IP address

Search at other sites:

.000213.5.189.102

Shodan(more info)

Passive DNS

IP blacklists

UCEPROTECT L1

213.5.189.102 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-09-11 15:45:00.468000
Was present on blacklist at: 2026-09-04 15:45, 2026-09-04 23:45, 2026-09-05 07:45, 2026-09-05 15:45, 2026-09-05 23:45, 2026-09-06 07:45, 2026-09-06 23:45, 2026-09-07 15:45, 2026-09-07 23:45, 2026-09-08 07:45, 2026-09-08 15:45, 2026-09-08 23:45, 2026-09-09 07:45, 2026-09-09 15:45, 2026-09-09 23:45, 2026-09-10 07:45, 2026-09-10 15:45, 2026-09-11 07:45, 2026-09-11 15:45

Spamhaus XBL CBL

213.5.189.102 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-09-11 15:58:42.761000
Was present on blacklist at: 2026-09-04 15:58

Threat categories

TL	Role	Category	Details
40	src	—

---

Residential proxy info (data provided by Layer3 Intel)

Last seen: 2026-09-11 12:31:18}

Percent days seen: 6 %

Networks: INFATICA, BYTEPROXIES, GONZOPROXY, MANGOPROXY

Details: https://layer3intel.com/context/213.5.189.102

Origin AS

AS21299 - KAR-TEL-AS

BGP Prefix

213.5.189.0/24

geo

Kazakhstan, Almaty

🕑 Asia/Almaty

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

213.5.184.0 - 213.5.191.255

rep

0.0

reserved_range

0

Shodan's InternetDB

Open ports: 22, 123, 161, 2002, 6002

Tags: –

CPEs: cpe:/a:ntp:ntp:4, cpe:/a:cisco:telnet

ts_added

2026-09-04 15:58:30.236000

ts_last_update

2026-09-13 15:58:42.474000

Warden event timeline

DShield event timeline

Presence on blacklists