IP address

Warden events (6)

2026-01-13

ReconScanning (node.86eb21): 2

2026-01-11

ReconScanning (node.86eb21): 2

2026-01-09

ReconScanning (node.86eb21): 2

Origin AS

AS154177 - LIGHT4-AS-AP

BGP Prefix

130.94.105.0/24

geo

Colombia

🕑 America/Bogota

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

130.94.0.0 - 130.94.255.255

last_activity

2026-01-13 01:22:12

last_warden_event

2026-01-13 01:22:12

rep

0.12857142857142856

reserved_range

0

Shodan's InternetDB

Open ports: 11, 15, 19, 21, 22, 26, 37, 43, 49, 80, 81, 82, 83, 84, 88, 89, 90, 97, 102, 104, 110, 111, 113, 119, 122, 135, 175, 179, 221, 264, 311, 389, 427, 443, 444, 446, 448, 452, 465, 502, 513, 515, 541, 548, 554, 555, 587, 593, 631, 666, 771, 785, 789, 830, 833, 873, 993, 995, 1024, 1080, 1099, 1153, 1177, 1193, 1198, 1200, 1234, 1235, 1311, 1337, 1365, 1388, 1400, 1414, 1458, 1515, 1557, 1599, 1723, 1741, 1800, 1883, 1911, 1926, 1935, 1954, 1969, 1976, 1982, 2000, 2008, 2048, 2052, 2054, 2067, 2077, 2078, 2080, 2081, 2083, 2087, 2121, 2154, 2156, 2181, 2200, 2220, 2222, 2345, 2375, 2379, 2404, 2444, 2455, 2548, 2555, 2556, 2761, 2762, 3000, 3001, 3013, 3050, 3060, 3087, 3097, 3098, 3112, 3128, 3139, 3143, 3145, 3147, 3171, 3221, 3260, 3269, 3299, 3301, 3310, 3333, 3337, 3460, 3479, 3524, 3541, 3542, 3551, 3557, 3559, 3560, 3563, 3689, 3749, 3780, 3790, 3838, 3922, 3951, 4000, 4022, 4040, 4042, 4063, 4064, 4103, 4150, 4242, 4321, 4369, 4433, 4439, 4443, 4444, 4466, 4500, 4506, 4523, 4561, 4620, 4664, 4782, 4786, 4840, 4899, 4911, 4949, 5000, 5005, 5006, 5007, 5009, 5011, 5025, 5083, 5135, 5150, 5180, 5201, 5222, 5227, 5229, 5230, 5236, 5243, 5249, 5267, 5269, 5357, 5431, 5435, 5439, 5503, 5555, 5630, 5801, 5858, 5900, 5914, 5938, 5985, 5986, 5997, 6001, 6009, 6080, 6102, 6379, 6405, 6443, 6513, 6550, 6600, 6633, 6653, 6661, 6666, 6668, 6775, 6789, 6887, 7001, 7025, 7071, 7302, 7331, 7401, 7415, 7434, 7443, 7444, 7445, 7500, 7548, 7657, 7779, 7799, 7946, 7989, 8000, 8001, 8005, 8009, 8010, 8025, 8028, 8039, 8040, 8043, 8047, 8060, 8063, 8069, 8072, 8073, 8076, 8079, 8086, 8087, 8089, 8090, 8091, 8112, 8117, 8123, 8126, 8138, 8142, 8143, 8146, 8148, 8155, 8200, 8248, 8284, 8291, 8318, 8333, 8334, 8401, 8409, 8411, 8415, 8423, 8433, 8443, 8452, 8454, 8456, 8457, 8473, 8485, 8536, 8545, 8553, 8554, 8567, 8585, 8588, 8592, 8597, 8605, 8621, 8630, 8649, 8704, 8782, 8787, 8800, 8806, 8809, 8811, 8817, 8834, 8835, 8843, 8850, 8852, 8856, 8861, 8867, 8870, 8880, 8882, 8883, 8888, 8889, 8906, 8907, 8999, 9000, 9001, 9002, 9009, 9017, 9020, 9032, 9041, 9042, 9048, 9050, 9061, 9065, 9066, 9070, 9076, 9080, 9090, 9091, 9092, 9095, 9100, 9105, 9108, 9127, 9128, 9140, 9141, 9154, 9156, 9160, 9182, 9199, 9200, 9211, 9216, 9221, 9253, 9273, 9291, 9333, 9387, 9418, 9443, 9455, 9501, 9530, 9550, 9553, 9600, 9633, 9761, 9869, 9876, 9898, 9899, 9929, 9930, 9943, 9944, 9981, 9998, 9999

Tags: honeypot

CPEs: cpe:/a:openbsd:openssh:8.9p1, cpe:/o:canonical:ubuntu_linux

ts_added

2026-01-09 04:58:05.342000

ts_last_update

2026-01-13 04:58:10.341000

Warden event timeline

DShield event timeline