JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 118.39.166.124

118.39.166.124 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 49%: ?

49%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Kyosai, Gyeongsangnam-do

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 118.39.166.124

Whois 118.39.166.124

IP Abuse Reports for 118.39.166.124:

This IP address has been reported a total of 13 times from 12 distinct sources. 118.39.166.124 was first reported on April 11th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-09-21 17:31:13 (1 day ago)	118.39.166.124 (KR/South Korea/-), 5 distributed sshd attacks on account [admin] in the last 3600 se ... show more 118.39.166.124 (KR/South Korea/-), 5 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 21 12:19:32 12525 sshd[14345]: Invalid user admin from 171.229.3.124 port 54723 Sep 21 12:19:34 12525 sshd[14345]: Failed password for invalid user admin from 171.229.3.124 port 54723 ssh2 Sep 21 12:31:00 12525 sshd[20402]: Invalid user admin from 93.171.100.75 port 51490 Sep 21 12:23:35 12525 sshd[16542]: Invalid user admin from 118.39.166.124 port 55894 Sep 21 12:23:38 12525 sshd[16542]: Failed password for invalid user admin from 118.39.166.124 port 55894 ssh2 IP Addresses Blocked: 171.229.3.124 (VN/Vietnam/dynamic-ip-adsl.viettel.vn) 93.171.100.75 (RU/Russia/93-171-100-75.pppoe.rtatelecom.ru) show less	Brute-Force SSH
🇨🇦 DRI	2026-09-20 22:31:28 (2 days ago)	Web attack/Malicious activity detected	Web App Attack
🇪🇸 el-brujo	2026-09-20 12:57:37 (3 days ago)	118.39.166.124 - - [20/Sep/2026:14:57:32 +0200] "GET /administrator/ HTTP/2.0" 404 4620 "-" "Mozilla ... show more 118.39.166.124 - - [20/Sep/2026:14:57:32 +0200] "GET /administrator/ HTTP/2.0" 404 4620 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/05E148;super/3.51.2/iOS/18.1" 118.39.166.124 - - [20/Sep/2026:14:57:33 +0200] "GET /administrator/index.php HTTP/2.0" 404 4620 "https://foro.elhacker.net/administrator/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/05E148;super/3.51.2/iOS/18.1" 118.39.166.124 - - [20/Sep/2026:14:57:36 +0200] "GET /wp-login.php HTTP/2.0" 404 4620 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/05E148;super/3.51.2/iOS/18.1" 118.39.166.124 - - [20/Sep/2026:14:57:37 +0200] "GET /wp-admin/ HTTP/2.0" 404 4620 "https://foro.elhacker.net/wp-login.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/05E148;super/3.51.2/iOS/18.1" ... show less	Web App Attack Hacking
🇺🇸 [email protected]	2026-09-18 10:43:00 (5 days ago)	Total attacks: 2	Brute-Force SSH
🇷🇺 Kotiacat_one	2026-09-17 22:17:34 (5 days ago)	2026-09-18T01:17:29.306250+03:00 sub sshd-session[80214]: Invalid user admin from 118.39.166.124 por ... show more 2026-09-18T01:17:29.306250+03:00 sub sshd-session[80214]: Invalid user admin from 118.39.166.124 port 39282 ... show less	Brute-Force SSH
🇫🇷 EvoX	2026-09-17 11:49:28 (6 days ago)	🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credential used: operator:op ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credential used: operator:operator • Number of login attempts: 1 • Client: SSH-2.0-Go show less	SSH
🇨🇳 SA19999	2026-09-12 21:04:02 (1 week ago)	Auto-report: brute_force \| sources=["peer-sync"] \| Fox honeypot cluster	Web App Attack
🇨🇭 backslash	2026-08-25 06:18:00 (4 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇨🇦 DRI	2026-08-21 14:34:44 (1 month ago)	Web attack/Malicious activity detected	Web App Attack
🇺🇸 TPI-Abuse	2026-07-31 22:15:29 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 118.39.166.124 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 118.39.166.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 18:15:23.622805 2026] [security2:error] [pid 328001:tid 328001] [client 118.39.166.124:35334] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hodlmoser.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hodlmoser.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "am0ee8z53Dj3uo5pqdOA_wAAAGM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-07-25 04:07:50 (1 month ago)	118.39.166.124 - - [25/Jul/2026:00:07:43 -0400] "POST /wp-login.php HTTP/1.0" 200 12269 "https://wor ... show more 118.39.166.124 - - [25/Jul/2026:00:07:43 -0400] "POST /wp-login.php HTTP/1.0" 200 12269 "https://worklinkweb.com/wp-login.php" "Mozilla/5.0 (Windows NT 17.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.91 Safari/537.36 OPR/73.0.4254.46" 118.39.166.124 - - [25/Jul/2026:00:07:45 -0400] "GET /wp-login.php HTTP/1.0" 200 11996 "-" "Mozilla/5.0 (Windows NT 17.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.91 Safari/537.36 OPR/73.0.4254.46" 118.39.166.124 - - [25/Jul/2026:00:07:46 -0400] "POST /wp-login.php HTTP/1.0" 200 12353 "https://worklinkweb.com/wp-login.php" "Mozilla/5.0 (Windows NT 17.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.91 Safari/537.36 OPR/73.0.4254.46" 118.39.166.124 - - [25/Jul/2026:00:07:49 -0400] "GET /wp-login.php HTTP/1.0" 200 11964 "-" "Mozilla/5.0 (Windows NT 17.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.91 Safari/537.36 OPR/73.0.4254.46" 118.39.166.124 - - [25/Jul/2 ... show less	Web App Attack
Anonymous	2026-07-12 17:29:58 (2 months ago)	118.39.166.124 - - [12/Jul/2026:19:29:45 +0200] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5. ... show more 118.39.166.124 - - [12/Jul/2026:19:29:45 +0200] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" ... show less	Web App Attack
🇩🇪 MusicLibrary	2026-04-11 23:53:57 (5 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇼 197.221.232.44

🇺🇸 192.9.241.66

🇮🇳 182.79.13.2

🇿🇲 102.220.158.156

🇧🇬 79.124.62.126

🇻🇳 42.113.16.168

🇺🇸 216.218.206.78

🇺🇸 195.184.76.117

🇳🇱 193.47.62.69

🇺🇦 176.105.201.118

🇳🇱 176.65.148.205

🇧🇷 168.228.4.124

🇹🇷 151.250.6.152

🇺🇸 144.225.187.68

🇮🇳 103.84.236.242

🇫🇷 91.231.89.70

🇩🇪 85.202.163.162

🇷🇺 83.237.29.98

🇸🇬 45.43.63.68

🇺🇸 43.166.134.114