59.57.238.136

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
30 reports
27 reporters · latest 10 hours ago
ISP
CHINANET fujian province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Fuzhou, Fujian
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
30 from 27 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 9 🇺🇸 United States of America 4 🇪🇸 Spain 3
Most common categories Brute-Force 29 Email Spam 5 SSH 4 Hacking 2 Port Scan 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇪🇸 didevi
SPAM or Brute force attack detected
Email Spam Brute-Force
Anonymous
$f2bV_matches
Brute-Force
🇺🇦 vbios.com
MAIL_Brute-Force
Brute-Force
🇩🇪 kkeyser
warning: unknown[59.57.238.136]: SASL LOGIN authentication failed: authentication failure
Brute-Force
🇺🇸 Bankbook8585
T-Pot honeypot | Heralding: smtps brute-force
Hacking Brute-Force
🇮🇹 www.tana.it
SMTP auth dictionary attack
Brute-Force
🇳🇱 EGP Abuse Dept
Unauthorized connection to SSH port 22
Port Scan Hacking SSH
🇪🇸 didevi
SPAM or Brute force attack detected
Email Spam Brute-Force
🇩🇪 vanlueckn
Brute-Force SSH
🇳🇱 EndCore Group
Brute-Force SSH
🇪🇸 yvoictra
2026-11-09T20:07:31.133843+01:00 medusa sshd-session[1254270]: Invalid user debian from 59.57.238.136 port 34990 ...
Brute-Force SSH
🇩🇪 jasperedv.de
Failed SMTP Login - Brutforcing
Email Spam Brute-Force
🇵🇱 ZiBoTo
Nov 9 14:28:13 lawenda postfix/smtpd[23239]: warning: unknown[59.57.238.136]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=tomasz ...
Brute-Force
🇦🇹 joe-abuse
2026-11-09T05:48:55.663066+01:00 ucs1 dovecot: auth-worker(209019): conn unix:auth-worker (pid=1061,uid=121): auth-worker<1>: pam(admin,59.57.238.136): unknown user (given password: 12345!6) ...
Brute-Force
🇺🇸 NXTwoThou
SMTP AUTH LOGIN
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 176.53.159.197
🇧🇩 103.158.119.173
🇺🇸 71.6.135.131
🇺🇸 54.84.248.251
🇺🇦 185.212.236.0
🇦🇷 179.49.123.195
🇵🇱 172.64.200.117
🇵🇱 172.64.200.5
🇺🇸 104.197.111.254
🇷🇴 92.118.39.50
🇨🇦 35.203.95.169
🇧🇷 187.15.189.229
🇨🇴 179.51.116.226
🇺🇸 162.216.149.205
🇮🇳 103.176.160.146
🇷🇴 92.118.39.78
🇸🇦 82.167.44.210
🇧🇷 200.195.92.244
🇹🇷 193.35.153.146
feedback