IP address

Passive DNS

Tags: Static IP IP in hostname Scanner

IP blacklists

Spamhaus SBL

216.126.236.108 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-03-11 03:42:00.342000
Was present on blacklist at: 2025-12-17 03:42, 2025-12-24 03:42, 2025-12-31 03:42, 2026-01-07 03:42, 2026-01-14 03:42, 2026-01-21 03:42, 2026-01-28 03:42, 2026-02-04 03:42, 2026-02-11 03:42, 2026-02-18 03:42, 2026-02-25 03:42, 2026-03-04 03:42, 2026-03-11 03:42

CI Army

216.126.236.108 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-03-03 03:50:01.123000
Was present on blacklist at: 2025-12-15 03:50, 2025-12-16 03:50, 2025-12-18 03:50, 2025-12-19 03:50, 2025-12-20 03:50, 2025-12-21 03:50, 2025-12-22 03:50, 2025-12-23 03:50, 2025-12-24 03:50, 2025-12-25 03:50, 2025-12-26 03:50, 2025-12-27 03:50, 2025-12-28 03:50, 2025-12-29 03:50, 2025-12-30 03:50, 2026-01-01 03:50, 2026-01-02 03:50, 2026-01-03 03:50, 2026-01-05 03:50, 2026-01-08 03:50, 2026-01-09 03:50, 2026-01-23 03:50, 2026-01-29 03:50, 2026-01-30 03:50, 2026-01-31 03:50, 2026-02-01 03:50, 2026-02-02 03:50, 2026-02-03 03:50, 2026-02-04 03:50, 2026-02-05 03:50, 2026-02-06 03:50, 2026-02-08 03:50, 2026-02-11 03:50, 2026-02-12 03:50, 2026-02-14 03:50, 2026-02-15 03:50, 2026-02-16 03:50, 2026-02-18 03:50, 2026-02-19 03:50, 2026-02-22 03:50, 2026-02-23 03:50, 2026-02-27 03:50, 2026-02-28 03:50, 2026-03-01 03:50, 2026-03-02 03:50, 2026-03-03 03:50

AbuseIPDB

216.126.236.108 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-02-21 05:00:00.592000
Was present on blacklist at: 2025-12-22 05:00, 2025-12-24 05:00, 2026-01-05 05:00, 2026-01-07 05:00, 2026-02-06 05:00, 2026-02-08 05:00, 2026-02-13 05:00, 2026-02-17 05:00, 2026-02-21 05:00

Threat categories

TL	Role	Category	Details
No threat category tags assigned

Warden events (780)

2026-02-26: ReconScanning (node.368407): 1
2026-02-22: ReconScanning (node.368407): 7
2026-02-20: ReconScanning (node.4dc198): 16; ReconScanning (node.368407): 9; ReconScanning (node.9c1411): 10
2026-02-19: ReconScanning (node.368407): 37
2026-02-17: ReconScanning (node.368407): 1
2026-02-13: ReconScanning (node.368407): 8; ReconScanning (node.4dc198): 1; ReconScanning (node.9c1411): 12
2026-02-12: ReconScanning (node.368407): 38
2026-02-08: ReconScanning (node.368407): 4
2026-02-07: ReconScanning (node.9c1411): 3; ReconScanning (node.368407): 7
2026-02-06: ReconScanning (node.4dc198): 27; ReconScanning (node.368407): 8; ReconScanning (node.9c1411): 7
2026-02-05: ReconScanning (node.4dc198): 34; ReconScanning (node.368407): 39
2026-02-01: ReconScanning (node.4dc198): 47
2026-01-28: ReconScanning (node.4dc198): 47; ReconScanning (node.368407): 7
2026-01-23: ReconScanning (node.368407): 38
2026-01-22: ReconScanning (node.4dc198): 31
2026-01-06: ReconScanning (node.4dc198): 23
2026-01-05: ReconScanning (node.4dc198): 22
2026-01-01: ReconScanning (node.4dc198): 15
2025-12-31: ReconScanning (node.4dc198): 18
2025-12-29: ReconScanning (node.4dc198): 46
2025-12-28: ReconScanning (node.4dc198): 17; ReconScanning (node.368407): 1
2025-12-26: ReconScanning (node.368407): 40
2025-12-25: ReconScanning (node.4dc198): 16
2025-12-23: ReconScanning (node.368407): 6
2025-12-22: ReconScanning (node.4dc198): 66
2025-12-19: ReconScanning (node.4dc198): 16
2025-12-18: ReconScanning (node.4dc198): 17; ReconScanning (node.368407): 35
2025-12-15: ReconScanning (node.368407): 3

DShield reports (IP summary, reports)

2025-12-16: Number of reports: 10; Distinct targets: 8
2025-12-21: Number of reports: 18; Distinct targets: 12
2025-12-22: Number of reports: 10; Distinct targets: 6
2025-12-23: Number of reports: 26; Distinct targets: 21
2025-12-24: Number of reports: 26; Distinct targets: 21
2025-12-25: Number of reports: 19; Distinct targets: 15
2025-12-26: Number of reports: 19; Distinct targets: 15
2025-12-27: Number of reports: 17; Distinct targets: 14
2025-12-28: Number of reports: 10; Distinct targets: 6
2025-12-29: Number of reports: 15; Distinct targets: 13
2025-12-30: Number of reports: 13; Distinct targets: 9
2026-01-01: Number of reports: 44; Distinct targets: 38
2026-01-02: Number of reports: 44; Distinct targets: 38
2026-01-03: Number of reports: 13; Distinct targets: 8
2026-01-04: Number of reports: 18; Distinct targets: 15
2026-01-05: Number of reports: 11; Distinct targets: 8
2026-01-06: Number of reports: 32; Distinct targets: 29
2026-01-23: Number of reports: 15; Distinct targets: 12
2026-01-24: Number of reports: 15; Distinct targets: 12
2026-02-24: Number of reports: 13; Distinct targets: 8
2026-02-25: Number of reports: 13; Distinct targets: 8
2026-02-27: Number of reports: 20; Distinct targets: 17
2026-02-28: Number of reports: 22; Distinct targets: 15

Origin AS: AS14956 - ROUTERHOSTING
BGP Prefix: 216.126.236.0/24
geo: United States, Ogden; 🕑 America/Denver
hostname: 108.236.126.216.static.cloudzy.com
hostname_class: ['ip_in_hostname', 'static']
Address block ('inetnum' or 'NetRange' in whois database): 216.126.224.0 - 216.126.239.255
last_activity: 2026-02-26 09:31:58
last_warden_event: 2026-02-26 09:31:58
rep: 0.0
reserved_range: 0
Shodan's InternetDB: Open ports: 3389; Tags: self-signed, scanner, eol-os; CPEs: –
ts_added: 2025-12-03 03:41:59.481000
ts_last_update: 2026-03-15 03:42:00.258000

Warden event timeline

DShield event timeline

Presence on blacklists