IP address

Shodan(more info)

Passive DNS

Tags: Scanner

IP blacklists

Warden events (10)

2025-12-11: ReconScanning (node.9c1411): 6
2025-12-09: ReconScanning (node.9c1411): 4

Origin AS: AS14061 - DIGITALOCEAN-ASN
BGP Prefix: 138.68.160.0/20
geo: United Kingdom, Slough; 🕑 Europe/London
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 138.68.0.0 - 138.68.255.255
last_activity: 2025-12-11 02:57:17
last_warden_event: 2025-12-11 02:57:17
rep: 0.04598214285714285
reserved_range: 0
Shodan's InternetDB: Open ports: 25, 80, 104, 110, 143, 443, 587, 623, 631, 993, 1024, 1099, 1111, 1153, 1177, 1188, 1200, 1234, 1311, 1337, 1343, 1370, 1400, 1444, 1515, 1599, 1604, 1660, 1800, 1801, 1883, 1901, 1911, 1925, 1935, 1952, 1958, 1962, 1990, 2000, 2002, 2003, 2020, 2022, 2048, 2061, 2062, 2064, 2072, 2081, 2082, 2083, 2085, 2086, 2087, 2121, 2154, 2156, 2181, 2222, 2332, 2345, 2363, 2404, 2455, 2480, 2550, 2555, 2559, 2598, 2709, 2761, 3000, 3001, 3017, 3030, 3051, 3053, 3061, 3069, 3092, 3098, 3100, 3102, 3107, 3109, 3112, 3114, 3145, 3173, 3176, 3185, 3268, 3269, 3310, 3342, 3460, 3510, 3521, 3524, 3560, 3563, 3689, 3780, 3792, 3952, 4000, 4040, 4063, 4064, 4101, 4157, 4242, 4369, 4401, 4436, 4443, 4500, 4531, 4550, 4664, 4700, 4747, 4786, 4848, 4911, 4949, 4993, 5001, 5005, 5006, 5009, 5010, 5025, 5172, 5222, 5223, 5232, 5236, 5240, 5249, 5255, 5256, 5257, 5268, 5357, 5590, 5592, 5595, 5607, 5660, 5698, 5721, 5800, 5858, 5900, 5909, 5916, 5984, 5997, 5998, 6011, 6262, 6363, 6432, 6443, 6464, 6503, 6511, 6550, 6581, 6664, 6667, 6668, 6748, 6775, 7001, 7016, 7018, 7025, 7050, 7071, 7086, 7171, 7218, 7415, 7433, 7535, 7775, 7776, 7779, 7989, 8000, 8001, 8002, 8004, 8008, 8010, 8048, 8055, 8067, 8069, 8080, 8086, 8090, 8099, 8112, 8113, 8117, 8123, 8126, 8139, 8140, 8161, 8180, 8189, 8191, 8196, 8200, 8315, 8393, 8414, 8428, 8440, 8443, 8450, 8465, 8504, 8526, 8545, 8549, 8553, 8566, 8574, 8575, 8586, 8593, 8602, 8643, 8701, 8728, 8788, 8800, 8802, 8812, 8819, 8823, 8825, 8837, 8853, 8859, 8863, 8866, 8880, 8886, 8905, 8908, 8911, 8989, 9000, 9002, 9009, 9023, 9041, 9042, 9048, 9059, 9069, 9071, 9080, 9081, 9091, 9100, 9112, 9143, 9150, 9151, 9163, 9166, 9174, 9177, 9180, 9197, 9200, 9207, 9246, 9248, 9291, 9295, 9301, 9307, 9315, 9387, 9398, 9418, 9454, 9455, 9456, 9488, 9600, 9734, 9804, 9869, 9966, 9988, 9998, 9999, 10001, 10004, 10011, 10018, 10045, 10123, 10134, 10210, 10225, 10243, 10324, 10380, 10444, 10554, 10894, 10909, 11300, 11434, 11701, 12001, 12082, 12103, 12112, 12120, 12139, 12155, 12172, 12188, 12192, 12196, 12212, 12231, 12248, 12278, 12282, 12291, 12295, 12322, 12327, 12330, 12341, 12345, 12360, 12361, 12395, 12396, 12436, 12438, 12453, 12470, 12479, 12480, 12487, 12505, 12508, 12514, 12523, 12542, 12550, 12552, 12566, 13579, 14344, 14523, 14903, 15084, 15555, 15831, 16014, 16018, 16019, 16020, 16028, 16064, 16084, 16086, 16092, 16099, 16404, 16992, 16993, 17000, 18003, 18022, 18034, 18042, 18071, 18075, 18076, 18086, 18245, 18802, 18888, 19000, 19014, 19071, 20000, 20018, 20084, 20110, 20185, 20547, 20800, 21025, 21236, 21268, 21271, 21272, 21283, 21299, 21314, 21317, 21321, 21324, 21329, 21379, 22084, 22403, 22556, 22703, 25001, 25005, 25084, 28017, 30004, 30027, 30050, 30122, 31444, 33060, 36984, 37215, 39001, 40892, 42901, 43008, 44300, 44333, 44399, 44520, 44818, 45002, 45677, 45786, 45888, 48889, 49153, 49502, 49767, 50000, 50006, 50009, 50070, 50101, 50580, 51106, 51200, 51201, 51235, 52869, 53400, 53484, 53806, 54138, 55443, 55481, 55553, 55554, 60010, 60021, 60030, 60129, 61613, 61616, 62078, 63256, 63260, 65004; Tags: self-signed, cloud, honeypot; CPEs: cpe:/a:exim:exim:4.97, cpe:/a:mysql:mysql, cpe:/a:apache:http_server, cpe:/o:canonical:ubuntu_linux, cpe:/a:apache:http_server:2.2.22, cpe:/a:php:php, cpe:/a:wordpress:wordpress:2.8
ts_added: 2025-12-09 06:16:45.780000
ts_last_update: 2025-12-19 06:16:50.022000

Warden event timeline

DShield event timeline

Presence on blacklists