IP address

Search at other sites:

.03193.123.85.214

Shodan(more info)

Passive DNS

IP blacklists

Spamhaus SBL

93.123.85.214 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-12-18 05:47:20.099000
Was present on blacklist at: 2024-10-30 05:47, 2024-11-06 05:47, 2024-11-13 05:47, 2024-11-20 05:47, 2024-11-27 05:47, 2024-12-04 05:47, 2024-12-11 05:47, 2024-12-18 05:47

Spamhaus DROP

93.123.85.214 is listed on the Spamhaus DROP blacklist.

Description: The Spamhaus DROP (Don't Route Or Peer) lists are advisory"drop all traffic" lists. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-12-18 05:47:20.099000
Was present on blacklist at: 2024-10-30 05:47, 2024-11-06 05:47, 2024-11-13 05:47, 2024-11-20 05:47, 2024-11-27 05:47, 2024-12-04 05:47, 2024-12-11 05:47, 2024-12-18 05:47

AbuseIPDB

93.123.85.214 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-12-11 05:00:00.517000
Was present on blacklist at: 2024-10-31 05:00, 2024-12-07 05:00, 2024-12-11 05:00

DataPlane SSH conn

93.123.85.214 is listed on the DataPlane SSH conn blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SSH connection to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2024-12-21 03:10:01.421000
Was present on blacklist at: 2024-11-03 03:10, 2024-11-03 07:10, 2024-11-03 11:10, 2024-11-03 15:10, 2024-11-03 19:10, 2024-11-03 23:10, 2024-11-04 03:10, 2024-11-04 07:10, 2024-11-04 11:10, 2024-11-04 15:10, 2024-11-04 19:10, 2024-11-04 23:10, 2024-11-05 03:10, 2024-11-05 07:10, 2024-11-05 11:10, 2024-11-05 15:10, 2024-11-05 19:10, 2024-11-05 23:10, 2024-11-06 03:10, 2024-11-06 07:10, 2024-11-06 11:10, 2024-11-06 15:10, 2024-11-06 19:10, 2024-11-06 23:10, 2024-11-07 03:10, 2024-11-07 07:10, 2024-11-07 11:10, 2024-11-07 15:10, 2024-11-07 19:10, 2024-11-07 23:10, 2024-11-08 03:10, 2024-11-08 07:10, 2024-11-08 11:10, 2024-11-08 15:10, 2024-11-08 19:10, 2024-11-08 23:10, 2024-11-09 03:10, 2024-11-09 07:10, 2024-11-09 11:10, 2024-11-09 15:10, 2024-11-09 19:10, 2024-11-09 23:10, 2024-11-10 03:10, 2024-12-10 19:10, 2024-12-10 23:10, 2024-12-11 03:10, 2024-12-11 07:10, 2024-12-11 11:10, 2024-12-11 15:10, 2024-12-11 19:10, 2024-12-11 23:10, 2024-12-12 03:10, 2024-12-12 07:10, 2024-12-12 11:10, 2024-12-12 15:10, 2024-12-12 19:10, 2024-12-12 23:10, 2024-12-13 03:10, 2024-12-13 07:10, 2024-12-13 11:10, 2024-12-13 15:10, 2024-12-13 19:10, 2024-12-13 23:10, 2024-12-14 03:10, 2024-12-14 07:10, 2024-12-14 11:10, 2024-12-14 15:10, 2024-12-14 19:10, 2024-12-14 23:10, 2024-12-15 03:10, 2024-12-15 07:10, 2024-12-15 11:10, 2024-12-15 15:10, 2024-12-15 19:10, 2024-12-15 23:10, 2024-12-16 03:10, 2024-12-16 07:10, 2024-12-16 11:10, 2024-12-16 15:10, 2024-12-16 19:10, 2024-12-16 23:10, 2024-12-17 03:10, 2024-12-17 07:10, 2024-12-17 11:10, 2024-12-17 15:10, 2024-12-17 19:10, 2024-12-17 23:10, 2024-12-18 03:10, 2024-12-18 07:10, 2024-12-18 11:10, 2024-12-18 15:10, 2024-12-18 19:10, 2024-12-18 23:10, 2024-12-19 03:10, 2024-12-19 07:10, 2024-12-19 11:10, 2024-12-19 15:10, 2024-12-19 19:10, 2024-12-19 23:10, 2024-12-20 03:10, 2024-12-20 07:10, 2024-12-20 11:10, 2024-12-20 15:10, 2024-12-20 19:10, 2024-12-20 23:10, 2024-12-21 03:10

