Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: South Korea

Internet Service Provider: KT Corporation

Hostname: unknown

Organization: Korea Telecom

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Apr 26 08:14:03 ubuntu sshd[32380]: Failed password for invalid user ok from 112.166.148.28 port 40518 ssh2
Apr 26 08:16:48 ubuntu sshd[32425]: Failed password for ftp from 112.166.148.28 port 37376 ssh2
Apr 26 08:19:33 ubuntu sshd[32470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.148.28
2019-10-08 13:48:45
attackbots
2019-07-23T04:46:11.076068cavecanem sshd[4836]: Invalid user system from 112.166.148.28 port 58222
2019-07-23T04:46:11.078767cavecanem sshd[4836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.148.28
2019-07-23T04:46:11.076068cavecanem sshd[4836]: Invalid user system from 112.166.148.28 port 58222
2019-07-23T04:46:12.702941cavecanem sshd[4836]: Failed password for invalid user system from 112.166.148.28 port 58222 ssh2
2019-07-23T04:51:07.603526cavecanem sshd[11572]: Invalid user nd from 112.166.148.28 port 51858
2019-07-23T04:51:07.606373cavecanem sshd[11572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.148.28
2019-07-23T04:51:07.603526cavecanem sshd[11572]: Invalid user nd from 112.166.148.28 port 51858
2019-07-23T04:51:09.867964cavecanem sshd[11572]: Failed password for invalid user nd from 112.166.148.28 port 51858 ssh2
2019-07-23T04:56:06.279841cavecanem sshd[18265]: Invalid user 
...
2019-07-23 13:58:08
attackspam
Jul  7 06:16:36 vps647732 sshd[12386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.148.28
Jul  7 06:16:38 vps647732 sshd[12386]: Failed password for invalid user ma from 112.166.148.28 port 43248 ssh2
...
2019-07-07 13:05:07
attackspambots
2019-07-03T15:34:17.399002hub.schaetter.us sshd\[27266\]: Invalid user ubuntu from 112.166.148.28
2019-07-03T15:34:17.451059hub.schaetter.us sshd\[27266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.148.28
2019-07-03T15:34:19.577302hub.schaetter.us sshd\[27266\]: Failed password for invalid user ubuntu from 112.166.148.28 port 33978 ssh2
2019-07-03T15:37:18.158238hub.schaetter.us sshd\[27301\]: Invalid user gauthier from 112.166.148.28
2019-07-03T15:37:18.214880hub.schaetter.us sshd\[27301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.148.28
...
2019-07-04 00:05:32
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.166.148.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 440
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.166.148.28.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Mon Apr 08 21:38:21 +08 2019
;; MSG SIZE  rcvd: 118

Host info
Host 28.148.166.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 28.148.166.112.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
141.98.9.157 attack
IP attempted unauthorised action
2020-04-26 15:15:36
223.240.80.31 attackspam
Invalid user storage from 223.240.80.31 port 53411
2020-04-26 15:07:27
34.73.56.171 attack
<6 unauthorized SSH connections
2020-04-26 15:22:56
186.95.89.94 attackbotsspam
20/4/25@23:52:26: FAIL: Alarm-Network address from=186.95.89.94
...
2020-04-26 15:30:20
196.29.164.52 attackspambots
Unauthorised access (Apr 26) SRC=196.29.164.52 LEN=52 TOS=0x02 TTL=112 ID=24347 DF TCP DPT=1433 WINDOW=8192 CWR ECE SYN
2020-04-26 15:11:19
188.170.13.225 attackspam
Invalid user cu from 188.170.13.225 port 34372
2020-04-26 15:13:29
211.144.69.249 attackbotsspam
$f2bV_matches
2020-04-26 15:20:29
162.253.131.21 attackspam
(From noe.zachary@gmail.com) Secret way to advertise your website for TOTALLY FREE! See here: http://www.submityourfreeads.xyz
2020-04-26 15:33:27
103.145.12.50 attackbotsspam
Port scan(s) denied
2020-04-26 15:18:14
185.246.64.44 attack
Scanning for exploits - /www/license.txt
2020-04-26 15:48:44
83.14.199.49 attack
Invalid user ja from 83.14.199.49 port 57036
2020-04-26 15:34:08
58.212.43.238 attack
Brute Force - Postfix
2020-04-26 15:24:13
89.248.160.150 attackbots
89.248.160.150 was recorded 15 times by 9 hosts attempting to connect to the following ports: 40798,40793. Incident counter (4h, 24h, all-time): 15, 87, 12428
2020-04-26 15:46:43
98.220.134.161 attack
Invalid user lq from 98.220.134.161 port 36968
2020-04-26 15:17:33
187.53.109.140 attackspambots
Apr 26 06:47:30 vps sshd[603810]: Failed password for invalid user wellington from 187.53.109.140 port 47772 ssh2
Apr 26 06:51:14 vps sshd[623981]: Invalid user walesca from 187.53.109.140 port 41200
Apr 26 06:51:14 vps sshd[623981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187-53-109-140.3g.brasiltelecom.net.br
Apr 26 06:51:16 vps sshd[623981]: Failed password for invalid user walesca from 187.53.109.140 port 41200 ssh2
Apr 26 06:55:00 vps sshd[639569]: Invalid user hdfs from 187.53.109.140 port 34630
...
2020-04-26 15:09:55

Recently Reported IPs

178.62.214.85 198.108.66.154 89.109.53.65 218.103.59.1
218.92.0.175 138.121.12.228 85.187.128.11 81.47.169.143
196.202.118.200 68.183.227.98 138.68.18.232 51.15.84.174
167.99.178.194 196.52.43.92 197.50.71.2 117.85.72.244
178.62.10.133 116.203.101.244 198.108.66.184 185.33.172.135