Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Liaoning Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Mar 18 04:08:28 ns382633 sshd\[26086\]: Invalid user tomcat from 59.45.99.99 port 43004
Mar 18 04:08:28 ns382633 sshd\[26086\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99
Mar 18 04:08:30 ns382633 sshd\[26086\]: Failed password for invalid user tomcat from 59.45.99.99 port 43004 ssh2
Mar 18 04:45:55 ns382633 sshd\[1398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99  user=root
Mar 18 04:45:57 ns382633 sshd\[1398\]: Failed password for root from 59.45.99.99 port 54117 ssh2
2020-03-18 20:37:17
attack
Feb 27 07:15:41 srv-ubuntu-dev3 sshd[88291]: Invalid user deploy from 59.45.99.99
Feb 27 07:15:41 srv-ubuntu-dev3 sshd[88291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99
Feb 27 07:15:41 srv-ubuntu-dev3 sshd[88291]: Invalid user deploy from 59.45.99.99
Feb 27 07:15:43 srv-ubuntu-dev3 sshd[88291]: Failed password for invalid user deploy from 59.45.99.99 port 34287 ssh2
Feb 27 07:17:30 srv-ubuntu-dev3 sshd[88448]: Invalid user shiyang from 59.45.99.99
Feb 27 07:17:30 srv-ubuntu-dev3 sshd[88448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99
Feb 27 07:17:30 srv-ubuntu-dev3 sshd[88448]: Invalid user shiyang from 59.45.99.99
Feb 27 07:17:32 srv-ubuntu-dev3 sshd[88448]: Failed password for invalid user shiyang from 59.45.99.99 port 38244 ssh2
...
2020-02-27 15:23:34
attackspam
Feb 19 22:49:02 srv-ubuntu-dev3 sshd[106380]: Invalid user cpanel from 59.45.99.99
Feb 19 22:49:02 srv-ubuntu-dev3 sshd[106380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99
Feb 19 22:49:02 srv-ubuntu-dev3 sshd[106380]: Invalid user cpanel from 59.45.99.99
Feb 19 22:49:04 srv-ubuntu-dev3 sshd[106380]: Failed password for invalid user cpanel from 59.45.99.99 port 60710 ssh2
Feb 19 22:51:34 srv-ubuntu-dev3 sshd[106636]: Invalid user gitlab-prometheus from 59.45.99.99
Feb 19 22:51:34 srv-ubuntu-dev3 sshd[106636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99
Feb 19 22:51:34 srv-ubuntu-dev3 sshd[106636]: Invalid user gitlab-prometheus from 59.45.99.99
Feb 19 22:51:36 srv-ubuntu-dev3 sshd[106636]: Failed password for invalid user gitlab-prometheus from 59.45.99.99 port 41621 ssh2
Feb 19 22:53:39 srv-ubuntu-dev3 sshd[106778]: Invalid user vmail from 59.45.99.99
...
2020-02-20 09:39:02
attackspambots
Unauthorized connection attempt detected from IP address 59.45.99.99 to port 2220 [J]
2020-01-20 17:41:05
attackbots
Dec 12 23:44:05 srv01 sshd[13384]: Invalid user murakoshi from 59.45.99.99 port 47982
Dec 12 23:44:05 srv01 sshd[13384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99
Dec 12 23:44:05 srv01 sshd[13384]: Invalid user murakoshi from 59.45.99.99 port 47982
Dec 12 23:44:07 srv01 sshd[13384]: Failed password for invalid user murakoshi from 59.45.99.99 port 47982 ssh2
Dec 12 23:49:50 srv01 sshd[13881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99  user=root
Dec 12 23:49:52 srv01 sshd[13881]: Failed password for root from 59.45.99.99 port 47871 ssh2
...
2019-12-13 07:33:09
attack
Nov 16 05:55:30 icinga sshd[18533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99
Nov 16 05:55:32 icinga sshd[18533]: Failed password for invalid user Danger123 from 59.45.99.99 port 51946 ssh2
...
2019-11-16 13:56:57
attack
Automatic report - Banned IP Access
2019-11-16 03:04:17
attack
$f2bV_matches
2019-11-04 18:45:58
attackspam
SSH bruteforce
2019-11-03 14:23:36
attackspambots
Nov  1 05:55:02 vpn01 sshd[17752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99
Nov  1 05:55:04 vpn01 sshd[17752]: Failed password for invalid user albert from 59.45.99.99 port 38287 ssh2
...
2019-11-01 16:09:06
attackspam
Oct 28 12:49:06 srv01 sshd[22968]: Invalid user db2das from 59.45.99.99
Oct 28 12:49:06 srv01 sshd[22968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99
Oct 28 12:49:06 srv01 sshd[22968]: Invalid user db2das from 59.45.99.99
Oct 28 12:49:09 srv01 sshd[22968]: Failed password for invalid user db2das from 59.45.99.99 port 57624 ssh2
Oct 28 12:54:25 srv01 sshd[23191]: Invalid user appowner from 59.45.99.99
...
2019-10-28 20:00:54
attack
Oct  7 07:43:21 sauna sshd[216384]: Failed password for root from 59.45.99.99 port 40937 ssh2
...
2019-10-07 12:55:34
attack
Aug 27 22:30:28 hcbb sshd\[12760\]: Invalid user zr from 59.45.99.99
Aug 27 22:30:28 hcbb sshd\[12760\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99
Aug 27 22:30:30 hcbb sshd\[12760\]: Failed password for invalid user zr from 59.45.99.99 port 37874 ssh2
Aug 27 22:36:50 hcbb sshd\[13278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99  user=root
Aug 27 22:36:52 hcbb sshd\[13278\]: Failed password for root from 59.45.99.99 port 60450 ssh2
2019-08-28 16:45:10
attackspambots
Aug 25 10:35:16 hiderm sshd\[18636\]: Invalid user server from 59.45.99.99
Aug 25 10:35:16 hiderm sshd\[18636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99
Aug 25 10:35:18 hiderm sshd\[18636\]: Failed password for invalid user server from 59.45.99.99 port 57202 ssh2
Aug 25 10:39:53 hiderm sshd\[19189\]: Invalid user visitante from 59.45.99.99
Aug 25 10:39:53 hiderm sshd\[19189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99
2019-08-26 04:52:06
attackspambots
Aug 25 11:52:19 vps647732 sshd[4090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.45.99.99
Aug 25 11:52:22 vps647732 sshd[4090]: Failed password for invalid user nk from 59.45.99.99 port 54276 ssh2
...
2019-08-25 17:58:29
attack
Aug 10 15:53:29 www sshd\[59603\]: Invalid user user from 59.45.99.99Aug 10 15:53:32 www sshd\[59603\]: Failed password for invalid user user from 59.45.99.99 port 54323 ssh2Aug 10 15:59:25 www sshd\[59799\]: Invalid user shop from 59.45.99.99
...
2019-08-10 21:02:35
attackspam
Aug 10 04:28:16 XXX sshd[60434]: Invalid user ghislain from 59.45.99.99 port 52147
2019-08-10 14:17:34
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.45.99.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49862
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;59.45.99.99.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080702 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 08 13:01:02 CST 2019
;; MSG SIZE  rcvd: 115
Host info
99.99.45.59.in-addr.arpa domain name pointer 99.99.45.59.broad.yk.ln.dynamic.163data.com.cn.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
99.99.45.59.in-addr.arpa	name = 99.99.45.59.broad.yk.ln.dynamic.163data.com.cn.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
112.85.42.91 attackbotsspam
Oct  4 10:56:16 theomazars sshd[28651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.91  user=root
Oct  4 10:56:18 theomazars sshd[28651]: Failed password for root from 112.85.42.91 port 40306 ssh2
2020-10-04 16:56:50
61.177.172.89 attackbots
Oct  4 11:19:01 * sshd[5714]: Failed password for root from 61.177.172.89 port 8154 ssh2
Oct  4 11:19:04 * sshd[5714]: Failed password for root from 61.177.172.89 port 8154 ssh2
2020-10-04 17:22:38
59.40.83.121 attackbots
Unauthorised access (Oct  3) SRC=59.40.83.121 LEN=52 TTL=51 ID=16484 DF TCP DPT=445 WINDOW=8192 SYN
2020-10-04 17:16:52
118.25.103.178 attackbots
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-10-04 16:53:52
103.223.12.33 attackspam
 TCP (SYN) 103.223.12.33:58786 -> port 23, len 40
2020-10-04 17:08:12
138.118.138.147 attack
Automatic report - Port Scan
2020-10-04 16:49:20
196.188.1.33 attackspam
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-10-04 16:54:43
217.219.70.158 attack
8080/tcp
[2020-08-23/10-03]2pkt
2020-10-04 17:06:10
2.91.13.252 attackbots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-10-04 17:26:31
188.16.149.112 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-04 17:02:37
218.92.0.185 attack
Oct  4 05:11:53 ny01 sshd[27628]: Failed password for root from 218.92.0.185 port 18995 ssh2
Oct  4 05:12:07 ny01 sshd[27628]: error: maximum authentication attempts exceeded for root from 218.92.0.185 port 18995 ssh2 [preauth]
Oct  4 05:12:13 ny01 sshd[27659]: Failed password for root from 218.92.0.185 port 49161 ssh2
2020-10-04 17:14:39
81.3.6.164 attack
 TCP (SYN) 81.3.6.164:29491 -> port 23, len 44
2020-10-04 16:54:12
125.141.56.231 attackspam
Oct  4 11:16:29 eventyay sshd[26421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.56.231
Oct  4 11:16:32 eventyay sshd[26421]: Failed password for invalid user admin from 125.141.56.231 port 51546 ssh2
Oct  4 11:20:28 eventyay sshd[26524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.56.231
...
2020-10-04 17:23:53
50.207.57.246 attackbots
DATE:2020-10-03 22:37:54, IP:50.207.57.246, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)
2020-10-04 17:26:08
51.77.66.35 attackspambots
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-04T06:28:40Z and 2020-10-04T07:54:56Z
2020-10-04 17:05:16

Recently Reported IPs

143.70.33.103 240e:360:c202:2123:216:5d21:eb58:275 153.36.138.52 83.27.36.28
34.67.72.141 77.127.91.208 188.27.165.148 142.44.210.154
94.9.83.219 206.191.152.198 1.251.226.183 89.242.13.36
36.106.167.242 1.252.42.102 47.52.196.112 79.30.47.10
25.104.194.152 76.112.207.85 47.254.150.182 174.91.10.96