IP address

Search at other sites:
.353149.202.132.197estrada.probe.onyphe.net
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
Spamhaus PBL
149.202.132.197 is listed on the Spamhaus PBL blacklist.

Description: The Spamhaus PBL is a DNSBL database of end-user IP address ranges which should not be delivering unauthenticated SMTP email to any Internet mail server except those provided for specifically by an ISP for that customer's use.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-12-17 11:24:50.466000
Was present on blacklist at: 2024-11-05 11:24, 2024-11-12 11:24, 2024-11-19 11:24, 2024-11-26 11:24, 2024-12-03 11:24, 2024-12-10 11:24, 2024-12-17 11:24
AbuseIPDB
149.202.132.197 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-12-22 05:00:00.500000
Was present on blacklist at: 2024-11-06 05:00, 2024-11-07 05:00, 2024-11-09 05:00, 2024-11-12 05:00, 2024-11-13 05:00, 2024-11-15 05:00, 2024-11-19 05:00, 2024-11-21 05:00, 2024-11-27 05:00, 2024-11-28 05:00, 2024-12-05 05:00, 2024-12-06 05:00, 2024-12-08 05:00, 2024-12-12 05:00, 2024-12-17 05:00, 2024-12-19 05:00, 2024-12-22 05:00
UCEPROTECT L1
149.202.132.197 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-12-22 16:45:00.529000
Was present on blacklist at: 2024-11-07 00:45, 2024-11-07 08:45, 2024-11-07 16:45, 2024-11-08 00:45, 2024-11-08 08:45, 2024-11-08 16:45, 2024-11-09 00:45, 2024-11-09 08:45, 2024-11-09 16:45, 2024-11-10 00:45, 2024-11-10 08:45, 2024-11-10 16:45, 2024-11-11 00:45, 2024-11-11 08:45, 2024-11-11 16:45, 2024-11-12 00:45, 2024-11-12 08:45, 2024-11-12 16:45, 2024-11-13 00:45, 2024-11-13 08:45, 2024-11-13 16:45, 2024-11-14 00:45, 2024-11-14 08:45, 2024-11-14 16:45, 2024-11-15 00:45, 2024-11-15 08:45, 2024-11-15 16:45, 2024-11-16 00:45, 2024-11-16 08:45, 2024-11-21 00:45, 2024-11-21 08:45, 2024-11-21 16:45, 2024-11-22 00:45, 2024-11-22 08:45, 2024-11-22 16:45, 2024-11-23 00:45, 2024-11-23 08:45, 2024-11-23 16:45, 2024-11-24 00:45, 2024-11-24 08:45, 2024-11-24 16:45, 2024-11-25 00:45, 2024-11-25 08:45, 2024-11-25 16:45, 2024-11-26 00:45, 2024-11-26 08:45, 2024-11-26 16:45, 2024-11-27 00:45, 2024-11-27 08:45, 2024-11-27 16:45, 2024-11-28 00:45, 2024-11-28 08:45, 2024-11-28 16:45, 2024-11-29 00:45, 2024-11-29 08:45, 2024-11-29 16:45, 2024-11-30 00:45, 2024-11-30 08:45, 2024-11-30 16:45, 2024-12-06 00:45, 2024-12-06 08:45, 2024-12-06 16:45, 2024-12-07 00:45, 2024-12-07 08:45, 2024-12-07 16:45, 2024-12-08 00:45, 2024-12-08 08:45, 2024-12-08 16:45, 2024-12-09 00:45, 2024-12-09 08:45, 2024-12-09 16:45, 2024-12-10 00:45, 2024-12-10 08:45, 2024-12-10 16:45, 2024-12-11 00:45, 2024-12-11 08:45, 2024-12-11 16:45, 2024-12-12 00:45, 2024-12-12 08:45, 2024-12-21 00:45, 2024-12-21 08:45, 2024-12-21 16:45, 2024-12-22 00:45, 2024-12-22 08:45, 2024-12-22 16:45
Turris greylist
149.202.132.197 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-12-20 22:15:00.195000
Was present on blacklist at: 2024-11-07 22:15, 2024-11-08 22:15, 2024-11-09 22:15, 2024-11-10 22:15, 2024-11-11 22:15, 2024-11-12 22:15, 2024-11-13 22:15, 2024-11-14 22:15, 2024-11-15 22:15, 2024-11-16 22:15, 2024-11-18 22:15, 2024-11-19 22:15, 2024-11-20 22:15, 2024-11-21 22:15, 2024-11-23 22:15, 2024-11-24 22:15, 2024-11-26 22:15, 2024-11-27 22:15, 2024-11-29 22:15, 2024-12-01 22:15, 2024-12-03 22:15, 2024-12-04 22:15, 2024-12-05 22:15, 2024-12-07 22:15, 2024-12-08 22:15, 2024-12-10 22:15, 2024-12-12 22:15, 2024-12-14 22:15, 2024-12-15 22:15, 2024-12-17 22:15, 2024-12-19 22:15, 2024-12-20 22:15
CI Army
149.202.132.197 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-11-09 03:50:01.006000
Was present on blacklist at: 2024-11-09 03:50
Spamhaus XBL CBL
149.202.132.197 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-12-17 11:24:50.466000
Was present on blacklist at: 2024-11-12 11:24, 2024-12-10 11:24, 2024-12-17 11:24
Spamhaus SBL CSS
149.202.132.197 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-12-17 11:24:50.466000
Was present on blacklist at: 2024-12-03 11:24
Blocklist.net.ua
149.202.132.197 is listed on the Blocklist.net.ua blacklist.

