Legal Disclaimer:

This platform is for authorized security research and educational purposes ONLY. Scanning assets without explicit permission is illegal.

High Risk
Threat Entity Node

8.8.8.8

AS51042 — HostKey B.V.

Threat Score
88/100
Abuse Confidence
95%

// AI Intelligence Summary

ReconShield Intelligence identifies 8.8.8.8 as high-risk scanner infrastructure associated with brute-force activity and mass port scanning targeting exposed RDP and SSH services. This IP is owned by HostKey B.V. (AS51042) and has a 95% abuse confidence score.

// Infrastructure Fingerprint

IP Address
8.8.8.8
Reverse DNS
scanner-01.hostkey.nl
ASN
AS51042
Organization
HostKey B.V.
Geolocation
Netherlands (NL)
Infra Type
Data Center / Hosting
Proxy / VPN
Detected
Last Activity
5/27/2026, 5:58:46 PM

// Threat Analysis

Observed Scanner Behavior

This node exhibits automated mass-scanning behaviors typical of botnets searching for vulnerable infrastructure. Target payloads indicate exploitation attempts for known remote code execution (RCE) configuration risks.

Open Ports & Services

  • Port 22
  • Port 80
  • Port 443
  • Port 3389

Malware Associations

  • Mirai Variant
  • Kinsing

// Activity Timeline

2026-05-20
Mass SSH Brute Force Detected
2026-05-18
Added to Spamhaus DROP List
2026-05-01
First Seen on ReconShield Sensors

// FREQUENTLY ASKED QUESTIONS

Is 8.8.8.8 malicious?

Based on ReconShield intelligence, 8.8.8.8 is considered high risk with a threat score of 88/100 due to observed malicious activities including mass scanning.

Who hosts 8.8.8.8?

This IP is part of AS51042 and is allocated to HostKey B.V., operating primarily out of Netherlands.

Are there known CVEs associated with this IP?

Yes, traffic originating from this IP has been correlated with exploitation attempts for CVE-2023-44487, CVE-2021-44228.