Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Seoul

Region: Seoul Special City

Country: South Korea

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       158.247.192.0 - 158.247.255.255
CIDR:           158.247.192.0/18
NetName:        APNIC
NetHandle:      NET-158-247-192-0-1
Parent:         NET158 (NET-158-0-0-0-0)
NetType:        Early Registrations, Transferred to APNIC
OriginAS:       
Organization:   Asia Pacific Network Information Centre (APNIC)
RegDate:        2020-07-13
Updated:        2020-07-13
Ref:            https://rdap.arin.net/registry/ip/158.247.192.0

ResourceLink:  https://apps.db.ripe.net/db-web-ui/query
ResourceLink:  whois://whois.apnic.net


OrgName:        Asia Pacific Network Information Centre
OrgId:          APNIC
Address:        PO Box 3646
City:           South Brisbane
StateProv:      QLD
PostalCode:     4101
Country:        AU
RegDate:        
Updated:        2012-01-24
Ref:            https://rdap.arin.net/registry/entity/APNIC

ReferralServer:  whois://whois.apnic.net
ResourceLink:  http://wq.apnic.net/whois-search/static/search.html

OrgAbuseHandle: AWC12-ARIN
OrgAbuseName:   APNIC Whois Contact
OrgAbusePhone:  +61 7 3858 3188 
OrgAbuseEmail:  search-apnic-not-arin@apnic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN

OrgTechHandle: AWC12-ARIN
OrgTechName:   APNIC Whois Contact
OrgTechPhone:  +61 7 3858 3188 
OrgTechEmail:  search-apnic-not-arin@apnic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.apnic.net.

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '158.247.192.0 - 158.247.255.255'

% Abuse contact for '158.247.192.0 - 158.247.255.255' is 'abuse@vultr.com'

inetnum:        158.247.192.0 - 158.247.255.255
netname:        CONSTANT-AP
descr:          The Constant Company, LLC
country:        JP
org:            ORG-CL35-AP
admin-c:        TCCL3-AP
tech-c:         TCCL3-AP
abuse-c:        AC2464-AP
status:         ALLOCATED PORTABLE
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
remarks:        Geofeed https://geofeed.constant.com/
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CONSTANT-AP
mnt-routes:     MAINT-CONSTANT-AP
mnt-irt:        IRT-CONSTANT-AP
last-modified:  2022-09-20T16:06:18Z
source:         APNIC

irt:            IRT-CONSTANT-AP
address:        319 Clematis St., Suite 900
e-mail:         abuse@vultr.com
abuse-mailbox:  abuse@vultr.com
admin-c:        TCCL3-AP
tech-c:         TCCL3-AP
auth:           # Filtered
remarks:        abuse@vultr.com was validated on 2026-01-06
mnt-by:         MAINT-CONSTANT-AP
last-modified:  2026-01-06T22:36:25Z
source:         APNIC

organisation:   ORG-CL35-AP
org-name:       The Constant Company, LLC
org-type:       LIR
country:        US
address:        319 CLEMATIS ST
address:        Suite 900
phone:          +1-973-849-0500
e-mail:         abuse@constant.com
mnt-ref:        APNIC-HM
mnt-by:         APNIC-HM
last-modified:  2023-09-05T02:16:27Z
source:         APNIC

role:           ABUSE CONSTANTAP
country:        ZZ
address:        319 Clematis St., Suite 900
phone:          +000000000
e-mail:         abuse@vultr.com
admin-c:        TCCL3-AP
tech-c:         TCCL3-AP
nic-hdl:        AC2464-AP
remarks:        Generated from irt object IRT-CONSTANT-AP
remarks:        abuse@vultr.com was validated on 2026-01-06
abuse-mailbox:  abuse@vultr.com
mnt-by:         APNIC-ABUSE
last-modified:  2026-01-06T22:36:54Z
source:         APNIC

role:           The Constant Company LLC administrator
address:        319 Clematis St. Suite 900
country:        US
phone:          + 1 973 849 0500
e-mail:         abuse@vultr.com
admin-c:        TCCL3-AP
tech-c:         TCCL3-AP
nic-hdl:        TCCL3-AP
mnt-by:         MAINT-CONSTANT-AP
last-modified:  2022-07-19T11:35:40Z
source:         APNIC

% Information related to '158.247.246.0/24AS20473'

