IP address

Passive DNS

Tags: IP in hostname

IP blacklists

CI Army

74.207.235.55 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence database that provides scores for IPs. Source of unspecified malicious attacks most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-11-30 03:50:00.909000
Was present on blacklist at: 2024-11-10 03:50, 2024-11-11 03:50, 2024-11-12 03:50, 2024-11-15 03:50, 2024-11-16 03:50, 2024-11-17 03:50, 2024-11-18 03:50, 2024-11-19 03:50, 2024-11-20 03:50, 2024-11-21 03:50, 2024-11-22 03:50, 2024-11-23 03:50, 2024-11-25 03:50, 2024-11-26 03:50, 2024-11-27 03:50, 2024-11-28 03:50, 2024-11-29 03:50, 2024-11-30 03:50

DataPlane VNC RFB

74.207.235.55 is listed on the DataPlane VNC RFB blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds, and measurement resource for operators, by operators. IPs initiating an unsolicited VNC remote frame buffer (RFB) session to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-23 23:10:01.694000
Was present on blacklist at: 2024-11-09 23:10, 2024-11-10 03:10, 2024-11-10 11:10, 2024-11-10 23:10, 2024-11-11 11:10, 2024-11-11 15:10, 2024-11-11 23:10, 2024-11-12 11:10, 2024-11-12 15:10, 2024-11-12 19:10, 2024-11-12 23:10, 2024-11-13 03:10, 2024-11-13 07:10, 2024-11-13 11:10, 2024-11-13 19:10, 2024-11-13 23:10, 2024-11-14 03:10, 2024-11-14 11:10, 2024-11-14 19:10, 2024-11-15 11:10, 2024-11-15 23:10, 2024-11-16 11:10, 2024-11-16 15:10, 2024-11-18 11:10, 2024-11-18 23:10, 2024-11-19 03:10, 2024-11-19 07:10, 2024-11-19 11:10, 2024-11-19 19:10, 2024-11-19 23:10, 2024-11-20 07:10, 2024-11-20 11:10, 2024-11-20 15:10, 2024-11-20 19:10, 2024-11-20 23:10, 2024-11-21 03:10, 2024-11-21 07:10, 2024-11-21 23:10, 2024-11-22 07:10, 2024-11-22 15:10, 2024-11-22 19:10, 2024-11-23 15:10, 2024-11-23 23:10

Turris greylist

74.207.235.55 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC, which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-20 22:15:00.210000
Was present on blacklist at: 2024-11-18 22:15, 2024-11-20 22:15

AbuseIPDB

74.207.235.55 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc. Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-11-25 05:00:00.371000
Was present on blacklist at: 2024-11-24 05:00, 2024-11-25 05:00

Spamhaus XBL CBL

74.207.235.55 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-02-06 21:23:30.159000
Was present on blacklist at: 2024-11-21 21:23

Warden events (213)

2024-11-27: ReconScanning (node.ce2b59): 8
2024-11-26: ReconScanning (node.ce2b59): 17
2024-11-25: ReconScanning (node.ce2b59): 18
2024-11-24: ReconScanning (node.ce2b59): 30
2024-11-23: ReconScanning (node.ce2b59): 18
2024-11-22: ReconScanning (node.ce2b59): 9
2024-11-21: ReconScanning (node.ce2b59): 12
2024-11-20: ReconScanning (node.ce2b59): 25
2024-11-19: ReconScanning (node.ce2b59): 13; IntrusionUserCompromise (node.cfb4f7): 9
2024-11-18: ReconScanning (node.ce2b59): 4
2024-11-17: ReconScanning (node.ce2b59): 2
2024-11-16: ReconScanning (node.ce2b59): 5
2024-11-15: ReconScanning (node.ce2b59): 4
2024-11-14: ReconScanning (node.ce2b59): 5
2024-11-13: ReconScanning (node.ce2b59): 4
2024-11-11: ReconScanning (node.ce2b59): 19
2024-11-10: ReconScanning (node.ce2b59): 11

DShield reports (IP summary, reports)

2024-11-09: Number of reports: 29; Distinct targets: 23
2024-11-10: Number of reports: 17; Distinct targets: 13
2024-11-11: Number of reports: 18; Distinct targets: 14
2024-11-14: Number of reports: 12; Distinct targets: 9
2024-11-18: Number of reports: 41; Distinct targets: 3
2024-11-19: Number of reports: 27; Distinct targets: 10
2024-11-20: Number of reports: 31; Distinct targets: 21
2024-11-22: Number of reports: 15; Distinct targets: 13
2024-11-24: Number of reports: 45; Distinct targets: 35
2024-11-25: Number of reports: 35; Distinct targets: 20
2024-11-26: Number of reports: 16; Distinct targets: 11
2024-11-27: Number of reports: 10; Distinct targets: 7

OTX pulses

[5a7e3e70c44e7b48947593a7] 2018-02-10 00:36:00.396000 | Webscanners 2018-02-09 thru current day

Author name:	david3
Pulse modified:	2024-11-27 11:55:14.437000
Indicator created:	2024-10-28 15:35:26
Indicator role:	scanning_host
Indicator title:	404 NOT FOUND
Indicator expiration:	2025-01-26 00:00:00

Origin AS: AS63949 - LINODE-AP
BGP Prefix: 74.207.224.0/20
geo: United States, Atlanta; 🕑 America/New_York
hostname: 74-207-235-55.ip.linodeusercontent.com
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 74.207.224.0 - 74.207.255.255
last_activity: 2024-11-27 21:02:54
last_warden_event: 2024-11-27 21:02:54
rep: 0.0
reserved_range: 0
Shodan's InternetDB: Open ports: 1234; Tags: cloud; CPEs: –
ts_added: 2024-09-19 21:23:23.114000
ts_last_update: 2025-02-07 21:23:30.246000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses