115.58.159.120
Classification: Malicious
115.58.159.120 is a malicious IP address in Xinyang, CN. 10 sightings from 4 threat sources (Unauthorized scanning of hosts), last seen 2026-10-16.
Current activity
- Malware distribution — This indicator is distributing malware.
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Unauthorized scanning of hosts | Blocklist.net.ua | 2026-09-15 16:05:20 | 2026-10-16 16:25:28 | attacker malicious-activity reconnaissance | |
| Malware Download | URLhaus Abuse.ch | 2026-09-15 10:01:37 | 2026-09-15 10:01:37 | malicious-activity malware | |
| Malware Download | Abuse.ch | 2021-04-21 19:17:24 | 2021-04-21 19:17:24 | malicious-activity | |
| Mail Spammer | Abuseat.org | 2021-04-21 19:17:24 | 2021-04-21 19:17:24 |
Tags
elf mozi abuseWhois information
- AS name
- AS4837 China Unicom Henan province network
- AS registry
- apnic
- AS date
- 2008-07-07 00:00:00
- AS CIDR
- 115.48.0.0/12
- CIDR
- 115.48.0.0/12
- Registrant
- China Unicom Henan province network
- Address
- No.21,Financial Street Beijing,100033 P.R.China
- City
- Xinyang
- Postal code
- 464099
- Country
- CN — China 🇨🇳
- Contact email
- [email protected], [email protected]
- First indexed
- 2021-04-21 19:17:24
- Last updated
- 2026-10-16 16:25:28
Malicious IPs in the same CIDR
115.58.134.206 115.50.95.1 115.59.219.78 115.50.31.167 115.50.94.87 115.51.122.143 115.62.58.10 115.58.202.92 115.58.135.243 115.48.151.114 115.48.148.178 115.61.118.122 115.53.39.98 115.61.208.135 115.49.102.34 115.49.157.225 115.49.31.170 115.54.130.3 115.48.139.197 115.49.30.97 115.59.59.37 115.58.92.102 115.58.159.120 115.58.112.245 115.59.31.26