IP address

Shodan(more info)

Passive DNS

Tags:

IP blacklists: CI Army
36.139.138.72 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-11-03 03:50:00.835000
Was present on blacklist at: 2025-11-01 03:50, 2025-11-03 03:50

Origin AS: AS9808 - CMNET-GD
BGP Prefix: 36.139.138.0/24
geo: China; 🕑 Asia/Shanghai
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 36.128.0.0 - 36.191.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 123, 135, 1433, 5357, 5985; Tags: database; CPEs: cpe:/a:microsoft:sql_server:12.0.2000.0
ts_added: 2025-11-01 03:50:27.221000
ts_last_update: 2025-11-03 03:51:20.576000

Warden event timeline

DShield event timeline

Presence on blacklists