58.59.233.129

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
94% Critical
222 reports
68 reporters · latest 7 hours ago
ISP
CHINANET Guangxi province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Nanning, Guangxi
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
222 from 68 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 14 🇲🇳 Mongolia 7 🇫🇷 France 5
Most common categories Port Scan 38 Hacking 10 Bad Web Bot 5 Exploited Host 3 Web App Attack 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇨🇳 yiyan
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-10T09:02:45.051Z ACCEPT host=58.59.233.129 port=49681 fd=11 n=9/8192
Brute-Force SSH
🇺🇸 MPL
tcp/8092
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (20/tcp) [non-standard port]
Port Scan Hacking
🇫🇮 6kilowatti
Port Scan
🇺🇸 donarev419
Connection to port 2443 with data transfer. Data preview: USER anonymous
Port Scan Hacking
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: Large payload (1457 bytes); 10316 [1] TCP
Bad Web Bot
🇺🇸 MPL
tcp/5236
Port Scan
🇬🇧 sandra361
Port scan detected: 6 attempts across 1 port (20). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=58.59.233.129 LEN=40 TOS=0x00 PREC=0x00 TTL=32 ID=61431 DF PROTO=TCP SPT=38768 DPT=20 WINDOW=29200 RES=0x00 ACK FIN URGP=0
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
Anonymous
Blocked by firewall on hugin [28017/tcp] | Rule: UFW | SPT: 28227 | TTL: 236 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (16 bytes of payload); 5598 [1] TCP
Port Scan
🇪🇸 raiolanetworks.com
Honeypot detection: port scan / service probe. 4 events observed. 2 distinct ports targeted. Reported automatically from a honeypot sensor.
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 5938) Source port: 21853 TTL: 235 Packet length: 44 TOS: 0x08 This report (for 58.59.233.129) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇪🇸 whatda
HTTP attack detected: GET / (probe). UA:
Web App Attack Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 191.53.9.112
🇮🇹 87.0.250.150
🇺🇸 212.87.218.146
🇧🇷 132.255.49.1
🇭🇰 119.28.84.193
🇬🇧 87.236.176.18
🇳🇱 64.205.72.4
🇮🇪 34.244.136.87
🇳🇱 159.223.5.176
🇳🇱 45.156.87.189
🇹🇼 198.235.24.39
🇺🇦 192.162.210.149
🇸🇬 103.253.27.215
🇺🇸 50.6.193.72
🇧🇾 37.215.45.13
🇺🇸 216.25.90.15
🇩🇪 199.83.103.131
🇻🇳 171.226.146.216
🇫🇷 141.94.121.165
🇺🇸 70.167.235.58
feedback