IP address

Search at other sites:
.029169.58.152.76vmi3498068.contaboserver.net
Shodan(more info)
Passive DNS
Tags:
IP blacklists
CI Army
169.58.152.76 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-08-12 02:50:00.840000
Was present on blacklist at: 2026-08-10 02:50, 2026-08-11 02:50, 2026-08-12 02:50
AbuseIPDB
169.58.152.76 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-08-11 04:00:00.663000
Was present on blacklist at: 2026-08-11 04:00
Echelon TLS/SSL crawler
169.58.152.76 is listed on the Echelon TLS/SSL crawler blacklist.

Description: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-08-20 09:40:00.478000
Was present on blacklist at: 2026-08-12 09:40, 2026-08-13 09:40, 2026-08-14 09:40, 2026-08-15 09:40, 2026-08-16 09:40, 2026-08-17 09:40, 2026-08-18 09:40, 2026-08-19 09:40, 2026-08-20 09:40

Threat categories

TLRoleCategoryDetails
70 src —
48 src login protocol: mysql
port: 3306
48 src exploit protocol: mysql
33 src scan port: 3306, 27017
Warden events (53)
2026-08-12
ReconScanning (node.368407): 7
AnomalyTraffic (node.6a1878): 2
ReconScanning (node.4dc198): 1
2026-08-11
IntrusionUserCompromise+AttemptExploit (node.2373ce): 5
ReconScanning (node.368407): 8
ReconScanning (node.4dc198): 6
ReconScanning (node.9c1411): 1
ReconScanning (node.ce2b59): 3
AnomalyTraffic (node.ce2b59): 5
AnomalyTraffic (node.6a1878): 2
2026-08-10
ReconScanning (node.ce2b59): 3
AnomalyTraffic (node.ce2b59): 6
AnomalyTraffic (node.6a1878): 3
ReconScanning (node.9c1411): 1
DShield reports (IP summary, reports)
2026-08-09
Number of reports: 66
Distinct targets: 34
2026-08-10
Number of reports: 66
Distinct targets: 34
2026-08-11
Number of reports: 301
Distinct targets: 206
2026-08-12
Number of reports: 184
Distinct targets: 111
2026-08-13
Number of reports: 14
Distinct targets: 11
Origin AS
AS51167 - CONTABO
BGP Prefix
169.58.128.0/17
geo
France, Lauterbourg
🕑 Europe/Paris
hostname
vmi3498068.contaboserver.net
Address block ('inetnum' or 'NetRange' in whois database)
169.53.0.0 - 169.63.255.255
last_activity
2026-08-12 22:05:49
last_warden_event
2026-08-12 22:05:49
rep
0.02866126592146634
reserved_range
0
ts_added
2026-08-10 02:52:34.033000
ts_last_update
2026-08-23 02:52:40.970000

Warden event timeline

DShield event timeline

Presence on blacklists