IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (1430)
- 2026-11-04
-
- ReconScanning (node.9c1411): 25
- AttemptLogin (node.ce2b59): 5
- AttemptLogin (node.d2ecc6): 1
- 2026-11-03
-
- ReconScanning (node.9c1411): 66
- AttemptLogin (node.ce2b59): 7
- AttemptLogin (node.70e749): 1
- AttemptLogin (node.d2ecc6): 1
- AttemptLogin (node.b17ef8): 1
- 2026-11-02
-
- AttemptLogin (node.ce2b59): 7
- AttemptLogin (node.b17ef8): 2
- ReconScanning (node.9c1411): 24
- AttemptLogin (node.70e749): 1
- 2026-11-01
-
- AttemptLogin (node.70e749): 3
- AttemptLogin (node.ce2b59): 6
- AttemptLogin (node.d2ecc6): 1
- 2026-10-31
-
- AttemptLogin (node.b17ef8): 1
- AttemptLogin (node.ce2b59): 8
- AttemptLogin (node.70e749): 2
- AttemptLogin (node.d2ecc6): 2
- 2026-10-30
-
- AttemptLogin (node.ce2b59): 7
- AttemptLogin (node.b17ef8): 2
- AttemptLogin (node.70e749): 2
- 2026-10-29
-
- AttemptLogin (node.b17ef8): 1
- AttemptLogin (node.ce2b59): 8
- AttemptLogin (node.d2ecc6): 1
- AttemptLogin (node.70e749): 1
- 2026-10-28
-
- AttemptLogin (node.70e749): 2
- AttemptLogin (node.ce2b59): 11
- AttemptLogin (node.b17ef8): 3
- AttemptLogin (node.d2ecc6): 1
- 2026-10-27
-
- AttemptLogin (node.ce2b59): 6
- AttemptLogin (node.70e749): 1
- AttemptLogin (node.d2ecc6): 2
- 2026-10-26
-
- AttemptLogin (node.b17ef8): 2
- AttemptLogin (node.d2ecc6): 2
- AttemptLogin (node.ce2b59): 9
- AttemptLogin (node.70e749): 1
- 2026-10-25
-
- AttemptLogin (node.ce2b59): 4
- AttemptLogin (node.b17ef8): 1
- 2026-09-13
-
- ReconScanning (node.ce2b59): 1
- 2026-08-21
-
- ReconScanning (node.9c1411): 1
- 2026-08-20
-
- AnomalyTraffic (node.6a1878): 36
- ReconScanning (node.ce2b59): 2
- ReconScanning (node.368407): 3
- ReconScanning (node.4dc198): 7
- ReconScanning (node.9c1411): 3
- 2026-08-19
-
- AnomalyTraffic (node.6a1878): 34
- ReconScanning (node.ce2b59): 1
- ReconScanning (node.4dc198): 66
- 2026-08-18
-
- AnomalyTraffic (node.6a1878): 33
- ReconScanning (node.ce2b59): 2
- ReconScanning (node.4dc198): 30
- 2026-08-16
-
- ReconScanning (node.9c1411): 2
- 2026-08-15
-
- ReconScanning (node.9c1411): 10
- 2026-08-14
-
- ReconScanning (node.9c1411): 9
- ReconScanning (node.ce2b59): 6
- AnomalyTraffic (node.6a1878): 28
- ReconScanning (node.4dc198): 47
- ReconScanning (node.368407): 11
- 2026-08-13
-
- ReconScanning (node.ce2b59): 7
- AnomalyTraffic (node.6a1878): 20
- ReconScanning (node.4dc198): 23
- ReconScanning (node.368407): 1
- 2026-08-12
-
- AnomalyTraffic (node.6a1878): 54
- ReconScanning (node.4dc198): 52
- ReconScanning (node.368407): 15
- ReconScanning (node.ce2b59): 2
- 2026-08-11
-
- AnomalyTraffic (node.6a1878): 53
- ReconScanning (node.4dc198): 66
- ReconScanning (node.368407): 1
- ReconScanning (node.ce2b59): 2
- 2026-08-10
-
- AnomalyTraffic (node.6a1878): 54
- ReconScanning (node.ce2b59): 2
- ReconScanning (node.4dc198): 75
- ReconScanning (node.368407): 4
- ReconScanning (node.9c1411): 1
- 2026-08-09
-
- AnomalyTraffic (node.6a1878): 47
- ReconScanning (node.ce2b59): 1
- ReconScanning (node.4dc198): 51
- ReconScanning (node.368407): 20
- 2026-08-08
-
- AnomalyTraffic (node.6a1878): 48
- ReconScanning (node.ce2b59): 1
- ReconScanning (node.368407): 23
- ReconScanning (node.4dc198): 74
- 2026-08-07
-
- AnomalyTraffic (node.6a1878): 46
- ReconScanning (node.ce2b59): 2
- ReconScanning (node.4dc198): 60
- ReconScanning (node.368407): 13
- 2026-08-06
-
- AnomalyTraffic (node.6a1878): 37
- ReconScanning (node.ce2b59): 1
- ReconScanning (node.4dc198): 11
- DShield reports (IP summary, reports)
- 2026-08-06
- Number of reports: 188
- Distinct targets: 104
- 2026-08-07
- Number of reports: 188
- Distinct targets: 104
- 2026-08-08
- Number of reports: 406
- Distinct targets: 205
- 2026-08-09
- Number of reports: 337
- Distinct targets: 186
- 2026-08-10
- Number of reports: 337
- Distinct targets: 186
- 2026-08-11
- Number of reports: 311
- Distinct targets: 118
- 2026-08-12
- Number of reports: 341
- Distinct targets: 173
- 2026-08-13
- Number of reports: 119
- Distinct targets: 95
- 2026-08-14
- Number of reports: 364
- Distinct targets: 153
- 2026-08-15
- Number of reports: 364
- Distinct targets: 153
- 2026-08-18
- Number of reports: 139
- Distinct targets: 90
- 2026-08-19
- Number of reports: 139
- Distinct targets: 90
- 2026-08-20
- Number of reports: 31
- Distinct targets: 24
- 2026-08-21
- Number of reports: 31
- Distinct targets: 24
- 2026-10-25
- Number of reports: 183
- Distinct targets: 83
- 2026-10-26
- Number of reports: 187
- Distinct targets: 72
- 2026-10-27
- Number of reports: 220
- Distinct targets: 88
- 2026-10-28
- Number of reports: 220
- Distinct targets: 88
- 2026-10-29
- Number of reports: 183
- Distinct targets: 86
- 2026-10-30
- Number of reports: 183
- Distinct targets: 86
- 2026-10-31
- Number of reports: 223
- Distinct targets: 83
- 2026-11-01
- Number of reports: 208
- Distinct targets: 81
- 2026-11-03
- Number of reports: 246
- Distinct targets: 82
- OTX pulses
-
[6a46577bc0123cf52ba59d07] 2026-07-02 12:20:11.874000 | SSH honeypot logs for 2026-07-02
Author name: jnazario Pulse modified: 2026-07-02 12:20:11.874000 Indicator created: 2026-07-02 12:20:13 Indicator role: None Indicator title: Indicator expiration: 2026-08-01 12:00:00 [6a45060c4921b1f1fe71134f] 2026-07-01 12:20:28.528000 | SSH honeypot logs for 2026-07-01Author name: jnazario Pulse modified: 2026-07-01 12:20:28.528000 Indicator created: 2026-07-01 12:20:29 Indicator role: None Indicator title: Indicator expiration: 2026-07-31 12:00:00 [6a43b53fb4298f5b97db0612] 2026-06-30 12:23:27.880000 | SSH honeypot logs for 2026-06-30Author name: jnazario Pulse modified: 2026-06-30 12:23:27.880000 Indicator created: 2026-06-30 12:23:29 Indicator role: None Indicator title: Indicator expiration: 2026-07-30 12:00:00 [6a426443aea256b8e38606f0] 2026-06-29 12:25:38.997000 | SSH honeypot logs for 2026-06-29Author name: jnazario Pulse modified: 2026-06-29 12:25:38.997000 Indicator created: 2026-06-29 12:25:40 Indicator role: None Indicator title: Indicator