IP address

Threat categories

TL	Role	Category	Details
38	src	scan

---

Warden events (21)

2026-05-22

ReconScanning (node.f90c6b): 2

2026-05-15

ReconScanning (node.86eb21): 1

2026-05-03

ReconScanning (node.86eb21): 1

2026-04-24

ReconScanning (node.86eb21): 1

2026-04-21

ReconScanning (node.86eb21): 1

2026-04-19

ReconScanning (node.86eb21): 1

2026-04-18

ReconScanning (node.86eb21): 1

2026-04-10

ReconScanning (node.86eb21): 1

2026-04-08

ReconScanning (node.f90c6b): 3

2026-04-05

ReconScanning (node.86eb21): 1

2026-04-03

ReconScanning (node.f90c6b): 3

ReconScanning (node.86eb21): 1

2026-03-25

ReconScanning (node.86eb21): 1

2026-03-18

ReconScanning (node.f90c6b): 3

Origin AS

AS6233 - XTOM

BGP Prefix

146.19.116.0/24

geo

United States, San Jose

🕑 America/Los_Angeles

hostname

s20140.vps.hosting

Address block ('inetnum' or 'NetRange' in whois database)

146.19.116.0 - 146.19.116.255

last_activity

2026-05-22 02:12:39

last_warden_event

2026-05-22 02:12:39

rep

0.000722187851234013

reserved_range

0

Shodan's InternetDB

Open ports: 17, 19, 37, 43, 49, 80, 81, 83, 92, 96, 104, 175, 177, 179, 180, 192, 195, 221, 347, 389, 445, 447, 465, 503, 508, 548, 587, 666, 782, 902, 995, 1024, 1099, 1110, 1200, 1414, 1433, 1456, 1471, 1604, 1605, 1800, 1801, 1833, 1911, 1935, 1947, 1958, 1962, 1965, 1988, 1999, 2000, 2039, 2056, 2067, 2069, 2072, 2082, 2083, 2086, 2087, 2103, 2181, 2196, 2200, 2223, 2225, 2345, 2379, 2404, 2455, 2701, 3008, 3009, 3018, 3050, 3058, 3072, 3074, 3090, 3100, 3113, 3134, 3138, 3142, 3151, 3153, 3158, 3169, 3179, 3221, 3260, 3268, 3269, 3299, 3301, 3306, 3307, 3388, 3403, 3460, 3500, 3551, 3566, 3689, 3780, 3790, 3793, 3842, 4040, 4063, 4064, 4072, 4100, 4117, 4157, 4172, 4282, 4300, 4343, 4344, 4367, 4369, 4430, 4444, 4445, 4506, 4545, 4567, 4602, 4664, 4786, 5010, 5025, 5201, 5223, 5224, 5232, 5246, 5252, 5257, 5275, 5279, 5500, 5544, 5560, 5564, 5569, 5608, 5614, 5640, 5673, 5696, 5801, 5858, 5901, 5916, 5918, 5984, 5987, 5991, 6001, 6007, 6020, 6379, 6500, 6511, 6580, 6653, 6655, 6666, 6667, 6697, 6700, 6703, 7002, 7007, 7050, 7071, 7078, 7085, 7090, 7171, 7283, 7348, 7349, 7415, 7434, 7443, 7445, 7474, 7547, 7548, 7777, 7779, 7887, 7989, 8000, 8005, 8007, 8008, 8009, 8021, 8027, 8042, 8053, 8057, 8060, 8069, 8081, 8087, 8089, 8107, 8119, 8120, 8126, 8128, 8138, 8152, 8167, 8169, 8175, 8178, 8183, 8185, 8200, 8239, 8243, 8280, 8282, 8284, 8381, 8415, 8424, 8443, 8450, 8540, 8578, 8584, 8587, 8594, 8649, 8680, 8723, 8728, 8764, 8800, 8803, 8827, 8834, 8874, 8875, 8883, 8889, 8891, 8908, 8910, 8916, 8989, 9000, 9009, 9011, 9019, 9026, 9042, 9051, 9052, 9067, 9085, 9100, 9106, 9111, 9152, 9161, 9162, 9166, 9196, 9198, 9200, 9220, 9257, 9306, 9387, 9454, 9488, 9530, 9595, 9600, 9754, 9779, 9800, 9885, 9898, 9899, 9943, 9944, 9993

Tags: honeypot

CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1

ts_added

2026-03-18 02:28:05.576000

ts_last_update

2026-06-03 02:28:10.612000

Warden event timeline

DShield event timeline