JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

59.20.220.161

Activity Trending Down

Abuse Confidence Score

79% Critical

19 reports

19 reporters · latest 1 week ago

ISP: Korea Telecom
Usage Type: Fixed Line ISP
ASN: AS4766
Domain Name: kt.com
Country: 🇰🇷 Korea (the Republic of)
City: Busan, Busan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

19 from 19 distinct reporters

First reported

October 29th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 3 🇫🇷 France 3 🇺🇸 United States of America 3

Most common categories Brute-Force 15 SSH 15 Port Scan 2 Hacking 1 Exploited Host 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-10-29 16:37:36 UTC · (1 week ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-29 UTC.	Brute-Force
🇺🇸 anon333	2026-10-29 10:34:22 UTC · (1 week ago)	Hacker syslog review 1793270061	Hacking
🇺🇸 LSPCCU	2026-10-29 10:19:20 UTC · (1 week ago)	TSEC Honeypot Network report. Threat score: 70/100. Categories: Brute-Force, SSH. Honeypot: beelzebub. Context: 59.20.220.161 classified as automated brute-force attacker targeting SSH/Telnet credentials (high confidence).	Brute-Force SSH
🇨🇦 SSH-Admin	2026-10-29 09:00:15 UTC · (1 week ago)	Probing for Exploits on ns200	Exploited Host Web App Attack
🇧🇷 Penguinehis	2026-10-29 08:56:20 UTC · (1 week ago)	SSH honeypot detected unauthorized SSH activity against a decoy SSH service.	Brute-Force SSH
🇺🇸 Aleksandr Baskakov	2026-10-29 08:51:40 UTC · (1 week ago)	2026-10-29T08:48:07.932758+00:00 joblendar.com sshd-session[1324590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.161 user=root 2026-10-29T08:48:10.001916+00:00 joblendar.com sshd-session[1324590 ... show more 2026-10-29T08:48:07.932758+00:00 joblendar.com sshd-session[1324590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.161 user=root 2026-10-29T08:48:10.001916+00:00 joblendar.com sshd-session[1324590]: Failed password for root from 59.20.220.161 port 1076 ssh2 2026-10-29T08:49:51.842128+00:00 joblendar.com sshd-session[1325111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.161 user=root 2026-10-29T08:49:53.680655+00:00 joblendar.com sshd-session[1325111]: Failed password for root from 59.20.220.161 port 6389 ssh2 2026-10-29T08:51:38.370939+00:00 joblendar.com sshd-session[1325690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.161 user=root 2026-10-29T08:51:40.059562+00:00 joblendar.com sshd-session[1325690]: Failed password for root from 59.20.220.161 port 12457 ssh2 ... show less	Brute-Force SSH
🇷🇺 buratull	2026-10-29 08:49:01 UTC · (1 week ago)	2026-10-29T11:45:33.385145+03:00 vps1770900684 sshd-session[3053656]: Failed password for root from 59.20.220.161 port 49722 ssh2 2026-10-29T11:47:16.625213+03:00 vps1770900684 sshd-session[3055194]: pam_unix(sshd:auth): authentication failure; logna ... show more 2026-10-29T11:45:33.385145+03:00 vps1770900684 sshd-session[3053656]: Failed password for root from 59.20.220.161 port 49722 ssh2 2026-10-29T11:47:16.625213+03:00 vps1770900684 sshd-session[3055194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.161 user=root 2026-10-29T11:47:18.380508+03:00 vps1770900684 sshd-session[3055194]: Failed password for root from 59.20.220.161 port 58273 ssh2 2026-10-29T11:48:59.506980+03:00 vps1770900684 sshd-session[3056687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.161 user=root 2026-10-29T11:49:01.020224+03:00 vps1770900684 sshd-session[3056687]: Failed password for root from 59.20.220.161 port 63896 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-10-29 08:45:09 UTC · (1 week ago)	ssh bruteforce	Brute-Force SSH
🇫🇷 Zikmadol	2026-10-29 08:33:01 UTC · (1 week ago)	Trapline honeypot: SSH brute-force. Feed: https://github.com/Zikmadol/trapline-ioc	Brute-Force SSH
🇯🇵 Hydrated8853	2026-10-29 08:32:03 UTC · (1 week ago)	2026-10-29T16:28:36.607566+08:00 r901613 sshd[6237]: Failed password for root from 59.20.220.161 port 48162 ssh2 2026-10-29T16:30:15.867495+08:00 r901613 sshd[6315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh ... show more 2026-10-29T16:28:36.607566+08:00 r901613 sshd[6237]: Failed password for root from 59.20.220.161 port 48162 ssh2 2026-10-29T16:30:15.867495+08:00 r901613 sshd[6315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.161 user=root 2026-10-29T16:30:17.573653+08:00 r901613 sshd[6315]: Failed password for root from 59.20.220.161 port 51804 ssh2 2026-10-29T16:31:59.745914+08:00 r901613 sshd[6462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.20.220.161 user=root 2026-10-29T16:32:01.725240+08:00 r901613 sshd[6462]: Failed password for root from 59.20.220.161 port 55381 ssh2 ... show less	Brute-Force SSH
🇧🇾 lns.bz	2026-10-29 08:26:52 UTC · (1 week ago)	SSH bruteforce [BY]	SSH
🇩🇪 ghostwarriors	2026-10-29 08:20:17 UTC · (1 week ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇬🇧 KTSTechnology	2026-10-29 08:18:23 UTC · (1 week ago)	Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL	Port Scan
🇩🇪 Jingoro	2026-10-29 08:10:18 UTC · (1 week ago)	2026-10-29T10:08:30.501935+02:00 timesrv sshd-session[403184]: Invalid user deploy from 59.20.220.161 port 7641 2026-10-29T10:10:17.684580+02:00 timesrv sshd-session[403191]: Invalid user debian from 59.20.220.161 port 63906 ...	Brute-Force SSH
🇵🇱 skillhost.pl	2026-10-29 08:04:28 UTC · (1 week ago)	Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 217.100.184.50

🇸🇬 212.73.148.37

🇪🇬 196.221.164.156

🇩🇪 194.187.176.134

🇨🇳 183.242.200.142

🇺🇸 146.88.241.40

🇩🇪 87.106.218.222

🇫🇮 80.66.83.43

🇺🇸 70.167.235.26

🇵🇰 154.192.131.196

🇫🇷 91.196.152.173

🇯🇵 72.63.212.157

🇫🇷 51.159.52.113

🇿🇦 41.13.14.145

🇸🇬 8.222.181.172

🇳🇱 200.138.46.69

🇩🇪 195.182.16.23

🇹🇷 185.131.211.204

🇹🇭 184.82.27.218

🇸🇬 165.154.200.214