城市(city): Nowon-gu
省份(region): Seoul Special City
国家(country): South Korea
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
query : 125.128.203.128
# KOREAN(UTF8)
조회하신 IPv4주소는 한국인터넷진흥원으로부터 아래의 관리대행자에게 할당되었으며, 할당 정보는 다음과 같습니다.
[ 네트워크 할당 정보 ]
IPv4주소 : 125.128.0.0 - 125.159.255.255 (/11)
기관명 : 주식회사 케이티
서비스명 : KORNET
주소 : 경기도 성남시 분당구 불정로 90
우편번호 : 13606
할당일자 : 20050822
이름 : IP주소 담당자
전화번호 : +82-2-500-6630
전자우편 : kornet_ip@kt.com
조회하신 IPv4주소는 위의 관리대행자로부터 아래의 사용자에게 할당되었으며, 할당 정보는 다음과 같습니다.
--------------------------------------------------------------------------------
[ 네트워크 할당 정보 ]
IPv4주소 : 125.128.203.0 - 125.128.203.255 (/24)
기관명 : (주) 케이티
네트워크 구분 : CUSTOMER
주소 : 서울특별시 강북구 미아9동
우편번호 : 142-109
할당내역 등록일 : 20150317
이름 : IP주소 담당자
전화번호 : +82-2-500-6630
전자우편 : kornet_ip@kt.com
# ENGLISH
KRNIC is not an ISP but a National Internet Registry similar to APNIC.
[ Network Information ]
IPv4 Address : 125.128.0.0 - 125.159.255.255 (/11)
Organization Name : Korea Telecom
Service Name : KORNET
Address : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90
Zip Code : 13606
Registration Date : 20050822
Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com
--------------------------------------------------------------------------------
More specific assignment information is as follows.
[ Network Information ]
IPv4 Address : 125.128.203.0 - 125.128.203.255 (/24)
Organization Name : KT
Network Type : CUSTOMER
Address : Mia9-Dong Gangbuk-Gu Seoulteukbyeol-Si
Zip Code : 142-109
Registration Date : 20150317
Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com
- KISA/KRNIC WHOIS Service -; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.128.203.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35930
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;125.128.203.128. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032300 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 23 21:42:46 CST 2026
;; MSG SIZE rcvd: 108Host 128.203.128.125.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 128.203.128.125.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 194.26.25.80 | attack | Jul 31 12:21:07 debian-2gb-nbg1-2 kernel: \[18449353.559651\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.25.80 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=29266 PROTO=TCP SPT=50816 DPT=5123 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-31 18:39:05 |
| 128.199.177.224 | attack | (sshd) Failed SSH login from 128.199.177.224 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 31 12:37:10 srv sshd[31094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.177.224 user=root Jul 31 12:37:12 srv sshd[31094]: Failed password for root from 128.199.177.224 port 39494 ssh2 Jul 31 12:57:53 srv sshd[31374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.177.224 user=root Jul 31 12:57:55 srv sshd[31374]: Failed password for root from 128.199.177.224 port 39892 ssh2 Jul 31 13:04:11 srv sshd[31549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.177.224 user=root |
2020-07-31 18:32:48 |
| 49.135.32.142 | attackspambots | <6 unauthorized SSH connections |
2020-07-31 18:50:23 |
| 67.205.162.223 | attack | Jul 31 10:47:43 jumpserver sshd[330308]: Failed password for root from 67.205.162.223 port 55904 ssh2 Jul 31 10:50:51 jumpserver sshd[330366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.162.223 user=root Jul 31 10:50:53 jumpserver sshd[330366]: Failed password for root from 67.205.162.223 port 38506 ssh2 ... |
2020-07-31 18:54:16 |
| 41.111.135.193 | attackspambots | SSH brute-force attempt |
2020-07-31 18:53:06 |
| 192.96.203.70 | attack | (smtpauth) Failed SMTP AUTH login from 192.96.203.70 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-07-31 00:47:35 dovecot_plain authenticator failed for ([10.49.0.29]) [192.96.203.70]:42865: 535 Incorrect authentication data (set_id=aluisio@plantasul.com.br) 2020-07-31 00:47:42 dovecot_login authenticator failed for ([10.49.0.29]) [192.96.203.70]:42865: 535 Incorrect authentication data (set_id=aluisio@plantasul.com.br) 2020-07-31 00:47:57 dovecot_plain authenticator failed for ([10.49.0.29]) [192.96.203.70]:11891: 535 Incorrect authentication data (set_id=aluisio@plantasul.com.br) 2020-07-31 00:48:04 dovecot_login authenticator failed for ([10.49.0.29]) [192.96.203.70]:11891: 535 Incorrect authentication data (set_id=aluisio@plantasul.com.br) 2020-07-31 00:48:19 dovecot_plain authenticator failed for ([10.49.0.29]) [192.96.203.70]:49424: 535 Incorrect authentication data (set_id=aluisio@plantasul.com.br) |
2020-07-31 18:40:50 |
| 45.64.237.125 | attack | Jul 31 12:31:28 mout sshd[5062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.64.237.125 user=root Jul 31 12:31:30 mout sshd[5062]: Failed password for root from 45.64.237.125 port 43204 ssh2 |
2020-07-31 19:01:47 |
| 193.27.228.214 | attackspam | [H1.VM1] Blocked by UFW |
2020-07-31 18:58:09 |
| 190.109.203.22 | attackspam | Brute force attempt |
2020-07-31 18:35:00 |
| 45.122.220.157 | attack | 45.122.220.157 - - [31/Jul/2020:04:47:57 +0100] "POST /wp-login.php HTTP/1.1" 200 1973 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.122.220.157 - - [31/Jul/2020:04:48:07 +0100] "POST /wp-login.php HTTP/1.1" 200 2000 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.122.220.157 - - [31/Jul/2020:04:48:16 +0100] "POST /wp-login.php HTTP/1.1" 200 1953 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-31 18:35:54 |
| 51.77.220.127 | attackbotsspam | 51.77.220.127 - - [31/Jul/2020:14:25:42 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2" ... |
2020-07-31 18:32:29 |
| 190.144.70.74 | attackspam | Automatic report - Banned IP Access |
2020-07-31 19:06:58 |
| 52.130.74.246 | attackbots | Invalid user zhulizhen from 52.130.74.246 port 49338 |
2020-07-31 19:05:29 |
| 198.251.89.176 | attackbotsspam | Invalid user admin from 198.251.89.176 port 35466 |
2020-07-31 18:57:17 |
| 193.187.82.74 | attackspam | Dovecot Invalid User Login Attempt. |
2020-07-31 18:44:41 |