220.92.57.199

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
29% Elevated
16 reports
15 reporters · latest 2 weeks ago
ISP
Korea Telecom
Usage Type
Fixed Line ISP
ASN
AS4766
Domain Name
kt.com
Country
🇰🇷 Korea (the Republic of)
City
Busan, Busan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
16 from 15 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 5 🇩🇪 Germany 2 🇭🇺 Hungary 1
Most common categories Brute-Force 11 SSH 9 Port Scan 1 Web App Attack 1 Hacking 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 brycemaxheimer
Cowrie SSH honeypot: 1 events in 10m window 2026-10-24T04:00:00+00:00. Users tried: support. Commands:
Brute-Force SSH
🇮🇩 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing.
Hacking Web App Attack
🇺🇸 Runlevel0
Too many failed attempts / attacks from 220.92.57.199
Brute-Force FTP Brute-Force Port Scan
🇺🇸 Phil Schuyler
SSH brute-force attempt on Cowrie honeypot on TCP/22.
Brute-Force SSH
🇭🇺 jani.hu
Hit on SSH honeypot at 2026-10-01 08:46:46 from 220.92.57.199 as user user with password user
Brute-Force SSH
🇩🇪 NetWatch
NetWatch sensor network: The IP 220.92.57.199 executed unauthorized SSH login attempts.
Brute-Force SSH
🇰🇷 2048
SSH credential brute-force observed by honeypot. Source IP: 220.92.57.199 Targeted device: DVR First seen: 19 Sep 2026 13:24:58 UTC Last seen: 19 Sep 2026 13:24:58 UTC Attempts: 1 Client: SSH-2.0-Go Sample credentials: admin:1234
Brute-Force SSH IoT Targeted
🇺🇾 0xJ03l
SSH honeypot. user="admin" password="Admin@123"
Brute-Force SSH
🇹🇷 Threat.live
Suspicious Connection Attempts
Brute-Force
🇺🇸 bigscoots.com
Brute-Force SSH
🇩🇪 tc-hawkes.com
SSH Bruteforce ...
Brute-Force SSH
🇺🇸 Like Ma
Sep 16 16:01:00 newage sshd[8381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.92.57.199 Sep 16 16:01:02 newage sshd[8381]: Failed password for invalid user admin from 220.92.57.199 port 47400 ssh2 ...
Brute-Force SSH
🇩🇪 LRob
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-json/wp/v2/users/
Hacking Web App Attack
🇸🇬 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/http-probing.
Hacking Web App Attack
🇮🇹 VHosting
Detected mail brute force attack from 4 different servers
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 172.236.228.208
🇩🇪 172.70.248.41
🇺🇸 146.88.240.171
🇺🇸 146.19.39.160
🇭🇰 47.83.136.17
🇬🇧 31.14.254.12
🇧🇷 189.80.150.201
🇺🇦 176.39.100.21
🇩🇪 172.70.248.40
🇺🇸 162.252.54.111
🇺🇸 143.110.144.59
🇺🇸 66.132.186.161
🇳🇱 45.14.225.216
🇬🇧 31.14.254.113
🇺🇸 20.106.202.110
🇯🇵 20.48.89.150
feedback