IP address

Passive DNS

Tags:

IP blacklists

UCEPROTECT L1

92.118.57.33 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-10-05 07:45:00.626000
Was present on blacklist at: 2025-09-28 15:45, 2025-09-28 23:45, 2025-09-29 07:45, 2025-09-29 15:45, 2025-09-29 23:45, 2025-09-30 07:45, 2025-09-30 15:45, 2025-09-30 23:45, 2025-10-01 07:45, 2025-10-01 15:45, 2025-10-01 23:45, 2025-10-02 07:45, 2025-10-02 15:45, 2025-10-02 23:45, 2025-10-03 07:45, 2025-10-03 15:45, 2025-10-03 23:45, 2025-10-04 07:45, 2025-10-04 15:45, 2025-10-04 23:45, 2025-10-05 07:45

DataPlane TELNET login

92.118.57.33 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-10-14 18:10:02.038000
Was present on blacklist at: 2025-10-03 10:10, 2025-10-03 14:10, 2025-10-03 18:10, 2025-10-03 22:10, 2025-10-04 02:10, 2025-10-04 06:10, 2025-10-04 10:10, 2025-10-04 14:10, 2025-10-04 18:10, 2025-10-04 22:10, 2025-10-05 02:10, 2025-10-05 06:10, 2025-10-05 10:10, 2025-10-05 14:10, 2025-10-05 18:10, 2025-10-05 22:10, 2025-10-06 02:10, 2025-10-06 06:10, 2025-10-06 10:10, 2025-10-06 14:10, 2025-10-06 18:10, 2025-10-06 22:10, 2025-10-07 02:10, 2025-10-07 06:10, 2025-10-07 10:10, 2025-10-07 14:10, 2025-10-07 22:10, 2025-10-08 06:10, 2025-10-08 10:10, 2025-10-08 14:10, 2025-10-08 22:10, 2025-10-09 02:10, 2025-10-09 06:10, 2025-10-09 10:10, 2025-10-09 14:10, 2025-10-09 18:10, 2025-10-09 22:10, 2025-10-10 06:10, 2025-10-10 10:10, 2025-10-10 14:10, 2025-10-10 18:10, 2025-10-10 22:10, 2025-10-11 02:10, 2025-10-11 06:10, 2025-10-11 10:10, 2025-10-11 14:10, 2025-10-11 18:10, 2025-10-11 22:10, 2025-10-12 02:10, 2025-10-12 06:10, 2025-10-12 14:10, 2025-10-12 18:10, 2025-10-12 22:10, 2025-10-13 02:10, 2025-10-13 06:10, 2025-10-13 10:10, 2025-10-13 14:10, 2025-10-13 18:10, 2025-10-13 22:10, 2025-10-14 02:10, 2025-10-14 06:10, 2025-10-14 10:10, 2025-10-14 14:10, 2025-10-14 18:10

Spamhaus XBL CBL

92.118.57.33 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-10-12 16:14:01.194000
Was present on blacklist at: 2025-10-05 16:06, 2025-10-12 16:14

DShield reports (IP summary, reports)

2025-10-04: Number of reports: 25; Distinct targets: 9
2025-10-05: Number of reports: 25; Distinct targets: 9
2025-10-09: Number of reports: 22; Distinct targets: 6
2025-10-10: Number of reports: 15; Distinct targets: 8
2025-10-11: Number of reports: 11; Distinct targets: 7
2025-10-12: Number of reports: 11; Distinct targets: 7
2025-10-13: Number of reports: 17; Distinct targets: 10

OTX pulses

[68d929fdf518043e5d1b1e96] 2025-09-28 12:28:45.045000 | RDP honeypot logs for 2025/09/28

Author name:	jnazario
Pulse modified:	2025-09-28 12:28:45.045000
Indicator created:	2025-09-28 12:28:45
Indicator role:	None
Indicator title:
Indicator expiration:	2025-10-28 12:00:00

Origin AS: AS40021 - CONTABO
BGP Prefix: 92.118.56.0/23
geo: United States, St Louis; 🕑 America/Chicago
hostname: vmi2781736.contaboserver.net
Address block ('inetnum' or 'NetRange' in whois database): 92.118.56.0 - 92.118.59.255
last_activity: 2025-09-28 16:24:35.949000
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 135, 445, 593, 1434, 1801, 3388, 5357, 5985, 5986, 50139; Tags: database, self-signed; CPEs: cpe:/a:microsoft:internet_information_services:10.0, cpe:/o:microsoft:windows, cpe:/a:microsoft:message_queuing, cpe:/a:microsoft:internet_information_services, cpe:/a:microsoft:asp.net, cpe:/a:microsoft:sql_server:15.0.2000.0
ts_added: 2025-09-28 16:02:23.515000
ts_last_update: 2025-10-14 18:34:14.860000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses