IP address

Search at other sites:

.279138.68.99.222

Shodan(more info)

Passive DNS

IP blacklists

DataPlane VNC RFB

138.68.99.222 is listed on the DataPlane VNC RFB blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs initiating<br>a VNC remote frame buffer (RFB) session to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2024-04-15 22:10:00.990000
Was present on blacklist at: 2024-03-17 19:10, 2024-03-17 23:10, 2024-03-18 03:10, 2024-03-18 07:10, 2024-03-18 11:10, 2024-03-18 15:10, 2024-03-18 19:10, 2024-03-18 23:10, 2024-03-19 03:10, 2024-03-19 07:10, 2024-03-19 11:10, 2024-03-19 15:10, 2024-03-19 19:10, 2024-03-19 23:10, 2024-03-20 03:10, 2024-03-20 07:10, 2024-03-20 11:10, 2024-03-20 15:10, 2024-03-20 19:10, 2024-03-20 23:10, 2024-03-21 03:10, 2024-03-21 07:10, 2024-03-21 11:10, 2024-03-21 15:10, 2024-03-21 19:10, 2024-03-21 23:10, 2024-03-22 03:10, 2024-03-22 07:10, 2024-03-22 11:10, 2024-03-22 15:10, 2024-03-22 19:10, 2024-03-22 23:10, 2024-03-23 03:10, 2024-03-23 07:10, 2024-03-23 11:10, 2024-03-23 15:10, 2024-03-23 19:10, 2024-03-23 23:10, 2024-03-24 03:10, 2024-03-24 07:10, 2024-03-24 11:10, 2024-03-24 15:10, 2024-03-24 19:10, 2024-03-24 23:10, 2024-03-25 03:10, 2024-03-25 07:10, 2024-03-25 11:10, 2024-03-25 15:10, 2024-03-25 19:10, 2024-03-25 23:10, 2024-03-26 03:10, 2024-03-26 07:10, 2024-03-26 11:10, 2024-03-26 15:10, 2024-03-26 19:10, 2024-03-26 23:10, 2024-03-27 03:10, 2024-03-27 07:10, 2024-03-27 11:10, 2024-03-27 15:10, 2024-03-27 19:10, 2024-03-27 23:10, 2024-03-28 03:10, 2024-03-28 07:10, 2024-03-28 11:10, 2024-03-28 15:10, 2024-04-08 18:10, 2024-04-08 22:10, 2024-04-09 02:10, 2024-04-09 06:10, 2024-04-09 10:10, 2024-04-09 14:10, 2024-04-09 18:10, 2024-04-09 22:10, 2024-04-10 02:10, 2024-04-10 06:10, 2024-04-10 10:10, 2024-04-10 14:10, 2024-04-10 18:10, 2024-04-10 22:10, 2024-04-11 02:10, 2024-04-11 06:10, 2024-04-11 10:10, 2024-04-11 14:10, 2024-04-11 18:10, 2024-04-11 22:10, 2024-04-12 02:10, 2024-04-12 06:10, 2024-04-12 10:10, 2024-04-12 14:10, 2024-04-12 18:10, 2024-04-12 22:10, 2024-04-13 02:10, 2024-04-13 06:10, 2024-04-13 10:10, 2024-04-13 14:10, 2024-04-13 18:10, 2024-04-13 22:10, 2024-04-14 02:10, 2024-04-14 06:10, 2024-04-14 10:10, 2024-04-14 14:10, 2024-04-14 18:10, 2024-04-14 22:10, 2024-04-15 02:10, 2024-04-15 06:10, 2024-04-15 10:10, 2024-04-15 14:10, 2024-04-15 18:10, 2024-04-15 22:10

UCEPROTECT L1

138.68.99.222 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-04-18 23:45:00.822000
Was present on blacklist at: 2024-03-18 00:45, 2024-03-18 08:45, 2024-03-18 16:45, 2024-03-19 00:45, 2024-03-19 08:45, 2024-03-19 16:45, 2024-03-20 00:45, 2024-03-20 08:45, 2024-03-20 16:45, 2024-03-21 00:45, 2024-03-21 08:45, 2024-03-21 16:45, 2024-03-22 00:45, 2024-03-22 08:45, 2024-03-22 16:45, 2024-03-23 00:45, 2024-03-23 08:45, 2024-03-23 16:45, 2024-03-24 00:45, 2024-03-24 08:45, 2024-03-24 16:45, 2024-03-25 00:45, 2024-03-25 08:45, 2024-03-25 16:45, 2024-03-26 00:45, 2024-03-26 08:45, 2024-03-26 16:45, 2024-03-27 00:45, 2024-03-27 08:45, 2024-03-27 16:45, 2024-03-28 00:45, 2024-03-28 08:45, 2024-03-28 16:45, 2024-03-29 00:45, 2024-03-29 08:45, 2024-03-29 16:45, 2024-03-30 00:45, 2024-03-30 08:45, 2024-03-30 16:45, 2024-03-31 00:45, 2024-03-31 07:45, 2024-03-31 15:45, 2024-03-31 23:45, 2024-04-01 07:45, 2024-04-01 15:45, 2024-04-01 23:45, 2024-04-02 07:45, 2024-04-02 15:45, 2024-04-08 23:45, 2024-04-09 07:45, 2024-04-09 15:45, 2024-04-09 23:45, 2024-04-10 07:45, 2024-04-10 15:45, 2024-04-10 23:45, 2024-04-11 07:45, 2024-04-11 15:45, 2024-04-11 23:45, 2024-04-12 07:45, 2024-04-12 15:45, 2024-04-12 23:45, 2024-04-13 07:45, 2024-04-13 15:45, 2024-04-13 23:45, 2024-04-14 07:45, 2024-04-14 15:45, 2024-04-14 23:45, 2024-04-15 07:45, 2024-04-15 15:45, 2024-04-15 23:45, 2024-04-16 07:45, 2024-04-16 15:45, 2024-04-16 23:45, 2024-04-17 07:45, 2024-04-17 15:45, 2024-04-17 23:45, 2024-04-18 07:45, 2024-04-18 15:45, 2024-04-18 23:45

