IP address


.0082.27.154.196
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
50 src scan port: many
50 src login protocol: http, ssh, telnet
port: 22, 23, 80

Warden events (296)
2026-11-01
ReconScanning (node.ce2b59): 25
ReconScanning (node.4dc198): 66
ReconScanning (node.368407): 63
IntrusionUserCompromise (node.cfb4f7): 134
AttemptLogin (node.ce2b59): 1
IntrusionUserCompromise (node.40929a): 7
Origin AS
AS218877 -
BGP Prefix
2.27.154.0/24
geo
United States
🕑 America/Chicago
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
2.24.0.0 - 2.31.255.255
last_activity
2026-11-01 15:54:20
last_warden_event
2026-11-01 15:54:20
rep
0.007840221949555803
reserved_range
0
Shodan's InternetDB
Open ports: 80, 3389
Tags: eol-product
CPEs: cpe:/a:f5:nginx:1.24.0, cpe:/o:canonical:ubuntu_linux, cpe:/o:linux:linux_kernel
ts_added
2026-11-01 08:52:48.563000
ts_last_update
2026-11-14 08:52:50.484000

Warden event timeline

DShield event timeline