IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (14)
- 2026-10-11
-
- IntrusionUserCompromise (node.cfb4f7): 9
- 2026-10-09
-
- IntrusionUserCompromise (node.cfb4f7): 5
- DShield reports (IP summary, reports)
- 2026-09-17
- Number of reports: 11
- Distinct targets: 5
- 2026-09-18
- Number of reports: 101
- Distinct targets: 60
- 2026-09-19
- Number of reports: 101
- Distinct targets: 60
- 2026-09-24
- Number of reports: 27
- Distinct targets: 24
- 2026-09-25
- Number of reports: 27
- Distinct targets: 24
- 2026-09-26
- Number of reports: 108
- Distinct targets: 82
- 2026-09-27
- Number of reports: 108
- Distinct targets: 82
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 49 | src | login | protocol: ftp, http, telnet port: 21, 23, 80 |
| 25 | src | scan |
- Origin AS
- AS36352 - AS-COLOCROSSING
- BGP Prefix
- 205.234.152.0/24
- geo
- United States, Elk Grove Village
- 🕑 America/Chicago
- hostname
- 205-234-152-230-host.colocrossing.com
- hostname_class
- ['ip_in_hostname']
- Address block ('inetnum' or 'NetRange' in whois database)
- 205.234.128.0 - 205.234.255.255
- last_activity
- 2026-10-11 04:31:32
- last_warden_event
- 2026-10-11 04:31:32
- rep
- 0.023705637393751533
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 1701
- Tags: –
- CPEs: –
- ts_added
- 2026-09-18 02:53:09.956000
- ts_last_update
- 2026-10-13 02:53:11.138000
Warden event timeline
DShield event timeline
Presence on blacklists

