IP address

Search at other sites:

.621121.148.71.200

Shodan(more info)

Passive DNS

IP blacklists

Turris greylist

121.148.71.200 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-03 22:15:00.119000
Was present on blacklist at: 2026-01-09 22:15, 2026-01-11 22:15, 2026-01-17 22:15, 2026-01-19 22:15, 2026-01-21 22:15, 2026-01-22 22:15, 2026-01-26 22:15, 2026-01-27 22:15, 2026-01-28 22:15, 2026-01-31 22:15, 2026-02-02 22:15, 2026-02-08 22:15, 2026-02-10 22:15, 2026-02-12 22:15, 2026-02-15 22:15, 2026-02-17 22:15, 2026-02-20 22:15, 2026-02-21 22:15, 2026-02-27 22:15, 2026-03-03 22:15

Blocklist.net.ua

121.148.71.200 is listed on the Blocklist.net.ua blacklist.

Description: BlockList contains IP addresses that perform attacks,<br>send spam or brute force passwords to the blocking list.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-04 11:15:01.576000
Was present on blacklist at: 2026-01-11 11:15, 2026-01-11 15:15, 2026-01-11 19:15, 2026-01-11 23:15, 2026-01-12 03:15, 2026-01-12 07:15, 2026-01-13 07:15, 2026-01-13 11:15, 2026-01-13 15:15, 2026-01-13 19:15, 2026-01-13 23:15, 2026-01-14 03:15, 2026-01-14 15:15, 2026-01-14 19:15, 2026-01-14 23:15, 2026-01-15 03:15, 2026-01-15 07:15, 2026-01-15 11:15, 2026-01-15 15:15, 2026-01-15 19:15, 2026-01-15 23:15, 2026-01-16 03:15, 2026-01-16 07:15, 2026-01-16 11:15, 2026-01-16 15:15, 2026-01-16 19:15, 2026-01-16 23:15, 2026-01-17 03:15, 2026-01-17 07:15, 2026-01-17 11:15, 2026-01-17 15:15, 2026-01-17 19:15, 2026-01-17 23:15, 2026-01-18 03:15, 2026-01-18 07:15, 2026-01-18 11:15, 2026-01-18 15:15, 2026-01-18 19:15, 2026-01-18 23:15, 2026-01-19 03:15, 2026-01-19 07:15, 2026-01-19 11:15, 2026-01-19 15:15, 2026-01-19 19:15, 2026-01-19 23:15, 2026-01-20 03:15, 2026-01-20 07:15, 2026-01-20 11:15, 2026-01-20 15:15, 2026-01-20 19:15, 2026-01-20 23:15, 2026-01-21 03:15, 2026-01-21 07:15, 2026-01-21 11:15, 2026-01-22 11:15, 2026-01-22 15:15, 2026-01-22 19:15, 2026-01-22 23:15, 2026-01-23 03:15, 2026-01-23 07:15, 2026-01-23 11:15, 2026-01-23 15:15, 2026-01-23 19:15, 2026-01-23 23:15, 2026-01-24 03:15, 2026-01-24 07:15, 2026-01-24 11:15, 2026-01-24 15:15, 2026-01-24 19:15, 2026-01-24 23:15, 2026-01-25 03:15, 2026-01-25 07:15, 2026-01-25 11:15, 2026-01-25 15:15, 2026-01-25 19:15, 2026-01-25 23:15, 2026-01-26 03:15, 2026-01-26 07:15, 2026-01-26 11:15, 2026-01-26 15:15, 2026-01-26 19:15, 2026-01-26 23:15, 2026-01-27 03:15, 2026-01-27 07:15, 2026-01-27 11:15, 2026-01-27 15:15, 2026-01-27 19:15, 2026-01-27 23:15, 2026-01-28 03:15, 2026-01-28 07:15, 2026-01-28 11:15, 2026-01-28 15:15, 2026-01-28 19:15, 2026-01-28 23:15, 2026-01-29 03:15, 2026-01-29 07:15, 2026-01-29 11:15, 2026-01-29 15:15, 2026-01-29 19:15, 2026-01-29 23:15, 2026-01-30 03:15, 2026-01-30 07:15, 2026-01-30 11:15, 2026-01-30 15:15, 2026-01-30 19:15, 2026-01-30 23:15, 2026-01-31 03:15, 2026-01-31 07:15, 2026-01-31 11:15, 2026-01-31 15:15, 2026-01-31 19:15, 2026-01-31 23:15, 2026-02-01 03:15, 2026-02-01 07:15, 2026-02-01 11:15, 2026-02-01 15:15, 2026-02-01 19:15, 2026-02-01 23:15, 2026-02-02 03:15, 2026-02-02 07:15, 2026-02-02 11:15, 2026-02-02 15:15, 2026-02-02 19:15, 2026-02-02 23:15, 2026-02-03 03:15, 2026-02-03 07:15, 2026-02-03 11:15, 2026-02-03 15:15, 2026-02-03 19:15, 2026-02-03 23:15, 2026-02-04 03:15, 2026-02-04 07:15, 2026-02-04 11:15, 2026-02-04 15:15, 2026-02-04 19:15, 2026-02-04 23:15, 2026-02-05 03:15, 2026-02-05 07:15, 2026-02-05 11:15, 2026-02-05 15:15, 2026-02-05 19:15, 2026-02-05 23:15, 2026-02-06 03:15, 2026-02-06 07:15, 2026-02-06 11:15, 2026-02-06 15:15, 2026-02-06 19:15, 2026-02-06 23:15, 2026-02-07 03:15, 2026-02-07 07:15, 2026-02-07 11:15, 2026-02-07 15:15, 2026-02-07 19:15, 2026-02-07 23:15, 2026-02-08 03:15, 2026-02-08 07:15, 2026-02-08 11:15, 2026-02-08 15:15, 2026-02-08 19:15, 2026-02-08 23:15, 2026-02-09 03:15, 2026-02-09 07:15, 2026-02-09 11:15, 2026-02-09 15:15, 2026-02-09 19:15, 2026-02-09 23:15, 2026-02-10 03:15, 2026-02-10 07:15, 2026-02-10 11:15, 2026-02-10 15:15, 2026-02-10 19:15, 2026-02-10 23:15, 2026-02-11 03:15, 2026-02-11 07:15, 2026-02-11 11:15, 2026-02-11 15:15, 2026-02-11 19:15, 2026-02-11 23:15, 2026-02-12 03:15, 2026-02-12 07:15, 2026-02-12 11:15, 2026-02-12 15:15, 2026-02-12 19:15, 2026-02-12 23:15, 2026-02-13 03:15, 2026-02-13 07:15, 2026-02-13 11:15, 2026-02-13 15:15, 2026-02-13 19:15, 2026-02-13 23:15, 2026-02-14 03:15, 2026-02-14 07:15, 2026-02-14 11:15, 2026-02-14 15:15, 2026-02-14 19:15, 2026-02-14 23:15, 2026-02-15 03:15, 2026-02-15 07:15, 2026-02-15 11:15, 2026-02-15 15:15, 2026-02-15 19:15, 2026-02-15 23:15, 2026-02-16 03:15, 2026-02-16 07:15, 2026-02-16 11:15, 2026-02-16 15:15, 2026-02-16 19:15, 2026-02-16 23:15, 2026-02-17 03:15, 2026-02-17 07:15, 2026-02-17 11:15, 2026-02-17 15:15, 2026-02-17 19:15, 2026-02-17 23:15, 2026-02-18 03:15, 2026-02-18 07:15, 2026-02-18 11:15, 2026-02-18 15:15, 2026-02-18 19:15, 2026-02-18 23:15, 2026-02-19 03:15, 2026-02-19 07:15, 2026-02-19 11:15, 2026-02-19 15:15, 2026-02-19 19:15, 2026-02-19 23:15, 2026-02-20 03:15, 2026-02-20 07:15, 2026-02-20 11:15, 2026-02-20 15:15, 2026-02-20 19:15, 2026-02-20 23:15, 2026-02-21 03:15, 2026-02-21 07:15, 2026-02-21 19:15, 2026-02-21 23:15, 2026-02-22 03:15, 2026-02-22 07:15, 2026-02-22 11:15, 2026-02-22 15:15, 2026-02-23 19:15, 2026-02-23 23:15, 2026-02-24 03:15, 2026-02-24 07:15, 2026-02-24 11:15, 2026-02-24 15:15, 2026-02-28 15:15, 2026-02-28 19:15, 2026-02-28 23:15, 2026-03-01 03:15, 2026-03-01 07:15, 2026-03-01 11:15, 2026-03-01 15:15, 2026-03-01 19:15, 2026-03-01 23:15, 2026-03-02 03:15, 2026-03-02 07:15, 2026-03-02 11:15, 2026-03-02 15:15, 2026-03-02 19:15, 2026-03-02 23:15, 2026-03-03 03:15, 2026-03-03 07:15, 2026-03-03 11:15, 2026-03-03 15:15, 2026-03-03 19:15, 2026-03-03 23:15, 2026-03-04 03:15, 2026-03-04 07:15, 2026-03-04 11:15

blocklist.de FTP

121.148.71.200 is listed on the blocklist.de FTP blacklist.

