This IP address has been reported a total of
914
times from
461 distinct
sources.
58.220.39.200 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Brute-force attack detected on 22/SSH
• Credentials: root:fjbdfdjkdsfs541544, curl:welltech12
• Numb ...
show moreBrute-force attack detected on 22/SSH
• Credentials: root:fjbdfdjkdsfs541544, curl:welltech12
• Number of login attempts: 2
• Client: SSH-2.0-libssh_0.9.6
show less
58.220.39.200 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ...
show more58.220.39.200 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 24 23:51:56 15533 sshd[16270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.220.39.200 user=root
May 24 23:51:58 15533 sshd[16270]: Failed password for root from 58.220.39.200 port 42260 ssh2
May 24 23:08:29 15533 sshd[11511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.232.13.161 user=root
May 24 23:04:54 15533 sshd[11072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.232.13.161 user=root
May 24 23:04:56 15533 sshd[11072]: Failed password for root from 156.232.13.161 port 57058 ssh2
IP Addresses Blocked:
show less
26 invalid SSH login attempts from 58.220.39.200 in the last 3.4 hours
Brute-Force
SSH
Anonymous
2026-05-25T03:39:53.340003+00:00 de-fra2-srt1 sshd[515687]: Invalid user curl from 58.220.39.200 por ...
show more2026-05-25T03:39:53.340003+00:00 de-fra2-srt1 sshd[515687]: Invalid user curl from 58.220.39.200 port 56244
2026-05-25T03:48:36.895803+00:00 de-fra2-srt1 sshd[515975]: Invalid user jenkins from 58.220.39.200 port 45338
2026-05-25T03:56:56.710909+00:00 de-fra2-srt1 sshd[516002]: Invalid user temp from 58.220.39.200 port 48272
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
Report 2400537 with IP 3448104 for SSH brute-force attack by source 3442762 via ssh-honeypot/0.2.1+h ...
show moreReport 2400537 with IP 3448104 for SSH brute-force attack by source 3442762 via ssh-honeypot/0.2.1+http
show less
2026-05-25T01:51:15.360201+00:00 seraph sshd[273250]: Failed password for invalid user ftpuser from ...
show more2026-05-25T01:51:15.360201+00:00 seraph sshd[273250]: Failed password for invalid user ftpuser from 58.220.39.200 port 59300 ssh2
2026-05-25T01:56:43.565260+00:00 seraph sshd[275885]: Invalid user user from 58.220.39.200 port 33752
2026-05-25T01:56:43.567748+00:00 seraph sshd[275885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.220.39.200
2026-05-25T01:56:45.638918+00:00 seraph sshd[275885]: Failed password for invalid user user from 58.220.39.200 port 33752 ssh2
2026-05-25T02:02:14.165081+00:00 seraph sshd[278581]: Invalid user unifi from 58.220.39.200 port 55490
...
show less
SSH
Showing 856 to
870
of 914 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