IP address

Warden events (26)

2026-02-06

ReconScanning (node.86eb21): 1

2026-01-31

ReconScanning (node.86eb21): 2

2026-01-30

ReconScanning (node.86eb21): 2

2026-01-21

ReconScanning (node.86eb21): 2

2026-01-19

ReconScanning (node.86eb21): 2

2026-01-18

ReconScanning (node.86eb21): 1

2026-01-15

ReconScanning (node.86eb21): 2

2026-01-13

ReconScanning (node.86eb21): 2

2026-01-11

ReconScanning (node.86eb21): 1

2026-01-09

ReconScanning (node.86eb21): 1

2025-12-25

ReconScanning (node.86eb21): 1

2025-12-24

ReconScanning (node.86eb21): 1

2025-12-13

ReconScanning (node.86eb21): 1

2025-12-09

ReconScanning (node.86eb21): 1

2025-12-08

ReconScanning (node.86eb21): 1

2025-12-07

ReconScanning (node.86eb21): 1

2025-12-02

ReconScanning (node.86eb21): 2

2025-11-09

ReconScanning (node.86eb21): 1

2025-11-08

ReconScanning (node.86eb21): 1

Origin AS

AS3214 - XTOM

BGP Prefix

185.254.74.0/24

dshield

[]

geo

Germany, Düsseldorf

🕑 Europe/Berlin

hostname

s20136.vps.hosting

Address block ('inetnum' or 'NetRange' in whois database)

185.254.72.0 - 185.254.75.255

last_activity

2026-02-06 02:07:42

last_warden_event

2026-02-06 02:07:42

rep

0.0869047619047619

reserved_range

0

Shodan's InternetDB

Open ports: 11, 13, 17, 21, 37, 43, 49, 51, 66, 79, 80, 83, 84, 102, 122, 135, 143, 175, 179, 221, 311, 314, 389, 427, 442, 444, 446, 452, 465, 480, 502, 503, 548, 554, 587, 593, 771, 789, 880, 990, 992, 993, 995, 1024, 1025, 1080, 1153, 1177, 1200, 1234, 1311, 1337, 1344, 1387, 1414, 1450, 1456, 1457, 1459, 1471, 1521, 1723, 1801, 1911, 1925, 1926, 1947, 1953, 1978, 1981, 2000, 2001, 2008, 2012, 2067, 2068, 2081, 2083, 2086, 2087, 2107, 2109, 2121, 2133, 2150, 2154, 2181, 2222, 2375, 2376, 2379, 2404, 2455, 2480, 2628, 2762, 3000, 3001, 3015, 3050, 3064, 3085, 3088, 3092, 3104, 3119, 3129, 3137, 3140, 3147, 3175, 3178, 3196, 3211, 3260, 3268, 3299, 3301, 3306, 3310, 3333, 3388, 3510, 3542, 3556, 3558, 3559, 3749, 3790, 4000, 4040, 4043, 4064, 4150, 4157, 4282, 4321, 4343, 4433, 4434, 4444, 4500, 4506, 4567, 4664, 4747, 4786, 4840, 4848, 4899, 4911, 4949, 4999, 5000, 5001, 5006, 5007, 5010, 5025, 5053, 5080, 5135, 5190, 5201, 5222, 5226, 5230, 5233, 5237, 5239, 5245, 5250, 5260, 5262, 5265, 5266, 5268, 5269, 5273, 5357, 5432, 5435, 5456, 5503, 5555, 5560, 5800, 5804, 5822, 5858, 5912, 5938, 5984, 5985, 5992, 5998, 6005, 6061, 6070, 6080, 6379, 6433, 6443, 6510, 6514, 6544, 6603, 6622, 6633, 6653, 6661, 6664, 6667, 6668, 6697, 6755, 7001, 7005, 7071, 7081, 7171, 7348, 7415, 7443, 7474, 7510, 7548, 7634, 7657, 7771, 7777, 7779, 7799, 7979, 7989, 8001, 8002, 8009, 8010, 8025, 8054, 8063, 8072, 8075, 8079, 8081, 8083, 8089, 8090, 8096, 8097, 8100, 8112, 8113, 8114, 8117, 8126, 8139, 8140, 8146, 8171, 8175, 8176, 8180, 8181, 8183, 8188, 8197, 8241, 8285, 8333, 8381, 8385, 8388, 8406, 8410, 8418, 8433, 8443, 8456, 8462, 8466, 8467, 8501, 8545, 8551, 8553, 8554, 8563, 8565, 8569, 8574, 8590, 8666, 8702, 8728, 8800, 8817, 8840, 8847, 8855, 8880, 8882, 8887, 8889, 8969, 9000, 9003, 9007, 9009, 9022, 9038, 9051, 9062, 9075, 9081, 9090, 9092, 9095, 9100, 9107, 9133, 9135, 9151, 9160, 9163, 9180, 9191, 9200, 9201, 9215, 9220, 9222, 9230, 9253, 9295, 9306, 9333, 9443, 9530, 9600, 9633, 9704, 9800, 9803, 9869, 9876, 9888, 9898, 9922, 9943, 9944, 9981, 9999

Tags: honeypot

CPEs: –

ts_added

2025-02-28 05:06:51.331000

ts_last_update

2026-02-06 05:07:03.534000

Warden event timeline

DShield event timeline