You've reached a Morado CTEM assessment server.
The address 135.148.149.230 runs Morado's Continuous Threat Exposure Management service. Morado uses it to discover and assess internet-facing systems for its clients, so they can find and fix exposures before attackers do.
Why you may be seeing traffic from this address
Connections from this address are part of security assessments that Morado's clients have requested.
An assessment maps what an organisation exposes to the internet and looks for weaknesses in it. To do that, this server:
- connects to common network ports to find which services are listening;
- reads the information those services offer, such as banners, web pages and TLS certificates;
- compares software versions and configuration against published vulnerabilities.
These checks are designed to identify exposure, not to disrupt services or change data.
What Morado CTEM does
A continuous view of an organisation's external attack surface, with findings ranked by the risk they actually pose.
Attack surface discovery
Finds the domains, subdomains, IP ranges and certificates an organisation exposes, including the ones nobody remembered.
Exposure assessment
Identifies open ports and services across hundreds of ports, and the product and version behind each one.
Risk-based prioritisation
Matches findings to known vulnerabilities and ranks them by real-world risk: known exploitation, exploit likelihood and severity.
AI validation
Checks each finding against what was actually observed, separating what is exploitable from what depends on a condition or can be ruled out.
Continuous monitoring
Repeated assessments show what changed: new hosts and services, issues fixed, and issues that are new.
Reporting and integration
Executive and technical reports, data exports and an API that feed the tools security teams already use.
Questions about this traffic?
If you'd like to know more, or believe this traffic reached a system that isn't part of an authorised assessment, contact Morado.
Email morado@morado.io with the IP addresses or ranges concerned and the approximate time you saw the traffic, and Morado's team will look into it.
To learn about Morado and its services, visit morado.io.