Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Guangdong Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
Type Details Datetime
attackspam 
2020-10-05T01:12:24.004360mail.standpoint.com.ua sshd[7094]: Failed password for root from 59.42.37.213 port 6259 ssh2
2020-10-05T01:14:17.868094mail.standpoint.com.ua sshd[7343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.42.37.213  user=root
2020-10-05T01:14:19.552962mail.standpoint.com.ua sshd[7343]: Failed password for root from 59.42.37.213 port 7175 ssh2
2020-10-05T01:16:12.524068mail.standpoint.com.ua sshd[7608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.42.37.213  user=root
2020-10-05T01:16:14.329398mail.standpoint.com.ua sshd[7608]: Failed password for root from 59.42.37.213 port 7740 ssh2
...
 2020-10-06 06:05:31
attack 
2020-10-05T01:12:24.004360mail.standpoint.com.ua sshd[7094]: Failed password for root from 59.42.37.213 port 6259 ssh2
2020-10-05T01:14:17.868094mail.standpoint.com.ua sshd[7343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.42.37.213  user=root
2020-10-05T01:14:19.552962mail.standpoint.com.ua sshd[7343]: Failed password for root from 59.42.37.213 port 7175 ssh2
2020-10-05T01:16:12.524068mail.standpoint.com.ua sshd[7608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.42.37.213  user=root
2020-10-05T01:16:14.329398mail.standpoint.com.ua sshd[7608]: Failed password for root from 59.42.37.213 port 7740 ssh2
...
 2020-10-05 22:09:29
attackspam 
2020-10-05T01:12:24.004360mail.standpoint.com.ua sshd[7094]: Failed password for root from 59.42.37.213 port 6259 ssh2
2020-10-05T01:14:17.868094mail.standpoint.com.ua sshd[7343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.42.37.213  user=root
2020-10-05T01:14:19.552962mail.standpoint.com.ua sshd[7343]: Failed password for root from 59.42.37.213 port 7175 ssh2
2020-10-05T01:16:12.524068mail.standpoint.com.ua sshd[7608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.42.37.213  user=root
2020-10-05T01:16:14.329398mail.standpoint.com.ua sshd[7608]: Failed password for root from 59.42.37.213 port 7740 ssh2
...
 2020-10-05 14:03:40
Comments on same subnet:
IP Type Details Datetime
59.42.37.161 attack 
Feb 27 08:08:22 vps647732 sshd[2231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.42.37.161
Feb 27 08:08:24 vps647732 sshd[2231]: Failed password for invalid user ll from 59.42.37.161 port 8738 ssh2
...
 2020-02-27 21:55:47
59.42.37.132 attackspambots 
Jan 29 17:39:14 MK-Soft-VM8 sshd[20688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.42.37.132 
Jan 29 17:39:16 MK-Soft-VM8 sshd[20688]: Failed password for invalid user dvaraka from 59.42.37.132 port 3193 ssh2
...
 2020-01-30 00:57:28
59.42.37.48 attackbotsspam 
"SSH brute force auth login attempt."
 2020-01-23 18:04:56
59.42.37.48 attackbots 
Jan 11 07:07:02 *** sshd[17605]: Address 59.42.37.48 maps to 48.37.42.59.broad.gz.gd.dynamic.163data.com.cn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jan 11 07:07:02 *** sshd[17605]: Invalid user xwu from 59.42.37.48
Jan 11 07:07:02 *** sshd[17605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.42.37.48 
Jan 11 07:07:04 *** sshd[17605]: Failed password for invalid user xwu from 59.42.37.48 port 53279 ssh2
Jan 11 07:07:05 *** sshd[17605]: Received disconnect from 59.42.37.48: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=59.42.37.48
 2020-01-11 15:55:06
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.42.37.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12637
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;59.42.37.213.			IN	A

;; AUTHORITY SECTION:
.			257	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020100500 1800 900 604800 86400

;; Query time: 92 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 05 14:03:35 CST 2020
;; MSG SIZE  rcvd: 116
Host info
213.37.42.59.in-addr.arpa domain name pointer 213.37.42.59.broad.gz.gd.dynamic.163data.com.cn.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
213.37.42.59.in-addr.arpa	name = 213.37.42.59.broad.gz.gd.dynamic.163data.com.cn.

