IP address

Search at other sites:

.060159.223.13.71

Shodan(more info)

Passive DNS

IP blacklists

DataPlane SSH login

159.223.13.71 is listed on the DataPlane SSH login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login to a host using SSH password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-11-29 15:10:01.367000
Was present on blacklist at: 2025-11-22 19:10, 2025-11-23 03:10, 2025-11-23 07:10, 2025-11-23 15:10, 2025-11-23 19:10, 2025-11-24 03:10, 2025-11-24 07:10, 2025-11-24 15:10, 2025-11-24 19:10, 2025-11-25 03:10, 2025-11-25 07:10, 2025-11-25 15:10, 2025-11-25 19:10, 2025-11-26 03:10, 2025-11-26 07:10, 2025-11-26 15:10, 2025-11-26 19:10, 2025-11-27 03:10, 2025-11-27 07:10, 2025-11-27 15:10, 2025-11-27 19:10, 2025-11-28 03:10, 2025-11-28 07:10, 2025-11-28 15:10, 2025-11-28 19:10, 2025-11-29 03:10, 2025-11-29 07:10, 2025-11-29 15:10

blocklist.de SSH

159.223.13.71 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2025-11-24 11:05:00.317000
Was present on blacklist at: 2025-11-22 23:05, 2025-11-23 05:05, 2025-11-23 11:05, 2025-11-23 17:05, 2025-11-23 23:05, 2025-11-24 05:05, 2025-11-24 11:05

Spamhaus SBL CSS

159.223.13.71 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-12-13 10:42:30.201000
Was present on blacklist at: 2025-12-06 10:42, 2025-12-13 10:42

Warden events (19)

2025-12-08

ReconScanning (node.9c1411): 5

2025-12-07

ReconScanning (node.9c1411): 5

2025-11-23

ReconScanning (node.9c1411): 4

2025-11-22

ReconScanning (node.9c1411): 5

Origin AS

AS14061 - DIGITALOCEAN-ASN

BGP Prefix

159.223.0.0/20

geo

Netherlands, Amsterdam

🕑 Europe/Amsterdam

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

159.223.0.0 - 159.223.255.255

last_activity

2025-12-08 21:27:33

last_warden_event

2025-12-08 21:27:33

rep

0.05997023809523809

reserved_range

0

Shodan's InternetDB

Open ports: 21, 24, 25, 26, 66, 80, 88, 102, 110, 111, 113, 122, 131, 221, 234, 311, 444, 445, 513, 515, 522, 541, 631, 636, 811, 943, 1000, 1013, 1023, 1024, 1027, 1234, 1235, 1311, 1337, 1400, 1414, 1433, 1443, 1515, 1521, 1604, 1723, 1800, 1801, 1911, 1926, 1935, 2000, 2003, 2008, 2103, 2111, 2221, 2222, 2233, 2323, 2327, 2332, 2345, 2404, 2435, 2506, 2628, 2701, 3003, 3010, 3102, 3105, 3108, 3112, 3128, 3134, 3136, 3137, 3141, 3144, 3301, 3337, 3345, 3400, 3410, 3522, 3541, 4000, 4021, 4022, 4023, 4040, 4100, 4117, 4243, 4321, 4333, 4430, 4434, 4438, 4443, 4444, 4506, 4510, 4620, 4840, 4911, 5004, 5005, 5007, 5009, 5010, 5011, 5022, 5025, 5140, 5201, 5222, 5223, 5227, 5228, 5233, 5240, 5432, 5435, 5444, 5500, 5601, 5613, 5620, 5800, 5900, 5902, 5919, 6001, 6002, 6008, 6022, 6036, 6308, 6400, 6432, 6433, 6443, 6503, 6633, 7001, 7003, 7012, 7013, 7015, 7218, 7302, 7415, 7434, 7443, 7444, 7445, 7603, 7634, 8000, 8008, 8009, 8010, 8027, 8033, 8035, 8038, 8040, 8042, 8080, 8101, 8106, 8112, 8117, 8120, 8124, 8126, 8139, 8140, 8142, 8145, 8200, 8230, 8318, 8333, 8334, 8410, 8413, 8415, 8423, 8430, 8433, 8440, 8503, 8505, 8506, 8530, 8533, 8545, 8607, 8623, 8701, 8704, 8814, 8819, 8820, 8821, 8827, 8834, 8845, 8906, 8910, 8915, 9000, 9002, 9003, 9007, 9009, 9010, 9013, 9014, 9016, 9021, 9028, 9040, 9045, 9100, 9126, 9131, 9135, 9141, 9144, 9200, 9222, 9241, 9242, 9304, 9333, 9345, 9418, 9441, 9445, 9507, 9513, 9527, 9532, 9611, 9633, 9734, 9800, 9802, 9810, 9908, 9909, 9939, 9943, 10000, 10001, 10015, 10036, 10040, 10100, 10101, 10123, 10134, 10302, 10443, 10909, 10911, 10935, 11000, 11110, 11211, 11300, 11434

Tags: cloud

CPEs: –

ts_added

2025-11-22 10:42:27.976000

ts_last_update

2025-12-15 10:42:30.391000

Warden event timeline

DShield event timeline

Presence on blacklists