IP address

Search at other sites:

.500221.159.119.6

Shodan(more info)

Passive DNS

IP blacklists

AbuseIPDB

221.159.119.6 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-04-06 04:00:00.569000
Was present on blacklist at: 2026-01-07 05:00, 2026-01-10 05:00, 2026-01-11 05:00, 2026-01-12 05:00, 2026-01-13 05:00, 2026-01-14 05:00, 2026-01-18 05:00, 2026-01-19 05:00, 2026-01-20 05:00, 2026-01-22 05:00, 2026-01-23 05:00, 2026-01-24 05:00, 2026-02-05 05:00, 2026-02-06 05:00, 2026-02-07 05:00, 2026-02-08 05:00, 2026-02-09 05:00, 2026-02-11 05:00, 2026-02-12 05:00, 2026-02-13 05:00, 2026-02-14 05:00, 2026-02-15 05:00, 2026-02-16 05:00, 2026-02-17 05:00, 2026-02-18 05:00, 2026-02-19 05:00, 2026-02-20 05:00, 2026-02-21 05:00, 2026-02-22 05:00, 2026-02-23 05:00, 2026-02-24 05:00, 2026-02-25 05:00, 2026-02-26 05:00, 2026-02-28 05:00, 2026-03-01 05:00, 2026-03-04 05:00, 2026-03-05 05:00, 2026-03-06 05:00, 2026-03-10 05:00, 2026-03-11 05:00, 2026-03-12 05:00, 2026-03-13 05:00, 2026-03-14 05:00, 2026-03-15 05:00, 2026-03-16 05:00, 2026-03-17 05:00, 2026-03-19 05:00, 2026-03-20 05:00, 2026-03-23 05:00, 2026-03-24 05:00, 2026-03-26 05:00, 2026-03-28 05:00, 2026-03-29 04:00, 2026-03-30 04:00, 2026-03-31 04:00, 2026-04-01 04:00, 2026-04-02 04:00, 2026-04-04 04:00, 2026-04-05 04:00, 2026-04-06 04:00

Spamhaus XBL CBL

221.159.119.6 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-04-01 04:09:10.563000
Was present on blacklist at: 2026-01-07 04:09, 2026-01-14 04:09, 2026-01-21 04:09, 2026-01-28 04:09, 2026-02-04 04:09, 2026-02-11 04:09, 2026-02-18 04:09, 2026-02-25 04:09, 2026-03-04 04:09, 2026-03-11 04:09, 2026-03-18 04:09, 2026-03-25 04:09, 2026-04-01 04:09

Turris greylist

221.159.119.6 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-03 22:15:00.119000
Was present on blacklist at: 2026-01-07 22:15, 2026-01-08 22:15, 2026-01-09 22:15, 2026-01-10 22:15, 2026-01-11 22:15, 2026-01-12 22:15, 2026-01-14 22:15, 2026-01-15 22:15, 2026-01-16 22:15, 2026-01-17 22:15, 2026-01-18 22:15, 2026-01-19 22:15, 2026-01-20 22:15, 2026-01-21 22:15, 2026-01-22 22:15, 2026-01-23 22:15, 2026-01-24 22:15, 2026-01-25 22:15, 2026-02-03 22:15, 2026-02-04 22:15, 2026-02-05 22:15, 2026-02-06 22:15, 2026-02-07 22:15, 2026-02-08 22:15, 2026-02-09 22:15, 2026-02-10 22:15, 2026-02-11 22:15, 2026-02-12 22:15, 2026-02-13 22:15, 2026-02-14 22:15, 2026-02-15 22:15, 2026-02-16 22:15, 2026-02-17 22:15, 2026-02-18 22:15, 2026-02-19 22:15, 2026-02-20 22:15, 2026-02-21 22:15, 2026-02-22 22:15, 2026-02-23 22:15, 2026-02-24 22:15, 2026-02-25 22:15, 2026-02-26 22:15, 2026-02-27 22:15, 2026-02-28 22:15, 2026-03-01 22:15, 2026-03-02 22:15, 2026-03-03 22:15

UCEPROTECT L1

221.159.119.6 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-04-07 15:45:01.290000
Was present on blacklist at: 2026-01-07 08:45, 2026-01-07 16:45, 2026-01-08 00:45, 2026-01-08 08:45, 2026-01-08 16:45, 2026-01-09 00:45, 2026-01-09 08:45, 2026-01-09 16:45, 2026-01-10 00:45, 2026-01-10 08:45, 2026-01-10 16:45, 2026-01-11 00:45, 2026-01-11 08:45, 2026-01-11 16:45, 2026-01-12 00:45, 2026-01-12 08:45, 2026-01-12 16:45, 2026-01-13 00:45, 2026-01-13 08:45, 2026-01-13 16:45, 2026-01-14 00:45, 2026-01-14 08:45, 2026-01-14 16:45, 2026-01-15 00:45, 2026-01-15 08:45, 2026-01-15 16:45, 2026-01-16 00:45, 2026-01-16 08:45, 2026-01-16 16:45, 2026-01-17 00:45, 2026-01-17 08:45, 2026-01-17 16:45, 2026-01-18 00:45, 2026-01-18 08:45, 2026-02-18 00:45, 2026-02-18 16:45, 2026-02-19 00:45, 2026-02-19 08:45, 2026-02-19 16:45, 2026-02-20 00:45, 2026-02-20 08:45, 2026-02-21 08:45, 2026-02-22 08:45, 2026-02-22 16:45, 2026-02-24 00:45, 2026-02-24 08:45, 2026-02-24 16:45, 2026-02-25 00:45, 2026-02-25 08:45, 2026-02-26 00:45, 2026-02-27 08:45, 2026-02-27 16:45, 2026-02-28 08:45, 2026-03-01 16:45, 2026-03-02 08:45, 2026-03-03 08:45, 2026-03-03 16:45, 2026-03-04 00:45, 2026-03-04 08:45, 2026-03-04 16:45, 2026-03-05 00:45, 2026-03-05 08:45, 2026-03-05 16:45, 2026-03-06 00:45, 2026-03-06 08:45, 2026-03-09 08:45, 2026-03-09 16:45, 2026-03-10 00:45, 2026-03-13 00:45, 2026-03-13 08:45, 2026-03-13 16:45, 2026-03-14 00:45, 2026-03-14 08:45, 2026-03-14 16:45, 2026-03-15 00:45, 2026-03-15 08:45, 2026-03-15 16:45, 2026-03-16 00:45, 2026-03-16 08:45, 2026-03-16 16:45, 2026-03-17 00:45, 2026-03-17 08:45, 2026-03-17 16:45, 2026-03-18 00:45, 2026-03-18 08:45, 2026-03-18 16:45, 2026-03-19 00:45, 2026-03-19 08:45, 2026-03-19 16:45, 2026-03-20 00:45, 2026-03-20 08:45, 2026-03-20 16:45, 2026-03-21 00:45, 2026-03-21 08:45, 2026-03-21 16:45, 2026-03-22 00:45, 2026-03-22 08:45, 2026-03-22 16:45, 2026-03-23 00:45, 2026-03-23 08:45, 2026-03-23 16:45, 2026-03-24 00:45, 2026-03-24 08:45, 2026-03-24 16:45, 2026-03-25 00:45, 2026-03-25 08:45, 2026-03-25 16:45, 2026-03-26 00:45, 2026-03-26 08:45, 2026-03-26 16:45, 2026-03-27 00:45, 2026-03-27 08:45, 2026-03-27 16:45, 2026-03-28 00:45, 2026-03-28 08:45, 2026-03-28 16:45, 2026-03-29 00:45, 2026-03-29 07:45, 2026-03-29 15:45, 2026-03-29 23:45, 2026-03-30 07:45, 2026-03-30 15:45, 2026-03-30 23:45, 2026-03-31 07:45, 2026-03-31 15:45, 2026-03-31 23:45, 2026-04-01 07:45, 2026-04-01 15:45, 2026-04-01 23:45, 2026-04-02 07:45, 2026-04-02 15:45, 2026-04-02 23:45, 2026-04-03 07:45, 2026-04-03 15:45, 2026-04-03 23:45, 2026-04-04 23:45, 2026-04-05 07:45, 2026-04-05 15:45, 2026-04-05 23:45, 2026-04-06 07:45, 2026-04-06 15:45, 2026-04-06 23:45, 2026-04-07 07:45, 2026-04-07 15:45

Threat categories

TL	Role	Category	Details
72	src	scan	port: 80
44	src	—

---

Warden events (1303)

