IP address

Search at other sites:

--172.104.208.120172-104-208-120.ip.linodeusercontent.com

Shodan(more info)

Passive DNS

IP blacklists

Spamhaus SBL CSS

172.104.208.120 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-04-29 05:05:07.982000
Was present on blacklist at: 2024-04-08 05:03, 2024-04-22 05:04

DataPlane SMTP greeting

172.104.208.120 is listed on the DataPlane SMTP greeting blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs that are<br>identified as SMTP clients issuing unsolicited HELO or EHLO commands.
Type of feed: primary (feed detail page)

Last checked at: 2024-04-29 02:10:01.590000
Was present on blacklist at: 2024-04-08 18:10, 2024-04-09 02:10, 2024-04-09 06:10, 2024-04-09 14:10, 2024-04-09 18:10, 2024-04-10 02:10, 2024-04-10 06:10, 2024-04-10 14:10, 2024-04-10 18:10, 2024-04-11 02:10, 2024-04-11 06:10, 2024-04-11 14:10, 2024-04-11 18:10, 2024-04-12 02:10, 2024-04-12 06:10, 2024-04-12 14:10, 2024-04-12 18:10, 2024-04-13 02:10, 2024-04-13 06:10, 2024-04-13 14:10, 2024-04-13 18:10, 2024-04-14 02:10, 2024-04-14 06:10, 2024-04-14 14:10, 2024-04-14 18:10, 2024-04-15 02:10, 2024-04-15 06:10, 2024-04-15 14:10, 2024-04-15 18:10, 2024-04-16 02:10, 2024-04-16 06:10, 2024-04-16 14:10, 2024-04-16 18:10, 2024-04-17 02:10, 2024-04-17 06:10, 2024-04-17 14:10, 2024-04-17 18:10, 2024-04-18 02:10, 2024-04-18 06:10, 2024-04-22 06:10, 2024-04-22 14:10, 2024-04-22 18:10, 2024-04-23 02:10, 2024-04-23 06:10, 2024-04-23 14:10, 2024-04-23 18:10, 2024-04-24 18:10, 2024-04-25 02:10, 2024-04-25 06:10, 2024-04-25 14:10, 2024-04-25 18:10, 2024-04-26 02:10, 2024-04-26 06:10, 2024-04-26 14:10, 2024-04-26 18:10, 2024-04-27 02:10, 2024-04-27 06:10, 2024-04-27 14:10, 2024-04-27 18:10, 2024-04-28 02:10, 2024-04-28 06:10, 2024-04-28 14:10, 2024-04-28 18:10, 2024-04-29 02:10

DShield reports (IP summary, reports)

2024-04-07

Number of reports: 32

Distinct targets: 31

2024-04-08

Number of reports: 33

Distinct targets: 17

2024-04-09

Number of reports: 67

Distinct targets: 18

2024-04-10

Number of reports: 36

Distinct targets: 20

2024-04-11

Number of reports: 31

Distinct targets: 17

2024-04-22

Number of reports: 30

Distinct targets: 16

Origin AS

AS63949 - LINODE-AP

BGP Prefix

172.104.208.0/20

geo

United States, Cedar Knolls

🕑 America/New_York

hostname

172-104-208-120.ip.linodeusercontent.com

hostname_class

['ip_in_hostname']

Address block ('inetnum' or 'NetRange' in whois database)

172.104.0.0 - 172.105.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 11, 13, 15, 17, 19, 21, 22, 25, 26, 37, 43, 49, 70, 79, 80, 84, 88, 99, 102, 104, 110, 111, 113, 122, 135, 143, 175, 179, 221, 389, 427, 444, 465, 502, 503, 515, 554, 555, 587, 636, 666, 771, 772, 789, 830, 873, 888, 902, 992, 993, 994, 1024, 1025, 1200, 1366, 1471, 1515, 1588, 1604, 1800, 1883, 1911, 1935, 1962, 2000, 2002, 2008, 2067, 2081, 2082, 2086, 2087, 2181, 2221, 2222, 2323, 2345, 2352, 2404, 2480, 2557, 2560, 2570, 2602, 2761, 2762, 3001, 3050, 3071, 3073, 3096, 3103, 3121, 3128, 3211, 3260, 3268, 3299, 3301, 3306, 3310, 3333, 3389, 3443, 3460, 3549, 3551, 3557, 3566, 3922, 4000, 4040, 4063, 4064, 4157, 4200, 4242, 4282, 4369, 4500, 4524, 4664, 4700, 4840, 4899, 4911, 4949, 5000, 5005, 5007, 5010, 5172, 5201, 5222, 5280, 5357, 5432, 5435, 5542, 5555, 5599, 5600, 5601, 5672, 5800, 5801, 5858, 5900, 5901, 5909, 5938, 5984, 5985, 6000, 6002, 6008, 6080, 6161, 6264, 6379, 6561, 6605, 6666, 6668, 6697, 7010, 7022, 7171, 7218, 7415, 7433, 7474, 7547, 7634, 7657, 7779, 7989, 8002, 8005, 8007, 8008, 8009, 8016, 8018, 8040, 8043, 8046, 8054, 8057, 8060, 8066, 8084, 8086, 8090, 8094, 8099, 8102, 8112, 8123, 8126, 8200, 8282, 8333, 8334, 8443, 8545, 8554, 8602, 8649, 8688, 8700, 8728, 8784, 8802, 8804, 8805, 8831, 8833, 8838, 8848, 8850, 8854, 8861, 8862, 8864, 8865, 8868, 8871, 8872, 8899, 8991, 8999, 9000, 9008, 9009, 9021, 9028, 9030, 9035, 9042, 9045, 9070, 9080, 9090, 9099, 9100, 9151, 9160, 9191, 9200, 9212, 9219, 9295, 9303, 9306, 9418, 9530, 9595, 9633, 9761, 9765, 9800, 9869, 9876, 9998, 9999, 10001, 10134, 10554, 10909, 10911, 11000, 11112, 11210, 11211, 11371, 11434, 12345, 13579, 14147, 14265, 14344, 16030, 16992, 17000, 18081, 18245, 19000, 20000, 20256, 20547, 23424, 25001, 25105, 25565, 27015, 28017, 30003, 32400, 32764, 33060, 35000, 37215, 37777, 41800, 44818, 47463, 49153, 50000, 50050, 50070, 51106, 51235, 52869, 55000, 55442, 56981, 59417, 60010, 60030, 60129, 61616

Tags: cloud, honeypot

CPEs: cpe:/a:lighttpd:lighttpd:1.4.22, cpe:/a:openssl:openssl:3.0.2, cpe:/a:prototypejs:prototype, cpe:/a:jquery:jquery:1.5.1, cpe:/a:jquery:jquery, cpe:/a:getbootstrap:bootstrap, cpe:/a:openbsd:openssh, cpe:/a:jquery:jquery:1.7.2

ts_added

2024-04-08 05:03:33.265000

ts_last_update

2024-05-04 05:04:39.713000

Warden event timeline

DShield event timeline

Presence on blacklists