IP address

Passive DNS

Tags: IP in hostname

IP blacklists: URLHaus
162.230.48.189 is listed on the URLHaus blacklist.

Description: URLhaus is a project from abuse.ch with the goal of sharing<br>malicious URLs that are being used for malware distribution.<br>This list contains IPs that are part of the malicious ULRs.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-05 23:10:01.649000
Was present on blacklist at: 2024-11-05 11:10, 2024-11-05 15:10, 2024-11-05 15:10, 2024-11-05 15:10, 2024-11-05 15:10, 2024-11-05 15:10, 2024-11-05 19:10, 2024-11-05 19:10, 2024-11-05 19:10, 2024-11-05 19:10, 2024-11-05 19:10, 2024-11-05 23:10, 2024-11-05 23:10, 2024-11-05 23:10, 2024-11-05 23:10

Origin AS: AS7018 - ATT-INTERNET4
BGP Prefix: 162.224.0.0/12
geo: United States, Yulee; 🕑 America/New_York
hostname: 162-230-48-189.lightspeed.jcvlfl.sbcglobal.net
hostname_class: ['isp', 'ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 162.224.0.0 - 162.239.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 137, 443, 3306, 8008; Tags: database, self-signed; CPEs: cpe:/a:microsoft:internet_information_services, cpe:/a:php:php:8.0.30, cpe:/a:apache:http_server:2.4.58, cpe:/a:mariadb:mariadb, cpe:/a:jquery:jquery:3.7.1, cpe:/a:openssl:openssl:3.1.3, cpe:/o:microsoft:windows, cpe:/a:select2:select2, cpe:/a:microsoft:internet_information_services:10.0
ts_added: 2024-11-05 11:10:06.381000
ts_last_update: 2024-11-05 23:10:38.326000

Warden event timeline

DShield event timeline

Presence on blacklists