City: Kŏch’ang
Region: Gyeongsangnam-do
Country: South Korea
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 58.229.188.60 | attackbotsspam | Brute force SMTP login attempts. |
2019-06-25 01:22:09 |
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '58.224.0.0 - 58.239.255.255'
% Abuse contact for '58.224.0.0 - 58.239.255.255' is 'irt@nic.or.kr'
inetnum: 58.224.0.0 - 58.239.255.255
netname: broadNnet
descr: SK Broadband Co Ltd
admin-c: IM670-AP
tech-c: IM670-AP
country: KR
status: ALLOCATED PORTABLE
mnt-by: MNT-KRNIC-AP
mnt-irt: IRT-KRNIC-KR
last-modified: 2017-02-03T00:38:11Z
source: APNIC
irt: IRT-KRNIC-KR
address: 9, Jinheung-gil, Naju-si, Jeollanam-do
e-mail: irt@nic.or.kr
abuse-mailbox: irt@nic.or.kr
admin-c: IM574-AP
tech-c: IM574-AP
auth: # Filtered
remarks: irt@nic.or.kr was validated on 2020-04-09
mnt-by: MNT-KRNIC-AP
last-modified: 2025-09-04T01:00:01Z
source: APNIC
person: IP Manager
address: Seoul Jung-gu Toegye-ro 24
country: KR
phone: +82-80-828-2106
e-mail: ip-adm@skbroadband.com
nic-hdl: IM670-AP
mnt-by: MNT-KRNIC-AP
last-modified: 2021-10-05T05:20:03Z
source: APNIC
% Information related to '58.224.0.0 - 58.239.255.255'
inetnum: 58.224.0.0 - 58.239.255.255
netname: broadNnet-KR
descr: SK Broadband Co Ltd
country: KR
admin-c: IM12-KR
tech-c: IM12-KR
status: ALLOCATED PORTABLE
mnt-by: MNT-KRNIC-AP
mnt-irt: IRT-KRNIC-KR
changed: hostmaster@nic.or.kr 20240912
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.kisa.or.kr.
source: KRNIC
person: IP Manager
address: Seoul Jung-gu Toegye-ro 24
address: SKB
country: KR
phone: +82-80-828-2106
e-mail: ip-adm@skbroadband.com
nic-hdl: IM12-KR
mnt-by: MNT-KRNIC-AP
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.kisa.or.kr.
source: KRNIC
% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.229.188.59
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41444
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;58.229.188.59. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026041301 1800 900 604800 86400
;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 14 08:30:33 CST 2026
;; MSG SIZE rcvd: 106
Host 59.188.229.58.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 59.188.229.58.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.31.83 | attackbotsspam | Unauthorized connection attempt detected from IP address 222.186.31.83 to port 22 |
2020-02-11 13:28:40 |
| 222.242.223.75 | attackbots | Feb 11 06:09:17 sd-53420 sshd\[10931\]: Invalid user xjz from 222.242.223.75 Feb 11 06:09:17 sd-53420 sshd\[10931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.242.223.75 Feb 11 06:09:19 sd-53420 sshd\[10931\]: Failed password for invalid user xjz from 222.242.223.75 port 35841 ssh2 Feb 11 06:13:46 sd-53420 sshd\[11381\]: Invalid user iea from 222.242.223.75 Feb 11 06:13:46 sd-53420 sshd\[11381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.242.223.75 ... |
2020-02-11 13:25:49 |
| 14.113.241.124 | attack | " " |
2020-02-11 13:25:20 |
| 138.68.136.152 | attack | Automatic report - Banned IP Access |
2020-02-11 13:34:27 |
| 13.56.123.108 | attackbotsspam | xmlrpc attack |
2020-02-11 13:15:01 |
| 139.59.15.78 | attack | 139.59.15.78 - - \[11/Feb/2020:05:57:20 +0100\] "POST /wp-login.php HTTP/1.0" 200 4404 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.15.78 - - \[11/Feb/2020:05:57:22 +0100\] "POST /wp-login.php HTTP/1.0" 200 4236 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.15.78 - - \[11/Feb/2020:05:57:23 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-02-11 13:19:04 |
| 221.226.251.58 | attackspam | Feb 11 06:37:30 lnxmysql61 sshd[17131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.226.251.58 |
2020-02-11 13:48:48 |
| 117.0.33.84 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-02-11 13:44:05 |
| 203.87.133.145 | attackspam | 20/2/10@23:56:50: FAIL: Alarm-Network address from=203.87.133.145 ... |
2020-02-11 13:46:06 |
| 159.192.105.185 | attackspambots | 2020-02-11T04:57:16.778186homeassistant sshd[32658]: Invalid user sniffer from 159.192.105.185 port 51118 2020-02-11T04:57:17.003936homeassistant sshd[32658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.192.105.185 ... |
2020-02-11 13:13:37 |
| 123.20.109.147 | attackspam | Unauthorized connection attempt detected from IP address 123.20.109.147 to port 445 |
2020-02-11 13:10:00 |
| 101.99.7.202 | attackspam | 1581397036 - 02/11/2020 05:57:16 Host: 101.99.7.202/101.99.7.202 Port: 445 TCP Blocked |
2020-02-11 13:21:55 |
| 199.87.245.235 | attackbots | Received: from bourbon235.mailer.postageapp.com (bourbon235.mailer.postageapp.com [199.87.245.235]) From: ALDI REWARDS! |
2020-02-11 13:26:52 |
| 145.239.73.103 | attackbots | Feb 11 00:28:52 plusreed sshd[17700]: Invalid user cvc from 145.239.73.103 ... |
2020-02-11 13:40:16 |
| 91.236.61.166 | attack | Honeypot attack, port: 445, PTR: ip-91-236-61-166.clips.345000.ru. |
2020-02-11 13:09:07 |