Description: Blocklist.de feed is a free and voluntary service<br>provided by a Fraud/Abuse-specialist. IPs performing attacks<br>on the Service FTP.
Type of feed: primary (feed detail page)

Last checked at: 2026-04-06 04:05:05.043000
Was present on blacklist at: 2026-02-07 05:05, 2026-02-07 11:05, 2026-02-07 17:05, 2026-02-07 23:05, 2026-02-08 05:05, 2026-02-08 11:05, 2026-02-08 17:05, 2026-02-08 23:05, 2026-02-14 05:05, 2026-02-14 11:05, 2026-02-14 17:05, 2026-02-14 23:05, 2026-02-15 05:05, 2026-02-15 11:05, 2026-02-15 17:05, 2026-02-15 23:05, 2026-02-16 05:05, 2026-02-16 11:05, 2026-02-16 17:05, 2026-02-16 23:05, 2026-02-17 05:05, 2026-02-17 11:05, 2026-02-17 17:05, 2026-02-17 23:05, 2026-03-17 23:05, 2026-03-18 05:05, 2026-03-18 11:05, 2026-03-18 17:05, 2026-03-18 23:05, 2026-03-19 05:05, 2026-03-19 11:05, 2026-03-19 17:05, 2026-03-31 04:05, 2026-03-31 10:05, 2026-03-31 16:05, 2026-03-31 22:05, 2026-04-01 04:05, 2026-04-01 10:05, 2026-04-01 16:05, 2026-04-01 22:05, 2026-04-02 04:05, 2026-04-02 10:05, 2026-04-02 16:05, 2026-04-02 22:05, 2026-04-03 04:05, 2026-04-04 10:05, 2026-04-04 16:05, 2026-04-04 22:05, 2026-04-05 04:05, 2026-04-05 10:05, 2026-04-05 16:05, 2026-04-05 22:05, 2026-04-06 04:05

blocklist.de web-login

121.148.71.200 is listed on the blocklist.de web-login blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and<br>other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)

Last checked at: 2026-02-03 23:05:00.496000
Was present on blacklist at: 2026-02-02 05:05, 2026-02-02 11:05, 2026-02-02 17:05, 2026-02-02 23:05, 2026-02-03 05:05, 2026-02-03 11:05, 2026-02-03 17:05, 2026-02-03 23:05

blocklist.de Apache

121.148.71.200 is listed on the blocklist.de Apache blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the service<br>Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-02-03 23:05:00.570000
Was present on blacklist at: 2026-02-02 05:05, 2026-02-02 11:05, 2026-02-02 17:05, 2026-02-02 23:05, 2026-02-03 05:05, 2026-02-03 11:05, 2026-02-03 17:05, 2026-02-03 23:05

Spamhaus PBL

121.148.71.200 is listed on the Spamhaus PBL blacklist.

Description: The Spamhaus PBL is a DNSBL database of end-user IP address ranges which should not be delivering unauthenticated SMTP email to any Internet mail server except those provided for specifically by an ISP for that customer's use.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-04-01 08:20:11.090000
Was present on blacklist at: 2026-03-09 20:11, 2026-03-11 08:20, 2026-03-18 08:20, 2026-03-25 08:20, 2026-04-01 08:20

AbuseIPDB

121.148.71.200 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-04-01 04:00:00.603000
Was present on blacklist at: 2026-04-01 04:00

Threat categories

TL	Role	Category	Details
50	src	login	protocol: ftp port: 21
49	src	scan	port: many
39	src	—

---

Warden events (33733)

