IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (18)
- 2026-05-22
-
- ReconScanning (node.f90c6b): 2
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- 2026-04-10
-
- ReconScanning (node.86eb21): 1
- 2026-04-08
-
- ReconScanning (node.f90c6b): 3
- 2026-04-05
-
- ReconScanning (node.86eb21): 1
- 2026-04-03
-
- ReconScanning (node.f90c6b): 3
- ReconScanning (node.86eb21): 1
- 2026-03-25
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-04-08
- Number of reports: 20
- Distinct targets: 3
- 2026-04-21
- Number of reports: 20
- Distinct targets: 3
- 2026-05-07
- Number of reports: 20
- Distinct targets: 3
- 2026-05-08
- Number of reports: 20
- Distinct targets: 3
- 2026-05-13
- Number of reports: 26
- Distinct targets: 4
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 36 | src | scan |
- Origin AS
- AS138915 - KAOPU-HK
- BGP Prefix
- 154.90.60.0/23
- geo
- Brazil, São Paulo
- 🕑 America/Sao_Paulo
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 154.80.0.0 - 154.95.255.255
- last_activity
- 2026-05-22 01:58:37
- last_warden_event
- 2026-05-22 01:58:37
- rep
- 0.20874054216444904
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 43, 66, 70, 102, 104, 110, 111, 113, 121, 122, 135, 179, 195, 221, 264, 311, 340, 427, 444, 445, 447, 502, 515, 554, 789, 831, 993, 1022, 1099, 1222, 1234, 1311, 1337, 1400, 1450, 1604, 1935, 1957, 1975, 2000, 2008, 2020, 2049, 2050, 2068, 2072, 2081, 2083, 2085, 2086, 2087, 2101, 2130, 2154, 2202, 2222, 2271, 2344, 2404, 2423, 2444, 2455, 2548, 2562, 2628, 2762, 3000, 3001, 3050, 3054, 3073, 3086, 3089, 3095, 3119, 3139, 3162, 3177, 3301, 3306, 3307, 3388, 3389, 3572, 4000, 4001, 4040, 4063, 4064, 4150, 4242, 4401, 4430, 4433, 4440, 4443, 4444, 4500, 4506, 4510, 4567, 4598, 4700, 4782, 4786, 4840, 4911, 5001, 5004, 5007, 5009, 5025, 5053, 5090, 5201, 5274, 5443, 5500, 5552, 5555, 5592, 5800, 5822, 5853, 5858, 5905, 5915, 5917, 5919, 5994, 5996, 6080, 6561, 6581, 6603, 6662, 6664, 7001, 7548, 7634, 7654, 7779, 7822, 7943, 7989, 8008, 8030, 8043, 8044, 8055, 8069, 8073, 8081, 8083, 8086, 8112, 8114, 8118, 8121, 8126, 8127, 8138, 8151, 8181, 8184, 8193, 8196, 8333, 8404, 8410, 8426, 8441, 8443, 8467, 8484, 8506, 8521, 8545, 8566, 8568, 8594, 8621, 8637, 8728, 8787, 8788, 8790, 8801, 8811, 8841, 8849, 8882, 8883, 8889, 8916, 8991, 9000, 9002, 9016, 9020, 9023, 9040, 9080, 9091, 9100, 9121, 9133, 9147, 9156, 9164, 9184, 9200, 9230, 9241, 9244, 9252, 9257, 9443, 9600, 9704, 9711, 9786, 9869, 9898, 9901, 9918, 9930, 9943
- Tags: –
- CPEs: –
- ts_added
- 2026-03-25 02:54:53.552000
- ts_last_update
- 2026-05-28 02:55:00.106000
Warden event timeline
DShield event timeline
Presence on blacklists

