IP address


--45.141.122.188vmi2886893.contaboserver.net
Shodan(more info)
Passive DNS
Tags:
IP blacklists
DataPlane VNC RFB
45.141.122.188 is listed on the DataPlane VNC RFB blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs initiating<br>an unsolicited VNC remote frame buffer (RFB) session to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-11-11 07:10:00.987000
Was present on blacklist at: 2025-11-08 19:10, 2025-11-09 03:10, 2025-11-09 07:10, 2025-11-09 15:10, 2025-11-09 19:10, 2025-11-10 03:10, 2025-11-10 07:10, 2025-11-10 15:10, 2025-11-10 19:10, 2025-11-11 03:10, 2025-11-11 07:10
OTX pulses
[69109624970d50566470b193] 2025-11-09 13:24:52.640000 | VNC honeypot logs for 2025/11/09
Author name:jnazario
Pulse modified:2025-11-09 13:24:52.640000
Indicator created:2025-11-09 13:24:53
Indicator role:None
Indicator title:
Indicator expiration:2025-12-09 13:00:00
[6911e797845d82119119bee3] 2025-11-10 13:24:39.832000 | VNC honeypot logs for 2025/11/10
Author name:jnazario
Pulse modified:2025-11-10 13:24:39.832000
Indicator created:2025-11-10 13:24:41
Indicator role:None
Indicator title:
Indicator expiration:2025-12-10 13:00:00
Origin AS
AS51167 - CONTABO
BGP Prefix
45.141.122.0/24
geo
United Kingdom, Portsmouth
🕑 Europe/London
hostname
vmi2886893.contaboserver.net
Address block ('inetnum' or 'NetRange' in whois database)
45.141.120.0 - 45.141.123.255
last_activity
2025-11-10 16:38:32.221000
reserved_range
0
Shodan's InternetDB
Open ports: 22, 80, 1234, 8880, 9100
Tags:
CPEs: cpe:/a:openbsd:openssh:8.9p1, cpe:/o:canonical:ubuntu_linux
ts_added
2025-11-08 19:11:42.010000
ts_last_update
2025-11-11 07:11:30.673000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses