IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (16)
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- 2026-04-10
-
- ReconScanning (node.86eb21): 1
- 2026-04-08
-
- ReconScanning (node.f90c6b): 3
- 2026-04-05
-
- ReconScanning (node.86eb21): 1
- 2026-04-03
-
- ReconScanning (node.f90c6b): 3
- ReconScanning (node.86eb21): 1
- 2026-03-25
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-04-08
- Number of reports: 20
- Distinct targets: 3
- 2026-04-21
- Number of reports: 20
- Distinct targets: 3
- 2026-05-07
- Number of reports: 20
- Distinct targets: 3
- 2026-05-08
- Number of reports: 20
- Distinct targets: 3
- 2026-05-13
- Number of reports: 26
- Distinct targets: 4
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 40 | src | scan |
- Origin AS
- AS138915 - KAOPU-HK
- BGP Prefix
- 154.90.60.0/23
- geo
- Brazil, São Paulo
- 🕑 America/Sao_Paulo
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 154.80.0.0 - 154.95.255.255
- last_activity
- 2026-05-15 01:51:59
- last_warden_event
- 2026-05-15 01:51:59
- rep
- 0.002259354178645201
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 15, 17, 21, 22, 26, 43, 49, 66, 70, 79, 80, 81, 98, 99, 102, 104, 110, 111, 113, 122, 135, 143, 179, 195, 199, 221, 264, 285, 311, 340, 427, 444, 447, 502, 503, 513, 515, 541, 548, 554, 587, 593, 631, 658, 743, 789, 831, 832, 873, 992, 993, 995, 1022, 1024, 1029, 1099, 1177, 1181, 1222, 1234, 1337, 1388, 1400, 1414, 1433, 1450, 1577, 1599, 1604, 1700, 1723, 1801, 1911, 1926, 1935, 1955, 1969, 1975, 2000, 2008, 2020, 2050, 2053, 2057, 2061, 2070, 2081, 2082, 2083, 2085, 2087, 2121, 2154, 2181, 2202, 2221, 2222, 2226, 2271, 2344, 2345, 2376, 2379, 2404, 2423, 2444, 2455, 2548, 2553, 2562, 2628, 2762, 2850, 3000, 3001, 3015, 3016, 3050, 3054, 3073, 3080, 3086, 3089, 3108, 3119, 3123, 3128, 3148, 3160, 3174, 3177, 3200, 3270, 3301, 3306, 3310, 3388, 3404, 3460, 3541, 3542, 3551, 3558, 3572, 3580, 3951, 4000, 4001, 4002, 4064, 4120, 4148, 4150, 4242, 4250, 4321, 4400, 4401, 4430, 4433, 4434, 4435, 4440, 4443, 4444, 4445, 4451, 4500, 4506, 4510, 4567, 4664, 4700, 4782, 4786, 4840, 4848, 4911, 5000, 5001, 5005, 5006, 5007, 5009, 5010, 5025, 5053, 5061, 5119, 5130, 5135, 5201, 5222, 5231, 5245, 5258, 5263, 5269, 5274, 5435, 5446, 5495, 5500, 5552, 5555, 5556, 5592, 5672, 5800, 5801, 5822, 5853, 5858, 5905, 5907, 5915, 5919, 5938, 5985, 5996, 6001, 6080, 6264, 6308, 6432, 6581, 6588, 6603, 6633, 6653, 6664, 6666, 6667, 6686, 6700, 6780, 6950, 7001, 7011, 7012, 7014, 7401, 7443, 7474, 7548, 7634, 7654, 7771, 7775, 7777, 7779, 7799, 7887, 7943, 7989, 7999, 8000, 8003, 8008, 8009, 8021, 8022, 8030, 8043, 8050, 8055, 8059, 8060, 8065, 8069, 8070, 8077, 8078, 8081, 8086, 8087, 8089, 8092, 8098, 8099, 8112, 8118, 8123, 8127, 8134, 8138, 8151, 8162, 8171, 8181, 8184, 8185, 8188, 8190, 8196, 8200, 8236, 8239, 8241, 8251, 8280, 8315, 8333, 8334, 8402, 8404, 8410, 8417, 8423, 8424, 8426, 8430, 8441, 8443, 8470, 8484, 8488, 8493, 8501, 8521, 8543, 8545, 8558, 8561, 8562, 8568, 8570, 8575, 8579, 8589, 8594, 8621, 8637, 8706, 8724, 8728, 8767, 8787, 8788, 8790, 8791, 8800, 8803, 8811, 8823, 8834, 8867, 8882, 8883, 8889, 8916, 8990, 8991, 8993, 9000, 9001, 9002, 9008, 9016, 9020, 9026, 9031, 9040, 9042, 9047, 9078, 9081, 9090, 9091, 9092, 9095, 9100, 9107, 9109, 9121, 9147, 9151, 9156, 9157, 9180, 9183, 9191, 9200, 9205, 9206, 9230, 9241, 9244, 9252, 9257, 9273, 9295, 9333, 9387, 9389, 9398, 9443, 9530, 9550, 9553, 9600, 9704, 9711, 9758, 9761, 9786, 9876, 9898, 9901, 9918, 9919, 9928, 9930, 9943, 9944, 9966, 9990, 9997
- Tags: honeypot
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1
- ts_added
- 2026-03-25 02:54:53.552000
- ts_last_update
- 2026-05-17 02:55:00.354000
Warden event timeline
DShield event timeline
Presence on blacklists

