IP address
Shodan(more info)

Passive DNS

- Warden events (18)
- 2026-09-24
-
- ReconScanning (node.f90c6b): 1
- 2026-09-20
-
- ReconScanning (node.86eb21): 1
- 2026-09-15
-
- ReconScanning (node.86eb21): 1
- 2026-09-12
-
- ReconScanning (node.86eb21): 1
- 2026-09-09
-
- ReconScanning (node.86eb21): 1
- 2026-09-06
-
- ReconScanning (node.86eb21): 1
- 2026-09-05
-
- ReconScanning (node.86eb21): 1
- 2026-08-22
-
- ReconScanning (node.86eb21): 1
- 2026-08-21
-
- ReconScanning (node.86eb21): 1
- 2026-08-07
-
- ReconScanning (node.86eb21): 1
- 2026-08-04
-
- ReconScanning (node.86eb21): 1
- 2026-08-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-29
-
- ReconScanning (node.86eb21): 1
- 2026-07-21
-
- ReconScanning (node.86eb21): 1
- 2026-07-20
-
- ReconScanning (node.86eb21): 1
- 2026-07-19
-
- ReconScanning (node.86eb21): 1
- 2026-07-16
-
- ReconScanning (node.86eb21): 1
- 2026-07-15
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-07-26
- Number of reports: 112
- Distinct targets: 17
- 2026-07-27
- Number of reports: 112
- Distinct targets: 17
- 2026-07-28
- Number of reports: 13
- Distinct targets: 3
- 2026-07-29
- Number of reports: 13
- Distinct targets: 3
- 2026-08-05
- Number of reports: 96
- Distinct targets: 15
- 2026-08-12
- Number of reports: 84
- Distinct targets: 15
- 2026-08-18
- Number of reports: 80
- Distinct targets: 14
- 2026-08-19
- Number of reports: 80
- Distinct targets: 14
- 2026-08-26
- Number of reports: 92
- Distinct targets: 16
- 2026-09-01
- Number of reports: 108
- Distinct targets: 17
- 2026-09-02
- Number of reports: 108
- Distinct targets: 17
- 2026-09-08
- Number of reports: 17
- Distinct targets: 4
- 2026-09-09
- Number of reports: 108
- Distinct targets: 14
- 2026-09-22
- Number of reports: 84
- Distinct targets: 12
- 2026-09-30
- Number of reports: 88
- Distinct targets: 13
- 2026-10-07
- Number of reports: 84
- Distinct targets: 13
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan |
- Origin AS
- AS51167 - CONTABO
- BGP Prefix
- 149.102.128.0/21
- geo
- United Kingdom, Portsmouth
- 🕑 Europe/London
- hostname
- vmi1344452.contaboserver.net
- Address block ('inetnum' or 'NetRange' in whois database)
- 149.102.0.0 - 149.102.255.255
- last_activity
- 2026-09-24 02:14:52
- last_warden_event
- 2026-09-24 02:14:52
- rep
- 0.00020290662428679163
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 13, 15, 17, 25, 26, 38, 43, 70, 80, 81, 82, 83, 88, 91, 97, 104, 113, 119, 121, 122, 135, 139, 143, 175, 179, 221, 234, 311, 340, 343, 389, 400, 427, 444, 445, 448, 451, 465, 477, 502, 503, 515, 541, 587, 593, 636, 666, 771, 777, 805, 806, 843, 873, 992, 995, 1024, 1025, 1026, 1177, 1200, 1207, 1224, 1234, 1244, 1283, 1292, 1365, 1377, 1433, 1471, 1515, 1521, 1554, 1588, 1604, 1660, 1720, 1723, 1800, 1801, 1926, 1947, 1951, 1962, 1964, 1965, 1985, 1989, 2000, 2008, 2050, 2052, 2067, 2082, 2086, 2087, 2096, 2101, 2109, 2121, 2126, 2150, 2181, 2200, 2209, 2222, 2233, 2271, 2353, 2382, 2404, 2423, 2455, 2480, 2506, 2525, 2558, 2559, 2570, 2628, 2709, 2762, 3000, 3001, 3007, 3008, 3017, 3018, 3021, 3052, 3057, 3065, 3075, 3089, 3100, 3110, 3121, 3128, 3130, 3144, 3149, 3154, 3170, 3175, 3188, 3193, 3197, 3211, 3268, 3269, 3299, 3301, 3310, 3365, 3388, 3389, 3404, 3460, 3479, 3498, 3542, 3549, 3551, 3555, 3558, 3559, 3566, 3569, 3689, 3780, 3790, 3952, 4000, 4001, 4022, 4023, 4040, 4150, 4190, 4243, 4250, 4282, 4369, 4401, 4402, 4410, 4437, 4443, 4444, 4449, 4499, 4500, 4506, 4522, 4524, 4545, 4550, 4567, 4572, 4664, 4734, 4840, 4899, 4911, 4933, 4993, 4999, 5005, 5006, 5007, 5009, 5010, 5022, 5025, 5119, 5135, 5190, 5201, 5222, 5228, 5231, 5232, 5235, 5242, 5243, 5253, 5254, 5257, 5261, 5269, 5276, 5351, 5357, 5432, 5435, 5555, 5560, 5568, 5593, 5601, 5603, 5671, 5678, 5680, 5800, 5804, 5858, 5901, 5918, 5920, 5938, 5984, 5985, 5995, 6050, 6080, 6102, 6124, 6380, 6432, 6565, 6600, 6633, 6650, 6653, 6664, 6666, 6789, 6799, 6887, 7000, 7001, 7003, 7010, 7022, 7071, 7078, 7171, 7172, 7283, 7433, 7441, 7474, 7480, 7493, 7547, 7548, 7643, 7657, 7777, 7788, 7900, 7989, 8000, 8008, 8009, 8010, 8015, 8019, 8023, 8034, 8035, 8042, 8049, 8057, 8066, 8069, 8081, 8083, 8085, 8086, 8090, 8091, 8097, 8099, 8118, 8134, 8140, 8144, 8148, 8151, 8157, 8159, 8160, 8186, 8188, 8200, 8248, 8249, 8283, 8291, 8300, 8333, 8334, 8350, 8401, 8403, 8412, 8433, 8441, 8443, 8448, 8451, 8461, 8465, 8470, 8480, 8482, 8484, 8506, 8523, 8524, 8525, 8528, 8532, 8545, 8548, 8554, 8557, 8560, 8566, 8573, 8581, 8583, 8588, 8591, 8595, 8600, 8601, 8605, 8641, 8649, 8701, 8707, 8708, 8728, 8733, 8771, 8779, 8790, 8800, 8802, 8807, 8811, 8813, 8825, 8834, 8841, 8846, 8847, 8857, 8876, 8880, 8883, 8886, 8888, 8943, 9000, 9001, 9003, 9009, 9027, 9028, 9033, 9040, 9042, 9043, 9049, 9051, 9064, 9065, 9073, 9074, 9080, 9090, 9094, 9095, 9096, 9100, 9105, 9124, 9133, 9140, 9153, 9160, 9176, 9191, 9200, 9214, 9215, 9221, 9222, 9246, 9281, 9292, 9295, 9306, 9311, 9333, 9345, 9398, 9418, 9447, 9454, 9455, 9480, 9505, 9550, 9595, 9600, 9696, 9743, 9761, 9810, 9861, 9876, 9899, 9926, 9929, 9944, 9977, 9999, 20000
- Tags: self-signed, honeypot
- CPEs: –
- ts_added
- 2026-02-27 05:02:37.469000
- ts_last_update
- 2026-10-09 05:04:53.979000
Warden event timeline
DShield event timeline

