IP address


.421172.237.167.164d9890c6e.scanners.onlyscans.net
Shodan(more info)
Passive DNS
Tags:
IP blacklists
CI Army
172.237.167.164 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-09-13 02:50:00.824000
Was present on blacklist at: 2026-09-11 02:50, 2026-09-12 02:50, 2026-09-13 02:50

Threat categories

TLRoleCategoryDetails
68 src scan port: 2404, 8001, 8084, 8085, 8899, 50050
25 src

Warden events (509)
2026-09-13
ReconScanning (node.368407): 38
ReconScanning (node.4dc198): 33
ReconScanning (node.ce2b59): 25
2026-09-12
ReconScanning (node.ce2b59): 29
ReconScanning (node.4dc198): 92
ReconScanning (node.368407): 69
2026-09-11
ReconScanning (node.368407): 70
ReconScanning (node.4dc198): 44
ReconScanning (node.ce2b59): 26
2026-09-10
ReconScanning (node.ce2b59): 17
ReconScanning (node.368407): 53
ReconScanning (node.4dc198): 13
DShield reports (IP summary, reports)
2026-09-10
Number of reports: 119
Distinct targets: 98
2026-09-11
Number of reports: 119
Distinct targets: 98
2026-09-12
Number of reports: 232
Distinct targets: 174
Origin AS
AS63949 - LINODE-AP
BGP Prefix
172.237.160.0/19
geo
United States, Ashburn
🕑 America/New_York
hostname
d9890c6e.scanners.onlyscans.net
Address block ('inetnum' or 'NetRange' in whois database)
172.224.0.0 - 172.239.255.255
last_activity
2026-09-13 23:23:38
last_warden_event
2026-09-13 23:23:38
rep
0.42090186529129536
reserved_range
0
ts_added
2026-09-10 19:08:23.926000
ts_last_update
2026-09-13 23:23:48.346000

Warden event timeline

DShield event timeline

Presence on blacklists