IP address
Shodan(more info)

Passive DNS

- Warden events (17)
- 2026-09-20
-
- ReconScanning (node.86eb21): 1
- ReconScanning (node.f90c6b): 1
- 2026-09-19
-
- ReconScanning (node.86eb21): 1
- 2026-09-15
-
- ReconScanning (node.86eb21): 1
- 2026-09-12
-
- ReconScanning (node.86eb21): 1
- 2026-09-09
-
- ReconScanning (node.86eb21): 1
- 2026-09-06
-
- ReconScanning (node.86eb21): 1
- 2026-09-05
-
- ReconScanning (node.86eb21): 1
- 2026-08-22
-
- ReconScanning (node.86eb21): 1
- 2026-08-21
-
- ReconScanning (node.86eb21): 1
- 2026-08-07
-
- ReconScanning (node.86eb21): 1
- 2026-08-04
-
- ReconScanning (node.86eb21): 1
- 2026-08-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-29
-
- ReconScanning (node.86eb21): 1
- 2026-07-21
-
- ReconScanning (node.86eb21): 1
- 2026-07-20
-
- ReconScanning (node.86eb21): 1
- 2026-07-19
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-07-17
- Number of reports: 28
- Distinct targets: 4
- 2026-07-18
- Number of reports: 28
- Distinct targets: 4
- 2026-07-25
- Number of reports: 24
- Distinct targets: 4
- 2026-07-26
- Number of reports: 120
- Distinct targets: 16
- 2026-07-27
- Number of reports: 120
- Distinct targets: 16
- 2026-07-28
- Number of reports: 24
- Distinct targets: 4
- 2026-07-29
- Number of reports: 24
- Distinct targets: 4
- 2026-08-04
- Number of reports: 76
- Distinct targets: 15
- 2026-08-05
- Number of reports: 44
- Distinct targets: 6
- 2026-08-12
- Number of reports: 116
- Distinct targets: 16
- 2026-08-17
- Number of reports: 16
- Distinct targets: 4
- 2026-08-18
- Number of reports: 72
- Distinct targets: 12
- 2026-08-19
- Number of reports: 72
- Distinct targets: 12
- 2026-08-26
- Number of reports: 120
- Distinct targets: 19
- 2026-09-01
- Number of reports: 132
- Distinct targets: 19
- 2026-09-02
- Number of reports: 132
- Distinct targets: 19
- 2026-09-08
- Number of reports: 12
- Distinct targets: 3
- 2026-09-09
- Number of reports: 112
- Distinct targets: 16
- 2026-09-14
- Number of reports: 20
- Distinct targets: 3
- 2026-09-15
- Number of reports: 20
- Distinct targets: 3
- 2026-09-17
- Number of reports: 12
- Distinct targets: 3
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 45 | src | scan |
- Origin AS
- AS395092 - SHOCK-1
- BGP Prefix
- 193.17.56.0/22
- geo
- France, Paris
- 🕑 Europe/Paris
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 193.17.56.0 - 193.17.59.255
- last_activity
- 2026-09-20 03:08:48
- last_warden_event
- 2026-09-20 03:08:48
- rep
- 0.014493641074596275
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 13, 15, 22, 25, 26, 43, 49, 66, 70, 80, 81, 82, 83, 84, 93, 97, 100, 102, 104, 106, 113, 119, 122, 175, 177, 189, 195, 221, 234, 285, 311, 314, 389, 427, 443, 444, 445, 450, 453, 461, 465, 503, 513, 522, 534, 548, 554, 587, 593, 636, 666, 685, 743, 771, 789, 832, 873, 887, 902, 943, 992, 993, 995, 1024, 1025, 1029, 1099, 1111, 1153, 1177, 1200, 1207, 1224, 1234, 1244, 1249, 1283, 1290, 1311, 1337, 1387, 1400, 1414, 1450, 