JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

59.36.80.42

Neutral Activity

Abuse Confidence Score

0% Low Risk

110 reports

89 reporters · latest 2 years ago

ISP: CHINANET Guangdong province network
Usage Type: Fixed Line ISP
ASN: AS4134
Domain Name: chinatelecom.cn
Country: 🇨🇳 China
City: Guangzhou, Guangdong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

59.36.80.42 has been reported 110 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

110 from 89 distinct reporters

First reported

June 24th 2024

Most recent report

2 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2024-07-02 12:22:58 UTC · (2 years ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇺🇸 katawajojo	2024-07-02 11:54:20 UTC · (2 years ago)	2024-07-02T03:52:15.844875-08:00 lain sshd[2845790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.80.42 user=root 2024-07-02T03:52:18.128891-08:00 lain sshd[2845790]: Failed password for root from 59. ... show more 2024-07-02T03:52:15.844875-08:00 lain sshd[2845790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.80.42 user=root 2024-07-02T03:52:18.128891-08:00 lain sshd[2845790]: Failed password for root from 59.36.80.42 port 52054 ssh2 2024-07-02T03:53:16.265791-08:00 lain sshd[2845831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.80.42 user=root 2024-07-02T03:53:18.360517-08:00 lain sshd[2845831]: Failed password for root from 59.36.80.42 port 37340 ssh2 2024-07-02T03:54:20.080030-08:00 lain sshd[2845873]: Invalid user ubuntu from 59.36.80.42 port 50858 ... show less	Brute-Force SSH
🇫🇷 krapon	2024-07-02 11:54:16 UTC · (2 years ago)	Jul 2 13:54:13 service sshd[470664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.80.42 Jul 2 13:54:13 service sshd[470664]: Invalid user ubuntu from 59.36.80.42 port 34654 Jul 2 13:54:15 service s ... show more Jul 2 13:54:13 service sshd[470664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.80.42 Jul 2 13:54:13 service sshd[470664]: Invalid user ubuntu from 59.36.80.42 port 34654 Jul 2 13:54:15 service sshd[470664]: Failed password for invalid user ubuntu from 59.36.80.42 port 34654 ssh2 ... show less	Brute-Force SSH
🇺🇸 SameTeem	2024-07-02 11:53:29 UTC · (2 years ago)	(sshd) Failed SSH login from 59.36.80.42 (CN/China/42.80.36.59.broad.dg.gd.dynamic.163data.com.cn): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: 2024-07-02T11:43:20.241763+00:00 nc1 sshd[1695698]: pam_unix(sshd:auth): ... show more (sshd) Failed SSH login from 59.36.80.42 (CN/China/42.80.36.59.broad.dg.gd.dynamic.163data.com.cn): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: 2024-07-02T11:43:20.241763+00:00 nc1 sshd[1695698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.80.42 user=root 2024-07-02T11:43:22.331092+00:00 nc1 sshd[1695698]: Failed password for root from 59.36.80.42 port 51682 ssh2 2024-07-02T11:52:19.041042+00:00 nc1 sshd[1697870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.80.42 user=root 2024-07-02T11:52:21.126614+00:00 nc1 sshd[1697870]: Failed password for root from 59.36.80.42 port 59608 ssh2 2024-07-02T11:53:19.505755+00:00 nc1 sshd[1698109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.80.42 user=root show less	Port Scan Brute-Force
🇩🇪 PieKnu	2024-07-02 10:03:13 UTC · (2 years ago)	Jul 2 12:00:34 host sshd[3909438]: Failed password for root from 59.36.80.42 port 44524 ssh2 Jul 2 12:02:27 host sshd[3910095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.80.42 user=root Jul 2 12 ... show more Jul 2 12:00:34 host sshd[3909438]: Failed password for root from 59.36.80.42 port 44524 ssh2 Jul 2 12:02:27 host sshd[3910095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.80.42 user=root Jul 2 12:02:29 host sshd[3910095]: Failed password for root from 59.36.80.42 port 33776 ssh2 Jul 2 12:03:07 host sshd[3910132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.80.42 user=root Jul 2 12:03:09 host sshd[3910132]: Failed password for root from 59.36.80.42 port 42518 ssh2 ... show less	Brute-Force SSH
