IP address
Shodan(more info)

Passive DNS

- Warden events (18)
- 2026-07-21
-
- ReconScanning (node.86eb21): 1
- 2026-07-20
-
- ReconScanning (node.86eb21): 1
- 2026-07-19
-
- ReconScanning (node.86eb21): 1
- 2026-07-16
-
- ReconScanning (node.86eb21): 1
- 2026-07-15
-
- ReconScanning (node.86eb21): 1
- 2026-07-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-27
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-17
-
- ReconScanning (node.86eb21): 1
- 2026-06-15
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-04
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-05-10
- Number of reports: 20
- Distinct targets: 5
- 2026-05-21
- Number of reports: 72
- Distinct targets: 10
- 2026-05-28
- Number of reports: 32
- Distinct targets: 5
- 2026-06-04
- Number of reports: 32
- Distinct targets: 4
- 2026-06-17
- Number of reports: 36
- Distinct targets: 7
- 2026-07-04
- Number of reports: 36
- Distinct targets: 5
- 2026-07-05
- Number of reports: 36
- Distinct targets: 5
- 2026-07-11
- Number of reports: 58
- Distinct targets: 8
- 2026-07-12
- Number of reports: 58
- Distinct targets: 8
- 2026-07-20
- Number of reports: 34
- Distinct targets: 6
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 38 | src | scan |
- Origin AS
- AS9009 - M247
- BGP Prefix
- 149.154.159.0/24
- geo
- Germany, Frankfurt am Main
- 🕑 Europe/Berlin
- hostname
- 156.159.154.149.in-addr.arpa
- hostname_class
- ['ip_in_hostname']
- Address block ('inetnum' or 'NetRange' in whois database)
- 149.154.152.0 - 149.154.159.255
- last_activity
- 2026-07-21 01:49:24
- last_warden_event
- 2026-07-21 01:49:24
- rep
- 0.008643000654068533
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 17, 19, 21, 26, 37, 51, 79, 80, 84, 104, 110, 111, 122, 175, 190, 465, 503, 541, 554, 593, 666, 995, 1002, 1024, 1028, 1080, 1234, 1291, 1386, 1433, 1599, 1723, 1883, 1911, 1925, 1973, 2001, 2079, 2087, 2121, 2154, 2375, 2376, 2379, 2404, 2480, 2568, 2761, 2762, 3004, 3017, 3021, 3048, 3049, 3087, 3095, 3108, 3127, 3128, 3163, 3171, 3182, 3269, 3306, 3333, 3345, 3388, 3404, 3460, 3500, 3841, 3842, 4040, 4064, 4095, 4150, 4155, 4190, 4282, 4321, 4344, 4433, 4443, 4444, 4567, 4782, 4786, 4993, 5001, 5006, 5025, 5235, 5247, 5269, 5274, 5433, 5503, 5558, 5591, 5600, 5650, 5800, 5804, 5900, 5901, 5905, 5910, 5917, 5984, 6000, 6379, 6432, 6581, 6633, 6653, 6661, 6667, 6998, 7071, 7272, 7283, 7302, 7434, 7465, 7601, 7878, 7989, 7999, 8000, 8008, 8009, 8033, 8060, 8076, 8083, 8094, 8098, 8110, 8112, 8132, 8149, 8153, 8162, 8171, 8473, 8480, 8528, 8545, 8567, 8575, 8601, 8764, 8810, 8818, 8830, 8883, 9000, 9030, 9073, 9080, 9093, 9116, 9132, 9146, 9160, 9273, 9313, 9315, 9711, 9754, 9858, 9898, 9918, 9919, 9944, 9981
- Tags: honeypot
- CPEs: –
- ts_added
- 2024-10-22 05:08:06.558000
- ts_last_update
- 2026-07-23 05:09:36.349000
Warden event timeline
DShield event timeline

