IP address

Passive DNS

Tags: IP in hostname

IP blacklists: Blocklist.net.ua
138.199.9.104 is listed on the Blocklist.net.ua blacklist.

Description: BlockList contains IP addresses that perform attacks,<br>send spam or brute force passwords to the blocking list.
Type of feed: primary (feed detail page)

Last checked at: 2025-05-02 10:15:02.123000
Was present on blacklist at: 2025-04-28 10:15, 2025-04-28 14:15, 2025-04-28 18:15, 2025-04-28 22:15, 2025-04-29 02:15, 2025-04-29 06:15, 2025-04-29 10:15, 2025-04-29 14:15, 2025-04-29 18:15, 2025-04-29 22:15, 2025-04-30 02:15, 2025-04-30 06:15, 2025-04-30 10:15, 2025-04-30 14:15, 2025-04-30 18:15, 2025-04-30 22:15, 2025-05-01 02:15, 2025-05-01 06:15, 2025-05-01 10:15, 2025-05-01 14:15, 2025-05-01 18:15, 2025-05-01 22:15, 2025-05-02 02:15, 2025-05-02 06:15, 2025-05-02 10:15

Origin AS: AS60068 - CDN77
BGP Prefix: 138.199.8.0/23
geo: United States, Los Angeles; 🕑 America/Los_Angeles
hostname: 138-199-9-104.bunnyinfra.net
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 138.199.0.0 - 138.199.63.255
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 80, 443, 1935, 3337, 4321, 6000, 6001, 6002, 6003, 6006, 6008, 7001, 7002, 7004, 7006, 7011, 7016, 8085, 8100, 8101, 8110, 8111, 8180, 8181, 8182, 8183, 8186, 8187, 8188, 8189; Tags: –; CPEs: cpe:/a:jquery:jquery, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:9.6p1
ts_added: 2025-04-28 10:33:02.093000
ts_last_update: 2025-05-02 10:36:03.523000

Warden event timeline

DShield event timeline

Presence on blacklists