IP address

Warden events (9)

2024-09-16

ReconScanning (node.ce2b59): 2

2024-07-22

ReconScanning (node.ce2b59): 2

2024-07-15

ReconScanning (node.ce2b59): 2

2024-07-08

ReconScanning (node.ce2b59): 2

2024-07-07

ReconScanning (node.ce2b59): 1

DShield reports (IP summary, reports)

2024-07-09

Number of reports: 189

Distinct targets: 36

2024-07-16

Number of reports: 227

Distinct targets: 45

2024-07-22

Number of reports: 22

Distinct targets: 4

2024-07-23

Number of reports: 189

Distinct targets: 39

2024-07-29

Number of reports: 21

Distinct targets: 5

2024-07-30

Number of reports: 255

Distinct targets: 54

2024-08-05

Number of reports: 19

Distinct targets: 4

2024-08-06

Number of reports: 106

Distinct targets: 31

2024-08-13

Number of reports: 152

Distinct targets: 26

2024-08-19

Number of reports: 15

Distinct targets: 4

2024-08-20

Number of reports: 148

Distinct targets: 34

2024-08-26

Number of reports: 11

Distinct targets: 3

2024-08-27

Number of reports: 110

Distinct targets: 23

2024-09-02

Number of reports: 16

Distinct targets: 5

2024-09-03

Number of reports: 187

Distinct targets: 36

2024-09-09

Number of reports: 20

Distinct targets: 4

2024-09-10

Number of reports: 200

Distinct targets: 40

2024-09-16

Number of reports: 20

Distinct targets: 4

2024-09-17

Number of reports: 129

Distinct targets: 38

2024-09-23

Number of reports: 20

Distinct targets: 5

2024-09-24

Number of reports: 205

Distinct targets: 41

2024-09-29

Number of reports: 13

Distinct targets: 3

2024-09-30

Number of reports: 20

Distinct targets: 3

2024-10-01

Number of reports: 170

Distinct targets: 33

OTX pulses

[606d75c11c08ff94089a9430] 2021-04-07 09:05:05.353000 | Georgs Honeypot

Author name:	georgengelmann
Pulse modified:	2024-10-05 15:59:08.449000
Indicator created:	2024-10-01 01:18:01
Indicator role:	bruteforce
Indicator title:	Telnet intrusion attempt from user-45-142-247-215.ber02.de.misaka.io port 57515
Indicator expiration:	2024-10-31 01:00:00

Origin AS

AS35487 - MISAKA

BGP Prefix

45.142.247.0/24

fmp

{'general': 0.3236932158470154}

geo

Germany, Berlin

🕑 Europe/Berlin

hostname

user-45-142-247-215.ber02.de.misaka.io

hostname_class

['ip_in_hostname']

Address block ('inetnum' or 'NetRange' in whois database)

45.142.244.0 - 45.142.247.255

last_activity

2024-10-05 16:03:49.635000

last_warden_event

2024-09-16 06:49:03

rep

0.0

reserved_range

0

Shodan's InternetDB

Open ports: 11, 13, 15, 17, 22, 25, 26, 37, 43, 49, 70, 79, 80, 81, 82, 83, 84, 85, 88, 90, 92, 102, 104, 110, 111, 113, 119, 122, 131, 135, 143, 175, 179, 195, 221, 264, 340, 389, 427, 444, 445, 465, 502, 503, 515, 548, 587, 593, 631, 636, 666, 771, 772, 789, 800, 801, 873, 902, 990, 992, 993, 994, 995, 1024, 1025, 1026, 1028, 1063, 1080, 1099, 1111, 1153, 1224, 1234, 1250, 1311, 1400, 1414, 1433, 1442, 1471, 1494, 1515, 1521, 1599, 1604, 1723, 1741, 1801, 1820, 1833, 1883, 1901, 1911, 1925, 1935, 1962, 1990, 2000, 2008, 2010, 2012, 2020, 2062, 2064, 2068, 2081, 2086, 2087, 2095, 2096, 2121, 2154, 2181, 2201, 2222, 2245, 2320, 2345, 2375, 2379, 2404, 2455, 2480, 2548, 2549, 2552, 2557, 2563, 2567, 2569, 2650, 2709, 2761, 2806, 3000, 3001, 3049, 3050, 3051, 3054, 3055, 3056, 3068, 3083, 3090, 3096, 3098, 3100, 3101, 3106, 3107, 3110, 3111, 3118, 3128, 3129, 3260, 3268, 3269, 3299, 3301, 3306, 3310, 3333, 3388, 3389, 3400, 3460, 3503, 3521, 3522, 3541, 3542, 3551, 3558, 3570, 3689, 3749, 3791, 3793, 3950, 3951, 4000, 4022, 4040, 4063, 4064, 4157, 4200, 4242, 4243, 4282, 4321, 4444, 4500, 4505, 4506, 4523, 4567, 4664, 4700, 4782, 4840, 4848, 4899, 4911, 4949, 5000, 5005, 5007, 5009, 5010, 5025, 5080, 5150, 5201, 5222, 5269, 5321, 5357, 5432, 5435, 5555, 5560, 5568, 5569, 5590, 5598, 5599, 5601, 5606, 5672, 5697, 5800, 5801, 5858, 5901, 5906, 5938, 5984, 5985, 6000, 6001, 6008, 6009, 6080, 6264, 6379, 6512, 6565, 6580, 6588, 6602, 6605, 6633, 6650, 6653, 6664, 6666, 6667, 6668, 6697, 6955, 7010, 7171, 7316, 7474, 7493, 7547, 7557, 7634, 7657, 7676, 7777, 7779, 7998, 8000, 8001, 8004, 8009, 8010, 8012, 8017, 8019, 8020, 8026, 8027, 8029, 8039, 8043, 8045, 8048, 8058, 8060, 8066, 8069, 8071, 8080, 8086, 8090, 8091, 8093, 8096, 8098, 8099, 8102, 8108, 8112, 8123, 8126, 8180, 8200, 8222, 8236, 8248, 8251, 8252, 8282, 8291, 8333, 8383, 8408, 8417, 8420, 8422, 8424, 8432, 8433, 8446, 8448, 8545, 8554, 8575, 8585, 8586, 8590, 8621, 8623, 8700, 8728, 8733, 8767, 8779, 8790, 8800, 8804, 8806, 8809, 8810, 8819, 8820, 8823, 8832, 8841, 8842, 8844, 8852, 8888, 8899, 8990, 8991, 8993, 9000, 9009, 9010, 9014, 9015, 9020, 9029, 9031, 9035, 9036, 9042, 9046, 9050, 9051, 9080, 9090, 9092, 9093, 9094, 9100, 9105, 9109, 9136, 9151, 9160, 9191, 9200, 9204, 9209, 9211, 9215, 9216, 9295, 9306, 9307, 9418, 9530, 9550, 9595, 9600, 9633, 9761, 9800, 9869, 9876, 9898, 9966, 9981, 9988, 9997, 9998, 9999

Tags: –

CPEs: –

ts_added

2023-11-13 04:34:11.923000

ts_last_update

2024-10-05 16:03:49.645000

Warden event timeline

DShield event timeline

OTX pulses