IP address


.825196.251.113.65
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
Spamhaus SBL
196.251.113.65 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-03-31 01:10:30.102000
Was present on blacklist at: 2025-03-24 01:10, 2025-03-31 01:10
Spamhaus DROP
196.251.113.65 is listed on the Spamhaus DROP blacklist.

Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-03-31 01:10:30.102000
Was present on blacklist at: 2025-03-24 01:10, 2025-03-31 01:10
AbuseIPDB
196.251.113.65 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-04-03 04:00:00.527000
Was present on blacklist at: 2025-03-24 05:00, 2025-03-26 05:00, 2025-03-29 05:00, 2025-03-30 04:00, 2025-03-31 04:00, 2025-04-01 04:00, 2025-04-02 04:00, 2025-04-03 04:00
CI Army
196.251.113.65 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-04-03 02:50:01.099000
Was present on blacklist at: 2025-03-27 03:50, 2025-03-28 03:50, 2025-03-29 03:50, 2025-03-30 02:50, 2025-03-31 02:50, 2025-04-01 02:50, 2025-04-02 02:50, 2025-04-03 02:50
Warden events (3259)
2025-04-03
ReconScanning (node.9c1411): 24
ReconScanning (node.4dc198): 65
ReconScanning (node.368407): 53
2025-04-02
ReconScanning (node.4dc198): 179
ReconScanning (node.9c1411): 45
ReconScanning (node.368407): 147
2025-04-01
ReconScanning (node.368407): 52
ReconScanning (node.4dc198): 98
ReconScanning (node.9c1411): 31
2025-03-31
ReconScanning (node.4dc198): 141
ReconScanning (node.9c1411): 46
ReconScanning (node.368407): 78
2025-03-30
ReconScanning (node.4dc198): 193
ReconScanning (node.368407): 89
ReconScanning (node.9c1411): 53
2025-03-29
ReconScanning (node.4dc198): 208
ReconScanning (node.9c1411): 68
ReconScanning (node.368407): 81
2025-03-28
ReconScanning (node.368407): 106
ReconScanning (node.4dc198): 176
ReconScanning (node.9c1411): 55
2025-03-27
ReconScanning (node.368407): 65
ReconScanning (node.9c1411): 59
ReconScanning (node.4dc198): 139
2025-03-26
ReconScanning (node.4dc198): 197
ReconScanning (node.368407): 56
ReconScanning (node.9c1411): 53
2025-03-25
ReconScanning (node.9c1411): 53
ReconScanning (node.368407): 79
ReconScanning (node.4dc198): 194
2025-03-24
ReconScanning (node.368407): 154
ReconScanning (node.4dc198): 184
ReconScanning (node.9c1411): 38
DShield reports (IP summary, reports)
2025-03-24
Number of reports: 518
Distinct targets: 334
2025-03-25
Number of reports: 272
Distinct targets: 256
2025-03-26
Number of reports: 319
Distinct targets: 287
2025-03-27
Number of reports: 292
Distinct targets: 221
2025-03-28
Number of reports: 372
Distinct targets: 296
2025-03-29
Number of reports: 430
Distinct targets: 313
2025-03-30
Number of reports: 477
Distinct targets: 312
2025-03-31
Number of reports: 327
Distinct targets: 214
2025-04-01
Number of reports: 268
Distinct targets: 150
2025-04-02
Number of reports: 487
Distinct targets: 324
Origin AS
geo
South Africa, Johannesburg
🕑 Africa/Johannesburg
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
196.251.64.0 - 196.251.127.255
last_activity
2025-04-03 16:25:10
last_warden_event
2025-04-03 16:25:10
rep
0.825
reserved_range
0
ts_added
2025-03-24 01:10:25.915000
ts_last_update
2025-04-03 16:25:20.013000

Warden event timeline

DShield event timeline

Presence on blacklists