IP address
Shodan(more info)
Passive DNS
- IP blacklists
- Warden events (5255)
- 2024-12-17
-
- ReconScanning (node.4dc198): 154
- AttemptLogin (node.ce2b59): 4
- ReconScanning (node.ce2b59): 1
- AttemptLogin (node.9c160c): 1
- 2024-12-16
-
- ReconScanning (node.4dc198): 254
- ReconScanning (node.ce2b59): 1
- IntrusionUserCompromise (node.9c160c): 4
- AttemptLogin (node.9c160c): 4
- AttemptLogin (node.ce2b59): 2
- 2024-12-15
-
- ReconScanning (node.4dc198): 203
- ReconScanning (node.ce2b59): 2
- AttemptLogin (node.ce2b59): 4
- AttemptLogin (node.9c160c): 1
- 2024-12-14
-
- ReconScanning (node.4dc198): 219
- AttemptLogin (node.9c160c): 7
- ReconScanning (node.ce2b59): 1
- IntrusionUserCompromise (node.9c160c): 4
- AttemptLogin (node.ce2b59): 3
- ReconScanning (node.368407): 1
- 2024-12-13
-
- ReconScanning (node.4dc198): 210
- ReconScanning (node.ce2b59): 2
- AttemptLogin (node.ce2b59): 4
- IntrusionUserCompromise (node.9c160c): 2
- AttemptLogin (node.9c160c): 3
- AnomalyTraffic (node.ffe95c): 1
- 2024-12-12
-
- ReconScanning (node.4dc198): 220
- ReconScanning (node.ce2b59): 12
- AttemptLogin (node.ce2b59): 2
- AttemptLogin (node.9c160c): 3
- IntrusionUserCompromise (node.9c160c): 2
- IntrusionUserCompromise (node.ee25b8): 1
- AttemptLogin (node.ee25b8): 2
- AnomalyTraffic (node.ffe95c): 3
- 2024-12-11
-
- ReconScanning (node.4dc198): 257
- ReconScanning (node.ce2b59): 23
- AttemptLogin (node.ce2b59): 3
- IntrusionUserCompromise (node.9c160c): 3
- AttemptLogin (node.9c160c): 3
- AttemptLogin (node.d2ecc6): 1
- IntrusionUserCompromise (node.ee25b8): 1
- AttemptLogin (node.ee25b8): 1
- AnomalyTraffic (node.ffe95c): 5
- AttemptLogin (node.5f02e7): 2
- 2024-12-10
-
- ReconScanning (node.4dc198): 279
- ReconScanning (node.ce2b59): 12
- AttemptLogin (node.ce2b59): 3
- IntrusionUserCompromise (node.9c160c): 1
- AttemptLogin (node.9c160c): 2
- IntrusionUserCompromise (node.ee25b8): 2
- AttemptLogin (node.ee25b8): 2
- IntrusionUserCompromise (node.5870ac): 1
- AttemptLogin (node.5870ac): 2
- IntrusionUserCompromise (node.d2ecc6): 1
- AttemptLogin (node.d2ecc6): 1
- 2024-12-09
-
- ReconScanning (node.4dc198): 290
- ReconScanning (node.ce2b59): 1
- AttemptLogin (node.ce2b59): 4
- AttemptLogin (node.9c160c): 2
- IntrusionUserCompromise (node.9c160c): 1
- 2024-12-08
-
- ReconScanning (node.4dc198): 289
- ReconScanning (node.ce2b59): 1
- AttemptLogin (node.ce2b59): 4
- IntrusionUserCompromise (node.9c160c): 1
- AttemptLogin (node.9c160c): 2
- 2024-12-07
-
- ReconScanning (node.4dc198): 287
- ReconScanning (node.ce2b59): 1
- IntrusionUserCompromise (node.9c160c): 2
- AttemptLogin (node.9c160c): 2
- AttemptLogin (node.ce2b59): 3
- 2024-12-06
-
- ReconScanning (node.4dc198): 286
- IntrusionUserCompromise (node.9c160c): 3
- AttemptLogin (node.9c160c): 4
- ReconScanning (node.ce2b59): 3
- AttemptLogin (node.ce2b59): 3
- AnomalyTraffic (node.ffe95c): 1
- 2024-12-05
-
- ReconScanning (node.ce2b59): 13
- AnomalyTraffic (node.ffe95c): 7
- ReconScanning (node.4dc198): 264
- IntrusionUserCompromise (node.9c160c): 3
- AttemptLogin (node.9c160c): 3
- AttemptLogin (node.ce2b59): 2
- AttemptLogin (node.5f02e7): 1
- 2024-12-04
-
- ReconScanning (node.ce2b59): 31
- AttemptLogin (node.368407): 32
- IntrusionUserCompromise (node.b7f4d1): 1
- AttemptLogin (node.b7f4d1): 1
- AnomalyTraffic (node.ffe95c): 1
