IP address
Shodan(more info)

Passive DNS

- Warden events (17)
- 2026-07-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-27
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 3
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- 2026-04-10
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-04-20
- Number of reports: 19
- Distinct targets: 4
- 2026-04-22
- Number of reports: 29
- Distinct targets: 4
- 2026-05-01
- Number of reports: 20
- Distinct targets: 3
- 2026-05-14
- Number of reports: 33
- Distinct targets: 5
- 2026-05-20
- Number of reports: 34
- Distinct targets: 5
- 2026-06-02
- Number of reports: 25
- Distinct targets: 3
- 2026-06-03
- Number of reports: 25
- Distinct targets: 3
- 2026-06-09
- Number of reports: 18
- Distinct targets: 3
- 2026-06-10
- Number of reports: 18
- Distinct targets: 3
- 2026-06-17
- Number of reports: 31
- Distinct targets: 4
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | src | scan |
- Origin AS
- AS204094 - I4W
- BGP Prefix
- 185.113.140.0/24
- geo
- Portugal, Lisbon
- 🕑 Europe/Lisbon
- hostname
- fakewrithe.com
- Address block ('inetnum' or 'NetRange' in whois database)
- 185.113.140.0 - 185.113.143.255
- last_activity
- 2026-07-03 02:28:10
- last_warden_event
- 2026-07-03 02:28:10
- rep
- 0.002988827834375929
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 13, 15, 19, 21, 26, 51, 80, 81, 84, 99, 102, 106, 111, 113, 119, 122, 135, 179, 282, 443, 444, 465, 513, 541, 554, 636, 700, 789, 830, 873, 902, 995, 1080, 1153, 1177, 1200, 1234, 1355, 1377, 1433, 1458, 1521, 1604, 1801, 1935, 1954, 1959, 1972, 1975, 1985, 2008, 2067, 2081, 2086, 2087, 2121, 2181, 2196, 2222, 2266, 2404, 2433, 2439, 2455, 2506, 2560, 2599, 2601, 2761, 3001, 3061, 3065, 3071, 3072, 3123, 3151, 3156, 3169, 3171, 3193, 3260, 3268, 3342, 3389, 3504, 3542, 3553, 3554, 3558, 3559, 3569, 3572, 4022, 4064, 4100, 4242, 4282, 4443, 4444, 4500, 4506, 4848, 4911, 4933, 4949, 4999, 5000, 5001, 5006, 5010, 5053, 5083, 5222, 5236, 5243, 5357, 5366, 5432, 5558, 5560, 5601, 5603, 5613, 5630, 5672, 5680, 5703, 5800, 5901, 5984, 6000, 6348, 6379, 6436, 6443, 6697, 7000, 7001, 7013, 7050, 7071, 7085, 7325, 7547, 7601, 7657, 7779, 7788, 7801, 7818, 7989, 8001, 8008, 8010, 8024, 8041, 8081, 8083, 8085, 8089, 8097, 8108, 8117, 8123, 8156, 8172, 8173, 8178, 8188, 8193, 8401, 8414, 8436, 8457, 8464, 8466, 8484, 8554, 8568, 8576, 8666, 8766, 8784, 8801, 8831, 8844, 8848, 8853, 8856, 8871, 8880, 8881, 8883, 8887, 8888, 8943, 9009, 9030, 9048, 9078, 9080, 9090, 9100, 9113, 9133, 9144, 9150, 9151, 9160, 9194, 9209, 9210, 9213, 9295, 9443, 9600, 9761, 9779, 9800, 9876, 9888, 9918, 9919, 9930, 9943, 9944, 9999
- Tags: honeypot
- CPEs: –
- ts_added
- 2024-11-13 05:17:57.093000
- ts_last_update
- 2026-07-09 05:18:00.067000
Warden event timeline
DShield event timeline

