IP address


.3535.39.218.156
Shodan(more info)
Passive DNS
Tags:
IP blacklists
AbuseIPDB
5.39.218.156 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-09-12 04:00:00.710000
Was present on blacklist at: 2026-09-12 04:00

Threat categories

TLRoleCategoryDetails
50 src scan port: many
31 src

Warden events (737)
2026-09-13
ReconScanning (node.368407): 9
ReconScanning (node.f90c6b): 9
ReconScanning (node.ce2b59): 2
2026-09-12
ReconScanning (node.368407): 286
ReconScanning (node.f90c6b): 293
ReconScanning (node.ce2b59): 43
2026-09-11
AnomalyTraffic (node.6a1878): 2
ReconScanning (node.368407): 40
ReconScanning (node.f90c6b): 44
ReconScanning (node.ce2b59): 9
Origin AS
AS57043 - HOSTKEY-AS
BGP Prefix
5.39.218.0/24
geo
Netherlands, Amsterdam
🕑 Europe/Amsterdam
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
5.39.216.0 - 5.39.223.255
last_activity
2026-09-13 00:40:27
last_warden_event
2026-09-13 00:40:27
rep
0.3527425340743382
reserved_range
0
Shodan's InternetDB
Open ports: 22, 2222, 3389
Tags:
CPEs: cpe:/a:openbsd:openssh:9.6p1, cpe:/a:openbsd:openssh:for_Windows_9.5, cpe:/o:canonical:ubuntu_linux
ts_added
2026-09-11 18:40:54.716000
ts_last_update
2026-09-13 01:08:18.844000

Warden event timeline

DShield event timeline

Presence on blacklists