IP address
Shodan(more info)

Passive DNS

- Warden events (26)
- 2026-07-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-27
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-17
-
- ReconScanning (node.86eb21): 1
- 2026-06-15
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 2
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-09
-
- ReconScanning (node.86eb21): 1
- 2026-05-04
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-25
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-23
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 2
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- 2026-04-16
-
- ReconScanning (node.86eb21): 1
- 2026-04-11
-
- ReconScanning (node.86eb21): 1
- 2026-04-10
-
- ReconScanning (node.86eb21): 2
- DShield reports (IP summary, reports)
- 2026-04-23
- Number of reports: 24
- Distinct targets: 3
- 2026-05-21
- Number of reports: 24
- Distinct targets: 3
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | src | scan |
- Origin AS
- AS210579 - RACKHOST-AS
- BGP Prefix
- 91.214.112.0/24
- geo
- Hungary
- 🕑 Europe/Budapest
- hostname
- h112-82.rackhostvps.com
- hostname_class
- ['ip_in_hostname']
- Address block ('inetnum' or 'NetRange' in whois database)
- 91.214.112.0 - 91.214.112.255
- last_activity
- 2026-07-03 02:54:14
- last_warden_event
- 2026-07-03 02:54:14
- rep
- 0.0035492330533214433
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 17, 19, 21, 22, 25, 26, 37, 49, 79, 80, 84, 90, 102, 104, 119, 121, 131, 135, 192, 221, 314, 347, 444, 445, 447, 453, 487, 503, 513, 541, 548, 554, 587, 593, 666, 782, 832, 833, 853, 873, 886, 992, 995, 998, 1024, 1099, 1110, 1200, 1234, 1249, 1290, 1293, 1364, 1414, 1433, 1515, 1521, 1604, 1741, 1801, 1883, 1935, 1965, 1975, 1977, 2000, 2006, 2008, 2016, 2066, 2087, 2109, 2121, 2210, 2222, 2271, 2345, 2404, 2433, 2455, 2506, 2563, 2761, 3001, 3004, 3008, 3020, 3069, 3070, 3076, 3123, 3142, 3148, 3175, 3176, 3177, 3197, 3200, 3260, 3299, 3301, 3542, 3551, 3553, 3560, 3780, 3841, 3908, 4000, 4022, 4040, 4190, 4282, 4444, 4530, 4567, 4664, 4848, 4899, 4976, 5000, 5010, 5025, 5222, 5229, 5247, 5269, 5357, 5432, 5503, 5560, 5597, 5601, 5671, 5672, 5721, 5801, 5853, 5900, 5903, 5914, 5920, 5986, 5987, 6080, 6134, 6264, 6405, 6505, 6556, 6664, 6666, 6667, 6668, 6779, 6887, 7000, 7001, 7079, 7084, 7373, 7443, 7474, 7634, 7654, 7657, 7777, 7979, 8010, 8060, 8064, 8081, 8083, 8085, 8086, 8087, 8090, 8098, 8114, 8115, 8156, 8165, 8168, 8181, 8185, 8188, 8284, 8285, 8291, 8333, 8334, 8381, 8419, 8443, 8545, 8550, 8571, 8596, 8630, 8649, 8704, 8765, 8808, 8814, 8838, 8847, 8865, 8889, 8910, 8980, 8999, 9006, 9009, 9013, 9014, 9042, 9048, 9050, 9061, 9078, 9080, 9083, 9089, 9091, 9102, 9104, 9127, 9137, 9151, 9172, 9180, 9191, 9196, 9214, 9247, 9333, 9383, 9398, 9447, 9633, 9658, 9663, 9761, 9869, 9899, 9923, 9944, 9981
- Tags: honeypot
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1
- ts_added
- 2025-10-08 05:47:57.990000
- ts_last_update
- 2026-07-08 05:48:00.471000
Warden event timeline
DShield event timeline

