59.124.2.12 - IPInfo

Basic Info

City: Taipei

Region: Taipei

Country: Taiwan, China

Internet Service Provider: Chunghwa

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
59.124.230.138	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 43 - port: 10943 proto: tcp cat: Misc Attackbytes: 60	2020-10-08 03:01:26
59.124.230.138	attack	31269/tcp 3479/tcp 20911/tcp... [2020-08-31/10-06]35pkt,25pt.(tcp)	2020-10-07 19:15:33
59.124.205.214	attackbots	(sshd) Failed SSH login from 59.124.205.214 (TW/Taiwan/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 28 13:01:44 server2 sshd[31516]: Invalid user kibana from 59.124.205.214 Sep 28 13:01:46 server2 sshd[31516]: Failed password for invalid user kibana from 59.124.205.214 port 45612 ssh2 Sep 28 13:13:22 server2 sshd[19151]: Invalid user mathserv from 59.124.205.214 Sep 28 13:13:24 server2 sshd[19151]: Failed password for invalid user mathserv from 59.124.205.214 port 48440 ssh2 Sep 28 13:17:23 server2 sshd[27180]: Invalid user new from 59.124.205.214	2020-09-29 03:14:12
59.124.205.214	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-28 19:24:17
59.124.230.138	attackbotsspam	TCP (SYN) 59.124.230.138:52340 -> port 1148, len 44	2020-09-12 21:14:41
59.124.230.138	attackspambots	TCP (SYN) 59.124.230.138:52340 -> port 1148, len 44	2020-09-12 13:17:49
59.124.230.138	attackbotsspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-12 05:05:42
59.124.205.214	attackbots	Aug 24 10:36:26 ift sshd\[12183\]: Invalid user shells from 59.124.205.214Aug 24 10:36:27 ift sshd\[12183\]: Failed password for invalid user shells from 59.124.205.214 port 43930 ssh2Aug 24 10:40:04 ift sshd\[12781\]: Invalid user ftpuser from 59.124.205.214Aug 24 10:40:06 ift sshd\[12781\]: Failed password for invalid user ftpuser from 59.124.205.214 port 44658 ssh2Aug 24 10:43:27 ift sshd\[13131\]: Invalid user orangepi from 59.124.205.214 ...	2020-08-24 16:51:49
59.124.205.214	attackspam	Aug 20 14:53:35 l03 sshd[8595]: Invalid user bp from 59.124.205.214 port 52950 ...	2020-08-20 22:02:07
59.124.205.214	attackspam	Aug 13 00:03:50 server sshd[10400]: Failed password for root from 59.124.205.214 port 33554 ssh2 Aug 13 00:06:45 server sshd[11845]: Failed password for root from 59.124.205.214 port 53120 ssh2 Aug 13 00:09:39 server sshd[13021]: Failed password for root from 59.124.205.214 port 44460 ssh2	2020-08-13 06:50:45
59.124.2.155	attackspam	TCP (SYN) 59.124.2.155:57616 -> port 1433, len 40	2020-08-13 03:05:19
59.124.205.214	attackspambots	2020-07-30T00:34:34.936475vps773228.ovh.net sshd[3838]: Invalid user nisuser2 from 59.124.205.214 port 36514 2020-07-30T00:34:34.944936vps773228.ovh.net sshd[3838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59-124-205-214.hinet-ip.hinet.net 2020-07-30T00:34:34.936475vps773228.ovh.net sshd[3838]: Invalid user nisuser2 from 59.124.205.214 port 36514 2020-07-30T00:34:36.626628vps773228.ovh.net sshd[3838]: Failed password for invalid user nisuser2 from 59.124.205.214 port 36514 ssh2 2020-07-30T00:38:37.619546vps773228.ovh.net sshd[3890]: Invalid user yyg from 59.124.205.214 port 47758 ...	2020-07-30 07:47:54
59.124.205.214	attack	wp BF attempts	2020-07-27 15:05:58
59.124.205.214	attackbotsspam	Jul 11 19:09:55 vps sshd[5211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.124.205.214 Jul 11 19:09:57 vps sshd[5211]: Failed password for invalid user admin from 59.124.205.214 port 45844 ssh2 Jul 11 19:16:59 vps sshd[5529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.124.205.214 ...	2020-07-12 02:12:00
59.124.205.214	attackbots	Jun 15 10:05:30 Host-KLAX-C sshd[25545]: Disconnected from invalid user root 59.124.205.214 port 48470 [preauth] ...	2020-06-16 00:11:07

