IP address


.486213.171.9.22
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
Blocklist.net.ua
213.171.9.22 is listed on the Blocklist.net.ua blacklist.

Description: BlockList contains IP addresses that perform attacks,<br>send spam or brute force passwords to the blocking list.
Type of feed: primary (feed detail page)

Last checked at: 2024-10-27 19:15:01.607000
Was present on blacklist at: 2024-10-26 22:15, 2024-10-27 03:15, 2024-10-27 07:15, 2024-10-27 11:15, 2024-10-27 15:15, 2024-10-27 19:15
CI Army
213.171.9.22 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-11-05 03:50:00.972000
Was present on blacklist at: 2024-10-27 03:50, 2024-10-28 03:50, 2024-10-29 03:50, 2024-10-30 03:50, 2024-10-31 03:50, 2024-11-01 03:50, 2024-11-02 03:50, 2024-11-03 03:50, 2024-11-04 03:50, 2024-11-05 03:50
AbuseIPDB
213.171.9.22 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-11-02 05:00:00.489000
Was present on blacklist at: 2024-10-31 05:00, 2024-11-01 05:00, 2024-11-02 05:00
Warden events (323)
2024-11-05
ReconScanning (node.ce2b59): 31
IntrusionUserCompromise (node.cfb4f7): 1
2024-11-04
ReconScanning (node.ce2b59): 32
2024-11-03
ReconScanning (node.ce2b59): 31
2024-11-02
ReconScanning (node.ce2b59): 31
2024-11-01
ReconScanning (node.ce2b59): 31
2024-10-31
ReconScanning (node.ce2b59): 31
2024-10-30
ReconScanning (node.ce2b59): 31
2024-10-29
ReconScanning (node.ce2b59): 32
2024-10-28
ReconScanning (node.ce2b59): 36
2024-10-27
ReconScanning (node.ce2b59): 36
DShield reports (IP summary, reports)
2024-10-26
Number of reports: 16
Distinct targets: 13
2024-10-27
Number of reports: 53
Distinct targets: 39
2024-10-28
Number of reports: 63
Distinct targets: 54
2024-10-29
Number of reports: 84
Distinct targets: 61
2024-10-30
Number of reports: 98
Distinct targets: 67
2024-10-31
Number of reports: 90
Distinct targets: 70
2024-11-01
Number of reports: 138
Distinct targets: 101
2024-11-02
Number of reports: 131
Distinct targets: 88
2024-11-03
Number of reports: 103
Distinct targets: 72
2024-11-04
Number of reports: 125
Distinct targets: 87
Origin AS
AS9123 - TimeWeb-AS
BGP Prefix
213.171.9.0/24
geo
Russia, St Petersburg
🕑 Europe/Moscow
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
213.171.0.0 - 213.171.15.255
last_activity
2024-11-05 23:12:18
last_warden_event
2024-11-05 23:12:18
rep
0.48571428571428577
reserved_range
0
Shodan's InternetDB
Open ports: 22, 80, 443
Tags:
CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1, cpe:/a:f5:nginx:1.26.2
ts_added
2024-10-26 22:30:04.499000
ts_last_update
2024-11-05 23:22:20.125000

Warden event timeline

DShield event timeline

Presence on blacklists