IoC Investigation

223.29.254.28

IP IN DATABASE

IP Address · threat 0.50 · 2× seen · 0 datasets · IP Blocklists · last seen 5d ago

🔄 Pivot:📁 IP Blocklists

Threat Score

0.50

Sightings

2
0 sources

Detected Type

IP

Enrichments

0

Related IoCs

20
IP Profile Dossier → Full OSINT Pivot + Case Create Case Takedown Export STIX/MISP ← Browse All

Network & Geo

ASN-
Organization-
Netblock-
Country-
City / Region-
Reverse DNS-

Local netblock/geo from ip_ranges dataset. Full live enrichment (AbuseIPDB, Shodan, GreyNoise) on the IP dossier.

Seen in Datasets (0)

Not linked to any dataset.

OSINT Pivots

Full OSINT (30+ lookups) ↗ VirusTotal ↗ AbuseIPDB ↗ Shodan ↗ Censys ↗ GreyNoise ↗ BGP.HE ↗ ThreatFox Link Analysis ↗ OpenSanctions

Related Indicators (20)

Indicators sharing the same category.

IndicatorTypeCategoryThreat
217.181.86.77 IP IP Blocklists investigate →
217.181.85.70 IP IP Blocklists investigate →
212.119.46.177 IP IP Blocklists investigate →
196.245.249.198 IP IP Blocklists investigate →
196.245.184.142 IP IP Blocklists investigate →
196.242.178.228 IP IP Blocklists investigate →
196.242.20.67 IP IP Blocklists investigate →
196.196.53.108 IP IP Blocklists investigate →
195.63.20.177 IP IP Blocklists investigate →
191.101.114.130 IP IP Blocklists investigate →
191.96.252.190 IP IP Blocklists investigate →
185.65.201.205 IP IP Blocklists investigate →
176.67.86.37 IP IP Blocklists investigate →
168.228.46.103 IP IP Blocklists investigate →
167.253.18.234 IP IP Blocklists investigate →
165.231.101.135 IP IP Blocklists investigate →
158.173.155.192 IP IP Blocklists investigate →
158.173.21.233 IP IP Blocklists investigate →
157.22.125.70 IP IP Blocklists investigate →
154.196.35.96 IP IP Blocklists investigate →

Copy as STIX 2.1 

{
    "type": "indicator",
    "spec_version": "2.1",
    "id": "indicator--dd033363-fdd0-43e3-df24-000054e3375c",
    "created": "2026-09-11T18:50:13Z",
    "modified": "2026-09-11T18:50:13Z",
    "name": "IP Address: 223.29.254.28",
    "pattern": "[ipv4-addr:value = '223.29.254.28']",
    "pattern_type": "stix",
    "valid_from": "2026-09-11T18:50:13Z",
    "labels": [
        "ip blocklists"
    ],
    "confidence": 50
}

Linked Cases (0)

Not linked to any case yet.

+ Add to Case Create Alert
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center