221.166.149.86

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
29% Elevated
18 reports
16 reporters · latest 1 week ago
ISP
Korea Telecom
Usage Type
Fixed Line ISP
ASN
AS4766
Domain Name
kt.com
Country
🇰🇷 Korea (the Republic of)
City
Daegu, Daegu
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
18 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇭🇺 Hungary 3 🇺🇸 United States of America 2 🇨🇦 Canada 1
Most common categories SSH 10 Brute-Force 8 Web App Attack 2 Port Scan 1 Hacking 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 Kejult
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
Hacking SSH
🇭🇺 jani.hu
Hit on SSH honeypot at 2026-10-11 20:24:13 from 221.166.149.86 as user root with password root
Brute-Force SSH
🇳🇱 globcom
SSH-BruteForce
Brute-Force SSH
🇺🇸 bigscoots.com
Brute-Force SSH
🇺🇸 Loris007
Fail2Ban (SSH (Real sshd service, no honeypot!)) detected attack from 221.166.149.86
Port Scan Brute-Force SSH
🇨🇳 SA19999
Auto-report: brute_force | sources=["peer-sync"] | Fox honeypot cluster
Web App Attack
🇭🇺 jani.hu
Hit on SSH honeypot at 2026-09-22 15:07:05 from 221.166.149.86 as user admin with password password
Brute-Force SSH
🇨🇦 DRI
Web attack/Malicious activity detected
Web App Attack
🇭🇺 jani.hu
Hit on SSH honeypot at 2026-09-15 20:39:32 from 221.166.149.86 as user guest with password guest
Brute-Force SSH
🇸🇬 drewf.ink
[22:41] Attempted SSH login with credentials root:a***n
Brute-Force SSH
🇵🇱 lns.bz
SSH bruteforce [BY]
SSH
🇰🇷 2048
SSH credential brute-force observed by honeypot. Source IP: 221.166.149.86 Targeted device: Ubuntu server First seen: 10 Sep 2026 14:09:35 UTC Last seen: 10 Sep 2026 14:09:35 UTC Attempts: 1 Client: SSH-2.0-Go Sample credentials: operator:operator
Brute-Force SSH
🇲🇩 chummy-clinch8q
SSH brute-force detected by Fail2Ban on linguae.lat
Brute-Force SSH
🇫🇮 bittiguru.fi
Hacking Brute-Force Web App Attack
🇨🇿 ptlab
Detected wp_login attack from WP-host.
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 123.165.80.49
🇨🇳 120.55.58.176
🇰🇷 112.156.166.41
🇻🇳 103.195.238.237
🇧🇷 45.229.91.2
🇺🇸 20.163.12.185
🇺🇸 143.244.165.143
🇨🇳 113.141.171.139
🇺🇸 109.105.209.53
🇧🇩 103.228.10.84
🇸🇿 102.222.132.206
🇬🇧 92.207.4.157
🇸🇬 47.84.5.135
🇺🇸 152.163.101.100
🇨🇳 139.214.251.139
🇨🇳 118.25.187.138
feedback