Homepage |  Multiple Tracking |  WHOIS |  News |  Contact Us Multiple IP Check |  WHOIS 
Get the flag & IP image for your site

222.106.248.123 is from Korea, Republic of

An Internet Protocol address (IP address 222.106.248.123) is a numerical label that is allocated to a computer (can be any electronic device) which is part of a network (Korea Telecom) that utilises the Internet Protocol. Every IP address does the following: (1) location addressing and (2) host or network interface identification.


e.g. 209.62.45.34 IPv4/IPv6 format for an IP Address, or maxmind.com for a website

Compare to another IP
IP Address:222.106.248.123
IP Address Country:  Korea, Republic of (KR)
IP Address Region:11 Seoul-t'ukpyolsi
IP Address City:Seoul
IP Postal Code
IP Address Area Code0
IP Metro Code0
IP Address Latitude:37.5663986206
IP Address Longitude:126.999702454
IP Address ISP: Korea Telecom
Organisation: Korea Telecom
IP Address Proxy:
IP Address Host:222.106.248.123
Map is loading...

We have 22 complaints about 222.106.248.123

Is 222.106.248.123 misbehaving (engaging in SPAM, brute-force, DOS attack, phishing, or other fraud? Report the abuser now!

this IP is trying to hack my pc - filed under Brute Force
  81.20.65.194
>2 months ago
My log file is reporting;
IP [222.106.248.123] trying to hack my pc using Brute Force
starting at Wed Feb 22 07:06:19 2012.

quite annoying and please stop this mis use
Tried to Broute force my ftp server - filed under FTP Hacking
  80.95.18.249
>2 months ago
Tried to Broute force my ftp server. It's realy annoing.:

(000001)22.2.2012 г. 02:55:53 ч. - (not logged in) (222.106.248.123)> USER NULL
(000001)22.2.2012 г. 02:55:53 ч. - (not logged in) (222.106.248.123)> 331 Password required for null
(000001)22.2.2012 г. 02:55:54 ч. - (not logged in) (222.106.248.123)> PASS oracle12
(000001)22.2.2012 г. 02:55:54 ч. - (not logged in) (222.106.248.123)> 530 Login or password incorrect!
(000001)22.2.2012 г. 02:55:56 ч. - (not logged in) (222.106.248.123)> USER NULL
(000001)22.2.2012 г. 02:55:56 ч. - (not logged in) (222.106.248.123)> 331 Password required for null
(000001)22.2.2012 г. 02:55:58 ч. - (not logged in) (222.106.248.123)> PASS postgres
(000001)22.2.2012 г. 02:55:58 ч. - (not logged in) (222.106.248.123)> 530 Login or password incorrect!
Tried to hack FTP server - filed under Brute Force
  90.53.15.222
>2 months ago
This IP address has attempted to hack into my private FTP server five times today. It answered the password incorrectly until it was banned by my server blocker.
FTP Disctionary Attacks - filed under FTP Hacking
  71.229.214.183
>3 months ago
Trying to access my FTP with a username/password dictionary for unauthorized access. Unknown why trying to hack. Attack has been running for more then 48 hours and then discovered so user is persistent. From Korea, Republic
attempting to login to my ftp server - filed under FTP Hacking
  195.241.214.245
>4 months ago
222.106.248.123 Attempted to access (via brute force?) my FTP server.
.... and now on to the 25 words limit which are needed to post on this site
222.106.248.123 attempting to login to my ftp server - filed under FTP Hacking
  195.240.121.58
>4 months ago
This IP is repeatedly trying to login to my ftp server. Answered the password incorrect after 5 attempts my server blocked the ip address. Not nice!
Attempted to access my FTP server - filed under FTP Hacking
  217.121.139.186
>4 months ago
2012-01-11
6 20:13:33 NULL 222.106.248.123 localhost FTP --- Login Fail
2012-01-11
5 20:13:29 NULL 222.106.248.123 localhost FTP --- Login Fail
2012-01-11
4 20:13:28 NULL 222.106.248.123 localhost FTP --- Login Fail
2012-01-11
3 20:13:27 NULL 222.106.248.123 localhost FTP --- Login Fail
2012-01-11
2 20:13:27 NULL 222.106.248.123 localhost FTP --- Login Fail
2012-01-11
1 20:13:26 NULL 222.106.248.123 localhost FTP --- Login Fail
tryng to connect to my ftp server - filed under Hacking
  217.120.35.50
>4 months ago
this ip trying to connect to my ftp server but my ftp setup is compleet different to login because its private so no acces for others but this ip tried to login in many different ways (logbook)
tries to hack a nas - filed under FTP Hacking
  77.161.126.153
>4 months ago
This ip tries to hack a nas, for days now. The method is Brute force. Please stop this guy or his provider. Ripe.net gives no info
Attempting to log in to private ftp - filed under FTP Hacking
  213.79.32.220
>4 months ago
Attempting to log in to private ftp 11-01-2012, repeated attemps made, what is to be done about this, can it be shut down permanently ?
This IP attempted to login my FTP server - filed under FTP Hacking
  203.185.40.213
>4 months ago
This ip repeatedly tried to login to my ftp server, after 5 attempts my server blocked the ip address. The ip address is under suspicion of trying to log into my router as well.
Same as the others - filed under FTP Hacking
  196.12.227.72
>4 months ago
Tries to login with accounts like oracle, postgres, mysql, admin... My server is also private, I suppose it's a bot scanning ports. My FTP server is in France.
Multiple FTP login attempts from this IP - filed under FTP Hacking
  81.151.50.244
>6 months ago
Tried logging in with various usernames, mostly "oracle". God damn Koreans. He gave up after 50 attempts.

