IP address

Shodan(more info)

Passive DNS

Tags: Scanner

Warden events (30)

2026-01-21: ReconScanning (node.86eb21): 2
2026-01-19: ReconScanning (node.86eb21): 2
2026-01-18: ReconScanning (node.86eb21): 1
2026-01-15: ReconScanning (node.86eb21): 2
2026-01-11: ReconScanning (node.86eb21): 3
2026-01-09: ReconScanning (node.86eb21): 2
2025-12-25: ReconScanning (node.86eb21): 2
2025-12-24: ReconScanning (node.86eb21): 1
2025-12-13: ReconScanning (node.86eb21): 1
2025-12-09: ReconScanning (node.86eb21): 1
2025-12-08: ReconScanning (node.86eb21): 2
2025-12-07: ReconScanning (node.86eb21): 1
2025-12-02: ReconScanning (node.86eb21): 2
2025-12-01: ReconScanning (node.86eb21): 1
2025-11-09: ReconScanning (node.86eb21): 1
2025-11-08: ReconScanning (node.86eb21): 1
2025-11-01: ReconScanning (node.86eb21): 1
2025-10-31: ReconScanning (node.f90c6b): 1; ReconScanning (node.86eb21): 1
2025-10-28: ReconScanning (node.86eb21): 2

DShield reports (IP summary, reports)

2025-10-28: Number of reports: 48; Distinct targets: 8
2025-11-12: Number of reports: 32; Distinct targets: 5
2025-11-14: Number of reports: 16; Distinct targets: 3
2025-11-21: Number of reports: 36; Distinct targets: 5
2025-12-10: Number of reports: 60; Distinct targets: 9
2025-12-17: Number of reports: 60; Distinct targets: 11
2025-12-18: Number of reports: 60; Distinct targets: 11
2026-01-03: Number of reports: 48; Distinct targets: 6

Origin AS: AS44477 - WELLWEB; AS61424 - ESERVER-SK-AS; AS209847 - THE
BGP Prefix: 5.252.23.0/24
geo: Slovakia, Bratislava; 🕑 Europe/Bratislava
hostname: vm1466357.example.com
Address block ('inetnum' or 'NetRange' in whois database): 5.252.20.0 - 5.252.23.255
last_activity: 2026-01-21 02:26:24
last_warden_event: 2026-01-21 02:26:24
rep: 0.1714285714285714
reserved_range: 0
Shodan's InternetDB: Open ports: 13, 17, 19, 21, 26, 38, 43, 49, 80, 81, 82, 83, 88, 91, 102, 104, 113, 119, 122, 135, 175, 179, 221, 225, 264, 389, 443, 444, 445, 461, 485, 488, 515, 541, 554, 631, 632, 636, 666, 777, 831, 832, 873, 902, 993, 998, 1012, 1024, 1153, 1234, 1283, 1337, 1366, 1400, 1433, 1444, 1458, 1471, 1515, 1521, 1554, 1557, 1588, 1599, 1604, 1700, 1723, 1883, 1925, 1935, 1964, 1969, 1977, 1987, 2000, 2008, 2081, 2082, 2083, 2090, 2108, 2121, 2150, 2154, 2181, 2222, 2224, 2250, 2271, 2345, 2353, 2375, 2404, 2455, 2480, 2551, 2554, 2761, 2762, 2806, 3001, 3058, 3066, 3089, 3090, 3092, 3099, 3105, 3108, 3114, 3128, 3129, 3135, 3158, 3159, 3174, 3179, 3185, 3195, 3260, 3268, 3269, 3299, 3301, 3306, 3388, 3389, 3390, 3406, 3460, 3551, 3555, 3568, 3569, 3570, 3572, 3689, 3749, 3838, 4040, 4063, 4064, 4072, 4096, 4165, 4242, 4282, 4444, 4445, 4461, 4466, 4506, 4545, 4561, 4567, 4664, 4782, 4786, 4840, 4949, 5001, 5004, 5005, 5007, 5025, 5222, 5248, 5269, 5274, 5432, 5435, 5500, 5567, 5602, 5609, 5673, 5680, 5696, 5800, 5858, 5901, 5916, 5917, 5918, 5938, 5985, 5986, 5994, 6000, 6007, 6010, 6080, 6379, 6432, 6581, 6602, 6653, 6667, 6668, 6686, 6688, 6697, 6699, 6748, 7003, 7080, 7171, 7302, 7325, 7415, 7433, 7434, 7474, 7500, 7634, 7676, 7771, 7777, 7887, 7946, 7989, 8000, 8001, 8006, 8008, 8009, 8010, 8013, 8014, 8026, 8027, 8039, 8042, 8050, 8055, 8065, 8083, 8086, 8087, 8089, 8090, 8098, 8099, 8112, 8114, 8123, 8126, 8134, 8139, 8140, 8141, 8163, 8187, 8188, 8195, 8200, 8230, 8243, 8291, 8334, 8383, 8384, 8404, 8424, 8425, 8445, 8473, 8494, 8519, 8526, 8557, 8561, 8570, 8577, 8587, 8589, 8649, 8663, 8680, 8728, 8733, 8745, 8779, 8800, 8812, 8816, 8834, 8835, 8837, 8840, 8850, 8873, 8875, 8878, 8883, 8889, 8969, 9000, 9001, 9002, 9003, 9014, 9029, 9033, 9042, 9051, 9066, 9067, 9085, 9090, 9091, 9093, 9095, 9100, 9102, 9107, 9108, 9116, 9151, 9160, 9191, 9200, 9215, 9248, 9289, 9295, 9300, 9306, 9333, 9418, 9443, 9447, 9458, 9501, 9530, 9600, 9633, 9761, 9800, 9869, 9898, 9919, 9943, 9944, 9981, 9990, 9997, 9998; Tags: honeypot; CPEs: –
ts_added: 2024-10-15 05:02:29.666000
ts_last_update: 2026-01-21 05:03:13.345000

Warden event timeline

DShield event timeline