IP address

Passive DNS

Tags:

IP blacklists: ThreatFox
192.109.200.11 is listed on the ThreatFox blacklist.

Description: ThreatFox is a free platform from abuse.ch with the goal of<br>sharing indicators of compromise (IOCs) associated with malware with the<br>infosec community, AV vendors and threat intelligence providers.
Type of feed: primary (feed detail page)

Last checked at: 2026-02-10 07:10:00.177000
Was present on blacklist at: 2026-02-08 15:10, 2026-02-08 19:10, 2026-02-09 03:10, 2026-02-09 07:10, 2026-02-09 15:10, 2026-02-09 19:10, 2026-02-10 03:10, 2026-02-10 07:10
Spamhaus SBL
192.109.200.11 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-02-08 15:10:01.295000
Was present on blacklist at: 2026-02-08 15:10
Spamhaus DROP
192.109.200.11 is listed on the Spamhaus DROP blacklist.

Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-02-08 15:10:01.295000
Was present on blacklist at: 2026-02-08 15:10

TL	Role	Category	Details
No threat category tags assigned

Origin AS: AS51396 - PFCLOUD
BGP Prefix: 192.109.200.0/24
geo: Sweden, Stockholm; 🕑 Europe/Stockholm
hostname: hallowed-protest.ptr.network
Address block ('inetnum' or 'NetRange' in whois database): 192.109.200.0 - 192.109.201.255
reserved_range: 0
Shodan's InternetDB: Open ports: 80; Tags: –; CPEs: cpe:/o:centos:centos, cpe:/a:apache:http_server:2.4.6, cpe:/a:getbootstrap:bootstrap
ts_added: 2026-02-08 15:10:01.227000
ts_last_update: 2026-02-10 15:10:14.209000

Warden event timeline

DShield event timeline

Presence on blacklists