JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

59.26.178.254

Neutral Activity

Abuse Confidence Score

0% Low Risk

2,160 reports

415 reporters · latest 3 years ago

ISP: Korea Telecom
Usage Type: Fixed Line ISP
ASN: AS4766
Domain Name: kt.com
Country: 🇰🇷 Korea (the Republic of)
City: Nonsan, Chungcheongnam-do

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

59.26.178.254 has been reported 2,160 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

2,160 from 415 distinct reporters

First reported

January 12th 2023

Most recent report

3 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 JA	2023-07-12 14:00:37 UTC · (3 years ago)	ssh login attempt	Brute-Force SSH
🇮🇳 Parth Maniar	2023-05-16 08:17:43 UTC · (3 years ago)	This IP address carried out 2 SSH credential attack (attempts) between 21-04-2023 to 15-05-2023. For more information or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter.	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-04-29 00:39:07 UTC · (3 years ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/59.26.178.254	SSH
🇧🇾 StatsMe	2023-04-28 21:13:24 UTC · (3 years ago)	2023-04-28T06:54:45.355760+0300 ET CINS Active Threat Intelligence Poor Reputation IP group 66	Port Scan Hacking Spoofing Brute-Force
🇫🇷 nicosqc	2023-04-28 13:29:11 UTC · (3 years ago)	Invalid user postgres from 59.26.178.254 port 44627	Brute-Force SSH
🇫🇷 nicosqc	2023-04-28 13:29:11 UTC · (3 years ago)	Invalid user postgres from 59.26.178.254 port 44627	Brute-Force SSH
Anonymous	2023-04-28 12:45:51 UTC · (3 years ago)	59.26.178.254 (KR/South Korea/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: Apr 28 08:44:16 server5 sshd[4233]: Failed password for root from 77.85.216.134 port 35701 ... show more 59.26.178.254 (KR/South Korea/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: Apr 28 08:44:16 server5 sshd[4233]: Failed password for root from 77.85.216.134 port 35701 ssh2 Apr 28 08:45:48 server5 sshd[4484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.26.178.254 user=root Apr 28 08:45:26 server5 sshd[4443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.90.191.216 user=root Apr 28 08:45:28 server5 sshd[4443]: Failed password for root from 164.90.191.216 port 52650 ssh2 Apr 28 08:45:37 server5 sshd[4461]: Failed password for root from 77.85.216.134 port 47397 ssh2 Apr 28 08:41:46 server5 sshd[3782]: Failed password for root from 61.238.103.181 port 38746 ssh2 IP Addresses Blocked: 77.85.216.134 (BG/Bulgaria/-) show less	Brute-Force
🇺🇸 MPL	2023-04-28 09:08:28 UTC · (3 years ago)	tcp/56575 (2 or more attempts)	Port Scan
Anonymous	2023-04-28 08:05:09 UTC · (3 years ago)	(sshd) Failed SSH login from 59.26.178.254 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Apr 28 04:04:55 server4 sshd[23085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ss ... show more (sshd) Failed SSH login from 59.26.178.254 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Apr 28 04:04:55 server4 sshd[23085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.26.178.254 user=root Apr 28 04:04:57 server4 sshd[23085]: Failed password for root from 59.26.178.254 port 39814 ssh2 Apr 28 04:05:00 server4 sshd[23085]: Failed password for root from 59.26.178.254 port 39814 ssh2 Apr 28 04:05:03 server4 sshd[23085]: Failed password for root from 59.26.178.254 port 39814 ssh2 Apr 28 04:05:06 server4 sshd[23085]: Failed password for root from 59.26.178.254 port 39814 ssh2 show less	Brute-Force
🇧🇬 MazenHost	2023-04-28 07:19:39 UTC · (3 years ago)	Apr 28 09:19:25 Dev sshd[1118115]: Invalid user default from 59.26.178.254 port 44912 Apr 28 09:19:27 Dev sshd[1118115]: Failed password for invalid user default from 59.26.178.254 port 44912 ssh2 Apr 28 09:19:33 Dev sshd[1118115]: Failed password fo ... show more Apr 28 09:19:25 Dev sshd[1118115]: Invalid user default from 59.26.178.254 port 44912 Apr 28 09:19:27 Dev sshd[1118115]: Failed password for invalid user default from 59.26.178.254 port 44912 ssh2 Apr 28 09:19:33 Dev sshd[1118115]: Failed password for invalid user default from 59.26.178.254 port 44912 ssh2 Apr 28 09:19:39 Dev sshd[1118115]: Failed password for invalid user default from 59.26.178.254 port 44912 ssh2 ... show less	Brute-Force SSH
🇺🇸 amit177	2023-04-28 06:26:34 UTC · (3 years ago)		Brute-Force SSH
🇺🇸 MPL	2023-04-28 05:13:23 UTC · (3 years ago)	tcp/50000 (2 or more attempts)	Port Scan
🇧🇬 MazenHost	2023-04-28 05:10:26 UTC · (3 years ago)	Apr 28 07:10:15 dev-whitehorserp sshd[52915]: Invalid user postgres from 59.26.178.254 port 47416 Apr 28 07:10:17 dev-whitehorserp sshd[52915]: Failed password for invalid user postgres from 59.26.178.254 port 47416 ssh2 Apr 28 07:10:22 dev-whitehors ... show more Apr 28 07:10:15 dev-whitehorserp sshd[52915]: Invalid user postgres from 59.26.178.254 port 47416 Apr 28 07:10:17 dev-whitehorserp sshd[52915]: Failed password for invalid user postgres from 59.26.178.254 port 47416 ssh2 Apr 28 07:10:22 dev-whitehorserp sshd[52915]: Failed password for invalid user postgres from 59.26.178.254 port 47416 ssh2 Apr 28 07:10:26 dev-whitehorserp sshd[52915]: Failed password for invalid user postgres from 59.26.178.254 port 47416 ssh2 ... show less	Brute-Force SSH
🇯🇵 stfw	2023-04-28 04:24:46 UTC · (3 years ago)	10001/tcp 22022/tcp 56575/tcp... [2023-03-06/04-28]12pkt,6pt.(tcp)	Port Scan
🇺🇸 vmsimple.com	2023-04-28 03:58:03 UTC · (3 years ago)	Apr 27 23:57:58 corp sshd[11580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.26.178.254 Apr 27 23:57:59 corp sshd[11580]: Failed password for invalid user gitlab-runner from 59.26.178.254 port 58475 ssh ... show more Apr 27 23:57:58 corp sshd[11580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.26.178.254 Apr 27 23:57:59 corp sshd[11580]: Failed password for invalid user gitlab-runner from 59.26.178.254 port 58475 ssh2 Apr 27 23:58:02 corp sshd[11580]: Failed password for invalid user gitlab-runner from 59.26.178.254 port 58475 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 2160 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 212.73.148.14

🇨🇱 191.115.35.69

🇨🇳 117.187.109.247

🇸🇬 114.119.151.67

🇺🇸 104.152.52.240

🇺🇸 104.152.52.203

🇺🇸 104.152.52.201

🇺🇸 104.152.52.146

🇺🇸 104.152.52.125

🇬🇧 45.135.142.121

🇬🇧 192.248.150.180

🇸🇬 188.166.177.231

🇸🇬 114.119.133.213

🇫🇷 92.205.239.91

🇨🇦 85.217.149.11

🇳🇱 77.67.26.29

🇮🇳 49.207.182.187

🇬🇧 45.135.142.127

🇬🇧 45.135.142.62

🇬🇧 45.135.142.57