Here I am filling up 25 different words, yep
Repeated attempt to access FTP site - filed under FTP Hacking
  83.67.60.176
>6 months ago
This IP address has made repeated Brute Force attempts, using some default usernames to gain access to our FTP site, mainly between the hours of 23:00 & 01:00
Attempt to login to my FTP server - filed under FTP Hacking
  188.23.245.19
>6 months ago
tried over 18 minutes to login to my FTP server with different user names (NULL, Oracle, postgres, mysql,svn) .. but luckily in vain :-)
Multiple FTP - filed under FTP Hacking
  82.24.68.203
>6 months ago
Trying to hack my FTP server. I can see numerous attempts with the same user name but trying different passwords. Get this hacker banned from the internet.
hacking my ftp server - filed under FTP Hacking
  80.57.114.103
>6 months ago
I hope this is enough info:

[5] Wed 09Nov11 11:12:59 - (000004) Connected to 222.106.248.123 (Local address 192.168.1.5)
[5] Wed 09Nov11 11:13:01 - (000004) Too many times wrong password for user "NULL" - disconnecting
[5] Wed 09Nov11 11:13:02 - (000004) Closing connection
[5] Wed 09Nov11 11:13:02 - (000005) Connected to 222.106.248.123 (Local address 192.168.1.5)
[5] Wed 09Nov11 11:13:04 - (000005) Too many times wrong password for user "NULL" - disconnecting
[5] Wed 09Nov11 11:13:05 - (000005) Closing connection
[5] Wed 09Nov11 11:13:05 - (000006) Connected to 222.106.248.123 (Local address 192.168.1.5)
[5] Wed 09Nov11 11:13:07 - (000006) Too many times wrong password for user "NULL" - disconnecting
[5] Wed 09Nov11 11:13:08 - (000006) Closing connection
[5] Wed 09Nov11 11:13:08 - (000007) Connected to 222.106.248.123 (Local address 192.168.1.5)
[5] Wed 09Nov11 11:13:10 - (000007) Too many times wrong password for user "NULL" - disconnecting
[5] Wed 09Nov11 11:13:11 - (000007) Closing connection
[5] Wed 09Nov11 11:13:11 - (000008) Connected to 222.106.248.123 (Local address 192.168.1.5)
[5] Wed 09Nov11 11:13:13 - (000008) Too many times wrong password for user "NULL" - disconnecting
[5] Wed 09Nov11 11:13:14 - (000008) Closing connection
[5] Wed 09Nov11 11:13:14 - (000009) Connected to 222.106.248.123 (Local address 192.168.1.5)
[5] Wed 09Nov11 11:13:16 - (000009) Too many times wrong password for user "NULL" - disconnecting
[5] Wed 09Nov11 11:13:17 - (000009) Closing connection
[5] Wed 09Nov11 11:13:17 - (000010) Connected to 222.106.248.123 (Local address 192.168.1.5)
[5] Wed 09Nov11 11:13:19 - (000010) Too many times wrong password for user "ORACLE" - disconnecting
[5] Wed 09Nov11 11:13:20 - (000010) Closing connection
[5] Wed 09Nov11 11:13:20 - (000011) Connected to 222.106.248.123 (Local address 192.168.1.5)
