IP address


.087161.97.141.121vmi485784.contaboserver.net
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
CI Army
161.97.141.121 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-06-18 02:50:00.898000
Was present on blacklist at: 2025-06-11 02:50, 2025-06-12 02:50, 2025-06-13 02:50, 2025-06-14 02:50, 2025-06-15 02:50, 2025-06-16 02:50, 2025-06-17 02:50, 2025-06-18 02:50
AbuseIPDB
161.97.141.121 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-06-14 04:00:00.607000
Was present on blacklist at: 2025-06-12 04:00, 2025-06-14 04:00
Turris greylist
161.97.141.121 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-06-15 21:15:00.182000
Was present on blacklist at: 2025-06-14 21:15, 2025-06-15 21:15
Warden events (106)
2025-06-13
ReconScanning (node.368407): 2
2025-06-12
ReconScanning (node.368407): 103
2025-06-11
ReconScanning (node.368407): 1
DShield reports (IP summary, reports)
2025-06-10
Number of reports: 74
Distinct targets: 35
2025-06-11
Number of reports: 55
Distinct targets: 30
2025-06-12
Number of reports: 529
Distinct targets: 248
2025-06-13
Number of reports: 36
Distinct targets: 25
Origin AS
AS51167 - CONTABO
BGP Prefix
161.97.128.0/19
geo
Germany, Düsseldorf
🕑 Europe/Berlin
hostname
vmi485784.contaboserver.net
Address block ('inetnum' or 'NetRange' in whois database)
161.97.128.0 - 161.97.159.255
last_activity
2025-06-13 21:26:39
last_warden_event
2025-06-13 21:26:39
rep
0.0869047619047619
reserved_range
0
Shodan's InternetDB
Open ports: 443, 2181, 3306, 5432, 7474, 8083, 9000, 9001, 9021, 9091, 9092, 10000, 27017
Tags: self-signed, database
CPEs: cpe:/a:postgresql:postgresql:15, cpe:/a:minio:minio, cpe:/a:webmin:webmin, cpe:/a:cloudflare:cloudflare, cpe:/a:mariadb:mariadb, cpe:/a:openssl:openssl:3.0.13, cpe:/a:f5:nginx:1.27.5, cpe:/a:getbootstrap:bootstrap:eb7adb7, cpe:/a:mongodb:mongodb:8.0.6, cpe:/a:d3.js_project:d3.js
ts_added
2025-06-11 02:57:35.037000
ts_last_update
2025-06-18 02:57:59.123000

Warden event timeline

DShield event timeline

Presence on blacklists