IP address

Search at other sites:

.159185.213.175.211

Shodan(more info)

Passive DNS

IP blacklists

blocklist.de bots

185.213.175.211 is listed on the blocklist.de bots blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the RFI-Attacks,<br>REG-Bots, IRC-Bots or BadBots.
Type of feed: primary (feed detail page)

Last checked at: 2026-06-14 16:05:00.138000
Was present on blacklist at: 2026-06-12 22:05, 2026-06-13 04:05, 2026-06-13 10:05, 2026-06-13 16:05, 2026-06-13 22:05, 2026-06-14 04:05, 2026-06-14 10:05, 2026-06-14 16:05

Spamhaus XBL CBL

185.213.175.211 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-06-26 09:09:11.172000
Was present on blacklist at: 2026-06-19 09:09, 2026-06-26 09:09

Threat categories

TL	Role	Category	Details
45	src	—

---

Warden events (2)

2026-06-12

AnomalyTraffic (node.6a1878): 2

Origin AS

AS41608 - NextGenWebs-NL

BGP Prefix

185.213.175.0/24

geo

Spain

🕑 Europe/Madrid

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

185.213.172.0 - 185.213.175.255

last_activity

2026-06-12 09:12:00

last_warden_event

2026-06-12 09:12:00

rep

0.1591035847462855

reserved_range

0

Shodan's InternetDB

Open ports: 22, 25, 80, 110, 143, 443, 465

Tags: starttls

CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1, cpe:/a:f5:nginx

ts_added

2026-06-12 09:09:09.624000

ts_last_update

2026-06-26 09:09:11.268000

Warden event timeline

DShield event timeline

Presence on blacklists