IP address

Passive DNS

Tags:

IP blacklists: AbuseIPDB
209.145.48.249 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc. Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-05-03 04:00:00.690000
Was present on blacklist at: 2025-05-03 04:00
blocklist.de web-login
209.145.48.249 is listed on the blocklist.de web-login blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)

Last checked at: 2025-05-07 04:05:05.151000
Was present on blacklist at: 2025-05-05 10:05, 2025-05-05 16:05, 2025-05-05 22:05, 2025-05-06 04:05, 2025-05-06 10:05, 2025-05-06 16:05, 2025-05-06 22:05, 2025-05-07 04:05
blocklist.de Apache
209.145.48.249 is listed on the blocklist.de Apache blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing attacks on the service Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)

Last checked at: 2025-05-07 04:05:05.511000
Was present on blacklist at: 2025-05-05 10:05, 2025-05-05 16:05, 2025-05-05 22:05, 2025-05-06 04:05, 2025-05-06 10:05, 2025-05-06 16:05, 2025-05-06 22:05, 2025-05-07 04:05

Origin AS: AS40021 - CONTABO
BGP Prefix: 209.145.48.0/20
geo: United States, St Louis; 🕑 America/Chicago
hostname: vmi600047.contaboserver.net
Address block ('inetnum' or 'NetRange' in whois database): 209.145.48.0 - 209.145.63.255
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 25, 80, 443; Tags: starttls, self-signed; CPEs: cpe:/a:openbsd:openssh:7.6p1, cpe:/a:postfix:postfix, cpe:/a:f5:nginx, cpe:/a:jquery:jquery, cpe:/o:canonical:ubuntu_linux
ts_added: 2025-05-03 04:01:37.033000
ts_last_update: 2025-05-08 04:01:40.438000

Warden event timeline

DShield event timeline

Presence on blacklists