IP address

Search at other sites:

.298104.243.40.207

Shodan(more info)

Passive DNS

IP blacklists

AbuseIPDB

104.243.40.207 was recently listed on the AbuseIPDB blacklist, but currently it is not.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-09-28 04:00:00.712000
Was present on blacklist at: 2026-09-24 04:00, 2026-09-27 04:00, 2026-09-28 04:00

Echelon SIP register scanner

104.243.40.207 is listed on the Echelon SIP register scanner blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: SIP VoIP registration scanning on port 5060
Type of feed: primary (feed detail page)

Last checked at: 2026-10-01 09:30:00.238000
Was present on blacklist at: 2026-09-24 09:30, 2026-09-25 09:30, 2026-09-26 09:30, 2026-09-27 09:30, 2026-09-28 09:30, 2026-09-29 09:30, 2026-09-30 09:30, 2026-10-01 09:30

blocklist.de SIP

104.243.40.207 was recently listed on the blocklist.de SIP blacklist, but currently it is not.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IP addresses that tried to login in a SIP,<br>VOIP or Asterisk Server.
Type of feed: primary (feed detail page)

Last checked at: 2026-09-26 10:05:00.093000
Was present on blacklist at: 2026-09-24 16:05, 2026-09-24 22:05, 2026-09-25 04:05, 2026-09-25 10:05, 2026-09-25 16:05, 2026-09-25 22:05, 2026-09-26 04:05, 2026-09-26 10:05

UCEPROTECT L1

104.243.40.207 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-10-01 15:45:00.614000
Was present on blacklist at: 2026-09-24 23:45, 2026-09-25 07:45, 2026-09-25 15:45, 2026-09-25 23:45, 2026-09-26 07:45, 2026-09-26 15:45, 2026-09-26 23:45, 2026-09-27 07:45, 2026-09-27 15:45, 2026-09-27 23:45, 2026-09-28 07:45, 2026-09-28 15:45, 2026-09-28 23:45, 2026-09-29 07:45, 2026-09-29 15:45, 2026-09-29 23:45, 2026-09-30 07:45, 2026-09-30 15:45, 2026-09-30 23:45, 2026-10-01 07:45, 2026-10-01 15:45

Threat categories

TL	Role	Category	Details
45	src	—
28	src	scan	port: 5060

---

Warden events (6)

2026-09-23

AnomalyTraffic (node.ce2b59): 4

ReconScanning (node.ce2b59): 2

DShield reports (IP summary, reports)

2026-09-23

Number of reports: 285

Distinct targets: 213

Origin AS

AS23470 - RELIABLESITE

BGP Prefix

104.243.40.0/24

geo

United States, Piscataway

🕑 America/New_York

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

104.243.32.0 - 104.243.47.255

last_activity

2026-09-23 14:51:01

last_warden_event

2026-09-23 14:51:01

rep

0.29837760853204465

reserved_range

0

Shodan's InternetDB

Open ports: 22, 80

Tags: –

CPEs: cpe:/o:debian:debian_linux, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:apache:http_server:2.4.68

ts_added

2026-09-23 14:50:42.499000

ts_last_update

2026-10-01 15:48:03.979000

Warden event timeline

DShield event timeline

Presence on blacklists