IP address

Passive DNS

Tags: IP in hostname

IP blacklists: Mirai tracker
122.103.108.195 is listed on the Mirai tracker blacklist.

Description: IPs scanning the internet in a specific way known to be used by Mirai malware and its variants.
Type of feed: primary (feed detail page)

Last checked at: 2025-05-12 23:40:00.454000
Was present on blacklist at: 2025-04-26 23:40, 2025-04-27 23:40, 2025-04-28 23:40, 2025-04-29 23:40, 2025-04-30 23:40, 2025-05-01 23:40, 2025-05-02 23:40, 2025-05-03 23:40, 2025-05-04 23:40, 2025-05-05 23:40, 2025-05-06 23:40, 2025-05-07 23:40, 2025-05-08 23:40, 2025-05-09 23:40, 2025-05-10 23:40, 2025-05-11 23:40, 2025-05-12 23:40
Spamhaus XBL CBL
122.103.108.195 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-05-10 23:40:10.353000
Was present on blacklist at: 2025-04-26 23:40, 2025-05-03 23:40, 2025-05-10 23:40

Origin AS: AS2519 - JPNIC-2Byte-ASBLOCK-AP VECTANT
BGP Prefix: 122.103.0.0/17
geo: Japan, Muromi; 🕑 Asia/Tokyo
hostname: 122-103-108-195.fukuoka.ap.gmo-isp.jp
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 122.103.0.0 - 122.103.127.255
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 500; Tags: vpn; CPEs: –
ts_added: 2025-04-26 23:40:01.550000
ts_last_update: 2025-05-12 23:40:12.935000

Warden event timeline

DShield event timeline

Presence on blacklists