58.56.130.162

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
32 reports
28 reporters · latest 3 days ago
ISP
CHINANET SHANDONG PROVINCE NETWORK
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Qingdao, Shandong
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
32 from 28 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 6 🇩🇪 Germany 4 🇳🇱 Netherlands 4
Most common categories Brute-Force 25 SSH 25 Port Scan 6 Hacking 2 Bad Web Bot 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 netyam
Brute-Force SSH
🇭🇺 jani.hu
Hit on SSH honeypot at 2026-11-02 21:42:20 from 58.56.130.162 as user root with password ------fuck------
Brute-Force SSH
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
🇳🇱 ShxneEXE
SSH honeypot honeypot-01: login attempt as 'root' from 58.56.130.162 port 33256 to dst port 2323 at 2026-11-02 16:00:48 UTC. No legitimate users on this host - any login is brute-force/scanning.
Brute-Force SSH
🇬🇧 aug42
Brute-Force SSH
🇸🇪 ljo
Brute-Force SSH
🇸🇪 ljo
Brute-Force SSH
🇳🇱 paradoxnetworks
Brute-Force SSH
🇫🇮 6kilowatti
Port Scan
🇦🇺 dyln
Dyls honeypot brute-force: SSH (412 total hits)
Brute-Force SSH
🇹🇷 mixnet
SSH brute force: 230 completed TCP sessions to one host's port 22 in 10 minutes. Detected by Mixnet network flow monitoring.
Brute-Force SSH
🇳🇱 Alt255
[ti-30al] SSH brute-force: 5 failed attempts detected by fail2ban jail sshd.
Brute-Force SSH
🇦🇺 paradoxnetworks
Brute-Force SSH
🇩🇪 Tha_14
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.56.130.162 user=root Failed password for root from 58.56.130.162
Brute-Force SSH
🇺🇸 ras07
Brute force SSH login attempts.
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 162.216.150.118
🇺🇸 158.94.187.190
🇦🇷 143.105.97.134
🇰🇷 118.39.219.45
🇺🇸 109.105.209.18
🇳🇱 77.67.26.32
🇩🇪 46.4.81.149
🇧🇷 200.162.237.206
🇦🇷 186.153.156.95
🇰🇷 180.233.239.154
🇩🇪 141.82.3.32
🇫🇷 137.74.79.244
🇧🇩 118.179.7.78
🇳🇱 77.67.26.111
🇺🇸 66.132.195.98
🇮🇩 43.129.53.200
feedback