IP address


.006185.254.74.78s20136.vps.hosting
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
25 src scan

Warden events (19)
2026-07-29
ReconScanning (node.86eb21): 1
2026-07-21
ReconScanning (node.86eb21): 1
2026-07-20
ReconScanning (node.86eb21): 1
2026-07-19
ReconScanning (node.86eb21): 1
2026-07-16
ReconScanning (node.86eb21): 1
2026-07-03
ReconScanning (node.86eb21): 1
2026-07-01
ReconScanning (node.86eb21): 1
2026-06-27
ReconScanning (node.86eb21): 1
2026-06-24
ReconScanning (node.86eb21): 1
2026-06-17
ReconScanning (node.86eb21): 1
2026-06-15
ReconScanning (node.86eb21): 1
2026-06-14
ReconScanning (node.86eb21): 1
2026-06-13
ReconScanning (node.86eb21): 1
2026-06-08
ReconScanning (node.86eb21): 1
2026-05-22
ReconScanning (node.f90c6b): 3
2026-05-15
ReconScanning (node.86eb21): 1
2026-05-03
ReconScanning (node.86eb21): 1
Origin AS
AS3214 - XTOM
BGP Prefix
185.254.74.0/24
dshield
[]
geo
Germany, Düsseldorf
🕑 Europe/Berlin
hostname
s20136.vps.hosting
Address block ('inetnum' or 'NetRange' in whois database)
185.254.72.0 - 185.254.75.255
last_activity
2026-07-29 02:16:19
last_warden_event
2026-07-29 02:16:19
rep
0.005604052189454922
reserved_range
0
Shodan's InternetDB
Open ports: 11, 17, 19, 21, 24, 33, 43, 80, 84, 111, 311, 427, 443, 448, 465, 587, 636, 789, 902, 992, 993, 995, 1025, 1026, 1153, 1414, 1444, 1451, 1588, 2020, 2051, 2083, 2086, 2087, 2154, 2181, 2375, 2376, 2404, 2598, 2601, 2985, 3066, 3086, 3093, 3104, 3108, 3132, 3221, 3295, 3301, 3337, 3388, 3460, 3554, 3780, 4040, 4063, 4200, 4321, 4433, 4506, 4550, 4786, 5006, 5007, 5022, 5049, 5260, 5275, 5357, 5546, 5601, 5672, 5901, 5938, 5984, 6001, 6005, 6102, 6379, 6440, 6443, 6541, 6633, 6664, 6697, 7001, 7021, 7173, 7272, 7434, 7443, 7444, 7473, 8001, 8008, 8009, 8013, 8060, 8063, 8085, 8095, 8098, 8187, 8196, 8200, 8250, 8291, 8403, 8404, 8418, 8427, 8443, 8452, 8502, 8506, 8561, 8598, 8622, 8649, 8728, 8800, 8813, 8834, 8851, 8857, 9002, 9007, 9022, 9095, 9100, 9113, 9130, 9186, 9300, 9305, 9312, 9313, 9600, 9761, 9773, 9779, 9800, 9810, 9888, 9898, 9923, 9926, 9944
Tags: honeypot
CPEs:
ts_added
2025-02-28 05:06:51.331000
ts_last_update
2026-07-29 05:11:26.139000

Warden event timeline

DShield event timeline