[5] Wed 09Nov11 11:13:22 - (000011) Too many times wrong password for user "ORACLE" - disconnecting
[5] Wed 09Nov11 11:13:23 - (000011) Closing connection
[5] Wed 09Nov11 11:13:23 - (000013) Connected to 222.106.248.123 (Local address 192.168.1.5)
[5] Wed 09Nov11 11:13:25 - (000013) Too many times wrong password for user "ORACLE" - disconnecting
[5] Wed 09Nov11 11:13:26 - (000013) Closing connection
[5] Wed 09Nov11 11:13:27 - (000014) Connected to 222.106.248.123 (Local address 192.168.1.5)
[5] Wed 09Nov11 11:13:28 - (000014) Too many times wrong password for user "ORACLE" - disconnecting
[5] Wed 09Nov11 11:13:29 - (000014) Closing connection
[5] Wed 09Nov11 11:13:30 - (000015) Connected to 222.106.248.123 (Local address 192.168.1.5)
[5] Wed 09Nov11 11:13:31 - (000015) Too many times wrong password for user "ORACLE" - disconnecting
[5] Wed 09Nov11 11:13:32 - (000015) Closing connection
[5] Wed 09Nov11 11:13:33 - (000016) Connected to 222.106.248.123 (Local address 192.168.1.5)
[5] Wed 09Nov11 11:13:34 - (000016) Too many times wrong password for user "ORACLE" - disconnecting
[5] Wed 09Nov11 11:13:35 - (000016) Closing connection
222.106.248.123 brute force attack - filed under Brute Force
  192.35.79.70
>6 months ago
This IP address has attempted to hack into my private FTP server multiple times. From S. Korea. Brute force attack

what more is needed to fill out 25 words.....
attempting to login to my ftp server - filed under FTP Hacking
  94.212.243.153
>6 months ago
This ip repeatedly tried to login to my ftp server, after 5 attempts my server blocked the ip address. The ip address is under suspicion of trying to log into my router as well.
Attempting to access private ftp - filed under FTP Hacking
  71.206.230.114
>6 months ago
This IP tried brute forcing my private ftp server. This server is not listed anywhere. It is 100% private. I kicked and banned the IP.
Attempted to access my FTP server - filed under FTP Hacking
  71.195.188.231
>6 months ago
This IP address has attempted to hack into my private FTP server multiple times. Answered the password incorrect until it was auto banned. From S. Korea.
attempting to login to my ftp server - filed under FTP Hacking
  71.102.223.105
>6 months ago
This IP is repeatedly trying to login to my ftp server. This is not a public ftp server and I don't know who this site is (222.106.248.123
View WHOIS information for 222.106.248.123
[Querying whois.apnic.net]
[Redirected to whois.krnic.net]
[Querying whois.krnic.net]
[whois.krnic.net]
query: 222.106.248.123

# KOREAN

Á¶È¸ÇϽŠIPv4ÁÖ¼Ò´Â Çѱ¹ÀÎÅͳÝÁøÈï¿øÀ¸·ÎºÎÅÍ ¾Æ·¡ÀÇ °ü¸®´ëÇàÀÚ¿¡°Ô ÇÒ´çµÇ¾úÀ¸¸ç, ÇÒ´ç Á¤º¸´Â ´ÙÀ½°ú °°½À´Ï´Ù.

