218.145.158.95

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
72% Elevated
55 reports
41 reporters · latest 2 weeks ago
ISP
Korea Telecom
Usage Type
Fixed Line ISP
ASN
AS4766
Domain Name
kt.com
Country
🇰🇷 Korea (the Republic of)
City
Seoul, Seoul
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
55 from 41 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 11 🇺🇸 United States of America 6 🇸🇬 Singapore 5
Most common categories Brute-Force 47 SSH 34 Hacking 10 Web App Attack 10 Port Scan 4
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇬🇧 [email protected]
Repeated failed login attempts; auto-blocked by Synology NAS
Brute-Force
Anonymous
Web directory scan: 10 requests in 6h 25m (Last path: '/webapi/auth.cgi?account=prospect&api=SYNO.API.Auth&format=sid&method=login&passwd=prospect&session=FileStation&version=6').
Hacking Web App Attack
🇭🇺 poschm
Synology DSM web login brute-force: 8 failed password attempt(s) between 2026-10-22T20:30:46+02:00 and 2026-10-22T23:34:28+02:00
Brute-Force Web App Attack
🇮🇹 adm2palazzon
Brute-Force SSH
🇮🇹 adm2palazzon
Brute-Force SSH
🇦🇺 Hacker Reporter
Synology DSM web login brute-force: 12 failed password sign-in attempts between 2026-10-06T22:49:37+11:00 and 2026-10-07T08:10:19+11:00 using 6 different usernames (fuat, eudan, reception1, jaume, senior, lxc).
Brute-Force Web App Attack
🇩🇪 sstrack74Abuse
Synology DSM web login brute-force: 4 failed sign-in attempt(s) between 09:47:02 and 18:26:30 CEST on 2026-10-06; part of distributed low-and-slow campaign (1000+ IPs).
Brute-Force Web App Attack
🇮🇳 Parth Maniar
This IP address carried out 1 SSH credential attack (attempts) on 05-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Brute-Force SSH
Anonymous
Web directory scan: 10 requests in 23h 34m (Last path: '/webapi/auth.cgi?account=luc&api=SYNO.API.Auth&format=sid&method=login&passwd=123456&session=FileStation&version=6').
Hacking Web App Attack
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
🇩🇪 Ivan Ivanov
Global Docker honeypot port trap
Port Scan
🇸🇬 drewf.ink
[04:40] Attempted SSH login with credentials root:H4******AC
Brute-Force SSH
🇸🇬 drewf.ink
[03:59] Attempted SSH login with credentials root:H4******AC
Brute-Force SSH
🇬🇧 Deveroonie
2026-10-05T02:29:17.488310+00:00 instance-20241105-1951 sshd[3179949]: Connection closed by authenticating user root 218.145.158.95 port 45820 [preauth] ...
Hacking Brute-Force SSH
🇸🇬 drewf.ink
[02:27] Attempted SSH login with credentials root:H4******AC
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇻 190.86.75.96
🇫🇷 185.194.178.67
🇺🇸 164.92.112.151
🇨🇳 121.40.220.252
🇨🇳 121.40.217.100
🇳🇱 109.160.32.131
🇱🇹 62.60.134.212
🇮🇳 34.131.188.16
🇨🇳 183.222.230.188
🇳🇱 172.70.46.65
🇨🇳 124.193.81.23
🇺🇸 66.132.224.87
🇨🇳 47.104.174.50
🇺🇸 199.165.159.201
🇳🇱 195.178.110.39
🇫🇷 185.194.178.81
feedback