IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (14)
- 2026-09-24
-
- ReconScanning (node.f90c6b): 1
- 2026-09-20
-
- ReconScanning (node.f90c6b): 2
- 2026-09-15
-
- ReconScanning (node.86eb21): 1
- 2026-08-22
-
- ReconScanning (node.86eb21): 1
- 2026-08-21
-
- ReconScanning (node.86eb21): 1
- 2026-08-07
-
- ReconScanning (node.86eb21): 1
- 2026-08-04
-
- ReconScanning (node.86eb21): 1
- 2026-08-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-29
-
- ReconScanning (node.86eb21): 1
- 2026-07-20
-
- ReconScanning (node.86eb21): 1
- 2026-07-19
-
- ReconScanning (node.86eb21): 1
- 2026-07-16
-
- ReconScanning (node.86eb21): 1
- 2026-07-15
-
- ReconScanning (node.86eb21): 1
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| No threat category tags assigned | |||
- Origin AS
- AS24757 - EthioNet-AS
- BGP Prefix
- 196.188.127.0/24
- geo
- Ethiopia, Addis Ababa
- 🕑 Africa/Addis_Ababa
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 196.188.0.0 - 196.191.255.255
- last_activity
- 2026-09-24 01:39:54
- last_warden_event
- 2026-09-24 01:39:54
- rep
- 0.0
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 13, 15, 17, 19, 22, 37, 38, 49, 70, 80, 82, 83, 84, 88, 90, 95, 100, 101, 102, 110, 111, 113, 119, 122, 180, 221, 311, 340, 443, 444, 448, 449, 451, 465, 503, 515, 522, 548, 554, 587, 602, 675, 685, 689, 771, 800, 808, 831, 880, 888, 987, 992, 995, 1013, 1025, 1099, 1111, 1119, 1195, 1200, 1224, 1249, 1250, 1311, 1337, 1365, 1414, 1452, 1457, 1458, 1521, 1588, 1599, 1604, 1720, 1741, 1801, 1833, 1883, 1911, 1925, 1950, 1957, 1959, 1962, 1964, 1965, 1969, 1975, 1978, 1984, 2001, 2031, 2054, 2055, 2067, 2069, 2081, 2082, 2083, 2130, 2140, 2154, 2156, 2181, 2200, 2211, 2225, 2233, 2248, 2266, 2345, 2375, 2455, 2480, 2548, 2555, 2563, 2628, 2761, 2806, 3004, 3006, 3016, 3051, 3058, 3059, 3068, 3082, 3095, 3104, 3109, 3118, 3119, 3126, 3131, 3136, 3142, 3144, 3147, 3148, 3154, 3161, 3163, 3170, 3176, 3189, 3191, 3195, 3268, 3299, 3301, 3306, 3310, 3333, 3342, 3388, 3410, 3503, 3523, 3531, 3541, 3542, 3549, 3551, 3552, 3555, 3557, 3567, 3689, 3780, 3790, 3794, 3910, 3950, 3953, 4021, 4022, 4040, 4042, 4063, 4064, 4117, 4242, 4321, 4344, 4369, 4401, 4402, 4434, 4435, 4440, 4488, 4506, 4567, 4572, 4786, 4899, 4911, 4949, 5001, 5004, 5006, 5009, 5010, 5061, 5089, 5105, 5123, 5135, 5137, 5223, 5226, 5229, 5235, 5244, 5248, 5249, 5252, 5254, 5259, 5264, 5265, 5269, 5432, 5435, 5439, 5440, 5444, 5446, 5543, 5552, 5560, 5569, 5601, 5605, 5606, 5639, 5650, 5660, 5672, 5673, 5678, 5721, 5801, 5858, 5901, 5917, 5919, 5986, 5999, 6001, 6006, 6050, 6060, 6080, 6134, 6432, 6443, 6505, 6550, 6602, 6633, 6653, 6664, 6666, 6667, 6668, 6688, 6697, 6779, 6799, 7000, 7001, 7013, 7020, 7064, 7071, 7082, 7083, 7100, 7171, 7325, 7403, 7443, 7465, 7474, 7480, 7493, 7547, 7657, 7771, 7777, 7979, 8001, 8009, 8018, 8030, 8032, 8037, 8065, 8069, 8076, 8078, 8084, 8089, 8097, 8099, 8102, 8108, 8110, 8112, 8114, 8116, 8117, 8118, 8124, 8125, 8126, 8139, 8141, 8143, 8151, 8158, 8161, 8188, 8196, 8198, 8200, 8230, 8238, 8250, 8251, 8291, 8318, 8319, 8322, 8334, 8340, 8381, 8401, 8406, 8407, 8417, 8418, 8429, 8443, 8455, 8458, 8473, 8484, 8514, 8545, 8549, 8554, 8565, 8570, 8571, 8575, 8579, 8586, 8637, 8649, 8703, 8782, 8790, 8802, 8807, 8821, 8840, 8842, 8848, 8861, 8867, 8870, 8877, 8882, 8885, 8888, 8899, 8911, 8943, 8980, 8999, 9000, 9004, 9009, 9011, 9024, 9033, 9035, 9039, 9041, 9043, 9047, 9050, 9057, 9061, 9066, 9067, 9072, 9085, 9088, 9091, 9092, 9100, 9142, 9144, 9150, 9151, 9153, 9175, 9178, 9179, 9186, 9188, 9191, 9193, 9243, 9280, 9295, 9303, 9305, 9307, 9313, 9315, 9333, 9353, 9387, 9454, 9458, 9527, 9595, 9600, 9696, 9734, 9743, 9761, 9800, 9876, 9888, 9898, 9923, 9944, 9950, 9981, 9999
- Tags: honeypot
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1
- ts_added
- 2026-03-25 02:04:53.248000
- ts_last_update
- 2026-10-08 02:05:00.285000
Warden event timeline
DShield event timeline
Presence on blacklists

