Your iP is: 54.158.125.71 United States Near: Woodbridge, New Jersey, United States

IP Lookup Details:

IP Information - 114.108.140.116

Host name: 114.108.140.116

Country: Korea, Republic of

Country Code: KR

Region: 11

City: Seoul

Latitude: 37.5664

Longitude: 126.9997

Whois information
NetRange: 114.0.0.0 - 114.255.255.255
CIDR: 114.0.0.0/8
NetName: APNIC-114
NetHandle: NET-114-0-0-0-1
Parent: ()
NetType: Allocated to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2007-10-29
Updated: 2010-07-30
Comment: This IP address range is not registered in the ARIN database.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to http://www.apnic.net/apnic-info/whois_search2/abuse-and-spamming
Ref: https://whois.arin.net/rest/net/NET-114-0-0-0-1

ResourceLink: http://wq.apnic.net/whois-search/static/search.html
ResourceLink: whois.apnic.net

OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://whois.arin.net/rest/org/APNIC

ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html

OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://whois.arin.net/rest/poc/AWC12-ARIN

OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://whois.arin.net/rest/poc/AWC12-ARIN
Michael Goolsby

The WireShark on my server (66.121.18.92) is showing that a hacker using the host at 114.108.140.116 may be using this host to conduct automated remote logins through Windows Terminal Services (RDP at TCP Port 3389). Given the nature of this attempt, it appears that somebody is launching an automated and repeat attempts to log in possibly using an automated password generator, trying to log in through successive sessions with different passwords. You may want to alert the people who watch over this host at 114.108.140.116 that their system may have been compromised by hackers and that it is being used to further their activities as opposed to the activities of the owners of that system. We hope you find this helpful.

IP identified as: Hackers IP, Reported on: 31st, Jul. 2012
Complaint Form