IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (82)
- 2026-06-03
-
- IntrusionUserCompromise (node.cfb4f7): 2
- 2026-06-02
-
- IntrusionUserCompromise (node.cfb4f7): 25
- 2026-06-01
-
- IntrusionUserCompromise (node.cfb4f7): 18
- 2026-05-31
-
- IntrusionUserCompromise (node.cfb4f7): 31
- 2026-05-30
-
- IntrusionUserCompromise (node.cfb4f7): 6
- OTX pulses
-
[6a1ad7aca8cb1de94f191e1d] 2026-05-30 12:27:24.857000 | VNC honeypot logs for 2026/05/30
Author name: jnazario Pulse modified: 2026-05-30 12:27:24.857000 Indicator created: 2026-05-30 12:27:25 Indicator role: None Indicator title: Indicator expiration: 2026-06-29 12:00:00
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| No threat category tags assigned | |||
- Origin AS
- AS38731 - VTDC-AS-VN
- BGP Prefix
- 210.211.112.0/21
- geo
- Vietnam, Ho Chi Minh City
- 🕑 Asia/Ho_Chi_Minh
- hostname
- static.viettelidc.com.vn
- hostname_class
- ['static']
- Address block ('inetnum' or 'NetRange' in whois database)
- 210.211.96.0 - 210.211.127.255
- last_activity
- 2026-06-03 00:27:22
- last_warden_event
- 2026-06-03 00:27:22
- rep
- 0.0
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 21, 25, 80, 110, 143, 2222
- Tags: starttls, self-signed
- CPEs: cpe:/a:exim:exim:4.89_1, cpe:/a:directadmin:directadmin, cpe:/a:apache:http_server:2, cpe:/a:pureftpd:pure-ftpd
- ts_added
- 2026-05-30 20:32:59.264000
- ts_last_update
- 2026-06-30 20:33:00.090000
Warden event timeline
DShield event timeline
Presence on blacklists
OTX pulses

