IP address

Search at other sites:

.00244.220.185.56scanner-44-220-185-56.reposify.net

Shodan(more info)

Passive DNS

IP blacklists

Echelon TLS/SSL crawler

44.220.185.56 was recently listed on the Echelon TLS/SSL crawler blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-10-18 09:40:03.061000
Was present on blacklist at: 2026-08-07 09:40, 2026-08-08 09:40, 2026-08-09 09:40, 2026-08-16 09:40, 2026-08-17 09:40, 2026-08-18 09:40, 2026-08-19 09:40, 2026-08-20 09:40, 2026-08-21 09:40, 2026-08-22 09:40, 2026-08-23 09:40, 2026-09-01 09:40, 2026-09-02 09:40, 2026-09-03 09:40, 2026-09-04 09:40, 2026-09-05 09:40, 2026-09-06 09:40, 2026-09-07 09:40, 2026-10-12 09:40, 2026-10-13 09:40, 2026-10-14 09:40, 2026-10-15 09:40, 2026-10-16 09:40, 2026-10-17 09:40, 2026-10-18 09:40

Spamhaus SBL CSS

44.220.185.56 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-11-01 14:43:40.081000
Was present on blacklist at: 2026-09-13 14:43, 2026-09-20 14:43

Spamhaus XBL CBL

44.220.185.56 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-11-01 14:43:40.081000
Was present on blacklist at: 2026-08-23 14:43, 2026-09-13 14:43, 2026-09-20 14:43

Echelon web crawler

44.220.185.56 was recently listed on the Echelon web crawler blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-08-18 09:50:00.443000
Was present on blacklist at: 2026-08-12 09:50, 2026-08-13 09:50, 2026-08-14 09:50, 2026-08-15 09:50, 2026-08-16 09:50, 2026-08-17 09:50, 2026-08-18 09:50

Threat categories

TL	Role	Category	Details
25	src	login	protocol: ftp port: 21

---

Warden events (17)

2026-10-30

IntrusionUserCompromise (node.cfb4f7): 1

2026-10-25

IntrusionUserCompromise (node.cfb4f7): 1

2026-10-14

IntrusionUserCompromise (node.cfb4f7): 1

2026-10-03

IntrusionUserCompromise (node.cfb4f7): 1

2026-09-29

IntrusionUserCompromise (node.cfb4f7): 1

2026-09-28

IntrusionUserCompromise (node.cfb4f7): 1

2026-09-22

IntrusionUserCompromise (node.cfb4f7): 1

2026-09-20

IntrusionUserCompromise (node.cfb4f7): 1

2026-09-17

IntrusionUserCompromise (node.cfb4f7): 1

2026-09-11

IntrusionUserCompromise (node.cfb4f7): 1

2026-09-09

IntrusionUserCompromise (node.cfb4f7): 1

2026-09-03

IntrusionUserCompromise (node.cfb4f7): 1

2026-08-27

IntrusionUserCompromise (node.cfb4f7): 1

2026-08-24

IntrusionUserCompromise (node.cfb4f7): 3

2026-08-15

IntrusionUserCompromise (node.cfb4f7): 1

DShield reports (IP summary, reports)

2026-09-13

Number of reports: 30

Distinct targets: 3

Origin AS

AS14618 - AMAZON-AES

BGP Prefix

44.192.0.0/11

geo

United States, Ashburn

🕑 America/New_York

hostname

scanner-44-220-185-56.reposify.net

hostname_class

['ip_in_hostname']

Address block ('inetnum' or 'NetRange' in whois database)

44.192.0.0 - 44.255.255.255

last_activity

2026-10-30 09:55:37

last_warden_event

2026-10-30 09:55:37

rep

0.0024284226154304145

reserved_range

0

ts_added

2026-06-14 14:43:35.008000

ts_last_update

2026-11-04 14:43:40.257000

Warden event timeline

DShield event timeline

Presence on blacklists