IP address
Shodan(more info)

Passive DNS

- IP blacklists
- OTX pulses
-
[6908adb076f9fe376f9c252f] 2025-11-03 13:27:12.869000 | RDP honeypot logs for 2025/11/03
Author name: jnazario Pulse modified: 2025-11-03 13:27:12.869000 Indicator created: 2025-11-03 13:27:13 Indicator role: None Indicator title: Indicator expiration: 2025-12-03 13:00:00 [691b22149df1b280d37f914b] 2025-11-17 13:24:36.039000 | RDP honeypot logs for 2025/11/17Author name: jnazario Pulse modified: 2025-11-17 13:24:36.039000 Indicator created: 2025-11-17 13:24:37 Indicator role: None Indicator title: Indicator expiration: 2025-12-17 13:00:00 [691c7390588f8afe40d93007] 2025-11-18 13:24:32.648000 | RDP honeypot logs for 2025/11/18Author name: jnazario Pulse modified: 2025-11-18 13:24:32.648000 Indicator created: 2025-11-18 13:24:33 Indicator role: None Indicator title: Indicator expiration: 2025-12-18 13:00:00 [691dc50fc27ad335eecc7fbe] 2025-11-19 13:24:31.858000 | RDP honeypot logs for 2025/11/19Author name: jnazario Pulse modified: 2025-11-19 13:24:31.858000 Indicator created: 2025-11-19 13:24:32 Indicator role: None Indicator title: Indicator expiration: 2025-12-19 13:00:00
- Origin AS
- AS4766 - KIXS-AS-KR KIXS-AS-KR-KR
- BGP Prefix
- 119.200.0.0/13
- geo
- South Korea, Pohang
- 🕑 Asia/Seoul
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 119.192.0.0 - 119.223.255.255
- last_activity
- 2025-11-19 16:37:22.458000
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 3389, 9999
- Tags: self-signed
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1, cpe:/a:apache:http_server
- ts_added
- 2025-11-03 08:49:32.451000
- ts_last_update
- 2025-12-26 08:49:40.414000
Warden event timeline
DShield event timeline
Presence on blacklists
OTX pulses

