IP address
Shodan(more info)
Passive DNS
Tags:
- IP blacklists
- UCEPROTECT L138.53.131.130 is listed on the UCEPROTECT L1 blacklist.Spamhaus SBL CSS
Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)
Last checked at: 2024-07-06 23:45:01.130000
Was present on blacklist at: 2024-05-01 23:45, 2024-05-02 07:45, 2024-05-02 15:45, 2024-05-02 23:45, 2024-05-03 07:45, 2024-05-03 15:45, 2024-05-03 23:45, 2024-05-04 07:45, 2024-05-04 15:45, 2024-05-04 23:45, 2024-05-05 07:45, 2024-05-05 15:45, 2024-05-05 23:45, 2024-05-06 07:45, 2024-05-06 15:45, 2024-05-06 23:45, 2024-05-07 07:45, 2024-05-07 15:45, 2024-05-07 23:45, 2024-05-08 07:45, 2024-05-08 15:45, 2024-05-08 23:45, 2024-05-09 07:45, 2024-05-09 15:45, 2024-05-09 23:45, 2024-05-10 07:45, 2024-05-10 15:45, 2024-05-10 23:45, 2024-05-11 07:45, 2024-05-11 15:45, 2024-05-11 23:45, 2024-05-12 07:45, 2024-05-12 15:45, 2024-05-12 23:45, 2024-05-13 07:45, 2024-05-13 15:45, 2024-05-13 23:45, 2024-05-14 07:45, 2024-05-14 15:45, 2024-05-14 23:45, 2024-05-15 07:45, 2024-05-15 15:45, 2024-05-15 23:45, 2024-05-16 07:45, 2024-05-16 15:45, 2024-05-16 23:45, 2024-05-17 07:45, 2024-05-17 15:45, 2024-05-17 23:45, 2024-05-18 07:45, 2024-05-18 15:45, 2024-05-18 23:45, 2024-05-19 07:45, 2024-05-19 15:45, 2024-05-19 23:45, 2024-05-20 07:45, 2024-05-20 15:45, 2024-05-20 23:45, 2024-05-21 07:45, 2024-05-21 15:45, 2024-05-21 23:45, 2024-05-22 07:45, 2024-05-22 15:45, 2024-05-22 23:45, 2024-05-23 07:45, 2024-05-23 15:45, 2024-05-23 23:45, 2024-05-24 07:45, 2024-05-24 15:45, 2024-05-24 23:45, 2024-05-25 07:45, 2024-05-25 15:45, 2024-05-25 23:45, 2024-05-26 07:45, 2024-05-26 15:45, 2024-05-26 23:45, 2024-05-27 07:45, 2024-05-27 15:45, 2024-05-27 23:45, 2024-05-28 07:45, 2024-05-28 15:45, 2024-05-28 23:45, 2024-05-29 07:45, 2024-05-29 15:45, 2024-05-29 23:45, 2024-05-30 07:45, 2024-05-30 15:45, 2024-05-30 23:45, 2024-05-31 07:45, 2024-05-31 15:45, 2024-05-31 23:45, 2024-06-01 07:45, 2024-06-01 15:45, 2024-06-01 23:45, 2024-06-02 07:45, 2024-06-02 15:45, 2024-06-02 23:45, 2024-06-03 07:45, 2024-06-03 15:45, 2024-06-03 23:45, 2024-06-04 07:45, 2024-06-04 15:45, 2024-06-04 23:45, 2024-06-05 07:45, 2024-06-05 15:45, 2024-06-05 23:45, 2024-06-06 07:45, 2024-06-06 15:45, 2024-06-06 23:45, 2024-06-07 07:45, 2024-06-07 15:45, 2024-06-07 23:45, 2024-06-08 07:45, 2024-06-08 15:45, 2024-06-08 23:45, 2024-06-09 07:45, 2024-06-09 15:45, 2024-06-09 23:45, 2024-06-10 07:45, 2024-06-10 15:45, 2024-06-10 23:45, 2024-06-11 07:45, 2024-06-11 15:45, 2024-06-11 23:45, 2024-06-12 07:45, 2024-06-12 15:45, 2024-06-12 23:45, 2024-06-13 07:45, 2024-06-13 15:45, 2024-06-13 23:45, 2024-06-14 07:45, 2024-06-14 15:45, 2024-06-14 23:45, 2024-06-15 07:45, 2024-06-15 15:45, 2024-06-15 23:45, 2024-06-16 07:45, 2024-06-16 15:45, 2024-06-16 23:45, 2024-06-17 07:45, 2024-06-17 15:45, 2024-06-17 23:45, 2024-06-18 07:45, 2024-06-18 15:45, 2024-06-18 23:45, 2024-06-19 07:45, 2024-06-19 15:45, 2024-06-19 23:45, 2024-06-20 07:45, 2024-06-20 15:45, 2024-06-20 23:45, 2024-06-21 07:45, 2024-06-21 15:45, 2024-06-21 23:45, 2024-06-22 07:45, 2024-06-22 15:45, 2024-06-22 23:45, 2024-06-23 07:45, 2024-06-23 15:45, 2024-06-23 23:45, 2024-06-24 07:45, 2024-06-24 15:45, 2024-06-24 23:45, 2024-06-25 07:45, 2024-06-25 15:45, 2024-06-25 23:45, 2024-06-26 07:45, 2024-06-26 15:45, 2024-06-26 23:45, 2024-06-27 07:45, 2024-06-27 15:45, 2024-06-27 23:45, 2024-06-28 07:45, 2024-06-28 15:45, 2024-06-28 23:45, 2024-06-29 07:45, 2024-06-29 15:45, 2024-06-29 23:45, 2024-06-30 07:45, 2024-06-30 15:45, 2024-06-30 23:45, 2024-07-01 07:45, 2024-07-01 15:45, 2024-07-01 23:45, 2024-07-02 07:45, 2024-07-02 15:45, 2024-07-02 23:45, 2024-07-03 07:45, 2024-07-03 15:45, 2024-07-03 23:45, 2024-07-04 07:45, 2024-07-04 15:45, 2024-07-04 23:45, 2024-07-05 07:45, 2024-07-05 15:45, 2024-07-05 23:45, 2024-07-06 07:45, 2024-07-06 15:45, 2024-07-06 23:4538.53.131.130 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.Spamhaus XBL CBL
Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2024-07-04 00:01:40.905000
Was present on blacklist at: 2024-05-02 00:01, 2024-05-16 00:01, 2024-05-23 00:01, 2024-06-06 00:01, 2024-06-13 00:01, 2024-06-20 00:01, 2024-06-27 00:0138.53.131.130 is listed on the Spamhaus XBL CBL blacklist.Turris greylist
Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2024-07-04 00:01:40.905000
Was present on blacklist at: 2024-05-02 00:01, 2024-05-16 00:01, 2024-05-23 00:01, 2024-05-30 00:01, 2024-06-06 00:01, 2024-06-13 00:01, 2024-06-20 00:01, 2024-06-27 00:01, 2024-07-04 00:0138.53.131.130 is listed on the Turris greylist blacklist.DataPlane SSH login
Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)
Last checked at: 2024-06-18 21:15:00.216000
Was present on blacklist at: 2024-05-17 21:15, 2024-06-18 21:1538.53.131.130 is listed on the DataPlane SSH login blacklist.SpamCop
Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs performing<br>login to a host using SSH password authentication.
