IP address
Shodan(more info)

Passive DNS

- Warden events (17)
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-27
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-17
-
- ReconScanning (node.86eb21): 1
- 2026-06-15
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 2
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 2
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | src | scan |
- Origin AS
- AS202422 - GHOST
- BGP Prefix
- 89.44.193.0/24
- dshield
- []
- geo
- Kazakhstan, Almaty
- 🕑 Asia/Almaty
- hostname
- ipinfo.io
- Address block ('inetnum' or 'NetRange' in whois database)
- 89.44.192.0 - 89.44.199.255
- last_activity
- 2026-07-01 01:28:14
- last_warden_event
- 2026-07-01 01:28:14
- rep
- 0.0011208104378910289
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 13, 70, 80, 81, 82, 83, 84, 88, 102, 106, 110, 111, 311, 427, 513, 522, 541, 587, 636, 873, 992, 995, 999, 1027, 1029, 1153, 1224, 1234, 1400, 1443, 1471, 1741, 1801, 1883, 1926, 1935, 1951, 1962, 1983, 1985, 2008, 2083, 2154, 2221, 2222, 2345, 2375, 2376, 2379, 2404, 2453, 2455, 2480, 2506, 2550, 2555, 2761, 2762, 3055, 3087, 3098, 3102, 3269, 3299, 3388, 3389, 3460, 3521, 3551, 3563, 3590, 3689, 3780, 4000, 4282, 4433, 4444, 4500, 4567, 4840, 4911, 5000, 5007, 5009, 5222, 5250, 5253, 5258, 5552, 5556, 5560, 5900, 5938, 5986, 6000, 6001, 6379, 6405, 6432, 6443, 6511, 6664, 6697, 6799, 7000, 7001, 7006, 7071, 7170, 7171, 7415, 7434, 7443, 7548, 7634, 7687, 7777, 7779, 8001, 8008, 8009, 8035, 8053, 8056, 8083, 8085, 8087, 8089, 8092, 8098, 8101, 8118, 8123, 8126, 8140, 8181, 8193, 8200, 8237, 8434, 8443, 8472, 8544, 8575, 8790, 8801, 8880, 9000, 9002, 9039, 9040, 9042, 9051, 9080, 9091, 9092, 9093, 9095, 9100, 9186, 9191, 9200, 9215, 9295, 9398, 9410, 9595, 9600, 9800, 9869, 9944
- Tags: honeypot
- CPEs: –
- ts_added
- 2025-01-07 05:01:59.655000
- ts_last_update
- 2026-07-10 05:02:52.278000
Warden event timeline
DShield event timeline