- IntrusionUserCompromise (node.d2ecc6): 3
- AttemptLogin (node.d2ecc6): 3
- IntrusionUserCompromise (node.5870ac): 3
- AttemptLogin (node.5870ac): 4
- 2024-12-03
-
- AttemptLogin (node.368407): 28
- ReconScanning (node.ce2b59): 31
- IntrusionUserCompromise (node.b7f4d1): 2
- AttemptLogin (node.b7f4d1): 2
- IntrusionUserCompromise (node.5870ac): 1
- AttemptLogin (node.5870ac): 1
- 2024-12-02
-
- ReconScanning (node.ce2b59): 32
- AttemptLogin (node.368407): 26
- IntrusionUserCompromise (node.b7f4d1): 1
- AttemptLogin (node.b7f4d1): 1
- ReconScanning (node.4dc198): 6
- 2024-12-01
-
- AttemptLogin (node.368407): 29
- ReconScanning (node.ce2b59): 30
- IntrusionUserCompromise (node.5870ac): 1
- AttemptLogin (node.5870ac): 1
- IntrusionUserCompromise (node.b7f4d1): 3
- AttemptLogin (node.b7f4d1): 3
- AttemptLogin (node.5f02e7): 1
- IntrusionUserCompromise (node.9c160c): 1
- AttemptLogin (node.9c160c): 1
- ReconScanning (node.4dc198): 8
- 2024-11-30
-
- AttemptLogin (node.368407): 55
- ReconScanning (node.4dc198): 23
- ReconScanning (node.ce2b59): 2
- 2024-11-29
-
- AttemptLogin (node.368407): 16
- 2024-11-28
-
- AttemptLogin (node.368407): 63
- 2024-11-27
-
- AttemptLogin (node.368407): 11
- ReconScanning (node.4dc198): 26
- 2024-11-26
-
- ReconScanning (node.4dc198): 227
- AttemptLogin (node.ce2b59): 2
- ReconScanning (node.ce2b59): 3
- IntrusionUserCompromise (node.9c160c): 3
- AttemptLogin (node.9c160c): 3
- ReconScanning (node.368407): 21
- AnomalyTraffic (node.ffe95c): 1
- AttemptLogin (node.368407): 11
- 2024-11-25
-
- ReconScanning (node.ce2b59): 25
- AttemptLogin (node.368407): 38
- IntrusionUserCompromise (node.ee25b8): 1
- AttemptLogin (node.ee25b8): 1
- IntrusionUserCompromise (node.9c160c): 4
- AttemptLogin (node.9c160c): 3
- IntrusionUserCompromise (node.b7f4d1): 3
- AttemptLogin (node.b7f4d1): 1
- AnomalyTraffic (node.ffe95c): 3
- ReconScanning (node.4dc198): 67
- ReconScanning (node.368407): 10
- 2024-11-24
-
- AttemptLogin (node.368407): 71
- ReconScanning (node.ce2b59): 30
- IntrusionUserCompromise (node.b7f4d1): 1
- AttemptLogin (node.b7f4d1): 1
- IntrusionUserCompromise (node.9c160c): 1
- AttemptLogin (node.9c160c): 1
- IntrusionUserCompromise (node.5870ac): 1
- AttemptLogin (node.5870ac): 1
- AnomalyTraffic (node.ffe95c): 1
- AttemptLogin (node.ce2b59): 1
- 2024-11-23
-
- ReconScanning (node.ce2b59): 31
- AttemptLogin (node.368407): 89
- IntrusionUserCompromise (node.b7f4d1): 2
- AttemptLogin (node.b7f4d1): 1
- IntrusionUserCompromise (node.ee25b8): 5
- AttemptLogin (node.ee25b8): 8
- IntrusionUserCompromise (node.d2ecc6): 3
- AttemptLogin (node.d2ecc6): 2
- AttemptLogin (node.5f02e7): 1
- 2024-11-22
-
- ReconScanning (node.ce2b59): 31
- AttemptLogin (node.368407): 101
- IntrusionUserCompromise (node.b7f4d1): 9
- AttemptLogin (node.b7f4d1): 13
- AttemptLogin (node.ce2b59): 2
- IntrusionUserCompromise (node.ee25b8): 2
- AttemptLogin (node.ee25b8): 4
- IntrusionUserCompromise (node.5870ac): 2
- AttemptLogin (node.5870ac): 1
- 2024-11-21
-
- AttemptLogin (node.368407): 138
- ReconScanning (node.ce2b59): 30
- AttemptLogin (node.ce2b59): 1
- AttemptLogin (node.5f02e7): 1
- IntrusionUserCompromise (node.ee25b8): 2
- AttemptLogin (node.ee25b8): 1
- IntrusionUserCompromise (node.d2ecc6): 1
- AttemptLogin (node.d2ecc6): 1
- AttemptLogin (node.b7f4d1): 1
- IntrusionUserCompromise (node.5870ac): 4
