IP address


.003191.217.203.200
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
50 src scan
47 src login protocol: telnet
port: 23
25 src —

Warden events (4)
2026-11-05
IntrusionUserCompromise (node.cfb4f7): 4
DShield reports (IP summary, reports)
2026-11-05
Number of reports: 15
Distinct targets: 7
Origin AS
AS218877 -
BGP Prefix
191.217.203.0/24
geo
Netherlands, Amsterdam
🕑 Europe/Amsterdam
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
191.217.192.0 - 191.217.255.255
last_activity
2026-11-05 17:53:23.571000
last_warden_event
2026-11-05 14:40:52
rep
0.0033830495639609603
reserved_range
0
Shodan's InternetDB
Open ports: 22, 80
Tags: eol-product
CPEs: cpe:/a:f5:nginx:1.26.3, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1
ts_added
2026-11-05 14:38:40.916000
ts_last_update
2026-11-14 14:38:50.109000

Warden event timeline

DShield event timeline