IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (124)
- 2026-11-04
-
- ReconScanning (node.ce2b59): 39
- ReconScanning (node.9c1411): 43
- ReconScanning (node.4dc198): 14
- 2026-11-03
-
- ReconScanning (node.ce2b59): 18
- ReconScanning (node.9c1411): 10
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 21, 22, 23, 3389, 5432 |
| 38 | src | — |
- Origin AS
- AS400940 - RAILWAY
- BGP Prefix
- 162.220.232.0/23
- geo
- United States
- 🕑 America/Chicago
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 162.220.232.0 - 162.220.235.255
- last_activity
- 2026-11-04 22:12:47
- last_warden_event
- 2026-11-04 22:12:47
- rep
- 0.08796355535527223
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80, 123, 443, 2222, 8000, 8001, 9998, 9999, 10000, 10001, 10015, 10016, 10026, 10033, 10035, 10040, 10041, 10049, 10050, 10089, 10093, 10106, 10134, 10154, 10181, 10225, 10243, 10250, 10256, 10348, 10380, 10390, 10399, 10443, 10533, 10554, 10894, 10909, 10911, 10913, 10933, 11000, 11075, 11084, 11111, 11112, 11210, 11288, 11300, 11332, 11401, 11434, 11601, 11602, 12000, 12001, 12082, 12101, 12126, 12129, 12131, 12133, 12142, 12144, 12146, 12149, 12153, 12156, 12157, 12164, 12171, 12172, 12173, 12175, 12177, 12182, 12190, 12194, 12206, 12210, 12213, 12218, 12222, 12231, 12233, 12236, 12237, 12256, 12265, 12266, 12276, 12283, 12288, 12293, 12296, 12300, 12319, 12330, 12340, 12341, 12348, 12350, 12351, 12354, 12355, 12367, 12375, 12378, 12392, 12393, 12394, 12397, 12414, 12428, 12437, 12446, 12449, 12453, 12456, 12460, 12470, 12482, 12493, 12496, 12504, 12506, 12522, 12527, 12533, 12535, 12540, 12551, 12562, 12566, 12574, 12580, 12980, 13128, 13333, 13443, 13579, 14008, 14130, 14147, 14330, 14344, 14443, 14894, 14901, 14909, 15002, 15038, 15151, 15443, 15555, 15588, 15673, 15929, 16009, 16017, 16020, 16027, 16030, 16036, 16040, 16045, 16048, 16050, 16056, 16066, 16069, 16073, 16080, 16094, 16095, 16101, 16102, 16403, 16404, 16787, 16992, 17562, 17774, 17777, 18000, 18001, 18004, 18029, 18033, 18034, 18039, 18046, 18057, 18059, 18074, 18077, 18078, 18082, 18083, 18086, 18090, 18104, 18109, 18163, 18225, 18556, 18802, 19000, 19013, 19017, 19022, 19071, 19100, 19513, 19789, 20030, 20053, 20500, 20547, 20740, 20880, 20907, 21025, 21116, 21235, 21245, 21250, 21262, 21268, 21270, 21280, 21281, 21282, 21283, 21288, 21292, 21295, 21299, 21313, 21318, 21321, 21322, 21324, 21379, 21500, 22000, 22082, 22556, 22703, 22937, 23084, 23456, 23685, 24306, 24662, 25001, 25010, 25076, 25105, 25510, 25565, 26319, 27015, 27208, 27830, 28015, 28342, 29479, 30001, 30006, 30011, 30123, 30290, 30468, 30700, 30831, 31337, 32400, 32764, 32800, 33344, 33907, 34827, 34895, 35000, 35153, 35241, 35483, 35524, 35932, 36505, 37215, 37569, 37777, 38080, 40894, 41381, 41800, 42031, 42208, 42424, 43080, 43102, 43390, 44158, 44307, 44345, 44420, 44444, 44520, 44818, 45444, 45555, 45667, 45788, 45821, 46001, 46443, 47000, 47718, 47990, 48281, 48730, 49152, 49153, 49501, 50000, 50008, 50013, 50050, 50104, 50202, 50257, 50860, 51000, 51106, 51235, 51346, 51949, 52869, 53200, 53802, 54138, 54196, 54757, 54767, 55081, 55200, 55443, 55553, 55555, 55709, 57264, 57785, 57786, 57788, 58443, 58532, 58585, 58843, 59012, 59443
- Tags: –
- CPEs: cpe:/o:linux:linux_kernel, cpe:/a:openbsd:openssh:9.2p1, cpe:/o:debian:debian_linux, cpe:/a:ntp:ntp:3
- ts_added
- 2026-11-03 17:31:38.540000
- ts_last_update
- 2026-11-09 17:31:42.289000
Warden event timeline
DShield event timeline
Presence on blacklists

