IP address

Search at other sites:

.092159.223.98.48

Shodan(more info)

Passive DNS

IP blacklists

CI Army

159.223.98.48 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-05-07 02:50:01.031000
Was present on blacklist at: 2024-05-05 02:50, 2024-05-06 02:50, 2024-05-07 02:50

Turris greylist

159.223.98.48 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-05-16 21:15:00.194000
Was present on blacklist at: 2024-05-16 21:15

Warden events (34)

2024-05-15

ReconScanning (node.bd32ad): 20

ReconScanning (node.7d83c0): 7

ReconScanning (node.293592): 7

DShield reports (IP summary, reports)

2024-05-04

Number of reports: 198

Distinct targets: 27

2024-05-15

Number of reports: 18

Distinct targets: 18

Origin AS

AS14061 - DIGITALOCEAN-ASN

BGP Prefix

159.223.96.0/20

geo

United States, North Bergen

🕑 America/New_York

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

159.223.0.0 - 159.223.255.255

last_activity

2024-05-15 21:32:46

last_warden_event

2024-05-15 21:32:46

rep

0.09166666666666666

reserved_range

0

Shodan's InternetDB

Open ports: 22, 80, 443, 3000

Tags: eol-product, cloud

CPEs: cpe:/o:linux:linux_kernel, cpe:/o:canonical:ubuntu_linux, cpe:/a:ruby-lang:ruby, cpe:/a:f5:nginx:1.18.0, cpe:/a:openbsd:openssh, cpe:/a:rubyonrails:rails

ts_added

2024-05-05 02:51:52.416000

ts_last_update

2024-05-18 02:52:18.695000

Warden event timeline

DShield event timeline

Presence on blacklists