IP address

Shodan(more info)

Passive DNS

Tags:

IP blacklists: DataPlane SSH conn
209.141.60.219 is listed on the DataPlane SSH conn blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SSH connection to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2024-10-18 06:10:01.306000
Was present on blacklist at: 2024-10-08 18:10, 2024-10-08 22:10, 2024-10-09 02:10, 2024-10-09 06:10, 2024-10-09 10:10, 2024-10-09 14:10, 2024-10-09 18:10, 2024-10-09 22:10, 2024-10-10 02:10, 2024-10-10 06:10, 2024-10-10 10:10, 2024-10-10 14:10, 2024-10-10 18:10, 2024-10-10 22:10, 2024-10-11 02:10, 2024-10-11 06:10, 2024-10-11 10:10, 2024-10-11 14:10, 2024-10-11 18:10, 2024-10-11 22:10, 2024-10-12 02:10, 2024-10-12 06:10, 2024-10-12 10:10, 2024-10-12 14:10, 2024-10-12 18:10, 2024-10-12 22:10, 2024-10-13 02:10, 2024-10-13 06:10, 2024-10-13 14:10, 2024-10-13 18:10, 2024-10-13 22:10, 2024-10-14 02:10, 2024-10-14 06:10, 2024-10-14 10:10, 2024-10-14 14:10, 2024-10-14 18:10, 2024-10-14 22:10, 2024-10-15 02:10, 2024-10-15 06:10, 2024-10-15 10:10, 2024-10-15 14:10, 2024-10-18 02:10, 2024-10-18 06:10
Spamhaus XBL CBL
209.141.60.219 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-10-15 18:13:20.817000
Was present on blacklist at: 2024-10-08 18:13, 2024-10-15 18:13
dan.me.uk TOR Nodes
209.141.60.219 is listed on the dan.me.uk TOR Nodes blacklist.

Description: List of TOR node IPs by dan.me.uk.
Type of feed: secondary (feed detail page)

Last checked at: 2024-10-17 20:10:00
Was present on blacklist at: 2024-10-08 20:10, 2024-10-09 20:10, 2024-10-10 20:10, 2024-10-11 20:10, 2024-10-12 20:10, 2024-10-13 20:10, 2024-10-14 20:10, 2024-10-15 20:10, 2024-10-16 20:10, 2024-10-17 20:10
FireHOL anonymizers
209.141.60.219 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2024-10-17 18:09:03
Was present on blacklist at: 2024-10-08 18:07, 2024-10-09 18:06, 2024-10-10 18:06, 2024-10-11 18:06, 2024-10-12 18:08, 2024-10-13 18:08, 2024-10-14 18:09, 2024-10-15 18:08, 2024-10-16 18:09, 2024-10-17 18:09
TorProject
209.141.60.219 is listed on the TorProject blacklist.

Description: TorProject.org list of all current TOR exit points (TorDNSEL)
Type of feed: secondary (feed detail page)

Last checked at: 2024-10-17 20:10:01
Was present on blacklist at: 2024-10-08 20:10, 2024-10-09 20:10, 2024-10-10 20:10, 2024-10-11 20:10, 2024-10-12 20:10, 2024-10-13 20:10, 2024-10-14 20:10, 2024-10-15 20:10, 2024-10-16 20:10, 2024-10-17 20:10

Origin AS: AS53667 - PONYNET
BGP Prefix: 209.141.32.0/19
geo: United States, Las Vegas; 🕑 America/Los_Angeles
hostname: tor-exit.vofscfcmcd.org
Address block ('inetnum' or 'NetRange' in whois database): 209.141.32.0 - 209.141.63.255
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 9001; Tags: tor; CPEs: –
ts_added: 2024-10-08 18:13:19.251000
ts_last_update: 2024-10-18 06:16:42.316000

Warden event timeline

DShield event timeline

Presence on blacklists