IP address


.078192.129.221.208
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
44 src scan port: 80, 5432

Warden events (36)
2026-10-13
ReconScanning (node.ce2b59): 3
2026-10-12
ReconScanning (node.ce2b59): 11
2026-10-11
ReconScanning (node.ce2b59): 7
2026-10-10
ReconScanning (node.ce2b59): 4
ReconScanning (node.9c1411): 1
2026-10-09
ReconScanning (node.ce2b59): 5
ReconScanning (node.9c1411): 1
2026-10-07
ReconScanning (node.ce2b59): 1
ReconScanning (node.9c1411): 1
2026-10-06
ReconScanning (node.ce2b59): 1
2026-10-01
ReconScanning (node.9c1411): 1
Origin AS
AS36352 - AS-COLOCROSSING
BGP Prefix
192.129.221.0/24
geo
United States
🕑 America/Chicago
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
192.129.128.0 - 192.129.255.255
last_activity
2026-10-13 05:30:15
last_warden_event
2026-10-13 05:30:15
rep
0.07770268525496749
reserved_range
0
Shodan's InternetDB
Open ports: 5432, 6379, 8080, 8081, 8428, 9100, 9200
Tags: compromised, database, eol-product, eol-os
CPEs: cpe:/a:redislabs:redis:7.2.15, cpe:/a:postgresql:postgresql, cpe:/a:jquery:jquery:3.6.0, cpe:/a:getbootstrap:bootstrap, cpe:/a:elastic:elasticsearch:2.17.0
ts_added
2026-10-01 00:49:59.025000
ts_last_update
2026-10-13 05:33:03.381000

Warden event timeline

DShield event timeline