IP address
Shodan(more info)

Passive DNS

- Warden events (23)
- 2026-09-27
-
- ReconScanning (node.86eb21): 1
- 2026-09-23
-
- ReconScanning (node.86eb21): 1
- 2026-09-22
-
- ReconScanning (node.86eb21): 1
- 2026-09-20
-
- ReconScanning (node.86eb21): 1
- ReconScanning (node.f90c6b): 2
- 2026-09-19
-
- ReconScanning (node.86eb21): 1
- 2026-09-15
-
- ReconScanning (node.86eb21): 1
- 2026-09-12
-
- ReconScanning (node.86eb21): 1
- 2026-09-09
-
- ReconScanning (node.86eb21): 1
- 2026-09-06
-
- ReconScanning (node.86eb21): 1
- 2026-09-05
-
- ReconScanning (node.86eb21): 1
- 2026-08-22
-
- ReconScanning (node.86eb21): 1
- 2026-08-21
-
- ReconScanning (node.86eb21): 1
- 2026-08-07
-
- ReconScanning (node.86eb21): 1
- 2026-08-04
-
- ReconScanning (node.86eb21): 1
- 2026-08-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-29
-
- ReconScanning (node.86eb21): 1
- 2026-07-21
-
- ReconScanning (node.86eb21): 1
- 2026-07-20
-
- ReconScanning (node.86eb21): 1
- 2026-07-19
-
- ReconScanning (node.86eb21): 1
- 2026-07-16
-
- ReconScanning (node.86eb21): 1
- 2026-07-15
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-07-17
- Number of reports: 24
- Distinct targets: 3
- 2026-07-18
- Number of reports: 24
- Distinct targets: 3
- 2026-07-19
- Number of reports: 42
- Distinct targets: 5
- 2026-07-30
- Number of reports: 52
- Distinct targets: 7
- 2026-08-04
- Number of reports: 16
- Distinct targets: 3
- 2026-08-05
- Number of reports: 28
- Distinct targets: 4
- 2026-08-13
- Number of reports: 28
- Distinct targets: 7
- 2026-08-17
- Number of reports: 12
- Distinct targets: 3
- 2026-08-26
- Number of reports: 28
- Distinct targets: 4
- 2026-09-01
- Number of reports: 20
- Distinct targets: 3
- 2026-09-02
- Number of reports: 20
- Distinct targets: 3
- 2026-09-09
- Number of reports: 40
- Distinct targets: 10
- 2026-09-16
- Number of reports: 12
- Distinct targets: 5
- 2026-09-23
- Number of reports: 68
- Distinct targets: 11
- 2026-09-30
- Number of reports: 60
- Distinct targets: 9
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 43 | src | scan |
- Origin AS
- AS51852 - PLI-AS
- AS43440 - digitalesuisse
- BGP Prefix
- 179.43.128.0/18
- bl
- []
- geo
- Switzerland, Zurich
- 🕑 Europe/Zurich
- hostname
- privatelayer-lugano
- Address block ('inetnum' or 'NetRange' in whois database)
- 179.43.128.0 - 179.43.191.255
- last_activity
- 2026-09-27 01:41:03
- last_warden_event
- 2026-09-27 01:41:03
- otx_pulses
- []
- rep
- 0.0017507232621786217
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 13, 15, 21, 22, 24, 26, 37, 70, 79, 80, 81, 82, 84, 96, 97, 98, 102, 110, 111, 113, 122, 135, 143, 154, 175, 179, 180, 195, 389, 427, 443, 444, 445, 449, 487, 502, 503, 522, 548, 587, 631, 646, 771, 789, 809, 832, 853, 902, 992, 993, 1028, 1029, 1063, 1099, 1103, 1153, 1167, 1177, 1180, 1200, 1224, 1235, 1244, 1290, 1311, 1343, 1398, 1400, 1414, 1433, 1443, 1450, 1460, 1471, 1521, 1604, 1605, 1700, 1720, 1723, 1741, 1801, 1883, 1911, 1926, 1931, 1935, 1962, 1965, 1986, 2000, 2008, 2016, 2059, 2064, 2082, 2109, 2121, 2126, 2154, 2181, 2200, 2202, 2211, 2222, 2271, 2345, 2363, 2375, 2376, 2379, 2404, 2453, 2455, 2480, 2525, 2553, 2599, 2628, 2701, 2761, 2762, 3000, 3001, 3030, 3050, 3058, 3060, 3062, 3067, 3076, 3081, 3085, 3086, 3090, 3114, 3124, 3127, 3129, 3133, 3150, 3151, 3155, 3165, 3185, 3193, 3260, 3268, 3269, 3299, 3306, 3310, 3333, 3341, 3388, 3389, 3404, 3460, 3479, 3522, 3541, 3551, 3553, 3555, 3570, 3580, 3689, 3780, 3790, 3841, 3910, 4022, 4040, 4080, 4100, 4157, 4242, 4244, 4282, 4321, 4369, 4402, 4430, 4433, 4435, 4439, 4443, 4444, 4466, 4500, 4530, 4567, 4664, 4718, 4782, 4786, 4840, 4949, 4999, 5000, 5004, 5006, 5007, 5009, 5025, 5123, 5222, 5223, 5233, 5236, 5252, 5260, 5269, 5270, 5277, 5432, 5440, 5446, 5555, 5590, 5599, 5602, 5672, 5800, 5858, 5920, 5984, 5985, 5986, 5988, 6000, 6001, 6036, 6050, 6080, 6264, 6379, 6443, 6514, 6565, 6633, 6666, 6668, 6697, 6789, 6792, 7000, 7001, 7005, 7007, 7018, 7071, 7082, 7085, 7087, 7170, 7272, 7389, 7434, 7444, 7474, 7480, 7500, 7548, 7634, 7657, 7773, 7776, 7777, 7779, 7788, 7790, 7857, 7946, 7989, 8001, 8002, 8009, 8010, 8011, 8028, 8029, 8033, 8036, 8044, 8053, 8060, 8083, 8085, 8090, 8091, 8098, 8115, 8123, 8125, 8137, 8140, 8151, 8155, 8157, 8167, 8174, 8176, 8181, 8188, 8192, 8200, 8251, 8300, 8316, 8317, 8334, 8385, 8403, 8409, 8422, 8424, 8425, 8428, 8443, 8455, 8460, 8502, 8529, 8532, 8545, 8554, 8564, 8575, 8596, 8649, 8703, 8704, 8784, 8787, 8789, 8800, 8807, 8809, 8814, 8818, 8834, 8835, 8855, 8861, 8862, 8875, 8879, 8880, 8883, 8888, 8890, 8935, 8943, 8980, 8988, 8990, 9000, 9001, 9002, 9006, 9009, 9012, 9020, 9023, 9025, 9027, 9039, 9042, 9043, 9049, 9050, 9051, 9062, 9070, 9077, 9080, 9082, 9085, 9091, 9092, 9104, 9118, 9131, 9145, 9151, 9154, 9155, 9160, 9164, 9173, 9184, 9200, 9245, 9299, 9307, 9309, 9333, 9345, 9387, 9398, 9418, 9443, 9455, 9500, 9532, 9595, 9600, 9633, 9743, 9779, 9802, 9869, 9876, 9926, 9944, 9994, 9998, 9999, 20000
- Tags: self-signed, honeypot
- CPEs: cpe:/a:openbsd:openssh:8.9p1, cpe:/o:canonical:ubuntu_linux
- ts_added
- 2024-06-01 05:03:04.149000
- ts_last_update
- 2026-10-05 05:06:47.094000
Warden event timeline
DShield event timeline

