JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 58.19.104.85

58.19.104.85 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 14%: ?

14%

ISP	shanghai-no1
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	cnc.cn
Country	🇨🇳 China
City	Wuhan, Hubei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 58.19.104.85

Whois 58.19.104.85

IP Abuse Reports for 58.19.104.85:

This IP address has been reported a total of 23 times from 16 distinct sources. 58.19.104.85 was first reported on February 5th 2026, and the most recent report was 52 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 OceanTreasure	2026-09-20 06:10:53 (52 minutes ago)	tcp/18100; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2 ... show more tcp/18100; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-09-20T06:01:00Z show less	Port Scan
🇺🇸 sandra361	2026-09-10 05:36:50 (1 week ago)	Port scan detected: 7 attempts across 1 port (12178). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=58.19 ... show more Port scan detected: 7 attempts across 1 port (12178). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=58.19.104.85 LEN=40 TOS=0x00 PREC=0x00 TTL=36 ID=55831 DF PROTO=TCP SPT=38958 DPT=12178 WINDOW=29200 RES=0x00 ACK FIN URGP=0 show less	Port Scan
Anonymous	2026-07-21 18:45:19 (1 month ago)	unsolicited connect TCP dport 7171 (sport 61438)	Hacking
🇩🇪 kingjan1999	2026-07-21 16:39:42 (1 month ago)	Blocked by UFW [2182/tcp] \| SPT: 49806 \| TTL: 232 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [2182/tcp] \| SPT: 49806 \| TTL: 232 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-26 09:57:22 (2 months ago)	tcp/2280	Port Scan
🇬🇧 PeravixGroup	2026-06-26 03:15:41 (2 months ago)	Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ... show more Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-26 00:06:00 (2 months ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 femboy.cat	2026-06-14 02:41:00 (3 months ago)	Port scan to tcp/8545 from 58.19.104.85	Brute-Force
Anonymous	2026-06-09 11:06:58 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-18 00:07:55 (4 months ago)	ThreatBook Intelligence: Dynamic IP,Spam more details on https://threatbook.io/ip/58.19.104.85 2026- ... show more ThreatBook Intelligence: Dynamic IP,Spam more details on https://threatbook.io/ip/58.19.104.85 2026-05-17 21:28:18 http://www.minghui.org/ show less	Web App Attack
🇩🇪 dispaisyenterprises	2026-05-17 00:59:37 (4 months ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 10037 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 10037 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇬🇧 PeravixGroup	2026-05-16 21:56:44 (4 months ago)	Honeypot detection: RTSP streaming server scanning / unauthorized access attempt on port 554. Severi ... show more Honeypot detection: RTSP streaming server scanning / unauthorized access attempt on port 554. Severity: LOW. Aaran.cloud show less	Port Scan
🇩🇪 Justin F. \| AS204464	2026-05-16 11:29:02 (4 months ago)	Honeypot [nx-infrastructure]: HTTP/1.1 request on 8009 GET / Accept: /; 8009 [1] TCP Reported by: ... show more Honeypot [nx-infrastructure]: HTTP/1.1 request on 8009 GET / Accept: /; 8009 [1] TCP Reported by: Justin F. show less	Hacking Bad Web Bot
🇺🇸 MPL	2026-05-03 00:25:26 (4 months ago)	tcp/41111	Port Scan
🇩🇪 guldkage	2026-05-02 19:31:30 (4 months ago)	Unauthorized connection attempt detected from IP address 58.19.104.85 to port 8443 (ger-03) [K]	Brute-Force Exploited Host

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 37.148.133.121

🇺🇬 212.88.98.223

🇩🇪 202.133.91.208

🇺🇸 192.155.81.124

🇺🇸 159.65.99.9

🇹🇷 104.28.154.247

🇷🇴 92.118.39.77

🇩🇪 91.205.104.132

🇨🇦 85.217.149.62

🇷🇴 82.77.62.250

🇷🇴 77.81.21.130

🇸🇬 47.79.206.241

🇸🇬 47.79.200.201

🇺🇸 20.163.58.220

🇹🇳 196.187.132.27

🇬🇧 193.163.125.206

🇩🇪 185.220.100.248

🇺🇸 167.172.213.71

🇮🇩 124.40.252.3

🇨🇳 115.54.138.128