IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (130)
- 2026-11-04
-
- ReconScanning (node.ce2b59): 42
- ReconScanning (node.9c1411): 47
- ReconScanning (node.4dc198): 12
- 2026-11-03
-
- ReconScanning (node.ce2b59): 18
- ReconScanning (node.9c1411): 11
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 21, 22, 23, 3389, 5432 |
| 25 | src | — |
- Origin AS
- AS400940 - RAILWAY
- BGP Prefix
- 162.220.234.0/23
- geo
- United States, Ashburn
- 🕑 America/New_York
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 162.220.232.0 - 162.220.235.255
- last_activity
- 2026-11-04 22:11:52
- last_warden_event
- 2026-11-04 22:11:52
- rep
- 0.08835077692847115
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80, 123, 443, 2222, 2223, 8000, 8001, 9999, 10000, 10001, 10009, 10038, 10041, 10052, 10066, 10087, 10101, 10134, 10240, 10243, 10250, 10443, 10539, 10554, 11112, 11210, 11211, 11214, 11288, 11300, 11371, 11434, 11596, 12000, 12106, 12110, 12125, 12126, 12132, 12139, 12145, 12149, 12155, 12160, 12167, 12170, 12178, 12183, 12187, 12188, 12193, 12206, 12211, 12217, 12225, 12247, 12259, 12263, 12278, 12287, 12290, 12300, 12308, 12321, 12322, 12327, 12333, 12335, 12344, 12349, 12351, 12352, 12355, 12365, 12372, 12375, 12378, 12383, 12388, 12392, 12399, 12403, 12408, 12410, 12416, 12418, 12421, 12450, 12451, 12455, 12458, 12464, 12467, 12469, 12472, 12488, 12501, 12502, 12509, 12512, 12522, 12525, 12527, 12528, 12532, 12533, 12538, 12540, 12552, 12555, 12563, 12565, 12576, 12580, 12585, 12589, 12601, 12980, 13128, 13228, 13333, 13443, 13579, 14024, 14082, 14101, 14147, 14238, 14344, 14404, 14524, 14873, 15000, 15044, 15502, 15819, 16000, 16001, 16012, 16014, 16021, 16022, 16030, 16036, 16044, 16046, 16050, 16054, 16058, 16060, 16066, 16074, 16076, 16078, 16081, 16082, 16084, 16086, 16093, 16666, 16698, 16950, 17102, 17729, 17772, 17777, 18000, 18007, 18008, 18012, 18020, 18022, 18025, 18030, 18048, 18050, 18051, 18055, 18058, 18063, 18074, 18078, 18081, 18086, 18088, 18099, 18101, 18102, 18108, 18181, 18245, 18476, 18789, 18802, 18888, 19000, 19022, 19068, 19091, 19165, 19776, 19998, 20000, 20080, 20082, 20090, 20201, 20256, 20443, 20547, 20880, 21025, 21237, 21241, 21244, 21245, 21246, 21254, 21259, 21263, 21264, 21270, 21276, 21278, 21286, 21288, 21290, 21292, 21299, 21305, 21306, 21308, 21329, 21379, 21500, 21744, 22084, 22103, 22111, 22206, 22345, 22556, 22609, 22703, 22705, 22799, 23184, 23424, 23446, 23456, 24181, 24232, 24915, 25001, 25084, 25314, 27132, 28015, 28017, 28443, 29083, 29278, 29304, 29798, 29813, 30004, 30008, 30009, 30017, 30029, 30106, 30123, 30443, 30446, 30452, 30473, 30701, 30892, 31001, 31257, 31337, 32168, 32190, 32303, 32400, 32443, 32524, 32764, 32800, 33060, 33344, 34167, 34527, 34908, 34994, 35000, 35531, 36505, 36984, 37051, 37204, 37215, 38080, 38873, 39054, 41392, 41800, 42268, 42356, 42627, 43043, 43133, 43515, 44303, 44310, 44345, 44350, 44365, 44818, 44856, 45000, 45666, 45667, 46183, 46862, 47709, 47989, 47990, 48012, 48018, 48100, 48902, 49152, 49210, 50000, 50012, 50107, 50213, 50571, 50832, 50841, 50997, 51004, 51005, 51106, 51200, 51235, 51294, 51451, 51781, 52230, 52311, 52881, 52951, 53490, 53806, 54138, 54460, 54939, 55000, 55081, 55442, 55443, 55550, 55553, 55555, 55566, 55921, 56399, 57271, 57609, 57779, 57784, 57786, 57788, 58000, 59012, 59204
- Tags: –
- CPEs: cpe:/o:linux:linux_kernel, cpe:/a:openbsd:openssh:9.2p1, cpe:/o:debian:debian_linux, cpe:/a:ntp:ntp:3
- ts_added
- 2026-11-03 17:31:37.088000
- ts_last_update
- 2026-11-09 17:31:40.858000
Warden event timeline
DShield event timeline
Presence on blacklists

