IP address

Search at other sites:

.029111.160.65.130no-data

Shodan(more info)

Passive DNS

IP blacklists

CI Army

111.160.65.130 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-04-29 02:50:01.008000
Was present on blacklist at: 2024-02-18 03:50, 2024-02-25 03:50, 2024-03-07 03:50, 2024-03-08 03:50, 2024-03-09 03:50, 2024-03-10 03:50, 2024-03-11 03:50, 2024-03-12 03:50, 2024-03-13 03:50, 2024-03-18 03:50, 2024-03-19 03:50, 2024-03-26 03:50, 2024-03-27 03:50, 2024-03-29 03:50, 2024-03-30 03:50, 2024-04-03 02:50, 2024-04-27 02:50, 2024-04-28 02:50, 2024-04-29 02:50

Warden events (16)

2024-05-11

ReconScanning (node.bd32ad): 2

2024-05-02

ReconScanning (node.8cbf96): 1

2024-04-03

ReconScanning (node.8cbf96): 1

2024-03-27

ReconScanning (node.8cbf96): 1

2024-03-22

AnomalyTraffic (node.c35ced): 6

ReconScanning (node.bd32ad): 4

2024-03-08

ReconScanning (node.8cbf96): 1

DShield reports (IP summary, reports)

2024-02-18

Number of reports: 12

Distinct targets: 3

2024-02-21

Number of reports: 12

Distinct targets: 3

2024-02-26

Number of reports: 18

Distinct targets: 8

2024-03-01

Number of reports: 10

Distinct targets: 4

2024-03-04

Number of reports: 14

Distinct targets: 6

2024-03-06

Number of reports: 10

Distinct targets: 4

2024-03-09

Number of reports: 14

Distinct targets: 14

2024-03-17

Number of reports: 12

Distinct targets: 6

2024-03-18

Number of reports: 13

Distinct targets: 6

2024-03-24

Number of reports: 18

Distinct targets: 5

2024-03-25

Number of reports: 13

Distinct targets: 6

2024-04-01

Number of reports: 44

Distinct targets: 6

2024-04-02

Number of reports: 12

Distinct targets: 5

2024-04-03

Number of reports: 32

Distinct targets: 12

2024-04-09

Number of reports: 14

Distinct targets: 4

2024-04-26

Number of reports: 13

Distinct targets: 5

OTX pulses

[65884d12b41d545624bca8e2] 2023-12-24 15:24:02.272000 | PostgresQL honeypot logs for 2023-12-24

Author name:	jnazario
Pulse modified:	2023-12-24 15:24:02.272000
Indicator created:	2023-12-24 15:24:03
Indicator role:	None
Indicator title:
Indicator expiration:	2024-01-23 15:00:00

Origin AS

AS4837 - CHINA169-Backbone

BGP Prefix

111.160.0.0/13

fmp

{'general': 0.2989753484725952}

geo

China, Tianjin

🕑 Asia/Shanghai

hostname

no-data

Address block ('inetnum' or 'NetRange' in whois database)

111.160.0.0 - 111.167.255.255

last_activity

2024-05-11 12:24:58

last_warden_event

2024-05-11 12:24:58

rep

0.02857142857142857

reserved_range

0

Shodan's InternetDB

Open ports: 81, 1521, 5201, 5222, 8686, 9999

Tags: eol-product

CPEs: cpe:/a:apache:http_server, cpe:/a:redmine:redmine, cpe:/a:f5:nginx:1.13.7, cpe:/a:ruby-lang:ruby, cpe:/a:jquery:jquery, cpe:/a:rubyonrails:rails

ts_added

2023-11-20 05:04:14.394000

ts_last_update

2024-05-17 05:05:41.997000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses