This IP address has been reported a total of
206
times from
146 distinct
sources.
58.223.165.154 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Commands captured:
...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Commands captured:
$ SSH-2.0-Go
show less
2026-06-19T07:22:52.052019+02:00 mail sshd-session[1226035]: Failed password for root from 58.223.16 ...
show more2026-06-19T07:22:52.052019+02:00 mail sshd-session[1226035]: Failed password for root from 58.223.165.154 port 55654 ssh2
2026-06-19T07:23:00.446960+02:00 mail sshd-session[1226037]: Failed password for root from 58.223.165.154 port 33138 ssh2
2026-06-19T07:23:06.637030+02:00 mail sshd-session[1226039]: Failed password for root from 58.223.165.154 port 41140 ssh2
2026-06-19T07:23:12.112728+02:00 mail sshd-session[1226041]: Failed password for root from 58.223.165.154 port 44796 ssh2
2026-06-19T07:23:17.929763+02:00 mail sshd-session[1226044]: Failed password for root from 58.223.165.154 port 52026 ssh2
...
show less
Report 2478890 with IP 3379612 for SSH brute-force attack by source 3521115 via ssh-honeypot/0.2.0+h ...
show moreReport 2478890 with IP 3379612 for SSH brute-force attack by source 3521115 via ssh-honeypot/0.2.0+http
show less
2026-06-17T14:21:23.627242+01:00 ns3124905 sshd-session[3630684]: Failed password for root from 58.2 ...
show more2026-06-17T14:21:23.627242+01:00 ns3124905 sshd-session[3630684]: Failed password for root from 58.223.165.154 port 43880 ssh2
2026-06-17T14:21:26.392786+01:00 ns3124905 sshd-session[3630713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.223.165.154 user=root
2026-06-17T14:21:28.019242+01:00 ns3124905 sshd-session[3630713]: Failed password for root from 58.223.165.154 port 50054 ssh2
...
show less
Jun 15 05:42:37 lms sshd[23020]: Failed password for root from 58.223.165.154 port 50582 ssh2
Jun 15 ...
show moreJun 15 05:42:37 lms sshd[23020]: Failed password for root from 58.223.165.154 port 50582 ssh2
Jun 15 05:42:41 lms sshd[23069]: Failed password for root from 58.223.165.154 port 58582 ssh2
...
show less
SSH credential brute-force observed by honeypot.
Source IP: 58.223.165.154
Targeted device: Ubuntu s ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 58.223.165.154
Targeted device: Ubuntu server
First seen: 15 Jun 2026 01:52:27 UTC
Last seen: 15 Jun 2026 01:52:27 UTC
Attempts: 1
Client: SSH-2.0-Go
Sample credentials: root:---fuck_you----
show less
2026-06-14T15:53:11.188810+00:00 edge-con-sjc01.int.pdx.net.uk sshd[56143]: Failed password for root ...
show more2026-06-14T15:53:11.188810+00:00 edge-con-sjc01.int.pdx.net.uk sshd[56143]: Failed password for root from 58.223.165.154 port 50678 ssh2
2026-06-14T15:53:15.641954+00:00 edge-con-sjc01.int.pdx.net.uk sshd[56155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.223.165.154 user=root
2026-06-14T15:53:17.365835+00:00 edge-con-sjc01.int.pdx.net.uk sshd[56155]: Failed password for root from 58.223.165.154 port 55288 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 206 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