IP address

Threat categories

TL	Role	Category	Details
50	src	scan	port: 21, 22, 23, 3389, 5432

---

Warden events (141)

2026-11-04

ReconScanning (node.ce2b59): 60

ReconScanning (node.9c1411): 45

ReconScanning (node.4dc198): 8

2026-11-03

ReconScanning (node.ce2b59): 18

ReconScanning (node.9c1411): 10

Origin AS

AS400940 - RAILWAY

BGP Prefix

208.77.244.0/23

geo

Netherlands, Amsterdam

🕑 Europe/Amsterdam

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

208.77.244.0 - 208.77.247.255

last_activity

2026-11-04 22:13:31

last_warden_event

2026-11-04 22:13:31

rep

0.0880129793935982

reserved_range

0

Shodan's InternetDB

Open ports: 22, 443, 2222, 8000, 8001, 9998, 9999, 10000, 10001, 10009, 10023, 10025, 10026, 10030, 10038, 10045, 10047, 10066, 10080, 10081, 10100, 10134, 10181, 10243, 10250, 10283, 10348, 10390, 10443, 10482, 10554, 10909, 10911, 11007, 11147, 11210, 11211, 11288, 11300, 11371, 11434, 11602, 12000, 12001, 12106, 12108, 12122, 12125, 12127, 12129, 12133, 12135, 12137, 12145, 12156, 12158, 12159, 12178, 12184, 12186, 12187, 12196, 12206, 12207, 12210, 12212, 12215, 12222, 12224, 12225, 12226, 12235, 12236, 12239, 12252, 12268, 12274, 12278, 12279, 12282, 12290, 12291, 12296, 12297, 12303, 12306, 12311, 12314, 12320, 12325, 12327, 12334, 12336, 12342, 12345, 12359, 12360, 12361, 12363, 12382, 12384, 12387, 12408, 12410, 12431, 12443, 12444, 12456, 12460, 12463, 12472, 12475, 12481, 12482, 12498, 12501, 12502, 12511, 12516, 12521, 12526, 12538, 12541, 12545, 12546, 12555, 12559, 12561, 12567, 12570, 12571, 12575, 12576, 12577, 12580, 12586, 12902, 13333, 13508, 13579, 14024, 14082, 14084, 14147, 14182, 14265, 14314, 14344, 14407, 14875, 14900, 14903, 14909, 15000, 15001, 15002, 15006, 15042, 15044, 15084, 15319, 16001, 16007, 16010, 16016, 16018, 16022, 16027, 16029, 16030, 16034, 16044, 16046, 16054, 16055, 16057, 16059, 16068, 16072, 16076, 16081, 16084, 16085, 16086, 16087, 16089, 16443, 16667, 16831, 16992, 16993, 17100, 17102, 17118, 17443, 17778, 17780, 17976, 18001, 18007, 18016, 18021, 18035, 18051, 18054, 18072, 18074, 18076, 18081, 18092, 18094, 18095, 18096, 18110, 18112, 18789, 19000, 19015, 19017, 19071, 20000, 20020, 20151, 20256, 20547, 20880, 20892, 21025, 21082, 21084, 21116, 21200, 21246, 21247, 21254, 21257, 21262, 21263, 21264, 21268, 21270, 21285, 21306, 21309, 21310, 21313, 21321, 21322, 21327, 21379, 22103, 22345, 22364, 22556, 22705, 22741, 22988, 23128, 24084, 24106, 24181, 25004, 25006, 25009, 25105, 25565, 27015, 27305, 28001, 28015, 28017, 28577, 29648, 29719, 29798, 30005, 30015, 30027, 30579, 30701, 31017, 31278, 31337, 31913, 32001, 32202, 32443, 32764, 32868, 33060, 33180, 33344, 34225, 35000, 35002, 35241, 35559, 36468, 37080, 37215, 37369, 37777, 37894, 38080, 38588, 39803, 39991, 40000, 40099, 40260, 41800, 42208, 42235, 42901, 43200, 43435, 43662, 44158, 44302, 44310, 44345, 44818, 45003, 45062, 45166, 45619, 45668, 45821, 45888, 46000, 46261, 46994, 47534, 47984, 48000, 48020, 48100, 48647, 48824, 48888, 48910, 49152, 49443, 49502, 49690, 49694, 50000, 50002, 50010, 50011, 50014, 50050, 50070, 50080, 50085, 50113, 50160, 50202, 50500, 50907, 50997, 50999, 51001, 51002, 51106, 51294, 51880, 52053, 52200, 52230, 52299, 52311, 52957, 53188, 53400, 53490, 53577, 53658, 53884, 53897, 54138, 54865, 55000, 55038, 55442, 55550, 57782, 57786, 58532, 58535, 58550, 58694, 58749, 59012, 59286, 59514

Tags: –

CPEs: cpe:/o:linux:linux_kernel, cpe:/a:openbsd:openssh:9.2p1, cpe:/o:debian:debian_linux

ts_added

2026-11-03 17:31:44.498000

ts_last_update

2026-11-09 17:31:50.177000

Warden event timeline

DShield event timeline