IP address


.000196.251.85.189
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
Spamhaus SBL
196.251.85.189 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-05-05 11:10:10.178000
Was present on blacklist at: 2025-02-24 11:10, 2025-03-03 11:10, 2025-03-10 11:10, 2025-03-17 11:10, 2025-03-24 11:10, 2025-03-31 11:10, 2025-04-07 11:10, 2025-04-14 11:10, 2025-04-21 11:10, 2025-04-28 11:10, 2025-05-05 11:10
Spamhaus DROP
196.251.85.189 is listed on the Spamhaus DROP blacklist.

Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-05-05 11:10:10.178000
Was present on blacklist at: 2025-02-24 11:10, 2025-03-03 11:10, 2025-03-10 11:10, 2025-03-17 11:10, 2025-03-24 11:10, 2025-03-31 11:10, 2025-04-07 11:10, 2025-04-14 11:10, 2025-04-21 11:10, 2025-04-28 11:10, 2025-05-05 11:10
CI Army
196.251.85.189 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-04-15 02:50:01.877000
Was present on blacklist at: 2025-02-25 03:50, 2025-02-26 03:50, 2025-02-27 03:50, 2025-02-28 03:50, 2025-03-01 03:50, 2025-03-02 03:50, 2025-03-03 03:50, 2025-03-04 03:50, 2025-03-05 03:50, 2025-03-06 03:50, 2025-03-07 03:50, 2025-03-08 03:50, 2025-03-09 03:50, 2025-03-10 03:50, 2025-03-12 03:50, 2025-03-13 03:50, 2025-03-14 03:50, 2025-03-15 03:50, 2025-03-16 03:50, 2025-03-17 03:50, 2025-03-18 03:50, 2025-03-19 03:50, 2025-03-20 03:50, 2025-03-21 03:50, 2025-03-22 03:50, 2025-03-23 03:50, 2025-03-24 03:50, 2025-03-25 03:50, 2025-03-26 03:50, 2025-03-27 03:50, 2025-03-28 03:50, 2025-03-29 03:50, 2025-03-30 02:50, 2025-03-31 02:50, 2025-04-01 02:50, 2025-04-02 02:50, 2025-04-03 02:50, 2025-04-04 02:50, 2025-04-05 02:50, 2025-04-06 02:50, 2025-04-07 02:50, 2025-04-08 02:50, 2025-04-09 02:50, 2025-04-10 02:50, 2025-04-11 02:50, 2025-04-12 02:50, 2025-04-13 02:50, 2025-04-14 02:50, 2025-04-15 02:50
AbuseIPDB
196.251.85.189 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-04-29 04:00:00.675000
Was present on blacklist at: 2025-02-25 05:00, 2025-02-26 05:00, 2025-02-27 05:00, 2025-02-28 05:00, 2025-03-01 05:00, 2025-03-02 05:00, 2025-03-03 05:00, 2025-03-05 05:00, 2025-03-06 05:00, 2025-03-07 05:00, 2025-03-08 05:00, 2025-03-09 05:00, 2025-03-10 05:00, 2025-03-11 05:00, 2025-03-12 05:00, 2025-03-13 05:00, 2025-03-14 05:00, 2025-03-15 05:00, 2025-03-16 05:00, 2025-03-17 05:00, 2025-03-18 05:00, 2025-03-19 05:00, 2025-03-20 05:00, 2025-03-21 05:00, 2025-03-22 05:00, 2025-03-23 05:00, 2025-03-24 05:00, 2025-03-25 05:00, 2025-03-26 05:00, 2025-03-27 05:00, 2025-03-28 05:00, 2025-03-29 05:00, 2025-03-30 04:00, 2025-03-31 04:00, 2025-04-01 04:00, 2025-04-02 04:00, 2025-04-03 04:00, 2025-04-04 04:00, 2025-04-05 04:00, 2025-04-06 04:00, 2025-04-07 04:00, 2025-04-08 04:00, 2025-04-09 04:00, 2025-04-10 04:00, 2025-04-11 04:00, 2025-04-12 04:00, 2025-04-13 04:00, 2025-04-14 04:00, 2025-04-15 04:00, 2025-04-23 04:00, 2025-04-29 04:00
Warden events (15415)
2025-04-14
ReconScanning (node.368407): 36
ReconScanning (node.4dc198): 35
ReconScanning (node.9c1411): 10
2025-04-13
ReconScanning (node.9c1411): 43
ReconScanning (node.368407): 149
ReconScanning (node.4dc198): 149
2025-04-12
ReconScanning (node.4dc198): 130
ReconScanning (node.368407): 129
ReconScanning (node.9c1411): 36
2025-04-11
ReconScanning (node.4dc198): 172
ReconScanning (node.368407): 174
ReconScanning (node.9c1411): 43
2025-04-10
ReconScanning (node.9c1411): 32
ReconScanning (node.4dc198): 118
ReconScanning (node.368407): 117
2025-04-09
ReconScanning (node.9c1411): 58
ReconScanning (node.4dc198): 215
ReconScanning (node.368407): 212
2025-04-08
ReconScanning (node.4dc198): 201
ReconScanning (node.368407): 200
ReconScanning (node.9c1411): 57
2025-04-07
ReconScanning (node.4dc198): 108
ReconScanning (node.368407): 104
ReconScanning (node.9c1411): 29
2025-04-06
ReconScanning (node.4dc198): 175
ReconScanning (node.368407): 174
ReconScanning (node.9c1411): 46
2025-04-05
ReconScanning (node.4dc198): 136
ReconScanning (node.368407): 136
ReconScanning (node.9c1411): 43
2025-04-04
ReconScanning (node.4dc198): 191
ReconScanning (node.368407): 192
ReconScanning (node.9c1411): 51
2025-04-03
ReconScanning (node.4dc198): 197
ReconScanning (node.368407): 197
ReconScanning (node.9c1411): 51
2025-04-02
ReconScanning (node.368407): 104
ReconScanning (node.4dc198): 104
ReconScanning (node.9c1411): 27
2025-04-01
ReconScanning (node.368407): 203
ReconScanning (node.4dc198): 206
ReconScanning (node.9c1411): 57
2025-03-31
ReconScanning (node.4dc198): 121
ReconScanning (node.368407): 120
ReconScanning (node.9c1411): 33
2025-03-30
ReconScanning (node.4dc198): 148
ReconScanning (node.368407): 145
ReconScanning (node.9c1411): 38
2025-03-29
ReconScanning (node.368407): 97
ReconScanning (node.4dc198): 97
ReconScanning (node.9c1411): 26
2025-03-28
ReconScanning (node.4dc198): 159
ReconScanning (node.368407): 159
ReconScanning (node.9c1411): 47
2025-03-27
ReconScanning (node.4dc198): 101
ReconScanning (node.368407): 105
ReconScanning (node.9c1411): 38
2025-03-26
ReconScanning (node.4dc198): 117
ReconScanning (node.368407): 114
ReconScanning (node.9c1411): 31
2025-03-25
ReconScanning (node.368407): 122
ReconScanning (node.4dc198): 122
ReconScanning (node.9c1411): 31
2025-03-24
ReconScanning (node.4dc198): 61
ReconScanning (node.368407): 61
ReconScanning (node.9c1411): 13
2025-03-23
ReconScanning (node.9c1411): 55
ReconScanning (node.368407): 115
ReconScanning (node.4dc198): 114
2025-03-22
ReconScanning (node.9c1411): 71
ReconScanning (node.4dc198): 184
ReconScanning (node.368407): 189
2025-03-21
ReconScanning (node.9c1411): 69
ReconScanning (node.368407): 123
ReconScanning (node.4dc198): 120
2025-03-20
ReconScanning (node.368407): 166
ReconScanning (node.4dc198): 165
ReconScanning (node.9c1411): 52
2025-03-19
ReconScanning (node.4dc198): 133
ReconScanning (node.368407): 131
ReconScanning (node.9c1411): 44
2025-03-18
ReconScanning (node.368407): 103
ReconScanning (node.9c1411): 29
ReconScanning (node.4dc198): 103
2025-03-17
ReconScanning (node.368407): 189
ReconScanning (node.4dc198): 189
ReconScanning (node.9c1411): 53
2025-03-16
ReconScanning (node.368407): 138
ReconScanning (node.4dc198): 138
ReconScanning (node.9c1411): 42
2025-03-15
ReconScanning (node.368407): 154
ReconScanning (node.4dc198): 152
ReconScanning (node.9c1411): 42
2025-03-14
ReconScanning (node.368407): 134
ReconScanning (node.4dc198): 134
ReconScanning (node.9c1411): 36
2025-03-13
ReconScanning (node.4dc198): 96
ReconScanning (node.368407): 94
ReconScanning (node.9c1411): 27
2025-03-12
ReconScanning (node.4dc198): 179
ReconScanning (node.368407): 181
ReconScanning (node.9c1411): 45
2025-03-11
ReconScanning (node.4dc198): 145
ReconScanning (node.9c1411): 37
ReconScanning (node.368407): 146
2025-03-10
ReconScanning (node.368407): 210
ReconScanning (node.4dc198): 210
ReconScanning (node.9c1411): 22
2025-03-09
ReconScanning (node.368407): 119
ReconScanning (node.4dc198): 94
2025-03-08
ReconScanning (node.368407): 129
ReconScanning (node.4dc198): 99
2025-03-07
ReconScanning (node.368407): 106
ReconScanning (node.4dc198): 85
2025-03-06
ReconScanning (node.4dc198): 64
ReconScanning (node.368407): 141
2025-03-05
ReconScanning (node.4dc198): 118
ReconScanning (node.368407): 121
2025-03-04
ReconScanning (node.368407): 156
ReconScanning (node.4dc198): 114
2025-03-03
ReconScanning (node.368407): 131
ReconScanning (node.4dc198): 100
2025-03-02
ReconScanning (node.368407): 165
ReconScanning (node.4dc198): 87
2025-03-01
ReconScanning (node.4dc198): 84
ReconScanning (node.368407): 134
2025-02-28
