IP address

Warden events (1)

2024-09-27

ReconScanning (node.cfb4f7): 1

Origin AS

AS14618 - AMAZON-AES

BGP Prefix

23.22.0.0/15

geo

United States, Ashburn

🕑 America/New_York

hostname

ec2-23-22-148-129.compute-1.amazonaws.com

hostname_class

['ip_in_hostname']

Address block ('inetnum' or 'NetRange' in whois database)

23.20.0.0 - 23.23.255.255

last_activity

2024-09-27 04:27:43

last_warden_event

2024-09-27 04:27:43

rep

0.02857142857142857

reserved_range

0

Shodan's InternetDB

Open ports: 19, 21, 22, 23, 25, 53, 80, 81, 110, 111, 123, 135, 143, 161, 445, 465, 587, 623, 631, 993, 995, 1024, 1027, 1099, 1110, 1153, 1177, 1200, 1234, 1311, 1355, 1400, 1414, 1433, 1471, 1515, 1521, 1588, 1599, 1604, 1660, 1723, 1741, 1800, 1801, 1880, 1883, 1900, 1911, 1925, 1935, 1962, 1981, 2000, 2002, 2008, 2012, 2030, 2067, 2070, 2081, 2082, 2083, 2086, 2087, 2121, 2126, 2154, 2181, 2201, 2211, 2222, 2245, 2259, 2323, 2332, 2345, 2375, 2379, 2404, 2455, 2480, 2556, 2628, 2761, 2762, 2806, 3000, 3001, 3049, 3050, 3051, 3054, 3055, 3066, 3078, 3086, 3096, 3099, 3102, 3107, 3114, 3121, 3128, 3221, 3260, 3268, 3269, 3299, 3301, 3306, 3310, 3333, 3388, 3400, 3403, 3406, 3407, 3408, 3412, 3443, 3460, 3479, 3498, 3523, 3524, 3541, 3542, 3551, 3556, 3557, 3566, 3689, 3690, 3749, 3794, 4000, 4022, 4040, 4043, 4063, 4064, 4100, 4118, 4157, 4242, 4282, 4321, 4369, 4444, 4500, 4506, 4567, 4643, 4646, 4664, 4782, 4786, 4840, 4848, 4899, 4911, 4949, 5005, 5007, 5009, 5010, 5025, 5060, 5080, 5090, 5150, 5172, 5201, 5222, 5269, 5357, 5432, 5435, 5494, 5560, 5567, 5592, 5595, 5601, 5604, 5607, 5672, 5697, 5800, 5801, 5858, 5900, 5901, 5938, 5984, 5985, 6000, 6001, 6002, 6004, 6080, 6264, 6379, 6512, 6550, 6565, 6605, 6633, 6653, 6664, 6666, 6667, 6668, 6697, 6748, 7003, 7010, 7170, 7171, 7218, 7316, 7401, 7415, 7433, 7474, 7500, 7535, 7547, 7557, 7657, 7777, 7779, 7989, 8000, 8001, 8008, 8009, 8010, 8011, 8017, 8019, 8021, 8022, 8032, 8034, 8045, 8047, 8060, 8069, 8080, 8084, 8086, 8087, 8090, 8091, 8098, 8099, 8103, 8106, 8112, 8123, 8126, 8184, 8200, 8237, 8241, 8249, 8282, 8291, 8333, 8334, 8404, 8415, 8422, 8423, 8424, 8429, 8443, 8500, 8545, 8554, 8575, 8621, 8649, 8686, 8728, 8788, 8800, 8809, 8813, 8817, 8818, 8819, 8821, 8822, 8831, 8838, 8843, 8849, 8865, 8888, 8969, 8999, 9000, 9009, 9013, 9025, 9031, 9037, 9042, 9043, 9047, 9050, 9051, 9080, 9084, 9090, 9092, 9100, 9104, 9107, 9108, 9151, 9160, 9189, 9191, 9200, 9217, 9218, 9219, 9295, 9302, 9306, 9307, 9309, 9367, 9389, 9418, 9530, 9550, 9595, 9600, 9633, 9663, 9682, 9761, 9800, 9869, 9876, 9944, 9981, 9993, 9994, 9997, 9998, 9999, 10001, 10134, 10143, 10243, 10554, 11000, 11112, 11210, 11211, 11300, 11371, 12000, 12235, 12345, 13579, 14147, 14265, 14344, 15301, 16010, 16285, 16992, 17000, 18081, 18245, 19000, 19071, 19989, 20000, 20256, 20547, 21025, 21379, 22067, 23023, 23424, 25001, 25105, 25565, 27015, 28000, 28015, 28017, 30002, 30003, 30010, 31401, 32400, 32764, 33060, 35000, 37215, 37777, 39277, 41800, 42398, 43118, 44158, 44818, 49152, 49153, 50000, 50050, 50070, 50100, 50719, 51106, 51235, 52311, 52869, 54138, 54321, 55000, 55442, 55554, 60001, 60010, 60030, 60129, 60567, 61613, 61616, 62078, 62200, 63210

Tags: eol-os, cloud, honeypot, eol-product, vpn, self-signed, database, doublepulsar

CPEs: cpe:/a:mediawiki:mediawiki:1.31.0, cpe:/a:redislabs:redis, cpe:/a:php:php, cpe:/o:canonical:ubuntu_linux, cpe:/a:wordpress:wordpress:2.8, cpe:/a:apache:tomcat, cpe:/a:openbsd:openssh:8.9p1, cpe:/a:f5:nginx, cpe:/a:exim:exim:4.69, cpe:/a:mysql:mysql, cpe:/a:famatech:radmin, cpe:/o:microsoft:windows, cpe:/a:apache:http_server:2.2.22

ts_added

2024-09-27 04:27:56.565000

ts_last_update

2024-09-29 04:28:00.787000

Warden event timeline

DShield event timeline