221.167.132.148

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
46% Elevated
12 reports
12 reporters ยท latest 20 hours ago
ISP Korea Telecom
Usage Type Fixed Line ISP
ASN AS4766
Domain Name kt.com
Country ๐Ÿ‡ฐ๐Ÿ‡ท Korea (the Republic of)
City Kyosai, Gyeongsangnam-do

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 221.167.132.148

This IP address has been reported a total of 12 times from 12 distinct sources. 221.167.132.148 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 3 reports; Canada with 1 report; Denmark with 1 report. The most common categories in these recent reports were: SSH 8 times; Brute-Force 7 times; Port Scan 1 time; Web App Attack 1 time.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡บ๐Ÿ‡ธ copyyy
sshd[191984]: Connection attempt from 221.167.132.148 port 49950 ssh2; SSH honeypot on TCP/2222.
Brute-Force SSH
๐Ÿ‡ซ๐Ÿ‡ท 900cm
Sep 30 03:49:09 raspberrypi sshd[2381]: Invalid user ubnt from 221.167.132.148 port 43996 ...
Port Scan Brute-Force SSH
๐Ÿ‡ต๐Ÿ‡ฑ lns.bz
SSH bruteforce [BY]
SSH
๐Ÿ‡ช๐Ÿ‡ธ raiolanetworks.com
Brute-Force SSH
๐Ÿ‡บ๐Ÿ‡ธ bigscoots.com
Brute-Force SSH
๐Ÿ‡บ๐Ÿ‡ธ Like Ma
Brute-Force SSH
๐Ÿ‡ฉ๐Ÿ‡ฐ toolbit.online
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "support" at 2026-09-22T09:57:51Z
Brute-Force SSH
Anonymous
SSH brute force attempt. User: operator, Pass: [REDACTED]
Brute-Force SSH
๐Ÿ‡จ๐Ÿ‡ฆ DRI
Web attack/Malicious activity detected
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช HandyTreff.de
Web App Attack Bad Web Bot
๐Ÿ‡ฉ๐Ÿ‡ช MusicLibrary
Attempted access to non existent wordpress urls
Bad Web Bot
๐Ÿ‡ฉ๐Ÿ‡ช FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 136.109.41.175
๐Ÿ‡น๐Ÿ‡ญ 118.27.150.135
๐Ÿ‡ฉ๐Ÿ‡ช 69.5.169.112
๐Ÿ‡บ๐Ÿ‡ธ 50.114.236.21
๐Ÿ‡ฒ๐Ÿ‡ฆ 45.219.38.242
๐Ÿ‡ง๐Ÿ‡ท 24.152.105.54
๐Ÿ‡ง๐Ÿ‡ท 189.4.107.204
๐Ÿ‡ฐ๐Ÿ‡ท 182.31.209.50
๐Ÿ‡บ๐Ÿ‡ธ 172.174.115.162
๐Ÿ‡ฉ๐Ÿ‡ช 172.120.167.208
๐Ÿ‡ฆ๐Ÿ‡บ 149.118.67.149
๐Ÿ‡ซ๐Ÿ‡ท 141.145.202.144
๐Ÿ‡ฎ๐Ÿ‡ฑ 130.185.96.125
๐Ÿ‡น๐Ÿ‡ญ 118.27.147.113
๐Ÿ‡ซ๐Ÿ‡ท 85.217.140.37
๐Ÿ‡ณ๐Ÿ‡ฑ 77.91.71.92
๐Ÿ‡จ๐Ÿ‡ณ 71.136.75.142
๐Ÿ‡บ๐Ÿ‡ธ 71.6.232.24
๐Ÿ‡ต๐Ÿ‡ฑ 45.138.12.23
๐Ÿ‡ท๐Ÿ‡บ 31.184.195.248