59.28.121.48

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
31% Elevated
23 reports
20 reporters ยท latest 2 weeks ago
ISP
Korea Telecom
Usage Type
Fixed Line ISP
ASN
AS4766
Domain Name
kt.com
Country
๐Ÿ‡ฐ๐Ÿ‡ท Korea (the Republic of)
City
Changwon, Gyeongsangnam-do
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
23 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 2 ๐Ÿ‡ณ๐Ÿ‡ฑ Netherlands 2 ๐Ÿ‡จ๐Ÿ‡ฆ Canada 1
Most common categories Brute-Force 7 SSH 5 Port Scan 3 Hacking 3 Web App Attack 3
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฎ๐Ÿ‡ณ Parth Maniar
This IP address carried out 1 SSH credential attack (attempts) on 21-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Brute-Force SSH
๐Ÿ‡ซ๐Ÿ‡ท EvoX
๐Ÿ›ก๏ธ Honeypot [bsts-tpot-hive]: Brute-force attack detected on 22/SSH โ€ข Credential used: admin:Admin@123 โ€ข Number of login attempts: 1 โ€ข Client: SSH-2.0-Go
SSH
๐Ÿ‡ณ๐Ÿ‡ฑ EGP Abuse Dept
Unsolicited connection to port 465
Port Scan Hacking
๐Ÿ‡ฎ๐Ÿ‡น ipald
MIoT SecOps: Known-bad IP (threat intel)
Hacking
๐Ÿ‡ต๐Ÿ‡น Information Security
Web App Attack ...
Web App Attack
๐Ÿ‡จ๐Ÿ‡ฆ DRI
Web attack/Malicious activity detected
Web App Attack
๐Ÿ‡ณ๐Ÿ‡ฑ ParaBug
2026-09-28T13:49:33.525059+02:00 r2d2 sshd-session[281200]: Invalid user AdminGPON from 59.28.121.48 port 47494 ...
Brute-Force SSH
๐Ÿ‡ฉ๐Ÿ‡ช ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
๐Ÿ‡บ๐Ÿ‡ธ SANYALnet Labs
Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช Kitki30.com
SSH Login Failed (server 2). Log: 2026-09-19T17:57:56.560759+00:00 nic0 sshd[404224]: Invalid user telecomadmin from 59.28.121.48 port 57220
Brute-Force SSH Port Scan
๐Ÿ‡ช๐Ÿ‡ธ DXC-0
Multiple attacks on Honeypot servers
Web Spam Brute-Force Web App Attack Hacking
๐Ÿ‡น๐Ÿ‡ท Threat.live
Threat.live: Brute Force
Brute-Force
๐Ÿ‡ณ๐Ÿ‡ฑ globcom
SSH-BruteForce
Brute-Force SSH
๐Ÿ‡ง๐Ÿ‡พ lns.bz
SSH bruteforce [BY]
SSH
๐Ÿ‡ฎ๐Ÿ‡น VHosting
Detected mail brute force attack from different servers
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 216.25.89.123
๐Ÿ‡ธ๐Ÿ‡ฌ 188.214.106.185
๐Ÿ‡ฉ๐Ÿ‡ช 141.98.152.107
๐Ÿ‡ฉ๐Ÿ‡ช 109.160.32.35
๐Ÿ‡ณ๐Ÿ‡ฑ 103.47.145.62
๐Ÿ‡ณ๐Ÿ‡ฌ 102.88.137.80
๐Ÿ‡บ๐Ÿ‡ฟ 94.158.58.51
๐Ÿ‡บ๐Ÿ‡ธ 75.253.44.1
๐Ÿ‡ณ๐Ÿ‡ฑ 159.65.206.6
๐Ÿ‡ฑ๐Ÿ‡น 77.90.185.125
๐Ÿ‡ณ๐Ÿ‡ฑ 77.67.26.90
๐Ÿ‡บ๐Ÿ‡ธ 68.189.117.116
๐Ÿ‡ต๐Ÿ‡ฑ 45.138.12.6
๐Ÿ‡ท๐Ÿ‡บ 37.140.186.52
๐Ÿ‡บ๐Ÿ‡ธ 35.252.179.246
๐Ÿ‡ง๐Ÿ‡ช 34.52.143.205
๐Ÿ‡ง๐Ÿ‡ช 23.251.135.142
๐Ÿ‡จ๐Ÿ‡ญ 20.250.43.245
๐Ÿ‡ณ๐Ÿ‡ฑ 185.242.226.11
๐Ÿ‡ต๐Ÿ‡ฐ 153.117.13.66
feedback