IP address

Search at other sites:

.191196.40.54.160

Shodan(more info)

Passive DNS

IP blacklists

spamhaus-pbl

196.40.54.160 is listed on the spamhaus-pbl blacklist.

Description:
Type of feed: (feed detail page)

Last checked at: 2026-05-31 07:25:10.057000
Was present on blacklist at: 2026-05-10 07:25, 2026-05-17 07:25, 2026-05-24 07:25, 2026-05-31 07:25

Echelon telnet bruteforce

196.40.54.160 is listed on the Echelon telnet bruteforce blacklist.

Description: Multiple telnet authentication attempts detected
Type of feed: primary (feed detail page)

Last checked at: 2026-06-03 09:45:00.272000
Was present on blacklist at: 2026-05-28 09:45, 2026-05-29 09:45, 2026-05-30 09:45, 2026-05-31 09:45, 2026-06-01 09:45, 2026-06-02 09:45, 2026-06-03 09:45

Threat categories

TL	Role	Category	Details
57	src	scan	port: 23
25	src	login	protocol: telnet

---

Warden events (73)

2026-05-28

ReconScanning (node.ce2b59): 3

2026-05-27

ReconScanning (node.ce2b59): 22

2026-05-26

ReconScanning (node.ce2b59): 17

2026-05-25

ReconScanning (node.ce2b59): 17

2026-05-24

ReconScanning (node.ce2b59): 8

2026-05-20

ReconScanning (node.9c1411): 1

2026-05-16

ReconScanning (node.9c1411): 2

2026-05-11

ReconScanning (node.9c1411): 1

2026-05-10

ReconScanning (node.9c1411): 2

DShield reports (IP summary, reports)

2026-05-28

Number of reports: 20

Distinct targets: 9

Origin AS

AS3790 - LACNIC-3790

BGP Prefix

196.40.52.0/22

geo

Costa Rica, San José

🕑 America/Costa_Rica

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

196.40.0.0 - 196.40.63.255

last_activity

2026-05-28 02:03:12

last_warden_event

2026-05-28 02:03:12

rep

0.19081693027249869

reserved_range

0

ts_added

2026-05-10 07:25:03.188000

ts_last_update

2026-06-04 07:25:10.210000

Warden event timeline

DShield event timeline

Presence on blacklists