59.127.13.48 - IPInfo

Basic Info

City: Tainan City

Region: Tainan

Country: Taiwan, China

Internet Service Provider: Chunghwa Telecom Co. Ltd.

Hostname: unknown

Organization: Data Communication Business Group

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	TCP port 8080 (HTTP) attempt blocked by firewall. [2019-07-11 16:14:25]	2019-07-12 00:13:14

Comments on same subnet:

IP	Type	Details	Datetime
59.127.133.232	attackspambots	Automatic report - Banned IP Access	2020-09-14 02:44:54
59.127.133.232	attackspam	Automatic report - Banned IP Access	2020-09-13 18:43:57
59.127.13.161	attack	Fail2Ban Ban Triggered	2020-08-19 08:53:40
59.127.131.106	attackbots	TCP (SYN) 59.127.131.106:50191 -> port 23, len 40	2020-08-10 00:44:27
59.127.136.70	attackspam	unauthorized connection attempt	2020-07-01 13:31:42
59.127.133.242	attackspambots	ET CINS Active Threat Intelligence Poor Reputation IP group 46 - port: 23 proto: TCP cat: Misc Attack	2020-06-21 06:50:32
59.127.139.71	attackspambots	Port probing on unauthorized port 9000	2020-05-13 08:44:26
59.127.135.77	attackbots	Apr 12 22:40:06 debian-2gb-nbg1-2 kernel: \[8983003.965028\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=59.127.135.77 DST=195.201.40.59 LEN=52 TOS=0x00 PREC=0x00 TTL=51 ID=56642 DF PROTO=TCP SPT=60712 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0	2020-04-13 06:53:05
59.127.135.77	attack	2020-01-11T01:47:12.888Z CLOSE host=59.127.135.77 port=46050 fd=4 time=20.014 bytes=25 ...	2020-03-13 02:48:11
59.127.133.205	attackbots	firewall-block, port(s): 445/tcp	2020-02-24 20:58:24
59.127.131.149	attackspam	Honeypot attack, port: 81, PTR: 59-127-131-149.HINET-IP.hinet.net.	2020-02-10 09:47:05
59.127.130.207	attackbots	Unauthorized connection attempt detected from IP address 59.127.130.207 to port 81 [J]	2020-02-05 19:42:11
59.127.130.170	attack	Unauthorized connection attempt detected from IP address 59.127.130.170 to port 23 [J]	2020-02-04 00:00:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.127.13.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21505
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;59.127.13.48.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071100 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jul 12 00:12:53 CST 2019
;; MSG SIZE  rcvd: 116

Host info

48.13.127.59.in-addr.arpa domain name pointer 59-127-13-48.HINET-IP.hinet.net.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
48.13.127.59.in-addr.arpa	name = 59-127-13-48.HINET-IP.hinet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
113.199.40.202	attackspambots	2019-10-27T18:15:45.472930shield sshd\[31466\]: Invalid user live123 from 113.199.40.202 port 45375 2019-10-27T18:15:45.480193shield sshd\[31466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.199.40.202 2019-10-27T18:15:47.898053shield sshd\[31466\]: Failed password for invalid user live123 from 113.199.40.202 port 45375 ssh2 2019-10-27T18:20:15.632787shield sshd\[32287\]: Invalid user 123456 from 113.199.40.202 port 35828 2019-10-27T18:20:15.640917shield sshd\[32287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.199.40.202	2019-10-28 02:30:45
217.68.218.135	attackbotsspam	Host is trying to send e-mails. Multiple unauthorized connections to SMTP Sever: tcp/25.	2019-10-28 02:20:35
198.1.82.247	attackbots	Oct 27 17:19:24 www5 sshd\[8780\]: Invalid user horse1 from 198.1.82.247 Oct 27 17:19:24 www5 sshd\[8780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.1.82.247 Oct 27 17:19:26 www5 sshd\[8780\]: Failed password for invalid user horse1 from 198.1.82.247 port 51766 ssh2 ...	2019-10-28 02:36:58
79.175.166.53	attack	postfix (unknown user, SPF fail or relay access denied)	2019-10-28 02:41:23
105.154.205.192	attackbots	SMTP/25/465/587 Probe, BadAuth, SPAM, Hack -	2019-10-28 02:53:51
142.93.39.29	attackspambots	Oct 27 18:38:02 *** sshd[4698]: Invalid user ubuntu from 142.93.39.29	2019-10-28 02:40:28
217.68.216.62	attack	Host is trying to send e-mails. Multiple unauthorized connections to SMTP Sever: tcp/25.	2019-10-28 02:57:46
217.68.217.220	attackbotsspam	Host is trying to send e-mails. Multiple unauthorized connections to SMTP Sever: tcp/25.	2019-10-28 02:42:33
217.68.217.36	attackspam	Host is trying to send e-mails. Multiple unauthorized connections to SMTP Sever: tcp/25.	2019-10-28 02:35:44
162.144.70.210	attackspambots	Invalid user test from 162.144.70.210 port 33212	2019-10-28 02:25:51
217.68.217.45	attackspambots	Host is trying to send e-mails. Multiple unauthorized connections to SMTP Sever: tcp/25.	2019-10-28 02:34:37
217.68.217.64	attackbotsspam	Host is trying to send e-mails. Multiple unauthorized connections to SMTP Sever: tcp/25.	2019-10-28 02:31:19
121.160.198.198	attack	SSH Brute Force, server-1 sshd[15818]: Failed password for invalid user gitlab-runner from 121.160.198.198 port 43358 ssh2	2019-10-28 02:21:32
217.68.217.186	attackbots	Host is trying to send e-mails. Multiple unauthorized connections to SMTP Sever: tcp/25.	2019-10-28 02:47:23
217.68.217.235	attackbots	Host is trying to send e-mails. Multiple unauthorized connections to SMTP Sever: tcp/25.	2019-10-28 02:38:53

Recently Reported IPs

74.236.96.37	2a02:8108:8740:1e0c:3c17:f9b0:f95:65b0	93.97.35.140	159.65.137.23
109.64.234.84	158.14.204.127	187.62.141.230	76.196.165.237
2.218.169.253	194.182.72.214	90.148.26.159	89.187.178.220
54.37.92.131	40.237.6.167	14.91.10.5	144.120.166.151
77.211.166.86	158.255.164.44	2.131.228.224	101.20.252.53