IP address

Search at other sites:

.171172.104.128.19scanner168.elsa.ccn-cert.net

Shodan(more info)

Passive DNS

IP blacklists

Spamhaus XBL CBL

172.104.128.19 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-04-27 01:24:50.220000
Was present on blacklist at: 2024-04-20 01:24, 2024-04-27 01:24

Warden events (741)

2024-04-30

ReconScanning (node.1e6360): 119

2024-04-29

ReconScanning (node.1e6360): 127

2024-04-28

ReconScanning (node.1e6360): 95

2024-04-22

ReconScanning (node.1e6360): 124

2024-04-21

ReconScanning (node.1e6360): 141

2024-04-20

ReconScanning (node.1e6360): 135

Origin AS

AS63949 - LINODE-AP

BGP Prefix

172.104.128.0/19

geo

Germany, Frankfurt am Main

🕑 Europe/Berlin

hostname

scanner168.elsa.ccn-cert.net

Address block ('inetnum' or 'NetRange' in whois database)

172.104.0.0 - 172.105.255.255

last_activity

2024-04-30 19:52:26

last_warden_event

2024-04-30 19:52:26

rep

0.17142857142857143

reserved_range

0

Shodan's InternetDB

Open ports: 22

Tags: cloud

CPEs: cpe:/a:openbsd:openssh

ts_added

2024-04-20 01:24:42.694000

ts_last_update

2024-05-03 01:24:50.369000

Warden event timeline

DShield event timeline

Presence on blacklists