Type of feed: primary (feed detail page)
Last checked at: 2024-05-29 14:10:01.627000
Was present on blacklist at: 2024-05-22 18:10, 2024-05-22 22:10, 2024-05-23 02:10, 2024-05-23 06:10, 2024-05-23 10:10, 2024-05-23 14:10, 2024-05-23 18:10, 2024-05-23 22:10, 2024-05-24 02:10, 2024-05-24 06:10, 2024-05-24 10:10, 2024-05-24 14:10, 2024-05-24 18:10, 2024-05-24 22:10, 2024-05-25 02:10, 2024-05-25 06:10, 2024-05-25 10:10, 2024-05-25 14:10, 2024-05-25 18:10, 2024-05-25 22:10, 2024-05-26 02:10, 2024-05-26 06:10, 2024-05-26 10:10, 2024-05-26 14:10, 2024-05-26 18:10, 2024-05-26 22:10, 2024-05-27 02:10, 2024-05-27 06:10, 2024-05-27 10:10, 2024-05-27 14:10, 2024-05-27 18:10, 2024-05-27 22:10, 2024-05-28 02:10, 2024-05-28 06:10, 2024-05-28 10:10, 2024-05-28 14:10, 2024-05-28 18:10, 2024-05-28 22:10, 2024-05-29 02:10, 2024-05-29 06:10, 2024-05-29 10:10, 2024-05-29 14:1038.53.131.130 is listed on the SpamCop blacklist.AbuseIPDB
Description: The SpamCop Blocking List (SCBL) lists IP addresses which have transmitted reported email to SpamCop users.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2024-07-04 00:01:40.905000
Was present on blacklist at: 2024-05-23 00:01, 2024-05-30 00:01, 2024-06-06 00:01, 2024-06-13 00:01, 2024-06-27 00:01, 2024-07-04 00:0138.53.131.130 is listed on the AbuseIPDB blacklist.blocklist.de mail
Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>IPs performing malicious activity(DDoS, spam, phishing...)
Type of feed: primary (feed detail page)
Last checked at: 2024-06-24 04:00:00.470000
Was present on blacklist at: 2024-05-24 04:00, 2024-05-26 04:00, 2024-05-27 04:00, 2024-05-30 04:00, 2024-06-03 04:00, 2024-06-05 04:00, 2024-06-06 04:00, 2024-06-24 04:0038.53.131.130 is listed on the blocklist.de mail blacklist.blocklist.de IMAP
Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing Mail attacks.
Type of feed: primary (feed detail page)
Last checked at: 2024-06-28 16:05:00.526000
Was present on blacklist at: 2024-05-24 10:05, 2024-05-24 16:05, 2024-05-24 22:05, 2024-05-25 04:05, 2024-05-25 10:05, 2024-05-25 16:05, 2024-05-25 22:05, 2024-05-26 04:05, 2024-05-26 10:05, 2024-05-26 16:05, 2024-05-26 22:05, 2024-05-27 04:05, 2024-05-27 10:05, 2024-05-27 16:05, 2024-05-27 22:05, 2024-05-28 04:05, 2024-05-28 10:05, 2024-05-28 16:05, 2024-05-28 22:05, 2024-05-31 22:05, 2024-06-01 04:05, 2024-06-01 10:05, 2024-06-01 16:05, 2024-06-01 22:05, 2024-06-02 04:05, 2024-06-02 10:05, 2024-06-02 16:05, 2024-06-05 16:05, 2024-06-05 22:05, 2024-06-06 04:05, 2024-06-06 10:05, 2024-06-06 16:05, 2024-06-06 22:05, 2024-06-07 04:05, 2024-06-07 10:05, 2024-06-07 16:05, 2024-06-13 10:05, 2024-06-13 16:05, 2024-06-13 22:05, 2024-06-14 04:05, 2024-06-14 10:05, 2024-06-14 16:05, 2024-06-14 22:05, 2024-06-15 04:05, 2024-06-15 10:05, 2024-06-15 16:05, 2024-06-16 04:05, 2024-06-16 10:05, 2024-06-16 16:05, 2024-06-16 22:05, 2024-06-17 04:05, 2024-06-17 10:05, 2024-06-17 16:05, 2024-06-17 22:05, 2024-06-23 04:05, 2024-06-23 10:05, 2024-06-23 16:05, 2024-06-23 22:05, 2024-06-24 04:05, 2024-06-24 10:05, 2024-06-24 16:05, 2024-06-24 22:05, 2024-06-25 04:05, 2024-06-25 10:05, 2024-06-25 16:05, 2024-06-26 22:05, 2024-06-27 04:05, 2024-06-27 10:05, 2024-06-27 16:05, 2024-06-27 22:05, 2024-06-28 04:05, 2024-06-28 10:05, 2024-06-28 16:0538.53.131.130 is listed on the blocklist.de IMAP blacklist.