2026-04-07

ReconScanning (node.ce2b59): 26

2026-04-06

ReconScanning (node.ce2b59): 31

2026-04-05

ReconScanning (node.ce2b59): 31

2026-04-04

ReconScanning (node.ce2b59): 30

2026-04-03

ReconScanning (node.ce2b59): 31

2026-04-02

ReconScanning (node.ce2b59): 30

2026-04-01

ReconScanning (node.ce2b59): 32

2026-03-31

ReconScanning (node.ce2b59): 31

2026-03-30

ReconScanning (node.ce2b59): 31

2026-03-29

ReconScanning (node.ce2b59): 31

2026-03-28

ReconScanning (node.ce2b59): 31

2026-03-27

ReconScanning (node.ce2b59): 32

2026-03-26

ReconScanning (node.ce2b59): 32

2026-03-25

ReconScanning (node.ce2b59): 17

2026-02-25

ReconScanning (node.4dc198): 2

2026-02-24

ReconScanning (node.4dc198): 22

2026-02-23

ReconScanning (node.4dc198): 12

2026-02-22

ReconScanning (node.4dc198): 53

2026-02-18

ReconScanning (node.4dc198): 1

2026-02-16

ReconScanning (node.4dc198): 14

2026-02-15

ReconScanning (node.4dc198): 151

2026-02-14

ReconScanning (node.4dc198): 3

2026-02-11

ReconScanning (node.4dc198): 15

2026-02-10

ReconScanning (node.4dc198): 21

2026-02-09

ReconScanning (node.4dc198): 95

2026-02-08

ReconScanning (node.4dc198): 146

2026-02-07

ReconScanning (node.4dc198): 52

2026-02-04

ReconScanning (node.4dc198): 4

2026-02-03

ReconScanning (node.4dc198): 3

2026-02-02

ReconScanning (node.4dc198): 3

2026-01-24

ReconScanning (node.4dc198): 1

2026-01-21

ReconScanning (node.4dc198): 3

2026-01-19

ReconScanning (node.4dc198): 6

2026-01-18

ReconScanning (node.4dc198): 29

2026-01-17

ReconScanning (node.4dc198): 5

2026-01-15

ReconScanning (node.4dc198): 1

2026-01-14

ReconScanning (node.4dc198): 29

2026-01-13

ReconScanning (node.4dc198): 140

2026-01-12

ReconScanning (node.4dc198): 76

DShield reports (IP summary, reports)

2026-01-08

Number of reports: 178

Distinct targets: 65

2026-01-09

Number of reports: 148

Distinct targets: 64

2026-01-10

Number of reports: 167

Distinct targets: 68

2026-01-11

Number of reports: 167

Distinct targets: 68

2026-01-12

Number of reports: 125

Distinct targets: 57

2026-01-13

Number of reports: 132

Distinct targets: 57

2026-01-14

Number of reports: 132

Distinct targets: 57

2026-01-15

Number of reports: 167

Distinct targets: 65

2026-01-16

Number of reports: 174

Distinct targets: 68

2026-01-17

Number of reports: 174

Distinct targets: 68

2026-01-18

Number of reports: 28

Distinct targets: 19

2026-01-19

Number of reports: 23

Distinct targets: 19

2026-01-20

Number of reports: 23

Distinct targets: 19

2026-01-21

Number of reports: 27

Distinct targets: 20

2026-01-22

Number of reports: 33

Distinct targets: 22

2026-01-23

Number of reports: 139

Distinct targets: 59

2026-01-24

Number of reports: 139

Distinct targets: 59

2026-02-24

Number of reports: 150

Distinct targets: 64

2026-02-25

Number of reports: 150

Distinct targets: 64

2026-02-26

Number of reports: 135

Distinct targets: 74

2026-02-27

Number of reports: 103

Distinct targets: 67

2026-02-28

Number of reports: 109

Distinct targets: 67

2026-03-01

Number of reports: 145

Distinct targets: 72

2026-03-02

Number of reports: 126

Distinct targets: 71

2026-03-03

Number of reports: 163

Distinct targets: 71

2026-03-04

Number of reports: 147

Distinct targets: 68

2026-03-05

Number of reports: 147

Distinct targets: 68

2026-03-09

Number of reports: 138

Distinct targets: 67

2026-03-10

Number of reports: 165

Distinct targets: 73

2026-03-11

Number of reports: 144

Distinct targets: 64

2026-03-12

Number of reports: 168

Distinct targets: 70

2026-03-13

Number of reports: 168

Distinct targets: 70

2026-03-14

Number of reports: 206

Distinct targets: 74

2026-03-15

Number of reports: 189

Distinct targets: 68

2026-03-16

Number of reports: 216

Distinct targets: 75

2026-03-17

Number of reports: 175

Distinct targets: 66

2026-03-18

Number of reports: 227

Distinct targets: 85

2026-03-19

Number of reports: 191

Distinct targets: 67

2026-03-20

Number of reports: 194

Distinct targets: 76

2026-03-21

Number of reports: 215

Distinct targets: 68

2026-03-22

Number of reports: 194

Distinct targets: 73

2026-03-23

Number of reports: 185

Distinct targets: 68

2026-03-24

Number of reports: 185

Distinct targets: 68

2026-03-25

Number of reports: 176

Distinct targets: 65

2026-03-26

Number of reports: 176

Distinct targets: 65

2026-03-27

Number of reports: 168

Distinct targets: 65

2026-03-28

Number of reports: 195

Distinct targets: 73

2026-03-29

Number of reports: 195

Distinct targets: 73

2026-03-30

Number of reports: 187

Distinct targets: 72

2026-03-31

Number of reports: 187

Distinct targets: 72

2026-04-01

Number of reports: 180

Distinct targets: 73

2026-04-02

Number of reports: 187

Distinct targets: 70

2026-04-03

Number of reports: 202

Distinct targets: 70

2026-04-04

Number of reports: 203

Distinct targets: 78

2026-04-05

Number of reports: 193

Distinct targets: 70

2026-04-06

Number of reports: 217

Distinct targets: 75

OTX pulses

[6913391b9d9bde7cf68ff3c6] 2025-11-11 13:24:43.822000 | Apache honeypot logs for 11/Nov/2025

