IP address

Passive DNS

Tags:

IP blacklists

UCEPROTECT L1

46.19.138.10 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-08-13 23:45:00.747000
Was present on blacklist at: 2026-08-05 23:45, 2026-08-06 07:45, 2026-08-06 15:45, 2026-08-06 23:45, 2026-08-07 15:45, 2026-08-07 23:45, 2026-08-08 07:45, 2026-08-08 15:45, 2026-08-08 23:45, 2026-08-09 07:45, 2026-08-09 15:45, 2026-08-10 07:45, 2026-08-10 15:45, 2026-08-10 23:45, 2026-08-11 07:45, 2026-08-11 15:45, 2026-08-11 23:45, 2026-08-12 07:45, 2026-08-12 15:45, 2026-08-13 07:45, 2026-08-13 15:45, 2026-08-13 23:45

FireHOL anonymizers

46.19.138.10 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2026-08-14 00:05:15
Was present on blacklist at: 2026-08-06 00:05, 2026-08-07 00:05, 2026-08-08 00:05, 2026-08-09 00:05, 2026-08-10 00:05, 2026-08-11 00:05, 2026-08-12 00:05, 2026-08-13 00:05, 2026-08-14 00:05

CI Army

46.19.138.10 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-08-13 02:50:00.806000
Was present on blacklist at: 2026-08-06 02:50, 2026-08-07 02:50, 2026-08-08 02:50, 2026-08-11 02:50, 2026-08-12 02:50, 2026-08-13 02:50

AbuseIPDB

46.19.138.10 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-08-09 04:00:00.595000
Was present on blacklist at: 2026-08-06 04:00, 2026-08-08 04:00, 2026-08-09 04:00

Echelon SIP register scanner

46.19.138.10 is listed on the Echelon SIP register scanner blacklist.

Description: SIP VoIP registration scanning on port 5060
Type of feed: primary (feed detail page)

Last checked at: 2026-08-13 09:30:00.342000
Was present on blacklist at: 2026-08-06 09:30, 2026-08-07 09:30, 2026-08-08 09:30, 2026-08-09 09:30, 2026-08-10 09:30, 2026-08-11 09:30, 2026-08-12 09:30, 2026-08-13 09:30

Threat categories

TL	Role	Category	Details
51	src	scan	port: many
45	src	—

Warden events (7)

2026-08-14: AnomalyTraffic (node.ce2b59): 1; ReconScanning (node.ce2b59): 1
2026-08-13: ReconScanning (node.ce2b59): 1
2026-08-07: AnomalyTraffic (node.ce2b59): 1; ReconScanning (node.ce2b59): 1
2026-08-06: AnomalyTraffic (node.ce2b59): 1; ReconScanning (node.ce2b59): 1

DShield reports (IP summary, reports)

2026-08-05: Number of reports: 49; Distinct targets: 44
2026-08-06: Number of reports: 388; Distinct targets: 260
2026-08-07: Number of reports: 388; Distinct targets: 260
2026-08-11: Number of reports: 166; Distinct targets: 83
2026-08-12: Number of reports: 401; Distinct targets: 232

Origin AS: AS51852 - PLI-AS
BGP Prefix: 46.19.136.0/21
geo: Switzerland; 🕑 Europe/Zurich
hostname: hostedby.privatelayer.com
Address block ('inetnum' or 'NetRange' in whois database): 46.19.136.0 - 46.19.143.255
last_activity: 2026-08-14 01:04:00
last_warden_event: 2026-08-14 01:04:00
rep: 0.5129149579698831
reserved_range: 0
ts_added: 2026-08-06 00:04:23.405000
ts_last_update: 2026-08-14 01:10:39.191000

Warden event timeline

DShield event timeline

Presence on blacklists