JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 59.36.80.189

59.36.80.189 was found in our database!

This IP was reported 90 times. Confidence of Abuse is 42%: ?

42%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 59.36.80.189

Whois 59.36.80.189

IP Abuse Reports for 59.36.80.189:

This IP address has been reported a total of 90 times from 34 distinct sources. 59.36.80.189 was first reported on June 26th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇰🇷 yazzang	2026-07-24 02:00:03 (1 week ago)	SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard ... show more SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture. show less	Hacking Brute-Force Exploited Host SSH
🇦🇺 Powston	2026-07-23 23:56:31 (1 week ago)	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-07-23T23:56:17Z and 2026-07- ... show more Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-07-23T23:56:17Z and 2026-07-23T23:56:31Z show less	Brute-Force SSH
🇰🇷 yazzang	2026-07-23 02:00:02 (1 week ago)	SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard ... show more SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture. show less	Hacking Brute-Force Exploited Host SSH
🇰🇷 2048	2026-07-23 01:12:53 (1 week ago)	SSH credential brute-force observed by honeypot. Source IP: 59.36.80.189 Targeted device: NAS First ... show more SSH credential brute-force observed by honeypot. Source IP: 59.36.80.189 Targeted device: NAS First seen: 23 Jul 2026 01:12:42 UTC Last seen: 23 Jul 2026 01:12:53 UTC Attempts: 23 Client: SSH-2.0-libssh2_1.4.3 Sample credentials: root:v23G23GhPvlx82), root:QAlp45cn, root:root, root:Huawei12#$, root:1qaz@WSX, root:qingdao@123, root:WJEQ0#*cba, root:123!@#qwe, root:1qaz!@#$, root:1qaz@WSX3edc show less	Brute-Force SSH IoT Targeted
🇩🇪 cloudmax	2026-07-07 14:42:26 (3 weeks ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇦🇺 screwlooseit.com.au	2026-06-29 13:03:39 (1 month ago)	Blocked by CSF 13 firewall - Rule: mysaslmatch CN/China/-	Web App Attack
🇭🇺 Lacika555	2026-06-29 00:26:22 (1 month ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇩🇪 cloudmax	2026-06-28 18:58:41 (1 month ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
Anonymous	2026-06-26 16:40:02 (1 month ago)	Brute Force User Attack SMTP	Brute-Force
🇦🇺 screwlooseit.com.au	2026-06-23 17:01:17 (1 month ago)	Blocked by CSF 13 firewall - Rule: mysaslmatch CN/China/-	Web App Attack
🇬🇷 setupgr	2026-06-23 06:24:42 (1 month ago)	(mod_security) mod_security (id:100011) triggered by 59.36.80.189 (CN/China/Guangdong/Guangzhou/-/[A ... show more (mod_security) mod_security (id:100011) triggered by 59.36.80.189 (CN/China/Guangdong/Guangzhou/-/[AS4134 CHINANET-BACKBONE No.31,Jin-rong Street]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 23 09:24:41.942618 2026] [security2:error] [pid 2059052:tid 2059102] [client 59.36.80.189:57076] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(www\\\\.)?ftiaxtomonosou\\\\.gr" at SERVER_NAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "54"] [id "100011"] [msg "CSF-TRIGGER: Country Block CN/SG for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/"] [unique_id "ajomqVNPFwkSkEkc_m3r5wAAARc"] show less	Port Scan
🇦🇺 paulshipley.com.au	2026-06-23 02:44:18 (1 month ago)	[Tue Jun 23 12:44:17.792071 2026] [security2:error] [pid 183041] [client 59.36.80.189:36492] [client ... show more [Tue Jun 23 12:44:17.792071 2026] [security2:error] [pid 183041] [client 59.36.80.189:36492] [client 59.36.80.189] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "furst.com.au"] [uri "/"] [unique_id "ajnzAYdm-KIBzyfDjR_rKAAAABc"] ... show less	Web App Attack
Anonymous	2026-06-20 14:23:34 (1 month ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
🇫🇷 basing	2026-06-18 05:21:55 (1 month ago)	2026-06-18 06:21:55 pzb SASL PLAIN auth failed: rhost=59.36.80.189...	Brute-Force
🇮🇩 xveil	2026-06-18 01:02:37 (1 month ago)	2026-06-18T08:02:35.369168 mail-honeypot postfix/submission/smtpd[17829]: disconnect from unknown[59 ... show more 2026-06-18T08:02:35.369168 mail-honeypot postfix/submission/smtpd[17829]: disconnect from unknown[59.36.80.189] ehlo=1 auth=0/1 quit=1 commands=2/3 ... show less	Brute-Force

Showing 1 to 15 of 90 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.105

🇷🇴 193.46.255.86

🇲🇽 187.190.187.59

🇨🇳 115.231.78.10

🇨🇳 113.25.249.100

🇨🇦 104.207.60.146

🇮🇳 103.226.237.120

🇹🇷 93.177.103.252

🇰🇷 59.24.133.197

🇧🇬 45.95.170.170

🇰🇷 211.186.115.35

🇦🇷 190.112.110.84

🇺🇸 162.216.149.78

🇻🇳 116.110.150.10

🇲🇲 103.233.206.154

🇨🇳 103.39.225.74

🇧🇬 93.94.141.115

🇩🇪 69.5.169.50

🇮🇹 65.111.28.202

🇧🇪 35.241.138.94