Notable Threat
IP 58.220.39.200 rated 8/10 from 21 verified reports.
Multiple security incidents attributed to this IP. Confidence: 92%.
More threatening than 90% of monitored IPs
IP Address
58.220.39.200
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
China
Location
CHINATELECOM JiangSu Yang...
ASN 137697
21
Reports
Mixed
Data Source
Threat Categories
SSH
21
Brute-Force
7
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
10. September 2026
Last Activity
7. October 2026
Recent (7 days)
3 incidents
High-Risk Network Association
This IP belongs to a network (ASN 137697) with elevated threat levels. The ISP CHINATELECOM JiangSu YangZhou IDC networkdescr: YangZhouJiangsu Province, P.R.China. hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
3/10
Low
Confidence Score
90%
Verified
Confidence History
25. May 2026 - 7. Oct 2026
92%
Current
Stable
Trend
Security Reports (21)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH Brute-Force | Community | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 58.220.39.200
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS137697
- ISP
- CHINATELECOM JiangSu YangZhou IDC networkdescr: YangZhouJiangsu Province, P.R.China.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 21
- First Reported
- 25 May 2026
- Last Reported
- 7 Oct 2026, 00:24
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS137697
CHINATELECOM JiangSu YangZhou IDC networkdescr: YangZhouJiangsu Province, P.R.China.
CN
Network Threat Assessment
10/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
15
Total Reports
15
Reports per IP
Network Context
This IP address belongs to CHINATELECOM JiangSu YangZhou IDC networkdescr: YangZhouJiangsu Province, P.R.China. (AS137697), which manages 1 IP addresses in our monitoring system. Out of these, 15 have been reported for suspicious activities, resulting in a network-wide threat level of 10/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 833,268 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
21
avg: 9
++
Network Comparison
Compared against 9 IPs in ASN 137697
Threat Level
8/10
network avg: 7.8
=
Total Reports
21
network avg: 7
++
Network CHINATELECOM JiangSu YangZhou IDC networkdescr: YangZhouJiangsu Province, P.R.China. has overall threat level 10/10
Geographic Comparison
Compared against 46,091 IPs in CN
Threat Level
8/10
country avg: 7.4
=
Total Reports
21
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
10 Sep 2026
3 reports
Daily Average
0.2
reports/day
Most Active
Monday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
21
Brute-Force
7
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 23:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
757,520 threat incidents tracked globally • Last 24h: 30,709 Logs
FEED
Top Threat Sources
-
01
United States148,275 19.6% -
02
Brazil111,878 14.8%
-
03
India87,206 11.5%
-
04
China46,091 6.1%
-
05
SC29,253 3.9%
-
06
Germany18,444 2.4%
-
07
Netherlands18,000 2.4%
-
08
Pakistan17,825 2.4%
-
09
Argentina16,272 2.1%
-
10
Colombia15,171 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
8
Related IPs
7.8/10
Avg Threat
23%
Avg Confidence
8
High Threat
High-risk network: Majority of related IPs are flagged
58.220.10.131
8/10
Confidence
90%
Reports
9
Location
CN
CN
117.91.186.55
8/10
Confidence
79%
Reports
18
Location
CN
CN
45.113.202.135
10/10
Confidence
9%
Reports
5
Location
CN
CN
58.220.39.234
7/10
Confidence
4%
Reports
1
Location
CN
CN
58.220.17.109
8/10
Confidence
2%
Reports
3
Location
CN
CN
58.220.46.173
7/10
Confidence
2%
Reports
2
Location
CN
CN
45.117.11.156
7/10
Confidence
1%
Reports
1
Location
CN
CN
45.117.10.134
7/10
Confidence
0%
Reports
3
Location
CN
CN
IPs from the same subnet range, likely same network segment.
1
Related IPs
7/10
Avg Threat
4%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
27.128.171.39
10/10
Confidence
100%
Reports
33
ISP
Chinanet
211.101.247.196
10/10
Confidence
100%
Reports
28
ISP
Cloud Computing...
118.121.202.149
10/10
Confidence
100%
Reports
21
ISP
CHINANET SiChua...
27.155.120.131
10/10
Confidence
100%
Reports
20
ISP
Fuzhou
202.101.144.44
10/10
Confidence
100%
Reports
19
ISP
Chinanet
112.123.228.180
10/10
Confidence
100%
Reports
18
ISP
CHINA UNICOM Ch...
118.145.246.44
10/10
Confidence
100%
Reports
18
ISP
Beijing Volcano...
106.120.205.138
10/10
Confidence
100%
Reports
15
ISP
China Networks ...
120.48.170.74
10/10
Confidence
100%
Reports
14
ISP
Beijing Baidu N...
220.250.52.101
8/10
Confidence
100%
Reports
14
ISP
CHINA UNICOM Ch...
117.50.70.169
8/10
Confidence
100%
Reports
13
ISP
China Unicom Be...
182.44.26.211
10/10
Confidence
100%
Reports
13
ISP
Cloud Computing...
14.103.110.123
10/10
Confidence
100%
Reports
13
ISP
China Telecom G...
203.56.198.45
10/10
Confidence
99%
Reports
30
ISP
Sichuan Chuanxn...
42.51.42.209
10/10
Confidence
99%
Reports
24
ISP
Zhengzhou Fasti...
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
92%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
34.179.157.173
8/10
Confidence
92%
Reports
11
Location
DE
DE
45.198.224.252
8/10
Confidence
92%
Reports
36
Location
US
US
103.197.199.19
10/10
Confidence
92%
Reports
10
Location
MM
MM
65.181.14.117
10/10
Confidence
92%
Reports
12
Location
AU
AU
69.33.212.206
10/10
Confidence
92%
Reports
13
Location
US
US
149.102.93.174
10/10
Confidence
92%
Reports
10
Location
BR
BR
163.172.66.206
10/10
Confidence
92%
Reports
12
Location
FR
FR
66.116.207.168
10/10
Confidence
92%
Reports
12
Location
IN
IN
195.228.79.114
10/10
Confidence
92%
Reports
12
Location
HU
HU
24.40.184.51
10/10
Confidence
92%
Reports
12
Location
DE
DE
216.244.94.253
10/10
Confidence
92%
Reports
12
Location
ID
ID
181.49.149.174
10/10
Confidence
92%
Reports
12
Location
CO
CO
210.61.216.167
10/10
Confidence
92%
Reports
12
Location
TW
TW
202.158.36.50
10/10
Confidence
92%
Reports
12
Location
ID
ID
203.156.108.110
10/10
Confidence
92%
Reports
12
Location
TH
TH