IP address


.017179.43.172.109ogbuda
Shodan(more info)
Passive DNS
Tags: Malware
IP blacklists
ThreatFox
179.43.172.109 is listed on the ThreatFox blacklist.

Description: ThreatFox is a free platform from abuse.ch with the goal of<br>sharing indicators of compromise (IOCs) associated with malware with the<br>infosec community, AV vendors and threat intelligence providers.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-08 15:10:00.274000
Was present on blacklist at: 2025-12-06 19:10, 2025-12-06 23:10, 2025-12-07 03:10, 2025-12-07 07:10, 2025-12-07 11:10, 2025-12-07 15:10, 2025-12-07 19:10, 2025-12-07 23:10, 2025-12-08 03:10, 2025-12-08 07:10, 2025-12-08 11:10, 2025-12-08 15:10
Warden events (35)
2025-12-04
Malware (node.00aee5): 17
Malware (node.ee25b8): 14
Malware (node.b17ef8): 4
Origin AS
AS51852 - PLI-AS
BGP Prefix
179.43.172.0/24
geo
Switzerland, Rümlang
🕑 Europe/Zurich
hostname
ogbuda
Address block ('inetnum' or 'NetRange' in whois database)
179.43.128.0 - 179.43.191.255
last_activity
2025-12-04 13:06:23.210000
last_warden_event
2025-12-04 13:06:23.210000
rep
0.016666666666666666
reserved_range
0
Shodan's InternetDB
Open ports: 22, 80, 443, 8080, 9443, 9999
Tags:
CPEs: cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:8.9p1, cpe:/a:marked_project:marked, cpe:/o:canonical:ubuntu_linux
ts_added
2025-12-04 12:49:40.520000
ts_last_update
2025-12-16 12:49:50.224000

Warden event timeline

DShield event timeline

Presence on blacklists