IP address

Passive DNS

Tags:

IP blacklists

Echelon TLS/SSL crawler

209.141.46.48 is listed on the Echelon TLS/SSL crawler blacklist.

Description: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-06-22 09:40:00.393000
Was present on blacklist at: 2026-05-28 09:40, 2026-05-29 09:40, 2026-05-30 09:40, 2026-05-31 09:40, 2026-06-01 09:40, 2026-06-02 09:40, 2026-06-03 09:40, 2026-06-04 09:40, 2026-06-05 09:40, 2026-06-06 09:40, 2026-06-07 09:40, 2026-06-08 09:40, 2026-06-09 09:40, 2026-06-10 09:40, 2026-06-11 09:40, 2026-06-12 09:40, 2026-06-14 09:40, 2026-06-15 09:40, 2026-06-16 09:40, 2026-06-17 09:40, 2026-06-18 09:40, 2026-06-19 09:40, 2026-06-20 09:40, 2026-06-21 09:40, 2026-06-22 09:40

Echelon router exploit

209.141.46.48 is listed on the Echelon router exploit blacklist.

Description: Attempting router firmware exploits (Netgear, D-Link, etc.)
Type of feed: primary (feed detail page)

Last checked at: 2026-06-21 09:30:00.563000
Was present on blacklist at: 2026-05-29 09:30, 2026-05-30 09:30, 2026-05-31 09:30, 2026-06-01 09:30, 2026-06-02 09:30, 2026-06-03 09:30, 2026-06-04 09:30, 2026-06-05 09:30, 2026-06-06 09:30, 2026-06-07 09:30, 2026-06-08 09:30, 2026-06-09 09:30, 2026-06-10 09:30, 2026-06-11 09:30, 2026-06-12 09:30, 2026-06-13 09:30, 2026-06-14 09:30, 2026-06-15 09:30, 2026-06-16 09:30, 2026-06-17 09:30, 2026-06-18 09:30, 2026-06-19 09:30, 2026-06-20 09:30, 2026-06-21 09:30

Echelon web crawler

209.141.46.48 is listed on the Echelon web crawler blacklist.

Description: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-06-21 09:50:00.383000
Was present on blacklist at: 2026-05-29 09:50, 2026-05-30 09:50, 2026-05-31 09:50, 2026-06-01 09:50, 2026-06-02 09:50, 2026-06-03 09:50, 2026-06-04 09:50, 2026-06-05 09:50, 2026-06-06 09:50, 2026-06-07 09:50, 2026-06-08 09:50, 2026-06-09 09:50, 2026-06-10 09:50, 2026-06-11 09:50, 2026-06-12 09:50, 2026-06-15 09:50, 2026-06-16 09:50, 2026-06-17 09:50, 2026-06-18 09:50, 2026-06-19 09:50, 2026-06-20 09:50, 2026-06-21 09:50

AbuseIPDB

209.141.46.48 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-07-28 04:00:00.653000
Was present on blacklist at: 2026-06-11 04:00, 2026-06-13 04:00, 2026-06-19 04:00, 2026-07-07 04:00, 2026-07-13 04:00, 2026-07-19 04:00, 2026-07-20 04:00, 2026-07-21 04:00, 2026-07-28 04:00

Spamhaus XBL CBL

209.141.46.48 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-07-30 09:41:01.081000
Was present on blacklist at: 2026-06-18 09:41

Threat categories

TL	Role	Category	Details
50	src	scan
25	src	—

DShield reports (IP summary, reports)

2026-05-28: Number of reports: 418; Distinct targets: 35
2026-05-29: Number of reports: 283; Distinct targets: 28
2026-05-30: Number of reports: 1192; Distinct targets: 83
2026-05-31: Number of reports: 442; Distinct targets: 38
2026-06-02: Number of reports: 1286; Distinct targets: 47
2026-06-03: Number of reports: 1286; Distinct targets: 47
2026-06-04: Number of reports: 1278; Distinct targets: 47
2026-06-05: Number of reports: 1662; Distinct targets: 63
2026-06-06: Number of reports: 1474; Distinct targets: 42
2026-06-07: Number of reports: 1474; Distinct targets: 42
2026-06-08: Number of reports: 1300; Distinct targets: 42
2026-06-09: Number of reports: 1052; Distinct targets: 42
2026-06-10: Number of reports: 1052; Distinct targets: 42
2026-06-12: Number of reports: 1525; Distinct targets: 76
2026-06-13: Number of reports: 1525; Distinct targets: 76
2026-06-14: Number of reports: 1500; Distinct targets: 125
2026-06-16: Number of reports: 1816; Distinct targets: 50
2026-06-17: Number of reports: 1559; Distinct targets: 63
2026-06-18: Number of reports: 1111; Distinct targets: 86
2026-06-19: Number of reports: 1496; Distinct targets: 40
2026-06-20: Number of reports: 784; Distinct targets: 64
2026-06-21: Number of reports: 1101; Distinct targets: 71
2026-06-22: Number of reports: 1132; Distinct targets: 77
2026-06-23: Number of reports: 926; Distinct targets: 113
2026-06-24: Number of reports: 2173; Distinct targets: 81
2026-06-25: Number of reports: 2173; Distinct targets: 81
2026-07-03: Number of reports: 1947; Distinct targets: 128
2026-07-04: Number of reports: 2604; Distinct targets: 78
2026-07-05: Number of reports: 2604; Distinct targets: 78
2026-07-06: Number of reports: 433; Distinct targets: 61
2026-07-07: Number of reports: 433; Distinct targets: 61
2026-07-08: Number of reports: 565; Distinct targets: 45
2026-07-09: Number of reports: 530; Distinct targets: 50
2026-07-10: Number of reports: 530; Distinct targets: 50
2026-07-11: Number of reports: 930; Distinct targets: 116
2026-07-12: Number of reports: 930; Distinct targets: 116
2026-07-13: Number of reports: 952; Distinct targets: 114
2026-07-14: Number of reports: 1241; Distinct targets: 69
2026-07-15: Number of reports: 1241; Distinct targets: 69
2026-07-16: Number of reports: 93; Distinct targets: 16
2026-07-17: Number of reports: 549; Distinct targets: 55
2026-07-18: Number of reports: 549; Distinct targets: 55
2026-07-19: Number of reports: 727; Distinct targets: 12
2026-07-20: Number of reports: 395; Distinct targets: 40
2026-07-21: Number of reports: 268; Distinct targets: 25
2026-07-22: Number of reports: 268; Distinct targets: 25
2026-07-24: Number of reports: 60; Distinct targets: 11
2026-07-25: Number of reports: 383; Distinct targets: 34
2026-07-28: Number of reports: 480; Distinct targets: 51
2026-07-29: Number of reports: 480; Distinct targets: 51

Origin AS: AS53667 - PONYNET
BGP Prefix: 209.141.32.0/19
geo: United States, Las Vegas; 🕑 America/Los_Angeles
hostname: musicboxold.newfire.org
Address block ('inetnum' or 'NetRange' in whois database): 209.141.32.0 - 209.141.63.255
rep: 0.006326812166433049
reserved_range: 0
ts_added: 2026-05-28 09:40:55.683000
ts_last_update: 2026-08-01 09:41:00.458000

Warden event timeline

DShield event timeline

Presence on blacklists