IP address
Shodan(more info)

Passive DNS

Tags:
Residential proxy
- IP blacklists
- Spamhaus XBL CBL84.239.46.144 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.TorProject
Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2026-10-23 20:49:00.090000
Was present on blacklist at: 2026-08-14 20:48, 2026-08-21 20:49, 2026-08-28 20:49, 2026-09-04 20:49, 2026-09-11 20:49, 2026-09-18 20:49, 2026-09-25 20:49, 2026-10-02 20:49, 2026-10-09 20:49, 2026-10-16 20:49, 2026-10-23 20:4984.239.46.144 is listed on the TorProject blacklist.FireHOL anonymizers
Description: TorProject.org list of all current TOR exit points (TorDNSEL)
Type of feed: secondary (feed detail page)
Last checked at: 2026-10-26 20:10:00
Was present on blacklist at: 2026-08-14 20:10, 2026-08-15 20:10, 2026-08-16 20:10, 2026-08-17 20:10, 2026-08-18 20:10, 2026-08-19 20:10, 2026-08-20 20:10, 2026-08-21 20:10, 2026-08-22 20:10, 2026-08-23 20:10, 2026-08-24 20:10, 2026-08-25 20:10, 2026-08-26 20:10, 2026-08-27 20:10, 2026-08-28 20:10, 2026-08-29 20:10, 2026-08-30 20:10, 2026-08-31 20:10, 2026-09-01 20:10, 2026-09-02 20:10, 2026-09-03 20:10, 2026-09-04 20:10, 2026-09-05 20:10, 2026-09-07 16:10, 2026-09-07 20:10, 2026-09-08 20:10, 2026-09-09 20:10, 2026-09-10 20:10, 2026-09-11 20:10, 2026-09-12 20:10, 2026-09-13 20:10, 2026-09-14 20:10, 2026-09-15 20:10, 2026-09-16 20:10, 2026-09-17 20:10, 2026-09-18 20:10, 2026-09-19 20:10, 2026-09-20 20:10, 2026-09-21 20:10, 2026-09-22 20:10, 2026-09-23 20:10, 2026-09-24 20:10, 2026-09-25 20:10, 2026-09-26 20:10, 2026-09-27 20:10, 2026-09-29 20:10, 2026-09-30 20:10, 2026-10-01 20:10, 2026-10-02 20:10, 2026-10-03 20:10, 2026-10-04 20:10, 2026-10-05 20:10, 2026-10-06 20:10, 2026-10-07 20:10, 2026-10-08 20:10, 2026-10-09 20:10, 2026-10-10 20:10, 2026-10-11 20:10, 2026-10-12 20:10, 2026-10-13 20:10, 2026-10-14 20:10, 2026-10-15 20:10, 2026-10-16 20:10, 2026-10-17 20:10, 2026-10-18 20:10, 2026-10-19 20:10, 2026-10-20 20:10, 2026-10-21 20:10, 2026-10-22 20:10, 2026-10-23 20:10, 2026-10-24 20:10, 2026-10-25 20:10, 2026-10-26 20:1084.239.46.144 is listed on the FireHOL anonymizers blacklist.dan.me.uk TOR Nodes
Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)
Last checked at: 2026-10-26 18:05:17
Was present on blacklist at: 2026-08-14 18:05, 2026-08-15 18:05, 2026-08-16 18:05, 2026-08-17 18:05, 2026-08-18 18:05, 2026-08-19 18:05, 2026-08-20 18:05, 2026-08-21 18:05, 2026-08-22 18:05, 2026-08-23 18:05, 2026-08-24 18:05, 2026-08-25 18:05, 2026-08-26 18:05, 2026-08-27 18:05, 2026-08-28 18:05, 2026-08-29 18:05, 2026-08-30 18:05, 2026-08-31 18:05, 2026-09-01 18:05, 2026-09-02 18:05, 2026-09-03 18:05, 2026-09-04 18:05, 2026-09-05 18:05, 2026-09-07 18:05, 2026-09-07 18:05, 2026-09-08 18:05, 2026-09-09 18:05, 2026-09-10 18:05, 2026-09-11 18:05, 2026-09-12 18:05, 2026-09-13 18:05, 2026-09-14 18:05, 2026-09-15 18:05, 2026-09-16 18:05, 2026-09-17 18:05, 2026-09-18 18:05, 2026-09-19 18:05, 2026-09-20 18:05, 2026-09-21 18:05, 2026-09-22 18:05, 2026-09-23 18:05, 2026-09-24 18:05, 2026-09-25 18:05, 2026-09-26 18:05, 2026-09-27 18:05, 2026-09-28 18:05, 2026-09-29 18:05, 2026-09-30 18:05, 2026-10-01 18:05, 2026-10-02 18:05, 2026-10-03 18:05, 2026-10-04 18:05, 2026-10-05 18:05, 2026-10-06 18:05, 2026-10-07 18:05, 2026-10-08 18:05, 2026-10-09 18:05, 2026-10-10 18:05, 2026-10-11 18:05, 2026-10-12 18:05, 2026-10-13 18:05, 2026-10-14 18:05, 2026-10-15 18:05, 2026-10-16 18:05, 2026-10-17 18:05, 2026-10-18 18:05, 2026-10-19 18:05, 2026-10-20 18:05, 2026-10-21 18:05, 2026-10-22 18:05, 2026-10-23 18:05, 2026-10-24 18:05, 2026-10-25 18:05, 2026-10-26 18:0584.239.46.144 is listed on the dan.me.uk TOR Nodes blacklist.Echelon CMS enumeration
Description: List of TOR node IPs by dan.me.uk.
