IP address
Shodan(more info)

Passive DNS

- Warden events (30)
- 2026-01-31
-
- ReconScanning (node.86eb21): 2
- 2026-01-30
-
- ReconScanning (node.86eb21): 2
- 2026-01-21
-
- ReconScanning (node.86eb21): 2
- 2026-01-19
-
- ReconScanning (node.86eb21): 4
- 2026-01-18
-
- ReconScanning (node.86eb21): 2
- 2026-01-15
-
- ReconScanning (node.86eb21): 2
- 2026-01-13
-
- ReconScanning (node.86eb21): 2
- 2026-01-11
-
- ReconScanning (node.86eb21): 3
- 2026-01-09
-
- ReconScanning (node.86eb21): 1
- 2025-12-25
-
- ReconScanning (node.86eb21): 1
- 2025-12-24
-
- ReconScanning (node.86eb21): 1
- 2025-12-13
-
- ReconScanning (node.86eb21): 1
- 2025-12-09
-
- ReconScanning (node.86eb21): 1
- 2025-12-08
-
- ReconScanning (node.86eb21): 1
- 2025-12-07
-
- ReconScanning (node.86eb21): 1
- 2025-12-02
-
- ReconScanning (node.86eb21): 1
- 2025-12-01
-
- ReconScanning (node.86eb21): 1
- 2025-11-09
-
- ReconScanning (node.86eb21): 1
- 2025-11-08
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2025-11-04
- Number of reports: 32
- Distinct targets: 5
- 2025-11-12
- Number of reports: 88
- Distinct targets: 15
- 2025-11-19
- Number of reports: 36
- Distinct targets: 5
- 2025-11-20
- Number of reports: 36
- Distinct targets: 5
- 2025-11-21
- Number of reports: 84
- Distinct targets: 13
- 2025-11-24
- Number of reports: 36
- Distinct targets: 5
- 2025-11-25
- Number of reports: 36
- Distinct targets: 5
- 2025-12-03
- Number of reports: 24
- Distinct targets: 4
- 2025-12-09
- Number of reports: 32
- Distinct targets: 4
- 2025-12-10
- Number of reports: 96
- Distinct targets: 14
- 2025-12-17
- Number of reports: 84
- Distinct targets: 13
- 2025-12-18
- Number of reports: 84
- Distinct targets: 13
- 2025-12-23
- Number of reports: 32
- Distinct targets: 4
- 2025-12-24
- Number of reports: 32
- Distinct targets: 4
- 2025-12-31
- Number of reports: 24
- Distinct targets: 3
- 2026-01-01
- Number of reports: 76
- Distinct targets: 10
- 2026-01-02
- Number of reports: 76
- Distinct targets: 10
- 2026-01-06
- Number of reports: 28
- Distinct targets: 4
- 2026-01-15
- Number of reports: 32
- Distinct targets: 4
- Origin AS
- AS136258 - ONEPROVIDER-AS
- BGP Prefix
- 185.213.23.0/24
- geo
- Norway, Oslo
- 🕑 Europe/Oslo
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 185.213.20.0 - 185.213.23.255
- last_activity
- 2026-01-31 03:45:26
- last_warden_event
- 2026-01-31 03:45:26
- rep
- 0.08928571428571429
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 13, 17, 19, 21, 22, 26, 37, 43, 49, 65, 70, 79, 80, 81, 83, 84, 88, 96, 102, 104, 110, 122, 135, 143, 175, 179, 195, 221, 264, 311, 340, 389, 443, 444, 502, 503, 513, 515, 554, 555, 556, 631, 632, 636, 666, 771, 782, 801, 806, 843, 902, 943, 947, 993, 995, 1002, 1025, 1063, 1080, 1099, 1153, 1234, 1337, 1355, 1414, 1433, 1443, 1457, 1460, 1515, 1521, 1599, 1605, 1723, 1741, 1800, 1801, 1883, 1911, 1925, 1926, 1962, 2008, 2010, 2018, 2022, 2064, 2066, 2081, 2083, 2086, 2087, 2108, 2181, 2222, 2225, 2271, 2345, 2375, 2376, 2382, 2404, 2444, 2453, 2455, 2761, 2806, 2850, 3001, 3011, 3050, 3062, 3112, 3113, 3118, 3120, 3122, 3123, 3126, 3128, 3147, 3153, 3182, 3183, 3190, 3191, 3192, 3199, 3260, 3268, 3269, 3299, 3310, 3333, 3388, 3412, 3460, 3541, 3542, 3551, 3689, 3780, 3790, 3953, 4000, 4022, 4040, 4063, 4096, 4150, 4242, 4282, 4321, 4369, 4400, 4430, 4433, 4434, 4443, 4444, 4451, 4482, 4500, 4506, 4567, 4664, 4782, 4786, 4808, 4840, 4899, 4911, 4949, 4999, 5000, 5001, 5006, 5007, 5009, 5010, 5025, 5083, 5201, 5222, 5225, 5226, 5229, 5241, 5252, 5253, 5269, 5357, 5400, 5432, 5435, 5495, 5569, 5592, 5601, 5630, 5672, 5678, 5800, 5801, 5900, 5901, 5938, 5984, 5985, 5986, 5990, 5994, 5999, 6000, 6006, 6008, 6036, 6050, 6070, 6080, 6379, 6505, 6561, 6580, 6602, 6633, 6653, 6664, 6666, 6667, 6668, 6955, 7001, 7002, 7003, 7071, 7171, 7302, 7434, 7443, 7547, 7634, 7657, 7777, 7779, 7801, 7989, 8000, 8008, 8009, 8026, 8029, 8032, 8054, 8060, 8069, 8075, 8081, 8090, 8092, 8098, 8099, 8104, 8105, 8112, 8118, 8123, 8126, 8139, 8140, 8156, 8181, 8188, 8198, 8200, 8239, 8291, 8333, 8383, 8404, 8419, 8466, 8480, 8505, 8532, 8545, 8554, 8560, 8562, 8568, 8569, 8583, 8643, 8649, 8680, 8701, 8707, 8728, 8743, 8771, 8805, 8831, 8834, 8836, 8841, 8852, 8861, 8877, 8880, 8883, 8888, 8889, 8907, 9000, 9001, 9002, 9007, 9019, 9042, 9079, 9080, 9086, 9089, 9090, 9091, 9095, 9104, 9134, 9142, 9144, 9152, 9159, 9160, 9200, 9243, 9283, 9295, 9306, 9333, 9351, 9383, 9389, 9398, 9418, 9433, 9456, 9501, 9530, 9595, 9600, 9633, 9743, 9761, 9800, 9802, 9811, 9869, 9876, 9898, 9918, 9943, 9944, 9981, 9999
- Tags: honeypot
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1
- ts_added
- 2024-04-28 03:43:08.215000
- ts_last_update
- 2026-02-02 03:43:10.194000
Warden event timeline
DShield event timeline