[ ³×Æ®¿öÅ© ÇÒ´ç Á¤º¸ ]
IPv4ÁÖ¼Ò : 222.96.0.0 - 222.122.255.255 (/12+/13+/15+/16)
¼­ºñ½º¸í : KORNET
±â°ü¸í : ÁÖ½Äȸ»ç ÄÉÀÌƼ
±â°ü°íÀ¯¹øÈ£ : ORG1600
ÁÖ¼Ò : ¼º³²½Ã ºÐ´ç±¸ Á¤ÀÚµ¿ 206 Çѱ¹Åë½Å e-Bizº»ºÎ ±âȹÆÀ
¿ìÆí¹øÈ£ : 463-711
ÇÒ´çÀÏÀÚ : 20031110

[ IPv4ÁÖ¼Ò Ã¥ÀÓÀÚ Á¤º¸ ]
À̸§ : IPÁÖ¼Ò°ü¸®ÀÚ
ÀüÈ­¹øÈ£ : +82-2-500-6630
ÀüÀÚ¿ìÆí : kornet_ip@kt.com

[ IPv4ÁÖ¼Ò ´ã´çÀÚ Á¤º¸ ]
À̸§ : IPÁÖ¼Ò´ã´çÀÚ
ÀüÈ­¹øÈ£ : +82-2-500-6630
ÀüÀÚ¿ìÆí : kornet_ip@kt.com

[ ½ºÆÔ ÇØÅ· ´ã´çÀÚ Á¤º¸ ]
À̸§ : ½ºÆÔ/ÇØÅ·´ã´ç
ÀüÈ­¹øÈ£ : +82-2-100-0000
ÀüÀÚ¿ìÆí : abuse@kornet.net

--------------------------------------------------------------------------------

Á¶È¸ÇϽŠIPv4ÁÖ¼Ò´Â À§ÀÇ °ü¸®´ëÇàÀڷκÎÅÍ ¾Æ·¡ÀÇ »ç¿ëÀÚ¿¡°Ô ÇÒ´çµÇ¾úÀ¸¸ç, ÇÒ´ç Á¤º¸´Â ´ÙÀ½°ú °°½À´Ï´Ù.

[ ³×Æ®¿öÅ© ÇÒ´ç Á¤º¸ ]
IPv4ÁÖ¼Ò : 222.106.248.0 - 222.106.248.255 (/24)
³×Æ®¿öÅ© À̸§ : KORNET-10700722840
±â°ü¸í : ÅÚÄÚ¿þ¾îÁÖ½Äȸ»ç
±â°ü°íÀ¯¹øÈ£ : ORG568792
ÁÖ¼Ò : °­³²±¸ ¿ª»ïµ¿
¿ìÆí¹øÈ£ : 135080
ÇÒ´ç³»¿ª µî·ÏÀÏ : 20060405
°ø°³¿©ºÎ : N

[ ³×Æ®¿öÅ© ´ã´çÀÚ Á¤º¸ ]
±â°ü¸í : ÅÚÄÚ¿þ¾îÁÖ½Äȸ»ç
ÁÖ¼Ò : °­³²±¸ ¿ª»ïµ¿
¿ìÆí¹øÈ£ : 135080
ÀüÀÚ¿ìÆí : ip@krnic.kornet.net


# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.

[ Network Information ]
IPv4 Address : 222.96.0.0 - 222.122.255.255 (/12+/13+/15+/16)
Service Name : KORNET
Organization Name : Korea Telecom
Organization ID : ORG1600
Address : 206, Jungja-dong, Bundang-gu, Sungnam-ci
Zip Code : 463-711
Registration Date : 20031110

[ Admin Contact Information ]
Name : IP Administrator
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

[ Tech Contact Information ]
Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com

[ Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-100-0000
E-Mail : abuse@kornet.net

--------------------------------------------------------------------------------

More specific assignment information is as follows.

