IP address

Search at other sites:

.029138.197.11.92

Shodan(more info)

Passive DNS

IP blacklists

Spamhaus XBL CBL

138.197.11.92 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-12-14 10:13:50.043000
Was present on blacklist at: 2025-12-07 10:13

Warden events (70)

2025-12-04

ReconScanning (node.9c1411): 19

2025-12-03

ReconScanning (node.9c1411): 10

2025-12-02

ReconScanning (node.9c1411): 10

2025-11-30

ReconScanning (node.4dc198): 31

DShield reports (IP summary, reports)

2025-11-30

Number of reports: 21

Distinct targets: 13

Origin AS

AS14061 - DIGITALOCEAN-ASN

BGP Prefix

138.197.0.0/20

geo

United States, Clifton

🕑 America/New_York

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

138.197.0.0 - 138.197.255.255

last_activity

2025-12-04 13:44:06

last_warden_event

2025-12-04 13:44:06

rep

0.028557450430733815

reserved_range

0

Shodan's InternetDB

Open ports: 21, 22, 25, 80, 88, 102, 110, 111, 113, 122, 131, 221, 225, 232, 243, 311, 400, 443, 444, 445, 503, 515, 522, 541, 636, 806, 809, 888, 1027, 1110, 1234, 1311, 1337, 1400, 1433, 1443, 1444, 1515, 1521, 1604, 1741, 1800, 1801, 1926, 1935, 2003, 2008, 2016, 2018, 2020, 2021, 2103, 2107, 2121, 2200, 2221, 2222, 2323, 2327, 2332, 2404, 3018, 3019, 3105, 3106, 3112, 3117, 3123, 3124, 3132, 3136, 3310, 3333, 3345, 3401, 3402, 3541, 3542, 3842, 4002, 4022, 4040, 4042, 4321, 4434, 4443, 4444, 4506, 4531, 4808, 4840, 5004, 5010, 5222, 5232, 5237, 5400, 5432, 5435, 5608, 5620, 5640, 5801, 5900, 5903, 5910, 5920, 5938, 6000, 6001, 6006, 6432, 6433, 6443, 6512, 7007, 7010, 7018, 7218, 7415, 7434, 7443, 7535, 7603, 7700, 8000, 8001, 8002, 8005, 8008, 8010, 8018, 8020, 8024, 8027, 8029, 8039, 8041, 8080, 8103, 8112, 8116, 8118, 8120, 8123, 8125, 8126, 8128, 8129, 8132, 8140, 8141, 8144, 8145, 8200, 8203, 8241, 8322, 8333, 8334, 8402, 8403, 8417, 8430, 8433, 8434, 8442, 8504, 8505, 8506, 8514, 8519, 8520, 8529, 8531, 8606, 8621, 8640, 8701, 8709, 8724, 8732, 8810, 8814, 8831, 8834, 8835, 8837, 8838, 8902, 8911, 9000, 9002, 9008, 9010, 9017, 9019, 9021, 9033, 9035, 9040, 9100, 9101, 9103, 9110, 9120, 9135, 9142, 9200, 9201, 9202, 9205, 9208, 9215, 9219, 9220, 9221, 9306, 9333, 9418, 9600, 9633, 9800, 9922, 9928, 9939, 9943, 10000, 10004, 10005, 10011, 10020, 10023, 10032, 10038, 10123, 10134, 10205, 10324, 10443, 10909, 10934, 11111, 11211, 11300, 11434, 11920

Tags: cloud

CPEs: cpe:/a:python:python:3.9.19, cpe:/a:apache:http_server:2.4.54, cpe:/o:linux:linux_kernel, cpe:/a:openbsd:openssh:9.2p1, cpe:/a:palletsprojects:flask:2.0.1, cpe:/o:debian:debian_linux, cpe:/o:canonical:ubuntu_linux

ts_added

2025-11-30 10:13:47.640000

ts_last_update

2025-12-15 10:13:50.137000

Warden event timeline

DShield event timeline

Presence on blacklists