IP address


.6472.31.66.237static.237.66.31.2.clients.your-server.de
Shodan(more info)
Passive DNS
Tags: Static IP IP in hostname
IP blacklists
Echelon CGI script hunt
2.31.66.237 is listed on the Echelon CGI script hunt blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Scanning for vulnerable CGI scripts
Type of feed: primary (feed detail page)

Last checked at: 2026-11-10 10:05:01.087000
Was present on blacklist at: 2026-11-09 10:05, 2026-11-10 10:05
Echelon admin panel hunt
2.31.66.237 is listed on the Echelon admin panel hunt blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Scanning for administrative interfaces
Type of feed: primary (feed detail page)

Last checked at: 2026-11-10 10:05:04.268000
Was present on blacklist at: 2026-11-09 10:05, 2026-11-10 10:05
Echelon port scan
2.31.66.237 is listed on the Echelon port scan blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Scanning 5+ ports on target host
Type of feed: primary (feed detail page)

Last checked at: 2026-11-10 10:25:00.399000
Was present on blacklist at: 2026-11-09 10:25, 2026-11-10 10:25
Echelon router exploit
2.31.66.237 is listed on the Echelon router exploit blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Attempting router firmware exploits (Netgear, D-Link, etc.)
Type of feed: primary (feed detail page)

Last checked at: 2026-11-10 10:30:00.929000
Was present on blacklist at: 2026-11-09 10:30, 2026-11-10 10:30
Echelon TLS/SSL crawler
2.31.66.237 is listed on the Echelon TLS/SSL crawler blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-11-10 10:40:00.981000
Was present on blacklist at: 2026-11-09 10:40, 2026-11-10 10:40
Echelon web crawler
2.31.66.237 is listed on the Echelon web crawler blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-11-10 10:50:00.733000
Was present on blacklist at: 2026-11-09 10:50, 2026-11-10 10:50

Threat categories

TLRoleCategoryDetails
61 src scan
25 src exploit

DShield reports (IP summary, reports)
2026-11-09
Number of reports: 236
Distinct targets: 75
Origin AS
AS24940 - HETZNER-AS
BGP Prefix
2.31.0.0/16
geo
Germany, Falkenstein
🕑 Europe/Berlin
hostname
static.237.66.31.2.clients.your-server.de
hostname_class
['ip_in_hostname', 'static']
Address block ('inetnum' or 'NetRange' in whois database)
2.24.0.0 - 2.31.255.255
rep
0.647143439255891
reserved_range
0
ts_added
2026-11-09 10:05:01.603000
ts_last_update
2026-11-10 10:51:10.713000

Warden event timeline

DShield event timeline

Presence on blacklists