IP address
Shodan(more info)

Passive DNS

- Warden events (1351)
- 2025-04-25
-
- ReconScanning (node.86eb21): 42
- 2025-04-24
-
- ReconScanning (node.86eb21): 144
- 2025-04-23
-
- ReconScanning (node.86eb21): 141
- 2025-04-22
-
- ReconScanning (node.86eb21): 126
- 2025-04-12
-
- ReconScanning (node.86eb21): 18
- 2025-04-11
-
- ReconScanning (node.86eb21): 142
- 2025-04-10
-
- ReconScanning (node.86eb21): 143
- 2025-04-09
-
- ReconScanning (node.86eb21): 141
- 2025-04-08
-
- ReconScanning (node.86eb21): 6
- 2025-04-05
-
- ReconScanning (node.86eb21): 40
- 2025-04-04
-
- ReconScanning (node.86eb21): 141
- 2025-04-03
-
- ReconScanning (node.86eb21): 141
- 2025-04-02
-
- ReconScanning (node.86eb21): 126
- Origin AS
- AS63949 - LINODE-AP
- BGP Prefix
- 172.104.224.0/19
- geo
- Germany, Frankfurt am Main
- 🕑 Europe/Berlin
- hostname
- scanner138.elsa.ccn-cert.net
- Address block ('inetnum' or 'NetRange' in whois database)
- 172.104.0.0 - 172.105.255.255
- last_activity
- 2025-04-25 06:53:12
- last_warden_event
- 2025-04-25 06:53:12
- rep
- 0.18095238095238095
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22
- Tags: cloud
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1
- ts_added
- 2025-04-02 02:48:45.947000
- ts_last_update
- 2025-04-28 02:48:50.180000
Warden event timeline
DShield event timeline