IP address

Passive DNS

Tags: Scanner

IP blacklists

CI Army

52.172.156.17 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-11-06 03:50:01.112000
Was present on blacklist at: 2024-08-20 02:50, 2024-08-21 02:50, 2024-08-23 02:50, 2024-08-24 02:50, 2024-08-25 02:50, 2024-08-27 02:50, 2024-08-28 02:50, 2024-08-30 02:50, 2024-09-01 02:50, 2024-09-03 02:50, 2024-09-04 02:50, 2024-09-05 02:50, 2024-09-06 02:50, 2024-09-07 02:50, 2024-09-08 02:50, 2024-09-09 02:50, 2024-09-10 02:50, 2024-09-11 02:50, 2024-09-13 02:50, 2024-09-14 02:50, 2024-09-15 02:50, 2024-09-16 02:50, 2024-09-19 02:50, 2024-09-20 02:50, 2024-09-21 02:50, 2024-09-23 02:50, 2024-09-28 02:50, 2024-09-29 02:50, 2024-09-30 02:50, 2024-10-01 02:50, 2024-10-02 02:50, 2024-10-03 02:50, 2024-10-04 02:50, 2024-10-07 02:50, 2024-10-10 02:50, 2024-10-11 02:50, 2024-10-12 02:50, 2024-10-13 02:50, 2024-10-14 02:50, 2024-10-15 02:50, 2024-10-16 02:50, 2024-10-18 02:50, 2024-10-19 02:50, 2024-10-21 02:50, 2024-10-24 02:50, 2024-10-25 02:50, 2024-10-26 02:50, 2024-10-27 03:50, 2024-10-29 03:50, 2024-10-30 03:50, 2024-10-31 03:50, 2024-11-01 03:50, 2024-11-02 03:50, 2024-11-03 03:50, 2024-11-04 03:50, 2024-11-05 03:50, 2024-11-06 03:50

UCEPROTECT L1

52.172.156.17 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-10-12 07:45:00.830000
Was present on blacklist at: 2024-08-21 15:45, 2024-08-27 07:45, 2024-08-30 15:45, 2024-09-16 23:45, 2024-09-23 23:45, 2024-09-25 07:45, 2024-10-08 07:45, 2024-10-10 07:45, 2024-10-12 07:45

AbuseIPDB

52.172.156.17 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-11-05 05:00:00.491000
Was present on blacklist at: 2024-10-19 04:00, 2024-10-28 05:00, 2024-10-29 05:00, 2024-11-05 05:00

Warden events (459)

2024-11-06: ReconScanning (node.ce2b59): 8
2024-11-05: ReconScanning (node.ce2b59): 32
2024-11-04: ReconScanning (node.ce2b59): 27
2024-11-03: ReconScanning (node.ce2b59): 19
2024-11-02: ReconScanning (node.ce2b59): 19
2024-11-01: ReconScanning (node.ce2b59): 19
2024-10-31: ReconScanning (node.ce2b59): 19
2024-10-30: ReconScanning (node.ce2b59): 20
2024-10-29: ReconScanning (node.ce2b59): 20
2024-10-28: ReconScanning (node.ce2b59): 18
2024-10-27: ReconScanning (node.ce2b59): 19
2024-10-26: ReconScanning (node.ce2b59): 8
2024-09-16: ReconScanning (node.ce2b59): 18
2024-09-15: ReconScanning (node.ce2b59): 15
2024-09-14: ReconScanning (node.ce2b59): 9
2024-09-13: ReconScanning (node.ce2b59): 7
2024-09-12: ReconScanning (node.ce2b59): 10
2024-09-11: ReconScanning (node.ce2b59): 14
2024-09-10: ReconScanning (node.ce2b59): 12
2024-09-09: ReconScanning (node.ce2b59): 10
2024-09-08: ReconScanning (node.ce2b59): 9
2024-09-07: ReconScanning (node.ce2b59): 7
2024-09-06: ReconScanning (node.ce2b59): 14
2024-09-05: ReconScanning (node.ce2b59): 9
2024-09-04: ReconScanning (node.ce2b59): 7
2024-09-03: ReconScanning (node.ce2b59): 12
2024-09-02: ReconScanning (node.ce2b59): 4
2024-09-01: ReconScanning (node.ce2b59): 6
2024-08-31: ReconScanning (node.ce2b59): 12
2024-08-30: ReconScanning (node.ce2b59): 5
2024-08-29: ReconScanning (node.ce2b59): 13
2024-08-28: ReconScanning (node.ce2b59): 15
2024-08-27: ReconScanning (node.ce2b59): 13
2024-08-25: ReconScanning (node.ce2b59): 2
2024-08-23: ReconScanning (node.ce2b59): 3
2024-08-22: ReconScanning (node.ce2b59): 1
2024-08-20: ReconScanning (node.ce2b59): 1
2024-08-19: ReconScanning (node.ce2b59): 3

DShield reports (IP summary, reports)

2024-08-22: Number of reports: 16; Distinct targets: 3
2024-08-25: Number of reports: 11; Distinct targets: 8
2024-08-27: Number of reports: 16; Distinct targets: 7
2024-08-28: Number of reports: 10; Distinct targets: 7
2024-08-30: Number of reports: 20; Distinct targets: 18
2024-09-04: Number of reports: 13; Distinct targets: 3
2024-09-11: Number of reports: 10; Distinct targets: 7
2024-09-17: Number of reports: 10; Distinct targets: 9
2024-09-18: Number of reports: 13; Distinct targets: 8
2024-09-21: Number of reports: 10; Distinct targets: 7
2024-09-23: Number of reports: 16; Distinct targets: 12
2024-09-24: Number of reports: 24; Distinct targets: 9
2024-10-03: Number of reports: 10; Distinct targets: 8
2024-10-08: Number of reports: 10; Distinct targets: 9
2024-10-09: Number of reports: 10; Distinct targets: 8
2024-10-10: Number of reports: 11; Distinct targets: 8
2024-10-11: Number of reports: 11; Distinct targets: 7
2024-10-14: Number of reports: 13; Distinct targets: 9
2024-10-26: Number of reports: 10; Distinct targets: 7
2024-10-30: Number of reports: 15; Distinct targets: 9
2024-10-31: Number of reports: 10; Distinct targets: 6
2024-11-05: Number of reports: 39; Distinct targets: 24

Origin AS: AS8075 - MICROSOFT-CORP-MSN-AS-BLOCK
BGP Prefix: 52.160.0.0/11
fmp: {'general': 0.7020226120948792}
geo: India, Pune; 🕑 Asia/Kolkata
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 52.160.0.0 - 52.191.255.255
last_activity: 2024-11-06 05:12:42
last_warden_event: 2024-11-06 05:12:42
rep: 0.028515625
reserved_range: 0
Shodan's InternetDB: Open ports: 1433; Tags: database, cloud; CPEs: cpe:/a:microsoft:sql_server:13.0.4604.0
ts_added: 2022-08-15 16:18:42.718000
ts_last_update: 2024-11-17 16:18:50.666000

Warden event timeline

DShield event timeline

Presence on blacklists