expiration: 2026-07-29 12:00:00 [6a41119ca3f624b6bdb7f744] 2026-06-28 12:20:44.977000 | SSH honeypot logs for 2026-06-28Author name: jnazario Pulse modified: 2026-06-28 12:20:44.977000 Indicator created: 2026-06-28 12:20:45 Indicator role: None Indicator title: Indicator expiration: 2026-07-28 12:00:00 [6a3fc191e9b20ef398bc3185] 2026-06-27 12:26:57.207000 | SSH honeypot logs for 2026-06-27Author name: jnazario Pulse modified: 2026-06-27 12:26:57.207000 Indicator created: 2026-06-27 12:26:58 Indicator role: None Indicator title: Indicator expiration: 2026-07-27 12:00:00 [6a3e6f51376baaa63922125b] 2026-06-26 12:23:45.952000 | SSH honeypot logs for 2026-06-26Author name: jnazario Pulse modified: 2026-06-26 12:23:45.952000 Indicator created: 2026-06-26 12:23:46 Indicator role: None Indicator title: Indicator expiration: 2026-07-26 12:00:00 [6a3d1dad0aceac3efe9ce023] 2026-06-25 12:23:09.926000 | SSH honeypot logs for 2026-06-25Author name: jnazario Pulse modified: 2026-06-25 12:23:09.926000 Indicator created: 2026-06-25 12:23:10 Indicator role: None Indicator title: Indicator expiration: 2026-07-25 12:00:00 [6a3a7aabef68b1442a45c41b] 2026-06-23 12:23:07.798000 | SSH honeypot logs for 2026-06-23Author name: jnazario Pulse modified: 2026-06-23 12:23:07.798000 Indicator created: 2026-06-23 12:23:08 Indicator role: None Indicator title: Indicator expiration: 2026-07-23 12:00:00 [6a3929399bbebca5301783f3] 2026-06-22 12:23:21.720000 | SSH honeypot logs for 2026-06-22Author name: jnazario Pulse modified: 2026-06-22 12:23:21.720000 Indicator created: 2026-06-22 12:23:22 Indicator role: None Indicator title: Indicator expiration: 2026-07-22 12:00:00 [6a4a4d913e983ca5c8ff4c7e] 2026-07-05 12:26:56.591000 | SSH honeypot logs for 2026-07-05Author name: jnazario Pulse modified: 2026-07-05 12:26:56.591000 Indicator created: 2026-07-05 12:26:58 Indicator role: None Indicator title: Indicator expiration: 2026-08-04 12:00:00 [6a47a97079476c6727e62b89] 2026-07-03 12:22:08.119000 | SSH honeypot logs for 2026-07-03Author name: jnazario Pulse modified: 2026-07-03 12:22:08.119000 Indicator created: 2026-07-03 12:22:09 Indicator role: None Indicator title: Indicator expiration: 2026-08-02 12:00:00
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 74 | src | login | protocol: ssh port: 22, 2222 |
| 53 | src | scan | port: 22 |
| 49 | src | — |
- Origin AS
- AS48090 - PPTECHNOLOGY
- BGP Prefix
- 45.148.10.0/24
- geo
- Netherlands, Amsterdam
- 🕑 Europe/Amsterdam
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 45.148.8.0 - 45.148.11.255
- last_activity
- 2026-11-04 09:38:22
- last_warden_event
- 2026-11-04 09:38:22
- rep
- 0.7799551916923765
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80
- Tags: –
- CPEs: cpe:/a:apache:http_server:2.4.52, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1
- ts_added
- 2025-12-06 02:39:49.298000
- ts_last_update
- 2026-11-04 09:48:46.937000
Warden event timeline
DShield event timeline
Presence on blacklists
OTX pulses

