Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
59.152.130.242 has been reported 1,111
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
IP Abuse Reports for 59.152.130.242
This IP address has been reported a total of
1,111
times from
406 distinct
sources.
59.152.130.242 was first reported on
, and the most recent report was
.
This IP address carried out 98 SSH credential attack (attempts) between 21-04-2023 to 15-05-2023. Fo ...
show moreThis IP address carried out 98 SSH credential attack (attempts) between 21-04-2023 to 15-05-2023. For more information or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
May 2 20:42:51 dns1 sshd[7848]: Failed password for invalid user fairvision from 59.152.130.242 por ...
show moreMay 2 20:42:51 dns1 sshd[7848]: Failed password for invalid user fairvision from 59.152.130.242 port 40407 ssh2
May 2 20:42:52 dns1 sshd[7848]: Disconnected from invalid user fairvision 59.152.130.242 port 40407 [preauth]
May 2 20:44:21 dns1 sshd[7851]: Invalid user mahmoud from 59.152.130.242 port 56581
May 2 20:44:21 dns1 sshd[7851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.152.130.242
May 2 20:44:23 dns1 sshd[7851]: Failed password for invalid user mahmoud from 59.152.130.242 port 56581 ssh2
show less
May 2 20:14:05 dns1 sshd[7613]: Failed password for invalid user sonika from 59.152.130.242 port 51 ...
show moreMay 2 20:14:05 dns1 sshd[7613]: Failed password for invalid user sonika from 59.152.130.242 port 51882 ssh2
May 2 20:14:06 dns1 sshd[7613]: Disconnected from invalid user sonika 59.152.130.242 port 51882 [preauth]
May 2 20:20:40 dns1 sshd[7683]: Invalid user ftpuser from 59.152.130.242 port 57560
May 2 20:20:40 dns1 sshd[7683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.152.130.242
May 2 20:20:41 dns1 sshd[7683]: Failed password for invalid user ftpuser from 59.152.130.242 port 57560 ssh2
show less
Brute-Force
SSH
Anonymous
May 3 07:12:54 OLS sshd[7409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ...
show moreMay 3 07:12:54 OLS sshd[7409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.152.130.242
May 3 07:12:56 OLS sshd[7409]: Failed password for invalid user sonika from 59.152.130.242 port 36976 ssh2
May 3 07:20:28 OLS sshd[7675]: Invalid user ftpuser from 59.152.130.242 port 50580
...
show less
May 3 00:45:34 srv-ubuntu-dev3 sshd[21279]: Invalid user ubuntu from 59.152.130.242
May 3 00:45:34 ...
show moreMay 3 00:45:34 srv-ubuntu-dev3 sshd[21279]: Invalid user ubuntu from 59.152.130.242
May 3 00:45:34 srv-ubuntu-dev3 sshd[21279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.152.130.242
May 3 00:45:34 srv-ubuntu-dev3 sshd[21279]: Invalid user ubuntu from 59.152.130.242
May 3 00:45:36 srv-ubuntu-dev3 sshd[21279]: Failed password for invalid user ubuntu from 59.152.130.242 port 36630 ssh2
May 3 00:47:38 srv-ubuntu-dev3 sshd[21454]: Invalid user ali from 59.152.130.242
May 3 00:47:38 srv-ubuntu-dev3 sshd[21454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.152.130.242
May 3 00:47:38 srv-ubuntu-dev3 sshd[21454]: Invalid user ali from 59.152.130.242
May 3 00:47:40 srv-ubuntu-dev3 sshd[21454]: Failed password for invalid user ali from 59.152.130.242 port 61273 ssh2
May 3 00:49:43 srv-ubuntu-dev3 sshd[21626]: Invalid user admin from 59.152.130.242
...
show less
May 3 00:17:45 srv-ubuntu-dev3 sshd[18291]: Invalid user admin from 59.152.130.242
May 3 00:17:45 ...
show moreMay 3 00:17:45 srv-ubuntu-dev3 sshd[18291]: Invalid user admin from 59.152.130.242
May 3 00:17:45 srv-ubuntu-dev3 sshd[18291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.152.130.242
May 3 00:17:45 srv-ubuntu-dev3 sshd[18291]: Invalid user admin from 59.152.130.242
May 3 00:17:47 srv-ubuntu-dev3 sshd[18291]: Failed password for invalid user admin from 59.152.130.242 port 35647 ssh2
May 3 00:19:20 srv-ubuntu-dev3 sshd[18424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.152.130.242 user=root
May 3 00:19:21 srv-ubuntu-dev3 sshd[18424]: Failed password for root from 59.152.130.242 port 54429 ssh2
May 3 00:20:51 srv-ubuntu-dev3 sshd[18570]: Invalid user test from 59.152.130.242
May 3 00:20:51 srv-ubuntu-dev3 sshd[18570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.152.130.242
May 3 00:20:51 srv-ubuntu-dev3 sshd[18570]: Invalid user test from
...
show less
May 2 22:17:28 guac-host01.view.srvfarm.net sshd[3882716]: Disconnected from authenticating user ro ...
show moreMay 2 22:17:28 guac-host01.view.srvfarm.net sshd[3882716]: Disconnected from authenticating user root 59.152.130.242 port 13859 [preauth]
May 2 22:22:58 guac-host01.view.srvfarm.net sshd[3882826]: Invalid user demo from 59.152.130.242 port 56005
May 2 22:22:59 guac-host01.view.srvfarm.net sshd[3882826]: Disconnected from invalid user demo 59.152.130.242 port 56005 [preauth]
May 2 22:24:25 guac-host01.view.srvfarm.net sshd[3882858]: Invalid user tada from 59.152.130.242 port 20438
May 2 22:24:25 guac-host01.view.srvfarm.net sshd[3882858]: Disconnected from invalid user tada 59.152.130.242 port 20438 [preauth]
show less
May 2 22:17:28 guac-host01.view.srvfarm.net sshd[3882716]: Disconnected from authenticating user ro ...
show moreMay 2 22:17:28 guac-host01.view.srvfarm.net sshd[3882716]: Disconnected from authenticating user root 59.152.130.242 port 13859 [preauth]
May 2 22:22:58 guac-host01.view.srvfarm.net sshd[3882826]: Invalid user demo from 59.152.130.242 port 56005
May 2 22:22:59 guac-host01.view.srvfarm.net sshd[3882826]: Disconnected from invalid user demo 59.152.130.242 port 56005 [preauth]
May 2 22:24:25 guac-host01.view.srvfarm.net sshd[3882858]: Invalid user tada from 59.152.130.242 port 20438
May 2 22:24:25 guac-host01.view.srvfarm.net sshd[3882858]: Disconnected from invalid user tada 59.152.130.242 port 20438 [preauth]
show less