Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Taipei

Region: Taipei

Country: Taiwan, China

Internet Service Provider: Chunghwa

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
59.124.230.138 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 43 - port: 10943 proto: tcp cat: Misc Attackbytes: 60
2020-10-08 03:01:26
59.124.230.138 attack
31269/tcp 3479/tcp 20911/tcp...
[2020-08-31/10-06]35pkt,25pt.(tcp)
2020-10-07 19:15:33
59.124.205.214 attackbots
(sshd) Failed SSH login from 59.124.205.214 (TW/Taiwan/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 28 13:01:44 server2 sshd[31516]: Invalid user kibana from 59.124.205.214
Sep 28 13:01:46 server2 sshd[31516]: Failed password for invalid user kibana from 59.124.205.214 port 45612 ssh2
Sep 28 13:13:22 server2 sshd[19151]: Invalid user mathserv from 59.124.205.214
Sep 28 13:13:24 server2 sshd[19151]: Failed password for invalid user mathserv from 59.124.205.214 port 48440 ssh2
Sep 28 13:17:23 server2 sshd[27180]: Invalid user new from 59.124.205.214
2020-09-29 03:14:12
59.124.205.214 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-28 19:24:17
59.124.230.138 attackbotsspam
 TCP (SYN) 59.124.230.138:52340 -> port 1148, len 44
2020-09-12 21:14:41
59.124.230.138 attackspambots
 TCP (SYN) 59.124.230.138:52340 -> port 1148, len 44
2020-09-12 13:17:49
59.124.230.138 attackbotsspam
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-12 05:05:42
59.124.205.214 attackbots
Aug 24 10:36:26 ift sshd\[12183\]: Invalid user shells from 59.124.205.214Aug 24 10:36:27 ift sshd\[12183\]: Failed password for invalid user shells from 59.124.205.214 port 43930 ssh2Aug 24 10:40:04 ift sshd\[12781\]: Invalid user ftpuser from 59.124.205.214Aug 24 10:40:06 ift sshd\[12781\]: Failed password for invalid user ftpuser from 59.124.205.214 port 44658 ssh2Aug 24 10:43:27 ift sshd\[13131\]: Invalid user orangepi from 59.124.205.214
...
2020-08-24 16:51:49
59.124.205.214 attackspam
Aug 20 14:53:35 l03 sshd[8595]: Invalid user bp from 59.124.205.214 port 52950
...
2020-08-20 22:02:07
59.124.205.214 attackspam
Aug 13 00:03:50 server sshd[10400]: Failed password for root from 59.124.205.214 port 33554 ssh2
Aug 13 00:06:45 server sshd[11845]: Failed password for root from 59.124.205.214 port 53120 ssh2
Aug 13 00:09:39 server sshd[13021]: Failed password for root from 59.124.205.214 port 44460 ssh2
2020-08-13 06:50:45
59.124.2.155 attackspam
 TCP (SYN) 59.124.2.155:57616 -> port 1433, len 40
2020-08-13 03:05:19
59.124.205.214 attackspambots
2020-07-30T00:34:34.936475vps773228.ovh.net sshd[3838]: Invalid user nisuser2 from 59.124.205.214 port 36514
2020-07-30T00:34:34.944936vps773228.ovh.net sshd[3838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59-124-205-214.hinet-ip.hinet.net
2020-07-30T00:34:34.936475vps773228.ovh.net sshd[3838]: Invalid user nisuser2 from 59.124.205.214 port 36514
2020-07-30T00:34:36.626628vps773228.ovh.net sshd[3838]: Failed password for invalid user nisuser2 from 59.124.205.214 port 36514 ssh2
2020-07-30T00:38:37.619546vps773228.ovh.net sshd[3890]: Invalid user yyg from 59.124.205.214 port 47758
...
2020-07-30 07:47:54
59.124.205.214 attack
wp BF attempts
2020-07-27 15:05:58
59.124.205.214 attackbotsspam
Jul 11 19:09:55 vps sshd[5211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.124.205.214 
Jul 11 19:09:57 vps sshd[5211]: Failed password for invalid user admin from 59.124.205.214 port 45844 ssh2
Jul 11 19:16:59 vps sshd[5529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.124.205.214 
...
2020-07-12 02:12:00
59.124.205.214 attackbots
Jun 15 10:05:30 Host-KLAX-C sshd[25545]: Disconnected from invalid user root 59.124.205.214 port 48470 [preauth]
...
2020-06-16 00:11:07
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.124.2.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27443
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;59.124.2.12.			IN	A

;; AUTHORITY SECTION:
.			530	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023101200 1800 900 604800 86400

