IP address


.094204.13.153.147
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
38 src scan

Warden events (7)
2026-04-08
ReconScanning (node.f90c6b): 1
2026-04-03
ReconScanning (node.f90c6b): 3
ReconScanning (node.86eb21): 1
2026-03-25
ReconScanning (node.86eb21): 1
2026-03-18
ReconScanning (node.f90c6b): 1
DShield reports (IP summary, reports)
2026-02-26
Number of reports: 80
Distinct targets: 14
2026-03-04
Number of reports: 40
Distinct targets: 9
2026-03-05
Number of reports: 40
Distinct targets: 9
2026-03-11
Number of reports: 90
Distinct targets: 14
2026-03-17
Number of reports: 50
Distinct targets: 12
2026-03-25
Number of reports: 68
Distinct targets: 15
2026-03-26
Number of reports: 68
Distinct targets: 15
2026-04-02
Number of reports: 52
Distinct targets: 9
Origin AS
AS35916 - MULTA-ASN1
BGP Prefix
204.13.152.0/22
geo
United States
🕑 America/Chicago
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
204.13.152.0 - 204.13.155.255
last_activity
2026-04-08 02:23:50
last_warden_event
2026-04-08 02:23:50
rep
0.09360119047619048
reserved_range
0
Shodan's InternetDB
Open ports: 11, 13, 19, 20, 21, 22, 26, 37, 43, 49, 70, 80, 82, 95, 98, 110, 111, 119, 122, 143, 175, 195, 199, 221, 222, 264, 347, 385, 427, 443, 444, 446, 465, 502, 503, 515, 541, 548, 554, 593, 636, 666, 771, 873, 992, 993, 1024, 1063, 1080, 1099, 1153, 1167, 1177, 1188, 1200, 1234, 1293, 1311, 1337, 1343, 1364, 1377, 1388, 1400, 1414, 1443, 1447, 1455, 1458, 1471, 1515, 1521, 1554, 1588, 1599, 1604, 1660, 1741, 1801, 1833, 1883, 1911, 1926, 1935, 1950, 1951, 1956, 1966, 1975, 1978, 2008, 2031, 2062, 2063, 2067, 2078, 2081, 2083, 2087, 2090, 2103, 2121, 2134, 2154, 2196, 2200, 2222, 2224, 2225, 2226, 2259, 2353, 2375, 2382, 2404, 2480, 2550, 2554, 2560, 2562, 2563, 2628, 2762, 3000, 3001, 3010, 3011, 3013, 3017, 3019, 3042, 3050, 3053, 3062, 3079, 3084, 3085, 3086, 3128, 3154, 3163, 3164, 3171, 3180, 3189, 3197, 3200, 3260, 3268, 3270, 3299, 3306, 3389, 3390, 3401, 3410, 3460, 3541, 3542, 3549, 3552, 3590, 3749, 3780, 3838, 3953, 3954, 4000, 4022, 4023, 4040, 4063, 4064, 4150, 4242, 4243, 4282, 4321, 4343, 4369, 4439, 4440, 4443, 4444, 4528, 4543, 4550, 4567, 4620, 4664, 4782, 4786, 4840, 4911, 4949, 4993, 5001, 5006, 5007, 5009, 5010, 5025, 5089, 5140, 5150, 5160, 5180, 5201, 5222, 5238, 5241, 5242, 5250, 5253, 5261, 5268, 5272, 5278, 5400, 5432, 5435, 5523, 5543, 5555, 5590, 5592, 5599, 5601, 5608, 5620, 5630, 5672, 5701, 5721, 5800, 5858, 5906, 5920, 5938, 5984, 5985, 5986, 5992, 6001, 6004, 6006, 6007, 6010, 6061, 6080, 6081, 6134, 6308, 6379, 6550, 6588, 6590, 6600, 6633, 6653, 6664, 6666, 6667, 6668, 6697, 6699, 7001, 7013, 7015, 7071, 7079, 7080, 7081, 7085, 7087, 7100, 7302, 7373, 7415, 7444, 7445, 7465, 7474, 7634, 7777, 7900, 8001, 8008, 8009, 8010, 8014, 8018, 8022, 8029, 8034, 8036, 8043, 8055, 8056, 8060, 8062, 8069, 8083, 8085, 8086, 8087, 8089, 8090, 8092, 8098, 8105, 8110, 8119, 8123, 8126, 8129, 8139, 8140, 8156, 8160, 8163, 8164, 8175, 8179, 8188, 8194, 8200, 8236, 8241, 8243, 8248, 8282, 8283, 8291, 8322, 8333, 8381, 8393, 8411, 8415, 8424, 8427, 8436, 8447, 8450, 8510, 8528, 8540, 8543, 8545, 8554, 8558, 8560, 8568, 8571, 8573, 8575, 8590, 8623, 8649, 8680, 8704, 8767, 8800, 8802, 8806, 8808, 8811, 8813, 8828, 8830, 8833, 8834, 8842, 8851, 8856, 8866, 8880, 8883, 8901, 8913, 8988, 9000, 9009, 9030, 9035, 9042, 9044, 9045, 9048, 9051, 9052, 9079, 9080, 9084, 9091, 9092, 9095, 9100, 9101, 9102, 9103, 9106, 9125, 9131, 9157, 9161, 9182, 9186, 9188, 9189, 9200, 9201, 9202, 9216, 9218, 9248, 9273, 9295, 9303, 9306, 9310, 9315, 9333, 9410, 9418, 9441, 9443, 9530, 9600, 9658, 9674, 9682, 9803, 9804, 9869, 9876, 9900, 9916, 9918, 9939, 9943, 9944, 9988, 9992, 9998, 9999
Tags: honeypot
CPEs: cpe:/a:openbsd:openssh:9.6p1, cpe:/o:canonical:ubuntu_linux
ts_added
2026-02-27 05:01:28.132000
ts_last_update
2026-04-08 02:28:07.204000

Warden event timeline

DShield event timeline