121.166.193.58

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
42% Elevated
15 reports
14 reporters · latest 1 day ago
ISP
Sudogwongangnambonbujang
Usage Type
Fixed Line ISP
ASN
AS4766
Domain Name
kt.com
Country
🇰🇷 Korea (the Republic of)
City
Seoul, Seoul
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
15 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇦🇿 Azerbaijan 1 🇧🇷 Brazil 1
Most common categories Brute-Force 8 SSH 7 Port Scan 2 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 NetWatch
NetWatch sensor network: The IP 121.166.193.58 executed unauthorized SSH login attempts.
Brute-Force SSH
Anonymous
Brute-Force SSH
🇪🇸 raiolanetworks.com
Honeypot detection: SSH/Telnet brute-force. 2 events observed. 1 login attempts. Reported automatically from a honeypot sensor.
Brute-Force SSH
🇮🇹 VHosting
Detected mail brute force attack from different servers
Brute-Force
🇨🇦 dpinse
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH • Credential used: Admin:Admin • Number of login attempts: 1 • Client: SSH-2.0-Go
SSH
🇩🇪 Kitki30.com
SSH Login Failed (server 2). Log: 2026-10-04T15:01:41.142100+00:00 nic0 sshd[717930]: Invalid user ubnt from 121.166.193.58 port 47666
Brute-Force SSH Port Scan
🇹🇷 Threat.live
Threat.live: Brute Force
Brute-Force
🇨🇳 SA19999
Auto-report: brute_force | sources=["peer-sync"] | Fox honeypot cluster
Web App Attack
🇧🇷 modscleo4
2026-09-20T06:26:23.132532-03:00 salada-de-fruta sshd[4000989]: Invalid user admin from 121.166.193.58 port 43000 ...
Port Scan Brute-Force SSH
🇩🇪 formality
Invalid user admin from 121.166.193.58 port 53662
Brute-Force SSH
🇺🇸 drewf.ink
[08:13] Attempted SSH login with credentials AdminGPON:A*****U
Brute-Force SSH
🇰🇷 2048
SSH credential brute-force observed by honeypot. Source IP: 121.166.193.58 Targeted device: DVR First seen: 10 Sep 2026 14:02:04 UTC Last seen: 10 Sep 2026 14:02:04 UTC Attempts: 1 Client: SSH-2.0-Go Sample credentials: root:root
Brute-Force SSH IoT Targeted
🇨🇦 DRI
Web attack/Malicious activity detected
Web App Attack
🇨🇦 DRI
Web attack/Malicious activity detected
Web App Attack
🇨🇭 backslash
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇷 190.30.185.147
🇨🇱 186.189.99.51
🇻🇳 165.99.16.17
🇫🇷 80.87.206.4
🇲🇽 201.165.138.130
🇨🇳 175.153.221.109
🇧🇪 78.21.151.21
🇺🇸 34.85.166.8
🇸🇬 194.5.82.77
🇩🇪 185.233.226.67
🇩🇪 167.94.146.67
🇺🇸 72.215.46.18
feedback