JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.163.130.137

112.163.130.137 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 50%: ?

50%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Tongyeong, Gyeongsangnam-do

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.163.130.137

Whois 112.163.130.137

IP Abuse Reports for 112.163.130.137:

This IP address has been reported a total of 14 times from 12 distinct sources. 112.163.130.137 was first reported on April 8th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-09-18 11:27:00 (1 hour ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇬🇧 kie	2026-09-18 10:00:44 (3 hours ago)	18-09-2026:10:00:33UTC [systemd] Failed SSH password attempt user:admin port:49516 (1 attempt(s)).	Brute-Force SSH
🇩🇪 mutebefehl	2026-09-18 07:18:20 (6 hours ago)	Aggressive SSH attack	Brute-Force SSH
🇦🇺 bret.dk	2026-09-18 03:28:00 (9 hours ago)	Sep 18 03:27:57 au-mirror sshd[2457403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Sep 18 03:27:57 au-mirror sshd[2457403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.163.130.137 Sep 18 03:27:59 au-mirror sshd[2457403]: Failed password for invalid user Admin from 112.163.130.137 port 33056 ssh2 ... show less	Brute-Force SSH
🇰🇷 2048	2026-09-14 13:39:00 (3 days ago)	SSH credential brute-force observed by honeypot. \| Source IP: 112.163.130.137 \| Targeted device: Ope ... show more SSH credential brute-force observed by honeypot. \| Source IP: 112.163.130.137 \| Targeted device: OpenWrt router \| First seen: 14 Sep 2026 13:39:00 UTC \| Last seen: 14 Sep 2026 13:39:00 UTC \| Attempts: 1 \| Client: SSH-2.0-Go \| Sample credentials: root:admin show less	Brute-Force SSH IoT Targeted
🇺🇸 bigscoots.com	2026-09-09 18:23:45 (1 week ago)	112.163.130.137 (KR/South Korea/-), 5 distributed sshd attacks on account [admin] in the last 3600 s ... show more 112.163.130.137 (KR/South Korea/-), 5 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 9 13:23:35 14778 sshd[26071]: Invalid user admin from 201.243.101.135 port 36183 Sep 9 12:49:51 14778 sshd[7695]: Invalid user admin from 121.151.25.101 port 50982 Sep 9 12:49:53 14778 sshd[7695]: Failed password for invalid user admin from 121.151.25.101 port 50982 ssh2 Sep 9 13:19:12 14778 sshd[23842]: Invalid user admin from 112.163.130.137 port 44614 Sep 9 13:19:15 14778 sshd[23842]: Failed password for invalid user admin from 112.163.130.137 port 44614 ssh2 IP Addresses Blocked: 201.243.101.135 (VE/Venezuela/201-243-101-135-chc-00-p67.cantv.net) 121.151.25.101 (KR/South Korea/-) show less	Brute-Force SSH
🇨🇦 DRI	2026-08-21 15:58:38 (3 weeks ago)	Web attack/Malicious activity detected	Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 07:53:15 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 112.163.130.137 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 112.163.130.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 03:53:06.425307 2026] [security2:error] [pid 1752:tid 1752] [client 112.163.130.137:40954] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kawkacevents.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kawkacevents.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aogD4m_TBPc21XQxgyDzvwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 DRI	2026-08-20 14:54:55 (4 weeks ago)	Web attack/Malicious activity detected	Web App Attack
🇺🇸 slay3r9903	2026-07-22 14:28:55 (1 month ago)	IP address blocked by Cloudflare security rules due to suspicious activity and security violations.	Hacking Bad Web Bot
🇺🇸 factor1	2026-07-20 22:53:57 (1 month ago)	Fail2ban at churndash Reports Abuse.	Brute-Force Web App Attack
🇨🇭 backslash	2026-07-20 16:42:02 (1 month ago)	block ruleset 486D2EE5E731CC049D1E480D68D04DFFE28AADF1	Bad Web Bot
🇮🇩 Burayot	2026-05-31 06:48:58 (3 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 112.163.130.137 (KR/South Korea/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 112.163.130.137 (KR/South Korea/-): 1 in the last 3600 secs show less	Web App Attack
🇧🇪 voormedia	2026-04-08 06:35:02 (5 months ago)	Accessed trap at '/wp-login.php'	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 202.112.47.54

🇵🇱 195.3.220.87

🇺🇸 172.214.209.153

🇺🇸 165.154.255.63

🇺🇸 136.66.188.10

🇩🇪 130.12.182.196

🇷🇺 82.208.71.68

🇻🇪 38.43.254.7

🇴🇲 37.41.250.23

🇭🇰 35.241.65.69

🇳🇱 217.60.76.58

🇧🇷 189.4.10.9

🇲🇽 177.229.197.38

🇻🇳 171.244.142.205

🇮🇩 160.22.126.54

🇨🇦 158.69.112.222

🇰🇿 149.27.25.11

🇺🇸 91.230.168.98

🇫🇷 85.217.140.41

🇸🇬 43.134.91.35