from 112.220.85.26 Aug 4 12:26:49 www sshd[17369]: AD user iWM1vHvZOGq5 from 112.220.85.26 Aug 4 12:26:52 www sshd[17371]: AD user 2x8fys98zOYR from 112.220.85.26 Aug 4 12:26:56 www sshd[17373]: AD user LgQ8GTihLTVm from 112.220.85.26 Aug 4 12:27:01 www sshd[17375]: AD user suZ0bBNlWsNX from 112.220.85.26 Aug 4 12:27:06 www sshd[17377]: AD user 9Ptir4MPwcKl from 112.220.85.26 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=112.220.85.26 show less	FTP Brute-Force Hacking
🇨🇿 lp	2023-08-04 13:47:14 (2 years ago)	SSH Brute force: 1 attempts were recorded from 112.220.85.26 2023-08-04T13:21:41+02:00 Invalid user ... show more SSH Brute force: 1 attempts were recorded from 112.220.85.26 2023-08-04T13:21:41+02:00 Invalid user NL5xUDpV2xRa from 112.220.85.26 port 54368 show less	Brute-Force SSH
🇩🇪 www.blocklist.de	2023-08-04 10:40:38 (2 years ago)	Aug 4 12:26:17 www sshd[17359]: AD user NL5xUDpV2xRa from 112.220.85.26 Aug 4 12:26:21 www sshd[17 ... show more Aug 4 12:26:17 www sshd[17359]: AD user NL5xUDpV2xRa from 112.220.85.26 Aug 4 12:26:21 www sshd[17361]: AD user 0RJ2VKaEuppv from 112.220.85.26 Aug 4 12:26:26 www sshd[17363]: AD user 6OrRrdPg5DCd from 112.220.85.26 Aug 4 12:26:29 www sshd[17365]: AD user t5wxkplHFXQT from 112.220.85.26 Aug 4 12:26:34 www sshd[17367]: AD user YWgd2fsuxnOB from 112.220.85.26 Aug 4 12:26:49 www sshd[17369]: AD user iWM1vHvZOGq5 from 112.220.85.26 Aug 4 12:26:52 www sshd[17371]: AD user 2x8fys98zOYR from 112.220.85.26 Aug 4 12:26:56 www sshd[17373]: AD user LgQ8GTihLTVm from 112.220.85.26 Aug 4 12:27:01 www sshd[17375]: AD user suZ0bBNlWsNX from 112.220.85.26 Aug 4 12:27:06 www sshd[17377]: AD user 9Ptir4MPwcKl from 112.220.85.26 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=112.220.85.26 show less	FTP Brute-Force Hacking
Anonymous	2023-08-03 05:58:15 (2 years ago)	Scanning	Port Scan
🇨🇿 lp	2023-08-02 10:46:21 (2 years ago)	SSH Brute force: 1 attempts were recorded from 112.220.85.26 2023-08-02T11:42:18+02:00 Invalid user ... show more SSH Brute force: 1 attempts were recorded from 112.220.85.26 2023-08-02T11:42:18+02:00 Invalid user NL5xUDpV2xRa from 112.220.85.26 port 51976 show less	Brute-Force SSH
🇺🇸 r$	2022-10-25 17:20:22 (3 years ago)		Brute-Force SSH

Showing 1 to 15 of 2059 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.223

🇺🇸 184.105.139.97

🇪🇬 45.241.58.185

🇺🇸 45.3.34.197

🇮🇳 4.213.72.79

🇯🇵 219.109.219.42

🇯🇵 212.32.76.29

🇺🇸 205.210.31.58

🇹🇭 202.29.242.115

🇧🇷 186.225.3.201

🇨🇴 186.31.95.163

🇺🇸 157.245.13.50

🇨🇳 101.96.200.56

🇫🇷 95.111.236.95

🇨🇿 81.95.107.125

🇧🇬 78.128.113.46

🇧🇷 45.178.155.162

🇨🇳 36.27.40.118

🇻🇳 27.79.2.127

🇨🇳 8.137.84.46