IP address


--152.89.198.42
Shodan(more info)
Passive DNS
Tags:
IP blacklists
UCEPROTECT L1
152.89.198.42 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-06-15 07:45:00.674000
Was present on blacklist at: 2024-03-17 08:45, 2024-03-17 16:45, 2024-03-18 00:45, 2024-03-18 08:45, 2024-03-18 16:45, 2024-03-19 00:45, 2024-03-19 08:45, 2024-03-19 16:45, 2024-03-20 00:45, 2024-03-20 08:45, 2024-03-20 16:45, 2024-03-21 00:45, 2024-03-21 08:45, 2024-03-21 16:45, 2024-03-22 00:45, 2024-03-22 08:45, 2024-03-22 16:45, 2024-03-23 00:45, 2024-03-23 08:45, 2024-03-23 16:45, 2024-03-24 00:45, 2024-03-24 08:45, 2024-03-24 16:45, 2024-03-25 00:45, 2024-03-25 08:45, 2024-03-25 16:45, 2024-03-26 00:45, 2024-03-26 08:45, 2024-03-26 16:45, 2024-03-27 00:45, 2024-03-27 08:45, 2024-03-27 16:45, 2024-03-28 00:45, 2024-03-28 08:45, 2024-03-28 16:45, 2024-03-29 00:45, 2024-03-29 08:45, 2024-03-30 16:45, 2024-03-31 00:45, 2024-03-31 07:45, 2024-03-31 15:45, 2024-03-31 23:45, 2024-04-01 07:45, 2024-04-01 15:45, 2024-04-01 23:45, 2024-04-02 07:45, 2024-04-02 15:45, 2024-04-02 23:45, 2024-04-03 07:45, 2024-04-03 15:45, 2024-04-03 23:45, 2024-04-04 07:45, 2024-04-04 15:45, 2024-04-04 23:45, 2024-04-05 07:45, 2024-04-05 15:45, 2024-04-05 23:45, 2024-04-06 07:45, 2024-04-06 15:45, 2024-04-06 23:45, 2024-04-07 07:45, 2024-04-07 15:45, 2024-04-07 23:45, 2024-04-08 07:45, 2024-04-08 15:45, 2024-04-08 23:45, 2024-04-09 07:45, 2024-04-09 15:45, 2024-04-09 23:45, 2024-04-10 07:45, 2024-04-10 15:45, 2024-04-10 23:45, 2024-04-11 07:45, 2024-04-11 15:45, 2024-04-11 23:45, 2024-04-12 07:45, 2024-04-12 15:45, 2024-04-12 23:45, 2024-04-13 07:45, 2024-04-13 15:45, 2024-04-13 23:45, 2024-04-14 07:45, 2024-04-14 15:45, 2024-04-14 23:45, 2024-04-15 07:45, 2024-04-15 15:45, 2024-04-23 23:45, 2024-04-24 07:45, 2024-04-24 15:45, 2024-04-24 23:45, 2024-04-25 07:45, 2024-04-25 15:45, 2024-04-25 23:45, 2024-04-26 07:45, 2024-04-26 15:45, 2024-04-26 23:45, 2024-04-27 07:45, 2024-04-27 15:45, 2024-04-27 23:45, 2024-04-28 07:45, 2024-04-28 15:45, 2024-04-28 23:45, 2024-04-29 07:45, 2024-04-29 15:45, 2024-04-29 23:45, 2024-04-30 07:45, 2024-04-30 15:45, 2024-05-28 15:45, 2024-05-28 23:45, 2024-05-29 07:45, 2024-05-29 15:45, 2024-05-29 23:45, 2024-05-30 07:45, 2024-05-30 15:45, 2024-05-30 23:45, 2024-05-31 07:45, 2024-05-31 15:45, 2024-05-31 23:45, 2024-06-01 07:45, 2024-06-01 15:45, 2024-06-01 23:45, 2024-06-02 07:45, 2024-06-02 15:45, 2024-06-02 23:45, 2024-06-03 07:45, 2024-06-03 15:45, 2024-06-03 23:45, 2024-06-04 07:45, 2024-06-13 23:45, 2024-06-14 07:45, 2024-06-14 15:45, 2024-06-14 23:45, 2024-06-15 07:45
DShield Block
152.89.198.42 was recently listed on the DShield Block blacklist, but currently it is not.

