IP address
Shodan(more info)

Passive DNS

- Warden events (17)
- 2026-07-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-27
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-17
-
- ReconScanning (node.86eb21): 1
- 2026-06-15
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 2
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-04-19
- Number of reports: 20
- Distinct targets: 4
- 2026-04-20
- Number of reports: 83
- Distinct targets: 20
- 2026-04-21
- Number of reports: 105
- Distinct targets: 27
- 2026-04-29
- Number of reports: 95
- Distinct targets: 21
- 2026-04-30
- Number of reports: 95
- Distinct targets: 21
- 2026-05-07
- Number of reports: 67
- Distinct targets: 17
- 2026-05-08
- Number of reports: 67
- Distinct targets: 17
- 2026-05-09
- Number of reports: 38
- Distinct targets: 7
- 2026-05-13
- Number of reports: 16
- Distinct targets: 3
- 2026-05-14
- Number of reports: 46
- Distinct targets: 11
- 2026-05-18
- Number of reports: 16
- Distinct targets: 3
- 2026-05-19
- Number of reports: 16
- Distinct targets: 3
- 2026-05-20
- Number of reports: 82
- Distinct targets: 17
- 2026-06-02
- Number of reports: 93
- Distinct targets: 21
- 2026-06-03
- Number of reports: 93
- Distinct targets: 21
- 2026-06-09
- Number of reports: 88
- Distinct targets: 21
- 2026-06-10
- Number of reports: 88
- Distinct targets: 21
- 2026-06-16
- Number of reports: 74
- Distinct targets: 20
- 2026-07-03
- Number of reports: 66
- Distinct targets: 16
- 2026-07-08
- Number of reports: 12
- Distinct targets: 3
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 52 | src | scan |
- Origin AS
- AS202422 - GHOST
- BGP Prefix
- 139.28.5.0/24
- geo
- United States, Dallas
- 🕑 America/Chicago
- hostname
- dallas.com
- Address block ('inetnum' or 'NetRange' in whois database)
- 139.28.4.0 - 139.28.7.255
- last_activity
- 2026-07-03 02:21:19
- last_warden_event
- 2026-07-03 02:21:19
- rep
- 0.001940182741459795
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 13, 19, 20, 21, 25, 70, 79, 80, 83, 96, 102, 119, 121, 189, 195, 231, 264, 311, 443, 444, 445, 453, 502, 554, 572, 587, 632, 666, 771, 789, 800, 808, 830, 873, 992, 993, 995, 1153, 1198, 1200, 1250, 1337, 1400, 1443, 1455, 1459, 1471, 1521, 1723, 1800, 1883, 1911, 1925, 1960, 1962, 2008, 2030, 2058, 2067, 2082, 2087, 2121, 2154, 2181, 2196, 2202, 2222, 2375, 2376, 2404, 2761, 2762, 3000, 3050, 3053, 3076, 3081, 3093, 3103, 3110, 3112, 3115, 3128, 3129, 3144, 3154, 3162, 3189, 3195, 3221, 3388, 3400, 3402, 3407, 3460, 3541, 3551, 3556, 3572, 3689, 3749, 3780, 3790, 3828, 3910, 3953, 4022, 4063, 4104, 4200, 4242, 4282, 4358, 4369, 4444, 4445, 4463, 4500, 4506, 4550, 4567, 4664, 4782, 4786, 4848, 4899, 4911, 5007, 5009, 5025, 5085, 5093, 5180, 5222, 5226, 5227, 5228, 5247, 5262, 5277, 5280, 5432, 5433, 5435, 5444, 5446, 5557, 5594, 5605, 5858, 5900, 5938, 5984, 6004, 6352, 6379, 6482, 6488, 6666, 6668, 7001, 7071, 7415, 7474, 7547, 7601, 7657, 7779, 8000, 8008, 8009, 8019, 8025, 8055, 8060, 8081, 8086, 8093, 8098, 8112, 8118, 8123, 8126, 8131, 8135, 8140, 8148, 8160, 8188, 8200, 8291, 8334, 8377, 8429, 8456, 8457, 8481, 8484, 8502, 8515, 8530, 8540, 8545, 8549, 8550, 8554, 8556, 8582, 8605, 8641, 8800, 8802, 8826, 8831, 8839, 8870, 8888, 8899, 9000, 9003, 9010, 9039, 9041, 9046, 9047, 9056, 9070, 9080, 9090, 9092, 9107, 9109, 9123, 9146, 9149, 9150, 9151, 9157, 9159, 9170, 9191, 9230, 9243, 9245, 9295, 9301, 9306, 9315, 9351, 9399, 9400, 9418, 9441, 9443, 9444, 9501, 9606, 9633, 9761, 9800, 9804, 9888, 9943, 9944, 9999
- Tags: honeypot
- CPEs: –
- ts_added
- 2025-12-25 01:08:15.411000
- ts_last_update
- 2026-07-11 01:08:20.404000
Warden event timeline
DShield event timeline

