IP address


.420132.243.246.155
Shodan(more info)
Passive DNS
Tags: Login attempts Scanner
IP blacklists
Echelon SSH connection attempt
132.243.246.155 is listed on the Echelon SSH connection attempt blacklist.

Description: SSH connection attempt detected on port 22 or 2222
Type of feed: primary (feed detail page)

Last checked at: 2026-06-04 09:35:00.300000
Was present on blacklist at: 2026-06-02 09:35, 2026-06-03 09:35, 2026-06-04 09:35
Echelon SSH bruteforce
132.243.246.155 is listed on the Echelon SSH bruteforce blacklist.

Description: Multiple SSH authentication attempts detected
Type of feed: primary (feed detail page)

Last checked at: 2026-06-04 09:35:00.400000
Was present on blacklist at: 2026-06-02 09:35, 2026-06-03 09:35, 2026-06-04 09:35
Echelon TLS/SSL crawler
132.243.246.155 is listed on the Echelon TLS/SSL crawler blacklist.

Description: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-06-04 09:40:00.370000
Was present on blacklist at: 2026-06-02 09:40, 2026-06-03 09:40, 2026-06-04 09:40

Threat categories

TLRoleCategoryDetails
39 src login protocol: ssh
port: 22, 2222
30 src scan port: 22, 80, 443, 2222, 2375

Warden events (23)
2026-06-01
ReconScanning (node.ce2b59): 20
AttemptLogin (node.ce2b59): 3
Origin AS
AS26383 - ASNET
BGP Prefix
132.243.246.0/23
geo
Cyprus
🕑 Asia/Nicosia
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
132.243.0.0 - 132.243.255.255
last_activity
2026-06-01 21:56:48
last_warden_event
2026-06-01 21:56:48
rep
0.41993643366879685
reserved_range
0
ts_added
2026-06-01 15:33:38.977000
ts_last_update
2026-06-04 15:33:40.347000

Warden event timeline

DShield event timeline

Presence on blacklists