IP address


.000154.90.70.69
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
Echelon IoT default credentials
154.90.70.69 is listed on the Echelon IoT default credentials blacklist.

Description: None
Type of feed: primary (feed detail page)

Last checked at: 2026-07-14 09:20:00.613000
Was present on blacklist at: 2026-07-04 09:20, 2026-07-05 09:20, 2026-07-06 09:20, 2026-07-07 09:20, 2026-07-08 09:20, 2026-07-09 09:20, 2026-07-10 09:20, 2026-07-11 09:20, 2026-07-12 09:20, 2026-07-13 09:20, 2026-07-14 09:20

Threat categories

TLRoleCategoryDetails
25 src botnet_drone malware_family: win.echelon, win.oni

Warden events (2539)
2026-07-07
IntrusionUserCompromise (node.cfb4f7): 424
ReconScanning (node.368407): 99
ReconScanning (node.4dc198): 101
ReconScanning (node.ce2b59): 12
ReconScanning (node.9c1411): 5
2026-07-06
IntrusionUserCompromise (node.cfb4f7): 173
ReconScanning (node.ce2b59): 7
ReconScanning (node.368407): 52
ReconScanning (node.4dc198): 52
2026-07-05
IntrusionUserCompromise (node.cfb4f7): 233
ReconScanning (node.ce2b59): 7
ReconScanning (node.4dc198): 49
ReconScanning (node.368407): 49
2026-07-04
IntrusionUserCompromise (node.cfb4f7): 539
ReconScanning (node.ce2b59): 19
ReconScanning (node.4dc198): 114
ReconScanning (node.368407): 113
ReconScanning (node.9c1411): 28
2026-07-03
AnomalyTraffic (node.6a1878): 3
ReconScanning (node.368407): 78
ReconScanning (node.4dc198): 78
IntrusionUserCompromise (node.cfb4f7): 266
ReconScanning (node.ce2b59): 21
ReconScanning (node.9c1411): 17
DShield reports (IP summary, reports)
2026-07-03
Number of reports: 1208
Distinct targets: 257
2026-07-04
Number of reports: 1257
Distinct targets: 243
2026-07-05
Number of reports: 1257
Distinct targets: 243
2026-07-06
Number of reports: 229
Distinct targets: 153
2026-07-07
Number of reports: 229
Distinct targets: 153
Origin AS
AS215925 - VPSVAULTHOST
BGP Prefix
154.90.70.0/24
geo
Russia, Moscow
🕑 Europe/Moscow
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
154.80.0.0 - 154.95.255.255
last_activity
2026-07-07 16:47:01
last_warden_event
2026-07-07 16:47:01
rep
0.0
reserved_range
0
ts_added
2026-07-03 16:24:53.728000
ts_last_update
2026-07-24 16:25:00.514000

Warden event timeline

DShield event timeline

Presence on blacklists