JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

59.51.142.183

Neutral Activity

Abuse Confidence Score

0% Low Risk

55 reports

24 reporters · latest 5 months ago

ISP: CHINANET Guizhou province network
Usage Type: Fixed Line ISP
ASN: AS4134
Domain Name: chinatelecom.cn
Country: 🇨🇳 China
City: Guiyang, Guizhou

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

59.51.142.183 has been reported 55 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

55 from 24 distinct reporters

First reported

December 30th 2025

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-16 18:49:00 UTC · (5 months ago)	(mod_security) mod_security (id:210831) triggered by 59.51.142.183 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 14:48:53.999262 2026] [security2:error] [pid 14969:tid 14969] [client 59.51.142.183:12476] M ... show more (mod_security) mod_security (id:210831) triggered by 59.51.142.183 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 14:48:53.999262 2026] [security2:error] [pid 14969:tid 14969] [client 59.51.142.183:12476] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|kokr.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "kokr.org"] [uri "/"] [unique_id "agi8FUbDh9jJiA8IOFwznQAAABE"], referer: http://kokr.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-01-28 23:49:33 UTC · (9 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/59.51.142.183 2026-01-28 20:21:22 /officialnews_2.html 2026-01-28 20:21:20 /tender.html 2026-01-28 20:21:31 /open.html 2026-01-28 20:21:31 /open.html 2026-01-28 20:21:21 /o ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/59.51.142.183 2026-01-28 20:21:22 /officialnews_2.html 2026-01-28 20:21:20 /tender.html 2026-01-28 20:21:31 /open.html 2026-01-28 20:21:31 /open.html 2026-01-28 20:21:21 /officialnews_2.html 2026-01-28 20:21:28 /open.html 2026-01-28 20:21:28 /open.html 2026-01-28 20:21:32 /open.html 2026-01-28 20:21:29 /open.html 2026-01-28 20:21:19 /officialnews_2.html show less	Web App Attack
🇬🇧 [email protected]	2026-01-09 00:56:43 UTC · (10 months ago)	...	Brute-Force SSH
Anonymous	2026-01-08 23:05:07 UTC · (10 months ago)	Failed login attempt detected by Fail2Ban in ssh jail	Brute-Force
Anonymous	2026-01-08 16:08:01 UTC · (10 months ago)	...	Brute-Force
🇬🇧 killian7603	2026-01-08 12:18:41 UTC · (10 months ago)	Logon Policy Violation	Email Spam Spoofing Brute-Force
🇺🇸 anon333	2026-01-08 08:34:24 UTC · (10 months ago)	Hacker syslog review 1767861263	Hacking
🇷🇺 Kotiacat_one	2026-01-08 00:05:44 UTC · (10 months ago)	2026-01-08T03:05:43.846819+03:00 kotia sshd-session[21958]: Invalid user username from 59.51.142.183 port 26505 ...	Brute-Force SSH
🇩🇪 FeG Deutschland	2026-01-07 21:18:03 UTC · (10 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇨🇿 lp	2026-01-07 19:25:39 UTC · (10 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 59.51.142.183 2026-01-07T19:50:03+01:00 vpn Access-Reject 'zelenym' station: 59.51.142.183 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redac ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 59.51.142.183 2026-01-07T19:50:03+01:00 vpn Access-Reject 'zelenym' station: 59.51.142.183 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇳🇱 maxxsense	2026-01-07 17:35:40 UTC · (10 months ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 59.51.142.183 (CN/China/-)	Hacking
Anonymous	2026-01-07 11:32:01 UTC · (10 months ago)	...	Brute-Force
🇨🇦 Julio Covolato	2026-01-07 10:25:02 UTC · (10 months ago)	Imap or Submission login brute-force attacks.	Brute-Force
🇨🇿 lp	2026-01-07 04:23:34 UTC · (10 months ago)	Email account brute force: 3 attempts were recorded from 59.51.142.183 2026-01-07T04:11:31+01:00 warning: unknown[59.51.142.183]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-01-07T04:44:06+01:00 warning ... show more Email account brute force: 3 attempts were recorded from 59.51.142.183 2026-01-07T04:11:31+01:00 warning: unknown[59.51.142.183]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-01-07T04:44:06+01:00 warning: unknown[59.51.142.183]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-01-07T05:05:32+01:00 warning: unknown[59.51.142.183]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇩🇪 chris_yooo	2026-01-06 22:35:42 UTC · (10 months ago)	Jan 6 23:35:41 isp postfix/smtps/smtpd[3967668]: warning: unknown[59.51.142.183]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jan 6 23:35:42 isp postfix/smtps/smtpd[3967668]: lost connection after ... show more Jan 6 23:35:41 isp postfix/smtps/smtpd[3967668]: warning: unknown[59.51.142.183]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jan 6 23:35:42 isp postfix/smtps/smtpd[3967668]: lost connection after AUTH from unknown[59.51.142.183] ... show less	Spoofing Brute-Force

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 187.86.24.237

🇯🇵 47.91.1.241

🇳🇱 2a0f:ca80:b00b:eff9::5

🇧🇷 187.17.231.224

🇳🇱 109.160.32.112

🇧🇩 103.231.35.41

🇷🇴 92.118.39.56

🇺🇸 74.82.47.29

🇺🇸 45.79.211.97

🇵🇰 39.34.191.51

🇬🇧 35.203.210.60

🇸🇬 8.219.172.88

🇭🇰 8.210.156.117

🇸🇬 167.71.200.255

🇺🇸 162.216.150.126

🇺🇸 162.216.150.114

🇨🇳 117.72.212.5

🇧🇩 103.231.35.40

🇺🇸 95.164.8.250

🇲🇽 94.74.67.250