49.159.108.2 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Taiwan (Province of China)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.159.108.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33971
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;49.159.108.2.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012901 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 03:27:22 CST 2025
;; MSG SIZE  rcvd: 105

Host info

2.108.159.49.in-addr.arpa domain name pointer 49-159-108-2.dynamic.elinx.com.tw.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
2.108.159.49.in-addr.arpa	name = 49-159-108-2.dynamic.elinx.com.tw.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.116.113.180	attackbots	Dec 24 08:00:26 server sshd\[28358\]: Invalid user oernulv from 45.116.113.180 Dec 24 08:00:26 server sshd\[28358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.113.180 Dec 24 08:00:28 server sshd\[28358\]: Failed password for invalid user oernulv from 45.116.113.180 port 36524 ssh2 Dec 24 22:01:29 server sshd\[27720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.113.180 user=root Dec 24 22:01:31 server sshd\[27720\]: Failed password for root from 45.116.113.180 port 60936 ssh2 ...	2019-12-25 06:53:15
188.149.201.227	attackbots	fail2ban	2019-12-25 07:04:24
185.147.212.8	attack	\[2019-12-24 10:20:07\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '185.147.212.8:51084' - Wrong password \[2019-12-24 10:20:07\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-24T10:20:07.555-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="54759",SessionID="0x7f0fb4804f58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.212.8/51084",Challenge="2c2ec4a7",ReceivedChallenge="2c2ec4a7",ReceivedHash="b27156f9f23f9a964e995e950c214533" \[2019-12-24 10:25:33\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '185.147.212.8:56610' - Wrong password \[2019-12-24 10:25:33\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-24T10:25:33.005-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="70089",SessionID="0x7f0fb4804f58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.1	2019-12-25 07:11:09
112.85.42.178	attackbotsspam	Honeypot hit.	2019-12-25 07:26:08
220.76.107.50	attackbots	Dec 24 02:54:43 : SSH login attempts with invalid user	2019-12-25 07:11:55
80.144.237.28	attackspambots	SSH Brute Force, server-1 sshd[27065]: Failed password for invalid user winace from 80.144.237.28 port 37252 ssh2	2019-12-25 07:22:52
51.77.211.94	attackspam	--- report --- Dec 24 19:52:49 sshd: Connection from 51.77.211.94 port 41882	2019-12-25 07:24:29
68.183.31.138	attackspam	Invalid user ds from 68.183.31.138 port 37238	2019-12-25 07:23:05
103.113.105.11	attackspam	Dec 24 19:40:01 raspberrypi sshd\[5730\]: Failed password for mysql from 103.113.105.11 port 46964 ssh2Dec 24 19:48:46 raspberrypi sshd\[6143\]: Failed password for root from 103.113.105.11 port 46428 ssh2Dec 24 19:52:23 raspberrypi sshd\[6353\]: Invalid user test from 103.113.105.11 ...	2019-12-25 06:56:08
41.60.232.115	attackbotsspam	Dec 24 16:53:38 our-server-hostname postfix/smtpd[3852]: connect from unknown[41.60.232.115] Dec x@x Dec 24 16:53:42 our-server-hostname postfix/smtpd[3852]: lost connection after RCPT from unknown[41.60.232.115] Dec 24 16:53:42 our-server-hostname postfix/smtpd[3852]: disconnect from unknown[41.60.232.115] Dec 24 16:54:33 our-server-hostname postfix/smtpd[3692]: connect from unknown[41.60.232.115] Dec x@x Dec x@x Dec x@x Dec x@x Dec 24 16:54:40 our-server-hostname postfix/smtpd[3692]: lost connection after RCPT from unknown[41.60.232.115] Dec 24 16:54:40 our-server-hostname postfix/smtpd[3692]: disconnect from unknown[41.60.232.115] Dec 24 16:55:43 our-server-hostname postfix/smtpd[1677]: connect from unknown[41.60.232.115] Dec x@x Dec x@x Dec 24 16:55:56 our-server-hostname postfix/smtpd[2018]: connect from unknown[41.60.232.115] Dec x@x Dec x@x Dec x@x Dec x@x Dec 24 16:56:00 our-server-hostname postfix/smtpd[1677]: lost connection after RCPT from unknown[41.60.232.1........ -------------------------------	2019-12-25 06:59:17
122.154.251.22	attackbotsspam	2019-12-23T22:12:48.757652vt1.awoom.xyz sshd[19408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.251.22 user=r.r 2019-12-23T22:12:50.790998vt1.awoom.xyz sshd[19408]: Failed password for r.r from 122.154.251.22 port 54570 ssh2 2019-12-23T22:31:13.468366vt1.awoom.xyz sshd[26188]: Invalid user torralva from 122.154.251.22 port 43810 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=122.154.251.22	2019-12-25 07:25:08
191.232.198.212	attackspam	Dec 24 23:30:48 vps691689 sshd[30107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.198.212 Dec 24 23:30:50 vps691689 sshd[30107]: Failed password for invalid user chn from 191.232.198.212 port 46894 ssh2 Dec 24 23:31:59 vps691689 sshd[30132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.198.212 ...	2019-12-25 06:57:24
185.86.164.106	attackspambots	WordPress login Brute force / Web App Attack on client site.	2019-12-25 07:04:42
51.91.102.49	attack	Dec 24 17:26:49 SilenceServices sshd[24229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.102.49 Dec 24 17:26:51 SilenceServices sshd[24229]: Failed password for invalid user ksfes from 51.91.102.49 port 52236 ssh2 Dec 24 17:27:31 SilenceServices sshd[24457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.102.49	2019-12-25 06:54:20
51.75.28.134	attackbots	Dec 24 11:36:08 plusreed sshd[16895]: Invalid user panu from 51.75.28.134 ...	2019-12-25 07:02:25

Recently Reported IPs

129.22.176.37	207.158.96.20	140.189.122.183	27.63.216.67
172.182.169.159	164.20.118.139	162.38.53.82	217.212.61.193
186.137.150.207	54.27.56.231	2.159.150.255	86.22.56.54
174.241.153.53	131.235.32.102	198.112.30.227	73.47.67.126
17.73.111.105	212.230.229.71	115.9.192.179	197.26.96.153