Type of feed: secondary (feed detail page)
Last checked at: 2026-10-26 20:10:00
Was present on blacklist at: 2026-08-14 20:10, 2026-08-15 20:10, 2026-08-16 20:10, 2026-08-17 20:10, 2026-08-18 20:10, 2026-08-19 20:10, 2026-08-20 20:10, 2026-08-21 20:10, 2026-08-22 20:10, 2026-08-23 20:10, 2026-08-24 20:10, 2026-08-25 20:10, 2026-08-26 20:10, 2026-08-27 20:10, 2026-08-28 20:10, 2026-08-29 20:10, 2026-08-30 20:10, 2026-08-31 20:10, 2026-09-01 20:10, 2026-09-02 20:10, 2026-09-03 20:10, 2026-09-04 20:10, 2026-09-05 20:10, 2026-09-07 16:10, 2026-09-07 20:10, 2026-09-08 20:10, 2026-09-09 20:10, 2026-09-10 20:10, 2026-09-11 20:10, 2026-09-12 20:10, 2026-09-13 20:10, 2026-09-14 20:10, 2026-09-15 20:10, 2026-09-16 20:10, 2026-09-17 20:10, 2026-09-18 20:10, 2026-09-19 20:10, 2026-09-20 20:10, 2026-09-21 20:10, 2026-09-22 20:10, 2026-09-23 20:10, 2026-09-24 20:10, 2026-09-25 20:10, 2026-09-26 20:10, 2026-09-28 20:10, 2026-09-29 20:10, 2026-09-30 20:10, 2026-10-01 20:10, 2026-10-02 20:10, 2026-10-03 20:10, 2026-10-05 20:10, 2026-10-06 20:10, 2026-10-07 20:10, 2026-10-08 20:10, 2026-10-09 20:10, 2026-10-10 20:10, 2026-10-11 20:10, 2026-10-12 20:10, 2026-10-13 20:10, 2026-10-14 20:10, 2026-10-15 20:10, 2026-10-16 20:10, 2026-10-17 20:10, 2026-10-18 20:10, 2026-10-19 20:10, 2026-10-20 20:10, 2026-10-21 20:10, 2026-10-23 20:10, 2026-10-24 20:10, 2026-10-25 20:10, 2026-10-26 20:1084.239.46.144 was recently listed on the Echelon CMS enumeration blacklist, but currently it is not.Echelon TLS/SSL crawler
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Content management system discovery and enumeration
Type of feed: primary (feed detail page)
Last checked at: 2026-08-24 09:05:03.535000
Was present on blacklist at: 2026-08-18 09:05, 2026-08-19 09:05, 2026-08-20 09:05, 2026-08-21 09:05, 2026-08-22 09:05, 2026-08-23 09:05, 2026-08-24 09:0584.239.46.144 is listed on the Echelon TLS/SSL crawler blacklist.Echelon web crawler
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)
Last checked at: 2026-10-27 10:40:00.637000
Was present on blacklist at: 2026-08-18 09:40, 2026-08-19 09:40, 2026-08-20 09:40, 2026-08-21 09:40, 2026-08-22 09:40, 2026-08-23 09:40, 2026-08-24 09:40, 2026-09-14 09:40, 2026-09-15 09:40, 2026-09-16 09:40, 2026-09-17 09:40, 2026-09-18 09:40, 2026-10-21 09:40, 2026-10-22 09:40, 2026-10-23 09:40, 2026-10-24 09:40, 2026-10-25 10:40, 2026-10-26 10:40, 2026-10-27 10:4084.239.46.144 was recently listed on the Echelon web crawler blacklist, but currently it is not.AbuseIPDB
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)
Last checked at: 2026-08-24 09:50:00.438000
Was present on blacklist at: 2026-08-18 09:50, 2026-08-19 09:50, 2026-08-20 09:50, 2026-08-21 09:50, 2026-08-22 09:50, 2026-08-23 09:50, 2026-08-24 09:5084.239.46.144 was recently listed on the AbuseIPDB blacklist, but currently it is not.blocklist.de web-login
Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)
Last checked at: 2026-10-24 04:00:00.669000
Was present on blacklist at: 2026-09-03 04:00, 2026-09-30 04:00, 2026-10-24 04:0084.239.46.144 was recently listed on the blocklist.de web-login blacklist, but currently it is not.blocklist.de Apache
Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and<br>other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)
Last checked at: 2026-10-11 04:05:00.159000
Was present on blacklist at: 2026-10-09 10:05, 2026-10-09 16:05, 2026-10-09 22:05, 2026-10-10 04:05, 2026-10-10 10:05, 2026-10-10 16:05, 2026-10-10 22:05, 2026-10-11 04:0584.239.46.144 was recently listed on the blocklist.de Apache blacklist, but currently it is not.Sblam!
Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the service<br>Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)
Last checked at: 2026-10-11 04:05:00.283000
Was present on blacklist at: 2026-10-09 10:05, 2026-10-09 16:05, 2026-10-09 22:05, 2026-10-10 04:05, 2026-10-10 10:05, 2026-10-10 16:05, 2026-10-10 22:05, 2026-10-11 04:0584.239.46.144 is listed on the Sblam! blacklist.
Description: Sblam! is a service that effectively protects forms for<br>comments in blogs, forums and guestbooks from spam.
Type of feed: primary (feed detail page)
Last checked at: 2026-10-27 03:15:00.118000
Was present on blacklist at: 2026-10-19 02:15, 2026-10-20 02:15, 2026-10-21 02:15, 2026-10-22 02:15, 2026-10-23 02:15, 2026-10-24 02:15, 2026-10-25 03:15, 2026-10-26 03:15, 2026-10-27 03:15 - Warden events (6)
- 2026-10-16
-
- ReconScanning (node.ce2b59): 1
- 2026-10-09
-
- ReconScanning (node.9c1411): 1
- 2026-09-01
-
- ReconScanning (node.ce2b59): 1
- 2026-08-31
-
- ReconScanning (node.ce2b59): 1
- 2026-08-14
-
- IntrusionUserCompromise (node.ee25b8): 1
- AttemptLogin (node.ee25b8): 1
- Residential proxy info (data provided by Layer3 Intel)
- Last seen: 2026-10-24 10:26:08}
- Percent days seen: 60 %
- Networks: OXYLABS, INFATICA, BOTTINGTOOLS, BIRDPROXIES, GOPROXIES, PROXYEMPIRE, 711PROXY, BYTEPROXIES, PROXYWING, GONZOPROXY, THORDATA, BYTEFUL, FLOPPYDATA, THUNDERPROXY, DATAIMPULSE, AKE.NET, PRIVATEPROXY, NOVADA, VITALEXCLUSIVE, CLIPROXY
- Details: https://layer3intel.com/context/84.239.46.144
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | src | scan | port: 80, 443 |
| 25 | src | — | |
| 25 | src | spam |
- Origin AS
- AS201308 - CASTLEGEM
- BGP Prefix
- 84.239.46.0/24
- geo
- Romania
- 🕑 Europe/Bucharest
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 84.239.0.0 - 84.239.63.255
- last_activity
- 2026-10-16 15:30:00
- last_warden_event
- 2026-10-16 15:30:00
- rep
- 0.57986595419961
- reserved_range
- 0
- ts_added
- 2026-08-14 20:48:53.866000
- ts_last_update
- 2026-10-27 10:40:27.412000
Warden event timeline
DShield event timeline
Presence on blacklists

