IP address

Search at other sites:
--146.70.253.107
Shodan(more info)
Passive DNS
Tags:
IP blacklists
ThreatFox
146.70.253.107 is listed on the ThreatFox blacklist.

Description: ThreatFox is a free platform from abuse.ch with the goal of<br>sharing indicators of compromise (IOCs) associated with malware with the<br>infosec community, AV vendors and threat intelligence providers.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-13 11:10:00.196000
Was present on blacklist at: 2025-12-11 15:10, 2025-12-11 19:10, 2025-12-11 23:10, 2025-12-12 03:10, 2025-12-12 07:10, 2025-12-12 11:10, 2025-12-12 15:10, 2025-12-12 19:10, 2025-12-12 23:10, 2025-12-13 03:10, 2025-12-13 07:10, 2025-12-13 11:10
OTX pulses
[69171fd18d6bf2d291a8c53e] 2025-11-14 12:25:53.286000 | Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery
Author name:AlienVault
Pulse modified:2025-11-14 12:28:12.968000
Indicator created:2025-11-14 12:25:54
Indicator role:None
Indicator title:
Indicator expiration:2025-12-14 12:00:00
Origin AS
AS9009 - M247
BGP Prefix
146.70.253.0/24
geo
France, Paris
🕑 Europe/Paris
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
146.70.0.0 - 146.70.255.255
last_activity
2025-11-14 16:38:30.970000
reserved_range
0
Shodan's InternetDB
Open ports: 80, 135, 139, 443, 445, 3306, 5985, 47001
Tags: database, self-signed
CPEs: cpe:/a:php:php:8.1.25, cpe:/a:jquery:jquery:1.10.2, cpe:/a:openssl:openssl:3.1.3, cpe:/a:apache:http_server:2.4.58, cpe:/a:mariadb:mariadb
ts_added
2025-11-14 16:38:31.003000
ts_last_update
2025-12-15 16:38:40.409000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses