IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (127)
- 2026-11-04
-
- ReconScanning (node.ce2b59): 41
- ReconScanning (node.9c1411): 44
- ReconScanning (node.4dc198): 16
- 2026-11-03
-
- ReconScanning (node.ce2b59): 18
- ReconScanning (node.9c1411): 8
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 21, 22, 23, 3389, 5432 |
| 25 | src | — |
- Origin AS
- AS400940 - RAILWAY
- BGP Prefix
- 162.220.234.0/23
- geo
- United States, Ashburn
- 🕑 America/New_York
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 162.220.232.0 - 162.220.235.255
- last_activity
- 2026-11-04 22:11:12
- last_warden_event
- 2026-11-04 22:11:12
- rep
- 0.08717108907972537
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 80, 123, 443, 2222, 8000, 8001, 9998, 9999, 10000, 10001, 10003, 10006, 10022, 10024, 10026, 10028, 10034, 10036, 10038, 10043, 10051, 10083, 10089, 10100, 10180, 10181, 10210, 10225, 10243, 10249, 10302, 10304, 10380, 10398, 10443, 10554, 10686, 10909, 10911, 11000, 11027, 11065, 11075, 11112, 11288, 11300, 11371, 11475, 11489, 11601, 11602, 11833, 12000, 12001, 12084, 12101, 12104, 12112, 12115, 12116, 12117, 12126, 12127, 12133, 12140, 12142, 12143, 12148, 12153, 12154, 12159, 12167, 12171, 12176, 12178, 12186, 12192, 12195, 12202, 12207, 12212, 12215, 12219, 12224, 12226, 12234, 12239, 12248, 12258, 12260, 12265, 12279, 12286, 12292, 12294, 12295, 12299, 12301, 12304, 12306, 12315, 12333, 12335, 12339, 12350, 12352, 12360, 12363, 12368, 12369, 12391, 12422, 12428, 12431, 12456, 12465, 12466, 12468, 12471, 12475, 12503, 12506, 12514, 12515, 12516, 12522, 12526, 12535, 12537, 12538, 12556, 12560, 12569, 12585, 12589, 12980, 13021, 13128, 13189, 13333, 13380, 13579, 13780, 14147, 14265, 14344, 14400, 14401, 14402, 14521, 14825, 14895, 15123, 15480, 15555, 16000, 16010, 16018, 16020, 16025, 16030, 16039, 16042, 16047, 16053, 16065, 16067, 16072, 16073, 16083, 16091, 16095, 16103, 16316, 16403, 16673, 16831, 16992, 16993, 17100, 17184, 17270, 17770, 17773, 17774, 17778, 17877, 18004, 18008, 18022, 18024, 18026, 18031, 18033, 18042, 18057, 18058, 18059, 18061, 18070, 18072, 18077, 18079, 18080, 18081, 18084, 18113, 18182, 18245, 18368, 18789, 18802, 19000, 19071, 19776, 19902, 20010, 20013, 20020, 20050, 20082, 20090, 20106, 20107, 20121, 20256, 20547, 20682, 21084, 21116, 21200, 21239, 21252, 21255, 21270, 21278, 21296, 21297, 21307, 21379, 21443, 22022, 22206, 23424, 24084, 24127, 24155, 24836, 24905, 25001, 25082, 25565, 25782, 27015, 27017, 27077, 28017, 28818, 29984, 30006, 30010, 30017, 30023, 30112, 30120, 30122, 30337, 30444, 31337, 31380, 32001, 32400, 32764, 32800, 32968, 33060, 33344, 33761, 33763, 33879, 34500, 35000, 35004, 35240, 35440, 35522, 35531, 35984, 36802, 36982, 37080, 37215, 37247, 37585, 37777, 40022, 40125, 40471, 41800, 41921, 42424, 43115, 43871, 44137, 44158, 44301, 44303, 44332, 44350, 44365, 44399, 44400, 44500, 44520, 44818, 45001, 45003, 45613, 45668, 45788, 46810, 47080, 47990, 48001, 48012, 48888, 48889, 49013, 49152, 49153, 49261, 49277, 49549, 49682, 49692, 49694, 49767, 50000, 50003, 50007, 50011, 50012, 50103, 50104, 50106, 50107, 50997, 51106, 51572, 52311, 53480, 53485, 54022, 54138, 54545, 54657, 55443, 55495, 55550, 55589, 55900, 56299, 57784, 57786, 58378, 59443, 59834, 60000
- Tags: –
- CPEs: cpe:/a:ntp:ntp:3
- ts_added
- 2026-11-03 17:31:43.673000
- ts_last_update
- 2026-11-09 17:31:50.199000
Warden event timeline
DShield event timeline
Presence on blacklists

