IP Profile

🖥 58.212.237.76 — CHINANET BACKBONE

CHINANET BACKBONE · AS4134 · CN · 58.212.237.0/24 · IP Reputation · threat 0.50 · 1x · 1 sources

reputation 47.1 (ELEVATED) · first seen 1d ago · last seen 1d ago
No special flags ip medium-severity auto-tagged

Reputation

47.1
ELEVATED

Threat Score

0.50
1 sightings

ASN

AS4134
from indicator

Peers on ASN

43
malicious co-tenants

Bad neighborhood

90
58.212.237.0/24

Country

CN
from indicator

🕵 Team Cymru Scout

Team Cymru Scout not configured — add config.scout.php or set cymruscout in API Config.

🌐 Network & Geo (local-first)

IP58.212.237.76
OrganizationCHINANET BACKBONE
ASNAS4134
Netname
Netblock
Reverse DNS (PTR)
CountryCN country intel

Identity resolves from the indicator's own columns first, then on demand from the local ip_ranges dataset by integer range — complete even before the bulk resolver runs.

🔥 Threat severity (AS4134 neighborhood)

High (.5-.75)
44
Avg threat 0.5 · peak 0.5 across 44 local IPs on AS4134

📁 Categories (ASN neighborhood)

🦠 Malware families (ASN neighborhood)

No local data.

🏷 Tags (ASN neighborhood)

auto-tagged
35
medium-severity
35
ip
35

🔌 Sources (ASN neighborhood)

stamparm ipsum
20
CINSscore Bad Guys
19
CI Army
15
IPsum Level 1
14
IPsum level 1 (all)
14
ThreatView IP
10
IPsum Level 2
9
FireHOL: ciarmy.ipset
7
FireHOL: iblocklist_ciarmy_malicious.netset
7
IPsum Level 3
5
FireHOL: firehol_level3.netset
5
Blocklist.de All
4
FireHOL level2
4
FireHOL: firehol_level2.netset
4

🌎 Geographic spread

44

📅 First-seen timeline

2026-08
44

Reporting Sources for this IP (1)

CINSscore Bad GuysIP Reputation

Passive DNS — domains resolving here (0)

No passive DNS yet. Run DNS audit.

🏠 Same /24 — 58.212.237.0/24 (90 other malicious IPs)

Other flagged IPs in the same /24 — a concentration here suggests a compromised or abused block.

IPCategoryFamilyThreat
58.212.237.114 IP Reputation- dossier
58.212.237.170 Reputation- dossier
58.212.237.203 Reputation- dossier
58.212.237.163 IP Reputation- dossier
58.212.237.206 Reputation- dossier
58.212.237.27 IP Reputation- dossier
58.212.237.5 IP Reputation- dossier
58.212.237.71 IP Reputation- dossier
58.212.237.75 IP Reputation- dossier
58.212.237.104 IP Blocklists- dossier
58.212.237.115 IP Blocklists- dossier
58.212.237.124 IP Blocklists- dossier
58.212.237.132 IP Blocklists- dossier
58.212.237.143 IP Blocklists- dossier
58.212.237.148 IP Blocklists- dossier
58.212.237.235 IP Blocklists- dossier
58.212.237.171 IP Blocklists- dossier
58.212.237.3 IP Blocklists- dossier
58.212.237.189 IP Blocklists- dossier
58.212.237.14 IP Blocklists- dossier
58.212.237.20 IP Blocklists- dossier
58.212.237.22 IP Blocklists- dossier
58.212.237.232 IP Blocklists- dossier
58.212.237.43 IP Blocklists- dossier
58.212.237.34 IP Blocklists- dossier
58.212.237.234 IP Blocklists- dossier
58.212.237.48 IP Blocklists- dossier
58.212.237.35 IP Blocklists- dossier
58.212.237.239 IP Blocklists- dossier
58.212.237.65 IP Blocklists- dossier
58.212.237.30 IP Blocklists- dossier
58.212.237.73 IP Blocklists- dossier
58.212.237.31 IP Blocklists- dossier
58.212.237.78 IP Blocklists- dossier
58.212.237.94 IP Blocklists- dossier
58.212.237.103 IP Blocklists- dossier
58.212.237.122 IP Blocklists- dossier
58.212.237.80 IP Blocklists- dossier
58.212.237.142 IP Blocklists- dossier
58.212.237.81 IP Blocklists- dossier
All in this subnet Bulk takedown

📡 Related indicators on AS4134 (43 total, 40 shown)

IPCategoryCountryThreat
60.166.83.178 ReputationCN dossier
59.53.166.185 ReputationCN dossier
58.212.237.203 ReputationCN dossier
222.170.20.194 ReputationCN dossier
171.104.81.241 ReputationCN dossier
123.178.210.131 ReputationCN dossier
123.178.210.33 ReputationCN dossier
123.178.210.21 ReputationCN dossier
123.178.210.51 ReputationCN dossier
171.104.81.235 IP BlocklistsCN dossier
171.104.81.214 IP BlocklistsCN dossier
171.104.81.205 IP BlocklistsCN dossier
171.104.81.198 IP BlocklistsCN dossier
171.104.81.239 IP BlocklistsCN dossier
171.104.81.238 IP BlocklistsCN dossier
171.104.81.219 IP BlocklistsCN dossier
171.104.81.217 IP BlocklistsCN dossier
171.104.81.194 IP BlocklistsCN dossier
171.104.81.218 IP BlocklistsCN dossier
58.212.237.154 IP BlocklistsCN dossier
58.212.237.171 IP BlocklistsCN dossier
171.104.81.234 IP BlocklistsCN dossier
171.104.81.216 IP BlocklistsCN dossier
171.104.81.206 IP BlocklistsCN dossier
171.104.81.201 IP BlocklistsCN dossier
171.104.81.248 IP BlocklistsCN dossier
171.104.81.242 IP BlocklistsCN dossier
171.104.81.221 IP BlocklistsCN dossier
171.104.81.208 IP BlocklistsCN dossier
60.166.83.135 IP BlocklistsCN dossier
60.166.83.7 IP BlocklistsCN dossier
58.59.233.135 IP BlocklistsCN dossier
171.104.81.251 IP BlocklistsCN dossier
58.212.237.35 IP BlocklistsCN dossier
171.104.81.247 IP BlocklistsCN dossier
171.104.81.244 IP BlocklistsCN dossier
171.104.81.209 IP BlocklistsCN dossier
171.104.81.207 IP BlocklistsCN dossier
171.104.81.203 IP BlocklistsCN dossier
219.153.81.22 IP BlocklistsCN dossier
Full ASN dossier →

Case & Takedown Links

No cases or takedowns yet.

+ Case Takedown

Enrichments

ipinfo

Stored Enrichment Data Enrich Now

Pulled 1 provider(s) just now.

1 enrichment records on file (history preserved).

📁 Case Management

+ New case from this
Identity resolves local-first: the indicator's own asn/country columns, else on-demand integer-range lookup against the local ip_ranges dataset — so ASN, org and country populate even before the bulk resolver finishes and even for IPs not yet ingested. Analytics, neighborhood and graph render entirely from the local database; live reputation providers augment only when keys and outbound access are available.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php