IP address

Passive DNS

Tags: IP in hostname Scanner

IP blacklists

CI Army

149.102.230.133 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence database that provides scores for IPs. Source of unspecified malicious attacks most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-04-22 02:50:01.189000
Was present on blacklist at: 2025-02-07 03:50, 2025-02-08 03:50, 2025-02-09 03:50, 2025-02-10 03:50, 2025-02-11 03:50, 2025-02-12 03:50, 2025-02-13 03:50, 2025-02-14 03:50, 2025-02-15 03:50, 2025-02-16 03:50, 2025-02-17 03:50, 2025-02-25 03:50, 2025-02-26 03:50, 2025-02-28 03:50, 2025-03-03 03:50, 2025-03-04 03:50, 2025-03-05 03:50, 2025-03-08 03:50, 2025-03-09 03:50, 2025-03-10 03:50, 2025-03-12 03:50, 2025-04-11 02:50, 2025-04-13 02:50, 2025-04-14 02:50, 2025-04-15 02:50, 2025-04-16 02:50, 2025-04-17 02:50, 2025-04-18 02:50, 2025-04-20 02:50, 2025-04-21 02:50, 2025-04-22 02:50

Blocklist.net.ua

149.102.230.133 is listed on the Blocklist.net.ua blacklist.

Description: BlockList contains IP addresses that perform attacks, send spam or brute force passwords to the blocking list.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-30 10:15:02.173000
Was present on blacklist at: 2025-04-18 10:15, 2025-04-18 14:15, 2025-04-18 18:15, 2025-04-18 22:15, 2025-04-19 02:15, 2025-04-19 06:15, 2025-04-29 14:15, 2025-04-29 18:15, 2025-04-29 22:15, 2025-04-30 02:15, 2025-04-30 06:15, 2025-04-30 10:15

blocklist.de Apache

149.102.230.133 is listed on the blocklist.de Apache blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing attacks on the service Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-26 22:05:05.410000
Was present on blacklist at: 2025-04-18 16:05, 2025-04-18 22:05, 2025-04-19 04:05, 2025-04-19 10:05, 2025-04-19 16:05, 2025-04-19 22:05, 2025-04-20 04:05, 2025-04-20 10:05, 2025-04-20 16:05, 2025-04-20 22:05, 2025-04-25 04:05, 2025-04-25 10:05, 2025-04-25 16:05, 2025-04-25 22:05, 2025-04-26 04:05, 2025-04-26 10:05, 2025-04-26 16:05, 2025-04-26 22:05

blocklist.de web-login

149.102.230.133 is listed on the blocklist.de web-login blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-26 22:05:05.333000
Was present on blacklist at: 2025-04-19 04:05, 2025-04-19 10:05, 2025-04-19 16:05, 2025-04-19 22:05, 2025-04-20 04:05, 2025-04-20 10:05, 2025-04-20 16:05, 2025-04-20 22:05, 2025-04-25 04:05, 2025-04-25 10:05, 2025-04-25 16:05, 2025-04-25 22:05, 2025-04-26 04:05, 2025-04-26 10:05, 2025-04-26 16:05, 2025-04-26 22:05

AbuseIPDB

149.102.230.133 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc. Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-05-03 04:00:00.690000
Was present on blacklist at: 2025-04-20 04:00, 2025-04-25 04:00, 2025-04-30 04:00, 2025-05-03 04:00

Turris greylist

149.102.230.133 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC, which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-05-01 21:15:00.167000
Was present on blacklist at: 2025-05-01 21:15

Warden events (82)

2025-04-20: ReconScanning (node.9c1411): 4
2025-04-19: ReconScanning (node.9c1411): 6
2025-04-18: ReconScanning (node.9c1411): 6
2025-04-17: ReconScanning (node.9c1411): 6
2025-04-16: ReconScanning (node.9c1411): 2
2025-04-15: ReconScanning (node.9c1411): 4
2025-04-14: ReconScanning (node.9c1411): 2
2025-04-13: ReconScanning (node.9c1411): 2
2025-04-12: ReconScanning (node.9c1411): 6
2025-04-11: ReconScanning (node.9c1411): 5
2025-04-10: ReconScanning (node.9c1411): 4
2025-04-08: ReconScanning (node.9c1411): 2
2025-04-07: ReconScanning (node.9c1411): 3
2025-04-06: ReconScanning (node.9c1411): 5
2025-04-05: ReconScanning (node.9c1411): 1
2025-03-19: ReconScanning (node.9c1411): 1
2025-03-18: ReconScanning (node.9c1411): 3
2025-03-16: ReconScanning (node.9c1411): 3
2025-03-15: ReconScanning (node.9c1411): 4
2025-03-14: ReconScanning (node.9c1411): 5
2025-03-13: ReconScanning (node.9c1411): 4
2025-03-11: ReconScanning (node.9c1411): 4

DShield reports (IP summary, reports)

2025-02-08: Number of reports: 10; Distinct targets: 8
2025-02-13: Number of reports: 10; Distinct targets: 3
2025-02-18: Number of reports: 10; Distinct targets: 6
2025-03-03: Number of reports: 11; Distinct targets: 7
2025-03-07: Number of reports: 21; Distinct targets: 10
2025-03-16: Number of reports: 10; Distinct targets: 7
2025-04-18: Number of reports: 10; Distinct targets: 6

Origin AS: AS212238 - CDNEXT
BGP Prefix: 149.102.230.0/24
geo: Germany, Frankfurt am Main; 🕑 Europe/Berlin
hostname: unn-149-102-230-133.datapacket.com
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 149.102.0.0 - 149.102.255.255
last_activity: 2025-04-20 06:05:59
last_warden_event: 2025-04-20 06:05:59
rep: 0.0
reserved_range: 0
Shodan's InternetDB: Open ports: 1443, 4000, 7443, 8443; Tags: –; CPEs: –
ts_added: 2025-01-20 05:05:14.571000
ts_last_update: 2025-05-06 05:08:43.709000

Warden event timeline

DShield event timeline

Presence on blacklists