IP address
Tags:
IP in hostname
Scanner
- IP blacklists
CI Army
173.198.126.242 is listed on the CI Army blacklist.
Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed:
primary (
feed detail page)
Last checked at:
2025-04-20 02:50:01.059000
Was present on blacklist at:
2025-02-06 03:50,
2025-02-07 03:50,
2025-02-08 03:50,
2025-02-09 03:50,
2025-02-10 03:50,
2025-02-11 03:50,
2025-02-12 03:50,
2025-02-13 03:50,
2025-02-14 03:50,
2025-02-22 03:50,
2025-02-23 03:50,
2025-02-24 03:50,
2025-02-25 03:50,
2025-02-26 03:50,
2025-03-02 03:50,
2025-03-07 03:50,
2025-03-08 03:50,
2025-03-09 03:50,
2025-03-10 03:50,
2025-03-12 03:50,
2025-03-13 03:50,
2025-03-14 03:50,
2025-03-15 03:50,
2025-03-16 03:50,
2025-03-17 03:50,
2025-03-18 03:50,
2025-03-19 03:50,
2025-03-22 03:50,
2025-03-23 03:50,
2025-03-24 03:50,
2025-03-29 03:50,
2025-03-30 02:50,
2025-03-31 02:50,
2025-04-02 02:50,
2025-04-03 02:50,
2025-04-20 02:50
DataPlane SSH conn
173.198.126.242 is listed on the DataPlane SSH conn blacklist.
Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SSH connection to a remote host.
Type of feed:
primary (
feed detail page)
Last checked at:
2025-02-15 07:10:01.707000
Was present on blacklist at:
2025-02-08 11:10,
2025-02-08 15:10,
2025-02-08 19:10,
2025-02-08 23:10,
2025-02-09 03:10,
2025-02-09 07:10,
2025-02-09 11:10,
2025-02-09 15:10,
2025-02-09 19:10,
2025-02-09 23:10,
2025-02-10 03:10,
2025-02-10 07:10,
2025-02-10 11:10,
2025-02-10 15:10,
2025-02-10 19:10,
2025-02-10 23:10,
2025-02-11 03:10,
2025-02-11 07:10,
2025-02-11 11:10,
2025-02-11 15:10,
2025-02-11 19:10,
2025-02-11 23:10,
2025-02-12 03:10,
2025-02-12 07:10,
2025-02-12 11:10,
2025-02-12 15:10,
2025-02-12 19:10,
2025-02-12 23:10,
2025-02-13 03:10,
2025-02-13 07:10,
2025-02-13 11:10,
2025-02-13 15:10,
2025-02-13 19:10,
2025-02-13 23:10,
2025-02-14 03:10,
2025-02-14 07:10,
2025-02-14 11:10,
2025-02-14 15:10,
2025-02-14 19:10,
2025-02-14 23:10,
2025-02-15 03:10,
2025-02-15 07:10
DataPlane SMTP greeting
173.198.126.242 is listed on the DataPlane SMTP greeting blacklist.
Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs that are<br>identified as SMTP clients issuing unsolicited HELO or EHLO commands.
Type of feed:
primary (
feed detail page)
Last checked at:
2025-03-06 19:10:06.192000
Was present on blacklist at:
2025-02-27 19:10,
2025-02-27 23:10,
2025-02-28 03:10,
2025-02-28 07:10,
2025-02-28 11:10,
2025-02-28 15:10,
2025-02-28 19:10,
2025-02-28 23:10,
2025-03-01 03:10,
2025-03-01 07:10,
2025-03-01 11:10,
2025-03-01 15:10,
2025-03-01 19:10,
2025-03-01 23:10,
2025-03-02 03:10,
2025-03-02 07:10,
2025-03-02 11:10,
2025-03-02 15:10,
2025-03-02 19:10,
2025-03-02 23:10,
2025-03-03 03:10,
2025-03-03 07:10,
2025-03-03 11:10,
2025-03-03 15:10,
2025-03-03 19:10,
2025-03-03 23:10,
2025-03-04 03:10,
2025-03-04 07:10,
2025-03-04 11:10,
2025-03-04 15:10,
2025-03-04 19:10,
2025-03-04 23:10,
2025-03-05 03:10,
2025-03-05 07:10,
2025-03-05 11:10,
2025-03-05 15:10,
2025-03-05 19:10,
2025-03-05 23:10,
2025-03-06 03:10,
2025-03-06 07:10,
2025-03-06 11:10,
2025-03-06 15:10,
2025-03-06 19:10
- Warden events (18)
- 2025-04-13
-
-
ReconScanning (node.368407): 10
- 2025-03-24
-
-
ReconScanning (node.368407): 2
- 2025-03-21
-
-
ReconScanning (node.368407): 1
- 2025-02-16
-
-
ReconScanning (node.368407): 1
- 2025-02-12
-
-
IntrusionUserCompromise (node.cfb4f7): 4
- DShield reports (IP summary, reports)
- 2025-02-03
- Number of reports: 28
- Distinct targets: 12
- 2025-02-06
- Number of reports: 28
- Distinct targets: 10
- 2025-02-10
- Number of reports: 12
- Distinct targets: 4
- 2025-02-11
- Number of reports: 12
- Distinct targets: 4
- 2025-02-18
- Number of reports: 16
- Distinct targets: 4
- 2025-02-19
- Number of reports: 20
- Distinct targets: 6
- 2025-02-26
- Number of reports: 12
- Distinct targets: 4
- 2025-03-05
- Number of reports: 14
- Distinct targets: 10
- 2025-03-11
- Number of reports: 16
- Distinct targets: 6
- 2025-03-16
- Number of reports: 10
- Distinct targets: 4
- 2025-03-18
- Number of reports: 16
- Distinct targets: 8
- 2025-03-28
- Number of reports: 12
- Distinct targets: 6
- 2025-04-01
- Number of reports: 12
- Distinct targets: 4
- 2025-04-17
- Number of reports: 16
- Distinct targets: 4
- 2025-04-18
- Number of reports: 30
- Distinct targets: 9
- 2025-04-25
- Number of reports: 16
- Distinct targets: 8
- 2025-04-30
- Number of reports: 44
- Distinct targets: 11
- Origin AS
- AS20001 - ROADRUNNER-WEST
- BGP Prefix
- 173.198.0.0/17
- geo
-
United States, Huntington Park
- 🕑 America/Los_Angeles
- hostname
- syn-173-198-126-242.biz.spectrum.com
- hostname_class
- ['ip_in_hostname']
- Address block ('inetnum' or 'NetRange' in whois database)
- 173.198.0.0 - 173.198.127.255
- last_activity
- 2025-04-13 10:01:49
- last_warden_event
- 2025-04-13 10:01:49
- rep
- 0.0
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 1723
- Tags: vpn
- CPEs: –
- ts_added
- 2025-01-16 18:31:31.464000
- ts_last_update
- 2025-05-01 18:31:41.617000
Warden event timeline
DShield event timeline
Presence on blacklists
