IP address

Passive DNS

Tags:

IP blacklists

UCEPROTECT L1

178.20.210.137 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-21 00:45:00.492000
Was present on blacklist at: 2025-11-02 00:45, 2025-11-02 08:45, 2025-11-02 16:45, 2025-11-03 00:45, 2025-11-03 08:45, 2025-11-03 16:45, 2025-11-04 00:45, 2025-11-04 08:45, 2025-11-04 16:45, 2025-11-05 00:45, 2025-11-05 08:45, 2025-11-05 16:45, 2025-11-06 00:45, 2025-11-06 08:45, 2025-11-06 16:45, 2025-11-07 00:45, 2025-11-07 08:45, 2025-11-07 16:45, 2025-11-08 00:45, 2025-11-08 08:45, 2025-11-08 16:45, 2025-11-09 00:45, 2025-11-09 08:45, 2025-11-09 16:45, 2025-11-10 00:45, 2025-11-10 08:45, 2025-11-10 16:45, 2025-11-11 00:45, 2025-11-11 08:45, 2025-11-11 16:45, 2025-11-12 00:45, 2025-11-12 08:45, 2025-11-12 16:45, 2025-11-13 00:45, 2025-11-13 08:45, 2025-11-13 16:45, 2025-11-14 00:45, 2025-11-14 08:45, 2025-11-14 16:45, 2025-11-15 00:45, 2025-11-15 08:45, 2025-11-15 16:45, 2025-11-16 00:45, 2025-11-16 08:45, 2025-11-16 16:45, 2025-11-17 00:45, 2025-11-17 08:45, 2025-11-17 16:45, 2025-11-18 00:45, 2025-11-18 08:45, 2025-11-18 16:45, 2025-11-19 00:45, 2025-11-19 08:45, 2025-11-19 16:45, 2025-11-20 00:45, 2025-11-20 08:45, 2025-11-20 16:45, 2025-11-21 00:45, 2025-11-21 08:45, 2025-11-21 16:45, 2025-11-22 00:45, 2025-11-22 08:45, 2025-11-22 16:45, 2025-11-23 00:45, 2025-11-23 08:45, 2025-11-23 16:45, 2025-11-24 00:45, 2025-11-24 08:45, 2025-11-24 16:45, 2025-11-25 00:45, 2025-11-25 08:45, 2025-11-25 16:45, 2025-11-26 00:45, 2025-11-26 08:45, 2025-11-26 16:45, 2025-11-27 00:45, 2025-11-27 08:45, 2025-11-27 16:45, 2025-11-28 00:45, 2025-11-28 08:45, 2025-11-28 16:45, 2025-11-29 00:45, 2025-11-29 08:45, 2025-11-29 16:45, 2025-11-30 00:45, 2025-11-30 08:45, 2025-11-30 16:45, 2025-12-01 00:45, 2025-12-01 08:45, 2025-12-01 16:45, 2025-12-02 00:45, 2025-12-02 08:45, 2025-12-02 16:45, 2025-12-03 00:45, 2025-12-03 08:45, 2025-12-03 16:45, 2025-12-04 00:45, 2025-12-04 08:45, 2025-12-04 16:45, 2025-12-05 00:45, 2025-12-05 08:45, 2025-12-05 16:45, 2025-12-06 00:45, 2025-12-06 08:45, 2025-12-06 16:45, 2025-12-07 00:45, 2025-12-07 08:45, 2025-12-07 16:45, 2025-12-08 00:45, 2025-12-08 08:45, 2025-12-08 16:45, 2025-12-09 00:45, 2025-12-09 08:45, 2025-12-09 16:45, 2025-12-10 00:45, 2025-12-10 08:45, 2025-12-10 16:45, 2025-12-11 00:45, 2025-12-11 08:45, 2025-12-11 16:45, 2025-12-12 00:45, 2025-12-12 08:45, 2025-12-12 16:45, 2025-12-13 00:45, 2025-12-13 08:45, 2025-12-13 16:45, 2025-12-14 00:45, 2025-12-14 08:45, 2025-12-14 16:45, 2025-12-15 00:45, 2025-12-15 08:45, 2025-12-15 16:45, 2025-12-16 00:45, 2025-12-16 08:45, 2025-12-16 16:45, 2025-12-17 00:45, 2025-12-17 08:45, 2025-12-17 16:45, 2025-12-18 00:45, 2025-12-18 08:45, 2025-12-18 16:45, 2025-12-19 00:45, 2025-12-19 08:45, 2025-12-19 16:45, 2025-12-20 00:45, 2025-12-20 08:45, 2025-12-20 16:45, 2025-12-21 00:45

DShield Block

178.20.210.137 was recently listed on the DShield Block blacklist, but currently it is not.

Description: Recommended Block List by DShield.org. It summarizes the top 20 attacking<br>class C (/24) subnets over the last three days.
Type of feed: secondary (feed detail page)

Last checked at: 2025-12-20 04:50:00
Was present on blacklist at: 2025-11-12 04:50, 2025-11-13 04:50, 2025-11-14 04:50, 2025-11-16 04:50, 2025-11-17 04:50, 2025-11-19 04:50, 2025-11-20 04:50, 2025-11-22 04:50, 2025-11-23 04:50, 2025-11-25 04:50, 2025-11-26 04:50, 2025-11-28 04:50, 2025-11-29 04:50, 2025-12-01 04:50, 2025-12-02 04:50, 2025-12-04 04:50, 2025-12-07 04:50, 2025-12-08 04:50, 2025-12-09 04:50, 2025-12-11 04:50, 2025-12-12 04:50, 2025-12-13 04:50

Warden events (9)

2025-12-02: ReconScanning (node.9c1411): 1
2025-12-01: ReconScanning (node.9c1411): 1
2025-11-28: ReconScanning (node.9c1411): 1
2025-11-27: ReconScanning (node.9c1411): 2
2025-11-26: ReconScanning (node.9c1411): 1
2025-11-25: ReconScanning (node.9c1411): 1
2025-11-05: ReconScanning (node.9c1411): 1
2025-11-03: ReconScanning (node.9c1411): 1

DShield reports (IP summary, reports)

2025-11-05: Number of reports: 19; Distinct targets: 15
2025-11-06: Number of reports: 19; Distinct targets: 15
2025-11-07: Number of reports: 19; Distinct targets: 12
2025-11-09: Number of reports: 10; Distinct targets: 6

OTX pulses

[69187f319a358c5dc32ac6f1] 2025-11-15 13:25:05.545000 | RDP honeypot logs for 2025/11/15

Author name:	jnazario
Pulse modified:	2025-11-15 13:25:05.545000
Indicator created:	2025-11-15 13:25:06
Indicator role:	None
Indicator title:
Indicator expiration:	2025-12-15 13:00:00

Origin AS: AS210006 - ASKZ
BGP Prefix: 178.20.210.0/24
geo: Germany; 🕑 Europe/Berlin
hostname: centricity.banhkemcantho.com
Address block ('inetnum' or 'NetRange' in whois database): 178.20.208.0 - 178.20.211.255
last_activity: 2025-12-02 14:08:57
last_warden_event: 2025-12-02 14:08:57
rep: 0.0
reserved_range: 0
ts_added: 2025-11-02 00:52:26.917000
ts_last_update: 2025-12-21 00:52:30.292000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses