IP address

Passive DNS

Tags:

IP blacklists: UCEPROTECT L1
159.253.120.177 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-29 15:45:00.699000
Was present on blacklist at: 2025-04-22 23:45, 2025-04-23 07:45, 2025-04-23 15:45, 2025-04-23 23:45, 2025-04-24 07:45, 2025-04-24 15:45, 2025-04-24 23:45, 2025-04-25 07:45, 2025-04-25 15:45, 2025-04-25 23:45, 2025-04-26 07:45, 2025-04-26 15:45, 2025-04-26 23:45, 2025-04-27 07:45, 2025-04-27 15:45, 2025-04-27 23:45, 2025-04-28 07:45, 2025-04-28 15:45, 2025-04-28 23:45, 2025-04-29 07:45, 2025-04-29 15:45
Spamhaus SBL
159.253.120.177 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-04-29 23:54:02.050000
Was present on blacklist at: 2025-04-22 23:53, 2025-04-29 23:54
Spamhaus SBL CSS
159.253.120.177 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-04-29 23:54:02.050000
Was present on blacklist at: 2025-04-22 23:53

Origin AS: AS200019 - AlexHost
BGP Prefix: 159.253.120.0/24
geo: Moldova; 🕑 Europe/Chisinau
hostname: franceclef.com
Address block ('inetnum' or 'NetRange' in whois database): 159.253.120.0 - 159.253.120.255
reserved_range: 0
Shodan's InternetDB: Open ports: 21, 22, 25, 80, 110, 143, 443, 465, 587, 993, 995, 3306, 5432, 6379, 7777, 8888, 33060; Tags: compromised, starttls, self-signed, database, eol-product; CPEs: cpe:/a:redislabs:redis:7.0.15, cpe:/a:f5:nginx:1.26.2, cpe:/a:postgresql:postgresql:15, cpe:/a:openbsd:openssh:9.2p1, cpe:/o:linux:linux_kernel, cpe:/a:exim:exim:4.96, cpe:/a:postfix:postfix, cpe:/a:oracle:mysql, cpe:/a:f5:nginx, cpe:/o:debian:debian_linux
ts_added: 2025-04-22 23:53:59.172000
ts_last_update: 2025-04-30 23:54:06.362000

Warden event timeline

DShield event timeline

Presence on blacklists