Description: Recommended Block List by DShield.org. It summarizes the top 20 attacking<br>class C (/24) subnets over the last three days.
Type of feed: secondary (feed detail page)

Last checked at: 2024-06-14 04:50:00
Was present on blacklist at: 2024-03-17 04:50, 2024-03-19 04:50, 2024-03-20 04:50, 2024-03-21 04:50, 2024-03-22 04:50, 2024-03-23 04:50, 2024-03-24 04:50, 2024-03-25 04:50, 2024-03-28 04:50, 2024-03-29 04:50, 2024-03-30 04:50, 2024-03-31 04:50, 2024-04-01 04:50, 2024-04-02 04:50, 2024-04-03 04:50, 2024-04-04 04:50, 2024-04-05 04:50, 2024-04-06 04:50, 2024-04-07 04:50, 2024-04-08 04:50, 2024-04-09 04:50, 2024-04-10 04:50, 2024-04-11 04:50, 2024-04-12 04:50, 2024-04-13 04:50, 2024-04-16 04:50, 2024-04-17 04:50, 2024-04-18 04:50, 2024-04-23 04:50, 2024-04-24 04:50, 2024-04-25 04:50, 2024-04-26 04:50, 2024-04-29 04:50, 2024-04-30 04:50, 2024-05-01 04:50, 2024-05-02 04:50, 2024-05-03 04:50, 2024-05-11 04:50, 2024-05-12 04:50, 2024-05-13 04:50, 2024-05-14 04:50, 2024-05-15 04:50, 2024-05-16 04:50, 2024-05-17 04:50, 2024-05-18 04:50, 2024-05-19 04:50, 2024-05-21 04:50, 2024-05-22 04:50, 2024-05-23 04:50, 2024-05-26 04:50, 2024-05-27 04:50, 2024-05-29 04:50
DShield reports (IP summary, reports)
2024-03-18
Number of reports: 10
Distinct targets: 10
2024-03-26
Number of reports: 16
Distinct targets: 8
2024-03-29
Number of reports: 62
Distinct targets: 29
2024-04-01
Number of reports: 26
Distinct targets: 10
2024-04-03
Number of reports: 14
Distinct targets: 7
2024-04-09
Number of reports: 55
Distinct targets: 37
2024-06-02
Number of reports: 14
Distinct targets: 6
2024-06-05
Number of reports: 10
Distinct targets: 10
2024-06-10
Number of reports: 25
Distinct targets: 19
2024-06-12
Number of reports: 15
Distinct targets: 10
OTX pulses
[65b912cb181d0462d8fce5db] 2024-01-30 15:16:26.992000 | RDP honeypot logs for 2024/01/30
Author name:jnazario
Pulse modified:2024-01-30 15:16:26.992000
Indicator created:2024-01-30 15:16:27
Indicator role:None
Indicator title:
Indicator expiration:2024-02-29 15:00:00
[65c793494b0b6d3e73fb1c60] 2024-02-10 15:16:25.457000 | VNC honeypot logs for 2024/02/10
Author name:jnazario
Pulse modified:2024-02-10 15:16:25.457000
Indicator created:2024-02-10 15:16:26
Indicator role:None
Indicator title:
Indicator expiration:2024-03-11 15:00:00
[65d613c7b971e37f4cd906b2] 2024-02-21 15:16:23.747000 | RDP honeypot logs for 2024/02/21
Author name:jnazario
Pulse modified:2024-02-21 15:16:23.747000
Indicator created:2024-02-21 15:16:24
Indicator role:None
Indicator title:
Indicator expiration:2024-03-22 15:00:00
[65d76542c6b77061a830b493] 2024-02-22 15:16:18.134000 | VNC honeypot logs for 2024/02/22
Author name:jnazario
Pulse modified:2024-02-22 15:16:18.134000
Indicator created:2024-02-22 15:16:19
