IP address
Shodan(more info)

Passive DNS

Tags:
- IP blacklists
- UCEPROTECT L1194.28.194.146 is listed on the UCEPROTECT L1 blacklist.Spamhaus SBL CSS
Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)
Last checked at: 2025-06-25 07:45:00.783000
Was present on blacklist at: 2025-06-12 07:45, 2025-06-12 15:45, 2025-06-12 23:45, 2025-06-13 07:45, 2025-06-13 15:45, 2025-06-13 23:45, 2025-06-14 07:45, 2025-06-14 15:45, 2025-06-14 23:45, 2025-06-15 07:45, 2025-06-15 15:45, 2025-06-15 23:45, 2025-06-16 07:45, 2025-06-16 15:45, 2025-06-16 23:45, 2025-06-17 07:45, 2025-06-17 15:45, 2025-06-17 23:45, 2025-06-18 07:45, 2025-06-18 15:45, 2025-06-18 23:45, 2025-06-19 07:45, 2025-06-19 15:45, 2025-06-19 23:45, 2025-06-20 07:45, 2025-06-20 15:45, 2025-06-20 23:45, 2025-06-21 07:45, 2025-06-21 15:45, 2025-06-21 23:45, 2025-06-22 07:45, 2025-06-22 15:45, 2025-06-22 23:45, 2025-06-23 07:45, 2025-06-23 15:45, 2025-06-23 23:45, 2025-06-24 07:45, 2025-06-24 15:45, 2025-06-24 23:45, 2025-06-25 07:45194.28.194.146 is listed on the Spamhaus SBL CSS blacklist.Spamhaus XBL CBL
Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2025-06-19 07:59:00.320000
Was present on blacklist at: 2025-06-12 07:58, 2025-06-19 07:59194.28.194.146 is listed on the Spamhaus XBL CBL blacklist.SpamCop
Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2025-06-19 07:59:00.320000
Was present on blacklist at: 2025-06-12 07:58, 2025-06-19 07:59194.28.194.146 is listed on the SpamCop blacklist.FireHOL anonymizers
Description: The SpamCop Blocking List (SCBL) lists IP addresses which have transmitted reported email to SpamCop users.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2025-06-19 07:59:00.320000
Was present on blacklist at: 2025-06-12 07:58, 2025-06-19 07:59194.28.194.146 is listed on the FireHOL anonymizers blacklist.DataPlane SSH login
Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)
Last checked at: 2025-06-25 06:05:07
Was present on blacklist at: 2025-06-12 06:05, 2025-06-13 06:05, 2025-06-14 06:05, 2025-06-15 06:05, 2025-06-16 06:05, 2025-06-17 06:05, 2025-06-18 06:05, 2025-06-19 06:05, 2025-06-20 06:05, 2025-06-21 06:05, 2025-06-22 06:05, 2025-06-23 06:05, 2025-06-24 06:05, 2025-06-25 06:05194.28.194.146 is listed on the DataPlane SSH login blacklist.PSBL
Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login to a host using SSH password authentication.
Type of feed: primary (feed detail page)
Last checked at: 2025-06-25 10:10:01.697000
Was present on blacklist at: 2025-06-13 10:10, 2025-06-13 14:10, 2025-06-13 18:10, 2025-06-13 22:10, 2025-06-14 02:10, 2025-06-14 06:10, 2025-06-14 10:10, 2025-06-14 14:10, 2025-06-14 18:10, 2025-06-14 22:10, 2025-06-15 02:10, 2025-06-15 06:10, 2025-06-15 10:10, 2025-06-15 14:10, 2025-06-15 18:10, 2025-06-15 22:10, 2025-06-16 02:10, 2025-06-16 06:10, 2025-06-16 10:10, 2025-06-16 14:10, 2025-06-16 18:10, 2025-06-16 22:10, 2025-06-17 02:10, 2025-06-17 06:10, 2025-06-17 10:10, 2025-06-17 14:10, 2025-06-17 18:10, 2025-06-17 22:10, 2025-06-18 02:10, 2025-06-18 06:10, 2025-06-18 10:10, 2025-06-18 14:10, 2025-06-18 18:10, 2025-06-18 22:10, 2025-06-19 02:10, 2025-06-19 06:10, 2025-06-19 10:10, 2025-06-19 14:10, 2025-06-19 18:10, 2025-06-19 22:10, 2025-06-20 02:10, 2025-06-20 06:10, 2025-06-20 10:10, 2025-06-20 14:10, 2025-06-20 18:10, 2025-06-20 22:10, 2025-06-22 10:10, 2025-06-22 14:10, 2025-06-22 18:10, 2025-06-22 22:10, 2025-06-23 02:10, 2025-06-23 06:10, 2025-06-23 10:10, 2025-06-23 14:10, 2025-06-23 18:10, 2025-06-23 22:10, 2025-06-24 02:10, 2025-06-24 06:10, 2025-06-24 10:10, 2025-06-24 14:10, 2025-06-24 18:10, 2025-06-24 22:10, 2025-06-25 02:10, 2025-06-25 06:10, 2025-06-25 10:10194.28.194.146 is listed on the PSBL blacklist.blocklist.de SSH
Description: The Passive Spam Block List uses the Spamikaze software to detect spam IPs.
Type of feed: primary (feed detail page)
Last checked at: 2025-06-25 07:45:00.509000
Was present on blacklist at: 2025-06-21 15:45, 2025-06-21 23:45, 2025-06-22 07:45, 2025-06-22 15:45, 2025-06-22 23:45, 2025-06-23 07:45, 2025-06-23 15:45, 2025-06-23 23:45, 2025-06-24 07:45, 2025-06-24 15:45, 2025-06-24 23:45, 2025-06-25 07:45194.28.194.146 is listed on the blocklist.de SSH blacklist.
Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)
Last checked at: 2025-06-25 10:05:05.384000
Was present on blacklist at: 2025-06-25 04:05, 2025-06-25 10:05 - Warden events (2)
- 2025-06-22
-
- AttemptLogin (node.03e7a9): 1
- 2025-06-20
-
- AttemptLogin (node.ce2b59): 1
- Origin AS
- AS33991 - IGRA-SERVICE-AS
- BGP Prefix
- 194.28.194.0/24
- geo
- Russia, Krasnoyarsk
- 🕑 Asia/Krasnoyarsk
- hostname
- psyn08.g-service.ru
- Address block ('inetnum' or 'NetRange' in whois database)
- 194.28.194.0 - 194.28.194.255
- last_activity
- 2025-06-22 01:57:36.969000
- last_warden_event
- 2025-06-22 01:57:36.969000
- rep
- 0.04761904761904762
- reserved_range
- 0
- ts_added
- 2025-06-12 07:58:57.649000
- ts_last_update
- 2025-06-25 10:17:01.710000
Warden event timeline
DShield event timeline
Presence on blacklists