Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: South Korea

Internet Service Provider: KT Corporation

Hostname: unknown

Organization: Korea Telecom

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Apr 26 08:14:03 ubuntu sshd[32380]: Failed password for invalid user ok from 112.166.148.28 port 40518 ssh2
Apr 26 08:16:48 ubuntu sshd[32425]: Failed password for ftp from 112.166.148.28 port 37376 ssh2
Apr 26 08:19:33 ubuntu sshd[32470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.148.28
2019-10-08 13:48:45
attackbots
2019-07-23T04:46:11.076068cavecanem sshd[4836]: Invalid user system from 112.166.148.28 port 58222
2019-07-23T04:46:11.078767cavecanem sshd[4836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.148.28
2019-07-23T04:46:11.076068cavecanem sshd[4836]: Invalid user system from 112.166.148.28 port 58222
2019-07-23T04:46:12.702941cavecanem sshd[4836]: Failed password for invalid user system from 112.166.148.28 port 58222 ssh2
2019-07-23T04:51:07.603526cavecanem sshd[11572]: Invalid user nd from 112.166.148.28 port 51858
2019-07-23T04:51:07.606373cavecanem sshd[11572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.148.28
2019-07-23T04:51:07.603526cavecanem sshd[11572]: Invalid user nd from 112.166.148.28 port 51858
2019-07-23T04:51:09.867964cavecanem sshd[11572]: Failed password for invalid user nd from 112.166.148.28 port 51858 ssh2
2019-07-23T04:56:06.279841cavecanem sshd[18265]: Invalid user 
...
2019-07-23 13:58:08
attackspam
Jul  7 06:16:36 vps647732 sshd[12386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.148.28
Jul  7 06:16:38 vps647732 sshd[12386]: Failed password for invalid user ma from 112.166.148.28 port 43248 ssh2
...
2019-07-07 13:05:07
attackspambots
2019-07-03T15:34:17.399002hub.schaetter.us sshd\[27266\]: Invalid user ubuntu from 112.166.148.28
2019-07-03T15:34:17.451059hub.schaetter.us sshd\[27266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.148.28
2019-07-03T15:34:19.577302hub.schaetter.us sshd\[27266\]: Failed password for invalid user ubuntu from 112.166.148.28 port 33978 ssh2
2019-07-03T15:37:18.158238hub.schaetter.us sshd\[27301\]: Invalid user gauthier from 112.166.148.28
2019-07-03T15:37:18.214880hub.schaetter.us sshd\[27301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.148.28
...
2019-07-04 00:05:32
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.166.148.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 440
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.166.148.28.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Mon Apr 08 21:38:21 +08 2019
;; MSG SIZE  rcvd: 118

Host info
Host 28.148.166.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 28.148.166.112.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
74.207.254.168 attackbots
WordPress brute force
2020-08-01 07:14:49
83.48.89.147 attackspam
2020-07-31T18:36:10.1044801495-001 sshd[4370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.red-83-48-89.staticip.rima-tde.net  user=root
2020-07-31T18:36:12.3874401495-001 sshd[4370]: Failed password for root from 83.48.89.147 port 44049 ssh2
2020-07-31T18:40:11.5567621495-001 sshd[4521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.red-83-48-89.staticip.rima-tde.net  user=root
2020-07-31T18:40:12.9260741495-001 sshd[4521]: Failed password for root from 83.48.89.147 port 51054 ssh2
2020-07-31T18:44:09.3790731495-001 sshd[4706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.red-83-48-89.staticip.rima-tde.net  user=root
2020-07-31T18:44:10.7536471495-001 sshd[4706]: Failed password for root from 83.48.89.147 port 58051 ssh2
...
2020-08-01 07:10:23
18.222.229.177 attackbots
mue-0 : Trying access unauthorized files=>/images/jdownloads/screenshots/update.php()
2020-08-01 07:14:06
222.186.3.249 attackbots
Aug  1 00:54:11 OPSO sshd\[1779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.3.249  user=root
Aug  1 00:54:13 OPSO sshd\[1779\]: Failed password for root from 222.186.3.249 port 18592 ssh2
Aug  1 00:54:15 OPSO sshd\[1779\]: Failed password for root from 222.186.3.249 port 18592 ssh2
Aug  1 00:54:17 OPSO sshd\[1779\]: Failed password for root from 222.186.3.249 port 18592 ssh2
Aug  1 00:55:26 OPSO sshd\[2362\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.3.249  user=root
2020-08-01 06:56:44
170.106.38.190 attack
Invalid user ashley from 170.106.38.190 port 53940
2020-08-01 07:07:42
24.171.24.13 attackbotsspam
Jul 31 22:28:20 [host] kernel: [1894479.537842] [U
Jul 31 22:28:20 [host] kernel: [1894480.071698] [U
Jul 31 22:28:20 [host] kernel: [1894480.235198] [U
Jul 31 22:31:03 [host] kernel: [1894642.499808] [U
Jul 31 22:31:03 [host] kernel: [1894642.553357] [U
Jul 31 22:31:09 [host] kernel: [1894649.228825] [U
2020-08-01 07:08:29
212.251.116.198 attackbotsspam
Unauthorized connection attempt from IP address 212.251.116.198 on Port 445(SMB)
2020-08-01 06:57:13
115.79.196.113 attack
Unauthorized connection attempt from IP address 115.79.196.113 on Port 445(SMB)
2020-08-01 07:01:17
114.32.181.215 attackbotsspam
Attempted Brute Force (dovecot)
2020-08-01 07:20:32
114.141.55.178 attackspambots
(sshd) Failed SSH login from 114.141.55.178 (ID/Indonesia/bos45-ho.cyberplus.net.id): 5 in the last 3600 secs
2020-08-01 06:54:21
119.96.173.236 attackspam
bruteforce detected
2020-08-01 07:03:08
117.174.24.186 attackspambots
(ftpd) Failed FTP login from 117.174.24.186 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug  1 01:00:41 ir1 pure-ftpd: (?@117.174.24.186) [WARNING] Authentication failed for user [anonymous]
2020-08-01 07:20:03
80.13.111.108 attackbotsspam
Unauthorized connection attempt from IP address 80.13.111.108 on Port 445(SMB)
2020-08-01 06:58:36
59.57.163.192 attackbots
FTP/21 MH Probe, BF, Hack -
2020-08-01 07:16:43
83.239.40.126 attack
Unauthorized connection attempt from IP address 83.239.40.126 on Port 445(SMB)
2020-08-01 06:48:48

Recently Reported IPs

178.62.214.85 198.108.66.154 89.109.53.65 218.103.59.1
218.92.0.175 138.121.12.228 85.187.128.11 81.47.169.143
196.202.118.200 68.183.227.98 138.68.18.232 51.15.84.174
167.99.178.194 196.52.43.92 197.50.71.2 117.85.72.244
178.62.10.133 116.203.101.244 198.108.66.184 185.33.172.135