IP address

Search at other sites:

.178107.189.29.172

Shodan(more info)

Passive DNS

IP blacklists

CI Army

107.189.29.172 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-05-02 02:50:00.992000
Was present on blacklist at: 2024-04-25 02:50, 2024-04-26 02:50, 2024-04-27 02:50, 2024-04-28 02:50, 2024-04-29 02:50, 2024-04-30 02:50, 2024-05-01 02:50, 2024-05-02 02:50

Warden events (212)

2024-04-30

ReconScanning (node.7d83c0): 16

2024-04-29

ReconScanning (node.7d83c0): 41

2024-04-28

ReconScanning (node.7d83c0): 41

2024-04-27

ReconScanning (node.7d83c0): 33

2024-04-26

ReconScanning (node.7d83c0): 36

2024-04-25

ReconScanning (node.7d83c0): 14

ReconScanning (node.8cbf96): 1

2024-04-24

ReconScanning (node.7d83c0): 6

2024-04-23

ReconScanning (node.7d83c0): 6

2024-04-22

ReconScanning (node.7d83c0): 10

2024-04-21

ReconScanning (node.7d83c0): 7

2024-04-20

ReconScanning (node.7d83c0): 1

Origin AS

AS53667 - PONYNET

BGP Prefix

107.189.28.0/23

geo

Luxembourg, Luxembourg

🕑 Europe/Luxembourg

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

107.189.0.0 - 107.189.31.255

last_activity

2024-04-30 07:48:45

last_warden_event

2024-04-30 07:48:45

rep

0.17834697905040922

reserved_range

0

Shodan's InternetDB

Open ports: 21, 22, 80, 110, 143, 443, 995

Tags: self-signed, starttls

CPEs: cpe:/a:f5:nginx:1.24.0, cpe:/o:linux:linux_kernel, cpe:/o:debian:debian_linux, cpe:/a:openbsd:openssh:9.2p1

ts_added

2024-04-20 22:30:05.669000

ts_last_update

2024-05-06 22:30:11.063000

Warden event timeline

DShield event timeline

Presence on blacklists