IP address

Search at other sites:
.308169.58.152.84vmi3498073.contaboserver.net
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Echelon TLS/SSL crawler
169.58.152.84 is listed on the Echelon TLS/SSL crawler blacklist.

Description: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-08-23 09:40:00.505000
Was present on blacklist at: 2026-08-12 09:40, 2026-08-13 09:40, 2026-08-14 09:40, 2026-08-15 09:40, 2026-08-16 09:40, 2026-08-17 09:40, 2026-08-18 09:40, 2026-08-19 09:40, 2026-08-20 09:40, 2026-08-21 09:40, 2026-08-22 09:40, 2026-08-23 09:40
CI Army
169.58.152.84 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-08-22 02:50:00.817000
Was present on blacklist at: 2026-08-17 02:50, 2026-08-18 02:50, 2026-08-19 02:50, 2026-08-21 02:50, 2026-08-22 02:50
AbuseIPDB
169.58.152.84 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-08-18 04:00:00.683000
Was present on blacklist at: 2026-08-18 04:00

Threat categories

TLRoleCategoryDetails
57 src scan port: 443, 3306, 27017
41 src —
25 src login protocol: smtp
port: 25
Warden events (96)
2026-08-19
IntrusionUserCompromise (node.cfb4f7): 1
ReconScanning (node.9c1411): 1
2026-08-18
ReconScanning (node.368407): 10
ReconScanning (node.4dc198): 8
ReconScanning (node.ce2b59): 2
AnomalyTraffic (node.6a1878): 3
2026-08-17
ReconScanning (node.ce2b59): 2
AnomalyTraffic (node.6a1878): 3
ReconScanning (node.9c1411): 1
2026-08-16
ReconScanning (node.9c1411): 1
ReconScanning (node.368407): 6
AnomalyTraffic (node.6a1878): 2
ReconScanning (node.4dc198): 1
2026-08-15
ReconScanning (node.368407): 1
AnomalyTraffic (node.6a1878): 7
ReconScanning (node.ce2b59): 2
ReconScanning (node.4dc198): 4
2026-08-14
ReconScanning (node.368407): 6
ReconScanning (node.9c1411): 1
AnomalyTraffic (node.6a1878): 2
ReconScanning (node.4dc198): 1
2026-08-13
ReconScanning (node.368407): 7
AnomalyTraffic (node.6a1878): 2
2026-08-12
ReconScanning (node.368407): 5
AnomalyTraffic (node.6a1878): 8
ReconScanning (node.4dc198): 5
AnomalyTraffic (node.ce2b59): 2
ReconScanning (node.ce2b59): 2
DShield reports (IP summary, reports)
2026-08-12
Number of reports: 149
Distinct targets: 94
2026-08-13
Number of reports: 126
Distinct targets: 105
2026-08-14
Number of reports: 202
Distinct targets: 125
2026-08-15
Number of reports: 202
Distinct targets: 125
2026-08-16
Number of reports: 148
Distinct targets: 83
2026-08-17
Number of reports: 143
Distinct targets: 121
2026-08-18
Number of reports: 225
Distinct targets: 164
2026-08-19
Number of reports: 225
Distinct targets: 164
Origin AS
AS51167 - CONTABO
BGP Prefix
169.58.128.0/17
geo
France, Lauterbourg
🕑 Europe/Paris
hostname
vmi3498073.contaboserver.net
Address block ('inetnum' or 'NetRange' in whois database)
169.53.0.0 - 169.63.255.255
last_activity
2026-08-19 08:24:18
last_warden_event
2026-08-19 08:24:18
rep
0.30783996536690916
reserved_range
0
ts_added
2026-08-12 02:03:10.264000
ts_last_update
2026-08-23 09:40:51.594000

Warden event timeline

DShield event timeline

Presence on blacklists