Description: BlockList contains IP addresses that perform attacks,<br>send spam or brute force passwords to the blocking list.
Type of feed: primary (feed detail page)

Last checked at: 2024-12-22 15:15:01.796000
Was present on blacklist at: 2024-12-16 11:15, 2024-12-16 15:15, 2024-12-16 19:15, 2024-12-16 23:15, 2024-12-17 03:15, 2024-12-17 07:15, 2024-12-17 11:15, 2024-12-17 15:15, 2024-12-17 19:15, 2024-12-17 23:15, 2024-12-18 03:15, 2024-12-18 07:15, 2024-12-18 11:15, 2024-12-18 15:15, 2024-12-18 19:15, 2024-12-18 23:15, 2024-12-19 03:15, 2024-12-19 07:15, 2024-12-19 11:15, 2024-12-19 15:15, 2024-12-19 19:15, 2024-12-19 23:15, 2024-12-20 03:15, 2024-12-20 07:15, 2024-12-20 11:15, 2024-12-20 15:15, 2024-12-20 19:15, 2024-12-20 23:15, 2024-12-21 03:15, 2024-12-21 07:15, 2024-12-21 11:15, 2024-12-21 15:15, 2024-12-21 19:15, 2024-12-21 23:15, 2024-12-22 03:15, 2024-12-22 07:15, 2024-12-22 11:15, 2024-12-22 15:15
Warden events (1156)
2024-12-20
IntrusionUserCompromise (node.cfb4f7): 1
2024-12-19
IntrusionUserCompromise (node.cfb4f7): 2
2024-12-18
ReconScanning (node.ce2b59): 11
2024-12-17
ReconScanning (node.ce2b59): 32
2024-12-16
ReconScanning (node.ce2b59): 30
2024-12-15
ReconScanning (node.ce2b59): 6
2024-12-14
ReconScanning (node.ce2b59): 31
2024-12-13
ReconScanning (node.ce2b59): 30
2024-12-12
ReconScanning (node.ce2b59): 30
IntrusionUserCompromise (node.cfb4f7): 1
2024-12-11
ReconScanning (node.ce2b59): 32
IntrusionUserCompromise (node.cfb4f7): 2
2024-12-10
ReconScanning (node.ce2b59): 31
IntrusionUserCompromise (node.cfb4f7): 1
2024-12-09
ReconScanning (node.ce2b59): 30
IntrusionUserCompromise (node.cfb4f7): 1
2024-12-08
ReconScanning (node.ce2b59): 12
2024-12-07
ReconScanning (node.ce2b59): 31
2024-12-06
ReconScanning (node.ce2b59): 30
2024-12-05
ReconScanning (node.ce2b59): 30
2024-12-04
ReconScanning (node.ce2b59): 32
2024-12-03
ReconScanning (node.ce2b59): 31
2024-12-02
ReconScanning (node.ce2b59): 31
IntrusionUserCompromise (node.cfb4f7): 1
2024-12-01
ReconScanning (node.ce2b59): 31
2024-11-30
ReconScanning (node.ce2b59): 31
2024-11-29
ReconScanning (node.ce2b59): 30
2024-11-28
ReconScanning (node.ce2b59): 31
IntrusionUserCompromise (node.cfb4f7): 1
2024-11-27
ReconScanning (node.ce2b59): 31
2024-11-26
ReconScanning (node.ce2b59): 31
2024-11-25
ReconScanning (node.ce2b59): 31
IntrusionUserCompromise (node.cfb4f7): 1
2024-11-23
ReconScanning (node.ce2b59): 31
2024-11-22
ReconScanning (node.ce2b59): 30
IntrusionUserCompromise (node.cfb4f7): 1
2024-11-21
ReconScanning (node.ce2b59): 31
2024-11-20
ReconScanning (node.ce2b59): 31
IntrusionUserCompromise (node.cfb4f7): 1
2024-11-19
ReconScanning (node.ce2b59): 32
IntrusionUserCompromise (node.cfb4f7): 1
2024-11-18
ReconScanning (node.ce2b59): 31
IntrusionUserCompromise (node.cfb4f7): 1
2024-11-17
ReconScanning (node.ce2b59): 28
2024-11-16
ReconScanning (node.ce2b59): 31
2024-11-15
ReconScanning (node.ce2b59): 31
IntrusionUserCompromise (node.cfb4f7): 2
2024-11-14
ReconScanning (node.ce2b59): 5
2024-11-13
ReconScanning (node.ce2b59): 27
IntrusionUserCompromise (node.cfb4f7): 1
2024-11-12
ReconScanning (node.ce2b59): 32
IntrusionUserCompromise (node.cfb4f7): 3
2024-11-11
ReconScanning (node.ce2b59): 21
IntrusionUserCompromise (node.cfb4f7): 1
2024-11-08
ReconScanning (node.ce2b59): 4
IntrusionUserCompromise+AttemptExploit (node.06f8e8): 1
