IP address


.642193.178.158.123
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus SBL
193.178.158.123 was recently listed on the Spamhaus SBL blacklist, but currently it is not.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-11-01 23:23:40.081000
Was present on blacklist at: 2026-10-11 23:23, 2026-10-18 23:23, 2026-10-25 23:23, 2026-11-01 23:23
Spamhaus DROP
193.178.158.123 was recently listed on the Spamhaus DROP blacklist, but currently it is not.

Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-11-01 23:23:40.081000
Was present on blacklist at: 2026-10-11 23:23, 2026-10-18 23:23, 2026-10-25 23:23, 2026-11-01 23:23
AbuseIPDB
193.178.158.123 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-11-03 05:00:00.616000
Was present on blacklist at: 2026-10-13 04:00, 2026-10-16 04:00, 2026-11-03 05:00
UCEPROTECT L1
193.178.158.123 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-11-04 00:45:00.660000
Was present on blacklist at: 2026-10-14 23:45, 2026-10-15 07:45, 2026-10-15 15:45, 2026-10-15 23:45, 2026-10-16 07:45, 2026-10-16 15:45, 2026-10-16 23:45, 2026-10-17 07:45, 2026-10-17 23:45, 2026-10-18 07:45, 2026-10-18 15:45, 2026-10-18 23:45, 2026-10-19 07:45, 2026-10-19 15:45, 2026-10-19 23:45, 2026-10-20 07:45, 2026-10-20 23:45, 2026-10-21 07:45, 2026-10-21 15:45, 2026-10-21 23:45, 2026-10-22 07:45, 2026-10-22 15:45, 2026-10-22 23:45, 2026-10-23 07:45, 2026-10-23 15:45, 2026-10-23 23:45, 2026-10-24 07:45, 2026-10-24 15:45, 2026-10-24 23:45, 2026-10-25 08:45, 2026-10-25 16:45, 2026-10-26 00:45, 2026-10-26 08:45, 2026-10-26 16:45, 2026-10-27 00:45, 2026-10-27 08:45, 2026-10-27 16:45, 2026-10-28 00:45, 2026-10-28 08:45, 2026-10-28 16:45, 2026-10-29 00:45, 2026-11-01 08:45, 2026-11-01 16:45, 2026-11-02 00:45, 2026-11-02 08:45, 2026-11-02 16:45, 2026-11-03 00:45, 2026-11-03 08:45, 2026-11-03 16:45, 2026-11-04 00:45
Echelon port scan
193.178.158.123 is listed on the Echelon port scan blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Scanning 5+ ports on target host
Type of feed: primary (feed detail page)

Last checked at: 2026-11-03 10:25:00.446000
Was present on blacklist at: 2026-10-20 09:25, 2026-10-21 09:25, 2026-10-22 09:25, 2026-10-23 09:25, 2026-10-24 09:25, 2026-10-25 10:25, 2026-10-26 10:25, 2026-10-27 10:25, 2026-10-28 10:25, 2026-10-29 10:25, 2026-10-30 10:25, 2026-10-31 10:25, 2026-11-01 10:25, 2026-11-02 10:25, 2026-11-03 10:25
Spamhaus XBL CBL
193.178.158.123 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-11-01 23:23:40.081000
Was present on blacklist at: 2026-10-25 23:23, 2026-11-01 23:23

Threat categories

TLRoleCategoryDetails
78 src scan port: many
41 src —

Warden events (767)
2026-11-03
ReconScanning (node.368407): 22
ReconScanning (node.f90c6b): 17
2026-11-02
ReconScanning (node.368407): 22
ReconScanning (node.f90c6b): 21
2026-10-30
ReconScanning (node.368407): 21
ReconScanning (node.f90c6b): 20
AnomalyTraffic (node.ce2b59): 4
AnomalyTraffic (node.6a1878): 1
ReconScanning (node.ce2b59): 1
ReconScanning (node.4dc198): 9
ReconScanning (node.86eb21): 3
2026-10-29
ReconScanning (node.368407): 22
ReconScanning (node.f90c6b): 10
ReconScanning (node.86eb21): 8
2026-10-28
ReconScanning (node.368407): 17
ReconScanning (node.4dc198): 17
ReconScanning (node.f90c6b): 9
ReconScanning (node.86eb21): 6
2026-10-25
ReconScanning (node.368407): 22
ReconScanning (node.f90c6b): 13
AnomalyTraffic (node.6a1878): 2
ReconScanning (node.4dc198): 7
2026-10-22
ReconScanning (node.4dc198): 9
ReconScanning (node.86eb21): 7
2026-10-21
ReconScanning (node.4dc198): 22
ReconScanning (node.86eb21): 7
2026-10-19
ReconScanning (node.368407): 22
ReconScanning (node.f90c6b): 9
2026-10-16
ReconScanning (node.368407): 22
ReconScanning (node.f90c6b): 18
ReconScanning (node.4dc198): 22
ReconScanning (node.86eb21): 22
2026-10-14
AnomalyTraffic (node.6a1878): 3
ReconScanning (node.4dc198): 44
ReconScanning (node.86eb21): 144
ReconScanning (node.f90c6b): 3
ReconScanning (node.9c1411): 4
2026-10-13
ReconScanning (node.4dc198): 19
ReconScanning (node.86eb21): 7
2026-10-12
ReconScanning (node.368407): 36
ReconScanning (node.f90c6b): 29
ReconScanning (node.4dc198): 22
ReconScanning (node.86eb21): 8
2026-10-11
ReconScanning (node.368407): 8
ReconScanning (node.f90c6b): 6
DShield reports (IP summary, reports)
2026-10-11
Number of reports: 258
Distinct targets: 258
2026-10-12
Number of reports: 962
Distinct targets: 661
2026-10-14
Number of reports: 1081
Distinct targets: 710
2026-10-15
Number of reports: 529
Distinct targets: 391
2026-10-16
Number of reports: 225
Distinct targets: 225
2026-10-18
Number of reports: 1225
Distinct targets: 696
2026-10-19
Number of reports: 1225
Distinct targets: 696
2026-10-20
Number of reports: 2629
Distinct targets: 897
2026-10-21
Number of reports: 848
Distinct targets: 575
2026-10-24
Number of reports: 651
Distinct targets: 351
2026-10-25
Number of reports: 578
Distinct targets: 453
2026-10-26
Number of reports: 508
Distinct targets: 357
2026-10-27
Number of reports: 998
Distinct targets: 659
2026-10-28
Number of reports: 998
Distinct targets: 659
2026-10-29
Number of reports: 457
Distinct targets: 457
2026-10-30
Number of reports: 457
Distinct targets: 457
2026-10-31
Number of reports: 310
Distinct targets: 310
2026-11-01
Number of reports: 978
Distinct targets: 826
Origin AS
AS201738 - UFO-TECHNOLOGIES-LIMITED
BGP Prefix
193.178.158.0/24
geo
Russia, St Petersburg
🕑 Europe/Moscow
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
193.178.158.0 - 193.178.159.255
last_activity
2026-11-03 22:28:31
last_warden_event
2026-11-03 22:28:31
rep
0.6421531872023409
reserved_range
0
ts_added
2026-10-11 23:23:30.041000
ts_last_update
2026-11-04 00:57:30.284000

Warden event timeline

DShield event timeline

Presence on blacklists