IP address
Search at other sites: 
.002149.102.134.148vmi1344452.contaboserver.net
Shodan(more info)
Passive DNS
- Warden events (16)
- 2026-07-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-27
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-17
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 2
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-04-20
- Number of reports: 72
- Distinct targets: 11
- 2026-04-21
- Number of reports: 30
- Distinct targets: 6
- 2026-04-22
- Number of reports: 44
- Distinct targets: 6
- 2026-04-29
- Number of reports: 86
- Distinct targets: 13
- 2026-04-30
- Number of reports: 86
- Distinct targets: 13
- 2026-05-09
- Number of reports: 24
- Distinct targets: 3
- 2026-05-14
- Number of reports: 76
- Distinct targets: 11
- 2026-05-20
- Number of reports: 80
- Distinct targets: 11
- 2026-06-02
- Number of reports: 28
- Distinct targets: 4
- 2026-06-03
- Number of reports: 28
- Distinct targets: 4
- 2026-06-09
- Number of reports: 102
- Distinct targets: 17
- 2026-06-10
- Number of reports: 102
- Distinct targets: 17
- 2026-06-16
- Number of reports: 28
- Distinct targets: 4
- 2026-07-01
- Number of reports: 16
- Distinct targets: 3
- 2026-07-02
- Number of reports: 55
- Distinct targets: 9
- 2026-07-09
- Number of reports: 76
- Distinct targets: 10
- 2026-07-10
- Number of reports: 76
- Distinct targets: 10
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 49 | src | scan |
- Origin AS
- AS51167 - CONTABO
- BGP Prefix
- 149.102.128.0/21
- geo
- United Kingdom, Portsmouth
- 🕑 Europe/London
- hostname
- vmi1344452.contaboserver.net
- Address block ('inetnum' or 'NetRange' in whois database)
- 149.102.0.0 - 149.102.255.255
- last_activity
- 2026-07-03 02:45:06
- last_warden_event
- 2026-07-03 02:45:06
- rep
- 0.0021041753321439094
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 25, 26, 37, 49, 80, 83, 84, 88, 102, 104, 113, 121, 135, 195, 263, 389, 427, 442, 443, 444, 445, 446, 465, 488, 502, 503, 513, 515, 541, 548, 554, 647, 789, 853, 873, 887, 902, 995, 999, 1024, 1153, 1200, 1224, 1234, 1290, 1337, 1414, 1433, 1521, 1599, 1604, 1700, 1883, 1911, 1984, 2001, 2022, 2066, 2082, 2083, 2096, 2107, 2122, 2223, 2225, 2298, 2376, 2379, 2404, 2554, 2558, 2572, 2601, 2701, 2761, 2762, 2850, 3001, 3006, 3015, 3050, 3054, 3069, 3082, 3086, 3088, 3109, 3123, 3128, 3147, 3162, 3172, 3175, 3270, 3388, 3389, 3541, 3556, 3559, 3562, 3566, 3580, 3749, 3786, 3954, 4022, 4064, 4150, 4282, 4321, 4430, 4444, 4451, 4477, 4506, 4530, 4545, 4572, 4620, 4664, 4786, 4808, 4911, 4949, 5000, 5001, 5005, 5025, 5135, 5222, 5226, 5269, 5321, 5351, 5494, 5596, 5601, 5608, 5650, 5678, 5801, 5901, 5904, 5917, 5938, 6000, 6001, 6008, 6061, 6161, 6320, 6432, 6482, 6511, 6590, 6602, 6633, 6635, 6650, 6653, 6666, 6667, 6668, 6697, 6868, 7001, 7050, 7071, 7105, 7171, 7443, 7548, 7603, 7634, 7773, 7777, 7900, 7999, 8000, 8001, 8007, 8009, 8010, 8025, 8062, 8069, 8081, 8082, 8083, 8085, 8087, 8089, 8090, 8099, 8110, 8112, 8132, 8139, 8151, 8167, 8178, 8192, 8200, 8248, 8291, 8333, 8433, 8475, 8485, 8554, 8565, 8575, 8592, 8594, 8724, 8787, 8799, 8804, 8830, 8839, 8850, 8855, 8884, 8888, 8889, 9001, 9019, 9023, 9027, 9034, 9044, 9049, 9054, 9080, 9088, 9092, 9095, 9108, 9119, 9135, 9151, 9186, 9243, 9301, 9303, 9306, 9307, 9313, 9333, 9465, 9529, 9761, 9775, 9800, 9876, 9888, 9909, 9944, 9981, 9998, 9999
- Tags: honeypot
- CPEs: –
- ts_added
- 2026-02-27 05:02:37.469000
- ts_last_update
- 2026-07-11 05:02:59.848000
Warden event timeline
DShield event timeline