AbuseIPDB

138.68.99.222 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>IPs performing malicious activity(DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-05-02 04:00:00.478000
Was present on blacklist at: 2024-03-21 05:00, 2024-03-22 05:00, 2024-05-01 04:00, 2024-05-02 04:00

Turris greylist

138.68.99.222 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-05-02 21:15:00.185000
Was present on blacklist at: 2024-04-19 21:15, 2024-04-20 21:15, 2024-04-21 21:15, 2024-04-25 21:15, 2024-04-26 21:15, 2024-04-27 21:15, 2024-04-28 21:15, 2024-04-29 21:15, 2024-05-01 21:15, 2024-05-02 21:15

Spamhaus XBL CBL

138.68.99.222 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-04-28 19:10:40.465000
Was present on blacklist at: 2024-04-21 19:10, 2024-04-28 19:10

blocklist.de web-login

138.68.99.222 is listed on the blocklist.de web-login blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and<br>other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)

Last checked at: 2024-05-02 22:05:00.260000
Was present on blacklist at: 2024-05-01 04:05, 2024-05-01 10:05, 2024-05-01 16:05, 2024-05-01 22:05, 2024-05-02 04:05, 2024-05-02 10:05, 2024-05-02 16:05, 2024-05-02 22:05

blocklist.de Apache

138.68.99.222 is listed on the blocklist.de Apache blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the service<br>Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)

Last checked at: 2024-05-02 22:05:00.406000
Was present on blacklist at: 2024-05-01 04:05, 2024-05-01 10:05, 2024-05-01 16:05, 2024-05-01 22:05, 2024-05-02 04:05, 2024-05-02 10:05, 2024-05-02 16:05, 2024-05-02 22:05

Warden events (22)

2024-05-02

ReconScanning (node.8cbf96): 1

2024-05-01

ReconScanning (node.8cbf96): 5

2024-04-30

ReconScanning (node.8cbf96): 2

ReconScanning (node.bd32ad): 2

AnomalyTraffic (node.c35ced): 1

ReconScanning (node.293592): 1

2024-04-28

ReconScanning (node.bd32ad): 1

2024-04-27

ReconScanning (node.bd32ad): 1

2024-04-21

AnomalyTraffic (node.c35ced): 2

ReconScanning (node.bd32ad): 2

2024-04-20

AnomalyTraffic (node.c35ced): 1

ReconScanning (node.bd32ad): 2

2024-04-19

ReconScanning (node.bd32ad): 1

DShield reports (IP summary, reports)

2024-04-18

Number of reports: 12

Distinct targets: 4

2024-04-19

Number of reports: 20

Distinct targets: 5

2024-04-21

Number of reports: 54

Distinct targets: 10

2024-04-24

Number of reports: 15

Distinct targets: 15

2024-04-25

Number of reports: 23

Distinct targets: 15

2024-04-26

Number of reports: 131

Distinct targets: 75

2024-04-27

Number of reports: 10

Distinct targets: 6

2024-04-28

Number of reports: 32

Distinct targets: 14

2024-04-29

Number of reports: 18

Distinct targets: 9

2024-04-30

Number of reports: 148

Distinct targets: 69

2024-05-01

Number of reports: 54

Distinct targets: 18

2024-05-02

Number of reports: 43

Distinct targets: 17

OTX pulses

[65f84cbb30ae7a3dc422fdc4] 2024-03-18 14:16:27.821000 | VNC honeypot logs for 2024/03/18

Author name:	jnazario
Pulse modified:	2024-03-18 14:16:27.821000
Indicator created:	2024-03-18 14:16:28
Indicator role:	None
Indicator title:
Indicator expiration:	2024-04-17 14:00:00

[65f99e32266c3817aa540406] 2024-03-19 14:16:18.230000 | VNC honeypot logs for 2024/03/19

Author name:	jnazario
Pulse modified:	2024-03-19 14:16:18.230000
Indicator created:	2024-03-19 14:16:19
Indicator role:	None
Indicator title:
Indicator expiration:	2024-04-18 14:00:00

