58.255.237.140

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '58.248.0.0 - 58.255.255.255'

% Abuse contact for '58.248.0.0 - 58.255.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        58.248.0.0 - 58.255.255.255
netname:        UNICOM-GD
descr:          China Unicom Guangdong province network
descr:          China Unicom
country:        CN
admin-c:        CH1302-AP
tech-c:         RP181-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-GD
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2025-01-22T13:19:23Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-19T00:57:22Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
remarks:        hqs-ipabuse@chinaunicom.cn was validated on 2026-08-19
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-20T03:22:23Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         runkeng pan
nic-hdl:        RP181-AP
e-mail:         gdipnoc@chinaunicom.cn
address:        XinShiKong Plaza,No 666 Huangpu Rd. Guangzhou 510627,China
phone:          +86-20-22214174
fax-no:         +86-20-22212266-4174
country:        CN
mnt-by:         MAINT-CNCGROUP-GD
last-modified:  2015-12-16T03:32:02Z
source:         APNIC

% Information related to '58.252.0.0/14AS17816'

route:          58.252.0.0/14
descr:          CNC Group CHINA169 Guangdong Province Network
country:        CN
origin:         AS17816
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2008-09-04T07:54:55Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.255.237.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2482
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;58.255.237.140.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026102801 1800 900 604800 86400

;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 28 22:02:01 CST 2026
;; MSG SIZE  rcvd: 107

Host info

Host 140.237.255.58.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 140.237.255.58.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.27.238.202	attack	Nov 6 08:00:06 [host] sshd[9574]: Invalid user q from 103.27.238.202 Nov 6 08:00:06 [host] sshd[9574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.27.238.202 Nov 6 08:00:08 [host] sshd[9574]: Failed password for invalid user q from 103.27.238.202 port 45302 ssh2	2019-11-06 15:14:33
77.105.99.85	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/77.105.99.85/ FI - 1H : (2) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : FI NAME ASN : ASN42621 IP : 77.105.99.85 CIDR : 77.105.64.0/18 PREFIX COUNT : 3 UNIQUE IP COUNT : 17664 ATTACKS DETECTED ASN42621 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-06 07:30:22 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-06 14:54:53
103.110.53.46	attack	Nov 6 00:10:38 mailman postfix/smtpd[7688]: NOQUEUE: reject: RCPT from unknown[103.110.53.46]: 554 5.7.1 Service unavailable; Client host [103.110.53.46] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/103.110.53.46; from= to= proto=ESMTP helo=<[103.110.53.46]> Nov 6 00:31:38 mailman postfix/smtpd[7857]: NOQUEUE: reject: RCPT from unknown[103.110.53.46]: 554 5.7.1 Service unavailable; Client host [103.110.53.46] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/103.110.53.46; from= to= proto=ESMTP helo=<[103.110.53.46]>	2019-11-06 14:52:45
222.186.190.92	attack	2019-11-06T07:00:55.707759homeassistant sshd[11035]: Failed none for root from 222.186.190.92 port 2660 ssh2 2019-11-06T07:00:56.911795homeassistant sshd[11035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root ...	2019-11-06 15:03:31
147.135.88.218	attack	Nov 6 01:47:29 plusreed sshd[15070]: Invalid user jobsubmit from 147.135.88.218 ...	2019-11-06 15:09:13
92.63.194.47	attackbotsspam	SSH Brute Force	2019-11-06 15:19:08
58.229.208.187	attack	Nov 5 20:20:25 eddieflores sshd\[17860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.229.208.187 user=root Nov 5 20:20:27 eddieflores sshd\[17860\]: Failed password for root from 58.229.208.187 port 44610 ssh2 Nov 5 20:25:09 eddieflores sshd\[18249\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.229.208.187 user=root Nov 5 20:25:11 eddieflores sshd\[18249\]: Failed password for root from 58.229.208.187 port 54834 ssh2 Nov 5 20:30:01 eddieflores sshd\[18647\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.229.208.187 user=root	2019-11-06 15:05:17
81.22.45.190	attackbotsspam	Nov 6 07:54:26 mc1 kernel: \[4309566.006890\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=21045 PROTO=TCP SPT=43316 DPT=50531 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 07:56:08 mc1 kernel: \[4309668.696588\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=41579 PROTO=TCP SPT=43316 DPT=50532 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 08:03:51 mc1 kernel: \[4310131.116616\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=7711 PROTO=TCP SPT=43316 DPT=50667 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-11-06 15:07:56
185.176.27.242	attack	11/06/2019-07:52:12.112068 185.176.27.242 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-11-06 15:01:54
93.175.215.132	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/93.175.215.132/ UA - 1H : (34) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : UA NAME ASN : ASN47359 IP : 93.175.215.132 CIDR : 93.175.215.0/24 PREFIX COUNT : 23 UNIQUE IP COUNT : 17152 ATTACKS DETECTED ASN47359 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-06 07:30:37 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-06 14:53:32
51.91.248.153	attack	Nov 6 08:27:01 server sshd\[4111\]: User root from 51.91.248.153 not allowed because listed in DenyUsers Nov 6 08:27:01 server sshd\[4111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.248.153 user=root Nov 6 08:27:03 server sshd\[4111\]: Failed password for invalid user root from 51.91.248.153 port 33096 ssh2 Nov 6 08:30:19 server sshd\[22985\]: User root from 51.91.248.153 not allowed because listed in DenyUsers Nov 6 08:30:19 server sshd\[22985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.248.153 user=root	2019-11-06 14:44:21
222.186.180.6	attack	Nov 6 07:45:09 dedicated sshd[12612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6 user=root Nov 6 07:45:10 dedicated sshd[12612]: Failed password for root from 222.186.180.6 port 20778 ssh2	2019-11-06 14:45:31
218.28.238.165	attack	Nov 5 20:24:55 tdfoods sshd\[28853\]: Invalid user user from 218.28.238.165 Nov 5 20:24:55 tdfoods sshd\[28853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.28.238.165 Nov 5 20:24:57 tdfoods sshd\[28853\]: Failed password for invalid user user from 218.28.238.165 port 38942 ssh2 Nov 5 20:30:09 tdfoods sshd\[29251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.28.238.165 user=root Nov 5 20:30:11 tdfoods sshd\[29251\]: Failed password for root from 218.28.238.165 port 48942 ssh2	2019-11-06 14:46:33
27.188.211.23	attack	(Nov 6) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=27148 TCP DPT=8080 WINDOW=47805 SYN (Nov 5) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=8142 TCP DPT=8080 WINDOW=47805 SYN (Nov 5) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=58061 TCP DPT=8080 WINDOW=33410 SYN (Nov 5) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=11682 TCP DPT=8080 WINDOW=47260 SYN (Nov 4) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=22814 TCP DPT=8080 WINDOW=13556 SYN (Nov 3) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=14024 TCP DPT=8080 WINDOW=60964 SYN (Nov 3) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=16037 TCP DPT=8080 WINDOW=33410 SYN (Nov 3) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=7322 TCP DPT=8080 WINDOW=60964 SYN (Nov 3) LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=47675 TCP DPT=8080 WINDOW=3468 SYN	2019-11-06 15:16:15
45.63.8.142	attackbots	web-1 [ssh] SSH Attack	2019-11-06 15:18:01

Recently Reported IPs

120.82.83.183	118.73.11.198	64.94.85.200	168.144.249.204
89.126.208.33	181.173.119.164	86.38.187.78	86.38.187.68
64.205.72.103	184.195.126.192	47.242.233.131	221.2.103.162
218.206.233.45	175.169.56.152	1.28.54.57	125.47.123.183
125.44.27.57	120.214.145.42	111.208.80.137	101.28.137.240