IP address
Shodan(more info)

Passive DNS

- Warden events (28)
- 2026-11-02
-
- ReconScanning (node.86eb21): 1
- 2026-10-30
-
- ReconScanning (node.86eb21): 1
- 2026-10-29
-
- ReconScanning (node.86eb21): 1
- 2026-10-24
-
- ReconScanning (node.86eb21): 1
- 2026-10-23
-
- ReconScanning (node.86eb21): 1
- 2026-10-21
-
- ReconScanning (node.86eb21): 1
- 2026-10-18
-
- ReconScanning (node.86eb21): 1
- 2026-10-14
-
- ReconScanning (node.86eb21): 1
- 2026-10-13
-
- ReconScanning (node.86eb21): 1
- 2026-10-12
-
- ReconScanning (node.86eb21): 1
- 2026-10-10
-
- ReconScanning (node.86eb21): 1
- 2026-10-07
-
- ReconScanning (node.86eb21): 1
- 2026-09-27
-
- ReconScanning (node.86eb21): 1
- 2026-09-23
-
- ReconScanning (node.86eb21): 1
- 2026-09-22
-
- ReconScanning (node.86eb21): 1
- 2026-09-20
-
- ReconScanning (node.86eb21): 1
- ReconScanning (node.f90c6b): 2
- 2026-09-19
-
- ReconScanning (node.86eb21): 1
- 2026-09-15
-
- ReconScanning (node.86eb21): 1
- 2026-09-12
-
- ReconScanning (node.86eb21): 1
- 2026-09-09
-
- ReconScanning (node.86eb21): 1
- 2026-09-06
-
- ReconScanning (node.86eb21): 1
- 2026-09-05
-
- ReconScanning (node.86eb21): 1
- 2026-08-22
-
- ReconScanning (node.86eb21): 1
- 2026-08-21
-
- ReconScanning (node.86eb21): 1
- 2026-08-07
-
- ReconScanning (node.86eb21): 1
- 2026-08-04
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-08-04
- Number of reports: 16
- Distinct targets: 3
- 2026-08-05
- Number of reports: 28
- Distinct targets: 4
- 2026-08-13
- Number of reports: 28
- Distinct targets: 7
- 2026-08-17
- Number of reports: 12
- Distinct targets: 3
- 2026-08-26
- Number of reports: 28
- Distinct targets: 4
- 2026-09-01
- Number of reports: 20
- Distinct targets: 3
- 2026-09-02
- Number of reports: 20
- Distinct targets: 3
- 2026-09-09
- Number of reports: 40
- Distinct targets: 10
- 2026-09-16
- Number of reports: 12
- Distinct targets: 5
- 2026-09-23
- Number of reports: 68
- Distinct targets: 11
- 2026-09-30
- Number of reports: 60
- Distinct targets: 9
- 2026-10-07
- Number of reports: 20
- Distinct targets: 5
- 2026-10-08
- Number of reports: 36
- Distinct targets: 5
- 2026-10-14
- Number of reports: 50
- Distinct targets: 8
- 2026-10-21
- Number of reports: 36
- Distinct targets: 5
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 27 | src | scan |
- Origin AS
- AS51852 - PLI-AS
- AS43440 - digitalesuisse
- BGP Prefix
- 179.43.128.0/18
- bl
- []
- geo
- Switzerland, Zurich
- 🕑 Europe/Zurich
- hostname
- privatelayer-lugano
- Address block ('inetnum' or 'NetRange' in whois database)
- 179.43.128.0 - 179.43.191.255
- last_activity
- 2026-11-02 01:30:18
- last_warden_event
- 2026-11-02 01:30:18
- otx_pulses
- []
- rep
- 0.008596867937040509
