JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

119.201.54.22

Activity Trending Down

Abuse Confidence Score

31% Elevated

24 reports

19 reporters · latest 1 week ago

ISP: Korea Telecom
Usage Type: Fixed Line ISP
ASN: AS4766
Domain Name: kt.com
Country: 🇰🇷 Korea (the Republic of)
City: Daegu, Daegu

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

24 from 19 distinct reporters

First reported

March 31st 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 5 🇳🇱 Netherlands 3 🇨🇦 Canada 1

Most common categories Brute-Force 8 SSH 5 Hacking 3 Web App Attack 3 FTP Brute-Force 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-11-04 09:45:05 UTC · (1 week ago)	Detected mail brute force attack from different servers	Brute-Force
🇺🇸 LSPCCU	2026-10-21 23:53:43 UTC · (3 weeks ago)	TSEC Honeypot Network report. Threat score: 75/100. Categories: Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie. Context: 119.201.54.22 classified as botnet node participating in coordinated attack campaigns (high confidence).	Hacking Brute-Force Web App Attack SSH
🇺🇸 anon333	2026-10-04 07:33:16 UTC · (1 month ago)	Hacker syslog review 1791099195	Hacking
🇨🇳 SA19999	2026-10-02 22:03:42 UTC · (1 month ago)	Auto-report: brute_force \| sources=["peer-sync"] \| Fox honeypot cluster	Web App Attack
🇨🇭 backslash	2026-09-29 01:21:02 UTC · (1 month ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇹🇷 Threat.live	2026-09-28 15:00:05 UTC · (1 month ago)	Threat.live: Brute Force	Brute-Force
🇳🇱 stom	2026-09-26 07:29:34 UTC · (1 month ago)	2026-09-26T07:29:30.231872 socky.stom66.co.uk proftpd[3406595]: session[3406595] 0.0.0.0 (119.201.54.22[119.201.54.22]): USER admin: no such user found from 119.201.54.22 [119.201.54.22] to ::ffff:5.79.80.26:2222 ...	Brute-Force FTP Brute-Force
🇺🇸 anon333	2026-09-25 01:33:15 UTC · (1 month ago)	Hacker syslog review 1790299995	Hacking
🇺🇸 Like Ma	2026-09-24 01:56:10 UTC · (1 month ago)	Sep 23 21:56:06 newage sshd[23347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.201.54.22 Sep 23 21:56:08 newage sshd[23347]: Failed password for invalid user support from 119.201.54.22 port 51960 ssh2 ... show more Sep 23 21:56:06 newage sshd[23347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.201.54.22 Sep 23 21:56:08 newage sshd[23347]: Failed password for invalid user support from 119.201.54.22 port 51960 ssh2 ... show less	Brute-Force SSH
🇨🇦 DRI	2026-09-19 15:22:02 UTC · (1 month ago)	Web attack/Malicious activity detected	Web App Attack
🇳🇱 ParaBug	2026-09-18 12:49:44 UTC · (1 month ago)	2026-09-18T14:49:43.637098+02:00 r2d2 sshd-session[216786]: Invalid user admin from 119.201.54.22 port 42522 ...	Brute-Force SSH
🇳🇱 majo-it.nl	2026-09-17 21:40:33 UTC · (1 month ago)	Sep 17 21:40:29 fail2ban sshd[20803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.201.54.22 Sep 17 21:40:32 fail2ban sshd[20803]: Failed password for invalid user admin from 119.201.54.22 port 35910 ss ... show more Sep 17 21:40:29 fail2ban sshd[20803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.201.54.22 Sep 17 21:40:32 fail2ban sshd[20803]: Failed password for invalid user admin from 119.201.54.22 port 35910 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-09-16 05:17:05 UTC · (1 month ago)	119.201.54.22 (KR/South Korea/-), 5 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 16 00:07:16 15256 sshd[27816]: Invalid user admin from 119.201.54.22 port 44788 Sep 16 00 ... show more 119.201.54.22 (KR/South Korea/-), 5 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 16 00:07:16 15256 sshd[27816]: Invalid user admin from 119.201.54.22 port 44788 Sep 16 00:07:20 15256 sshd[27816]: Failed password for invalid user admin from 119.201.54.22 port 44788 ssh2 Sep 16 00:16:58 15256 sshd[1854]: Invalid user admin from 46.180.22.91 port 50324 Sep 16 00:11:44 15256 sshd[30337]: Invalid user admin from 39.56.11.162 port 38593 Sep 16 00:11:47 15256 sshd[30337]: Failed password for invalid user admin from 39.56.11.162 port 38593 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇫🇷 EvoX	2026-09-11 07:42:47 UTC · (2 months ago)	🛡️ Honeypot [bsts-tpot-sensor]: Brute-force attack detected on 22/SSH • Credential used: admin:admin123 • Number of login attempts: 1 • Client: SSH-2.0-Go	SSH
🇮🇹 VHosting	2026-09-08 09:20:04 UTC · (2 months ago)	Detected mail brute force attack from different servers	Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 147.185.132.98

🇷🇺 95.32.213.174

🇦🇺 2602:f71d:200::30

🇰🇷 218.159.144.187

🇷🇺 217.150.37.249

🇩🇪 162.55.97.171

🇺🇸 129.121.142.157

🇰🇷 59.5.166.137

🇫🇷 51.38.52.50

🇳🇱 45.148.10.157

🇫🇮 37.27.51.142

🇧🇪 35.210.122.62

🇧🇪 35.210.43.95

🇰🇷 1.250.67.190

🇺🇸 216.81.248.11

🇫🇮 170.168.30.93

🇺🇸 162.35.33.22

🇺🇸 154.197.56.163

🇭🇰 144.86.173.131

🇧🇾 37.215.12.165