IP address


.075185.213.23.35
Shodan(more info)
Passive DNS
Tags: Scanner

Threat categories

TLRoleCategoryDetails
No threat category tags assigned

Warden events (30)
2026-02-07
ReconScanning (node.86eb21): 1
2026-02-06
ReconScanning (node.86eb21): 1
2026-01-31
ReconScanning (node.86eb21): 2
2026-01-30
ReconScanning (node.86eb21): 2
2026-01-21
ReconScanning (node.86eb21): 2
2026-01-19
ReconScanning (node.86eb21): 4
2026-01-18
ReconScanning (node.86eb21): 2
2026-01-15
ReconScanning (node.86eb21): 2
2026-01-13
ReconScanning (node.86eb21): 2
2026-01-11
ReconScanning (node.86eb21): 3
2026-01-09
ReconScanning (node.86eb21): 1
2025-12-25
ReconScanning (node.86eb21): 1
2025-12-24
ReconScanning (node.86eb21): 1
2025-12-13
ReconScanning (node.86eb21): 1
2025-12-09
ReconScanning (node.86eb21): 1
2025-12-08
ReconScanning (node.86eb21): 1
2025-12-07
ReconScanning (node.86eb21): 1
2025-12-02
ReconScanning (node.86eb21): 1
2025-12-01
ReconScanning (node.86eb21): 1
DShield reports (IP summary, reports)
2025-11-12
Number of reports: 88
Distinct targets: 15
2025-11-19
Number of reports: 36
Distinct targets: 5
2025-11-20
Number of reports: 36
Distinct targets: 5
2025-11-21
Number of reports: 84
Distinct targets: 13
2025-11-24
Number of reports: 36
Distinct targets: 5
2025-11-25
Number of reports: 36
Distinct targets: 5
2025-12-03
Number of reports: 24
Distinct targets: 4
2025-12-09
Number of reports: 32
Distinct targets: 4
2025-12-10
Number of reports: 96
Distinct targets: 14
2025-12-17
Number of reports: 84
Distinct targets: 13
2025-12-18
Number of reports: 84
Distinct targets: 13
2025-12-23
Number of reports: 32
Distinct targets: 4
2025-12-24
Number of reports: 32
Distinct targets: 4
2025-12-31
Number of reports: 24
Distinct targets: 3
2026-01-01
Number of reports: 76
Distinct targets: 10
2026-01-02
Number of reports: 76
Distinct targets: 10
2026-01-06
Number of reports: 28
Distinct targets: 4
2026-01-15
Number of reports: 32
Distinct targets: 4
Origin AS
AS136258 - ONEPROVIDER-AS
BGP Prefix
185.213.23.0/24
geo
Norway, Oslo
🕑 Europe/Oslo
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
185.213.20.0 - 185.213.23.255
last_activity
2026-02-07 03:12:14
last_warden_event
2026-02-07 03:12:14
rep
0.075
reserved_range
0
Shodan's InternetDB
Open ports: 11, 13, 17, 21, 22, 25, 26, 37, 43, 49, 65, 70, 79, 80, 81, 83, 88, 102, 104, 110, 135, 143, 175, 179, 195, 221, 264, 311, 340, 389, 443, 444, 487, 502, 503, 513, 515, 554, 555, 556, 631, 632, 636, 666, 771, 782, 801, 806, 843, 902, 992, 993, 995, 1002, 1063, 1099, 1234, 1311, 1337, 1355, 1400, 1414, 1433, 1443, 1457, 1460, 1515, 1599, 1605, 1723, 1741, 1800, 1801, 1883, 1925, 1926, 1935, 1962, 2008, 2010, 2018, 2022, 2048, 2064, 2066, 2081, 2086, 2087, 2108, 2181, 2222, 2225, 2345, 2375, 2376, 2382, 2444, 2453, 2455, 2480, 2628, 2761, 2850, 3001, 3050, 3062, 3113, 3118, 3120, 3122, 3123, 3128, 3147, 3153, 3182, 3183, 3190, 3191, 3192, 3199, 3260, 3268, 3269, 3299, 3310, 3333, 3352, 3388, 3412, 3460, 3541, 3551, 3689, 3749, 3780, 3790, 3953, 4000, 4022, 4040, 4063, 4096, 4148, 4165, 4242, 4282, 4400, 4430, 4434, 4443, 4444, 4451, 4482, 4500, 4505, 4506, 4567, 4602, 4782, 4786, 4808, 4840, 4899, 4949, 5000, 5001, 5006, 5009, 5010, 5025, 5083, 5090, 5201, 5222, 5225, 5226, 5229, 5253, 5269, 5351, 5357, 5432, 5435, 5495, 5592, 5601, 5630, 5672, 5800, 5801, 5901, 5938, 5984, 5985, 5986, 5990, 5999, 6000, 6001, 6006, 6008, 6022, 6036, 6070, 6080, 6379, 6505, 6561, 6580, 6602, 6653, 6666, 6667, 6668, 6955, 7001, 7002, 7003, 7071, 7434, 7443, 7474, 7547, 7657, 7777, 7779, 7801, 7980, 8000, 8008, 8009, 8026, 8029, 8032, 8054, 8060, 8069, 8081, 8085, 8087, 8090, 8092, 8098, 8099, 8105, 8112, 8118, 8123, 8125, 8126, 8139, 8140, 8164, 8181, 8188, 8200, 8239, 8291, 8333, 8383, 8404, 8419, 8431, 8443, 8466, 8480, 8494, 8505, 8545, 8551, 8554, 8562, 8568, 8569, 8583, 8643, 8649, 8680, 8701, 8728, 8743, 8745, 8771, 8805, 8831, 8834, 8841, 8846, 8852, 8861, 8877, 8880, 8888, 8889, 8907, 9000, 9001, 9002, 9004, 9019, 9034, 9042, 9079, 9080, 9086, 9090, 9091, 9095, 9104, 9111, 9119, 9142, 9144, 9159, 9160, 9200, 9243, 9283, 9295, 9306, 9333, 9351, 9383, 9389, 9398, 9433, 9456, 9501, 9532, 9595, 9600, 9633, 9743, 9761, 9800, 9802, 9811, 9869, 9876, 9898, 9918, 9943, 9950, 9981, 9999
Tags: honeypot
CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1
ts_added
2024-04-28 03:43:08.215000
ts_last_update
2026-02-10 03:43:10.740000

Warden event timeline

DShield event timeline