IP address
Search at other sites: 
.000213.156.157.143
Shodan(more info)
Passive DNS
- Warden events (11)
- 2026-06-27
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-15
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 1
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | src | scan |
- Origin AS
- AS202422 - GHOST
- BGP Prefix
- 213.156.157.0/24
- dshield
- []
- geo
- Mexico, Querétaro City
- 🕑 America/Mexico_City
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 213.156.144.0 - 213.156.159.255
- last_activity
- 2026-06-27 01:51:01
- last_warden_event
- 2026-06-27 01:51:01
- rep
- 0.0001868017396484678
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 17, 22, 37, 49, 70, 80, 82, 84, 102, 110, 111, 122, 135, 143, 175, 179, 195, 221, 264, 311, 444, 445, 491, 513, 548, 772, 789, 873, 943, 992, 995, 1024, 1026, 1153, 1355, 1433, 1500, 1515, 1801, 1883, 1911, 1935, 1965, 1969, 2008, 2078, 2083, 2087, 2109, 2154, 2222, 2224, 2259, 2353, 2404, 2551, 2612, 2626, 2762, 2806, 3000, 3001, 3009, 3051, 3052, 3068, 3074, 3086, 3100, 3102, 3113, 3118, 3128, 3167, 3211, 3268, 3301, 3306, 3307, 3310, 3349, 3389, 3410, 3460, 3500, 3690, 3749, 3910, 4064, 4150, 4200, 4242, 4321, 4402, 4434, 4443, 4444, 4477, 4506, 4933, 4949, 5000, 5001, 5005, 5009, 5010, 5025, 5093, 5120, 5130, 5180, 5242, 5247, 5258, 5259, 5271, 5321, 5567, 5594, 5601, 5701, 5901, 5914, 5984, 5985, 5994, 6379, 6544, 6581, 6650, 6666, 6667, 7001, 7003, 7080, 7173, 7338, 7434, 7654, 8000, 8009, 8028, 8034, 8052, 8060, 8063, 8067, 8069, 8081, 8082, 8083, 8087, 8098, 8114, 8126, 8140, 8172, 8184, 8222, 8252, 8317, 8334, 8381, 8393, 8406, 8408, 8418, 8426, 8429, 8448, 8456, 8480, 8493, 8515, 8533, 8575, 8602, 8800, 8813, 8821, 8828, 8830, 8834, 8835, 8841, 8866, 8868, 8878, 8883, 8891, 8916, 8991, 8993, 9000, 9009, 9026, 9027, 9051, 9054, 9063, 9075, 9078, 9086, 9092, 9100, 9124, 9145, 9151, 9157, 9166, 9170, 9179, 9191, 9200, 9201, 9214, 9244, 9245, 9246, 9247, 9295, 9333, 9443, 9458, 9600, 9748, 9800, 9876, 9885, 9898, 9902, 9923, 9943, 9944, 9981
- Tags: honeypot
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1
- ts_added
- 2024-03-11 03:31:27.945000
- ts_last_update
- 2026-07-10 03:31:30.299000
Warden event timeline
DShield event timeline