IP address


.001194.0.126.174
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus XBL CBL
194.0.126.174 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-07-07 18:21:30.640000
Was present on blacklist at: 2026-06-30 18:21, 2026-07-07 18:21

Threat categories

TLRoleCategoryDetails
25 src scan port: 5900

Warden events (1)
2026-06-30
ReconScanning (node.9c1411): 1
Origin AS
AS21299 - KAR-TEL-AS
BGP Prefix
194.0.126.0/24
geo
Kazakhstan
🕑 Asia/Almaty
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
194.0.124.0 - 194.0.127.255
last_activity
2026-06-30 18:06:07
last_warden_event
2026-06-30 18:06:07
rep
0.0005604052189455144
reserved_range
0
Shodan's InternetDB
Open ports: 80, 1433, 3389, 4899
Tags: eol-os, self-signed, database
CPEs: cpe:/a:microsoft:internet_information_services, cpe:/a:microsoft:internet_information_services:8.5, cpe:/o:microsoft:windows, cpe:/a:famatech:radmin:3, cpe:/a:microsoft:asp.net, cpe:/a:microsoft:sql_server:12.0.2000.0
ts_added
2026-06-30 18:21:29.522000
ts_last_update
2026-07-11 18:21:30.592000

Warden event timeline

DShield event timeline

Presence on blacklists