IP address


.022132.243.221.226vm135317.hosted-by.qwins.co
Shodan(more info)
Passive DNS
Tags: Scanner Login attempts

Threat categories

TLRoleCategoryDetails
50 src scan port: 22, 23, 80, 443, 2222, 2375
44 src login protocol: ssh, telnet
port: 22, 23

Warden events (12)
2026-06-18
ReconScanning (node.ce2b59): 9
IntrusionUserCompromise (node.cfb4f7): 1
AttemptLogin (node.ce2b59): 2
Origin AS
AS213702 - QWINS-LTD
BGP Prefix
132.243.221.0/24
geo
Netherlands, Amsterdam
🕑 Europe/Amsterdam
hostname
vm135317.hosted-by.qwins.co
Address block ('inetnum' or 'NetRange' in whois database)
132.243.0.0 - 132.243.255.255
last_activity
2026-06-18 05:35:42
last_warden_event
2026-06-18 05:35:42
rep
0.02151332260388339
reserved_range
0
Shodan's InternetDB
Open ports: 22, 55555
Tags: proxy
CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1
ts_added
2026-06-18 02:13:16.751000
ts_last_update
2026-06-24 02:13:20.278000

Warden event timeline

DShield event timeline