IP address


.0815.252.23.50vm1466357.example.com
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
34 src scan

Warden events (30)
2026-04-24
ReconScanning (node.86eb21): 1
2026-04-21
ReconScanning (node.86eb21): 1
2026-04-19
ReconScanning (node.86eb21): 1
2026-04-18
ReconScanning (node.86eb21): 1
2026-04-10
ReconScanning (node.86eb21): 1
2026-04-05
ReconScanning (node.86eb21): 1
2026-04-03
ReconScanning (node.f90c6b): 1
ReconScanning (node.86eb21): 1
2026-03-25
ReconScanning (node.86eb21): 1
2026-03-21
ReconScanning (node.86eb21): 2
2026-03-16
ReconScanning (node.86eb21): 1
2026-03-15
ReconScanning (node.86eb21): 1
2026-03-11
ReconScanning (node.86eb21): 1
2026-03-07
ReconScanning (node.86eb21): 1
2026-03-06
ReconScanning (node.86eb21): 1
2026-03-03
ReconScanning (node.86eb21): 1
2026-02-27
ReconScanning (node.86eb21): 1
2026-02-26
ReconScanning (node.86eb21): 1
2026-02-24
ReconScanning (node.86eb21): 1
2026-02-19
ReconScanning (node.86eb21): 1
2026-02-13
ReconScanning (node.86eb21): 1
2026-02-12
ReconScanning (node.86eb21): 1
2026-02-11
ReconScanning (node.86eb21): 1
2026-02-07
ReconScanning (node.86eb21): 1
2026-02-06
ReconScanning (node.86eb21): 1
2026-01-31
ReconScanning (node.86eb21): 2
2026-01-30
ReconScanning (node.86eb21): 2
DShield reports (IP summary, reports)
2026-02-26
Number of reports: 60
Distinct targets: 9
2026-03-03
Number of reports: 21
Distinct targets: 4
2026-03-04
Number of reports: 64
Distinct targets: 9
2026-03-05
Number of reports: 64
Distinct targets: 9
2026-03-11
Number of reports: 40
Distinct targets: 6
2026-03-17
Number of reports: 46
Distinct targets: 7
2026-03-25
Number of reports: 36
Distinct targets: 5
2026-03-26
Number of reports: 36
Distinct targets: 5
2026-04-02
Number of reports: 28
Distinct targets: 4
2026-04-09
Number of reports: 36
Distinct targets: 6
2026-04-20
Number of reports: 12
Distinct targets: 3
2026-04-22
Number of reports: 44
Distinct targets: 6
Origin AS
AS44477 - WELLWEB
AS61424 - ESERVER-SK-AS
AS209847 - THE
BGP Prefix
5.252.23.0/24
geo
Slovakia, Bratislava
🕑 Europe/Bratislava
hostname
vm1466357.example.com
Address block ('inetnum' or 'NetRange' in whois database)
5.252.20.0 - 5.252.23.255
last_activity
2026-04-24 01:34:43
last_warden_event
2026-04-24 01:34:43
rep
0.08095238095238094
reserved_range
0
Shodan's InternetDB
Open ports: 11, 13, 15, 17, 19, 21, 24, 26, 37, 49, 80, 81, 83, 88, 93, 96, 102, 104, 113, 154, 175, 179, 195, 221, 243, 264, 314, 389, 427, 443, 444, 445, 448, 449, 465, 487, 488, 513, 522, 541, 554, 593, 636, 685, 789, 805, 833, 843, 992, 999, 1000, 1022, 1024, 1025, 1027, 1050, 1080, 1110, 1111, 1153, 1180, 1181, 1188, 1198, 1250, 1291, 1292, 1293, 1311, 1337, 1366, 1400, 1433, 1454, 1521, 1604, 1605, 1723, 1925, 1926, 1935, 1947, 1953, 1962, 1967, 1976, 1983, 1984, 1989, 2000, 2008, 2030, 2058, 2059, 2067, 2081, 2083, 2086, 2087, 2096, 2121, 2154, 2181, 2210, 2222, 2232, 2250, 2345, 2362, 2375, 2376, 2379, 2404, 2433, 2444, 2455, 2550, 2552, 2553, 2560, 2568, 2601, 2628, 2732, 2761, 2762, 3000, 3009, 3048, 3050, 3055, 3069, 3071, 3076, 3093, 3100, 3120, 3124, 3128, 3132, 3136, 3137, 3139, 3143, 3155, 3158, 3159, 3161, 3167, 3176, 3188, 3198, 3199, 3221, 3260, 3268, 3299, 3301, 3306, 3310, 3333, 3337, 3352, 3389, 3390, 3401, 3523, 3551, 3552, 3563, 3569, 3570, 3749, 3780, 3951, 3953, 4000, 4022, 4040, 4063, 4101, 4157, 4188, 4282, 4321, 4369, 4430, 4434, 4439, 4444, 4463, 4482, 4530, 4543, 4567, 4602, 4620, 4700, 4782, 4786, 4821, 4840, 4848, 4911, 4933, 4949, 5001, 5009, 5025, 5061, 5089, 5090, 5105, 5123, 5180, 5209, 5222, 5230, 5242, 5243, 5245, 5260, 5267, 5268, 5271, 5272, 5357, 5400, 5503, 5543, 5555, 5558, 5590, 5592, 5600, 5601, 5630, 5672, 5696, 5800, 5804, 5831, 5904, 5911, 5914, 5917, 5920, 5938, 5984, 5986, 5987, 5989, 5995, 6000, 6005, 6007, 6010, 6021, 6134, 6379, 6405, 6443, 6601, 6664, 6666, 6668, 6700, 7001, 7012, 7015, 7020, 7021, 7050, 7071, 7086, 7105, 7125, 7171, 7172, 7415, 7433, 7441, 7444, 7445, 7474, 7493, 7547, 7634, 7775, 7777, 7779, 7801, 7989, 8007, 8009, 8010, 8042, 8048, 8051, 8065, 8081, 8086, 8087, 8089, 8090, 8093, 8102, 8112, 8126, 8132, 8139, 8144, 8146, 8154, 8162, 8169, 8176, 8179, 8180, 8184, 8188, 8191, 8200, 8230, 8250, 8283, 8291, 8317, 8334, 8411, 8420, 8431, 8432, 8433, 8443, 8444, 8450, 8454, 8458, 8462, 8475, 8502, 8506, 8514, 8524, 8550, 8553, 8554, 8556, 8561, 8574, 8575, 8576, 8605, 8607, 8637, 8643, 8649, 8733, 8745, 8800, 8802, 8805, 8813, 8822, 8823, 8827, 8833, 8834, 8842, 8847, 8854, 8866, 8867, 8870, 8873, 8874, 8880, 8883, 8888, 8889, 8902, 8907, 8910, 9000, 9001, 9002, 9009, 9012, 9014, 9017, 9021, 9023, 9038, 9041, 9042, 9073, 9078, 9080, 9090, 9092, 9095, 9100, 9110, 9113, 9129, 9131, 9147, 9151, 9152, 9153, 9162, 9173, 9185, 9191, 9192, 9193, 9205, 9206, 9213, 9230, 9243, 9291, 9304, 9307, 9333, 9376, 9418, 9443, 9454, 9550, 9658, 9761, 9773, 9779, 9800, 9869, 9876, 9898, 9902, 9918, 9929, 9944, 9966, 9981, 9999
Tags: honeypot
CPEs:
ts_added
2024-10-15 05:02:29.666000
ts_last_update
2026-04-26 05:16:21.551000

Warden event timeline

DShield event timeline