IP address


.053185.4.114.25ujjpa6.mta.lokin.be
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Echelon SIP register scanner
185.4.114.25 was recently listed on the Echelon SIP register scanner blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: SIP VoIP registration scanning on port 5060
Type of feed: primary (feed detail page)

Last checked at: 2026-09-26 09:30:00.337000
Was present on blacklist at: 2026-09-23 09:30, 2026-09-24 09:30, 2026-09-25 09:30, 2026-09-26 09:30
AbuseIPDB
185.4.114.25 was recently listed on the AbuseIPDB blacklist, but currently it is not.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-09-28 04:00:00.712000
Was present on blacklist at: 2026-09-27 04:00, 2026-09-28 04:00

Threat categories

TLRoleCategoryDetails
62 src scan port: many
52 src —

Warden events (118)
2026-09-28
AnomalyTraffic (node.ce2b59): 94
ReconScanning (node.ce2b59): 3
2026-09-16
AnomalyTraffic (node.ce2b59): 2
ReconScanning (node.ce2b59): 4
AnomalyTraffic (node.6a1878): 1
ReconScanning (node.368407): 2
ReconScanning (node.4dc198): 2
2026-09-15
ReconScanning (node.368407): 3
ReconScanning (node.4dc198): 3
AnomalyTraffic (node.ce2b59): 2
ReconScanning (node.ce2b59): 2
DShield reports (IP summary, reports)
2026-09-13
Number of reports: 160
Distinct targets: 78
2026-09-14
Number of reports: 14
Distinct targets: 7
2026-09-15
Number of reports: 14
Distinct targets: 7
2026-09-16
Number of reports: 114
Distinct targets: 59
2026-09-17
Number of reports: 211
Distinct targets: 62
2026-09-18
Number of reports: 35
Distinct targets: 24
2026-09-19
Number of reports: 35
Distinct targets: 24
2026-09-20
Number of reports: 143
Distinct targets: 58
2026-09-21
Number of reports: 54
Distinct targets: 22
2026-09-22
Number of reports: 15
Distinct targets: 3
2026-09-23
Number of reports: 146
Distinct targets: 115
2026-09-24
Number of reports: 679
Distinct targets: 283
2026-09-25
Number of reports: 679
Distinct targets: 283
2026-09-26
Number of reports: 479
Distinct targets: 192
2026-09-27
Number of reports: 479
Distinct targets: 192
2026-09-28
Number of reports: 1146
Distinct targets: 482
2026-09-29
Number of reports: 541
Distinct targets: 286
2026-09-30
Number of reports: 496
Distinct targets: 232
Origin AS
AS49981 - WorldStream
BGP Prefix
185.4.112.0/22
geo
Netherlands
🕑 Europe/Amsterdam
hostname
ujjpa6.mta.lokin.be
Address block ('inetnum' or 'NetRange' in whois database)
185.4.112.0 - 185.4.115.255
last_activity
2026-09-28 13:38:55
last_warden_event
2026-09-28 13:38:55
rep
0.05257353776999929
reserved_range
0
ts_added
2026-09-14 05:05:03.144000
ts_last_update
2026-10-05 05:11:18.641000

Warden event timeline

DShield event timeline

Presence on blacklists