IP address

Passive DNS

Tags:

IP blacklists

DataPlane TELNET login

31.57.77.235 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2026-02-03 19:10:02.048000
Was present on blacklist at: 2026-01-27 23:10, 2026-01-28 03:10, 2026-01-28 07:10, 2026-01-28 11:10, 2026-01-28 15:10, 2026-01-28 19:10, 2026-01-28 23:10, 2026-01-29 03:10, 2026-01-29 07:10, 2026-01-29 11:10, 2026-01-29 15:10, 2026-01-29 19:10, 2026-01-29 23:10, 2026-01-30 03:10, 2026-01-30 07:10, 2026-01-30 11:10, 2026-01-30 15:10, 2026-01-30 19:10, 2026-01-30 23:10, 2026-01-31 03:10, 2026-01-31 07:10, 2026-01-31 11:10, 2026-01-31 15:10, 2026-01-31 19:10, 2026-01-31 23:10, 2026-02-01 03:10, 2026-02-01 07:10, 2026-02-01 11:10, 2026-02-01 15:10, 2026-02-01 19:10, 2026-02-01 23:10, 2026-02-02 03:10, 2026-02-02 07:10, 2026-02-02 11:10, 2026-02-02 15:11, 2026-02-02 19:10, 2026-02-02 23:10, 2026-02-03 03:10, 2026-02-03 07:10, 2026-02-03 11:10, 2026-02-03 15:10, 2026-02-03 19:10

DataPlane SSH conn

31.57.77.235 is listed on the DataPlane SSH conn blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SSH connection to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2026-02-03 19:10:01.966000
Was present on blacklist at: 2026-01-28 03:10, 2026-01-28 07:10, 2026-01-28 15:10, 2026-01-28 19:10, 2026-01-29 03:10, 2026-01-29 07:10, 2026-01-29 15:10, 2026-01-29 19:10, 2026-01-30 03:10, 2026-01-30 07:10, 2026-01-30 15:10, 2026-01-30 19:10, 2026-01-31 03:10, 2026-01-31 07:10, 2026-01-31 15:10, 2026-01-31 19:10, 2026-02-01 03:10, 2026-02-01 07:10, 2026-02-01 15:10, 2026-02-01 19:10, 2026-02-02 03:10, 2026-02-02 07:10, 2026-02-02 15:10, 2026-02-02 19:10, 2026-02-03 03:10, 2026-02-03 07:10, 2026-02-03 15:10, 2026-02-03 19:10

Spamhaus XBL CBL

31.57.77.235 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-02-03 05:04:46.122000
Was present on blacklist at: 2026-02-03 05:04

Warden events (4)

2026-01-23: ReconScanning (node.9c1411): 4

DShield reports (IP summary, reports)

2025-12-15: Number of reports: 23; Distinct targets: 8
2025-12-16: Number of reports: 47; Distinct targets: 13
2025-12-17: Number of reports: 114; Distinct targets: 13
2025-12-18: Number of reports: 114; Distinct targets: 13
2025-12-19: Number of reports: 174; Distinct targets: 13
2025-12-22: Number of reports: 31; Distinct targets: 11
2025-12-28: Number of reports: 100; Distinct targets: 14
2026-01-09: Number of reports: 13; Distinct targets: 4
2026-01-10: Number of reports: 101; Distinct targets: 12
2026-01-11: Number of reports: 101; Distinct targets: 12

Origin AS: AS210538 - KEYUBU
BGP Prefix: 31.57.77.0/24
geo: Turkey, Istanbul; 🕑 Europe/Istanbul
hostname: server.keyubu.com
Address block ('inetnum' or 'NetRange' in whois database): 31.56.0.0 - 31.59.255.255
last_activity: 2026-01-23 04:59:20
last_warden_event: 2026-01-23 04:59:20
rep: 0.013392857142857142
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 80, 6002, 8000, 8888, 9443; Tags: –; CPEs: cpe:/o:debian:debian_linux, cpe:/o:linux:linux_kernel, cpe:/a:openbsd:openssh:10.0p2, cpe:/a:portainer:portainer:2.33.6, cpe:/a:angularjs:angular.js, cpe:/a:f5:nginx
ts_added: 2025-12-16 05:04:33.390000
ts_last_update: 2026-02-03 19:34:24.457000

Warden event timeline

DShield event timeline

Presence on blacklists