IP address


.00067.220.74.136
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
CI Army
67.220.74.136 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-09-29 02:50:00.989000
Was present on blacklist at: 2025-08-10 02:50, 2025-08-11 02:50, 2025-08-12 02:50, 2025-08-13 02:50, 2025-08-14 02:50, 2025-08-15 02:50, 2025-08-16 02:50, 2025-08-20 02:50, 2025-08-21 02:50, 2025-08-23 02:50, 2025-08-24 02:50, 2025-08-25 02:50, 2025-08-26 02:50, 2025-08-30 02:50, 2025-08-31 02:50, 2025-09-05 02:50, 2025-09-06 02:50, 2025-09-07 02:50, 2025-09-17 02:50, 2025-09-18 02:50, 2025-09-28 02:50, 2025-09-29 02:50
AbuseIPDB
67.220.74.136 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-09-17 04:00:00.598000
Was present on blacklist at: 2025-08-10 04:00, 2025-08-12 04:00, 2025-08-20 04:00, 2025-08-30 04:00, 2025-09-05 04:00, 2025-09-17 04:00
Warden events (178)
2025-09-27
ReconScanning (node.368407): 15
ReconScanning (node.4dc198): 8
AnomalyTraffic (node.ffe95c): 1
2025-09-16
ReconScanning (node.4dc198): 9
ReconScanning (node.368407): 14
AnomalyTraffic (node.ffe95c): 2
2025-09-04
ReconScanning (node.4dc198): 8
ReconScanning (node.368407): 16
AnomalyTraffic (node.ffe95c): 2
2025-08-29
ReconScanning (node.368407): 16
ReconScanning (node.4dc198): 8
AnomalyTraffic (node.ffe95c): 3
2025-08-19
ReconScanning (node.4dc198): 8
ReconScanning (node.368407): 16
AnomalyTraffic (node.ffe95c): 2
2025-08-11
ReconScanning (node.4dc198): 9
ReconScanning (node.368407): 15
AnomalyTraffic (node.ffe95c): 2
2025-08-09
ReconScanning (node.4dc198): 8
ReconScanning (node.368407): 14
AnomalyTraffic (node.ffe95c): 2
DShield reports (IP summary, reports)
2025-08-09
Number of reports: 361
Distinct targets: 298
2025-08-11
Number of reports: 377
Distinct targets: 279
2025-08-19
Number of reports: 244
Distinct targets: 227
2025-08-22
Number of reports: 91
Distinct targets: 67
2025-08-29
Number of reports: 490
Distinct targets: 318
2025-09-16
Number of reports: 449
Distinct targets: 300
2025-09-27
Number of reports: 478
Distinct targets: 321
Origin AS
AS63023 - AS-GLOBALTELEHOST
BGP Prefix
67.220.74.0/24
geo
United States, Miami
🕑 America/New_York
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
67.220.64.0 - 67.220.95.255
last_activity
2025-09-27 09:05:17
last_warden_event
2025-09-27 09:05:17
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 22, 80, 443, 2000, 3306, 5060
Tags: eol-product, self-signed, scanner, database
CPEs: cpe:/a:openbsd:openssh:8.0, cpe:/a:mariadb:mariadb:10.3.39-MariaDB, cpe:/a:openssl:openssl:1.1.1k, cpe:/a:apache:http_server:2.4.37, cpe:/a:php:php:7.4.33
ts_added
2025-08-09 09:45:26.096000
ts_last_update
2025-10-15 09:45:30.430000

Warden event timeline

DShield event timeline

Presence on blacklists