Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Icheon-si

Region: Gyeonggi-do

Country: South Korea

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
query : 210.97.117.252


# KOREAN(UTF8)

조회하신 IPv4주소는 한국인터넷진흥원으로부터 아래의 관리대행자에게 할당되었으며, 할당 정보는 다음과 같습니다.

[ 네트워크 할당 정보 ]
IPv4주소           : 210.97.116.0 - 210.97.119.255 (/22)
기관명             : 주식회사 케이티
서비스명           : KORNET
주소               : 경기도 성남시 분당구 불정로 90
우편번호           : 13606
할당일자           : 19980916

이름               : IP주소 담당자
전화번호           : +82-2-500-6630
전자우편           : kornet_ip@kt.com

--------------------------------------------------------------------------------

조회하신 IPv4주소에 대한 위 관리대행자의 사용자 할당정보가 존재하지 않습니다.


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address       : 210.97.116.0 - 210.97.119.255 (/22)
Organization Name  : Korea Telecom
Service Name       : KORNET
Address            : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90
Zip Code           : 13606
Registration Date  : 19980916

Name               : IP Manager
Phone              : +82-2-500-6630
E-Mail             : kornet_ip@kt.com


- KISA/KRNIC WHOIS Service -
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 210.97.117.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30536
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;210.97.117.252.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026032400 1800 900 604800 86400

;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 25 00:06:16 CST 2026
;; MSG SIZE  rcvd: 107
Host info
Host 252.117.97.210.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 252.117.97.210.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
78.245.118.141 attack
Jul  3 09:31:11 tanzim-HP-Z238-Microtower-Workstation sshd\[15889\]: Invalid user antonio from 78.245.118.141
Jul  3 09:31:11 tanzim-HP-Z238-Microtower-Workstation sshd\[15889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.245.118.141
Jul  3 09:31:13 tanzim-HP-Z238-Microtower-Workstation sshd\[15889\]: Failed password for invalid user antonio from 78.245.118.141 port 34532 ssh2
...
2019-07-03 19:31:00
199.249.230.79 attack
Jul  3 05:44:37 localhost sshd\[7061\]: Invalid user admin1 from 199.249.230.79 port 21724
Jul  3 05:44:37 localhost sshd\[7061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.249.230.79
Jul  3 05:44:39 localhost sshd\[7061\]: Failed password for invalid user admin1 from 199.249.230.79 port 21724 ssh2
2019-07-03 19:20:22
122.93.235.10 attack
Jul  3 16:19:03 tanzim-HP-Z238-Microtower-Workstation sshd\[13307\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.93.235.10  user=root
Jul  3 16:19:05 tanzim-HP-Z238-Microtower-Workstation sshd\[13307\]: Failed password for root from 122.93.235.10 port 63452 ssh2
Jul  3 16:19:24 tanzim-HP-Z238-Microtower-Workstation sshd\[13400\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.93.235.10  user=root
...
2019-07-03 18:58:06
193.32.163.123 attackspambots
2019-07-03T18:12:22.488180enmeeting.mahidol.ac.th sshd\[31462\]: Invalid user admin from 193.32.163.123 port 36382
2019-07-03T18:12:22.505699enmeeting.mahidol.ac.th sshd\[31462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.32.163.123
2019-07-03T18:12:24.238443enmeeting.mahidol.ac.th sshd\[31462\]: Failed password for invalid user admin from 193.32.163.123 port 36382 ssh2
...
2019-07-03 19:28:18
106.12.196.28 attackspam
Jul  3 05:42:03 MainVPS sshd[20790]: Invalid user wordpress from 106.12.196.28 port 39570
Jul  3 05:42:03 MainVPS sshd[20790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.196.28
Jul  3 05:42:03 MainVPS sshd[20790]: Invalid user wordpress from 106.12.196.28 port 39570
Jul  3 05:42:05 MainVPS sshd[20790]: Failed password for invalid user wordpress from 106.12.196.28 port 39570 ssh2
Jul  3 05:44:30 MainVPS sshd[20949]: Invalid user admin from 106.12.196.28 port 60990
...
2019-07-03 19:24:03
188.161.79.156 attack
abuse hack sip
2019-07-03 19:22:00
42.180.46.235 attack
23/tcp
[2019-07-03]1pkt
2019-07-03 18:51:34
103.213.245.50 attackspam
Jul  3 12:10:55 dev0-dcde-rnet sshd[27401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.213.245.50
Jul  3 12:10:57 dev0-dcde-rnet sshd[27401]: Failed password for invalid user presta from 103.213.245.50 port 48269 ssh2
Jul  3 12:18:50 dev0-dcde-rnet sshd[27435]: Failed password for root from 103.213.245.50 port 33080 ssh2
2019-07-03 19:24:24
43.228.126.182 attackbots
Jul  3 06:55:21 vps691689 sshd[29917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.228.126.182
Jul  3 06:55:23 vps691689 sshd[29917]: Failed password for invalid user tomberli from 43.228.126.182 port 43382 ssh2
Jul  3 06:57:51 vps691689 sshd[29930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.228.126.182
...
2019-07-03 19:06:42
83.209.186.35 attackbotsspam
5555/tcp
[2019-07-03]1pkt
2019-07-03 19:22:40
94.176.76.188 attackspambots
(Jul  3)  LEN=40 TTL=244 ID=33075 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  3)  LEN=40 TTL=244 ID=37489 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  3)  LEN=40 TTL=244 ID=12642 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  3)  LEN=40 TTL=244 ID=10505 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  3)  LEN=40 TTL=244 ID=53830 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  2)  LEN=40 TTL=244 ID=14982 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  2)  LEN=40 TTL=244 ID=16451 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  2)  LEN=40 TTL=244 ID=23263 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  2)  LEN=40 TTL=244 ID=21669 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  2)  LEN=40 TTL=244 ID=6907 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  2)  LEN=40 TTL=244 ID=39963 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  2)  LEN=40 TTL=244 ID=37933 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  2)  LEN=40 TTL=244 ID=42566 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  2)  LEN=40 TTL=244 ID=42974 DF TCP DPT=23 WINDOW=14600 SYN 
 (Jul  1)  LEN=40 TTL=244 ID=165 DF TCP DPT=23 WINDOW=14600 SYN...
2019-07-03 19:22:18
49.249.243.235 attack
Invalid user castis from 49.249.243.235 port 41622
2019-07-03 19:09:53
113.178.33.43 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-02 03:31:40,528 INFO [shellcode_manager] (113.178.33.43) no match, writing hexdump (baa84b3d4f080b81f3bcf2cfbcfe2cd5 :2449062) - MS17010 (EternalBlue)
2019-07-03 19:17:15
188.84.189.235 attackspambots
Jul  3 06:46:45 icinga sshd[7369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.84.189.235
Jul  3 06:46:47 icinga sshd[7369]: Failed password for invalid user server from 188.84.189.235 port 40602 ssh2
...
2019-07-03 19:05:20
183.191.110.144 attackbots
23/tcp
[2019-07-03]1pkt
2019-07-03 19:32:55

Recently Reported IPs

234.230.142.120 18.139.159.159 2606:4700:10::6816:2741 2606:4700:10::6814:6302
2606:4700:10::6816:3972 2606:4700:10::6814:5947 2606:4700:10::6816:4134 2606:4700:10::6814:7628
2606:4700:10::6814:8003 2606:4700:10::6814:5129 2606:4700:10::6816:2910 110.78.158.149
134.35.157.33 2606:4700:10::6814:8466 221.126.8.112 49.79.146.29
222.184.189.120 180.121.241.40 180.121.201.145 121.226.37.246