IP address

Passive DNS

Tags:

IP blacklists

DataPlane SSH conn

148.135.33.34 is listed on the DataPlane SSH conn blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SSH connection to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-05 11:10:01.277000
Was present on blacklist at: 2024-10-23 18:10, 2024-10-23 22:10, 2024-10-24 02:10, 2024-10-24 06:10, 2024-10-24 10:10, 2024-10-24 14:10, 2024-10-24 18:10, 2024-10-24 22:10, 2024-10-25 02:10, 2024-10-25 06:10, 2024-10-25 10:10, 2024-10-25 14:10, 2024-10-25 18:10, 2024-10-25 22:10, 2024-10-26 02:10, 2024-10-26 06:10, 2024-10-26 10:10, 2024-10-26 14:10, 2024-10-26 18:10, 2024-10-27 03:10, 2024-10-27 07:10, 2024-10-27 11:10, 2024-10-27 15:10, 2024-10-27 19:10, 2024-10-27 23:10, 2024-10-28 03:10, 2024-10-28 07:10, 2024-10-28 11:10, 2024-10-28 15:10, 2024-10-28 19:10, 2024-10-28 23:10, 2024-10-29 03:10, 2024-10-29 07:10, 2024-10-29 11:10, 2024-10-29 15:10, 2024-10-29 19:10, 2024-10-29 23:10, 2024-10-30 03:10, 2024-10-30 07:10, 2024-10-30 11:10, 2024-10-30 15:10, 2024-10-30 19:10, 2024-11-04 15:10, 2024-11-04 19:10, 2024-11-04 23:10, 2024-11-05 03:10, 2024-11-05 07:10, 2024-11-05 11:10

Spamhaus SBL CSS

148.135.33.34 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-10-30 18:12:51.370000
Was present on blacklist at: 2024-10-30 18:12

Spamhaus XBL CBL

148.135.33.34 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-10-30 18:12:51.370000
Was present on blacklist at: 2024-10-30 18:12

Warden events (8)

2024-11-05: ReconScanning (node.ce2b59): 5
2024-11-02: AttemptLogin (node.ce2b59): 1
2024-11-01: ReconScanning (node.ce2b59): 1
2024-10-27: AttemptLogin (node.ce2b59): 1

Origin AS: AS35916 - MULTA-ASN1
BGP Prefix: 148.135.0.0/17
geo: United States, Los Angeles; 🕑 America/Los_Angeles
hostname: 210-35-82-173-dedicated.multacom.com
Address block ('inetnum' or 'NetRange' in whois database): 148.135.0.0 - 148.135.255.255
last_activity: 2024-11-05 09:58:00
last_warden_event: 2024-11-05 09:58:00
rep: 0.12648809523809523
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 135, 445, 5985; Tags: –; CPEs: cpe:/a:microsoft:internet_information_services:10.0, cpe:/o:microsoft:windows
ts_added: 2024-10-23 18:12:47.159000
ts_last_update: 2024-11-05 11:14:07.884000

Warden event timeline

DShield event timeline

Presence on blacklists