IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (128)
- 2026-11-04
-
- ReconScanning (node.ce2b59): 42
- ReconScanning (node.9c1411): 47
- ReconScanning (node.4dc198): 10
- 2026-11-03
-
- ReconScanning (node.ce2b59): 18
- ReconScanning (node.9c1411): 11
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 21, 22, 23, 3389, 5432 |
| 25 | src | — |
- Origin AS
- AS400940 - RAILWAY
- BGP Prefix
- 162.220.234.0/23
- geo
- United States, Ashburn
- 🕑 America/New_York
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 162.220.232.0 - 162.220.235.255
- last_activity
- 2026-11-04 22:12:33
- last_warden_event
- 2026-11-04 22:12:33
- rep
- 0.08834326953669669
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80, 443, 9999, 10000, 10001, 10003, 10044, 10045, 10051, 10065, 10066, 10071, 10075, 10089, 10123, 10134, 10243, 10250, 10276, 10443, 10477, 10533, 10554, 10909, 10911, 10934, 10956, 11000, 11065, 11101, 11112, 11182, 11210, 11211, 11288, 11300, 11701, 12000, 12001, 12082, 12103, 12104, 12105, 12117, 12122, 12132, 12138, 12147, 12155, 12159, 12160, 12161, 12166, 12167, 12176, 12177, 12188, 12200, 12205, 12206, 12213, 12234, 12245, 12247, 12248, 12251, 12262, 12272, 12275, 12289, 12290, 12321, 12335, 12336, 12338, 12345, 12349, 12350, 12351, 12352, 12357, 12358, 12360, 12363, 12366, 12369, 12378, 12379, 12388, 12392, 12393, 12397, 12400, 12413, 12416, 12426, 12427, 12429, 12430, 12431, 12451, 12462, 12466, 12473, 12476, 12480, 12485, 12489, 12492, 12509, 12520, 12526, 12532, 12534, 12539, 12555, 12563, 12583, 12586, 12588, 12601, 12725, 13001, 13380, 13443, 14082, 14101, 14265, 14523, 14802, 14905, 14940, 15000, 15662, 15672, 15929, 16001, 16002, 16006, 16007, 16010, 16017, 16023, 16029, 16030, 16040, 16042, 16044, 16050, 16061, 16063, 16066, 16077, 16090, 16095, 16100, 16400, 16401, 16601, 16666, 16831, 16992, 16993, 17102, 17771, 17871, 18000, 18004, 18006, 18019, 18021, 18022, 18026, 18030, 18033, 18040, 18041, 18043, 18044, 18048, 18049, 18050, 18051, 18065, 18066, 18068, 18070, 18077, 18079, 18081, 18088, 18111, 18245, 18368, 18485, 18556, 18765, 18789, 19015, 19080, 19100, 19677, 20000, 20050, 20090, 20106, 20121, 20256, 20443, 20547, 20880, 20892, 21230, 21232, 21235, 21242, 21247, 21263, 21264, 21271, 21277, 21286, 21292, 21301, 21305, 21307, 21311, 21312, 21319, 21329, 21379, 21500, 22000, 22107, 22703, 22750, 22993, 23084, 23781, 24045, 25008, 25009, 25147, 25565, 25822, 27017, 27051, 27229, 27244, 27283, 27852, 28015, 28017, 28080, 29961, 30019, 30101, 30104, 30106, 30121, 30122, 30123, 30892, 30894, 31337, 32746, 32874, 32996, 33060, 33344, 33539, 35000, 35004, 35464, 35490, 35522, 36443, 36984, 37215, 37702, 38063, 38880, 40007, 40471, 41546, 42723, 43080, 43677, 44158, 44310, 44332, 44444, 44818, 45006, 45668, 45777, 45778, 46318, 46443, 46862, 48000, 48013, 49080, 49152, 49153, 49200, 50002, 50005, 50022, 50070, 50073, 50105, 50805, 51106, 51200, 51235, 51247, 51781, 52200, 52230, 52311, 52390, 52869, 53027, 53155, 53400, 53503, 54138, 54187, 54353, 54857, 55000, 55200, 55443, 55475, 55481, 55550, 55553, 55554, 55555, 56141, 56465, 58443
- Tags: –
- CPEs: cpe:/o:linux:linux_kernel, cpe:/a:openbsd:openssh:9.2p1, cpe:/o:debian:debian_linux
- ts_added
- 2026-11-03 17:31:40.364000
- ts_last_update
- 2026-11-09 17:31:50.647000
Warden event timeline
DShield event timeline
Presence on blacklists

