IP address
Shodan(more info)

Passive DNS

- Warden events (47)
- 2026-04-08
-
- ReconScanning (node.f90c6b): 3
- 2026-04-05
-
- ReconScanning (node.86eb21): 1
- 2026-04-03
-
- ReconScanning (node.f90c6b): 3
- ReconScanning (node.86eb21): 1
- 2026-03-25
-
- ReconScanning (node.86eb21): 1
- 2026-03-21
-
- ReconScanning (node.86eb21): 2
- 2026-03-16
-
- ReconScanning (node.86eb21): 1
- 2026-03-15
-
- ReconScanning (node.86eb21): 1
- 2026-03-13
-
- ReconScanning (node.86eb21): 1
- 2026-03-11
-
- ReconScanning (node.86eb21): 1
- 2026-03-07
-
- ReconScanning (node.86eb21): 1
- 2026-03-06
-
- ReconScanning (node.86eb21): 1
- 2026-03-03
-
- ReconScanning (node.86eb21): 1
- 2026-02-27
-
- ReconScanning (node.86eb21): 1
- 2026-02-26
-
- ReconScanning (node.86eb21): 1
- 2026-02-24
-
- ReconScanning (node.86eb21): 1
- 2026-02-19
-
- ReconScanning (node.86eb21): 1
- 2026-02-13
-
- ReconScanning (node.86eb21): 1
- 2026-02-12
-
- ReconScanning (node.86eb21): 1
- 2026-02-11
-
- ReconScanning (node.86eb21): 1
- 2026-02-07
-
- ReconScanning (node.86eb21): 1
- 2026-02-06
-
- ReconScanning (node.86eb21): 1
- 2026-01-31
-
- ReconScanning (node.86eb21): 2
- 2026-01-30
-
- ReconScanning (node.86eb21): 2
- 2026-01-21
-
- ReconScanning (node.86eb21): 2
- 2026-01-19
-
- ReconScanning (node.86eb21): 4
- 2026-01-18
-
- ReconScanning (node.86eb21): 2
- 2026-01-15
-
- ReconScanning (node.86eb21): 2
- 2026-01-13
-
- ReconScanning (node.86eb21): 2
- 2026-01-11
-
- ReconScanning (node.86eb21): 3
- 2026-01-09
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-01-15
- Number of reports: 32
- Distinct targets: 4
- 2026-02-24
- Number of reports: 20
- Distinct targets: 3
- 2026-02-25
- Number of reports: 20
- Distinct targets: 3
- 2026-02-26
- Number of reports: 68
- Distinct targets: 10
- 2026-03-03
- Number of reports: 24
- Distinct targets: 4
- 2026-03-04
- Number of reports: 68
- Distinct targets: 9
- 2026-03-05
- Number of reports: 68
- Distinct targets: 9
- 2026-03-09
- Number of reports: 16
- Distinct targets: 3
- 2026-03-11
- Number of reports: 68
- Distinct targets: 10
- 2026-03-17
- Number of reports: 60
- Distinct targets: 9
- 2026-03-25
- Number of reports: 84
- Distinct targets: 11
- 2026-03-26
- Number of reports: 84
- Distinct targets: 11
- 2026-04-02
- Number of reports: 56
- Distinct targets: 9
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 41 | src | scan |
- Origin AS
- AS136258 - ONEPROVIDER-AS
- BGP Prefix
- 185.213.23.0/24
- geo
- Norway, Oslo
- 🕑 Europe/Oslo
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 185.213.20.0 - 185.213.23.255
- last_activity
- 2026-04-08 03:23:31
- last_warden_event
- 2026-04-08 03:23:31
- rep
- 0.14479166666666668
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 13, 15, 17, 19, 21, 25, 26, 37, 43, 49, 51, 70, 79, 80, 81, 84, 90, 91, 95, 102, 104, 110, 111, 119, 135, 175, 179, 192, 199, 221, 243, 264, 340, 343, 347, 389, 444, 446, 465, 502, 503, 513, 548, 587, 593, 631, 636, 666, 689, 771, 789, 853, 873, 902, 992, 995, 1024, 1028, 1099, 1103, 1167, 1200, 1234, 1292, 1311, 1337, 1365, 1414, 1433, 1443, 1454, 1471, 1515, 1521, 1599, 1604, 1723, 1741, 1801, 1911, 1925, 1926, 1935, 1951, 1953, 1954, 1955, 1958, 1967, 1973, 1977, 1978, 1982, 2000, 2008, 2021, 2048, 2056, 2062, 2080, 2082, 2083, 2086, 2087, 2096, 2100, 2121, 2122, 2181, 2200, 2211, 2222, 2266, 2345, 2351, 2352, 2379, 2404, 2423, 2453, 2455, 2480, 2548, 2554, 2569, 2572, 2599, 2628, 2762, 2806, 3000, 3001, 3002, 3011, 3017, 3022, 3047, 3057, 3073, 3082, 3084, 3092, 3095, 3107, 3117, 3131, 3135, 3139, 3141, 3143, 3150, 3151, 3154, 3161, 3192, 3196, 3260, 3268, 3269, 3299, 3301, 3310, 3333, 3342, 3345, 3365, 3388, 3510, 3521, 3541, 3542, 3567, 3568, 3569, 3689, 3749, 3780, 3792, 3793, 3841, 4000, 4022, 4064, 4101, 4150, 4157, 4242, 4282, 4300, 4321, 4369, 4402, 4433, 4434, 4439, 4440, 4443, 4444, 4445, 4449, 4457, 4459, 4500, 4506, 4510, 4646, 4664, 4782, 4786, 4840, 4848, 4899, 4911, 4949, 5001, 5005, 5010, 5025, 5080, 5190, 5201, 5209, 5222, 5223, 5225, 5232, 5241, 5252, 5253, 5266, 5269, 5275, 5357, 5400, 5432, 5433, 5435, 5444, 5555, 5558, 5560, 5593, 5594, 5598, 5600, 5608, 5630, 5647, 5672, 5800, 5900, 5901, 5915, 5938, 5984, 5985, 5991, 5994, 6000, 6001, 6022, 6100, 6262, 6363, 6379, 6432, 6443, 6482, 6503, 6514, 6560, 6588, 6622, 6653, 6667, 6668, 6686, 6697, 6700, 6799, 7001, 7007, 7021, 7071, 7087, 7090, 7102, 7170, 7171, 7331, 7401, 7415, 7434, 7443, 7445, 7493, 7547, 7634, 7775, 7777, 7779, 7790, 7980, 7989, 8001, 8009, 8010, 8028, 8030, 8032, 8038, 8041, 8046, 8048, 8055, 8060, 8069, 8076, 8077, 8083, 8085, 8086, 8087, 8089, 8090, 8091, 8098, 8099, 8105, 8118, 8126, 8131, 8135, 8139, 8141, 8146, 8147, 8161, 8188, 8194, 8197, 8200, 8203, 8284, 8319, 8333, 8401, 8406, 8421, 8423, 8443, 8455, 8456, 8485, 8515, 8521, 8523, 8525, 8545, 8548, 8554, 8556, 8567, 8575, 8584, 8588, 8605, 8649, 8704, 8709, 8771, 8789, 8800, 8805, 8824, 8834, 8835, 8838, 8841, 8851, 8855, 8876, 8880, 8881, 8883, 8889, 8899, 8900, 8912, 8915, 8980, 8989, 9000, 9002, 9009, 9010, 9013, 9015, 9022, 9023, 9024, 9034, 9048, 9051, 9060, 9076, 9081, 9091, 9092, 9095, 9100, 9102, 9104, 9108, 9110, 9121, 9131, 9135, 9138, 9146, 9148, 9151, 9168, 9171, 9173, 9175, 9182, 9191, 9195, 9200, 9203, 9216, 9247, 9248, 9253, 9289, 9295, 9304, 9333, 9351, 9387, 9399, 9418, 9443, 9447, 9515, 9529, 9550, 9595, 9600, 9633, 9797, 9800, 9869, 9898, 9901, 9902, 9918, 9939, 9943, 9944, 9981, 9992, 9998
- Tags: honeypot
- CPEs: –
- ts_added
- 2024-04-28 03:43:08.215000
- ts_last_update
- 2026-04-08 03:43:10.277000
Warden event timeline
DShield event timeline

