IP address
Shodan(more info)

Passive DNS

- Warden events (30)
- 2026-02-07
-
- ReconScanning (node.86eb21): 1
- 2026-02-06
-
- ReconScanning (node.86eb21): 1
- 2026-01-31
-
- ReconScanning (node.86eb21): 2
- 2026-01-30
-
- ReconScanning (node.86eb21): 2
- 2026-01-21
-
- ReconScanning (node.86eb21): 2
- 2026-01-19
-
- ReconScanning (node.86eb21): 4
- 2026-01-18
-
- ReconScanning (node.86eb21): 2
- 2026-01-15
-
- ReconScanning (node.86eb21): 2
- 2026-01-13
-
- ReconScanning (node.86eb21): 2
- 2026-01-11
-
- ReconScanning (node.86eb21): 3
- 2026-01-09
-
- ReconScanning (node.86eb21): 1
- 2025-12-25
-
- ReconScanning (node.86eb21): 1
- 2025-12-24
-
- ReconScanning (node.86eb21): 1
- 2025-12-13
-
- ReconScanning (node.86eb21): 1
- 2025-12-09
-
- ReconScanning (node.86eb21): 1
- 2025-12-08
-
- ReconScanning (node.86eb21): 1
- 2025-12-07
-
- ReconScanning (node.86eb21): 1
- 2025-12-02
-
- ReconScanning (node.86eb21): 1
- 2025-12-01
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2025-11-12
- Number of reports: 88
- Distinct targets: 15
- 2025-11-19
- Number of reports: 36
- Distinct targets: 5
- 2025-11-20
- Number of reports: 36
- Distinct targets: 5
- 2025-11-21
- Number of reports: 84
- Distinct targets: 13
- 2025-11-24
- Number of reports: 36
- Distinct targets: 5
- 2025-11-25
- Number of reports: 36
- Distinct targets: 5
- 2025-12-03
- Number of reports: 24
- Distinct targets: 4
- 2025-12-09
- Number of reports: 32
- Distinct targets: 4
- 2025-12-10
- Number of reports: 96
- Distinct targets: 14
- 2025-12-17
- Number of reports: 84
- Distinct targets: 13
- 2025-12-18
- Number of reports: 84
- Distinct targets: 13
- 2025-12-23
- Number of reports: 32
- Distinct targets: 4
- 2025-12-24
- Number of reports: 32
- Distinct targets: 4
- 2025-12-31
- Number of reports: 24
- Distinct targets: 3
- 2026-01-01
- Number of reports: 76
- Distinct targets: 10
- 2026-01-02
- Number of reports: 76
- Distinct targets: 10
- 2026-01-06
- Number of reports: 28
- Distinct targets: 4
- 2026-01-15
- Number of reports: 32
- Distinct targets: 4
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| No threat category tags assigned | |||
- Origin AS
- AS136258 - ONEPROVIDER-AS
- BGP Prefix
- 185.213.23.0/24
- geo
- Norway, Oslo
- 🕑 Europe/Oslo
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 185.213.20.0 - 185.213.23.255
- last_activity
- 2026-02-07 03:12:14
- last_warden_event
- 2026-02-07 03:12:14
- rep
- 0.075
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 13, 17, 21, 22, 25, 26, 37, 43, 49, 65, 70, 79, 80, 81, 83, 88, 102, 104, 110, 135, 143, 175, 179, 195, 221, 264, 311, 340, 389, 443, 444, 487, 502, 503, 513, 515, 554, 555, 556, 631, 632, 636, 666, 771, 782, 801, 806, 843, 902, 992, 993, 995, 1002, 1063, 1099, 1234, 1311, 1337, 1355, 1400, 1414, 1433, 1443, 1457, 1460, 1515, 1599, 1605, 1723, 1741, 1800, 1801, 1883, 1925, 1926, 1935, 1962, 2008, 2010, 2018, 2022, 2048, 2064, 2066, 2081, 2086, 2087, 2108, 2181, 2222, 2225, 2345, 2375, 2376, 2382, 2444, 2453, 2455, 2480, 2628, 2761, 2850, 3001, 3050, 3062, 3113, 3118, 3120, 3122, 3123, 3128, 3147, 3153, 3182, 3183, 3190, 3191, 3192, 3199, 3260, 3268, 3269, 3299, 3310, 3333, 3352, 3388, 3412, 3460, 3541, 3551, 3689, 3749, 3780, 3790, 3953, 4000, 4022, 4040, 4063, 4096, 4148, 4165, 4242, 4282, 4400, 4430, 4434, 4443, 4444, 4451, 4482, 4500, 4505, 4506, 4567, 4602, 4782, 4786, 4808, 4840, 4899, 4949, 5000, 5001, 5006, 5009, 5010, 5025, 5083, 5090, 5201, 5222, 5225, 5226, 5229, 5253, 5269, 5351, 5357, 5432, 5435, 5495, 5592, 5601, 5630, 5672, 5800, 5801, 5901, 5938, 5984, 5985, 5986, 5990, 5999, 6000, 6001, 6006, 6008, 6022, 6036, 6070, 6080, 6379, 6505, 6561, 6580, 6602, 6653, 6666, 6667, 6668, 6955, 7001, 7002, 7003, 7071, 7434, 7443, 7474, 7547, 7657, 7777, 7779, 7801, 7980, 8000, 8008, 8009, 8026, 8029, 8032, 8054, 8060, 8069, 8081, 8085, 8087, 8090, 8092, 8098, 8099, 8105, 8112, 8118, 8123, 8125, 8126, 8139, 8140, 8164, 8181, 8188, 8200, 8239, 8291, 8333, 8383, 8404, 8419, 8431, 8443, 8466, 8480, 8494, 8505, 8545, 8551, 8554, 8562, 8568, 8569, 8583, 8643, 8649, 8680, 8701, 8728, 8743, 8745, 8771, 8805, 8831, 8834, 8841, 8846, 8852, 8861, 8877, 8880, 8888, 8889, 8907, 9000, 9001, 9002, 9004, 9019, 9034, 9042, 9079, 9080, 9086, 9090, 9091, 9095, 9104, 9111, 9119, 9142, 9144, 9159, 9160, 9200, 9243, 9283, 9295, 9306, 9333, 9351, 9383, 9389, 9398, 9433, 9456, 9501, 9532, 9595, 9600, 9633, 9743, 9761, 9800, 9802, 9811, 9869, 9876, 9898, 9918, 9943, 9950, 9981, 9999
- Tags: honeypot
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1
- ts_added
- 2024-04-28 03:43:08.215000
- ts_last_update
- 2026-02-10 03:43:10.740000
Warden event timeline
DShield event timeline

