IP address

Search at other sites:
.082216.225.152.76
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
CI Army
216.225.152.76 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-07-03 02:50:00.795000
Was present on blacklist at: 2026-07-03 02:50
AbuseIPDB
216.225.152.76 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-07-03 04:00:00.644000
Was present on blacklist at: 2026-07-03 04:00

Threat categories

TLRoleCategoryDetails
75 src scan port: many
38 src —
Warden events (119)
2026-07-03
ReconScanning (node.ce2b59): 43
ReconScanning (node.9c1411): 52
2026-07-02
ReconScanning (node.ce2b59): 12
ReconScanning (node.9c1411): 12
DShield reports (IP summary, reports)
2026-07-02
Number of reports: 376
Distinct targets: 112
2026-07-03
Number of reports: 1686
Distinct targets: 425
Origin AS
AS36352 - AS-COLOCROSSING
BGP Prefix
216.225.152.0/24
geo
United States
🕑 America/Chicago
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
216.225.144.0 - 216.225.159.255
last_activity
2026-07-03 14:21:52
last_warden_event
2026-07-03 14:21:52
rep
0.08204891718059504
reserved_range
0
Shodan's InternetDB
Open ports: 80, 443, 3306, 4949, 8443, 9000, 9015, 9070
Tags: database, eol-product
CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:oracle:mysql:9.5.0, cpe:/a:apache:http_server:2.4.58
ts_added
2026-07-02 20:41:25.096000
ts_last_update
2026-07-09 20:41:30.964000

Warden event timeline

DShield event timeline

Presence on blacklists