IP address


.050143.198.42.144
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
CI Army
143.198.42.144 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-04-27 02:50:01.035000
Was present on blacklist at: 2024-04-20 02:50, 2024-04-21 02:50, 2024-04-22 02:50, 2024-04-23 02:50, 2024-04-24 02:50, 2024-04-25 02:50, 2024-04-26 02:50, 2024-04-27 02:50
Warden events (124)
2024-04-21
ReconScanning (node.7d83c0): 4
ReconScanning (node.bd32ad): 6
ReconScanning (node.8cbf96): 6
2024-04-20
ReconScanning (node.7d83c0): 23
ReconScanning (node.bd32ad): 36
ReconScanning (node.8cbf96): 9
2024-04-19
ReconScanning (node.7d83c0): 18
ReconScanning (node.bd32ad): 20
ReconScanning (node.8cbf96): 2
DShield reports (IP summary, reports)
2024-04-19
Number of reports: 50
Distinct targets: 38
2024-04-21
Number of reports: 14
Distinct targets: 11
Origin AS
AS14061 - DIGITALOCEAN-ASN
BGP Prefix
143.198.32.0/20
geo
Canada, Toronto
🕑 America/Toronto
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
143.198.0.0 - 143.198.255.255
last_activity
2024-04-21 02:46:48
last_warden_event
2024-04-21 02:46:48
rep
0.04999961853027344
reserved_range
0
Shodan's InternetDB
Open ports: 80, 88, 104, 111, 135, 427, 1024, 1311, 1433, 1515, 1521, 1723, 1800, 1801, 1925, 1935, 2000, 2404, 3128, 3389, 3541, 4000, 4040, 4242, 5000, 5005, 5009, 5201, 5222, 5435, 5800, 5801, 5900, 6000, 6001, 7415, 8000, 8010, 8080, 8112, 8123, 8200, 8334, 8800, 9000, 9009, 9100, 9418, 9527, 9530, 9600, 9633, 9800
Tags: cloud
CPEs:
ts_added
2024-04-19 14:00:37.287000
ts_last_update
2024-05-02 14:00:49.711000

Warden event timeline

DShield event timeline

Presence on blacklists