IP Profile

🖥 58.212.237.203 — CHINANET BACKBONE

CHINANET BACKBONE · AS4134 · CN · 58.212.237.0/24 · Reputation · threat 0.50 · 1x · 1 sources · PTR No PTR record

reputation 47 (ELEVATED) · first seen 12h ago · last seen 12h ago
No special flags

Reputation

47
ELEVATED

Threat Score

0.50
1 sightings

ASN

AS4134
from indicator

Peers on ASN

38
malicious co-tenants

Bad neighborhood

90
58.212.237.0/24

Country

CN
from indicator

🕵 Team Cymru Scout

Team Cymru Scout not configured — add config.scout.php or set cymruscout in API Config.

🌐 Network & Geo (local-first)

IP58.212.237.203
OrganizationCHINANET BACKBONE
ASNAS4134
Netname
Netblock
Reverse DNS (PTR)No PTR record
CountryCN country intel

Identity resolves from the indicator's own columns first, then on demand from the local ip_ranges dataset by integer range — complete even before the bulk resolver runs.

🔥 Threat severity (AS4134 neighborhood)

High (.5-.75)
39
Avg threat 0.5 · peak 0.5 across 39 local IPs on AS4134

📁 Categories (ASN neighborhood)

🦠 Malware families (ASN neighborhood)

No local data.

🏷 Tags (ASN neighborhood)

medium-severity
30
ip
30
auto-tagged
30

🔌 Sources (ASN neighborhood)

stamparm ipsum
20
CINSscore Bad Guys
17
CI Army
14
IPsum Level 1
13
IPsum level 1 (all)
13
ThreatView IP
10
IPsum Level 2
8
FireHOL: ciarmy.ipset
7
FireHOL: firehol_level3.netset
5
FireHOL: iblocklist_ciarmy_malicious.netset
4
FireHOL: firehol_level2.netset
4
Blocklist.de: all
4
IPsum Level 3
4
Blocklist.de All
4

🌎 Geographic spread

39

📅 First-seen timeline

2026-08
39

Reporting Sources for this IP (1)

stamparm ipsumReputation

Passive DNS — domains resolving here (0)

No passive DNS yet. Run DNS audit.

🏠 Same /24 — 58.212.237.0/24 (90 other malicious IPs)

Other flagged IPs in the same /24 — a concentration here suggests a compromised or abused block.

IPCategoryFamilyThreat
58.212.237.114 IP Reputation- dossier
58.212.237.170 Reputation- dossier
58.212.237.163 IP Reputation- dossier
58.212.237.206 Reputation- dossier
58.212.237.27 IP Reputation- dossier
58.212.237.5 IP Reputation- dossier
58.212.237.71 IP Reputation- dossier
58.212.237.75 IP Reputation- dossier
58.212.237.76 IP Reputation- dossier
58.212.237.104 IP Blocklists- dossier
58.212.237.115 IP Blocklists- dossier
58.212.237.124 IP Blocklists- dossier
58.212.237.132 IP Blocklists- dossier
58.212.237.143 IP Blocklists- dossier
58.212.237.148 IP Blocklists- dossier
58.212.237.235 IP Blocklists- dossier
58.212.237.171 IP Blocklists- dossier
58.212.237.3 IP Blocklists- dossier
58.212.237.189 IP Blocklists- dossier
58.212.237.14 IP Blocklists- dossier
58.212.237.20 IP Blocklists- dossier
58.212.237.22 IP Blocklists- dossier
58.212.237.232 IP Blocklists- dossier
58.212.237.43 IP Blocklists- dossier
58.212.237.34 IP Blocklists- dossier
58.212.237.234 IP Blocklists- dossier
58.212.237.48 IP Blocklists- dossier
58.212.237.35 IP Blocklists- dossier
58.212.237.239 IP Blocklists- dossier
58.212.237.65 IP Blocklists- dossier
58.212.237.30 IP Blocklists- dossier
58.212.237.73 IP Blocklists- dossier
58.212.237.31 IP Blocklists- dossier
58.212.237.78 IP Blocklists- dossier
58.212.237.94 IP Blocklists- dossier
58.212.237.103 IP Blocklists- dossier
58.212.237.122 IP Blocklists- dossier
58.212.237.80 IP Blocklists- dossier
58.212.237.142 IP Blocklists- dossier
58.212.237.81 IP Blocklists- dossier
All in this subnet Bulk takedown

📡 Related indicators on AS4134 (38 total, 38 shown)

IPCategoryCountryThreat
60.166.83.178 ReputationCN dossier
59.53.166.185 ReputationCN dossier
222.170.20.194 ReputationCN dossier
171.104.81.241 ReputationCN dossier
123.178.210.131 ReputationCN dossier
123.178.210.33 ReputationCN dossier
123.178.210.21 ReputationCN dossier
123.178.210.51 ReputationCN dossier
171.104.81.235 IP BlocklistsCN dossier
171.104.81.214 IP BlocklistsCN dossier
171.104.81.205 IP BlocklistsCN dossier
171.104.81.198 IP BlocklistsCN dossier
171.104.81.239 IP BlocklistsCN dossier
171.104.81.238 IP BlocklistsCN dossier
171.104.81.219 IP BlocklistsCN dossier
171.104.81.217 IP BlocklistsCN dossier
171.104.81.194 IP BlocklistsCN dossier
171.104.81.218 IP BlocklistsCN dossier
58.212.237.171 IP BlocklistsCN dossier
171.104.81.234 IP BlocklistsCN dossier
171.104.81.216 IP BlocklistsCN dossier
171.104.81.206 IP BlocklistsCN dossier
171.104.81.201 IP BlocklistsCN dossier
171.104.81.248 IP BlocklistsCN dossier
171.104.81.242 IP BlocklistsCN dossier
171.104.81.221 IP BlocklistsCN dossier
171.104.81.208 IP BlocklistsCN dossier
171.104.81.251 IP BlocklistsCN dossier
58.212.237.35 IP BlocklistsCN dossier
171.104.81.247 IP BlocklistsCN dossier
171.104.81.244 IP BlocklistsCN dossier
171.104.81.209 IP BlocklistsCN dossier
171.104.81.207 IP BlocklistsCN dossier
171.104.81.203 IP BlocklistsCN dossier
219.153.81.22 IP BlocklistsCN dossier
218.15.224.102 IP BlocklistsCN dossier
58.209.82.167 IP BlocklistsCN dossier
14.116.184.171 IP BlocklistsCN dossier
Full ASN dossier →

Case & Takedown Links

No cases or takedowns yet.

+ Case Takedown

Enrichments

ipinfo

Stored Enrichment Data Enrich Now

1 enrichment records on file (history preserved).

Identity resolves local-first: the indicator's own asn/country columns, else on-demand integer-range lookup against the local ip_ranges dataset — so ASN, org and country populate even before the bulk resolver finishes and even for IPs not yet ingested. Analytics, neighborhood and graph render entirely from the local database; live reputation providers augment only when keys and outbound access are available.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php