AbuseIPDB » 59.48.40.6

59.48.40.6 was found in our database!

This IP was reported 3,907 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET Shanxi province network
Usage Type	Fixed Line ISP
ASN	AS4134
Hostname(s)	6.40.48.59.broad.cz.sx.dynamic.163data.com.cn
Domain Name	shanxitele.com
Country	China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 59.48.40.6

Whois 59.48.40.6

IP Abuse Reports for 59.48.40.6:

This IP address has been reported a total of 3,907 times from 608 distinct sources. 59.48.40.6 was first reported on July 20th 2022, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Abuse Reports	2025-07-17 04:25:20 (2 hours ago)	SSH login attempt to fake banner	Hacking Brute-Force
lrathier	2025-07-16 23:41:26 (6 hours ago)	2025-07-16T15:58:40.487096+00:00 fsg-bi-plg01 sshd[368663]: Invalid user username from 59.48.40.6 po ... show more2025-07-16T15:58:40.487096+00:00 fsg-bi-plg01 sshd[368663]: Invalid user username from 59.48.40.6 port 51746 2025-07-16T15:58:40.490404+00:00 fsg-bi-plg01 sshd[368663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.48.40.6 2025-07-16T15:58:40.492624+00:00 fsg-bi-plg01 sshd[368663]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.48.40.6 user=username 2025-07-16T15:58:42.645647+00:00 fsg-bi-plg01 sshd[368663]: Failed password for invalid user username from 59.48.40.6 port 51746 ssh2 2025-07-16T23:41:26.011345+00:00 fsg-bi-plg01 sshd[379610]: Invalid user apache from 59.48.40.6 port 52699 ... show less	Brute-Force SSH
ThreatBook.io	2025-07-16 23:04:45 (7 hours ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/59.48.40.6	SSH
rtbh.com.tr	2025-07-16 20:07:43 (10 hours ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-07-16 16:48:20 (13 hours ago)	Country=China | rDNS=6.40.48.59.broad.cz.sx.dynamic.163data.com.cn | ASN=(unknown ASN) | Org=CHINANE ... show moreCountry=China | rDNS=6.40.48.59.broad.cz.sx.dynamic.163data.com.cn | ASN=(unknown ASN) | Org=CHINANET Shanxi province network | Fail2Ban bans: [/var/log/fail2ban.log.1:2025-07-07 01:40:50,833 fail2ban.actions jail=Ban] [/var/log/fail2ban.log.1:2025-07-07 14:52:33,579 fail2ban.actions jail=Ban] [/var/log/fail2ban.log.1:2025-07-07 15:05:47,578 fail2ban.actions jail=Ban] [/var/log/fail2ban.log.1:2025-07-07 15:06:08,985 fail2ban.actions jail=Ban] [/var/log/fail2ban.log.1:2025-07-07 15:08:59,235 fail2ban.actions jail=Ban] [/var/log/fail2ban.log.1:2025-07-07 15:10:41,037 fail2ban.actions jail=Ban] show less	Brute-Force
space.ua	2025-07-16 16:21:58 (14 hours ago)	MAIL_Brute-Force	Brute-Force
killian7603	2025-07-16 14:52:46 (15 hours ago)	Logon Policy Violation	Email Spam Spoofing Brute-Force
Anonymous	2025-07-16 14:23:59 (16 hours ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
altux	2025-07-16 13:48:24 (16 hours ago)	Jul 16 15:48:20 altux6 sshd\[16318\]: Invalid user username from 59.48.40.6 port 32916 Jul 16 ... show moreJul 16 15:48:20 altux6 sshd\[16318\]: Invalid user username from 59.48.40.6 port 32916 Jul 16 15:48:20 altux6 sshd\[16318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.48.40.6 Jul 16 15:48:22 altux6 sshd\[16318\]: Failed password for invalid user username from 59.48.40.6 port 32916 ssh2 ... show less	Brute-Force SSH
triplecode	2025-07-16 13:44:23 (16 hours ago)	Reported from hMailServer	Email Spam
Infocom	2025-07-16 12:49:25 (17 hours ago)	MAIL_Brute-Force	Brute-Force
Anonymous	2025-07-16 09:54:58 (20 hours ago)	IMAP password guessing	Brute-Force
sanitariu	2025-07-16 07:46:13 (22 hours ago)	Jul 15 22:12:26 dri postfix/smtpd[260405]: warning: unknown[59.48.40.6]: SASL LOGIN authentication f ... show moreJul 15 22:12:26 dri postfix/smtpd[260405]: warning: unknown[59.48.40.6]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=nasko Jul 16 10:30:36 dri postfix/smtpd[458068]: warning: ... show less	Brute-Force
Paul Smith	2025-07-16 07:23:42 (23 hours ago)	Email Auth Brute force attack 8/8 in last day	Brute-Force
Abuse Reports	2025-07-16 00:57:27 (1 day ago)	SSH exploit attempt: Shell Command Injection	Hacking Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