IP address

Search at other sites:
.48931.40.204.166
Shodan(more info)
Passive DNS
Tags: Login attempts
IP blacklists
blocklist.de SSH
31.40.204.166 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-05-17 10:05:00.159000
Was present on blacklist at: 2026-05-14 22:05, 2026-05-15 04:05, 2026-05-15 10:05, 2026-05-15 16:05, 2026-05-15 22:05, 2026-05-16 04:05, 2026-05-16 10:05, 2026-05-16 16:05, 2026-05-16 22:05, 2026-05-17 04:05, 2026-05-17 10:05

Threat categories

TLRoleCategoryDetails
75 src login protocol: ssh
port: 22
62 src scan port: 22
Warden events (1374)
2026-05-17
AttemptLogin (node.4dc198): 96
ReconScanning (node.ce2b59): 8
AttemptLogin (node.368407): 60
ReconScanning (node.4dc198): 1
2026-05-16
AttemptLogin (node.4dc198): 177
AttemptLogin (node.03e7a9): 1
ReconScanning (node.ce2b59): 24
AttemptLogin (node.368407): 99
2026-05-15
AttemptLogin (node.4dc198): 176
ReconScanning (node.ce2b59): 25
AttemptLogin (node.368407): 133
AttemptLogin (node.03e7a9): 32
IntrusionUserCompromise (node.03e7a9): 134
IntrusionUserCompromise (node.e47683): 172
AttemptLogin (node.e47683): 17
2026-05-14
ReconScanning (node.ce2b59): 10
AttemptLogin (node.4dc198): 92
IntrusionUserCompromise (node.28c168): 67
AttemptLogin (node.28c168): 18
AttemptLogin (node.368407): 32
DShield reports (IP summary, reports)
2026-05-15
Number of reports: 11351
Distinct targets: 13
2026-05-16
Number of reports: 2644
Distinct targets: 8
Origin AS
AS44382 - FIBA
BGP Prefix
31.40.204.0/24
geo
Turkey, Istanbul
🕑 Europe/Istanbul
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
31.40.204.0 - 31.40.207.255
last_activity
2026-05-17 12:59:09
last_warden_event
2026-05-17 12:59:09
rep
0.48896150353053613
reserved_range
0
Shodan's InternetDB
Open ports: 443
Tags: self-signed
CPEs: cpe:/a:google:web_server
ts_added
2026-05-14 13:26:54.664000
ts_last_update
2026-05-17 12:59:19.240000

Warden event timeline

DShield event timeline

Presence on blacklists