- AttemptLogin (node.5870ac): 4
- IntrusionUserCompromise (node.9c160c): 2
- AttemptLogin (node.9c160c): 3
- 2024-11-20
-
- ReconScanning (node.ce2b59): 32
- AttemptLogin (node.368407): 94
- IntrusionUserCompromise (node.b7f4d1): 2
- AttemptLogin (node.b7f4d1): 1
- AttemptLogin (node.ce2b59): 1
- 2024-11-19
-
- AttemptLogin (node.368407): 98
- ReconScanning (node.ce2b59): 31
- IntrusionUserCompromise (node.d2ecc6): 2
- AttemptLogin (node.d2ecc6): 2
- AttemptLogin (node.5f02e7): 1
- IntrusionUserCompromise (node.b7f4d1): 2
- AttemptLogin (node.b7f4d1): 1
- 2024-11-18
-
- ReconScanning (node.ce2b59): 12
- AttemptLogin (node.ce2b59): 3
- AttemptLogin (node.368407): 32
- DShield reports (IP summary, reports)
- 2024-11-18
- Number of reports: 288
- Distinct targets: 17
- 2024-11-19
- Number of reports: 2159
- Distinct targets: 112
- 2024-11-20
- Number of reports: 2943
- Distinct targets: 135
- 2024-11-21
- Number of reports: 9484
- Distinct targets: 140
- 2024-11-22
- Number of reports: 7311
- Distinct targets: 115
- 2024-11-23
- Number of reports: 7551
- Distinct targets: 145
- 2024-11-24
- Number of reports: 8739
- Distinct targets: 111
- 2024-11-25
- Number of reports: 9955
- Distinct targets: 204
- 2024-11-26
- Number of reports: 10300
- Distinct targets: 372
- 2024-11-27
- Number of reports: 9476
- Distinct targets: 138
- 2024-11-28
- Number of reports: 4558
- Distinct targets: 129
- 2024-11-29
- Number of reports: 9315
- Distinct targets: 127
- 2024-11-30
- Number of reports: 9585
- Distinct targets: 136
- 2024-12-01
- Number of reports: 3543
- Distinct targets: 112
- 2024-12-02
- Number of reports: 5004
- Distinct targets: 101
- 2024-12-03
- Number of reports: 9396
- Distinct targets: 118
- 2024-12-04
- Number of reports: 3701
- Distinct targets: 123
- 2024-12-05
- Number of reports: 5393
- Distinct targets: 369
- 2024-12-06
- Number of reports: 4271
- Distinct targets: 348
- 2024-12-07
- Number of reports: 4479
- Distinct targets: 332
- 2024-12-08
- Number of reports: 4052
- Distinct targets: 342
- 2024-12-09
- Number of reports: 4495
- Distinct targets: 343
- 2024-12-10
- Number of reports: 4442
- Distinct targets: 345
- 2024-12-11
- Number of reports: 4717
- Distinct targets: 377
- 2024-12-12
- Number of reports: 5098
- Distinct targets: 355
- 2024-12-13
- Number of reports: 4877
- Distinct targets: 325
- 2024-12-14
- Number of reports: 3334
- Distinct targets: 297
- 2024-12-15
- Number of reports: 5485
- Distinct targets: 338
- 2024-12-16
- Number of reports: 5404
- Distinct targets: 347
- 2024-12-17
- Number of reports: 3262
- Distinct targets: 333
- OTX pulses
-
[674343cceab55a4636e1893b] 2024-11-24 15:18:34.348000 | SSH honeypot logs for 2024-11-24
Author name: jnazario Pulse modified: 2024-11-24 15:18:34.348000 Indicator created: 2024-11-24 15:18:37 Indicator role: None Indicator title: Indicator expiration: 2024-12-24 15:00:00 [6751c46824b9a14994ea8da4] 2024-12-05 15:19:04.431000 | SSH honeypot logs for 2024-12-05Author name: jnazario Pulse modified: 2024-12-05 15:19:04.431000 Indicator created: 2024-12-05 15:19:05 Indicator role: None Indicator title: Indicator expiration: 2025-01-04 15:00:00 [675315ad44754521beced3dd] 2024-12-06 15:18:05.967000 | SSH honeypot logs for 2024-12-06Author name: jnazario Pulse modified: 2024-12-06 15:18:05.967000 Indicator created: 