IP address

Passive DNS

Tags: Scanner

IP blacklists

CI Army

213.136.91.161 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-06-18 02:50:00.898000
Was present on blacklist at: 2025-03-21 03:50, 2025-03-23 03:50, 2025-03-24 03:50, 2025-04-06 02:50, 2025-04-07 02:50, 2025-04-08 02:50, 2025-04-10 02:50, 2025-04-12 02:50, 2025-04-14 02:50, 2025-04-15 02:50, 2025-04-16 02:50, 2025-04-17 02:50, 2025-04-18 02:50, 2025-04-19 02:50, 2025-04-22 02:50, 2025-04-23 02:50, 2025-04-24 02:50, 2025-04-26 02:50, 2025-04-29 02:50, 2025-04-30 02:50, 2025-05-02 02:50, 2025-05-03 02:50, 2025-05-04 02:50, 2025-05-15 02:50, 2025-05-16 02:50, 2025-05-17 02:50, 2025-05-18 02:50, 2025-05-19 02:50, 2025-05-20 02:50, 2025-05-21 02:50, 2025-05-23 02:50, 2025-05-24 02:50, 2025-05-25 02:50, 2025-05-26 02:50, 2025-05-27 02:50, 2025-05-28 02:50, 2025-05-30 02:50, 2025-05-31 02:50, 2025-06-01 02:50, 2025-06-02 02:50, 2025-06-03 02:50, 2025-06-04 02:50, 2025-06-05 02:50, 2025-06-06 02:50, 2025-06-08 02:50, 2025-06-09 02:50, 2025-06-10 02:50, 2025-06-15 02:50, 2025-06-16 02:50, 2025-06-18 02:50

AbuseIPDB

213.136.91.161 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-06-17 04:00:00.709000
Was present on blacklist at: 2025-03-26 05:00, 2025-03-29 05:00, 2025-03-30 04:00, 2025-04-02 04:00, 2025-05-05 04:00, 2025-05-08 04:00, 2025-05-09 04:00, 2025-05-17 04:00, 2025-05-28 04:00, 2025-06-17 04:00

UCEPROTECT L1

213.136.91.161 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-05-22 23:45:00.586000
Was present on blacklist at: 2025-05-16 07:45, 2025-05-16 15:45, 2025-05-16 23:45, 2025-05-17 07:45, 2025-05-17 15:45, 2025-05-17 23:45, 2025-05-18 07:45, 2025-05-18 15:45, 2025-05-18 23:45, 2025-05-19 07:45, 2025-05-19 15:45, 2025-05-19 23:45, 2025-05-20 07:45, 2025-05-20 15:45, 2025-05-20 23:45, 2025-05-21 07:45, 2025-05-21 15:45, 2025-05-21 23:45, 2025-05-22 07:45, 2025-05-22 15:45, 2025-05-22 23:45

Warden events (333)

2025-06-16: ReconScanning (node.9c1411): 5
2025-06-15: ReconScanning (node.9c1411): 1
2025-06-14: ReconScanning (node.9c1411): 3
2025-06-12: ReconScanning (node.9c1411): 20
2025-06-11: ReconScanning (node.9c1411): 24
2025-06-10: ReconScanning (node.9c1411): 18
2025-04-17: ReconScanning (node.9c1411): 5
2025-04-15: ReconScanning (node.9c1411): 15
2025-04-14: ReconScanning (node.9c1411): 11
2025-04-12: ReconScanning (node.9c1411): 9
2025-04-09: ReconScanning (node.9c1411): 1
2025-04-08: ReconScanning (node.9c1411): 7
2025-04-07: ReconScanning (node.9c1411): 14
2025-04-06: ReconScanning (node.9c1411): 19
2025-04-03: ReconScanning (node.9c1411): 3
2025-04-02: ReconScanning (node.9c1411): 1
2025-04-01: ReconScanning (node.9c1411): 29
2025-03-31: ReconScanning (node.9c1411): 4
2025-03-30: ReconScanning (node.9c1411): 25
2025-03-29: ReconScanning (node.9c1411): 34
2025-03-28: ReconScanning (node.9c1411): 8
2025-03-27: ReconScanning (node.9c1411): 25
2025-03-26: ReconScanning (node.9c1411): 7
2025-03-25: ReconScanning (node.9c1411): 25
2025-03-24: ReconScanning (node.9c1411): 10
2025-03-23: ReconScanning (node.9c1411): 7
2025-03-22: ReconScanning (node.9c1411): 1
2025-03-21: ReconScanning (node.9c1411): 2

DShield reports (IP summary, reports)

2025-03-21: Number of reports: 16; Distinct targets: 11
2025-03-23: Number of reports: 22; Distinct targets: 19
2025-03-24: Number of reports: 28; Distinct targets: 25
2025-03-26: Number of reports: 11; Distinct targets: 11
2025-03-30: Number of reports: 13; Distinct targets: 7
2025-04-01: Number of reports: 11; Distinct targets: 9
2025-04-04: Number of reports: 13; Distinct targets: 9
2025-04-05: Number of reports: 17; Distinct targets: 11
2025-04-12: Number of reports: 10; Distinct targets: 7
2025-04-16: Number of reports: 15; Distinct targets: 11
2025-04-21: Number of reports: 12; Distinct targets: 11
2025-04-22: Number of reports: 12; Distinct targets: 12
2025-04-25: Number of reports: 11; Distinct targets: 8
2025-04-27: Number of reports: 11; Distinct targets: 11
2025-04-28: Number of reports: 12; Distinct targets: 8
2025-04-30: Number of reports: 12; Distinct targets: 5
2025-05-07: Number of reports: 14; Distinct targets: 8
2025-05-15: Number of reports: 14; Distinct targets: 9

Origin AS: AS51167 - CONTABO
BGP Prefix: 213.136.90.0/23
geo: Germany, Nuremberg; 🕑 Europe/Berlin
hostname: vmi116601.contaboserver.net
Address block ('inetnum' or 'NetRange' in whois database): 213.136.64.0 - 213.136.95.255
last_activity: 2025-06-16 03:58:51
last_warden_event: 2025-06-16 03:58:51
rep: 0.2232141403924851
reserved_range: 0
Shodan's InternetDB: Open ports: 21, 25, 53, 80, 110, 465, 993, 995, 3050, 3389, 5985, 8443, 8880; Tags: self-signed, starttls; CPEs: cpe:/o:microsoft:windows, cpe:/a:microsoft:internet_information_services, cpe:/a:firebirdsql:firebird, cpe:/a:parallels:parallels_plesk_panel, cpe:/a:microsoft:internet_information_services:10.0, cpe:/a:prototypejs:prototype
ts_added: 2024-12-21 03:52:37.840000
ts_last_update: 2025-06-18 03:52:40.964000

Warden event timeline

DShield event timeline

Presence on blacklists