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 2, 13, 15, 17, 19, 21, 22, 24, 26, 37, 43, 70, 79, 80, 81, 82, 84, 85, 88, 92, 97, 101, 104, 106, 110, 111, 113, 119, 121, 143, 175, 231, 264, 314, 385, 389, 443, 444, 465, 513, 515, 554, 587, 631, 632, 666, 777, 833, 873, 987, 992, 993, 1009, 1027, 1050, 1080, 1099, 1177, 1188, 1200, 1207, 1234, 1292, 1293, 1311, 1337, 1347, 1355, 1400, 1414, 1433, 1460, 1471, 1494, 1500, 1515, 1521, 1599, 1604, 1605, 1720, 1723, 1800, 1901, 1925, 1926, 1954, 1962, 1965, 1988, 2000, 2008, 2010, 2016, 2018, 2030, 2059, 2067, 2081, 2082, 2086, 2087, 2090, 2108, 2121, 2154, 2200, 2211, 2222, 2375, 2376, 2379, 2382, 2404, 2480, 2548, 2556, 2557, 2601, 2628, 2762, 2985, 3001, 3012, 3013, 3014, 3016, 3047, 3063, 3067, 3070, 3081, 3083, 3084, 3093, 3094, 3104, 3110, 3111, 3116, 3124, 3128, 3134, 3135, 3143, 3156, 3165, 3166, 3171, 3178, 3182, 3183, 3187, 3194, 3197, 3251, 3260, 3299, 3310, 3333, 3388, 3390, 3400, 3409, 3542, 3551, 3558, 3562, 3566, 3568, 3690, 3749, 3780, 3790, 3910, 3922, 3954, 4000, 4002, 4010, 4022, 4040, 4063, 4064, 4103, 4148, 4160, 4243, 4282, 4333, 4432, 4434, 4435, 4437, 4439, 4443, 4444, 4477, 4510, 4543, 4567, 4664, 4786, 4840, 4899, 4911, 4933, 5000, 5005, 5007, 5009, 5010, 5025, 5105, 5120, 5122, 5123, 5130, 5160, 5201, 5222, 5230, 5238, 5247, 5249, 5262, 5266, 5274, 5400, 5432, 5435, 5494, 5543, 5567, 5605, 5672, 5698, 5721, 5858, 5900, 5901, 5904, 5912, 5916, 5918, 5938, 5984, 5985, 5986, 5987, 5988, 5992, 6001, 6011, 6080, 6134, 6264, 6348, 6379, 6432, 6440, 6443, 6560, 6588, 6601, 6633, 6662, 6664, 6667, 6668, 6697, 7007, 7012, 7013, 7014, 7018, 7021, 7071, 7171, 7349, 7415, 7434, 7474, 7547, 7634, 7657, 7740, 7773, 7774, 7777, 7878, 7882, 7887, 7979, 7989, 8001, 8008, 8009, 8010, 8012, 8033, 8040, 8047, 8055, 8058, 8060, 8062, 8066, 8067, 8069, 8073, 8077, 8078, 8081, 8083, 8085, 8086, 8090, 8099, 8112, 8124, 8126, 8136, 8138, 8140, 8161, 8179, 8181, 8186, 8188, 8192, 8200, 8239, 8252, 8333, 8334, 8401, 8413, 8431, 8432, 8441, 8443, 8456, 8460, 8464, 8493, 8494, 8529, 8531, 8540, 8545, 8550, 8554, 8557, 8560, 8563, 8565, 8567, 8569, 8575, 8583, 8626, 8641, 8649, 8732, 8733, 8784, 8788, 8789, 8813, 8819, 8834, 8837, 8838, 8870, 8875, 8878, 8883, 8901, 8911, 8915, 8969, 8988, 9000, 9007, 9009, 9013, 9015, 9016, 9035, 9051, 9059, 9061, 9065, 9087, 9091, 9098, 9100, 9102, 9107, 9116, 9133, 9141, 9151, 9153, 9156, 9160, 9162, 9164, 9169, 9175, 9182, 9188, 9189, 9191, 9216, 9218, 9223, 9243, 9250, 9283, 9295, 9311, 9312, 9333, 9353, 9376, 9418, 9443, 9446, 9455, 9515, 9595, 9633, 9743, 9758, 9761, 9779, 9800, 9861, 9876, 9939, 9943, 9981, 9991
- Tags: honeypot
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1
- ts_added
- 2024-06-01 05:03:04.149000
- ts_last_update
- 2026-11-02 05:04:31.657000
Warden event timeline
DShield event timeline