2026-04-07

ReconScanning (node.ce2b59): 7

IntrusionUserCompromise (node.cfb4f7): 745

2026-04-06

ReconScanning (node.ce2b59): 6

IntrusionUserCompromise (node.cfb4f7): 1253

2026-04-05

ReconScanning (node.ce2b59): 8

2026-04-04

ReconScanning (node.ce2b59): 8

IntrusionUserCompromise (node.cfb4f7): 728

2026-04-03

ReconScanning (node.ce2b59): 6

2026-04-02

ReconScanning (node.ce2b59): 4

2026-04-01

IntrusionUserCompromise (node.cfb4f7): 617

ReconScanning (node.ce2b59): 4

2026-03-31

ReconScanning (node.ce2b59): 9

2026-03-30

ReconScanning (node.ce2b59): 5

2026-03-29

ReconScanning (node.ce2b59): 8

2026-03-28

ReconScanning (node.ce2b59): 4

IntrusionUserCompromise (node.cfb4f7): 733

2026-03-27

ReconScanning (node.ce2b59): 4

IntrusionUserCompromise (node.cfb4f7): 936

2026-03-26

IntrusionUserCompromise (node.cfb4f7): 374

ReconScanning (node.ce2b59): 5

2026-03-24

IntrusionUserCompromise (node.cfb4f7): 734

2026-03-21

IntrusionUserCompromise (node.cfb4f7): 560

2026-03-20

IntrusionUserCompromise (node.cfb4f7): 769

2026-03-17

IntrusionUserCompromise (node.cfb4f7): 2

2026-03-16

IntrusionUserCompromise (node.cfb4f7): 1860

2026-03-14

IntrusionUserCompromise (node.cfb4f7): 6

2026-03-13

IntrusionUserCompromise (node.cfb4f7): 929

2026-03-12

IntrusionUserCompromise (node.cfb4f7): 683

2026-03-09

IntrusionUserCompromise (node.cfb4f7): 6

2026-03-07

IntrusionUserCompromise (node.cfb4f7): 930

2026-03-06

IntrusionUserCompromise (node.cfb4f7): 529

2026-03-04

IntrusionUserCompromise (node.cfb4f7): 416

2026-03-03

IntrusionUserCompromise (node.cfb4f7): 363

2026-03-02

IntrusionUserCompromise (node.cfb4f7): 423

2026-03-01

IntrusionUserCompromise (node.cfb4f7): 282

2026-02-28

IntrusionUserCompromise (node.cfb4f7): 237

2026-02-26

IntrusionUserCompromise (node.cfb4f7): 541

2026-02-24

IntrusionUserCompromise (node.cfb4f7): 490

2026-02-22

IntrusionUserCompromise (node.cfb4f7): 332

2026-02-20

IntrusionUserCompromise (node.cfb4f7): 555

2026-02-19

IntrusionUserCompromise (node.cfb4f7): 657

2026-02-18

IntrusionUserCompromise (node.cfb4f7): 938

2026-02-16

IntrusionUserCompromise (node.cfb4f7): 430

2026-02-14

IntrusionUserCompromise (node.cfb4f7): 732

2026-02-11

IntrusionUserCompromise (node.cfb4f7): 855

2026-02-09

IntrusionUserCompromise (node.cfb4f7): 286

2026-02-08

IntrusionUserCompromise (node.cfb4f7): 514

2026-02-07

IntrusionUserCompromise (node.cfb4f7): 636

2026-02-06

IntrusionUserCompromise (node.cfb4f7): 331

2026-02-05

IntrusionUserCompromise (node.cfb4f7): 348

2026-02-01

IntrusionUserCompromise (node.cfb4f7): 626

2026-01-31

IntrusionUserCompromise (node.cfb4f7): 277

2026-01-30

IntrusionUserCompromise (node.cfb4f7): 297

2026-01-29

IntrusionUserCompromise (node.cfb4f7): 391

2026-01-27

IntrusionUserCompromise (node.cfb4f7): 1703

2026-01-25

IntrusionUserCompromise (node.cfb4f7): 1142

2026-01-24

IntrusionUserCompromise (node.cfb4f7): 410

2026-01-23

IntrusionUserCompromise (node.cfb4f7): 442

2026-01-21

IntrusionUserCompromise (node.cfb4f7): 893

2026-01-20

IntrusionUserCompromise (node.cfb4f7): 785

2026-01-19

IntrusionUserCompromise (node.cfb4f7): 524

2026-01-18

IntrusionUserCompromise (node.cfb4f7): 500

2026-01-17

IntrusionUserCompromise (node.cfb4f7): 257

2026-01-16

IntrusionUserCompromise (node.cfb4f7): 534

2026-01-14

IntrusionUserCompromise (node.cfb4f7): 488

2026-01-12

IntrusionUserCompromise (node.cfb4f7): 929

2026-01-10

IntrusionUserCompromise (node.cfb4f7): 2

2026-01-09

IntrusionUserCompromise (node.cfb4f7): 1689

2026-01-08

IntrusionUserCompromise (node.cfb4f7): 6

Origin AS

AS4766 - KIXS-AS-KR KIXS-AS-KR-KR

BGP Prefix

121.144.0.0/13

dshield

[]

geo

South Korea, Naju

🕑 Asia/Seoul

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

121.128.0.0 - 121.159.255.255

last_activity

2026-04-07 14:22:33

last_warden_event

2026-04-07 14:22:33

rep

0.6214936755952379

reserved_range

0

Shodan's InternetDB

Open ports: 21, 80, 1521, 10443, 51000, 51001, 51003

Tags: self-signed

CPEs: cpe:/a:microsoft:internet_information_services:8.5, cpe:/o:microsoft:windows

ts_added

2024-07-24 08:20:08.044000

ts_last_update

2026-04-07 14:24:50.488000

Warden event timeline

DShield event timeline

Presence on blacklists