route:          158.247.246.0/24
origin:         AS20473
descr:          The Constant Company, LLC
                319 CLEMATIS ST
                Suite 900
mnt-by:         MAINT-CONSTANT-AP
last-modified:  2026-01-08T21:09:43Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.247.246.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18702
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;158.247.246.52.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026060200 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 02 22:02:11 CST 2026
;; MSG SIZE  rcvd: 107
Host info
52.246.247.158.in-addr.arpa domain name pointer 158-247-246-52.constant.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
52.246.247.158.in-addr.arpa	name = 158-247-246-52.constant.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
213.158.29.179 attack
Oct  2 16:11:57 * sshd[28177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.158.29.179
Oct  2 16:11:59 * sshd[28177]: Failed password for invalid user test from 213.158.29.179 port 51016 ssh2
2020-10-02 23:28:09
52.172.153.7 attack
(PERMBLOCK) 52.172.153.7 (IN/India/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
2020-10-02 23:46:42
122.51.64.115 attack
SSH login attempts.
2020-10-02 23:44:03
159.65.232.195 attackspambots
Invalid user sonos from 159.65.232.195 port 49528
2020-10-02 23:16:55
180.76.54.123 attack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-10-02 23:37:25
220.180.119.192 attack
Oct  2 13:18:30 meumeu sshd[1226880]: Invalid user cactiuser from 220.180.119.192 port 49116
Oct  2 13:18:30 meumeu sshd[1226880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.180.119.192 
Oct  2 13:18:30 meumeu sshd[1226880]: Invalid user cactiuser from 220.180.119.192 port 49116
Oct  2 13:18:31 meumeu sshd[1226880]: Failed password for invalid user cactiuser from 220.180.119.192 port 49116 ssh2
Oct  2 13:22:04 meumeu sshd[1227048]: Invalid user monica from 220.180.119.192 port 16507
Oct  2 13:22:04 meumeu sshd[1227048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.180.119.192 
Oct  2 13:22:04 meumeu sshd[1227048]: Invalid user monica from 220.180.119.192 port 16507
Oct  2 13:22:05 meumeu sshd[1227048]: Failed password for invalid user monica from 220.180.119.192 port 16507 ssh2
Oct  2 13:25:37 meumeu sshd[1227253]: Invalid user ubuntu from 220.180.119.192 port 39434
...
2020-10-02 23:42:29
222.186.30.76 attack
Oct  2 15:28:06 localhost sshd[9131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76  user=root
Oct  2 15:28:09 localhost sshd[9131]: Failed password for root from 222.186.30.76 port 14832 ssh2
Oct  2 15:28:11 localhost sshd[9131]: Failed password for root from 222.186.30.76 port 14832 ssh2
Oct  2 15:28:06 localhost sshd[9131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76  user=root
Oct  2 15:28:09 localhost sshd[9131]: Failed password for root from 222.186.30.76 port 14832 ssh2
Oct  2 15:28:11 localhost sshd[9131]: Failed password for root from 222.186.30.76 port 14832 ssh2
Oct  2 15:28:06 localhost sshd[9131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76  user=root
Oct  2 15:28:09 localhost sshd[9131]: Failed password for root from 222.186.30.76 port 14832 ssh2
Oct  2 15:28:11 localhost sshd[9131]: Failed password for
...
2020-10-02 23:34:51
128.199.120.132 attackbotsspam
Oct  2 11:48:03 rotator sshd\[16839\]: Invalid user project from 128.199.120.132Oct  2 11:48:05 rotator sshd\[16839\]: Failed password for invalid user project from 128.199.120.132 port 59398 ssh2Oct  2 11:52:40 rotator sshd\[17636\]: Invalid user alicia from 128.199.120.132Oct  2 11:52:42 rotator sshd\[17636\]: Failed password for invalid user alicia from 128.199.120.132 port 44172 ssh2Oct  2 11:56:43 rotator sshd\[18457\]: Invalid user test from 128.199.120.132Oct  2 11:56:45 rotator sshd\[18457\]: Failed password for invalid user test from 128.199.120.132 port 52848 ssh2
...
2020-10-02 23:15:14
213.113.9.166 attackbotsspam
Oct  2 10:04:56 vps639187 sshd\[4273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.113.9.166  user=root
Oct  2 10:04:58 vps639187 sshd\[4277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.113.9.166  user=root
Oct  2 10:04:59 vps639187 sshd\[4273\]: Failed password for root from 213.113.9.166 port 52714 ssh2
...
2020-10-02 23:39:03
185.136.52.158 attack
Time:     Fri Oct  2 15:25:56 2020 +0200
IP:       185.136.52.158 (PT/Portugal/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Oct  2 15:04:30 3-1 sshd[64496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.136.52.158  user=ftpuser
Oct  2 15:04:31 3-1 sshd[64496]: Failed password for ftpuser from 185.136.52.158 port 53022 ssh2
Oct  2 15:19:10 3-1 sshd[64981]: Invalid user admin from 185.136.52.158 port 50328
Oct  2 15:19:12 3-1 sshd[64981]: Failed password for invalid user admin from 185.136.52.158 port 50328 ssh2
Oct  2 15:25:53 3-1 sshd[65260]: Invalid user whois from 185.136.52.158 port 58278
2020-10-02 23:48:53
114.104.135.56 attackbots
Oct  2 01:01:11 srv01 postfix/smtpd\[27252\]: warning: unknown\[114.104.135.56\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  2 01:01:22 srv01 postfix/smtpd\[27252\]: warning: unknown\[114.104.135.56\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  2 01:01:38 srv01 postfix/smtpd\[27252\]: warning: unknown\[114.104.135.56\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  2 01:01:57 srv01 postfix/smtpd\[27252\]: warning: unknown\[114.104.135.56\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  2 01:02:09 srv01 postfix/smtpd\[27252\]: warning: unknown\[114.104.135.56\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-10-02 23:24:58
177.139.194.62 attack
Oct  2 14:13:13 vpn01 sshd[22032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.139.194.62
Oct  2 14:13:15 vpn01 sshd[22032]: Failed password for invalid user trung from 177.139.194.62 port 38300 ssh2
...
2020-10-02 23:21:21
40.113.85.192 attackbots
02.10.2020 02:15:22 - SMTP Spam without Auth on hMailserver 
Detected by ELinOX-hMail-A2F
2020-10-02 23:14:34
106.12.70.112 attackspam
firewall-block, port(s): 12834/tcp
2020-10-02 23:48:35
114.245.31.241 attackbots
Invalid user openhabian from 114.245.31.241 port 58212
2020-10-02 23:21:03

Recently Reported IPs

14.207.194.140 8.216.82.240 8.221.142.53 66.132.186.171
2606:4700:10::6814:4896 27.215.110.93 195.178.110.100 161.35.74.94
2606:4700:10::6814:5003 2606:4700:10::6816:567 2606:4700:10::6814:6573 31.14.254.78
193.32.209.247 193.32.209.243 47.92.139.65 163.8.194.208
2606:4700:10::6814:7895 2606:4700:10::6816:280 185.247.137.200 160.30.142.212