IP address

Passive DNS

Tags: Scanner

IP blacklists

CI Army

144.91.73.132 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-04-25 02:50:01.032000
Was present on blacklist at: 2024-03-31 02:50, 2024-04-01 02:50, 2024-04-02 02:50, 2024-04-03 02:50, 2024-04-04 02:50, 2024-04-05 02:50, 2024-04-06 02:50, 2024-04-07 02:50, 2024-04-08 02:50, 2024-04-09 02:50, 2024-04-10 02:50, 2024-04-11 02:50, 2024-04-12 02:50, 2024-04-13 02:50, 2024-04-14 02:50, 2024-04-15 02:50, 2024-04-17 02:50, 2024-04-18 02:50, 2024-04-19 02:50, 2024-04-23 02:50, 2024-04-24 02:50, 2024-04-25 02:50

Mirai tracker

144.91.73.132 is listed on the Mirai tracker blacklist.

Description: IPs scanning the internet in a specific way known to be used by Mirai malware and its variants.
Type of feed: primary (feed detail page)

Last checked at: 2024-04-12 23:40:01.159000
Was present on blacklist at: 2024-03-31 23:40, 2024-04-01 23:40, 2024-04-02 23:40, 2024-04-06 23:40, 2024-04-07 23:40, 2024-04-08 23:40, 2024-04-09 23:40, 2024-04-10 23:40, 2024-04-11 23:40, 2024-04-12 23:40

AbuseIPDB

144.91.73.132 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>IPs performing malicious activity(DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-05-02 04:00:00.478000
Was present on blacklist at: 2024-04-01 04:00, 2024-04-02 04:00, 2024-04-03 04:00, 2024-04-07 04:00, 2024-04-17 04:00, 2024-04-24 04:00, 2024-05-02 04:00

Spamhaus XBL CBL

144.91.73.132 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-04-27 14:04:50.335000
Was present on blacklist at: 2024-04-06 14:04, 2024-04-13 14:04, 2024-04-20 14:04, 2024-04-27 14:04

Warden events (493)

2024-05-02: ReconScanning (node.7d83c0): 5
2024-04-23: ReconScanning (node.7d83c0): 65
2024-04-22: ReconScanning (node.7d83c0): 50
2024-04-18: ReconScanning (node.7d83c0): 35
2024-04-17: ReconScanning (node.7d83c0): 47
2024-04-16: ReconScanning (node.7d83c0): 44
2024-04-10: ReconScanning (node.7d83c0): 12
2024-04-09: ReconScanning (node.7d83c0): 8
2024-04-07: ReconScanning (node.7d83c0): 16
2024-04-06: ReconScanning (node.7d83c0): 13
2024-04-03: ReconScanning (node.7d83c0): 16
2024-04-01: ReconScanning (node.7d83c0): 47
2024-03-31: ReconScanning (node.7d83c0): 96
2024-03-30: ReconScanning (node.7d83c0): 39

DShield reports (IP summary, reports)

2024-03-30: Number of reports: 196; Distinct targets: 80
2024-03-31: Number of reports: 859; Distinct targets: 240
2024-04-01: Number of reports: 733; Distinct targets: 154
2024-04-03: Number of reports: 102; Distinct targets: 35
2024-04-06: Number of reports: 53; Distinct targets: 17
2024-04-07: Number of reports: 63; Distinct targets: 20
2024-04-09: Number of reports: 72; Distinct targets: 18
2024-04-10: Number of reports: 120; Distinct targets: 23
2024-04-16: Number of reports: 174; Distinct targets: 59
2024-04-17: Number of reports: 547; Distinct targets: 122
2024-04-18: Number of reports: 398; Distinct targets: 117
2024-04-22: Number of reports: 84; Distinct targets: 25
2024-04-23: Number of reports: 73; Distinct targets: 20

Origin AS: AS51167 - CONTABO
BGP Prefix: 144.91.72.0/23
geo: Germany, Nuremberg; 🕑 Europe/Berlin
hostname: vs1.mygsi.eu
Address block ('inetnum' or 'NetRange' in whois database): 144.91.64.0 - 144.91.127.255
last_activity: 2024-05-02 06:55:30
last_warden_event: 2024-05-02 06:55:30
rep: 0.10744047619047618
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 80, 443, 1883; Tags: eol-product; CPEs: cpe:/o:linux:linux_kernel, cpe:/o:canonical:ubuntu_linux, cpe:/a:f5:nginx:1.14.0, cpe:/a:openbsd:openssh
ts_added: 2024-03-30 14:04:43.349000
ts_last_update: 2024-05-02 14:04:50.302000

Warden event timeline

DShield event timeline

Presence on blacklists