IP address

Search at other sites:

.659112.171.32.21

Shodan(more info)

Passive DNS

IP blacklists

CI Army

112.171.32.21 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-04-05 02:50:00.816000
Was present on blacklist at: 2026-03-25 03:50, 2026-03-27 03:50, 2026-03-28 03:50, 2026-03-30 02:50, 2026-03-31 02:50, 2026-04-05 02:50

AbuseIPDB

112.171.32.21 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-04-08 04:00:00.621000
Was present on blacklist at: 2026-04-08 04:00

Threat categories

TL	Role	Category	Details
58	src	scan	port: 23, 2323
25	src	—

---

Warden events (700)

2026-04-09

ReconScanning (node.ce2b59): 8

2026-04-08

ReconScanning (node.ce2b59): 25

2026-04-07

ReconScanning (node.ce2b59): 31

ReconScanning (node.4dc198): 1

2026-04-06

ReconScanning (node.ce2b59): 31

ReconScanning (node.4dc198): 38

2026-04-05

ReconScanning (node.ce2b59): 31

2026-04-04

ReconScanning (node.ce2b59): 31

ReconScanning (node.4dc198): 1

2026-04-03

ReconScanning (node.ce2b59): 30

ReconScanning (node.4dc198): 3

2026-04-02

ReconScanning (node.ce2b59): 31

ReconScanning (node.4dc198): 1

2026-04-01

ReconScanning (node.ce2b59): 32

ReconScanning (node.4dc198): 6

2026-03-31

ReconScanning (node.ce2b59): 32

ReconScanning (node.4dc198): 20

2026-03-30

ReconScanning (node.ce2b59): 31

ReconScanning (node.4dc198): 52

2026-03-29

ReconScanning (node.ce2b59): 45

ReconScanning (node.4dc198): 16

2026-03-28

ReconScanning (node.ce2b59): 63

ReconScanning (node.4dc198): 1

2026-03-27

ReconScanning (node.ce2b59): 35

2026-03-26

ReconScanning (node.ce2b59): 78

2026-03-25

ReconScanning (node.ce2b59): 22

2026-03-24

ReconScanning (node.4dc198): 5

DShield reports (IP summary, reports)

2026-03-25

Number of reports: 233

Distinct targets: 5

2026-03-26

Number of reports: 233

Distinct targets: 5

2026-03-28

Number of reports: 230

Distinct targets: 5

2026-03-29

Number of reports: 230

Distinct targets: 5

2026-03-30

Number of reports: 2789

Distinct targets: 6

2026-03-31

Number of reports: 2789

Distinct targets: 6

2026-04-01

Number of reports: 839

Distinct targets: 7

2026-04-02

Number of reports: 2174

Distinct targets: 5

2026-04-03

Number of reports: 1253

Distinct targets: 3

Origin AS

AS4766 - KIXS-AS-KR KIXS-AS-KR-KR

BGP Prefix

112.168.0.0/13

geo

South Korea, Gwangmyeong

🕑 Asia/Seoul

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

112.160.0.0 - 112.191.255.255

last_activity

2026-04-09 08:51:48

last_warden_event

2026-04-09 08:51:48

rep

0.6592633928571429

reserved_range

0

Shodan's InternetDB

Open ports: 20002

Tags: iot

CPEs: –

ts_added

2026-03-24 17:23:40.277000

ts_last_update

2026-04-09 08:55:31.609000

Warden event timeline

DShield event timeline

Presence on blacklists