IP address
Shodan(more info)

Passive DNS

- IP blacklists
- DShield reports (IP summary, reports)
- 2025-11-09
- Number of reports: 16
- Distinct targets: 8
- 2025-11-15
- Number of reports: 16
- Distinct targets: 4
- 2025-11-16
- Number of reports: 16
- Distinct targets: 4
- 2025-11-27
- Number of reports: 24
- Distinct targets: 8
- 2025-12-09
- Number of reports: 18
- Distinct targets: 9
- OTX pulses
-
[6928511edda3bdccb3eec497] 2025-11-27 13:24:46.153000 | RDP honeypot logs for 2025/11/27
Author name: jnazario Pulse modified: 2025-11-27 13:24:46.153000 Indicator created: 2025-11-27 13:24:47 Indicator role: None Indicator title: Indicator expiration: 2025-12-27 13:00:00 [6929a29140ae4f1f9dd5f430] 2025-11-28 13:24:33.339000 | RDP honeypot logs for 2025/11/28Author name: jnazario Pulse modified: 2025-11-28 13:24:33.339000 Indicator created: 2025-11-28 13:24:34 Indicator role: None Indicator title: Indicator expiration: 2025-12-28 13:00:00
- Origin AS
- AS7922 - COMCAST-7922
- BGP Prefix
- 24.0.0.0/12
- geo
- United States, Deerfield
- 🕑 America/Chicago
- hostname
- c-24-13-241-135.hsd1.mi.comcast.net
- hostname_class
- ['isp', 'ip_in_hostname']
- Address block ('inetnum' or 'NetRange' in whois database)
- 24.0.0.0 - 24.15.255.255
- last_activity
- 2025-11-28 16:37:20.300000
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 80, 81, 110, 143, 443, 444, 587, 8080, 8123, 8443, 30120, 32400
- Tags: –
- CPEs: cpe:/a:angularjs:angular.js, cpe:/a:f5:nginx, cpe:/a:plex:media_server:1.41.5.9626, cpe:/o:microsoft:windows
- ts_added
- 2025-11-10 05:04:25.441000
- ts_last_update
- 2025-12-15 05:08:50.463000
Warden event timeline
DShield event timeline
Presence on blacklists
OTX pulses

