IP address

Search at other sites:
--138.199.48.155unn-138-199-48-155.datapacket.com
Shodan(more info)
Passive DNS
Tags: IP in hostname
IP blacklists
Spamhaus XBL CBL
138.199.48.155 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-12-19 16:39:19.509000
Was present on blacklist at: 2025-12-19 16:39
OTX pulses
[694551f8d63b0bb322f13132] 2025-12-19 13:24:07.844000 | VNC honeypot logs for 2025/12/19
Author name:jnazario
Pulse modified:2025-12-19 13:24:07.844000
Indicator created:2025-12-19 13:24:09
Indicator role:None
Indicator title:
Indicator expiration:2026-01-18 13:00:00
[6946a39364d7003964d8214a] 2025-12-20 13:24:35.257000 | VNC honeypot logs for 2025/12/20
Author name:jnazario
Pulse modified:2025-12-20 13:24:35.257000
Indicator created:2025-12-20 13:24:36
Indicator role:None
Indicator title:
Indicator expiration:2026-01-19 13:00:00
[6947f66b07f4e9b74559cd38] 2025-12-21 13:30:19.016000 | VNC honeypot logs for 2025/12/21
Author name:jnazario
Pulse modified:2025-12-21 13:30:19.016000
Indicator created:2025-12-21 13:30:19
Indicator role:None
Indicator title:
Indicator expiration:2026-01-20 13:00:00
Origin AS
AS212238 - CDNEXT
BGP Prefix
138.199.48.0/24
geo
Canada, Toronto
🕑 America/Toronto
hostname
unn-138-199-48-155.datapacket.com
hostname_class
['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database)
138.199.0.0 - 138.199.63.255
last_activity
2025-12-21 16:38:50.563000
reserved_range
0
Shodan's InternetDB
Open ports: 1443, 4000, 7443
Tags: –
CPEs: –
ts_added
2025-12-19 16:39:19.320000
ts_last_update
2025-12-21 16:39:20.181000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses