158.174.149.59

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
52% Elevated
45 reports
34 reporters · latest 2 days ago
ISP
Bahnhof AB
Usage Type
Fixed Line ISP
ASN
AS8473
Domain Name
bahnhof.se
Country
🇸🇪 Sweden
City
Eskilstuna, Sodermanland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
45 from 34 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇳🇱 Netherlands 7 🇧🇷 Brazil 3 🇩🇪 Germany 3
Most common categories SSH 12 Brute-Force 10 Web App Attack 8 Hacking 5 Port Scan 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 EGP Abuse Dept
Scanning for port/service exploits on tpc-046.mach3builders.nl
Port Scan Hacking
🇦🇹 AustrianSimon
05 Nov 2026 13:45:09UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 158.174.149.59
Brute-Force
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-25 UTC.
Brute-Force
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇬🇧 spamverify.com
Honeypot Hit: Contact Form
Web Spam Blog Spam Bad Web Bot Web App Attack
Anonymous
BruteForce IMAP/POP3/SMTP
Brute-Force
🇪🇸 DXC-0
Multiple attacks on Honeypot servers
Web Spam Brute-Force Web App Attack Hacking
🇹🇷 Threat.live
Threat.live: Brute Force
Brute-Force
🇰🇷 2048
SSH credential brute-force observed by honeypot. Source IP: 158.174.149.59 Targeted device: DVR First seen: 04 Oct 2026 01:00:19 UTC Last seen: 04 Oct 2026 01:00:19 UTC Attempts: 1 Client: SSH-2.0-Go Sample credentials: telecomadmin:admintelecom
Brute-Force SSH IoT Targeted
🇳🇱 Maurice
Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: user:password • Number of login attempts: 1 • Client: SSH-2.0-Go Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
SSH
🇳🇱 Maurice
Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: user:password • Number of login attempts: 1 • Client: SSH-2.0-Go Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
SSH
🇳🇱 Maurice
Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: user:password • Number of login attempts: 1 • Client: SSH-2.0-Go Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
SSH
🇳🇱 Maurice
Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: user:password • Number of login attempts: 1 • Client: SSH-2.0-Go Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
SSH
🇳🇱 Maurice
Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: user:password • Number of login attempts: 1 • Client: SSH-2.0-Go Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
SSH
🇳🇱 Maurice
Honeypot hit: Brute-force attack detected on 22/SSH • Credential used: user:password • Number of login attempts: 1 • Client: SSH-2.0-Go Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 183.57.182.130
🇨🇳 175.153.221.109
🇺🇸 172.174.115.162
🇺🇸 147.182.183.222
🇺🇸 136.56.178.127
🇨🇳 123.130.94.23
🇵🇱 104.28.225.185
🇪🇸 83.41.138.192
feedback