IP address
Shodan(more info)

Passive DNS

- Warden events (15)
- 2026-09-20
-
- ReconScanning (node.f90c6b): 1
- 2026-09-15
-
- ReconScanning (node.86eb21): 1
- 2026-09-12
-
- ReconScanning (node.86eb21): 1
- 2026-09-09
-
- ReconScanning (node.86eb21): 1
- 2026-09-06
-
- ReconScanning (node.86eb21): 1
- 2026-09-05
-
- ReconScanning (node.86eb21): 1
- 2026-08-22
-
- ReconScanning (node.86eb21): 1
- 2026-08-21
-
- ReconScanning (node.86eb21): 1
- 2026-08-07
-
- ReconScanning (node.86eb21): 1
- 2026-08-04
-
- ReconScanning (node.86eb21): 1
- 2026-08-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-29
-
- ReconScanning (node.86eb21): 1
- 2026-07-21
-
- ReconScanning (node.86eb21): 1
- 2026-07-20
-
- ReconScanning (node.86eb21): 1
- 2026-07-19
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-08-05
- Number of reports: 17
- Distinct targets: 3
- 2026-09-09
- Number of reports: 29
- Distinct targets: 4
- 2026-09-30
- Number of reports: 23
- Distinct targets: 3
- 2026-10-07
- Number of reports: 23
- Distinct targets: 3
- 2026-10-14
- Number of reports: 26
- Distinct targets: 3
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan |
- Origin AS
- AS204094 - I4W
- BGP Prefix
- 185.113.140.0/24
- geo
- Portugal, Lisbon
- 🕑 Europe/Lisbon
- hostname
- fakewrithe.com
- Address block ('inetnum' or 'NetRange' in whois database)
- 185.113.140.0 - 185.113.143.255
- last_activity
- 2026-09-20 02:31:13
- last_warden_event
- 2026-09-20 02:31:13
- rep
- 1.4439383170028464e-05
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 13, 17, 19, 21, 22, 25, 26, 37, 43, 49, 51, 65, 70, 79, 80, 81, 82, 83, 84, 88, 102, 104, 110, 111, 119, 122, 135, 143, 175, 179, 189, 195, 211, 221, 234, 314, 347, 369, 380, 389, 427, 443, 444, 461, 462, 465, 503, 515, 541, 548, 554, 593, 631, 636, 646, 666, 771, 785, 789, 853, 873, 880, 987, 990, 992, 1024, 1025, 1029, 1063, 1080, 1099, 1153, 1177, 1181, 1190, 1200, 1224, 1244, 1249, 1311, 1364, 1366, 1370, 1400, 1433, 1443, 1459, 1460, 1471, 1494, 1515, 1521, 1599, 1604, 1720, 1723, 1799, 1800, 1801, 1925, 1926, 1955, 1962, 1964, 1966, 1969, 1978, 1981, 1988, 1990, 2000, 2001, 2008, 2053, 2067, 2072, 2078, 2080, 2081, 2082, 2083, 2086, 2087, 2090, 2096, 2100, 2103, 2121, 2133, 2154, 2209, 2221, 2222, 2232, 2259, 2345, 2351, 2353, 2362, 2375, 2376, 2379, 2404, 2453, 2455, 2480, 2525, 2599, 2602, 2628, 2709, 2761, 2762, 3000, 3001, 3002, 3004, 3008, 3015, 3018, 3047, 3050, 3051, 3069, 3081, 3091, 3094, 3105, 3123, 3128, 3129, 3134, 3137, 3142, 3145, 3167, 3175, 3187, 3190, 3192, 3195, 3196, 3260, 3268, 3269, 3299, 3301, 3306, 3310, 3311, 3333, 3349, 