IP address


.44091.236.116.61
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
CI Army
91.236.116.61 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-04-28 02:50:01.132000
Was present on blacklist at: 2025-03-03 03:50, 2025-03-04 03:50, 2025-03-05 03:50, 2025-03-24 03:50, 2025-03-25 03:50, 2025-03-26 03:50, 2025-03-27 03:50, 2025-03-28 03:50, 2025-03-29 03:50, 2025-03-30 02:50, 2025-03-31 02:50, 2025-04-01 02:50, 2025-04-02 02:50, 2025-04-03 02:50, 2025-04-04 02:50, 2025-04-09 02:50, 2025-04-10 02:50, 2025-04-11 02:50, 2025-04-12 02:50, 2025-04-13 02:50, 2025-04-14 02:50, 2025-04-15 02:50, 2025-04-16 02:50, 2025-04-17 02:50, 2025-04-18 02:50, 2025-04-19 02:50, 2025-04-20 02:50, 2025-04-21 02:50, 2025-04-22 02:50, 2025-04-23 02:50, 2025-04-24 02:50, 2025-04-25 02:50, 2025-04-26 02:50, 2025-04-27 02:50, 2025-04-28 02:50
Spamhaus PBL
91.236.116.61 is listed on the Spamhaus PBL blacklist.