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.124.2.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27443
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;59.124.2.12.			IN	A

;; AUTHORITY SECTION:
.			530	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023101200 1800 900 604800 86400

;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 12 14:52:50 CST 2023
;; MSG SIZE  rcvd: 104

Host info

12.2.124.59.in-addr.arpa domain name pointer 59-124-2-12.hinet-ip.hinet.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
12.2.124.59.in-addr.arpa	name = 59-124-2-12.hinet-ip.hinet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
14.115.255.68	attackbots	Dec 12 00:47:51 grey postfix/smtpd\[27982\]: NOQUEUE: reject: RCPT from unknown\[14.115.255.68\]: 554 5.7.1 Service unavailable\; Client host \[14.115.255.68\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[14.115.255.68\]\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-12 08:51:01
208.184.72.16	attack	Brute force attack stopped by firewall	2019-12-12 09:05:01
95.170.203.226	attackbotsspam	Dec 12 00:47:45 MK-Soft-VM8 sshd[2712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.170.203.226 Dec 12 00:47:47 MK-Soft-VM8 sshd[2712]: Failed password for invalid user jboss from 95.170.203.226 port 46162 ssh2 ...	2019-12-12 08:59:47
78.85.16.96	attackbotsspam	Brute force attack stopped by firewall	2019-12-12 09:06:38
175.6.5.233	attack	SSH authentication failure x 6 reported by Fail2Ban ...	2019-12-12 09:03:50
192.162.62.197	attackbotsspam	Brute force attack stopped by firewall	2019-12-12 08:51:29
40.73.34.44	attackspam	Dec 12 01:23:17 ns37 sshd[25484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.34.44 Dec 12 01:23:19 ns37 sshd[25484]: Failed password for invalid user ewan from 40.73.34.44 port 33536 ssh2 Dec 12 01:31:10 ns37 sshd[25908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.34.44	2019-12-12 08:44:05
178.46.163.3	attackbots	Brute force attack stopped by firewall	2019-12-12 08:44:21
138.0.210.114	attackbotsspam	Brute force attack stopped by firewall	2019-12-12 09:05:15
197.254.115.162	attackspambots	Sending SPAM email	2019-12-12 09:01:24
43.229.72.220	attackspam	Sending SPAM email	2019-12-12 09:09:47
74.208.239.79	attack	2019-12-11T23:42:27.153825abusebot-4.cloudsearch.cf sshd\[7193\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.239.79 user=root 2019-12-11T23:42:29.268476abusebot-4.cloudsearch.cf sshd\[7193\]: Failed password for root from 74.208.239.79 port 49178 ssh2 2019-12-11T23:47:45.497678abusebot-4.cloudsearch.cf sshd\[7204\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.239.79 user=sshd 2019-12-11T23:47:47.602104abusebot-4.cloudsearch.cf sshd\[7204\]: Failed password for sshd from 74.208.239.79 port 35062 ssh2	2019-12-12 08:57:07
51.91.249.178	attackspambots	Dec 12 00:47:43 fr01 sshd[7275]: Invalid user malseed from 51.91.249.178 Dec 12 00:47:43 fr01 sshd[7275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.249.178 Dec 12 00:47:43 fr01 sshd[7275]: Invalid user malseed from 51.91.249.178 Dec 12 00:47:45 fr01 sshd[7275]: Failed password for invalid user malseed from 51.91.249.178 port 47906 ssh2 ...	2019-12-12 09:02:35
95.105.233.209	attack	Dec 12 01:44:53 markkoudstaal sshd[26534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.105.233.209 Dec 12 01:44:55 markkoudstaal sshd[26534]: Failed password for invalid user pennie from 95.105.233.209 port 39439 ssh2 Dec 12 01:50:18 markkoudstaal sshd[27133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.105.233.209	2019-12-12 08:54:31
179.97.198.65	attack	Brute force attack to crack SMTP password (port 25 / 587)	2019-12-12 08:47:58

Recently Reported IPs

203.69.81.49	162.0.234.14	118.98.93.152	118.98.93.235
62.78.62.138	146.158.30.193	186.29.180.221	93.241.89.200
103.170.114.251	217.145.227.156	98.131.110.147	46.148.40.59
166.142.166.74	131.42.123.210	185.50.56.60	121.167.229.91
137.184.185.9	241.95.255.238	217.145.227.129	2606:4700::6810:f8f9