IP address

Search at other sites:

.031120.224.138.144

Shodan(more info)

Passive DNS

IP blacklists

Spamhaus SBL CSS

120.224.138.144 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-03-11 07:21:21.856000
Was present on blacklist at: 2025-03-11 07:21

Spamhaus XBL CBL

120.224.138.144 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-03-11 07:21:21.856000
Was present on blacklist at: 2025-03-11 07:21

Warden events (1)

2025-03-11

AttemptLogin (node.ce2b59): 1

Origin AS

AS24444 - CMNET-V4shandong-AS-AP

BGP Prefix

120.224.136.0/22

geo

China

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

120.192.0.0 - 120.255.255.255

last_activity

2025-03-11 06:39:30

last_warden_event

2025-03-11 06:39:30

rep

0.030952380952380953

reserved_range

0

Shodan's InternetDB

Open ports: 22, 5000, 5001, 11434

Tags: –

CPEs: cpe:/a:synology:diskstation_manager:7.2.1-69057, cpe:/a:openbsd:openssh:8.2, cpe:/a:f5:nginx

ts_added

2025-03-11 07:21:21.126000

ts_last_update

2025-03-12 07:21:30.635000

Warden event timeline

DShield event timeline

Presence on blacklists