IP address


.055103.172.135.189
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
25 src login protocol: vnc

OTX pulses
[6a46577996ca3c57eda75cd5] 2026-07-02 12:20:09.500000 | VNC honeypot logs for 2026/07/02
Author name:jnazario
Pulse modified:2026-07-02 12:20:09.500000
Indicator created:2026-07-02 12:20:10
Indicator role:None
Indicator title:
Indicator expiration:2026-08-01 12:00:00
[6a45060aa7e79d7e8a38b222] 2026-07-01 12:20:26.295000 | VNC honeypot logs for 2026/07/01
Author name:jnazario
Pulse modified:2026-07-01 12:20:26.295000
Indicator created:2026-07-01 12:20:27
Indicator role:None
Indicator title:
Indicator expiration:2026-07-31 12:00:00
Origin AS
AS40065 - CNSERVERS
BGP Prefix
103.172.135.0/24
geo
Hong Kong
🕑 Asia/Hong_Kong
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
103.172.134.0 - 103.172.135.255
last_activity
2026-07-02 17:03:07.450000
rep
0.05483870967741933
reserved_range
0
Shodan's InternetDB
Open ports: 443
Tags:
CPEs:
ts_added
2026-07-02 17:03:01.137000
ts_last_update
2026-07-06 17:03:11.600000

Warden event timeline

DShield event timeline

OTX pulses