JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

59.20.220.158

Recent Activity

Abuse Confidence Score

100% Critical

79 reports

61 reporters · latest 20 minutes ago

ISP: Korea Telecom
Usage Type: Fixed Line ISP
ASN: AS4766
Domain Name: kt.com
Country: 🇰🇷 Korea (the Republic of)
City: Busan, Busan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

79 from 61 distinct reporters

First reported

November 13th 2026

Most recent report

20 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 18 🇺🇸 United States of America 17 🇫🇮 Finland 9

Most common categories Brute-Force 71 SSH 69 Hacking 5 Port Scan 3 Web App Attack 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 VMHeaven.io	2026-11-15 14:09:20 UTC · (20 minutes ago)	2026-11-15T14:05:56.210457+00:00 baloo sshd[372436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.158 2026-11-15T14:05:58.251514+00:00 baloo sshd[372436]: Failed password for invalid user test2 fr ... show more 2026-11-15T14:05:56.210457+00:00 baloo sshd[372436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.158 2026-11-15T14:05:58.251514+00:00 baloo sshd[372436]: Failed password for invalid user test2 from 59.20.220.158 port 56424 ssh2 2026-11-15T14:09:17.411399+00:00 baloo sshd[372747]: Invalid user ubuntu from 59.20.220.158 port 58976 2026-11-15T14:09:17.417300+00:00 baloo sshd[372747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.158 2026-11-15T14:09:19.714885+00:00 baloo sshd[372747]: Failed password for invalid user ubuntu from 59.20.220.158 port 58976 ssh2 ... show less	Brute-Force SSH
🇷🇺 EndCore Group	2026-11-15 14:07:31 UTC · (22 minutes ago)	2026-11-15T14:04:04.952737+00:00 funtv73228.serv.host sshd[748969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.158 user=root 2026-11-15T14:04:07.284141+00:00 funtv73228.serv.host sshd[748969]: F ... show more 2026-11-15T14:04:04.952737+00:00 funtv73228.serv.host sshd[748969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.158 user=root 2026-11-15T14:04:07.284141+00:00 funtv73228.serv.host sshd[748969]: Failed password for root from 59.20.220.158 port 22689 ssh2 2026-11-15T14:07:30.008033+00:00 funtv73228.serv.host sshd[748984]: Invalid user test2 from 59.20.220.158 port 24043 ... show less	Brute-Force SSH
🇹🇷 eyesilyurt	2026-11-15 14:06:53 UTC · (22 minutes ago)	cv- login authenticator failed Incorrect authentication data	Brute-Force SSH
🇮🇹 CoreTech srl	2026-11-15 13:39:53 UTC · (49 minutes ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇵🇱 Gornik Zabrze	2026-11-15 12:33:57 UTC · (1 hour ago)	Nov 15 13:27:34 gzdatacloud01 sshd[1242218]: Failed password for root from 59.20.220.158 port 63126 ssh2 Nov 15 13:30:44 gzdatacloud01 sshd[1242774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.15 ... show more Nov 15 13:27:34 gzdatacloud01 sshd[1242218]: Failed password for root from 59.20.220.158 port 63126 ssh2 Nov 15 13:30:44 gzdatacloud01 sshd[1242774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.158 user=root Nov 15 13:30:47 gzdatacloud01 sshd[1242774]: Failed password for root from 59.20.220.158 port 64914 ssh2 Nov 15 13:33:54 gzdatacloud01 sshd[1243322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.158 user=root Nov 15 13:33:56 gzdatacloud01 sshd[1243322]: Failed password for root from 59.20.220.158 port 1708 ssh2 ... show less	FTP Brute-Force Port Scan Hacking Bad Web Bot Brute-Force Web App Attack SSH
