IP address


.79679.124.40.178ip-40-178.4vendeta.com
Shodan(more info)
Passive DNS
Tags: IP in hostname
IP blacklists
CI Army
79.124.40.178 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-11-03 03:50:00.767000
Was present on blacklist at: 2026-09-28 02:50, 2026-09-29 02:50, 2026-09-30 02:50, 2026-10-01 02:50, 2026-10-29 03:50, 2026-10-30 03:50, 2026-10-31 03:50, 2026-11-01 03:50, 2026-11-02 03:50, 2026-11-03 03:50
AbuseIPDB
79.124.40.178 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-11-03 05:00:00.616000
Was present on blacklist at: 2026-09-28 04:00, 2026-09-29 04:00, 2026-09-30 04:00, 2026-10-18 04:00, 2026-10-29 05:00, 2026-10-30 05:00, 2026-10-31 05:00, 2026-11-01 05:00, 2026-11-02 05:00, 2026-11-03 05:00
Echelon port scan
79.124.40.178 is listed on the Echelon port scan blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Scanning 5+ ports on target host
Type of feed: primary (feed detail page)

Last checked at: 2026-11-03 10:25:00.446000
Was present on blacklist at: 2026-10-31 10:25, 2026-11-01 10:25, 2026-11-02 10:25, 2026-11-03 10:25

Threat categories

TLRoleCategoryDetails
78 src scan port: many
37 src —

Warden events (3303)
2026-11-03
ReconScanning (node.4dc198): 85
ReconScanning (node.368407): 84
ReconScanning (node.ce2b59): 10
ReconScanning (node.9c1411): 18
2026-11-02
ReconScanning (node.368407): 204
ReconScanning (node.4dc198): 204
ReconScanning (node.ce2b59): 24
ReconScanning (node.9c1411): 17
2026-11-01
ReconScanning (node.4dc198): 266
ReconScanning (node.368407): 262
ReconScanning (node.ce2b59): 30
2026-10-31
ReconScanning (node.368407): 268
ReconScanning (node.4dc198): 272
ReconScanning (node.ce2b59): 31
2026-10-30
ReconScanning (node.368407): 265
ReconScanning (node.4dc198): 267
ReconScanning (node.ce2b59): 30
2026-10-29
ReconScanning (node.368407): 278
ReconScanning (node.4dc198): 280
ReconScanning (node.ce2b59): 31
2026-10-28
ReconScanning (node.86eb21): 3
ReconScanning (node.ce2b59): 15
ReconScanning (node.4dc198): 61
ReconScanning (node.368407): 60
2026-10-27
ReconScanning (node.4dc198): 19
ReconScanning (node.ce2b59): 7
ReconScanning (node.368407): 16
ReconScanning (node.86eb21): 3
2026-10-04
ReconScanning (node.86eb21): 12
2026-10-03
ReconScanning (node.86eb21): 14
2026-09-29
ReconScanning (node.ce2b59): 18
2026-09-28
ReconScanning (node.ce2b59): 31
2026-09-26
ReconScanning (node.86eb21): 24
2026-09-25
ReconScanning (node.86eb21): 3
ReconScanning (node.ce2b59): 15
ReconScanning (node.4dc198): 33
ReconScanning (node.368407): 30
2026-09-24
ReconScanning (node.86eb21): 8
2026-09-22
ReconScanning (node.86eb21): 2
2026-09-21
ReconScanning (node.86eb21): 3
DShield reports (IP summary, reports)
2026-09-22
Number of reports: 202
Distinct targets: 202
2026-09-23
Number of reports: 1749
Distinct targets: 1749
2026-09-24
Number of reports: 855
Distinct targets: 855
2026-09-25
Number of reports: 855
Distinct targets: 855
2026-09-26
Number of reports: 546
Distinct targets: 546
2026-09-27
Number of reports: 546
Distinct targets: 546
2026-09-28
Number of reports: 7807
Distinct targets: 5823
2026-09-29
Number of reports: 4498
Distinct targets: 3348
2026-10-06
Number of reports: 10
Distinct targets: 10
2026-10-07
Number of reports: 3057
Distinct targets: 2609
2026-10-08
Number of reports: 20233
Distinct targets: 15754
2026-10-09
Number of reports: 20137
Distinct targets: 14926
2026-10-10
Number of reports: 19725
Distinct targets: 15335
2026-10-11
Number of reports: 19249
Distinct targets: 15102
2026-10-14
Number of reports: 3099
Distinct targets: 1868
2026-10-15
Number of reports: 9875
Distinct targets: 5323
2026-10-16
Number of reports: 8766
Distinct targets: 4945
2026-10-18
Number of reports: 7957
Distinct targets: 4833
2026-10-19
Number of reports: 7957
Distinct targets: 4833
2026-10-20
Number of reports: 9174
Distinct targets: 5154
2026-10-21
Number of reports: 8121
Distinct targets: 5031
2026-10-27
Number of reports: 259
Distinct targets: 204
2026-10-28
Number of reports: 259
Distinct targets: 204
2026-10-29
Number of reports: 8373
Distinct targets: 3072
2026-10-30
Number of reports: 8373
Distinct targets: 3072
2026-10-31
Number of reports: 8346
Distinct targets: 3023
2026-11-01
Number of reports: 8255
Distinct targets: 3007
Origin AS
AS50360 - TAMATIYA-AS
BGP Prefix
79.124.40.0/24
geo
Bulgaria
🕑 Europe/Sofia
hostname
ip-40-178.4vendeta.com
hostname_class
['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database)
79.124.0.0 - 79.124.63.255
last_activity
2026-11-03 17:21:50
last_warden_event
2026-11-03 17:21:50
rep
0.7957293906026529
reserved_range
0
Shodan's InternetDB
Open ports: 22
Tags: scanner
CPEs: cpe:/a:openbsd:openssh:7.4
ts_added
2026-09-21 18:32:01.869000
ts_last_update
2026-11-03 17:21:58.734000

Warden event timeline

DShield event timeline

Presence on blacklists