Spamhaus XBL CBL

93.123.85.214 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-12-18 05:47:20.099000
Was present on blacklist at: 2024-11-06 05:47, 2024-11-13 05:47, 2024-11-27 05:47, 2024-12-04 05:47

UCEPROTECT L1

93.123.85.214 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-19 00:45:00.943000
Was present on blacklist at: 2024-11-12 08:45, 2024-11-12 16:45, 2024-11-13 00:45, 2024-11-13 08:45, 2024-11-13 16:45, 2024-11-14 00:45, 2024-11-14 08:45, 2024-11-14 16:45, 2024-11-15 00:45, 2024-11-15 08:45, 2024-11-15 16:45, 2024-11-16 00:45, 2024-11-16 08:45, 2024-11-16 16:45, 2024-11-17 00:45, 2024-11-17 08:45, 2024-11-17 16:45, 2024-11-18 00:45, 2024-11-18 08:45, 2024-11-18 16:45, 2024-11-19 00:45

Turris greylist

93.123.85.214 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-12-14 22:15:00.210000
Was present on blacklist at: 2024-11-28 22:15, 2024-11-29 22:15, 2024-12-12 22:15, 2024-12-14 22:15

Blocklist.net.ua

93.123.85.214 is listed on the Blocklist.net.ua blacklist.

Description: BlockList contains IP addresses that perform attacks,<br>send spam or brute force passwords to the blocking list.
Type of feed: primary (feed detail page)

Last checked at: 2024-12-19 19:15:08.635000
Was present on blacklist at: 2024-12-10 19:15, 2024-12-10 23:15, 2024-12-11 03:15, 2024-12-11 07:15, 2024-12-11 11:15, 2024-12-11 15:15, 2024-12-12 23:15, 2024-12-13 03:15, 2024-12-13 07:15, 2024-12-13 11:15, 2024-12-13 15:15, 2024-12-13 19:15, 2024-12-13 23:15, 2024-12-14 03:15, 2024-12-14 07:15, 2024-12-14 11:15, 2024-12-14 15:15, 2024-12-14 19:15, 2024-12-14 23:15, 2024-12-15 03:15, 2024-12-15 07:15, 2024-12-15 11:15, 2024-12-15 15:15, 2024-12-15 19:15, 2024-12-15 23:15, 2024-12-16 03:15, 2024-12-16 07:15, 2024-12-16 11:15, 2024-12-16 15:15, 2024-12-16 19:15, 2024-12-16 23:15, 2024-12-17 03:15, 2024-12-17 07:15, 2024-12-17 11:15, 2024-12-17 15:15, 2024-12-17 19:15, 2024-12-17 23:15, 2024-12-18 03:15, 2024-12-18 07:15, 2024-12-18 11:15, 2024-12-18 15:15, 2024-12-18 19:15, 2024-12-18 23:15, 2024-12-19 03:15, 2024-12-19 07:15, 2024-12-19 11:15, 2024-12-19 15:15, 2024-12-19 19:15

blocklist.de SSH

93.123.85.214 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2024-12-15 23:05:00.466000
Was present on blacklist at: 2024-12-12 17:05, 2024-12-12 23:05, 2024-12-13 05:05, 2024-12-13 11:05, 2024-12-13 17:05, 2024-12-13 23:05, 2024-12-14 05:05, 2024-12-14 11:05, 2024-12-14 17:05, 2024-12-14 23:05, 2024-12-15 05:05, 2024-12-15 11:05, 2024-12-15 17:05, 2024-12-15 23:05

Warden events (4150)

2024-12-14

AttemptLogin (node.4dc198): 1

2024-12-13

AttemptLogin (node.368407): 1

2024-12-12

AttemptLogin (node.368407): 1

2024-12-10

AttemptLogin (node.368407): 1

2024-12-06

ReconScanning (node.4dc198): 114

ReconScanning (node.368407): 113

ReconScanning (node.ce2b59): 6

AnomalyTraffic (node.ffe95c): 3

2024-12-05

ReconScanning (node.ce2b59): 12

ReconScanning (node.368407): 98

ReconScanning (node.4dc198): 99

2024-12-02

ReconScanning (node.ce2b59): 13

ReconScanning (node.4dc198): 108

ReconScanning (node.368407): 107

2024-11-28

AnomalyTraffic (node.ffe95c): 1

ReconScanning (node.4dc198): 6

ReconScanning (node.368407): 7

2024-11-26

ReconScanning (node.368407): 70

ReconScanning (node.4dc198): 70

ReconScanning (node.ce2b59): 9

2024-11-25

ReconScanning (node.ce2b59): 10

ReconScanning (node.4dc198): 84

ReconScanning (node.368407): 80

2024-11-23

ReconScanning (node.ce2b59): 11

ReconScanning (node.368407): 91

ReconScanning (node.4dc198): 91

2024-11-21

ReconScanning (node.ce2b59): 7

ReconScanning (node.368407): 54

ReconScanning (node.4dc198): 54

2024-11-20

AnomalyTraffic (node.ffe95c): 15

ReconScanning (node.ce2b59): 1

AnomalyTraffic (node.86dac8): 11

ReconScanning (node.4dc198): 41

ReconScanning (node.368407): 40

2024-11-18

ReconScanning (node.ce2b59): 18

ReconScanning (node.4dc198): 80

ReconScanning (node.368407): 81

2024-11-11

ReconScanning (node.ce2b59): 15

ReconScanning (node.4dc198): 100

ReconScanning (node.368407): 102

2024-11-08

ReconScanning (node.4dc198): 102

ReconScanning (node.368407): 101

2024-11-07

ReconScanning (node.368407): 104

ReconScanning (node.4dc198): 104

AnomalyTraffic (node.ffe95c): 4

ReconScanning (node.ce2b59): 6

2024-11-05

ReconScanning (node.ce2b59): 13

ReconScanning (node.4dc198): 104

ReconScanning (node.368407): 105

2024-11-04

ReconScanning (node.4dc198): 140

ReconScanning (node.368407): 135

ReconScanning (node.ce2b59): 18

2024-11-03

ReconScanning (node.ce2b59): 12

ReconScanning (node.4dc198): 106

ReconScanning (node.368407): 107

2024-11-02

AttemptLogin (node.368407): 19

ReconScanning (node.368407): 71

ReconScanning (node.4dc198): 72

ReconScanning (node.ce2b59): 10

AnomalyTraffic (node.ffe95c): 3

2024-11-01

AttemptLogin (node.368407): 282

2024-10-31

ReconScanning (node.4dc198): 71

AnomalyTraffic (node.86dac8): 2

AnomalyTraffic (node.ffe95c): 2

ReconScanning (node.368407): 98

ReconScanning (node.ce2b59): 8

AttemptLogin (node.368407): 102

2024-10-30

AnomalyTraffic (node.ffe95c): 58

AnomalyTraffic (node.86dac8): 18

ReconScanning (node.368407): 173

ReconScanning (node.4dc198): 174

DShield reports (IP summary, reports)

2024-10-30

Number of reports: 530

Distinct targets: 319

2024-10-31

Number of reports: 442

Distinct targets: 300

2024-11-02

Number of reports: 316

Distinct targets: 213

2024-11-03

Number of reports: 429

Distinct targets: 300

2024-11-04

Number of reports: 584

Distinct targets: 373

2024-11-05

Number of reports: 522

Distinct targets: 372

2024-11-06

Number of reports: 14

Distinct targets: 7

2024-11-07

Number of reports: 405

Distinct targets: 361

2024-11-08

Number of reports: 537

Distinct targets: 365

2024-11-11

Number of reports: 517

Distinct targets: 379

2024-11-18

Number of reports: 408

Distinct targets: 261

2024-11-20

Number of reports: 422

Distinct targets: 267

2024-11-21

Number of reports: 461

Distinct targets: 308

2024-11-23

Number of reports: 354

Distinct targets: 312

2024-11-25

Number of reports: 503

Distinct targets: 334

2024-11-26

Number of reports: 515

Distinct targets: 333

2024-11-27

Number of reports: 12

Distinct targets: 5

2024-11-28

Number of reports: 78

Distinct targets: 48

2024-12-02

Number of reports: 471

Distinct targets: 320

2024-12-05

Number of reports: 543

Distinct targets: 347

2024-12-06

Number of reports: 428

Distinct targets: 292

2024-12-11

Number of reports: 19

Distinct targets: 3

2024-12-12

Number of reports: 12

Distinct targets: 3

Origin AS

AS216240 -

BGP Prefix

93.123.85.0/24

geo

Bulgaria

🕑 Europe/Sofia

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

93.123.84.0 - 93.123.85.255

last_activity

2024-12-14 05:10:03

last_warden_event

2024-12-14 05:10:03

rep

0.03095238095238095

reserved_range

0

Shodan's InternetDB

Open ports: 22

Tags: scanner

CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:7.6p1

ts_added

2024-10-30 05:47:11.851000

ts_last_update

2024-12-23 05:47:20.308000

Warden event timeline

DShield event timeline

Presence on blacklists