IP address
Shodan(more info)

Passive DNS

- Warden events (4)
- 2026-09-21
-
- IntrusionUserCompromise (node.cfb4f7): 1
- 2026-09-19
-
- IntrusionUserCompromise (node.cfb4f7): 1
- 2026-09-16
-
- IntrusionUserCompromise (node.cfb4f7): 1
- 2026-09-15
-
- IntrusionUserCompromise (node.cfb4f7): 1
- DShield reports (IP summary, reports)
- 2026-09-21
- Number of reports: 21
- Distinct targets: 3
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | |
| 25 | src | login | protocol: ftp port: 21 |
- Origin AS
- AS61317 - ASDETUK
- BGP Prefix
- 154.16.206.0/24
- geo
- South Africa
- 🕑 Africa/Johannesburg
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 154.16.0.0 - 154.16.255.255
- last_activity
- 2026-09-21 01:59:40
- last_warden_event
- 2026-09-21 01:59:40
- rep
- 0.0011236498476028256
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 80, 4444, 7777, 55555
- Tags: proxy
- CPEs: –
- ts_added
- 2026-09-15 19:35:03.468000
- ts_last_update
- 2026-10-01 19:35:10.456000
Warden event timeline
DShield event timeline