[ Network Information ]
IPv4 Address : 222.106.248.0 - 222.106.248.255 (/24)
Network Name : KORNET-10700722840
Organization Name : telkowaeeojusighwyeusa
Organization ID : ORG568792
Address : Yeoksam-dong, Gangnam-gu
Zip Code : 135080
Registration Date : 20060405
Publishes : N

[ Technical Contact Information ]
Organization Name : telkowaeeojusighwyeusa
Address : Yeoksam-dong, Gangnam-gu
Zip Code : 135080
E-Mail : ip@krnic.kornet.net


- KISA/KRNIC Whois Service -

15 Latest Attacks
89.108.127.160 - Site is a scam - filed under Fraud
one of the sites through this host, everingame.com has defrauded hundreds of users. http://www.scamb...
1 hr 60 min  ago
114.36.160.94 - mindless stuff - filed under Spam
Hacking attemps, spaming. He has inserted himeslf into our medical servicesrecipients. It has been r...
2 hr 22 min  ago
205.186.130.61 - email hijacking - filed under Hacking
This person has been logging into my gmail account and sent out spam emails to my entire contact lis...
2 hr 23 min  ago
202.104.197.118 - Attempted login to FTP - filed under Brute Force
Brute force attempts to log into my server FTP with the username "administrator." A sim...
2 hr 52 min  ago
74.128.173.47 - Bet2day casino - filed under Spam
Same as the rest, spam mail every hour now on 3 of my emails. No way to unsubscribe and impossible t...
3 hr 50 min  ago
173.9.198.249 - website was hacked 2 days ago - filed under FTP Hacking
2 days ago from this ip several of our websites we're hacked by logging on to our ftp webhosting ac...
4 hr 1 min  ago
66.147.240.186 - This IP is trying to logon my website - filed under Brute Force
Website: http://www.iphonesp.com.br/ Page: /administrator/index.php Description: There was an unsu...
4 hr 31 min  ago
94.183.53.255 - Attacking Google account - filed under Hacking
Someone recently tried to sign in to your Google Account, XXXXX. We prevented the sign-in attempt in...
5 hr 5 min  ago
67.205.111.248 - 184.107.157.130 - filed under Hacking
this site keeps port scanning my IP addresses. i have him blocked but clearly theres a problem with...
5 hr 35 min  ago
72.21.194.32 - Risky connection blocked - filed under Malware
Looks to me like 72.21.194.32 is a server leased from Amazon's cloud services server farm by someon...
6 hr 8 min  ago
74.128.173.47 - unsubscribe bet2day from Ryan Hardy - filed under Spam
no way to unsubscribe to their unwanted mail about bet2day; looks to me a kind of spam or other non...
6 hr 43 min  ago
178.33.224.175 - Continuous ICMP ping id-0 to all our public facing IP Addresses - filed under Firewall Alert
[00001] 2012-05-14 18:09:02 [Root]system-critical-00441: ICMP ping id=0! From 178.33.224.175 to 66.2...
7 hr 16 min  ago
92.38.199.150 - Subject: Good Day: Unsolicited, unsigned for 'loan/investment' spam from Russia - filed under Spam
Unsolicited spam from webmaster@arclip.ru -user17662 Received: from s6.cishost.ru ([92.38.199.150])...
7 hr 22 min  ago
77.78.228.62 - malware - filed under Malware
2012/05/16 20:18:16 +0300 DEOCAMDATARDS computer IP-BLOCK 77.78.228.62 (Type: incoming) 2012/05/16 2...
8 hr 23 min  ago
200.107.124.36 - spam - filed under Spam
Spam 200.107.124.36 "From rrenat31391@mail.ru Wed May 16 19:06:25 2012 DKIM-Signature: v=1; ...
8 hr 44 min  ago
More Attacks
92.10.102.31 - HackAttack: [SPI:Illegal connection state attack] - filed under Firewall Alert
Nov 14 23:58:49 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 92.10.102....
>6 months ago
74.81.171.35 - help me - filed under Spam
Please help. This site crack and other programs authorized leaves attached virus program and help t...
>2 years ago
113.105.128.254 - reof_ortiz@hotmail.com - filed under Brute Force
Apr 6 18:30:10 usabilidad pure-ftpd: (?@113.105.128.254) [INFO] New connection from 113.105.128.254 ...
>1 month ago
174.121.108.194 - Brute force on classic php shells - filed under Brute Force
Brute force on classic php shells under phpmyadmin directory (c99.php, a.php .....) ./access.log:17...