2024-12-06 15:18:06 Indicator role: None Indicator title: Indicator expiration: 2025-01-05 15:00:00 [675467331e9d59449110731c] 2024-12-07 15:18:11.665000 | SSH honeypot logs for 2024-12-07Author name: jnazario Pulse modified: 2024-12-07 15:18:11.665000 Indicator created: 2024-12-07 15:18:12 Indicator role: None Indicator title: Indicator expiration: 2025-01-06 15:00:00 [6755b8aff9b165bd594a6aec] 2024-12-08 15:18:07.743000 | SSH honeypot logs for 2024-12-08Author name: jnazario Pulse modified: 2024-12-08 15:18:07.743000 Indicator created: 2024-12-08 15:18:08 Indicator role: None Indicator title: Indicator expiration: 2025-01-07 15:00:00 [67570a3489185ecbecc40d3f] 2024-12-09 15:18:12.938000 | SSH honeypot logs for 2024-12-09Author name: jnazario Pulse modified: 2024-12-09 15:18:12.938000 Indicator created: 2024-12-09 15:18:13 Indicator role: None Indicator title: Indicator expiration: 2025-01-08 15:00:00 [67585d813ad2106ded90cc91] 2024-12-10 15:25:53.247000 | SSH honeypot logs for 2024-12-10Author name: jnazario Pulse modified: 2024-12-10 15:25:53.247000 Indicator created: 2024-12-10 15:25:54 Indicator role: None Indicator title: Indicator expiration: 2025-01-09 15:00:00 [6759ae0856dabbb05ccd1231] 2024-12-11 15:21:44.193000 | SSH honeypot logs for 2024-12-11Author name: jnazario Pulse modified: 2024-12-11 15:21:44.193000 Indicator created: 2024-12-11 15:21:45 Indicator role: None Indicator title: Indicator expiration: 2025-01-10 15:00:00 [675b023309958fb79b4a415a] 2024-12-12 15:33:07.492000 | SSH honeypot logs for 2024-12-12Author name: jnazario Pulse modified: 2024-12-12 15:33:07.492000 Indicator created: 2024-12-12 15:33:08 Indicator role: None Indicator title: Indicator expiration: 2025-01-11 15:00:00 [675da2c83408e09a5ddd2deb] 2024-12-14 15:22:48.506000 | SSH honeypot logs for 2024-12-14Author name: jnazario Pulse modified: 2024-12-14 15:22:48.506000 Indicator created: 2024-12-14 15:22:49 Indicator role: None Indicator title: Indicator expiration: 2025-01-13 15:00:00 [675ef4c994a7bf1db01c9a1e] 2024-12-15 15:24:57.061000 | SSH honeypot logs for 2024-12-15Author name: jnazario Pulse modified: 2024-12-15 15:24:57.061000 Indicator created: 2024-12-15 15:24:57 Indicator role: None Indicator title: Indicator expiration: 2025-01-14 15:00:00 [676044b6cf406a4c671b2448] 2024-12-16 15:18:14.890000 | SSH honeypot logs for 2024-12-16Author name: jnazario Pulse modified: 2024-12-16 15:18:14.890000 Indicator created: 2024-12-16 15:18:15 Indicator role: None Indicator title: Indicator expiration: 2025-01-15 15:00:00 [6761962c49afcacb72082121] 2024-12-17 15:18:04.327000 | SSH honeypot logs for 2024-12-17Author name: jnazario Pulse modified: 2024-12-17 15:18:04.327000 Indicator created: 2024-12-17 15:18:04 Indicator role: None Indicator title: Indicator expiration: 2025-01-16 15:00:00
- Origin AS
- AS48090 - PPTECHNOLOGY
- BGP Prefix
- 45.148.10.0/24
- geo
- Netherlands, Amsterdam
- 🕑 Europe/Amsterdam
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 45.148.8.0 - 45.148.11.255
- last_activity
- 2024-12-17 16:33:41.102000
- last_warden_event
- 2024-12-17 13:52:45
- rep
- 0.17886904761904762
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22
- Tags: –
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1
- ts_added
- 2024-11-18 19:25:39.779000
- ts_last_update
- 2024-12-26 15:18:21.405000