IP address
Shodan(more info)

Passive DNS

- Warden events (5)
- 2026-11-14
-
- AnomalyTraffic (node.6a1878): 5
- Residential proxy info (data provided by Layer3 Intel)
- Last seen: 2026-11-14 03:03:27}
- Percent days seen: 3 %
- Networks: EVOMI
- Details: https://layer3intel.com/context/172.241.29.10
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 48 | src | — |
- Origin AS
- AS394380 - LEASEWEB-USA-DAL
- BGP Prefix
- 172.241.24.0/21
- geo
- United States, Dallas
- 🕑 America/Chicago
- hostname
- dal4.hostclusters.com
- Address block ('inetnum' or 'NetRange' in whois database)
- 172.241.16.0 - 172.241.31.255
- last_activity
- 2026-11-14 02:59:30
- last_warden_event
- 2026-11-14 02:59:30
- rep
- 0.010621177991902542
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 53, 80, 110, 443, 465, 587, 2077, 2079, 2082, 2083, 2087, 2095, 2096, 3306, 52230
- Tags: starttls, pqc, self-signed, database
- CPEs: cpe:/a:oracle:mysql:8.4.11-cll-lve, cpe:/a:exim:exim:4.100.1, cpe:/a:isc:bind:9.16.23, cpe:/a:openresty:lua-nginx-module:1.31.1.1, cpe:/a:f5:nginx, cpe:/a:openresty:openresty:1.31.1.1
- ts_added
- 2026-11-14 02:18:54.735000
- ts_last_update
- 2026-11-15 02:19:00.644000
Warden event timeline
DShield event timeline

