IP address


--89.34.96.9999.96.34.89.baremetal.zare.com
Shodan(more info)
Passive DNS
Tags: IP in hostname
IP blacklists
DataPlane VNC RFB
89.34.96.99 is listed on the DataPlane VNC RFB blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs initiating<br>an unsolicited VNC remote frame buffer (RFB) session to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-11-15 03:10:01.223000
Was present on blacklist at: 2025-11-08 15:10, 2025-11-08 19:10, 2025-11-09 03:10, 2025-11-09 07:10, 2025-11-09 15:10, 2025-11-09 19:10, 2025-11-10 03:10, 2025-11-10 07:10, 2025-11-10 15:10, 2025-11-10 19:10, 2025-11-11 03:10, 2025-11-11 07:10, 2025-11-11 15:10, 2025-11-11 19:10, 2025-11-12 03:10, 2025-11-12 15:10, 2025-11-12 19:10, 2025-11-13 03:10, 2025-11-13 07:10, 2025-11-13 15:10, 2025-11-13 19:10, 2025-11-14 03:10, 2025-11-14 07:10, 2025-11-14 15:10, 2025-11-14 19:10, 2025-11-15 03:10
FireHOL anonymizers
89.34.96.99 was recently listed on the FireHOL anonymizers blacklist, but currently it is not.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2025-12-20 12:05:09
Was present on blacklist at: 2025-11-08 12:05, 2025-11-09 12:05, 2025-11-10 12:05, 2025-11-11 12:05, 2025-11-12 12:05, 2025-11-13 12:05, 2025-11-14 12:05, 2025-11-15 12:05, 2025-11-16 12:05, 2025-11-17 12:05, 2025-11-18 12:05, 2025-11-19 12:05, 2025-11-20 12:05
OTX pulses
[690f449e3420b7641ced556a] 2025-11-08 13:24:46.057000 | VNC honeypot logs for 2025/11/08
Author name:jnazario
Pulse modified:2025-11-08 13:24:46.057000
Indicator created:2025-11-08 13:24:47
Indicator role:None
Indicator title:
Indicator expiration:2025-12-08 13:00:00
[69230b02dade461546f6af0a] 2025-11-23 13:24:18.491000 | VNC honeypot logs for 2025/11/23
Author name:jnazario
Pulse modified:2025-11-23 13:24:18.491000
Indicator created:2025-11-23 13:24:19
Indicator role:None
Indicator title:
Indicator expiration:2025-12-23 13:00:00
[69303a229f384f94fc6e1f47] 2025-12-03 13:24:50.977000 | VNC honeypot logs for 2025/12/03
Author name:jnazario
Pulse modified:2025-12-03 13:24:50.977000
Indicator created:2025-12-03 13:24:52
Indicator role:None
Indicator title:
Indicator expiration:2026-01-02 13:00:00
Origin AS
AS25369 - BANDWIDTH-AS
BGP Prefix
89.34.96.0/22
geo
United Kingdom, City of London
🕑 Europe/London
hostname
99.96.34.89.baremetal.zare.com
hostname_class
['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database)
89.34.96.0 - 89.34.99.255
last_activity
2025-12-03 16:36:26.322000
reserved_range
0
Shodan's InternetDB
Open ports: 1443, 4000, 7443, 8443
Tags:
CPEs:
ts_added
2025-11-08 15:11:20.026000
ts_last_update
2025-12-20 15:11:31.747000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses