IP address
Search at other sites: 
.001149.154.159.156156.159.154.149.in-addr.arpa
Shodan(more info)
Passive DNS
- Warden events (28)
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-04
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- 2026-04-16
-
- ReconScanning (node.86eb21): 1
- 2026-04-10
-
- ReconScanning (node.86eb21): 2
- 2026-04-08
-
- ReconScanning (node.f90c6b): 3
- 2026-04-05
-
- ReconScanning (node.86eb21): 1
- 2026-04-03
-
- ReconScanning (node.86eb21): 1
- 2026-03-25
-
- ReconScanning (node.86eb21): 1
- 2026-03-21
-
- ReconScanning (node.86eb21): 2
- 2026-03-16
-
- ReconScanning (node.86eb21): 1
- 2026-03-15
-
- ReconScanning (node.86eb21): 1
- 2026-03-13
-
- ReconScanning (node.86eb21): 1
- 2026-03-11
-
- ReconScanning (node.86eb21): 1
- 2026-03-07
-
- ReconScanning (node.86eb21): 1
- 2026-03-06
-
- ReconScanning (node.86eb21): 1
- 2026-03-03
-
- ReconScanning (node.86eb21): 1
- 2026-02-27
-
- ReconScanning (node.86eb21): 1
- 2026-02-26
-
- ReconScanning (node.86eb21): 1
- 2026-02-24
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-02-27
- Number of reports: 52
- Distinct targets: 8
- 2026-03-12
- Number of reports: 48
- Distinct targets: 8
- 2026-03-13
- Number of reports: 48
- Distinct targets: 8
- 2026-03-18
- Number of reports: 56
- Distinct targets: 8
- 2026-04-03
- Number of reports: 64
- Distinct targets: 9
- 2026-04-10
- Number of reports: 32
- Distinct targets: 5
- 2026-04-23
- Number of reports: 64
- Distinct targets: 8
- 2026-05-10
- Number of reports: 20
- Distinct targets: 5
- 2026-05-21
- Number of reports: 72
- Distinct targets: 10
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 42 | src | scan |
- Origin AS
- AS9009 - M247
- BGP Prefix
- 149.154.159.0/24
- geo
- Germany, Frankfurt am Main
- 🕑 Europe/Berlin
- hostname
- 156.159.154.149.in-addr.arpa
- hostname_class
- ['ip_in_hostname']
- Address block ('inetnum' or 'NetRange' in whois database)
- 149.154.152.0 - 149.154.159.255
- last_activity
- 2026-05-15 02:19:12
- last_warden_event
- 2026-05-15 02:19:12
- rep
- 0.0010203759606767226
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 15, 19, 25, 26, 37, 70, 79, 80, 82, 83, 84, 88, 92, 96, 97, 102, 104, 106, 110, 111, 119, 122, 135, 143, 175, 179, 195, 221, 222, 264, 311, 314, 343, 440, 444, 445, 448, 453, 465, 502, 503, 515, 541, 548, 554, 587, 591, 593, 631, 636, 666, 689, 777, 873, 992, 993, 1013, 1025, 1027, 1080, 1110, 1153, 1188, 1193, 1200, 1234, 1293, 1311, 1387, 1400, 1433, 1444, 1588, 1604, 1723, 1733, 1801, 1925, 1926, 1935, 1947, 1962, 2000, 2008, 2010, 2067, 2081, 2083, 2086, 2087, 2096, 2107, 2133, 2222, 2233, 2248, 2345, 2376, 2453, 2455, 2480, 2506, 2548, 2553, 2556, 2562, 2567, 2598, 2602, 2761, 2762, 2806, 3000, 3051, 3060, 3063, 3067, 3097, 3106, 3125, 3129, 3131, 3133, 3138, 3141, 3149, 3268, 3269, 3299, 3333, 3342, 3388, 3405, 3479, 3503, 3530, 3542, 3556, 3563, 3780, 3790, 3950, 4022, 4040, 4120, 4159, 4242, 4434, 4444, 4567, 4664, 4786, 4840, 4899, 4934, 5000, 5001, 5007, 5009, 5010, 5025, 5053, 5083, 5090, 5130, 5201, 5209, 5228, 5239, 5251, 5253, 5257, 5280, 5432, 5495, 5560, 5592, 5593, 5598, 5601, 5607, 5609, 5673, 5801, 5804, 5858, 5900, 5905, 5908, 5918, 5985, 5986, 5989, 5996, 6000, 6061, 6080, 6081, 6400, 6432, 6443, 6588, 6653, 6664, 6667, 6668, 6697, 7001, 7018, 7050, 7078, 7170, 7171, 7283, 7348, 7474, 7634, 7657, 7776, 7777, 7779, 7790, 7944, 8008, 8011, 8016, 8048, 8058, 8063, 8070, 8076, 8085, 8087, 8089, 8091, 8099, 8112, 8115, 8126, 8135, 8137, 8139, 8149, 8151, 8161, 8169, 8171, 8178, 8183, 8192, 8194, 8200, 8239, 8251, 8262, 8283, 8319, 8322, 8333, 8423, 8431, 8435, 8443, 8448, 8450, 8464, 8484, 8502, 8504, 8513, 8514, 8530, 8558, 8564, 8576, 8590, 8623, 8649, 8709, 8728, 8764, 8766, 8784, 8789, 8803, 8804, 8820, 8826, 8852, 8855, 8865, 8869, 8883, 8884, 8900, 8908, 8916, 9001, 9009, 9020, 9024, 9034, 9042, 9057, 9063, 9073, 9091, 9092, 9100, 9103, 9113, 9114, 9120, 9128, 9133, 9144, 9147, 9151, 9166, 9183, 9201, 9202, 9213, 9216, 9241, 9306, 9333, 9383, 9398, 9418, 9443, 9445, 9611, 9682, 9754, 9779, 9802, 9869, 9872, 9981, 9993, 9998, 9999
- Tags: honeypot
- CPEs: –
- ts_added
- 2024-10-22 05:08:06.558000
- ts_last_update
- 2026-05-24 05:08:11.956000
Warden event timeline
DShield event timeline