IP address

Passive DNS

Tags:

IP blacklists: URLHaus
138.36.239.20 is listed on the URLHaus blacklist.

Description: URLhaus is a project from abuse.ch with the goal of sharing<br>malicious URLs that are being used for malware distribution.<br>This list contains IPs that are part of the malicious ULRs.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-05 19:10:01.307000
Was present on blacklist at: 2024-10-28 19:10, 2024-10-30 11:10, 2024-11-01 15:10, 2024-11-01 19:10, 2024-11-01 23:10, 2024-11-02 11:10, 2024-11-02 15:10, 2024-11-02 19:10, 2024-11-02 23:10, 2024-11-03 03:10, 2024-11-03 07:10, 2024-11-03 11:10, 2024-11-03 15:10, 2024-11-03 19:10, 2024-11-03 23:10, 2024-11-04 03:10, 2024-11-04 11:10, 2024-11-04 19:10, 2024-11-04 23:10, 2024-11-05 03:10, 2024-11-05 07:10, 2024-11-05 11:10, 2024-11-05 15:10, 2024-11-05 19:10
Spamhaus SBL
138.36.239.20 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-11-04 19:13:30.631000
Was present on blacklist at: 2024-10-28 19:13, 2024-11-04 19:13

Origin AS: AS27823 -
BGP Prefix: 138.36.239.0/24
geo: Argentina, Rosario; 🕑 America/Argentina/Cordoba
hostname: vps-1387733-x.dattaweb.com
Address block ('inetnum' or 'NetRange' in whois database): 138.36.236.0 - 138.36.239.255
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 3001, 3306, 8080; Tags: eol-product, database; CPEs: cpe:/a:atlassian:jira, cpe:/a:momentjs:moment, cpe:/a:mariadb:mariadb:10.0.38-MariaDB-0ubuntu0.16.04.1, cpe:/a:oracle:jre, cpe:/a:apache:http_server:2.4.18
ts_added: 2024-10-28 19:13:23.091000
ts_last_update: 2024-11-05 19:13:31.004000

Warden event timeline

DShield event timeline

Presence on blacklists