IP address

Search at other sites:

.095196.251.66.189

Shodan(more info)

Passive DNS

IP blacklists

Spamhaus SBL

196.251.66.189 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-04-30 18:57:40.698000
Was present on blacklist at: 2025-04-23 18:57, 2025-04-30 18:57

Spamhaus DROP

196.251.66.189 is listed on the Spamhaus DROP blacklist.

Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-04-30 18:57:40.698000
Was present on blacklist at: 2025-04-23 18:57, 2025-04-30 18:57

Warden events (111)

2025-04-24

AnomalyTraffic (node.86dac8): 16

2025-04-23

AnomalyTraffic (node.86dac8): 38

2025-04-22

AnomalyTraffic (node.86dac8): 19

2025-04-21

AnomalyTraffic (node.86dac8): 14

2025-04-20

AnomalyTraffic (node.86dac8): 24

Origin AS

AS329007 - ELENDE

AS401116 - NYBULA

BGP Prefix

196.251.66.0/24

geo

South Africa, Johannesburg

🕑 Africa/Johannesburg

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

196.251.64.0 - 196.251.127.255

last_activity

2025-04-24 08:39:00

last_warden_event

2025-04-24 08:39:00

rep

0.09523675101143973

reserved_range

0

Shodan's InternetDB

Open ports: 22, 53

Tags: –

CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.2p1

ts_added

2025-04-23 18:57:31.613000

ts_last_update

2025-05-02 18:57:42.264000

Warden event timeline

DShield event timeline

Presence on blacklists