IP address

Search at other sites:

.000167.17.70.206206-70-17-167.clients.gthost.com

Shodan(more info)

Passive DNS

IP blacklists

DataPlane SSH conn

167.17.70.206 is listed on the DataPlane SSH conn blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SSH connection to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2026-01-27 07:10:02.864000
Was present on blacklist at: 2026-01-20 15:10, 2026-01-20 19:10, 2026-01-21 03:10, 2026-01-21 07:10, 2026-01-21 15:10, 2026-01-21 19:10, 2026-01-22 03:10, 2026-01-22 07:10, 2026-01-22 15:10, 2026-01-22 19:10, 2026-01-23 03:10, 2026-01-23 07:10, 2026-01-23 15:10, 2026-01-23 19:10, 2026-01-24 03:10, 2026-01-24 07:10, 2026-01-24 15:10, 2026-01-24 19:10, 2026-01-25 03:10, 2026-01-25 07:10, 2026-01-25 15:10, 2026-01-25 19:10, 2026-01-26 03:10, 2026-01-26 07:10, 2026-01-26 15:10, 2026-01-26 19:10, 2026-01-27 03:10, 2026-01-27 07:10

Warden events (2)

2026-01-20

AttemptLogin (node.eef996): 1

AttemptLogin (node.28c168): 1

Origin AS

AS63023 - AS-GLOBALTELEHOST

BGP Prefix

167.17.70.0/24

geo

Netherlands, Amsterdam

🕑 Europe/Amsterdam

hostname

206-70-17-167.clients.gthost.com

hostname_class

['ip_in_hostname']

Address block ('inetnum' or 'NetRange' in whois database)

167.17.0.0 - 167.17.127.255

last_activity

2026-01-20 03:59:51.934000

last_warden_event

2026-01-20 03:59:51.934000

rep

0.0

reserved_range

0

Shodan's InternetDB

Open ports: 22, 53, 80, 111, 443, 2222, 2224, 3128

Tags: eol-product

CPEs: cpe:/a:f5:nginx:1.24.0, cpe:/o:linux:linux_kernel, cpe:/a:openbsd:openssh:9.2p1, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1, cpe:/o:debian:debian_linux

ts_added

2026-01-20 03:56:35.308000

ts_last_update

2026-02-03 03:56:41.084000

Warden event timeline

DShield event timeline

Presence on blacklists