IP address

Passive DNS

Tags: IP in hostname

IP blacklists: DataPlane SSH login
135.125.97.20 is listed on the DataPlane SSH login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login to a host using SSH password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-28 19:10:01.457000
Was present on blacklist at: 2025-12-20 19:10, 2025-12-21 03:10, 2025-12-21 07:10, 2025-12-21 15:10, 2025-12-21 19:10, 2025-12-22 03:10, 2025-12-22 07:10, 2025-12-22 15:10, 2025-12-22 19:10, 2025-12-23 03:10, 2025-12-23 07:10, 2025-12-23 15:10, 2025-12-23 19:10, 2025-12-24 03:10, 2025-12-24 07:10, 2025-12-24 15:10, 2025-12-24 19:10, 2025-12-25 03:10, 2025-12-25 07:10, 2025-12-25 15:10, 2025-12-25 19:10, 2025-12-26 03:10, 2025-12-26 07:10, 2025-12-26 15:10, 2025-12-26 19:10, 2025-12-27 03:10, 2025-12-27 07:10, 2025-12-27 15:10, 2025-12-27 19:10, 2025-12-28 03:10, 2025-12-28 07:10, 2025-12-28 15:10, 2025-12-28 19:10

Origin AS: AS16276 - OVH
BGP Prefix: 135.125.0.0/17
geo: France; 🕑 Europe/Paris
hostname: ns31365855.ip-135-125-97.eu
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 135.125.0.0 - 135.125.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 25, 111, 123, 3128, 8006; Tags: starttls, self-signed; CPEs: cpe:/a:postfix:postfix
ts_added: 2025-12-20 19:18:38.405000
ts_last_update: 2025-12-28 19:19:14.380000

Warden event timeline

DShield event timeline

Presence on blacklists