IP address
Shodan(more info)

Passive DNS

- Warden events (27)
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-04
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- 2026-04-16
-
- ReconScanning (node.86eb21): 1
- 2026-04-10
-
- ReconScanning (node.86eb21): 1
- 2026-04-08
-
- ReconScanning (node.f90c6b): 1
- 2026-04-05
-
- ReconScanning (node.86eb21): 1
- 2026-04-03
-
- ReconScanning (node.86eb21): 1
- ReconScanning (node.f90c6b): 1
- 2026-03-25
-
- ReconScanning (node.86eb21): 1
- 2026-03-21
-
- ReconScanning (node.86eb21): 2
- 2026-03-16
-
- ReconScanning (node.86eb21): 1
- 2026-03-15
-
- ReconScanning (node.86eb21): 1
- 2026-03-13
-
- ReconScanning (node.86eb21): 1
- 2026-03-11
-
- ReconScanning (node.86eb21): 1
- 2026-03-07
-
- ReconScanning (node.86eb21): 1
- 2026-03-06
-
- ReconScanning (node.86eb21): 1
- 2026-03-03
-
- ReconScanning (node.86eb21): 1
- 2026-02-27
-
- ReconScanning (node.86eb21): 1
- 2026-02-26
-
- ReconScanning (node.86eb21): 1
- 2026-02-24
-
- ReconScanning (node.86eb21): 1
- 2026-02-19
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-02-27
- Number of reports: 72
- Distinct targets: 11
- 2026-03-11
- Number of reports: 64
- Distinct targets: 10
- 2026-03-18
- Number of reports: 76
- Distinct targets: 11
- 2026-03-25
- Number of reports: 54
- Distinct targets: 9
- 2026-03-26
- Number of reports: 54
- Distinct targets: 9
- 2026-04-02
- Number of reports: 76
- Distinct targets: 11
- 2026-04-08
- Number of reports: 14
- Distinct targets: 3
- 2026-04-09
- Number of reports: 52
- Distinct targets: 8
- 2026-04-22
- Number of reports: 72
- Distinct targets: 11
- 2026-05-01
- Number of reports: 110
- Distinct targets: 17
- 2026-05-09
- Number of reports: 64
- Distinct targets: 9
- 2026-05-13
- Number of reports: 20
- Distinct targets: 3
- 2026-05-14
- Number of reports: 101
- Distinct targets: 15
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 41 | src | scan |
- Origin AS
- AS57695 - MISAKA
- BGP Prefix
- 45.11.106.0/24
- fmp
- {'general': 0.2728974223136902}
- geo
- Netherlands, Amsterdam
- 🕑 Europe/Amsterdam
- hostname
- user-45-11-106-205.ams05.nl.misaka.io
- hostname_class
- ['ip_in_hostname']
- Address block ('inetnum' or 'NetRange' in whois database)
- 45.11.104.0 - 45.11.107.255
- last_activity
- 2026-05-15 02:29:46
- last_warden_event
- 2026-05-15 02:29:46
- otx_pulses
- []
- rep
- 0.003233865713469175
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 15, 17, 19, 21, 25, 26, 43, 79, 80, 82, 83, 84, 87, 97, 101, 102, 104, 110, 113, 119, 121, 122, 135, 143, 154, 175, 177, 179, 189, 221, 243, 314, 389, 425, 440, 443, 465, 502, 548, 587, 593, 632, 636, 666, 789, 902, 943, 990, 992, 995, 1063, 1080, 1311, 1337, 1400, 1414, 1452, 1455, 1515, 1521, 1599, 1604, 1723, 1800, 1883, 1926, 1935, 1952, 1962, 1990, 2000, 2051, 2081, 2082, 2086, 2087, 2154, 2181, 2220, 2222, 2233, 2375, 2376, 2453, 2455, 2525, 2628, 2761, 2762, 2995, 3013, 3065, 3069, 3073, 3079, 3093, 3097, 3108, 3111, 3144, 3147, 3150, 3159, 3177, 3193, 3268, 3269, 3301, 3306, 3310, 3333, 3349, 3388, 3389, 3406, 3541, 3542, 3558, 3559, 3561, 3567, 3568, 3689, 3690, 3791, 3792, 3954, 4042, 4063, 4148, 4150, 4157, 4159, 4190, 4200, 4243, 4282, 4321, 4333, 4401, 4433, 4434, 4443, 4444, 4447, 4449, 4457, 4466, 4500, 4506, 4603, 4620, 4734, 4840, 4899, 4949, 5001, 5006, 5053, 5119, 5225, 5231, 5233, 5234, 5249, 5250, 5256, 5259, 5264, 5268, 5269, 5432, 5598, 5600, 5672, 5800, 5801, 5858, 5901, 5904, 5910, 5918, 5984, 5985, 5986, 5990, 5991, 5996, 6000, 6036, 6102, 6308, 6348, 6379, 6432, 6443, 6512, 6633, 6664, 6666, 6668, 6697, 7001, 7003, 7071, 7171, 7283, 7302, 7415, 7434, 7441, 7443, 7474, 7547, 7548, 7634, 7676, 7773, 7776, 7995, 8000, 8006, 8009, 8015, 8022, 8048, 8054, 8057, 8059, 8060, 8061, 8083, 8085, 8087, 8090, 8098, 8112, 8119, 8131, 8139, 8140, 8141, 8165, 8168, 8174, 8177, 8181, 8188, 8200, 8280, 8283, 8315, 8334, 8453, 8473, 8510, 8515, 8565, 8566, 8575, 8581, 8591, 8594, 8598, 8606, 8649, 8707, 8723, 8728, 8800, 8802, 8810, 8811, 8834, 8861, 8869, 8880, 8883, 8887, 8888, 8889, 8969, 8980, 9001, 9002, 9009, 9016, 9023, 9024, 9027, 9042, 9048, 9049, 9051, 9095, 9100, 9102, 9103, 9131, 9132, 9133, 9149, 9150, 9159, 9160, 9170, 9179, 9189, 9199, 9202, 9251, 9306, 9345, 9376, 9398, 9399, 9418, 9446, 9515, 9530, 9532, 9595, 9600, 9696, 9710, 9761, 9779, 9800, 9872, 9876, 9908, 9943, 9944, 9998
- Tags: honeypot
- CPEs: –
- ts_added
- 2023-07-25 05:03:42.955000
- ts_last_update
- 2026-05-16 05:04:17.745000
Warden event timeline
DShield event timeline

