IP address


.00292.38.135.237ipinfo.io
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
25 src scan

Warden events (17)
2026-07-03
ReconScanning (node.86eb21): 1
2026-07-01
ReconScanning (node.86eb21): 1
2026-06-27
ReconScanning (node.86eb21): 1
2026-06-24
ReconScanning (node.86eb21): 1
2026-06-17
ReconScanning (node.86eb21): 1
2026-06-15
ReconScanning (node.86eb21): 1
2026-06-14
ReconScanning (node.86eb21): 1
2026-06-13
ReconScanning (node.86eb21): 1
2026-06-08
ReconScanning (node.86eb21): 1
2026-05-22
ReconScanning (node.f90c6b): 2
2026-05-15
ReconScanning (node.86eb21): 1
2026-05-03
ReconScanning (node.86eb21): 1
2026-04-24
ReconScanning (node.86eb21): 1
2026-04-21
ReconScanning (node.86eb21): 1
2026-04-19
ReconScanning (node.86eb21): 1
2026-04-18
ReconScanning (node.86eb21): 1
Origin AS
AS202422 - GHOST
BGP Prefix
92.38.135.0/24
dshield
[]
fmp
{'general': 0.3377993702888489}
geo
South Korea
🕑 Asia/Seoul
hostname
ipinfo.io
Address block ('inetnum' or 'NetRange' in whois database)
92.38.132.0 - 92.38.135.255
last_activity
2026-07-03 02:13:24
last_warden_event
2026-07-03 02:13:24
rep
0.0024284226154304145
reserved_range
0
Shodan's InternetDB
Open ports: 15, 17, 19, 22, 79, 80, 82, 83, 84, 93, 102, 104, 110, 113, 243, 264, 389, 427, 444, 445, 453, 503, 513, 541, 554, 593, 632, 636, 801, 902, 995, 998, 1029, 1193, 1200, 1337, 1365, 1400, 1433, 1443, 1521, 1599, 1801, 1911, 1935, 1967, 1983, 2000, 2008, 2022, 2067, 2082, 2083, 2086, 2101, 2196, 2201, 2210, 2222, 2232, 2259, 2376, 2423, 2433, 2559, 2582, 2628, 2761, 2985, 3012, 3013, 3019, 3030, 3097, 3104, 3136, 3168, 3268, 3301, 3333, 3341, 3365, 3388, 3542, 3568, 3689, 3780, 3793, 4001, 4022, 4064, 4095, 4148, 4157, 4242, 4282, 4321, 4434, 4443, 4444, 4506, 4524, 4567, 4735, 4899, 4911, 5006, 5007, 5025, 5061, 5123, 5222, 5233, 5234, 5237, 5435, 5601, 5650, 5660, 5900, 5903, 5984, 6001, 6008, 6379, 6405, 6581, 6633, 6653, 6668, 6799, 7001, 7078, 7090, 7434, 7480, 7657, 7777, 8001, 8008, 8009, 8020, 8035, 8052, 8060, 8085, 8087, 8090, 8101, 8112, 8122, 8126, 8133, 8140, 8158, 8165, 8176, 8200, 8239, 8248, 8319, 8334, 8444, 8454, 8459, 8493, 8519, 8548, 8649, 8779, 8804, 8823, 8826, 8872, 8880, 8884, 8887, 8902, 9000, 9001, 9009, 9016, 9029, 9092, 9100, 9101, 9103, 9121, 9128, 9138, 9141, 9142, 9151, 9161, 9193, 9204, 9248, 9252, 9253, 9303, 9306, 9308, 9333, 9389, 9400, 9410, 9455, 9595, 9696, 9797, 9800, 9869, 9943, 9999
Tags: honeypot
CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.2p1
ts_added
2023-08-23 05:12:24.363000
ts_last_update
2026-07-10 05:12:30.192000

Warden event timeline

DShield event timeline