IP address


.16538.134.40.217
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Echelon TLS/SSL crawler
38.134.40.217 is listed on the Echelon TLS/SSL crawler blacklist.

Description: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-08-09 09:40:00.346000
Was present on blacklist at: 2026-08-05 09:40, 2026-08-06 09:40, 2026-08-07 09:40, 2026-08-08 09:40, 2026-08-09 09:40

Threat categories

TLRoleCategoryDetails
25 src scan
25 src

Warden events (3)
2026-08-08
AnomalyTraffic (node.6a1878): 1
2026-08-07
AnomalyTraffic (node.6a1878): 1
2026-08-06
AnomalyTraffic (node.6a1878): 1
Origin AS
AS399646 - SNAJU
BGP Prefix
38.134.40.0/24
geo
United States, Houston
🕑 America/Chicago
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
38.0.0.0 - 38.255.255.255
last_activity
2026-08-08 11:49:15
last_warden_event
2026-08-08 11:49:15
rep
0.16475849762269434
reserved_range
0
Shodan's InternetDB
Open ports: 22, 631
Tags:
CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1
ts_added
2026-08-05 09:40:05.431000
ts_last_update
2026-08-09 09:40:12.025000

Warden event timeline

DShield event timeline

Presence on blacklists