3388, 3400, 3460, 3490, 3541, 3542, 3549, 3551, 3554, 3556, 3561, 3569, 3689, 3749, 3780, 3838, 3952, 3954, 4000, 4002, 4049, 4063, 4100, 4139, 4147, 4150, 4157, 4165, 4171, 4200, 4282, 4321, 4369, 4431, 4432, 4433, 4434, 4444, 4455, 4463, 4482, 4488, 4500, 4505, 4506, 4520, 4527, 4543, 4550, 4567, 4620, 4747, 4848, 4899, 4911, 4933, 4949, 5000, 5001, 5002, 5004, 5005, 5006, 5007, 5009, 5025, 5090, 5120, 5201, 5222, 5228, 5229, 5230, 5234, 5236, 5238, 5240, 5244, 5245, 5256, 5258, 5261, 5264, 5265, 5266, 5268, 5269, 5270, 5272, 5287, 5409, 5432, 5435, 5454, 5456, 5543, 5544, 5555, 5560, 5591, 5598, 5600, 5601, 5602, 5604, 5609, 5672, 5678, 5800, 5801, 5853, 5858, 5900, 5901, 5906, 5909, 5917, 5938, 5958, 5984, 5985, 5986, 5994, 5995, 5999, 6000, 6001, 6008, 6020, 6022, 6080, 6352, 6379, 6432, 6443, 6482, 6512, 6513, 6514, 6550, 6588, 6633, 6653, 6661, 6664, 6697, 6775, 7000, 7001, 7021, 7027, 7071, 7073, 7082, 7083, 7100, 7170, 7325, 7348, 7373, 7415, 7434, 7443, 7445, 7474, 7537, 7547, 7548, 7634, 7654, 7657, 7788, 7801, 7887, 7900, 7908, 7946, 7979, 7989, 8000, 8001, 8003, 8008, 8009, 8010, 8012, 8013, 8014, 8024, 8029, 8030, 8047, 8054, 8056, 8066, 8069, 8077, 8081, 8083, 8086, 8087, 8089, 8090, 8093, 8098, 8103, 8109, 8110, 8112, 8117, 8123, 8126, 8133, 8138, 8139, 8140, 8141, 8147, 8158, 8159, 8160, 8164, 8165, 8167, 8168, 8173, 8175, 8181, 8191, 8196, 8200, 8203, 8205, 8243, 8246, 8291, 8316, 8322, 8333, 8334, 8385, 8403, 8406, 8407, 8419, 8426, 8430, 8431, 8434, 8444, 8447, 8450, 8454, 8467, 8470, 8472, 8494, 8504, 8506, 8521, 8532, 8533, 8548, 8549, 8550, 8556, 8562, 8567, 8568, 8573, 8575, 8577, 8578, 8580, 8588, 8596, 8602, 8621, 8622, 8635, 8649, 8663, 8701, 8791, 8800, 8805, 8810, 8813, 8846, 8849, 8861, 8869, 8872, 8876, 8880, 8883, 8889, 8891, 8900, 8911, 8916, 8943, 8989, 8993, 9000, 9001, 9002, 9003, 9009, 9010, 9011, 9015, 9021, 9025, 9027, 9030, 9031, 9035, 9042, 9046, 9048, 9051, 9063, 9070, 9071, 9076, 9079, 9080, 9082, 9085, 9087, 9088, 9090, 9091, 9092, 9095, 9096, 9101, 9110, 9119, 9121, 9137, 9138, 9151, 9153, 9158, 9160, 9162, 9165, 9169, 9174, 9182, 9186, 9191, 9194, 9200, 9205, 9209, 9210, 9211, 9216, 9221, 9236, 9242, 9246, 9249, 9251, 9273, 9292, 9295, 9306, 9333, 9335, 9398, 9399, 9418, 9433, 9443, 9445, 9454, 9456, 9530, 9532, 9553, 9600, 9633, 9663, 9682, 9734, 9761, 9765, 9800, 9888, 9916, 9918, 9943, 9944, 9981, 9988, 9998, 9999
- Tags: honeypot
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.2p1
- ts_added
- 2024-11-13 05:17:57.093000
- ts_last_update
- 2026-10-16 05:24:38.154000
Warden event timeline
DShield event timeline

