IP address

Search at other sites:

.001192.61.105.148syn-192-061-105-148.res.spectrum.com

Shodan(more info)

Passive DNS

IP blacklists

Spamhaus SBL CSS

192.61.105.148 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-11-02 08:46:10.649000
Was present on blacklist at: 2026-08-10 08:46, 2026-08-17 08:46, 2026-08-24 08:46, 2026-08-31 08:46, 2026-09-08 07:11, 2026-09-14 08:46, 2026-09-28 08:46, 2026-10-12 08:46

Spamhaus XBL CBL

192.61.105.148 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-11-02 08:46:10.649000
Was present on blacklist at: 2026-08-10 08:46, 2026-08-17 08:46, 2026-08-24 08:46, 2026-08-31 08:46, 2026-09-08 07:11, 2026-09-14 08:46, 2026-09-21 08:46, 2026-09-28 08:46, 2026-10-05 08:46, 2026-10-12 08:46, 2026-10-19 08:46

Echelon SSH connection attempt

192.61.105.148 was recently listed on the Echelon SSH connection attempt blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: SSH connection attempt detected on port 22 or 2222
Type of feed: primary (feed detail page)

Last checked at: 2026-09-05 09:35:00.964000
Was present on blacklist at: 2026-08-16 09:35, 2026-08-17 09:35, 2026-08-18 09:35, 2026-08-19 09:35, 2026-08-20 09:35, 2026-08-21 09:35, 2026-08-22 09:35, 2026-08-29 09:35, 2026-08-30 09:35, 2026-08-31 09:35, 2026-09-01 09:35, 2026-09-02 09:35, 2026-09-03 09:35, 2026-09-04 09:35, 2026-09-05 09:35

AbuseIPDB

192.61.105.148 was recently listed on the AbuseIPDB blacklist, but currently it is not.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-09-29 04:00:00.661000
Was present on blacklist at: 2026-08-21 04:00, 2026-08-26 04:00, 2026-09-26 04:00, 2026-09-29 04:00

blocklist.de SSH

192.61.105.148 was recently listed on the blocklist.de SSH blacklist, but currently it is not.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-10-02 10:05:00.251000
Was present on blacklist at: 2026-09-29 04:05, 2026-09-29 10:05, 2026-09-29 16:05, 2026-09-29 22:05, 2026-09-30 04:05, 2026-09-30 10:05, 2026-09-30 16:05, 2026-09-30 22:05, 2026-10-01 04:05, 2026-10-01 10:05, 2026-10-01 16:05, 2026-10-01 22:05, 2026-10-02 04:05, 2026-10-02 10:05

Threat categories

TL	Role	Category	Details
No threat category tags assigned

---

Warden events (1332)

2026-10-14

ReconScanning (node.9c1411): 2

2026-10-13

ReconScanning (node.9c1411): 2

2026-10-12

ReconScanning (node.ce2b59): 1

ReconScanning (node.9c1411): 8

2026-10-11

ReconScanning (node.ce2b59): 1

ReconScanning (node.9c1411): 4

2026-10-10

ReconScanning (node.9c1411): 1

2026-10-09

ReconScanning (node.ce2b59): 1

ReconScanning (node.9c1411): 1

2026-10-08

ReconScanning (node.9c1411): 4

2026-10-07

ReconScanning (node.ce2b59): 4

ReconScanning (node.9c1411): 11

2026-10-06

ReconScanning (node.ce2b59): 8

ReconScanning (node.9c1411): 8

2026-10-05

ReconScanning (node.ce2b59): 6

ReconScanning (node.9c1411): 6

2026-10-04

ReconScanning (node.ce2b59): 9

ReconScanning (node.9c1411): 7

2026-10-03

ReconScanning (node.ce2b59): 6

ReconScanning (node.9c1411): 3

2026-10-02

ReconScanning (node.ce2b59): 22

ReconScanning (node.9c1411): 4

2026-10-01

ReconScanning (node.9c1411): 4

ReconScanning (node.ce2b59): 30

2026-09-30

ReconScanning (node.ce2b59): 25

ReconScanning (node.9c1411): 2

2026-09-29

ReconScanning (node.ce2b59): 18

2026-09-28

ReconScanning (node.ce2b59): 3

2026-09-27

ReconScanning (node.ce2b59): 4

2026-09-26

ReconScanning (node.ce2b59): 3

2026-09-25

ReconScanning (node.ce2b59): 8

2026-09-24

ReconScanning (node.ce2b59): 5

2026-09-23

ReconScanning (node.ce2b59): 2

2026-09-22

ReconScanning (node.ce2b59): 1

2026-09-21

ReconScanning (node.ce2b59): 1

2026-09-20

ReconScanning (node.ce2b59): 2

2026-09-19

ReconScanning (node.ce2b59): 26

ReconScanning (node.985fb4): 1

2026-09-18

ReconScanning (node.ce2b59): 16

2026-09-17

ReconScanning (node.ce2b59): 8

2026-09-16

ReconScanning (node.ce2b59): 17

2026-09-15

ReconScanning (node.ce2b59): 30

2026-09-14

ReconScanning (node.ce2b59): 14

2026-09-13

ReconScanning (node.ce2b59): 6

ReconScanning (node.9c1411): 6

2026-09-12

ReconScanning (node.ce2b59): 12

ReconScanning (node.9c1411): 7

2026-09-11

ReconScanning (node.ce2b59): 30

ReconScanning (node.9c1411): 6

2026-09-10

ReconScanning (node.ce2b59): 22

ReconScanning (node.9c1411): 8

2026-09-09

ReconScanning (node.ce2b59): 31

ReconScanning (node.9c1411): 4

2026-09-08

ReconScanning (node.ce2b59): 31

AttemptLogin (node.70e749): 2

ReconScanning (node.9c1411): 7

2026-09-07

ReconScanning (node.ce2b59): 21

ReconScanning (node.9c1411): 10

2026-09-06

ReconScanning (node.ce2b59): 31

ReconScanning (node.9c1411): 7

2026-09-05

ReconScanning (node.ce2b59): 31

ReconScanning (node.9c1411): 5

2026-09-04

ReconScanning (node.9c1411): 8

ReconScanning (node.ce2b59): 30

2026-09-03

ReconScanning (node.ce2b59): 31

ReconScanning (node.9c1411): 5

2026-09-02

ReconScanning (node.ce2b59): 21

ReconScanning (node.9c1411): 3

2026-09-01

ReconScanning (node.ce2b59): 31

ReconScanning (node.9c1411): 4

2026-08-31

ReconScanning (node.ce2b59): 30

ReconScanning (node.9c1411): 3

2026-08-30

ReconScanning (node.ce2b59): 30

ReconScanning (node.9c1411): 7

2026-08-29

ReconScanning (node.ce2b59): 22

ReconScanning (node.9c1411): 7

2026-08-28

ReconScanning (node.ce2b59): 26

ReconScanning (node.9c1411): 3

2026-08-27

ReconScanning (node.9c1411): 3

ReconScanning (node.ce2b59): 7

2026-08-26

ReconScanning (node.9c1411): 6

ReconScanning (node.ce2b59): 27

2026-08-25

ReconScanning (node.ce2b59): 30

ReconScanning (node.9c1411): 7

2026-08-24

ReconScanning (node.ce2b59): 30

ReconScanning (node.9c1411): 5

2026-08-23

ReconScanning (node.ce2b59): 29

ReconScanning (node.9c1411): 4

2026-08-22

ReconScanning (node.ce2b59): 30

ReconScanning (node.9c1411): 3

2026-08-21

ReconScanning (node.ce2b59): 31

ReconScanning (node.9c1411): 6

2026-08-20

ReconScanning (node.9c1411): 7

ReconScanning (node.ce2b59): 30

2026-08-19

ReconScanning (node.ce2b59): 30

ReconScanning (node.9c1411): 4

2026-08-18

ReconScanning (node.ce2b59): 28

ReconScanning (node.9c1411): 2

2026-08-17

ReconScanning (node.ce2b59): 30

ReconScanning (node.9c1411): 3

2026-08-16

ReconScanning (node.ce2b59): 29

ReconScanning (node.9c1411): 2

2026-08-15

ReconScanning (node.9c1411): 2

AttemptLogin (node.b17ef8): 1

ReconScanning (node.ce2b59): 25

2026-08-14

ReconScanning (node.9c1411): 1

ReconScanning (node.ce2b59): 2

2026-08-13

ReconScanning (node.9c1411): 3

ReconScanning (node.ce2b59): 3

2026-08-12

ReconScanning (node.ce2b59): 11

ReconScanning (node.9c1411): 10

2026-08-11

ReconScanning (node.ce2b59): 5

ReconScanning (node.9c1411): 3

2026-08-10

ReconScanning (node.ce2b59): 2

ReconScanning (node.9c1411): 4

DShield reports (IP summary, reports)

2026-08-12

Number of reports: 12

Distinct targets: 4

2026-08-29

Number of reports: 12

Distinct targets: 4

2026-08-30

Number of reports: 12

Distinct targets: 4

2026-09-01

Number of reports: 31

Distinct targets: 12

2026-09-02

Number of reports: 31

Distinct targets: 12

2026-09-05

Number of reports: 27

Distinct targets: 4

2026-09-12

Number of reports: 12

Distinct targets: 4

2026-09-17

Number of reports: 18

Distinct targets: 4

2026-09-18

Number of reports: 10

Distinct targets: 4

2026-09-19

Number of reports: 10

Distinct targets: 4

2026-09-26

Number of reports: 20

Distinct targets: 8

2026-09-27

Number of reports: 20

Distinct targets: 8

2026-10-08

Number of reports: 16

Distinct targets: 4

2026-10-11

Number of reports: 11

Distinct targets: 3

OTX pulses

[6ac639bc9e97ffc34cdf62ec] 2026-10-07 12:23:24.818000 | SSH honeypot logs for 2026-10-07

Author name:	jnazario
Pulse modified:	2026-10-07 12:23:24.818000
Indicator created:	2026-10-07 12:23:25
Indicator role:	None
Indicator title:
Indicator expiration:	2026-11-06 12:00:00

Residential proxy info (data provided by Layer3 Intel)

Last seen: 2026-10-03 01:09:24}

Percent days seen: 80 %

Networks: BOTTINGTOOLS, 711PROXY, AKE.NET, NOVADA, B2PROXY, ROLAPROXY, YUMIPROXY, IPFLY, IPPEAK, MOMOPROXY, BOTTINGTOOLS_BASIC, RAINPROXY, EZPROXIES, PURAROUTE

Details: https://layer3intel.com/context/192.61.105.148

Origin AS

AS20115 - CHARTER-NET-HKY-NC

BGP Prefix

192.61.96.0/20

geo

United States, Union

🕑 America/Chicago

hostname

syn-192-061-105-148.res.spectrum.com

hostname_class

['ip_in_hostname']

Address block ('inetnum' or 'NetRange' in whois database)

192.60.0.0 - 192.63.255.255

last_activity

2026-10-14 03:38:36

last_warden_event

2026-10-14 03:38:36

rep

0.0008351576561540508

reserved_range

0

ts_added

2026-08-10 08:46:01.009000

ts_last_update

2026-11-04 08:46:11.872000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses