IP address
Shodan(more info)

Passive DNS

- Warden events (17)
- 2026-09-20
-
- ReconScanning (node.f90c6b): 1
- 2026-09-15
-
- ReconScanning (node.86eb21): 1
- 2026-09-12
-
- ReconScanning (node.86eb21): 1
- 2026-09-09
-
- ReconScanning (node.86eb21): 1
- 2026-09-06
-
- ReconScanning (node.86eb21): 1
- 2026-09-05
-
- ReconScanning (node.86eb21): 1
- 2026-08-22
-
- ReconScanning (node.86eb21): 1
- 2026-08-21
-
- ReconScanning (node.86eb21): 1
- 2026-08-07
-
- ReconScanning (node.86eb21): 1
- 2026-08-04
-
- ReconScanning (node.86eb21): 1
- 2026-08-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-29
-
- ReconScanning (node.86eb21): 1
- 2026-07-21
-
- ReconScanning (node.86eb21): 1
- 2026-07-20
-
- ReconScanning (node.86eb21): 1
- 2026-07-19
-
- ReconScanning (node.86eb21): 1
- 2026-07-16
-
- ReconScanning (node.86eb21): 1
- 2026-07-15
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-07-09
- Number of reports: 48
- Distinct targets: 8
- 2026-07-10
- Number of reports: 48
- Distinct targets: 8
- 2026-07-26
- Number of reports: 56
- Distinct targets: 7
- 2026-07-27
- Number of reports: 56
- Distinct targets: 7
- 2026-08-04
- Number of reports: 54
- Distinct targets: 12
- 2026-08-12
- Number of reports: 44
- Distinct targets: 11
- 2026-08-18
- Number of reports: 60
- Distinct targets: 16
- 2026-08-19
- Number of reports: 60
- Distinct targets: 16
- 2026-08-26
- Number of reports: 80
- Distinct targets: 18
- 2026-09-01
- Number of reports: 52
- Distinct targets: 11
- 2026-09-02
- Number of reports: 52
- Distinct targets: 11
- 2026-09-09
- Number of reports: 60
- Distinct targets: 13
- 2026-09-22
- Number of reports: 64
- Distinct targets: 16
- 2026-09-29
- Number of reports: 64
- Distinct targets: 15
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 48 | src | scan |
- Origin AS
- AS397373 - H4Y-TECHNOLOGIES
- BGP Prefix
- 155.254.18.0/23
- geo
- United States, Bend
- 🕑 America/Los_Angeles
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 155.254.16.0 - 155.254.31.255
- last_activity
- 2026-09-20 02:13:05
- last_warden_event
- 2026-09-20 02:13:05
- rep
- 0.00032282667971439416
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 2, 11, 13, 17, 19, 20, 21, 22, 25, 43, 79, 80, 81, 82, 83, 84, 85, 93, 102, 104, 111, 113, 122, 131, 189, 221, 264, 389, 444, 446, 451, 465, 488, 502, 503, 515, 541, 548, 556, 567, 587, 593, 666, 700, 789, 800, 832, 873, 880, 887, 902, 947, 953, 992, 995, 999, 1080, 1111, 1153, 1177, 1180, 1195, 1200, 1207, 1224, 1244, 1291, 1292, 1311, 1337, 1344, 1370, 1400, 1443, 1444, 1459, 1471, 1521, 1720, 1723, 1741, 1800, 1801, 1911, 1925, 1926, 1953, 1962, 1967, 1977, 1983, 1985, 2000, 2008, 2020, 2021, 2051, 2053, 2058, 2067, 2081, 2083, 2086, 2087, 2090, 2107, 2121, 2150, 2195, 2209, 2211, 2222, 2248, 2345, 2376, 2379, 2404, 2443, 2563, 2569, 2570, 2572, 2598, 2601, 2628, 2709, 2761, 2762, 3000, 3001, 3017, 3018, 3020, 3049, 3050, 3053, 3055, 3072, 3075, 3096, 3119, 3124, 3128, 3140, 3141, 3159, 3172, 3180, 3183, 3193, 3194, 3200, 3268, 3301, 3306, 3333, 3337, 3341, 3388, 3408, 3460, 3521, 3523, 3540, 3548, 3551, 3553, 3580, 3689, 3749, 3794, 3838, 3922, 4002, 4040, 4063, 4085, 4100, 4101, 4103, 4120, 4157, 4159, 4172, 4242, 4282, 4321, 4333, 4369, 4433, 4437, 4443, 4444, 4466, 4500, 4506, 4524, 4545, 4602, 4646, 4656, 4664, 4726, 4747, 4782, 4786, 4840, 4848, 4899, 4949, 4993, 5000, 5005, 5007, 5009, 5010, 5025, 5080, 5090, 5105, 5122, 5123, 5194, 5201, 5233, 5234, 5237, 5240, 5254, 5263, 5269, 5270, 5321, 5431, 5432, 5435, 5543, 5555, 5560, 5567, 5568, 5596, 5599, 5605, 5620, 5671, 5672, 5800, 5858, 5900, 5901, 5908, 5909, 5938, 5984, 5985, 5986, 5992, 6000, 6001, 6008, 6009, 6021, 6022, 6036, 6080, 6100, 6264, 6379, 6380, 6432, 6433, 6443, 6505, 6512, 6605, 6622, 6633, 6666, 6667, 6719, 6748, 6775, 6989, 7000, 7001, 7013, 7057, 7083, 7084, 7105, 7141, 7415, 7426, 7443, 7474, 7510, 7613, 7634, 7657, 7773, 7777, 7779, 7780, 7782, 7790, 8000, 8009, 8012, 8022, 8023, 8024, 8034, 8038, 8050, 8052, 8053, 8060, 8069, 8081, 8085, 8087, 8089, 8090, 8095, 8098, 8107, 8110, 8112, 8115, 8116, 8119, 8123, 8124, 8125, 8126, 8128, 8139, 8145, 8153, 8154, 8160, 8167, 8177, 8181, 8183, 8189, 8190, 8200, 8243, 8248, 8249, 8333, 8334, 8406, 8407, 8421, 8444, 8448, 8457, 8460, 8461, 8465, 8467, 8505, 8514, 8519, 8536, 8545, 8551, 8557, 8569, 8570, 8573, 8575, 8576, 8593, 8598, 8623, 8643, 8649, 8666, 8703, 8706, 8800, 8803, 8804, 8807, 8809, 8834, 8843, 8863, 8864, 8874, 8883, 8899, 8900, 8907, 8912, 8990, 9000, 9002, 9009, 9012, 9027, 9028, 9041, 9042, 9047, 9048, 9049, 9051, 9052, 9054, 9063, 9067, 9080, 9091, 9095, 9108, 9114, 9118, 9119, 9131, 9137, 9150, 9160, 9161, 9177, 9191, 9200, 9210, 9213, 9214, 9223, 9226, 9244, 9250, 9273, 9289, 9295, 9303, 9306, 9311, 9333, 9345, 9410, 9418, 9530, 9550, 9595, 9600, 9633, 9700, 9761, 9804, 9869, 9876, 9885, 9898, 9899, 9901, 9926, 9943, 9944, 9955, 9981, 9993, 9999, 20000
- Tags: self-signed, honeypot
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.2p1
- ts_added
- 2026-02-27 05:02:13.914000
- ts_last_update
- 2026-10-03 05:06:22.055000
Warden event timeline
DShield event timeline

