IP address

Search at other sites:

.031221.139.5.214

Shodan(more info)

Passive DNS

IP blacklists

CI Army

221.139.5.214 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-05-08 02:50:01.029000
Was present on blacklist at: 2024-03-11 03:50, 2024-03-13 03:50, 2024-03-18 03:50, 2024-03-25 03:50, 2024-03-26 03:50, 2024-03-27 03:50, 2024-03-28 03:50, 2024-03-29 03:50, 2024-03-30 03:50, 2024-03-31 02:50, 2024-04-01 02:50, 2024-04-02 02:50, 2024-04-03 02:50, 2024-04-04 02:50, 2024-04-06 02:50, 2024-04-08 02:50, 2024-04-09 02:50, 2024-04-12 02:50, 2024-04-13 02:50, 2024-04-14 02:50, 2024-04-15 02:50, 2024-04-16 02:50, 2024-04-17 02:50, 2024-04-26 02:50, 2024-04-27 02:50, 2024-04-28 02:50, 2024-05-01 02:50, 2024-05-02 02:50, 2024-05-03 02:50, 2024-05-04 02:50, 2024-05-05 02:50, 2024-05-06 02:50, 2024-05-07 02:50, 2024-05-08 02:50

Spamhaus XBL CBL

221.139.5.214 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-05-06 04:02:20.744000
Was present on blacklist at: 2024-03-11 04:02, 2024-03-18 04:02, 2024-03-25 04:02, 2024-04-01 04:02, 2024-04-08 04:02, 2024-04-15 04:02, 2024-04-22 04:02, 2024-04-29 04:02, 2024-05-06 04:02

SORBS DUL

221.139.5.214 is listed on the SORBS DUL blacklist.

Description: Dynamic IP Addresses.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-05-06 04:02:20.744000
Was present on blacklist at: 2024-03-11 04:02, 2024-03-18 04:02, 2024-03-25 04:02, 2024-04-01 04:02, 2024-04-08 04:02, 2024-04-15 04:02, 2024-04-22 04:02, 2024-04-29 04:02, 2024-05-06 04:02

Mirai tracker

221.139.5.214 is listed on the Mirai tracker blacklist.

Description: IPs scanning the internet in a specific way known to be used by Mirai malware and its variants.
Type of feed: primary (feed detail page)

Last checked at: 2024-04-08 23:40:00.389000
Was present on blacklist at: 2024-04-05 23:40, 2024-04-06 23:40, 2024-04-07 23:40, 2024-04-08 23:40

Warden events (4)

2024-05-07

ReconScanning (node.7d83c0): 1

2024-04-21

ReconScanning (node.7d83c0): 1

2024-03-23

ReconScanning (node.7d83c0): 1

2024-03-20

ReconScanning (node.7d83c0): 1

Origin AS

AS9318 - SKB-AS SKB-AS-KR

BGP Prefix

221.138.0.0/15

geo

South Korea, Seoul

🕑 Asia/Seoul

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

221.138.0.0 - 221.139.255.255

last_activity

2024-05-07 01:01:27

last_warden_event

2024-05-07 01:01:27

rep

0.030952380952380953

reserved_range

0

ts_added

2024-03-11 04:02:16.778000

ts_last_update

2024-05-08 04:02:20.641000

Warden event timeline

DShield event timeline

Presence on blacklists