IP address

Passive DNS

Tags: IP in hostname

IP blacklists: CI Army
148.72.208.96 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-12-16 03:50:00.961000
Was present on blacklist at: 2025-12-14 03:50, 2025-12-15 03:50, 2025-12-16 03:50
FireHOL anonymizers
148.72.208.96 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2025-12-16 00:05:09
Was present on blacklist at: 2025-12-14 00:05, 2025-12-15 00:05, 2025-12-16 00:05

Origin AS: AS26496 - AS-26496-GO-DADDY-COM-LLC
BGP Prefix: 148.72.208.0/21
geo: Singapore, Singapore; 🕑 Asia/Singapore
hostname: 96.208.72.148.host.secureserver.net
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 148.72.192.0 - 148.72.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 21, 22, 53, 80, 110, 111, 143, 443, 465, 587, 995, 2082, 2083, 2086, 2087, 3001, 3306; Tags: database, starttls; CPEs: cpe:/a:apache:http_server, cpe:/a:cpanel:whm, cpe:/a:oracle:mysql, cpe:/a:openbsd:openssh:7.4, cpe:/a:exim:exim:4.98.1, cpe:/a:cpanel:cpanel, cpe:/a:pureftpd:pure-ftpd
ts_added: 2025-12-14 03:55:30.904000
ts_last_update: 2025-12-16 03:55:40.276000

Warden event timeline

DShield event timeline

Presence on blacklists