IP address


.01152.128.238.118
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
49 src scan port: 22, 3389
25 src

Warden events (16)
2026-08-27
ReconScanning (node.9c1411): 2
2026-08-24
ReconScanning (node.ce2b59): 4
ReconScanning (node.4dc198): 5
ReconScanning (node.368407): 4
AnomalyTraffic (node.6a1878): 1
DShield reports (IP summary, reports)
2026-08-24
Number of reports: 27
Distinct targets: 21
2026-08-25
Number of reports: 27
Distinct targets: 21
Origin AS
AS963 - APNIC-963
BGP Prefix
52.128.238.0/24
geo
Hong Kong
🕑 Asia/Hong_Kong
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
52.128.224.0 - 52.128.255.255
last_activity
2026-08-27 05:08:16
last_warden_event
2026-08-27 05:08:16
rep
0.010707629669533425
reserved_range
0
ts_added
2026-08-24 14:13:11.022000
ts_last_update
2026-09-05 14:13:20.345000

Warden event timeline

DShield event timeline