IP address

Passive DNS

Tags: IP in hostname

IP blacklists: Turris greylist
118.139.167.136 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-09-28 21:15:00.228000
Was present on blacklist at: 2024-09-28 21:15
Spamhaus XBL CBL
118.139.167.136 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-09-28 21:16:41.350000
Was present on blacklist at: 2024-09-28 21:16

Origin AS: AS26496 - AS-26496-GO-DADDY-COM-LLC
BGP Prefix: 118.139.160.0/21
geo: Singapore, Singapore; 🕑 Asia/Singapore
hostname: 136.167.139.118.host.secureserver.net
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 118.139.160.0 - 118.139.191.255
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 80, 443, 2181, 3000, 3306, 6379, 8848, 8888, 9092, 9876, 27017; Tags: database, eol-product, self-signed; CPEs: cpe:/a:oracle:mysql:5.7.44, cpe:/a:openssl:openssl:3.0.2, cpe:/a:apache:rocketmq:4.4.0, cpe:/a:getbootstrap:bootstrap, cpe:/a:openbsd:openssh:8.0, cpe:/a:jquery:jquery, cpe:/a:f5:nginx, cpe:/a:mongodb:mongodb:7.0.12, cpe:/a:momentjs:moment, cpe:/a:angularjs:angular.js, cpe:/a:redislabs:redis
ts_added: 2024-09-28 21:16:41.134000
ts_last_update: 2024-09-29 21:16:57.814000

Warden event timeline

DShield event timeline

Presence on blacklists