IP address
Shodan(more info)

Passive DNS

- OTX pulses
-
[6925f15de6ea757941c36353] 2025-11-25 18:11:41.201000 | Russian RomCom Utilizing SocGholish to Deliver Mythic Agent to U.S. Companies Supporting Ukraine
Author name: AlienVault Pulse modified: 2025-11-26 07:39:54.626000 Indicator created: 2025-11-25 18:11:42 Indicator role: None Indicator title: Indicator expiration: 2025-12-25 18:00:00
- Origin AS
- AS398343 - BAXET-GROUP
- BGP Prefix
- 38.114.101.0/24
- geo
- United States, Dallas
- 🕑 America/Chicago
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 38.0.0.0 - 38.255.255.255
- last_activity
- 2025-11-26 08:37:14.796000
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 443
- Tags: eol-product
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:f5:nginx:1.24.0, cpe:/a:openbsd:openssh:8.9p1
- ts_added
- 2025-11-26 08:37:14.802000
- ts_last_update
- 2025-12-18 08:37:20.021000
Warden event timeline
DShield event timeline
OTX pulses

