IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (20)
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 2
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- 2026-04-10
-
- ReconScanning (node.86eb21): 1
- 2026-04-08
-
- ReconScanning (node.f90c6b): 3
- 2026-04-05
-
- ReconScanning (node.86eb21): 1
- 2026-04-03
-
- ReconScanning (node.f90c6b): 3
- ReconScanning (node.86eb21): 1
- 2026-03-25
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-04-08
- Number of reports: 20
- Distinct targets: 3
- 2026-04-21
- Number of reports: 20
- Distinct targets: 3
- 2026-05-07
- Number of reports: 20
- Distinct targets: 3
- 2026-05-08
- Number of reports: 20
- Distinct targets: 3
- 2026-05-13
- Number of reports: 26
- Distinct targets: 4
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | src | scan |
- Origin AS
- AS138915 - KAOPU-HK
- BGP Prefix
- 154.90.60.0/23
- geo
- Brazil, São Paulo
- 🕑 America/Sao_Paulo
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 154.80.0.0 - 154.95.255.255
- last_activity
- 2026-06-13 01:45:52
- last_warden_event
- 2026-06-13 01:45:52
- rep
- 0.004296440011915426
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 15, 21, 43, 51, 84, 86, 88, 102, 104, 111, 113, 121, 122, 179, 195, 221, 264, 311, 389, 444, 445, 515, 548, 593, 636, 789, 808, 953, 993, 999, 1028, 1099, 1153, 1234, 1293, 1311, 1337, 1414, 1471, 1604, 1801, 1883, 1925, 1957, 1976, 2008, 2049, 2050, 2067, 2068, 2072, 2079, 2081, 2085, 2086, 2087, 2101, 2130, 2150, 2154, 2202, 2210, 2404, 2562, 2626, 2762, 3000, 3001, 3042, 3050, 3052, 3059, 3095, 3121, 3139, 3162, 3190, 3197, 3270, 3307, 3310, 3388, 3389, 3551, 4000, 4022, 4040, 4063, 4160, 4242, 4244, 4401, 4443, 4444, 4598, 4782, 4786, 4840, 4911, 5001, 5004, 5006, 5007, 5009, 5025, 5089, 5090, 5145, 5201, 5272, 5432, 5443, 5542, 5552, 5598, 5614, 5800, 5858, 5901, 5905, 5917, 5994, 6000, 6001, 6080, 6561, 6662, 6664, 6697, 7272, 7510, 7634, 7799, 7822, 7943, 8008, 8009, 8010, 8015, 8016, 8030, 8043, 8044, 8073, 8081, 8083, 8086, 8114, 8121, 8126, 8135, 8138, 8140, 8193, 8196, 8407, 8445, 8467, 8481, 8506, 8540, 8544, 8545, 8566, 8573, 8621, 8637, 8728, 8790, 8801, 8805, 8815, 8834, 8841, 8849, 8883, 8889, 8916, 8999, 9022, 9023, 9042, 9051, 9073, 9080, 9091, 9100, 9121, 9133, 9163, 9164, 9184, 9200, 9217, 9218, 9226, 9241, 9252, 9333, 9465, 9600, 9711, 9869, 9930, 9998
- Tags: –
- CPEs: –
- ts_added
- 2026-03-25 02:54:53.552000
- ts_last_update
- 2026-06-13 02:55:00.117000
Warden event timeline
DShield event timeline
Presence on blacklists