ReconScanning (node.368407): 155
ReconScanning (node.4dc198): 152
2025-02-27
ReconScanning (node.368407): 158
ReconScanning (node.4dc198): 153
2025-02-26
ReconScanning (node.4dc198): 189
ReconScanning (node.368407): 190
2025-02-25
ReconScanning (node.4dc198): 190
ReconScanning (node.368407): 189
2025-02-24
ReconScanning (node.4dc198): 140
ReconScanning (node.368407): 140
DShield reports (IP summary, reports)
2025-02-24
Number of reports: 2003
Distinct targets: 375
2025-02-25
Number of reports: 2973
Distinct targets: 392
2025-02-26
Number of reports: 3038
Distinct targets: 389
2025-02-27
Number of reports: 2758
Distinct targets: 375
2025-02-28
Number of reports: 2432
Distinct targets: 386
2025-03-01
Number of reports: 1544
Distinct targets: 352
2025-03-02
Number of reports: 1805
Distinct targets: 353
2025-03-03
Number of reports: 2168
Distinct targets: 369
2025-03-04
Number of reports: 2500
Distinct targets: 379
2025-03-05
Number of reports: 1862
Distinct targets: 355
2025-03-06
Number of reports: 2292
Distinct targets: 363
2025-03-07
Number of reports: 1886
Distinct targets: 350
2025-03-08
Number of reports: 2021
Distinct targets: 347
2025-03-09
Number of reports: 1939
Distinct targets: 359
2025-03-10
Number of reports: 3533
Distinct targets: 409
2025-03-11
Number of reports: 2419
Distinct targets: 368
2025-03-12
Number of reports: 3084
Distinct targets: 406
2025-03-13
Number of reports: 1685
Distinct targets: 324
2025-03-14
Number of reports: 2218
Distinct targets: 359
2025-03-15
Number of reports: 1778
Distinct targets: 339
2025-03-16
Number of reports: 2246
Distinct targets: 363
2025-03-17
Number of reports: 2203
Distinct targets: 342
2025-03-18
Number of reports: 1827
Distinct targets: 361
2025-03-19
Number of reports: 2157
Distinct targets: 405
2025-03-20
Number of reports: 2056
Distinct targets: 355
2025-03-21
Number of reports: 1630
Distinct targets: 350
2025-03-22
Number of reports: 3193
Distinct targets: 383
2025-03-23
Number of reports: 2354
Distinct targets: 387
2025-03-24
Number of reports: 1025
Distinct targets: 326
2025-03-25
Number of reports: 1365
Distinct targets: 364
2025-03-26
Number of reports: 998
Distinct targets: 344
2025-03-27
Number of reports: 1372
Distinct targets: 371
2025-03-28
Number of reports: 2279
Distinct targets: 404
2025-03-29
Number of reports: 1308
Distinct targets: 372
2025-03-30
Number of reports: 2732
Distinct targets: 401
2025-03-31
Number of reports: 2197
Distinct targets: 383
2025-04-01
Number of reports: 2932
Distinct targets: 393
2025-04-02
Number of reports: 1838
Distinct targets: 406
2025-04-03
Number of reports: 3510
Distinct targets: 422
2025-04-04
Number of reports: 2507
Distinct targets: 427
2025-04-05
Number of reports: 2146
Distinct targets: 407
2025-04-06
Number of reports: 3075
Distinct targets: 425
2025-04-07
Number of reports: 1953
Distinct targets: 394
2025-04-08
Number of reports: 2245
Distinct targets: 410
2025-04-09
Number of reports: 2945
Distinct targets: 423
2025-04-10
Number of reports: 1229
Distinct targets: 356
2025-04-11
Number of reports: 3023
Distinct targets: 417
2025-04-12
Number of reports: 2227
Distinct targets: 405
2025-04-13
Number of reports: 1529
Distinct targets: 382
2025-04-14
Number of reports: 385
Distinct targets: 192
Origin AS
geo
Nigeria, Lagos
🕑 Africa/Lagos
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
196.251.64.0 - 196.251.127.255
last_activity
2025-04-14 03:49:29
last_warden_event
2025-04-14 03:49:29
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 22
Tags: scanner
CPEs: cpe:/a:openbsd:openssh:9.6p1, cpe:/o:canonical:ubuntu_linux
ts_added
2025-02-24 11:10:05.034000
ts_last_update
2025-05-06 11:10:10.227000

Warden event timeline

DShield event timeline

Presence on blacklists