58.212.237.238
Classification: Malicious
58.212.237.238 is a malicious IP address. Reported by 4 threat sources, last seen 2026-09-12. Network: AS4134 CHINANET jiangsu province network.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- IoT threat — Seen attacking IoT devices.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malicious Host | CIArmy | 2024-04-25 11:39:23 | 2026-09-12 20:00:45 | attacker malicious-activity | |
| FTP Attacker | AbuseIPDB | 2026-09-10 05:07:00 | 2026-09-10 05:07:00 | attacker malicious-activity | |
| Known Attacker | AbuseIPDB | 2026-09-10 05:07:00 | 2026-09-10 05:07:00 | attacker malicious-activity | |
| SQL Injection | AbuseIPDB | 2026-09-10 05:07:00 | 2026-09-10 05:07:00 | attacker malicious-activity | |
| IMAP Attacker | AbuseIPDB | 2026-09-10 05:07:00 | 2026-09-10 05:07:00 | attacker malicious-activity | |
| IoT Attacker | AbuseIPDB | 2026-09-10 05:07:00 | 2026-09-10 05:07:00 | iot malicious-activity | |
| DDoS Attacker | AbuseIPDB | 2026-09-05 18:15:25 | 2026-09-10 05:07:00 | attacker malicious-activity | |
| Hacking | AbuseIPDB | 2026-07-11 21:21:08 | 2026-09-10 05:07:00 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-06-30 07:29:46 | 2026-09-10 05:07:00 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-06-25 00:08:41 | 2026-09-10 05:07:00 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-06-25 00:08:41 | 2026-09-10 05:07:00 | attacker compromised malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-06-24 06:46:19 | 2026-09-10 05:07:00 | anomalous-activity attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-06-24 06:46:19 | 2026-09-10 05:07:00 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-06-17 08:06:33 | 2026-09-10 05:07:00 | anomalous-activity attacker malicious-activity reconnaissance | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2025-02-10 06:05:46 | 2026-08-28 09:06:58 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2025-02-10 06:05:34 | 2026-08-28 09:06:56 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2024-11-22 15:19:02 | 2026-05-24 16:03:55 | anomalous-activity | |
| Malicious Host | HoneyDB | 2026-02-03 00:00:00 | 2026-02-03 00:00:00 | malicious-activity |
Whois information
- AS name
- AS4134 CHINANET jiangsu province network
- AS registry
- apnic
- AS date
- 2005-06-24 00:00:00
- AS CIDR
- 58.208.0.0/12
- CIDR
- 58.208.0.0/12
- Registrant
- CHINANET jiangsu province network
- Address
- No.31 ,jingrong street,beijing 100032
- City
- Nanjing
- Postal code
- 210000
- Country
- CN — China 🇨🇳
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2024-04-25 11:39:23
- Last updated
- 2026-09-12 20:00:46
Malicious IPs in the same CIDR
58.212.237.219 58.212.237.197 58.212.237.254 58.212.237.184 58.219.232.140 58.212.237.85 58.212.237.140 58.212.237.235 58.222.86.210 58.209.82.184 58.212.237.109 58.212.237.238 58.212.237.68 58.212.237.78 58.212.237.240 58.212.237.244 58.212.237.52 58.212.237.4 58.212.237.15 58.212.237.231 58.212.237.229 58.212.237.113 58.212.237.103 58.212.237.104 58.212.237.134