🇩🇪 dbmwebdesign	2026-11-15 12:25:13 UTC · (2 hours ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇩🇪 sh97	2026-11-15 10:42:24 UTC · (3 hours ago)	DE901-GC-FFM: SSH Brute Force from 59.20.220.158 at 2026-11-15 16:12:24 IST	Brute-Force SSH
🇬🇧 paradoxnetworks	2026-11-15 10:29:46 UTC · (3 hours ago)	2026-11-15T10:26:13.097175+00:00 smokeping-thn-lhr01.pdx.net.uk sshd[3592639]: Failed password for root from 59.20.220.158 port 46774 ssh2 2026-11-15T10:29:44.513310+00:00 smokeping-thn-lhr01.pdx.net.uk sshd[3592680]: pam_unix(sshd:auth): authenticat ... show more 2026-11-15T10:26:13.097175+00:00 smokeping-thn-lhr01.pdx.net.uk sshd[3592639]: Failed password for root from 59.20.220.158 port 46774 ssh2 2026-11-15T10:29:44.513310+00:00 smokeping-thn-lhr01.pdx.net.uk sshd[3592680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.158 user=root 2026-11-15T10:29:46.389329+00:00 smokeping-thn-lhr01.pdx.net.uk sshd[3592680]: Failed password for root from 59.20.220.158 port 45131 ssh2 ... show less	Brute-Force SSH
🇳🇱 COMPLEX	2026-11-15 10:28:13 UTC · (4 hours ago)	Banned by Multi Agent · node …sgmv · attempts=5 · SSH brute-force / scan	Brute-Force SSH
🇺🇸 HamSammich	2026-11-15 09:35:20 UTC · (4 hours ago)	Automated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-11-15T09:35Z).	Brute-Force SSH
🇺🇸 jennij	2026-11-15 08:35:05 UTC · (5 hours ago)	Fail2Ban sshd ban on 275846.cloudexa-hosting.com ...	Brute-Force SSH
🇺🇸 yzfdude1	2026-11-15 08:33:02 UTC · (5 hours ago)	2026-11-15T01:06:52.037380-07:00 mickey sshd[422247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.158 user=root 2026-11-15T01:06:53.794000-07:00 mickey sshd[422247]: Failed password for invalid u ... show more 2026-11-15T01:06:52.037380-07:00 mickey sshd[422247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.158 user=root 2026-11-15T01:06:53.794000-07:00 mickey sshd[422247]: Failed password for invalid user root from 59.20.220.158 port 7818 ssh2 2026-11-15T01:33:01.947230-07:00 mickey sshd[424476]: User root from 59.20.220.158 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇫🇷 LoneRider	2026-11-15 06:57:13 UTC · (7 hours ago)	Nov 15 07:53:51 plsk sshd[794962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.158 user=root Nov 15 07:53:52 plsk sshd[794962]: Failed password for root from 59.20.220.158 port 47378 ssh2 Nov 15 ... show more Nov 15 07:53:51 plsk sshd[794962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.158 user=root Nov 15 07:53:52 plsk sshd[794962]: Failed password for root from 59.20.220.158 port 47378 ssh2 Nov 15 07:57:11 plsk sshd[795193]: Invalid user dev from 59.20.220.158 port 50530 Nov 15 07:57:11 plsk sshd[795193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.158 Nov 15 07:57:12 plsk sshd[795193]: Failed password for invalid user dev from 59.20.220.158 port 50530 ssh2 ... show less	SSH
🇳🇱 DIICOT	2026-11-15 06:08:52 UTC · (8 hours ago)	Post-auth malicious activity: attacker executed reconnaissance commands after successful SSH auth.	Hacking
🇺🇸 ShadowWhisperer	2026-11-15 06:02:22 UTC · (8 hours ago)	botnet node - cryptominer (outlaw/mdrfckr) [worm, crypto, infected, backdoor]	Brute-Force SSH Hacking Exploited Host

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 216.226.76.20

🇬🇧 193.176.29.26

🇷🇴 193.32.162.84

🇮🇶 109.61.5.76

🇬🇧 35.203.210.205

🇬🇧 5.226.140.111

🇬🇧 5.226.140.83

🇺🇸 206.189.191.198

🇺🇸 192.210.150.196

🇳🇱 172.70.46.202

🇺🇸 162.216.150.7

🇺🇸 134.209.222.205

🇫🇷 134.119.220.51

🇨🇳 120.48.109.10

🇲🇦 105.74.14.149

🇳🇱 64.205.72.168

🇮🇩 36.64.10.42

🇺🇸 34.138.113.77

🇳🇱 34.1.227.183

🇹🇼 1.168.96.137