119.199.74.174
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Korea Telecom
- Usage Type
- Fixed Line ISP
- ASN
- AS4766
- Domain Name
- kt.com
- Country
- 🇰🇷 Korea (the Republic of)
- City
- Kyosai, Gyeongsangnam-do
Abuse Reports
Total reports
27 from
22 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 onyxdev |
Honeypot (ssh): 1 login attempt.
|
Brute-Force SSH | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-hive]: Brute-force attack detected on 22/SSH
• Credential used: root:root
• Number of login attempts: 1
• Client: SSH-2.0-Go
|
SSH | |
| 🇩🇪 Kejult |
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
|
Hacking SSH | |
| 🇫🇮 inlink.ltd |
Known malicious PHP file or CMS probe
|
Web App Attack | |
| 🇩🇪 tc-hawkes.com |
SSH Bruteforce
...
|
Brute-Force SSH | |
| 🇩🇪 NetWatch |
NetWatch sensor network: The IP 119.199.74.174 executed unauthorized SSH login attempts.
|
Brute-Force SSH | |
| 🇩🇪 MusicLibrary |
Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)
|
Bad Web Bot Web App Attack | |
| 🇭🇺 jani.hu |
Hit on SSH honeypot at 2026-10-03 17:30:52 from 119.199.74.174 as user admin with password 1234
|
Brute-Force SSH | |
| 🇨🇦 DRI |
Web attack/Malicious activity detected
|
Web App Attack | |
| Anonymous |
|
Port Scan | |
| 🇨🇦 DRI |
Web attack/Malicious activity detected
|
Web App Attack | |
| 🇰🇷 2048 |
SSH credential brute-force observed by honeypot.
Source IP: 119.199.74.174
Targeted device: Ubuntu server
First seen: 29 Sep 2026 03:59:41 UTC
Last seen: 29 Sep 2026 03:59:41 UTC
Attempts: 1
Client: SSH-2.0-Go
Sample credentials: admin:Admin@123
|
Brute-Force SSH | |
| 🇨🇦 dpinse |
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credential used: admin:1234
• Number of login attempts: 1
• Client: SSH-2.0-Go
|
SSH | |
| 🇨🇦 DRI |
Web attack/Malicious activity detected
|
Web App Attack | |
| 🇩🇪 rd1742 |
2026-09-27 17:59:12,539 quad proftpd[2873838] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (119.199.74.174[119.199.74.174]): USER user: no such user found from 119.199.74.174 [119.199.74.174] to 2.56.97.107:22
|
Brute-Force Exploited Host SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown