IP address

Search at other sites:
.012144.91.80.104server.vicdun.com
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
CI Army
144.91.80.104 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-04-19 02:50:01.023000
Was present on blacklist at: 2024-03-30 03:50, 2024-03-31 02:50, 2024-04-01 02:50, 2024-04-02 02:50, 2024-04-03 02:50, 2024-04-04 02:50, 2024-04-05 02:50, 2024-04-06 02:50, 2024-04-07 02:50, 2024-04-08 02:50, 2024-04-09 02:50, 2024-04-10 02:50, 2024-04-11 02:50, 2024-04-12 02:50, 2024-04-13 02:50, 2024-04-14 02:50, 2024-04-15 02:50, 2024-04-16 02:50, 2024-04-18 02:50, 2024-04-19 02:50
Warden events (15)
2024-04-23
ReconScanning (node.8cbf96): 1
2024-04-22
ReconScanning (node.bd32ad): 1
2024-04-18
ReconScanning (node.8cbf96): 1
ReconScanning (node.bd32ad): 1
ReconScanning (node.32f23f): 1
2024-04-16
ReconScanning (node.8cbf96): 1
2024-04-15
ReconScanning (node.8cbf96): 2
2024-04-10
ReconScanning (node.8cbf96): 1
2024-04-07
ReconScanning (node.8cbf96): 1
2024-04-01
AnomalyTraffic (node.c35ced): 1
ReconScanning (node.7d83c0): 1
ReconScanning (node.bd32ad): 1
2024-03-31
AnomalyTraffic (node.c35ced): 1
ReconScanning (node.bd32ad): 1
DShield reports (IP summary, reports)
2024-04-15
Number of reports: 17
Distinct targets: 10
2024-04-16
Number of reports: 16
Distinct targets: 12
2024-04-18
Number of reports: 15
Distinct targets: 12
Origin AS
AS51167 - CONTABO
BGP Prefix
144.91.80.0/23
geo
Germany, Nuremberg
🕑 Europe/Berlin
hostname
server.vicdun.com
Address block ('inetnum' or 'NetRange' in whois database)
144.91.64.0 - 144.91.127.255
last_activity
2024-04-23 04:49:45
last_warden_event
2024-04-23 04:49:45
rep
0.011904761904761902
reserved_range
0
Shodan's InternetDB
Open ports: 22, 25, 80, 81, 443, 995, 2121, 3306, 5432, 8000, 8080, 9443
Tags: self-signed, starttls, database
CPEs: cpe:/a:php:php, cpe:/a:getbootstrap:bootstrap:3.3.7, cpe:/a:openbsd:openssh, cpe:/a:postfix:postfix, cpe:/a:adminer:adminer:4.8.1, cpe:/a:pureftpd:pure-ftpd, cpe:/a:angularjs:angular.js, cpe:/a:php:php:7.4.33
ts_added
2024-03-30 03:56:27.036000
ts_last_update
2024-05-04 03:56:30.368000

Warden event timeline

DShield event timeline

Presence on blacklists