IP address


.0435.252.23.50vm1466357.example.com
Shodan(more info)
Passive DNS
Tags: Scanner
Warden events (28)
2026-01-21
ReconScanning (node.86eb21): 2
2026-01-19
ReconScanning (node.86eb21): 2
2026-01-18
ReconScanning (node.86eb21): 1
2026-01-15
ReconScanning (node.86eb21): 2
2026-01-11
ReconScanning (node.86eb21): 3
2026-01-09
ReconScanning (node.86eb21): 2
2025-12-25
ReconScanning (node.86eb21): 2
2025-12-24
ReconScanning (node.86eb21): 1
2025-12-13
ReconScanning (node.86eb21): 1
2025-12-09
ReconScanning (node.86eb21): 1
2025-12-08
ReconScanning (node.86eb21): 2
2025-12-07
ReconScanning (node.86eb21): 1
2025-12-02
ReconScanning (node.86eb21): 2
2025-12-01
ReconScanning (node.86eb21): 1
2025-11-09
ReconScanning (node.86eb21): 1
2025-11-08
ReconScanning (node.86eb21): 1
2025-11-01
ReconScanning (node.86eb21): 1
2025-10-31
ReconScanning (node.f90c6b): 1
ReconScanning (node.86eb21): 1
DShield reports (IP summary, reports)
2025-11-12
Number of reports: 32
Distinct targets: 5
2025-11-14
Number of reports: 16
Distinct targets: 3
2025-11-21
Number of reports: 36
Distinct targets: 5
2025-12-10
Number of reports: 60
Distinct targets: 9
2025-12-17
Number of reports: 60
Distinct targets: 11
2025-12-18
Number of reports: 60
Distinct targets: 11
2026-01-03
Number of reports: 48
Distinct targets: 6
Origin AS
AS44477 - WELLWEB
AS61424 - ESERVER-SK-AS
AS209847 - THE
BGP Prefix
5.252.23.0/24
geo
Slovakia, Bratislava
🕑 Europe/Bratislava
hostname
vm1466357.example.com
Address block ('inetnum' or 'NetRange' in whois database)
5.252.20.0 - 5.252.23.255
last_activity
2026-01-21 02:26:24
last_warden_event
2026-01-21 02:26:24
rep
0.04285714285714285
reserved_range
0
Shodan's InternetDB
Open ports: 11, 13, 17, 19, 26, 38, 43, 49, 80, 81, 88, 91, 102, 111, 113, 119, 122, 135, 175, 179, 221, 264, 311, 340, 443, 444, 445, 461, 488, 515, 541, 593, 631, 632, 685, 777, 789, 831, 832, 873, 902, 992, 993, 998, 1153, 1234, 1283, 1337, 1400, 1433, 1444, 1458, 1471, 1515, 1521, 1557, 1599, 1604, 1723, 1883, 1925, 1935, 1964, 1977, 1987, 2000, 2008, 2049, 2082, 2083, 2087, 2103, 2121, 2150, 2154, 2181, 2222, 2250, 2271, 2345, 2352, 2353, 2375, 2376, 2379, 2404, 2455, 2480, 2554, 2701, 2761, 2762, 2806, 3001, 3002, 3058, 3066, 3089, 3092, 3099, 3105, 3108, 3114, 3128, 3129, 3135, 3148, 3158, 3159, 3174, 3179, 3185, 3195, 3260, 3268, 3269, 3299, 3301, 3523, 3541, 3551, 3555, 3572, 3689, 3838, 4063, 4064, 4096, 4165, 4242, 4282, 4444, 4445, 4461, 4500, 4506, 4545, 4567, 4664, 4782, 4840, 4949, 5001, 5004, 5005, 5009, 5093, 5130, 5222, 5248, 5269, 5271, 5432, 5435, 5500, 5523, 5602, 5609, 5672, 5673, 5696, 5800, 5901, 5902, 5916, 5918, 5938, 5985, 6007, 6010, 6080, 6379, 6432, 6580, 6581, 6602, 6667, 6668, 6686, 6697, 7080, 7171, 7302, 7325, 7415, 7434, 7441, 7474, 7634, 7771, 7777, 7887, 7946, 7989, 8000, 8008, 8010, 8013, 8042, 8050, 8055, 8065, 8069, 8083, 8086, 8087, 8089, 8098, 8112, 8114, 8123, 8126, 8140, 8141, 8163, 8187, 8188, 8195, 8200, 8203, 8230, 8241, 8243, 8252, 8291, 8334, 8383, 8384, 8404, 8405, 8409, 8414, 8425, 8433, 8494, 8510, 8519, 8526, 8557, 8570, 8577, 8587, 8589, 8649, 8663, 8728, 8771, 8779, 8800, 8812, 8834, 8835, 8837, 8850, 8873, 8875, 8878, 8883, 8889, 8910, 8969, 9000, 9002, 9003, 9033, 9042, 9067, 9079, 9090, 9091, 9100, 9107, 9108, 9116, 9168, 9200, 9248, 9289, 9295, 9306, 9333, 9418, 9433, 9458, 9501, 9530, 9600, 9633, 9743, 9761, 9869, 9872, 9898, 9943, 9944, 9981, 9990, 9997, 9998
Tags: honeypot
CPEs:
ts_added
2024-10-15 05:02:29.666000
ts_last_update
2026-01-29 05:02:55.155000

Warden event timeline

DShield event timeline