;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 12 14:52:50 CST 2023
;; MSG SIZE  rcvd: 104
Host info
12.2.124.59.in-addr.arpa domain name pointer 59-124-2-12.hinet-ip.hinet.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
12.2.124.59.in-addr.arpa	name = 59-124-2-12.hinet-ip.hinet.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
51.116.113.80 attack
SSH bruteforce
2020-09-25 09:22:30
47.89.12.172 attackbotsspam
Sep 24 22:57:43 journals sshd\[128042\]: Invalid user admin from 47.89.12.172
Sep 24 22:57:43 journals sshd\[128042\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.89.12.172
Sep 24 22:57:45 journals sshd\[128042\]: Failed password for invalid user admin from 47.89.12.172 port 50112 ssh2
Sep 24 22:58:39 journals sshd\[128148\]: Invalid user work from 47.89.12.172
Sep 24 22:58:39 journals sshd\[128148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.89.12.172
...
2020-09-25 09:29:17
218.92.0.173 attackspam
Sep 25 01:47:20 ip-172-31-61-156 sshd[18057]: Failed password for root from 218.92.0.173 port 30691 ssh2
Sep 25 01:47:24 ip-172-31-61-156 sshd[18057]: Failed password for root from 218.92.0.173 port 30691 ssh2
Sep 25 01:47:27 ip-172-31-61-156 sshd[18057]: Failed password for root from 218.92.0.173 port 30691 ssh2
Sep 25 01:47:27 ip-172-31-61-156 sshd[18057]: error: maximum authentication attempts exceeded for root from 218.92.0.173 port 30691 ssh2 [preauth]
Sep 25 01:47:27 ip-172-31-61-156 sshd[18057]: Disconnecting: Too many authentication failures [preauth]
...
2020-09-25 09:51:44
194.180.224.115 attackspam
Sep 25 03:21:01 jane sshd[13261]: Failed password for root from 194.180.224.115 port 53412 ssh2
...
2020-09-25 09:25:55
77.232.184.4 attackspambots
Blocked by Sophos UTM Network Protection . /    / proto=6  .  srcport=59341  .  dstport=1433  .     (3315)
2020-09-25 09:43:00
212.220.11.25 attackbotsspam
Listed on    zen-spamhaus also barracudaCentral   / proto=6  .  srcport=49620  .  dstport=4899  .     (3317)
2020-09-25 09:29:53
187.173.215.72 attackspambots
Automatic report - Port Scan Attack
2020-09-25 10:00:24
52.170.40.84 attackspambots
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "mikayelvardumyan" at 2020-09-25T01:10:43Z
2020-09-25 09:46:49
14.187.32.89 attack
Brute forcing email accounts
2020-09-25 09:47:57
212.70.149.68 attackspam
Sep 25 03:47:11 cho postfix/smtps/smtpd[3618443]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 25 03:49:12 cho postfix/smtps/smtpd[3619257]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 25 03:51:13 cho postfix/smtps/smtpd[3618443]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 25 03:53:13 cho postfix/smtps/smtpd[3618443]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 25 03:55:14 cho postfix/smtps/smtpd[3618443]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-09-25 09:56:15
20.185.106.195 attackspambots
[f2b] sshd bruteforce, retries: 1
2020-09-25 09:57:00
52.188.148.170 attackspam
Sep 25 03:19:46 [host] sshd[24683]: Invalid user c
Sep 25 03:19:46 [host] sshd[24683]: pam_unix(sshd:
Sep 25 03:19:47 [host] sshd[24683]: Failed passwor
2020-09-25 09:26:32
128.1.91.203 attack
 TCP (SYN) 128.1.91.203:32842 -> port 8080, len 44
2020-09-25 09:55:25
222.186.31.83 attack
Sep 25 03:21:58 abendstille sshd\[28731\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.83  user=root
Sep 25 03:22:00 abendstille sshd\[28731\]: Failed password for root from 222.186.31.83 port 53303 ssh2
Sep 25 03:22:02 abendstille sshd\[28731\]: Failed password for root from 222.186.31.83 port 53303 ssh2
Sep 25 03:22:06 abendstille sshd\[28731\]: Failed password for root from 222.186.31.83 port 53303 ssh2
Sep 25 03:22:08 abendstille sshd\[29030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.83  user=root
...
2020-09-25 09:36:01
89.22.187.111 attackspambots
Sep 24 22:38:14 localhost sshd\[19328\]: Invalid user leo from 89.22.187.111
Sep 24 22:38:14 localhost sshd\[19328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.22.187.111
Sep 24 22:38:16 localhost sshd\[19328\]: Failed password for invalid user leo from 89.22.187.111 port 34412 ssh2
Sep 24 22:41:33 localhost sshd\[19565\]: Invalid user test from 89.22.187.111
Sep 24 22:41:33 localhost sshd\[19565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.22.187.111
...
2020-09-25 09:49:53

Recently Reported IPs

203.69.81.49 162.0.234.14 118.98.93.152 118.98.93.235
62.78.62.138 146.158.30.193 186.29.180.221 93.241.89.200
103.170.114.251 217.145.227.156 98.131.110.147 46.148.40.59
166.142.166.74 131.42.123.210 185.50.56.60 121.167.229.91
137.184.185.9 241.95.255.238 217.145.227.129 2606:4700::6810:f8f9