IP address

Passive DNS

Tags: Scanner

IP blacklists

Turris greylist

31.220.1.144 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC, which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-09-28 21:15:00.228000
Was present on blacklist at: 2024-09-14 21:15, 2024-09-15 21:15, 2024-09-16 21:15, 2024-09-20 21:15, 2024-09-21 21:15, 2024-09-23 21:15, 2024-09-27 21:15, 2024-09-28 21:15

AbuseIPDB

31.220.1.144 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc. Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-09-30 04:00:00.830000
Was present on blacklist at: 2024-09-15 04:00, 2024-09-16 04:00, 2024-09-17 04:00, 2024-09-18 04:00, 2024-09-20 04:00, 2024-09-21 04:00, 2024-09-22 04:00, 2024-09-23 04:00, 2024-09-24 04:00, 2024-09-25 04:00, 2024-09-26 04:00, 2024-09-28 04:00, 2024-09-29 04:00, 2024-09-30 04:00

blocklist.de Apache

31.220.1.144 is listed on the blocklist.de Apache blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing attacks on the service Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)

Last checked at: 2024-09-18 10:05:00.552000
Was present on blacklist at: 2024-09-15 22:05, 2024-09-16 04:05, 2024-09-16 10:05, 2024-09-16 16:05, 2024-09-16 22:05, 2024-09-17 04:05, 2024-09-17 10:05, 2024-09-17 16:05, 2024-09-17 22:05, 2024-09-18 04:05, 2024-09-18 10:05

CI Army

31.220.1.144 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence database that provides scores for IPs. Source of unspecified malicious attacks most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-09-30 02:50:00.932000
Was present on blacklist at: 2024-09-16 02:50, 2024-09-17 02:50, 2024-09-18 02:50, 2024-09-19 02:50, 2024-09-20 02:50, 2024-09-21 02:50, 2024-09-22 02:50, 2024-09-23 02:50, 2024-09-24 02:50, 2024-09-25 02:50, 2024-09-26 02:50, 2024-09-27 02:50, 2024-09-28 02:50, 2024-09-29 02:50, 2024-09-30 02:50

Warden events (1747)

2024-09-29: ReconScanning (node.368407): 12; ReconScanning (node.4dc198): 12
2024-09-28: ReconScanning (node.368407): 36; ReconScanning (node.4dc198): 36
2024-09-27: AnomalyTraffic (node.ffe95c): 6; ReconScanning (node.4dc198): 24; ReconScanning (node.368407): 24
2024-09-26: AnomalyTraffic (node.ffe95c): 4; ReconScanning (node.368407): 24; ReconScanning (node.4dc198): 24
2024-09-25: AnomalyTraffic (node.ffe95c): 7; ReconScanning (node.4dc198): 36; ReconScanning (node.368407): 39
2024-09-24: ReconScanning (node.4dc198): 12; ReconScanning (node.368407): 12; AnomalyTraffic (node.ffe95c): 3
2024-09-23: ReconScanning (node.368407): 12; ReconScanning (node.4dc198): 12
2024-09-22: ReconScanning (node.4dc198): 82; ReconScanning (node.368407): 82
2024-09-21: ReconScanning (node.368407): 24; ReconScanning (node.4dc198): 24
2024-09-20: ReconScanning (node.4dc198): 85; ReconScanning (node.368407): 85; AnomalyTraffic (node.ffe95c): 2
2024-09-19: ReconScanning (node.4dc198): 161; ReconScanning (node.368407): 161; AnomalyTraffic (node.ffe95c): 13
2024-09-18: AnomalyTraffic (node.ffe95c): 3
2024-09-17: ReconScanning (node.368407): 12; ReconScanning (node.4dc198): 12
2024-09-15: ReconScanning (node.4dc198): 116; ReconScanning (node.368407): 118; AnomalyTraffic (node.ffe95c): 2
2024-09-14: AnomalyTraffic (node.ffe95c): 41; ReconScanning (node.368407): 191; ReconScanning (node.4dc198): 189; ReconScanning (node.ce2b59): 4
2024-09-13: AnomalyTraffic (node.ffe95c): 1; ReconScanning (node.ce2b59): 2; ReconScanning (node.368407): 1; ReconScanning (node.4dc198): 1

DShield reports (IP summary, reports)

2024-09-13: Number of reports: 76; Distinct targets: 29
2024-09-14: Number of reports: 12677; Distinct targets: 520
2024-09-15: Number of reports: 9075; Distinct targets: 777
2024-09-16: Number of reports: 476; Distinct targets: 304
2024-09-17: Number of reports: 1435; Distinct targets: 624
2024-09-18: Number of reports: 946; Distinct targets: 325
2024-09-19: Number of reports: 10455; Distinct targets: 1043
2024-09-20: Number of reports: 6957; Distinct targets: 696
2024-09-21: Number of reports: 1861; Distinct targets: 632
2024-09-22: Number of reports: 5429; Distinct targets: 1013
2024-09-23: Number of reports: 1753; Distinct targets: 649
2024-09-24: Number of reports: 1367; Distinct targets: 633
2024-09-25: Number of reports: 2904; Distinct targets: 818
2024-09-26: Number of reports: 1857; Distinct targets: 644
2024-09-27: Number of reports: 2086; Distinct targets: 869
2024-09-28: Number of reports: 2507; Distinct targets: 679
2024-09-29: Number of reports: 1459; Distinct targets: 631

OTX pulses

[602bc528f447d628d41494f2] 2021-02-16 13:14:16.945000 | Ka's Honeypot visitors

Author name:	Kapppppa
Pulse modified:	2024-09-30 07:59:01.133000
Indicator created:	2024-09-22 17:52:03
Indicator role:	bruteforce
Indicator title:	Telnet Login attempt
Indicator expiration:	2024-10-22 17:00:00

Origin AS: AS206264 - AMARUTU-TECHNOLOGY
BGP Prefix: 31.220.0.0/22
geo: Germany; 🕑 Europe/Berlin
hostname: biende.faithfulpoint.com
Address block ('inetnum' or 'NetRange' in whois database): 31.220.0.0 - 31.220.7.255
last_activity: 2024-09-30 08:04:36.183000
last_warden_event: 2024-09-29 15:04:19
rep: 0.7946428571428571
reserved_range: 0
ts_added: 2024-09-13 13:23:45.717000
ts_last_update: 2024-09-30 08:04:36.192000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses