IP address
Search at other sites: 
.00289.44.197.140sofia.com
Shodan(more info)
Passive DNS
- Warden events (17)
- 2026-07-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-17
-
- ReconScanning (node.86eb21): 1
- 2026-06-15
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 3
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-04-20
- Number of reports: 20
- Distinct targets: 3
- 2026-05-14
- Number of reports: 36
- Distinct targets: 5
- 2026-05-20
- Number of reports: 46
- Distinct targets: 7
- 2026-06-09
- Number of reports: 24
- Distinct targets: 3
- 2026-06-10
- Number of reports: 24
- Distinct targets: 3
- 2026-06-16
- Number of reports: 24
- Distinct targets: 4
- 2026-07-09
- Number of reports: 24
- Distinct targets: 3
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 39 | src | scan |
- Origin AS
- AS202422 - GHOST
- BGP Prefix
- 89.44.197.0/24
- bl
- []
- geo
- Bulgaria, Sofia
- 🕑 Europe/Sofia
- hostname
- sofia.com
- Address block ('inetnum' or 'NetRange' in whois database)
- 89.44.192.0 - 89.44.199.255
- last_activity
- 2026-07-03 02:05:25
- last_warden_event
- 2026-07-03 02:05:25
- rep
- 0.001877740183952814
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 2, 13, 15, 20, 21, 22, 25, 26, 37, 43, 49, 70, 80, 82, 84, 94, 101, 110, 111, 113, 135, 143, 389, 441, 443, 444, 449, 465, 485, 487, 502, 503, 541, 554, 631, 771, 853, 873, 885, 888, 902, 993, 1012, 1153, 1224, 1234, 1342, 1400, 1446, 1521, 1599, 1604, 1700, 1723, 1801, 1883, 1958, 1960, 1962, 1965, 1974, 2000, 2064, 2080, 2082, 2086, 2121, 2134, 2221, 2222, 2375, 2376, 2400, 2480, 2557, 2762, 3001, 3056, 3062, 3094, 3101, 3111, 3126, 3127, 3136, 3153, 3156, 3162, 3192, 3194, 3195, 3199, 3200, 3299, 3306, 3329, 3349, 3388, 3412, 3542, 3548, 3554, 3559, 3570, 3622, 3689, 3749, 4000, 4103, 4150, 4282, 4321, 4430, 4435, 4444, 4488, 4500, 4510, 4567, 4620, 4786, 4890, 4962, 5010, 5025, 5070, 5083, 5209, 5222, 5243, 5247, 5262, 5269, 5277, 5435, 5542, 5555, 5601, 5608, 5800, 5801, 5920, 5938, 5984, 5985, 6001, 6005, 6009, 6070, 6080, 6161, 6308, 6432, 6543, 6653, 6667, 6668, 6700, 6755, 7000, 7001, 7006, 7057, 7082, 7087, 7162, 7171, 7283, 7434, 7474, 7654, 7681, 7687, 7777, 8000, 8008, 8009, 8010, 8043, 8060, 8069, 8085, 8086, 8087, 8089, 8098, 8099, 8112, 8123, 8130, 8136, 8140, 8184, 8193, 8199, 8200, 8238, 8334, 8404, 8418, 8443, 8449, 8450, 8503, 8505, 8528, 8550, 8554, 8575, 8584, 8649, 8687, 8688, 8700, 8704, 8728, 8743, 8745, 8789, 8812, 8834, 8880, 8881, 9009, 9018, 9024, 9033, 9051, 9054, 9056, 9080, 9093, 9095, 9100, 9101, 9115, 9137, 9165, 9169, 9198, 9200, 9202, 9295, 9443, 9447, 9476, 9500, 9599, 9600, 9633, 9761, 9803, 9810, 9898, 9909, 9916, 9944, 9998, 9999
- Tags: honeypot
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.2p1
- ts_added
- 2026-02-06 01:34:46.585000
- ts_last_update
- 2026-07-11 01:34:50.443000
Warden event timeline
DShield event timeline