IP address


.23845.144.212.172
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus SBL
45.144.212.172 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-04-03 14:12:22.529000
Was present on blacklist at: 2026-04-03 14:12
Spamhaus DROP
45.144.212.172 is listed on the Spamhaus DROP blacklist.

Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-04-03 14:12:22.529000
Was present on blacklist at: 2026-04-03 14:12
blocklist.de IMAP
45.144.212.172 is listed on the blocklist.de IMAP blacklist.

Description: Blocklist.de feed is a free and voluntary service<br>provided by a Fraud/Abuse-specialist. IPs performing attacks<br>on the Service imap, sasl, pop3.
Type of feed: primary (feed detail page)

Last checked at: 2026-04-05 10:05:00.233000
Was present on blacklist at: 2026-04-03 16:05, 2026-04-03 22:05, 2026-04-04 04:05, 2026-04-04 10:05, 2026-04-04 16:05, 2026-04-04 22:05, 2026-04-05 04:05, 2026-04-05 10:05
blocklist.de mail
45.144.212.172 is listed on the blocklist.de mail blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing Mail attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-04-05 10:05:00.425000
Was present on blacklist at: 2026-04-03 16:05, 2026-04-03 22:05, 2026-04-04 04:05, 2026-04-04 10:05, 2026-04-04 16:05, 2026-04-04 22:05, 2026-04-05 04:05, 2026-04-05 10:05

Threat categories

TLRoleCategoryDetails
50 src login protocol: smtp
port: 25
48 src

Warden events (917)
2026-04-06
IntrusionUserCompromise (node.cfb4f7): 440
2026-04-05
IntrusionUserCompromise (node.cfb4f7): 90
2026-04-04
IntrusionUserCompromise (node.cfb4f7): 231
2026-04-03
IntrusionUserCompromise (node.cfb4f7): 156
Origin AS
AS60721 - bursabil
AS214940 - KPRONET
BGP Prefix
45.144.212.0/24
geo
Ukraine
🕑 Europe/Kyiv
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
45.144.212.0 - 45.144.215.255
last_activity
2026-04-06 22:18:13
last_warden_event
2026-04-06 22:18:13
rep
0.23809523809523808
reserved_range
0
Shodan's InternetDB
Open ports: 3000, 5357, 5985
Tags:
CPEs:
ts_added
2026-04-03 14:12:22.491000
ts_last_update
2026-04-06 23:01:46.715000

Warden event timeline

DShield event timeline

Presence on blacklists