IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (16)
- 2026-09-04
-
- AttemptLogin (node.00aee5): 12
- Malware (node.00aee5): 1
- IntrusionUserCompromise (node.00aee5): 1
- AttemptLogin (node.ce2b59): 2
- DShield reports (IP summary, reports)
- 2026-09-04
- Number of reports: 288
- Distinct targets: 4
- 2026-09-05
- Number of reports: 369
- Distinct targets: 5
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | |
| 40 | src | login | protocol: ssh port: 22 |
| 25 | src | botnet_drone | |
| 25 | src | — |
- Origin AS
- AS49791 - AS-3HCLOUD
- BGP Prefix
- 45.144.48.0/22
- geo
- Poland, Warsaw
- 🕑 Europe/Warsaw
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 45.144.48.0 - 45.144.51.255
- last_activity
- 2026-09-04 09:36:52
- last_warden_event
- 2026-09-04 09:36:52
- rep
- 0.003242212638564834
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80, 443, 902
- Tags: –
- CPEs: cpe:/a:openbsd:openssh:9.6p1, cpe:/o:canonical:ubuntu_linux
- ts_added
- 2026-09-04 07:42:33.649000
- ts_last_update
- 2026-09-17 07:43:32.037000
Warden event timeline
DShield event timeline
Presence on blacklists

