IP address
Shodan(more info)

Passive DNS

- Warden events (18)
- 2026-07-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-27
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-17
-
- ReconScanning (node.86eb21): 1
- 2026-06-15
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 3
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-04-22
- Number of reports: 40
- Distinct targets: 5
- 2026-05-01
- Number of reports: 40
- Distinct targets: 6
- 2026-05-07
- Number of reports: 28
- Distinct targets: 4
- 2026-05-08
- Number of reports: 28
- Distinct targets: 4
- 2026-05-09
- Number of reports: 25
- Distinct targets: 4
- 2026-05-13
- Number of reports: 24
- Distinct targets: 4
- 2026-05-14
- Number of reports: 56
- Distinct targets: 8
- 2026-05-18
- Number of reports: 28
- Distinct targets: 4
- 2026-05-19
- Number of reports: 28
- Distinct targets: 4
- 2026-05-20
- Number of reports: 36
- Distinct targets: 5
- 2026-06-02
- Number of reports: 20
- Distinct targets: 4
- 2026-06-03
- Number of reports: 20
- Distinct targets: 4
- 2026-06-09
- Number of reports: 36
- Distinct targets: 5
- 2026-06-10
- Number of reports: 36
- Distinct targets: 5
- 2026-06-16
- Number of reports: 28
- Distinct targets: 5
- 2026-07-01
- Number of reports: 20
- Distinct targets: 3
- 2026-07-02
- Number of reports: 32
- Distinct targets: 5
- 2026-07-08
- Number of reports: 20
- Distinct targets: 3
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 48 | src | scan |
- Origin AS
- AS202422 - GHOST
- BGP Prefix
- 92.223.79.0/24
- fmp
- {'general': 0.3302728831768036}
- geo
- Italy, Milan
- 🕑 Europe/Rome
- hostname
- ipinfo.io
- Address block ('inetnum' or 'NetRange' in whois database)
- 92.223.76.0 - 92.223.79.255
- last_activity
- 2026-07-03 01:59:24
- last_warden_event
- 2026-07-03 01:59:24
- otx_pulses
- []
- rep
- 0.0024506103699798443
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 13, 17, 21, 25, 26, 37, 43, 49, 70, 80, 83, 99, 110, 135, 179, 195, 264, 285, 427, 513, 541, 548, 554, 593, 666, 785, 809, 1024, 1250, 1355, 1414, 1447, 1741, 1800, 1925, 1935, 1950, 1962, 2064, 2082, 2222, 2362, 2379, 2433, 2480, 3001, 3053, 3057, 3071, 3141, 3176, 3187, 3197, 3221, 3268, 3407, 3408, 3412, 3541, 3551, 3689, 4022, 4282, 4433, 4443, 4444, 4543, 4545, 4567, 4664, 4782, 4821, 4840, 5010, 5025, 5226, 5256, 5257, 5431, 5432, 5433, 5435, 5560, 5911, 5915, 6432, 6511, 6664, 6668, 6699, 6896, 7079, 7083, 7171, 7172, 7403, 7434, 7474, 7648, 7777, 7779, 7822, 8000, 8008, 8062, 8063, 8067, 8083, 8100, 8126, 8134, 8138, 8142, 8160, 8165, 8304, 8384, 8415, 8496, 8554, 8589, 8728, 8800, 8889, 9001, 9020, 9091, 9092, 9100, 9142, 9153, 9178, 9185, 9201, 9418, 9530, 9811, 9869, 9898, 9943, 9944
- Tags: honeypot
- CPEs: –
- ts_added
- 2023-07-25 05:03:51.521000
- ts_last_update
- 2026-07-10 05:04:15.641000
Warden event timeline
DShield event timeline

