城市(city): Gwanak-gu
省份(region): Seoul Special City
国家(country): South Korea
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 211.197.28.252 | attack | Aug 24 06:57:02 ip40 sshd[32614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.197.28.252 Aug 24 06:57:04 ip40 sshd[32614]: Failed password for invalid user icecast from 211.197.28.252 port 50336 ssh2 ... |
2020-08-24 13:49:36 |
| 211.197.28.252 | attack | Aug 23 07:27:43 mellenthin sshd[14500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.197.28.252 Aug 23 07:27:45 mellenthin sshd[14500]: Failed password for invalid user chris from 211.197.28.252 port 59336 ssh2 |
2020-08-23 16:47:39 |
query : 211.197.28.37
# KOREAN(UTF8)
조회하신 IPv4주소는 한국인터넷진흥원으로부터 아래의 관리대행자에게 할당되었으며, 할당 정보는 다음과 같습니다.
[ 네트워크 할당 정보 ]
IPv4주소 : 211.196.0.0 - 211.199.255.255 (/14)
기관명 : 주식회사 케이티
서비스명 : KORNET
주소 : 경기도 성남시 분당구 불정로 90
우편번호 : 13606
할당일자 : 20000724
이름 : IP주소 담당자
전화번호 : +82-2-500-6630
전자우편 : kornet_ip@kt.com
조회하신 IPv4주소는 위의 관리대행자로부터 아래의 사용자에게 할당되었으며, 할당 정보는 다음과 같습니다.
--------------------------------------------------------------------------------
[ 네트워크 할당 정보 ]
IPv4주소 : 211.197.28.0 - 211.197.28.255 (/24)
기관명 : 수도권서부본부
네트워크 구분 : CUSTOMER
주소 : 서울특별시 관악구 조원동
우편번호 : 151018
할당내역 등록일 : 20170810
이름 : IP주소 담당자
전화번호 : +82-2-500-6631
전자우편 : kornet_ip@kt.com
# ENGLISH
KRNIC is not an ISP but a National Internet Registry similar to APNIC.
[ Network Information ]
IPv4 Address : 211.196.0.0 - 211.199.255.255 (/14)
Organization Name : Korea Telecom
Service Name : KORNET
Address : Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90
Zip Code : 13606
Registration Date : 20000724
Name : IP Manager
Phone : +82-2-500-6630
E-Mail : kornet_ip@kt.com
--------------------------------------------------------------------------------
More specific assignment information is as follows.
[ Network Information ]
IPv4 Address : 211.197.28.0 - 211.197.28.255 (/24)
Organization Name : Sudogwonseobubonbu
Network Type : CUSTOMER
Address : Jowon-Dong Gwanak-Gu Seoulteukbyeol-Si
Zip Code : 151018
Registration Date : 20170810
Name : IP Manager
Phone : +82-2-500-6631
E-Mail : kornet_ip@kt.com
- KISA/KRNIC WHOIS Service -; <<>> DiG 9.10.3-P4-Ubuntu <<>> 211.197.28.37
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29629
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;211.197.28.37. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032900 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 29 18:07:00 CST 2026
;; MSG SIZE rcvd: 106Host 37.28.197.211.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 37.28.197.211.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 13.95.237.210 | attackbotsspam | Aug 20 06:16:32 auw2 sshd\[11453\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.95.237.210 user=root Aug 20 06:16:35 auw2 sshd\[11453\]: Failed password for root from 13.95.237.210 port 47882 ssh2 Aug 20 06:24:04 auw2 sshd\[12215\]: Invalid user mozart from 13.95.237.210 Aug 20 06:24:04 auw2 sshd\[12215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.95.237.210 Aug 20 06:24:06 auw2 sshd\[12215\]: Failed password for invalid user mozart from 13.95.237.210 port 40288 ssh2 |
2019-08-21 09:16:54 |
| 175.9.142.109 | attackspam | Fail2Ban - FTP Abuse Attempt |
2019-08-21 09:53:43 |
| 115.159.237.70 | attackspam | Aug 20 15:47:43 tdfoods sshd\[3485\]: Invalid user lmondon from 115.159.237.70 Aug 20 15:47:43 tdfoods sshd\[3485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.237.70 Aug 20 15:47:45 tdfoods sshd\[3485\]: Failed password for invalid user lmondon from 115.159.237.70 port 34282 ssh2 Aug 20 15:51:04 tdfoods sshd\[3775\]: Invalid user marcelo from 115.159.237.70 Aug 20 15:51:04 tdfoods sshd\[3775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.237.70 |
2019-08-21 09:55:23 |
| 35.204.234.56 | attack | invalid user |
2019-08-21 09:04:23 |
| 124.161.8.66 | attack | SSH Brute-Forcing (ownc) |
2019-08-21 09:30:04 |
| 139.59.149.75 | attackspam | SSH Brute Force, server-1 sshd[9147]: Failed password for invalid user if from 139.59.149.75 port 40160 ssh2 |
2019-08-21 09:29:26 |
| 95.182.129.243 | attackspam | Aug 21 03:29:29 ubuntu-2gb-nbg1-dc3-1 sshd[22281]: Failed password for root from 95.182.129.243 port 9191 ssh2 Aug 21 03:33:54 ubuntu-2gb-nbg1-dc3-1 sshd[23340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.182.129.243 ... |
2019-08-21 09:48:21 |
| 51.68.97.191 | attackbotsspam | SSH Bruteforce attack |
2019-08-21 09:32:17 |
| 185.110.127.26 | attackspam | "Fail2Ban detected SSH brute force attempt" |
2019-08-21 09:10:17 |
| 210.18.187.140 | attackspambots | Aug 20 21:45:54 vps200512 sshd\[29678\]: Invalid user hart from 210.18.187.140 Aug 20 21:45:54 vps200512 sshd\[29678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.18.187.140 Aug 20 21:45:56 vps200512 sshd\[29678\]: Failed password for invalid user hart from 210.18.187.140 port 36514 ssh2 Aug 20 21:51:18 vps200512 sshd\[29772\]: Invalid user vincent from 210.18.187.140 Aug 20 21:51:18 vps200512 sshd\[29772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.18.187.140 |
2019-08-21 09:57:43 |
| 129.204.40.44 | attackspam | Aug 21 01:18:39 root sshd[5121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.40.44 Aug 21 01:18:41 root sshd[5121]: Failed password for invalid user su from 129.204.40.44 port 49010 ssh2 Aug 21 01:23:34 root sshd[5185]: Failed password for root from 129.204.40.44 port 38202 ssh2 ... |
2019-08-21 09:20:36 |
| 112.132.89.81 | attackbotsspam | Invalid user hadoop from 112.132.89.81 port 35624 |
2019-08-21 09:12:46 |
| 217.209.18.63 | attackbots | SSH Brute Force, server-1 sshd[4375]: Failed password for invalid user admin from 217.209.18.63 port 34104 ssh2 |
2019-08-21 09:25:21 |
| 194.204.208.10 | attack | SSH Brute Force, server-1 sshd[4289]: Failed password for invalid user yu from 194.204.208.10 port 51853 ssh2 |
2019-08-21 09:26:00 |
| 123.206.6.57 | attackspam | Aug 20 19:35:17 dedicated sshd[29026]: Invalid user bow from 123.206.6.57 port 55752 |
2019-08-21 09:20:58 |