IP address

Search at other sites:

.062109.61.108.102

Shodan(more info)

Passive DNS

IP blacklists

Spamhaus SBL

109.61.108.102 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-04-05 18:39:30.290000
Was present on blacklist at: 2026-03-29 18:39, 2026-04-05 18:39

CI Army

109.61.108.102 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-03-31 02:50:01.083000
Was present on blacklist at: 2026-03-30 02:50, 2026-03-31 02:50

Threat categories

TL	Role	Category	Details
58	src	scan	port: 19
25	src	—

---

Warden events (48)

2026-03-30

ReconScanning (node.ce2b59): 30

2026-03-29

ReconScanning (node.ce2b59): 18

DShield reports (IP summary, reports)

2026-03-30

Number of reports: 624

Distinct targets: 205

2026-03-31

Number of reports: 624

Distinct targets: 205

Origin AS

AS33842 - NOT_USED

BGP Prefix

109.61.108.0/24

geo

Russia, Moscow

🕑 Europe/Moscow

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

109.61.104.0 - 109.61.111.255

last_activity

2026-03-30 13:39:36

last_warden_event

2026-03-30 13:39:36

rep

0.061904652913411455

reserved_range

0

Shodan's InternetDB

Open ports: 3389

Tags: self-signed

CPEs: –

ts_added

2026-03-29 18:39:20.649000

ts_last_update

2026-04-06 18:39:30.133000

Warden event timeline

DShield event timeline

Presence on blacklists