IP address


--5.104.83.126vmi1874273.contaboserver.net
Shodan(more info)
Passive DNS
Tags:
IP blacklists
blocklist.de SSH
5.104.83.126 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2024-09-26 16:05:05.209000
Was present on blacklist at: 2024-09-25 04:05, 2024-09-25 10:05, 2024-09-25 16:05, 2024-09-25 22:05, 2024-09-26 04:05, 2024-09-26 10:05, 2024-09-26 16:05
DShield reports (IP summary, reports)
2024-09-17
Number of reports: 38
Distinct targets: 19
2024-09-18
Number of reports: 28
Distinct targets: 14
2024-09-19
Number of reports: 11
Distinct targets: 6
2024-09-21
Number of reports: 12
Distinct targets: 7
2024-09-22
Number of reports: 13
Distinct targets: 9
2024-09-23
Number of reports: 22
Distinct targets: 13
2024-09-24
Number of reports: 21
Distinct targets: 12
2024-09-25
Number of reports: 32
Distinct targets: 15
2024-09-26
Number of reports: 21
Distinct targets: 12
2024-09-27
Number of reports: 27
Distinct targets: 13
2024-09-28
Number of reports: 22
Distinct targets: 10
Origin AS
AS141995 - CAPL-AS-AP
BGP Prefix
5.104.80.0/22
geo
Japan, Tokyo
🕑 Asia/Tokyo
hostname
vmi1874273.contaboserver.net
Address block ('inetnum' or 'NetRange' in whois database)
5.104.80.0 - 5.104.87.255
reserved_range
0
Shodan's InternetDB
Open ports: 21, 22, 25, 80, 110, 111, 143, 443, 465, 587, 993, 995, 2082, 2083, 2086, 2087, 2096, 3306
Tags: self-signed, starttls, database
CPEs: cpe:/a:openssl:openssl:1.0.2k, cpe:/a:php:php:5.6.37, cpe:/a:pureftpd:pure-ftpd, cpe:/a:apache:http_server:2.4.57, cpe:/a:jquery:jquery:3.1.1, cpe:/a:openbsd:openssh:7.4, cpe:/a:php:php:7.2.30, cpe:/a:getbootstrap:bootstrap:5.3.0, cpe:/a:postfix:postfix, cpe:/a:getbootstrap:bootstrap
ts_added
2024-09-18 05:01:01.852000
ts_last_update
2024-09-29 05:01:56.236000

Warden event timeline

DShield event timeline

Presence on blacklists