IP address

Search at other sites:

.51467.213.118.179

Shodan(more info)

Passive DNS

IP blacklists

CI Army

67.213.118.179 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-04-06 02:50:00.993000
Was present on blacklist at: 2026-01-11 03:50, 2026-01-20 03:50, 2026-01-21 03:50, 2026-01-23 03:50, 2026-01-24 03:50, 2026-01-25 03:50, 2026-01-26 03:50, 2026-02-15 03:50, 2026-02-17 03:50, 2026-02-18 03:50, 2026-02-19 03:50, 2026-02-20 03:50, 2026-02-21 03:50, 2026-02-22 03:50, 2026-02-23 03:50, 2026-02-24 03:50, 2026-02-25 03:50, 2026-02-26 03:50, 2026-02-27 03:50, 2026-02-28 03:50, 2026-03-01 03:50, 2026-03-02 03:50, 2026-03-06 03:50, 2026-03-10 03:50, 2026-03-11 03:50, 2026-03-12 03:50, 2026-03-13 03:50, 2026-03-14 03:50, 2026-03-15 03:50, 2026-03-16 03:50, 2026-03-17 03:50, 2026-03-18 03:50, 2026-03-19 03:50, 2026-03-20 03:50, 2026-03-21 03:50, 2026-03-25 03:50, 2026-03-26 03:50, 2026-03-28 03:50, 2026-03-31 02:50, 2026-04-01 02:50, 2026-04-02 02:50, 2026-04-03 02:50, 2026-04-06 02:50

AbuseIPDB

67.213.118.179 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-03-27 05:00:00.578000
Was present on blacklist at: 2026-01-28 05:00, 2026-01-29 05:00, 2026-02-04 05:00, 2026-02-07 05:00, 2026-02-17 05:00, 2026-02-18 05:00, 2026-02-19 05:00, 2026-02-25 05:00, 2026-03-01 05:00, 2026-03-06 05:00, 2026-03-11 05:00, 2026-03-27 05:00

Turris greylist

67.213.118.179 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-01 22:15:00.132000
Was present on blacklist at: 2026-01-22 22:15, 2026-01-26 22:15, 2026-01-29 22:15, 2026-02-15 22:15, 2026-02-18 22:15, 2026-02-19 22:15, 2026-02-22 22:15, 2026-02-28 22:15, 2026-03-01 22:15

blocklist.de bots

67.213.118.179 is listed on the blocklist.de bots blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the RFI-Attacks,<br>REG-Bots, IRC-Bots or BadBots.
Type of feed: primary (feed detail page)

Last checked at: 2026-02-08 23:05:05.193000
Was present on blacklist at: 2026-01-27 23:05, 2026-02-07 05:05, 2026-02-07 11:05, 2026-02-07 17:05, 2026-02-07 23:05, 2026-02-08 05:05, 2026-02-08 11:05, 2026-02-08 17:05, 2026-02-08 23:05

UCEPROTECT L1

67.213.118.179 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-04-06 15:45:01.104000
Was present on blacklist at: 2026-01-28 00:45, 2026-01-28 08:45, 2026-01-29 00:45, 2026-01-30 08:45, 2026-01-31 00:45, 2026-01-31 08:45, 2026-01-31 16:45, 2026-02-03 00:45, 2026-02-03 08:45, 2026-02-18 00:45, 2026-02-18 16:45, 2026-02-19 00:45, 2026-02-19 08:45, 2026-02-19 16:45, 2026-02-20 00:45, 2026-02-20 08:45, 2026-02-21 08:45, 2026-02-22 08:45, 2026-02-22 16:45, 2026-02-24 00:45, 2026-02-24 08:45, 2026-02-24 16:45, 2026-02-25 00:45, 2026-02-25 08:45, 2026-02-26 00:45, 2026-02-27 08:45, 2026-02-27 16:45, 2026-02-28 08:45, 2026-03-01 16:45, 2026-03-02 08:45, 2026-03-02 16:45, 2026-03-03 00:45, 2026-03-03 08:45, 2026-03-03 16:45, 2026-03-04 00:45, 2026-03-04 08:45, 2026-03-04 16:45, 2026-03-05 00:45, 2026-03-05 08:45, 2026-03-05 16:45, 2026-03-06 00:45, 2026-03-06 08:45, 2026-03-25 08:45, 2026-03-25 16:45, 2026-03-26 00:45, 2026-03-26 08:45, 2026-03-26 16:45, 2026-03-27 00:45, 2026-03-27 08:45, 2026-03-27 16:45, 2026-03-28 00:45, 2026-03-28 08:45, 2026-03-28 16:45, 2026-03-29 00:45, 2026-03-29 07:45, 2026-03-29 15:45, 2026-03-29 23:45, 2026-03-30 07:45, 2026-03-30 15:45, 2026-03-30 23:45, 2026-03-31 07:45, 2026-03-31 15:45, 2026-03-31 23:45, 2026-04-01 07:45, 2026-04-01 15:45, 2026-04-01 23:45, 2026-04-02 07:45, 2026-04-02 15:45, 2026-04-02 23:45, 2026-04-03 07:45, 2026-04-03 15:45, 2026-04-03 23:45, 2026-04-04 07:45, 2026-04-04 15:45, 2026-04-04 23:45, 2026-04-05 07:45, 2026-04-05 15:45, 2026-04-05 23:45, 2026-04-06 07:45, 2026-04-06 15:45

