IP address
Search at other sites: 
.0055.22.216.1475-22-216-147.es-mad1.upcloud.host
Shodan(more info)
Passive DNS
- Warden events (28)
- 2026-10-30
-
- ReconScanning (node.86eb21): 1
- 2026-10-29
-
- ReconScanning (node.86eb21): 1
- 2026-10-24
-
- ReconScanning (node.86eb21): 1
- 2026-10-23
-
- ReconScanning (node.86eb21): 1
- 2026-10-21
-
- ReconScanning (node.86eb21): 1
- 2026-10-18
-
- ReconScanning (node.86eb21): 1
- 2026-10-14
-
- ReconScanning (node.86eb21): 1
- 2026-10-13
-
- ReconScanning (node.86eb21): 1
- 2026-10-12
-
- ReconScanning (node.86eb21): 1
- 2026-10-10
-
- ReconScanning (node.86eb21): 1
- 2026-10-07
-
- ReconScanning (node.86eb21): 1
- 2026-09-27
-
- ReconScanning (node.86eb21): 1
- 2026-09-23
-
- ReconScanning (node.86eb21): 2
- 2026-09-22
-
- ReconScanning (node.86eb21): 1
- 2026-09-20
-
- ReconScanning (node.f90c6b): 3
- ReconScanning (node.86eb21): 1
- 2026-09-19
-
- ReconScanning (node.86eb21): 1
- 2026-09-15
-
- ReconScanning (node.86eb21): 1
- 2026-09-12
-
- ReconScanning (node.86eb21): 1
- 2026-09-09
-
- ReconScanning (node.86eb21): 1
- 2026-09-06
-
- ReconScanning (node.86eb21): 1
- 2026-09-05
-
- ReconScanning (node.86eb21): 1
- 2026-08-22
-
- ReconScanning (node.86eb21): 1
- 2026-08-21
-
- ReconScanning (node.86eb21): 1
- 2026-08-07
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-08-05
- Number of reports: 36
- Distinct targets: 6
- 2026-08-13
- Number of reports: 13
- Distinct targets: 4
- 2026-08-18
- Number of reports: 28
- Distinct targets: 5
- 2026-08-19
- Number of reports: 28
- Distinct targets: 5
- 2026-08-26
- Number of reports: 30
- Distinct targets: 7
- 2026-09-01
- Number of reports: 48
- Distinct targets: 8
- 2026-09-02
- Number of reports: 48
- Distinct targets: 8
- 2026-09-09
- Number of reports: 48
- Distinct targets: 7
- 2026-09-22
- Number of reports: 29
- Distinct targets: 5
- 2026-09-30
- Number of reports: 40
- Distinct targets: 6
- 2026-10-07
- Number of reports: 36
- Distinct targets: 5
- 2026-10-14
- Number of reports: 36
- Distinct targets: 5
- 2026-10-21
- Number of reports: 24
- Distinct targets: 4
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 27 | src | scan |
- Origin AS
- AS202053 - UPCLOUD
- BGP Prefix
- 5.22.216.0/22
- geo
- Spain, Madrid
- 🕑 Europe/Madrid
- hostname
- 5-22-216-147.es-mad1.upcloud.host
- hostname_class
- ['ip_in_hostname']
- Address block ('inetnum' or 'NetRange' in whois database)
- 5.22.208.0 - 5.22.223.255
- last_activity
- 2026-10-30 01:56:39
- last_warden_event
- 2026-10-30 01:56:39
- rep
- 0.005044720132485914
