IP address


.000185.208.207.247vmi2376974.contaboserver.net
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus SBL CSS
185.208.207.247 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-06-15 05:10:37.929000
Was present on blacklist at: 2025-06-01 05:03, 2025-06-08 05:04, 2025-06-15 05:10
Spamhaus XBL CBL
185.208.207.247 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-06-15 05:10:37.929000
Was present on blacklist at: 2025-06-01 05:03, 2025-06-08 05:04
Warden events (1)
2025-06-03
AnomalyTraffic (node.ffe95c): 1
DShield reports (IP summary, reports)
2025-05-31
Number of reports: 27
Distinct targets: 21
2025-06-01
Number of reports: 24
Distinct targets: 24
2025-06-02
Number of reports: 32
Distinct targets: 27
2025-06-03
Number of reports: 22
Distinct targets: 21
2025-06-04
Number of reports: 23
Distinct targets: 16
2025-06-05
Number of reports: 41
Distinct targets: 29
2025-06-06
Number of reports: 57
Distinct targets: 40
2025-06-07
Number of reports: 47
Distinct targets: 39
2025-06-08
Number of reports: 55
Distinct targets: 37
2025-06-09
Number of reports: 44
Distinct targets: 32
2025-06-10
Number of reports: 51
Distinct targets: 37
2025-06-11
Number of reports: 52
Distinct targets: 37
2025-06-12
Number of reports: 56
Distinct targets: 40
2025-06-13
Number of reports: 45
Distinct targets: 37
2025-06-14
Number of reports: 35
Distinct targets: 29
Origin AS
AS51167 - CONTABO
BGP Prefix
185.208.207.0/24
geo
Germany, Düsseldorf
🕑 Europe/Berlin
hostname
vmi2376974.contaboserver.net
Address block ('inetnum' or 'NetRange' in whois database)
185.208.204.0 - 185.208.207.255
last_activity
2025-06-03 20:22:30
last_warden_event
2025-06-03 20:22:30
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 22, 443, 5432, 5984, 8443
Tags: database, self-signed, eol-product
CPEs: cpe:/a:f5:nginx:1.24.0, cpe:/o:canonical:ubuntu_linux, cpe:/a:parallels:parallels_plesk_panel, cpe:/a:python:python, cpe:/a:postgresql:postgresql, cpe:/a:openbsd:openssh:9.6p1, cpe:/a:apache:couchdb:3.4.3, cpe:/o:linux:linux_kernel, cpe:/a:prototypejs:prototype, cpe:/a:djangoproject:django
ts_added
2025-06-01 05:03:40.056000
ts_last_update
2025-06-18 05:04:45.105000

Warden event timeline

DShield event timeline

Presence on blacklists