IP address


.10538.250.161.153
Shodan(more info)
Passive DNS
Tags: Login attempts
IP blacklists
CI Army
38.250.161.153 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-12-16 03:50:00.961000
Was present on blacklist at: 2025-12-03 03:50, 2025-12-04 03:50, 2025-12-05 03:50, 2025-12-06 03:50, 2025-12-07 03:50, 2025-12-08 03:50, 2025-12-09 03:50, 2025-12-10 03:50, 2025-12-11 03:50, 2025-12-12 03:50, 2025-12-13 03:50, 2025-12-14 03:50, 2025-12-15 03:50, 2025-12-16 03:50
AbuseIPDB
38.250.161.153 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-12-16 05:00:00.711000
Was present on blacklist at: 2025-12-05 05:00, 2025-12-06 05:00, 2025-12-09 05:00, 2025-12-10 05:00, 2025-12-11 05:00, 2025-12-12 05:00, 2025-12-16 05:00
Blocklist.net.ua
38.250.161.153 is listed on the Blocklist.net.ua blacklist.

Description: BlockList contains IP addresses that perform attacks,<br>send spam or brute force passwords to the blocking list.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-12 23:15:01.451000
Was present on blacklist at: 2025-12-12 03:15, 2025-12-12 07:15, 2025-12-12 11:15, 2025-12-12 15:15, 2025-12-12 19:15, 2025-12-12 23:15
Warden events (482)
2025-12-08
AttemptLogin (node.368407): 69
2025-12-07
AttemptLogin (node.368407): 282
2025-12-06
AttemptLogin (node.4dc198): 78
AttemptLogin (node.368407): 13
2025-12-05
AttemptLogin (node.368407): 9
2025-12-04
AttemptLogin (node.368407): 31
DShield reports (IP summary, reports)
2025-12-04
Number of reports: 75
Distinct targets: 64
2025-12-05
Number of reports: 59
Distinct targets: 57
2025-12-06
Number of reports: 28
Distinct targets: 26
2025-12-07
Number of reports: 28
Distinct targets: 26
2025-12-08
Number of reports: 634
Distinct targets: 84
2025-12-09
Number of reports: 141
Distinct targets: 112
2025-12-10
Number of reports: 85
Distinct targets: 67
2025-12-11
Number of reports: 111
Distinct targets: 90
2025-12-12
Number of reports: 111
Distinct targets: 90
2025-12-13
Number of reports: 81
Distinct targets: 60
2025-12-14
Number of reports: 73
Distinct targets: 59
2025-12-15
Number of reports: 24
Distinct targets: 23
Origin AS
AS3132 - LACNIC-3132
BGP Prefix
38.250.161.0/24
geo
Peru
🕑 America/Lima
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
38.0.0.0 - 38.255.255.255
last_activity
2025-12-08 05:48:19
last_warden_event
2025-12-08 05:48:19
rep
0.10473400297619047
reserved_range
0
Shodan's InternetDB
Open ports: 22
Tags:
CPEs: cpe:/a:openbsd:openssh:8.2p1, cpe:/o:canonical:ubuntu_linux
ts_added
2025-12-03 03:51:45.147000
ts_last_update
2025-12-16 05:16:30.755000

Warden event timeline

DShield event timeline

Presence on blacklists