IP address

Search at other sites:
.499108.165.121.243
Shodan(more info)
Passive DNS
Tags: Scanner Residential proxy
IP blacklists
AbuseIPDB
108.165.121.243 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-08-06 04:00:00.585000
Was present on blacklist at: 2026-08-06 04:00
UCEPROTECT L1
108.165.121.243 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-08-09 15:45:00.655000
Was present on blacklist at: 2026-08-06 07:45, 2026-08-06 15:45, 2026-08-06 23:45, 2026-08-07 15:45, 2026-08-07 23:45, 2026-08-08 07:45, 2026-08-08 15:45, 2026-08-08 23:45, 2026-08-09 07:45, 2026-08-09 15:45
Echelon TLS/SSL crawler
108.165.121.243 is listed on the Echelon TLS/SSL crawler blacklist.

Description: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-08-09 09:40:00.346000
Was present on blacklist at: 2026-08-06 09:40, 2026-08-07 09:40, 2026-08-08 09:40, 2026-08-09 09:40
Echelon web crawler
108.165.121.243 is listed on the Echelon web crawler blacklist.

Description: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-08-09 09:50:00.425000
Was present on blacklist at: 2026-08-06 09:50, 2026-08-07 09:50, 2026-08-08 09:50, 2026-08-09 09:50

Threat categories

TLRoleCategoryDetails
60 src scan port: 80, 443, 8080, 8443, 8888
43 src —
Warden events (237)
2026-08-06
ReconScanning (node.ce2b59): 9
2026-08-05
AnomalyTraffic (node.6a1878): 17
ReconScanning (node.368407): 99
ReconScanning (node.4dc198): 99
ReconScanning (node.ce2b59): 13
DShield reports (IP summary, reports)
2026-08-05
Number of reports: 1102
Distinct targets: 387
2026-08-06
Number of reports: 2699
Distinct targets: 479
2026-08-07
Number of reports: 2699
Distinct targets: 479
Residential proxy info (data provided by Layer3 Intel)
Last seen: 2026-08-05 12:43:23}
Percent days seen: 3 %
Networks: DECODO, PROXYRACK, 711PROXY, MASKIFY, LEMONBRIGHT, BYTEPROXIES, KOOKEY, THORDATA, PROXY-SELLER, THUNDERPROXY, DATAIMPULSE, PROXYMA, PROXY4U, AKE.NET, NOVADA, GEEKPROXY, PSBPROXY, MRSCRAPER, GLORYCLOUD, B2PROXY
Details: https://layer3info/context/108.165.121.243
Origin AS
AS399646 - SNAJU
BGP Prefix
108.165.121.0/24
geo
United States
🕑 America/Chicago
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
108.165.0.0 - 108.165.255.255
last_activity
2026-08-06 09:15:24
last_warden_event
2026-08-06 09:15:24
rep
0.49886186896336426
reserved_range
0
ts_added
2026-08-05 05:02:01.748000
ts_last_update
2026-08-09 15:48:37.279000

Warden event timeline

DShield event timeline

Presence on blacklists