IP address


.07672.217.55.28ip72-217-55-28.ph.ph.cox.net
Shodan(more info)
Passive DNS
Tags: IP in hostname
IP blacklists
DataPlane SSH login
72.217.55.28 is listed on the DataPlane SSH login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login to a host using SSH password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-07-03 06:10:01.385000
Was present on blacklist at: 2025-06-29 14:10, 2025-06-29 18:10, 2025-06-29 22:10, 2025-06-30 02:10, 2025-06-30 06:10, 2025-06-30 10:10, 2025-06-30 14:10, 2025-06-30 18:10, 2025-06-30 22:10, 2025-07-01 02:10, 2025-07-01 06:10, 2025-07-01 10:10, 2025-07-01 14:10, 2025-07-01 18:10, 2025-07-01 22:10, 2025-07-02 02:10, 2025-07-02 06:10, 2025-07-02 10:10, 2025-07-02 14:10, 2025-07-02 18:10, 2025-07-02 22:10, 2025-07-03 02:10, 2025-07-03 06:10
Warden events (6)
2025-06-29
IntrusionUserCompromise (node.40929a): 2
2025-06-28
IntrusionUserCompromise (node.40929a): 4
Origin AS
AS22773 - ASN-CXA-ALL-CCI-22773-RDC
BGP Prefix
72.217.0.0/18
geo
United States, Chandler
🕑 America/Phoenix
hostname
ip72-217-55-28.ph.ph.cox.net
hostname_class
['isp', 'ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database)
72.192.0.0 - 72.223.255.255
last_activity
2025-06-29 01:24:55.043000
last_warden_event
2025-06-29 01:24:55.043000
rep
0.07589285714285715
reserved_range
0
ts_added
2025-06-29 06:31:54.126000
ts_last_update
2025-07-03 06:32:02.115000

Warden event timeline

DShield event timeline

Presence on blacklists