IP address

Search at other sites:
.075172.239.154.194172-239-154-194.ip.linodeusercontent.com
Shodan(more info)
Passive DNS
Tags: Scanner IP in hostname
IP blacklists
CI Army
172.239.154.194 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-05-14 02:50:00.853000
Was present on blacklist at: 2026-05-10 02:50, 2026-05-11 02:50, 2026-05-12 02:50, 2026-05-13 02:50, 2026-05-14 02:50
AbuseIPDB
172.239.154.194 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-05-14 04:00:00.604000
Was present on blacklist at: 2026-05-10 04:00, 2026-05-12 04:00, 2026-05-14 04:00
Spamhaus XBL CBL
172.239.154.194 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-05-24 04:14:53.693000
Was present on blacklist at: 2026-05-16 09:01

Threat categories

TLRoleCategoryDetails
53 src scan port: 8000, 8080
33 src —
Warden events (718)
2026-05-19
ReconScanning (node.9c1411): 30
2026-05-18
ReconScanning (node.9c1411): 54
2026-05-17
ReconScanning (node.9c1411): 55
2026-05-16
ReconScanning (node.9c1411): 71
2026-05-15
ReconScanning (node.9c1411): 73
2026-05-14
ReconScanning (node.9c1411): 72
2026-05-13
ReconScanning (node.9c1411): 60
2026-05-12
ReconScanning (node.9c1411): 57
ReconScanning (node.ce2b59): 19
2026-05-11
ReconScanning (node.9c1411): 78
ReconScanning (node.ce2b59): 41
2026-05-10
ReconScanning (node.368407): 21
ReconScanning (node.4dc198): 2
ReconScanning (node.ce2b59): 8
ReconScanning (node.9c1411): 8
2026-05-09
ReconScanning (node.ce2b59): 52
ReconScanning (node.368407): 15
ReconScanning (node.4dc198): 2
DShield reports (IP summary, reports)
2026-05-10
Number of reports: 236
Distinct targets: 78
2026-05-11
Number of reports: 50
Distinct targets: 18
2026-05-12
Number of reports: 434
Distinct targets: 97
2026-05-13
Number of reports: 339
Distinct targets: 72
2026-05-14
Number of reports: 250
Distinct targets: 32
Origin AS
AS63949 - LINODE-AP
BGP Prefix
172.239.128.0/19
geo
United States, Ashburn
🕑 America/New_York
hostname
172-239-154-194.ip.linodeusercontent.com
hostname_class
['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database)
172.224.0.0 - 172.239.255.255
last_activity
2026-05-19 16:24:00
last_warden_event
2026-05-19 16:24:00
rep
0.0750809267605066
reserved_range
0
ts_added
2026-05-09 09:01:35.616000
ts_last_update
2026-05-26 09:01:40.391000

Warden event timeline

DShield event timeline

Presence on blacklists