Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Gunsan

Region: Jeollabuk-do

Country: South Korea

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
query : 59.1.147.223


# KOREAN(UTF8)

조회하신 IPv4주소는 한국인터넷진흥원으로부터 아래의 관리대행자에게 할당되었으며, 할당 정보는 다음과 같습니다.

[ 네트워크 할당 정보 ]
IPv4주소           : 59.0.0.0 - 59.31.255.255 (/11)
기관명             : 주식회사 케이티
서비스명           : KORNET
주소               : 경기도 성남시 분당구 불정로 90
우편번호           : 13606
할당일자           : 20040831

이름               : IP주소 담당자
전화번호           : +82-2-500-6630
전자우편           : kornet_ip@kt.com

조회하신 IPv4주소는 위의 관리대행자로부터 아래의 사용자에게 할당되었으며, 할당 정보는 다음과 같습니다.
--------------------------------------------------------------------------------


[ 네트워크 할당 정보 ]
IPv4주소           : 59.1.147.0 - 59.1.147.255 (/24)
기관명             : (주) 케이티
네트워크 구분      : CUSTOMER
주소               : 경기도 성남시 분당구 불정로 90
우편번호           : 13606
할당내역 등록일    : 20220920

이름               : IP주소 담당자
전화번호           : +82-2-500-6630
전자우편           : kornet_ip@kt.com


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address       : 59.0.0.0 - 59.31.255.255 (/11)
Organization Name  : Korea Telecom
Service Name       : KORNET
Address            : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90
Zip Code           : 13606
Registration Date  : 20040831

Name               : IP Manager
Phone              : +82-2-500-6630
E-Mail             : kornet_ip@kt.com

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address       : 59.1.147.0 - 59.1.147.255 (/24)
Organization Name  : Korea Telecom
Network Type       : CUSTOMER
Address            : 90 Buljeongro Bundang-Gu Seongnam-Si Gyeonggi-Do
Zip Code           : 13606
Registration Date  : 20220920

Name               : IP Manager
Phone              : +82-2-500-6630
E-Mail             : kornet_ip@kt.com


- KISA/KRNIC WHOIS Service -
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.1.147.223
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56036
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;59.1.147.223.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026060302 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 04 09:32:32 CST 2026
;; MSG SIZE  rcvd: 105
Host info
Host 223.147.1.59.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 223.147.1.59.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.186.175.151 attack
Aug  9 17:31:12 vps46666688 sshd[21827]: Failed password for root from 222.186.175.151 port 49426 ssh2
Aug  9 17:31:15 vps46666688 sshd[21827]: Failed password for root from 222.186.175.151 port 49426 ssh2
...
2020-08-10 04:36:40
117.103.2.114 attack
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-09T20:20:32Z and 2020-08-09T20:26:22Z
2020-08-10 04:42:46
43.226.145.36 attackspambots
Aug  9 22:26:36 fhem-rasp sshd[2941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.145.36  user=root
Aug  9 22:26:38 fhem-rasp sshd[2941]: Failed password for root from 43.226.145.36 port 60284 ssh2
...
2020-08-10 04:30:14
187.144.232.58 attackspam
Aug  9 11:41:30 v11 sshd[25135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.144.232.58  user=r.r
Aug  9 11:41:33 v11 sshd[25135]: Failed password for r.r from 187.144.232.58 port 13821 ssh2
Aug  9 11:41:33 v11 sshd[25135]: Received disconnect from 187.144.232.58 port 13821:11: Bye Bye [preauth]
Aug  9 11:41:33 v11 sshd[25135]: Disconnected from 187.144.232.58 port 13821 [preauth]
Aug  9 11:55:41 v11 sshd[26751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.144.232.58  user=r.r
Aug  9 11:55:43 v11 sshd[26751]: Failed password for r.r from 187.144.232.58 port 22722 ssh2
Aug  9 11:55:43 v11 sshd[26751]: Received disconnect from 187.144.232.58 port 22722:11: Bye Bye [preauth]
Aug  9 11:55:43 v11 sshd[26751]: Disconnected from 187.144.232.58 port 22722 [preauth]
Aug  9 11:59:54 v11 sshd[27099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost........
-------------------------------
2020-08-10 04:21:45
106.13.89.5 attack
Aug  3 02:12:07 v26 sshd[28144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.89.5  user=r.r
Aug  3 02:12:09 v26 sshd[28144]: Failed password for r.r from 106.13.89.5 port 55148 ssh2
Aug  3 02:12:10 v26 sshd[28144]: Received disconnect from 106.13.89.5 port 55148:11: Bye Bye [preauth]
Aug  3 02:12:10 v26 sshd[28144]: Disconnected from 106.13.89.5 port 55148 [preauth]
Aug  3 02:21:54 v26 sshd[29271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.89.5  user=r.r
Aug  3 02:21:56 v26 sshd[29271]: Failed password for r.r from 106.13.89.5 port 53842 ssh2
Aug  3 02:21:56 v26 sshd[29271]: Received disconnect from 106.13.89.5 port 53842:11: Bye Bye [preauth]
Aug  3 02:21:56 v26 sshd[29271]: Disconnected from 106.13.89.5 port 53842 [preauth]
Aug  3 02:25:24 v26 sshd[29715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.89.5  user=r.r
A........
-------------------------------
2020-08-10 04:33:24
208.109.8.97 attackbots
Aug  9 15:17:34 [host] sshd[11484]: pam_unix(sshd:
Aug  9 15:17:37 [host] sshd[11484]: Failed passwor
Aug  9 15:23:34 [host] sshd[11599]: pam_unix(sshd:
2020-08-10 04:16:19
222.186.15.158 attack
Aug  9 17:26:37 vps46666688 sshd[21628]: Failed password for root from 222.186.15.158 port 59366 ssh2
Aug  9 17:26:40 vps46666688 sshd[21628]: Failed password for root from 222.186.15.158 port 59366 ssh2
...
2020-08-10 04:27:34
34.87.171.184 attackbotsspam
Tried sshing with brute force.
2020-08-10 04:39:19
218.92.0.191 attackspambots
Aug  9 21:58:50 dcd-gentoo sshd[9054]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups
Aug  9 21:58:52 dcd-gentoo sshd[9054]: error: PAM: Authentication failure for illegal user root from 218.92.0.191
Aug  9 21:58:52 dcd-gentoo sshd[9054]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 39764 ssh2
...
2020-08-10 04:11:31
81.70.7.32 attack
Aug  9 22:07:27 ns382633 sshd\[2541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.70.7.32  user=root
Aug  9 22:07:29 ns382633 sshd\[2541\]: Failed password for root from 81.70.7.32 port 43804 ssh2
Aug  9 22:20:22 ns382633 sshd\[5014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.70.7.32  user=root
Aug  9 22:20:25 ns382633 sshd\[5014\]: Failed password for root from 81.70.7.32 port 38790 ssh2
Aug  9 22:26:40 ns382633 sshd\[6094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.70.7.32  user=root
2020-08-10 04:27:03
188.226.192.115 attackbots
Aug  9 20:20:07 localhost sshd\[4987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.192.115  user=root
Aug  9 20:20:08 localhost sshd\[4987\]: Failed password for root from 188.226.192.115 port 49500 ssh2
Aug  9 20:27:54 localhost sshd\[5188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.192.115  user=root
...
2020-08-10 04:31:11
100.33.231.133 attackspambots
DATE:2020-08-09 22:26:20, IP:100.33.231.133, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-08-10 04:34:59
114.141.132.88 attackbotsspam
detected by Fail2Ban
2020-08-10 04:07:25
185.53.88.113 attack
Vogel
2020-08-10 04:42:00
140.143.61.200 attackbots
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-09T17:03:04Z and 2020-08-09T17:12:14Z
2020-08-10 04:23:51

Recently Reported IPs

44.238.158.96 91.231.89.225 91.231.89.145 44.204.64.190
34.201.52.232 13.221.1.125 13.217.169.169 2607:f130:0000:0198:0000:0000:46c1:d057
203.24.88.250 121.154.168.204 61.79.214.106 45.142.193.221
59.1.135.55 139.159.170.86 2606:4700:10::6814:5958 2606:4700:10::ac43:1046
2606:4700:10::6816:154 2606:4700:10::6814:9333 2606:4700:10::6814:5343 124.220.42.101