IP address

Search at other sites:

.038104.244.76.136

Shodan(more info)

Passive DNS

IP blacklists

CI Army

104.244.76.136 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-01-11 03:50:00.930000
Was present on blacklist at: 2025-12-22 03:50, 2025-12-23 03:50, 2025-12-24 03:50, 2025-12-25 03:50, 2025-12-26 03:50, 2026-01-05 03:50, 2026-01-06 03:50, 2026-01-07 03:50, 2026-01-08 03:50, 2026-01-09 03:50, 2026-01-10 03:50, 2026-01-11 03:50

FireHOL anonymizers

104.244.76.136 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2026-01-12 00:05:09
Was present on blacklist at: 2025-12-22 00:05, 2025-12-23 00:05, 2025-12-24 00:05, 2025-12-25 00:05, 2025-12-26 00:05, 2025-12-27 00:05, 2025-12-28 00:05, 2025-12-29 00:05, 2025-12-30 00:05, 2025-12-31 00:05, 2026-01-01 00:05, 2026-01-02 00:08, 2026-01-03 00:05, 2026-01-04 00:05, 2026-01-05 00:05, 2026-01-06 00:05, 2026-01-07 00:05, 2026-01-08 00:05, 2026-01-09 00:05, 2026-01-10 00:05, 2026-01-11 00:05, 2026-01-12 00:05

AbuseIPDB

104.244.76.136 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-01-07 05:00:00.723000
Was present on blacklist at: 2026-01-07 05:00

Warden events (17)

2026-01-06

AttemptLogin (node.4dc198): 17

DShield reports (IP summary, reports)

2025-12-21

Number of reports: 103

Distinct targets: 83

2025-12-22

Number of reports: 19

Distinct targets: 15

2026-01-04

Number of reports: 39

Distinct targets: 33

2026-01-05

Number of reports: 56

Distinct targets: 43

2026-01-06

Number of reports: 135

Distinct targets: 97

Origin AS

AS53667 - PONYNET

BGP Prefix

104.244.72.0/21

geo

Luxembourg, Luxembourg

🕑 Europe/Luxembourg

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

104.244.72.0 - 104.244.79.255

last_activity

2026-01-06 16:45:33

last_warden_event

2026-01-06 16:45:33

rep

0.0380949474516369

reserved_range

0

Shodan's InternetDB

Open ports: 80, 443

Tags: –

CPEs: cpe:/a:f5:nginx

ts_added

2025-12-22 03:53:41.552000

ts_last_update

2026-01-12 03:53:53.491000

Warden event timeline

DShield event timeline

Presence on blacklists