IP address

Passive DNS

Tags: IP in hostname Static IP

IP blacklists

Blocklist.net.ua

208.115.193.148 is listed on the Blocklist.net.ua blacklist.

Description: BlockList contains IP addresses that perform attacks,<br>send spam or brute force passwords to the blocking list.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-04 15:15:03.530000
Was present on blacklist at: 2024-11-03 19:15, 2024-11-03 23:15, 2024-11-04 03:15, 2024-11-04 07:15, 2024-11-04 11:15, 2024-11-04 15:15

Spamhaus SBL CSS

208.115.193.148 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-11-03 19:31:49.559000
Was present on blacklist at: 2024-11-03 19:31

Spamhaus XBL CBL

208.115.193.148 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-11-03 19:31:49.559000
Was present on blacklist at: 2024-11-03 19:31

blocklist.de IMAP

208.115.193.148 is listed on the blocklist.de IMAP blacklist.

Description: Blocklist.de feed is a free and voluntary service<br>provided by a Fraud/Abuse-specialist. IPs performing attacks<br>on the Service imap, sasl, pop3.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-05 23:05:00.201000
Was present on blacklist at: 2024-11-03 23:05, 2024-11-04 05:05, 2024-11-04 11:05, 2024-11-04 17:05, 2024-11-04 23:05, 2024-11-05 05:05, 2024-11-05 11:05, 2024-11-05 17:05, 2024-11-05 23:05

blocklist.de mail

208.115.193.148 is listed on the blocklist.de mail blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing Mail attacks.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-05 23:05:05.304000
Was present on blacklist at: 2024-11-03 23:05, 2024-11-04 05:05, 2024-11-04 11:05, 2024-11-04 17:05, 2024-11-04 23:05, 2024-11-05 05:05, 2024-11-05 11:05, 2024-11-05 23:05

UCEPROTECT L1

208.115.193.148 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-05 16:45:00.914000
Was present on blacklist at: 2024-11-04 00:45, 2024-11-04 08:45, 2024-11-04 16:45, 2024-11-05 00:45, 2024-11-05 08:45, 2024-11-05 16:45

Warden events (1)

2024-11-04: ReconScanning (node.ce2b59): 1

Origin AS: AS46475 - LIMESTONENETWORKS
BGP Prefix: 208.115.193.0/24
geo: United States, New York; 🕑 America/New_York
hostname: 148-193-115-208.static.reverse.lstn.net
hostname_class: ['ip_in_hostname', 'static']
Address block ('inetnum' or 'NetRange' in whois database): 208.115.192.0 - 208.115.255.255
last_activity: 2024-11-04 06:55:15
last_warden_event: 2024-11-04 06:55:15
rep: 0.030952380952380953
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 500; Tags: vpn; CPEs: cpe:/a:openbsd:openssh:7.6p1
ts_added: 2024-11-03 19:31:49.414000
ts_last_update: 2024-11-05 23:06:39.490000

Warden event timeline

DShield event timeline

Presence on blacklists