IP address


--218.18.100.189
Shodan(more info)
Passive DNS
Tags:
IP blacklists
DataPlane SSH login
218.18.100.189 is listed on the DataPlane SSH login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login to a host using SSH password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-30 10:10:01.314000
Was present on blacklist at: 2025-04-28 22:10, 2025-04-29 02:10, 2025-04-29 06:10, 2025-04-29 10:10, 2025-04-29 14:10, 2025-04-29 18:10, 2025-04-29 22:10, 2025-04-30 02:10, 2025-04-30 06:10, 2025-04-30 10:10
Origin AS
AS4134 - CHINANET-BACKBONE
BGP Prefix
218.16.0.0/14
geo
China, Guangzhou
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
218.16.0.0 - 218.19.255.255
reserved_range
0
Shodan's InternetDB
Open ports: 80, 81, 443, 2080, 3306, 6379, 8848, 9200, 9876
Tags: database, eol-product, self-signed
CPEs: cpe:/a:jquery:jquery, cpe:/a:f5:nginx:1.23.1, cpe:/a:oracle:mysql:8.0.37, cpe:/a:f5:nginx, cpe:/a:elastic:elasticsearch:7.7.0, cpe:/a:rubyonrails:rails, cpe:/a:redislabs:redis, cpe:/a:gitlab:gitlab, cpe:/a:apache:http_server, cpe:/a:apache:rocketmq:5.2.0, cpe:/a:ruby-lang:ruby
ts_added
2025-04-28 22:11:52.109000
ts_last_update
2025-04-30 10:11:47.680000

Warden event timeline

DShield event timeline

Presence on blacklists