IP address


.000107.173.44.199107-173-44-199-host.colocrossing.com
Shodan(more info)
Passive DNS
Tags: IP in hostname
IP blacklists
blocklist.de bots
107.173.44.199 is listed on the blocklist.de bots blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the RFI-Attacks,<br>REG-Bots, IRC-Bots or BadBots.
Type of feed: primary (feed detail page)

Last checked at: 2026-09-09 10:05:00.352000
Was present on blacklist at: 2026-09-07 16:05, 2026-09-07 22:05, 2026-09-08 04:05, 2026-09-08 10:05, 2026-09-08 16:05, 2026-09-08 22:05, 2026-09-09 04:05, 2026-09-09 10:05

Threat categories

TLRoleCategoryDetails
42 src scan
41 src

Warden events (1)
2026-09-02
ReconScanning (node.368407): 1
DShield reports (IP summary, reports)
2026-09-04
Number of reports: 22
Distinct targets: 22
Origin AS
AS36352 - AS-COLOCROSSING
BGP Prefix
107.173.40.0/21
geo
United States, Buffalo
🕑 America/New_York
hostname
107-173-44-199-host.colocrossing.com
hostname_class
['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database)
107.172.0.0 - 107.175.255.255
last_activity
2026-09-02 19:07:17
last_warden_event
2026-09-02 19:07:17
rep
0.000394058385869811
reserved_range
0
Shodan's InternetDB
Open ports: 22, 80, 443, 3001, 8080
Tags: eol-product, open-dir
CPEs: cpe:/a:nodejs:node.js, cpe:/a:python:python:3.10.12, cpe:/a:openbsd:openssh:8.9p1, cpe:/o:linux:linux_kernel, cpe:/o:canonical:ubuntu_linux, cpe:/a:f5:nginx:1.18.0, cpe:/a:expressjs:express
ts_added
2026-09-02 19:07:55.615000
ts_last_update
2026-09-14 19:08:00.296000

Warden event timeline

DShield event timeline

Presence on blacklists