IP address
Shodan(more info)

Passive DNS

- Warden events (18)
- 2026-08-21
-
- ReconScanning (node.86eb21): 1
- 2026-08-07
-
- ReconScanning (node.86eb21): 1
- 2026-08-04
-
- ReconScanning (node.86eb21): 1
- 2026-08-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-29
-
- ReconScanning (node.86eb21): 1
- 2026-07-21
-
- ReconScanning (node.86eb21): 1
- 2026-07-20
-
- ReconScanning (node.86eb21): 1
- 2026-07-19
-
- ReconScanning (node.86eb21): 1
- 2026-07-16
-
- ReconScanning (node.86eb21): 1
- 2026-07-15
-
- ReconScanning (node.86eb21): 1
- 2026-07-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-17
-
- ReconScanning (node.86eb21): 1
- 2026-06-15
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-06-02
- Number of reports: 44
- Distinct targets: 8
- 2026-06-03
- Number of reports: 44
- Distinct targets: 8
- 2026-06-09
- Number of reports: 68
- Distinct targets: 10
- 2026-06-10
- Number of reports: 68
- Distinct targets: 10
- 2026-06-16
- Number of reports: 65
- Distinct targets: 11
- 2026-07-02
- Number of reports: 48
- Distinct targets: 7
- 2026-07-09
- Number of reports: 60
- Distinct targets: 8
- 2026-07-10
- Number of reports: 60
- Distinct targets: 8
- 2026-07-26
- Number of reports: 56
- Distinct targets: 8
- 2026-07-27
- Number of reports: 56
- Distinct targets: 8
- 2026-08-05
- Number of reports: 72
- Distinct targets: 11
- 2026-08-12
- Number of reports: 12
- Distinct targets: 3
- 2026-08-13
- Number of reports: 20
- Distinct targets: 5
- 2026-08-18
- Number of reports: 60
- Distinct targets: 10
- 2026-08-19
- Number of reports: 60
- Distinct targets: 10
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 43 | src | scan |
- Origin AS
- AS136258 - ONEPROVIDER-AS
- BGP Prefix
- 185.213.23.0/24
- geo
- Norway, Oslo
- 🕑 Europe/Oslo
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 185.213.20.0 - 185.213.23.255
- last_activity
- 2026-08-21 03:09:51
- last_warden_event
- 2026-08-21 03:09:51
- rep
- 0.002774504468856742
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 13, 15, 19, 20, 21, 26, 37, 49, 66, 70, 79, 80, 82, 83, 84, 88, 92, 93, 94, 102, 104, 110, 111, 113, 122, 135, 143, 147, 175, 177, 179, 189, 195, 225, 264, 347, 389, 444, 445, 451, 482, 502, 503, 515, 548, 554, 555, 587, 636, 666, 771, 777, 789, 801, 808, 830, 853, 873, 902, 992, 995, 1022, 1025, 1099, 1153, 1193, 1198, 1200, 1207, 1224, 1234, 1244, 1337, 1414, 1433, 1443, 1515, 1521, 1741, 1800, 1801, 1883, 1911, 1925, 1950, 1952, 1955, 1959, 1962, 1976, 1981, 1984, 1987, 2000, 2008, 2016, 2018, 2055, 2067, 2087, 2103, 2109, 2121, 2222, 2223, 2266, 2327, 2345, 2404, 2455, 2480, 2525, 2552, 2562, 2568, 2598, 2602, 2761, 2762, 2850, 3000, 3001, 3008, 3009, 3030, 3062, 3074, 3083, 3084, 3089, 3091, 3092, 3099, 3101, 3109, 3115, 3128, 3131, 3139, 3141, 3142, 3150, 3161, 3168, 3174, 3185, 3187, 3192, 3260, 3269, 3270, 3299, 3301, 3306, 3311, 3333, 3345, 3389, 3390, 3402, 3412, 3460, 3521, 3541, 3542, 3549, 3559, 3689, 3749, 3790, 3953, 3954, 4002, 4022, 4040, 4063, 4080, 4120, 4157, 4200, 4242, 4244, 4282, 4321, 4434, 4437, 4443, 4444, 4488, 4499, 4500, 4506, 4510, 4543, 4567, 4602, 4646, 4782, 4808, 4840, 4848, 4899, 4911, 4949, 5000, 5001, 5005, 5006, 5009, 5010, 5025, 5119, 5135, 5222, 5227, 5238, 5239, 5247, 5249, 5257, 5258, 5262, 5266, 5269, 5271, 5432, 5435, 5456, 5544, 5555, 5560, 5590, 5593, 5598, 5599, 5601, 5613, 5630, 5660, 5672, 5800, 5801, 5858, 5864, 5900, 5901, 5908, 5938, 5984, 5985, 5986, 5992, 5993, 6001, 6005, 6036, 6119, 6262, 6281, 6308, 6363, 6379, 6405, 6432, 6464, 6505, 6514, 6565, 6605, 6633, 6664, 6666, 6667, 6779, 7001, 7071, 7079, 7170, 7171, 7172, 7182, 7415, 7434, 7445, 7474, 7493, 7500, 7540, 7634, 7771, 7779, 7799, 7989, 8000, 8003, 8008, 8009, 8010, 8037, 8042, 8043, 8050, 8055, 8060, 8064, 8066, 8069, 8072, 8073, 8085, 8086, 8087, 8089, 8096, 8098, 8099, 8105, 8112, 8116, 8123, 8126, 8140, 8147, 8153, 8168, 8172, 8176, 8181, 8188, 8200, 8203, 8218, 8248, 8252, 8291, 8315, 8333, 8393, 8407, 8413, 8415, 8420, 8422, 8425, 8429, 8440, 8443, 8445, 8463, 8466, 8481, 8526, 8532, 8545, 8554, 8574, 8575, 8587, 8589, 8605, 8622, 8637, 8649, 8779, 8800, 8805, 8806, 8814, 8824, 8825, 8830, 8832, 8847, 8849, 8859, 8861, 8873, 8878, 8880, 8883, 8889, 8902, 8908, 8911, 8915, 8999, 9000, 9001, 9002, 9007, 9009, 9014, 9018, 9020, 9027, 9032, 9037, 9042, 9066, 9071, 9080, 9082, 9089, 9090, 9092, 9098, 9100, 9102, 9103, 9106, 9114, 9118, 9127, 9136, 9141, 9151, 9162, 9167, 9170, 9172, 9176, 9191, 9200, 9203, 9206, 9211, 9212, 9216, 9299, 9300, 9303, 9306, 9315, 9333, 9389, 9418, 9443, 9505, 9530, 9595, 9600, 9633, 9658, 9800, 9804, 9810, 9876, 9943, 9944, 9981, 9994, 9998, 9999, 20000
- Tags: self-signed
- CPEs: –
- ts_added
- 2024-04-28 03:43:08.215000
- ts_last_update
- 2026-08-21 03:43:10.479000
Warden event timeline
DShield event timeline

