IP address
Shodan(more info)

Passive DNS

- Warden events (18)
- 2026-07-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-27
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-17
-
- ReconScanning (node.86eb21): 1
- 2026-06-15
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 3
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-04-19
- Number of reports: 28
- Distinct targets: 5
- 2026-04-20
- Number of reports: 93
- Distinct targets: 21
- 2026-04-21
- Number of reports: 58
- Distinct targets: 15
- 2026-04-22
- Number of reports: 88
- Distinct targets: 13
- 2026-04-29
- Number of reports: 118
- Distinct targets: 24
- 2026-04-30
- Number of reports: 118
- Distinct targets: 24
- 2026-05-07
- Number of reports: 12
- Distinct targets: 3
- 2026-05-08
- Number of reports: 12
- Distinct targets: 3
- 2026-05-09
- Number of reports: 112
- Distinct targets: 19
- 2026-05-13
- Number of reports: 20
- Distinct targets: 4
- 2026-05-14
- Number of reports: 101
- Distinct targets: 23
- 2026-05-18
- Number of reports: 16
- Distinct targets: 3
- 2026-05-19
- Number of reports: 16
- Distinct targets: 3
- 2026-05-20
- Number of reports: 102
- Distinct targets: 21
- 2026-06-02
- Number of reports: 126
- Distinct targets: 25
- 2026-06-03
- Number of reports: 126
- Distinct targets: 25
- 2026-06-09
- Number of reports: 126
- Distinct targets: 24
- 2026-06-10
- Number of reports: 126
- Distinct targets: 24
- 2026-06-16
- Number of reports: 86
- Distinct targets: 23
- 2026-07-01
- Number of reports: 20
- Distinct targets: 5
- 2026-07-02
- Number of reports: 59
- Distinct targets: 14
- 2026-07-03
- Number of reports: 52
- Distinct targets: 8
- 2026-07-08
- Number of reports: 24
- Distinct targets: 5
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 59 | src | scan |
- Origin AS
- AS199524 - GCORE
- BGP Prefix
- 31.13.213.0/24
- geo
- United States, Atlanta
- 🕑 America/New_York
- hostname
- ben2.example.com
- Address block ('inetnum' or 'NetRange' in whois database)
- 31.13.213.0 - 31.13.213.255
- last_activity
- 2026-07-03 02:01:26
- last_warden_event
- 2026-07-03 02:01:26
- rep
- 0.002535482897015995
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 15, 17, 21, 24, 25, 26, 38, 49, 70, 80, 83, 84, 88, 99, 102, 106, 113, 179, 311, 444, 447, 465, 503, 541, 548, 631, 642, 666, 743, 789, 992, 1012, 1025, 1099, 1153, 1177, 1181, 1224, 1235, 1311, 1471, 1521, 1599, 1723, 1741, 1801, 1883, 1925, 1973, 2049, 2051, 2060, 2067, 2068, 2081, 2100, 2121, 2154, 2201, 2222, 2271, 2320, 2345, 2362, 2375, 2379, 2404, 2423, 2435, 2453, 2455, 2480, 2553, 2556, 2572, 2762, 3001, 3008, 3019, 3050, 3078, 3081, 3108, 3118, 3122, 3192, 3260, 3299, 3310, 3389, 3412, 3523, 3530, 3531, 3590, 3780, 4022, 4080, 4242, 4243, 4321, 4401, 4433, 4447, 4808, 4840, 4899, 5001, 5002, 5006, 5007, 5010, 5025, 5122, 5253, 5269, 5357, 5401, 5435, 5444, 5500, 5568, 5590, 5671, 5672, 5680, 5698, 5800, 5858, 5900, 5901, 5938, 5986, 5990, 6000, 6001, 6005, 6010, 6491, 6505, 6513, 6668, 6697, 6799, 7000, 7001, 7010, 7078, 7171, 7415, 7434, 7441, 7480, 7537, 7657, 8000, 8009, 8011, 8060, 8061, 8062, 8068, 8072, 8077, 8081, 8083, 8085, 8087, 8089, 8097, 8098, 8123, 8139, 8140, 8142, 8177, 8188, 8195, 8200, 8248, 8283, 8284, 8315, 8333, 8385, 8388, 8393, 8440, 8446, 8453, 8456, 8470, 8473, 8525, 8561, 8585, 8605, 8663, 8705, 8724, 8732, 8800, 8803, 8804, 8806, 8823, 8831, 8834, 8865, 8873, 8883, 8891, 8913, 9000, 9002, 9018, 9029, 9037, 9038, 9039, 9042, 9043, 9045, 9051, 9056, 9061, 9075, 9080, 9095, 9100, 9120, 9132, 9136, 9151, 9152, 9160, 9174, 9191, 9223, 9243, 9244, 9292, 9306, 9312, 9387, 9445, 9515, 9600, 9633, 9723, 9761, 9891, 9908, 9932, 9944, 9955, 9999
- Tags: honeypot
- CPEs: –
- ts_added
- 2026-02-25 15:15:50.317000
- ts_last_update
- 2026-07-10 15:16:00.188000
Warden event timeline
DShield event timeline

