IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (124)
- 2026-11-04
-
- ReconScanning (node.ce2b59): 41
- ReconScanning (node.9c1411): 46
- ReconScanning (node.4dc198): 11
- 2026-11-03
-
- ReconScanning (node.ce2b59): 18
- ReconScanning (node.9c1411): 8
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 21, 22, 23, 3389, 5432 |
| 25 | src | — |
- Origin AS
- AS400940 - RAILWAY
- BGP Prefix
- 162.220.234.0/23
- geo
- United States, Ashburn
- 🕑 America/New_York
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 162.220.232.0 - 162.220.235.255
- last_activity
- 2026-11-04 22:11:21
- last_warden_event
- 2026-11-04 22:11:21
- rep
- 0.08715941920168613
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80, 123, 443, 2222, 2226, 8001, 9997, 9998, 9999, 10000, 10001, 10006, 10011, 10030, 10035, 10052, 10071, 10087, 10101, 10205, 10243, 10254, 10255, 10256, 10283, 10324, 10356, 10390, 10393, 10443, 10554, 10933, 10943, 11000, 11001, 11002, 11027, 11075, 11210, 11211, 11288, 11300, 11371, 11434, 11681, 11809, 11920, 11959, 12000, 12056, 12084, 12088, 12111, 12121, 12126, 12127, 12130, 12133, 12136, 12137, 12153, 12156, 12159, 12161, 12162, 12174, 12181, 12188, 12192, 12196, 12197, 12202, 12213, 12214, 12240, 12245, 12254, 12258, 12262, 12264, 12270, 12272, 12276, 12279, 12280, 12290, 12306, 12308, 12311, 12320, 12328, 12333, 12337, 12338, 12339, 12341, 12345, 12346, 12351, 12365, 12376, 12388, 12389, 12397, 12419, 12422, 12426, 12438, 12440, 12441, 12442, 12453, 12460, 12461, 12470, 12482, 12485, 12490, 12493, 12499, 12500, 12502, 12507, 12513, 12522, 12531, 12541, 12544, 12555, 12558, 12561, 12570, 12572, 12575, 12579, 12582, 12583, 12585, 13000, 13228, 13888, 14082, 14147, 14265, 14395, 14523, 14875, 14894, 14897, 14903, 15001, 15038, 15091, 15555, 16001, 16006, 16010, 16013, 16015, 16021, 16023, 16025, 16030, 16037, 16038, 16047, 16059, 16071, 16079, 16080, 16403, 16667, 16713, 16993, 17010, 17771, 17780, 17895, 18008, 18015, 18016, 18023, 18028, 18034, 18037, 18041, 18053, 18055, 18056, 18064, 18070, 18076, 18085, 18086, 18093, 18101, 18103, 18104, 18113, 18181, 18239, 18245, 18443, 18789, 19015, 19017, 19071, 19776, 19902, 20090, 20107, 20121, 20182, 20185, 20201, 20208, 20256, 20440, 20443, 20547, 20880, 21025, 21100, 21116, 21233, 21236, 21240, 21248, 21254, 21256, 21258, 21260, 21263, 21264, 21266, 21279, 21280, 21287, 21289, 21290, 21292, 21306, 21313, 21315, 21321, 21322, 21326, 21379, 21935, 22345, 22703, 23184, 23705, 23906, 24084, 25000, 25001, 25003, 25105, 25891, 27015, 27017, 27234, 27571, 27819, 28017, 28165, 29798, 29984, 30001, 30004, 30013, 30023, 30025, 30029, 30083, 30104, 30106, 30243, 30452, 30468, 31337, 31443, 32303, 32430, 32746, 32764, 33060, 33344, 35240, 35281, 35336, 35522, 35531, 36320, 37215, 37777, 38865, 39991, 40000, 40099, 40471, 40892, 41413, 41743, 41800, 41929, 42314, 43009, 43367, 44158, 44303, 44336, 44337, 44345, 44399, 44417, 44818, 45006, 45555, 45668, 45786, 45886, 46301, 46891, 47001, 47026, 47984, 47989, 48000, 48003, 48020, 48783, 49686, 49980, 50000, 50001, 50008, 50011, 50013, 50050, 50103, 50104, 50105, 50500, 50704, 51007, 51106, 51200, 51201, 51235, 51434, 51472, 52311, 52510, 52677, 53148, 53200, 53480, 53806, 54138, 54672, 54857, 55000, 55442, 55443, 55481, 55490, 55550, 55553, 55554, 55786, 56167, 56823, 56995, 57021, 57231, 57411, 57778, 57785, 58118, 58262, 59271, 59817
- Tags: –
- CPEs: cpe:/o:linux:linux_kernel, cpe:/a:openbsd:openssh:9.2p1, cpe:/o:debian:debian_linux, cpe:/a:ntp:ntp:3
- ts_added
- 2026-11-03 17:31:37.232000
- ts_last_update
- 2026-11-09 17:31:41.987000
Warden event timeline
DShield event timeline
Presence on blacklists

