IP address

Passive DNS

Tags:

IP blacklists: DataPlane SIP query
216.238.79.164 is listed on the DataPlane SIP query blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SIP OPTIONS query to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-10-15 14:10:01.236000
Was present on blacklist at: 2025-10-10 14:10, 2025-10-10 18:10, 2025-10-11 02:10, 2025-10-11 14:10, 2025-10-11 18:10, 2025-10-12 02:10, 2025-10-12 06:10, 2025-10-12 14:10, 2025-10-12 18:10, 2025-10-13 02:10, 2025-10-13 06:10, 2025-10-13 14:10, 2025-10-13 18:10, 2025-10-14 02:10, 2025-10-14 06:10, 2025-10-14 14:10, 2025-10-14 18:10, 2025-10-14 22:10, 2025-10-15 02:10, 2025-10-15 06:10, 2025-10-15 10:10, 2025-10-15 14:10

Origin AS: AS20473 - AS-CHOOPA
BGP Prefix: 216.238.76.0/22
geo: Mexico, Querétaro City; 🕑 America/Mexico_City
hostname: ciprianipbx.cloudteam.net
Address block ('inetnum' or 'NetRange' in whois database): 216.238.64.0 - 216.238.127.255
reserved_range: 0
Shodan's InternetDB: Open ports: 25, 80, 110, 161, 443, 993, 2222, 5060, 8089; Tags: eol-product, starttls, self-signed, cloud; CPEs: cpe:/a:postfix:postfix, cpe:/a:openssl:openssl:1.0.2k, cpe:/a:php:php:5.4.16, cpe:/a:openbsd:openssh:7.4, cpe:/a:apache:http_server:2.4.6, cpe:/o:centos:centos
ts_added: 2025-10-10 14:22:12.217000
ts_last_update: 2025-10-15 14:22:21.073000

Warden event timeline

DShield event timeline

Presence on blacklists