IP address


.005202.165.67.52
Shodan(more info)
Passive DNS
Tags: Residential proxy

Threat categories

TLRoleCategoryDetails
50 src login protocol: telnet
port: 23

Warden events (12)
2026-11-03
IntrusionUserCompromise (node.cfb4f7): 12
Residential proxy info (data provided by Layer3 Intel)
Last seen: 2026-11-13 05:52:51}
Percent days seen: 100 %
Networks: INFATICA, PROXYRACK, BOTTINGTOOLS, BIRDPROXIES, PROXYEMPIRE, 711PROXY, MASKIFY, BYTEPROXIES, EVOMI, GEONODE, GONZOPROXY, BYTEFUL, FLASHPROXY, PROXY-SELLER, FLOPPYDATA, UNKNOWNPROXIES, PROXYMA, NSOCKS, INFINITEPROXIES, AKE.NET
Details: https://layer3intel.com/context/202.165.67.52
Origin AS
AS137409 - GSLNETWORKS-AS-AP
BGP Prefix
202.165.67.0/24
geo
Italy, Milan
🕑 Europe/Rome
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
202.165.64.0 - 202.165.71.255
last_activity
2026-11-03 09:09:26
last_warden_event
2026-11-03 09:09:26
rep
0.004725829728617681
reserved_range
0
Shodan's InternetDB
Open ports: 22, 80, 179, 443, 444
Tags: –
CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1, cpe:/a:caddyserver:caddy, cpe:/a:golang:go
ts_added
2026-11-03 09:09:34.922000
ts_last_update
2026-11-14 09:09:40.251000

Warden event timeline

DShield event timeline