IP address


.001170.39.214.228
Shodan(more info)
Passive DNS
Tags: Residential proxy
IP blacklists
Echelon TLS/SSL crawler
170.39.214.228 was recently listed on the Echelon TLS/SSL crawler blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-10-01 09:40:00.560000
Was present on blacklist at: 2026-09-12 09:40, 2026-09-13 09:40, 2026-09-14 09:40, 2026-09-15 09:40, 2026-09-16 09:40, 2026-09-17 09:40, 2026-09-18 09:40, 2026-09-23 09:40, 2026-09-24 09:40, 2026-09-25 09:40, 2026-09-26 09:40, 2026-09-27 09:40, 2026-09-28 09:40, 2026-09-29 09:40, 2026-09-30 09:40, 2026-10-01 09:40
Spamhaus XBL CBL
170.39.214.228 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-11-14 09:40:20.190000
Was present on blacklist at: 2026-10-10 09:40, 2026-10-17 09:40

Threat categories

TLRoleCategoryDetails
25 src scan

Warden events (2)
2026-11-04
ReconScanning (node.f90c6b): 1
2026-11-02
ReconScanning (node.f90c6b): 1
DShield reports (IP summary, reports)
2026-10-08
Number of reports: 12
Distinct targets: 4
Residential proxy info (data provided by Layer3 Intel)
Last seen: 2026-11-13 06:04:20}
Percent days seen: 100 %
Networks: OXYLABS, DECODO, BOTTINGTOOLS, BIRDPROXIES, PROXYEMPIRE, 711PROXY, MASKIFY, KOOKEY, GEONODE, PROXYWING, THORDATA, BYTEFUL, FLOPPYDATA, THUNDERPROXY, UNKNOWNPROXIES, PROXY-CHEAP, 9PROXY, INFINITEPROXIES, AKE.NET, PRIVATEPROXY
Details: https://layer3intel.com/context/170.39.214.228
Origin AS
AS397423 - TIER-NET
BGP Prefix
170.39.214.0/24
geo
United States, New York
🕑 America/New_York
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
170.39.212.0 - 170.39.215.255
last_activity
2026-11-04 09:44:32
last_warden_event
2026-11-04 09:44:32
rep
0.0011208104378910289
reserved_range
0
Shodan's InternetDB
Open ports: 500, 1443, 4000, 4500, 7443, 8443, 42738
Tags: vpn
CPEs: –
ts_added
2026-09-12 09:40:14.893000
ts_last_update
2026-11-14 09:40:20.572000

Warden event timeline

DShield event timeline

Presence on blacklists