IP address


.00585.234.81.18rsa.ipip.net
Shodan(more info)
Passive DNS
Tags: Scanner

Threat categories

TLRoleCategoryDetails
36 src
25 src scan port: 0

Warden events (34)
2026-07-09
AnomalyTraffic (node.ce2b59): 2
2026-06-28
AnomalyTraffic (node.ce2b59): 1
ReconScanning (node.ce2b59): 1
2026-06-24
ReconScanning (node.ce2b59): 1
2026-06-23
AnomalyTraffic (node.ce2b59): 2
2026-06-14
AnomalyTraffic (node.ce2b59): 2
2026-06-10
AnomalyTraffic (node.ce2b59): 2
2026-06-08
AnomalyTraffic (node.ce2b59): 3
2026-06-06
AnomalyTraffic (node.ce2b59): 1
2026-06-05
AnomalyTraffic (node.ce2b59): 2
2026-05-28
ReconScanning (node.ce2b59): 1
AnomalyTraffic (node.ce2b59): 2
2026-05-27
ReconScanning (node.ce2b59): 1
2026-05-21
AnomalyTraffic (node.ce2b59): 2
2026-05-19
AnomalyTraffic (node.ce2b59): 1
2026-05-18
AnomalyTraffic (node.ce2b59): 2
2026-05-09
AnomalyTraffic (node.ce2b59): 4
2026-05-07
AnomalyTraffic (node.ce2b59): 1
2026-05-03
AnomalyTraffic (node.ce2b59): 1
2026-04-23
AnomalyTraffic (node.ce2b59): 1
2026-04-19
ReconScanning (node.9c1411): 1
Origin AS
AS199524 - GCORE
BGP Prefix
85.234.81.0/24
geo
South Africa, Johannesburg
🕑 Africa/Johannesburg
hostname
rsa.ipip.net
Address block ('inetnum' or 'NetRange' in whois database)
85.234.64.0 - 85.234.95.255
last_activity
2026-07-09 13:55:12
last_warden_event
2026-07-09 13:55:12
rep
0.005416408884255208
reserved_range
0
Shodan's InternetDB
Open ports: 22
Tags:
CPEs: cpe:/a:openbsd:openssh:8.0
ts_added
2026-03-19 20:55:26.089000
ts_last_update
2026-07-10 20:55:30.176000

Warden event timeline

DShield event timeline