IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (16)
- 2026-07-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-27
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-15
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 2
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-05-07
- Number of reports: 18
- Distinct targets: 3
- 2026-05-08
- Number of reports: 18
- Distinct targets: 3
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | src | scan |
- Origin AS
- AS202422 - GHOST
- BGP Prefix
- 5.252.24.0/24
- geo
- Brazil, Fortaleza
- 🕑 America/Fortaleza
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 5.252.24.0 - 5.252.27.255
- last_activity
- 2026-07-03 02:20:06
- last_warden_event
- 2026-07-03 02:20:06
- rep
- 0.0024284226154304145
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 13, 43, 49, 91, 111, 143, 175, 444, 445, 461, 513, 554, 587, 789, 902, 993, 995, 1200, 1244, 1276, 1433, 1599, 1801, 1935, 1979, 2008, 2056, 2087, 2121, 2126, 2181, 2455, 2522, 2560, 2762, 3001, 3009, 3030, 3056, 3130, 3134, 3148, 3211, 3306, 3310, 3388, 3389, 3550, 3551, 3558, 3567, 3674, 3794, 4001, 4022, 4023, 4063, 4072, 4080, 4282, 4321, 4369, 4432, 4443, 4782, 4840, 5004, 5080, 5150, 5222, 5227, 5233, 5264, 5266, 5269, 5272, 5435, 5556, 5613, 5678, 5800, 5801, 5853, 5910, 5984, 5985, 6000, 6004, 6011, 6264, 6374, 6379, 6433, 6443, 6512, 6664, 6789, 6812, 7001, 7025, 7087, 7230, 7548, 7657, 7735, 8003, 8009, 8123, 8140, 8156, 8160, 8166, 8181, 8187, 8198, 8200, 8282, 8316, 8334, 8444, 8448, 8462, 8536, 8545, 8553, 8579, 8582, 8649, 8680, 8686, 8804, 8836, 8854, 8882, 8883, 8889, 8900, 8907, 8916, 8935, 9000, 9002, 9009, 9046, 9048, 9050, 9080, 9090, 9092, 9095, 9100, 9138, 9175, 9205, 9241, 9257, 9299, 9300, 9333, 9399, 9682, 9761, 9876, 9981, 9990
- Tags: –
- CPEs: –
- ts_added
- 2026-01-09 05:08:03.369000
- ts_last_update
- 2026-07-10 05:11:24.921000
Warden event timeline
DShield event timeline
Presence on blacklists

