City: Taipei
Region: Taipei City
Country: Taiwan, China
Internet Service Provider: unknown
Hostname: unknown
Organization: Data Communication Business Group
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 59.124.230.138 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 43 - port: 10943 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-08 03:01:26 |
| 59.124.230.138 | attack | 31269/tcp 3479/tcp 20911/tcp... [2020-08-31/10-06]35pkt,25pt.(tcp) |
2020-10-07 19:15:33 |
| 59.124.205.214 | attackbots | (sshd) Failed SSH login from 59.124.205.214 (TW/Taiwan/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 28 13:01:44 server2 sshd[31516]: Invalid user kibana from 59.124.205.214 Sep 28 13:01:46 server2 sshd[31516]: Failed password for invalid user kibana from 59.124.205.214 port 45612 ssh2 Sep 28 13:13:22 server2 sshd[19151]: Invalid user mathserv from 59.124.205.214 Sep 28 13:13:24 server2 sshd[19151]: Failed password for invalid user mathserv from 59.124.205.214 port 48440 ssh2 Sep 28 13:17:23 server2 sshd[27180]: Invalid user new from 59.124.205.214 |
2020-09-29 03:14:12 |
| 59.124.205.214 | attack | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-09-28 19:24:17 |
| 59.124.230.138 | attackbotsspam |
|
2020-09-12 21:14:41 |
| 59.124.230.138 | attackspambots |
|
2020-09-12 13:17:49 |
| 59.124.230.138 | attackbotsspam | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-09-12 05:05:42 |
| 59.124.205.214 | attackbots | Aug 24 10:36:26 ift sshd\[12183\]: Invalid user shells from 59.124.205.214Aug 24 10:36:27 ift sshd\[12183\]: Failed password for invalid user shells from 59.124.205.214 port 43930 ssh2Aug 24 10:40:04 ift sshd\[12781\]: Invalid user ftpuser from 59.124.205.214Aug 24 10:40:06 ift sshd\[12781\]: Failed password for invalid user ftpuser from 59.124.205.214 port 44658 ssh2Aug 24 10:43:27 ift sshd\[13131\]: Invalid user orangepi from 59.124.205.214 ... |
2020-08-24 16:51:49 |
| 59.124.205.214 | attackspam | Aug 20 14:53:35 l03 sshd[8595]: Invalid user bp from 59.124.205.214 port 52950 ... |
2020-08-20 22:02:07 |
| 59.124.205.214 | attackspam | Aug 13 00:03:50 server sshd[10400]: Failed password for root from 59.124.205.214 port 33554 ssh2 Aug 13 00:06:45 server sshd[11845]: Failed password for root from 59.124.205.214 port 53120 ssh2 Aug 13 00:09:39 server sshd[13021]: Failed password for root from 59.124.205.214 port 44460 ssh2 |
2020-08-13 06:50:45 |
| 59.124.2.155 | attackspam |
|
2020-08-13 03:05:19 |
| 59.124.205.214 | attackspambots | 2020-07-30T00:34:34.936475vps773228.ovh.net sshd[3838]: Invalid user nisuser2 from 59.124.205.214 port 36514 2020-07-30T00:34:34.944936vps773228.ovh.net sshd[3838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59-124-205-214.hinet-ip.hinet.net 2020-07-30T00:34:34.936475vps773228.ovh.net sshd[3838]: Invalid user nisuser2 from 59.124.205.214 port 36514 2020-07-30T00:34:36.626628vps773228.ovh.net sshd[3838]: Failed password for invalid user nisuser2 from 59.124.205.214 port 36514 ssh2 2020-07-30T00:38:37.619546vps773228.ovh.net sshd[3890]: Invalid user yyg from 59.124.205.214 port 47758 ... |
2020-07-30 07:47:54 |
| 59.124.205.214 | attack | wp BF attempts |
2020-07-27 15:05:58 |
| 59.124.205.214 | attackbotsspam | Jul 11 19:09:55 vps sshd[5211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.124.205.214 Jul 11 19:09:57 vps sshd[5211]: Failed password for invalid user admin from 59.124.205.214 port 45844 ssh2 Jul 11 19:16:59 vps sshd[5529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.124.205.214 ... |
2020-07-12 02:12:00 |
| 59.124.205.214 | attackbots | Jun 15 10:05:30 Host-KLAX-C sshd[25545]: Disconnected from invalid user root 59.124.205.214 port 48470 [preauth] ... |
2020-06-16 00:11:07 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.124.2.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54089
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;59.124.2.50. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019061900 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jun 19 16:23:35 CST 2019
;; MSG SIZE rcvd: 11550.2.124.59.in-addr.arpa domain name pointer 59-124-2-50.HINET-IP.hinet.net.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
50.2.124.59.in-addr.arpa name = 59-124-2-50.HINET-IP.hinet.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 182.125.192.110 | attack | [portscan] tcp/23 [TELNET] *(RWIN=64100)(08041230) |
2019-08-05 01:45:06 |
| 35.201.196.94 | attack | Automated report - ssh fail2ban: Aug 4 19:21:52 wrong password, user=root, port=42660, ssh2 Aug 4 19:55:07 authentication failure Aug 4 19:55:09 wrong password, user=psc, port=35698, ssh2 |
2019-08-05 02:12:43 |
| 146.88.240.4 | attack | recursive dns scanning |
2019-08-05 01:53:39 |
| 198.55.123.235 | attack | [SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230) |
2019-08-05 02:20:08 |
| 206.212.244.202 | attack | [SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230) |
2019-08-05 02:17:49 |
| 164.52.24.179 | attackbots | [portscan] tcp/85 [mit-ml-dev] *(RWIN=65535)(08041230) |
2019-08-05 01:51:30 |
| 103.233.68.9 | attack | [SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230) |
2019-08-05 01:58:43 |
| 194.135.14.154 | attackspambots | [portscan] tcp/139 [NetBIOS Session Service] *(RWIN=1024)(08041230) |
2019-08-05 02:21:09 |
| 116.206.14.54 | attack | [SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(08041230) |
2019-08-05 01:22:36 |
| 186.71.17.163 | attackspam | [SMB remote code execution attempt: port tcp/445] [scan/connect: 2 time(s)] *(RWIN=1024)(08041230) |
2019-08-05 01:43:27 |
| 186.251.225.173 | attackbots | [SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230) |
2019-08-05 01:42:46 |
| 36.72.21.55 | attackspambots | [SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(08041230) |
2019-08-05 01:33:10 |
| 189.89.211.248 | attackspam | [portscan] tcp/23 [TELNET] *(RWIN=3194)(08041230) |
2019-08-05 02:23:28 |
| 14.229.197.82 | attack | [portscan] tcp/22 [SSH] [scan/connect: 2 time(s)] *(RWIN=8192)(08041230) |
2019-08-05 02:14:39 |
| 190.206.46.43 | attackbotsspam | [portscan] tcp/23 [TELNET] *(RWIN=54031)(08041230) |
2019-08-05 02:21:31 |