58.19.1.28 - IPInfo

Basic Info

City: Wuhan

Region: Hubei

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
58.19.15.96	attackspam	Brute forcing email accounts	2020-09-24 21:56:04
58.19.14.13	attackspam	Brute forcing email accounts	2020-09-24 20:44:06
58.19.15.96	attack	Brute forcing email accounts	2020-09-24 13:49:32
58.19.14.13	attackbotsspam	Brute forcing email accounts	2020-09-24 12:40:22
58.19.15.96	attack	Brute forcing email accounts	2020-09-24 05:17:51
58.19.14.13	attackbots	Brute forcing email accounts	2020-09-24 04:10:30
58.19.183.204	attackspambots	Attempted connection to port 1433.	2020-05-29 13:09:29
58.19.180.59	attack	firewall-block, port(s): 1433/tcp	2020-05-06 17:33:38
58.19.198.18	attackbots	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic	2020-04-17 07:12:22
58.19.1.10	attack	(pop3d) Failed POP3 login from 58.19.1.10 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 9 17:34:03 ir1 dovecot[566034]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=58.19.1.10, lip=5.63.12.44, session=	2020-04-09 21:16:36
58.19.1.250	attackbotsspam	failed_logins	2020-03-02 03:42:34
58.19.180.59	attackbotsspam	port scan and connect, tcp 1433 (ms-sql-s)	2020-02-22 20:46:30
58.19.1.42	attackspam	Feb 17 00:27:29 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 4 secs$: user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, session=\ Feb 17 00:27:36 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 8 secs$: user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, session=\ Feb 17 00:27:39 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 9 secs$: user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, session=\ Feb 17 00:27:49 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 12 secs$: user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, session=\ Feb 17 00:27:52 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 12 secs$: user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, sessi ...	2020-02-17 06:32:43
58.19.13.162	attackbots	Unauthorized connection attempt detected from IP address 58.19.13.162 to port 6656 [T]	2020-01-30 06:43:31
58.19.180.59	attackspam	12/26/2019-09:49:35.144629 58.19.180.59 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-12-27 04:11:25

Whois info:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '58.19.0.0 - 58.19.255.255'

% Abuse contact for '58.19.0.0 - 58.19.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        58.19.0.0 - 58.19.255.255
netname:        UNICOM-HB
descr:          China Unicom HuBei Province Network
descr:          China Unicom
country:        CN
admin-c:        CH1302-AP
tech-c:         CH1302-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-HB
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2025-01-22T13:20:43Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

% Information related to '58.19.0.0/16AS4837'

route:          58.19.0.0/16
descr:          CNC Group CHINA169 Hubei Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2008-09-04T07:54:44Z
source:         APNIC

% Information related to '58.19.0.0/16AS9929'

route:          58.19.0.0/16
descr:          CNCGroup HuBei province network
country:        CN
origin:         AS9929
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2008-09-04T07:54:33Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-US2)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.19.1.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64173
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;58.19.1.28.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026082702 1800 900 604800 86400

;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 28 05:30:25 CST 2026
;; MSG SIZE  rcvd: 103

Host info

b'Host 28.1.19.58.in-addr.arpa not found: 2(SERVFAIL)
'

Nslookup info:

