IP address
Shodan(more info)

Passive DNS

- IP blacklists
- OTX pulses
-
[6af7a83bf4497958ad264d6b] 2026-11-14 00:15:55.569000 | Honeypot sg1 - SSH/Telnet/Web attackers and malware delivery - 2026-11-13
Author name: jrnetsec TLP: clear Pulse modified: 2026-11-14 00:15:55.569000 Indicator created: 2026-11-14 00:15:56 Indicator role: scanning_host Indicator title: Scanner - web Indicator expiration: 2026-12-14 00:00:00 - Residential proxy info (data provided by Layer3 Intel)
- Last seen: 2026-11-14 06:50:06}
- Percent days seen: 16 %
- Networks: INFATICA, 711PROXY, MASKIFY, LEMONBRIGHT, PROXYWING, IPROYAL, THORDATA, BYTEFUL, AKE.NET, B2PROXY, MANGOPROXY, IPPEAK, NOVAPROXY, VANTAGEPROXIES, RAINPROXY, GSOCKS, FASTPROXY_PREMIUM, FASTPROXY_BASIC, LUDAXPROXY_BASIC, Q2IP
- Details: https://layer3intel.com/context/178.39.80.128
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | src | scan |
- Origin AS
- AS6730 - SUNRISE
- BGP Prefix
- 178.39.0.0/16
- geo
- Switzerland, Lugano
- 🕑 Europe/Zurich
- hostname
- adsl-178-39-80-128.adslplus.ch
- hostname_class
- ['ip_in_hostname', 'dsl']
- Address block ('inetnum' or 'NetRange' in whois database)
- 178.38.0.0 - 178.39.255.255
- last_activity
- 2026-11-14 09:38:34.515000
- rep
- 0.00807319067615575
- reserved_range
- 0
- ts_added
- 2026-11-14 09:38:35.179000
- ts_last_update
- 2026-11-15 09:38:40.637000
Warden event timeline
DShield event timeline
Presence on blacklists
OTX pulses