Description: Blocklist.de feed is a free and voluntary service<br>provided by a Fraud/Abuse-specialist. IPs performing attacks<br>on the Service imap, sasl, pop3.
Type of feed: primary (feed detail page)
Last checked at: 2024-06-25 16:05:00.248000
Was present on blacklist at: 2024-05-25 04:05, 2024-05-25 10:05, 2024-05-25 16:05, 2024-05-25 22:05, 2024-06-05 22:05, 2024-06-06 04:05, 2024-06-06 10:05, 2024-06-06 16:05, 2024-06-06 22:05, 2024-06-07 04:05, 2024-06-07 10:05, 2024-06-07 16:05, 2024-06-16 04:05, 2024-06-16 10:05, 2024-06-16 16:05, 2024-06-16 22:05, 2024-06-17 04:05, 2024-06-17 10:05, 2024-06-17 16:05, 2024-06-17 22:05, 2024-06-23 04:05, 2024-06-23 10:05, 2024-06-23 16:05, 2024-06-23 22:05, 2024-06-24 04:05, 2024-06-24 10:05, 2024-06-24 16:05, 2024-06-24 22:05, 2024-06-25 04:05, 2024-06-25 10:05, 2024-06-25 16:05 - Warden events (8)
- 2024-05-29
-
- AttemptLogin (node.5fd65c): 1
- 2024-05-24
-
- AttemptLogin (node.7956a5): 1
- 2024-05-16
-
- AttemptLogin (node.5fd65c): 1
- 2024-05-14
-
- AttemptLogin (node.7956a5): 1
- 2024-05-12
-
- AttemptLogin (node.5fd65c): 1
- 2024-05-11
-
- AttemptLogin (node.5fd65c): 1
- 2024-05-04
-
- AttemptLogin (node.7d83c0): 2
- DShield reports (IP summary, reports)
- 2024-05-11
- Number of reports: 12
- Distinct targets: 6
- 2024-05-12
- Number of reports: 14
- Distinct targets: 9
- 2024-05-15
- Number of reports: 17
- Distinct targets: 12
- 2024-05-18
- Number of reports: 15
- Distinct targets: 10
- 2024-05-19
- Number of reports: 13
- Distinct targets: 7
- 2024-05-27
- Number of reports: 20
- Distinct targets: 7
- 2024-05-28
- Number of reports: 13
- Distinct targets: 9
- 2024-05-30
- Number of reports: 14
- Distinct targets: 3
- 2024-06-01
- Number of reports: 21
- Distinct targets: 3
- 2024-06-02
- Number of reports: 32
- Distinct targets: 3
- Origin AS
- AS40237 - UNITED-TELEPHONE
- BGP Prefix
- 38.53.128.0/18
- geo
- United States, Lewisburg
- 🕑 America/Chicago
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 38.0.0.0 - 38.255.255.255
- last_activity
- 2024-05-29 08:49:39.274000
- last_warden_event
- 2024-05-29 08:49:39.274000
- rep
- 0.0
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 23, 80, 161, 7547
- Tags: –
- CPEs: cpe:/o:linux:linux_kernel, cpe:/a:yahoo:yui
- ts_added
- 2024-05-02 00:01:34.366000
- ts_last_update
- 2024-07-07 00:04:17.462000