[65faefbba9d2282a147ae165] 2024-03-20 14:16:27.429000 | VNC honeypot logs for 2024/03/20

Author name:	jnazario
Pulse modified:	2024-03-20 14:16:27.429000
Indicator created:	2024-03-20 14:16:28
Indicator role:	None
Indicator title:
Indicator expiration:	2024-04-19 14:00:00

[65fc4131e83451e9fd187aae] 2024-03-21 14:16:17.071000 | VNC honeypot logs for 2024/03/21

Author name:	jnazario
Pulse modified:	2024-03-21 14:16:17.071000
Indicator created:	2024-03-21 14:16:17
Indicator role:	None
Indicator title:
Indicator expiration:	2024-04-20 14:00:00

[65fd92af4235ebb8bb73c870] 2024-03-22 14:16:15.226000 | VNC honeypot logs for 2024/03/22

Author name:	jnazario
Pulse modified:	2024-03-22 14:16:15.226000
Indicator created:	2024-03-22 14:16:16
Indicator role:	None
Indicator title:
Indicator expiration:	2024-04-21 14:00:00

[65fee43b41627ea34e0a3e29] 2024-03-23 14:16:27.407000 | VNC honeypot logs for 2024/03/23

Author name:	jnazario
Pulse modified:	2024-03-23 14:16:27.407000
Indicator created:	2024-03-23 14:16:28
Indicator role:	None
Indicator title:
Indicator expiration:	2024-04-22 14:00:00

[660035c4585617deb28cff79] 2024-03-24 14:16:36.039000 | VNC honeypot logs for 2024/03/24

Author name:	jnazario
Pulse modified:	2024-03-24 14:16:36.039000
Indicator created:	2024-03-24 14:16:36
Indicator role:	None
Indicator title:
Indicator expiration:	2024-04-23 14:00:00

[660187618557998251546fc3] 2024-03-25 14:17:05.710000 | VNC honeypot logs for 2024/03/25

Author name:	jnazario
Pulse modified:	2024-03-25 14:17:05.710000
Indicator created:	2024-03-25 14:17:06
Indicator role:	None
Indicator title:
Indicator expiration:	2024-04-24 14:00:00

[6602d8b3149e308c00e617c1] 2024-03-26 14:16:19.414000 | VNC honeypot logs for 2024/03/26

Author name:	jnazario
Pulse modified:	2024-03-26 14:16:19.414000
Indicator created:	2024-03-26 14:16:20
Indicator role:	None
Indicator title:
Indicator expiration:	2024-04-25 14:00:00

[66154dcb2233a51544566019] 2024-04-09 14:16:43.811000 | VNC honeypot logs for 2024/04/09

Author name:	jnazario
Pulse modified:	2024-04-09 14:16:43.811000
Indicator created:	2024-04-09 14:16:44
Indicator role:	None
Indicator title:
Indicator expiration:	2024-05-09 14:00:00

[66169f49298d1d4c1f4ea322] 2024-04-10 14:16:41.899000 | VNC honeypot logs for 2024/04/10

Author name:	jnazario
Pulse modified:	2024-04-10 14:16:41.899000
Indicator created:	2024-04-10 14:16:42
Indicator role:	None
Indicator title:
Indicator expiration:	2024-05-10 14:00:00

[6617f0cc16fbc0a2ba5b7ff7] 2024-04-11 14:16:44.392000 | VNC honeypot logs for 2024/04/11

Author name:	jnazario
Pulse modified:	2024-04-11 14:16:44.392000
Indicator created:	2024-04-11 14:16:45
Indicator role:	None
Indicator title:
Indicator expiration:	2024-05-11 14:00:00

[5a7e3e70c44e7b48947593a7] 2018-02-10 00:36:00.396000 | Webscanners 2018-02-09 thru current day

Author name:	david3
Pulse modified:	2024-05-03 07:55:15.622000
Indicator created:	2024-04-29 14:30:13
Indicator role:	scanning_host
Indicator title:	404 NOT FOUND
Indicator expiration:	2024-07-28 00:00:00

[6630fd5a051edcd7329639bf] 2024-04-30 14:16:58.611000 | Apache honeypot logs for 30/Apr/2024

Author name:	jnazario
Pulse modified:	2024-04-30 14:16:58.611000
Indicator created:	2024-04-30 14:16:59
Indicator role:	None
Indicator title:
Indicator expiration:	2024-05-30 14:00:00

Origin AS

AS14061 - DIGITALOCEAN-ASN

BGP Prefix

138.68.96.0/20

geo

Germany, Frankfurt am Main

🕑 Europe/Berlin

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

138.68.0.0 - 138.68.255.255

last_activity

2024-05-03 08:08:48.283000

last_warden_event

2024-05-02 22:34:20

rep

0.2789806547619048

reserved_range

0

Shodan's InternetDB

Open ports: 22, 80, 443

Tags: cloud

CPEs: cpe:/a:apache:http_server:2.4.41, cpe:/a:openbsd:openssh

ts_added

2024-03-17 19:10:33.108000

ts_last_update

2024-05-03 08:08:48.292000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses