IP address


.174199.189.252.143syimykk13.hlab.kz
Shodan(more info)
Passive DNS
Tags: Scanner Login attempts
IP blacklists
FireHOL anonymizers
199.189.252.143 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2026-08-05 06:05:16
Was present on blacklist at: 2026-07-30 06:05, 2026-07-31 06:05, 2026-08-01 06:05, 2026-08-02 06:05, 2026-08-03 06:05, 2026-08-04 06:05, 2026-08-05 06:05

Threat categories

TLRoleCategoryDetails
50 src scan port: 22
38 src login protocol: ssh
port: 22

Warden events (10)
2026-08-03
ReconScanning (node.9c1411): 8
2026-07-30
AttemptLogin (node.4dc198): 2
Origin AS
AS205431 - HostLab
BGP Prefix
199.189.248.0/21
geo
Kazakhstan
🕑 Asia/Almaty
hostname
syimykk13.hlab.kz
Address block ('inetnum' or 'NetRange' in whois database)
199.189.248.0 - 199.189.255.255
last_activity
2026-08-03 12:08:27
last_warden_event
2026-08-03 12:08:27
rep
0.17351384058765884
reserved_range
0
Shodan's InternetDB
Open ports: 22, 53, 80, 110, 143, 465, 587, 995, 3000, 6666
Tags: self-signed, starttls
CPEs: cpe:/a:exim:exim:4.97, cpe:/a:openbsd:openssh:9.6p1, cpe:/o:canonical:ubuntu_linux
ts_added
2026-07-30 06:24:33.905000
ts_last_update
2026-08-05 06:24:40.188000

Warden event timeline

DShield event timeline

Presence on blacklists