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 13, 17, 21, 22, 26, 43, 49, 70, 80, 81, 82, 83, 84, 88, 91, 110, 113, 119, 122, 131, 175, 179, 195, 199, 221, 243, 264, 311, 347, 443, 444, 445, 448, 449, 461, 465, 488, 491, 503, 513, 541, 554, 559, 587, 593, 636, 646, 789, 830, 832, 873, 885, 888, 902, 990, 992, 993, 995, 1012, 1025, 1076, 1080, 1103, 1153, 1167, 1177, 1181, 1200, 1234, 1244, 1249, 1250, 1292, 1311, 1337, 1387, 1400, 1414, 1433, 1443, 1457, 1460, 1471, 1500, 1521, 1599, 1604, 1659, 1723, 1801, 1883, 1926, 1935, 1956, 1958, 1962, 1965, 1969, 1974, 1979, 1989, 1990, 2000, 2006, 2008, 2010, 2053, 2081, 2085, 2086, 2090, 2103, 2109, 2181, 2210, 2220, 2222, 2232, 2320, 2375, 2376, 2379, 2404, 2423, 2455, 2561, 2566, 2567, 2569, 2626, 3000, 3001, 3004, 3007, 3016, 3042, 3050, 3052, 3053, 3057, 3078, 3079, 3080, 3082, 3087, 3101, 3106, 3108, 3113, 3117, 3119, 3122, 3124, 3126, 3128, 3137, 3141, 3152, 3159, 3160, 3162, 3167, 3168, 3179, 3190, 3192, 3193, 3196, 3197, 3210, 3211, 3221, 3268, 3301, 3306, 3307, 3333, 3337, 3341, 3388, 3389, 3404, 3406, 3407, 3412, 3531, 3541, 3542, 3551, 3557, 3637, 3689, 3749, 3792, 4022, 4023, 4040, 4063, 4064, 4085, 4101, 4104, 4117, 4150, 4157, 4175, 4242, 4282, 4343, 4402, 4433, 4443, 4444, 4445, 4459, 4500, 4543, 4620, 4782, 4786, 4840, 4899, 4949, 5001, 5005, 5007, 5009, 5010, 5025, 5070, 5080, 5083, 5120, 5123, 5222, 5223, 5225, 5227, 5249, 5251, 5257, 5262, 5266, 5275, 5280, 5357, 5435, 5454, 5456, 5494, 5517, 5543, 5558, 5560, 5601, 5603, 5800, 5858, 5900, 5904, 5905, 5912, 5938, 5985, 5998, 6000, 6001, 6080, 6134, 6379, 6400, 6443, 6590, 6633, 6653, 6664, 6666, 6667, 6668, 7000, 7001, 7006, 7087, 7170, 7434, 7443, 7473, 7493, 7535, 7634, 7657, 7676, 7778, 7779, 7799, 7900, 7989, 8000, 8001, 8005, 8007, 8008, 8009, 8010, 8014, 8017, 8028, 8032, 8034, 8039, 8044, 8061, 8062, 8069, 8075, 8083, 8084, 8085, 8087, 8092, 8098, 8099, 8104, 8110, 8112, 8115, 8121, 8123, 8126, 8133, 8141, 8144, 8145, 8152, 8153, 8161, 8162, 8170, 8174, 8181, 8182, 8186, 8188, 8190, 8200, 8291, 8316, 8318, 8333, 8334, 8413, 8415, 8427, 8428, 8430, 8441, 8450, 8459, 8462, 8465, 8472, 8481, 8493, 8494, 8506, 8519, 8523, 8529, 8536, 8543, 8545, 8550, 8568, 8575, 8589, 8590, 8595, 8630, 8640, 8649, 8663, 8705, 8706, 8707, 8728, 8731, 8782, 8800, 8818, 8820, 8822, 8832, 8833, 8838, 8840, 8841, 8849, 8850, 8857, 8860, 8862, 8863, 8870, 8872, 8873, 8880, 8883, 8890, 8908, 8980, 8990, 8993, 9000, 9001, 9002, 9003, 9009, 9011, 9012, 9020, 9027, 9032, 9033, 9042, 9049, 9051, 9058, 9070, 9080, 9090, 9091, 9092, 9093, 9095, 9100, 9101, 9109, 9111, 9118, 9126, 9131, 9139, 9140, 9151, 9155, 9156, 9160, 9174, 9175, 9177, 9184, 9191, 9200, 9201, 9206, 9208, 9209, 9210, 9216, 9218, 9226, 9241, 9249, 9251, 9257, 9280, 9295, 9299, 9300, 9387, 9398, 9400, 9418, 9443, 9445, 9458, 9500, 9515, 9532, 9600, 9606, 9611, 9682, 9710, 9754, 9761, 9800, 9861, 9898, 9943, 9944, 9967, 9977, 9981, 9997, 9998, 9999
- Tags: honeypot
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1
- ts_added
- 2026-06-14 03:41:52.459000
- ts_last_update
- 2026-11-03 03:42:00.285000
Warden event timeline
DShield event timeline