1471, 1500, 1515, 1521, 1577, 1599, 1604, 1605, 1650, 1720, 1800, 1801, 1883, 1911, 1925, 1926, 1935, 1950, 1959, 1962, 1965, 1978, 1980, 1981, 1985, 2000, 2008, 2010, 2016, 2030, 2052, 2064, 2067, 2072, 2081, 2082, 2083, 2086, 2095, 2096, 2100, 2130, 2154, 2181, 2196, 2200, 2209, 2211, 2222, 2224, 2233, 2320, 2345, 2375, 2376, 2379, 2404, 2455, 2480, 2506, 2551, 2556, 2557, 2560, 2563, 2567, 2602, 2628, 2850, 2995, 3000, 3001, 3002, 3050, 3060, 3065, 3074, 3076, 3086, 3100, 3101, 3113, 3128, 3138, 3140, 3142, 3144, 3171, 3177, 3179, 3187, 3190, 3192, 3193, 3199, 3200, 3268, 3269, 3299, 3301, 3310, 3333, 3388, 3460, 3521, 3522, 3541, 3542, 3549, 3551, 3555, 3561, 3689, 3749, 3780, 3790, 3791, 3951, 3954, 4000, 4022, 4023, 4063, 4064, 4106, 4150, 4157, 4159, 4165, 4200, 4242, 4282, 4321, 4369, 4430, 4434, 4435, 4440, 4443, 4444, 4445, 4449, 4488, 4499, 4502, 4506, 4510, 4524, 4528, 4530, 4545, 4664, 4700, 4747, 4782, 4786, 4840, 4848, 4899, 4911, 4949, 4999, 5000, 5006, 5009, 5010, 5011, 5053, 5070, 5089, 5135, 5140, 5150, 5180, 5190, 5201, 5222, 5230, 5244, 5249, 5250, 5251, 5256, 5257, 5264, 5269, 5270, 5277, 5279, 5431, 5432, 5435, 5494, 5543, 5555, 5556, 5557, 5569, 5601, 5672, 5680, 5801, 5858, 5900, 5901, 5904, 5916, 5917, 5938, 5984, 5985, 5986, 5998, 6004, 6006, 6264, 6379, 6405, 6432, 6443, 6464, 6503, 6543, 6550, 6580, 6633, 6653, 6664, 6667, 6697, 6699, 6994, 7000, 7001, 7005, 7021, 7025, 7071, 7087, 7170, 7171, 7325, 7401, 7415, 7433, 7434, 7474, 7537, 7547, 7548, 7657, 7676, 7687, 7773, 7775, 7777, 7980, 7989, 7998, 8000, 8001, 8003, 8008, 8009, 8010, 8023, 8026, 8030, 8033, 8034, 8041, 8053, 8058, 8060, 8064, 8068, 8069, 8078, 8081, 8085, 8086, 8087, 8089, 8090, 8098, 8099, 8100, 8101, 8102, 8103, 8108, 8112, 8119, 8120, 8123, 8126, 8132, 8135, 8139, 8140, 8142, 8156, 8166, 8170, 8180, 8181, 8188, 8200, 8222, 8249, 8251, 8282, 8284, 8333, 8334, 8381, 8382, 8401, 8402, 8413, 8414, 8415, 8420, 8423, 8425, 8427, 8428, 8440, 8443, 8453, 8459, 8470, 8484, 8496, 8510, 8518, 8524, 8540, 8545, 8550, 8564, 8570, 8575, 8577, 8595, 8688, 8700, 8702, 8728, 8782, 8800, 8819, 8827, 8828, 8834, 8845, 8846, 8855, 8864, 8867, 8874, 8879, 8880, 8883, 8885, 8888, 8889, 8916, 9000, 9001, 9002, 9009, 9012, 9017, 9020, 9022, 9023, 9024, 9036, 9039, 9041, 9042, 9051, 9060, 9062, 9063, 9064, 9065, 9076, 9079, 9080, 9081, 9090, 9092, 9095, 9100, 9102, 9103, 9107, 9113, 9117, 9119, 9134, 9137, 9138, 9139, 9142, 9144, 9151, 9154, 9155, 9159, 9160, 9163, 9164, 9165, 9171, 9173, 9176, 9177, 9183, 9184, 9189, 9191, 9193, 9200, 9207, 9209, 9217, 9226, 9230, 9251, 9252, 9295, 9304, 9305, 9306, 9345, 9398, 9418, 9447, 9501, 9530, 9595, 9600, 9633, 9682, 9758, 9761, 9800, 9803, 9804, 9810, 9811, 9869, 9900, 9919, 9944, 9981, 9998, 9999
- Tags: honeypot
- CPEs: cpe:/a:openbsd:openssh:9.6p1, cpe:/o:canonical:ubuntu_linux
- ts_added
- 2026-07-18 05:04:48.631000
- ts_last_update
- 2026-09-20 05:07:44.551000
Warden event timeline
DShield event timeline

