IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (1679)
- 2025-12-03
-
- ReconScanning (node.9c1411): 3
- 2025-12-02
-
- ReconScanning (node.9c1411): 13
- 2025-12-01
-
- ReconScanning (node.9c1411): 8
- 2025-11-30
-
- ReconScanning (node.9c1411): 11
- 2025-11-29
-
- ReconScanning (node.368407): 82
- ReconScanning (node.4dc198): 82
- AnomalyTraffic (node.ffe95c): 23
- 2025-11-28
-
- ReconScanning (node.4dc198): 95
- ReconScanning (node.368407): 93
- AnomalyTraffic (node.ffe95c): 28
- 2025-11-27
-
- AnomalyTraffic (node.ffe95c): 11
- ReconScanning (node.4dc198): 29
- ReconScanning (node.368407): 29
- 2025-11-16
-
- AnomalyTraffic (node.ffe95c): 25
- ReconScanning (node.368407): 64
- ReconScanning (node.4dc198): 63
- 2025-11-15
-
- AnomalyTraffic (node.ffe95c): 12
- ReconScanning (node.368407): 30
- ReconScanning (node.4dc198): 31
- 2025-11-14
-
- AnomalyTraffic (node.ffe95c): 15
- ReconScanning (node.368407): 41
- ReconScanning (node.4dc198): 42
- 2025-11-10
-
- ReconScanning (node.4dc198): 61
- ReconScanning (node.368407): 62
- AnomalyTraffic (node.ffe95c): 21
- ReconScanning (node.9c1411): 2
- 2025-11-09
-
- AnomalyTraffic (node.ffe95c): 3
- ReconScanning (node.368407): 2
- ReconScanning (node.4dc198): 2
- 2025-11-08
-
- AnomalyTraffic (node.ffe95c): 12
- ReconScanning (node.4dc198): 32
- ReconScanning (node.368407): 33
- 2025-11-05
-
- ReconScanning (node.9c1411): 4
- ReconScanning (node.368407): 1
- ReconScanning (node.4dc198): 1
- 2025-11-04
-
- AnomalyTraffic (node.ffe95c): 33
- ReconScanning (node.4dc198): 87
- ReconScanning (node.368407): 90
- ReconScanning (node.9c1411): 1
- 2025-11-03
-
- AnomalyTraffic (node.ffe95c): 34
- ReconScanning (node.4dc198): 91
- ReconScanning (node.368407): 91
- ReconScanning (node.9c1411): 6
- 2025-10-30
-
- AnomalyTraffic (node.ffe95c): 8
- ReconScanning (node.368407): 10
- ReconScanning (node.4dc198): 11
- ReconScanning (node.9c1411): 2
- 2025-10-29
-
- ReconScanning (node.4dc198): 58
- ReconScanning (node.368407): 58
- AnomalyTraffic (node.ffe95c): 13
- ReconScanning (node.9c1411): 5
- 2025-10-28
-
- AnomalyTraffic (node.ffe95c): 4
- ReconScanning (node.4dc198): 5
- ReconScanning (node.368407): 5
- ReconScanning (node.9c1411): 1
- DShield reports (IP summary, reports)
- 2025-10-28
- Number of reports: 37
- Distinct targets: 34
- 2025-10-29
- Number of reports: 617
- Distinct targets: 164
- 2025-10-30
- Number of reports: 69
- Distinct targets: 43
- 2025-11-03
- Number of reports: 850
- Distinct targets: 161
- 2025-11-04
- Number of reports: 850
- Distinct targets: 161
- 2025-11-09
- Number of reports: 10
- Distinct targets: 9
- 2025-11-10
- Number of reports: 822
- Distinct targets: 167
- 2025-11-11
- Number of reports: 822
- Distinct targets: 167
- 2025-11-14
- Number of reports: 292
- Distinct targets: 201
- 2025-11-15
- Number of reports: 234
- Distinct targets: 158
- 2025-11-16
- Number of reports: 234
- Distinct targets: 158
- 2025-11-17
- Number of reports: 163
- Distinct targets: 95
- 2025-11-18
- Number of reports: 163
- Distinct targets: 95
- 2025-11-27
- Number of reports: 200
- Distinct targets: 143
- 2025-11-28
- Number of reports: 889
- Distinct targets: 208
- 2025-11-29
- Number of reports: 889
- Distinct targets: 208
- Origin AS
- AS201814 - PL-SKYTECH-AS
- BGP Prefix
- 95.214.54.0/23
- geo
- Poland
- 🕑 Europe/Warsaw
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 95.214.52.0 - 95.214.55.255
- last_activity
- 2025-12-03 12:26:10
- last_warden_event
- 2025-12-03 12:26:10
- rep
- 0.32421293712797616
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80, 3000, 3001, 5432
- Tags: eol-product, scanner, database, self-signed
- CPEs: cpe:/o:linux:linux_kernel, cpe:/a:openbsd:openssh:9.2p1, cpe:/o:debian:debian_linux, cpe:/a:expressjs:express, cpe:/a:f5:nginx:1.22.1, cpe:/a:postgresql:postgresql, cpe:/a:nodejs:node.js
- ts_added
- 2025-10-28 23:34:10.861000
- ts_last_update
- 2025-12-06 23:34:20.684000
Warden event timeline
DShield event timeline
Presence on blacklists

