IP address

Passive DNS

Tags:

IP blacklists

Mirai tracker

142.93.217.233 is listed on the Mirai tracker blacklist.

Description: IPs scanning the internet in a specific way known to be used by Mirai malware and its variants.
Type of feed: primary (feed detail page)

Last checked at: 2024-05-01 23:40:00.367000
Was present on blacklist at: 2024-03-20 00:40, 2024-03-21 00:40, 2024-03-22 00:40, 2024-03-23 00:40, 2024-03-24 00:40, 2024-03-25 00:40, 2024-03-26 00:40, 2024-03-27 00:40, 2024-03-28 00:40, 2024-03-29 00:40, 2024-03-30 00:40, 2024-04-01 23:40, 2024-04-02 23:40, 2024-04-05 23:40, 2024-04-06 23:40, 2024-04-07 23:40, 2024-04-08 23:40, 2024-04-09 23:40, 2024-04-10 23:40, 2024-04-11 23:40, 2024-04-12 23:40, 2024-04-13 23:40, 2024-04-14 23:40, 2024-04-15 23:40, 2024-04-16 23:40, 2024-04-17 23:40, 2024-04-18 23:40, 2024-04-19 23:40, 2024-04-22 23:40, 2024-04-23 23:40, 2024-04-24 23:40, 2024-04-25 23:40, 2024-04-26 23:40, 2024-04-27 23:40, 2024-05-01 23:40

Spamhaus XBL CBL

142.93.217.233 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-05-01 00:40:11.085000
Was present on blacklist at: 2024-03-20 00:40, 2024-03-27 00:40, 2024-04-03 00:40, 2024-04-10 00:40, 2024-04-17 00:40, 2024-04-24 00:40, 2024-05-01 00:40

CI Army

142.93.217.233 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-04-26 02:50:00.993000
Was present on blacklist at: 2024-04-03 02:50, 2024-04-04 02:50, 2024-04-05 02:50, 2024-04-06 02:50, 2024-04-07 02:50, 2024-04-08 02:50, 2024-04-09 02:50, 2024-04-10 02:50, 2024-04-11 02:50, 2024-04-12 02:50, 2024-04-13 02:50, 2024-04-14 02:50, 2024-04-21 02:50, 2024-04-22 02:50, 2024-04-25 02:50, 2024-04-26 02:50

DShield reports (IP summary, reports)

2024-03-20: Number of reports: 13; Distinct targets: 7
2024-03-25: Number of reports: 15; Distinct targets: 7
2024-03-26: Number of reports: 14; Distinct targets: 5
2024-04-01: Number of reports: 10; Distinct targets: 5
2024-04-02: Number of reports: 23; Distinct targets: 9
2024-04-03: Number of reports: 14; Distinct targets: 7
2024-04-08: Number of reports: 10; Distinct targets: 3
2024-04-09: Number of reports: 15; Distinct targets: 7
2024-04-10: Number of reports: 13; Distinct targets: 7
2024-04-13: Number of reports: 14; Distinct targets: 6
2024-04-15: Number of reports: 34; Distinct targets: 10
2024-04-16: Number of reports: 28; Distinct targets: 12
2024-04-17: Number of reports: 10; Distinct targets: 6
2024-04-22: Number of reports: 13; Distinct targets: 7
2024-04-23: Number of reports: 22; Distinct targets: 12
2024-04-24: Number of reports: 17; Distinct targets: 10
2024-04-25: Number of reports: 13; Distinct targets: 7

Origin AS: AS14061 - DIGITALOCEAN-ASN
BGP Prefix: 142.93.208.0/20
geo: India, Bengaluru; 🕑 Asia/Kolkata
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 142.93.0.0 - 142.93.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 22; Tags: cloud; CPEs: cpe:/a:openbsd:openssh
ts_added: 2024-03-20 00:40:02.449000
ts_last_update: 2024-05-02 00:40:11.801000

Warden event timeline

DShield event timeline

Presence on blacklists