Description: The Spamhaus PBL is a DNSBL database of end-user IP address ranges which should not be delivering unauthenticated SMTP email to any Internet mail server except those provided for specifically by an ISP for that customer's use.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-04-28 03:54:41.226000
Was present on blacklist at: 2025-03-03 03:54, 2025-03-10 03:54, 2025-03-17 03:54, 2025-03-24 03:54, 2025-03-31 03:54, 2025-04-07 03:54, 2025-04-14 03:54, 2025-04-21 03:54, 2025-04-28 03:54
AbuseIPDB
91.236.116.61 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-04-24 04:00:00.800000
Was present on blacklist at: 2025-03-24 05:00, 2025-03-25 05:00, 2025-03-26 05:00, 2025-03-27 05:00, 2025-03-28 05:00, 2025-03-29 05:00, 2025-03-30 04:00, 2025-03-31 04:00, 2025-04-08 04:00, 2025-04-09 04:00, 2025-04-10 04:00, 2025-04-11 04:00, 2025-04-12 04:00, 2025-04-13 04:00, 2025-04-14 04:00, 2025-04-15 04:00, 2025-04-16 04:00, 2025-04-18 04:00, 2025-04-19 04:00, 2025-04-20 04:00, 2025-04-21 04:00, 2025-04-22 04:00, 2025-04-23 04:00, 2025-04-24 04:00
Spamhaus XBL CBL
91.236.116.61 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-04-28 03:54:41.226000
Was present on blacklist at: 2025-03-31 03:54, 2025-04-07 03:54, 2025-04-21 03:54, 2025-04-28 03:54
Turris greylist
91.236.116.61 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-25 21:15:00.198000
Was present on blacklist at: 2025-04-14 21:15, 2025-04-15 21:15, 2025-04-24 21:15, 2025-04-25 21:15
Warden events (9943)
2025-04-24
ReconScanning (node.4dc198): 115
AnomalyTraffic (node.ffe95c): 13
ReconScanning (node.368407): 9
2025-04-23
ReconScanning (node.4dc198): 244
ReconScanning (node.368407): 140
AnomalyTraffic (node.ffe95c): 9
2025-04-22
ReconScanning (node.368407): 133
ReconScanning (node.4dc198): 135
2025-04-21
ReconScanning (node.368407): 165
ReconScanning (node.4dc198): 170
2025-04-20
ReconScanning (node.4dc198): 273
ReconScanning (node.368407): 269
ReconScanning (node.9c1411): 59
2025-04-19
ReconScanning (node.9c1411): 33
ReconScanning (node.4dc198): 136
ReconScanning (node.368407): 132
2025-04-18
ReconScanning (node.4dc198): 178
ReconScanning (node.368407): 175
ReconScanning (node.9c1411): 46
2025-04-17
ReconScanning (node.4dc198): 121
ReconScanning (node.368407): 121
ReconScanning (node.9c1411): 26
2025-04-16
ReconScanning (node.4dc198): 124
ReconScanning (node.368407): 120
ReconScanning (node.9c1411): 50
2025-04-15
ReconScanning (node.4dc198): 215
ReconScanning (node.368407): 211
ReconScanning (node.9c1411): 53
2025-04-14
ReconScanning (node.4dc198): 252
ReconScanning (node.368407): 131
ReconScanning (node.9c1411): 51
2025-04-13
ReconScanning (node.9c1411): 54
ReconScanning (node.4dc198): 258
ReconScanning (node.368407): 178
2025-04-12
ReconScanning (node.368407): 85
ReconScanning (node.4dc198): 84
ReconScanning (node.9c1411): 46
2025-04-11
ReconScanning (node.4dc198): 163
ReconScanning (node.368407): 195
ReconScanning (node.9c1411): 43
2025-04-10
ReconScanning (node.9c1411): 59
ReconScanning (node.368407): 134
ReconScanning (node.4dc198): 127
2025-04-09
ReconScanning (node.368407): 30
ReconScanning (node.4dc198): 36
ReconScanning (node.9c1411): 60
2025-04-08
ReconScanning (node.4dc198): 269
ReconScanning (node.9c1411): 72
ReconScanning (node.368407): 239
2025-03-31
ReconScanning (node.4dc198): 82
ReconScanning (node.368407): 79
ReconScanning (node.9c1411): 23
2025-03-30
ReconScanning (node.4dc198): 261
ReconScanning (node.368407): 273
ReconScanning (node.9c1411): 71
2025-03-29
ReconScanning (node.9c1411): 73
ReconScanning (node.4dc198): 207
ReconScanning (node.368407): 210
2025-03-28
ReconScanning (node.368407): 136
ReconScanning (node.4dc198): 107
ReconScanning (node.9c1411): 72
2025-03-27
ReconScanning (node.368407): 177
ReconScanning (node.4dc198): 144
ReconScanning (node.9c1411): 47
2025-03-26
ReconScanning (node.368407): 255
ReconScanning (node.4dc198): 278
ReconScanning (node.9c1411): 68
2025-03-25
ReconScanning (node.4dc198): 288
ReconScanning (node.9c1411): 78
ReconScanning (node.368407): 273
2025-03-24
ReconScanning (node.4dc198): 226
ReconScanning (node.368407): 226
ReconScanning (node.9c1411): 50
2025-03-23
ReconScanning (node.368407): 87
ReconScanning (node.4dc198): 89
ReconScanning (node.9c1411): 22
DShield reports (IP summary, reports)
2025-03-02
Number of reports: 518
Distinct targets: 461
2025-03-03
Number of reports: 88
Distinct targets: 72
2025-03-10
Number of reports: 186
Distinct targets: 139
2025-03-11
Number of reports: 184
Distinct targets: 112
2025-03-23
Number of reports: 327
Distinct targets: 159
2025-03-24
Number of reports: 604
Distinct targets: 405
2025-03-25
Number of reports: 476
Distinct targets: 436
2025-03-26
Number of reports: 704
Distinct targets: 406
2025-03-27
Number of reports: 591
Distinct targets: 331
2025-03-28
Number of reports: 571
Distinct targets: 463
2025-03-29
Number of reports: 577
Distinct targets: 483
2025-03-30
Number of reports: 757
Distinct targets: 507
2025-03-31
Number of reports: 234
Distinct targets: 150
2025-04-08
Number of reports: 822
Distinct targets: 465
2025-04-09
Number of reports: 614
Distinct targets: 408
2025-04-10
Number of reports: 488
Distinct targets: 426
2025-04-11
Number of reports: 530
Distinct targets: 356
2025-04-12
Number of reports: 471
Distinct targets: 325
2025-04-13
Number of reports: 562
Distinct targets: 403
2025-04-14
Number of reports: 536
Distinct targets: 359
2025-04-15
Number of reports: 525
Distinct targets: 335
2025-04-16
Number of reports: 452
Distinct targets: 237
2025-04-17
Number of reports: 314
Distinct targets: 224
2025-04-18
Number of reports: 666
Distinct targets: 315
2025-04-19
Number of reports: 282
Distinct targets: 172
2025-04-20
Number of reports: 705
Distinct targets: 465
2025-04-21
Number of reports: 434
Distinct targets: 281
2025-04-22
Number of reports: 395
Distinct targets: 270
2025-04-23
Number of reports: 963
Distinct targets: 368
2025-04-24
Number of reports: 502
Distinct targets: 163
Origin AS
AS42237 - ICME
BGP Prefix
91.236.116.0/24
geo
Sweden, Stockholm
🕑 Europe/Stockholm
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
91.236.116.0 - 91.236.116.255
last_activity
2025-04-24 09:36:49
last_warden_event
2025-04-24 09:36:49
rep
0.4404761904761905
reserved_range
0
Shodan's InternetDB
Open ports: 22
Tags:
CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1
ts_added
2025-03-03 03:54:36.315000
ts_last_update
2025-04-28 03:54:41.706000

Warden event timeline

DShield event timeline

Presence on blacklists