🇧🇷 diego	2024-07-02 07:37:30 UTC · (2 years ago)	[rede-168-134] (sshd) Failed SSH login from 59.36.80.42 (CN/China/42.80.36.59.broad.dg.gd.dynamic.163data.com.cn): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 2 04:27:26 sshd[21555]: pam_unix(sshd:auth): authe ... show more [rede-168-134] (sshd) Failed SSH login from 59.36.80.42 (CN/China/42.80.36.59.broad.dg.gd.dynamic.163data.com.cn): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 2 04:27:26 sshd[21555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.80.42 user=[USERNAME] Jul 2 04:27:28 sshd[21555]: Failed password for [USERNAME] from 59.36.80.42 port 44916 ssh2 Jul 2 04:36:32 sshd[21747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.80.42 user=[USERNAME] Jul 2 04:36:34 sshd[21747]: Failed password for [USERNAME] from 59.36.80.42 port 48150 ssh2 Jul 2 04:37:23 sshd[2 show less	Port Scan
🇮🇹 Dario B.	2024-07-02 07:36:33 UTC · (2 years ago)	DATE:2024-07-02 09:36:28, IP:59.36.80.42, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq)	Brute-Force SSH
🇩🇪 kkeyser	2024-07-02 03:09:37 UTC · (2 years ago)	Failed password for root from 59.36.80.42 port 45162 ssh2	Brute-Force SSH
🇩🇪 wlt-blocker	2024-07-01 23:23:56 UTC · (2 years ago)	Attempts to access SSH server with wrong credentials	SSH
🇫🇷 inpec.fr	2024-07-01 23:20:44 UTC · (2 years ago)	$f2bV_matches	Brute-Force
🇸🇬 jie	2024-07-01 21:57:08 UTC · (2 years ago)	[Automated F2B Report] 2024-07-01T21:51:59.634922webserver sshd[416989]: Invalid user deployer from 59.36.80.42 port 59682 2024-07-01T21:55:53.085021webserver sshd[417050]: Invalid user test from 59.36.80.42 port 57174 2024-07-01T21:57:07.910798webse ... show more [Automated F2B Report] 2024-07-01T21:51:59.634922webserver sshd[416989]: Invalid user deployer from 59.36.80.42 port 59682 2024-07-01T21:55:53.085021webserver sshd[417050]: Invalid user test from 59.36.80.42 port 57174 2024-07-01T21:57:07.910798webserver sshd[417085]: Invalid user elasticsearch from 59.36.80.42 port 46930 ... show less	Brute-Force SSH
Anonymous	2024-07-01 20:31:17 UTC · (2 years ago)	2024-07-02T04:20:51.548877+08:00 kltw-debian sshd[11550]: Disconnected from authenticating user root 59.36.80.42 port 37502 [preauth] 2024-07-02T04:30:10.781545+08:00 kltw-debian sshd[11625]: Disconnected from authenticating user root 59.36.80.42 por ... show more 2024-07-02T04:20:51.548877+08:00 kltw-debian sshd[11550]: Disconnected from authenticating user root 59.36.80.42 port 37502 [preauth] 2024-07-02T04:30:10.781545+08:00 kltw-debian sshd[11625]: Disconnected from authenticating user root 59.36.80.42 port 38674 [preauth] 2024-07-02T04:30:43.131550+08:00 kltw-debian sshd[11638]: Invalid user dev from 59.36.80.42 port 45654 2024-07-02T04:30:43.320455+08:00 kltw-debian sshd[11638]: Disconnected from invalid user dev 59.36.80.42 port 45654 [preauth] 2024-07-02T04:31:15.187642+08:00 kltw-debian sshd[11658]: Disconnected from authenticating user root 59.36.80.42 port 52640 [preauth] ... show less	Brute-Force SSH
🇩🇪 Thomas Barth	2024-07-01 17:13:32 UTC · (2 years ago)	2024-07-01T19:13:31.226111server sshd[31372]: Invalid user admin from 59.36.80.42 port 39664 ...	Brute-Force SSH
🇭🇺 HoneyPotEu	2024-07-01 11:17:31 UTC · (2 years ago)	Jul 1 13:17:27 [redacted] sshd[1322737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.80.42 Jul 1 13:17:30 [redacted] sshd[1322737]: Failed password for invalid u ...	Brute-Force SSH
🇫🇷 wblondel	2024-07-01 09:21:27 UTC · (2 years ago)	2024-07-01T11:18:11.606788+02:00 pigeon sshd[3037435]: Disconnected from authenticating user root 59.36.80.42 port 45726 [preauth] 2024-07-01T11:20:42.265503+02:00 pigeon sshd[3038926]: Disconnected from authenticating user root 59.36.80.42 port 3554 ... show more 2024-07-01T11:18:11.606788+02:00 pigeon sshd[3037435]: Disconnected from authenticating user root 59.36.80.42 port 45726 [preauth] 2024-07-01T11:20:42.265503+02:00 pigeon sshd[3038926]: Disconnected from authenticating user root 59.36.80.42 port 35544 [preauth] 2024-07-01T11:21:26.183543+02:00 pigeon sshd[3039385]: Disconnected from authenticating user root 59.36.80.42 port 45126 [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 109.160.32.108

🇧🇩 103.170.141.44

🇳🇱 89.21.67.147

🇺🇸 80.73.242.26

🇺🇸 199.165.159.53

🇲🇽 189.203.163.10

🇵🇰 182.191.137.16

🇦🇷 181.209.102.164

🇧🇷 179.113.74.39

🇫🇷 169.58.80.127

🇺🇸 147.185.132.239

🇻🇳 113.164.66.10

🇨🇳 106.15.236.209

🇺🇸 73.19.242.140

🇳🇱 45.148.10.141

🇷🇴 2.57.121.25

🇦🇷 181.118.77.185

🇧🇷 177.71.26.40

🇺🇸 135.237.122.43

🇨🇳 113.219.44.108