IP address
Shodan(more info)

Passive DNS

- Warden events (31)
- 2026-01-21
-
- ReconScanning (node.86eb21): 2
- 2026-01-19
-
- ReconScanning (node.86eb21): 4
- 2026-01-18
-
- ReconScanning (node.86eb21): 2
- 2026-01-15
-
- ReconScanning (node.86eb21): 2
- 2026-01-13
-
- ReconScanning (node.86eb21): 2
- 2026-01-11
-
- ReconScanning (node.86eb21): 3
- 2026-01-09
-
- ReconScanning (node.86eb21): 1
- 2025-12-25
-
- ReconScanning (node.86eb21): 1
- 2025-12-24
-
- ReconScanning (node.86eb21): 1
- 2025-12-13
-
- ReconScanning (node.86eb21): 1
- 2025-12-09
-
- ReconScanning (node.86eb21): 1
- 2025-12-08
-
- ReconScanning (node.86eb21): 1
- 2025-12-07
-
- ReconScanning (node.86eb21): 1
- 2025-12-02
-
- ReconScanning (node.86eb21): 1
- 2025-12-01
-
- ReconScanning (node.86eb21): 1
- 2025-11-09
-
- ReconScanning (node.86eb21): 1
- 2025-11-08
-
- ReconScanning (node.86eb21): 1
- 2025-11-01
-
- ReconScanning (node.86eb21): 1
- 2025-10-31
-
- ReconScanning (node.86eb21): 2
- 2025-10-28
-
- ReconScanning (node.86eb21): 2
- DShield reports (IP summary, reports)
- 2025-10-27
- Number of reports: 20
- Distinct targets: 3
- 2025-10-28
- Number of reports: 96
- Distinct targets: 14
- 2025-11-03
- Number of reports: 32
- Distinct targets: 5
- 2025-11-04
- Number of reports: 32
- Distinct targets: 5
- 2025-11-12
- Number of reports: 88
- Distinct targets: 15
- 2025-11-19
- Number of reports: 36
- Distinct targets: 5
- 2025-11-20
- Number of reports: 36
- Distinct targets: 5
- 2025-11-21
- Number of reports: 84
- Distinct targets: 13
- 2025-11-24
- Number of reports: 36
- Distinct targets: 5
- 2025-11-25
- Number of reports: 36
- Distinct targets: 5
- 2025-12-03
- Number of reports: 24
- Distinct targets: 4
- 2025-12-09
- Number of reports: 32
- Distinct targets: 4
- 2025-12-10
- Number of reports: 96
- Distinct targets: 14
- 2025-12-17
- Number of reports: 84
- Distinct targets: 13
- 2025-12-18
- Number of reports: 84
- Distinct targets: 13
- 2025-12-23
- Number of reports: 32
- Distinct targets: 4
- 2025-12-24
- Number of reports: 32
- Distinct targets: 4
- 2025-12-31
- Number of reports: 24
- Distinct targets: 3
- 2026-01-01
- Number of reports: 76
- Distinct targets: 10
- 2026-01-02
- Number of reports: 76
- Distinct targets: 10
- 2026-01-06
- Number of reports: 28
- Distinct targets: 4
- 2026-01-15
- Number of reports: 32
- Distinct targets: 4
- Origin AS
- AS136258 - ONEPROVIDER-AS
- BGP Prefix
- 185.213.23.0/24
- geo
- Norway, Oslo
- 🕑 Europe/Oslo
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 185.213.20.0 - 185.213.23.255
- last_activity
- 2026-01-21 02:37:33
- last_warden_event
- 2026-01-21 02:37:33
- rep
- 0.21428571428571427
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 13, 17, 19, 21, 25, 26, 37, 43, 49, 70, 79, 80, 81, 82, 84, 88, 96, 102, 104, 111, 119, 122, 175, 179, 195, 221, 243, 264, 311, 389, 441, 444, 445, 465, 503, 513, 541, 554, 556, 587, 631, 632, 636, 666, 771, 873, 902, 943, 947, 995, 1002, 1024, 1025, 1080, 1099, 1153, 1177, 1200, 1234, 1250, 1283, 1311, 1337, 1355, 1433, 1443, 1521, 1557, 1599, 1605, 1700, 1723, 1741, 1800, 1801, 1883, 1901, 1911, 1925, 1926, 1953, 1966, 1981, 2000, 2008, 2018, 2022, 2049, 2062, 2067, 2081, 2083, 2086, 2087, 2121, 2181, 2222, 2271, 2375, 2376, 2404, 2628, 2761, 2806, 3000, 3001, 3011, 3019, 3050, 3084, 3086, 3112, 3115, 3119, 3122, 3123, 3126, 3127, 3138, 3139, 3143, 3153, 3157, 3162, 3167, 3182, 3183, 3188, 3191, 3260, 3270, 3306, 3310, 3333, 3337, 3342, 3388, 3405, 3406, 3541, 3542, 3550, 3551, 3555, 3590, 3689, 3780, 3792, 3953, 4000, 4002, 4022, 4040, 4063, 4096, 4150, 4242, 4243, 4282, 4321, 4369, 4433, 4434, 4444, 4451, 4488, 4500, 4506, 4561, 4567, 4664, 4782, 4786, 4808, 4840, 4899, 4911, 4949, 4999, 5000, 5001, 5004, 5006, 5007, 5009, 5010, 5025, 5093, 5123, 5201, 5222, 5229, 5241, 5252, 5266, 5269, 5277, 5357, 5400, 5431, 5432, 5435, 5495, 5555, 5560, 5569, 5597, 5672, 5678, 5801, 5858, 5900, 5901, 5938, 5984, 5985, 5986, 5990, 5994, 6000, 6008, 6036, 6050, 6070, 6080, 6379, 6432, 6580, 6602, 6633, 6653, 6664, 6666, 6668, 6748, 6955, 7001, 7003, 7007, 7071, 7078, 7171, 7302, 7434, 7443, 7537, 7547, 7634, 7657, 7771, 7777, 7779, 7801, 7989, 7999, 8000, 8008, 8009, 8010, 8026, 8029, 8031, 8032, 8033, 8046, 8057, 8060, 8069, 8070, 8075, 8081, 8083, 8086, 8087, 8090, 8098, 8099, 8104, 8105, 8112, 8118, 8124, 8125, 8138, 8139, 8154, 8156, 8166, 8176, 8181, 8188, 8198, 8200, 8238, 8241, 8333, 8406, 8411, 8466, 8505, 8506, 8519, 8520, 8523, 8532, 8545, 8554, 8560, 8568, 8575, 8590, 8591, 8594, 8649, 8680, 8707, 8728, 8743, 8803, 8805, 8831, 8834, 8836, 8841, 8852, 8859, 8872, 8877, 8880, 8883, 8888, 8907, 9000, 9007, 9009, 9017, 9018, 9019, 9036, 9038, 9042, 9048, 9069, 9076, 9079, 9089, 9090, 9092, 9095, 9100, 9133, 9134, 9137, 9144, 9152, 9157, 9159, 9160, 9199, 9200, 9236, 9241, 9242, 9306, 9333, 9376, 9398, 9418, 9443, 9446, 9456, 9501, 9530, 9595, 9600, 9633, 9761, 9811, 9869, 9876, 9898, 9918, 9943, 9944, 9981, 9991, 9999
- Tags: honeypot
- CPEs: –
- ts_added
- 2024-04-28 03:43:08.215000
- ts_last_update
- 2026-01-21 03:43:10.381000
Warden event timeline
DShield event timeline