>9 months ago
211.83.108.120 - Repeated attempts to log on with non-existent user IDs - filed under Brute Force
SSH dictionary attack, probably from an unwitting participant in a botnet...
>2 years ago
218.75.199.50 - Intrusion Helkern Worm - filed under Malware
Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 218.75.199.50. Protocol/service: UDP on loc...
>3 years ago
202.108.34.231 - Possible DoS HGOD SynKiller Flooding - filed under Sync Flood
2010-03-08 22:53:05 Possible DoS HGOD SynKiller Flooding 202.108.34.231...
>2 years ago
189.99.164.189 - DCOM Exploit - filed under Brute Force
Receiving DCOM exploit attacks from the ip below in Brazil that is being caught by Avast 23.07.20...
>2 years ago
www.brandiscount - Used my email to send spam - filed under Spam
Sent everyone in my contact list this email. As far as you see, Our company trades mainl...
>2 years ago
174.121.8.194 - http://paypal.com.us-cgibin.webscrcmd-runcheck-cookie.submit-redirectcmdlogin-submit.aciveid-928904902023131243082.update.check.cookie1298546666.eraldomagazine.com.br/private - filed under Phishing
fraud@antihotmail.com ------------------------------- http://paypal.com.us-cgibin.webscrcmd-runchec...
>2 months ago
188.165.193.134 - Several Attempted Server Logins - filed under Hacking
We have 33 failed login attempts coming from this ip address over the last 24 hours. It is definitel...
>4 months ago
82.175.127.66 - 82.175.127.66 Diemen Netherlands - filed under Hacking
Worm attack on port TCP 1433 from this asshole computer....:P~~~~ you suck!!!...
>1 year ago
10.112.8.102 - Spamming and Fraud - filed under SMTP Fraud
Beware of this ip address. He is collecting information through email address, spamming. He will als...
>3 months ago
60.195.250.56 - Brute Force attempts on FTP Server - filed under Brute Force
Attempted logins failed for several hours now using administrator and various passwords....
>2 years ago
61.235.46.146 - several attacks - filed under SQL Injection
UDP from 61.235.46.146 to local port 1434. Denied: Intrusion.Win.MSSQL.worm.Helkern. on 12/03/2012 ...
>2 months ago
132.205.18.20 - repeated attempts to log on using non-existent user names - filed under Brute Force
Probably an unwitting participant in a Botnet, attempting an SSH dictionary attack...
>2 years ago
41.71.172.42 - blackmail - filed under Brute Force
A so called man called Billy bob - email address billy.bob103@yahoo.com and billy.bob103 @hotmail.co...
>4 months ago
219.150.223.253 - die u chinese bustards - filed under Malware
16.07.2010 16:53:19 Intrusion.Win.MSSQL.worm.Helkern 219.150.223.253 UDP 1434...
>1 year ago
31.184.244.26 - Spammer - filed under Spam
Spam - phishing IP address, and bruteforcing and hacking hosting acounts. gain access, hacking, spam...
>2 months ago
67.228.244.106 - mail has been hacked - filed under Hacking
My Gmail has been hacked by above IP i.e IP HOST mydailyflog tons of email has been recived with hea...
>9 months ago
174.120.188.66 - porno spam in massive doses - filed under Brute Force
i'm really tired of getting tons of porn spam from this site, i have little children using this co...
>2 months ago
206.161.121.4 - Phishing - filed under Phishing
This IP address is listed by a virus that infected my workstations with varies viruses and required ...
28 days  ago
109.230.217.126 - http://secure.runescape.com.weblogin.qn-login.com/m=weblogin/loginform.html?mod=www&ssl=0&dest - filed under Phishing
fraud@antihotmail.com ------------------------------ http://secure.runescape.com.weblogin.qn-login....
>3 months ago
195.131.87.29 - tried to hack ftp - filed under FTP Hacking
detected via brute froce on our server. the hacker was trying to get access via ftpd. blocked on our...
>4 months ago
88.191.100.51 - Appears to be using an FTP brute force attack. - filed under Brute Force
[02] Tue 30Jun09 15:39:27 - (000598) Connected to 88.191.100.51 (local address 10.0.0.2, port 21) [...
>2 years ago