2024-11-07
ReconScanning (node.ce2b59): 28
IntrusionUserCompromise (node.cfb4f7): 1
2024-11-06
ReconScanning (node.ce2b59): 35
IntrusionUserCompromise (node.cfb4f7): 2
2024-11-05
ReconScanning (node.ce2b59): 26
DShield reports (IP summary, reports)
2024-11-05
Number of reports: 667
Distinct targets: 449
2024-11-06
Number of reports: 1376
Distinct targets: 853
2024-11-07
Number of reports: 994
Distinct targets: 764
2024-11-08
Number of reports: 515
Distinct targets: 353
2024-11-09
Number of reports: 20
Distinct targets: 12
2024-11-10
Number of reports: 10
Distinct targets: 6
2024-11-11
Number of reports: 702
Distinct targets: 478
2024-11-12
Number of reports: 1025
Distinct targets: 695
2024-11-13
Number of reports: 968
Distinct targets: 651
2024-11-14
Number of reports: 872
Distinct targets: 574
2024-11-15
Number of reports: 812
Distinct targets: 562
2024-11-16
Number of reports: 839
Distinct targets: 557
2024-11-17
Number of reports: 732
Distinct targets: 484
2024-11-18
Number of reports: 687
Distinct targets: 484
2024-11-19
Number of reports: 907
Distinct targets: 612
2024-11-20
Number of reports: 859
Distinct targets: 584
2024-11-21
Number of reports: 866
Distinct targets: 592
2024-11-22
Number of reports: 850
Distinct targets: 566
2024-11-23
Number of reports: 593
Distinct targets: 532
2024-11-25
Number of reports: 844
Distinct targets: 588
2024-11-26
Number of reports: 917
Distinct targets: 602
2024-11-27
Number of reports: 910
Distinct targets: 606
2024-11-28
Number of reports: 902
Distinct targets: 599
2024-11-29
Number of reports: 851
Distinct targets: 576
2024-11-30
Number of reports: 816
Distinct targets: 537
2024-12-01
Number of reports: 846
Distinct targets: 571
2024-12-02
Number of reports: 821
Distinct targets: 566
2024-12-03
Number of reports: 842
Distinct targets: 576
2024-12-04
Number of reports: 827
Distinct targets: 548
2024-12-05
Number of reports: 812
Distinct targets: 542
2024-12-06
Number of reports: 804
Distinct targets: 544
2024-12-07
Number of reports: 784
Distinct targets: 516
2024-12-08
Number of reports: 313
Distinct targets: 196
2024-12-09
Number of reports: 796
Distinct targets: 400
2024-12-10
Number of reports: 813
Distinct targets: 548
2024-12-11
Number of reports: 819
Distinct targets: 556
2024-12-12
Number of reports: 796
Distinct targets: 530
2024-12-13
Number of reports: 763
Distinct targets: 509
2024-12-14
Number of reports: 475
Distinct targets: 461
2024-12-15
Number of reports: 133
Distinct targets: 87
2024-12-16
Number of reports: 756
Distinct targets: 511
2024-12-17
Number of reports: 772
Distinct targets: 541
2024-12-18
Number of reports: 763
Distinct targets: 514
2024-12-19
Number of reports: 753
Distinct targets: 520
2024-12-20
Number of reports: 739
Distinct targets: 507
2024-12-21
Number of reports: 524
Distinct targets: 465
Origin AS
AS16276 - OVH
BGP Prefix
149.202.0.0/16
geo
France
🕑 Europe/Paris
hostname
estrada.probe.onyphe.net
Address block ('inetnum' or 'NetRange' in whois database)
149.202.0.0 - 149.202.255.255
last_activity
2024-12-20 12:01:13
last_warden_event
2024-12-20 12:01:13
rep
0.35302734374999994
reserved_range
0
Shodan's InternetDB
Open ports: 80
Tags: –
CPEs: –
ts_added
2024-11-05 11:24:41.419000
ts_last_update
2024-12-22 16:52:12.497000

Warden event timeline

DShield event timeline

Presence on blacklists