IP address

Passive DNS

Tags: Static IP IP in hostname

IP blacklists

AbuseIPDB

204.168.137.241 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc. Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-03-14 05:00:00.644000
Was present on blacklist at: 2026-03-11 05:00, 2026-03-12 05:00, 2026-03-13 05:00, 2026-03-14 05:00

blocklist.de SSH

204.168.137.241 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-16 23:05:00.475000
Was present on blacklist at: 2026-03-12 11:05, 2026-03-12 17:05, 2026-03-15 05:05, 2026-03-15 11:05, 2026-03-15 23:05, 2026-03-16 05:05, 2026-03-16 11:05, 2026-03-16 17:05, 2026-03-16 23:05

blocklist.de web-login

204.168.137.241 is listed on the blocklist.de web-login blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-14 17:05:00.107000
Was present on blacklist at: 2026-03-12 23:05, 2026-03-13 05:05, 2026-03-13 11:05, 2026-03-13 17:05, 2026-03-13 23:05, 2026-03-14 05:05, 2026-03-14 11:05, 2026-03-14 17:05

blocklist.de Apache

204.168.137.241 is listed on the blocklist.de Apache blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing attacks on the service Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-14 17:05:00.218000
Was present on blacklist at: 2026-03-12 23:05, 2026-03-13 05:05, 2026-03-13 11:05, 2026-03-13 17:05, 2026-03-13 23:05, 2026-03-14 05:05, 2026-03-14 11:05, 2026-03-14 17:05

CI Army

204.168.137.241 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence database that provides scores for IPs. Source of unspecified malicious attacks most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-03-15 03:50:01.019000
Was present on blacklist at: 2026-03-13 03:50, 2026-03-14 03:50, 2026-03-15 03:50

Spamhaus XBL CBL

204.168.137.241 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-03-18 05:00:12.392000
Was present on blacklist at: 2026-03-18 05:00

Threat categories

TL	Role	Category	Details
75	src	scan	port: 22, 23, 80, 443, 2222, 2375
50	src	login	protocol: ssh, telnet port: 23
37	src	—

Warden events (16573)

2026-03-13: ReconScanning (node.9c1411): 39
2026-03-12: ReconScanning (node.9c1411): 58; IntrusionUserCompromise (node.cfb4f7): 3360; ReconScanning (node.4dc198): 49
2026-03-11: IntrusionUserCompromise (node.cfb4f7): 13060; ReconScanning (node.4dc198): 2; ReconScanning (node.9c1411): 5

DShield reports (IP summary, reports)

2026-03-11: Number of reports: 18; Distinct targets: 5
2026-03-12: Number of reports: 279; Distinct targets: 121
2026-03-13: Number of reports: 279; Distinct targets: 121

Origin AS: AS24940 - HETZNER-AS
BGP Prefix: 204.168.128.0/17
geo: Germany; 🕑 Europe/Berlin
hostname: static.241.137.168.204.clients.your-server.de
hostname_class: ['ip_in_hostname', 'static']
Address block ('inetnum' or 'NetRange' in whois database): 204.168.128.0 - 204.168.255.255
last_activity: 2026-03-13 10:35:25
last_warden_event: 2026-03-13 10:35:25
rep: 0.10357142857142858
reserved_range: 0
ts_added: 2026-03-11 05:00:03.740000
ts_last_update: 2026-03-21 05:00:10.481000

Warden event timeline

DShield event timeline

Presence on blacklists