IP address

Passive DNS

Tags:

IP blacklists

Spamhaus SBL

94.154.34.178 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-01-27 05:08:17.858000
Was present on blacklist at: 2025-12-16 05:06, 2025-12-23 05:11, 2025-12-30 05:09, 2026-01-06 09:30, 2026-01-13 05:10, 2026-01-20 05:07, 2026-01-27 05:08

Spamhaus SBL CSS

94.154.34.178 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-01-27 05:08:17.858000
Was present on blacklist at: 2025-12-16 05:06, 2025-12-23 05:11

Spamhaus XBL CBL

94.154.34.178 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-01-27 05:08:17.858000
Was present on blacklist at: 2025-12-16 05:06, 2025-12-23 05:11

FireHOL anonymizers

94.154.34.178 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2026-02-01 06:05:11
Was present on blacklist at: 2025-12-16 06:05, 2025-12-17 06:05, 2025-12-18 06:05, 2025-12-19 06:05, 2025-12-20 06:05, 2025-12-21 06:05, 2025-12-22 06:05, 2025-12-23 06:05, 2025-12-24 06:05, 2025-12-25 06:05, 2025-12-26 06:05, 2025-12-27 06:05, 2025-12-28 06:05, 2025-12-29 06:05, 2025-12-30 06:05, 2025-12-31 06:05, 2026-01-01 06:05, 2026-01-02 06:05, 2026-01-03 06:05, 2026-01-04 06:05, 2026-01-05 06:05, 2026-01-06 06:05, 2026-01-07 06:05, 2026-01-08 06:05, 2026-01-09 06:05, 2026-01-10 06:05, 2026-01-11 06:05, 2026-01-12 06:05, 2026-01-13 06:05, 2026-01-14 06:05, 2026-01-15 06:05, 2026-01-16 06:05, 2026-01-17 06:05, 2026-01-18 06:05, 2026-01-19 06:05, 2026-01-20 06:05, 2026-01-21 06:05, 2026-01-22 06:05, 2026-01-23 06:05, 2026-01-24 06:05, 2026-01-25 06:05, 2026-01-26 06:05, 2026-01-27 06:05, 2026-01-28 06:05, 2026-01-29 06:05, 2026-01-30 06:05, 2026-01-31 06:05, 2026-02-01 06:05

Warden events (3)

2026-01-23: ReconScanning (node.9c1411): 3

DShield reports (IP summary, reports)

2025-12-15: Number of reports: 20; Distinct targets: 8
2025-12-16: Number of reports: 56; Distinct targets: 13
2025-12-17: Number of reports: 109; Distinct targets: 13
2025-12-18: Number of reports: 109; Distinct targets: 13
2025-12-19: Number of reports: 201; Distinct targets: 13
2025-12-20: Number of reports: 12; Distinct targets: 5
2025-12-21: Number of reports: 10; Distinct targets: 5
2025-12-22: Number of reports: 30; Distinct targets: 9
2025-12-28: Number of reports: 101; Distinct targets: 14
2026-01-09: Number of reports: 12; Distinct targets: 6
2026-01-10: Number of reports: 83; Distinct targets: 12
2026-01-11: Number of reports: 83; Distinct targets: 12

Origin AS: AS210538 - KEYUBU
BGP Prefix: 94.154.34.0/24
geo: Turkey, Istanbul; 🕑 Europe/Istanbul
hostname: server.keyubu.com
Address block ('inetnum' or 'NetRange' in whois database): 94.154.32.0 - 94.154.39.255
last_activity: 2026-01-23 04:37:55
last_warden_event: 2026-01-23 04:37:55
rep: 0.020833333333333332
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 8388; Tags: –; CPEs: cpe:/a:openbsd:openssh:8.9p1, cpe:/o:canonical:ubuntu_linux
ts_added: 2025-12-16 05:06:17.317000
ts_last_update: 2026-02-01 05:06:20.718000

Warden event timeline

DShield event timeline

Presence on blacklists