Authoritative answers can be found from:
Related IP info:
59.42.37.126
59.42.37.230
59.42.37.206
59.42.37.133
59.42.37.7
59.42.37.4
59.42.37.23
59.42.37.138
59.42.37.203
59.42.37.89
59.42.37.224
59.42.37.149
59.42.37.51
59.42.37.152
59.42.37.31
59.42.37.44
59.42.37.195
59.42.37.248
59.42.37.200
59.42.37.191
59.42.37.135
59.42.37.93
59.42.37.187
59.42.37.92
59.42.37.190
59.42.37.109
59.42.37.160
59.42.37.226
59.42.37.12
59.42.37.251
59.42.37.35
59.42.37.2
59.42.37.168
59.42.37.28
59.42.37.99
59.42.37.58
59.42.37.84
59.42.37.63
59.42.37.45
59.42.37.231
59.42.37.213
59.42.37.247
59.42.37.222
59.42.37.170
59.42.37.198
59.42.37.189
59.42.37.26
59.42.37.238
59.42.37.197
59.42.37.107
59.42.37.221
59.42.37.48
59.42.37.233
59.42.37.242
59.42.37.56
59.42.37.50
59.42.37.115
59.42.37.212
59.42.37.124
59.42.37.148
59.42.37.78
59.42.37.122
59.42.37.225
59.42.37.253
59.42.37.244
59.42.37.217
59.42.37.186
59.42.37.228
59.42.37.105
59.42.37.236
59.42.37.24
59.42.37.21
59.42.37.116
59.42.37.240
59.42.37.119
59.42.37.111
59.42.37.158
59.42.37.18
59.42.37.214
59.42.37.254
59.42.37.3
59.42.37.180
59.42.37.10
59.42.37.216
59.42.37.34
59.42.37.22
59.42.37.215
59.42.37.146
59.42.37.118
59.42.37.223
59.42.37.123
59.42.37.96
59.42.37.199
59.42.37.83
59.42.37.219
59.42.37.47
59.42.37.173
59.42.37.165
59.42.37.1
59.42.37.110
59.42.37.55
59.42.37.38
59.42.37.209
59.42.37.43
59.42.37.145
59.42.37.177
59.42.37.194
59.42.37.59
59.42.37.97
59.42.37.174
59.42.37.220
59.42.37.143
59.42.37.125
59.42.37.52
59.42.37.154
59.42.37.13
59.42.37.137
59.42.37.161
59.42.37.46
59.42.37.104
59.42.37.159
59.42.37.185
59.42.37.171
59.42.37.17
59.42.37.88
59.42.37.235
59.42.37.229
59.42.37.76
59.42.37.74
59.42.37.81
59.42.37.153
59.42.37.162
59.42.37.127
59.42.37.19
59.42.37.61
59.42.37.196
59.42.37.243
59.42.37.65
59.42.37.95
59.42.37.106
59.42.37.156
59.42.37.64
59.42.37.75
59.42.37.181
59.42.37.237
59.42.37.188
59.42.37.208
59.42.37.113
59.42.37.166
59.42.37.49
59.42.37.68
59.42.37.176
59.42.37.132
59.42.37.205
59.42.37.100
59.42.37.87
59.42.37.192
59.42.37.16
59.42.37.27
59.42.37.250
59.42.37.71
59.42.37.245
59.42.37.40
59.42.37.32
59.42.37.139
59.42.37.41
59.42.37.94
59.42.37.252
59.42.37.108
59.42.37.30
59.42.37.178
59.42.37.210
59.42.37.207
59.42.37.167
59.42.37.249
59.42.37.29
59.42.37.90
59.42.37.164
59.42.37.70
59.42.37.101
59.42.37.117
59.42.37.39
59.42.37.232
59.42.37.144
59.42.37.169
59.42.37.67
59.42.37.102
59.42.37.73
59.42.37.85
59.42.37.193
59.42.37.239
59.42.37.15
59.42.37.241
59.42.37.136
59.42.37.218
59.42.37.114
59.42.37.60
59.42.37.53
59.42.37.79
59.42.37.42
59.42.37.184
59.42.37.142
59.42.37.157
59.42.37.202
59.42.37.37
59.42.37.234
59.42.37.25
59.42.37.112
59.42.37.103
59.42.37.182
59.42.37.77
59.42.37.201
59.42.37.8
59.42.37.14
59.42.37.9
59.42.37.69
59.42.37.147
59.42.37.86
59.42.37.62
59.42.37.80
59.42.37.66
59.42.37.183
59.42.37.5
59.42.37.227
59.42.37.151
59.42.37.155
59.42.37.134
59.42.37.72
59.42.37.128
59.42.37.91
59.42.37.204
59.42.37.141
59.42.37.130
59.42.37.175
59.42.37.246
59.42.37.36
59.42.37.6
59.42.37.57
59.42.37.129
59.42.37.121
59.42.37.120
59.42.37.98
59.42.37.211
59.42.37.150
59.42.37.163
59.42.37.33
59.42.37.179
59.42.37.82
59.42.37.11
59.42.37.54
59.42.37.140
59.42.37.20
59.42.37.131
59.42.37.172
Related comments:
IP Type Details Datetime
200.222.44.196 attackbots 
Unauthorized connection attempt detected from IP address 200.222.44.196 to port 2220 [J]
 2020-02-05 04:18:21
106.13.86.236 attack 
Feb  4 21:20:57 dedicated sshd[12164]: Invalid user teamspeak from 106.13.86.236 port 54580
Feb  4 21:20:59 dedicated sshd[12164]: Failed password for invalid user teamspeak from 106.13.86.236 port 54580 ssh2
Feb  4 21:20:57 dedicated sshd[12164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.86.236 
Feb  4 21:20:57 dedicated sshd[12164]: Invalid user teamspeak from 106.13.86.236 port 54580
Feb  4 21:20:59 dedicated sshd[12164]: Failed password for invalid user teamspeak from 106.13.86.236 port 54580 ssh2
 2020-02-05 04:37:57
132.157.66.66 attackbotsspam 
2019-07-06 04:17:19 1hjaGI-0000ta-8S SMTP connection from \(\[132.157.66.66\]\) \[132.157.66.66\]:29139 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-07-06 04:17:39 1hjaGb-0000tt-UP SMTP connection from \(\[132.157.66.66\]\) \[132.157.66.66\]:29886 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-07-06 04:17:58 1hjaGx-0000uF-Bn SMTP connection from \(\[132.157.66.66\]\) \[132.157.66.66\]:31003 I=\[193.107.88.166\]:25 closed by DROP in ACL
...
 2020-02-05 04:10:58
106.13.75.97 attackspambots 
Unauthorized connection attempt detected from IP address 106.13.75.97 to port 2220 [J]
 2020-02-05 04:05:05
122.51.233.63 attack 
Unauthorized connection attempt detected from IP address 122.51.233.63 to port 2220 [J]
 2020-02-05 04:08:12
81.28.107.18 attackbotsspam 
Feb  4 21:20:56  exim[32447]: [1\51] 1iz4go-0008RL-IQ H=frogs.youavto.com (frogs.procars-shop-pl.com) [81.28.107.18] F= rejected after DATA: This message scored 101.1 spam points.
 2020-02-05 04:26:15
220.134.218.112 attackspam 
$f2bV_matches
 2020-02-05 04:16:13
168.70.125.178 attackbotsspam 
Honeypot attack, port: 5555, PTR: n168070125178.imsbiz.com.
 2020-02-05 04:36:09
117.221.197.25 attackbotsspam 
1580847663 - 02/04/2020 21:21:03 Host: 117.221.197.25/117.221.197.25 Port: 445 TCP Blocked
 2020-02-05 04:30:01
218.92.0.189 attackspam 
Feb  4 21:04:25 legacy sshd[10228]: Failed password for root from 218.92.0.189 port 46614 ssh2
Feb  4 21:05:21 legacy sshd[10283]: Failed password for root from 218.92.0.189 port 63144 ssh2
...
 2020-02-05 04:14:54
14.177.211.172 attack 
Feb  4 09:56:43 hanapaa sshd\[9572\]: Failed password for invalid user router from 14.177.211.172 port 51078 ssh2
Feb  4 09:56:45 hanapaa sshd\[9575\]: Invalid user router from 14.177.211.172
Feb  4 09:56:45 hanapaa sshd\[9575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.177.211.172
Feb  4 09:56:47 hanapaa sshd\[9575\]: Failed password for invalid user router from 14.177.211.172 port 52719 ssh2
Feb  4 09:56:48 hanapaa sshd\[9577\]: Invalid user router from 14.177.211.172
 2020-02-05 03:59:56
103.134.94.46 attack 
Feb  4 14:48:03 grey postfix/smtpd\[12048\]: NOQUEUE: reject: RCPT from unknown\[103.134.94.46\]: 554 5.7.1 Service unavailable\; Client host \[103.134.94.46\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[103.134.94.46\]\; from=\ to=\ proto=ESMTP helo=\<\[103.134.94.46\]\>
...
 2020-02-05 03:58:35
176.249.151.242 attackbotsspam 
Feb  4 21:21:00 163-172-32-151 sshd[18065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.249.151.242  user=root
Feb  4 21:21:03 163-172-32-151 sshd[18065]: Failed password for root from 176.249.151.242 port 59408 ssh2
...
 2020-02-05 04:29:01
42.116.163.199 attackspambots 
Feb  4 14:47:57 grey postfix/smtpd\[17116\]: NOQUEUE: reject: RCPT from unknown\[42.116.163.199\]: 554 5.7.1 Service unavailable\; Client host \[42.116.163.199\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?42.116.163.199\; from=\ to=\ proto=ESMTP helo=\<\[42.116.163.199\]\>
...
 2020-02-05 04:05:49
203.220.91.225 attackbotsspam 
Lines containing failures of 203.220.91.225
Feb  4 12:02:39 metroid sshd[1146]: Invalid user testuser from 203.220.91.225 port 41254
Feb  4 12:02:39 metroid sshd[1146]: Received disconnect from 203.220.91.225 port 41254:11: Bye Bye [preauth]
Feb  4 12:02:39 metroid sshd[1146]: Disconnected from invalid user testuser 203.220.91.225 port 41254 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=203.220.91.225
 2020-02-05 04:38:30

Recently Reported IPs

38.213.112.87 143.225.158.60 63.97.206.198 15.237.129.133
120.227.8.39 75.5.45.67 10.145.186.198 5.165.91.67
201.124.187.127 88.124.85.2 131.196.216.38 180.122.148.90
115.58.17.164 87.125.248.47 38.214.176.57 78.157.42.59
187.139.188.126 203.27.34.108 118.40.189.117 51.24.169.110