IP address


.004103.215.216.87free.ds
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
39 src scan

Warden events (19)
2026-07-10
ReconScanning (node.86eb21): 1
2026-07-03
ReconScanning (node.86eb21): 1
2026-07-01
ReconScanning (node.86eb21): 1
2026-06-27
ReconScanning (node.86eb21): 1
2026-06-24
ReconScanning (node.86eb21): 1
2026-06-17
ReconScanning (node.86eb21): 1
2026-06-15
ReconScanning (node.86eb21): 1
2026-06-14
ReconScanning (node.86eb21): 1
2026-06-13
ReconScanning (node.86eb21): 1
2026-06-08
ReconScanning (node.86eb21): 1
2026-06-05
ReconScanning (node.86eb21): 1
2026-05-22
ReconScanning (node.f90c6b): 3
2026-05-03
ReconScanning (node.86eb21): 1
2026-04-24
ReconScanning (node.86eb21): 1
2026-04-21
ReconScanning (node.86eb21): 1
2026-04-19
ReconScanning (node.86eb21): 1
2026-04-18
ReconScanning (node.86eb21): 1
DShield reports (IP summary, reports)
2026-04-19
Number of reports: 16
Distinct targets: 3
2026-05-07
Number of reports: 12
Distinct targets: 3
2026-05-08
Number of reports: 12
Distinct targets: 3
2026-05-13
Number of reports: 20
Distinct targets: 4
2026-05-18
Number of reports: 24
Distinct targets: 4
2026-05-19
Number of reports: 24
Distinct targets: 4
2026-07-01
Number of reports: 20
Distinct targets: 5
2026-07-08
Number of reports: 32
Distinct targets: 5
Origin AS
AS202422 - GHOST
BGP Prefix
103.215.216.0/24
geo
India, Navi Mumbai
🕑 Asia/Kolkata
hostname
free.ds
Address block ('inetnum' or 'NetRange' in whois database)
103.215.216.0 - 103.215.219.255
last_activity
2026-07-10 02:36:28
last_warden_event
2026-07-10 02:36:28
rep
0.004320497071430229
reserved_range
0
Shodan's InternetDB
Open ports: 11, 22, 37, 70, 80, 84, 87, 95, 99, 102, 113, 175, 221, 340, 443, 444, 450, 465, 513, 515, 541, 548, 587, 632, 636, 685, 771, 831, 953, 993, 1024, 1027, 1180, 1200, 1234, 1414, 1443, 1456, 1883, 1926, 1951, 1976, 2006, 2018, 2067, 2080, 2082, 2083, 2100, 2223, 2363, 2506, 2557, 2566, 2570, 2602, 2761, 2762, 3008, 3009, 3071, 3097, 3119, 3189, 3260, 3299, 3388, 3531, 3542, 3551, 3570, 3689, 3749, 3790, 4000, 4022, 4040, 4064, 4085, 4159, 4160, 4190, 4242, 4282, 4333, 4343, 4434, 4435, 4443, 4444, 4461, 4482, 4506, 4550, 4567, 4747, 4786, 4808, 4899, 4949, 5001, 5007, 5080, 5090, 5201, 5223, 5244, 5432, 5494, 5558, 5613, 5620, 5630, 5672, 5721, 5858, 5903, 5919, 5938, 5992, 6005, 6511, 6543, 6565, 6653, 6666, 6668, 7000, 7001, 7015, 7079, 7403, 7433, 7443, 7548, 7779, 7900, 8008, 8010, 8026, 8030, 8051, 8069, 8073, 8079, 8084, 8087, 8097, 8098, 8110, 8124, 8126, 8140, 8152, 8160, 8193, 8199, 8241, 8251, 8252, 8291, 8403, 8406, 8460, 8513, 8520, 8550, 8566, 8575, 8579, 8593, 8596, 8733, 8767, 8782, 8787, 8828, 8834, 8853, 8880, 8887, 8888, 8889, 9002, 9030, 9031, 9038, 9046, 9048, 9059, 9077, 9081, 9086, 9092, 9095, 9107, 9150, 9155, 9165, 9189, 9236, 9299, 9307, 9308, 9310, 9333, 9398, 9418, 9488, 9595, 9600, 9761, 9916, 9928, 9998, 9999
Tags: honeypot
CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1
ts_added
2026-02-06 01:34:44.786000
ts_last_update
2026-07-11 01:34:50.481000

Warden event timeline

DShield event timeline