IP address

Shodan(more info)

Passive DNS

Tags: IP in hostname

IP blacklists: CI Army
109.236.94.37 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-10-25 02:50:00.933000
Was present on blacklist at: 2025-10-25 02:50
FireHOL anonymizers
109.236.94.37 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2025-10-26 00:05:09
Was present on blacklist at: 2025-10-25 00:05, 2025-10-26 00:05

Origin AS: AS49981 - WorldStream
BGP Prefix: 109.236.80.0/20
geo: Netherlands, Naaldwijk; 🕑 Europe/Amsterdam
hostname: 109-236-94-37.hosted-by-worldstream.net
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 109.236.80.0 - 109.236.95.255
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 80, 161, 4150, 11000, 11112, 11210, 11211, 11288, 11300, 11371, 11434, 11480, 11481, 11596, 11601, 11602, 11688, 11701, 12000, 12001, 12056, 12082, 12088, 12106, 12107, 12109, 12119, 12123, 12125, 12128, 12130, 12136, 12141, 12142, 12146, 12148, 12154, 12155, 12156, 12169, 12176, 12183, 12198, 12199, 12205, 12209, 12211, 12217, 12218, 12222, 12223, 12224, 12229, 12233, 12246, 12249, 12253, 12266, 12275, 12287, 12288, 12289, 12294, 12296, 12300, 12302, 12307, 12309, 12315, 12318, 12339, 12345, 12349, 12351, 12354, 12355, 12360, 12364, 12366, 12383, 12384, 12386, 12387, 12395, 12400, 12406, 12408, 12409, 12420, 12426, 12432, 12436, 12445, 12446, 12449, 12450, 12453, 12454, 12456, 12458, 12461, 12469, 12474, 12475, 12478, 12479, 12483, 12493, 12494, 12496, 12499, 12504, 12506, 12507, 12509, 12513, 12519, 12525, 12526, 12532, 12533, 12536, 12538, 12543, 12546, 12548, 12551, 12557, 12562, 12564, 12578, 12581, 12583, 12584, 12586, 12590, 13128, 13333, 13443, 13579, 14006, 14082, 14147, 14184, 14265, 14344, 14407, 14873, 14880, 14896, 14900, 14901, 14903, 15000, 15044, 15503, 15555, 16010, 16021, 16030, 16035, 16093, 16094; Tags: eol-product; CPEs: cpe:/a:f5:nginx:1.14.1, cpe:/a:openbsd:openssh:8.0
ts_added: 2025-10-25 02:52:35.289000
ts_last_update: 2025-10-26 02:52:42.709000

Warden event timeline

DShield event timeline

Presence on blacklists