blocklist.de Apache

67.213.118.179 is listed on the blocklist.de Apache blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the service<br>Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-28 17:05:00.351000
Was present on blacklist at: 2026-01-28 05:05, 2026-01-28 11:05, 2026-01-28 17:05, 2026-01-28 23:05, 2026-01-29 05:05, 2026-01-29 11:05, 2026-01-29 17:05, 2026-01-29 23:05, 2026-02-17 11:05, 2026-02-17 17:05, 2026-02-17 23:05, 2026-02-18 05:05, 2026-02-18 11:05, 2026-02-18 17:05, 2026-02-18 23:05, 2026-02-19 05:05, 2026-03-26 23:05, 2026-03-27 05:05, 2026-03-27 11:05, 2026-03-27 17:05, 2026-03-27 23:05, 2026-03-28 05:05, 2026-03-28 11:05, 2026-03-28 17:05

Spamhaus XBL CBL

67.213.118.179 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-03-01 16:53:51.645000
Was present on blacklist at: 2026-02-01 16:53, 2026-02-08 16:53, 2026-02-15 16:53, 2026-02-22 16:53, 2026-03-01 16:53

blocklist.de web-login

67.213.118.179 is listed on the blocklist.de web-login blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and<br>other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)

Last checked at: 2026-02-19 05:05:00.091000
Was present on blacklist at: 2026-02-17 11:05, 2026-02-17 17:05, 2026-02-17 23:05, 2026-02-18 05:05, 2026-02-18 11:05, 2026-02-18 17:05, 2026-02-18 23:05, 2026-02-19 05:05

Echelon web crawler

67.213.118.179 is listed on the Echelon web crawler blacklist.

Description: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-03-25 10:50:00.612000
Was present on blacklist at: 2026-03-05 10:50, 2026-03-06 10:50, 2026-03-09 10:50, 2026-03-10 10:50, 2026-03-11 10:50, 2026-03-12 10:50, 2026-03-14 10:50, 2026-03-16 10:50, 2026-03-19 10:50, 2026-03-20 10:50, 2026-03-21 10:50, 2026-03-22 10:50, 2026-03-23 10:50, 2026-03-24 10:50, 2026-03-25 10:50

Echelon router exploit

67.213.118.179 is listed on the Echelon router exploit blacklist.

Description: Attempting router firmware exploits (Netgear, D-Link, etc.)
Type of feed: primary (feed detail page)

Last checked at: 2026-03-25 10:30:00.600000
Was present on blacklist at: 2026-03-20 10:30, 2026-03-21 10:30, 2026-03-22 10:30, 2026-03-23 10:30, 2026-03-24 10:30, 2026-03-25 10:30

Echelon TLS/SSL crawler

67.213.118.179 is listed on the Echelon TLS/SSL crawler blacklist.

Description: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-03-25 10:40:00.648000
Was present on blacklist at: 2026-03-20 10:40, 2026-03-21 10:40, 2026-03-22 10:40, 2026-03-23 10:40, 2026-03-24 10:40, 2026-03-25 10:40

Threat categories

TL	Role	Category	Details
69	src	scan	port: 80, 443, 8000, 8013, 9000, 10000
53	src	—
25	src	exploit

---

Warden events (1444)

2026-04-06

ReconScanning (node.ce2b59): 2

AnomalyTraffic (node.6a1878): 2

ReconScanning (node.368407): 2

ReconScanning (node.4dc198): 2

2026-04-05

ReconScanning (node.ce2b59): 2

ReconScanning (node.368407): 2

ReconScanning (node.4dc198): 2

2026-04-01

AnomalyTraffic (node.6a1878): 2

ReconScanning (node.4dc198): 2

ReconScanning (node.368407): 2

ReconScanning (node.ce2b59): 3

2026-03-31

ReconScanning (node.ce2b59): 2

ReconScanning (node.4dc198): 2

ReconScanning (node.368407): 2

2026-03-30

ReconScanning (node.ce2b59): 2

ReconScanning (node.4dc198): 2

ReconScanning (node.368407): 2

2026-03-27

ReconScanning (node.ce2b59): 2

ReconScanning (node.4dc198): 2

ReconScanning (node.368407): 2

2026-03-26

AnomalyTraffic (node.6a1878): 2

ReconScanning (node.ce2b59): 2

ReconScanning (node.4dc198): 2

ReconScanning (node.368407): 2

2026-03-25

ReconScanning (node.368407): 2

ReconScanning (node.4dc198): 1

2026-03-24

ReconScanning (node.368407): 10

ReconScanning (node.4dc198): 11

2026-03-18

ReconScanning (node.368407): 32

ReconScanning (node.4dc198): 31

AnomalyTraffic (node.6a1878): 2

2026-03-17

ReconScanning (node.368407): 1

ReconScanning (node.4dc198): 1

2026-03-16

AnomalyTraffic (node.6a1878): 2

ReconScanning (node.368407): 2

ReconScanning (node.4dc198): 2

2026-03-13

ReconScanning (node.368407): 1

ReconScanning (node.4dc198): 1

2026-03-12

ReconScanning (node.368407): 3

AnomalyTraffic (node.6a1878): 2

ReconScanning (node.4dc198): 1

2026-03-11

ReconScanning (node.368407): 3

ReconScanning (node.4dc198): 3

2026-03-10

ReconScanning (node.4dc198): 8

ReconScanning (node.368407): 8

2026-03-07

ReconScanning (node.368407): 52

ReconScanning (node.4dc198): 52

AnomalyTraffic (node.ffe95c): 11

2026-03-06

ReconScanning (node.4dc198): 55

ReconScanning (node.368407): 55

AnomalyTraffic (node.ffe95c): 14

2026-03-05

ReconScanning (node.368407): 21

ReconScanning (node.4dc198): 11

2026-02-28

ReconScanning (node.4dc198): 30

ReconScanning (node.368407): 28

2026-02-27

ReconScanning (node.4dc198): 65

ReconScanning (node.368407): 30

AnomalyTraffic (node.ffe95c): 9

2026-02-22

ReconScanning (node.368407): 22

ReconScanning (node.4dc198): 22

2026-02-21

ReconScanning (node.4dc198): 19

ReconScanning (node.368407): 18

2026-02-19

ReconScanning (node.368407): 134

ReconScanning (node.4dc198): 135

2026-02-18

ReconScanning (node.368407): 19

ReconScanning (node.4dc198): 20

2026-02-17

ReconScanning (node.368407): 68

ReconScanning (node.4dc198): 67

2026-02-16

ReconScanning (node.4dc198): 124

ReconScanning (node.368407): 123

2026-01-23

ReconScanning (node.368407): 16

ReconScanning (node.4dc198): 16

2026-01-20

ReconScanning (node.368407): 16

ReconScanning (node.4dc198): 16

DShield reports (IP summary, reports)

2026-01-10

Number of reports: 187

Distinct targets: 127

2026-01-11

Number of reports: 187

Distinct targets: 127

2026-01-22

Number of reports: 36

Distinct targets: 36

2026-01-23

Number of reports: 348

Distinct targets: 235

2026-01-24

Number of reports: 348

Distinct targets: 235

2026-01-25

Number of reports: 47

Distinct targets: 13

2026-01-26

Number of reports: 47

Distinct targets: 13

2026-02-24

Number of reports: 182

Distinct targets: 134

2026-02-25

Number of reports: 182

Distinct targets: 134

2026-02-28

Number of reports: 1500

Distinct targets: 473

2026-03-01

Number of reports: 13893

Distinct targets: 295

2026-03-06

Number of reports: 957

Distinct targets: 540

2026-03-09

Number of reports: 215

Distinct targets: 94

2026-03-10

Number of reports: 134

Distinct targets: 78

2026-03-11

Number of reports: 37

Distinct targets: 24

2026-03-12

Number of reports: 171

Distinct targets: 104

2026-03-13

Number of reports: 171

Distinct targets: 104

2026-03-16

Number of reports: 32

Distinct targets: 20

2026-03-17

Number of reports: 62

Distinct targets: 47

2026-03-18

Number of reports: 405

Distinct targets: 258

2026-03-20

Number of reports: 34

Distinct targets: 28

2026-03-25

Number of reports: 10595

Distinct targets: 109

2026-03-26

Number of reports: 10595

Distinct targets: 109

2026-03-27

Number of reports: 618

Distinct targets: 18

2026-03-30

Number of reports: 1546

Distinct targets: 150

2026-03-31

Number of reports: 1546

Distinct targets: 150

2026-04-01

Number of reports: 35

Distinct targets: 24

2026-04-05

Number of reports: 15

Distinct targets: 11

OTX pulses

[69946d81e88866fd70ea7707] 2026-02-17 13:30:41.978000 | Apache honeypot logs for 17/Feb/2026

Author name:	jnazario
Pulse modified:	2026-02-17 13:30:41.978000
Indicator created:	2026-02-17 13:30:42
Indicator role:	None
Indicator title:
Indicator expiration:	2026-03-19 13:00:00

Origin AS

AS396356 - MAXIHOST

BGP Prefix

67.213.118.0/24

geo

United States, Dallas

🕑 America/Chicago

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

67.213.112.0 - 67.213.127.255

last_activity

2026-04-06 17:54:03

last_warden_event

2026-04-06 17:54:03

rep

0.5135358537946428

reserved_range

0

Shodan's InternetDB

Open ports: 22, 3000

Tags: scanner

CPEs: cpe:/a:facebook:react, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1, cpe:/a:vercel:next.js

ts_added

2025-12-21 16:53:48.754000

ts_last_update

2026-04-06 18:33:25.182000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses