IP address

Search at other sites:
.000164.92.147.54
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
blocklist.de web-login
164.92.147.54 is listed on the blocklist.de web-login blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and<br>other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)

Last checked at: 2025-02-27 23:05:05.179000
Was present on blacklist at: 2025-02-26 05:05, 2025-02-26 11:05, 2025-02-26 17:05, 2025-02-26 23:05, 2025-02-27 05:05, 2025-02-27 11:05, 2025-02-27 17:05, 2025-02-27 23:05
blocklist.de Apache
164.92.147.54 is listed on the blocklist.de Apache blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the service<br>Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)

Last checked at: 2025-02-27 23:05:05.277000
Was present on blacklist at: 2025-02-26 05:05, 2025-02-26 11:05, 2025-02-26 17:05, 2025-02-26 23:05, 2025-02-27 05:05, 2025-02-27 11:05, 2025-02-27 17:05, 2025-02-27 23:05
Spamhaus XBL CBL
164.92.147.54 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-04-29 19:58:00.158000
Was present on blacklist at: 2025-03-04 19:58
Warden events (40)
2025-02-25
ReconScanning (node.4dc198): 20
ReconScanning (node.368407): 20
DShield reports (IP summary, reports)
2025-02-25
Number of reports: 116
Distinct targets: 37
OTX pulses
[5a7e3e70c44e7b48947593a7] 2018-02-10 00:36:00.396000 | Webscanners 2018-02-09 thru current day
Author name:david3
Pulse modified:2025-03-27 23:55:23.011000
Indicator created:2025-02-26 00:10:16
Indicator role:scanning_host
Indicator title:404 NOT FOUND
Indicator expiration:2025-05-27 00:00:00
Origin AS
AS14061 - DIGITALOCEAN-ASN
BGP Prefix
164.92.144.0/20
geo
Netherlands, Amsterdam
🕑 Europe/Amsterdam
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
164.92.128.0 - 164.92.255.255
last_activity
2025-03-28 00:02:02.328000
last_warden_event
2025-02-25 21:32:56
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 22, 23, 25, 26, 80, 88, 101, 102, 104, 106, 110, 111, 113, 119, 122, 135, 139, 211, 221, 222, 311, 427, 443, 502, 503, 513, 515, 541, 631, 636, 801, 806, 830, 902, 1023, 1024, 1027, 1081, 1119, 1200, 1224, 1234, 1311, 1337, 1400, 1414, 1433, 1443, 1515, 1521, 1604, 1605, 1700, 1723, 1741, 1800, 1801, 1833, 1911, 1925, 1926, 1935, 2000, 2002, 2003, 2008, 2016, 2020, 2100, 2101, 2121, 2122, 2133, 2134, 2200, 2201, 2209, 2220, 2222, 2223, 2224, 2233, 2320, 2323, 2332, 2404, 2506, 2525, 2602, 2628, 3001, 3002, 3005, 3018, 3021, 3102, 3105, 3108, 3109, 3111, 3115, 3120, 3121, 3122, 3125, 3128, 3133, 3134, 3136, 3221, 3301, 3310, 3333, 3342, 3401, 3402, 3403, 3405, 3406, 3500, 3540, 3541, 3542, 3841, 4000, 4001, 4022, 4023, 4040, 4100, 4117, 4242, 4321, 4400, 4430, 4433, 4434, 4505, 4506, 4523, 4528, 4700, 4734, 4808, 4840, 4911, 5000, 5001, 5005, 5006, 5007, 5009, 5010, 5025, 5105, 5122, 5201, 5209, 5222, 5228, 5230, 5235, 5241, 5321, 5431, 5432, 5435, 5440, 5601, 5605, 5607, 5608, 5613, 5701, 5800, 5801, 5900, 5901, 5904, 5906, 5909, 5918, 5919, 5938, 6000, 6001, 6002, 6003, 6007, 6021, 6022, 6036, 6400, 6405, 6433, 6503, 6511, 6602, 6605, 6622, 6633, 7001, 7010, 7018, 7218, 7325, 7415, 7434, 7441, 7510, 7634, 7700, 7801, 8000, 8001, 8002, 8003, 8004, 8005, 8007, 8008, 8009, 8010, 8013, 8014, 8026, 8028, 8029, 8031, 8032, 8036, 8080, 8101, 8102, 8108, 8112, 8113, 8118, 8121, 8123, 8126, 8132, 8136, 8139, 8140, 8142, 8200, 8237, 8317, 8322, 8333, 8334, 8401, 8402, 8410, 8413, 8424, 8429, 8434, 8504, 8513, 8528, 8536, 8600, 8621, 8623, 8708, 8731, 8800, 8801, 8802, 8815, 8816, 8821, 8822, 8827, 8828, 8834, 8838, 8908, 8935, 9000, 9002, 9003, 9004, 9007, 9008, 9009, 9010, 9012, 9020, 9022, 9024, 9027, 9029, 9034, 9037, 9039, 9040, 9042, 9100, 9104, 9111, 9117, 9121, 9122, 9128, 9134, 9200, 9204, 9205, 9206, 9208, 9210, 9213, 9215, 9218, 9220, 9222, 9226, 9301, 9304, 9306, 9333, 9418, 9515, 9530, 9600, 9633, 9704, 9800, 9803, 9804, 9926, 9939
Tags: cloud
CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:apache:http_server:2.4.41
ts_added
2025-02-25 19:57:51.059000
ts_last_update
2025-05-01 19:58:00.289000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses