IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Origin AS
- AS16509 - AMAZON-02
- BGP Prefix
- 13.244.0.0/15
- geo
- South Africa, Cape Town
- 🕑 Africa/Johannesburg
- hostname
- ec2-13-245-196-7.af-south-1.compute.amazonaws.com
- hostname_class
- ['ip_in_hostname']
- Address block ('inetnum' or 'NetRange' in whois database)
- 13.244.0.0 - 13.247.255.255
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 17, 19, 21, 25, 49, 66, 69, 79, 80, 81, 82, 84, 86, 88, 102, 104, 110, 119, 122, 129, 137, 161, 199, 221, 347, 389, 443, 444, 447, 502, 503, 515, 520, 548, 555, 631, 636, 789, 811, 873, 992, 993, 1002, 1024, 1099, 1153, 1234, 1311, 1364, 1400, 1414, 1443, 1454, 1456, 1458, 1471, 1521, 1701, 1723, 2000, 2002, 2067, 2081, 2082, 2083, 2086, 2087, 2096, 2154, 2222, 2323, 2404, 2444, 2551, 2566, 2567, 2762, 3000, 3001, 3011, 3015, 3050, 3099, 3100, 3107, 3129, 3149, 3162, 3190, 3197, 3268, 3269, 3270, 3301, 3306, 3345, 3388, 3389, 3400, 3405, 3521, 3542, 3689, 3690, 3749, 3780, 3790, 4040, 4063, 4120, 4150, 4321, 4369, 4435, 4443, 4444, 4500, 4506, 4572, 4643, 4782, 4848, 4911, 5007, 5025, 5089, 5172, 5222, 5228, 5245, 5251, 5266, 5269, 5270, 5279, 5353, 5431, 5432, 5595, 5599, 5606, 5683, 5801, 5858, 5900, 5901, 5914, 5938, 6000, 6020, 6080, 6379, 6440, 6590, 6633, 6668, 6688, 7006, 7082, 7105, 7171, 7218, 7400, 7415, 7434, 7634, 7657, 7687, 7777, 7799, 8001, 8008, 8009, 8027, 8042, 8043, 8060, 8068, 8071, 8072, 8083, 8085, 8087, 8096, 8117, 8143, 8148, 8152, 8164, 8186, 8188, 8291, 8316, 8411, 8419, 8421, 8443, 8456, 8480, 8504, 8514, 8548, 8567, 8568, 8575, 8588, 8594, 8598, 8623, 8641, 8643, 8649, 8728, 8805, 8834, 8838, 8842, 8844, 8846, 8855, 8861, 8862, 8871, 8889, 8890, 8900, 9001, 9037, 9038, 9043, 9047, 9079, 9080, 9089, 9095, 9100, 9108, 9114, 9115, 9178, 9181, 9301, 9313, 9333, 9443, 9510, 9682, 9704, 9711, 9758, 9800, 9869, 9943, 9998, 10029, 10051, 10084, 10100, 10106, 10134, 10180, 10181, 10243, 10250, 10443, 10911, 11112, 11211, 11288, 11434, 11443, 11920, 12171, 12178, 12179, 12204, 12213, 12223, 12231, 12257, 12303, 12329, 12334, 12368, 12389, 12401, 12418, 12423, 12455, 12487, 12503, 12525, 12526, 12539, 12547, 12559, 12571, 12580, 12582, 13380, 13579, 14147, 14523, 14909, 15555, 16010, 16028, 16038, 16046, 16096, 16403, 16992, 17020, 17185, 18010, 18026, 18035, 18062, 18069, 18073, 18081, 18094, 18099, 18181, 19000, 19014, 19017, 19082, 19132, 19902, 20000, 20070, 20087, 20256, 20443, 20547, 20880, 21230, 21231, 21232, 21265, 21270, 21277, 21308, 21319, 21379, 22103, 23023, 23182, 24442, 28015, 28017, 28443, 30007, 30110, 30112, 30120, 30444, 31444, 32764, 33060, 41800, 42420, 42901, 44158, 44304, 44320, 44818, 45777, 48100, 48899, 49688, 50000, 50001, 50050, 50100, 52230, 53483, 53484, 55442, 55470, 55554, 57786, 57787
- Tags: eol-product, ai, self-signed, database, cloud, honeypot
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:getbootstrap:bootstrap, cpe:/a:jquery:jquery:1.9.1, cpe:/a:atlassian:confluence, cpe:/o:linux:linux_kernel, cpe:/a:jquery:jquery_ui:1.8.2, cpe:/a:jquery:jquery_ui, cpe:/o:microsoft:windows, cpe:/a:f5:nginx, cpe:/a:jquery:jquery:3.5.1, cpe:/a:jquery:jquery, cpe:/a:redislabs:redis:5.0.5, cpe:/a:angularjs:angular.js:1.6.5, cpe:/a:php:php:5.5.9, cpe:/a:php:php:5.4.7, cpe:/o:paloaltonetworks:pan-os, cpe:/a:select2:select2, cpe:/a:openbsd:openssh:4.6p1, cpe:/a:apache:http_server, cpe:/a:jquery:jquery:1.7.1, cpe:/a:php:php:5.4.45, cpe:/a:eclipse:jetty:9.4.9, cpe:/a:oracle:jre
- ts_added
- 2025-06-20 10:10:01.154000
- ts_last_update
- 2025-06-21 06:10:06.847000
Warden event timeline
DShield event timeline
Presence on blacklists