Indicator role:None
Indicator title:
Indicator expiration:2024-03-23 15:00:00
[65d76541190c5468386eca78] 2024-02-22 15:16:17.495000 | Redis honeypot logs for 2024-02-22
Author name:jnazario
Pulse modified:2024-02-22 15:16:17.495000
Indicator created:2024-02-22 15:16:18
Indicator role:None
Indicator title:
Indicator expiration:2024-03-23 15:00:00
[65e49450486aae0903cbee12] 2024-03-03 15:16:31.999000 | Redis honeypot logs for 2024-03-03
Author name:jnazario
Pulse modified:2024-03-03 15:16:31.999000
Indicator created:2024-03-03 15:16:32
Indicator role:None
Indicator title:
Indicator expiration:2024-04-02 15:00:00
[65f063b26a4596c5d5fe8c7d] 2024-03-12 14:16:18.464000 | RDP honeypot logs for 2024/03/12
Author name:jnazario
Pulse modified:2024-03-12 14:16:18.464000
Indicator created:2024-03-12 14:16:19
Indicator role:None
Indicator title:
Indicator expiration:2024-04-11 14:00:00
[65f306b29e0b2b4ba2bab18a] 2024-03-14 14:16:18.598000 | RDP honeypot logs for 2024/03/14
Author name:jnazario
Pulse modified:2024-03-14 14:16:18.598000
Indicator created:2024-03-14 14:16:19
Indicator role:None
Indicator title:
Indicator expiration:2024-04-13 14:00:00
[65f6fb3198de078e1566fc3b] 2024-03-17 14:16:17.059000 | Redis honeypot logs for 2024-03-17
Author name:jnazario
Pulse modified:2024-03-17 14:16:17.059000
Indicator created:2024-03-17 14:16:17
Indicator role:None
Indicator title:
Indicator expiration:2024-04-16 14:00:00
[65fd92b00655a62dc3f494f1] 2024-03-22 14:16:16.275000 | RDP honeypot logs for 2024/03/22
Author name:jnazario
Pulse modified:2024-03-22 14:16:16.275000
Indicator created:2024-03-22 14:16:17
Indicator role:None
Indicator title:
Indicator expiration:2024-04-21 14:00:00
[5a7e3e70c44e7b48947593a7] 2018-02-10 00:36:00.396000 | Webscanners 2018-02-09 thru current day
Author name:david3
Pulse modified:2024-06-15 07:55:13.090000
Indicator created:2024-06-03 14:50:15
Indicator role:scanning_host
Indicator title:404 NOT FOUND
Indicator expiration:2024-09-01 00:00:00
[66081eb15d9286d14cd08e0e] 2024-03-30 14:16:17.461000 | RDP honeypot logs for 2024/03/30
Author name:jnazario
Pulse modified:2024-03-30 14:16:17.461000
Indicator created:2024-03-30 14:16:18
Indicator role:None
Indicator title:
Indicator expiration:2024-04-29 14:00:00
Origin AS
AS57523 - changway-as
BGP Prefix
152.89.198.0/24
fmp
{'general': 0.615939736366272}
geo
Russia
🕑 Europe/Moscow
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
152.89.198.0 - 152.89.198.255
last_activity
2024-06-15 08:03:53.054000
reserved_range
0
Shodan's InternetDB
Open ports: 135, 445, 3389, 5985
Tags: self-signed
CPEs:
ts_added
2023-12-20 00:55:26.391000
ts_last_update
2024-06-15 08:03:53.067000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses