IP address


.004192.109.228.29s20135.vps.hosting
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
25 src scan

Warden events (25)
2026-06-24
ReconScanning (node.86eb21): 1
2026-06-17
ReconScanning (node.86eb21): 1
2026-06-15
ReconScanning (node.86eb21): 1
2026-06-14
ReconScanning (node.86eb21): 1
2026-06-13
ReconScanning (node.86eb21): 1
2026-06-08
ReconScanning (node.86eb21): 1
2026-05-22
ReconScanning (node.f90c6b): 3
2026-05-15
ReconScanning (node.86eb21): 1
2026-05-03
ReconScanning (node.86eb21): 1
2026-04-24
ReconScanning (node.86eb21): 1
2026-04-21
ReconScanning (node.86eb21): 1
2026-04-19
ReconScanning (node.86eb21): 1
2026-04-18
ReconScanning (node.86eb21): 1
2026-04-10
ReconScanning (node.86eb21): 2
2026-04-08
ReconScanning (node.f90c6b): 3
2026-04-05
ReconScanning (node.86eb21): 1
2026-04-03
ReconScanning (node.f90c6b): 3
ReconScanning (node.86eb21): 1
Origin AS
AS3214 - XTOM
BGP Prefix
192.109.228.0/24
dshield
[]
geo
Netherlands
🕑 Europe/Amsterdam
hostname
s20135.vps.hosting
Address block ('inetnum' or 'NetRange' in whois database)
192.109.228.0 - 192.109.229.255
last_activity
2026-06-24 02:23:59
last_warden_event
2026-06-24 02:23:59
rep
0.004296440011915426
reserved_range
0
Shodan's InternetDB
Open ports: 17, 26, 70, 80, 87, 102, 135, 139, 179, 221, 465, 486, 503, 515, 587, 789, 873, 1153, 1234, 1337, 1577, 1660, 1801, 1925, 1965, 2021, 2087, 2121, 2211, 2250, 2353, 2375, 2404, 2628, 2762, 3001, 3030, 3054, 3063, 3139, 3154, 3161, 3192, 3260, 3310, 3333, 3388, 3403, 3410, 3551, 3560, 3562, 3749, 3808, 3918, 3951, 4022, 4282, 4444, 4488, 4500, 4786, 4840, 4911, 4949, 4993, 5010, 5025, 5241, 5250, 5277, 5435, 5443, 5542, 5592, 5601, 5609, 5800, 5918, 5985, 5986, 6001, 6004, 6262, 6348, 6513, 6605, 6606, 6650, 6667, 6697, 7000, 7071, 7100, 7434, 7547, 7634, 7778, 8008, 8009, 8010, 8086, 8161, 8181, 8183, 8193, 8200, 8230, 8284, 8333, 8343, 8513, 8573, 8575, 8607, 8641, 8791, 8807, 8822, 8855, 8888, 8943, 9002, 9079, 9090, 9110, 9112, 9124, 9139, 9147, 9160, 9191, 9213, 9226, 9236, 9291, 9306, 9376, 9811, 9885, 9928, 9955, 9981, 9999
Tags: honeypot
CPEs:
ts_added
2025-02-28 05:06:53.248000
ts_last_update
2026-06-26 05:08:41.512000

Warden event timeline

DShield event timeline