IP address
Shodan(more info)

Passive DNS

- Warden events (22)
- 2026-02-27
-
- ReconScanning (node.86eb21): 1
- 2026-02-24
-
- ReconScanning (node.86eb21): 1
- 2026-02-13
-
- ReconScanning (node.86eb21): 1
- 2026-02-06
-
- ReconScanning (node.86eb21): 1
- 2026-01-21
-
- ReconScanning (node.86eb21): 2
- 2026-01-19
-
- ReconScanning (node.86eb21): 2
- 2026-01-15
-
- ReconScanning (node.86eb21): 2
- 2026-01-11
-
- ReconScanning (node.86eb21): 3
- 2026-01-09
-
- ReconScanning (node.86eb21): 2
- 2025-12-25
-
- ReconScanning (node.86eb21): 1
- 2025-12-24
-
- ReconScanning (node.86eb21): 1
- 2025-12-13
-
- ReconScanning (node.86eb21): 1
- 2025-12-09
-
- ReconScanning (node.86eb21): 1
- 2025-12-08
-
- ReconScanning (node.86eb21): 1
- 2025-12-07
-
- ReconScanning (node.86eb21): 1
- 2025-12-02
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-01-01
- Number of reports: 43
- Distinct targets: 4
- 2026-01-02
- Number of reports: 43
- Distinct targets: 4
- 2026-02-26
- Number of reports: 24
- Distinct targets: 4
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 34 | src | scan |
- Origin AS
- AS204094 - I4W
- BGP Prefix
- 185.113.140.0/24
- geo
- Portugal, Lisbon
- 🕑 Europe/Lisbon
- hostname
- fakewrithe.com
- Address block ('inetnum' or 'NetRange' in whois database)
- 185.113.140.0 - 185.113.143.255
- last_activity
- 2026-02-27 01:41:31
- last_warden_event
- 2026-02-27 01:41:31
- rep
- 0.04523809523809524
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 13, 15, 17, 19, 22, 25, 26, 37, 43, 70, 79, 80, 82, 83, 84, 86, 95, 102, 104, 111, 113, 179, 195, 222, 389, 427, 443, 444, 445, 465, 503, 513, 515, 541, 548, 587, 593, 636, 666, 789, 902, 943, 992, 993, 995, 999, 1025, 1099, 1153, 1167, 1200, 1224, 1244, 1249, 1250, 1283, 1311, 1400, 1414, 1443, 1451, 1471, 1521, 1599, 1604, 1700, 1723, 1741, 1801, 1911, 1926, 1950, 1959, 1962, 2000, 2008, 2048, 2056, 2061, 2081, 2082, 2083, 2086, 2121, 2154, 2181, 2222, 2225, 2320, 2345, 2375, 2379, 2404, 2480, 2549, 2628, 2761, 2762, 3000, 3001, 3006, 3019, 3022, 3050, 3063, 3072, 3094, 3107, 3112, 3133, 3147, 3166, 3174, 3183, 3187, 3190, 3198, 3260, 3268, 3299, 3301, 3306, 3310, 3341, 3388, 3389, 3401, 3412, 3522, 3541, 3551, 3555, 3749, 3780, 3790, 4021, 4022, 4040, 4043, 4063, 4150, 4155, 4165, 4242, 4282, 4343, 4431, 4433, 4443, 4444, 4461, 4499, 4500, 4502, 4506, 4567, 4620, 4782, 4786, 4821, 4899, 5001, 5005, 5010, 5201, 5222, 5234, 5242, 5279, 5280, 5357, 5400, 5432, 5440, 5560, 5599, 5601, 5602, 5605, 5608, 5660, 5672, 5696, 5801, 5900, 5901, 5904, 5909, 5986, 5996, 5998, 6000, 6010, 6061, 6379, 6405, 6432, 6443, 6580, 6633, 6653, 6667, 6668, 6697, 7001, 7071, 7171, 7283, 7401, 7415, 7443, 7548, 7657, 7779, 7801, 7989, 8000, 8001, 8008, 8009, 8010, 8032, 8036, 8054, 8055, 8060, 8061, 8081, 8085, 8087, 8089, 8093, 8099, 8101, 8112, 8113, 8123, 8159, 8164, 8169, 8171, 8178, 8181, 8187, 8188, 8200, 8285, 8291, 8334, 8402, 8408, 8412, 8418, 8427, 8432, 8443, 8448, 8472, 8554, 8575, 8587, 8594, 8595, 8649, 8707, 8728, 8765, 8784, 8800, 8802, 8833, 8834, 8846, 8858, 8860, 8883, 8888, 8989, 9000, 9001, 9007, 9009, 9019, 9032, 9042, 9045, 9048, 9050, 9051, 9059, 9065, 9080, 9090, 9091, 9100, 9133, 9151, 9159, 9160, 9168, 9191, 9200, 9201, 9204, 9210, 9213, 9221, 9241, 9243, 9244, 9295, 9303, 9333, 9389, 9398, 9418, 9443, 9527, 9530, 9595, 9600, 9633, 9663, 9674, 9761, 9810, 9869, 9876, 9898, 9908, 9930, 9943, 9944, 9999
- Tags: honeypot
- CPEs: cpe:/a:openbsd:openssh:8.2p1, cpe:/o:canonical:ubuntu_linux
- ts_added
- 2024-11-13 05:17:57.093000
- ts_last_update
- 2026-03-02 05:18:00.637000
Warden event timeline
DShield event timeline

