IP address

Passive DNS

Tags:

IP blacklists

Spamhaus SBL

154.216.18.129 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-12-25 05:02:26.305000
Was present on blacklist at: 2024-10-09 05:02, 2024-10-16 05:02, 2024-10-23 05:02, 2024-10-30 05:02, 2024-11-06 05:02, 2024-11-13 05:04, 2024-11-20 05:02, 2024-11-27 05:02, 2024-12-04 05:02, 2024-12-11 05:04, 2024-12-18 05:03, 2024-12-25 05:02

Spamhaus DROP

154.216.18.129 is listed on the Spamhaus DROP blacklist.

Description: The Spamhaus DROP (Don't Route Or Peer) lists are advisory"drop all traffic" lists. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-12-25 05:02:26.305000
Was present on blacklist at: 2024-10-09 05:02, 2024-10-16 05:02, 2024-10-23 05:02, 2024-10-30 05:02, 2024-11-06 05:02, 2024-11-13 05:04, 2024-11-20 05:02, 2024-11-27 05:02, 2024-12-04 05:02, 2024-12-11 05:04, 2024-12-18 05:03, 2024-12-25 05:02

Turris greylist

154.216.18.129 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-10-25 21:15:00.202000
Was present on blacklist at: 2024-10-12 21:15, 2024-10-16 21:15, 2024-10-17 21:15, 2024-10-18 21:15, 2024-10-20 21:15, 2024-10-22 21:15, 2024-10-23 21:15, 2024-10-25 21:15

AbuseIPDB

154.216.18.129 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-10-15 04:00:00.339000
Was present on blacklist at: 2024-10-15 04:00

Spamhaus XBL CBL

154.216.18.129 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-12-25 05:02:26.305000
Was present on blacklist at: 2024-10-16 05:02, 2024-10-23 05:02, 2024-10-30 05:02

Warden events (9)

2024-10-22: ReconScanning (node.368407): 9

DShield reports (IP summary, reports)

2024-10-08: Number of reports: 32; Distinct targets: 15
2024-10-09: Number of reports: 29; Distinct targets: 18
2024-10-10: Number of reports: 18; Distinct targets: 7
2024-10-11: Number of reports: 14; Distinct targets: 4
2024-10-12: Number of reports: 44; Distinct targets: 13
2024-10-13: Number of reports: 33; Distinct targets: 13
2024-10-14: Number of reports: 37; Distinct targets: 15
2024-10-15: Number of reports: 77; Distinct targets: 52
2024-10-16: Number of reports: 23; Distinct targets: 19
2024-10-17: Number of reports: 32; Distinct targets: 9
2024-10-18: Number of reports: 76; Distinct targets: 12
2024-10-19: Number of reports: 67; Distinct targets: 17
2024-10-20: Number of reports: 52; Distinct targets: 19
2024-10-21: Number of reports: 68; Distinct targets: 14
2024-10-22: Number of reports: 104; Distinct targets: 59
2024-10-24: Number of reports: 405; Distinct targets: 61

OTX pulses

[5a7e3e70c44e7b48947593a7] 2018-02-10 00:36:00.396000 | Webscanners 2018-02-09 thru current day

Author name:	david3
Pulse modified:	2024-11-19 03:55:21.049000
Indicator created:	2024-10-20 07:00:17
Indicator role:	scanning_host
Indicator title:	404 NOT FOUND
Indicator expiration:	2025-01-18 00:00:00

Origin AS: AS215240 - NETRESEARCH
BGP Prefix: 154.216.18.0/24
geo: Hong Kong, Hong Kong; 🕑 Asia/Hong_Kong
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 154.192.0.0 - 154.223.255.255
last_activity: 2024-11-19 04:02:03.915000
last_warden_event: 2024-10-22 20:26:27
rep: 0.0
reserved_range: 0
Shodan's InternetDB: Open ports: 5985; Tags: –; CPEs: –
ts_added: 2024-10-09 05:02:10.114000
ts_last_update: 2024-12-26 05:02:25.558000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses