IP address
Shodan(more info)

Passive DNS

- Warden events (17)
- 2026-07-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-27
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-17
-
- ReconScanning (node.86eb21): 1
- 2026-06-15
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 2
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | src | scan |
- Origin AS
- AS202422 - GHOST
- BGP Prefix
- 92.38.135.0/24
- dshield
- []
- fmp
- {'general': 0.3377993702888489}
- geo
- South Korea
- 🕑 Asia/Seoul
- hostname
- ipinfo.io
- Address block ('inetnum' or 'NetRange' in whois database)
- 92.38.132.0 - 92.38.135.255
- last_activity
- 2026-07-03 02:13:24
- last_warden_event
- 2026-07-03 02:13:24
- rep
- 0.0024284226154304145
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 15, 17, 19, 22, 79, 80, 82, 83, 84, 93, 102, 104, 110, 113, 243, 264, 389, 427, 444, 445, 453, 503, 513, 541, 554, 593, 632, 636, 801, 902, 995, 998, 1029, 1193, 1200, 1337, 1365, 1400, 1433, 1443, 1521, 1599, 1801, 1911, 1935, 1967, 1983, 2000, 2008, 2022, 2067, 2082, 2083, 2086, 2101, 2196, 2201, 2210, 2222, 2232, 2259, 2376, 2423, 2433, 2559, 2582, 2628, 2761, 2985, 3012, 3013, 3019, 3030, 3097, 3104, 3136, 3168, 3268, 3301, 3333, 3341, 3365, 3388, 3542, 3568, 3689, 3780, 3793, 4001, 4022, 4064, 4095, 4148, 4157, 4242, 4282, 4321, 4434, 4443, 4444, 4506, 4524, 4567, 4735, 4899, 4911, 5006, 5007, 5025, 5061, 5123, 5222, 5233, 5234, 5237, 5435, 5601, 5650, 5660, 5900, 5903, 5984, 6001, 6008, 6379, 6405, 6581, 6633, 6653, 6668, 6799, 7001, 7078, 7090, 7434, 7480, 7657, 7777, 8001, 8008, 8009, 8020, 8035, 8052, 8060, 8085, 8087, 8090, 8101, 8112, 8122, 8126, 8133, 8140, 8158, 8165, 8176, 8200, 8239, 8248, 8319, 8334, 8444, 8454, 8459, 8493, 8519, 8548, 8649, 8779, 8804, 8823, 8826, 8872, 8880, 8884, 8887, 8902, 9000, 9001, 9009, 9016, 9029, 9092, 9100, 9101, 9103, 9121, 9128, 9138, 9141, 9142, 9151, 9161, 9193, 9204, 9248, 9252, 9253, 9303, 9306, 9308, 9333, 9389, 9400, 9410, 9455, 9595, 9696, 9797, 9800, 9869, 9943, 9999
- Tags: honeypot
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.2p1
- ts_added
- 2023-08-23 05:12:24.363000
- ts_last_update
- 2026-07-10 05:12:30.192000
Warden event timeline
DShield event timeline