Author name:	jnazario
Pulse modified:	2025-11-11 13:24:43.822000
Indicator created:	2025-11-11 13:24:44
Indicator role:	None
Indicator title:
Indicator expiration:	2025-12-11 13:00:00

[6915dc1a5d6f1f11c99e6333] 2025-11-13 13:24:41.523000 | Apache honeypot logs for 13/Nov/2025

Author name:	jnazario
Pulse modified:	2025-11-13 13:24:41.523000
Indicator created:	2025-11-13 13:24:43
Indicator role:	None
Indicator title:
Indicator expiration:	2025-12-13 13:00:00

[69187f2de99c53003fa86453] 2025-11-15 13:24:58.531000 | Apache honeypot logs for 15/Nov/2025

Author name:	jnazario
Pulse modified:	2025-11-15 13:24:58.531000
Indicator created:	2025-11-15 13:25:01
Indicator role:	None
Indicator title:
Indicator expiration:	2025-12-15 13:00:00

[691dc50c6ad9b5d395081dd0] 2025-11-19 13:24:28.475000 | Apache honeypot logs for 19/Nov/2025

Author name:	jnazario
Pulse modified:	2025-11-19 13:24:28.475000
Indicator created:	2025-11-19 13:24:30
Indicator role:	None
Indicator title:
Indicator expiration:	2025-12-19 13:00:00

[69342ee6c1be5cc79c0f63dd] 2025-12-06 13:25:58.791000 | Apache honeypot logs for 06/Dec/2025

Author name:	jnazario
Pulse modified:	2025-12-06 13:25:58.791000
Indicator created:	2025-12-06 13:25:59
Indicator role:	None
Indicator title:
Indicator expiration:	2026-01-05 13:00:00

[693c178bbcce3efc13a751ea] 2025-12-12 13:24:27.140000 | Apache honeypot logs for 12/Dec/2025

Author name:	jnazario
Pulse modified:	2025-12-12 13:24:27.140000
Indicator created:	2025-12-12 13:24:28
Indicator role:	None
Indicator title:
Indicator expiration:	2026-01-11 13:00:00

[6955242827acb6f7d3132c36] 2025-12-31 13:24:56.310000 | Apache honeypot logs for 31/Dec/2025

Author name:	jnazario
Pulse modified:	2025-12-31 13:24:56.310000
Indicator created:	2025-12-31 13:24:57
Indicator role:	None
Indicator title:
Indicator expiration:	2026-01-30 13:00:00

[6957c6f3dac08d8afe734528] 2026-01-02 13:24:03.162000 | Apache honeypot logs for 02/Jan/2026

Author name:	jnazario
Pulse modified:	2026-01-02 13:24:03.162000
Indicator created:	2026-01-02 13:24:04
Indicator role:	None
Indicator title:
Indicator expiration:	2026-02-01 13:00:00

[699dac8622cf49a6caaf1df2] 2026-02-24 13:49:58.739000 | Apache honeypot logs for 24/Feb/2026

Author name:	jnazario
Pulse modified:	2026-02-24 13:49:58.739000
Indicator created:	2026-02-24 13:49:59
Indicator role:	None
Indicator title:
Indicator expiration:	2026-03-26 13:00:00

[69a0489b58d528b50f89e04a] 2026-02-26 13:20:27.762000 | Apache honeypot logs for 26/Feb/2026

Author name:	jnazario
Pulse modified:	2026-02-26 13:20:27.762000
Indicator created:	2026-02-26 13:20:28
Indicator role:	None
Indicator title:
Indicator expiration:	2026-03-28 13:00:00

Origin AS

AS4766 - KIXS-AS-KR KIXS-AS-KR-KR

BGP Prefix

221.152.0.0/13

geo

South Korea, Jeonju

🕑 Asia/Seoul

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

221.144.0.0 - 221.159.255.255

last_activity

2026-04-07 20:07:51

last_warden_event

2026-04-07 20:07:51

rep

0.4999999636695499

reserved_range

0

Shodan's InternetDB

Open ports: 53, 8090, 9998

Tags: scanner

CPEs: –

ts_added

2025-08-27 04:09:09.140000

ts_last_update

2026-04-07 20:10:34.387000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses