This IP address has been reported a total of
14
times from
13 distinct
sources.
59.24.66.158 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 4
reports;
Germany
with 3
reports;
China
with 1
report.
The most common categories in these recent reports were:
SSH
11
times;
Brute-Force
11
times;
Web App Attack
2
times;
Bad Web Bot
1
time;
Exploited Host
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
59.24.66.158 (KR/South Korea/-), 5 distributed sshd attacks on account [user] in the last 3600 secs; ...
show more59.24.66.158 (KR/South Korea/-), 5 distributed sshd attacks on account [user] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 24 21:53:46 15299 sshd[24163]: Invalid user user from 59.24.66.158 port 47384
Sep 24 21:53:48 15299 sshd[24163]: Failed password for invalid user user from 59.24.66.158 port 47384 ssh2
Sep 24 21:44:11 15299 sshd[17420]: Failed password for invalid user user from 70.167.235.158 port 57129 ssh2
Sep 24 21:48:39 15299 sshd[20488]: Invalid user user from 41.249.48.58 port 42801
Sep 24 21:48:42 15299 sshd[20488]: Failed password for invalid user user from 41.249.48.58 port 42801 ssh2
IP Addresses Blocked:
show less
Automated report from an IoT honeypot. 8 malicious events across 1 connections between 2026-09-04 05 ...
show moreAutomated report from an IoT honeypot. 8 malicious events across 1 connections between 2026-09-04 05:13:40 and 2026-09-04 05:13:48 UTC. Services targeted: ssh. Destination ports: 22. Credential brute-force attempts, e.g. admin/Admin@123, admin/<empty>.
show less