IP address

Search at other sites:

.00238.68.84.56

Shodan(more info)

Passive DNS

IP blacklists

Spamhaus XBL CBL

38.68.84.56 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-09-28 13:57:52.260000
Was present on blacklist at: 2026-09-28 13:57

Threat categories

TL	Role	Category	Details
25	src	login	port: 443

---

Warden events (1)

2026-09-28

AttemptLogin (node.ce2b59): 1

Residential proxy info (data provided by Layer3 Intel)

Last seen: 2026-10-02 09:26:53}

Percent days seen: 100 %

Networks: OXYLABS, INFATICA, DECODO, WEBSHARE, PROXYRACK, BOTTINGTOOLS, ANYIP, 711PROXY, MASKIFY, LEMONBRIGHT, BYTEPROXIES, KOOKEY, EVOMI, GEONODE, IPROYAL, GONZOPROXY, THORDATA, BYTEFUL, FLASHPROXY, PROXY-SELLER

Details: https://layer3intel.com/context/38.68.84.56

Origin AS

AS152605 - ZCOMNETWORKS-AS-AP

BGP Prefix

38.68.84.0/24

geo

Pakistan, Lahore

🕑 Asia/Karachi

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

38.0.0.0 - 38.255.255.255

last_activity

2026-09-28 12:15:49

last_warden_event

2026-09-28 12:15:49

rep

0.001868017396485011

reserved_range

0

Shodan's InternetDB

Open ports: 1701, 2000, 8083, 8728

Tags: –

CPEs: –

ts_added

2026-09-28 13:57:52.057000

ts_last_update

2026-10-02 13:58:00.246000

Warden event timeline

DShield event timeline

Presence on blacklists