IP address
Shodan(more info)

Passive DNS

- Warden events (17)
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-27
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-17
-
- ReconScanning (node.86eb21): 1
- 2026-06-15
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 3
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-04-19
- Number of reports: 33
- Distinct targets: 6
- 2026-04-20
- Number of reports: 52
- Distinct targets: 8
- 2026-04-21
- Number of reports: 64
- Distinct targets: 12
- 2026-04-29
- Number of reports: 50
- Distinct targets: 11
- 2026-04-30
- Number of reports: 50
- Distinct targets: 11
- 2026-05-07
- Number of reports: 120
- Distinct targets: 17
- 2026-05-08
- Number of reports: 120
- Distinct targets: 17
- 2026-05-13
- Number of reports: 33
- Distinct targets: 6
- 2026-05-14
- Number of reports: 73
- Distinct targets: 12
- 2026-05-18
- Number of reports: 29
- Distinct targets: 5
- 2026-05-19
- Number of reports: 29
- Distinct targets: 5
- 2026-05-20
- Number of reports: 64
- Distinct targets: 12
- 2026-06-02
- Number of reports: 60
- Distinct targets: 11
- 2026-06-03
- Number of reports: 60
- Distinct targets: 11
- 2026-06-09
- Number of reports: 46
- Distinct targets: 9
- 2026-06-10
- Number of reports: 46
- Distinct targets: 9
- 2026-06-16
- Number of reports: 60
- Distinct targets: 14
- 2026-07-01
- Number of reports: 36
- Distinct targets: 5
- 2026-07-02
- Number of reports: 76
- Distinct targets: 16
- 2026-07-08
- Number of reports: 32
- Distinct targets: 5
- 2026-07-09
- Number of reports: 61
- Distinct targets: 14
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 53 | src | scan |
- Origin AS
- AS202422 - GHOST
- BGP Prefix
- 92.38.149.0/24
- geo
- United States, Santa Clara
- 🕑 America/Los_Angeles
- hostname
- ipinfo.io
- Address block ('inetnum' or 'NetRange' in whois database)
- 92.38.144.0 - 92.38.151.255
- last_activity
- 2026-07-01 01:32:53
- last_warden_event
- 2026-07-01 01:32:53
- rep
- 0.0009503023216984596
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 13, 15, 17, 19, 25, 26, 37, 38, 70, 79, 80, 82, 84, 85, 102, 110, 111, 113, 135, 143, 179, 195, 311, 389, 427, 444, 445, 465, 488, 513, 515, 541, 548, 743, 755, 771, 789, 1153, 1177, 1200, 1357, 1400, 1450, 1451, 1458, 1471, 1599, 1605, 1741, 1800, 1801, 1811, 1926, 1953, 1962, 2068, 2081, 2087, 2096, 2154, 2181, 2222, 2223, 2224, 2345, 2375, 2376, 2379, 2404, 2549, 2657, 2762, 3001, 3047, 3049, 3050, 3052, 3056, 3075, 3076, 3078, 3087, 3103, 3120, 3130, 3141, 3160, 3165, 3260, 3299, 3301, 3342, 3365, 3412, 3541, 3552, 3557, 3559, 3780, 3905, 4040, 4072, 4165, 4200, 4242, 4250, 4282, 4321, 4433, 4444, 4500, 4506, 4510, 4664, 4747, 4821, 4840, 5004, 5007, 5140, 5180, 5233, 5239, 5259, 5267, 5269, 5432, 5435, 5523, 5560, 5601, 5602, 5672, 5698, 5800, 5900, 5907, 5909, 5913, 5984, 5998, 6001, 6006, 6080, 6134, 6379, 6464, 6511, 6560, 6667, 6697, 6700, 6779, 7001, 7015, 7021, 7071, 7082, 7083, 7172, 7283, 7434, 7547, 7548, 7562, 7634, 7657, 7989, 8000, 8007, 8033, 8034, 8041, 8047, 8069, 8082, 8083, 8084, 8085, 8086, 8089, 8098, 8099, 8101, 8146, 8148, 8150, 8188, 8195, 8248, 8333, 8382, 8407, 8433, 8436, 8449, 8461, 8467, 8493, 8549, 8561, 8575, 8593, 8595, 8621, 8649, 8704, 8728, 8800, 8808, 8818, 8819, 8820, 8824, 8834, 8870, 8883, 8884, 8885, 8889, 8911, 9000, 9001, 9009, 9011, 9014, 9031, 9034, 9039, 9053, 9059, 9064, 9076, 9080, 9082, 9090, 9091, 9092, 9094, 9111, 9124, 9160, 9163, 9166, 9179, 9182, 9198, 9216, 9244, 9253, 9351, 9529, 9548, 9595, 9600, 9606, 9633, 9674, 9761, 9869, 9898, 9966, 9977, 9988, 9999
- Tags: honeypot
- CPEs: –
- ts_added
- 2025-06-20 00:59:03.616000
- ts_last_update
- 2026-07-11 00:59:10.076000
Warden event timeline
DShield event timeline

