IP address

Shodan(more info)

Passive DNS

Tags:

IP blacklists: Sblam!
107.189.13.253 is listed on the Sblam! blacklist.

Description: Sblam! is a service that effectively protects forms for comments in blogs, forums and guestbooks from spam.
Type of feed: primary (feed detail page)

Last checked at: 2025-07-05 02:15:00.215000
Was present on blacklist at: 2025-06-07 02:15, 2025-06-08 02:15, 2025-06-09 02:15, 2025-06-10 02:15, 2025-06-11 02:15, 2025-06-12 02:15, 2025-06-13 02:15, 2025-06-14 02:15, 2025-06-15 02:15, 2025-06-16 02:15, 2025-06-17 02:15, 2025-06-18 02:15, 2025-06-19 02:15, 2025-06-20 02:15, 2025-06-21 02:15, 2025-06-22 02:15, 2025-06-23 02:15, 2025-06-24 02:15, 2025-06-25 02:15, 2025-06-26 02:15, 2025-06-27 02:15, 2025-06-28 02:15, 2025-06-29 02:15, 2025-06-30 02:15, 2025-07-01 02:15, 2025-07-02 02:15, 2025-07-03 02:15, 2025-07-04 02:15, 2025-07-05 02:15
Spamhaus XBL CBL
107.189.13.253 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-07-05 02:16:21.247000
Was present on blacklist at: 2025-06-07 02:16, 2025-06-14 02:16, 2025-06-21 02:16, 2025-06-28 02:16, 2025-07-05 02:16
dan.me.uk TOR Nodes
107.189.13.253 is listed on the dan.me.uk TOR Nodes blacklist.

Description: List of TOR node IPs by dan.me.uk.
Type of feed: secondary (feed detail page)

Last checked at: 2025-07-05 04:10:00
Was present on blacklist at: 2025-06-07 04:10, 2025-06-08 04:10, 2025-06-09 04:10, 2025-06-10 04:10, 2025-06-11 04:10, 2025-06-12 04:10, 2025-06-13 04:10, 2025-06-14 04:10, 2025-06-15 04:10, 2025-06-16 04:10, 2025-06-17 04:10, 2025-06-18 04:10, 2025-06-19 04:10, 2025-06-20 04:10, 2025-06-21 04:10, 2025-06-22 04:10, 2025-06-23 04:10, 2025-06-24 04:10, 2025-06-25 04:10, 2025-06-26 04:10, 2025-06-27 04:10, 2025-06-28 04:10, 2025-06-29 04:10, 2025-06-30 04:10, 2025-07-01 04:10, 2025-07-02 04:10, 2025-07-03 04:10, 2025-07-04 04:10, 2025-07-05 04:10
FireHOL anonymizers
107.189.13.253 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2025-07-05 00:05:08
Was present on blacklist at: 2025-06-07 00:05, 2025-06-08 00:05, 2025-06-09 00:05, 2025-06-10 00:05, 2025-06-11 00:05, 2025-06-12 00:05, 2025-06-13 00:05, 2025-06-14 00:05, 2025-06-15 00:05, 2025-06-16 00:05, 2025-06-17 00:05, 2025-06-18 00:05, 2025-06-19 00:05, 2025-06-20 00:05, 2025-06-21 00:05, 2025-06-22 00:05, 2025-06-23 00:05, 2025-06-24 00:05, 2025-06-25 00:05, 2025-06-26 00:05, 2025-06-27 00:05, 2025-06-28 00:05, 2025-06-29 00:05, 2025-06-30 00:05, 2025-07-01 00:05, 2025-07-02 00:05, 2025-07-03 00:05, 2025-07-04 00:05, 2025-07-05 00:05
TorProject
107.189.13.253 is listed on the TorProject blacklist.

Description: TorProject.org list of all current TOR exit points (TorDNSEL)
Type of feed: secondary (feed detail page)

Last checked at: 2025-07-05 04:10:00
Was present on blacklist at: 2025-06-07 04:10, 2025-06-08 04:10, 2025-06-09 04:10, 2025-06-10 04:10, 2025-06-11 04:10, 2025-06-12 04:10, 2025-06-13 04:10, 2025-06-14 04:10, 2025-06-15 04:10, 2025-06-16 04:10, 2025-06-17 04:10, 2025-06-18 04:10, 2025-06-19 04:10, 2025-06-20 04:10, 2025-06-21 04:10, 2025-06-22 04:10, 2025-06-23 04:10, 2025-06-24 04:10, 2025-06-25 04:10, 2025-06-26 04:10, 2025-06-27 04:10, 2025-06-28 04:10, 2025-06-29 04:10, 2025-06-30 04:10, 2025-07-01 04:10, 2025-07-02 04:10, 2025-07-03 04:10, 2025-07-04 04:10, 2025-07-05 04:10
AbuseIPDB
107.189.13.253 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc. Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-06-07 04:00:00.742000
Was present on blacklist at: 2025-06-07 04:00
Blocklist.net.ua
107.189.13.253 is listed on the Blocklist.net.ua blacklist.

Description: BlockList contains IP addresses that perform attacks, send spam or brute force passwords to the blocking list.
Type of feed: primary (feed detail page)

Last checked at: 2025-06-08 06:15:01.819000
Was present on blacklist at: 2025-06-07 10:15, 2025-06-07 14:15, 2025-06-07 18:15, 2025-06-07 22:15, 2025-06-08 02:15, 2025-06-08 06:15
DataPlane VNC RFB
107.189.13.253 is listed on the DataPlane VNC RFB blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds, and measurement resource for operators, by operators. IPs initiating an unsolicited VNC remote frame buffer (RFB) session to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-06-22 18:10:05.796000
Was present on blacklist at: 2025-06-16 06:10, 2025-06-16 10:10, 2025-06-16 18:10, 2025-06-16 22:10, 2025-06-17 02:10, 2025-06-17 06:10, 2025-06-17 10:10, 2025-06-17 14:10, 2025-06-17 18:10, 2025-06-17 22:10, 2025-06-18 02:10, 2025-06-18 06:10, 2025-06-18 10:10, 2025-06-18 14:10, 2025-06-18 18:10, 2025-06-18 22:10, 2025-06-19 02:10, 2025-06-19 06:10, 2025-06-19 10:10, 2025-06-19 14:10, 2025-06-19 18:10, 2025-06-19 22:10, 2025-06-20 02:10, 2025-06-20 06:10, 2025-06-20 10:10, 2025-06-20 14:10, 2025-06-20 18:10, 2025-06-20 22:10, 2025-06-21 02:10, 2025-06-21 06:10, 2025-06-21 10:10, 2025-06-21 14:10, 2025-06-21 18:10, 2025-06-21 22:10, 2025-06-22 02:10, 2025-06-22 06:10, 2025-06-22 10:10, 2025-06-22 14:10, 2025-06-22 18:10

Origin AS: AS53667 - PONYNET
BGP Prefix: 107.189.13.0/24
geo: Luxembourg, Luxembourg; 🕑 Europe/Luxembourg
hostname: LuxembourgTorNew11.Quetzalcoatl-relays.org
Address block ('inetnum' or 'NetRange' in whois database): 107.189.0.0 - 107.189.31.255
reserved_range: 0
Shodan's InternetDB: Open ports: 9000, 9001, 22022; Tags: tor; CPEs: cpe:/o:linux:linux_kernel, cpe:/a:openbsd:openssh:8.4p1, cpe:/o:debian:debian_linux
ts_added: 2025-06-07 02:16:15.990000
ts_last_update: 2025-07-05 02:16:22.105000

Warden event timeline

DShield event timeline

Presence on blacklists