IP address


.00058.20.243.15
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
CI Army
58.20.243.15 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-05-16 02:50:00.972000
Was present on blacklist at: 2024-02-22 03:50, 2024-02-23 03:50, 2024-02-24 03:50, 2024-02-25 03:50, 2024-02-26 03:50, 2024-02-27 03:50, 2024-03-01 03:50, 2024-03-04 03:50, 2024-03-06 03:50, 2024-03-07 03:50, 2024-03-08 03:50, 2024-03-09 03:50, 2024-03-10 03:50, 2024-03-11 03:50, 2024-03-12 03:50, 2024-03-13 03:50, 2024-03-14 03:50, 2024-03-18 03:50, 2024-03-19 03:50, 2024-03-20 03:50, 2024-03-21 03:50, 2024-03-22 03:50, 2024-03-23 03:50, 2024-03-24 03:50, 2024-03-25 03:50, 2024-03-26 03:50, 2024-03-27 03:50, 2024-04-01 02:50, 2024-04-02 02:50, 2024-04-03 02:50, 2024-04-04 02:50, 2024-04-05 02:50, 2024-04-06 02:50, 2024-04-07 02:50, 2024-04-08 02:50, 2024-04-12 02:50, 2024-04-14 02:50, 2024-04-15 02:50, 2024-04-16 02:50, 2024-04-17 02:50, 2024-04-18 02:50, 2024-04-19 02:50, 2024-04-20 02:50, 2024-04-21 02:50, 2024-04-22 02:50, 2024-04-23 02:50, 2024-04-24 02:50, 2024-04-25 02:50, 2024-04-26 02:50, 2024-04-27 02:50, 2024-04-28 02:50, 2024-04-29 02:50, 2024-05-08 02:50, 2024-05-11 02:50, 2024-05-12 02:50, 2024-05-13 02:50, 2024-05-15 02:50, 2024-05-16 02:50
Blacklists.co MSSQL
58.20.243.15 is listed on the Blacklists.co MSSQL blacklist.

Description: Blacklists.co blocklist contains MSSQL Malicious Addresses.
Type of feed: primary (feed detail page)

Last checked at: 2024-02-28 06:05:00.652000
Was present on blacklist at: 2024-02-21 06:05, 2024-02-22 06:05, 2024-02-23 06:05, 2024-02-24 06:05, 2024-02-25 06:05, 2024-02-26 06:05, 2024-02-27 06:05, 2024-02-28 06:05
Warden events (31)
2024-05-02
ReconScanning (node.8cbf96): 1
2024-04-30
ReconScanning (node.8cbf96): 1
2024-04-29
ReconScanning (node.8cbf96): 1
2024-04-28
ReconScanning (node.bd32ad): 1
2024-04-20
ReconScanning (node.8cbf96): 1
2024-04-18
ReconScanning (node.8cbf96): 1
2024-04-16
ReconScanning (node.8cbf96): 1
2024-04-14
ReconScanning (node.8cbf96): 1
2024-04-12
ReconScanning (node.8cbf96): 1
2024-04-09
ReconScanning (node.8cbf96): 1
2024-04-05
ReconScanning (node.8cbf96): 1
2024-04-03
ReconScanning (node.8cbf96): 1
2024-03-26
ReconScanning (node.bd32ad): 2
2024-03-25
ReconScanning (node.8cbf96): 1
2024-03-24
ReconScanning (node.bd32ad): 4
ReconScanning (node.7d83c0): 4
2024-03-22
ReconScanning (node.8cbf96): 1
2024-03-15
ReconScanning (node.8cbf96): 1
2024-03-12
ReconScanning (node.8cbf96): 1
2024-03-11
ReconScanning (node.8cbf96): 1
2024-03-06
ReconScanning (node.8cbf96): 1
2024-02-25
ReconScanning (node.7d83c0): 1
2024-02-23
ReconScanning (node.8cbf96): 1
2024-02-18
ReconScanning (node.8cbf96): 1
Origin AS
AS4837 - CHINA169-Backbone
BGP Prefix
58.20.0.0/16
dshield
[]
fmp
{'general': 0.25437283515930176}
geo
China, Yiyang
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
58.20.0.0 - 58.20.255.255
last_activity
2024-05-02 02:07:06
last_warden_event
2024-05-02 02:07:06
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 80, 2121, 5555, 7777, 8082, 8083, 8086, 8089, 8888, 9091, 9998, 9999
Tags: eol-product, self-signed, starttls
CPEs: cpe:/o:microsoft:windows, cpe:/a:f5:nginx, cpe:/a:f5:nginx:1.21.0, cpe:/a:f5:nginx:1.23.3, cpe:/a:jquery:jquery, cpe:/a:f5:nginx:1.20.2
ts_added
2020-06-01 13:23:17.327000
ts_last_update
2024-05-17 13:23:20.348000

Warden event timeline

DShield event timeline

Presence on blacklists