server can't find 58.19.1.28.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
104.144.170.32	attack	Registration form abuse	2020-09-13 12:58:57
212.70.149.4	attack	Rude login attack (88 tries in 1d)	2020-09-13 13:13:23
5.188.62.140	attack	Trying to log into my security cameras.	2020-09-13 13:12:10
222.186.180.223	attackspam	Sep 13 00:51:17 plusreed sshd[2017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root Sep 13 00:51:19 plusreed sshd[2017]: Failed password for root from 222.186.180.223 port 64230 ssh2 ...	2020-09-13 13:05:42
114.119.149.203	attack	Automatic report - Banned IP Access	2020-09-13 13:32:31
112.85.42.174	attackbots	Sep 13 05:26:16 scw-6657dc sshd[12628]: Failed password for root from 112.85.42.174 port 33605 ssh2 Sep 13 05:26:16 scw-6657dc sshd[12628]: Failed password for root from 112.85.42.174 port 33605 ssh2 Sep 13 05:26:19 scw-6657dc sshd[12628]: Failed password for root from 112.85.42.174 port 33605 ssh2 ...	2020-09-13 13:29:28
209.45.40.93	attack	...	2020-09-13 13:28:38
200.108.190.38	attack	Icarus honeypot on github	2020-09-13 12:57:53
131.150.135.164	attackbots	Time: Sat Sep 12 16:57:29 2020 +0000 IP: 131.150.135.164 (US/United States/131-150-135-164.res.spectrum.com) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 12 16:57:19 hosting sshd[17145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.150.135.164 user=admin Sep 12 16:57:21 hosting sshd[17145]: Failed password for admin from 131.150.135.164 port 41067 ssh2 Sep 12 16:57:23 hosting sshd[17160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.150.135.164 user=admin Sep 12 16:57:25 hosting sshd[17160]: Failed password for admin from 131.150.135.164 port 41179 ssh2 Sep 12 16:57:26 hosting sshd[17167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.150.135.164 user=admin	2020-09-13 13:15:31
59.45.76.90	attackspam	Failed password for invalid user root from 59.45.76.90 port 46747 ssh2	2020-09-13 13:00:30
195.231.81.43	attackspambots	$f2bV_matches	2020-09-13 13:28:56
78.128.113.120	attackspambots	Sep 13 06:56:42 cho postfix/smtpd[2801087]: warning: unknown[78.128.113.120]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 13 06:56:57 cho postfix/smtpd[2800859]: warning: unknown[78.128.113.120]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 13 06:58:15 cho postfix/smtpd[2801087]: warning: unknown[78.128.113.120]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 13 06:58:35 cho postfix/smtpd[2800859]: warning: unknown[78.128.113.120]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 13 07:00:19 cho postfix/smtpd[2801088]: warning: unknown[78.128.113.120]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-13 13:07:10
211.159.172.184	attackbotsspam	2020-09-13T04:01:07.324343ionos.janbro.de sshd[86352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.172.184 user=root 2020-09-13T04:01:09.459907ionos.janbro.de sshd[86352]: Failed password for root from 211.159.172.184 port 36698 ssh2 2020-09-13T04:06:08.511998ionos.janbro.de sshd[86388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.172.184 user=root 2020-09-13T04:06:10.301639ionos.janbro.de sshd[86388]: Failed password for root from 211.159.172.184 port 41750 ssh2 2020-09-13T04:11:12.272053ionos.janbro.de sshd[86425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.172.184 user=root 2020-09-13T04:11:14.463044ionos.janbro.de sshd[86425]: Failed password for root from 211.159.172.184 port 46802 ssh2 2020-09-13T04:16:16.211925ionos.janbro.de sshd[86462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh ...	2020-09-13 13:10:09
189.162.248.235	attackspam	trying to access non-authorized port	2020-09-13 13:27:24
185.220.102.246	attackspambots	Sep 13 07:00:40 sip sshd[1581157]: Failed password for root from 185.220.102.246 port 6528 ssh2 Sep 13 07:00:48 sip sshd[1581157]: Failed password for root from 185.220.102.246 port 6528 ssh2 Sep 13 07:00:51 sip sshd[1581157]: Failed password for root from 185.220.102.246 port 6528 ssh2 ...	2020-09-13 13:02:05

Recently Reported IPs

110.38.193.141	35.196.95.221	35.240.244.77	162.243.172.62
39.154.10.62	39.149.242.131	183.211.218.43	183.198.102.245
120.230.23.80	120.230.20.103	119.187.27.197	112.32.81.134
112.32.153.118	112.109.232.56	110.52.175.236	190.110.123.219
70.71.140.201	136.114.140.138	20.246.125.85	34.21.130.155