IP address

Passive DNS

Tags: IP in hostname

IP blacklists: URLHaus
139.159.155.204 is listed on the URLHaus blacklist.

Description: URLhaus is a project from abuse.ch with the goal of sharing<br>malicious URLs that are being used for malware distribution.<br>This list contains IPs that are part of the malicious ULRs.
Type of feed: primary (feed detail page)

Last checked at: 2024-08-11 10:10:00.840000
Was present on blacklist at: 2024-08-01 06:10, 2024-08-01 06:10, 2024-08-08 22:10, 2024-08-08 22:10, 2024-08-11 10:10, 2024-08-11 10:10

Origin AS: AS55990 - HWCSNET
BGP Prefix: 139.159.144.0/20
geo: China; 🕑 Asia/Shanghai
hostname: ecs-139-159-155-204.compute.hwclouds-dns.com
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 139.159.0.0 - 139.159.255.255
last_activity: 2024-06-14 00:00:00
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 81, 88, 3389; Tags: –; CPEs: cpe:/o:microsoft:windows, cpe:/a:apache:http_server:2.4.10, cpe:/a:openssl:openssl:0.9.8zb
ts_added: 2024-06-15 02:10:08.522000
ts_last_update: 2024-10-05 02:10:16.364000

Warden event timeline

DShield event timeline

Presence on blacklists