AbuseIPDB » 58.16.201.52

58.16.201.52 was found in our database!

This IP was reported 2,464 times. Confidence of Abuse is 100%: ?

100%

ISP	China Unicom Guizhou Province Network
Usage Type	Data Center/Web Hosting/Transit
Domain Name	chinaunicom.com
Country	China
City	Guiyang, Guizhou

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 58.16.201.52

Whois 58.16.201.52

IP Abuse Reports for 58.16.201.52:

This IP address has been reported a total of 2,464 times from 338 distinct sources. 58.16.201.52 was first reported on May 8th 2022, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp	Comment	Categories
ThreatBook.io	2023-12-02 00:18:17 (5 hours ago)	ThreatBook Intelligence: Brute Force,Gateway more details on https://threatbook.io/ip/58.16.201.52	Brute-Force
Paul Smith	2023-12-01 15:43:54 (13 hours ago)	Email Auth Brute force attack 13/13 in last day	Brute-Force
Parth Maniar	2023-12-01 09:54:29 (19 hours ago)	This IP address carried out 4 port scanning attempts on 30-11-2023. For more information or to repor ... show moreThis IP address carried out 4 port scanning attempts on 30-11-2023. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
velenobbs.net	2023-12-01 07:29:27 (22 hours ago)	Dec 1 05:51:06 vmi263387 synchronet: mail 0055 SMTPS Throttling suspicious connection from: 58.16.2 ... show moreDec 1 05:51:06 vmi263387 synchronet: mail 0055 SMTPS Throttling suspicious connection from: 58.16.201.52 (5 login attempts) Dec 1 07:10:39 vmi263387 synchronet: mail 0058 SMTPS Throttling suspicious connection from: 58.16.201.52 (5 login attempts) Dec 1 08:29:26 vmi263387 synchronet: mail 0055 SMTPS Throttling suspicious connection from: 58.16.201.52 (5 login attempts) ... show less	Hacking
Anonymous	2023-12-01 01:17:44 (1 day ago)	IMAP password guessing	Brute-Force
AvonleaConsulting	2023-12-01 00:03:31 (1 day ago)	Brute force attack stopped by firewall	Web Spam Brute-Force Web App Attack
Anonymous	2023-12-01 00:00:42 (1 day ago)	58.16.201.52 (CN/China/-), 6 distributed sshd attacks on account [admin] in the last 3600 secs; Port ... show more58.16.201.52 (CN/China/-), 6 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Nov 30 18:21:39 server5 sshd[11538]: Invalid user admin from 65.20.216.218 Nov 30 18:21:42 server5 sshd[11538]: Failed password for invalid user admin from 65.20.216.218 port 33757 ssh2 Nov 30 18:13:04 server5 sshd[10045]: Invalid user admin from 101.126.43.137 Nov 30 18:33:17 server5 sshd[13307]: Invalid user admin from 58.16.201.52 Nov 30 19:00:35 server5 sshd[16920]: Invalid user admin from 190.38.116.207 Nov 30 18:33:20 server5 sshd[13307]: Failed password for invalid user admin from 58.16.201.52 port 42207 ssh2 IP Addresses Blocked: 65.20.216.218 (US/United States/-) 101.126.43.137 (CN/China/-) show less	Brute-Force
cticom.ms	2023-11-30 22:56:50 (1 day ago)	Email Auth Brute force attack 3/3 in last day	Brute-Force
nicosqc	2023-11-30 22:36:51 (1 day ago)	Invalid user Support from 58.16.201.52 port 58259	Brute-Force SSH
maxxsense	2023-11-30 15:45:46 (1 day ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 58.16.201.52 (CN/China/ ... show more(postfix-unknown) Failed postfix unknown login with username [redacted] from 58.16.201.52 (CN/China/-) show less	Hacking
Paul Smith	2023-11-30 15:39:28 (1 day ago)	Email Auth Brute force attack 14/14 in last day	Brute-Force
Parth Maniar	2023-11-30 11:19:04 (1 day ago)	This IP address carried out 4 port scanning attempts on 29-11-2023. For more information or to repor ... show moreThis IP address carried out 4 port scanning attempts on 29-11-2023. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
dsmidge	2023-11-30 10:49:22 (1 day ago)	Nov 30 11:34:37 server postfix/smtpd[2660113]: connect from unknown[58.16.201.52] Nov 30 11:34 ... show moreNov 30 11:34:37 server postfix/smtpd[2660113]: connect from unknown[58.16.201.52] Nov 30 11:34:37 server postfix/smtpd[2660113]: lost connection after CONNECT from unknown[58.16.201.52] ... show less	Email Spam
Inaxas AG	2023-11-30 08:03:53 (1 day ago)	Inaxas Security for Exchange found 3 failed SMTP login attempts between 2023/11/28 23:11:31 and 2023 ... show moreInaxas Security for Exchange found 3 failed SMTP login attempts between 2023/11/28 23:11:31 and 2023/11/29 17:42:39 from unknown/untrusted source. show less	Brute-Force
MPL	2023-11-30 07:02:06 (1 day ago)	tcp/110 (6 or more attempts)	Port Scan