58.215.12.59 Threat Intelligence and Host Information

Aug 26, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 58.215.12.59 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 55/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service
Tags: attack ddos, botnet, cc.py, Cyclops, ddos, DDoS, Gamardeon, HEAD Floods, HermeticWiper, IsaacWiper, Killnet, list ips, PartyTicket, russia, russian, T1498, T1499, ukraine, WhisperGate
View other sources: Spamhaus VirusTotal

Country: China
Network:
Noticed: 7 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Russian Federation

Malware Detected on Host

Count: 1 33b574209e09fe5f20330bb4b033ed1a00afe12e08f89a151e4f1d6c278602ca

Open Ports Detected

123 4433 554 6011 7001 7003 80 8001 8028 8060 8068 8069 8080 8196 8601 8824 9000 9072 9091 9174

CVEs Detected

CVE-2021-3121 CVE-2021-32574 CVE-2021-36213 CVE-2021-37219 CVE-2021-38698 CVE-2021-41803 CVE-2021-41805 CVE-2022-24687 CVE-2022-29153 CVE-2022-40716 CVE-2023-0845 CVE-2023-36478 CVE-2023-36479 CVE-2023-40167 CVE-2023-41900 CVE-2023-44487 CVE-2024-10005 CVE-2024-10006 CVE-2024-10086 CVE-2024-22201 CVE-2024-6763 CVE-2024-8184

Map

Whois Information

inetnum: 58.208.0.0 - 58.223.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
abuse-c: AC1573-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-JS
mnt-routes: MAINT-CHINANET-JS
mnt-irt: IRT-CHINANET-CN
last-modified: 2020-09-11T09:10:30Z
irt: IRT-CHINANET-CN
address: No.31 ,jingrong street,beijing
address: 100032
e-mail: anti-spam@chinatelecom.cn
abuse-mailbox: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
mnt-by: MAINT-CHINANET
last-modified: 2025-04-24T03:21:26Z
role: ABUSE CHINANETCN
country: ZZ
address: No.31 ,jingrong street,beijing
address: 100032
phone: +000000000
e-mail: anti-spam@chinatelecom.cn
admin-c: CH93-AP
tech-c: CH93-AP
nic-hdl: AC1573-AP
abuse-mailbox: anti-spam@chinatelecom.cn
mnt-by: APNIC-ABUSE
last-modified: 2025-04-24T03:21:54Z
role: CHINANET JIANGSU
address: 260 Zhongyang Road,Nanjing 210037
country: CN
phone: +86-25-87799222
e-mail: jsipmanager@163.com
admin-c: CH360-AP
tech-c: CS306-AP
tech-c: CN142-AP
nic-hdl: CJ186-AP
notify: jsipmanager@163.com
mnt-by: MAINT-CHINANET-JS
last-modified: 2022-08-05T15:34:47Z
person: Chinanet Hostmaster
nic-hdl: CH93-AP
e-mail: anti-spam@chinatelecom.cn
address: No.31 ,jingrong street,beijing
address: 100032
phone: +86-10-58501724
fax-no: +86-10-58501724
country: CN
mnt-by: MAINT-CHINANET
last-modified: 2022-02-28T06:53:44Z

Links to attack logs

Share on: