IP address

Search at other sites:

.12538.242.211.249mail.ay-group.net

Shodan(more info)

Passive DNS

IP blacklists

CI Army

38.242.211.249 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-01-09 03:50:00.977000
Was present on blacklist at: 2026-01-04 03:50, 2026-01-05 03:50, 2026-01-06 03:50, 2026-01-07 03:50, 2026-01-08 03:50, 2026-01-09 03:50

AbuseIPDB

38.242.211.249 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-01-05 05:00:00.771000
Was present on blacklist at: 2026-01-04 05:00, 2026-01-05 05:00

Warden events (115)

2026-01-05

ReconScanning (node.368407): 21

ReconScanning (node.4dc198): 7

AnomalyTraffic (node.ffe95c): 3

2026-01-04

ReconScanning (node.368407): 38

AnomalyTraffic (node.ffe95c): 2

ReconScanning (node.4dc198): 7

2026-01-03

ReconScanning (node.368407): 23

AnomalyTraffic (node.ffe95c): 4

ReconScanning (node.4dc198): 10

DShield reports (IP summary, reports)

2026-01-04

Number of reports: 574

Distinct targets: 97

2026-01-05

Number of reports: 472

Distinct targets: 107

Origin AS

AS51167 - CONTABO

BGP Prefix

38.242.192.0/19

geo

France, Lauterbourg

🕑 Europe/Paris

hostname

mail.ay-group.net

Address block ('inetnum' or 'NetRange' in whois database)

38.0.0.0 - 38.255.255.255

last_activity

2026-01-05 16:11:59

last_warden_event

2026-01-05 16:11:59

rep

0.125

reserved_range

0

Shodan's InternetDB

Open ports: 22, 25, 80, 110, 143, 465, 995, 3000, 3306, 5432, 7777, 8080, 9000

Tags: database, starttls, self-signed

CPEs: cpe:/a:f5:nginx, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1, cpe:/a:oracle:mysql:8.0.44-0ubuntu0.22.04.2, cpe:/a:apache:http_server:2.4.52, cpe:/a:postgresql:postgresql

ts_added

2026-01-03 10:10:06.454000

ts_last_update

2026-01-13 10:10:10.414000

Warden event timeline

DShield event timeline

Presence on blacklists